/* Header autogenerated by Brandon Falk's PDB Dumper * * Invocation: C:\projects\pdbdump_2\pdbdump.exe L:\symbolarchive\win8_spB_x64\combase.pdb\BD6EC10AEDB94DFA99A8D9EBF4081A262\combase.pdb */ enum tagTYPEFLAGS { TYPEFLAG_FAPPOBJECT = 1, TYPEFLAG_FCANCREATE = 2, TYPEFLAG_FLICENSED = 4, TYPEFLAG_FPREDECLID = 8, TYPEFLAG_FHIDDEN = 16, TYPEFLAG_FCONTROL = 32, TYPEFLAG_FDUAL = 64, TYPEFLAG_FNONEXTENSIBLE = 128, TYPEFLAG_FOLEAUTOMATION = 256, TYPEFLAG_FRESTRICTED = 512, TYPEFLAG_FAGGREGATABLE = 1024, TYPEFLAG_FREPLACEABLE = 2048, TYPEFLAG_FDISPATCHABLE = 4096, TYPEFLAG_FREVERSEBIND = 8192, TYPEFLAG_FPROXY = 16384 }; enum _PROC_THREAD_ATTRIBUTE_NUM { ProcThreadAttributeParentProcess = 0, ProcThreadAttributeExtendedFlags = 1, ProcThreadAttributeHandleList = 2, ProcThreadAttributeGroupAffinity = 3, ProcThreadAttributePreferredNode = 4, ProcThreadAttributeIdealProcessor = 5, ProcThreadAttributeUmsThread = 6, ProcThreadAttributeMitigationPolicy = 7, ProcThreadAttributePackageFullName = 8, ProcThreadAttributeSecurityCapabilities = 9, ProcThreadAttributeConsoleReference = 10, ProcThreadAttributeMax = 11 }; enum _SYSDBG_COMMAND { SysDbgQueryModuleInformation = 0, SysDbgQueryTraceInformation = 1, SysDbgSetTracepoint = 2, SysDbgSetSpecialCall = 3, SysDbgClearSpecialCalls = 4, SysDbgQuerySpecialCalls = 5, SysDbgBreakPoint = 6, SysDbgQueryVersion = 7, SysDbgReadVirtual = 8, SysDbgWriteVirtual = 9, SysDbgReadPhysical = 10, SysDbgWritePhysical = 11, SysDbgReadControlSpace = 12, SysDbgWriteControlSpace = 13, SysDbgReadIoSpace = 14, SysDbgWriteIoSpace = 15, SysDbgReadMsr = 16, SysDbgWriteMsr = 17, SysDbgReadBusData = 18, SysDbgWriteBusData = 19, SysDbgCheckLowMemory = 20, SysDbgEnableKernelDebugger = 21, SysDbgDisableKernelDebugger = 22, SysDbgGetAutoKdEnable = 23, SysDbgSetAutoKdEnable = 24, SysDbgGetPrintBufferSize = 25, SysDbgSetPrintBufferSize = 26, SysDbgGetKdUmExceptionEnable = 27, SysDbgSetKdUmExceptionEnable = 28, SysDbgGetTriageDump = 29, SysDbgGetKdBlockEnable = 30, SysDbgSetKdBlockEnable = 31, SysDbgRegisterForUmBreakInfo = 32, SysDbgGetUmBreakPid = 33, SysDbgClearUmBreakPid = 34, SysDbgGetUmAttachPid = 35, SysDbgClearUmAttachPid = 36 }; enum POWER_INFORMATION_LEVEL { SystemPowerPolicyAc = 0, SystemPowerPolicyDc = 1, VerifySystemPolicyAc = 2, VerifySystemPolicyDc = 3, SystemPowerCapabilities = 4, SystemBatteryState = 5, SystemPowerStateHandler = 6, ProcessorStateHandler = 7, SystemPowerPolicyCurrent = 8, AdministratorPowerPolicy = 9, SystemReserveHiberFile = 10, ProcessorInformation = 11, SystemPowerInformation = 12, ProcessorStateHandler2 = 13, LastWakeTime = 14, LastSleepTime = 15, SystemExecutionState = 16, SystemPowerStateNotifyHandler = 17, ProcessorPowerPolicyAc = 18, ProcessorPowerPolicyDc = 19, VerifyProcessorPowerPolicyAc = 20, VerifyProcessorPowerPolicyDc = 21, ProcessorPowerPolicyCurrent = 22, SystemPowerStateLogging = 23, SystemPowerLoggingEntry = 24, SetPowerSettingValue = 25, NotifyUserPowerSetting = 26, PowerInformationLevelUnused0 = 27, SystemMonitorHiberBootPowerOff = 28, SystemVideoState = 29, TraceApplicationPowerMessage = 30, TraceApplicationPowerMessageEnd = 31, ProcessorPerfStates = 32, ProcessorIdleStates = 33, ProcessorCap = 34, SystemWakeSource = 35, SystemHiberFileInformation = 36, TraceServicePowerMessage = 37, ProcessorLoad = 38, PowerShutdownNotification = 39, MonitorCapabilities = 40, SessionPowerInit = 41, SessionDisplayState = 42, PowerRequestCreate = 43, PowerRequestAction = 44, GetPowerRequestList = 45, ProcessorInformationEx = 46, NotifyUserModeLegacyPowerEvent = 47, GroupPark = 48, ProcessorIdleDomains = 49, WakeTimerList = 50, SystemHiberFileSize = 51, ProcessorIdleStatesHv = 52, ProcessorPerfStatesHv = 53, ProcessorPerfCapHv = 54, ProcessorSetIdle = 55, LogicalProcessorIdling = 56, UserPresence = 57, PowerSettingNotificationName = 58, GetPowerSettingValue = 59, IdleResiliency = 60, SessionRITState = 61, SessionConnectNotification = 62, SessionPowerCleanup = 63, SessionLockState = 64, SystemHiberbootState = 65, PlatformInformation = 66, PdcInvocation = 67, MonitorInvocation = 68, FirmwareTableInformationRegistered = 69, SetShutdownSelectedTime = 70, PowerInformationLevelMaximum = 71 }; enum _TOKEN_SECURITY_ATTRIBUTE_OPERATION { TOKEN_SECURITY_ATTRIBUTE_OPERATION_NONE = 0, TOKEN_SECURITY_ATTRIBUTE_OPERATION_REPLACE_ALL = 1, TOKEN_SECURITY_ATTRIBUTE_OPERATION_ADD = 2, TOKEN_SECURITY_ATTRIBUTE_OPERATION_DELETE = 3, TOKEN_SECURITY_ATTRIBUTE_OPERATION_REPLACE = 4 }; enum WELL_KNOWN_SID_TYPE { WinNullSid = 0, WinWorldSid = 1, WinLocalSid = 2, WinCreatorOwnerSid = 3, WinCreatorGroupSid = 4, WinCreatorOwnerServerSid = 5, WinCreatorGroupServerSid = 6, WinNtAuthoritySid = 7, WinDialupSid = 8, WinNetworkSid = 9, WinBatchSid = 10, WinInteractiveSid = 11, WinServiceSid = 12, WinAnonymousSid = 13, WinProxySid = 14, WinEnterpriseControllersSid = 15, WinSelfSid = 16, WinAuthenticatedUserSid = 17, WinRestrictedCodeSid = 18, WinTerminalServerSid = 19, WinRemoteLogonIdSid = 20, WinLogonIdsSid = 21, WinLocalSystemSid = 22, WinLocalServiceSid = 23, WinNetworkServiceSid = 24, WinBuiltinDomainSid = 25, WinBuiltinAdministratorsSid = 26, WinBuiltinUsersSid = 27, WinBuiltinGuestsSid = 28, WinBuiltinPowerUsersSid = 29, WinBuiltinAccountOperatorsSid = 30, WinBuiltinSystemOperatorsSid = 31, WinBuiltinPrintOperatorsSid = 32, WinBuiltinBackupOperatorsSid = 33, WinBuiltinReplicatorSid = 34, WinBuiltinPreWindows2000CompatibleAccessSid = 35, WinBuiltinRemoteDesktopUsersSid = 36, WinBuiltinNetworkConfigurationOperatorsSid = 37, WinAccountAdministratorSid = 38, WinAccountGuestSid = 39, WinAccountKrbtgtSid = 40, WinAccountDomainAdminsSid = 41, WinAccountDomainUsersSid = 42, WinAccountDomainGuestsSid = 43, WinAccountComputersSid = 44, WinAccountControllersSid = 45, WinAccountCertAdminsSid = 46, WinAccountSchemaAdminsSid = 47, WinAccountEnterpriseAdminsSid = 48, WinAccountPolicyAdminsSid = 49, WinAccountRasAndIasServersSid = 50, WinNTLMAuthenticationSid = 51, WinDigestAuthenticationSid = 52, WinSChannelAuthenticationSid = 53, WinThisOrganizationSid = 54, WinOtherOrganizationSid = 55, WinBuiltinIncomingForestTrustBuildersSid = 56, WinBuiltinPerfMonitoringUsersSid = 57, WinBuiltinPerfLoggingUsersSid = 58, WinBuiltinAuthorizationAccessSid = 59, WinBuiltinTerminalServerLicenseServersSid = 60, WinBuiltinDCOMUsersSid = 61, WinBuiltinIUsersSid = 62, WinIUserSid = 63, WinBuiltinCryptoOperatorsSid = 64, WinUntrustedLabelSid = 65, WinLowLabelSid = 66, WinMediumLabelSid = 67, WinHighLabelSid = 68, WinSystemLabelSid = 69, WinWriteRestrictedCodeSid = 70, WinCreatorOwnerRightsSid = 71, WinCacheablePrincipalsGroupSid = 72, WinNonCacheablePrincipalsGroupSid = 73, WinEnterpriseReadonlyControllersSid = 74, WinAccountReadonlyControllersSid = 75, WinBuiltinEventLogReadersGroup = 76, WinNewEnterpriseReadonlyControllersSid = 77, WinBuiltinCertSvcDComAccessGroup = 78, WinMediumPlusLabelSid = 79, WinLocalLogonSid = 80, WinConsoleLogonSid = 81, WinThisOrganizationCertificateSid = 82, WinApplicationPackageAuthoritySid = 83, WinBuiltinAnyPackageSid = 84, WinCapabilityInternetClientSid = 85, WinCapabilityInternetClientServerSid = 86, WinCapabilityPrivateNetworkClientServerSid = 87, WinCapabilityPicturesLibrarySid = 88, WinCapabilityVideosLibrarySid = 89, WinCapabilityMusicLibrarySid = 90, WinCapabilityDocumentsLibrarySid = 91, WinCapabilitySharedUserCertificatesSid = 92, WinCapabilityDefaultWindowsCredentialsSid = 93, WinCapabilityRemovableStorageSid = 94, WinBuiltinRDSRemoteAccessServersSid = 95, WinBuiltinRDSEndpointServersSid = 96, WinBuiltinRDSManagementServersSid = 97, WinUserModeDriversSid = 98, WinBuiltinHyperVAdminsSid = 99 }; enum VARENUM { VT_EMPTY = 0, VT_NULL = 1, VT_I2 = 2, VT_I4 = 3, VT_R4 = 4, VT_R8 = 5, VT_CY = 6, VT_DATE = 7, VT_BSTR = 8, VT_DISPATCH = 9, VT_ERROR = 10, VT_BOOL = 11, VT_VARIANT = 12, VT_UNKNOWN = 13, VT_DECIMAL = 14, VT_I1 = 16, VT_UI1 = 17, VT_UI2 = 18, VT_UI4 = 19, VT_I8 = 20, VT_UI8 = 21, VT_INT = 22, VT_UINT = 23, VT_VOID = 24, VT_HRESULT = 25, VT_PTR = 26, VT_SAFEARRAY = 27, VT_CARRAY = 28, VT_USERDEFINED = 29, VT_LPSTR = 30, VT_LPWSTR = 31, VT_RECORD = 36, VT_INT_PTR = 37, VT_UINT_PTR = 38, VT_FILETIME = 64, VT_BLOB = 65, VT_STREAM = 66, VT_STORAGE = 67, VT_STREAMED_OBJECT = 68, VT_STORED_OBJECT = 69, VT_BLOB_OBJECT = 70, VT_CF = 71, VT_CLSID = 72, VT_VERSIONED_STREAM = 73, VT_BSTR_BLOB = 4095, VT_VECTOR = 4096, VT_ARRAY = 8192, VT_BYREF = 16384, = 32770 }; enum POWER_ACTION { PowerActionNone = 0, PowerActionReserved = 1, PowerActionSleep = 2, PowerActionHibernate = 3, PowerActionShutdown = 4, PowerActionShutdownReset = 5, PowerActionShutdownOff = 6, PowerActionWarmEject = 7 }; enum tagMSHLFLAGS { MSHLFLAGS_NORMAL = 0, MSHLFLAGS_TABLESTRONG = 1, MSHLFLAGS_TABLEWEAK = 2, MSHLFLAGS_NOPING = 4, MSHLFLAGS_RESERVED1 = 8, MSHLFLAGS_RESERVED2 = 16, MSHLFLAGS_RESERVED3 = 32, MSHLFLAGS_RESERVED4 = 64 }; enum SHSTOCKICONID { SIID_DOCNOASSOC = 0, SIID_DOCASSOC = 1, SIID_APPLICATION = 2, SIID_FOLDER = 3, SIID_FOLDEROPEN = 4, SIID_DRIVE525 = 5, SIID_DRIVE35 = 6, SIID_DRIVEREMOVE = 7, SIID_DRIVEFIXED = 8, SIID_DRIVENET = 9, SIID_DRIVENETDISABLED = 10, SIID_DRIVECD = 11, SIID_DRIVERAM = 12, SIID_WORLD = 13, SIID_SERVER = 15, SIID_PRINTER = 16, SIID_MYNETWORK = 17, SIID_FIND = 22, SIID_HELP = 23, SIID_SHARE = 28, SIID_LINK = 29, SIID_SLOWFILE = 30, SIID_RECYCLER = 31, SIID_RECYCLERFULL = 32, SIID_MEDIACDAUDIO = 40, SIID_LOCK = 47, SIID_AUTOLIST = 49, SIID_PRINTERNET = 50, SIID_SERVERSHARE = 51, SIID_PRINTERFAX = 52, SIID_PRINTERFAXNET = 53, SIID_PRINTERFILE = 54, SIID_STACK = 55, SIID_MEDIASVCD = 56, SIID_STUFFEDFOLDER = 57, SIID_DRIVEUNKNOWN = 58, SIID_DRIVEDVD = 59, SIID_MEDIADVD = 60, SIID_MEDIADVDRAM = 61, SIID_MEDIADVDRW = 62, SIID_MEDIADVDR = 63, SIID_MEDIADVDROM = 64, SIID_MEDIACDAUDIOPLUS = 65, SIID_MEDIACDRW = 66, SIID_MEDIACDR = 67, SIID_MEDIACDBURN = 68, SIID_MEDIABLANKCD = 69, SIID_MEDIACDROM = 70, SIID_AUDIOFILES = 71, SIID_IMAGEFILES = 72, SIID_VIDEOFILES = 73, SIID_MIXEDFILES = 74, SIID_FOLDERBACK = 75, SIID_FOLDERFRONT = 76, SIID_SHIELD = 77, SIID_WARNING = 78, SIID_INFO = 79, SIID_ERROR = 80, SIID_KEY = 81, SIID_SOFTWARE = 82, SIID_RENAME = 83, SIID_DELETE = 84, SIID_MEDIAAUDIODVD = 85, SIID_MEDIAMOVIEDVD = 86, SIID_MEDIAENHANCEDCD = 87, SIID_MEDIAENHANCEDDVD = 88, SIID_MEDIAHDDVD = 89, SIID_MEDIABLURAY = 90, SIID_MEDIAVCD = 91, SIID_MEDIADVDPLUSR = 92, SIID_MEDIADVDPLUSRW = 93, SIID_DESKTOPPC = 94, SIID_MOBILEPC = 95, SIID_USERS = 96, SIID_MEDIASMARTMEDIA = 97, SIID_MEDIACOMPACTFLASH = 98, SIID_DEVICECELLPHONE = 99, SIID_DEVICECAMERA = 100, SIID_DEVICEVIDEOCAMERA = 101, SIID_DEVICEAUDIOPLAYER = 102, SIID_NETWORKCONNECT = 103, SIID_INTERNET = 104, SIID_ZIPFILE = 105, SIID_SETTINGS = 106, SIID_DRIVEHDDVD = 132, SIID_DRIVEBD = 133, SIID_MEDIAHDDVDROM = 134, SIID_MEDIAHDDVDR = 135, SIID_MEDIAHDDVDRAM = 136, SIID_MEDIABDROM = 137, SIID_MEDIABDR = 138, SIID_MEDIABDRE = 139, SIID_CLUSTEREDDRIVE = 140, SIID_MAX_ICONS = 175 }; enum _tagQUERYOPTION { QUERY_EXPIRATION_DATE = 1, QUERY_TIME_OF_LAST_CHANGE = 2, QUERY_CONTENT_ENCODING = 3, QUERY_CONTENT_TYPE = 4, QUERY_REFRESH = 5, QUERY_RECOMBINE = 6, QUERY_CAN_NAVIGATE = 7, QUERY_USES_NETWORK = 8, QUERY_IS_CACHED = 9, QUERY_IS_INSTALLEDENTRY = 10, QUERY_IS_CACHED_OR_MAPPED = 11, QUERY_USES_CACHE = 12, QUERY_IS_SECURE = 13, QUERY_IS_SAFE = 14, QUERY_USES_HISTORYFOLDER = 15, QUERY_IS_CACHED_AND_USABLE_OFFLINE = 16 }; enum _COPYFILE2_MESSAGE_TYPE { COPYFILE2_CALLBACK_NONE = 0, COPYFILE2_CALLBACK_CHUNK_STARTED = 1, COPYFILE2_CALLBACK_CHUNK_FINISHED = 2, COPYFILE2_CALLBACK_STREAM_STARTED = 3, COPYFILE2_CALLBACK_STREAM_FINISHED = 4, COPYFILE2_CALLBACK_POLL_CONTINUE = 5, COPYFILE2_CALLBACK_ERROR = 6, COPYFILE2_CALLBACK_MAX = 7 }; enum SYSGEOTYPE { GEO_NATION = 1, GEO_LATITUDE = 2, GEO_LONGITUDE = 3, GEO_ISO2 = 4, GEO_ISO3 = 5, GEO_RFC1766 = 6, GEO_LCID = 7, GEO_FRIENDLYNAME = 8, GEO_OFFICIALNAME = 9, GEO_TIMEZONES = 10, GEO_OFFICIALLANGUAGES = 11, GEO_ISO_UN_NUMBER = 12, GEO_PARENT = 13 }; enum _DPFLTR_TYPE { DPFLTR_SYSTEM_ID = 0, DPFLTR_SMSS_ID = 1, DPFLTR_SETUP_ID = 2, DPFLTR_NTFS_ID = 3, DPFLTR_FSTUB_ID = 4, DPFLTR_CRASHDUMP_ID = 5, DPFLTR_CDAUDIO_ID = 6, DPFLTR_CDROM_ID = 7, DPFLTR_CLASSPNP_ID = 8, DPFLTR_DISK_ID = 9, DPFLTR_REDBOOK_ID = 10, DPFLTR_STORPROP_ID = 11, DPFLTR_SCSIPORT_ID = 12, DPFLTR_SCSIMINIPORT_ID = 13, DPFLTR_CONFIG_ID = 14, DPFLTR_I8042PRT_ID = 15, DPFLTR_SERMOUSE_ID = 16, DPFLTR_LSERMOUS_ID = 17, DPFLTR_KBDHID_ID = 18, DPFLTR_MOUHID_ID = 19, DPFLTR_KBDCLASS_ID = 20, DPFLTR_MOUCLASS_ID = 21, DPFLTR_TWOTRACK_ID = 22, DPFLTR_WMILIB_ID = 23, DPFLTR_ACPI_ID = 24, DPFLTR_AMLI_ID = 25, DPFLTR_HALIA64_ID = 26, DPFLTR_VIDEO_ID = 27, DPFLTR_SVCHOST_ID = 28, DPFLTR_VIDEOPRT_ID = 29, DPFLTR_TCPIP_ID = 30, DPFLTR_DMSYNTH_ID = 31, DPFLTR_NTOSPNP_ID = 32, DPFLTR_FASTFAT_ID = 33, DPFLTR_SAMSS_ID = 34, DPFLTR_PNPMGR_ID = 35, DPFLTR_NETAPI_ID = 36, DPFLTR_SCSERVER_ID = 37, DPFLTR_SCCLIENT_ID = 38, DPFLTR_SERIAL_ID = 39, DPFLTR_SERENUM_ID = 40, DPFLTR_UHCD_ID = 41, DPFLTR_RPCPROXY_ID = 42, DPFLTR_AUTOCHK_ID = 43, DPFLTR_DCOMSS_ID = 44, DPFLTR_UNIMODEM_ID = 45, DPFLTR_SIS_ID = 46, DPFLTR_FLTMGR_ID = 47, DPFLTR_WMICORE_ID = 48, DPFLTR_BURNENG_ID = 49, DPFLTR_IMAPI_ID = 50, DPFLTR_SXS_ID = 51, DPFLTR_FUSION_ID = 52, DPFLTR_IDLETASK_ID = 53, DPFLTR_SOFTPCI_ID = 54, DPFLTR_TAPE_ID = 55, DPFLTR_MCHGR_ID = 56, DPFLTR_IDEP_ID = 57, DPFLTR_PCIIDE_ID = 58, DPFLTR_FLOPPY_ID = 59, DPFLTR_FDC_ID = 60, DPFLTR_TERMSRV_ID = 61, DPFLTR_W32TIME_ID = 62, DPFLTR_PREFETCHER_ID = 63, DPFLTR_RSFILTER_ID = 64, DPFLTR_FCPORT_ID = 65, DPFLTR_PCI_ID = 66, DPFLTR_DMIO_ID = 67, DPFLTR_DMCONFIG_ID = 68, DPFLTR_DMADMIN_ID = 69, DPFLTR_WSOCKTRANSPORT_ID = 70, DPFLTR_VSS_ID = 71, DPFLTR_PNPMEM_ID = 72, DPFLTR_PROCESSOR_ID = 73, DPFLTR_DMSERVER_ID = 74, DPFLTR_SR_ID = 75, DPFLTR_INFINIBAND_ID = 76, DPFLTR_IHVDRIVER_ID = 77, DPFLTR_IHVVIDEO_ID = 78, DPFLTR_IHVAUDIO_ID = 79, DPFLTR_IHVNETWORK_ID = 80, DPFLTR_IHVSTREAMING_ID = 81, DPFLTR_IHVBUS_ID = 82, DPFLTR_HPS_ID = 83, DPFLTR_RTLTHREADPOOL_ID = 84, DPFLTR_LDR_ID = 85, DPFLTR_TCPIP6_ID = 86, DPFLTR_ISAPNP_ID = 87, DPFLTR_SHPC_ID = 88, DPFLTR_STORPORT_ID = 89, DPFLTR_STORMINIPORT_ID = 90, DPFLTR_PRINTSPOOLER_ID = 91, DPFLTR_VSSDYNDISK_ID = 92, DPFLTR_VERIFIER_ID = 93, DPFLTR_VDS_ID = 94, DPFLTR_VDSBAS_ID = 95, DPFLTR_VDSDYN_ID = 96, DPFLTR_VDSDYNDR_ID = 97, DPFLTR_VDSLDR_ID = 98, DPFLTR_VDSUTIL_ID = 99, DPFLTR_DFRGIFC_ID = 100, DPFLTR_DEFAULT_ID = 101, DPFLTR_MM_ID = 102, DPFLTR_DFSC_ID = 103, DPFLTR_WOW64_ID = 104, DPFLTR_ALPC_ID = 105, DPFLTR_WDI_ID = 106, DPFLTR_PERFLIB_ID = 107, DPFLTR_KTM_ID = 108, DPFLTR_IOSTRESS_ID = 109, DPFLTR_HEAP_ID = 110, DPFLTR_WHEA_ID = 111, DPFLTR_USERGDI_ID = 112, DPFLTR_MMCSS_ID = 113, DPFLTR_TPM_ID = 114, DPFLTR_THREADORDER_ID = 115, DPFLTR_ENVIRON_ID = 116, DPFLTR_EMS_ID = 117, DPFLTR_WDT_ID = 118, DPFLTR_FVEVOL_ID = 119, DPFLTR_NDIS_ID = 120, DPFLTR_NVCTRACE_ID = 121, DPFLTR_LUAFV_ID = 122, DPFLTR_APPCOMPAT_ID = 123, DPFLTR_USBSTOR_ID = 124, DPFLTR_SBP2PORT_ID = 125, DPFLTR_COVERAGE_ID = 126, DPFLTR_CACHEMGR_ID = 127, DPFLTR_MOUNTMGR_ID = 128, DPFLTR_CFR_ID = 129, DPFLTR_TXF_ID = 130, DPFLTR_KSECDD_ID = 131, DPFLTR_FLTREGRESS_ID = 132, DPFLTR_MPIO_ID = 133, DPFLTR_MSDSM_ID = 134, DPFLTR_UDFS_ID = 135, DPFLTR_PSHED_ID = 136, DPFLTR_STORVSP_ID = 137, DPFLTR_LSASS_ID = 138, DPFLTR_SSPICLI_ID = 139, DPFLTR_CNG_ID = 140, DPFLTR_EXFAT_ID = 141, DPFLTR_FILETRACE_ID = 142, DPFLTR_XSAVE_ID = 143, DPFLTR_SE_ID = 144, DPFLTR_DRIVEEXTENDER_ID = 145, DPFLTR_POWER_ID = 146, DPFLTR_CRASHDUMPXHCI_ID = 147, DPFLTR_GPIO_ID = 148, DPFLTR_ENDOFTABLE_ID = 149 }; enum _PS_ATTRIBUTE_NUM { PsAttributeParentProcess = 0, PsAttributeDebugObject = 1, PsAttributeToken = 2, PsAttributeClientId = 3, PsAttributeTebAddress = 4, PsAttributeImageName = 5, PsAttributeImageInfo = 6, PsAttributeMemoryReserve = 7, PsAttributePriorityClass = 8, PsAttributeErrorMode = 9, PsAttributeStdHandleInfo = 10, PsAttributeHandleList = 11, PsAttributeGroupAffinity = 12, PsAttributePreferredNode = 13, PsAttributeIdealProcessor = 14, PsAttributeUmsThread = 15, PsAttributeMitigationOptions = 16, PsAttributeSecurityCapabilities = 17, PsAttributeMax = 18 }; enum _PROCESSINFOCLASS { ProcessBasicInformation = 0, ProcessQuotaLimits = 1, ProcessIoCounters = 2, ProcessVmCounters = 3, ProcessTimes = 4, ProcessBasePriority = 5, ProcessRaisePriority = 6, ProcessDebugPort = 7, ProcessExceptionPort = 8, ProcessAccessToken = 9, ProcessLdtInformation = 10, ProcessLdtSize = 11, ProcessDefaultHardErrorMode = 12, ProcessIoPortHandlers = 13, ProcessPooledUsageAndLimits = 14, ProcessWorkingSetWatch = 15, ProcessUserModeIOPL = 16, ProcessEnableAlignmentFaultFixup = 17, ProcessPriorityClass = 18, ProcessWx86Information = 19, ProcessHandleCount = 20, ProcessAffinityMask = 21, ProcessPriorityBoost = 22, ProcessDeviceMap = 23, ProcessSessionInformation = 24, ProcessForegroundInformation = 25, ProcessWow64Information = 26, ProcessImageFileName = 27, ProcessLUIDDeviceMapsEnabled = 28, ProcessBreakOnTermination = 29, ProcessDebugObjectHandle = 30, ProcessDebugFlags = 31, ProcessHandleTracing = 32, ProcessIoPriority = 33, ProcessExecuteFlags = 34, ProcessTlsInformation = 35, ProcessCookie = 36, ProcessImageInformation = 37, ProcessCycleTime = 38, ProcessPagePriority = 39, ProcessInstrumentationCallback = 40, ProcessThreadStackAllocation = 41, ProcessWorkingSetWatchEx = 42, ProcessImageFileNameWin32 = 43, ProcessImageFileMapping = 44, ProcessAffinityUpdateMode = 45, ProcessMemoryAllocationMode = 46, ProcessGroupInformation = 47, ProcessTokenVirtualizationEnabled = 48, ProcessConsoleHostProcess = 49, ProcessWindowInformation = 50, ProcessHandleInformation = 51, ProcessMitigationPolicy = 52, ProcessDynamicFunctionTableInformation = 53, ProcessHandleCheckingMode = 54, ProcessKeepAliveCount = 55, ProcessRevokeFileHandles = 56, MaxProcessInfoClass = 57 }; enum _tagPARSEACTION { PARSE_CANONICALIZE = 1, PARSE_FRIENDLY = 2, PARSE_SECURITY_URL = 3, PARSE_ROOTDOCUMENT = 4, PARSE_DOCUMENT = 5, PARSE_ANCHOR = 6, PARSE_ENCODE_IS_UNESCAPE = 7, PARSE_DECODE_IS_ESCAPE = 8, PARSE_PATH_FROM_URL = 9, PARSE_URL_FROM_PATH = 10, PARSE_MIME = 11, PARSE_SERVER = 12, PARSE_SCHEMA = 13, PARSE_SITE = 14, PARSE_DOMAIN = 15, PARSE_LOCATION = 16, PARSE_SECURITY_DOMAIN = 17, PARSE_ESCAPE = 18, PARSE_UNESCAPE = 19 }; enum _SYSTEM_INFORMATION_CLASS { SystemBasicInformation = 0, SystemProcessorInformation = 1, SystemPerformanceInformation = 2, SystemTimeOfDayInformation = 3, SystemPathInformation = 4, SystemProcessInformation = 5, SystemCallCountInformation = 6, SystemDeviceInformation = 7, SystemProcessorPerformanceInformation = 8, SystemFlagsInformation = 9, SystemCallTimeInformation = 10, SystemModuleInformation = 11, SystemLocksInformation = 12, SystemStackTraceInformation = 13, SystemPagedPoolInformation = 14, SystemNonPagedPoolInformation = 15, SystemHandleInformation = 16, SystemObjectInformation = 17, SystemPageFileInformation = 18, SystemVdmInstemulInformation = 19, SystemVdmBopInformation = 20, SystemFileCacheInformation = 21, SystemPoolTagInformation = 22, SystemInterruptInformation = 23, SystemDpcBehaviorInformation = 24, SystemFullMemoryInformation = 25, SystemLoadGdiDriverInformation = 26, SystemUnloadGdiDriverInformation = 27, SystemTimeAdjustmentInformation = 28, SystemSummaryMemoryInformation = 29, SystemMirrorMemoryInformation = 30, SystemPerformanceTraceInformation = 31, SystemObsolete0 = 32, SystemExceptionInformation = 33, SystemCrashDumpStateInformation = 34, SystemKernelDebuggerInformation = 35, SystemContextSwitchInformation = 36, SystemRegistryQuotaInformation = 37, SystemExtendServiceTableInformation = 38, SystemPrioritySeperation = 39, SystemVerifierAddDriverInformation = 40, SystemVerifierRemoveDriverInformation = 41, SystemProcessorIdleInformation = 42, SystemLegacyDriverInformation = 43, SystemCurrentTimeZoneInformation = 44, SystemLookasideInformation = 45, SystemTimeSlipNotification = 46, SystemSessionCreate = 47, SystemSessionDetach = 48, SystemSessionInformation = 49, SystemRangeStartInformation = 50, SystemVerifierInformation = 51, SystemVerifierThunkExtend = 52, SystemSessionProcessInformation = 53, SystemLoadGdiDriverInSystemSpace = 54, SystemNumaProcessorMap = 55, SystemPrefetcherInformation = 56, SystemExtendedProcessInformation = 57, SystemRecommendedSharedDataAlignment = 58, SystemComPlusPackage = 59, SystemNumaAvailableMemory = 60, SystemProcessorPowerInformation = 61, SystemEmulationBasicInformation = 62, SystemEmulationProcessorInformation = 63, SystemExtendedHandleInformation = 64, SystemLostDelayedWriteInformation = 65, SystemBigPoolInformation = 66, SystemSessionPoolTagInformation = 67, SystemSessionMappedViewInformation = 68, SystemHotpatchInformation = 69, SystemObjectSecurityMode = 70, SystemWatchdogTimerHandler = 71, SystemWatchdogTimerInformation = 72, SystemLogicalProcessorInformation = 73, SystemWow64SharedInformationObsolete = 74, SystemRegisterFirmwareTableInformationHandler = 75, SystemFirmwareTableInformation = 76, SystemModuleInformationEx = 77, SystemVerifierTriageInformation = 78, SystemSuperfetchInformation = 79, SystemMemoryListInformation = 80, SystemFileCacheInformationEx = 81, SystemThreadPriorityClientIdInformation = 82, SystemProcessorIdleCycleTimeInformation = 83, SystemVerifierCancellationInformation = 84, SystemProcessorPowerInformationEx = 85, SystemRefTraceInformation = 86, SystemSpecialPoolInformation = 87, SystemProcessIdInformation = 88, SystemErrorPortInformation = 89, SystemBootEnvironmentInformation = 90, SystemHypervisorInformation = 91, SystemVerifierInformationEx = 92, SystemTimeZoneInformation = 93, SystemImageFileExecutionOptionsInformation = 94, SystemCoverageInformation = 95, SystemPrefetchPatchInformation = 96, SystemVerifierFaultsInformation = 97, SystemSystemPartitionInformation = 98, SystemSystemDiskInformation = 99, SystemProcessorPerformanceDistribution = 100, SystemNumaProximityNodeInformation = 101, SystemDynamicTimeZoneInformation = 102, SystemCodeIntegrityInformation = 103, SystemProcessorMicrocodeUpdateInformation = 104, SystemProcessorBrandString = 105, SystemVirtualAddressInformation = 106, SystemLogicalProcessorAndGroupInformation = 107, SystemProcessorCycleTimeInformation = 108, SystemStoreInformation = 109, SystemRegistryAppendString = 110, SystemAitSamplingValue = 111, SystemVhdBootInformation = 112, SystemCpuQuotaInformation = 113, SystemNativeBasicInformation = 114, SystemErrorPortTimeouts = 115, SystemLowPriorityIoInformation = 116, SystemBootEntropyInformation = 117, SystemVerifierCountersInformation = 118, SystemPagedPoolInformationEx = 119, SystemSystemPtesInformationEx = 120, SystemNodeDistanceInformation = 121, SystemAcpiAuditInformation = 122, SystemBasicPerformanceInformation = 123, SystemQueryPerformanceCounterInformation = 124, SystemSessionBigPoolInformation = 125, SystemBootGraphicsInformation = 126, SystemScrubPhysicalMemoryInformation = 127, SystemBadPageInformation = 128, SystemProcessorProfileControlArea = 129, SystemCombinePhysicalMemoryInformation = 130, SystemEntropyInterruptTimingCallback = 131, SystemConsoleInformation = 132, SystemPlatformBinaryInformation = 133, SystemThrottleNotificationInformation = 134, SystemHypervisorProcessorCountInformation = 135, SystemDeviceDataInformation = 136, SystemDeviceDataEnumerationInformation = 137, SystemMemoryTopologyInformation = 138, SystemMemoryChannelInformation = 139, SystemBootLogoInformation = 140, MaxSystemInfoClass = 141 }; enum DISPLAYCONFIG_SCALING { DISPLAYCONFIG_SCALING_IDENTITY = 1, DISPLAYCONFIG_SCALING_CENTERED = 2, DISPLAYCONFIG_SCALING_STRETCHED = 3, DISPLAYCONFIG_SCALING_ASPECTRATIOCENTEREDMAX = 4, DISPLAYCONFIG_SCALING_CUSTOM = 5, DISPLAYCONFIG_SCALING_PREFERRED = 128, DISPLAYCONFIG_SCALING_FORCE_UINT32 = -1 }; enum DISPLAYCONFIG_DEVICE_INFO_TYPE { DISPLAYCONFIG_DEVICE_INFO_GET_SOURCE_NAME = 1, DISPLAYCONFIG_DEVICE_INFO_GET_TARGET_NAME = 2, DISPLAYCONFIG_DEVICE_INFO_GET_TARGET_PREFERRED_MODE = 3, DISPLAYCONFIG_DEVICE_INFO_GET_ADAPTER_NAME = 4, DISPLAYCONFIG_DEVICE_INFO_SET_TARGET_PERSISTENCE = 5, DISPLAYCONFIG_DEVICE_INFO_FORCE_UINT32 = -1 }; enum _PLUGPLAY_CONTROL_CLASS { PlugPlayControlEnumerateDevice = 0, PlugPlayControlRegisterNewDevice = 1, PlugPlayControlDeregisterDevice = 2, PlugPlayControlInitializeDevice = 3, PlugPlayControlStartDevice = 4, PlugPlayControlUnlockDevice = 5, PlugPlayControlQueryAndRemoveDevice = 6, PlugPlayControlUserResponse = 7, PlugPlayControlGenerateLegacyDevice = 8, PlugPlayControlGetInterfaceDeviceList = 9, PlugPlayControlProperty = 10, PlugPlayControlDeviceClassAssociation = 11, PlugPlayControlGetRelatedDevice = 12, PlugPlayControlGetInterfaceDeviceAlias = 13, PlugPlayControlDeviceStatus = 14, PlugPlayControlGetDeviceDepth = 15, PlugPlayControlQueryDeviceRelations = 16, PlugPlayControlTargetDeviceRelation = 17, PlugPlayControlQueryConflictList = 18, PlugPlayControlRetrieveDock = 19, PlugPlayControlResetDevice = 20, PlugPlayControlHaltDevice = 21, PlugPlayControlGetBlockedDriverList = 22, MaxPlugPlayControl = 23 }; enum ReplacesCorHdrNumericDefines { COMIMAGE_FLAGS_ILONLY = 1, COMIMAGE_FLAGS_32BITREQUIRED = 2, COMIMAGE_FLAGS_IL_LIBRARY = 4, COMIMAGE_FLAGS_STRONGNAMESIGNED = 8, COMIMAGE_FLAGS_NATIVE_ENTRYPOINT = 16, /* COMIMAGE_FLAGS_TRACKDEBUGDATA = Unavail */ }; enum _SYSTEM_VA_TYPE { SystemVaTypeAll = 0, SystemVaTypeNonPagedPool = 1, SystemVaTypePagedPool = 2, SystemVaTypeSystemCache = 3, SystemVaTypeSystemPtes = 4, SystemVaTypeSessionSpace = 5, SystemVaTypeMax = 6 }; enum _INTERFACE_TYPE { InterfaceTypeUndefined = -1, Internal = 0, Isa = 1, Eisa = 2, MicroChannel = 3, TurboChannel = 4, PCIBus = 5, VMEBus = 6, NuBus = 7, PCMCIABus = 8, CBus = 9, MPIBus = 10, MPSABus = 11, ProcessorInternal = 12, InternalPowerBus = 13, PNPISABus = 14, PNPBus = 15, Vmcs = 16, ACPIBus = 17, MaximumInterfaceType = 18 }; enum _KPROFILE_SOURCE { ProfileTime = 0, ProfileAlignmentFixup = 1, ProfileTotalIssues = 2, ProfilePipelineDry = 3, ProfileLoadInstructions = 4, ProfilePipelineFrozen = 5, ProfileBranchInstructions = 6, ProfileTotalNonissues = 7, ProfileDcacheMisses = 8, ProfileIcacheMisses = 9, ProfileCacheMisses = 10, ProfileBranchMispredictions = 11, ProfileStoreInstructions = 12, ProfileFpInstructions = 13, ProfileIntegerInstructions = 14, Profile2Issue = 15, Profile3Issue = 16, Profile4Issue = 17, ProfileSpecialInstructions = 18, ProfileTotalCycles = 19, ProfileIcacheIssues = 20, ProfileDcacheAccesses = 21, ProfileMemoryBarrierCycles = 22, ProfileLoadLinkedIssues = 23, ProfileMaximum = 24 }; enum _INSTALLSPECTYPE { APPNAME = 1, FILEEXT = 2, PROGID = 3, COMCLASS = 4 }; enum __MIDL_IInternetSecurityManager_0001 { PUAF_DEFAULT = 0, PUAF_NOUI = 1, PUAF_ISFILE = 2, PUAF_WARN_IF_DENIED = 4, PUAF_FORCEUI_FOREGROUND = 8, PUAF_CHECK_TIFS = 16, PUAF_DONTCHECKBOXINDIALOG = 32, PUAF_TRUSTED = 64, PUAF_ACCEPT_WILDCARD_SCHEME = 128, PUAF_ENFORCERESTRICTED = 256, PUAF_NOSAVEDFILECHECK = 512, PUAF_REQUIRESAVEDFILECHECK = 1024, PUAF_DONT_USE_CACHE = 4096, PUAF_RESERVED1 = 8192, PUAF_RESERVED2 = 16384, /* PUAF_LMZ_UNLOCKED = Unavail */ }; enum PROXY_PHASE { PROXY_CALCSIZE = 0, PROXY_GETBUFFER = 1, PROXY_MARSHAL = 2, PROXY_SENDRECEIVE = 3, PROXY_UNMARSHAL = 4 }; enum _IDL_CS_CONVERT { IDL_CS_NO_CONVERT = 0, IDL_CS_IN_PLACE_CONVERT = 1, IDL_CS_NEW_BUFFER_CONVERT = 2 }; enum _BUS_DATA_TYPE { ConfigurationSpaceUndefined = -1, Cmos = 0, EisaConfiguration = 1, Pos = 2, CbusConfiguration = 3, PCIConfiguration = 4, VMEConfiguration = 5, NuBusConfiguration = 6, PCMCIAConfiguration = 7, MPIConfiguration = 8, MPSAConfiguration = 9, PNPISAConfiguration = 10, SgiInternalConfiguration = 11, MaximumBusDataType = 12 }; enum tagSTGC { STGC_DEFAULT = 0, STGC_OVERWRITE = 1, STGC_ONLYIFCURRENT = 2, STGC_DANGEROUSLYCOMMITMERELYTODISKCACHE = 4, STGC_CONSOLIDATE = 8 }; enum _RTL_PATH_TYPE { RtlPathTypeUnknown = 0, RtlPathTypeUncAbsolute = 1, RtlPathTypeDriveAbsolute = 2, RtlPathTypeDriveRelative = 3, RtlPathTypeRooted = 4, RtlPathTypeRelative = 5, RtlPathTypeLocalDevice = 6, RtlPathTypeRootLocalDevice = 7 }; enum _WORKER_FACTORY_CALLBACK_CLASS { WorkerFactoryCallbackNormal = 0, WorkerFactoryCallbackLongRunning = 1, WorkerFactoryCallbackIndependent = 2, WorkerFactoryCallbackDetectedUnrecoverableError = 3 }; enum SYSTEM_POWER_CONDITION { PoAc = 0, PoDc = 1, PoHot = 2, PoConditionMaximum = 3 }; enum tagTYPEKIND { TKIND_ENUM = 0, TKIND_RECORD = 1, TKIND_MODULE = 2, TKIND_INTERFACE = 3, TKIND_DISPATCH = 4, TKIND_COCLASS = 5, TKIND_ALIAS = 6, TKIND_UNION = 7, TKIND_MAX = 8 }; enum _MUTANT_INFORMATION_CLASS { MutantBasicInformation = 0, MutantOwnerInformation = 1 }; enum tagBINDSTATUS { BINDSTATUS_FINDINGRESOURCE = 1, BINDSTATUS_CONNECTING = 2, BINDSTATUS_REDIRECTING = 3, BINDSTATUS_BEGINDOWNLOADDATA = 4, BINDSTATUS_DOWNLOADINGDATA = 5, BINDSTATUS_ENDDOWNLOADDATA = 6, BINDSTATUS_BEGINDOWNLOADCOMPONENTS = 7, BINDSTATUS_INSTALLINGCOMPONENTS = 8, BINDSTATUS_ENDDOWNLOADCOMPONENTS = 9, BINDSTATUS_USINGCACHEDCOPY = 10, BINDSTATUS_SENDINGREQUEST = 11, BINDSTATUS_CLASSIDAVAILABLE = 12, BINDSTATUS_MIMETYPEAVAILABLE = 13, BINDSTATUS_CACHEFILENAMEAVAILABLE = 14, BINDSTATUS_BEGINSYNCOPERATION = 15, BINDSTATUS_ENDSYNCOPERATION = 16, BINDSTATUS_BEGINUPLOADDATA = 17, BINDSTATUS_UPLOADINGDATA = 18, BINDSTATUS_ENDUPLOADDATA = 19, BINDSTATUS_PROTOCOLCLASSID = 20, BINDSTATUS_ENCODING = 21, BINDSTATUS_VERIFIEDMIMETYPEAVAILABLE = 22, BINDSTATUS_CLASSINSTALLLOCATION = 23, BINDSTATUS_DECODING = 24, BINDSTATUS_LOADINGMIMEHANDLER = 25, BINDSTATUS_CONTENTDISPOSITIONATTACH = 26, BINDSTATUS_FILTERREPORTMIMETYPE = 27, BINDSTATUS_CLSIDCANINSTANTIATE = 28, BINDSTATUS_IUNKNOWNAVAILABLE = 29, BINDSTATUS_DIRECTBIND = 30, BINDSTATUS_RAWMIMETYPE = 31, BINDSTATUS_PROXYDETECTING = 32, BINDSTATUS_ACCEPTRANGES = 33, BINDSTATUS_COOKIE_SENT = 34, BINDSTATUS_COMPACT_POLICY_RECEIVED = 35, BINDSTATUS_COOKIE_SUPPRESSED = 36, BINDSTATUS_COOKIE_STATE_UNKNOWN = 37, BINDSTATUS_COOKIE_STATE_ACCEPT = 38, BINDSTATUS_COOKIE_STATE_REJECT = 39, BINDSTATUS_COOKIE_STATE_PROMPT = 40, BINDSTATUS_COOKIE_STATE_LEASH = 41, BINDSTATUS_COOKIE_STATE_DOWNGRADE = 42, BINDSTATUS_POLICY_HREF = 43, BINDSTATUS_P3P_HEADER = 44, BINDSTATUS_SESSION_COOKIE_RECEIVED = 45, BINDSTATUS_PERSISTENT_COOKIE_RECEIVED = 46, BINDSTATUS_SESSION_COOKIES_ALLOWED = 47, BINDSTATUS_CACHECONTROL = 48, BINDSTATUS_CONTENTDISPOSITIONFILENAME = 49, BINDSTATUS_MIMETEXTPLAINMISMATCH = 50, BINDSTATUS_PUBLISHERAVAILABLE = 51, BINDSTATUS_DISPLAYNAMEAVAILABLE = 52, BINDSTATUS_SSLUX_NAVBLOCKED = 53, BINDSTATUS_SERVER_MIMETYPEAVAILABLE = 54, BINDSTATUS_SNIFFED_CLASSIDAVAILABLE = 55, BINDSTATUS_64BIT_PROGRESS = 56, BINDSTATUS_LAST = 56, BINDSTATUS_RESERVED_0 = 57, BINDSTATUS_RESERVED_1 = 58, BINDSTATUS_RESERVED_2 = 59, BINDSTATUS_RESERVED_3 = 60, BINDSTATUS_RESERVED_4 = 61, BINDSTATUS_RESERVED_5 = 62, BINDSTATUS_RESERVED_6 = 63, BINDSTATUS_RESERVED_7 = 64, BINDSTATUS_RESERVED_8 = 65, BINDSTATUS_RESERVED_9 = 66, BINDSTATUS_LAST_PRIVATE = 66 }; enum __MIDL_IUri_0001 { Uri_PROPERTY_ABSOLUTE_URI = 0, Uri_PROPERTY_STRING_START = 0, Uri_PROPERTY_AUTHORITY = 1, Uri_PROPERTY_DISPLAY_URI = 2, Uri_PROPERTY_DOMAIN = 3, Uri_PROPERTY_EXTENSION = 4, Uri_PROPERTY_FRAGMENT = 5, Uri_PROPERTY_HOST = 6, Uri_PROPERTY_PASSWORD = 7, Uri_PROPERTY_PATH = 8, Uri_PROPERTY_PATH_AND_QUERY = 9, Uri_PROPERTY_QUERY = 10, Uri_PROPERTY_RAW_URI = 11, Uri_PROPERTY_SCHEME_NAME = 12, Uri_PROPERTY_USER_INFO = 13, Uri_PROPERTY_USER_NAME = 14, Uri_PROPERTY_STRING_LAST = 14, Uri_PROPERTY_HOST_TYPE = 15, Uri_PROPERTY_DWORD_START = 15, Uri_PROPERTY_PORT = 16, Uri_PROPERTY_SCHEME = 17, Uri_PROPERTY_ZONE = 18, Uri_PROPERTY_DWORD_LAST = 18 }; enum _JOURNAL_CHANGE_INFORMATION_CLASS { JournalCreateKey = 0, JournalDeleteKey = 1, JournalRenameKey = 2, JournalSetValue = 3, JournalDeleteValue = 4, JournalSetKeySecurity = 5, JournalSetKeyUserFlags = 6, JournalSetLastWriteTime = 7, JournalBeginTransaction = 8, JournalCommitTransaction = 9, JournalAbortTransaction = 10, MaxJournalChangeAction = 11 }; enum _TP_TRACE_TYPE { TpTraceThreadPriority = 1, TpTraceThreadAffinity = 2, MaxTpTraceType = 3 }; enum tagOLERENDER { OLERENDER_NONE = 0, OLERENDER_DRAW = 1, OLERENDER_FORMAT = 2, OLERENDER_ASIS = 3 }; /* enum tagMKREDUCE { MKRREDUCE_ONE = Unavail }; */ enum POWER_STATE_HANDLER_TYPE { PowerStateSleeping1 = 0, PowerStateSleeping2 = 1, PowerStateSleeping3 = 2, PowerStateSleeping4 = 3, PowerStateShutdownOff = 4, PowerStateShutdownReset = 5, PowerStateSleeping4Firmware = 6, PowerStateMaximum = 7 }; enum _tagINTERNETFEATURELIST { FEATURE_OBJECT_CACHING = 0, FEATURE_ZONE_ELEVATION = 1, FEATURE_MIME_HANDLING = 2, FEATURE_MIME_SNIFFING = 3, FEATURE_WINDOW_RESTRICTIONS = 4, FEATURE_WEBOC_POPUPMANAGEMENT = 5, FEATURE_BEHAVIORS = 6, FEATURE_DISABLE_MK_PROTOCOL = 7, FEATURE_LOCALMACHINE_LOCKDOWN = 8, FEATURE_SECURITYBAND = 9, FEATURE_RESTRICT_ACTIVEXINSTALL = 10, FEATURE_VALIDATE_NAVIGATE_URL = 11, FEATURE_RESTRICT_FILEDOWNLOAD = 12, FEATURE_ADDON_MANAGEMENT = 13, FEATURE_PROTOCOL_LOCKDOWN = 14, FEATURE_HTTP_USERNAME_PASSWORD_DISABLE = 15, FEATURE_SAFE_BINDTOOBJECT = 16, FEATURE_UNC_SAVEDFILECHECK = 17, FEATURE_GET_URL_DOM_FILEPATH_UNENCODED = 18, FEATURE_TABBED_BROWSING = 19, FEATURE_SSLUX = 20, FEATURE_DISABLE_NAVIGATION_SOUNDS = 21, FEATURE_DISABLE_LEGACY_COMPRESSION = 22, FEATURE_FORCE_ADDR_AND_STATUS = 23, FEATURE_XMLHTTP = 24, FEATURE_DISABLE_TELNET_PROTOCOL = 25, FEATURE_FEEDS = 26, FEATURE_BLOCK_INPUT_PROMPTS = 27, FEATURE_ENTRY_COUNT = 28 }; enum _DMA_WIDTH { Width8Bits = 0, Width16Bits = 1, Width32Bits = 2, Width64Bits = 3, WidthNoWrap = 4, MaximumDmaWidth = 5 }; enum __MIDL_IBindStatusCallback_0006 { BSCF_FIRSTDATANOTIFICATION = 1, BSCF_INTERMEDIATEDATANOTIFICATION = 2, BSCF_LASTDATANOTIFICATION = 4, BSCF_DATAFULLYAVAILABLE = 8, BSCF_AVAILABLEDATASIZEUNKNOWN = 16, BSCF_SKIPDRAINDATAFORFILEURLS = 32, BSCF_64BITLENGTHDOWNLOAD = 64 }; enum DISPLAYCONFIG_PIXELFORMAT { DISPLAYCONFIG_PIXELFORMAT_8BPP = 1, DISPLAYCONFIG_PIXELFORMAT_16BPP = 2, DISPLAYCONFIG_PIXELFORMAT_24BPP = 3, DISPLAYCONFIG_PIXELFORMAT_32BPP = 4, DISPLAYCONFIG_PIXELFORMAT_NONGDI = 5, DISPLAYCONFIG_PIXELFORMAT_FORCE_UINT32 = -1 }; enum _SAFER_POLICY_INFO_CLASS { SaferPolicyLevelList = 1, SaferPolicyEnableTransparentEnforcement = 2, SaferPolicyDefaultLevel = 3, SaferPolicyEvaluateUserScope = 4, SaferPolicyScopeFlags = 5, SaferPolicyDefaultLevelFlags = 6, SaferPolicyAuthenticodeEnabled = 7 }; enum TrustLevel { BaseTrust = 0, PartialTrust = 1, FullTrust = 2 }; enum tagBINDSTRING { BINDSTRING_HEADERS = 1, BINDSTRING_ACCEPT_MIMES = 2, BINDSTRING_EXTRA_URL = 3, BINDSTRING_LANGUAGE = 4, BINDSTRING_USERNAME = 5, BINDSTRING_PASSWORD = 6, BINDSTRING_UA_PIXELS = 7, BINDSTRING_UA_COLOR = 8, BINDSTRING_OS = 9, BINDSTRING_USER_AGENT = 10, BINDSTRING_ACCEPT_ENCODINGS = 11, BINDSTRING_POST_COOKIE = 12, BINDSTRING_POST_DATA_MIME = 13, BINDSTRING_URL = 14, BINDSTRING_IID = 15, BINDSTRING_FLAG_BIND_TO_OBJECT = 16, BINDSTRING_PTR_BIND_CONTEXT = 17, BINDSTRING_XDR_ORIGIN = 18, BINDSTRING_DOWNLOADPATH = 19, BINDSTRING_ROOTDOC_URL = 20, BINDSTRING_INITIAL_FILENAME = 21 }; enum tagORIENTATION_PREFERENCE { ORIENTATION_PREFERENCE_NONE = 0, ORIENTATION_PREFERENCE_LANDSCAPE = 1, ORIENTATION_PREFERENCE_PORTRAIT = 2, ORIENTATION_PREFERENCE_LANDSCAPE_FLIPPED = 4, ORIENTATION_PREFERENCE_PORTRAIT_FLIPPED = 8 }; enum _FP_IEEE_OPERATION_CODE { FpCodeUnspecified = 0, FpCodeAdd = 1, FpCodeSubtract = 2, FpCodeMultiply = 3, FpCodeDivide = 4, FpCodeSquareRoot = 5, FpCodeRemainder = 6, FpCodeCompare = 7, FpCodeConvert = 8, FpCodeRound = 9, FpCodeTruncate = 10, FpCodeFloor = 11, FpCodeCeil = 12, FpCodeAcos = 13, FpCodeAsin = 14, FpCodeAtan = 15, FpCodeAtan2 = 16, FpCodeCabs = 17, FpCodeCos = 18, FpCodeCosh = 19, FpCodeExp = 20, FpCodeFabs = 21, FpCodeFmod = 22, FpCodeFrexp = 23, FpCodeHypot = 24, FpCodeLdexp = 25, FpCodeLog = 26, FpCodeLog10 = 27, FpCodeModf = 28, FpCodePow = 29, FpCodeSin = 30, FpCodeSinh = 31, FpCodeTan = 32, FpCodeTanh = 33, FpCodeY0 = 34, FpCodeY1 = 35, FpCodeYn = 36 }; enum tagLIBFLAGS { LIBFLAG_FRESTRICTED = 1, LIBFLAG_FCONTROL = 2, LIBFLAG_FHIDDEN = 4, LIBFLAG_FHASDISKIMAGE = 8 }; enum tagCOMCALLTYPE { CALLTYPE_OUTGOING_CALL = 0, CALLTYPE_INCOMING_CALL = 1, CALLTYPE_ACTIVATION = 2 }; enum _RTL_RXACT_OPERATION { RtlRXactOperationDelete = 1, RtlRXactOperationSetValue = 2, RtlRXactOperationDelAttribute = 3, RtlRXactOperationSetAttribute = 4 }; enum _IRQ_PRIORITY { IrqPriorityUndefined = 0, IrqPriorityLow = 1, IrqPriorityNormal = 2, IrqPriorityHigh = 3 }; enum PO_FIXED_WAKE_SOURCE_TYPE { FixedWakeSourcePowerButton = 0, FixedWakeSourceSleepButton = 1, FixedWakeSourceRtc = 2, FixedWakeSourceDozeToHibernate = 3 }; enum _THREADINFOCLASS { ThreadBasicInformation = 0, ThreadTimes = 1, ThreadPriority = 2, ThreadBasePriority = 3, ThreadAffinityMask = 4, ThreadImpersonationToken = 5, ThreadDescriptorTableEntry = 6, ThreadEnableAlignmentFaultFixup = 7, ThreadEventPair_Reusable = 8, ThreadQuerySetWin32StartAddress = 9, ThreadZeroTlsCell = 10, ThreadPerformanceCount = 11, ThreadAmILastThread = 12, ThreadIdealProcessor = 13, ThreadPriorityBoost = 14, ThreadSetTlsArrayAddress = 15, ThreadIsIoPending = 16, ThreadHideFromDebugger = 17, ThreadBreakOnTermination = 18, ThreadSwitchLegacyState = 19, ThreadIsTerminated = 20, ThreadLastSystemCall = 21, ThreadIoPriority = 22, ThreadCycleTime = 23, ThreadPagePriority = 24, ThreadActualBasePriority = 25, ThreadTebInformation = 26, ThreadCSwitchMon = 27, ThreadCSwitchPmu = 28, ThreadWow64Context = 29, ThreadGroupInformation = 30, ThreadUmsInformation = 31, ThreadCounterProfiling = 32, ThreadIdealProcessorEx = 33, ThreadCpuAccountingInformation = 34, ThreadSwitchStackCheck = 35, MaxThreadInfoClass = 36 }; enum _SE_AUDIT_OPERATION { AuditPrivilegeObject = 0, AuditPrivilegeService = 1, AuditAccessCheck = 2, AuditOpenObject = 3, AuditOpenObjectWithTransaction = 4, AuditCloseObject = 5, AuditDeleteObject = 6, AuditOpenObjectForDelete = 7, AuditOpenObjectForDeleteWithTransaction = 8, AuditCloseNonObject = 9, AuditOpenNonObject = 10, AuditObjectReference = 11, AuditHandleCreation = 12 }; enum _SAFER_OBJECT_INFO_CLASS { SaferObjectLevelId = 1, SaferObjectScopeId = 2, SaferObjectFriendlyName = 3, SaferObjectDescription = 4, SaferObjectBuiltin = 5, SaferObjectDisallowed = 6, SaferObjectDisableMaxPrivilege = 7, SaferObjectInvertDeletedPrivileges = 8, SaferObjectDeletedPrivileges = 9, SaferObjectDefaultOwner = 10, SaferObjectSidsToDisable = 11, SaferObjectRestrictedSidsInverted = 12, SaferObjectRestrictedSidsAdded = 13, SaferObjectAllIdentificationGuids = 14, SaferObjectSingleIdentification = 15, SaferObjectExtendedError = 16 }; enum DCOM_ENDPOINT_FLAGS { fUseInternetPorts = 1 }; enum _TOKEN_INFORMATION_CLASS { TokenUser = 1, TokenGroups = 2, TokenPrivileges = 3, TokenOwner = 4, TokenPrimaryGroup = 5, TokenDefaultDacl = 6, TokenSource = 7, TokenType = 8, TokenImpersonationLevel = 9, TokenStatistics = 10, TokenRestrictedSids = 11, TokenSessionId = 12, TokenGroupsAndPrivileges = 13, TokenSessionReference = 14, TokenSandBoxInert = 15, TokenAuditPolicy = 16, TokenOrigin = 17, TokenElevationType = 18, TokenLinkedToken = 19, TokenElevation = 20, TokenHasRestrictions = 21, TokenAccessInformation = 22, TokenVirtualizationAllowed = 23, TokenVirtualizationEnabled = 24, TokenIntegrityLevel = 25, TokenUIAccess = 26, TokenMandatoryPolicy = 27, TokenLogonSid = 28, TokenIsAppContainer = 29, TokenCapabilities = 30, TokenAppContainerSid = 31, TokenAppContainerNumber = 32, TokenUserClaimAttributes = 33, TokenDeviceClaimAttributes = 34, TokenRestrictedUserClaimAttributes = 35, TokenRestrictedDeviceClaimAttributes = 36, TokenDeviceGroups = 37, TokenRestrictedDeviceGroups = 38, TokenSecurityAttributes = 39, TokenIsRestricted = 40, MaxTokenInfoClass = 41 }; enum _SUITE_TYPE { SmallBusiness = 0, Enterprise = 1, BackOffice = 2, CommunicationServer = 3, TerminalServer = 4, SmallBusinessRestricted = 5, EmbeddedNT = 6, DataCenter = 7, SingleUserTS = 8, Personal = 9, Blade = 10, EmbeddedRestricted = 11, SecurityAppliance = 12, StorageServer = 13, ComputeServer = 14, WHServer = 15, MaxSuiteType = 16 }; enum tagMKSYS { MKSYS_NONE = 0, MKSYS_GENERICCOMPOSITE = 1, MKSYS_FILEMONIKER = 2, MKSYS_ANTIMONIKER = 3, MKSYS_ITEMMONIKER = 4, MKSYS_POINTERMONIKER = 5, MKSYS_CLASSMONIKER = 7, MKSYS_OBJREFMONIKER = 8, MKSYS_SESSIONMONIKER = 9, MKSYS_LUAMONIKER = 10 }; enum _BOOT_ENTROPY_SOURCE_ID { BootEntropySourceNone = 0, BootEntropySourceSeedfile = 1, BootEntropySourceExternal = 2, BootEntropySourceTpm = 3, BootEntropySourceRdrand = 4, BootEntropySourceTime = 5, BootEntropySourceAcpiOem0 = 6, BootEntropySourceUefi = 7, BootMaxEntropySources = 7 }; enum _FILE_INFO_BY_HANDLE_CLASS { FileBasicInfo = 0, FileStandardInfo = 1, FileNameInfo = 2, FileRenameInfo = 3, FileDispositionInfo = 4, FileAllocationInfo = 5, FileEndOfFileInfo = 6, FileStreamInfo = 7, FileCompressionInfo = 8, FileAttributeTagInfo = 9, FileIdBothDirectoryInfo = 10, FileIdBothDirectoryRestartInfo = 11, FileIoPriorityHintInfo = 12, FileRemoteProtocolInfo = 13, FileFullDirectoryInfo = 14, FileFullDirectoryRestartInfo = 15, FileStorageInfo = 16, FileAlignmentInfo = 17, MaximumFileInfoByHandleClass = 18 }; enum _WNF_USER_DELIVERY_STATE { WNF_USER_DELIVERY_STATE_READY = 0, WNF_USER_DELIVERY_STATE_CANCELLED = 1, WNF_USER_DELIVERY_STATE_IN_PROGRESS = 2, WNF_USER_DELIVERY_STATE_SUCCEEDED = 3, WNF_USER_DELIVERY_STATE_FAILED = 4, WNF_USER_DELIVERY_STATE_REQUIRES_RETRY = 5, WNF_USER_DELIVERY_STATE_COMPLETE = 6 }; enum _TIMER_INFORMATION_CLASS { TimerBasicInformation = 0 }; enum tagPOINTER_DEVICE_CURSOR_TYPE { POINTER_DEVICE_CURSOR_TYPE_UNKNOWN = 0, POINTER_DEVICE_CURSOR_TYPE_TIP = 1, POINTER_DEVICE_CURSOR_TYPE_ERASER = 2, POINTER_DEVICE_CURSOR_TYPE_MAX = -1 }; enum tagCOINIT { COINIT_APARTMENTTHREADED = 2, COINIT_MULTITHREADED = 0, COINIT_DISABLE_OLE1DDE = 4, COINIT_SPEED_OVER_MEMORY = 8 }; enum _PNP_VETO_TYPE { PNP_VetoTypeUnknown = 0, PNP_VetoLegacyDevice = 1, PNP_VetoPendingClose = 2, PNP_VetoWindowsApp = 3, PNP_VetoWindowsService = 4, PNP_VetoOutstandingOpen = 5, PNP_VetoDevice = 6, PNP_VetoDriver = 7, PNP_VetoIllegalDeviceRequest = 8, PNP_VetoInsufficientPower = 9, PNP_VetoNonDisableable = 10, PNP_VetoLegacyDriver = 11, PNP_VetoInsufficientRights = 12 }; enum _OBJECT_INFORMATION_CLASS { ObjectBasicInformation = 0, ObjectNameInformation = 1, ObjectTypeInformation = 2, ObjectTypesInformation = 3, ObjectHandleFlagInformation = 4, ObjectSessionInformation = 5, MaxObjectInfoClass = 6 }; enum _IO_SESSION_STATE { IoSessionStateCreated = 1, IoSessionStateInitialized = 2, IoSessionStateConnected = 3, IoSessionStateDisconnected = 4, IoSessionStateDisconnectedLoggedOn = 5, IoSessionStateLoggedOn = 6, IoSessionStateLoggedOff = 7, IoSessionStateTerminated = 8, IoSessionStateMax = 9 }; enum tagURLTEMPLATE { URLTEMPLATE_CUSTOM = 0, /* URLTEMPLATE_PREDEFINED_MIN = Unavail */ }; enum _RTL_VERIFIER_REDIRECT_TYPE { VerifierGPALookup = 0, VerifierDelayloadLookup = 1, VerifierLegacyLookup = 2, VerifierMaxLookupType = 3 }; enum _PNP_QUERY_RELATION { PnpQueryEjectRelations = 0, PnpQueryRemovalRelations = 1, PnpQueryPowerRelations = 2, PnpQueryBusRelations = 3, PnpQueryTransportRelations = 4, MaxPnpQueryRelations = 5 }; enum _JOBOBJECTINFOCLASS { JobObjectBasicAccountingInformation = 1, JobObjectBasicLimitInformation = 2, JobObjectBasicProcessIdList = 3, JobObjectBasicUIRestrictions = 4, JobObjectSecurityLimitInformation = 5, JobObjectEndOfJobTimeInformation = 6, JobObjectAssociateCompletionPortInformation = 7, JobObjectBasicAndIoAccountingInformation = 8, JobObjectExtendedLimitInformation = 9, JobObjectJobSetInformation = 10, JobObjectGroupInformation = 11, JobObjectNotificationLimitInformation = 12, JobObjectLimitViolationInformation = 13, JobObjectGroupInformationEx = 14, JobObjectCpuRateControlInformation = 15, JobObjectCompletionFilter = 16, JobObjectCompletionCounter = 17, JobObjectFreezeInformation = 18, JobObjectExtendedAccountingInformation = 19, JobObjectWakeInformation = 20, JobObjectIdleAwareInformation = 21, JobObjectSchedulingRankBiasInformation = 22, JobObjectTimerVirtualizationInformation = 23, JobObjectCycleTimeNotification = 24, JobObjectReserved1Information = 18, JobObjectReserved2Information = 19, JobObjectReserved3Information = 20, JobObjectReserved4Information = 21, JobObjectReserved5Information = 22, JobObjectReserved6Information = 23, JobObjectReserved7Information = 24, MaxJobObjectInfoClass = 25 }; enum _COMPUTER_NAME_FORMAT { ComputerNameNetBIOS = 0, ComputerNameDnsHostname = 1, ComputerNameDnsDomain = 2, ComputerNameDnsFullyQualified = 3, ComputerNamePhysicalNetBIOS = 4, ComputerNamePhysicalDnsHostname = 5, ComputerNamePhysicalDnsDomain = 6, ComputerNamePhysicalDnsFullyQualified = 7, ComputerNameMax = 8 }; enum _IO_SESSION_EVENT { IoSessionEventIgnore = 0, IoSessionEventCreated = 1, IoSessionEventTerminated = 2, IoSessionEventConnected = 3, IoSessionEventDisconnected = 4, IoSessionEventLogon = 5, IoSessionEventLogoff = 6, IoSessionEventMax = 7 }; enum _FILE_INFORMATION_CLASS { FileDirectoryInformation = 1, FileFullDirectoryInformation = 2, FileBothDirectoryInformation = 3, FileBasicInformation = 4, FileStandardInformation = 5, FileInternalInformation = 6, FileEaInformation = 7, FileAccessInformation = 8, FileNameInformation = 9, FileRenameInformation = 10, FileLinkInformation = 11, FileNamesInformation = 12, FileDispositionInformation = 13, FilePositionInformation = 14, FileFullEaInformation = 15, FileModeInformation = 16, FileAlignmentInformation = 17, FileAllInformation = 18, FileAllocationInformation = 19, FileEndOfFileInformation = 20, FileAlternateNameInformation = 21, FileStreamInformation = 22, FilePipeInformation = 23, FilePipeLocalInformation = 24, FilePipeRemoteInformation = 25, FileMailslotQueryInformation = 26, FileMailslotSetInformation = 27, FileCompressionInformation = 28, FileObjectIdInformation = 29, FileCompletionInformation = 30, FileMoveClusterInformation = 31, FileQuotaInformation = 32, FileReparsePointInformation = 33, FileNetworkOpenInformation = 34, FileAttributeTagInformation = 35, FileTrackingInformation = 36, FileIdBothDirectoryInformation = 37, FileIdFullDirectoryInformation = 38, FileValidDataLengthInformation = 39, FileShortNameInformation = 40, FileIoCompletionNotificationInformation = 41, FileIoStatusBlockRangeInformation = 42, FileIoPriorityHintInformation = 43, FileSfioReserveInformation = 44, FileSfioVolumeInformation = 45, FileHardLinkInformation = 46, FileProcessIdsUsingFileInformation = 47, FileNormalizedNameInformation = 48, FileNetworkPhysicalNameInformation = 49, FileIdGlobalTxDirectoryInformation = 50, FileIsRemoteDeviceInformation = 51, FileAttributeCacheInformation = 52, FileNumaNodeInformation = 53, FileStandardLinkInformation = 54, FileRemoteProtocolInformation = 55, FileRenameInformationBypassAccessCheck = 56, FileLinkInformationBypassAccessCheck = 57, FileIntegrityStreamInformation = 58, FileVolumeNameInformation = 59, FileMaximumInformation = 60 }; enum _ALPC_PORT_INFORMATION_CLASS { AlpcBasicInformation = 0, AlpcPortInformation = 1, AlpcAssociateCompletionPortInformation = 2, AlpcConnectedSIDInformation = 3, AlpcServerInformation = 4, AlpcMessageZoneInformation = 5, AlpcRegisterCompletionListInformation = 6, AlpcUnregisterCompletionListInformation = 7, AlpcAdjustCompletionListConcurrencyCountInformation = 8, AlpcRegisterCallbackInformation = 9, AlpcCompletionListRundownInformation = 10 }; enum tagVARFLAGS { VARFLAG_FREADONLY = 1, VARFLAG_FSOURCE = 2, VARFLAG_FBINDABLE = 4, VARFLAG_FREQUESTEDIT = 8, VARFLAG_FDISPLAYBIND = 16, VARFLAG_FDEFAULTBIND = 32, VARFLAG_FHIDDEN = 64, VARFLAG_FRESTRICTED = 128, VARFLAG_FDEFAULTCOLLELEM = 256, VARFLAG_FUIDEFAULT = 512, VARFLAG_FNONBROWSABLE = 1024, VARFLAG_FREPLACEABLE = 2048, VARFLAG_FIMMEDIATEBIND = 4096 }; enum __MIDL_IBindStatusCallback_0002 { BINDINFOF_URLENCODESTGMEDDATA = 1, BINDINFOF_URLENCODEDEXTRAINFO = 2 }; enum _SC_STATUS_TYPE { SC_STATUS_PROCESS_INFO = 0 }; enum _FP__IEEE_FORMAT { FpFormatFp32 = 0, FpFormatFp64 = 1, FpFormatFp80 = 2, FpFormatFp128 = 3, FpFormatI16 = 4, FpFormatI32 = 5, FpFormatI64 = 6, FpFormatU16 = 7, FpFormatU32 = 8, FpFormatU64 = 9, FpFormatCompare = 10, FpFormatString = 11 }; enum _LEARNING_MODE_LOG_LEVEL { LearningModeLogLevelPassive = 0, LearningModeLogLevelNormalApc = 1, LearningModeLogLevelSpecialApc = 2, LearningModeLogLevelMax = 3 }; enum DISPLAYCONFIG_SCANLINE_ORDERING { DISPLAYCONFIG_SCANLINE_ORDERING_UNSPECIFIED = 0, DISPLAYCONFIG_SCANLINE_ORDERING_PROGRESSIVE = 1, DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACED = 2, DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACED_UPPERFIELDFIRST = 2, DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACED_LOWERFIELDFIRST = 3, DISPLAYCONFIG_SCANLINE_ORDERING_FORCE_UINT32 = -1 }; enum _CM_SERVICE_NODE_TYPE { DriverType = 1, FileSystemType = 2, Win32ServiceOwnProcess = 16, Win32ServiceShareProcess = 32, AdapterType = 4, RecognizerType = 8 }; enum _APTTYPE { APTTYPE_CURRENT = -1, APTTYPE_STA = 0, APTTYPE_MTA = 1, APTTYPE_NA = 2, APTTYPE_MAINSTA = 3 }; enum _CM_SERVICE_LOAD_TYPE { BootLoad = 0, SystemLoad = 1, AutoLoad = 2, DemandLoad = 3, DisableLoad = 4 }; enum _THREAD_INFORMATION_CLASS { ThreadMemoryPriority = 0, ThreadInformationClassMax = 1 }; enum _SID_NAME_USE { SidTypeUser = 1, SidTypeGroup = 2, SidTypeDomain = 3, SidTypeAlias = 4, SidTypeWellKnownGroup = 5, SidTypeDeletedAccount = 6, SidTypeInvalid = 7, SidTypeUnknown = 8, SidTypeComputer = 9, SidTypeLabel = 10 }; enum tagFUNCFLAGS { FUNCFLAG_FRESTRICTED = 1, FUNCFLAG_FSOURCE = 2, FUNCFLAG_FBINDABLE = 4, FUNCFLAG_FREQUESTEDIT = 8, FUNCFLAG_FDISPLAYBIND = 16, FUNCFLAG_FDEFAULTBIND = 32, FUNCFLAG_FHIDDEN = 64, FUNCFLAG_FUSESGETLASTERROR = 128, FUNCFLAG_FDEFAULTCOLLELEM = 256, FUNCFLAG_FUIDEFAULT = 512, FUNCFLAG_FNONBROWSABLE = 1024, FUNCFLAG_FREPLACEABLE = 2048, FUNCFLAG_FIMMEDIATEBIND = 4096 }; enum tagOLEMISC { OLEMISC_RECOMPOSEONRESIZE = 1, OLEMISC_ONLYICONIC = 2, OLEMISC_INSERTNOTREPLACE = 4, OLEMISC_STATIC = 8, OLEMISC_CANTLINKINSIDE = 16, OLEMISC_CANLINKBYOLE1 = 32, OLEMISC_ISLINKOBJECT = 64, OLEMISC_INSIDEOUT = 128, OLEMISC_ACTIVATEWHENVISIBLE = 256, OLEMISC_RENDERINGISDEVICEINDEPENDENT = 512, OLEMISC_INVISIBLEATRUNTIME = 1024, OLEMISC_ALWAYSRUN = 2048, OLEMISC_ACTSLIKEBUTTON = 4096, OLEMISC_ACTSLIKELABEL = 8192, OLEMISC_NOUIACTIVATE = 16384, = 32770 }; enum _THREAD_UMS_INFORMATION_COMMAND { UmsInformationCommandInvalid = 0, UmsInformationCommandAttach = 1, UmsInformationCommandDetach = 2 }; enum tagCALLCATEGORY { CALLCAT_NOCALL = 0, CALLCAT_SYNCHRONOUS = 1, CALLCAT_ASYNC = 2, CALLCAT_INPUTSYNC = 3, CALLCAT_INTERNALSYNC = 4, CALLCAT_INTERNALINPUTSYNC = 5, CALLCAT_SCMCALL = 6 }; enum tagGLOBALOPT_EH_VALUES { COMGLB_EXCEPTION_HANDLE = 0, COMGLB_EXCEPTION_DONOT_HANDLE_FATAL = 1, COMGLB_EXCEPTION_DONOT_HANDLE = 1, COMGLB_EXCEPTION_DONOT_HANDLE_ANY = 2 }; enum tagXMLEMEM_TYPE { XMLELEMTYPE_ELEMENT = 0, XMLELEMTYPE_TEXT = 1, XMLELEMTYPE_COMMENT = 2, XMLELEMTYPE_DOCUMENT = 3, XMLELEMTYPE_DTD = 4, XMLELEMTYPE_PI = 5, XMLELEMTYPE_OTHER = 6 }; enum _MEMORY_INFORMATION_CLASS { MemoryBasicInformation = 0, MemoryWorkingSetInformation = 1, MemoryMappedFilenameInformation = 2, MemoryRegionInformation = 3, MemoryWorkingSetExInformation = 4 }; enum _tagPI_FLAGS { PI_PARSE_URL = 1, PI_FILTER_MODE = 2, PI_FORCE_ASYNC = 4, PI_USE_WORKERTHREAD = 8, PI_MIMEVERIFICATION = 16, PI_CLSIDLOOKUP = 32, PI_DATAPROGRESS = 64, PI_SYNCHRONOUS = 128, PI_APARTMENTTHREADED = 256, PI_CLASSINSTALL = 512, PI_PASSONBINDCTX = 8192, = 32770 }; enum _SECTION_INFORMATION_CLASS { SectionBasicInformation = 0, SectionImageInformation = 1, SectionRelocationInformation = 2, MaxSectionInfoClass = 3 }; enum IMPORT_OBJECT_NAME_TYPE { IMPORT_OBJECT_ORDINAL = 0, IMPORT_OBJECT_NAME = 1, IMPORT_OBJECT_NAME_NO_PREFIX = 2, IMPORT_OBJECT_NAME_UNDECORATE = 3 }; enum XLAT_SIDE { XLAT_SERVER = 1, XLAT_CLIENT = 2 }; enum _DEVICE_POWER_STATE { PowerDeviceUnspecified = 0, PowerDeviceD0 = 1, PowerDeviceD1 = 2, PowerDeviceD2 = 3, PowerDeviceD3 = 4, PowerDeviceMaximum = 5 }; enum _TRANSACTIONMANAGER_INFORMATION_CLASS { TransactionManagerBasicInformation = 0, TransactionManagerLogInformation = 1, TransactionManagerLogPathInformation = 2, TransactionManagerRecoveryInformation = 4, TransactionManagerOnlineProbeInformation = 3, TransactionManagerOldestTransactionInformation = 5 }; /* enum { LdrpNoDevice = 0, LdrpWebDAV = 1, LdrpRemote = 2, LdrpAnyDevice = -1, LdrpAnyDevice2bit = 3 }; */ enum _NT_PRODUCT_TYPE { NtProductWinNt = 1, NtProductLanManNt = 2, NtProductServer = 3 }; enum _COPYFILE2_COPY_PHASE { COPYFILE2_PHASE_NONE = 0, COPYFILE2_PHASE_PREPARE_SOURCE = 1, COPYFILE2_PHASE_PREPARE_DEST = 2, COPYFILE2_PHASE_READ_SOURCE = 3, COPYFILE2_PHASE_WRITE_DESTINATION = 4, COPYFILE2_PHASE_SERVER_COPY = 5, COPYFILE2_PHASE_NAMEGRAFT_COPY = 6, COPYFILE2_PHASE_MAX = 7 }; enum __MIDL_IBindStatusCallback_0003 { BINDF_ASYNCHRONOUS = 1, BINDF_ASYNCSTORAGE = 2, BINDF_NOPROGRESSIVERENDERING = 4, BINDF_OFFLINEOPERATION = 8, BINDF_GETNEWESTVERSION = 16, BINDF_NOWRITECACHE = 32, BINDF_NEEDFILE = 64, BINDF_PULLDATA = 128, BINDF_IGNORESECURITYPROBLEM = 256, BINDF_RESYNCHRONIZE = 512, BINDF_HYPERLINK = 1024, BINDF_NO_UI = 2048, BINDF_SILENTOPERATION = 4096, BINDF_PRAGMA_NO_CACHE = 8192, BINDF_GETCLASSOBJECT = 16384, = 32770 }; enum _RTL_GENERIC_COMPARE_RESULTS { GenericLessThan = 0, GenericGreaterThan = 1, GenericEqual = 2 }; enum tagCOWAIT_FLAGS { COWAIT_WAITALL = 1, COWAIT_ALERTABLE = 2, COWAIT_INPUTAVAILABLE = 4, COWAIT_DISPATCH_CALLS = 8, COWAIT_DISPATCH_WINDOW_MESSAGES = 16, REAL_COWAIT_ENABLECALLREENTRANCY = 8, COWAIT_ENABLEWINDOWMESSAGES = 16, COWAIT_ENABLECALLREENTRANCY = 24 }; enum _AUDIT_EVENT_TYPE { AuditEventObjectAccess = 0, AuditEventDirectoryServiceAccess = 1 }; enum tagDOMNodeType { NODE_INVALID = 0, NODE_ELEMENT = 1, NODE_ATTRIBUTE = 2, NODE_TEXT = 3, NODE_CDATA_SECTION = 4, NODE_ENTITY_REFERENCE = 5, NODE_ENTITY = 6, NODE_PROCESSING_INSTRUCTION = 7, NODE_COMMENT = 8, NODE_DOCUMENT = 9, NODE_DOCUMENT_TYPE = 10, NODE_DOCUMENT_FRAGMENT = 11, NODE_NOTATION = 12 }; enum _TRANSACTION_INFORMATION_CLASS { TransactionBasicInformation = 0, TransactionPropertiesInformation = 1, TransactionEnlistmentInformation = 2, TransactionSuperiorEnlistmentInformation = 3, TransactionBindInformation = 4, TransactionDTCPrivateInformation = 5 }; enum _PLUGPLAY_EVENT_CATEGORY { HardwareProfileChangeEvent = 0, TargetDeviceChangeEvent = 1, DeviceClassChangeEvent = 2, CustomDeviceEvent = 3, DeviceInstallEvent = 4, DeviceArrivalEvent = 5, VetoEvent = 6, BlockedDriverEvent = 7, InvalidIDEvent = 8, DevicePropertyChangeEvent = 9, DeviceInstanceRemovalEvent = 10, DeviceInstanceStartedEvent = 11, MaxPlugEventCategory = 12 }; enum tagCALLCONV { CC_FASTCALL = 0, CC_CDECL = 1, CC_MSCPASCAL = 2, CC_PASCAL = 2, CC_MACPASCAL = 3, CC_STDCALL = 4, CC_FPFASTCALL = 5, CC_SYSCALL = 6, CC_MPWCDECL = 7, CC_MPWPASCAL = 8, CC_MAX = 9 }; enum tagSTATFLAG { STATFLAG_DEFAULT = 0, STATFLAG_NONAME = 1, STATFLAG_NOOPEN = 2 }; enum tagRpcCallType { rctInvalid = 0, rctNormal = 1, rctTraining = 2, rctGuaranteed = 3 }; enum _IRQ_DEVICE_POLICY { IrqPolicyMachineDefault = 0, IrqPolicyAllCloseProcessors = 1, IrqPolicyOneCloseProcessor = 2, IrqPolicyAllProcessorsInMachine = 3, IrqPolicySpecifiedProcessors = 4, IrqPolicySpreadMessagesAcrossAllProcessors = 5 }; enum tagACTIVATION_FLAGS { ACTVFLAGS_NONE = 0, ACTVFLAGS_DISABLE_AAA = 2, ACTVFLAGS_ACTIVATE_32_BIT_SERVER = 4, ACTVFLAGS_ACTIVATE_64_BIT_SERVER = 8, ACTVFLAGS_SERVERSIDE_ACTIVATION = 16, ACTVFLAGS_NO_FAILURE_LOG = 32, ACTVFLAGS_ENABLE_CLOAKING = 64, ACTVFLAGS_REG_CATALOG_ONLY = 256, ACTVFLAGS_SXS_CATALOG_ONLY = 512, ACTVFLAGS_WINRT_LOCAL_SERVER = 1024, ACTVFLAGS_WINRT_PER_USER_OK = 2048, ACTVFLAGS_ACTIVATE_PSCLSID_FROM_PACKAGE = 4096, ACTVFLAGS_APPCONTAINER = 8192, ACTVFLAGS_IS_SXS_CLASS = 16384, = 32770 }; enum _LDR_DDAG_STATE { LdrModulesMerged = -1, LdrModulesInitError = -1, LdrModulesSnapError = -1, LdrModulesUnloaded = -1, LdrModulesUnloading = -1, LdrModulesPlaceHolder = 0, LdrModulesMapping = 1, LdrModulesMapped = 2, LdrModulesWaitingForDependencies = 3, LdrModulesSnapping = 4, LdrModulesSnapped = 5, LdrModulesCondensed = 6, LdrModulesReadyToInit = 7, LdrModulesInitializing = 8, LdrModulesReadyToRun = 9 }; enum tagOLETLSFLAGS { OLETLS_LOCALTID = 1, OLETLS_UUIDINITIALIZED = 2, OLETLS_INTHREADDETACH = 4, OLETLS_CHANNELTHREADINITIALZED = 8, OLETLS_WOWTHREAD = 16, OLETLS_THREADUNINITIALIZING = 32, OLETLS_DISABLE_OLE1DDE = 64, OLETLS_APARTMENTTHREADED = 128, OLETLS_MULTITHREADED = 256, OLETLS_IMPERSONATING = 512, OLETLS_DISABLE_EVENTLOGGER = 1024, OLETLS_INNEUTRALAPT = 2048, OLETLS_DISPATCHTHREAD = 4096, OLETLS_HOSTTHREAD = 8192, OLETLS_ALLOWCOINIT = 16384, = 32770 }; enum _ACTIVATION_CONTEXT_INFO_CLASS { ActivationContextBasicInformation = 1, ActivationContextDetailedInformation = 2, AssemblyDetailedInformationInActivationContext = 3, FileInformationInAssemblyOfAssemblyInActivationContext = 4, RunlevelInformationInActivationContext = 5, CompatibilityInformationInActivationContext = 6, ActivationContextManifestResourceName = 7, MaxActivationContextInfoClass = 8, AssemblyDetailedInformationInActivationContxt = 3, FileInformationInAssemblyOfAssemblyInActivationContxt = 4 }; /* enum __MIDL_IBindStatusCallback_0005 { BINDINFO_OPTIONS_WININETFLAG = Unavail }; */ enum _SYSTEM_MEMORY_LIST_COMMAND { MemoryCaptureAccessedBits = 0, MemoryCaptureAndResetAccessedBits = 1, MemoryEmptyWorkingSets = 2, MemoryFlushModifiedList = 3, MemoryPurgeStandbyList = 4, MemoryPurgeLowPriorityStandbyList = 5, MemoryCommandMax = 6 }; enum _FSINFOCLASS { FileFsVolumeInformation = 1, FileFsLabelInformation = 2, FileFsSizeInformation = 3, FileFsDeviceInformation = 4, FileFsAttributeInformation = 5, FileFsControlInformation = 6, FileFsFullSizeInformation = 7, FileFsObjectIdInformation = 8, FileFsDriverPathInformation = 9, FileFsVolumeFlagsInformation = 10, FileFsSectorSizeInformation = 11, FileFsMaximumInformation = 12 }; enum _PROCESS_MITIGATION_POLICY { ProcessDEPPolicy = 0, ProcessASLRPolicy = 1, ProcessStackCheckPolicy = 2, ProcessStrictHandleCheckPolicy = 3, ProcessSystemCallDisablePolicy = 4, MaxProcessMitigationPolicy = 5 }; enum _WATCHDOG_HANDLER_ACTION { WdActionSetTimeoutValue = 0, WdActionQueryTimeoutValue = 1, WdActionResetTimer = 2, WdActionStopTimer = 3, WdActionStartTimer = 4, WdActionSetTriggerAction = 5, WdActionQueryTriggerAction = 6, WdActionQueryState = 7, WdActionSleep = 8, WdActionWake = 9, WdActionMarkHiberPhase = 10 }; enum _WORKERFACTORYINFOCLASS { WorkerFactoryTimeout = 0, WorkerFactoryRetryTimeout = 1, WorkerFactoryIdleTimeout = 2, WorkerFactoryBindingCount = 3, WorkerFactoryThreadMinimum = 4, WorkerFactoryThreadMaximum = 5, WorkerFactoryPaused = 6, WorkerFactoryBasicInformation = 7, WorkerFactoryAdjustThreadGoal = 8, WorkerFactoryCallbackType = 9, WorkerFactoryStackInformation = 10, MaxWorkerFactoryInfoClass = 11 }; enum PO_WAKE_SOURCE_TYPE { DeviceWakeSourceType = 0, FixedWakeSourceType = 1, TimerWakeSourceType = 2 }; enum _RPC_NOTIFICATIONS { RpcNotificationCallNone = 0, RpcNotificationClientDisconnect = 1, RpcNotificationCallCancel = 2 }; enum tagVARKIND { VAR_PERINSTANCE = 0, VAR_STATIC = 1, VAR_CONST = 2, VAR_DISPATCH = 3 }; enum _DEP_SYSTEM_POLICY_TYPE { DEPPolicyAlwaysOff = 0, DEPPolicyAlwaysOn = 1, DEPPolicyOptIn = 2, DEPPolicyOptOut = 3, DEPTotalPolicyCount = 4 }; enum tagCPFLAGS { CPFLAG_NONE = 0, CPFLAG_PROPAGATE = 1, CPFLAG_EXPOSE = 2, CPFLAG_ENVOY = 4, CPFLAG_MONITORSTUB = 8, CPFLAG_MONITORPROXY = 16, CPFLAG_DONTCOMPARE = 32 }; enum tagEOLE_AUTHENTICATION_CAPABILITIES { EOAC_NONE = 0, EOAC_MUTUAL_AUTH = 1, EOAC_STATIC_CLOAKING = 32, EOAC_DYNAMIC_CLOAKING = 64, EOAC_ANY_AUTHORITY = 128, EOAC_MAKE_FULLSIC = 256, EOAC_DEFAULT = 2048, EOAC_SECURE_REFS = 2, EOAC_ACCESS_CONTROL = 4, EOAC_APPID = 8, EOAC_DYNAMIC = 16, EOAC_REQUIRE_FULLSIC = 512, EOAC_AUTO_IMPERSONATE = 1024, EOAC_NO_CUSTOM_MARSHAL = 8192, EOAC_DISABLE_AAA = 4096 }; enum _KEY_SET_INFORMATION_CLASS { KeyWriteTimeInformation = 0, KeyWow64FlagsInformation = 1, KeyControlFlagsInformation = 2, KeySetVirtualizationInformation = 3, KeySetDebugInformation = 4, KeySetHandleTagsInformation = 5, MaxKeySetInfoClass = 6 }; enum DISPLAYCONFIG_VIDEO_OUTPUT_TECHNOLOGY { DISPLAYCONFIG_OUTPUT_TECHNOLOGY_OTHER = -1, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_HD15 = 0, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_SVIDEO = 1, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_COMPOSITE_VIDEO = 2, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_COMPONENT_VIDEO = 3, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_DVI = 4, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_HDMI = 5, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_LVDS = 6, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_D_JPN = 8, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_SDI = 9, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_DISPLAYPORT_EXTERNAL = 10, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_DISPLAYPORT_EMBEDDED = 11, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_UDI_EXTERNAL = 12, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_UDI_EMBEDDED = 13, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_SDTVDONGLE = 14, = 32771 }; enum VERIFIER_MODE { VERIFIER_MODE_UNUSED = 0, VERIFIER_MODE_TRIAGE = 1, VERIFIER_MODE_FIELD = 2, VERIFIER_MODE_LOGO = 3, VERIFIER_MODE_TEST = 4 }; enum _SHRINK_VOLUME_REQUEST_TYPES { ShrinkPrepare = 1, ShrinkCommit = 2, ShrinkAbort = 3 }; enum __MIDL_IBindStatusCallbackEx_0001 { BINDF2_DISABLEBASICOVERHTTP = 1, BINDF2_DISABLEAUTOCOOKIEHANDLING = 2, BINDF2_READ_DATA_GREATER_THAN_4GB = 4, BINDF2_DISABLE_HTTP_REDIRECT_XSECURITYID = 8, BINDF2_SETDOWNLOADMODE = 32, BINDF2_DISABLE_HTTP_REDIRECT_CACHING = 64, /* BINDF2_RESERVED_E = Unavail */ }; enum _RTL_UMS_SCHEDULER_REASON { UmsSchedulerStartup = 0, UmsSchedulerThreadBlocked = 1, UmsSchedulerThreadYield = 2 }; enum _KTMOBJECT_TYPE { KTMOBJECT_TRANSACTION = 0, KTMOBJECT_TRANSACTION_MANAGER = 1, KTMOBJECT_RESOURCE_MANAGER = 2, KTMOBJECT_ENLISTMENT = 3, KTMOBJECT_INVALID = 4 }; enum _SE_LEARNING_MODE_DATA_TYPE { SeLearningModeInvalidType = 0, SeLearningModeSettings = 1, SeLearningModeMax = 2 }; enum tagPOINTER_DEVICE_TYPE { POINTER_DEVICE_TYPE_INTEGRATED_PEN = 1, POINTER_DEVICE_TYPE_EXTERNAL_PEN = 2, POINTER_DEVICE_TYPE_TOUCH = 3, POINTER_DEVICE_TYPE_MAX = -1 }; enum _TABLE_SEARCH_RESULT { TableEmptyTree = 0, TableFoundNode = 1, TableInsertAsLeft = 2, TableInsertAsRight = 3 }; enum _SYSTEM_POWER_STATE { PowerSystemUnspecified = 0, PowerSystemWorking = 1, PowerSystemSleeping1 = 2, PowerSystemSleeping2 = 3, PowerSystemSleeping3 = 4, PowerSystemHibernate = 5, PowerSystemShutdown = 6, PowerSystemMaximum = 7 }; enum _WNF_STATE_NAME_INFORMATION { WnfInfoStateNameExist = 0, WnfInfoSubscribersPresent = 1, WnfInfoIsQuiescent = 2 }; enum _SHUTDOWN_ACTION { ShutdownNoReboot = 0, ShutdownReboot = 1, ShutdownPowerOff = 2 }; enum tagOLECLOSE { OLECLOSE_SAVEIFDIRTY = 0, OLECLOSE_NOSAVE = 1, OLECLOSE_PROMPTSAVE = 2 }; enum tagExtendedErrorParamTypes { eeptAnsiString = 1, eeptUnicodeString = 2, eeptLongVal = 3, eeptShortVal = 4, eeptPointerVal = 5, eeptNone = 6, eeptBinary = 7 }; enum __MIDL_IInternetZoneManager_0002 { ZAFLAGS_CUSTOM_EDIT = 1, ZAFLAGS_ADD_SITES = 2, ZAFLAGS_REQUIRE_VERIFICATION = 4, ZAFLAGS_INCLUDE_PROXY_OVERRIDE = 8, ZAFLAGS_INCLUDE_INTRANET_SITES = 16, ZAFLAGS_NO_UI = 32, ZAFLAGS_SUPPORTS_VERIFICATION = 64, ZAFLAGS_UNC_AS_INTRANET = 128, ZAFLAGS_DETECT_INTRANET = 256, /* ZAFLAGS_USE_LOCKED_ZONES = Unavail */ }; enum _FINDEX_SEARCH_OPS { FindExSearchNameMatch = 0, FindExSearchLimitToDirectories = 1, FindExSearchLimitToDevices = 2, FindExSearchMaxSearchOp = 3 }; enum _RTL_VERIFIER_INFORMATION_CLASS { VerifierAllInformation = 0, VerifierPageHeapsInformation = 1, VerifierRuntimeFlagsInformation = 2, VerifierFaultInjectInformation = 3, MaxVerifierInformation = 4 }; enum _PORT_INFORMATION_CLASS { PortBasicInformation = 0, PortDumpInformation = 1 }; enum tagINPUT_MESSAGE_DEVICE_TYPE { IMDT_UNAVAILABLE = 0, IMDT_KEYBOARD = 1, IMDT_MOUSE = 2, IMDT_TOUCH = 4, IMDT_PEN = 8 }; enum tagSYSKIND { SYS_WIN16 = 0, SYS_WIN32 = 1, SYS_MAC = 2, SYS_WIN64 = 3 }; enum _HARDERROR_RESPONSE_OPTION { OptionAbortRetryIgnore = 0, OptionOk = 1, OptionOkCancel = 2, OptionRetryCancel = 3, OptionYesNo = 4, OptionYesNoCancel = 5, OptionShutdownSystem = 6, OptionOkNoWait = 7, OptionCancelTryContinue = 8 }; enum DISPLAYCONFIG_TOPOLOGY_ID { DISPLAYCONFIG_TOPOLOGY_INTERNAL = 1, DISPLAYCONFIG_TOPOLOGY_CLONE = 2, DISPLAYCONFIG_TOPOLOGY_EXTEND = 4, DISPLAYCONFIG_TOPOLOGY_EXTERNAL = 8, DISPLAYCONFIG_TOPOLOGY_FORCE_UINT32 = -1 }; enum _PROCESS_INFORMATION_CLASS { ProcessMemoryPriority = 0, ProcessInformationClassMax = 1 }; enum _SAFER_IDENTIFICATION_TYPES { SaferIdentityDefault = 0, SaferIdentityTypeImageName = 1, SaferIdentityTypeImageHash = 2, SaferIdentityTypeUrlZone = 3, SaferIdentityTypeCertificate = 4 }; enum tagApplicationType { ServerApplication = 0, LibraryApplication = 1 }; enum __MIDL_IUri_0002 { Uri_HOST_UNKNOWN = 0, Uri_HOST_DNS = 1, Uri_HOST_IPV4 = 2, Uri_HOST_IPV6 = 3, Uri_HOST_IDN = 4 }; enum tagDESCKIND { DESCKIND_NONE = 0, DESCKIND_FUNCDESC = 1, DESCKIND_VARDESC = 2, DESCKIND_TYPECOMP = 3, DESCKIND_IMPLICITAPPOBJ = 4, DESCKIND_MAX = 5 }; enum tagPENDINGTYPE { PENDINGTYPE_TOPLEVEL = 1, PENDINGTYPE_NESTED = 2 }; enum _MANDATORY_LEVEL { MandatoryLevelUntrusted = 0, MandatoryLevelLow = 1, MandatoryLevelMedium = 2, MandatoryLevelHigh = 3, MandatoryLevelSystem = 4, MandatoryLevelSecureProcess = 5, MandatoryLevelCount = 6 }; enum _SYSTEM_PIXEL_FORMAT { SystemPixelFormatUnknown = 0, SystemPixelFormatR8G8B8 = 1, SystemPixelFormatR8G8B8X8 = 2, SystemPixelFormatB8G8R8 = 3, SystemPixelFormatB8G8R8X8 = 4 }; enum tagGLOBALOPT_PROPERTIES { COMGLB_EXCEPTION_HANDLING = 1, COMGLB_APPID = 2, COMGLB_RPC_THREADPOOL_SETTING = 3, COMGLB_RO_SETTINGS = 4 }; enum __MIDL_IInternetSecurityManager_0002 { PUAFOUT_DEFAULT = 0, PUAFOUT_ISLOCKZONEPOLICY = 1 }; enum _CALLSOURCE { CALLSOURCE_CROSSAPT = 0, CALLSOURCE_CROSSCTX = 1 }; enum __MIDL_IBindStatusCallback_0004 { URL_ENCODING_NONE = 0, /* URL_ENCODING_ENABLE_UTF8 = Unavail */ }; enum STUB_PHASE { STUB_UNMARSHAL = 0, STUB_CALL_SERVER = 1, STUB_MARSHAL = 2, STUB_CALL_SERVER_NO_HRESULT = 3 }; enum tagThreadingModel { ApartmentThreaded = 0, FreeThreaded = 1, SingleThreaded = 2, BothThreaded = 3, NeutralThreaded = 4 }; enum tagCLSCTX { CLSCTX_INPROC_SERVER = 1, CLSCTX_INPROC_HANDLER = 2, CLSCTX_LOCAL_SERVER = 4, CLSCTX_INPROC_SERVER16 = 8, CLSCTX_REMOTE_SERVER = 16, CLSCTX_INPROC_HANDLER16 = 32, CLSCTX_RESERVED1 = 64, CLSCTX_RESERVED2 = 128, CLSCTX_RESERVED3 = 256, CLSCTX_RESERVED4 = 512, CLSCTX_NO_CODE_DOWNLOAD = 1024, CLSCTX_RESERVED5 = 2048, CLSCTX_NO_CUSTOM_MARSHAL = 4096, CLSCTX_ENABLE_CODE_DOWNLOAD = 8192, CLSCTX_NO_FAILURE_LOG = 16384, = 32770 }; enum _REG_ACTION { KeyAdded = 0, KeyRemoved = 1, KeyModified = 2 }; enum _BOOT_ENTROPY_SOURCE_RESULT_CODE { BootEntropySourceStructureUninitialized = 0, BootEntropySourceDisabledByPolicy = 1, BootEntropySourceNotPresent = 2, BootEntropySourceError = 3, BootEntropySourceSuccess = 4 }; enum IMPORT_OBJECT_TYPE { IMPORT_OBJECT_CODE = 0, IMPORT_OBJECT_DATA = 1, IMPORT_OBJECT_CONST = 2 }; enum _CSV_INTERNAL_CONTROL_OP { CsvInternalControlPrefetchRetrievalPointers = 0, CsvInternalControlQueryRetrievalPointers = 1, CsvInternalControlStartRedirectFile = 2, CsvInternalControlStopRedirectFile = 3, CsvInternalControlQueryRedirectState = 4, CsvInternalControlQueryFileStatistic = 5 }; enum tagFUNCKIND { FUNC_VIRTUAL = 0, FUNC_PUREVIRTUAL = 1, FUNC_NONVIRTUAL = 2, FUNC_STATIC = 3, FUNC_DISPATCH = 4 }; enum tagACTIVATION_STAGE { CLIENT_CONTEXT_STAGE = 1, CLIENT_MACHINE_STAGE = 2, SERVER_MACHINE_STAGE = 3, SERVER_PROCESS_STAGE = 4, SERVER_CONTEXT_STAGE = 5 }; enum _TRANSACTION_OUTCOME { TransactionOutcomeUndetermined = 1, TransactionOutcomeCommitted = 2, TransactionOutcomeAborted = 3 }; enum tagADVF { ADVF_NODATA = 1, ADVF_PRIMEFIRST = 2, ADVF_ONLYONCE = 4, ADVF_DATAONSTOP = 64, ADVFCACHE_NOHANDLER = 8, ADVFCACHE_FORCEBUILTIN = 16, ADVFCACHE_ONSAVE = 32 }; enum tagSTGTY { STGTY_STORAGE = 1, STGTY_STREAM = 2, STGTY_LOCKBYTES = 3, STGTY_PROPERTY = 4 }; enum _CM_SHARE_DISPOSITION { CmResourceShareUndetermined = 0, CmResourceShareDeviceExclusive = 1, CmResourceShareDriverExclusive = 2, CmResourceShareShared = 3 }; enum tagShutdownType { IdleShutdown = 0, ForcedShutdown = 1 }; enum tagRpcCallClientLocality { rcclInvalid = 0, rcclLocal = 1, rcclRemote = 2, rcclClientUnknownLocality = 3 }; enum tagDATADIR { DATADIR_GET = 1, DATADIR_SET = 2 }; enum tagPOINTER_INPUT_TYPE { PT_POINTER = 1, PT_TOUCH = 2, PT_PEN = 3, PT_MOUSE = 4 }; enum _COVERAGE_REQUEST_CODES { CoverageAllModules = 0, CoverageSearchByHash = 1, CoverageSearchByName = 2 }; enum _IO_PRIORITY_HINT { IoPriorityVeryLow = 0, IoPriorityLow = 1, IoPriorityNormal = 2, IoPriorityHigh = 3, IoPriorityCritical = 4, MaxIoPriorityTypes = 5 }; enum tagRunAsType { RunAsSpecifiedUser = 0, RunAsInteractiveUser = 1, RunAsLaunchingUser = 2 }; enum _APTTYPEQUALIFIER { APTTYPEQUALIFIER_NONE = 0, APTTYPEQUALIFIER_IMPLICIT_MTA = 1, APTTYPEQUALIFIER_NA_ON_MTA = 2, APTTYPEQUALIFIER_NA_ON_STA = 3, APTTYPEQUALIFIER_NA_ON_IMPLICIT_MTA = 4, APTTYPEQUALIFIER_NA_ON_MAINSTA = 5, APTTYPEQUALIFIER_APPLICATION_STA = 6 }; enum _FINDEX_INFO_LEVELS { FindExInfoStandard = 0, FindExInfoBasic = 1, FindExInfoMaxInfoLevel = 2 }; enum tagTYMED { TYMED_HGLOBAL = 1, TYMED_FILE = 2, TYMED_ISTREAM = 4, TYMED_ISTORAGE = 8, TYMED_GDI = 16, TYMED_MFPICT = 32, TYMED_ENHMF = 64, TYMED_NULL = 0 }; enum _DEBUG_CONTROL_SPACE_ITEM { DEBUG_CONTROL_SPACE_PCR = 0, DEBUG_CONTROL_SPACE_PRCB = 1, DEBUG_CONTROL_SPACE_KSPECIAL = 2, DEBUG_CONTROL_SPACE_THREAD = 3, DEBUG_CONTROL_SPACE_MAXIMUM = 4 }; enum _SECURITY_IMPERSONATION_LEVEL { SecurityAnonymous = 0, SecurityIdentification = 1, SecurityImpersonation = 2, SecurityDelegation = 3 }; enum _CM_ERROR_CONTROL_TYPE { IgnoreError = 0, NormalError = 1, SevereError = 2, CriticalError = 3 }; enum _TOKEN_ELEVATION_TYPE { TokenElevationTypeDefault = 1, TokenElevationTypeFull = 2, TokenElevationTypeLimited = 3 }; enum _HARDERROR_RESPONSE { ResponseReturnToCaller = 0, ResponseNotHandled = 1, ResponseAbort = 2, ResponseCancel = 3, ResponseIgnore = 4, ResponseNo = 5, ResponseOk = 6, ResponseRetry = 7, ResponseYes = 8, ResponseTryAgain = 9, ResponseContinue = 10 }; enum __MIDL___MIDL_itf_activate_0000_0011_0001 { ST_SERVER = 1, ST_OLDSURROGATE = 2, ST_COMPLUSAPP = 3, ST_SERVICE = 4 }; enum tagUSERCLASSTYPE { USERCLASSTYPE_FULL = 1, USERCLASSTYPE_SHORT = 2, USERCLASSTYPE_APPNAME = 3 }; enum tagSF_TYPE { SF_ERROR = 10, SF_I1 = 16, SF_I2 = 2, SF_I4 = 3, SF_I8 = 20, SF_BSTR = 8, SF_UNKNOWN = 13, SF_DISPATCH = 9, SF_VARIANT = 12, SF_RECORD = 36, €SF_HAVEIID = 32770 }; enum tagPreferredServerBitness { SERVER_BITNESS_DEFAULT = 0, SERVER_BITNESS_FOLLOW_CLIENT = 1, SERVER_BITNESS_32BIT = 2, SERVER_BITNESS_64BIT = 3 }; enum tagAR_STATE { AR_ENABLED = 0, AR_DISABLED = 1, AR_SUPPRESSED = 2, AR_REMOTESESSION = 4, AR_MULTIMON = 8, AR_NOSENSOR = 16, AR_NOT_SUPPORTED = 32 }; enum _RESOURCEMANAGER_INFORMATION_CLASS { ResourceManagerBasicInformation = 0, ResourceManagerCompletionInformation = 1 }; enum _DMA_SPEED { Compatible = 0, TypeA = 1, TypeB = 2, TypeC = 3, TypeF = 4, MaximumDmaSpeed = 5 }; enum _QUERY_FILE_LAYOUT_FILTER_TYPE { QUERY_FILE_LAYOUT_FILTER_TYPE_NONE = 0, QUERY_FILE_LAYOUT_FILTER_TYPE_CLUSTERS = 1, QUERY_FILE_LAYOUT_FILTER_TYPE_FILEID = 2, QUERY_FILE_LAYOUT_NUM_FILTER_TYPES = 3 }; enum _TIMER_SET_INFORMATION_CLASS { TimerSetCoalescableTimer = 0, MaxTimerInfoClass = 1 }; enum tagSTGMOVE { STGMOVE_MOVE = 0, STGMOVE_COPY = 1, STGMOVE_SHALLOWCOPY = 2 }; enum _IRQ_GROUP_POLICY { GroupAffinityAllGroupZero = 0, GroupAffinityDontCare = 1 }; enum _GET_FILEEX_INFO_LEVELS { GetFileExInfoStandard = 0, GetFileExMaxInfoLevel = 1 }; enum RTL_BSD_ITEM_TYPE { RtlBsdItemVersionNumber = 0, RtlBsdItemProductType = 1, RtlBsdItemAabEnabled = 2, RtlBsdItemAabTimeout = 3, RtlBsdItemBootGood = 4, RtlBsdItemBootShutdown = 5, RtlBsdSleepInProgress = 6, RtlBsdPowerTransition = 7, RtlBsdItemBootAttemptCount = 8, RtlBsdItemMax = 9 }; enum _PS_WAKE_REASON { PsWakeReasonUser = 0, PsWakeReasonDevice = 1, PsWakeReasonKernel = 2, PsWakeReasonPower = 3, PsMaxWakeReasons = 4 }; enum _FP_IEEE_COMPARE_RESULT { FpCompareEqual = 0, FpCompareGreater = 1, FpCompareLess = 2, FpCompareUnordered = 3 }; enum _tagOIBDG_FLAGS { OIBDG_APARTMENTTHREADED = 256, OIBDG_DATAONLY = 4096 }; enum DSAFIPSVERSION_ENUM { DSA_FIPS186_2 = 0, DSA_FIPS186_3 = 1 }; enum tagCoModuleType { CO_MODULE_UNKNOWN = 0, CO_MODULE_32BIT = 1, CO_MODULE_64BIT = 2 }; enum tagURLZONE { URLZONE_INVALID = -1, URLZONE_PREDEFINED_MIN = 0, URLZONE_LOCAL_MACHINE = 0, URLZONE_INTRANET = 1, URLZONE_TRUSTED = 2, URLZONE_INTERNET = 3, URLZONE_UNTRUSTED = 4, URLZONE_PREDEFINED_MAX = 999, URLZONE_USER_MIN = 1000, URLZONE_USER_MAX = 10000 }; enum RpcProxyPerfCounters { RpcCurrentUniqueUser = 1, RpcBackEndConnectionAttempts = 2, RpcBackEndConnectionFailed = 3, RpcRequestsPerSecond = 4, RpcIncomingConnections = 5, RpcIncomingBandwidth = 6, RpcOutgoingBandwidth = 7, RpcAttemptedLbsDecisions = 8, RpcFailedLbsDecisions = 9, RpcAttemptedLbsMessages = 10, RpcFailedLbsMessages = 11, RpcLastCounter = 12 }; enum ASSOCCLASS { ASSOCCLASS_SHELL_KEY = 0, ASSOCCLASS_PROGID_KEY = 1, ASSOCCLASS_PROGID_STR = 2, ASSOCCLASS_CLSID_KEY = 3, ASSOCCLASS_CLSID_STR = 4, ASSOCCLASS_APP_KEY = 5, ASSOCCLASS_APP_STR = 6, ASSOCCLASS_SYSTEM_STR = 7, ASSOCCLASS_FOLDER = 8, ASSOCCLASS_STAR = 9 }; enum tagFEEDBACK_TYPE { FEEDBACK_TOUCH_CONTACTVISUALIZATION = 1, FEEDBACK_PEN_BARRELVISUALIZATION = 2, FEEDBACK_PEN_TAP = 3, FEEDBACK_PEN_DOUBLETAP = 4, FEEDBACK_PEN_PRESSANDHOLD = 5, FEEDBACK_PEN_RIGHTTAP = 6, FEEDBACK_TOUCH_TAP = 7, FEEDBACK_TOUCH_DOUBLETAP = 8, FEEDBACK_TOUCH_PRESSANDHOLD = 9, FEEDBACK_TOUCH_RIGHTTAP = 10, FEEDBACK_GESTURE_PRESSANDTAP = 11, FEEDBACK_MAX = -1 }; enum PS_CREATE_STATE { PsCreateInitialState = 0, PsCreateFailOnFileOpen = 1, PsCreateFailOnSectionCreate = 2, PsCreateFailExeFormat = 3, PsCreateFailMachineMismatch = 4, PsCreateFailExeName = 5, PsCreateSuccess = 6, PsCreateMaximumStates = 7 }; enum POWER_USER_PRESENCE_TYPE { UserNotPresent = 0, UserPresent = 1, UserUnknown = 255 }; enum _RPC_ASYNC_EVENT { RpcCallComplete = 0, RpcSendComplete = 1, RpcReceiveComplete = 2, RpcClientDisconnect = 3, RpcClientCancel = 4 }; enum _RTL_STACK_TRACE_DATABASE_CONTROL { BackTraceDatabaseCreate = 0, BackTraceDatabaseDelete = 1, BackTraceDatabaseFlush = 2, BackTraceDatabaseMaxControl = 3 }; enum tagTYSPEC { TYSPEC_CLSID = 0, TYSPEC_FILEEXT = 1, TYSPEC_MIMETYPE = 2, TYSPEC_FILENAME = 3, TYSPEC_PROGID = 4, TYSPEC_PACKAGENAME = 5, TYSPEC_OBJECTID = 6 }; enum _RTL_UMS_THREAD_INFO_CLASS { UmsThreadInvalidInfoClass = 0, UmsThreadUserContext = 1, UmsThreadPriority = 2, UmsThreadAffinity = 3, UmsThreadTeb = 4, UmsThreadIsSuspended = 5, UmsThreadIsTerminated = 6, UmsThreadMaxInfoClass = 7 }; enum _POWER_PLATFORM_ROLE { PlatformRoleUnspecified = 0, PlatformRoleDesktop = 1, PlatformRoleMobile = 2, PlatformRoleWorkstation = 3, PlatformRoleEnterpriseServer = 4, PlatformRoleSOHOServer = 5, PlatformRoleAppliancePC = 6, PlatformRolePerformanceServer = 7, PlatformRoleSlate = 8, PlatformRoleMaximum = 9 }; enum _ACCESS_REASON_TYPE { AccessReasonNone = 0, /* AccessReasonAllowedAce = Unavail */ }; enum tagLOCKTYPE { LOCK_WRITE = 1, LOCK_EXCLUSIVE = 2, LOCK_ONLYONCE = 4 }; enum _JOURNAL_INFORMATION_CLASS { JournalAbsoluteInformation = 0, JournalClientInformation = 1, MaxJournalInformation = 2 }; enum PIDMSI_STATUS_VALUE { PIDMSI_STATUS_NORMAL = 0, PIDMSI_STATUS_NEW = 1, PIDMSI_STATUS_PRELIM = 2, PIDMSI_STATUS_DRAFT = 3, PIDMSI_STATUS_INPROGRESS = 4, PIDMSI_STATUS_EDIT = 5, PIDMSI_STATUS_REVIEW = 6, PIDMSI_STATUS_PROOF = 7, PIDMSI_STATUS_FINAL = 8, PIDMSI_STATUS_OTHER = 32767 }; enum __MIDL_IMonikerProp_0001 { MIMETYPEPROP = 0, USE_SRC_URL = 1, CLASSIDPROP = 2, TRUSTEDDOWNLOADPROP = 3, POPUPLEVELPROP = 4 }; enum tagINVOKEKIND { INVOKE_FUNC = 1, INVOKE_PROPERTYGET = 2, INVOKE_PROPERTYPUT = 4, INVOKE_PROPERTYPUTREF = 8 }; enum _WNF_STATE_NAME_LIFETIME { WnfWellKnownStateName = 0, WnfPermanentStateName = 1, WnfPersistentStateName = 2, WnfTemporaryStateName = 3 }; enum _USER_MARSHAL_CB_TYPE { USER_MARSHAL_CB_BUFFER_SIZE = 0, USER_MARSHAL_CB_MARSHALL = 1, USER_MARSHAL_CB_UNMARSHALL = 2, USER_MARSHAL_CB_FREE = 3 }; enum tagEventLogSD { EventLog_MACHINEACCESSRESTRICTIONS = 0, EventLog_MACHINELAUNCHRESTRICTIONS = 1, EventLog_DEFAULTLAUNCHPERMISSIONS = 2, EventLog_DEFAULTACCESSPERMISSIONS = 3, EventLog_SERVERLAUNCHPERMISSIONS = 4, EventLog_SERVERACCESSPERMISSIONSREG = 5, EventLog_SERVERACCESSPERMISSIONSPROG = 6, EventLog_DONTCARE = 7 }; enum APPSTATE { ABSENT = 0, ASSIGNED = 1, PUBLISHED = 2 }; enum _PRT { PRT_IGNORE = 0, PRT_CREATE_NEW = 1, PRT_USE_THIS = 2, PRT_USE_THIS_ONLY = 3 }; enum tagCALLSTATE { CALLSTATE_NOT_IN_CALL = -1, CALLSTATE_DATA_NOT_AVAILABLE = 0 }; enum SYSGEOCLASS { GEOCLASS_NATION = 16, GEOCLASS_REGION = 14, GEOCLASS_ALL = 0 }; enum COMPARTMENT_ID { UNSPECIFIED_COMPARTMENT_ID = 0, DEFAULT_COMPARTMENT_ID = 1 }; enum _JOBOBJECT_RATE_CONTROL_TOLERANCE_INTERVAL { ToleranceIntervalShort = 1, ToleranceIntervalMedium = 2, ToleranceIntervalLong = 3 }; enum _UNWIND_OP_CODES { UWOP_PUSH_NONVOL = 0, UWOP_ALLOC_LARGE = 1, UWOP_ALLOC_SMALL = 2, UWOP_SET_FPREG = 3, UWOP_SAVE_NONVOL = 4, UWOP_SAVE_NONVOL_FAR = 5, UWOP_EPILOG = 6, UWOP_SPARE_CODE = 7, UWOP_SAVE_XMM128 = 8, UWOP_SAVE_XMM128_FAR = 9, UWOP_PUSH_MACHFRAME = 10 }; enum _NORM_FORM { NormalizationOther = 0, NormalizationC = 1, NormalizationD = 2, NormalizationKC = 5, NormalizationKD = 6 }; enum tagCOMSD { SD_LAUNCHPERMISSIONS = 0, SD_ACCESSPERMISSIONS = 1, SD_LAUNCHRESTRICTIONS = 2, SD_ACCESSRESTRICTIONS = 3 }; enum tagRpcLocalAddressFormat { rlafInvalid = 0, rlafIPv4 = 1, rlafIPv6 = 2 }; enum _ALTERNATIVE_ARCHITECTURE_TYPE { StandardDesign = 0, NEC98x86 = 1, EndAlternatives = 2 }; enum tagGLOBALOPT_RPCTP_VALUES { COMGLB_RPC_THREADPOOL_SETTING_DEFAULT_POOL = 0, COMGLB_RPC_THREADPOOL_SETTING_PRIVATE_POOL = 1 }; enum _EVENT_INFORMATION_CLASS { EventBasicInformation = 0 }; enum tagGLOBALOPT_RO_FLAGS { COMGLB_STA_MODALLOOP_REMOVE_TOUCH_MESSAGES = 1, COMGLB_STA_MODALLOOP_SHARED_QUEUE_REMOVE_INPUT_MESSAGES = 2, COMGLB_STA_MODALLOOP_SHARED_QUEUE_DONOT_REMOVE_INPUT_MESSAGES = 4 }; enum _PS_STD_HANDLE_STATE { PsNeverDuplicate = 0, PsRequestDuplicate = 1, PsAlwaysDuplicate = 2, PsMaxStdHandleStates = 3 }; enum RPC_ADDRESS_CHANGE_TYPE { PROTOCOL_NOT_LOADED = 1, PROTOCOL_LOADED = 2, PROTOCOL_ADDRESS_CHANGE = 3 }; enum _LOGICAL_PROCESSOR_RELATIONSHIP { RelationProcessorCore = 0, RelationNumaNode = 1, RelationCache = 2, RelationProcessorPackage = 3, RelationGroup = 4, ÿÿRelationAll = 32770 }; enum _REQUESTER_TYPE { KernelRequester = 0, UserProcessRequester = 1, UserSharedServiceRequester = 2 }; enum __MIDL___MIDL_itf_activate_0000_0011_0002 { SIT_RUNAS_SPECIFIC_USER = 1, SIT_RUNAS_INTERACTIVE = 2 }; enum _TP_LOG_LEVEL { TP_LOG_LEVEL_ERROR = 0, TP_LOG_LEVEL_WARNING = 1, TP_LOG_LEVEL_INFO = 2, TP_LOG_LEVEL_TRACE_ENTER = 3, TP_LOG_LEVEL_TRACE_LEAVE = 4 }; enum tagCONTEXTEVENT { CONTEXTEVENT_NONE = 0, CONTEXTEVENT_CALL = 1, CONTEXTEVENT_ENTER = 2, CONTEXTEVENT_LEAVE = 4, CONTEXTEVENT_RETURN = 8, CONTEXTEVENT_CALLFILLBUFFER = 16, CONTEXTEVENT_ENTERWITHBUFFER = 32, CONTEXTEVENT_LEAVEFILLBUFFER = 64, CONTEXTEVENT_RETURNWITHBUFFER = 128, CONTEXTEVENT_BEGINCALL = 256, CONTEXTEVENT_BEGINENTER = 512, CONTEXTEVENT_BEGINLEAVE = 1024, CONTEXTEVENT_BEGINRETURN = 2048, CONTEXTEVENT_FINISHCALL = 4096, CONTEXTEVENT_FINISHENTER = 8192, CONTEXTEVENT_FINISHLEAVE = 16384, = 32770 }; enum CWMO_FLAGS { CWMO_DISPATCH_CALLS = 1, CWMO_DISPATCH_WINDOW_MESSAGES = 2, REAL_CWMO_ENABLE_CALL_REENTRANCY = 1, CWMO_ENABLE_WINDOW_MESSAGES = 2, CWMO_ENABLE_CALL_REENTRANCY = 3 }; enum __MIDL_IBindStatusCallback_0001 { BINDVERB_GET = 0, BINDVERB_POST = 1, BINDVERB_PUT = 2, BINDVERB_CUSTOM = 3, BINDVERB_RESERVED1 = 4 }; enum _PROCESSOR_CACHE_TYPE { CacheUnified = 0, CacheInstruction = 1, CacheData = 2, CacheTrace = 3 }; enum DISPLAYCONFIG_ROTATION { DISPLAYCONFIG_ROTATION_IDENTITY = 1, DISPLAYCONFIG_ROTATION_ROTATE90 = 2, DISPLAYCONFIG_ROTATION_ROTATE180 = 3, DISPLAYCONFIG_ROTATION_ROTATE270 = 4, DISPLAYCONFIG_ROTATION_FORCE_UINT32 = -1 }; enum _MEMORY_RESERVE_TYPE { MemoryReserveUserApc = 0, MemoryReserveIoCompletion = 1, MemoryReserveTypeMax = 2 }; enum _FUNCTION_TABLE_TYPE { RF_SORTED = 0, RF_UNSORTED = 1, RF_CALLBACK = 2, RF_KERNEL_DYNAMIC = 3 }; enum ACTCTX_COMPATIBILITY_ELEMENT_TYPE { ACTCTX_COMPATIBILITY_ELEMENT_TYPE_UNKNOWN = 0, ACTCTX_COMPATIBILITY_ELEMENT_TYPE_OS = 1, ACTCTX_COMPATIBILITY_ELEMENT_TYPE_MITIGATION = 2 }; enum CreateStackTraceFlags { CREATESTACKTRACE_ONLYADDRESSES = 1 }; enum tagBINDSPEED { BINDSPEED_INDEFINITE = 1, BINDSPEED_MODERATE = 2, BINDSPEED_IMMEDIATE = 3 }; enum _EVENT_TYPE { NotificationEvent = 0, SynchronizationEvent = 1 }; enum _ERROR_SEVERITY_VALUE { ErrorRecoverable = 0, ErrorFatal = 1, ErrorCorrected = 2, ErrorOthers = 3 }; enum _USER_ACTIVITY_PRESENCE { PowerUserPresent = 0, PowerUserNotPresent = 1, PowerUserInactive = 2, PowerUserMaximum = 3, PowerUserInvalid = 3 }; enum __MIDL___MIDL_itf_activate_0000_0011_0003 { SPIF_COMPLUS = 1, SPIF_SUSPENDED = 2, SPIF_RETIRED = 4, SPIF_READY = 8, SPIF_PAUSED = 16 }; enum tagOBJFLAGS { OBJFLAGS_LINK = 1, OBJFLAGS_DOCUMENT = 2, OBJFLAGS_CONVERT = 4, OBJFLAGS_CACHEEMPTY = 8 }; enum tagDVASPECT { DVASPECT_CONTENT = 1, DVASPECT_THUMBNAIL = 2, DVASPECT_ICON = 4, DVASPECT_DOCPRINT = 8 }; enum tagLOCALFLAG { LOCALF_NONE = 0, LOCALF_NONNDR = 2048 }; enum tagSTDMSHLFLAGS { SMEXF_SERVER = 1, SMEXF_HANDLER = 2 }; enum _FILE_ID_TYPE { FileIdType = 0, ObjectIdType = 1, MaximumFileIdType = 2 }; enum tagOLEWHICHMK { OLEWHICHMK_CONTAINER = 1, OLEWHICHMK_OBJREL = 2, OLEWHICHMK_OBJFULL = 3 }; enum tagRPCOPT_PROPERTIES { COMBND_RPCTIMEOUT = 1, COMBND_SERVER_LOCALITY = 2 }; enum _EXCEPTION_DISPOSITION { ExceptionContinueExecution = 0, ExceptionContinueSearch = 1, ExceptionNestedException = 2, ExceptionCollidedUnwind = 3 }; enum _LINK_TRACKING_INFORMATION_TYPE { NtfsLinkTrackingInformation = 0, DfsLinkTrackingInformation = 1 }; enum _TIMER_TYPE { NotificationTimer = 0, SynchronizationTimer = 1 }; enum tagCALLTYPE { CALLTYPE_TOPLEVEL = 1, CALLTYPE_NESTED = 2, CALLTYPE_ASYNC = 3, CALLTYPE_TOPLEVEL_CALLPENDING = 4, CALLTYPE_ASYNC_CALLPENDING = 5 }; enum _STREAM_INFO_LEVELS { FindStreamInfoStandard = 0, FindStreamInfoMaxInfoLevel = 1 }; enum _PSM_ACTIVATE_BACKGROUND_TYPE { PsmActNotBackground = 0, PsmActMixedHost = 1, PsmActPureHost = 2, PsmActSystemHost = 3, PsmActInvalidType = 4 }; enum _tagPSUACTION { PSU_DEFAULT = 1, PSU_SECURITY_URL_ONLY = 2 }; enum _SE_SIGNING_LEVEL { SE_SIGNING_LEVEL_UNCHECKED = 0, SE_SIGNING_LEVEL_PROTECTED_PROCESS = 1, SE_SIGNING_LEVEL_UNSIGNED = 2, SE_SIGNING_LEVEL_AUTHENTICODE = 4, SE_SIGNING_LEVEL_DRM_PROTECTED = 5, SE_SIGNING_LEVEL_WINDOWS = 6, SE_SIGNING_LEVEL_WINDOWS_PROTECTED = 7 }; enum _ENLISTMENT_INFORMATION_CLASS { EnlistmentBasicInformation = 0, EnlistmentRecoveryInformation = 1, EnlistmentCrmInformation = 2 }; enum tagOLEGETMONIKER { OLEGETMONIKER_ONLYIFTHERE = 1, OLEGETMONIKER_FORCEASSIGN = 2, OLEGETMONIKER_UNASSIGN = 3, OLEGETMONIKER_TEMPFORUSER = 4 }; enum _SYSTEM_CRASH_DUMP_CONFIGURATION_CLASS { SystemCrashDumpDisable = 0, SystemCrashDumpReconfigure = 1, SystemCrashDumpInitializationComplete = 2 }; enum _PROCESS_TLS_INFORMATION_TYPE { ProcessTlsReplaceIndex = 0, ProcessTlsReplaceVector = 1, MaxProcessTlsOperation = 2 }; enum ACTCTX_REQUESTED_RUN_LEVEL { ACTCTX_RUN_LEVEL_UNSPECIFIED = 0, ACTCTX_RUN_LEVEL_AS_INVOKER = 1, ACTCTX_RUN_LEVEL_HIGHEST_AVAILABLE = 2, ACTCTX_RUN_LEVEL_REQUIRE_ADMIN = 3, ACTCTX_RUN_LEVEL_NUMBERS = 4 }; enum tagResourceGateId { CreateProcessMemoryGate = 0, CreateObjectMemoryGate = 1 }; enum _HARDWARE_COUNTER_TYPE { PMCCounter = 0, MaxHardwareCounterType = 1 }; enum tagREGKIND { REGKIND_DEFAULT = 0, REGKIND_REGISTER = 1, REGKIND_NONE = 2 }; enum tagOLECONTF { OLECONTF_EMBEDDINGS = 1, OLECONTF_LINKS = 2, OLECONTF_OTHERS = 4, OLECONTF_ONLYUSER = 8, OLECONTF_ONLYIFRUNNING = 16 }; enum _EXCEPTION_LOG_TYPE { LogExceptionEmpty = 0, LogExceptionDispatch = 1, LogExceptionHandler = 2 }; enum _MEMORY_RESOURCE_NOTIFICATION_TYPE { LowMemoryResourceNotification = 0, HighMemoryResourceNotification = 1, PendingBadMemoryNotification = 2 }; enum _MEMORY_WORKING_SET_EX_LOCATION { MemoryLocationInvalid = 0, MemoryLocationResident = 1, MemoryLocationPagefile = 2, MemoryLocationReserved = 3 }; enum _PRIORITY_HINT { IoPriorityHintVeryLow = 0, IoPriorityHintLow = 1, IoPriorityHintNormal = 2, MaximumIoPriorityHintType = 3 }; enum _HEAP_INFORMATION_CLASS { HeapCompatibilityInformation = 0, HeapEnableTerminationOnCorruption = 1, HeapExtendedInformation = 2,  = 32771 }; enum tagEXTCONN { EXTCONN_STRONG = 1, EXTCONN_WEAK = 2, EXTCONN_CALLABLE = 4 }; enum _FP__IEEE_ROUNDING_MODE { FpRoundNearest = 0, FpRoundMinusInfinity = 1, FpRoundPlusInfinity = 2, FpRoundChopped = 3 }; enum tagREGCLS { REGCLS_SINGLEUSE = 0, REGCLS_MULTIPLEUSE = 1, REGCLS_MULTI_SEPARATE = 2, REGCLS_SUSPENDED = 4, REGCLS_SURROGATE = 8 }; enum _RPC_NOTIFICATION_TYPES { RpcNotificationTypeNone = 0, RpcNotificationTypeEvent = 1, RpcNotificationTypeApc = 2, RpcNotificationTypeIoc = 3, RpcNotificationTypeHwnd = 4, RpcNotificationTypeCallback = 5 }; enum SYSNLS_FUNCTION { COMPARE_STRING = 1 }; enum IMAGE_AUX_SYMBOL_TYPE { IMAGE_AUX_SYMBOL_TYPE_TOKEN_DEF = 1 }; enum _WNF_DATA_SCOPE { WnfDataScopeSystem = 0, WnfDataScopeSession = 1, WnfDataScopeUser = 2, WnfDataScopeProcess = 3 }; enum tagRPCOPT_SERVER_LOCALITY_VALUES { SERVER_LOCALITY_PROCESS_LOCAL = 0, SERVER_LOCALITY_MACHINE_LOCAL = 1, SERVER_LOCALITY_REMOTE = 2 }; enum _SEMAPHORE_INFORMATION_CLASS { SemaphoreBasicInformation = 0 }; enum _POWER_STATE_TYPE { SystemPowerState = 0, DevicePowerState = 1 }; enum _ACL_INFORMATION_CLASS { AclRevisionInformation = 1, AclSizeInformation = 2 }; enum _TP_CALLBACK_PRIORITY { TP_CALLBACK_PRIORITY_HIGH = 0, TP_CALLBACK_PRIORITY_NORMAL = 1, TP_CALLBACK_PRIORITY_LOW = 2, TP_CALLBACK_PRIORITY_INVALID = 3, TP_CALLBACK_PRIORITY_COUNT = 3 }; enum QUERY_USER_NOTIFICATION_STATE { QUNS_NOT_PRESENT = 1, QUNS_BUSY = 2, QUNS_RUNNING_D3D_FULL_SCREEN = 3, QUNS_PRESENTATION_MODE = 4, QUNS_ACCEPTS_NOTIFICATIONS = 5, QUNS_QUIET_TIME = 6, QUNS_IMMERSIVE = 7 }; enum _MONITOR_DISPLAY_STATE { PowerMonitorOff = 0, PowerMonitorOn = 1, PowerMonitorDim = 2 }; enum _RPC_HTTP_REDIRECTOR_STAGE { RPCHTTP_RS_REDIRECT = 1, RPCHTTP_RS_ACCESS_1 = 2, RPCHTTP_RS_SESSION = 3, RPCHTTP_RS_ACCESS_2 = 4, RPCHTTP_RS_INTERFACE = 5 }; enum tagBIND_FLAGS { BIND_MAYBOTHERUSER = 1, BIND_JUSTTESTEXISTENCE = 2 }; enum _WATCHDOG_INFORMATION_CLASS { WdInfoTimeoutValue = 0, WdInfoResetTimer = 1, WdInfoStopTimer = 2, WdInfoStartTimer = 3, WdInfoTriggerAction = 4, WdInfoState = 5 }; enum DISPLAYCONFIG_MODE_INFO_TYPE { DISPLAYCONFIG_MODE_INFO_TYPE_SOURCE = 1, DISPLAYCONFIG_MODE_INFO_TYPE_TARGET = 2, DISPLAYCONFIG_MODE_INFO_TYPE_FORCE_UINT32 = -1 }; enum tagOLEUPDATE { OLEUPDATE_ALWAYS = 1, OLEUPDATE_ONCALL = 3 }; enum _SC_ACTION_TYPE { SC_ACTION_NONE = 0, SC_ACTION_RESTART = 1, SC_ACTION_REBOOT = 2, SC_ACTION_RUN_COMMAND = 3 }; enum tagOLEVERBATTRIB { OLEVERBATTRIB_NEVERDIRTIES = 1, OLEVERBATTRIB_ONCONTAINERMENU = 2 }; enum _TOKEN_TYPE { TokenPrimary = 1, TokenImpersonation = 2 }; enum _FIRMWARE_TYPE { FirmwareTypeUnknown = 0, FirmwareTypeBios = 1, FirmwareTypeUefi = 2, FirmwareTypeMax = 3 }; enum tagOLELINKBIND { OLELINKBIND_EVENIFCLASSDIFF = 1 }; enum _POWER_REQUEST_TYPE { PowerRequestDisplayRequired = 0, PowerRequestSystemRequired = 1, PowerRequestAwayModeRequired = 2, PowerRequestExecutionRequired = 3 }; enum __MIDL_IInternetSecurityManager_0003 { SZM_CREATE = 0, SZM_DELETE = 1 }; enum _THDTYPE { THDTYPE_BLOCKMESSAGES = 0, THDTYPE_PROCESSMESSAGES = 1 }; enum HASHALGORITHM_ENUM { DSA_HASH_ALGORITHM_SHA1 = 0, DSA_HASH_ALGORITHM_SHA256 = 1, DSA_HASH_ALGORITHM_SHA512 = 2 }; enum _JOBOBJECT_RATE_CONTROL_TOLERANCE { ToleranceLow = 1, ToleranceMedium = 2, ToleranceHigh = 3 }; enum _URLZONEREG { URLZONEREG_DEFAULT = 0, URLZONEREG_HKLM = 1, URLZONEREG_HKCU = 2 }; enum tagCHANGEKIND { CHANGEKIND_ADDMEMBER = 0, CHANGEKIND_DELETEMEMBER = 1, CHANGEKIND_SETNAMES = 2, CHANGEKIND_SETDOCUMENTATION = 3, CHANGEKIND_GENERAL = 4, CHANGEKIND_INVALIDATE = 5, CHANGEKIND_CHANGEFAILED = 6, CHANGEKIND_MAX = 7 }; enum tagDCOM_CALL_STATE { DCOM_NONE = 0, DCOM_CALL_COMPLETE = 1, DCOM_CALL_CANCELED = 2 }; enum _ATOM_INFORMATION_CLASS { AtomBasicInformation = 0, AtomTableInformation = 1 }; enum __MIDL_IInternetZoneManager_0001 { MAX_ZONE_PATH = 260, MAX_ZONE_DESCRIPTION = 200 }; enum _SYSTEM_FIRMWARE_TABLE_ACTION { SystemFirmwareTable_Enumerate = 0, SystemFirmwareTable_Get = 1 }; enum tagEventLogModes { Eventlog_ModeLaunch = 0, EventLog_ModeActivate = 1, EventLog_ModeAccess = 2, EventLog_ModeDontCare = 3 }; enum PIPE_ATTRIBUTE_TYPE { PipeAttribute = 0, PipeConnectionAttribute = 1, PipeHandleAttribute = 2 }; enum _WAIT_TYPE { WaitAll = 0, WaitAny = 1, WaitNotification = 2 }; enum tagPENDINGMSG { PENDINGMSG_CANCELCALL = 0, PENDINGMSG_WAITNOPROCESS = 1, PENDINGMSG_WAITDEFPROCESS = 2 }; enum tagLocalServerType { LocalServerType16 = 0, LocalServerType32 = 1 }; enum _COPYFILE2_MESSAGE_ACTION { COPYFILE2_PROGRESS_CONTINUE = 0, COPYFILE2_PROGRESS_CANCEL = 1, COPYFILE2_PROGRESS_STOP = 2, COPYFILE2_PROGRESS_QUIET = 3, COPYFILE2_PROGRESS_PAUSE = 4 }; enum _TP_DEBUG_CLASS { TP_DEBUG_CLASS_POOL = 0 }; enum _SECTION_INHERIT { ViewShare = 1, ViewUnmap = 2 }; enum __MIDL_IAuthenticateEx_0001 { AUTHENTICATEF_PROXY = 1, AUTHENTICATEF_BASIC = 2, AUTHENTICATEF_HTTP = 4 }; enum tagMEMCTX { MEMCTX_TASK = 1, MEMCTX_SHARED = 2, MEMCTX_MACSYSTEM = 3, MEMCTX_UNKNOWN = -1, MEMCTX_SAME = -1 }; enum __MIDL___MIDL_itf_privact_0000_0009_0001 { MARSHOPT_NO_OID_REGISTER = 1 }; enum _SC_EVENT_TYPE { SC_EVENT_DATABASE_CHANGE = 0, SC_EVENT_PROPERTY_CHANGE = 1, SC_EVENT_STATUS_CHANGE = 2 }; enum _WOW64_FUNCTION_CODE64 { WOW64_FUNCTION_NOP = 0, WOW64_FUNCTION_QUERY_PROCESS_DEBUG_INFO = 1, WOW64_FUNCTION_MAXIMUM = 2 }; enum tagSERVERCALL { SERVERCALL_ISHANDLED = 0, SERVERCALL_REJECTED = 1, SERVERCALL_RETRYLATER = 2 }; enum tagINPUT_MESSAGE_ORIGIN_ID { IMO_UNAVAILABLE = 0, IMO_HARDWARE = 1, IMO_INJECTED = 2, IMO_SYSTEM = 4 }; enum _TRANSACTION_STATE { TransactionStateNormal = 1, TransactionStateIndoubt = 2, TransactionStateCommittedNotify = 3 }; enum tagCOINITBASE { COINITBASE_MULTITHREADED = 0 }; enum _KEY_VALUE_INFORMATION_CLASS { KeyValueBasicInformation = 0, KeyValueFullInformation = 1, KeyValuePartialInformation = 2, KeyValueFullInformationAlign64 = 3, KeyValuePartialInformationAlign64 = 4, MaxKeyValueInfoClass = 5 }; enum tagDIMENSION { XDIMENSION = 88, YDIMENSION = 89 }; enum tagDISCARDCACHE { DISCARDCACHE_SAVEIFDIRTY = 0, DISCARDCACHE_NOSAVE = 1 }; enum OLETLS_CROSS_THREAD_FLAGS { OLETLS_CROSS_THREAD_PRIORITY_EVENT_PENDING = 1 }; enum _ALPC_MESSAGE_INFORMATION_CLASS { AlpcMessageSidInformation = 0, AlpcMessageTokenModifiedIdInformation = 1 }; enum _IO_COMPLETION_INFORMATION_CLASS { IoCompletionBasicInformation = 0 }; enum _SC_ENUM_TYPE { SC_ENUM_PROCESS_INFO = 0 }; enum MCA_EXCEPTION_TYPE { HAL_MCE_RECORD = 0, HAL_MCA_RECORD = 1 }; enum LATENCY_TIME { LT_DONT_CARE = 0, LT_LOWEST_LATENCY = 1 }; enum _KEY_INFORMATION_CLASS { KeyBasicInformation = 0, KeyNodeInformation = 1, KeyFullInformation = 2, KeyNameInformation = 3, KeyCachedInformation = 4, KeyFlagsInformation = 5, KeyVirtualizationInformation = 6, KeyHandleTagsInformation = 7, MaxKeyInfoClass = 8 }; enum tagProcessType { ProcessTypeNormal = 0, ProcessTypeService = 1, ProcessTypeComPlus = 2, ProcessTypeLegacySurrogate = 3, ProcessTypeComPlusService = 4 }; enum __MIDL_ICodeInstall_0001 { CIP_DISK_FULL = 0, CIP_ACCESS_DENIED = 1, CIP_NEWER_VERSION_EXISTS = 2, CIP_OLDER_VERSION_EXISTS = 3, CIP_NAME_CONFLICT = 4, CIP_TRUST_VERIFICATION_COMPONENT_MISSING = 5, CIP_EXE_SELF_REGISTERATION_TIMEOUT = 6, CIP_UNSAFE_TO_ABORT = 7, CIP_NEED_REBOOT = 8, CIP_NEED_REBOOT_UI_PERMISSION = 9 }; struct tagEMRTRANSPARENTBLT { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char rclBounds[16]; /* +0x0008 db 12 00 00 */ long xDest; /* +0x0018 */ long yDest; /* +0x001c */ long cxDest; /* +0x0020 */ long cyDest; /* +0x0024 */ unsigned long dwRop; /* +0x0028 */ long xSrc; /* +0x002c */ long ySrc; /* +0x0030 */ unsigned char xformSrc[24]; /* +0x0034 dc 12 00 00 */ unsigned long crBkColorSrc; /* +0x004c */ unsigned long iUsageSrc; /* +0x0050 */ unsigned long offBmiSrc; /* +0x0054 */ unsigned long cbBmiSrc; /* +0x0058 */ unsigned long offBitsSrc; /* +0x005c */ unsigned long cbBitsSrc; /* +0x0060 */ long cxSrc; /* +0x0064 */ long cySrc; /* +0x0068 */ }; struct _SERVICE_PRESHUTDOWN_INFO { unsigned long dwPreshutdownTimeout; /* +0x0000 */ }; struct _CM_DISK_GEOMETRY_DEVICE_DATA { unsigned long BytesPerSector; /* +0x0000 */ unsigned long NumberOfCylinders; /* +0x0004 */ unsigned long SectorsPerTrack; /* +0x0008 */ unsigned long NumberOfHeads; /* +0x000c */ }; struct _PLUGPLAY_CONTROL_CONFLICT_DATA { unsigned char DeviceInstance[16]; /* +0x0000 e3 12 00 00 */ unsigned char ResourceList[8]; /* +0x0010 e5 12 00 00 */ unsigned long ResourceListSize; /* +0x0018 */ unsigned char ConflictBuffer[8]; /* +0x0020 e7 12 00 00 */ unsigned long ConflictBufferSize; /* +0x0028 */ unsigned long Flags; /* +0x002c */ long Status; /* +0x0030 */ }; struct _FOUR_PART_VERSION { unsigned long long Version64; /* +0x0000 */ }; struct _FOUR_PART_VERSION:: { unsigned short Revision; /* +0x0000 */ unsigned short Build; /* +0x0002 */ unsigned short Minor; /* +0x0004 */ unsigned short Major; /* +0x0006 */ }; struct _FOUR_PART_VERSION:: { unsigned long BuildAndRevision; /* +0x0000 */ unsigned long MajorAndMinor; /* +0x0004 */ }; struct tagCBTACTIVATESTRUCT { unsigned char fMouse[8]; /* +0x0000 74 00 00 00 */ unsigned char hWndActive[8]; /* +0x0008 f7 12 00 00 */ }; struct _NETRESOURCEW { unsigned long dwScope; /* +0x0000 */ unsigned long dwType; /* +0x0004 */ unsigned long dwDisplayType; /* +0x0008 */ unsigned long dwUsage; /* +0x000c */ unsigned char lpLocalName[8]; /* +0x0010 71 06 00 00 */ unsigned char lpRemoteName[8]; /* +0x0018 71 06 00 00 */ unsigned char lpComment[8]; /* +0x0020 71 06 00 00 */ unsigned char lpProvider[8]; /* +0x0028 71 06 00 00 */ }; struct _DWORD_BLOB { unsigned long clSize; /* +0x0000 */ unsigned char alData[4]; /* +0x0004 fc 12 00 00 */ }; struct tagRemHGLOBAL { long fNullHGlobal; /* +0x0000 */ unsigned long cbData; /* +0x0004 */ unsigned char data[4]; /* +0x0008 ff 12 00 00 */ }; struct _QUERY_SERVICE_CONFIGW { unsigned long dwServiceType; /* +0x0000 */ unsigned long dwStartType; /* +0x0004 */ unsigned long dwErrorControl; /* +0x0008 */ unsigned char lpBinaryPathName[8]; /* +0x0010 71 06 00 00 */ unsigned char lpLoadOrderGroup[8]; /* +0x0018 71 06 00 00 */ unsigned long dwTagId; /* +0x0020 */ unsigned char lpDependencies[8]; /* +0x0028 71 06 00 00 */ unsigned char lpServiceStartName[8]; /* +0x0030 71 06 00 00 */ unsigned char lpDisplayName[8]; /* +0x0038 71 06 00 00 */ }; struct _CRYPT_ECC_PRIVATE_KEY_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char PrivateKey[16]; /* +0x0008 08 13 00 00 */ char *szCurveOid; /* +0x0018 */ unsigned char PublicKey[24]; /* +0x0020 09 13 00 00 */ }; struct tagPLACEABLEMETAHEADER { unsigned long key; /* +0x0000 */ unsigned short hmf; /* +0x0004 */ unsigned char bbox[8]; /* +0x0006 0c 13 00 00 */ unsigned short inch; /* +0x000e */ unsigned long reserved; /* +0x0010 */ unsigned short checksum; /* +0x0014 */ }; struct _FILE_INITIATE_REPAIR_OUTPUT_BUFFER { unsigned long long Hint1; /* +0x0000 */ unsigned long long Hint2; /* +0x0008 */ unsigned long long Clsn; /* +0x0010 */ long Status; /* +0x0018 */ }; struct _BOOT_ENTROPY_SOURCE_NT_RESULT { unsigned char SourceId[8]; /* +0x0000 17 13 00 00 */ unsigned long long Policy; /* +0x0008 */ unsigned char ResultCode[4]; /* +0x0010 18 13 00 00 */ long ResultStatus; /* +0x0014 */ unsigned long long Time; /* +0x0018 */ unsigned long EntropyLength; /* +0x0020 */ unsigned char EntropyData[68]; /* +0x0024 19 13 00 00 */ }; struct _MM_COMBINEDPAGE_IDENTITY { unsigned char PfnIdentity[24]; /* +0x0000 1c 13 00 00 */ /* unsigned char SharedInitial[0]; +0x0018 1d 13 00 00 */ unsigned long long ProtoPte; /* +0x0018 */ }; struct _PROCESS_HEAP_ENTRY { void *lpData; /* +0x0000 */ unsigned long cbData; /* +0x0008 */ unsigned char cbOverhead; /* +0x000c */ unsigned char iRegionIndex; /* +0x000d */ unsigned short wFlags; /* +0x000e */ /* unsigned char Block[0]; +0x0010 22 13 00 00 */ unsigned char Region[24]; /* +0x0010 23 13 00 00 */ }; struct _PROCESS_HEAP_ENTRY:::: { unsigned long dwCommittedSize; /* +0x0000 */ unsigned long dwUnCommittedSize; /* +0x0004 */ void *lpFirstBlock; /* +0x0008 */ void *lpLastBlock; /* +0x0010 */ }; struct _PROCESS_HEAP_ENTRY:::: { void *hMem; /* +0x0000 */ unsigned char dwReserved[16]; /* +0x0008 28 13 00 00 */ }; struct tagMETHODDATA { unsigned char szName[8]; /* +0x0000 71 06 00 00 */ unsigned char ppdata[8]; /* +0x0008 30 13 00 00 */ long dispid; /* +0x0010 */ unsigned char iMeth[4]; /* +0x0014 75 00 00 00 */ unsigned char cc[4]; /* +0x0018 31 13 00 00 */ unsigned char cArgs[4]; /* +0x001c 75 00 00 00 */ unsigned short wFlags; /* +0x0020 */ unsigned short vtReturn; /* +0x0022 */ }; struct _CMSG_RECIPIENT_ENCRYPTED_KEY_INFO { unsigned char RecipientId[40]; /* +0x0000 36 13 00 00 */ unsigned char EncryptedKey[16]; /* +0x0028 08 13 00 00 */ unsigned char Date[8]; /* +0x0038 37 13 00 00 */ unsigned char pOtherAttr[8]; /* +0x0040 39 13 00 00 */ }; struct _SID_AND_ATTRIBUTES { void *Sid; /* +0x0000 */ unsigned long Attributes; /* +0x0008 */ }; struct _FILE_IO_COMPLETION_INFORMATION { void *KeyContext; /* +0x0000 */ void *ApcContext; /* +0x0008 */ unsigned char IoStatusBlock[16]; /* +0x0010 40 13 00 00 */ }; struct _SYSTEM_THREAD_INFORMATION { unsigned char KernelTime[8]; /* +0x0000 43 13 00 00 */ unsigned char UserTime[8]; /* +0x0008 43 13 00 00 */ unsigned char CreateTime[8]; /* +0x0010 43 13 00 00 */ unsigned long WaitTime; /* +0x0018 */ void *StartAddress; /* +0x0020 */ unsigned char ClientId[16]; /* +0x0028 44 13 00 00 */ long Priority; /* +0x0038 */ long BasePriority; /* +0x003c */ unsigned long ContextSwitches; /* +0x0040 */ unsigned long ThreadState; /* +0x0044 */ unsigned long WaitReason; /* +0x0048 */ }; struct _MEMORY_BASIC_INFORMATION64 { unsigned long long BaseAddress; /* +0x0000 */ unsigned long long AllocationBase; /* +0x0008 */ unsigned long AllocationProtect; /* +0x0010 */ unsigned long __alignment1; /* +0x0014 */ unsigned long long RegionSize; /* +0x0018 */ unsigned long State; /* +0x0020 */ unsigned long Protect; /* +0x0024 */ unsigned long Type; /* +0x0028 */ unsigned long __alignment2; /* +0x002c */ }; struct _SINGLE_LIST_ENTRY32 { unsigned long Next; /* +0x0000 */ }; struct _Wx86TIB { unsigned long Size; /* +0x0000 */ unsigned long InitialPc; /* +0x0004 */ void *StackBase; /* +0x0008 */ void *StackLimit; /* +0x000c */ void *DeallocationStack; /* +0x0010 */ unsigned long LogFlags; /* +0x0014 */ unsigned long InitialSp; /* +0x0018 */ unsigned char SimulationCount; /* +0x001c */ unsigned char InCpuSimulation; /* +0x001d */ unsigned char EmulateInitialPc; /* +0x001e */ unsigned char Initialized; /* +0x001f */ unsigned char ExceptionList[4]; /* +0x0020 5c 13 00 00 */ void *CpuContext; /* +0x0024 */ unsigned char InitialExceptionContext[4]; /* +0x0028 5e 13 00 00 */ void *pCallersRIID; /* +0x002c */ void *pCallersUnknown; /* +0x0030 */ unsigned long Flags; /* +0x0034 */ void *SelfRegDllName; /* +0x0038 */ void *SelfRegDllHandle; /* +0x003c */ }; struct _SYSTEM_SESSION_BIGPOOL_INFORMATION { unsigned long long NextEntryOffset; /* +0x0000 */ unsigned long SessionId; /* +0x0008 */ unsigned long Count; /* +0x000c */ unsigned char AllocatedInfo[24]; /* +0x0010 64 13 00 00 */ }; struct tagRemHMETAFILEPICT { long mm; /* +0x0000 */ long xExt; /* +0x0004 */ long yExt; /* +0x0008 */ unsigned long cbData; /* +0x000c */ unsigned char data[4]; /* +0x0010 ff 12 00 00 */ }; struct _SE_ACCESS_REPLY { unsigned long Size; /* +0x0000 */ unsigned long ResultListCount; /* +0x0004 */ unsigned long *GrantedAccess; /* +0x0008 */ long *AccessStatus; /* +0x0010 */ unsigned char AccessReason[8]; /* +0x0018 84 13 00 00 */ unsigned char Privileges[8]; /* +0x0020 87 13 00 00 */ }; struct _SYSTEM_POWER_STATE_CONTEXT { /* unsigned char Reserved1[0]; +0x0000 8a 13 00 00 */ /* unsigned char TargetSystemState[0]; +0x0000 8b 13 00 00 */ /* unsigned char EffectiveSystemState[0]; +0x0000 8c 13 00 00 */ /* unsigned char CurrentSystemState[0]; +0x0000 8d 13 00 00 */ /* unsigned char IgnoreHibernationPath[0]; +0x0000 8e 13 00 00 */ /* unsigned char PseudoTransition[0]; +0x0000 8f 13 00 00 */ /* unsigned char Reserved2[0]; +0x0000 90 13 00 00 */ unsigned long ContextAsUlong; /* +0x0000 */ }; struct _PROCESSOR_POWER_POLICY { unsigned long Revision; /* +0x0000 */ unsigned char DynamicThrottle; /* +0x0004 */ unsigned char Spare[3]; /* +0x0005 93 13 00 00 */ /* unsigned char DisableCStates[0]; +0x0008 94 13 00 00 */ unsigned char Reserved[4]; /* +0x0008 95 13 00 00 */ unsigned long PolicyCount; /* +0x000c */ unsigned char Policy[60]; /* +0x0010 97 13 00 00 */ }; struct tagTOGGLEKEYS { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ }; struct _FULL_PTR_XLAT_TABLES { void *RefIdToPointer; /* +0x0000 */ void *PointerToRefId; /* +0x0008 */ unsigned long NextRefId; /* +0x0010 */ unsigned char XlatSide[4]; /* +0x0014 a0 13 00 00 */ }; struct DISPLAYCONFIG_SOURCE_MODE { unsigned char width[4]; /* +0x0000 75 00 00 00 */ unsigned char height[4]; /* +0x0004 75 00 00 00 */ unsigned char pixelFormat[4]; /* +0x0008 a5 13 00 00 */ unsigned char position[8]; /* +0x000c a6 13 00 00 */ }; struct _PROCESS_DYNAMIC_FUNCTION_TABLE_INFORMATION { unsigned char DynamicFunctionTable[8]; /* +0x0000 b0 13 00 00 */ unsigned char Remove; /* +0x0008 */ }; struct tagNMHDR { unsigned char hwndFrom[8]; /* +0x0000 f7 12 00 00 */ unsigned long long idFrom; /* +0x0008 */ unsigned char code[8]; /* +0x0010 75 00 00 00 */ }; struct _currencyfmtW { unsigned char NumDigits[4]; /* +0x0000 75 00 00 00 */ unsigned char LeadingZero[4]; /* +0x0004 75 00 00 00 */ unsigned char Grouping[8]; /* +0x0008 75 00 00 00 */ unsigned char lpDecimalSep[8]; /* +0x0010 71 06 00 00 */ unsigned char lpThousandSep[8]; /* +0x0018 71 06 00 00 */ unsigned char NegativeOrder[4]; /* +0x0020 75 00 00 00 */ unsigned char PositiveOrder[4]; /* +0x0024 75 00 00 00 */ unsigned char lpCurrencySymbol[8]; /* +0x0028 71 06 00 00 */ }; struct CO_MTA_USAGE_COOKIE__ { unsigned char unused[4]; /* +0x0000 74 00 00 00 */ }; struct _CERT_CHAIN_ELEMENT { unsigned long cbSize; /* +0x0000 */ unsigned char pCertContext[8]; /* +0x0008 c4 13 00 00 */ unsigned char TrustStatus[8]; /* +0x0010 c5 13 00 00 */ unsigned char pRevocationInfo[8]; /* +0x0018 c7 13 00 00 */ unsigned char pIssuanceUsage[8]; /* +0x0020 c9 13 00 00 */ unsigned char pApplicationUsage[8]; /* +0x0028 c9 13 00 00 */ unsigned char pwszExtendedErrorInfo[8]; /* +0x0030 cb 13 00 00 */ }; struct _ACTIVATION_CONTEXT_QUERY_INDEX { unsigned long ulAssemblyIndex; /* +0x0000 */ unsigned long ulFileIndexInAssembly; /* +0x0004 */ }; struct _CRYPT_PROVIDER_REG { unsigned long cAliases; /* +0x0000 */ unsigned char rgpszAliases[8]; /* +0x0008 db 13 00 00 */ unsigned char pUM[8]; /* +0x0010 dd 13 00 00 */ unsigned char pKM[8]; /* +0x0018 dd 13 00 00 */ }; struct _CERT_ECC_SIGNATURE { unsigned char r[16]; /* +0x0000 08 13 00 00 */ unsigned char s[16]; /* +0x0010 08 13 00 00 */ }; struct _CRYPT_ATTRIBUTES { unsigned long cAttr; /* +0x0000 */ unsigned char rgAttr[8]; /* +0x0008 e3 13 00 00 */ }; struct _UNWIND_INFO { /* unsigned char Version[0]; +0x0000 e8 13 00 00 */ unsigned char Flags[1]; /* +0x0000 e9 13 00 00 */ unsigned char SizeOfProlog; /* +0x0001 */ unsigned char CountOfCodes; /* +0x0002 */ /* unsigned char FrameRegister[0]; +0x0003 ea 13 00 00 */ unsigned char FrameOffset[1]; /* +0x0003 eb 13 00 00 */ unsigned char UnwindCode[2]; /* +0x0004 ed 13 00 00 */ }; struct _TOKEN_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE { void *pValue; /* +0x0000 */ unsigned long ValueLength; /* +0x0008 */ }; struct _COVERAGE_MODULE_INFO { unsigned long ModuleInfoSize; /* +0x0000 */ unsigned long IsBinaryLoaded; /* +0x0004 */ unsigned char ModulePathName[16]; /* +0x0008 e3 12 00 00 */ unsigned long CoverageSectionSize; /* +0x0018 */ unsigned char CoverageSection[4]; /* +0x001c ff 12 00 00 */ }; struct _SYSTEM_PREFETCH_PATCH_INFORMATION { unsigned long PrefetchPatchCount; /* +0x0000 */ }; struct tagRAWHID { unsigned long dwSizeHid; /* +0x0000 */ unsigned long dwCount; /* +0x0004 */ unsigned char bRawData[4]; /* +0x0008 ff 12 00 00 */ }; struct _CRYPT_URL_ARRAY { unsigned long cUrl; /* +0x0000 */ unsigned char rgwszUrl[8]; /* +0x0008 db 13 00 00 */ }; struct _FILE_FS_VOLUME_INFORMATION { unsigned char VolumeCreationTime[8]; /* +0x0000 43 13 00 00 */ unsigned long VolumeSerialNumber; /* +0x0008 */ unsigned long VolumeLabelLength; /* +0x000c */ unsigned char SupportsObjects; /* +0x0010 */ unsigned char VolumeLabel[6]; /* +0x0012 0a 14 00 00 */ }; struct _EFI_DRIVER_ENTRY_LIST { unsigned long NextEntryOffset; /* +0x0000 */ unsigned char DriverEntry[20]; /* +0x0004 0d 14 00 00 */ }; struct _SYSTEM_HANDLE_TABLE_ENTRY_INFO { unsigned short UniqueProcessId; /* +0x0000 */ unsigned short CreatorBackTraceIndex; /* +0x0002 */ unsigned char ObjectTypeIndex; /* +0x0004 */ unsigned char HandleAttributes; /* +0x0005 */ unsigned short HandleValue; /* +0x0006 */ void *Object; /* +0x0008 */ unsigned long GrantedAccess; /* +0x0010 */ }; struct _COMMCONFIG { unsigned long dwSize; /* +0x0000 */ unsigned short wVersion; /* +0x0004 */ unsigned short wReserved; /* +0x0006 */ unsigned char dcb[28]; /* +0x0008 14 14 00 00 */ unsigned long dwProviderSubType; /* +0x0024 */ unsigned long dwProviderOffset; /* +0x0028 */ unsigned long dwProviderSize; /* +0x002c */ unsigned char wcProviderData[4]; /* +0x0030 0a 14 00 00 */ }; struct tagEMREXTCREATEFONTINDIRECTW { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned long ihFont; /* +0x0008 */ unsigned char elfw[320]; /* +0x000c 19 14 00 00 */ }; struct tagRPC_CALL_ATTRIBUTES_V1_A { unsigned char Version[4]; /* +0x0000 75 00 00 00 */ unsigned long Flags; /* +0x0004 */ unsigned long ServerPrincipalNameBufferLength; /* +0x0008 */ unsigned char *ServerPrincipalName; /* +0x0010 */ unsigned long ClientPrincipalNameBufferLength; /* +0x0018 */ unsigned char *ClientPrincipalName; /* +0x0020 */ unsigned long AuthenticationLevel; /* +0x0028 */ unsigned long AuthenticationService; /* +0x002c */ unsigned char NullSession[8]; /* +0x0030 74 00 00 00 */ }; struct _CERT_QC_STATEMENT { char *pszStatementId; /* +0x0000 */ unsigned char StatementInfo[16]; /* +0x0008 08 13 00 00 */ }; struct _CRL_CONTEXT { unsigned long dwCertEncodingType; /* +0x0000 */ unsigned char *pbCrlEncoded; /* +0x0008 */ unsigned long cbCrlEncoded; /* +0x0010 */ unsigned char pCrlInfo[8]; /* +0x0018 21 14 00 00 */ void *hCertStore; /* +0x0020 */ }; struct _CRYPT_KEY_PROV_INFO { unsigned char pwszContainerName[8]; /* +0x0000 71 06 00 00 */ unsigned char pwszProvName[8]; /* +0x0008 71 06 00 00 */ unsigned long dwProvType; /* +0x0010 */ unsigned long dwFlags; /* +0x0014 */ unsigned long cProvParam; /* +0x0018 */ unsigned char rgProvParam[8]; /* +0x0020 25 14 00 00 */ unsigned long dwKeySpec; /* +0x0028 */ }; struct _PROCESS_FOREGROUND_BACKGROUND { unsigned char Foreground; /* +0x0000 */ }; struct _STORAGE_QUERY_DEPENDENT_VOLUME_LEV1_ENTRY { unsigned long EntryLength; /* +0x0000 */ unsigned long DependencyTypeFlags; /* +0x0004 */ unsigned long ProviderSpecificFlags; /* +0x0008 */ unsigned char VirtualStorageType[20]; /* +0x000c 2e 14 00 00 */ }; struct _GENERATE_NAME_CONTEXT { unsigned short Checksum; /* +0x0000 */ unsigned char ChecksumInserted; /* +0x0002 */ unsigned char NameLength; /* +0x0003 */ unsigned char NameBuffer[16]; /* +0x0004 31 14 00 00 */ unsigned long ExtensionLength; /* +0x0014 */ unsigned char ExtensionBuffer[8]; /* +0x0018 32 14 00 00 */ unsigned long LastIndexValue; /* +0x0020 */ }; struct _HEAP_EXTENDED_INFORMATION { void *Process; /* +0x0000 */ unsigned long long Heap; /* +0x0008 */ unsigned long Level; /* +0x0010 */ unsigned char CallbackRoutine[8]; /* +0x0018 39 14 00 00 */ void *CallbackContext; /* +0x0020 */ /* unsigned char ProcessHeapInformation[0]; +0x0028 3a 14 00 00 */ unsigned char HeapInformation[48]; /* +0x0028 4b 13 00 00 */ }; struct tagEMROFFSETCLIPRGN { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char ptlOffset[8]; /* +0x0008 a6 13 00 00 */ }; struct tagSCROLLINFO { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char fMask[4]; /* +0x0004 75 00 00 00 */ unsigned char nMin[4]; /* +0x0008 74 00 00 00 */ unsigned char nMax[4]; /* +0x000c 74 00 00 00 */ unsigned char nPage[4]; /* +0x0010 75 00 00 00 */ unsigned char nPos[4]; /* +0x0014 74 00 00 00 */ unsigned char nTrackPos[4]; /* +0x0018 74 00 00 00 */ }; struct tagREGISTERWORDW { unsigned char lpReading[8]; /* +0x0000 71 06 00 00 */ unsigned char lpWord[8]; /* +0x0008 71 06 00 00 */ }; struct _BCRYPT_KEY_BLOB { unsigned long Magic; /* +0x0000 */ }; struct _CMSG_MAIL_LIST_RECIPIENT_ENCODE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char KeyEncryptionAlgorithm[24]; /* +0x0008 68 14 00 00 */ void *pvKeyEncryptionAuxInfo; /* +0x0020 */ unsigned long long hCryptProv; /* +0x0028 */ unsigned long dwKeyChoice; /* +0x0030 */ unsigned long long hKeyEncryptionKey; /* +0x0038 */ void *pvKeyEncryptionKey; /* +0x0038 */ unsigned char KeyId[16]; /* +0x0040 08 13 00 00 */ unsigned char Date[8]; /* +0x0050 37 13 00 00 */ unsigned char pOtherAttr[8]; /* +0x0058 39 13 00 00 */ }; struct _CERT_SERVER_OCSP_RESPONSE_CONTEXT { unsigned long cbSize; /* +0x0000 */ unsigned char *pbEncodedOcspResponse; /* +0x0008 */ unsigned long cbEncodedOcspResponse; /* +0x0010 */ }; struct _UNWIND_HISTORY_TABLE { unsigned long Count; /* +0x0000 */ unsigned char LocalHint; /* +0x0004 */ unsigned char GlobalHint; /* +0x0005 */ unsigned char Search; /* +0x0006 */ unsigned char Once; /* +0x0007 */ unsigned long long LowAddress; /* +0x0008 */ unsigned long long HighAddress; /* +0x0010 */ unsigned char Entry[192]; /* +0x0018 6f 14 00 00 */ }; struct _BOOT_ENTRY_LIST { unsigned long NextEntryOffset; /* +0x0000 */ unsigned char BootEntry[32]; /* +0x0004 d3 13 00 00 */ }; struct _KCRM_MARSHAL_HEADER { unsigned long VersionMajor; /* +0x0000 */ unsigned long VersionMinor; /* +0x0004 */ unsigned long NumProtocols; /* +0x0008 */ unsigned long Unused; /* +0x000c */ }; struct tagPOLYTEXTA { unsigned char x[4]; /* +0x0000 74 00 00 00 */ unsigned char y[4]; /* +0x0004 74 00 00 00 */ unsigned char n[8]; /* +0x0008 75 00 00 00 */ unsigned char lpstr[8]; /* +0x0010 79 14 00 00 */ unsigned char uiFlags[4]; /* +0x0018 75 00 00 00 */ unsigned char rcl[20]; /* +0x001c 7a 14 00 00 */ unsigned char pdx[8]; /* +0x0030 74 06 00 00 */ }; struct _LUTF8_STRING { unsigned long long Length; /* +0x0000 */ unsigned long long MaximumLength; /* +0x0008 */ unsigned char *Buffer; /* +0x0010 */ }; struct _IO_RESOURCE_DESCRIPTOR { unsigned char Option; /* +0x0000 */ unsigned char Type; /* +0x0001 */ unsigned char ShareDisposition; /* +0x0002 */ unsigned char Spare1; /* +0x0003 */ unsigned short Flags; /* +0x0004 */ unsigned short Spare2; /* +0x0006 */ }; struct tagMINMAXINFO { unsigned char ptReserved[8]; /* +0x0000 a1 14 00 00 */ unsigned char ptMaxSize[8]; /* +0x0008 a1 14 00 00 */ unsigned char ptMaxPosition[8]; /* +0x0010 a1 14 00 00 */ unsigned char ptMinTrackSize[8]; /* +0x0018 a1 14 00 00 */ unsigned char ptMaxTrackSize[8]; /* +0x0020 a1 14 00 00 */ }; struct _SERVICE_TABLE_ENTRYW { unsigned char lpServiceName[8]; /* +0x0000 71 06 00 00 */ unsigned char lpServiceProc[8]; /* +0x0008 bf 14 00 00 */ }; struct _JOBOBJECT_END_OF_JOB_TIME_INFORMATION { unsigned long EndOfJobTimeAction; /* +0x0000 */ }; struct _FILE_MAILSLOT_QUERY_INFORMATION { unsigned long MaximumMessageSize; /* +0x0000 */ unsigned long MailslotQuota; /* +0x0004 */ unsigned long NextMessageSize; /* +0x0008 */ unsigned long MessagesAvailable; /* +0x000c */ unsigned char ReadTimeout[8]; /* +0x0010 43 13 00 00 */ }; struct _ENCRYPTED_DATA_INFO { unsigned long long StartingFileOffset; /* +0x0000 */ unsigned long OutputBufferOffset; /* +0x0008 */ unsigned long BytesWithinFileSize; /* +0x000c */ unsigned long BytesWithinValidDataLength; /* +0x0010 */ unsigned short CompressionFormat; /* +0x0014 */ unsigned char DataUnitShift; /* +0x0016 */ unsigned char ChunkShift; /* +0x0017 */ unsigned char ClusterShift; /* +0x0018 */ unsigned char EncryptionFormat; /* +0x0019 */ unsigned short NumberOfDataBlocks; /* +0x001a */ unsigned char DataBlockSize[4]; /* +0x001c fc 12 00 00 */ }; struct _MUILANGUAGES { unsigned char TotalSize[4]; /* +0x0000 75 00 00 00 */ unsigned short MaxNumLanguages; /* +0x0004 */ unsigned short NumLanguages; /* +0x0006 */ unsigned short NumInstalledLanguages; /* +0x0008 */ unsigned char LangInfos[8]; /* +0x0010 cb 14 00 00 */ }; struct _HEAP_PERFORMANCE_COUNTERS_INFORMATION { unsigned long Size; /* +0x0000 */ unsigned long Version; /* +0x0004 */ unsigned long HeapIndex; /* +0x0008 */ unsigned long LastHeapIndex; /* +0x000c */ unsigned long long BaseAddress; /* +0x0010 */ unsigned long long ReserveSize; /* +0x0018 */ unsigned long long CommitSize; /* +0x0020 */ unsigned long SegmentCount; /* +0x0028 */ unsigned long long LargeUCRMemory; /* +0x0030 */ unsigned long UCRLength; /* +0x0038 */ unsigned long long AllocatedSpace; /* +0x0040 */ unsigned long long FreeSpace; /* +0x0048 */ unsigned long FreeListLength; /* +0x0050 */ unsigned long Contention; /* +0x0054 */ unsigned long VirtualBlocks; /* +0x0058 */ unsigned long CommitRate; /* +0x005c */ unsigned long DecommitRate; /* +0x0060 */ }; struct tagDEBUGHOOKINFO { unsigned long idThread; /* +0x0000 */ unsigned long idThreadInstaller; /* +0x0004 */ long long lParam; /* +0x0008 */ unsigned long long wParam; /* +0x0010 */ unsigned char code[8]; /* +0x0018 74 00 00 00 */ }; struct _PLUGPLAY_CONTROL_RELATED_DEVICE_DATA { unsigned char TargetDeviceInstance[16]; /* +0x0000 e3 12 00 00 */ unsigned long Relation; /* +0x0010 */ unsigned char RelatedDeviceInstance[8]; /* +0x0018 71 06 00 00 */ unsigned long RelatedDeviceInstanceLength; /* +0x0020 */ }; struct _MUILANGINFO { unsigned short Flags; /* +0x0000 */ unsigned short Reserved; /* +0x0002 */ unsigned short LangId; /* +0x0004 */ short LangNameIndex; /* +0x0006 */ unsigned short FallbackTypes; /* +0x0008 */ short NeutralLangSpec; /* +0x000a */ unsigned char FallbackSpecs[8]; /* +0x000c 0e 15 00 00 */ unsigned char AlternateCodePage[8]; /* +0x0014 0e 15 00 00 */ }; struct _CREATEFILE2_EXTENDED_PARAMETERS { unsigned long dwSize; /* +0x0000 */ unsigned long dwFileAttributes; /* +0x0004 */ unsigned long dwFileFlags; /* +0x0008 */ unsigned long dwSecurityQosFlags; /* +0x000c */ unsigned char lpSecurityAttributes[8]; /* +0x0010 12 15 00 00 */ void *hTemplateFile; /* +0x0018 */ }; struct tagRGBTRIPLE { unsigned char rgbtBlue; /* +0x0000 */ unsigned char rgbtGreen; /* +0x0001 */ unsigned char rgbtRed; /* +0x0002 */ }; struct _CERT_CHAIN_FIND_BY_ISSUER_PARA { unsigned long cbSize; /* +0x0000 */ unsigned char pszUsageIdentifier[8]; /* +0x0008 79 14 00 00 */ unsigned long dwKeySpec; /* +0x0010 */ unsigned long dwAcquirePrivateKeyFlags; /* +0x0014 */ unsigned long cIssuer; /* +0x0018 */ unsigned char rgIssuer[8]; /* +0x0020 4d 13 00 00 */ unsigned char pfnFindCallback[8]; /* +0x0028 25 15 00 00 */ void *pvFindArg; /* +0x0030 */ }; struct _TXFS_CREATE_MINIVERSION_INFO { unsigned short StructureVersion; /* +0x0000 */ unsigned short StructureLength; /* +0x0002 */ unsigned long BaseVersion; /* +0x0004 */ unsigned short MiniVersion; /* +0x0008 */ }; struct _VARIABLE_NAME { unsigned long NextEntryOffset; /* +0x0000 */ unsigned char VendorGuid[16]; /* +0x0004 f3 14 00 00 */ unsigned char Name[4]; /* +0x0014 0a 14 00 00 */ }; struct _SYSTEM_POOLTAG_INFORMATION { unsigned long Count; /* +0x0000 */ unsigned char TagInfo[40]; /* +0x0008 2d 15 00 00 */ }; struct _SYSDBG_CONTROL_SPACE { unsigned long long Address; /* +0x0000 */ void *Buffer; /* +0x0008 */ unsigned long Request; /* +0x0010 */ unsigned long Processor; /* +0x0014 */ }; struct _HMAC_Info { unsigned char HashAlgid[8]; /* +0x0000 75 00 00 00 */ unsigned char *pbInnerString; /* +0x0008 */ unsigned long cbInnerString; /* +0x0010 */ unsigned char *pbOuterString; /* +0x0018 */ unsigned long cbOuterString; /* +0x0020 */ }; struct _TOKEN_CONTROL { unsigned char TokenId[8]; /* +0x0000 38 15 00 00 */ unsigned char AuthenticationId[8]; /* +0x0008 38 15 00 00 */ unsigned char ModifiedId[8]; /* +0x0010 38 15 00 00 */ unsigned char TokenSource[16]; /* +0x0018 39 15 00 00 */ }; struct _CLAIM_SECURITY_ATTRIBUTES_INFORMATION { unsigned short Version; /* +0x0000 */ unsigned short Reserved; /* +0x0002 */ unsigned long AttributeCount; /* +0x0004 */ }; struct _FAT_STATISTICS { unsigned long CreateHits; /* +0x0000 */ unsigned long SuccessfulCreates; /* +0x0004 */ unsigned long FailedCreates; /* +0x0008 */ unsigned long NonCachedReads; /* +0x000c */ unsigned long NonCachedReadBytes; /* +0x0010 */ unsigned long NonCachedWrites; /* +0x0014 */ unsigned long NonCachedWriteBytes; /* +0x0018 */ unsigned long NonCachedDiskReads; /* +0x001c */ unsigned long NonCachedDiskWrites; /* +0x0020 */ }; struct tagREGISTERWORDA { char *lpReading; /* +0x0000 */ char *lpWord; /* +0x0008 */ }; struct tagSECURITYBINDING { unsigned short wAuthnSvc; /* +0x0000 */ unsigned short wAuthzSvc; /* +0x0002 */ unsigned short aPrincName; /* +0x0004 */ }; struct _SYSTEM_PROCESS_INFORMATION_EXTENSION { unsigned char DiskCounters[40]; /* +0x0000 4c 15 00 00 */ unsigned long Flags; /* +0x0028 */ /* unsigned char HasStrongId[0]; +0x0028 94 13 00 00 */ unsigned char Spare[8]; /* +0x0028 95 13 00 00 */ }; struct _JOURNAL_SET_KEY_SECURITY_INFORMATION { unsigned char Action[8]; /* +0x0000 4f 15 00 00 */ unsigned long long RecordNumber; /* +0x0008 */ unsigned char TimeStamp[8]; /* +0x0010 43 13 00 00 */ unsigned char KeyPathName[16]; /* +0x0018 e3 12 00 00 */ unsigned long OldSecurityDescriptorLength; /* +0x0028 */ void *OldSecurityDescriptor; /* +0x0030 */ unsigned long NewSecurityDescriptorLength; /* +0x0038 */ void *NewSecurityDescriptor; /* +0x0040 */ }; struct tagABORTPATH { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ }; struct _CRYPT_OID_FUNC_ENTRY { unsigned char pszOID[8]; /* +0x0000 79 14 00 00 */ void *pvFuncAddr; /* +0x0008 */ }; struct _SYSDBG_VIRTUAL { void *Address; /* +0x0000 */ void *Buffer; /* +0x0008 */ unsigned long Request; /* +0x0010 */ }; struct tagCREATESTRUCTW { void *lpCreateParams; /* +0x0000 */ unsigned char hInstance[8]; /* +0x0008 d1 14 00 00 */ unsigned char hMenu[8]; /* +0x0010 63 15 00 00 */ unsigned char hwndParent[8]; /* +0x0018 f7 12 00 00 */ unsigned char cy[4]; /* +0x0020 74 00 00 00 */ unsigned char cx[4]; /* +0x0024 74 00 00 00 */ unsigned char y[4]; /* +0x0028 74 00 00 00 */ unsigned char x[4]; /* +0x002c 74 00 00 00 */ long style; /* +0x0030 */ unsigned char lpszName[8]; /* +0x0038 cb 13 00 00 */ unsigned char lpszClass[8]; /* +0x0040 cb 13 00 00 */ unsigned long dwExStyle; /* +0x0048 */ }; struct _s__CatchableTypeArray { unsigned char nCatchableTypes[4]; /* +0x0000 74 00 00 00 */ /* unsigned char arrayOfCatchableTypes[0]; +0x0004 73 15 00 00 */ }; struct _STRING64 { unsigned short Length; /* +0x0000 */ unsigned short MaximumLength; /* +0x0002 */ unsigned long long Buffer; /* +0x0008 */ }; struct _UNWIND_CODE { unsigned char CodeOffset; /* +0x0000 */ /* unsigned char UnwindOp[0]; +0x0001 ea 13 00 00 */ unsigned char OpInfo[1]; /* +0x0001 eb 13 00 00 */ }; struct _STORAGE_QUERY_DEPENDENT_VOLUME_LEV2_ENTRY { unsigned long EntryLength; /* +0x0000 */ unsigned long DependencyTypeFlags; /* +0x0004 */ unsigned long ProviderSpecificFlags; /* +0x0008 */ unsigned char VirtualStorageType[20]; /* +0x000c 2e 14 00 00 */ unsigned long AncestorLevel; /* +0x0020 */ unsigned long HostVolumeNameOffset; /* +0x0024 */ unsigned long HostVolumeNameSize; /* +0x0028 */ unsigned long DependentVolumeNameOffset; /* +0x002c */ unsigned long DependentVolumeNameSize; /* +0x0030 */ unsigned long RelativePathOffset; /* +0x0034 */ unsigned long RelativePathSize; /* +0x0038 */ unsigned long DependentDeviceNameOffset; /* +0x003c */ unsigned long DependentDeviceNameSize; /* +0x0040 */ }; struct _CSV_NAMESPACE_INFO { unsigned long Version; /* +0x0000 */ unsigned long DeviceNumber; /* +0x0004 */ unsigned char StartingOffset[8]; /* +0x0008 43 13 00 00 */ unsigned long SectorSize; /* +0x0010 */ }; struct _SYSTEM_VERIFIER_ISSUE { unsigned long long IssueType; /* +0x0000 */ void *Address; /* +0x0008 */ unsigned char Parameters[16]; /* +0x0010 83 15 00 00 */ }; struct _CPTABLEINFO { unsigned short CodePage; /* +0x0000 */ unsigned short MaximumCharacterSize; /* +0x0002 */ unsigned short DefaultChar; /* +0x0004 */ unsigned short UniDefaultChar; /* +0x0006 */ unsigned short TransDefaultChar; /* +0x0008 */ unsigned short TransUniDefaultChar; /* +0x000a */ unsigned short DBCSCodePage; /* +0x000c */ unsigned char LeadByte[18]; /* +0x000e 88 15 00 00 */ unsigned short *MultiByteTable; /* +0x0020 */ void *WideCharTable; /* +0x0028 */ unsigned short *DBCSRanges; /* +0x0030 */ unsigned short *DBCSOffsets; /* +0x0038 */ }; struct _RECTL { long left; /* +0x0000 */ long top; /* +0x0004 */ long right; /* +0x0008 */ long bottom; /* +0x000c */ }; struct _CTL_VERIFY_USAGE_STATUS { unsigned long cbSize; /* +0x0000 */ unsigned long dwError; /* +0x0004 */ unsigned long dwFlags; /* +0x0008 */ unsigned char ppCtl[8]; /* +0x0010 9f 15 00 00 */ unsigned long dwCtlEntryIndex; /* +0x0018 */ unsigned char ppSigner[8]; /* +0x0020 a0 15 00 00 */ unsigned long dwSignerIndex; /* +0x0028 */ }; struct _CERT_CHAIN_CONTEXT { unsigned long cbSize; /* +0x0000 */ unsigned char TrustStatus[8]; /* +0x0004 c5 13 00 00 */ unsigned long cChain; /* +0x000c */ unsigned char rgpChain[8]; /* +0x0010 a7 15 00 00 */ unsigned long cLowerQualityChainContext; /* +0x0018 */ unsigned char rgpLowerQualityChainContext[8]; /* +0x0020 ab 15 00 00 */ unsigned char fHasRevocationFreshnessTime[4]; /* +0x0028 74 00 00 00 */ unsigned long dwRevocationFreshnessTime; /* +0x002c */ unsigned long dwCreateFlags; /* +0x0030 */ unsigned char ChainId[20]; /* +0x0034 f3 14 00 00 */ }; struct _SYSTEM_LEGACY_DRIVER_INFORMATION { unsigned long VetoType; /* +0x0000 */ unsigned char VetoList[16]; /* +0x0008 e3 12 00 00 */ }; struct tagMULTIKEYHELPW { unsigned long mkSize; /* +0x0000 */ unsigned char mkKeylist[2]; /* +0x0004 71 00 00 00 */ unsigned char szKeyphrase[2]; /* +0x0006 0a 14 00 00 */ }; struct tagRemHENHMETAFILE { unsigned long cbData; /* +0x0000 */ unsigned char data[4]; /* +0x0004 ff 12 00 00 */ }; struct _TIME_DYNAMIC_ZONE_INFORMATION { long Bias; /* +0x0000 */ unsigned char StandardName[64]; /* +0x0004 bf 15 00 00 */ unsigned char StandardDate[16]; /* +0x0044 c0 15 00 00 */ long StandardBias; /* +0x0054 */ unsigned char DaylightName[64]; /* +0x0058 bf 15 00 00 */ unsigned char DaylightDate[16]; /* +0x0098 c0 15 00 00 */ long DaylightBias; /* +0x00a8 */ unsigned char TimeZoneKeyName[256]; /* +0x00ac c1 15 00 00 */ unsigned char DynamicDaylightTimeDisabled; /* +0x01ac */ }; struct tagEMRFRAMERGN { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char rclBounds[16]; /* +0x0008 db 12 00 00 */ unsigned long cbRgnData; /* +0x0018 */ unsigned long ihBrush; /* +0x001c */ unsigned char szlStroke[8]; /* +0x0020 c4 15 00 00 */ unsigned char RgnData[4]; /* +0x0028 ff 12 00 00 */ }; struct _wireSAFEARR_BRECORD { unsigned long Size; /* +0x0000 */ unsigned char aRecord[8]; /* +0x0008 cd 15 00 00 */ }; struct tagDUALSTRINGARRAY { unsigned short wNumEntries; /* +0x0000 */ unsigned short wSecurityOffset; /* +0x0002 */ unsigned char aStringArray[2]; /* +0x0004 d4 15 00 00 */ }; struct _TRANSACTION_ENLISTMENTS_INFORMATION { unsigned long NumberOfEnlistments; /* +0x0000 */ unsigned char EnlistmentPair[32]; /* +0x0004 dc 15 00 00 */ }; struct _CREATE_PROCESS_DEBUG_INFO { void *hFile; /* +0x0000 */ void *hProcess; /* +0x0008 */ void *hThread; /* +0x0010 */ void *lpBaseOfImage; /* +0x0018 */ unsigned long dwDebugInfoFileOffset; /* +0x0020 */ unsigned long nDebugInfoSize; /* +0x0024 */ void *lpThreadLocalBase; /* +0x0028 */ unsigned char lpStartAddress[8]; /* +0x0030 e0 15 00 00 */ void *lpImageName; /* +0x0038 */ unsigned short fUnicode; /* +0x0040 */ }; struct _SMALL_RECT { short Left; /* +0x0000 */ short Top; /* +0x0002 */ short Right; /* +0x0004 */ short Bottom; /* +0x0006 */ }; struct _CERT_POLICY_QUALIFIER_USER_NOTICE { unsigned char pNoticeReference[8]; /* +0x0000 e6 15 00 00 */ unsigned char pszDisplayText[8]; /* +0x0008 71 06 00 00 */ }; struct _CERT_OTHER_LOGOTYPE_INFO { char *pszObjId; /* +0x0000 */ unsigned char LogotypeInfo[16]; /* +0x0008 e9 15 00 00 */ }; struct _ACE_HEADER { unsigned char AceType; /* +0x0000 */ unsigned char AceFlags; /* +0x0001 */ unsigned short AceSize; /* +0x0002 */ }; struct _THREAD_BASIC_INFORMATION { long ExitStatus; /* +0x0000 */ unsigned char TebBaseAddress[8]; /* +0x0008 f4 15 00 00 */ unsigned char ClientId[16]; /* +0x0010 44 13 00 00 */ unsigned long long AffinityMask; /* +0x0020 */ long Priority; /* +0x0028 */ long BasePriority; /* +0x002c */ }; struct _RTL_UMS_SCHEDULER_STARTUP_INFO { unsigned long UmsVersion; /* +0x0000 */ unsigned char CompletionList[8]; /* +0x0008 f8 15 00 00 */ unsigned char SchedulerProc[8]; /* +0x0010 fc 15 00 00 */ void *SchedulerParam; /* +0x0018 */ }; struct _wfinddata64i32_t { unsigned char attrib[8]; /* +0x0000 75 00 00 00 */ long long time_create; /* +0x0008 */ long long time_access; /* +0x0010 */ long long time_write; /* +0x0018 */ unsigned long size; /* +0x0020 */ unsigned char name[524]; /* +0x0024 00 16 00 00 */ }; struct tagEMRPOLYPOLYLINE { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char rclBounds[16]; /* +0x0008 db 12 00 00 */ unsigned long nPolys; /* +0x0018 */ unsigned long cptl; /* +0x001c */ unsigned char aPolyCounts[4]; /* +0x0020 fc 12 00 00 */ unsigned char aptl[8]; /* +0x0024 05 16 00 00 */ }; struct tagUSEROBJECTFLAGS { unsigned char fInherit[4]; /* +0x0000 74 00 00 00 */ unsigned char fReserved[4]; /* +0x0004 74 00 00 00 */ unsigned long dwFlags; /* +0x0008 */ }; struct _NON_PAGED_DEBUG_INFO { unsigned short Signature; /* +0x0000 */ unsigned short Flags; /* +0x0002 */ unsigned long Size; /* +0x0004 */ unsigned short Machine; /* +0x0008 */ unsigned short Characteristics; /* +0x000a */ unsigned long TimeDateStamp; /* +0x000c */ unsigned long CheckSum; /* +0x0010 */ unsigned long SizeOfImage; /* +0x0014 */ unsigned long long ImageBase; /* +0x0018 */ }; struct _ALPC_PORT_MESSAGE_ZONE_INFORMATION { void *Buffer; /* +0x0000 */ unsigned long Size; /* +0x0008 */ }; struct _SCRUB_DATA_INPUT { unsigned long Flags; /* +0x0000 */ unsigned long MaximumIos; /* +0x0004 */ unsigned char Reserved[8]; /* +0x0008 14 16 00 00 */ unsigned char ResumeContext[816]; /* +0x0010 15 16 00 00 */ }; struct _CERT_ACCESS_DESCRIPTION { char *pszAccessMethod; /* +0x0000 */ unsigned char AccessLocation[24]; /* +0x0008 1c 16 00 00 */ }; struct _FILE_FS_DRIVER_PATH_INFORMATION { unsigned char DriverInPath; /* +0x0000 */ unsigned long DriverNameLength; /* +0x0004 */ unsigned char DriverName[4]; /* +0x0008 0a 14 00 00 */ }; struct _userHENHMETAFILE { long fContext; /* +0x0000 */ }; struct _userHENHMETAFILE::__MIDL_IWinTypes_0006 { long hInproc; /* +0x0000 */ /* unsigned char hRemote[0]; +0x0000 2b 16 00 00 */ long long hInproc64; /* +0x0000 */ }; struct _CRL_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char SignatureAlgorithm[24]; /* +0x0008 68 14 00 00 */ unsigned char Issuer[16]; /* +0x0020 08 13 00 00 */ unsigned char ThisUpdate[8]; /* +0x0030 37 13 00 00 */ unsigned char NextUpdate[8]; /* +0x0038 37 13 00 00 */ unsigned long cCRLEntry; /* +0x0040 */ unsigned char rgCRLEntry[8]; /* +0x0048 3d 16 00 00 */ unsigned long cExtension; /* +0x0050 */ unsigned char rgExtension[8]; /* +0x0058 3f 16 00 00 */ }; struct _CRYPT_TIMESTAMP_CONTEXT { unsigned long cbEncoded; /* +0x0000 */ unsigned char *pbEncoded; /* +0x0008 */ unsigned char pTimeStamp[8]; /* +0x0010 43 16 00 00 */ }; struct _NLSTABLEINFO { unsigned char OemTableInfo[64]; /* +0x0000 48 16 00 00 */ unsigned char AnsiTableInfo[64]; /* +0x0040 48 16 00 00 */ unsigned short *UpperCaseTable; /* +0x0080 */ unsigned short *LowerCaseTable; /* +0x0088 */ }; struct _USER_MARSHAL_ROUTINE_QUADRUPLE { unsigned char pfnBufferSize[8]; /* +0x0000 4d 16 00 00 */ unsigned char pfnMarshall[8]; /* +0x0008 50 16 00 00 */ unsigned char pfnUnmarshall[8]; /* +0x0010 50 16 00 00 */ unsigned char pfnFree[8]; /* +0x0018 53 16 00 00 */ }; struct _tagpropertykey { unsigned char fmtid[16]; /* +0x0000 f3 14 00 00 */ unsigned long pid; /* +0x0010 */ }; struct _CERT_SIGNED_CONTENT_INFO { unsigned char ToBeSigned[16]; /* +0x0000 08 13 00 00 */ unsigned char SignatureAlgorithm[24]; /* +0x0010 68 14 00 00 */ unsigned char Signature[24]; /* +0x0028 09 13 00 00 */ }; struct _CMC_TAGGED_ATTRIBUTE { unsigned long dwBodyPartID; /* +0x0000 */ unsigned char Attribute[24]; /* +0x0008 e2 13 00 00 */ }; struct _JOBOBJECT_JOBSET_INFORMATION { unsigned long MemberLevel; /* +0x0000 */ }; struct _SYSTEM_OBJECTTYPE_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long NumberOfObjects; /* +0x0004 */ unsigned long NumberOfHandles; /* +0x0008 */ unsigned long TypeIndex; /* +0x000c */ unsigned long InvalidAttributes; /* +0x0010 */ unsigned char GenericMapping[16]; /* +0x0014 5e 16 00 00 */ unsigned long ValidAccessMask; /* +0x0024 */ unsigned long PoolType; /* +0x0028 */ unsigned char SecurityRequired; /* +0x002c */ unsigned char WaitableObject; /* +0x002d */ unsigned char TypeName[16]; /* +0x0030 e3 12 00 00 */ }; struct _PLUGPLAY_CONTROL_INTERFACE_ALIAS_DATA { unsigned char SymbolicLinkName[16]; /* +0x0000 e3 12 00 00 */ unsigned char AliasClassGuid[8]; /* +0x0010 61 16 00 00 */ unsigned char AliasSymbolicLinkName[8]; /* +0x0018 71 06 00 00 */ unsigned long AliasSymbolicLinkNameLength; /* +0x0020 */ }; struct _RTL_HEAP_ENTRY { unsigned long long Size; /* +0x0000 */ unsigned short Flags; /* +0x0008 */ unsigned short AllocatorBackTraceIndex; /* +0x000a */ }; struct _FINDFIRSTACTIVATIONCONTEXTSECTION { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned char ExtensionGuid[8]; /* +0x0008 67 16 00 00 */ unsigned long Id; /* +0x0010 */ unsigned long Depth; /* +0x0014 */ unsigned long OutFlags; /* +0x0018 */ }; struct DISPLAYCONFIG_PATH_SOURCE_INFO { unsigned char adapterId[8]; /* +0x0000 38 15 00 00 */ unsigned char id[4]; /* +0x0008 75 00 00 00 */ unsigned char modeInfoIdx[4]; /* +0x000c 75 00 00 00 */ unsigned char statusFlags[4]; /* +0x0010 75 00 00 00 */ }; struct tagRAWINPUT { unsigned char header[48]; /* +0x0000 6c 16 00 00 */ }; struct _SET_PURGE_FAILURE_MODE_INPUT { unsigned long Flags; /* +0x0000 */ }; struct CM_Power_Data_s { unsigned long PD_Size; /* +0x0000 */ unsigned char PD_MostRecentPowerState[4]; /* +0x0004 74 16 00 00 */ unsigned long PD_Capabilities; /* +0x0008 */ unsigned long PD_D1Latency; /* +0x000c */ unsigned long PD_D2Latency; /* +0x0010 */ unsigned long PD_D3Latency; /* +0x0014 */ unsigned char PD_PowerStateMapping[28]; /* +0x0018 75 16 00 00 */ unsigned char PD_DeepestSystemWake[4]; /* +0x0034 76 16 00 00 */ }; struct tagANIMATIONINFO { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char iMinAnimate[4]; /* +0x0004 74 00 00 00 */ }; struct _CTL_FIND_SUBJECT_PARA { unsigned long cbSize; /* +0x0000 */ unsigned char pUsagePara[8]; /* +0x0008 7e 16 00 00 */ unsigned long dwSubjectType; /* +0x0010 */ void *pvSubject; /* +0x0018 */ }; struct _VIDEOPARAMETERS { unsigned char Guid[16]; /* +0x0000 f3 14 00 00 */ unsigned long dwOffset; /* +0x0010 */ unsigned long dwCommand; /* +0x0014 */ unsigned long dwFlags; /* +0x0018 */ unsigned long dwMode; /* +0x001c */ unsigned long dwTVStandard; /* +0x0020 */ unsigned long dwAvailableModes; /* +0x0024 */ unsigned long dwAvailableTVStandard; /* +0x0028 */ unsigned long dwFlickerFilter; /* +0x002c */ unsigned long dwOverScanX; /* +0x0030 */ unsigned long dwOverScanY; /* +0x0034 */ unsigned long dwMaxUnscaledX; /* +0x0038 */ unsigned long dwMaxUnscaledY; /* +0x003c */ unsigned long dwPositionX; /* +0x0040 */ unsigned long dwPositionY; /* +0x0044 */ unsigned long dwBrightness; /* +0x0048 */ unsigned long dwContrast; /* +0x004c */ unsigned long dwCPType; /* +0x0050 */ unsigned long dwCPCommand; /* +0x0054 */ unsigned long dwCPStandard; /* +0x0058 */ unsigned long dwCPKey; /* +0x005c */ unsigned long bCP_APSTriggerBits; /* +0x0060 */ unsigned char bOEMCopyProtection[256]; /* +0x0064 90 16 00 00 */ }; struct _OCSP_CERT_ID { unsigned char HashAlgorithm[24]; /* +0x0000 68 14 00 00 */ unsigned char IssuerNameHash[16]; /* +0x0018 08 13 00 00 */ unsigned char IssuerKeyHash[16]; /* +0x0028 08 13 00 00 */ unsigned char SerialNumber[16]; /* +0x0038 08 13 00 00 */ }; struct _GROUP_RELATIONSHIP { unsigned short MaximumGroupCount; /* +0x0000 */ unsigned short ActiveGroupCount; /* +0x0002 */ unsigned char Reserved[20]; /* +0x0004 97 16 00 00 */ unsigned char GroupInfo[48]; /* +0x0018 99 16 00 00 */ }; struct _RTL_TRACE_BLOCK { unsigned long Magic; /* +0x0000 */ unsigned long Count; /* +0x0004 */ unsigned long Size; /* +0x0008 */ unsigned long long UserCount; /* +0x0010 */ unsigned long long UserSize; /* +0x0018 */ void *UserContext; /* +0x0020 */ unsigned char Next[8]; /* +0x0028 9d 16 00 00 */ unsigned char Trace[8]; /* +0x0030 55 13 00 00 */ }; struct tagBITMAPCOREINFO { unsigned char bmciHeader[12]; /* +0x0000 a0 16 00 00 */ unsigned char bmciColors[4]; /* +0x000c a2 16 00 00 */ }; struct tagPIXELFORMATDESCRIPTOR { unsigned short nSize; /* +0x0000 */ unsigned short nVersion; /* +0x0002 */ unsigned long dwFlags; /* +0x0004 */ unsigned char iPixelType; /* +0x0008 */ unsigned char cColorBits; /* +0x0009 */ unsigned char cRedBits; /* +0x000a */ unsigned char cRedShift; /* +0x000b */ unsigned char cGreenBits; /* +0x000c */ unsigned char cGreenShift; /* +0x000d */ unsigned char cBlueBits; /* +0x000e */ unsigned char cBlueShift; /* +0x000f */ unsigned char cAlphaBits; /* +0x0010 */ unsigned char cAlphaShift; /* +0x0011 */ unsigned char cAccumBits; /* +0x0012 */ unsigned char cAccumRedBits; /* +0x0013 */ unsigned char cAccumGreenBits; /* +0x0014 */ unsigned char cAccumBlueBits; /* +0x0015 */ unsigned char cAccumAlphaBits; /* +0x0016 */ unsigned char cDepthBits; /* +0x0017 */ unsigned char cStencilBits; /* +0x0018 */ unsigned char cAuxBuffers; /* +0x0019 */ unsigned char iLayerType; /* +0x001a */ unsigned char bReserved; /* +0x001b */ unsigned long dwLayerMask; /* +0x001c */ unsigned long dwVisibleMask; /* +0x0020 */ unsigned long dwDamageMask; /* +0x0024 */ }; struct tagEMRFILLPATH { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char rclBounds[16]; /* +0x0008 db 12 00 00 */ }; struct _FLOAT128 { long long LowPart; /* +0x0000 */ long long HighPart; /* +0x0008 */ }; struct _STRING { unsigned short Length; /* +0x0000 */ unsigned short MaximumLength; /* +0x0002 */ char *Buffer; /* +0x0008 */ }; struct tagEMRFILLRGN { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char rclBounds[16]; /* +0x0008 db 12 00 00 */ unsigned long cbRgnData; /* +0x0018 */ unsigned long ihBrush; /* +0x001c */ unsigned char RgnData[4]; /* +0x0020 ff 12 00 00 */ }; struct _CRYPT_SMIME_CAPABILITIES { unsigned long cCapability; /* +0x0000 */ unsigned char rgCapability[8]; /* +0x0008 c4 16 00 00 */ }; struct _PS_MEMORY_RESERVE { void *ReserveAddress; /* +0x0000 */ unsigned long long ReserveSize; /* +0x0008 */ }; struct _SYSTEM_SET_TIME_ADJUST_INFORMATION { unsigned long TimeAdjustment; /* +0x0000 */ unsigned char Enable; /* +0x0004 */ }; struct _SERVICE_NOTIFY_2A { unsigned long dwVersion; /* +0x0000 */ unsigned char pfnNotifyCallback[8]; /* +0x0008 d2 13 00 00 */ void *pContext; /* +0x0010 */ unsigned long dwNotificationStatus; /* +0x0018 */ unsigned char ServiceStatus[36]; /* +0x001c e0 16 00 00 */ unsigned long dwNotificationTriggered; /* +0x0040 */ char *pszServiceNames; /* +0x0048 */ }; struct _FILE_PIPE_ASSIGN_EVENT_BUFFER { void *EventHandle; /* +0x0000 */ unsigned long KeyValue; /* +0x0008 */ }; struct _MEMORY_BASIC_INFORMATION32 { unsigned long BaseAddress; /* +0x0000 */ unsigned long AllocationBase; /* +0x0004 */ unsigned long AllocationProtect; /* +0x0008 */ unsigned long RegionSize; /* +0x000c */ unsigned long State; /* +0x0010 */ unsigned long Protect; /* +0x0014 */ unsigned long Type; /* +0x0018 */ }; struct tagTEXTMETRICA { long tmHeight; /* +0x0000 */ long tmAscent; /* +0x0004 */ long tmDescent; /* +0x0008 */ long tmInternalLeading; /* +0x000c */ long tmExternalLeading; /* +0x0010 */ long tmAveCharWidth; /* +0x0014 */ long tmMaxCharWidth; /* +0x0018 */ long tmWeight; /* +0x001c */ long tmOverhang; /* +0x0020 */ long tmDigitizedAspectX; /* +0x0024 */ long tmDigitizedAspectY; /* +0x0028 */ unsigned char tmFirstChar; /* +0x002c */ unsigned char tmLastChar; /* +0x002d */ unsigned char tmDefaultChar; /* +0x002e */ unsigned char tmBreakChar; /* +0x002f */ unsigned char tmItalic; /* +0x0030 */ unsigned char tmUnderlined; /* +0x0031 */ unsigned char tmStruckOut; /* +0x0032 */ unsigned char tmPitchAndFamily; /* +0x0033 */ unsigned char tmCharSet; /* +0x0034 */ }; struct _RDR_CALLOUT_STATE { long LastError; /* +0x0000 */ void *LastEEInfo; /* +0x0008 */ unsigned char LastCalledStage[8]; /* +0x0010 05 17 00 00 */ unsigned short *ServerName; /* +0x0018 */ unsigned short *ServerPort; /* +0x0020 */ unsigned short *RemoteUser; /* +0x0028 */ unsigned short *AuthType; /* +0x0030 */ unsigned char ResourceTypePresent; /* +0x0038 */ unsigned char SessionIdPresent; /* +0x0039 */ unsigned char InterfacePresent; /* +0x003a */ unsigned char ResourceType[16]; /* +0x003c f3 14 00 00 */ unsigned char SessionId[16]; /* +0x004c f3 14 00 00 */ unsigned char Interface[20]; /* +0x005c 06 17 00 00 */ void *CertContext; /* +0x0070 */ }; struct _POINTL { long x; /* +0x0000 */ long y; /* +0x0004 */ }; struct _OFSTRUCT { unsigned char cBytes; /* +0x0000 */ unsigned char fFixedDisk; /* +0x0001 */ unsigned short nErrCode; /* +0x0002 */ unsigned short Reserved1; /* +0x0004 */ unsigned short Reserved2; /* +0x0006 */ unsigned char szPathName[128]; /* +0x0008 12 17 00 00 */ }; struct DISPLAYCONFIG_RATIONAL { unsigned char Numerator[4]; /* +0x0000 75 00 00 00 */ unsigned char Denominator[4]; /* +0x0004 75 00 00 00 */ }; struct _MAT2 { unsigned char eM11[4]; /* +0x0000 17 17 00 00 */ unsigned char eM12[4]; /* +0x0004 17 17 00 00 */ unsigned char eM21[4]; /* +0x0008 17 17 00 00 */ unsigned char eM22[4]; /* +0x000c 17 17 00 00 */ }; struct _PROTOGON_STATISTICS { unsigned long Unused; /* +0x0000 */ }; struct _MCA_EXCEPTION { unsigned long VersionNumber; /* +0x0000 */ unsigned char ExceptionType[4]; /* +0x0004 20 17 00 00 */ unsigned char TimeStamp[8]; /* +0x0008 43 13 00 00 */ unsigned long ProcessorNumber; /* +0x0010 */ unsigned long Reserved1; /* +0x0014 */ }; struct tagEMRNAMEDESCAPE { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char iEscape[4]; /* +0x0008 74 00 00 00 */ unsigned char cbDriver[4]; /* +0x000c 74 00 00 00 */ unsigned char cbEscData[4]; /* +0x0010 74 00 00 00 */ unsigned char EscData[4]; /* +0x0014 ff 12 00 00 */ }; struct _TOKEN_MANDATORY_LABEL { unsigned char Label[16]; /* +0x0000 2d 17 00 00 */ }; struct _OUTPUT_DEBUG_STRING_INFO { char *lpDebugStringData; /* +0x0000 */ unsigned short fUnicode; /* +0x0008 */ unsigned short nDebugStringLength; /* +0x000a */ }; struct _SE_PACKAGE_CAPABILITY_INFO { unsigned long Remaining; /* +0x0000 */ unsigned long PackageGrantedAccess; /* +0x0004 */ unsigned long CapabilityGrantedAccess; /* +0x0008 */ unsigned long UserGroupsRemaining; /* +0x000c */ unsigned char PackagesPresent; /* +0x0010 */ unsigned char PackageMatch; /* +0x0011 */ unsigned char CapabilityMatch; /* +0x0012 */ unsigned char LogPermissiveFailure; /* +0x0013 */ }; struct _UNIVERSAL_NAME_INFOW { unsigned char lpUniversalName[8]; /* +0x0000 71 06 00 00 */ }; struct _WORD_BLOB { unsigned long clSize; /* +0x0000 */ unsigned char asData[4]; /* +0x0004 d4 15 00 00 */ }; struct _DRIVER_VERIFIER_THUNK_PAIRS { unsigned char PristineRoutine[8]; /* +0x0000 51 17 00 00 */ unsigned char NewRoutine[8]; /* +0x0008 51 17 00 00 */ }; struct _SYSTEM_VERIFIER_TRIAGE_INFORMATION { unsigned long ActionTaken; /* +0x0000 */ unsigned char CrashData[40]; /* +0x0008 54 17 00 00 */ unsigned long VerifierMode; /* +0x0030 */ unsigned long VerifierFlags; /* +0x0034 */ unsigned char VerifierTargets[512]; /* +0x0038 55 17 00 00 */ }; struct _JOURNAL_RENAME_KEY_INFORMATION { unsigned char Action[8]; /* +0x0000 4f 15 00 00 */ unsigned long long RecordNumber; /* +0x0008 */ unsigned char TimeStamp[8]; /* +0x0010 43 13 00 00 */ unsigned char KeyPathName[16]; /* +0x0018 e3 12 00 00 */ unsigned char KeyKeyName[16]; /* +0x0028 e3 12 00 00 */ }; struct tagEMRSETVIEWPORTEXTEX { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char szlExtent[8]; /* +0x0008 c4 15 00 00 */ }; struct tagTRACKMOUSEEVENT { unsigned long cbSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char hwndTrack[8]; /* +0x0008 f7 12 00 00 */ unsigned long dwHoverTime; /* +0x0010 */ }; struct tagCOMBOBOXINFO { unsigned long cbSize; /* +0x0000 */ unsigned char rcItem[16]; /* +0x0004 7a 14 00 00 */ unsigned char rcButton[16]; /* +0x0014 7a 14 00 00 */ unsigned long stateButton; /* +0x0024 */ unsigned char hwndCombo[8]; /* +0x0028 f7 12 00 00 */ unsigned char hwndItem[8]; /* +0x0030 f7 12 00 00 */ unsigned char hwndList[8]; /* +0x0038 f7 12 00 00 */ }; struct _RPC_SECURITY_QOS_V2_A { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ unsigned long AdditionalSecurityInfoType; /* +0x0010 */ }; struct _RPC_SECURITY_QOS_V2_A:: { unsigned char HttpCredentials[8]; /* +0x0000 67 17 00 00 */ }; struct _FILE_PIPE_LOCAL_INFORMATION { unsigned long NamedPipeType; /* +0x0000 */ unsigned long NamedPipeConfiguration; /* +0x0004 */ unsigned long MaximumInstances; /* +0x0008 */ unsigned long CurrentInstances; /* +0x000c */ unsigned long InboundQuota; /* +0x0010 */ unsigned long ReadDataAvailable; /* +0x0014 */ unsigned long OutboundQuota; /* +0x0018 */ unsigned long WriteQuotaAvailable; /* +0x001c */ unsigned long NamedPipeState; /* +0x0020 */ unsigned long NamedPipeEnd; /* +0x0024 */ }; struct _MUILANGLIST { unsigned char TotalSize[4]; /* +0x0000 75 00 00 00 */ unsigned short NumLanguages; /* +0x0004 */ unsigned short MaxNumLanguages; /* +0x0006 */ unsigned char bUseUseMachineConfigList; /* +0x0008 */ unsigned char RegInfo[8]; /* +0x0010 76 17 00 00 */ unsigned char Languages[8]; /* +0x0018 78 17 00 00 */ unsigned long long ullMask; /* +0x0020 */ unsigned char uConsoleFlag[4]; /* +0x0028 75 00 00 00 */ unsigned char Checksum[20]; /* +0x002c 79 17 00 00 */ }; struct _ACTIVATION_CONTEXT_SECTION_KEYED_DATA { unsigned long Size; /* +0x0000 */ unsigned long DataFormatVersion; /* +0x0004 */ void *Data; /* +0x0008 */ unsigned long Length; /* +0x0010 */ void *SectionGlobalData; /* +0x0018 */ unsigned long SectionGlobalDataLength; /* +0x0020 */ void *SectionBase; /* +0x0028 */ unsigned long SectionTotalLength; /* +0x0030 */ unsigned char ActivationContext[8]; /* +0x0038 7d 17 00 00 */ unsigned long AssemblyRosterIndex; /* +0x0040 */ unsigned long Flags; /* +0x0044 */ unsigned char AssemblyMetadata[40]; /* +0x0048 7e 17 00 00 */ }; struct _BY_HANDLE_FILE_INFORMATION { unsigned long dwFileAttributes; /* +0x0000 */ unsigned char ftCreationTime[8]; /* +0x0004 37 13 00 00 */ unsigned char ftLastAccessTime[8]; /* +0x000c 37 13 00 00 */ unsigned char ftLastWriteTime[8]; /* +0x0014 37 13 00 00 */ unsigned long dwVolumeSerialNumber; /* +0x001c */ unsigned long nFileSizeHigh; /* +0x0020 */ unsigned long nFileSizeLow; /* +0x0024 */ unsigned long nNumberOfLinks; /* +0x0028 */ unsigned long nFileIndexHigh; /* +0x002c */ unsigned long nFileIndexLow; /* +0x0030 */ }; struct _CERT_SELECT_CHAIN_PARA { void *hChainEngine; /* +0x0000 */ unsigned char pTime[8]; /* +0x0008 87 17 00 00 */ void *hAdditionalStore; /* +0x0010 */ unsigned char pChainPara[8]; /* +0x0018 89 17 00 00 */ unsigned long dwFlags; /* +0x0020 */ }; struct _PROCESSOR_IDLE_STATE { unsigned char StateType; /* +0x0000 */ unsigned long StateFlags; /* +0x0004 */ unsigned long HardwareLatency; /* +0x0008 */ unsigned long Power; /* +0x000c */ unsigned long long Context; /* +0x0010 */ unsigned char Handler[8]; /* +0x0018 a5 17 00 00 */ }; struct _EVENTLOGRECORD { unsigned long Length; /* +0x0000 */ unsigned long Reserved; /* +0x0004 */ unsigned long RecordNumber; /* +0x0008 */ unsigned long TimeGenerated; /* +0x000c */ unsigned long TimeWritten; /* +0x0010 */ unsigned long EventID; /* +0x0014 */ unsigned short EventType; /* +0x0018 */ unsigned short NumStrings; /* +0x001a */ unsigned short EventCategory; /* +0x001c */ unsigned short ReservedFlags; /* +0x001e */ unsigned long ClosingRecordNumber; /* +0x0020 */ unsigned long StringOffset; /* +0x0024 */ unsigned long UserSidLength; /* +0x0028 */ unsigned long UserSidOffset; /* +0x002c */ unsigned long DataLength; /* +0x0030 */ unsigned long DataOffset; /* +0x0034 */ }; struct _PLUGPLAY_CUSTOM_NOTIFICATION { unsigned char HeaderInfo[24]; /* +0x0000 ac 17 00 00 */ void *FileObject; /* +0x0018 */ long NameBufferOffset; /* +0x0020 */ unsigned char CustomDataBuffer[4]; /* +0x0024 ff 12 00 00 */ }; struct _UNICODE_PREFIX_TABLE_ENTRY { short NodeTypeCode; /* +0x0000 */ short NameLength; /* +0x0002 */ unsigned char NextPrefixTree[8]; /* +0x0008 b4 17 00 00 */ unsigned char CaseMatch[8]; /* +0x0010 b4 17 00 00 */ unsigned char Links[24]; /* +0x0018 b5 17 00 00 */ unsigned char Prefix[8]; /* +0x0030 b6 17 00 00 */ }; struct tagSTYLESTRUCT { unsigned long styleOld; /* +0x0000 */ unsigned long styleNew; /* +0x0004 */ }; struct _cpinfoexW { unsigned char MaxCharSize[4]; /* +0x0000 75 00 00 00 */ unsigned char DefaultChar[2]; /* +0x0004 bb 17 00 00 */ unsigned char LeadByte[12]; /* +0x0006 88 15 00 00 */ unsigned char UnicodeDefaultChar[2]; /* +0x0012 71 00 00 00 */ unsigned char CodePage[4]; /* +0x0014 75 00 00 00 */ unsigned char CodePageName[520]; /* +0x0018 00 16 00 00 */ }; struct _SYSTEM_SPECIAL_POOL_INFORMATION { unsigned long PoolTag; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ }; struct _COVERAGE_MODULE_REQUEST { unsigned char RequestType[24]; /* +0x0000 e6 16 00 00 */ }; struct _RTL_PROCESS_VERIFIER_OPTIONS { unsigned long SizeStruct; /* +0x0000 */ unsigned long Option; /* +0x0004 */ unsigned char OptionData[4]; /* +0x0008 ff 12 00 00 */ }; struct _tagSOFTDISTINFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned long dwAdState; /* +0x0008 */ unsigned char szTitle[8]; /* +0x0010 71 06 00 00 */ unsigned char szAbstract[8]; /* +0x0018 71 06 00 00 */ unsigned char szHREF[8]; /* +0x0020 71 06 00 00 */ unsigned long dwInstalledVersionMS; /* +0x0028 */ unsigned long dwInstalledVersionLS; /* +0x002c */ unsigned long dwUpdateVersionMS; /* +0x0030 */ unsigned long dwUpdateVersionLS; /* +0x0034 */ unsigned long dwAdvertisedVersionMS; /* +0x0038 */ unsigned long dwAdvertisedVersionLS; /* +0x003c */ unsigned long dwReserved; /* +0x0040 */ }; struct _BCRYPT_DSA_PARAMETER_HEADER { unsigned long cbLength; /* +0x0000 */ unsigned long dwMagic; /* +0x0004 */ unsigned long cbKeyLength; /* +0x0008 */ unsigned char Count[4]; /* +0x000c cb 17 00 00 */ unsigned char Seed[20]; /* +0x0010 97 16 00 00 */ unsigned char q[20]; /* +0x0024 97 16 00 00 */ }; struct _RTL_UMS_CONTEXT { unsigned char Link[16]; /* +0x0000 ce 17 00 00 */ unsigned char Context[1232]; /* +0x0010 5d 13 00 00 */ void *Teb; /* +0x04e0 */ void *UserContext; /* +0x04e8 */ /* unsigned char ScheduledThread[0]; +0x04f0 d0 17 00 00 */ /* unsigned char Suspended[0]; +0x04f0 d1 17 00 00 */ /* unsigned char VolatileContext[0]; +0x04f0 d2 17 00 00 */ /* unsigned char Terminated[0]; +0x04f0 d3 17 00 00 */ /* unsigned char DebugActive[0]; +0x04f0 d4 17 00 00 */ /* unsigned char RunningOnSelfThread[0]; +0x04f0 d5 17 00 00 */ /* unsigned char DenyRunningOnSelfThread[0]; +0x04f0 d6 17 00 00 */ unsigned char Flags[8]; /* +0x04f0 d7 17 00 00 */ /* unsigned char KernelUpdateLock[0]; +0x04f8 d9 17 00 00 */ /* unsigned char PrimaryClientID[0]; +0x04f8 da 17 00 00 */ unsigned char ContextLock[8]; /* +0x04f8 d8 17 00 00 */ unsigned char PrimaryUmsContext[8]; /* +0x0500 dc 17 00 00 */ unsigned long SwitchCount; /* +0x0508 */ unsigned long KernelYieldCount; /* +0x050c */ unsigned long MixedYieldCount; /* +0x0510 */ unsigned long YieldCount; /* +0x0514 */ }; struct XSAVE_CPU_INFO { unsigned char Processor; /* +0x0000 */ unsigned short Family; /* +0x0002 */ unsigned short Model; /* +0x0004 */ unsigned short Stepping; /* +0x0006 */ unsigned short ExtendedModel; /* +0x0008 */ unsigned long ExtendedFamily; /* +0x000c */ unsigned long long MicrocodeVersion; /* +0x0010 */ unsigned long Reserved; /* +0x0018 */ }; struct _OBJECT_DIRECTORY_INFORMATION { unsigned char Name[16]; /* +0x0000 e3 12 00 00 */ unsigned char TypeName[16]; /* +0x0010 e3 12 00 00 */ }; struct _JOURNAL_CLIENT_INFORMATION { unsigned char StartTimeStamp[8]; /* +0x0000 43 13 00 00 */ unsigned char CurrentTimeStamp[8]; /* +0x0008 43 13 00 00 */ unsigned long long RecordsToProcess; /* +0x0010 */ unsigned long RelativeFillLevel; /* +0x0018 */ }; struct tagEMRMODIFYWORLDTRANSFORM { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char xform[24]; /* +0x0008 dc 12 00 00 */ unsigned long iMode; /* +0x0020 */ }; struct SChannelHookCallInfo { unsigned char iid[16]; /* +0x0000 f3 14 00 00 */ unsigned long cbSize; /* +0x0010 */ unsigned char uCausality[16]; /* +0x0014 f3 14 00 00 */ unsigned long dwServerPid; /* +0x0024 */ unsigned long iMethod; /* +0x0028 */ void *pObject; /* +0x0030 */ }; struct __MIDL_XmitDefs_0001 { unsigned long dwFlags; /* +0x0000 */ unsigned long dwClientThread; /* +0x0004 */ }; struct tagEXTLOGFONTA { unsigned char elfLogFont[60]; /* +0x0000 dc 16 00 00 */ unsigned char elfFullName[64]; /* +0x003c 19 13 00 00 */ unsigned char elfStyle[32]; /* +0x007c f7 17 00 00 */ unsigned long elfVersion; /* +0x009c */ unsigned long elfStyleSize; /* +0x00a0 */ unsigned long elfMatch; /* +0x00a4 */ unsigned long elfReserved; /* +0x00a8 */ unsigned char elfVendorId[4]; /* +0x00ac cb 17 00 00 */ unsigned long elfCulture; /* +0x00b0 */ unsigned char elfPanose[12]; /* +0x00b4 f8 17 00 00 */ }; struct _tagPROTOCOLDATA { unsigned long grfFlags; /* +0x0000 */ unsigned long dwState; /* +0x0004 */ void *pData; /* +0x0008 */ unsigned long cbData; /* +0x0010 */ }; struct _FILE_FULL_DIR_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long FileIndex; /* +0x0004 */ unsigned char CreationTime[8]; /* +0x0008 43 13 00 00 */ unsigned char LastAccessTime[8]; /* +0x0010 43 13 00 00 */ unsigned char LastWriteTime[8]; /* +0x0018 43 13 00 00 */ unsigned char ChangeTime[8]; /* +0x0020 43 13 00 00 */ unsigned char EndOfFile[8]; /* +0x0028 43 13 00 00 */ unsigned char AllocationSize[8]; /* +0x0030 43 13 00 00 */ unsigned long FileAttributes; /* +0x0038 */ unsigned long FileNameLength; /* +0x003c */ unsigned long EaSize; /* +0x0040 */ unsigned char FileName[4]; /* +0x0044 0a 14 00 00 */ }; struct _FILE_REPARSE_POINT_INFORMATION { long long FileReference; /* +0x0000 */ unsigned long Tag; /* +0x0008 */ }; struct _RTL_STACK_CONTEXT_ENTRY { unsigned long long Address; /* +0x0000 */ unsigned long long Data; /* +0x0008 */ }; struct _TRIPLE_LIST_ITERATOR { unsigned char List[8]; /* +0x0000 12 18 00 00 */ unsigned char NextEntry[8]; /* +0x0008 5b 17 00 00 */ unsigned char ActiveList; /* +0x0010 */ unsigned char ProbeReads; /* +0x0011 */ unsigned char ReturnDataOffset; /* +0x0012 */ unsigned char Wow64List; /* +0x0013 */ }; struct _ICONINFOEXW { unsigned long cbSize; /* +0x0000 */ unsigned char fIcon[4]; /* +0x0004 74 00 00 00 */ unsigned long xHotspot; /* +0x0008 */ unsigned long yHotspot; /* +0x000c */ unsigned char hbmMask[8]; /* +0x0010 18 18 00 00 */ unsigned char hbmColor[8]; /* +0x0018 18 18 00 00 */ unsigned short wResID; /* +0x0020 */ unsigned char szModName[520]; /* +0x0022 00 16 00 00 */ unsigned char szResName[526]; /* +0x022a 00 16 00 00 */ }; struct _PO_WAKE_SOURCE_TIMER { unsigned char Header[8]; /* +0x0000 1d 18 00 00 */ unsigned char Reason[40]; /* +0x0008 1e 18 00 00 */ }; struct _CM_PNP_BIOS_INSTALLATION_CHECK { unsigned char Signature[4]; /* +0x0000 cb 17 00 00 */ unsigned char Revision; /* +0x0004 */ unsigned char Length; /* +0x0005 */ unsigned short ControlField; /* +0x0006 */ unsigned char Checksum; /* +0x0008 */ unsigned long EventFlagAddress; /* +0x0009 */ unsigned short RealModeEntryOffset; /* +0x000d */ unsigned short RealModeEntrySegment; /* +0x000f */ unsigned short ProtectedModeEntryOffset; /* +0x0011 */ unsigned long ProtectedModeCodeBaseAddress; /* +0x0013 */ unsigned long OemDeviceId; /* +0x0017 */ unsigned short RealModeDataBaseAddress; /* +0x001b */ unsigned long ProtectedModeDataBaseAddress; /* +0x001d */ }; struct _CERT_ALT_NAME_INFO { unsigned long cAltEntry; /* +0x0000 */ unsigned char rgAltEntry[8]; /* +0x0008 23 18 00 00 */ }; struct _XSAVE_AREA_HEADER { unsigned long long Mask; /* +0x0000 */ unsigned char Reserved[56]; /* +0x0008 26 18 00 00 */ }; struct _PROCESS_TLS_INFORMATION { unsigned long Flags; /* +0x0000 */ unsigned long OperationType; /* +0x0004 */ unsigned long ThreadDataCount; /* +0x0008 */ unsigned long TlsIndex; /* +0x000c */ unsigned long PreviousCount; /* +0x000c */ unsigned char ThreadData[24]; /* +0x0010 2a 18 00 00 */ }; struct tagEMRCREATECOLORSPACEW { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned long ihCS; /* +0x0008 */ unsigned char lcs[588]; /* +0x000c 2d 18 00 00 */ unsigned long dwFlags; /* +0x0258 */ unsigned long cbData; /* +0x025c */ unsigned char Data[4]; /* +0x0260 ff 12 00 00 */ }; struct _SERVICE_REQUIRED_PRIVILEGES_INFOW { unsigned char pmszRequiredPrivileges[8]; /* +0x0000 71 06 00 00 */ }; struct _CERT_BASIC_CONSTRAINTS2_INFO { unsigned char fCA[4]; /* +0x0000 74 00 00 00 */ unsigned char fPathLenConstraint[4]; /* +0x0004 74 00 00 00 */ unsigned long dwPathLenConstraint; /* +0x0008 */ }; struct _SYSTEM_ACPI_AUDIT_INFORMATION { unsigned long RsdpCount; /* +0x0000 */ /* unsigned char SameRsdt[0]; +0x0004 94 13 00 00 */ /* unsigned char SlicPresent[0]; +0x0004 90 18 00 00 */ unsigned char SlicDifferent[4]; /* +0x0004 91 18 00 00 */ }; struct _TRANSACTION_SUPERIOR_ENLISTMENT_INFORMATION { unsigned char SuperiorEnlistmentPair[32]; /* +0x0000 db 15 00 00 */ }; struct tagEMRLINETO { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char ptl[8]; /* +0x0008 a6 13 00 00 */ }; struct _SERVICE_TRIGGER_SPECIFIC_DATA_ITEM { unsigned long dwDataType; /* +0x0000 */ unsigned long cbData; /* +0x0004 */ unsigned char *pData; /* +0x0008 */ }; struct _CERT_LOGOTYPE_EXT_INFO { unsigned long cCommunityLogo; /* +0x0000 */ unsigned char rgCommunityLogo[8]; /* +0x0008 9d 18 00 00 */ unsigned char pIssuerLogo[8]; /* +0x0010 9d 18 00 00 */ unsigned char pSubjectLogo[8]; /* +0x0018 9d 18 00 00 */ unsigned long cOtherLogo; /* +0x0020 */ unsigned char rgOtherLogo[8]; /* +0x0028 9f 18 00 00 */ }; struct _INSTALLDATA { unsigned char Type[8]; /* +0x0000 a2 18 00 00 */ unsigned char Spec[24]; /* +0x0008 a3 18 00 00 */ }; struct _IMAGE_RESOURCE_DIRECTORY_ENTRY { /* unsigned char NameOffset[0]; +0x0000 a6 18 00 00 */ /* unsigned char NameIsString[0]; +0x0000 a7 18 00 00 */ unsigned long Name; /* +0x0000 */ unsigned short Id; /* +0x0000 */ unsigned long OffsetToData; /* +0x0004 */ /* unsigned char OffsetToDirectory[0]; +0x0004 a6 18 00 00 */ unsigned char DataIsDirectory[4]; /* +0x0004 a7 18 00 00 */ }; struct tagEMRROUNDRECT { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char rclBox[16]; /* +0x0008 db 12 00 00 */ unsigned char szlCorner[8]; /* +0x0018 c4 15 00 00 */ }; struct tagRPC_CALL_ATTRIBUTES_V2_W { unsigned char Version[4]; /* +0x0000 75 00 00 00 */ unsigned long Flags; /* +0x0004 */ unsigned long ServerPrincipalNameBufferLength; /* +0x0008 */ unsigned short *ServerPrincipalName; /* +0x0010 */ unsigned long ClientPrincipalNameBufferLength; /* +0x0018 */ unsigned short *ClientPrincipalName; /* +0x0020 */ unsigned long AuthenticationLevel; /* +0x0028 */ unsigned long AuthenticationService; /* +0x002c */ unsigned char NullSession[4]; /* +0x0030 74 00 00 00 */ unsigned char KernelModeCaller[4]; /* +0x0034 74 00 00 00 */ unsigned long ProtocolSequence; /* +0x0038 */ unsigned char IsClientLocal[4]; /* +0x003c b1 18 00 00 */ void *ClientPID; /* +0x0040 */ unsigned long CallStatus; /* +0x0048 */ unsigned char CallType[4]; /* +0x004c b2 18 00 00 */ unsigned char CallLocalAddress[8]; /* +0x0050 b4 18 00 00 */ unsigned short OpNum; /* +0x0058 */ unsigned char InterfaceUuid[20]; /* +0x005c f3 14 00 00 */ }; struct _CERT_LOGOTYPE_AUDIO { unsigned char LogotypeDetails[24]; /* +0x0000 b7 18 00 00 */ unsigned char pLogotypeAudioInfo[8]; /* +0x0018 b9 18 00 00 */ }; struct _IMAGE_NT_HEADERS64 { unsigned long Signature; /* +0x0000 */ unsigned char FileHeader[20]; /* +0x0004 bc 18 00 00 */ unsigned char OptionalHeader[240]; /* +0x0018 bd 18 00 00 */ }; struct _POWER_SESSION_WINLOGON { unsigned long SessionId; /* +0x0000 */ unsigned char Console; /* +0x0004 */ unsigned char Locked; /* +0x0005 */ }; struct _UNLOAD_DLL_DEBUG_INFO { void *lpBaseOfDll; /* +0x0000 */ }; struct tagEMRPOLYLINE { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char rclBounds[16]; /* +0x0008 db 12 00 00 */ unsigned long cptl; /* +0x0018 */ unsigned char aptl[8]; /* +0x001c 05 16 00 00 */ }; struct _IO_SESSION_CONNECT_INFO { unsigned long SessionId; /* +0x0000 */ unsigned char LocalSession; /* +0x0004 */ }; struct _CONSOLE_READCONSOLE_CONTROL { unsigned long nLength; /* +0x0000 */ unsigned long nInitialChars; /* +0x0004 */ unsigned long dwCtrlWakeupMask; /* +0x0008 */ unsigned long dwControlKeyState; /* +0x000c */ }; struct _RPC_HTTP_TRANSPORT_CREDENTIALS_A { unsigned char TransportCredentials[8]; /* +0x0000 de 18 00 00 */ unsigned long Flags; /* +0x0008 */ unsigned long AuthenticationTarget; /* +0x000c */ unsigned long NumberOfAuthnSchemes; /* +0x0010 */ unsigned long *AuthnSchemes; /* +0x0018 */ unsigned char *ServerCertificateSubject; /* +0x0020 */ }; struct _CMSG_SIGNER_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char Issuer[16]; /* +0x0008 08 13 00 00 */ unsigned char SerialNumber[16]; /* +0x0018 08 13 00 00 */ unsigned char HashAlgorithm[24]; /* +0x0028 68 14 00 00 */ unsigned char HashEncryptionAlgorithm[24]; /* +0x0040 68 14 00 00 */ unsigned char EncryptedHash[16]; /* +0x0058 08 13 00 00 */ unsigned char AuthAttrs[16]; /* +0x0068 fc 18 00 00 */ unsigned char UnauthAttrs[16]; /* +0x0078 fc 18 00 00 */ }; struct _RIP_INFO { unsigned long dwError; /* +0x0000 */ unsigned long dwType; /* +0x0004 */ }; struct tagCWPRETSTRUCT { long long lResult; /* +0x0000 */ long long lParam; /* +0x0008 */ unsigned long long wParam; /* +0x0010 */ unsigned char message[8]; /* +0x0018 75 00 00 00 */ unsigned char hwnd[8]; /* +0x0020 f7 12 00 00 */ }; struct tagKBDLLHOOKSTRUCT { unsigned long vkCode; /* +0x0000 */ unsigned long scanCode; /* +0x0004 */ unsigned long flags; /* +0x0008 */ unsigned long time; /* +0x000c */ unsigned long long dwExtraInfo; /* +0x0010 */ }; struct _FILE_LEVEL_TRIM_RANGE { unsigned long long Offset; /* +0x0000 */ unsigned long long Length; /* +0x0008 */ }; struct _REQUEST_OPLOCK_INPUT_BUFFER { unsigned short StructureVersion; /* +0x0000 */ unsigned short StructureLength; /* +0x0002 */ unsigned long RequestedOplockLevel; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ }; struct _AVRF_CLIENT_ID_WOW64 { unsigned long long UniqueProcess; /* +0x0000 */ unsigned long long UniqueThread; /* +0x0008 */ }; struct _CRYPT_PROVIDER_REF { unsigned long dwInterface; /* +0x0000 */ unsigned char pszFunction[8]; /* +0x0008 71 06 00 00 */ unsigned char pszProvider[8]; /* +0x0010 71 06 00 00 */ unsigned long cProperties; /* +0x0018 */ unsigned char rgpProperties[8]; /* +0x0020 3a 19 00 00 */ unsigned char pUM[8]; /* +0x0028 3c 19 00 00 */ unsigned char pKM[8]; /* +0x0030 3c 19 00 00 */ }; struct _PHYSICAL_CHANNEL_RUN { unsigned long NodeNumber; /* +0x0000 */ unsigned long ChannelNumber; /* +0x0004 */ unsigned long long BasePage; /* +0x0008 */ unsigned long long PageCount; /* +0x0010 */ unsigned long long Flags; /* +0x0018 */ }; struct _PLUGPLAY_CONTROL_USER_RESPONSE_DATA { unsigned long Response; /* +0x0000 */ unsigned char VetoType[4]; /* +0x0004 43 19 00 00 */ unsigned char VetoName[8]; /* +0x0008 71 06 00 00 */ unsigned long VetoNameLength; /* +0x0010 */ }; struct _NETINFOSTRUCT { unsigned long cbStructure; /* +0x0000 */ unsigned long dwProviderVersion; /* +0x0004 */ unsigned long dwStatus; /* +0x0008 */ unsigned long dwCharacteristics; /* +0x000c */ unsigned long long dwHandle; /* +0x0010 */ unsigned short wNetType; /* +0x0018 */ unsigned long dwPrinters; /* +0x001c */ unsigned long dwDrives; /* +0x0020 */ }; struct _MIDL_SYNTAX_INFO { unsigned char TransferSyntax[24]; /* +0x0000 06 17 00 00 */ unsigned char DispatchTable[8]; /* +0x0018 49 19 00 00 */ unsigned char ProcString[8]; /* +0x0020 4b 19 00 00 */ unsigned char FmtStringOffset[8]; /* +0x0028 4d 19 00 00 */ unsigned char TypeString[8]; /* +0x0030 4b 19 00 00 */ unsigned char aUserMarshalQuadruple[8]; /* +0x0038 4f 19 00 00 */ unsigned long long pReserved1; /* +0x0040 */ unsigned long long pReserved2; /* +0x0048 */ }; struct _SAFER_URLZONE_IDENTIFICATION { unsigned char header[32]; /* +0x0000 56 19 00 00 */ unsigned long UrlZoneId; /* +0x0020 */ unsigned long dwSaferFlags; /* +0x0024 */ }; struct _ACCESS_ALLOWED_CALLBACK_OBJECT_ACE { unsigned char Header[4]; /* +0x0000 59 19 00 00 */ unsigned long Mask; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ unsigned char ObjectType[16]; /* +0x000c f3 14 00 00 */ unsigned char InheritedObjectType[16]; /* +0x001c f3 14 00 00 */ unsigned long SidStart; /* +0x002c */ }; struct _SAFER_HASH_IDENTIFICATION2 { unsigned char hashIdentification[1144]; /* +0x0000 62 19 00 00 */ unsigned long HashSize; /* +0x0478 */ unsigned char ImageHash[64]; /* +0x047c 19 13 00 00 */ unsigned char HashAlgorithm[4]; /* +0x04bc 75 00 00 00 */ }; struct _FILE_ZERO_DATA_INFORMATION { unsigned char FileOffset[8]; /* +0x0000 43 13 00 00 */ unsigned char BeyondFinalZero[8]; /* +0x0008 43 13 00 00 */ }; struct _OVERLAPPED_ENTRY { unsigned long long lpCompletionKey; /* +0x0000 */ unsigned char lpOverlapped[8]; /* +0x0008 6c 19 00 00 */ unsigned long long Internal; /* +0x0010 */ unsigned long dwNumberOfBytesTransferred; /* +0x0018 */ }; struct tagEMRSELECTPALETTE { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned long ihPal; /* +0x0008 */ }; struct _NDR_USER_MARSHAL_INFO_LEVEL1 { void *Buffer; /* +0x0000 */ unsigned long BufferSize; /* +0x0008 */ unsigned char pfnAllocate[8]; /* +0x0010 ff 16 00 00 */ unsigned char pfnFree[8]; /* +0x0018 d2 13 00 00 */ unsigned char pRpcChannelBuffer[8]; /* +0x0020 77 19 00 00 */ unsigned char Reserved[40]; /* +0x0028 54 17 00 00 */ }; struct _GDI_OBJECT { unsigned long ObjectType; /* +0x0000 */ }; struct _PUBKEYVER3 { unsigned long magic; /* +0x0000 */ unsigned long bitlenP; /* +0x0004 */ unsigned long bitlenQ; /* +0x0008 */ unsigned long bitlenJ; /* +0x000c */ unsigned char DSSSeed[24]; /* +0x0010 7d 19 00 00 */ }; struct _CERT_REGISTRY_STORE_ROAMING_PARA { unsigned char hKey[8]; /* +0x0000 81 19 00 00 */ unsigned char pwszStoreDirectory[8]; /* +0x0008 71 06 00 00 */ }; struct _CONTEXT { unsigned long long P1Home; /* +0x0000 */ unsigned long long P2Home; /* +0x0008 */ unsigned long long P3Home; /* +0x0010 */ unsigned long long P4Home; /* +0x0018 */ unsigned long long P5Home; /* +0x0020 */ unsigned long long P6Home; /* +0x0028 */ unsigned long ContextFlags; /* +0x0030 */ unsigned long MxCsr; /* +0x0034 */ unsigned short SegCs; /* +0x0038 */ unsigned short SegDs; /* +0x003a */ unsigned short SegEs; /* +0x003c */ unsigned short SegFs; /* +0x003e */ unsigned short SegGs; /* +0x0040 */ unsigned short SegSs; /* +0x0042 */ unsigned long EFlags; /* +0x0044 */ unsigned long long Dr0; /* +0x0048 */ unsigned long long Dr1; /* +0x0050 */ unsigned long long Dr2; /* +0x0058 */ unsigned long long Dr3; /* +0x0060 */ unsigned long long Dr6; /* +0x0068 */ unsigned long long Dr7; /* +0x0070 */ unsigned long long Rax; /* +0x0078 */ unsigned long long Rcx; /* +0x0080 */ unsigned long long Rdx; /* +0x0088 */ unsigned long long Rbx; /* +0x0090 */ unsigned long long Rsp; /* +0x0098 */ unsigned long long Rbp; /* +0x00a0 */ unsigned long long Rsi; /* +0x00a8 */ unsigned long long Rdi; /* +0x00b0 */ unsigned long long R8; /* +0x00b8 */ unsigned long long R9; /* +0x00c0 */ unsigned long long R10; /* +0x00c8 */ unsigned long long R11; /* +0x00d0 */ unsigned long long R12; /* +0x00d8 */ unsigned long long R13; /* +0x00e0 */ unsigned long long R14; /* +0x00e8 */ unsigned long long R15; /* +0x00f0 */ unsigned long long Rip; /* +0x00f8 */ /* unsigned char FltSave[0]; +0x0100 84 19 00 00 */ unsigned char Header[32]; /* +0x0100 86 19 00 00 */ unsigned char Legacy[128]; /* +0x0120 87 19 00 00 */ unsigned char Xmm0[16]; /* +0x01a0 85 19 00 00 */ unsigned char Xmm1[16]; /* +0x01b0 85 19 00 00 */ unsigned char Xmm2[16]; /* +0x01c0 85 19 00 00 */ unsigned char Xmm3[16]; /* +0x01d0 85 19 00 00 */ unsigned char Xmm4[16]; /* +0x01e0 85 19 00 00 */ unsigned char Xmm5[16]; /* +0x01f0 85 19 00 00 */ unsigned char Xmm6[16]; /* +0x0200 85 19 00 00 */ unsigned char Xmm7[16]; /* +0x0210 85 19 00 00 */ unsigned char Xmm8[16]; /* +0x0220 85 19 00 00 */ unsigned char Xmm9[16]; /* +0x0230 85 19 00 00 */ unsigned char Xmm10[16]; /* +0x0240 85 19 00 00 */ unsigned char Xmm11[16]; /* +0x0250 85 19 00 00 */ unsigned char Xmm12[16]; /* +0x0260 85 19 00 00 */ unsigned char Xmm13[16]; /* +0x0270 85 19 00 00 */ unsigned char Xmm14[16]; /* +0x0280 85 19 00 00 */ unsigned char Xmm15[112]; /* +0x0290 85 19 00 00 */ unsigned char VectorRegister[416]; /* +0x0300 88 19 00 00 */ unsigned long long VectorControl; /* +0x04a0 */ unsigned long long DebugControl; /* +0x04a8 */ unsigned long long LastBranchToRip; /* +0x04b0 */ unsigned long long LastBranchFromRip; /* +0x04b8 */ unsigned long long LastExceptionToRip; /* +0x04c0 */ unsigned long long LastExceptionFromRip; /* +0x04c8 */ }; struct _JOBOBJECT_LIMIT_VIOLATION_INFORMATION { unsigned long LimitFlags; /* +0x0000 */ unsigned long ViolationLimitFlags; /* +0x0004 */ unsigned long long IoReadBytes; /* +0x0008 */ unsigned long long IoReadBytesLimit; /* +0x0010 */ unsigned long long IoWriteBytes; /* +0x0018 */ unsigned long long IoWriteBytesLimit; /* +0x0020 */ unsigned char PerJobUserTime[8]; /* +0x0028 43 13 00 00 */ unsigned char PerJobUserTimeLimit[8]; /* +0x0030 43 13 00 00 */ unsigned long long JobMemory; /* +0x0038 */ unsigned long long JobMemoryLimit; /* +0x0040 */ unsigned char RateControlTolerance[4]; /* +0x0048 8b 19 00 00 */ unsigned char RateControlToleranceLimit[4]; /* +0x004c 8c 19 00 00 */ }; struct _ENCRYPTION_BUFFER { unsigned long EncryptionOperation; /* +0x0000 */ unsigned char Private[4]; /* +0x0004 ff 12 00 00 */ }; struct _SYSTEM_POWER_STATE_DISABLE_REASON { unsigned char AffectedState[8]; /* +0x0000 91 19 00 00 */ unsigned long PowerReasonCode; /* +0x0008 */ unsigned long PowerReasonLength; /* +0x000c */ }; struct _PLUGPLAY_CONTROL_DEPTH_DATA { unsigned char DeviceInstance[16]; /* +0x0000 e3 12 00 00 */ unsigned long DeviceDepth; /* +0x0010 */ }; struct _RPC_SECURITY_QOS_V3_A { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ unsigned long AdditionalSecurityInfoType; /* +0x0010 */ }; struct _RPC_BINDING_HANDLE_OPTIONS_V1 { unsigned long Version; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long ComTimeout; /* +0x0008 */ unsigned long CallTimeout; /* +0x000c */ }; struct _OLESTREAMVTBL { unsigned char Get[8]; /* +0x0000 bf 19 00 00 */ unsigned char Put[8]; /* +0x0008 c2 19 00 00 */ }; struct _PROCESSOR_POWER_POLICY_INFO { unsigned long TimeCheck; /* +0x0000 */ unsigned long DemoteLimit; /* +0x0004 */ unsigned long PromoteLimit; /* +0x0008 */ unsigned char DemotePercent; /* +0x000c */ unsigned char PromotePercent; /* +0x000d */ unsigned char Spare[2]; /* +0x000e bb 17 00 00 */ /* unsigned char AllowDemotion[0]; +0x0010 94 13 00 00 */ /* unsigned char AllowPromotion[0]; +0x0010 90 18 00 00 */ unsigned char Reserved[4]; /* +0x0010 c5 19 00 00 */ }; struct _WOW64_CONTEXT { unsigned long ContextFlags; /* +0x0000 */ unsigned long Dr0; /* +0x0004 */ unsigned long Dr1; /* +0x0008 */ unsigned long Dr2; /* +0x000c */ unsigned long Dr3; /* +0x0010 */ unsigned long Dr6; /* +0x0014 */ unsigned long Dr7; /* +0x0018 */ unsigned char FloatSave[112]; /* +0x001c c8 19 00 00 */ unsigned long SegGs; /* +0x008c */ unsigned long SegFs; /* +0x0090 */ unsigned long SegEs; /* +0x0094 */ unsigned long SegDs; /* +0x0098 */ unsigned long Edi; /* +0x009c */ unsigned long Esi; /* +0x00a0 */ unsigned long Ebx; /* +0x00a4 */ unsigned long Edx; /* +0x00a8 */ unsigned long Ecx; /* +0x00ac */ unsigned long Eax; /* +0x00b0 */ unsigned long Ebp; /* +0x00b4 */ unsigned long Eip; /* +0x00b8 */ unsigned long SegCs; /* +0x00bc */ unsigned long EFlags; /* +0x00c0 */ unsigned long Esp; /* +0x00c4 */ unsigned long SegSs; /* +0x00c8 */ unsigned char ExtendedRegisters[512]; /* +0x00cc c9 19 00 00 */ }; struct tagDRAWTEXTPARAMS { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char iTabLength[4]; /* +0x0004 74 00 00 00 */ unsigned char iLeftMargin[4]; /* +0x0008 74 00 00 00 */ unsigned char iRightMargin[4]; /* +0x000c 74 00 00 00 */ unsigned char uiLengthDrawn[4]; /* +0x0010 75 00 00 00 */ }; struct _TOKEN_SECURITY_ATTRIBUTE_RELATIVE_V1 { unsigned long Name; /* +0x0000 */ unsigned short ValueType; /* +0x0004 */ unsigned short Reserved; /* +0x0006 */ unsigned long Flags; /* +0x0008 */ unsigned long ValueCount; /* +0x000c */ }; struct _XSAVE_POLICY { unsigned long Version; /* +0x0000 */ unsigned long Size; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ unsigned long MaxSaveAreaLength; /* +0x000c */ unsigned long long FeatureBitmask; /* +0x0010 */ unsigned long NumberOfFeatures; /* +0x0018 */ unsigned char Features[16]; /* +0x0020 d9 19 00 00 */ }; struct _HARDWARE_COUNTER_DATA { unsigned char Type[4]; /* +0x0000 e3 19 00 00 */ unsigned long Reserved; /* +0x0004 */ unsigned long long Value; /* +0x0008 */ }; struct _RTL_VERIFIER_HELPER_TABLE { unsigned long Length; /* +0x0000 */ unsigned char VerifierEngGetStackTraceAddress[8]; /* +0x0008 e8 19 00 00 */ unsigned char VerifierEngNtdllHeapFreeCallback[8]; /* +0x0010 eb 19 00 00 */ unsigned char VerifierEngLogStackTrace[8]; /* +0x0018 ed 19 00 00 */ unsigned char UnicodeImageName[8]; /* +0x0020 ef 19 00 00 */ unsigned char VerifierEngCommitDebugInfo[8]; /* +0x0028 f4 19 00 00 */ unsigned char VerifierEngSetProcessDebugInformation[8]; /* +0x0030 f7 19 00 00 */ unsigned char VerifierEngQueryImageFileExecutionOptionsEx[8]; /* +0x0038 fa 19 00 00 */ unsigned long *AddressDphGlobalFlags; /* +0x0040 */ unsigned char VerifierTable[8]; /* +0x0048 0e 18 00 00 */ unsigned char VerifierDescriptor[8]; /* +0x0050 fc 19 00 00 */ void *OptionsKey; /* +0x0058 */ unsigned char VerifierEngGetStackTraceAddressEx[8]; /* +0x0060 ff 19 00 00 */ unsigned char VerifierEngReleaseStackTrace[8]; /* +0x0068 d2 13 00 00 */ unsigned char VerifierEngStdInitializeStackTrace[8]; /* +0x0070 0c 18 00 00 */ unsigned char VerifierEngStdDeleteStackTrace[8]; /* +0x0078 02 1a 00 00 */ unsigned char VerifierEngStdLogStackTrace[8]; /* +0x0080 07 1a 00 00 */ unsigned char VerifierEngStdReleaseStackTrace[8]; /* +0x0088 0a 1a 00 00 */ }; struct _SECURITY_ATTRIBUTES { unsigned long nLength; /* +0x0000 */ void *lpSecurityDescriptor; /* +0x0008 */ unsigned char bInheritHandle[8]; /* +0x0010 74 00 00 00 */ }; struct _MIDL_STUB_DESC { void *RpcInterfaceInformation; /* +0x0000 */ unsigned char pfnAllocate[8]; /* +0x0008 ff 16 00 00 */ unsigned char pfnFree[136]; /* +0x0010 d2 13 00 00 */ }; struct _UNWIND_CODE:: { unsigned char OffsetLow; /* +0x0000 */ /* unsigned char UnwindOp[0]; +0x0001 ea 13 00 00 */ unsigned char OffsetHigh[1]; /* +0x0001 eb 13 00 00 */ }; struct _FILE_FS_PERSISTENT_VOLUME_INFORMATION { unsigned long VolumeFlags; /* +0x0000 */ unsigned long FlagMask; /* +0x0004 */ unsigned long Version; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ }; struct _PROCESSOR_RELATIONSHIP { unsigned char Flags; /* +0x0000 */ unsigned char Reserved[21]; /* +0x0001 3b 1a 00 00 */ unsigned short GroupCount; /* +0x0016 */ unsigned char GroupMask[16]; /* +0x0018 3d 1a 00 00 */ }; struct _SYSTEM_SPCALL2_INFORMATION { void *InputData; /* +0x0000 */ void *OutputData; /* +0x0008 */ unsigned long InputDataSize; /* +0x0010 */ unsigned long OutputDataSize; /* +0x0014 */ long Status; /* +0x0018 */ }; struct _GLYPHMETRICSFLOAT { unsigned char gmfBlackBoxX[4]; /* +0x0000 40 00 00 00 */ unsigned char gmfBlackBoxY[4]; /* +0x0004 40 00 00 00 */ unsigned char gmfptGlyphOrigin[8]; /* +0x0008 44 1a 00 00 */ unsigned char gmfCellIncX[4]; /* +0x0010 40 00 00 00 */ unsigned char gmfCellIncY[4]; /* +0x0014 40 00 00 00 */ }; struct _CERT_CONTEXT { unsigned long dwCertEncodingType; /* +0x0000 */ unsigned char *pbCertEncoded; /* +0x0008 */ unsigned long cbCertEncoded; /* +0x0010 */ unsigned char pCertInfo[8]; /* +0x0018 4e 1a 00 00 */ void *hCertStore; /* +0x0020 */ }; struct _CERT_LDAP_STORE_OPENED_PARA { void *pvLdapSessionHandle; /* +0x0000 */ unsigned char pwszLdapUrl[8]; /* +0x0008 cb 13 00 00 */ }; struct _RUNTIME_FUNCTION { unsigned long BeginAddress; /* +0x0000 */ unsigned long EndAddress; /* +0x0004 */ unsigned long UnwindData; /* +0x0008 */ }; struct _SYSTEM_ALARM_CALLBACK_ACE { unsigned char Header[4]; /* +0x0000 59 19 00 00 */ unsigned long Mask; /* +0x0004 */ unsigned long SidStart; /* +0x0008 */ }; struct _TOKEN_DEFAULT_DACL { unsigned char DefaultDacl[8]; /* +0x0000 5a 1a 00 00 */ }; struct _FILE_FS_CONTROL_INFORMATION { unsigned char FreeSpaceStartFiltering[8]; /* +0x0000 43 13 00 00 */ unsigned char FreeSpaceThreshold[8]; /* +0x0008 43 13 00 00 */ unsigned char FreeSpaceStopFiltering[8]; /* +0x0010 43 13 00 00 */ unsigned char DefaultQuotaThreshold[8]; /* +0x0018 43 13 00 00 */ unsigned char DefaultQuotaLimit[8]; /* +0x0020 43 13 00 00 */ unsigned long FileSystemControlFlags; /* +0x0028 */ }; struct tagFONTSIGNATURE { unsigned char fsUsb[16]; /* +0x0000 66 1a 00 00 */ unsigned char fsCsb[8]; /* +0x0010 14 16 00 00 */ }; struct _s__RTTICompleteObjectLocator2 { unsigned long signature; /* +0x0000 */ unsigned long offset; /* +0x0004 */ unsigned long cdOffset; /* +0x0008 */ unsigned char pTypeDescriptor[8]; /* +0x000c 6d 1a 00 00 */ unsigned char pClassDescriptor[8]; /* +0x0014 70 1a 00 00 */ unsigned char pSelf[8]; /* +0x001c 73 1a 00 00 */ }; struct _RTL_UMS_COMPLETION_LIST { unsigned char ThreadListHead[8]; /* +0x0000 7b 1a 00 00 */ void *CompletionEvent; /* +0x0008 */ unsigned long CompletionFlags; /* +0x0010 */ unsigned char InternalListHead[8]; /* +0x0018 ce 17 00 00 */ }; struct tagACTCTXA { unsigned long cbSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char lpSource[8]; /* +0x0008 79 14 00 00 */ unsigned short wProcessorArchitecture; /* +0x0010 */ unsigned short wLangId; /* +0x0012 */ unsigned char lpAssemblyDirectory[8]; /* +0x0018 79 14 00 00 */ unsigned char lpResourceName[8]; /* +0x0020 79 14 00 00 */ unsigned char lpApplicationName[8]; /* +0x0028 79 14 00 00 */ unsigned char hModule[8]; /* +0x0030 d1 14 00 00 */ }; struct _RTL_PERTHREAD_CURDIR { unsigned char CurrentDirectories[8]; /* +0x0000 1d 17 00 00 */ unsigned char ImageName[8]; /* +0x0008 b6 17 00 00 */ void *Environment; /* +0x0010 */ }; struct tagOBJECTDESCRIPTOR { unsigned long cbSize; /* +0x0000 */ unsigned char clsid[16]; /* +0x0004 f3 14 00 00 */ unsigned long dwDrawAspect; /* +0x0014 */ unsigned char sizel[8]; /* +0x0018 c4 15 00 00 */ unsigned char pointl[8]; /* +0x0020 a6 13 00 00 */ unsigned long dwStatus; /* +0x0028 */ unsigned long dwFullUserTypeName; /* +0x002c */ unsigned long dwSrcOfCopy; /* +0x0030 */ }; struct _SERVICE_DELAYED_AUTO_START_INFO { unsigned char fDelayedAutostart[4]; /* +0x0000 74 00 00 00 */ }; struct _SYSTEM_SYSTEM_PARTITION_INFORMATION { unsigned char SystemPartition[16]; /* +0x0000 e3 12 00 00 */ }; struct _SYSTEM_INFO { unsigned long dwOemId; /* +0x0000 */ unsigned short wProcessorArchitecture; /* +0x0000 */ unsigned short wReserved; /* +0x0002 */ unsigned long dwPageSize; /* +0x0004 */ void *lpMinimumApplicationAddress; /* +0x0008 */ void *lpMaximumApplicationAddress; /* +0x0010 */ unsigned long long dwActiveProcessorMask; /* +0x0018 */ unsigned long dwNumberOfProcessors; /* +0x0020 */ unsigned long dwProcessorType; /* +0x0024 */ unsigned long dwAllocationGranularity; /* +0x0028 */ unsigned short wProcessorLevel; /* +0x002c */ unsigned short wProcessorRevision; /* +0x002e */ }; struct _EV_EXTRA_CERT_CHAIN_POLICY_STATUS { unsigned long cbSize; /* +0x0000 */ unsigned long dwQualifiers; /* +0x0004 */ unsigned long dwIssuanceUsageIndex; /* +0x0008 */ }; struct _IO_COMPLETION_BASIC_INFORMATION { long Depth; /* +0x0000 */ }; struct _RTL_USER_PROCESS_INFORMATION { unsigned long Length; /* +0x0000 */ void *Process; /* +0x0008 */ void *Thread; /* +0x0010 */ unsigned char ClientId[16]; /* +0x0018 44 13 00 00 */ unsigned char ImageInformation[64]; /* +0x0028 a0 1a 00 00 */ }; struct NCryptProviderName { unsigned char pszName[8]; /* +0x0000 71 06 00 00 */ unsigned char pszComment[8]; /* +0x0008 71 06 00 00 */ }; struct _SYSTEM_WATCHDOG_TIMER_INFORMATION { unsigned char WdInfoClass[4]; /* +0x0000 ab 1a 00 00 */ unsigned long DataValue; /* +0x0004 */ }; struct _SYSTEM_BOOT_ENVIRONMENT_INFORMATION { unsigned char BootIdentifier[16]; /* +0x0000 f3 14 00 00 */ unsigned char FirmwareType[8]; /* +0x0010 ae 1a 00 00 */ unsigned long long BootFlags; /* +0x0018 */ }; struct val_context { unsigned char valuelen[8]; /* +0x0000 74 00 00 00 */ void *value_context; /* +0x0008 */ void *val_buff_ptr; /* +0x0010 */ }; struct _CLIENT_CALL_RETURN { void *Pointer; /* +0x0000 */ long long Simple; /* +0x0000 */ }; struct _PLUGPLAY_NOTIFY_HDR { unsigned short Version; /* +0x0000 */ unsigned short Size; /* +0x0002 */ unsigned char Event[16]; /* +0x0004 f3 14 00 00 */ }; struct _CERT_STORE_PROV_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long cStoreProvFunc; /* +0x0004 */ unsigned char rgpvStoreProvFunc[8]; /* +0x0008 55 13 00 00 */ void *hStoreProv; /* +0x0010 */ unsigned long dwStoreProvFlags; /* +0x0018 */ void *hStoreProvFuncAddr2; /* +0x0020 */ }; struct _SHRINK_VOLUME_INFORMATION { unsigned char ShrinkRequestType[8]; /* +0x0000 d0 1a 00 00 */ unsigned long long Flags; /* +0x0008 */ long long NewNumberOfSectors; /* +0x0010 */ }; struct _SYSTEM_LOGICAL_PROCESSOR_INFORMATION_EX { unsigned char Relationship[4]; /* +0x0000 d5 1a 00 00 */ unsigned long Size; /* +0x0004 */ /* unsigned char Processor[0]; +0x0008 d6 1a 00 00 */ /* unsigned char NumaNode[0]; +0x0008 d7 1a 00 00 */ /* unsigned char Cache[0]; +0x0008 d8 1a 00 00 */ unsigned char Group[72]; /* +0x0008 d9 1a 00 00 */ }; struct _IMAGE_FUNCTION_ENTRY64 { unsigned long long StartingAddress; /* +0x0000 */ unsigned long long EndingAddress; /* +0x0008 */ unsigned long long EndOfPrologue; /* +0x0010 */ unsigned long long UnwindInfoAddress; /* +0x0010 */ }; struct _EXIT_THREAD_DEBUG_INFO { unsigned long dwExitCode; /* +0x0000 */ }; struct _GENERIC_BINDING_ROUTINE_PAIR { unsigned char pfnBind[8]; /* +0x0000 1e 15 00 00 */ unsigned char pfnUnbind[8]; /* +0x0008 fb 1a 00 00 */ }; struct _ENUM_SERVICE_STATUS_PROCESSA { char *lpServiceName; /* +0x0000 */ char *lpDisplayName; /* +0x0008 */ unsigned char ServiceStatusProcess[40]; /* +0x0010 e0 16 00 00 */ }; struct _COMPOUND_ACCESS_ALLOWED_ACE { unsigned char Header[4]; /* +0x0000 59 19 00 00 */ unsigned long Mask; /* +0x0004 */ unsigned short CompoundAceType; /* +0x0008 */ unsigned short Reserved; /* +0x000a */ unsigned long SidStart; /* +0x000c */ }; struct _LDR_SERVICE_TAG_RECORD { unsigned char Next[8]; /* +0x0000 05 1b 00 00 */ unsigned long ServiceTag; /* +0x0008 */ }; struct _PROCESS_HEAP_INFORMATION { unsigned long long ReserveSize; /* +0x0000 */ unsigned long long CommitSize; /* +0x0008 */ unsigned long NumberOfHeaps; /* +0x0010 */ unsigned long long FirstHeapInformationOffset; /* +0x0018 */ }; struct _SERVICE_CUSTOM_SYSTEM_STATE_CHANGE_DATA_ITEM:: { unsigned char CustomStateId[8]; /* +0x0000 20 1b 00 00 */ }; struct _SERVICE_CUSTOM_SYSTEM_STATE_CHANGE_DATA_ITEM:::: { unsigned long DataOffset; /* +0x0000 */ unsigned char Data[4]; /* +0x0004 ff 12 00 00 */ }; struct _SERVICE_STATUS_PROCESS { unsigned long dwServiceType; /* +0x0000 */ unsigned long dwCurrentState; /* +0x0004 */ unsigned long dwControlsAccepted; /* +0x0008 */ unsigned long dwWin32ExitCode; /* +0x000c */ unsigned long dwServiceSpecificExitCode; /* +0x0010 */ unsigned long dwCheckPoint; /* +0x0014 */ unsigned long dwWaitHint; /* +0x0018 */ unsigned long dwProcessId; /* +0x001c */ unsigned long dwServiceFlags; /* +0x0020 */ }; struct _SAFER_HASH_IDENTIFICATION { unsigned char header[32]; /* +0x0000 56 19 00 00 */ unsigned char Description[512]; /* +0x0020 55 17 00 00 */ unsigned char FriendlyName[512]; /* +0x0220 55 17 00 00 */ unsigned long HashSize; /* +0x0420 */ unsigned char ImageHash[64]; /* +0x0424 19 13 00 00 */ unsigned char HashAlgorithm[4]; /* +0x0464 75 00 00 00 */ unsigned char ImageSize[8]; /* +0x0468 43 13 00 00 */ unsigned long dwSaferFlags; /* +0x0470 */ }; struct _SYSTEM_PROCESSOR_IDLE_CYCLE_TIME_INFORMATION { unsigned long long CycleTime; /* +0x0000 */ }; struct _SERVICE_USERMODEREBOOT_INFO { unsigned long dwFlags; /* +0x0000 */ unsigned long eLowestRunLevel; /* +0x0004 */ unsigned long eHighestRunLevel; /* +0x0008 */ }; struct _QUOTA_LIMITS { unsigned long long PagedPoolLimit; /* +0x0000 */ unsigned long long NonPagedPoolLimit; /* +0x0008 */ unsigned long long MinimumWorkingSetSize; /* +0x0010 */ unsigned long long MaximumWorkingSetSize; /* +0x0018 */ unsigned long long PagefileLimit; /* +0x0020 */ unsigned char TimeLimit[8]; /* +0x0028 43 13 00 00 */ }; struct _PORT_VIEW { unsigned long Length; /* +0x0000 */ void *SectionHandle; /* +0x0008 */ unsigned long SectionOffset; /* +0x0010 */ unsigned long long ViewSize; /* +0x0018 */ void *ViewBase; /* +0x0020 */ void *ViewRemoteBase; /* +0x0028 */ }; struct _RTL_VERIFIER_ALL_INFORMATION { unsigned long long Size; /* +0x0000 */ unsigned long long OffsetPageHeapsInformation; /* +0x0008 */ unsigned long long OffsetRuntimeFlagsInformation; /* +0x0010 */ unsigned long long OffsetFaultInjectInformation; /* +0x0018 */ }; struct tagSERIALKEYSW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned char lpszActivePort[8]; /* +0x0008 71 06 00 00 */ unsigned char lpszPort[8]; /* +0x0010 71 06 00 00 */ unsigned char iBaudRate[4]; /* +0x0018 75 00 00 00 */ unsigned char iPortState[4]; /* +0x001c 75 00 00 00 */ unsigned char iActive[8]; /* +0x0020 75 00 00 00 */ }; struct _CERT_BIOMETRIC_EXT_INFO { unsigned long cBiometricData; /* +0x0000 */ unsigned char rgBiometricData[8]; /* +0x0008 88 1b 00 00 */ }; struct _OBJECT_ATTRIBUTES32 { unsigned long Length; /* +0x0000 */ unsigned long RootDirectory; /* +0x0004 */ unsigned long ObjectName; /* +0x0008 */ unsigned long Attributes; /* +0x000c */ unsigned long SecurityDescriptor; /* +0x0010 */ unsigned long SecurityQualityOfService; /* +0x0014 */ }; struct _TOKEN_LINKED_TOKEN { void *LinkedToken; /* +0x0000 */ }; struct _NUMA_NODE_RELATIONSHIP { unsigned long NodeNumber; /* +0x0000 */ unsigned char Reserved[20]; /* +0x0004 97 16 00 00 */ unsigned char GroupMask[16]; /* +0x0018 3c 1a 00 00 */ }; struct _CMS_DH_KEY_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char Algid[4]; /* +0x0004 75 00 00 00 */ char *pszContentEncObjId; /* +0x0008 */ unsigned char PubInfo[16]; /* +0x0010 08 13 00 00 */ void *pReserved; /* +0x0020 */ }; struct _ACTIVATION_CONTEXT_ASSEMBLY_DETAILED_INFORMATION { unsigned long ulFlags; /* +0x0000 */ unsigned long ulEncodedAssemblyIdentityLength; /* +0x0004 */ unsigned long ulManifestPathType; /* +0x0008 */ unsigned long ulManifestPathLength; /* +0x000c */ unsigned char liManifestLastWriteTime[8]; /* +0x0010 43 13 00 00 */ unsigned long ulPolicyPathType; /* +0x0018 */ unsigned long ulPolicyPathLength; /* +0x001c */ unsigned char liPolicyLastWriteTime[8]; /* +0x0020 43 13 00 00 */ unsigned long ulMetadataSatelliteRosterIndex; /* +0x0028 */ unsigned long ulManifestVersionMajor; /* +0x002c */ unsigned long ulManifestVersionMinor; /* +0x0030 */ unsigned long ulPolicyVersionMajor; /* +0x0034 */ unsigned long ulPolicyVersionMinor; /* +0x0038 */ unsigned long ulAssemblyDirectoryNameLength; /* +0x003c */ unsigned char lpAssemblyEncodedAssemblyIdentity[8]; /* +0x0040 cb 13 00 00 */ unsigned char lpAssemblyManifestPath[8]; /* +0x0048 cb 13 00 00 */ unsigned char lpAssemblyPolicyPath[8]; /* +0x0050 cb 13 00 00 */ unsigned char lpAssemblyDirectoryName[8]; /* +0x0058 cb 13 00 00 */ unsigned long ulFileCount; /* +0x0060 */ }; struct tagTouchPredictionParameters { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char dwLatency[4]; /* +0x0004 75 00 00 00 */ unsigned char dwSampleTime[4]; /* +0x0008 75 00 00 00 */ unsigned char bUseHWTimeStamp[4]; /* +0x000c 75 00 00 00 */ }; struct _FLAGGED_BYTE_BLOB { unsigned long fFlags; /* +0x0000 */ unsigned long clSize; /* +0x0004 */ unsigned char abData[4]; /* +0x0008 ff 12 00 00 */ }; struct _CRYPTOAPI_BLOB { unsigned long cbData; /* +0x0000 */ unsigned char *pbData; /* +0x0008 */ }; struct _CMC_ADD_EXTENSIONS_INFO { unsigned long dwCmcDataReference; /* +0x0000 */ unsigned long cCertReference; /* +0x0004 */ unsigned long *rgdwCertReference; /* +0x0008 */ unsigned long cExtension; /* +0x0010 */ unsigned char rgExtension[8]; /* +0x0018 3f 16 00 00 */ }; struct _ALPC_PORT_ASSOCIATE_COMPLETION_PORT { void *CompletionKey; /* +0x0000 */ void *CompletionPort; /* +0x0008 */ }; struct tagDROPSTRUCT { unsigned char hwndSource[8]; /* +0x0000 f7 12 00 00 */ unsigned char hwndSink[8]; /* +0x0008 f7 12 00 00 */ unsigned long wFmt; /* +0x0010 */ unsigned long long dwData; /* +0x0018 */ unsigned char ptDrop[8]; /* +0x0020 a1 14 00 00 */ unsigned long dwControlData; /* +0x0028 */ }; struct _TOKEN_GROUPS_AND_PRIVILEGES { unsigned long SidCount; /* +0x0000 */ unsigned long SidLength; /* +0x0004 */ unsigned char Sids[8]; /* +0x0008 e5 1b 00 00 */ unsigned long RestrictedSidCount; /* +0x0010 */ unsigned long RestrictedSidLength; /* +0x0014 */ unsigned char RestrictedSids[8]; /* +0x0018 e5 1b 00 00 */ unsigned long PrivilegeCount; /* +0x0020 */ unsigned long PrivilegeLength; /* +0x0024 */ unsigned char Privileges[8]; /* +0x0028 73 14 00 00 */ unsigned char AuthenticationId[8]; /* +0x0030 38 15 00 00 */ }; struct _FILE_ATTRIBUTE_CACHE_PAIR { unsigned char Name[200]; /* +0x0000 ea 1b 00 00 */ unsigned char Value[12]; /* +0x00c8 eb 1b 00 00 */ }; struct _CM_EISA_SLOT_INFORMATION { unsigned char ReturnCode; /* +0x0000 */ unsigned char ReturnFlags; /* +0x0001 */ unsigned char MajorRevision; /* +0x0002 */ unsigned char MinorRevision; /* +0x0003 */ unsigned short Checksum; /* +0x0004 */ unsigned char NumberFunctions; /* +0x0006 */ unsigned char FunctionInformation; /* +0x0007 */ unsigned long CompressedId; /* +0x0008 */ }; struct _RTL_BITMAP_RUN { unsigned long StartingIndex; /* +0x0000 */ unsigned long NumberOfBits; /* +0x0004 */ }; struct _FILE_ALIGNMENT_INFO { unsigned long AlignmentRequirement; /* +0x0000 */ }; struct tagMSLLHOOKSTRUCT { unsigned char pt[8]; /* +0x0000 a1 14 00 00 */ unsigned long mouseData; /* +0x0008 */ unsigned long flags; /* +0x000c */ unsigned long time; /* +0x0010 */ unsigned long long dwExtraInfo; /* +0x0018 */ }; struct tagMDICREATESTRUCTA { unsigned char szClass[8]; /* +0x0000 79 14 00 00 */ unsigned char szTitle[8]; /* +0x0008 79 14 00 00 */ void *hOwner; /* +0x0010 */ unsigned char x[4]; /* +0x0018 74 00 00 00 */ unsigned char y[4]; /* +0x001c 74 00 00 00 */ unsigned char cx[4]; /* +0x0020 74 00 00 00 */ unsigned char cy[4]; /* +0x0024 74 00 00 00 */ unsigned long style; /* +0x0028 */ long long lParam; /* +0x0030 */ }; struct _RPC_SECURITY_QOS_V2_W { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ unsigned long AdditionalSecurityInfoType; /* +0x0010 */ }; struct _RPC_SECURITY_QOS_V2_W:: { unsigned char HttpCredentials[8]; /* +0x0000 fe 1b 00 00 */ }; struct _SYSTEM_VERIFIER_INFORMATION_EX { unsigned long VerifyMode; /* +0x0000 */ unsigned long OptionChanges; /* +0x0004 */ unsigned char PreviousBucketName[16]; /* +0x0008 e3 12 00 00 */ unsigned long IrpCancelTimeoutMsec; /* +0x0018 */ unsigned long VerifierExtensionEnabled; /* +0x001c */ unsigned char Reserved[8]; /* +0x0020 fc 12 00 00 */ }; struct _KEY_BASIC_INFORMATION { unsigned char LastWriteTime[8]; /* +0x0000 43 13 00 00 */ unsigned long TitleIndex; /* +0x0008 */ unsigned long NameLength; /* +0x000c */ unsigned char Name[8]; /* +0x0010 0a 14 00 00 */ }; struct _RTL_AVL_ENTRY { unsigned char BalancedLinks[32]; /* +0x0000 0b 1c 00 00 */ long long UserData; /* +0x0020 */ }; struct tagEXTLOGPEN { unsigned long elpPenStyle; /* +0x0000 */ unsigned long elpWidth; /* +0x0004 */ unsigned char elpBrushStyle[4]; /* +0x0008 75 00 00 00 */ unsigned long elpColor; /* +0x000c */ unsigned long long elpHatch; /* +0x0010 */ unsigned long elpNumEntries; /* +0x0018 */ unsigned char elpStyleEntry[4]; /* +0x001c fc 12 00 00 */ }; struct _CERT_TRUST_STATUS { unsigned long dwErrorStatus; /* +0x0000 */ unsigned long dwInfoStatus; /* +0x0004 */ }; struct _MUISTRINGPOOL { unsigned char TotalSize[4]; /* +0x0000 75 00 00 00 */ unsigned short MaxNumStrings; /* +0x0004 */ unsigned short NumStrings; /* +0x0006 */ unsigned short MaxNumCharsInPool; /* +0x0008 */ unsigned short NumCharsInPool; /* +0x000a */ short *Strings; /* +0x0010 */ unsigned char Pool[8]; /* +0x0018 71 06 00 00 */ }; struct _ACTIVATION_CONTEXT_ASSEMBLY_DATA { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned char AssemblyName[8]; /* +0x0008 cb 13 00 00 */ unsigned long AssemblyNameLength; /* +0x0010 */ unsigned long HashAlgorithm; /* +0x0014 */ unsigned long PseudoKey; /* +0x0018 */ }; struct _OUTLINETEXTMETRICA { unsigned char otmSize[4]; /* +0x0000 75 00 00 00 */ unsigned char otmTextMetrics[56]; /* +0x0004 1a 1c 00 00 */ unsigned char otmFiller; /* +0x003c */ unsigned char otmPanoseNumber[11]; /* +0x003d f8 17 00 00 */ unsigned char otmfsSelection[4]; /* +0x0048 75 00 00 00 */ unsigned char otmfsType[4]; /* +0x004c 75 00 00 00 */ unsigned char otmsCharSlopeRise[4]; /* +0x0050 74 00 00 00 */ unsigned char otmsCharSlopeRun[4]; /* +0x0054 74 00 00 00 */ unsigned char otmItalicAngle[4]; /* +0x0058 74 00 00 00 */ unsigned char otmEMSquare[4]; /* +0x005c 75 00 00 00 */ unsigned char otmAscent[4]; /* +0x0060 74 00 00 00 */ unsigned char otmDescent[4]; /* +0x0064 74 00 00 00 */ unsigned char otmLineGap[4]; /* +0x0068 75 00 00 00 */ unsigned char otmsCapEmHeight[4]; /* +0x006c 75 00 00 00 */ unsigned char otmsXHeight[4]; /* +0x0070 75 00 00 00 */ unsigned char otmrcFontBox[16]; /* +0x0074 7a 14 00 00 */ unsigned char otmMacAscent[4]; /* +0x0084 74 00 00 00 */ unsigned char otmMacDescent[4]; /* +0x0088 74 00 00 00 */ unsigned char otmMacLineGap[4]; /* +0x008c 75 00 00 00 */ unsigned char otmusMinimumPPEM[4]; /* +0x0090 75 00 00 00 */ unsigned char otmptSubscriptSize[8]; /* +0x0094 a1 14 00 00 */ unsigned char otmptSubscriptOffset[8]; /* +0x009c a1 14 00 00 */ unsigned char otmptSuperscriptSize[8]; /* +0x00a4 a1 14 00 00 */ unsigned char otmptSuperscriptOffset[8]; /* +0x00ac a1 14 00 00 */ unsigned char otmsStrikeoutSize[4]; /* +0x00b4 75 00 00 00 */ unsigned char otmsStrikeoutPosition[4]; /* +0x00b8 74 00 00 00 */ unsigned char otmsUnderscoreSize[4]; /* +0x00bc 74 00 00 00 */ unsigned char otmsUnderscorePosition[8]; /* +0x00c0 74 00 00 00 */ char *otmpFamilyName; /* +0x00c8 */ char *otmpFaceName; /* +0x00d0 */ char *otmpStyleName; /* +0x00d8 */ char *otmpFullName; /* +0x00e0 */ }; struct _userCLIPFORMAT { long fContext; /* +0x0000 */ }; struct _PS_CPU_QUOTA_QUERY_ENTRY { unsigned long SessionId; /* +0x0000 */ unsigned long Weight; /* +0x0004 */ }; struct _SYSTEM_SESSION_MAPPED_VIEW_INFORMATION { unsigned long long NextEntryOffset; /* +0x0000 */ unsigned long SessionId; /* +0x0008 */ unsigned long ViewFailures; /* +0x000c */ unsigned long long NumberOfBytesAvailable; /* +0x0010 */ unsigned long long NumberOfBytesAvailableContiguous; /* +0x0018 */ }; struct _CERT_OR_CRL_BLOB { unsigned long dwChoice; /* +0x0000 */ unsigned long cbEncoded; /* +0x0004 */ unsigned char *pbEncoded; /* +0x0008 */ }; struct _CRYPT_RC2_CBC_PARAMETERS { unsigned long dwVersion; /* +0x0000 */ unsigned char fIV[4]; /* +0x0004 74 00 00 00 */ unsigned char rgbIV[8]; /* +0x0008 91 19 00 00 */ }; struct _FILE_OBJECTID_BUFFER { unsigned char ObjectId[16]; /* +0x0000 33 1c 00 00 */ unsigned char BirthVolumeId[16]; /* +0x0010 33 1c 00 00 */ unsigned char BirthObjectId[16]; /* +0x0020 33 1c 00 00 */ /* unsigned char DomainId[-32]; +0x0030 33 1c 00 00 */ unsigned char ExtendedInfo[48]; /* +0x0010 34 1c 00 00 */ }; struct _TXFS_SAVEPOINT_INFORMATION { void *KtmTransaction; /* +0x0000 */ unsigned long ActionCode; /* +0x0008 */ unsigned long SavepointId; /* +0x000c */ }; struct _STORAGE_QUERY_DEPENDENT_VOLUME_REQUEST { unsigned long RequestLevel; /* +0x0000 */ unsigned long RequestFlags; /* +0x0004 */ }; struct _ATOM_BASIC_INFORMATION { unsigned short UsageCount; /* +0x0000 */ unsigned short Flags; /* +0x0002 */ unsigned short NameLength; /* +0x0004 */ unsigned char Name[2]; /* +0x0006 0a 14 00 00 */ }; struct _SL_APPX_CACHE_VALUE_DESCRIPTOR { unsigned char HashedName[32]; /* +0x0000 f7 17 00 00 */ unsigned long long Expiration; /* +0x0020 */ unsigned long DataSize; /* +0x0028 */ unsigned char Data[4]; /* +0x002c ff 12 00 00 */ }; struct _RASTERIZER_STATUS { short nSize; /* +0x0000 */ short wFlags; /* +0x0002 */ short nLanguageID; /* +0x0004 */ }; struct _CERT_FORTEZZA_DATA_PROP { unsigned char SerialNumber[8]; /* +0x0000 91 19 00 00 */ unsigned char CertIndex[4]; /* +0x0008 74 00 00 00 */ unsigned char CertLabel[36]; /* +0x000c 45 1c 00 00 */ }; struct _CMSG_CTRL_DEL_SIGNER_UNAUTH_ATTR_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwSignerIndex; /* +0x0004 */ unsigned long dwUnauthAttrIndex; /* +0x0008 */ }; struct tagEMRPOLYTEXTOUTA { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char rclBounds[16]; /* +0x0008 db 12 00 00 */ unsigned long iGraphicsMode; /* +0x0018 */ unsigned char exScale[4]; /* +0x001c 40 00 00 00 */ unsigned char eyScale[4]; /* +0x0020 40 00 00 00 */ long cStrings; /* +0x0024 */ unsigned char aemrtext[40]; /* +0x0028 4b 1c 00 00 */ }; struct _FSCTL_OFFLOAD_WRITE_OUTPUT { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long long LengthWritten; /* +0x0008 */ }; struct _SL_APPX_CACHE { unsigned long Version; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long DataSize; /* +0x0008 */ unsigned long long DataCheckSum; /* +0x0010 */ unsigned char Descriptors[48]; /* +0x0018 57 1c 00 00 */ }; struct _MESSAGE_RESOURCE_BLOCK { unsigned long LowId; /* +0x0000 */ unsigned long HighId; /* +0x0004 */ unsigned long OffsetToEntries; /* +0x0008 */ }; struct _RTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_EXTENDED { unsigned long long Size; /* +0x0000 */ unsigned long Format; /* +0x0008 */ unsigned char Frame[24]; /* +0x0010 5c 1c 00 00 */ void *Extra1; /* +0x0028 */ void *Extra2; /* +0x0030 */ void *Extra3; /* +0x0038 */ void *Extra4; /* +0x0040 */ }; struct tagBITMAPINFOHEADER { unsigned long biSize; /* +0x0000 */ long biWidth; /* +0x0004 */ long biHeight; /* +0x0008 */ unsigned short biPlanes; /* +0x000c */ unsigned short biBitCount; /* +0x000e */ unsigned long biCompression; /* +0x0010 */ unsigned long biSizeImage; /* +0x0014 */ long biXPelsPerMeter; /* +0x0018 */ long biYPelsPerMeter; /* +0x001c */ unsigned long biClrUsed; /* +0x0020 */ unsigned long biClrImportant; /* +0x0024 */ }; struct _BCRYPT_ECCKEY_BLOB { unsigned long dwMagic; /* +0x0000 */ unsigned long cbKey; /* +0x0004 */ }; struct _CRYPT_ECC_CMS_SHARED_INFO { unsigned char Algorithm[24]; /* +0x0000 68 14 00 00 */ unsigned char EntityUInfo[16]; /* +0x0018 08 13 00 00 */ unsigned char rgbSuppPubInfo[8]; /* +0x0028 cb 17 00 00 */ }; struct _SE_AUDIT_INFO { unsigned long Size; /* +0x0000 */ unsigned char AuditType[4]; /* +0x0004 78 1c 00 00 */ unsigned char AuditOperation[4]; /* +0x0008 79 1c 00 00 */ unsigned long AuditFlags; /* +0x000c */ unsigned char SubsystemName[16]; /* +0x0010 e3 12 00 00 */ unsigned char ObjectTypeName[16]; /* +0x0020 e3 12 00 00 */ unsigned char ObjectName[16]; /* +0x0030 e3 12 00 00 */ void *HandleId; /* +0x0040 */ unsigned char TransactionId[8]; /* +0x0048 61 16 00 00 */ unsigned char OperationId[8]; /* +0x0050 7a 1c 00 00 */ unsigned char ObjectCreation; /* +0x0058 */ unsigned char GenerateOnClose; /* +0x0059 */ }; struct _JOBOBJECT_EXTENDED_ACCOUNTING_INFORMATION { unsigned char BasicInfo[48]; /* +0x0000 7d 1c 00 00 */ unsigned char IoInfo[48]; /* +0x0030 7e 1c 00 00 */ unsigned char DiskIoInfo[40]; /* +0x0060 4c 15 00 00 */ unsigned long long ContextSwitches; /* +0x0088 */ unsigned char TotalCycleTime[8]; /* +0x0090 43 13 00 00 */ }; struct _SYSTEM_POOLTAG { /* unsigned char Tag[0]; +0x0000 cb 17 00 00 */ unsigned long TagUlong; /* +0x0000 */ unsigned long PagedAllocs; /* +0x0004 */ unsigned long PagedFrees; /* +0x0008 */ unsigned long long PagedUsed; /* +0x0010 */ unsigned long NonPagedAllocs; /* +0x0018 */ unsigned long NonPagedFrees; /* +0x001c */ unsigned long long NonPagedUsed; /* +0x0020 */ }; struct _RC_CONFIG { unsigned long dwSignature; /* +0x0000 */ unsigned long dwLength; /* +0x0004 */ unsigned long dwRCConfigVersion; /* +0x0008 */ unsigned long dwFilePathType; /* +0x000c */ unsigned long dwFileType; /* +0x0010 */ unsigned long dwSystemAttributes; /* +0x0014 */ unsigned long dwUltimateFallbackLocation; /* +0x0018 */ unsigned char dwServiceCheckSum[16]; /* +0x001c 66 1a 00 00 */ unsigned char dwChecksum[16]; /* +0x002c 66 1a 00 00 */ unsigned long dwReserved1; /* +0x003c */ unsigned long dwReserved2; /* +0x0040 */ unsigned long dwMUIFileNameOffset; /* +0x0044 */ unsigned long dwMUIFileNameLength; /* +0x0048 */ unsigned long dwMUIFilePathOffset; /* +0x004c */ unsigned long dwMUIFilePathLength; /* +0x0050 */ unsigned long dwMainResNameTypesOffset; /* +0x0054 */ unsigned long dwMainResNameTypesLength; /* +0x0058 */ unsigned long dwMainResIDTypesOffset; /* +0x005c */ unsigned long dwMainResIDTypesLength; /* +0x0060 */ unsigned long dwMUIResNameTypesOffset; /* +0x0064 */ unsigned long dwMUIResNameTypesLength; /* +0x0068 */ unsigned long dwMUIResIDTypesOffset; /* +0x006c */ unsigned long dwMUIResIDTypesLength; /* +0x0070 */ unsigned long dwLanguageOffset; /* +0x0074 */ unsigned long dwLanguageLength; /* +0x0078 */ unsigned long dwUltimateFallbackLanguageOffset; /* +0x007c */ unsigned long dwUltimateFallbackLanguageLength; /* +0x0080 */ }; struct tagEMRSTRETCHDIBITS { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char rclBounds[16]; /* +0x0008 db 12 00 00 */ long xDest; /* +0x0018 */ long yDest; /* +0x001c */ long xSrc; /* +0x0020 */ long ySrc; /* +0x0024 */ long cxSrc; /* +0x0028 */ long cySrc; /* +0x002c */ unsigned long offBmiSrc; /* +0x0030 */ unsigned long cbBmiSrc; /* +0x0034 */ unsigned long offBitsSrc; /* +0x0038 */ unsigned long cbBitsSrc; /* +0x003c */ unsigned long iUsageSrc; /* +0x0040 */ unsigned long dwRop; /* +0x0044 */ long cxDest; /* +0x0048 */ long cyDest; /* +0x004c */ }; struct __GENERIC_BINDING_INFO { void *pObj; /* +0x0000 */ unsigned char Size[8]; /* +0x0008 75 00 00 00 */ unsigned char pfnBind[8]; /* +0x0010 1e 15 00 00 */ unsigned char pfnUnbind[8]; /* +0x0018 fb 1a 00 00 */ }; struct _WNF_DELIVERY_DESCRIPTOR { unsigned char StateName[8]; /* +0x0000 f8 13 00 00 */ unsigned long ChangeStamp; /* +0x0008 */ unsigned long DeliveryFlag; /* +0x000c */ unsigned long DeliveryState; /* +0x0010 */ unsigned long ReliableRetryDelay; /* +0x0014 */ unsigned long BatchRetry; /* +0x0018 */ unsigned long StateDataSize; /* +0x001c */ unsigned long EventMask; /* +0x0020 */ unsigned char TypeId[16]; /* +0x0024 99 1c 00 00 */ unsigned long StateDataOffset; /* +0x0034 */ }; struct _TRIVERTEX { long x; /* +0x0000 */ long y; /* +0x0004 */ unsigned short Red; /* +0x0008 */ unsigned short Green; /* +0x000a */ unsigned short Blue; /* +0x000c */ unsigned short Alpha; /* +0x000e */ }; struct _PUBLIC_OBJECT_BASIC_INFORMATION { unsigned long Attributes; /* +0x0000 */ unsigned long GrantedAccess; /* +0x0004 */ unsigned long HandleCount; /* +0x0008 */ unsigned long PointerCount; /* +0x000c */ unsigned char Reserved[40]; /* +0x0010 ed 1c 00 00 */ }; struct _FSCTL_OFFLOAD_READ_OUTPUT { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long long TransferLength; /* +0x0008 */ unsigned char Token[512]; /* +0x0010 c9 19 00 00 */ }; struct _SYSTEM_PROCESSOR_INFORMATION { unsigned short ProcessorArchitecture; /* +0x0000 */ unsigned short ProcessorLevel; /* +0x0002 */ unsigned short ProcessorRevision; /* +0x0004 */ unsigned short MaximumProcessors; /* +0x0006 */ unsigned long ProcessorFeatureBits; /* +0x0008 */ }; struct _MEMORY_BASIC_INFORMATION { void *BaseAddress; /* +0x0000 */ void *AllocationBase; /* +0x0008 */ unsigned long AllocationProtect; /* +0x0010 */ unsigned long long RegionSize; /* +0x0018 */ unsigned long State; /* +0x0020 */ unsigned long Protect; /* +0x0024 */ unsigned long Type; /* +0x0028 */ }; struct DISPLAYCONFIG_TARGET_DEVICE_NAME_FLAGS { /* unsigned char friendlyNameFromEdid[0]; +0x0000 f8 1c 00 00 */ /* unsigned char friendlyNameForced[0]; +0x0000 f9 1c 00 00 */ /* unsigned char edidIdsValid[0]; +0x0000 fa 1c 00 00 */ /* unsigned char reserved[0]; +0x0000 fb 1c 00 00 */ unsigned char value[4]; /* +0x0000 75 00 00 00 */ }; struct _OUTLINETEXTMETRICW { unsigned char otmSize[4]; /* +0x0000 75 00 00 00 */ unsigned char otmTextMetrics[60]; /* +0x0004 fe 1c 00 00 */ unsigned char otmFiller; /* +0x0040 */ unsigned char otmPanoseNumber[11]; /* +0x0041 f8 17 00 00 */ unsigned char otmfsSelection[4]; /* +0x004c 75 00 00 00 */ unsigned char otmfsType[4]; /* +0x0050 75 00 00 00 */ unsigned char otmsCharSlopeRise[4]; /* +0x0054 74 00 00 00 */ unsigned char otmsCharSlopeRun[4]; /* +0x0058 74 00 00 00 */ unsigned char otmItalicAngle[4]; /* +0x005c 74 00 00 00 */ unsigned char otmEMSquare[4]; /* +0x0060 75 00 00 00 */ unsigned char otmAscent[4]; /* +0x0064 74 00 00 00 */ unsigned char otmDescent[4]; /* +0x0068 74 00 00 00 */ unsigned char otmLineGap[4]; /* +0x006c 75 00 00 00 */ unsigned char otmsCapEmHeight[4]; /* +0x0070 75 00 00 00 */ unsigned char otmsXHeight[4]; /* +0x0074 75 00 00 00 */ unsigned char otmrcFontBox[16]; /* +0x0078 7a 14 00 00 */ unsigned char otmMacAscent[4]; /* +0x0088 74 00 00 00 */ unsigned char otmMacDescent[4]; /* +0x008c 74 00 00 00 */ unsigned char otmMacLineGap[4]; /* +0x0090 75 00 00 00 */ unsigned char otmusMinimumPPEM[4]; /* +0x0094 75 00 00 00 */ unsigned char otmptSubscriptSize[8]; /* +0x0098 a1 14 00 00 */ unsigned char otmptSubscriptOffset[8]; /* +0x00a0 a1 14 00 00 */ unsigned char otmptSuperscriptSize[8]; /* +0x00a8 a1 14 00 00 */ unsigned char otmptSuperscriptOffset[8]; /* +0x00b0 a1 14 00 00 */ unsigned char otmsStrikeoutSize[4]; /* +0x00b8 75 00 00 00 */ unsigned char otmsStrikeoutPosition[4]; /* +0x00bc 74 00 00 00 */ unsigned char otmsUnderscoreSize[4]; /* +0x00c0 74 00 00 00 */ unsigned char otmsUnderscorePosition[4]; /* +0x00c4 74 00 00 00 */ char *otmpFamilyName; /* +0x00c8 */ char *otmpFaceName; /* +0x00d0 */ char *otmpStyleName; /* +0x00d8 */ char *otmpFullName; /* +0x00e0 */ }; struct tagRAWKEYBOARD { unsigned short MakeCode; /* +0x0000 */ unsigned short Flags; /* +0x0002 */ unsigned short Reserved; /* +0x0004 */ unsigned short VKey; /* +0x0006 */ unsigned char Message[4]; /* +0x0008 75 00 00 00 */ unsigned long ExtraInformation; /* +0x000c */ }; struct _SYSTEM_BIGPOOL_ENTRY { void *VirtualAddress; /* +0x0000 */ unsigned char NonPaged[8]; /* +0x0000 1d 13 00 00 */ unsigned long long SizeInBytes; /* +0x0008 */ /* unsigned char Tag[0]; +0x0010 cb 17 00 00 */ unsigned long TagUlong; /* +0x0010 */ }; struct _RTL_CRITICAL_SECTION_DEBUG64 { unsigned short Type; /* +0x0000 */ unsigned short CreatorBackTraceIndex; /* +0x0002 */ unsigned long long CriticalSection; /* +0x0008 */ unsigned char ProcessLocksList[16]; /* +0x0010 10 1d 00 00 */ unsigned long EntryCount; /* +0x0020 */ unsigned long ContentionCount; /* +0x0024 */ unsigned char Spare[8]; /* +0x0028 14 16 00 00 */ }; struct _DOCINFOA { unsigned char cbSize[8]; /* +0x0000 74 00 00 00 */ unsigned char lpszDocName[8]; /* +0x0008 79 14 00 00 */ unsigned char lpszOutput[8]; /* +0x0010 79 14 00 00 */ unsigned char lpszDatatype[8]; /* +0x0018 79 14 00 00 */ unsigned long fwType; /* +0x0020 */ }; struct tagEMRSELECTCLIPPATH { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned long iMode; /* +0x0008 */ }; struct _BCRYPT_INTERFACE_VERSION { unsigned short MajorVersion; /* +0x0000 */ unsigned short MinorVersion; /* +0x0002 */ }; struct _CERT_ISSUER_SERIAL_NUMBER { unsigned char Issuer[16]; /* +0x0000 08 13 00 00 */ unsigned char SerialNumber[16]; /* +0x0010 08 13 00 00 */ }; struct _DEFERRED_REPAIR_EXTENT { unsigned char VolumeByteOffset[8]; /* +0x0000 43 13 00 00 */ unsigned long Length; /* +0x0008 */ unsigned long RepairFlags; /* +0x000c */ }; struct _SYSTEM_MEMORY_TOPOLOGY_INFORMATION { unsigned long long NumberOfRuns; /* +0x0000 */ unsigned long NumberOfNodes; /* +0x0008 */ unsigned long NumberOfChannels; /* +0x000c */ unsigned char Run[32]; /* +0x0010 23 1d 00 00 */ }; struct tagICEXYZTRIPLE { unsigned char ciexyzRed[12]; /* +0x0000 28 1d 00 00 */ unsigned char ciexyzGreen[12]; /* +0x000c 28 1d 00 00 */ unsigned char ciexyzBlue[12]; /* +0x0018 28 1d 00 00 */ }; struct _RPC_BINDING_HANDLE_SECURITY_V1_W { unsigned long Version; /* +0x0000 */ unsigned short *ServerPrincName; /* +0x0008 */ unsigned long AuthnLevel; /* +0x0010 */ unsigned long AuthnSvc; /* +0x0014 */ unsigned char AuthIdentity[8]; /* +0x0018 2d 1d 00 00 */ unsigned char SecurityQos[8]; /* +0x0020 2f 1d 00 00 */ }; struct _CMC_TAGGED_CONTENT_INFO { unsigned long dwBodyPartID; /* +0x0000 */ unsigned char EncodedContentInfo[16]; /* +0x0008 08 13 00 00 */ }; struct _TOKEN_SOURCE { unsigned char SourceName[8]; /* +0x0000 38 1d 00 00 */ unsigned char SourceIdentifier[8]; /* +0x0008 38 15 00 00 */ }; struct _KERNEL_USER_TIMES { unsigned char CreateTime[8]; /* +0x0000 43 13 00 00 */ unsigned char ExitTime[8]; /* +0x0008 43 13 00 00 */ unsigned char KernelTime[8]; /* +0x0010 43 13 00 00 */ unsigned char UserTime[8]; /* +0x0018 43 13 00 00 */ }; struct _DECRYPTION_STATUS_BUFFER { unsigned char NoEncryptedStreams; /* +0x0000 */ }; struct _RTL_VERIFIER_HEAP_TABLE { unsigned long Size; /* +0x0000 */ unsigned char VrfHeapAllocate[8]; /* +0x0008 41 1d 00 00 */ unsigned char VrfHeapReAllocate[8]; /* +0x0010 44 1d 00 00 */ unsigned char VrfHeapFree[8]; /* +0x0018 47 1d 00 00 */ unsigned char VrfHeapCreate[8]; /* +0x0020 4c 1d 00 00 */ unsigned char VrfHeapDestroy[8]; /* +0x0028 1e 15 00 00 */ unsigned char VrfHeapExtend[8]; /* +0x0030 4e 1d 00 00 */ unsigned char VrfGetProcessHeaps[8]; /* +0x0038 eb 16 00 00 */ unsigned char VrfHeapWalk[8]; /* +0x0040 53 1d 00 00 */ unsigned char VrfHeapLock[8]; /* +0x0048 55 1d 00 00 */ unsigned char VrfHeapUnlock[8]; /* +0x0050 55 1d 00 00 */ unsigned char VrfHeapIsLocked[8]; /* +0x0058 55 1d 00 00 */ unsigned char VrfHeapValidate[8]; /* +0x0060 47 1d 00 00 */ unsigned char VrfHeapSetUserValue[8]; /* +0x0068 58 1d 00 00 */ unsigned char VrfHeapGetUserInfo[8]; /* +0x0070 5b 1d 00 00 */ unsigned char VrfHeapSetUserFlags[8]; /* +0x0078 5e 1d 00 00 */ unsigned char VrfHeapSerialize[8]; /* +0x0080 55 1d 00 00 */ unsigned char VrfHeapSize[8]; /* +0x0088 60 1d 00 00 */ unsigned char VrfHeapCompact[8]; /* +0x0090 63 1d 00 00 */ unsigned char VrfHeapZero[8]; /* +0x0098 65 1d 00 00 */ unsigned char VrfQueryVerifierOptions[8]; /* +0x00a0 68 1d 00 00 */ unsigned char VrfSetVerifierOptions[8]; /* +0x00a8 68 1d 00 00 */ }; struct _SYSTEM_HANDLE_INFORMATION_EX { unsigned long long NumberOfHandles; /* +0x0000 */ unsigned long long Reserved; /* +0x0008 */ unsigned char Handles[40]; /* +0x0010 84 1d 00 00 */ }; struct _BLENDFUNCTION { unsigned char BlendOp; /* +0x0000 */ unsigned char BlendFlags; /* +0x0001 */ unsigned char SourceConstantAlpha; /* +0x0002 */ unsigned char AlphaFormat; /* +0x0003 */ }; struct _RPC_PROTSEQ_VECTORW { unsigned char Count[8]; /* +0x0000 75 00 00 00 */ unsigned char Protseq[8]; /* +0x0008 8b 1d 00 00 */ }; struct _SERVICE_RUNLEVEL_INFO { unsigned long eLowestRunLevel; /* +0x0000 */ }; struct _PUBKEY { unsigned long magic; /* +0x0000 */ unsigned long bitlen; /* +0x0004 */ }; struct _CMSG_CONTENT_ENCRYPT_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned char ContentEncryptionAlgorithm[24]; /* +0x0010 68 14 00 00 */ void *pvEncryptionAuxInfo; /* +0x0028 */ unsigned long cRecipients; /* +0x0030 */ unsigned char rgCmsRecipients[8]; /* +0x0038 be 1d 00 00 */ unsigned char pfnAlloc[8]; /* +0x0040 ff 16 00 00 */ unsigned char pfnFree[8]; /* +0x0048 d2 13 00 00 */ unsigned long dwEncryptFlags; /* +0x0050 */ unsigned long long hContentEncryptKey; /* +0x0058 */ void *hCNGContentEncryptKey; /* +0x0058 */ unsigned long dwFlags; /* +0x0060 */ unsigned char fCNG[4]; /* +0x0064 74 00 00 00 */ unsigned char *pbCNGContentEncryptKeyObject; /* +0x0068 */ unsigned char *pbContentEncryptKey; /* +0x0070 */ unsigned long cbContentEncryptKey; /* +0x0078 */ }; struct __PUBLIC_OBJECT_TYPE_INFORMATION { unsigned char TypeName[16]; /* +0x0000 e3 12 00 00 */ unsigned char Reserved[88]; /* +0x0010 c1 1d 00 00 */ }; struct _SD_CHANGE_MACHINE_SID_INPUT { unsigned short CurrentMachineSIDOffset; /* +0x0000 */ unsigned short CurrentMachineSIDLength; /* +0x0002 */ unsigned short NewMachineSIDOffset; /* +0x0004 */ unsigned short NewMachineSIDLength; /* +0x0006 */ }; struct tagGESTURECONFIG { unsigned long dwID; /* +0x0000 */ unsigned long dwWant; /* +0x0004 */ unsigned long dwBlock; /* +0x0008 */ }; struct _PS_ATTRIBUTE { unsigned long long Attribute; /* +0x0000 */ unsigned long long Size; /* +0x0008 */ unsigned long long Value; /* +0x0010 */ void *ValuePtr; /* +0x0010 */ unsigned long long *ReturnLength; /* +0x0018 */ }; struct _FILE_SFIO_RESERVE_INFORMATION { unsigned long RequestsPerPeriod; /* +0x0000 */ unsigned long Period; /* +0x0004 */ unsigned char RetryFailures; /* +0x0008 */ unsigned char Discardable; /* +0x0009 */ unsigned long RequestSize; /* +0x000c */ unsigned long NumOutstandingRequests; /* +0x0010 */ }; struct _MEMORY_WORKING_SET_BLOCK { /* unsigned char Protection[0]; +0x0000 f0 1d 00 00 */ /* unsigned char ShareCount[0]; +0x0000 f1 1d 00 00 */ /* unsigned char Shared[0]; +0x0000 f2 1d 00 00 */ /* unsigned char Node[0]; +0x0000 f3 1d 00 00 */ unsigned char VirtualPage[8]; /* +0x0000 f4 1d 00 00 */ }; struct _TRANSACTION_BIND_INFORMATION { void *TmHandle; /* +0x0000 */ }; struct _FILE_SET_SPARSE_BUFFER { unsigned char SetSparse; /* +0x0000 */ }; struct _PLUGPLAY_CONTROL_STATUS_DATA { unsigned char DeviceInstance[16]; /* +0x0000 e3 12 00 00 */ unsigned long Operation; /* +0x0010 */ unsigned long DeviceStatus; /* +0x0014 */ unsigned long DeviceProblem; /* +0x0018 */ unsigned long Flags; /* +0x001c */ }; struct _CERT_PRIVATE_KEY_VALIDITY { unsigned char NotBefore[8]; /* +0x0000 37 13 00 00 */ unsigned char NotAfter[8]; /* +0x0008 37 13 00 00 */ }; struct _SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION { unsigned char IdleTime[8]; /* +0x0000 43 13 00 00 */ unsigned char KernelTime[8]; /* +0x0008 43 13 00 00 */ unsigned char UserTime[8]; /* +0x0010 43 13 00 00 */ unsigned char DpcTime[8]; /* +0x0018 43 13 00 00 */ unsigned char InterruptTime[8]; /* +0x0020 43 13 00 00 */ unsigned long InterruptCount; /* +0x0028 */ }; struct _SYSTEM_PROCESSOR_IDLE_INFORMATION { unsigned long long IdleTime; /* +0x0000 */ unsigned long long C1Time; /* +0x0008 */ unsigned long long C2Time; /* +0x0010 */ unsigned long long C3Time; /* +0x0018 */ unsigned long C1Transitions; /* +0x0020 */ unsigned long C2Transitions; /* +0x0024 */ unsigned long C3Transitions; /* +0x0028 */ unsigned long Padding; /* +0x002c */ }; struct tagENUMTEXTMETRICA { unsigned char etmNewTextMetricEx[96]; /* +0x0000 29 1e 00 00 */ unsigned char etmAxesList[392]; /* +0x0060 2a 1e 00 00 */ }; struct _KEY_TYPE_SUBTYPE { unsigned long dwKeySpec; /* +0x0000 */ unsigned char Type[16]; /* +0x0004 f3 14 00 00 */ unsigned char Subtype[16]; /* +0x0014 f3 14 00 00 */ }; struct _FIBER { void *FiberData; /* +0x0000 */ unsigned char ExceptionList[8]; /* +0x0008 44 1e 00 00 */ void *StackBase; /* +0x0010 */ void *StackLimit; /* +0x0018 */ void *DeallocationStack; /* +0x0020 */ unsigned char FiberContext[1232]; /* +0x0030 5d 13 00 00 */ unsigned char Wx86Tib[8]; /* +0x0500 46 1e 00 00 */ unsigned char ActivationContextStackPointer[8]; /* +0x0508 48 1e 00 00 */ void *FlsData; /* +0x0510 */ unsigned long GuaranteedStackBytes; /* +0x0518 */ unsigned short TebFlags; /* +0x051c */ unsigned short ReservedPad; /* +0x051e */ }; struct _KAFFINITY_EX { unsigned short Count; /* +0x0000 */ unsigned short Size; /* +0x0002 */ unsigned long Reserved; /* +0x0004 */ unsigned char Bitmap[64]; /* +0x0008 52 1e 00 00 */ }; struct _ASSEMBLY_FILE_DETAILED_INFORMATION { unsigned long ulFlags; /* +0x0000 */ unsigned long ulFilenameLength; /* +0x0004 */ unsigned long ulPathLength; /* +0x0008 */ unsigned char lpFileName[8]; /* +0x0010 cb 13 00 00 */ unsigned char lpFilePath[8]; /* +0x0018 cb 13 00 00 */ }; struct _RTL_SRWLOCK { /* unsigned char Locked[0]; +0x0000 1d 13 00 00 */ /* unsigned char Waiting[0]; +0x0000 57 1e 00 00 */ /* unsigned char Waking[0]; +0x0000 58 1e 00 00 */ /* unsigned char MultipleShared[0]; +0x0000 59 1e 00 00 */ /* unsigned char Shared[0]; +0x0000 5a 1e 00 00 */ unsigned long long Value; /* +0x0000 */ void *Ptr; /* +0x0000 */ }; struct _SERVICE_NOTIFY_2W { unsigned long dwVersion; /* +0x0000 */ unsigned char pfnNotifyCallback[8]; /* +0x0008 d2 13 00 00 */ void *pContext; /* +0x0010 */ unsigned long dwNotificationStatus; /* +0x0018 */ unsigned char ServiceStatus[36]; /* +0x001c e0 16 00 00 */ unsigned long dwNotificationTriggered; /* +0x0040 */ unsigned char pszServiceNames[8]; /* +0x0048 71 06 00 00 */ }; enum tagAPTKIND { APTKIND_NEUTRALTHREADED = 1, APTKIND_MULTITHREADED = 2, APTKIND_APARTMENTTHREADED = 4, APTKIND_APPLICATION_STA = 8 }; struct _FILE_COMPLETION_INFORMATION { void *Port; /* +0x0000 */ void *Key; /* +0x0008 */ }; struct _KEY_VIRTUALIZATION_INFORMATION { /* unsigned char VirtualizationCandidate[0]; +0x0000 94 13 00 00 */ /* unsigned char VirtualizationEnabled[0]; +0x0000 90 18 00 00 */ /* unsigned char VirtualTarget[0]; +0x0000 91 18 00 00 */ /* unsigned char VirtualStore[0]; +0x0000 74 1e 00 00 */ /* unsigned char VirtualSource[0]; +0x0000 75 1e 00 00 */ unsigned char Reserved[4]; /* +0x0000 76 1e 00 00 */ }; struct _STARTUPINFOEXW { unsigned char StartupInfo[104]; /* +0x0000 83 17 00 00 */ unsigned char lpAttributeList[8]; /* +0x0068 7a 1e 00 00 */ }; struct tagEMR { unsigned long iType; /* +0x0000 */ unsigned long nSize; /* +0x0004 */ }; struct tagEMRCREATEDIBPATTERNBRUSHPT { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned long ihBrush; /* +0x0008 */ unsigned long iUsage; /* +0x000c */ unsigned long offBmi; /* +0x0010 */ unsigned long cbBmi; /* +0x0014 */ unsigned long offBits; /* +0x0018 */ unsigned long cbBits; /* +0x001c */ }; struct tagRemSTGMEDIUM { unsigned long tymed; /* +0x0000 */ unsigned long dwHandleType; /* +0x0004 */ unsigned long pData; /* +0x0008 */ unsigned long pUnkForRelease; /* +0x000c */ unsigned long cbData; /* +0x0010 */ unsigned char data[4]; /* +0x0014 ff 12 00 00 */ }; struct _KTMOBJECT_CURSOR { unsigned char LastQuery[16]; /* +0x0000 f3 14 00 00 */ unsigned long ObjectIdCount; /* +0x0010 */ unsigned char ObjectIds[16]; /* +0x0014 8a 1e 00 00 */ }; struct _RTL_QUERY_REGISTRY_TABLE { unsigned char QueryRoutine[8]; /* +0x0000 8f 1e 00 00 */ unsigned long Flags; /* +0x0008 */ unsigned char Name[8]; /* +0x0010 71 06 00 00 */ void *EntryContext; /* +0x0018 */ unsigned long DefaultType; /* +0x0020 */ void *DefaultData; /* +0x0028 */ unsigned long DefaultLength; /* +0x0030 */ }; struct tagPOINTS { short x; /* +0x0000 */ short y; /* +0x0002 */ }; struct tagINPUT { unsigned long type; /* +0x0000 */ /* unsigned char mi[0]; +0x0008 94 1e 00 00 */ /* unsigned char ki[0]; +0x0008 95 1e 00 00 */ unsigned char hi[32]; /* +0x0008 96 1e 00 00 */ }; struct _EISA_MEMORY_TYPE { /* unsigned char ReadWrite[0]; +0x0000 a2 1e 00 00 */ /* unsigned char Cached[0]; +0x0000 a3 1e 00 00 */ /* unsigned char Reserved0[0]; +0x0000 a4 1e 00 00 */ /* unsigned char Type[0]; +0x0000 a5 1e 00 00 */ /* unsigned char Shared[0]; +0x0000 a6 1e 00 00 */ /* unsigned char Reserved1[0]; +0x0000 a7 1e 00 00 */ unsigned char MoreEntries[1]; /* +0x0000 a8 1e 00 00 */ }; struct _RTL_TRACE_ENUMERATE { unsigned char Database[8]; /* +0x0000 ac 1e 00 00 */ unsigned long Index; /* +0x0008 */ unsigned char Block[8]; /* +0x0010 9d 16 00 00 */ }; struct _FILE_LEVEL_TRIM_OUTPUT { unsigned long NumRangesProccessed; /* +0x0000 */ }; struct _KCRM_PROTOCOL_BLOB { unsigned char ProtocolId[16]; /* +0x0000 f3 14 00 00 */ unsigned long StaticInfoLength; /* +0x0010 */ unsigned long TransactionIdInfoLength; /* +0x0014 */ unsigned long Unused1; /* +0x0018 */ unsigned long Unused2; /* +0x001c */ }; struct _CRYPT_AES_128_KEY_STATE { unsigned char Key[16]; /* +0x0000 33 1c 00 00 */ unsigned char IV[16]; /* +0x0010 33 1c 00 00 */ unsigned char EncryptionState[176]; /* +0x0020 bf 1e 00 00 */ unsigned char DecryptionState[176]; /* +0x00d0 bf 1e 00 00 */ unsigned char Feedback[16]; /* +0x0180 33 1c 00 00 */ }; struct _FILE_ACCESS_INFORMATION { unsigned long AccessFlags; /* +0x0000 */ }; struct tagEXTLOGFONTW { unsigned char elfLogFont[92]; /* +0x0000 bd 16 00 00 */ unsigned char elfFullName[128]; /* +0x005c cb 1e 00 00 */ unsigned char elfStyle[64]; /* +0x00dc bf 15 00 00 */ unsigned long elfVersion; /* +0x011c */ unsigned long elfStyleSize; /* +0x0120 */ unsigned long elfMatch; /* +0x0124 */ unsigned long elfReserved; /* +0x0128 */ unsigned char elfVendorId[4]; /* +0x012c cb 17 00 00 */ unsigned long elfCulture; /* +0x0130 */ unsigned char elfPanose[12]; /* +0x0134 f8 17 00 00 */ }; struct tagPOINTFX { unsigned char x[4]; /* +0x0000 17 17 00 00 */ unsigned char y[4]; /* +0x0004 17 17 00 00 */ }; struct _PROV_ENUMALGS_EX { unsigned char aiAlgid[4]; /* +0x0000 75 00 00 00 */ unsigned long dwDefaultLen; /* +0x0004 */ unsigned long dwMinLen; /* +0x0008 */ unsigned long dwMaxLen; /* +0x000c */ unsigned long dwProtocols; /* +0x0010 */ unsigned long dwNameLen; /* +0x0014 */ unsigned char szName[20]; /* +0x0018 e9 1e 00 00 */ unsigned long dwLongNameLen; /* +0x002c */ unsigned char szLongName[40]; /* +0x0030 ea 1e 00 00 */ }; struct _CERT_X942_DH_PARAMETERS { unsigned char p[16]; /* +0x0000 08 13 00 00 */ unsigned char g[16]; /* +0x0010 08 13 00 00 */ unsigned char q[16]; /* +0x0020 08 13 00 00 */ unsigned char j[16]; /* +0x0030 08 13 00 00 */ unsigned char pValidationParams[8]; /* +0x0040 ee 1e 00 00 */ }; struct _API_SET_VALUE_ENTRY { unsigned long NameOffset; /* +0x0000 */ unsigned long NameLength; /* +0x0004 */ unsigned long ValueOffset; /* +0x0008 */ unsigned long ValueLength; /* +0x000c */ }; struct _DMA_CONFIGURATION_BYTE1 { /* unsigned char Reserved0[0]; +0x0000 f7 1e 00 00 */ /* unsigned char TransferSize[0]; +0x0000 f8 1e 00 00 */ /* unsigned char Timing[0]; +0x0000 f9 1e 00 00 */ unsigned char Reserved1[1]; /* +0x0000 fa 1e 00 00 */ }; struct _COMMPROP { unsigned short wPacketLength; /* +0x0000 */ unsigned short wPacketVersion; /* +0x0002 */ unsigned long dwServiceMask; /* +0x0004 */ unsigned long dwReserved1; /* +0x0008 */ unsigned long dwMaxTxQueue; /* +0x000c */ unsigned long dwMaxRxQueue; /* +0x0010 */ unsigned long dwMaxBaud; /* +0x0014 */ unsigned long dwProvSubType; /* +0x0018 */ unsigned long dwProvCapabilities; /* +0x001c */ unsigned long dwSettableParams; /* +0x0020 */ unsigned long dwSettableBaud; /* +0x0024 */ unsigned short wSettableData; /* +0x0028 */ unsigned short wSettableStopParity; /* +0x002a */ unsigned long dwCurrentTxQueue; /* +0x002c */ unsigned long dwCurrentRxQueue; /* +0x0030 */ unsigned long dwProvSpec1; /* +0x0034 */ unsigned long dwProvSpec2; /* +0x0038 */ unsigned char wcProvChar[4]; /* +0x003c 0a 14 00 00 */ }; struct _LDR_DATA_TABLE_ENTRY32 { unsigned char InLoadOrderLinks[8]; /* +0x0000 0c 1f 00 00 */ unsigned char InMemoryOrderLinks[8]; /* +0x0008 0c 1f 00 00 */ unsigned char InInitializationOrderLinks[8]; /* +0x0010 0c 1f 00 00 */ unsigned long DllBase; /* +0x0018 */ unsigned long EntryPoint; /* +0x001c */ unsigned long SizeOfImage; /* +0x0020 */ unsigned char FullDllName[8]; /* +0x0024 9f 17 00 00 */ unsigned char BaseDllName[8]; /* +0x002c 9f 17 00 00 */ unsigned long Flags; /* +0x0034 */ unsigned short LoadCount; /* +0x0038 */ unsigned short TlsIndex; /* +0x003a */ /* unsigned char HashLinks[0]; +0x003c 0c 1f 00 00 */ unsigned long SectionPointer; /* +0x003c */ unsigned long CheckSum; /* +0x0040 */ unsigned long TimeDateStamp; /* +0x0044 */ unsigned long LoadedImports; /* +0x0044 */ }; struct _FILE_QUOTA_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long SidLength; /* +0x0004 */ unsigned char ChangeTime[8]; /* +0x0008 43 13 00 00 */ unsigned char QuotaUsed[8]; /* +0x0010 43 13 00 00 */ unsigned char QuotaThreshold[8]; /* +0x0018 43 13 00 00 */ unsigned char QuotaLimit[8]; /* +0x0020 43 13 00 00 */ unsigned char Sid[16]; /* +0x0028 0f 1f 00 00 */ }; struct _PLUGPLAY_CONTROL_CONFLICT_LIST { unsigned long Reserved1; /* +0x0000 */ unsigned long Reserved2; /* +0x0004 */ unsigned long ConflictsCounted; /* +0x0008 */ unsigned long ConflictsListed; /* +0x000c */ unsigned long RequiredBufferSize; /* +0x0010 */ unsigned char ConflictEntry[40]; /* +0x0018 13 1f 00 00 */ }; struct _WIN32_MEMORY_RANGE_ENTRY { void *VirtualAddress; /* +0x0000 */ unsigned long long NumberOfBytes; /* +0x0008 */ }; struct tagPAINTSTRUCT { unsigned char hdc[8]; /* +0x0000 24 1f 00 00 */ unsigned char fErase[4]; /* +0x0008 74 00 00 00 */ unsigned char rcPaint[16]; /* +0x000c 7a 14 00 00 */ unsigned char fRestore[4]; /* +0x001c 74 00 00 00 */ unsigned char fIncUpdate[4]; /* +0x0020 74 00 00 00 */ unsigned char rgbReserved[36]; /* +0x0024 f7 17 00 00 */ }; struct _DISCDLGSTRUCTA { unsigned long cbStructure; /* +0x0000 */ unsigned char hwndOwner[8]; /* +0x0008 f7 12 00 00 */ char *lpLocalName; /* +0x0010 */ char *lpRemoteName; /* +0x0018 */ unsigned long dwFlags; /* +0x0020 */ }; struct _DCB { unsigned long DCBlength; /* +0x0000 */ unsigned long BaudRate; /* +0x0004 */ /* unsigned char fBinary[0]; +0x0008 94 13 00 00 */ /* unsigned char fParity[0]; +0x0008 90 18 00 00 */ /* unsigned char fOutxCtsFlow[0]; +0x0008 91 18 00 00 */ /* unsigned char fOutxDsrFlow[0]; +0x0008 74 1e 00 00 */ /* unsigned char fDtrControl[0]; +0x0008 31 1f 00 00 */ /* unsigned char fDsrSensitivity[0]; +0x0008 32 1f 00 00 */ /* unsigned char fTXContinueOnXoff[0]; +0x0008 33 1f 00 00 */ /* unsigned char fOutX[0]; +0x0008 34 1f 00 00 */ /* unsigned char fInX[0]; +0x0008 35 1f 00 00 */ /* unsigned char fErrorChar[0]; +0x0008 36 1f 00 00 */ /* unsigned char fNull[0]; +0x0008 37 1f 00 00 */ /* unsigned char fRtsControl[0]; +0x0008 38 1f 00 00 */ /* unsigned char fAbortOnError[0]; +0x0008 39 1f 00 00 */ unsigned char fDummy2[4]; /* +0x0008 3a 1f 00 00 */ unsigned short wReserved; /* +0x000c */ unsigned short XonLim; /* +0x000e */ unsigned short XoffLim; /* +0x0010 */ unsigned char ByteSize; /* +0x0012 */ unsigned char Parity; /* +0x0013 */ unsigned char StopBits; /* +0x0014 */ char XonChar; /* +0x0015 */ char XoffChar; /* +0x0016 */ char ErrorChar; /* +0x0017 */ char EofChar; /* +0x0018 */ char EvtChar; /* +0x0019 */ unsigned short wReserved1; /* +0x001a */ }; struct _SINGLE_LIST_ENTRY { unsigned char Next[8]; /* +0x0000 7b 1a 00 00 */ }; struct tagEMREXCLUDECLIPRECT { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char rclClip[16]; /* +0x0008 db 12 00 00 */ }; struct _CRYPT_ASYNC_RETRIEVAL_COMPLETION { unsigned char pfnCompletion[8]; /* +0x0000 49 1f 00 00 */ void *pvCompletion; /* +0x0008 */ }; struct tagEMRSETDIBITSTODEVICE { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char rclBounds[16]; /* +0x0008 db 12 00 00 */ long xDest; /* +0x0018 */ long yDest; /* +0x001c */ long xSrc; /* +0x0020 */ long ySrc; /* +0x0024 */ long cxSrc; /* +0x0028 */ long cySrc; /* +0x002c */ unsigned long offBmiSrc; /* +0x0030 */ unsigned long cbBmiSrc; /* +0x0034 */ unsigned long offBitsSrc; /* +0x0038 */ unsigned long cbBitsSrc; /* +0x003c */ unsigned long iUsageSrc; /* +0x0040 */ unsigned long iStartScan; /* +0x0044 */ unsigned long cScans; /* +0x0048 */ }; struct _SCHANNEL_ALG { unsigned long dwUse; /* +0x0000 */ unsigned char Algid[4]; /* +0x0004 75 00 00 00 */ unsigned long cBits; /* +0x0008 */ unsigned long dwFlags; /* +0x000c */ unsigned long dwReserved; /* +0x0010 */ }; struct _HEAP_INFORMATION { unsigned long long Address; /* +0x0000 */ unsigned long Mode; /* +0x0008 */ unsigned long long ReserveSize; /* +0x0010 */ unsigned long long CommitSize; /* +0x0018 */ unsigned long long FirstRegionInformationOffset; /* +0x0020 */ unsigned long long NextHeapInformationOffset; /* +0x0028 */ }; struct _RPC_SECURITY_QOS_V3_W { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ unsigned long AdditionalSecurityInfoType; /* +0x0010 */ }; struct _CMSG_ENCRYPTED_ENCODE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char ContentEncryptionAlgorithm[24]; /* +0x0008 68 14 00 00 */ void *pvEncryptionAuxInfo; /* +0x0020 */ }; struct _WIN32_FIND_DATAW { unsigned long dwFileAttributes; /* +0x0000 */ unsigned char ftCreationTime[8]; /* +0x0004 37 13 00 00 */ unsigned char ftLastAccessTime[8]; /* +0x000c 37 13 00 00 */ unsigned char ftLastWriteTime[8]; /* +0x0014 37 13 00 00 */ unsigned long nFileSizeHigh; /* +0x001c */ unsigned long nFileSizeLow; /* +0x0020 */ unsigned long dwReserved0; /* +0x0024 */ unsigned long dwReserved1; /* +0x0028 */ unsigned char cFileName[520]; /* +0x002c 00 16 00 00 */ unsigned char cAlternateFileName[28]; /* +0x0234 68 1f 00 00 */ }; struct _BCRYPT_OID_LIST { unsigned long dwOIDCount; /* +0x0000 */ unsigned char pOIDs[8]; /* +0x0008 70 1f 00 00 */ }; struct _KLDR_DATA_TABLE_ENTRY { unsigned char InLoadOrderLinks[16]; /* +0x0000 73 1f 00 00 */ void *ExceptionTable; /* +0x0010 */ unsigned long ExceptionTableSize; /* +0x0018 */ void *GpValue; /* +0x0020 */ unsigned char NonPagedDebugInfo[8]; /* +0x0028 75 1f 00 00 */ void *DllBase; /* +0x0030 */ void *EntryPoint; /* +0x0038 */ unsigned long SizeOfImage; /* +0x0040 */ unsigned char FullDllName[16]; /* +0x0048 e3 12 00 00 */ unsigned char BaseDllName[16]; /* +0x0058 e3 12 00 00 */ unsigned long Flags; /* +0x0068 */ unsigned short LoadCount; /* +0x006c */ unsigned short __Unused5; /* +0x006e */ void *SectionPointer; /* +0x0070 */ unsigned long CheckSum; /* +0x0078 */ unsigned long CoverageSectionSize; /* +0x007c */ void *CoverageSection; /* +0x0080 */ void *LoadedImports; /* +0x0088 */ void *PatchInformation; /* +0x0090 */ unsigned long SizeOfImageNotRounded; /* +0x0098 */ unsigned long TimeDateStamp; /* +0x009c */ }; struct _WNF_STATE_NAME { unsigned char Data[8]; /* +0x0000 14 16 00 00 */ }; struct _RTL_VERIFIER_DLL_DESCRIPTOR { unsigned char DllName[8]; /* +0x0000 71 06 00 00 */ unsigned long DllFlags; /* +0x0008 */ void *DllAddress; /* +0x0010 */ unsigned char DllThunks[8]; /* +0x0018 7b 1f 00 00 */ }; struct _GRADIENT_TRIANGLE { unsigned long Vertex1; /* +0x0000 */ unsigned long Vertex2; /* +0x0004 */ unsigned long Vertex3; /* +0x0008 */ }; struct _MODEMSETTINGS { unsigned long dwActualSize; /* +0x0000 */ unsigned long dwRequiredSize; /* +0x0004 */ unsigned long dwDevSpecificOffset; /* +0x0008 */ unsigned long dwDevSpecificSize; /* +0x000c */ unsigned long dwCallSetupFailTimer; /* +0x0010 */ unsigned long dwInactivityTimeout; /* +0x0014 */ unsigned long dwSpeakerVolume; /* +0x0018 */ unsigned long dwSpeakerMode; /* +0x001c */ unsigned long dwPreferredModemOptions; /* +0x0020 */ unsigned long dwNegotiatedModemOptions; /* +0x0024 */ unsigned long dwNegotiatedDCERate; /* +0x0028 */ unsigned char abVariablePortion[4]; /* +0x002c ff 12 00 00 */ }; struct _IO_ERROR_LOG_MESSAGE { unsigned short Type; /* +0x0000 */ unsigned short Size; /* +0x0002 */ unsigned short DriverNameLength; /* +0x0004 */ unsigned char TimeStamp[8]; /* +0x0008 43 13 00 00 */ unsigned long DriverNameOffset; /* +0x0010 */ unsigned char EntryData[48]; /* +0x0018 84 1f 00 00 */ }; struct _CM_RESOURCE_LIST { unsigned long Count; /* +0x0000 */ unsigned char List[36]; /* +0x0004 8a 1f 00 00 */ }; struct _PLUGPLAY_CONTROL_INTERFACE_LIST_DATA { unsigned char DeviceInstance[16]; /* +0x0000 e3 12 00 00 */ unsigned char InterfaceGuid[8]; /* +0x0010 61 16 00 00 */ unsigned char InterfaceList[8]; /* +0x0018 71 06 00 00 */ unsigned long InterfaceListSize; /* +0x0020 */ unsigned long Flags; /* +0x0024 */ }; struct _OCSP_BASIC_REVOKED_INFO { unsigned char RevocationDate[8]; /* +0x0000 37 13 00 00 */ unsigned long dwCrlReasonCode; /* +0x0008 */ }; struct _REMOTE_REPLY_SCM_INFO { unsigned long long Oxid; /* +0x0000 */ unsigned char pdsaOxidBindings[8]; /* +0x0008 94 1f 00 00 */ unsigned char ipidRemUnknown[16]; /* +0x0010 f3 14 00 00 */ unsigned long authnHint; /* +0x0020 */ unsigned char serverVersion[4]; /* +0x0024 95 1f 00 00 */ }; struct _LOOKUP_STREAM_FROM_CLUSTER_OUTPUT { unsigned long Offset; /* +0x0000 */ unsigned long NumberOfMatches; /* +0x0004 */ unsigned long BufferSizeRequired; /* +0x0008 */ }; struct _CACHE_RELATIONSHIP { unsigned char Level; /* +0x0000 */ unsigned char Associativity; /* +0x0001 */ unsigned short LineSize; /* +0x0002 */ unsigned long CacheSize; /* +0x0004 */ unsigned char Type[4]; /* +0x0008 9e 1f 00 00 */ unsigned char Reserved[20]; /* +0x000c 97 16 00 00 */ unsigned char GroupMask[16]; /* +0x0020 3c 1a 00 00 */ }; struct _NDR_CS_SIZE_CONVERT_ROUTINES { unsigned char pfnNetSize[8]; /* +0x0000 bb 1f 00 00 */ unsigned char pfnToNetCs[8]; /* +0x0008 be 1f 00 00 */ unsigned char pfnLocalSize[8]; /* +0x0010 bb 1f 00 00 */ unsigned char pfnFromNetCs[8]; /* +0x0018 c1 1f 00 00 */ }; struct _CERT_REVOCATION_PARA { unsigned long cbSize; /* +0x0000 */ unsigned char pIssuerCert[8]; /* +0x0008 c4 13 00 00 */ unsigned long cCertStore; /* +0x0010 */ unsigned char rgCertStore[8]; /* +0x0018 55 13 00 00 */ void *hCrlStore; /* +0x0020 */ unsigned char pftTimeToUse[8]; /* +0x0028 87 17 00 00 */ }; struct _CRYPT_DES_KEY_STATE { unsigned char Key[8]; /* +0x0000 91 19 00 00 */ unsigned char IV[8]; /* +0x0008 91 19 00 00 */ unsigned char Feedback[8]; /* +0x0010 91 19 00 00 */ }; struct _CMSG_CTRL_DECRYPT_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned long long hNCryptKey; /* +0x0008 */ unsigned long dwKeySpec; /* +0x0010 */ unsigned long dwRecipientIndex; /* +0x0014 */ }; struct _IMAGE_ROM_HEADERS { unsigned char FileHeader[20]; /* +0x0000 bc 18 00 00 */ unsigned char OptionalHeader[56]; /* +0x0014 cc 1f 00 00 */ }; struct _LDR_ENUM_RESOURCE_ENTRY:: { unsigned long long NameOrId; /* +0x0000 */ /* unsigned char Name[0]; +0x0000 d4 1f 00 00 */ unsigned short Id; /* +0x0000 */ unsigned short NameIsPresent; /* +0x0002 */ }; struct tagSCROLLBARINFO { unsigned long cbSize; /* +0x0000 */ unsigned char rcScrollBar[16]; /* +0x0004 7a 14 00 00 */ unsigned char dxyLineButton[4]; /* +0x0014 74 00 00 00 */ unsigned char xyThumbTop[4]; /* +0x0018 74 00 00 00 */ unsigned char xyThumbBottom[4]; /* +0x001c 74 00 00 00 */ unsigned char reserved[4]; /* +0x0020 74 00 00 00 */ unsigned char rgstate[24]; /* +0x0024 d7 1f 00 00 */ }; struct _KNONVOLATILE_CONTEXT_POINTERS { /* unsigned char FloatingContext[0]; +0x0000 db 1f 00 00 */ unsigned char Xmm0[8]; /* +0x0000 da 1f 00 00 */ unsigned char Xmm1[8]; /* +0x0008 da 1f 00 00 */ unsigned char Xmm2[8]; /* +0x0010 da 1f 00 00 */ unsigned char Xmm3[8]; /* +0x0018 da 1f 00 00 */ unsigned char Xmm4[8]; /* +0x0020 da 1f 00 00 */ unsigned char Xmm5[8]; /* +0x0028 da 1f 00 00 */ unsigned char Xmm6[8]; /* +0x0030 da 1f 00 00 */ unsigned char Xmm7[8]; /* +0x0038 da 1f 00 00 */ unsigned char Xmm8[8]; /* +0x0040 da 1f 00 00 */ unsigned char Xmm9[8]; /* +0x0048 da 1f 00 00 */ unsigned char Xmm10[8]; /* +0x0050 da 1f 00 00 */ unsigned char Xmm11[8]; /* +0x0058 da 1f 00 00 */ unsigned char Xmm12[8]; /* +0x0060 da 1f 00 00 */ unsigned char Xmm13[8]; /* +0x0068 da 1f 00 00 */ unsigned char Xmm14[8]; /* +0x0070 da 1f 00 00 */ unsigned char Xmm15[8]; /* +0x0078 da 1f 00 00 */ /* unsigned char IntegerContext[0]; +0x0080 dc 1f 00 00 */ unsigned long long *Rax; /* +0x0080 */ unsigned long long *Rcx; /* +0x0088 */ unsigned long long *Rdx; /* +0x0090 */ unsigned long long *Rbx; /* +0x0098 */ unsigned long long *Rsp; /* +0x00a0 */ unsigned long long *Rbp; /* +0x00a8 */ unsigned long long *Rsi; /* +0x00b0 */ unsigned long long *Rdi; /* +0x00b8 */ unsigned long long *R8; /* +0x00c0 */ unsigned long long *R9; /* +0x00c8 */ unsigned long long *R10; /* +0x00d0 */ unsigned long long *R11; /* +0x00d8 */ unsigned long long *R12; /* +0x00e0 */ unsigned long long *R13; /* +0x00e8 */ unsigned long long *R14; /* +0x00f0 */ unsigned long long *R15; /* +0x00f8 */ }; struct _IMAGE_DEBUG_DIRECTORY { unsigned long Characteristics; /* +0x0000 */ unsigned long TimeDateStamp; /* +0x0004 */ unsigned short MajorVersion; /* +0x0008 */ unsigned short MinorVersion; /* +0x000a */ unsigned long Type; /* +0x000c */ unsigned long SizeOfData; /* +0x0010 */ unsigned long AddressOfRawData; /* +0x0014 */ unsigned long PointerToRawData; /* +0x0018 */ }; struct _SYSTEM_PROCESSOR_MICROCODE_UPDATE_INFORMATION { unsigned long Operation; /* +0x0000 */ }; struct _RPC_BINDING_HANDLE_TEMPLATE_V1_A { unsigned long Version; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long ProtocolSequence; /* +0x0008 */ unsigned char *NetworkAddress; /* +0x0010 */ unsigned char *StringEndpoint; /* +0x0018 */ }; struct _RPC_BINDING_HANDLE_TEMPLATE_V1_A:: { unsigned char *Reserved; /* +0x0000 */ }; struct _CRYPT_ATTRIBUTE_TYPE_VALUE { char *pszObjId; /* +0x0000 */ unsigned char Value[16]; /* +0x0008 08 13 00 00 */ }; struct _TOKEN_USER { unsigned char User[16]; /* +0x0000 2d 17 00 00 */ }; struct _MUILANGCFGLIST { unsigned char TotalSize[4]; /* +0x0000 75 00 00 00 */ unsigned short NumLanguages; /* +0x0004 */ unsigned short MaxNumLanguages; /* +0x0006 */ unsigned char LanguageConfigs[8]; /* +0x0008 f9 1f 00 00 */ }; struct _CMSG_RECIPIENT_ENCODE_INFO { unsigned long dwRecipientChoice; /* +0x0000 */ /* unsigned char pKeyTrans[0]; +0x0008 03 20 00 00 */ /* unsigned char pKeyAgree[0]; +0x0008 35 13 00 00 */ unsigned char pMailList[8]; /* +0x0008 05 20 00 00 */ }; struct tagEMRANGLEARC { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char ptlCenter[8]; /* +0x0008 a6 13 00 00 */ unsigned long nRadius; /* +0x0010 */ unsigned char eStartAngle[4]; /* +0x0014 40 00 00 00 */ unsigned char eSweepAngle[4]; /* +0x0018 40 00 00 00 */ }; struct _CRYPT_TIMESTAMP_ACCURACY { unsigned long dwSeconds; /* +0x0000 */ unsigned long dwMillis; /* +0x0004 */ unsigned long dwMicros; /* +0x0008 */ }; struct _VM_COUNTERS { unsigned long long PeakVirtualSize; /* +0x0000 */ unsigned long long VirtualSize; /* +0x0008 */ unsigned long PageFaultCount; /* +0x0010 */ unsigned long long PeakWorkingSetSize; /* +0x0018 */ unsigned long long WorkingSetSize; /* +0x0020 */ unsigned long long QuotaPeakPagedPoolUsage; /* +0x0028 */ unsigned long long QuotaPagedPoolUsage; /* +0x0030 */ unsigned long long QuotaPeakNonPagedPoolUsage; /* +0x0038 */ unsigned long long QuotaNonPagedPoolUsage; /* +0x0040 */ unsigned long long PagefileUsage; /* +0x0048 */ unsigned long long PeakPagefileUsage; /* +0x0050 */ }; struct _SL_KMEM_CACHE { unsigned long TotalSize; /* +0x0000 */ unsigned long SizeOfData; /* +0x0004 */ unsigned long SignatureSize; /* +0x0008 */ unsigned long Flags; /* +0x000c */ unsigned long Version; /* +0x0010 */ unsigned char Descriptors[20]; /* +0x0014 25 20 00 00 */ }; struct tagEMRSETARCDIRECTION { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned long iArcDirection; /* +0x0008 */ }; struct tagOpaqueData { unsigned char guid[16]; /* +0x0000 f3 14 00 00 */ unsigned long dataLength; /* +0x0010 */ unsigned long reserved1; /* +0x0014 */ unsigned long reserved2; /* +0x0018 */ unsigned char *data; /* +0x0020 */ }; struct _FILE_PIPE_EVENT_BUFFER { unsigned long NamedPipeState; /* +0x0000 */ unsigned long EntryType; /* +0x0004 */ unsigned long ByteCount; /* +0x0008 */ unsigned long KeyValue; /* +0x000c */ unsigned long NumberRequests; /* +0x0010 */ }; struct _SECTION_IMAGE_INFORMATION32 { unsigned long TransferAddress; /* +0x0000 */ unsigned long ZeroBits; /* +0x0004 */ unsigned long MaximumStackSize; /* +0x0008 */ unsigned long CommittedStackSize; /* +0x000c */ unsigned long SubSystemType; /* +0x0010 */ unsigned short SubSystemMinorVersion; /* +0x0014 */ unsigned short SubSystemMajorVersion; /* +0x0016 */ unsigned long SubSystemVersion; /* +0x0014 */ unsigned long GpValue; /* +0x0018 */ unsigned short ImageCharacteristics; /* +0x001c */ unsigned short DllCharacteristics; /* +0x001e */ unsigned short Machine; /* +0x0020 */ unsigned char ImageContainsCode; /* +0x0022 */ unsigned char ImageFlags; /* +0x0023 */ /* unsigned char ComPlus[0]; +0x0023 a2 1e 00 00 */ /* unsigned char ImageDynamicallyRelocated[0]; +0x0023 a3 1e 00 00 */ unsigned char Reserved[1]; /* +0x0023 3a 20 00 00 */ unsigned long LoaderFlags; /* +0x0024 */ unsigned long ImageFileSize; /* +0x0028 */ unsigned long CheckSum; /* +0x002c */ }; struct _RTL_RB_TREE { unsigned char Root[8]; /* +0x0000 40 20 00 00 */ unsigned char Min[8]; /* +0x0008 40 20 00 00 */ }; struct _CONNECTDLGSTRUCTA { unsigned long cbStructure; /* +0x0000 */ unsigned char hwndOwner[8]; /* +0x0008 f7 12 00 00 */ unsigned char lpConnRes[8]; /* +0x0010 2e 1e 00 00 */ unsigned long dwFlags; /* +0x0018 */ unsigned long dwDevNum; /* +0x001c */ }; struct _CTL_ENTRY { unsigned char SubjectIdentifier[16]; /* +0x0000 08 13 00 00 */ unsigned long cAttribute; /* +0x0010 */ unsigned char rgAttribute[8]; /* +0x0018 e3 13 00 00 */ }; struct _POWER_USER_PRESENCE { unsigned char UserPresence[4]; /* +0x0000 60 20 00 00 */ }; struct _TOKEN_SECURITY_ATTRIBUTE_FQBN_VALUE { unsigned long long Version; /* +0x0000 */ unsigned char Name[16]; /* +0x0008 e3 12 00 00 */ }; struct _THREAD_TLS_INFORMATION { unsigned long Flags; /* +0x0000 */ void *NewTlsData; /* +0x0008 */ void *OldTlsData; /* +0x0008 */ void *ThreadId; /* +0x0010 */ }; struct _CERT_REQUEST_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char Subject[16]; /* +0x0008 08 13 00 00 */ unsigned char SubjectPublicKeyInfo[48]; /* +0x0018 6b 20 00 00 */ unsigned long cAttribute; /* +0x0048 */ unsigned char rgAttribute[8]; /* +0x0050 e3 13 00 00 */ }; struct _PRIV_RESOLVER_INFO { unsigned long long OxidServer; /* +0x0000 */ unsigned char pServerORBindings[8]; /* +0x0008 94 1f 00 00 */ unsigned char OxidInfo[48]; /* +0x0010 6e 20 00 00 */ unsigned long long LocalMidOfRemote; /* +0x0040 */ unsigned long DllServerModel; /* +0x0048 */ unsigned char pwszDllServer[8]; /* +0x0050 71 06 00 00 */ unsigned char FoundInROT[8]; /* +0x0058 74 00 00 00 */ }; struct _RTL_VERIFIER_PAGEHEAP_INFORMATION { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long HeapFlags; /* +0x0008 */ unsigned long ExtraFlags; /* +0x000c */ unsigned long long HeapHandle; /* +0x0010 */ }; struct _THREAD_LAST_SYSCALL_INFORMATION { void *FirstArgument; /* +0x0000 */ unsigned short SystemCallNumber; /* +0x0008 */ }; struct _RTL_PROCESS_LOCK_INFORMATION { void *Address; /* +0x0000 */ unsigned short Type; /* +0x0008 */ unsigned short CreatorBackTraceIndex; /* +0x000a */ void *OwningThread; /* +0x0010 */ long LockCount; /* +0x0018 */ unsigned long ContentionCount; /* +0x001c */ unsigned long EntryCount; /* +0x0020 */ long RecursionCount; /* +0x0024 */ unsigned long NumberOfWaitingShared; /* +0x0028 */ unsigned long NumberOfWaitingExclusive; /* +0x002c */ }; struct _EXCEPTION_DEBUG_INFO { unsigned char ExceptionRecord[152]; /* +0x0000 80 20 00 00 */ unsigned long dwFirstChance; /* +0x0098 */ }; struct _CERT_POLICIES_INFO { unsigned long cPolicyInfo; /* +0x0000 */ unsigned char rgPolicyInfo[8]; /* +0x0008 84 20 00 00 */ }; struct _CMSG_CTRL_KEY_TRANS_DECRYPT_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned long long hNCryptKey; /* +0x0008 */ unsigned long dwKeySpec; /* +0x0010 */ unsigned char pKeyTrans[8]; /* +0x0018 88 20 00 00 */ unsigned long dwRecipientIndex; /* +0x0020 */ }; struct tagNEWTEXTMETRICEXA { unsigned char ntmTm[72]; /* +0x0000 8b 20 00 00 */ unsigned char ntmFontSig[24]; /* +0x0048 8c 20 00 00 */ }; struct _FP_64 { unsigned char W[8]; /* +0x0000 14 16 00 00 */ }; struct _REPARSE_POINT_INFORMATION { unsigned short ReparseDataLength; /* +0x0000 */ unsigned short UnparsedNameLength; /* +0x0002 */ }; struct _SL_KMEM_CACHE_VALUE_DESCRIPTOR { unsigned short Size; /* +0x0000 */ unsigned short NameLength; /* +0x0002 */ unsigned short Type; /* +0x0004 */ unsigned short DataLength; /* +0x0006 */ unsigned long Attributes; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ unsigned char Name[4]; /* +0x0010 0a 14 00 00 */ }; struct _SECTIONBASICINFO { void *BaseAddress; /* +0x0000 */ unsigned long AllocationAttributes; /* +0x0008 */ unsigned char MaximumSize[8]; /* +0x0010 43 13 00 00 */ }; struct _TRANSACTION_LIST_ENTRY { unsigned char UOW[16]; /* +0x0000 f3 14 00 00 */ }; struct _THREAD_PERFORMANCE_DATA { unsigned short Size; /* +0x0000 */ unsigned short Version; /* +0x0002 */ unsigned char ProcessorNumber[4]; /* +0x0004 b3 20 00 00 */ unsigned long ContextSwitches; /* +0x0008 */ unsigned long HwCountersCount; /* +0x000c */ unsigned char UpdateCount[8]; /* +0x0010 d8 17 00 00 */ unsigned long long WaitReasonBitMap; /* +0x0018 */ unsigned long long HardwareCounters; /* +0x0020 */ unsigned char CycleTime[24]; /* +0x0028 b4 20 00 00 */ unsigned char HwCounters[384]; /* +0x0040 b5 20 00 00 */ }; struct _FILESYSTEM_STATISTICS { unsigned short FileSystemType; /* +0x0000 */ unsigned short Version; /* +0x0002 */ unsigned long SizeOfCompleteStructure; /* +0x0004 */ unsigned long UserFileReads; /* +0x0008 */ unsigned long UserFileReadBytes; /* +0x000c */ unsigned long UserDiskReads; /* +0x0010 */ unsigned long UserFileWrites; /* +0x0014 */ unsigned long UserFileWriteBytes; /* +0x0018 */ unsigned long UserDiskWrites; /* +0x001c */ unsigned long MetaDataReads; /* +0x0020 */ unsigned long MetaDataReadBytes; /* +0x0024 */ unsigned long MetaDataDiskReads; /* +0x0028 */ unsigned long MetaDataWrites; /* +0x002c */ unsigned long MetaDataWriteBytes; /* +0x0030 */ unsigned long MetaDataDiskWrites; /* +0x0034 */ }; struct tagACCEL { unsigned char fVirt; /* +0x0000 */ unsigned short key; /* +0x0002 */ unsigned short cmd; /* +0x0004 */ }; struct _CERT_PHYSICAL_STORE_INFO { unsigned long cbSize; /* +0x0000 */ char *pszOpenStoreProvider; /* +0x0008 */ unsigned long dwOpenEncodingType; /* +0x0010 */ unsigned long dwOpenFlags; /* +0x0014 */ unsigned char OpenParameters[16]; /* +0x0018 08 13 00 00 */ unsigned long dwFlags; /* +0x0028 */ unsigned long dwPriority; /* +0x002c */ }; struct _MEMORY_WORKING_SET_EX_BLOCK { /* unsigned char Valid[0]; +0x0000 1d 13 00 00 */ /* unsigned char ShareCount[0]; +0x0000 c1 20 00 00 */ /* unsigned char Win32Protection[0]; +0x0000 c2 20 00 00 */ /* unsigned char Shared[0]; +0x0000 c3 20 00 00 */ /* unsigned char Node[0]; +0x0000 c4 20 00 00 */ /* unsigned char Locked[0]; +0x0000 c5 20 00 00 */ /* unsigned char LargePage[0]; +0x0000 c6 20 00 00 */ /* unsigned char Priority[0]; +0x0000 c7 20 00 00 */ /* unsigned char Reserved[0]; +0x0000 c8 20 00 00 */ /* unsigned char Bad[0]; +0x0000 c9 20 00 00 */ /* unsigned char ReservedUlong[0]; +0x0000 ca 20 00 00 */ unsigned char Invalid[8]; /* +0x0000 cb 20 00 00 */ }; struct tagLOGFONTW { long lfHeight; /* +0x0000 */ long lfWidth; /* +0x0004 */ long lfEscapement; /* +0x0008 */ long lfOrientation; /* +0x000c */ long lfWeight; /* +0x0010 */ unsigned char lfItalic; /* +0x0014 */ unsigned char lfUnderline; /* +0x0015 */ unsigned char lfStrikeOut; /* +0x0016 */ unsigned char lfCharSet; /* +0x0017 */ unsigned char lfOutPrecision; /* +0x0018 */ unsigned char lfClipPrecision; /* +0x0019 */ unsigned char lfQuality; /* +0x001a */ unsigned char lfPitchAndFamily; /* +0x001b */ unsigned char lfFaceName[64]; /* +0x001c bf 15 00 00 */ }; struct tagEMRARC { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char rclBox[16]; /* +0x0008 db 12 00 00 */ unsigned char ptlStart[8]; /* +0x0018 a6 13 00 00 */ unsigned char ptlEnd[8]; /* +0x0020 a6 13 00 00 */ }; struct tagCOPYDATASTRUCT { unsigned long long dwData; /* +0x0000 */ unsigned long cbData; /* +0x0008 */ void *lpData; /* +0x0010 */ }; struct tagMINIMIZEDMETRICS { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char iWidth[4]; /* +0x0004 74 00 00 00 */ unsigned char iHorzGap[4]; /* +0x0008 74 00 00 00 */ unsigned char iVertGap[4]; /* +0x000c 74 00 00 00 */ unsigned char iArrange[4]; /* +0x0010 74 00 00 00 */ }; struct tagINPUT_MESSAGE_SOURCE { unsigned char deviceType[4]; /* +0x0000 d8 20 00 00 */ unsigned char originId[4]; /* +0x0004 d9 20 00 00 */ }; struct _CERT_KEYGEN_REQUEST_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char SubjectPublicKeyInfo[48]; /* +0x0008 6b 20 00 00 */ unsigned char pwszChallengeString[8]; /* +0x0038 71 06 00 00 */ }; struct _SCOPE_TABLE { unsigned long Count; /* +0x0000 */ }; struct _SCOPE_TABLE:: { unsigned long BeginAddress; /* +0x0000 */ unsigned long EndAddress; /* +0x0004 */ unsigned long HandlerAddress; /* +0x0008 */ unsigned long JumpTarget; /* +0x000c */ }; struct _IMAGE_ALPHA_RUNTIME_FUNCTION_ENTRY { unsigned long BeginAddress; /* +0x0000 */ unsigned long EndAddress; /* +0x0004 */ unsigned long ExceptionHandler; /* +0x0008 */ unsigned long HandlerData; /* +0x000c */ unsigned long PrologEndAddress; /* +0x0010 */ }; struct _SYSTEM_BASIC_PERFORMANCE_INFORMATION { unsigned long long AvailablePages; /* +0x0000 */ unsigned long long CommittedPages; /* +0x0008 */ unsigned long long CommitLimit; /* +0x0010 */ unsigned long long PeakCommitment; /* +0x0018 */ }; struct _EISA_IRQ_CONFIGURATION { unsigned char ConfigurationByte[1]; /* +0x0000 12 21 00 00 */ unsigned char Reserved; /* +0x0001 */ }; struct _RESOURCEMANAGER_BASIC_INFORMATION { unsigned char ResourceManagerId[16]; /* +0x0000 f3 14 00 00 */ unsigned long DescriptionLength; /* +0x0010 */ unsigned char Description[4]; /* +0x0014 0a 14 00 00 */ }; struct tagHELPWININFOA { unsigned char wStructSize[4]; /* +0x0000 74 00 00 00 */ unsigned char x[4]; /* +0x0004 74 00 00 00 */ unsigned char y[4]; /* +0x0008 74 00 00 00 */ unsigned char dx[4]; /* +0x000c 74 00 00 00 */ unsigned char dy[4]; /* +0x0010 74 00 00 00 */ unsigned char wMax[4]; /* +0x0014 74 00 00 00 */ unsigned char rgchMember[4]; /* +0x0018 17 21 00 00 */ }; struct _TRIPLE_LIST { /* unsigned char ControlBits[0]; +0x0000 1a 21 00 00 */ unsigned char CombinedControlBits[8]; /* +0x0000 d7 17 00 00 */ unsigned char Head[32]; /* +0x0008 5a 17 00 00 */ unsigned char Tail[24]; /* +0x0028 1b 21 00 00 */ unsigned char RemoveCallback[8]; /* +0x0040 45 20 00 00 */ void *RemoveContext; /* +0x0048 */ unsigned char PendingHead[8]; /* +0x0050 5b 17 00 00 */ unsigned char PendingTailPtr[8]; /* +0x0058 1c 21 00 00 */ unsigned long PendingListIndex; /* +0x0060 */ }; struct _TRIPLE_LIST:::: { /* unsigned char SwitchSelectorBit0[0]; +0x0000 d0 17 00 00 */ /* unsigned char ActiveListBit0[0]; +0x0000 d1 17 00 00 */ /* unsigned char OverflowActiveListBit0[0]; +0x0000 d2 17 00 00 */ /* unsigned char SwitchSelectorBit1[0]; +0x0000 d3 17 00 00 */ /* unsigned char ActiveListBit1[0]; +0x0000 d4 17 00 00 */ /* unsigned char OverflowActiveListBit1[0]; +0x0000 d5 17 00 00 */ /* unsigned char ReaderDidTheSwitch[0]; +0x0000 d6 17 00 00 */ /* unsigned char Reserved[0]; +0x0000 1f 21 00 00 */ /* unsigned char ReaderBusy[0]; +0x0000 20 21 00 00 */ /* unsigned char UpdateReady[0]; +0x0000 21 21 00 00 */ unsigned char OverflowUpdateReady[4]; /* +0x0000 22 21 00 00 */ }; struct _RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION { void *ReflectionProcessHandle; /* +0x0000 */ void *ReflectionThreadHandle; /* +0x0008 */ unsigned char ReflectionClientId[16]; /* +0x0010 44 13 00 00 */ }; struct _COMPATIBILITY_CONTEXT_ELEMENT { unsigned char Id[16]; /* +0x0000 f3 14 00 00 */ unsigned char Type[4]; /* +0x0010 27 21 00 00 */ }; struct _IMAGE_NT_HEADERS { unsigned long Signature; /* +0x0000 */ unsigned char FileHeader[20]; /* +0x0004 bc 18 00 00 */ unsigned char OptionalHeader[224]; /* +0x0018 1e 1d 00 00 */ }; struct tagENUMLOGFONTEXDVA { unsigned char elfEnumLogfontEx[188]; /* +0x0000 3c 21 00 00 */ unsigned char elfDesignVector[72]; /* +0x00bc 3d 21 00 00 */ }; struct _SHFILEINFOW { unsigned char hIcon[8]; /* +0x0000 43 21 00 00 */ unsigned char iIcon[4]; /* +0x0008 74 00 00 00 */ unsigned long dwAttributes; /* +0x000c */ unsigned char szDisplayName[520]; /* +0x0010 00 16 00 00 */ unsigned char szTypeName[160]; /* +0x0218 44 21 00 00 */ }; struct _SYSTEM_BOOT_GRAPHICS_INFORMATION { unsigned char FrameBuffer[8]; /* +0x0000 43 13 00 00 */ unsigned long Width; /* +0x0008 */ unsigned long Height; /* +0x000c */ unsigned long PixelStride; /* +0x0010 */ unsigned long Flags; /* +0x0014 */ unsigned char Format[8]; /* +0x0018 49 21 00 00 */ }; struct _SYSDBG_IO_SPACE { unsigned long long Address; /* +0x0000 */ void *Buffer; /* +0x0008 */ unsigned long Request; /* +0x0010 */ unsigned char InterfaceType[4]; /* +0x0014 4c 21 00 00 */ unsigned long BusNumber; /* +0x0018 */ unsigned long AddressSpace; /* +0x001c */ }; struct tagTEXTMETRICW { long tmHeight; /* +0x0000 */ long tmAscent; /* +0x0004 */ long tmDescent; /* +0x0008 */ long tmInternalLeading; /* +0x000c */ long tmExternalLeading; /* +0x0010 */ long tmAveCharWidth; /* +0x0014 */ long tmMaxCharWidth; /* +0x0018 */ long tmWeight; /* +0x001c */ long tmOverhang; /* +0x0020 */ long tmDigitizedAspectX; /* +0x0024 */ long tmDigitizedAspectY; /* +0x0028 */ unsigned char tmFirstChar[2]; /* +0x002c 71 00 00 00 */ unsigned char tmLastChar[2]; /* +0x002e 71 00 00 00 */ unsigned char tmDefaultChar[2]; /* +0x0030 71 00 00 00 */ unsigned char tmBreakChar[2]; /* +0x0032 71 00 00 00 */ unsigned char tmItalic; /* +0x0034 */ unsigned char tmUnderlined; /* +0x0035 */ unsigned char tmStruckOut; /* +0x0036 */ unsigned char tmPitchAndFamily; /* +0x0037 */ unsigned char tmCharSet; /* +0x0038 */ }; struct _SCRUB_DATA_OUTPUT { unsigned long Flags; /* +0x0000 */ unsigned long ExtentCount; /* +0x0004 */ unsigned long Status; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ unsigned char ResumeContext[816]; /* +0x0010 15 16 00 00 */ unsigned char Extents[16]; /* +0x0340 54 21 00 00 */ }; struct _OSVERSIONINFOW { unsigned long dwOSVersionInfoSize; /* +0x0000 */ unsigned long dwMajorVersion; /* +0x0004 */ unsigned long dwMinorVersion; /* +0x0008 */ unsigned long dwBuildNumber; /* +0x000c */ unsigned long dwPlatformId; /* +0x0010 */ unsigned char szCSDVersion[256]; /* +0x0014 c1 15 00 00 */ }; struct _LARGE_INTEGER { unsigned long LowPart; /* +0x0000 */ long HighPart; /* +0x0004 */ }; struct _SYSTEM_POOL_INFORMATION { unsigned long long TotalSize; /* +0x0000 */ void *FirstEntry; /* +0x0008 */ unsigned short EntryOverhead; /* +0x0010 */ unsigned char PoolTagPresent; /* +0x0012 */ unsigned char Spare0; /* +0x0013 */ unsigned long NumberOfEntries; /* +0x0014 */ unsigned char Entries[16]; /* +0x0018 63 21 00 00 */ }; struct _HEAP_SUMMARY { unsigned long cb; /* +0x0000 */ unsigned long long cbAllocated; /* +0x0008 */ unsigned long long cbCommitted; /* +0x0010 */ unsigned long long cbReserved; /* +0x0018 */ unsigned long long cbMaxReserve; /* +0x0020 */ }; struct _COMM_FAULT_OFFSETS { short CommOffset; /* +0x0000 */ short FaultOffset; /* +0x0002 */ }; struct __BCRYPT_KEY_LENGTHS_STRUCT { unsigned long dwMinLength; /* +0x0000 */ unsigned long dwMaxLength; /* +0x0004 */ unsigned long dwIncrement; /* +0x0008 */ }; struct _CRYPT_PROPERTY_REF { unsigned char pszProperty[8]; /* +0x0000 71 06 00 00 */ unsigned long cbValue; /* +0x0008 */ unsigned char *pbValue; /* +0x0010 */ }; struct _SYSTEM_PROCESS_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long NumberOfThreads; /* +0x0004 */ unsigned char WorkingSetPrivateSize[8]; /* +0x0008 43 13 00 00 */ unsigned long HardFaultCount; /* +0x0010 */ unsigned long NumberOfThreadsHighWatermark; /* +0x0014 */ unsigned long long CycleTime; /* +0x0018 */ unsigned char CreateTime[8]; /* +0x0020 43 13 00 00 */ unsigned char UserTime[8]; /* +0x0028 43 13 00 00 */ unsigned char KernelTime[8]; /* +0x0030 43 13 00 00 */ unsigned char ImageName[16]; /* +0x0038 e3 12 00 00 */ long BasePriority; /* +0x0048 */ void *UniqueProcessId; /* +0x0050 */ void *InheritedFromUniqueProcessId; /* +0x0058 */ unsigned long HandleCount; /* +0x0060 */ unsigned long SessionId; /* +0x0064 */ unsigned long long UniqueProcessKey; /* +0x0068 */ unsigned long long PeakVirtualSize; /* +0x0070 */ unsigned long long VirtualSize; /* +0x0078 */ unsigned long PageFaultCount; /* +0x0080 */ unsigned long long PeakWorkingSetSize; /* +0x0088 */ unsigned long long WorkingSetSize; /* +0x0090 */ unsigned long long QuotaPeakPagedPoolUsage; /* +0x0098 */ unsigned long long QuotaPagedPoolUsage; /* +0x00a0 */ unsigned long long QuotaPeakNonPagedPoolUsage; /* +0x00a8 */ unsigned long long QuotaNonPagedPoolUsage; /* +0x00b0 */ unsigned long long PagefileUsage; /* +0x00b8 */ unsigned long long PeakPagefileUsage; /* +0x00c0 */ unsigned long long PrivatePageCount; /* +0x00c8 */ unsigned char ReadOperationCount[8]; /* +0x00d0 43 13 00 00 */ unsigned char WriteOperationCount[8]; /* +0x00d8 43 13 00 00 */ unsigned char OtherOperationCount[8]; /* +0x00e0 43 13 00 00 */ unsigned char ReadTransferCount[8]; /* +0x00e8 43 13 00 00 */ unsigned char WriteTransferCount[8]; /* +0x00f0 43 13 00 00 */ unsigned char OtherTransferCount[8]; /* +0x00f8 43 13 00 00 */ }; struct _KEY_VALUE_ENTRY { unsigned char ValueName[8]; /* +0x0000 b6 17 00 00 */ unsigned long DataLength; /* +0x0008 */ unsigned long DataOffset; /* +0x000c */ unsigned long Type; /* +0x0010 */ }; struct _CRYPT_ENCODE_PARA { unsigned long cbSize; /* +0x0000 */ unsigned char pfnAlloc[8]; /* +0x0008 ff 16 00 00 */ unsigned char pfnFree[8]; /* +0x0010 d2 13 00 00 */ }; struct _REPAIR_COPIES_INPUT { unsigned long Flags; /* +0x0000 */ unsigned char FileOffset[8]; /* +0x0008 43 13 00 00 */ unsigned long Length; /* +0x0010 */ unsigned long SourceCopy; /* +0x0014 */ unsigned long NumberOfRepairCopies; /* +0x0018 */ unsigned char RepairCopies[4]; /* +0x001c fc 12 00 00 */ }; struct _PEBS_DS_SAVE_AREA { unsigned long long BtsBufferBase; /* +0x0000 */ unsigned long long BtsIndex; /* +0x0008 */ unsigned long long BtsAbsoluteMaximum; /* +0x0010 */ unsigned long long BtsInterruptThreshold; /* +0x0018 */ unsigned long long PebsBufferBase; /* +0x0020 */ unsigned long long PebsIndex; /* +0x0028 */ unsigned long long PebsAbsoluteMaximum; /* +0x0030 */ unsigned long long PebsInterruptThreshold; /* +0x0038 */ unsigned long long PebsCounterReset0; /* +0x0040 */ unsigned long long PebsCounterReset1; /* +0x0048 */ unsigned long long PebsCounterReset2; /* +0x0050 */ unsigned long long PebsCounterReset3; /* +0x0058 */ }; struct _CERT_TEMPLATE_EXT { char *pszObjId; /* +0x0000 */ unsigned long dwMajorVersion; /* +0x0008 */ unsigned char fMinorVersion[4]; /* +0x000c 74 00 00 00 */ unsigned long dwMinorVersion; /* +0x0010 */ }; struct _EFI_DRIVER_ENTRY { unsigned long Version; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned long Id; /* +0x0008 */ unsigned long FriendlyNameOffset; /* +0x000c */ unsigned long DriverFilePathOffset; /* +0x0010 */ }; struct _RTL_AVL_TABLE { unsigned char BalancedRoot[32]; /* +0x0000 0b 1c 00 00 */ void *OrderedPointer; /* +0x0020 */ unsigned long WhichOrderedElement; /* +0x0028 */ unsigned long NumberGenericTableElements; /* +0x002c */ unsigned long DepthOfTree; /* +0x0030 */ unsigned char RestartKey[8]; /* +0x0038 99 21 00 00 */ unsigned long DeleteCount; /* +0x0040 */ unsigned char CompareRoutine[8]; /* +0x0048 9c 21 00 00 */ unsigned char AllocateRoutine[8]; /* +0x0050 ce 1b 00 00 */ unsigned char FreeRoutine[8]; /* +0x0058 9f 21 00 00 */ void *TableContext; /* +0x0060 */ }; struct tagTITLEBARINFO { unsigned long cbSize; /* +0x0000 */ unsigned char rcTitleBar[16]; /* +0x0004 7a 14 00 00 */ unsigned char rgstate[24]; /* +0x0014 d7 1f 00 00 */ }; struct _RPC_IF_ID { unsigned char Uuid[16]; /* +0x0000 f3 14 00 00 */ unsigned short VersMajor; /* +0x0010 */ unsigned short VersMinor; /* +0x0012 */ }; struct _PLUGPLAY_CONTROL_CONFLICT_ENTRY { unsigned long DeviceInstance; /* +0x0000 */ unsigned long DeviceFlags; /* +0x0004 */ unsigned long ResourceType; /* +0x0008 */ unsigned long long ResourceStart; /* +0x0010 */ unsigned long long ResourceEnd; /* +0x0018 */ unsigned long ResourceFlags; /* +0x0020 */ }; struct _FILE_NETWORK_OPEN_INFORMATION { unsigned char CreationTime[8]; /* +0x0000 43 13 00 00 */ unsigned char LastAccessTime[8]; /* +0x0008 43 13 00 00 */ unsigned char LastWriteTime[8]; /* +0x0010 43 13 00 00 */ unsigned char ChangeTime[8]; /* +0x0018 43 13 00 00 */ unsigned char AllocationSize[8]; /* +0x0020 43 13 00 00 */ unsigned char EndOfFile[8]; /* +0x0028 43 13 00 00 */ unsigned long FileAttributes; /* +0x0030 */ }; struct _PO_WAKE_SOURCE_INFO { unsigned long Count; /* +0x0000 */ unsigned char Offsets[4]; /* +0x0004 fc 12 00 00 */ }; struct _userHMETAFILE { long fContext; /* +0x0000 */ }; struct _APPCATEGORYINFOLIST { unsigned long cCategory; /* +0x0000 */ unsigned char pCategoryInfo[8]; /* +0x0008 bf 21 00 00 */ }; struct _RTL_DEBUG_INFORMATION32 { unsigned long SectionHandleClient; /* +0x0000 */ unsigned long ViewBaseClient; /* +0x0004 */ unsigned long ViewBaseTarget; /* +0x0008 */ unsigned long ViewBaseDelta; /* +0x000c */ unsigned long EventPairClient; /* +0x0010 */ unsigned long EventPairTarget; /* +0x0014 */ unsigned long TargetProcessId; /* +0x0018 */ unsigned long TargetThreadHandle; /* +0x001c */ unsigned long Flags; /* +0x0020 */ unsigned long OffsetFree; /* +0x0024 */ unsigned long CommitSize; /* +0x0028 */ unsigned long ViewSize; /* +0x002c */ unsigned long Modules; /* +0x0030 */ unsigned long ModulesEx; /* +0x0030 */ unsigned long BackTraces; /* +0x0034 */ unsigned long Heaps; /* +0x0038 */ unsigned long Locks; /* +0x003c */ unsigned long SpecificHeap; /* +0x0040 */ unsigned long TargetProcessHandle; /* +0x0044 */ unsigned long VerifierOptions; /* +0x0048 */ unsigned long ProcessHeap; /* +0x004c */ unsigned long CriticalSectionHandle; /* +0x0050 */ unsigned long CriticalSectionOwnerThread; /* +0x0054 */ unsigned char Reserved[16]; /* +0x0058 66 1a 00 00 */ }; struct tagAXISINFOW { long axMinValue; /* +0x0000 */ long axMaxValue; /* +0x0004 */ unsigned char axAxisName[32]; /* +0x0008 c7 21 00 00 */ }; struct tagRemFORMATETC { unsigned long cfFormat; /* +0x0000 */ unsigned long ptd; /* +0x0004 */ unsigned long dwAspect; /* +0x0008 */ long lindex; /* +0x000c */ unsigned long tymed; /* +0x0010 */ }; struct _TP_DIRECT { unsigned char Task[32]; /* +0x0000 ce 21 00 00 */ unsigned long long Lock; /* +0x0020 */ unsigned char IoCompletionInformationList[16]; /* +0x0028 73 1f 00 00 */ unsigned char Callback[8]; /* +0x0038 d3 21 00 00 */ unsigned long NumaNode; /* +0x0040 */ unsigned char IdealProcessor; /* +0x0044 */ }; struct _RTL_CRITICAL_SECTION64 { unsigned long long DebugInfo; /* +0x0000 */ long LockCount; /* +0x0008 */ long RecursionCount; /* +0x000c */ unsigned long long OwningThread; /* +0x0010 */ unsigned long long LockSemaphore; /* +0x0018 */ unsigned long long SpinCount; /* +0x0020 */ }; struct tagENUMLOGFONTA { unsigned char elfLogFont[60]; /* +0x0000 dc 16 00 00 */ unsigned char elfFullName[64]; /* +0x003c 19 13 00 00 */ unsigned char elfStyle[32]; /* +0x007c f7 17 00 00 */ }; struct tagMOUSEHOOKSTRUCT { unsigned char pt[8]; /* +0x0000 a1 14 00 00 */ unsigned char hwnd[8]; /* +0x0008 f7 12 00 00 */ unsigned char wHitTestCode[8]; /* +0x0010 75 00 00 00 */ unsigned long long dwExtraInfo; /* +0x0018 */ }; struct _REMOTE_REQUEST_SCM_INFO { unsigned long ClientImpLevel; /* +0x0000 */ unsigned short cRequestedProtseqs; /* +0x0004 */ unsigned short *pRequestedProtseqs; /* +0x0008 */ }; struct _PO_WAKE_SOURCE_FIXED { unsigned char Header[8]; /* +0x0000 1d 18 00 00 */ unsigned char FixedWakeSourceType[4]; /* +0x0008 46 16 00 00 */ }; struct _SYSTEM_PREFETCH_STATS { unsigned long DemandFilePageCount; /* +0x0000 */ unsigned long DemandFileIOCount; /* +0x0004 */ unsigned long TrickleFilePageCount; /* +0x0008 */ unsigned long TrickleFileIOCount; /* +0x000c */ unsigned long DemandPrivatePageCount; /* +0x0010 */ unsigned long DemandPrivateIOCount; /* +0x0014 */ unsigned long TricklePrivatePageCount; /* +0x0018 */ unsigned long TricklePrivateIOCount; /* +0x001c */ }; struct _AVRF_PROCESS_HANDLE_TRACING_QUERY_WOW64 { unsigned long long Handle; /* +0x0000 */ unsigned long TotalTraces; /* +0x0008 */ unsigned char HandleTrace[160]; /* +0x0010 f1 21 00 00 */ }; struct tagMOUSEKEYS { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned long iMaxSpeed; /* +0x0008 */ unsigned long iTimeToMaxSpeed; /* +0x000c */ unsigned long iCtrlSpeed; /* +0x0010 */ unsigned long dwReserved1; /* +0x0014 */ unsigned long dwReserved2; /* +0x0018 */ }; struct _PEB_LDR_DATA { unsigned long Length; /* +0x0000 */ unsigned char Initialized; /* +0x0004 */ void *SsHandle; /* +0x0008 */ unsigned char InLoadOrderModuleList[16]; /* +0x0010 73 1f 00 00 */ unsigned char InMemoryOrderModuleList[16]; /* +0x0020 73 1f 00 00 */ unsigned char InInitializationOrderModuleList[16]; /* +0x0030 73 1f 00 00 */ void *EntryInProgress; /* +0x0040 */ unsigned char ShutdownInProgress; /* +0x0048 */ void *ShutdownThreadId; /* +0x0050 */ }; struct _MUICCENTRY { unsigned char lCultureNameOffset[4]; /* +0x0000 75 00 00 00 */ unsigned char ulCultureID[4]; /* +0x0004 75 00 00 00 */ unsigned long ulLanguageType; /* +0x0008 */ unsigned char pNeutralCulture[8]; /* +0x0010 fb 21 00 00 */ unsigned char lBaseLanguageIndices[32]; /* +0x0018 fc 21 00 00 */ unsigned char lParentLanguageIndices[16]; /* +0x0038 fd 21 00 00 */ }; struct _RPC_POLICY { unsigned char Length[4]; /* +0x0000 75 00 00 00 */ unsigned long EndpointFlags; /* +0x0004 */ unsigned long NICFlags; /* +0x0008 */ }; struct _FILE_QUERY_SPARING_BUFFER { unsigned long SparingUnitBytes; /* +0x0000 */ unsigned char SoftwareSparing; /* +0x0004 */ unsigned long TotalSpareBlocks; /* +0x0008 */ unsigned long FreeSpareBlocks; /* +0x000c */ }; struct _SYSTEM_CONSOLE_INFORMATION { /* unsigned char DriverLoaded[0]; +0x0000 94 13 00 00 */ unsigned char Spare[4]; /* +0x0000 95 13 00 00 */ }; struct _TRIPLE_LIST_ENTRY { unsigned char Flink[24]; /* +0x0000 1b 21 00 00 */ unsigned char Blink[8]; /* +0x0018 5b 17 00 00 */ }; struct _JOBOBJECT_SECURITY_LIMIT_INFORMATION { unsigned long SecurityLimitFlags; /* +0x0000 */ void *JobToken; /* +0x0008 */ unsigned char SidsToDisable[8]; /* +0x0010 13 22 00 00 */ unsigned char PrivilegesToDelete[8]; /* +0x0018 15 22 00 00 */ unsigned char RestrictedSids[8]; /* +0x0020 13 22 00 00 */ }; struct _JOBOBJECT_CPU_RATE_CONTROL_INFORMATION { unsigned long ControlFlags; /* +0x0000 */ unsigned long CpuRate; /* +0x0004 */ unsigned long Weight; /* +0x0004 */ }; struct tagAXISINFOA { long axMinValue; /* +0x0000 */ long axMaxValue; /* +0x0004 */ unsigned char axAxisName[16]; /* +0x0008 33 1c 00 00 */ }; struct _IMAGE_CE_RUNTIME_FUNCTION_ENTRY { unsigned long FuncStart; /* +0x0000 */ /* unsigned char PrologLen[0]; +0x0004 8a 13 00 00 */ /* unsigned char FuncLen[0]; +0x0004 23 22 00 00 */ /* unsigned char ThirtyTwoBit[0]; +0x0004 24 22 00 00 */ unsigned char ExceptionFlag[4]; /* +0x0004 a7 18 00 00 */ }; struct _SYSTEM_WORKINGSET_ENTRY { unsigned long UniqueProcessId; /* +0x0000 */ unsigned long SessionId; /* +0x0000 */ unsigned long long WorkingSetPageCount; /* +0x0008 */ unsigned long long CommitPageCount; /* +0x0010 */ unsigned long long PagedPoolPageCount; /* +0x0018 */ unsigned long long VirtualSizeInPages; /* +0x0018 */ unsigned long long PrivateWorkingSetPageCount; /* +0x0020 */ }; struct _tagDdeClassInfo { unsigned long dwContextMask; /* +0x0000 */ unsigned char fClaimFactory[4]; /* +0x0004 74 00 00 00 */ unsigned long dwContext; /* +0x0008 */ unsigned long dwFlags; /* +0x000c */ unsigned long dwThreadId; /* +0x0010 */ unsigned long dwRegistrationKey; /* +0x0014 */ unsigned char punk[8]; /* +0x0018 93 17 00 00 */ }; struct tagSERIALKEYSA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ char *lpszActivePort; /* +0x0008 */ char *lpszPort; /* +0x0010 */ unsigned char iBaudRate[4]; /* +0x0018 75 00 00 00 */ unsigned char iPortState[4]; /* +0x001c 75 00 00 00 */ unsigned char iActive[8]; /* +0x0020 75 00 00 00 */ }; struct _NDR_CS_ROUTINES { unsigned char pSizeConvertRoutines[8]; /* +0x0000 35 22 00 00 */ unsigned char pTagGettingRoutines[8]; /* +0x0008 39 22 00 00 */ }; struct tagSOAP_ACTIVATION_INFO { unsigned char bSoapActivated[4]; /* +0x0000 74 00 00 00 */ long lMode; /* +0x0004 */ unsigned char bstrVRoot[8]; /* +0x0008 71 06 00 00 */ unsigned char bstrMailTo[8]; /* +0x0010 71 06 00 00 */ unsigned char bstrAssemblyName[8]; /* +0x0018 71 06 00 00 */ unsigned char bstrTypeName[8]; /* +0x0020 71 06 00 00 */ unsigned char bstrBaseUrl[8]; /* +0x0028 71 06 00 00 */ }; struct _wireSAFEARR_HAVEIID { unsigned long Size; /* +0x0000 */ unsigned char apUnknown[8]; /* +0x0008 4e 22 00 00 */ unsigned char iid[16]; /* +0x0010 f3 14 00 00 */ }; struct ANON_OBJECT_HEADER { unsigned short Sig1; /* +0x0000 */ unsigned short Sig2; /* +0x0002 */ unsigned short Version; /* +0x0004 */ unsigned short Machine; /* +0x0006 */ unsigned long TimeDateStamp; /* +0x0008 */ unsigned char ClassID[16]; /* +0x000c f3 14 00 00 */ unsigned long SizeOfData; /* +0x001c */ }; struct _TXFS_ROLLFORWARD_REDO_INFORMATION { unsigned char LastVirtualClock[8]; /* +0x0000 43 13 00 00 */ unsigned long long LastRedoLsn; /* +0x0008 */ unsigned long long HighestRecoveryLsn; /* +0x0010 */ unsigned long Flags; /* +0x0018 */ }; struct _RTL_CRITICAL_SECTION_DEBUG { unsigned short Type; /* +0x0000 */ unsigned short CreatorBackTraceIndex; /* +0x0002 */ unsigned char CriticalSection[8]; /* +0x0008 90 1f 00 00 */ unsigned char ProcessLocksList[16]; /* +0x0010 73 1f 00 00 */ unsigned long EntryCount; /* +0x0020 */ unsigned long ContentionCount; /* +0x0024 */ unsigned long Flags; /* +0x0028 */ unsigned short CreatorBackTraceIndexHigh; /* +0x002c */ unsigned short SpareUSHORT; /* +0x002e */ }; struct _BYTE_BLOB { unsigned long clSize; /* +0x0000 */ unsigned char abData[4]; /* +0x0004 ff 12 00 00 */ }; struct tagEMREXTESCAPE { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char iEscape[4]; /* +0x0008 74 00 00 00 */ unsigned char cbEscData[4]; /* +0x000c 74 00 00 00 */ unsigned char EscData[4]; /* +0x0010 ff 12 00 00 */ }; struct tagEVENTMSG { unsigned char message[4]; /* +0x0000 75 00 00 00 */ unsigned char paramL[4]; /* +0x0004 75 00 00 00 */ unsigned char paramH[4]; /* +0x0008 75 00 00 00 */ unsigned long time; /* +0x000c */ unsigned char hwnd[8]; /* +0x0010 f7 12 00 00 */ }; struct __NCRYPT_SUPPORTED_LENGTHS { unsigned long dwMinLength; /* +0x0000 */ unsigned long dwMaxLength; /* +0x0004 */ unsigned long dwIncrement; /* +0x0008 */ unsigned long dwDefaultLength; /* +0x000c */ }; struct _SID_IDENTIFIER_AUTHORITY { unsigned char Value[6]; /* +0x0000 79 22 00 00 */ }; struct _GUID { unsigned long Data1; /* +0x0000 */ unsigned short Data2; /* +0x0004 */ unsigned short Data3; /* +0x0006 */ unsigned char Data4[8]; /* +0x0008 91 19 00 00 */ }; struct _FILE_FS_FULL_SIZE_INFORMATION { unsigned char TotalAllocationUnits[8]; /* +0x0000 43 13 00 00 */ unsigned char CallerAvailableAllocationUnits[8]; /* +0x0008 43 13 00 00 */ unsigned char ActualAvailableAllocationUnits[8]; /* +0x0010 43 13 00 00 */ unsigned long SectorsPerAllocationUnit; /* +0x0018 */ unsigned long BytesPerSector; /* +0x001c */ }; struct _SYSTEM_PROCESS_ID_INFORMATION { void *ProcessId; /* +0x0000 */ unsigned char ImageName[16]; /* +0x0008 e3 12 00 00 */ }; struct _SYSTEM_PREFETCH_OPTIONS { /* unsigned char LowerPriority[0]; +0x0000 94 13 00 00 */ /* unsigned char VirtualOffsets[0]; +0x0000 90 18 00 00 */ /* unsigned char TrickleIOs[0]; +0x0000 91 18 00 00 */ /* unsigned char SkipInStorePages[0]; +0x0000 74 1e 00 00 */ /* unsigned char PrefetchFilesByVa[0]; +0x0000 75 1e 00 00 */ /* unsigned char Spare[0]; +0x0000 a3 22 00 00 */ unsigned char ScenarioType[4]; /* +0x0000 a4 22 00 00 */ }; struct _CERT_POLICY_MAPPINGS_INFO { unsigned long cPolicyMapping; /* +0x0000 */ unsigned char rgPolicyMapping[8]; /* +0x0008 c9 22 00 00 */ }; struct _IMAGE_VXD_HEADER { unsigned short e32_magic; /* +0x0000 */ unsigned char e32_border; /* +0x0002 */ unsigned char e32_worder; /* +0x0003 */ unsigned long e32_level; /* +0x0004 */ unsigned short e32_cpu; /* +0x0008 */ unsigned short e32_os; /* +0x000a */ unsigned long e32_ver; /* +0x000c */ unsigned long e32_mflags; /* +0x0010 */ unsigned long e32_mpages; /* +0x0014 */ unsigned long e32_startobj; /* +0x0018 */ unsigned long e32_eip; /* +0x001c */ unsigned long e32_stackobj; /* +0x0020 */ unsigned long e32_esp; /* +0x0024 */ unsigned long e32_pagesize; /* +0x0028 */ unsigned long e32_lastpagesize; /* +0x002c */ unsigned long e32_fixupsize; /* +0x0030 */ unsigned long e32_fixupsum; /* +0x0034 */ unsigned long e32_ldrsize; /* +0x0038 */ unsigned long e32_ldrsum; /* +0x003c */ unsigned long e32_objtab; /* +0x0040 */ unsigned long e32_objcnt; /* +0x0044 */ unsigned long e32_objmap; /* +0x0048 */ unsigned long e32_itermap; /* +0x004c */ unsigned long e32_rsrctab; /* +0x0050 */ unsigned long e32_rsrccnt; /* +0x0054 */ unsigned long e32_restab; /* +0x0058 */ unsigned long e32_enttab; /* +0x005c */ unsigned long e32_dirtab; /* +0x0060 */ unsigned long e32_dircnt; /* +0x0064 */ unsigned long e32_fpagetab; /* +0x0068 */ unsigned long e32_frectab; /* +0x006c */ unsigned long e32_impmod; /* +0x0070 */ unsigned long e32_impmodcnt; /* +0x0074 */ unsigned long e32_impproc; /* +0x0078 */ unsigned long e32_pagesum; /* +0x007c */ unsigned long e32_datapage; /* +0x0080 */ unsigned long e32_preload; /* +0x0084 */ unsigned long e32_nrestab; /* +0x0088 */ unsigned long e32_cbnrestab; /* +0x008c */ unsigned long e32_nressum; /* +0x0090 */ unsigned long e32_autodata; /* +0x0094 */ unsigned long e32_debuginfo; /* +0x0098 */ unsigned long e32_debuglen; /* +0x009c */ unsigned long e32_instpreload; /* +0x00a0 */ unsigned long e32_instdemand; /* +0x00a4 */ unsigned long e32_heapsize; /* +0x00a8 */ unsigned char e32_res3[12]; /* +0x00ac 88 15 00 00 */ unsigned long e32_winresoff; /* +0x00b8 */ unsigned long e32_winreslen; /* +0x00bc */ unsigned short e32_devid; /* +0x00c0 */ unsigned short e32_ddkver; /* +0x00c2 */ }; struct _CACHE_DESCRIPTOR { unsigned char Level; /* +0x0000 */ unsigned char Associativity; /* +0x0001 */ unsigned short LineSize; /* +0x0002 */ unsigned long Size; /* +0x0004 */ unsigned char Type[4]; /* +0x0008 9e 1f 00 00 */ }; struct _MIDL_STUB_DESC:: { /* unsigned char pAutoHandle[0]; +0x0000 55 13 00 00 */ /* unsigned char pPrimitiveHandle[0]; +0x0000 55 13 00 00 */ unsigned char pGenericBindingInfo[8]; /* +0x0000 d9 22 00 00 */ }; struct _SHCREATEPROCESSINFOW { unsigned long cbSize; /* +0x0000 */ unsigned long fMask; /* +0x0004 */ unsigned char hwnd[8]; /* +0x0008 f7 12 00 00 */ unsigned char pszFile[8]; /* +0x0010 cb 13 00 00 */ unsigned char pszParameters[8]; /* +0x0018 cb 13 00 00 */ unsigned char pszCurrentDirectory[8]; /* +0x0020 cb 13 00 00 */ void *hUserToken; /* +0x0028 */ unsigned char lpProcessAttributes[8]; /* +0x0030 12 15 00 00 */ unsigned char lpThreadAttributes[8]; /* +0x0038 12 15 00 00 */ unsigned char bInheritHandles[4]; /* +0x0040 74 00 00 00 */ unsigned long dwCreationFlags; /* +0x0044 */ unsigned char lpStartupInfo[8]; /* +0x0048 84 17 00 00 */ unsigned char lpProcessInformation[8]; /* +0x0050 e4 22 00 00 */ }; struct _FILE_MAKE_COMPATIBLE_BUFFER { unsigned char CloseDisc; /* +0x0000 */ }; struct _TRANSACTIONMANAGER_BASIC_INFORMATION { unsigned char TmIdentity[16]; /* +0x0000 f3 14 00 00 */ unsigned char VirtualClock[8]; /* +0x0010 43 13 00 00 */ }; struct _CERT_POLICY_CONSTRAINTS_INFO { unsigned char fRequireExplicitPolicy[4]; /* +0x0000 74 00 00 00 */ unsigned long dwRequireExplicitPolicySkipCerts; /* +0x0004 */ unsigned char fInhibitPolicyMapping[4]; /* +0x0008 74 00 00 00 */ unsigned long dwInhibitPolicyMappingSkipCerts; /* +0x000c */ }; struct _CM_MCA_POS_DATA { unsigned short AdapterId; /* +0x0000 */ unsigned char PosData1; /* +0x0002 */ unsigned char PosData2; /* +0x0003 */ unsigned char PosData3; /* +0x0004 */ unsigned char PosData4; /* +0x0005 */ }; struct _WIN32_FILE_ATTRIBUTE_DATA { unsigned long dwFileAttributes; /* +0x0000 */ unsigned char ftCreationTime[8]; /* +0x0004 37 13 00 00 */ unsigned char ftLastAccessTime[8]; /* +0x000c 37 13 00 00 */ unsigned char ftLastWriteTime[8]; /* +0x0014 37 13 00 00 */ unsigned long nFileSizeHigh; /* +0x001c */ unsigned long nFileSizeLow; /* +0x0020 */ }; struct _FILE_STORAGE_INFO { unsigned long LogicalBytesPerSector; /* +0x0000 */ unsigned long PhysicalBytesPerSectorForAtomicity; /* +0x0004 */ unsigned long PhysicalBytesPerSectorForPerformance; /* +0x0008 */ unsigned long FileSystemEffectivePhysicalBytesPerSectorForAtomicity; /* +0x000c */ unsigned long Flags; /* +0x0010 */ unsigned long ByteOffsetForSectorAlignment; /* +0x0014 */ unsigned long ByteOffsetForPartitionAlignment; /* +0x0018 */ }; struct _FILE_MAILSLOT_SET_INFORMATION { unsigned char ReadTimeout[8]; /* +0x0000 07 23 00 00 */ }; struct _RTL_DYNAMIC_HASH_TABLE { unsigned long Flags; /* +0x0000 */ unsigned long Shift; /* +0x0004 */ unsigned long TableSize; /* +0x0008 */ unsigned long Pivot; /* +0x000c */ unsigned long DivisorMask; /* +0x0010 */ unsigned long NumEntries; /* +0x0014 */ unsigned long NonEmptyBuckets; /* +0x0018 */ unsigned long NumEnumerators; /* +0x001c */ void *Directory; /* +0x0020 */ }; struct _DOCINFOW { unsigned char cbSize[8]; /* +0x0000 74 00 00 00 */ unsigned char lpszDocName[8]; /* +0x0008 cb 13 00 00 */ unsigned char lpszOutput[8]; /* +0x0010 cb 13 00 00 */ unsigned char lpszDatatype[8]; /* +0x0018 cb 13 00 00 */ unsigned long fwType; /* +0x0020 */ }; struct _BCryptBufferDesc { unsigned long ulVersion; /* +0x0000 */ unsigned long cBuffers; /* +0x0004 */ unsigned char pBuffers[8]; /* +0x0008 13 23 00 00 */ }; struct _CRYPT_PASSWORD_CREDENTIALSW { unsigned long cbSize; /* +0x0000 */ unsigned char pszUsername[8]; /* +0x0008 71 06 00 00 */ unsigned char pszPassword[8]; /* +0x0010 71 06 00 00 */ }; struct _SYSTEM_DEVICE_DATA_INFORMATION { unsigned char DeviceId[16]; /* +0x0000 e3 12 00 00 */ unsigned char DataName[16]; /* +0x0010 e3 12 00 00 */ unsigned long DataType; /* +0x0020 */ unsigned long DataBufferLength; /* +0x0024 */ void *DataBuffer; /* +0x0028 */ }; struct _RTL_BARRIER { unsigned char Barrier[4]; /* +0x0000 d7 17 00 00 */ long LeftBarrier; /* +0x0004 */ unsigned char WaitEvent[16]; /* +0x0008 1e 23 00 00 */ long TotalProcessors; /* +0x0018 */ unsigned long Spins; /* +0x001c */ unsigned char DUMMYRESERVEDSTRUCTNAME[32]; /* +0x0000 1f 23 00 00 */ }; struct _RTL_BARRIER:::: { unsigned long Reserved1; /* +0x0000 */ unsigned long Reserved2; /* +0x0004 */ unsigned char Reserved3[16]; /* +0x0008 83 15 00 00 */ unsigned long Reserved4; /* +0x0018 */ unsigned long Reserved5; /* +0x001c */ }; struct _OSVERSIONINFOEXA { unsigned long dwOSVersionInfoSize; /* +0x0000 */ unsigned long dwMajorVersion; /* +0x0004 */ unsigned long dwMinorVersion; /* +0x0008 */ unsigned long dwBuildNumber; /* +0x000c */ unsigned long dwPlatformId; /* +0x0010 */ unsigned char szCSDVersion[128]; /* +0x0014 12 17 00 00 */ unsigned short wServicePackMajor; /* +0x0094 */ unsigned short wServicePackMinor; /* +0x0096 */ unsigned short wSuiteMask; /* +0x0098 */ unsigned char wProductType; /* +0x009a */ unsigned char wReserved; /* +0x009b */ }; struct _IMAGE_OPTIONAL_HEADER { unsigned short Magic; /* +0x0000 */ unsigned char MajorLinkerVersion; /* +0x0002 */ unsigned char MinorLinkerVersion; /* +0x0003 */ unsigned long SizeOfCode; /* +0x0004 */ unsigned long SizeOfInitializedData; /* +0x0008 */ unsigned long SizeOfUninitializedData; /* +0x000c */ unsigned long AddressOfEntryPoint; /* +0x0010 */ unsigned long BaseOfCode; /* +0x0014 */ unsigned long BaseOfData; /* +0x0018 */ unsigned long ImageBase; /* +0x001c */ unsigned long SectionAlignment; /* +0x0020 */ unsigned long FileAlignment; /* +0x0024 */ unsigned short MajorOperatingSystemVersion; /* +0x0028 */ unsigned short MinorOperatingSystemVersion; /* +0x002a */ unsigned short MajorImageVersion; /* +0x002c */ unsigned short MinorImageVersion; /* +0x002e */ unsigned short MajorSubsystemVersion; /* +0x0030 */ unsigned short MinorSubsystemVersion; /* +0x0032 */ unsigned long Win32VersionValue; /* +0x0034 */ unsigned long SizeOfImage; /* +0x0038 */ unsigned long SizeOfHeaders; /* +0x003c */ unsigned long CheckSum; /* +0x0040 */ unsigned short Subsystem; /* +0x0044 */ unsigned short DllCharacteristics; /* +0x0046 */ unsigned long SizeOfStackReserve; /* +0x0048 */ unsigned long SizeOfStackCommit; /* +0x004c */ unsigned long SizeOfHeapReserve; /* +0x0050 */ unsigned long SizeOfHeapCommit; /* +0x0054 */ unsigned long LoaderFlags; /* +0x0058 */ unsigned long NumberOfRvaAndSizes; /* +0x005c */ unsigned char DataDirectory[128]; /* +0x0060 28 23 00 00 */ }; struct _IMAGE_COFF_SYMBOLS_HEADER { unsigned long NumberOfSymbols; /* +0x0000 */ unsigned long LvaToFirstSymbol; /* +0x0004 */ unsigned long NumberOfLinenumbers; /* +0x0008 */ unsigned long LvaToFirstLinenumber; /* +0x000c */ unsigned long RvaToFirstByteOfCode; /* +0x0010 */ unsigned long RvaToLastByteOfCode; /* +0x0014 */ unsigned long RvaToFirstByteOfData; /* +0x0018 */ unsigned long RvaToLastByteOfData; /* +0x001c */ }; struct tagOBJREFDATA { unsigned long nElms; /* +0x0000 */ unsigned char ppElmArray[8]; /* +0x0008 38 23 00 00 */ }; struct _WAKE_TIMER_INFO { unsigned long long OffsetToNext; /* +0x0000 */ unsigned char DueTime[8]; /* +0x0008 3e 23 00 00 */ unsigned long Period; /* +0x0010 */ unsigned char ReasonContext[40]; /* +0x0018 1e 18 00 00 */ }; struct tagEMRPOLYLINE16 { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char rclBounds[16]; /* +0x0008 db 12 00 00 */ unsigned long cpts; /* +0x0018 */ unsigned char apts[4]; /* +0x001c 46 23 00 00 */ }; struct _OCSP_RESPONSE_INFO { unsigned long dwStatus; /* +0x0000 */ char *pszObjId; /* +0x0008 */ unsigned char Value[16]; /* +0x0010 08 13 00 00 */ }; struct _LDR_IMPORT_CALLBACK_INFO { unsigned char ImportCallbackRoutine[8]; /* +0x0000 53 23 00 00 */ void *ImportCallbackParameter; /* +0x0008 */ }; struct _PS_ATTRIBUTE_LIST { unsigned long long TotalLength; /* +0x0000 */ unsigned char Attributes[32]; /* +0x0008 57 23 00 00 */ }; struct tagEMRPOLYDRAW { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char rclBounds[16]; /* +0x0008 db 12 00 00 */ unsigned long cptl; /* +0x0018 */ unsigned char aptl[8]; /* +0x001c 05 16 00 00 */ unsigned char abTypes[4]; /* +0x0024 ff 12 00 00 */ }; struct tagMENUBARINFO { unsigned long cbSize; /* +0x0000 */ unsigned char rcBar[20]; /* +0x0004 7a 14 00 00 */ unsigned char hMenu[8]; /* +0x0018 63 15 00 00 */ unsigned char hwndMenu[8]; /* +0x0020 f7 12 00 00 */ /* unsigned char fBarFocused[0]; +0x0028 60 23 00 00 */ unsigned char fFocused[8]; /* +0x0028 61 23 00 00 */ }; struct _BYTE_SIZEDARR { unsigned long clSize; /* +0x0000 */ unsigned char *pData; /* +0x0008 */ }; struct tagPOINTER_DEVICE_INFO { unsigned long displayOrientation; /* +0x0000 */ void *device; /* +0x0008 */ unsigned char pointerDeviceType[8]; /* +0x0010 6a 23 00 00 */ unsigned char monitor[8]; /* +0x0018 e1 17 00 00 */ unsigned long startingCursorId; /* +0x0020 */ unsigned short maxActiveContacts; /* +0x0024 */ unsigned char productString[1042]; /* +0x0026 6b 23 00 00 */ }; struct _STARTUPINFOA { unsigned long cb; /* +0x0000 */ char *lpReserved; /* +0x0008 */ char *lpDesktop; /* +0x0010 */ char *lpTitle; /* +0x0018 */ unsigned long dwX; /* +0x0020 */ unsigned long dwY; /* +0x0024 */ unsigned long dwXSize; /* +0x0028 */ unsigned long dwYSize; /* +0x002c */ unsigned long dwXCountChars; /* +0x0030 */ unsigned long dwYCountChars; /* +0x0034 */ unsigned long dwFillAttribute; /* +0x0038 */ unsigned long dwFlags; /* +0x003c */ unsigned short wShowWindow; /* +0x0040 */ unsigned short cbReserved2; /* +0x0042 */ unsigned char *lpReserved2; /* +0x0048 */ void *hStdInput; /* +0x0050 */ void *hStdOutput; /* +0x0058 */ void *hStdError; /* +0x0060 */ }; struct tagCOLORCORRECTPALETTE { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned long ihPalette; /* +0x0008 */ unsigned long nFirstEntry; /* +0x000c */ unsigned long nPalEntries; /* +0x0010 */ unsigned long nReserved; /* +0x0014 */ }; struct _CRYPT_CONTEXT_FUNCTION_CONFIG { unsigned long dwFlags; /* +0x0000 */ unsigned long dwReserved; /* +0x0004 */ }; struct _DISPLAY_DEVICEA { unsigned long cb; /* +0x0000 */ unsigned char DeviceName[32]; /* +0x0004 84 23 00 00 */ unsigned char DeviceString[128]; /* +0x0024 12 17 00 00 */ unsigned long StateFlags; /* +0x00a4 */ unsigned char DeviceID[128]; /* +0x00a8 12 17 00 00 */ unsigned char DeviceKey[128]; /* +0x0128 12 17 00 00 */ }; struct _DRAGINFOA { unsigned char uSize[4]; /* +0x0000 75 00 00 00 */ unsigned char pt[8]; /* +0x0004 a1 14 00 00 */ unsigned char fNC[4]; /* +0x000c 74 00 00 00 */ char *lpFileList; /* +0x0010 */ unsigned long grfKeyState; /* +0x0018 */ }; struct _DMA_CONFIGURATION_BYTE0 { /* unsigned char Channel[0]; +0x0000 e8 13 00 00 */ /* unsigned char Reserved[0]; +0x0000 8b 23 00 00 */ /* unsigned char Shared[0]; +0x0000 a7 1e 00 00 */ unsigned char MoreEntries[1]; /* +0x0000 a8 1e 00 00 */ }; struct tagENHMETARECORD { unsigned long iType; /* +0x0000 */ unsigned long nSize; /* +0x0004 */ unsigned char dParm[4]; /* +0x0008 fc 12 00 00 */ }; struct _remoteMETAFILEPICT { long mm; /* +0x0000 */ long xExt; /* +0x0004 */ long yExt; /* +0x0008 */ unsigned char hMF[8]; /* +0x0010 93 23 00 00 */ }; struct _tagPROTOCOL_ARGUMENT { unsigned char szMethod[8]; /* +0x0000 cb 13 00 00 */ unsigned char szTargetUrl[8]; /* +0x0008 cb 13 00 00 */ }; struct _CRYPT_CONTENT_INFO_SEQUENCE_OF_ANY { char *pszObjId; /* +0x0000 */ unsigned long cValue; /* +0x0008 */ unsigned char rgValue[8]; /* +0x0010 4d 13 00 00 */ }; struct _PROCESS_MITIGATION_POLICY_INFORMATION { unsigned char Policy[4]; /* +0x0000 9c 23 00 00 */ /* unsigned char ASLRPolicy[0]; +0x0004 9d 23 00 00 */ /* unsigned char StackCheckPolicy[0]; +0x0004 9e 23 00 00 */ /* unsigned char StrictHandleCheckPolicy[0]; +0x0004 9f 23 00 00 */ unsigned char SystemCallDisablePolicy[4]; /* +0x0004 a0 23 00 00 */ }; struct _FILE_COMPRESSION_INFO { unsigned char CompressedFileSize[8]; /* +0x0000 43 13 00 00 */ unsigned short CompressionFormat; /* +0x0008 */ unsigned char CompressionUnitShift; /* +0x000a */ unsigned char ChunkShift; /* +0x000b */ unsigned char ClusterShift; /* +0x000c */ unsigned char Reserved[3]; /* +0x000d 93 13 00 00 */ }; struct tagEMRSCALEVIEWPORTEXTEX { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ long xNum; /* +0x0008 */ long xDenom; /* +0x000c */ long yNum; /* +0x0010 */ long yDenom; /* +0x0014 */ }; struct _RPC_BINDING_HANDLE_TEMPLATE_V1_W { unsigned long Version; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long ProtocolSequence; /* +0x0008 */ unsigned short *NetworkAddress; /* +0x0010 */ unsigned short *StringEndpoint; /* +0x0018 */ }; struct _CRYPT_RSA_SSA_PSS_PARAMETERS { unsigned char HashAlgorithm[24]; /* +0x0000 68 14 00 00 */ unsigned char MaskGenAlgorithm[32]; /* +0x0018 b1 23 00 00 */ unsigned long dwSaltLength; /* +0x0038 */ unsigned long dwTrailerField; /* +0x003c */ }; struct tagEMRELLIPSE { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char rclBox[16]; /* +0x0008 db 12 00 00 */ }; struct _CRL_FIND_ISSUED_FOR_PARA { unsigned char pSubjectCert[8]; /* +0x0000 c4 13 00 00 */ unsigned char pIssuerCert[8]; /* +0x0008 c4 13 00 00 */ }; struct _RATE_QUOTA_LIMIT { unsigned long RateData; /* +0x0000 */ /* unsigned char RatePercent[0]; +0x0000 bc 23 00 00 */ unsigned char Reserved0[4]; /* +0x0000 bd 23 00 00 */ }; struct _SYSTEM_LOGICAL_PROCESSOR_INFORMATION { unsigned long long ProcessorMask; /* +0x0000 */ unsigned char Relationship[8]; /* +0x0008 d5 1a 00 00 */ /* unsigned char ProcessorCore[0]; +0x0010 c0 23 00 00 */ /* unsigned char NumaNode[0]; +0x0010 c1 23 00 00 */ /* unsigned char Cache[0]; +0x0010 c2 23 00 00 */ unsigned char Reserved[16]; /* +0x0010 83 15 00 00 */ }; struct _SYSTEM_LOGICAL_PROCESSOR_INFORMATION:::: { unsigned long NodeNumber; /* +0x0000 */ }; struct _SYSTEM_LOGICAL_PROCESSOR_INFORMATION:::: { unsigned char Flags; /* +0x0000 */ }; struct _SYSTEM_WATCHDOG_HANDLER_INFORMATION { unsigned char WdHandler[8]; /* +0x0000 c9 23 00 00 */ void *Context; /* +0x0008 */ }; struct tagENHMETAHEADER { unsigned long iType; /* +0x0000 */ unsigned long nSize; /* +0x0004 */ unsigned char rclBounds[16]; /* +0x0008 db 12 00 00 */ unsigned char rclFrame[16]; /* +0x0018 db 12 00 00 */ unsigned long dSignature; /* +0x0028 */ unsigned long nVersion; /* +0x002c */ unsigned long nBytes; /* +0x0030 */ unsigned long nRecords; /* +0x0034 */ unsigned short nHandles; /* +0x0038 */ unsigned short sReserved; /* +0x003a */ unsigned long nDescription; /* +0x003c */ unsigned long offDescription; /* +0x0040 */ unsigned long nPalEntries; /* +0x0044 */ unsigned char szlDevice[8]; /* +0x0048 c4 15 00 00 */ unsigned char szlMillimeters[8]; /* +0x0050 c4 15 00 00 */ unsigned long cbPixelFormat; /* +0x0058 */ unsigned long offPixelFormat; /* +0x005c */ unsigned long bOpenGL; /* +0x0060 */ unsigned char szlMicrometers[8]; /* +0x0064 c4 15 00 00 */ }; struct _SERVICE_TRIGGER { unsigned long dwTriggerType; /* +0x0000 */ unsigned long dwAction; /* +0x0004 */ unsigned char pTriggerSubtype[8]; /* +0x0008 61 16 00 00 */ unsigned long cDataItems; /* +0x0010 */ unsigned char pDataItems[8]; /* +0x0018 d3 23 00 00 */ }; struct _CMSG_CTRL_KEY_AGREE_DECRYPT_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned long long hNCryptKey; /* +0x0008 */ unsigned long dwKeySpec; /* +0x0010 */ unsigned char pKeyAgree[8]; /* +0x0018 d7 23 00 00 */ unsigned long dwRecipientIndex; /* +0x0020 */ unsigned long dwRecipientEncryptedKeyIndex; /* +0x0024 */ unsigned char OriginatorPublicKey[24]; /* +0x0028 09 13 00 00 */ }; struct _FILE_FS_LABEL_INFORMATION { unsigned long VolumeLabelLength; /* +0x0000 */ unsigned char VolumeLabel[4]; /* +0x0004 0a 14 00 00 */ }; struct _SD_GLOBAL_CHANGE_INPUT { unsigned long Flags; /* +0x0000 */ unsigned long ChangeType; /* +0x0004 */ /* unsigned char SdChange[0]; +0x0008 e0 23 00 00 */ /* unsigned char SdQueryStats[0]; +0x0008 e1 23 00 00 */ unsigned char SdEnumSds[16]; /* +0x0008 e2 23 00 00 */ }; struct _KLOCK_QUEUE_HANDLE { unsigned char LockQueue[16]; /* +0x0000 44 22 00 00 */ unsigned char OldIrql; /* +0x0010 */ }; struct tagRAWMOUSE { unsigned short usFlags; /* +0x0000 */ unsigned long ulButtons; /* +0x0004 */ unsigned short usButtonFlags; /* +0x0004 */ unsigned short usButtonData; /* +0x0006 */ unsigned long ulRawButtons; /* +0x0008 */ long lLastX; /* +0x000c */ long lLastY; /* +0x0010 */ unsigned long ulExtraInformation; /* +0x0014 */ }; struct tagGESTUREINFO { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned long dwID; /* +0x0008 */ unsigned char hwndTarget[8]; /* +0x0010 f7 12 00 00 */ unsigned char ptsLocation[4]; /* +0x0018 45 23 00 00 */ unsigned long dwInstanceID; /* +0x001c */ unsigned long dwSequenceID; /* +0x0020 */ unsigned long long ullArguments; /* +0x0028 */ unsigned char cbExtraArgs[8]; /* +0x0030 75 00 00 00 */ }; struct _SYSDBG_MSR { unsigned long Msr; /* +0x0000 */ unsigned long long Data; /* +0x0008 */ }; struct _JOURNAL_SET_DELETE_VALUE_INFORMATION { unsigned char Action[8]; /* +0x0000 4f 15 00 00 */ unsigned long long RecordNumber; /* +0x0008 */ unsigned char TimeStamp[8]; /* +0x0010 43 13 00 00 */ unsigned char KeyPathName[16]; /* +0x0018 e3 12 00 00 */ unsigned char ValueName[16]; /* +0x0028 e3 12 00 00 */ unsigned long OldValueType; /* +0x0038 */ unsigned long OldDataLength; /* +0x003c */ void *OldData; /* +0x0040 */ unsigned long NewValueType; /* +0x0048 */ unsigned long NewDataLength; /* +0x004c */ void *NewData; /* +0x0050 */ }; struct _IO_RESOURCE_LIST { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned long Count; /* +0x0004 */ unsigned char Descriptors[32]; /* +0x0008 fa 23 00 00 */ }; struct _HEAP_RANGE_INFORMATION { unsigned long long Address; /* +0x0000 */ unsigned long long Size; /* +0x0008 */ unsigned long Type; /* +0x0010 */ unsigned long Protection; /* +0x0014 */ unsigned long long FirstBlockInformationOffset; /* +0x0018 */ unsigned long long NextRangeInformationOffset; /* +0x0020 */ }; struct _CRYPT_DEFAULT_CONTEXT_MULTI_OID_PARA { unsigned long cOID; /* +0x0000 */ unsigned char rgpszOID[8]; /* +0x0008 03 24 00 00 */ }; struct _SE_SECURITY_DESCRIPTOR { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ void *SecurityDescriptor; /* +0x0008 */ }; struct _LDR_DATA_TABLE_ENTRY { unsigned char InLoadOrderLinks[16]; /* +0x0000 73 1f 00 00 */ unsigned char InMemoryOrderLinks[16]; /* +0x0010 73 1f 00 00 */ /* unsigned char InInitializationOrderLinks[0]; +0x0020 73 1f 00 00 */ unsigned char InProgressLinks[16]; /* +0x0020 73 1f 00 00 */ void *DllBase; /* +0x0030 */ void *EntryPoint; /* +0x0038 */ unsigned long SizeOfImage; /* +0x0040 */ unsigned char FullDllName[16]; /* +0x0048 e3 12 00 00 */ unsigned char BaseDllName[16]; /* +0x0058 e3 12 00 00 */ /* unsigned char FlagGroup[0]; +0x0068 cb 17 00 00 */ unsigned long Flags; /* +0x0068 */ /* unsigned char PackagedBinary[0]; +0x0068 94 13 00 00 */ /* unsigned char MarkedForRemoval[0]; +0x0068 90 18 00 00 */ /* unsigned char ImageDll[0]; +0x0068 91 18 00 00 */ /* unsigned char LoadNotificationsSent[0]; +0x0068 74 1e 00 00 */ /* unsigned char TelemetryEntryProcessed[0]; +0x0068 75 1e 00 00 */ /* unsigned char ProcessStaticImport[0]; +0x0068 0b 24 00 00 */ /* unsigned char InLegacyLists[0]; +0x0068 32 1f 00 00 */ /* unsigned char InIndexes[0]; +0x0068 33 1f 00 00 */ /* unsigned char ShimDll[0]; +0x0068 34 1f 00 00 */ /* unsigned char InExceptionTable[0]; +0x0068 35 1f 00 00 */ /* unsigned char ReservedFlags1[0]; +0x0068 0c 24 00 00 */ /* unsigned char LoadInProgress[0]; +0x0068 0d 24 00 00 */ /* unsigned char ReservedFlags2[0]; +0x0068 0e 24 00 00 */ /* unsigned char EntryProcessed[0]; +0x0068 39 1f 00 00 */ /* unsigned char ReservedFlags3[0]; +0x0068 0f 24 00 00 */ /* unsigned char DontCallForThreads[0]; +0x0068 10 24 00 00 */ /* unsigned char ProcessAttachCalled[0]; +0x0068 11 24 00 00 */ /* unsigned char ProcessAttachFailed[0]; +0x0068 8e 13 00 00 */ /* unsigned char CorDeferredValidate[0]; +0x0068 8f 13 00 00 */ /* unsigned char CorImage[0]; +0x0068 12 24 00 00 */ /* unsigned char DontRelocate[0]; +0x0068 13 24 00 00 */ /* unsigned char CorILOnly[0]; +0x0068 14 24 00 00 */ /* unsigned char ReservedFlags5[0]; +0x0068 15 24 00 00 */ /* unsigned char Redirected[0]; +0x0068 16 24 00 00 */ /* unsigned char ReservedFlags6[0]; +0x0068 17 24 00 00 */ unsigned char CompatDatabaseProcessed[4]; /* +0x0068 a7 18 00 00 */ unsigned short ObsoleteLoadCount; /* +0x006c */ unsigned short TlsIndex; /* +0x006e */ unsigned char HashLinks[16]; /* +0x0070 73 1f 00 00 */ unsigned long TimeDateStamp; /* +0x0080 */ unsigned char EntryPointActivationContext[8]; /* +0x0088 7d 17 00 00 */ void *PatchInformation; /* +0x0090 */ unsigned char DdagNode[8]; /* +0x0098 19 24 00 00 */ unsigned char NodeModuleLink[16]; /* +0x00a0 73 1f 00 00 */ unsigned char SnapContext[8]; /* +0x00b0 1b 24 00 00 */ void *SwitchBackContext; /* +0x00b8 */ unsigned char BaseAddressIndexNode[24]; /* +0x00c0 3f 20 00 00 */ unsigned char MappingInfoIndexNode[24]; /* +0x00d8 3f 20 00 00 */ unsigned long long OriginalBase; /* +0x00f0 */ unsigned char LoadTime[8]; /* +0x00f8 43 13 00 00 */ unsigned long BaseNameHashValue; /* +0x0100 */ }; struct _FILE_GET_EA_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned char EaNameLength; /* +0x0004 */ unsigned char EaName[3]; /* +0x0005 1e 24 00 00 */ }; struct _QUERY_FILE_LAYOUT_OUTPUT { unsigned long FileEntryCount; /* +0x0000 */ unsigned long FirstFileOffset; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ }; struct _PROCESSOR_IDLE_STATES { unsigned long Size; /* +0x0000 */ unsigned long Revision; /* +0x0004 */ unsigned long Count; /* +0x0008 */ unsigned long Type; /* +0x000c */ unsigned long long TargetProcessors; /* +0x0010 */ unsigned char State[32]; /* +0x0018 24 24 00 00 */ }; struct _RPC_MESSAGE { void *Handle; /* +0x0000 */ unsigned long DataRepresentation; /* +0x0008 */ void *Buffer; /* +0x0010 */ unsigned char BufferLength[4]; /* +0x0018 75 00 00 00 */ unsigned char ProcNum[4]; /* +0x001c 75 00 00 00 */ unsigned char TransferSyntax[8]; /* +0x0020 2b 24 00 00 */ void *RpcInterfaceInformation; /* +0x0028 */ void *ReservedForRuntime; /* +0x0030 */ void *ManagerEpv; /* +0x0038 */ void *ImportContext; /* +0x0040 */ unsigned long RpcFlags; /* +0x0048 */ }; struct _CRYPT_BIT_BLOB { unsigned long cbData; /* +0x0000 */ unsigned char *pbData; /* +0x0008 */ unsigned long cUnusedBits; /* +0x0010 */ }; struct _SLIST_ENTRY { unsigned char Next[16]; /* +0x0000 36 24 00 00 */ }; struct _RTL_PROCESS_BACKTRACE_INFORMATION { char *SymbolicBackTrace; /* +0x0000 */ unsigned long TraceCount; /* +0x0008 */ unsigned short Index; /* +0x000c */ unsigned short Depth; /* +0x000e */ unsigned char BackTrace[256]; /* +0x0010 3b 24 00 00 */ }; struct _PROCESS_KEEPALIVE_COUNT_INFORMATION { unsigned long Count; /* +0x0000 */ }; struct _SYSTEM_POWER_LOGGING_ENTRY { unsigned long Reason; /* +0x0000 */ unsigned long States; /* +0x0004 */ }; struct _SYSTEM_IMAGE_FILE_EXECUTION_OPTIONS_INFORMATION { unsigned long FlagsToEnable; /* +0x0000 */ unsigned long FlagsToDisable; /* +0x0004 */ }; struct tagMOUSEMOVEPOINT { unsigned char x[4]; /* +0x0000 74 00 00 00 */ unsigned char y[4]; /* +0x0004 74 00 00 00 */ unsigned long time; /* +0x0008 */ unsigned long long dwExtraInfo; /* +0x0010 */ }; struct _CERT_PUBLIC_KEY_INFO { unsigned char Algorithm[24]; /* +0x0000 68 14 00 00 */ unsigned char PublicKey[24]; /* +0x0018 09 13 00 00 */ }; struct _CERT_LOGOTYPE_AUDIO_INFO { unsigned long dwFileSize; /* +0x0000 */ unsigned long dwPlayTime; /* +0x0004 */ unsigned long dwChannels; /* +0x0008 */ unsigned long dwSampleRate; /* +0x000c */ unsigned char pwszLanguage[8]; /* +0x0010 71 06 00 00 */ }; struct _FILE_INTEGRITY_STREAM_INFORMATION { unsigned short ChecksumAlgorithm; /* +0x0000 */ unsigned char ChecksumChunkShift; /* +0x0002 */ unsigned char ClusterShift; /* +0x0003 */ unsigned long Flags; /* +0x0004 */ }; struct _DIAGNOSTIC_BUFFER { unsigned long long Size; /* +0x0000 */ unsigned char CallerType[8]; /* +0x0008 56 24 00 00 */ unsigned long long ProcessImageNameOffset; /* +0x0010 */ unsigned long ProcessId; /* +0x0018 */ unsigned long ServiceTag; /* +0x001c */ unsigned long long DeviceDescriptionOffset; /* +0x0010 */ unsigned long long DevicePathOffset; /* +0x0018 */ unsigned long long ReasonOffset; /* +0x0020 */ }; struct _SYSTEM_VERIFIER_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long Level; /* +0x0004 */ unsigned char DriverName[16]; /* +0x0008 e3 12 00 00 */ unsigned long RaiseIrqls; /* +0x0018 */ unsigned long AcquireSpinLocks; /* +0x001c */ unsigned long SynchronizeExecutions; /* +0x0020 */ unsigned long AllocationsAttempted; /* +0x0024 */ unsigned long AllocationsSucceeded; /* +0x0028 */ unsigned long AllocationsSucceededSpecialPool; /* +0x002c */ unsigned long AllocationsWithNoTag; /* +0x0030 */ unsigned long TrimRequests; /* +0x0034 */ unsigned long Trims; /* +0x0038 */ unsigned long AllocationsFailed; /* +0x003c */ unsigned long AllocationsFailedDeliberately; /* +0x0040 */ unsigned long Loads; /* +0x0044 */ unsigned long Unloads; /* +0x0048 */ unsigned long UnTrackedPool; /* +0x004c */ unsigned long CurrentPagedPoolAllocations; /* +0x0050 */ unsigned long CurrentNonPagedPoolAllocations; /* +0x0054 */ unsigned long PeakPagedPoolAllocations; /* +0x0058 */ unsigned long PeakNonPagedPoolAllocations; /* +0x005c */ unsigned long long PagedPoolUsageInBytes; /* +0x0060 */ unsigned long long NonPagedPoolUsageInBytes; /* +0x0068 */ unsigned long long PeakPagedPoolUsageInBytes; /* +0x0070 */ unsigned long long PeakNonPagedPoolUsageInBytes; /* +0x0078 */ }; struct tagHIGHCONTRASTW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned char lpszDefaultScheme[8]; /* +0x0008 71 06 00 00 */ }; struct _CM_SERIAL_DEVICE_DATA { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned long BaudClock; /* +0x0004 */ }; struct _cpinfoexA { unsigned char MaxCharSize[4]; /* +0x0000 75 00 00 00 */ unsigned char DefaultChar[2]; /* +0x0004 bb 17 00 00 */ unsigned char LeadByte[12]; /* +0x0006 88 15 00 00 */ unsigned char UnicodeDefaultChar[2]; /* +0x0012 71 00 00 00 */ unsigned char CodePage[4]; /* +0x0014 75 00 00 00 */ unsigned char CodePageName[260]; /* +0x0018 69 24 00 00 */ }; struct _CERT_AUTHORITY_INFO_ACCESS { unsigned long cAccDescr; /* +0x0000 */ unsigned char rgAccDescr[8]; /* +0x0008 6d 24 00 00 */ }; struct _CERT_STRONG_SIGN_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwInfoChoice; /* +0x0004 */ void *pvInfo; /* +0x0008 */ /* unsigned char pSerializedInfo[0]; +0x0008 71 24 00 00 */ char *pszOID; /* +0x0008 */ }; struct _JIT_DEBUG_INFO { unsigned long dwSize; /* +0x0000 */ unsigned long dwProcessorArchitecture; /* +0x0004 */ unsigned long dwThreadID; /* +0x0008 */ unsigned long dwReserved0; /* +0x000c */ unsigned long long lpExceptionAddress; /* +0x0010 */ unsigned long long lpExceptionRecord; /* +0x0018 */ unsigned long long lpContextRecord; /* +0x0020 */ }; struct _FILE_IO_PRIORITY_HINT_INFO { unsigned char PriorityHint[4]; /* +0x0000 7f 24 00 00 */ }; struct _CRL_DIST_POINT_NAME { unsigned long dwDistPointNameChoice; /* +0x0000 */ unsigned char FullName[16]; /* +0x0008 86 24 00 00 */ }; struct _CMSG_RECIPIENT_ENCRYPTED_KEY_ENCODE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char RecipientPublicKey[24]; /* +0x0008 09 13 00 00 */ unsigned char RecipientId[40]; /* +0x0020 36 13 00 00 */ unsigned char Date[8]; /* +0x0048 37 13 00 00 */ unsigned char pOtherAttr[8]; /* +0x0050 39 13 00 00 */ }; struct _FILE_GET_QUOTA_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long SidLength; /* +0x0004 */ unsigned char Sid[12]; /* +0x0008 0f 1f 00 00 */ }; struct _FILE_PIPE_CLIENT_PROCESS_BUFFER { void *ClientSession; /* +0x0000 */ void *ClientProcess; /* +0x0008 */ }; struct tagEMRSETICMPROFILE { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned long dwFlags; /* +0x0008 */ unsigned long cbName; /* +0x000c */ unsigned long cbData; /* +0x0010 */ unsigned char Data[4]; /* +0x0014 ff 12 00 00 */ }; struct _CERT_GENERAL_SUBTREE { unsigned char Base[24]; /* +0x0000 1c 16 00 00 */ unsigned long dwMinimum; /* +0x0018 */ unsigned char fMaximum[4]; /* +0x001c 74 00 00 00 */ unsigned long dwMaximum; /* +0x0020 */ }; struct _CERT_KEY_CONTEXT { unsigned long cbSize; /* +0x0000 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned long long hNCryptKey; /* +0x0008 */ unsigned long dwKeySpec; /* +0x0010 */ }; struct _SYSTEM_SESSION_PROCESS_INFORMATION { unsigned long SessionId; /* +0x0000 */ unsigned long SizeOfBuf; /* +0x0004 */ void *Buffer; /* +0x0008 */ }; struct _SYSTEM_VA_LIST_INFORMATION { unsigned long long VirtualSize; /* +0x0000 */ unsigned long long VirtualPeak; /* +0x0008 */ unsigned long long VirtualLimit; /* +0x0010 */ unsigned long long AllocationFailures; /* +0x0018 */ }; struct _ABC { unsigned char abcA[4]; /* +0x0000 74 00 00 00 */ unsigned char abcB[4]; /* +0x0004 75 00 00 00 */ unsigned char abcC[4]; /* +0x0008 74 00 00 00 */ }; struct _HTTPSPolicyCallbackData { unsigned long cbStruct; /* +0x0000 */ unsigned long cbSize; /* +0x0000 */ unsigned long dwAuthType; /* +0x0004 */ unsigned long fdwChecks; /* +0x0008 */ unsigned char pwszServerName[8]; /* +0x0010 71 06 00 00 */ }; struct tagOXID_INFO { unsigned long dwTid; /* +0x0000 */ unsigned long dwPid; /* +0x0004 */ unsigned long dwAuthnHint; /* +0x0008 */ unsigned char version[4]; /* +0x000c 95 1f 00 00 */ unsigned char ipidRemUnknown[16]; /* +0x0010 f3 14 00 00 */ unsigned long dwFlags; /* +0x0020 */ unsigned char psa[8]; /* +0x0028 94 1f 00 00 */ }; struct _ACTIVATION_CONTEXT_SECTION_KEYED_DATA_ASSEMBLY_METADATA { unsigned char Information[8]; /* +0x0000 d6 24 00 00 */ void *SectionBase; /* +0x0008 */ unsigned long SectionLength; /* +0x0010 */ void *SectionGlobalDataBase; /* +0x0018 */ unsigned long SectionGlobalDataLength; /* +0x0020 */ }; struct _BCryptBuffer { unsigned long cbBuffer; /* +0x0000 */ unsigned long BufferType; /* +0x0004 */ void *pvBuffer; /* +0x0008 */ }; struct _CRYPT_GET_TIME_VALID_OBJECT_EXTRA_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char iDeltaCrlIndicator[4]; /* +0x0004 74 00 00 00 */ unsigned char pftCacheResync[8]; /* +0x0008 87 17 00 00 */ unsigned char pLastSyncTime[8]; /* +0x0010 87 17 00 00 */ unsigned char pMaxAgeTime[8]; /* +0x0018 87 17 00 00 */ unsigned char pChainPara[8]; /* +0x0020 e0 24 00 00 */ unsigned char pDeltaCrlIndicator[8]; /* +0x0028 4d 13 00 00 */ }; struct tagORPC_EXTENT { unsigned char id[16]; /* +0x0000 f3 14 00 00 */ unsigned long size; /* +0x0010 */ unsigned char data[4]; /* +0x0014 ff 12 00 00 */ }; struct _LDR_DDAG_NODE { unsigned char Modules[16]; /* +0x0000 73 1f 00 00 */ unsigned char ServiceTagList[8]; /* +0x0010 05 1b 00 00 */ unsigned long LoadCount; /* +0x0018 */ unsigned long ReferenceCount; /* +0x001c */ unsigned long DependencyCount; /* +0x0020 */ /* unsigned char Dependencies[0]; +0x0028 2e 19 00 00 */ unsigned char RemovalLink[8]; /* +0x0028 ce 17 00 00 */ unsigned char IncomingDependencies[8]; /* +0x0030 2e 19 00 00 */ unsigned char State[8]; /* +0x0038 e5 24 00 00 */ unsigned char CondenseLink[8]; /* +0x0040 ce 17 00 00 */ unsigned long PreorderNumber; /* +0x0048 */ unsigned long LowestLink; /* +0x004c */ }; struct _LPC_CLIENT_DIED_MSG { unsigned char PortMsg[40]; /* +0x0000 36 20 00 00 */ unsigned char CreateTime[8]; /* +0x0028 43 13 00 00 */ }; struct _wireSAFEARRAY_UNION { unsigned long sfType; /* +0x0000 */ }; struct _wireSAFEARRAY_UNION::__MIDL_IOleAutomationTypes_0001 { /* unsigned char BstrStr[0]; +0x0000 f6 24 00 00 */ /* unsigned char UnknownStr[0]; +0x0000 f7 24 00 00 */ /* unsigned char DispatchStr[0]; +0x0000 f8 24 00 00 */ /* unsigned char VariantStr[0]; +0x0000 f9 24 00 00 */ /* unsigned char RecordStr[0]; +0x0000 fa 24 00 00 */ /* unsigned char HaveIidStr[0]; +0x0000 fb 24 00 00 */ /* unsigned char ByteStr[0]; +0x0000 fc 24 00 00 */ /* unsigned char WordStr[0]; +0x0000 fd 24 00 00 */ /* unsigned char LongStr[0]; +0x0000 fe 24 00 00 */ unsigned char HyperStr[32]; /* +0x0000 ff 24 00 00 */ }; struct _TRANSACTION_NOTIFICATION_MARSHAL_ARGUMENT { unsigned long MarshalCookie; /* +0x0000 */ unsigned char UOW[16]; /* +0x0004 f3 14 00 00 */ }; struct _CSV_INTERNAL_CONTROL_PARAM { unsigned char Operation[8]; /* +0x0000 07 25 00 00 */ long long Unused; /* +0x0008 */ }; struct _MCI_ADDR { unsigned long Address; /* +0x0000 */ unsigned long Reserved; /* +0x0004 */ unsigned long long QuadPart; /* +0x0000 */ }; struct DISPLAYCONFIG_TARGET_PREFERRED_MODE { unsigned char header[20]; /* +0x0000 0d 25 00 00 */ unsigned char width[4]; /* +0x0014 75 00 00 00 */ unsigned char height[8]; /* +0x0018 75 00 00 00 */ unsigned char targetMode[48]; /* +0x0020 0e 25 00 00 */ }; struct tagPOINTER_TOUCH_INFO { unsigned char pointerInfo[88]; /* +0x0000 11 25 00 00 */ unsigned char touchFlags[4]; /* +0x0058 75 00 00 00 */ unsigned char touchMask[4]; /* +0x005c 75 00 00 00 */ unsigned char rcContact[16]; /* +0x0060 7a 14 00 00 */ unsigned char rcContactRaw[16]; /* +0x0070 7a 14 00 00 */ unsigned char orientation[4]; /* +0x0080 75 00 00 00 */ unsigned char pressure[4]; /* +0x0084 75 00 00 00 */ }; struct tagACCESSTIMEOUT { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned long iTimeOutMSec; /* +0x0008 */ }; struct __MIDL___MIDL_itf_wtypes_0000_0001_0001 { unsigned long tyspec; /* +0x0000 */ }; struct __MIDL___MIDL_itf_wtypes_0000_0001_0001::__MIDL___MIDL_itf_wtypes_0000_0001_0005 { /* unsigned char clsid[0]; +0x0000 f3 14 00 00 */ /* unsigned char pFileExt[0]; +0x0000 71 06 00 00 */ /* unsigned char pMimeType[0]; +0x0000 71 06 00 00 */ /* unsigned char pProgId[0]; +0x0000 71 06 00 00 */ unsigned char pFileName[32]; /* +0x0000 71 06 00 00 */ }; struct __MIDL___MIDL_itf_wtypes_0000_0001_0001::__MIDL___MIDL_itf_wtypes_0000_0001_0005:: { unsigned char ObjectId[16]; /* +0x0000 f3 14 00 00 */ unsigned char PolicyId[16]; /* +0x0010 f3 14 00 00 */ }; struct __MIDL___MIDL_itf_wtypes_0000_0001_0001::__MIDL___MIDL_itf_wtypes_0000_0001_0005:: { unsigned char pPackageName[8]; /* +0x0000 71 06 00 00 */ unsigned char PolicyId[16]; /* +0x0008 f3 14 00 00 */ }; struct _CERT_POLICY_QUALIFIER_NOTICE_REFERENCE { char *pszOrganization; /* +0x0000 */ unsigned long cNoticeNumbers; /* +0x0008 */ unsigned char rgNoticeNumbers[8]; /* +0x0010 74 06 00 00 */ }; struct _CERT_REVOCATION_CRL_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char pBaseCrlContext[8]; /* +0x0008 0c 20 00 00 */ unsigned char pDeltaCrlContext[8]; /* +0x0010 0c 20 00 00 */ unsigned char pCrlEntry[8]; /* +0x0018 3d 16 00 00 */ unsigned char fDeltaCrlEntry[8]; /* +0x0020 74 00 00 00 */ }; struct _CERT_CHAIN_POLICY_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ void *pvExtraPolicyPara; /* +0x0008 */ }; struct _FILE_MAILSLOT_PEEK_BUFFER { unsigned long ReadDataAvailable; /* +0x0000 */ unsigned long NumberOfMessages; /* +0x0004 */ unsigned long MessageLength; /* +0x0008 */ }; struct _userFLAG_STGMEDIUM { long ContextFlags; /* +0x0000 */ long fPassOwnership; /* +0x0004 */ unsigned char Stgmed[8]; /* +0x0008 49 23 00 00 */ }; struct _wireSAFEARRAY { unsigned short cDims; /* +0x0000 */ unsigned short fFeatures; /* +0x0002 */ unsigned long cbElements; /* +0x0004 */ unsigned long cLocks; /* +0x0008 */ unsigned char uArrayStructs[40]; /* +0x0010 45 25 00 00 */ unsigned char rgsabound[8]; /* +0x0038 47 25 00 00 */ }; struct _CMC_TAGGED_REQUEST { unsigned long dwTaggedRequestChoice; /* +0x0000 */ unsigned char pTaggedCertRequest[8]; /* +0x0008 4d 25 00 00 */ }; struct _CMS_KEY_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char Algid[4]; /* +0x0004 75 00 00 00 */ unsigned char *pbOID; /* +0x0008 */ unsigned long cbOID; /* +0x0010 */ }; struct _CTL_VERIFY_USAGE_PARA { unsigned long cbSize; /* +0x0000 */ unsigned char ListIdentifier[16]; /* +0x0008 08 13 00 00 */ unsigned long cCtlStore; /* +0x0018 */ unsigned char rghCtlStore[8]; /* +0x0020 55 13 00 00 */ unsigned long cSignerStore; /* +0x0028 */ unsigned char rghSignerStore[8]; /* +0x0030 55 13 00 00 */ }; struct _DRAGINFOW { unsigned char uSize[4]; /* +0x0000 75 00 00 00 */ unsigned char pt[8]; /* +0x0004 a1 14 00 00 */ unsigned char fNC[4]; /* +0x000c 74 00 00 00 */ unsigned char lpFileList[8]; /* +0x0010 71 06 00 00 */ unsigned long grfKeyState; /* +0x0018 */ }; struct threadlocaleinfostruct { unsigned char refcount[4]; /* +0x0000 74 00 00 00 */ unsigned char lc_codepage[4]; /* +0x0004 75 00 00 00 */ unsigned char lc_collate_cp[4]; /* +0x0008 75 00 00 00 */ unsigned char lc_handle[24]; /* +0x000c d7 1f 00 00 */ unsigned char lc_id[316]; /* +0x0024 5b 25 00 00 */ }; struct _CMSG_KEY_TRANS_ENCRYPT_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwRecipientIndex; /* +0x0004 */ unsigned char KeyEncryptionAlgorithm[24]; /* +0x0008 68 14 00 00 */ unsigned char EncryptedKey[16]; /* +0x0020 08 13 00 00 */ unsigned long dwFlags; /* +0x0030 */ }; struct _MESSAGE_RESOURCE_ENTRY { unsigned short Length; /* +0x0000 */ unsigned short Flags; /* +0x0002 */ unsigned char Text[2]; /* +0x0004 ff 12 00 00 */ }; struct _WNF_PUBLISH_DESCRIPTOR { unsigned char StateName[8]; /* +0x0000 f8 13 00 00 */ unsigned char TypeId[8]; /* +0x0008 67 1f 00 00 */ unsigned char StateData[8]; /* +0x0010 4f 19 00 00 */ unsigned long StateDataLength; /* +0x0018 */ }; struct _CRYPT_RETRIEVE_AUX_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char pLastSyncTime[8]; /* +0x0008 87 17 00 00 */ unsigned long dwMaxUrlRetrievalByteCount; /* +0x0010 */ unsigned char pPreFetchInfo[8]; /* +0x0018 71 25 00 00 */ unsigned char pFlushInfo[8]; /* +0x0020 73 25 00 00 */ unsigned char ppResponseInfo[8]; /* +0x0028 76 25 00 00 */ unsigned char pwszCacheFileNamePrefix[8]; /* +0x0030 71 06 00 00 */ unsigned char pftCacheResync[8]; /* +0x0038 87 17 00 00 */ unsigned char fProxyCacheRetrieval[4]; /* +0x0040 74 00 00 00 */ unsigned long dwHttpStatusCode; /* +0x0044 */ }; struct _MEMORY_WORKING_SET_INFORMATION { unsigned long long NumberOfEntries; /* +0x0000 */ unsigned char WorkingSetInfo[8]; /* +0x0008 7b 25 00 00 */ }; struct tagPOLYTEXTW { unsigned char x[4]; /* +0x0000 74 00 00 00 */ unsigned char y[4]; /* +0x0004 74 00 00 00 */ unsigned char n[8]; /* +0x0008 75 00 00 00 */ unsigned char lpstr[8]; /* +0x0010 cb 13 00 00 */ unsigned char uiFlags[4]; /* +0x0018 75 00 00 00 */ unsigned char rcl[20]; /* +0x001c 7a 14 00 00 */ unsigned char pdx[8]; /* +0x0030 74 06 00 00 */ }; struct tagSOLE_AUTHENTICATION_INFO { unsigned long dwAuthnSvc; /* +0x0000 */ unsigned long dwAuthzSvc; /* +0x0004 */ void *pAuthInfo; /* +0x0008 */ }; struct _BCRYPT_PSS_PADDING_INFO { unsigned char pszAlgId[8]; /* +0x0000 cb 13 00 00 */ unsigned long cbSalt; /* +0x0008 */ }; struct _CRYPT_OID_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char pszOID[8]; /* +0x0008 79 14 00 00 */ unsigned char pwszName[8]; /* +0x0010 cb 13 00 00 */ unsigned long dwGroupId; /* +0x0018 */ unsigned long dwValue; /* +0x001c */ /* unsigned char Algid[0]; +0x001c 75 00 00 00 */ unsigned long dwLength; /* +0x001c */ unsigned char ExtraInfo[16]; /* +0x0020 08 13 00 00 */ }; struct _PLUGPLAY_CONTROL_DEVICE_CONTROL_DATA { unsigned char DeviceInstance[16]; /* +0x0000 e3 12 00 00 */ unsigned long Flags; /* +0x0010 */ }; struct _CRYPT_RSAES_OAEP_PARAMETERS { unsigned char HashAlgorithm[24]; /* +0x0000 68 14 00 00 */ unsigned char MaskGenAlgorithm[32]; /* +0x0018 b1 23 00 00 */ unsigned char PSourceAlgorithm[24]; /* +0x0038 91 25 00 00 */ }; struct _SYSTEM_CALL_TIME_INFORMATION { unsigned long Length; /* +0x0000 */ unsigned long TotalCalls; /* +0x0004 */ unsigned char TimeOfCalls[8]; /* +0x0008 98 25 00 00 */ }; struct _TRANSACTION_NOTIFICATION_SAVEPOINT_ARGUMENT { unsigned long SavepointId; /* +0x0000 */ }; struct tagGESTURENOTIFYSTRUCT { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned char hwndTarget[8]; /* +0x0008 f7 12 00 00 */ unsigned char ptsLocation[4]; /* +0x0010 45 23 00 00 */ unsigned long dwInstanceID; /* +0x0014 */ }; struct _RETRIEVAL_POINTER_BASE { unsigned char FileAreaOffset[8]; /* +0x0000 43 13 00 00 */ }; struct _CERT_SELECT_CRITERIA { unsigned long dwType; /* +0x0000 */ unsigned long cPara; /* +0x0004 */ unsigned char ppPara[8]; /* +0x0008 55 13 00 00 */ }; struct _FILE_PATH { unsigned long Version; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned long Type; /* +0x0008 */ unsigned char FilePath[4]; /* +0x000c ff 12 00 00 */ }; struct tagSTYLEBUFW { unsigned long dwStyle; /* +0x0000 */ unsigned char szDescription[64]; /* +0x0004 bf 15 00 00 */ }; struct _IMAGE_THUNK_DATA32:: { unsigned long ForwarderString; /* +0x0000 */ unsigned long Function; /* +0x0000 */ unsigned long Ordinal; /* +0x0000 */ unsigned long AddressOfData; /* +0x0000 */ }; struct _SYSTEM_HYPERVISOR_QUERY_INFORMATION { unsigned char HypervisorConnected; /* +0x0000 */ unsigned char Spare0[7]; /* +0x0001 d7 25 00 00 */ unsigned long long EnabledAddressSpaceEnlightenments; /* +0x0008 */ }; struct _XMIT_ROUTINE_QUINTUPLE { unsigned char pfnTranslateToXmit[8]; /* +0x0000 da 25 00 00 */ unsigned char pfnTranslateFromXmit[8]; /* +0x0008 da 25 00 00 */ unsigned char pfnFreeXmit[8]; /* +0x0010 da 25 00 00 */ unsigned char pfnFreeInst[8]; /* +0x0018 da 25 00 00 */ }; struct _CERT_REVOCATION_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwRevocationResult; /* +0x0004 */ unsigned char pszRevocationOid[8]; /* +0x0008 79 14 00 00 */ void *pvOidSpecificInfo; /* +0x0010 */ unsigned char fHasFreshnessTime[4]; /* +0x0018 74 00 00 00 */ unsigned long dwFreshnessTime; /* +0x001c */ unsigned char pCrlInfo[8]; /* +0x0020 de 25 00 00 */ }; struct KnownClsidAndScope { unsigned char clsid[16]; /* +0x0000 f3 14 00 00 */ unsigned long registrationScope; /* +0x0010 */ }; struct _nlsversioninfo { unsigned long dwNLSVersionInfoSize; /* +0x0000 */ unsigned long dwNLSVersion; /* +0x0004 */ unsigned long dwDefinedVersion; /* +0x0008 */ unsigned long dwEffectiveId; /* +0x000c */ unsigned char guidCustomVersion[16]; /* +0x0010 f3 14 00 00 */ }; struct _RPC_SECURITY_QOS_V5_A { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ unsigned long AdditionalSecurityInfoType; /* +0x0010 */ }; struct _CRYPT_PSOURCE_ALGORITHM { char *pszObjId; /* +0x0000 */ unsigned char EncodingParameters[16]; /* +0x0008 08 13 00 00 */ }; struct _TRANSACTION_PROPERTIES_INFORMATION { unsigned long IsolationLevel; /* +0x0000 */ unsigned long IsolationFlags; /* +0x0004 */ unsigned char Timeout[8]; /* +0x0008 43 13 00 00 */ unsigned long Outcome; /* +0x0010 */ unsigned long DescriptionLength; /* +0x0014 */ unsigned char Description[8]; /* +0x0018 0a 14 00 00 */ }; struct _stat64 { unsigned char st_dev[4]; /* +0x0000 75 00 00 00 */ unsigned short st_ino; /* +0x0004 */ unsigned short st_mode; /* +0x0006 */ short st_nlink; /* +0x0008 */ short st_uid; /* +0x000a */ short st_gid; /* +0x000c */ unsigned char st_rdev[8]; /* +0x0010 75 00 00 00 */ long long st_size; /* +0x0018 */ long long st_atime; /* +0x0020 */ long long st_mtime; /* +0x0028 */ long long st_ctime; /* +0x0030 */ }; struct tagMETAFILEPICT { long mm; /* +0x0000 */ long xExt; /* +0x0004 */ long yExt; /* +0x0008 */ unsigned char hMF[8]; /* +0x0010 01 26 00 00 */ }; struct _CMSG_CNG_CONTENT_DECRYPT_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char ContentEncryptionAlgorithm[24]; /* +0x0008 68 14 00 00 */ unsigned char pfnAlloc[8]; /* +0x0020 ff 16 00 00 */ unsigned char pfnFree[8]; /* +0x0028 d2 13 00 00 */ unsigned long long hNCryptKey; /* +0x0030 */ unsigned char *pbContentEncryptKey; /* +0x0038 */ unsigned long cbContentEncryptKey; /* +0x0040 */ void *hCNGContentEncryptKey; /* +0x0048 */ unsigned char *pbCNGContentEncryptKeyObject; /* +0x0050 */ }; struct _EISA_IRQ_DESCRIPTOR { /* unsigned char Interrupt[0]; +0x0000 ea 13 00 00 */ /* unsigned char Reserved[0]; +0x0000 0e 26 00 00 */ /* unsigned char LevelTriggered[0]; +0x0000 a6 1e 00 00 */ /* unsigned char Shared[0]; +0x0000 a7 1e 00 00 */ unsigned char MoreEntries[1]; /* +0x0000 a8 1e 00 00 */ }; struct _FOCUS_EVENT_RECORD { unsigned char bSetFocus[4]; /* +0x0000 74 00 00 00 */ }; struct _CRYPT_HASH_MESSAGE_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwMsgEncodingType; /* +0x0004 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned char HashAlgorithm[24]; /* +0x0010 68 14 00 00 */ void *pvHashAuxInfo; /* +0x0028 */ }; struct _SHELLEXECUTEINFOA { unsigned long cbSize; /* +0x0000 */ unsigned long fMask; /* +0x0004 */ unsigned char hwnd[8]; /* +0x0008 f7 12 00 00 */ unsigned char lpVerb[8]; /* +0x0010 79 14 00 00 */ unsigned char lpFile[8]; /* +0x0018 79 14 00 00 */ unsigned char lpParameters[8]; /* +0x0020 79 14 00 00 */ unsigned char lpDirectory[8]; /* +0x0028 79 14 00 00 */ unsigned char nShow[8]; /* +0x0030 74 00 00 00 */ unsigned char hInstApp[8]; /* +0x0038 d1 14 00 00 */ void *lpIDList; /* +0x0040 */ unsigned char lpClass[8]; /* +0x0048 79 14 00 00 */ unsigned char hkeyClass[8]; /* +0x0050 81 19 00 00 */ unsigned long dwHotKey; /* +0x0058 */ void *hIcon; /* +0x0060 */ void *hMonitor; /* +0x0060 */ void *hProcess; /* +0x0068 */ }; struct _SYSTEM_PROCESSOR_PERFORMANCE_DISTRIBUTION { unsigned long ProcessorCount; /* +0x0000 */ unsigned char Offsets[4]; /* +0x0004 fc 12 00 00 */ }; struct _FILE_STANDARD_INFO { unsigned char AllocationSize[8]; /* +0x0000 43 13 00 00 */ unsigned char EndOfFile[8]; /* +0x0008 43 13 00 00 */ unsigned long NumberOfLinks; /* +0x0010 */ unsigned char DeletePending; /* +0x0014 */ unsigned char Directory; /* +0x0015 */ }; struct _wireSAFEARR_VARIANT { unsigned long Size; /* +0x0000 */ unsigned char aVariant[8]; /* +0x0008 23 26 00 00 */ }; struct _CERT_BASIC_CONSTRAINTS_INFO { unsigned char SubjectType[24]; /* +0x0000 09 13 00 00 */ unsigned char fPathLenConstraint[4]; /* +0x0018 74 00 00 00 */ unsigned long dwPathLenConstraint; /* +0x001c */ unsigned long cSubtreesConstraint; /* +0x0020 */ unsigned char rgSubtreesConstraint[8]; /* +0x0028 4d 13 00 00 */ }; struct _SECTION_IMAGE_INFORMATION { void *TransferAddress; /* +0x0000 */ unsigned long ZeroBits; /* +0x0008 */ unsigned long long MaximumStackSize; /* +0x0010 */ unsigned long long CommittedStackSize; /* +0x0018 */ unsigned long SubSystemType; /* +0x0020 */ unsigned short SubSystemMinorVersion; /* +0x0024 */ unsigned short SubSystemMajorVersion; /* +0x0026 */ unsigned long SubSystemVersion; /* +0x0024 */ unsigned long GpValue; /* +0x0028 */ unsigned short ImageCharacteristics; /* +0x002c */ unsigned short DllCharacteristics; /* +0x002e */ unsigned short Machine; /* +0x0030 */ unsigned char ImageContainsCode; /* +0x0032 */ unsigned char ImageFlags; /* +0x0033 */ /* unsigned char ComPlusNativeReady[0]; +0x0033 a2 1e 00 00 */ /* unsigned char ComPlusILOnly[0]; +0x0033 a3 1e 00 00 */ /* unsigned char ImageDynamicallyRelocated[0]; +0x0033 a4 1e 00 00 */ /* unsigned char ImageMappedFlat[0]; +0x0033 28 26 00 00 */ /* unsigned char BaseBelow4gb[0]; +0x0033 0e 26 00 00 */ unsigned char Reserved[1]; /* +0x0033 29 26 00 00 */ unsigned long LoaderFlags; /* +0x0034 */ unsigned long ImageFileSize; /* +0x0038 */ unsigned long CheckSum; /* +0x003c */ }; struct tagHELPWININFOW { unsigned char wStructSize[4]; /* +0x0000 74 00 00 00 */ unsigned char x[4]; /* +0x0004 74 00 00 00 */ unsigned char y[4]; /* +0x0008 74 00 00 00 */ unsigned char dx[4]; /* +0x000c 74 00 00 00 */ unsigned char dy[4]; /* +0x0010 74 00 00 00 */ unsigned char wMax[4]; /* +0x0014 74 00 00 00 */ unsigned char rgchMember[4]; /* +0x0018 2c 26 00 00 */ }; struct _HYPER_SIZEDARR { unsigned long clSize; /* +0x0000 */ long long *pData; /* +0x0008 */ }; struct tagCANDIDATEFORM { unsigned long dwIndex; /* +0x0000 */ unsigned long dwStyle; /* +0x0004 */ unsigned char ptCurrentPos[8]; /* +0x0008 a1 14 00 00 */ unsigned char rcArea[16]; /* +0x0010 7a 14 00 00 */ }; struct _BCRYPT_OAEP_PADDING_INFO { unsigned char pszAlgId[8]; /* +0x0000 cb 13 00 00 */ unsigned char *pbLabel; /* +0x0008 */ unsigned long cbLabel; /* +0x0010 */ }; struct _NTFS_STATISTICS { unsigned long LogFileFullExceptions; /* +0x0000 */ unsigned long OtherExceptions; /* +0x0004 */ unsigned long MftReads; /* +0x0008 */ unsigned long MftReadBytes; /* +0x000c */ unsigned long MftWrites; /* +0x0010 */ unsigned long MftWriteBytes; /* +0x0014 */ }; struct _SYSTEM_SESSION_POOLTAG_INFORMATION { unsigned long long NextEntryOffset; /* +0x0000 */ unsigned long SessionId; /* +0x0008 */ unsigned long Count; /* +0x000c */ unsigned char TagInfo[40]; /* +0x0010 2d 15 00 00 */ }; struct _RTL_VERIFIER_THUNK_DESCRIPTOR { char *ThunkName; /* +0x0000 */ void *ThunkOldAddress; /* +0x0008 */ void *ThunkNewAddress; /* +0x0010 */ }; struct tagMULTIKEYHELPA { unsigned long mkSize; /* +0x0000 */ char mkKeylist; /* +0x0004 */ unsigned char szKeyphrase[3]; /* +0x0005 1e 24 00 00 */ }; struct tagBinaryParam { void *Buffer; /* +0x0000 */ short Size; /* +0x0008 */ }; struct _OCSP_REQUEST_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char pRequestorName[8]; /* +0x0008 23 18 00 00 */ unsigned long cRequestEntry; /* +0x0010 */ unsigned char rgRequestEntry[8]; /* +0x0018 5e 26 00 00 */ unsigned long cExtension; /* +0x0020 */ unsigned char rgExtension[8]; /* +0x0028 3f 16 00 00 */ }; struct _PROCESS_CYCLE_TIME_INFORMATION { unsigned long long AccumulatedCycles; /* +0x0000 */ unsigned long long CurrentCycleCount; /* +0x0008 */ }; struct _TRANSACTIONMANAGER_RECOVERY_INFORMATION { unsigned long long LastRecoveredLsn; /* +0x0000 */ }; struct _HEAP_BLOCK_EXTRA_INFORMATION { unsigned char Next; /* +0x0000 */ unsigned long Type; /* +0x0004 */ unsigned long long Size; /* +0x0008 */ }; struct tagAUDIODESCRIPTION { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char Enabled[4]; /* +0x0004 74 00 00 00 */ unsigned long Locale; /* +0x0008 */ }; struct tagRID_DEVICE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwType; /* +0x0004 */ /* unsigned char mouse[0]; +0x0008 86 26 00 00 */ /* unsigned char keyboard[0]; +0x0008 87 26 00 00 */ unsigned char hid[24]; /* +0x0008 88 26 00 00 */ }; struct _CMC_ADD_ATTRIBUTES_INFO { unsigned long dwCmcDataReference; /* +0x0000 */ unsigned long cCertReference; /* +0x0004 */ unsigned long *rgdwCertReference; /* +0x0008 */ unsigned long cAttribute; /* +0x0010 */ unsigned char rgAttribute[8]; /* +0x0018 e3 13 00 00 */ }; struct _SHNAMEMAPPINGA { char *pszOldPath; /* +0x0000 */ char *pszNewPath; /* +0x0008 */ unsigned char cchOldPath[4]; /* +0x0010 74 00 00 00 */ unsigned char cchNewPath[4]; /* +0x0014 74 00 00 00 */ }; struct _ImageArchitectureEntry { unsigned long FixupInstRVA; /* +0x0000 */ unsigned long NewInst; /* +0x0004 */ }; struct IMPORT_OBJECT_HEADER { unsigned short Sig1; /* +0x0000 */ unsigned short Sig2; /* +0x0002 */ unsigned short Version; /* +0x0004 */ unsigned short Machine; /* +0x0006 */ unsigned long TimeDateStamp; /* +0x0008 */ unsigned long SizeOfData; /* +0x000c */ unsigned short Ordinal; /* +0x0010 */ unsigned short Hint; /* +0x0010 */ /* unsigned char Type[0]; +0x0012 aa 26 00 00 */ /* unsigned char NameType[0]; +0x0012 ab 26 00 00 */ unsigned char Reserved[2]; /* +0x0012 ac 26 00 00 */ }; struct _CERT_CREATE_CONTEXT_PARA { unsigned long cbSize; /* +0x0000 */ unsigned char pfnFree[8]; /* +0x0008 d2 13 00 00 */ void *pvFree; /* +0x0010 */ unsigned char pfnSort[8]; /* +0x0018 d3 26 00 00 */ void *pvSort; /* +0x0020 */ }; struct tagInterfaceData { unsigned long ulCntData; /* +0x0000 */ unsigned char abData[1024]; /* +0x0004 d6 26 00 00 */ }; struct _XSAVE_VENDOR { unsigned char VendorId[16]; /* +0x0000 28 13 00 00 */ unsigned char SupportedCpu[40]; /* +0x0010 d9 26 00 00 */ }; struct _CRYPT_TIME_STAMP_REQUEST_INFO { char *pszTimeStampAlgorithm; /* +0x0000 */ char *pszContentType; /* +0x0008 */ unsigned char Content[16]; /* +0x0010 08 13 00 00 */ unsigned long cAttribute; /* +0x0020 */ unsigned char rgAttribute[8]; /* +0x0028 e3 13 00 00 */ }; struct _RTL_CRITICAL_SECTION32 { unsigned long DebugInfo; /* +0x0000 */ long LockCount; /* +0x0004 */ long RecursionCount; /* +0x0008 */ unsigned long OwningThread; /* +0x000c */ unsigned long LockSemaphore; /* +0x0010 */ unsigned long SpinCount; /* +0x0014 */ }; struct _HEAP_REGION_INFORMATION { unsigned long long Address; /* +0x0000 */ unsigned long long ReserveSize; /* +0x0008 */ unsigned long long CommitSize; /* +0x0010 */ unsigned long long FirstRangeInformationOffset; /* +0x0018 */ unsigned long long NextRegionInformationOffset; /* +0x0020 */ }; struct _CERT_AUTHORITY_KEY_ID2_INFO { unsigned char KeyId[16]; /* +0x0000 08 13 00 00 */ unsigned char AuthorityCertIssuer[16]; /* +0x0010 86 24 00 00 */ unsigned char AuthorityCertSerialNumber[16]; /* +0x0020 08 13 00 00 */ }; struct _CERT_LOGOTYPE_INFO { unsigned long dwLogotypeInfoChoice; /* +0x0000 */ /* unsigned char pLogotypeDirectInfo[0]; +0x0008 e5 26 00 00 */ unsigned char pLogotypeIndirectInfo[8]; /* +0x0008 e7 26 00 00 */ }; struct _COUNTER_READING { unsigned char Type[4]; /* +0x0000 e3 19 00 00 */ unsigned long Index; /* +0x0004 */ unsigned long long Start; /* +0x0008 */ unsigned long long Total; /* +0x0010 */ }; struct _SEMAPHORE_BASIC_INFORMATION { long CurrentCount; /* +0x0000 */ long MaximumCount; /* +0x0004 */ }; struct _QUERY_PERFORMANCE_COUNTER_FLAGS { /* unsigned char KernelTransition[0]; +0x0000 94 13 00 00 */ /* unsigned char Reserved[0]; +0x0000 95 13 00 00 */ unsigned long ul; /* +0x0000 */ }; struct tagLOGPALETTE { unsigned short palVersion; /* +0x0000 */ unsigned short palNumEntries; /* +0x0002 */ unsigned char palPalEntry[4]; /* +0x0004 f2 26 00 00 */ }; struct _ALPC_PORT_ATTRIBUTES { unsigned long Flags; /* +0x0000 */ unsigned char SecurityQos[12]; /* +0x0004 fc 26 00 00 */ unsigned long long MaxMessageLength; /* +0x0010 */ unsigned long long MemoryBandwidth; /* +0x0018 */ unsigned long long MaxPoolUsage; /* +0x0020 */ unsigned long long MaxSectionSize; /* +0x0028 */ unsigned long long MaxViewSize; /* +0x0030 */ unsigned long long MaxTotalSectionSize; /* +0x0038 */ unsigned long DupObjectTypes; /* +0x0040 */ unsigned long Reserved; /* +0x0044 */ }; struct _SYSTEM_HANDLE_INFORMATION { unsigned long NumberOfHandles; /* +0x0000 */ unsigned char Handles[24]; /* +0x0008 01 27 00 00 */ }; struct tagCBT_CREATEWNDW { unsigned char lpcs[8]; /* +0x0000 07 27 00 00 */ unsigned char hwndInsertAfter[8]; /* +0x0008 f7 12 00 00 */ }; struct tagMOUSEINPUT { long dx; /* +0x0000 */ long dy; /* +0x0004 */ unsigned long mouseData; /* +0x0008 */ unsigned long dwFlags; /* +0x000c */ unsigned long time; /* +0x0010 */ unsigned long long dwExtraInfo; /* +0x0018 */ }; struct tagSTGMEDIUM { unsigned long tymed; /* +0x0000 */ /* unsigned char hBitmap[0]; +0x0008 18 18 00 00 */ void *hMetaFilePict; /* +0x0008 */ /* unsigned char hEnhMetaFile[0]; +0x0008 1e 27 00 00 */ void *hGlobal; /* +0x0008 */ /* unsigned char lpszFileName[0]; +0x0008 71 06 00 00 */ /* unsigned char pstm[0]; +0x0008 20 27 00 00 */ unsigned char pstg[8]; /* +0x0008 19 16 00 00 */ unsigned char pUnkForRelease[8]; /* +0x0010 93 17 00 00 */ }; struct _FSCTL_OFFLOAD_WRITE_INPUT { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long long FileOffset; /* +0x0008 */ unsigned long long CopyLength; /* +0x0010 */ unsigned long long TransferOffset; /* +0x0018 */ unsigned char Token[512]; /* +0x0020 c9 19 00 00 */ }; struct _stat { unsigned char st_dev[4]; /* +0x0000 75 00 00 00 */ unsigned short st_ino; /* +0x0004 */ unsigned short st_mode; /* +0x0006 */ short st_nlink; /* +0x0008 */ short st_uid; /* +0x000a */ short st_gid; /* +0x000c */ unsigned char st_rdev[4]; /* +0x0010 75 00 00 00 */ long st_size; /* +0x0014 */ long long st_atime; /* +0x0018 */ long long st_mtime; /* +0x0020 */ long long st_ctime; /* +0x0028 */ }; struct tagEMRSETWORLDTRANSFORM { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char xform[24]; /* +0x0008 dc 12 00 00 */ }; struct _CRYPT_HASH_INFO { unsigned char HashAlgorithm[24]; /* +0x0000 68 14 00 00 */ unsigned char Hash[16]; /* +0x0018 08 13 00 00 */ }; struct _PROCESS_MEMORY_ALLOCATION_MODE { unsigned long Flags; /* +0x0000 */ /* unsigned char TopDown[0]; +0x0000 94 13 00 00 */ unsigned char Reserved[4]; /* +0x0000 95 13 00 00 */ }; struct _FILE_FULL_EA_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned char Flags; /* +0x0004 */ unsigned char EaNameLength; /* +0x0005 */ unsigned short EaValueLength; /* +0x0006 */ unsigned char EaName[4]; /* +0x0008 1e 24 00 00 */ }; struct _TXFS_WRITE_BACKUP_INFORMATION { unsigned char Buffer[1]; /* +0x0000 ff 12 00 00 */ }; struct _PERFORMANCE_DATA { unsigned short Size; /* +0x0000 */ unsigned char Version; /* +0x0002 */ unsigned char HwCountersCount; /* +0x0003 */ unsigned long ContextSwitchCount; /* +0x0004 */ unsigned long long WaitReasonBitMap; /* +0x0008 */ unsigned long long CycleTime; /* +0x0010 */ unsigned long RetryCount; /* +0x0018 */ unsigned long Reserved; /* +0x001c */ unsigned char HwCounters[256]; /* +0x0020 51 27 00 00 */ }; struct tagENUMUILANG { unsigned long NumOfEnumUILang; /* +0x0000 */ unsigned long SizeOfEnumUIBuffer; /* +0x0004 */ unsigned short *pEnumUIBuffer; /* +0x0008 */ }; struct _CRYPT_OBJID_TABLE { unsigned long dwAlgId; /* +0x0000 */ unsigned char pszObjId[8]; /* +0x0008 79 14 00 00 */ }; struct _BOOT_AREA_INFO { unsigned long BootSectorCount; /* +0x0000 */ }; struct _HARDERROR_MSG { unsigned char h[40]; /* +0x0000 36 20 00 00 */ long Status; /* +0x0028 */ unsigned char ErrorTime[8]; /* +0x0030 43 13 00 00 */ unsigned long ValidResponseOptions; /* +0x0038 */ unsigned long Response; /* +0x003c */ unsigned long NumberOfParameters; /* +0x0040 */ unsigned long UnicodeStringParameterMask; /* +0x0044 */ unsigned char Parameters[40]; /* +0x0048 54 17 00 00 */ }; struct _PLUGPLAY_CONTROL_CLASS_ASSOCIATION_DATA { unsigned char DeviceInstance[16]; /* +0x0000 e3 12 00 00 */ unsigned char InterfaceGuid[8]; /* +0x0010 61 16 00 00 */ unsigned char Reference[16]; /* +0x0018 e3 12 00 00 */ unsigned char Register; /* +0x0028 */ unsigned char SymLink[8]; /* +0x0030 71 06 00 00 */ unsigned long SymLinkLength; /* +0x0038 */ }; struct _RTL_BALANCED_NODE { /* unsigned char Children[0]; +0x0000 70 27 00 00 */ unsigned char Left[8]; /* +0x0000 40 20 00 00 */ unsigned char Right[8]; /* +0x0008 40 20 00 00 */ /* unsigned char Red[0]; +0x0010 a2 1e 00 00 */ /* unsigned char Balance[0]; +0x0010 f7 1e 00 00 */ unsigned long long ParentValue; /* +0x0010 */ }; struct tagICONMETRICSW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char iHorzSpacing[4]; /* +0x0004 74 00 00 00 */ unsigned char iVertSpacing[4]; /* +0x0008 74 00 00 00 */ unsigned char iTitleWrap[4]; /* +0x000c 74 00 00 00 */ unsigned char lfFont[92]; /* +0x0010 bd 16 00 00 */ }; struct _ACTIVATION_CONTEXT_BASIC_INFORMATION { /* unsigned char ActivationContext[0]; +0x0000 7d 17 00 00 */ void *hActCtx; /* +0x0000 */ unsigned long Flags; /* +0x0008 */ unsigned long dwFlags; /* +0x0008 */ }; struct _CERT_AUTHORITY_KEY_ID_INFO { unsigned char KeyId[16]; /* +0x0000 08 13 00 00 */ unsigned char CertIssuer[16]; /* +0x0010 08 13 00 00 */ unsigned char CertSerialNumber[16]; /* +0x0020 08 13 00 00 */ }; struct _CERT_PAIR { unsigned char Forward[16]; /* +0x0000 08 13 00 00 */ unsigned char Reverse[16]; /* +0x0010 08 13 00 00 */ }; struct _CONSOLE_SCREEN_BUFFER_INFOEX { unsigned long cbSize; /* +0x0000 */ unsigned char dwSize[4]; /* +0x0004 1b 18 00 00 */ unsigned char dwCursorPosition[4]; /* +0x0008 1b 18 00 00 */ unsigned short wAttributes; /* +0x000c */ unsigned char srWindow[8]; /* +0x000e 86 27 00 00 */ unsigned char dwMaximumWindowSize[4]; /* +0x0016 1b 18 00 00 */ unsigned short wPopupAttributes; /* +0x001a */ unsigned char bFullscreenSupported[4]; /* +0x001c 74 00 00 00 */ unsigned char ColorTable[64]; /* +0x0020 87 27 00 00 */ }; struct _ENUM_SERVICE_STATUSW { unsigned char lpServiceName[8]; /* +0x0000 71 06 00 00 */ unsigned char lpDisplayName[8]; /* +0x0008 71 06 00 00 */ unsigned char ServiceStatus[32]; /* +0x0010 8a 27 00 00 */ }; struct _FILE_IO_PRIORITY_HINT_INFORMATION { unsigned char PriorityHint[4]; /* +0x0000 a1 27 00 00 */ }; struct _SECTION_IMAGE_INFORMATION64 { unsigned long long TransferAddress; /* +0x0000 */ unsigned long ZeroBits; /* +0x0008 */ unsigned long long MaximumStackSize; /* +0x0010 */ unsigned long long CommittedStackSize; /* +0x0018 */ unsigned long SubSystemType; /* +0x0020 */ unsigned short SubSystemMinorVersion; /* +0x0024 */ unsigned short SubSystemMajorVersion; /* +0x0026 */ unsigned long SubSystemVersion; /* +0x0024 */ unsigned long GpValue; /* +0x0028 */ unsigned short ImageCharacteristics; /* +0x002c */ unsigned short DllCharacteristics; /* +0x002e */ unsigned short Machine; /* +0x0030 */ unsigned char ImageContainsCode; /* +0x0032 */ unsigned char ImageFlags; /* +0x0033 */ /* unsigned char ComPlus[0]; +0x0033 a2 1e 00 00 */ /* unsigned char ImageDynamicallyRelocated[0]; +0x0033 a3 1e 00 00 */ unsigned char Reserved[1]; /* +0x0033 3a 20 00 00 */ unsigned long LoaderFlags; /* +0x0034 */ unsigned long ImageFileSize; /* +0x0038 */ unsigned long CheckSum; /* +0x003c */ }; struct _LINK_TRACKING_INFORMATION { unsigned char Type[4]; /* +0x0000 ac 27 00 00 */ unsigned char VolumeId[16]; /* +0x0004 33 1c 00 00 */ }; struct _STARTUPINFOEXA { unsigned char StartupInfo[104]; /* +0x0000 b1 27 00 00 */ unsigned char lpAttributeList[8]; /* +0x0068 7a 1e 00 00 */ }; struct _devicemodeA { unsigned char dmDeviceName[32]; /* +0x0000 f7 17 00 00 */ unsigned short dmSpecVersion; /* +0x0020 */ unsigned short dmDriverVersion; /* +0x0022 */ unsigned short dmSize; /* +0x0024 */ unsigned short dmDriverExtra; /* +0x0026 */ unsigned long dmFields; /* +0x0028 */ short dmOrientation; /* +0x002c */ short dmPaperSize; /* +0x002e */ short dmPaperLength; /* +0x0030 */ short dmPaperWidth; /* +0x0032 */ short dmScale; /* +0x0034 */ short dmCopies; /* +0x0036 */ short dmDefaultSource; /* +0x0038 */ short dmPrintQuality; /* +0x003a */ unsigned char dmPosition[8]; /* +0x002c a6 13 00 00 */ unsigned long dmDisplayOrientation; /* +0x0034 */ unsigned long dmDisplayFixedOutput; /* +0x0038 */ short dmColor; /* +0x003c */ short dmDuplex; /* +0x003e */ short dmYResolution; /* +0x0040 */ short dmTTOption; /* +0x0042 */ short dmCollate; /* +0x0044 */ unsigned char dmFormName[32]; /* +0x0046 f7 17 00 00 */ unsigned short dmLogPixels; /* +0x0066 */ unsigned long dmBitsPerPel; /* +0x0068 */ unsigned long dmPelsWidth; /* +0x006c */ unsigned long dmPelsHeight; /* +0x0070 */ unsigned long dmDisplayFlags; /* +0x0074 */ unsigned long dmNup; /* +0x0074 */ unsigned long dmDisplayFrequency; /* +0x0078 */ unsigned long dmICMMethod; /* +0x007c */ unsigned long dmICMIntent; /* +0x0080 */ unsigned long dmMediaType; /* +0x0084 */ unsigned long dmDitherType; /* +0x0088 */ unsigned long dmReserved1; /* +0x008c */ unsigned long dmReserved2; /* +0x0090 */ unsigned long dmPanningWidth; /* +0x0094 */ unsigned long dmPanningHeight; /* +0x0098 */ }; struct _CONSOLE_FONT_INFOEX { unsigned long cbSize; /* +0x0000 */ unsigned long nFont; /* +0x0004 */ unsigned char dwFontSize[4]; /* +0x0008 1b 18 00 00 */ unsigned char FontFamily[4]; /* +0x000c 75 00 00 00 */ unsigned char FontWeight[4]; /* +0x0010 75 00 00 00 */ unsigned char FaceName[64]; /* +0x0014 bf 15 00 00 */ }; struct value_entW { unsigned char ve_valuename[8]; /* +0x0000 71 06 00 00 */ unsigned long ve_valuelen; /* +0x0008 */ unsigned long long ve_valueptr; /* +0x0010 */ unsigned long ve_type; /* +0x0018 */ }; struct _CRYPT_CONTEXT_FUNCTIONS { unsigned long cFunctions; /* +0x0000 */ unsigned char rgpszFunctions[8]; /* +0x0008 db 13 00 00 */ }; struct _CROSS_CERT_DIST_POINTS_INFO { unsigned long dwSyncDeltaTime; /* +0x0000 */ unsigned long cDistPoint; /* +0x0004 */ unsigned char rgDistPoint[8]; /* +0x0008 bc 27 00 00 */ }; struct _REPAIR_DEFERRED_EXTENTS_INPUT { unsigned long Flags; /* +0x0000 */ unsigned long ExtentCount; /* +0x0004 */ unsigned char Extents[16]; /* +0x0008 54 21 00 00 */ }; struct _COVERAGE_MODULES { unsigned long ListAndReset; /* +0x0000 */ unsigned long NumberOfModules; /* +0x0004 */ unsigned char ModuleRequestInfo[24]; /* +0x0008 c2 27 00 00 */ unsigned char Modules[32]; /* +0x0020 c4 27 00 00 */ }; struct _PACKEDEVENTINFO { unsigned long ulSize; /* +0x0000 */ unsigned long ulNumEventsForLogFile; /* +0x0004 */ /* unsigned char ulOffsets[0]; +0x0008 c7 27 00 00 */ }; struct _LOOKUP_STREAM_FROM_CLUSTER_ENTRY { unsigned long OffsetToNext; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned char Reserved[8]; /* +0x0008 43 13 00 00 */ unsigned char Cluster[8]; /* +0x0010 43 13 00 00 */ unsigned char FileName[8]; /* +0x0018 0a 14 00 00 */ }; struct _POWER_SESSION_RIT_STATE { unsigned char Active; /* +0x0000 */ unsigned long LastInputTime; /* +0x0004 */ }; struct _KEY_VALUE_PARTIAL_INFORMATION { unsigned long TitleIndex; /* +0x0000 */ unsigned long Type; /* +0x0004 */ unsigned long DataLength; /* +0x0008 */ unsigned char Data[4]; /* +0x000c ff 12 00 00 */ }; struct _INVERTED_FUNCTION_TABLE { unsigned long CurrentSize; /* +0x0000 */ unsigned long MaximumSize; /* +0x0004 */ unsigned char Epoch[4]; /* +0x0008 cf 17 00 00 */ unsigned char Overflow; /* +0x000c */ unsigned char TableEntry[12288]; /* +0x0010 dc 27 00 00 */ }; struct tagWNDCLASSEXW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char style[4]; /* +0x0004 75 00 00 00 */ unsigned char lpfnWndProc[8]; /* +0x0008 f4 27 00 00 */ unsigned char cbClsExtra[4]; /* +0x0010 74 00 00 00 */ unsigned char cbWndExtra[4]; /* +0x0014 74 00 00 00 */ unsigned char hInstance[8]; /* +0x0018 d1 14 00 00 */ unsigned char hIcon[8]; /* +0x0020 43 21 00 00 */ unsigned char hCursor[8]; /* +0x0028 43 21 00 00 */ unsigned char hbrBackground[8]; /* +0x0030 8f 23 00 00 */ unsigned char lpszMenuName[8]; /* +0x0038 cb 13 00 00 */ unsigned char lpszClassName[8]; /* +0x0040 cb 13 00 00 */ unsigned char hIconSm[8]; /* +0x0048 43 21 00 00 */ }; struct tagMENUITEMINFOW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char fMask[4]; /* +0x0004 75 00 00 00 */ unsigned char fType[4]; /* +0x0008 75 00 00 00 */ unsigned char fState[4]; /* +0x000c 75 00 00 00 */ unsigned char wID[8]; /* +0x0010 75 00 00 00 */ unsigned char hSubMenu[8]; /* +0x0018 63 15 00 00 */ unsigned char hbmpChecked[8]; /* +0x0020 18 18 00 00 */ unsigned char hbmpUnchecked[8]; /* +0x0028 18 18 00 00 */ unsigned long long dwItemData; /* +0x0030 */ unsigned char dwTypeData[8]; /* +0x0038 71 06 00 00 */ unsigned char cch[8]; /* +0x0040 75 00 00 00 */ unsigned char hbmpItem[8]; /* +0x0048 18 18 00 00 */ }; struct _s__RTTIClassHierarchyDescriptor { unsigned long signature; /* +0x0000 */ unsigned long attributes; /* +0x0004 */ unsigned long numBaseClasses; /* +0x0008 */ unsigned char pBaseClassArray[8]; /* +0x000c fd 27 00 00 */ }; struct _PROCESS_MITIGATION_SYSTEM_CALL_DISABLE_POLICY { unsigned long Flags; /* +0x0000 */ /* unsigned char DisallowWin32kSystemCalls[0]; +0x0000 94 13 00 00 */ unsigned char ReservedFlags[4]; /* +0x0000 95 13 00 00 */ }; struct _THREAD_PROFILING_INFORMATION { unsigned long long HardwareCounters; /* +0x0000 */ unsigned long Flags; /* +0x0008 */ unsigned long Enable; /* +0x000c */ unsigned char PerformanceData[8]; /* +0x0010 03 28 00 00 */ }; struct _KEY_NAME_INFORMATION { unsigned long NameLength; /* +0x0000 */ unsigned char Name[4]; /* +0x0004 0a 14 00 00 */ }; struct _RTL_PROCESS_HEAPS { unsigned long NumberOfHeaps; /* +0x0000 */ unsigned char Heaps[88]; /* +0x0008 0b 28 00 00 */ }; struct tagGCP_RESULTSA { unsigned long lStructSize; /* +0x0000 */ char *lpOutString; /* +0x0008 */ unsigned char lpOrder[8]; /* +0x0010 75 06 00 00 */ unsigned char lpDx[8]; /* +0x0018 74 06 00 00 */ unsigned char lpCaretPos[8]; /* +0x0020 74 06 00 00 */ char *lpClass; /* +0x0028 */ unsigned char lpGlyphs[8]; /* +0x0030 71 06 00 00 */ unsigned char nGlyphs[4]; /* +0x0038 75 00 00 00 */ unsigned char nMaxFit[4]; /* +0x003c 74 00 00 00 */ }; struct _KEY_WOW64_FLAGS_INFORMATION { unsigned long UserFlags; /* +0x0000 */ }; struct _RTL_ANSI_STRING_BUFFER { unsigned char String[16]; /* +0x0000 e8 17 00 00 */ unsigned char ByteBuffer[48]; /* +0x0010 33 28 00 00 */ unsigned char MinimumStaticBufferForTerminalNul[8]; /* +0x0040 ff 12 00 00 */ }; struct tagMETARECORD { unsigned long rdSize; /* +0x0000 */ unsigned short rdFunction; /* +0x0004 */ unsigned char rdParm[2]; /* +0x0006 d4 15 00 00 */ }; struct tagRPC_ERROR_ENUM_HANDLE { unsigned long Signature; /* +0x0000 */ void *CurrentPos; /* +0x0008 */ void *Head; /* +0x0010 */ }; struct _TRANSACTION_NOTIFICATION_PROPAGATE_ARGUMENT { unsigned long PropagationCookie; /* +0x0000 */ unsigned char UOW[16]; /* +0x0004 f3 14 00 00 */ unsigned char TmIdentity[16]; /* +0x0014 f3 14 00 00 */ unsigned long BufferLength; /* +0x0024 */ }; struct tagWNDCLASSEXA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char style[4]; /* +0x0004 75 00 00 00 */ unsigned char lpfnWndProc[8]; /* +0x0008 f4 27 00 00 */ unsigned char cbClsExtra[4]; /* +0x0010 74 00 00 00 */ unsigned char cbWndExtra[4]; /* +0x0014 74 00 00 00 */ unsigned char hInstance[8]; /* +0x0018 d1 14 00 00 */ unsigned char hIcon[8]; /* +0x0020 43 21 00 00 */ unsigned char hCursor[8]; /* +0x0028 43 21 00 00 */ unsigned char hbrBackground[8]; /* +0x0030 8f 23 00 00 */ unsigned char lpszMenuName[8]; /* +0x0038 79 14 00 00 */ unsigned char lpszClassName[8]; /* +0x0040 79 14 00 00 */ unsigned char hIconSm[8]; /* +0x0048 43 21 00 00 */ }; struct _UUID_VECTOR { unsigned long Count; /* +0x0000 */ unsigned char Uuid[8]; /* +0x0008 3e 28 00 00 */ }; struct _CRYPT_DECRYPT_MESSAGE_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwMsgAndCertEncodingType; /* +0x0004 */ unsigned long cCertStore; /* +0x0008 */ unsigned char rghCertStore[8]; /* +0x0010 55 13 00 00 */ }; struct _devicemodeW { unsigned char dmDeviceName[64]; /* +0x0000 bf 15 00 00 */ unsigned short dmSpecVersion; /* +0x0040 */ unsigned short dmDriverVersion; /* +0x0042 */ unsigned short dmSize; /* +0x0044 */ unsigned short dmDriverExtra; /* +0x0046 */ unsigned long dmFields; /* +0x0048 */ short dmOrientation; /* +0x004c */ short dmPaperSize; /* +0x004e */ short dmPaperLength; /* +0x0050 */ short dmPaperWidth; /* +0x0052 */ short dmScale; /* +0x0054 */ short dmCopies; /* +0x0056 */ short dmDefaultSource; /* +0x0058 */ short dmPrintQuality; /* +0x005a */ unsigned char dmPosition[8]; /* +0x004c a6 13 00 00 */ unsigned long dmDisplayOrientation; /* +0x0054 */ unsigned long dmDisplayFixedOutput; /* +0x0058 */ short dmColor; /* +0x005c */ short dmDuplex; /* +0x005e */ short dmYResolution; /* +0x0060 */ short dmTTOption; /* +0x0062 */ short dmCollate; /* +0x0064 */ unsigned char dmFormName[64]; /* +0x0066 bf 15 00 00 */ unsigned short dmLogPixels; /* +0x00a6 */ unsigned long dmBitsPerPel; /* +0x00a8 */ unsigned long dmPelsWidth; /* +0x00ac */ unsigned long dmPelsHeight; /* +0x00b0 */ unsigned long dmDisplayFlags; /* +0x00b4 */ unsigned long dmNup; /* +0x00b4 */ unsigned long dmDisplayFrequency; /* +0x00b8 */ unsigned long dmICMMethod; /* +0x00bc */ unsigned long dmICMIntent; /* +0x00c0 */ unsigned long dmMediaType; /* +0x00c4 */ unsigned long dmDitherType; /* +0x00c8 */ unsigned long dmReserved1; /* +0x00cc */ unsigned long dmReserved2; /* +0x00d0 */ unsigned long dmPanningWidth; /* +0x00d4 */ unsigned long dmPanningHeight; /* +0x00d8 */ }; enum tagSTREAM_SEEK { STREAM_SEEK_SET = 0, STREAM_SEEK_CUR = 1, STREAM_SEEK_END = 2 }; struct _REPAIR_DEFERRED_EXTENTS_OUTPUT { unsigned long Status; /* +0x0000 */ unsigned long ErrorExtentIndex; /* +0x0004 */ unsigned char ErrorExtent[16]; /* +0x0008 53 21 00 00 */ }; struct tagEMRTEXT { unsigned char ptlReference[8]; /* +0x0000 a6 13 00 00 */ unsigned long nChars; /* +0x0008 */ unsigned long offString; /* +0x000c */ unsigned long fOptions; /* +0x0010 */ unsigned char rcl[16]; /* +0x0014 db 12 00 00 */ unsigned long offDx; /* +0x0024 */ }; struct tagHARDWAREINPUT { unsigned long uMsg; /* +0x0000 */ unsigned short wParamL; /* +0x0004 */ unsigned short wParamH; /* +0x0006 */ }; struct tagWINDOWINFO { unsigned long cbSize; /* +0x0000 */ unsigned char rcWindow[16]; /* +0x0004 7a 14 00 00 */ unsigned char rcClient[16]; /* +0x0014 7a 14 00 00 */ unsigned long dwStyle; /* +0x0024 */ unsigned long dwExStyle; /* +0x0028 */ unsigned long dwWindowStatus; /* +0x002c */ unsigned char cxWindowBorders[4]; /* +0x0030 75 00 00 00 */ unsigned char cyWindowBorders[4]; /* +0x0034 75 00 00 00 */ unsigned short atomWindowType; /* +0x0038 */ unsigned short wCreatorVersion; /* +0x003a */ }; struct _heapinfo { unsigned char _pentry[8]; /* +0x0000 74 06 00 00 */ unsigned long long _size; /* +0x0008 */ unsigned char _useflag[8]; /* +0x0010 74 00 00 00 */ }; struct tagDCOM_ENDPOINT { unsigned char wszProtSeq[8]; /* +0x0000 71 06 00 00 */ unsigned char wszPorts[8]; /* +0x0008 71 06 00 00 */ unsigned long dwFlags; /* +0x0010 */ }; struct _SCONTEXT_QUEUE { unsigned long NumberOfObjects; /* +0x0000 */ unsigned char ArrayOfObjects[8]; /* +0x0008 66 28 00 00 */ }; struct tagWINDOWPLACEMENT { unsigned char length[4]; /* +0x0000 75 00 00 00 */ unsigned char flags[4]; /* +0x0004 75 00 00 00 */ unsigned char showCmd[4]; /* +0x0008 75 00 00 00 */ unsigned char ptMinPosition[8]; /* +0x000c a1 14 00 00 */ unsigned char ptMaxPosition[8]; /* +0x0014 a1 14 00 00 */ unsigned char rcNormalPosition[16]; /* +0x001c 7a 14 00 00 */ }; struct _TEB_ACTIVE_FRAME_CONTEXT_EX { unsigned char BasicContext[16]; /* +0x0000 a7 28 00 00 */ unsigned char SourceLocation[8]; /* +0x0010 79 14 00 00 */ }; struct _RPC_HTTP_TRANSPORT_CREDENTIALS_V3_A { void *TransportCredentials; /* +0x0000 */ unsigned long Flags; /* +0x0008 */ unsigned long AuthenticationTarget; /* +0x000c */ unsigned long NumberOfAuthnSchemes; /* +0x0010 */ unsigned long *AuthnSchemes; /* +0x0018 */ unsigned char *ServerCertificateSubject; /* +0x0020 */ void *ProxyCredentials; /* +0x0028 */ unsigned long NumberOfProxyAuthnSchemes; /* +0x0030 */ unsigned long *ProxyAuthnSchemes; /* +0x0038 */ }; struct _SHNAMEMAPPINGW { unsigned char pszOldPath[8]; /* +0x0000 71 06 00 00 */ unsigned char pszNewPath[8]; /* +0x0008 71 06 00 00 */ unsigned char cchOldPath[4]; /* +0x0010 74 00 00 00 */ unsigned char cchNewPath[4]; /* +0x0014 74 00 00 00 */ }; struct _JOBOBJECT_BASIC_LIMIT_INFORMATION { unsigned char PerProcessUserTimeLimit[8]; /* +0x0000 43 13 00 00 */ unsigned char PerJobUserTimeLimit[8]; /* +0x0008 43 13 00 00 */ unsigned long LimitFlags; /* +0x0010 */ unsigned long long MinimumWorkingSetSize; /* +0x0018 */ unsigned long long MaximumWorkingSetSize; /* +0x0020 */ unsigned long ActiveProcessLimit; /* +0x0028 */ unsigned long long Affinity; /* +0x0030 */ unsigned long PriorityClass; /* +0x0038 */ unsigned long SchedulingClass; /* +0x003c */ }; struct tagVS_FIXEDFILEINFO { unsigned long dwSignature; /* +0x0000 */ unsigned long dwStrucVersion; /* +0x0004 */ unsigned long dwFileVersionMS; /* +0x0008 */ unsigned long dwFileVersionLS; /* +0x000c */ unsigned long dwProductVersionMS; /* +0x0010 */ unsigned long dwProductVersionLS; /* +0x0014 */ unsigned long dwFileFlagsMask; /* +0x0018 */ unsigned long dwFileFlags; /* +0x001c */ unsigned long dwFileOS; /* +0x0020 */ unsigned long dwFileType; /* +0x0024 */ unsigned long dwFileSubtype; /* +0x0028 */ unsigned long dwFileDateMS; /* +0x002c */ unsigned long dwFileDateLS; /* +0x0030 */ }; struct _CRYPT_VERIFY_MESSAGE_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwMsgAndCertEncodingType; /* +0x0004 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned char pfnGetSignerCertificate[8]; /* +0x0010 da 28 00 00 */ void *pvGetArg; /* +0x0018 */ }; struct _EXCEPTION_RECORD32 { long ExceptionCode; /* +0x0000 */ unsigned long ExceptionFlags; /* +0x0004 */ unsigned long ExceptionRecord; /* +0x0008 */ unsigned long ExceptionAddress; /* +0x000c */ unsigned long NumberParameters; /* +0x0010 */ unsigned char ExceptionInformation[60]; /* +0x0014 dd 28 00 00 */ }; struct tagMENUITEMINFOA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char fMask[4]; /* +0x0004 75 00 00 00 */ unsigned char fType[4]; /* +0x0008 75 00 00 00 */ unsigned char fState[4]; /* +0x000c 75 00 00 00 */ unsigned char wID[8]; /* +0x0010 75 00 00 00 */ unsigned char hSubMenu[8]; /* +0x0018 63 15 00 00 */ unsigned char hbmpChecked[8]; /* +0x0020 18 18 00 00 */ unsigned char hbmpUnchecked[8]; /* +0x0028 18 18 00 00 */ unsigned long long dwItemData; /* +0x0030 */ char *dwTypeData; /* +0x0038 */ unsigned char cch[8]; /* +0x0040 75 00 00 00 */ unsigned char hbmpItem[8]; /* +0x0048 18 18 00 00 */ }; struct _CMSG_SIGNED_ENCODE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long cSigners; /* +0x0004 */ unsigned char rgSigners[8]; /* +0x0008 e8 28 00 00 */ unsigned long cCertEncoded; /* +0x0010 */ unsigned char rgCertEncoded[8]; /* +0x0018 4d 13 00 00 */ unsigned long cCrlEncoded; /* +0x0020 */ unsigned char rgCrlEncoded[8]; /* +0x0028 4d 13 00 00 */ }; struct tagEMREXTCREATEPEN { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned long ihPen; /* +0x0008 */ unsigned long offBmi; /* +0x000c */ unsigned long cbBmi; /* +0x0010 */ unsigned long offBits; /* +0x0014 */ unsigned long cbBits; /* +0x0018 */ unsigned char elp[28]; /* +0x001c 1f 1f 00 00 */ }; struct _IMAGE_RELOCATION { unsigned long VirtualAddress; /* +0x0000 */ unsigned long RelocCount; /* +0x0000 */ unsigned long SymbolTableIndex; /* +0x0004 */ unsigned short Type; /* +0x0008 */ }; struct tagWTSSESSION_NOTIFICATION { unsigned long cbSize; /* +0x0000 */ unsigned long dwSessionId; /* +0x0004 */ }; struct _TXFS_LIST_TRANSACTION_LOCKED_FILES { unsigned char KtmTransaction[16]; /* +0x0000 f3 14 00 00 */ unsigned long long NumberOfFiles; /* +0x0010 */ unsigned long long BufferSizeRequired; /* +0x0018 */ unsigned long long Offset; /* +0x0020 */ }; struct _FILE_ATTRIBUTE_CACHE_VALUE { long Status; /* +0x0000 */ unsigned short Size; /* +0x0004 */ unsigned short RequiredSize; /* +0x0006 */ unsigned char Data[4]; /* +0x0008 ff 12 00 00 */ }; struct _LOAD_ASDATA_TABLE { void *Module; /* +0x0000 */ unsigned char FilePath[8]; /* +0x0008 71 06 00 00 */ unsigned long long Size; /* +0x0010 */ void *Handle; /* +0x0018 */ long RefCount; /* +0x0020 */ unsigned char EntryPointActivationContext[8]; /* +0x0028 7d 17 00 00 */ }; struct _s__RTTIBaseClassDescriptor2 { unsigned char pTypeDescriptor[8]; /* +0x0000 6d 1a 00 00 */ unsigned long numContainedBases; /* +0x0008 */ unsigned char where[12]; /* +0x000c 19 29 00 00 */ unsigned long attributes; /* +0x0018 */ unsigned char pClassDescriptor[8]; /* +0x001c 70 1a 00 00 */ }; struct _PS_CPU_QUOTA_QUERY_INFORMATION { unsigned long SessionCount; /* +0x0000 */ unsigned char SessionInformation[8]; /* +0x0004 1d 29 00 00 */ }; struct _FILE_MOVE_CLUSTER_INFORMATION { unsigned long ClusterCount; /* +0x0000 */ void *RootDirectory; /* +0x0008 */ unsigned long FileNameLength; /* +0x0010 */ unsigned char FileName[4]; /* +0x0014 0a 14 00 00 */ }; struct _QUERY_SERVICE_LOCK_STATUSW { unsigned long fIsLocked; /* +0x0000 */ unsigned char lpLockOwner[8]; /* +0x0008 71 06 00 00 */ unsigned long dwLockDuration; /* +0x0010 */ }; struct _CRYPT_KEY_PROV_PARAM { unsigned long dwParam; /* +0x0000 */ unsigned char *pbData; /* +0x0008 */ unsigned long cbData; /* +0x0010 */ unsigned long dwFlags; /* +0x0014 */ }; struct _FILE_VALID_DATA_LENGTH_INFORMATION { unsigned char ValidDataLength[8]; /* +0x0000 43 13 00 00 */ }; struct _MODEMDEVCAPS { unsigned long dwActualSize; /* +0x0000 */ unsigned long dwRequiredSize; /* +0x0004 */ unsigned long dwDevSpecificOffset; /* +0x0008 */ unsigned long dwDevSpecificSize; /* +0x000c */ unsigned long dwModemProviderVersion; /* +0x0010 */ unsigned long dwModemManufacturerOffset; /* +0x0014 */ unsigned long dwModemManufacturerSize; /* +0x0018 */ unsigned long dwModemModelOffset; /* +0x001c */ unsigned long dwModemModelSize; /* +0x0020 */ unsigned long dwModemVersionOffset; /* +0x0024 */ unsigned long dwModemVersionSize; /* +0x0028 */ unsigned long dwDialOptions; /* +0x002c */ unsigned long dwCallSetupFailTimer; /* +0x0030 */ unsigned long dwInactivityTimeout; /* +0x0034 */ unsigned long dwSpeakerVolume; /* +0x0038 */ unsigned long dwSpeakerMode; /* +0x003c */ unsigned long dwModemOptions; /* +0x0040 */ unsigned long dwMaxDTERate; /* +0x0044 */ unsigned long dwMaxDCERate; /* +0x0048 */ unsigned char abVariablePortion[4]; /* +0x004c ff 12 00 00 */ }; struct _RTL_STACK_TRACE_DATABASE_CREATE { void *CommitBase; /* +0x0000 */ unsigned long long CommitSize; /* +0x0008 */ unsigned long long ReserveSize; /* +0x0010 */ }; struct _MOUSE_EVENT_RECORD { unsigned char dwMousePosition[4]; /* +0x0000 1b 18 00 00 */ unsigned long dwButtonState; /* +0x0004 */ unsigned long dwControlKeyState; /* +0x0008 */ unsigned long dwEventFlags; /* +0x000c */ }; struct _STRING32 { unsigned short Length; /* +0x0000 */ unsigned short MaximumLength; /* +0x0002 */ unsigned long Buffer; /* +0x0004 */ }; struct _KLDR_DATA_TABLE_ENTRY64 { unsigned char InLoadOrderLinks[16]; /* +0x0000 10 1d 00 00 */ unsigned long long __Undefined1; /* +0x0010 */ unsigned long long __Undefined2; /* +0x0018 */ unsigned long long __Undefined3; /* +0x0020 */ unsigned long long NonPagedDebugInfo; /* +0x0028 */ unsigned long long DllBase; /* +0x0030 */ unsigned long long EntryPoint; /* +0x0038 */ unsigned long SizeOfImage; /* +0x0040 */ unsigned char FullDllName[16]; /* +0x0048 51 29 00 00 */ unsigned char BaseDllName[16]; /* +0x0058 51 29 00 00 */ unsigned long Flags; /* +0x0068 */ unsigned short LoadCount; /* +0x006c */ unsigned short __Undefined5; /* +0x006e */ unsigned long long __Undefined6; /* +0x0070 */ unsigned long CheckSum; /* +0x0078 */ unsigned long __padding1; /* +0x007c */ unsigned long TimeDateStamp; /* +0x0080 */ unsigned long __padding2; /* +0x0084 */ }; struct _FILE_BOTH_DIR_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long FileIndex; /* +0x0004 */ unsigned char CreationTime[8]; /* +0x0008 43 13 00 00 */ unsigned char LastAccessTime[8]; /* +0x0010 43 13 00 00 */ unsigned char LastWriteTime[8]; /* +0x0018 43 13 00 00 */ unsigned char ChangeTime[8]; /* +0x0020 43 13 00 00 */ unsigned char EndOfFile[8]; /* +0x0028 43 13 00 00 */ unsigned char AllocationSize[8]; /* +0x0030 43 13 00 00 */ unsigned long FileAttributes; /* +0x0038 */ unsigned long FileNameLength; /* +0x003c */ unsigned long EaSize; /* +0x0040 */ char ShortNameLength; /* +0x0044 */ unsigned char ShortName[24]; /* +0x0046 55 29 00 00 */ unsigned char FileName[2]; /* +0x005e 0a 14 00 00 */ }; struct _SYSTEM_PROCESSOR_PERFORMANCE_HITCOUNT { unsigned long Hits; /* +0x0000 */ unsigned char PercentFrequency; /* +0x0004 */ }; struct _SYSTEM_VERIFIER_COUNTERS_INFORMATION { unsigned char Legacy[128]; /* +0x0000 5a 29 00 00 */ unsigned long RaiseIrqls; /* +0x0080 */ unsigned long AcquireSpinLocks; /* +0x0084 */ unsigned long SynchronizeExecutions; /* +0x0088 */ unsigned long AllocationsWithNoTag; /* +0x008c */ unsigned long AllocationsFailed; /* +0x0090 */ unsigned long AllocationsFailedDeliberately; /* +0x0094 */ unsigned long long LockedBytes; /* +0x0098 */ unsigned long long PeakLockedBytes; /* +0x00a0 */ unsigned long long MappedLockedBytes; /* +0x00a8 */ unsigned long long PeakMappedLockedBytes; /* +0x00b0 */ unsigned long long MappedIoSpaceBytes; /* +0x00b8 */ unsigned long long PeakMappedIoSpaceBytes; /* +0x00c0 */ unsigned long long PagesForMdlBytes; /* +0x00c8 */ unsigned long long PeakPagesForMdlBytes; /* +0x00d0 */ unsigned long long ContiguousMemoryBytes; /* +0x00d8 */ unsigned long long PeakContiguousMemoryBytes; /* +0x00e0 */ }; struct _SYSTEM_EXTENDED_THREAD_INFORMATION { unsigned char ThreadInfo[80]; /* +0x0000 5f 29 00 00 */ void *StackBase; /* +0x0050 */ void *StackLimit; /* +0x0058 */ void *Win32StartAddress; /* +0x0060 */ void *TebBase; /* +0x0068 */ unsigned long long Reserved2; /* +0x0070 */ unsigned long long Reserved3; /* +0x0078 */ unsigned long long Reserved4; /* +0x0080 */ }; struct _RTL_RELATIVE_NAME_U { unsigned char RelativeName[16]; /* +0x0000 e3 12 00 00 */ void *ContainingDirectory; /* +0x0010 */ unsigned char CurDirRef[8]; /* +0x0018 65 29 00 00 */ }; struct _MIDL_STUB_MESSAGE { unsigned char RpcMsg[8]; /* +0x0000 70 29 00 00 */ unsigned char *Buffer; /* +0x0008 */ unsigned char *BufferStart; /* +0x0010 */ unsigned char *BufferEnd; /* +0x0018 */ unsigned char *BufferMark; /* +0x0020 */ unsigned long BufferLength; /* +0x0028 */ unsigned long MemorySize; /* +0x002c */ unsigned char *Memory; /* +0x0030 */ unsigned char IsClient; /* +0x0038 */ unsigned char Pad; /* +0x0039 */ unsigned short uFlags2; /* +0x003a */ unsigned char ReuseBuffer[4]; /* +0x003c 74 00 00 00 */ unsigned char pAllocAllNodesContext[8]; /* +0x0040 72 29 00 00 */ unsigned char pPointerQueueState[8]; /* +0x0048 74 29 00 00 */ unsigned char IgnoreEmbeddedPointers[8]; /* +0x0050 74 00 00 00 */ unsigned char *PointerBufferMark; /* +0x0058 */ unsigned char CorrDespIncrement; /* +0x0060 */ unsigned char uFlags; /* +0x0061 */ unsigned short UniquePtrCount; /* +0x0062 */ unsigned long long MaxCount; /* +0x0068 */ unsigned long Offset; /* +0x0070 */ unsigned long ActualCount; /* +0x0074 */ unsigned char pfnAllocate[8]; /* +0x0078 ff 16 00 00 */ unsigned char pfnFree[8]; /* +0x0080 d2 13 00 00 */ unsigned char *StackTop; /* +0x0088 */ unsigned char *pPresentedType; /* +0x0090 */ unsigned char *pTransmitType; /* +0x0098 */ void *SavedHandle; /* +0x00a0 */ unsigned char StubDesc[8]; /* +0x00a8 77 29 00 00 */ unsigned char FullPtrXlatTables[8]; /* +0x00b0 79 29 00 00 */ unsigned long FullPtrRefId; /* +0x00b8 */ unsigned long PointerLength; /* +0x00bc */ /* unsigned char fInDontFree[0]; +0x00c0 60 23 00 00 */ /* unsigned char fDontCallFreeInst[0]; +0x00c0 61 23 00 00 */ /* unsigned char fInOnlyParam[0]; +0x00c0 7a 29 00 00 */ /* unsigned char fHasReturn[0]; +0x00c0 7b 29 00 00 */ /* unsigned char fHasExtensions[0]; +0x00c0 7c 29 00 00 */ /* unsigned char fHasNewCorrDesc[0]; +0x00c0 7d 29 00 00 */ /* unsigned char fIsIn[0]; +0x00c0 7e 29 00 00 */ /* unsigned char fIsOut[0]; +0x00c0 7f 29 00 00 */ /* unsigned char fIsOicf[0]; +0x00c0 80 29 00 00 */ /* unsigned char fBufferValid[0]; +0x00c0 81 29 00 00 */ /* unsigned char fHasMemoryValidateCallback[0]; +0x00c0 82 29 00 00 */ /* unsigned char fInFree[0]; +0x00c0 83 29 00 00 */ /* unsigned char fNeedMCCP[0]; +0x00c0 84 29 00 00 */ /* unsigned char fUnused[0]; +0x00c0 85 29 00 00 */ unsigned char fUnused2[4]; /* +0x00c0 86 29 00 00 */ unsigned long dwDestContext; /* +0x00c4 */ void *pvDestContext; /* +0x00c8 */ unsigned char SavedContextHandles[8]; /* +0x00d0 66 28 00 00 */ long ParamNumber; /* +0x00d8 */ unsigned char pRpcChannelBuffer[8]; /* +0x00e0 77 19 00 00 */ unsigned char pArrayInfo[8]; /* +0x00e8 88 29 00 00 */ unsigned long *SizePtrCountArray; /* +0x00f0 */ unsigned long *SizePtrOffsetArray; /* +0x00f8 */ unsigned long *SizePtrLengthArray; /* +0x0100 */ void *pArgQueue; /* +0x0108 */ unsigned long dwStubPhase; /* +0x0110 */ void *LowStackMark; /* +0x0118 */ unsigned char pAsyncMsg[8]; /* +0x0120 8a 29 00 00 */ unsigned char pCorrInfo[8]; /* +0x0128 69 15 00 00 */ unsigned char *pCorrMemory; /* +0x0130 */ void *pMemoryList; /* +0x0138 */ long long pCSInfo; /* +0x0140 */ unsigned char *ConformanceMark; /* +0x0148 */ unsigned char *VarianceMark; /* +0x0150 */ long long Unused; /* +0x0158 */ unsigned char pContext[8]; /* +0x0160 8c 29 00 00 */ void *ContextHandleHash; /* +0x0168 */ void *pUserMarshalList; /* +0x0170 */ long long Reserved51_3; /* +0x0178 */ long long Reserved51_4; /* +0x0180 */ long long Reserved51_5; /* +0x0188 */ }; struct _CONNECTDLGSTRUCTW { unsigned long cbStructure; /* +0x0000 */ unsigned char hwndOwner[8]; /* +0x0008 f7 12 00 00 */ unsigned char lpConnRes[8]; /* +0x0010 f4 28 00 00 */ unsigned long dwFlags; /* +0x0018 */ unsigned long dwDevNum; /* +0x001c */ }; struct _FILEOFFSET_INFORMATION { /* unsigned char DontUse[0]; +0x0000 c1 29 00 00 */ /* unsigned char Offset[0]; +0x0000 c2 29 00 00 */ unsigned char Reserved[8]; /* +0x0000 c3 29 00 00 */ }; struct _CERT_LOGOTYPE_REFERENCE { unsigned long cHashedUrl; /* +0x0000 */ unsigned char rgHashedUrl[8]; /* +0x0008 ce 29 00 00 */ }; struct tagEMRINVERTRGN { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char rclBounds[16]; /* +0x0008 db 12 00 00 */ unsigned long cbRgnData; /* +0x0018 */ unsigned char RgnData[4]; /* +0x001c ff 12 00 00 */ }; struct tagSOLE_AUTHENTICATION_SERVICE { unsigned long dwAuthnSvc; /* +0x0000 */ unsigned long dwAuthzSvc; /* +0x0004 */ unsigned char pPrincipalName[8]; /* +0x0008 71 06 00 00 */ unsigned char hr[8]; /* +0x0010 08 00 00 00 */ }; struct _CERT_LOGOTYPE_IMAGE_INFO { unsigned long dwLogotypeImageInfoChoice; /* +0x0000 */ unsigned long dwFileSize; /* +0x0004 */ unsigned long dwXSize; /* +0x0008 */ unsigned long dwYSize; /* +0x000c */ unsigned long dwLogotypeImageResolutionChoice; /* +0x0010 */ unsigned long dwNumBits; /* +0x0014 */ unsigned long dwTableSize; /* +0x0014 */ unsigned char pwszLanguage[8]; /* +0x0018 71 06 00 00 */ }; struct _IMAGE_SEPARATE_DEBUG_HEADER { unsigned short Signature; /* +0x0000 */ unsigned short Flags; /* +0x0002 */ unsigned short Machine; /* +0x0004 */ unsigned short Characteristics; /* +0x0006 */ unsigned long TimeDateStamp; /* +0x0008 */ unsigned long CheckSum; /* +0x000c */ unsigned long ImageBase; /* +0x0010 */ unsigned long SizeOfImage; /* +0x0014 */ unsigned long NumberOfSections; /* +0x0018 */ unsigned long ExportedNamesSize; /* +0x001c */ unsigned long DebugDirectorySize; /* +0x0020 */ unsigned long SectionAlignment; /* +0x0024 */ unsigned char Reserved[8]; /* +0x0028 14 16 00 00 */ }; struct _BOOT_AREA_INFO:: { unsigned char Offset[8]; /* +0x0000 43 13 00 00 */ }; struct _MEMORY_SCRUB_INFORMATION { void *Handle; /* +0x0000 */ unsigned long long PagesScrubbed; /* +0x0008 */ }; struct tagCOMPAREITEMSTRUCT { unsigned char CtlType[4]; /* +0x0000 75 00 00 00 */ unsigned char CtlID[4]; /* +0x0004 75 00 00 00 */ unsigned char hwndItem[8]; /* +0x0008 f7 12 00 00 */ unsigned char itemID1[8]; /* +0x0010 75 00 00 00 */ unsigned long long itemData1; /* +0x0018 */ unsigned char itemID2[8]; /* +0x0020 75 00 00 00 */ unsigned long long itemData2; /* +0x0028 */ unsigned long dwLocaleId; /* +0x0030 */ }; struct tagPOINTER_DEVICE_PROPERTY { unsigned char logicalMin[4]; /* +0x0000 74 00 00 00 */ unsigned char logicalMax[4]; /* +0x0004 74 00 00 00 */ unsigned char physicalMin[4]; /* +0x0008 74 00 00 00 */ unsigned char physicalMax[4]; /* +0x000c 74 00 00 00 */ unsigned char unit[4]; /* +0x0010 75 00 00 00 */ unsigned char unitExponent[4]; /* +0x0014 75 00 00 00 */ unsigned short usagePageId; /* +0x0018 */ unsigned short usageId; /* +0x001a */ }; struct _CERT_CHAIN_PARA { unsigned long cbSize; /* +0x0000 */ unsigned char RequestedUsage[24]; /* +0x0008 07 2a 00 00 */ }; struct _CONTEXT_CHUNK { long Offset; /* +0x0000 */ unsigned long Length; /* +0x0004 */ }; struct _FILE_LINK_INFORMATION { unsigned char ReplaceIfExists; /* +0x0000 */ void *RootDirectory; /* +0x0008 */ unsigned long FileNameLength; /* +0x0010 */ unsigned char FileName[4]; /* +0x0014 0a 14 00 00 */ }; struct _JOURNAL_SET_KEY_USER_FLAGS_INFORMATION { unsigned char Action[8]; /* +0x0000 4f 15 00 00 */ unsigned long long RecordNumber; /* +0x0008 */ unsigned char TimeStamp[8]; /* +0x0010 43 13 00 00 */ unsigned char KeyPathName[16]; /* +0x0018 e3 12 00 00 */ unsigned long OldFlags; /* +0x0028 */ unsigned long NewFlags; /* +0x002c */ }; struct _ENUM_SERVICE_STATUSA { char *lpServiceName; /* +0x0000 */ char *lpDisplayName; /* +0x0008 */ unsigned char ServiceStatus[32]; /* +0x0010 8a 27 00 00 */ }; struct ASSOCIATIONELEMENT { unsigned char ac[8]; /* +0x0000 38 2a 00 00 */ unsigned char hkClass[8]; /* +0x0008 81 19 00 00 */ unsigned char pszClass[8]; /* +0x0010 cb 13 00 00 */ }; struct _SYSTEM_HIBERFILE_INFORMATION { unsigned long NumberOfMcbPairs; /* +0x0000 */ unsigned char Mcb[8]; /* +0x0008 98 25 00 00 */ }; struct _OSVERSIONINFOA { unsigned long dwOSVersionInfoSize; /* +0x0000 */ unsigned long dwMajorVersion; /* +0x0004 */ unsigned long dwMinorVersion; /* +0x0008 */ unsigned long dwBuildNumber; /* +0x000c */ unsigned long dwPlatformId; /* +0x0010 */ unsigned char szCSDVersion[128]; /* +0x0014 12 17 00 00 */ }; struct tagEMRRESTOREDC { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ long iRelative; /* +0x0008 */ }; struct tagGUITHREADINFO { unsigned long cbSize; /* +0x0000 */ unsigned long flags; /* +0x0004 */ unsigned char hwndActive[8]; /* +0x0008 f7 12 00 00 */ unsigned char hwndFocus[8]; /* +0x0010 f7 12 00 00 */ unsigned char hwndCapture[8]; /* +0x0018 f7 12 00 00 */ unsigned char hwndMenuOwner[8]; /* +0x0020 f7 12 00 00 */ unsigned char hwndMoveSize[8]; /* +0x0028 f7 12 00 00 */ unsigned char hwndCaret[8]; /* +0x0030 f7 12 00 00 */ unsigned char rcCaret[16]; /* +0x0038 7a 14 00 00 */ }; struct _CLAIM_SECURITY_ATTRIBUTE_V1 { unsigned char Name[8]; /* +0x0000 71 06 00 00 */ unsigned short ValueType; /* +0x0008 */ unsigned short Reserved; /* +0x000a */ unsigned long Flags; /* +0x000c */ unsigned long ValueCount; /* +0x0010 */ }; struct _CLAIM_SECURITY_ATTRIBUTE_V1:: { long long *pInt64; /* +0x0000 */ unsigned long long *pUint64; /* +0x0000 */ /* unsigned char ppString[0]; +0x0000 db 13 00 00 */ /* unsigned char pFqbn[0]; +0x0000 4e 1b 00 00 */ unsigned char pOctetString[8]; /* +0x0000 0a 19 00 00 */ }; struct _DISPLAY_DEVICEW { unsigned long cb; /* +0x0000 */ unsigned char DeviceName[64]; /* +0x0004 bf 15 00 00 */ unsigned char DeviceString[256]; /* +0x0044 c1 15 00 00 */ unsigned long StateFlags; /* +0x0144 */ unsigned char DeviceID[256]; /* +0x0148 c1 15 00 00 */ unsigned char DeviceKey[256]; /* +0x0248 c1 15 00 00 */ }; struct _UMS_CREATE_THREAD_ATTRIBUTES { unsigned long UmsVersion; /* +0x0000 */ /* unsigned char RtlUmsContext[0]; +0x0008 dc 17 00 00 */ void *UmsContext; /* +0x0008 */ /* unsigned char RtlUmsCompletionList[0]; +0x0010 f8 15 00 00 */ void *UmsCompletionList; /* +0x0010 */ }; struct _CSV_QUERY_REDIRECT_STATE { unsigned long MdsNodeId; /* +0x0000 */ unsigned long DsNodeId; /* +0x0004 */ unsigned char FileRedirected; /* +0x0008 */ }; struct _SERVICE_NOTIFY_1 { unsigned long dwVersion; /* +0x0000 */ unsigned char pfnNotifyCallback[8]; /* +0x0008 d2 13 00 00 */ void *pContext; /* +0x0010 */ unsigned long dwNotificationStatus; /* +0x0018 */ unsigned char ServiceStatus[36]; /* +0x001c e0 16 00 00 */ }; struct _FILE_ATTRIBUTE_TAG_INFORMATION { unsigned long FileAttributes; /* +0x0000 */ unsigned long ReparseTag; /* +0x0004 */ }; struct _RTL_HANDLE_TABLE { unsigned long MaximumNumberOfHandles; /* +0x0000 */ unsigned long SizeOfHandleTableEntry; /* +0x0004 */ unsigned long UseHeap; /* +0x0008 */ unsigned long TableSize; /* +0x000c */ unsigned char FreeHandles[8]; /* +0x0010 84 2a 00 00 */ unsigned char CommittedHandles[8]; /* +0x0018 84 2a 00 00 */ unsigned char UnCommittedHandles[8]; /* +0x0020 84 2a 00 00 */ unsigned char MaxReservedHandles[8]; /* +0x0028 84 2a 00 00 */ }; struct _SYSTEMTIME { unsigned short wYear; /* +0x0000 */ unsigned short wMonth; /* +0x0002 */ unsigned short wDayOfWeek; /* +0x0004 */ unsigned short wDay; /* +0x0006 */ unsigned short wHour; /* +0x0008 */ unsigned short wMinute; /* +0x000a */ unsigned short wSecond; /* +0x000c */ unsigned short wMilliseconds; /* +0x000e */ }; struct _FILE_ALLOCATION_INFORMATION { unsigned char AllocationSize[8]; /* +0x0000 43 13 00 00 */ }; struct tagKEYBDINPUT { unsigned short wVk; /* +0x0000 */ unsigned short wScan; /* +0x0002 */ unsigned long dwFlags; /* +0x0004 */ unsigned long time; /* +0x0008 */ unsigned long long dwExtraInfo; /* +0x0010 */ }; struct _BOOT_ENTRY { unsigned long Version; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned long Id; /* +0x0008 */ unsigned long Attributes; /* +0x000c */ unsigned long FriendlyNameOffset; /* +0x0010 */ unsigned long BootFilePathOffset; /* +0x0014 */ unsigned long OsOptionsLength; /* +0x0018 */ unsigned char OsOptions[4]; /* +0x001c ff 12 00 00 */ }; struct _RTL_DEBUG_INFORMATION { void *SectionHandleClient; /* +0x0000 */ void *ViewBaseClient; /* +0x0008 */ void *ViewBaseTarget; /* +0x0010 */ unsigned long long ViewBaseDelta; /* +0x0018 */ void *EventPairClient; /* +0x0020 */ void *EventPairTarget; /* +0x0028 */ void *TargetProcessId; /* +0x0030 */ void *TargetThreadHandle; /* +0x0038 */ unsigned long Flags; /* +0x0040 */ unsigned long long OffsetFree; /* +0x0048 */ unsigned long long CommitSize; /* +0x0050 */ unsigned long long ViewSize; /* +0x0058 */ /* unsigned char Modules[0]; +0x0060 67 22 00 00 */ unsigned char ModulesEx[8]; /* +0x0060 bf 2a 00 00 */ unsigned char BackTraces[8]; /* +0x0068 f7 1c 00 00 */ unsigned char Heaps[8]; /* +0x0070 c1 2a 00 00 */ unsigned char Locks[8]; /* +0x0078 c3 2a 00 00 */ void *SpecificHeap; /* +0x0080 */ void *TargetProcessHandle; /* +0x0088 */ unsigned char VerifierOptions[8]; /* +0x0090 c5 2a 00 00 */ void *ProcessHeap; /* +0x0098 */ void *CriticalSectionHandle; /* +0x00a0 */ void *CriticalSectionOwnerThread; /* +0x00a8 */ unsigned char Reserved[32]; /* +0x00b0 c6 2a 00 00 */ }; struct tagCURSORINFO { unsigned long cbSize; /* +0x0000 */ unsigned long flags; /* +0x0004 */ unsigned char hCursor[8]; /* +0x0008 43 21 00 00 */ unsigned char ptScreenPos[8]; /* +0x0010 a1 14 00 00 */ }; struct value_entA { char *ve_valuename; /* +0x0000 */ unsigned long ve_valuelen; /* +0x0008 */ unsigned long long ve_valueptr; /* +0x0010 */ unsigned long ve_type; /* +0x0018 */ }; struct _TRANSACTION_NOTIFICATION_RECOVERY_ARGUMENT { unsigned char EnlistmentId[16]; /* +0x0000 f3 14 00 00 */ unsigned char UOW[16]; /* +0x0010 f3 14 00 00 */ }; struct _RPC_CALL_LOCAL_ADDRESS_V1 { unsigned char Version[8]; /* +0x0000 75 00 00 00 */ void *Buffer; /* +0x0008 */ unsigned long BufferSize; /* +0x0010 */ unsigned char AddressFormat[4]; /* +0x0014 d5 2a 00 00 */ }; struct _PS_SYSTEM_DLL_INIT_BLOCK { unsigned long Size; /* +0x0000 */ unsigned long SystemDllWowRelocation; /* +0x0004 */ unsigned long long SystemDllNativeRelocation; /* +0x0008 */ unsigned char Wow64SharedInformation[64]; /* +0x0010 87 27 00 00 */ unsigned long RngData; /* +0x0050 */ unsigned long long MitigationOptions; /* +0x0058 */ }; struct _RTL_RESOURCE { unsigned char CriticalSection[40]; /* +0x0000 8f 1f 00 00 */ void *SharedSemaphore; /* +0x0028 */ unsigned char NumberOfWaitingShared[8]; /* +0x0030 cf 17 00 00 */ void *ExclusiveSemaphore; /* +0x0038 */ unsigned char NumberOfWaitingExclusive[4]; /* +0x0040 cf 17 00 00 */ unsigned char NumberOfActive[4]; /* +0x0044 d7 17 00 00 */ void *ExclusiveOwnerThread; /* +0x0048 */ unsigned long Flags; /* +0x0050 */ unsigned char DebugInfo[8]; /* +0x0058 a8 22 00 00 */ }; struct tagENUMLOGFONTEXDVW { unsigned char elfEnumLogfontEx[348]; /* +0x0000 dc 2a 00 00 */ unsigned char elfDesignVector[72]; /* +0x015c 3d 21 00 00 */ }; struct _CRYPT_CREDENTIALS { unsigned long cbSize; /* +0x0000 */ unsigned char pszCredentialsOid[8]; /* +0x0008 79 14 00 00 */ void *pvCredentials; /* +0x0010 */ }; struct _EXCEPTION_POINTERS { unsigned char ExceptionRecord[8]; /* +0x0000 13 29 00 00 */ unsigned char ContextRecord[8]; /* +0x0008 f4 2a 00 00 */ }; struct _JOBOBJECT_EXTENDED_LIMIT_INFORMATION { unsigned char BasicLimitInformation[64]; /* +0x0000 b1 16 00 00 */ unsigned char IoInfo[48]; /* +0x0040 7e 1c 00 00 */ unsigned long long ProcessMemoryLimit; /* +0x0070 */ unsigned long long JobMemoryLimit; /* +0x0078 */ unsigned long long PeakProcessMemoryUsed; /* +0x0080 */ unsigned long long PeakJobMemoryUsed; /* +0x0088 */ }; struct _FILE_BASIC_INFO { unsigned char CreationTime[8]; /* +0x0000 43 13 00 00 */ unsigned char LastAccessTime[8]; /* +0x0008 43 13 00 00 */ unsigned char LastWriteTime[8]; /* +0x0010 43 13 00 00 */ unsigned char ChangeTime[8]; /* +0x0018 43 13 00 00 */ unsigned long FileAttributes; /* +0x0020 */ }; struct _TRANSACTION_NOTIFICATION_TM_ONLINE_ARGUMENT { unsigned char TmIdentity[16]; /* +0x0000 f3 14 00 00 */ unsigned long Flags; /* +0x0010 */ }; struct _PROCESS_AFFINITY_UPDATE_MODE { unsigned long Flags; /* +0x0000 */ /* unsigned char EnableAutoUpdate[0]; +0x0000 94 13 00 00 */ /* unsigned char Permanent[0]; +0x0000 90 18 00 00 */ unsigned char Reserved[4]; /* +0x0000 c5 19 00 00 */ }; struct _SD_CHANGE_MACHINE_SID_OUTPUT { unsigned long long NumSDChangedSuccess; /* +0x0000 */ unsigned long long NumSDChangedFail; /* +0x0008 */ unsigned long long NumSDUnused; /* +0x0010 */ unsigned long long NumSDTotal; /* +0x0018 */ unsigned long long NumMftSDChangedSuccess; /* +0x0020 */ unsigned long long NumMftSDChangedFail; /* +0x0028 */ unsigned long long NumMftSDTotal; /* +0x0030 */ }; struct _COVERAGE_MODULE_REQUEST:: { /* unsigned char MD5Hash[0]; +0x0000 33 1c 00 00 */ unsigned char ModuleName[16]; /* +0x0000 e3 12 00 00 */ }; struct _SAFER_PATHNAME_IDENTIFICATION { unsigned char header[32]; /* +0x0000 56 19 00 00 */ unsigned char Description[512]; /* +0x0020 55 17 00 00 */ unsigned char ImageName[8]; /* +0x0220 71 06 00 00 */ unsigned long dwSaferFlags; /* +0x0228 */ }; struct _OBJECT_TYPE_INFORMATION { unsigned char TypeName[16]; /* +0x0000 e3 12 00 00 */ unsigned long TotalNumberOfObjects; /* +0x0010 */ unsigned long TotalNumberOfHandles; /* +0x0014 */ unsigned long TotalPagedPoolUsage; /* +0x0018 */ unsigned long TotalNonPagedPoolUsage; /* +0x001c */ unsigned long TotalNamePoolUsage; /* +0x0020 */ unsigned long TotalHandleTableUsage; /* +0x0024 */ unsigned long HighWaterNumberOfObjects; /* +0x0028 */ unsigned long HighWaterNumberOfHandles; /* +0x002c */ unsigned long HighWaterPagedPoolUsage; /* +0x0030 */ unsigned long HighWaterNonPagedPoolUsage; /* +0x0034 */ unsigned long HighWaterNamePoolUsage; /* +0x0038 */ unsigned long HighWaterHandleTableUsage; /* +0x003c */ unsigned long InvalidAttributes; /* +0x0040 */ unsigned char GenericMapping[16]; /* +0x0044 5e 16 00 00 */ unsigned long ValidAccessMask; /* +0x0054 */ unsigned char SecurityRequired; /* +0x0058 */ unsigned char MaintainHandleCount; /* +0x0059 */ unsigned long PoolType; /* +0x005c */ unsigned long DefaultPagedPoolCharge; /* +0x0060 */ unsigned long DefaultNonPagedPoolCharge; /* +0x0064 */ }; struct _FSCTL_QUERY_FAT_BPB_BUFFER { unsigned char First0x24BytesOfBootSector[36]; /* +0x0000 45 1c 00 00 */ }; struct tagTOUCHINPUT { long x; /* +0x0000 */ long y; /* +0x0004 */ void *hSource; /* +0x0008 */ unsigned long dwID; /* +0x0010 */ unsigned long dwFlags; /* +0x0014 */ unsigned long dwMask; /* +0x0018 */ unsigned long dwTime; /* +0x001c */ unsigned long long dwExtraInfo; /* +0x0020 */ unsigned long cxContact; /* +0x0028 */ unsigned long cyContact; /* +0x002c */ }; struct _COORD { short X; /* +0x0000 */ short Y; /* +0x0002 */ }; struct _DEVICE_FLAGS { /* unsigned char Failed[0]; +0x0000 94 13 00 00 */ /* unsigned char ReadOnly[0]; +0x0000 90 18 00 00 */ /* unsigned char Removable[0]; +0x0000 91 18 00 00 */ /* unsigned char ConsoleIn[0]; +0x0000 74 1e 00 00 */ /* unsigned char ConsoleOut[0]; +0x0000 75 1e 00 00 */ /* unsigned char Input[0]; +0x0000 0b 24 00 00 */ unsigned char Output[4]; /* +0x0000 32 1f 00 00 */ }; struct _tagBINDINFO { unsigned long cbSize; /* +0x0000 */ unsigned char szExtraInfo[8]; /* +0x0008 71 06 00 00 */ unsigned char stgmedData[24]; /* +0x0010 46 2b 00 00 */ unsigned long grfBindInfoF; /* +0x0028 */ unsigned long dwBindVerb; /* +0x002c */ unsigned char szCustomVerb[8]; /* +0x0030 71 06 00 00 */ unsigned long cbstgmedData; /* +0x0038 */ unsigned long dwOptions; /* +0x003c */ unsigned long dwOptionsFlags; /* +0x0040 */ unsigned long dwCodePage; /* +0x0044 */ unsigned char securityAttributes[24]; /* +0x0048 11 15 00 00 */ unsigned char iid[16]; /* +0x0060 f3 14 00 00 */ unsigned char pUnk[8]; /* +0x0070 93 17 00 00 */ unsigned long dwReserved; /* +0x0078 */ }; struct _CERT_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char SerialNumber[16]; /* +0x0008 08 13 00 00 */ unsigned char SignatureAlgorithm[24]; /* +0x0018 68 14 00 00 */ unsigned char Issuer[16]; /* +0x0030 08 13 00 00 */ unsigned char NotBefore[8]; /* +0x0040 37 13 00 00 */ unsigned char NotAfter[8]; /* +0x0048 37 13 00 00 */ unsigned char Subject[16]; /* +0x0050 08 13 00 00 */ unsigned char SubjectPublicKeyInfo[48]; /* +0x0060 6b 20 00 00 */ unsigned char IssuerUniqueId[24]; /* +0x0090 09 13 00 00 */ unsigned char SubjectUniqueId[24]; /* +0x00a8 09 13 00 00 */ unsigned long cExtension; /* +0x00c0 */ unsigned char rgExtension[8]; /* +0x00c8 3f 16 00 00 */ }; struct _SAFER_IDENTIFICATION_HEADER { unsigned char dwIdentificationType[4]; /* +0x0000 4b 2b 00 00 */ unsigned long cbStructSize; /* +0x0004 */ unsigned char IdentificationGuid[16]; /* +0x0008 f3 14 00 00 */ unsigned char lastModified[8]; /* +0x0018 37 13 00 00 */ }; struct _PROCESS_HANDLE_INFORMATION { unsigned long HandleCount; /* +0x0000 */ unsigned long HandleCountHighWatermark; /* +0x0004 */ }; struct _CM_INT13_DRIVE_PARAMETER { unsigned short DriveSelect; /* +0x0000 */ unsigned long MaxCylinders; /* +0x0002 */ unsigned short SectorsPerTrack; /* +0x0006 */ unsigned short MaxHeads; /* +0x0008 */ unsigned short NumberDrives; /* +0x000a */ }; struct _PLUGPLAY_CONTROL_LEGACY_DEVGEN_DATA { unsigned char ServiceName[16]; /* +0x0000 e3 12 00 00 */ unsigned char DeviceInstance[8]; /* +0x0010 71 06 00 00 */ unsigned long DeviceInstanceLength; /* +0x0018 */ }; struct _WOW64_FLOATING_SAVE_AREA { unsigned long ControlWord; /* +0x0000 */ unsigned long StatusWord; /* +0x0004 */ unsigned long TagWord; /* +0x0008 */ unsigned long ErrorOffset; /* +0x000c */ unsigned long ErrorSelector; /* +0x0010 */ unsigned long DataOffset; /* +0x0014 */ unsigned long DataSelector; /* +0x0018 */ unsigned char RegisterArea[80]; /* +0x001c 54 2b 00 00 */ unsigned long Cr0NpxState; /* +0x006c */ }; struct _RTL_VERIFIER_PROVIDER_HELPER_TABLE { unsigned long Length; /* +0x0000 */ unsigned char VerifierEngLogStackTrace[8]; /* +0x0008 ed 19 00 00 */ unsigned char VerifierEngReleaseStackTrace[8]; /* +0x0010 d2 13 00 00 */ unsigned char VerifierEngGetStackTraceAddressEx[224]; /* +0x0018 ff 19 00 00 */ }; struct _RTL_VERIFIER_PROVIDER_HELPER_TABLE::_RTL_VERIFIER_PROVIDER_HELPER_TABLE_UNUSED_STRUCT { unsigned long UnusedLong; /* +0x0000 */ unsigned char UnusedPointer[200]; /* +0x0008 5a 2b 00 00 */ }; struct _MEMORYSTATUS { unsigned long dwLength; /* +0x0000 */ unsigned long dwMemoryLoad; /* +0x0004 */ unsigned long long dwTotalPhys; /* +0x0008 */ unsigned long long dwAvailPhys; /* +0x0010 */ unsigned long long dwTotalPageFile; /* +0x0018 */ unsigned long long dwAvailPageFile; /* +0x0020 */ unsigned long long dwTotalVirtual; /* +0x0028 */ unsigned long long dwAvailVirtual; /* +0x0030 */ }; struct _SHELLEXECUTEINFOW { unsigned long cbSize; /* +0x0000 */ unsigned long fMask; /* +0x0004 */ unsigned char hwnd[8]; /* +0x0008 f7 12 00 00 */ unsigned char lpVerb[8]; /* +0x0010 cb 13 00 00 */ unsigned char lpFile[8]; /* +0x0018 cb 13 00 00 */ unsigned char lpParameters[8]; /* +0x0020 cb 13 00 00 */ unsigned char lpDirectory[8]; /* +0x0028 cb 13 00 00 */ unsigned char nShow[8]; /* +0x0030 74 00 00 00 */ unsigned char hInstApp[8]; /* +0x0038 d1 14 00 00 */ void *lpIDList; /* +0x0040 */ unsigned char lpClass[8]; /* +0x0048 cb 13 00 00 */ unsigned char hkeyClass[8]; /* +0x0050 81 19 00 00 */ unsigned long dwHotKey; /* +0x0058 */ void *hIcon; /* +0x0060 */ void *hMonitor; /* +0x0060 */ void *hProcess; /* +0x0068 */ }; struct tagORPC_EXTENT_ARRAY { unsigned long size; /* +0x0000 */ unsigned long reserved; /* +0x0004 */ unsigned char extent[8]; /* +0x0008 67 2b 00 00 */ }; struct _FILE_NETWORK_PHYSICAL_NAME_INFORMATION { unsigned long FileNameLength; /* +0x0000 */ unsigned char FileName[4]; /* +0x0004 0a 14 00 00 */ }; struct tagTITLEBARINFOEX { unsigned long cbSize; /* +0x0000 */ unsigned char rcTitleBar[16]; /* +0x0004 7a 14 00 00 */ unsigned char rgstate[24]; /* +0x0014 d7 1f 00 00 */ unsigned char rgrect[96]; /* +0x002c 6e 2b 00 00 */ }; struct tagCLEANLOCALSTORAGE { unsigned char pInterface[8]; /* +0x0000 93 17 00 00 */ void *pStorage; /* +0x0008 */ unsigned long flags; /* +0x0010 */ }; struct _TOKEN_APPCONTAINER_INFORMATION { void *TokenAppContainer; /* +0x0000 */ }; struct _LPC_UNREGISTER_PROCESS_MSG { unsigned char PortMsg[40]; /* +0x0000 36 20 00 00 */ void *UniqueProcessId; /* +0x0028 */ }; struct tagTTPOLYGONHEADER { unsigned long cb; /* +0x0000 */ unsigned long dwType; /* +0x0004 */ unsigned char pfxStart[8]; /* +0x0008 68 21 00 00 */ }; struct tagMSGBOXPARAMSW { unsigned char cbSize[8]; /* +0x0000 75 00 00 00 */ unsigned char hwndOwner[8]; /* +0x0008 f7 12 00 00 */ unsigned char hInstance[8]; /* +0x0010 d1 14 00 00 */ unsigned char lpszText[8]; /* +0x0018 cb 13 00 00 */ unsigned char lpszCaption[8]; /* +0x0020 cb 13 00 00 */ unsigned long dwStyle; /* +0x0028 */ unsigned char lpszIcon[8]; /* +0x0030 cb 13 00 00 */ unsigned long long dwContextHelpId; /* +0x0038 */ unsigned char lpfnMsgBoxCallback[8]; /* +0x0040 83 2b 00 00 */ unsigned long dwLanguageId; /* +0x0048 */ }; struct _SERVICE_CONTROL_STATUS_REASON_PARAMSW { unsigned long dwReason; /* +0x0000 */ unsigned char pszComment[8]; /* +0x0008 71 06 00 00 */ unsigned char ServiceStatus[40]; /* +0x0010 e0 16 00 00 */ }; struct tagAXESLISTW { unsigned long axlReserved; /* +0x0000 */ unsigned long axlNumAxes; /* +0x0004 */ unsigned char axlAxisInfo[640]; /* +0x0008 9e 2b 00 00 */ }; struct _CERT_BIOMETRIC_DATA { unsigned long dwTypeOfBiometricDataChoice; /* +0x0000 */ unsigned long dwPredefined; /* +0x0008 */ char *pszObjId; /* +0x0008 */ unsigned char HashedUrl[48]; /* +0x0010 cd 29 00 00 */ }; struct _SHFILEOPSTRUCTW { unsigned char hwnd[8]; /* +0x0000 f7 12 00 00 */ unsigned char wFunc[8]; /* +0x0008 75 00 00 00 */ unsigned char pFrom[8]; /* +0x0010 cb 13 00 00 */ unsigned char pTo[8]; /* +0x0018 cb 13 00 00 */ unsigned short fFlags; /* +0x0020 */ unsigned char fAnyOperationsAborted[4]; /* +0x0024 74 00 00 00 */ void *hNameMappings; /* +0x0028 */ unsigned char lpszProgressTitle[8]; /* +0x0030 cb 13 00 00 */ }; struct _IMAGE_ARCHIVE_MEMBER_HEADER { unsigned char Name[16]; /* +0x0000 33 1c 00 00 */ unsigned char Date[12]; /* +0x0010 88 15 00 00 */ unsigned char UserID[6]; /* +0x001c 79 22 00 00 */ unsigned char GroupID[6]; /* +0x0022 79 22 00 00 */ unsigned char Mode[8]; /* +0x0028 91 19 00 00 */ unsigned char Size[10]; /* +0x0030 ad 2b 00 00 */ unsigned char EndHeader[2]; /* +0x003a bb 17 00 00 */ }; struct _PROCESS_EXCEPTION_PORT { void *ExceptionPortHandle; /* +0x0000 */ unsigned long StateFlags; /* +0x0008 */ }; struct _KEY_HANDLE_TAGS_INFORMATION { unsigned long HandleTags; /* +0x0000 */ }; struct _RTL_MODULE_BASIC_INFO { void *ImageBase; /* +0x0000 */ }; struct _BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwInfoVersion; /* +0x0004 */ unsigned char *pbNonce; /* +0x0008 */ unsigned long cbNonce; /* +0x0010 */ unsigned char *pbAuthData; /* +0x0018 */ unsigned long cbAuthData; /* +0x0020 */ unsigned char *pbTag; /* +0x0028 */ unsigned long cbTag; /* +0x0030 */ unsigned char *pbMacContext; /* +0x0038 */ unsigned long cbMacContext; /* +0x0040 */ unsigned long cbAAD; /* +0x0044 */ unsigned long long cbData; /* +0x0048 */ unsigned long dwFlags; /* +0x0050 */ }; struct _CERT_DSS_PARAMETERS { unsigned char p[16]; /* +0x0000 08 13 00 00 */ unsigned char q[16]; /* +0x0010 08 13 00 00 */ unsigned char g[16]; /* +0x0020 08 13 00 00 */ }; struct _OBJECT_NAME_INFORMATION { unsigned char Name[16]; /* +0x0000 e3 12 00 00 */ }; struct _SYSTEM_KERNEL_DEBUGGER_INFORMATION { unsigned char KernelDebuggerEnabled; /* +0x0000 */ unsigned char KernelDebuggerNotPresent; /* +0x0001 */ }; struct _REG_NOTIFY_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned char Action[4]; /* +0x0004 09 2c 00 00 */ unsigned long KeyLength; /* +0x0008 */ unsigned char Key[4]; /* +0x000c 0a 14 00 00 */ }; struct _SERVICE_FAILURE_ACTIONSW { unsigned long dwResetPeriod; /* +0x0000 */ unsigned char lpRebootMsg[8]; /* +0x0008 71 06 00 00 */ unsigned char lpCommand[8]; /* +0x0010 71 06 00 00 */ unsigned long cActions; /* +0x0018 */ unsigned char lpsaActions[8]; /* +0x0020 1d 2c 00 00 */ }; struct _PROCESS_PRIORITY_CLASS { unsigned char Foreground; /* +0x0000 */ unsigned char PriorityClass; /* +0x0001 */ }; struct _TXFS_TRANSACTION_ACTIVE_INFO { unsigned char TransactionsActiveAtSnapshot; /* +0x0000 */ }; struct _EVENT_BASIC_INFORMATION { unsigned char EventType[4]; /* +0x0000 2c 2c 00 00 */ long EventState; /* +0x0004 */ }; struct _DSSSEED { unsigned long counter; /* +0x0000 */ unsigned char seed[20]; /* +0x0004 97 16 00 00 */ }; struct _SERVICE_PREFERRED_NODE_INFO { unsigned short usPreferredNode; /* +0x0000 */ unsigned char fDelete; /* +0x0002 */ }; struct _IMAGE_EXPORT_DIRECTORY { unsigned long Characteristics; /* +0x0000 */ unsigned long TimeDateStamp; /* +0x0004 */ unsigned short MajorVersion; /* +0x0008 */ unsigned short MinorVersion; /* +0x000a */ unsigned long Name; /* +0x000c */ unsigned long Base; /* +0x0010 */ unsigned long NumberOfFunctions; /* +0x0014 */ unsigned long NumberOfNames; /* +0x0018 */ unsigned long AddressOfFunctions; /* +0x001c */ unsigned long AddressOfNames; /* +0x0020 */ unsigned long AddressOfNameOrdinals; /* +0x0024 */ }; struct _PROCESSOR_PROFILE_CONTROL_AREA { unsigned char PebsDsSaveArea[96]; /* +0x0000 42 1a 00 00 */ }; struct tagENUMTEXTMETRICW { unsigned char etmNewTextMetricEx[100]; /* +0x0000 45 2c 00 00 */ unsigned char etmAxesList[648]; /* +0x0064 1a 25 00 00 */ }; struct _PAGE_PRIORITY_INFORMATION { unsigned long PagePriority; /* +0x0000 */ }; struct tagACTCTX_SECTION_KEYED_DATA { unsigned long cbSize; /* +0x0000 */ unsigned long ulDataFormatVersion; /* +0x0004 */ void *lpData; /* +0x0008 */ unsigned long ulLength; /* +0x0010 */ void *lpSectionGlobalData; /* +0x0018 */ unsigned long ulSectionGlobalDataLength; /* +0x0020 */ void *lpSectionBase; /* +0x0028 */ unsigned long ulSectionTotalLength; /* +0x0030 */ void *hActCtx; /* +0x0038 */ unsigned long ulAssemblyRosterIndex; /* +0x0040 */ unsigned long ulFlags; /* +0x0044 */ unsigned char AssemblyMetadata[40]; /* +0x0048 4e 2c 00 00 */ }; struct _CRYPT_KEY_SIGN_MESSAGE_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwMsgAndCertEncodingType; /* +0x0004 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned long long hNCryptKey; /* +0x0008 */ unsigned long dwKeySpec; /* +0x0010 */ unsigned char HashAlgorithm[24]; /* +0x0018 68 14 00 00 */ void *pvHashAuxInfo; /* +0x0030 */ unsigned char PubKeyAlgorithm[24]; /* +0x0038 68 14 00 00 */ }; struct _POWER_STATE { /* unsigned char SystemState[0]; +0x0000 76 16 00 00 */ unsigned char DeviceState[4]; /* +0x0000 74 16 00 00 */ }; struct tagICONMETRICSA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char iHorzSpacing[4]; /* +0x0004 74 00 00 00 */ unsigned char iVertSpacing[4]; /* +0x0008 74 00 00 00 */ unsigned char iTitleWrap[4]; /* +0x000c 74 00 00 00 */ unsigned char lfFont[60]; /* +0x0010 dc 16 00 00 */ }; struct _PROCESSOR_GROUP_INFO { unsigned char MaximumProcessorCount; /* +0x0000 */ unsigned char ActiveProcessorCount; /* +0x0001 */ unsigned char Reserved[38]; /* +0x0002 66 2c 00 00 */ unsigned long long ActiveProcessorMask; /* +0x0028 */ }; struct tagEMREXTTEXTOUTA { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char rclBounds[16]; /* +0x0008 db 12 00 00 */ unsigned long iGraphicsMode; /* +0x0018 */ unsigned char exScale[4]; /* +0x001c 40 00 00 00 */ unsigned char eyScale[4]; /* +0x0020 40 00 00 00 */ unsigned char emrtext[40]; /* +0x0024 4a 1c 00 00 */ }; struct tagEMRPLGBLT { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char rclBounds[16]; /* +0x0008 db 12 00 00 */ unsigned char aptlDest[24]; /* +0x0018 6b 2c 00 00 */ long xSrc; /* +0x0030 */ long ySrc; /* +0x0034 */ long cxSrc; /* +0x0038 */ long cySrc; /* +0x003c */ unsigned char xformSrc[24]; /* +0x0040 dc 12 00 00 */ unsigned long crBkColorSrc; /* +0x0058 */ unsigned long iUsageSrc; /* +0x005c */ unsigned long offBmiSrc; /* +0x0060 */ unsigned long cbBmiSrc; /* +0x0064 */ unsigned long offBitsSrc; /* +0x0068 */ unsigned long cbBitsSrc; /* +0x006c */ long xMask; /* +0x0070 */ long yMask; /* +0x0074 */ unsigned long iUsageMask; /* +0x0078 */ unsigned long offBmiMask; /* +0x007c */ unsigned long cbBmiMask; /* +0x0080 */ unsigned long offBitsMask; /* +0x0084 */ unsigned long cbBitsMask; /* +0x0088 */ }; struct _CERT_POLICY_MAPPING { char *pszIssuerDomainPolicy; /* +0x0000 */ char *pszSubjectDomainPolicy; /* +0x0008 */ }; struct _LOAD_DLL_DEBUG_INFO { void *hFile; /* +0x0000 */ void *lpBaseOfDll; /* +0x0008 */ unsigned long dwDebugInfoFileOffset; /* +0x0010 */ unsigned long nDebugInfoSize; /* +0x0014 */ void *lpImageName; /* +0x0018 */ unsigned short fUnicode; /* +0x0020 */ }; struct _ACL { unsigned char AclRevision; /* +0x0000 */ unsigned char Sbz1; /* +0x0001 */ unsigned short AclSize; /* +0x0002 */ unsigned short AceCount; /* +0x0004 */ unsigned short Sbz2; /* +0x0006 */ }; struct _IMAGE_RUNTIME_FUNCTION_ENTRY { unsigned long BeginAddress; /* +0x0000 */ unsigned long EndAddress; /* +0x0004 */ unsigned long UnwindInfoAddress; /* +0x0008 */ }; struct tagCIEXYZ { long ciexyzX; /* +0x0000 */ long ciexyzY; /* +0x0004 */ long ciexyzZ; /* +0x0008 */ }; struct _CMSG_HASHED_ENCODE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned char HashAlgorithm[24]; /* +0x0010 68 14 00 00 */ void *pvHashAuxInfo; /* +0x0028 */ }; struct _PLUGPLAY_CONTROL_BLOCKED_DRIVER_DATA { unsigned long Flags; /* +0x0000 */ unsigned long BufferLength; /* +0x0004 */ void *Buffer; /* +0x0008 */ }; struct _CMSG_KEY_AGREE_RECIPIENT_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned long dwOriginatorChoice; /* +0x0004 */ /* unsigned char OriginatorCertId[0]; +0x0008 36 13 00 00 */ unsigned char OriginatorPublicKeyInfo[48]; /* +0x0008 6b 20 00 00 */ unsigned char UserKeyingMaterial[16]; /* +0x0038 08 13 00 00 */ unsigned char KeyEncryptionAlgorithm[24]; /* +0x0048 68 14 00 00 */ unsigned long cRecipientEncryptedKeys; /* +0x0060 */ unsigned char rgpRecipientEncryptedKeys[8]; /* +0x0068 8e 2c 00 00 */ }; struct _PROCESS_DISK_COUNTERS { unsigned long long BytesRead; /* +0x0000 */ unsigned long long BytesWritten; /* +0x0008 */ unsigned long long ReadOperationCount; /* +0x0010 */ unsigned long long WriteOperationCount; /* +0x0018 */ unsigned long long FlushOperationCount; /* +0x0020 */ }; struct tagRGBQUAD { unsigned char rgbBlue; /* +0x0000 */ unsigned char rgbGreen; /* +0x0001 */ unsigned char rgbRed; /* +0x0002 */ unsigned char rgbReserved; /* +0x0003 */ }; struct tagRPC_EE_INFO_PARAM { unsigned char ParameterType[24]; /* +0x0000 ce 2c 00 00 */ }; struct tagRPC_EE_INFO_PARAM:: { char *AnsiString; /* +0x0000 */ /* unsigned char UnicodeString[0]; +0x0000 71 06 00 00 */ long LVal; /* +0x0000 */ short SVal; /* +0x0000 */ unsigned long long PVal; /* +0x0000 */ unsigned char BVal[16]; /* +0x0000 d2 2c 00 00 */ }; struct __MIDL___MIDL_itf_activate_0000_0011_0004 { unsigned long ulNumClasses; /* +0x0000 */ unsigned char pCLSIDs[8]; /* +0x0008 61 16 00 00 */ unsigned long pidProcess; /* +0x0010 */ void *hProcess; /* +0x0018 */ void *hImpersonationToken; /* +0x0020 */ unsigned char pwszWinstaDesktop[8]; /* +0x0028 71 06 00 00 */ unsigned long dwState; /* +0x0030 */ unsigned char AppId[16]; /* +0x0034 f3 14 00 00 */ unsigned char ServerType[4]; /* +0x0044 d5 2c 00 00 */ unsigned char ServerID[4]; /* +0x0048 d6 2c 00 00 */ unsigned char ftCreated[12]; /* +0x004c 37 13 00 00 */ }; struct _FILE_SEGMENT_ELEMENT { void *Buffer; /* +0x0000 */ unsigned long long Alignment; /* +0x0000 */ }; struct _SI_COPYFILE { unsigned long SourceFileNameLength; /* +0x0000 */ unsigned long DestinationFileNameLength; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ unsigned char FileNameBuffer[4]; /* +0x000c 0a 14 00 00 */ }; struct _SID_AND_ATTRIBUTES_HASH { unsigned long SidCount; /* +0x0000 */ unsigned char SidAttr[8]; /* +0x0008 e5 1b 00 00 */ unsigned char Hash[256]; /* +0x0010 e2 2c 00 00 */ }; struct _div_t { unsigned char quot[4]; /* +0x0000 74 00 00 00 */ unsigned char rem[4]; /* +0x0004 74 00 00 00 */ }; struct tagStorageLayout { unsigned long LayoutType; /* +0x0000 */ unsigned char pwcsElementName[8]; /* +0x0008 71 06 00 00 */ unsigned char cOffset[8]; /* +0x0010 43 13 00 00 */ unsigned char cBytes[8]; /* +0x0018 43 13 00 00 */ }; struct _SERVICE_FAILURE_ACTIONS_FLAG { unsigned char fFailureActionsOnNonCrashFailures[4]; /* +0x0000 74 00 00 00 */ }; struct _RTL_ELEVATION_FLAGS { unsigned long Flags; /* +0x0000 */ /* unsigned char ElevationEnabled[0]; +0x0000 94 13 00 00 */ /* unsigned char VirtualizationEnabled[0]; +0x0000 90 18 00 00 */ /* unsigned char InstallerDetectEnabled[0]; +0x0000 91 18 00 00 */ unsigned char ReservedBits[4]; /* +0x0000 f7 2c 00 00 */ }; struct _AVRF_MEMORY_RANGE { void *BaseAddress; /* +0x0000 */ unsigned long long Size; /* +0x0008 */ }; struct tagHIGHCONTRASTA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ char *lpszDefaultScheme; /* +0x0008 */ }; struct _RPC_HTTP_TRANSPORT_CREDENTIALS_V2_A { unsigned char TransportCredentials[8]; /* +0x0000 de 18 00 00 */ unsigned long Flags; /* +0x0008 */ unsigned long AuthenticationTarget; /* +0x000c */ unsigned long NumberOfAuthnSchemes; /* +0x0010 */ unsigned long *AuthnSchemes; /* +0x0018 */ unsigned char *ServerCertificateSubject; /* +0x0020 */ unsigned char ProxyCredentials[8]; /* +0x0028 de 18 00 00 */ unsigned long NumberOfProxyAuthnSchemes; /* +0x0030 */ unsigned long *ProxyAuthnSchemes; /* +0x0038 */ }; struct _CERT_CHAIN { unsigned long cCerts; /* +0x0000 */ unsigned char certs[8]; /* +0x0008 4d 13 00 00 */ unsigned char keyLocatorInfo[48]; /* +0x0010 73 2b 00 00 */ }; struct _JOB_SET_ARRAY { void *JobHandle; /* +0x0000 */ unsigned long MemberLevel; /* +0x0008 */ unsigned long Flags; /* +0x000c */ }; struct tagDESIGNVECTOR { unsigned long dvReserved; /* +0x0000 */ unsigned long dvNumAxes; /* +0x0004 */ unsigned char dvValues[64]; /* +0x0008 2c 2d 00 00 */ }; struct _CMSG_ENVELOPED_ENCODE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned char ContentEncryptionAlgorithm[24]; /* +0x0010 68 14 00 00 */ void *pvEncryptionAuxInfo; /* +0x0028 */ unsigned long cRecipients; /* +0x0030 */ unsigned char rgpRecipients[8]; /* +0x0038 30 2d 00 00 */ }; struct tagLOGPEN { unsigned char lopnStyle[4]; /* +0x0000 75 00 00 00 */ unsigned char lopnWidth[8]; /* +0x0004 a1 14 00 00 */ unsigned long lopnColor; /* +0x000c */ }; struct _FLAGGED_WORD_BLOB { unsigned long fFlags; /* +0x0000 */ unsigned long clSize; /* +0x0004 */ unsigned char asData[4]; /* +0x0008 d4 15 00 00 */ }; struct _SAFER_CODE_PROPERTIES_V1 { unsigned long cbSize; /* +0x0000 */ unsigned long dwCheckFlags; /* +0x0004 */ unsigned char ImagePath[8]; /* +0x0008 cb 13 00 00 */ void *hImageFileHandle; /* +0x0010 */ unsigned long UrlZoneId; /* +0x0018 */ unsigned char ImageHash[64]; /* +0x001c 19 13 00 00 */ unsigned long dwImageHashSize; /* +0x005c */ unsigned char ImageSize[8]; /* +0x0060 43 13 00 00 */ unsigned char HashAlgorithm[8]; /* +0x0068 75 00 00 00 */ unsigned char *pByteBlock; /* +0x0070 */ unsigned char hWndParent[8]; /* +0x0078 f7 12 00 00 */ unsigned long dwWVTUIChoice; /* +0x0080 */ }; struct _FILE_END_OF_FILE_INFORMATION { unsigned char EndOfFile[8]; /* +0x0000 43 13 00 00 */ }; struct _MIDL_FORMAT_STRING { short Pad; /* +0x0000 */ /* unsigned char Format[0]; +0x0002 40 2d 00 00 */ }; struct _CRYPT_BLOB_ARRAY { unsigned long cBlob; /* +0x0000 */ unsigned char rgBlob[8]; /* +0x0008 4d 13 00 00 */ }; struct _EXCEPTION_LOG { unsigned char ExceptionRecord[160]; /* +0x0000 80 20 00 00 */ unsigned char ContextRecord[1232]; /* +0x00a0 5d 13 00 00 */ unsigned char Type[4]; /* +0x0570 59 2d 00 00 */ long Disposition; /* +0x0574 */ unsigned long long Thread; /* +0x0578 */ unsigned long long ControlPc; /* +0x0580 */ void *Handler; /* +0x0588 */ }; struct _GLYPHMETRICS { unsigned char gmBlackBoxX[4]; /* +0x0000 75 00 00 00 */ unsigned char gmBlackBoxY[4]; /* +0x0004 75 00 00 00 */ unsigned char gmptGlyphOrigin[8]; /* +0x0008 a1 14 00 00 */ short gmCellIncX; /* +0x0010 */ short gmCellIncY; /* +0x0012 */ }; struct tagAXESLISTA { unsigned long axlReserved; /* +0x0000 */ unsigned long axlNumAxes; /* +0x0004 */ unsigned char axlAxisInfo[384]; /* +0x0008 5f 2d 00 00 */ }; struct _JOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION { unsigned char BasicInfo[48]; /* +0x0000 7d 1c 00 00 */ unsigned char IoInfo[48]; /* +0x0030 7e 1c 00 00 */ }; struct _SYSTEM_MEMORY_CHANNEL_INFORMATION { unsigned long ChannelNumber; /* +0x0000 */ unsigned long ChannelHeatIndex; /* +0x0004 */ unsigned long long TotalPageCount; /* +0x0008 */ unsigned long long ZeroPageCount; /* +0x0010 */ unsigned long long FreePageCount; /* +0x0018 */ unsigned long long StandbyPageCount; /* +0x0020 */ }; struct tagRID_DEVICE_INFO_MOUSE { unsigned long dwId; /* +0x0000 */ unsigned long dwNumberOfButtons; /* +0x0004 */ unsigned long dwSampleRate; /* +0x0008 */ unsigned char fHasHorizontalWheel[4]; /* +0x000c 74 00 00 00 */ }; struct tagCHANGEFILTERSTRUCT { unsigned long cbSize; /* +0x0000 */ unsigned long ExtStatus; /* +0x0004 */ }; struct _OBJECT_BASIC_INFORMATION { unsigned long Attributes; /* +0x0000 */ unsigned long GrantedAccess; /* +0x0004 */ unsigned long HandleCount; /* +0x0008 */ unsigned long PointerCount; /* +0x000c */ unsigned long PagedPoolCharge; /* +0x0010 */ unsigned long NonPagedPoolCharge; /* +0x0014 */ unsigned char Reserved[12]; /* +0x0018 28 13 00 00 */ unsigned long NameInfoSize; /* +0x0024 */ unsigned long TypeInfoSize; /* +0x0028 */ unsigned long SecurityDescriptorSize; /* +0x002c */ unsigned char CreationTime[8]; /* +0x0030 43 13 00 00 */ }; struct _COVERAGE_SECTION_HEADER { unsigned long Signature; /* +0x0000 */ unsigned long CoverageType; /* +0x0004 */ unsigned char MD5Hash[16]; /* +0x0008 33 1c 00 00 */ unsigned long CoverageSectionSize; /* +0x0018 */ unsigned long CoverageVectorSize; /* +0x001c */ unsigned long CoverageVectorOffset; /* +0x0020 */ unsigned long ExtraDataOffset; /* +0x0024 */ }; struct _PORT_DATA_ENTRY { void *Base; /* +0x0000 */ unsigned long Size; /* +0x0008 */ }; struct _RTL_DYNAMIC_HASH_TABLE_CONTEXT { unsigned char ChainHead[8]; /* +0x0000 99 2d 00 00 */ unsigned char PrevLinkage[8]; /* +0x0008 99 2d 00 00 */ unsigned long long Signature; /* +0x0010 */ }; struct _CERT_RDN_ATTR { char *pszObjId; /* +0x0000 */ unsigned long dwValueType; /* +0x0008 */ unsigned char Value[16]; /* +0x0010 08 13 00 00 */ }; struct _OSVERSIONINFOEXW { unsigned long dwOSVersionInfoSize; /* +0x0000 */ unsigned long dwMajorVersion; /* +0x0004 */ unsigned long dwMinorVersion; /* +0x0008 */ unsigned long dwBuildNumber; /* +0x000c */ unsigned long dwPlatformId; /* +0x0010 */ unsigned char szCSDVersion[256]; /* +0x0014 c1 15 00 00 */ unsigned short wServicePackMajor; /* +0x0114 */ unsigned short wServicePackMinor; /* +0x0116 */ unsigned short wSuiteMask; /* +0x0118 */ unsigned char wProductType; /* +0x011a */ unsigned char wReserved; /* +0x011b */ }; struct _NOTIFYICONDATAA { unsigned long cbSize; /* +0x0000 */ unsigned char hWnd[8]; /* +0x0008 f7 12 00 00 */ unsigned char uID[4]; /* +0x0010 75 00 00 00 */ unsigned char uFlags[4]; /* +0x0014 75 00 00 00 */ unsigned char uCallbackMessage[8]; /* +0x0018 75 00 00 00 */ unsigned char hIcon[8]; /* +0x0020 43 21 00 00 */ unsigned char szTip[128]; /* +0x0028 12 17 00 00 */ unsigned long dwState; /* +0x00a8 */ unsigned long dwStateMask; /* +0x00ac */ unsigned char szInfo[256]; /* +0x00b0 ca 2d 00 00 */ /* unsigned char uTimeout[0]; +0x01b0 75 00 00 00 */ unsigned char uVersion[4]; /* +0x01b0 75 00 00 00 */ unsigned char szInfoTitle[64]; /* +0x01b4 cb 2d 00 00 */ unsigned long dwInfoFlags; /* +0x01f4 */ unsigned char guidItem[16]; /* +0x01f8 f3 14 00 00 */ unsigned char hBalloonIcon[8]; /* +0x0208 43 21 00 00 */ }; struct _PROCESS_HANDLE_TABLE_ENTRY_INFO { void *HandleValue; /* +0x0000 */ unsigned long long HandleCount; /* +0x0008 */ unsigned long long PointerCount; /* +0x0010 */ unsigned long GrantedAccess; /* +0x0018 */ unsigned long ObjectTypeIndex; /* +0x001c */ unsigned long HandleAttributes; /* +0x0020 */ unsigned long Reserved; /* +0x0024 */ }; struct _CM_COMPONENT_INFORMATION { unsigned char Flags[4]; /* +0x0000 ed 2d 00 00 */ unsigned long Version; /* +0x0004 */ unsigned long Key; /* +0x0008 */ unsigned long long AffinityMask; /* +0x0010 */ }; struct _MUIREGISTRYINFO { unsigned char Owned[4]; /* +0x0000 75 00 00 00 */ unsigned char InstallLanguageFallback[8]; /* +0x0004 f0 2d 00 00 */ unsigned long Generation; /* +0x000c */ unsigned long ProcessGeneration; /* +0x0010 */ unsigned char Installed[8]; /* +0x0018 f2 2d 00 00 */ unsigned char Strings[8]; /* +0x0020 a2 1f 00 00 */ unsigned char MachineConfig[8]; /* +0x0028 f4 2d 00 00 */ unsigned char UserConfig[8]; /* +0x0030 f4 2d 00 00 */ unsigned char MachinePreferred[8]; /* +0x0038 f6 2d 00 00 */ unsigned char UserPreferred[8]; /* +0x0040 f6 2d 00 00 */ unsigned char ProcessPreferred[8]; /* +0x0048 f6 2d 00 00 */ unsigned char MergedUser[8]; /* +0x0050 f6 2d 00 00 */ unsigned char MergedMachine[8]; /* +0x0058 f6 2d 00 00 */ unsigned char MergedFallback[8]; /* +0x0060 f6 2d 00 00 */ unsigned char PrevRegInfo[8]; /* +0x0068 76 17 00 00 */ unsigned long MUI_Locked; /* +0x0070 */ unsigned long MUI_SE; /* +0x0074 */ unsigned long MUI_NumberAllowed; /* +0x0078 */ unsigned char MUI_AllowedLanguage[8]; /* +0x0080 71 06 00 00 */ unsigned char MUI_InstalledSKU[8]; /* +0x0088 71 06 00 00 */ unsigned long cbInstalledSKU; /* +0x0090 */ unsigned long cbAllowedLanguage; /* +0x0094 */ unsigned char MUI_DisallowedLanguage[8]; /* +0x0098 71 06 00 00 */ unsigned long cbDisallowedLanguage; /* +0x00a0 */ }; struct _RTL_PROCESS_BACKTRACES { unsigned long long CommittedMemory; /* +0x0000 */ unsigned long long ReservedMemory; /* +0x0008 */ unsigned long NumberOfBackTraceLookups; /* +0x0010 */ unsigned long NumberOfBackTraces; /* +0x0014 */ unsigned char BackTraces[272]; /* +0x0018 fa 2d 00 00 */ }; struct _DEBUG_EVENT { unsigned long dwDebugEventCode; /* +0x0000 */ unsigned long dwProcessId; /* +0x0004 */ unsigned long dwThreadId; /* +0x0008 */ }; struct _CRYPTNET_URL_CACHE_PRE_FETCH_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwObjectType; /* +0x0004 */ unsigned long dwError; /* +0x0008 */ unsigned long dwReserved; /* +0x000c */ unsigned char ThisUpdateTime[8]; /* +0x0010 37 13 00 00 */ unsigned char NextUpdateTime[8]; /* +0x0018 37 13 00 00 */ unsigned char PublishTime[8]; /* +0x0020 37 13 00 00 */ }; struct _SECURITY_DESCRIPTOR_RELATIVE { unsigned char Revision; /* +0x0000 */ unsigned char Sbz1; /* +0x0001 */ unsigned short Control; /* +0x0002 */ unsigned long Owner; /* +0x0004 */ unsigned long Group; /* +0x0008 */ unsigned long Sacl; /* +0x000c */ unsigned long Dacl; /* +0x0010 */ }; struct _FILE_NAMES_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long FileIndex; /* +0x0004 */ unsigned long FileNameLength; /* +0x0008 */ unsigned char FileName[4]; /* +0x000c 0a 14 00 00 */ }; struct _RPC_BINDING_HANDLE_TEMPLATE_V1_W:: { unsigned short *Reserved; /* +0x0000 */ }; struct _CRYPT_3DES_KEY_STATE { unsigned char Key[24]; /* +0x0000 22 2e 00 00 */ unsigned char IV[8]; /* +0x0018 91 19 00 00 */ unsigned char Feedback[8]; /* +0x0020 91 19 00 00 */ }; struct _NDR_EXPR_DESC { unsigned char pOffset[8]; /* +0x0000 4d 19 00 00 */ unsigned char pFormatExpr[8]; /* +0x0008 4b 19 00 00 */ }; struct _CERT_REVOCATION_STATUS { unsigned long cbSize; /* +0x0000 */ unsigned long dwIndex; /* +0x0004 */ unsigned long dwError; /* +0x0008 */ unsigned long dwReason; /* +0x000c */ unsigned char fHasFreshnessTime[4]; /* +0x0010 74 00 00 00 */ unsigned long dwFreshnessTime; /* +0x0014 */ }; struct _FILE_STREAM_INFO { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long StreamNameLength; /* +0x0004 */ unsigned char StreamSize[8]; /* +0x0008 43 13 00 00 */ unsigned char StreamAllocationSize[8]; /* +0x0010 43 13 00 00 */ unsigned char StreamName[8]; /* +0x0018 0a 14 00 00 */ }; struct _TOKEN_STATISTICS { unsigned char TokenId[8]; /* +0x0000 38 15 00 00 */ unsigned char AuthenticationId[8]; /* +0x0008 38 15 00 00 */ unsigned char ExpirationTime[8]; /* +0x0010 43 13 00 00 */ unsigned char TokenType[4]; /* +0x0018 42 2e 00 00 */ unsigned char ImpersonationLevel[4]; /* +0x001c 43 2e 00 00 */ unsigned long DynamicCharged; /* +0x0020 */ unsigned long DynamicAvailable; /* +0x0024 */ unsigned long GroupCount; /* +0x0028 */ unsigned long PrivilegeCount; /* +0x002c */ unsigned char ModifiedId[8]; /* +0x0030 38 15 00 00 */ }; struct _FILE_EA_INFORMATION { unsigned long EaSize; /* +0x0000 */ }; struct _DYNAMIC_FUNCTION_TABLE { unsigned char ListEntry[16]; /* +0x0000 73 1f 00 00 */ unsigned char FunctionTable[8]; /* +0x0010 1c 1d 00 00 */ unsigned char TimeStamp[8]; /* +0x0018 43 13 00 00 */ unsigned long long MinimumAddress; /* +0x0020 */ unsigned long long MaximumAddress; /* +0x0028 */ unsigned long long BaseAddress; /* +0x0030 */ unsigned char Callback[8]; /* +0x0038 61 2e 00 00 */ void *Context; /* +0x0040 */ unsigned char OutOfProcessCallbackDll[8]; /* +0x0048 71 06 00 00 */ unsigned char Type[4]; /* +0x0050 62 2e 00 00 */ unsigned long EntryCount; /* +0x0054 */ }; struct _KEY_VALUE_PARTIAL_INFORMATION_ALIGN64 { unsigned long Type; /* +0x0000 */ unsigned long DataLength; /* +0x0004 */ unsigned char Data[4]; /* +0x0008 ff 12 00 00 */ }; struct _PLUGPLAY_CONTROL_INSTALL_DATA { unsigned long BufferLength; /* +0x0000 */ unsigned char Buffer[8]; /* +0x0008 71 06 00 00 */ }; struct tagTOUCH_HIT_TESTING_PROXIMITY_EVALUATION { unsigned short score; /* +0x0000 */ unsigned char adjustedPoint[8]; /* +0x0004 a1 14 00 00 */ }; struct _RPC_BINDING_HANDLE_SECURITY_V1_A { unsigned long Version; /* +0x0000 */ unsigned char *ServerPrincName; /* +0x0008 */ unsigned long AuthnLevel; /* +0x0010 */ unsigned long AuthnSvc; /* +0x0014 */ unsigned char AuthIdentity[8]; /* +0x0018 de 18 00 00 */ unsigned char SecurityQos[8]; /* +0x0020 2f 1d 00 00 */ }; struct tagQUERYCONTEXT { unsigned long dwContext; /* +0x0000 */ unsigned char Platform[16]; /* +0x0004 79 2e 00 00 */ unsigned long Locale; /* +0x0014 */ unsigned long dwVersionHi; /* +0x0018 */ unsigned long dwVersionLo; /* +0x001c */ }; struct _SYSTEM_PROCESSOR_POLICY_INFORMATION { unsigned long Length; /* +0x0000 */ unsigned long PolicyId; /* +0x0004 */ unsigned char Policy[48]; /* +0x0008 85 2e 00 00 */ }; struct _CERT_LOGOTYPE_IMAGE { unsigned char LogotypeDetails[24]; /* +0x0000 b7 18 00 00 */ unsigned char pLogotypeImageInfo[8]; /* +0x0018 8c 2e 00 00 */ }; struct _PRIVILEGE_SET { unsigned long PrivilegeCount; /* +0x0000 */ unsigned long Control; /* +0x0004 */ unsigned char Privilege[12]; /* +0x0008 94 2e 00 00 */ }; struct _CERT_X942_DH_VALIDATION_PARAMS { unsigned char seed[24]; /* +0x0000 09 13 00 00 */ unsigned long pgenCounter; /* +0x0018 */ }; struct _CERT_CHAIN_POLICY_STATUS { unsigned long cbSize; /* +0x0000 */ unsigned long dwError; /* +0x0004 */ long lChainIndex; /* +0x0008 */ long lElementIndex; /* +0x000c */ void *pvExtraPolicyStatus; /* +0x0010 */ }; struct _TEB { unsigned char NtTib[56]; /* +0x0000 82 27 00 00 */ void *EnvironmentPointer; /* +0x0038 */ unsigned char ClientId[16]; /* +0x0040 44 13 00 00 */ void *ActiveRpcHandle; /* +0x0050 */ void *ThreadLocalStoragePointer; /* +0x0058 */ unsigned char ProcessEnvironmentBlock[8]; /* +0x0060 a3 2e 00 00 */ unsigned long LastErrorValue; /* +0x0068 */ unsigned long CountOfOwnedCriticalSections; /* +0x006c */ void *CsrClientThread; /* +0x0070 */ void *Win32ThreadInfo; /* +0x0078 */ unsigned char User32Reserved[104]; /* +0x0080 a4 2e 00 00 */ unsigned char UserReserved[24]; /* +0x00e8 a5 2e 00 00 */ void *WOW32Reserved; /* +0x0100 */ unsigned long CurrentLocale; /* +0x0108 */ unsigned long FpSoftwareStatusRegister; /* +0x010c */ unsigned char SystemReserved1[432]; /* +0x0110 a6 2e 00 00 */ long ExceptionCode; /* +0x02c0 */ unsigned char ActivationContextStackPointer[8]; /* +0x02c8 48 1e 00 00 */ unsigned char SpareBytes[24]; /* +0x02d0 22 2e 00 00 */ unsigned long TxFsContext; /* +0x02e8 */ unsigned char GdiTebBatch[1256]; /* +0x02f0 a7 2e 00 00 */ unsigned char RealClientId[16]; /* +0x07d8 44 13 00 00 */ void *GdiCachedProcessHandle; /* +0x07e8 */ unsigned long GdiClientPID; /* +0x07f0 */ unsigned long GdiClientTID; /* +0x07f4 */ void *GdiThreadLocalInfo; /* +0x07f8 */ unsigned char Win32ClientInfo[496]; /* +0x0800 a8 2e 00 00 */ unsigned char glDispatchTable[1864]; /* +0x09f0 a9 2e 00 00 */ unsigned char glReserved1[232]; /* +0x1138 aa 2e 00 00 */ void *glReserved2; /* +0x1220 */ void *glSectionInfo; /* +0x1228 */ void *glSection; /* +0x1230 */ void *glTable; /* +0x1238 */ void *glCurrentRC; /* +0x1240 */ void *glContext; /* +0x1248 */ unsigned long LastStatusValue; /* +0x1250 */ unsigned char StaticUnicodeString[16]; /* +0x1258 e3 12 00 00 */ unsigned char StaticUnicodeBuffer[528]; /* +0x1268 ab 2e 00 00 */ void *DeallocationStack; /* +0x1478 */ unsigned char TlsSlots[512]; /* +0x1480 ac 2e 00 00 */ unsigned char TlsLinks[16]; /* +0x1680 73 1f 00 00 */ void *Vdm; /* +0x1690 */ void *ReservedForNtRpc; /* +0x1698 */ unsigned char DbgSsReserved[16]; /* +0x16a0 1e 23 00 00 */ unsigned long HardErrorMode; /* +0x16b0 */ unsigned char Instrumentation[88]; /* +0x16b8 ad 2e 00 00 */ unsigned char ActivityId[16]; /* +0x1710 f3 14 00 00 */ void *SubProcessTag; /* +0x1720 */ void *EtwLocalData; /* +0x1728 */ void *EtwTraceData; /* +0x1730 */ void *WinSockData; /* +0x1738 */ unsigned long GdiBatchCount; /* +0x1740 */ /* unsigned char CurrentIdealProcessor[0]; +0x1744 b3 20 00 00 */ unsigned long IdealProcessorValue; /* +0x1744 */ unsigned char ReservedPad0; /* +0x1744 */ unsigned char ReservedPad1; /* +0x1745 */ unsigned char ReservedPad2; /* +0x1746 */ unsigned char IdealProcessor; /* +0x1747 */ unsigned long GuaranteedStackBytes; /* +0x1748 */ void *ReservedForPerf; /* +0x1750 */ void *ReservedForOle; /* +0x1758 */ unsigned long WaitingOnLoaderLock; /* +0x1760 */ void *SavedPriorityState; /* +0x1768 */ unsigned long long ReservedForCodeCoverage; /* +0x1770 */ void *ThreadPoolData; /* +0x1778 */ unsigned char TlsExpansionSlots[8]; /* +0x1780 55 13 00 00 */ void *DeallocationBStore; /* +0x1788 */ void *BStoreLimit; /* +0x1790 */ unsigned long MuiGeneration; /* +0x1798 */ unsigned long IsImpersonating; /* +0x179c */ void *NlsCache; /* +0x17a0 */ void *pShimData; /* +0x17a8 */ unsigned short HeapVirtualAffinity; /* +0x17b0 */ unsigned short LowFragHeapDataSlot; /* +0x17b2 */ void *CurrentTransactionHandle; /* +0x17b8 */ unsigned char ActiveFrame[8]; /* +0x17c0 ae 2e 00 00 */ void *FlsData; /* +0x17c8 */ void *PreferredLanguages; /* +0x17d0 */ void *UserPrefLanguages; /* +0x17d8 */ void *MergedPrefLanguages; /* +0x17e0 */ unsigned long MuiImpersonation; /* +0x17e8 */ /* unsigned char CrossTebFlags[0]; +0x17ec af 2e 00 00 */ unsigned char SpareCrossTebBits[2]; /* +0x17ec b0 2e 00 00 */ unsigned short SameTebFlags; /* +0x17ee */ /* unsigned char SafeThunkCall[0]; +0x17ee b1 2e 00 00 */ /* unsigned char InDebugPrint[0]; +0x17ee b2 2e 00 00 */ /* unsigned char HasFiberData[0]; +0x17ee b3 2e 00 00 */ /* unsigned char SkipThreadAttach[0]; +0x17ee b4 2e 00 00 */ /* unsigned char WerInShipAssertCode[0]; +0x17ee b5 2e 00 00 */ /* unsigned char RanProcessInit[0]; +0x17ee b6 2e 00 00 */ /* unsigned char ClonedThread[0]; +0x17ee b7 2e 00 00 */ /* unsigned char SuppressDebugMsg[0]; +0x17ee b8 2e 00 00 */ /* unsigned char DisableUserStackWalk[0]; +0x17ee b9 2e 00 00 */ /* unsigned char RtlExceptionAttached[0]; +0x17ee ba 2e 00 00 */ /* unsigned char InitialThread[0]; +0x17ee bb 2e 00 00 */ /* unsigned char SessionAware[0]; +0x17ee bc 2e 00 00 */ /* unsigned char DisabledStackCheck[0]; +0x17ee bd 2e 00 00 */ unsigned char SpareSameTebBits[2]; /* +0x17ee be 2e 00 00 */ void *TxnScopeEnterCallback; /* +0x17f0 */ void *TxnScopeExitCallback; /* +0x17f8 */ void *TxnScopeContext; /* +0x1800 */ unsigned long LockCount; /* +0x1808 */ unsigned long SpareUlong0; /* +0x180c */ void *ResourceRetValue; /* +0x1810 */ void *ReservedForWdf; /* +0x1818 */ }; struct _SYSTEM_PAGEFILE_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long TotalSize; /* +0x0004 */ unsigned long TotalInUse; /* +0x0008 */ unsigned long PeakUsage; /* +0x000c */ unsigned char PageFileName[16]; /* +0x0010 e3 12 00 00 */ }; struct _WNF_TYPE_ID { unsigned char TypeId[16]; /* +0x0000 f3 14 00 00 */ }; struct _ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_GET_ROOT { void *ResolutionContext; /* +0x0000 */ unsigned long long RootIndex; /* +0x0008 */ unsigned char CancelResolution; /* +0x0010 */ unsigned char NoMoreEntries; /* +0x0011 */ unsigned char Root[16]; /* +0x0018 e3 12 00 00 */ }; struct _REPAIR_COPIES_OUTPUT { unsigned char FileOffsetRestart[8]; /* +0x0000 43 13 00 00 */ unsigned long Status; /* +0x0008 */ unsigned long ExtentCount; /* +0x000c */ unsigned char Extents[16]; /* +0x0010 54 21 00 00 */ }; struct _RTL_LFG_RNG_STATE { unsigned char SeedArray[224]; /* +0x0000 c9 2e 00 00 */ long Next; /* +0x00e0 */ long NextP; /* +0x00e4 */ }; struct tagEMREOF { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned long nPalEntries; /* +0x0008 */ unsigned long offPalEntries; /* +0x000c */ unsigned long nSizeLast; /* +0x0010 */ }; struct _FILE_LAYOUT_ENTRY { unsigned long Version; /* +0x0000 */ unsigned long NextFileOffset; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ unsigned long FileAttributes; /* +0x000c */ unsigned long long FileReferenceNumber; /* +0x0010 */ unsigned long FirstNameOffset; /* +0x0018 */ unsigned long FirstStreamOffset; /* +0x001c */ unsigned long ExtraInfoOffset; /* +0x0020 */ unsigned long Reserved; /* +0x0024 */ }; struct _stat32i64 { unsigned char st_dev[4]; /* +0x0000 75 00 00 00 */ unsigned short st_ino; /* +0x0004 */ unsigned short st_mode; /* +0x0006 */ short st_nlink; /* +0x0008 */ short st_uid; /* +0x000a */ short st_gid; /* +0x000c */ unsigned char st_rdev[8]; /* +0x0010 75 00 00 00 */ long long st_size; /* +0x0018 */ long st_atime; /* +0x0020 */ long st_mtime; /* +0x0024 */ long st_ctime; /* +0x0028 */ }; struct _CSV_IS_OWNED_BY_CSVFS { unsigned char OwnedByCSVFS; /* +0x0000 */ }; struct _wfinddata64_t { unsigned char attrib[8]; /* +0x0000 75 00 00 00 */ long long time_create; /* +0x0008 */ long long time_access; /* +0x0010 */ long long time_write; /* +0x0018 */ long long size; /* +0x0020 */ unsigned char name[520]; /* +0x0028 00 16 00 00 */ }; struct _CTL_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char SubjectUsage[16]; /* +0x0008 c8 13 00 00 */ unsigned char ListIdentifier[16]; /* +0x0018 08 13 00 00 */ unsigned char SequenceNumber[16]; /* +0x0028 08 13 00 00 */ unsigned char ThisUpdate[8]; /* +0x0038 37 13 00 00 */ unsigned char NextUpdate[8]; /* +0x0040 37 13 00 00 */ unsigned char SubjectAlgorithm[24]; /* +0x0048 68 14 00 00 */ unsigned long cCTLEntry; /* +0x0060 */ unsigned char rgCTLEntry[8]; /* +0x0068 9d 2e 00 00 */ unsigned long cExtension; /* +0x0070 */ unsigned char rgExtension[8]; /* +0x0078 3f 16 00 00 */ }; struct _TIME_FIELDS { short Year; /* +0x0000 */ short Month; /* +0x0002 */ short Day; /* +0x0004 */ short Hour; /* +0x0006 */ short Minute; /* +0x0008 */ short Second; /* +0x000a */ short Milliseconds; /* +0x000c */ short Weekday; /* +0x000e */ }; struct tagPALETTEENTRY { unsigned char peRed; /* +0x0000 */ unsigned char peGreen; /* +0x0001 */ unsigned char peBlue; /* +0x0002 */ unsigned char peFlags; /* +0x0003 */ }; struct tagRPC_CALL_ATTRIBUTES_V1_W { unsigned char Version[4]; /* +0x0000 75 00 00 00 */ unsigned long Flags; /* +0x0004 */ unsigned long ServerPrincipalNameBufferLength; /* +0x0008 */ unsigned short *ServerPrincipalName; /* +0x0010 */ unsigned long ClientPrincipalNameBufferLength; /* +0x0018 */ unsigned short *ClientPrincipalName; /* +0x0020 */ unsigned long AuthenticationLevel; /* +0x0028 */ unsigned long AuthenticationService; /* +0x002c */ unsigned char NullSession[8]; /* +0x0030 74 00 00 00 */ }; struct _s__CatchableType { unsigned char properties[4]; /* +0x0000 75 00 00 00 */ unsigned char pType[8]; /* +0x0004 6d 1a 00 00 */ unsigned char thisDisplacement[12]; /* +0x000c 19 29 00 00 */ unsigned char sizeOrOffset[4]; /* +0x0018 74 00 00 00 */ unsigned char copyFunction[8]; /* +0x001c d2 13 00 00 */ }; struct _Wx86ThreadState { unsigned long *CallBx86Eip; /* +0x0000 */ void *DeallocationCpu; /* +0x0008 */ unsigned char UseKnownWx86Dll; /* +0x0010 */ char OleStubInvoked; /* +0x0011 */ }; struct tagLOGCOLORSPACEW { unsigned long lcsSignature; /* +0x0000 */ unsigned long lcsVersion; /* +0x0004 */ unsigned long lcsSize; /* +0x0008 */ long lcsCSType; /* +0x000c */ long lcsIntent; /* +0x0010 */ unsigned char lcsEndpoints[36]; /* +0x0014 00 2d 00 00 */ unsigned long lcsGammaRed; /* +0x0038 */ unsigned long lcsGammaGreen; /* +0x003c */ unsigned long lcsGammaBlue; /* +0x0040 */ unsigned char lcsFilename[520]; /* +0x0044 00 16 00 00 */ }; struct tagPOINTER_PEN_INFO { unsigned char pointerInfo[88]; /* +0x0000 11 25 00 00 */ unsigned char penFlags[4]; /* +0x0058 75 00 00 00 */ unsigned char penMask[4]; /* +0x005c 75 00 00 00 */ unsigned char pressure[4]; /* +0x0060 75 00 00 00 */ unsigned char rotation[4]; /* +0x0064 75 00 00 00 */ unsigned char tiltX[4]; /* +0x0068 74 00 00 00 */ unsigned char tiltY[4]; /* +0x006c 74 00 00 00 */ }; struct _RSAPUBKEY { unsigned long magic; /* +0x0000 */ unsigned long bitlen; /* +0x0004 */ unsigned long pubexp; /* +0x0008 */ }; struct _CRYPT_IMAGE_REF { unsigned char pszImage[8]; /* +0x0000 71 06 00 00 */ unsigned long dwFlags; /* +0x0008 */ }; struct _ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_SUCCESSFUL { void *ResolutionContext; /* +0x0000 */ unsigned long RootIndexUsed; /* +0x0008 */ }; struct _GRADIENT_RECT { unsigned long UpperLeft; /* +0x0000 */ unsigned long LowerRight; /* +0x0004 */ }; struct _ADMINISTRATOR_POWER_POLICY { unsigned char MinSleep[4]; /* +0x0000 76 16 00 00 */ unsigned char MaxSleep[4]; /* +0x0004 76 16 00 00 */ unsigned long MinVideoTimeout; /* +0x0008 */ unsigned long MaxVideoTimeout; /* +0x000c */ unsigned long MinSpindownTimeout; /* +0x0010 */ unsigned long MaxSpindownTimeout; /* +0x0014 */ }; struct _RTL_BACKOFF { unsigned long Delay; /* +0x0000 */ }; struct _IMAGE_RESOURCE_DATA_ENTRY { unsigned long OffsetToData; /* +0x0000 */ unsigned long Size; /* +0x0004 */ unsigned long CodePage; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ }; struct _DEDUP_CHUNK_INFORMATION_HASH32 { unsigned long ChunkFlags; /* +0x0000 */ long long ChunkOffsetInFile; /* +0x0008 */ long long ChunkSize; /* +0x0010 */ unsigned char HashVal[32]; /* +0x0018 f7 17 00 00 */ }; struct _KEY_CACHED_INFORMATION { unsigned char LastWriteTime[8]; /* +0x0000 43 13 00 00 */ unsigned long TitleIndex; /* +0x0008 */ unsigned long SubKeys; /* +0x000c */ unsigned long MaxNameLen; /* +0x0010 */ unsigned long Values; /* +0x0014 */ unsigned long MaxValueNameLen; /* +0x0018 */ unsigned long MaxValueDataLen; /* +0x001c */ unsigned long NameLength; /* +0x0020 */ }; struct _RemotableHandle { long fContext; /* +0x0000 */ }; struct _PROCESS_HANDLE_TRACING_ENABLE_EX { unsigned long Flags; /* +0x0000 */ unsigned long TotalSlots; /* +0x0004 */ }; struct _EISA_PORT_DESCRIPTOR { /* unsigned char NumberPorts[0]; +0x0000 85 2f 00 00 */ /* unsigned char Reserved[0]; +0x0000 a6 1e 00 00 */ /* unsigned char Shared[0]; +0x0000 a7 1e 00 00 */ unsigned char MoreEntries[1]; /* +0x0000 a8 1e 00 00 */ }; struct _CMSG_SP3_COMPATIBLE_AUX_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ }; struct tagEMRPOLYPOLYLINE16 { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char rclBounds[16]; /* +0x0008 db 12 00 00 */ unsigned long nPolys; /* +0x0018 */ unsigned long cpts; /* +0x001c */ unsigned char aPolyCounts[4]; /* +0x0020 fc 12 00 00 */ unsigned char apts[4]; /* +0x0024 46 23 00 00 */ }; struct _FLAG_STGMEDIUM { long ContextFlags; /* +0x0000 */ long fPassOwnership; /* +0x0004 */ unsigned char Stgmed[24]; /* +0x0008 46 2b 00 00 */ }; struct tagCUSTDATA { unsigned long cCustData; /* +0x0000 */ unsigned char prgCustData[8]; /* +0x0008 d1 15 00 00 */ }; struct _SERVICE_REQUIRED_PRIVILEGES_INFOA { char *pmszRequiredPrivileges; /* +0x0000 */ }; struct _JOBOBJECT_BASIC_ACCOUNTING_INFORMATION { unsigned char TotalUserTime[8]; /* +0x0000 43 13 00 00 */ unsigned char TotalKernelTime[8]; /* +0x0008 43 13 00 00 */ unsigned char ThisPeriodTotalUserTime[8]; /* +0x0010 43 13 00 00 */ unsigned char ThisPeriodTotalKernelTime[8]; /* +0x0018 43 13 00 00 */ unsigned long TotalPageFaultCount; /* +0x0020 */ unsigned long TotalProcesses; /* +0x0024 */ unsigned long ActiveProcesses; /* +0x0028 */ unsigned long TotalTerminatedProcesses; /* +0x002c */ }; struct _SYSTEM_PERFORMANCE_INFORMATION { unsigned char IdleProcessTime[8]; /* +0x0000 43 13 00 00 */ unsigned char IoReadTransferCount[8]; /* +0x0008 43 13 00 00 */ unsigned char IoWriteTransferCount[8]; /* +0x0010 43 13 00 00 */ unsigned char IoOtherTransferCount[8]; /* +0x0018 43 13 00 00 */ unsigned long IoReadOperationCount; /* +0x0020 */ unsigned long IoWriteOperationCount; /* +0x0024 */ unsigned long IoOtherOperationCount; /* +0x0028 */ unsigned long AvailablePages; /* +0x002c */ unsigned long CommittedPages; /* +0x0030 */ unsigned long CommitLimit; /* +0x0034 */ unsigned long PeakCommitment; /* +0x0038 */ unsigned long PageFaultCount; /* +0x003c */ unsigned long CopyOnWriteCount; /* +0x0040 */ unsigned long TransitionCount; /* +0x0044 */ unsigned long CacheTransitionCount; /* +0x0048 */ unsigned long DemandZeroCount; /* +0x004c */ unsigned long PageReadCount; /* +0x0050 */ unsigned long PageReadIoCount; /* +0x0054 */ unsigned long CacheReadCount; /* +0x0058 */ unsigned long CacheIoCount; /* +0x005c */ unsigned long DirtyPagesWriteCount; /* +0x0060 */ unsigned long DirtyWriteIoCount; /* +0x0064 */ unsigned long MappedPagesWriteCount; /* +0x0068 */ unsigned long MappedWriteIoCount; /* +0x006c */ unsigned long PagedPoolPages; /* +0x0070 */ unsigned long NonPagedPoolPages; /* +0x0074 */ unsigned long PagedPoolAllocs; /* +0x0078 */ unsigned long PagedPoolFrees; /* +0x007c */ unsigned long NonPagedPoolAllocs; /* +0x0080 */ unsigned long NonPagedPoolFrees; /* +0x0084 */ unsigned long FreeSystemPtes; /* +0x0088 */ unsigned long ResidentSystemCodePage; /* +0x008c */ unsigned long TotalSystemDriverPages; /* +0x0090 */ unsigned long TotalSystemCodePages; /* +0x0094 */ unsigned long NonPagedPoolLookasideHits; /* +0x0098 */ unsigned long PagedPoolLookasideHits; /* +0x009c */ unsigned long AvailablePagedPoolPages; /* +0x00a0 */ unsigned long ResidentSystemCachePage; /* +0x00a4 */ unsigned long ResidentPagedPoolPage; /* +0x00a8 */ unsigned long ResidentSystemDriverPage; /* +0x00ac */ unsigned long CcFastReadNoWait; /* +0x00b0 */ unsigned long CcFastReadWait; /* +0x00b4 */ unsigned long CcFastReadResourceMiss; /* +0x00b8 */ unsigned long CcFastReadNotPossible; /* +0x00bc */ unsigned long CcFastMdlReadNoWait; /* +0x00c0 */ unsigned long CcFastMdlReadWait; /* +0x00c4 */ unsigned long CcFastMdlReadResourceMiss; /* +0x00c8 */ unsigned long CcFastMdlReadNotPossible; /* +0x00cc */ unsigned long CcMapDataNoWait; /* +0x00d0 */ unsigned long CcMapDataWait; /* +0x00d4 */ unsigned long CcMapDataNoWaitMiss; /* +0x00d8 */ unsigned long CcMapDataWaitMiss; /* +0x00dc */ unsigned long CcPinMappedDataCount; /* +0x00e0 */ unsigned long CcPinReadNoWait; /* +0x00e4 */ unsigned long CcPinReadWait; /* +0x00e8 */ unsigned long CcPinReadNoWaitMiss; /* +0x00ec */ unsigned long CcPinReadWaitMiss; /* +0x00f0 */ unsigned long CcCopyReadNoWait; /* +0x00f4 */ unsigned long CcCopyReadWait; /* +0x00f8 */ unsigned long CcCopyReadNoWaitMiss; /* +0x00fc */ unsigned long CcCopyReadWaitMiss; /* +0x0100 */ unsigned long CcMdlReadNoWait; /* +0x0104 */ unsigned long CcMdlReadWait; /* +0x0108 */ unsigned long CcMdlReadNoWaitMiss; /* +0x010c */ unsigned long CcMdlReadWaitMiss; /* +0x0110 */ unsigned long CcReadAheadIos; /* +0x0114 */ unsigned long CcLazyWriteIos; /* +0x0118 */ unsigned long CcLazyWritePages; /* +0x011c */ unsigned long CcDataFlushes; /* +0x0120 */ unsigned long CcDataPages; /* +0x0124 */ unsigned long ContextSwitches; /* +0x0128 */ unsigned long FirstLevelTbFills; /* +0x012c */ unsigned long SecondLevelTbFills; /* +0x0130 */ unsigned long SystemCalls; /* +0x0134 */ unsigned long long CcTotalDirtyPages; /* +0x0138 */ unsigned long long CcDirtyPageThreshold; /* +0x0140 */ long long ResidentAvailablePages; /* +0x0148 */ }; struct tagWIN16RECT { unsigned short left; /* +0x0000 */ unsigned short top; /* +0x0002 */ unsigned short right; /* +0x0004 */ unsigned short bottom; /* +0x0006 */ }; struct _RTL_MODULE_EXTENDED_INFO { unsigned char BasicInfo[8]; /* +0x0000 ad 2f 00 00 */ unsigned long ImageSize; /* +0x0008 */ unsigned short FileNameOffset; /* +0x000c */ unsigned char FullPathName[258]; /* +0x000e 90 16 00 00 */ }; struct _COMSTAT { /* unsigned char fCtsHold[0]; +0x0000 94 13 00 00 */ /* unsigned char fDsrHold[0]; +0x0000 90 18 00 00 */ /* unsigned char fRlsdHold[0]; +0x0000 91 18 00 00 */ /* unsigned char fXoffHold[0]; +0x0000 74 1e 00 00 */ /* unsigned char fXoffSent[0]; +0x0000 75 1e 00 00 */ /* unsigned char fEof[0]; +0x0000 0b 24 00 00 */ /* unsigned char fTxim[0]; +0x0000 32 1f 00 00 */ unsigned char fReserved[4]; /* +0x0000 bd 23 00 00 */ unsigned long cbInQue; /* +0x0004 */ unsigned long cbOutQue; /* +0x0008 */ }; struct tagPOINTER_INFO { unsigned long pointerType; /* +0x0000 */ unsigned char pointerId[4]; /* +0x0004 75 00 00 00 */ unsigned char frameId[4]; /* +0x0008 75 00 00 00 */ unsigned char pointerFlags[4]; /* +0x000c 75 00 00 00 */ void *sourceDevice; /* +0x0010 */ unsigned char hwndTarget[8]; /* +0x0018 f7 12 00 00 */ unsigned char ptPixelLocation[8]; /* +0x0020 a1 14 00 00 */ unsigned char ptHimetricLocation[8]; /* +0x0028 a1 14 00 00 */ unsigned char ptPixelLocationRaw[8]; /* +0x0030 a1 14 00 00 */ unsigned char ptHimetricLocationRaw[8]; /* +0x0038 a1 14 00 00 */ unsigned long dwTime; /* +0x0040 */ unsigned char historyCount[4]; /* +0x0044 75 00 00 00 */ unsigned char InputData[4]; /* +0x0048 74 00 00 00 */ unsigned long dwKeyStates; /* +0x004c */ unsigned long long PerformanceCount; /* +0x0050 */ }; struct _PROCESS_WS_WATCH_INFORMATION_EX { unsigned char BasicInfo[16]; /* +0x0000 89 23 00 00 */ unsigned long long FaultingThreadId; /* +0x0010 */ unsigned long long Flags; /* +0x0018 */ }; struct _TRANSACTIONMANAGER_LOG_INFORMATION { unsigned char LogIdentity[16]; /* +0x0000 f3 14 00 00 */ }; struct _FP_80 { unsigned char W[12]; /* +0x0000 28 13 00 00 */ }; struct _ALPC_TOKEN_ATTR { unsigned char TokenId[8]; /* +0x0000 38 15 00 00 */ unsigned char AuthenticationId[8]; /* +0x0008 38 15 00 00 */ unsigned char ModifiedId[8]; /* +0x0010 38 15 00 00 */ }; struct _FILE_PREFETCH { unsigned long Type; /* +0x0000 */ unsigned long Count; /* +0x0004 */ unsigned char Prefetch[8]; /* +0x0008 dd 2f 00 00 */ }; struct _ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA { /* unsigned char ResolutionBeginning[0]; +0x0000 e2 2f 00 00 */ /* unsigned char GetRoot[0]; +0x0000 e3 2f 00 00 */ /* unsigned char ResolutionSuccessful[0]; +0x0000 e4 2f 00 00 */ unsigned char ResolutionEnding[64]; /* +0x0000 e5 2f 00 00 */ }; struct tagHW_PROFILE_INFOW { unsigned long dwDockInfo; /* +0x0000 */ unsigned char szHwProfileGuid[78]; /* +0x0004 e8 2f 00 00 */ unsigned char szHwProfileName[162]; /* +0x0052 44 21 00 00 */ }; struct _SYSTEM_EXCEPTION_INFORMATION { unsigned long AlignmentFixupCount; /* +0x0000 */ unsigned long ExceptionDispatchCount; /* +0x0004 */ unsigned long FloatingEmulationCount; /* +0x0008 */ unsigned long ByteWordEmulationCount; /* +0x000c */ }; struct _CM_FLOPPY_DEVICE_DATA { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned char Size[8]; /* +0x0004 38 1d 00 00 */ unsigned long MaxDensity; /* +0x000c */ unsigned long MountDensity; /* +0x0010 */ unsigned char StepRateHeadUnloadTime; /* +0x0014 */ unsigned char HeadLoadTime; /* +0x0015 */ unsigned char MotorOffTime; /* +0x0016 */ unsigned char SectorLengthCode; /* +0x0017 */ unsigned char SectorPerTrack; /* +0x0018 */ unsigned char ReadWriteGapLength; /* +0x0019 */ unsigned char DataTransferLength; /* +0x001a */ unsigned char FormatGapLength; /* +0x001b */ unsigned char FormatFillCharacter; /* +0x001c */ unsigned char HeadSettleTime; /* +0x001d */ unsigned char MotorSettleTime; /* +0x001e */ unsigned char MaximumTrackValue; /* +0x001f */ unsigned char DataTransferRate; /* +0x0020 */ }; struct tagPANOSE { unsigned char bFamilyType; /* +0x0000 */ unsigned char bSerifStyle; /* +0x0001 */ unsigned char bWeight; /* +0x0002 */ unsigned char bProportion; /* +0x0003 */ unsigned char bContrast; /* +0x0004 */ unsigned char bStrokeVariation; /* +0x0005 */ unsigned char bArmStyle; /* +0x0006 */ unsigned char bLetterform; /* +0x0007 */ unsigned char bMidline; /* +0x0008 */ unsigned char bXHeight; /* +0x0009 */ }; struct _ENUM_SERVICE_STATUS_PROCESSW { unsigned char lpServiceName[8]; /* +0x0000 71 06 00 00 */ unsigned char lpDisplayName[8]; /* +0x0008 71 06 00 00 */ unsigned char ServiceStatusProcess[40]; /* +0x0010 e0 16 00 00 */ }; struct _SAFER_CODE_PROPERTIES_V2 { unsigned long cbSize; /* +0x0000 */ unsigned long dwCheckFlags; /* +0x0004 */ unsigned char ImagePath[8]; /* +0x0008 cb 13 00 00 */ void *hImageFileHandle; /* +0x0010 */ unsigned long UrlZoneId; /* +0x0018 */ unsigned char ImageHash[64]; /* +0x001c 19 13 00 00 */ unsigned long dwImageHashSize; /* +0x005c */ unsigned char ImageSize[8]; /* +0x0060 43 13 00 00 */ unsigned char HashAlgorithm[8]; /* +0x0068 75 00 00 00 */ unsigned char *pByteBlock; /* +0x0070 */ unsigned char hWndParent[8]; /* +0x0078 f7 12 00 00 */ unsigned long dwWVTUIChoice; /* +0x0080 */ unsigned char PackageMoniker[8]; /* +0x0088 cb 13 00 00 */ unsigned char PackagePublisher[8]; /* +0x0090 cb 13 00 00 */ unsigned char PackageName[8]; /* +0x0098 cb 13 00 00 */ unsigned long long PackageVersion; /* +0x00a0 */ }; struct _SYSTEM_PROCESSOR_POWER_INFORMATION { unsigned char CurrentFrequency; /* +0x0000 */ unsigned char ThermalLimitFrequency; /* +0x0001 */ unsigned char ConstantThrottleFrequency; /* +0x0002 */ unsigned char DegradedThrottleFrequency; /* +0x0003 */ unsigned char LastBusyFrequency; /* +0x0004 */ unsigned char LastC3Frequency; /* +0x0005 */ unsigned char LastAdjustedBusyFrequency; /* +0x0006 */ unsigned char ProcessorMinThrottle; /* +0x0007 */ unsigned char ProcessorMaxThrottle; /* +0x0008 */ unsigned long NumberOfFrequencies; /* +0x000c */ unsigned long PromotionCount; /* +0x0010 */ unsigned long DemotionCount; /* +0x0014 */ unsigned long ErrorCount; /* +0x0018 */ unsigned long RetryCount; /* +0x001c */ unsigned long long CurrentFrequencyTime; /* +0x0020 */ unsigned long long CurrentProcessorTime; /* +0x0028 */ unsigned long long CurrentProcessorIdleTime; /* +0x0030 */ unsigned long long LastProcessorTime; /* +0x0038 */ unsigned long long LastProcessorIdleTime; /* +0x0040 */ }; struct _RTL_RXACT_LOG { unsigned long OperationCount; /* +0x0000 */ unsigned long LogSize; /* +0x0004 */ unsigned long LogSizeInUse; /* +0x0008 */ unsigned long Alignment; /* +0x000c */ }; struct _LDR_RESLOADER_RET { void *Module; /* +0x0000 */ void *DataEntry; /* +0x0008 */ void *TargetModule; /* +0x0010 */ }; struct tagIMEMENUITEMINFOA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char fType[4]; /* +0x0004 75 00 00 00 */ unsigned char fState[4]; /* +0x0008 75 00 00 00 */ unsigned char wID[4]; /* +0x000c 75 00 00 00 */ unsigned char hbmpChecked[8]; /* +0x0010 18 18 00 00 */ unsigned char hbmpUnchecked[8]; /* +0x0018 18 18 00 00 */ unsigned long dwItemData; /* +0x0020 */ unsigned char szString[84]; /* +0x0024 0d 30 00 00 */ unsigned char hbmpItem[8]; /* +0x0078 18 18 00 00 */ }; struct _SYSTEM_GDI_DRIVER_INFORMATION { unsigned char DriverName[16]; /* +0x0000 e3 12 00 00 */ void *ImageAddress; /* +0x0010 */ void *SectionPointer; /* +0x0018 */ void *EntryPoint; /* +0x0020 */ unsigned char ExportSectionPointer[8]; /* +0x0028 13 30 00 00 */ unsigned long ImageLength; /* +0x0030 */ }; struct tagKERNINGPAIR { unsigned short wFirst; /* +0x0000 */ unsigned short wSecond; /* +0x0002 */ unsigned char iKernAmount[4]; /* +0x0004 74 00 00 00 */ }; struct tagCOLORMATCHTOTARGET { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned long dwAction; /* +0x0008 */ unsigned long dwFlags; /* +0x000c */ unsigned long cbName; /* +0x0010 */ unsigned long cbData; /* +0x0014 */ unsigned char Data[4]; /* +0x0018 ff 12 00 00 */ }; struct _wireSAFEARR_UNKNOWN { unsigned long Size; /* +0x0000 */ unsigned char apUnknown[8]; /* +0x0008 4e 22 00 00 */ }; struct _CRYPT_PROVIDERS { unsigned long cProviders; /* +0x0000 */ unsigned char rgpszProviders[8]; /* +0x0008 db 13 00 00 */ }; struct _LEARNING_MODE_OBJECT_INFORMATION { unsigned char ListEntry[8]; /* +0x0000 ce 17 00 00 */ unsigned char LogLevel[8]; /* +0x0008 25 30 00 00 */ unsigned char ObjectType[8]; /* +0x0010 b6 17 00 00 */ unsigned char ObjectName[8]; /* +0x0018 b6 17 00 00 */ void *RootDirectory; /* +0x0020 */ unsigned char FullObjectName[16]; /* +0x0028 e3 12 00 00 */ }; struct _SYSTEM_VHD_BOOT_INFORMATION { unsigned char OsDiskIsVhd; /* +0x0000 */ unsigned long OsVhdFilePathOffset; /* +0x0004 */ unsigned char OsVhdParentVolume[4]; /* +0x0008 0a 14 00 00 */ }; struct _CMSG_SIGNER_ENCODE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char pCertInfo[8]; /* +0x0008 4e 1a 00 00 */ unsigned long long hCryptProv; /* +0x0010 */ unsigned long long hNCryptKey; /* +0x0010 */ unsigned long dwKeySpec; /* +0x0018 */ unsigned char HashAlgorithm[24]; /* +0x0020 68 14 00 00 */ void *pvHashAuxInfo; /* +0x0038 */ unsigned long cAuthAttr; /* +0x0040 */ unsigned char rgAuthAttr[8]; /* +0x0048 e3 13 00 00 */ unsigned long cUnauthAttr; /* +0x0050 */ unsigned char rgUnauthAttr[8]; /* +0x0058 e3 13 00 00 */ }; struct tagEMRCREATEPEN { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned long ihPen; /* +0x0008 */ unsigned char lopn[16]; /* +0x000c cb 18 00 00 */ }; struct _MIDL_STUBLESS_PROXY_INFO { unsigned char pStubDesc[8]; /* +0x0000 77 29 00 00 */ unsigned char ProcFormatString[8]; /* +0x0008 4b 19 00 00 */ unsigned char FormatStringOffset[8]; /* +0x0010 4d 19 00 00 */ unsigned char pTransferSyntax[8]; /* +0x0018 2b 24 00 00 */ unsigned long long nCount; /* +0x0020 */ unsigned char pSyntaxInfo[8]; /* +0x0028 dd 20 00 00 */ }; struct _CERT_DH_PARAMETERS { unsigned char p[16]; /* +0x0000 08 13 00 00 */ unsigned char g[16]; /* +0x0010 08 13 00 00 */ }; struct tagORPCTHIS { unsigned char version[4]; /* +0x0000 95 1f 00 00 */ unsigned long flags; /* +0x0004 */ unsigned long reserved1; /* +0x0008 */ unsigned char cid[20]; /* +0x000c f3 14 00 00 */ unsigned char extensions[8]; /* +0x0020 54 30 00 00 */ }; struct _PROCESS_MITIGATION_DEP_POLICY { unsigned long Flags; /* +0x0000 */ /* unsigned char Enable[0]; +0x0000 94 13 00 00 */ /* unsigned char DisableAtlThunkEmulation[0]; +0x0000 90 18 00 00 */ unsigned char ReservedFlags[4]; /* +0x0000 c5 19 00 00 */ unsigned char Permanent; /* +0x0004 */ }; struct _KEY_EVENT_RECORD { unsigned char bKeyDown[4]; /* +0x0000 74 00 00 00 */ unsigned short wRepeatCount; /* +0x0004 */ unsigned short wVirtualKeyCode; /* +0x0006 */ unsigned short wVirtualScanCode; /* +0x0008 */ }; struct _KEY_EVENT_RECORD:: { /* unsigned char UnicodeChar[0]; +0x0000 71 00 00 00 */ char AsciiChar; /* +0x0000 */ }; struct _RTL_PROCESS_MODULES { unsigned long NumberOfModules; /* +0x0000 */ unsigned char Modules[296]; /* +0x0008 67 30 00 00 */ }; struct _PEB { unsigned char InheritedAddressSpace; /* +0x0000 */ unsigned char ReadImageFileExecOptions; /* +0x0001 */ unsigned char BeingDebugged; /* +0x0002 */ unsigned char BitField; /* +0x0003 */ /* unsigned char ImageUsesLargePages[0]; +0x0003 a2 1e 00 00 */ /* unsigned char IsProtectedProcess[0]; +0x0003 a3 1e 00 00 */ /* unsigned char IsLegacyProcess[0]; +0x0003 a4 1e 00 00 */ /* unsigned char IsImageDynamicallyRelocated[0]; +0x0003 28 26 00 00 */ /* unsigned char SkipPatchingUser32Forwarders[0]; +0x0003 0e 26 00 00 */ unsigned char SpareBits[5]; /* +0x0003 29 26 00 00 */ void *Mutant; /* +0x0008 */ void *ImageBaseAddress; /* +0x0010 */ unsigned char Ldr[8]; /* +0x0018 6b 30 00 00 */ unsigned char ProcessParameters[8]; /* +0x0020 f2 23 00 00 */ void *SubSystemData; /* +0x0028 */ void *ProcessHeap; /* +0x0030 */ unsigned char FastPebLock[8]; /* +0x0038 90 1f 00 00 */ void *AtlThunkSListPtr; /* +0x0040 */ void *IFEOKey; /* +0x0048 */ unsigned long CrossProcessFlags; /* +0x0050 */ /* unsigned char ProcessInJob[0]; +0x0050 94 13 00 00 */ /* unsigned char ProcessInitializing[0]; +0x0050 90 18 00 00 */ /* unsigned char ProcessUsingVEH[0]; +0x0050 91 18 00 00 */ /* unsigned char ProcessUsingVCH[0]; +0x0050 74 1e 00 00 */ /* unsigned char ProcessUsingFTH[0]; +0x0050 75 1e 00 00 */ unsigned char ReservedBits0[8]; /* +0x0050 76 1e 00 00 */ void *KernelCallbackTable; /* +0x0058 */ void *UserSharedInfoPtr; /* +0x0058 */ unsigned char SystemReserved[4]; /* +0x0060 fc 12 00 00 */ unsigned long AtlThunkSListPtr32; /* +0x0064 */ void *ApiSetMap; /* +0x0068 */ unsigned long TlsExpansionCounter; /* +0x0070 */ void *TlsBitmap; /* +0x0078 */ unsigned char TlsBitmapBits[8]; /* +0x0080 14 16 00 00 */ void *ReadOnlySharedMemoryBase; /* +0x0088 */ void *HotpatchInformation; /* +0x0090 */ unsigned char ReadOnlyStaticServerData[8]; /* +0x0098 55 13 00 00 */ void *AnsiCodePageData; /* +0x00a0 */ void *OemCodePageData; /* +0x00a8 */ void *UnicodeCaseTableData; /* +0x00b0 */ unsigned long NumberOfProcessors; /* +0x00b8 */ unsigned long NtGlobalFlag; /* +0x00bc */ unsigned char CriticalSectionTimeout[8]; /* +0x00c0 43 13 00 00 */ unsigned long long HeapSegmentReserve; /* +0x00c8 */ unsigned long long HeapSegmentCommit; /* +0x00d0 */ unsigned long long HeapDeCommitTotalFreeThreshold; /* +0x00d8 */ unsigned long long HeapDeCommitFreeBlockThreshold; /* +0x00e0 */ unsigned long NumberOfHeaps; /* +0x00e8 */ unsigned long MaximumNumberOfHeaps; /* +0x00ec */ unsigned char ProcessHeaps[8]; /* +0x00f0 55 13 00 00 */ void *GdiSharedHandleTable; /* +0x00f8 */ void *ProcessStarterHelper; /* +0x0100 */ unsigned long GdiDCAttributeList; /* +0x0108 */ unsigned char LoaderLock[8]; /* +0x0110 90 1f 00 00 */ unsigned long OSMajorVersion; /* +0x0118 */ unsigned long OSMinorVersion; /* +0x011c */ unsigned short OSBuildNumber; /* +0x0120 */ unsigned short OSCSDVersion; /* +0x0122 */ unsigned long OSPlatformId; /* +0x0124 */ unsigned long ImageSubsystem; /* +0x0128 */ unsigned long ImageSubsystemMajorVersion; /* +0x012c */ unsigned long ImageSubsystemMinorVersion; /* +0x0130 */ unsigned long long ActiveProcessAffinityMask; /* +0x0138 */ unsigned char GdiHandleBuffer[240]; /* +0x0140 6c 30 00 00 */ unsigned char PostProcessInitRoutine[8]; /* +0x0230 4c 1b 00 00 */ void *TlsExpansionBitmap; /* +0x0238 */ unsigned char TlsExpansionBitmapBits[128]; /* +0x0240 6d 30 00 00 */ unsigned long SessionId; /* +0x02c0 */ unsigned char AppCompatFlags[8]; /* +0x02c8 3e 23 00 00 */ unsigned char AppCompatFlagsUser[8]; /* +0x02d0 3e 23 00 00 */ void *pShimData; /* +0x02d8 */ void *AppCompatInfo; /* +0x02e0 */ unsigned char CSDVersion[16]; /* +0x02e8 e3 12 00 00 */ unsigned char ActivationContextData[8]; /* +0x02f8 70 30 00 00 */ unsigned char ProcessAssemblyStorageMap[8]; /* +0x0300 72 30 00 00 */ unsigned char SystemDefaultActivationContextData[8]; /* +0x0308 70 30 00 00 */ unsigned char SystemAssemblyStorageMap[8]; /* +0x0310 72 30 00 00 */ unsigned long long MinimumStackCommit; /* +0x0318 */ unsigned char FlsCallback[8]; /* +0x0320 74 30 00 00 */ unsigned char FlsListHead[16]; /* +0x0328 73 1f 00 00 */ void *FlsBitmap; /* +0x0338 */ unsigned char FlsBitmapBits[16]; /* +0x0340 66 1a 00 00 */ unsigned long FlsHighIndex; /* +0x0350 */ void *WerRegistrationData; /* +0x0358 */ void *WerShipAssertPtr; /* +0x0360 */ void *pUnused; /* +0x0368 */ void *pImageHeaderHash; /* +0x0370 */ unsigned long TracingFlags; /* +0x0378 */ /* unsigned char HeapTracingEnabled[0]; +0x0378 94 13 00 00 */ /* unsigned char CritSecTracingEnabled[0]; +0x0378 90 18 00 00 */ /* unsigned char LibLoaderTracingEnabled[0]; +0x0378 91 18 00 00 */ unsigned char SpareTracingBits[8]; /* +0x0378 f7 2c 00 00 */ unsigned long long CsrServerReadOnlySharedMemoryBase; /* +0x0380 */ }; struct _CALL_FRAME { void *ReturnAddress; /* +0x0000 */ void *Param1Home; /* +0x0008 */ void *Param2Home; /* +0x0010 */ void *Param3Home; /* +0x0018 */ void *Param4Home; /* +0x0020 */ }; struct _RPC_SECURITY_QOS { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ }; struct _SYSTEM_CODEINTEGRITY_INFORMATION { unsigned long Length; /* +0x0000 */ unsigned long CodeIntegrityOptions; /* +0x0004 */ }; struct _SEC_WINNT_AUTH_IDENTITY_A { unsigned char *User; /* +0x0000 */ unsigned long UserLength; /* +0x0008 */ unsigned char *Domain; /* +0x0010 */ unsigned long DomainLength; /* +0x0018 */ unsigned char *Password; /* +0x0020 */ unsigned long PasswordLength; /* +0x0028 */ unsigned long Flags; /* +0x002c */ }; struct _PROCESS_ACCESS_TOKEN { void *Token; /* +0x0000 */ void *Thread; /* +0x0008 */ }; struct _STORAGE_QUERY_DEPENDENT_VOLUME_RESPONSE { unsigned long ResponseLevel; /* +0x0000 */ unsigned long NumberEntries; /* +0x0004 */ /* unsigned char Lev1Depends[0]; +0x0008 af 30 00 00 */ unsigned char Lev2Depends[68]; /* +0x0008 b1 30 00 00 */ }; struct tagCLIENTCREATESTRUCT { void *hWindowMenu; /* +0x0000 */ unsigned char idFirstChild[8]; /* +0x0008 75 00 00 00 */ }; struct _CONSOLE_HISTORY_INFO { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char HistoryBufferSize[4]; /* +0x0004 75 00 00 00 */ unsigned char NumberOfHistoryBuffers[4]; /* +0x0008 75 00 00 00 */ unsigned long dwFlags; /* +0x000c */ }; struct _CERT_OR_CRL_BUNDLE { unsigned long cItem; /* +0x0000 */ unsigned char rgItem[8]; /* +0x0008 bd 30 00 00 */ }; struct _OBJECTID { unsigned char Lineage[16]; /* +0x0000 f3 14 00 00 */ unsigned long Uniquifier; /* +0x0010 */ }; struct tagEMRSETPIXELV { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char ptlPixel[8]; /* +0x0008 a6 13 00 00 */ unsigned long crColor; /* +0x0010 */ }; struct _RPC_SERVER_INTERFACE { unsigned char Length[4]; /* +0x0000 75 00 00 00 */ unsigned char InterfaceId[20]; /* +0x0004 06 17 00 00 */ unsigned char TransferSyntax[24]; /* +0x0018 06 17 00 00 */ unsigned char DispatchTable[8]; /* +0x0030 49 19 00 00 */ unsigned char RpcProtseqEndpointCount[8]; /* +0x0038 75 00 00 00 */ unsigned char RpcProtseqEndpoint[8]; /* +0x0040 9a 1e 00 00 */ void *DefaultManagerEpv; /* +0x0048 */ unsigned char InterpreterInfo[8]; /* +0x0050 4f 19 00 00 */ unsigned char Flags[8]; /* +0x0058 75 00 00 00 */ }; struct _CRYPT_OBJECT_LOCATOR_PROVIDER_TABLE { unsigned long cbSize; /* +0x0000 */ unsigned char pfnGet[8]; /* +0x0008 d0 30 00 00 */ unsigned char pfnRelease[8]; /* +0x0010 d0 2a 00 00 */ unsigned char pfnFreePassword[8]; /* +0x0018 6e 1e 00 00 */ unsigned char pfnFree[8]; /* +0x0020 fb 1a 00 00 */ unsigned char pfnFreeIdentifier[8]; /* +0x0028 c4 2c 00 00 */ }; struct _NT_TIB64 { unsigned long long ExceptionList; /* +0x0000 */ unsigned long long StackBase; /* +0x0008 */ unsigned long long StackLimit; /* +0x0010 */ unsigned long long SubSystemTib; /* +0x0018 */ unsigned long long FiberData; /* +0x0020 */ unsigned long Version; /* +0x0020 */ unsigned long long ArbitraryUserPointer; /* +0x0028 */ unsigned long long Self; /* +0x0030 */ }; struct _LOOKUP_STREAM_FROM_CLUSTER_INPUT { unsigned long Flags; /* +0x0000 */ unsigned long NumberOfClusters; /* +0x0004 */ unsigned char Cluster[8]; /* +0x0008 98 25 00 00 */ }; struct _SYSTEM_INTERRUPT_INFORMATION { unsigned long ContextSwitches; /* +0x0000 */ unsigned long DpcCount; /* +0x0004 */ unsigned long DpcRate; /* +0x0008 */ unsigned long TimeIncrement; /* +0x000c */ unsigned long DpcBypassCount; /* +0x0010 */ unsigned long ApcBypassCount; /* +0x0014 */ }; struct _UMS_SCHEDULER_STARTUP_INFO { unsigned long UmsVersion; /* +0x0000 */ void *CompletionList; /* +0x0008 */ unsigned char SchedulerProc[8]; /* +0x0010 fc 15 00 00 */ void *SchedulerParam; /* +0x0018 */ }; struct _ABCFLOAT { unsigned char abcfA[4]; /* +0x0000 40 00 00 00 */ unsigned char abcfB[4]; /* +0x0004 40 00 00 00 */ unsigned char abcfC[4]; /* +0x0008 40 00 00 00 */ }; struct tagEMRCREATECOLORSPACE { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned long ihCS; /* +0x0008 */ unsigned char lcs[328]; /* +0x000c dd 30 00 00 */ }; struct _numberfmtW { unsigned char NumDigits[4]; /* +0x0000 75 00 00 00 */ unsigned char LeadingZero[4]; /* +0x0004 75 00 00 00 */ unsigned char Grouping[8]; /* +0x0008 75 00 00 00 */ unsigned char lpDecimalSep[8]; /* +0x0010 71 06 00 00 */ unsigned char lpThousandSep[8]; /* +0x0018 71 06 00 00 */ unsigned char NegativeOrder[8]; /* +0x0020 75 00 00 00 */ }; struct _CRYPT_PKCS8_EXPORT_PARAMS { unsigned long long hCryptProv; /* +0x0000 */ unsigned long dwKeySpec; /* +0x0008 */ char *pszPrivateKeyObjId; /* +0x0010 */ unsigned char pEncryptPrivateKeyFunc[8]; /* +0x0018 e4 30 00 00 */ void *pVoidEncryptFunc; /* +0x0020 */ }; struct _TXFS_START_RM_INFORMATION { unsigned long Flags; /* +0x0000 */ unsigned long long LogContainerSize; /* +0x0008 */ unsigned long LogContainerCountMin; /* +0x0010 */ unsigned long LogContainerCountMax; /* +0x0014 */ unsigned long LogGrowthIncrement; /* +0x0018 */ unsigned long LogAutoShrinkPercentage; /* +0x001c */ unsigned long TmLogPathOffset; /* +0x0020 */ unsigned short TmLogPathLength; /* +0x0024 */ unsigned short LoggingMode; /* +0x0026 */ unsigned short LogPathLength; /* +0x0028 */ unsigned short Reserved; /* +0x002a */ unsigned char LogPath[4]; /* +0x002c 0a 14 00 00 */ }; struct _STREAM_LAYOUT_ENTRY { unsigned long Version; /* +0x0000 */ unsigned long NextStreamOffset; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ unsigned long ExtentInformationOffset; /* +0x000c */ unsigned char AllocationSize[8]; /* +0x0010 43 13 00 00 */ unsigned char EndOfFile[8]; /* +0x0018 43 13 00 00 */ unsigned long StreamIdentifierLength; /* +0x0020 */ unsigned long Reserved; /* +0x0024 */ unsigned char StreamIdentifier[8]; /* +0x0028 0a 14 00 00 */ }; struct _PARSE_MESSAGE_CONTEXT { unsigned long fFlags; /* +0x0000 */ unsigned long cwSavColumn; /* +0x0004 */ unsigned long long iwSrc; /* +0x0008 */ unsigned long long iwDst; /* +0x0010 */ unsigned long long iwDstSpace; /* +0x0018 */ char *lpvArgStart; /* +0x0020 */ }; struct _IMAGE_ALPHA64_RUNTIME_FUNCTION_ENTRY { unsigned long long BeginAddress; /* +0x0000 */ unsigned long long EndAddress; /* +0x0008 */ unsigned long long ExceptionHandler; /* +0x0010 */ unsigned long long HandlerData; /* +0x0018 */ unsigned long long PrologEndAddress; /* +0x0020 */ }; struct _QUERY_FILE_LAYOUT_INPUT { unsigned long NumberOfPairs; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned char FilterType[4]; /* +0x0008 f2 30 00 00 */ unsigned long Reserved; /* +0x000c */ }; struct _QUERY_FILE_LAYOUT_INPUT:: { /* unsigned char ClusterRanges[0]; +0x0000 f6 30 00 00 */ unsigned char FileReferenceRanges[16]; /* +0x0000 f7 30 00 00 */ }; struct _CERT_NAME_VALUE { unsigned long dwValueType; /* +0x0000 */ unsigned char Value[16]; /* +0x0008 08 13 00 00 */ }; struct _FILE_VOLUME_NAME_INFORMATION { unsigned long DeviceNameLength; /* +0x0000 */ unsigned char DeviceName[4]; /* +0x0004 0a 14 00 00 */ }; struct _POWER_SESSION_TIMEOUTS { unsigned long InputTimeout; /* +0x0000 */ unsigned long DisplayTimeout; /* +0x0004 */ }; struct _KAFFINITY_ENUMERATION_CONTEXT { unsigned char Affinity[8]; /* +0x0000 a6 23 00 00 */ unsigned long long CurrentMask; /* +0x0008 */ unsigned short CurrentIndex; /* +0x0010 */ }; struct _PROV_ENUMALGS { unsigned char aiAlgid[4]; /* +0x0000 75 00 00 00 */ unsigned long dwBitLen; /* +0x0004 */ unsigned long dwNameLen; /* +0x0008 */ unsigned char szName[20]; /* +0x000c e9 1e 00 00 */ }; struct _TOKEN_ELEVATION { unsigned long TokenIsElevated; /* +0x0000 */ }; struct _SYSTEM_HOTPATCH_CODE_INFORMATION { unsigned long Flags; /* +0x0000 */ unsigned long InfoSize; /* +0x0004 */ /* unsigned char CodeInfo[0]; +0x0008 34 31 00 00 */ /* unsigned char KernelInfo[0]; +0x0008 35 31 00 00 */ /* unsigned char UserModeInfo[0]; +0x0008 36 31 00 00 */ /* unsigned char InjectionInfo[0]; +0x0008 37 31 00 00 */ unsigned char AtomicSwap[48]; /* +0x0008 38 31 00 00 */ }; struct _SYSTEM_HOTPATCH_CODE_INFORMATION:::: { unsigned long long ParentDirectory; /* +0x0000 */ unsigned long long ObjectHandle1; /* +0x0008 */ unsigned long long ObjectHandle2; /* +0x0010 */ }; struct _SYSTEM_HOTPATCH_CODE_INFORMATION:::: { unsigned short NameOffset; /* +0x0000 */ unsigned short NameLength; /* +0x0002 */ unsigned short TargetNameOffset; /* +0x0004 */ unsigned short TargetNameLength; /* +0x0006 */ unsigned short ColdpatchImagePathOffset; /* +0x0008 */ unsigned short ColdpatchImagePathLength; /* +0x000a */ unsigned long long TargetProcess; /* +0x0010 */ }; struct _SYSTEM_HOTPATCH_CODE_INFORMATION:::: { unsigned short NameOffset; /* +0x0000 */ unsigned short NameLength; /* +0x0002 */ unsigned short TargetNameOffset; /* +0x0004 */ unsigned short TargetNameLength; /* +0x0006 */ unsigned short ColdpatchImagePathOffset; /* +0x0008 */ unsigned short ColdpatchImagePathLength; /* +0x000a */ unsigned char PatchingFinished; /* +0x000c */ }; struct _SYSTEM_HOTPATCH_CODE_INFORMATION:::: { unsigned short NameOffset; /* +0x0000 */ unsigned short NameLength; /* +0x0002 */ }; struct _SYSTEM_HOTPATCH_CODE_INFORMATION:::: { unsigned long DescriptorsCount; /* +0x0000 */ unsigned char CodeDescriptors[40]; /* +0x0008 43 31 00 00 */ }; struct _MEMORY_PRIORITY_INFORMATION { unsigned long MemoryPriority; /* +0x0000 */ }; struct _CRL_ISSUING_DIST_POINT { unsigned char DistPointName[24]; /* +0x0000 16 23 00 00 */ unsigned char fOnlyContainsUserCerts[4]; /* +0x0018 74 00 00 00 */ unsigned char fOnlyContainsCACerts[4]; /* +0x001c 74 00 00 00 */ unsigned char OnlySomeReasonFlags[24]; /* +0x0020 09 13 00 00 */ unsigned char fIndirectCRL[8]; /* +0x0038 74 00 00 00 */ }; struct _SYSTEM_QUERY_PERFORMANCE_COUNTER_INFORMATION { unsigned long Version; /* +0x0000 */ unsigned char Flags[4]; /* +0x0004 4c 31 00 00 */ unsigned char ValidFlags[4]; /* +0x0008 4c 31 00 00 */ }; struct _RTL_UNICODE_STRING_BUFFER { unsigned char String[16]; /* +0x0000 e3 12 00 00 */ unsigned char ByteBuffer[48]; /* +0x0010 33 28 00 00 */ unsigned char MinimumStaticBufferForTerminalNul[8]; /* +0x0040 bb 17 00 00 */ }; struct _userSTGMEDIUM::_STGMEDIUM_UNION { unsigned long tymed; /* +0x0000 */ }; struct _userSTGMEDIUM::_STGMEDIUM_UNION::__MIDL_IAdviseSink_0003 { /* unsigned char hMetaFilePict[0]; +0x0000 57 31 00 00 */ /* unsigned char hHEnhMetaFile[0]; +0x0000 59 31 00 00 */ /* unsigned char hGdiHandle[0]; +0x0000 5b 31 00 00 */ /* unsigned char hGlobal[0]; +0x0000 d8 13 00 00 */ /* unsigned char lpszFileName[0]; +0x0000 71 06 00 00 */ /* unsigned char pstm[0]; +0x0000 2b 16 00 00 */ unsigned char pstg[8]; /* +0x0000 2b 16 00 00 */ }; struct _FILE_ID_GLOBAL_TX_DIR_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long FileIndex; /* +0x0004 */ unsigned char CreationTime[8]; /* +0x0008 43 13 00 00 */ unsigned char LastAccessTime[8]; /* +0x0010 43 13 00 00 */ unsigned char LastWriteTime[8]; /* +0x0018 43 13 00 00 */ unsigned char ChangeTime[8]; /* +0x0020 43 13 00 00 */ unsigned char EndOfFile[8]; /* +0x0028 43 13 00 00 */ unsigned char AllocationSize[8]; /* +0x0030 43 13 00 00 */ unsigned long FileAttributes; /* +0x0038 */ unsigned long FileNameLength; /* +0x003c */ unsigned char FileId[8]; /* +0x0040 43 13 00 00 */ unsigned char LockingTransactionId[16]; /* +0x0048 f3 14 00 00 */ unsigned long TxInfoFlags; /* +0x0058 */ unsigned char FileName[4]; /* +0x005c 0a 14 00 00 */ }; struct _IMAGE_BOUND_FORWARDER_REF { unsigned long TimeDateStamp; /* +0x0000 */ unsigned short OffsetModuleName; /* +0x0004 */ unsigned short Reserved; /* +0x0006 */ }; struct _LDR_FAILURE_DATA { long Status; /* +0x0000 */ unsigned char ImageName[64]; /* +0x0004 bf 15 00 00 */ unsigned char AdditionalInfo[64]; /* +0x0044 bf 15 00 00 */ }; struct _SYSTEM_HYPERVISOR_PROCESSOR_COUNT_INFORMATION { unsigned long NumberOfLogicalProcessors; /* +0x0000 */ unsigned long NumberOfCores; /* +0x0004 */ }; struct tagRAWINPUTDEVICELIST { void *hDevice; /* +0x0000 */ unsigned long dwType; /* +0x0008 */ }; struct _X86_CALL_FRAME { unsigned long ReturnAddress; /* +0x0000 */ unsigned long Param1; /* +0x0004 */ unsigned long Param2; /* +0x0008 */ unsigned long CompatibilityArea; /* +0x000c */ }; struct _CRYPT_ENROLLMENT_NAME_VALUE_PAIR { unsigned char pwszName[8]; /* +0x0000 71 06 00 00 */ unsigned char pwszValue[8]; /* +0x0008 71 06 00 00 */ }; struct _TRANSACTION_ENLISTMENT_PAIR { unsigned char EnlistmentId[16]; /* +0x0000 f3 14 00 00 */ unsigned char ResourceManagerId[16]; /* +0x0010 f3 14 00 00 */ }; struct tagDIBSECTION { unsigned char dsBm[32]; /* +0x0000 85 31 00 00 */ unsigned char dsBmih[40]; /* +0x0020 86 31 00 00 */ unsigned char dsBitfields[16]; /* +0x0048 28 13 00 00 */ void *dshSection; /* +0x0058 */ unsigned long dsOffset; /* +0x0060 */ }; struct _SHFILEOPSTRUCTA { unsigned char hwnd[8]; /* +0x0000 f7 12 00 00 */ unsigned char wFunc[8]; /* +0x0008 75 00 00 00 */ unsigned char pFrom[8]; /* +0x0010 79 14 00 00 */ unsigned char pTo[8]; /* +0x0018 79 14 00 00 */ unsigned short fFlags; /* +0x0020 */ unsigned char fAnyOperationsAborted[4]; /* +0x0024 74 00 00 00 */ void *hNameMappings; /* +0x0028 */ unsigned char lpszProgressTitle[8]; /* +0x0030 79 14 00 00 */ }; struct tagDATAELEMENT { unsigned char dataID[16]; /* +0x0000 f3 14 00 00 */ unsigned long cbSize; /* +0x0010 */ unsigned long cbRounded; /* +0x0014 */ unsigned char Data[4]; /* +0x0018 ff 12 00 00 */ }; struct _WOW64_LDT_ENTRY { unsigned short LimitLow; /* +0x0000 */ unsigned short BaseLow; /* +0x0002 */ }; struct _WOW64_LDT_ENTRY:::: { /* unsigned char BaseMid[0]; +0x0000 8a 13 00 00 */ /* unsigned char Type[0]; +0x0000 98 31 00 00 */ /* unsigned char Dpl[0]; +0x0000 99 31 00 00 */ /* unsigned char Pres[0]; +0x0000 9a 31 00 00 */ /* unsigned char LimitHi[0]; +0x0000 8d 13 00 00 */ /* unsigned char Sys[0]; +0x0000 8e 13 00 00 */ /* unsigned char Reserved_0[0]; +0x0000 8f 13 00 00 */ /* unsigned char Default_Big[0]; +0x0000 12 24 00 00 */ /* unsigned char Granularity[0]; +0x0000 13 24 00 00 */ unsigned char BaseHi[4]; /* +0x0000 9b 31 00 00 */ }; struct _WOW64_LDT_ENTRY:::: { unsigned char BaseMid; /* +0x0000 */ unsigned char Flags1; /* +0x0001 */ unsigned char Flags2; /* +0x0002 */ unsigned char BaseHi; /* +0x0003 */ }; struct _WIN32_STREAM_ID { unsigned long dwStreamId; /* +0x0000 */ unsigned long dwStreamAttributes; /* +0x0004 */ unsigned char Size[8]; /* +0x0008 43 13 00 00 */ unsigned long dwStreamNameSize; /* +0x0010 */ unsigned char cStreamName[4]; /* +0x0014 0a 14 00 00 */ }; struct tagENUMLOGFONTEXW { unsigned char elfLogFont[92]; /* +0x0000 bd 16 00 00 */ unsigned char elfFullName[128]; /* +0x005c cb 1e 00 00 */ unsigned char elfStyle[64]; /* +0x00dc bf 15 00 00 */ unsigned char elfScript[64]; /* +0x011c bf 15 00 00 */ }; struct _CTL_USAGE { unsigned long cUsageIdentifier; /* +0x0000 */ unsigned char rgpszUsageIdentifier[8]; /* +0x0008 03 24 00 00 */ }; struct _CMSG_RC2_AUX_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwBitLen; /* +0x0004 */ }; struct _TOKEN_OWNER { void *Owner; /* +0x0000 */ }; struct _tagRemBINDINFO { unsigned long cbSize; /* +0x0000 */ unsigned char szExtraInfo[8]; /* +0x0008 71 06 00 00 */ unsigned long grfBindInfoF; /* +0x0010 */ unsigned long dwBindVerb; /* +0x0014 */ unsigned char szCustomVerb[8]; /* +0x0018 71 06 00 00 */ unsigned long cbstgmedData; /* +0x0020 */ unsigned long dwOptions; /* +0x0024 */ unsigned long dwOptionsFlags; /* +0x0028 */ unsigned long dwCodePage; /* +0x002c */ unsigned char securityAttributes[12]; /* +0x0030 a9 16 00 00 */ unsigned char iid[20]; /* +0x003c f3 14 00 00 */ unsigned char pUnk[8]; /* +0x0050 93 17 00 00 */ unsigned long dwReserved; /* +0x0058 */ }; struct _EVENTSFORLOGFILE { unsigned long ulSize; /* +0x0000 */ unsigned char szLogicalLogFile[512]; /* +0x0004 55 17 00 00 */ unsigned long ulNumRecords; /* +0x0204 */ /* unsigned char pEventLogRecords[0]; +0x0208 b5 31 00 00 */ }; struct _COAUTHINFO { unsigned long dwAuthnSvc; /* +0x0000 */ unsigned long dwAuthzSvc; /* +0x0004 */ unsigned char pwszServerPrincName[8]; /* +0x0008 71 06 00 00 */ unsigned long dwAuthnLevel; /* +0x0010 */ unsigned long dwImpersonationLevel; /* +0x0014 */ unsigned char pAuthIdentityData[8]; /* +0x0018 d9 31 00 00 */ unsigned long dwCapabilities; /* +0x0020 */ }; struct _UNIQUE_PROCESS_INFORMATION { /* unsigned char DontUse[0]; +0x0000 c1 29 00 00 */ /* unsigned char UniqueProcessKey[0]; +0x0000 c2 29 00 00 */ unsigned char Reserved[8]; /* +0x0000 c3 29 00 00 */ }; struct _SUPPORTED_OS_INFO { unsigned short OsCount; /* +0x0000 */ unsigned short MitigationExist; /* +0x0002 */ unsigned char OsList[8]; /* +0x0004 f0 2d 00 00 */ }; struct _RPC_ASYNC_STATE { unsigned char Size[4]; /* +0x0000 75 00 00 00 */ unsigned long Signature; /* +0x0004 */ long Lock; /* +0x0008 */ unsigned long Flags; /* +0x000c */ void *StubInfo; /* +0x0010 */ void *UserInfo; /* +0x0018 */ void *RuntimeInfo; /* +0x0020 */ unsigned char Event[4]; /* +0x0028 ab 13 00 00 */ unsigned char NotificationType[4]; /* +0x002c e4 31 00 00 */ unsigned char u[32]; /* +0x0030 e5 31 00 00 */ unsigned char Reserved[32]; /* +0x0050 e6 31 00 00 */ }; struct _SERVICE_START_REASON { unsigned long dwReason; /* +0x0000 */ }; struct _CERT_KEY_USAGE_RESTRICTION_INFO { unsigned long cCertPolicyId; /* +0x0000 */ unsigned char rgCertPolicyId[8]; /* +0x0008 f2 31 00 00 */ unsigned char RestrictedKeyUsage[24]; /* +0x0010 09 13 00 00 */ }; struct _APPCATEGORYINFO { unsigned long Locale; /* +0x0000 */ unsigned char pszDescription[8]; /* +0x0008 71 06 00 00 */ unsigned char AppCategoryId[16]; /* +0x0010 f3 14 00 00 */ }; struct _TOKEN_ORIGIN { unsigned char OriginatingLogonSession[8]; /* +0x0000 38 15 00 00 */ }; struct _RTL_QUERY_DEBUG_INFORMATION_INFO { unsigned long UniqueProcessId; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long long Buffer; /* +0x0008 */ }; struct _SERVICE_CONTROL_STATUS_REASON_PARAMSA { unsigned long dwReason; /* +0x0000 */ char *pszComment; /* +0x0008 */ unsigned char ServiceStatus[40]; /* +0x0010 e0 16 00 00 */ }; struct _OCSP_BASIC_SIGNED_RESPONSE_INFO { unsigned char ToBeSigned[16]; /* +0x0000 08 13 00 00 */ unsigned char SignatureInfo[64]; /* +0x0010 01 32 00 00 */ }; struct tagLAYERPLANEDESCRIPTOR { unsigned short nSize; /* +0x0000 */ unsigned short nVersion; /* +0x0002 */ unsigned long dwFlags; /* +0x0004 */ unsigned char iPixelType; /* +0x0008 */ unsigned char cColorBits; /* +0x0009 */ unsigned char cRedBits; /* +0x000a */ unsigned char cRedShift; /* +0x000b */ unsigned char cGreenBits; /* +0x000c */ unsigned char cGreenShift; /* +0x000d */ unsigned char cBlueBits; /* +0x000e */ unsigned char cBlueShift; /* +0x000f */ unsigned char cAlphaBits; /* +0x0010 */ unsigned char cAlphaShift; /* +0x0011 */ unsigned char cAccumBits; /* +0x0012 */ unsigned char cAccumRedBits; /* +0x0013 */ unsigned char cAccumGreenBits; /* +0x0014 */ unsigned char cAccumBlueBits; /* +0x0015 */ unsigned char cAccumAlphaBits; /* +0x0016 */ unsigned char cDepthBits; /* +0x0017 */ unsigned char cStencilBits; /* +0x0018 */ unsigned char cAuxBuffers; /* +0x0019 */ unsigned char iLayerPlane; /* +0x001a */ unsigned char bReserved; /* +0x001b */ unsigned long crTransparent; /* +0x001c */ }; struct tagPOINTER_DEVICE_CURSOR_INFO { unsigned char cursorId[4]; /* +0x0000 75 00 00 00 */ unsigned char cursor[4]; /* +0x0004 06 32 00 00 */ }; struct _CONSOLE_CURSOR_INFO { unsigned long dwSize; /* +0x0000 */ unsigned char bVisible[4]; /* +0x0004 74 00 00 00 */ }; struct _XSAVE_VENDORS { unsigned long NumberOfVendors; /* +0x0000 */ unsigned char Vendor[56]; /* +0x0008 11 32 00 00 */ }; struct _FILE_ALL_INFORMATION { unsigned char BasicInformation[40]; /* +0x0000 14 32 00 00 */ unsigned char StandardInformation[24]; /* +0x0028 15 32 00 00 */ unsigned char InternalInformation[8]; /* +0x0040 16 32 00 00 */ unsigned char EaInformation[4]; /* +0x0048 31 1c 00 00 */ unsigned char AccessInformation[4]; /* +0x004c b0 25 00 00 */ unsigned char PositionInformation[8]; /* +0x0050 17 32 00 00 */ unsigned char ModeInformation[4]; /* +0x0058 4e 17 00 00 */ unsigned char AlignmentInformation[4]; /* +0x005c e8 1b 00 00 */ unsigned char NameInformation[8]; /* +0x0060 18 32 00 00 */ }; struct _STARTUPINFOW { unsigned long cb; /* +0x0000 */ unsigned char lpReserved[8]; /* +0x0008 71 06 00 00 */ unsigned char lpDesktop[8]; /* +0x0010 71 06 00 00 */ unsigned char lpTitle[8]; /* +0x0018 71 06 00 00 */ unsigned long dwX; /* +0x0020 */ unsigned long dwY; /* +0x0024 */ unsigned long dwXSize; /* +0x0028 */ unsigned long dwYSize; /* +0x002c */ unsigned long dwXCountChars; /* +0x0030 */ unsigned long dwYCountChars; /* +0x0034 */ unsigned long dwFillAttribute; /* +0x0038 */ unsigned long dwFlags; /* +0x003c */ unsigned short wShowWindow; /* +0x0040 */ unsigned short cbReserved2; /* +0x0042 */ unsigned char *lpReserved2; /* +0x0048 */ void *hStdInput; /* +0x0050 */ void *hStdOutput; /* +0x0058 */ void *hStdError; /* +0x0060 */ }; struct _CRYPT_CSP_PROVIDER { unsigned long dwKeySpec; /* +0x0000 */ unsigned char pwszProviderName[8]; /* +0x0008 71 06 00 00 */ unsigned char Signature[24]; /* +0x0010 09 13 00 00 */ }; struct _CMSG_CTRL_ADD_SIGNER_UNAUTH_ATTR_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwSignerIndex; /* +0x0004 */ unsigned char blob[16]; /* +0x0008 08 13 00 00 */ }; struct _IMAGE_DOS_HEADER { unsigned short e_magic; /* +0x0000 */ unsigned short e_cblp; /* +0x0002 */ unsigned short e_cp; /* +0x0004 */ unsigned short e_crlc; /* +0x0006 */ unsigned short e_cparhdr; /* +0x0008 */ unsigned short e_minalloc; /* +0x000a */ unsigned short e_maxalloc; /* +0x000c */ unsigned short e_ss; /* +0x000e */ unsigned short e_sp; /* +0x0010 */ unsigned short e_csum; /* +0x0012 */ unsigned short e_ip; /* +0x0014 */ unsigned short e_cs; /* +0x0016 */ unsigned short e_lfarlc; /* +0x0018 */ unsigned short e_ovno; /* +0x001a */ unsigned char e_res[8]; /* +0x001c f0 2d 00 00 */ unsigned short e_oemid; /* +0x0024 */ unsigned short e_oeminfo; /* +0x0026 */ unsigned char e_res2[20]; /* +0x0028 23 32 00 00 */ long e_lfanew; /* +0x003c */ }; struct _TP_TASK { unsigned char Callbacks[8]; /* +0x0000 27 32 00 00 */ unsigned long NumaNode; /* +0x0008 */ unsigned char IdealProcessor; /* +0x000c */ unsigned char ListEntry[16]; /* +0x0010 73 1f 00 00 */ }; struct _FILE_DISPOSITION_INFO { unsigned char DeleteFileW; /* +0x0000 */ }; struct _CTL_ANY_SUBJECT_INFO { unsigned char SubjectAlgorithm[24]; /* +0x0000 68 14 00 00 */ unsigned char SubjectIdentifier[16]; /* +0x0018 08 13 00 00 */ }; struct _FP_IEEE_RECORD { unsigned char Operand1[24]; /* +0x0000 30 32 00 00 */ unsigned char Operand2[24]; /* +0x0018 30 32 00 00 */ unsigned char Result[24]; /* +0x0030 30 32 00 00 */ }; struct tagBITMAPCOREHEADER { unsigned long bcSize; /* +0x0000 */ unsigned short bcWidth; /* +0x0004 */ unsigned short bcHeight; /* +0x0006 */ unsigned short bcPlanes; /* +0x0008 */ unsigned short bcBitCount; /* +0x000a */ }; struct DISPLAYCONFIG_SET_TARGET_PERSISTENCE { unsigned char header[20]; /* +0x0000 0d 25 00 00 */ /* unsigned char bootPersistenceOn[0]; +0x0014 f8 1c 00 00 */ /* unsigned char reserved[0]; +0x0014 37 32 00 00 */ unsigned char value[4]; /* +0x0014 75 00 00 00 */ }; struct _SERVICE_STATUS { unsigned long dwServiceType; /* +0x0000 */ unsigned long dwCurrentState; /* +0x0004 */ unsigned long dwControlsAccepted; /* +0x0008 */ unsigned long dwWin32ExitCode; /* +0x000c */ unsigned long dwServiceSpecificExitCode; /* +0x0010 */ unsigned long dwCheckPoint; /* +0x0014 */ unsigned long dwWaitHint; /* +0x0018 */ }; struct _PRIVKEYVER3 { unsigned long magic; /* +0x0000 */ unsigned long bitlenP; /* +0x0004 */ unsigned long bitlenQ; /* +0x0008 */ unsigned long bitlenJ; /* +0x000c */ unsigned long bitlenX; /* +0x0010 */ unsigned char DSSSeed[24]; /* +0x0014 7d 19 00 00 */ }; struct _CRL_DIST_POINTS_INFO { unsigned long cDistPoint; /* +0x0000 */ unsigned char rgDistPoint[8]; /* +0x0008 3f 32 00 00 */ }; struct _CM_ROM_BLOCK { unsigned long Address; /* +0x0000 */ unsigned long Size; /* +0x0004 */ }; struct _CERT_STRONG_SIGN_SERIALIZED_INFO { unsigned long dwFlags; /* +0x0000 */ unsigned char pwszCNGSignHashAlgids[8]; /* +0x0008 71 06 00 00 */ unsigned char pwszCNGPubKeyMinBitLengths[8]; /* +0x0010 71 06 00 00 */ }; struct _FILE_ATTRIBUTE_CACHE_VALUES { unsigned long Flags; /* +0x0000 */ unsigned long NumberOfValues; /* +0x0004 */ unsigned char Attributes[212]; /* +0x0008 50 32 00 00 */ }; struct _LUNICODE_STRING { unsigned long long Length; /* +0x0000 */ unsigned long long MaximumLength; /* +0x0008 */ unsigned char Buffer[8]; /* +0x0010 71 06 00 00 */ }; struct _WINDOWS_OS_OPTIONS { unsigned char Signature[8]; /* +0x0000 91 19 00 00 */ unsigned long Version; /* +0x0008 */ unsigned long Length; /* +0x000c */ unsigned long OsLoadPathOffset; /* +0x0010 */ unsigned char OsLoadOptions[4]; /* +0x0014 0a 14 00 00 */ }; struct _JOURNAL_ABSOLUTE_INFORMATION { unsigned char StartTimeStamp[8]; /* +0x0000 43 13 00 00 */ unsigned char EndTimeStamp[8]; /* +0x0008 43 13 00 00 */ unsigned long long NumberOfRecords; /* +0x0010 */ unsigned long FillLevel; /* +0x0018 */ }; struct _SHORT_SIZEDARR { unsigned long clSize; /* +0x0000 */ unsigned short *pData; /* +0x0008 */ }; struct _FILE_ID_BOTH_DIR_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long FileIndex; /* +0x0004 */ unsigned char CreationTime[8]; /* +0x0008 43 13 00 00 */ unsigned char LastAccessTime[8]; /* +0x0010 43 13 00 00 */ unsigned char LastWriteTime[8]; /* +0x0018 43 13 00 00 */ unsigned char ChangeTime[8]; /* +0x0020 43 13 00 00 */ unsigned char EndOfFile[8]; /* +0x0028 43 13 00 00 */ unsigned char AllocationSize[8]; /* +0x0030 43 13 00 00 */ unsigned long FileAttributes; /* +0x0038 */ unsigned long FileNameLength; /* +0x003c */ unsigned long EaSize; /* +0x0040 */ char ShortNameLength; /* +0x0044 */ unsigned char ShortName[26]; /* +0x0046 55 29 00 00 */ unsigned char FileId[8]; /* +0x0060 43 13 00 00 */ unsigned char FileName[8]; /* +0x0068 0a 14 00 00 */ }; struct tagEMRSELECTOBJECT { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned long ihObject; /* +0x0008 */ }; struct _userHGLOBAL { long fContext; /* +0x0000 */ }; struct _userHGLOBAL::__MIDL_IWinTypes_0003 { long hInproc; /* +0x0000 */ /* unsigned char hRemote[0]; +0x0000 3b 2c 00 00 */ long long hInproc64; /* +0x0000 */ }; struct _FILE_LINKS_INFORMATION { unsigned long BytesNeeded; /* +0x0000 */ unsigned long EntriesReturned; /* +0x0004 */ unsigned char Entry[24]; /* +0x0008 96 32 00 00 */ }; struct _SYSTEM_POWER_INFORMATION { unsigned long MaxIdlenessAllowed; /* +0x0000 */ unsigned long Idleness; /* +0x0004 */ unsigned long TimeRemaining; /* +0x0008 */ unsigned char CoolingMode; /* +0x000c */ }; struct _RTL_HEAP_PARAMETERS { unsigned long Length; /* +0x0000 */ unsigned long long SegmentReserve; /* +0x0008 */ unsigned long long SegmentCommit; /* +0x0010 */ unsigned long long DeCommitFreeBlockThreshold; /* +0x0018 */ unsigned long long DeCommitTotalFreeThreshold; /* +0x0020 */ unsigned long long MaximumAllocationSize; /* +0x0028 */ unsigned long long VirtualMemoryThreshold; /* +0x0030 */ unsigned long long InitialCommit; /* +0x0038 */ unsigned long long InitialReserve; /* +0x0040 */ unsigned char CommitRoutine[8]; /* +0x0048 9b 32 00 00 */ unsigned char Reserved[16]; /* +0x0050 83 15 00 00 */ }; struct _ACTIVATION_CONTEXT_DETAILED_INFORMATION { unsigned long dwFlags; /* +0x0000 */ unsigned long ulFormatVersion; /* +0x0004 */ unsigned long ulAssemblyCount; /* +0x0008 */ unsigned long ulRootManifestPathType; /* +0x000c */ unsigned long ulRootManifestPathChars; /* +0x0010 */ unsigned long ulRootConfigurationPathType; /* +0x0014 */ unsigned long ulRootConfigurationPathChars; /* +0x0018 */ unsigned long ulAppDirPathType; /* +0x001c */ unsigned long ulAppDirPathChars; /* +0x0020 */ unsigned char lpRootManifestPath[8]; /* +0x0028 cb 13 00 00 */ unsigned char lpRootConfigurationPath[8]; /* +0x0030 cb 13 00 00 */ unsigned char lpAppDirPath[8]; /* +0x0038 cb 13 00 00 */ }; struct tagLASTINPUTINFO { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwTime; /* +0x0004 */ }; struct tagHELPINFO { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char iContextType[4]; /* +0x0004 74 00 00 00 */ unsigned char iCtrlId[8]; /* +0x0008 74 00 00 00 */ void *hItemHandle; /* +0x0010 */ unsigned long long dwContextId; /* +0x0018 */ unsigned char MousePos[8]; /* +0x0020 a1 14 00 00 */ }; struct tagACTCTX_SECTION_KEYED_DATA_2600 { unsigned long cbSize; /* +0x0000 */ unsigned long ulDataFormatVersion; /* +0x0004 */ void *lpData; /* +0x0008 */ unsigned long ulLength; /* +0x0010 */ void *lpSectionGlobalData; /* +0x0018 */ unsigned long ulSectionGlobalDataLength; /* +0x0020 */ void *lpSectionBase; /* +0x0028 */ unsigned long ulSectionTotalLength; /* +0x0030 */ void *hActCtx; /* +0x0038 */ unsigned long ulAssemblyRosterIndex; /* +0x0040 */ }; struct _FILE_MODE_INFORMATION { unsigned long Mode; /* +0x0000 */ }; struct _LAST_EXCEPTION_LOG { unsigned char ExceptionRecord[160]; /* +0x0000 80 20 00 00 */ unsigned char ContextRecord[1232]; /* +0x00a0 5d 13 00 00 */ unsigned long ControlPc; /* +0x0570 */ unsigned char Disposition[4]; /* +0x0574 c2 32 00 00 */ unsigned char HandlerData[24]; /* +0x0578 a5 2e 00 00 */ }; struct _RTL_RXACT_CONTEXT { void *RootRegistryKey; /* +0x0000 */ void *RXactKey; /* +0x0008 */ unsigned char HandlesValid; /* +0x0010 */ unsigned char RXactLog[8]; /* +0x0018 c6 32 00 00 */ }; struct tagUPDATELAYEREDWINDOWINFO { unsigned long cbSize; /* +0x0000 */ unsigned char hdcDst[8]; /* +0x0008 24 1f 00 00 */ unsigned char pptDst[8]; /* +0x0010 ce 32 00 00 */ unsigned char psize[8]; /* +0x0018 d0 32 00 00 */ unsigned char hdcSrc[8]; /* +0x0020 24 1f 00 00 */ unsigned char pptSrc[8]; /* +0x0028 ce 32 00 00 */ unsigned long crKey; /* +0x0030 */ unsigned char pblend[8]; /* +0x0038 d3 32 00 00 */ unsigned long dwFlags; /* +0x0040 */ unsigned char prcDirty[8]; /* +0x0048 d9 1e 00 00 */ }; struct _CERT_ALT_NAME_ENTRY { unsigned long dwAltNameChoice; /* +0x0000 */ /* unsigned char pOtherName[0]; +0x0008 d7 32 00 00 */ /* unsigned char pwszRfc822Name[0]; +0x0008 71 06 00 00 */ /* unsigned char pwszDNSName[0]; +0x0008 71 06 00 00 */ /* unsigned char DirectoryName[0]; +0x0008 08 13 00 00 */ /* unsigned char pwszURL[0]; +0x0008 71 06 00 00 */ /* unsigned char IPAddress[0]; +0x0008 08 13 00 00 */ char *pszRegisteredID; /* +0x0008 */ }; struct _IMAGE_DEBUG_MISC { unsigned long DataType; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned char Unicode; /* +0x0008 */ unsigned char Reserved[3]; /* +0x0009 93 13 00 00 */ unsigned char Data[4]; /* +0x000c ff 12 00 00 */ }; struct tagEMRSETCOLORADJUSTMENT { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char ColorAdjustment[24]; /* +0x0008 0a 33 00 00 */ }; struct _CERT_NAME_INFO { unsigned long cRDN; /* +0x0000 */ unsigned char rgRDN[8]; /* +0x0008 c8 1a 00 00 */ }; struct _FPO_DATA { unsigned long ulOffStart; /* +0x0000 */ unsigned long cbProcSize; /* +0x0004 */ unsigned long cdwLocals; /* +0x0008 */ unsigned short cdwParams; /* +0x000c */ /* unsigned char cbProlog[0]; +0x000e 0f 33 00 00 */ /* unsigned char cbRegs[0]; +0x000e 10 33 00 00 */ /* unsigned char fHasSEH[0]; +0x000e bc 2e 00 00 */ /* unsigned char fUseBP[0]; +0x000e bd 2e 00 00 */ /* unsigned char reserved[0]; +0x000e 11 33 00 00 */ unsigned char cbFrame[2]; /* +0x000e 12 33 00 00 */ }; struct _SYSTEM_BIGPOOL_INFORMATION { unsigned long Count; /* +0x0000 */ unsigned char AllocatedInfo[24]; /* +0x0008 64 13 00 00 */ }; struct tagNONCLIENTMETRICSW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char iBorderWidth[4]; /* +0x0004 74 00 00 00 */ unsigned char iScrollWidth[4]; /* +0x0008 74 00 00 00 */ unsigned char iScrollHeight[4]; /* +0x000c 74 00 00 00 */ unsigned char iCaptionWidth[4]; /* +0x0010 74 00 00 00 */ unsigned char iCaptionHeight[4]; /* +0x0014 74 00 00 00 */ unsigned char lfCaptionFont[92]; /* +0x0018 bd 16 00 00 */ unsigned char iSmCaptionWidth[4]; /* +0x0074 74 00 00 00 */ unsigned char iSmCaptionHeight[4]; /* +0x0078 74 00 00 00 */ unsigned char lfSmCaptionFont[92]; /* +0x007c bd 16 00 00 */ unsigned char iMenuWidth[4]; /* +0x00d8 74 00 00 00 */ unsigned char iMenuHeight[4]; /* +0x00dc 74 00 00 00 */ unsigned char lfMenuFont[92]; /* +0x00e0 bd 16 00 00 */ unsigned char lfStatusFont[92]; /* +0x013c bd 16 00 00 */ unsigned char lfMessageFont[92]; /* +0x0198 bd 16 00 00 */ unsigned char iPaddedBorderWidth[4]; /* +0x01f4 74 00 00 00 */ }; struct _CONSOLE_SCREEN_BUFFER_INFO { unsigned char dwSize[4]; /* +0x0000 1b 18 00 00 */ unsigned char dwCursorPosition[4]; /* +0x0004 1b 18 00 00 */ unsigned short wAttributes; /* +0x0008 */ unsigned char srWindow[8]; /* +0x000a 86 27 00 00 */ unsigned char dwMaximumWindowSize[4]; /* +0x0012 1b 18 00 00 */ }; struct tagCSPLATFORM { unsigned long dwPlatformId; /* +0x0000 */ unsigned long dwVersionHi; /* +0x0004 */ unsigned long dwVersionLo; /* +0x0008 */ unsigned long dwProcessorArch; /* +0x000c */ }; struct _PROCESS_EXTENDED_BASIC_INFORMATION { unsigned long long Size; /* +0x0000 */ unsigned char BasicInfo[48]; /* +0x0008 38 33 00 00 */ unsigned long Flags; /* +0x0038 */ /* unsigned char IsProtectedProcess[0]; +0x0038 94 13 00 00 */ /* unsigned char IsWow64Process[0]; +0x0038 90 18 00 00 */ /* unsigned char IsProcessDeleting[0]; +0x0038 91 18 00 00 */ /* unsigned char IsCrossSessionCreate[0]; +0x0038 74 1e 00 00 */ /* unsigned char IsFrozen[0]; +0x0038 75 1e 00 00 */ /* unsigned char IsIdleAware[0]; +0x0038 0b 24 00 00 */ unsigned char SpareBits[8]; /* +0x0038 39 33 00 00 */ }; struct _SERVICE_DESCRIPTIONA { char *lpDescription; /* +0x0000 */ }; struct _BCRYPT_DSA_KEY_BLOB { unsigned long dwMagic; /* +0x0000 */ unsigned long cbKey; /* +0x0004 */ unsigned char Count[4]; /* +0x0008 cb 17 00 00 */ unsigned char Seed[20]; /* +0x000c 97 16 00 00 */ unsigned char q[20]; /* +0x0020 97 16 00 00 */ }; struct _SYSTEM_SYSTEM_DISK_INFORMATION { unsigned char SystemDisk[16]; /* +0x0000 e3 12 00 00 */ }; struct tagEMRPOLYDRAW16 { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char rclBounds[16]; /* +0x0008 db 12 00 00 */ unsigned long cpts; /* +0x0018 */ unsigned char apts[4]; /* +0x001c 46 23 00 00 */ unsigned char abTypes[4]; /* +0x0020 ff 12 00 00 */ }; struct _LONG_SIZEDARR { unsigned long clSize; /* +0x0000 */ unsigned long *pData; /* +0x0008 */ }; struct _JOBOBJECT_NOTIFICATION_LIMIT_INFORMATION { unsigned long long IoReadBytesLimit; /* +0x0000 */ unsigned long long IoWriteBytesLimit; /* +0x0008 */ unsigned char PerJobUserTimeLimit[8]; /* +0x0010 43 13 00 00 */ unsigned long long JobMemoryLimit; /* +0x0018 */ unsigned char RateControlTolerance[4]; /* +0x0020 8b 19 00 00 */ unsigned char RateControlToleranceInterval[4]; /* +0x0024 8c 19 00 00 */ unsigned long LimitFlags; /* +0x0028 */ }; struct _SEC_WINNT_AUTH_IDENTITY_W { unsigned short *User; /* +0x0000 */ unsigned long UserLength; /* +0x0008 */ unsigned short *Domain; /* +0x0010 */ unsigned long DomainLength; /* +0x0018 */ unsigned short *Password; /* +0x0020 */ unsigned long PasswordLength; /* +0x0028 */ unsigned long Flags; /* +0x002c */ }; struct _NDR_USER_MARSHAL_INFO { unsigned long InformationLevel; /* +0x0000 */ unsigned char Level1[80]; /* +0x0008 65 33 00 00 */ }; struct tagEMRSETVIEWPORTORGEX { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char ptlOrigin[8]; /* +0x0008 a6 13 00 00 */ }; struct _WOW64_DESCRIPTOR_TABLE_ENTRY { unsigned long Selector; /* +0x0000 */ unsigned char Descriptor[8]; /* +0x0004 7c 33 00 00 */ }; struct _SERVICE_TABLE_ENTRYA { char *lpServiceName; /* +0x0000 */ unsigned char lpServiceProc[8]; /* +0x0008 79 2d 00 00 */ }; struct _OPEN_PRINTER_PROPS_INFOW { unsigned long dwSize; /* +0x0000 */ unsigned char pszSheetName[8]; /* +0x0008 71 06 00 00 */ unsigned char uSheetIndex[4]; /* +0x0010 75 00 00 00 */ unsigned long dwFlags; /* +0x0014 */ unsigned char bModal[8]; /* +0x0018 74 00 00 00 */ }; struct tagENUMLOGFONTEXA { unsigned char elfLogFont[60]; /* +0x0000 dc 16 00 00 */ unsigned char elfFullName[64]; /* +0x003c 19 13 00 00 */ unsigned char elfStyle[32]; /* +0x007c f7 17 00 00 */ unsigned char elfScript[32]; /* +0x009c f7 17 00 00 */ }; struct _RPC_PROTSEQ_VECTORA { unsigned char Count[8]; /* +0x0000 75 00 00 00 */ unsigned char Protseq[8]; /* +0x0008 89 33 00 00 */ }; struct _PLEX_READ_DATA_REQUEST { unsigned char ByteOffset[8]; /* +0x0000 43 13 00 00 */ unsigned long ByteLength; /* +0x0008 */ unsigned long PlexNumber; /* +0x000c */ }; struct _SYSTEM_CALL_COUNT_INFORMATION { unsigned long Length; /* +0x0000 */ unsigned long NumberOfTables; /* +0x0004 */ }; struct _MEMORY_WORKING_SET_EX_BLOCK:::: { /* unsigned char Valid[0]; +0x0000 1d 13 00 00 */ /* unsigned char Reserved0[0]; +0x0000 95 33 00 00 */ /* unsigned char Shared[0]; +0x0000 c3 20 00 00 */ /* unsigned char Reserved1[0]; +0x0000 96 33 00 00 */ /* unsigned char PageTable[0]; +0x0000 97 33 00 00 */ /* unsigned char Location[0]; +0x0000 98 33 00 00 */ /* unsigned char Reserved2[0]; +0x0000 99 33 00 00 */ /* unsigned char Bad[0]; +0x0000 c9 20 00 00 */ unsigned char ReservedUlong[8]; /* +0x0000 ca 20 00 00 */ }; struct _TRANSACTIONMANAGER_OLDEST_INFORMATION { unsigned char OldestTransactionGuid[16]; /* +0x0000 f3 14 00 00 */ }; struct _API_SET_NAMESPACE_ARRAY { unsigned long Version; /* +0x0000 */ unsigned long Count; /* +0x0004 */ unsigned char Array[12]; /* +0x0008 a4 33 00 00 */ }; struct _SYSTEM_QUERY_TIME_ADJUST_INFORMATION { unsigned long TimeAdjustment; /* +0x0000 */ unsigned long TimeIncrement; /* +0x0004 */ unsigned char Enable; /* +0x0008 */ }; struct tagMETAHEADER { unsigned short mtType; /* +0x0000 */ unsigned short mtHeaderSize; /* +0x0002 */ unsigned short mtVersion; /* +0x0004 */ unsigned long mtSize; /* +0x0006 */ unsigned short mtNoObjects; /* +0x000a */ unsigned long mtMaxRecord; /* +0x000c */ unsigned short mtNoParameters; /* +0x0010 */ }; struct _REMOTE_NAME_INFOW { unsigned char lpUniversalName[8]; /* +0x0000 71 06 00 00 */ unsigned char lpConnectionName[8]; /* +0x0008 71 06 00 00 */ unsigned char lpRemainingPath[8]; /* +0x0010 71 06 00 00 */ }; struct _CMSG_STREAM_INFO { unsigned long cbContent; /* +0x0000 */ unsigned char pfnStreamOutput[8]; /* +0x0008 b8 33 00 00 */ void *pvArg; /* +0x0010 */ }; struct _FILE_TRACKING_INFORMATION { void *DestinationFile; /* +0x0000 */ unsigned long ObjectInformationLength; /* +0x0008 */ unsigned char ObjectInformation[4]; /* +0x000c 1e 24 00 00 */ }; struct tagFILTERKEYS { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned long iWaitMSec; /* +0x0008 */ unsigned long iDelayMSec; /* +0x000c */ unsigned long iRepeatMSec; /* +0x0010 */ unsigned long iBounceMSec; /* +0x0014 */ }; struct _SE_LEARNING_MODE_USER_OBJECT_DATA { unsigned long Cookie; /* +0x0000 */ unsigned char ObjectType[8]; /* +0x0008 b6 17 00 00 */ unsigned char ObjectName[8]; /* +0x0010 b6 17 00 00 */ }; struct tagEMRSETTEXTCOLOR { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned long crColor; /* +0x0008 */ }; struct tagSTATPROPSTG { unsigned char lpwstrName[8]; /* +0x0000 71 06 00 00 */ unsigned long propid; /* +0x0008 */ unsigned short vt; /* +0x000c */ }; struct _CERT_KEY_ATTRIBUTES_INFO { unsigned char KeyId[16]; /* +0x0000 08 13 00 00 */ unsigned char IntendedKeyUsage[24]; /* +0x0010 09 13 00 00 */ unsigned char pPrivateKeyUsagePeriod[8]; /* +0x0028 00 34 00 00 */ }; struct _REPARSE_DATA_BUFFER { unsigned long ReparseTag; /* +0x0000 */ unsigned short ReparseDataLength; /* +0x0004 */ unsigned short Reserved; /* +0x0006 */ /* unsigned char SymbolicLinkReparseBuffer[0]; +0x0008 03 34 00 00 */ /* unsigned char MountPointReparseBuffer[0]; +0x0008 04 34 00 00 */ unsigned char GenericReparseBuffer[16]; /* +0x0008 05 34 00 00 */ }; struct _REPARSE_DATA_BUFFER:::: { unsigned char DataBuffer[1]; /* +0x0000 ff 12 00 00 */ }; struct _REPARSE_DATA_BUFFER:::: { unsigned short SubstituteNameOffset; /* +0x0000 */ unsigned short SubstituteNameLength; /* +0x0002 */ unsigned short PrintNameOffset; /* +0x0004 */ unsigned short PrintNameLength; /* +0x0006 */ unsigned char PathBuffer[2]; /* +0x0008 0a 14 00 00 */ }; struct _REPARSE_DATA_BUFFER:::: { unsigned short SubstituteNameOffset; /* +0x0000 */ unsigned short SubstituteNameLength; /* +0x0002 */ unsigned short PrintNameOffset; /* +0x0004 */ unsigned short PrintNameLength; /* +0x0006 */ unsigned long Flags; /* +0x0008 */ unsigned char PathBuffer[4]; /* +0x000c 0a 14 00 00 */ }; struct _HOTPATCH_HOOK_DESCRIPTOR { unsigned long long TargetAddress; /* +0x0000 */ unsigned long long MappedAddress; /* +0x0008 */ unsigned long CodeOffset; /* +0x0010 */ unsigned long CodeSize; /* +0x0014 */ unsigned long OrigCodeOffset; /* +0x0018 */ unsigned long ValidationOffset; /* +0x001c */ unsigned long ValidationSize; /* +0x0020 */ }; struct _RTL_HEAP_INFORMATION { void *BaseAddress; /* +0x0000 */ unsigned long Flags; /* +0x0008 */ unsigned short EntryOverhead; /* +0x000c */ unsigned short CreatorBackTraceIndex; /* +0x000e */ unsigned long long BytesAllocated; /* +0x0010 */ unsigned long long BytesCommitted; /* +0x0018 */ unsigned long NumberOfTags; /* +0x0020 */ unsigned long NumberOfEntries; /* +0x0024 */ unsigned long NumberOfPseudoTags; /* +0x0028 */ unsigned long PseudoTagGranularity; /* +0x002c */ unsigned char Reserved[24]; /* +0x0030 a5 2e 00 00 */ unsigned char Tags[8]; /* +0x0048 ec 23 00 00 */ unsigned char Entries[8]; /* +0x0050 11 34 00 00 */ }; struct _CERT_STORE_PROV_FIND_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwMsgAndCertEncodingType; /* +0x0004 */ unsigned long dwFindFlags; /* +0x0008 */ unsigned long dwFindType; /* +0x000c */ unsigned char pvFindPara[8]; /* +0x0010 4f 19 00 00 */ }; struct _RTL_HEAP_WALK_ENTRY { void *DataAddress; /* +0x0000 */ unsigned long long DataSize; /* +0x0008 */ unsigned char OverheadBytes; /* +0x0010 */ unsigned char SegmentIndex; /* +0x0011 */ unsigned short Flags; /* +0x0012 */ /* unsigned char Block[0]; +0x0018 1c 34 00 00 */ unsigned char Segment[24]; /* +0x0018 1d 34 00 00 */ }; struct _RTL_HEAP_WALK_ENTRY:::: { unsigned long CommittedSize; /* +0x0000 */ unsigned long UnCommittedSize; /* +0x0004 */ void *FirstEntry; /* +0x0008 */ void *LastEntry; /* +0x0010 */ }; struct _RTL_HEAP_WALK_ENTRY:::: { unsigned long long Settable; /* +0x0000 */ unsigned short TagIndex; /* +0x0008 */ unsigned short AllocatorBackTraceIndex; /* +0x000a */ unsigned char Reserved[12]; /* +0x000c 14 16 00 00 */ }; struct tagWNDCLASSA { unsigned char style[8]; /* +0x0000 75 00 00 00 */ unsigned char lpfnWndProc[8]; /* +0x0008 f4 27 00 00 */ unsigned char cbClsExtra[4]; /* +0x0010 74 00 00 00 */ unsigned char cbWndExtra[4]; /* +0x0014 74 00 00 00 */ unsigned char hInstance[8]; /* +0x0018 d1 14 00 00 */ unsigned char hIcon[8]; /* +0x0020 43 21 00 00 */ unsigned char hCursor[8]; /* +0x0028 43 21 00 00 */ unsigned char hbrBackground[8]; /* +0x0030 8f 23 00 00 */ unsigned char lpszMenuName[8]; /* +0x0038 79 14 00 00 */ unsigned char lpszClassName[8]; /* +0x0040 79 14 00 00 */ }; struct _VM_COUNTERS_EX { unsigned long long PeakVirtualSize; /* +0x0000 */ unsigned long long VirtualSize; /* +0x0008 */ unsigned long PageFaultCount; /* +0x0010 */ unsigned long long PeakWorkingSetSize; /* +0x0018 */ unsigned long long WorkingSetSize; /* +0x0020 */ unsigned long long QuotaPeakPagedPoolUsage; /* +0x0028 */ unsigned long long QuotaPagedPoolUsage; /* +0x0030 */ unsigned long long QuotaPeakNonPagedPoolUsage; /* +0x0038 */ unsigned long long QuotaNonPagedPoolUsage; /* +0x0040 */ unsigned long long PagefileUsage; /* +0x0048 */ unsigned long long PeakPagefileUsage; /* +0x0050 */ unsigned long long PrivateUsage; /* +0x0058 */ }; struct _QUAD { long long UseThisFieldToCopy; /* +0x0000 */ unsigned char DoNotUseThisField[8]; /* +0x0000 41 00 00 00 */ }; struct _XSTATE_CONTEXT { unsigned long long Mask; /* +0x0000 */ unsigned long Length; /* +0x0008 */ unsigned long Reserved1; /* +0x000c */ unsigned char Area[8]; /* +0x0010 46 34 00 00 */ void *Buffer; /* +0x0018 */ }; struct _VARIABLE_NAME_AND_VALUE { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long ValueOffset; /* +0x0004 */ unsigned long ValueLength; /* +0x0008 */ unsigned long Attributes; /* +0x000c */ unsigned char VendorGuid[16]; /* +0x0010 f3 14 00 00 */ unsigned char Name[4]; /* +0x0020 0a 14 00 00 */ }; struct _SYSTEM_REGISTRY_APPEND_STRING_PARAMETERS { void *KeyHandle; /* +0x0000 */ unsigned char ValueNamePointer[8]; /* +0x0008 b6 17 00 00 */ unsigned long *RequiredLengthPointer; /* +0x0010 */ unsigned char *Buffer; /* +0x0018 */ unsigned long BufferLength; /* +0x0020 */ unsigned long Type; /* +0x0024 */ unsigned char *AppendBuffer; /* +0x0028 */ unsigned long AppendBufferLength; /* +0x0030 */ unsigned char CreateIfDoesntExist; /* +0x0034 */ unsigned char TruncateExistingValue; /* +0x0035 */ }; struct tagDELETEITEMSTRUCT { unsigned char CtlType[4]; /* +0x0000 75 00 00 00 */ unsigned char CtlID[4]; /* +0x0004 75 00 00 00 */ unsigned char itemID[8]; /* +0x0008 75 00 00 00 */ unsigned char hwndItem[8]; /* +0x0010 f7 12 00 00 */ unsigned long long itemData; /* +0x0018 */ }; struct _RPC_C_OPT_COOKIE_AUTH_DESCRIPTOR { unsigned long BufferSize; /* +0x0000 */ char *Buffer; /* +0x0008 */ }; struct _PROCESS_STACK_ALLOCATION_INFORMATION_EX { unsigned long PreferredNode; /* +0x0000 */ unsigned long Reserved0; /* +0x0004 */ unsigned long Reserved1; /* +0x0008 */ unsigned long Reserved2; /* +0x000c */ unsigned char AllocInfo[24]; /* +0x0010 55 34 00 00 */ }; struct _STREAM_EXTENT_ENTRY { unsigned long Flags; /* +0x0000 */ }; struct _CMSG_KEY_AGREE_KEY_ENCRYPT_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char EncryptedKey[16]; /* +0x0008 08 13 00 00 */ }; struct tagIMECHARPOSITION { unsigned long dwSize; /* +0x0000 */ unsigned long dwCharPos; /* +0x0004 */ unsigned char pt[8]; /* +0x0008 a1 14 00 00 */ unsigned char cLineHeight[4]; /* +0x0010 75 00 00 00 */ unsigned char rcDocument[16]; /* +0x0014 7a 14 00 00 */ }; struct _CRL_REVOCATION_INFO { unsigned char pCrlEntry[8]; /* +0x0000 3d 16 00 00 */ unsigned char pCrlContext[8]; /* +0x0008 0c 20 00 00 */ unsigned char pCrlIssuerChain[8]; /* +0x0010 aa 15 00 00 */ }; struct _s__ThrowInfo { unsigned char attributes[4]; /* +0x0000 75 00 00 00 */ unsigned char pmfnUnwind[8]; /* +0x0004 d2 13 00 00 */ unsigned char pForwardCompat[8]; /* +0x000c ee 17 00 00 */ unsigned char pCatchableTypeArray[8]; /* +0x0014 73 34 00 00 */ }; struct _TRANSACTIONMANAGER_LOGPATH_INFORMATION { unsigned long LogPathLength; /* +0x0000 */ unsigned char LogPath[4]; /* +0x0004 0a 14 00 00 */ }; struct _OCSP_SIGNATURE_INFO { unsigned char SignatureAlgorithm[24]; /* +0x0000 68 14 00 00 */ unsigned char Signature[24]; /* +0x0018 09 13 00 00 */ unsigned long cCertEncoded; /* +0x0030 */ unsigned char rgCertEncoded[8]; /* +0x0038 4d 13 00 00 */ }; struct _THREAD_TEB_INFORMATION { void *TebInformation; /* +0x0000 */ unsigned long TebOffset; /* +0x0008 */ unsigned long BytesToRead; /* +0x000c */ }; struct _JOBOBJECT_WAKE_FILTER { unsigned long HighEdgeFilter; /* +0x0000 */ unsigned long LowEdgeFilter; /* +0x0004 */ }; struct _TRANSACTION_BASIC_INFORMATION { unsigned char TransactionId[16]; /* +0x0000 f3 14 00 00 */ unsigned long State; /* +0x0010 */ unsigned long Outcome; /* +0x0014 */ }; struct tagMENUGETOBJECTINFO { unsigned long dwFlags; /* +0x0000 */ unsigned char uPos[4]; /* +0x0004 75 00 00 00 */ unsigned char hmenu[8]; /* +0x0008 63 15 00 00 */ void *riid; /* +0x0010 */ void *pvObj; /* +0x0018 */ }; struct _CERT_RDN { unsigned long cRDNAttr; /* +0x0000 */ unsigned char rgRDNAttr[8]; /* +0x0008 c9 1f 00 00 */ }; struct tagWNDCLASSW { unsigned char style[8]; /* +0x0000 75 00 00 00 */ unsigned char lpfnWndProc[8]; /* +0x0008 f4 27 00 00 */ unsigned char cbClsExtra[4]; /* +0x0010 74 00 00 00 */ unsigned char cbWndExtra[4]; /* +0x0014 74 00 00 00 */ unsigned char hInstance[8]; /* +0x0018 d1 14 00 00 */ unsigned char hIcon[8]; /* +0x0020 43 21 00 00 */ unsigned char hCursor[8]; /* +0x0028 43 21 00 00 */ unsigned char hbrBackground[8]; /* +0x0030 8f 23 00 00 */ unsigned char lpszMenuName[8]; /* +0x0038 cb 13 00 00 */ unsigned char lpszClassName[8]; /* +0x0040 cb 13 00 00 */ }; struct tagRPC_EXTENDED_ERROR_INFO { unsigned long Version; /* +0x0000 */ unsigned char ComputerName[8]; /* +0x0008 71 06 00 00 */ unsigned long ProcessID; /* +0x0010 */ }; struct _FILE_LAYOUT_NAME_ENTRY { unsigned long NextNameOffset; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long long ParentFileReferenceNumber; /* +0x0008 */ unsigned long FileNameLength; /* +0x0010 */ unsigned long Reserved; /* +0x0014 */ unsigned char FileName[8]; /* +0x0018 0a 14 00 00 */ }; struct _MCA_EXCEPTION:::: { unsigned long long Address; /* +0x0000 */ unsigned long long Type; /* +0x0008 */ }; struct _MCA_EXCEPTION:::: { unsigned char BankNumber; /* +0x0000 */ unsigned char Reserved2[7]; /* +0x0001 d7 25 00 00 */ unsigned char Status[8]; /* +0x0008 da 2f 00 00 */ unsigned char Address[8]; /* +0x0010 cd 34 00 00 */ unsigned long long Misc; /* +0x0018 */ }; struct tagNEWTEXTMETRICW { long tmHeight; /* +0x0000 */ long tmAscent; /* +0x0004 */ long tmDescent; /* +0x0008 */ long tmInternalLeading; /* +0x000c */ long tmExternalLeading; /* +0x0010 */ long tmAveCharWidth; /* +0x0014 */ long tmMaxCharWidth; /* +0x0018 */ long tmWeight; /* +0x001c */ long tmOverhang; /* +0x0020 */ long tmDigitizedAspectX; /* +0x0024 */ long tmDigitizedAspectY; /* +0x0028 */ unsigned char tmFirstChar[2]; /* +0x002c 71 00 00 00 */ unsigned char tmLastChar[2]; /* +0x002e 71 00 00 00 */ unsigned char tmDefaultChar[2]; /* +0x0030 71 00 00 00 */ unsigned char tmBreakChar[2]; /* +0x0032 71 00 00 00 */ unsigned char tmItalic; /* +0x0034 */ unsigned char tmUnderlined; /* +0x0035 */ unsigned char tmStruckOut; /* +0x0036 */ unsigned char tmPitchAndFamily; /* +0x0037 */ unsigned char tmCharSet; /* +0x0038 */ unsigned long ntmFlags; /* +0x003c */ unsigned char ntmSizeEM[4]; /* +0x0040 75 00 00 00 */ unsigned char ntmCellHeight[4]; /* +0x0044 75 00 00 00 */ unsigned char ntmAvgWidth[4]; /* +0x0048 75 00 00 00 */ }; struct DISPLAYCONFIG_2DREGION { unsigned char cx[4]; /* +0x0000 75 00 00 00 */ unsigned char cy[4]; /* +0x0004 75 00 00 00 */ }; struct _CMC_TAGGED_CERT_REQUEST { unsigned long dwBodyPartID; /* +0x0000 */ unsigned char SignedCertRequest[16]; /* +0x0008 08 13 00 00 */ }; struct tagEMRMASKBLT { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char rclBounds[16]; /* +0x0008 db 12 00 00 */ long xDest; /* +0x0018 */ long yDest; /* +0x001c */ long cxDest; /* +0x0020 */ long cyDest; /* +0x0024 */ unsigned long dwRop; /* +0x0028 */ long xSrc; /* +0x002c */ long ySrc; /* +0x0030 */ unsigned char xformSrc[24]; /* +0x0034 dc 12 00 00 */ unsigned long crBkColorSrc; /* +0x004c */ unsigned long iUsageSrc; /* +0x0050 */ unsigned long offBmiSrc; /* +0x0054 */ unsigned long cbBmiSrc; /* +0x0058 */ unsigned long offBitsSrc; /* +0x005c */ unsigned long cbBitsSrc; /* +0x0060 */ long xMask; /* +0x0064 */ long yMask; /* +0x0068 */ unsigned long iUsageMask; /* +0x006c */ unsigned long offBmiMask; /* +0x0070 */ unsigned long cbBmiMask; /* +0x0074 */ unsigned long offBitsMask; /* +0x0078 */ unsigned long cbBitsMask; /* +0x007c */ }; struct _CRYPT_RC4_KEY_STATE { unsigned char Key[16]; /* +0x0000 33 1c 00 00 */ unsigned char SBox[256]; /* +0x0010 90 16 00 00 */ unsigned char i; /* +0x0110 */ unsigned char j; /* +0x0111 */ }; struct _PLUGPLAY_EVENT_BLOCK { unsigned char EventGuid[16]; /* +0x0000 f3 14 00 00 */ unsigned char EventCategory[8]; /* +0x0010 e5 34 00 00 */ unsigned long *Result; /* +0x0018 */ unsigned long Flags; /* +0x0020 */ unsigned long TotalSize; /* +0x0024 */ void *DeviceObject; /* +0x0028 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { unsigned char DeviceId[2]; /* +0x0000 0a 14 00 00 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { unsigned char PowerSettingGuid[16]; /* +0x0000 f3 14 00 00 */ unsigned long Flags; /* +0x0010 */ unsigned long SessionId; /* +0x0014 */ unsigned long DataLength; /* +0x0018 */ unsigned char Data[4]; /* +0x001c ff 12 00 00 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { unsigned char ParentId[2]; /* +0x0000 0a 14 00 00 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { unsigned char BlockedDriverGuid[16]; /* +0x0000 f3 14 00 00 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { unsigned char VetoType[4]; /* +0x0000 43 19 00 00 */ unsigned char DeviceIdVetoNameBuffer[4]; /* +0x0004 0a 14 00 00 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { unsigned long NotificationCode; /* +0x0000 */ unsigned long NotificationData; /* +0x0004 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { void *Notification; /* +0x0000 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { void *NotificationStructure; /* +0x0000 */ unsigned char DeviceId[8]; /* +0x0008 0a 14 00 00 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { unsigned char ClassGuid[16]; /* +0x0000 f3 14 00 00 */ unsigned char SymbolicLinkName[4]; /* +0x0010 0a 14 00 00 */ }; struct _RTL_AVL_TREE { unsigned char Root[8]; /* +0x0000 40 20 00 00 */ }; struct _IMAGE_AUX_SYMBOL_EX:: { unsigned long crc; /* +0x0000 */ unsigned char rgbReserved[16]; /* +0x0004 33 1c 00 00 */ }; struct _IMAGE_AUX_SYMBOL_EX:: { unsigned long Length; /* +0x0000 */ unsigned short NumberOfRelocations; /* +0x0004 */ unsigned short NumberOfLinenumbers; /* +0x0006 */ unsigned long CheckSum; /* +0x0008 */ short Number; /* +0x000c */ unsigned char Selection; /* +0x000e */ unsigned char bReserved; /* +0x000f */ short HighNumber; /* +0x0010 */ unsigned char rgbReserved[2]; /* +0x0012 bb 17 00 00 */ }; struct _IMAGE_AUX_SYMBOL_EX:: { unsigned char Name[20]; /* +0x0000 97 16 00 00 */ }; struct _IMAGE_AUX_SYMBOL_EX:: { unsigned long WeakDefaultSymIndex; /* +0x0000 */ unsigned long WeakSearchType; /* +0x0004 */ unsigned char rgbReserved[12]; /* +0x0008 88 15 00 00 */ }; struct _FILE_ID_FULL_DIR_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long FileIndex; /* +0x0004 */ unsigned char CreationTime[8]; /* +0x0008 43 13 00 00 */ unsigned char LastAccessTime[8]; /* +0x0010 43 13 00 00 */ unsigned char LastWriteTime[8]; /* +0x0018 43 13 00 00 */ unsigned char ChangeTime[8]; /* +0x0020 43 13 00 00 */ unsigned char EndOfFile[8]; /* +0x0028 43 13 00 00 */ unsigned char AllocationSize[8]; /* +0x0030 43 13 00 00 */ unsigned long FileAttributes; /* +0x0038 */ unsigned long FileNameLength; /* +0x003c */ unsigned long EaSize; /* +0x0040 */ unsigned char FileId[8]; /* +0x0048 43 13 00 00 */ unsigned char FileName[8]; /* +0x0050 0a 14 00 00 */ }; struct _CRYPT_SMART_CARD_ROOT_INFO { unsigned char rgbCardID[16]; /* +0x0000 33 1c 00 00 */ unsigned char luid[8]; /* +0x0010 ac 29 00 00 */ }; struct _POOLED_USAGE_AND_LIMITS { unsigned long long PeakPagedPoolUsage; /* +0x0000 */ unsigned long long PagedPoolUsage; /* +0x0008 */ unsigned long long PagedPoolLimit; /* +0x0010 */ unsigned long long PeakNonPagedPoolUsage; /* +0x0018 */ unsigned long long NonPagedPoolUsage; /* +0x0020 */ unsigned long long NonPagedPoolLimit; /* +0x0028 */ unsigned long long PeakPagefileUsage; /* +0x0030 */ unsigned long long PagefileUsage; /* +0x0038 */ unsigned long long PagefileLimit; /* +0x0040 */ }; struct _CLUSTER_RANGE { unsigned char StartingCluster[8]; /* +0x0000 43 13 00 00 */ unsigned char ClusterCount[8]; /* +0x0008 43 13 00 00 */ }; struct _CM_SCSI_DEVICE_DATA { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned char HostIdentifier; /* +0x0004 */ }; struct _SERVICE_SID_INFO { unsigned long dwServiceSidType; /* +0x0000 */ }; struct _REPARSE_INDEX_KEY { unsigned long FileReparseTag; /* +0x0000 */ unsigned char FileId[8]; /* +0x0004 43 13 00 00 */ }; struct _REMOTE_LINK_TRACKING_INFORMATION_ { void *TargetFileObject; /* +0x0000 */ unsigned long TargetLinkTrackingInformationLength; /* +0x0008 */ unsigned char TargetLinkTrackingInformationBuffer[4]; /* +0x000c ff 12 00 00 */ }; struct _RTL_RUN_ONCE { void *Ptr; /* +0x0000 */ unsigned long long Value; /* +0x0000 */ unsigned char State[8]; /* +0x0000 55 35 00 00 */ }; struct tagEMRPIXELFORMAT { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char pfd[40]; /* +0x0008 27 24 00 00 */ }; struct _TXFS_LIST_TRANSACTIONS { unsigned long long NumberOfTransactions; /* +0x0000 */ unsigned long long BufferSizeRequired; /* +0x0008 */ }; struct _SYSDBG_BUS_DATA { unsigned long Address; /* +0x0000 */ void *Buffer; /* +0x0008 */ unsigned long Request; /* +0x0010 */ unsigned char BusDataType[4]; /* +0x0014 72 35 00 00 */ unsigned long BusNumber; /* +0x0018 */ unsigned long SlotNumber; /* +0x001c */ }; struct _REASON_CONTEXT { unsigned long Version; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ }; struct _REASON_CONTEXT:::: { unsigned char LocalizedReasonModule[8]; /* +0x0000 d1 14 00 00 */ unsigned long LocalizedReasonId; /* +0x0008 */ unsigned long ReasonStringCount; /* +0x000c */ unsigned char ReasonStrings[8]; /* +0x0010 db 13 00 00 */ }; struct tagCREATESTRUCTA { void *lpCreateParams; /* +0x0000 */ unsigned char hInstance[8]; /* +0x0008 d1 14 00 00 */ unsigned char hMenu[8]; /* +0x0010 63 15 00 00 */ unsigned char hwndParent[8]; /* +0x0018 f7 12 00 00 */ unsigned char cy[4]; /* +0x0020 74 00 00 00 */ unsigned char cx[4]; /* +0x0024 74 00 00 00 */ unsigned char y[4]; /* +0x0028 74 00 00 00 */ unsigned char x[4]; /* +0x002c 74 00 00 00 */ long style; /* +0x0030 */ unsigned char lpszName[8]; /* +0x0038 79 14 00 00 */ unsigned char lpszClass[8]; /* +0x0040 79 14 00 00 */ unsigned long dwExStyle; /* +0x0048 */ }; struct _OCSP_REQUEST_ENTRY { unsigned char CertId[72]; /* +0x0000 f5 31 00 00 */ unsigned long cExtension; /* +0x0048 */ unsigned char rgExtension[8]; /* +0x0050 3f 16 00 00 */ }; struct _RTL_VERIFIER_FAULT_INJECTIONS_INFORMATION { unsigned long Size; /* +0x0000 */ unsigned char Initialized; /* +0x0004 */ unsigned char FaultProbability[64]; /* +0x0008 87 27 00 00 */ unsigned char FaultBreak[64]; /* +0x0048 87 27 00 00 */ unsigned long TargetMaximumIndex; /* +0x0088 */ unsigned char FaultTargetStart[1024]; /* +0x0090 ce 35 00 00 */ unsigned char FaultTargetEnd[1024]; /* +0x0490 ce 35 00 00 */ unsigned long ExclusionMaximumIndex; /* +0x0890 */ unsigned char FaultExclusionStart[1024]; /* +0x0898 ce 35 00 00 */ unsigned char FaultExclusionEnd[1024]; /* +0x0c98 ce 35 00 00 */ }; struct tagSOUNDSENTRYA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned long iFSTextEffect; /* +0x0008 */ unsigned long iFSTextEffectMSec; /* +0x000c */ unsigned long iFSTextEffectColorBits; /* +0x0010 */ unsigned long iFSGrafEffect; /* +0x0014 */ unsigned long iFSGrafEffectMSec; /* +0x0018 */ unsigned long iFSGrafEffectColor; /* +0x001c */ unsigned long iWindowsEffect; /* +0x0020 */ unsigned long iWindowsEffectMSec; /* +0x0024 */ char *lpszWindowsEffectDLL; /* +0x0028 */ unsigned long iWindowsEffectOrdinal; /* +0x0030 */ }; struct _numberfmtA { unsigned char NumDigits[4]; /* +0x0000 75 00 00 00 */ unsigned char LeadingZero[4]; /* +0x0004 75 00 00 00 */ unsigned char Grouping[8]; /* +0x0008 75 00 00 00 */ char *lpDecimalSep; /* +0x0010 */ char *lpThousandSep; /* +0x0018 */ unsigned char NegativeOrder[8]; /* +0x0020 75 00 00 00 */ }; struct _PREFIX_TABLE { short NodeTypeCode; /* +0x0000 */ short NameLength; /* +0x0002 */ unsigned char NextPrefixTree[8]; /* +0x0008 5c 30 00 00 */ }; struct _REQUEST_RAW_ENCRYPTED_DATA { long long FileOffset; /* +0x0000 */ unsigned long Length; /* +0x0008 */ }; struct _SYSTEM_PROCESSOR_PERFORMANCE_STATE_DISTRIBUTION { unsigned long ProcessorNumber; /* +0x0000 */ unsigned long StateCount; /* +0x0004 */ unsigned char States[8]; /* +0x0008 f5 35 00 00 */ }; struct tagINTERFACEDATA { unsigned char pmethdata[8]; /* +0x0000 6b 15 00 00 */ unsigned char cMembers[8]; /* +0x0008 75 00 00 00 */ }; struct _SERVICE_TIMECHANGE_INFO { unsigned char liNewTime[8]; /* +0x0000 43 13 00 00 */ unsigned char liOldTime[8]; /* +0x0008 43 13 00 00 */ }; struct _ICONINFO { unsigned char fIcon[4]; /* +0x0000 74 00 00 00 */ unsigned long xHotspot; /* +0x0004 */ unsigned long yHotspot; /* +0x0008 */ unsigned char hbmMask[8]; /* +0x0010 18 18 00 00 */ unsigned char hbmColor[8]; /* +0x0018 18 18 00 00 */ }; struct _SE_ACCESS_REQUEST { unsigned long Size; /* +0x0000 */ unsigned char SeSecurityDescriptor[8]; /* +0x0008 23 36 00 00 */ unsigned long DesiredAccess; /* +0x0010 */ unsigned long PreviouslyGrantedAccess; /* +0x0014 */ void *PrincipalSelfSid; /* +0x0018 */ unsigned char GenericMapping[8]; /* +0x0020 43 28 00 00 */ unsigned long ObjectTypeListCount; /* +0x0028 */ unsigned char ObjectTypeList[8]; /* +0x0030 25 36 00 00 */ }; struct _INITIAL_TEB:: { void *OldStackBase; /* +0x0000 */ void *OldStackLimit; /* +0x0008 */ }; struct _RTL_PROCESS_LOCKS { unsigned long NumberOfLocks; /* +0x0000 */ unsigned char Locks[48]; /* +0x0008 2b 36 00 00 */ }; struct _RTL_TIME_ZONE_INFORMATION { long Bias; /* +0x0000 */ unsigned char StandardName[64]; /* +0x0004 bf 15 00 00 */ unsigned char StandardStart[16]; /* +0x0044 78 30 00 00 */ long StandardBias; /* +0x0054 */ unsigned char DaylightName[64]; /* +0x0058 bf 15 00 00 */ unsigned char DaylightStart[16]; /* +0x0098 78 30 00 00 */ long DaylightBias; /* +0x00a8 */ }; struct tagRPC_EXTENDED_ERROR_INFO:: { /* unsigned char SystemTime[0]; +0x0000 c0 15 00 00 */ unsigned char FileTime[16]; /* +0x0000 37 13 00 00 */ }; struct _CRYPTPROTECT_PROMPTSTRUCT { unsigned long cbSize; /* +0x0000 */ unsigned long dwPromptFlags; /* +0x0004 */ unsigned char hwndApp[8]; /* +0x0008 f7 12 00 00 */ unsigned char szPrompt[8]; /* +0x0010 cb 13 00 00 */ }; struct _ALPC_PORT_CALLBACK_INFORMATION { void *CallbackObject; /* +0x0000 */ void *Context; /* +0x0008 */ }; struct _RTL_VERIFIER_PROVIDER_DESCRIPTOR { unsigned long Length; /* +0x0000 */ unsigned char ProviderDlls[8]; /* +0x0008 12 29 00 00 */ unsigned char ProviderDllLoadCallback[8]; /* +0x0010 53 28 00 00 */ unsigned char ProviderDllUnloadCallback[8]; /* +0x0018 53 28 00 00 */ unsigned char VerifierImage[8]; /* +0x0020 71 06 00 00 */ unsigned long VerifierFlags; /* +0x0028 */ unsigned long VerifierDebug; /* +0x002c */ void *RtlpGetStackTraceAddress; /* +0x0030 */ void *RtlpDebugPageHeapCreate; /* +0x0038 */ void *RtlpDebugPageHeapDestroy; /* +0x0040 */ unsigned char ProviderNtdllHeapFreeCallback[8]; /* +0x0048 eb 19 00 00 */ }; struct _PROCESS_INFORMATION { void *hProcess; /* +0x0000 */ void *hThread; /* +0x0008 */ unsigned long dwProcessId; /* +0x0010 */ unsigned long dwThreadId; /* +0x0014 */ }; struct _FP_32 { unsigned char W[4]; /* +0x0000 fc 12 00 00 */ }; struct _SYSTEM_OBJECT_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ void *Object; /* +0x0008 */ void *CreatorUniqueProcess; /* +0x0010 */ unsigned short CreatorBackTraceIndex; /* +0x0018 */ unsigned short Flags; /* +0x001a */ long PointerCount; /* +0x001c */ long HandleCount; /* +0x0020 */ unsigned long PagedPoolCharge; /* +0x0024 */ unsigned long NonPagedPoolCharge; /* +0x0028 */ void *ExclusiveProcessId; /* +0x0030 */ void *SecurityDescriptor; /* +0x0038 */ unsigned char NameInfo[16]; /* +0x0040 6e 36 00 00 */ }; struct tagWINDOWPOS { unsigned char hwnd[8]; /* +0x0000 f7 12 00 00 */ unsigned char hwndInsertAfter[8]; /* +0x0008 f7 12 00 00 */ unsigned char x[4]; /* +0x0010 74 00 00 00 */ unsigned char y[4]; /* +0x0014 74 00 00 00 */ unsigned char cx[4]; /* +0x0018 74 00 00 00 */ unsigned char cy[4]; /* +0x001c 74 00 00 00 */ unsigned char flags[8]; /* +0x0020 75 00 00 00 */ }; struct tagNONCLIENTMETRICSA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char iBorderWidth[4]; /* +0x0004 74 00 00 00 */ unsigned char iScrollWidth[4]; /* +0x0008 74 00 00 00 */ unsigned char iScrollHeight[4]; /* +0x000c 74 00 00 00 */ unsigned char iCaptionWidth[4]; /* +0x0010 74 00 00 00 */ unsigned char iCaptionHeight[4]; /* +0x0014 74 00 00 00 */ unsigned char lfCaptionFont[60]; /* +0x0018 dc 16 00 00 */ unsigned char iSmCaptionWidth[4]; /* +0x0054 74 00 00 00 */ unsigned char iSmCaptionHeight[4]; /* +0x0058 74 00 00 00 */ unsigned char lfSmCaptionFont[60]; /* +0x005c dc 16 00 00 */ unsigned char iMenuWidth[4]; /* +0x0098 74 00 00 00 */ unsigned char iMenuHeight[4]; /* +0x009c 74 00 00 00 */ unsigned char lfMenuFont[60]; /* +0x00a0 dc 16 00 00 */ unsigned char lfStatusFont[60]; /* +0x00dc dc 16 00 00 */ unsigned char lfMessageFont[60]; /* +0x0118 dc 16 00 00 */ unsigned char iPaddedBorderWidth[4]; /* +0x0154 74 00 00 00 */ }; struct tagGLYPHSET { unsigned long cbThis; /* +0x0000 */ unsigned long flAccel; /* +0x0004 */ unsigned long cGlyphsSupported; /* +0x0008 */ unsigned long cRanges; /* +0x000c */ unsigned char ranges[4]; /* +0x0010 7d 36 00 00 */ }; struct tagMDICREATESTRUCTW { unsigned char szClass[8]; /* +0x0000 cb 13 00 00 */ unsigned char szTitle[8]; /* +0x0008 cb 13 00 00 */ void *hOwner; /* +0x0010 */ unsigned char x[4]; /* +0x0018 74 00 00 00 */ unsigned char y[4]; /* +0x001c 74 00 00 00 */ unsigned char cx[4]; /* +0x0020 74 00 00 00 */ unsigned char cy[4]; /* +0x0024 74 00 00 00 */ unsigned long style; /* +0x0028 */ long long lParam; /* +0x0030 */ }; struct _FILE_FS_SIZE_INFORMATION { unsigned char TotalAllocationUnits[8]; /* +0x0000 43 13 00 00 */ unsigned char AvailableAllocationUnits[8]; /* +0x0008 43 13 00 00 */ unsigned long SectorsPerAllocationUnit; /* +0x0010 */ unsigned long BytesPerSector; /* +0x0014 */ }; struct _PO_WAKE_SOURCE_DEVICE { unsigned char Header[8]; /* +0x0000 1d 18 00 00 */ unsigned char InstancePath[4]; /* +0x0008 0a 14 00 00 */ }; struct _KEY_CONTROL_FLAGS_INFORMATION { unsigned long ControlFlags; /* +0x0000 */ }; struct _KCRM_TRANSACTION_BLOB { unsigned char UOW[16]; /* +0x0000 f3 14 00 00 */ unsigned char TmIdentity[16]; /* +0x0010 f3 14 00 00 */ unsigned long IsolationLevel; /* +0x0020 */ unsigned long IsolationFlags; /* +0x0024 */ unsigned long Timeout; /* +0x0028 */ unsigned char Description[128]; /* +0x002c cb 1e 00 00 */ }; struct _MUILANGLISTNODE { unsigned short LanguageType; /* +0x0000 */ unsigned short Reserved; /* +0x0002 */ short LanguageSpec; /* +0x0004 */ }; struct _cpinfo { unsigned char MaxCharSize[4]; /* +0x0000 75 00 00 00 */ unsigned char DefaultChar[2]; /* +0x0004 bb 17 00 00 */ unsigned char LeadByte[14]; /* +0x0006 88 15 00 00 */ }; struct _POWER_SESSION_CONNECT { unsigned char Connected; /* +0x0000 */ unsigned char Console; /* +0x0001 */ }; struct tagRPC_CALL_ATTRIBUTES_V2_A { unsigned char Version[4]; /* +0x0000 75 00 00 00 */ unsigned long Flags; /* +0x0004 */ unsigned long ServerPrincipalNameBufferLength; /* +0x0008 */ unsigned char *ServerPrincipalName; /* +0x0010 */ unsigned long ClientPrincipalNameBufferLength; /* +0x0018 */ unsigned char *ClientPrincipalName; /* +0x0020 */ unsigned long AuthenticationLevel; /* +0x0028 */ unsigned long AuthenticationService; /* +0x002c */ unsigned char NullSession[4]; /* +0x0030 74 00 00 00 */ unsigned char KernelModeCaller[4]; /* +0x0034 74 00 00 00 */ unsigned long ProtocolSequence; /* +0x0038 */ unsigned long IsClientLocal; /* +0x003c */ void *ClientPID; /* +0x0040 */ unsigned long CallStatus; /* +0x0048 */ unsigned char CallType[4]; /* +0x004c b2 18 00 00 */ unsigned char CallLocalAddress[8]; /* +0x0050 b4 18 00 00 */ unsigned short OpNum; /* +0x0058 */ unsigned char InterfaceUuid[20]; /* +0x005c f3 14 00 00 */ }; struct _FILE_PIPE_CLIENT_PROCESS_BUFFER_EX { void *ClientSession; /* +0x0000 */ void *ClientProcess; /* +0x0008 */ unsigned short ClientComputerNameLength; /* +0x0010 */ unsigned char ClientComputerBuffer[38]; /* +0x0012 c7 21 00 00 */ }; struct tagIMEMENUITEMINFOW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char fType[4]; /* +0x0004 75 00 00 00 */ unsigned char fState[4]; /* +0x0008 75 00 00 00 */ unsigned char wID[4]; /* +0x000c 75 00 00 00 */ unsigned char hbmpChecked[8]; /* +0x0010 18 18 00 00 */ unsigned char hbmpUnchecked[8]; /* +0x0018 18 18 00 00 */ unsigned long dwItemData; /* +0x0020 */ unsigned char szString[164]; /* +0x0024 44 21 00 00 */ unsigned char hbmpItem[8]; /* +0x00c8 18 18 00 00 */ }; struct _RTL_CRITICAL_SECTION_DEBUG32 { unsigned short Type; /* +0x0000 */ unsigned short CreatorBackTraceIndex; /* +0x0002 */ unsigned long CriticalSection; /* +0x0004 */ unsigned char ProcessLocksList[8]; /* +0x0008 0c 1f 00 00 */ unsigned long EntryCount; /* +0x0010 */ unsigned long ContentionCount; /* +0x0014 */ unsigned char Spare[8]; /* +0x0018 14 16 00 00 */ }; struct _OPERATION_START_PARAMETERS { unsigned long Version; /* +0x0000 */ unsigned long OperationId; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ }; struct _CRL_DIST_POINT { unsigned char DistPointName[24]; /* +0x0000 16 23 00 00 */ unsigned char ReasonFlags[24]; /* +0x0018 09 13 00 00 */ unsigned char CRLIssuer[16]; /* +0x0030 86 24 00 00 */ }; struct _CRYPT_MASK_GEN_ALGORITHM { char *pszObjId; /* +0x0000 */ unsigned char HashAlgorithm[24]; /* +0x0008 68 14 00 00 */ }; struct _FILE_REFERENCE_RANGE { unsigned long long StartingFileReferenceNumber; /* +0x0000 */ unsigned long long EndingFileReferenceNumber; /* +0x0008 */ }; struct tagEMRSETMITERLIMIT { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char eMiterLimit[4]; /* +0x0008 40 00 00 00 */ }; struct _CERT_LOGOTYPE_DETAILS { unsigned char pwszMimeType[8]; /* +0x0000 71 06 00 00 */ unsigned long cHashedUrl; /* +0x0008 */ unsigned char rgHashedUrl[8]; /* +0x0010 ce 29 00 00 */ }; struct _SLIST_HEADER { unsigned long long Alignment; /* +0x0000 */ unsigned long long Region; /* +0x0008 */ }; struct tagLOGBRUSH32 { unsigned char lbStyle[4]; /* +0x0000 75 00 00 00 */ unsigned long lbColor; /* +0x0004 */ unsigned long lbHatch; /* +0x0008 */ }; struct _CRYPT_PKCS8_IMPORT_PARAMS { unsigned char PrivateKey[16]; /* +0x0000 08 13 00 00 */ unsigned char pResolvehCryptProvFunc[8]; /* +0x0010 54 37 00 00 */ void *pVoidResolveFunc; /* +0x0018 */ unsigned char pDecryptPrivateKeyFunc[8]; /* +0x0020 57 37 00 00 */ void *pVoidDecryptFunc; /* +0x0028 */ }; struct _TOKEN_SECURITY_ATTRIBUTES_INFORMATION { unsigned short Version; /* +0x0000 */ unsigned short Reserved; /* +0x0002 */ unsigned long AttributeCount; /* +0x0004 */ }; struct _TOKEN_SECURITY_ATTRIBUTES_INFORMATION:: { unsigned char pAttributeV1[8]; /* +0x0000 5e 37 00 00 */ }; struct _RTL_VERIFIER_PAGEHEAPS_INFORMATION { unsigned long TotalSize; /* +0x0000 */ unsigned long NumberPageHeaps; /* +0x0004 */ unsigned char PageHeapInformation[24]; /* +0x0008 64 37 00 00 */ }; enum __vc_attributes::pointer_defaultAttribute::type_e { ptr = 0, ref = 1, unique = 2 }; enum __vc_attributes::threadingAttribute::threading_e { apartment = 1, single = 2, free = 3, neutral = 4, both = 5 }; enum __vc_attributes::event_receiverAttribute::type_e { native = 0, com = 1, managed = 2 }; enum __vc_attributes::aggregatableAttribute::type_e { never = 0, allowed = 1, always = 2 }; enum __vc_attributes::event_sourceAttribute::optimize_e { speed = 0, size = 1 }; enum __vc_attributes::moduleAttribute::type_e { dll = 1, exe = 2, service = 3, unspecified = 4, EXE = 2, SERVICE = 3 }; enum __vc_attributes::helper_attributes::usageAttribute::usage_e { eAnyUsage = 0, eCoClassUsage = 1, eCOMInterfaceUsage = 2, eInterfaceUsage = 6, eMemberUsage = 8, eMethodUsage = 16, eInterfaceMethodUsage = 32, eInterfaceMemberUsage = 64, eCoClassMemberUsage = 128, eCoClassMethodUsage = 256, eGlobalMethodUsage = 768, eGlobalDataUsage = 1024, eClassUsage = 2048, eInterfaceParameterUsage = 4096, eMethodParameterUsage = 12288, eIDLModuleUsage = 16384, = 32770 }; enum __vc_attributes::helper_attributes::v1_alttypeAttribute::type_e { eBoolean = 0, eInteger = 1, eFloat = 2, eDouble = 3 }; struct _FILE_PIPE_REMOTE_INFORMATION { unsigned char CollectDataTime[8]; /* +0x0000 43 13 00 00 */ unsigned long MaximumCollectionCount; /* +0x0008 */ }; struct tagEMRGDICOMMENT { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned long cbData; /* +0x0008 */ unsigned char Data[4]; /* +0x000c ff 12 00 00 */ }; struct _BCRYPT_ALGORITHM_IDENTIFIER { unsigned char pszName[8]; /* +0x0000 71 06 00 00 */ unsigned long dwClass; /* +0x0008 */ unsigned long dwFlags; /* +0x000c */ }; struct tagMENUINFO { unsigned long cbSize; /* +0x0000 */ unsigned long fMask; /* +0x0004 */ unsigned long dwStyle; /* +0x0008 */ unsigned char cyMax[4]; /* +0x000c 75 00 00 00 */ unsigned char hbrBack[8]; /* +0x0010 8f 23 00 00 */ unsigned long dwContextHelpID; /* +0x0018 */ unsigned long long dwMenuData; /* +0x0020 */ }; struct _CRYPT_ENCRYPT_MESSAGE_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwMsgEncodingType; /* +0x0004 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned char ContentEncryptionAlgorithm[24]; /* +0x0010 68 14 00 00 */ void *pvEncryptionAuxInfo; /* +0x0028 */ unsigned long dwFlags; /* +0x0030 */ unsigned long dwInnerContentType; /* +0x0034 */ }; struct _ALPC_BASIC_INFORMATION { unsigned long Flags; /* +0x0000 */ unsigned long SequenceNo; /* +0x0004 */ void *PortContext; /* +0x0008 */ }; struct _FILE_LEVEL_TRIM { unsigned long Key; /* +0x0000 */ unsigned long NumRanges; /* +0x0004 */ unsigned char Ranges[16]; /* +0x0008 bb 3a 00 00 */ }; struct tagRECONVERTSTRING { unsigned long dwSize; /* +0x0000 */ unsigned long dwVersion; /* +0x0004 */ unsigned long dwStrLen; /* +0x0008 */ unsigned long dwStrOffset; /* +0x000c */ unsigned long dwCompStrLen; /* +0x0010 */ unsigned long dwCompStrOffset; /* +0x0014 */ unsigned long dwTargetStrLen; /* +0x0018 */ unsigned long dwTargetStrOffset; /* +0x001c */ }; struct _CERT_QC_STATEMENTS_EXT_INFO { unsigned long cStatement; /* +0x0000 */ unsigned char rgStatement[8]; /* +0x0008 31 25 00 00 */ }; struct _SYSTEM_REGISTRY_QUOTA_INFORMATION { unsigned long RegistryQuotaAllowed; /* +0x0000 */ unsigned long RegistryQuotaUsed; /* +0x0004 */ unsigned long long PagedPoolSize; /* +0x0008 */ }; struct _NETCONNECTINFOSTRUCT { unsigned long cbStructure; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned long dwSpeed; /* +0x0008 */ unsigned long dwDelay; /* +0x000c */ unsigned long dwOptDataSize; /* +0x0010 */ }; struct tagALTTABINFO { unsigned long cbSize; /* +0x0000 */ unsigned char cItems[4]; /* +0x0004 74 00 00 00 */ unsigned char cColumns[4]; /* +0x0008 74 00 00 00 */ unsigned char cRows[4]; /* +0x000c 74 00 00 00 */ unsigned char iColFocus[4]; /* +0x0010 74 00 00 00 */ unsigned char iRowFocus[4]; /* +0x0014 74 00 00 00 */ unsigned char cxItem[4]; /* +0x0018 74 00 00 00 */ unsigned char cyItem[4]; /* +0x001c 74 00 00 00 */ unsigned char ptStart[8]; /* +0x0020 a1 14 00 00 */ }; struct _CERT_SYSTEM_STORE_INFO { unsigned long cbSize; /* +0x0000 */ }; struct _DISPATCHER_CONTEXT { unsigned long long ControlPc; /* +0x0000 */ unsigned long long ImageBase; /* +0x0008 */ unsigned char FunctionEntry[8]; /* +0x0010 1c 1d 00 00 */ unsigned long long EstablisherFrame; /* +0x0018 */ unsigned long long TargetIp; /* +0x0020 */ unsigned char ContextRecord[8]; /* +0x0028 f4 2a 00 00 */ unsigned char LanguageHandler[8]; /* +0x0030 ed 3a 00 00 */ void *HandlerData; /* +0x0038 */ unsigned char HistoryTable[8]; /* +0x0040 ef 3a 00 00 */ unsigned long ScopeIndex; /* +0x0048 */ unsigned long Fill0; /* +0x004c */ }; struct _FILE_IS_REMOTE_DEVICE_INFORMATION { unsigned char IsRemote; /* +0x0000 */ }; struct _userHBITMAP { long fContext; /* +0x0000 */ }; struct _userHBITMAP::__MIDL_IWinTypes_0007 { long hInproc; /* +0x0000 */ /* unsigned char hRemote[0]; +0x0000 fb 3a 00 00 */ long long hInproc64; /* +0x0000 */ }; struct _AUTHENTICODE_EXTRA_CERT_CHAIN_POLICY_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwRegPolicySettings; /* +0x0004 */ unsigned char pSignerInfo[8]; /* +0x0008 01 3b 00 00 */ }; struct _CMSG_CTRL_VERIFY_SIGNATURE_EX_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned long dwSignerIndex; /* +0x0010 */ unsigned long dwSignerType; /* +0x0014 */ void *pvSigner; /* +0x0018 */ }; struct _PROCESSOR_POWER_INFORMATION { unsigned long Number; /* +0x0000 */ unsigned long MaxMhz; /* +0x0004 */ unsigned long CurrentMhz; /* +0x0008 */ unsigned long MhzLimit; /* +0x000c */ unsigned long MaxIdleState; /* +0x0010 */ unsigned long CurrentIdleState; /* +0x0014 */ }; struct _LDR_SECTION_INFO { void *SectionHandle; /* +0x0000 */ unsigned long DesiredAccess; /* +0x0008 */ unsigned char ObjA[8]; /* +0x0010 32 3b 00 00 */ unsigned long SectionPageProtection; /* +0x0018 */ unsigned long AllocationAttributes; /* +0x001c */ }; struct tagEMRSETCOLORSPACE { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned long ihCS; /* +0x0008 */ }; struct _MMPFN_IDENTITY:::: { unsigned char CombinedPage[8]; /* +0x0000 1d 13 00 00 */ }; struct _MMPFN_IDENTITY:::: { /* unsigned char Image[0]; +0x0000 1d 13 00 00 */ unsigned char Mismatch[8]; /* +0x0000 57 1e 00 00 */ }; struct _MMPFN_IDENTITY:: { /* unsigned char e1[0]; +0x0000 4b 3b 00 00 */ /* unsigned char e2[0]; +0x0000 4c 3b 00 00 */ /* unsigned char e3[0]; +0x0000 4d 3b 00 00 */ unsigned char e4[8]; /* +0x0000 4e 3b 00 00 */ }; struct _FILE_ALLOCATED_RANGE_BUFFER { unsigned char FileOffset[8]; /* +0x0000 43 13 00 00 */ unsigned char Length[8]; /* +0x0008 43 13 00 00 */ }; struct _RTL_UNLOAD_EVENT_TRACE32 { unsigned long BaseAddress; /* +0x0000 */ unsigned long SizeOfImage; /* +0x0004 */ unsigned long Sequence; /* +0x0008 */ unsigned long TimeDateStamp; /* +0x000c */ unsigned long CheckSum; /* +0x0010 */ unsigned char ImageName[64]; /* +0x0014 bf 15 00 00 */ unsigned char Version[8]; /* +0x0054 14 16 00 00 */ }; struct _SYSTEM_POWER_POLICY { unsigned long Revision; /* +0x0000 */ unsigned char PowerButton[12]; /* +0x0004 9c 1f 00 00 */ unsigned char SleepButton[12]; /* +0x0010 9c 1f 00 00 */ unsigned char LidClose[12]; /* +0x001c 9c 1f 00 00 */ unsigned char LidOpenWake[4]; /* +0x0028 76 16 00 00 */ unsigned long Reserved; /* +0x002c */ unsigned char Idle[12]; /* +0x0030 9c 1f 00 00 */ unsigned long IdleTimeout; /* +0x003c */ unsigned char IdleSensitivity; /* +0x0040 */ unsigned char DynamicThrottle; /* +0x0041 */ unsigned char Spare2[2]; /* +0x0042 bb 17 00 00 */ unsigned char MinSleep[4]; /* +0x0044 76 16 00 00 */ unsigned char MaxSleep[4]; /* +0x0048 76 16 00 00 */ unsigned char ReducedLatencySleep[4]; /* +0x004c 76 16 00 00 */ unsigned long WinLogonFlags; /* +0x0050 */ unsigned long Spare3; /* +0x0054 */ unsigned long DozeS4Timeout; /* +0x0058 */ unsigned long BroadcastCapacityResolution; /* +0x005c */ unsigned char DischargePolicy[96]; /* +0x0060 7e 3b 00 00 */ unsigned long VideoTimeout; /* +0x00c0 */ unsigned char VideoDimDisplay; /* +0x00c4 */ unsigned char VideoReserved[12]; /* +0x00c8 28 13 00 00 */ unsigned long SpindownTimeout; /* +0x00d4 */ unsigned char OptimizeForPower; /* +0x00d8 */ unsigned char FanThrottleTolerance; /* +0x00d9 */ unsigned char ForcedThrottle; /* +0x00da */ unsigned char MinThrottle; /* +0x00db */ unsigned char OverThrottled[12]; /* +0x00dc 9c 1f 00 00 */ }; struct _TRANSACTION_LIST_INFORMATION { unsigned long NumberOfTransactions; /* +0x0000 */ unsigned char TransactionInformation[16]; /* +0x0004 81 3b 00 00 */ }; struct _wireSAFEARR_BSTR { unsigned long Size; /* +0x0000 */ unsigned char aBstr[8]; /* +0x0008 89 3b 00 00 */ }; struct _FILE_DIRECTORY_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long FileIndex; /* +0x0004 */ unsigned char CreationTime[8]; /* +0x0008 43 13 00 00 */ unsigned char LastAccessTime[8]; /* +0x0010 43 13 00 00 */ unsigned char LastWriteTime[8]; /* +0x0018 43 13 00 00 */ unsigned char ChangeTime[8]; /* +0x0020 43 13 00 00 */ unsigned char EndOfFile[8]; /* +0x0028 43 13 00 00 */ unsigned char AllocationSize[8]; /* +0x0030 43 13 00 00 */ unsigned long FileAttributes; /* +0x0038 */ unsigned long FileNameLength; /* +0x003c */ unsigned char FileName[8]; /* +0x0040 0a 14 00 00 */ }; struct _CERT_EXTENSION { char *pszObjId; /* +0x0000 */ unsigned char fCritical[8]; /* +0x0008 74 00 00 00 */ unsigned char Value[16]; /* +0x0010 08 13 00 00 */ }; struct _PROCESS_MITIGATION_STACKCHECK_POLICY { unsigned long Flags; /* +0x0000 */ /* unsigned char Permanent[0]; +0x0000 94 13 00 00 */ unsigned char ReservedFlags[4]; /* +0x0000 95 13 00 00 */ }; struct tagSOUNDSENTRYW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned long iFSTextEffect; /* +0x0008 */ unsigned long iFSTextEffectMSec; /* +0x000c */ unsigned long iFSTextEffectColorBits; /* +0x0010 */ unsigned long iFSGrafEffect; /* +0x0014 */ unsigned long iFSGrafEffectMSec; /* +0x0018 */ unsigned long iFSGrafEffectColor; /* +0x001c */ unsigned long iWindowsEffect; /* +0x0020 */ unsigned long iWindowsEffectMSec; /* +0x0024 */ unsigned char lpszWindowsEffectDLL[8]; /* +0x0028 71 06 00 00 */ unsigned long iWindowsEffectOrdinal; /* +0x0030 */ }; struct _OLESTREAM { unsigned char lpstbl[8]; /* +0x0000 a3 3b 00 00 */ }; struct _NCRYPT_CIPHER_PADDING_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char *pbIV; /* +0x0008 */ unsigned long cbIV; /* +0x0010 */ unsigned char *pbOtherInfo; /* +0x0018 */ unsigned long cbOtherInfo; /* +0x0020 */ }; struct _CRL_ENTRY { unsigned char SerialNumber[16]; /* +0x0000 08 13 00 00 */ unsigned char RevocationDate[8]; /* +0x0010 37 13 00 00 */ unsigned long cExtension; /* +0x0018 */ unsigned char rgExtension[8]; /* +0x0020 3f 16 00 00 */ }; struct _FSCTL_OFFLOAD_READ_INPUT { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long TokenTimeToLive; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ unsigned long long FileOffset; /* +0x0010 */ unsigned long long CopyLength; /* +0x0018 */ }; struct _SYSTEM_BOOT_LOGO_INFORMATION { unsigned char Bitmap[1]; /* +0x0000 ff 12 00 00 */ }; struct _IMAGE_FUNCTION_ENTRY { unsigned long StartingAddress; /* +0x0000 */ unsigned long EndingAddress; /* +0x0004 */ unsigned long EndOfPrologue; /* +0x0008 */ }; struct tagMEASUREITEMSTRUCT { unsigned char CtlType[4]; /* +0x0000 75 00 00 00 */ unsigned char CtlID[4]; /* +0x0004 75 00 00 00 */ unsigned char itemID[4]; /* +0x0008 75 00 00 00 */ unsigned char itemWidth[4]; /* +0x000c 75 00 00 00 */ unsigned char itemHeight[8]; /* +0x0010 75 00 00 00 */ unsigned long long itemData; /* +0x0018 */ }; struct _RPC_PROTSEQ_ENDPOINT { unsigned char *RpcProtocolSequence; /* +0x0000 */ unsigned char *Endpoint; /* +0x0008 */ }; struct _PROCESS_BASIC_INFORMATION { long ExitStatus; /* +0x0000 */ unsigned char PebBaseAddress[8]; /* +0x0008 a3 2e 00 00 */ unsigned long long AffinityMask; /* +0x0010 */ long BasePriority; /* +0x0018 */ unsigned long long UniqueProcessId; /* +0x0020 */ unsigned long long InheritedFromUniqueProcessId; /* +0x0028 */ }; struct _CRYPT_TIMESTAMP_PARA { unsigned char pszTSAPolicyId[8]; /* +0x0000 79 14 00 00 */ unsigned char fRequestCerts[8]; /* +0x0008 74 00 00 00 */ unsigned char Nonce[16]; /* +0x0010 08 13 00 00 */ unsigned long cExtension; /* +0x0020 */ unsigned char rgExtension[8]; /* +0x0028 3f 16 00 00 */ }; struct tagENUMLOGFONTW { unsigned char elfLogFont[92]; /* +0x0000 bd 16 00 00 */ unsigned char elfFullName[128]; /* +0x005c cb 1e 00 00 */ unsigned char elfStyle[64]; /* +0x00dc bf 15 00 00 */ }; struct _CRYPT_ALGORITHM_IDENTIFIER { char *pszObjId; /* +0x0000 */ unsigned char Parameters[16]; /* +0x0008 08 13 00 00 */ }; struct _LDR_DLL_NOTIFICATION_DATA { /* unsigned char Loaded[0]; +0x0000 b9 2a 00 00 */ unsigned char Unloaded[40]; /* +0x0000 fd 3b 00 00 */ }; struct _CMSG_KEY_AGREE_RECIPIENT_ENCODE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char KeyEncryptionAlgorithm[24]; /* +0x0008 68 14 00 00 */ void *pvKeyEncryptionAuxInfo; /* +0x0020 */ unsigned char KeyWrapAlgorithm[24]; /* +0x0028 68 14 00 00 */ void *pvKeyWrapAuxInfo; /* +0x0040 */ unsigned long long hCryptProv; /* +0x0048 */ unsigned long dwKeySpec; /* +0x0050 */ unsigned long dwKeyChoice; /* +0x0054 */ /* unsigned char pEphemeralAlgorithm[0]; +0x0058 7f 1d 00 00 */ unsigned char pSenderId[8]; /* +0x0058 15 3c 00 00 */ unsigned char UserKeyingMaterial[16]; /* +0x0060 08 13 00 00 */ unsigned long cRecipientEncryptedKeys; /* +0x0070 */ unsigned char rgpRecipientEncryptedKeys[8]; /* +0x0078 18 3c 00 00 */ }; struct _SYSTEM_NUMA_PROXIMITY_MAP { unsigned long NodeProximityId; /* +0x0000 */ unsigned short NodeNumber; /* +0x0004 */ }; struct _JOURNAL_SET_KEY_LAST_WRITE_TIME_INFORMATION { unsigned char Action[8]; /* +0x0000 4f 15 00 00 */ unsigned long long RecordNumber; /* +0x0008 */ unsigned char TimeStamp[8]; /* +0x0010 43 13 00 00 */ unsigned char KeyPathName[16]; /* +0x0018 e3 12 00 00 */ unsigned char OldLastWriteTime[8]; /* +0x0028 43 13 00 00 */ unsigned char NewLastWriteTime[8]; /* +0x0030 43 13 00 00 */ }; struct _CREATE_THREAD_DEBUG_INFO { void *hThread; /* +0x0000 */ void *lpThreadLocalBase; /* +0x0008 */ unsigned char lpStartAddress[8]; /* +0x0010 e0 15 00 00 */ }; struct tagMSGBOXPARAMSA { unsigned char cbSize[8]; /* +0x0000 75 00 00 00 */ unsigned char hwndOwner[8]; /* +0x0008 f7 12 00 00 */ unsigned char hInstance[8]; /* +0x0010 d1 14 00 00 */ unsigned char lpszText[8]; /* +0x0018 79 14 00 00 */ unsigned char lpszCaption[8]; /* +0x0020 79 14 00 00 */ unsigned long dwStyle; /* +0x0028 */ unsigned char lpszIcon[8]; /* +0x0030 79 14 00 00 */ unsigned long long dwContextHelpId; /* +0x0038 */ unsigned char lpfnMsgBoxCallback[8]; /* +0x0040 83 2b 00 00 */ unsigned long dwLanguageId; /* +0x0048 */ }; struct _CM_PCCARD_DEVICE_DATA { unsigned char Flags; /* +0x0000 */ unsigned char ErrorCode; /* +0x0001 */ unsigned short Reserved; /* +0x0002 */ unsigned long BusData; /* +0x0004 */ unsigned long DeviceId; /* +0x0008 */ unsigned long LegacyBaseAddress; /* +0x000c */ unsigned char IRQMap[16]; /* +0x0010 33 1c 00 00 */ }; struct _RTL_BALANCED_LINKS { unsigned char Parent[8]; /* +0x0000 99 21 00 00 */ unsigned char LeftChild[8]; /* +0x0008 99 21 00 00 */ unsigned char RightChild[8]; /* +0x0010 99 21 00 00 */ char Balance; /* +0x0018 */ unsigned char Reserved[7]; /* +0x0019 93 13 00 00 */ }; struct DISPLAYCONFIG_VIDEO_SIGNAL_INFO { unsigned long long pixelRate; /* +0x0000 */ unsigned char hSyncFreq[8]; /* +0x0008 3b 3c 00 00 */ unsigned char vSyncFreq[8]; /* +0x0010 3b 3c 00 00 */ unsigned char activeSize[8]; /* +0x0018 3c 3c 00 00 */ unsigned char totalSize[8]; /* +0x0020 3c 3c 00 00 */ unsigned char videoStandard[4]; /* +0x0028 75 00 00 00 */ unsigned char scanLineOrdering[4]; /* +0x002c 3d 3c 00 00 */ }; struct _COUNTED_REASON_CONTEXT { unsigned long Version; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned char ResourceFileName[16]; /* +0x0008 e3 12 00 00 */ unsigned short ResourceReasonId; /* +0x0018 */ unsigned long StringCount; /* +0x001c */ /* unsigned char ReasonStrings[-24]; +0x0020 b6 17 00 00 */ unsigned char SimpleString[32]; /* +0x0008 e3 12 00 00 */ }; struct _INVERTED_FUNCTION_TABLE_ENTRY { /* unsigned char FunctionTable[0]; +0x0000 1c 1d 00 00 */ unsigned char DynamicTable[8]; /* +0x0000 b0 13 00 00 */ void *ImageBase; /* +0x0008 */ unsigned long SizeOfImage; /* +0x0010 */ unsigned long SizeOfTable; /* +0x0014 */ }; struct _IMAGE_SECTION_HEADER { unsigned char Name[40]; /* +0x0000 91 19 00 00 */ }; struct _IMAGE_SECTION_HEADER:: { unsigned long PhysicalAddress; /* +0x0000 */ unsigned long VirtualSize; /* +0x0000 */ }; struct _PROCESS_REVOKE_FILE_HANDLES_INFORMATION { unsigned char TargetDevicePath[16]; /* +0x0000 e3 12 00 00 */ }; struct _SHSTOCKICONINFO { unsigned long cbSize; /* +0x0000 */ unsigned char hIcon[8]; /* +0x0008 43 21 00 00 */ unsigned char iSysImageIndex[4]; /* +0x0010 74 00 00 00 */ unsigned char iIcon[4]; /* +0x0014 74 00 00 00 */ unsigned char szPath[520]; /* +0x0018 00 16 00 00 */ }; struct tagBITMAP { long bmType; /* +0x0000 */ long bmWidth; /* +0x0004 */ long bmHeight; /* +0x0008 */ long bmWidthBytes; /* +0x000c */ unsigned short bmPlanes; /* +0x0010 */ unsigned short bmBitsPixel; /* +0x0012 */ void *bmBits; /* +0x0018 */ }; struct _CONSOLE_FONT_INFO { unsigned long nFont; /* +0x0000 */ unsigned char dwFontSize[4]; /* +0x0004 1b 18 00 00 */ }; struct tagSTGOPTIONS { unsigned short usVersion; /* +0x0000 */ unsigned short reserved; /* +0x0002 */ unsigned long ulSectorSize; /* +0x0004 */ unsigned char pwcsTemplateFile[8]; /* +0x0008 cb 13 00 00 */ }; struct _CRYPT_X942_OTHER_INFO { char *pszContentEncryptionObjId; /* +0x0000 */ unsigned char rgbCounter[4]; /* +0x0008 cb 17 00 00 */ unsigned char rgbKeyLength[4]; /* +0x000c cb 17 00 00 */ unsigned char PubInfo[16]; /* +0x0010 08 13 00 00 */ }; struct _SD_QUERY_STATS_OUTPUT { unsigned long long SdsStreamSize; /* +0x0000 */ unsigned long long SdsAllocationSize; /* +0x0008 */ unsigned long long SiiStreamSize; /* +0x0010 */ unsigned long long SiiAllocationSize; /* +0x0018 */ unsigned long long SdhStreamSize; /* +0x0020 */ unsigned long long SdhAllocationSize; /* +0x0028 */ unsigned long long NumSDTotal; /* +0x0030 */ unsigned long long NumSDUnused; /* +0x0038 */ }; struct _DISCDLGSTRUCTW { unsigned long cbStructure; /* +0x0000 */ unsigned char hwndOwner[8]; /* +0x0008 f7 12 00 00 */ unsigned char lpLocalName[8]; /* +0x0010 71 06 00 00 */ unsigned char lpRemoteName[8]; /* +0x0018 71 06 00 00 */ unsigned long dwFlags; /* +0x0020 */ }; struct _OPEN_PRINTER_PROPS_INFOA { unsigned long dwSize; /* +0x0000 */ char *pszSheetName; /* +0x0008 */ unsigned char uSheetIndex[4]; /* +0x0010 75 00 00 00 */ unsigned long dwFlags; /* +0x0014 */ unsigned char bModal[8]; /* +0x0018 74 00 00 00 */ }; struct tagACTCTXW { unsigned long cbSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char lpSource[8]; /* +0x0008 cb 13 00 00 */ unsigned short wProcessorArchitecture; /* +0x0010 */ unsigned short wLangId; /* +0x0012 */ unsigned char lpAssemblyDirectory[8]; /* +0x0018 cb 13 00 00 */ unsigned char lpResourceName[8]; /* +0x0020 cb 13 00 00 */ unsigned char lpApplicationName[8]; /* +0x0028 cb 13 00 00 */ unsigned char hModule[8]; /* +0x0030 d1 14 00 00 */ }; struct tagLOCALESIGNATURE { unsigned char lsUsb[16]; /* +0x0000 66 1a 00 00 */ unsigned char lsCsbDefault[8]; /* +0x0010 14 16 00 00 */ unsigned char lsCsbSupported[8]; /* +0x0018 14 16 00 00 */ }; struct tagVersionedStream { unsigned char guidVersion[16]; /* +0x0000 f3 14 00 00 */ unsigned char pStream[8]; /* +0x0010 20 27 00 00 */ }; struct _JOBOBJECT_BASIC_PROCESS_ID_LIST { unsigned long NumberOfAssignedProcesses; /* +0x0000 */ unsigned long NumberOfProcessIdsInList; /* +0x0004 */ unsigned char ProcessIdList[8]; /* +0x0008 dd 2f 00 00 */ }; struct _REMSECURITY_ATTRIBUTES { unsigned long nLength; /* +0x0000 */ unsigned long lpSecurityDescriptor; /* +0x0004 */ unsigned char bInheritHandle[4]; /* +0x0008 74 00 00 00 */ }; struct _CLAIM_SECURITY_ATTRIBUTE_FQBN_VALUE { unsigned long long Version; /* +0x0000 */ unsigned char Name[8]; /* +0x0008 71 06 00 00 */ }; struct _RTL_UNLOAD_EVENT_TRACE { void *BaseAddress; /* +0x0000 */ unsigned long long SizeOfImage; /* +0x0008 */ unsigned long Sequence; /* +0x0010 */ unsigned long TimeDateStamp; /* +0x0014 */ unsigned long CheckSum; /* +0x0018 */ unsigned char ImageName[64]; /* +0x001c bf 15 00 00 */ unsigned char Version[12]; /* +0x005c 14 16 00 00 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR { unsigned char Type; /* +0x0000 */ unsigned char ShareDisposition; /* +0x0001 */ unsigned short Flags; /* +0x0002 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned char Class; /* +0x0000 */ unsigned char Type; /* +0x0001 */ unsigned char Reserved1; /* +0x0002 */ unsigned char Reserved2; /* +0x0003 */ unsigned long IdLowPart; /* +0x0004 */ unsigned long IdHighPart; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned char Start[8]; /* +0x0000 43 13 00 00 */ unsigned long Length64; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned char Start[8]; /* +0x0000 43 13 00 00 */ unsigned long Length48; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned char Start[8]; /* +0x0000 43 13 00 00 */ unsigned long Length40; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned long DataSize; /* +0x0000 */ unsigned long Reserved1; /* +0x0004 */ unsigned long Reserved2; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned long Start; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned long Reserved; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned char Data[12]; /* +0x0000 28 13 00 00 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned long Channel; /* +0x0000 */ unsigned long RequestLine; /* +0x0004 */ unsigned long Reserved1; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned long Channel; /* +0x0000 */ unsigned long Port; /* +0x0004 */ unsigned long Reserved1; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned char Start[8]; /* +0x0000 43 13 00 00 */ unsigned long Length; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { /* unsigned char Raw[0]; +0x0000 ed 3c 00 00 */ unsigned char Translated[16]; /* +0x0000 ee 3c 00 00 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::::::: { unsigned long Level; /* +0x0000 */ unsigned long Vector; /* +0x0004 */ unsigned long long Affinity; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::::::: { unsigned short Reserved; /* +0x0000 */ unsigned short MessageCount; /* +0x0002 */ unsigned long Vector; /* +0x0004 */ unsigned long long Affinity; /* +0x0008 */ }; struct tagNEWTEXTMETRICA { long tmHeight; /* +0x0000 */ long tmAscent; /* +0x0004 */ long tmDescent; /* +0x0008 */ long tmInternalLeading; /* +0x000c */ long tmExternalLeading; /* +0x0010 */ long tmAveCharWidth; /* +0x0014 */ long tmMaxCharWidth; /* +0x0018 */ long tmWeight; /* +0x001c */ long tmOverhang; /* +0x0020 */ long tmDigitizedAspectX; /* +0x0024 */ long tmDigitizedAspectY; /* +0x0028 */ unsigned char tmFirstChar; /* +0x002c */ unsigned char tmLastChar; /* +0x002d */ unsigned char tmDefaultChar; /* +0x002e */ unsigned char tmBreakChar; /* +0x002f */ unsigned char tmItalic; /* +0x0030 */ unsigned char tmUnderlined; /* +0x0031 */ unsigned char tmStruckOut; /* +0x0032 */ unsigned char tmPitchAndFamily; /* +0x0033 */ unsigned char tmCharSet; /* +0x0034 */ unsigned long ntmFlags; /* +0x0038 */ unsigned char ntmSizeEM[4]; /* +0x003c 75 00 00 00 */ unsigned char ntmCellHeight[4]; /* +0x0040 75 00 00 00 */ unsigned char ntmAvgWidth[4]; /* +0x0044 75 00 00 00 */ }; struct _IMAGE_ARM_RUNTIME_FUNCTION_ENTRY { unsigned long BeginAddress; /* +0x0000 */ unsigned long UnwindData; /* +0x0004 */ /* unsigned char Flag[0]; +0x0004 0c 3d 00 00 */ /* unsigned char FunctionLength[0]; +0x0004 0d 3d 00 00 */ /* unsigned char Ret[0]; +0x0004 99 31 00 00 */ /* unsigned char H[0]; +0x0004 9a 31 00 00 */ /* unsigned char Reg[0]; +0x0004 0e 3d 00 00 */ /* unsigned char R[0]; +0x0004 11 24 00 00 */ /* unsigned char L[0]; +0x0004 8e 13 00 00 */ /* unsigned char C[0]; +0x0004 8f 13 00 00 */ unsigned char StackAdjust[4]; /* +0x0004 90 13 00 00 */ }; struct _ATOM_TABLE_INFORMATION { unsigned long NumberOfAtoms; /* +0x0000 */ unsigned char Atoms[4]; /* +0x0004 d4 15 00 00 */ }; struct _BOOT_ENTROPY_NT_RESULT { unsigned long maxEntropySources; /* +0x0000 */ unsigned char EntropySourceResult[728]; /* +0x0008 33 3d 00 00 */ unsigned char SeedBytesForCng[48]; /* +0x02e0 34 1c 00 00 */ }; struct _EISA_MEMORY_CONFIGURATION { unsigned char ConfigurationByte[1]; /* +0x0000 36 3d 00 00 */ unsigned char DataSize; /* +0x0001 */ unsigned short AddressLowWord; /* +0x0002 */ unsigned char AddressHighByte; /* +0x0004 */ unsigned short MemorySize; /* +0x0005 */ }; struct _PROCESS_BASIC_INFORMATION64 { long ExitStatus; /* +0x0000 */ unsigned char Pad1[4]; /* +0x0004 75 00 00 00 */ unsigned long long PebBaseAddress; /* +0x0008 */ unsigned long long AffinityMask; /* +0x0010 */ long BasePriority; /* +0x0018 */ unsigned char Pad2[4]; /* +0x001c 75 00 00 00 */ unsigned long long UniqueProcessId; /* +0x0020 */ unsigned long long InheritedFromUniqueProcessId; /* +0x0028 */ }; struct _FILE_REMOTE_PROTOCOL_INFORMATION { unsigned short StructureVersion; /* +0x0000 */ unsigned short StructureSize; /* +0x0002 */ unsigned long Protocol; /* +0x0004 */ unsigned short ProtocolMajorVersion; /* +0x0008 */ unsigned short ProtocolMinorVersion; /* +0x000a */ unsigned short ProtocolRevision; /* +0x000c */ unsigned short Reserved; /* +0x000e */ unsigned long Flags; /* +0x0010 */ }; struct tagSIZE { long cx; /* +0x0000 */ long cy; /* +0x0004 */ }; struct _OCSP_SIGNED_REQUEST_INFO { unsigned char ToBeSigned[16]; /* +0x0000 08 13 00 00 */ unsigned char pOptionalSignatureInfo[8]; /* +0x0010 48 3d 00 00 */ }; struct _FILE_SET_DEFECT_MGMT_BUFFER { unsigned char Disable; /* +0x0000 */ }; struct _TIMER_SET_COALESCABLE_TIMER_INFO { unsigned char DueTime[8]; /* +0x0000 43 13 00 00 */ unsigned char TimerApcRoutine[8]; /* +0x0008 e8 25 00 00 */ void *TimerContext; /* +0x0010 */ unsigned char WakeContext[8]; /* +0x0018 50 3d 00 00 */ unsigned long Period; /* +0x0020 */ unsigned long TolerableDelay; /* +0x0024 */ unsigned char *PreviousState; /* +0x0028 */ }; struct _FILE_SYSTEM_RECOGNITION_INFORMATION { unsigned char FileSystem[9]; /* +0x0000 6d 3d 00 00 */ }; struct _UNICODE_PREFIX_TABLE { short NodeTypeCode; /* +0x0000 */ short NameLength; /* +0x0002 */ unsigned char NextPrefixTree[8]; /* +0x0008 b4 17 00 00 */ unsigned char LastNextEntry[8]; /* +0x0010 b4 17 00 00 */ }; struct tagTOUCH_HIT_TESTING_INPUT { unsigned char pointerId[4]; /* +0x0000 75 00 00 00 */ unsigned char point[8]; /* +0x0004 a1 14 00 00 */ unsigned char boundingBox[16]; /* +0x000c 7a 14 00 00 */ unsigned char nonOccludedBoundingBox[16]; /* +0x001c 7a 14 00 00 */ unsigned char orientation[4]; /* +0x002c 75 00 00 00 */ }; struct _CMSG_KEY_TRANS_RECIPIENT_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char RecipientId[40]; /* +0x0008 36 13 00 00 */ unsigned char KeyEncryptionAlgorithm[24]; /* +0x0030 68 14 00 00 */ unsigned char EncryptedKey[16]; /* +0x0048 08 13 00 00 */ }; struct _PROCESS_SESSION_INFORMATION { unsigned long SessionId; /* +0x0000 */ }; struct _CRYPT_PRIVATE_KEY_INFO { unsigned long Version; /* +0x0000 */ unsigned char Algorithm[24]; /* +0x0008 68 14 00 00 */ unsigned char PrivateKey[16]; /* +0x0020 08 13 00 00 */ unsigned char pAttributes[8]; /* +0x0030 2f 2d 00 00 */ }; struct _SYSTEM_CONTEXT_SWITCH_INFORMATION { unsigned long ContextSwitches; /* +0x0000 */ unsigned long FindAny; /* +0x0004 */ unsigned long FindLast; /* +0x0008 */ unsigned long FindIdeal; /* +0x000c */ unsigned long IdleAny; /* +0x0010 */ unsigned long IdleCurrent; /* +0x0014 */ unsigned long IdleLast; /* +0x0018 */ unsigned long IdleIdeal; /* +0x001c */ unsigned long PreemptAny; /* +0x0020 */ unsigned long PreemptCurrent; /* +0x0024 */ unsigned long PreemptLast; /* +0x0028 */ unsigned long SwitchToIdle; /* +0x002c */ }; struct _CONTEXT_EX { unsigned char All[8]; /* +0x0000 35 37 00 00 */ unsigned char Legacy[8]; /* +0x0008 35 37 00 00 */ unsigned char XState[8]; /* +0x0010 35 37 00 00 */ }; struct _SYSTEM_DEVICE_INFORMATION { unsigned long NumberOfDisks; /* +0x0000 */ unsigned long NumberOfFloppies; /* +0x0004 */ unsigned long NumberOfCdRoms; /* +0x0008 */ unsigned long NumberOfTapes; /* +0x000c */ unsigned long NumberOfSerialPorts; /* +0x0010 */ unsigned long NumberOfParallelPorts; /* +0x0014 */ }; struct _FLS_DATA { unsigned char Entry[16]; /* +0x0000 73 1f 00 00 */ unsigned char Slots[1024]; /* +0x0010 c1 3d 00 00 */ }; struct _CRYPT_PROVIDER_REFS { unsigned long cProviders; /* +0x0000 */ unsigned char rgpProviders[8]; /* +0x0008 c4 3d 00 00 */ }; struct _tagPROTOCOLFILTERDATA { unsigned long cbSize; /* +0x0000 */ unsigned char pProtocolSink[8]; /* +0x0008 b5 25 00 00 */ unsigned char pProtocol[8]; /* +0x0010 d6 1b 00 00 */ unsigned char pUnk[8]; /* +0x0018 93 17 00 00 */ unsigned long dwFilterFlags; /* +0x0020 */ }; struct tagBITMAPFILEHEADER { unsigned short bfType; /* +0x0000 */ unsigned long bfSize; /* +0x0002 */ unsigned short bfReserved1; /* +0x0006 */ unsigned short bfReserved2; /* +0x0008 */ unsigned long bfOffBits; /* +0x000a */ }; struct _SERVICE_DESCRIPTIONW { unsigned char lpDescription[8]; /* +0x0000 71 06 00 00 */ }; struct _BCRYPT_DH_PARAMETER_HEADER { unsigned long cbLength; /* +0x0000 */ unsigned long dwMagic; /* +0x0004 */ unsigned long cbKeyLength; /* +0x0008 */ }; struct _WGLSWAP { unsigned char hdc[8]; /* +0x0000 24 1f 00 00 */ unsigned char uiFlags[8]; /* +0x0008 75 00 00 00 */ }; struct _PO_WAKE_SOURCE_HEADER { unsigned char Type[4]; /* +0x0000 00 3e 00 00 */ unsigned long Size; /* +0x0004 */ }; struct _FIXED { unsigned short fract; /* +0x0000 */ short value; /* +0x0002 */ }; struct _CMC_DATA_INFO { unsigned long cTaggedAttribute; /* +0x0000 */ unsigned char rgTaggedAttribute[8]; /* +0x0008 33 1d 00 00 */ unsigned long cTaggedRequest; /* +0x0010 */ unsigned char rgTaggedRequest[8]; /* +0x0018 77 26 00 00 */ unsigned long cTaggedContentInfo; /* +0x0020 */ unsigned char rgTaggedContentInfo[8]; /* +0x0028 49 3e 00 00 */ unsigned long cTaggedOtherMsg; /* +0x0030 */ unsigned char rgTaggedOtherMsg[8]; /* +0x0038 4b 3e 00 00 */ }; struct _ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_BEGINNING { unsigned char Data[8]; /* +0x0000 4f 19 00 00 */ unsigned long AssemblyRosterIndex; /* +0x0008 */ void *ResolutionContext; /* +0x0010 */ unsigned char Root[16]; /* +0x0018 e3 12 00 00 */ unsigned char KnownRoot; /* +0x0028 */ unsigned long long RootCount; /* +0x0030 */ unsigned char CancelResolution; /* +0x0038 */ }; struct _MEMORY_COMBINE_INFORMATION { void *Handle; /* +0x0000 */ unsigned long long PagesCombined; /* +0x0008 */ }; struct _PSINJECTDATA { unsigned long DataBytes; /* +0x0000 */ unsigned short InjectionPoint; /* +0x0004 */ unsigned short PageNumber; /* +0x0006 */ }; struct _RGNDATA { unsigned char rdh[32]; /* +0x0000 76 3e 00 00 */ unsigned char Buffer[4]; /* +0x0020 1e 24 00 00 */ }; struct _tagHIT_LOGGING_INFO { unsigned long dwStructSize; /* +0x0000 */ char *lpszLoggedUrlName; /* +0x0008 */ unsigned char StartTime[16]; /* +0x0010 c0 15 00 00 */ unsigned char EndTime[16]; /* +0x0020 c0 15 00 00 */ char *lpszExtendedInfo; /* +0x0030 */ }; struct _RTL_HEAP_ENTRY:::: { unsigned long long CommittedSize; /* +0x0000 */ void *FirstBlock; /* +0x0008 */ }; struct _RTL_HEAP_ENTRY:::: { unsigned long long Settable; /* +0x0000 */ unsigned long Tag; /* +0x0008 */ }; struct DISPLAYCONFIG_DEVICE_INFO_HEADER { unsigned char type[4]; /* +0x0000 a6 3e 00 00 */ unsigned char size[4]; /* +0x0004 75 00 00 00 */ unsigned char adapterId[8]; /* +0x0008 38 15 00 00 */ unsigned char id[4]; /* +0x0010 75 00 00 00 */ }; struct tagEMREXTFLOODFILL { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char ptlStart[8]; /* +0x0008 a6 13 00 00 */ unsigned long crColor; /* +0x0010 */ unsigned long iMode; /* +0x0014 */ }; struct _ACTIVATION_CONTEXT_STACK { unsigned char ActiveFrame[8]; /* +0x0000 ba 3e 00 00 */ unsigned char FrameListCache[16]; /* +0x0008 73 1f 00 00 */ unsigned long Flags; /* +0x0018 */ unsigned long NextCookieSequenceNumber; /* +0x001c */ unsigned long StackId; /* +0x0020 */ }; struct _EVENTLOG_FULL_INFORMATION { unsigned long dwFull; /* +0x0000 */ }; struct _CMSG_SIGNED_AND_ENVELOPED_ENCODE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char SignedInfo[48]; /* +0x0008 bf 3e 00 00 */ unsigned char EnvelopedInfo[64]; /* +0x0038 02 13 00 00 */ }; struct _SYSTEM_THREAD_CID_PRIORITY_INFORMATION { unsigned char ClientId[16]; /* +0x0000 44 13 00 00 */ long Priority; /* +0x0010 */ }; struct _JOURNAL_CREATE_DELETE_KEY_INFORMATION { unsigned char Action[8]; /* +0x0000 4f 15 00 00 */ unsigned long long RecordNumber; /* +0x0008 */ unsigned char TimeStamp[8]; /* +0x0010 43 13 00 00 */ unsigned char KeyPathName[16]; /* +0x0018 e3 12 00 00 */ unsigned long SecurityDescriptorLength; /* +0x0028 */ void *SecurityDescriptor; /* +0x0030 */ unsigned short ClassLength; /* +0x0038 */ void *ClassData; /* +0x0040 */ unsigned char SymbolicLink; /* +0x0048 */ }; struct _XSAVE_AREA { unsigned char LegacyState[512]; /* +0x0000 84 19 00 00 */ unsigned char Header[64]; /* +0x0200 dd 3d 00 00 */ }; struct tagRAWINPUTDEVICE { unsigned short usUsagePage; /* +0x0000 */ unsigned short usUsage; /* +0x0002 */ unsigned long dwFlags; /* +0x0004 */ unsigned char hwndTarget[8]; /* +0x0008 f7 12 00 00 */ }; struct _CRYPT_VERIFY_CERT_SIGN_STRONG_PROPERTIES_INFO { unsigned char CertSignHashCNGAlgPropData[16]; /* +0x0000 08 13 00 00 */ unsigned char CertIssuerPubKeyBitLengthPropData[16]; /* +0x0010 08 13 00 00 */ }; struct _FILE_IOSTATUSBLOCK_RANGE_INFORMATION { unsigned char *IoStatusBlockRange; /* +0x0000 */ unsigned long Length; /* +0x0008 */ }; struct _KEY_WRITE_TIME_INFORMATION { unsigned char LastWriteTime[8]; /* +0x0000 43 13 00 00 */ }; struct _FILE_OBJECTID_INFORMATION { long long FileReference; /* +0x0000 */ unsigned char ObjectId[16]; /* +0x0008 33 1c 00 00 */ unsigned char BirthVolumeId[16]; /* +0x0018 33 1c 00 00 */ unsigned char BirthObjectId[16]; /* +0x0028 33 1c 00 00 */ /* unsigned char DomainId[-32]; +0x0038 33 1c 00 00 */ unsigned char ExtendedInfo[48]; /* +0x0018 34 1c 00 00 */ }; struct _RTL_VERIFIER_RUNTIME_FLAGS_INFORMATION { unsigned long Size; /* +0x0000 */ unsigned long ProviderFlags; /* +0x0004 */ unsigned long DebugFlags; /* +0x0008 */ unsigned long Spare; /* +0x000c */ }; struct _AUTHENTICODE_EXTRA_CERT_CHAIN_POLICY_STATUS { unsigned long cbSize; /* +0x0000 */ unsigned char fCommercial[4]; /* +0x0004 74 00 00 00 */ }; struct _RTL_USER_PROCESS_INFORMATION64 { unsigned long Length; /* +0x0000 */ long long Process; /* +0x0008 */ long long Thread; /* +0x0010 */ unsigned char ClientId[16]; /* +0x0018 5e 2e 00 00 */ unsigned char ImageInformation[64]; /* +0x0028 38 2c 00 00 */ }; struct _PROCESS_HANDLE_TRACING_QUERY { void *Handle; /* +0x0000 */ unsigned long TotalTraces; /* +0x0008 */ unsigned char HandleTrace[160]; /* +0x0010 2d 3f 00 00 */ }; struct _CPS_URLS { unsigned char pszURL[8]; /* +0x0000 71 06 00 00 */ unsigned char pAlgorithm[8]; /* +0x0008 7f 1d 00 00 */ unsigned char pDigest[8]; /* +0x0010 4d 13 00 00 */ }; struct _CRYPT_SEQUENCE_OF_ANY { unsigned long cValue; /* +0x0000 */ unsigned char rgValue[8]; /* +0x0008 4d 13 00 00 */ }; struct _CRYPT_TIMESTAMP_REQUEST { unsigned long dwVersion; /* +0x0000 */ unsigned char HashAlgorithm[24]; /* +0x0008 68 14 00 00 */ unsigned char HashedMessage[16]; /* +0x0020 08 13 00 00 */ char *pszTSAPolicyId; /* +0x0030 */ unsigned char Nonce[16]; /* +0x0038 08 13 00 00 */ unsigned char fCertReq[4]; /* +0x0048 74 00 00 00 */ unsigned long cExtension; /* +0x004c */ unsigned char rgExtension[8]; /* +0x0050 3f 16 00 00 */ }; struct _SECURITY_DESCRIPTOR { unsigned char Revision; /* +0x0000 */ unsigned char Sbz1; /* +0x0001 */ unsigned short Control; /* +0x0002 */ void *Owner; /* +0x0008 */ void *Group; /* +0x0010 */ unsigned char Sacl[8]; /* +0x0018 5a 1a 00 00 */ unsigned char Dacl[8]; /* +0x0020 5a 1a 00 00 */ }; struct _SYSTEM_PROCESSOR_PROFILE_CONTROL_AREA { unsigned char ProcessorProfileControlArea[8]; /* +0x0000 3c 3f 00 00 */ unsigned char Allocate; /* +0x0008 */ }; struct _WIN32_FIND_STREAM_DATA { unsigned char StreamSize[8]; /* +0x0000 43 13 00 00 */ unsigned char cStreamName[592]; /* +0x0008 3f 3f 00 00 */ }; struct tagPARAMDATA { unsigned char szName[8]; /* +0x0000 71 06 00 00 */ unsigned short vt; /* +0x0008 */ }; struct _JOBOBJECT_WAKE_INFORMATION { unsigned long long NotificationChannel; /* +0x0000 */ unsigned char WakeCounters[32]; /* +0x0008 62 3f 00 00 */ }; struct _KEY_OPEN_SUBKEYS_INFORMATION { unsigned long Count; /* +0x0000 */ unsigned char KeyArray[24]; /* +0x0008 66 3f 00 00 */ }; struct _CRYPT_ENCRYPTED_PRIVATE_KEY_INFO { unsigned char EncryptionAlgorithm[24]; /* +0x0000 68 14 00 00 */ unsigned char EncryptedPrivateKey[16]; /* +0x0018 08 13 00 00 */ }; struct _EV_EXTRA_CERT_CHAIN_POLICY_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwRootProgramQualifierFlags; /* +0x0004 */ }; struct _IMAGE_RESOURCE_DIR_STRING_U { unsigned short Length; /* +0x0000 */ unsigned char NameString[2]; /* +0x0002 0a 14 00 00 */ }; struct _POWER_PLATFORM_INFORMATION { unsigned char Role[4]; /* +0x0000 52 33 00 00 */ unsigned char AoAc; /* +0x0004 */ }; struct _USER_MARSHAL_CB { unsigned long Flags; /* +0x0000 */ unsigned char pStubMsg[8]; /* +0x0008 1a 1a 00 00 */ unsigned char pReserve[8]; /* +0x0010 4b 19 00 00 */ unsigned long Signature; /* +0x0018 */ unsigned char CBType[4]; /* +0x001c 7d 3f 00 00 */ unsigned char pFormat[8]; /* +0x0020 4b 19 00 00 */ unsigned char pTypeFormat[8]; /* +0x0028 4b 19 00 00 */ }; struct _CERT_REGISTRY_STORE_CLIENT_GPT_PARA { unsigned char hKeyBase[8]; /* +0x0000 81 19 00 00 */ unsigned char pwszRegPath[8]; /* +0x0008 71 06 00 00 */ }; struct _EXTENDED_ENCRYPTED_DATA_INFO { unsigned long ExtendedCode; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ }; struct _PROCESS_MITIGATION_STRICT_HANDLE_CHECK_POLICY { unsigned long Flags; /* +0x0000 */ /* unsigned char RaiseExceptionOnInvalidHandleReference[0]; +0x0000 94 13 00 00 */ /* unsigned char HandleExceptionsPermanentlyEnabled[0]; +0x0000 90 18 00 00 */ unsigned char ReservedFlags[4]; /* +0x0000 c5 19 00 00 */ }; struct tagTTPOLYCURVE { unsigned short wType; /* +0x0000 */ unsigned short cpfx; /* +0x0002 */ unsigned char apfx[8]; /* +0x0004 9c 3f 00 00 */ }; struct _CRYPT_PKCS12_PBE_PARAMS { unsigned char iIterations[4]; /* +0x0000 74 00 00 00 */ unsigned long cbSalt; /* +0x0004 */ }; struct _MEMORY_WORKING_SET_EX_INFORMATION { void *VirtualAddress; /* +0x0000 */ }; struct _MEMORY_WORKING_SET_EX_INFORMATION:: { /* unsigned char VirtualAttributes[0]; +0x0000 a9 3f 00 00 */ unsigned long long Long; /* +0x0000 */ }; struct _TP_POOL_STACK_INFORMATION { unsigned long long StackReserve; /* +0x0000 */ unsigned long long StackCommit; /* +0x0008 */ }; struct __NCRYPT_UI_POLICY { unsigned long dwVersion; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char pszCreationTitle[8]; /* +0x0008 cb 13 00 00 */ unsigned char pszFriendlyName[8]; /* +0x0010 cb 13 00 00 */ unsigned char pszDescription[8]; /* +0x0018 cb 13 00 00 */ }; struct _LDRP_CSLIST { unsigned char Tail[8]; /* +0x0000 7b 1a 00 00 */ }; struct _RPC_SECURITY_QOS_V4_W { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ unsigned long AdditionalSecurityInfoType; /* +0x0010 */ }; struct _NT_TIB32 { unsigned long ExceptionList; /* +0x0000 */ unsigned long StackBase; /* +0x0004 */ unsigned long StackLimit; /* +0x0008 */ unsigned long SubSystemTib; /* +0x000c */ unsigned long FiberData; /* +0x0010 */ unsigned long Version; /* +0x0010 */ unsigned long ArbitraryUserPointer; /* +0x0014 */ unsigned long Self; /* +0x0018 */ }; struct _CRYPTNET_URL_CACHE_RESPONSE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned short wResponseType; /* +0x0004 */ unsigned short wResponseFlags; /* +0x0006 */ unsigned char LastModifiedTime[8]; /* +0x0008 37 13 00 00 */ unsigned long dwMaxAge; /* +0x0010 */ unsigned char pwszETag[8]; /* +0x0018 cb 13 00 00 */ unsigned long dwProxyId; /* +0x0020 */ }; struct _RESOURCEMANAGER_COMPLETION_INFORMATION { void *IoCompletionPortHandle; /* +0x0000 */ unsigned long long CompletionKey; /* +0x0008 */ }; struct _TXFS_MODIFY_RM { unsigned long Flags; /* +0x0000 */ unsigned long LogContainerCountMax; /* +0x0004 */ unsigned long LogContainerCountMin; /* +0x0008 */ unsigned long LogContainerCount; /* +0x000c */ unsigned long LogGrowthIncrement; /* +0x0010 */ unsigned long LogAutoShrinkPercentage; /* +0x0014 */ unsigned long long Reserved; /* +0x0018 */ unsigned short LoggingMode; /* +0x0020 */ }; struct _ALPC_SECURITY_ATTR { unsigned long Flags; /* +0x0000 */ unsigned char QoS[8]; /* +0x0008 fa 3f 00 00 */ void *ContextHandle; /* +0x0010 */ }; struct _SYSTEM_VERIFIER_FAULTS_INFORMATION { unsigned long Probability; /* +0x0000 */ unsigned long MaxProbability; /* +0x0004 */ unsigned char PoolTags[16]; /* +0x0008 e3 12 00 00 */ unsigned char Applications[16]; /* +0x0018 e3 12 00 00 */ }; struct _ACTIVATION_CONTEXT_COMPATIBILITY_INFORMATION { unsigned long ElementCount; /* +0x0000 */ /* unsigned char Elements[0]; +0x0004 12 40 00 00 */ }; struct tagXFORM { unsigned char eM11[4]; /* +0x0000 40 00 00 00 */ unsigned char eM12[4]; /* +0x0004 40 00 00 00 */ unsigned char eM21[4]; /* +0x0008 40 00 00 00 */ unsigned char eM22[4]; /* +0x000c 40 00 00 00 */ unsigned char eDx[4]; /* +0x0010 40 00 00 00 */ unsigned char eDy[4]; /* +0x0014 40 00 00 00 */ }; struct _NCRYPT_KEY_BLOB_HEADER { unsigned long cbSize; /* +0x0000 */ unsigned long dwMagic; /* +0x0004 */ unsigned long cbAlgName; /* +0x0008 */ unsigned long cbKeyData; /* +0x000c */ unsigned long cbKeyName; /* +0x0010 */ }; struct _ALPC_DATA_VIEW_ATTR { unsigned long Flags; /* +0x0000 */ void *SectionHandle; /* +0x0008 */ void *ViewBase; /* +0x0010 */ unsigned long long ViewSize; /* +0x0018 */ }; struct _CM_PNP_BIOS_DEVICE_NODE { unsigned short Size; /* +0x0000 */ unsigned char Node; /* +0x0002 */ unsigned long ProductId; /* +0x0003 */ unsigned char DeviceType[3]; /* +0x0007 93 13 00 00 */ unsigned short DeviceAttributes; /* +0x000a */ }; struct _PLUGPLAY_CONTROL_TARGET_RELATION_DATA { void *UserFileHandle; /* +0x0000 */ long Status; /* +0x0008 */ unsigned long DeviceInstanceLen; /* +0x000c */ unsigned char DeviceInstance[8]; /* +0x0010 71 06 00 00 */ }; struct _FILE_POSITION_INFORMATION { unsigned char CurrentByteOffset[8]; /* +0x0000 43 13 00 00 */ }; struct DISPLAYCONFIG_SOURCE_DEVICE_NAME { unsigned char header[20]; /* +0x0000 0d 25 00 00 */ unsigned char viewGdiDeviceName[64]; /* +0x0014 bf 15 00 00 */ }; struct _PLUGPLAY_CONTROL_DEVICE_RELATIONS_DATA { unsigned char DeviceInstance[16]; /* +0x0000 e3 12 00 00 */ unsigned char Operation[4]; /* +0x0010 d8 34 00 00 */ unsigned long BufferLength; /* +0x0014 */ unsigned char Buffer[8]; /* +0x0018 71 06 00 00 */ }; struct _MANAGEDAPPLICATION { unsigned char pszPackageName[8]; /* +0x0000 71 06 00 00 */ unsigned char pszPublisher[8]; /* +0x0008 71 06 00 00 */ unsigned long dwVersionHi; /* +0x0010 */ unsigned long dwVersionLo; /* +0x0014 */ unsigned long dwRevision; /* +0x0018 */ unsigned char GpoId[20]; /* +0x001c f3 14 00 00 */ unsigned char pszPolicyName[8]; /* +0x0030 71 06 00 00 */ unsigned char ProductId[16]; /* +0x0038 f3 14 00 00 */ unsigned short Language; /* +0x0048 */ unsigned char pszOwner[8]; /* +0x0050 71 06 00 00 */ unsigned char pszCompany[8]; /* +0x0058 71 06 00 00 */ unsigned char pszComments[8]; /* +0x0060 71 06 00 00 */ unsigned char pszContact[8]; /* +0x0068 71 06 00 00 */ unsigned char pszSupportUrl[8]; /* +0x0070 71 06 00 00 */ unsigned long dwPathType; /* +0x0078 */ unsigned char bInstalled[4]; /* +0x007c 74 00 00 00 */ }; struct tagEMRCREATEPALETTE { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned long ihPal; /* +0x0008 */ unsigned char lgpl[8]; /* +0x000c 8d 35 00 00 */ }; struct tagEMRCREATEBRUSHINDIRECT { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned long ihBrush; /* +0x0008 */ unsigned char lb[12]; /* +0x000c 01 19 00 00 */ }; struct _JOBOBJECT_BASIC_UI_RESTRICTIONS { unsigned long UIRestrictionsClass; /* +0x0000 */ }; struct tagSTYLEBUFA { unsigned long dwStyle; /* +0x0000 */ unsigned char szDescription[32]; /* +0x0004 84 23 00 00 */ }; struct _CERT_SIMPLE_CHAIN { unsigned long cbSize; /* +0x0000 */ unsigned char TrustStatus[8]; /* +0x0004 c5 13 00 00 */ unsigned long cElement; /* +0x000c */ unsigned char rgpElement[8]; /* +0x0010 75 40 00 00 */ unsigned char pTrustListInfo[8]; /* +0x0018 b3 31 00 00 */ unsigned char fHasRevocationFreshnessTime[4]; /* +0x0020 74 00 00 00 */ unsigned long dwRevocationFreshnessTime; /* +0x0024 */ }; struct _FILE_NUMA_NODE_INFORMATION { unsigned short NodeNumber; /* +0x0000 */ }; struct pvalueA { char *pv_valuename; /* +0x0000 */ unsigned char pv_valuelen[8]; /* +0x0008 74 00 00 00 */ void *pv_value_context; /* +0x0010 */ unsigned long pv_type; /* +0x0018 */ }; struct _RTL_DYNAMIC_HASH_TABLE_ENUMERATOR { unsigned char HashEntry[24]; /* +0x0000 19 37 00 00 */ unsigned char ChainHead[8]; /* +0x0018 99 2d 00 00 */ unsigned long BucketIndex; /* +0x0020 */ }; struct tagCY { unsigned long Lo; /* +0x0000 */ long Hi; /* +0x0004 */ long long int64; /* +0x0000 */ }; struct _CSTRING { unsigned short Length; /* +0x0000 */ unsigned short MaximumLength; /* +0x0002 */ unsigned char Buffer[8]; /* +0x0008 79 14 00 00 */ }; struct _SECURITY_CAPABILITIES { void *AppContainerSid; /* +0x0000 */ unsigned char Capabilities[8]; /* +0x0008 e5 1b 00 00 */ unsigned long CapabilityCount; /* +0x0010 */ unsigned long Reserved; /* +0x0014 */ }; struct _PROCESS_DEVICEMAP_INFORMATION { /* unsigned char Set[0]; +0x0000 88 40 00 00 */ unsigned char Query[40]; /* +0x0000 89 40 00 00 */ }; struct _PROCESS_WINDOW_INFORMATION { unsigned long WindowFlags; /* +0x0000 */ unsigned short WindowTitleLength; /* +0x0004 */ unsigned char WindowTitle[2]; /* +0x0006 0a 14 00 00 */ }; struct _TRANSACTION_NOTIFICATION { void *TransactionKey; /* +0x0000 */ unsigned long TransactionNotification; /* +0x0008 */ unsigned char TmVirtualClock[8]; /* +0x0010 43 13 00 00 */ unsigned long ArgumentLength; /* +0x0018 */ }; struct tagBITMAPINFO { unsigned char bmiHeader[40]; /* +0x0000 86 31 00 00 */ unsigned char bmiColors[4]; /* +0x0028 94 40 00 00 */ }; struct _CERT_NAME_CONSTRAINTS_INFO { unsigned long cPermittedSubtree; /* +0x0000 */ unsigned char rgPermittedSubtree[8]; /* +0x0008 9b 40 00 00 */ unsigned long cExcludedSubtree; /* +0x0010 */ unsigned char rgExcludedSubtree[8]; /* +0x0018 9b 40 00 00 */ }; struct _CRYPT_PASSWORD_CREDENTIALSA { unsigned long cbSize; /* +0x0000 */ char *pszUsername; /* +0x0008 */ char *pszPassword; /* +0x0010 */ }; struct _TXFS_QUERY_RM_INFORMATION { unsigned long BytesRequired; /* +0x0000 */ unsigned long long TailLsn; /* +0x0008 */ unsigned long long CurrentLsn; /* +0x0010 */ unsigned long long ArchiveTailLsn; /* +0x0018 */ unsigned long long LogContainerSize; /* +0x0020 */ unsigned char HighestVirtualClock[8]; /* +0x0028 43 13 00 00 */ unsigned long LogContainerCount; /* +0x0030 */ unsigned long LogContainerCountMax; /* +0x0034 */ unsigned long LogContainerCountMin; /* +0x0038 */ unsigned long LogGrowthIncrement; /* +0x003c */ unsigned long LogAutoShrinkPercentage; /* +0x0040 */ unsigned long Flags; /* +0x0044 */ unsigned short LoggingMode; /* +0x0048 */ unsigned short Reserved; /* +0x004a */ unsigned long RmState; /* +0x004c */ unsigned long long LogCapacity; /* +0x0050 */ unsigned long long LogFree; /* +0x0058 */ unsigned long long TopsSize; /* +0x0060 */ unsigned long long TopsUsed; /* +0x0068 */ unsigned long long TransactionCount; /* +0x0070 */ unsigned long long OnePCCount; /* +0x0078 */ unsigned long long TwoPCCount; /* +0x0080 */ unsigned long long NumberLogFileFull; /* +0x0088 */ unsigned long long OldestTransactionAge; /* +0x0090 */ unsigned char RMName[16]; /* +0x0098 f3 14 00 00 */ unsigned long TmLogPathOffset; /* +0x00a8 */ }; struct _COMMTIMEOUTS { unsigned long ReadIntervalTimeout; /* +0x0000 */ unsigned long ReadTotalTimeoutMultiplier; /* +0x0004 */ unsigned long ReadTotalTimeoutConstant; /* +0x0008 */ unsigned long WriteTotalTimeoutMultiplier; /* +0x000c */ unsigned long WriteTotalTimeoutConstant; /* +0x0010 */ }; struct _CMSG_CMS_SIGNER_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char SignerId[40]; /* +0x0008 36 13 00 00 */ unsigned char HashAlgorithm[24]; /* +0x0030 68 14 00 00 */ unsigned char HashEncryptionAlgorithm[24]; /* +0x0048 68 14 00 00 */ unsigned char EncryptedHash[16]; /* +0x0060 08 13 00 00 */ unsigned char AuthAttrs[16]; /* +0x0070 fc 18 00 00 */ unsigned char UnauthAttrs[16]; /* +0x0080 fc 18 00 00 */ }; struct IMAGE_AUX_SYMBOL_TOKEN_DEF { unsigned char bAuxType; /* +0x0000 */ unsigned char bReserved; /* +0x0001 */ unsigned long SymbolTableIndex; /* +0x0002 */ unsigned char rgbReserved[12]; /* +0x0006 88 15 00 00 */ }; struct _REPARSE_GUID_DATA_BUFFER { unsigned long ReparseTag; /* +0x0000 */ unsigned short ReparseDataLength; /* +0x0004 */ unsigned short Reserved; /* +0x0006 */ unsigned char ReparseGuid[20]; /* +0x0008 f3 14 00 00 */ }; struct _RTL_PROCESS_BACKTRACES_CONTROL { unsigned long ControlCode; /* +0x0000 */ unsigned long ControlSize; /* +0x0004 */ /* unsigned char ControlData[0]; +0x0008 ff 12 00 00 */ unsigned char DatabaseCreate[24]; /* +0x0008 eb 40 00 00 */ }; struct tagLOGCOLORSPACEA { unsigned long lcsSignature; /* +0x0000 */ unsigned long lcsVersion; /* +0x0004 */ unsigned long lcsSize; /* +0x0008 */ long lcsCSType; /* +0x000c */ long lcsIntent; /* +0x0010 */ unsigned char lcsEndpoints[36]; /* +0x0014 00 2d 00 00 */ unsigned long lcsGammaRed; /* +0x0038 */ unsigned long lcsGammaGreen; /* +0x003c */ unsigned long lcsGammaBlue; /* +0x0040 */ unsigned char lcsFilename[260]; /* +0x0044 69 24 00 00 */ }; struct _TOKEN_PRIMARY_GROUP { void *PrimaryGroup; /* +0x0000 */ }; struct _wireSAFEARR_DISPATCH { unsigned long Size; /* +0x0000 */ unsigned char apDispatch[8]; /* +0x0008 c8 31 00 00 */ }; struct _SECURITY_QUALITY_OF_SERVICE { unsigned long Length; /* +0x0000 */ unsigned char ImpersonationLevel[4]; /* +0x0004 43 2e 00 00 */ unsigned char ContextTrackingMode; /* +0x0008 */ unsigned char EffectiveOnly; /* +0x0009 */ }; struct tagPELARRAY { long paXCount; /* +0x0000 */ long paYCount; /* +0x0004 */ long paXExt; /* +0x0008 */ long paYExt; /* +0x000c */ unsigned char paRGBs; /* +0x0010 */ }; struct _IMAGE_AUX_SYMBOL:: { unsigned long crc; /* +0x0000 */ unsigned char rgbReserved[14]; /* +0x0004 54 41 00 00 */ }; struct _IMAGE_AUX_SYMBOL:: { unsigned long Length; /* +0x0000 */ unsigned short NumberOfRelocations; /* +0x0004 */ unsigned short NumberOfLinenumbers; /* +0x0006 */ unsigned long CheckSum; /* +0x0008 */ short Number; /* +0x000c */ unsigned char Selection; /* +0x000e */ unsigned char bReserved; /* +0x000f */ short HighNumber; /* +0x0010 */ }; struct _IMAGE_AUX_SYMBOL:: { unsigned char Name[18]; /* +0x0000 59 41 00 00 */ }; struct _IMAGE_AUX_SYMBOL:: { unsigned long TagIndex; /* +0x0000 */ }; struct _IMAGE_AUX_SYMBOL:::::: { unsigned char Dimension[8]; /* +0x0000 f0 2d 00 00 */ }; struct _IMAGE_AUX_SYMBOL:::::: { unsigned long PointerToLinenumber; /* +0x0000 */ unsigned long PointerToNextFunction; /* +0x0004 */ }; struct _IMAGE_AUX_SYMBOL:::::: { unsigned short Linenumber; /* +0x0000 */ unsigned short Size; /* +0x0002 */ }; struct _PROCESS_DEVICEMAP_INFORMATION_EX { /* unsigned char Set[0]; +0x0000 6f 41 00 00 */ unsigned char Query[40]; /* +0x0000 70 41 00 00 */ unsigned long Flags; /* +0x0028 */ }; struct _FILE_LINK_ENTRY_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ long long ParentFileId; /* +0x0008 */ unsigned long FileNameLength; /* +0x0010 */ unsigned char FileName[4]; /* +0x0014 0a 14 00 00 */ }; struct _FP_IEEE_VALUE:: { /* unsigned char RoundingMode[0]; +0x0000 0c 3d 00 00 */ /* unsigned char Inexact[0]; +0x0000 91 18 00 00 */ /* unsigned char Underflow[0]; +0x0000 74 1e 00 00 */ /* unsigned char Overflow[0]; +0x0000 75 1e 00 00 */ /* unsigned char ZeroDivide[0]; +0x0000 0b 24 00 00 */ /* unsigned char InvalidOperation[0]; +0x0000 32 1f 00 00 */ /* unsigned char OperandValid[0]; +0x0000 33 1f 00 00 */ /* unsigned char Format[0]; +0x0000 8b 13 00 00 */ /* unsigned char Precision[0]; +0x0000 8c 13 00 00 */ /* unsigned char Operation[0]; +0x0000 75 41 00 00 */ /* unsigned char Spare[0]; +0x0000 76 41 00 00 */ unsigned char HardwareException[4]; /* +0x0000 a7 18 00 00 */ }; struct _FP_IEEE_VALUE:: { short I16Value; /* +0x0000 */ unsigned short U16Value; /* +0x0000 */ long I32Value; /* +0x0000 */ unsigned long U32Value; /* +0x0000 */ void *StringValue; /* +0x0000 */ unsigned long CompareValue; /* +0x0000 */ /* unsigned char Fp32Value[0]; +0x0000 79 41 00 00 */ /* unsigned char I64Value[0]; +0x0000 43 13 00 00 */ /* unsigned char U64Value[0]; +0x0000 3e 23 00 00 */ /* unsigned char Fp64Value[0]; +0x0000 7a 41 00 00 */ /* unsigned char Fp80Value[0]; +0x0000 b6 1e 00 00 */ unsigned char Fp128Value[16]; /* +0x0000 41 1c 00 00 */ }; struct tagCURSORSHAPE { unsigned char xHotSpot[4]; /* +0x0000 74 00 00 00 */ unsigned char yHotSpot[4]; /* +0x0004 74 00 00 00 */ unsigned char cx[4]; /* +0x0008 74 00 00 00 */ unsigned char cy[4]; /* +0x000c 74 00 00 00 */ unsigned char cbWidth[4]; /* +0x0010 74 00 00 00 */ unsigned char Planes; /* +0x0014 */ unsigned char BitsPixel; /* +0x0015 */ }; struct tagI_RpcProxyCallbackInterface { unsigned char IsValidMachineFn[8]; /* +0x0000 20 30 00 00 */ unsigned char GetClientAddressFn[8]; /* +0x0008 20 3c 00 00 */ unsigned char GetConnectionTimeoutFn[8]; /* +0x0010 5a 21 00 00 */ unsigned char PerformCalloutFn[8]; /* +0x0018 fb 22 00 00 */ unsigned char FreeCalloutStateFn[8]; /* +0x0020 80 2d 00 00 */ unsigned char GetClientSessionAndResourceUUIDFn[8]; /* +0x0028 83 41 00 00 */ unsigned char ProxyFilterIfFn[8]; /* +0x0030 86 41 00 00 */ unsigned char RpcProxyUpdatePerfCounterFn[8]; /* +0x0038 f0 2c 00 00 */ unsigned char RpcProxyUpdatePerfCounterBackendServerFn[8]; /* +0x0040 09 2f 00 00 */ }; struct _tagStartParam { unsigned char iid[16]; /* +0x0000 f3 14 00 00 */ unsigned char pIBindCtx[8]; /* +0x0010 72 1d 00 00 */ unsigned char pItf[8]; /* +0x0018 93 17 00 00 */ }; struct _QUERY_SERVICE_CONFIGA { unsigned long dwServiceType; /* +0x0000 */ unsigned long dwStartType; /* +0x0004 */ unsigned long dwErrorControl; /* +0x0008 */ char *lpBinaryPathName; /* +0x0010 */ char *lpLoadOrderGroup; /* +0x0018 */ unsigned long dwTagId; /* +0x0020 */ char *lpDependencies; /* +0x0028 */ char *lpServiceStartName; /* +0x0030 */ char *lpDisplayName; /* +0x0038 */ }; struct _XSAVE_FEATURE { unsigned long FeatureId; /* +0x0000 */ /* unsigned char Vendors[0]; +0x0008 bc 41 00 00 */ unsigned long long Unused; /* +0x0008 */ }; struct _ALPC_MESSAGE_ATTRIBUTES { unsigned long AllocatedAttributes; /* +0x0000 */ unsigned long ValidAttributes; /* +0x0004 */ }; struct _FILE_PROCESS_IDS_USING_FILE_INFORMATION { unsigned long NumberOfProcessIdsInList; /* +0x0000 */ unsigned char ProcessIdList[8]; /* +0x0008 dd 2f 00 00 */ }; struct _CM_MONITOR_DEVICE_DATA { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned short HorizontalScreenSize; /* +0x0004 */ unsigned short VerticalScreenSize; /* +0x0006 */ unsigned short HorizontalResolution; /* +0x0008 */ unsigned short VerticalResolution; /* +0x000a */ unsigned short HorizontalDisplayTimeLow; /* +0x000c */ unsigned short HorizontalDisplayTime; /* +0x000e */ unsigned short HorizontalDisplayTimeHigh; /* +0x0010 */ unsigned short HorizontalBackPorchLow; /* +0x0012 */ unsigned short HorizontalBackPorch; /* +0x0014 */ unsigned short HorizontalBackPorchHigh; /* +0x0016 */ unsigned short HorizontalFrontPorchLow; /* +0x0018 */ unsigned short HorizontalFrontPorch; /* +0x001a */ unsigned short HorizontalFrontPorchHigh; /* +0x001c */ unsigned short HorizontalSyncLow; /* +0x001e */ unsigned short HorizontalSync; /* +0x0020 */ unsigned short HorizontalSyncHigh; /* +0x0022 */ unsigned short VerticalBackPorchLow; /* +0x0024 */ unsigned short VerticalBackPorch; /* +0x0026 */ unsigned short VerticalBackPorchHigh; /* +0x0028 */ unsigned short VerticalFrontPorchLow; /* +0x002a */ unsigned short VerticalFrontPorch; /* +0x002c */ unsigned short VerticalFrontPorchHigh; /* +0x002e */ unsigned short VerticalSyncLow; /* +0x0030 */ unsigned short VerticalSync; /* +0x0032 */ unsigned short VerticalSyncHigh; /* +0x0034 */ }; struct _IMAGE_RESOURCE_DIRECTORY_STRING { unsigned short Length; /* +0x0000 */ unsigned char NameString[2]; /* +0x0002 1e 24 00 00 */ }; struct _PORT_DATA_INFORMATION { unsigned long CountDataEntries; /* +0x0000 */ unsigned char DataEntries[16]; /* +0x0008 e3 41 00 00 */ }; struct _ALPC_HANDLE_ATTR { unsigned long Flags; /* +0x0000 */ void *Handle; /* +0x0008 */ unsigned long ObjectType; /* +0x0010 */ unsigned long DesiredAccess; /* +0x0014 */ }; struct _ACTIVATION_CONTEXT_SECTION_KEYED_DATA_2600 { unsigned long Size; /* +0x0000 */ unsigned long DataFormatVersion; /* +0x0004 */ void *Data; /* +0x0008 */ unsigned long Length; /* +0x0010 */ void *SectionGlobalData; /* +0x0018 */ unsigned long SectionGlobalDataLength; /* +0x0020 */ void *SectionBase; /* +0x0028 */ unsigned long SectionTotalLength; /* +0x0030 */ unsigned char ActivationContext[8]; /* +0x0038 7d 17 00 00 */ unsigned long AssemblyRosterIndex; /* +0x0040 */ unsigned long Flags; /* +0x0044 */ }; struct _SERVICE_TRIGGER_INFO { unsigned long cTriggers; /* +0x0000 */ unsigned char pTriggers[8]; /* +0x0008 ad 1b 00 00 */ unsigned char *pReserved; /* +0x0010 */ }; struct _PROCESS_WS_WATCH_INFORMATION { void *FaultingPc; /* +0x0000 */ void *FaultingVa; /* +0x0008 */ }; struct _COVERAGE_UNLOADED_MODULE_ENTRY { unsigned char NextEntry[16]; /* +0x0000 73 1f 00 00 */ unsigned char BaseDllName[16]; /* +0x0010 e3 12 00 00 */ unsigned char FullDllName[16]; /* +0x0020 e3 12 00 00 */ unsigned long CoverageSectionSize; /* +0x0030 */ void *CoverageSection; /* +0x0038 */ }; struct _tagCODEBASEHOLD { unsigned long cbSize; /* +0x0000 */ unsigned char szDistUnit[8]; /* +0x0008 71 06 00 00 */ unsigned char szCodeBase[8]; /* +0x0010 71 06 00 00 */ unsigned long dwVersionMS; /* +0x0018 */ unsigned long dwVersionLS; /* +0x001c */ unsigned long dwStyle; /* +0x0020 */ }; struct tagOBJREF { unsigned long signature; /* +0x0000 */ unsigned long flags; /* +0x0004 */ unsigned char iid[80]; /* +0x0008 f3 14 00 00 */ }; struct tagPARAMDESCEX { unsigned long cBytes; /* +0x0000 */ unsigned char varDefaultValue[24]; /* +0x0008 4d 18 00 00 */ }; enum tagMSHCTX { MSHCTX_LOCAL = 0, MSHCTX_NOSHAREDMEM = 1, MSHCTX_DIFFERENTMACHINE = 2, MSHCTX_INPROC = 3, MSHCTX_CROSSCTX = 4 }; struct _LOCALMANAGEDAPPLICATION { unsigned char pszDeploymentName[8]; /* +0x0000 71 06 00 00 */ unsigned char pszPolicyName[8]; /* +0x0008 71 06 00 00 */ unsigned char pszProductId[8]; /* +0x0010 71 06 00 00 */ unsigned long dwState; /* +0x0018 */ }; struct _RTLP_PROCESS_REFLECTION_CONTEXT { unsigned long long ReflectionContextSize; /* +0x0000 */ unsigned long ReflectionFlags; /* +0x0008 */ unsigned char ReflectionRoutine[8]; /* +0x0010 df 19 00 00 */ void *ReflectionParameter; /* +0x0018 */ void *ReflectedProcessCreatedEvent; /* +0x0020 */ void *ReflectedProcessHandlesDuplicatedEvent; /* +0x0028 */ void *ReflectionStartEvent; /* +0x0030 */ unsigned char ReflectionInformation[32]; /* +0x0038 ff 1e 00 00 */ }; struct _CRYPT_URL_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwSyncDeltaTime; /* +0x0004 */ unsigned long cGroup; /* +0x0008 */ unsigned long *rgcGroupEntry; /* +0x0010 */ }; struct pvalueW { unsigned char pv_valuename[8]; /* +0x0000 71 06 00 00 */ unsigned char pv_valuelen[8]; /* +0x0008 74 00 00 00 */ void *pv_value_context; /* +0x0010 */ unsigned long pv_type; /* +0x0018 */ }; struct _RPC_SYNTAX_IDENTIFIER { unsigned char SyntaxGUID[16]; /* +0x0000 f3 14 00 00 */ unsigned char SyntaxVersion[4]; /* +0x0010 f9 29 00 00 */ }; struct _CRYPT_IMAGE_REG { unsigned char pszImage[8]; /* +0x0000 71 06 00 00 */ unsigned long cInterfaces; /* +0x0008 */ unsigned char rgpInterfaces[8]; /* +0x0010 75 42 00 00 */ }; struct _PRIV_SCM_INFO { long lThreadID; /* +0x0000 */ unsigned char pwszWinstaDesktop[8]; /* +0x0008 71 06 00 00 */ unsigned long long ProcessSignature; /* +0x0010 */ unsigned char pEnvBlock[8]; /* +0x0018 71 06 00 00 */ unsigned long EnvBlockLength; /* +0x0020 */ }; struct _NETRESOURCEA { unsigned long dwScope; /* +0x0000 */ unsigned long dwType; /* +0x0004 */ unsigned long dwDisplayType; /* +0x0008 */ unsigned long dwUsage; /* +0x000c */ char *lpLocalName; /* +0x0010 */ char *lpRemoteName; /* +0x0018 */ char *lpComment; /* +0x0020 */ char *lpProvider; /* +0x0028 */ }; struct tagRAWINPUTHEADER { unsigned long dwType; /* +0x0000 */ unsigned long dwSize; /* +0x0004 */ void *hDevice; /* +0x0008 */ unsigned long long wParam; /* +0x0010 */ }; struct _KEY_FULL_INFORMATION { unsigned char LastWriteTime[8]; /* +0x0000 43 13 00 00 */ unsigned long TitleIndex; /* +0x0008 */ unsigned long ClassOffset; /* +0x000c */ unsigned long ClassLength; /* +0x0010 */ unsigned long SubKeys; /* +0x0014 */ unsigned long MaxNameLen; /* +0x0018 */ unsigned long MaxClassLen; /* +0x001c */ unsigned long Values; /* +0x0020 */ unsigned long MaxValueNameLen; /* +0x0024 */ unsigned long MaxValueDataLen; /* +0x0028 */ unsigned char Class[4]; /* +0x002c 0a 14 00 00 */ }; struct _SYSTEM_BASIC_INFORMATION { unsigned long Reserved; /* +0x0000 */ unsigned long TimerResolution; /* +0x0004 */ unsigned long PageSize; /* +0x0008 */ unsigned long NumberOfPhysicalPages; /* +0x000c */ unsigned long LowestPhysicalPageNumber; /* +0x0010 */ unsigned long HighestPhysicalPageNumber; /* +0x0014 */ unsigned long AllocationGranularity; /* +0x0018 */ unsigned long long MinimumUserModeAddress; /* +0x0020 */ unsigned long long MaximumUserModeAddress; /* +0x0028 */ unsigned long long ActiveProcessorsAffinityMask; /* +0x0030 */ char NumberOfProcessors; /* +0x0038 */ }; struct _FILE_SFIO_VOLUME_INFORMATION { unsigned long MaximumRequestsPerPeriod; /* +0x0000 */ unsigned long MinimumPeriod; /* +0x0004 */ unsigned long MinimumTransferSize; /* +0x0008 */ }; struct _HEAP_BLOCK_SETTABLE_INFORMATION { unsigned long long Settable; /* +0x0000 */ unsigned short TagIndex; /* +0x0008 */ unsigned short AllocatorBackTraceIndex; /* +0x000a */ }; struct _CERT_POLICY_ID { unsigned long cCertPolicyElementId; /* +0x0000 */ unsigned char rgpszCertPolicyElementId[8]; /* +0x0008 03 24 00 00 */ }; struct _KLDR_DATA_TABLE_ENTRY32 { unsigned char InLoadOrderLinks[8]; /* +0x0000 0c 1f 00 00 */ unsigned long __Undefined1; /* +0x0008 */ unsigned long __Undefined2; /* +0x000c */ unsigned long __Undefined3; /* +0x0010 */ unsigned long NonPagedDebugInfo; /* +0x0014 */ unsigned long DllBase; /* +0x0018 */ unsigned long EntryPoint; /* +0x001c */ unsigned long SizeOfImage; /* +0x0020 */ unsigned char FullDllName[8]; /* +0x0024 9f 17 00 00 */ unsigned char BaseDllName[8]; /* +0x002c 9f 17 00 00 */ unsigned long Flags; /* +0x0034 */ unsigned short LoadCount; /* +0x0038 */ unsigned short __Undefined5; /* +0x003a */ unsigned long __Undefined6; /* +0x003c */ unsigned long CheckSum; /* +0x0040 */ unsigned long TimeDateStamp; /* +0x0044 */ }; struct _TXFS_LIST_TRANSACTIONS_ENTRY { unsigned char TransactionId[16]; /* +0x0000 f3 14 00 00 */ unsigned long TransactionState; /* +0x0010 */ unsigned long Reserved1; /* +0x0014 */ unsigned long Reserved2; /* +0x0018 */ long long Reserved3; /* +0x0020 */ }; struct _FILE_PIPE_PEEK_BUFFER { unsigned long NamedPipeState; /* +0x0000 */ unsigned long ReadDataAvailable; /* +0x0004 */ unsigned long NumberOfMessages; /* +0x0008 */ unsigned long MessageLength; /* +0x000c */ unsigned char Data[4]; /* +0x0010 1e 24 00 00 */ }; struct ANON_OBJECT_HEADER_V2 { unsigned short Sig1; /* +0x0000 */ unsigned short Sig2; /* +0x0002 */ unsigned short Version; /* +0x0004 */ unsigned short Machine; /* +0x0006 */ unsigned long TimeDateStamp; /* +0x0008 */ unsigned char ClassID[16]; /* +0x000c f3 14 00 00 */ unsigned long SizeOfData; /* +0x001c */ unsigned long Flags; /* +0x0020 */ unsigned long MetaDataSize; /* +0x0024 */ unsigned long MetaDataOffset; /* +0x0028 */ }; struct _PLUGPLAY_CONTROL_CONFLICT_STRINGS { unsigned long NullDeviceInstance; /* +0x0000 */ unsigned char DeviceInstanceStrings[4]; /* +0x0004 0a 14 00 00 */ }; struct _CMC_RESPONSE_INFO { unsigned long cTaggedAttribute; /* +0x0000 */ unsigned char rgTaggedAttribute[8]; /* +0x0008 33 1d 00 00 */ unsigned long cTaggedContentInfo; /* +0x0010 */ unsigned char rgTaggedContentInfo[8]; /* +0x0018 49 3e 00 00 */ unsigned long cTaggedOtherMsg; /* +0x0020 */ unsigned char rgTaggedOtherMsg[8]; /* +0x0028 4b 3e 00 00 */ }; struct _IMAGE_OPTIONAL_HEADER64 { unsigned short Magic; /* +0x0000 */ unsigned char MajorLinkerVersion; /* +0x0002 */ unsigned char MinorLinkerVersion; /* +0x0003 */ unsigned long SizeOfCode; /* +0x0004 */ unsigned long SizeOfInitializedData; /* +0x0008 */ unsigned long SizeOfUninitializedData; /* +0x000c */ unsigned long AddressOfEntryPoint; /* +0x0010 */ unsigned long BaseOfCode; /* +0x0014 */ unsigned long long ImageBase; /* +0x0018 */ unsigned long SectionAlignment; /* +0x0020 */ unsigned long FileAlignment; /* +0x0024 */ unsigned short MajorOperatingSystemVersion; /* +0x0028 */ unsigned short MinorOperatingSystemVersion; /* +0x002a */ unsigned short MajorImageVersion; /* +0x002c */ unsigned short MinorImageVersion; /* +0x002e */ unsigned short MajorSubsystemVersion; /* +0x0030 */ unsigned short MinorSubsystemVersion; /* +0x0032 */ unsigned long Win32VersionValue; /* +0x0034 */ unsigned long SizeOfImage; /* +0x0038 */ unsigned long SizeOfHeaders; /* +0x003c */ unsigned long CheckSum; /* +0x0040 */ unsigned short Subsystem; /* +0x0044 */ unsigned short DllCharacteristics; /* +0x0046 */ unsigned long long SizeOfStackReserve; /* +0x0048 */ unsigned long long SizeOfStackCommit; /* +0x0050 */ unsigned long long SizeOfHeapReserve; /* +0x0058 */ unsigned long long SizeOfHeapCommit; /* +0x0060 */ unsigned long LoaderFlags; /* +0x0068 */ unsigned long NumberOfRvaAndSizes; /* +0x006c */ unsigned char DataDirectory[128]; /* +0x0070 28 23 00 00 */ }; struct _MUTANT_OWNER_INFORMATION { unsigned char ClientId[16]; /* +0x0000 44 13 00 00 */ }; struct _COSERVERINFO { unsigned long dwReserved1; /* +0x0000 */ unsigned char pwszName[8]; /* +0x0008 71 06 00 00 */ unsigned char pAuthInfo[8]; /* +0x0010 e0 42 00 00 */ unsigned long dwReserved2; /* +0x0018 */ }; struct _RPC_CLIENT_INTERFACE { unsigned char Length[4]; /* +0x0000 75 00 00 00 */ unsigned char InterfaceId[20]; /* +0x0004 06 17 00 00 */ unsigned char TransferSyntax[24]; /* +0x0018 06 17 00 00 */ unsigned char DispatchTable[8]; /* +0x0030 49 19 00 00 */ unsigned char RpcProtseqEndpointCount[8]; /* +0x0038 75 00 00 00 */ unsigned char RpcProtseqEndpoint[8]; /* +0x0040 9a 1e 00 00 */ unsigned long long Reserved; /* +0x0048 */ unsigned char InterpreterInfo[8]; /* +0x0050 4f 19 00 00 */ unsigned char Flags[8]; /* +0x0058 75 00 00 00 */ }; struct _CERT_LOGOTYPE_DATA { unsigned long cLogotypeImage; /* +0x0000 */ unsigned char rgLogotypeImage[8]; /* +0x0008 dc 1b 00 00 */ unsigned long cLogotypeAudio; /* +0x0010 */ unsigned char rgLogotypeAudio[8]; /* +0x0018 01 43 00 00 */ }; struct _AppBarData { unsigned long cbSize; /* +0x0000 */ unsigned char hWnd[8]; /* +0x0008 f7 12 00 00 */ unsigned char uCallbackMessage[4]; /* +0x0010 75 00 00 00 */ unsigned char uEdge[4]; /* +0x0014 75 00 00 00 */ unsigned char rc[16]; /* +0x0018 7a 14 00 00 */ long long lParam; /* +0x0028 */ }; struct _GENERIC_MAPPING { unsigned long GenericRead; /* +0x0000 */ unsigned long GenericWrite; /* +0x0004 */ unsigned long GenericExecute; /* +0x0008 */ unsigned long GenericAll; /* +0x000c */ }; struct _CTL_USAGE_MATCH { unsigned long dwType; /* +0x0000 */ unsigned char Usage[16]; /* +0x0008 c8 13 00 00 */ }; struct COPYFILE2_EXTENDED_PARAMETERS { unsigned long dwSize; /* +0x0000 */ unsigned long dwCopyFlags; /* +0x0004 */ unsigned char pfCancel[8]; /* +0x0008 74 06 00 00 */ unsigned char pProgressRoutine[8]; /* +0x0010 6e 29 00 00 */ void *pvCallbackContext; /* +0x0018 */ }; struct _FILE_PREFETCH_EX { unsigned long Type; /* +0x0000 */ unsigned long Count; /* +0x0004 */ void *Context; /* +0x0008 */ unsigned char Prefetch[8]; /* +0x0010 dd 2f 00 00 */ }; struct _CRYPTNET_URL_CACHE_FLUSH_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwExemptSeconds; /* +0x0004 */ unsigned char ExpireTime[8]; /* +0x0008 37 13 00 00 */ }; struct _CM_FULL_RESOURCE_DESCRIPTOR { unsigned char InterfaceType[4]; /* +0x0000 4c 21 00 00 */ unsigned long BusNumber; /* +0x0004 */ unsigned char PartialResourceList[28]; /* +0x0008 25 43 00 00 */ }; struct _TOKEN_PRIVILEGES { unsigned long PrivilegeCount; /* +0x0000 */ unsigned char Privileges[12]; /* +0x0004 94 2e 00 00 */ }; struct tagRPCOLEMESSAGE { void *reserved1; /* +0x0000 */ unsigned long dataRepresentation; /* +0x0008 */ void *Buffer; /* +0x0010 */ unsigned long cbBuffer; /* +0x0018 */ unsigned long iMethod; /* +0x001c */ unsigned char reserved2[40]; /* +0x0020 2a 43 00 00 */ unsigned long rpcFlags; /* +0x0048 */ }; struct _AUTHENTICODE_TS_EXTRA_CERT_CHAIN_POLICY_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwRegPolicySettings; /* +0x0004 */ unsigned char fCommercial[4]; /* +0x0008 74 00 00 00 */ }; struct _PORT_MESSAGE:::: { short Type; /* +0x0000 */ short DataInfoOffset; /* +0x0002 */ }; struct _PORT_MESSAGE:::: { short DataLength; /* +0x0000 */ short TotalLength; /* +0x0002 */ }; struct _FILE_FS_ATTRIBUTE_INFORMATION { unsigned long FileSystemAttributes; /* +0x0000 */ long MaximumComponentNameLength; /* +0x0004 */ unsigned long FileSystemNameLength; /* +0x0008 */ unsigned char FileSystemName[4]; /* +0x000c 0a 14 00 00 */ }; struct _MUICCHEADER { unsigned char ulMaxStringsSize[4]; /* +0x0000 75 00 00 00 */ unsigned char ulSizeStrings[4]; /* +0x0004 75 00 00 00 */ unsigned char ulMaxNumInstalledCultures[4]; /* +0x0008 75 00 00 00 */ unsigned char ulNumInstalledCultures[4]; /* +0x000c 75 00 00 00 */ unsigned char ulMaxNumUnverifiedCultures[4]; /* +0x0010 75 00 00 00 */ unsigned char ulNumUnverifiedCultures[4]; /* +0x0014 75 00 00 00 */ }; struct _SYSTEM_VDM_INSTEMUL_INFO { unsigned long SegmentNotPresent; /* +0x0000 */ unsigned long VdmOpcode0F; /* +0x0004 */ unsigned long OpcodeESPrefix; /* +0x0008 */ unsigned long OpcodeCSPrefix; /* +0x000c */ unsigned long OpcodeSSPrefix; /* +0x0010 */ unsigned long OpcodeDSPrefix; /* +0x0014 */ unsigned long OpcodeFSPrefix; /* +0x0018 */ unsigned long OpcodeGSPrefix; /* +0x001c */ unsigned long OpcodeOPER32Prefix; /* +0x0020 */ unsigned long OpcodeADDR32Prefix; /* +0x0024 */ unsigned long OpcodeINSB; /* +0x0028 */ unsigned long OpcodeINSW; /* +0x002c */ unsigned long OpcodeOUTSB; /* +0x0030 */ unsigned long OpcodeOUTSW; /* +0x0034 */ unsigned long OpcodePUSHF; /* +0x0038 */ unsigned long OpcodePOPF; /* +0x003c */ unsigned long OpcodeINTnn; /* +0x0040 */ unsigned long OpcodeINTO; /* +0x0044 */ unsigned long OpcodeIRET; /* +0x0048 */ unsigned long OpcodeINBimm; /* +0x004c */ unsigned long OpcodeINWimm; /* +0x0050 */ unsigned long OpcodeOUTBimm; /* +0x0054 */ unsigned long OpcodeOUTWimm; /* +0x0058 */ unsigned long OpcodeINB; /* +0x005c */ unsigned long OpcodeINW; /* +0x0060 */ unsigned long OpcodeOUTB; /* +0x0064 */ unsigned long OpcodeOUTW; /* +0x0068 */ unsigned long OpcodeLOCKPrefix; /* +0x006c */ unsigned long OpcodeREPNEPrefix; /* +0x0070 */ unsigned long OpcodeREPPrefix; /* +0x0074 */ unsigned long OpcodeHLT; /* +0x0078 */ unsigned long OpcodeCLI; /* +0x007c */ unsigned long OpcodeSTI; /* +0x0080 */ unsigned long BopCount; /* +0x0084 */ }; struct _CERT_HASHED_URL { unsigned char HashAlgorithm[24]; /* +0x0000 68 14 00 00 */ unsigned char Hash[16]; /* +0x0018 08 13 00 00 */ unsigned char pwszUrl[8]; /* +0x0028 71 06 00 00 */ }; struct provider_info { unsigned char pi_R0_1val[8]; /* +0x0000 bf 13 00 00 */ unsigned char pi_R0_allvals[8]; /* +0x0008 bf 13 00 00 */ unsigned char pi_R3_1val[8]; /* +0x0010 bf 13 00 00 */ unsigned char pi_R3_allvals[8]; /* +0x0018 bf 13 00 00 */ unsigned long pi_flags; /* +0x0020 */ void *pi_key_context; /* +0x0028 */ }; struct _CRYPT_SIGN_MESSAGE_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwMsgEncodingType; /* +0x0004 */ unsigned char pSigningCert[8]; /* +0x0008 c4 13 00 00 */ unsigned char HashAlgorithm[24]; /* +0x0010 68 14 00 00 */ void *pvHashAuxInfo; /* +0x0028 */ unsigned long cMsgCert; /* +0x0030 */ unsigned char rgpMsgCert[8]; /* +0x0038 a0 15 00 00 */ unsigned long cMsgCrl; /* +0x0040 */ unsigned char rgpMsgCrl[8]; /* +0x0048 8b 3d 00 00 */ unsigned long cAuthAttr; /* +0x0050 */ unsigned char rgAuthAttr[8]; /* +0x0058 e3 13 00 00 */ unsigned long cUnauthAttr; /* +0x0060 */ unsigned char rgUnauthAttr[8]; /* +0x0068 e3 13 00 00 */ unsigned long dwFlags; /* +0x0070 */ unsigned long dwInnerContentType; /* +0x0074 */ }; struct _RPC_SECURITY_QOS_V4_A { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ unsigned long AdditionalSecurityInfoType; /* +0x0010 */ }; struct _NCryptAlgorithmName { unsigned char pszName[8]; /* +0x0000 71 06 00 00 */ unsigned long dwClass; /* +0x0008 */ unsigned long dwAlgOperations; /* +0x000c */ unsigned long dwFlags; /* +0x0010 */ }; struct _PATHNAME_BUFFER { unsigned long PathNameLength; /* +0x0000 */ unsigned char Name[4]; /* +0x0004 0a 14 00 00 */ }; struct _CERT_ID { unsigned long dwIdChoice; /* +0x0000 */ /* unsigned char IssuerSerialNumber[0]; +0x0008 07 19 00 00 */ /* unsigned char KeyId[0]; +0x0008 08 13 00 00 */ unsigned char HashId[32]; /* +0x0008 08 13 00 00 */ }; struct _GROUP_AFFINITY { unsigned long long Mask; /* +0x0000 */ unsigned short Group; /* +0x0008 */ unsigned char Reserved[6]; /* +0x000a b0 43 00 00 */ }; struct _ALPC_SERVER_INFORMATION { /* unsigned char In[0]; +0x0000 b3 43 00 00 */ unsigned char Out[32]; /* +0x0000 b4 43 00 00 */ }; struct _ALPC_SERVER_INFORMATION:::: { unsigned char ThreadBlocked; /* +0x0000 */ void *ConnectedProcessId; /* +0x0008 */ unsigned char ConnectionPortName[16]; /* +0x0010 e3 12 00 00 */ }; struct _ALPC_SERVER_INFORMATION:::: { void *ThreadHandle; /* +0x0000 */ }; struct DISPLAYCONFIG_PATH_INFO { unsigned char sourceInfo[20]; /* +0x0000 bd 43 00 00 */ unsigned char targetInfo[48]; /* +0x0014 be 43 00 00 */ unsigned char flags[4]; /* +0x0044 75 00 00 00 */ }; struct _SYSTEM_DPC_BEHAVIOR_INFORMATION { unsigned long Spare; /* +0x0000 */ unsigned long DpcQueueDepth; /* +0x0004 */ unsigned long MinimumDpcRate; /* +0x0008 */ unsigned long AdjustDpcThreshold; /* +0x000c */ unsigned long IdealDpcRate; /* +0x0010 */ }; struct _CONSOLE_SELECTION_INFO { unsigned long dwFlags; /* +0x0000 */ unsigned char dwSelectionAnchor[4]; /* +0x0004 1b 18 00 00 */ unsigned char srSelection[8]; /* +0x0008 86 27 00 00 */ }; struct _CMSG_KEY_TRANS_RECIPIENT_ENCODE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char KeyEncryptionAlgorithm[24]; /* +0x0008 68 14 00 00 */ void *pvKeyEncryptionAuxInfo; /* +0x0020 */ unsigned long long hCryptProv; /* +0x0028 */ unsigned char RecipientPublicKey[24]; /* +0x0030 09 13 00 00 */ unsigned char RecipientId[40]; /* +0x0048 36 13 00 00 */ }; struct _EISA_DMA_CONFIGURATION { unsigned char ConfigurationByte0[1]; /* +0x0000 d6 43 00 00 */ unsigned char ConfigurationByte1[1]; /* +0x0001 d7 43 00 00 */ }; struct _MEMORYSTATUSEX { unsigned long dwLength; /* +0x0000 */ unsigned long dwMemoryLoad; /* +0x0004 */ unsigned long long ullTotalPhys; /* +0x0008 */ unsigned long long ullAvailPhys; /* +0x0010 */ unsigned long long ullTotalPageFile; /* +0x0018 */ unsigned long long ullAvailPageFile; /* +0x0020 */ unsigned long long ullTotalVirtual; /* +0x0028 */ unsigned long long ullAvailVirtual; /* +0x0030 */ unsigned long long ullAvailExtendedVirtual; /* +0x0038 */ }; struct _RTL_GENERIC_TABLE { unsigned char TableRoot[8]; /* +0x0000 e5 43 00 00 */ unsigned char InsertOrderList[16]; /* +0x0008 73 1f 00 00 */ unsigned char OrderedPointer[8]; /* +0x0018 99 2d 00 00 */ unsigned long WhichOrderedElement; /* +0x0020 */ unsigned long NumberGenericTableElements; /* +0x0024 */ unsigned char CompareRoutine[8]; /* +0x0028 e8 43 00 00 */ unsigned char AllocateRoutine[8]; /* +0x0030 e9 43 00 00 */ unsigned char FreeRoutine[8]; /* +0x0038 1d 43 00 00 */ void *TableContext; /* +0x0040 */ }; struct tagCHARSETINFO { unsigned char ciCharset[4]; /* +0x0000 75 00 00 00 */ unsigned char ciACP[4]; /* +0x0004 75 00 00 00 */ unsigned char fs[24]; /* +0x0008 8c 20 00 00 */ }; struct tagPROPSPEC { unsigned long ulKind; /* +0x0000 */ unsigned long propid; /* +0x0008 */ unsigned char lpwstr[8]; /* +0x0008 71 06 00 00 */ }; struct _ICONINFOEXA { unsigned long cbSize; /* +0x0000 */ unsigned char fIcon[4]; /* +0x0004 74 00 00 00 */ unsigned long xHotspot; /* +0x0008 */ unsigned long yHotspot; /* +0x000c */ unsigned char hbmMask[8]; /* +0x0010 18 18 00 00 */ unsigned char hbmColor[8]; /* +0x0018 18 18 00 00 */ unsigned short wResID; /* +0x0020 */ unsigned char szModName[260]; /* +0x0022 69 24 00 00 */ unsigned char szResName[266]; /* +0x0126 69 24 00 00 */ }; struct _IO_ERROR_LOG_PACKET { unsigned char MajorFunctionCode; /* +0x0000 */ unsigned char RetryCount; /* +0x0001 */ unsigned short DumpDataSize; /* +0x0002 */ unsigned short NumberOfStrings; /* +0x0004 */ unsigned short StringOffset; /* +0x0006 */ unsigned short EventCategory; /* +0x0008 */ long ErrorCode; /* +0x000c */ unsigned long UniqueErrorValue; /* +0x0010 */ long FinalStatus; /* +0x0014 */ unsigned long SequenceNumber; /* +0x0018 */ unsigned long IoControlCode; /* +0x001c */ unsigned char DeviceOffset[8]; /* +0x0020 43 13 00 00 */ unsigned char DumpData[8]; /* +0x0028 fc 12 00 00 */ }; struct _WIN32_FIND_DATAA { unsigned long dwFileAttributes; /* +0x0000 */ unsigned char ftCreationTime[8]; /* +0x0004 37 13 00 00 */ unsigned char ftLastAccessTime[8]; /* +0x000c 37 13 00 00 */ unsigned char ftLastWriteTime[8]; /* +0x0014 37 13 00 00 */ unsigned long nFileSizeHigh; /* +0x001c */ unsigned long nFileSizeLow; /* +0x0020 */ unsigned long dwReserved0; /* +0x0024 */ unsigned long dwReserved1; /* +0x0028 */ unsigned char cFileName[260]; /* +0x002c 69 24 00 00 */ unsigned char cAlternateFileName[16]; /* +0x0130 2d 44 00 00 */ }; struct tagContextProperty { unsigned char policyId[16]; /* +0x0000 f3 14 00 00 */ unsigned long flags; /* +0x0010 */ unsigned char pUnk[8]; /* +0x0018 93 17 00 00 */ }; struct _DEDUP_QUERY_FILE_HASHES_INPUT_BUFFER { unsigned long Version; /* +0x0000 */ unsigned long QueryFlags; /* +0x0004 */ unsigned long HashAlgorithm; /* +0x0008 */ unsigned char RangeOffsetInFile[8]; /* +0x0010 43 13 00 00 */ unsigned char RangeLength[8]; /* +0x0018 43 13 00 00 */ }; struct _SYSTEM_LOOKASIDE_INFORMATION { unsigned short CurrentDepth; /* +0x0000 */ unsigned short MaximumDepth; /* +0x0002 */ unsigned long TotalAllocates; /* +0x0004 */ unsigned long AllocateMisses; /* +0x0008 */ unsigned long TotalFrees; /* +0x000c */ unsigned long FreeMisses; /* +0x0010 */ unsigned long Type; /* +0x0014 */ unsigned long Tag; /* +0x0018 */ unsigned long Size; /* +0x001c */ }; struct _NOTIFYICONDATAW { unsigned long cbSize; /* +0x0000 */ unsigned char hWnd[8]; /* +0x0008 f7 12 00 00 */ unsigned char uID[4]; /* +0x0010 75 00 00 00 */ unsigned char uFlags[4]; /* +0x0014 75 00 00 00 */ unsigned char uCallbackMessage[8]; /* +0x0018 75 00 00 00 */ unsigned char hIcon[8]; /* +0x0020 43 21 00 00 */ unsigned char szTip[256]; /* +0x0028 c1 15 00 00 */ unsigned long dwState; /* +0x0128 */ unsigned long dwStateMask; /* +0x012c */ unsigned char szInfo[512]; /* +0x0130 55 17 00 00 */ /* unsigned char uTimeout[0]; +0x0330 75 00 00 00 */ unsigned char uVersion[4]; /* +0x0330 75 00 00 00 */ unsigned char szInfoTitle[128]; /* +0x0334 cb 1e 00 00 */ unsigned long dwInfoFlags; /* +0x03b4 */ unsigned char guidItem[16]; /* +0x03b8 f3 14 00 00 */ unsigned char hBalloonIcon[8]; /* +0x03c8 43 21 00 00 */ }; struct _MUTANT_BASIC_INFORMATION { long CurrentCount; /* +0x0000 */ unsigned char OwnedByCaller; /* +0x0004 */ unsigned char AbandonedState; /* +0x0005 */ }; struct _SYSTEM_FILECACHE_INFORMATION { unsigned long long CurrentSize; /* +0x0000 */ unsigned long long PeakSize; /* +0x0008 */ unsigned long PageFaultCount; /* +0x0010 */ unsigned long long MinimumWorkingSet; /* +0x0018 */ unsigned long long MaximumWorkingSet; /* +0x0020 */ unsigned long long CurrentSizeIncludingTransitionInPages; /* +0x0028 */ unsigned long long PeakSizeIncludingTransitionInPages; /* +0x0030 */ unsigned long TransitionRePurposeCount; /* +0x0038 */ unsigned long Flags; /* +0x003c */ }; struct _MEMORY_FRAME_INFORMATION { /* unsigned char UseDescription[0]; +0x0000 60 44 00 00 */ /* unsigned char ListDescription[0]; +0x0000 61 44 00 00 */ /* unsigned char Reserved0[0]; +0x0000 62 44 00 00 */ /* unsigned char Pinned[0]; +0x0000 f2 1d 00 00 */ /* unsigned char DontUse[0]; +0x0000 c2 29 00 00 */ /* unsigned char Priority[0]; +0x0000 63 44 00 00 */ unsigned char Reserved[8]; /* +0x0000 64 44 00 00 */ }; struct tagEMRGLSBOUNDEDRECORD { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char rclBounds[16]; /* +0x0008 db 12 00 00 */ unsigned long cbData; /* +0x0018 */ unsigned char Data[4]; /* +0x001c ff 12 00 00 */ }; struct _IMAGE_OS2_HEADER { unsigned short ne_magic; /* +0x0000 */ char ne_ver; /* +0x0002 */ char ne_rev; /* +0x0003 */ unsigned short ne_enttab; /* +0x0004 */ unsigned short ne_cbenttab; /* +0x0006 */ long ne_crc; /* +0x0008 */ unsigned short ne_flags; /* +0x000c */ unsigned short ne_autodata; /* +0x000e */ unsigned short ne_heap; /* +0x0010 */ unsigned short ne_stack; /* +0x0012 */ long ne_csip; /* +0x0014 */ long ne_sssp; /* +0x0018 */ unsigned short ne_cseg; /* +0x001c */ unsigned short ne_cmod; /* +0x001e */ unsigned short ne_cbnrestab; /* +0x0020 */ unsigned short ne_segtab; /* +0x0022 */ unsigned short ne_rsrctab; /* +0x0024 */ unsigned short ne_restab; /* +0x0026 */ unsigned short ne_modtab; /* +0x0028 */ unsigned short ne_imptab; /* +0x002a */ long ne_nrestab; /* +0x002c */ unsigned short ne_cmovent; /* +0x0030 */ unsigned short ne_align; /* +0x0032 */ unsigned short ne_cres; /* +0x0034 */ unsigned char ne_exetyp; /* +0x0036 */ unsigned char ne_flagsothers; /* +0x0037 */ unsigned short ne_pretthunks; /* +0x0038 */ unsigned short ne_psegrefbytes; /* +0x003a */ unsigned short ne_swaparea; /* +0x003c */ unsigned short ne_expver; /* +0x003e */ }; struct _CRYPT_AES_256_KEY_STATE { unsigned char Key[32]; /* +0x0000 f7 17 00 00 */ unsigned char IV[16]; /* +0x0020 33 1c 00 00 */ unsigned char EncryptionState[240]; /* +0x0030 6f 44 00 00 */ unsigned char DecryptionState[240]; /* +0x0120 6f 44 00 00 */ unsigned char Feedback[16]; /* +0x0210 33 1c 00 00 */ }; struct _KEY_SET_VIRTUALIZATION_INFORMATION { /* unsigned char VirtualTarget[0]; +0x0000 94 13 00 00 */ /* unsigned char VirtualStore[0]; +0x0000 90 18 00 00 */ /* unsigned char VirtualSource[0]; +0x0000 91 18 00 00 */ unsigned char Reserved[4]; /* +0x0000 f7 2c 00 00 */ }; struct _ACTIVATION_CONTEXT_RUN_LEVEL_INFORMATION { unsigned long ulFlags; /* +0x0000 */ unsigned char RunLevel[4]; /* +0x0004 74 44 00 00 */ unsigned long UiAccess; /* +0x0008 */ }; struct DISPLAYCONFIG_PATH_TARGET_INFO { unsigned char adapterId[8]; /* +0x0000 38 15 00 00 */ unsigned char id[4]; /* +0x0008 75 00 00 00 */ unsigned char modeInfoIdx[4]; /* +0x000c 75 00 00 00 */ unsigned char outputTechnology[4]; /* +0x0010 77 44 00 00 */ unsigned char rotation[4]; /* +0x0014 78 44 00 00 */ unsigned char scaling[4]; /* +0x0018 79 44 00 00 */ unsigned char refreshRate[8]; /* +0x001c 3b 3c 00 00 */ unsigned char scanLineOrdering[4]; /* +0x0024 3d 3c 00 00 */ unsigned char targetAvailable[4]; /* +0x0028 74 00 00 00 */ unsigned char statusFlags[4]; /* +0x002c 75 00 00 00 */ }; struct tagACTCTX_SECTION_KEYED_DATA_ASSEMBLY_METADATA { void *lpInformation; /* +0x0000 */ void *lpSectionBase; /* +0x0008 */ unsigned long ulSectionLength; /* +0x0010 */ void *lpSectionGlobalDataBase; /* +0x0018 */ unsigned long ulSectionGlobalDataLength; /* +0x0020 */ }; struct tagHANDLETABLE { unsigned char objectHandle[8]; /* +0x0000 84 44 00 00 */ }; struct _FILE_FS_DEVICE_INFORMATION { unsigned long DeviceType; /* +0x0000 */ unsigned long Characteristics; /* +0x0004 */ }; struct _CRYPT_INTERFACE_REG { unsigned long dwInterface; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned long cFunctions; /* +0x0008 */ unsigned char rgpszFunctions[8]; /* +0x0010 db 13 00 00 */ }; struct _IMAGE_TLS_DIRECTORY64 { unsigned long long StartAddressOfRawData; /* +0x0000 */ unsigned long long EndAddressOfRawData; /* +0x0008 */ unsigned long long AddressOfIndex; /* +0x0010 */ unsigned long long AddressOfCallBacks; /* +0x0018 */ unsigned long SizeOfZeroFill; /* +0x0020 */ unsigned long Characteristics; /* +0x0024 */ }; struct _SYSTEM_POOL_ENTRY { unsigned char Allocated; /* +0x0000 */ unsigned char Spare0; /* +0x0001 */ unsigned short AllocatorBackTraceIndex; /* +0x0002 */ unsigned long Size; /* +0x0004 */ /* unsigned char Tag[0]; +0x0008 cb 17 00 00 */ unsigned long TagUlong; /* +0x0008 */ void *ProcessChargedQuota; /* +0x0008 */ }; struct _PS_CREATE_INFO { unsigned long long Size; /* +0x0000 */ unsigned char State[8]; /* +0x0008 9e 44 00 00 */ /* unsigned char InitState[0]; +0x0010 9f 44 00 00 */ /* unsigned char FailSection[0]; +0x0010 a0 44 00 00 */ /* unsigned char ExeFormat[0]; +0x0010 a1 44 00 00 */ /* unsigned char ExeName[0]; +0x0010 a2 44 00 00 */ unsigned char SuccessState[72]; /* +0x0010 a3 44 00 00 */ }; struct _ALPC_CONTEXT_ATTR { void *PortContext; /* +0x0000 */ void *MessageContext; /* +0x0008 */ unsigned long Sequence; /* +0x0010 */ unsigned long MessageId; /* +0x0014 */ unsigned long CallbackId; /* +0x0018 */ }; struct _DRAWPATRECT { unsigned char ptPosition[8]; /* +0x0000 a1 14 00 00 */ unsigned char ptSize[8]; /* +0x0008 a1 14 00 00 */ unsigned short wStyle; /* +0x0010 */ unsigned short wPattern; /* +0x0012 */ }; struct DISPLAYCONFIG_MODE_INFO { unsigned char infoType[4]; /* +0x0000 c2 44 00 00 */ unsigned char id[4]; /* +0x0004 75 00 00 00 */ unsigned char adapterId[8]; /* +0x0008 38 15 00 00 */ /* unsigned char targetMode[0]; +0x0010 0e 25 00 00 */ unsigned char sourceMode[48]; /* +0x0010 c3 44 00 00 */ }; struct _POINTFLOAT { unsigned char x[4]; /* +0x0000 40 00 00 00 */ unsigned char y[4]; /* +0x0004 40 00 00 00 */ }; struct _BCRYPT_DSA_PARAMETER_HEADER_V2 { unsigned long cbLength; /* +0x0000 */ unsigned long dwMagic; /* +0x0004 */ unsigned long cbKeyLength; /* +0x0008 */ unsigned char hashAlgorithm[4]; /* +0x000c dc 44 00 00 */ unsigned char standardVersion[4]; /* +0x0010 dd 44 00 00 */ unsigned long cbSeedLength; /* +0x0014 */ unsigned long cbGroupSize; /* +0x0018 */ unsigned char Count[4]; /* +0x001c cb 17 00 00 */ }; struct _SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX { void *Object; /* +0x0000 */ unsigned long long UniqueProcessId; /* +0x0008 */ unsigned long long HandleValue; /* +0x0010 */ unsigned long GrantedAccess; /* +0x0018 */ unsigned short CreatorBackTraceIndex; /* +0x001c */ unsigned short ObjectTypeIndex; /* +0x001e */ unsigned long HandleAttributes; /* +0x0020 */ unsigned long Reserved; /* +0x0024 */ }; struct tagEMRBITBLT { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char rclBounds[16]; /* +0x0008 db 12 00 00 */ long xDest; /* +0x0018 */ long yDest; /* +0x001c */ long cxDest; /* +0x0020 */ long cyDest; /* +0x0024 */ unsigned long dwRop; /* +0x0028 */ long xSrc; /* +0x002c */ long ySrc; /* +0x0030 */ unsigned char xformSrc[24]; /* +0x0034 dc 12 00 00 */ unsigned long crBkColorSrc; /* +0x004c */ unsigned long iUsageSrc; /* +0x0050 */ unsigned long offBmiSrc; /* +0x0054 */ unsigned long cbBmiSrc; /* +0x0058 */ unsigned long offBitsSrc; /* +0x005c */ unsigned long cbBitsSrc; /* +0x0060 */ }; struct tagOleMenuGroupWidths { unsigned char width[24]; /* +0x0000 e6 44 00 00 */ }; struct _MUILANGCFGNODE { short LangSpec; /* +0x0000 */ unsigned short FallbackTypes; /* +0x0002 */ unsigned short Reserved; /* +0x0004 */ unsigned char FallbackSpecs[6]; /* +0x0006 ea 44 00 00 */ }; struct tagMDINEXTMENU { unsigned char hmenuIn[8]; /* +0x0000 63 15 00 00 */ unsigned char hmenuNext[8]; /* +0x0008 63 15 00 00 */ unsigned char hwndNext[8]; /* +0x0010 f7 12 00 00 */ }; struct _SYSTEM_VERIFIER_CANCELLATION_INFORMATION { unsigned long CancelProbability; /* +0x0000 */ unsigned long CancelThreshold; /* +0x0004 */ unsigned long CompletionThreshold; /* +0x0008 */ unsigned long CancellationVerifierDisabled; /* +0x000c */ unsigned long AvailableIssues; /* +0x0010 */ unsigned char Issues[4096]; /* +0x0018 f5 44 00 00 */ }; struct _NTFS_STATISTICS:: { unsigned long Calls; /* +0x0000 */ unsigned long Clusters; /* +0x0004 */ unsigned long Hints; /* +0x0008 */ unsigned long RunsReturned; /* +0x000c */ unsigned long HintsHonored; /* +0x0010 */ unsigned long HintsClusters; /* +0x0014 */ unsigned long Cache; /* +0x0018 */ unsigned long CacheClusters; /* +0x001c */ unsigned long CacheMiss; /* +0x0020 */ unsigned long CacheMissClusters; /* +0x0024 */ }; struct _NTFS_STATISTICS:: { unsigned short Write; /* +0x0000 */ unsigned short Create; /* +0x0002 */ unsigned short SetInfo; /* +0x0004 */ unsigned short Flush; /* +0x0006 */ }; struct _NTFS_STATISTICS:: { unsigned short Write; /* +0x0000 */ unsigned short Create; /* +0x0002 */ unsigned short SetInfo; /* +0x0004 */ }; struct _EXCEPTION_RECORD { long ExceptionCode; /* +0x0000 */ unsigned long ExceptionFlags; /* +0x0004 */ unsigned char ExceptionRecord[8]; /* +0x0008 13 29 00 00 */ void *ExceptionAddress; /* +0x0010 */ unsigned long NumberParameters; /* +0x0018 */ unsigned char ExceptionInformation[120]; /* +0x0020 1f 45 00 00 */ }; struct _APPLICATIONLAUNCH_SETTING_VALUE { unsigned char ActivationTime[8]; /* +0x0000 43 13 00 00 */ unsigned long Flags; /* +0x0008 */ unsigned long ButtonInstanceID; /* +0x000c */ }; struct _userCLIPFORMAT::__MIDL_IWinTypes_0001 { unsigned long dwValue; /* +0x0000 */ unsigned char pwszName[8]; /* +0x0000 71 06 00 00 */ }; struct tagSTDOBJREF { unsigned long flags; /* +0x0000 */ unsigned long cPublicRefs; /* +0x0004 */ unsigned long long oxid; /* +0x0008 */ unsigned long long oid; /* +0x0010 */ unsigned char ipid[16]; /* +0x0018 f3 14 00 00 */ }; struct _MEMORY_REGION_INFORMATION { void *AllocationBase; /* +0x0000 */ unsigned long AllocationProtect; /* +0x0008 */ unsigned long RegionType; /* +0x000c */ unsigned long long RegionSize; /* +0x0010 */ unsigned long long CommitSize; /* +0x0018 */ }; struct _userHMETAFILEPICT { long fContext; /* +0x0000 */ }; struct _userHMETAFILEPICT::__MIDL_IWinTypes_0005 { long hInproc; /* +0x0000 */ /* unsigned char hRemote[0]; +0x0000 3a 45 00 00 */ long long hInproc64; /* +0x0000 */ }; struct _wfinddata32_t { unsigned char attrib[4]; /* +0x0000 75 00 00 00 */ long time_create; /* +0x0004 */ long time_access; /* +0x0008 */ long time_write; /* +0x000c */ unsigned long size; /* +0x0010 */ unsigned char name[520]; /* +0x0014 00 16 00 00 */ }; struct _RPC_SECURITY_QOS_V5_W { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ unsigned long AdditionalSecurityInfoType; /* +0x0010 */ }; struct _SYSTEM_NUMA_INFORMATION { unsigned long HighestNodeNumber; /* +0x0000 */ unsigned long Reserved; /* +0x0004 */ /* unsigned char ActiveProcessorsGroupAffinity[0]; +0x0008 52 45 00 00 */ /* unsigned char AvailableMemory[0]; +0x0008 53 45 00 00 */ unsigned char Pad[1024]; /* +0x0008 ce 35 00 00 */ }; struct _RTL_UNLOAD_EVENT_TRACE64 { unsigned long long BaseAddress; /* +0x0000 */ unsigned long long SizeOfImage; /* +0x0008 */ unsigned long Sequence; /* +0x0010 */ unsigned long TimeDateStamp; /* +0x0014 */ unsigned long CheckSum; /* +0x0018 */ unsigned char ImageName[64]; /* +0x001c bf 15 00 00 */ unsigned char Version[12]; /* +0x005c 14 16 00 00 */ }; struct _KEY_NODE_INFORMATION { unsigned char LastWriteTime[8]; /* +0x0000 43 13 00 00 */ unsigned long TitleIndex; /* +0x0008 */ unsigned long ClassOffset; /* +0x000c */ unsigned long ClassLength; /* +0x0010 */ unsigned long NameLength; /* +0x0014 */ unsigned char Name[8]; /* +0x0018 0a 14 00 00 */ }; struct _CM_PARTIAL_RESOURCE_LIST { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned long Count; /* +0x0004 */ unsigned char PartialDescriptors[20]; /* +0x0008 5e 45 00 00 */ }; struct tagSTRINGBINDING { unsigned short wTowerId; /* +0x0000 */ unsigned short aNetworkAddr; /* +0x0002 */ }; struct _MALLOC_FREE_STRUCT { unsigned char pfnAllocate[8]; /* +0x0000 ff 16 00 00 */ unsigned char pfnFree[8]; /* +0x0008 d2 13 00 00 */ }; struct _tagDATAINFO { unsigned long ulTotalSize; /* +0x0000 */ unsigned long ulavrPacketSize; /* +0x0004 */ unsigned long ulConnectSpeed; /* +0x0008 */ unsigned long ulProcessorSpeed; /* +0x000c */ }; struct _PLUGPLAY_CONTROL_QUERY_AND_REMOVE_DATA { unsigned char DeviceInstance[16]; /* +0x0000 e3 12 00 00 */ unsigned long Flags; /* +0x0010 */ unsigned char VetoType[4]; /* +0x0014 43 19 00 00 */ unsigned char VetoName[8]; /* +0x0018 71 06 00 00 */ unsigned long VetoNameLength; /* +0x0020 */ }; struct _RTL_HEAP_TAG_INFO { unsigned long NumberOfAllocations; /* +0x0000 */ unsigned long NumberOfFrees; /* +0x0004 */ unsigned long long BytesAllocated; /* +0x0008 */ }; struct _RPC_HTTP_TRANSPORT_CREDENTIALS_V2_W { unsigned char TransportCredentials[8]; /* +0x0000 2d 1d 00 00 */ unsigned long Flags; /* +0x0008 */ unsigned long AuthenticationTarget; /* +0x000c */ unsigned long NumberOfAuthnSchemes; /* +0x0010 */ unsigned long *AuthnSchemes; /* +0x0018 */ unsigned short *ServerCertificateSubject; /* +0x0020 */ unsigned char ProxyCredentials[8]; /* +0x0028 2d 1d 00 00 */ unsigned long NumberOfProxyAuthnSchemes; /* +0x0030 */ unsigned long *ProxyAuthnSchemes; /* +0x0038 */ }; struct CONFIRMSAFETY { unsigned char clsid[16]; /* +0x0000 f3 14 00 00 */ unsigned char pUnk[8]; /* +0x0010 93 17 00 00 */ unsigned long dwFlags; /* +0x0018 */ }; struct _FILE_NOTIFY_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long Action; /* +0x0004 */ unsigned long FileNameLength; /* +0x0008 */ unsigned char FileName[4]; /* +0x000c 0a 14 00 00 */ }; struct _ENLISTMENT_CRM_INFORMATION { unsigned char CrmTransactionManagerId[16]; /* +0x0000 f3 14 00 00 */ unsigned char CrmResourceManagerId[16]; /* +0x0010 f3 14 00 00 */ unsigned char CrmEnlistmentId[16]; /* +0x0020 f3 14 00 00 */ }; struct _EXCEPTION_RECORD64 { long ExceptionCode; /* +0x0000 */ unsigned long ExceptionFlags; /* +0x0004 */ unsigned long long ExceptionRecord; /* +0x0008 */ unsigned long long ExceptionAddress; /* +0x0010 */ unsigned long NumberParameters; /* +0x0018 */ unsigned long __unusedAlignment; /* +0x001c */ unsigned char ExceptionInformation[120]; /* +0x0020 1f 45 00 00 */ }; struct _WNF_UPDATE_DESCRIPTOR { unsigned char StateName[8]; /* +0x0000 fa 13 00 00 */ unsigned char TypeId[8]; /* +0x0008 aa 30 00 00 */ unsigned char StateData[8]; /* +0x0010 4f 19 00 00 */ unsigned long Length; /* +0x0018 */ void *ExplicitScope; /* +0x0020 */ }; struct _SD_QUERY_STATS_INPUT { unsigned long Reserved; /* +0x0000 */ }; struct tagEMRRESIZEPALETTE { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned long ihPal; /* +0x0008 */ unsigned long cEntries; /* +0x000c */ }; struct _FP_128 { unsigned char W[16]; /* +0x0000 66 1a 00 00 */ }; struct _LUID_AND_ATTRIBUTES { unsigned char Luid[8]; /* +0x0000 38 15 00 00 */ unsigned long Attributes; /* +0x0008 */ }; struct _SID { unsigned char Revision; /* +0x0000 */ unsigned char SubAuthorityCount; /* +0x0001 */ unsigned char IdentifierAuthority[6]; /* +0x0002 28 14 00 00 */ unsigned char SubAuthority[4]; /* +0x0008 fc 12 00 00 */ }; struct _OBJECT_TYPE_LIST { unsigned short Level; /* +0x0000 */ unsigned short Sbz; /* +0x0002 */ unsigned char ObjectType[8]; /* +0x0008 61 16 00 00 */ }; enum RO_INIT_TYPE { RO_INIT_SINGLETHREADED = 0, RO_INIT_MULTITHREADED = 1 }; struct _TOKEN_SECURITY_ATTRIBUTES_AND_OPERATION_INFORMATION { unsigned char Attributes[8]; /* +0x0000 a0 3f 00 00 */ unsigned char Operations[8]; /* +0x0008 4d 27 00 00 */ }; struct _FILE_FS_OBJECTID_INFORMATION { unsigned char ObjectId[16]; /* +0x0000 33 1c 00 00 */ unsigned char ExtendedInfo[48]; /* +0x0010 34 1c 00 00 */ }; struct _TIME_ZONE_INFORMATION { long Bias; /* +0x0000 */ unsigned char StandardName[64]; /* +0x0004 bf 15 00 00 */ unsigned char StandardDate[16]; /* +0x0044 c0 15 00 00 */ long StandardBias; /* +0x0054 */ unsigned char DaylightName[64]; /* +0x0058 bf 15 00 00 */ unsigned char DaylightDate[16]; /* +0x0098 c0 15 00 00 */ long DaylightBias; /* +0x00a8 */ }; struct _CERT_POLICY95_QUALIFIER1 { unsigned char pszPracticesReference[8]; /* +0x0000 71 06 00 00 */ char *pszNoticeIdentifier; /* +0x0008 */ char *pszNSINoticeIdentifier; /* +0x0010 */ unsigned long cCPSURLs; /* +0x0018 */ unsigned char rgCPSURLs[8]; /* +0x0020 04 31 00 00 */ }; struct _POWER_MONITOR_INVOCATION { unsigned char On; /* +0x0000 */ unsigned char Console; /* +0x0001 */ }; struct _SYSTEM_FIRMWARE_TABLE_HANDLER { unsigned long ProviderSignature; /* +0x0000 */ unsigned char Register; /* +0x0004 */ unsigned char FirmwareTableHandler[8]; /* +0x0008 b7 16 00 00 */ void *DriverObject; /* +0x0010 */ }; struct tagNCCALCSIZE_PARAMS { unsigned char rgrc[48]; /* +0x0000 2b 46 00 00 */ unsigned char lppos[8]; /* +0x0030 32 2c 00 00 */ }; struct _IMAGE_DELAYLOAD_DESCRIPTOR:: { unsigned long AllAttributes; /* +0x0000 */ /* unsigned char RvaBased[0]; +0x0000 94 13 00 00 */ unsigned char ReservedAttributes[4]; /* +0x0000 95 13 00 00 */ }; struct _PROCESS_MITIGATION_ASLR_POLICY { unsigned long Flags; /* +0x0000 */ /* unsigned char EnableStackRandomization[0]; +0x0000 94 13 00 00 */ /* unsigned char EnableForceRelocateImages[0]; +0x0000 90 18 00 00 */ /* unsigned char EnableHighEntropy[0]; +0x0000 91 18 00 00 */ /* unsigned char DisallowStrippedImages[0]; +0x0000 74 1e 00 00 */ unsigned char ReservedFlags[4]; /* +0x0000 31 46 00 00 */ }; struct _QUERY_SERVICE_LOCK_STATUSA { unsigned long fIsLocked; /* +0x0000 */ char *lpLockOwner; /* +0x0008 */ unsigned long dwLockDuration; /* +0x0010 */ }; struct _RTL_PROCESS_MODULE_INFORMATION { void *Section; /* +0x0000 */ void *MappedBase; /* +0x0008 */ void *ImageBase; /* +0x0010 */ unsigned long ImageSize; /* +0x0018 */ unsigned long Flags; /* +0x001c */ unsigned short LoadOrderIndex; /* +0x0020 */ unsigned short InitOrderIndex; /* +0x0022 */ unsigned short LoadCount; /* +0x0024 */ unsigned short OffsetToFileName; /* +0x0026 */ unsigned char FullPathName[256]; /* +0x0028 90 16 00 00 */ }; struct tagEMRGRADIENTFILL { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned char rclBounds[16]; /* +0x0008 db 12 00 00 */ unsigned long nVer; /* +0x0018 */ unsigned long nTri; /* +0x001c */ unsigned long ulMode; /* +0x0020 */ unsigned char Ver[16]; /* +0x0024 4a 46 00 00 */ }; struct _LDR_DLL_UNLOADED_NOTIFICATION_DATA { unsigned long Flags; /* +0x0000 */ unsigned char FullDllName[8]; /* +0x0008 ef 19 00 00 */ unsigned char BaseDllName[8]; /* +0x0010 ef 19 00 00 */ void *DllBase; /* +0x0018 */ unsigned long SizeOfImage; /* +0x0020 */ }; struct tagTPMPARAMS { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char rcExclude[16]; /* +0x0004 7a 14 00 00 */ }; struct _TXFS_READ_BACKUP_INFORMATION_OUT { unsigned long BufferLength; /* +0x0000 */ unsigned char Buffer[4]; /* +0x0000 ff 12 00 00 */ }; struct _HEAP_BLOCK_INFORMATION { unsigned long long Address; /* +0x0000 */ unsigned long Flags; /* +0x0008 */ unsigned long long DataSize; /* +0x0010 */ unsigned long long OverheadSize; /* +0x0018 */ unsigned long long NextBlockInformationOffset; /* +0x0020 */ }; struct _TP_DEBUG_FREE_INFO { unsigned long FreeListSize; /* +0x0000 */ }; struct _CMC_STATUS_INFO { unsigned long dwStatus; /* +0x0000 */ unsigned long cBodyList; /* +0x0004 */ unsigned long *rgdwBodyList; /* +0x0008 */ unsigned char pwszStatusString[8]; /* +0x0010 71 06 00 00 */ unsigned long dwOtherInfoChoice; /* +0x0018 */ unsigned long dwFailInfo; /* +0x0020 */ unsigned char pPendInfo[8]; /* +0x0020 42 34 00 00 */ }; struct _SYSDBG_PHYSICAL { unsigned char Address[8]; /* +0x0000 43 13 00 00 */ void *Buffer; /* +0x0008 */ unsigned long Request; /* +0x0010 */ }; struct _PREFIX_TABLE_ENTRY { short NodeTypeCode; /* +0x0000 */ short NameLength; /* +0x0002 */ unsigned char NextPrefixTree[8]; /* +0x0008 5c 30 00 00 */ unsigned char Links[24]; /* +0x0010 b5 17 00 00 */ unsigned char Prefix[8]; /* +0x0028 e9 17 00 00 */ }; struct _PAGEDIR_INFORMATION { /* unsigned char DontUse[0]; +0x0000 c1 29 00 00 */ /* unsigned char PageDirectoryBase[0]; +0x0000 c2 29 00 00 */ unsigned char Reserved[8]; /* +0x0000 c3 29 00 00 */ }; struct _ENLISTMENT_BASIC_INFORMATION { unsigned char EnlistmentId[16]; /* +0x0000 f3 14 00 00 */ unsigned char TransactionId[16]; /* +0x0010 f3 14 00 00 */ unsigned char ResourceManagerId[16]; /* +0x0020 f3 14 00 00 */ }; struct _TOKEN_SECURITY_ATTRIBUTE_RELATIVE_V1:: { /* unsigned char pInt64[0]; +0x0000 fc 12 00 00 */ /* unsigned char pUint64[0]; +0x0000 fc 12 00 00 */ /* unsigned char ppString[0]; +0x0000 fc 12 00 00 */ /* unsigned char pFqbn[0]; +0x0000 fc 12 00 00 */ unsigned char pOctetString[4]; /* +0x0000 fc 12 00 00 */ }; struct _IMAGE_ROM_OPTIONAL_HEADER { unsigned short Magic; /* +0x0000 */ unsigned char MajorLinkerVersion; /* +0x0002 */ unsigned char MinorLinkerVersion; /* +0x0003 */ unsigned long SizeOfCode; /* +0x0004 */ unsigned long SizeOfInitializedData; /* +0x0008 */ unsigned long SizeOfUninitializedData; /* +0x000c */ unsigned long AddressOfEntryPoint; /* +0x0010 */ unsigned long BaseOfCode; /* +0x0014 */ unsigned long BaseOfData; /* +0x0018 */ unsigned long BaseOfBss; /* +0x001c */ unsigned long GprMask; /* +0x0020 */ unsigned char CprMask[16]; /* +0x0024 66 1a 00 00 */ unsigned long GpValue; /* +0x0034 */ }; struct COPYFILE2_MESSAGE { unsigned char Type[4]; /* +0x0000 b7 46 00 00 */ unsigned long dwPadding; /* +0x0004 */ }; struct COPYFILE2_MESSAGE:::: { unsigned char CopyPhase[4]; /* +0x0000 c3 46 00 00 */ unsigned long dwStreamNumber; /* +0x0004 */ unsigned char hrFailure[4]; /* +0x0008 08 00 00 00 */ unsigned long dwReserved; /* +0x000c */ unsigned char uliChunkNumber[8]; /* +0x0010 3e 23 00 00 */ unsigned char uliStreamSize[8]; /* +0x0018 3e 23 00 00 */ unsigned char uliStreamBytesTransferred[8]; /* +0x0020 3e 23 00 00 */ unsigned char uliTotalFileSize[8]; /* +0x0028 3e 23 00 00 */ unsigned char uliTotalBytesTransferred[8]; /* +0x0030 3e 23 00 00 */ }; struct COPYFILE2_MESSAGE:::: { unsigned long dwReserved; /* +0x0000 */ }; struct COPYFILE2_MESSAGE:::: { unsigned long dwStreamNumber; /* +0x0000 */ unsigned long dwReserved; /* +0x0004 */ void *hSourceFile; /* +0x0008 */ void *hDestinationFile; /* +0x0010 */ unsigned char uliStreamSize[8]; /* +0x0018 3e 23 00 00 */ unsigned char uliStreamBytesTransferred[8]; /* +0x0020 3e 23 00 00 */ unsigned char uliTotalFileSize[8]; /* +0x0028 3e 23 00 00 */ unsigned char uliTotalBytesTransferred[8]; /* +0x0030 3e 23 00 00 */ }; struct COPYFILE2_MESSAGE:::: { unsigned long dwStreamNumber; /* +0x0000 */ unsigned long dwReserved; /* +0x0004 */ void *hSourceFile; /* +0x0008 */ void *hDestinationFile; /* +0x0010 */ unsigned char uliStreamSize[8]; /* +0x0018 3e 23 00 00 */ unsigned char uliTotalFileSize[8]; /* +0x0020 3e 23 00 00 */ }; struct COPYFILE2_MESSAGE:::: { unsigned long dwStreamNumber; /* +0x0000 */ unsigned long dwReserved; /* +0x0004 */ void *hSourceFile; /* +0x0008 */ void *hDestinationFile; /* +0x0010 */ unsigned char uliChunkNumber[8]; /* +0x0018 3e 23 00 00 */ unsigned char uliChunkSize[8]; /* +0x0020 3e 23 00 00 */ unsigned char uliStreamSize[8]; /* +0x0028 3e 23 00 00 */ unsigned char uliStreamBytesTransferred[8]; /* +0x0030 3e 23 00 00 */ unsigned char uliTotalFileSize[8]; /* +0x0038 3e 23 00 00 */ unsigned char uliTotalBytesTransferred[8]; /* +0x0040 3e 23 00 00 */ }; struct COPYFILE2_MESSAGE:::: { unsigned long dwStreamNumber; /* +0x0000 */ unsigned long dwReserved; /* +0x0004 */ void *hSourceFile; /* +0x0008 */ void *hDestinationFile; /* +0x0010 */ unsigned char uliChunkNumber[8]; /* +0x0018 3e 23 00 00 */ unsigned char uliChunkSize[8]; /* +0x0020 3e 23 00 00 */ unsigned char uliStreamSize[8]; /* +0x0028 3e 23 00 00 */ unsigned char uliTotalFileSize[8]; /* +0x0030 3e 23 00 00 */ }; struct _SYSTEM_MEMORY_LIST_INFORMATION { unsigned long long ZeroPageCount; /* +0x0000 */ unsigned long long FreePageCount; /* +0x0008 */ unsigned long long ModifiedPageCount; /* +0x0010 */ unsigned long long ModifiedNoWritePageCount; /* +0x0018 */ unsigned long long BadPageCount; /* +0x0020 */ unsigned char PageCountByPriority[64]; /* +0x0028 52 1e 00 00 */ unsigned char RepurposedPagesByPriority[64]; /* +0x0068 52 1e 00 00 */ unsigned long long ModifiedPageCountPageFile; /* +0x00a8 */ }; struct _INPUT_RECORD { unsigned short EventType; /* +0x0000 */ }; struct _TXFS_LIST_TRANSACTION_LOCKED_FILES_ENTRY { unsigned long long Offset; /* +0x0000 */ unsigned long NameFlags; /* +0x0008 */ long long FileId; /* +0x0010 */ unsigned long Reserved1; /* +0x0018 */ unsigned long Reserved2; /* +0x001c */ long long Reserved3; /* +0x0020 */ unsigned char FileName[8]; /* +0x0028 0a 14 00 00 */ }; struct _RPC_HTTP_TRANSPORT_CREDENTIALS_W { unsigned char TransportCredentials[8]; /* +0x0000 2d 1d 00 00 */ unsigned long Flags; /* +0x0008 */ unsigned long AuthenticationTarget; /* +0x000c */ unsigned long NumberOfAuthnSchemes; /* +0x0010 */ unsigned long *AuthnSchemes; /* +0x0018 */ unsigned short *ServerCertificateSubject; /* +0x0020 */ }; struct _ACL_SIZE_INFORMATION { unsigned long AceCount; /* +0x0000 */ unsigned long AclBytesInUse; /* +0x0004 */ unsigned long AclBytesFree; /* +0x0008 */ }; struct _TIMER_BASIC_INFORMATION { unsigned char RemainingTime[8]; /* +0x0000 43 13 00 00 */ unsigned char TimerState; /* +0x0008 */ }; struct _CERT_CRL_CONTEXT_PAIR { unsigned char pCertContext[8]; /* +0x0000 c4 13 00 00 */ unsigned char pCrlContext[8]; /* +0x0008 0c 20 00 00 */ }; struct _IMAGE_TLS_DIRECTORY32 { unsigned long StartAddressOfRawData; /* +0x0000 */ unsigned long EndAddressOfRawData; /* +0x0004 */ unsigned long AddressOfIndex; /* +0x0008 */ unsigned long AddressOfCallBacks; /* +0x000c */ unsigned long SizeOfZeroFill; /* +0x0010 */ unsigned long Characteristics; /* +0x0014 */ }; struct _REASON_BUFFER { unsigned long Flags; /* +0x0000 */ unsigned long long ResourceFileNameOffset; /* +0x0008 */ unsigned short ResourceReasonId; /* +0x0010 */ unsigned long StringCount; /* +0x0014 */ unsigned long long SubstitutionStringsOffset; /* +0x0018 */ unsigned long long SimpleStringOffset; /* +0x0008 */ }; struct _SHQUERYRBINFO { unsigned long cbSize; /* +0x0000 */ long long i64Size; /* +0x0008 */ long long i64NumItems; /* +0x0010 */ }; struct _WORKER_FACTORY_BASIC_INFORMATION { unsigned char Timeout[8]; /* +0x0000 43 13 00 00 */ unsigned char RetryTimeout[8]; /* +0x0008 43 13 00 00 */ unsigned char IdleTimeout[8]; /* +0x0010 43 13 00 00 */ unsigned char Paused; /* +0x0018 */ unsigned char TimerSet; /* +0x0019 */ unsigned char QueuedToExWorker; /* +0x001a */ unsigned char MayCreate; /* +0x001b */ unsigned char CreateInProgress; /* +0x001c */ unsigned char InsertedIntoQueue; /* +0x001d */ unsigned char Shutdown; /* +0x001e */ unsigned long BindingCount; /* +0x0020 */ unsigned long ThreadMinimum; /* +0x0024 */ unsigned long ThreadMaximum; /* +0x0028 */ unsigned long PendingWorkerCount; /* +0x002c */ unsigned long WaitingWorkerCount; /* +0x0030 */ unsigned long TotalWorkerCount; /* +0x0034 */ unsigned long ReleaseCount; /* +0x0038 */ long long InfiniteWaitGoal; /* +0x0040 */ unsigned char StartRoutine[8]; /* +0x0048 df 19 00 00 */ void *StartParameter; /* +0x0050 */ void *ProcessId; /* +0x0058 */ unsigned long long StackReserve; /* +0x0060 */ unsigned long long StackCommit; /* +0x0068 */ long LastThreadCreationStatus; /* +0x0070 */ }; struct _IMAGE_BOUND_IMPORT_DESCRIPTOR { unsigned long TimeDateStamp; /* +0x0000 */ unsigned short OffsetModuleName; /* +0x0004 */ unsigned short NumberOfModuleForwarderRefs; /* +0x0006 */ }; struct _TOKEN_DEVICE_CLAIMS { void *DeviceClaims; /* +0x0000 */ }; struct tagMInterfacePointer { unsigned long ulCntData; /* +0x0000 */ unsigned char abData[4]; /* +0x0004 ff 12 00 00 */ }; struct _TEB_ACTIVE_FRAME { unsigned long Flags; /* +0x0000 */ unsigned char Previous[8]; /* +0x0008 ae 2e 00 00 */ unsigned char Context[8]; /* +0x0010 52 47 00 00 */ }; struct _ACCESS_REASONS { unsigned char Data[128]; /* +0x0000 6d 30 00 00 */ }; struct _OCSP_BASIC_RESPONSE_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned long dwResponderIdChoice; /* +0x0004 */ /* unsigned char ByNameResponderId[0]; +0x0008 08 13 00 00 */ unsigned char ByKeyResponderId[16]; /* +0x0008 08 13 00 00 */ unsigned char ProducedAt[8]; /* +0x0018 37 13 00 00 */ unsigned long cResponseEntry; /* +0x0020 */ unsigned char rgResponseEntry[8]; /* +0x0028 8b 2f 00 00 */ unsigned long cExtension; /* +0x0030 */ unsigned char rgExtension[8]; /* +0x0038 3f 16 00 00 */ }; struct _CMC_TAGGED_OTHER_MSG { unsigned long dwBodyPartID; /* +0x0000 */ char *pszObjId; /* +0x0008 */ unsigned char Value[16]; /* +0x0010 08 13 00 00 */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long Length64; /* +0x0000 */ unsigned long Alignment64; /* +0x0004 */ unsigned char MinimumAddress[8]; /* +0x0008 43 13 00 00 */ unsigned char MaximumAddress[8]; /* +0x0010 43 13 00 00 */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long Length48; /* +0x0000 */ unsigned long Alignment48; /* +0x0004 */ unsigned char MinimumAddress[8]; /* +0x0008 43 13 00 00 */ unsigned char MaximumAddress[8]; /* +0x0010 43 13 00 00 */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long Length40; /* +0x0000 */ unsigned long Alignment40; /* +0x0004 */ unsigned char MinimumAddress[8]; /* +0x0008 43 13 00 00 */ unsigned char MaximumAddress[8]; /* +0x0010 43 13 00 00 */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long Priority; /* +0x0000 */ unsigned long Reserved1; /* +0x0004 */ unsigned long Reserved2; /* +0x0008 */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long Length; /* +0x0000 */ unsigned long MinBusNumber; /* +0x0004 */ unsigned long MaxBusNumber; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long Length; /* +0x0000 */ unsigned long Alignment; /* +0x0004 */ unsigned char MinimumAddress[8]; /* +0x0008 43 13 00 00 */ unsigned char MaximumAddress[8]; /* +0x0010 43 13 00 00 */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long RequestLine; /* +0x0000 */ unsigned long Reserved; /* +0x0004 */ unsigned long Channel; /* +0x0008 */ unsigned long TransferWidth; /* +0x000c */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long MinimumChannel; /* +0x0000 */ unsigned long MaximumChannel; /* +0x0004 */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long MinimumVector; /* +0x0000 */ unsigned long MaximumVector; /* +0x0004 */ unsigned char AffinityPolicy[4]; /* +0x0008 a8 42 00 00 */ unsigned char PriorityPolicy[4]; /* +0x000c b0 2f 00 00 */ unsigned long long TargetedProcessors; /* +0x0010 */ }; struct _XSAVE_SUPPORTED_CPU { unsigned char CpuInfo[32]; /* +0x0000 ed 15 00 00 */ /* unsigned char CpuErrata[0]; +0x0020 77 1c 00 00 */ unsigned long long Unused; /* +0x0020 */ }; struct _PLUGPLAY_CONTROL_PROPERTY_DATA { unsigned char DeviceInstance[16]; /* +0x0000 e3 12 00 00 */ unsigned long PropertyType; /* +0x0010 */ void *Buffer; /* +0x0018 */ unsigned long BufferSize; /* +0x0020 */ }; struct tm { unsigned char tm_sec[4]; /* +0x0000 74 00 00 00 */ unsigned char tm_min[4]; /* +0x0004 74 00 00 00 */ unsigned char tm_hour[4]; /* +0x0008 74 00 00 00 */ unsigned char tm_mday[4]; /* +0x000c 74 00 00 00 */ unsigned char tm_mon[4]; /* +0x0010 74 00 00 00 */ unsigned char tm_year[4]; /* +0x0014 74 00 00 00 */ unsigned char tm_wday[4]; /* +0x0018 74 00 00 00 */ unsigned char tm_yday[4]; /* +0x001c 74 00 00 00 */ unsigned char tm_isdst[4]; /* +0x0020 74 00 00 00 */ }; struct _HARDWARE_COUNTER { unsigned char Type[4]; /* +0x0000 e3 19 00 00 */ unsigned long Reserved; /* +0x0004 */ unsigned long long Index; /* +0x0008 */ }; struct _INPUT_RECORD:: { /* unsigned char KeyEvent[0]; +0x0000 10 48 00 00 */ /* unsigned char MouseEvent[0]; +0x0000 57 2f 00 00 */ /* unsigned char WindowBufferSizeEvent[0]; +0x0000 11 48 00 00 */ /* unsigned char MenuEvent[0]; +0x0000 ac 33 00 00 */ unsigned char FocusEvent[16]; /* +0x0000 70 45 00 00 */ }; struct _IMAGE_LINENUMBER:: { unsigned long SymbolTableIndex; /* +0x0000 */ unsigned long VirtualAddress; /* +0x0000 */ }; struct _REMOTE_PORT_VIEW { unsigned long Length; /* +0x0000 */ unsigned long long ViewSize; /* +0x0008 */ void *ViewBase; /* +0x0010 */ }; struct _FSCTL_INTEGRITY_INFORMATION_BUFFER { unsigned short ChecksumAlgorithm; /* +0x0000 */ unsigned short Reserved; /* +0x0002 */ unsigned long Flags; /* +0x0004 */ }; struct _PSFEATURE_CUSTPAPER { long lOrientation; /* +0x0000 */ long lWidth; /* +0x0004 */ long lHeight; /* +0x0008 */ long lWidthOffset; /* +0x000c */ long lHeightOffset; /* +0x0010 */ }; struct tagNEWTEXTMETRICEXW { unsigned char ntmTm[76]; /* +0x0000 15 3b 00 00 */ unsigned char ntmFontSig[24]; /* +0x004c 8c 20 00 00 */ }; struct tagCUSTDATAITEM { unsigned char guid[16]; /* +0x0000 f3 14 00 00 */ unsigned char varValue[24]; /* +0x0010 4d 18 00 00 */ }; struct _RGNDATAHEADER { unsigned long dwSize; /* +0x0000 */ unsigned long iType; /* +0x0004 */ unsigned long nCount; /* +0x0008 */ unsigned long nRgnSize; /* +0x000c */ unsigned char rcBound[16]; /* +0x0010 7a 14 00 00 */ }; struct _SECURITY_SEED_AND_LENGTH { unsigned char Length; /* +0x0000 */ unsigned char Seed; /* +0x0001 */ }; struct tagEMRFORMAT { unsigned long dSignature; /* +0x0000 */ unsigned long nVersion; /* +0x0004 */ unsigned long cbData; /* +0x0008 */ unsigned long offData; /* +0x000c */ }; struct _PS_CREATE_INFO:::: { unsigned long OutputFlags; /* +0x0000 */ /* unsigned char ProtectedProcess[0]; +0x0000 a2 1e 00 00 */ /* unsigned char AddressSpaceOverride[0]; +0x0000 a3 1e 00 00 */ /* unsigned char DevOverrideEnabled[0]; +0x0000 a4 1e 00 00 */ /* unsigned char ManifestDetected[0]; +0x0000 28 26 00 00 */ unsigned char SpareBits1[1]; /* +0x0000 eb 13 00 00 */ unsigned char SpareBits2[1]; /* +0x0001 56 48 00 00 */ unsigned char SpareBits3[6]; /* +0x0002 b0 2e 00 00 */ void *FileHandle; /* +0x0008 */ void *SectionHandle; /* +0x0010 */ unsigned long long UserProcessParametersNative; /* +0x0018 */ unsigned long UserProcessParametersWow64; /* +0x0020 */ unsigned long CurrentParameterFlags; /* +0x0024 */ unsigned long long PebAddressNative; /* +0x0028 */ unsigned long PebAddressWow64; /* +0x0030 */ unsigned long long ManifestAddress; /* +0x0038 */ unsigned long ManifestSize; /* +0x0040 */ }; struct _PS_CREATE_INFO:::: { void *IFEOKey; /* +0x0000 */ }; struct _PS_CREATE_INFO:::: { unsigned short DllCharacteristics; /* +0x0000 */ }; struct _PS_CREATE_INFO:::: { void *FileHandle; /* +0x0000 */ }; struct _PS_CREATE_INFO:::: { unsigned long InitFlags; /* +0x0000 */ /* unsigned char WriteOutputOnExit[0]; +0x0000 a2 1e 00 00 */ /* unsigned char DetectManifest[0]; +0x0000 a3 1e 00 00 */ /* unsigned char IFEOSkipDebugger[0]; +0x0000 a4 1e 00 00 */ /* unsigned char IFEODoNotPropagateKeyState[0]; +0x0000 28 26 00 00 */ unsigned char SpareBits1[1]; /* +0x0000 eb 13 00 00 */ unsigned char SpareBits2[1]; /* +0x0001 56 48 00 00 */ unsigned char ProhibitedImageCharacteristics[2]; /* +0x0002 b0 2e 00 00 */ unsigned long AdditionalFileAccess; /* +0x0004 */ }; struct _RTL_HEAP_TAG { unsigned long NumberOfAllocations; /* +0x0000 */ unsigned long NumberOfFrees; /* +0x0004 */ unsigned long long BytesAllocated; /* +0x0008 */ unsigned short TagIndex; /* +0x0010 */ unsigned short CreatorBackTraceIndex; /* +0x0012 */ unsigned char TagName[52]; /* +0x0014 65 48 00 00 */ }; struct _SYSTEM_FIRMWARE_TABLE_INFORMATION { unsigned long ProviderSignature; /* +0x0000 */ unsigned char Action[4]; /* +0x0004 6c 48 00 00 */ unsigned long TableID; /* +0x0008 */ unsigned long TableBufferLength; /* +0x000c */ unsigned char TableBuffer[4]; /* +0x0010 ff 12 00 00 */ }; struct _SD_GLOBAL_CHANGE_OUTPUT { unsigned long Flags; /* +0x0000 */ unsigned long ChangeType; /* +0x0004 */ /* unsigned char SdChange[0]; +0x0008 82 21 00 00 */ /* unsigned char SdQueryStats[0]; +0x0008 df 36 00 00 */ unsigned char SdEnumSds[64]; /* +0x0008 a8 44 00 00 */ }; struct tagLOGBRUSH { unsigned char lbStyle[4]; /* +0x0000 75 00 00 00 */ unsigned long lbColor; /* +0x0004 */ unsigned long long lbHatch; /* +0x0008 */ }; struct _BCRYPT_KEY_DATA_BLOB_HEADER { unsigned long dwMagic; /* +0x0000 */ unsigned long dwVersion; /* +0x0004 */ unsigned long cbKeyData; /* +0x0008 */ }; struct _IO_STATUS_BLOCK { long Status; /* +0x0000 */ void *Pointer; /* +0x0000 */ unsigned long long Information; /* +0x0008 */ }; struct _xml_error { unsigned char _nLine[8]; /* +0x0000 75 00 00 00 */ unsigned char _pchBuf[8]; /* +0x0008 71 06 00 00 */ unsigned char _cchBuf[4]; /* +0x0010 75 00 00 00 */ unsigned char _ich[4]; /* +0x0014 75 00 00 00 */ unsigned char _pszFound[8]; /* +0x0018 71 06 00 00 */ unsigned char _pszExpected[8]; /* +0x0020 71 06 00 00 */ unsigned long _reserved1; /* +0x0028 */ unsigned long _reserved2; /* +0x002c */ }; struct _RemotableHandle::__MIDL_IWinTypes_0009 { long hInproc; /* +0x0000 */ long hRemote; /* +0x0000 */ }; struct _PROCESS_EXTENDED_BASIC_INFORMATION64 { unsigned long long Size; /* +0x0000 */ unsigned char BasicInfo[48]; /* +0x0008 bc 48 00 00 */ /* unsigned char Flags[0]; +0x0038 75 00 00 00 */ /* unsigned char IsProtectedProcess[0]; +0x0038 f8 1c 00 00 */ /* unsigned char IsWow64Process[0]; +0x0038 f9 1c 00 00 */ /* unsigned char IsProcessDeleting[0]; +0x0038 fa 1c 00 00 */ /* unsigned char IsCrossSessionCreate[0]; +0x0038 bd 48 00 00 */ unsigned char SpareBits[8]; /* +0x0038 be 48 00 00 */ }; struct _OVERLAPPED { unsigned long long Internal; /* +0x0000 */ unsigned long long InternalHigh; /* +0x0008 */ unsigned long Offset; /* +0x0010 */ unsigned long OffsetHigh; /* +0x0014 */ void *Pointer; /* +0x0010 */ void *hEvent; /* +0x0018 */ }; struct tagRID_DEVICE_INFO_HID { unsigned long dwVendorId; /* +0x0000 */ unsigned long dwProductId; /* +0x0004 */ unsigned long dwVersionNumber; /* +0x0008 */ unsigned short usUsagePage; /* +0x000c */ unsigned short usUsage; /* +0x000e */ }; struct tagOIFI { unsigned char cb[4]; /* +0x0000 75 00 00 00 */ unsigned char fMDIApp[4]; /* +0x0004 74 00 00 00 */ unsigned char hwndFrame[8]; /* +0x0008 f7 12 00 00 */ unsigned char haccel[8]; /* +0x0010 01 22 00 00 */ unsigned char cAccelEntries[8]; /* +0x0018 75 00 00 00 */ }; struct _BCRYPT_OID { unsigned long cbOID; /* +0x0000 */ unsigned char *pbOID; /* +0x0008 */ }; struct IMAGE_LOAD_CONFIG_DIRECTORY64 { unsigned long Size; /* +0x0000 */ unsigned long TimeDateStamp; /* +0x0004 */ unsigned short MajorVersion; /* +0x0008 */ unsigned short MinorVersion; /* +0x000a */ unsigned long GlobalFlagsClear; /* +0x000c */ unsigned long GlobalFlagsSet; /* +0x0010 */ unsigned long CriticalSectionDefaultTimeout; /* +0x0014 */ unsigned long long DeCommitFreeBlockThreshold; /* +0x0018 */ unsigned long long DeCommitTotalFreeThreshold; /* +0x0020 */ unsigned long long LockPrefixTable; /* +0x0028 */ unsigned long long MaximumAllocationSize; /* +0x0030 */ unsigned long long VirtualMemoryThreshold; /* +0x0038 */ unsigned long long ProcessAffinityMask; /* +0x0040 */ unsigned long ProcessHeapFlags; /* +0x0048 */ unsigned short CSDVersion; /* +0x004c */ unsigned short Reserved1; /* +0x004e */ unsigned long long EditList; /* +0x0050 */ unsigned long long SecurityCookie; /* +0x0058 */ unsigned long long SEHandlerTable; /* +0x0060 */ unsigned long long SEHandlerCount; /* +0x0068 */ }; struct _RTL_DYNAMIC_TIME_ZONE_INFORMATION { unsigned char tzi[172]; /* +0x0000 73 3b 00 00 */ unsigned char TimeZoneKeyName[256]; /* +0x00ac c1 15 00 00 */ unsigned char DynamicDaylightTimeDisabled; /* +0x01ac */ }; struct _THREAD_UMS_INFORMATION { unsigned char Command[8]; /* +0x0000 d8 48 00 00 */ unsigned char CompletionList[8]; /* +0x0008 f8 15 00 00 */ unsigned char UmsContext[8]; /* +0x0010 dc 17 00 00 */ }; struct tagORPCTHAT { unsigned long flags; /* +0x0000 */ unsigned char extensions[8]; /* +0x0008 54 30 00 00 */ }; struct _PS_STD_HANDLE_INFO { unsigned long Flags; /* +0x0000 */ /* unsigned char StdHandleState[0]; +0x0000 0c 3d 00 00 */ unsigned char PseudoHandleMask[4]; /* +0x0000 dd 48 00 00 */ unsigned long StdHandleSubsystemType; /* +0x0004 */ }; struct _TP_CALLBACK_ENVIRON_V3 { unsigned long Version; /* +0x0000 */ unsigned char Pool[8]; /* +0x0008 e2 48 00 00 */ unsigned char CleanupGroup[8]; /* +0x0010 e3 48 00 00 */ unsigned char CleanupGroupCancelCallback[8]; /* +0x0018 e5 48 00 00 */ void *RaceDll; /* +0x0020 */ unsigned char ActivationContext[8]; /* +0x0028 7d 17 00 00 */ unsigned char FinalizationCallback[24]; /* +0x0030 e8 48 00 00 */ }; struct _UNIVERSAL_NAME_INFOA { char *lpUniversalName; /* +0x0000 */ }; struct _FILE_INTERNAL_INFORMATION { unsigned char IndexNumber[8]; /* +0x0000 43 13 00 00 */ }; struct _CMSG_CTRL_MAIL_LIST_DECRYPT_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned char pMailList[8]; /* +0x0010 0e 49 00 00 */ unsigned long dwRecipientIndex; /* +0x0018 */ unsigned long dwKeyChoice; /* +0x001c */ unsigned long long hKeyEncryptionKey; /* +0x0020 */ void *pvKeyEncryptionKey; /* +0x0020 */ }; struct _RTL_BITMAP_EX { unsigned long long SizeOfBitMap; /* +0x0000 */ unsigned long long *Buffer; /* +0x0008 */ }; struct tagEMRSETMAPPERFLAGS { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned long dwFlags; /* +0x0008 */ }; struct _SYSTEM_POWER_STATUS { unsigned char ACLineStatus; /* +0x0000 */ unsigned char BatteryFlag; /* +0x0001 */ unsigned char BatteryLifePercent; /* +0x0002 */ unsigned char Reserved1; /* +0x0003 */ unsigned long BatteryLifeTime; /* +0x0004 */ unsigned long BatteryFullLifeTime; /* +0x0008 */ }; struct _PLUGPLAY_CONTROL_RETRIEVE_DOCK_DATA { unsigned long DeviceInstanceLength; /* +0x0000 */ unsigned char DeviceInstance[8]; /* +0x0008 71 06 00 00 */ }; struct DISPLAYCONFIG_TARGET_MODE { unsigned char targetVideoSignalInfo[48]; /* +0x0000 28 49 00 00 */ }; struct tagCBT_CREATEWNDA { unsigned char lpcs[8]; /* +0x0000 b3 33 00 00 */ unsigned char hwndInsertAfter[8]; /* +0x0008 f7 12 00 00 */ }; struct _FILEMUIINFO { unsigned long dwSize; /* +0x0000 */ unsigned long dwVersion; /* +0x0004 */ unsigned long dwFileType; /* +0x0008 */ unsigned char pChecksum[16]; /* +0x000c 33 1c 00 00 */ unsigned char pServiceChecksum[16]; /* +0x001c 33 1c 00 00 */ unsigned long dwLanguageNameOffset; /* +0x002c */ unsigned long dwTypeIDMainSize; /* +0x0030 */ unsigned long dwTypeIDMainOffset; /* +0x0034 */ unsigned long dwTypeNameMainOffset; /* +0x0038 */ unsigned long dwTypeIDMUISize; /* +0x003c */ unsigned long dwTypeIDMUIOffset; /* +0x0040 */ unsigned long dwTypeNameMUIOffset; /* +0x0044 */ unsigned char abBuffer[8]; /* +0x0048 91 19 00 00 */ }; struct _IO_COUNTERS { unsigned long long ReadOperationCount; /* +0x0000 */ unsigned long long WriteOperationCount; /* +0x0008 */ unsigned long long OtherOperationCount; /* +0x0010 */ unsigned long long ReadTransferCount; /* +0x0018 */ unsigned long long WriteTransferCount; /* +0x0020 */ unsigned long long OtherTransferCount; /* +0x0028 */ }; struct _PUBLICKEYSTRUC { unsigned char bType; /* +0x0000 */ unsigned char bVersion; /* +0x0001 */ unsigned short reserved; /* +0x0002 */ unsigned char aiKeyAlg[4]; /* +0x0004 75 00 00 00 */ }; struct _CTL_FIND_USAGE_PARA { unsigned long cbSize; /* +0x0000 */ unsigned char SubjectUsage[16]; /* +0x0008 c8 13 00 00 */ unsigned char ListIdentifier[16]; /* +0x0018 08 13 00 00 */ unsigned char pSigner[8]; /* +0x0028 4e 1a 00 00 */ }; struct tagOBJREF:::: { unsigned char std[40]; /* +0x0000 6a 49 00 00 */ unsigned char pORData[8]; /* +0x0028 6c 49 00 00 */ unsigned char saResAddr[8]; /* +0x0030 93 1f 00 00 */ }; struct tagOBJREF:::: { unsigned char clsid[16]; /* +0x0000 f3 14 00 00 */ unsigned long cbExtension; /* +0x0010 */ unsigned long size; /* +0x0014 */ unsigned char *pData; /* +0x0018 */ }; struct tagOBJREF:::: { unsigned char std[40]; /* +0x0000 6a 49 00 00 */ unsigned char clsid[16]; /* +0x0028 f3 14 00 00 */ unsigned char saResAddr[8]; /* +0x0038 93 1f 00 00 */ }; struct tagOBJREF:::: { unsigned char std[40]; /* +0x0000 6a 49 00 00 */ unsigned char saResAddr[8]; /* +0x0028 93 1f 00 00 */ }; struct _SD_ENUM_SDS_ENTRY { unsigned long Hash; /* +0x0000 */ unsigned long SecurityId; /* +0x0004 */ unsigned long long Offset; /* +0x0008 */ unsigned long Length; /* +0x0010 */ unsigned char Descriptor[4]; /* +0x0014 ff 12 00 00 */ }; struct tagRID_DEVICE_INFO_KEYBOARD { unsigned long dwType; /* +0x0000 */ unsigned long dwSubType; /* +0x0004 */ unsigned long dwKeyboardMode; /* +0x0008 */ unsigned long dwNumberOfFunctionKeys; /* +0x000c */ unsigned long dwNumberOfIndicators; /* +0x0010 */ unsigned long dwNumberOfKeysTotal; /* +0x0014 */ }; struct _CRYPT_TIMESTAMP_RESPONSE { unsigned long dwStatus; /* +0x0000 */ unsigned long cFreeText; /* +0x0004 */ unsigned char rgFreeText[8]; /* +0x0008 db 13 00 00 */ unsigned char FailureInfo[24]; /* +0x0010 09 13 00 00 */ unsigned char ContentInfo[16]; /* +0x0028 08 13 00 00 */ }; struct _userHPALETTE { long fContext; /* +0x0000 */ }; struct _userHPALETTE::__MIDL_IWinTypes_0008 { long hInproc; /* +0x0000 */ /* unsigned char hRemote[0]; +0x0000 8e 35 00 00 */ long long hInproc64; /* +0x0000 */ }; struct _userBITMAP { long bmType; /* +0x0000 */ long bmWidth; /* +0x0004 */ long bmHeight; /* +0x0008 */ long bmWidthBytes; /* +0x000c */ unsigned short bmPlanes; /* +0x0010 */ unsigned short bmBitsPixel; /* +0x0012 */ unsigned long cbSize; /* +0x0014 */ unsigned char pBuffer[4]; /* +0x0018 ff 12 00 00 */ }; struct ANON_OBJECT_HEADER_BIGOBJ { unsigned short Sig1; /* +0x0000 */ unsigned short Sig2; /* +0x0002 */ unsigned short Version; /* +0x0004 */ unsigned short Machine; /* +0x0006 */ unsigned long TimeDateStamp; /* +0x0008 */ unsigned char ClassID[16]; /* +0x000c f3 14 00 00 */ unsigned long SizeOfData; /* +0x001c */ unsigned long Flags; /* +0x0020 */ unsigned long MetaDataSize; /* +0x0024 */ unsigned long MetaDataOffset; /* +0x0028 */ unsigned long NumberOfSections; /* +0x002c */ unsigned long PointerToSymbolTable; /* +0x0030 */ unsigned long NumberOfSymbols; /* +0x0034 */ }; struct _FILE_DISPOSITION_INFORMATION { unsigned char DeleteFile; /* +0x0000 */ }; struct _FILE_PIPE_WAIT_FOR_BUFFER { unsigned char Timeout[8]; /* +0x0000 43 13 00 00 */ unsigned long NameLength; /* +0x0008 */ unsigned char TimeoutSpecified; /* +0x000c */ unsigned char Name[2]; /* +0x000e 0a 14 00 00 */ }; struct _CRYPT_CONTENT_INFO { char *pszObjId; /* +0x0000 */ unsigned char Content[16]; /* +0x0008 08 13 00 00 */ }; struct HSTRING_HEADER:: { void *Reserved1; /* +0x0000 */ unsigned char Reserved2[24]; /* +0x0000 c4 49 00 00 */ }; struct _PROCESS_HANDLE_TRACING_ENTRY { void *Handle; /* +0x0000 */ unsigned char ClientId[16]; /* +0x0008 44 13 00 00 */ unsigned long Type; /* +0x0018 */ unsigned char Stacks[128]; /* +0x0020 c9 49 00 00 */ }; struct _REQUEST_OPLOCK_OUTPUT_BUFFER { unsigned short StructureVersion; /* +0x0000 */ unsigned short StructureLength; /* +0x0002 */ unsigned long OriginalOplockLevel; /* +0x0004 */ unsigned long NewOplockLevel; /* +0x0008 */ unsigned long Flags; /* +0x000c */ unsigned long AccessMode; /* +0x0010 */ unsigned short ShareMode; /* +0x0014 */ }; struct _SE_IMPERSONATION_STATE { void *Token; /* +0x0000 */ unsigned char CopyOnOpen; /* +0x0008 */ unsigned char EffectiveOnly; /* +0x0009 */ unsigned char Level[4]; /* +0x000c 43 2e 00 00 */ }; struct _currencyfmtA { unsigned char NumDigits[4]; /* +0x0000 75 00 00 00 */ unsigned char LeadingZero[4]; /* +0x0004 75 00 00 00 */ unsigned char Grouping[8]; /* +0x0008 75 00 00 00 */ char *lpDecimalSep; /* +0x0010 */ char *lpThousandSep; /* +0x0018 */ unsigned char NegativeOrder[4]; /* +0x0020 75 00 00 00 */ unsigned char PositiveOrder[4]; /* +0x0024 75 00 00 00 */ char *lpCurrencySymbol; /* +0x0028 */ }; struct tagDRAWITEMSTRUCT { unsigned char CtlType[4]; /* +0x0000 75 00 00 00 */ unsigned char CtlID[4]; /* +0x0004 75 00 00 00 */ unsigned char itemID[4]; /* +0x0008 75 00 00 00 */ unsigned char itemAction[4]; /* +0x000c 75 00 00 00 */ unsigned char itemState[8]; /* +0x0010 75 00 00 00 */ unsigned char hwndItem[8]; /* +0x0018 f7 12 00 00 */ unsigned char hDC[8]; /* +0x0020 24 1f 00 00 */ unsigned char rcItem[16]; /* +0x0028 7a 14 00 00 */ unsigned long long itemData; /* +0x0038 */ }; struct _TypeDescriptor { unsigned char pVFTable[8]; /* +0x0000 4f 19 00 00 */ void *spare; /* +0x0008 */ /* unsigned char name[0]; +0x0010 fd 49 00 00 */ }; struct tagSOLE_AUTHENTICATION_LIST { unsigned long cAuthInfo; /* +0x0000 */ unsigned char aAuthInfo[8]; /* +0x0008 6d 25 00 00 */ }; struct _IO_STATUS_BLOCK32 { long Status; /* +0x0000 */ unsigned long Information; /* +0x0004 */ }; struct tagGCP_RESULTSW { unsigned long lStructSize; /* +0x0000 */ unsigned char lpOutString[8]; /* +0x0008 71 06 00 00 */ unsigned char lpOrder[8]; /* +0x0010 75 06 00 00 */ unsigned char lpDx[8]; /* +0x0018 74 06 00 00 */ unsigned char lpCaretPos[8]; /* +0x0020 74 06 00 00 */ char *lpClass; /* +0x0028 */ unsigned char lpGlyphs[8]; /* +0x0030 71 06 00 00 */ unsigned char nGlyphs[4]; /* +0x0038 75 00 00 00 */ unsigned char nMaxFit[4]; /* +0x003c 74 00 00 00 */ }; struct _RPC_ASYNC_NOTIFICATION_INFO:: { unsigned char hWnd[8]; /* +0x0000 f7 12 00 00 */ unsigned char Msg[8]; /* +0x0008 75 00 00 00 */ }; struct _RPC_ASYNC_NOTIFICATION_INFO:: { void *hIOPort; /* +0x0000 */ unsigned long dwNumberOfBytesTransferred; /* +0x0008 */ unsigned long long dwCompletionKey; /* +0x0010 */ unsigned char lpOverlapped[8]; /* +0x0018 6c 19 00 00 */ }; struct _RPC_ASYNC_NOTIFICATION_INFO:: { unsigned char NotificationRoutine[8]; /* +0x0000 ae 13 00 00 */ void *hThread; /* +0x0008 */ }; struct _BCRYPT_DSA_KEY_BLOB_V2 { unsigned long dwMagic; /* +0x0000 */ unsigned long cbKey; /* +0x0004 */ unsigned char hashAlgorithm[4]; /* +0x0008 dc 44 00 00 */ unsigned char standardVersion[4]; /* +0x000c dd 44 00 00 */ unsigned long cbSeedLength; /* +0x0010 */ unsigned long cbGroupSize; /* +0x0014 */ unsigned char Count[4]; /* +0x0018 cb 17 00 00 */ }; struct _CLAIM_SECURITY_ATTRIBUTE_RELATIVE_V1 { unsigned long Name; /* +0x0000 */ unsigned short ValueType; /* +0x0004 */ unsigned short Reserved; /* +0x0006 */ unsigned long Flags; /* +0x0008 */ unsigned long ValueCount; /* +0x000c */ }; struct tagLOGFONTA { long lfHeight; /* +0x0000 */ long lfWidth; /* +0x0004 */ long lfEscapement; /* +0x0008 */ long lfOrientation; /* +0x000c */ long lfWeight; /* +0x0010 */ unsigned char lfItalic; /* +0x0014 */ unsigned char lfUnderline; /* +0x0015 */ unsigned char lfStrikeOut; /* +0x0016 */ unsigned char lfCharSet; /* +0x0017 */ unsigned char lfOutPrecision; /* +0x0018 */ unsigned char lfClipPrecision; /* +0x0019 */ unsigned char lfQuality; /* +0x001a */ unsigned char lfPitchAndFamily; /* +0x001b */ unsigned char lfFaceName[32]; /* +0x001c 84 23 00 00 */ }; struct _SYSTEM_CRASH_DUMP_STATE_INFORMATION { unsigned char CrashDumpConfigurationClass[4]; /* +0x0000 58 4a 00 00 */ }; struct DISPLAYCONFIG_ADAPTER_NAME { unsigned char header[20]; /* +0x0000 0d 25 00 00 */ unsigned char adapterDevicePath[256]; /* +0x0014 c1 15 00 00 */ }; struct _FILE_PIPE_INFORMATION { unsigned long ReadMode; /* +0x0000 */ unsigned long CompletionMode; /* +0x0004 */ }; struct _POWER_IDLE_RESILIENCY { unsigned long CoalescingTimeout; /* +0x0000 */ unsigned long IdleResiliencyPeriod; /* +0x0004 */ }; struct _IMAGE_IMPORT_BY_NAME { unsigned short Hint; /* +0x0000 */ unsigned char Name[2]; /* +0x0002 1e 24 00 00 */ }; struct _QUOTA_LIMITS_EX { unsigned long long PagedPoolLimit; /* +0x0000 */ unsigned long long NonPagedPoolLimit; /* +0x0008 */ unsigned long long MinimumWorkingSetSize; /* +0x0010 */ unsigned long long MaximumWorkingSetSize; /* +0x0018 */ unsigned long long PagefileLimit; /* +0x0020 */ unsigned char TimeLimit[8]; /* +0x0028 43 13 00 00 */ unsigned long long WorkingSetLimit; /* +0x0030 */ unsigned long long Reserved2; /* +0x0038 */ unsigned long long Reserved3; /* +0x0040 */ unsigned long long Reserved4; /* +0x0048 */ unsigned long Flags; /* +0x0050 */ unsigned char CpuRateLimit[4]; /* +0x0054 2a 3d 00 00 */ }; struct tagEMREXTSELECTCLIPRGN { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned long cbRgnData; /* +0x0008 */ unsigned long iMode; /* +0x000c */ unsigned char RgnData[4]; /* +0x0010 ff 12 00 00 */ }; struct _CM_KEYBOARD_DEVICE_DATA { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned char Type; /* +0x0004 */ unsigned char Subtype; /* +0x0005 */ unsigned short KeyboardFlags; /* +0x0006 */ }; struct _IMAGE_BASE_RELOCATION { unsigned long VirtualAddress; /* +0x0000 */ unsigned long SizeOfBlock; /* +0x0004 */ }; struct _SYSTEM_ERROR_PORT_TIMEOUTS { unsigned long StartTimeout; /* +0x0000 */ unsigned long CommTimeout; /* +0x0004 */ }; struct tagSERIALIZEDPROPERTYVALUE { unsigned long dwType; /* +0x0000 */ unsigned char rgb[4]; /* +0x0004 ff 12 00 00 */ }; struct tagHW_PROFILE_INFOA { unsigned long dwDockInfo; /* +0x0000 */ unsigned char szHwProfileGuid[39]; /* +0x0004 d2 4a 00 00 */ unsigned char szHwProfileName[81]; /* +0x002b 0d 30 00 00 */ }; struct _SLIST_HEADER:: { /* unsigned char Depth[0]; +0x0000 1f 4b 00 00 */ unsigned char Sequence[8]; /* +0x0000 20 4b 00 00 */ /* unsigned char HeaderType[0]; +0x0008 1d 13 00 00 */ /* unsigned char Reserved[0]; +0x0008 c1 20 00 00 */ unsigned char NextEntry[8]; /* +0x0008 5a 1e 00 00 */ }; struct _SLIST_HEADER:: { /* unsigned char Depth[0]; +0x0000 1f 4b 00 00 */ /* unsigned char Sequence[0]; +0x0000 23 4b 00 00 */ unsigned char NextEntry[8]; /* +0x0000 24 4b 00 00 */ /* unsigned char HeaderType[0]; +0x0008 1d 13 00 00 */ /* unsigned char Init[0]; +0x0008 57 1e 00 00 */ /* unsigned char Reserved[0]; +0x0008 25 4b 00 00 */ unsigned char Region[8]; /* +0x0008 26 4b 00 00 */ }; struct tagEMRSETPALETTEENTRIES { unsigned char emr[8]; /* +0x0000 da 12 00 00 */ unsigned long ihPal; /* +0x0008 */ unsigned long iStart; /* +0x000c */ unsigned long cEntries; /* +0x0010 */ unsigned char aPalEntries[4]; /* +0x0014 f2 26 00 00 */ }; struct _PROCESS_DEVICEMAP_INFORMATION:::: { unsigned long DriveMap; /* +0x0000 */ unsigned char DriveType[32]; /* +0x0004 f7 17 00 00 */ }; struct _PROCESS_DEVICEMAP_INFORMATION:::: { void *DirectoryHandle; /* +0x0000 */ }; struct _CMSG_CMS_RECIPIENT_INFO { unsigned long dwRecipientChoice; /* +0x0000 */ /* unsigned char pKeyTrans[0]; +0x0008 88 20 00 00 */ /* unsigned char pKeyAgree[0]; +0x0008 d7 23 00 00 */ unsigned char pMailList[8]; /* +0x0008 0e 49 00 00 */ }; struct _JOURNAL_TRANSACTION_BOUNDARY_INFORMATION { unsigned char Action[8]; /* +0x0000 4f 15 00 00 */ unsigned long long RecordNumber; /* +0x0008 */ unsigned char TimeStamp[8]; /* +0x0010 43 13 00 00 */ unsigned char TransactionID[16]; /* +0x0018 f3 14 00 00 */ }; struct _EX_ATTRIBUTE_INFORMATION_REGISTRATION { unsigned char QueryRoutine[8]; /* +0x0000 12 3b 00 00 */ unsigned char SetRoutine[8]; /* +0x0008 28 1e 00 00 */ }; struct _JOBOBJECT_FREEZE_INFORMATION { unsigned long Flags; /* +0x0000 */ /* unsigned char FreezeOperation[0]; +0x0000 94 13 00 00 */ /* unsigned char FilterOperation[0]; +0x0000 90 18 00 00 */ unsigned char Reserved[4]; /* +0x0000 c5 19 00 00 */ unsigned char Freeze; /* +0x0004 */ unsigned char Reserved0[3]; /* +0x0005 93 13 00 00 */ unsigned char WakeFilter[8]; /* +0x0008 8d 34 00 00 */ }; struct _IMAGE_SYMBOL:: { unsigned char ShortName[8]; /* +0x0000 91 19 00 00 */ }; struct _IMAGE_SYMBOL:::: { unsigned long Short; /* +0x0000 */ unsigned long Long; /* +0x0004 */ }; struct _CERT_TRUST_LIST_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char pCtlEntry[8]; /* +0x0008 9d 2e 00 00 */ unsigned char pCtlContext[8]; /* +0x0010 9e 15 00 00 */ }; struct _CM_SONIC_DEVICE_DATA { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned short DataConfigurationRegister; /* +0x0004 */ unsigned char EthernetAddress[8]; /* +0x0006 91 19 00 00 */ }; struct _SD_ENUM_SDS_INPUT { unsigned long long StartingOffset; /* +0x0000 */ unsigned long long MaxSDEntriesToReturn; /* +0x0008 */ }; struct _PROCESS_HANDLE_SNAPSHOT_INFORMATION { unsigned long long NumberOfHandles; /* +0x0000 */ unsigned long long Reserved; /* +0x0008 */ unsigned char Handles[40]; /* +0x0010 7e 4b 00 00 */ }; struct _WINDOW_BUFFER_SIZE_RECORD { unsigned char dwSize[4]; /* +0x0000 1b 18 00 00 */ }; struct IMAGE_LOAD_CONFIG_DIRECTORY32 { unsigned long Size; /* +0x0000 */ unsigned long TimeDateStamp; /* +0x0004 */ unsigned short MajorVersion; /* +0x0008 */ unsigned short MinorVersion; /* +0x000a */ unsigned long GlobalFlagsClear; /* +0x000c */ unsigned long GlobalFlagsSet; /* +0x0010 */ unsigned long CriticalSectionDefaultTimeout; /* +0x0014 */ unsigned long DeCommitFreeBlockThreshold; /* +0x0018 */ unsigned long DeCommitTotalFreeThreshold; /* +0x001c */ unsigned long LockPrefixTable; /* +0x0020 */ unsigned long MaximumAllocationSize; /* +0x0024 */ unsigned long VirtualMemoryThreshold; /* +0x0028 */ unsigned long ProcessHeapFlags; /* +0x002c */ unsigned long ProcessAffinityMask; /* +0x0030 */ unsigned short CSDVersion; /* +0x0034 */ unsigned short Reserved1; /* +0x0036 */ unsigned long EditList; /* +0x0038 */ unsigned long SecurityCookie; /* +0x003c */ unsigned long SEHandlerTable; /* +0x0040 */ unsigned long SEHandlerCount; /* +0x0044 */ }; struct NTFS_EXTENDED_VOLUME_DATA { unsigned long ByteCount; /* +0x0000 */ unsigned short MajorVersion; /* +0x0004 */ unsigned short MinorVersion; /* +0x0006 */ unsigned long BytesPerPhysicalSector; /* +0x0008 */ }; struct STARTING_LCN_INPUT_BUFFER { unsigned char StartingLcn[8]; /* +0x0000 43 13 00 00 */ }; struct VOLUME_BITMAP_BUFFER { unsigned char StartingLcn[8]; /* +0x0000 43 13 00 00 */ unsigned char BitmapSize[8]; /* +0x0008 43 13 00 00 */ unsigned char Buffer[8]; /* +0x0010 ff 12 00 00 */ }; struct STARTING_VCN_INPUT_BUFFER { unsigned char StartingVcn[8]; /* +0x0000 43 13 00 00 */ }; struct NTFS_FILE_RECORD_OUTPUT_BUFFER { unsigned char FileReferenceNumber[8]; /* +0x0000 43 13 00 00 */ unsigned long FileRecordLength; /* +0x0008 */ unsigned char FileRecordBuffer[4]; /* +0x000c ff 12 00 00 */ }; struct FIND_BY_SID_DATA { unsigned long Restart; /* +0x0000 */ unsigned char Sid[12]; /* +0x0004 0f 1f 00 00 */ }; struct CREATE_USN_JOURNAL_DATA { unsigned long long MaximumSize; /* +0x0000 */ unsigned long long AllocationDelta; /* +0x0008 */ }; struct READ_USN_JOURNAL_DATA { long long StartUsn; /* +0x0000 */ unsigned long ReasonMask; /* +0x0008 */ unsigned long ReturnOnlyOnClose; /* +0x000c */ unsigned long long Timeout; /* +0x0010 */ unsigned long long BytesToWaitFor; /* +0x0018 */ unsigned long long UsnJournalID; /* +0x0020 */ }; struct USN_RECORD { unsigned long RecordLength; /* +0x0000 */ unsigned short MajorVersion; /* +0x0004 */ unsigned short MinorVersion; /* +0x0006 */ unsigned long long FileReferenceNumber; /* +0x0008 */ unsigned long long ParentFileReferenceNumber; /* +0x0010 */ long long Usn; /* +0x0018 */ unsigned char TimeStamp[8]; /* +0x0020 43 13 00 00 */ unsigned long Reason; /* +0x0028 */ unsigned long SourceInfo; /* +0x002c */ unsigned long SecurityId; /* +0x0030 */ unsigned long FileAttributes; /* +0x0034 */ unsigned short FileNameLength; /* +0x0038 */ unsigned short FileNameOffset; /* +0x003a */ unsigned char FileName[4]; /* +0x003c 0a 14 00 00 */ }; struct USN_JOURNAL_DATA { unsigned long long UsnJournalID; /* +0x0000 */ long long FirstUsn; /* +0x0008 */ long long NextUsn; /* +0x0010 */ long long LowestValidUsn; /* +0x0018 */ long long MaxUsn; /* +0x0020 */ unsigned long long MaximumSize; /* +0x0028 */ unsigned long long AllocationDelta; /* +0x0030 */ }; struct DELETE_USN_JOURNAL_DATA { unsigned long long UsnJournalID; /* +0x0000 */ unsigned long DeleteFlags; /* +0x0008 */ }; struct MARK_HANDLE_INFO { unsigned long UsnSourceInfo; /* +0x0000 */ unsigned long CopyNumber; /* +0x0000 */ void *VolumeHandle; /* +0x0008 */ unsigned long HandleInfo; /* +0x0010 */ }; struct MARK_HANDLE_INFO32 { unsigned long UsnSourceInfo; /* +0x0000 */ unsigned long CopyNumber; /* +0x0000 */ unsigned char VolumeHandle[4]; /* +0x0004 75 00 00 00 */ unsigned long HandleInfo; /* +0x0008 */ }; struct BULK_SECURITY_TEST_DATA { unsigned long DesiredAccess; /* +0x0000 */ unsigned char SecurityIds[4]; /* +0x0004 fc 12 00 00 */ }; struct SET_POWER_SETTING_VALUE { unsigned long Version; /* +0x0000 */ unsigned char Guid[16]; /* +0x0004 f3 14 00 00 */ unsigned char PowerCondition[4]; /* +0x0014 aa 4b 00 00 */ unsigned long DataLength; /* +0x0018 */ unsigned char Data[4]; /* +0x001c ff 12 00 00 */ }; struct BATTERY_REPORTING_SCALE { unsigned long Granularity; /* +0x0000 */ unsigned long Capacity; /* +0x0004 */ }; struct POWER_STATE_NOTIFY_HANDLER { unsigned char Handler[8]; /* +0x0000 b1 4b 00 00 */ void *Context; /* +0x0008 */ }; struct PROCESSOR_IDLE_TIMES { unsigned long long StartTime; /* +0x0000 */ unsigned long long EndTime; /* +0x0008 */ unsigned char Reserved[16]; /* +0x0010 66 1a 00 00 */ }; struct PPM_WMI_LEGACY_PERFSTATE { unsigned long Frequency; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long PercentFrequency; /* +0x0008 */ }; struct PPM_WMI_PERF_STATE { unsigned long Frequency; /* +0x0000 */ unsigned long Power; /* +0x0004 */ unsigned char PercentFrequency; /* +0x0008 */ unsigned char IncreaseLevel; /* +0x0009 */ unsigned char DecreaseLevel; /* +0x000a */ unsigned char Type; /* +0x000b */ unsigned long IncreaseTime; /* +0x000c */ unsigned long DecreaseTime; /* +0x0010 */ unsigned long long Control; /* +0x0018 */ unsigned long long Status; /* +0x0020 */ unsigned long HitCount; /* +0x0028 */ unsigned long Reserved1; /* +0x002c */ unsigned long long Reserved2; /* +0x0030 */ unsigned long long Reserved3; /* +0x0038 */ }; struct PPM_WMI_PERF_STATES { unsigned long Count; /* +0x0000 */ unsigned long MaxFrequency; /* +0x0004 */ unsigned long CurrentState; /* +0x0008 */ unsigned long MaxPerfState; /* +0x000c */ unsigned long MinPerfState; /* +0x0010 */ unsigned long LowestPerfState; /* +0x0014 */ unsigned long ThermalConstraint; /* +0x0018 */ unsigned char BusyAdjThreshold; /* +0x001c */ unsigned char PolicyType; /* +0x001d */ unsigned char Type; /* +0x001e */ unsigned char Reserved; /* +0x001f */ unsigned long TimerInterval; /* +0x0020 */ unsigned long long TargetProcessors; /* +0x0028 */ unsigned long PStateHandler; /* +0x0030 */ unsigned long PStateContext; /* +0x0034 */ unsigned long TStateHandler; /* +0x0038 */ unsigned long TStateContext; /* +0x003c */ unsigned long FeedbackHandler; /* +0x0040 */ unsigned long Reserved1; /* +0x0044 */ unsigned long long Reserved2; /* +0x0048 */ unsigned char State[64]; /* +0x0050 ba 4b 00 00 */ }; struct PPM_WMI_PERF_STATES_EX { unsigned long Count; /* +0x0000 */ unsigned long MaxFrequency; /* +0x0004 */ unsigned long CurrentState; /* +0x0008 */ unsigned long MaxPerfState; /* +0x000c */ unsigned long MinPerfState; /* +0x0010 */ unsigned long LowestPerfState; /* +0x0014 */ unsigned long ThermalConstraint; /* +0x0018 */ unsigned char BusyAdjThreshold; /* +0x001c */ unsigned char PolicyType; /* +0x001d */ unsigned char Type; /* +0x001e */ unsigned char Reserved; /* +0x001f */ unsigned long TimerInterval; /* +0x0020 */ void *TargetProcessors; /* +0x0028 */ unsigned long PStateHandler; /* +0x0030 */ unsigned long PStateContext; /* +0x0034 */ unsigned long TStateHandler; /* +0x0038 */ unsigned long TStateContext; /* +0x003c */ unsigned long FeedbackHandler; /* +0x0040 */ unsigned long Reserved1; /* +0x0044 */ unsigned long long Reserved2; /* +0x0048 */ unsigned char State[64]; /* +0x0050 ba 4b 00 00 */ }; struct PPM_IDLE_STATE_ACCOUNTING { unsigned long IdleTransitions; /* +0x0000 */ unsigned long FailedTransitions; /* +0x0004 */ unsigned long InvalidBucketIndex; /* +0x0008 */ unsigned long long TotalTime; /* +0x0010 */ unsigned char IdleTimeBuckets[24]; /* +0x0018 d7 1f 00 00 */ }; struct PPM_IDLE_ACCOUNTING { unsigned long StateCount; /* +0x0000 */ unsigned long TotalTransitions; /* +0x0004 */ unsigned long ResetCount; /* +0x0008 */ unsigned long long StartTime; /* +0x0010 */ unsigned char State[48]; /* +0x0018 c1 4b 00 00 */ }; struct PPM_IDLE_STATE_ACCOUNTING_EX { unsigned long long TotalTime; /* +0x0000 */ unsigned long IdleTransitions; /* +0x0008 */ unsigned long FailedTransitions; /* +0x000c */ unsigned long InvalidBucketIndex; /* +0x0010 */ unsigned long MinTimeUs; /* +0x0014 */ unsigned long MaxTimeUs; /* +0x0018 */ unsigned char IdleTimeBuckets[384]; /* +0x0020 c4 4b 00 00 */ }; struct PPM_IDLE_ACCOUNTING_EX { unsigned long StateCount; /* +0x0000 */ unsigned long TotalTransitions; /* +0x0004 */ unsigned long ResetCount; /* +0x0008 */ unsigned long long StartTime; /* +0x0010 */ unsigned char State[416]; /* +0x0018 c7 4b 00 00 */ }; struct PPM_PERFSTATE_EVENT { unsigned long State; /* +0x0000 */ unsigned long Status; /* +0x0004 */ unsigned long Latency; /* +0x0008 */ unsigned long Speed; /* +0x000c */ unsigned long Processor; /* +0x0010 */ }; struct PPM_PERFSTATE_DOMAIN_EVENT { unsigned long State; /* +0x0000 */ unsigned long Latency; /* +0x0004 */ unsigned long Speed; /* +0x0008 */ unsigned long long Processors; /* +0x0010 */ }; struct PPM_IDLESTATE_EVENT { unsigned long NewState; /* +0x0000 */ unsigned long OldState; /* +0x0004 */ unsigned long long Processors; /* +0x0008 */ }; struct PPM_THERMALCHANGE_EVENT { unsigned long ThermalConstraint; /* +0x0000 */ unsigned long long Processors; /* +0x0008 */ }; struct SYSTEM_POWER_LEVEL { unsigned char Enable; /* +0x0000 */ unsigned char Spare[3]; /* +0x0001 93 13 00 00 */ unsigned long BatteryLevel; /* +0x0004 */ unsigned char PowerPolicy[12]; /* +0x0008 9c 1f 00 00 */ unsigned char MinSystemState[4]; /* +0x0014 76 16 00 00 */ }; struct PROCESSOR_IDLESTATE_INFO { unsigned long TimeCheck; /* +0x0000 */ unsigned char DemotePercent; /* +0x0004 */ unsigned char PromotePercent; /* +0x0005 */ unsigned char Spare[2]; /* +0x0006 bb 17 00 00 */ }; struct PROCESSOR_IDLESTATE_POLICY { unsigned short Revision; /* +0x0000 */ }; struct PROCESSOR_IDLESTATE_POLICY:: { unsigned short AsUSHORT; /* +0x0000 */ /* unsigned char AllowScaling[0]; +0x0000 b1 2e 00 00 */ /* unsigned char Disabled[0]; +0x0000 b2 2e 00 00 */ unsigned char Reserved[2]; /* +0x0000 da 4b 00 00 */ }; struct PROCESSOR_PERFSTATE_POLICY { unsigned long Revision; /* +0x0000 */ unsigned char MaxThrottle; /* +0x0004 */ unsigned char MinThrottle; /* +0x0005 */ unsigned char BusyAdjThreshold; /* +0x0006 */ unsigned char Spare; /* +0x0007 */ unsigned char Flags[1]; /* +0x0007 dd 4b 00 00 */ unsigned long TimeCheck; /* +0x0008 */ unsigned long IncreaseTime; /* +0x000c */ unsigned long DecreaseTime; /* +0x0010 */ unsigned long IncreasePercent; /* +0x0014 */ unsigned long DecreasePercent; /* +0x0018 */ }; struct PROCESSOR_PERFSTATE_POLICY:::: { unsigned char AsUCHAR; /* +0x0000 */ /* unsigned char NoDomainAccounting[0]; +0x0000 a2 1e 00 00 */ /* unsigned char IncreasePolicy[0]; +0x0000 e0 4b 00 00 */ /* unsigned char DecreasePolicy[0]; +0x0000 a5 1e 00 00 */ unsigned char Reserved[1]; /* +0x0000 29 26 00 00 */ }; struct SYSTEM_BATTERY_STATE { unsigned char AcOnLine; /* +0x0000 */ unsigned char BatteryPresent; /* +0x0001 */ unsigned char Charging; /* +0x0002 */ unsigned char Discharging; /* +0x0003 */ unsigned char Spare1[4]; /* +0x0004 cb 17 00 00 */ unsigned long MaxCapacity; /* +0x0008 */ unsigned long RemainingCapacity; /* +0x000c */ unsigned long Rate; /* +0x0010 */ unsigned long EstimatedTime; /* +0x0014 */ unsigned long DefaultAlert1; /* +0x0018 */ unsigned long DefaultAlert2; /* +0x001c */ }; struct RTL_ACE_DATA { unsigned char AceType; /* +0x0000 */ unsigned char InheritFlags; /* +0x0001 */ unsigned char AceFlags; /* +0x0002 */ unsigned long Mask; /* +0x0004 */ unsigned char Sid[8]; /* +0x0008 55 13 00 00 */ }; struct _LDOUBLE { unsigned char ld[10]; /* +0x0000 ad 2b 00 00 */ }; struct _CRT_DOUBLE { unsigned char x[8]; /* +0x0000 41 00 00 00 */ }; struct _CRT_FLOAT { unsigned char f[4]; /* +0x0000 40 00 00 00 */ }; struct SHELLHOOKINFO { unsigned char hwnd[8]; /* +0x0000 f7 12 00 00 */ unsigned char rc[16]; /* +0x0008 7a 14 00 00 */ }; struct POWERBROADCAST_SETTING { unsigned char PowerSetting[16]; /* +0x0000 f3 14 00 00 */ unsigned long DataLength; /* +0x0010 */ unsigned char Data[4]; /* +0x0014 ff 12 00 00 */ }; struct BSMINFO { unsigned char cbSize[8]; /* +0x0000 75 00 00 00 */ unsigned char hdesk[8]; /* +0x0008 f8 4b 00 00 */ unsigned char hwnd[8]; /* +0x0010 f7 12 00 00 */ unsigned char luid[8]; /* +0x0018 38 15 00 00 */ }; struct FLASHWINFO { unsigned char cbSize[8]; /* +0x0000 75 00 00 00 */ unsigned char hwnd[8]; /* +0x0008 f7 12 00 00 */ unsigned long dwFlags; /* +0x0010 */ unsigned char uCount[4]; /* +0x0014 75 00 00 00 */ unsigned long dwTimeout; /* +0x0018 */ }; struct DLGTEMPLATE { unsigned long style; /* +0x0000 */ unsigned long dwExtendedStyle; /* +0x0004 */ unsigned short cdit; /* +0x0008 */ short x; /* +0x000a */ short y; /* +0x000c */ short cx; /* +0x000e */ short cy; /* +0x0010 */ }; struct DLGITEMTEMPLATE { unsigned long style; /* +0x0000 */ unsigned long dwExtendedStyle; /* +0x0004 */ short x; /* +0x0008 */ short y; /* +0x000a */ short cx; /* +0x000c */ short cy; /* +0x000e */ unsigned short id; /* +0x0010 */ }; struct MENUITEMTEMPLATEHEADER { unsigned short versionNumber; /* +0x0000 */ unsigned short offset; /* +0x0002 */ }; struct RPC_STATS_VECTOR { unsigned char Count[4]; /* +0x0000 75 00 00 00 */ unsigned char Stats[4]; /* +0x0004 fc 12 00 00 */ }; struct RPC_IF_ID_VECTOR { unsigned long Count; /* +0x0000 */ unsigned char IfId[8]; /* +0x0008 07 4c 00 00 */ }; struct RPC_CLIENT_INFORMATION1 { unsigned char *UserName; /* +0x0000 */ unsigned char *ComputerName; /* +0x0008 */ unsigned short Privilege; /* +0x0010 */ unsigned long AuthFlags; /* +0x0014 */ }; struct RPC_DISPATCH_TABLE { unsigned char DispatchTableCount[8]; /* +0x0000 75 00 00 00 */ unsigned char DispatchTable[8]; /* +0x0008 0c 4c 00 00 */ long long Reserved; /* +0x0010 */ }; struct { unsigned char pad[16]; /* +0x0000 1e 23 00 00 */ void *userContext; /* +0x0010 */ }; struct ARRAY_INFO { long Dimension; /* +0x0000 */ unsigned long *BufferConformanceMark; /* +0x0008 */ unsigned long *BufferVarianceMark; /* +0x0010 */ unsigned long *MaxCountArray; /* +0x0018 */ unsigned long *OffsetArray; /* +0x0020 */ unsigned long *ActualCountArray; /* +0x0028 */ }; struct NUMPARSE { unsigned char cDig[4]; /* +0x0000 74 00 00 00 */ unsigned long dwInFlags; /* +0x0004 */ unsigned long dwOutFlags; /* +0x0008 */ unsigned char cchUsed[4]; /* +0x000c 74 00 00 00 */ unsigned char nBaseShift[4]; /* +0x0010 74 00 00 00 */ unsigned char nPwr10[4]; /* +0x0014 74 00 00 00 */ }; struct UDATE { unsigned char st[16]; /* +0x0000 c0 15 00 00 */ unsigned short wDayOfYear; /* +0x0010 */ }; struct _SC_ACTION { unsigned char Type[4]; /* +0x0000 3a 4c 00 00 */ unsigned long Delay; /* +0x0004 */ }; struct _TOKEN_MANDATORY_POLICY { unsigned long Policy; /* +0x0000 */ }; struct _wireBRECORD { unsigned long fFlags; /* +0x0000 */ unsigned long clSize; /* +0x0004 */ unsigned char pRecInfo[8]; /* +0x0008 a4 3c 00 00 */ unsigned char *pRecord; /* +0x0010 */ }; struct _CRYPT_CONTEXTS { unsigned long cContexts; /* +0x0000 */ unsigned char rgpszContexts[8]; /* +0x0008 db 13 00 00 */ }; struct tagWCRANGE { unsigned char wcLow[2]; /* +0x0000 71 00 00 00 */ unsigned short cGlyphs; /* +0x0002 */ }; struct _LDR_VERIFY_IMAGE_INFO { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned char CallbackInfo[16]; /* +0x0008 04 2b 00 00 */ unsigned char SectionInfo[32]; /* +0x0018 73 4c 00 00 */ unsigned short ImageCharacteristics; /* +0x0038 */ }; struct tagSTATPROPSETSTG { unsigned char fmtid[16]; /* +0x0000 f3 14 00 00 */ unsigned char clsid[16]; /* +0x0010 f3 14 00 00 */ unsigned long grfFlags; /* +0x0020 */ unsigned char mtime[8]; /* +0x0024 37 13 00 00 */ unsigned char ctime[8]; /* +0x002c 37 13 00 00 */ unsigned char atime[8]; /* +0x0034 37 13 00 00 */ unsigned long dwOSVersion; /* +0x003c */ }; struct _VIRTUAL_STORAGE_TYPE { unsigned long DeviceId; /* +0x0000 */ unsigned char VendorId[16]; /* +0x0004 f3 14 00 00 */ }; struct _IO_RESOURCE_REQUIREMENTS_LIST { unsigned long ListSize; /* +0x0000 */ unsigned char InterfaceType[4]; /* +0x0004 4c 21 00 00 */ unsigned long BusNumber; /* +0x0008 */ unsigned long SlotNumber; /* +0x000c */ unsigned char Reserved[12]; /* +0x0010 28 13 00 00 */ unsigned long AlternativeLists; /* +0x001c */ unsigned char List[40]; /* +0x0020 9f 4c 00 00 */ }; struct _OBJECT_ATTRIBUTES64 { unsigned long Length; /* +0x0000 */ unsigned long long RootDirectory; /* +0x0008 */ unsigned long long ObjectName; /* +0x0010 */ unsigned long Attributes; /* +0x0018 */ unsigned long long SecurityDescriptor; /* +0x0020 */ unsigned long long SecurityQualityOfService; /* +0x0028 */ }; struct _RTL_PROCESS_MODULE_INFORMATION_EX { unsigned short NextOffset; /* +0x0000 */ unsigned char BaseInfo[296]; /* +0x0008 35 2c 00 00 */ unsigned long ImageChecksum; /* +0x0130 */ unsigned long TimeDateStamp; /* +0x0134 */ void *DefaultBase; /* +0x0138 */ }; struct _ALPC_PORT_COMPLETION_LIST_INFORMATION { void *Buffer; /* +0x0000 */ unsigned long Size; /* +0x0008 */ unsigned long ConcurrencyCount; /* +0x000c */ unsigned long AttributeFlags; /* +0x0010 */ }; struct _ZONEATTRIBUTES { unsigned long cbSize; /* +0x0000 */ unsigned char szDisplayName[520]; /* +0x0004 00 16 00 00 */ unsigned char szDescription[400]; /* +0x020c c4 4c 00 00 */ unsigned char szIconPath[520]; /* +0x039c 00 16 00 00 */ unsigned long dwTemplateMinLevel; /* +0x05a4 */ unsigned long dwTemplateRecommended; /* +0x05a8 */ unsigned long dwTemplateCurrentLevel; /* +0x05ac */ unsigned long dwFlags; /* +0x05b0 */ }; struct _SYSTEM_LOW_PRIORITY_IO_INFORMATION { unsigned long LowPriReadOperations; /* +0x0000 */ unsigned long LowPriWriteOperations; /* +0x0004 */ unsigned long KernelBumpedToNormalOperations; /* +0x0008 */ unsigned long LowPriPagingReadOperations; /* +0x000c */ unsigned long KernelPagingReadsBumpedToNormal; /* +0x0010 */ unsigned long LowPriPagingWriteOperations; /* +0x0014 */ unsigned long KernelPagingWritesBumpedToNormal; /* +0x0018 */ unsigned long BoostedIrpCount; /* +0x001c */ unsigned long BoostedPagingIrpCount; /* +0x0020 */ unsigned long BlanketBoostCount; /* +0x0024 */ }; struct _FILE_TYPE_NOTIFICATION_INPUT { unsigned long Flags; /* +0x0000 */ unsigned long NumFileTypeIDs; /* +0x0004 */ unsigned char FileTypeID[16]; /* +0x0008 8a 1e 00 00 */ }; struct _LDBL12 { unsigned char ld12[12]; /* +0x0000 88 15 00 00 */ }; struct _CERT_REVOCATION_CHAIN_PARA { unsigned long cbSize; /* +0x0000 */ void *hChainEngine; /* +0x0008 */ void *hAdditionalStore; /* +0x0010 */ unsigned long dwChainFlags; /* +0x0018 */ unsigned long dwUrlRetrievalTimeout; /* +0x001c */ unsigned char pftCurrentTime[8]; /* +0x0020 87 17 00 00 */ unsigned char pftCacheResync[8]; /* +0x0028 87 17 00 00 */ unsigned long cbMaxUrlRetrievalByteCount; /* +0x0030 */ }; struct POWER_ACTION_POLICY { unsigned char Action[4]; /* +0x0000 17 33 00 00 */ unsigned long Flags; /* +0x0004 */ unsigned long EventCode; /* +0x0008 */ }; struct MENUITEMTEMPLATE { unsigned short mtOption; /* +0x0000 */ unsigned short mtID; /* +0x0002 */ unsigned char mtString[2]; /* +0x0004 0a 14 00 00 */ }; struct _MCI_STATS:: { unsigned short McaErrorCode; /* +0x0000 */ unsigned short ModelErrorCode; /* +0x0002 */ /* unsigned char OtherInformation[0]; +0x0004 1a 4d 00 00 */ /* unsigned char ContextCorrupt[0]; +0x0004 1b 4d 00 00 */ /* unsigned char AddressValid[0]; +0x0004 1c 4d 00 00 */ /* unsigned char MiscValid[0]; +0x0004 1d 4d 00 00 */ /* unsigned char ErrorEnabled[0]; +0x0004 16 24 00 00 */ /* unsigned char UncorrectedError[0]; +0x0004 1e 4d 00 00 */ /* unsigned char StatusOverFlow[0]; +0x0004 24 22 00 00 */ unsigned char Valid[4]; /* +0x0004 a7 18 00 00 */ }; struct _BCRYPT_PKCS1_PADDING_INFO { unsigned char pszAlgId[8]; /* +0x0000 cb 13 00 00 */ }; struct _TEB_ACTIVE_FRAME_EX { unsigned char BasicFrame[24]; /* +0x0000 50 25 00 00 */ void *ExtensionIdentifier; /* +0x0018 */ }; struct _TOKEN_SECURITY_ATTRIBUTE_V1 { unsigned char Name[16]; /* +0x0000 e3 12 00 00 */ unsigned short ValueType; /* +0x0010 */ unsigned short Reserved; /* +0x0012 */ unsigned long Flags; /* +0x0014 */ unsigned long ValueCount; /* +0x0018 */ }; struct _AVRF_PROCESS_HANDLE_TRACING_ENTRY_WOW64 { unsigned long long Handle; /* +0x0000 */ unsigned char ClientId[16]; /* +0x0008 2e 4d 00 00 */ unsigned long Type; /* +0x0018 */ unsigned char Stacks[128]; /* +0x0020 2f 4d 00 00 */ }; struct MOVE_FILE_RECORD_DATA { void *FileHandle; /* +0x0000 */ unsigned char SourceFileRecord[8]; /* +0x0008 43 13 00 00 */ unsigned char TargetFileRecord[8]; /* +0x0010 43 13 00 00 */ }; struct _PS_CPU_QUOTA_SET_INFORMATION { long long SessionHandle; /* +0x0000 */ unsigned long Weight; /* +0x0008 */ }; struct NTFS_VOLUME_DATA_BUFFER { unsigned char VolumeSerialNumber[8]; /* +0x0000 43 13 00 00 */ unsigned char NumberSectors[8]; /* +0x0008 43 13 00 00 */ unsigned char TotalClusters[8]; /* +0x0010 43 13 00 00 */ unsigned char FreeClusters[8]; /* +0x0018 43 13 00 00 */ unsigned char TotalReserved[8]; /* +0x0020 43 13 00 00 */ unsigned long BytesPerSector; /* +0x0028 */ unsigned long BytesPerCluster; /* +0x002c */ unsigned long BytesPerFileRecordSegment; /* +0x0030 */ unsigned long ClustersPerFileRecordSegment; /* +0x0034 */ unsigned char MftValidDataLength[8]; /* +0x0038 43 13 00 00 */ unsigned char MftStartLcn[8]; /* +0x0040 43 13 00 00 */ unsigned char Mft2StartLcn[8]; /* +0x0048 43 13 00 00 */ unsigned char MftZoneStart[8]; /* +0x0050 43 13 00 00 */ unsigned char MftZoneEnd[8]; /* +0x0058 43 13 00 00 */ }; struct _SYSTEM_MEMORY_INFORMATION { unsigned long long PagedPoolCommitPageCount; /* +0x0000 */ unsigned long long NonPagedPoolPageCount; /* +0x0008 */ unsigned long long MdlPageCount; /* +0x0010 */ unsigned long long CommitPageCount; /* +0x0018 */ }; struct _MESSAGE_RESOURCE_DATA { unsigned long NumberOfBlocks; /* +0x0000 */ unsigned char Blocks[12]; /* +0x0004 5e 4d 00 00 */ }; struct _TOKEN_GROUPS { unsigned long GroupCount; /* +0x0000 */ unsigned char Groups[16]; /* +0x0008 60 21 00 00 */ }; struct _CERT_EXTENSIONS { unsigned long cExtension; /* +0x0000 */ unsigned char rgExtension[8]; /* +0x0008 3f 16 00 00 */ }; struct _UNWIND_HISTORY_TABLE_ENTRY { unsigned long long ImageBase; /* +0x0000 */ unsigned char FunctionEntry[8]; /* +0x0008 1c 1d 00 00 */ }; struct _ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_ENDING { void *ResolutionContext; /* +0x0000 */ }; struct _CMSG_MAIL_LIST_RECIPIENT_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char KeyId[16]; /* +0x0008 08 13 00 00 */ unsigned char KeyEncryptionAlgorithm[24]; /* +0x0018 68 14 00 00 */ unsigned char EncryptedKey[16]; /* +0x0030 08 13 00 00 */ unsigned char Date[8]; /* +0x0040 37 13 00 00 */ unsigned char pOtherAttr[8]; /* +0x0048 39 13 00 00 */ }; struct _CERT_SYSTEM_STORE_RELOCATE_PARA { /* unsigned char hKeyBase[0]; +0x0000 81 19 00 00 */ void *pvBase; /* +0x0000 */ void *pvSystemStore; /* +0x0008 */ /* unsigned char pszSystemStore[0]; +0x0008 79 14 00 00 */ unsigned char pwszSystemStore[8]; /* +0x0008 cb 13 00 00 */ }; struct _CERT_POLICY_INFO { char *pszPolicyIdentifier; /* +0x0000 */ unsigned long cPolicyQualifier; /* +0x0008 */ unsigned char rgPolicyQualifier[8]; /* +0x0010 ed 21 00 00 */ }; struct _CRYPT_KEY_VERIFY_MESSAGE_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwMsgEncodingType; /* +0x0004 */ unsigned long long hCryptProv; /* +0x0008 */ }; struct _CRYPT_TIMESTAMP_INFO { unsigned long dwVersion; /* +0x0000 */ char *pszTSAPolicyId; /* +0x0008 */ unsigned char HashAlgorithm[24]; /* +0x0010 68 14 00 00 */ unsigned char HashedMessage[16]; /* +0x0028 08 13 00 00 */ unsigned char SerialNumber[16]; /* +0x0038 08 13 00 00 */ unsigned char ftTime[8]; /* +0x0048 37 13 00 00 */ unsigned char pvAccuracy[8]; /* +0x0050 4c 35 00 00 */ unsigned char fOrdering[8]; /* +0x0058 74 00 00 00 */ unsigned char Nonce[16]; /* +0x0060 08 13 00 00 */ unsigned char Tsa[16]; /* +0x0070 08 13 00 00 */ unsigned long cExtension; /* +0x0080 */ unsigned char rgExtension[8]; /* +0x0088 3f 16 00 00 */ }; struct _STREAM_EXTENT_ENTRY:: { unsigned char RetrievalPointers[32]; /* +0x0000 66 23 00 00 */ }; struct _TOKEN_AUDIT_POLICY { unsigned char PerUserPolicy[29]; /* +0x0000 bf 4d 00 00 */ }; struct tagRemSNB { unsigned long ulCntStr; /* +0x0000 */ unsigned long ulCntChar; /* +0x0004 */ unsigned char rgString[4]; /* +0x0008 0a 14 00 00 */ }; struct _PROCESS_STACK_ALLOCATION_INFORMATION { unsigned long long ReserveSize; /* +0x0000 */ unsigned long long ZeroBits; /* +0x0008 */ void *StackBase; /* +0x0010 */ }; struct FILE_ID_DESCRIPTOR { unsigned long dwSize; /* +0x0000 */ unsigned char Type[4]; /* +0x0004 1e 33 00 00 */ /* unsigned char FileId[0]; +0x0008 43 13 00 00 */ unsigned char ObjectId[16]; /* +0x0008 f3 14 00 00 */ }; struct tagNC_ADDRESS { unsigned char pAddrInfo[8]; /* +0x0000 e5 4d 00 00 */ unsigned short PortNumber; /* +0x0008 */ unsigned char PrefixLength; /* +0x000a */ }; struct _KSPIN_LOCK_QUEUE { unsigned char Next[8]; /* +0x0000 fb 4d 00 00 */ unsigned char Lock[8]; /* +0x0008 fc 4d 00 00 */ }; struct _BCRYPT_PROVIDER_NAME { unsigned char pszProviderName[8]; /* +0x0000 71 06 00 00 */ }; struct tagCOLORADJUSTMENT { unsigned short caSize; /* +0x0000 */ unsigned short caFlags; /* +0x0002 */ unsigned short caIlluminantIndex; /* +0x0004 */ unsigned short caRedGamma; /* +0x0006 */ unsigned short caGreenGamma; /* +0x0008 */ unsigned short caBlueGamma; /* +0x000a */ unsigned short caReferenceBlack; /* +0x000c */ unsigned short caReferenceWhite; /* +0x000e */ short caContrast; /* +0x0010 */ short caBrightness; /* +0x0012 */ short caColorfulness; /* +0x0014 */ short caRedGreenTint; /* +0x0016 */ }; struct MFT_ENUM_DATA { unsigned long long StartFileReferenceNumber; /* +0x0000 */ long long LowUsn; /* +0x0008 */ long long HighUsn; /* +0x0010 */ }; struct _stat32 { unsigned char st_dev[4]; /* +0x0000 75 00 00 00 */ unsigned short st_ino; /* +0x0004 */ unsigned short st_mode; /* +0x0006 */ short st_nlink; /* +0x0008 */ short st_uid; /* +0x000a */ short st_gid; /* +0x000c */ unsigned char st_rdev[4]; /* +0x0010 75 00 00 00 */ long st_size; /* +0x0014 */ long st_atime; /* +0x0018 */ long st_mtime; /* +0x001c */ long st_ctime; /* +0x0020 */ }; struct _OBJECT_TYPES_INFORMATION { unsigned long NumberOfTypes; /* +0x0000 */ }; struct _MENU_EVENT_RECORD { unsigned char dwCommandId[4]; /* +0x0000 75 00 00 00 */ }; struct _DEBUG_EVENT:: { /* unsigned char Exception[0]; +0x0000 01 30 00 00 */ /* unsigned char CreateThread[0]; +0x0000 a7 4c 00 00 */ /* unsigned char CreateProcessInfo[0]; +0x0000 7d 43 00 00 */ /* unsigned char ExitThread[0]; +0x0000 4a 22 00 00 */ /* unsigned char ExitProcess[0]; +0x0000 d8 42 00 00 */ /* unsigned char LoadDll[0]; +0x0000 02 3c 00 00 */ /* unsigned char UnloadDll[0]; +0x0000 3e 4e 00 00 */ /* unsigned char DebugString[0]; +0x0000 aa 3d 00 00 */ unsigned char RipInfo[160]; /* +0x0000 75 46 00 00 */ }; struct _FILE_REMOTE_PROTOCOL_INFO { unsigned short StructureVersion; /* +0x0000 */ unsigned short StructureSize; /* +0x0002 */ unsigned long Protocol; /* +0x0004 */ unsigned short ProtocolMajorVersion; /* +0x0008 */ unsigned short ProtocolMinorVersion; /* +0x000a */ unsigned short ProtocolRevision; /* +0x000c */ unsigned short Reserved; /* +0x000e */ unsigned long Flags; /* +0x0010 */ }; struct _IMAGE_THUNK_DATA64:: { unsigned long long ForwarderString; /* +0x0000 */ unsigned long long Function; /* +0x0000 */ unsigned long long Ordinal; /* +0x0000 */ unsigned long long AddressOfData; /* +0x0000 */ }; struct _CERT_CHAIN_ENGINE_CONFIG { unsigned long cbSize; /* +0x0000 */ void *hRestrictedRoot; /* +0x0008 */ void *hRestrictedTrust; /* +0x0010 */ void *hRestrictedOther; /* +0x0018 */ unsigned long cAdditionalStore; /* +0x0020 */ unsigned char rghAdditionalStore[8]; /* +0x0028 55 13 00 00 */ unsigned long dwFlags; /* +0x0030 */ unsigned long dwUrlRetrievalTimeout; /* +0x0034 */ unsigned long MaximumCachedCertificates; /* +0x0038 */ unsigned long CycleDetectionModulus; /* +0x003c */ void *hExclusiveRoot; /* +0x0040 */ void *hExclusiveTrustedPeople; /* +0x0048 */ unsigned long dwExclusiveFlags; /* +0x0050 */ }; struct _MOVE_FILE_DATA32 { unsigned char FileHandle[8]; /* +0x0000 75 00 00 00 */ unsigned char StartingVcn[8]; /* +0x0008 43 13 00 00 */ unsigned char StartingLcn[8]; /* +0x0010 43 13 00 00 */ unsigned long ClusterCount; /* +0x0018 */ }; struct _TOKEN_USER_CLAIMS { void *UserClaims; /* +0x0000 */ }; struct _SYSTEM_REF_TRACE_INFORMATION { unsigned char TraceEnable; /* +0x0000 */ unsigned char TracePermanent; /* +0x0001 */ unsigned char TraceProcessName[16]; /* +0x0008 e3 12 00 00 */ unsigned char TracePoolTags[16]; /* +0x0018 e3 12 00 00 */ }; struct _HEAP_INFORMATION_ITEM { unsigned long Level; /* +0x0000 */ unsigned long long Size; /* +0x0008 */ /* unsigned char ProcessHeapInformation[0]; +0x0010 3a 14 00 00 */ /* unsigned char HeapInformation[0]; +0x0010 4b 13 00 00 */ /* unsigned char HeapRegionInformation[0]; +0x0010 d6 12 00 00 */ /* unsigned char HeapRangeInformation[0]; +0x0010 14 34 00 00 */ /* unsigned char HeapBlockInformation[0]; +0x0010 17 43 00 00 */ /* unsigned char HeapPerfInformation[0]; +0x0010 20 13 00 00 */ unsigned long long DynamicStart; /* +0x0010 */ }; struct _API_SET_NAMESPACE_ENTRY { unsigned long NameOffset; /* +0x0000 */ unsigned long NameLength; /* +0x0004 */ unsigned long DataOffset; /* +0x0008 */ }; struct _RTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_BASIC { unsigned long long Size; /* +0x0000 */ unsigned long Format; /* +0x0008 */ unsigned char Frame[24]; /* +0x0010 5c 1c 00 00 */ }; struct NTFS_FILE_RECORD_INPUT_BUFFER { unsigned char FileReferenceNumber[8]; /* +0x0000 43 13 00 00 */ }; struct _IMAGE_SYMBOL_EX:: { unsigned char ShortName[8]; /* +0x0000 91 19 00 00 */ }; struct _FILE_REMOTE_PROTOCOL_INFORMATION:: { unsigned char Reserved[64]; /* +0x0000 87 27 00 00 */ }; struct _FILE_REMOTE_PROTOCOL_INFORMATION:: { unsigned char Reserved[32]; /* +0x0000 cc 4e 00 00 */ }; struct _IMAGE_RESOURCE_DIRECTORY { unsigned long Characteristics; /* +0x0000 */ unsigned long TimeDateStamp; /* +0x0004 */ unsigned short MajorVersion; /* +0x0008 */ unsigned short MinorVersion; /* +0x000a */ unsigned short NumberOfNamedEntries; /* +0x000c */ unsigned short NumberOfIdEntries; /* +0x000e */ }; struct _s__RTTIBaseClassArray { unsigned char arrayOfBaseClassDescriptors[4]; /* +0x0000 e2 4e 00 00 */ }; struct localeinfo_struct { unsigned char locinfo[8]; /* +0x0000 eb 4e 00 00 */ unsigned char mbcinfo[8]; /* +0x0008 ed 4e 00 00 */ }; struct _SYSDBG_TRIAGE_DUMP { unsigned long Flags; /* +0x0000 */ unsigned long BugCheckCode; /* +0x0004 */ unsigned long long BugCheckParam1; /* +0x0008 */ unsigned long long BugCheckParam2; /* +0x0010 */ unsigned long long BugCheckParam3; /* +0x0018 */ unsigned long long BugCheckParam4; /* +0x0020 */ unsigned long ProcessHandles; /* +0x0028 */ unsigned long ThreadHandles; /* +0x002c */ unsigned char Handles[8]; /* +0x0030 55 13 00 00 */ }; struct NCryptKeyName { unsigned char pszName[8]; /* +0x0000 71 06 00 00 */ unsigned char pszAlgid[8]; /* +0x0008 71 06 00 00 */ unsigned long dwLegacyKeySpec; /* +0x0010 */ unsigned long dwFlags; /* +0x0014 */ }; struct _SYSTEM_PLATFORM_BINARY_INFORMATION { void *HandoffBuffer; /* +0x0000 */ void *CommandLineBuffer; /* +0x0008 */ unsigned long HandoffBufferSize; /* +0x0010 */ unsigned long CommandLineBufferSize; /* +0x0014 */ }; struct _GDI_NONREMOTE { long fContext; /* +0x0000 */ }; struct _GDI_NONREMOTE::__MIDL_IWinTypes_0002 { long hInproc; /* +0x0000 */ unsigned char hRemote[8]; /* +0x0000 3a 4f 00 00 */ }; struct tagCWPSTRUCT { long long lParam; /* +0x0000 */ unsigned long long wParam; /* +0x0008 */ unsigned char message[8]; /* +0x0010 75 00 00 00 */ unsigned char hwnd[8]; /* +0x0018 f7 12 00 00 */ }; struct _SD_ENUM_SDS_OUTPUT { unsigned long long NextOffset; /* +0x0000 */ unsigned long long NumSDEntriesReturned; /* +0x0008 */ unsigned long long NumSDBytesReturned; /* +0x0010 */ unsigned char SDEntry[24]; /* +0x0018 5a 4f 00 00 */ }; struct PPM_WMI_IDLE_STATE { unsigned long Latency; /* +0x0000 */ unsigned long Power; /* +0x0004 */ unsigned long TimeCheck; /* +0x0008 */ unsigned char PromotePercent; /* +0x000c */ unsigned char DemotePercent; /* +0x000d */ unsigned char StateType; /* +0x000e */ unsigned char Reserved; /* +0x000f */ unsigned long StateFlags; /* +0x0010 */ unsigned long Context; /* +0x0014 */ unsigned long IdleHandler; /* +0x0018 */ unsigned long Reserved1; /* +0x001c */ }; struct _CERT_POLICY_QUALIFIER_INFO { char *pszPolicyQualifierId; /* +0x0000 */ unsigned char Qualifier[16]; /* +0x0008 08 13 00 00 */ }; struct _TXFS_GET_TRANSACTED_VERSION { unsigned long ThisBaseVersion; /* +0x0000 */ unsigned long LatestVersion; /* +0x0004 */ unsigned short ThisMiniVersion; /* +0x0008 */ unsigned short FirstMiniVersion; /* +0x000a */ unsigned short LatestMiniVersion; /* +0x000c */ }; struct _EXCEPTION_REGISTRATION_RECORD { unsigned char Next[8]; /* +0x0000 44 1e 00 00 */ unsigned char Handler[8]; /* +0x0008 ed 3a 00 00 */ }; struct PPM_WMI_IDLE_STATES_EX { unsigned long Type; /* +0x0000 */ unsigned long Count; /* +0x0004 */ unsigned long TargetState; /* +0x0008 */ unsigned long OldState; /* +0x000c */ void *TargetProcessors; /* +0x0010 */ unsigned char State[32]; /* +0x0018 7d 4f 00 00 */ }; struct tagEXTLOGPEN32 { unsigned long elpPenStyle; /* +0x0000 */ unsigned long elpWidth; /* +0x0004 */ unsigned char elpBrushStyle[4]; /* +0x0008 75 00 00 00 */ unsigned long elpColor; /* +0x000c */ unsigned long elpHatch; /* +0x0010 */ unsigned long elpNumEntries; /* +0x0014 */ unsigned char elpStyleEntry[4]; /* +0x0018 fc 12 00 00 */ }; struct _REMOTE_NAME_INFOA { char *lpUniversalName; /* +0x0000 */ char *lpConnectionName; /* +0x0008 */ char *lpRemainingPath; /* +0x0010 */ }; struct XSAVE_CPU_ERRATA { unsigned long NumberOfErrata; /* +0x0000 */ unsigned char Errata[32]; /* +0x0008 99 4f 00 00 */ }; struct tagOLEVERB { long lVerb; /* +0x0000 */ unsigned char lpszVerbName[8]; /* +0x0008 71 06 00 00 */ unsigned long fuFlags; /* +0x0010 */ unsigned long grfAttribs; /* +0x0014 */ }; struct _ImageArchitectureHeader { /* unsigned char AmaskValue[0]; +0x0000 f8 1c 00 00 */ unsigned char AmaskShift[4]; /* +0x0000 cc 4f 00 00 */ unsigned long FirstEntryRVA; /* +0x0004 */ }; struct _FILE_QUERY_ON_DISK_VOL_INFO_BUFFER { unsigned char DirectoryCount[8]; /* +0x0000 43 13 00 00 */ unsigned char FileCount[8]; /* +0x0008 43 13 00 00 */ unsigned short FsFormatMajVersion; /* +0x0010 */ unsigned short FsFormatMinVersion; /* +0x0012 */ unsigned char FsFormatName[28]; /* +0x0014 55 29 00 00 */ unsigned char FormatTime[8]; /* +0x0030 43 13 00 00 */ unsigned char LastUpdateTime[8]; /* +0x0038 43 13 00 00 */ unsigned char CopyrightInfo[68]; /* +0x0040 1c 50 00 00 */ unsigned char AbstractInfo[68]; /* +0x0084 1c 50 00 00 */ unsigned char FormattingImplementationInfo[68]; /* +0x00c8 1c 50 00 00 */ unsigned char LastModifyingImplementationInfo[68]; /* +0x010c 1c 50 00 00 */ }; struct _RTL_HANDLE_TABLE_ENTRY { unsigned long Flags; /* +0x0000 */ unsigned char NextFree[8]; /* +0x0000 84 2a 00 00 */ }; struct _NOTIFYICONIDENTIFIER { unsigned long cbSize; /* +0x0000 */ unsigned char hWnd[8]; /* +0x0008 f7 12 00 00 */ unsigned char uID[4]; /* +0x0010 75 00 00 00 */ unsigned char guidItem[20]; /* +0x0014 f3 14 00 00 */ }; struct NOTIFY_USER_POWER_SETTING { unsigned char Guid[16]; /* +0x0000 f3 14 00 00 */ }; struct _CMSG_KEY_AGREE_ENCRYPT_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwRecipientIndex; /* +0x0004 */ unsigned char KeyEncryptionAlgorithm[24]; /* +0x0008 68 14 00 00 */ unsigned char UserKeyingMaterial[16]; /* +0x0020 08 13 00 00 */ unsigned long dwOriginatorChoice; /* +0x0030 */ /* unsigned char OriginatorCertId[0]; +0x0038 36 13 00 00 */ unsigned char OriginatorPublicKeyInfo[48]; /* +0x0038 6b 20 00 00 */ unsigned long cKeyAgreeKeyEncryptInfo; /* +0x0068 */ unsigned char rgpKeyAgreeKeyEncryptInfo[8]; /* +0x0070 51 50 00 00 */ unsigned long dwFlags; /* +0x0078 */ }; struct _FILE_STANDARD_LINK_INFORMATION { unsigned long NumberOfAccessibleLinks; /* +0x0000 */ unsigned long TotalNumberOfLinks; /* +0x0004 */ unsigned char DeletePending; /* +0x0008 */ unsigned char Directory; /* +0x0009 */ }; struct _CTL_CONTEXT { unsigned long dwMsgAndCertEncodingType; /* +0x0000 */ unsigned char *pbCtlEncoded; /* +0x0008 */ unsigned long cbCtlEncoded; /* +0x0010 */ unsigned char pCtlInfo[8]; /* +0x0018 02 33 00 00 */ void *hCertStore; /* +0x0020 */ void *hCryptMsg; /* +0x0028 */ unsigned char *pbCtlContent; /* +0x0030 */ unsigned long cbCtlContent; /* +0x0038 */ }; struct _RPC_BINDING_VECTOR { unsigned long Count; /* +0x0000 */ unsigned char BindingH[8]; /* +0x0008 84 44 00 00 */ }; struct tagINTERFACEINFO { unsigned char pUnk[8]; /* +0x0000 93 17 00 00 */ unsigned char iid[16]; /* +0x0008 f3 14 00 00 */ unsigned short wMethod; /* +0x0018 */ }; struct _BOOT_OPTIONS { unsigned long Version; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned long Timeout; /* +0x0008 */ unsigned long CurrentBootEntryId; /* +0x000c */ unsigned long NextBootEntryId; /* +0x0010 */ unsigned char HeadlessRedirection[4]; /* +0x0014 0a 14 00 00 */ }; struct _OCSP_BASIC_RESPONSE_ENTRY { unsigned char CertId[72]; /* +0x0000 f5 31 00 00 */ unsigned long dwCertStatus; /* +0x0048 */ unsigned char pRevokedInfo[8]; /* +0x0050 59 44 00 00 */ unsigned char ThisUpdate[8]; /* +0x0058 37 13 00 00 */ unsigned char NextUpdate[8]; /* +0x0060 37 13 00 00 */ unsigned long cExtension; /* +0x0068 */ unsigned char rgExtension[8]; /* +0x0070 3f 16 00 00 */ }; struct MOVE_FILE_DATA { void *FileHandle; /* +0x0000 */ unsigned char StartingVcn[8]; /* +0x0008 43 13 00 00 */ unsigned char StartingLcn[8]; /* +0x0010 43 13 00 00 */ unsigned long ClusterCount; /* +0x0018 */ }; struct IMAGE_COR20_HEADER { unsigned long cb; /* +0x0000 */ unsigned short MajorRuntimeVersion; /* +0x0004 */ unsigned short MinorRuntimeVersion; /* +0x0006 */ unsigned char MetaData[8]; /* +0x0008 12 1c 00 00 */ unsigned long Flags; /* +0x0010 */ unsigned long EntryPointToken; /* +0x0014 */ unsigned long EntryPointRVA; /* +0x0014 */ unsigned char Resources[8]; /* +0x0018 12 1c 00 00 */ unsigned char StrongNameSignature[8]; /* +0x0020 12 1c 00 00 */ unsigned char CodeManagerTable[8]; /* +0x0028 12 1c 00 00 */ unsigned char VTableFixups[8]; /* +0x0030 12 1c 00 00 */ unsigned char ExportAddressTableJumps[8]; /* +0x0038 12 1c 00 00 */ unsigned char ManagedNativeHeader[8]; /* +0x0040 12 1c 00 00 */ }; struct _TOKEN_ACCESS_INFORMATION { unsigned char SidHash[8]; /* +0x0000 c0 3d 00 00 */ unsigned char RestrictedSidHash[8]; /* +0x0008 c0 3d 00 00 */ unsigned char Privileges[8]; /* +0x0010 15 22 00 00 */ unsigned char AuthenticationId[8]; /* +0x0018 38 15 00 00 */ unsigned char TokenType[4]; /* +0x0020 42 2e 00 00 */ unsigned char ImpersonationLevel[4]; /* +0x0024 43 2e 00 00 */ unsigned char MandatoryPolicy[4]; /* +0x0028 68 35 00 00 */ unsigned long Flags; /* +0x002c */ unsigned long AppContainerNumber; /* +0x0030 */ void *PackageSid; /* +0x0038 */ unsigned char CapabilitiesHash[8]; /* +0x0040 c0 3d 00 00 */ }; struct _API_SET_VALUE_ARRAY { unsigned long Count; /* +0x0000 */ unsigned char Array[16]; /* +0x0004 99 50 00 00 */ }; struct _SERVICE_FAILURE_ACTIONSA { unsigned long dwResetPeriod; /* +0x0000 */ char *lpRebootMsg; /* +0x0008 */ char *lpCommand; /* +0x0010 */ unsigned long cActions; /* +0x0018 */ unsigned char lpsaActions[8]; /* +0x0020 1d 2c 00 00 */ }; struct _COMPRESSED_DATA_INFO { unsigned short CompressionFormatAndEngine; /* +0x0000 */ unsigned char CompressionUnitShift; /* +0x0002 */ unsigned char ChunkShift; /* +0x0003 */ unsigned char ClusterShift; /* +0x0004 */ unsigned char Reserved; /* +0x0005 */ unsigned short NumberOfChunks; /* +0x0006 */ unsigned char CompressedChunkSizes[4]; /* +0x0008 fc 12 00 00 */ }; struct _SYSTEM_TIMEOFDAY_INFORMATION { unsigned char BootTime[8]; /* +0x0000 43 13 00 00 */ unsigned char CurrentTime[8]; /* +0x0008 43 13 00 00 */ unsigned char TimeZoneBias[8]; /* +0x0010 43 13 00 00 */ unsigned long TimeZoneId; /* +0x0018 */ unsigned long Reserved; /* +0x001c */ unsigned long long BootTimeBias; /* +0x0020 */ unsigned long long SleepTimeBias; /* +0x0028 */ }; struct _CM_EISA_FUNCTION_INFORMATION { unsigned long CompressedId; /* +0x0000 */ unsigned char IdSlotFlags1; /* +0x0004 */ unsigned char IdSlotFlags2; /* +0x0005 */ unsigned char MinorRevision; /* +0x0006 */ unsigned char MajorRevision; /* +0x0007 */ unsigned char Selections[26]; /* +0x0008 af 50 00 00 */ unsigned char FunctionFlags; /* +0x0022 */ unsigned char TypeString[80]; /* +0x0023 54 2b 00 00 */ unsigned char EisaMemory[63]; /* +0x0073 b0 50 00 00 */ unsigned char EisaIrq[14]; /* +0x00b2 b1 50 00 00 */ unsigned char EisaDma[8]; /* +0x00c0 b2 50 00 00 */ unsigned char EisaPort[60]; /* +0x00c8 b3 50 00 00 */ unsigned char InitializationData[60]; /* +0x0104 b4 50 00 00 */ }; struct _BCRYPT_RSAKEY_BLOB { unsigned long Magic; /* +0x0000 */ unsigned long BitLength; /* +0x0004 */ unsigned long cbPublicExp; /* +0x0008 */ unsigned long cbModulus; /* +0x000c */ unsigned long cbPrime1; /* +0x0010 */ unsigned long cbPrime2; /* +0x0014 */ }; struct PPM_WMI_IDLE_STATES { unsigned long Type; /* +0x0000 */ unsigned long Count; /* +0x0004 */ unsigned long TargetState; /* +0x0008 */ unsigned long OldState; /* +0x000c */ unsigned long long TargetProcessors; /* +0x0010 */ unsigned char State[32]; /* +0x0018 7d 4f 00 00 */ }; struct _SYSTEM_HOTPATCH_MODULE_QUERY_PARAMETERS { unsigned long QueryFlags; /* +0x0000 */ void *ProcessHandle; /* +0x0008 */ }; struct _SL_HWID_DEVICE_INFO { unsigned long SizeBytes; /* +0x0000 */ unsigned char Type; /* +0x0004 */ unsigned char DeviceRemovalPolicy; /* +0x0005 */ unsigned char AuthenticationStatus; /* +0x0006 */ unsigned char Disposition; /* +0x0007 */ unsigned long DeviceNodeLevel; /* +0x0008 */ unsigned char Guid[16]; /* +0x000c f3 14 00 00 */ unsigned char Data[4]; /* +0x001c ff 12 00 00 */ }; struct tagMSG { unsigned char hwnd[8]; /* +0x0000 f7 12 00 00 */ unsigned char message[8]; /* +0x0008 75 00 00 00 */ unsigned long long wParam; /* +0x0010 */ long long lParam; /* +0x0018 */ unsigned long time; /* +0x0020 */ unsigned char pt[12]; /* +0x0024 a1 14 00 00 */ }; struct tagCANDIDATELIST { unsigned long dwSize; /* +0x0000 */ unsigned long dwStyle; /* +0x0004 */ unsigned long dwCount; /* +0x0008 */ unsigned long dwSelection; /* +0x000c */ unsigned long dwPageStart; /* +0x0010 */ unsigned long dwPageSize; /* +0x0014 */ unsigned char dwOffset[4]; /* +0x0018 fc 12 00 00 */ }; struct _ACL_REVISION_INFORMATION { unsigned long AclRevision; /* +0x0000 */ }; struct _ROOT_INFO_LUID { unsigned long LowPart; /* +0x0000 */ long HighPart; /* +0x0004 */ }; struct PPM_IDLE_STATE_BUCKET_EX { unsigned long long TotalTimeUs; /* +0x0000 */ unsigned long MinTimeUs; /* +0x0008 */ unsigned long MaxTimeUs; /* +0x000c */ unsigned long Count; /* +0x0010 */ }; struct _IMAGE_IMPORT_DESCRIPTOR { unsigned long Characteristics; /* +0x0000 */ unsigned long OriginalFirstThunk; /* +0x0000 */ unsigned long TimeDateStamp; /* +0x0004 */ unsigned long ForwarderChain; /* +0x0008 */ unsigned long Name; /* +0x000c */ unsigned long FirstThunk; /* +0x0010 */ }; struct _wfinddata32i64_t { unsigned char attrib[4]; /* +0x0000 75 00 00 00 */ long time_create; /* +0x0004 */ long time_access; /* +0x0008 */ long time_write; /* +0x000c */ long long size; /* +0x0010 */ unsigned char name[520]; /* +0x0018 00 16 00 00 */ }; struct _PMD { unsigned char mdisp[4]; /* +0x0000 74 00 00 00 */ unsigned char pdisp[4]; /* +0x0004 74 00 00 00 */ unsigned char vdisp[4]; /* +0x0008 74 00 00 00 */ }; struct _RTL_BUFFER { unsigned char *Buffer; /* +0x0000 */ unsigned char *StaticBuffer; /* +0x0008 */ unsigned long long Size; /* +0x0010 */ unsigned long long StaticSize; /* +0x0018 */ unsigned long long ReservedForAllocatedSize; /* +0x0020 */ void *ReservedForIMalloc; /* +0x0028 */ }; struct _RPC_HTTP_TRANSPORT_CREDENTIALS_V3_W { void *TransportCredentials; /* +0x0000 */ unsigned long Flags; /* +0x0008 */ unsigned long AuthenticationTarget; /* +0x000c */ unsigned long NumberOfAuthnSchemes; /* +0x0010 */ unsigned long *AuthnSchemes; /* +0x0018 */ unsigned short *ServerCertificateSubject; /* +0x0020 */ void *ProxyCredentials; /* +0x0028 */ unsigned long NumberOfProxyAuthnSchemes; /* +0x0030 */ unsigned long *ProxyAuthnSchemes; /* +0x0038 */ }; struct _CMC_PEND_INFO { unsigned char PendToken[16]; /* +0x0000 08 13 00 00 */ unsigned char PendTime[8]; /* +0x0010 37 13 00 00 */ }; struct tagHARDWAREHOOKSTRUCT { unsigned char hwnd[8]; /* +0x0000 f7 12 00 00 */ unsigned char message[8]; /* +0x0008 75 00 00 00 */ unsigned long long wParam; /* +0x0010 */ long long lParam; /* +0x0018 */ }; struct _PSFEATURE_OUTPUT { unsigned char bPageIndependent[4]; /* +0x0000 74 00 00 00 */ unsigned char bSetPageDevice[4]; /* +0x0004 74 00 00 00 */ }; struct KEY_PID_ARRAY { void *PID; /* +0x0000 */ unsigned char KeyName[16]; /* +0x0008 e3 12 00 00 */ }; struct _RTL_STACK_CONTEXT { unsigned long NumberOfEntries; /* +0x0000 */ unsigned char Entry[16]; /* +0x0008 71 51 00 00 */ }; struct PPM_THERMAL_POLICY_EVENT { unsigned char Mode; /* +0x0000 */ unsigned long long Processors; /* +0x0008 */ }; struct SYSTEM_POWER_CAPABILITIES { unsigned char PowerButtonPresent; /* +0x0000 */ unsigned char SleepButtonPresent; /* +0x0001 */ unsigned char LidPresent; /* +0x0002 */ unsigned char SystemS1; /* +0x0003 */ unsigned char SystemS2; /* +0x0004 */ unsigned char SystemS3; /* +0x0005 */ unsigned char SystemS4; /* +0x0006 */ unsigned char SystemS5; /* +0x0007 */ unsigned char HiberFilePresent; /* +0x0008 */ unsigned char FullWake; /* +0x0009 */ unsigned char VideoDimPresent; /* +0x000a */ unsigned char ApmPresent; /* +0x000b */ unsigned char UpsPresent; /* +0x000c */ unsigned char ThermalControl; /* +0x000d */ unsigned char ProcessorThrottle; /* +0x000e */ unsigned char ProcessorMinThrottle; /* +0x000f */ unsigned char ProcessorMaxThrottle; /* +0x0010 */ unsigned char FastSystemS4; /* +0x0011 */ unsigned char Hiberboot; /* +0x0012 */ unsigned char WakeAlarmPresent; /* +0x0013 */ unsigned char AoAc; /* +0x0014 */ unsigned char DiskSpinDown; /* +0x0015 */ unsigned char spare3[8]; /* +0x0016 91 19 00 00 */ unsigned char SystemBatteriesPresent; /* +0x001e */ unsigned char BatteriesAreShortTerm; /* +0x001f */ unsigned char BatteryScale[24]; /* +0x0020 2b 52 00 00 */ unsigned char AcOnLineWake[4]; /* +0x0038 76 16 00 00 */ unsigned char SoftLidWake[4]; /* +0x003c 76 16 00 00 */ unsigned char RtcWake[4]; /* +0x0040 76 16 00 00 */ unsigned char MinDeviceWakeState[4]; /* +0x0044 76 16 00 00 */ unsigned char DefaultLowLatencyWake[4]; /* +0x0048 76 16 00 00 */ }; struct _EISA_PORT_CONFIGURATION { unsigned char Configuration[1]; /* +0x0000 ec 46 00 00 */ unsigned short PortAddress; /* +0x0001 */ }; struct POWER_STATE_HANDLER { unsigned char Type[4]; /* +0x0000 04 13 00 00 */ unsigned char RtcWake; /* +0x0004 */ unsigned char Spare[3]; /* +0x0005 93 13 00 00 */ unsigned char Handler[8]; /* +0x0008 49 49 00 00 */ void *Context; /* +0x0010 */ }; struct DISPLAYCONFIG_TARGET_DEVICE_NAME { unsigned char header[20]; /* +0x0000 0d 25 00 00 */ unsigned char flags[4]; /* +0x0014 54 52 00 00 */ unsigned char outputTechnology[4]; /* +0x0018 77 44 00 00 */ unsigned short edidManufactureId; /* +0x001c */ unsigned short edidProductCodeId; /* +0x001e */ unsigned char connectorInstance[4]; /* +0x0020 75 00 00 00 */ unsigned char monitorFriendlyDeviceName[128]; /* +0x0024 cb 1e 00 00 */ unsigned char monitorDevicePath[256]; /* +0x00a4 c1 15 00 00 */ }; struct _CLAIM_SECURITY_ATTRIBUTES_INFORMATION:: { unsigned char pAttributeV1[8]; /* +0x0000 21 20 00 00 */ }; struct _KEY_FLAGS_INFORMATION { unsigned long Wow64Flags; /* +0x0000 */ unsigned long KeyFlags; /* +0x0004 */ unsigned long ControlFlags; /* +0x0008 */ }; struct _CM_VIDEO_DEVICE_DATA { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned long VideoClock; /* +0x0004 */ }; struct _wireVARIANT { unsigned long clSize; /* +0x0000 */ unsigned long rpcReserved; /* +0x0004 */ unsigned short vt; /* +0x0008 */ unsigned short wReserved1; /* +0x000a */ unsigned short wReserved2; /* +0x000c */ unsigned short wReserved3; /* +0x000e */ long long llVal; /* +0x0010 */ long lVal; /* +0x0010 */ unsigned char bVal; /* +0x0010 */ short iVal; /* +0x0010 */ /* unsigned char fltVal[0]; +0x0010 40 00 00 00 */ /* unsigned char dblVal[0]; +0x0010 41 00 00 00 */ short boolVal; /* +0x0010 */ long scode; /* +0x0010 */ /* unsigned char cyVal[0]; +0x0010 b9 3d 00 00 */ /* unsigned char date[0]; +0x0010 41 00 00 00 */ /* unsigned char bstrVal[0]; +0x0010 6e 1d 00 00 */ /* unsigned char punkVal[0]; +0x0010 93 17 00 00 */ /* unsigned char pdispVal[0]; +0x0010 c7 31 00 00 */ /* unsigned char parray[0]; +0x0010 40 51 00 00 */ /* unsigned char brecVal[0]; +0x0010 cc 15 00 00 */ unsigned char *pbVal; /* +0x0010 */ short *piVal; /* +0x0010 */ long *plVal; /* +0x0010 */ long long *pllVal; /* +0x0010 */ /* unsigned char pfltVal[0]; +0x0010 40 06 00 00 */ /* unsigned char pdblVal[0]; +0x0010 41 06 00 00 */ short *pboolVal; /* +0x0010 */ long *pscode; /* +0x0010 */ /* unsigned char pcyVal[0]; +0x0010 ba 3d 00 00 */ /* unsigned char pdate[0]; +0x0010 41 06 00 00 */ /* unsigned char pbstrVal[0]; +0x0010 89 3b 00 00 */ /* unsigned char ppunkVal[0]; +0x0010 4e 22 00 00 */ /* unsigned char ppdispVal[0]; +0x0010 c8 31 00 00 */ /* unsigned char pparray[0]; +0x0010 8a 52 00 00 */ /* unsigned char pvarVal[0]; +0x0010 23 26 00 00 */ char cVal; /* +0x0010 */ unsigned short uiVal; /* +0x0010 */ unsigned long ulVal; /* +0x0010 */ unsigned long long ullVal; /* +0x0010 */ /* unsigned char intVal[0]; +0x0010 74 00 00 00 */ /* unsigned char uintVal[0]; +0x0010 75 00 00 00 */ /* unsigned char decVal[0]; +0x0010 05 1f 00 00 */ /* unsigned char pdecVal[0]; +0x0010 06 1f 00 00 */ char *pcVal; /* +0x0010 */ unsigned short *puiVal; /* +0x0010 */ unsigned long *pulVal; /* +0x0010 */ unsigned long long *pullVal; /* +0x0010 */ /* unsigned char pintVal[0]; +0x0010 74 06 00 00 */ unsigned char puintVal[16]; /* +0x0010 75 06 00 00 */ }; struct _SHFILEINFOA { unsigned char hIcon[8]; /* +0x0000 43 21 00 00 */ unsigned char iIcon[4]; /* +0x0008 74 00 00 00 */ unsigned long dwAttributes; /* +0x000c */ unsigned char szDisplayName[260]; /* +0x0010 69 24 00 00 */ unsigned char szTypeName[84]; /* +0x0114 0d 30 00 00 */ }; struct _INSTALLSPEC:: { unsigned char Clsid[16]; /* +0x0000 f3 14 00 00 */ unsigned long ClsCtx; /* +0x0010 */ }; struct _INSTALLSPEC:: { unsigned char Name[8]; /* +0x0000 71 06 00 00 */ unsigned char GPOId[16]; /* +0x0008 f3 14 00 00 */ }; struct _TOKEN_SECURITY_ATTRIBUTE_V1:: { long long *pInt64; /* +0x0000 */ unsigned long long *pUint64; /* +0x0000 */ /* unsigned char pString[0]; +0x0000 b6 17 00 00 */ /* unsigned char pFqbn[0]; +0x0000 3c 2a 00 00 */ unsigned char pOctetString[8]; /* +0x0000 ec 2d 00 00 */ }; struct tagARRAYDESC { unsigned char tdescElem[16]; /* +0x0000 22 41 00 00 */ unsigned short cDims; /* +0x0010 */ unsigned char rgbounds[12]; /* +0x0014 47 25 00 00 */ }; struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME { unsigned char Previous[8]; /* +0x0000 ba 3e 00 00 */ unsigned char ActivationContext[8]; /* +0x0008 7d 17 00 00 */ unsigned long Flags; /* +0x0010 */ }; struct RPC_IMPORT_CONTEXT_P { void *LookupContext; /* +0x0000 */ void *ProposedHandle; /* +0x0008 */ unsigned char Bindings[8]; /* +0x0010 c3 52 00 00 */ }; struct _GDI_OBJECT::__MIDL_IAdviseSink_0002 { /* unsigned char hBitmap[0]; +0x0000 b9 2b 00 00 */ /* unsigned char hPalette[0]; +0x0000 2f 22 00 00 */ unsigned char hGeneric[8]; /* +0x0000 d8 13 00 00 */ }; struct _OBJECT_HANDLE_FLAG_INFORMATION { unsigned char Inherit; /* +0x0000 */ unsigned char ProtectFromClose; /* +0x0001 */ }; struct tagMONITORINFO { unsigned long cbSize; /* +0x0000 */ unsigned char rcMonitor[16]; /* +0x0004 7a 14 00 00 */ unsigned char rcWork[16]; /* +0x0014 7a 14 00 00 */ unsigned long dwFlags; /* +0x0024 */ }; struct tagCOMPOSITIONFORM { unsigned long dwStyle; /* +0x0000 */ unsigned char ptCurrentPos[8]; /* +0x0004 a1 14 00 00 */ unsigned char rcArea[16]; /* +0x000c 7a 14 00 00 */ }; struct _LDR_DATA_TABLE_ENTRY64 { unsigned char InLoadOrderLinks[16]; /* +0x0000 10 1d 00 00 */ unsigned char InMemoryOrderLinks[16]; /* +0x0010 10 1d 00 00 */ unsigned char InInitializationOrderLinks[16]; /* +0x0020 10 1d 00 00 */ unsigned long long DllBase; /* +0x0030 */ unsigned long long EntryPoint; /* +0x0038 */ unsigned long SizeOfImage; /* +0x0040 */ unsigned char FullDllName[16]; /* +0x0048 51 29 00 00 */ unsigned char BaseDllName[16]; /* +0x0058 51 29 00 00 */ unsigned long Flags; /* +0x0068 */ unsigned short LoadCount; /* +0x006c */ unsigned short TlsIndex; /* +0x006e */ /* unsigned char HashLinks[0]; +0x0070 10 1d 00 00 */ unsigned long long SectionPointer; /* +0x0070 */ unsigned long CheckSum; /* +0x0078 */ unsigned long TimeDateStamp; /* +0x0080 */ unsigned long long LoadedImports; /* +0x0080 */ }; struct tagRAWINPUT:: { /* unsigned char mouse[0]; +0x0000 2a 29 00 00 */ /* unsigned char keyboard[0]; +0x0000 91 20 00 00 */ unsigned char hid[24]; /* +0x0000 16 44 00 00 */ }; struct BITMAPV5HEADER { unsigned long bV5Size; /* +0x0000 */ long bV5Width; /* +0x0004 */ long bV5Height; /* +0x0008 */ unsigned short bV5Planes; /* +0x000c */ unsigned short bV5BitCount; /* +0x000e */ unsigned long bV5Compression; /* +0x0010 */ unsigned long bV5SizeImage; /* +0x0014 */ long bV5XPelsPerMeter; /* +0x0018 */ long bV5YPelsPerMeter; /* +0x001c */ unsigned long bV5ClrUsed; /* +0x0020 */ unsigned long bV5ClrImportant; /* +0x0024 */ unsigned long bV5RedMask; /* +0x0028 */ unsigned long bV5GreenMask; /* +0x002c */ unsigned long bV5BlueMask; /* +0x0030 */ unsigned long bV5AlphaMask; /* +0x0034 */ unsigned long bV5CSType; /* +0x0038 */ unsigned char bV5Endpoints[36]; /* +0x003c 00 2d 00 00 */ unsigned long bV5GammaRed; /* +0x0060 */ unsigned long bV5GammaGreen; /* +0x0064 */ unsigned long bV5GammaBlue; /* +0x0068 */ unsigned long bV5Intent; /* +0x006c */ unsigned long bV5ProfileData; /* +0x0070 */ unsigned long bV5ProfileSize; /* +0x0074 */ unsigned long bV5Reserved; /* +0x0078 */ }; struct _MIDL_SERVER_INFO_ { unsigned char pStubDesc[8]; /* +0x0000 77 29 00 00 */ unsigned char DispatchTable[8]; /* +0x0008 cb 53 00 00 */ unsigned char ProcString[8]; /* +0x0010 4b 19 00 00 */ unsigned char FmtStringOffset[8]; /* +0x0018 4d 19 00 00 */ unsigned char ThunkTable[8]; /* +0x0020 1e 1a 00 00 */ unsigned char pTransferSyntax[8]; /* +0x0028 2b 24 00 00 */ unsigned long long nCount; /* +0x0030 */ unsigned char pSyntaxInfo[8]; /* +0x0038 dd 20 00 00 */ }; struct RETRIEVAL_POINTERS_BUFFER { unsigned long ExtentCount; /* +0x0000 */ unsigned char StartingVcn[24]; /* +0x0008 43 13 00 00 */ }; struct RETRIEVAL_POINTERS_BUFFER:: { unsigned char NextVcn[8]; /* +0x0000 43 13 00 00 */ unsigned char Lcn[8]; /* +0x0008 43 13 00 00 */ }; struct BITMAPV4HEADER { unsigned long bV4Size; /* +0x0000 */ long bV4Width; /* +0x0004 */ long bV4Height; /* +0x0008 */ unsigned short bV4Planes; /* +0x000c */ unsigned short bV4BitCount; /* +0x000e */ unsigned long bV4V4Compression; /* +0x0010 */ unsigned long bV4SizeImage; /* +0x0014 */ long bV4XPelsPerMeter; /* +0x0018 */ long bV4YPelsPerMeter; /* +0x001c */ unsigned long bV4ClrUsed; /* +0x0020 */ unsigned long bV4ClrImportant; /* +0x0024 */ unsigned long bV4RedMask; /* +0x0028 */ unsigned long bV4GreenMask; /* +0x002c */ unsigned long bV4BlueMask; /* +0x0030 */ unsigned long bV4AlphaMask; /* +0x0034 */ unsigned long bV4CSType; /* +0x0038 */ unsigned char bV4Endpoints[36]; /* +0x003c 00 2d 00 00 */ unsigned long bV4GammaRed; /* +0x0060 */ unsigned long bV4GammaGreen; /* +0x0064 */ unsigned long bV4GammaBlue; /* +0x0068 */ }; struct DVTDINFO { unsigned char cbConvertSize[4]; /* +0x0000 75 00 00 00 */ unsigned char cchDrvName[4]; /* +0x0004 75 00 00 00 */ unsigned char cchDevName[4]; /* +0x0008 75 00 00 00 */ unsigned char cchPortName[4]; /* +0x000c 75 00 00 00 */ }; enum _TAPE_DRIVE_PROBLEM_TYPE { TapeDriveProblemNone = 0, TapeDriveReadWriteWarning = 1, TapeDriveReadWriteError = 2, TapeDriveReadWarning = 3, TapeDriveWriteWarning = 4, TapeDriveReadError = 5, TapeDriveWriteError = 6, TapeDriveHardwareError = 7, TapeDriveUnsupportedMedia = 8, TapeDriveScsiConnectionError = 9, TapeDriveTimetoClean = 10, TapeDriveCleanDriveNow = 11, TapeDriveMediaLifeExpired = 12, TapeDriveSnappedTape = 13 }; enum std::float_round_style { round_indeterminate = -1, round_toward_zero = 0, round_to_nearest = 1, round_toward_infinity = 2, round_toward_neg_infinity = 3 }; enum std::float_denorm_style { denorm_indeterminate = -1, denorm_absent = 0, denorm_present = 1 }; enum std::_Uninitialized { _Noinit = 0 }; enum std::pointer_safety::pointer_safety { relaxed = 0, preferred = 1, strict = 2 }; struct _TAPE_SET_DRIVE_PARAMETERS { unsigned char ECC; /* +0x0000 */ unsigned char Compression; /* +0x0001 */ unsigned char DataPadding; /* +0x0002 */ unsigned char ReportSetmarks; /* +0x0003 */ unsigned long EOTWarningZoneSize; /* +0x0004 */ }; struct _LDT_ENTRY { unsigned short LimitLow; /* +0x0000 */ unsigned short BaseLow; /* +0x0002 */ }; struct std::_Bool_struct { unsigned char _Member[4]; /* +0x0000 74 00 00 00 */ }; struct std::tr1::_Get_align { short _Elt0; /* +0x0000 */ char _Elt1; /* +0x0002 */ short _Elt2; /* +0x0004 */ }; struct std::tr1::_Get_align { char _Elt0; /* +0x0000 */ char _Elt1; /* +0x0001 */ char _Elt2; /* +0x0002 */ }; struct std::tr1::_Get_align { long _Elt0; /* +0x0000 */ char _Elt1; /* +0x0004 */ long _Elt2; /* +0x0008 */ }; struct std::tr1::_Get_align { unsigned char _Elt0[4]; /* +0x0000 74 00 00 00 */ char _Elt1; /* +0x0004 */ unsigned char _Elt2[4]; /* +0x0008 74 00 00 00 */ }; struct _TAPE_SET_POSITION { unsigned long Method; /* +0x0000 */ unsigned long Partition; /* +0x0004 */ unsigned char Offset[8]; /* +0x0008 43 13 00 00 */ unsigned char Immediate; /* +0x0010 */ }; struct _TAPE_WMI_OPERATIONS { unsigned long Method; /* +0x0000 */ unsigned long DataBufferSize; /* +0x0004 */ void *DataBuffer; /* +0x0008 */ }; struct $_s__CatchableTypeArray$_extraBytes_16 { unsigned char nCatchableTypes[4]; /* +0x0000 74 00 00 00 */ unsigned char arrayOfCatchableTypes[16]; /* +0x0004 ca 56 00 00 */ }; struct $_TypeDescriptor$_extraBytes_15 { unsigned char pVFTable[8]; /* +0x0000 4f 19 00 00 */ void *spare; /* +0x0008 */ unsigned char name[15]; /* +0x0010 cd 56 00 00 */ }; struct _SETJMP_FLOAT128 { unsigned char Part[16]; /* +0x0000 83 15 00 00 */ }; struct __m128 { /* unsigned char m128_f32[0]; +0x0000 d7 56 00 00 */ /* unsigned char m128_u64[0]; +0x0000 83 15 00 00 */ /* unsigned char m128_i8[0]; +0x0000 d8 56 00 00 */ /* unsigned char m128_i16[0]; +0x0000 d9 56 00 00 */ /* unsigned char m128_i32[0]; +0x0000 fd 21 00 00 */ /* unsigned char m128_i64[0]; +0x0000 da 56 00 00 */ /* unsigned char m128_u8[0]; +0x0000 33 1c 00 00 */ /* unsigned char m128_u16[0]; +0x0000 db 56 00 00 */ unsigned char m128_u32[16]; /* +0x0000 dc 56 00 00 */ }; struct _TAPE_GET_POSITION { unsigned long Type; /* +0x0000 */ unsigned long Partition; /* +0x0004 */ unsigned char Offset[8]; /* +0x0008 43 13 00 00 */ }; struct _TAPE_ERASE { unsigned long Type; /* +0x0000 */ unsigned char Immediate; /* +0x0004 */ }; struct _TAPE_GET_MEDIA_PARAMETERS { unsigned char Capacity[8]; /* +0x0000 43 13 00 00 */ unsigned char Remaining[8]; /* +0x0008 43 13 00 00 */ unsigned long BlockSize; /* +0x0010 */ unsigned long PartitionCount; /* +0x0014 */ unsigned char WriteProtected; /* +0x0018 */ }; struct _complex { unsigned char x[8]; /* +0x0000 41 00 00 00 */ unsigned char y[8]; /* +0x0008 41 00 00 00 */ }; struct _exception { unsigned char type[8]; /* +0x0000 74 00 00 00 */ char *name; /* +0x0008 */ unsigned char arg1[8]; /* +0x0010 41 00 00 00 */ unsigned char arg2[8]; /* +0x0018 41 00 00 00 */ unsigned char retval[8]; /* +0x0020 41 00 00 00 */ }; struct _TAPE_CREATE_PARTITION { unsigned long Method; /* +0x0000 */ unsigned long Count; /* +0x0004 */ unsigned long Size; /* +0x0008 */ }; struct _TAPE_PREPARE { unsigned long Operation; /* +0x0000 */ unsigned char Immediate; /* +0x0004 */ }; struct __m128i { /* unsigned char m128i_i8[0]; +0x0000 d8 56 00 00 */ /* unsigned char m128i_i16[0]; +0x0000 d9 56 00 00 */ /* unsigned char m128i_i32[0]; +0x0000 fd 21 00 00 */ /* unsigned char m128i_i64[0]; +0x0000 da 56 00 00 */ /* unsigned char m128i_u8[0]; +0x0000 33 1c 00 00 */ /* unsigned char m128i_u16[0]; +0x0000 db 56 00 00 */ /* unsigned char m128i_u32[0]; +0x0000 dc 56 00 00 */ unsigned char m128i_u64[16]; /* +0x0000 83 15 00 00 */ }; struct _TAPE_GET_DRIVE_PARAMETERS { unsigned char ECC; /* +0x0000 */ unsigned char Compression; /* +0x0001 */ unsigned char DataPadding; /* +0x0002 */ unsigned char ReportSetmarks; /* +0x0003 */ unsigned long DefaultBlockSize; /* +0x0004 */ unsigned long MaximumBlockSize; /* +0x0008 */ unsigned long MinimumBlockSize; /* +0x000c */ unsigned long MaximumPartitionCount; /* +0x0010 */ unsigned long FeaturesLow; /* +0x0014 */ unsigned long FeaturesHigh; /* +0x0018 */ unsigned long EOTWarningZoneSize; /* +0x001c */ }; struct _CrtMemState { unsigned char pBlockHeader[8]; /* +0x0000 18 57 00 00 */ unsigned char lCounts[40]; /* +0x0008 54 17 00 00 */ unsigned char lSizes[40]; /* +0x0030 54 17 00 00 */ unsigned long long lHighWaterCount; /* +0x0058 */ unsigned long long lTotalCount; /* +0x0060 */ }; struct _JUMP_BUFFER { unsigned long long Frame; /* +0x0000 */ unsigned long long Rbx; /* +0x0008 */ unsigned long long Rsp; /* +0x0010 */ unsigned long long Rbp; /* +0x0018 */ unsigned long long Rsi; /* +0x0020 */ unsigned long long Rdi; /* +0x0028 */ unsigned long long R12; /* +0x0030 */ unsigned long long R13; /* +0x0038 */ unsigned long long R14; /* +0x0040 */ unsigned long long R15; /* +0x0048 */ unsigned long long Rip; /* +0x0050 */ unsigned long MxCsr; /* +0x0058 */ unsigned short FpCsr; /* +0x005c */ unsigned short Spare; /* +0x005e */ unsigned char Xmm6[16]; /* +0x0060 1d 57 00 00 */ unsigned char Xmm7[16]; /* +0x0070 1d 57 00 00 */ unsigned char Xmm8[16]; /* +0x0080 1d 57 00 00 */ unsigned char Xmm9[16]; /* +0x0090 1d 57 00 00 */ unsigned char Xmm10[16]; /* +0x00a0 1d 57 00 00 */ unsigned char Xmm11[16]; /* +0x00b0 1d 57 00 00 */ unsigned char Xmm12[16]; /* +0x00c0 1d 57 00 00 */ unsigned char Xmm13[16]; /* +0x00d0 1d 57 00 00 */ unsigned char Xmm14[16]; /* +0x00e0 1d 57 00 00 */ unsigned char Xmm15[16]; /* +0x00f0 1d 57 00 00 */ }; struct __m256i { /* unsigned char m256i_i8[0]; +0x0000 84 23 00 00 */ /* unsigned char m256i_i16[0]; +0x0000 20 57 00 00 */ /* unsigned char m256i_i32[0]; +0x0000 21 57 00 00 */ /* unsigned char m256i_i64[0]; +0x0000 e6 31 00 00 */ /* unsigned char m256i_u8[0]; +0x0000 f7 17 00 00 */ /* unsigned char m256i_u16[0]; +0x0000 22 57 00 00 */ /* unsigned char m256i_u32[0]; +0x0000 23 57 00 00 */ unsigned char m256i_u64[32]; /* +0x0000 62 3f 00 00 */ }; struct _TAPE_WRITE_MARKS { unsigned long Type; /* +0x0000 */ unsigned long Count; /* +0x0004 */ unsigned char Immediate; /* +0x0008 */ }; struct __type_info_node { void *_MemPtr; /* +0x0000 */ unsigned char _Next[8]; /* +0x0008 b5 56 00 00 */ }; struct _Dconst { /* unsigned char _Word[0]; +0x0000 db 56 00 00 */ /* unsigned char _Float[0]; +0x0000 40 00 00 00 */ /* unsigned char _Double[0]; +0x0000 41 00 00 00 */ unsigned char _Long_double[16]; /* +0x0000 41 00 00 00 */ }; struct __m256d { unsigned char m256d_f64[32]; /* +0x0000 55 57 00 00 */ }; struct _TAPE_SET_MEDIA_PARAMETERS { unsigned long BlockSize; /* +0x0000 */ }; struct __m128d { unsigned char m128d_f64[16]; /* +0x0000 5d 57 00 00 */ }; struct __m64 { unsigned long long m64_u64; /* +0x0000 */ /* unsigned char m64_f32[0]; +0x0000 75 57 00 00 */ /* unsigned char m64_i8[0]; +0x0000 38 1d 00 00 */ /* unsigned char m64_i16[0]; +0x0000 0e 15 00 00 */ /* unsigned char m64_i32[0]; +0x0000 76 57 00 00 */ long long m64_i64; /* +0x0000 */ /* unsigned char m64_u8[0]; +0x0000 91 19 00 00 */ /* unsigned char m64_u16[0]; +0x0000 f0 2d 00 00 */ unsigned char m64_u32[8]; /* +0x0000 77 57 00 00 */ }; struct __m256 { unsigned char m256_f32[32]; /* +0x0000 7b 57 00 00 */ }; enum tCorruptionSizeType { FixedSize = 0, RandomSize = 1 }; enum ARM_PARAM_LAYOUT { ARMStackRegR0 = 128, ARMStackRegR1 = 129, ARMStackRegR2 = 130, ARMStackRegR3 = 131, ARMStackRegS0 = 132, ARMStackRegS1 = 133, ARMStackRegS2 = 134, ARMStackRegS3 = 135, ARMStackRegS4 = 136, ARMStackRegS5 = 137, ARMStackRegS6 = 138, ARMStackRegS7 = 139, ARMStackRegS8 = 140, ARMStackRegS9 = 141, ARMStackRegS10 = 142, ARMStackRegS11 = 143, ARMStackRegS12 = 144, ARMStackRegS13 = 145, ARMStackRegS14 = 146, ARMStackRegS15 = 147, ARMStackIsRLE = 157, ARMStackRanged = 158, ARMStackNotUsed = 159 }; enum WMIDPREQUESTCODE { WMI_GET_ALL_DATA = 0, WMI_GET_SINGLE_INSTANCE = 1, WMI_SET_SINGLE_INSTANCE = 2, WMI_SET_SINGLE_ITEM = 3, WMI_ENABLE_EVENTS = 4, WMI_DISABLE_EVENTS = 5, WMI_ENABLE_COLLECTION = 6, WMI_DISABLE_COLLECTION = 7, WMI_REGINFO = 8, WMI_EXECUTE_METHOD = 9, WMI_CAPTURE_STATE = 10 }; enum NDR64_FORMAT_CHARACTER { FC64_ZERO = 0, FC64_UINT8 = 1, FC64_INT8 = 2, FC64_UINT16 = 3, FC64_INT16 = 4, FC64_INT32 = 5, FC64_UINT32 = 6, FC64_INT64 = 7, FC64_UINT64 = 8, FC64_INT128 = 9, FC64_UINT128 = 10, FC64_FLOAT32 = 11, FC64_FLOAT64 = 12, FC64_FLOAT80 = 13, FC64_FLOAT128 = 14, FC64_CHAR = 16, FC64_WCHAR = 17, FC64_IGNORE = 18, FC64_ERROR_STATUS_T = 19, FC64_POINTER = 20, FC64_RP = 32, FC64_UP = 33, FC64_OP = 34, FC64_FP = 35, FC64_IP = 36, FC64_STRUCT = 48, FC64_PSTRUCT = 49, FC64_CONF_STRUCT = 50, FC64_CONF_PSTRUCT = 51, FC64_BOGUS_STRUCT = 52, FC64_FORCED_BOGUS_STRUCT = 53, FC64_CONF_BOGUS_STRUCT = 54, FC64_FORCED_CONF_BOGUS_STRUCT = 55, FC64_FIX_ARRAY = 64, FC64_CONF_ARRAY = 65, FC64_VAR_ARRAY = 66, FC64_CONFVAR_ARRAY = 67, FC64_FIX_FORCED_BOGUS_ARRAY = 68, FC64_FIX_BOGUS_ARRAY = 69, FC64_FORCED_BOGUS_ARRAY = 70, FC64_BOGUS_ARRAY = 71, FC64_ENCAPSULATED_UNION = 80, FC64_NON_ENCAPSULATED_UNION = 81, FC64_CHAR_STRING = 96, FC64_WCHAR_STRING = 97, FC64_STRUCT_STRING = 98, FC64_CONF_CHAR_STRING = 99, FC64_CONF_WCHAR_STRING = 100, FC64_CONF_STRUCT_STRING = 101, FC64_BIND_CONTEXT = 112, FC64_BIND_GENERIC = 113, FC64_BIND_PRIMITIVE = 114, FC64_AUTO_HANDLE = 115, FC64_CALLBACK_HANDLE = 116, FC64_SUPPLEMENT = 117, FC64_NO_REPEAT = 128, FC64_FIXED_REPEAT = 129, FC64_VARIABLE_REPEAT = 130, FC64_FIXED_OFFSET = 131, FC64_VARIABLE_OFFSET = 132, FC64_STRUCTPADN = 144, FC64_EMBEDDED_COMPLEX = 145, FC64_BUFFER_ALIGN = 146, FC64_END = 147, FC64_TRANSMIT_AS = 160, FC64_REPRESENT_AS = 161, FC64_USER_MARSHAL = 162, FC64_PIPE = 163, FC64_RANGE = 164, FC64_PAD = 165 }; enum _operators { OP_START = 0, OP_ILLEGAL = 0, OP_UNARY_START = 1, OP_UNARY_ARITHMETIC_START = 1, OP_UNARY_PLUS = 1, OP_UNARY_MINUS = 2, OP_UNARY_ARITHMETIC_END = 3, OP_UNARY_LOGICAL_START = 3, OP_UNARY_NOT = 3, OP_UNARY_COMPLEMENT = 4, OP_UNARY_LOGICAL_END = 5, OP_UNARY_INDIRECTION = 5, OP_UNARY_CAST = 6, OP_UNARY_AND = 7, OP_UNARY_SIZEOF = 8, OP_UNARY_ALIGNOF = 9, OP_PRE_INCR = 10, OP_PRE_DECR = 11, OP_POST_INCR = 12, OP_POST_DECR = 13, OP_UNARY_END = 14, OP_BINARY_START = 14, OP_BINARY_ARITHMETIC_START = 14, OP_PLUS = 14, OP_MINUS = 15, OP_STAR = 16, OP_SLASH = 17, OP_MOD = 18, OP_BINARY_ARITHMETIC_END = 19, OP_BINARY_SHIFT_START = 19, OP_LEFT_SHIFT = 19, OP_RIGHT_SHIFT = 20, OP_BINARY_SHIFT_END = 21, OP_BINARY_RELATIONAL_START = 21, OP_LESS = 21, OP_LESS_EQUAL = 22, OP_GREATER_EQUAL = 23, OP_GREATER = 24, OP_EQUAL = 25, OP_NOT_EQUAL = 26, OP_BINARY_RELATIONAL_END = 27, OP_BINARY_BITWISE_START = 27, OP_AND = 27, OP_OR = 28, OP_XOR = 29, OP_BINARY_BITWISE_END = 30, OP_BINARY_LOGICAL_START = 30, OP_LOGICAL_AND = 30, OP_LOGICAL_OR = 31, OP_BINARY_LOGICAL_END = 32, OP_BINARY_TERNARY_START = 32, OP_QM = 32, OP_COLON = 33, OP_BINARY_TERNARY_END = 34, OP_BINARY_END = 34, OP_INTERNAL_START = 34, OP_FUNCTION = 35, OP_PARAM = 36, OP_POINTSTO = 37, OP_DOT = 38, OP_INDEX = 39, OP_COMMA = 40, OP_STMT = 41, OP_ASSIGN = 42, OP_ASYNCSPLIT = 43, OP_CORR_POINTER = 44, OP_CORR_TOP_LEVEL = 45, OP_END = 46 }; enum FORMAT_CHARACTER { FC_ZERO = 0, FC_BYTE = 1, FC_CHAR = 2, FC_SMALL = 3, FC_USMALL = 4, FC_WCHAR = 5, FC_SHORT = 6, FC_USHORT = 7, FC_LONG = 8, FC_ULONG = 9, FC_FLOAT = 10, FC_HYPER = 11, FC_DOUBLE = 12, FC_ENUM16 = 13, FC_ENUM32 = 14, FC_IGNORE = 15, FC_ERROR_STATUS_T = 16, FC_RP = 17, FC_UP = 18, FC_OP = 19, FC_FP = 20, FC_STRUCT = 21, FC_PSTRUCT = 22, FC_CSTRUCT = 23, FC_CPSTRUCT = 24, FC_CVSTRUCT = 25, FC_BOGUS_STRUCT = 26, FC_CARRAY = 27, FC_CVARRAY = 28, FC_SMFARRAY = 29, FC_LGFARRAY = 30, FC_SMVARRAY = 31, FC_LGVARRAY = 32, FC_BOGUS_ARRAY = 33, FC_C_CSTRING = 34, FC_C_BSTRING = 35, FC_C_SSTRING = 36, FC_C_WSTRING = 37, FC_CSTRING = 38, FC_BSTRING = 39, FC_SSTRING = 40, FC_WSTRING = 41, FC_ENCAPSULATED_UNION = 42, FC_NON_ENCAPSULATED_UNION = 43, FC_BYTE_COUNT_POINTER = 44, FC_TRANSMIT_AS = 45, FC_REPRESENT_AS = 46, FC_IP = 47, FC_BIND_CONTEXT = 48, FC_BIND_GENERIC = 49, FC_BIND_PRIMITIVE = 50, FC_AUTO_HANDLE = 51, FC_CALLBACK_HANDLE = 52, FC_UNUSED1 = 53, FC_POINTER = 54, FC_ALIGNM2 = 55, FC_ALIGNM4 = 56, FC_ALIGNM8 = 57, FC_UNUSED2 = 58, FC_UNUSED3 = 59, FC_UNUSED4 = 60, FC_STRUCTPAD1 = 61, FC_STRUCTPAD2 = 62, FC_STRUCTPAD3 = 63, FC_STRUCTPAD4 = 64, FC_STRUCTPAD5 = 65, FC_STRUCTPAD6 = 66, FC_STRUCTPAD7 = 67, FC_STRING_SIZED = 68, FC_UNUSED5 = 69, FC_NO_REPEAT = 70, FC_FIXED_REPEAT = 71, FC_VARIABLE_REPEAT = 72, FC_FIXED_OFFSET = 73, FC_VARIABLE_OFFSET = 74, FC_PP = 75, FC_EMBEDDED_COMPLEX = 76, FC_IN_PARAM = 77, FC_IN_PARAM_BASETYPE = 78, FC_IN_PARAM_NO_FREE_INST = 79, FC_IN_OUT_PARAM = 80, FC_OUT_PARAM = 81, FC_RETURN_PARAM = 82, FC_RETURN_PARAM_BASETYPE = 83, FC_DEREFERENCE = 84, FC_DIV_2 = 85, FC_MULT_2 = 86, FC_ADD_1 = 87, FC_SUB_1 = 88, FC_CALLBACK = 89, FC_CONSTANT_IID = 90, FC_END = 91, FC_PAD = 92, FC_EXPR = 93, FC_PARTIAL_IGNORE_PARAM = 94, FC_SPLIT_DEREFERENCE = 116, FC_SPLIT_DIV_2 = 117, FC_SPLIT_MULT_2 = 118, FC_SPLIT_ADD_1 = 119, FC_SPLIT_SUB_1 = 120, FC_SPLIT_CALLBACK = 121, FC_FORCED_BOGUS_STRUCT = 177, FC_TRANSMIT_AS_PTR = 178, FC_REPRESENT_AS_PTR = 179, FC_USER_MARSHAL = 180, FC_PIPE = 181, FC_SUPPLEMENT = 182, FC_RANGE = 183, FC_INT3264 = 184, FC_UINT3264 = 185, FC_CSARRAY = 186, FC_CS_TAG = 187, FC_STRUCTPADN = 188, FC_UNUSED7 = 189, FC_UNUSED8 = 190, FC_UNUSED9 = 191, FC_UNUSED10 = 192, FC_BUFFER_ALIGN = 193, FC_INT128 = 194, FC_UINT128 = 195, FC_FLOAT80 = 196, FC_FLOAT128 = 197, FC_END_OF_UNIVERSE = 198 }; enum NDR_PIPE_STATUS { NDR_PIPE_NOT_OPENED = 0, NDR_PIPE_ACTIVE_IN = 1, NDR_PIPE_ACTIVE_OUT = 2, NDR_PIPE_DRAINED = 3 }; enum _TRACE_QUERY_INFO_CLASS { TraceGuidQueryList = 0, TraceGuidQueryInfo = 1, TraceGuidQueryProcess = 2, TraceStackTracingInfo = 3, TraceSystemTraceEnableFlagsInfo = 4, TraceSampledProfileIntervalInfo = 5, TraceProfileSourceConfigInfo = 6, TraceProfileSourceListInfo = 7, TracePmcEventListInfo = 8, TracePmcCounterListInfo = 9, MaxTraceSetInfoClass = 10 }; enum _tagEXPR_TOKEN { FC_EXPR_START = 0, FC_EXPR_ILLEGAL = 0, FC_EXPR_CONST32 = 1, FC_EXPR_CONST64 = 2, FC_EXPR_VAR = 3, FC_EXPR_OPER = 4, FC_EXPR_NOOP = 5, FC_EXPR_END = 6 }; enum tagSystemFunction001Commands { sf001cHttpSetInChannelTarget = 0, sf001cHttpSetOutChannelTarget = 1, sf001cSetRestrictRemoteClients = 2, sf001cSetRestrictRemoteClientsLocal = 3, sf001cQueryRestrictRemoteClients = 4, sf001cResetWithNoAuthException = 5, sf001cIgnoreCorruptionAsserts = 6, sf001cQueryConnectionId = 7, sf001cQuerySecCtxId = 8, sf001cQueryInterface = 9, sf001cQueryAssociationId = 10, sf001cRegisterCorruptionCallback = 11, sf001cRegisterNDRCorruptionCallback = 12, sf001cEnableDGClientSupport = 13, sf001cEnableDGServerSupport = 14, sf001cEnableFwCliAsyncNotificationDelay = 15, sf001cQueryAuthEpResolution = 16, sf001cDisableLegacyClientAsserts = 17, sf001cQueryClientSideDebugInfoEnabled = 18, sf001cQueryServerSideDebugInfoEnabled = 19, sf001cQuerySendEEInfo = 20, sf001cQueryIgnoreDelegationFailure = 21 }; enum tCorruptionPattern { ZeroOut = 0, Negate = 1, BitFlip = 2, IncDec = 3, Randomize = 4, AllPatterns = 100 }; enum RECEIVE_STATES { START = 0, COPY_PIPE_ELEM = 1, RETURN_PARTIAL_ELEM = 2, READ_PARTIAL_ELEM = 3, VERIFY_TAIL_CHUNK = 4 }; enum _NDR_DCOM_PIPE_STATE { NDR_DCOM_NO_PIPES = 0, NDR_DCOM_IN_PIPE_PROCESSING = 1, NDR_DCOM_IN_PIPES_DRAINED = 2, NDR_DCOM_OUT_PIPE_PROCESSING = 3, NDR_DCOM_OUT_PIPES_DRAINED = 4, NDR_DCOM_PIPES_DONE = 5, NDR_DCOM_PIPE_ERROR = 6 }; enum tCorruptionDistributionType { LocalizedDistribution = 0, RandomizedDistribution = 1 }; enum _NDR64_EXPRESSION_TYPE { EXPR_MAXCOUNT = 0, EXPR_ACTUALCOUNT = 1, EXPR_OFFSET = 2, EXPR_IID = 3, EXPR_SWITCHIS = 4 }; enum tagComputerNameAllocators { cnaMidl = 0, cnaNew = 1 }; enum SYNTAX_TYPE { ]ˆŠXFER_SYNTAX_DCE = 32771, /* XFER_SYNTAX_NDR64 = Unavail, */ ©}S´XFER_SYNTAX_TEST_NDR64 = 32771 }; enum BCacheMode { BCacheModeCached = 0, BCacheModeDirect = 1 }; enum tDelayType { FixedDelay = 0, RandomDelay = 1 }; enum tBufferType { COServerReceive = 0, COClientReceive = 1, COSend = 2, DGServerReceive = 3, DGClientReceive = 4, DGSend = 5, AlpcSendMessage = 6, AlpcSendMessageAttributes = 7 }; enum _EVENT_INFO_CLASS { EventProviderBinaryTrackInfo = 0, MaxEventInfo = 1 }; enum HARDENING_OPTIONS { NDR_MEMORYVALIDATION = 1, NDR_COMPLEX_EXPR = 2 }; struct _NDR64_CONTEXT_HANDLE_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char ContextFlags; /* +0x0001 */ unsigned char RundownRoutineIndex; /* +0x0002 */ unsigned char Ordinal; /* +0x0003 */ }; struct _ARG_QUEUE_INFO { unsigned char pFormat[8]; /* +0x0000 4b 19 00 00 */ unsigned char *pArg; /* +0x0008 */ unsigned char ppArg[8]; /* +0x0010 65 1b 00 00 */ short ParamNum; /* +0x0018 */ /* unsigned char IsReturn[0]; +0x001a ae 57 00 00 */ /* unsigned char IsBasetype[0]; +0x001a af 57 00 00 */ /* unsigned char IsIn[0]; +0x001a b0 57 00 00 */ /* unsigned char IsOut[0]; +0x001a b1 57 00 00 */ /* unsigned char IsOutOnly[0]; +0x001a b2 57 00 00 */ /* unsigned char IsDeferredFree[0]; +0x001a b3 57 00 00 */ unsigned char IsDontCallFreeInst[6]; /* +0x001a b4 57 00 00 */ }; struct _TRACE_GUID_PROPERTIES { unsigned char Guid[16]; /* +0x0000 f3 14 00 00 */ unsigned long GuidType; /* +0x0010 */ unsigned long LoggerId; /* +0x0014 */ unsigned long EnableLevel; /* +0x0018 */ unsigned long EnableFlags; /* +0x001c */ unsigned char IsEnable; /* +0x0020 */ }; struct _NDR64_SIMPLE_MEMBER_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Reserved1; /* +0x0001 */ unsigned short Reserved2; /* +0x0002 */ unsigned char Reserved3[4]; /* +0x0004 75 00 00 00 */ }; struct _NDR64_BIND_CONTEXT { unsigned char HandleType; /* +0x0000 */ unsigned char Flags; /* +0x0001 */ unsigned short StackOffset; /* +0x0002 */ unsigned char RoutineIndex; /* +0x0004 */ unsigned char Ordinal; /* +0x0005 */ }; struct _NDR64_TRANSMIT_AS_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Flags; /* +0x0001 */ unsigned short RoutineIndex; /* +0x0002 */ unsigned short TransmittedTypeWireAlignment; /* +0x0004 */ unsigned short MemoryAlignment; /* +0x0006 */ unsigned char PresentedTypeMemorySize[4]; /* +0x0008 75 00 00 00 */ unsigned char TransmittedTypeBufferSize[4]; /* +0x000c 75 00 00 00 */ unsigned char TransmittedType[8]; /* +0x0010 4f 19 00 00 */ }; struct _MOF_FIELD { unsigned long long DataPtr; /* +0x0000 */ unsigned long Length; /* +0x0008 */ unsigned long DataType; /* +0x000c */ }; struct _NDR64_BOGUS_STRUCTURE_HEADER_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Alignment; /* +0x0001 */ unsigned char Flags[1]; /* +0x0002 d1 57 00 00 */ unsigned char Reserve; /* +0x0003 */ unsigned char MemorySize[4]; /* +0x0004 75 00 00 00 */ unsigned char OriginalMemberLayout[8]; /* +0x0008 4f 19 00 00 */ unsigned char OriginalPointerLayout[8]; /* +0x0010 4f 19 00 00 */ unsigned char PointerLayout[8]; /* +0x0018 4f 19 00 00 */ }; struct _NDR64_BIND_AND_NOTIFY_EXTENSION { unsigned char Binding[6]; /* +0x0000 d4 57 00 00 */ unsigned short NotifyIndex; /* +0x0006 */ }; struct _NDR64_USER_MARSHAL_FLAGS { /* unsigned char Reserved[0]; +0x0000 85 2f 00 00 */ /* unsigned char IID[0]; +0x0000 a6 1e 00 00 */ /* unsigned char RefPointer[0]; +0x0000 a7 1e 00 00 */ unsigned char UniquePointer[1]; /* +0x0000 a8 1e 00 00 */ }; struct NDR64_PIPE_FLAGS { /* unsigned char Reserved1[0]; +0x0000 85 2f 00 00 */ /* unsigned char HasRange[0]; +0x0000 a6 1e 00 00 */ /* unsigned char BlockCopy[0]; +0x0000 a7 1e 00 00 */ unsigned char Reserved2[1]; /* +0x0000 a8 1e 00 00 */ }; struct _NDR64_CONF_BOGUS_STRUCTURE_HEADER_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Alignment; /* +0x0001 */ unsigned char Flags[1]; /* +0x0002 d1 57 00 00 */ unsigned char Dimensions; /* +0x0003 */ unsigned char MemorySize[4]; /* +0x0004 75 00 00 00 */ unsigned char OriginalMemberLayout[8]; /* +0x0008 4f 19 00 00 */ unsigned char OriginalPointerLayout[8]; /* +0x0010 4f 19 00 00 */ unsigned char PointerLayout[8]; /* +0x0018 4f 19 00 00 */ unsigned char ConfArrayDescription[8]; /* +0x0020 4f 19 00 00 */ }; struct _NDR64_VAR_ARRAY_HEADER_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Alignment; /* +0x0001 */ unsigned char Flags[1]; /* +0x0002 df 57 00 00 */ unsigned char Reserved; /* +0x0003 */ unsigned char TotalSize[4]; /* +0x0004 75 00 00 00 */ unsigned char ElementSize[8]; /* +0x0008 75 00 00 00 */ unsigned char VarDescriptor[8]; /* +0x0010 4f 19 00 00 */ }; struct _EVENT_TRACE { unsigned char Header[48]; /* +0x0000 e2 57 00 00 */ unsigned long InstanceId; /* +0x0030 */ unsigned long ParentInstanceId; /* +0x0034 */ unsigned char ParentGuid[16]; /* +0x0038 f3 14 00 00 */ void *MofData; /* +0x0048 */ unsigned long MofLength; /* +0x0050 */ unsigned long ClientContext; /* +0x0054 */ unsigned char BufferContext[4]; /* +0x0054 e3 57 00 00 */ }; struct _NDR64_SUPPLEMENT_HEADER { unsigned char FormatCode; /* +0x0000 */ unsigned char RealFormatCode; /* +0x0001 */ unsigned short Reserved; /* +0x0002 */ unsigned char RealType[8]; /* +0x0008 4f 19 00 00 */ }; struct _CONTEXT_HANDLE_ELEMENT { unsigned char Next[8]; /* +0x0000 ee 57 00 00 */ unsigned char pContext[8]; /* +0x0008 65 28 00 00 */ unsigned char pCtxtDesc[8]; /* +0x0010 f0 57 00 00 */ unsigned char *Key; /* +0x0018 */ }; struct _NDR64_UNION_ARM { long long CaseValue; /* +0x0000 */ unsigned char Type[8]; /* +0x0008 4f 19 00 00 */ unsigned char Reserved[8]; /* +0x0010 75 00 00 00 */ }; struct _NDR64_TYPE_STRICT_CONTEXT_HANDLE { unsigned char FormatCode; /* +0x0000 */ unsigned char RealFormatCode; /* +0x0001 */ unsigned short Reserved; /* +0x0002 */ unsigned char Type[8]; /* +0x0008 4f 19 00 00 */ unsigned char CtxtFlags[4]; /* +0x0010 75 00 00 00 */ unsigned char CtxtID[4]; /* +0x0014 75 00 00 00 */ }; struct _EVENT_FILTER_HEADER { unsigned short Id; /* +0x0000 */ unsigned char Version; /* +0x0002 */ unsigned char Reserved[5]; /* +0x0003 00 58 00 00 */ unsigned long long InstanceId; /* +0x0008 */ unsigned long Size; /* +0x0010 */ unsigned long NextOffset; /* +0x0014 */ }; struct _NDR64_PROC_FLAGS { /* unsigned char HandleType[0]; +0x0000 07 58 00 00 */ /* unsigned char ProcType[0]; +0x0000 08 58 00 00 */ /* unsigned char IsInterpreted[0]; +0x0000 09 58 00 00 */ /* unsigned char IsObject[0]; +0x0000 0a 58 00 00 */ /* unsigned char IsAsync[0]; +0x0000 0b 58 00 00 */ /* unsigned char IsEncode[0]; +0x0000 0c 58 00 00 */ /* unsigned char IsDecode[0]; +0x0000 0d 58 00 00 */ /* unsigned char UsesFullPtrPackage[0]; +0x0000 0e 58 00 00 */ /* unsigned char UsesRpcSmPackage[0]; +0x0000 0f 58 00 00 */ /* unsigned char UsesPipes[0]; +0x0000 10 58 00 00 */ /* unsigned char HandlesExceptions[0]; +0x0000 11 58 00 00 */ /* unsigned char ServerMustSize[0]; +0x0000 12 58 00 00 */ /* unsigned char ClientMustSize[0]; +0x0000 13 58 00 00 */ /* unsigned char HasReturn[0]; +0x0000 14 58 00 00 */ /* unsigned char HasComplexReturn[0]; +0x0000 15 58 00 00 */ /* unsigned char ServerHasCorrelation[0]; +0x0000 16 58 00 00 */ /* unsigned char ClientHasCorrelation[0]; +0x0000 17 58 00 00 */ /* unsigned char HasNotify[0]; +0x0000 18 58 00 00 */ /* unsigned char HasOtherExtensions[0]; +0x0000 19 58 00 00 */ /* unsigned char HasBigByValueParam[0]; +0x0000 1a 58 00 00 */ unsigned char Reserved[4]; /* +0x0000 1b 58 00 00 */ }; struct _WNODE_HEADER { unsigned long BufferSize; /* +0x0000 */ unsigned long ProviderId; /* +0x0004 */ unsigned long long HistoricalContext; /* +0x0008 */ unsigned long Version; /* +0x0008 */ unsigned long Linkage; /* +0x000c */ unsigned long CountLost; /* +0x0010 */ void *KernelHandle; /* +0x0010 */ unsigned char TimeStamp[8]; /* +0x0010 43 13 00 00 */ unsigned char Guid[16]; /* +0x0018 f3 14 00 00 */ unsigned long ClientContext; /* +0x0028 */ unsigned long Flags; /* +0x002c */ }; struct _NDR64_MEMPAD_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Reserve1; /* +0x0001 */ unsigned short MemPad; /* +0x0002 */ unsigned char Reserved2[4]; /* +0x0004 75 00 00 00 */ }; struct WMIREGGUIDW { unsigned char Guid[16]; /* +0x0000 f3 14 00 00 */ unsigned long Flags; /* +0x0010 */ unsigned long InstanceCount; /* +0x0014 */ unsigned long InstanceNameList; /* +0x0018 */ unsigned long BaseNameOffset; /* +0x0018 */ unsigned long long Pdo; /* +0x0018 */ unsigned long long InstanceInfo; /* +0x0018 */ }; struct _ARG_QUEUE { long Length; /* +0x0000 */ unsigned char Queue[8]; /* +0x0008 d0 57 00 00 */ }; struct _TRACE_PROVIDER_INSTANCE_INFO { unsigned long NextOffset; /* +0x0000 */ unsigned long EnableCount; /* +0x0004 */ unsigned long Pid; /* +0x0008 */ unsigned long Flags; /* +0x000c */ }; struct _EVENT_INSTANCE_HEADER { unsigned short Size; /* +0x0000 */ unsigned short FieldTypeFlags; /* +0x0002 */ unsigned char HeaderType; /* +0x0002 */ unsigned char MarkerFlags; /* +0x0003 */ unsigned long Version; /* +0x0004 */ unsigned char Class[4]; /* +0x0004 2d 58 00 00 */ unsigned long ThreadId; /* +0x0008 */ unsigned long ProcessId; /* +0x000c */ unsigned char TimeStamp[8]; /* +0x0010 43 13 00 00 */ unsigned long long RegHandle; /* +0x0018 */ unsigned long InstanceId; /* +0x0020 */ unsigned long ParentInstanceId; /* +0x0024 */ unsigned long KernelTime; /* +0x0028 */ unsigned long UserTime; /* +0x002c */ unsigned long long ProcessorTime; /* +0x0028 */ unsigned long EventId; /* +0x0028 */ unsigned long Flags; /* +0x002c */ unsigned long long ParentRegHandle; /* +0x0030 */ }; struct _EVENT_INSTANCE_HEADER:::: { unsigned char Type; /* +0x0000 */ unsigned char Level; /* +0x0001 */ unsigned short Version; /* +0x0002 */ }; struct _FC_PIPE_DEF { unsigned char Fc; /* +0x0000 */ /* unsigned char Align[0]; +0x0001 ea 13 00 00 */ /* unsigned char Unused[0]; +0x0001 0e 26 00 00 */ /* unsigned char HasRange[0]; +0x0001 a6 1e 00 00 */ /* unsigned char ObjectPipe[0]; +0x0001 a7 1e 00 00 */ unsigned char BigPipe[1]; /* +0x0001 a8 1e 00 00 */ short TypeOffset; /* +0x0002 */ /* unsigned char s[0]; +0x0004 32 58 00 00 */ unsigned char Big[16]; /* +0x0004 33 58 00 00 */ }; struct _FC_PIPE_DEF:::: { unsigned long MemSize; /* +0x0000 */ unsigned long WireSize; /* +0x0004 */ unsigned long LowChunkLimit; /* +0x0008 */ unsigned long HighChunkLimit; /* +0x000c */ }; struct _FC_PIPE_DEF:::: { unsigned short MemSize; /* +0x0000 */ unsigned short WireSize; /* +0x0002 */ unsigned long LowChunkLimit; /* +0x0004 */ unsigned long HighChunkLimit; /* +0x0008 */ }; struct _ETW_BUFFER_CONTEXT { unsigned char ProcessorNumber; /* +0x0000 */ unsigned char Alignment; /* +0x0001 */ unsigned short ProcessorIndex; /* +0x0000 */ unsigned short LoggerId; /* +0x0002 */ }; struct _TRACE_GUID_REGISTRATION { unsigned char Guid[8]; /* +0x0000 67 16 00 00 */ void *RegHandle; /* +0x0008 */ }; struct _NDR64_IID_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Flags; /* +0x0001 */ unsigned short Reserved; /* +0x0002 */ unsigned char IIDDescriptor[8]; /* +0x0008 4f 19 00 00 */ }; struct _SYNTAX_DISPATCH_TABLE { unsigned char pfnInit[8]; /* +0x0000 47 58 00 00 */ unsigned char pfnSizing[8]; /* +0x0008 4a 58 00 00 */ unsigned char pfnMarshal[8]; /* +0x0010 4a 58 00 00 */ unsigned char pfnUnmarshal[8]; /* +0x0018 47 58 00 00 */ unsigned char pfnExceptionHandling[8]; /* +0x0020 4f 58 00 00 */ unsigned char pfnFinally[8]; /* +0x0028 47 58 00 00 */ unsigned char pfnGetBuffer[8]; /* +0x0030 52 58 00 00 */ unsigned char pfnSendReceive[8]; /* +0x0038 da 25 00 00 */ }; struct _NDR64_BIND_PRIMITIVE { unsigned char HandleType; /* +0x0000 */ unsigned char Flags; /* +0x0001 */ unsigned short StackOffset; /* +0x0002 */ unsigned short Reserved; /* +0x0004 */ }; struct _NDR64_RPC_FLAGS { /* unsigned char Idempotent[0]; +0x0000 b1 2e 00 00 */ /* unsigned char Broadcast[0]; +0x0000 b2 2e 00 00 */ /* unsigned char Maybe[0]; +0x0000 b3 2e 00 00 */ /* unsigned char Reserved0[0]; +0x0000 b4 2e 00 00 */ /* unsigned char HasGuarantee[0]; +0x0000 b5 2e 00 00 */ /* unsigned char Reserved1[0]; +0x0000 57 58 00 00 */ /* unsigned char Message[0]; +0x0000 b9 2e 00 00 */ /* unsigned char Reserved2[0]; +0x0000 58 58 00 00 */ /* unsigned char InputSynchronous[0]; +0x0000 11 33 00 00 */ /* unsigned char Asynchronous[0]; +0x0000 59 58 00 00 */ unsigned char Reserved3[2]; /* +0x0000 5a 58 00 00 */ }; struct tagWNODE_METHOD_ITEM { unsigned char WnodeHeader[48]; /* +0x0000 5d 58 00 00 */ unsigned long OffsetInstanceName; /* +0x0030 */ unsigned long InstanceIndex; /* +0x0034 */ unsigned long MethodId; /* +0x0038 */ unsigned long DataBlockOffset; /* +0x003c */ unsigned long SizeDataBlock; /* +0x0040 */ unsigned char VariableData[4]; /* +0x0044 40 2d 00 00 */ }; struct _NDR64_STRUCTURE_HEADER_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Alignment; /* +0x0001 */ unsigned char Flags[1]; /* +0x0002 d1 57 00 00 */ unsigned char Reserve; /* +0x0003 */ unsigned char MemorySize[4]; /* +0x0004 75 00 00 00 */ }; struct _NDR64_SIMPLE_REGION_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Alignment; /* +0x0001 */ unsigned short RegionSize; /* +0x0002 */ unsigned char Reserved[4]; /* +0x0004 75 00 00 00 */ }; struct _PROFILE_SOURCE_INFO { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long Source; /* +0x0004 */ unsigned long MinInterval; /* +0x0008 */ unsigned long MaxInterval; /* +0x000c */ unsigned long long Reserved; /* +0x0010 */ unsigned char Description[8]; /* +0x0018 0a 14 00 00 */ }; struct _TRACE_PROFILE_INTERVAL { unsigned long Source; /* +0x0000 */ unsigned long Interval; /* +0x0004 */ }; struct tagWNODE_EVENT_ITEM { unsigned char WnodeHeader[48]; /* +0x0000 5d 58 00 00 */ }; struct tagWNODE_SINGLE_INSTANCE { unsigned char WnodeHeader[48]; /* +0x0000 5d 58 00 00 */ unsigned long OffsetInstanceName; /* +0x0030 */ unsigned long InstanceIndex; /* +0x0034 */ unsigned long DataBlockOffset; /* +0x0038 */ unsigned long SizeDataBlock; /* +0x003c */ /* unsigned char VariableData[0]; +0x0040 40 2d 00 00 */ }; struct _NDR64_CORRELATION_INFO { unsigned char pNext[8]; /* +0x0000 71 58 00 00 */ unsigned char SlotsUsed[8]; /* +0x0008 75 00 00 00 */ unsigned char Data[160]; /* +0x0010 73 58 00 00 */ }; struct _NDR_CS_TAG_FLAGS { /* unsigned char STag[0]; +0x0000 a2 1e 00 00 */ /* unsigned char DRTag[0]; +0x0000 a3 1e 00 00 */ unsigned char RTag[1]; /* +0x0000 a4 1e 00 00 */ }; struct _NDR_CS_TAG_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Flags[1]; /* +0x0001 78 58 00 00 */ unsigned short TagRoutineIndex; /* +0x0002 */ }; struct _NDR64_BIND_GENERIC { unsigned char HandleType; /* +0x0000 */ unsigned char Flags; /* +0x0001 */ unsigned short StackOffset; /* +0x0002 */ unsigned char RoutineIndex; /* +0x0004 */ unsigned char Size; /* +0x0005 */ }; struct tagWNODE_TOO_SMALL { unsigned char WnodeHeader[48]; /* +0x0000 5d 58 00 00 */ unsigned long SizeNeeded; /* +0x0030 */ }; struct _NDR64_UNION_ARM_SELECTOR { unsigned char Reserved1; /* +0x0000 */ unsigned char Alignment; /* +0x0001 */ unsigned short Reserved2; /* +0x0002 */ unsigned char Arms[4]; /* +0x0004 75 00 00 00 */ }; struct _EVENT_TRACE_PROPERTIES { unsigned char Wnode[48]; /* +0x0000 5d 58 00 00 */ unsigned long BufferSize; /* +0x0030 */ unsigned long MinimumBuffers; /* +0x0034 */ unsigned long MaximumBuffers; /* +0x0038 */ unsigned long MaximumFileSize; /* +0x003c */ unsigned long LogFileMode; /* +0x0040 */ unsigned long FlushTimer; /* +0x0044 */ unsigned long EnableFlags; /* +0x0048 */ long AgeLimit; /* +0x004c */ unsigned long NumberOfBuffers; /* +0x0050 */ unsigned long FreeBuffers; /* +0x0054 */ unsigned long EventsLost; /* +0x0058 */ unsigned long BuffersWritten; /* +0x005c */ unsigned long LogBuffersLost; /* +0x0060 */ unsigned long RealTimeBuffersLost; /* +0x0064 */ void *LoggerThreadId; /* +0x0068 */ unsigned long LogFileNameOffset; /* +0x0070 */ unsigned long LoggerNameOffset; /* +0x0074 */ }; struct _NDR64_EXPR_NOOP { unsigned char ExprType; /* +0x0000 */ unsigned char Size; /* +0x0001 */ unsigned short Reserved; /* +0x0002 */ }; struct _NDR64_CONSTANT_IID_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Flags; /* +0x0001 */ unsigned short Reserved; /* +0x0002 */ unsigned char Guid[16]; /* +0x0004 f3 14 00 00 */ }; struct _TRACE_ENABLE_INFO { unsigned long IsEnabled; /* +0x0000 */ unsigned char Level; /* +0x0004 */ unsigned char Reserved1; /* +0x0005 */ unsigned short LoggerId; /* +0x0006 */ unsigned long EnableProperty; /* +0x0008 */ unsigned long Reserved2; /* +0x000c */ unsigned long long MatchAnyKeyword; /* +0x0010 */ unsigned long long MatchAllKeyword; /* +0x0018 */ }; struct _TRACE_LOGFILE_HEADER { unsigned long BufferSize; /* +0x0000 */ unsigned long Version; /* +0x0004 */ unsigned char VersionDetail[4]; /* +0x0004 ad 58 00 00 */ unsigned long ProviderVersion; /* +0x0008 */ unsigned long NumberOfProcessors; /* +0x000c */ unsigned char EndTime[8]; /* +0x0010 43 13 00 00 */ unsigned long TimerResolution; /* +0x0018 */ unsigned long MaximumFileSize; /* +0x001c */ unsigned long LogFileMode; /* +0x0020 */ unsigned long BuffersWritten; /* +0x0024 */ /* unsigned char LogInstanceGuid[0]; +0x0028 f3 14 00 00 */ unsigned long StartBuffers; /* +0x0028 */ unsigned long PointerSize; /* +0x002c */ unsigned long EventsLost; /* +0x0030 */ unsigned long CpuSpeedInMHz; /* +0x0034 */ unsigned char LoggerName[8]; /* +0x0038 71 06 00 00 */ unsigned char LogFileName[8]; /* +0x0040 71 06 00 00 */ unsigned char TimeZone[176]; /* +0x0048 da 46 00 00 */ unsigned char BootTime[8]; /* +0x00f8 43 13 00 00 */ unsigned char PerfFreq[8]; /* +0x0100 43 13 00 00 */ unsigned char StartTime[8]; /* +0x0108 43 13 00 00 */ unsigned long ReservedFlags; /* +0x0110 */ unsigned long BuffersLost; /* +0x0114 */ }; struct NDR64_SIZED_CONFORMANT_STRING_FORMAT { unsigned char Header[8]; /* +0x0000 b2 58 00 00 */ unsigned char SizeDescription[8]; /* +0x0008 4f 19 00 00 */ }; struct _TRACE_LOGFILE_HEADER:::: { unsigned char MajorVersion; /* +0x0000 */ unsigned char MinorVersion; /* +0x0001 */ unsigned char SubVersion; /* +0x0002 */ unsigned char SubMinorVersion; /* +0x0003 */ }; struct _EVENT_TRACE_LOGFILEA { char *LogFileName; /* +0x0000 */ char *LoggerName; /* +0x0008 */ long long CurrentTime; /* +0x0010 */ unsigned long BuffersRead; /* +0x0018 */ unsigned long LogFileMode; /* +0x001c */ unsigned long ProcessTraceMode; /* +0x001c */ unsigned char CurrentEvent[88]; /* +0x0020 b7 58 00 00 */ unsigned char LogfileHeader[280]; /* +0x0078 b8 58 00 00 */ unsigned char BufferCallback[8]; /* +0x0190 2a 58 00 00 */ unsigned long BufferSize; /* +0x0198 */ unsigned long Filled; /* +0x019c */ unsigned long EventsLost; /* +0x01a0 */ /* unsigned char EventCallback[0]; +0x01a8 bc 58 00 00 */ unsigned char EventRecordCallback[8]; /* +0x01a8 c0 58 00 00 */ unsigned long IsKernelTrace; /* +0x01b0 */ void *Context; /* +0x01b8 */ }; struct _NDR_MEMORY_LIST_TAIL_NODE { unsigned long Signature; /* +0x0000 */ unsigned long AllocationSize; /* +0x0004 */ void *ppPointer; /* +0x0008 */ unsigned char pNextNode[8]; /* +0x0010 cb 58 00 00 */ }; struct _NDR64_RANGE_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char RangeType; /* +0x0001 */ unsigned short Reserved; /* +0x0002 */ long long MinValue; /* +0x0008 */ long long MaxValue; /* +0x0010 */ }; struct _MIDL_TYPE_PICKLING_FLAGS { /* unsigned char Oicf[0]; +0x0000 94 13 00 00 */ /* unsigned char HasNewCorrDesc[0]; +0x0000 90 18 00 00 */ /* unsigned char HasConformanceRange[0]; +0x0000 91 18 00 00 */ unsigned char Unused[4]; /* +0x0000 f7 2c 00 00 */ }; struct _NDR_CS_ARRAY_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Reserved; /* +0x0001 */ unsigned short UserTypeSize; /* +0x0002 */ unsigned short CSRoutineIndex; /* +0x0004 */ unsigned short Reserved2; /* +0x0006 */ long DescriptionOffset; /* +0x0008 */ }; struct EVENT_INSTANCE_INFO { void *RegHandle; /* +0x0000 */ unsigned long InstanceId; /* +0x0008 */ }; struct _NDR64_TRANSMIT_AS_FLAGS { /* unsigned char PresentedTypeIsArray[0]; +0x0000 a2 1e 00 00 */ /* unsigned char PresentedTypeAlign4[0]; +0x0000 a3 1e 00 00 */ /* unsigned char PresentedTypeAlign8[0]; +0x0000 a4 1e 00 00 */ unsigned char Reserved[1]; /* +0x0000 e9 13 00 00 */ }; struct _NDR_DCOM_OI2_PROC_HEADER { unsigned char HandleType; /* +0x0000 */ unsigned char OldOiFlags[1]; /* +0x0001 e1 58 00 00 */ unsigned short RpcFlagsLow; /* +0x0002 */ unsigned short RpcFlagsHi; /* +0x0004 */ unsigned short ProcNum; /* +0x0006 */ unsigned short StackSize; /* +0x0008 */ unsigned short ClientBufferSize; /* +0x000a */ unsigned short ServerBufferSize; /* +0x000c */ unsigned char Oi2Flags[1]; /* +0x000e e2 58 00 00 */ unsigned char NumberParams; /* +0x000f */ }; struct WMIREGINFOW { unsigned long BufferSize; /* +0x0000 */ unsigned long NextWmiRegInfo; /* +0x0004 */ unsigned long RegistryPath; /* +0x0008 */ unsigned long MofResourceName; /* +0x000c */ unsigned long GuidCount; /* +0x0010 */ /* unsigned char WmiRegGuid[0]; +0x0018 e5 58 00 00 */ }; struct _NDR64_CONF_STRUCTURE_HEADER_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Alignment; /* +0x0001 */ unsigned char Flags[1]; /* +0x0002 d1 57 00 00 */ unsigned char Reserve; /* +0x0003 */ unsigned char MemorySize[4]; /* +0x0004 75 00 00 00 */ unsigned char ArrayDescription[8]; /* +0x0008 4f 19 00 00 */ }; struct _NDR64_EXPR_VAR { unsigned char ExprType; /* +0x0000 */ unsigned char VarType; /* +0x0001 */ unsigned short Reserved; /* +0x0002 */ unsigned char Offset[4]; /* +0x0004 75 00 00 00 */ }; struct _NDR64_CORRELATION_INFO_DATA { unsigned char *pMemoryObject; /* +0x0000 */ unsigned char pCorrDesc[8]; /* +0x0008 4f 19 00 00 */ long long Value; /* +0x0010 */ long CheckKind; /* +0x0018 */ }; struct _EVENT_TRACE_HEADER { unsigned short Size; /* +0x0000 */ unsigned short FieldTypeFlags; /* +0x0002 */ unsigned char HeaderType; /* +0x0002 */ unsigned char MarkerFlags; /* +0x0003 */ unsigned long Version; /* +0x0004 */ unsigned char Class[4]; /* +0x0004 f3 58 00 00 */ unsigned long ThreadId; /* +0x0008 */ unsigned long ProcessId; /* +0x000c */ unsigned char TimeStamp[8]; /* +0x0010 43 13 00 00 */ /* unsigned char Guid[0]; +0x0018 f3 14 00 00 */ unsigned long long GuidPtr; /* +0x0018 */ unsigned long KernelTime; /* +0x0028 */ unsigned long UserTime; /* +0x002c */ unsigned long long ProcessorTime; /* +0x0028 */ unsigned long ClientContext; /* +0x0028 */ unsigned long Flags; /* +0x002c */ }; struct NDR_POINTER_CONTEXT { unsigned char bNewState[1]; /* +0x0000 30 00 00 00 */ unsigned char bNewQueue[7]; /* +0x0001 30 00 00 00 */ unsigned char pStubMsg[8]; /* +0x0008 f9 58 00 00 */ unsigned char PointerQueueStateStorage[80]; /* +0x0010 0d 30 00 00 */ unsigned char pActiveQueue[8]; /* +0x0060 fb 58 00 00 */ unsigned char PointerQueueStorage[48]; /* +0x0068 fc 58 00 00 */ }; struct tagWNODE_ALL_DATA { unsigned char WnodeHeader[48]; /* +0x0000 5d 58 00 00 */ unsigned long DataBlockOffset; /* +0x0030 */ unsigned long InstanceCount; /* +0x0034 */ unsigned long OffsetInstanceNameOffsets; /* +0x0038 */ unsigned long FixedInstanceSize; /* +0x003c */ unsigned char OffsetInstanceDataAndLength[12]; /* +0x003c 11 59 00 00 */ }; struct _NDR64_FIX_ARRAY_HEADER_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Alignment; /* +0x0001 */ unsigned char Flags[1]; /* +0x0002 df 57 00 00 */ unsigned char Reserved; /* +0x0003 */ unsigned char TotalSize[4]; /* +0x0004 75 00 00 00 */ }; struct _CLASSIC_EVENT_ID { unsigned char EventGuid[16]; /* +0x0000 f3 14 00 00 */ unsigned char Type; /* +0x0010 */ unsigned char Reserved[7]; /* +0x0011 d7 25 00 00 */ }; struct tagWNODE_SINGLE_ITEM { unsigned char WnodeHeader[48]; /* +0x0000 5d 58 00 00 */ unsigned long OffsetInstanceName; /* +0x0030 */ unsigned long InstanceIndex; /* +0x0034 */ unsigned long ItemId; /* +0x0038 */ unsigned long DataBlockOffset; /* +0x003c */ unsigned long SizeDataItem; /* +0x0040 */ unsigned char VariableData[4]; /* +0x0044 40 2d 00 00 */ }; struct _NDR_USER_MARSHAL_ALLOCATION_LIST_NODE { unsigned char ppMemory[8]; /* +0x0000 65 1b 00 00 */ unsigned char *pMemory; /* +0x0008 */ unsigned char pFormat[8]; /* +0x0010 4b 19 00 00 */ unsigned char fIsNDR64; /* +0x0018 */ unsigned char pNext[8]; /* +0x0020 1e 59 00 00 */ }; struct _NDR64_CONF_VAR_ARRAY_HEADER_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Alignment; /* +0x0001 */ unsigned char Flags[1]; /* +0x0002 df 57 00 00 */ unsigned char Reserved; /* +0x0003 */ unsigned char ElementSize[4]; /* +0x0004 75 00 00 00 */ unsigned char ConfDescriptor[8]; /* +0x0008 4f 19 00 00 */ unsigned char VarDescriptor[8]; /* +0x0010 4f 19 00 00 */ }; struct _NDR64_NO_REPEAT_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Flags; /* +0x0001 */ unsigned short Reserved1; /* +0x0002 */ unsigned char Reserved2[4]; /* +0x0004 75 00 00 00 */ }; struct _NDR64_NON_CONFORMANT_STRING_FORMAT { unsigned char Header[4]; /* +0x0000 b2 58 00 00 */ unsigned char TotalSize[4]; /* +0x0004 75 00 00 00 */ }; struct _ENABLE_TRACE_PARAMETERS { unsigned long Version; /* +0x0000 */ unsigned long EnableProperty; /* +0x0004 */ unsigned long ControlFlags; /* +0x0008 */ unsigned char SourceId[20]; /* +0x000c f3 14 00 00 */ unsigned char EnableFilterDesc[8]; /* +0x0020 18 4e 00 00 */ }; struct _FULL_PTR_TO_REFID_ELEMENT { unsigned char Next[8]; /* +0x0000 d8 57 00 00 */ void *Pointer; /* +0x0008 */ unsigned long RefId; /* +0x0010 */ unsigned char State; /* +0x0014 */ }; struct _NDR64_EXPR_CONST32 { unsigned char ExprType; /* +0x0000 */ unsigned char Reserved; /* +0x0001 */ unsigned short Reserved1; /* +0x0002 */ unsigned char ConstValue[4]; /* +0x0004 75 00 00 00 */ }; struct tagWNODE_EVENT_REFERENCE { unsigned char WnodeHeader[48]; /* +0x0000 5d 58 00 00 */ unsigned char TargetGuid[16]; /* +0x0030 f3 14 00 00 */ unsigned long TargetDataBlockSize; /* +0x0040 */ unsigned long TargetInstanceIndex; /* +0x0044 */ unsigned char TargetInstanceName[4]; /* +0x0044 3a 59 00 00 */ }; struct _TRACE_LOGFILE_HEADER64 { unsigned long BufferSize; /* +0x0000 */ unsigned long Version; /* +0x0004 */ unsigned char VersionDetail[4]; /* +0x0004 3d 59 00 00 */ unsigned long ProviderVersion; /* +0x0008 */ unsigned long NumberOfProcessors; /* +0x000c */ unsigned char EndTime[8]; /* +0x0010 43 13 00 00 */ unsigned long TimerResolution; /* +0x0018 */ unsigned long MaximumFileSize; /* +0x001c */ unsigned long LogFileMode; /* +0x0020 */ unsigned long BuffersWritten; /* +0x0024 */ /* unsigned char LogInstanceGuid[0]; +0x0028 f3 14 00 00 */ unsigned long StartBuffers; /* +0x0028 */ unsigned long PointerSize; /* +0x002c */ unsigned long EventsLost; /* +0x0030 */ unsigned long CpuSpeedInMHz; /* +0x0034 */ unsigned long long LoggerName; /* +0x0038 */ unsigned long long LogFileName; /* +0x0040 */ unsigned char TimeZone[176]; /* +0x0048 da 46 00 00 */ unsigned char BootTime[8]; /* +0x00f8 43 13 00 00 */ unsigned char PerfFreq[8]; /* +0x0100 43 13 00 00 */ unsigned char StartTime[8]; /* +0x0108 43 13 00 00 */ unsigned long ReservedFlags; /* +0x0110 */ unsigned long BuffersLost; /* +0x0114 */ }; struct _TRACE_GUID_INFO { unsigned long InstanceCount; /* +0x0000 */ unsigned long Reserved; /* +0x0004 */ }; struct _NDR64_PIPE_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Flags; /* +0x0001 */ unsigned char Alignment; /* +0x0002 */ unsigned char Reserved; /* +0x0003 */ unsigned char Type[8]; /* +0x0008 4f 19 00 00 */ unsigned char MemorySize[4]; /* +0x0010 75 00 00 00 */ unsigned char BufferSize[4]; /* +0x0014 75 00 00 00 */ }; struct _NDR64_EMBEDDED_COMPLEX_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Reserve1; /* +0x0001 */ unsigned short Reserve2; /* +0x0002 */ unsigned char Type[8]; /* +0x0008 4f 19 00 00 */ }; struct _NDR64_POINTER_INSTANCE_HEADER_FORMAT { unsigned char Offset[4]; /* +0x0000 75 00 00 00 */ unsigned char Reserved[4]; /* +0x0004 75 00 00 00 */ }; struct _NDR64_ARRAY_ELEMENT_INFO { unsigned char ElementMemSize[8]; /* +0x0000 75 00 00 00 */ unsigned char Element[8]; /* +0x0008 4f 19 00 00 */ }; struct _NDR64_CONTEXT_HANDLE_FLAGS { /* unsigned char CannotBeNull[0]; +0x0000 a2 1e 00 00 */ /* unsigned char Serialize[0]; +0x0000 a3 1e 00 00 */ /* unsigned char NoSerialize[0]; +0x0000 a4 1e 00 00 */ /* unsigned char Strict[0]; +0x0000 28 26 00 00 */ /* unsigned char IsReturn[0]; +0x0000 0e 26 00 00 */ /* unsigned char IsOut[0]; +0x0000 a6 1e 00 00 */ /* unsigned char IsIn[0]; +0x0000 a7 1e 00 00 */ unsigned char IsViaPointer[1]; /* +0x0000 a8 1e 00 00 */ }; struct _NDR64_RANGED_STRING_FORMAT { unsigned char Header[4]; /* +0x0000 b2 58 00 00 */ unsigned char Reserved[4]; /* +0x0004 75 00 00 00 */ unsigned long long Min; /* +0x0008 */ unsigned long long Max; /* +0x0010 */ }; struct _NDR64_CONF_VAR_BOGUS_ARRAY_HEADER_FORMAT { unsigned char FixedArrayFormat[16]; /* +0x0000 60 59 00 00 */ unsigned char ConfDescription[8]; /* +0x0010 4f 19 00 00 */ unsigned char VarDescription[8]; /* +0x0018 4f 19 00 00 */ unsigned char OffsetDescription[8]; /* +0x0020 4f 19 00 00 */ }; struct _NDR_CONTEXT_HANDLE_GUARD { unsigned long Size; /* +0x0000 */ unsigned long ContextHandleID; /* +0x0004 */ unsigned char InterfaceID[8]; /* +0x0008 2b 24 00 00 */ }; struct _NDR64_CONFORMANT_STRING_FORMAT { unsigned char Header[4]; /* +0x0000 b2 58 00 00 */ }; struct MINICOMPUTE_QUEUE_CONTEXT { unsigned char pNext[8]; /* +0x0000 8c 58 00 00 */ unsigned char pHead[8]; /* +0x0008 97 58 00 00 */ unsigned char pTail[8]; /* +0x0010 97 58 00 00 */ unsigned char pConfStruct[8]; /* +0x0018 97 58 00 00 */ unsigned char IsConfStructValid[8]; /* +0x0020 74 00 00 00 */ }; struct NDR_POINTER_CONTEXT { unsigned char bNewState[1]; /* +0x0000 30 00 00 00 */ unsigned char bNewQueue[7]; /* +0x0001 30 00 00 00 */ unsigned char pStubMsg[8]; /* +0x0008 f9 58 00 00 */ unsigned char PointerQueueStateStorage[72]; /* +0x0010 7c 59 00 00 */ unsigned char pActiveQueue[8]; /* +0x0058 fb 58 00 00 */ unsigned char PointerQueueStorage[48]; /* +0x0060 fc 58 00 00 */ }; struct _NDR64_EXPR_CONST64 { unsigned char ExprType; /* +0x0000 */ unsigned char Reserved; /* +0x0001 */ unsigned short Reserved1; /* +0x0002 */ long long ConstValue; /* +0x0008 */ }; struct _NDR64_ENCAPSULATED_UNION { unsigned char FormatCode; /* +0x0000 */ unsigned char Alignment; /* +0x0001 */ unsigned char Flags; /* +0x0002 */ unsigned char SwitchType; /* +0x0003 */ unsigned char MemoryOffset[4]; /* +0x0004 75 00 00 00 */ unsigned char MemorySize[4]; /* +0x0008 75 00 00 00 */ unsigned char Reserved[4]; /* +0x000c 75 00 00 00 */ }; struct _NDR64_REPEAT_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Flags[1]; /* +0x0001 94 59 00 00 */ unsigned short Reserved; /* +0x0002 */ unsigned char Increment[4]; /* +0x0004 75 00 00 00 */ unsigned char OffsetToArray[4]; /* +0x0008 75 00 00 00 */ unsigned char NumberOfPointers[4]; /* +0x000c 75 00 00 00 */ }; struct ARM_REGISTER_PARAMS { unsigned char Rx[16]; /* +0x0000 66 1a 00 00 */ unsigned long VfpUsed; /* +0x0010 */ unsigned char Vfpx[64]; /* +0x0014 87 27 00 00 */ unsigned long StackSize; /* +0x0054 */ unsigned long *StartOfStack; /* +0x0058 */ }; struct ARM_PARAMS { unsigned short NumEntries; /* +0x0000 */ char Slots; /* +0x0002 */ unsigned char Entry[1]; /* +0x0003 1e 24 00 00 */ }; struct NDR_PROC_HEADER_EXTS_ARM { unsigned char Size; /* +0x0000 */ unsigned char Flags2[1]; /* +0x0001 66 58 00 00 */ unsigned short ClientCorrHint; /* +0x0002 */ unsigned short ServerCorrHint; /* +0x0004 */ unsigned short NotifyIndex; /* +0x0006 */ unsigned char ParamLayout[4]; /* +0x0008 90 59 00 00 */ }; struct OFFSETINSTANCEDATAANDLENGTH { unsigned long OffsetInstanceData; /* +0x0000 */ unsigned long LengthInstanceData; /* +0x0004 */ }; struct _NDR64_CONF_ARRAY_HEADER_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Alignment; /* +0x0001 */ unsigned char Flags[1]; /* +0x0002 df 57 00 00 */ unsigned char Reserved; /* +0x0003 */ unsigned char ElementSize[4]; /* +0x0004 75 00 00 00 */ unsigned char ConfDescriptor[8]; /* +0x0008 4f 19 00 00 */ }; struct _NDR64_RANGE_PIPE_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Flags; /* +0x0001 */ unsigned char Alignment; /* +0x0002 */ unsigned char Reserved; /* +0x0003 */ unsigned char Type[8]; /* +0x0008 4f 19 00 00 */ unsigned char MemorySize[4]; /* +0x0010 75 00 00 00 */ unsigned char BufferSize[4]; /* +0x0014 75 00 00 00 */ unsigned char MinValue[4]; /* +0x0018 75 00 00 00 */ unsigned char MaxValue[4]; /* +0x001c 75 00 00 00 */ }; struct _EVENT_TRACE_LOGFILEW { unsigned char LogFileName[8]; /* +0x0000 71 06 00 00 */ unsigned char LoggerName[8]; /* +0x0008 71 06 00 00 */ long long CurrentTime; /* +0x0010 */ unsigned long BuffersRead; /* +0x0018 */ unsigned long LogFileMode; /* +0x001c */ unsigned long ProcessTraceMode; /* +0x001c */ unsigned char CurrentEvent[88]; /* +0x0020 b7 58 00 00 */ unsigned char LogfileHeader[280]; /* +0x0078 b8 58 00 00 */ unsigned char BufferCallback[8]; /* +0x0190 06 58 00 00 */ unsigned long BufferSize; /* +0x0198 */ unsigned long Filled; /* +0x019c */ unsigned long EventsLost; /* +0x01a0 */ /* unsigned char EventCallback[0]; +0x01a8 bc 58 00 00 */ unsigned char EventRecordCallback[8]; /* +0x01a8 c0 58 00 00 */ unsigned long IsKernelTrace; /* +0x01b0 */ void *Context; /* +0x01b8 */ }; struct _NDR64_FIXED_REPEAT_FORMAT { unsigned char RepeatFormat[16]; /* +0x0000 a5 58 00 00 */ unsigned char Iterations[4]; /* +0x0010 75 00 00 00 */ unsigned char Reserved[4]; /* +0x0014 75 00 00 00 */ }; struct _TRACE_LOGFILE_HEADER32 { unsigned long BufferSize; /* +0x0000 */ unsigned long Version; /* +0x0004 */ unsigned char VersionDetail[4]; /* +0x0004 ab 59 00 00 */ unsigned long ProviderVersion; /* +0x0008 */ unsigned long NumberOfProcessors; /* +0x000c */ unsigned char EndTime[8]; /* +0x0010 43 13 00 00 */ unsigned long TimerResolution; /* +0x0018 */ unsigned long MaximumFileSize; /* +0x001c */ unsigned long LogFileMode; /* +0x0020 */ unsigned long BuffersWritten; /* +0x0024 */ /* unsigned char LogInstanceGuid[0]; +0x0028 f3 14 00 00 */ unsigned long StartBuffers; /* +0x0028 */ unsigned long PointerSize; /* +0x002c */ unsigned long EventsLost; /* +0x0030 */ unsigned long CpuSpeedInMHz; /* +0x0034 */ unsigned char LoggerName[4]; /* +0x0038 75 00 00 00 */ unsigned char LogFileName[4]; /* +0x003c 75 00 00 00 */ unsigned char TimeZone[176]; /* +0x0040 da 46 00 00 */ unsigned char BootTime[8]; /* +0x00f0 43 13 00 00 */ unsigned char PerfFreq[8]; /* +0x00f8 43 13 00 00 */ unsigned char StartTime[8]; /* +0x0100 43 13 00 00 */ unsigned long ReservedFlags; /* +0x0108 */ unsigned long BuffersLost; /* +0x010c */ }; struct _NDR64_BINDINGS { /* unsigned char Primitive[0]; +0x0000 b1 59 00 00 */ /* unsigned char Generic[0]; +0x0000 b2 59 00 00 */ unsigned char Context[6]; /* +0x0000 d4 57 00 00 */ }; struct _NDR64_POINTER_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Flags; /* +0x0001 */ unsigned short Reserved; /* +0x0002 */ unsigned char Pointee[8]; /* +0x0008 4f 19 00 00 */ }; struct _NDR64_USER_MARSHAL_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Flags; /* +0x0001 */ unsigned short RoutineIndex; /* +0x0002 */ unsigned short TransmittedTypeWireAlignment; /* +0x0004 */ unsigned short MemoryAlignment; /* +0x0006 */ unsigned char UserTypeMemorySize[4]; /* +0x0008 75 00 00 00 */ unsigned char TransmittedTypeBufferSize[4]; /* +0x000c 75 00 00 00 */ unsigned char TransmittedType[8]; /* +0x0010 4f 19 00 00 */ }; struct _NDR64_NON_ENCAPSULATED_UNION { unsigned char FormatCode; /* +0x0000 */ unsigned char Alignment; /* +0x0001 */ unsigned char Flags; /* +0x0002 */ unsigned char SwitchType; /* +0x0003 */ unsigned char MemorySize[4]; /* +0x0004 75 00 00 00 */ unsigned char Switch[8]; /* +0x0008 4f 19 00 00 */ unsigned char Reserved[8]; /* +0x0010 75 00 00 00 */ }; struct NDR_MEMORY_VALIDATION { unsigned char pfn[8]; /* +0x0000 be 59 00 00 */ void *pCookie; /* +0x0008 */ }; struct _NDR64_EXPR_OPERATOR { unsigned char ExprType; /* +0x0000 */ unsigned char Operator; /* +0x0001 */ unsigned char CastType; /* +0x0002 */ unsigned char Reserved; /* +0x0003 */ }; struct _NDR64_IID_FLAGS { /* unsigned char ConstantIID[0]; +0x0000 a2 1e 00 00 */ unsigned char Reserved[1]; /* +0x0000 c3 59 00 00 */ }; struct _REFID_TO_FULLPTR_ELEMENT { unsigned char Next[8]; /* +0x0000 cd 59 00 00 */ void *Pointer; /* +0x0008 */ unsigned long RefId; /* +0x0010 */ unsigned char State; /* +0x0014 */ }; struct NDR_MINICOMPUTE_QUEUE_ELEMENT { unsigned char pNext[8]; /* +0x0000 97 58 00 00 */ unsigned char pConfFormat[8]; /* +0x0008 4b 19 00 00 */ unsigned long long ConfValue; /* +0x0010 */ unsigned long long VaryingValue; /* +0x0018 */ }; struct _NDR64_BUFFER_ALIGN_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Alignment; /* +0x0001 */ unsigned short Reserved; /* +0x0002 */ unsigned char Reserved2[4]; /* +0x0004 75 00 00 00 */ }; enum { AstaStatusUndetermined = 0, AstaEnabled = 1, AstaDisabled = 2 }; struct tagSTATDATA { unsigned char formatetc[32]; /* +0x0000 32 18 00 00 */ unsigned long advf; /* +0x0020 */ unsigned char pAdvSink[8]; /* +0x0028 35 18 00 00 */ unsigned long dwConnection; /* +0x0030 */ }; struct _XSAVE_FORMAT { unsigned short ControlWord; /* +0x0000 */ unsigned short StatusWord; /* +0x0002 */ unsigned char TagWord; /* +0x0004 */ unsigned char Reserved1; /* +0x0005 */ unsigned short ErrorOpcode; /* +0x0006 */ unsigned long ErrorOffset; /* +0x0008 */ unsigned short ErrorSelector; /* +0x000c */ unsigned short Reserved2; /* +0x000e */ unsigned long DataOffset; /* +0x0010 */ unsigned short DataSelector; /* +0x0014 */ unsigned short Reserved3; /* +0x0016 */ unsigned long MxCsr; /* +0x0018 */ unsigned long MxCsr_Mask; /* +0x001c */ unsigned char FloatRegisters[128]; /* +0x0020 87 19 00 00 */ unsigned char XmmRegisters[256]; /* +0x00a0 ee 59 00 00 */ unsigned char Reserved4[96]; /* +0x01a0 ef 59 00 00 */ }; struct tagPARAMDESC { unsigned char pparamdescex[8]; /* +0x0000 04 5a 00 00 */ unsigned short wParamFlags; /* +0x0008 */ }; struct tagBINDPTR { /* unsigned char lpfuncdesc[0]; +0x0000 14 41 00 00 */ /* unsigned char lpvardesc[0]; +0x0000 cd 36 00 00 */ unsigned char lptcomp[8]; /* +0x0000 7d 2e 00 00 */ }; struct _RTL_CONDITION_VARIABLE { /* unsigned char WakeCount[0]; +0x0000 31 5a 00 00 */ /* unsigned char Waking[0]; +0x0000 59 1e 00 00 */ unsigned long long Value; /* +0x0000 */ void *Ptr; /* +0x0000 */ }; struct tagTLIBATTR { unsigned char guid[16]; /* +0x0000 f3 14 00 00 */ unsigned long lcid; /* +0x0010 */ unsigned char syskind[4]; /* +0x0014 44 5a 00 00 */ unsigned short wMajorVerNum; /* +0x0018 */ unsigned short wMinorVerNum; /* +0x001a */ unsigned short wLibFlags; /* +0x001c */ }; struct tagELEMDESC { unsigned char tdesc[16]; /* +0x0000 22 41 00 00 */ /* unsigned char idldesc[0]; +0x0010 28 41 00 00 */ unsigned char paramdesc[16]; /* +0x0010 2e 53 00 00 */ }; struct _IMAGE_DATA_DIRECTORY { unsigned long VirtualAddress; /* +0x0000 */ unsigned long Size; /* +0x0004 */ }; struct tagVARIANT { unsigned short vt; /* +0x0000 */ unsigned short wReserved1; /* +0x0002 */ unsigned short wReserved2; /* +0x0004 */ unsigned short wReserved3; /* +0x0006 */ long long llVal; /* +0x0008 */ long lVal; /* +0x0008 */ unsigned char bVal; /* +0x0008 */ short iVal; /* +0x0008 */ /* unsigned char fltVal[0]; +0x0008 40 00 00 00 */ /* unsigned char dblVal[0]; +0x0008 41 00 00 00 */ short boolVal; /* +0x0008 */ long scode; /* +0x0008 */ /* unsigned char cyVal[0]; +0x0008 b9 3d 00 00 */ /* unsigned char date[0]; +0x0008 41 00 00 00 */ /* unsigned char bstrVal[0]; +0x0008 71 06 00 00 */ /* unsigned char punkVal[0]; +0x0008 93 17 00 00 */ /* unsigned char pdispVal[0]; +0x0008 c7 31 00 00 */ /* unsigned char parray[0]; +0x0008 5c 5a 00 00 */ unsigned char *pbVal; /* +0x0008 */ short *piVal; /* +0x0008 */ long *plVal; /* +0x0008 */ long long *pllVal; /* +0x0008 */ /* unsigned char pfltVal[0]; +0x0008 40 06 00 00 */ /* unsigned char pdblVal[0]; +0x0008 41 06 00 00 */ short *pboolVal; /* +0x0008 */ long *pscode; /* +0x0008 */ /* unsigned char pcyVal[0]; +0x0008 ba 3d 00 00 */ /* unsigned char pdate[0]; +0x0008 41 06 00 00 */ /* unsigned char pbstrVal[0]; +0x0008 db 13 00 00 */ /* unsigned char ppunkVal[0]; +0x0008 4e 22 00 00 */ /* unsigned char ppdispVal[0]; +0x0008 c8 31 00 00 */ /* unsigned char pparray[0]; +0x0008 5d 5a 00 00 */ /* unsigned char pvarVal[0]; +0x0008 4e 18 00 00 */ void *byref; /* +0x0008 */ char cVal; /* +0x0008 */ unsigned short uiVal; /* +0x0008 */ unsigned long ulVal; /* +0x0008 */ unsigned long long ullVal; /* +0x0008 */ /* unsigned char intVal[0]; +0x0008 74 00 00 00 */ /* unsigned char uintVal[0]; +0x0008 75 00 00 00 */ /* unsigned char pdecVal[0]; +0x0008 06 1f 00 00 */ char *pcVal; /* +0x0008 */ unsigned short *puiVal; /* +0x0008 */ unsigned long *pulVal; /* +0x0008 */ unsigned long long *pullVal; /* +0x0008 */ /* unsigned char pintVal[0]; +0x0008 74 06 00 00 */ /* unsigned char puintVal[0]; +0x0008 75 06 00 00 */ void *pvRecord; /* +0x0008 */ /* unsigned char pRecInfo[-16]; +0x0010 a4 3c 00 00 */ unsigned char decVal[24]; /* +0x0000 05 1f 00 00 */ }; struct tagMULTI_QI { unsigned char pIID[8]; /* +0x0000 67 16 00 00 */ unsigned char pItf[8]; /* +0x0008 93 17 00 00 */ unsigned char hr[8]; /* +0x0010 08 00 00 00 */ }; struct tagSAFEARRAYBOUND { unsigned long cElements; /* +0x0000 */ long lLbound; /* +0x0004 */ }; struct tagTYPEDESC { /* unsigned char lptdesc[0]; +0x0000 23 41 00 00 */ /* unsigned char lpadesc[0]; +0x0000 95 5a 00 00 */ unsigned long hreftype; /* +0x0000 */ unsigned short vt; /* +0x0008 */ }; struct tagEXCEPINFO { unsigned short wCode; /* +0x0000 */ unsigned short wReserved; /* +0x0002 */ unsigned char bstrSource[8]; /* +0x0008 71 06 00 00 */ unsigned char bstrDescription[8]; /* +0x0010 71 06 00 00 */ unsigned char bstrHelpFile[8]; /* +0x0018 71 06 00 00 */ unsigned long dwHelpContext; /* +0x0020 */ void *pvReserved; /* +0x0028 */ unsigned char pfnDeferredFillIn[8]; /* +0x0030 9a 5a 00 00 */ long scode; /* +0x0038 */ }; struct tagSTATSTG { unsigned char pwcsName[8]; /* +0x0000 71 06 00 00 */ unsigned long type; /* +0x0008 */ unsigned char cbSize[8]; /* +0x0010 3e 23 00 00 */ unsigned char mtime[8]; /* +0x0018 37 13 00 00 */ unsigned char ctime[8]; /* +0x0020 37 13 00 00 */ unsigned char atime[8]; /* +0x0028 37 13 00 00 */ unsigned long grfMode; /* +0x0030 */ unsigned long grfLocksSupported; /* +0x0034 */ unsigned char clsid[16]; /* +0x0038 f3 14 00 00 */ unsigned long grfStateBits; /* +0x0048 */ unsigned long reserved; /* +0x004c */ }; struct tagFUNCDESC { long memid; /* +0x0000 */ long *lprgscode; /* +0x0008 */ unsigned char lprgelemdescParam[8]; /* +0x0010 14 20 00 00 */ unsigned char funckind[4]; /* +0x0018 ce 5a 00 00 */ unsigned char invkind[4]; /* +0x001c ab 35 00 00 */ unsigned char callconv[4]; /* +0x0020 31 13 00 00 */ short cParams; /* +0x0024 */ short cParamsOpt; /* +0x0026 */ short oVft; /* +0x0028 */ short cScodes; /* +0x002a */ unsigned char elemdescFunc[32]; /* +0x0030 13 20 00 00 */ unsigned short wFuncFlags; /* +0x0050 */ }; struct tagBIND_OPTS { unsigned long cbStruct; /* +0x0000 */ unsigned long grfFlags; /* +0x0004 */ unsigned long grfMode; /* +0x0008 */ unsigned long dwTickCountDeadline; /* +0x000c */ }; struct tagIDLDESC { unsigned long long dwReserved; /* +0x0000 */ unsigned short wIDLFlags; /* +0x0008 */ }; struct _UNICODE_STRING { unsigned short Length; /* +0x0000 */ unsigned short MaximumLength; /* +0x0002 */ unsigned char Buffer[8]; /* +0x0008 71 06 00 00 */ }; struct _RTL_SPLAY_LINKS { unsigned char Parent[8]; /* +0x0000 e5 43 00 00 */ unsigned char LeftChild[8]; /* +0x0008 e5 43 00 00 */ unsigned char RightChild[8]; /* +0x0010 e5 43 00 00 */ }; struct _RTL_DYNAMIC_HASH_TABLE_ENTRY { unsigned char Linkage[16]; /* +0x0000 73 1f 00 00 */ unsigned long long Signature; /* +0x0010 */ }; struct tagCABSTR { unsigned long cElems; /* +0x0000 */ unsigned char pElems[8]; /* +0x0008 db 13 00 00 */ }; struct tagCACLSID { unsigned long cElems; /* +0x0000 */ unsigned char pElems[8]; /* +0x0008 61 16 00 00 */ }; struct tagCADBL { unsigned long cElems; /* +0x0000 */ unsigned char pElems[8]; /* +0x0008 41 06 00 00 */ }; struct _RTL_BITMAP { unsigned long SizeOfBitMap; /* +0x0000 */ unsigned long *Buffer; /* +0x0008 */ }; struct tagCAUB { unsigned long cElems; /* +0x0000 */ unsigned char *pElems; /* +0x0008 */ }; struct tagCACY { unsigned long cElems; /* +0x0000 */ unsigned char pElems[8]; /* +0x0008 ba 3d 00 00 */ }; struct LIST_ENTRY32 { unsigned long Flink; /* +0x0000 */ unsigned long Blink; /* +0x0004 */ }; struct tagIncomingCallData { unsigned long dwClientPID; /* +0x0000 */ }; struct _FILETIME { unsigned long dwLowDateTime; /* +0x0000 */ unsigned long dwHighDateTime; /* +0x0004 */ }; struct tagVARDESC { long memid; /* +0x0000 */ unsigned char lpstrSchema[8]; /* +0x0008 71 06 00 00 */ unsigned long oInst; /* +0x0010 */ unsigned char lpvarValue[8]; /* +0x0010 4e 18 00 00 */ unsigned char elemdescVar[32]; /* +0x0018 13 20 00 00 */ unsigned short wVarFlags; /* +0x0038 */ unsigned char varkind[4]; /* +0x003c 27 5b 00 00 */ }; struct CAtom { unsigned short m_atom; /* +0x0000 */ }; struct tagOutgoingCallData { unsigned long dwServerPID; /* +0x0000 */ unsigned long dwServerTID; /* +0x0004 */ }; struct tagDEC { unsigned short wReserved; /* +0x0000 */ unsigned char scale; /* +0x0002 */ unsigned char sign; /* +0x0003 */ unsigned short signscale; /* +0x0002 */ unsigned long Hi32; /* +0x0004 */ unsigned long Lo32; /* +0x0008 */ unsigned long Mid32; /* +0x000c */ unsigned long long Lo64; /* +0x0008 */ }; struct tagOutgoingActivationData { unsigned char guidServer[16]; /* +0x0000 f3 14 00 00 */ }; struct _CLIENT_ID { void *UniqueProcess; /* +0x0000 */ void *UniqueThread; /* +0x0008 */ }; struct _OBJECT_ATTRIBUTES { unsigned long Length; /* +0x0000 */ void *RootDirectory; /* +0x0008 */ unsigned char ObjectName[8]; /* +0x0010 b6 17 00 00 */ unsigned long Attributes; /* +0x0018 */ void *SecurityDescriptor; /* +0x0020 */ void *SecurityQualityOfService; /* +0x0028 */ }; struct tagCAUL { unsigned long cElems; /* +0x0000 */ unsigned long *pElems; /* +0x0008 */ }; struct _M128A { unsigned long long Low; /* +0x0000 */ long long High; /* +0x0008 */ }; struct tagBSTRBLOB { unsigned long cbSize; /* +0x0000 */ unsigned char *pData; /* +0x0008 */ }; struct tagDVTARGETDEVICE { unsigned long tdSize; /* +0x0000 */ unsigned short tdDriverNameOffset; /* +0x0004 */ unsigned short tdDeviceNameOffset; /* +0x0006 */ unsigned short tdPortNameOffset; /* +0x0008 */ unsigned short tdExtDevmodeOffset; /* +0x000a */ unsigned char tdData[4]; /* +0x000c ff 12 00 00 */ }; struct tagCAH { unsigned long cElems; /* +0x0000 */ unsigned char pElems[8]; /* +0x0008 07 23 00 00 */ }; struct _KEY_VALUE_FULL_INFORMATION { unsigned long TitleIndex; /* +0x0000 */ unsigned long Type; /* +0x0004 */ unsigned long DataOffset; /* +0x0008 */ unsigned long DataLength; /* +0x000c */ unsigned long NameLength; /* +0x0010 */ unsigned char Name[4]; /* +0x0014 0a 14 00 00 */ }; struct _PROCESSOR_NUMBER { unsigned short Group; /* +0x0000 */ unsigned char Number; /* +0x0002 */ unsigned char Reserved; /* +0x0003 */ }; struct tagCAUI { unsigned long cElems; /* +0x0000 */ unsigned short *pElems; /* +0x0008 */ }; struct tagCAFILETIME { unsigned long cElems; /* +0x0000 */ unsigned char pElems[8]; /* +0x0008 87 17 00 00 */ }; struct _IMAGE_FILE_HEADER { unsigned short Machine; /* +0x0000 */ unsigned short NumberOfSections; /* +0x0002 */ unsigned long TimeDateStamp; /* +0x0004 */ unsigned long PointerToSymbolTable; /* +0x0008 */ unsigned long NumberOfSymbols; /* +0x000c */ unsigned short SizeOfOptionalHeader; /* +0x0010 */ unsigned short Characteristics; /* +0x0012 */ }; struct _XSTATE_FEATURE { unsigned long Offset; /* +0x0000 */ unsigned long Size; /* +0x0004 */ }; struct tagDISPPARAMS { unsigned char rgvarg[8]; /* +0x0000 4e 18 00 00 */ long *rgdispidNamedArgs; /* +0x0008 */ unsigned char cArgs[4]; /* +0x0010 75 00 00 00 */ unsigned char cNamedArgs[4]; /* +0x0014 75 00 00 00 */ }; struct tagSAFEARRAY { unsigned short cDims; /* +0x0000 */ unsigned short fFeatures; /* +0x0002 */ unsigned long cbElements; /* +0x0004 */ unsigned long cLocks; /* +0x0008 */ void *pvData; /* +0x0010 */ unsigned char rgsabound[8]; /* +0x0018 47 25 00 00 */ }; struct _KSYSTEM_TIME { unsigned long LowPart; /* +0x0000 */ long High1Time; /* +0x0004 */ long High2Time; /* +0x0008 */ }; struct tagPROPVARIANT { unsigned short vt; /* +0x0000 */ unsigned short wReserved1; /* +0x0002 */ unsigned short wReserved2; /* +0x0004 */ unsigned short wReserved3; /* +0x0006 */ char cVal; /* +0x0008 */ unsigned char bVal; /* +0x0008 */ short iVal; /* +0x0008 */ unsigned short uiVal; /* +0x0008 */ long lVal; /* +0x0008 */ unsigned long ulVal; /* +0x0008 */ /* unsigned char intVal[0]; +0x0008 74 00 00 00 */ /* unsigned char uintVal[0]; +0x0008 75 00 00 00 */ /* unsigned char hVal[0]; +0x0008 43 13 00 00 */ /* unsigned char uhVal[0]; +0x0008 3e 23 00 00 */ /* unsigned char fltVal[0]; +0x0008 40 00 00 00 */ /* unsigned char dblVal[0]; +0x0008 41 00 00 00 */ short boolVal; /* +0x0008 */ long scode; /* +0x0008 */ /* unsigned char cyVal[0]; +0x0008 b9 3d 00 00 */ /* unsigned char date[0]; +0x0008 41 00 00 00 */ /* unsigned char filetime[0]; +0x0008 37 13 00 00 */ /* unsigned char puuid[0]; +0x0008 61 16 00 00 */ /* unsigned char pclipdata[0]; +0x0008 9d 5b 00 00 */ /* unsigned char bstrVal[0]; +0x0008 71 06 00 00 */ /* unsigned char bstrblobVal[0]; +0x0008 01 36 00 00 */ /* unsigned char blob[0]; +0x0008 6f 32 00 00 */ char *pszVal; /* +0x0008 */ /* unsigned char pwszVal[0]; +0x0008 71 06 00 00 */ /* unsigned char punkVal[0]; +0x0008 93 17 00 00 */ /* unsigned char pdispVal[0]; +0x0008 c7 31 00 00 */ /* unsigned char pStream[0]; +0x0008 20 27 00 00 */ /* unsigned char pStorage[0]; +0x0008 19 16 00 00 */ /* unsigned char pVersionedStream[0]; +0x0008 9f 5b 00 00 */ /* unsigned char parray[0]; +0x0008 5c 5a 00 00 */ /* unsigned char cac[0]; +0x0008 a0 5b 00 00 */ /* unsigned char caub[0]; +0x0008 a1 5b 00 00 */ /* unsigned char cai[0]; +0x0008 a2 5b 00 00 */ /* unsigned char caui[0]; +0x0008 a3 5b 00 00 */ /* unsigned char cal[0]; +0x0008 a4 5b 00 00 */ /* unsigned char caul[0]; +0x0008 a5 5b 00 00 */ /* unsigned char cah[0]; +0x0008 a6 5b 00 00 */ /* unsigned char cauh[0]; +0x0008 a7 5b 00 00 */ /* unsigned char caflt[0]; +0x0008 a8 5b 00 00 */ /* unsigned char cadbl[0]; +0x0008 a9 5b 00 00 */ /* unsigned char cabool[0]; +0x0008 aa 5b 00 00 */ /* unsigned char cascode[0]; +0x0008 ab 5b 00 00 */ /* unsigned char cacy[0]; +0x0008 ac 5b 00 00 */ /* unsigned char cadate[0]; +0x0008 ad 5b 00 00 */ /* unsigned char cafiletime[0]; +0x0008 ae 5b 00 00 */ /* unsigned char cauuid[0]; +0x0008 af 5b 00 00 */ /* unsigned char caclipdata[0]; +0x0008 b0 5b 00 00 */ /* unsigned char cabstr[0]; +0x0008 b1 5b 00 00 */ /* unsigned char cabstrblob[0]; +0x0008 b2 5b 00 00 */ /* unsigned char calpstr[0]; +0x0008 b3 5b 00 00 */ /* unsigned char calpwstr[0]; +0x0008 b4 5b 00 00 */ /* unsigned char capropvar[0]; +0x0008 b5 5b 00 00 */ char *pcVal; /* +0x0008 */ unsigned char *pbVal; /* +0x0008 */ short *piVal; /* +0x0008 */ unsigned short *puiVal; /* +0x0008 */ long *plVal; /* +0x0008 */ unsigned long *pulVal; /* +0x0008 */ /* unsigned char pintVal[0]; +0x0008 74 06 00 00 */ /* unsigned char puintVal[0]; +0x0008 75 06 00 00 */ /* unsigned char pfltVal[0]; +0x0008 40 06 00 00 */ /* unsigned char pdblVal[0]; +0x0008 41 06 00 00 */ short *pboolVal; /* +0x0008 */ /* unsigned char pdecVal[0]; +0x0008 06 1f 00 00 */ long *pscode; /* +0x0008 */ /* unsigned char pcyVal[0]; +0x0008 ba 3d 00 00 */ /* unsigned char pdate[0]; +0x0008 41 06 00 00 */ /* unsigned char pbstrVal[0]; +0x0008 db 13 00 00 */ /* unsigned char ppunkVal[0]; +0x0008 4e 22 00 00 */ /* unsigned char ppdispVal[0]; +0x0008 c8 31 00 00 */ /* unsigned char pparray[0]; +0x0008 5d 5a 00 00 */ /* unsigned char pvarVal[-8]; +0x0008 a6 1c 00 00 */ unsigned char decVal[24]; /* +0x0000 05 1f 00 00 */ }; struct _LIST_ENTRY { unsigned char Flink[8]; /* +0x0000 99 2d 00 00 */ unsigned char Blink[8]; /* +0x0008 99 2d 00 00 */ }; struct _GDI_TEB_BATCH { unsigned long Offset; /* +0x0000 */ unsigned long long HDC; /* +0x0008 */ unsigned char Buffer[1240]; /* +0x0010 bd 5b 00 00 */ }; struct tagCAPROPVARIANT { unsigned long cElems; /* +0x0000 */ unsigned char pElems[8]; /* +0x0008 a6 1c 00 00 */ }; struct tagCLIPDATA { unsigned long cbSize; /* +0x0000 */ long ulClipFmt; /* +0x0004 */ unsigned char *pClipData; /* +0x0008 */ }; struct _RTL_DRIVE_LETTER_CURDIR { unsigned short Flags; /* +0x0000 */ unsigned short Length; /* +0x0002 */ unsigned long TimeStamp; /* +0x0004 */ unsigned char DosPath[16]; /* +0x0008 e8 17 00 00 */ }; struct tagCAC { unsigned long cElems; /* +0x0000 */ char *pElems; /* +0x0008 */ }; struct tagTYPEATTR { unsigned char guid[16]; /* +0x0000 f3 14 00 00 */ unsigned long lcid; /* +0x0010 */ unsigned long dwReserved; /* +0x0014 */ long memidConstructor; /* +0x0018 */ long memidDestructor; /* +0x001c */ unsigned char lpstrSchema[8]; /* +0x0020 71 06 00 00 */ unsigned long cbSizeInstance; /* +0x0028 */ unsigned char typekind[4]; /* +0x002c a6 35 00 00 */ unsigned short cFuncs; /* +0x0030 */ unsigned short cVars; /* +0x0032 */ unsigned short cImplTypes; /* +0x0034 */ unsigned short cbSizeVft; /* +0x0036 */ unsigned short cbAlignment; /* +0x0038 */ unsigned short wTypeFlags; /* +0x003a */ unsigned short wMajorVerNum; /* +0x003c */ unsigned short wMinorVerNum; /* +0x003e */ unsigned char tdescAlias[16]; /* +0x0040 22 41 00 00 */ unsigned char idldescType[16]; /* +0x0050 28 41 00 00 */ }; struct tagSOleTlsData { void *pvThreadBase; /* +0x0000 */ unsigned char pSmAllocator[8]; /* +0x0008 de 5b 00 00 */ unsigned long dwApartmentID; /* +0x0010 */ unsigned long dwFlags; /* +0x0014 */ long TlsMapIndex; /* +0x0018 */ unsigned char ppTlsSlot[8]; /* +0x0020 55 13 00 00 */ unsigned long cComInits; /* +0x0028 */ unsigned long cOleInits; /* +0x002c */ unsigned long cCalls; /* +0x0030 */ unsigned char pCallInfo[8]; /* +0x0038 6c 54 00 00 */ unsigned char pFreeAsyncCall[8]; /* +0x0040 6e 54 00 00 */ unsigned char pFreeClientCall[8]; /* +0x0048 70 54 00 00 */ unsigned char pObjServer[8]; /* +0x0050 72 54 00 00 */ unsigned long dwTIDCaller; /* +0x0058 */ unsigned char pCurrentCtx[8]; /* +0x0060 74 54 00 00 */ unsigned char pEmptyCtx[8]; /* +0x0068 74 54 00 00 */ unsigned long long ContextId; /* +0x0070 */ unsigned char pNativeApt[8]; /* +0x0078 76 54 00 00 */ unsigned char pCallContext[8]; /* +0x0080 93 17 00 00 */ unsigned char pCtxCall[8]; /* +0x0088 78 54 00 00 */ unsigned char pPS[8]; /* +0x0090 7a 54 00 00 */ void *pvPendingCallsFront; /* +0x0098 */ void *pvPendingCallsBack; /* +0x00a0 */ unsigned char pCallCtrl[8]; /* +0x00a8 7c 54 00 00 */ unsigned char pTopSCS[8]; /* +0x00b0 7e 54 00 00 */ unsigned char pMsgFilter[8]; /* +0x00b8 00 31 00 00 */ unsigned char hwndSTA[8]; /* +0x00c0 f7 12 00 00 */ long cORPCNestingLevel; /* +0x00c8 */ unsigned long cDebugData; /* +0x00cc */ unsigned char LogicalThreadId[16]; /* +0x00d0 f3 14 00 00 */ void *hThread; /* +0x00e0 */ void *hRevert; /* +0x00e8 */ unsigned char pAsyncRelease[8]; /* +0x00f0 93 17 00 00 */ unsigned char hwndDdeServer[8]; /* +0x00f8 f7 12 00 00 */ unsigned char hwndDdeClient[8]; /* +0x0100 f7 12 00 00 */ unsigned long cServeDdeObjects; /* +0x0108 */ void *pSTALSvrsFront; /* +0x0110 */ unsigned char hwndClip[8]; /* +0x0118 f7 12 00 00 */ unsigned char pDataObjClip[8]; /* +0x0120 dc 14 00 00 */ unsigned long dwClipSeqNum; /* +0x0128 */ unsigned long fIsClipWrapper; /* +0x012c */ unsigned char punkState[8]; /* +0x0130 93 17 00 00 */ unsigned long cCallCancellation; /* +0x0138 */ unsigned long cAsyncSends; /* +0x013c */ unsigned char pAsyncCallList[8]; /* +0x0140 6e 54 00 00 */ unsigned char pSurrogateList[8]; /* +0x0148 e0 5b 00 00 */ void *pRWLockTlsEntry; /* +0x0150 */ unsigned char CallEntry[16]; /* +0x0158 e1 5b 00 00 */ unsigned char pContextStack[8]; /* +0x0168 e3 5b 00 00 */ unsigned char pFirstSpyReg[8]; /* +0x0170 e5 5b 00 00 */ unsigned char pFirstFreeSpyReg[8]; /* +0x0178 e5 5b 00 00 */ unsigned char pVerifierData[8]; /* +0x0180 e7 5b 00 00 */ unsigned long dwMaxSpy; /* +0x0188 */ unsigned char cCustomMarshallerRecursion; /* +0x018c */ void *pDragCursors; /* +0x0190 */ unsigned char punkError[8]; /* +0x0198 93 17 00 00 */ unsigned long cbErrorData; /* +0x01a0 */ unsigned char outgoingCallData[8]; /* +0x01a4 e8 5b 00 00 */ unsigned char incomingCallData[4]; /* +0x01ac e9 5b 00 00 */ unsigned char outgoingActivationData[16]; /* +0x01b0 ea 5b 00 00 */ unsigned long cReentrancyFromUserAPC; /* +0x01c0 */ unsigned char pASTAWaitContext[8]; /* +0x01c8 ec 5b 00 00 */ unsigned char dwCrossThreadFlags[8]; /* +0x01d0 cf 17 00 00 */ }; struct _KEY_VALUE_BASIC_INFORMATION { unsigned long TitleIndex; /* +0x0000 */ unsigned long Type; /* +0x0004 */ unsigned long NameLength; /* +0x0008 */ unsigned char Name[4]; /* +0x000c 0a 14 00 00 */ }; struct tagBLOB { unsigned long cbSize; /* +0x0000 */ unsigned char *pBlobData; /* +0x0008 */ }; struct _KUSER_SHARED_DATA { unsigned long TickCountLowDeprecated; /* +0x0000 */ unsigned long TickCountMultiplier; /* +0x0004 */ unsigned char InterruptTime[12]; /* +0x0008 f5 5b 00 00 */ unsigned char SystemTime[12]; /* +0x0014 f5 5b 00 00 */ unsigned char TimeZoneBias[12]; /* +0x0020 f5 5b 00 00 */ unsigned short ImageNumberLow; /* +0x002c */ unsigned short ImageNumberHigh; /* +0x002e */ unsigned char NtSystemRoot[520]; /* +0x0030 00 16 00 00 */ unsigned long MaxStackTraceDepth; /* +0x0238 */ unsigned long CryptoExponent; /* +0x023c */ unsigned long TimeZoneId; /* +0x0240 */ unsigned long LargePageMinimum; /* +0x0244 */ unsigned long AitSamplingValue; /* +0x0248 */ unsigned long AppCompatFlag; /* +0x024c */ unsigned long long RNGSeedVersion; /* +0x0250 */ unsigned long GlobalValidationRunlevel; /* +0x0258 */ unsigned char Reserved2[8]; /* +0x025c 14 16 00 00 */ unsigned char NtProductType[4]; /* +0x0264 a6 51 00 00 */ unsigned char ProductTypeIsValid; /* +0x0268 */ unsigned char Reserved0[1]; /* +0x0269 ff 12 00 00 */ unsigned short NativeProcessorArchitecture; /* +0x026a */ unsigned long NtMajorVersion; /* +0x026c */ unsigned long NtMinorVersion; /* +0x0270 */ unsigned char ProcessorFeatures[64]; /* +0x0274 19 13 00 00 */ unsigned long Reserved1; /* +0x02b4 */ unsigned long Reserved3; /* +0x02b8 */ unsigned char TimeSlip[4]; /* +0x02bc cf 17 00 00 */ unsigned char AlternativeArchitecture[4]; /* +0x02c0 f6 5b 00 00 */ unsigned char AltArchitecturePad[4]; /* +0x02c4 fc 12 00 00 */ unsigned char SystemExpirationDate[8]; /* +0x02c8 43 13 00 00 */ unsigned long SuiteMask; /* +0x02d0 */ unsigned char KdDebuggerEnabled; /* +0x02d4 */ unsigned char MitigationPolicies; /* +0x02d5 */ /* unsigned char NXSupportPolicy[0]; +0x02d5 f7 1e 00 00 */ /* unsigned char SEHValidationPolicy[0]; +0x02d5 f8 1e 00 00 */ /* unsigned char CurDirDevicesSkippedForDlls[0]; +0x02d5 f9 1e 00 00 */ unsigned char Reserved[1]; /* +0x02d5 fa 1e 00 00 */ unsigned char Reserved6[2]; /* +0x02d6 bb 17 00 00 */ unsigned char ActiveConsoleId[4]; /* +0x02d8 cf 17 00 00 */ unsigned char DismountCount[4]; /* +0x02dc cf 17 00 00 */ unsigned long ComPlusPackage; /* +0x02e0 */ unsigned long LastSystemRITEventTickCount; /* +0x02e4 */ unsigned long NumberOfPhysicalPages; /* +0x02e8 */ unsigned char SafeBootMode; /* +0x02ec */ unsigned char Reserved12[3]; /* +0x02ed 93 13 00 00 */ unsigned long SharedDataFlags; /* +0x02f0 */ /* unsigned char DbgErrorPortPresent[0]; +0x02f0 94 13 00 00 */ /* unsigned char DbgElevationEnabled[0]; +0x02f0 90 18 00 00 */ /* unsigned char DbgVirtEnabled[0]; +0x02f0 91 18 00 00 */ /* unsigned char DbgInstallerDetectEnabled[0]; +0x02f0 74 1e 00 00 */ /* unsigned char DbgLkgEnabled[0]; +0x02f0 75 1e 00 00 */ /* unsigned char DbgDynProcessorEnabled[0]; +0x02f0 0b 24 00 00 */ /* unsigned char DbgConsoleBrokerEnabled[0]; +0x02f0 32 1f 00 00 */ unsigned char SpareBits[4]; /* +0x02f0 bd 23 00 00 */ unsigned char DataFlagsPad[4]; /* +0x02f4 fc 12 00 00 */ unsigned long long TestRetInstruction; /* +0x02f8 */ unsigned long Reserved9; /* +0x0300 */ unsigned long Reserved10; /* +0x0304 */ unsigned char SystemCallPad[24]; /* +0x0308 f7 5b 00 00 */ /* unsigned char TickCount[0]; +0x0320 f5 5b 00 00 */ /* unsigned char TickCountQuad[0]; +0x0320 d8 17 00 00 */ unsigned char ReservedTickCountOverlay[12]; /* +0x0320 28 13 00 00 */ unsigned char TickCountPad[4]; /* +0x032c fc 12 00 00 */ unsigned long Cookie; /* +0x0330 */ unsigned char CookiePad[4]; /* +0x0334 fc 12 00 00 */ long long ConsoleSessionForegroundProcessId; /* +0x0338 */ unsigned char TimeUpdateSequence[8]; /* +0x0340 d8 17 00 00 */ unsigned long long LastTimeUpdateQpcValue; /* +0x0348 */ unsigned long long LastInterruptTimeUpdateQpcValue; /* +0x0350 */ unsigned long long QpcTimeIncrement; /* +0x0358 */ unsigned long QpcTimeIncrement32; /* +0x0360 */ unsigned char Reserved8[28]; /* +0x0364 f8 5b 00 00 */ unsigned char UserModeGlobalLogger[32]; /* +0x0380 22 57 00 00 */ unsigned long ImageFileExecutionOptions; /* +0x03a0 */ unsigned long LangGenerationCount; /* +0x03a4 */ unsigned char InterruptTimeBias[8]; /* +0x03a8 d8 17 00 00 */ unsigned char TscQpcBias[8]; /* +0x03b0 d8 17 00 00 */ unsigned char ActiveProcessorCount[4]; /* +0x03b8 cf 17 00 00 */ unsigned char ActiveGroupCount[1]; /* +0x03bc f9 5b 00 00 */ unsigned char QpcTimeIncrementShift; /* +0x03bd */ unsigned short TscQpcData; /* +0x03be */ unsigned char TscQpcEnabled[1]; /* +0x03be f9 5b 00 00 */ unsigned char TscQpcShift; /* +0x03bf */ unsigned char XState[528]; /* +0x03c0 77 31 00 00 */ }; struct _ULARGE_INTEGER { unsigned long LowPart; /* +0x0000 */ unsigned long HighPart; /* +0x0004 */ }; struct _ULARGE_INTEGER:: { unsigned long LowPart; /* +0x0000 */ unsigned long HighPart; /* +0x0004 */ }; struct CMapKeyToValue::CAssoc { unsigned char pNext[8]; /* +0x0000 3d 5c 00 00 */ unsigned char nHashValue[8]; /* +0x0008 75 00 00 00 */ unsigned char key[16]; /* +0x0010 3a 5c 00 00 */ }; struct CMapKeyToValue::CKeyWrap { /* unsigned char rgbKey[0]; +0x0000 88 15 00 00 */ void *pKey; /* +0x0000 */ unsigned char cbKey[8]; /* +0x0008 75 00 00 00 */ }; struct tagLC_ID { unsigned short wLanguage; /* +0x0000 */ unsigned short wCountry; /* +0x0002 */ unsigned short wCodePage; /* +0x0004 */ }; struct tagCAI { unsigned long cElems; /* +0x0000 */ short *pElems; /* +0x0008 */ }; struct _RTL_USER_PROCESS_PARAMETERS { unsigned long MaximumLength; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ unsigned long DebugFlags; /* +0x000c */ void *ConsoleHandle; /* +0x0010 */ unsigned long ConsoleFlags; /* +0x0018 */ void *StandardInput; /* +0x0020 */ void *StandardOutput; /* +0x0028 */ void *StandardError; /* +0x0030 */ unsigned char CurrentDirectory[24]; /* +0x0038 90 4c 00 00 */ unsigned char DllPath[16]; /* +0x0050 e3 12 00 00 */ unsigned char ImagePathName[16]; /* +0x0060 e3 12 00 00 */ unsigned char CommandLine[16]; /* +0x0070 e3 12 00 00 */ void *Environment; /* +0x0080 */ unsigned long StartingX; /* +0x0088 */ unsigned long StartingY; /* +0x008c */ unsigned long CountX; /* +0x0090 */ unsigned long CountY; /* +0x0094 */ unsigned long CountCharsX; /* +0x0098 */ unsigned long CountCharsY; /* +0x009c */ unsigned long FillAttribute; /* +0x00a0 */ unsigned long WindowFlags; /* +0x00a4 */ unsigned long ShowWindowFlags; /* +0x00a8 */ unsigned char WindowTitle[16]; /* +0x00b0 e3 12 00 00 */ unsigned char DesktopInfo[16]; /* +0x00c0 e3 12 00 00 */ unsigned char ShellInfo[16]; /* +0x00d0 e3 12 00 00 */ unsigned char RuntimeData[16]; /* +0x00e0 e3 12 00 00 */ unsigned char CurrentDirectores[768]; /* +0x00f0 71 5c 00 00 */ unsigned char EnvironmentSize[8]; /* +0x03f0 d8 17 00 00 */ unsigned char EnvironmentVersion[8]; /* +0x03f8 d8 17 00 00 */ unsigned char PackageMoniker[16]; /* +0x0400 e3 12 00 00 */ void *PackageDependencyData; /* +0x0410 */ unsigned long ProcessGroupId; /* +0x0418 */ }; struct _TP_TASK_CALLBACKS { unsigned char ExecuteCallback[8]; /* +0x0000 76 5c 00 00 */ unsigned char Unposted[8]; /* +0x0008 59 5b 00 00 */ }; struct _RTL_CRITICAL_SECTION { unsigned char DebugInfo[8]; /* +0x0000 a8 22 00 00 */ long LockCount; /* +0x0008 */ long RecursionCount; /* +0x000c */ void *OwningThread; /* +0x0010 */ void *LockSemaphore; /* +0x0018 */ unsigned long long SpinCount; /* +0x0020 */ }; struct CBool { unsigned char value[4]; /* +0x0000 74 00 00 00 */ }; struct _XSTATE_CONFIGURATION { unsigned long long EnabledFeatures; /* +0x0000 */ unsigned long Size; /* +0x0008 */ unsigned char OptimizedSave[4]; /* +0x000c 94 13 00 00 */ unsigned char Features[512]; /* +0x0010 54 5d 00 00 */ }; struct threadlocaleinfostruct:: { char *locale; /* +0x0000 */ unsigned char wlocale[8]; /* +0x0008 71 06 00 00 */ unsigned char refcount[8]; /* +0x0010 74 06 00 00 */ unsigned char wrefcount[8]; /* +0x0018 74 06 00 00 */ }; struct tagInitializeSpyNode { unsigned char pNext[8]; /* +0x0000 e5 5b 00 00 */ unsigned char pPrev[8]; /* +0x0008 e5 5b 00 00 */ unsigned long dwRefs; /* +0x0010 */ unsigned long dwCookie; /* +0x0014 */ unsigned char pInitSpy[8]; /* +0x0018 64 4a 00 00 */ }; struct tagCAL { unsigned long cElems; /* +0x0000 */ long *pElems; /* +0x0008 */ }; struct tagCAUH { unsigned long cElems; /* +0x0000 */ unsigned char pElems[8]; /* +0x0008 09 47 00 00 */ }; struct _ldiv_t { long quot; /* +0x0000 */ long rem; /* +0x0004 */ }; struct _iobuf { char *_ptr; /* +0x0000 */ unsigned char _cnt[8]; /* +0x0008 74 00 00 00 */ char *_base; /* +0x0010 */ unsigned char _flag[4]; /* +0x0018 74 00 00 00 */ unsigned char _file[4]; /* +0x001c 74 00 00 00 */ unsigned char _charbuf[4]; /* +0x0020 74 00 00 00 */ unsigned char _bufsiz[4]; /* +0x0024 74 00 00 00 */ char *_tmpfname; /* +0x0028 */ }; struct tagCallEntry { void *pNext; /* +0x0000 */ void *pvObject; /* +0x0008 */ }; struct _CURDIR { unsigned char DosPath[16]; /* +0x0000 e3 12 00 00 */ void *Handle; /* +0x0010 */ }; struct tagContextStackNode { unsigned char pNext[8]; /* +0x0000 e3 5b 00 00 */ unsigned char pSavedContext[8]; /* +0x0008 74 54 00 00 */ unsigned char pServerContext[8]; /* +0x0010 74 54 00 00 */ unsigned char pClientCall[8]; /* +0x0018 78 54 00 00 */ unsigned char pServerCall[8]; /* +0x0020 78 54 00 00 */ unsigned char pPS[8]; /* +0x0028 7a 54 00 00 */ }; struct _NT_TIB { unsigned char ExceptionList[8]; /* +0x0000 44 1e 00 00 */ void *StackBase; /* +0x0008 */ void *StackLimit; /* +0x0010 */ void *SubSystemTib; /* +0x0018 */ void *FiberData; /* +0x0020 */ unsigned long Version; /* +0x0020 */ void *ArbitraryUserPointer; /* +0x0028 */ unsigned char Self[8]; /* +0x0030 83 27 00 00 */ }; struct tagCAFLT { unsigned long cElems; /* +0x0000 */ unsigned char pElems[8]; /* +0x0008 40 06 00 00 */ }; struct tagCALPSTR { unsigned long cElems; /* +0x0000 */ unsigned char pElems[8]; /* +0x0008 03 24 00 00 */ }; struct tagFORMATETC { unsigned short cfFormat; /* +0x0000 */ unsigned char ptd[8]; /* +0x0008 88 35 00 00 */ unsigned long dwAspect; /* +0x0010 */ long lindex; /* +0x0014 */ unsigned long tymed; /* +0x0018 */ }; struct _TEB_ACTIVE_FRAME_CONTEXT { unsigned long Flags; /* +0x0000 */ unsigned char FrameName[8]; /* +0x0008 79 14 00 00 */ }; struct _TP_CALLBACK_ENVIRON_V3:: { unsigned long Flags; /* +0x0000 */ }; struct _TP_CALLBACK_ENVIRON_V3:::: { /* unsigned char LongFunction[0]; +0x0000 94 13 00 00 */ /* unsigned char Persistent[0]; +0x0000 90 18 00 00 */ unsigned char Private[4]; /* +0x0000 c5 19 00 00 */ }; struct LockCookie { unsigned long dwFlags; /* +0x0000 */ unsigned long dwWriterSeqNum; /* +0x0004 */ unsigned short wReaderLevel; /* +0x0008 */ unsigned short wWriterLevel; /* +0x000a */ unsigned long dwThreadID; /* +0x000c */ }; struct tagCABSTRBLOB { unsigned long cElems; /* +0x0000 */ unsigned char pElems[8]; /* +0x0008 02 36 00 00 */ }; struct tagCACLIPDATA { unsigned long cElems; /* +0x0000 */ unsigned char pElems[8]; /* +0x0008 9d 5b 00 00 */ }; struct CHwnd { unsigned char m_hwnd[8]; /* +0x0000 f7 12 00 00 */ }; struct LIST_ENTRY64 { unsigned long long Flink; /* +0x0000 */ unsigned long long Blink; /* +0x0008 */ }; enum ACTIVATION_PROPERTIES::eFlags { fFOR_SCM = 1, fSURROGATE = 4, fDO_NOT_LOAD = 8, fRELOAD_DARWIN = 16, fLSVR_ONLY = 32 }; struct CRWLock::LockState { /* unsigned char _numReaders[0]; +0x0000 13 5f 00 00 */ /* unsigned char _writerPresent[0]; +0x0000 14 5f 00 00 */ /* unsigned char _writerSignaled[0]; +0x0000 15 5f 00 00 */ /* unsigned char _readerSignaled[0]; +0x0000 16 5f 00 00 */ /* unsigned char _resetInProgress[0]; +0x0000 17 5f 00 00 */ /* unsigned char _waitingReaders[0]; +0x0000 18 5f 00 00 */ unsigned char _waitingWriters[8]; /* +0x0000 19 5f 00 00 */ }; struct CRWLock::EventState { /* unsigned char _entryIsEventMask[0]; +0x0000 d0 17 00 00 */ /* unsigned char _entryIsMarkedForPooling[0]; +0x0000 d1 17 00 00 */ /* unsigned char _entryIsBeingPooled[0]; +0x0000 d2 17 00 00 */ /* unsigned char _readerEventBeingSignaled[0]; +0x0000 d3 17 00 00 */ /* unsigned char _readerEventBeingReset[0]; +0x0000 d4 17 00 00 */ /* unsigned char _readerCountIsSignalCount[0]; +0x0000 d5 17 00 00 */ /* unsigned char _readerCount[0]; +0x0000 1c 5f 00 00 */ unsigned char _writerEventSignaled[4]; /* +0x0000 22 21 00 00 */ }; enum _WPP_FLAG_LEN_ENUM { WPP_FLAG_LEN = 1 }; enum WPP_DEFINE_BIT_NAMES { WPP_BLOCK_START_OLE32 = 0, WPP_BIT_ERRORS = 1, WPP_BIT_WARNING = 2, WPP_BIT_INFO = 3, WPP_BIT_VERBOSE = 4, WPP_BIT_CHATTY = 5, WPP_BIT_GARRULOUS = 6, WPP_BIT_LOQUACIOUS = 7, WPP_BLOCK_END_OLE32 = 8 }; enum WPP_CTL_NAMES { WPP_CTL_OLE32 = 0, WPP_LAST_CTL = 1 }; enum tagORFLAG { ORF_CONNECTED = 1, ORF_STRINGSREGISTERED = 2, ORF_INBULKUPDATECALL = 4 }; enum __MIDL_IActivatorCustomMarshal_0001 { SPD_FLAG_USE_CONSOLE_SESSION = 1, SPD_FLAG_USE_DEFAULT_AUTHN_LVL = 2, SPD_FLAG_USE_SERVER_PID = 4, SPD_FLAG_USE_LUA_LEVEL_ADMIN = 8, SPD_FLAG_COAUTH_USER_IS_NULL = 16, SPD_FLAG_COAUTH_DOMAIN_IS_NULL = 32, SPD_FLAG_COAUTH_PWD_IS_NULL = 64, SPD_FLAG_USE_LUA_LEVEL_HIGHEST = 128 }; enum _RUNLEVEL { RUNLEVEL_LUA = 0, RUNLEVEL_HIGHEST = 1, RUNLEVEL_ADMIN = 2, RUNLEVEL_MAX_NON_UIA = 3, RUNLEVEL_LUA_UIA = 16, RUNLEVEL_HIGHEST_UIA = 17, RUNLEVEL_ADMIN_UIA = 18, RUNLEVEL_MAX = 19 }; enum __MIDL___MIDL_itf_immact_0000_0002_0002 { INVALID_LUA_RUNLEVEL = -1 }; enum BlockingReason { NotBlocking = 0, LifetimeLoop = 1, OutgoingCall = 2, CoWait = 3, ProcessEvents = 4 }; enum Serializer:: { DIRECTION_READ = 1, DIRECTION_WRITE = 2 }; enum tagOXIDFLAGS { OXIDF_REGISTERED = 1, OXIDF_MACHINE_LOCAL = 2, OXIDF_STOPPED = 4, OXIDF_PENDINGRELEASE = 8, OXIDF_REGISTERINGOIDS = 32, OXIDF_MTASERVER = 64, OXIDF_NTASERVER = 128, OXIDF_STASERVER = 256, OXIDF_REMOTEINITIALIZED = 512, OXIDF_APPCONTAINER = 1024, OXIDF_APPLICATION_STA = 2048, OXIDF_MTASTOPPED = 68, OXIDF_NTASTOPPED = 132, OXIDF_APARTMENT_TYPE_FLAGS = 2496 }; struct tagREMQIRESULT { unsigned char hResult[8]; /* +0x0000 08 00 00 00 */ unsigned char std[40]; /* +0x0008 6a 49 00 00 */ }; struct tagREMINTERFACEREF { unsigned char ipid[16]; /* +0x0000 f3 14 00 00 */ unsigned long cPublicRefs; /* +0x0010 */ unsigned long cPrivateRefs; /* +0x0014 */ }; struct tagXAptCallback { long long pfnCallback; /* +0x0000 */ long long pParam; /* +0x0008 */ long long pServerCtx; /* +0x0010 */ long long pUnk; /* +0x0018 */ unsigned char iid[16]; /* +0x0020 f3 14 00 00 */ unsigned char iMethod[4]; /* +0x0030 74 00 00 00 */ unsigned char guidProcessSecret[20]; /* +0x0034 f3 14 00 00 */ }; struct _SCMREGKEY { unsigned long long dwEntryLoc; /* +0x0000 */ unsigned long dwHash; /* +0x0008 */ unsigned long dwScmId; /* +0x000c */ }; struct _MnkEqBuf { unsigned long cdwSize; /* +0x0000 */ unsigned char abEqData[4]; /* +0x0004 ff 12 00 00 */ }; struct _MkInterfaceList { unsigned long dwSize; /* +0x0000 */ unsigned char apIFDList[8]; /* +0x0008 6b 5f 00 00 */ }; struct tagIPIDEntry { unsigned char pNextIPID[8]; /* +0x0000 6f 5f 00 00 */ unsigned long dwFlags; /* +0x0008 */ unsigned long cStrongRefs; /* +0x000c */ unsigned long cWeakRefs; /* +0x0010 */ unsigned long cPrivateRefs; /* +0x0014 */ void *pv; /* +0x0018 */ unsigned char pStub[8]; /* +0x0020 93 17 00 00 */ unsigned char pOXIDEntry[8]; /* +0x0028 71 5f 00 00 */ unsigned char ipid[16]; /* +0x0030 f3 14 00 00 */ unsigned char iid[16]; /* +0x0040 f3 14 00 00 */ unsigned char pChnl[8]; /* +0x0050 73 5f 00 00 */ unsigned char pIRCEntry[8]; /* +0x0058 75 5f 00 00 */ unsigned char pOIDFLink[8]; /* +0x0060 6f 5f 00 00 */ unsigned char pOIDBLink[8]; /* +0x0068 6f 5f 00 00 */ }; struct tagPageEntry { unsigned char pNext[8]; /* +0x0000 79 5f 00 00 */ unsigned long dwFlag; /* +0x0008 */ }; struct __MIDL_ILocalObjectExporter_0002 { unsigned long long mid; /* +0x0000 */ unsigned long long oxid; /* +0x0008 */ unsigned long refs; /* +0x0010 */ }; struct __MIDL_ILocalObjectExporter_0003 { unsigned long long mid; /* +0x0000 */ unsigned long long oid; /* +0x0008 */ }; struct __MIDL_ILocalObjectExporter_0004 { unsigned long long mid; /* +0x0000 */ unsigned long long oxid; /* +0x0008 */ unsigned long long oid; /* +0x0010 */ }; struct SHashChain { unsigned char pNext[8]; /* +0x0000 99 5f 00 00 */ unsigned char pPrev[8]; /* +0x0008 99 5f 00 00 */ }; struct SDWORDHashNode { unsigned char chain[16]; /* +0x0000 98 5f 00 00 */ unsigned long key; /* +0x0010 */ }; struct SPointerHashNode { unsigned char chain[16]; /* +0x0000 98 5f 00 00 */ void *key; /* +0x0010 */ }; struct SUUIDHashNode { unsigned char chain[16]; /* +0x0000 98 5f 00 00 */ unsigned char key[16]; /* +0x0010 f3 14 00 00 */ }; struct SMultiGUIDKey { unsigned char cGUID[8]; /* +0x0000 74 00 00 00 */ unsigned char aGUID[8]; /* +0x0008 61 16 00 00 */ }; struct SMultiGUIDHashNode { unsigned char chain[16]; /* +0x0000 98 5f 00 00 */ unsigned char key[16]; /* +0x0010 1a 60 00 00 */ }; struct SStringHashNode { unsigned char chain[16]; /* +0x0000 98 5f 00 00 */ unsigned long dwHash; /* +0x0010 */ unsigned char psaKey[8]; /* +0x0018 94 1f 00 00 */ }; struct SExtHashNode { unsigned char chain[16]; /* +0x0000 98 5f 00 00 */ unsigned char pwszExt[8]; /* +0x0010 cb 13 00 00 */ }; struct SActivatableClassIdHashNode { unsigned char chain[16]; /* +0x0000 98 5f 00 00 */ unsigned char activatableClassId[8]; /* +0x0010 cb 13 00 00 */ }; struct MIPID { unsigned long long mid; /* +0x0000 */ unsigned char ipid[16]; /* +0x0008 f3 14 00 00 */ unsigned long dwApt; /* +0x0018 */ }; struct SMIPIDHashNode { unsigned char chain[16]; /* +0x0000 98 5f 00 00 */ unsigned char mipid[32]; /* +0x0010 95 5f 00 00 */ }; enum tagFOCOXID { FOCOXID_REF = 1, FOCOXID_NOREF = 2 }; struct _RegOutput { unsigned long dwSize; /* +0x0000 */ unsigned char RegKeys[4]; /* +0x0004 fc 12 00 00 */ }; struct _RegInputEntry { unsigned char clsid[16]; /* +0x0000 f3 14 00 00 */ unsigned long long oxid; /* +0x0010 */ unsigned char ipid[16]; /* +0x0018 f3 14 00 00 */ unsigned long dwFlags; /* +0x0028 */ }; struct _RegInput { unsigned long dwSize; /* +0x0000 */ unsigned char rginent[48]; /* +0x0008 39 61 00 00 */ }; struct _ProcessActivatorToken { unsigned char ProcessGUID[16]; /* +0x0000 f3 14 00 00 */ unsigned char ActivatorIPID[16]; /* +0x0010 f3 14 00 00 */ unsigned long dwFlags; /* +0x0020 */ }; struct tagInstantiationInfoData { unsigned char classId[16]; /* +0x0000 f3 14 00 00 */ unsigned long classCtx; /* +0x0010 */ unsigned long actvflags; /* +0x0014 */ unsigned char fIsSurrogate[4]; /* +0x0018 74 00 00 00 */ unsigned long cIID; /* +0x001c */ unsigned long instFlag; /* +0x0020 */ unsigned char pIID[8]; /* +0x0028 61 16 00 00 */ unsigned long thisSize; /* +0x0030 */ unsigned char clientCOMVersion[4]; /* +0x0034 95 1f 00 00 */ }; struct tagLocationInfoData { unsigned char machineName[8]; /* +0x0000 71 06 00 00 */ unsigned long processId; /* +0x0008 */ unsigned long apartmentId; /* +0x000c */ unsigned long contextId; /* +0x0010 */ }; struct tagActivationContextInfoData { unsigned char clientOK[4]; /* +0x0000 74 00 00 00 */ unsigned char bReserved1[4]; /* +0x0004 74 00 00 00 */ unsigned long dwReserved1; /* +0x0008 */ unsigned long dwReserved2; /* +0x000c */ unsigned char pIFDClientCtx[8]; /* +0x0010 6b 43 00 00 */ unsigned char pIFDPrototypeCtx[8]; /* +0x0018 6b 43 00 00 */ }; struct tagCustomHeader { unsigned long totalSize; /* +0x0000 */ unsigned long headerSize; /* +0x0004 */ unsigned long cOpaqueData; /* +0x0008 */ unsigned long destCtx; /* +0x000c */ unsigned long cIfs; /* +0x0010 */ unsigned char classInfoClsid[20]; /* +0x0014 f3 14 00 00 */ unsigned char pclsid[8]; /* +0x0028 61 16 00 00 */ unsigned long *pSizes; /* +0x0030 */ unsigned char opaqueData[8]; /* +0x0038 48 61 00 00 */ }; struct tagPropsOutInfo { unsigned long cIfs; /* +0x0000 */ unsigned char piid[8]; /* +0x0008 61 16 00 00 */ unsigned char phresults[8]; /* +0x0010 08 06 00 00 */ unsigned char ppIntfData[8]; /* +0x0018 6e 43 00 00 */ }; struct tagSecurityInfoData { unsigned long dwAuthnFlags; /* +0x0000 */ unsigned char pServerInfo[8]; /* +0x0008 b1 21 00 00 */ unsigned char pAuthIdentityInfo[8]; /* +0x0010 d9 31 00 00 */ }; struct tagCustomPrivScmInfo { long Apartment; /* +0x0000 */ unsigned char pwszWinstaDesktop[8]; /* +0x0008 71 06 00 00 */ unsigned long long ProcessSignature; /* +0x0010 */ unsigned char pEnvBlock[8]; /* +0x0018 71 06 00 00 */ unsigned long EnvBlockLength; /* +0x0020 */ }; struct tagScmRequestInfoData { unsigned char pScmInfo[8]; /* +0x0000 53 61 00 00 */ unsigned char remoteRequest[8]; /* +0x0008 55 61 00 00 */ }; struct tagScmReplyInfoData { unsigned char pResolverInfo[8]; /* +0x0000 59 61 00 00 */ unsigned char remoteReply[8]; /* +0x0008 5b 61 00 00 */ }; struct tagInstanceInfoData { unsigned char fileName[8]; /* +0x0000 71 06 00 00 */ unsigned long mode; /* +0x0008 */ unsigned char ifdROT[8]; /* +0x0010 6b 43 00 00 */ unsigned char ifdStg[8]; /* +0x0018 6b 43 00 00 */ }; struct tagSpecialPropertiesData { unsigned long dwSessionId; /* +0x0000 */ unsigned char fRemoteThisSessionId[4]; /* +0x0004 74 00 00 00 */ unsigned char fClientImpersonating[4]; /* +0x0008 74 00 00 00 */ unsigned char fPartitionIDPresent[4]; /* +0x000c 74 00 00 00 */ unsigned long dwDefaultAuthnLvl; /* +0x0010 */ unsigned char guidPartition[16]; /* +0x0014 f3 14 00 00 */ unsigned long dwPRTFlags; /* +0x0024 */ unsigned long dwOrigClsctx; /* +0x0028 */ unsigned long dwFlags; /* +0x002c */ unsigned long dwPid; /* +0x0030 */ unsigned long long hwnd; /* +0x0038 */ unsigned char dwReserved[24]; /* +0x0040 a5 2e 00 00 */ }; struct _SSerializationHeader { unsigned long dwSize; /* +0x0000 */ void *pvMarshalPtr; /* +0x0008 */ }; struct tagComCallData { unsigned long dwDispid; /* +0x0000 */ unsigned long dwReserved; /* +0x0004 */ void *pUserDefined; /* +0x0008 */ }; struct tagSPSChain { unsigned char pNext[8]; /* +0x0000 d3 61 00 00 */ unsigned char pPrev[8]; /* +0x0008 d3 61 00 00 */ }; struct tagSPSCache { unsigned char clientPSChain[16]; /* +0x0000 d2 61 00 00 */ unsigned char serverPSChain[16]; /* +0x0010 d2 61 00 00 */ }; struct Microsoft::WRL::Details::BoolStruct { unsigned char Member[4]; /* +0x0000 74 00 00 00 */ }; enum tagRUNDOWN_RESULT { RUNDWN_UNKNOWN = 1, RUNDWN_KEEP = 2, RUNDWN_RUNDOWN = 4 }; enum tagCallType { CALLTYPE_NONE = 0, CALLTYPE_SYNCCALL = 1, CALLTYPE_SYNCENTER = 2, CALLTYPE_SYNCLEAVE = 3, CALLTYPE_SYNCRETURN = 4, CALLTYPE_BEGINCALL = 5, CALLTYPE_BEGINRETURN = 6, CALLTYPE_BEGINENTER = 7, CALLTYPE_BEGINLEAVE = 8, CALLTYPE_FINISHENTER = 9, CALLTYPE_FINISHLEAVE = 10, CALLTYPE_FINISHCALL = 11, CALLTYPE_FINISHRETURN = 12 }; struct tagPolicyEntry { unsigned char pNext[8]; /* +0x0000 3c 65 00 00 */ unsigned char pPrev[8]; /* +0x0008 3c 65 00 00 */ unsigned long ctxEvent; /* +0x0010 */ unsigned char pPolicy[8]; /* +0x0018 28 50 00 00 */ unsigned char policyID[16]; /* +0x0020 f3 14 00 00 */ }; struct tagContexts { unsigned char pClientCtx[8]; /* +0x0000 74 54 00 00 */ unsigned char pServerCtx[8]; /* +0x0008 74 54 00 00 */ }; struct _tagSCtxListIndex { unsigned char idx[4]; /* +0x0000 74 00 00 00 */ unsigned char next[4]; /* +0x0004 74 00 00 00 */ unsigned char prev[4]; /* +0x0008 74 00 00 00 */ }; struct tagCTXVERSION { short ThisVersion; /* +0x0000 */ short MinVersion; /* +0x0002 */ }; struct tagCTXCOMMONHDR { unsigned char ContextId[16]; /* +0x0000 f3 14 00 00 */ unsigned long Flags; /* +0x0010 */ unsigned long Reserved; /* +0x0014 */ unsigned long dwNumExtents; /* +0x0018 */ unsigned long cbExtents; /* +0x001c */ unsigned long MshlFlags; /* +0x0020 */ }; struct tagBYVALHDR { unsigned long Count; /* +0x0000 */ unsigned char Frozen[4]; /* +0x0004 74 00 00 00 */ }; struct tagBYREFHDR { unsigned long Reserved; /* +0x0000 */ unsigned long ProcessId; /* +0x0004 */ }; struct tagCONTEXTHEADER { unsigned char Version[4]; /* +0x0000 f6 65 00 00 */ unsigned char CmnHdr[36]; /* +0x0004 f7 65 00 00 */ /* unsigned char ByValHdr[0]; +0x0028 f8 65 00 00 */ unsigned char ByRefHdr[8]; /* +0x0028 f9 65 00 00 */ }; enum ActivationProperties:: { NOT_MARSHALLED = 1, SIZED = 2, MARSHALLED = 3, UNMARSHALLED = 4 }; struct CMachineNamesHelper::_UNIQUEADDRS { unsigned long dwcTotalUniqueAddrs; /* +0x0000 */ unsigned long dwStringSpaceNeeded; /* +0x0004 */ unsigned long dwCurrentAddr; /* +0x0008 */ unsigned char pszNextAddrToUse[8]; /* +0x0010 71 06 00 00 */ unsigned char ppszAddrs[8]; /* +0x0018 db 13 00 00 */ unsigned long long cchLeft; /* +0x0020 */ }; struct CMachineNamesHelper::_SBTOTAL { unsigned long dwcTotalAddrs; /* +0x0000 */ unsigned char ppszAddresses[8]; /* +0x0008 db 13 00 00 */ }; struct CFastBH { void *m_hRpc; /* +0x0000 */ void *m_ifHandle; /* +0x0008 */ }; struct _WPP_TRACE_CONTROL_BLOCK { unsigned char Next[8]; /* +0x0000 a6 69 00 00 */ unsigned long long UmRegistrationHandle; /* +0x0008 */ unsigned long long Logger; /* +0x0010 */ /* unsigned char Win2kCb[0]; +0x0010 a4 69 00 00 */ void *Ptr; /* +0x0010 */ unsigned char Cb[8]; /* +0x0010 a6 69 00 00 */ unsigned char FlagsLen; /* +0x0018 */ unsigned char Level; /* +0x0019 */ unsigned short Options; /* +0x001a */ unsigned char Flags[4]; /* +0x001c fc 12 00 00 */ unsigned char ControlGuid[8]; /* +0x0020 67 16 00 00 */ }; struct WPP_PROJECT_CONTROL_BLOCK { /* unsigned char Control[0]; +0x0000 a5 69 00 00 */ unsigned char ReserveSpace[40]; /* +0x0000 a9 69 00 00 */ }; struct _WPP_WIN2K_CONTROL_BLOCK { unsigned long long Logger; /* +0x0000 */ unsigned long Flags; /* +0x0008 */ unsigned long Level; /* +0x000c */ unsigned char ControlGuid[8]; /* +0x0010 67 16 00 00 */ }; enum Windows::Foundation::AsyncStatus { Created = 0, Started = 1, Completed = 2, Canceled = 3, Error = 4 }; enum ActivationAction { NormalActivation = 0, BrokeredActivation = 1, DisallowActivation = 2 }; enum Windows::Foundation::PropertyType { PropertyType_Empty = 0, PropertyType_UInt8 = 1, PropertyType_Int16 = 2, PropertyType_UInt16 = 3, PropertyType_Int32 = 4, PropertyType_UInt32 = 5, PropertyType_Int64 = 6, PropertyType_UInt64 = 7, PropertyType_Single = 8, PropertyType_Double = 9, PropertyType_Char16 = 10, PropertyType_Boolean = 11, PropertyType_String = 12, PropertyType_Inspectable = 13, PropertyType_DateTime = 14, PropertyType_TimeSpan = 15, PropertyType_Guid = 16, PropertyType_Point = 17, PropertyType_Size = 18, PropertyType_Rect = 19, PropertyType_OtherType = 20, PropertyType_UInt8Array = 1025, PropertyType_Int16Array = 1026, PropertyType_UInt16Array = 1027, PropertyType_Int32Array = 1028, PropertyType_UInt32Array = 1029, PropertyType_Int64Array = 1030, PropertyType_UInt64Array = 1031, PropertyType_SingleArray = 1032, PropertyType_DoubleArray = 1033, PropertyType_Char16Array = 1034, PropertyType_BooleanArray = 1035, PropertyType_StringArray = 1036, PropertyType_InspectableArray = 1037, PropertyType_DateTimeArray = 1038, PropertyType_TimeSpanArray = 1039, PropertyType_GuidArray = 1040, PropertyType_PointArray = 1041, PropertyType_SizeArray = 1042, PropertyType_RectArray = 1043, PropertyType_OtherTypeArray = 1044 }; enum Windows::Foundation::ActivationType { ActivationType_InProcess = 0, ActivationType_OutOfProcess = 1 }; enum Windows::Foundation::IdentityType { IdentityType_ActivateAsActivator = 0, IdentityType_RunAs = 1, IdentityType_ActivateAsPackage = 2 }; enum Windows::Foundation::RegistrationScope { RegistrationScope_PerMachine = 0, RegistrationScope_PerUser = 1, RegistrationScope_InboxApp = 2 }; enum Windows::Foundation::InstancingType { InstancingType_SingleInstance = 0, InstancingType_MultipleInstances = 1 }; struct _EVENT_DESCRIPTOR { unsigned short Id; /* +0x0000 */ unsigned char Version; /* +0x0002 */ unsigned char Channel; /* +0x0003 */ unsigned char Level; /* +0x0004 */ unsigned char Opcode; /* +0x0005 */ unsigned short Task; /* +0x0006 */ unsigned long long Keyword; /* +0x0008 */ }; struct _MCGEN_TRACE_CONTEXT { unsigned long long RegistrationHandle; /* +0x0000 */ unsigned long long Logger; /* +0x0008 */ unsigned long long MatchAnyKeyword; /* +0x0010 */ unsigned long long MatchAllKeyword; /* +0x0018 */ unsigned long Flags; /* +0x0020 */ unsigned long IsEnabled; /* +0x0024 */ unsigned char Level; /* +0x0028 */ unsigned char Reserve; /* +0x0029 */ unsigned short EnableBitsCount; /* +0x002a */ unsigned long *EnableBitMask; /* +0x0030 */ unsigned char EnableKeyWords[8]; /* +0x0038 41 6a 00 00 */ unsigned char EnableLevel[8]; /* +0x0040 4b 19 00 00 */ }; struct _EVENT_DATA_DESCRIPTOR { unsigned long long Ptr; /* +0x0000 */ unsigned long Size; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ }; struct EventRegistrationToken { long long value; /* +0x0000 */ }; enum ProcessToken::DesignModeState { DesignModeNotDetermined = 0, InDesignMode = 1, NotInDesignMode = 2 }; enum ProcessToken::AppContainerState { NotDetermined = 0, AppContainer = 1, NotAppContainer = 2 }; enum ProcessToken::UserHiveOkState { UserHiveOkStateNotDetermined = 0, UserHiveIsOk = 1, UserHiveIsNotOk = 2 }; enum Windows::Foundation::ThreadingType { ThreadingType_BOTH = 0, ThreadingType_STA = 1, ThreadingType_MTA = 2 }; struct Windows::Foundation::Point { unsigned char X[4]; /* +0x0000 40 00 00 00 */ unsigned char Y[4]; /* +0x0004 40 00 00 00 */ }; struct Windows::Foundation::TimeSpan { long long Duration; /* +0x0000 */ }; struct Windows::Foundation::Size { unsigned char Width[4]; /* +0x0000 40 00 00 00 */ unsigned char Height[4]; /* +0x0004 40 00 00 00 */ }; struct Windows::Foundation::DateTime { long long UniversalTime; /* +0x0000 */ }; struct Windows::Foundation::Rect { unsigned char X[4]; /* +0x0000 40 00 00 00 */ unsigned char Y[4]; /* +0x0004 40 00 00 00 */ unsigned char Width[4]; /* +0x0008 40 00 00 00 */ unsigned char Height[4]; /* +0x000c 40 00 00 00 */ }; struct RoVariant::OutRef { unsigned char _pOwner[8]; /* +0x0000 34 72 00 00 */ unsigned char _pI[8]; /* +0x0008 61 26 00 00 */ }; struct RoVariant::Accessor { unsigned char _pI[8]; /* +0x0000 61 26 00 00 */ unsigned char _hrState[8]; /* +0x0008 08 00 00 00 */ }; enum RoVariant::States { StateIsNull = 0, StateIsObjNoRef = 1, StateIsObj = 3, StateIsPV = 7 }; struct _EVENT_FILTER_DESCRIPTOR { unsigned long long Ptr; /* +0x0000 */ unsigned long Size; /* +0x0008 */ unsigned long Type; /* +0x000c */ }; enum { ProcessTrustUndetermined = 0, ProcessIsFullTrust = 1, ProcessIsNotFullTrust = 2 }; /* enum { WPP_TRACE_OPTIONS = 43 }; */ struct CSplit_QI { unsigned char SomePMItfPtrs[16]; /* +0x0000 3b 73 00 00 */ unsigned char SomeHRs[8]; /* +0x0010 3c 73 00 00 */ unsigned char SomeIIDs[32]; /* +0x0018 3d 73 00 00 */ unsigned long _dwCount; /* +0x0038 */ char *_pAllocBlock; /* +0x0040 */ unsigned char _pItfArray[8]; /* +0x0048 6e 43 00 00 */ unsigned char _pHrArray[8]; /* +0x0050 08 06 00 00 */ unsigned char _pIIDArray[8]; /* +0x0058 61 16 00 00 */ }; struct tagTLSMapEntry { unsigned long dwThreadId; /* +0x0000 */ unsigned char ptls[8]; /* +0x0008 65 54 00 00 */ }; enum MapEnumToSQMData:: { DataID = 2343 }; enum Ole32SQMFlags { SixteenbitOLEUsage = 1, OLEDDEUsage = 2 }; enum _MTA_INCREMENTOR_STATE { MTAStateNew = 0, MTAStateIncStarted = 1, MTAStateIncInited = 2, MTAStateIncWon = 3, MTAStateIncLost = 4, MTAStateIncFailed = 5, MTAStateIncKill = 6, MTAStateWorkStarted = 7, MTAStateWorkInited = 8, MTAStateWorkDone = 9, MTAStateWorkFailed = 10, MTAStateFailed = 11, MTAStateMax = 12 }; struct _MTA_USAGE_GLOBALS { unsigned long dwStackCapture; /* +0x0000 */ unsigned long *p_cMTAInits; /* +0x0008 */ unsigned long *p_cMTAWorkerInits; /* +0x0010 */ unsigned long *p_cMTAIncInits; /* +0x0018 */ unsigned long *p_cMTAWaiters; /* +0x0020 */ unsigned char p_cMTABurnAThreads[8]; /* +0x0028 9d 1e 00 00 */ unsigned char ppMTAUsageIncrementorHead[8]; /* +0x0030 7f 73 00 00 */ unsigned long *p_cMTAIncrementorSize; /* +0x0038 */ unsigned char p_posMTAIncrementorCompleted[8]; /* +0x0040 80 73 00 00 */ unsigned char ppMTAUsageCompletedIncrementorHead[8]; /* +0x0048 7f 73 00 00 */ }; enum _SQM_TYPE { SQM_TYPE_NONE = 0, SQM_TYPE_DWORD = 1, SQM_TYPE_STRING = 2, SQM_TYPE_DWORD64 = 3 }; enum CClassCache::CDllPathEntry::eFlags { fSIXTEEN_BIT = 1, fWX86 = 2, fIS_OLE32 = 4, fDELAYED_UNLOAD = 16 }; enum CClassCache::CClassEntry::eFlags { fTREAT_AS = 1, fINCOMPLETE = 2, fDO_NOT_HASH = 4, fCOMPLUS = 8, fSIDE_BY_SIDE = 16, fSIDE_BY_SIDE_WITH_NO_HASHING = 32 }; enum DLL_INSTANTIATION_PROPERTIES::eFlags { fSIXTEEN_BIT = 1, fIS_OLE32 = 8, fIS_COMSVCS_CLSID = 16 }; enum CClassCache::CClassEntry::eGUIDIndex { iCLSID = 0, iPartition = 1, iTotal = 2 }; enum EChannelState { client_cs = 1, proxy_cs = 2, server_cs = 4, freethreaded_cs = 8, process_local_cs = 32, locked_cs = 64, neutral_cs = 256, fake_async_cs = 512, app_security_cs = 1024, cross_apartment_no_wait_cs = 2048, syntax_negotiate_cs = 4096 }; enum CRpcChannelBuffer::CServerCallMgr:: { STATE_WAITINGFORSIGNAL = 0, STATE_SIGNALED = 1, STATE_ERROR = 2 }; enum EHandleState { allow_hs = 1, deny_hs = 2, static_cloaking_hs = 4, dynamic_cloaking_hs = 8, any_cloaking_hs = 12, process_local_hs = 16, machine_local_hs = 32, app_security_hs = 64 }; enum MessageParamKind { CMessageCall = 0, CChannelObject = 1, CDllHost = 2, CGIPMessageParam = 3, POSTRELRIFREF = 4 }; enum tagSTDID_FLAGS { STDID_SERVER = 0, STDID_CLIENT = 1, STDID_FREETHREADED = 2, STDID_HAVEID = 4, STDID_IGNOREID = 8, STDID_AGGREGATED = 16, STDID_INDESTRUCTOR = 256, STDID_LOCKEDINMEM = 512, STDID_DEFHANDLER = 1024, STDID_AGGID = 2048, STDID_STCMRSHL = 4096, STDID_REMOVEDFROMIDOBJ = 8192, STDID_SYSTEM = 16384, = 32770 }; enum tagSMFLAGS { SMFLAGS_CLIENT_SIDE = 1, SMFLAGS_PENDINGDISCONNECT = 2, SMFLAGS_REGISTEREDOID = 4, SMFLAGS_DISCONNECTED = 8, SMFLAGS_FIRSTMARSHAL = 16, SMFLAGS_HANDLER = 32, SMFLAGS_WEAKCLIENT = 64, SMFLAGS_IGNORERUNDOWN = 128, SMFLAGS_CLIENTMARSHALED = 256, SMFLAGS_NOPING = 512, SMFLAGS_TRIEDTOCONNECT = 1024, SMFLAGS_CSTATICMARSHAL = 2048, SMFLAGS_USEAGGSTDMARSHAL = 4096, SMFLAGS_SYSTEM = 8192, SMFLAGS_DEACTIVATED = 16384, = 32770 }; enum tagIPIDFLAGS { IPIDF_CONNECTING = 1, IPIDF_DISCONNECTED = 2, IPIDF_SERVERENTRY = 4, IPIDF_NOPING = 8, IPIDF_COPY = 16, IPIDF_VACANT = 128, IPIDF_NONNDRSTUB = 256, IPIDF_NONNDRPROXY = 512, IPIDF_NOTIFYACT = 1024, IPIDF_TRIED_ASYNC = 2048, IPIDF_ASYNC_SERVER = 4096, IPIDF_DEACTIVATED = 8192, IPIDF_WEAKREFCACHE = 16384, = 32770 }; enum tagDISCTYPE { DISCTYPE_NORMAL = 1, DISCTYPE_RELEASE = 2, DISCTYPE_APPLICATION = 4, DISCTYPE_UNINIT = 8, DISCTYPE_RUNDOWN = 16, DISCTYPE_SYSTEM = 32 }; struct IRCEntry { unsigned char pNext[8]; /* +0x0000 75 5f 00 00 */ unsigned char pRefCache[8]; /* +0x0008 af 73 00 00 */ unsigned long cStrongUsage; /* +0x0010 */ unsigned long cWeakUsage; /* +0x0014 */ unsigned long cStrongRefs; /* +0x0018 */ unsigned long cPrivateRefs; /* +0x001c */ unsigned long cWeakRefs; /* +0x0020 */ unsigned char ipid[20]; /* +0x0024 f3 14 00 00 */ }; struct tagGIPEntry { unsigned char pPrev[8]; /* +0x0000 c5 73 00 00 */ unsigned char pNext[8]; /* +0x0008 c5 73 00 00 */ unsigned long dwType; /* +0x0010 */ unsigned long dwSeqNo; /* +0x0014 */ unsigned char cUsage[4]; /* +0x0018 d7 17 00 00 */ unsigned long dwAptId; /* +0x001c */ unsigned char pContext[8]; /* +0x0020 74 54 00 00 */ unsigned char pUnk[8]; /* +0x0028 93 17 00 00 */ void *pVtable; /* +0x0030 */ unsigned char pUnkProxy[8]; /* +0x0038 93 17 00 00 */ unsigned char mp[32]; /* +0x0040 c6 73 00 00 */ }; struct MarshalParams { unsigned char iid[16]; /* +0x0000 f3 14 00 00 */ unsigned long mshlflags; /* +0x0010 */ }; struct tagGIPEntry:: { /* unsigned char pIFD[0]; +0x0000 ca 4c 00 00 */ unsigned char pobjref[8]; /* +0x0000 c6 69 00 00 */ }; enum CRIFTable:: { RIFFLG_HASCOUNTERPART = 1, RIFFLG_HASCLSID = 2, RIFFLG_PACKAGE_SCOPED_CLSID = 4 }; enum CRIFTable::RegistrationState { NOT_REGISTERED = 0, PENDING_REGISTRATION = 1, FULLY_REGISTERED = 2 }; struct CRIFTable::tagRIFEntry { unsigned char HashNode[32]; /* +0x0000 05 60 00 00 */ unsigned char iidCounterpart[16]; /* +0x0020 f3 14 00 00 */ unsigned char psclsid[16]; /* +0x0030 f3 14 00 00 */ unsigned long dwFlags; /* +0x0040 */ unsigned char pBase[8]; /* +0x0048 00 74 00 00 */ unsigned long cSrvRefs; /* +0x0050 */ unsigned char srvRegistrationState[4]; /* +0x0054 1a 74 00 00 */ unsigned char ConditionSrvInterface[8]; /* +0x0058 f6 5a 00 00 */ unsigned char pSrvInterface[8]; /* +0x0060 30 27 00 00 */ unsigned long cCliRefs; /* +0x0068 */ unsigned char pCliInterface[8]; /* +0x0070 3b 50 00 00 */ }; struct _SCHANNEL_CRED { unsigned long dwVersion; /* +0x0000 */ unsigned long cCreds; /* +0x0004 */ unsigned char paCred[8]; /* +0x0008 a0 15 00 00 */ void *hRootStore; /* +0x0010 */ unsigned long cMappers; /* +0x0018 */ unsigned char aphMappers[8]; /* +0x0020 21 74 00 00 */ unsigned long cSupportedAlgs; /* +0x0028 */ unsigned char palgSupportedAlgs[8]; /* +0x0030 75 06 00 00 */ unsigned long grbitEnabledProtocols; /* +0x0038 */ unsigned long dwMinimumCipherStrength; /* +0x003c */ unsigned long dwMaximumCipherStrength; /* +0x0040 */ unsigned long dwSessionLifespan; /* +0x0044 */ unsigned long dwFlags; /* +0x0048 */ unsigned long dwCredFormat; /* +0x004c */ }; struct __MIDL_ICallFrame_0001 { unsigned long iMethod; /* +0x0000 */ unsigned char fHasInValues[4]; /* +0x0004 74 00 00 00 */ unsigned char fHasInOutValues[4]; /* +0x0008 74 00 00 00 */ unsigned char fHasOutValues[4]; /* +0x000c 74 00 00 00 */ unsigned char fDerivesFromIDispatch[4]; /* +0x0010 74 00 00 00 */ long cInInterfacesMax; /* +0x0014 */ long cInOutInterfacesMax; /* +0x0018 */ long cOutInterfacesMax; /* +0x001c */ long cTopLevelInInterfaces; /* +0x0020 */ unsigned char iid[16]; /* +0x0024 f3 14 00 00 */ unsigned long cMethod; /* +0x0034 */ unsigned long cParams; /* +0x0038 */ }; struct __MIDL_ICallFrame_0002 { unsigned char fIn; /* +0x0000 */ unsigned char fOut; /* +0x0001 */ unsigned long stackOffset; /* +0x0004 */ unsigned long cbParam; /* +0x0008 */ }; enum __MIDL_ICallFrame_0003 { CALLFRAME_COPY_NESTED = 1, CALLFRAME_COPY_INDEPENDENT = 2 }; struct __MIDL_ICallFrame_0004 { unsigned char fIn; /* +0x0000 */ unsigned long dwDestContext; /* +0x0004 */ void *pvDestContext; /* +0x0008 */ unsigned char punkReserved[8]; /* +0x0010 93 17 00 00 */ unsigned char guidTransferSyntax[16]; /* +0x0018 f3 14 00 00 */ }; struct tagPIDData { unsigned char pServer[8]; /* +0x0000 93 17 00 00 */ unsigned char pServerCtx[8]; /* +0x0008 74 54 00 00 */ }; struct tagOIDData { unsigned char pmoid[8]; /* +0x0000 67 16 00 00 */ unsigned long aptID; /* +0x0008 */ }; struct SOIDRegistration { unsigned char Node[32]; /* +0x0000 05 60 00 00 */ unsigned short cRefs; /* +0x0020 */ unsigned short flags; /* +0x0022 */ unsigned long long mid; /* +0x0028 */ unsigned long long oxid; /* +0x0030 */ unsigned char pPrevList[8]; /* +0x0038 e9 74 00 00 */ unsigned char pNextList[8]; /* +0x0040 e9 74 00 00 */ unsigned char pRefCache[8]; /* +0x0048 af 73 00 00 */ }; struct tagSQIResult { void *pv; /* +0x0000 */ unsigned char hr[8]; /* +0x0008 08 00 00 00 */ }; struct tagQICONTEXT { unsigned long dwFlags; /* +0x0000 */ unsigned char pARU[8]; /* +0x0008 1c 75 00 00 */ unsigned short cIIDs; /* +0x0010 */ unsigned char pIIDs[8]; /* +0x0018 61 16 00 00 */ unsigned char hr[8]; /* +0x0020 08 00 00 00 */ unsigned char pRemQiRes[8]; /* +0x0028 64 5f 00 00 */ unsigned char pIPIDEntry[8]; /* +0x0030 6f 5f 00 00 */ unsigned char pIM[8]; /* +0x0038 8a 42 00 00 */ unsigned char phr[8]; /* +0x0040 08 06 00 00 */ unsigned char ppMIFs[8]; /* +0x0048 6e 43 00 00 */ unsigned char data[8]; /* +0x0050 ff 12 00 00 */ }; struct CStdMarshal::DiscSinkNode { unsigned char pNext[8]; /* +0x0000 c7 75 00 00 */ unsigned char pPrev[8]; /* +0x0008 c7 75 00 00 */ unsigned char pSink[8]; /* +0x0010 bf 69 00 00 */ void *pvCookie; /* +0x0018 */ }; enum ESignalState { none_ss = 0, pending_ss = 1, signaled_ss = 2, failed_ss = 3 }; struct pUnkListElement { unsigned char _pUnk[8]; /* +0x0000 93 17 00 00 */ unsigned char _next[8]; /* +0x0008 19 77 00 00 */ }; struct ApartmentEntry { unsigned char node[24]; /* +0x0000 db 5f 00 00 */ unsigned long hCOMActivator; /* +0x0018 */ unsigned long hWinRTActivator; /* +0x001c */ }; enum CClassCache::eFlags { fINITIALIZED = 1, fSHUTTINGDOWN = 2 }; enum CClassCache::CLSvrClassEntry::eFlags { fAT_STORAGE = 1, fREVOKE_PENDING = 2, fBEEN_USED = 16 }; struct CClassCache::CWinRTLocalSvrClassEntry { unsigned char _hashNode[24]; /* +0x0000 63 60 00 00 */ unsigned char _pNextLSvr[8]; /* +0x0018 b5 78 00 00 */ unsigned char _pPrevLSvr[8]; /* +0x0020 b5 78 00 00 */ unsigned char _pRegChain[8]; /* +0x0028 b5 78 00 00 */ unsigned char _pActivationFactoryCallback[80]; /* +0x0030 70 5c 00 00 */ }; enum CClassCache::CWinRTLocalSvrClassEntry::eFlags { fREVOKE_PENDING = 2 }; struct CClassCache::CServiceRefEntry { unsigned long _ulServiceId; /* +0x0000 */ unsigned long _cRefsServiceProcess; /* +0x0004 */ void *_hSuspended; /* +0x0008 */ unsigned long _dwDelayMilliseconds; /* +0x0010 */ unsigned char _ShutdownDelayTimer[8]; /* +0x0018 45 32 00 00 */ unsigned char _bCanceledTimer[8]; /* +0x0020 74 00 00 00 */ unsigned char _pNextServiceRefEntry[8]; /* +0x0028 f0 78 00 00 */ unsigned char _pPrevServiceRefEntry[8]; /* +0x0030 f0 78 00 00 */ }; struct CClassCache::SDPEHashKey { unsigned char _pstr[8]; /* +0x0000 71 06 00 00 */ unsigned long _dwDIPFlags; /* +0x0008 */ }; struct _SQM_STREAM_ENTRY { unsigned long dwType; /* +0x0000 */ }; struct _SQM_STREAM_ENTRY_EX { unsigned long cbStruct; /* +0x0000 */ unsigned long dwType; /* +0x0004 */ }; struct _SQM_STREAM_ENTRY:: { /* unsigned char pwszVal[0]; +0x0000 cb 13 00 00 */ unsigned long dwVal; /* +0x0000 */ }; struct _SQM_STREAM_ENTRY_EX:: { /* unsigned char pwszVal[0]; +0x0000 cb 13 00 00 */ unsigned long dwVal; /* +0x0000 */ unsigned long long qwVal; /* +0x0000 */ }; enum MapEnumToSQMData:: { DataID = 2342 }; struct _MTA_USAGE_INCREMENTOR { unsigned char pNext[8]; /* +0x0000 7e 73 00 00 */ unsigned long ulTime; /* +0x0008 */ unsigned long dwThreadId; /* +0x000c */ void *hMatureEvent; /* +0x0010 */ unsigned char hr[4]; /* +0x0018 08 00 00 00 */ unsigned char State[4]; /* +0x001c 9c 7a 00 00 */ unsigned char fForWrapper[8]; /* +0x0020 74 00 00 00 */ unsigned char Function[8]; /* +0x0028 e0 15 00 00 */ void *Context; /* +0x0030 */ void *hMatureResultEvent; /* +0x0038 */ void *hBurnAThreadEvent; /* +0x0040 */ }; struct ErrorObjectData { unsigned long dwVersion; /* +0x0000 */ unsigned long dwHelpContext; /* +0x0004 */ unsigned char iid[16]; /* +0x0008 f3 14 00 00 */ }; struct NdrStringHeader { unsigned long dwMax; /* +0x0000 */ unsigned long dwOffset; /* +0x0004 */ unsigned long dwActual; /* +0x0008 */ }; struct NdrStringPtrHeader { unsigned long dwUnique; /* +0x0000 */ unsigned long dwMax; /* +0x0004 */ unsigned long dwOffset; /* +0x0008 */ unsigned long dwActual; /* +0x000c */ }; struct IMallocVtbl { unsigned char QueryInterface[8]; /* +0x0000 2f 7b 00 00 */ unsigned char AddRef[8]; /* +0x0008 32 7b 00 00 */ unsigned char Release[8]; /* +0x0010 32 7b 00 00 */ unsigned char Alloc[8]; /* +0x0018 35 7b 00 00 */ unsigned char Realloc[8]; /* +0x0020 38 7b 00 00 */ unsigned char Free[8]; /* +0x0028 3b 7b 00 00 */ unsigned char GetSize[8]; /* +0x0030 3d 7b 00 00 */ unsigned char DidAlloc[8]; /* +0x0038 3f 7b 00 00 */ unsigned char HeapMinimize[8]; /* +0x0040 41 7b 00 00 */ }; struct CMalloc { unsigned char lpVtbl[8]; /* +0x0000 45 7b 00 00 */ }; struct AENTRY { unsigned long dwCollision; /* +0x0000 */ void *pAllocation; /* +0x0008 */ }; enum tagCCF_FLAGS { CCF_NONE = 0, CCF_AGGREGATABLE = 1 }; struct tagCFEntry { unsigned char pclsid[8]; /* +0x0000 67 16 00 00 */ unsigned char pfnCI[8]; /* +0x0008 92 7b 00 00 */ unsigned long dwFlags; /* +0x0010 */ }; struct tagSWindowData { unsigned char hWnd[8]; /* +0x0000 f7 12 00 00 */ unsigned char wFirstMsg[4]; /* +0x0008 75 00 00 00 */ unsigned char wLastMsg[4]; /* +0x000c 75 00 00 00 */ }; struct ENTRY { unsigned char sz[8]; /* +0x0000 cb 13 00 00 */ unsigned char pclsid[8]; /* +0x0008 67 16 00 00 */ }; struct tagSCMSA { unsigned short wNumEntries; /* +0x0000 */ unsigned short wSecurityOffset; /* +0x0002 */ unsigned char awszStringArray[124]; /* +0x0004 32 7c 00 00 */ }; struct __MIDL_ILocalObjectExporter_0001 { unsigned char pName[8]; /* +0x0000 71 06 00 00 */ unsigned short wId; /* +0x0008 */ }; struct _RevokeEntry { unsigned char clsid[16]; /* +0x0000 f3 14 00 00 */ unsigned long dwReg; /* +0x0010 */ }; struct _RevokeClasses { unsigned long dwSize; /* +0x0000 */ unsigned char revent[20]; /* +0x0004 3a 7c 00 00 */ }; enum ASTAWaitSatisfiedReason { ObjectSignaled = 0, MutexAbandoned = 1, ApcDispatched = 2, Timeout = 3, Failed = 4, LifetimeLoopExiting = 5 }; enum CAsyncStateMachine:: { STATE_WAITINGFORBEGIN = 1, STATE_WAITINGFORFINISH = 2, STATE_BEGINABORTED = 3, STATE_EXECUTINGFINISH = 4, STATE_INITIALIZINGOBJECT = 5 }; enum CChannelObject::eState { STATE_ERROR = 1, STATE_READYFORNEGOTIATE = 2, STATE_READYFORGETBUFFER = 3, STATE_READYFORSEND = 4, STATE_SENDING = 5, STATE_READYFORSIGNAL = 6, STATE_RECEIVING = 7, STATE_READYFORRECEIVE = 8, STATE_READYFORFREEBUFFER = 9, STATE_AMBIGUOUS = 10 }; struct SPendingCall { unsigned char pNext[8]; /* +0x0000 17 7d 00 00 */ unsigned char pPrev[8]; /* +0x0008 17 7d 00 00 */ unsigned char pChnlObj[8]; /* +0x0010 b9 64 00 00 */ }; struct WireThis { /* unsigned char c[0]; +0x0000 82 7d 00 00 */ unsigned char d[80]; /* +0x0000 83 7d 00 00 */ }; struct WireThisPart1 { unsigned char version[4]; /* +0x0000 95 1f 00 00 */ unsigned long flags; /* +0x0004 */ unsigned long reserved1; /* +0x0008 */ unsigned char cid[16]; /* +0x000c f3 14 00 00 */ unsigned long unique; /* +0x001c */ }; struct WireExtentArray { unsigned long size; /* +0x0000 */ unsigned long reserved; /* +0x0004 */ unsigned long unique; /* +0x0008 */ unsigned long rounded_size; /* +0x000c */ unsigned char unique_flag[8]; /* +0x0010 14 16 00 00 */ }; struct WireExtent { unsigned long rounded_size; /* +0x0000 */ unsigned char id[16]; /* +0x0004 f3 14 00 00 */ unsigned long size; /* +0x0014 */ }; struct WireThisPart2 { unsigned char part1[32]; /* +0x0000 82 7d 00 00 */ unsigned char ea[24]; /* +0x0020 8c 7d 00 00 */ unsigned char e[24]; /* +0x0038 8d 7d 00 00 */ }; struct ASTAWaitContext::ProcessEventsMsgWaitParams { unsigned long dwWakeMask; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ }; struct CO_PROCESS_EVENTS_CONTEXT { unsigned char Internal[96]; /* +0x0000 3a 7e 00 00 */ }; struct SendMessageToClassicSTAParams { unsigned char hWnd[8]; /* +0x0000 f7 12 00 00 */ unsigned char Msg[8]; /* +0x0008 75 00 00 00 */ unsigned long long wParam; /* +0x0010 */ long long lParam; /* +0x0018 */ void *hEventSendMessageDone; /* +0x0020 */ unsigned char hrSendMessage[8]; /* +0x0028 08 00 00 00 */ }; enum CComApartment::ASTAPostCall::__l5:: { PriorityCalls = 0, DispatchableCalls = 1, QueuedCalls = 2 }; enum ASTAWaitContext::Wait::__l42:: { OuterWaitTimeout = 0, QueuedCallTimeout = 1, ZeroTimeoutForDispatchableCalls = 2 }; enum CallObjectOccurrenceOrStateVariable { CalledI_RpcFreeBuffer = 0, CalledI_RpcNegotiateTransferSyntax = 1, CalledI_RpcGetBufferWithObject = 2, CalledI_RpcGetBuffer = 3, CalledI_RpcAsyncSetHandle = 4, CalledI_RpcSend = 5, CalledI_RpcReceive = 6, CalledI_RpcAsyncAbortCall = 7, CalledI_RpcSendReceive = 8, ReturningFromThreadSendReceive = 9, OccurrenceLast = 10, CMessageCall_iFlags = 11, CAsyncCall_lFlags = 12, CAsyncCall_eSignalState = 13, CClientCall_m_dwFlags = 14 }; struct ThreadTypeSpecificRoutines { unsigned char WaitForHandles[8]; /* +0x0000 f8 7e 00 00 */ unsigned char SignalMTAClient[8]; /* +0x0008 fa 7e 00 00 */ unsigned char SignalNAClient[8]; /* +0x0010 fa 7e 00 00 */ unsigned char CheckAndAdjustRpcFlagsInClientGetBuffer[8]; /* +0x0018 fd 7e 00 00 */ unsigned char CanMakeOutCall[8]; /* +0x0020 fe 7e 00 00 */ unsigned char CanMakeOutRemReleaseCall[8]; /* +0x0028 ff 7e 00 00 */ unsigned char SendReceive[8]; /* +0x0030 01 7f 00 00 */ unsigned char Send[8]; /* +0x0038 01 7f 00 00 */ unsigned char Receive[8]; /* +0x0040 03 7f 00 00 */ unsigned char BlockForAsyncCancel[8]; /* +0x0048 86 1b 00 00 */ unsigned char DispatchCrossApartmentCall[8]; /* +0x0050 06 7f 00 00 */ unsigned char WaitForCall[8]; /* +0x0058 08 7f 00 00 */ unsigned char SendMessageToClassicSTA[8]; /* +0x0060 09 7f 00 00 */ }; enum EServerSecurity { SS_PROCESS_LOCAL = 1, SS_CALL_DONE = 2, SS_WAS_IMPERSONATING = 4 }; enum _TRUSTEE_TYPE { TRUSTEE_IS_UNKNOWN = 0, TRUSTEE_IS_USER = 1, TRUSTEE_IS_GROUP = 2, TRUSTEE_IS_DOMAIN = 3, TRUSTEE_IS_ALIAS = 4, TRUSTEE_IS_WELL_KNOWN_GROUP = 5, TRUSTEE_IS_DELETED = 6, TRUSTEE_IS_INVALID = 7, TRUSTEE_IS_COMPUTER = 8 }; enum _TRUSTEE_FORM { TRUSTEE_IS_SID = 0, TRUSTEE_IS_NAME = 1, TRUSTEE_BAD_FORM = 2, TRUSTEE_IS_OBJECTS_AND_SID = 3, TRUSTEE_IS_OBJECTS_AND_NAME = 4 }; enum _MULTIPLE_TRUSTEE_OPERATION { NO_MULTIPLE_TRUSTEE = 0, TRUSTEE_IS_IMPERSONATE = 1 }; enum LSA_FOREST_TRUST_RECORD_TYPE { ForestTrustTopLevelName = 0, ForestTrustTopLevelNameEx = 1, ForestTrustDomainInfo = 2, ForestTrustRecordTypeLast = 2 }; struct _TRUSTEE_W { unsigned char pMultipleTrustee[8]; /* +0x0000 88 7f 00 00 */ unsigned char MultipleTrusteeOperation[4]; /* +0x0008 89 7f 00 00 */ unsigned char TrusteeForm[4]; /* +0x000c 8a 7f 00 00 */ unsigned char TrusteeType[8]; /* +0x0010 8b 7f 00 00 */ unsigned char ptstrName[8]; /* +0x0018 71 06 00 00 */ }; struct _ACTRL_ACCESS_ENTRYW { unsigned char Trustee[32]; /* +0x0000 87 7f 00 00 */ unsigned long fAccessFlags; /* +0x0020 */ unsigned long Access; /* +0x0024 */ unsigned long ProvSpecificAccess; /* +0x0028 */ unsigned long Inheritance; /* +0x002c */ unsigned char lpInheritProperty[8]; /* +0x0030 71 06 00 00 */ }; struct SAccessCache { unsigned char fAccess[4]; /* +0x0000 74 00 00 00 */ unsigned char lClient[8]; /* +0x0004 38 15 00 00 */ }; struct SBlanket { unsigned char _pPrincipal[8]; /* +0x0000 71 06 00 00 */ unsigned long _lAuthnLevel; /* +0x0008 */ unsigned long _lAuthnSvc; /* +0x000c */ void *_pAuthId; /* +0x0010 */ unsigned long _lAuthzSvc; /* +0x0018 */ unsigned char _sQos[56]; /* +0x0020 fb 17 00 00 */ unsigned long _lCapabilities; /* +0x0058 */ unsigned char _sCred[80]; /* +0x0060 aa 73 00 00 */ unsigned char _pCert[8]; /* +0x00b0 c4 13 00 00 */ }; struct _ACTRL_ACCESS_ENTRY_LISTW { unsigned long cEntries; /* +0x0000 */ unsigned char pAccessList[8]; /* +0x0008 ce 7f 00 00 */ }; struct _ACTRL_PROPERTY_ENTRYW { unsigned char lpProperty[8]; /* +0x0000 71 06 00 00 */ unsigned char pAccessEntryList[8]; /* +0x0008 91 7f 00 00 */ unsigned long fListFlags; /* +0x0010 */ }; struct _ACTRL_ALISTW { unsigned long cEntries; /* +0x0000 */ unsigned char pPropertyAccessList[8]; /* +0x0008 93 7f 00 00 */ }; struct SPermissionHeader { unsigned short wVersion; /* +0x0000 */ unsigned short wPad; /* +0x0002 */ unsigned char gClass[16]; /* +0x0004 f3 14 00 00 */ }; enum CALLFRAME_FREE { CALLFRAME_FREE_NONE = 0, CALLFRAME_FREE_IN = 1, CALLFRAME_FREE_INOUT = 2, CALLFRAME_FREE_OUT = 4, CALLFRAME_FREE_TOP_INOUT = 8, CALLFRAME_FREE_TOP_OUT = 16, CALLFRAME_FREE_ALL = 31 }; enum CALLFRAME_NULL { CALLFRAME_NULL_NONE = 0, CALLFRAME_NULL_INOUT = 2, CALLFRAME_NULL_OUT = 4, CALLFRAME_NULL_ALL = 6 }; enum CALLFRAME_WALK { CALLFRAME_WALK_IN = 1, CALLFRAME_WALK_INOUT = 2, CALLFRAME_WALK_OUT = 4 }; enum tagIDLFLAGS { IDLF_CREATE = 1, IDLF_STRONG = 2, IDLF_NOPING = 4, IDLF_NOIEC = 8, IDLF_FTM = 16 }; struct tagXCtxMarshalData { unsigned long dwSignature; /* +0x0000 */ unsigned char iid[16]; /* +0x0004 f3 14 00 00 */ unsigned char moxid[20]; /* +0x0014 f3 14 00 00 */ unsigned char pWrapper[8]; /* +0x0028 7e 74 00 00 */ unsigned char pEntry[8]; /* +0x0030 35 77 00 00 */ unsigned char pServer[8]; /* +0x0038 93 17 00 00 */ unsigned char pServerCtx[8]; /* +0x0040 74 54 00 00 */ unsigned long dwMarshalFlags; /* +0x0048 */ }; struct tagXCtxWrapperData { unsigned char pIID[8]; /* +0x0000 67 16 00 00 */ unsigned char pServer[8]; /* +0x0008 93 17 00 00 */ unsigned long dwState; /* +0x0010 */ unsigned char pServerCtx[8]; /* +0x0018 74 54 00 00 */ unsigned char pClientCtx[8]; /* +0x0020 74 54 00 00 */ void *pv; /* +0x0028 */ }; struct tagXCtxQIData { unsigned char pIID[8]; /* +0x0000 67 16 00 00 */ unsigned char pStdWrapper[8]; /* +0x0008 7e 74 00 00 */ unsigned char pEntry[8]; /* +0x0010 35 77 00 00 */ }; struct tagStdMarshalData { unsigned char pID[8]; /* +0x0000 96 74 00 00 */ unsigned char pServer[8]; /* +0x0008 93 17 00 00 */ unsigned char pIID[8]; /* +0x0010 67 16 00 00 */ unsigned long dwDestCtx; /* +0x0018 */ void *pvDestCtx; /* +0x0020 */ unsigned long mshlflags; /* +0x0028 */ unsigned char pobjref[8]; /* +0x0030 c6 69 00 00 */ }; struct tagIFaceSvrRefs { unsigned char pRpcStub[8]; /* +0x0000 96 1d 00 00 */ unsigned char pRpcProxy[8]; /* +0x0008 91 1d 00 00 */ void *pServer; /* +0x0010 */ unsigned char pCtxChnl[8]; /* +0x0018 37 77 00 00 */ }; struct tagXCtxDisconnectData { unsigned char pServer[8]; /* +0x0000 93 17 00 00 */ unsigned char pID[8]; /* +0x0008 96 74 00 00 */ unsigned long cIFaces; /* +0x0010 */ unsigned char pIFaceSvrRefs[8]; /* +0x0018 de 80 00 00 */ }; struct CStdWrapper::Deactivate::__l3::tagServerRefs { unsigned char pRpcStub[8]; /* +0x0000 96 1d 00 00 */ void *pServer; /* +0x0008 */ }; struct CStdWrapper::Reactivate::__l3::tagServerRefs { unsigned char pRpcStub[8]; /* +0x0000 96 1d 00 00 */ unsigned char ppServer[8]; /* +0x0008 55 13 00 00 */ unsigned char pIID[8]; /* +0x0010 61 16 00 00 */ }; struct tagPROPMARSHALHEADER { unsigned char clsid[16]; /* +0x0000 f3 14 00 00 */ unsigned char policyId[16]; /* +0x0010 f3 14 00 00 */ unsigned long flags; /* +0x0020 */ unsigned long cb; /* +0x0024 */ }; struct tagENVOYDATA { unsigned char contextId[16]; /* +0x0000 f3 14 00 00 */ unsigned long ulJunk1; /* +0x0010 */ unsigned long ulJunk2; /* +0x0014 */ }; struct tagMainHeader { unsigned long Signature; /* +0x0000 */ unsigned long Version; /* +0x0004 */ unsigned long cPolicies; /* +0x0008 */ unsigned long cbBuffer; /* +0x000c */ unsigned long cbSize; /* +0x0010 */ long hr; /* +0x0014 */ long hrServer; /* +0x0018 */ long reserved; /* +0x001c */ }; struct tagEntryHeader { unsigned long Signature; /* +0x0000 */ unsigned long cbBuffer; /* +0x0004 */ unsigned long cbSize; /* +0x0008 */ long reserved; /* +0x000c */ unsigned char policyID[16]; /* +0x0010 f3 14 00 00 */ }; enum Windows::Foundation::Collections::supports_cleanup *>:: { value = 1 }; struct _ASSEMBLY_VERSION { unsigned short Build; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned short Minor; /* +0x0004 */ unsigned short Major; /* +0x0006 */ unsigned long long QuadPart; /* +0x0000 */ }; struct tagKnownSystemIIDs { unsigned char pIID[8]; /* +0x0000 67 16 00 00 */ unsigned long dwRpcIfFlags; /* +0x0008 */ }; struct _ACTIVATION_CONTEXT_DATA_COM_INTERFACE_REDIRECTION { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned char ProxyStubClsid32[16]; /* +0x0008 f3 14 00 00 */ unsigned long NumMethods; /* +0x0018 */ unsigned char TypeLibraryId[16]; /* +0x001c f3 14 00 00 */ unsigned char BaseInterface[16]; /* +0x002c f3 14 00 00 */ unsigned long NameLength; /* +0x003c */ unsigned long NameOffset; /* +0x0040 */ }; struct SHookList { unsigned char pNext[8]; /* +0x0000 b8 81 00 00 */ unsigned char pHook[8]; /* +0x0008 b9 81 00 00 */ unsigned char uExtension[16]; /* +0x0010 f3 14 00 00 */ }; struct WireThat { /* unsigned char c[0]; +0x0000 c0 81 00 00 */ unsigned char d[56]; /* +0x0000 c1 81 00 00 */ }; struct WireThatPart1 { unsigned long flags; /* +0x0000 */ unsigned long unique; /* +0x0004 */ }; struct WireThatPart2 { unsigned char part1[8]; /* +0x0000 c0 81 00 00 */ unsigned char ea[24]; /* +0x0008 8c 7d 00 00 */ unsigned char e[24]; /* +0x0020 8d 7d 00 00 */ }; struct ORPC_INIT_ARGS { unsigned char lpIntfOrpcDebug[8]; /* +0x0000 dd 81 00 00 */ void *pvPSN; /* +0x0008 */ unsigned long dwReserved1; /* +0x0010 */ unsigned long dwReserved2; /* +0x0014 */ }; struct ORPC_DBG_ALL { unsigned char *pSignature; /* +0x0000 */ unsigned char pMessage[8]; /* +0x0008 09 1e 00 00 */ unsigned char refiid[8]; /* +0x0010 67 16 00 00 */ unsigned char pChannel[8]; /* +0x0018 77 19 00 00 */ unsigned char pUnkProxyMgr[8]; /* +0x0020 93 17 00 00 */ void *pInterface; /* +0x0028 */ unsigned char pUnkObject[8]; /* +0x0030 93 17 00 00 */ unsigned char hresult[8]; /* +0x0038 08 00 00 00 */ void *pvBuffer; /* +0x0040 */ unsigned long cbBuffer; /* +0x0048 */ unsigned long *lpcbBuffer; /* +0x0050 */ void *reserved; /* +0x0058 */ }; enum tagCMLFLAGS { CMLF_QUITRECEIVED = 1, CMLF_CLEAREDQUEUE = 2, CMLF_CHECKEDTOKEN = 4, CMLF_DROPPEDINPUT = 8, CMLF_NEWINPUT = 16 }; enum tagCOMETWDELAYFLAGS { COMETWDELAY_UIMSGSINCML = 1, COMETWDELAY_DROPPEDINPUT = 2, COMETWDELAY_NEWINPUTINCML = 4 }; enum CSurrogateProcessActivator:: { TIMEOUT_INACTIVE = 0, TIMEOUT_PENDING = 1, TIMEOUT_SUSPENDED = 2, TIMEOUT_HAPPENING = 3, TIMEOUT_FORCED_SHUTDOWN = 4 }; struct LocalThis { unsigned long flags; /* +0x0000 */ unsigned long client_thread; /* +0x0004 */ }; enum __MIDL___MIDL_itf_odeth_0000_0001_0001 { ORS_DONTRUNDOWN = 0, ORS_OK_TO_RUNDOWN = 1, ORS_OID_PINNED = 2 }; /* enum { QIC_STATICMARSHAL = 1, QIC_DISCONNECTED = 2, QIC_ASYNC = 4, QIC_WEAKCLIENT = 8, QIC_BEGINCALLED = 16 }; */ struct tagIPIDTmp { unsigned long dwFlags; /* +0x0000 */ unsigned long cStrongRefs; /* +0x0004 */ unsigned long cWeakRefs; /* +0x0008 */ unsigned long cPrivateRefs; /* +0x000c */ void *pv; /* +0x0010 */ unsigned char pStub[8]; /* +0x0018 93 17 00 00 */ unsigned char pOXIDEntry[8]; /* +0x0020 71 5f 00 00 */ }; struct tagStdUnmarshalData { unsigned char pStdID[8]; /* +0x0000 33 65 00 00 */ unsigned char pobjref[8]; /* +0x0008 c6 69 00 00 */ unsigned char pClientCtx[8]; /* +0x0010 74 54 00 00 */ unsigned char fCreateWrapper[8]; /* +0x0018 74 00 00 00 */ unsigned char ppv[8]; /* +0x0020 55 13 00 00 */ unsigned char fLightNA[8]; /* +0x0028 74 00 00 00 */ }; struct tagStdReleaseData { unsigned char pStdMshl[8]; /* +0x0000 1f 75 00 00 */ unsigned char pObjRef[8]; /* +0x0008 c6 69 00 00 */ }; struct tagStdDiscData { unsigned char pStdMshl[8]; /* +0x0000 1f 75 00 00 */ unsigned long dwType; /* +0x0008 */ unsigned char fRelease[4]; /* +0x000c 74 00 00 00 */ }; struct CStdMarshal::DisconnectCliIPIDs::__l6::_IPIDReleaseSet { unsigned short cRifRef; /* +0x0000 */ unsigned char pRifRef[8]; /* +0x0008 db 60 00 00 */ }; struct ReportedExceptions { unsigned long dwExceptionCode; /* +0x0000 */ unsigned long dwReportCount; /* +0x0004 */ unsigned long dwMaxCount; /* +0x0008 */ }; enum _SecurityOptionsDisposition { ACCESS_DENIED_FOR_ACTIVATION_VIA_RESTRICTION = 1, ACCESS_DENIED_FOR_LAUNCH_VIA_RESTRICTION = 2, ACCESS_DENIED_FOR_ACTIVATION_VIA_PERMISSION = 4, ACCESS_DENIED_FOR_LAUNCH_VIA_PERMISSION = 8, ACCESS_DENIED_FOR_CALL_VIA_RESTRICTION = 16, ACCESS_DENIED_FOR_CALL_VIA_PERMISSION = 32, ACCESS_DENIED_VIA_DEFAULTPERMISSION = 64 }; enum _SecurityOptionsBitness { CurrentBitness = 0, Wow6432Bitness = 1, Wow6464Bitness = 2 }; enum tagORT { ORT_UNUSED = 0, ORT_OBJREF = 1, ORT_LAZY_OBJREF = 2, ORT_AGILE = 4, ORT_LAZY_AGILE = 8, ORT_STREAM = 22, ORT_FREETM = 50 }; enum tagPGALLOCATORFLAGS { PGALLOC_ZEROBRANDNEWPAGES = 1 }; struct STwoBits { void *_hEvent; /* +0x0000 */ unsigned long _dwCookie; /* +0x0008 */ }; struct tagRegIf { void *hServerIf; /* +0x0000 */ unsigned long dwRegFlags; /* +0x0008 */ unsigned char pfnSecurityCB[8]; /* +0x0010 c6 18 00 00 */ }; enum VSAParameterType { = 32771 }; enum eVSAEventFlags { cVSAEventStandard = 0, cVSAEventDefaultSource = 1, cVSAEventDefaultTarget = 2, cVSAEventCanBreak = 4 }; enum VSAStandardParameter { cVSAStandardParameterSourceMachine = 0, cVSAStandardParameterSourceProcess = 1, cVSAStandardParameterSourceThread = 2, cVSAStandardParameterSourceComponent = 3, cVSAStandardParameterSourceSession = 4, cVSAStandardParameterTargetMachine = 5, cVSAStandardParameterTargetProcess = 6, cVSAStandardParameterTargetThread = 7, cVSAStandardParameterTargetComponent = 8, cVSAStandardParameterTargetSession = 9, cVSAStandardParameterSecurityIdentity = 10, cVSAStandardParameterCausalityID = 11, cVSAStandardParameterNoDefault = 16384, cVSAStandardParameterSourceHandle = 16384, cVSAStandardParameterTargetHandle = 16385, cVSAStandardParameterArguments = 16386, cVSAStandardParameterReturnValue = 16387, cVSAStandardParameterException = 16388, cVSAStandardParameterCorrelationID = 16389 }; /* enum { AUMGR_ALLLOCAL = 1, AUMGR_IUNKNOWN = 2, AUMGR_IMULTIQI = 3 }; */ struct { void *pv1; /* +0x0000 */ void *pv2; /* +0x0008 */ }; struct IUnknownVtbl { unsigned char QueryInterface[8]; /* +0x0000 c1 85 00 00 */ unsigned char AddRef[8]; /* +0x0008 c3 85 00 00 */ unsigned char Release[8]; /* +0x0010 c3 85 00 00 */ }; struct IRpcChannelBufferVtbl { unsigned char QueryInterface[8]; /* +0x0000 cb 85 00 00 */ unsigned char AddRef[8]; /* +0x0008 cd 85 00 00 */ unsigned char Release[8]; /* +0x0010 cd 85 00 00 */ unsigned char GetBuffer[8]; /* +0x0018 d0 85 00 00 */ unsigned char SendReceive[8]; /* +0x0020 d3 85 00 00 */ unsigned char FreeBuffer[8]; /* +0x0028 d6 85 00 00 */ unsigned char GetDestCtx[8]; /* +0x0030 d9 85 00 00 */ unsigned char IsConnected[8]; /* +0x0038 db 85 00 00 */ }; struct IOrpcDebugNotifyVtbl { unsigned char QueryInterface[8]; /* +0x0000 e0 85 00 00 */ unsigned char AddRef[8]; /* +0x0008 e3 85 00 00 */ unsigned char Release[8]; /* +0x0010 e3 85 00 00 */ unsigned char ClientGetBufferSize[8]; /* +0x0018 e6 85 00 00 */ unsigned char ClientFillBuffer[8]; /* +0x0020 e6 85 00 00 */ unsigned char ClientNotify[8]; /* +0x0028 e6 85 00 00 */ unsigned char ServerNotify[8]; /* +0x0030 e6 85 00 00 */ unsigned char ServerGetBufferSize[8]; /* +0x0038 e6 85 00 00 */ unsigned char ServerFillBuffer[8]; /* +0x0040 e6 85 00 00 */ }; enum tagROIDFLAG { ROIDF_REGISTER = 1, ROIDF_PING = 2, ROIDF_DEREGISTER = 4, ROIDF_DELETEME = 8 }; struct tagXAptQIData { unsigned char pIPID[8]; /* +0x0000 67 16 00 00 */ unsigned long cRefs; /* +0x0008 */ unsigned short cIids; /* +0x000c */ unsigned char iids[8]; /* +0x0010 61 16 00 00 */ unsigned char ppQIResults[8]; /* +0x0018 d7 60 00 00 */ unsigned char pRemUnk[8]; /* +0x0020 c6 64 00 00 */ }; struct tagXAptAddRefData { unsigned short cIfs; /* +0x0000 */ unsigned char pIfRefs[8]; /* +0x0008 db 60 00 00 */ unsigned char pResults[8]; /* +0x0010 08 06 00 00 */ unsigned char pRemUnk[8]; /* +0x0018 c6 64 00 00 */ }; struct tagXAptReleaseData { unsigned short cIfs; /* +0x0000 */ unsigned char pIfRefs[8]; /* +0x0008 db 60 00 00 */ unsigned char pRemUnk[8]; /* +0x0010 c6 64 00 00 */ }; struct SystemBlockHeader { long lIndex; /* +0x0000 */ unsigned long ulSignature; /* +0x0004 */ }; struct SNameHashNode { unsigned char chain[16]; /* +0x0000 98 5f 00 00 */ unsigned long dwHash; /* +0x0010 */ unsigned long cRef; /* +0x0014 */ unsigned char ipid[16]; /* +0x0018 f3 14 00 00 */ unsigned char sName[8]; /* +0x0028 c6 5f 00 00 */ }; struct SNameKey { unsigned char pIpid[8]; /* +0x0000 67 16 00 00 */ unsigned char pName[8]; /* +0x0008 c7 5f 00 00 */ }; struct CVerifierStackData::tagNode { unsigned char lpvStack[8]; /* +0x0000 55 13 00 00 */ unsigned char listEntry[16]; /* +0x0008 73 1f 00 00 */ }; struct CVerifierTlsData { unsigned char stackComInit[24]; /* +0x0000 2e 86 00 00 */ unsigned char stackComUninit[24]; /* +0x0018 2e 86 00 00 */ unsigned char stackOLEInit[24]; /* +0x0030 2e 86 00 00 */ unsigned char stackOLEUninit[24]; /* +0x0048 2e 86 00 00 */ unsigned char stackEnterSWC[24]; /* +0x0060 2e 86 00 00 */ unsigned char stackLeaveSWC[24]; /* +0x0078 2e 86 00 00 */ unsigned long long AggressiveDllUnloadTicksInSTA; /* +0x0090 */ }; struct VerifierThreadState { unsigned long cComInits; /* +0x0000 */ unsigned long cOleInits; /* +0x0004 */ unsigned char guidContext[16]; /* +0x0008 f3 14 00 00 */ void *pvTopSWCNode; /* +0x0018 */ }; struct VtblSplayNode { unsigned char SplayLinks[24]; /* +0x0000 b5 17 00 00 */ void *pvVtbl; /* +0x0018 */ unsigned long cRefs; /* +0x0020 */ }; struct ObjectSplayNode { unsigned char SplayLinks[24]; /* +0x0000 b5 17 00 00 */ void *pvObject; /* +0x0018 */ void *pvVtblTracking; /* +0x0020 */ }; struct tagSTREAM_HEADER { unsigned long ulStreamVersion; /* +0x0000 */ unsigned long ulPickledSize; /* +0x0004 */ }; enum MIDL_ES_CODE { MES_ENCODE = 0, MES_DECODE = 1, MES_ENCODE_NDR64 = 2 }; enum MIDL_ES_HANDLE_STYLE { MES_INCREMENTAL_HANDLE = 0, MES_FIXED_BUFFER_HANDLE = 1, MES_DYNAMIC_BUFFER_HANDLE = 2 }; struct CEffPermsCacheLUID::tagCACHE_ENTRY { unsigned char lClient[8]; /* +0x0000 38 15 00 00 */ unsigned long dwEffectivePermissions; /* +0x0008 */ }; struct tagSTREAM_ACL { unsigned long ulNumOfDenyEntries; /* +0x0000 */ unsigned long ulNumOfGrantEntries; /* +0x0004 */ unsigned char pACL[8]; /* +0x0008 be 86 00 00 */ }; struct tagACL_DESCRIPTOR { void *pACLBuffer; /* +0x0000 */ unsigned long ulACLBufferSize; /* +0x0008 */ unsigned long ulSIDSize; /* +0x000c */ unsigned char bDirtyACL[8]; /* +0x0010 74 00 00 00 */ unsigned char SecDesc[40]; /* +0x0018 20 4e 00 00 */ }; struct tagSTREAM_ACE { unsigned long grfAccessPermissions; /* +0x0000 */ unsigned char grfAccessMode[4]; /* +0x0004 f9 86 00 00 */ unsigned char TrusteeType[4]; /* +0x0008 8b 7f 00 00 */ unsigned char TrusteeForm[4]; /* +0x000c 8a 7f 00 00 */ unsigned char pTrusteeName[8]; /* +0x0010 71 06 00 00 */ unsigned char pSID[8]; /* +0x0018 fb 86 00 00 */ }; struct tagPCB { char *pPicklingBuff; /* +0x0000 */ char *pTruePicklingBuff; /* +0x0008 */ unsigned long ulPicklingBuffSize; /* +0x0010 */ unsigned long ulBytesUsed; /* +0x0014 */ unsigned char StreamACL[16]; /* +0x0018 fe 86 00 00 */ void *PickleHandle; /* +0x0028 */ unsigned char bDirtyHandle[4]; /* +0x0030 74 00 00 00 */ unsigned char bPickled[4]; /* +0x0034 74 00 00 00 */ unsigned long ulMaxNumOfStreamACEs; /* +0x0038 */ unsigned long ulNumOfStreamACEs; /* +0x003c */ }; struct tagSTREAM_SID { unsigned char Revision; /* +0x0000 */ unsigned char SubAuthorityCount; /* +0x0001 */ unsigned char IdentifierAuthority[6]; /* +0x0002 13 87 00 00 */ unsigned char SubAuthority[4]; /* +0x0008 fc 12 00 00 */ }; enum _ACCESS_MODE { NOT_USED_ACCESS = 0, GRANT_ACCESS = 1, SET_ACCESS = 2, DENY_ACCESS = 3, REVOKE_ACCESS = 4, SET_AUDIT_SUCCESS = 5, SET_AUDIT_FAILURE = 6 }; enum _SE_OBJECT_TYPE { SE_UNKNOWN_OBJECT_TYPE = 0, SE_FILE_OBJECT = 1, SE_SERVICE = 2, SE_PRINTER = 3, SE_REGISTRY_KEY = 4, SE_LMSHARE = 5, SE_KERNEL_OBJECT = 6, SE_WINDOW_OBJECT = 7, SE_DS_OBJECT = 8, SE_DS_OBJECT_ALL = 9, SE_PROVIDER_DEFINED_OBJECT = 10, SE_WMIGUID_OBJECT = 11, SE_REGISTRY_WOW64_32KEY = 12 }; struct __midl_frag12_t { unsigned char frag1[8]; /* +0x0000 4e 87 00 00 */ }; struct _MIDL_STUB_DESC { void *RpcInterfaceInformation; /* +0x0000 */ unsigned char pfnAllocate[8]; /* +0x0008 ff 16 00 00 */ unsigned char pfnFree[8]; /* +0x0010 d2 13 00 00 */ unsigned char IMPLICIT_HANDLE_INFO[8]; /* +0x0018 51 87 00 00 */ unsigned char apfnNdrRundownRoutines[8]; /* +0x0020 15 1a 00 00 */ unsigned char aGenericBindingRoutinePairs[8]; /* +0x0028 18 1a 00 00 */ unsigned char apfnExprEval[8]; /* +0x0030 1e 1a 00 00 */ unsigned char aXmitQuintuple[8]; /* +0x0038 21 1a 00 00 */ unsigned char pFormatTypes[8]; /* +0x0040 4b 19 00 00 */ unsigned char fCheckBounds[4]; /* +0x0048 74 00 00 00 */ unsigned long Version; /* +0x004c */ unsigned char pMallocFreeStruct[8]; /* +0x0050 23 1a 00 00 */ long MIDLVersion; /* +0x0058 */ unsigned char CommFaultOffsets[8]; /* +0x0060 26 1a 00 00 */ unsigned char aUserMarshalQuadruple[8]; /* +0x0068 29 1a 00 00 */ unsigned char NotifyRoutineTable[8]; /* +0x0070 2c 1a 00 00 */ unsigned long long mFlags; /* +0x0078 */ unsigned char CsRoutineTables[8]; /* +0x0080 2f 1a 00 00 */ void *ProxyServerInfo; /* +0x0088 */ unsigned char pExprInfo[8]; /* +0x0090 32 1a 00 00 */ }; /* struct { unsigned char frag1[8]; +0x0000 54 87 00 00 unsigned char frag2[8]; +0x0008 55 87 00 00 unsigned char frag3[16]; +0x0010 56 87 00 00 unsigned char frag4; +0x0020 }; */ struct __midl_frag8_t { unsigned char frag1[8]; /* +0x0000 4e 87 00 00 */ unsigned char frag2[40]; /* +0x0008 58 87 00 00 */ }; enum _PROGRESS_INVOKE_SETTING { ProgressInvokeNever = 1, ProgressInvokeEveryObject = 2, ProgressInvokeOnError = 3, ProgressCancelOperation = 4, ProgressRetryOperation = 5, ProgressInvokePrePostError = 6 }; struct __midl_frag4_t { unsigned char frag1[16]; /* +0x0000 5f 87 00 00 */ }; /* struct { unsigned char frag1[8]; +0x0000 55 87 00 00 unsigned char frag2[16]; +0x0008 56 87 00 00 unsigned char frag3[8]; +0x0018 55 87 00 00 unsigned char frag4[16]; +0x0020 56 87 00 00 }; */ /* struct { unsigned char frag1[16]; +0x0000 a5 58 00 00 unsigned char frag2[48]; +0x0010 64 87 00 00 unsigned char frag3; +0x0040 }; */ struct __midl_frag9_t { unsigned char frag1[16]; /* +0x0000 62 87 00 00 */ unsigned char frag2[72]; /* +0x0010 66 87 00 00 */ unsigned char frag3[16]; /* +0x0058 67 87 00 00 */ }; struct _acpickl_MIDL_PROC_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[2]; /* +0x0002 ff 12 00 00 */ }; struct _MIDL_TYPE_PICKLING_INFO { unsigned long Version; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned char Reserved[24]; /* +0x0008 f7 5b 00 00 */ }; struct __midl_frag10_t { unsigned char frag1[4]; /* +0x0000 75 00 00 00 */ unsigned char frag2[4]; /* +0x0004 6f 87 00 00 */ unsigned char frag3[8]; /* +0x0008 70 87 00 00 */ unsigned char frag4[8]; /* +0x0010 70 87 00 00 */ }; struct __midl_frag5_t { unsigned char frag1[16]; /* +0x0000 62 87 00 00 */ unsigned char frag2[16]; /* +0x0010 67 87 00 00 */ }; struct __midl_frag6_t { unsigned char frag1[4]; /* +0x0000 75 00 00 00 */ unsigned char frag2[8]; /* +0x0004 70 87 00 00 */ }; struct _acpickl_MIDL_TYPE_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[116]; /* +0x0002 78 87 00 00 */ }; struct _acpickl_MIDL_EXPR_FORMAT_STRING { long Pad; /* +0x0000 */ unsigned char Format[16]; /* +0x0004 7b 87 00 00 */ }; /* struct { unsigned char frag1[8]; +0x0000 54 87 00 00 unsigned char frag2[8]; +0x0008 55 87 00 00 unsigned char frag3[16]; +0x0010 56 87 00 00 unsigned char frag4[8]; +0x0020 54 87 00 00 unsigned char frag5[8]; +0x0028 55 87 00 00 unsigned char frag6[16]; +0x0030 56 87 00 00 unsigned char frag7; +0x0040 }; */ struct __midl_frag2_t { unsigned char frag1[8]; /* +0x0000 4e 87 00 00 */ unsigned char frag2[72]; /* +0x0008 81 87 00 00 */ }; struct _NDR64_POINTER_REPEAT_FLAGS { /* unsigned char SetCorrMark[0]; +0x0000 a2 1e 00 00 */ unsigned char Reserved[1]; /* +0x0000 c3 59 00 00 */ }; struct _NDR64_ARRAY_FLAGS { /* unsigned char HasPointerInfo[0]; +0x0000 a2 1e 00 00 */ /* unsigned char HasElementInfo[0]; +0x0000 a3 1e 00 00 */ /* unsigned char IsMultiDimensional[0]; +0x0000 a4 1e 00 00 */ /* unsigned char IsArrayofStrings[0]; +0x0000 28 26 00 00 */ /* unsigned char Reserved1[0]; +0x0000 0e 26 00 00 */ /* unsigned char Reserved2[0]; +0x0000 a6 1e 00 00 */ /* unsigned char Reserved3[0]; +0x0000 a7 1e 00 00 */ unsigned char Reserved4[1]; /* +0x0000 a8 1e 00 00 */ }; struct _NDR64_STRING_FLAGS { /* unsigned char IsSized[0]; +0x0000 a2 1e 00 00 */ /* unsigned char IsRanged[0]; +0x0000 a3 1e 00 00 */ /* unsigned char Reserved3[0]; +0x0000 a4 1e 00 00 */ /* unsigned char Reserved4[0]; +0x0000 28 26 00 00 */ /* unsigned char Reserved5[0]; +0x0000 0e 26 00 00 */ /* unsigned char Reserved6[0]; +0x0000 a6 1e 00 00 */ /* unsigned char Reserved7[0]; +0x0000 a7 1e 00 00 */ unsigned char Reserved8[1]; /* +0x0000 a8 1e 00 00 */ }; struct _NDR64_STRUCTURE_FLAGS { /* unsigned char HasPointerInfo[0]; +0x0000 a2 1e 00 00 */ /* unsigned char HasMemberInfo[0]; +0x0000 a3 1e 00 00 */ /* unsigned char HasConfArray[0]; +0x0000 a4 1e 00 00 */ /* unsigned char HasOrigPointerInfo[0]; +0x0000 28 26 00 00 */ /* unsigned char HasOrigMemberInfo[0]; +0x0000 0e 26 00 00 */ /* unsigned char Reserved1[0]; +0x0000 a6 1e 00 00 */ /* unsigned char Reserved2[0]; +0x0000 a7 1e 00 00 */ unsigned char Reserved3[1]; /* +0x0000 a8 1e 00 00 */ }; struct NDR64_STRING_HEADER_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Flags[1]; /* +0x0001 8c 87 00 00 */ unsigned short ElementSize; /* +0x0002 */ }; enum RO_ERROR_REPORTING_FLAGS { RO_ERROR_REPORTING_NONE = 0, RO_ERROR_REPORTING_SUPPRESSEXCEPTIONS = 1, RO_ERROR_REPORTING_FORCEEXCEPTIONS = 2, RO_ERROR_REPORTING_USESETERRORINFO = 4, RO_ERROR_REPORTING_SUPPRESSSETERRORINFO = 8 }; enum Windows::Foundation::Diagnostics::RoErrorReportingFlags { None = 0, SuppressExceptions = 1, ForceExceptions = 2, UseSetErrorInfo = 4, SuppressSetErrorInfo = 8 }; enum LoadOrFreeWhy { LoadingInprocServer = 0, CoLoadLibraryCalled = 1, CoFreeLibraryCalled = 2, FailedToCreateAPathEntry = 3, AnotherThreadBeatUsHere = 4, NoValidEntryPoint = 5, NoLongerInUse = 6 }; enum tagHOSTDLLFLAGS { HDLLF_SINGLETHREADED = 1, HDLLF_APARTMENTTHREADED = 2, HDLLF_MULTITHREADED = 4, HDLLF_NEUTRALTHREADED = 8, HDLLF_APPLICATIONSTA = 16, HDLLF_HOSTTYPEMASK = 31, HDLLF_COMAPARTMENT = 32, HDLLF_SHUTTINGDOWN = 256 }; enum CClassCache::GetOrLoadWinRTInprocClass::__l2:: { Here = 0, CrossApartmentASTA = 1, CrossApartmentMTA = 2 }; struct CClassCache::ReleaseCatalogObjects::__l2::STmpCI { unsigned char arCI[80]; /* +0x0000 3a 88 00 00 */ unsigned char pNext[8]; /* +0x0050 39 88 00 00 */ }; enum __MIDL_IDLLHost_0001 { DLLHOST_IS_DPE = 1, DLLHOST_IS_PFN = 2 }; struct tagSDBQUERYRESULT { unsigned char atrExes[64]; /* +0x0000 87 27 00 00 */ unsigned char adwExeFlags[64]; /* +0x0040 87 27 00 00 */ unsigned char atrLayers[32]; /* +0x0080 cc 4e 00 00 */ unsigned long dwLayerFlags; /* +0x00a0 */ unsigned long trAppHelp; /* +0x00a4 */ unsigned long dwExeCount; /* +0x00a8 */ unsigned long dwLayerCount; /* +0x00ac */ unsigned char guidID[16]; /* +0x00b0 f3 14 00 00 */ unsigned long dwExtraFlags; /* +0x00c0 */ unsigned long dwCustomSDBMap; /* +0x00c4 */ unsigned char rgGuidDB[256]; /* +0x00c8 65 88 00 00 */ }; struct tagAPPCOMPAT_EXE_DATA { unsigned char szShimEngine[520]; /* +0x0000 00 16 00 00 */ unsigned long cbSize; /* +0x0208 */ unsigned long dwMagic; /* +0x020c */ unsigned short uExeType; /* +0x0210 */ unsigned char SdbQueryResult[460]; /* +0x0214 6d 88 00 00 */ unsigned char DbgLogChannels[1024]; /* +0x03e0 ce 35 00 00 */ unsigned char SwitchContext[1024]; /* +0x07e0 ce 35 00 00 */ unsigned short uParentExeType; /* +0x0be0 */ unsigned long dwParentProcessId; /* +0x0be4 */ unsigned char szParentImageName[520]; /* +0x0be8 00 16 00 00 */ unsigned char szParentMitigations[512]; /* +0x0df0 55 17 00 00 */ unsigned char szActiveCompatLayers[512]; /* +0x0ff0 55 17 00 00 */ unsigned long ulSubSystemType; /* +0x11f0 */ unsigned short uSubSystemMinorVersion; /* +0x11f4 */ unsigned short uSubSystemMajorVersion; /* +0x11f6 */ unsigned long dwReason; /* +0x11f8 */ unsigned char bLatestOs[4]; /* +0x11fc 74 00 00 00 */ unsigned char bPackageId[4]; /* +0x1200 74 00 00 00 */ unsigned char bSwitchBackManifest[4]; /* +0x1204 74 00 00 00 */ unsigned char bUacManifest[4]; /* +0x1208 74 00 00 00 */ unsigned char bLegacyInstaller[4]; /* +0x120c 74 00 00 00 */ unsigned char bSystem[4]; /* +0x1210 74 00 00 00 */ unsigned long dwRunLevel; /* +0x1214 */ unsigned long dwElevationReason; /* +0x1218 */ unsigned long dwElevationFlags; /* +0x121c */ unsigned long dwInstallerFlags; /* +0x1220 */ unsigned long ulSamplingFlag; /* +0x1224 */ void *pAmiStoreHandle; /* +0x1228 */ void *pHookCOM; /* +0x1230 */ }; struct ServerContextWorkData { unsigned char pInActProps[8]; /* +0x0000 9a 5e 00 00 */ unsigned char xrpcOutProps[48]; /* +0x0008 68 61 00 00 */ }; enum PUSHSTATE { PUSHSTATE0_ENTRY = 0, PUSHSTATE1_FIRSTCALL = 1, PUSHSTATE2_FS_PSgeFS = 2, PUSHSTATE3_FS_PSltFS = 3, PUSHSTATE4_FS_PSZERO = 4, PUSHSTATE5_DONE_ERROR = 5 }; enum PULLSTATE { PULLSTATE0_ENTRY = 0, PULLSTATE1_FIRST_CALL = 1, PULLSTATE2_NS_RQlsRA = 2, PULLSTATE3_NS_RQgeRA = 3, PULLSTATE4_S_RQlsBS = 4, PULLSTATE5_S_RQgeBS = 5, PULLSTATE6_DONE = 6 }; struct RegistryKeyValue { unsigned char key[8]; /* +0x0000 71 06 00 00 */ unsigned char value[8]; /* +0x0008 71 06 00 00 */ }; struct tagCStdPSFactoryBuffer { unsigned char lpVtbl[8]; /* +0x0000 59 8a 00 00 */ long RefCount; /* +0x0008 */ unsigned char pProxyFileList[8]; /* +0x0010 5d 8a 00 00 */ long Filler1; /* +0x0018 */ }; struct tagCInterfaceStubHeader { unsigned char piid[8]; /* +0x0000 67 16 00 00 */ unsigned char pServerInfo[8]; /* +0x0008 65 8a 00 00 */ unsigned long DispatchTableCount; /* +0x0010 */ unsigned char pDispatchTable[8]; /* +0x0018 67 8a 00 00 */ }; struct IRpcProxyBufferVtbl { unsigned char QueryInterface[8]; /* +0x0000 6c 8a 00 00 */ unsigned char AddRef[8]; /* +0x0008 6f 8a 00 00 */ unsigned char Release[8]; /* +0x0010 6f 8a 00 00 */ unsigned char Connect[8]; /* +0x0018 72 8a 00 00 */ unsigned char Disconnect[8]; /* +0x0020 74 8a 00 00 */ }; struct tagCInterfaceStubVtbl { unsigned char header[32]; /* +0x0000 77 8a 00 00 */ unsigned char Vtbl[80]; /* +0x0020 78 8a 00 00 */ }; struct tagProxyFileInfo { unsigned char pProxyVtblList[8]; /* +0x0000 82 8a 00 00 */ unsigned char pStubVtblList[8]; /* +0x0008 84 8a 00 00 */ unsigned char pNamesArray[8]; /* +0x0010 85 8a 00 00 */ unsigned char pDelegatedIIDs[8]; /* +0x0018 86 8a 00 00 */ unsigned char pIIDLookupRtn[8]; /* +0x0020 87 8a 00 00 */ unsigned short TableSize; /* +0x0028 */ unsigned short TableVersion; /* +0x002a */ unsigned char pAsyncIIDLookup[8]; /* +0x0030 86 8a 00 00 */ long long Filler2; /* +0x0038 */ long long Filler3; /* +0x0040 */ long long Filler4; /* +0x0048 */ }; struct tagCInterfaceProxyVtbl { unsigned char header[8]; /* +0x0000 8a 8a 00 00 */ /* unsigned char Vtbl[0]; +0x0008 8b 8a 00 00 */ }; struct tagCInterfaceProxyHeader { unsigned char piid[8]; /* +0x0000 67 16 00 00 */ }; struct IPSFactoryBufferVtbl { unsigned char QueryInterface[8]; /* +0x0000 93 8a 00 00 */ unsigned char AddRef[8]; /* +0x0008 96 8a 00 00 */ unsigned char Release[8]; /* +0x0010 96 8a 00 00 */ unsigned char CreateProxy[8]; /* +0x0018 99 8a 00 00 */ unsigned char CreateStub[8]; /* +0x0020 9c 8a 00 00 */ }; struct IRpcStubBufferVtbl { unsigned char QueryInterface[8]; /* +0x0000 a1 8a 00 00 */ unsigned char AddRef[8]; /* +0x0008 a4 8a 00 00 */ unsigned char Release[8]; /* +0x0010 a4 8a 00 00 */ unsigned char Connect[8]; /* +0x0018 a7 8a 00 00 */ unsigned char Disconnect[8]; /* +0x0020 a9 8a 00 00 */ unsigned char Invoke[8]; /* +0x0028 ac 8a 00 00 */ unsigned char IsIIDSupported[8]; /* +0x0030 af 8a 00 00 */ unsigned char CountRefs[8]; /* +0x0038 a4 8a 00 00 */ unsigned char DebugServerQueryInterface[8]; /* +0x0040 b2 8a 00 00 */ unsigned char DebugServerRelease[8]; /* +0x0048 b5 8a 00 00 */ }; struct __midl_frag1094_t { unsigned char frag1[24]; /* +0x0000 3c 58 00 00 */ unsigned char frag2[16]; /* +0x0018 4f 59 00 00 */ }; /* struct { unsigned char header[16]; +0x0000 8a 8a 00 00 unsigned char Vtbl[72]; +0x0010 c5 8a 00 00 }; */ struct _MIDL_SERVER_INFO_ { unsigned char pStubDesc[8]; /* +0x0000 77 29 00 00 */ unsigned char DispatchTable[8]; /* +0x0008 ca 8a 00 00 */ unsigned char ProcString[8]; /* +0x0010 4b 19 00 00 */ unsigned char FmtStringOffset[8]; /* +0x0018 4d 19 00 00 */ unsigned char ThunkTable[8]; /* +0x0020 1e 1a 00 00 */ unsigned char pTransferSyntax[8]; /* +0x0028 2b 24 00 00 */ unsigned long long nCount; /* +0x0030 */ unsigned char pSyntaxInfo[8]; /* +0x0038 dd 20 00 00 */ }; struct __midl_frag1444_t { unsigned char frag1[24]; /* +0x0000 3c 58 00 00 */ unsigned char frag2[16]; /* +0x0018 4f 59 00 00 */ unsigned char frag3[16]; /* +0x0028 4f 59 00 00 */ }; /* struct { unsigned char header[16]; +0x0000 8a 8a 00 00 unsigned char Vtbl[120]; +0x0010 d5 8a 00 00 }; */ struct __midl_frag114_t { unsigned char frag1[24]; /* +0x0000 3c 58 00 00 */ unsigned char frag2[16]; /* +0x0018 4f 59 00 00 */ unsigned char frag3[16]; /* +0x0028 4f 59 00 00 */ unsigned char frag4[16]; /* +0x0038 4f 59 00 00 */ unsigned char frag5[16]; /* +0x0048 4f 59 00 00 */ }; struct __midl_frag1691_t { unsigned char frag1[8]; /* +0x0000 75 00 00 00 */ unsigned char frag2[24]; /* +0x0008 dc 8a 00 00 */ unsigned char frag3[8]; /* +0x0020 70 87 00 00 */ }; struct __midl_frag1633_t { unsigned char frag1[4]; /* +0x0000 75 00 00 00 */ unsigned char frag2[4]; /* +0x0004 e2 8a 00 00 */ unsigned char frag3[16]; /* +0x0008 e3 8a 00 00 */ }; struct __midl_frag166_t { unsigned char frag1[24]; /* +0x0000 3c 58 00 00 */ unsigned char frag2[16]; /* +0x0018 4f 59 00 00 */ unsigned char frag3[16]; /* +0x0028 4f 59 00 00 */ unsigned char frag4[16]; /* +0x0038 4f 59 00 00 */ }; struct __midl_frag188_t { unsigned char frag1[4]; /* +0x0000 75 00 00 00 */ unsigned char frag2[4]; /* +0x0004 6f 87 00 00 */ unsigned char frag3[8]; /* +0x0008 70 87 00 00 */ }; struct __midl_frag720_t { unsigned char frag1[24]; /* +0x0000 3c 58 00 00 */ unsigned char frag2[16]; /* +0x0018 4f 59 00 00 */ unsigned char frag3[16]; /* +0x0028 4f 59 00 00 */ unsigned char frag4[16]; /* +0x0038 4f 59 00 00 */ unsigned char frag5[16]; /* +0x0048 4f 59 00 00 */ unsigned char frag6[16]; /* +0x0058 4f 59 00 00 */ }; struct __midl_frag1726_t { unsigned char frag1[8]; /* +0x0000 75 00 00 00 */ unsigned char frag2[24]; /* +0x0008 dc 8a 00 00 */ unsigned char frag3[4]; /* +0x0020 6f 87 00 00 */ unsigned char frag4[12]; /* +0x0024 70 87 00 00 */ }; struct __midl_frag1837_t { unsigned char frag1[24]; /* +0x0000 3c 58 00 00 */ unsigned char frag2[16]; /* +0x0018 4f 59 00 00 */ unsigned char frag3[16]; /* +0x0028 4f 59 00 00 */ unsigned char frag4[16]; /* +0x0038 4f 59 00 00 */ unsigned char frag5[16]; /* +0x0048 4f 59 00 00 */ unsigned char frag6[16]; /* +0x0058 4f 59 00 00 */ unsigned char frag7[16]; /* +0x0068 4f 59 00 00 */ unsigned char frag8[16]; /* +0x0078 4f 59 00 00 */ unsigned char frag9[16]; /* +0x0088 4f 59 00 00 */ unsigned char frag10[16]; /* +0x0098 4f 59 00 00 */ unsigned char frag11[16]; /* +0x00a8 4f 59 00 00 */ }; struct __midl_frag820_t { unsigned char frag1[16]; /* +0x0000 01 8b 00 00 */ unsigned char frag2[8]; /* +0x0010 02 8b 00 00 */ unsigned char frag3[24]; /* +0x0018 03 8b 00 00 */ unsigned char frag4[24]; /* +0x0030 03 8b 00 00 */ unsigned char frag5[24]; /* +0x0048 03 8b 00 00 */ unsigned char frag6[24]; /* +0x0060 03 8b 00 00 */ unsigned char frag7[24]; /* +0x0078 03 8b 00 00 */ unsigned char frag8[24]; /* +0x0090 03 8b 00 00 */ unsigned char frag9[24]; /* +0x00a8 03 8b 00 00 */ unsigned char frag10[24]; /* +0x00c0 03 8b 00 00 */ unsigned char frag11[8]; /* +0x00d8 75 00 00 00 */ }; struct __midl_frag826_t { unsigned char frag1[16]; /* +0x0000 01 8b 00 00 */ unsigned char frag2[8]; /* +0x0010 02 8b 00 00 */ unsigned char frag3[24]; /* +0x0018 03 8b 00 00 */ unsigned char frag4[24]; /* +0x0030 03 8b 00 00 */ unsigned char frag5[24]; /* +0x0048 03 8b 00 00 */ unsigned char frag6[8]; /* +0x0060 75 00 00 00 */ }; struct __midl_frag842_t { unsigned char frag1[16]; /* +0x0000 01 8b 00 00 */ unsigned char frag2[8]; /* +0x0010 02 8b 00 00 */ unsigned char frag3[24]; /* +0x0018 03 8b 00 00 */ unsigned char frag4[24]; /* +0x0030 03 8b 00 00 */ unsigned char frag5[8]; /* +0x0048 4f 19 00 00 */ }; /* struct { unsigned char header[16]; +0x0000 8a 8a 00 00 unsigned char Vtbl[40]; +0x0010 2a 43 00 00 }; */ /* struct { unsigned char header[16]; +0x0000 8a 8a 00 00 unsigned char Vtbl[80]; +0x0010 1c 8b 00 00 }; */ struct __midl_frag1636_t { unsigned char frag1[16]; /* +0x0000 56 87 00 00 */ }; /* struct { unsigned char frag1[16]; +0x0000 30 8b 00 00 unsigned char frag2[8]; +0x0010 31 8b 00 00 unsigned char frag3[8]; +0x0018 32 8b 00 00 unsigned char frag4[8]; +0x0020 32 8b 00 00 unsigned char frag5[8]; +0x0028 32 8b 00 00 unsigned char frag6[8]; +0x0030 32 8b 00 00 unsigned char frag7[8]; +0x0038 31 8b 00 00 unsigned char frag8[8]; +0x0040 33 8b 00 00 unsigned char frag9[8]; +0x0048 32 8b 00 00 }; */ struct __midl_frag760_t { unsigned char frag1[32]; /* +0x0000 2f 8b 00 00 */ unsigned char frag2[80]; /* +0x0020 35 8b 00 00 */ }; struct _mega_MIDL_EXPR_FORMAT_STRING { long Pad; /* +0x0000 */ unsigned char Format[32]; /* +0x0004 bf 4d 00 00 */ }; struct __midl_frag206_t { unsigned char frag1[24]; /* +0x0000 4a 8b 00 00 */ }; struct __midl_frag1147_t { unsigned char frag1[24]; /* +0x0000 3c 58 00 00 */ unsigned char frag2[16]; /* +0x0018 4f 59 00 00 */ unsigned char frag3[16]; /* +0x0028 4f 59 00 00 */ unsigned char frag4[16]; /* +0x0038 4f 59 00 00 */ unsigned char frag5[16]; /* +0x0048 4f 59 00 00 */ unsigned char frag6[16]; /* +0x0058 4f 59 00 00 */ unsigned char frag7[16]; /* +0x0068 4f 59 00 00 */ unsigned char frag8[16]; /* +0x0078 4f 59 00 00 */ }; /* struct { unsigned char header[16]; +0x0000 8a 8a 00 00 unsigned char Vtbl[96]; +0x0010 58 8b 00 00 }; */ struct __midl_frag756_t { unsigned char frag1[40]; /* +0x0000 61 8b 00 00 */ }; /* struct { unsigned char header[16]; +0x0000 8a 8a 00 00 unsigned char Vtbl[88]; +0x0010 ad 2e 00 00 }; */ /* struct { unsigned char header[16]; +0x0000 8a 8a 00 00 unsigned char Vtbl[32]; +0x0010 c6 2a 00 00 }; */ /* struct { unsigned char frag1[16]; +0x0000 30 8b 00 00 unsigned char frag2[8]; +0x0010 32 8b 00 00 unsigned char frag3[8]; +0x0018 32 8b 00 00 }; */ struct __midl_frag817_t { unsigned char frag1[32]; /* +0x0000 2f 8b 00 00 */ unsigned char frag2[32]; /* +0x0020 6f 8b 00 00 */ }; struct _mega_MIDL_PROC_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[14956]; /* +0x0002 73 8b 00 00 */ }; /* struct { unsigned char frag1[16]; +0x0000 30 8b 00 00 unsigned char frag2[8]; +0x0010 32 8b 00 00 unsigned char frag3[8]; +0x0018 31 8b 00 00 unsigned char frag4[8]; +0x0020 32 8b 00 00 unsigned char frag5[8]; +0x0028 32 8b 00 00 unsigned char frag6[8]; +0x0030 32 8b 00 00 unsigned char frag7[8]; +0x0038 32 8b 00 00 unsigned char frag8[8]; +0x0040 32 8b 00 00 unsigned char frag9[8]; +0x0048 31 8b 00 00 unsigned char frag10[8]; +0x0050 33 8b 00 00 unsigned char frag11[8]; +0x0058 32 8b 00 00 }; */ struct __midl_frag1299_t { unsigned char frag1[32]; /* +0x0000 2f 8b 00 00 */ unsigned char frag2[96]; /* +0x0020 7a 8b 00 00 */ }; /* struct { unsigned char frag1[8]; +0x0000 32 8b 00 00 unsigned char frag2[8]; +0x0008 31 8b 00 00 unsigned char frag3[8]; +0x0010 33 8b 00 00 unsigned char frag4[8]; +0x0018 32 8b 00 00 unsigned char frag5[8]; +0x0020 32 8b 00 00 unsigned char frag6[8]; +0x0028 32 8b 00 00 unsigned char frag7[8]; +0x0030 32 8b 00 00 unsigned char frag8[8]; +0x0038 32 8b 00 00 unsigned char frag9[8]; +0x0040 32 8b 00 00 unsigned char frag10[8]; +0x0048 32 8b 00 00 unsigned char frag11[16]; +0x0050 30 8b 00 00 unsigned char frag12[8]; +0x0060 32 8b 00 00 }; */ struct __midl_frag1696_t { unsigned char frag1[32]; /* +0x0000 2f 8b 00 00 */ unsigned char frag2[104]; /* +0x0020 81 8b 00 00 */ }; /* struct { unsigned char header[16]; +0x0000 8a 8a 00 00 unsigned char Vtbl[104]; +0x0010 89 8b 00 00 }; */ /* struct { unsigned char frag1[8]; +0x0000 32 8b 00 00 unsigned char frag2[8]; +0x0008 32 8b 00 00 unsigned char frag3[8]; +0x0010 31 8b 00 00 unsigned char frag4[8]; +0x0018 32 8b 00 00 unsigned char frag5[8]; +0x0020 32 8b 00 00 unsigned char frag6[8]; +0x0028 32 8b 00 00 unsigned char frag7[8]; +0x0030 32 8b 00 00 unsigned char frag8[8]; +0x0038 32 8b 00 00 unsigned char frag9[8]; +0x0040 32 8b 00 00 unsigned char frag10[8]; +0x0048 32 8b 00 00 unsigned char frag11[8]; +0x0050 32 8b 00 00 unsigned char frag12[8]; +0x0058 32 8b 00 00 unsigned char frag13[8]; +0x0060 32 8b 00 00 unsigned char frag14[8]; +0x0068 32 8b 00 00 unsigned char frag15[8]; +0x0070 32 8b 00 00 unsigned char frag16[16]; +0x0078 30 8b 00 00 unsigned char frag17[8]; +0x0088 32 8b 00 00 unsigned char frag18[8]; +0x0090 32 8b 00 00 unsigned char frag19[8]; +0x0098 32 8b 00 00 }; */ struct __midl_frag122_t { unsigned char frag1[32]; /* +0x0000 2f 8b 00 00 */ unsigned char frag2[160]; /* +0x0020 90 8b 00 00 */ }; struct __midl_frag288_t { unsigned char frag1[4]; /* +0x0000 75 00 00 00 */ unsigned char frag2[4]; /* +0x0004 6f 87 00 00 */ unsigned char frag3[8]; /* +0x0008 70 87 00 00 */ unsigned char frag4[16]; /* +0x0010 e3 8a 00 00 */ }; struct __midl_frag125_t { unsigned char frag1[8]; /* +0x0000 9e 8b 00 00 */ }; /* struct { unsigned char frag1[8]; +0x0000 55 87 00 00 unsigned char frag2[16]; +0x0008 56 87 00 00 }; */ /* struct { unsigned char frag1[16]; +0x0000 a5 58 00 00 unsigned char frag2[24]; +0x0010 a7 8b 00 00 unsigned char frag3; +0x0028 }; */ struct __midl_frag1034_t { unsigned char frag1[24]; /* +0x0000 4a 8b 00 00 */ unsigned char frag2[48]; /* +0x0018 a9 8b 00 00 */ }; /* struct { unsigned char header[16]; +0x0000 8a 8a 00 00 unsigned char Vtbl[56]; +0x0010 b3 8b 00 00 }; */ /* struct { unsigned char header[16]; +0x0000 8a 8a 00 00 unsigned char Vtbl[48]; +0x0010 c4 8b 00 00 }; */ /* struct { unsigned char frag1[16]; +0x0000 30 8b 00 00 unsigned char frag2[8]; +0x0010 31 8b 00 00 unsigned char frag3[8]; +0x0018 32 8b 00 00 unsigned char frag4[8]; +0x0020 32 8b 00 00 unsigned char frag5[8]; +0x0028 32 8b 00 00 unsigned char frag6[8]; +0x0030 32 8b 00 00 unsigned char frag7[8]; +0x0038 31 8b 00 00 unsigned char frag8[8]; +0x0040 33 8b 00 00 unsigned char frag9[8]; +0x0048 32 8b 00 00 unsigned char frag10[8]; +0x0050 31 8b 00 00 unsigned char frag11[8]; +0x0058 32 8b 00 00 unsigned char frag12[8]; +0x0060 32 8b 00 00 unsigned char frag13[8]; +0x0068 31 8b 00 00 unsigned char frag14[8]; +0x0070 33 8b 00 00 unsigned char frag15[8]; +0x0078 32 8b 00 00 }; */ struct __midl_frag792_t { unsigned char frag1[32]; /* +0x0000 2f 8b 00 00 */ unsigned char frag2[128]; /* +0x0020 cd 8b 00 00 */ }; /* struct { unsigned char header[16]; +0x0000 8a 8a 00 00 unsigned char Vtbl[64]; +0x0010 9f 76 00 00 }; */ /* struct { unsigned char frag1[8]; +0x0000 32 8b 00 00 unsigned char frag2[8]; +0x0008 32 8b 00 00 unsigned char frag3[8]; +0x0010 32 8b 00 00 unsigned char frag4[8]; +0x0018 31 8b 00 00 unsigned char frag5[8]; +0x0020 32 8b 00 00 unsigned char frag6[8]; +0x0028 32 8b 00 00 }; */ struct __midl_frag825_t { unsigned char frag1[32]; /* +0x0000 2f 8b 00 00 */ unsigned char frag2[48]; /* +0x0020 e7 8b 00 00 */ }; /* struct { unsigned char header[16]; +0x0000 8a 8a 00 00 unsigned char Vtbl[112]; +0x0010 ed 8b 00 00 }; */ /* struct { unsigned char frag1[8]; +0x0000 32 8b 00 00 unsigned char frag2[16]; +0x0008 30 8b 00 00 unsigned char frag3[8]; +0x0018 32 8b 00 00 }; */ struct __midl_frag1841_t { unsigned char frag1[32]; /* +0x0000 2f 8b 00 00 */ unsigned char frag2[32]; /* +0x0020 fb 8b 00 00 */ }; struct __midl_frag1411_t { unsigned char frag1[24]; /* +0x0000 3c 58 00 00 */ unsigned char frag2[16]; /* +0x0018 4f 59 00 00 */ unsigned char frag3[16]; /* +0x0028 4f 59 00 00 */ unsigned char frag4[16]; /* +0x0038 4f 59 00 00 */ unsigned char frag5[16]; /* +0x0048 4f 59 00 00 */ unsigned char frag6[16]; /* +0x0058 4f 59 00 00 */ unsigned char frag7[16]; /* +0x0068 4f 59 00 00 */ }; /* struct { unsigned char frag1[8]; +0x0000 32 8b 00 00 unsigned char frag2[8]; +0x0008 32 8b 00 00 unsigned char frag3[16]; +0x0010 30 8b 00 00 unsigned char frag4[8]; +0x0020 32 8b 00 00 unsigned char frag5[8]; +0x0028 32 8b 00 00 }; */ struct __midl_frag950_t { unsigned char frag1[32]; /* +0x0000 2f 8b 00 00 */ unsigned char frag2[48]; /* +0x0020 17 8c 00 00 */ }; enum tagExtentMode { DVEXTENT_CONTENT = 0, DVEXTENT_INTEGRAL = 1 }; /* struct { unsigned char header[16]; +0x0000 8a 8a 00 00 unsigned char Vtbl[192]; +0x0010 3c 8c 00 00 }; */ /* struct { unsigned char frag1[8]; +0x0000 32 8b 00 00 unsigned char frag2[8]; +0x0008 31 8b 00 00 unsigned char frag3[8]; +0x0010 32 8b 00 00 unsigned char frag4[8]; +0x0018 32 8b 00 00 unsigned char frag5[8]; +0x0020 32 8b 00 00 unsigned char frag6[8]; +0x0028 32 8b 00 00 }; */ struct __midl_frag1634_t { unsigned char frag1[32]; /* +0x0000 2f 8b 00 00 */ unsigned char frag2[48]; /* +0x0020 47 8c 00 00 */ }; struct __midl_frag290_t { unsigned char frag1[16]; /* +0x0000 56 87 00 00 */ unsigned char frag2[16]; /* +0x0010 56 87 00 00 */ unsigned char frag3[16]; /* +0x0020 56 87 00 00 */ }; /* struct { unsigned char frag1[8]; +0x0000 32 8b 00 00 unsigned char frag2[16]; +0x0008 30 8b 00 00 unsigned char frag3[8]; +0x0018 31 8b 00 00 unsigned char frag4[8]; +0x0020 32 8b 00 00 unsigned char frag5[16]; +0x0028 30 8b 00 00 unsigned char frag6[8]; +0x0038 31 8b 00 00 unsigned char frag7[8]; +0x0040 32 8b 00 00 unsigned char frag8[16]; +0x0048 30 8b 00 00 unsigned char frag9[8]; +0x0058 32 8b 00 00 unsigned char frag10[8]; +0x0060 32 8b 00 00 }; */ struct __midl_frag280_t { unsigned char frag1[32]; /* +0x0000 2f 8b 00 00 */ unsigned char frag2[104]; /* +0x0020 61 8c 00 00 */ }; /* struct { unsigned char header[16]; +0x0000 8a 8a 00 00 unsigned char Vtbl[144]; +0x0010 7a 8c 00 00 }; */ /* struct { unsigned char header[16]; +0x0000 8a 8a 00 00 unsigned char Vtbl[136]; +0x0010 91 8c 00 00 }; */ struct __midl_frag763_t { unsigned char frag1[4]; /* +0x0000 75 00 00 00 */ unsigned char frag2[4]; /* +0x0004 6f 87 00 00 */ unsigned char frag3[4]; /* +0x0008 6f 87 00 00 */ unsigned char frag4[8]; /* +0x000c 70 87 00 00 */ unsigned char frag5[4]; /* +0x0014 e2 8a 00 00 */ unsigned char frag6[16]; /* +0x0018 e3 8a 00 00 */ unsigned char frag7[16]; /* +0x0028 e3 8a 00 00 */ }; /* struct { unsigned char header[16]; +0x0000 8a 8a 00 00 unsigned char Vtbl[184]; +0x0010 d6 8c 00 00 }; */ struct __midl_frag768_t { unsigned char frag1[16]; /* +0x0000 01 8b 00 00 */ unsigned char frag2[8]; /* +0x0010 02 8b 00 00 */ unsigned char frag3[24]; /* +0x0018 03 8b 00 00 */ unsigned char frag4[24]; /* +0x0030 03 8b 00 00 */ unsigned char frag5[8]; /* +0x0048 75 00 00 00 */ }; struct __midl_frag1842_t { unsigned char frag1[24]; /* +0x0000 f6 8c 00 00 */ unsigned char frag2[16]; /* +0x0018 67 87 00 00 */ }; struct _mega_MIDL_TYPE_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[7358]; /* +0x0002 3a 8d 00 00 */ }; /* struct { unsigned char frag1[8]; +0x0000 32 8b 00 00 unsigned char frag2[8]; +0x0008 31 8b 00 00 unsigned char frag3[8]; +0x0010 32 8b 00 00 unsigned char frag4[8]; +0x0018 32 8b 00 00 unsigned char frag5[8]; +0x0020 32 8b 00 00 unsigned char frag6[8]; +0x0028 31 8b 00 00 unsigned char frag7[8]; +0x0030 33 8b 00 00 unsigned char frag8[8]; +0x0038 32 8b 00 00 }; */ struct __midl_frag276_t { unsigned char frag1[32]; /* +0x0000 2f 8b 00 00 */ unsigned char frag2[64]; /* +0x0020 5a 8d 00 00 */ }; /* struct { unsigned char frag1[8]; +0x0000 32 8b 00 00 unsigned char frag2[8]; +0x0008 32 8b 00 00 unsigned char frag3[16]; +0x0010 30 8b 00 00 unsigned char frag4[16]; +0x0020 30 8b 00 00 unsigned char frag5[8]; +0x0030 32 8b 00 00 unsigned char frag6[8]; +0x0038 31 8b 00 00 unsigned char frag7[8]; +0x0040 33 8b 00 00 unsigned char frag8[8]; +0x0048 32 8b 00 00 }; */ struct __midl_frag1527_t { unsigned char frag1[32]; /* +0x0000 2f 8b 00 00 */ unsigned char frag2[80]; /* +0x0020 61 8d 00 00 */ }; struct __midl_frag794_t { unsigned char frag1[16]; /* +0x0000 56 87 00 00 */ unsigned char frag2[16]; /* +0x0010 56 87 00 00 */ }; struct __midl_frag1131_t { unsigned char frag1[24]; /* +0x0000 3c 58 00 00 */ unsigned char frag2[16]; /* +0x0018 4f 59 00 00 */ unsigned char frag3[16]; /* +0x0028 4f 59 00 00 */ unsigned char frag4[16]; /* +0x0038 4f 59 00 00 */ unsigned char frag5[16]; /* +0x0048 4f 59 00 00 */ unsigned char frag6[16]; /* +0x0058 4f 59 00 00 */ unsigned char frag7[16]; /* +0x0068 4f 59 00 00 */ unsigned char frag8[16]; /* +0x0078 4f 59 00 00 */ unsigned char frag9[16]; /* +0x0088 4f 59 00 00 */ unsigned char frag10[16]; /* +0x0098 4f 59 00 00 */ unsigned char frag11[16]; /* +0x00a8 4f 59 00 00 */ unsigned char frag12[16]; /* +0x00b8 4f 59 00 00 */ }; struct __midl_frag1757_t { unsigned char frag1[16]; /* +0x0000 62 87 00 00 */ unsigned char frag2[48]; /* +0x0010 a9 8b 00 00 */ unsigned char frag3[16]; /* +0x0040 67 87 00 00 */ }; /* struct { unsigned char frag1[8]; +0x0000 32 8b 00 00 unsigned char frag2[8]; +0x0008 32 8b 00 00 unsigned char frag3[8]; +0x0010 32 8b 00 00 unsigned char frag4[8]; +0x0018 32 8b 00 00 unsigned char frag5[8]; +0x0020 32 8b 00 00 unsigned char frag6[8]; +0x0028 32 8b 00 00 unsigned char frag7[8]; +0x0030 32 8b 00 00 unsigned char frag8[8]; +0x0038 31 8b 00 00 unsigned char frag9[8]; +0x0040 32 8b 00 00 unsigned char frag10[8]; +0x0048 32 8b 00 00 }; */ struct __midl_frag275_t { unsigned char frag1[32]; /* +0x0000 2f 8b 00 00 */ unsigned char frag2[80]; /* +0x0020 ab 8d 00 00 */ }; struct IRunningObjectTableVtbl { unsigned char QueryInterface[8]; /* +0x0000 c6 8d 00 00 */ unsigned char AddRef[8]; /* +0x0008 c9 8d 00 00 */ unsigned char Release[8]; /* +0x0010 c9 8d 00 00 */ unsigned char Register[8]; /* +0x0018 cc 8d 00 00 */ unsigned char Revoke[8]; /* +0x0020 cf 8d 00 00 */ unsigned char IsRunning[8]; /* +0x0028 d2 8d 00 00 */ unsigned char GetObjectW[8]; /* +0x0030 d5 8d 00 00 */ unsigned char NoteChangeTime[8]; /* +0x0038 d8 8d 00 00 */ unsigned char GetTimeOfLastChange[8]; /* +0x0040 db 8d 00 00 */ unsigned char EnumRunning[8]; /* +0x0048 de 8d 00 00 */ }; struct IConnectionPointContainerVtbl { unsigned char QueryInterface[8]; /* +0x0000 e5 8d 00 00 */ unsigned char AddRef[8]; /* +0x0008 e8 8d 00 00 */ unsigned char Release[8]; /* +0x0010 e8 8d 00 00 */ unsigned char EnumConnectionPoints[8]; /* +0x0018 ee 8d 00 00 */ unsigned char FindConnectionPoint[8]; /* +0x0020 f4 8d 00 00 */ }; struct IConnectionPointContainer { unsigned char lpVtbl[8]; /* +0x0000 f8 8d 00 00 */ }; struct _NDR64_BOGUS_ARRAY_HEADER_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Alignment; /* +0x0001 */ unsigned char Flags[1]; /* +0x0002 df 57 00 00 */ unsigned char NumberDims; /* +0x0003 */ unsigned char NumberElements[4]; /* +0x0004 75 00 00 00 */ unsigned char Element[8]; /* +0x0008 4f 19 00 00 */ }; struct IConnectionPointVtbl { unsigned char QueryInterface[8]; /* +0x0000 07 8e 00 00 */ unsigned char AddRef[8]; /* +0x0008 0a 8e 00 00 */ unsigned char Release[8]; /* +0x0010 0a 8e 00 00 */ unsigned char GetConnectionInterface[8]; /* +0x0018 0d 8e 00 00 */ unsigned char GetConnectionPointContainer[8]; /* +0x0020 11 8e 00 00 */ unsigned char Advise[8]; /* +0x0028 14 8e 00 00 */ unsigned char Unadvise[8]; /* +0x0030 17 8e 00 00 */ unsigned char EnumConnections[8]; /* +0x0038 1d 8e 00 00 */ }; struct _NDR64_PROC_FORMAT { unsigned char Flags[4]; /* +0x0000 75 00 00 00 */ unsigned char StackSize[4]; /* +0x0004 75 00 00 00 */ unsigned char ConstantClientBufferSize[4]; /* +0x0008 75 00 00 00 */ unsigned char ConstantServerBufferSize[4]; /* +0x000c 75 00 00 00 */ unsigned short RpcFlags; /* +0x0010 */ unsigned short FloatDoubleMask; /* +0x0012 */ unsigned short NumberOfParams; /* +0x0014 */ unsigned short ExtensionSize; /* +0x0016 */ }; struct IStorageVtbl { unsigned char QueryInterface[8]; /* +0x0000 24 8e 00 00 */ unsigned char AddRef[8]; /* +0x0008 26 8e 00 00 */ unsigned char Release[8]; /* +0x0010 26 8e 00 00 */ unsigned char CreateStream[8]; /* +0x0018 29 8e 00 00 */ unsigned char OpenStream[8]; /* +0x0020 2c 8e 00 00 */ unsigned char CreateStorage[8]; /* +0x0028 2f 8e 00 00 */ unsigned char OpenStorage[8]; /* +0x0030 32 8e 00 00 */ unsigned char CopyTo[8]; /* +0x0038 35 8e 00 00 */ unsigned char MoveElementTo[8]; /* +0x0040 38 8e 00 00 */ unsigned char Commit[8]; /* +0x0048 3b 8e 00 00 */ unsigned char Revert[8]; /* +0x0050 3d 8e 00 00 */ unsigned char EnumElements[8]; /* +0x0058 40 8e 00 00 */ unsigned char DestroyElement[8]; /* +0x0060 42 8e 00 00 */ unsigned char RenameElement[8]; /* +0x0068 45 8e 00 00 */ unsigned char SetElementTimes[8]; /* +0x0070 48 8e 00 00 */ unsigned char SetClass[8]; /* +0x0078 4b 8e 00 00 */ unsigned char SetStateBits[8]; /* +0x0080 4e 8e 00 00 */ unsigned char Stat[8]; /* +0x0088 51 8e 00 00 */ }; struct IEnumConnectionPointsVtbl { unsigned char QueryInterface[8]; /* +0x0000 56 8e 00 00 */ unsigned char AddRef[8]; /* +0x0008 59 8e 00 00 */ unsigned char Release[8]; /* +0x0010 59 8e 00 00 */ unsigned char Next[8]; /* +0x0018 5c 8e 00 00 */ unsigned char Skip[8]; /* +0x0020 5f 8e 00 00 */ unsigned char Reset[8]; /* +0x0028 61 8e 00 00 */ unsigned char Clone[8]; /* +0x0030 64 8e 00 00 */ }; struct IEnumUnknownVtbl { unsigned char QueryInterface[8]; /* +0x0000 69 8e 00 00 */ unsigned char AddRef[8]; /* +0x0008 6c 8e 00 00 */ unsigned char Release[8]; /* +0x0010 6c 8e 00 00 */ unsigned char Next[8]; /* +0x0018 6f 8e 00 00 */ unsigned char Skip[8]; /* +0x0020 72 8e 00 00 */ unsigned char Reset[8]; /* +0x0028 74 8e 00 00 */ unsigned char Clone[8]; /* +0x0030 77 8e 00 00 */ }; struct IOleInPlaceUIWindowVtbl { unsigned char QueryInterface[8]; /* +0x0000 7d 8e 00 00 */ unsigned char AddRef[8]; /* +0x0008 80 8e 00 00 */ unsigned char Release[8]; /* +0x0010 80 8e 00 00 */ unsigned char GetWindow[8]; /* +0x0018 83 8e 00 00 */ unsigned char ContextSensitiveHelp[8]; /* +0x0020 86 8e 00 00 */ unsigned char GetBorder[8]; /* +0x0028 89 8e 00 00 */ unsigned char RequestBorderSpace[8]; /* +0x0030 8c 8e 00 00 */ unsigned char SetBorderSpace[8]; /* +0x0038 8c 8e 00 00 */ unsigned char SetActiveObject[8]; /* +0x0040 8f 8e 00 00 */ }; struct IAdviseSink2Vtbl { unsigned char QueryInterface[8]; /* +0x0000 94 8e 00 00 */ unsigned char AddRef[8]; /* +0x0008 97 8e 00 00 */ unsigned char Release[8]; /* +0x0010 97 8e 00 00 */ unsigned char OnDataChange[8]; /* +0x0018 9a 8e 00 00 */ unsigned char OnViewChange[8]; /* +0x0020 9d 8e 00 00 */ unsigned char OnRename[8]; /* +0x0028 a0 8e 00 00 */ unsigned char OnSave[8]; /* +0x0030 a2 8e 00 00 */ unsigned char OnClose[8]; /* +0x0038 a2 8e 00 00 */ unsigned char OnLinkSrcChange[8]; /* +0x0040 a0 8e 00 00 */ }; struct IFillLockBytesVtbl { unsigned char QueryInterface[8]; /* +0x0000 a8 8e 00 00 */ unsigned char AddRef[8]; /* +0x0008 ab 8e 00 00 */ unsigned char Release[8]; /* +0x0010 ab 8e 00 00 */ unsigned char FillAppend[8]; /* +0x0018 ae 8e 00 00 */ unsigned char FillAt[8]; /* +0x0020 b1 8e 00 00 */ unsigned char SetFillSize[8]; /* +0x0028 b4 8e 00 00 */ unsigned char Terminate[8]; /* +0x0030 b7 8e 00 00 */ }; struct IEnumConnections { unsigned char lpVtbl[8]; /* +0x0000 bb 8e 00 00 */ }; struct IContinueVtbl { unsigned char QueryInterface[8]; /* +0x0000 c0 8e 00 00 */ unsigned char AddRef[8]; /* +0x0008 c3 8e 00 00 */ unsigned char Release[8]; /* +0x0010 c3 8e 00 00 */ unsigned char FContinue[8]; /* +0x0018 c5 8e 00 00 */ }; struct IViewObjectVtbl { unsigned char QueryInterface[8]; /* +0x0000 ca 8e 00 00 */ unsigned char AddRef[8]; /* +0x0008 cd 8e 00 00 */ unsigned char Release[8]; /* +0x0010 cd 8e 00 00 */ unsigned char Draw[8]; /* +0x0018 d0 8e 00 00 */ unsigned char GetColorSet[8]; /* +0x0020 d3 8e 00 00 */ unsigned char Freeze[8]; /* +0x0028 d6 8e 00 00 */ unsigned char Unfreeze[8]; /* +0x0030 d9 8e 00 00 */ unsigned char SetAdvise[8]; /* +0x0038 dc 8e 00 00 */ unsigned char GetAdvise[8]; /* +0x0040 df 8e 00 00 */ }; struct IBindCtxVtbl { unsigned char QueryInterface[8]; /* +0x0000 e4 8e 00 00 */ unsigned char AddRef[8]; /* +0x0008 e6 8e 00 00 */ unsigned char Release[8]; /* +0x0010 e6 8e 00 00 */ unsigned char RegisterObjectBound[8]; /* +0x0018 e9 8e 00 00 */ unsigned char RevokeObjectBound[8]; /* +0x0020 e9 8e 00 00 */ unsigned char ReleaseBoundObjects[8]; /* +0x0028 eb 8e 00 00 */ unsigned char SetBindOptions[8]; /* +0x0030 ee 8e 00 00 */ unsigned char GetBindOptions[8]; /* +0x0038 ee 8e 00 00 */ unsigned char GetRunningObjectTable[8]; /* +0x0040 f1 8e 00 00 */ unsigned char RegisterObjectParam[8]; /* +0x0048 f4 8e 00 00 */ unsigned char GetObjectParam[8]; /* +0x0050 f7 8e 00 00 */ unsigned char EnumObjectParam[8]; /* +0x0058 fa 8e 00 00 */ unsigned char RevokeObjectParam[8]; /* +0x0060 fd 8e 00 00 */ }; struct IEnumOLEVERBVtbl { unsigned char QueryInterface[8]; /* +0x0000 02 8f 00 00 */ unsigned char AddRef[8]; /* +0x0008 05 8f 00 00 */ unsigned char Release[8]; /* +0x0010 05 8f 00 00 */ unsigned char Next[8]; /* +0x0018 08 8f 00 00 */ unsigned char Skip[8]; /* +0x0020 0b 8f 00 00 */ unsigned char Reset[8]; /* +0x0028 0d 8f 00 00 */ unsigned char Clone[8]; /* +0x0030 10 8f 00 00 */ }; struct _NDR64_PARAM_FLAGS { /* unsigned char MustSize[0]; +0x0000 b1 2e 00 00 */ /* unsigned char MustFree[0]; +0x0000 b2 2e 00 00 */ /* unsigned char IsPipe[0]; +0x0000 b3 2e 00 00 */ /* unsigned char IsIn[0]; +0x0000 b4 2e 00 00 */ /* unsigned char IsOut[0]; +0x0000 b5 2e 00 00 */ /* unsigned char IsReturn[0]; +0x0000 b6 2e 00 00 */ /* unsigned char IsBasetype[0]; +0x0000 b7 2e 00 00 */ /* unsigned char IsByValue[0]; +0x0000 b8 2e 00 00 */ /* unsigned char IsSimpleRef[0]; +0x0000 b9 2e 00 00 */ /* unsigned char IsDontCallFreeInst[0]; +0x0000 ba 2e 00 00 */ /* unsigned char SaveForAsyncFinish[0]; +0x0000 bb 2e 00 00 */ /* unsigned char IsPartialIgnore[0]; +0x0000 bc 2e 00 00 */ /* unsigned char IsForceAllocate[0]; +0x0000 bd 2e 00 00 */ /* unsigned char Reserved[0]; +0x0000 14 8f 00 00 */ unsigned char UseCache[2]; /* +0x0000 5a 58 00 00 */ }; struct AsyncIAdviseSinkVtbl { unsigned char QueryInterface[8]; /* +0x0000 1a 8f 00 00 */ unsigned char AddRef[8]; /* +0x0008 1d 8f 00 00 */ unsigned char Release[8]; /* +0x0010 1d 8f 00 00 */ unsigned char Begin_OnDataChange[8]; /* +0x0018 20 8f 00 00 */ unsigned char Finish_OnDataChange[8]; /* +0x0020 22 8f 00 00 */ unsigned char Begin_OnViewChange[8]; /* +0x0028 25 8f 00 00 */ unsigned char Finish_OnViewChange[8]; /* +0x0030 22 8f 00 00 */ unsigned char Begin_OnRename[8]; /* +0x0038 28 8f 00 00 */ unsigned char Finish_OnRename[8]; /* +0x0040 22 8f 00 00 */ unsigned char Begin_OnSave[8]; /* +0x0048 22 8f 00 00 */ unsigned char Finish_OnSave[8]; /* +0x0050 22 8f 00 00 */ unsigned char Begin_OnClose[8]; /* +0x0058 22 8f 00 00 */ unsigned char Finish_OnClose[8]; /* +0x0060 22 8f 00 00 */ }; struct IOleCache2Vtbl { unsigned char QueryInterface[8]; /* +0x0000 2e 8f 00 00 */ unsigned char AddRef[8]; /* +0x0008 31 8f 00 00 */ unsigned char Release[8]; /* +0x0010 31 8f 00 00 */ unsigned char Cache[8]; /* +0x0018 34 8f 00 00 */ unsigned char Uncache[8]; /* +0x0020 37 8f 00 00 */ unsigned char EnumCache[8]; /* +0x0028 3a 8f 00 00 */ unsigned char InitCache[8]; /* +0x0030 3d 8f 00 00 */ unsigned char SetData[8]; /* +0x0038 40 8f 00 00 */ unsigned char UpdateCache[8]; /* +0x0040 43 8f 00 00 */ unsigned char DiscardCache[8]; /* +0x0048 37 8f 00 00 */ }; struct IEnumConnectionPoints { unsigned char lpVtbl[8]; /* +0x0000 47 8f 00 00 */ }; struct IEnumStringVtbl { unsigned char QueryInterface[8]; /* +0x0000 4c 8f 00 00 */ unsigned char AddRef[8]; /* +0x0008 4f 8f 00 00 */ unsigned char Release[8]; /* +0x0010 4f 8f 00 00 */ unsigned char Next[8]; /* +0x0018 52 8f 00 00 */ unsigned char Skip[8]; /* +0x0020 54 8f 00 00 */ unsigned char Reset[8]; /* +0x0028 56 8f 00 00 */ unsigned char Clone[8]; /* +0x0030 59 8f 00 00 */ }; struct ISequentialStreamVtbl { unsigned char QueryInterface[8]; /* +0x0000 5f 8f 00 00 */ unsigned char AddRef[8]; /* +0x0008 62 8f 00 00 */ unsigned char Release[8]; /* +0x0010 62 8f 00 00 */ unsigned char Read[8]; /* +0x0018 65 8f 00 00 */ unsigned char Write[8]; /* +0x0020 68 8f 00 00 */ }; struct _NDR64_PARAM_FORMAT { unsigned char Type[8]; /* +0x0000 4f 19 00 00 */ unsigned char Attributes[2]; /* +0x0008 6b 8f 00 00 */ unsigned short Reserved; /* +0x000a */ unsigned char StackOffset[4]; /* +0x000c 75 00 00 00 */ }; struct tagCONNECTDATA { unsigned char pUnk[8]; /* +0x0000 93 17 00 00 */ unsigned long dwCookie; /* +0x0008 */ }; struct ILockBytesVtbl { unsigned char QueryInterface[8]; /* +0x0000 72 8f 00 00 */ unsigned char AddRef[8]; /* +0x0008 74 8f 00 00 */ unsigned char Release[8]; /* +0x0010 74 8f 00 00 */ unsigned char ReadAt[8]; /* +0x0018 77 8f 00 00 */ unsigned char WriteAt[8]; /* +0x0020 7a 8f 00 00 */ unsigned char Flush[8]; /* +0x0028 7c 8f 00 00 */ unsigned char SetSize[8]; /* +0x0030 7f 8f 00 00 */ unsigned char LockRegion[8]; /* +0x0038 82 8f 00 00 */ unsigned char UnlockRegion[8]; /* +0x0040 82 8f 00 00 */ unsigned char Stat[8]; /* +0x0048 85 8f 00 00 */ }; struct IRunnableObjectVtbl { unsigned char QueryInterface[8]; /* +0x0000 8a 8f 00 00 */ unsigned char AddRef[8]; /* +0x0008 8d 8f 00 00 */ unsigned char Release[8]; /* +0x0010 8d 8f 00 00 */ unsigned char GetRunningClass[8]; /* +0x0018 90 8f 00 00 */ unsigned char Run[8]; /* +0x0020 93 8f 00 00 */ unsigned char IsRunning[8]; /* +0x0028 95 8f 00 00 */ unsigned char LockRunning[8]; /* +0x0030 98 8f 00 00 */ unsigned char SetContainedObject[8]; /* +0x0038 9b 8f 00 00 */ }; struct IEnumSTATDATAVtbl { unsigned char QueryInterface[8]; /* +0x0000 a0 8f 00 00 */ unsigned char AddRef[8]; /* +0x0008 a3 8f 00 00 */ unsigned char Release[8]; /* +0x0010 a3 8f 00 00 */ unsigned char Next[8]; /* +0x0018 a6 8f 00 00 */ unsigned char Skip[8]; /* +0x0020 a9 8f 00 00 */ unsigned char Reset[8]; /* +0x0028 ab 8f 00 00 */ unsigned char Clone[8]; /* +0x0030 ae 8f 00 00 */ }; struct IConnectionPoint { unsigned char lpVtbl[8]; /* +0x0000 b2 8f 00 00 */ }; struct IEnumSTATSTGVtbl { unsigned char QueryInterface[8]; /* +0x0000 b7 8f 00 00 */ unsigned char AddRef[8]; /* +0x0008 ba 8f 00 00 */ unsigned char Release[8]; /* +0x0010 ba 8f 00 00 */ unsigned char Next[8]; /* +0x0018 bd 8f 00 00 */ unsigned char Skip[8]; /* +0x0020 c0 8f 00 00 */ unsigned char Reset[8]; /* +0x0028 c2 8f 00 00 */ unsigned char Clone[8]; /* +0x0030 c5 8f 00 00 */ }; struct tagCInterfaceProxyVtbl { unsigned char header[16]; /* +0x0000 8a 8a 00 00 */ /* unsigned char Vtbl[0]; +0x0010 8b 8a 00 00 */ }; struct IClassFactoryVtbl { unsigned char QueryInterface[8]; /* +0x0000 cf 8f 00 00 */ unsigned char AddRef[8]; /* +0x0008 d1 8f 00 00 */ unsigned char Release[8]; /* +0x0010 d1 8f 00 00 */ unsigned char CreateInstance[8]; /* +0x0018 d4 8f 00 00 */ unsigned char LockServer[8]; /* +0x0020 d7 8f 00 00 */ }; struct IDataObjectVtbl { unsigned char QueryInterface[8]; /* +0x0000 dc 8f 00 00 */ unsigned char AddRef[8]; /* +0x0008 de 8f 00 00 */ unsigned char Release[8]; /* +0x0010 de 8f 00 00 */ unsigned char GetData[8]; /* +0x0018 e1 8f 00 00 */ unsigned char GetDataHere[8]; /* +0x0020 e1 8f 00 00 */ unsigned char QueryGetData[8]; /* +0x0028 e4 8f 00 00 */ unsigned char GetCanonicalFormatEtc[8]; /* +0x0030 e7 8f 00 00 */ unsigned char SetData[8]; /* +0x0038 ea 8f 00 00 */ unsigned char EnumFormatEtc[8]; /* +0x0040 ed 8f 00 00 */ unsigned char DAdvise[8]; /* +0x0048 ef 8f 00 00 */ unsigned char DUnadvise[8]; /* +0x0050 f2 8f 00 00 */ unsigned char EnumDAdvise[8]; /* +0x0058 f5 8f 00 00 */ }; struct IAdviseSinkVtbl { unsigned char QueryInterface[8]; /* +0x0000 fc 8f 00 00 */ unsigned char AddRef[8]; /* +0x0008 ff 8f 00 00 */ unsigned char Release[8]; /* +0x0010 ff 8f 00 00 */ unsigned char OnDataChange[8]; /* +0x0018 02 90 00 00 */ unsigned char OnViewChange[8]; /* +0x0020 05 90 00 00 */ unsigned char OnRename[8]; /* +0x0028 08 90 00 00 */ unsigned char OnSave[8]; /* +0x0030 0a 90 00 00 */ unsigned char OnClose[8]; /* +0x0038 0a 90 00 00 */ }; struct IEnumConnectionsVtbl { unsigned char QueryInterface[8]; /* +0x0000 10 90 00 00 */ unsigned char AddRef[8]; /* +0x0008 13 90 00 00 */ unsigned char Release[8]; /* +0x0010 13 90 00 00 */ unsigned char Next[8]; /* +0x0018 16 90 00 00 */ unsigned char Skip[8]; /* +0x0020 19 90 00 00 */ unsigned char Reset[8]; /* +0x0028 1b 90 00 00 */ unsigned char Clone[8]; /* +0x0030 1e 90 00 00 */ }; struct AsyncIAdviseSink2Vtbl { unsigned char QueryInterface[8]; /* +0x0000 24 90 00 00 */ unsigned char AddRef[8]; /* +0x0008 27 90 00 00 */ unsigned char Release[8]; /* +0x0010 27 90 00 00 */ unsigned char Begin_OnDataChange[8]; /* +0x0018 2a 90 00 00 */ unsigned char Finish_OnDataChange[8]; /* +0x0020 2c 90 00 00 */ unsigned char Begin_OnViewChange[8]; /* +0x0028 2f 90 00 00 */ unsigned char Finish_OnViewChange[8]; /* +0x0030 2c 90 00 00 */ unsigned char Begin_OnRename[8]; /* +0x0038 32 90 00 00 */ unsigned char Finish_OnRename[8]; /* +0x0040 2c 90 00 00 */ unsigned char Begin_OnSave[8]; /* +0x0048 2c 90 00 00 */ unsigned char Finish_OnSave[8]; /* +0x0050 2c 90 00 00 */ unsigned char Begin_OnClose[8]; /* +0x0058 2c 90 00 00 */ unsigned char Finish_OnClose[8]; /* +0x0060 2c 90 00 00 */ unsigned char Begin_OnLinkSrcChange[8]; /* +0x0068 32 90 00 00 */ unsigned char Finish_OnLinkSrcChange[8]; /* +0x0070 2c 90 00 00 */ }; struct IStreamVtbl { unsigned char QueryInterface[8]; /* +0x0000 37 90 00 00 */ unsigned char AddRef[8]; /* +0x0008 39 90 00 00 */ unsigned char Release[8]; /* +0x0010 39 90 00 00 */ unsigned char Read[8]; /* +0x0018 3c 90 00 00 */ unsigned char Write[8]; /* +0x0020 3f 90 00 00 */ unsigned char Seek[8]; /* +0x0028 42 90 00 00 */ unsigned char SetSize[8]; /* +0x0030 45 90 00 00 */ unsigned char CopyTo[8]; /* +0x0038 48 90 00 00 */ unsigned char Commit[8]; /* +0x0040 4a 90 00 00 */ unsigned char Revert[8]; /* +0x0048 92 66 00 00 */ unsigned char LockRegion[8]; /* +0x0050 4d 90 00 00 */ unsigned char UnlockRegion[8]; /* +0x0058 4d 90 00 00 */ unsigned char Stat[8]; /* +0x0060 50 90 00 00 */ unsigned char Clone[8]; /* +0x0068 53 90 00 00 */ }; struct IEnumMonikerVtbl { unsigned char QueryInterface[8]; /* +0x0000 58 90 00 00 */ unsigned char AddRef[8]; /* +0x0008 5b 90 00 00 */ unsigned char Release[8]; /* +0x0010 5b 90 00 00 */ unsigned char Next[8]; /* +0x0018 5e 90 00 00 */ unsigned char Skip[8]; /* +0x0020 61 90 00 00 */ unsigned char Reset[8]; /* +0x0028 63 90 00 00 */ unsigned char Clone[8]; /* +0x0030 66 90 00 00 */ }; struct IEnumFORMATETCVtbl { unsigned char QueryInterface[8]; /* +0x0000 6b 90 00 00 */ unsigned char AddRef[8]; /* +0x0008 6e 90 00 00 */ unsigned char Release[8]; /* +0x0010 6e 90 00 00 */ unsigned char Next[8]; /* +0x0018 71 90 00 00 */ unsigned char Skip[8]; /* +0x0020 74 90 00 00 */ unsigned char Reset[8]; /* +0x0028 76 90 00 00 */ unsigned char Clone[8]; /* +0x0030 79 90 00 00 */ }; struct IMonikerVtbl { unsigned char QueryInterface[8]; /* +0x0000 7e 90 00 00 */ unsigned char AddRef[8]; /* +0x0008 80 90 00 00 */ unsigned char Release[8]; /* +0x0010 80 90 00 00 */ unsigned char GetClassID[8]; /* +0x0018 83 90 00 00 */ unsigned char IsDirty[8]; /* +0x0020 85 90 00 00 */ unsigned char Load[8]; /* +0x0028 88 90 00 00 */ unsigned char Save[8]; /* +0x0030 8b 90 00 00 */ unsigned char GetSizeMax[8]; /* +0x0038 8e 90 00 00 */ unsigned char BindToObject[8]; /* +0x0040 91 90 00 00 */ unsigned char BindToStorage[8]; /* +0x0048 91 90 00 00 */ unsigned char Reduce[8]; /* +0x0050 94 90 00 00 */ unsigned char ComposeWith[8]; /* +0x0058 97 90 00 00 */ unsigned char Enum[8]; /* +0x0060 9a 90 00 00 */ unsigned char IsEqual[8]; /* +0x0068 9d 90 00 00 */ unsigned char Hash[8]; /* +0x0070 a0 90 00 00 */ unsigned char IsRunning[8]; /* +0x0078 a3 90 00 00 */ unsigned char GetTimeOfLastChange[8]; /* +0x0080 a6 90 00 00 */ unsigned char Inverse[8]; /* +0x0088 a8 90 00 00 */ unsigned char CommonPrefixWith[8]; /* +0x0090 ab 90 00 00 */ unsigned char RelativePathTo[8]; /* +0x0098 ab 90 00 00 */ unsigned char GetDisplayName[8]; /* +0x00a0 ae 90 00 00 */ unsigned char ParseDisplayName[8]; /* +0x00a8 b1 90 00 00 */ unsigned char IsSystemMoniker[8]; /* +0x00b0 a0 90 00 00 */ }; struct IOleInPlaceActiveObjectVtbl { unsigned char QueryInterface[8]; /* +0x0000 b6 90 00 00 */ unsigned char AddRef[8]; /* +0x0008 b8 90 00 00 */ unsigned char Release[8]; /* +0x0010 b8 90 00 00 */ unsigned char GetWindow[8]; /* +0x0018 bb 90 00 00 */ unsigned char ContextSensitiveHelp[8]; /* +0x0020 be 90 00 00 */ unsigned char TranslateAcceleratorW[8]; /* +0x0028 c1 90 00 00 */ unsigned char OnFrameWindowActivate[8]; /* +0x0030 be 90 00 00 */ unsigned char OnDocWindowActivate[8]; /* +0x0038 be 90 00 00 */ unsigned char ResizeBorder[8]; /* +0x0040 c4 90 00 00 */ unsigned char EnableModeless[8]; /* +0x0048 be 90 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 21 90 00 00 */ unsigned char pmk[8]; /* +0x0008 4d 20 00 00 */ unsigned char _RetVal[8]; /* +0x0010 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 21 90 00 00 */ unsigned char _RetVal[8]; /* +0x0008 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 17 8f 00 00 */ unsigned char _RetVal[8]; /* +0x0008 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 17 8f 00 00 */ unsigned char pFormatetc[8]; /* +0x0008 33 18 00 00 */ unsigned char pStgmed[8]; /* +0x0010 9c 2d 00 00 */ unsigned char _RetVal[8]; /* +0x0018 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 17 8f 00 00 */ unsigned char pmk[8]; /* +0x0008 4d 20 00 00 */ unsigned char _RetVal[8]; /* +0x0010 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 17 8f 00 00 */ unsigned long dwAspect; /* +0x0008 */ unsigned char Pad0[4]; /* +0x000c e0 90 00 00 */ long lindex; /* +0x0010 */ unsigned char Pad1[4]; /* +0x0014 e0 90 00 00 */ unsigned char _RetVal[8]; /* +0x0018 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 db 40 00 00 */ unsigned char pmk[8]; /* +0x0008 4d 20 00 00 */ unsigned char _RetVal[8]; /* +0x0010 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 35 18 00 00 */ unsigned char _RetVal[8]; /* +0x0008 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 35 18 00 00 */ unsigned char pFormatetc[8]; /* +0x0008 33 18 00 00 */ unsigned char pStgmed[8]; /* +0x0010 9c 2d 00 00 */ unsigned char _RetVal[8]; /* +0x0018 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 35 18 00 00 */ unsigned char pmk[8]; /* +0x0008 4d 20 00 00 */ unsigned char _RetVal[8]; /* +0x0010 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 35 18 00 00 */ unsigned long dwAspect; /* +0x0008 */ unsigned char Pad0[4]; /* +0x000c e0 90 00 00 */ long lindex; /* +0x0010 */ unsigned char Pad1[4]; /* +0x0014 e0 90 00 00 */ unsigned char _RetVal[8]; /* +0x0018 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 72 1d 00 00 */ unsigned char pbindopts[8]; /* +0x0008 ac 41 00 00 */ unsigned char _RetVal[8]; /* +0x0010 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 17 2a 00 00 */ unsigned char riid[8]; /* +0x0008 67 16 00 00 */ unsigned char ppvObject[8]; /* +0x0010 4e 22 00 00 */ unsigned char _RetVal[8]; /* +0x0018 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 17 2a 00 00 */ unsigned char fLock[4]; /* +0x0008 74 00 00 00 */ unsigned char Pad0[4]; /* +0x000c e0 90 00 00 */ unsigned char _RetVal[8]; /* +0x0010 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 dc 14 00 00 */ unsigned char pformatetc[8]; /* +0x0008 33 18 00 00 */ unsigned char pRemoteMedium[8]; /* +0x0010 9c 2d 00 00 */ unsigned char _RetVal[8]; /* +0x0018 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 dc 14 00 00 */ unsigned char pformatetcIn[8]; /* +0x0008 33 18 00 00 */ unsigned char pRemoteMedium[8]; /* +0x0010 9c 2d 00 00 */ unsigned char _RetVal[8]; /* +0x0018 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 dc 14 00 00 */ unsigned char pformatetc[8]; /* +0x0008 33 18 00 00 */ unsigned char pmedium[8]; /* +0x0010 23 91 00 00 */ unsigned char fRelease[4]; /* +0x0018 74 00 00 00 */ unsigned char Pad0[4]; /* +0x001c e0 90 00 00 */ unsigned char _RetVal[8]; /* +0x0020 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 ea 8d 00 00 */ unsigned long cConnections; /* +0x0008 */ unsigned char Pad0[4]; /* +0x000c e0 90 00 00 */ unsigned char rgpcn[8]; /* +0x0010 f1 8d 00 00 */ unsigned long *lpcFetched; /* +0x0018 */ unsigned char _RetVal[8]; /* +0x0020 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 19 8e 00 00 */ unsigned long cConnections; /* +0x0008 */ unsigned char Pad0[4]; /* +0x000c e0 90 00 00 */ unsigned char rgcd[8]; /* +0x0010 ca 8f 00 00 */ unsigned long *lpcFetched; /* +0x0018 */ unsigned char _RetVal[8]; /* +0x0020 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 82 48 00 00 */ unsigned long celt; /* +0x0008 */ unsigned char Pad0[4]; /* +0x000c e0 90 00 00 */ unsigned char rgelt[8]; /* +0x0010 33 18 00 00 */ unsigned long *pceltFetched; /* +0x0018 */ unsigned char _RetVal[8]; /* +0x0020 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 9b 2e 00 00 */ unsigned long celt; /* +0x0008 */ unsigned char Pad0[4]; /* +0x000c e0 90 00 00 */ unsigned char rgelt[8]; /* +0x0010 4e 20 00 00 */ unsigned long *pceltFetched; /* +0x0018 */ unsigned char _RetVal[8]; /* +0x0020 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 ce 3e 00 00 */ unsigned long celt; /* +0x0008 */ unsigned char Pad0[4]; /* +0x000c e0 90 00 00 */ unsigned char rgelt[8]; /* +0x0010 ca 15 00 00 */ unsigned long *pceltFetched; /* +0x0018 */ unsigned char _RetVal[8]; /* +0x0020 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 3a 18 00 00 */ unsigned long celt; /* +0x0008 */ unsigned char Pad0[4]; /* +0x000c e0 90 00 00 */ unsigned char rgelt[8]; /* +0x0010 c7 4f 00 00 */ unsigned long *pceltFetched; /* +0x0018 */ unsigned char _RetVal[8]; /* +0x0020 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 ce 3b 00 00 */ unsigned long celt; /* +0x0008 */ unsigned char Pad0[4]; /* +0x000c e0 90 00 00 */ unsigned char rgelt[8]; /* +0x0010 58 42 00 00 */ unsigned long *pceltFetched; /* +0x0018 */ unsigned char _RetVal[8]; /* +0x0020 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 b1 2d 00 00 */ unsigned long celt; /* +0x0008 */ unsigned char Pad0[4]; /* +0x000c e0 90 00 00 */ unsigned char rgelt[8]; /* +0x0010 a1 47 00 00 */ unsigned long *pceltFetched; /* +0x0018 */ unsigned char _RetVal[8]; /* +0x0020 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 40 29 00 00 */ unsigned long celt; /* +0x0008 */ unsigned char Pad0[4]; /* +0x000c e0 90 00 00 */ unsigned char rgelt[8]; /* +0x0010 4e 22 00 00 */ unsigned long *pceltFetched; /* +0x0018 */ unsigned char _RetVal[8]; /* +0x0020 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 a5 8e 00 00 */ unsigned char pv[8]; /* +0x0008 4b 19 00 00 */ unsigned long cb; /* +0x0010 */ unsigned char Pad0[4]; /* +0x0014 e0 90 00 00 */ unsigned long *pcbWritten; /* +0x0018 */ unsigned char _RetVal[8]; /* +0x0020 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 a5 8e 00 00 */ unsigned char ulOffset[8]; /* +0x0008 3e 23 00 00 */ unsigned char pv[8]; /* +0x0010 4b 19 00 00 */ unsigned long cb; /* +0x0018 */ unsigned char Pad0[4]; /* +0x001c e0 90 00 00 */ unsigned long *pcbWritten; /* +0x0020 */ unsigned char _RetVal[8]; /* +0x0028 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 1a 3f 00 00 */ unsigned char ulOffset[8]; /* +0x0008 3e 23 00 00 */ unsigned char *pv; /* +0x0010 */ unsigned long cb; /* +0x0018 */ unsigned char Pad0[4]; /* +0x001c e0 90 00 00 */ unsigned long *pcbRead; /* +0x0020 */ unsigned char _RetVal[8]; /* +0x0028 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 1a 3f 00 00 */ unsigned char ulOffset[8]; /* +0x0008 3e 23 00 00 */ unsigned char pv[8]; /* +0x0010 4b 19 00 00 */ unsigned long cb; /* +0x0018 */ unsigned char Pad0[4]; /* +0x001c e0 90 00 00 */ unsigned long *pcbWritten; /* +0x0020 */ unsigned char _RetVal[8]; /* +0x0028 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 4d 20 00 00 */ unsigned char pbc[8]; /* +0x0008 72 1d 00 00 */ unsigned char pmkToLeft[8]; /* +0x0010 4d 20 00 00 */ unsigned char riidResult[8]; /* +0x0018 67 16 00 00 */ unsigned char ppvResult[8]; /* +0x0020 4e 22 00 00 */ unsigned char _RetVal[8]; /* +0x0028 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 4d 20 00 00 */ unsigned char pbc[8]; /* +0x0008 72 1d 00 00 */ unsigned char pmkToLeft[8]; /* +0x0010 4d 20 00 00 */ unsigned char riid[8]; /* +0x0018 67 16 00 00 */ unsigned char ppvObj[8]; /* +0x0020 4e 22 00 00 */ unsigned char _RetVal[8]; /* +0x0028 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 7c 4b 00 00 */ unsigned char pDataObject[8]; /* +0x0008 dc 14 00 00 */ unsigned long grfUpdf; /* +0x0010 */ unsigned char Pad0[4]; /* +0x0014 e0 90 00 00 */ long long pReserved; /* +0x0018 */ unsigned char _RetVal[8]; /* +0x0020 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 2b 33 00 00 */ unsigned char prcBorder[8]; /* +0x0008 d9 1e 00 00 */ unsigned char riid[8]; /* +0x0010 67 16 00 00 */ unsigned char pUIWindow[8]; /* +0x0018 db 1e 00 00 */ unsigned char fFrameWindow[4]; /* +0x0020 74 00 00 00 */ unsigned char Pad0[4]; /* +0x0024 e0 90 00 00 */ unsigned char _RetVal[8]; /* +0x0028 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 2b 33 00 00 */ unsigned char _RetVal[8]; /* +0x0008 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 4d 53 00 00 */ unsigned char _RetVal[8]; /* +0x0008 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 5c 8f 00 00 */ unsigned char *pv; /* +0x0008 */ unsigned long cb; /* +0x0010 */ unsigned char Pad0[4]; /* +0x0014 e0 90 00 00 */ unsigned long *pcbRead; /* +0x0018 */ unsigned char _RetVal[8]; /* +0x0020 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 5c 8f 00 00 */ unsigned char pv[8]; /* +0x0008 4b 19 00 00 */ unsigned long cb; /* +0x0010 */ unsigned char Pad0[4]; /* +0x0014 e0 90 00 00 */ unsigned long *pcbWritten; /* +0x0018 */ unsigned char _RetVal[8]; /* +0x0020 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 19 16 00 00 */ unsigned long ciidExclude; /* +0x0008 */ unsigned char Pad0[4]; /* +0x000c e0 90 00 00 */ unsigned char rgiidExclude[8]; /* +0x0010 67 16 00 00 */ unsigned char snbExclude[8]; /* +0x0018 a1 47 00 00 */ unsigned char pstgDest[8]; /* +0x0020 19 16 00 00 */ unsigned char _RetVal[8]; /* +0x0028 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 19 16 00 00 */ unsigned long reserved1; /* +0x0008 */ unsigned char Pad0[4]; /* +0x000c e0 90 00 00 */ unsigned long cbReserved2; /* +0x0010 */ unsigned char Pad1[4]; /* +0x0014 e0 90 00 00 */ unsigned char *reserved2; /* +0x0018 */ unsigned long reserved3; /* +0x0020 */ unsigned char Pad2[4]; /* +0x0024 e0 90 00 00 */ unsigned char ppenum[8]; /* +0x0028 87 5c 00 00 */ unsigned char _RetVal[8]; /* +0x0030 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 19 16 00 00 */ unsigned char pwcsName[8]; /* +0x0008 cb 13 00 00 */ unsigned long cbReserved1; /* +0x0010 */ unsigned char Pad0[4]; /* +0x0014 e0 90 00 00 */ unsigned char *reserved1; /* +0x0018 */ unsigned long grfMode; /* +0x0020 */ unsigned char Pad1[4]; /* +0x0024 e0 90 00 00 */ unsigned long reserved2; /* +0x0028 */ unsigned char Pad2[4]; /* +0x002c e0 90 00 00 */ unsigned char ppstm[8]; /* +0x0030 24 5e 00 00 */ unsigned char _RetVal[8]; /* +0x0038 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 20 27 00 00 */ unsigned char pstm[8]; /* +0x0008 20 27 00 00 */ unsigned char cb[8]; /* +0x0010 3e 23 00 00 */ unsigned char pcbRead[8]; /* +0x0018 09 47 00 00 */ unsigned char pcbWritten[8]; /* +0x0020 09 47 00 00 */ unsigned char _RetVal[8]; /* +0x0028 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 20 27 00 00 */ unsigned char dlibMove[8]; /* +0x0008 43 13 00 00 */ unsigned long dwOrigin; /* +0x0010 */ unsigned char Pad0[4]; /* +0x0014 e0 90 00 00 */ unsigned char plibNewPosition[8]; /* +0x0018 09 47 00 00 */ unsigned char _RetVal[8]; /* +0x0020 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 f0 22 00 00 */ unsigned long dwDrawAspect; /* +0x0008 */ unsigned char Pad0[4]; /* +0x000c e0 90 00 00 */ long lindex; /* +0x0010 */ unsigned char Pad1[4]; /* +0x0014 e0 90 00 00 */ unsigned long long pvAspect; /* +0x0018 */ unsigned char ptd[8]; /* +0x0020 88 35 00 00 */ unsigned char hdcTargetDev[8]; /* +0x0028 24 1f 00 00 */ unsigned char hdcDraw[8]; /* +0x0030 24 1f 00 00 */ unsigned char lprcBounds[8]; /* +0x0038 03 22 00 00 */ unsigned char lprcWBounds[8]; /* +0x0040 03 22 00 00 */ unsigned char pContinue[8]; /* +0x0048 8c 89 00 00 */ unsigned char _RetVal[8]; /* +0x0050 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 f0 22 00 00 */ unsigned long dwDrawAspect; /* +0x0008 */ unsigned char Pad0[4]; /* +0x000c e0 90 00 00 */ long lindex; /* +0x0010 */ unsigned char Pad1[4]; /* +0x0014 e0 90 00 00 */ unsigned long long pvAspect; /* +0x0018 */ unsigned long *pdwFreeze; /* +0x0020 */ unsigned char _RetVal[8]; /* +0x0028 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 f0 22 00 00 */ unsigned long *pAspects; /* +0x0008 */ unsigned long *pAdvf; /* +0x0010 */ unsigned char ppAdvSink[8]; /* +0x0018 97 35 00 00 */ unsigned char _RetVal[8]; /* +0x0020 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 f0 22 00 00 */ unsigned long dwDrawAspect; /* +0x0008 */ unsigned char Pad0[4]; /* +0x000c e0 90 00 00 */ long lindex; /* +0x0010 */ unsigned char Pad1[4]; /* +0x0014 e0 90 00 00 */ unsigned long long pvAspect; /* +0x0018 */ unsigned char ptd[8]; /* +0x0020 88 35 00 00 */ unsigned long long hicTargetDev; /* +0x0028 */ unsigned char ppColorSet[8]; /* +0x0030 8f 35 00 00 */ unsigned char _RetVal[8]; /* +0x0038 08 00 00 00 */ }; struct _prop_MIDL_PROC_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[1034]; /* +0x0002 ce 91 00 00 */ }; struct _prop_MIDL_TYPE_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[3408]; /* +0x0002 d6 91 00 00 */ }; /* struct { unsigned char frag1[8]; +0x0000 32 8b 00 00 unsigned char frag2[8]; +0x0008 31 8b 00 00 unsigned char frag3[8]; +0x0010 32 8b 00 00 unsigned char frag4[8]; +0x0018 32 8b 00 00 }; */ struct __midl_frag296_t { unsigned char frag1[32]; /* +0x0000 2f 8b 00 00 */ unsigned char frag2[32]; /* +0x0020 dc 91 00 00 */ }; /* struct { unsigned char frag1[8]; +0x0000 13 92 00 00 unsigned char frag2[16]; +0x0008 30 8b 00 00 unsigned char frag3[8]; +0x0018 32 8b 00 00 }; */ struct __midl_frag103_t { unsigned char frag1[32]; /* +0x0000 2f 8b 00 00 */ unsigned char frag2[32]; /* +0x0020 15 92 00 00 */ }; struct _prop_MIDL_EXPR_FORMAT_STRING { long Pad; /* +0x0000 */ unsigned char Format[28]; /* +0x0004 18 92 00 00 */ }; /* struct { unsigned char frag1[8]; +0x0000 32 8b 00 00 unsigned char frag2[8]; +0x0008 31 8b 00 00 unsigned char frag3[8]; +0x0010 32 8b 00 00 unsigned char frag4[8]; +0x0018 32 8b 00 00 unsigned char frag5[8]; +0x0020 32 8b 00 00 unsigned char frag6[8]; +0x0028 32 8b 00 00 unsigned char frag7[16]; +0x0030 30 8b 00 00 unsigned char frag8[8]; +0x0040 32 8b 00 00 }; */ struct __midl_frag187_t { unsigned char frag1[32]; /* +0x0000 2f 8b 00 00 */ unsigned char frag2[72]; /* +0x0020 55 92 00 00 */ }; struct __midl_frag80_t { unsigned char frag1[16]; /* +0x0000 01 8b 00 00 */ unsigned char frag2[8]; /* +0x0010 02 8b 00 00 */ unsigned char frag3[24]; /* +0x0018 03 8b 00 00 */ unsigned char frag4[24]; /* +0x0030 03 8b 00 00 */ unsigned char frag5[24]; /* +0x0048 03 8b 00 00 */ unsigned char frag6[24]; /* +0x0060 03 8b 00 00 */ unsigned char frag7[24]; /* +0x0078 03 8b 00 00 */ unsigned char frag8[24]; /* +0x0090 03 8b 00 00 */ unsigned char frag9[24]; /* +0x00a8 03 8b 00 00 */ unsigned char frag10[24]; /* +0x00c0 03 8b 00 00 */ unsigned char frag11[24]; /* +0x00d8 03 8b 00 00 */ unsigned char frag12[24]; /* +0x00f0 03 8b 00 00 */ unsigned char frag13[8]; /* +0x0108 75 00 00 00 */ }; /* struct { unsigned char frag1[8]; +0x0000 13 92 00 00 unsigned char frag2[8]; +0x0008 31 8b 00 00 unsigned char frag3[16]; +0x0010 30 8b 00 00 unsigned char frag4[8]; +0x0020 32 8b 00 00 }; */ struct __midl_frag76_t { unsigned char frag1[40]; /* +0x0000 82 92 00 00 */ unsigned char frag2[40]; /* +0x0028 84 92 00 00 */ }; /* struct { unsigned char frag1[8]; +0x0000 32 8b 00 00 unsigned char frag2[8]; +0x0008 31 8b 00 00 unsigned char frag3[16]; +0x0010 30 8b 00 00 unsigned char frag4[8]; +0x0020 33 8b 00 00 unsigned char frag5[8]; +0x0028 32 8b 00 00 }; */ struct __midl_frag6_t { unsigned char frag1[32]; /* +0x0000 2f 8b 00 00 */ unsigned char frag2[48]; /* +0x0020 8b 92 00 00 */ }; struct __midl_frag104_t { unsigned char frag1[24]; /* +0x0000 b1 92 00 00 */ unsigned char frag2[8]; /* +0x0018 02 8b 00 00 */ unsigned char frag3[24]; /* +0x0020 03 8b 00 00 */ unsigned char frag4[24]; /* +0x0038 03 8b 00 00 */ unsigned char frag5[24]; /* +0x0050 03 8b 00 00 */ unsigned char frag6[24]; /* +0x0068 03 8b 00 00 */ unsigned char frag7[24]; /* +0x0080 03 8b 00 00 */ unsigned char frag8[24]; /* +0x0098 03 8b 00 00 */ unsigned char frag9[24]; /* +0x00b0 03 8b 00 00 */ unsigned char frag10[24]; /* +0x00c8 03 8b 00 00 */ unsigned char frag11[24]; /* +0x00e0 03 8b 00 00 */ unsigned char frag12[24]; /* +0x00f8 03 8b 00 00 */ unsigned char frag13[24]; /* +0x0110 03 8b 00 00 */ unsigned char frag14[24]; /* +0x0128 03 8b 00 00 */ unsigned char frag15[24]; /* +0x0140 03 8b 00 00 */ unsigned char frag16[24]; /* +0x0158 03 8b 00 00 */ unsigned char frag17[24]; /* +0x0170 03 8b 00 00 */ unsigned char frag18[24]; /* +0x0188 03 8b 00 00 */ unsigned char frag19[24]; /* +0x01a0 03 8b 00 00 */ unsigned char frag20[24]; /* +0x01b8 03 8b 00 00 */ unsigned char frag21[24]; /* +0x01d0 03 8b 00 00 */ unsigned char frag22[24]; /* +0x01e8 03 8b 00 00 */ unsigned char frag23[24]; /* +0x0200 03 8b 00 00 */ unsigned char frag24[24]; /* +0x0218 03 8b 00 00 */ unsigned char frag25[24]; /* +0x0230 03 8b 00 00 */ unsigned char frag26[24]; /* +0x0248 03 8b 00 00 */ unsigned char frag27[24]; /* +0x0260 03 8b 00 00 */ unsigned char frag28[24]; /* +0x0278 03 8b 00 00 */ unsigned char frag29[24]; /* +0x0290 03 8b 00 00 */ unsigned char frag30[24]; /* +0x02a8 03 8b 00 00 */ unsigned char frag31[24]; /* +0x02c0 03 8b 00 00 */ unsigned char frag32[24]; /* +0x02d8 03 8b 00 00 */ unsigned char frag33[24]; /* +0x02f0 03 8b 00 00 */ unsigned char frag34[24]; /* +0x0308 03 8b 00 00 */ unsigned char frag35[24]; /* +0x0320 03 8b 00 00 */ unsigned char frag36[24]; /* +0x0338 03 8b 00 00 */ unsigned char frag37[24]; /* +0x0350 03 8b 00 00 */ unsigned char frag38[24]; /* +0x0368 03 8b 00 00 */ unsigned char frag39[24]; /* +0x0380 03 8b 00 00 */ unsigned char frag40[24]; /* +0x0398 03 8b 00 00 */ unsigned char frag41[24]; /* +0x03b0 03 8b 00 00 */ unsigned char frag42[24]; /* +0x03c8 03 8b 00 00 */ unsigned char frag43[24]; /* +0x03e0 03 8b 00 00 */ unsigned char frag44[24]; /* +0x03f8 03 8b 00 00 */ unsigned char frag45[24]; /* +0x0410 03 8b 00 00 */ unsigned char frag46[24]; /* +0x0428 03 8b 00 00 */ unsigned char frag47[24]; /* +0x0440 03 8b 00 00 */ unsigned char frag48[24]; /* +0x0458 03 8b 00 00 */ unsigned char frag49[24]; /* +0x0470 03 8b 00 00 */ unsigned char frag50[8]; /* +0x0488 75 00 00 00 */ }; struct __midl_frag15_t { unsigned char frag1[24]; /* +0x0000 b1 92 00 00 */ unsigned char frag2[8]; /* +0x0018 02 8b 00 00 */ unsigned char frag3[24]; /* +0x0020 03 8b 00 00 */ unsigned char frag4[24]; /* +0x0038 03 8b 00 00 */ unsigned char frag5[24]; /* +0x0050 03 8b 00 00 */ unsigned char frag6[24]; /* +0x0068 03 8b 00 00 */ unsigned char frag7[24]; /* +0x0080 03 8b 00 00 */ unsigned char frag8[24]; /* +0x0098 03 8b 00 00 */ unsigned char frag9[24]; /* +0x00b0 03 8b 00 00 */ unsigned char frag10[24]; /* +0x00c8 03 8b 00 00 */ unsigned char frag11[24]; /* +0x00e0 03 8b 00 00 */ unsigned char frag12[24]; /* +0x00f8 03 8b 00 00 */ unsigned char frag13[24]; /* +0x0110 03 8b 00 00 */ unsigned char frag14[24]; /* +0x0128 03 8b 00 00 */ unsigned char frag15[24]; /* +0x0140 03 8b 00 00 */ unsigned char frag16[24]; /* +0x0158 03 8b 00 00 */ unsigned char frag17[24]; /* +0x0170 03 8b 00 00 */ unsigned char frag18[24]; /* +0x0188 03 8b 00 00 */ unsigned char frag19[24]; /* +0x01a0 03 8b 00 00 */ unsigned char frag20[24]; /* +0x01b8 03 8b 00 00 */ unsigned char frag21[24]; /* +0x01d0 03 8b 00 00 */ unsigned char frag22[24]; /* +0x01e8 03 8b 00 00 */ unsigned char frag23[24]; /* +0x0200 03 8b 00 00 */ unsigned char frag24[24]; /* +0x0218 03 8b 00 00 */ unsigned char frag25[24]; /* +0x0230 03 8b 00 00 */ unsigned char frag26[24]; /* +0x0248 03 8b 00 00 */ unsigned char frag27[24]; /* +0x0260 03 8b 00 00 */ unsigned char frag28[24]; /* +0x0278 03 8b 00 00 */ unsigned char frag29[24]; /* +0x0290 03 8b 00 00 */ unsigned char frag30[24]; /* +0x02a8 03 8b 00 00 */ unsigned char frag31[24]; /* +0x02c0 03 8b 00 00 */ unsigned char frag32[24]; /* +0x02d8 03 8b 00 00 */ unsigned char frag33[24]; /* +0x02f0 03 8b 00 00 */ unsigned char frag34[24]; /* +0x0308 03 8b 00 00 */ unsigned char frag35[24]; /* +0x0320 03 8b 00 00 */ unsigned char frag36[24]; /* +0x0338 03 8b 00 00 */ unsigned char frag37[24]; /* +0x0350 03 8b 00 00 */ unsigned char frag38[24]; /* +0x0368 03 8b 00 00 */ unsigned char frag39[24]; /* +0x0380 03 8b 00 00 */ unsigned char frag40[24]; /* +0x0398 03 8b 00 00 */ unsigned char frag41[24]; /* +0x03b0 03 8b 00 00 */ unsigned char frag42[24]; /* +0x03c8 03 8b 00 00 */ unsigned char frag43[24]; /* +0x03e0 03 8b 00 00 */ unsigned char frag44[24]; /* +0x03f8 03 8b 00 00 */ unsigned char frag45[24]; /* +0x0410 03 8b 00 00 */ unsigned char frag46[24]; /* +0x0428 03 8b 00 00 */ unsigned char frag47[24]; /* +0x0440 03 8b 00 00 */ unsigned char frag48[24]; /* +0x0458 03 8b 00 00 */ unsigned char frag49[24]; /* +0x0470 03 8b 00 00 */ unsigned char frag50[24]; /* +0x0488 03 8b 00 00 */ unsigned char frag51[24]; /* +0x04a0 03 8b 00 00 */ unsigned char frag52[24]; /* +0x04b8 03 8b 00 00 */ unsigned char frag53[24]; /* +0x04d0 03 8b 00 00 */ unsigned char frag54[24]; /* +0x04e8 03 8b 00 00 */ unsigned char frag55[24]; /* +0x0500 03 8b 00 00 */ unsigned char frag56[24]; /* +0x0518 03 8b 00 00 */ unsigned char frag57[24]; /* +0x0530 03 8b 00 00 */ unsigned char frag58[24]; /* +0x0548 03 8b 00 00 */ unsigned char frag59[24]; /* +0x0560 03 8b 00 00 */ unsigned char frag60[24]; /* +0x0578 03 8b 00 00 */ unsigned char frag61[24]; /* +0x0590 03 8b 00 00 */ unsigned char frag62[24]; /* +0x05a8 03 8b 00 00 */ unsigned char frag63[24]; /* +0x05c0 03 8b 00 00 */ unsigned char frag64[24]; /* +0x05d8 03 8b 00 00 */ unsigned char frag65[24]; /* +0x05f0 03 8b 00 00 */ unsigned char frag66[24]; /* +0x0608 03 8b 00 00 */ unsigned char frag67[24]; /* +0x0620 03 8b 00 00 */ unsigned char frag68[24]; /* +0x0638 03 8b 00 00 */ unsigned char frag69[24]; /* +0x0650 03 8b 00 00 */ unsigned char frag70[24]; /* +0x0668 03 8b 00 00 */ unsigned char frag71[24]; /* +0x0680 03 8b 00 00 */ unsigned char frag72[24]; /* +0x0698 03 8b 00 00 */ unsigned char frag73[24]; /* +0x06b0 03 8b 00 00 */ unsigned char frag74[24]; /* +0x06c8 03 8b 00 00 */ unsigned char frag75[24]; /* +0x06e0 03 8b 00 00 */ unsigned char frag76[24]; /* +0x06f8 03 8b 00 00 */ unsigned char frag77[24]; /* +0x0710 03 8b 00 00 */ unsigned char frag78[24]; /* +0x0728 03 8b 00 00 */ unsigned char frag79[24]; /* +0x0740 03 8b 00 00 */ unsigned char frag80[24]; /* +0x0758 03 8b 00 00 */ unsigned char frag81[24]; /* +0x0770 03 8b 00 00 */ unsigned char frag82[24]; /* +0x0788 03 8b 00 00 */ unsigned char frag83[24]; /* +0x07a0 03 8b 00 00 */ unsigned char frag84[24]; /* +0x07b8 03 8b 00 00 */ unsigned char frag85[24]; /* +0x07d0 03 8b 00 00 */ unsigned char frag86[24]; /* +0x07e8 03 8b 00 00 */ unsigned char frag87[24]; /* +0x0800 03 8b 00 00 */ unsigned char frag88[24]; /* +0x0818 03 8b 00 00 */ unsigned char frag89[24]; /* +0x0830 03 8b 00 00 */ unsigned char frag90[24]; /* +0x0848 03 8b 00 00 */ unsigned char frag91[24]; /* +0x0860 03 8b 00 00 */ unsigned char frag92[24]; /* +0x0878 03 8b 00 00 */ unsigned char frag93[24]; /* +0x0890 03 8b 00 00 */ unsigned char frag94[24]; /* +0x08a8 03 8b 00 00 */ unsigned char frag95[24]; /* +0x08c0 03 8b 00 00 */ unsigned char frag96[24]; /* +0x08d8 03 8b 00 00 */ unsigned char frag97[24]; /* +0x08f0 03 8b 00 00 */ unsigned char frag98[24]; /* +0x0908 03 8b 00 00 */ unsigned char frag99[24]; /* +0x0920 03 8b 00 00 */ unsigned char frag100[8]; /* +0x0938 75 00 00 00 */ }; struct __midl_frag7_t { unsigned char frag1[24]; /* +0x0000 b1 92 00 00 */ unsigned char frag2[8]; /* +0x0018 02 8b 00 00 */ unsigned char frag3[24]; /* +0x0020 03 8b 00 00 */ unsigned char frag4[24]; /* +0x0038 03 8b 00 00 */ unsigned char frag5[8]; /* +0x0050 75 00 00 00 */ }; struct IEnumSTATPROPSETSTGVtbl { unsigned char QueryInterface[8]; /* +0x0000 ca 92 00 00 */ unsigned char AddRef[8]; /* +0x0008 cd 92 00 00 */ unsigned char Release[8]; /* +0x0010 cd 92 00 00 */ unsigned char Next[8]; /* +0x0018 d0 92 00 00 */ unsigned char Skip[8]; /* +0x0020 d3 92 00 00 */ unsigned char Reset[8]; /* +0x0028 d5 92 00 00 */ unsigned char Clone[8]; /* +0x0030 d8 92 00 00 */ }; struct IEnumSTATPROPSTGVtbl { unsigned char QueryInterface[8]; /* +0x0000 dd 92 00 00 */ unsigned char AddRef[8]; /* +0x0008 e0 92 00 00 */ unsigned char Release[8]; /* +0x0010 e0 92 00 00 */ unsigned char Next[8]; /* +0x0018 e3 92 00 00 */ unsigned char Skip[8]; /* +0x0020 e6 92 00 00 */ unsigned char Reset[8]; /* +0x0028 e8 92 00 00 */ unsigned char Clone[8]; /* +0x0030 eb 92 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 16 20 00 00 */ unsigned long celt; /* +0x0008 */ unsigned char Pad0[4]; /* +0x000c e0 90 00 00 */ unsigned char rgelt[8]; /* +0x0010 c6 1c 00 00 */ unsigned long *pceltFetched; /* +0x0018 */ unsigned char _RetVal[8]; /* +0x0020 08 00 00 00 */ }; struct _PARAM_STRUCT { unsigned char This[8]; /* +0x0000 bc 1c 00 00 */ unsigned long celt; /* +0x0008 */ unsigned char Pad0[4]; /* +0x000c e0 90 00 00 */ unsigned char rgelt[8]; /* +0x0010 63 3b 00 00 */ unsigned long *pceltFetched; /* +0x0018 */ unsigned char _RetVal[8]; /* +0x0020 08 00 00 00 */ }; struct ICallFactoryVtbl { unsigned char QueryInterface[8]; /* +0x0000 f8 92 00 00 */ unsigned char AddRef[8]; /* +0x0008 fb 92 00 00 */ unsigned char Release[8]; /* +0x0010 fb 92 00 00 */ unsigned char CreateCall[8]; /* +0x0018 fe 92 00 00 */ }; struct tagBIND_OPTS2 { unsigned long cbStruct; /* +0x0000 */ unsigned long grfFlags; /* +0x0004 */ unsigned long grfMode; /* +0x0008 */ unsigned long dwTickCountDeadline; /* +0x000c */ unsigned long dwTrackFlags; /* +0x0010 */ unsigned long dwClassContext; /* +0x0014 */ unsigned long locale; /* +0x0018 */ unsigned char pServerInfo[8]; /* +0x0020 b1 21 00 00 */ }; struct tagSTGMEDIUM { unsigned long tymed; /* +0x0000 */ /* unsigned char hBitmap[0]; +0x0008 18 18 00 00 */ void *hMetaFilePict; /* +0x0008 */ /* unsigned char hEnhMetaFile[0]; +0x0008 1e 27 00 00 */ void *hGlobal; /* +0x0008 */ unsigned short *lpszFileName; /* +0x0008 */ /* unsigned char pstm[0]; +0x0008 20 27 00 00 */ unsigned char pstg[8]; /* +0x0008 19 16 00 00 */ unsigned char pUnkForRelease[8]; /* +0x0010 93 17 00 00 */ }; struct _ULARGE_INTEGER { unsigned long LowPart; /* +0x0000 */ unsigned long HighPart; /* +0x0004 */ /* unsigned char u[0]; +0x0000 08 93 00 00 */ unsigned long long QuadPart; /* +0x0000 */ }; struct _LARGE_INTEGER { unsigned long LowPart; /* +0x0000 */ long HighPart; /* +0x0004 */ /* unsigned char u[0]; +0x0000 0b 93 00 00 */ long long QuadPart; /* +0x0000 */ }; enum tagMSIINSTALLCONTEXT { MSIINSTALLCONTEXT_FIRSTVISIBLE = 0, MSIINSTALLCONTEXT_NONE = 0, MSIINSTALLCONTEXT_USERMANAGED = 1, MSIINSTALLCONTEXT_USERUNMANAGED = 2, MSIINSTALLCONTEXT_MACHINE = 4, MSIINSTALLCONTEXT_ALL = 7, MSIINSTALLCONTEXT_ALLUSERMANAGED = 8 }; enum tagMSIPATCHSTATE { MSIPATCHSTATE_INVALID = 0, MSIPATCHSTATE_APPLIED = 1, MSIPATCHSTATE_SUPERSEDED = 2, MSIPATCHSTATE_OBSOLETED = 4, MSIPATCHSTATE_REGISTERED = 8, MSIPATCHSTATE_ALL = 15 }; enum tagINSTALLUILEVEL { INSTALLUILEVEL_NOCHANGE = 0, INSTALLUILEVEL_DEFAULT = 1, INSTALLUILEVEL_NONE = 2, INSTALLUILEVEL_BASIC = 3, INSTALLUILEVEL_REDUCED = 4, INSTALLUILEVEL_FULL = 5, INSTALLUILEVEL_ENDDIALOG = 128, INSTALLUILEVEL_PROGRESSONLY = 64, INSTALLUILEVEL_HIDECANCEL = 32, INSTALLUILEVEL_SOURCERESONLY = 256, INSTALLUILEVEL_UACONLY = 512 }; enum tagINSTALLMESSAGE { INSTALLMESSAGE_FATALEXIT = 0, /* INSTALLMESSAGE_ERROR = Unavail */ }; enum tagSCRIPTFLAGS { SCRIPTFLAGS_CACHEINFO = 1, SCRIPTFLAGS_SHORTCUTS = 4, SCRIPTFLAGS_MACHINEASSIGN = 8, SCRIPTFLAGS_REGDATA_CNFGINFO = 32, SCRIPTFLAGS_VALIDATE_TRANSFORMS_LIST = 64, SCRIPTFLAGS_REGDATA_CLASSINFO = 128, SCRIPTFLAGS_REGDATA_EXTENSIONINFO = 256, SCRIPTFLAGS_REGDATA_APPINFO = 384, SCRIPTFLAGS_REGDATA = 416 }; enum _REGQUERY_FLAGS { RQ_MULTISZ = 1, RQ_ALLOWQUOTEQUOTE = 2 }; struct PMSIHANDLE { unsigned long m_h; /* +0x0000 */ }; enum _com_error:: { = 32771 }; struct COM_CATALOG_CACHE_SECTION { unsigned char CacheTicks[8]; /* +0x0000 09 95 00 00 */ unsigned char ComPlusCatalogVer[8]; /* +0x0008 09 95 00 00 */ unsigned char WinRTActivationStoreSequence[8]; /* +0x0010 09 95 00 00 */ }; struct PACKAGE_INFO { unsigned char reserved[4]; /* +0x0000 75 00 00 00 */ unsigned char flags[4]; /* +0x0004 75 00 00 00 */ unsigned char path[8]; /* +0x0008 71 06 00 00 */ unsigned char packageFullName[8]; /* +0x0010 71 06 00 00 */ unsigned char packageFamilyName[8]; /* +0x0018 71 06 00 00 */ unsigned char packageId[48]; /* +0x0020 0c 95 00 00 */ }; struct PACKAGE_VERSION { unsigned long long Version; /* +0x0000 */ unsigned short Revision; /* +0x0000 */ unsigned short Build; /* +0x0002 */ unsigned short Minor; /* +0x0004 */ unsigned short Major; /* +0x0006 */ }; struct ActivationStore::Entry { unsigned char _baseKey[8]; /* +0x0000 b4 5c 00 00 */ unsigned char _registrationScope[8]; /* +0x0008 88 6a 00 00 */ }; struct ActivationStore::PropertyValueBuffer { void *_pBuffer; /* +0x0000 */ unsigned short _cbSize; /* +0x0008 */ unsigned char _usingStaticBuffer[1]; /* +0x000a 30 00 00 00 */ unsigned char _valueRead[5]; /* +0x000b 30 00 00 00 */ }; struct ActivationStore::BasicBuffer { void *_pBuffer; /* +0x0000 */ unsigned short _cbSize; /* +0x0008 */ unsigned short _cbLength; /* +0x000a */ unsigned char _usingStaticBuffer[4]; /* +0x000c 30 00 00 00 */ }; enum ActivationStore::ServerType { NormalExe = 0, ExeService = 1, SvchostService = 2 }; struct PACKAGE_ID { unsigned char reserved[4]; /* +0x0000 75 00 00 00 */ unsigned char processorArchitecture[4]; /* +0x0004 75 00 00 00 */ unsigned char version[8]; /* +0x0008 20 96 00 00 */ unsigned char name[8]; /* +0x0010 71 06 00 00 */ unsigned char publisher[8]; /* +0x0018 71 06 00 00 */ unsigned char resourceId[8]; /* +0x0020 71 06 00 00 */ unsigned char publisherId[8]; /* +0x0028 71 06 00 00 */ }; enum BuiltInClassCache::GetCachedResult::__l2::Pass { Shared = 0, Exclusive = 1 }; struct _ACTIVATION_CONTEXT_DATA { unsigned long Magic; /* +0x0000 */ unsigned long HeaderSize; /* +0x0004 */ unsigned long FormatVersion; /* +0x0008 */ unsigned long TotalSize; /* +0x000c */ unsigned long DefaultTocOffset; /* +0x0010 */ unsigned long ExtendedTocOffset; /* +0x0014 */ unsigned long AssemblyRosterOffset; /* +0x0018 */ unsigned long Flags; /* +0x001c */ }; struct _ACTIVATION_CONTEXT_DATA_COM_SERVER_REDIRECTION { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long ThreadingModel; /* +0x0008 */ unsigned char ReferenceClsid[16]; /* +0x000c f3 14 00 00 */ unsigned char ConfiguredClsid[16]; /* +0x001c f3 14 00 00 */ unsigned char ImplementedClsid[16]; /* +0x002c f3 14 00 00 */ unsigned char TypeLibraryId[16]; /* +0x003c f3 14 00 00 */ unsigned long ModuleLength; /* +0x004c */ unsigned long ModuleOffset; /* +0x0050 */ unsigned long ProgIdLength; /* +0x0054 */ unsigned long ProgIdOffset; /* +0x0058 */ unsigned long ShimDataLength; /* +0x005c */ unsigned long ShimDataOffset; /* +0x0060 */ unsigned long MiscStatusDefault; /* +0x0064 */ unsigned long MiscStatusContent; /* +0x0068 */ unsigned long MiscStatusThumbnail; /* +0x006c */ unsigned long MiscStatusIcon; /* +0x0070 */ unsigned long MiscStatusDocPrint; /* +0x0074 */ }; struct _ACTIVATION_CONTEXT_DATA_COM_PROGID_REDIRECTION { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long ConfiguredClsidOffset; /* +0x0008 */ }; struct tagElement { unsigned char pNext[8]; /* +0x0000 04 95 00 00 */ unsigned long iHashValue; /* +0x0008 */ unsigned short fValueFlags; /* +0x000c */ unsigned short cbKey; /* +0x000e */ unsigned char pUnknown[8]; /* +0x0010 93 17 00 00 */ /* unsigned char abKey[0]; +0x0018 40 2d 00 00 */ }; enum NCIFLAGS { NCI_HAVECLSID = 1, NCI_HAVEPROGID = 2 }; struct CRefMutexSem { long m_lRefs; /* +0x0000 */ unsigned char m_mxs[48]; /* +0x0008 88 54 00 00 */ }; struct CRefMutexAutoLock { unsigned char m_pmxs[8]; /* +0x0000 5e 98 00 00 */ }; struct MEMSTM { unsigned long cb; /* +0x0000 */ unsigned long cRef; /* +0x0004 */ unsigned char *m_pBuf; /* +0x0008 */ void *hGlobal; /* +0x0010 */ unsigned char fDeleteOnRelease[8]; /* +0x0018 74 00 00 00 */ }; enum WINDOWS_RUNTIME_HSTRING_FLAGS { WRHF_NONE = 0, WRHF_STRING_REFERENCE = 1, WRHF_VALID_UNICODE_FORMAT_INFO = 2, WRHF_WELL_FORMED_UNICODE = 4, WRHF_HAS_EMBEDDED_NULLS = 8, WRHF_EMBEDDED_NULLS_COMPUTED = 16, = 32771 }; struct HSTRING_HEADER_INTERNAL { unsigned char flags[4]; /* +0x0000 bd 98 00 00 */ unsigned char length[4]; /* +0x0004 75 00 00 00 */ unsigned char padding1[4]; /* +0x0008 75 00 00 00 */ unsigned char padding2[4]; /* +0x000c 75 00 00 00 */ unsigned char stringRef[8]; /* +0x0010 cb 13 00 00 */ }; enum Microsoft::WRL::RuntimeClassType { WinRt = 1, ClassicCom = 2, WinRtClassicComMix = 3, InhibitWeakReference = 4, Delegate = 2 }; enum InstrumentationType { InstrumentNone = 0, InstrumentCallObjects = 1, InstrumentDisconnectableContextObjects = 2, NumInstrumenationTypes = 3 }; enum _RecordMatchType { ImageFileName = 0, SvchostServiceGroup = 1, DllhostAppId = 2 }; struct { unsigned char type[4]; /* +0x0000 0c 9c 00 00 */ unsigned char matchType[4]; /* +0x0004 0d 9c 00 00 */ unsigned char pwszMatchString[8]; /* +0x0008 cb 13 00 00 */ }; struct Ro::detail::ResolutionPathEntry { unsigned char _next[8]; /* +0x0000 80 9c 00 00 */ unsigned char _typeName[8]; /* +0x0008 cb 13 00 00 */ }; struct Ro::detail::SimpleMetaDataBuffer::ResolutionPathGuard { unsigned char _entry[16]; /* +0x0000 7f 9c 00 00 */ unsigned char _buffer[8]; /* +0x0010 7b 9c 00 00 */ }; struct Ro::detail::_IsBuiltin::__l2::BuiltinEntry { unsigned char name[8]; /* +0x0000 cb 13 00 00 */ unsigned char typeSignature[8]; /* +0x0008 79 14 00 00 */ }; enum _CLI_ASYNC_CALL_STATE { cacsStart = 0, cacsFailedSynchronously = 1, cacsNotified = 2, cacsInCompletion = 3, cacsCompleted = 4 }; struct _NDR_FWD_ROUTINES { unsigned char CStdStubBuffer_AddRef[8]; /* +0x0000 a4 8a 00 00 */ unsigned char CStdStubBuffer_Connect[8]; /* +0x0008 a7 8a 00 00 */ unsigned char CStdStubBuffer_CountRefs[8]; /* +0x0010 a4 8a 00 00 */ unsigned char CStdStubBuffer_DebugServerQueryInterface[8]; /* +0x0018 b2 8a 00 00 */ unsigned char CStdStubBuffer_DebugServerRelease[8]; /* +0x0020 b5 8a 00 00 */ unsigned char CStdStubBuffer_Disconnect[8]; /* +0x0028 a9 8a 00 00 */ unsigned char CStdStubBuffer_Invoke[8]; /* +0x0030 ac 8a 00 00 */ unsigned char CStdStubBuffer_IsIIDSupported[8]; /* +0x0038 30 9d 00 00 */ unsigned char CStdStubBuffer_QueryInterface[8]; /* +0x0040 33 9d 00 00 */ unsigned char CreateProxyFromTypeInfo[8]; /* +0x0048 36 9d 00 00 */ unsigned char CreateStubFromTypeInfo[8]; /* +0x0050 39 9d 00 00 */ unsigned char DllGetClassObject[8]; /* +0x0058 fa 32 00 00 */ unsigned char DllRegisterServer[8]; /* +0x0060 2a 4f 00 00 */ unsigned char IUnknown_AddRef_Proxy[8]; /* +0x0068 c3 85 00 00 */ unsigned char IUnknown_QueryInterface_Proxy[8]; /* +0x0070 92 7b 00 00 */ unsigned char IUnknown_Release_Proxy[8]; /* +0x0078 c3 85 00 00 */ unsigned char NdrCStdStubBuffer2_Release[8]; /* +0x0080 3c 9d 00 00 */ unsigned char NdrCStdStubBuffer_Release[8]; /* +0x0088 3c 9d 00 00 */ unsigned char NdrCreateServerInterfaceFromStub[8]; /* +0x0090 3f 9d 00 00 */ unsigned char NdrpDcomAsyncClientCall[8]; /* +0x0098 42 9d 00 00 */ unsigned char NdrDcomAsyncStubCall[8]; /* +0x00a0 44 9d 00 00 */ unsigned char Ndr64pDcomAsyncClientCall[8]; /* +0x00a8 47 9d 00 00 */ unsigned char Ndr64DcomAsyncStubCall[8]; /* +0x00b0 44 9d 00 00 */ unsigned char NdrDllCanUnloadNow[8]; /* +0x00b8 4a 9d 00 00 */ unsigned char NdrDllGetClassObject[8]; /* +0x00c0 4d 9d 00 00 */ unsigned char NdrDllRegisterProxy[8]; /* +0x00c8 50 9d 00 00 */ unsigned char NdrDllUnregisterProxy[8]; /* +0x00d0 50 9d 00 00 */ unsigned char NdrGetBaseInterfaceFromStub[8]; /* +0x00d8 53 9d 00 00 */ unsigned char NdrOleAllocate[8]; /* +0x00e0 ff 16 00 00 */ unsigned char NdrOleFree[8]; /* +0x00e8 d2 13 00 00 */ unsigned char NdrStubForwardingFunction[8]; /* +0x00f0 63 8a 00 00 */ unsigned char NdrStubInitializeMarshall[8]; /* +0x00f8 56 9d 00 00 */ unsigned char NdrpCreateProxy[8]; /* +0x0100 59 9d 00 00 */ unsigned char NdrpCreateStub[8]; /* +0x0108 5b 9d 00 00 */ unsigned char NdrpGetProcFormatString[8]; /* +0x0110 5e 9d 00 00 */ unsigned char NdrpGetTypeFormatString[8]; /* +0x0118 61 9d 00 00 */ unsigned char NdrpGetTypeGenCookie[8]; /* +0x0120 62 9d 00 00 */ unsigned char NdrpReleaseTypeFormatString[8]; /* +0x0128 65 9d 00 00 */ unsigned char NdrpReleaseTypeGenCookie[8]; /* +0x0130 e5 18 00 00 */ unsigned char NdrpVarVtOfTypeDesc[8]; /* +0x0138 68 9d 00 00 */ }; struct _NDROLE_EXTENSION_ROUTINES_TABLE { unsigned char NdrExtGetCallMethod[8]; /* +0x0000 77 9d 00 00 */ unsigned char NdrExtGetServerObject[8]; /* +0x0008 1e 15 00 00 */ unsigned char NdrExtStubInitialize[8]; /* +0x0010 7a 9d 00 00 */ unsigned char NdrExtStubGetBuffer[8]; /* +0x0018 7d 9d 00 00 */ unsigned char NdrExtSetErrorStatus[8]; /* +0x0020 80 9d 00 00 */ unsigned char NdrExtInterfacePointerBufferSize[8]; /* +0x0028 2c 59 00 00 */ unsigned char NdrExtProxyInitialize[8]; /* +0x0030 83 9d 00 00 */ unsigned char NdrExtFreeInterfacePointer[8]; /* +0x0038 85 9d 00 00 */ unsigned char NdrExtInterfacePointerMemorySize[8]; /* +0x0040 88 9d 00 00 */ unsigned char NdrExtInterfacePointerMarshall[8]; /* +0x0048 89 9d 00 00 */ unsigned char NdrExtInterfacePointerUnmarshall[8]; /* +0x0050 8c 9d 00 00 */ unsigned char NdrExtGetUDTFormat[8]; /* +0x0058 8f 9d 00 00 */ unsigned char NdrExtProxyGetBuffer[8]; /* +0x0060 92 9d 00 00 */ unsigned char NdrExtProxySendReceive[8]; /* +0x0068 92 9d 00 00 */ unsigned char NdrExtFreeBuffer[8]; /* +0x0070 92 9d 00 00 */ unsigned char NdrExtGetComProtocolVersion[8]; /* +0x0078 95 9d 00 00 */ unsigned char Ndr64ExtInterfacePointerBufferSize[8]; /* +0x0080 4b 59 00 00 */ unsigned char Ndr64ExtInterfacePointerMemorySize[8]; /* +0x0088 98 9d 00 00 */ unsigned char Ndr64ExtInterfacePointerMarshall[8]; /* +0x0090 4b 59 00 00 */ unsigned char Ndr64ExtInterfacePointerUnmarshall[8]; /* +0x0098 9a 9d 00 00 */ unsigned char Ndr64ExtProxyInitialize[8]; /* +0x00a0 9d 9d 00 00 */ unsigned char NdrExtSetupClientInterface[8]; /* +0x00a8 a0 9d 00 00 */ unsigned char NdrExtNegotiateTransferSyntax[8]; /* +0x00b0 a3 9d 00 00 */ }; struct _GENERIC_PIPE_TYPE { unsigned char pfnPull[8]; /* +0x0000 ab 9d 00 00 */ unsigned char pfnPush[8]; /* +0x0008 a7 9d 00 00 */ unsigned char pfnAlloc[8]; /* +0x0010 a9 9d 00 00 */ char *pState; /* +0x0018 */ }; struct ITypeLibVtbl { unsigned char QueryInterface[8]; /* +0x0000 b0 9d 00 00 */ unsigned char AddRef[8]; /* +0x0008 b3 9d 00 00 */ unsigned char Release[8]; /* +0x0010 b3 9d 00 00 */ unsigned char GetTypeInfoCount[8]; /* +0x0018 b5 9d 00 00 */ unsigned char GetTypeInfo[8]; /* +0x0020 b8 9d 00 00 */ unsigned char GetTypeInfoType[8]; /* +0x0028 bb 9d 00 00 */ unsigned char GetTypeInfoOfGuid[8]; /* +0x0030 be 9d 00 00 */ unsigned char GetLibAttr[8]; /* +0x0038 c1 9d 00 00 */ unsigned char GetTypeComp[8]; /* +0x0040 c4 9d 00 00 */ unsigned char GetDocumentation[8]; /* +0x0048 c7 9d 00 00 */ unsigned char IsName[8]; /* +0x0050 ca 9d 00 00 */ unsigned char FindName[8]; /* +0x0058 cd 9d 00 00 */ unsigned char ReleaseTLibAttr[8]; /* +0x0060 d0 9d 00 00 */ }; struct ITypeCompVtbl { unsigned char QueryInterface[8]; /* +0x0000 d5 9d 00 00 */ unsigned char AddRef[8]; /* +0x0008 d8 9d 00 00 */ unsigned char Release[8]; /* +0x0010 d8 9d 00 00 */ unsigned char Bind[8]; /* +0x0018 db 9d 00 00 */ unsigned char BindType[8]; /* +0x0020 de 9d 00 00 */ }; struct INTERPRETER_OPT_FLAGS { /* unsigned char ServerMustSize[0]; +0x0000 a2 1e 00 00 */ /* unsigned char ClientMustSize[0]; +0x0000 a3 1e 00 00 */ /* unsigned char HasReturn[0]; +0x0000 a4 1e 00 00 */ /* unsigned char HasPipes[0]; +0x0000 28 26 00 00 */ /* unsigned char Unused[0]; +0x0000 0e 26 00 00 */ /* unsigned char HasAsyncUuid[0]; +0x0000 a6 1e 00 00 */ /* unsigned char HasExtensions[0]; +0x0000 a7 1e 00 00 */ unsigned char HasAsyncHandle[1]; /* +0x0000 a8 1e 00 00 */ }; struct INTERPRETER_OPT_FLAGS2 { /* unsigned char HasNewCorrDesc[0]; +0x0000 a2 1e 00 00 */ /* unsigned char ClientCorrCheck[0]; +0x0000 a3 1e 00 00 */ /* unsigned char ServerCorrCheck[0]; +0x0000 a4 1e 00 00 */ /* unsigned char HasNotify[0]; +0x0000 28 26 00 00 */ /* unsigned char HasNotify2[0]; +0x0000 0e 26 00 00 */ /* unsigned char HasComplexReturn[0]; +0x0000 a6 1e 00 00 */ /* unsigned char HasConformanceRange[0]; +0x0000 a7 1e 00 00 */ unsigned char HasBigByValueParam[1]; /* +0x0000 a8 1e 00 00 */ }; struct NDR_PROC_HEADER_EXTS { unsigned char Size; /* +0x0000 */ unsigned char Flags2[1]; /* +0x0001 66 58 00 00 */ unsigned short ClientCorrHint; /* +0x0002 */ unsigned short ServerCorrHint; /* +0x0004 */ unsigned short NotifyIndex; /* +0x0006 */ }; struct _NDR_PROC_DESC { unsigned short ClientBufferSize; /* +0x0000 */ unsigned short ServerBufferSize; /* +0x0002 */ unsigned char Oi2Flags[1]; /* +0x0004 e2 58 00 00 */ unsigned char NumberParams; /* +0x0005 */ unsigned char NdrExts[8]; /* +0x0006 e7 9d 00 00 */ }; struct INTERPRETER_FLAGS { /* unsigned char FullPtrUsed[0]; +0x0000 a2 1e 00 00 */ /* unsigned char RpcSsAllocUsed[0]; +0x0000 a3 1e 00 00 */ /* unsigned char ObjectProc[0]; +0x0000 a4 1e 00 00 */ /* unsigned char HasRpcFlags[0]; +0x0000 28 26 00 00 */ /* unsigned char IgnoreObjectException[0]; +0x0000 0e 26 00 00 */ /* unsigned char HasCommOrFault[0]; +0x0000 a6 1e 00 00 */ /* unsigned char UseNewInitRoutines[0]; +0x0000 a7 1e 00 00 */ unsigned char Unused[1]; /* +0x0000 a8 1e 00 00 */ }; struct _NDR_CORRELATION_INFO_DATA { unsigned char *pMemoryObject; /* +0x0000 */ unsigned char pCorrDesc[8]; /* +0x0008 4b 19 00 00 */ long long Value; /* +0x0010 */ long CheckKind; /* +0x0018 */ long Reserve64; /* +0x001c */ }; struct _NDR_PIPE_MESSAGE { unsigned short Signature; /* +0x0000 */ unsigned short PipeId; /* +0x0002 */ unsigned short PipeStatus; /* +0x0004 */ unsigned short PipeFlags; /* +0x0006 */ unsigned char pTypeFormat[8]; /* +0x0008 4b 19 00 00 */ unsigned char pStubMsg[8]; /* +0x0010 1a 1a 00 00 */ unsigned char pPipeObject[8]; /* +0x0018 0e 9e 00 00 */ }; struct NDR_PIPE_STATE { unsigned char CurrentState[4]; /* +0x0000 74 00 00 00 */ unsigned char TotalElemsCount[4]; /* +0x0004 74 00 00 00 */ unsigned char OrigElemsInChunk[4]; /* +0x0008 74 00 00 00 */ unsigned char ElemsInChunk[4]; /* +0x000c 74 00 00 00 */ unsigned char ElemAlign[4]; /* +0x0010 74 00 00 00 */ unsigned char ElemWireSize[4]; /* +0x0014 74 00 00 00 */ unsigned char ElemMemSize[4]; /* +0x0018 74 00 00 00 */ unsigned char PartialBufferSize[4]; /* +0x001c 74 00 00 00 */ unsigned char *PartialElem; /* +0x0020 */ unsigned char PartialElemSize[4]; /* +0x0028 74 00 00 00 */ unsigned char PartialOffset[4]; /* +0x002c 74 00 00 00 */ /* unsigned char EndOfPipe[0]; +0x0030 60 23 00 00 */ unsigned char EndOfPipePending[4]; /* +0x0030 61 23 00 00 */ unsigned char LowChunkLimit[4]; /* +0x0034 74 00 00 00 */ unsigned char HighChunkLimit[4]; /* +0x0038 74 00 00 00 */ unsigned char fBlockCopy[4]; /* +0x003c 74 00 00 00 */ unsigned char ElemPad[8]; /* +0x0040 74 00 00 00 */ unsigned char TypeFormat[8]; /* +0x0048 4b 19 00 00 */ }; struct _NDR_CORRELATION_INFO_HEADER { unsigned char pCache[8]; /* +0x0000 69 15 00 00 */ unsigned char pInfo[8]; /* +0x0008 69 15 00 00 */ long DataSize; /* +0x0010 */ long DataLen; /* +0x0014 */ }; struct _PIPEDESC_FLAGS { /* unsigned char AuxOutBufferAllocated[0]; +0x0000 b1 2e 00 00 */ /* unsigned char NoBufferCallPending[0]; +0x0000 b2 2e 00 00 */ /* unsigned char Reserved[0]; +0x0000 b3 2e 00 00 */ /* unsigned char NoMoreBuffersToRead[0]; +0x0000 b4 2e 00 00 */ /* unsigned char LastPipeSend[0]; +0x0000 b5 2e 00 00 */ unsigned char InPipePush[2]; /* +0x0000 b6 2e 00 00 */ }; struct IRecordInfoVtbl { unsigned char QueryInterface[8]; /* +0x0000 27 9e 00 00 */ unsigned char AddRef[8]; /* +0x0008 29 9e 00 00 */ unsigned char Release[8]; /* +0x0010 29 9e 00 00 */ unsigned char RecordInit[8]; /* +0x0018 2c 9e 00 00 */ unsigned char RecordClear[8]; /* +0x0020 2c 9e 00 00 */ unsigned char RecordCopy[8]; /* +0x0028 2f 9e 00 00 */ unsigned char GetGuid[8]; /* +0x0030 32 9e 00 00 */ unsigned char GetName[8]; /* +0x0038 35 9e 00 00 */ unsigned char GetSize[8]; /* +0x0040 38 9e 00 00 */ unsigned char GetTypeInfo[8]; /* +0x0048 3b 9e 00 00 */ unsigned char GetField[8]; /* +0x0050 3e 9e 00 00 */ unsigned char GetFieldNoCopy[8]; /* +0x0058 41 9e 00 00 */ unsigned char PutField[8]; /* +0x0060 44 9e 00 00 */ unsigned char PutFieldNoCopy[8]; /* +0x0068 44 9e 00 00 */ unsigned char GetFieldNames[8]; /* +0x0070 47 9e 00 00 */ unsigned char IsMatchingType[8]; /* +0x0078 4a 9e 00 00 */ unsigned char RecordCreate[8]; /* +0x0080 4c 9e 00 00 */ unsigned char RecordCreateCopy[8]; /* +0x0088 4f 9e 00 00 */ unsigned char RecordDestroy[8]; /* +0x0090 2c 9e 00 00 */ }; struct _NDR_PROC_INFO { unsigned char InterpreterFlags[8]; /* +0x0000 e1 58 00 00 */ unsigned char pProcDesc[8]; /* +0x0008 99 9e 00 00 */ }; struct _NDR_CORRELATION_INFO { unsigned char Header[24]; /* +0x0000 aa 9e 00 00 */ unsigned char Data[32]; /* +0x0018 ac 9e 00 00 */ }; struct _NDR_ASYNC_MESSAGE { long Version; /* +0x0000 */ long Signature; /* +0x0004 */ unsigned char AsyncHandle[8]; /* +0x0008 aa 13 00 00 */ unsigned char Flags[2]; /* +0x0010 b1 9e 00 00 */ unsigned short StubPhase; /* +0x0012 */ unsigned long RefCount; /* +0x0014 */ unsigned long ErrorCode; /* +0x0018 */ unsigned char RpcMsg[80]; /* +0x0020 6f 29 00 00 */ unsigned char StubMsg[400]; /* +0x0070 19 1a 00 00 */ unsigned long *pdwStubPhase; /* +0x0200 */ unsigned char ProcContext[800]; /* +0x0208 8b 29 00 00 */ unsigned char AsyncGuard[16]; /* +0x0528 33 1c 00 00 */ }; struct tagFastCopyLUIDAccess { /* unsigned char Luid[0]; +0x0000 38 15 00 00 */ long long FastAccess; /* +0x0000 */ }; struct IDispatchVtbl { unsigned char QueryInterface[8]; /* +0x0000 ed 9e 00 00 */ unsigned char AddRef[8]; /* +0x0008 ef 9e 00 00 */ unsigned char Release[8]; /* +0x0010 ef 9e 00 00 */ unsigned char GetTypeInfoCount[8]; /* +0x0018 f2 9e 00 00 */ unsigned char GetTypeInfo[8]; /* +0x0020 f5 9e 00 00 */ unsigned char GetIDsOfNames[8]; /* +0x0028 f8 9e 00 00 */ unsigned char Invoke[8]; /* +0x0030 fb 9e 00 00 */ }; struct _NDR_ALLOCA_CONTEXT { unsigned char *pBlockPointer; /* +0x0000 */ unsigned char MemoryList[16]; /* +0x0008 73 1f 00 00 */ unsigned long long BytesRemaining; /* +0x0018 */ unsigned char PreAllocatedBlock[512]; /* +0x0020 c9 19 00 00 */ }; struct NONOICF_POINTER_QUEUE_STATE::AllocationElement { unsigned long long ItemsAllocated; /* +0x0000 */ unsigned char pNext[8]; /* +0x0008 23 9f 00 00 */ unsigned char Data[800]; /* +0x0010 38 9f 00 00 */ }; struct _tRpcVerifierSettings { unsigned char fFaultInjectImpersonateClient[4]; /* +0x0000 74 00 00 00 */ unsigned char ProbFaultInjectImpersonateClient[4]; /* +0x0004 75 00 00 00 */ unsigned char DelayFaultInjectImpersonateClient[4]; /* +0x0008 75 00 00 00 */ unsigned char fCorruptionInjectServerReceives[4]; /* +0x000c 74 00 00 00 */ unsigned char fCorruptionInjectClientReceives[4]; /* +0x0010 74 00 00 00 */ unsigned char fCorruptionInjectSends[4]; /* +0x0014 74 00 00 00 */ unsigned char fCorruptionInjectNdrSends[4]; /* +0x0018 74 00 00 00 */ unsigned char fCorruptionInjectNdrReturns[4]; /* +0x001c 74 00 00 00 */ unsigned char fCorruptionInjectNdr[4]; /* +0x0020 74 00 00 00 */ unsigned char ProbRpcHeaderCorruption[4]; /* +0x0024 75 00 00 00 */ unsigned char ProbDataCorruption[4]; /* +0x0028 75 00 00 00 */ unsigned char ProbSecureDataCorruption[4]; /* +0x002c 75 00 00 00 */ unsigned char CorruptionPattern[4]; /* +0x0030 52 9f 00 00 */ unsigned char CorruptionSizeType[4]; /* +0x0034 53 9f 00 00 */ unsigned char CorruptionSize[4]; /* +0x0038 75 00 00 00 */ unsigned char CorruptionDistributionType[4]; /* +0x003c 54 9f 00 00 */ unsigned char ProbBufferTruncation[4]; /* +0x0040 75 00 00 00 */ unsigned char MaxBufferTruncationSize[4]; /* +0x0044 75 00 00 00 */ unsigned char fFaultInjectTransports[4]; /* +0x0048 74 00 00 00 */ unsigned char ProbFaultInjectTransports[4]; /* +0x004c 75 00 00 00 */ unsigned char DelayFaultInjectTransports[4]; /* +0x0050 75 00 00 00 */ unsigned char fSendReplay[4]; /* +0x0054 74 00 00 00 */ unsigned char SentBufferListSize[4]; /* +0x0058 75 00 00 00 */ unsigned char ReplayFrequency[4]; /* +0x005c 75 00 00 00 */ unsigned char fPauseInject[4]; /* +0x0060 74 00 00 00 */ unsigned char PauseInjectIntervalType[4]; /* +0x0064 55 9f 00 00 */ unsigned char PauseInjectIntervalLength[4]; /* +0x0068 75 00 00 00 */ unsigned char PauseInjectPauseType[4]; /* +0x006c 55 9f 00 00 */ unsigned char PauseInjectPauseLength[4]; /* +0x0070 75 00 00 00 */ unsigned char fPauseInjectExternalAPIs[4]; /* +0x0074 74 00 00 00 */ unsigned char ProbPauseInjectExternalAPIs[4]; /* +0x0078 75 00 00 00 */ unsigned char PauseInjectExternalAPIsMaxWait[4]; /* +0x007c 75 00 00 00 */ unsigned char IsHighPrivilege[4]; /* +0x0080 74 00 00 00 */ unsigned char fSupressAppVerifierBreaks[4]; /* +0x0084 74 00 00 00 */ unsigned char TestCorruptionInjectCallback[8]; /* +0x0088 59 9f 00 00 */ unsigned char NdrCorruptionCallback[8]; /* +0x0090 d2 13 00 00 */ unsigned long NDRVerifierMaxExtensionFactor; /* +0x0098 */ unsigned long NDRVerifierMaxExtensionBufferLength; /* +0x009c */ unsigned char DelayCorruption[8]; /* +0x00a0 75 00 00 00 */ unsigned char InitializeRpcShim[8]; /* +0x00a8 4c 1b 00 00 */ unsigned char CorruptionInject[8]; /* +0x00b0 59 9f 00 00 */ unsigned char NDRSendCorruptionInject[8]; /* +0x00b8 ea 40 00 00 */ unsigned char NDRReturnCorruptionInject[8]; /* +0x00c0 da 25 00 00 */ unsigned char RegisterThreadForPauseInjection[8]; /* +0x00c8 41 21 00 00 */ unsigned char UnregisterThreadForPauseInjection[8]; /* +0x00d0 d2 13 00 00 */ unsigned char CloseAlpcPort[8]; /* +0x00d8 d2 13 00 00 */ }; struct _NDR_PROC_CONTEXT { unsigned char CurrentSyntaxType[8]; /* +0x0000 5c 9f 00 00 */ /* unsigned char NdrInfo[0]; +0x0008 5d 9f 00 00 */ unsigned char Ndr64Header[16]; /* +0x0008 3d 58 00 00 */ unsigned char pProcFormat[8]; /* +0x0018 4b 19 00 00 */ unsigned long NumberParams; /* +0x0020 */ void *Params; /* +0x0028 */ unsigned char *StartofStack; /* +0x0030 */ unsigned char HandleType; /* +0x0038 */ unsigned char CorrIncrement; /* +0x0039 */ void *SavedGenericHandle; /* +0x0040 */ unsigned char pHandleFormatSave[8]; /* +0x0048 4b 19 00 00 */ unsigned char DceTypeFormatString[8]; /* +0x0050 4b 19 00 00 */ /* unsigned char IsAsync[0]; +0x0058 94 13 00 00 */ /* unsigned char IsObject[0]; +0x0058 90 18 00 00 */ /* unsigned char HasPipe[0]; +0x0058 91 18 00 00 */ /* unsigned char HasComplexReturn[0]; +0x0058 74 1e 00 00 */ /* unsigned char NeedsResend[0]; +0x0058 75 1e 00 00 */ /* unsigned char UseLocator[0]; +0x0058 0b 24 00 00 */ /* unsigned char Reserved7[0]; +0x0058 32 1f 00 00 */ /* unsigned char Reserved8[0]; +0x0058 33 1f 00 00 */ unsigned char Reservedleft[4]; /* +0x0058 a4 22 00 00 */ unsigned long FloatDoubleMask; /* +0x005c */ unsigned long ResendCount; /* +0x0060 */ unsigned long RpcFlags; /* +0x0064 */ unsigned long ExceptionFlag; /* +0x0068 */ unsigned long StackSize; /* +0x006c */ unsigned char pSyntaxInfo[8]; /* +0x0070 dd 20 00 00 */ unsigned char pfnValidate[8]; /* +0x0078 be 59 00 00 */ void *ValidateCookie; /* +0x0080 */ unsigned char pfnInit[8]; /* +0x0088 47 58 00 00 */ unsigned char pfnSizing[8]; /* +0x0090 4a 58 00 00 */ unsigned char pfnMarshal[8]; /* +0x0098 4a 58 00 00 */ unsigned char pfnUnMarshal[8]; /* +0x00a0 47 58 00 00 */ unsigned char pfnExceptionHandling[8]; /* +0x00a8 4f 58 00 00 */ unsigned char pfnClientFinally[8]; /* +0x00b0 47 58 00 00 */ unsigned char pfnGetBuffer[8]; /* +0x00b8 52 58 00 00 */ unsigned char pfnSendReceive[8]; /* +0x00c0 da 25 00 00 */ unsigned char pPipeDesc[8]; /* +0x00c8 ec 9d 00 00 */ unsigned char pQueueFreeList[8]; /* +0x00d0 0b 59 00 00 */ unsigned char pMiniComputeQueue[8]; /* +0x00d8 6b 59 00 00 */ unsigned char pConfQueueFreeList[8]; /* +0x00e0 97 58 00 00 */ unsigned char pFormatSupplement[8]; /* +0x00e8 4b 19 00 00 */ unsigned char CurrentActivityID[16]; /* +0x00f0 f3 14 00 00 */ unsigned char AllocateContext[544]; /* +0x0100 5e 9f 00 00 */ }; struct ITypeInfoVtbl { unsigned char QueryInterface[8]; /* +0x0000 71 9f 00 00 */ unsigned char AddRef[8]; /* +0x0008 74 9f 00 00 */ unsigned char Release[8]; /* +0x0010 74 9f 00 00 */ unsigned char GetTypeAttr[8]; /* +0x0018 77 9f 00 00 */ unsigned char GetTypeComp[8]; /* +0x0020 7a 9f 00 00 */ unsigned char GetFuncDesc[8]; /* +0x0028 7d 9f 00 00 */ unsigned char GetVarDesc[8]; /* +0x0030 80 9f 00 00 */ unsigned char GetNames[8]; /* +0x0038 83 9f 00 00 */ unsigned char GetRefTypeOfImplType[8]; /* +0x0040 86 9f 00 00 */ unsigned char GetImplTypeFlags[8]; /* +0x0048 89 9f 00 00 */ unsigned char GetIDsOfNames[8]; /* +0x0050 8c 9f 00 00 */ unsigned char Invoke[8]; /* +0x0058 8f 9f 00 00 */ unsigned char GetDocumentation[8]; /* +0x0060 92 9f 00 00 */ unsigned char GetDllEntry[8]; /* +0x0068 95 9f 00 00 */ unsigned char GetRefTypeInfo[8]; /* +0x0070 98 9f 00 00 */ unsigned char AddressOfMember[8]; /* +0x0078 9b 9f 00 00 */ unsigned char CreateInstance[8]; /* +0x0080 9e 9f 00 00 */ unsigned char GetMops[8]; /* +0x0088 a1 9f 00 00 */ unsigned char GetContainingTypeLib[8]; /* +0x0090 a4 9f 00 00 */ unsigned char ReleaseTypeAttr[8]; /* +0x0098 a7 9f 00 00 */ unsigned char ReleaseFuncDesc[8]; /* +0x00a0 aa 9f 00 00 */ unsigned char ReleaseVarDesc[8]; /* +0x00a8 ad 9f 00 00 */ }; struct NDR_POINTER_QUEUE { unsigned char pStubMsg[8]; /* +0x0000 1a 1a 00 00 */ unsigned char pQueueState[40]; /* +0x0008 74 29 00 00 */ }; struct NDR_POINTER_QUEUE::STORAGE { unsigned char pHead[8]; /* +0x0000 0b 59 00 00 */ unsigned char pPrevHead[8]; /* +0x0008 0b 59 00 00 */ unsigned char pInsertPointer[8]; /* +0x0010 d6 9f 00 00 */ unsigned char pPrevInsertPointer[8]; /* +0x0018 d6 9f 00 00 */ }; struct POINTER_MEMSIZE_SWAP_CONTEXT { unsigned char pStubMsg[8]; /* +0x0000 1a 1a 00 00 */ unsigned long MemorySave; /* +0x0008 */ unsigned char *pBufferSave; /* +0x0010 */ unsigned char DoSwap[8]; /* +0x0018 c9 54 00 00 */ }; struct NDR_ALLOC_ALL_NODES_CONTEXT { unsigned char *AllocAllNodesMemory; /* +0x0000 */ unsigned char *AllocAllNodesMemoryBegin; /* +0x0008 */ unsigned char *AllocAllNodesMemoryEnd; /* +0x0010 */ unsigned char IsByteCount[8]; /* +0x0018 74 00 00 00 */ }; struct POINTER_BUFFER_SWAP_CONTEXT { unsigned char pStubMsg[8]; /* +0x0000 1a 1a 00 00 */ unsigned char *pBufferSave; /* +0x0008 */ unsigned char DoSwap[8]; /* +0x0010 c9 54 00 00 */ }; struct _NDR_PIPE_DESC { unsigned char pPipeMsg[8]; /* +0x0000 f5 9d 00 00 */ short CurrentPipe; /* +0x0008 */ short PrevPipe; /* +0x000a */ short InPipes; /* +0x000c */ short OutPipes; /* +0x000e */ short TotalPipes; /* +0x0010 */ short PipeVersion; /* +0x0012 */ unsigned char Flags[4]; /* +0x0014 22 a0 00 00 */ unsigned long PipeException; /* +0x0018 */ unsigned char *DispatchBuffer; /* +0x0020 */ unsigned long DispatchBufferLength; /* +0x0028 */ unsigned long LastPartialSize; /* +0x002c */ unsigned char Leftover[8]; /* +0x0030 91 19 00 00 */ unsigned long LeftoverSize; /* +0x0038 */ unsigned char *BufferSave; /* +0x0040 */ unsigned long LengthSave; /* +0x0048 */ unsigned char RuntimeState[80]; /* +0x0050 23 a0 00 00 */ void *ChainingBuffer; /* +0x00a0 */ unsigned long ChainingBufferSize; /* +0x00a8 */ unsigned char pPipeHelper[8]; /* +0x00b0 03 a0 00 00 */ unsigned char pAllocContext[8]; /* +0x00b8 24 a0 00 00 */ }; struct PARAM_ATTRIBUTES { /* unsigned char MustSize[0]; +0x0000 b1 2e 00 00 */ /* unsigned char MustFree[0]; +0x0000 b2 2e 00 00 */ /* unsigned char IsPipe[0]; +0x0000 b3 2e 00 00 */ /* unsigned char IsIn[0]; +0x0000 b4 2e 00 00 */ /* unsigned char IsOut[0]; +0x0000 b5 2e 00 00 */ /* unsigned char IsReturn[0]; +0x0000 b6 2e 00 00 */ /* unsigned char IsBasetype[0]; +0x0000 b7 2e 00 00 */ /* unsigned char IsByValue[0]; +0x0000 b8 2e 00 00 */ /* unsigned char IsSimpleRef[0]; +0x0000 b9 2e 00 00 */ /* unsigned char IsDontCallFreeInst[0]; +0x0000 ba 2e 00 00 */ /* unsigned char SaveForAsyncFinish[0]; +0x0000 bb 2e 00 00 */ /* unsigned char IsPartialIgnore[0]; +0x0000 bc 2e 00 00 */ /* unsigned char IsForceAllocate[0]; +0x0000 bd 2e 00 00 */ unsigned char ServerAllocSize[2]; /* +0x0000 be 2e 00 00 */ }; struct NDR_CONTEXT_HANDLE_FLAGS { /* unsigned char CannotBeNull[0]; +0x0000 a2 1e 00 00 */ /* unsigned char Serialize[0]; +0x0000 a3 1e 00 00 */ /* unsigned char NoSerialize[0]; +0x0000 a4 1e 00 00 */ /* unsigned char IsStrict[0]; +0x0000 28 26 00 00 */ /* unsigned char IsReturn[0]; +0x0000 0e 26 00 00 */ /* unsigned char IsOut[0]; +0x0000 a6 1e 00 00 */ /* unsigned char IsIn[0]; +0x0000 a7 1e 00 00 */ unsigned char IsViaPtr[1]; /* +0x0000 a8 1e 00 00 */ }; struct NDR_CONTEXT_HANDLE_ARG_DESC { unsigned char Fc; /* +0x0000 */ unsigned char Flags[1]; /* +0x0001 c8 57 00 00 */ unsigned char RundownRtnIndex; /* +0x0002 */ unsigned char ParamOrdinal; /* +0x0003 */ }; struct PARAM_DESCRIPTION { unsigned char ParamAttr[2]; /* +0x0000 af 59 00 00 */ unsigned short StackOffset; /* +0x0002 */ unsigned short TypeOffset; /* +0x0004 */ unsigned char SimpleType[2]; /* +0x0004 55 a0 00 00 */ }; struct PARAM_DESCRIPTION:::: { unsigned char Type; /* +0x0000 */ unsigned char Unused; /* +0x0001 */ }; struct _NDR_CALLBACK_ROUTINES_TABLE { unsigned char NdrpServerMarshal[8]; /* +0x0000 4a 58 00 00 */ unsigned char NdrpServerOutInit[8]; /* +0x0008 da 25 00 00 */ unsigned char NdrpSizing[8]; /* +0x0010 4a 58 00 00 */ unsigned char NdrClientZeroOut[8]; /* +0x0018 4e 9f 00 00 */ unsigned char I_RpcSetNDRSlot[8]; /* +0x0020 df 19 00 00 */ unsigned char I_RpcGetAndSetNDRSlot[8]; /* +0x0028 77 a0 00 00 */ unsigned char I_RpcGetNDRSlot[8]; /* +0x0030 e4 59 00 00 */ unsigned char NdrpClientMarshal[8]; /* +0x0038 4a 58 00 00 */ unsigned char NdrpClientUnMarshal[8]; /* +0x0040 47 58 00 00 */ unsigned char NdrpFreeMemoryList[8]; /* +0x0048 da 25 00 00 */ unsigned char NdrpFreeParams[8]; /* +0x0050 c9 9e 00 00 */ unsigned char NdrpServerUnMarshal[8]; /* +0x0058 da 25 00 00 */ unsigned char NdrpPerformRpcInitialization[8]; /* +0x0060 4e 50 00 00 */ unsigned char GlobalMutexClearExternal[8]; /* +0x0068 4c 1b 00 00 */ unsigned char GlobalMutexRequestExternal[8]; /* +0x0070 4c 1b 00 00 */ unsigned char PrintCurrentStackTrace[8]; /* +0x0078 b5 9f 00 00 */ unsigned char NdrpCheckMIDLRobust[8]; /* +0x0080 51 9f 00 00 */ unsigned char DbgPrintUUID[8]; /* +0x0088 78 a0 00 00 */ unsigned char NdrpAddCorrelationData[8]; /* +0x0090 6f 9e 00 00 */ unsigned char NdrpRecordCustomUnmarshal[8]; /* +0x0098 ea 9e 00 00 */ unsigned char NdrpComputeConformance[8]; /* +0x00a0 7a a0 00 00 */ unsigned char NdrpLogIIDMisMatchEvent[8]; /* +0x00a8 c9 9f 00 00 */ unsigned char pfnMemSizeRoutines[8]; /* +0x00b0 7c a0 00 00 */ unsigned char pfnConvertRoutines[8]; /* +0x00b8 7e a0 00 00 */ unsigned char pfnFreeRoutines[8]; /* +0x00c0 72 9d 00 00 */ unsigned char pfnMarshallRoutines[8]; /* +0x00c8 2d 9d 00 00 */ unsigned char pfnSizeRoutines[8]; /* +0x00d0 72 9d 00 00 */ unsigned char pfnUnmarshallRoutines[8]; /* +0x00d8 70 9d 00 00 */ unsigned char GetRpcVerifierSettings[8]; /* +0x00e0 3b a0 00 00 */ unsigned char gfRPCVerifierEnabled[8]; /* +0x00e8 74 00 00 00 */ unsigned char AllocWrapper[8]; /* +0x00f0 ff 16 00 00 */ unsigned char FreeWrapper[8]; /* +0x00f8 d2 13 00 00 */ unsigned char NdrpClientCall2[8]; /* +0x0100 42 9d 00 00 */ unsigned char NdrpClientCall3[8]; /* +0x0108 81 a0 00 00 */ unsigned char Ndr64ClientInitializeContext[8]; /* +0x0110 5c a0 00 00 */ unsigned char NdrServerSetupNDR64TransferSyntax[8]; /* +0x0118 75 9e 00 00 */ unsigned char Ndr64pCheckCorrelation[8]; /* +0x0120 e7 9e 00 00 */ unsigned char Ndr64EvaluateExpr[8]; /* +0x0128 29 a0 00 00 */ unsigned char Ndr64SimpleTypeBufferSize[8]; /* +0x0130 4b 19 00 00 */ unsigned char Ndr64SimpleTypeMemorySize[8]; /* +0x0138 4b 19 00 00 */ unsigned char Ndr64TypeFlags[8]; /* +0x0140 b0 1c 00 00 */ unsigned char Ndr64MemSizeRoutinesTable[8]; /* +0x0148 83 a0 00 00 */ unsigned char Ndr64pServerUnMarshal[8]; /* +0x0150 da 25 00 00 */ unsigned char Ndr64pServerOutInit[8]; /* +0x0158 da 25 00 00 */ unsigned char Ndr64pSizing[8]; /* +0x0160 4a 58 00 00 */ unsigned char Ndr64pServerMarshal[8]; /* +0x0168 da 25 00 00 */ unsigned char Ndr64ServerInitialize[8]; /* +0x0170 86 a0 00 00 */ unsigned char Ndr64ClearOutParameters[8]; /* +0x0178 ee 9f 00 00 */ unsigned char Ndr64ClientInitialize[8]; /* +0x0180 4b 9f 00 00 */ unsigned char Ndr64pFreeParams[8]; /* +0x0188 72 9e 00 00 */ unsigned char MulNdrpInitializeContextFromProc[8]; /* +0x0190 b2 9f 00 00 */ unsigned char Ndr64ClientZeroOut[8]; /* +0x0198 ee 9f 00 00 */ unsigned char Ndr64pClientUnMarshal[8]; /* +0x01a0 47 58 00 00 */ unsigned char Ndr64pClientSetupTransferSyntax[8]; /* +0x01a8 39 a0 00 00 */ }; struct POINTER_BUFFERLENGTH_SWAP_CONTEXT { unsigned char pStubMsg[8]; /* +0x0000 1a 1a 00 00 */ unsigned long LengthSave; /* +0x0008 */ unsigned char DoSwap[4]; /* +0x000c c9 54 00 00 */ }; struct CORRELATION_CONTEXT { unsigned char pStubMsg[8]; /* +0x0000 f9 58 00 00 */ unsigned char pCorrMemorySave[8]; /* +0x0008 ae 80 00 00 */ }; struct SAVE_NDRSLOT { void *pOldSlotValue; /* +0x0000 */ unsigned char fSucceededInSet; /* +0x0008 */ }; struct _Flags { /* unsigned char ValidCallPending[0]; +0x0000 b1 2e 00 00 */ /* unsigned char ErrorPending[0]; +0x0000 b2 2e 00 00 */ /* unsigned char BadStubData[0]; +0x0000 b3 2e 00 00 */ /* unsigned char RuntimeCleanedUp[0]; +0x0000 b4 2e 00 00 */ /* unsigned char ClientHandleCreated[0]; +0x0000 b5 2e 00 00 */ /* unsigned char HandlelessObjCall[0]; +0x0000 b6 2e 00 00 */ /* unsigned char HasBigByValueArg[0]; +0x0000 b7 2e 00 00 */ /* unsigned char ClientDcomPipeCall[0]; +0x0000 b8 2e 00 00 */ unsigned char Unused[2]; /* +0x0000 cf a0 00 00 */ }; struct IRpcProxyBufferVtbl { unsigned char QueryInterface[8]; /* +0x0000 e6 a0 00 00 */ unsigned char AddRef[8]; /* +0x0008 6f 8a 00 00 */ unsigned char Release[8]; /* +0x0010 6f 8a 00 00 */ unsigned char Connect[8]; /* +0x0018 72 8a 00 00 */ unsigned char Disconnect[8]; /* +0x0020 74 8a 00 00 */ }; struct _MIDL_TYPE_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[2508]; /* +0x0002 e9 a0 00 00 */ }; struct tagMethodInfo { unsigned char pFuncDesc[8]; /* +0x0000 14 41 00 00 */ unsigned char pTypeInfo[8]; /* +0x0008 e3 2a 00 00 */ }; struct TypeInfoCache { unsigned char iid[16]; /* +0x0000 f3 14 00 00 */ unsigned char pVtbl[8]; /* +0x0010 fd a0 00 00 */ unsigned long dwTickCount; /* +0x0018 */ }; struct tagCStdProxyBuffer2 { unsigned char lpVtbl[8]; /* +0x0000 02 a1 00 00 */ unsigned char pProxyVtbl[8]; /* +0x0008 4f 19 00 00 */ long RefCount; /* +0x0010 */ unsigned char punkOuter[8]; /* +0x0018 93 17 00 00 */ unsigned char pChannel[8]; /* +0x0020 77 19 00 00 */ unsigned char pBaseProxy[8]; /* +0x0028 93 17 00 00 */ unsigned char pBaseProxyBuffer[8]; /* +0x0030 91 1d 00 00 */ unsigned char pPSFactory[8]; /* +0x0038 81 75 00 00 */ unsigned char iidBase[16]; /* +0x0040 f3 14 00 00 */ unsigned char pCallFactoryVtbl[8]; /* +0x0050 05 a1 00 00 */ unsigned char pAsyncIID[8]; /* +0x0058 67 16 00 00 */ unsigned char pRMBVtbl[8]; /* +0x0060 08 a1 00 00 */ }; struct tagCStdStubBuffer2 { unsigned char lpForwardingVtbl[8]; /* +0x0000 4f 19 00 00 */ unsigned char pBaseStubBuffer[8]; /* +0x0008 96 1d 00 00 */ unsigned char lpVtbl[8]; /* +0x0010 0c a1 00 00 */ long RefCount; /* +0x0018 */ unsigned char pvServerObject[8]; /* +0x0020 93 17 00 00 */ unsigned char pCallFactoryVtbl[8]; /* +0x0028 05 a1 00 00 */ unsigned char pAsyncIID[8]; /* +0x0030 67 16 00 00 */ unsigned char pPSFactory[8]; /* +0x0038 81 75 00 00 */ unsigned char pRMBVtbl[8]; /* +0x0040 08 a1 00 00 */ }; struct IReleaseMarshalBuffersVtbl { unsigned char QueryInterface[8]; /* +0x0000 18 a1 00 00 */ unsigned char AddRef[8]; /* +0x0008 1b a1 00 00 */ unsigned char Release[8]; /* +0x0010 1b a1 00 00 */ unsigned char ReleaseMarshalBuffer[8]; /* +0x0018 1e a1 00 00 */ }; struct CProcGen { unsigned char _pProcFormatString[8]; /* +0x0000 4b 19 00 00 */ unsigned short _offset; /* +0x0008 */ unsigned short _stackSize; /* +0x000a */ unsigned long _clientBufferSize; /* +0x000c */ unsigned long _serverBufferSize; /* +0x0010 */ unsigned char _fClientMustSize[4]; /* +0x0014 74 00 00 00 */ unsigned char _fServerMustSize[4]; /* +0x0018 74 00 00 00 */ unsigned char _fClientCorrCheck[4]; /* +0x001c 74 00 00 00 */ unsigned char _fServerCorrCheck[4]; /* +0x0020 74 00 00 00 */ unsigned short _usFloatArgMask; /* +0x0024 */ unsigned short _usFloatSlots; /* +0x0026 */ unsigned char _pTypeGen[8]; /* +0x0028 22 a1 00 00 */ }; struct _MemoryInfo { unsigned short MemorySize; /* +0x0000 */ unsigned short MemoryAlignment; /* +0x0002 */ unsigned short WireSize; /* +0x0004 */ unsigned short WireAlignment; /* +0x0006 */ }; struct CTypeGen { unsigned char _pTypeFormat[8]; /* +0x0000 4b 19 00 00 */ unsigned short _cbTypeFormat; /* +0x0008 */ unsigned short _offset; /* +0x000a */ unsigned long _uStructSize; /* +0x000c */ }; struct TypeInfoVtbl { long cRefs; /* +0x0000 */ unsigned char iid[16]; /* +0x0004 f3 14 00 00 */ unsigned char fIsDual[4]; /* +0x0014 74 00 00 00 */ unsigned char stubDesc[152]; /* +0x0018 75 29 00 00 */ unsigned char stubInfo[64]; /* +0x00b0 6a 48 00 00 */ unsigned char stubVtbl[112]; /* +0x00f0 7b 8a 00 00 */ unsigned char proxyInfo[48]; /* +0x0160 6d 51 00 00 */ unsigned char proxyVtbl[16]; /* +0x0190 80 8a 00 00 */ }; enum CProcGen::AnalyzeFloatTypes::__l2::FloatType { NonFloat = 0, Single = 1, Double = 2, DualSingle = 3 }; struct ICallFactoryVtbl { unsigned char QueryInterface[8]; /* +0x0000 9f a1 00 00 */ unsigned char AddRef[8]; /* +0x0008 fb 92 00 00 */ unsigned char Release[8]; /* +0x0010 fb 92 00 00 */ unsigned char CreateCall[8]; /* +0x0018 a2 a1 00 00 */ }; struct ISynchronizeVtbl { unsigned char QueryInterface[8]; /* +0x0000 a7 a1 00 00 */ unsigned char AddRef[8]; /* +0x0008 a9 a1 00 00 */ unsigned char Release[8]; /* +0x0010 a9 a1 00 00 */ unsigned char Wait[8]; /* +0x0018 ac a1 00 00 */ unsigned char Signal[8]; /* +0x0020 ae a1 00 00 */ unsigned char Reset[8]; /* +0x0028 ae a1 00 00 */ }; struct _NdrDcomAsyncFlags { /* unsigned char AsyncMsgSet[0]; +0x0000 94 13 00 00 */ /* unsigned char BeginStarted[0]; +0x0000 90 18 00 00 */ /* unsigned char BeginDone[0]; +0x0000 91 18 00 00 */ /* unsigned char FinishStarted[0]; +0x0000 74 1e 00 00 */ /* unsigned char FinishDone[0]; +0x0000 75 1e 00 00 */ /* unsigned char BeginError[0]; +0x0000 0b 24 00 00 */ /* unsigned char FinishError[0]; +0x0000 32 1f 00 00 */ /* unsigned char InvokeForwarded[0]; +0x0000 33 1f 00 00 */ unsigned char Unused[4]; /* +0x0000 b1 a1 00 00 */ }; struct tagCStdAsyncStubBuffer { void *lpForwardingVtbl; /* +0x0000 */ unsigned char pBaseStubBuffer[8]; /* +0x0008 96 1d 00 00 */ unsigned char lpVtbl[8]; /* +0x0010 0c a1 00 00 */ long RefCount; /* +0x0018 */ unsigned char pvServerObject[8]; /* +0x0020 93 17 00 00 */ unsigned char pCallFactoryVtbl[8]; /* +0x0028 05 a1 00 00 */ unsigned char pAsyncIID[8]; /* +0x0030 67 16 00 00 */ unsigned char pPSFactory[8]; /* +0x0038 81 75 00 00 */ unsigned char pRMBVtbl[8]; /* +0x0040 08 a1 00 00 */ unsigned char pSynchronizeVtbl[8]; /* +0x0048 b6 a1 00 00 */ unsigned char CallState[24]; /* +0x0050 b7 a1 00 00 */ }; struct tagCStdStubBuffer { unsigned char lpVtbl[8]; /* +0x0000 0c a1 00 00 */ long RefCount; /* +0x0008 */ unsigned char pvServerObject[8]; /* +0x0010 93 17 00 00 */ unsigned char pCallFactoryVtbl[8]; /* +0x0018 05 a1 00 00 */ unsigned char pAsyncIID[8]; /* +0x0020 67 16 00 00 */ unsigned char pPSFactory[8]; /* +0x0028 81 75 00 00 */ unsigned char pRMBVtbl[8]; /* +0x0030 08 a1 00 00 */ }; struct _NdrDcomAsyncCallState { unsigned long Signature; /* +0x0000 */ unsigned long Lock; /* +0x0004 */ void *pAsyncMsg; /* +0x0008 */ unsigned char Flags[4]; /* +0x0010 bc a1 00 00 */ unsigned char Hr[4]; /* +0x0014 08 00 00 00 */ }; struct IRpcStubBufferVtbl { unsigned char QueryInterface[8]; /* +0x0000 33 9d 00 00 */ unsigned char AddRef[8]; /* +0x0008 a4 8a 00 00 */ unsigned char Release[8]; /* +0x0010 a4 8a 00 00 */ unsigned char Connect[8]; /* +0x0018 a7 8a 00 00 */ unsigned char Disconnect[8]; /* +0x0020 a9 8a 00 00 */ unsigned char Invoke[8]; /* +0x0028 ac 8a 00 00 */ unsigned char IsIIDSupported[8]; /* +0x0030 30 9d 00 00 */ unsigned char CountRefs[8]; /* +0x0038 a4 8a 00 00 */ unsigned char DebugServerQueryInterface[8]; /* +0x0040 b2 8a 00 00 */ unsigned char DebugServerRelease[8]; /* +0x0048 b5 8a 00 00 */ }; struct IPSFactoryHookVtbl { unsigned char QueryInterface[8]; /* +0x0000 ce a1 00 00 */ unsigned char AddRef[8]; /* +0x0008 96 8a 00 00 */ unsigned char Release[8]; /* +0x0010 96 8a 00 00 */ unsigned char CreateProxy[8]; /* +0x0018 d1 a1 00 00 */ unsigned char CreateStub[8]; /* +0x0020 d4 a1 00 00 */ unsigned char HkGetProxyFileInfo[8]; /* +0x0028 d7 a1 00 00 */ }; struct tagCStdProxyBuffer { unsigned char lpVtbl[8]; /* +0x0000 02 a1 00 00 */ unsigned char pProxyVtbl[8]; /* +0x0008 4f 19 00 00 */ long RefCount; /* +0x0010 */ unsigned char punkOuter[8]; /* +0x0018 93 17 00 00 */ unsigned char pChannel[8]; /* +0x0020 77 19 00 00 */ unsigned char pPSFactory[8]; /* +0x0028 81 75 00 00 */ unsigned char Pad_pBaseProxyBuffer[8]; /* +0x0030 91 1d 00 00 */ unsigned char Pad_pPSFactory[8]; /* +0x0038 81 75 00 00 */ unsigned char Pad_iidBase[16]; /* +0x0040 f3 14 00 00 */ unsigned char pCallFactoryVtbl[8]; /* +0x0050 05 a1 00 00 */ unsigned char pAsyncIID[8]; /* +0x0058 67 16 00 00 */ unsigned char pRMBVtbl[8]; /* +0x0060 08 a1 00 00 */ }; struct IRpcChannelBuffer3Vtbl { unsigned char QueryInterface[8]; /* +0x0000 f4 a1 00 00 */ unsigned char AddRef[8]; /* +0x0008 f7 a1 00 00 */ unsigned char Release[8]; /* +0x0010 f7 a1 00 00 */ unsigned char GetBuffer[8]; /* +0x0018 fa a1 00 00 */ unsigned char SendReceive[8]; /* +0x0020 fd a1 00 00 */ unsigned char FreeBuffer[8]; /* +0x0028 00 a2 00 00 */ unsigned char GetDestCtx[8]; /* +0x0030 03 a2 00 00 */ unsigned char IsConnected[8]; /* +0x0038 05 a2 00 00 */ unsigned char GetProtocolVersion[8]; /* +0x0040 08 a2 00 00 */ unsigned char Send[8]; /* +0x0048 fd a1 00 00 */ unsigned char Receive[8]; /* +0x0050 0b a2 00 00 */ unsigned char Cancel[8]; /* +0x0058 00 a2 00 00 */ unsigned char GetCallContext[8]; /* +0x0060 0e a2 00 00 */ unsigned char GetDestCtxEx[8]; /* +0x0068 11 a2 00 00 */ unsigned char GetState[8]; /* +0x0070 fd a1 00 00 */ unsigned char RegisterAsync[8]; /* +0x0078 14 a2 00 00 */ }; struct IAsyncRpcChannelBufferVtbl { unsigned char QueryInterface[8]; /* +0x0000 1a a2 00 00 */ unsigned char AddRef[8]; /* +0x0008 1d a2 00 00 */ unsigned char Release[8]; /* +0x0010 1d a2 00 00 */ unsigned char GetBuffer[8]; /* +0x0018 20 a2 00 00 */ unsigned char SendReceive[8]; /* +0x0020 23 a2 00 00 */ unsigned char FreeBuffer[8]; /* +0x0028 26 a2 00 00 */ unsigned char GetDestCtx[8]; /* +0x0030 29 a2 00 00 */ unsigned char IsConnected[8]; /* +0x0038 2b a2 00 00 */ unsigned char GetProtocolVersion[8]; /* +0x0040 2e a2 00 00 */ unsigned char Send[8]; /* +0x0048 31 a2 00 00 */ unsigned char Receive[8]; /* +0x0050 23 a2 00 00 */ unsigned char GetDestCtxEx[8]; /* +0x0058 34 a2 00 00 */ }; struct tagCStdAsyncProxyBuffer { unsigned char lpVtbl[8]; /* +0x0000 02 a1 00 00 */ unsigned char pProxyVtbl[8]; /* +0x0008 4f 19 00 00 */ long RefCount; /* +0x0010 */ unsigned char punkOuter[8]; /* +0x0018 93 17 00 00 */ unsigned char pChannel[8]; /* +0x0020 77 19 00 00 */ unsigned char map[8]; /* +0x0028 37 a2 00 00 */ unsigned char pBaseProxyBuffer[8]; /* +0x0030 91 1d 00 00 */ unsigned char pPSFactory[8]; /* +0x0038 81 75 00 00 */ unsigned char iidBase[16]; /* +0x0040 f3 14 00 00 */ unsigned char pCallFactoryVtbl[8]; /* +0x0050 05 a1 00 00 */ unsigned char pSyncIID[8]; /* +0x0058 67 16 00 00 */ unsigned char pRMBVtbl[8]; /* +0x0060 08 a1 00 00 */ unsigned char CallState[24]; /* +0x0068 b7 a1 00 00 */ }; struct _CStdProxyBufferMap { unsigned char pBaseProxy[8]; /* +0x0000 93 17 00 00 */ }; struct tagChannelWrapper { unsigned char lpVtbl[8]; /* +0x0000 3e a2 00 00 */ long RefCount; /* +0x0008 */ unsigned char pIID[8]; /* +0x0010 67 16 00 00 */ unsigned char pChannel[8]; /* +0x0018 77 19 00 00 */ }; struct IAsyncManagerVtbl { unsigned char QueryInterface[8]; /* +0x0000 43 a2 00 00 */ unsigned char AddRef[8]; /* +0x0008 46 a2 00 00 */ unsigned char Release[8]; /* +0x0010 46 a2 00 00 */ unsigned char CompleteCall[8]; /* +0x0018 49 a2 00 00 */ unsigned char GetCallContext[8]; /* +0x0020 43 a2 00 00 */ unsigned char GetState[8]; /* +0x0028 4c a2 00 00 */ }; struct IRpcChannelBuffer2Vtbl { unsigned char QueryInterface[8]; /* +0x0000 52 a2 00 00 */ unsigned char AddRef[8]; /* +0x0008 55 a2 00 00 */ unsigned char Release[8]; /* +0x0010 55 a2 00 00 */ unsigned char GetBuffer[8]; /* +0x0018 58 a2 00 00 */ unsigned char SendReceive[8]; /* +0x0020 5b a2 00 00 */ unsigned char FreeBuffer[8]; /* +0x0028 5e a2 00 00 */ unsigned char GetDestCtx[8]; /* +0x0030 61 a2 00 00 */ unsigned char IsConnected[8]; /* +0x0038 63 a2 00 00 */ unsigned char GetProtocolVersion[8]; /* +0x0040 66 a2 00 00 */ }; enum UDTAlignmentWorkaroundAction { UDT_ACTION_INVALID = 0, UDT_ACTION_NOOP = 1, UDT_ACTION_USEOLDDCOM56 = 2, UDT_ACTION_USE_NEWDCOM56_SIMPLESTRUCT = 3, UDT_ACTION_USE_NEWDCOM56_NORMAL = 4 }; struct _NDR_FCDEF_CORRELATION { /* unsigned char Type[0]; +0x0000 84 a2 00 00 */ /* unsigned char Kind[0]; +0x0000 85 a2 00 00 */ unsigned char Operation[2]; /* +0x0000 cf a0 00 00 */ short Offset; /* +0x0002 */ unsigned char CorrFlags[2]; /* +0x0004 86 a2 00 00 */ unsigned char Reserved[2]; /* +0x0006 0f 33 00 00 */ }; struct _NDR_CORRELATION_FLAGS { /* unsigned char Early[0]; +0x0000 a2 1e 00 00 */ /* unsigned char Split[0]; +0x0000 a3 1e 00 00 */ /* unsigned char IsIidIs[0]; +0x0000 a4 1e 00 00 */ /* unsigned char DontCheck[0]; +0x0000 28 26 00 00 */ /* unsigned char Ranged[0]; +0x0000 0e 26 00 00 */ unsigned char Unused[1]; /* +0x0000 29 26 00 00 */ }; struct _NDR_DCOM_ASYNC_MESSAGE { long Version; /* +0x0000 */ long Signature; /* +0x0004 */ unsigned char SyntaxType[4]; /* +0x0008 5c 9f 00 00 */ long nBeginParams; /* +0x000c */ void *BeginParams; /* +0x0010 */ long nFinishParams; /* +0x0018 */ void *FinishParams; /* +0x0020 */ unsigned char *BeginStack; /* +0x0028 */ unsigned char *FinishStack; /* +0x0030 */ unsigned long BeginStackSize; /* +0x0038 */ unsigned long FinishStackSize; /* +0x003c */ unsigned char Flags[4]; /* +0x0040 b1 9e 00 00 */ unsigned long RefCount; /* +0x0044 */ void *pThis; /* +0x0048 */ void *pAsyncPB; /* +0x0050 */ void *pAsyncSB; /* +0x0058 */ unsigned long *pdwStubPhase; /* +0x0060 */ unsigned short StubPhase; /* +0x0068 */ unsigned long ErrorCode; /* +0x006c */ unsigned char RpcMsg[80]; /* +0x0070 6f 29 00 00 */ unsigned char StubMsg[400]; /* +0x00c0 19 1a 00 00 */ unsigned char ProcContext[800]; /* +0x0250 8b 29 00 00 */ unsigned char *pArg; /* +0x0570 */ unsigned long long AppStack; /* +0x0578 */ }; struct NDR_PROC_HEADER_EXTS64 { unsigned char Size; /* +0x0000 */ unsigned char Flags2[1]; /* +0x0001 66 58 00 00 */ unsigned short ClientCorrHint; /* +0x0002 */ unsigned short ServerCorrHint; /* +0x0004 */ unsigned short NotifyIndex; /* +0x0006 */ unsigned short FloatArgMask; /* +0x0008 */ }; struct IRpcSyntaxNegotiateVtbl { unsigned char QueryInterface[8]; /* +0x0000 36 a3 00 00 */ unsigned char AddRef[8]; /* +0x0008 39 a3 00 00 */ unsigned char Release[8]; /* +0x0010 39 a3 00 00 */ unsigned char NegotiateSyntax[8]; /* +0x0018 3c a3 00 00 */ }; struct ActivatableClassRegistrationEntryProperties { unsigned char CLSID[8]; /* +0x0000 69 a3 00 00 */ unsigned char ActivationType[8]; /* +0x0008 84 6a 00 00 */ unsigned char Server[16]; /* +0x0010 63 a3 00 00 */ unsigned char DllPath[24]; /* +0x0020 50 a3 00 00 */ unsigned char Threading[8]; /* +0x0038 47 a3 00 00 */ unsigned char CustomAttributes[8]; /* +0x0040 f4 a3 00 00 */ }; struct ClassIdRegistrationEntryProperties { unsigned char ActivatableClassId[8]; /* +0x0000 69 a3 00 00 */ unsigned char PackageMoniker[8]; /* +0x0008 69 a3 00 00 */ }; struct ExtensionRegistrationEntryProperties { unsigned char Vendor[8]; /* +0x0000 69 a3 00 00 */ unsigned char Icon[8]; /* +0x0008 69 a3 00 00 */ unsigned char DisplayName[8]; /* +0x0010 69 a3 00 00 */ unsigned char Description[8]; /* +0x0018 69 a3 00 00 */ unsigned char CustomProperties[8]; /* +0x0020 f4 a3 00 00 */ }; struct ServerRegistrationEntryProperties { unsigned char ExePath[16]; /* +0x0000 56 a3 00 00 */ unsigned char CommandLine[24]; /* +0x0010 50 a3 00 00 */ unsigned char AppUserModelId[16]; /* +0x0028 63 a3 00 00 */ unsigned char Instancing[4]; /* +0x0038 64 95 00 00 */ unsigned char IdentityType[4]; /* +0x003c 5d 95 00 00 */ unsigned char Permissions[16]; /* +0x0040 15 a4 00 00 */ unsigned char ActivatableClasses[8]; /* +0x0050 db a3 00 00 */ unsigned char PackageMoniker[16]; /* +0x0058 63 a3 00 00 */ }; struct DebugInformationRegistrationEntryProperties { unsigned char DebugPath[16]; /* +0x0000 56 a3 00 00 */ unsigned char Environment[16]; /* +0x0010 d5 a3 00 00 */ }; struct ExpandableString { unsigned char Unexpanded[8]; /* +0x0000 69 a3 00 00 */ unsigned char IsExpandable[8]; /* +0x0008 30 00 00 00 */ }; struct ProxyStubRegistrationEntryProperties { unsigned char Description[8]; /* +0x0000 69 a3 00 00 */ unsigned char DllPath[8]; /* +0x0008 69 a3 00 00 */ }; enum ExtensionRegistrationEntryPropertyIndex { Vendor = 0, Icon = 1, DisplayName = 2, Description = 3, CustomProperties = 4, NumProperties = 5 }; struct InterfaceRegistrationEntryProperties { unsigned char InterfaceName[8]; /* +0x0000 69 a3 00 00 */ unsigned char ProxyStubCLSID[8]; /* +0x0008 69 a3 00 00 */ }; struct EntryPropertyStore { unsigned char MapView[8]; /* +0x0000 09 6a 00 00 */ }; struct XWinRT::XPlex { unsigned char pNext[8]; /* +0x0000 ae aa 00 00 */ }; enum XWinRT::ComLock::Kind { Kind_Srw = 0, Kind_StaReentrancy = 1 }; struct XWinRT::detail::ReentrancyGuard<1> { unsigned char _hr[8]; /* +0x0000 08 00 00 00 */ unsigned char _pGuard[8]; /* +0x0008 9d 1e 00 00 */ }; struct XWinRT::FakeStl::_align_type { /* unsigned char _val[0]; +0x0000 41 00 00 00 */ unsigned char _pad[8]; /* +0x0000 38 1d 00 00 */ }; struct XWinRT::FakeStl::_align_type { /* unsigned char _val[0]; +0x0000 74 00 00 00 */ unsigned char _pad[4]; /* +0x0000 e0 90 00 00 */ }; struct XWinRT::IntVersionTag { unsigned char _iVersion[4]; /* +0x0000 74 00 00 00 */ }; enum Windows::Foundation::Collections::CollectionChange { Reset = 0, ItemInserted = 1, ItemRemoved = 2, ItemChanged = 3 }; struct _lclor_MIDL_TYPE_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[796]; /* +0x0002 0b af 00 00 */ }; struct _lclor_MIDL_PROC_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[770]; /* +0x0002 0f af 00 00 */ }; struct _srgtprot_MIDL_TYPE_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[48]; /* +0x0002 27 af 00 00 */ }; struct _srgtprot_MIDL_PROC_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[344]; /* +0x0002 2a af 00 00 */ }; struct _irot_MIDL_TYPE_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[196]; /* +0x0002 31 af 00 00 */ }; struct _irot_MIDL_PROC_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[488]; /* +0x0002 34 af 00 00 */ }; struct _scm_MIDL_PROC_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[1064]; /* +0x0002 45 af 00 00 */ }; struct _scm_MIDL_TYPE_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[414]; /* +0x0002 48 af 00 00 */ }; struct _orcb_MIDL_PROC_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[260]; /* +0x0002 70 af 00 00 */ }; struct _orcb_MIDL_TYPE_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[58]; /* +0x0002 74 af 00 00 */ }; struct _KTIME_UPDATE { unsigned char UpdateA[12]; /* +0x0000 55 4d 00 00 */ unsigned char UpdateB[12]; /* +0x000c 55 4d 00 00 */ }; struct Microsoft::WRL::Details::CreatorMap { unsigned char factoryCreator[40]; /* +0x0000 95 af 00 00 */ }; enum Microsoft::WRL::ModuleType { InProc = 1, OutOfProc = 2, DisableCaching = 4, InProcDisableCaching = 5, OutOfProcDisableCaching = 6 }; enum Microsoft::WRL::FactoryCacheFlags { FactoryCacheDefault = 0, FactoryCacheEnabled = 1, FactoryCacheDisabled = 2 }; struct Microsoft::WRL::Details::CreatorMap:: { /* unsigned char clsid[0]; +0x0000 67 16 00 00 */ unsigned char getRuntimeName[8]; /* +0x0000 be b2 00 00 */ }; struct Microsoft::WRL::Details::FactoryCache { unsigned char factory[16]; /* +0x0000 93 17 00 00 */ }; struct Microsoft::WRL::Details::FactoryCache:: { /* unsigned char winrt[0]; +0x0000 6f 15 00 00 */ unsigned long com; /* +0x0000 */ }; /* enum { WPP_VER_WIN2K_CB_FORWARD_PTR = 1, WPP_VER_WHISTLER_CB_FORWARD_PTR = 2, WPP_VER_LH_CB_FORWARD_PTR = 3 }; */ enum _WPP_FLAG_LEN_ENUM_MAX { WPP_MAX_FLAG_LEN_CHECK = 1 }; struct EventPoolEntry::InitState { /* unsigned char _ulInitState[0]; +0x0000 d8 17 00 00 */ /* unsigned char _ulNumInitedRWThreads[0]; +0x0000 0b c1 00 00 */ unsigned char _ulNumInitedRWLocks[8]; /* +0x0000 0c c1 00 00 */ }; struct Thread { unsigned char pHead[8]; /* +0x0000 24 c1 00 00 */ unsigned char pLastEmbeddedEnty[8]; /* +0x0008 24 c1 00 00 */ unsigned char embeddedEntry[32]; /* +0x0010 25 c1 00 00 */ }; struct CRWLock::GetPoolEntry::__l2::EventStatePoolEntry { unsigned char dwEventState[4]; /* +0x0000 cf 17 00 00 */ /* unsigned char dwHighPart[-4]; +0x0004 cf 17 00 00 */ unsigned char pPoolEntry[8]; /* +0x0000 07 5f 00 00 */ }; struct CRWLock::ReleasePoolEntry::__l2::LockStatePoolEntry { unsigned char ulLockState[8]; /* +0x0000 d8 17 00 00 */ unsigned char dwEventState[4]; /* +0x0008 cf 17 00 00 */ /* unsigned char dwHighPart[-4]; +0x000c cf 17 00 00 */ unsigned char pPoolEntry[8]; /* +0x0008 07 5f 00 00 */ }; enum EventPoolEntry::WaitForWriterEvent::__l2::AnyAbsorbtionState { NONE = 0, ABSORBED = 1, RELEIVED = 2 }; enum _AHC_SERVICE_CLASS { ApphelpCacheServiceLookup = 0, ApphelpCacheServiceRemove = 1, ApphelpCacheServiceUpdate = 2, ApphelpCacheServiceClear = 3, ApphelpCacheServiceDump = 4, ApphelpCacheServiceStartedService = 5, ApphelpCacheServiceStoppingService = 6, ApphelpCacheServiceForward = 7, ApphelpCacheServiceQuery = 8, ApphelpCacheServiceLookupCdb = 9, ApphelpCacheServiceRefreshCdb = 10, ApphelpCacheServiceMax = 11 }; enum _PERFINFO_KERNELMEMORY_USAGE_TYPE { PerfInfoMemUsagePfnMetadata = 0, PerfInfoMemUsageMax = 1 }; struct _AHC_STORE_STATISTICS { unsigned long LookupHits; /* +0x0000 */ unsigned long LookupMisses; /* +0x0004 */ unsigned long Inserted; /* +0x0008 */ unsigned long Replaced; /* +0x000c */ unsigned long Updated; /* +0x0010 */ }; struct _AHC_SERVICE_STATISTICS { unsigned long DropDueToServiceUnavailability; /* +0x0000 */ unsigned long DropDueToInvalidServicePort; /* +0x0004 */ unsigned long DropDueToServiceRequestError; /* +0x0008 */ unsigned long DropDueToServiceDisabled; /* +0x000c */ unsigned long DropDueToTimeout; /* +0x0010 */ unsigned long DropDueToBufferOverflow; /* +0x0014 */ unsigned long SumQueued; /* +0x0018 */ unsigned long SumExceedHeapQuota; /* +0x001c */ unsigned long SumDroppedQueueLimit; /* +0x0020 */ unsigned long SumSent; /* +0x0024 */ unsigned long SumDroppedService; /* +0x0028 */ unsigned long SumServiceConnectFailures; /* +0x002c */ unsigned long Padding1; /* +0x0030 */ unsigned long long SumBytesAllocated; /* +0x0038 */ }; struct _AHC_MAIN_STATISTICS { unsigned long Lookup; /* +0x0000 */ unsigned long Remove; /* +0x0004 */ unsigned long Update; /* +0x0008 */ unsigned long Clear; /* +0x000c */ unsigned long Dump; /* +0x0010 */ unsigned long StartedService; /* +0x0014 */ unsigned long StoppingService; /* +0x0018 */ unsigned long Forward; /* +0x001c */ unsigned long Query; /* +0x0020 */ }; struct _AHC_FORWARDQUEUE { unsigned long Size; /* +0x0000 */ unsigned long QueueLimit; /* +0x0004 */ unsigned long CurInQueue; /* +0x0008 */ unsigned long CurMaxInQueue; /* +0x000c */ }; struct _AHC_STATISTICS { unsigned long Size; /* +0x0000 */ unsigned char Main[36]; /* +0x0004 73 c1 00 00 */ unsigned char Store[24]; /* +0x0028 74 c1 00 00 */ unsigned char Service[64]; /* +0x0040 75 c1 00 00 */ }; struct _AHC_SERVICE_DATAQUERY { unsigned char Stats[128]; /* +0x0000 78 c1 00 00 */ unsigned char Queue[16]; /* +0x0080 79 c1 00 00 */ unsigned long DataSize; /* +0x0090 */ unsigned char *Data; /* +0x0098 */ }; struct _PERFINFO_GROUPMASK { unsigned char Masks[32]; /* +0x0000 cc 4e 00 00 */ }; struct _EVENT_HEADER { unsigned short Size; /* +0x0000 */ unsigned short HeaderType; /* +0x0002 */ unsigned short Flags; /* +0x0004 */ unsigned short EventProperty; /* +0x0006 */ unsigned long ThreadId; /* +0x0008 */ unsigned long ProcessId; /* +0x000c */ unsigned char TimeStamp[8]; /* +0x0010 43 13 00 00 */ unsigned char ProviderId[16]; /* +0x0018 f3 14 00 00 */ unsigned char EventDescriptor[16]; /* +0x0028 47 6a 00 00 */ unsigned long KernelTime; /* +0x0038 */ unsigned long UserTime; /* +0x003c */ unsigned long long ProcessorTime; /* +0x0038 */ unsigned char ActivityId[16]; /* +0x0040 f3 14 00 00 */ }; struct _EVENT_HEADER_EXTENDED_DATA_ITEM { unsigned short Reserved1; /* +0x0000 */ unsigned short ExtType; /* +0x0002 */ /* unsigned char Linkage[0]; +0x0004 b1 2e 00 00 */ unsigned char Reserved2[2]; /* +0x0004 82 c1 00 00 */ unsigned short DataSize; /* +0x0006 */ unsigned long long DataPtr; /* +0x0008 */ }; enum _PERFINFO_MM_STAT { PerfInfoMMStatNotUsed = 0, PerfInfoMMStatAggregatePageCombine = 1, PerfInfoMMStatIterationPageCombine = 2, PerfInfoMMStatMax = 3 }; struct _AHC_SERVICE_DATAFORWARD { unsigned short ExecutableType; /* +0x0000 */ unsigned short Padding1; /* +0x0002 */ unsigned long Reason; /* +0x0004 */ unsigned char ExecutablePath[16]; /* +0x0008 e3 12 00 00 */ void *FileHandle; /* +0x0018 */ unsigned char Environment[16]; /* +0x0020 e3 12 00 00 */ unsigned char PackageMoniker[16]; /* +0x0030 e3 12 00 00 */ }; struct _EVENT_RECORD { unsigned char EventHeader[80]; /* +0x0000 89 c1 00 00 */ unsigned char BufferContext[4]; /* +0x0050 e3 57 00 00 */ unsigned short ExtendedDataCount; /* +0x0054 */ unsigned short UserDataLength; /* +0x0056 */ unsigned char ExtendedData[8]; /* +0x0058 81 c1 00 00 */ void *UserData; /* +0x0060 */ void *UserContext; /* +0x0068 */ }; struct _AHC_SERVICE_DATACACHE { unsigned long probed; /* +0x0000 */ unsigned long probeResult; /* +0x0004 */ void *FileHandle; /* +0x0008 */ void *ProcessHandle; /* +0x0010 */ unsigned char FileName[16]; /* +0x0018 e3 12 00 00 */ unsigned long CustomDataSize; /* +0x0028 */ unsigned char *CustomData; /* +0x0030 */ }; struct _AHC_SERVICE_DATA { unsigned char Query[160]; /* +0x0000 8e c1 00 00 */ unsigned char Cache[56]; /* +0x00a0 8f c1 00 00 */ unsigned char Forward[64]; /* +0x00d8 90 c1 00 00 */ unsigned char Cdb[24]; /* +0x0118 91 c1 00 00 */ }; struct _AHC_SERVICE_DATACDB { unsigned long Type; /* +0x0000 */ unsigned long Padding; /* +0x0004 */ unsigned char Name[16]; /* +0x0008 e3 12 00 00 */ }; enum LoadOrFreeWhat { LoadLibrarySucceeded = 0, LoadLibraryFailed = 1, CallingFreeLibrary = 2 }; enum RegistrationPropertyType { RequiredString = 0, RequiredGuidString = 1, RequiredMultiString = 2, RequiredExpandableString = 3, RequiredUInt32 = 4, RequiredUInt32Range = 5, RequiredUInt64 = 6, RequiredSecurityDescriptor = 7, OptionalString = 8, OptionalGuidString = 9, OptionalMultiString = 10, OptionalExpandableString = 11, OptionalUInt32 = 12, OptionalUInt32Range = 13, PropertyStoreInSubKey = 14 }; enum RegistrationStore::Node::WriteOperation { None = 0, Create = 1, RemoveForUpdate = 2, Remove = 3 }; /* enum RegistrationStore::NodeType { Nothing = Unavail, ExtensionsTopLevel = 0, Contracts = 1, Contract = 2, PackagesForContract = 3, PackageForContract = 4, ExtensionRegistrationsForContractAndPackage = 5, ExtensionRegistration = 6, ActivatableClassesTopLevel = 7, Package = 8, Packages = 9, ActivatableClassesForPackage = 10, ActivatableClassesM1 = 11, ActivatableClassRegistration = 12, ActivatableClassRegistrationM1 = 13, ServersForPackage = 14, ServersM1 = 15, ServerRegistration = 16, ServerRegistrationM1 = 17, DebugInformationForPackage = 18, DebugInformationRegistration = 19, ClassIds = 20, InterfaceRegistration = 21, InterfacesForPackage = 22, ProxyStubRegistration = 23, ProxyStubsForPackage = 24, ClassIdRegistration = 25, Count = 26 }; */ enum RegistrationStore::PackageNode::Children { ActivatableClassesForPackage = 0, ServersForPackage = 1, DebugInformationForPackage = 2, InterfacesForPackage = 3, ProxyStubsForPackage = 4, NumChildren = 5 }; enum RegistrationStore::ActivatableClassesTopLevelNode::Children { Packages = 0, ClassIds = 1, ActivatableClasses = 2, Servers = 3, NumChildren = 4 }; enum RegistrationStore::PackageForContractNode::Children { ExtensionRegistrationsForContractAndPackage = 0, NumChildren = 1 }; enum RegistrationStore::ContractNode::Children { PackagesForContract = 0, NumChildren = 1 }; enum RegistrationStore::ExtensionsTopLevelNode::Children { Contracts = 0, NumChildren = 1 }; enum ProxyStubRegistrationEntryPropertyIndex { Description = 0, DllPath = 1, NumProperties = 2 }; enum ActivatableClassRegistrationEntryPropertyIndex { CLSID = 0, ActivationType = 1, Server = 2, DllPath = 3, Threading = 4, CustomAttributes = 5, NumProperties = 6 }; enum InterfaceRegistrationEntryPropertyIndex { InterfaceName = 0, ProxyStubCLSID = 1, NumProperties = 2 }; enum ServerRegistrationEntryPropertyIndex { ExePath = 0, CommandLine = 1, AppUserModelId = 2, Instancing = 3, IdentityType = 4, Permissions = 5, ActivatableClasses = 6, NumProperties = 7 }; enum ServerRegistrationM1EntryPropertyIndex { ExePath = 0, CommandLine = 1, AppUserModelId = 2, Instancing = 3, IdentityType = 4, Permissions = 5, ActivatableClasses = 6, PackageMoniker = 7, NumProperties = 8 }; enum DebugInformationRegistrationEntryPropertyIndex { DebugPath = 0, Environment = 1, NumProperties = 2 }; enum ClassIdRegistrationEntryPropertyIndex { ActivatableClassId = 0, PackageMoniker = 1, NumProperties = 2 }; struct _custmact_MIDL_TYPE_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[1000]; /* +0x0002 35 c6 00 00 */ }; struct _PATCH_BUFFER { unsigned short PointerIndex; /* +0x0000 */ unsigned short Fill1; /* +0x0002 */ unsigned short BufferSize; /* +0x0004 */ unsigned short Fill2; /* +0x0006 */ unsigned char Buffer[248]; /* +0x0008 69 c6 00 00 */ }; struct OsFrame { unsigned char P1Home[8]; /* +0x0000 77 00 00 00 */ unsigned char P2Home[8]; /* +0x0008 77 00 00 00 */ unsigned char P3Home[8]; /* +0x0010 77 00 00 00 */ unsigned char P4Home[8]; /* +0x0018 77 00 00 00 */ unsigned char SavedXmm0[8]; /* +0x0020 77 00 00 00 */ unsigned char SavedXmm1[8]; /* +0x0028 77 00 00 00 */ unsigned char SavedXmm2[8]; /* +0x0030 77 00 00 00 */ unsigned char SavedXmm3[8]; /* +0x0038 77 00 00 00 */ unsigned char Fill[8]; /* +0x0040 77 00 00 00 */ }; struct InFrame { unsigned char P1Home[8]; /* +0x0000 77 00 00 00 */ unsigned char P2Home[8]; /* +0x0008 77 00 00 00 */ unsigned char P3Home[8]; /* +0x0010 77 00 00 00 */ unsigned char P4Home[8]; /* +0x0018 77 00 00 00 */ unsigned char SavedRbp[8]; /* +0x0020 77 00 00 00 */ unsigned char SavedRsi[8]; /* +0x0028 77 00 00 00 */ unsigned char SavedRdi[8]; /* +0x0030 77 00 00 00 */ }; struct _UNICODE_STRING { unsigned short Length; /* +0x0000 */ unsigned short MaximumLength; /* +0x0002 */ unsigned short *Buffer; /* +0x0008 */ }; /* struct { unsigned long Flags; +0x0000 unsigned char s[4]; +0x0000 77 c6 00 00 }; */ struct _TP_CALLBACK_ENVIRON_V3 { unsigned long Version; /* +0x0000 */ unsigned char Pool[8]; /* +0x0008 e2 48 00 00 */ unsigned char CleanupGroup[8]; /* +0x0010 e3 48 00 00 */ unsigned char CleanupGroupCancelCallback[8]; /* +0x0018 e5 48 00 00 */ void *RaceDll; /* +0x0020 */ unsigned char ActivationContext[8]; /* +0x0028 7d 17 00 00 */ unsigned char FinalizationCallback[8]; /* +0x0030 e8 48 00 00 */ unsigned char u[4]; /* +0x0038 79 c6 00 00 */ unsigned char CallbackPriority[4]; /* +0x003c ea 48 00 00 */ unsigned long Size; /* +0x0040 */ }; struct _IMAGE_DELAYLOAD_DESCRIPTOR { unsigned char Attributes[4]; /* +0x0000 7c c6 00 00 */ unsigned long DllNameRVA; /* +0x0004 */ unsigned long ModuleHandleRVA; /* +0x0008 */ unsigned long ImportAddressTableRVA; /* +0x000c */ unsigned long ImportNameTableRVA; /* +0x0010 */ unsigned long BoundImportAddressTableRVA; /* +0x0014 */ unsigned long UnloadInformationTableRVA; /* +0x0018 */ unsigned long TimeDateStamp; /* +0x001c */ }; struct _DELAYLOAD_INFO { unsigned long Size; /* +0x0000 */ unsigned char DelayloadDescriptor[8]; /* +0x0008 ab 3b 00 00 */ unsigned char ThunkAddress[8]; /* +0x0010 50 3e 00 00 */ unsigned char TargetDllName[8]; /* +0x0018 79 14 00 00 */ unsigned char TargetApiDescriptor[16]; /* +0x0020 7f c6 00 00 */ void *TargetModuleBase; /* +0x0030 */ void *Unused; /* +0x0038 */ unsigned long LastError; /* +0x0040 */ }; /* struct { /* unsigned char Name[0]; +0x0000 79 14 00 00 unsigned long Ordinal; +0x0000 }; */ struct _DELAYLOAD_PROC_DESCRIPTOR { unsigned long ImportDescribedByName; /* +0x0000 */ unsigned char Description[8]; /* +0x0008 83 c6 00 00 */ }; struct _IMAGE_THUNK_DATA64 { unsigned char u1[8]; /* +0x0000 86 c6 00 00 */ }; struct $_TypeDescriptor$_extraBytes_24 { unsigned char pVFTable[8]; /* +0x0000 4f 19 00 00 */ void *spare; /* +0x0008 */ unsigned char name[24]; /* +0x0010 c4 49 00 00 */ }; struct CsFrame { unsigned char SavedR10[8]; /* +0x0000 77 00 00 00 */ unsigned char SavedR11[8]; /* +0x0008 77 00 00 00 */ }; struct _IMAGE_SECTION_HEADER { unsigned char Name[8]; /* +0x0000 91 19 00 00 */ unsigned char Misc[4]; /* +0x0008 9e c6 00 00 */ unsigned long VirtualAddress; /* +0x000c */ unsigned long SizeOfRawData; /* +0x0010 */ unsigned long PointerToRawData; /* +0x0014 */ unsigned long PointerToRelocations; /* +0x0018 */ unsigned long PointerToLinenumbers; /* +0x001c */ unsigned short NumberOfRelocations; /* +0x0020 */ unsigned short NumberOfLinenumbers; /* +0x0022 */ unsigned long Characteristics; /* +0x0024 */ }; struct _EXCEPTION_RECORD { unsigned long ExceptionCode; /* +0x0000 */ unsigned long ExceptionFlags; /* +0x0004 */ unsigned char ExceptionRecord[8]; /* +0x0008 13 29 00 00 */ void *ExceptionAddress; /* +0x0010 */ unsigned long NumberParameters; /* +0x0018 */ unsigned char ExceptionInformation[120]; /* +0x0020 1f 45 00 00 */ }; struct FT { unsigned long long ft_scalar; /* +0x0000 */ unsigned char ft_struct[8]; /* +0x0000 37 13 00 00 */ }; struct _SCOPE_TABLE { unsigned long Count; /* +0x0000 */ unsigned char ScopeRecord[16]; /* +0x0004 b5 c6 00 00 */ }; struct _UNWIND_CODE { unsigned char CodeOffset; /* +0x0000 */ /* unsigned char UnwindOp[0]; +0x0001 ea 13 00 00 */ /* unsigned char OpInfo[-1]; +0x0001 eb 13 00 00 */ /* unsigned char EpilogueCode[0]; +0x0000 bd c6 00 00 */ unsigned short FrameOffset; /* +0x0000 */ }; /* struct { /* unsigned char EHandler[0]; +0x0000 94 13 00 00 /* unsigned char UHandler[0]; +0x0000 90 18 00 00 unsigned char HasAlignment[4]; +0x0000 91 18 00 00 }; */ /* struct { /* unsigned char Bits[0]; +0x0000 c1 c6 00 00 long CookieOffset; +0x0000 }; */ struct _GS_HANDLER_DATA { unsigned char u[4]; /* +0x0000 c3 c6 00 00 */ long AlignedBaseOffset; /* +0x0004 */ long Alignment; /* +0x0008 */ }; enum __enative_startup_state { __uninitialized = 0, __initializing = 1, __initialized = 2 }; enum _POOL_TYPE { NonPagedPool = 0, NonPagedPoolExecute = 0, PagedPool = 1, NonPagedPoolMustSucceed = 2, DontUseThisType = 3, NonPagedPoolCacheAligned = 4, PagedPoolCacheAligned = 5, NonPagedPoolCacheAlignedMustS = 6, MaxPoolType = 7, NonPagedPoolBase = 0, NonPagedPoolBaseMustSucceed = 2, NonPagedPoolBaseCacheAligned = 4, NonPagedPoolBaseCacheAlignedMustS = 6, NonPagedPoolSession = 32, PagedPoolSession = 33, NonPagedPoolMustSucceedSession = 34, DontUseThisTypeSession = 35, NonPagedPoolCacheAlignedSession = 36, PagedPoolCacheAlignedSession = 37, NonPagedPoolCacheAlignedMustSSession = 38, NonPagedPoolNx = 512, NonPagedPoolNxCacheAligned = 516, NonPagedPoolSessionNx = 544 }; enum _MODE { KernelMode = 0, UserMode = 1, MaximumMode = 2 }; enum _INTERLOCKED_RESULT { ResultNegative = 1, ResultZero = 0, ResultPositive = 2 }; enum _REG_NOTIFY_CLASS { RegNtDeleteKey = 0, RegNtPreDeleteKey = 0, RegNtSetValueKey = 1, RegNtPreSetValueKey = 1, RegNtDeleteValueKey = 2, RegNtPreDeleteValueKey = 2, RegNtSetInformationKey = 3, RegNtPreSetInformationKey = 3, RegNtRenameKey = 4, RegNtPreRenameKey = 4, RegNtEnumerateKey = 5, RegNtPreEnumerateKey = 5, RegNtEnumerateValueKey = 6, RegNtPreEnumerateValueKey = 6, RegNtQueryKey = 7, RegNtPreQueryKey = 7, RegNtQueryValueKey = 8, RegNtPreQueryValueKey = 8, RegNtQueryMultipleValueKey = 9, RegNtPreQueryMultipleValueKey = 9, RegNtPreCreateKey = 10, RegNtPostCreateKey = 11, RegNtPreOpenKey = 12, RegNtPostOpenKey = 13, RegNtKeyHandleClose = 14, RegNtPreKeyHandleClose = 14, RegNtPostDeleteKey = 15, RegNtPostSetValueKey = 16, RegNtPostDeleteValueKey = 17, RegNtPostSetInformationKey = 18, RegNtPostRenameKey = 19, RegNtPostEnumerateKey = 20, RegNtPostEnumerateValueKey = 21, RegNtPostQueryKey = 22, RegNtPostQueryValueKey = 23, RegNtPostQueryMultipleValueKey = 24, RegNtPostKeyHandleClose = 25, RegNtPreCreateKeyEx = 26, RegNtPostCreateKeyEx = 27, RegNtPreOpenKeyEx = 28, RegNtPostOpenKeyEx = 29, RegNtPreFlushKey = 30, RegNtPostFlushKey = 31, RegNtPreLoadKey = 32, RegNtPostLoadKey = 33, RegNtPreUnLoadKey = 34, RegNtPostUnLoadKey = 35, RegNtPreQueryKeySecurity = 36, RegNtPostQueryKeySecurity = 37, RegNtPreSetKeySecurity = 38, RegNtPostSetKeySecurity = 39, RegNtCallbackObjectContextCleanup = 40, RegNtPreRestoreKey = 41, RegNtPostRestoreKey = 42, RegNtPreSaveKey = 43, RegNtPostSaveKey = 44, RegNtPreReplaceKey = 45, RegNtPostReplaceKey = 46, MaxRegNtNotifyClass = 47 }; enum _MEMORY_CACHING_TYPE { MmNonCached = 0, MmCached = 1, MmWriteCombined = 2, MmHardwareCoherentCached = 3, MmNonCachedUnordered = 4, MmUSWCCached = 5, MmMaximumCacheType = 6 }; enum _DEVICE_WAKE_DEPTH { DeviceWakeDepthNotWakeable = 0, DeviceWakeDepthD0 = 1, DeviceWakeDepthD1 = 2, DeviceWakeDepthD2 = 3, DeviceWakeDepthD3hot = 4, DeviceWakeDepthD3cold = 5, DeviceWakeDepthMaximum = 6 }; struct _OWNER_ENTRY { unsigned long long OwnerThread; /* +0x0000 */ /* unsigned char IoPriorityBoosted[0]; +0x0008 94 13 00 00 */ /* unsigned char OwnerReferenced[0]; +0x0008 90 18 00 00 */ /* unsigned char OwnerCount[0]; +0x0008 c5 19 00 00 */ unsigned long TableSize; /* +0x0008 */ }; struct _KDESCRIPTOR { unsigned char Pad[6]; /* +0x0000 b0 43 00 00 */ unsigned short Limit; /* +0x0006 */ void *Base; /* +0x0008 */ }; /* struct { /* unsigned char Port[0]; +0x0000 0e c7 00 00 /* unsigned char Memory[0]; +0x0000 0e c7 00 00 /* unsigned char Interrupt[0]; +0x0000 0f c7 00 00 /* unsigned char Dma[0]; +0x0000 10 c7 00 00 /* unsigned char DmaV3[0]; +0x0000 11 c7 00 00 /* unsigned char Generic[0]; +0x0000 0e c7 00 00 /* unsigned char DevicePrivate[0]; +0x0000 12 c7 00 00 /* unsigned char BusNumber[0]; +0x0000 13 c7 00 00 /* unsigned char ConfigData[0]; +0x0000 14 c7 00 00 /* unsigned char Memory40[0]; +0x0000 15 c7 00 00 /* unsigned char Memory48[0]; +0x0000 16 c7 00 00 /* unsigned char Memory64[0]; +0x0000 17 c7 00 00 unsigned char Connection[24]; +0x0000 18 c7 00 00 }; */ struct _IO_RESOURCE_DESCRIPTOR { unsigned char Option; /* +0x0000 */ unsigned char Type; /* +0x0001 */ unsigned char ShareDisposition; /* +0x0002 */ unsigned char Spare1; /* +0x0003 */ unsigned short Flags; /* +0x0004 */ unsigned short Spare2; /* +0x0006 */ unsigned char u[24]; /* +0x0008 1a c7 00 00 */ }; enum _SECURITY_OPERATION_CODE { SetSecurityDescriptor = 0, QuerySecurityDescriptor = 1, DeleteSecurityDescriptor = 2, AssignSecurityDescriptor = 3 }; /* struct { /* unsigned char Raw[0]; +0x0000 21 c7 00 00 unsigned char Translated[16]; +0x0000 20 c7 00 00 }; */ /* struct { /* unsigned char Generic[0]; +0x0000 1f c7 00 00 /* unsigned char Port[0]; +0x0000 1f c7 00 00 /* unsigned char Interrupt[0]; +0x0000 20 c7 00 00 /* unsigned char MessageInterrupt[0]; +0x0000 23 c7 00 00 /* unsigned char Memory[0]; +0x0000 1f c7 00 00 /* unsigned char Dma[0]; +0x0000 24 c7 00 00 /* unsigned char DmaV3[0]; +0x0000 25 c7 00 00 /* unsigned char DevicePrivate[0]; +0x0000 12 c7 00 00 /* unsigned char BusNumber[0]; +0x0000 26 c7 00 00 /* unsigned char DeviceSpecificData[0]; +0x0000 27 c7 00 00 /* unsigned char Memory40[0]; +0x0000 28 c7 00 00 /* unsigned char Memory48[0]; +0x0000 29 c7 00 00 /* unsigned char Memory64[0]; +0x0000 2a c7 00 00 unsigned char Connection[16]; +0x0000 18 c7 00 00 }; */ struct _CM_PARTIAL_RESOURCE_DESCRIPTOR { unsigned char Type; /* +0x0000 */ unsigned char ShareDisposition; /* +0x0001 */ unsigned short Flags; /* +0x0002 */ unsigned char u[16]; /* +0x0004 2c c7 00 00 */ }; struct _OBJECT_DUMP_CONTROL { void *Stream; /* +0x0000 */ unsigned long Detail; /* +0x0008 */ }; struct _PAGED_LOOKASIDE_LIST { unsigned char L[128]; /* +0x0000 59 c7 00 00 */ }; struct _TXN_PARAMETER_BLOCK { unsigned short Length; /* +0x0000 */ unsigned short TxFsContext; /* +0x0002 */ void *TransactionObject; /* +0x0008 */ }; enum _WHEA_ERROR_SEVERITY { WheaErrSevRecoverable = 0, WheaErrSevFatal = 1, WheaErrSevCorrected = 2, WheaErrSevInformational = 3 }; enum _KINTERRUPT_POLARITY { InterruptPolarityUnknown = 0, InterruptActiveHigh = 1, InterruptRisingEdge = 1, InterruptActiveLow = 2, InterruptFallingEdge = 2, InterruptActiveBoth = 3 }; enum _IO_ALLOCATION_ACTION { KeepObject = 1, DeallocateObject = 2, DeallocateObjectKeepRegisters = 3 }; struct _WHEA_PERSISTENCE_INFO { /* unsigned char Signature[0]; +0x0000 1f 4b 00 00 */ /* unsigned char Length[0]; +0x0000 6f c7 00 00 */ /* unsigned char Identifier[0]; +0x0000 70 c7 00 00 */ /* unsigned char Attributes[0]; +0x0000 71 c7 00 00 */ /* unsigned char DoNotLog[0]; +0x0000 72 c7 00 00 */ /* unsigned char Reserved[0]; +0x0000 73 c7 00 00 */ unsigned long long AsULONGLONG; /* +0x0000 */ }; struct _KEVENT { unsigned char Header[24]; /* +0x0000 79 c7 00 00 */ }; struct _SCATTER_GATHER_ELEMENT { unsigned char Address[8]; /* +0x0000 43 13 00 00 */ unsigned long Length; /* +0x0008 */ unsigned long long Reserved; /* +0x0010 */ }; struct _KDPC { unsigned char Type; /* +0x0000 */ unsigned char Importance; /* +0x0001 */ unsigned char Number[6]; /* +0x0002 af 2e 00 00 */ unsigned char DpcListEntry[16]; /* +0x0008 73 1f 00 00 */ unsigned char DeferredRoutine[8]; /* +0x0018 8f c7 00 00 */ void *DeferredContext; /* +0x0020 */ void *SystemArgument1; /* +0x0028 */ void *SystemArgument2; /* +0x0030 */ void *DpcData; /* +0x0038 */ }; struct _KDEVICE_QUEUE { short Type; /* +0x0000 */ short Size; /* +0x0002 */ unsigned char DeviceListHead[16]; /* +0x0008 73 1f 00 00 */ unsigned long long Lock; /* +0x0018 */ unsigned char Busy; /* +0x0020 */ /* unsigned char Reserved[0]; +0x0020 92 c7 00 00 */ unsigned char Hint[8]; /* +0x0020 93 c7 00 00 */ }; struct _SECURITY_SUBJECT_CONTEXT { void *ClientToken; /* +0x0000 */ unsigned char ImpersonationLevel[8]; /* +0x0008 43 2e 00 00 */ void *PrimaryToken; /* +0x0010 */ void *ProcessAuditId; /* +0x0018 */ }; enum _DEVICE_USAGE_NOTIFICATION_TYPE { DeviceUsageTypeUndefined = 0, DeviceUsageTypePaging = 1, DeviceUsageTypeHibernation = 2, DeviceUsageTypeDumpFile = 3, DeviceUsageTypeBoot = 4 }; struct _DMA_OPERATIONS { unsigned long Size; /* +0x0000 */ unsigned char PutDmaAdapter[8]; /* +0x0008 a4 c7 00 00 */ unsigned char AllocateCommonBuffer[8]; /* +0x0010 a7 c7 00 00 */ unsigned char FreeCommonBuffer[8]; /* +0x0018 aa c7 00 00 */ unsigned char AllocateAdapterChannel[8]; /* +0x0020 ad c7 00 00 */ unsigned char FlushAdapterBuffers[8]; /* +0x0028 b0 c7 00 00 */ unsigned char FreeAdapterChannel[8]; /* +0x0030 a4 c7 00 00 */ unsigned char FreeMapRegisters[8]; /* +0x0038 b3 c7 00 00 */ unsigned char MapTransfer[8]; /* +0x0040 b6 c7 00 00 */ unsigned char GetDmaAlignment[8]; /* +0x0048 b8 c7 00 00 */ unsigned char ReadDmaCounter[8]; /* +0x0050 b8 c7 00 00 */ unsigned char GetScatterGatherList[8]; /* +0x0058 be c7 00 00 */ unsigned char PutScatterGatherList[8]; /* +0x0060 c1 c7 00 00 */ unsigned char CalculateScatterGatherList[8]; /* +0x0068 c4 c7 00 00 */ unsigned char BuildScatterGatherList[8]; /* +0x0070 c7 c7 00 00 */ unsigned char BuildMdlFromScatterGatherList[8]; /* +0x0078 68 c7 00 00 */ unsigned char GetDmaAdapterInfo[8]; /* +0x0080 cc c7 00 00 */ unsigned char GetDmaTransferInfo[8]; /* +0x0088 d1 c7 00 00 */ unsigned char InitializeDmaTransferContext[8]; /* +0x0090 d4 c7 00 00 */ unsigned char AllocateCommonBufferEx[8]; /* +0x0098 d7 c7 00 00 */ unsigned char AllocateAdapterChannelEx[8]; /* +0x00a0 da c7 00 00 */ unsigned char ConfigureAdapterChannel[8]; /* +0x00a8 dd c7 00 00 */ unsigned char CancelAdapterChannel[8]; /* +0x00b0 e0 c7 00 00 */ unsigned char MapTransferEx[8]; /* +0x00b8 e7 c7 00 00 */ unsigned char GetScatterGatherListEx[8]; /* +0x00c0 eb c7 00 00 */ unsigned char BuildScatterGatherListEx[8]; /* +0x00c8 ee c7 00 00 */ unsigned char FlushAdapterBuffersEx[8]; /* +0x00d0 f1 c7 00 00 */ unsigned char FreeAdapterObject[8]; /* +0x00d8 f4 c7 00 00 */ unsigned char CancelMappedTransfer[8]; /* +0x00e0 d4 c7 00 00 */ }; struct _EX_PUSH_LOCK_CACHE_AWARE { unsigned char Locks[8]; /* +0x0000 f9 c7 00 00 */ }; struct _KAPC { unsigned char Type; /* +0x0000 */ unsigned char SpareByte0; /* +0x0001 */ unsigned char Size; /* +0x0002 */ unsigned char SpareByte1; /* +0x0003 */ unsigned long SpareLong0; /* +0x0004 */ unsigned char Thread[8]; /* +0x0008 53 c7 00 00 */ unsigned char ApcListEntry[16]; /* +0x0010 73 1f 00 00 */ unsigned char KernelRoutine[8]; /* +0x0020 03 c8 00 00 */ unsigned char RundownRoutine[8]; /* +0x0028 06 c8 00 00 */ /* unsigned char NormalRoutine[-16]; +0x0030 61 1a 00 00 */ unsigned char Reserved[24]; /* +0x0020 07 c8 00 00 */ void *NormalContext; /* +0x0038 */ void *SystemArgument1; /* +0x0040 */ void *SystemArgument2; /* +0x0048 */ char ApcStateIndex; /* +0x0050 */ char ApcMode; /* +0x0051 */ unsigned char Inserted; /* +0x0052 */ }; struct _KSEMAPHORE { unsigned char Header[24]; /* +0x0000 79 c7 00 00 */ long Limit; /* +0x0018 */ }; struct _ERESOURCE { unsigned char SystemResourcesList[16]; /* +0x0000 73 1f 00 00 */ unsigned char OwnerTable[8]; /* +0x0010 e7 c6 00 00 */ short ActiveCount; /* +0x0018 */ unsigned short Flag; /* +0x001a */ unsigned char ReservedLowFlags; /* +0x001a */ unsigned char WaiterPriority; /* +0x001b */ unsigned char SharedWaiters[8]; /* +0x0020 34 c7 00 00 */ unsigned char ExclusiveWaiters[8]; /* +0x0028 0d c8 00 00 */ unsigned char OwnerEntry[16]; /* +0x0030 e6 c6 00 00 */ unsigned long ActiveEntries; /* +0x0040 */ unsigned long ContentionCount; /* +0x0044 */ unsigned long NumberOfSharedWaiters; /* +0x0048 */ unsigned long NumberOfExclusiveWaiters; /* +0x004c */ void *Reserved2; /* +0x0050 */ void *Address; /* +0x0058 */ unsigned long long CreatorBackTraceIndex; /* +0x0058 */ unsigned long long SpinLock; /* +0x0060 */ }; struct _KPROCESSOR_STATE { unsigned char SpecialRegisters[224]; /* +0x0000 11 c8 00 00 */ unsigned char ContextFrame[1232]; /* +0x00e0 5d 13 00 00 */ }; /* struct { /* unsigned char InitialPrivilegeSet[0]; +0x0000 1c c8 00 00 unsigned char PrivilegeSet[44]; +0x0000 85 13 00 00 }; */ struct _ACCESS_STATE { unsigned char OperationID[8]; /* +0x0000 38 15 00 00 */ unsigned char SecurityEvaluated; /* +0x0008 */ unsigned char GenerateAudit; /* +0x0009 */ unsigned char GenerateOnClose; /* +0x000a */ unsigned char PrivilegesAllocated; /* +0x000b */ unsigned long Flags; /* +0x000c */ unsigned long RemainingDesiredAccess; /* +0x0010 */ unsigned long PreviouslyGrantedAccess; /* +0x0014 */ unsigned long OriginalDesiredAccess; /* +0x0018 */ unsigned char SubjectSecurityContext[32]; /* +0x0020 1b c8 00 00 */ void *SecurityDescriptor; /* +0x0040 */ void *AuxData; /* +0x0048 */ unsigned char Privileges[44]; /* +0x0050 1e c8 00 00 */ unsigned char AuditPrivileges; /* +0x007c */ unsigned char ObjectName[16]; /* +0x0080 e3 12 00 00 */ unsigned char ObjectTypeName[16]; /* +0x0090 e3 12 00 00 */ }; enum _WHEA_ERROR_PACKET_DATA_FORMAT { WheaDataFormatIPFSalRecord = 0, WheaDataFormatXPFMCA = 1, WheaDataFormatMemory = 2, WheaDataFormatPCIExpress = 3, WheaDataFormatNMIPort = 4, WheaDataFormatPCIXBus = 5, WheaDataFormatPCIXDevice = 6, WheaDataFormatGeneric = 7, WheaDataFormatMax = 8 }; struct _KPCR { /* unsigned char NtTib[0]; +0x0000 82 27 00 00 */ unsigned char GdtBase[8]; /* +0x0000 24 c8 00 00 */ unsigned char TssBase[8]; /* +0x0008 26 c8 00 00 */ unsigned long long UserRsp; /* +0x0010 */ unsigned char Self[8]; /* +0x0018 28 c8 00 00 */ unsigned char CurrentPrcb[8]; /* +0x0020 2a c8 00 00 */ unsigned char LockArray[8]; /* +0x0028 45 22 00 00 */ void *Used_Self; /* +0x0030 */ unsigned char IdtBase[8]; /* +0x0038 2c c8 00 00 */ unsigned char Unused[16]; /* +0x0040 83 15 00 00 */ unsigned char Irql; /* +0x0050 */ unsigned char SecondLevelCacheAssociativity; /* +0x0051 */ unsigned char ObsoleteNumber; /* +0x0052 */ unsigned char Fill0; /* +0x0053 */ unsigned char Unused0[12]; /* +0x0054 28 13 00 00 */ unsigned short MajorVersion; /* +0x0060 */ unsigned short MinorVersion; /* +0x0062 */ unsigned long StallScaleFactor; /* +0x0064 */ unsigned char Unused1[24]; /* +0x0068 07 c8 00 00 */ unsigned char KernelReserved[60]; /* +0x0080 dd 28 00 00 */ unsigned long SecondLevelCacheSize; /* +0x00bc */ unsigned char HalReserved[64]; /* +0x00c0 87 27 00 00 */ unsigned long Unused2; /* +0x0100 */ void *KdVersionBlock; /* +0x0108 */ void *Unused3; /* +0x0110 */ unsigned char PcrAlign1[104]; /* +0x0118 2d c8 00 00 */ unsigned char Prcb[1648]; /* +0x0180 29 c8 00 00 */ }; struct _MDL { unsigned char Next[8]; /* +0x0000 fe c6 00 00 */ short Size; /* +0x0008 */ short MdlFlags; /* +0x000a */ unsigned char Process[8]; /* +0x0010 f5 c6 00 00 */ void *MappedSystemVa; /* +0x0018 */ void *StartVa; /* +0x0020 */ unsigned long ByteCount; /* +0x0028 */ unsigned long ByteOffset; /* +0x002c */ }; struct _INITIAL_PRIVILEGE_SET { unsigned long PrivilegeCount; /* +0x0000 */ unsigned long Control; /* +0x0004 */ unsigned char Privilege[36]; /* +0x0008 38 c8 00 00 */ }; struct _IO_DRIVER_CREATE_CONTEXT { short Size; /* +0x0000 */ unsigned char ExtraCreateParameter[8]; /* +0x0008 3c c8 00 00 */ void *DeviceObjectHint; /* +0x0010 */ unsigned char TxnParameters[8]; /* +0x0018 3e c8 00 00 */ }; struct _WHEA_ERROR_RECORD_HEADER_FLAGS { /* unsigned char Recovered[0]; +0x0000 94 13 00 00 */ /* unsigned char PreviousError[0]; +0x0000 90 18 00 00 */ /* unsigned char Simulated[0]; +0x0000 91 18 00 00 */ /* unsigned char Reserved[0]; +0x0000 f7 2c 00 00 */ unsigned long AsULONG; /* +0x0000 */ }; struct _GENERAL_LOOKASIDE_POOL { /* unsigned char ListHead[0]; +0x0000 81 2a 00 00 */ unsigned char SingleListHead[16]; /* +0x0000 ce 17 00 00 */ unsigned short Depth; /* +0x0010 */ unsigned short MaximumDepth; /* +0x0012 */ unsigned long TotalAllocates; /* +0x0014 */ unsigned long AllocateMisses; /* +0x0018 */ unsigned long AllocateHits; /* +0x0018 */ unsigned long TotalFrees; /* +0x001c */ unsigned long FreeMisses; /* +0x0020 */ unsigned long FreeHits; /* +0x0020 */ unsigned char Type[4]; /* +0x0024 45 c8 00 00 */ unsigned long Tag; /* +0x0028 */ unsigned long Size; /* +0x002c */ /* unsigned char AllocateEx[0]; +0x0030 4a c8 00 00 */ unsigned char Allocate[8]; /* +0x0030 4d c8 00 00 */ /* unsigned char FreeEx[0]; +0x0038 50 c8 00 00 */ unsigned char Free[8]; /* +0x0038 d2 13 00 00 */ unsigned char ListEntry[16]; /* +0x0040 73 1f 00 00 */ unsigned long LastTotalAllocates; /* +0x0050 */ unsigned long LastAllocateMisses; /* +0x0054 */ unsigned long LastAllocateHits; /* +0x0054 */ unsigned char Future[8]; /* +0x0058 14 16 00 00 */ }; enum DEVICE_TEXT_TYPE { DeviceTextDescription = 0, DeviceTextLocationInformation = 1 }; struct _WHEA_ERROR_RECORD_SECTION_DESCRIPTOR_FLAGS { /* unsigned char Primary[0]; +0x0000 94 13 00 00 */ /* unsigned char ContainmentWarning[0]; +0x0000 90 18 00 00 */ /* unsigned char Reset[0]; +0x0000 91 18 00 00 */ /* unsigned char ThresholdExceeded[0]; +0x0000 74 1e 00 00 */ /* unsigned char ResourceNotAvailable[0]; +0x0000 75 1e 00 00 */ /* unsigned char LatentError[0]; +0x0000 0b 24 00 00 */ /* unsigned char Reserved[0]; +0x0000 39 33 00 00 */ unsigned long AsULONG; /* +0x0000 */ }; struct _FAST_IO_DISPATCH { unsigned long SizeOfFastIoDispatch; /* +0x0000 */ unsigned char FastIoCheckIfPossible[8]; /* +0x0008 4e c7 00 00 */ unsigned char FastIoRead[8]; /* +0x0010 04 c7 00 00 */ unsigned char FastIoWrite[8]; /* +0x0018 04 c7 00 00 */ unsigned char FastIoQueryBasicInfo[8]; /* +0x0020 59 c8 00 00 */ unsigned char FastIoQueryStandardInfo[8]; /* +0x0028 f0 c6 00 00 */ unsigned char FastIoLock[8]; /* +0x0030 f8 c6 00 00 */ unsigned char FastIoUnlockSingle[8]; /* +0x0038 5a c8 00 00 */ unsigned char FastIoUnlockAll[8]; /* +0x0040 80 c7 00 00 */ unsigned char FastIoUnlockAllByKey[8]; /* +0x0048 51 c7 00 00 */ unsigned char FastIoDeviceControl[8]; /* +0x0050 37 c7 00 00 */ unsigned char AcquireFileForNtCreateSection[8]; /* +0x0058 f3 c6 00 00 */ unsigned char ReleaseFileForNtCreateSection[8]; /* +0x0060 f3 c6 00 00 */ unsigned char FastIoDetachDevice[8]; /* +0x0068 5b c8 00 00 */ unsigned char FastIoQueryNetworkOpenInfo[8]; /* +0x0070 10 c8 00 00 */ unsigned char AcquireForModWrite[8]; /* +0x0078 19 c8 00 00 */ unsigned char MdlRead[8]; /* +0x0080 0d c7 00 00 */ unsigned char MdlReadComplete[8]; /* +0x0088 09 c7 00 00 */ unsigned char PrepareMdlWrite[8]; /* +0x0090 0d c7 00 00 */ unsigned char MdlWriteComplete[8]; /* +0x0098 01 c7 00 00 */ unsigned char FastIoReadCompressed[8]; /* +0x00a0 35 c8 00 00 */ unsigned char FastIoWriteCompressed[8]; /* +0x00a8 35 c8 00 00 */ unsigned char MdlReadCompleteCompressed[8]; /* +0x00b0 09 c7 00 00 */ unsigned char MdlWriteCompleteCompressed[8]; /* +0x00b8 01 c7 00 00 */ unsigned char FastIoQueryOpen[8]; /* +0x00c0 5c c8 00 00 */ unsigned char ReleaseForModWrite[8]; /* +0x00c8 5f c8 00 00 */ unsigned char AcquireForCcFlush[8]; /* +0x00d0 1a c8 00 00 */ unsigned char ReleaseForCcFlush[8]; /* +0x00d8 1a c8 00 00 */ }; struct _WHEA_ERROR_RECORD_HEADER { unsigned long Signature; /* +0x0000 */ unsigned char Revision[2]; /* +0x0004 6f c8 00 00 */ unsigned long SignatureEnd; /* +0x0006 */ unsigned short SectionCount; /* +0x000a */ unsigned char Severity[4]; /* +0x000c 70 c8 00 00 */ unsigned char ValidBits[4]; /* +0x0010 71 c8 00 00 */ unsigned long Length; /* +0x0014 */ unsigned char Timestamp[8]; /* +0x0018 72 c8 00 00 */ unsigned char PlatformId[16]; /* +0x0020 f3 14 00 00 */ unsigned char PartitionId[16]; /* +0x0030 f3 14 00 00 */ unsigned char CreatorId[16]; /* +0x0040 f3 14 00 00 */ unsigned char NotifyType[16]; /* +0x0050 f3 14 00 00 */ unsigned long long RecordId; /* +0x0060 */ unsigned char Flags[4]; /* +0x0068 73 c8 00 00 */ unsigned char PersistenceInfo[8]; /* +0x006c 74 c8 00 00 */ unsigned char Reserved[12]; /* +0x0074 88 15 00 00 */ }; struct _KPRCB { unsigned long MxCsr; /* +0x0000 */ unsigned char LegacyNumber; /* +0x0004 */ unsigned char ReservedMustBeZero; /* +0x0005 */ unsigned char InterruptRequest; /* +0x0006 */ unsigned char IdleHalt; /* +0x0007 */ unsigned char CurrentThread[8]; /* +0x0008 53 c7 00 00 */ unsigned char NextThread[8]; /* +0x0010 53 c7 00 00 */ unsigned char IdleThread[8]; /* +0x0018 53 c7 00 00 */ unsigned char NestingLevel; /* +0x0020 */ unsigned char ClockOwner; /* +0x0021 */ unsigned char PendingTick; /* +0x0022 */ unsigned char PrcbPad00[1]; /* +0x0023 ff 12 00 00 */ unsigned long Number; /* +0x0024 */ unsigned long long RspBase; /* +0x0028 */ unsigned long long PrcbLock; /* +0x0030 */ unsigned long long PrcbPad01; /* +0x0038 */ unsigned char ProcessorState[1456]; /* +0x0040 77 c8 00 00 */ char CpuType; /* +0x05f0 */ char CpuID; /* +0x05f1 */ unsigned short CpuStep; /* +0x05f2 */ unsigned char CpuStepping; /* +0x05f2 */ unsigned char CpuModel; /* +0x05f3 */ unsigned long MHz; /* +0x05f4 */ unsigned char HalReserved[64]; /* +0x05f8 52 1e 00 00 */ unsigned short MinorVersion; /* +0x0638 */ unsigned short MajorVersion; /* +0x063a */ unsigned char BuildType; /* +0x063c */ unsigned char CpuVendor; /* +0x063d */ unsigned char CoresPerPhysicalProcessor; /* +0x063e */ unsigned char LogicalProcessorsPerCore; /* +0x063f */ unsigned long ApicMask; /* +0x0640 */ unsigned long CFlushSize; /* +0x0644 */ void *AcpiReserved; /* +0x0648 */ unsigned long InitialApicId; /* +0x0650 */ unsigned long Stride; /* +0x0654 */ unsigned short Group; /* +0x0658 */ unsigned long long GroupSetMember; /* +0x0660 */ unsigned char GroupIndex; /* +0x0668 */ }; struct _WHEA_ERROR_RECORD { unsigned char Header[128]; /* +0x0000 7c c8 00 00 */ unsigned char SectionDescriptor[72]; /* +0x0080 7d c8 00 00 */ }; struct _DMA_TRANSFER_INFO_V1 { unsigned long MapRegisterCount; /* +0x0000 */ unsigned long ScatterGatherElementCount; /* +0x0004 */ unsigned long ScatterGatherListSize; /* +0x0008 */ }; struct _DEVOBJ_EXTENSION { short Type; /* +0x0000 */ unsigned short Size; /* +0x0002 */ unsigned char DeviceObject[8]; /* +0x0008 ed c6 00 00 */ unsigned long PowerFlags; /* +0x0010 */ unsigned char Dope[8]; /* +0x0018 87 c8 00 00 */ unsigned long ExtensionFlags; /* +0x0020 */ void *DeviceNode; /* +0x0028 */ unsigned char AttachedTo[8]; /* +0x0030 ed c6 00 00 */ long StartIoCount; /* +0x0038 */ long StartIoKey; /* +0x003c */ unsigned long StartIoFlags; /* +0x0040 */ unsigned char Vpb[8]; /* +0x0048 89 c8 00 00 */ unsigned char DependentList[16]; /* +0x0050 73 1f 00 00 */ unsigned char ProviderList[16]; /* +0x0060 73 1f 00 00 */ }; struct _SCATTER_GATHER_LIST { unsigned long NumberOfElements; /* +0x0000 */ unsigned long long Reserved; /* +0x0008 */ /* unsigned char Elements[0]; +0x0010 8f c8 00 00 */ }; struct _SECTION_OBJECT_POINTERS { void *DataSectionObject; /* +0x0000 */ void *SharedCacheMap; /* +0x0008 */ void *ImageSectionObject; /* +0x0010 */ }; struct _NAMED_PIPE_CREATE_PARAMETERS { unsigned long NamedPipeType; /* +0x0000 */ unsigned long ReadMode; /* +0x0004 */ unsigned long CompletionMode; /* +0x0008 */ unsigned long MaximumInstances; /* +0x000c */ unsigned long InboundQuota; /* +0x0010 */ unsigned long OutboundQuota; /* +0x0014 */ unsigned char DefaultTimeout[8]; /* +0x0018 43 13 00 00 */ unsigned char TimeoutSpecified; /* +0x0020 */ }; struct _MAILSLOT_CREATE_PARAMETERS { unsigned long MailslotQuota; /* +0x0000 */ unsigned long MaximumMessageSize; /* +0x0004 */ unsigned char ReadTimeout[8]; /* +0x0008 43 13 00 00 */ unsigned char TimeoutSpecified; /* +0x0010 */ }; /* struct { unsigned char BaseMiddle; +0x0000 unsigned char Flags1; +0x0001 unsigned char Flags2; +0x0002 unsigned char BaseHigh; +0x0003 }; */ /* struct { /* unsigned char BaseMiddle[0]; +0x0000 8a 13 00 00 /* unsigned char Type[0]; +0x0000 98 31 00 00 /* unsigned char Dpl[0]; +0x0000 99 31 00 00 /* unsigned char Present[0]; +0x0000 9a 31 00 00 /* unsigned char LimitHigh[0]; +0x0000 8d 13 00 00 /* unsigned char System[0]; +0x0000 8e 13 00 00 /* unsigned char LongMode[0]; +0x0000 8f 13 00 00 /* unsigned char DefaultBig[0]; +0x0000 12 24 00 00 /* unsigned char Granularity[0]; +0x0000 13 24 00 00 unsigned char BaseHigh[4]; +0x0000 9b 31 00 00 }; */ struct _KGDTENTRY64 { unsigned short LimitLow; /* +0x0000 */ unsigned short BaseLow; /* +0x0002 */ /* unsigned char Bytes[0]; +0x0004 9d c8 00 00 */ unsigned char Bits[4]; /* +0x0004 9f c8 00 00 */ unsigned long BaseUpper; /* +0x0008 */ unsigned long MustBeZero; /* +0x000c */ long long DataLow; /* +0x0000 */ long long DataHigh; /* +0x0008 */ }; struct _WHEA_ERROR_RECORD_HEADER_VALIDBITS { /* unsigned char PlatformId[0]; +0x0000 94 13 00 00 */ /* unsigned char Timestamp[0]; +0x0000 90 18 00 00 */ /* unsigned char PartitionId[0]; +0x0000 91 18 00 00 */ /* unsigned char Reserved[0]; +0x0000 f7 2c 00 00 */ unsigned long AsULONG; /* +0x0000 */ }; struct _WHEA_ERROR_RECORD_SECTION_DESCRIPTOR_VALIDBITS { /* unsigned char FRUId[0]; +0x0000 a2 1e 00 00 */ /* unsigned char FRUText[0]; +0x0000 a3 1e 00 00 */ /* unsigned char Reserved[0]; +0x0000 3a 20 00 00 */ unsigned char AsUCHAR; /* +0x0000 */ }; struct _KSPECIAL_REGISTERS { unsigned long long Cr0; /* +0x0000 */ unsigned long long Cr2; /* +0x0008 */ unsigned long long Cr3; /* +0x0010 */ unsigned long long Cr4; /* +0x0018 */ unsigned long long KernelDr0; /* +0x0020 */ unsigned long long KernelDr1; /* +0x0028 */ unsigned long long KernelDr2; /* +0x0030 */ unsigned long long KernelDr3; /* +0x0038 */ unsigned long long KernelDr6; /* +0x0040 */ unsigned long long KernelDr7; /* +0x0048 */ unsigned char Gdtr[16]; /* +0x0050 a8 c8 00 00 */ unsigned char Idtr[16]; /* +0x0060 a8 c8 00 00 */ unsigned short Tr; /* +0x0070 */ unsigned short Ldtr; /* +0x0072 */ unsigned long MxCsr; /* +0x0074 */ unsigned long long DebugControl; /* +0x0078 */ unsigned long long LastBranchToRip; /* +0x0080 */ unsigned long long LastBranchFromRip; /* +0x0088 */ unsigned long long LastExceptionToRip; /* +0x0090 */ unsigned long long LastExceptionFromRip; /* +0x0098 */ unsigned long long Cr8; /* +0x00a0 */ unsigned long long MsrGsBase; /* +0x00a8 */ unsigned long long MsrGsSwap; /* +0x00b0 */ unsigned long long MsrStar; /* +0x00b8 */ unsigned long long MsrLStar; /* +0x00c0 */ unsigned long long MsrCStar; /* +0x00c8 */ unsigned long long MsrSyscallMask; /* +0x00d0 */ unsigned long long Xcr0; /* +0x00d8 */ }; struct _IO_SECURITY_CONTEXT { unsigned char SecurityQos[8]; /* +0x0000 fa 3f 00 00 */ unsigned char AccessState[8]; /* +0x0008 31 c8 00 00 */ unsigned long DesiredAccess; /* +0x0010 */ unsigned long FullCreateOptions; /* +0x0014 */ }; struct _DMA_ADAPTER_INFO_V1 { unsigned long ReadDmaCounterAvailable; /* +0x0000 */ unsigned long ScatterGatherLimit; /* +0x0004 */ unsigned long DmaAddressWidth; /* +0x0008 */ unsigned long Flags; /* +0x000c */ unsigned long MinimumTransferUnit; /* +0x0010 */ }; struct _OBJECT_HANDLE_INFORMATION { unsigned long HandleAttributes; /* +0x0000 */ unsigned long GrantedAccess; /* +0x0004 */ }; struct _DISPATCHER_HEADER { unsigned char Type; /* +0x0000 */ unsigned char TimerControlFlags; /* +0x0001 */ /* unsigned char Absolute[0]; +0x0001 a2 1e 00 00 */ /* unsigned char Wake[0]; +0x0001 a3 1e 00 00 */ /* unsigned char Coalescable[0]; +0x0001 a4 1e 00 00 */ /* unsigned char KeepShifting[0]; +0x0001 28 26 00 00 */ /* unsigned char EncodedTolerableDelay[0]; +0x0001 eb 13 00 00 */ unsigned char Abandoned; /* +0x0001 */ unsigned char Signalling; /* +0x0001 */ unsigned char ThreadControlFlags; /* +0x0002 */ /* unsigned char CycleProfiling[0]; +0x0002 a2 1e 00 00 */ /* unsigned char CounterProfiling[0]; +0x0002 a3 1e 00 00 */ /* unsigned char GroupScheduling[0]; +0x0002 a4 1e 00 00 */ /* unsigned char AffinitySet[0]; +0x0002 28 26 00 00 */ /* unsigned char Reserved[0]; +0x0002 eb 13 00 00 */ unsigned char Hand; /* +0x0002 */ unsigned char Size; /* +0x0002 */ unsigned char TimerMiscFlags; /* +0x0003 */ /* unsigned char Index[0]; +0x0003 b4 c8 00 00 */ /* unsigned char Inserted[0]; +0x0003 a7 1e 00 00 */ /* unsigned char Expired[0]; +0x0003 b5 c8 00 00 */ unsigned char DebugActive; /* +0x0003 */ /* unsigned char ActiveDR7[0]; +0x0003 a2 1e 00 00 */ /* unsigned char Instrumented[0]; +0x0003 a3 1e 00 00 */ /* unsigned char Reserved2[0]; +0x0003 b6 c8 00 00 */ /* unsigned char UmsScheduled[0]; +0x0003 a7 1e 00 00 */ /* unsigned char UmsPrimary[0]; +0x0003 a8 1e 00 00 */ unsigned char DpcActive; /* +0x0003 */ unsigned char Lock[4]; /* +0x0000 d7 17 00 00 */ long SignalState; /* +0x0004 */ unsigned char WaitListHead[16]; /* +0x0008 73 1f 00 00 */ }; struct _KIDTENTRY64 { unsigned short OffsetLow; /* +0x0000 */ unsigned short Selector; /* +0x0002 */ /* unsigned char IstIndex[0]; +0x0004 b9 c8 00 00 */ /* unsigned char Reserved0[0]; +0x0004 ba c8 00 00 */ /* unsigned char Type[0]; +0x0004 bb c8 00 00 */ /* unsigned char Dpl[0]; +0x0004 14 8f 00 00 */ unsigned char Present[2]; /* +0x0004 5a 58 00 00 */ unsigned short OffsetMiddle; /* +0x0006 */ unsigned long OffsetHigh; /* +0x0008 */ unsigned long Reserved1; /* +0x000c */ unsigned long long Alignment; /* +0x0000 */ }; struct _VPB { short Type; /* +0x0000 */ short Size; /* +0x0002 */ unsigned short Flags; /* +0x0004 */ unsigned short VolumeLabelLength; /* +0x0006 */ unsigned char DeviceObject[8]; /* +0x0008 ed c6 00 00 */ unsigned char RealDevice[8]; /* +0x0010 ed c6 00 00 */ unsigned long SerialNumber; /* +0x0018 */ unsigned long ReferenceCount; /* +0x001c */ unsigned char VolumeLabel[64]; /* +0x0020 bf 15 00 00 */ }; struct _SLIST_HEADER { unsigned long long Alignment; /* +0x0000 */ unsigned long long Region; /* +0x0008 */ /* unsigned char Header8[0]; +0x0000 c6 c8 00 00 */ unsigned char HeaderX64[16]; /* +0x0000 c7 c8 00 00 */ }; /* struct { /* unsigned char MasterIrp[0]; +0x0000 30 c7 00 00 long IrpCount; +0x0000 void *SystemBuffer; +0x0000 }; */ /* struct { /* unsigned char UserApcRoutine[0]; +0x0000 f1 51 00 00 void *IssuingProcess; +0x0000 void *UserApcContext; +0x0008 }; */ /* struct { /* unsigned char AsynchronousParameters[0]; +0x0000 cd c8 00 00 unsigned char AllocationSize[16]; +0x0000 43 13 00 00 }; */ /* struct { /* unsigned char DeviceQueueEntry[0]; +0x0000 d0 c8 00 00 unsigned char DriverContext[32]; +0x0000 c6 2a 00 00 unsigned char Thread[8]; +0x0020 93 c8 00 00 char *AuxiliaryBuffer; +0x0028 unsigned char ListEntry[16]; +0x0030 73 1f 00 00 /* unsigned char CurrentStackLocation[0]; +0x0040 5f c7 00 00 unsigned long PacketType; +0x0040 unsigned char OriginalFileObject[8]; +0x0048 eb c6 00 00 void *IrpExtension; +0x0050 }; */ /* struct { /* unsigned char Overlay[0]; +0x0000 d2 c8 00 00 /* unsigned char Apc[0]; +0x0000 fe c7 00 00 void *CompletionKey; +0x0000 }; */ struct _IRP { short Type; /* +0x0000 */ unsigned short Size; /* +0x0002 */ unsigned char MdlAddress[8]; /* +0x0008 fe c6 00 00 */ unsigned long Flags; /* +0x0010 */ unsigned char AssociatedIrp[8]; /* +0x0018 cb c8 00 00 */ unsigned char ThreadListEntry[16]; /* +0x0020 73 1f 00 00 */ unsigned char IoStatus[16]; /* +0x0030 40 13 00 00 */ char RequestorMode; /* +0x0040 */ unsigned char PendingReturned; /* +0x0041 */ char StackCount; /* +0x0042 */ char CurrentLocation; /* +0x0043 */ unsigned char Cancel; /* +0x0044 */ unsigned char CancelIrql; /* +0x0045 */ char ApcEnvironment; /* +0x0046 */ unsigned char AllocationFlags; /* +0x0047 */ unsigned char UserIosb[8]; /* +0x0048 10 20 00 00 */ unsigned char UserEvent[8]; /* +0x0050 0d c8 00 00 */ unsigned char Overlay[16]; /* +0x0058 cf c8 00 00 */ unsigned char CancelRoutine[8]; /* +0x0068 6c c8 00 00 */ void *UserBuffer; /* +0x0070 */ unsigned char Tail[88]; /* +0x0078 d4 c8 00 00 */ }; enum BUS_QUERY_ID_TYPE { BusQueryDeviceID = 0, BusQueryHardwareIDs = 1, BusQueryCompatibleIDs = 2, BusQueryInstanceID = 3, BusQueryDeviceSerialNumber = 4, BusQueryContainerID = 5 }; struct _WORK_QUEUE_ITEM { unsigned char List[16]; /* +0x0000 73 1f 00 00 */ unsigned char WorkerRoutine[8]; /* +0x0010 d2 13 00 00 */ void *Parameter; /* +0x0018 */ }; struct _WAIT_CONTEXT_BLOCK { /* unsigned char WaitQueueEntry[0]; +0x0000 d0 c8 00 00 */ unsigned char DmaWaitEntry[16]; /* +0x0000 73 1f 00 00 */ unsigned long NumberOfChannels; /* +0x0010 */ /* unsigned char SyncCallback[0]; +0x0014 94 13 00 00 */ /* unsigned char DmaContext[0]; +0x0014 90 18 00 00 */ unsigned char Reserved[4]; /* +0x0014 c5 19 00 00 */ unsigned char DeviceRoutine[8]; /* +0x0018 9d c7 00 00 */ void *DeviceContext; /* +0x0020 */ unsigned long NumberOfMapRegisters; /* +0x0028 */ void *DeviceObject; /* +0x0030 */ void *CurrentIrp; /* +0x0038 */ unsigned char BufferChainingDpc[8]; /* +0x0040 8c c7 00 00 */ }; struct _OBJECT_TYPE_INITIALIZER { unsigned short Length; /* +0x0000 */ unsigned char ObjectTypeFlags; /* +0x0002 */ /* unsigned char CaseInsensitive[0]; +0x0002 a2 1e 00 00 */ /* unsigned char UnnamedObjectsOnly[0]; +0x0002 a3 1e 00 00 */ /* unsigned char UseDefaultObject[0]; +0x0002 a4 1e 00 00 */ /* unsigned char SecurityRequired[0]; +0x0002 28 26 00 00 */ /* unsigned char MaintainHandleCount[0]; +0x0002 0e 26 00 00 */ /* unsigned char MaintainTypeList[0]; +0x0002 a6 1e 00 00 */ /* unsigned char SupportsObjectCallbacks[0]; +0x0002 a7 1e 00 00 */ unsigned char CacheAligned[2]; /* +0x0002 a8 1e 00 00 */ unsigned long ObjectTypeCode; /* +0x0004 */ unsigned long InvalidAttributes; /* +0x0008 */ unsigned char GenericMapping[16]; /* +0x000c 5e 16 00 00 */ unsigned long ValidAccessMask; /* +0x001c */ unsigned long RetainAccess; /* +0x0020 */ unsigned char PoolType[4]; /* +0x0024 45 c8 00 00 */ unsigned long DefaultPagedPoolCharge; /* +0x0028 */ unsigned long DefaultNonPagedPoolCharge; /* +0x002c */ unsigned char DumpProcedure[8]; /* +0x0030 87 c7 00 00 */ unsigned char OpenProcedure[8]; /* +0x0038 c3 c8 00 00 */ unsigned char CloseProcedure[8]; /* +0x0040 47 c7 00 00 */ unsigned char DeleteProcedure[8]; /* +0x0048 d2 13 00 00 */ unsigned char ParseProcedure[8]; /* +0x0050 34 c8 00 00 */ unsigned char SecurityProcedure[8]; /* +0x0058 65 c8 00 00 */ unsigned char QueryNameProcedure[8]; /* +0x0060 dd c8 00 00 */ unsigned char OkayToCloseProcedure[8]; /* +0x0068 78 c7 00 00 */ unsigned long WaitObjectFlagMask; /* +0x0070 */ unsigned short WaitObjectFlagOffset; /* +0x0074 */ unsigned short WaitObjectPointerOffset; /* +0x0076 */ }; struct _OBJECT_TYPE { unsigned char TypeList[16]; /* +0x0000 73 1f 00 00 */ unsigned char Name[16]; /* +0x0010 e3 12 00 00 */ void *DefaultObject; /* +0x0020 */ unsigned char Index; /* +0x0028 */ unsigned long TotalNumberOfObjects; /* +0x002c */ unsigned long TotalNumberOfHandles; /* +0x0030 */ unsigned long HighWaterNumberOfObjects; /* +0x0034 */ unsigned long HighWaterNumberOfHandles; /* +0x0038 */ unsigned char TypeInfo[120]; /* +0x0040 e4 c8 00 00 */ unsigned char TypeLock[8]; /* +0x00b8 f7 c7 00 00 */ unsigned long Key; /* +0x00c0 */ unsigned char CallbackList[16]; /* +0x00c8 73 1f 00 00 */ }; struct _KTSS64 { unsigned long Reserved0; /* +0x0000 */ unsigned long long Rsp0; /* +0x0004 */ unsigned long long Rsp1; /* +0x000c */ unsigned long long Rsp2; /* +0x0014 */ unsigned char Ist[64]; /* +0x001c 52 1e 00 00 */ unsigned long long Reserved1; /* +0x005c */ unsigned short Reserved2; /* +0x0064 */ unsigned short IoMapBase; /* +0x0066 */ }; enum _OB_OPEN_REASON { ObCreateHandle = 0, ObOpenHandle = 1, ObDuplicateHandle = 2, ObInheritHandle = 3, ObMaxOpenReason = 4 }; struct _WHEA_ERROR_PACKET_V2 { unsigned long Signature; /* +0x0000 */ unsigned long Version; /* +0x0004 */ unsigned long Length; /* +0x0008 */ unsigned char Flags[4]; /* +0x000c eb c8 00 00 */ unsigned char ErrorType[4]; /* +0x0010 ec c8 00 00 */ unsigned char ErrorSeverity[4]; /* +0x0014 70 c8 00 00 */ unsigned long ErrorSourceId; /* +0x0018 */ unsigned char ErrorSourceType[4]; /* +0x001c ed c8 00 00 */ unsigned char NotifyType[16]; /* +0x0020 f3 14 00 00 */ unsigned long long Context; /* +0x0030 */ unsigned char DataFormat[4]; /* +0x0038 ee c8 00 00 */ unsigned long Reserved1; /* +0x003c */ unsigned long DataOffset; /* +0x0040 */ unsigned long DataLength; /* +0x0044 */ unsigned long PshedDataOffset; /* +0x0048 */ unsigned long PshedDataLength; /* +0x004c */ }; struct _WHEA_TIMESTAMP { /* unsigned char Seconds[0]; +0x0000 f1 c8 00 00 */ /* unsigned char Minutes[0]; +0x0000 f2 c8 00 00 */ /* unsigned char Hours[0]; +0x0000 f3 c8 00 00 */ /* unsigned char Precise[0]; +0x0000 f4 c8 00 00 */ /* unsigned char Reserved[0]; +0x0000 f5 c8 00 00 */ /* unsigned char Day[0]; +0x0000 f6 c8 00 00 */ /* unsigned char Month[0]; +0x0000 f7 c8 00 00 */ /* unsigned char Year[0]; +0x0000 f8 c8 00 00 */ /* unsigned char Century[0]; +0x0000 f9 c8 00 00 */ unsigned char AsLARGE_INTEGER[8]; /* +0x0000 43 13 00 00 */ }; struct _WHEA_REVISION { unsigned char MinorRevision; /* +0x0000 */ unsigned char MajorRevision; /* +0x0001 */ unsigned short AsUSHORT; /* +0x0000 */ }; struct _LOOKASIDE_LIST_EX { unsigned char L[96]; /* +0x0000 fe c8 00 00 */ }; struct _FILE_OBJECT { short Type; /* +0x0000 */ short Size; /* +0x0002 */ unsigned char DeviceObject[8]; /* +0x0008 ed c6 00 00 */ unsigned char Vpb[8]; /* +0x0010 89 c8 00 00 */ void *FsContext; /* +0x0018 */ void *FsContext2; /* +0x0020 */ unsigned char SectionObjectPointer[8]; /* +0x0028 97 c8 00 00 */ void *PrivateCacheMap; /* +0x0030 */ long FinalStatus; /* +0x0038 */ unsigned char RelatedFileObject[8]; /* +0x0040 eb c6 00 00 */ unsigned char LockOperation; /* +0x0048 */ unsigned char DeletePending; /* +0x0049 */ unsigned char ReadAccess; /* +0x004a */ unsigned char WriteAccess; /* +0x004b */ unsigned char DeleteAccess; /* +0x004c */ unsigned char SharedRead; /* +0x004d */ unsigned char SharedWrite; /* +0x004e */ unsigned char SharedDelete; /* +0x004f */ unsigned long Flags; /* +0x0050 */ unsigned char FileName[16]; /* +0x0058 e3 12 00 00 */ unsigned char CurrentByteOffset[8]; /* +0x0068 43 13 00 00 */ unsigned long Waiters; /* +0x0070 */ unsigned long Busy; /* +0x0074 */ void *LastLock; /* +0x0078 */ unsigned char Lock[24]; /* +0x0080 0c c8 00 00 */ unsigned char Event[24]; /* +0x0098 0c c8 00 00 */ unsigned char CompletionContext[8]; /* +0x00b0 02 c9 00 00 */ unsigned long long IrpListLock; /* +0x00b8 */ unsigned char IrpList[16]; /* +0x00c0 73 1f 00 00 */ void *FileObjectExtension; /* +0x00d0 */ }; enum _DEVICE_RELATION_TYPE { BusRelations = 0, EjectionRelations = 1, PowerRelations = 2, RemovalRelations = 3, TargetDeviceRelation = 4, SingleBusRelations = 5, TransportRelations = 6 }; /* struct { /* unsigned char ListEntry[0]; +0x0000 73 1f 00 00 unsigned char Wcb[72]; +0x0000 08 c9 00 00 }; */ struct _DEVICE_OBJECT { short Type; /* +0x0000 */ unsigned short Size; /* +0x0002 */ long ReferenceCount; /* +0x0004 */ unsigned char DriverObject[8]; /* +0x0008 55 c7 00 00 */ unsigned char NextDevice[8]; /* +0x0010 ed c6 00 00 */ unsigned char AttachedDevice[8]; /* +0x0018 ed c6 00 00 */ unsigned char CurrentIrp[8]; /* +0x0020 30 c7 00 00 */ unsigned char Timer[8]; /* +0x0028 a7 c8 00 00 */ unsigned long Flags; /* +0x0030 */ unsigned long Characteristics; /* +0x0034 */ unsigned char Vpb[8]; /* +0x0038 89 c8 00 00 */ void *DeviceExtension; /* +0x0040 */ unsigned long DeviceType; /* +0x0048 */ char StackSize; /* +0x004c */ unsigned char Queue[72]; /* +0x0050 0a c9 00 00 */ unsigned long AlignmentRequirement; /* +0x0098 */ unsigned char DeviceQueue[40]; /* +0x00a0 0b c9 00 00 */ unsigned char Dpc[64]; /* +0x00c8 8b c7 00 00 */ unsigned long ActiveThreadCount; /* +0x0108 */ void *SecurityDescriptor; /* +0x0110 */ unsigned char DeviceLock[24]; /* +0x0118 0c c8 00 00 */ unsigned short SectorSize; /* +0x0130 */ unsigned short Spare1; /* +0x0132 */ unsigned char DeviceObjectExtension[8]; /* +0x0138 0d c9 00 00 */ void *Reserved; /* +0x0140 */ }; enum _WHEA_ERROR_SOURCE_TYPE { WheaErrSrcTypeMCE = 0, WheaErrSrcTypeCMC = 1, WheaErrSrcTypeCPE = 2, WheaErrSrcTypeNMI = 3, WheaErrSrcTypePCIe = 4, WheaErrSrcTypeGeneric = 5, WheaErrSrcTypeINIT = 6, WheaErrSrcTypeBOOT = 7, WheaErrSrcTypeSCIGeneric = 8, WheaErrSrcTypeIPFMCA = 9, WheaErrSrcTypeIPFCMC = 10, WheaErrSrcTypeIPFCPE = 11, WheaErrSrcTypeMax = 12 }; enum _MEMORY_CACHING_TYPE_ORIG { MmFrameBufferCached = 2 }; struct _INTERFACE { unsigned short Size; /* +0x0000 */ unsigned short Version; /* +0x0002 */ void *Context; /* +0x0008 */ unsigned char InterfaceReference[8]; /* +0x0010 d2 13 00 00 */ unsigned char InterfaceDereference[8]; /* +0x0018 d2 13 00 00 */ }; /* struct { unsigned char SecurityContext[8]; +0x0000 6a c8 00 00 unsigned long Options; +0x0008 unsigned short FileAttributes; +0x0010 unsigned short ShareAccess; +0x0012 unsigned long EaLength; +0x0018 }; */ /* struct { unsigned char SecurityContext[8]; +0x0000 6a c8 00 00 unsigned long Options; +0x0008 unsigned short Reserved; +0x0010 unsigned short ShareAccess; +0x0012 unsigned char Parameters[8]; +0x0018 42 c8 00 00 }; */ /* struct { unsigned char SecurityContext[8]; +0x0000 6a c8 00 00 unsigned long Options; +0x0008 unsigned short Reserved; +0x0010 unsigned short ShareAccess; +0x0012 unsigned char Parameters[8]; +0x0018 89 c7 00 00 }; */ /* struct { unsigned long Length; +0x0000 unsigned long Key; +0x0008 unsigned char ByteOffset[8]; +0x0010 43 13 00 00 }; */ /* struct { unsigned long Length; +0x0000 unsigned char FileName[8]; +0x0008 b6 17 00 00 unsigned char FileInformationClass[8]; +0x0010 1b 3f 00 00 unsigned long FileIndex; +0x0018 }; */ /* struct { unsigned long Length; +0x0000 unsigned long CompletionFilter; +0x0008 }; */ /* struct { unsigned long Length; +0x0000 unsigned char FileInformationClass[8]; +0x0008 1b 3f 00 00 }; */ /* struct { unsigned long Length; +0x0000 unsigned char FileInformationClass[8]; +0x0008 1b 3f 00 00 unsigned char FileObject[8]; +0x0010 eb c6 00 00 unsigned char ReplaceIfExists; +0x0018 unsigned char AdvanceOnly; +0x0019 unsigned long ClusterCount; +0x0018 void *DeleteHandle; +0x0018 }; */ /* struct { unsigned long Length; +0x0000 unsigned char FsInformationClass[8]; +0x0008 c5 24 00 00 }; */ /* struct { unsigned long OutputBufferLength; +0x0000 unsigned long InputBufferLength; +0x0008 unsigned long FsControlCode; +0x0010 void *Type3InputBuffer; +0x0018 }; */ /* struct { unsigned char Length[8]; +0x0000 07 23 00 00 unsigned long Key; +0x0008 unsigned char ByteOffset[8]; +0x0010 43 13 00 00 }; */ /* struct { unsigned long OutputBufferLength; +0x0000 unsigned long InputBufferLength; +0x0008 unsigned long IoControlCode; +0x0010 void *Type3InputBuffer; +0x0018 }; */ /* struct { unsigned long SecurityInformation; +0x0000 unsigned long Length; +0x0008 }; */ /* struct { unsigned long SecurityInformation; +0x0000 void *SecurityDescriptor; +0x0008 }; */ /* struct { unsigned char Vpb[8]; +0x0000 89 c8 00 00 unsigned char DeviceObject[8]; +0x0008 ed c6 00 00 }; */ /* struct { unsigned char Srb[8]; +0x0000 35 c9 00 00 }; */ /* struct { unsigned char Type[4]; +0x0000 38 c9 00 00 }; */ /* struct { unsigned char InterfaceType[8]; +0x0000 67 16 00 00 unsigned short Size; +0x0008 unsigned short Version; +0x000a unsigned char Interface[8]; +0x0010 3c c9 00 00 void *InterfaceSpecificData; +0x0018 }; */ /* struct { unsigned char Capabilities[8]; +0x0000 40 c9 00 00 }; */ /* struct { unsigned char IoResourceRequirementList[8]; +0x0000 2d 3d 00 00 }; */ /* struct { unsigned long WhichSpace; +0x0000 void *Buffer; +0x0008 unsigned long Offset; +0x0010 unsigned long Length; +0x0018 }; */ /* struct { unsigned char Lock; +0x0000 }; */ /* struct { unsigned char IdType[4]; +0x0000 49 c9 00 00 }; */ /* struct { unsigned char DeviceTextType[8]; +0x0000 4c c9 00 00 unsigned long LocaleId; +0x0008 }; */ /* struct { unsigned char InPath; +0x0000 unsigned char Reserved[7]; +0x0001 93 13 00 00 unsigned char Type[8]; +0x0008 4f c9 00 00 }; */ /* struct { unsigned char PowerState[4]; +0x0000 76 16 00 00 }; */ /* struct { unsigned char PowerSequence[8]; +0x0000 fd c7 00 00 }; */ /* struct { unsigned long SystemContext; +0x0000 unsigned char SystemPowerStateContext[8]; +0x0000 86 21 00 00 unsigned char Type[8]; +0x0008 e2 43 00 00 unsigned char State[8]; +0x0010 4c 51 00 00 unsigned char ShutdownType[8]; +0x0018 17 33 00 00 }; */ /* struct { unsigned char AllocatedResources[8]; +0x0000 e5 12 00 00 unsigned char AllocatedResourcesTranslated[8]; +0x0008 e5 12 00 00 }; */ /* struct { unsigned long long ProviderId; +0x0000 void *DataPath; +0x0008 unsigned long BufferSize; +0x0010 void *Buffer; +0x0018 }; */ /* struct { void *Argument1; +0x0000 void *Argument2; +0x0008 void *Argument3; +0x0010 void *Argument4; +0x0018 }; */ /* struct { /* unsigned char Create[0]; +0x0000 17 c9 00 00 /* unsigned char CreatePipe[0]; +0x0000 19 c9 00 00 /* unsigned char CreateMailslot[0]; +0x0000 1b c9 00 00 /* unsigned char Read[0]; +0x0000 1d c9 00 00 /* unsigned char Write[0]; +0x0000 1d c9 00 00 /* unsigned char QueryDirectory[0]; +0x0000 1f c9 00 00 /* unsigned char NotifyDirectory[0]; +0x0000 21 c9 00 00 /* unsigned char QueryFile[0]; +0x0000 23 c9 00 00 /* unsigned char SetFile[0]; +0x0000 25 c9 00 00 /* unsigned char QueryVolume[0]; +0x0000 27 c9 00 00 /* unsigned char FileSystemControl[0]; +0x0000 29 c9 00 00 /* unsigned char LockControl[0]; +0x0000 2b c9 00 00 /* unsigned char DeviceIoControl[0]; +0x0000 2d c9 00 00 /* unsigned char QuerySecurity[0]; +0x0000 2f c9 00 00 /* unsigned char SetSecurity[0]; +0x0000 31 c9 00 00 /* unsigned char MountVolume[0]; +0x0000 33 c9 00 00 /* unsigned char VerifyVolume[0]; +0x0000 33 c9 00 00 /* unsigned char Scsi[0]; +0x0000 37 c9 00 00 /* unsigned char QueryDeviceRelations[0]; +0x0000 3a c9 00 00 /* unsigned char QueryInterface[0]; +0x0000 3e c9 00 00 /* unsigned char DeviceCapabilities[0]; +0x0000 42 c9 00 00 /* unsigned char FilterResourceRequirements[0]; +0x0000 44 c9 00 00 /* unsigned char ReadWriteConfig[0]; +0x0000 46 c9 00 00 /* unsigned char SetLock[0]; +0x0000 48 c9 00 00 /* unsigned char QueryId[0]; +0x0000 4b c9 00 00 /* unsigned char QueryDeviceText[0]; +0x0000 4e c9 00 00 /* unsigned char UsageNotification[0]; +0x0000 51 c9 00 00 /* unsigned char WaitWake[0]; +0x0000 53 c9 00 00 /* unsigned char PowerSequence[0]; +0x0000 55 c9 00 00 /* unsigned char Power[0]; +0x0000 57 c9 00 00 /* unsigned char StartDevice[0]; +0x0000 59 c9 00 00 /* unsigned char WMI[0]; +0x0000 5b c9 00 00 unsigned char Others[32]; +0x0000 5d c9 00 00 }; */ struct _IO_STACK_LOCATION { unsigned char MajorFunction; /* +0x0000 */ unsigned char MinorFunction; /* +0x0001 */ unsigned char Flags; /* +0x0002 */ unsigned char Control; /* +0x0003 */ unsigned char Parameters[32]; /* +0x0008 5f c9 00 00 */ unsigned char DeviceObject[8]; /* +0x0028 ed c6 00 00 */ unsigned char FileObject[8]; /* +0x0030 eb c6 00 00 */ unsigned char CompletionRoutine[8]; /* +0x0038 60 c9 00 00 */ void *Context; /* +0x0040 */ }; struct _KDEVICE_QUEUE_ENTRY { unsigned char DeviceListEntry[16]; /* +0x0000 73 1f 00 00 */ unsigned long SortKey; /* +0x0010 */ unsigned char Inserted; /* +0x0014 */ }; struct _WHEA_ERROR_RECORD_SECTION_DESCRIPTOR { unsigned long SectionOffset; /* +0x0000 */ unsigned long SectionLength; /* +0x0004 */ unsigned char Revision[2]; /* +0x0008 6f c8 00 00 */ unsigned char ValidBits[1]; /* +0x000a 65 c9 00 00 */ unsigned char Reserved; /* +0x000b */ unsigned char Flags[4]; /* +0x000c 66 c9 00 00 */ unsigned char SectionType[16]; /* +0x0010 f3 14 00 00 */ unsigned char FRUId[16]; /* +0x0020 f3 14 00 00 */ unsigned char SectionSeverity[4]; /* +0x0030 70 c8 00 00 */ unsigned char FRUText[20]; /* +0x0034 e9 1e 00 00 */ }; struct _AUX_ACCESS_DATA { unsigned char PrivilegesUsed[8]; /* +0x0000 86 13 00 00 */ unsigned char GenericMapping[16]; /* +0x0008 5e 16 00 00 */ unsigned long AccessesToAudit; /* +0x0018 */ unsigned long MaximumAuditMask; /* +0x001c */ unsigned char TransactionId[16]; /* +0x0020 f3 14 00 00 */ void *NewSecurityDescriptor; /* +0x0030 */ void *ExistingSecurityDescriptor; /* +0x0038 */ void *ParentSecurityDescriptor; /* +0x0040 */ unsigned char DeRefSecurityDescriptor[8]; /* +0x0048 e5 48 00 00 */ void *SDLock; /* +0x0050 */ unsigned char AccessReasons[128]; /* +0x0058 83 13 00 00 */ unsigned char GenerateStagingEvents; /* +0x00d8 */ }; struct _WHEA_ERROR_PACKET_FLAGS { /* unsigned char PreviousError[0]; +0x0000 94 13 00 00 */ /* unsigned char Reserved1[0]; +0x0000 90 18 00 00 */ /* unsigned char HypervisorError[0]; +0x0000 91 18 00 00 */ /* unsigned char Simulated[0]; +0x0000 74 1e 00 00 */ /* unsigned char PlatformPfaControl[0]; +0x0000 75 1e 00 00 */ /* unsigned char PlatformDirectedOffline[0]; +0x0000 0b 24 00 00 */ /* unsigned char Reserved2[0]; +0x0000 39 33 00 00 */ unsigned long AsULONG; /* +0x0000 */ }; struct _DEVICE_CAPABILITIES { unsigned short Size; /* +0x0000 */ unsigned short Version; /* +0x0002 */ /* unsigned char DeviceD1[0]; +0x0004 94 13 00 00 */ /* unsigned char DeviceD2[0]; +0x0004 90 18 00 00 */ /* unsigned char LockSupported[0]; +0x0004 91 18 00 00 */ /* unsigned char EjectSupported[0]; +0x0004 74 1e 00 00 */ /* unsigned char Removable[0]; +0x0004 75 1e 00 00 */ /* unsigned char DockDevice[0]; +0x0004 0b 24 00 00 */ /* unsigned char UniqueID[0]; +0x0004 32 1f 00 00 */ /* unsigned char SilentInstall[0]; +0x0004 33 1f 00 00 */ /* unsigned char RawDeviceOK[0]; +0x0004 34 1f 00 00 */ /* unsigned char SurpriseRemovalOK[0]; +0x0004 35 1f 00 00 */ /* unsigned char WakeFromD0[0]; +0x0004 36 1f 00 00 */ /* unsigned char WakeFromD1[0]; +0x0004 37 1f 00 00 */ /* unsigned char WakeFromD2[0]; +0x0004 0d 24 00 00 */ /* unsigned char WakeFromD3[0]; +0x0004 0e 24 00 00 */ /* unsigned char HardwareDisabled[0]; +0x0004 39 1f 00 00 */ /* unsigned char NonDynamic[0]; +0x0004 9a 31 00 00 */ /* unsigned char WarmEjectSupported[0]; +0x0004 6f c9 00 00 */ /* unsigned char NoDisplayInUI[0]; +0x0004 70 c9 00 00 */ /* unsigned char Reserved1[0]; +0x0004 10 24 00 00 */ unsigned char Reserved[4]; /* +0x0004 71 c9 00 00 */ unsigned long Address; /* +0x0008 */ unsigned long UINumber; /* +0x000c */ unsigned char DeviceState[28]; /* +0x0010 75 16 00 00 */ unsigned char SystemWake[4]; /* +0x002c 76 16 00 00 */ unsigned char DeviceWake[4]; /* +0x0030 74 16 00 00 */ unsigned long D1Latency; /* +0x0034 */ unsigned long D2Latency; /* +0x0038 */ unsigned long D3Latency; /* +0x003c */ }; enum DMA_COMPLETION_STATUS { DmaComplete = 0, DmaAborted = 1, DmaError = 2, DmaCancelled = 3 }; struct _POWER_SEQUENCE { unsigned long SequenceD1; /* +0x0000 */ unsigned long SequenceD2; /* +0x0004 */ unsigned long SequenceD3; /* +0x0008 */ }; struct _DMA_ADAPTER_INFO { unsigned long Version; /* +0x0000 */ unsigned char V1[20]; /* +0x0004 7b c9 00 00 */ }; struct _DMA_TRANSFER_INFO { unsigned long Version; /* +0x0000 */ unsigned char V1[12]; /* +0x0004 7e c9 00 00 */ }; enum _WHEA_ERROR_TYPE { WheaErrTypeProcessor = 0, WheaErrTypeMemory = 1, WheaErrTypePCIExpress = 2, WheaErrTypeNMI = 3, WheaErrTypePCIXBus = 4, WheaErrTypePCIXDevice = 5, WheaErrTypeGeneric = 6 }; struct _DRIVER_EXTENSION { unsigned char DriverObject[8]; /* +0x0000 55 c7 00 00 */ unsigned char AddDevice[8]; /* +0x0008 76 c9 00 00 */ unsigned long Count; /* +0x0010 */ unsigned char ServiceKeyName[16]; /* +0x0018 e3 12 00 00 */ }; struct _DRIVER_OBJECT { short Type; /* +0x0000 */ short Size; /* +0x0002 */ unsigned char DeviceObject[8]; /* +0x0008 ed c6 00 00 */ unsigned long Flags; /* +0x0010 */ void *DriverStart; /* +0x0018 */ unsigned long DriverSize; /* +0x0020 */ void *DriverSection; /* +0x0028 */ unsigned char DriverExtension[8]; /* +0x0030 3d c7 00 00 */ unsigned char DriverName[16]; /* +0x0038 e3 12 00 00 */ unsigned char HardwareDatabase[8]; /* +0x0048 b6 17 00 00 */ unsigned char FastIoDispatch[8]; /* +0x0050 bf c8 00 00 */ unsigned char DriverInit[8]; /* +0x0058 58 c7 00 00 */ unsigned char DriverStartIo[8]; /* +0x0060 6c c8 00 00 */ unsigned char DriverUnload[8]; /* +0x0068 16 c8 00 00 */ unsigned char MajorFunction[224]; /* +0x0070 89 c9 00 00 */ }; struct _FAST_MUTEX { unsigned char Count[8]; /* +0x0000 d7 17 00 00 */ void *Owner; /* +0x0008 */ unsigned long Contention; /* +0x0010 */ unsigned char Event[24]; /* +0x0018 0c c8 00 00 */ unsigned long OldIrql; /* +0x0030 */ }; struct _DMA_ADAPTER { unsigned short Version; /* +0x0000 */ unsigned short Size; /* +0x0002 */ unsigned char DmaOperations[8]; /* +0x0008 82 c7 00 00 */ };