/* Header autogenerated by Brandon Falk's PDB Dumper * * Invocation: C:\projects\pdbdump_2\pdbdump.exe L:\symbolarchive\win8_spB_x86\winstoreui.pdb\41B785A2EC5C43ED94C6D6EB1116E9351\winstoreui.pdb */ enum tagTYPEFLAGS { TYPEFLAG_FAPPOBJECT = 1, TYPEFLAG_FCANCREATE = 2, TYPEFLAG_FLICENSED = 4, TYPEFLAG_FPREDECLID = 8, TYPEFLAG_FHIDDEN = 16, TYPEFLAG_FCONTROL = 32, TYPEFLAG_FDUAL = 64, TYPEFLAG_FNONEXTENSIBLE = 128, TYPEFLAG_FOLEAUTOMATION = 256, TYPEFLAG_FRESTRICTED = 512, TYPEFLAG_FAGGREGATABLE = 1024, TYPEFLAG_FREPLACEABLE = 2048, TYPEFLAG_FDISPATCHABLE = 4096, TYPEFLAG_FREVERSEBIND = 8192, TYPEFLAG_FPROXY = 16384 }; enum _PROC_THREAD_ATTRIBUTE_NUM { ProcThreadAttributeParentProcess = 0, ProcThreadAttributeExtendedFlags = 1, ProcThreadAttributeHandleList = 2, ProcThreadAttributeGroupAffinity = 3, ProcThreadAttributePreferredNode = 4, ProcThreadAttributeIdealProcessor = 5, ProcThreadAttributeUmsThread = 6, ProcThreadAttributeMitigationPolicy = 7, ProcThreadAttributePackageFullName = 8, ProcThreadAttributeSecurityCapabilities = 9, ProcThreadAttributeConsoleReference = 10, ProcThreadAttributeMax = 11 }; enum POWER_INFORMATION_LEVEL { SystemPowerPolicyAc = 0, SystemPowerPolicyDc = 1, VerifySystemPolicyAc = 2, VerifySystemPolicyDc = 3, SystemPowerCapabilities = 4, SystemBatteryState = 5, SystemPowerStateHandler = 6, ProcessorStateHandler = 7, SystemPowerPolicyCurrent = 8, AdministratorPowerPolicy = 9, SystemReserveHiberFile = 10, ProcessorInformation = 11, SystemPowerInformation = 12, ProcessorStateHandler2 = 13, LastWakeTime = 14, LastSleepTime = 15, SystemExecutionState = 16, SystemPowerStateNotifyHandler = 17, ProcessorPowerPolicyAc = 18, ProcessorPowerPolicyDc = 19, VerifyProcessorPowerPolicyAc = 20, VerifyProcessorPowerPolicyDc = 21, ProcessorPowerPolicyCurrent = 22, SystemPowerStateLogging = 23, SystemPowerLoggingEntry = 24, SetPowerSettingValue = 25, NotifyUserPowerSetting = 26, PowerInformationLevelUnused0 = 27, SystemMonitorHiberBootPowerOff = 28, SystemVideoState = 29, TraceApplicationPowerMessage = 30, TraceApplicationPowerMessageEnd = 31, ProcessorPerfStates = 32, ProcessorIdleStates = 33, ProcessorCap = 34, SystemWakeSource = 35, SystemHiberFileInformation = 36, TraceServicePowerMessage = 37, ProcessorLoad = 38, PowerShutdownNotification = 39, MonitorCapabilities = 40, SessionPowerInit = 41, SessionDisplayState = 42, PowerRequestCreate = 43, PowerRequestAction = 44, GetPowerRequestList = 45, ProcessorInformationEx = 46, NotifyUserModeLegacyPowerEvent = 47, GroupPark = 48, ProcessorIdleDomains = 49, WakeTimerList = 50, SystemHiberFileSize = 51, ProcessorIdleStatesHv = 52, ProcessorPerfStatesHv = 53, ProcessorPerfCapHv = 54, ProcessorSetIdle = 55, LogicalProcessorIdling = 56, UserPresence = 57, PowerSettingNotificationName = 58, GetPowerSettingValue = 59, IdleResiliency = 60, SessionRITState = 61, SessionConnectNotification = 62, SessionPowerCleanup = 63, SessionLockState = 64, SystemHiberbootState = 65, PlatformInformation = 66, PdcInvocation = 67, MonitorInvocation = 68, FirmwareTableInformationRegistered = 69, SetShutdownSelectedTime = 70, PowerInformationLevelMaximum = 71 }; enum WELL_KNOWN_SID_TYPE { WinNullSid = 0, WinWorldSid = 1, WinLocalSid = 2, WinCreatorOwnerSid = 3, WinCreatorGroupSid = 4, WinCreatorOwnerServerSid = 5, WinCreatorGroupServerSid = 6, WinNtAuthoritySid = 7, WinDialupSid = 8, WinNetworkSid = 9, WinBatchSid = 10, WinInteractiveSid = 11, WinServiceSid = 12, WinAnonymousSid = 13, WinProxySid = 14, WinEnterpriseControllersSid = 15, WinSelfSid = 16, WinAuthenticatedUserSid = 17, WinRestrictedCodeSid = 18, WinTerminalServerSid = 19, WinRemoteLogonIdSid = 20, WinLogonIdsSid = 21, WinLocalSystemSid = 22, WinLocalServiceSid = 23, WinNetworkServiceSid = 24, WinBuiltinDomainSid = 25, WinBuiltinAdministratorsSid = 26, WinBuiltinUsersSid = 27, WinBuiltinGuestsSid = 28, WinBuiltinPowerUsersSid = 29, WinBuiltinAccountOperatorsSid = 30, WinBuiltinSystemOperatorsSid = 31, WinBuiltinPrintOperatorsSid = 32, WinBuiltinBackupOperatorsSid = 33, WinBuiltinReplicatorSid = 34, WinBuiltinPreWindows2000CompatibleAccessSid = 35, WinBuiltinRemoteDesktopUsersSid = 36, WinBuiltinNetworkConfigurationOperatorsSid = 37, WinAccountAdministratorSid = 38, WinAccountGuestSid = 39, WinAccountKrbtgtSid = 40, WinAccountDomainAdminsSid = 41, WinAccountDomainUsersSid = 42, WinAccountDomainGuestsSid = 43, WinAccountComputersSid = 44, WinAccountControllersSid = 45, WinAccountCertAdminsSid = 46, WinAccountSchemaAdminsSid = 47, WinAccountEnterpriseAdminsSid = 48, WinAccountPolicyAdminsSid = 49, WinAccountRasAndIasServersSid = 50, WinNTLMAuthenticationSid = 51, WinDigestAuthenticationSid = 52, WinSChannelAuthenticationSid = 53, WinThisOrganizationSid = 54, WinOtherOrganizationSid = 55, WinBuiltinIncomingForestTrustBuildersSid = 56, WinBuiltinPerfMonitoringUsersSid = 57, WinBuiltinPerfLoggingUsersSid = 58, WinBuiltinAuthorizationAccessSid = 59, WinBuiltinTerminalServerLicenseServersSid = 60, WinBuiltinDCOMUsersSid = 61, WinBuiltinIUsersSid = 62, WinIUserSid = 63, WinBuiltinCryptoOperatorsSid = 64, WinUntrustedLabelSid = 65, WinLowLabelSid = 66, WinMediumLabelSid = 67, WinHighLabelSid = 68, WinSystemLabelSid = 69, WinWriteRestrictedCodeSid = 70, WinCreatorOwnerRightsSid = 71, WinCacheablePrincipalsGroupSid = 72, WinNonCacheablePrincipalsGroupSid = 73, WinEnterpriseReadonlyControllersSid = 74, WinAccountReadonlyControllersSid = 75, WinBuiltinEventLogReadersGroup = 76, WinNewEnterpriseReadonlyControllersSid = 77, WinBuiltinCertSvcDComAccessGroup = 78, WinMediumPlusLabelSid = 79, WinLocalLogonSid = 80, WinConsoleLogonSid = 81, WinThisOrganizationCertificateSid = 82, WinApplicationPackageAuthoritySid = 83, WinBuiltinAnyPackageSid = 84, WinCapabilityInternetClientSid = 85, WinCapabilityInternetClientServerSid = 86, WinCapabilityPrivateNetworkClientServerSid = 87, WinCapabilityPicturesLibrarySid = 88, WinCapabilityVideosLibrarySid = 89, WinCapabilityMusicLibrarySid = 90, WinCapabilityDocumentsLibrarySid = 91, WinCapabilitySharedUserCertificatesSid = 92, WinCapabilityDefaultWindowsCredentialsSid = 93, WinCapabilityRemovableStorageSid = 94, WinBuiltinRDSRemoteAccessServersSid = 95, WinBuiltinRDSEndpointServersSid = 96, WinBuiltinRDSManagementServersSid = 97, WinUserModeDriversSid = 98, WinBuiltinHyperVAdminsSid = 99 }; enum VARENUM { VT_EMPTY = 0, VT_NULL = 1, VT_I2 = 2, VT_I4 = 3, VT_R4 = 4, VT_R8 = 5, VT_CY = 6, VT_DATE = 7, VT_BSTR = 8, VT_DISPATCH = 9, VT_ERROR = 10, VT_BOOL = 11, VT_VARIANT = 12, VT_UNKNOWN = 13, VT_DECIMAL = 14, VT_I1 = 16, VT_UI1 = 17, VT_UI2 = 18, VT_UI4 = 19, VT_I8 = 20, VT_UI8 = 21, VT_INT = 22, VT_UINT = 23, VT_VOID = 24, VT_HRESULT = 25, VT_PTR = 26, VT_SAFEARRAY = 27, VT_CARRAY = 28, VT_USERDEFINED = 29, VT_LPSTR = 30, VT_LPWSTR = 31, VT_RECORD = 36, VT_INT_PTR = 37, VT_UINT_PTR = 38, VT_FILETIME = 64, VT_BLOB = 65, VT_STREAM = 66, VT_STORAGE = 67, VT_STREAMED_OBJECT = 68, VT_STORED_OBJECT = 69, VT_BLOB_OBJECT = 70, VT_CF = 71, VT_CLSID = 72, VT_VERSIONED_STREAM = 73, VT_BSTR_BLOB = 4095, VT_VECTOR = 4096, VT_ARRAY = 8192, VT_BYREF = 16384, = 32770 }; enum POWER_ACTION { PowerActionNone = 0, PowerActionReserved = 1, PowerActionSleep = 2, PowerActionHibernate = 3, PowerActionShutdown = 4, PowerActionShutdownReset = 5, PowerActionShutdownOff = 6, PowerActionWarmEject = 7 }; enum URLIS { URLIS_URL = 0, URLIS_OPAQUE = 1, URLIS_NOHISTORY = 2, URLIS_FILEURL = 3, URLIS_APPLIABLE = 4, URLIS_DIRECTORY = 5, URLIS_HASQUERY = 6 }; enum tagMSHLFLAGS { MSHLFLAGS_NORMAL = 0, MSHLFLAGS_TABLESTRONG = 1, MSHLFLAGS_TABLEWEAK = 2, MSHLFLAGS_NOPING = 4, MSHLFLAGS_RESERVED1 = 8, MSHLFLAGS_RESERVED2 = 16, MSHLFLAGS_RESERVED3 = 32, MSHLFLAGS_RESERVED4 = 64 }; enum _tagQUERYOPTION { QUERY_EXPIRATION_DATE = 1, QUERY_TIME_OF_LAST_CHANGE = 2, QUERY_CONTENT_ENCODING = 3, QUERY_CONTENT_TYPE = 4, QUERY_REFRESH = 5, QUERY_RECOMBINE = 6, QUERY_CAN_NAVIGATE = 7, QUERY_USES_NETWORK = 8, QUERY_IS_CACHED = 9, QUERY_IS_INSTALLEDENTRY = 10, QUERY_IS_CACHED_OR_MAPPED = 11, QUERY_USES_CACHE = 12, QUERY_IS_SECURE = 13, QUERY_IS_SAFE = 14, QUERY_USES_HISTORYFOLDER = 15, QUERY_IS_CACHED_AND_USABLE_OFFLINE = 16 }; enum _COPYFILE2_MESSAGE_TYPE { COPYFILE2_CALLBACK_NONE = 0, COPYFILE2_CALLBACK_CHUNK_STARTED = 1, COPYFILE2_CALLBACK_CHUNK_FINISHED = 2, COPYFILE2_CALLBACK_STREAM_STARTED = 3, COPYFILE2_CALLBACK_STREAM_FINISHED = 4, COPYFILE2_CALLBACK_POLL_CONTINUE = 5, COPYFILE2_CALLBACK_ERROR = 6, COPYFILE2_CALLBACK_MAX = 7 }; enum SHGLOBALCOUNTER { GLOBALCOUNTER_SEARCHMANAGER = 0, GLOBALCOUNTER_SEARCHOPTIONS = 1, GLOBALCOUNTER_FOLDERSETTINGSCHANGE = 2, GLOBALCOUNTER_RATINGS = 3, GLOBALCOUNTER_APPROVEDSITES = 4, GLOBALCOUNTER_RESTRICTIONS = 5, GLOBALCOUNTER_SHELLSETTINGSCHANGED = 6, GLOBALCOUNTER_SYSTEMPIDLCHANGE = 7, GLOBALCOUNTER_OVERLAYMANAGER = 8, GLOBALCOUNTER_QUERYASSOCIATIONS = 9, GLOBALCOUNTER_IESESSIONS = 10, GLOBALCOUNTER_IEONLY_SESSIONS = 11, GLOBALCOUNTER_APPLICATION_DESTINATIONS = 12, __UNUSED_RECYCLE_WAS_GLOBALCOUNTER_CSCSYNCINPROGRESS = 13, GLOBALCOUNTER_BITBUCKETNUMDELETERS = 14, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_SHARES = 15, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_A = 16, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_B = 17, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_C = 18, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_D = 19, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_E = 20, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_F = 21, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_G = 22, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_H = 23, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_I = 24, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_J = 25, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_K = 26, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_L = 27, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_M = 28, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_N = 29, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_O = 30, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_P = 31, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_Q = 32, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_R = 33, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_S = 34, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_T = 35, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_U = 36, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_V = 37, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_W = 38, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_X = 39, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_Y = 40, GLOBALCOUNTER_RECYCLEDIRTYCOUNT_DRIVE_Z = 41, __UNUSED_RECYCLE_WAS_GLOBALCOUNTER_RECYCLEDIRTYCOUNT_SERVERDRIVE = 42, __UNUSED_RECYCLE_WAS_GLOBALCOUNTER_RECYCLEGLOBALDIRTYCOUNT = 43, GLOBALCOUNTER_RECYCLEBINENUM = 44, GLOBALCOUNTER_RECYCLEBINCORRUPTED = 45, GLOBALCOUNTER_RATINGS_STATECOUNTER = 46, GLOBALCOUNTER_PRIVATE_PROFILE_CACHE = 47, GLOBALCOUNTER_INTERNETTOOLBAR_LAYOUT = 48, GLOBALCOUNTER_FOLDERDEFINITION_CACHE = 49, GLOBALCOUNTER_COMMONPLACES_LIST_CACHE = 50, GLOBALCOUNTER_PRIVATE_PROFILE_CACHE_MACHINEWIDE = 51, GLOBALCOUNTER_ASSOCCHANGED = 52, GLOBALCOUNTER_APP_ITEMS_STATE_STORE_CACHE = 53, GLOBALCOUNTER_IMMERSIVE_SCALE_CACHE = 54, GLOBALCOUNTER_SETTINGSYNC_ENABLED = 55, GLOBALCOUNTER_MAXIMUMVALUE = 56 }; enum SYSGEOTYPE { GEO_NATION = 1, GEO_LATITUDE = 2, GEO_LONGITUDE = 3, GEO_ISO2 = 4, GEO_ISO3 = 5, GEO_RFC1766 = 6, GEO_LCID = 7, GEO_FRIENDLYNAME = 8, GEO_OFFICIALNAME = 9, GEO_TIMEZONES = 10, GEO_OFFICIALLANGUAGES = 11, GEO_ISO_UN_NUMBER = 12, GEO_PARENT = 13 }; enum _tagPARSEACTION { PARSE_CANONICALIZE = 1, PARSE_FRIENDLY = 2, PARSE_SECURITY_URL = 3, PARSE_ROOTDOCUMENT = 4, PARSE_DOCUMENT = 5, PARSE_ANCHOR = 6, PARSE_ENCODE_IS_UNESCAPE = 7, PARSE_DECODE_IS_ESCAPE = 8, PARSE_PATH_FROM_URL = 9, PARSE_URL_FROM_PATH = 10, PARSE_MIME = 11, PARSE_SERVER = 12, PARSE_SCHEMA = 13, PARSE_SITE = 14, PARSE_DOMAIN = 15, PARSE_LOCATION = 16, PARSE_SECURITY_DOMAIN = 17, PARSE_ESCAPE = 18, PARSE_UNESCAPE = 19 }; enum DISPLAYCONFIG_SCALING { DISPLAYCONFIG_SCALING_IDENTITY = 1, DISPLAYCONFIG_SCALING_CENTERED = 2, DISPLAYCONFIG_SCALING_STRETCHED = 3, DISPLAYCONFIG_SCALING_ASPECTRATIOCENTEREDMAX = 4, DISPLAYCONFIG_SCALING_CUSTOM = 5, DISPLAYCONFIG_SCALING_PREFERRED = 128, DISPLAYCONFIG_SCALING_FORCE_UINT32 = -1 }; enum DISPLAYCONFIG_DEVICE_INFO_TYPE { DISPLAYCONFIG_DEVICE_INFO_GET_SOURCE_NAME = 1, DISPLAYCONFIG_DEVICE_INFO_GET_TARGET_NAME = 2, DISPLAYCONFIG_DEVICE_INFO_GET_TARGET_PREFERRED_MODE = 3, DISPLAYCONFIG_DEVICE_INFO_GET_ADAPTER_NAME = 4, DISPLAYCONFIG_DEVICE_INFO_SET_TARGET_PERSISTENCE = 5, DISPLAYCONFIG_DEVICE_INFO_FORCE_UINT32 = -1 }; enum ReplacesCorHdrNumericDefines { COMIMAGE_FLAGS_ILONLY = 1, COMIMAGE_FLAGS_32BITREQUIRED = 2, COMIMAGE_FLAGS_IL_LIBRARY = 4, COMIMAGE_FLAGS_STRONGNAMESIGNED = 8, COMIMAGE_FLAGS_NATIVE_ENTRYPOINT = 16, /* COMIMAGE_FLAGS_TRACKDEBUGDATA = Unavail */ }; enum __MIDL_IInternetSecurityManager_0001 { PUAF_DEFAULT = 0, PUAF_NOUI = 1, PUAF_ISFILE = 2, PUAF_WARN_IF_DENIED = 4, PUAF_FORCEUI_FOREGROUND = 8, PUAF_CHECK_TIFS = 16, PUAF_DONTCHECKBOXINDIALOG = 32, PUAF_TRUSTED = 64, PUAF_ACCEPT_WILDCARD_SCHEME = 128, PUAF_ENFORCERESTRICTED = 256, PUAF_NOSAVEDFILECHECK = 512, PUAF_REQUIRESAVEDFILECHECK = 1024, PUAF_DONT_USE_CACHE = 4096, PUAF_RESERVED1 = 8192, PUAF_RESERVED2 = 16384, /* PUAF_LMZ_UNLOCKED = Unavail */ }; enum PROXY_PHASE { PROXY_CALCSIZE = 0, PROXY_GETBUFFER = 1, PROXY_MARSHAL = 2, PROXY_SENDRECEIVE = 3, PROXY_UNMARSHAL = 4 }; enum _IDL_CS_CONVERT { IDL_CS_NO_CONVERT = 0, IDL_CS_IN_PLACE_CONVERT = 1, IDL_CS_NEW_BUFFER_CONVERT = 2 }; enum ASSOCDATA { ASSOCDATA_MSIDESCRIPTOR = 1, ASSOCDATA_NOACTIVATEHANDLER = 2, ASSOCDATA_QUERYCLASSSTORE = 3, ASSOCDATA_HASPERUSERASSOC = 4, ASSOCDATA_EDITFLAGS = 5, ASSOCDATA_VALUE = 6, ASSOCDATA_MAX = 7 }; enum tagSTGC { STGC_DEFAULT = 0, STGC_OVERWRITE = 1, STGC_ONLYIFCURRENT = 2, STGC_DANGEROUSLYCOMMITMERELYTODISKCACHE = 4, STGC_CONSOLIDATE = 8 }; enum SYSTEM_POWER_CONDITION { PoAc = 0, PoDc = 1, PoHot = 2, PoConditionMaximum = 3 }; enum tagBINDSTATUS { BINDSTATUS_FINDINGRESOURCE = 1, BINDSTATUS_CONNECTING = 2, BINDSTATUS_REDIRECTING = 3, BINDSTATUS_BEGINDOWNLOADDATA = 4, BINDSTATUS_DOWNLOADINGDATA = 5, BINDSTATUS_ENDDOWNLOADDATA = 6, BINDSTATUS_BEGINDOWNLOADCOMPONENTS = 7, BINDSTATUS_INSTALLINGCOMPONENTS = 8, BINDSTATUS_ENDDOWNLOADCOMPONENTS = 9, BINDSTATUS_USINGCACHEDCOPY = 10, BINDSTATUS_SENDINGREQUEST = 11, BINDSTATUS_CLASSIDAVAILABLE = 12, BINDSTATUS_MIMETYPEAVAILABLE = 13, BINDSTATUS_CACHEFILENAMEAVAILABLE = 14, BINDSTATUS_BEGINSYNCOPERATION = 15, BINDSTATUS_ENDSYNCOPERATION = 16, BINDSTATUS_BEGINUPLOADDATA = 17, BINDSTATUS_UPLOADINGDATA = 18, BINDSTATUS_ENDUPLOADDATA = 19, BINDSTATUS_PROTOCOLCLASSID = 20, BINDSTATUS_ENCODING = 21, BINDSTATUS_VERIFIEDMIMETYPEAVAILABLE = 22, BINDSTATUS_CLASSINSTALLLOCATION = 23, BINDSTATUS_DECODING = 24, BINDSTATUS_LOADINGMIMEHANDLER = 25, BINDSTATUS_CONTENTDISPOSITIONATTACH = 26, BINDSTATUS_FILTERREPORTMIMETYPE = 27, BINDSTATUS_CLSIDCANINSTANTIATE = 28, BINDSTATUS_IUNKNOWNAVAILABLE = 29, BINDSTATUS_DIRECTBIND = 30, BINDSTATUS_RAWMIMETYPE = 31, BINDSTATUS_PROXYDETECTING = 32, BINDSTATUS_ACCEPTRANGES = 33, BINDSTATUS_COOKIE_SENT = 34, BINDSTATUS_COMPACT_POLICY_RECEIVED = 35, BINDSTATUS_COOKIE_SUPPRESSED = 36, BINDSTATUS_COOKIE_STATE_UNKNOWN = 37, BINDSTATUS_COOKIE_STATE_ACCEPT = 38, BINDSTATUS_COOKIE_STATE_REJECT = 39, BINDSTATUS_COOKIE_STATE_PROMPT = 40, BINDSTATUS_COOKIE_STATE_LEASH = 41, BINDSTATUS_COOKIE_STATE_DOWNGRADE = 42, BINDSTATUS_POLICY_HREF = 43, BINDSTATUS_P3P_HEADER = 44, BINDSTATUS_SESSION_COOKIE_RECEIVED = 45, BINDSTATUS_PERSISTENT_COOKIE_RECEIVED = 46, BINDSTATUS_SESSION_COOKIES_ALLOWED = 47, BINDSTATUS_CACHECONTROL = 48, BINDSTATUS_CONTENTDISPOSITIONFILENAME = 49, BINDSTATUS_MIMETEXTPLAINMISMATCH = 50, BINDSTATUS_PUBLISHERAVAILABLE = 51, BINDSTATUS_DISPLAYNAMEAVAILABLE = 52, BINDSTATUS_SSLUX_NAVBLOCKED = 53, BINDSTATUS_SERVER_MIMETYPEAVAILABLE = 54, BINDSTATUS_SNIFFED_CLASSIDAVAILABLE = 55, BINDSTATUS_64BIT_PROGRESS = 56, BINDSTATUS_LAST = 56, BINDSTATUS_RESERVED_0 = 57, BINDSTATUS_RESERVED_1 = 58, BINDSTATUS_RESERVED_2 = 59, BINDSTATUS_RESERVED_3 = 60, BINDSTATUS_RESERVED_4 = 61, BINDSTATUS_RESERVED_5 = 62, BINDSTATUS_RESERVED_6 = 63, BINDSTATUS_RESERVED_7 = 64, BINDSTATUS_RESERVED_8 = 65, BINDSTATUS_RESERVED_9 = 66, BINDSTATUS_LAST_PRIVATE = 66 }; enum SHREGDEL_FLAGS { SHREGDEL_DEFAULT = 0, SHREGDEL_HKCU = 1, SHREGDEL_HKLM = 16, SHREGDEL_BOTH = 17 }; enum __MIDL_IUri_0001 { Uri_PROPERTY_ABSOLUTE_URI = 0, Uri_PROPERTY_STRING_START = 0, Uri_PROPERTY_AUTHORITY = 1, Uri_PROPERTY_DISPLAY_URI = 2, Uri_PROPERTY_DOMAIN = 3, Uri_PROPERTY_EXTENSION = 4, Uri_PROPERTY_FRAGMENT = 5, Uri_PROPERTY_HOST = 6, Uri_PROPERTY_PASSWORD = 7, Uri_PROPERTY_PATH = 8, Uri_PROPERTY_PATH_AND_QUERY = 9, Uri_PROPERTY_QUERY = 10, Uri_PROPERTY_RAW_URI = 11, Uri_PROPERTY_SCHEME_NAME = 12, Uri_PROPERTY_USER_INFO = 13, Uri_PROPERTY_USER_NAME = 14, Uri_PROPERTY_STRING_LAST = 14, Uri_PROPERTY_HOST_TYPE = 15, Uri_PROPERTY_DWORD_START = 15, Uri_PROPERTY_PORT = 16, Uri_PROPERTY_SCHEME = 17, Uri_PROPERTY_ZONE = 18, Uri_PROPERTY_DWORD_LAST = 18 }; enum tagOLERENDER { OLERENDER_NONE = 0, OLERENDER_DRAW = 1, OLERENDER_FORMAT = 2, OLERENDER_ASIS = 3 }; /* enum tagMKREDUCE { MKRREDUCE_ONE = Unavail }; */ enum _tagINTERNETFEATURELIST { FEATURE_OBJECT_CACHING = 0, FEATURE_ZONE_ELEVATION = 1, FEATURE_MIME_HANDLING = 2, FEATURE_MIME_SNIFFING = 3, FEATURE_WINDOW_RESTRICTIONS = 4, FEATURE_WEBOC_POPUPMANAGEMENT = 5, FEATURE_BEHAVIORS = 6, FEATURE_DISABLE_MK_PROTOCOL = 7, FEATURE_LOCALMACHINE_LOCKDOWN = 8, FEATURE_SECURITYBAND = 9, FEATURE_RESTRICT_ACTIVEXINSTALL = 10, FEATURE_VALIDATE_NAVIGATE_URL = 11, FEATURE_RESTRICT_FILEDOWNLOAD = 12, FEATURE_ADDON_MANAGEMENT = 13, FEATURE_PROTOCOL_LOCKDOWN = 14, FEATURE_HTTP_USERNAME_PASSWORD_DISABLE = 15, FEATURE_SAFE_BINDTOOBJECT = 16, FEATURE_UNC_SAVEDFILECHECK = 17, FEATURE_GET_URL_DOM_FILEPATH_UNENCODED = 18, FEATURE_TABBED_BROWSING = 19, FEATURE_SSLUX = 20, FEATURE_DISABLE_NAVIGATION_SOUNDS = 21, FEATURE_DISABLE_LEGACY_COMPRESSION = 22, FEATURE_FORCE_ADDR_AND_STATUS = 23, FEATURE_XMLHTTP = 24, FEATURE_DISABLE_TELNET_PROTOCOL = 25, FEATURE_FEEDS = 26, FEATURE_BLOCK_INPUT_PROMPTS = 27, FEATURE_ENTRY_COUNT = 28 }; enum __MIDL_IBindStatusCallback_0006 { BSCF_FIRSTDATANOTIFICATION = 1, BSCF_INTERMEDIATEDATANOTIFICATION = 2, BSCF_LASTDATANOTIFICATION = 4, BSCF_DATAFULLYAVAILABLE = 8, BSCF_AVAILABLEDATASIZEUNKNOWN = 16, BSCF_SKIPDRAINDATAFORFILEURLS = 32, BSCF_64BITLENGTHDOWNLOAD = 64 }; enum DISPLAYCONFIG_PIXELFORMAT { DISPLAYCONFIG_PIXELFORMAT_8BPP = 1, DISPLAYCONFIG_PIXELFORMAT_16BPP = 2, DISPLAYCONFIG_PIXELFORMAT_24BPP = 3, DISPLAYCONFIG_PIXELFORMAT_32BPP = 4, DISPLAYCONFIG_PIXELFORMAT_NONGDI = 5, DISPLAYCONFIG_PIXELFORMAT_FORCE_UINT32 = -1 }; enum tagBINDSTRING { BINDSTRING_HEADERS = 1, BINDSTRING_ACCEPT_MIMES = 2, BINDSTRING_EXTRA_URL = 3, BINDSTRING_LANGUAGE = 4, BINDSTRING_USERNAME = 5, BINDSTRING_PASSWORD = 6, BINDSTRING_UA_PIXELS = 7, BINDSTRING_UA_COLOR = 8, BINDSTRING_OS = 9, BINDSTRING_USER_AGENT = 10, BINDSTRING_ACCEPT_ENCODINGS = 11, BINDSTRING_POST_COOKIE = 12, BINDSTRING_POST_DATA_MIME = 13, BINDSTRING_URL = 14, BINDSTRING_IID = 15, BINDSTRING_FLAG_BIND_TO_OBJECT = 16, BINDSTRING_PTR_BIND_CONTEXT = 17, BINDSTRING_XDR_ORIGIN = 18, BINDSTRING_DOWNLOADPATH = 19, BINDSTRING_ROOTDOC_URL = 20, BINDSTRING_INITIAL_FILENAME = 21 }; enum tagORIENTATION_PREFERENCE { ORIENTATION_PREFERENCE_NONE = 0, ORIENTATION_PREFERENCE_LANDSCAPE = 1, ORIENTATION_PREFERENCE_PORTRAIT = 2, ORIENTATION_PREFERENCE_LANDSCAPE_FLIPPED = 4, ORIENTATION_PREFERENCE_PORTRAIT_FLIPPED = 8 }; enum tagLIBFLAGS { LIBFLAG_FRESTRICTED = 1, LIBFLAG_FCONTROL = 2, LIBFLAG_FHIDDEN = 4, LIBFLAG_FHASDISKIMAGE = 8 }; enum _TOKEN_INFORMATION_CLASS { TokenUser = 1, TokenGroups = 2, TokenPrivileges = 3, TokenOwner = 4, TokenPrimaryGroup = 5, TokenDefaultDacl = 6, TokenSource = 7, TokenType = 8, TokenImpersonationLevel = 9, TokenStatistics = 10, TokenRestrictedSids = 11, TokenSessionId = 12, TokenGroupsAndPrivileges = 13, TokenSessionReference = 14, TokenSandBoxInert = 15, TokenAuditPolicy = 16, TokenOrigin = 17, TokenElevationType = 18, TokenLinkedToken = 19, TokenElevation = 20, TokenHasRestrictions = 21, TokenAccessInformation = 22, TokenVirtualizationAllowed = 23, TokenVirtualizationEnabled = 24, TokenIntegrityLevel = 25, TokenUIAccess = 26, TokenMandatoryPolicy = 27, TokenLogonSid = 28, TokenIsAppContainer = 29, TokenCapabilities = 30, TokenAppContainerSid = 31, TokenAppContainerNumber = 32, TokenUserClaimAttributes = 33, TokenDeviceClaimAttributes = 34, TokenRestrictedUserClaimAttributes = 35, TokenRestrictedDeviceClaimAttributes = 36, TokenDeviceGroups = 37, TokenRestrictedDeviceGroups = 38, TokenSecurityAttributes = 39, TokenIsRestricted = 40, MaxTokenInfoClass = 41 }; enum tagMKSYS { MKSYS_NONE = 0, MKSYS_GENERICCOMPOSITE = 1, MKSYS_FILEMONIKER = 2, MKSYS_ANTIMONIKER = 3, MKSYS_ITEMMONIKER = 4, MKSYS_POINTERMONIKER = 5, MKSYS_CLASSMONIKER = 7, MKSYS_OBJREFMONIKER = 8, MKSYS_SESSIONMONIKER = 9, MKSYS_LUAMONIKER = 10 }; enum _FILE_INFO_BY_HANDLE_CLASS { FileBasicInfo = 0, FileStandardInfo = 1, FileNameInfo = 2, FileRenameInfo = 3, FileDispositionInfo = 4, FileAllocationInfo = 5, FileEndOfFileInfo = 6, FileStreamInfo = 7, FileCompressionInfo = 8, FileAttributeTagInfo = 9, FileIdBothDirectoryInfo = 10, FileIdBothDirectoryRestartInfo = 11, FileIoPriorityHintInfo = 12, FileRemoteProtocolInfo = 13, FileFullDirectoryInfo = 14, FileFullDirectoryRestartInfo = 15, FileStorageInfo = 16, FileAlignmentInfo = 17, MaximumFileInfoByHandleClass = 18 }; enum tagMSHCTX { MSHCTX_LOCAL = 0, MSHCTX_NOSHAREDMEM = 1, MSHCTX_DIFFERENTMACHINE = 2, MSHCTX_INPROC = 3, MSHCTX_CROSSCTX = 4 }; enum tagPOINTER_DEVICE_CURSOR_TYPE { POINTER_DEVICE_CURSOR_TYPE_UNKNOWN = 0, POINTER_DEVICE_CURSOR_TYPE_TIP = 1, POINTER_DEVICE_CURSOR_TYPE_ERASER = 2, POINTER_DEVICE_CURSOR_TYPE_MAX = -1 }; enum tagCOINIT { COINIT_APARTMENTTHREADED = 2, COINIT_MULTITHREADED = 0, COINIT_DISABLE_OLE1DDE = 4, COINIT_SPEED_OVER_MEMORY = 8 }; enum URL_SCHEME { URL_SCHEME_INVALID = -1, URL_SCHEME_UNKNOWN = 0, URL_SCHEME_FTP = 1, URL_SCHEME_HTTP = 2, URL_SCHEME_GOPHER = 3, URL_SCHEME_MAILTO = 4, URL_SCHEME_NEWS = 5, URL_SCHEME_NNTP = 6, URL_SCHEME_TELNET = 7, URL_SCHEME_WAIS = 8, URL_SCHEME_FILE = 9, URL_SCHEME_MK = 10, URL_SCHEME_HTTPS = 11, URL_SCHEME_SHELL = 12, URL_SCHEME_SNEWS = 13, URL_SCHEME_LOCAL = 14, URL_SCHEME_JAVASCRIPT = 15, URL_SCHEME_VBSCRIPT = 16, URL_SCHEME_ABOUT = 17, URL_SCHEME_RES = 18, URL_SCHEME_MSSHELLROOTED = 19, URL_SCHEME_MSSHELLIDLIST = 20, URL_SCHEME_MSHELP = 21, URL_SCHEME_MSSHELLDEVICE = 22, URL_SCHEME_WILDCARD = 23, URL_SCHEME_SEARCH_MS = 24, URL_SCHEME_SEARCH = 25, URL_SCHEME_KNOWNFOLDER = 26, URL_SCHEME_MAXVALUE = 27 }; enum tagURLTEMPLATE { URLTEMPLATE_CUSTOM = 0, /* URLTEMPLATE_PREDEFINED_MIN = Unavail */ }; enum _JOBOBJECTINFOCLASS { JobObjectBasicAccountingInformation = 1, JobObjectBasicLimitInformation = 2, JobObjectBasicProcessIdList = 3, JobObjectBasicUIRestrictions = 4, JobObjectSecurityLimitInformation = 5, JobObjectEndOfJobTimeInformation = 6, JobObjectAssociateCompletionPortInformation = 7, JobObjectBasicAndIoAccountingInformation = 8, JobObjectExtendedLimitInformation = 9, JobObjectJobSetInformation = 10, JobObjectGroupInformation = 11, JobObjectNotificationLimitInformation = 12, JobObjectLimitViolationInformation = 13, JobObjectGroupInformationEx = 14, JobObjectCpuRateControlInformation = 15, JobObjectCompletionFilter = 16, JobObjectCompletionCounter = 17, JobObjectReserved1Information = 18, JobObjectReserved2Information = 19, JobObjectReserved3Information = 20, JobObjectReserved4Information = 21, JobObjectReserved5Information = 22, JobObjectReserved6Information = 23, JobObjectReserved7Information = 24, MaxJobObjectInfoClass = 25 }; enum _COMPUTER_NAME_FORMAT { ComputerNameNetBIOS = 0, ComputerNameDnsHostname = 1, ComputerNameDnsDomain = 2, ComputerNameDnsFullyQualified = 3, ComputerNamePhysicalNetBIOS = 4, ComputerNamePhysicalDnsHostname = 5, ComputerNamePhysicalDnsDomain = 6, ComputerNamePhysicalDnsFullyQualified = 7, ComputerNameMax = 8 }; enum tagPROPBAG2_TYPE { PROPBAG2_TYPE_UNDEFINED = 0, PROPBAG2_TYPE_DATA = 1, PROPBAG2_TYPE_URL = 2, PROPBAG2_TYPE_OBJECT = 3, PROPBAG2_TYPE_STREAM = 4, PROPBAG2_TYPE_STORAGE = 5, PROPBAG2_TYPE_MONIKER = 6 }; enum ASSOCSTR { ASSOCSTR_COMMAND = 1, ASSOCSTR_EXECUTABLE = 2, ASSOCSTR_FRIENDLYDOCNAME = 3, ASSOCSTR_FRIENDLYAPPNAME = 4, ASSOCSTR_NOOPEN = 5, ASSOCSTR_SHELLNEWVALUE = 6, ASSOCSTR_DDECOMMAND = 7, ASSOCSTR_DDEIFEXEC = 8, ASSOCSTR_DDEAPPLICATION = 9, ASSOCSTR_DDETOPIC = 10, ASSOCSTR_INFOTIP = 11, ASSOCSTR_QUICKTIP = 12, ASSOCSTR_TILEINFO = 13, ASSOCSTR_CONTENTTYPE = 14, ASSOCSTR_DEFAULTICON = 15, ASSOCSTR_SHELLEXTENSION = 16, ASSOCSTR_DROPTARGET = 17, ASSOCSTR_DELEGATEEXECUTE = 18, ASSOCSTR_MAX = 19 }; enum tagTYPEKIND { TKIND_ENUM = 0, TKIND_RECORD = 1, TKIND_MODULE = 2, TKIND_INTERFACE = 3, TKIND_DISPATCH = 4, TKIND_COCLASS = 5, TKIND_ALIAS = 6, TKIND_UNION = 7, TKIND_MAX = 8 }; enum tagVARFLAGS { VARFLAG_FREADONLY = 1, VARFLAG_FSOURCE = 2, VARFLAG_FBINDABLE = 4, VARFLAG_FREQUESTEDIT = 8, VARFLAG_FDISPLAYBIND = 16, VARFLAG_FDEFAULTBIND = 32, VARFLAG_FHIDDEN = 64, VARFLAG_FRESTRICTED = 128, VARFLAG_FDEFAULTCOLLELEM = 256, VARFLAG_FUIDEFAULT = 512, VARFLAG_FNONBROWSABLE = 1024, VARFLAG_FREPLACEABLE = 2048, VARFLAG_FIMMEDIATEBIND = 4096 }; enum __MIDL_IBindStatusCallback_0002 { BINDINFOF_URLENCODESTGMEDDATA = 1, BINDINFOF_URLENCODEDEXTRAINFO = 2 }; enum _SC_STATUS_TYPE { SC_STATUS_PROCESS_INFO = 0 }; enum tagHITRESULT { HITRESULT_OUTSIDE = 0, HITRESULT_TRANSPARENT = 1, HITRESULT_CLOSE = 2, HITRESULT_HIT = 3 }; enum DISPLAYCONFIG_SCANLINE_ORDERING { DISPLAYCONFIG_SCANLINE_ORDERING_UNSPECIFIED = 0, DISPLAYCONFIG_SCANLINE_ORDERING_PROGRESSIVE = 1, DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACED = 2, DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACED_UPPERFIELDFIRST = 2, DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACED_LOWERFIELDFIRST = 3, DISPLAYCONFIG_SCANLINE_ORDERING_FORCE_UINT32 = -1 }; enum tagQACONTAINERFLAGS { QACONTAINER_SHOWHATCHING = 1, QACONTAINER_SHOWGRABHANDLES = 2, QACONTAINER_USERMODE = 4, QACONTAINER_DISPLAYASDEFAULT = 8, QACONTAINER_UIDEAD = 16, QACONTAINER_AUTOCLIP = 32, QACONTAINER_MESSAGEREFLECT = 64, QACONTAINER_SUPPORTSMNEMONICS = 128 }; enum _CM_SERVICE_NODE_TYPE { DriverType = 1, FileSystemType = 2, Win32ServiceOwnProcess = 16, Win32ServiceShareProcess = 32, AdapterType = 4, RecognizerType = 8 }; enum _APTTYPE { APTTYPE_CURRENT = -1, APTTYPE_STA = 0, APTTYPE_MTA = 1, APTTYPE_NA = 2, APTTYPE_MAINSTA = 3 }; enum _CM_SERVICE_LOAD_TYPE { BootLoad = 0, SystemLoad = 1, AutoLoad = 2, DemandLoad = 3, DisableLoad = 4 }; enum _THREAD_INFORMATION_CLASS { ThreadMemoryPriority = 0, ThreadInformationClassMax = 1 }; enum _SID_NAME_USE { SidTypeUser = 1, SidTypeGroup = 2, SidTypeDomain = 3, SidTypeAlias = 4, SidTypeWellKnownGroup = 5, SidTypeDeletedAccount = 6, SidTypeInvalid = 7, SidTypeUnknown = 8, SidTypeComputer = 9, SidTypeLabel = 10 }; enum tagFUNCFLAGS { FUNCFLAG_FRESTRICTED = 1, FUNCFLAG_FSOURCE = 2, FUNCFLAG_FBINDABLE = 4, FUNCFLAG_FREQUESTEDIT = 8, FUNCFLAG_FDISPLAYBIND = 16, FUNCFLAG_FDEFAULTBIND = 32, FUNCFLAG_FHIDDEN = 64, FUNCFLAG_FUSESGETLASTERROR = 128, FUNCFLAG_FDEFAULTCOLLELEM = 256, FUNCFLAG_FUIDEFAULT = 512, FUNCFLAG_FNONBROWSABLE = 1024, FUNCFLAG_FREPLACEABLE = 2048, FUNCFLAG_FIMMEDIATEBIND = 4096 }; enum tagOLEMISC { OLEMISC_RECOMPOSEONRESIZE = 1, OLEMISC_ONLYICONIC = 2, OLEMISC_INSERTNOTREPLACE = 4, OLEMISC_STATIC = 8, OLEMISC_CANTLINKINSIDE = 16, OLEMISC_CANLINKBYOLE1 = 32, OLEMISC_ISLINKOBJECT = 64, OLEMISC_INSIDEOUT = 128, OLEMISC_ACTIVATEWHENVISIBLE = 256, OLEMISC_RENDERINGISDEVICEINDEPENDENT = 512, OLEMISC_INVISIBLEATRUNTIME = 1024, OLEMISC_ALWAYSRUN = 2048, OLEMISC_ACTSLIKEBUTTON = 4096, OLEMISC_ACTSLIKELABEL = 8192, OLEMISC_NOUIACTIVATE = 16384, = 32770 }; enum URL_PART { URL_PART_NONE = 0, URL_PART_SCHEME = 1, URL_PART_HOSTNAME = 2, URL_PART_USERNAME = 3, URL_PART_PASSWORD = 4, URL_PART_PORT = 5, URL_PART_QUERY = 6 }; enum tagGLOBALOPT_EH_VALUES { COMGLB_EXCEPTION_HANDLE = 0, COMGLB_EXCEPTION_DONOT_HANDLE_FATAL = 1, COMGLB_EXCEPTION_DONOT_HANDLE = 1, COMGLB_EXCEPTION_DONOT_HANDLE_ANY = 2 }; enum tagSHCOLSTATE { SHCOLSTATE_DEFAULT = 0, SHCOLSTATE_TYPE_STR = 1, SHCOLSTATE_TYPE_INT = 2, SHCOLSTATE_TYPE_DATE = 3, SHCOLSTATE_TYPEMASK = 15, SHCOLSTATE_ONBYDEFAULT = 16, SHCOLSTATE_SLOW = 32, SHCOLSTATE_EXTENDED = 64, SHCOLSTATE_SECONDARYUI = 128, SHCOLSTATE_HIDDEN = 256, SHCOLSTATE_PREFER_VARCMP = 512, SHCOLSTATE_PREFER_FMTCMP = 1024, SHCOLSTATE_NOSORTBYFOLDERNESS = 2048, /* SHCOLSTATE_VIEWONLY = Unavail */ }; enum tagXMLEMEM_TYPE { XMLELEMTYPE_ELEMENT = 0, XMLELEMTYPE_TEXT = 1, XMLELEMTYPE_COMMENT = 2, XMLELEMTYPE_DOCUMENT = 3, XMLELEMTYPE_DTD = 4, XMLELEMTYPE_PI = 5, XMLELEMTYPE_OTHER = 6 }; enum tagDVASPECT2 { DVASPECT_OPAQUE = 16, DVASPECT_TRANSPARENT = 32 }; enum _tagPI_FLAGS { PI_PARSE_URL = 1, PI_FILTER_MODE = 2, PI_FORCE_ASYNC = 4, PI_USE_WORKERTHREAD = 8, PI_MIMEVERIFICATION = 16, PI_CLSIDLOOKUP = 32, PI_DATAPROGRESS = 64, PI_SYNCHRONOUS = 128, PI_APARTMENTTHREADED = 256, PI_CLASSINSTALL = 512, PI_PASSONBINDCTX = 8192, = 32770 }; enum IMPORT_OBJECT_NAME_TYPE { IMPORT_OBJECT_ORDINAL = 0, IMPORT_OBJECT_NAME = 1, IMPORT_OBJECT_NAME_NO_PREFIX = 2, IMPORT_OBJECT_NAME_UNDECORATE = 3 }; enum XLAT_SIDE { XLAT_SERVER = 1, XLAT_CLIENT = 2 }; enum _DEVICE_POWER_STATE { PowerDeviceUnspecified = 0, PowerDeviceD0 = 1, PowerDeviceD1 = 2, PowerDeviceD2 = 3, PowerDeviceD3 = 4, PowerDeviceMaximum = 5 }; enum _TRANSACTIONMANAGER_INFORMATION_CLASS { TransactionManagerBasicInformation = 0, TransactionManagerLogInformation = 1, TransactionManagerLogPathInformation = 2, TransactionManagerRecoveryInformation = 4, TransactionManagerOnlineProbeInformation = 3, TransactionManagerOldestTransactionInformation = 5 }; enum _COPYFILE2_COPY_PHASE { COPYFILE2_PHASE_NONE = 0, COPYFILE2_PHASE_PREPARE_SOURCE = 1, COPYFILE2_PHASE_PREPARE_DEST = 2, COPYFILE2_PHASE_READ_SOURCE = 3, COPYFILE2_PHASE_WRITE_DESTINATION = 4, COPYFILE2_PHASE_SERVER_COPY = 5, COPYFILE2_PHASE_NAMEGRAFT_COPY = 6, COPYFILE2_PHASE_MAX = 7 }; enum __MIDL_IBindStatusCallback_0003 { BINDF_ASYNCHRONOUS = 1, BINDF_ASYNCSTORAGE = 2, BINDF_NOPROGRESSIVERENDERING = 4, BINDF_OFFLINEOPERATION = 8, BINDF_GETNEWESTVERSION = 16, BINDF_NOWRITECACHE = 32, BINDF_NEEDFILE = 64, BINDF_PULLDATA = 128, BINDF_IGNORESECURITYPROBLEM = 256, BINDF_RESYNCHRONIZE = 512, BINDF_HYPERLINK = 1024, BINDF_NO_UI = 2048, BINDF_SILENTOPERATION = 4096, BINDF_PRAGMA_NO_CACHE = 8192, BINDF_GETCLASSOBJECT = 16384, = 32770 }; enum tagCOWAIT_FLAGS { COWAIT_WAITALL = 1, COWAIT_ALERTABLE = 2, COWAIT_INPUTAVAILABLE = 4, COWAIT_DISPATCH_CALLS = 8, COWAIT_DISPATCH_WINDOW_MESSAGES = 16, REAL_COWAIT_ENABLECALLREENTRANCY = 8, COWAIT_ENABLEWINDOWMESSAGES = 16, COWAIT_ENABLECALLREENTRANCY = 24 }; enum _AUDIT_EVENT_TYPE { AuditEventObjectAccess = 0, AuditEventDirectoryServiceAccess = 1 }; enum _TRANSACTION_INFORMATION_CLASS { TransactionBasicInformation = 0, TransactionPropertiesInformation = 1, TransactionEnlistmentInformation = 2, TransactionSuperiorEnlistmentInformation = 3, TransactionBindInformation = 4, TransactionDTCPrivateInformation = 5 }; enum tagCALLCONV { CC_FASTCALL = 0, CC_CDECL = 1, CC_MSCPASCAL = 2, CC_PASCAL = 2, CC_MACPASCAL = 3, CC_STDCALL = 4, CC_FPFASTCALL = 5, CC_SYSCALL = 6, CC_MPWCDECL = 7, CC_MPWPASCAL = 8, CC_MAX = 9 }; enum tagSTATFLAG { STATFLAG_DEFAULT = 0, STATFLAG_NONAME = 1, STATFLAG_NOOPEN = 2 }; enum tagRpcCallType { rctInvalid = 0, rctNormal = 1, rctTraining = 2, rctGuaranteed = 3 }; enum _TAPE_DRIVE_PROBLEM_TYPE { TapeDriveProblemNone = 0, TapeDriveReadWriteWarning = 1, TapeDriveReadWriteError = 2, TapeDriveReadWarning = 3, TapeDriveWriteWarning = 4, TapeDriveReadError = 5, TapeDriveWriteError = 6, TapeDriveHardwareError = 7, TapeDriveUnsupportedMedia = 8, TapeDriveScsiConnectionError = 9, TapeDriveTimetoClean = 10, TapeDriveCleanDriveNow = 11, TapeDriveMediaLifeExpired = 12, TapeDriveSnappedTape = 13 }; enum _ACTIVATION_CONTEXT_INFO_CLASS { ActivationContextBasicInformation = 1, ActivationContextDetailedInformation = 2, AssemblyDetailedInformationInActivationContext = 3, FileInformationInAssemblyOfAssemblyInActivationContext = 4, RunlevelInformationInActivationContext = 5, CompatibilityInformationInActivationContext = 6, ActivationContextManifestResourceName = 7, MaxActivationContextInfoClass = 8, AssemblyDetailedInformationInActivationContxt = 3, FileInformationInAssemblyOfAssemblyInActivationContxt = 4 }; /* enum __MIDL_IBindStatusCallback_0005 { BINDINFO_OPTIONS_WININETFLAG = Unavail }; */ enum tagPERCEIVED { PERCEIVED_TYPE_FIRST = -1, PERCEIVED_TYPE_CUSTOM = -1, PERCEIVED_TYPE_UNSPECIFIED = -1, PERCEIVED_TYPE_FOLDER = -1, PERCEIVED_TYPE_UNKNOWN = 0, PERCEIVED_TYPE_TEXT = 1, PERCEIVED_TYPE_IMAGE = 2, PERCEIVED_TYPE_AUDIO = 3, PERCEIVED_TYPE_VIDEO = 4, PERCEIVED_TYPE_COMPRESSED = 5, PERCEIVED_TYPE_DOCUMENT = 6, PERCEIVED_TYPE_SYSTEM = 7, PERCEIVED_TYPE_APPLICATION = 8, PERCEIVED_TYPE_GAMEMEDIA = 9, PERCEIVED_TYPE_CONTACTS = 10, PERCEIVED_TYPE_LAST = 10 }; enum _PROCESS_MITIGATION_POLICY { ProcessDEPPolicy = 0, ProcessASLRPolicy = 1, ProcessStackCheckPolicy = 2, ProcessStrictHandleCheckPolicy = 3, ProcessSystemCallDisablePolicy = 4, MaxProcessMitigationPolicy = 5 }; enum tagXFORMCOORDS { XFORMCOORDS_POSITION = 1, XFORMCOORDS_SIZE = 2, XFORMCOORDS_HIMETRICTOCONTAINER = 4, XFORMCOORDS_CONTAINERTOHIMETRIC = 8, XFORMCOORDS_EVENTCOMPAT = 16 }; enum _RPC_NOTIFICATIONS { RpcNotificationCallNone = 0, RpcNotificationClientDisconnect = 1, RpcNotificationCallCancel = 2 }; enum tagVARKIND { VAR_PERINSTANCE = 0, VAR_STATIC = 1, VAR_CONST = 2, VAR_DISPATCH = 3 }; enum _DEP_SYSTEM_POLICY_TYPE { DEPPolicyAlwaysOff = 0, DEPPolicyAlwaysOn = 1, DEPPolicyOptIn = 2, DEPPolicyOptOut = 3, DEPTotalPolicyCount = 4 }; enum tagEOLE_AUTHENTICATION_CAPABILITIES { EOAC_NONE = 0, EOAC_MUTUAL_AUTH = 1, EOAC_STATIC_CLOAKING = 32, EOAC_DYNAMIC_CLOAKING = 64, EOAC_ANY_AUTHORITY = 128, EOAC_MAKE_FULLSIC = 256, EOAC_DEFAULT = 2048, EOAC_SECURE_REFS = 2, EOAC_ACCESS_CONTROL = 4, EOAC_APPID = 8, EOAC_DYNAMIC = 16, EOAC_REQUIRE_FULLSIC = 512, EOAC_AUTO_IMPERSONATE = 1024, EOAC_NO_CUSTOM_MARSHAL = 8192, EOAC_DISABLE_AAA = 4096 }; enum tagPROPPAGESTATUS { PROPPAGESTATUS_DIRTY = 1, PROPPAGESTATUS_VALIDATE = 2, PROPPAGESTATUS_CLEAN = 4 }; enum DISPLAYCONFIG_VIDEO_OUTPUT_TECHNOLOGY { DISPLAYCONFIG_OUTPUT_TECHNOLOGY_OTHER = -1, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_HD15 = 0, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_SVIDEO = 1, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_COMPOSITE_VIDEO = 2, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_COMPONENT_VIDEO = 3, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_DVI = 4, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_HDMI = 5, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_LVDS = 6, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_D_JPN = 8, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_SDI = 9, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_DISPLAYPORT_EXTERNAL = 10, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_DISPLAYPORT_EMBEDDED = 11, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_UDI_EXTERNAL = 12, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_UDI_EMBEDDED = 13, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_SDTVDONGLE = 14, = 32771 }; enum __MIDL_IBindStatusCallbackEx_0001 { BINDF2_DISABLEBASICOVERHTTP = 1, BINDF2_DISABLEAUTOCOOKIEHANDLING = 2, BINDF2_READ_DATA_GREATER_THAN_4GB = 4, BINDF2_DISABLE_HTTP_REDIRECT_XSECURITYID = 8, BINDF2_SETDOWNLOADMODE = 32, BINDF2_DISABLE_HTTP_REDIRECT_CACHING = 64, /* BINDF2_RESERVED_E = Unavail */ }; enum _KTMOBJECT_TYPE { KTMOBJECT_TRANSACTION = 0, KTMOBJECT_TRANSACTION_MANAGER = 1, KTMOBJECT_RESOURCE_MANAGER = 2, KTMOBJECT_ENLISTMENT = 3, KTMOBJECT_INVALID = 4 }; enum _RTL_UMS_SCHEDULER_REASON { UmsSchedulerStartup = 0, UmsSchedulerThreadBlocked = 1, UmsSchedulerThreadYield = 2 }; enum SHREGENUM_FLAGS { SHREGENUM_DEFAULT = 0, SHREGENUM_HKCU = 1, SHREGENUM_HKLM = 16, SHREGENUM_BOTH = 17 }; enum _SE_LEARNING_MODE_DATA_TYPE { SeLearningModeInvalidType = 0, SeLearningModeSettings = 1, SeLearningModeMax = 2 }; enum tagSTRRET_TYPE { STRRET_WSTR = 0, STRRET_OFFSET = 1, STRRET_CSTR = 2 }; enum tagPOINTER_DEVICE_TYPE { POINTER_DEVICE_TYPE_INTEGRATED_PEN = 1, POINTER_DEVICE_TYPE_EXTERNAL_PEN = 2, POINTER_DEVICE_TYPE_TOUCH = 3, POINTER_DEVICE_TYPE_MAX = -1 }; enum tagUASFLAGS { UAS_NORMAL = 0, UAS_BLOCKED = 1, UAS_NOPARENTENABLE = 2, UAS_MASK = 3 }; enum _SYSTEM_POWER_STATE { PowerSystemUnspecified = 0, PowerSystemWorking = 1, PowerSystemSleeping1 = 2, PowerSystemSleeping2 = 3, PowerSystemSleeping3 = 4, PowerSystemHibernate = 5, PowerSystemShutdown = 6, PowerSystemMaximum = 7 }; enum tagCLSCTX { CLSCTX_INPROC_SERVER = 1, CLSCTX_INPROC_HANDLER = 2, CLSCTX_LOCAL_SERVER = 4, CLSCTX_INPROC_SERVER16 = 8, CLSCTX_REMOTE_SERVER = 16, CLSCTX_INPROC_HANDLER16 = 32, CLSCTX_RESERVED1 = 64, CLSCTX_RESERVED2 = 128, CLSCTX_RESERVED3 = 256, CLSCTX_RESERVED4 = 512, CLSCTX_NO_CODE_DOWNLOAD = 1024, CLSCTX_RESERVED5 = 2048, CLSCTX_NO_CUSTOM_MARSHAL = 4096, CLSCTX_ENABLE_CODE_DOWNLOAD = 8192, CLSCTX_NO_FAILURE_LOG = 16384, = 32770 }; enum tagOLECLOSE { OLECLOSE_SAVEIFDIRTY = 0, OLECLOSE_NOSAVE = 1, OLECLOSE_PROMPTSAVE = 2 }; enum tagExtendedErrorParamTypes { eeptAnsiString = 1, eeptUnicodeString = 2, eeptLongVal = 3, eeptShortVal = 4, eeptPointerVal = 5, eeptNone = 6, eeptBinary = 7 }; enum __MIDL_IInternetZoneManager_0002 { ZAFLAGS_CUSTOM_EDIT = 1, ZAFLAGS_ADD_SITES = 2, ZAFLAGS_REQUIRE_VERIFICATION = 4, ZAFLAGS_INCLUDE_PROXY_OVERRIDE = 8, ZAFLAGS_INCLUDE_INTRANET_SITES = 16, ZAFLAGS_NO_UI = 32, ZAFLAGS_SUPPORTS_VERIFICATION = 64, ZAFLAGS_UNC_AS_INTRANET = 128, ZAFLAGS_DETECT_INTRANET = 256, /* ZAFLAGS_USE_LOCKED_ZONES = Unavail */ }; enum _FINDEX_SEARCH_OPS { FindExSearchNameMatch = 0, FindExSearchLimitToDirectories = 1, FindExSearchLimitToDevices = 2, FindExSearchMaxSearchOp = 3 }; enum tagINPUT_MESSAGE_DEVICE_TYPE { IMDT_UNAVAILABLE = 0, IMDT_KEYBOARD = 1, IMDT_MOUSE = 2, IMDT_TOUCH = 4, IMDT_PEN = 8 }; enum tagOLEDCFLAGS { OLEDC_NODRAW = 1, OLEDC_PAINTBKGND = 2, OLEDC_OFFSCREEN = 4 }; enum DISPLAYCONFIG_TOPOLOGY_ID { DISPLAYCONFIG_TOPOLOGY_INTERNAL = 1, DISPLAYCONFIG_TOPOLOGY_CLONE = 2, DISPLAYCONFIG_TOPOLOGY_EXTEND = 4, DISPLAYCONFIG_TOPOLOGY_EXTERNAL = 8, DISPLAYCONFIG_TOPOLOGY_FORCE_UINT32 = -1 }; enum _PROCESS_INFORMATION_CLASS { ProcessMemoryPriority = 0, ProcessInformationClassMax = 1 }; enum tagApplicationType { ServerApplication = 0, LibraryApplication = 1 }; enum __MIDL_IUri_0002 { Uri_HOST_UNKNOWN = 0, Uri_HOST_DNS = 1, Uri_HOST_IPV4 = 2, Uri_HOST_IPV6 = 3, Uri_HOST_IDN = 4 }; enum tagDESCKIND { DESCKIND_NONE = 0, DESCKIND_FUNCDESC = 1, DESCKIND_VARDESC = 2, DESCKIND_TYPECOMP = 3, DESCKIND_IMPLICITAPPOBJ = 4, DESCKIND_MAX = 5 }; enum tagPENDINGTYPE { PENDINGTYPE_TOPLEVEL = 1, PENDINGTYPE_NESTED = 2 }; enum _MANDATORY_LEVEL { MandatoryLevelUntrusted = 0, MandatoryLevelLow = 1, MandatoryLevelMedium = 2, MandatoryLevelHigh = 3, MandatoryLevelSystem = 4, MandatoryLevelSecureProcess = 5, MandatoryLevelCount = 6 }; enum tagGLOBALOPT_PROPERTIES { COMGLB_EXCEPTION_HANDLING = 1, COMGLB_APPID = 2, COMGLB_RPC_THREADPOOL_SETTING = 3, COMGLB_RO_SETTINGS = 4 }; enum __MIDL_IInternetSecurityManager_0002 { PUAFOUT_DEFAULT = 0, PUAFOUT_ISLOCKZONEPOLICY = 1 }; enum __MIDL_IBindStatusCallback_0004 { URL_ENCODING_NONE = 0, /* URL_ENCODING_ENABLE_UTF8 = Unavail */ }; enum STUB_PHASE { STUB_UNMARSHAL = 0, STUB_CALL_SERVER = 1, STUB_MARSHAL = 2, STUB_CALL_SERVER_NO_HRESULT = 3 }; enum IMPORT_OBJECT_TYPE { IMPORT_OBJECT_CODE = 0, IMPORT_OBJECT_DATA = 1, IMPORT_OBJECT_CONST = 2 }; enum tagFUNCKIND { FUNC_VIRTUAL = 0, FUNC_PUREVIRTUAL = 1, FUNC_NONVIRTUAL = 2, FUNC_STATIC = 3, FUNC_DISPATCH = 4 }; enum _TRANSACTION_OUTCOME { TransactionOutcomeUndetermined = 1, TransactionOutcomeCommitted = 2, TransactionOutcomeAborted = 3 }; enum tagADVF { ADVF_NODATA = 1, ADVF_PRIMEFIRST = 2, ADVF_ONLYONCE = 4, ADVF_DATAONSTOP = 64, ADVFCACHE_NOHANDLER = 8, ADVFCACHE_FORCEBUILTIN = 16, ADVFCACHE_ONSAVE = 32 }; enum tagSTGTY { STGTY_STORAGE = 1, STGTY_STREAM = 2, STGTY_LOCKBYTES = 3, STGTY_PROPERTY = 4 }; enum tagShutdownType { IdleShutdown = 0, ForcedShutdown = 1 }; enum tagRpcCallClientLocality { rcclInvalid = 0, rcclLocal = 1, rcclRemote = 2, rcclClientUnknownLocality = 3 }; enum tagDATADIR { DATADIR_GET = 1, DATADIR_SET = 2 }; enum tagPOINTER_INPUT_TYPE { PT_POINTER = 1, PT_TOUCH = 2, PT_PEN = 3, PT_MOUSE = 4 }; enum _APTTYPEQUALIFIER { APTTYPEQUALIFIER_NONE = 0, APTTYPEQUALIFIER_IMPLICIT_MTA = 1, APTTYPEQUALIFIER_NA_ON_MTA = 2, APTTYPEQUALIFIER_NA_ON_STA = 3, APTTYPEQUALIFIER_NA_ON_IMPLICIT_MTA = 4, APTTYPEQUALIFIER_NA_ON_MAINSTA = 5, APTTYPEQUALIFIER_APPLICATION_STA = 6 }; enum _FINDEX_INFO_LEVELS { FindExInfoStandard = 0, FindExInfoBasic = 1, FindExInfoMaxInfoLevel = 2 }; enum tagTYMED { TYMED_HGLOBAL = 1, TYMED_FILE = 2, TYMED_ISTREAM = 4, TYMED_ISTORAGE = 8, TYMED_GDI = 16, TYMED_MFPICT = 32, TYMED_ENHMF = 64, TYMED_NULL = 0 }; enum _SECURITY_IMPERSONATION_LEVEL { SecurityAnonymous = 0, SecurityIdentification = 1, SecurityImpersonation = 2, SecurityDelegation = 3 }; enum _CM_ERROR_CONTROL_TYPE { IgnoreError = 0, NormalError = 1, SevereError = 2, CriticalError = 3 }; enum _TOKEN_ELEVATION_TYPE { TokenElevationTypeDefault = 1, TokenElevationTypeFull = 2, TokenElevationTypeLimited = 3 }; enum tagUSERCLASSTYPE { USERCLASSTYPE_FULL = 1, USERCLASSTYPE_SHORT = 2, USERCLASSTYPE_APPNAME = 3 }; enum tagSF_TYPE { SF_ERROR = 10, SF_I1 = 16, SF_I2 = 2, SF_I4 = 3, SF_I8 = 20, SF_BSTR = 8, SF_UNKNOWN = 13, SF_DISPATCH = 9, SF_VARIANT = 12, SF_RECORD = 36, €SF_HAVEIID = 32770 }; enum ASSOCKEY { ASSOCKEY_SHELLEXECCLASS = 1, ASSOCKEY_APP = 2, ASSOCKEY_CLASS = 3, ASSOCKEY_BASECLASS = 4, ASSOCKEY_MAX = 5 }; enum tagAR_STATE { AR_ENABLED = 0, AR_DISABLED = 1, AR_SUPPRESSED = 2, AR_REMOTESESSION = 4, AR_MULTIMON = 8, AR_NOSENSOR = 16, AR_NOT_SUPPORTED = 32 }; enum _RESOURCEMANAGER_INFORMATION_CLASS { ResourceManagerBasicInformation = 0, ResourceManagerCompletionInformation = 1 }; enum tagSTGMOVE { STGMOVE_MOVE = 0, STGMOVE_COPY = 1, STGMOVE_SHALLOWCOPY = 2 }; enum _GET_FILEEX_INFO_LEVELS { GetFileExInfoStandard = 0, GetFileExMaxInfoLevel = 1 }; enum tagACTIVATEFLAGS { ACTIVATE_WINDOWLESS = 1 }; enum _tagOIBDG_FLAGS { OIBDG_APARTMENTTHREADED = 256, OIBDG_DATAONLY = 4096 }; enum tagURLZONE { URLZONE_INVALID = -1, URLZONE_PREDEFINED_MIN = 0, URLZONE_LOCAL_MACHINE = 0, URLZONE_INTRANET = 1, URLZONE_TRUSTED = 2, URLZONE_INTERNET = 3, URLZONE_UNTRUSTED = 4, URLZONE_PREDEFINED_MAX = 999, URLZONE_USER_MIN = 1000, URLZONE_USER_MAX = 10000 }; enum RpcProxyPerfCounters { RpcCurrentUniqueUser = 1, RpcBackEndConnectionAttempts = 2, RpcBackEndConnectionFailed = 3, RpcRequestsPerSecond = 4, RpcIncomingConnections = 5, RpcIncomingBandwidth = 6, RpcOutgoingBandwidth = 7, RpcAttemptedLbsDecisions = 8, RpcFailedLbsDecisions = 9, RpcAttemptedLbsMessages = 10, RpcFailedLbsMessages = 11, RpcLastCounter = 12 }; /* enum { CTF_INSIST = 1, CTF_THREAD_REF = 2, CTF_PROCESS_REF = 4, CTF_COINIT_STA = 8, CTF_COINIT = 8, CTF_FREELIBANDEXIT = 16, CTF_REF_COUNTED = 32, CTF_WAIT_ALLOWCOM = 64, CTF_UNUSED = 128, CTF_INHERITWOW64 = 256, CTF_WAIT_NO_REENTRANCY = 512, CTF_KEYBOARD_LOCALE = 1024, CTF_OLEINITIALIZE = 2048, CTF_COINIT_MTA = 4096, CTF_NOADDREFLIB = 8192 }; */ enum tagFEEDBACK_TYPE { FEEDBACK_TOUCH_CONTACTVISUALIZATION = 1, FEEDBACK_PEN_BARRELVISUALIZATION = 2, FEEDBACK_PEN_TAP = 3, FEEDBACK_PEN_DOUBLETAP = 4, FEEDBACK_PEN_PRESSANDHOLD = 5, FEEDBACK_PEN_RIGHTTAP = 6, FEEDBACK_TOUCH_TAP = 7, FEEDBACK_TOUCH_DOUBLETAP = 8, FEEDBACK_TOUCH_PRESSANDHOLD = 9, FEEDBACK_TOUCH_RIGHTTAP = 10, FEEDBACK_GESTURE_PRESSANDTAP = 11, FEEDBACK_MAX = -1 }; enum tagDVASPECT { DVASPECT_CONTENT = 1, DVASPECT_THUMBNAIL = 2, DVASPECT_ICON = 4, DVASPECT_DOCPRINT = 8 }; enum POWER_USER_PRESENCE_TYPE { UserNotPresent = 0, UserPresent = 1, UserUnknown = 255 }; enum _RPC_ASYNC_EVENT { RpcCallComplete = 0, RpcSendComplete = 1, RpcReceiveComplete = 2, RpcClientDisconnect = 3, RpcClientCancel = 4 }; enum tagTYSPEC { TYSPEC_CLSID = 0, TYSPEC_FILEEXT = 1, TYSPEC_MIMETYPE = 2, TYSPEC_FILENAME = 3, TYSPEC_PROGID = 4, TYSPEC_PACKAGENAME = 5, TYSPEC_OBJECTID = 6 }; enum tagREADYSTATE { READYSTATE_UNINITIALIZED = 0, READYSTATE_LOADING = 1, READYSTATE_LOADED = 2, READYSTATE_INTERACTIVE = 3, READYSTATE_COMPLETE = 4 }; enum _RTL_UMS_THREAD_INFO_CLASS { UmsThreadInvalidInfoClass = 0, UmsThreadUserContext = 1, UmsThreadPriority = 2, UmsThreadAffinity = 3, UmsThreadTeb = 4, UmsThreadIsSuspended = 5, UmsThreadIsTerminated = 6, UmsThreadMaxInfoClass = 7 }; enum _POWER_PLATFORM_ROLE { PlatformRoleUnspecified = 0, PlatformRoleDesktop = 1, PlatformRoleMobile = 2, PlatformRoleWorkstation = 3, PlatformRoleEnterpriseServer = 4, PlatformRoleSOHOServer = 5, PlatformRoleAppliancePC = 6, PlatformRolePerformanceServer = 7, PlatformRoleSlate = 8, PlatformRoleMaximum = 9 }; enum _ACCESS_REASON_TYPE { AccessReasonNone = 0, /* AccessReasonAllowedAce = Unavail */ }; enum tagLOCKTYPE { LOCK_WRITE = 1, LOCK_EXCLUSIVE = 2, LOCK_ONLYONCE = 4 }; enum PIDMSI_STATUS_VALUE { PIDMSI_STATUS_NORMAL = 0, PIDMSI_STATUS_NEW = 1, PIDMSI_STATUS_PRELIM = 2, PIDMSI_STATUS_DRAFT = 3, PIDMSI_STATUS_INPROGRESS = 4, PIDMSI_STATUS_EDIT = 5, PIDMSI_STATUS_REVIEW = 6, PIDMSI_STATUS_PROOF = 7, PIDMSI_STATUS_FINAL = 8, PIDMSI_STATUS_OTHER = 32767 }; enum __MIDL_IMonikerProp_0001 { MIMETYPEPROP = 0, USE_SRC_URL = 1, CLASSIDPROP = 2, TRUSTEDDOWNLOADPROP = 3, POPUPLEVELPROP = 4 }; enum OLE_TRISTATE { triUnchecked = 0, triChecked = 1, triGray = 2 }; enum tagINVOKEKIND { INVOKE_FUNC = 1, INVOKE_PROPERTYGET = 2, INVOKE_PROPERTYPUT = 4, INVOKE_PROPERTYPUTREF = 8 }; enum _USER_MARSHAL_CB_TYPE { USER_MARSHAL_CB_BUFFER_SIZE = 0, USER_MARSHAL_CB_MARSHALL = 1, USER_MARSHAL_CB_UNMARSHALL = 2, USER_MARSHAL_CB_FREE = 3 }; enum SYSGEOCLASS { GEOCLASS_NATION = 16, GEOCLASS_REGION = 14, GEOCLASS_ALL = 0 }; enum _JOBOBJECT_RATE_CONTROL_TOLERANCE_INTERVAL { ToleranceIntervalShort = 1, ToleranceIntervalMedium = 2, ToleranceIntervalLong = 3 }; enum _NORM_FORM { NormalizationOther = 0, NormalizationC = 1, NormalizationD = 2, NormalizationKC = 5, NormalizationKD = 6 }; enum tagCOMSD { SD_LAUNCHPERMISSIONS = 0, SD_ACCESSPERMISSIONS = 1, SD_LAUNCHRESTRICTIONS = 2, SD_ACCESSRESTRICTIONS = 3 }; enum tagRpcLocalAddressFormat { rlafInvalid = 0, rlafIPv4 = 1, rlafIPv6 = 2 }; enum tagGLOBALOPT_RPCTP_VALUES { COMGLB_RPC_THREADPOOL_SETTING_DEFAULT_POOL = 0, COMGLB_RPC_THREADPOOL_SETTING_PRIVATE_POOL = 1 }; enum tagGLOBALOPT_RO_FLAGS { COMGLB_STA_MODALLOOP_REMOVE_TOUCH_MESSAGES = 1, COMGLB_STA_MODALLOOP_SHARED_QUEUE_REMOVE_INPUT_MESSAGES = 2, COMGLB_STA_MODALLOOP_SHARED_QUEUE_DONOT_REMOVE_INPUT_MESSAGES = 4 }; enum RPC_ADDRESS_CHANGE_TYPE { PROTOCOL_NOT_LOADED = 1, PROTOCOL_LOADED = 2, PROTOCOL_ADDRESS_CHANGE = 3 }; enum _LOGICAL_PROCESSOR_RELATIONSHIP { RelationProcessorCore = 0, RelationNumaNode = 1, RelationCache = 2, RelationProcessorPackage = 3, RelationGroup = 4, ˙˙RelationAll = 32770 }; enum CWMO_FLAGS { CWMO_DISPATCH_CALLS = 1, CWMO_DISPATCH_WINDOW_MESSAGES = 2, REAL_CWMO_ENABLE_CALL_REENTRANCY = 1, CWMO_ENABLE_WINDOW_MESSAGES = 2, CWMO_ENABLE_CALL_REENTRANCY = 3 }; enum __MIDL_IBindStatusCallback_0001 { BINDVERB_GET = 0, BINDVERB_POST = 1, BINDVERB_PUT = 2, BINDVERB_CUSTOM = 3, BINDVERB_RESERVED1 = 4 }; enum tagDocHostUIFlagDispatch { docHostUIFlagDIALOG = 1, docHostUIFlagDISABLE_HELP_MENU = 2, docHostUIFlagNO3DBORDER = 4, docHostUIFlagSCROLL_NO = 8, docHostUIFlagDISABLE_SCRIPT_INACTIVE = 16, docHostUIFlagOPENNEWWIN = 32, docHostUIFlagDISABLE_OFFSCREEN = 64, docHostUIFlagFLAT_SCROLLBAR = 128, docHostUIFlagDIV_BLOCKDEFAULT = 256, docHostUIFlagACTIVATE_CLIENTHIT_ONLY = 512 }; enum _PROCESSOR_CACHE_TYPE { CacheUnified = 0, CacheInstruction = 1, CacheData = 2, CacheTrace = 3 }; enum DISPLAYCONFIG_ROTATION { DISPLAYCONFIG_ROTATION_IDENTITY = 1, DISPLAYCONFIG_ROTATION_ROTATE90 = 2, DISPLAYCONFIG_ROTATION_ROTATE180 = 3, DISPLAYCONFIG_ROTATION_ROTATE270 = 4, DISPLAYCONFIG_ROTATION_FORCE_UINT32 = -1 }; enum ACTCTX_COMPATIBILITY_ELEMENT_TYPE { ACTCTX_COMPATIBILITY_ELEMENT_TYPE_UNKNOWN = 0, ACTCTX_COMPATIBILITY_ELEMENT_TYPE_OS = 1, ACTCTX_COMPATIBILITY_ELEMENT_TYPE_MITIGATION = 2 }; enum tagBINDSPEED { BINDSPEED_INDEFINITE = 1, BINDSPEED_MODERATE = 2, BINDSPEED_IMMEDIATE = 3 }; enum tagDOCHOSTUIDBLCLKDispatch { docHostUIDblClkDEFAULT = 0, docHostUIDblClkSHOWPROPERTIES = 1, docHostUIDblClkSHOWCODE = 2 }; /* enum { ASSOCF_INIT_NOREMAPCLSID = 1, ASSOCF_INIT_BYEXENAME = 2, ASSOCF_OPEN_BYEXENAME = 2, ASSOCF_INIT_DEFAULTTOSTAR = 4, ASSOCF_INIT_DEFAULTTOFOLDER = 8, ASSOCF_NOUSERSETTINGS = 16, ASSOCF_NOTRUNCATE = 32, ASSOCF_VERIFY = 64, ASSOCF_REMAPRUNDLL = 128, ASSOCF_NOFIXUPS = 256, ASSOCF_IGNOREBASECLASS = 512, ASSOCF_INIT_IGNOREUNKNOWN = 1024 }; */ enum _USER_ACTIVITY_PRESENCE { PowerUserPresent = 0, PowerUserNotPresent = 1, PowerUserInactive = 2, PowerUserMaximum = 3, PowerUserInvalid = 3 }; enum tagSTDMSHLFLAGS { SMEXF_SERVER = 1, SMEXF_HANDLER = 2 }; enum _FILE_ID_TYPE { FileIdType = 0, ObjectIdType = 1, MaximumFileIdType = 2 }; enum tagOLEWHICHMK { OLEWHICHMK_CONTAINER = 1, OLEWHICHMK_OBJREL = 2, OLEWHICHMK_OBJFULL = 3 }; enum tagRPCOPT_PROPERTIES { COMBND_RPCTIMEOUT = 1, COMBND_SERVER_LOCALITY = 2 }; enum _EXCEPTION_DISPOSITION { ExceptionContinueExecution = 0, ExceptionContinueSearch = 1, ExceptionNestedException = 2, ExceptionCollidedUnwind = 3 }; enum tagSTREAM_SEEK { STREAM_SEEK_SET = 0, STREAM_SEEK_CUR = 1, STREAM_SEEK_END = 2 }; enum tagCALLTYPE { CALLTYPE_TOPLEVEL = 1, CALLTYPE_NESTED = 2, CALLTYPE_ASYNC = 3, CALLTYPE_TOPLEVEL_CALLPENDING = 4, CALLTYPE_ASYNC_CALLPENDING = 5 }; enum _STREAM_INFO_LEVELS { FindStreamInfoStandard = 0, FindStreamInfoMaxInfoLevel = 1 }; enum _tagPSUACTION { PSU_DEFAULT = 1, PSU_SECURITY_URL_ONLY = 2 }; enum _ENLISTMENT_INFORMATION_CLASS { EnlistmentBasicInformation = 0, EnlistmentRecoveryInformation = 1, EnlistmentCrmInformation = 2 }; enum tagOLEGETMONIKER { OLEGETMONIKER_ONLYIFTHERE = 1, OLEGETMONIKER_FORCEASSIGN = 2, OLEGETMONIKER_UNASSIGN = 3, OLEGETMONIKER_TEMPFORUSER = 4 }; enum ACTCTX_REQUESTED_RUN_LEVEL { ACTCTX_RUN_LEVEL_UNSPECIFIED = 0, ACTCTX_RUN_LEVEL_AS_INVOKER = 1, ACTCTX_RUN_LEVEL_HIGHEST_AVAILABLE = 2, ACTCTX_RUN_LEVEL_REQUIRE_ADMIN = 3, ACTCTX_RUN_LEVEL_NUMBERS = 4 }; enum _HARDWARE_COUNTER_TYPE { PMCCounter = 0, MaxHardwareCounterType = 1 }; enum tagREGKIND { REGKIND_DEFAULT = 0, REGKIND_REGISTER = 1, REGKIND_NONE = 2 }; enum tagOLECONTF { OLECONTF_EMBEDDINGS = 1, OLECONTF_LINKS = 2, OLECONTF_OTHERS = 4, OLECONTF_ONLYUSER = 8, OLECONTF_ONLYIFRUNNING = 16 }; enum _MEMORY_RESOURCE_NOTIFICATION_TYPE { LowMemoryResourceNotification = 0, HighMemoryResourceNotification = 1, PendingBadMemoryNotification = 2 }; enum tagCTRLINFO { CTRLINFO_EATS_RETURN = 1, CTRLINFO_EATS_ESCAPE = 2 }; enum _PRIORITY_HINT { IoPriorityHintVeryLow = 0, IoPriorityHintLow = 1, IoPriorityHintNormal = 2, MaximumIoPriorityHintType = 3 }; enum tagVIEWSTATUS { VIEWSTATUS_OPAQUE = 1, VIEWSTATUS_SOLIDBKGND = 2, VIEWSTATUS_DVASPECTOPAQUE = 4, VIEWSTATUS_DVASPECTTRANSPARENT = 8, VIEWSTATUS_SURFACE = 16, VIEWSTATUS_3DSURFACE = 32 }; enum _HEAP_INFORMATION_CLASS { HeapCompatibilityInformation = 0, HeapEnableTerminationOnCorruption = 1 }; enum tagEXTCONN { EXTCONN_STRONG = 1, EXTCONN_WEAK = 2, EXTCONN_CALLABLE = 4 }; enum tagAspectInfoFlag { DVASPECTINFOFLAG_CANOPTIMIZE = 1 }; enum tagREGCLS { REGCLS_SINGLEUSE = 0, REGCLS_MULTIPLEUSE = 1, REGCLS_MULTI_SEPARATE = 2, REGCLS_SUSPENDED = 4, REGCLS_SURROGATE = 8 }; enum _RPC_NOTIFICATION_TYPES { RpcNotificationTypeNone = 0, RpcNotificationTypeEvent = 1, RpcNotificationTypeApc = 2, RpcNotificationTypeIoc = 3, RpcNotificationTypeHwnd = 4, RpcNotificationTypeCallback = 5 }; enum SYSNLS_FUNCTION { COMPARE_STRING = 1 }; enum IMAGE_AUX_SYMBOL_TYPE { IMAGE_AUX_SYMBOL_TYPE_TOKEN_DEF = 1 }; enum tagRPCOPT_SERVER_LOCALITY_VALUES { SERVER_LOCALITY_PROCESS_LOCAL = 0, SERVER_LOCALITY_MACHINE_LOCAL = 1, SERVER_LOCALITY_REMOTE = 2 }; enum _ACL_INFORMATION_CLASS { AclRevisionInformation = 1, AclSizeInformation = 2 }; enum tagDOMNodeType { NODE_INVALID = 0, NODE_ELEMENT = 1, NODE_ATTRIBUTE = 2, NODE_TEXT = 3, NODE_CDATA_SECTION = 4, NODE_ENTITY_REFERENCE = 5, NODE_ENTITY = 6, NODE_PROCESSING_INSTRUCTION = 7, NODE_COMMENT = 8, NODE_DOCUMENT = 9, NODE_DOCUMENT_TYPE = 10, NODE_DOCUMENT_FRAGMENT = 11, NODE_NOTATION = 12 }; enum tagSFBS_FLAGS { SFBS_FLAGS_ROUND_TO_NEAREST_DISPLAYED_DIGIT = 1, SFBS_FLAGS_TRUNCATE_UNDISPLAYED_DECIMAL_DIGITS = 2 }; enum _TP_CALLBACK_PRIORITY { TP_CALLBACK_PRIORITY_HIGH = 0, TP_CALLBACK_PRIORITY_NORMAL = 1, TP_CALLBACK_PRIORITY_LOW = 2, TP_CALLBACK_PRIORITY_INVALID = 3, TP_CALLBACK_PRIORITY_COUNT = 3 }; enum _MONITOR_DISPLAY_STATE { PowerMonitorOff = 0, PowerMonitorOn = 1, PowerMonitorDim = 2 }; enum _RPC_HTTP_REDIRECTOR_STAGE { RPCHTTP_RS_REDIRECT = 1, RPCHTTP_RS_ACCESS_1 = 2, RPCHTTP_RS_SESSION = 3, RPCHTTP_RS_ACCESS_2 = 4, RPCHTTP_RS_INTERFACE = 5 }; enum tagBIND_FLAGS { BIND_MAYBOTHERUSER = 1, BIND_JUSTTESTEXISTENCE = 2 }; enum DISPLAYCONFIG_MODE_INFO_TYPE { DISPLAYCONFIG_MODE_INFO_TYPE_SOURCE = 1, DISPLAYCONFIG_MODE_INFO_TYPE_TARGET = 2, DISPLAYCONFIG_MODE_INFO_TYPE_FORCE_UINT32 = -1 }; enum tagOLEUPDATE { OLEUPDATE_ALWAYS = 1, OLEUPDATE_ONCALL = 3 }; enum tagExtentMode { DVEXTENT_CONTENT = 0, DVEXTENT_INTEGRAL = 1 }; enum tagGUIDKIND { GUIDKIND_DEFAULT_SOURCE_DISP_IID = 1 }; enum _SC_ACTION_TYPE { SC_ACTION_NONE = 0, SC_ACTION_RESTART = 1, SC_ACTION_REBOOT = 2, SC_ACTION_RUN_COMMAND = 3 }; enum tagOLEVERBATTRIB { OLEVERBATTRIB_NEVERDIRTIES = 1, OLEVERBATTRIB_ONCONTAINERMENU = 2 }; enum _TOKEN_TYPE { TokenPrimary = 1, TokenImpersonation = 2 }; enum _FIRMWARE_TYPE { FirmwareTypeUnknown = 0, FirmwareTypeBios = 1, FirmwareTypeUefi = 2, FirmwareTypeMax = 3 }; enum tagOLELINKBIND { OLELINKBIND_EVENIFCLASSDIFF = 1 }; enum _POWER_REQUEST_TYPE { PowerRequestDisplayRequired = 0, PowerRequestSystemRequired = 1, PowerRequestAwayModeRequired = 2, PowerRequestExecutionRequired = 3 }; enum __MIDL_IInternetSecurityManager_0003 { SZM_CREATE = 0, SZM_DELETE = 1 }; enum _THDTYPE { THDTYPE_BLOCKMESSAGES = 0, THDTYPE_PROCESSMESSAGES = 1 }; enum _JOBOBJECT_RATE_CONTROL_TOLERANCE { ToleranceLow = 1, ToleranceMedium = 2, ToleranceHigh = 3 }; enum _URLZONEREG { URLZONEREG_DEFAULT = 0, URLZONEREG_HKLM = 1, URLZONEREG_HKCU = 2 }; enum tagCHANGEKIND { CHANGEKIND_ADDMEMBER = 0, CHANGEKIND_DELETEMEMBER = 1, CHANGEKIND_SETNAMES = 2, CHANGEKIND_SETDOCUMENTATION = 3, CHANGEKIND_GENERAL = 4, CHANGEKIND_INVALIDATE = 5, CHANGEKIND_CHANGEFAILED = 6, CHANGEKIND_MAX = 7 }; enum tagDCOM_CALL_STATE { DCOM_NONE = 0, DCOM_CALL_COMPLETE = 1, DCOM_CALL_CANCELED = 2 }; enum __MIDL_IInternetZoneManager_0001 { MAX_ZONE_PATH = 260, MAX_ZONE_DESCRIPTION = 200 }; enum tagSYSKIND { SYS_WIN16 = 0, SYS_WIN32 = 1, SYS_MAC = 2, SYS_WIN64 = 3 }; enum FILEITEM_CREATION_FLAGS { FICF_DEFAULT = 0, FICF_DELETE_NOT_ALLOWED_IF_CONTAINER = 1, FICF_ALLOW_NAMESPACE_JUNCTION = 2, FICF_ADVANCED_SHAPES_ALLOWED = 4, FICF_FILTER_ON_MANIFESTED_TYPES = 8, FICF_FILTER_ON_MANIFESTED_KINDS = 16, FICF_INHERITED_FLAGS_MASK = 28, FICF_DONT_CHECK_PATH_FOR_EXISTENCE = 32 }; enum PIPE_ATTRIBUTE_TYPE { PipeAttribute = 0, PipeConnectionAttribute = 1, PipeHandleAttribute = 2 }; enum tagPENDINGMSG { PENDINGMSG_CANCELCALL = 0, PENDINGMSG_WAITNOPROCESS = 1, PENDINGMSG_WAITDEFPROCESS = 2 }; enum tagPictureAttributes { PICTURE_SCALABLE = 1, PICTURE_TRANSPARENT = 2 }; enum _COPYFILE2_MESSAGE_ACTION { COPYFILE2_PROGRESS_CONTINUE = 0, COPYFILE2_PROGRESS_CANCEL = 1, COPYFILE2_PROGRESS_STOP = 2, COPYFILE2_PROGRESS_QUIET = 3, COPYFILE2_PROGRESS_PAUSE = 4 }; enum __MIDL_IAuthenticateEx_0001 { AUTHENTICATEF_PROXY = 1, AUTHENTICATEF_BASIC = 2, AUTHENTICATEF_HTTP = 4 }; enum tagMEMCTX { MEMCTX_TASK = 1, MEMCTX_SHARED = 2, MEMCTX_MACSYSTEM = 3, MEMCTX_UNKNOWN = -1, MEMCTX_SAME = -1 }; enum _SC_EVENT_TYPE { SC_EVENT_DATABASE_CHANGE = 0, SC_EVENT_PROPERTY_CHANGE = 1, SC_EVENT_STATUS_CHANGE = 2 }; enum tagSERVERCALL { SERVERCALL_ISHANDLED = 0, SERVERCALL_REJECTED = 1, SERVERCALL_RETRYLATER = 2 }; enum tagINPUT_MESSAGE_ORIGIN_ID { IMO_UNAVAILABLE = 0, IMO_HARDWARE = 1, IMO_INJECTED = 2, IMO_SYSTEM = 4 }; enum _TRANSACTION_STATE { TransactionStateNormal = 1, TransactionStateIndoubt = 2, TransactionStateCommittedNotify = 3 }; enum tagCOINITBASE { COINITBASE_MULTITHREADED = 0 }; enum tagDISCARDCACHE { DISCARDCACHE_SAVEIFDIRTY = 0, DISCARDCACHE_NOSAVE = 1 }; enum _SC_ENUM_TYPE { SC_ENUM_PROCESS_INFO = 0 }; enum LATENCY_TIME { LT_DONT_CARE = 0, LT_LOWEST_LATENCY = 1 }; enum tagPOINTERINACTIVE { POINTERINACTIVE_ACTIVATEONENTRY = 1, POINTERINACTIVE_DEACTIVATEONLEAVE = 2, POINTERINACTIVE_ACTIVATEONDRAG = 4 }; enum ATL::atlTraceFlags { atlTraceUser = 1, atlTraceUser2 = 2, atlTraceUser3 = 4, atlTraceUser4 = 8, atlTraceGeneral = 32, atlTraceCOM = 64, atlTraceQI = 128, atlTraceRegistrar = 256, atlTraceRefcount = 512, atlTraceWindowing = 1024, atlTraceControls = 2048, atlTraceHosting = 4096, atlTraceDBClient = 8192, atlTraceDBProvider = 16384, = 32770 }; enum ASSOCENUM { ASSOCENUM_NONE = 0 }; enum __MIDL_ICodeInstall_0001 { CIP_DISK_FULL = 0, CIP_ACCESS_DENIED = 1, CIP_NEWER_VERSION_EXISTS = 2, CIP_OLDER_VERSION_EXISTS = 3, CIP_NAME_CONFLICT = 4, CIP_TRUST_VERIFICATION_COMPONENT_MISSING = 5, CIP_EXE_SELF_REGISTERATION_TIMEOUT = 6, CIP_UNSAFE_TO_ABORT = 7, CIP_NEED_REBOOT = 8, CIP_NEED_REBOOT_UI_PERMISSION = 9 }; struct tagEMRTRANSPARENTBLT { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char rclBounds[16]; /* +0x0008 f3 11 00 00 */ long xDest; /* +0x0018 */ long yDest; /* +0x001c */ long cxDest; /* +0x0020 */ long cyDest; /* +0x0024 */ unsigned long dwRop; /* +0x0028 */ long xSrc; /* +0x002c */ long ySrc; /* +0x0030 */ unsigned char xformSrc[24]; /* +0x0034 f4 11 00 00 */ unsigned long crBkColorSrc; /* +0x004c */ unsigned long iUsageSrc; /* +0x0050 */ unsigned long offBmiSrc; /* +0x0054 */ unsigned long cbBmiSrc; /* +0x0058 */ unsigned long offBitsSrc; /* +0x005c */ unsigned long cbBitsSrc; /* +0x0060 */ long cxSrc; /* +0x0064 */ long cySrc; /* +0x0068 */ }; struct _SERVICE_PRESHUTDOWN_INFO { unsigned long dwPreshutdownTimeout; /* +0x0000 */ }; struct _TAPE_SET_DRIVE_PARAMETERS { unsigned char ECC; /* +0x0000 */ unsigned char Compression; /* +0x0001 */ unsigned char DataPadding; /* +0x0002 */ unsigned char ReportSetmarks; /* +0x0003 */ unsigned long EOTWarningZoneSize; /* +0x0004 */ }; struct tagCBTACTIVATESTRUCT { unsigned char fMouse[4]; /* +0x0000 74 00 00 00 */ unsigned char hWndActive[4]; /* +0x0004 fc 11 00 00 */ }; struct _NETRESOURCEW { unsigned long dwScope; /* +0x0000 */ unsigned long dwType; /* +0x0004 */ unsigned long dwDisplayType; /* +0x0008 */ unsigned long dwUsage; /* +0x000c */ unsigned char lpLocalName[4]; /* +0x0010 71 04 00 00 */ unsigned char lpRemoteName[4]; /* +0x0014 71 04 00 00 */ unsigned char lpComment[4]; /* +0x0018 71 04 00 00 */ unsigned char lpProvider[4]; /* +0x001c 71 04 00 00 */ }; struct _DWORD_BLOB { unsigned long clSize; /* +0x0000 */ unsigned char alData[4]; /* +0x0004 01 12 00 00 */ }; struct tagRemHGLOBAL { long fNullHGlobal; /* +0x0000 */ unsigned long cbData; /* +0x0004 */ unsigned char data[4]; /* +0x0008 04 12 00 00 */ }; struct _QUERY_SERVICE_CONFIGW { unsigned long dwServiceType; /* +0x0000 */ unsigned long dwStartType; /* +0x0004 */ unsigned long dwErrorControl; /* +0x0008 */ unsigned char lpBinaryPathName[4]; /* +0x000c 71 04 00 00 */ unsigned char lpLoadOrderGroup[4]; /* +0x0010 71 04 00 00 */ unsigned long dwTagId; /* +0x0014 */ unsigned char lpDependencies[4]; /* +0x0018 71 04 00 00 */ unsigned char lpServiceStartName[4]; /* +0x001c 71 04 00 00 */ unsigned char lpDisplayName[4]; /* +0x0020 71 04 00 00 */ }; struct _PROCESS_HEAP_ENTRY { void *lpData; /* +0x0000 */ unsigned long cbData; /* +0x0004 */ unsigned char cbOverhead; /* +0x0008 */ unsigned char iRegionIndex; /* +0x0009 */ unsigned short wFlags; /* +0x000a */ /* unsigned char Block[0]; +0x000c 0d 12 00 00 */ unsigned char Region[16]; /* +0x000c 0e 12 00 00 */ }; struct _PROCESS_HEAP_ENTRY:::: { unsigned long dwCommittedSize; /* +0x0000 */ unsigned long dwUnCommittedSize; /* +0x0004 */ void *lpFirstBlock; /* +0x0008 */ void *lpLastBlock; /* +0x000c */ }; struct _PROCESS_HEAP_ENTRY:::: { void *hMem; /* +0x0000 */ unsigned char dwReserved[12]; /* +0x0004 13 12 00 00 */ }; struct tagMETHODDATA { unsigned char szName[4]; /* +0x0000 71 04 00 00 */ unsigned char ppdata[4]; /* +0x0004 1b 12 00 00 */ long dispid; /* +0x0008 */ unsigned char iMeth[4]; /* +0x000c 75 00 00 00 */ unsigned char cc[4]; /* +0x0010 1c 12 00 00 */ unsigned char cArgs[4]; /* +0x0014 75 00 00 00 */ unsigned short wFlags; /* +0x0018 */ unsigned short vtReturn; /* +0x001a */ }; struct _SID_AND_ATTRIBUTES { void *Sid; /* +0x0000 */ unsigned long Attributes; /* +0x0004 */ }; struct _MEMORY_BASIC_INFORMATION64 { unsigned long long BaseAddress; /* +0x0000 */ unsigned long long AllocationBase; /* +0x0008 */ unsigned long AllocationProtect; /* +0x0010 */ unsigned long __alignment1; /* +0x0014 */ unsigned long long RegionSize; /* +0x0018 */ unsigned long State; /* +0x0020 */ unsigned long Protect; /* +0x0024 */ unsigned long Type; /* +0x0028 */ unsigned long __alignment2; /* +0x002c */ }; struct _SHELLDETAILS { unsigned char fmt[4]; /* +0x0000 74 00 00 00 */ unsigned char cxChar[4]; /* +0x0004 74 00 00 00 */ unsigned char str[264]; /* +0x0008 23 12 00 00 */ }; struct tagRemHMETAFILEPICT { long mm; /* +0x0000 */ long xExt; /* +0x0004 */ long yExt; /* +0x0008 */ unsigned long cbData; /* +0x000c */ unsigned char data[4]; /* +0x0010 04 12 00 00 */ }; struct _SE_ACCESS_REPLY { unsigned long Size; /* +0x0000 */ unsigned long ResultListCount; /* +0x0004 */ unsigned long *GrantedAccess; /* +0x0008 */ unsigned long *AccessStatus; /* +0x000c */ unsigned char AccessReason[4]; /* +0x0010 43 12 00 00 */ unsigned char Privileges[4]; /* +0x0014 46 12 00 00 */ }; struct _PROCESSOR_POWER_POLICY { unsigned long Revision; /* +0x0000 */ unsigned char DynamicThrottle; /* +0x0004 */ unsigned char Spare[3]; /* +0x0005 49 12 00 00 */ /* unsigned char DisableCStates[0]; +0x0008 4a 12 00 00 */ unsigned char Reserved[4]; /* +0x0008 4b 12 00 00 */ unsigned long PolicyCount; /* +0x000c */ unsigned char Policy[60]; /* +0x0010 4d 12 00 00 */ }; struct tagTOGGLEKEYS { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ }; struct _FULL_PTR_XLAT_TABLES { void *RefIdToPointer; /* +0x0000 */ void *PointerToRefId; /* +0x0004 */ unsigned long NextRefId; /* +0x0008 */ unsigned char XlatSide[4]; /* +0x000c 52 12 00 00 */ }; struct DISPLAYCONFIG_SOURCE_MODE { unsigned char width[4]; /* +0x0000 75 00 00 00 */ unsigned char height[4]; /* +0x0004 75 00 00 00 */ unsigned char pixelFormat[4]; /* +0x0008 57 12 00 00 */ unsigned char position[8]; /* +0x000c 58 12 00 00 */ }; struct tagNMHDR { unsigned char hwndFrom[4]; /* +0x0000 fc 11 00 00 */ unsigned char idFrom[4]; /* +0x0004 75 00 00 00 */ unsigned char code[4]; /* +0x0008 75 00 00 00 */ }; struct _currencyfmtW { unsigned char NumDigits[4]; /* +0x0000 75 00 00 00 */ unsigned char LeadingZero[4]; /* +0x0004 75 00 00 00 */ unsigned char Grouping[4]; /* +0x0008 75 00 00 00 */ unsigned char lpDecimalSep[4]; /* +0x000c 71 04 00 00 */ unsigned char lpThousandSep[4]; /* +0x0010 71 04 00 00 */ unsigned char NegativeOrder[4]; /* +0x0014 75 00 00 00 */ unsigned char PositiveOrder[4]; /* +0x0018 75 00 00 00 */ unsigned char lpCurrencySymbol[4]; /* +0x001c 71 04 00 00 */ }; struct CO_MTA_USAGE_COOKIE__ { unsigned char unused[4]; /* +0x0000 74 00 00 00 */ }; struct _ACTIVATION_CONTEXT_QUERY_INDEX { unsigned long ulAssemblyIndex; /* +0x0000 */ unsigned long ulFileIndexInAssembly; /* +0x0004 */ }; struct tagRAWHID { unsigned long dwSizeHid; /* +0x0000 */ unsigned long dwCount; /* +0x0004 */ unsigned char bRawData[4]; /* +0x0008 04 12 00 00 */ }; struct _COMMCONFIG { unsigned long dwSize; /* +0x0000 */ unsigned short wVersion; /* +0x0004 */ unsigned short wReserved; /* +0x0006 */ unsigned char dcb[28]; /* +0x0008 82 12 00 00 */ unsigned long dwProviderSubType; /* +0x0024 */ unsigned long dwProviderOffset; /* +0x0028 */ unsigned long dwProviderSize; /* +0x002c */ unsigned char wcProviderData[4]; /* +0x0030 83 12 00 00 */ }; struct tagEMREXTCREATEFONTINDIRECTW { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned long ihFont; /* +0x0008 */ unsigned char elfw[320]; /* +0x000c 88 12 00 00 */ }; struct tagRPC_CALL_ATTRIBUTES_V1_A { unsigned char Version[4]; /* +0x0000 75 00 00 00 */ unsigned long Flags; /* +0x0004 */ unsigned long ServerPrincipalNameBufferLength; /* +0x0008 */ unsigned char *ServerPrincipalName; /* +0x000c */ unsigned long ClientPrincipalNameBufferLength; /* +0x0010 */ unsigned char *ClientPrincipalName; /* +0x0014 */ unsigned long AuthenticationLevel; /* +0x0018 */ unsigned long AuthenticationService; /* +0x001c */ unsigned char NullSession[4]; /* +0x0020 74 00 00 00 */ }; struct tagEMROFFSETCLIPRGN { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char ptlOffset[8]; /* +0x0008 58 12 00 00 */ }; struct tagSCROLLINFO { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char fMask[4]; /* +0x0004 75 00 00 00 */ unsigned char nMin[4]; /* +0x0008 74 00 00 00 */ unsigned char nMax[4]; /* +0x000c 74 00 00 00 */ unsigned char nPage[4]; /* +0x0010 75 00 00 00 */ unsigned char nPos[4]; /* +0x0014 74 00 00 00 */ unsigned char nTrackPos[4]; /* +0x0018 74 00 00 00 */ }; struct tagREGISTERWORDW { unsigned char lpReading[4]; /* +0x0000 71 04 00 00 */ unsigned char lpWord[4]; /* +0x0004 71 04 00 00 */ }; struct _KCRM_MARSHAL_HEADER { unsigned long VersionMajor; /* +0x0000 */ unsigned long VersionMinor; /* +0x0004 */ unsigned long NumProtocols; /* +0x0008 */ unsigned long Unused; /* +0x000c */ }; struct tagPOLYTEXTA { unsigned char x[4]; /* +0x0000 74 00 00 00 */ unsigned char y[4]; /* +0x0004 74 00 00 00 */ unsigned char n[4]; /* +0x0008 75 00 00 00 */ unsigned char lpstr[4]; /* +0x000c bf 12 00 00 */ unsigned char uiFlags[4]; /* +0x0010 75 00 00 00 */ unsigned char rcl[16]; /* +0x0014 c0 12 00 00 */ unsigned char pdx[4]; /* +0x0024 74 04 00 00 */ }; struct tagMINMAXINFO { unsigned char ptReserved[8]; /* +0x0000 ce 12 00 00 */ unsigned char ptMaxSize[8]; /* +0x0008 ce 12 00 00 */ unsigned char ptMaxPosition[8]; /* +0x0010 ce 12 00 00 */ unsigned char ptMinTrackSize[8]; /* +0x0018 ce 12 00 00 */ unsigned char ptMaxTrackSize[8]; /* +0x0020 ce 12 00 00 */ }; struct _SERVICE_TABLE_ENTRYW { unsigned char lpServiceName[4]; /* +0x0000 71 04 00 00 */ unsigned char lpServiceProc[4]; /* +0x0004 d4 12 00 00 */ }; struct _JOBOBJECT_END_OF_JOB_TIME_INFORMATION { unsigned long EndOfJobTimeAction; /* +0x0000 */ }; struct tagDEBUGHOOKINFO { unsigned long idThread; /* +0x0000 */ unsigned long idThreadInstaller; /* +0x0004 */ long lParam; /* +0x0008 */ unsigned char wParam[4]; /* +0x000c 75 00 00 00 */ unsigned char code[4]; /* +0x0010 74 00 00 00 */ }; struct _CREATEFILE2_EXTENDED_PARAMETERS { unsigned long dwSize; /* +0x0000 */ unsigned long dwFileAttributes; /* +0x0004 */ unsigned long dwFileFlags; /* +0x0008 */ unsigned long dwSecurityQosFlags; /* +0x000c */ unsigned char lpSecurityAttributes[4]; /* +0x0010 12 13 00 00 */ void *hTemplateFile; /* +0x0014 */ }; struct tagRGBTRIPLE { unsigned char rgbtBlue; /* +0x0000 */ unsigned char rgbtGreen; /* +0x0001 */ unsigned char rgbtRed; /* +0x0002 */ }; struct _TOKEN_CONTROL { unsigned char TokenId[8]; /* +0x0000 37 13 00 00 */ unsigned char AuthenticationId[8]; /* +0x0008 37 13 00 00 */ unsigned char ModifiedId[8]; /* +0x0010 37 13 00 00 */ unsigned char TokenSource[16]; /* +0x0018 38 13 00 00 */ }; struct _CLAIM_SECURITY_ATTRIBUTES_INFORMATION { unsigned short Version; /* +0x0000 */ unsigned short Reserved; /* +0x0002 */ unsigned long AttributeCount; /* +0x0004 */ }; struct tagREGISTERWORDA { char *lpReading; /* +0x0000 */ char *lpWord; /* +0x0004 */ }; struct tagABORTPATH { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ }; struct tagCREATESTRUCTW { void *lpCreateParams; /* +0x0000 */ unsigned char hInstance[4]; /* +0x0004 f5 12 00 00 */ unsigned char hMenu[4]; /* +0x0008 4d 13 00 00 */ unsigned char hwndParent[4]; /* +0x000c fc 11 00 00 */ unsigned char cy[4]; /* +0x0010 74 00 00 00 */ unsigned char cx[4]; /* +0x0014 74 00 00 00 */ unsigned char y[4]; /* +0x0018 74 00 00 00 */ unsigned char x[4]; /* +0x001c 74 00 00 00 */ long style; /* +0x0020 */ unsigned char lpszName[4]; /* +0x0024 4f 13 00 00 */ unsigned char lpszClass[4]; /* +0x0028 4f 13 00 00 */ unsigned long dwExStyle; /* +0x002c */ }; struct _s__CatchableTypeArray { unsigned char nCatchableTypes[4]; /* +0x0000 74 00 00 00 */ /* unsigned char arrayOfCatchableTypes[0]; +0x0004 59 13 00 00 */ }; struct tagCONTROLINFO { unsigned long cb; /* +0x0000 */ unsigned char hAccel[4]; /* +0x0004 5f 13 00 00 */ unsigned short cAccel; /* +0x0008 */ unsigned long dwFlags; /* +0x000c */ }; struct _RECTL { long left; /* +0x0000 */ long top; /* +0x0004 */ long right; /* +0x0008 */ long bottom; /* +0x000c */ }; struct tagMULTIKEYHELPW { unsigned long mkSize; /* +0x0000 */ unsigned char mkKeylist[2]; /* +0x0004 71 00 00 00 */ unsigned char szKeyphrase[2]; /* +0x0006 83 12 00 00 */ }; struct tagRemHENHMETAFILE { unsigned long cbData; /* +0x0000 */ unsigned char data[4]; /* +0x0004 04 12 00 00 */ }; struct _TIME_DYNAMIC_ZONE_INFORMATION { long Bias; /* +0x0000 */ unsigned char StandardName[64]; /* +0x0004 7c 13 00 00 */ unsigned char StandardDate[16]; /* +0x0044 7d 13 00 00 */ long StandardBias; /* +0x0054 */ unsigned char DaylightName[64]; /* +0x0058 7c 13 00 00 */ unsigned char DaylightDate[16]; /* +0x0098 7d 13 00 00 */ long DaylightBias; /* +0x00a8 */ unsigned char TimeZoneKeyName[256]; /* +0x00ac 7e 13 00 00 */ unsigned char DynamicDaylightTimeDisabled; /* +0x01ac */ }; struct tagEMRFRAMERGN { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char rclBounds[16]; /* +0x0008 f3 11 00 00 */ unsigned long cbRgnData; /* +0x0018 */ unsigned long ihBrush; /* +0x001c */ unsigned char szlStroke[8]; /* +0x0020 21 13 00 00 */ unsigned char RgnData[4]; /* +0x0028 04 12 00 00 */ }; struct _wireSAFEARR_BRECORD { unsigned long Size; /* +0x0000 */ unsigned char aRecord[4]; /* +0x0004 89 13 00 00 */ }; struct _TRANSACTION_ENLISTMENTS_INFORMATION { unsigned long NumberOfEnlistments; /* +0x0000 */ unsigned char EnlistmentPair[32]; /* +0x0004 91 13 00 00 */ }; struct _CREATE_PROCESS_DEBUG_INFO { void *hFile; /* +0x0000 */ void *hProcess; /* +0x0004 */ void *hThread; /* +0x0008 */ void *lpBaseOfImage; /* +0x000c */ unsigned long dwDebugInfoFileOffset; /* +0x0010 */ unsigned long nDebugInfoSize; /* +0x0014 */ void *lpThreadLocalBase; /* +0x0018 */ unsigned char lpStartAddress[4]; /* +0x001c 96 13 00 00 */ void *lpImageName; /* +0x0020 */ unsigned short fUnicode; /* +0x0024 */ }; struct _SMALL_RECT { short Left; /* +0x0000 */ short Top; /* +0x0002 */ short Right; /* +0x0004 */ short Bottom; /* +0x0006 */ }; struct _ACE_HEADER { unsigned char AceType; /* +0x0000 */ unsigned char AceFlags; /* +0x0001 */ unsigned short AceSize; /* +0x0002 */ }; struct tagEMRPOLYPOLYLINE { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char rclBounds[16]; /* +0x0008 f3 11 00 00 */ unsigned long nPolys; /* +0x0018 */ unsigned long cptl; /* +0x001c */ unsigned char aPolyCounts[4]; /* +0x0020 01 12 00 00 */ unsigned char aptl[8]; /* +0x0024 a3 13 00 00 */ }; struct tagUSEROBJECTFLAGS { unsigned char fInherit[4]; /* +0x0000 74 00 00 00 */ unsigned char fReserved[4]; /* +0x0004 74 00 00 00 */ unsigned long dwFlags; /* +0x0008 */ }; struct _wfinddata64i32_t { unsigned char attrib[8]; /* +0x0000 75 00 00 00 */ long long time_create; /* +0x0008 */ long long time_access; /* +0x0010 */ long long time_write; /* +0x0018 */ unsigned long size; /* +0x0020 */ unsigned char name[524]; /* +0x0024 a8 13 00 00 */ }; struct _NON_PAGED_DEBUG_INFO { unsigned short Signature; /* +0x0000 */ unsigned short Flags; /* +0x0002 */ unsigned long Size; /* +0x0004 */ unsigned short Machine; /* +0x0008 */ unsigned short Characteristics; /* +0x000a */ unsigned long TimeDateStamp; /* +0x000c */ unsigned long CheckSum; /* +0x0010 */ unsigned long SizeOfImage; /* +0x0014 */ unsigned long long ImageBase; /* +0x0018 */ }; struct _userHENHMETAFILE { long fContext; /* +0x0000 */ }; struct _userHENHMETAFILE::__MIDL_IWinTypes_0006 { long hInproc; /* +0x0000 */ /* unsigned char hRemote[0]; +0x0000 b7 13 00 00 */ long long hInproc64; /* +0x0000 */ }; struct tagPROPBAG2 { unsigned long dwType; /* +0x0000 */ unsigned short vt; /* +0x0004 */ unsigned short cfType; /* +0x0006 */ unsigned long dwHint; /* +0x0008 */ unsigned char pstrName[4]; /* +0x000c 71 04 00 00 */ unsigned char clsid[16]; /* +0x0010 ce 13 00 00 */ }; struct _JOBOBJECT_JOBSET_INFORMATION { unsigned long MemberLevel; /* +0x0000 */ }; struct DISPLAYCONFIG_PATH_SOURCE_INFO { unsigned char adapterId[8]; /* +0x0000 37 13 00 00 */ unsigned char id[4]; /* +0x0008 75 00 00 00 */ unsigned char modeInfoIdx[4]; /* +0x000c 75 00 00 00 */ unsigned char statusFlags[4]; /* +0x0010 75 00 00 00 */ }; struct tagRAWINPUT { unsigned char header[40]; /* +0x0000 d5 13 00 00 */ }; struct CM_Power_Data_s { unsigned long PD_Size; /* +0x0000 */ unsigned char PD_MostRecentPowerState[4]; /* +0x0004 dd 13 00 00 */ unsigned long PD_Capabilities; /* +0x0008 */ unsigned long PD_D1Latency; /* +0x000c */ unsigned long PD_D2Latency; /* +0x0010 */ unsigned long PD_D3Latency; /* +0x0014 */ unsigned char PD_PowerStateMapping[28]; /* +0x0018 de 13 00 00 */ unsigned char PD_DeepestSystemWake[4]; /* +0x0034 df 13 00 00 */ }; struct tagANIMATIONINFO { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char iMinAnimate[4]; /* +0x0004 74 00 00 00 */ }; struct _VIDEOPARAMETERS { unsigned char Guid[16]; /* +0x0000 ce 13 00 00 */ unsigned long dwOffset; /* +0x0010 */ unsigned long dwCommand; /* +0x0014 */ unsigned long dwFlags; /* +0x0018 */ unsigned long dwMode; /* +0x001c */ unsigned long dwTVStandard; /* +0x0020 */ unsigned long dwAvailableModes; /* +0x0024 */ unsigned long dwAvailableTVStandard; /* +0x0028 */ unsigned long dwFlickerFilter; /* +0x002c */ unsigned long dwOverScanX; /* +0x0030 */ unsigned long dwOverScanY; /* +0x0034 */ unsigned long dwMaxUnscaledX; /* +0x0038 */ unsigned long dwMaxUnscaledY; /* +0x003c */ unsigned long dwPositionX; /* +0x0040 */ unsigned long dwPositionY; /* +0x0044 */ unsigned long dwBrightness; /* +0x0048 */ unsigned long dwContrast; /* +0x004c */ unsigned long dwCPType; /* +0x0050 */ unsigned long dwCPCommand; /* +0x0054 */ unsigned long dwCPStandard; /* +0x0058 */ unsigned long dwCPKey; /* +0x005c */ unsigned long bCP_APSTriggerBits; /* +0x0060 */ unsigned char bOEMCopyProtection[256]; /* +0x0064 e6 13 00 00 */ }; struct _GROUP_RELATIONSHIP { unsigned short MaximumGroupCount; /* +0x0000 */ unsigned short ActiveGroupCount; /* +0x0002 */ unsigned char Reserved[20]; /* +0x0004 e9 13 00 00 */ unsigned char GroupInfo[44]; /* +0x0018 eb 13 00 00 */ }; struct tagBITMAPCOREINFO { unsigned char bmciHeader[12]; /* +0x0000 ee 13 00 00 */ unsigned char bmciColors[4]; /* +0x000c f0 13 00 00 */ }; struct tagPIXELFORMATDESCRIPTOR { unsigned short nSize; /* +0x0000 */ unsigned short nVersion; /* +0x0002 */ unsigned long dwFlags; /* +0x0004 */ unsigned char iPixelType; /* +0x0008 */ unsigned char cColorBits; /* +0x0009 */ unsigned char cRedBits; /* +0x000a */ unsigned char cRedShift; /* +0x000b */ unsigned char cGreenBits; /* +0x000c */ unsigned char cGreenShift; /* +0x000d */ unsigned char cBlueBits; /* +0x000e */ unsigned char cBlueShift; /* +0x000f */ unsigned char cAlphaBits; /* +0x0010 */ unsigned char cAlphaShift; /* +0x0011 */ unsigned char cAccumBits; /* +0x0012 */ unsigned char cAccumRedBits; /* +0x0013 */ unsigned char cAccumGreenBits; /* +0x0014 */ unsigned char cAccumBlueBits; /* +0x0015 */ unsigned char cAccumAlphaBits; /* +0x0016 */ unsigned char cDepthBits; /* +0x0017 */ unsigned char cStencilBits; /* +0x0018 */ unsigned char cAuxBuffers; /* +0x0019 */ unsigned char iLayerType; /* +0x001a */ unsigned char bReserved; /* +0x001b */ unsigned long dwLayerMask; /* +0x001c */ unsigned long dwVisibleMask; /* +0x0020 */ unsigned long dwDamageMask; /* +0x0024 */ }; struct tagEMRFILLPATH { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char rclBounds[16]; /* +0x0008 f3 11 00 00 */ }; struct _FLOAT128 { long long LowPart; /* +0x0000 */ long long HighPart; /* +0x0008 */ }; struct _LDT_ENTRY { unsigned short LimitLow; /* +0x0000 */ unsigned short BaseLow; /* +0x0002 */ }; struct tagEMRFILLRGN { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char rclBounds[16]; /* +0x0008 f3 11 00 00 */ unsigned long cbRgnData; /* +0x0018 */ unsigned long ihBrush; /* +0x001c */ unsigned char RgnData[4]; /* +0x0020 04 12 00 00 */ }; struct _SERVICE_NOTIFY_2A { unsigned long dwVersion; /* +0x0000 */ unsigned char pfnNotifyCallback[4]; /* +0x0004 10 14 00 00 */ void *pContext; /* +0x0008 */ unsigned long dwNotificationStatus; /* +0x000c */ unsigned char ServiceStatus[36]; /* +0x0010 11 14 00 00 */ unsigned long dwNotificationTriggered; /* +0x0034 */ char *pszServiceNames; /* +0x0038 */ }; struct _MEMORY_BASIC_INFORMATION32 { unsigned long BaseAddress; /* +0x0000 */ unsigned long AllocationBase; /* +0x0004 */ unsigned long AllocationProtect; /* +0x0008 */ unsigned long RegionSize; /* +0x000c */ unsigned long State; /* +0x0010 */ unsigned long Protect; /* +0x0014 */ unsigned long Type; /* +0x0018 */ }; struct tagTEXTMETRICA { long tmHeight; /* +0x0000 */ long tmAscent; /* +0x0004 */ long tmDescent; /* +0x0008 */ long tmInternalLeading; /* +0x000c */ long tmExternalLeading; /* +0x0010 */ long tmAveCharWidth; /* +0x0014 */ long tmMaxCharWidth; /* +0x0018 */ long tmWeight; /* +0x001c */ long tmOverhang; /* +0x0020 */ long tmDigitizedAspectX; /* +0x0024 */ long tmDigitizedAspectY; /* +0x0028 */ unsigned char tmFirstChar; /* +0x002c */ unsigned char tmLastChar; /* +0x002d */ unsigned char tmDefaultChar; /* +0x002e */ unsigned char tmBreakChar; /* +0x002f */ unsigned char tmItalic; /* +0x0030 */ unsigned char tmUnderlined; /* +0x0031 */ unsigned char tmStruckOut; /* +0x0032 */ unsigned char tmPitchAndFamily; /* +0x0033 */ unsigned char tmCharSet; /* +0x0034 */ }; struct _RDR_CALLOUT_STATE { long LastError; /* +0x0000 */ void *LastEEInfo; /* +0x0004 */ unsigned char LastCalledStage[4]; /* +0x0008 23 14 00 00 */ unsigned short *ServerName; /* +0x000c */ unsigned short *ServerPort; /* +0x0010 */ unsigned short *RemoteUser; /* +0x0014 */ unsigned short *AuthType; /* +0x0018 */ unsigned char ResourceTypePresent; /* +0x001c */ unsigned char SessionIdPresent; /* +0x001d */ unsigned char InterfacePresent; /* +0x001e */ unsigned char ResourceType[16]; /* +0x0020 ce 13 00 00 */ unsigned char SessionId[16]; /* +0x0030 ce 13 00 00 */ unsigned char Interface[20]; /* +0x0040 24 14 00 00 */ void *CertContext; /* +0x0054 */ }; struct _OFSTRUCT { unsigned char cBytes; /* +0x0000 */ unsigned char fFixedDisk; /* +0x0001 */ unsigned short nErrCode; /* +0x0002 */ unsigned short Reserved1; /* +0x0004 */ unsigned short Reserved2; /* +0x0006 */ unsigned char szPathName[128]; /* +0x0008 29 14 00 00 */ }; struct DISPLAYCONFIG_RATIONAL { unsigned char Numerator[4]; /* +0x0000 75 00 00 00 */ unsigned char Denominator[4]; /* +0x0004 75 00 00 00 */ }; struct _MAT2 { unsigned char eM11[4]; /* +0x0000 2e 14 00 00 */ unsigned char eM12[4]; /* +0x0004 2e 14 00 00 */ unsigned char eM21[4]; /* +0x0008 2e 14 00 00 */ unsigned char eM22[4]; /* +0x000c 2e 14 00 00 */ }; struct tagEMRNAMEDESCAPE { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char iEscape[4]; /* +0x0008 74 00 00 00 */ unsigned char cbDriver[4]; /* +0x000c 74 00 00 00 */ unsigned char cbEscData[4]; /* +0x0010 74 00 00 00 */ unsigned char EscData[4]; /* +0x0014 04 12 00 00 */ }; struct _TOKEN_MANDATORY_LABEL { unsigned char Label[8]; /* +0x0000 39 14 00 00 */ }; struct _OUTPUT_DEBUG_STRING_INFO { char *lpDebugStringData; /* +0x0000 */ unsigned short fUnicode; /* +0x0004 */ unsigned short nDebugStringLength; /* +0x0006 */ }; struct _UNIVERSAL_NAME_INFOW { unsigned char lpUniversalName[4]; /* +0x0000 71 04 00 00 */ }; struct _WORD_BLOB { unsigned long clSize; /* +0x0000 */ unsigned char asData[4]; /* +0x0004 56 14 00 00 */ }; struct _IMAGE_OPTIONAL_HEADER64 { unsigned short Magic; /* +0x0000 */ unsigned char MajorLinkerVersion; /* +0x0002 */ unsigned char MinorLinkerVersion; /* +0x0003 */ unsigned long SizeOfCode; /* +0x0004 */ unsigned long SizeOfInitializedData; /* +0x0008 */ unsigned long SizeOfUninitializedData; /* +0x000c */ unsigned long AddressOfEntryPoint; /* +0x0010 */ unsigned long BaseOfCode; /* +0x0014 */ unsigned long long ImageBase; /* +0x0018 */ unsigned long SectionAlignment; /* +0x0020 */ unsigned long FileAlignment; /* +0x0024 */ unsigned short MajorOperatingSystemVersion; /* +0x0028 */ unsigned short MinorOperatingSystemVersion; /* +0x002a */ unsigned short MajorImageVersion; /* +0x002c */ unsigned short MinorImageVersion; /* +0x002e */ unsigned short MajorSubsystemVersion; /* +0x0030 */ unsigned short MinorSubsystemVersion; /* +0x0032 */ unsigned long Win32VersionValue; /* +0x0034 */ unsigned long SizeOfImage; /* +0x0038 */ unsigned long SizeOfHeaders; /* +0x003c */ unsigned long CheckSum; /* +0x0040 */ unsigned short Subsystem; /* +0x0044 */ unsigned short DllCharacteristics; /* +0x0046 */ unsigned long long SizeOfStackReserve; /* +0x0048 */ unsigned long long SizeOfStackCommit; /* +0x0050 */ unsigned long long SizeOfHeapReserve; /* +0x0058 */ unsigned long long SizeOfHeapCommit; /* +0x0060 */ unsigned long LoaderFlags; /* +0x0068 */ unsigned long NumberOfRvaAndSizes; /* +0x006c */ unsigned char DataDirectory[128]; /* +0x0070 72 14 00 00 */ }; struct tagEMRSETVIEWPORTEXTEX { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char szlExtent[8]; /* +0x0008 21 13 00 00 */ }; struct tagTRACKMOUSEEVENT { unsigned long cbSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char hwndTrack[4]; /* +0x0008 fc 11 00 00 */ unsigned long dwHoverTime; /* +0x000c */ }; struct tagCOMBOBOXINFO { unsigned long cbSize; /* +0x0000 */ unsigned char rcItem[16]; /* +0x0004 c0 12 00 00 */ unsigned char rcButton[16]; /* +0x0014 c0 12 00 00 */ unsigned long stateButton; /* +0x0024 */ unsigned char hwndCombo[4]; /* +0x0028 fc 11 00 00 */ unsigned char hwndItem[4]; /* +0x002c fc 11 00 00 */ unsigned char hwndList[4]; /* +0x0030 fc 11 00 00 */ }; struct _RPC_SECURITY_QOS_V2_A { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ unsigned long AdditionalSecurityInfoType; /* +0x0010 */ }; struct _RPC_SECURITY_QOS_V2_A:: { unsigned char HttpCredentials[4]; /* +0x0000 80 14 00 00 */ }; struct _s__RTTICompleteObjectLocator { unsigned long signature; /* +0x0000 */ unsigned long offset; /* +0x0004 */ unsigned long cdOffset; /* +0x0008 */ unsigned char pTypeDescriptor[4]; /* +0x000c 84 14 00 00 */ unsigned char pClassDescriptor[4]; /* +0x0010 87 14 00 00 */ }; struct _BY_HANDLE_FILE_INFORMATION { unsigned long dwFileAttributes; /* +0x0000 */ unsigned char ftCreationTime[8]; /* +0x0004 91 14 00 00 */ unsigned char ftLastAccessTime[8]; /* +0x000c 91 14 00 00 */ unsigned char ftLastWriteTime[8]; /* +0x0014 91 14 00 00 */ unsigned long dwVolumeSerialNumber; /* +0x001c */ unsigned long nFileSizeHigh; /* +0x0020 */ unsigned long nFileSizeLow; /* +0x0024 */ unsigned long nNumberOfLinks; /* +0x0028 */ unsigned long nFileIndexHigh; /* +0x002c */ unsigned long nFileIndexLow; /* +0x0030 */ }; struct _EVENTLOGRECORD { unsigned long Length; /* +0x0000 */ unsigned long Reserved; /* +0x0004 */ unsigned long RecordNumber; /* +0x0008 */ unsigned long TimeGenerated; /* +0x000c */ unsigned long TimeWritten; /* +0x0010 */ unsigned long EventID; /* +0x0014 */ unsigned short EventType; /* +0x0018 */ unsigned short NumStrings; /* +0x001a */ unsigned short EventCategory; /* +0x001c */ unsigned short ReservedFlags; /* +0x001e */ unsigned long ClosingRecordNumber; /* +0x0020 */ unsigned long StringOffset; /* +0x0024 */ unsigned long UserSidLength; /* +0x0028 */ unsigned long UserSidOffset; /* +0x002c */ unsigned long DataLength; /* +0x0030 */ unsigned long DataOffset; /* +0x0034 */ }; struct tagSTYLESTRUCT { unsigned long styleOld; /* +0x0000 */ unsigned long styleNew; /* +0x0004 */ }; struct _cpinfoexW { unsigned char MaxCharSize[4]; /* +0x0000 75 00 00 00 */ unsigned char DefaultChar[2]; /* +0x0004 9c 14 00 00 */ unsigned char LeadByte[12]; /* +0x0006 9d 14 00 00 */ unsigned char UnicodeDefaultChar[2]; /* +0x0012 71 00 00 00 */ unsigned char CodePage[4]; /* +0x0014 75 00 00 00 */ unsigned char CodePageName[520]; /* +0x0018 a8 13 00 00 */ }; struct _tagSOFTDISTINFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned long dwAdState; /* +0x0008 */ unsigned char szTitle[4]; /* +0x000c 71 04 00 00 */ unsigned char szAbstract[4]; /* +0x0010 71 04 00 00 */ unsigned char szHREF[4]; /* +0x0014 71 04 00 00 */ unsigned long dwInstalledVersionMS; /* +0x0018 */ unsigned long dwInstalledVersionLS; /* +0x001c */ unsigned long dwUpdateVersionMS; /* +0x0020 */ unsigned long dwUpdateVersionLS; /* +0x0024 */ unsigned long dwAdvertisedVersionMS; /* +0x0028 */ unsigned long dwAdvertisedVersionLS; /* +0x002c */ unsigned long dwReserved; /* +0x0030 */ }; struct tagTEXTMETRICW { long tmHeight; /* +0x0000 */ long tmAscent; /* +0x0004 */ long tmDescent; /* +0x0008 */ long tmInternalLeading; /* +0x000c */ long tmExternalLeading; /* +0x0010 */ long tmAveCharWidth; /* +0x0014 */ long tmMaxCharWidth; /* +0x0018 */ long tmWeight; /* +0x001c */ long tmOverhang; /* +0x0020 */ long tmDigitizedAspectX; /* +0x0024 */ long tmDigitizedAspectY; /* +0x0028 */ unsigned char tmFirstChar[2]; /* +0x002c 71 00 00 00 */ unsigned char tmLastChar[2]; /* +0x002e 71 00 00 00 */ unsigned char tmDefaultChar[2]; /* +0x0030 71 00 00 00 */ unsigned char tmBreakChar[2]; /* +0x0032 71 00 00 00 */ unsigned char tmItalic; /* +0x0034 */ unsigned char tmUnderlined; /* +0x0035 */ unsigned char tmStruckOut; /* +0x0036 */ unsigned char tmPitchAndFamily; /* +0x0037 */ unsigned char tmCharSet; /* +0x0038 */ }; struct tagEMRMODIFYWORLDTRANSFORM { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char xform[24]; /* +0x0008 f4 11 00 00 */ unsigned long iMode; /* +0x0020 */ }; struct SChannelHookCallInfo { unsigned char iid[16]; /* +0x0000 ce 13 00 00 */ unsigned long cbSize; /* +0x0010 */ unsigned char uCausality[16]; /* +0x0014 ce 13 00 00 */ unsigned long dwServerPid; /* +0x0024 */ unsigned long iMethod; /* +0x0028 */ void *pObject; /* +0x002c */ }; struct tagEXTLOGFONTA { unsigned char elfLogFont[60]; /* +0x0000 0b 14 00 00 */ unsigned char elfFullName[64]; /* +0x003c ac 14 00 00 */ unsigned char elfStyle[32]; /* +0x007c ad 14 00 00 */ unsigned long elfVersion; /* +0x009c */ unsigned long elfStyleSize; /* +0x00a0 */ unsigned long elfMatch; /* +0x00a4 */ unsigned long elfReserved; /* +0x00a8 */ unsigned char elfVendorId[4]; /* +0x00ac ae 14 00 00 */ unsigned long elfCulture; /* +0x00b0 */ unsigned char elfPanose[12]; /* +0x00b4 af 14 00 00 */ }; struct _tagPROTOCOLDATA { unsigned long grfFlags; /* +0x0000 */ unsigned long dwState; /* +0x0004 */ void *pData; /* +0x0008 */ unsigned long cbData; /* +0x000c */ }; struct _ICONINFOEXW { unsigned long cbSize; /* +0x0000 */ unsigned char fIcon[4]; /* +0x0004 74 00 00 00 */ unsigned long xHotspot; /* +0x0008 */ unsigned long yHotspot; /* +0x000c */ unsigned char hbmMask[4]; /* +0x0010 b9 14 00 00 */ unsigned char hbmColor[4]; /* +0x0014 b9 14 00 00 */ unsigned short wResID; /* +0x0018 */ unsigned char szModName[520]; /* +0x001a a8 13 00 00 */ unsigned char szResName[522]; /* +0x0222 a8 13 00 00 */ }; struct _XSAVE_AREA_HEADER { unsigned long long Mask; /* +0x0000 */ unsigned char Reserved[56]; /* +0x0008 be 14 00 00 */ }; struct tagEMRCREATECOLORSPACEW { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned long ihCS; /* +0x0008 */ unsigned char lcs[588]; /* +0x000c c1 14 00 00 */ unsigned long dwFlags; /* +0x0258 */ unsigned long cbData; /* +0x025c */ unsigned char Data[4]; /* +0x0260 04 12 00 00 */ }; struct _SERVICE_REQUIRED_PRIVILEGES_INFOW { unsigned char pmszRequiredPrivileges[4]; /* +0x0000 71 04 00 00 */ }; struct _TRANSACTION_SUPERIOR_ENLISTMENT_INFORMATION { unsigned char SuperiorEnlistmentPair[32]; /* +0x0000 90 13 00 00 */ }; struct tagEMRLINETO { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char ptl[8]; /* +0x0008 58 12 00 00 */ }; struct _SERVICE_TRIGGER_SPECIFIC_DATA_ITEM { unsigned long dwDataType; /* +0x0000 */ unsigned long cbData; /* +0x0004 */ unsigned char *pData; /* +0x0008 */ }; struct _IMAGE_RESOURCE_DIRECTORY_ENTRY { /* unsigned char NameOffset[0]; +0x0000 ec 14 00 00 */ /* unsigned char NameIsString[0]; +0x0000 ed 14 00 00 */ unsigned long Name; /* +0x0000 */ unsigned short Id; /* +0x0000 */ unsigned long OffsetToData; /* +0x0004 */ /* unsigned char OffsetToDirectory[0]; +0x0004 ec 14 00 00 */ unsigned char DataIsDirectory[4]; /* +0x0004 ed 14 00 00 */ }; struct tagEMRROUNDRECT { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char rclBox[16]; /* +0x0008 f3 11 00 00 */ unsigned char szlCorner[8]; /* +0x0018 21 13 00 00 */ }; struct tagRPC_CALL_ATTRIBUTES_V2_W { unsigned char Version[4]; /* +0x0000 75 00 00 00 */ unsigned long Flags; /* +0x0004 */ unsigned long ServerPrincipalNameBufferLength; /* +0x0008 */ unsigned short *ServerPrincipalName; /* +0x000c */ unsigned long ClientPrincipalNameBufferLength; /* +0x0010 */ unsigned short *ClientPrincipalName; /* +0x0014 */ unsigned long AuthenticationLevel; /* +0x0018 */ unsigned long AuthenticationService; /* +0x001c */ unsigned char NullSession[4]; /* +0x0020 74 00 00 00 */ unsigned char KernelModeCaller[4]; /* +0x0024 74 00 00 00 */ unsigned long ProtocolSequence; /* +0x0028 */ unsigned char IsClientLocal[4]; /* +0x002c f7 14 00 00 */ void *ClientPID; /* +0x0030 */ unsigned long CallStatus; /* +0x0034 */ unsigned char CallType[4]; /* +0x0038 f8 14 00 00 */ unsigned char CallLocalAddress[4]; /* +0x003c fa 14 00 00 */ unsigned short OpNum; /* +0x0040 */ unsigned char InterfaceUuid[16]; /* +0x0044 ce 13 00 00 */ }; struct _POWER_SESSION_WINLOGON { unsigned long SessionId; /* +0x0000 */ unsigned char Console; /* +0x0004 */ unsigned char Locked; /* +0x0005 */ }; struct _IMAGE_NT_HEADERS { unsigned long Signature; /* +0x0000 */ unsigned char FileHeader[20]; /* +0x0004 01 15 00 00 */ unsigned char OptionalHeader[224]; /* +0x0018 02 15 00 00 */ }; struct _UNLOAD_DLL_DEBUG_INFO { void *lpBaseOfDll; /* +0x0000 */ }; struct tagEMRPOLYLINE { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char rclBounds[16]; /* +0x0008 f3 11 00 00 */ unsigned long cptl; /* +0x0018 */ unsigned char aptl[8]; /* +0x001c a3 13 00 00 */ }; struct _CONSOLE_READCONSOLE_CONTROL { unsigned long nLength; /* +0x0000 */ unsigned long nInitialChars; /* +0x0004 */ unsigned long dwCtrlWakeupMask; /* +0x0008 */ unsigned long dwControlKeyState; /* +0x000c */ }; struct _RPC_HTTP_TRANSPORT_CREDENTIALS_A { unsigned char TransportCredentials[4]; /* +0x0000 14 15 00 00 */ unsigned long Flags; /* +0x0004 */ unsigned long AuthenticationTarget; /* +0x0008 */ unsigned long NumberOfAuthnSchemes; /* +0x000c */ unsigned long *AuthnSchemes; /* +0x0010 */ unsigned char *ServerCertificateSubject; /* +0x0014 */ }; struct _RIP_INFO { unsigned long dwError; /* +0x0000 */ unsigned long dwType; /* +0x0004 */ }; struct tagCWPRETSTRUCT { long lResult; /* +0x0000 */ long lParam; /* +0x0004 */ unsigned char wParam[4]; /* +0x0008 75 00 00 00 */ unsigned char message[4]; /* +0x000c 75 00 00 00 */ unsigned char hwnd[4]; /* +0x0010 fc 11 00 00 */ }; struct tagKBDLLHOOKSTRUCT { unsigned long vkCode; /* +0x0000 */ unsigned long scanCode; /* +0x0004 */ unsigned long flags; /* +0x0008 */ unsigned long time; /* +0x000c */ unsigned long dwExtraInfo; /* +0x0010 */ }; struct _NETINFOSTRUCT { unsigned long cbStructure; /* +0x0000 */ unsigned long dwProviderVersion; /* +0x0004 */ unsigned long dwStatus; /* +0x0008 */ unsigned long dwCharacteristics; /* +0x000c */ unsigned long dwHandle; /* +0x0010 */ unsigned short wNetType; /* +0x0014 */ unsigned long dwPrinters; /* +0x0018 */ unsigned long dwDrives; /* +0x001c */ }; struct _ACCESS_ALLOWED_CALLBACK_OBJECT_ACE { unsigned char Header[4]; /* +0x0000 45 15 00 00 */ unsigned long Mask; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ unsigned char ObjectType[16]; /* +0x000c ce 13 00 00 */ unsigned char InheritedObjectType[16]; /* +0x001c ce 13 00 00 */ unsigned long SidStart; /* +0x002c */ }; struct _OVERLAPPED_ENTRY { unsigned long lpCompletionKey; /* +0x0000 */ unsigned char lpOverlapped[4]; /* +0x0004 4b 15 00 00 */ unsigned long Internal; /* +0x0008 */ unsigned long dwNumberOfBytesTransferred; /* +0x000c */ }; struct tagEMRSELECTPALETTE { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned long ihPal; /* +0x0008 */ }; struct _NDR_USER_MARSHAL_INFO_LEVEL1 { void *Buffer; /* +0x0000 */ unsigned long BufferSize; /* +0x0004 */ unsigned char pfnAllocate[4]; /* +0x0008 57 15 00 00 */ unsigned char pfnFree[4]; /* +0x000c 10 14 00 00 */ unsigned char pRpcChannelBuffer[4]; /* +0x0010 59 15 00 00 */ unsigned char Reserved[20]; /* +0x0014 5a 15 00 00 */ }; struct _GDI_OBJECT { unsigned long ObjectType; /* +0x0000 */ }; struct _CONTEXT { unsigned long ContextFlags; /* +0x0000 */ unsigned long Dr0; /* +0x0004 */ unsigned long Dr1; /* +0x0008 */ unsigned long Dr2; /* +0x000c */ unsigned long Dr3; /* +0x0010 */ unsigned long Dr6; /* +0x0014 */ unsigned long Dr7; /* +0x0018 */ unsigned char FloatSave[112]; /* +0x001c 60 15 00 00 */ unsigned long SegGs; /* +0x008c */ unsigned long SegFs; /* +0x0090 */ unsigned long SegEs; /* +0x0094 */ unsigned long SegDs; /* +0x0098 */ unsigned long Edi; /* +0x009c */ unsigned long Esi; /* +0x00a0 */ unsigned long Ebx; /* +0x00a4 */ unsigned long Edx; /* +0x00a8 */ unsigned long Ecx; /* +0x00ac */ unsigned long Eax; /* +0x00b0 */ unsigned long Ebp; /* +0x00b4 */ unsigned long Eip; /* +0x00b8 */ unsigned long SegCs; /* +0x00bc */ unsigned long EFlags; /* +0x00c0 */ unsigned long Esp; /* +0x00c4 */ unsigned long SegSs; /* +0x00c8 */ unsigned char ExtendedRegisters[512]; /* +0x00cc 61 15 00 00 */ }; struct _JOBOBJECT_LIMIT_VIOLATION_INFORMATION { unsigned long LimitFlags; /* +0x0000 */ unsigned long ViolationLimitFlags; /* +0x0004 */ unsigned long long IoReadBytes; /* +0x0008 */ unsigned long long IoReadBytesLimit; /* +0x0010 */ unsigned long long IoWriteBytes; /* +0x0018 */ unsigned long long IoWriteBytesLimit; /* +0x0020 */ unsigned char PerJobUserTime[8]; /* +0x0028 db 13 00 00 */ unsigned char PerJobUserTimeLimit[8]; /* +0x0030 db 13 00 00 */ unsigned long long JobMemory; /* +0x0038 */ unsigned long long JobMemoryLimit; /* +0x0040 */ unsigned char RateControlTolerance[4]; /* +0x0048 64 15 00 00 */ unsigned char RateControlToleranceLimit[4]; /* +0x004c 65 15 00 00 */ }; struct _RPC_SECURITY_QOS_V3_A { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ unsigned long AdditionalSecurityInfoType; /* +0x0010 */ }; struct _RPC_BINDING_HANDLE_OPTIONS_V1 { unsigned long Version; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long ComTimeout; /* +0x0008 */ unsigned long CallTimeout; /* +0x000c */ }; struct _OLESTREAMVTBL { unsigned char Get[4]; /* +0x0000 90 15 00 00 */ unsigned char Put[4]; /* +0x0004 95 15 00 00 */ }; struct _WOW64_CONTEXT { unsigned long ContextFlags; /* +0x0000 */ unsigned long Dr0; /* +0x0004 */ unsigned long Dr1; /* +0x0008 */ unsigned long Dr2; /* +0x000c */ unsigned long Dr3; /* +0x0010 */ unsigned long Dr6; /* +0x0014 */ unsigned long Dr7; /* +0x0018 */ unsigned char FloatSave[112]; /* +0x001c 98 15 00 00 */ unsigned long SegGs; /* +0x008c */ unsigned long SegFs; /* +0x0090 */ unsigned long SegEs; /* +0x0094 */ unsigned long SegDs; /* +0x0098 */ unsigned long Edi; /* +0x009c */ unsigned long Esi; /* +0x00a0 */ unsigned long Ebx; /* +0x00a4 */ unsigned long Edx; /* +0x00a8 */ unsigned long Ecx; /* +0x00ac */ unsigned long Eax; /* +0x00b0 */ unsigned long Ebp; /* +0x00b4 */ unsigned long Eip; /* +0x00b8 */ unsigned long SegCs; /* +0x00bc */ unsigned long EFlags; /* +0x00c0 */ unsigned long Esp; /* +0x00c4 */ unsigned long SegSs; /* +0x00c8 */ unsigned char ExtendedRegisters[512]; /* +0x00cc 61 15 00 00 */ }; struct _PROCESSOR_POWER_POLICY_INFO { unsigned long TimeCheck; /* +0x0000 */ unsigned long DemoteLimit; /* +0x0004 */ unsigned long PromoteLimit; /* +0x0008 */ unsigned char DemotePercent; /* +0x000c */ unsigned char PromotePercent; /* +0x000d */ unsigned char Spare[2]; /* +0x000e 9c 14 00 00 */ /* unsigned char AllowDemotion[0]; +0x0010 4a 12 00 00 */ /* unsigned char AllowPromotion[0]; +0x0010 9b 15 00 00 */ unsigned char Reserved[4]; /* +0x0010 9c 15 00 00 */ }; struct tagDRAWTEXTPARAMS { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char iTabLength[4]; /* +0x0004 74 00 00 00 */ unsigned char iLeftMargin[4]; /* +0x0008 74 00 00 00 */ unsigned char iRightMargin[4]; /* +0x000c 74 00 00 00 */ unsigned char uiLengthDrawn[4]; /* +0x0010 75 00 00 00 */ }; struct _HARDWARE_COUNTER_DATA { unsigned char Type[4]; /* +0x0000 a9 15 00 00 */ unsigned long Reserved; /* +0x0004 */ unsigned long long Value; /* +0x0008 */ }; struct _PROCESSOR_RELATIONSHIP { unsigned char Flags; /* +0x0000 */ unsigned char Reserved[21]; /* +0x0001 b2 15 00 00 */ unsigned short GroupCount; /* +0x0016 */ unsigned char GroupMask[12]; /* +0x0018 b4 15 00 00 */ }; struct _GLYPHMETRICSFLOAT { unsigned char gmfBlackBoxX[4]; /* +0x0000 40 00 00 00 */ unsigned char gmfBlackBoxY[4]; /* +0x0004 40 00 00 00 */ unsigned char gmfptGlyphOrigin[8]; /* +0x0008 b7 15 00 00 */ unsigned char gmfCellIncX[4]; /* +0x0010 40 00 00 00 */ unsigned char gmfCellIncY[4]; /* +0x0014 40 00 00 00 */ }; struct _SYSTEM_ALARM_CALLBACK_ACE { unsigned char Header[4]; /* +0x0000 45 15 00 00 */ unsigned long Mask; /* +0x0004 */ unsigned long SidStart; /* +0x0008 */ }; struct _TOKEN_DEFAULT_DACL { unsigned char DefaultDacl[4]; /* +0x0000 bd 15 00 00 */ }; struct tagFONTSIGNATURE { unsigned char fsUsb[16]; /* +0x0000 c2 15 00 00 */ unsigned char fsCsb[8]; /* +0x0010 c3 15 00 00 */ }; struct tagACTCTXA { unsigned long cbSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char lpSource[4]; /* +0x0008 bf 12 00 00 */ unsigned short wProcessorArchitecture; /* +0x000c */ unsigned short wLangId; /* +0x000e */ unsigned char lpAssemblyDirectory[4]; /* +0x0010 bf 12 00 00 */ unsigned char lpResourceName[4]; /* +0x0014 bf 12 00 00 */ unsigned char lpApplicationName[4]; /* +0x0018 bf 12 00 00 */ unsigned char hModule[4]; /* +0x001c f5 12 00 00 */ }; struct _SERVICE_DELAYED_AUTO_START_INFO { unsigned char fDelayedAutostart[4]; /* +0x0000 74 00 00 00 */ }; struct tagOBJECTDESCRIPTOR { unsigned long cbSize; /* +0x0000 */ unsigned char clsid[16]; /* +0x0004 ce 13 00 00 */ unsigned long dwDrawAspect; /* +0x0014 */ unsigned char sizel[8]; /* +0x0018 21 13 00 00 */ unsigned char pointl[8]; /* +0x0020 58 12 00 00 */ unsigned long dwStatus; /* +0x0028 */ unsigned long dwFullUserTypeName; /* +0x002c */ unsigned long dwSrcOfCopy; /* +0x0030 */ }; struct tagQACONTROL { unsigned long cbSize; /* +0x0000 */ unsigned long dwMiscStatus; /* +0x0004 */ unsigned long dwViewStatus; /* +0x0008 */ unsigned long dwEventCookie; /* +0x000c */ unsigned long dwPropNotifyCookie; /* +0x0010 */ unsigned long dwPointerActivationPolicy; /* +0x0014 */ }; struct val_context { unsigned char valuelen[4]; /* +0x0000 74 00 00 00 */ void *value_context; /* +0x0004 */ void *val_buff_ptr; /* +0x0008 */ }; struct _CLIENT_CALL_RETURN { void *Pointer; /* +0x0000 */ long Simple; /* +0x0000 */ }; struct _SYSTEM_LOGICAL_PROCESSOR_INFORMATION_EX { unsigned char Relationship[4]; /* +0x0000 f4 15 00 00 */ unsigned long Size; /* +0x0004 */ /* unsigned char Processor[0]; +0x0008 f5 15 00 00 */ /* unsigned char NumaNode[0]; +0x0008 f6 15 00 00 */ /* unsigned char Cache[0]; +0x0008 f7 15 00 00 */ unsigned char Group[68]; /* +0x0008 f8 15 00 00 */ }; struct _IMAGE_FUNCTION_ENTRY64 { unsigned long long StartingAddress; /* +0x0000 */ unsigned long long EndingAddress; /* +0x0008 */ unsigned long long EndOfPrologue; /* +0x0010 */ unsigned long long UnwindInfoAddress; /* +0x0010 */ }; struct _EXIT_THREAD_DEBUG_INFO { unsigned long dwExitCode; /* +0x0000 */ }; struct _ENUM_SERVICE_STATUS_PROCESSA { char *lpServiceName; /* +0x0000 */ char *lpDisplayName; /* +0x0004 */ unsigned char ServiceStatusProcess[36]; /* +0x0008 11 14 00 00 */ }; struct _SERVICE_CUSTOM_SYSTEM_STATE_CHANGE_DATA_ITEM:: { unsigned char CustomStateId[8]; /* +0x0000 19 16 00 00 */ }; struct _SERVICE_CUSTOM_SYSTEM_STATE_CHANGE_DATA_ITEM:::: { unsigned long DataOffset; /* +0x0000 */ unsigned char Data[4]; /* +0x0004 04 12 00 00 */ }; struct _SERVICE_STATUS_PROCESS { unsigned long dwServiceType; /* +0x0000 */ unsigned long dwCurrentState; /* +0x0004 */ unsigned long dwControlsAccepted; /* +0x0008 */ unsigned long dwWin32ExitCode; /* +0x000c */ unsigned long dwServiceSpecificExitCode; /* +0x0010 */ unsigned long dwCheckPoint; /* +0x0014 */ unsigned long dwWaitHint; /* +0x0018 */ unsigned long dwProcessId; /* +0x001c */ unsigned long dwServiceFlags; /* +0x0020 */ }; struct _SERVICE_USERMODEREBOOT_INFO { unsigned long dwFlags; /* +0x0000 */ unsigned long eLowestRunLevel; /* +0x0004 */ unsigned long eHighestRunLevel; /* +0x0008 */ }; struct _QUOTA_LIMITS { unsigned long PagedPoolLimit; /* +0x0000 */ unsigned long NonPagedPoolLimit; /* +0x0004 */ unsigned long MinimumWorkingSetSize; /* +0x0008 */ unsigned long MaximumWorkingSetSize; /* +0x000c */ unsigned long PagefileLimit; /* +0x0010 */ unsigned char TimeLimit[8]; /* +0x0018 db 13 00 00 */ }; struct tagSERIALKEYSW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned char lpszActivePort[4]; /* +0x0008 71 04 00 00 */ unsigned char lpszPort[4]; /* +0x000c 71 04 00 00 */ unsigned char iBaudRate[4]; /* +0x0010 75 00 00 00 */ unsigned char iPortState[4]; /* +0x0014 75 00 00 00 */ unsigned char iActive[4]; /* +0x0018 75 00 00 00 */ }; struct _TOKEN_LINKED_TOKEN { void *LinkedToken; /* +0x0000 */ }; struct _NUMA_NODE_RELATIONSHIP { unsigned long NodeNumber; /* +0x0000 */ unsigned char Reserved[20]; /* +0x0004 e9 13 00 00 */ unsigned char GroupMask[12]; /* +0x0018 b3 15 00 00 */ }; struct _tagpropertykey { unsigned char fmtid[16]; /* +0x0000 ce 13 00 00 */ unsigned long pid; /* +0x0010 */ }; struct _ACTIVATION_CONTEXT_ASSEMBLY_DETAILED_INFORMATION { unsigned long ulFlags; /* +0x0000 */ unsigned long ulEncodedAssemblyIdentityLength; /* +0x0004 */ unsigned long ulManifestPathType; /* +0x0008 */ unsigned long ulManifestPathLength; /* +0x000c */ unsigned char liManifestLastWriteTime[8]; /* +0x0010 db 13 00 00 */ unsigned long ulPolicyPathType; /* +0x0018 */ unsigned long ulPolicyPathLength; /* +0x001c */ unsigned char liPolicyLastWriteTime[8]; /* +0x0020 db 13 00 00 */ unsigned long ulMetadataSatelliteRosterIndex; /* +0x0028 */ unsigned long ulManifestVersionMajor; /* +0x002c */ unsigned long ulManifestVersionMinor; /* +0x0030 */ unsigned long ulPolicyVersionMajor; /* +0x0034 */ unsigned long ulPolicyVersionMinor; /* +0x0038 */ unsigned long ulAssemblyDirectoryNameLength; /* +0x003c */ unsigned char lpAssemblyEncodedAssemblyIdentity[4]; /* +0x0040 4f 13 00 00 */ unsigned char lpAssemblyManifestPath[4]; /* +0x0044 4f 13 00 00 */ unsigned char lpAssemblyPolicyPath[4]; /* +0x0048 4f 13 00 00 */ unsigned char lpAssemblyDirectoryName[4]; /* +0x004c 4f 13 00 00 */ unsigned long ulFileCount; /* +0x0050 */ }; struct tagTouchPredictionParameters { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char dwLatency[4]; /* +0x0004 75 00 00 00 */ unsigned char dwSampleTime[4]; /* +0x0008 75 00 00 00 */ unsigned char bUseHWTimeStamp[4]; /* +0x000c 75 00 00 00 */ }; struct _FLAGGED_BYTE_BLOB { unsigned long fFlags; /* +0x0000 */ unsigned long clSize; /* +0x0004 */ unsigned char abData[4]; /* +0x0008 04 12 00 00 */ }; struct tagDROPSTRUCT { unsigned char hwndSource[4]; /* +0x0000 fc 11 00 00 */ unsigned char hwndSink[4]; /* +0x0004 fc 11 00 00 */ unsigned long wFmt; /* +0x0008 */ unsigned long dwData; /* +0x000c */ unsigned char ptDrop[8]; /* +0x0010 ce 12 00 00 */ unsigned long dwControlData; /* +0x0018 */ }; struct _TOKEN_GROUPS_AND_PRIVILEGES { unsigned long SidCount; /* +0x0000 */ unsigned long SidLength; /* +0x0004 */ unsigned char Sids[4]; /* +0x0008 78 16 00 00 */ unsigned long RestrictedSidCount; /* +0x000c */ unsigned long RestrictedSidLength; /* +0x0010 */ unsigned char RestrictedSids[4]; /* +0x0014 78 16 00 00 */ unsigned long PrivilegeCount; /* +0x0018 */ unsigned long PrivilegeLength; /* +0x001c */ unsigned char Privileges[4]; /* +0x0020 bb 12 00 00 */ unsigned char AuthenticationId[8]; /* +0x0024 37 13 00 00 */ }; struct _FILE_ALIGNMENT_INFO { unsigned long AlignmentRequirement; /* +0x0000 */ }; struct tagMSLLHOOKSTRUCT { unsigned char pt[8]; /* +0x0000 ce 12 00 00 */ unsigned long mouseData; /* +0x0008 */ unsigned long flags; /* +0x000c */ unsigned long time; /* +0x0010 */ unsigned long dwExtraInfo; /* +0x0014 */ }; struct tagMDICREATESTRUCTA { unsigned char szClass[4]; /* +0x0000 bf 12 00 00 */ unsigned char szTitle[4]; /* +0x0004 bf 12 00 00 */ void *hOwner; /* +0x0008 */ unsigned char x[4]; /* +0x000c 74 00 00 00 */ unsigned char y[4]; /* +0x0010 74 00 00 00 */ unsigned char cx[4]; /* +0x0014 74 00 00 00 */ unsigned char cy[4]; /* +0x0018 74 00 00 00 */ unsigned long style; /* +0x001c */ long lParam; /* +0x0020 */ }; struct _RPC_SECURITY_QOS_V2_W { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ unsigned long AdditionalSecurityInfoType; /* +0x0010 */ }; struct _RPC_SECURITY_QOS_V2_W:: { unsigned char HttpCredentials[4]; /* +0x0000 87 16 00 00 */ }; struct tagEXTLOGPEN { unsigned long elpPenStyle; /* +0x0000 */ unsigned long elpWidth; /* +0x0004 */ unsigned char elpBrushStyle[4]; /* +0x0008 75 00 00 00 */ unsigned long elpColor; /* +0x000c */ unsigned long elpHatch; /* +0x0010 */ unsigned long elpNumEntries; /* +0x0014 */ unsigned char elpStyleEntry[4]; /* +0x0018 01 12 00 00 */ }; struct _OUTLINETEXTMETRICA { unsigned char otmSize[4]; /* +0x0000 75 00 00 00 */ unsigned char otmTextMetrics[56]; /* +0x0004 91 16 00 00 */ unsigned char otmFiller; /* +0x003c */ unsigned char otmPanoseNumber[11]; /* +0x003d af 14 00 00 */ unsigned char otmfsSelection[4]; /* +0x0048 75 00 00 00 */ unsigned char otmfsType[4]; /* +0x004c 75 00 00 00 */ unsigned char otmsCharSlopeRise[4]; /* +0x0050 74 00 00 00 */ unsigned char otmsCharSlopeRun[4]; /* +0x0054 74 00 00 00 */ unsigned char otmItalicAngle[4]; /* +0x0058 74 00 00 00 */ unsigned char otmEMSquare[4]; /* +0x005c 75 00 00 00 */ unsigned char otmAscent[4]; /* +0x0060 74 00 00 00 */ unsigned char otmDescent[4]; /* +0x0064 74 00 00 00 */ unsigned char otmLineGap[4]; /* +0x0068 75 00 00 00 */ unsigned char otmsCapEmHeight[4]; /* +0x006c 75 00 00 00 */ unsigned char otmsXHeight[4]; /* +0x0070 75 00 00 00 */ unsigned char otmrcFontBox[16]; /* +0x0074 c0 12 00 00 */ unsigned char otmMacAscent[4]; /* +0x0084 74 00 00 00 */ unsigned char otmMacDescent[4]; /* +0x0088 74 00 00 00 */ unsigned char otmMacLineGap[4]; /* +0x008c 75 00 00 00 */ unsigned char otmusMinimumPPEM[4]; /* +0x0090 75 00 00 00 */ unsigned char otmptSubscriptSize[8]; /* +0x0094 ce 12 00 00 */ unsigned char otmptSubscriptOffset[8]; /* +0x009c ce 12 00 00 */ unsigned char otmptSuperscriptSize[8]; /* +0x00a4 ce 12 00 00 */ unsigned char otmptSuperscriptOffset[8]; /* +0x00ac ce 12 00 00 */ unsigned char otmsStrikeoutSize[4]; /* +0x00b4 75 00 00 00 */ unsigned char otmsStrikeoutPosition[4]; /* +0x00b8 74 00 00 00 */ unsigned char otmsUnderscoreSize[4]; /* +0x00bc 74 00 00 00 */ unsigned char otmsUnderscorePosition[4]; /* +0x00c0 74 00 00 00 */ char *otmpFamilyName; /* +0x00c4 */ char *otmpFaceName; /* +0x00c8 */ char *otmpStyleName; /* +0x00cc */ char *otmpFullName; /* +0x00d0 */ }; struct _userCLIPFORMAT { long fContext; /* +0x0000 */ }; struct _RASTERIZER_STATUS { short nSize; /* +0x0000 */ short wFlags; /* +0x0002 */ short nLanguageID; /* +0x0004 */ }; struct tagEMRPOLYTEXTOUTA { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char rclBounds[16]; /* +0x0008 f3 11 00 00 */ unsigned long iGraphicsMode; /* +0x0018 */ unsigned char exScale[4]; /* +0x001c 40 00 00 00 */ unsigned char eyScale[4]; /* +0x0020 40 00 00 00 */ long cStrings; /* +0x0024 */ unsigned char aemrtext[40]; /* +0x0028 9f 16 00 00 */ }; struct _MESSAGE_RESOURCE_BLOCK { unsigned long LowId; /* +0x0000 */ unsigned long HighId; /* +0x0004 */ unsigned long OffsetToEntries; /* +0x0008 */ }; struct tagBITMAPINFOHEADER { unsigned long biSize; /* +0x0000 */ long biWidth; /* +0x0004 */ long biHeight; /* +0x0008 */ unsigned short biPlanes; /* +0x000c */ unsigned short biBitCount; /* +0x000e */ unsigned long biCompression; /* +0x0010 */ unsigned long biSizeImage; /* +0x0014 */ long biXPelsPerMeter; /* +0x0018 */ long biYPelsPerMeter; /* +0x001c */ unsigned long biClrUsed; /* +0x0020 */ unsigned long biClrImportant; /* +0x0024 */ }; struct tagEMRSTRETCHDIBITS { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char rclBounds[16]; /* +0x0008 f3 11 00 00 */ long xDest; /* +0x0018 */ long yDest; /* +0x001c */ long xSrc; /* +0x0020 */ long ySrc; /* +0x0024 */ long cxSrc; /* +0x0028 */ long cySrc; /* +0x002c */ unsigned long offBmiSrc; /* +0x0030 */ unsigned long cbBmiSrc; /* +0x0034 */ unsigned long offBitsSrc; /* +0x0038 */ unsigned long cbBitsSrc; /* +0x003c */ unsigned long iUsageSrc; /* +0x0040 */ unsigned long dwRop; /* +0x0044 */ long cxDest; /* +0x0048 */ long cyDest; /* +0x004c */ }; struct _ITEMIDLIST { unsigned char mkid[3]; /* +0x0000 c0 16 00 00 */ }; struct ATL::_ATL_MODULE20 { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char m_hInst[4]; /* +0x0004 f5 12 00 00 */ unsigned char m_hInstResource[4]; /* +0x0008 f5 12 00 00 */ unsigned char m_hInstTypeLib[4]; /* +0x000c f5 12 00 00 */ unsigned char m_pObjMap[4]; /* +0x0010 fb 16 00 00 */ long m_nLockCnt; /* +0x0014 */ void *m_hHeap; /* +0x0018 */ unsigned char m_csTypeInfoHolder[24]; /* +0x001c fc 16 00 00 */ unsigned char m_csWindowCreate[24]; /* +0x0034 fc 16 00 00 */ unsigned char m_csObjMap[24]; /* +0x004c fc 16 00 00 */ }; struct ATL::_ATL_MODULE_21 { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char m_hInst[4]; /* +0x0004 f5 12 00 00 */ unsigned char m_hInstResource[4]; /* +0x0008 f5 12 00 00 */ unsigned char m_hInstTypeLib[4]; /* +0x000c f5 12 00 00 */ unsigned char m_pObjMap[4]; /* +0x0010 fb 16 00 00 */ long m_nLockCnt; /* +0x0014 */ void *m_hHeap; /* +0x0018 */ /* unsigned char m_csTypeInfoHolder[0]; +0x001c fc 16 00 00 */ unsigned char m_csStaticDataInit[24]; /* +0x001c fc 16 00 00 */ unsigned char m_csWindowCreate[24]; /* +0x0034 fc 16 00 00 */ unsigned char m_csObjMap[24]; /* +0x004c fc 16 00 00 */ }; struct ATL::_ATL_OBJMAP_ENTRY20 { unsigned char pclsid[4]; /* +0x0000 0b 17 00 00 */ unsigned char pfnUpdateRegistry[4]; /* +0x0004 0d 17 00 00 */ unsigned char pfnGetClassObject[4]; /* +0x0008 10 17 00 00 */ unsigned char pfnCreateInstance[4]; /* +0x000c 10 17 00 00 */ unsigned char pCF[4]; /* +0x0010 2b 15 00 00 */ unsigned long dwRegister; /* +0x0014 */ unsigned char pfnGetObjectDescription[4]; /* +0x0018 12 17 00 00 */ }; struct ATL::CDynamicStdCallThunk { unsigned char pThunk[4]; /* +0x0000 17 17 00 00 */ }; struct ATL::_ATL_MODULE_30 { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char m_hInst[4]; /* +0x0004 f5 12 00 00 */ unsigned char m_hInstResource[4]; /* +0x0008 f5 12 00 00 */ unsigned char m_hInstTypeLib[4]; /* +0x000c f5 12 00 00 */ unsigned char m_pObjMap[4]; /* +0x0010 fb 16 00 00 */ long m_nLockCnt; /* +0x0014 */ void *m_hHeap; /* +0x0018 */ /* unsigned char m_csTypeInfoHolder[0]; +0x001c fc 16 00 00 */ unsigned char m_csStaticDataInit[24]; /* +0x001c fc 16 00 00 */ unsigned char m_csWindowCreate[24]; /* +0x0034 fc 16 00 00 */ unsigned char m_csObjMap[24]; /* +0x004c fc 16 00 00 */ unsigned long dwAtlBuildVer; /* +0x0064 */ unsigned char m_pCreateWndList[4]; /* +0x0068 23 17 00 00 */ unsigned char m_bDestroyHeap[4]; /* +0x006c 30 00 00 00 */ unsigned char pguidVer[4]; /* +0x0070 78 15 00 00 */ unsigned long m_dwHeaps; /* +0x0074 */ unsigned char m_phHeaps[4]; /* +0x0078 74 12 00 00 */ unsigned char m_nHeap[4]; /* +0x007c 74 00 00 00 */ unsigned char m_pTermFuncs[4]; /* +0x0080 25 17 00 00 */ }; struct ATL::_ATL_OBJMAP_ENTRY { unsigned char pclsid[4]; /* +0x0000 0b 17 00 00 */ unsigned char pfnUpdateRegistry[4]; /* +0x0004 0d 17 00 00 */ unsigned char pfnGetClassObject[4]; /* +0x0008 10 17 00 00 */ unsigned char pfnCreateInstance[4]; /* +0x000c 10 17 00 00 */ unsigned char pCF[4]; /* +0x0010 2b 15 00 00 */ unsigned long dwRegister; /* +0x0014 */ unsigned char pfnGetObjectDescription[4]; /* +0x0018 12 17 00 00 */ unsigned char pfnGetCategoryMap[8]; /* +0x001c 2c 17 00 00 */ }; struct _TRIVERTEX { long x; /* +0x0000 */ long y; /* +0x0004 */ unsigned short Red; /* +0x0008 */ unsigned short Green; /* +0x000a */ unsigned short Blue; /* +0x000c */ unsigned short Alpha; /* +0x000e */ }; struct DISPLAYCONFIG_TARGET_DEVICE_NAME_FLAGS { /* unsigned char friendlyNameFromEdid[0]; +0x0000 40 17 00 00 */ /* unsigned char friendlyNameForced[0]; +0x0000 41 17 00 00 */ /* unsigned char edidIdsValid[0]; +0x0000 42 17 00 00 */ /* unsigned char reserved[0]; +0x0000 43 17 00 00 */ unsigned char value[4]; /* +0x0000 75 00 00 00 */ }; struct _OUTLINETEXTMETRICW { unsigned char otmSize[4]; /* +0x0000 75 00 00 00 */ unsigned char otmTextMetrics[60]; /* +0x0004 46 17 00 00 */ unsigned char otmFiller; /* +0x0040 */ unsigned char otmPanoseNumber[11]; /* +0x0041 af 14 00 00 */ unsigned char otmfsSelection[4]; /* +0x004c 75 00 00 00 */ unsigned char otmfsType[4]; /* +0x0050 75 00 00 00 */ unsigned char otmsCharSlopeRise[4]; /* +0x0054 74 00 00 00 */ unsigned char otmsCharSlopeRun[4]; /* +0x0058 74 00 00 00 */ unsigned char otmItalicAngle[4]; /* +0x005c 74 00 00 00 */ unsigned char otmEMSquare[4]; /* +0x0060 75 00 00 00 */ unsigned char otmAscent[4]; /* +0x0064 74 00 00 00 */ unsigned char otmDescent[4]; /* +0x0068 74 00 00 00 */ unsigned char otmLineGap[4]; /* +0x006c 75 00 00 00 */ unsigned char otmsCapEmHeight[4]; /* +0x0070 75 00 00 00 */ unsigned char otmsXHeight[4]; /* +0x0074 75 00 00 00 */ unsigned char otmrcFontBox[16]; /* +0x0078 c0 12 00 00 */ unsigned char otmMacAscent[4]; /* +0x0088 74 00 00 00 */ unsigned char otmMacDescent[4]; /* +0x008c 74 00 00 00 */ unsigned char otmMacLineGap[4]; /* +0x0090 75 00 00 00 */ unsigned char otmusMinimumPPEM[4]; /* +0x0094 75 00 00 00 */ unsigned char otmptSubscriptSize[8]; /* +0x0098 ce 12 00 00 */ unsigned char otmptSubscriptOffset[8]; /* +0x00a0 ce 12 00 00 */ unsigned char otmptSuperscriptSize[8]; /* +0x00a8 ce 12 00 00 */ unsigned char otmptSuperscriptOffset[8]; /* +0x00b0 ce 12 00 00 */ unsigned char otmsStrikeoutSize[4]; /* +0x00b8 75 00 00 00 */ unsigned char otmsStrikeoutPosition[4]; /* +0x00bc 74 00 00 00 */ unsigned char otmsUnderscoreSize[4]; /* +0x00c0 74 00 00 00 */ unsigned char otmsUnderscorePosition[4]; /* +0x00c4 74 00 00 00 */ char *otmpFamilyName; /* +0x00c8 */ char *otmpFaceName; /* +0x00cc */ char *otmpStyleName; /* +0x00d0 */ char *otmpFullName; /* +0x00d4 */ }; struct tagRAWKEYBOARD { unsigned short MakeCode; /* +0x0000 */ unsigned short Flags; /* +0x0002 */ unsigned short Reserved; /* +0x0004 */ unsigned short VKey; /* +0x0006 */ unsigned char Message[4]; /* +0x0008 75 00 00 00 */ unsigned long ExtraInformation; /* +0x000c */ }; struct _DOCINFOA { unsigned char cbSize[4]; /* +0x0000 74 00 00 00 */ unsigned char lpszDocName[4]; /* +0x0004 bf 12 00 00 */ unsigned char lpszOutput[4]; /* +0x0008 bf 12 00 00 */ unsigned char lpszDatatype[4]; /* +0x000c bf 12 00 00 */ unsigned long fwType; /* +0x0010 */ }; struct tagEMRSELECTCLIPPATH { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned long iMode; /* +0x0008 */ }; struct tagICEXYZTRIPLE { unsigned char ciexyzRed[12]; /* +0x0000 54 17 00 00 */ unsigned char ciexyzGreen[12]; /* +0x000c 54 17 00 00 */ unsigned char ciexyzBlue[12]; /* +0x0018 54 17 00 00 */ }; struct _RPC_BINDING_HANDLE_SECURITY_V1_W { unsigned long Version; /* +0x0000 */ unsigned short *ServerPrincName; /* +0x0004 */ unsigned long AuthnLevel; /* +0x0008 */ unsigned long AuthnSvc; /* +0x000c */ unsigned char AuthIdentity[4]; /* +0x0010 59 17 00 00 */ unsigned char SecurityQos[4]; /* +0x0014 5b 17 00 00 */ }; struct _TOKEN_SOURCE { unsigned char SourceName[8]; /* +0x0000 5e 17 00 00 */ unsigned char SourceIdentifier[8]; /* +0x0008 37 13 00 00 */ }; struct _BLENDFUNCTION { unsigned char BlendOp; /* +0x0000 */ unsigned char BlendFlags; /* +0x0001 */ unsigned char SourceConstantAlpha; /* +0x0002 */ unsigned char AlphaFormat; /* +0x0003 */ }; struct _SERVICE_RUNLEVEL_INFO { unsigned long eLowestRunLevel; /* +0x0000 */ }; struct _RPC_PROTSEQ_VECTORW { unsigned char Count[4]; /* +0x0000 75 00 00 00 */ unsigned char Protseq[4]; /* +0x0004 7b 17 00 00 */ }; struct tagGESTURECONFIG { unsigned long dwID; /* +0x0000 */ unsigned long dwWant; /* +0x0004 */ unsigned long dwBlock; /* +0x0008 */ }; struct _TRANSACTION_BIND_INFORMATION { void *TmHandle; /* +0x0000 */ }; struct tagENUMTEXTMETRICA { unsigned char etmNewTextMetricEx[96]; /* +0x0000 cf 17 00 00 */ unsigned char etmAxesList[392]; /* +0x0060 d0 17 00 00 */ }; struct _ASSEMBLY_FILE_DETAILED_INFORMATION { unsigned long ulFlags; /* +0x0000 */ unsigned long ulFilenameLength; /* +0x0004 */ unsigned long ulPathLength; /* +0x0008 */ unsigned char lpFileName[4]; /* +0x000c 4f 13 00 00 */ unsigned char lpFilePath[4]; /* +0x0010 4f 13 00 00 */ }; struct _SERVICE_NOTIFY_2W { unsigned long dwVersion; /* +0x0000 */ unsigned char pfnNotifyCallback[4]; /* +0x0004 10 14 00 00 */ void *pContext; /* +0x0008 */ unsigned long dwNotificationStatus; /* +0x000c */ unsigned char ServiceStatus[36]; /* +0x0010 11 14 00 00 */ unsigned long dwNotificationTriggered; /* +0x0034 */ unsigned char pszServiceNames[4]; /* +0x0038 71 04 00 00 */ }; struct _STARTUPINFOEXW { unsigned char StartupInfo[68]; /* +0x0000 94 14 00 00 */ unsigned char lpAttributeList[4]; /* +0x0044 e7 17 00 00 */ }; struct tagEMR { unsigned long iType; /* +0x0000 */ unsigned long nSize; /* +0x0004 */ }; struct tagEMRCREATEDIBPATTERNBRUSHPT { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned long ihBrush; /* +0x0008 */ unsigned long iUsage; /* +0x000c */ unsigned long offBmi; /* +0x0010 */ unsigned long cbBmi; /* +0x0014 */ unsigned long offBits; /* +0x0018 */ unsigned long cbBits; /* +0x001c */ }; struct tagRemSTGMEDIUM { unsigned long tymed; /* +0x0000 */ unsigned long dwHandleType; /* +0x0004 */ unsigned long pData; /* +0x0008 */ unsigned long pUnkForRelease; /* +0x000c */ unsigned long cbData; /* +0x0010 */ unsigned char data[4]; /* +0x0014 04 12 00 00 */ }; struct _KTMOBJECT_CURSOR { unsigned char LastQuery[16]; /* +0x0000 ce 13 00 00 */ unsigned long ObjectIdCount; /* +0x0010 */ unsigned char ObjectIds[16]; /* +0x0014 f1 17 00 00 */ }; struct tagPOINTS { short x; /* +0x0000 */ short y; /* +0x0002 */ }; struct tagINPUT { unsigned long type; /* +0x0000 */ /* unsigned char mi[0]; +0x0004 f6 17 00 00 */ /* unsigned char ki[0]; +0x0004 f7 17 00 00 */ unsigned char hi[24]; /* +0x0004 f8 17 00 00 */ }; struct tagLICINFO { long cbLicInfo; /* +0x0000 */ unsigned char fRuntimeKeyAvail[4]; /* +0x0004 74 00 00 00 */ unsigned char fLicVerified[4]; /* +0x0008 74 00 00 00 */ }; struct _KCRM_PROTOCOL_BLOB { unsigned char ProtocolId[16]; /* +0x0000 ce 13 00 00 */ unsigned long StaticInfoLength; /* +0x0010 */ unsigned long TransactionIdInfoLength; /* +0x0014 */ unsigned long Unused1; /* +0x0018 */ unsigned long Unused2; /* +0x001c */ }; struct tagEXTLOGFONTW { unsigned char elfLogFont[92]; /* +0x0000 04 14 00 00 */ unsigned char elfFullName[128]; /* +0x005c 0f 18 00 00 */ unsigned char elfStyle[64]; /* +0x00dc 7c 13 00 00 */ unsigned long elfVersion; /* +0x011c */ unsigned long elfStyleSize; /* +0x0120 */ unsigned long elfMatch; /* +0x0124 */ unsigned long elfReserved; /* +0x0128 */ unsigned char elfVendorId[4]; /* +0x012c ae 14 00 00 */ unsigned long elfCulture; /* +0x0130 */ unsigned char elfPanose[12]; /* +0x0134 af 14 00 00 */ }; struct tagPOINTFX { unsigned char x[4]; /* +0x0000 2e 14 00 00 */ unsigned char y[4]; /* +0x0004 2e 14 00 00 */ }; struct _COMMPROP { unsigned short wPacketLength; /* +0x0000 */ unsigned short wPacketVersion; /* +0x0002 */ unsigned long dwServiceMask; /* +0x0004 */ unsigned long dwReserved1; /* +0x0008 */ unsigned long dwMaxTxQueue; /* +0x000c */ unsigned long dwMaxRxQueue; /* +0x0010 */ unsigned long dwMaxBaud; /* +0x0014 */ unsigned long dwProvSubType; /* +0x0018 */ unsigned long dwProvCapabilities; /* +0x001c */ unsigned long dwSettableParams; /* +0x0020 */ unsigned long dwSettableBaud; /* +0x0024 */ unsigned short wSettableData; /* +0x0028 */ unsigned short wSettableStopParity; /* +0x002a */ unsigned long dwCurrentTxQueue; /* +0x002c */ unsigned long dwCurrentRxQueue; /* +0x0030 */ unsigned long dwProvSpec1; /* +0x0034 */ unsigned long dwProvSpec2; /* +0x0038 */ unsigned char wcProvChar[4]; /* +0x003c 83 12 00 00 */ }; struct _WIN32_MEMORY_RANGE_ENTRY { void *VirtualAddress; /* +0x0000 */ unsigned long NumberOfBytes; /* +0x0004 */ }; struct tagPAINTSTRUCT { unsigned char hdc[4]; /* +0x0000 32 18 00 00 */ unsigned char fErase[4]; /* +0x0004 74 00 00 00 */ unsigned char rcPaint[16]; /* +0x0008 c0 12 00 00 */ unsigned char fRestore[4]; /* +0x0018 74 00 00 00 */ unsigned char fIncUpdate[4]; /* +0x001c 74 00 00 00 */ unsigned char rgbReserved[32]; /* +0x0020 ad 14 00 00 */ }; struct _DISCDLGSTRUCTA { unsigned long cbStructure; /* +0x0000 */ unsigned char hwndOwner[4]; /* +0x0004 fc 11 00 00 */ char *lpLocalName; /* +0x0008 */ char *lpRemoteName; /* +0x000c */ unsigned long dwFlags; /* +0x0010 */ }; struct _DCB { unsigned long DCBlength; /* +0x0000 */ unsigned long BaudRate; /* +0x0004 */ /* unsigned char fBinary[0]; +0x0008 4a 12 00 00 */ /* unsigned char fParity[0]; +0x0008 9b 15 00 00 */ /* unsigned char fOutxCtsFlow[0]; +0x0008 68 18 00 00 */ /* unsigned char fOutxDsrFlow[0]; +0x0008 69 18 00 00 */ /* unsigned char fDtrControl[0]; +0x0008 6a 18 00 00 */ /* unsigned char fDsrSensitivity[0]; +0x0008 6b 18 00 00 */ /* unsigned char fTXContinueOnXoff[0]; +0x0008 6c 18 00 00 */ /* unsigned char fOutX[0]; +0x0008 6d 18 00 00 */ /* unsigned char fInX[0]; +0x0008 6e 18 00 00 */ /* unsigned char fErrorChar[0]; +0x0008 6f 18 00 00 */ /* unsigned char fNull[0]; +0x0008 70 18 00 00 */ /* unsigned char fRtsControl[0]; +0x0008 71 18 00 00 */ /* unsigned char fAbortOnError[0]; +0x0008 72 18 00 00 */ unsigned char fDummy2[4]; /* +0x0008 73 18 00 00 */ unsigned short wReserved; /* +0x000c */ unsigned short XonLim; /* +0x000e */ unsigned short XoffLim; /* +0x0010 */ unsigned char ByteSize; /* +0x0012 */ unsigned char Parity; /* +0x0013 */ unsigned char StopBits; /* +0x0014 */ char XonChar; /* +0x0015 */ char XoffChar; /* +0x0016 */ char ErrorChar; /* +0x0017 */ char EofChar; /* +0x0018 */ char EvtChar; /* +0x0019 */ unsigned short wReserved1; /* +0x001a */ }; struct _SINGLE_LIST_ENTRY { unsigned char Next[4]; /* +0x0000 79 18 00 00 */ }; struct tagEMREXCLUDECLIPRECT { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char rclClip[16]; /* +0x0008 f3 11 00 00 */ }; struct tagEMRSETDIBITSTODEVICE { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char rclBounds[16]; /* +0x0008 f3 11 00 00 */ long xDest; /* +0x0018 */ long yDest; /* +0x001c */ long xSrc; /* +0x0020 */ long ySrc; /* +0x0024 */ long cxSrc; /* +0x0028 */ long cySrc; /* +0x002c */ unsigned long offBmiSrc; /* +0x0030 */ unsigned long cbBmiSrc; /* +0x0034 */ unsigned long offBitsSrc; /* +0x0038 */ unsigned long cbBitsSrc; /* +0x003c */ unsigned long iUsageSrc; /* +0x0040 */ unsigned long iStartScan; /* +0x0044 */ unsigned long cScans; /* +0x0048 */ }; struct _RPC_SECURITY_QOS_V3_W { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ unsigned long AdditionalSecurityInfoType; /* +0x0010 */ }; struct _XSAVE_FORMAT { unsigned short ControlWord; /* +0x0000 */ unsigned short StatusWord; /* +0x0002 */ unsigned char TagWord; /* +0x0004 */ unsigned char Reserved1; /* +0x0005 */ unsigned short ErrorOpcode; /* +0x0006 */ unsigned long ErrorOffset; /* +0x0008 */ unsigned short ErrorSelector; /* +0x000c */ unsigned short Reserved2; /* +0x000e */ unsigned long DataOffset; /* +0x0010 */ unsigned short DataSelector; /* +0x0014 */ unsigned short Reserved3; /* +0x0016 */ unsigned long MxCsr; /* +0x0018 */ unsigned long MxCsr_Mask; /* +0x001c */ unsigned char FloatRegisters[128]; /* +0x0020 8d 18 00 00 */ unsigned char XmmRegisters[128]; /* +0x00a0 8d 18 00 00 */ unsigned char Reserved4[220]; /* +0x0120 8e 18 00 00 */ unsigned long Cr0NpxState; /* +0x01fc */ }; struct _WIN32_FIND_DATAW { unsigned long dwFileAttributes; /* +0x0000 */ unsigned char ftCreationTime[8]; /* +0x0004 91 14 00 00 */ unsigned char ftLastAccessTime[8]; /* +0x000c 91 14 00 00 */ unsigned char ftLastWriteTime[8]; /* +0x0014 91 14 00 00 */ unsigned long nFileSizeHigh; /* +0x001c */ unsigned long nFileSizeLow; /* +0x0020 */ unsigned long dwReserved0; /* +0x0024 */ unsigned long dwReserved1; /* +0x0028 */ unsigned char cFileName[520]; /* +0x002c a8 13 00 00 */ unsigned char cAlternateFileName[28]; /* +0x0234 91 18 00 00 */ }; struct _GRADIENT_TRIANGLE { unsigned long Vertex1; /* +0x0000 */ unsigned long Vertex2; /* +0x0004 */ unsigned long Vertex3; /* +0x0008 */ }; struct _MODEMSETTINGS { unsigned long dwActualSize; /* +0x0000 */ unsigned long dwRequiredSize; /* +0x0004 */ unsigned long dwDevSpecificOffset; /* +0x0008 */ unsigned long dwDevSpecificSize; /* +0x000c */ unsigned long dwCallSetupFailTimer; /* +0x0010 */ unsigned long dwInactivityTimeout; /* +0x0014 */ unsigned long dwSpeakerVolume; /* +0x0018 */ unsigned long dwSpeakerMode; /* +0x001c */ unsigned long dwPreferredModemOptions; /* +0x0020 */ unsigned long dwNegotiatedModemOptions; /* +0x0024 */ unsigned long dwNegotiatedDCERate; /* +0x0028 */ unsigned char abVariablePortion[4]; /* +0x002c 04 12 00 00 */ }; struct _CACHE_RELATIONSHIP { unsigned char Level; /* +0x0000 */ unsigned char Associativity; /* +0x0001 */ unsigned short LineSize; /* +0x0002 */ unsigned long CacheSize; /* +0x0004 */ unsigned char Type[4]; /* +0x0008 9f 18 00 00 */ unsigned char Reserved[20]; /* +0x000c e9 13 00 00 */ unsigned char GroupMask[12]; /* +0x0020 b3 15 00 00 */ }; struct _IMAGE_ROM_HEADERS { unsigned char FileHeader[20]; /* +0x0000 01 15 00 00 */ unsigned char OptionalHeader[56]; /* +0x0014 a8 18 00 00 */ }; struct tagSCROLLBARINFO { unsigned long cbSize; /* +0x0000 */ unsigned char rcScrollBar[16]; /* +0x0004 c0 12 00 00 */ unsigned char dxyLineButton[4]; /* +0x0014 74 00 00 00 */ unsigned char xyThumbTop[4]; /* +0x0018 74 00 00 00 */ unsigned char xyThumbBottom[4]; /* +0x001c 74 00 00 00 */ unsigned char reserved[4]; /* +0x0020 74 00 00 00 */ unsigned char rgstate[24]; /* +0x0024 ab 18 00 00 */ }; struct _IMAGE_DEBUG_DIRECTORY { unsigned long Characteristics; /* +0x0000 */ unsigned long TimeDateStamp; /* +0x0004 */ unsigned short MajorVersion; /* +0x0008 */ unsigned short MinorVersion; /* +0x000a */ unsigned long Type; /* +0x000c */ unsigned long SizeOfData; /* +0x0010 */ unsigned long AddressOfRawData; /* +0x0014 */ unsigned long PointerToRawData; /* +0x0018 */ }; struct _RPC_BINDING_HANDLE_TEMPLATE_V1_A { unsigned long Version; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long ProtocolSequence; /* +0x0008 */ unsigned char *NetworkAddress; /* +0x000c */ unsigned char *StringEndpoint; /* +0x0010 */ }; struct _RPC_BINDING_HANDLE_TEMPLATE_V1_A:: { unsigned char *Reserved; /* +0x0000 */ }; struct tagPARSEDURLA { unsigned long cbSize; /* +0x0000 */ unsigned char pszProtocol[4]; /* +0x0004 bf 12 00 00 */ unsigned char cchProtocol[4]; /* +0x0008 75 00 00 00 */ unsigned char pszSuffix[4]; /* +0x000c bf 12 00 00 */ unsigned char cchSuffix[4]; /* +0x0010 75 00 00 00 */ unsigned char nScheme[4]; /* +0x0014 75 00 00 00 */ }; struct _TOKEN_USER { unsigned char User[8]; /* +0x0000 39 14 00 00 */ }; struct tagEMRANGLEARC { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char ptlCenter[8]; /* +0x0008 58 12 00 00 */ unsigned long nRadius; /* +0x0010 */ unsigned char eStartAngle[4]; /* +0x0014 40 00 00 00 */ unsigned char eSweepAngle[4]; /* +0x0018 40 00 00 00 */ }; struct tagEMRSETARCDIRECTION { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned long iArcDirection; /* +0x0008 */ }; struct _TAPE_SET_POSITION { unsigned long Method; /* +0x0000 */ unsigned long Partition; /* +0x0004 */ unsigned char Offset[8]; /* +0x0008 db 13 00 00 */ unsigned char Immediate; /* +0x0010 */ }; struct _CONNECTDLGSTRUCTA { unsigned long cbStructure; /* +0x0000 */ unsigned char hwndOwner[4]; /* +0x0004 fc 11 00 00 */ unsigned char lpConnRes[4]; /* +0x0008 d4 17 00 00 */ unsigned long dwFlags; /* +0x000c */ unsigned long dwDevNum; /* +0x0010 */ }; struct _POWER_USER_PRESENCE { unsigned char UserPresence[4]; /* +0x0000 f7 18 00 00 */ }; struct _EXCEPTION_DEBUG_INFO { unsigned char ExceptionRecord[80]; /* +0x0000 ff 18 00 00 */ unsigned long dwFirstChance; /* +0x0050 */ }; struct tagNEWTEXTMETRICEXA { unsigned char ntmTm[72]; /* +0x0000 02 19 00 00 */ unsigned char ntmFontSig[24]; /* +0x0048 03 19 00 00 */ }; struct _TRANSACTION_LIST_ENTRY { unsigned char UOW[16]; /* +0x0000 ce 13 00 00 */ }; struct tagACCEL { unsigned char fVirt; /* +0x0000 */ unsigned short key; /* +0x0002 */ unsigned short cmd; /* +0x0004 */ }; struct tagLOGFONTW { long lfHeight; /* +0x0000 */ long lfWidth; /* +0x0004 */ long lfEscapement; /* +0x0008 */ long lfOrientation; /* +0x000c */ long lfWeight; /* +0x0010 */ unsigned char lfItalic; /* +0x0014 */ unsigned char lfUnderline; /* +0x0015 */ unsigned char lfStrikeOut; /* +0x0016 */ unsigned char lfCharSet; /* +0x0017 */ unsigned char lfOutPrecision; /* +0x0018 */ unsigned char lfClipPrecision; /* +0x0019 */ unsigned char lfQuality; /* +0x001a */ unsigned char lfPitchAndFamily; /* +0x001b */ unsigned char lfFaceName[64]; /* +0x001c 7c 13 00 00 */ }; struct tagEMRARC { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char rclBox[16]; /* +0x0008 f3 11 00 00 */ unsigned char ptlStart[8]; /* +0x0018 58 12 00 00 */ unsigned char ptlEnd[8]; /* +0x0020 58 12 00 00 */ }; struct tagCOPYDATASTRUCT { unsigned long dwData; /* +0x0000 */ unsigned long cbData; /* +0x0004 */ void *lpData; /* +0x0008 */ }; struct tagMINIMIZEDMETRICS { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char iWidth[4]; /* +0x0004 74 00 00 00 */ unsigned char iHorzGap[4]; /* +0x0008 74 00 00 00 */ unsigned char iVertGap[4]; /* +0x000c 74 00 00 00 */ unsigned char iArrange[4]; /* +0x0010 74 00 00 00 */ }; struct tagINPUT_MESSAGE_SOURCE { unsigned char deviceType[4]; /* +0x0000 2e 19 00 00 */ unsigned char originId[4]; /* +0x0004 2f 19 00 00 */ }; struct _IMAGE_ALPHA_RUNTIME_FUNCTION_ENTRY { unsigned long BeginAddress; /* +0x0000 */ unsigned long EndAddress; /* +0x0004 */ unsigned long ExceptionHandler; /* +0x0008 */ unsigned long HandlerData; /* +0x000c */ unsigned long PrologEndAddress; /* +0x0010 */ }; struct _RESOURCEMANAGER_BASIC_INFORMATION { unsigned char ResourceManagerId[16]; /* +0x0000 ce 13 00 00 */ unsigned long DescriptionLength; /* +0x0010 */ unsigned char Description[4]; /* +0x0014 83 12 00 00 */ }; struct tagHELPWININFOA { unsigned char wStructSize[4]; /* +0x0000 74 00 00 00 */ unsigned char x[4]; /* +0x0004 74 00 00 00 */ unsigned char y[4]; /* +0x0008 74 00 00 00 */ unsigned char dx[4]; /* +0x000c 74 00 00 00 */ unsigned char dy[4]; /* +0x0010 74 00 00 00 */ unsigned char wMax[4]; /* +0x0014 74 00 00 00 */ unsigned char rgchMember[4]; /* +0x0018 38 19 00 00 */ }; struct _COMPATIBILITY_CONTEXT_ELEMENT { unsigned char Id[16]; /* +0x0000 ce 13 00 00 */ unsigned char Type[4]; /* +0x0010 3b 19 00 00 */ }; struct tagENUMLOGFONTEXDVA { unsigned char elfEnumLogfontEx[188]; /* +0x0000 4c 19 00 00 */ unsigned char elfDesignVector[72]; /* +0x00bc 4d 19 00 00 */ }; struct _HEAP_SUMMARY { unsigned long cb; /* +0x0000 */ unsigned long cbAllocated; /* +0x0004 */ unsigned long cbCommitted; /* +0x0008 */ unsigned long cbReserved; /* +0x000c */ unsigned long cbMaxReserve; /* +0x0010 */ }; struct tagTITLEBARINFO { unsigned long cbSize; /* +0x0000 */ unsigned char rcTitleBar[16]; /* +0x0004 c0 12 00 00 */ unsigned char rgstate[24]; /* +0x0014 ab 18 00 00 */ }; struct _RPC_IF_ID { unsigned char Uuid[16]; /* +0x0000 ce 13 00 00 */ unsigned short VersMajor; /* +0x0010 */ unsigned short VersMinor; /* +0x0012 */ }; struct _userHMETAFILE { long fContext; /* +0x0000 */ }; struct tagAXISINFOW { long axMinValue; /* +0x0000 */ long axMaxValue; /* +0x0004 */ unsigned char axAxisName[32]; /* +0x0008 a4 19 00 00 */ }; struct _MIDL_SYNTAX_INFO { unsigned char TransferSyntax[20]; /* +0x0000 24 14 00 00 */ unsigned char DispatchTable[4]; /* +0x0014 a8 19 00 00 */ unsigned char ProcString[4]; /* +0x0018 aa 19 00 00 */ unsigned char FmtStringOffset[4]; /* +0x001c ac 19 00 00 */ unsigned char TypeString[4]; /* +0x0020 aa 19 00 00 */ unsigned char aUserMarshalQuadruple[4]; /* +0x0024 92 15 00 00 */ unsigned long pReserved1; /* +0x0028 */ unsigned long pReserved2; /* +0x002c */ }; struct tagRemFORMATETC { unsigned long cfFormat; /* +0x0000 */ unsigned long ptd; /* +0x0004 */ unsigned long dwAspect; /* +0x0008 */ long lindex; /* +0x000c */ unsigned long tymed; /* +0x0010 */ }; struct tagENUMLOGFONTA { unsigned char elfLogFont[60]; /* +0x0000 0b 14 00 00 */ unsigned char elfFullName[64]; /* +0x003c ac 14 00 00 */ unsigned char elfStyle[32]; /* +0x007c ad 14 00 00 */ }; struct tagMOUSEHOOKSTRUCT { unsigned char pt[8]; /* +0x0000 ce 12 00 00 */ unsigned char hwnd[4]; /* +0x0008 fc 11 00 00 */ unsigned char wHitTestCode[4]; /* +0x000c 75 00 00 00 */ unsigned long dwExtraInfo; /* +0x0010 */ }; struct tagMOUSEKEYS { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned long iMaxSpeed; /* +0x0008 */ unsigned long iTimeToMaxSpeed; /* +0x000c */ unsigned long iCtrlSpeed; /* +0x0010 */ unsigned long dwReserved1; /* +0x0014 */ unsigned long dwReserved2; /* +0x0018 */ }; struct _RPC_POLICY { unsigned char Length[4]; /* +0x0000 75 00 00 00 */ unsigned long EndpointFlags; /* +0x0004 */ unsigned long NICFlags; /* +0x0008 */ }; struct _JOBOBJECT_SECURITY_LIMIT_INFORMATION { unsigned long SecurityLimitFlags; /* +0x0000 */ void *JobToken; /* +0x0004 */ unsigned char SidsToDisable[4]; /* +0x0008 ca 19 00 00 */ unsigned char PrivilegesToDelete[4]; /* +0x000c cc 19 00 00 */ unsigned char RestrictedSids[4]; /* +0x0010 ca 19 00 00 */ }; struct _JOBOBJECT_CPU_RATE_CONTROL_INFORMATION { unsigned long ControlFlags; /* +0x0000 */ unsigned long CpuRate; /* +0x0004 */ unsigned long Weight; /* +0x0004 */ }; struct tagAXISINFOA { long axMinValue; /* +0x0000 */ long axMaxValue; /* +0x0004 */ unsigned char axAxisName[16]; /* +0x0008 d3 19 00 00 */ }; struct _IMAGE_CE_RUNTIME_FUNCTION_ENTRY { unsigned long FuncStart; /* +0x0000 */ /* unsigned char PrologLen[0]; +0x0004 dc 19 00 00 */ /* unsigned char FuncLen[0]; +0x0004 dd 19 00 00 */ /* unsigned char ThirtyTwoBit[0]; +0x0004 de 19 00 00 */ unsigned char ExceptionFlag[4]; /* +0x0004 ed 14 00 00 */ }; struct tagSERIALKEYSA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ char *lpszActivePort; /* +0x0008 */ char *lpszPort; /* +0x000c */ unsigned char iBaudRate[4]; /* +0x0010 75 00 00 00 */ unsigned char iPortState[4]; /* +0x0014 75 00 00 00 */ unsigned char iActive[4]; /* +0x0018 75 00 00 00 */ }; struct _wireSAFEARR_HAVEIID { unsigned long Size; /* +0x0000 */ unsigned char apUnknown[4]; /* +0x0004 f2 19 00 00 */ unsigned char iid[16]; /* +0x0008 ce 13 00 00 */ }; struct ANON_OBJECT_HEADER { unsigned short Sig1; /* +0x0000 */ unsigned short Sig2; /* +0x0002 */ unsigned short Version; /* +0x0004 */ unsigned short Machine; /* +0x0006 */ unsigned long TimeDateStamp; /* +0x0008 */ unsigned char ClassID[16]; /* +0x000c ce 13 00 00 */ unsigned long SizeOfData; /* +0x001c */ }; struct _RTL_CRITICAL_SECTION_DEBUG { unsigned short Type; /* +0x0000 */ unsigned short CreatorBackTraceIndex; /* +0x0002 */ unsigned char CriticalSection[4]; /* +0x0004 9e 18 00 00 */ unsigned char ProcessLocksList[8]; /* +0x0008 f7 19 00 00 */ unsigned long EntryCount; /* +0x0010 */ unsigned long ContentionCount; /* +0x0014 */ unsigned long Flags; /* +0x0018 */ unsigned short CreatorBackTraceIndexHigh; /* +0x001c */ unsigned short SpareWORD; /* +0x001e */ }; struct _BYTE_BLOB { unsigned long clSize; /* +0x0000 */ unsigned char abData[4]; /* +0x0004 04 12 00 00 */ }; struct tagEMREXTESCAPE { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char iEscape[4]; /* +0x0008 74 00 00 00 */ unsigned char cbEscData[4]; /* +0x000c 74 00 00 00 */ unsigned char EscData[4]; /* +0x0010 04 12 00 00 */ }; struct tagEVENTMSG { unsigned char message[4]; /* +0x0000 75 00 00 00 */ unsigned char paramL[4]; /* +0x0004 75 00 00 00 */ unsigned char paramH[4]; /* +0x0008 75 00 00 00 */ unsigned long time; /* +0x000c */ unsigned char hwnd[4]; /* +0x0010 fc 11 00 00 */ }; struct _SID_IDENTIFIER_AUTHORITY { unsigned char Value[6]; /* +0x0000 08 1a 00 00 */ }; struct _GUID { unsigned long Data1; /* +0x0000 */ unsigned short Data2; /* +0x0004 */ unsigned short Data3; /* +0x0006 */ unsigned char Data4[8]; /* +0x0008 20 1a 00 00 */ }; struct _CACHE_DESCRIPTOR { unsigned char Level; /* +0x0000 */ unsigned char Associativity; /* +0x0001 */ unsigned short LineSize; /* +0x0002 */ unsigned long Size; /* +0x0004 */ unsigned char Type[4]; /* +0x0008 9f 18 00 00 */ }; struct _IMAGE_VXD_HEADER { unsigned short e32_magic; /* +0x0000 */ unsigned char e32_border; /* +0x0002 */ unsigned char e32_worder; /* +0x0003 */ unsigned long e32_level; /* +0x0004 */ unsigned short e32_cpu; /* +0x0008 */ unsigned short e32_os; /* +0x000a */ unsigned long e32_ver; /* +0x000c */ unsigned long e32_mflags; /* +0x0010 */ unsigned long e32_mpages; /* +0x0014 */ unsigned long e32_startobj; /* +0x0018 */ unsigned long e32_eip; /* +0x001c */ unsigned long e32_stackobj; /* +0x0020 */ unsigned long e32_esp; /* +0x0024 */ unsigned long e32_pagesize; /* +0x0028 */ unsigned long e32_lastpagesize; /* +0x002c */ unsigned long e32_fixupsize; /* +0x0030 */ unsigned long e32_fixupsum; /* +0x0034 */ unsigned long e32_ldrsize; /* +0x0038 */ unsigned long e32_ldrsum; /* +0x003c */ unsigned long e32_objtab; /* +0x0040 */ unsigned long e32_objcnt; /* +0x0044 */ unsigned long e32_objmap; /* +0x0048 */ unsigned long e32_itermap; /* +0x004c */ unsigned long e32_rsrctab; /* +0x0050 */ unsigned long e32_rsrccnt; /* +0x0054 */ unsigned long e32_restab; /* +0x0058 */ unsigned long e32_enttab; /* +0x005c */ unsigned long e32_dirtab; /* +0x0060 */ unsigned long e32_dircnt; /* +0x0064 */ unsigned long e32_fpagetab; /* +0x0068 */ unsigned long e32_frectab; /* +0x006c */ unsigned long e32_impmod; /* +0x0070 */ unsigned long e32_impmodcnt; /* +0x0074 */ unsigned long e32_impproc; /* +0x0078 */ unsigned long e32_pagesum; /* +0x007c */ unsigned long e32_datapage; /* +0x0080 */ unsigned long e32_preload; /* +0x0084 */ unsigned long e32_nrestab; /* +0x0088 */ unsigned long e32_cbnrestab; /* +0x008c */ unsigned long e32_nressum; /* +0x0090 */ unsigned long e32_autodata; /* +0x0094 */ unsigned long e32_debuginfo; /* +0x0098 */ unsigned long e32_debuglen; /* +0x009c */ unsigned long e32_instpreload; /* +0x00a0 */ unsigned long e32_instdemand; /* +0x00a4 */ unsigned long e32_heapsize; /* +0x00a8 */ unsigned char e32_res3[12]; /* +0x00ac 9d 14 00 00 */ unsigned long e32_winresoff; /* +0x00b8 */ unsigned long e32_winreslen; /* +0x00bc */ unsigned short e32_devid; /* +0x00c0 */ unsigned short e32_ddkver; /* +0x00c2 */ }; struct _MIDL_STUB_DESC:: { /* unsigned char pAutoHandle[0]; +0x0000 74 12 00 00 */ /* unsigned char pPrimitiveHandle[0]; +0x0000 74 12 00 00 */ unsigned char pGenericBindingInfo[4]; /* +0x0000 41 1a 00 00 */ }; struct _TRANSACTIONMANAGER_BASIC_INFORMATION { unsigned char TmIdentity[16]; /* +0x0000 ce 13 00 00 */ unsigned char VirtualClock[8]; /* +0x0010 db 13 00 00 */ }; struct tagPROPPAGEINFO { unsigned long cb; /* +0x0000 */ unsigned char pszTitle[4]; /* +0x0004 71 04 00 00 */ unsigned char size[8]; /* +0x0008 21 13 00 00 */ unsigned char pszDocString[4]; /* +0x0010 71 04 00 00 */ unsigned char pszHelpFile[4]; /* +0x0014 71 04 00 00 */ unsigned long dwHelpContext; /* +0x0018 */ }; struct _WIN32_FILE_ATTRIBUTE_DATA { unsigned long dwFileAttributes; /* +0x0000 */ unsigned char ftCreationTime[8]; /* +0x0004 91 14 00 00 */ unsigned char ftLastAccessTime[8]; /* +0x000c 91 14 00 00 */ unsigned char ftLastWriteTime[8]; /* +0x0014 91 14 00 00 */ unsigned long nFileSizeHigh; /* +0x001c */ unsigned long nFileSizeLow; /* +0x0020 */ }; struct _FILE_STORAGE_INFO { unsigned long LogicalBytesPerSector; /* +0x0000 */ unsigned long PhysicalBytesPerSectorForAtomicity; /* +0x0004 */ unsigned long PhysicalBytesPerSectorForPerformance; /* +0x0008 */ unsigned long FileSystemEffectivePhysicalBytesPerSectorForAtomicity; /* +0x000c */ unsigned long Flags; /* +0x0010 */ unsigned long ByteOffsetForSectorAlignment; /* +0x0014 */ unsigned long ByteOffsetForPartitionAlignment; /* +0x0018 */ }; struct _DOCINFOW { unsigned char cbSize[4]; /* +0x0000 74 00 00 00 */ unsigned char lpszDocName[4]; /* +0x0004 4f 13 00 00 */ unsigned char lpszOutput[4]; /* +0x0008 4f 13 00 00 */ unsigned char lpszDatatype[4]; /* +0x000c 4f 13 00 00 */ unsigned long fwType; /* +0x0010 */ }; struct _RTL_BARRIER { unsigned long Reserved1; /* +0x0000 */ unsigned long Reserved2; /* +0x0004 */ unsigned char Reserved3[8]; /* +0x0008 c3 15 00 00 */ unsigned long Reserved4; /* +0x0010 */ unsigned long Reserved5; /* +0x0014 */ }; struct _OSVERSIONINFOEXA { unsigned long dwOSVersionInfoSize; /* +0x0000 */ unsigned long dwMajorVersion; /* +0x0004 */ unsigned long dwMinorVersion; /* +0x0008 */ unsigned long dwBuildNumber; /* +0x000c */ unsigned long dwPlatformId; /* +0x0010 */ unsigned char szCSDVersion[128]; /* +0x0014 29 14 00 00 */ unsigned short wServicePackMajor; /* +0x0094 */ unsigned short wServicePackMinor; /* +0x0096 */ unsigned short wSuiteMask; /* +0x0098 */ unsigned char wProductType; /* +0x009a */ unsigned char wReserved; /* +0x009b */ }; struct _IMAGE_COFF_SYMBOLS_HEADER { unsigned long NumberOfSymbols; /* +0x0000 */ unsigned long LvaToFirstSymbol; /* +0x0004 */ unsigned long NumberOfLinenumbers; /* +0x0008 */ unsigned long LvaToFirstLinenumber; /* +0x000c */ unsigned long RvaToFirstByteOfCode; /* +0x0010 */ unsigned long RvaToLastByteOfCode; /* +0x0014 */ unsigned long RvaToFirstByteOfData; /* +0x0018 */ unsigned long RvaToLastByteOfData; /* +0x001c */ }; struct tagEMRPOLYLINE16 { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char rclBounds[16]; /* +0x0008 f3 11 00 00 */ unsigned long cpts; /* +0x0018 */ unsigned char apts[4]; /* +0x001c 75 1a 00 00 */ }; struct tagEMRPOLYDRAW { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char rclBounds[16]; /* +0x0008 f3 11 00 00 */ unsigned long cptl; /* +0x0018 */ unsigned char aptl[8]; /* +0x001c a3 13 00 00 */ unsigned char abTypes[4]; /* +0x0024 04 12 00 00 */ }; struct tagMENUBARINFO { unsigned long cbSize; /* +0x0000 */ unsigned char rcBar[16]; /* +0x0004 c0 12 00 00 */ unsigned char hMenu[4]; /* +0x0014 4d 13 00 00 */ unsigned char hwndMenu[4]; /* +0x0018 fc 11 00 00 */ /* unsigned char fBarFocused[0]; +0x001c 80 1a 00 00 */ unsigned char fFocused[4]; /* +0x001c 81 1a 00 00 */ }; struct _BYTE_SIZEDARR { unsigned long clSize; /* +0x0000 */ unsigned char *pData; /* +0x0004 */ }; struct tagPOINTER_DEVICE_INFO { unsigned long displayOrientation; /* +0x0000 */ void *device; /* +0x0004 */ unsigned char pointerDeviceType[4]; /* +0x0008 88 1a 00 00 */ unsigned char monitor[4]; /* +0x000c a3 14 00 00 */ unsigned long startingCursorId; /* +0x0010 */ unsigned short maxActiveContacts; /* +0x0014 */ unsigned char productString[1042]; /* +0x0016 89 1a 00 00 */ }; struct _STARTUPINFOA { unsigned long cb; /* +0x0000 */ char *lpReserved; /* +0x0004 */ char *lpDesktop; /* +0x0008 */ char *lpTitle; /* +0x000c */ unsigned long dwX; /* +0x0010 */ unsigned long dwY; /* +0x0014 */ unsigned long dwXSize; /* +0x0018 */ unsigned long dwYSize; /* +0x001c */ unsigned long dwXCountChars; /* +0x0020 */ unsigned long dwYCountChars; /* +0x0024 */ unsigned long dwFillAttribute; /* +0x0028 */ unsigned long dwFlags; /* +0x002c */ unsigned short wShowWindow; /* +0x0030 */ unsigned short cbReserved2; /* +0x0032 */ unsigned char *lpReserved2; /* +0x0034 */ void *hStdInput; /* +0x0038 */ void *hStdOutput; /* +0x003c */ void *hStdError; /* +0x0040 */ }; struct tagCOLORCORRECTPALETTE { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned long ihPalette; /* +0x0008 */ unsigned long nFirstEntry; /* +0x000c */ unsigned long nPalEntries; /* +0x0010 */ unsigned long nReserved; /* +0x0014 */ }; struct _DISPLAY_DEVICEA { unsigned long cb; /* +0x0000 */ unsigned char DeviceName[32]; /* +0x0004 94 1a 00 00 */ unsigned char DeviceString[128]; /* +0x0024 29 14 00 00 */ unsigned long StateFlags; /* +0x00a4 */ unsigned char DeviceID[128]; /* +0x00a8 29 14 00 00 */ unsigned char DeviceKey[128]; /* +0x0128 29 14 00 00 */ }; struct tagENHMETARECORD { unsigned long iType; /* +0x0000 */ unsigned long nSize; /* +0x0004 */ unsigned char dParm[4]; /* +0x0008 01 12 00 00 */ }; struct _remoteMETAFILEPICT { long mm; /* +0x0000 */ long xExt; /* +0x0004 */ long yExt; /* +0x0008 */ unsigned char hMF[4]; /* +0x000c 9c 1a 00 00 */ }; struct _tagPROTOCOL_ARGUMENT { unsigned char szMethod[4]; /* +0x0000 4f 13 00 00 */ unsigned char szTargetUrl[4]; /* +0x0004 4f 13 00 00 */ }; struct _FILE_COMPRESSION_INFO { unsigned char CompressedFileSize[8]; /* +0x0000 db 13 00 00 */ unsigned short CompressionFormat; /* +0x0008 */ unsigned char CompressionUnitShift; /* +0x000a */ unsigned char ChunkShift; /* +0x000b */ unsigned char ClusterShift; /* +0x000c */ unsigned char Reserved[3]; /* +0x000d 49 12 00 00 */ }; struct tagEMRSCALEVIEWPORTEXTEX { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ long xNum; /* +0x0008 */ long xDenom; /* +0x000c */ long yNum; /* +0x0010 */ long yDenom; /* +0x0014 */ }; struct _RPC_BINDING_HANDLE_TEMPLATE_V1_W { unsigned long Version; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long ProtocolSequence; /* +0x0008 */ unsigned short *NetworkAddress; /* +0x000c */ unsigned short *StringEndpoint; /* +0x0010 */ }; struct tagEMRELLIPSE { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char rclBox[16]; /* +0x0008 f3 11 00 00 */ }; struct _RATE_QUOTA_LIMIT { unsigned long RateData; /* +0x0000 */ /* unsigned char RatePercent[0]; +0x0000 b0 1a 00 00 */ unsigned char Reserved0[4]; /* +0x0000 b1 1a 00 00 */ }; struct _SYSTEM_LOGICAL_PROCESSOR_INFORMATION { unsigned long ProcessorMask; /* +0x0000 */ unsigned char Relationship[4]; /* +0x0004 f4 15 00 00 */ /* unsigned char ProcessorCore[0]; +0x0008 b4 1a 00 00 */ /* unsigned char NumaNode[0]; +0x0008 b5 1a 00 00 */ /* unsigned char Cache[0]; +0x0008 b6 1a 00 00 */ unsigned char Reserved[16]; /* +0x0008 b7 1a 00 00 */ }; struct _SYSTEM_LOGICAL_PROCESSOR_INFORMATION:::: { unsigned long NodeNumber; /* +0x0000 */ }; struct _SYSTEM_LOGICAL_PROCESSOR_INFORMATION:::: { unsigned char Flags; /* +0x0000 */ }; struct tagENHMETAHEADER { unsigned long iType; /* +0x0000 */ unsigned long nSize; /* +0x0004 */ unsigned char rclBounds[16]; /* +0x0008 f3 11 00 00 */ unsigned char rclFrame[16]; /* +0x0018 f3 11 00 00 */ unsigned long dSignature; /* +0x0028 */ unsigned long nVersion; /* +0x002c */ unsigned long nBytes; /* +0x0030 */ unsigned long nRecords; /* +0x0034 */ unsigned short nHandles; /* +0x0038 */ unsigned short sReserved; /* +0x003a */ unsigned long nDescription; /* +0x003c */ unsigned long offDescription; /* +0x0040 */ unsigned long nPalEntries; /* +0x0044 */ unsigned char szlDevice[8]; /* +0x0048 21 13 00 00 */ unsigned char szlMillimeters[8]; /* +0x0050 21 13 00 00 */ unsigned long cbPixelFormat; /* +0x0058 */ unsigned long offPixelFormat; /* +0x005c */ unsigned long bOpenGL; /* +0x0060 */ unsigned char szlMicrometers[8]; /* +0x0064 21 13 00 00 */ }; struct _SERVICE_TRIGGER { unsigned long dwTriggerType; /* +0x0000 */ unsigned long dwAction; /* +0x0004 */ unsigned char pTriggerSubtype[4]; /* +0x0008 78 15 00 00 */ unsigned long cDataItems; /* +0x000c */ unsigned char pDataItems[4]; /* +0x0010 c3 1a 00 00 */ }; struct _OSVERSIONINFOW { unsigned long dwOSVersionInfoSize; /* +0x0000 */ unsigned long dwMajorVersion; /* +0x0004 */ unsigned long dwMinorVersion; /* +0x0008 */ unsigned long dwBuildNumber; /* +0x000c */ unsigned long dwPlatformId; /* +0x0010 */ unsigned char szCSDVersion[256]; /* +0x0014 7e 13 00 00 */ }; struct _TAPE_WMI_OPERATIONS { unsigned long Method; /* +0x0000 */ unsigned long DataBufferSize; /* +0x0004 */ void *DataBuffer; /* +0x0008 */ }; struct tagRAWMOUSE { unsigned short usFlags; /* +0x0000 */ unsigned long ulButtons; /* +0x0004 */ unsigned short usButtonFlags; /* +0x0004 */ unsigned short usButtonData; /* +0x0006 */ unsigned long ulRawButtons; /* +0x0008 */ long lLastX; /* +0x000c */ long lLastY; /* +0x0010 */ unsigned long ulExtraInformation; /* +0x0014 */ }; struct tagGESTUREINFO { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned long dwID; /* +0x0008 */ unsigned char hwndTarget[4]; /* +0x000c fc 11 00 00 */ unsigned char ptsLocation[4]; /* +0x0010 74 1a 00 00 */ unsigned long dwInstanceID; /* +0x0014 */ unsigned long dwSequenceID; /* +0x0018 */ unsigned long long ullArguments; /* +0x0020 */ unsigned char cbExtraArgs[8]; /* +0x0028 75 00 00 00 */ }; struct _M128A { unsigned long long Low; /* +0x0000 */ long long High; /* +0x0008 */ }; struct __GENERIC_BINDING_INFO { void *pObj; /* +0x0000 */ unsigned char Size[4]; /* +0x0004 75 00 00 00 */ unsigned char pfnBind[4]; /* +0x0008 d7 1a 00 00 */ unsigned char pfnUnbind[4]; /* +0x000c da 1a 00 00 */ }; struct _SE_SECURITY_DESCRIPTOR { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ void *SecurityDescriptor; /* +0x0008 */ }; struct tagDVTARGETDEVICE { unsigned long tdSize; /* +0x0000 */ unsigned short tdDriverNameOffset; /* +0x0004 */ unsigned short tdDeviceNameOffset; /* +0x0006 */ unsigned short tdPortNameOffset; /* +0x0008 */ unsigned short tdExtDevmodeOffset; /* +0x000a */ unsigned char tdData[4]; /* +0x000c 04 12 00 00 */ }; struct tagMOUSEMOVEPOINT { unsigned char x[4]; /* +0x0000 74 00 00 00 */ unsigned char y[4]; /* +0x0004 74 00 00 00 */ unsigned long time; /* +0x0008 */ unsigned long dwExtraInfo; /* +0x000c */ }; struct tagHIGHCONTRASTW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned char lpszDefaultScheme[4]; /* +0x0008 71 04 00 00 */ }; struct _cpinfoexA { unsigned char MaxCharSize[4]; /* +0x0000 75 00 00 00 */ unsigned char DefaultChar[2]; /* +0x0004 9c 14 00 00 */ unsigned char LeadByte[12]; /* +0x0006 9d 14 00 00 */ unsigned char UnicodeDefaultChar[2]; /* +0x0012 71 00 00 00 */ unsigned char CodePage[4]; /* +0x0014 75 00 00 00 */ unsigned char CodePageName[260]; /* +0x0018 f8 1a 00 00 */ }; struct _JIT_DEBUG_INFO { unsigned long dwSize; /* +0x0000 */ unsigned long dwProcessorArchitecture; /* +0x0004 */ unsigned long dwThreadID; /* +0x0008 */ unsigned long dwReserved0; /* +0x000c */ unsigned long long lpExceptionAddress; /* +0x0010 */ unsigned long long lpExceptionRecord; /* +0x0018 */ unsigned long long lpContextRecord; /* +0x0020 */ }; struct _FILE_IO_PRIORITY_HINT_INFO { unsigned char PriorityHint[4]; /* +0x0000 fd 1a 00 00 */ }; struct tagEMRSETICMPROFILE { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned long dwFlags; /* +0x0008 */ unsigned long cbName; /* +0x000c */ unsigned long cbData; /* +0x0010 */ unsigned char Data[4]; /* +0x0014 04 12 00 00 */ }; struct _ABC { unsigned char abcA[4]; /* +0x0000 74 00 00 00 */ unsigned char abcB[4]; /* +0x0004 75 00 00 00 */ unsigned char abcC[4]; /* +0x0008 74 00 00 00 */ }; struct _wireSAFEARRAY_UNION { unsigned long sfType; /* +0x0000 */ }; struct _wireSAFEARRAY_UNION::__MIDL_IOleAutomationTypes_0001 { /* unsigned char BstrStr[0]; +0x0000 39 1b 00 00 */ /* unsigned char UnknownStr[0]; +0x0000 3a 1b 00 00 */ /* unsigned char DispatchStr[0]; +0x0000 3b 1b 00 00 */ /* unsigned char VariantStr[0]; +0x0000 3c 1b 00 00 */ /* unsigned char RecordStr[0]; +0x0000 3d 1b 00 00 */ /* unsigned char HaveIidStr[0]; +0x0000 3e 1b 00 00 */ /* unsigned char ByteStr[0]; +0x0000 3f 1b 00 00 */ /* unsigned char WordStr[0]; +0x0000 40 1b 00 00 */ /* unsigned char LongStr[0]; +0x0000 41 1b 00 00 */ unsigned char HyperStr[24]; /* +0x0000 42 1b 00 00 */ }; struct _TRANSACTION_NOTIFICATION_MARSHAL_ARGUMENT { unsigned long MarshalCookie; /* +0x0000 */ unsigned char UOW[16]; /* +0x0004 ce 13 00 00 */ }; struct DISPLAYCONFIG_TARGET_PREFERRED_MODE { unsigned char header[20]; /* +0x0000 47 1b 00 00 */ unsigned char width[4]; /* +0x0014 75 00 00 00 */ unsigned char height[8]; /* +0x0018 75 00 00 00 */ unsigned char targetMode[48]; /* +0x0020 48 1b 00 00 */ }; struct tagPOINTER_TOUCH_INFO { unsigned char pointerInfo[80]; /* +0x0000 4b 1b 00 00 */ unsigned char touchFlags[4]; /* +0x0050 75 00 00 00 */ unsigned char touchMask[4]; /* +0x0054 75 00 00 00 */ unsigned char rcContact[16]; /* +0x0058 c0 12 00 00 */ unsigned char rcContactRaw[16]; /* +0x0068 c0 12 00 00 */ unsigned char orientation[4]; /* +0x0078 75 00 00 00 */ unsigned char pressure[4]; /* +0x007c 75 00 00 00 */ }; struct tagACCESSTIMEOUT { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned long iTimeOutMSec; /* +0x0008 */ }; struct __MIDL___MIDL_itf_wtypes_0000_0001_0001 { unsigned long tyspec; /* +0x0000 */ }; struct __MIDL___MIDL_itf_wtypes_0000_0001_0001::__MIDL___MIDL_itf_wtypes_0000_0001_0005 { /* unsigned char clsid[0]; +0x0000 ce 13 00 00 */ /* unsigned char pFileExt[0]; +0x0000 71 04 00 00 */ /* unsigned char pMimeType[0]; +0x0000 71 04 00 00 */ /* unsigned char pProgId[0]; +0x0000 71 04 00 00 */ unsigned char pFileName[32]; /* +0x0000 71 04 00 00 */ }; struct __MIDL___MIDL_itf_wtypes_0000_0001_0001::__MIDL___MIDL_itf_wtypes_0000_0001_0005:: { unsigned char ObjectId[16]; /* +0x0000 ce 13 00 00 */ unsigned char PolicyId[16]; /* +0x0010 ce 13 00 00 */ }; struct __MIDL___MIDL_itf_wtypes_0000_0001_0001::__MIDL___MIDL_itf_wtypes_0000_0001_0005:: { unsigned char pPackageName[4]; /* +0x0000 71 04 00 00 */ unsigned char PolicyId[16]; /* +0x0004 ce 13 00 00 */ }; struct _userFLAG_STGMEDIUM { long ContextFlags; /* +0x0000 */ long fPassOwnership; /* +0x0004 */ unsigned char Stgmed[4]; /* +0x0008 78 1a 00 00 */ }; struct _wireSAFEARRAY { unsigned short cDims; /* +0x0000 */ unsigned short fFeatures; /* +0x0002 */ unsigned long cbElements; /* +0x0004 */ unsigned long cLocks; /* +0x0008 */ unsigned char uArrayStructs[28]; /* +0x000c 6d 1b 00 00 */ unsigned char rgsabound[8]; /* +0x0028 6f 1b 00 00 */ }; struct _SECURITY_ATTRIBUTES { unsigned long nLength; /* +0x0000 */ void *lpSecurityDescriptor; /* +0x0004 */ unsigned char bInheritHandle[4]; /* +0x0008 74 00 00 00 */ }; struct threadlocaleinfostruct { unsigned char refcount[4]; /* +0x0000 74 00 00 00 */ unsigned char lc_codepage[4]; /* +0x0004 75 00 00 00 */ unsigned char lc_collate_cp[4]; /* +0x0008 75 00 00 00 */ unsigned char lc_handle[24]; /* +0x000c ab 18 00 00 */ unsigned char lc_id[180]; /* +0x0024 7a 1b 00 00 */ }; struct _MESSAGE_RESOURCE_ENTRY { unsigned short Length; /* +0x0000 */ unsigned short Flags; /* +0x0002 */ unsigned char Text[2]; /* +0x0004 04 12 00 00 */ }; struct tagPOLYTEXTW { unsigned char x[4]; /* +0x0000 74 00 00 00 */ unsigned char y[4]; /* +0x0004 74 00 00 00 */ unsigned char n[4]; /* +0x0008 75 00 00 00 */ unsigned char lpstr[4]; /* +0x000c 4f 13 00 00 */ unsigned char uiFlags[4]; /* +0x0010 75 00 00 00 */ unsigned char rcl[16]; /* +0x0014 c0 12 00 00 */ unsigned char pdx[4]; /* +0x0024 74 04 00 00 */ }; struct tagSOLE_AUTHENTICATION_INFO { unsigned long dwAuthnSvc; /* +0x0000 */ unsigned long dwAuthzSvc; /* +0x0004 */ void *pAuthInfo; /* +0x0008 */ }; struct _TRANSACTION_NOTIFICATION_SAVEPOINT_ARGUMENT { unsigned long SavepointId; /* +0x0000 */ }; struct tagGESTURENOTIFYSTRUCT { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned char hwndTarget[4]; /* +0x0008 fc 11 00 00 */ unsigned char ptsLocation[4]; /* +0x000c 74 1a 00 00 */ unsigned long dwInstanceID; /* +0x0010 */ }; struct tagSTYLEBUFW { unsigned long dwStyle; /* +0x0000 */ unsigned char szDescription[64]; /* +0x0004 7c 13 00 00 */ }; struct _IMAGE_THUNK_DATA32:: { unsigned long ForwarderString; /* +0x0000 */ unsigned long Function; /* +0x0000 */ unsigned long Ordinal; /* +0x0000 */ unsigned long AddressOfData; /* +0x0000 */ }; struct _nlsversioninfo { unsigned long dwNLSVersionInfoSize; /* +0x0000 */ unsigned long dwNLSVersion; /* +0x0004 */ unsigned long dwDefinedVersion; /* +0x0008 */ unsigned long dwEffectiveId; /* +0x000c */ unsigned char guidCustomVersion[16]; /* +0x0010 ce 13 00 00 */ }; struct _RPC_SECURITY_QOS_V5_A { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ unsigned long AdditionalSecurityInfoType; /* +0x0010 */ }; struct _TRANSACTION_PROPERTIES_INFORMATION { unsigned long IsolationLevel; /* +0x0000 */ unsigned long IsolationFlags; /* +0x0004 */ unsigned char Timeout[8]; /* +0x0008 db 13 00 00 */ unsigned long Outcome; /* +0x0010 */ unsigned long DescriptionLength; /* +0x0014 */ unsigned char Description[8]; /* +0x0018 83 12 00 00 */ }; struct tagMETAFILEPICT { long mm; /* +0x0000 */ long xExt; /* +0x0004 */ long yExt; /* +0x0008 */ unsigned char hMF[4]; /* +0x000c cd 1b 00 00 */ }; struct _stat64 { unsigned char st_dev[4]; /* +0x0000 75 00 00 00 */ unsigned short st_ino; /* +0x0004 */ unsigned short st_mode; /* +0x0006 */ short st_nlink; /* +0x0008 */ short st_uid; /* +0x000a */ short st_gid; /* +0x000c */ unsigned char st_rdev[8]; /* +0x0010 75 00 00 00 */ long long st_size; /* +0x0018 */ long long st_atime; /* +0x0020 */ long long st_mtime; /* +0x0028 */ long long st_ctime; /* +0x0030 */ }; struct _FOCUS_EVENT_RECORD { unsigned char bSetFocus[4]; /* +0x0000 74 00 00 00 */ }; struct _FILE_STANDARD_INFO { unsigned char AllocationSize[8]; /* +0x0000 db 13 00 00 */ unsigned char EndOfFile[8]; /* +0x0008 db 13 00 00 */ unsigned long NumberOfLinks; /* +0x0010 */ unsigned char DeletePending; /* +0x0014 */ unsigned char Directory; /* +0x0015 */ }; struct _wireSAFEARR_VARIANT { unsigned long Size; /* +0x0000 */ unsigned char aVariant[4]; /* +0x0004 dc 1b 00 00 */ }; struct tagHELPWININFOW { unsigned char wStructSize[4]; /* +0x0000 74 00 00 00 */ unsigned char x[4]; /* +0x0004 74 00 00 00 */ unsigned char y[4]; /* +0x0008 74 00 00 00 */ unsigned char dx[4]; /* +0x000c 74 00 00 00 */ unsigned char dy[4]; /* +0x0010 74 00 00 00 */ unsigned char wMax[4]; /* +0x0014 74 00 00 00 */ unsigned char rgchMember[4]; /* +0x0018 df 1b 00 00 */ }; struct tagCANDIDATEFORM { unsigned long dwIndex; /* +0x0000 */ unsigned long dwStyle; /* +0x0004 */ unsigned char ptCurrentPos[8]; /* +0x0008 ce 12 00 00 */ unsigned char rcArea[16]; /* +0x0010 c0 12 00 00 */ }; struct _HYPER_SIZEDARR { unsigned long clSize; /* +0x0000 */ long long *pData; /* +0x0004 */ }; struct tagMULTIKEYHELPA { unsigned long mkSize; /* +0x0000 */ char mkKeylist; /* +0x0004 */ unsigned char szKeyphrase[3]; /* +0x0005 ea 1b 00 00 */ }; struct tagBinaryParam { void *Buffer; /* +0x0000 */ short Size; /* +0x0004 */ }; struct _TRANSACTIONMANAGER_RECOVERY_INFORMATION { unsigned long long LastRecoveredLsn; /* +0x0000 */ }; struct tagAUDIODESCRIPTION { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char Enabled[4]; /* +0x0004 74 00 00 00 */ unsigned long Locale; /* +0x0008 */ }; struct tagRID_DEVICE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwType; /* +0x0004 */ /* unsigned char mouse[0]; +0x0008 01 1c 00 00 */ /* unsigned char keyboard[0]; +0x0008 02 1c 00 00 */ unsigned char hid[24]; /* +0x0008 03 1c 00 00 */ }; struct _ImageArchitectureEntry { unsigned long FixupInstRVA; /* +0x0000 */ unsigned long NewInst; /* +0x0004 */ }; struct IMPORT_OBJECT_HEADER { unsigned short Sig1; /* +0x0000 */ unsigned short Sig2; /* +0x0002 */ unsigned short Version; /* +0x0004 */ unsigned short Machine; /* +0x0006 */ unsigned long TimeDateStamp; /* +0x0008 */ unsigned long SizeOfData; /* +0x000c */ unsigned short Ordinal; /* +0x0010 */ unsigned short Hint; /* +0x0010 */ /* unsigned char Type[0]; +0x0012 0b 1c 00 00 */ /* unsigned char NameType[0]; +0x0012 0c 1c 00 00 */ unsigned char Reserved[2]; /* +0x0012 0d 1c 00 00 */ }; struct _RTL_CONDITION_VARIABLE { void *Ptr; /* +0x0000 */ }; struct tagLOGPALETTE { unsigned short palVersion; /* +0x0000 */ unsigned short palNumEntries; /* +0x0002 */ unsigned char palPalEntry[4]; /* +0x0004 22 1c 00 00 */ }; struct tagCBT_CREATEWNDW { unsigned char lpcs[4]; /* +0x0000 2f 1c 00 00 */ unsigned char hwndInsertAfter[4]; /* +0x0004 fc 11 00 00 */ }; struct tagMOUSEINPUT { long dx; /* +0x0000 */ long dy; /* +0x0004 */ unsigned long mouseData; /* +0x0008 */ unsigned long dwFlags; /* +0x000c */ unsigned long time; /* +0x0010 */ unsigned long dwExtraInfo; /* +0x0014 */ }; struct tagSTGMEDIUM { unsigned long tymed; /* +0x0000 */ /* unsigned char hBitmap[0]; +0x0004 b9 14 00 00 */ void *hMetaFilePict; /* +0x0004 */ /* unsigned char hEnhMetaFile[0]; +0x0004 46 1c 00 00 */ void *hGlobal; /* +0x0004 */ /* unsigned char lpszFileName[0]; +0x0004 71 04 00 00 */ /* unsigned char pstm[0]; +0x0004 40 18 00 00 */ unsigned char pstg[4]; /* +0x0004 ae 13 00 00 */ unsigned char pUnkForRelease[4]; /* +0x0008 2b 15 00 00 */ }; struct tagEMRSETWORLDTRANSFORM { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char xform[24]; /* +0x0008 f4 11 00 00 */ }; struct _stat { unsigned char st_dev[4]; /* +0x0000 75 00 00 00 */ unsigned short st_ino; /* +0x0004 */ unsigned short st_mode; /* +0x0006 */ short st_nlink; /* +0x0008 */ short st_uid; /* +0x000a */ short st_gid; /* +0x000c */ unsigned char st_rdev[4]; /* +0x0010 75 00 00 00 */ long st_size; /* +0x0014 */ long st_atime; /* +0x0018 */ long st_mtime; /* +0x001c */ long st_ctime; /* +0x0020 */ }; struct _PERFORMANCE_DATA { unsigned short Size; /* +0x0000 */ unsigned char Version; /* +0x0002 */ unsigned char HwCountersCount; /* +0x0003 */ unsigned long ContextSwitchCount; /* +0x0004 */ unsigned long long WaitReasonBitMap; /* +0x0008 */ unsigned long long CycleTime; /* +0x0010 */ unsigned long RetryCount; /* +0x0018 */ unsigned long Reserved; /* +0x001c */ unsigned char HwCounters[256]; /* +0x0020 66 1c 00 00 */ }; struct tagENUMUILANG { unsigned long NumOfEnumUILang; /* +0x0000 */ unsigned long SizeOfEnumUIBuffer; /* +0x0004 */ unsigned short *pEnumUIBuffer; /* +0x0008 */ }; struct tagICONMETRICSW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char iHorzSpacing[4]; /* +0x0004 74 00 00 00 */ unsigned char iVertSpacing[4]; /* +0x0008 74 00 00 00 */ unsigned char iTitleWrap[4]; /* +0x000c 74 00 00 00 */ unsigned char lfFont[92]; /* +0x0010 04 14 00 00 */ }; struct _ACTIVATION_CONTEXT_BASIC_INFORMATION { void *hActCtx; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ }; struct _CONSOLE_SCREEN_BUFFER_INFOEX { unsigned long cbSize; /* +0x0000 */ unsigned char dwSize[4]; /* +0x0004 bc 14 00 00 */ unsigned char dwCursorPosition[4]; /* +0x0008 bc 14 00 00 */ unsigned short wAttributes; /* +0x000c */ unsigned char srWindow[8]; /* +0x000e 8a 1c 00 00 */ unsigned char dwMaximumWindowSize[4]; /* +0x0016 bc 14 00 00 */ unsigned short wPopupAttributes; /* +0x001a */ unsigned char bFullscreenSupported[4]; /* +0x001c 74 00 00 00 */ unsigned char ColorTable[64]; /* +0x0020 8b 1c 00 00 */ }; struct _ENUM_SERVICE_STATUSW { unsigned char lpServiceName[4]; /* +0x0000 71 04 00 00 */ unsigned char lpDisplayName[4]; /* +0x0004 71 04 00 00 */ unsigned char ServiceStatus[28]; /* +0x0008 8e 1c 00 00 */ }; struct _STARTUPINFOEXA { unsigned char StartupInfo[68]; /* +0x0000 91 1c 00 00 */ unsigned char lpAttributeList[4]; /* +0x0044 e7 17 00 00 */ }; struct _devicemodeA { unsigned char dmDeviceName[32]; /* +0x0000 ad 14 00 00 */ unsigned short dmSpecVersion; /* +0x0020 */ unsigned short dmDriverVersion; /* +0x0022 */ unsigned short dmSize; /* +0x0024 */ unsigned short dmDriverExtra; /* +0x0026 */ unsigned long dmFields; /* +0x0028 */ short dmOrientation; /* +0x002c */ short dmPaperSize; /* +0x002e */ short dmPaperLength; /* +0x0030 */ short dmPaperWidth; /* +0x0032 */ short dmScale; /* +0x0034 */ short dmCopies; /* +0x0036 */ short dmDefaultSource; /* +0x0038 */ short dmPrintQuality; /* +0x003a */ unsigned char dmPosition[8]; /* +0x002c 58 12 00 00 */ unsigned long dmDisplayOrientation; /* +0x0034 */ unsigned long dmDisplayFixedOutput; /* +0x0038 */ short dmColor; /* +0x003c */ short dmDuplex; /* +0x003e */ short dmYResolution; /* +0x0040 */ short dmTTOption; /* +0x0042 */ short dmCollate; /* +0x0044 */ unsigned char dmFormName[32]; /* +0x0046 ad 14 00 00 */ unsigned short dmLogPixels; /* +0x0066 */ unsigned long dmBitsPerPel; /* +0x0068 */ unsigned long dmPelsWidth; /* +0x006c */ unsigned long dmPelsHeight; /* +0x0070 */ unsigned long dmDisplayFlags; /* +0x0074 */ unsigned long dmNup; /* +0x0074 */ unsigned long dmDisplayFrequency; /* +0x0078 */ unsigned long dmICMMethod; /* +0x007c */ unsigned long dmICMIntent; /* +0x0080 */ unsigned long dmMediaType; /* +0x0084 */ unsigned long dmDitherType; /* +0x0088 */ unsigned long dmReserved1; /* +0x008c */ unsigned long dmReserved2; /* +0x0090 */ unsigned long dmPanningWidth; /* +0x0094 */ unsigned long dmPanningHeight; /* +0x0098 */ }; struct _CONSOLE_FONT_INFOEX { unsigned long cbSize; /* +0x0000 */ unsigned long nFont; /* +0x0004 */ unsigned char dwFontSize[4]; /* +0x0008 bc 14 00 00 */ unsigned char FontFamily[4]; /* +0x000c 75 00 00 00 */ unsigned char FontWeight[4]; /* +0x0010 75 00 00 00 */ unsigned char FaceName[64]; /* +0x0014 7c 13 00 00 */ }; struct value_entW { unsigned char ve_valuename[4]; /* +0x0000 71 04 00 00 */ unsigned long ve_valuelen; /* +0x0004 */ unsigned long ve_valueptr; /* +0x0008 */ unsigned long ve_type; /* +0x000c */ }; struct _PACKEDEVENTINFO { unsigned long ulSize; /* +0x0000 */ unsigned long ulNumEventsForLogFile; /* +0x0004 */ /* unsigned char ulOffsets[0]; +0x0008 9a 1c 00 00 */ }; struct _POWER_SESSION_RIT_STATE { unsigned char Active; /* +0x0000 */ unsigned long LastInputTime; /* +0x0004 */ }; struct tagMULTI_QI { unsigned char pIID[4]; /* +0x0000 0b 17 00 00 */ unsigned char pItf[4]; /* +0x0004 2b 15 00 00 */ unsigned char hr[4]; /* +0x0008 08 00 00 00 */ }; struct tagWNDCLASSEXW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char style[4]; /* +0x0004 75 00 00 00 */ unsigned char lpfnWndProc[4]; /* +0x0008 b9 1c 00 00 */ unsigned char cbClsExtra[4]; /* +0x000c 74 00 00 00 */ unsigned char cbWndExtra[4]; /* +0x0010 74 00 00 00 */ unsigned char hInstance[4]; /* +0x0014 f5 12 00 00 */ unsigned char hIcon[4]; /* +0x0018 92 19 00 00 */ unsigned char hCursor[4]; /* +0x001c 92 19 00 00 */ unsigned char hbrBackground[4]; /* +0x0020 98 1a 00 00 */ unsigned char lpszMenuName[4]; /* +0x0024 4f 13 00 00 */ unsigned char lpszClassName[4]; /* +0x0028 4f 13 00 00 */ unsigned char hIconSm[4]; /* +0x002c 92 19 00 00 */ }; struct tagMENUITEMINFOW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char fMask[4]; /* +0x0004 75 00 00 00 */ unsigned char fType[4]; /* +0x0008 75 00 00 00 */ unsigned char fState[4]; /* +0x000c 75 00 00 00 */ unsigned char wID[4]; /* +0x0010 75 00 00 00 */ unsigned char hSubMenu[4]; /* +0x0014 4d 13 00 00 */ unsigned char hbmpChecked[4]; /* +0x0018 b9 14 00 00 */ unsigned char hbmpUnchecked[4]; /* +0x001c b9 14 00 00 */ unsigned long dwItemData; /* +0x0020 */ unsigned char dwTypeData[4]; /* +0x0024 71 04 00 00 */ unsigned char cch[4]; /* +0x0028 75 00 00 00 */ unsigned char hbmpItem[4]; /* +0x002c b9 14 00 00 */ }; struct _s__RTTIClassHierarchyDescriptor { unsigned long signature; /* +0x0000 */ unsigned long attributes; /* +0x0004 */ unsigned long numBaseClasses; /* +0x0008 */ unsigned char pBaseClassArray[4]; /* +0x000c c2 1c 00 00 */ }; struct _PROCESS_MITIGATION_SYSTEM_CALL_DISABLE_POLICY { unsigned long Flags; /* +0x0000 */ /* unsigned char DisallowWin32kSystemCalls[0]; +0x0000 4a 12 00 00 */ unsigned char ReservedFlags[4]; /* +0x0000 4b 12 00 00 */ }; struct tagGCP_RESULTSA { unsigned long lStructSize; /* +0x0000 */ char *lpOutString; /* +0x0004 */ unsigned char lpOrder[4]; /* +0x0008 75 04 00 00 */ unsigned char lpDx[4]; /* +0x000c 74 04 00 00 */ unsigned char lpCaretPos[4]; /* +0x0010 74 04 00 00 */ char *lpClass; /* +0x0014 */ unsigned char lpGlyphs[4]; /* +0x0018 71 04 00 00 */ unsigned char nGlyphs[4]; /* +0x001c 75 00 00 00 */ unsigned char nMaxFit[4]; /* +0x0020 74 00 00 00 */ }; struct tagMETARECORD { unsigned long rdSize; /* +0x0000 */ unsigned short rdFunction; /* +0x0004 */ unsigned char rdParm[2]; /* +0x0006 56 14 00 00 */ }; struct tagRPC_ERROR_ENUM_HANDLE { unsigned long Signature; /* +0x0000 */ void *CurrentPos; /* +0x0004 */ void *Head; /* +0x0008 */ }; struct _TRANSACTION_NOTIFICATION_PROPAGATE_ARGUMENT { unsigned long PropagationCookie; /* +0x0000 */ unsigned char UOW[16]; /* +0x0004 ce 13 00 00 */ unsigned char TmIdentity[16]; /* +0x0014 ce 13 00 00 */ unsigned long BufferLength; /* +0x0024 */ }; struct tagWNDCLASSEXA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char style[4]; /* +0x0004 75 00 00 00 */ unsigned char lpfnWndProc[4]; /* +0x0008 b9 1c 00 00 */ unsigned char cbClsExtra[4]; /* +0x000c 74 00 00 00 */ unsigned char cbWndExtra[4]; /* +0x0010 74 00 00 00 */ unsigned char hInstance[4]; /* +0x0014 f5 12 00 00 */ unsigned char hIcon[4]; /* +0x0018 92 19 00 00 */ unsigned char hCursor[4]; /* +0x001c 92 19 00 00 */ unsigned char hbrBackground[4]; /* +0x0020 98 1a 00 00 */ unsigned char lpszMenuName[4]; /* +0x0024 bf 12 00 00 */ unsigned char lpszClassName[4]; /* +0x0028 bf 12 00 00 */ unsigned char hIconSm[4]; /* +0x002c 92 19 00 00 */ }; struct _UUID_VECTOR { unsigned long Count; /* +0x0000 */ unsigned char Uuid[4]; /* +0x0004 ec 1c 00 00 */ }; struct _devicemodeW { unsigned char dmDeviceName[64]; /* +0x0000 7c 13 00 00 */ unsigned short dmSpecVersion; /* +0x0040 */ unsigned short dmDriverVersion; /* +0x0042 */ unsigned short dmSize; /* +0x0044 */ unsigned short dmDriverExtra; /* +0x0046 */ unsigned long dmFields; /* +0x0048 */ short dmOrientation; /* +0x004c */ short dmPaperSize; /* +0x004e */ short dmPaperLength; /* +0x0050 */ short dmPaperWidth; /* +0x0052 */ short dmScale; /* +0x0054 */ short dmCopies; /* +0x0056 */ short dmDefaultSource; /* +0x0058 */ short dmPrintQuality; /* +0x005a */ unsigned char dmPosition[8]; /* +0x004c 58 12 00 00 */ unsigned long dmDisplayOrientation; /* +0x0054 */ unsigned long dmDisplayFixedOutput; /* +0x0058 */ short dmColor; /* +0x005c */ short dmDuplex; /* +0x005e */ short dmYResolution; /* +0x0060 */ short dmTTOption; /* +0x0062 */ short dmCollate; /* +0x0064 */ unsigned char dmFormName[64]; /* +0x0066 7c 13 00 00 */ unsigned short dmLogPixels; /* +0x00a6 */ unsigned long dmBitsPerPel; /* +0x00a8 */ unsigned long dmPelsWidth; /* +0x00ac */ unsigned long dmPelsHeight; /* +0x00b0 */ unsigned long dmDisplayFlags; /* +0x00b4 */ unsigned long dmNup; /* +0x00b4 */ unsigned long dmDisplayFrequency; /* +0x00b8 */ unsigned long dmICMMethod; /* +0x00bc */ unsigned long dmICMIntent; /* +0x00c0 */ unsigned long dmMediaType; /* +0x00c4 */ unsigned long dmDitherType; /* +0x00c8 */ unsigned long dmReserved1; /* +0x00cc */ unsigned long dmReserved2; /* +0x00d0 */ unsigned long dmPanningWidth; /* +0x00d4 */ unsigned long dmPanningHeight; /* +0x00d8 */ }; struct tagEMRTEXT { unsigned char ptlReference[8]; /* +0x0000 58 12 00 00 */ unsigned long nChars; /* +0x0008 */ unsigned long offString; /* +0x000c */ unsigned long fOptions; /* +0x0010 */ unsigned char rcl[16]; /* +0x0014 f3 11 00 00 */ unsigned long offDx; /* +0x0024 */ }; struct tagHARDWAREINPUT { unsigned long uMsg; /* +0x0000 */ unsigned short wParamL; /* +0x0004 */ unsigned short wParamH; /* +0x0006 */ }; struct tagWINDOWINFO { unsigned long cbSize; /* +0x0000 */ unsigned char rcWindow[16]; /* +0x0004 c0 12 00 00 */ unsigned char rcClient[16]; /* +0x0014 c0 12 00 00 */ unsigned long dwStyle; /* +0x0024 */ unsigned long dwExStyle; /* +0x0028 */ unsigned long dwWindowStatus; /* +0x002c */ unsigned char cxWindowBorders[4]; /* +0x0030 75 00 00 00 */ unsigned char cyWindowBorders[4]; /* +0x0034 75 00 00 00 */ unsigned short atomWindowType; /* +0x0038 */ unsigned short wCreatorVersion; /* +0x003a */ }; struct _heapinfo { unsigned char _pentry[4]; /* +0x0000 74 04 00 00 */ unsigned char _size[4]; /* +0x0004 75 00 00 00 */ unsigned char _useflag[4]; /* +0x0008 74 00 00 00 */ }; struct _COMDLG_FILTERSPEC { unsigned char pszName[4]; /* +0x0000 4f 13 00 00 */ unsigned char pszSpec[4]; /* +0x0004 4f 13 00 00 */ }; struct _SCONTEXT_QUEUE { unsigned long NumberOfObjects; /* +0x0000 */ unsigned char ArrayOfObjects[4]; /* +0x0004 0c 1d 00 00 */ }; struct tagWINDOWPLACEMENT { unsigned char length[4]; /* +0x0000 75 00 00 00 */ unsigned char flags[4]; /* +0x0004 75 00 00 00 */ unsigned char showCmd[4]; /* +0x0008 75 00 00 00 */ unsigned char ptMinPosition[8]; /* +0x000c ce 12 00 00 */ unsigned char ptMaxPosition[8]; /* +0x0014 ce 12 00 00 */ unsigned char rcNormalPosition[16]; /* +0x001c c0 12 00 00 */ }; struct _RPC_HTTP_TRANSPORT_CREDENTIALS_V3_A { void *TransportCredentials; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long AuthenticationTarget; /* +0x0008 */ unsigned long NumberOfAuthnSchemes; /* +0x000c */ unsigned long *AuthnSchemes; /* +0x0010 */ unsigned char *ServerCertificateSubject; /* +0x0014 */ void *ProxyCredentials; /* +0x0018 */ unsigned long NumberOfProxyAuthnSchemes; /* +0x001c */ unsigned long *ProxyAuthnSchemes; /* +0x0020 */ }; struct _JOBOBJECT_BASIC_LIMIT_INFORMATION { unsigned char PerProcessUserTimeLimit[8]; /* +0x0000 db 13 00 00 */ unsigned char PerJobUserTimeLimit[8]; /* +0x0008 db 13 00 00 */ unsigned long LimitFlags; /* +0x0010 */ unsigned long MinimumWorkingSetSize; /* +0x0014 */ unsigned long MaximumWorkingSetSize; /* +0x0018 */ unsigned long ActiveProcessLimit; /* +0x001c */ unsigned long Affinity; /* +0x0020 */ unsigned long PriorityClass; /* +0x0024 */ unsigned long SchedulingClass; /* +0x0028 */ }; struct tagVS_FIXEDFILEINFO { unsigned long dwSignature; /* +0x0000 */ unsigned long dwStrucVersion; /* +0x0004 */ unsigned long dwFileVersionMS; /* +0x0008 */ unsigned long dwFileVersionLS; /* +0x000c */ unsigned long dwProductVersionMS; /* +0x0010 */ unsigned long dwProductVersionLS; /* +0x0014 */ unsigned long dwFileFlagsMask; /* +0x0018 */ unsigned long dwFileFlags; /* +0x001c */ unsigned long dwFileOS; /* +0x0020 */ unsigned long dwFileType; /* +0x0024 */ unsigned long dwFileSubtype; /* +0x0028 */ unsigned long dwFileDateMS; /* +0x002c */ unsigned long dwFileDateLS; /* +0x0030 */ }; struct _EXCEPTION_RECORD32 { unsigned long ExceptionCode; /* +0x0000 */ unsigned long ExceptionFlags; /* +0x0004 */ unsigned long ExceptionRecord; /* +0x0008 */ unsigned long ExceptionAddress; /* +0x000c */ unsigned long NumberParameters; /* +0x0010 */ unsigned char ExceptionInformation[60]; /* +0x0014 3e 1d 00 00 */ }; struct tagMENUITEMINFOA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char fMask[4]; /* +0x0004 75 00 00 00 */ unsigned char fType[4]; /* +0x0008 75 00 00 00 */ unsigned char fState[4]; /* +0x000c 75 00 00 00 */ unsigned char wID[4]; /* +0x0010 75 00 00 00 */ unsigned char hSubMenu[4]; /* +0x0014 4d 13 00 00 */ unsigned char hbmpChecked[4]; /* +0x0018 b9 14 00 00 */ unsigned char hbmpUnchecked[4]; /* +0x001c b9 14 00 00 */ unsigned long dwItemData; /* +0x0020 */ char *dwTypeData; /* +0x0024 */ unsigned char cch[4]; /* +0x0028 75 00 00 00 */ unsigned char hbmpItem[4]; /* +0x002c b9 14 00 00 */ }; struct tagEMREXTCREATEPEN { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned long ihPen; /* +0x0008 */ unsigned long offBmi; /* +0x000c */ unsigned long cbBmi; /* +0x0010 */ unsigned long offBits; /* +0x0014 */ unsigned long cbBits; /* +0x0018 */ unsigned char elp[28]; /* +0x001c 5c 18 00 00 */ }; struct _IMAGE_RELOCATION { unsigned long VirtualAddress; /* +0x0000 */ unsigned long RelocCount; /* +0x0000 */ unsigned long SymbolTableIndex; /* +0x0004 */ unsigned short Type; /* +0x0008 */ }; struct tagWTSSESSION_NOTIFICATION { unsigned long cbSize; /* +0x0000 */ unsigned long dwSessionId; /* +0x0004 */ }; struct _s__RTTIBaseClassDescriptor2 { unsigned char pTypeDescriptor[4]; /* +0x0000 84 14 00 00 */ unsigned long numContainedBases; /* +0x0004 */ unsigned char where[12]; /* +0x0008 5e 1d 00 00 */ unsigned long attributes; /* +0x0014 */ unsigned char pClassDescriptor[4]; /* +0x0018 87 14 00 00 */ }; struct _QUERY_SERVICE_LOCK_STATUSW { unsigned long fIsLocked; /* +0x0000 */ unsigned char lpLockOwner[4]; /* +0x0004 71 04 00 00 */ unsigned long dwLockDuration; /* +0x0008 */ }; struct _MODEMDEVCAPS { unsigned long dwActualSize; /* +0x0000 */ unsigned long dwRequiredSize; /* +0x0004 */ unsigned long dwDevSpecificOffset; /* +0x0008 */ unsigned long dwDevSpecificSize; /* +0x000c */ unsigned long dwModemProviderVersion; /* +0x0010 */ unsigned long dwModemManufacturerOffset; /* +0x0014 */ unsigned long dwModemManufacturerSize; /* +0x0018 */ unsigned long dwModemModelOffset; /* +0x001c */ unsigned long dwModemModelSize; /* +0x0020 */ unsigned long dwModemVersionOffset; /* +0x0024 */ unsigned long dwModemVersionSize; /* +0x0028 */ unsigned long dwDialOptions; /* +0x002c */ unsigned long dwCallSetupFailTimer; /* +0x0030 */ unsigned long dwInactivityTimeout; /* +0x0034 */ unsigned long dwSpeakerVolume; /* +0x0038 */ unsigned long dwSpeakerMode; /* +0x003c */ unsigned long dwModemOptions; /* +0x0040 */ unsigned long dwMaxDTERate; /* +0x0044 */ unsigned long dwMaxDCERate; /* +0x0048 */ unsigned char abVariablePortion[4]; /* +0x004c 04 12 00 00 */ }; struct _MOUSE_EVENT_RECORD { unsigned char dwMousePosition[4]; /* +0x0000 bc 14 00 00 */ unsigned long dwButtonState; /* +0x0004 */ unsigned long dwControlKeyState; /* +0x0008 */ unsigned long dwEventFlags; /* +0x000c */ }; struct _MIDL_STUB_MESSAGE { unsigned char RpcMsg[4]; /* +0x0000 92 1d 00 00 */ unsigned char *Buffer; /* +0x0004 */ unsigned char *BufferStart; /* +0x0008 */ unsigned char *BufferEnd; /* +0x000c */ unsigned char *BufferMark; /* +0x0010 */ unsigned long BufferLength; /* +0x0014 */ unsigned long MemorySize; /* +0x0018 */ unsigned char *Memory; /* +0x001c */ unsigned char IsClient; /* +0x0020 */ unsigned char Pad; /* +0x0021 */ unsigned short uFlags2; /* +0x0022 */ unsigned char ReuseBuffer[4]; /* +0x0024 74 00 00 00 */ unsigned char pAllocAllNodesContext[4]; /* +0x0028 94 1d 00 00 */ unsigned char pPointerQueueState[4]; /* +0x002c 96 1d 00 00 */ unsigned char IgnoreEmbeddedPointers[4]; /* +0x0030 74 00 00 00 */ unsigned char *PointerBufferMark; /* +0x0034 */ unsigned char CorrDespIncrement; /* +0x0038 */ unsigned char uFlags; /* +0x0039 */ unsigned short UniquePtrCount; /* +0x003a */ unsigned long MaxCount; /* +0x003c */ unsigned long Offset; /* +0x0040 */ unsigned long ActualCount; /* +0x0044 */ unsigned char pfnAllocate[4]; /* +0x0048 57 15 00 00 */ unsigned char pfnFree[4]; /* +0x004c 10 14 00 00 */ unsigned char *StackTop; /* +0x0050 */ unsigned char *pPresentedType; /* +0x0054 */ unsigned char *pTransmitType; /* +0x0058 */ void *SavedHandle; /* +0x005c */ unsigned char StubDesc[4]; /* +0x0060 99 1d 00 00 */ unsigned char FullPtrXlatTables[4]; /* +0x0064 9b 1d 00 00 */ unsigned long FullPtrRefId; /* +0x0068 */ unsigned long PointerLength; /* +0x006c */ /* unsigned char fInDontFree[0]; +0x0070 80 1a 00 00 */ /* unsigned char fDontCallFreeInst[0]; +0x0070 81 1a 00 00 */ /* unsigned char fInOnlyParam[0]; +0x0070 9c 1d 00 00 */ /* unsigned char fHasReturn[0]; +0x0070 9d 1d 00 00 */ /* unsigned char fHasExtensions[0]; +0x0070 9e 1d 00 00 */ /* unsigned char fHasNewCorrDesc[0]; +0x0070 9f 1d 00 00 */ /* unsigned char fIsIn[0]; +0x0070 a0 1d 00 00 */ /* unsigned char fIsOut[0]; +0x0070 a1 1d 00 00 */ /* unsigned char fIsOicf[0]; +0x0070 a2 1d 00 00 */ /* unsigned char fBufferValid[0]; +0x0070 a3 1d 00 00 */ /* unsigned char fHasMemoryValidateCallback[0]; +0x0070 a4 1d 00 00 */ /* unsigned char fInFree[0]; +0x0070 a5 1d 00 00 */ /* unsigned char fNeedMCCP[0]; +0x0070 a6 1d 00 00 */ /* unsigned char fUnused[0]; +0x0070 a7 1d 00 00 */ unsigned char fUnused2[4]; /* +0x0070 a8 1d 00 00 */ unsigned long dwDestContext; /* +0x0074 */ void *pvDestContext; /* +0x0078 */ unsigned char SavedContextHandles[4]; /* +0x007c 0c 1d 00 00 */ long ParamNumber; /* +0x0080 */ unsigned char pRpcChannelBuffer[4]; /* +0x0084 59 15 00 00 */ unsigned char pArrayInfo[4]; /* +0x0088 aa 1d 00 00 */ unsigned long *SizePtrCountArray; /* +0x008c */ unsigned long *SizePtrOffsetArray; /* +0x0090 */ unsigned long *SizePtrLengthArray; /* +0x0094 */ void *pArgQueue; /* +0x0098 */ unsigned long dwStubPhase; /* +0x009c */ void *LowStackMark; /* +0x00a0 */ unsigned char pAsyncMsg[4]; /* +0x00a4 ac 1d 00 00 */ unsigned char pCorrInfo[4]; /* +0x00a8 ae 1d 00 00 */ unsigned char *pCorrMemory; /* +0x00ac */ void *pMemoryList; /* +0x00b0 */ unsigned char pCSInfo[4]; /* +0x00b4 74 00 00 00 */ unsigned char *ConformanceMark; /* +0x00b8 */ unsigned char *VarianceMark; /* +0x00bc */ unsigned char Unused[4]; /* +0x00c0 74 00 00 00 */ unsigned char pContext[4]; /* +0x00c4 b0 1d 00 00 */ void *ContextHandleHash; /* +0x00c8 */ void *pUserMarshalList; /* +0x00cc */ unsigned char Reserved51_3[4]; /* +0x00d0 74 00 00 00 */ unsigned char Reserved51_4[4]; /* +0x00d4 74 00 00 00 */ unsigned char Reserved51_5[4]; /* +0x00d8 74 00 00 00 */ }; struct _CONNECTDLGSTRUCTW { unsigned long cbStructure; /* +0x0000 */ unsigned char hwndOwner[4]; /* +0x0004 fc 11 00 00 */ unsigned char lpConnRes[4]; /* +0x0008 4f 1d 00 00 */ unsigned long dwFlags; /* +0x000c */ unsigned long dwDevNum; /* +0x0010 */ }; struct tagEMRINVERTRGN { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char rclBounds[16]; /* +0x0008 f3 11 00 00 */ unsigned long cbRgnData; /* +0x0018 */ unsigned char RgnData[4]; /* +0x001c 04 12 00 00 */ }; struct tagSOLE_AUTHENTICATION_SERVICE { unsigned long dwAuthnSvc; /* +0x0000 */ unsigned long dwAuthzSvc; /* +0x0004 */ unsigned char pPrincipalName[4]; /* +0x0008 71 04 00 00 */ unsigned char hr[4]; /* +0x000c 08 00 00 00 */ }; struct _IMAGE_SEPARATE_DEBUG_HEADER { unsigned short Signature; /* +0x0000 */ unsigned short Flags; /* +0x0002 */ unsigned short Machine; /* +0x0004 */ unsigned short Characteristics; /* +0x0006 */ unsigned long TimeDateStamp; /* +0x0008 */ unsigned long CheckSum; /* +0x000c */ unsigned long ImageBase; /* +0x0010 */ unsigned long SizeOfImage; /* +0x0014 */ unsigned long NumberOfSections; /* +0x0018 */ unsigned long ExportedNamesSize; /* +0x001c */ unsigned long DebugDirectorySize; /* +0x0020 */ unsigned long SectionAlignment; /* +0x0024 */ unsigned char Reserved[8]; /* +0x0028 c3 15 00 00 */ }; struct tagCOMPAREITEMSTRUCT { unsigned char CtlType[4]; /* +0x0000 75 00 00 00 */ unsigned char CtlID[4]; /* +0x0004 75 00 00 00 */ unsigned char hwndItem[4]; /* +0x0008 fc 11 00 00 */ unsigned char itemID1[4]; /* +0x000c 75 00 00 00 */ unsigned long itemData1; /* +0x0010 */ unsigned char itemID2[4]; /* +0x0014 75 00 00 00 */ unsigned long itemData2; /* +0x0018 */ unsigned long dwLocaleId; /* +0x001c */ }; struct tagPOINTER_DEVICE_PROPERTY { unsigned char logicalMin[4]; /* +0x0000 74 00 00 00 */ unsigned char logicalMax[4]; /* +0x0004 74 00 00 00 */ unsigned char physicalMin[4]; /* +0x0008 74 00 00 00 */ unsigned char physicalMax[4]; /* +0x000c 74 00 00 00 */ unsigned char unit[4]; /* +0x0010 75 00 00 00 */ unsigned char unitExponent[4]; /* +0x0014 75 00 00 00 */ unsigned short usagePageId; /* +0x0018 */ unsigned short usageId; /* +0x001a */ }; struct _ENUM_SERVICE_STATUSA { char *lpServiceName; /* +0x0000 */ char *lpDisplayName; /* +0x0004 */ unsigned char ServiceStatus[28]; /* +0x0008 8e 1c 00 00 */ }; struct _OSVERSIONINFOA { unsigned long dwOSVersionInfoSize; /* +0x0000 */ unsigned long dwMajorVersion; /* +0x0004 */ unsigned long dwMinorVersion; /* +0x0008 */ unsigned long dwBuildNumber; /* +0x000c */ unsigned long dwPlatformId; /* +0x0010 */ unsigned char szCSDVersion[128]; /* +0x0014 29 14 00 00 */ }; struct tagEMRRESTOREDC { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ long iRelative; /* +0x0008 */ }; struct tagGUITHREADINFO { unsigned long cbSize; /* +0x0000 */ unsigned long flags; /* +0x0004 */ unsigned char hwndActive[4]; /* +0x0008 fc 11 00 00 */ unsigned char hwndFocus[4]; /* +0x000c fc 11 00 00 */ unsigned char hwndCapture[4]; /* +0x0010 fc 11 00 00 */ unsigned char hwndMenuOwner[4]; /* +0x0014 fc 11 00 00 */ unsigned char hwndMoveSize[4]; /* +0x0018 fc 11 00 00 */ unsigned char hwndCaret[4]; /* +0x001c fc 11 00 00 */ unsigned char rcCaret[16]; /* +0x0020 c0 12 00 00 */ }; struct _CLAIM_SECURITY_ATTRIBUTE_V1 { unsigned char Name[4]; /* +0x0000 71 04 00 00 */ unsigned short ValueType; /* +0x0004 */ unsigned short Reserved; /* +0x0006 */ unsigned long Flags; /* +0x0008 */ unsigned long ValueCount; /* +0x000c */ }; struct _CLAIM_SECURITY_ATTRIBUTE_V1:: { long long *pInt64; /* +0x0000 */ unsigned long long *pUint64; /* +0x0000 */ /* unsigned char ppString[0]; +0x0000 d1 12 00 00 */ /* unsigned char pFqbn[0]; +0x0000 36 16 00 00 */ unsigned char pOctetString[4]; /* +0x0000 20 15 00 00 */ }; struct _DISPLAY_DEVICEW { unsigned long cb; /* +0x0000 */ unsigned char DeviceName[64]; /* +0x0004 7c 13 00 00 */ unsigned char DeviceString[256]; /* +0x0044 7e 13 00 00 */ unsigned long StateFlags; /* +0x0144 */ unsigned char DeviceID[256]; /* +0x0148 7e 13 00 00 */ unsigned char DeviceKey[256]; /* +0x0248 7e 13 00 00 */ }; struct _UMS_CREATE_THREAD_ATTRIBUTES { unsigned long UmsVersion; /* +0x0000 */ void *UmsContext; /* +0x0004 */ void *UmsCompletionList; /* +0x0008 */ }; struct _SERVICE_NOTIFY_1 { unsigned long dwVersion; /* +0x0000 */ unsigned char pfnNotifyCallback[4]; /* +0x0004 10 14 00 00 */ void *pContext; /* +0x0008 */ unsigned long dwNotificationStatus; /* +0x000c */ unsigned char ServiceStatus[36]; /* +0x0010 11 14 00 00 */ }; struct _SYSTEMTIME { unsigned short wYear; /* +0x0000 */ unsigned short wMonth; /* +0x0002 */ unsigned short wDayOfWeek; /* +0x0004 */ unsigned short wDay; /* +0x0006 */ unsigned short wHour; /* +0x0008 */ unsigned short wMinute; /* +0x000a */ unsigned short wSecond; /* +0x000c */ unsigned short wMilliseconds; /* +0x000e */ }; struct tagKEYBDINPUT { unsigned short wVk; /* +0x0000 */ unsigned short wScan; /* +0x0002 */ unsigned long dwFlags; /* +0x0004 */ unsigned long time; /* +0x0008 */ unsigned long dwExtraInfo; /* +0x000c */ }; struct tagCURSORINFO { unsigned long cbSize; /* +0x0000 */ unsigned long flags; /* +0x0004 */ unsigned char hCursor[4]; /* +0x0008 92 19 00 00 */ unsigned char ptScreenPos[8]; /* +0x000c ce 12 00 00 */ }; struct value_entA { char *ve_valuename; /* +0x0000 */ unsigned long ve_valuelen; /* +0x0004 */ unsigned long ve_valueptr; /* +0x0008 */ unsigned long ve_type; /* +0x000c */ }; struct _TRANSACTION_NOTIFICATION_RECOVERY_ARGUMENT { unsigned char EnlistmentId[16]; /* +0x0000 ce 13 00 00 */ unsigned char UOW[16]; /* +0x0010 ce 13 00 00 */ }; struct _RPC_CALL_LOCAL_ADDRESS_V1 { unsigned char Version[4]; /* +0x0000 75 00 00 00 */ void *Buffer; /* +0x0004 */ unsigned long BufferSize; /* +0x0008 */ unsigned char AddressFormat[4]; /* +0x000c 62 1e 00 00 */ }; struct tagENUMLOGFONTEXDVW { unsigned char elfEnumLogfontEx[348]; /* +0x0000 65 1e 00 00 */ unsigned char elfDesignVector[72]; /* +0x015c 4d 19 00 00 */ }; struct _EXCEPTION_POINTERS { unsigned char ExceptionRecord[4]; /* +0x0000 7d 1e 00 00 */ unsigned char ContextRecord[4]; /* +0x0004 7f 1e 00 00 */ }; struct _JOBOBJECT_EXTENDED_LIMIT_INFORMATION { unsigned char BasicLimitInformation[48]; /* +0x0000 00 14 00 00 */ unsigned char IoInfo[48]; /* +0x0030 82 1e 00 00 */ unsigned long ProcessMemoryLimit; /* +0x0060 */ unsigned long JobMemoryLimit; /* +0x0064 */ unsigned long PeakProcessMemoryUsed; /* +0x0068 */ unsigned long PeakJobMemoryUsed; /* +0x006c */ }; struct _FILE_BASIC_INFO { unsigned char CreationTime[8]; /* +0x0000 db 13 00 00 */ unsigned char LastAccessTime[8]; /* +0x0008 db 13 00 00 */ unsigned char LastWriteTime[8]; /* +0x0010 db 13 00 00 */ unsigned char ChangeTime[8]; /* +0x0018 db 13 00 00 */ unsigned long FileAttributes; /* +0x0020 */ }; struct _TRANSACTION_NOTIFICATION_TM_ONLINE_ARGUMENT { unsigned char TmIdentity[16]; /* +0x0000 ce 13 00 00 */ unsigned long Flags; /* +0x0010 */ }; struct tagTOUCHINPUT { long x; /* +0x0000 */ long y; /* +0x0004 */ void *hSource; /* +0x0008 */ unsigned long dwID; /* +0x000c */ unsigned long dwFlags; /* +0x0010 */ unsigned long dwMask; /* +0x0014 */ unsigned long dwTime; /* +0x0018 */ unsigned long dwExtraInfo; /* +0x001c */ unsigned long cxContact; /* +0x0020 */ unsigned long cyContact; /* +0x0024 */ }; struct _COORD { short X; /* +0x0000 */ short Y; /* +0x0002 */ }; struct _tagBINDINFO { unsigned long cbSize; /* +0x0000 */ unsigned char szExtraInfo[4]; /* +0x0004 71 04 00 00 */ unsigned char stgmedData[12]; /* +0x0008 8c 1e 00 00 */ unsigned long grfBindInfoF; /* +0x0014 */ unsigned long dwBindVerb; /* +0x0018 */ unsigned char szCustomVerb[4]; /* +0x001c 71 04 00 00 */ unsigned long cbstgmedData; /* +0x0020 */ unsigned long dwOptions; /* +0x0024 */ unsigned long dwOptionsFlags; /* +0x0028 */ unsigned long dwCodePage; /* +0x002c */ unsigned char securityAttributes[12]; /* +0x0030 11 13 00 00 */ unsigned char iid[16]; /* +0x003c ce 13 00 00 */ unsigned char pUnk[4]; /* +0x004c 2b 15 00 00 */ unsigned long dwReserved; /* +0x0050 */ }; struct _WOW64_FLOATING_SAVE_AREA { unsigned long ControlWord; /* +0x0000 */ unsigned long StatusWord; /* +0x0004 */ unsigned long TagWord; /* +0x0008 */ unsigned long ErrorOffset; /* +0x000c */ unsigned long ErrorSelector; /* +0x0010 */ unsigned long DataOffset; /* +0x0014 */ unsigned long DataSelector; /* +0x0018 */ unsigned char RegisterArea[80]; /* +0x001c be 1e 00 00 */ unsigned long Cr0NpxState; /* +0x006c */ }; struct _MEMORYSTATUS { unsigned long dwLength; /* +0x0000 */ unsigned long dwMemoryLoad; /* +0x0004 */ unsigned long dwTotalPhys; /* +0x0008 */ unsigned long dwAvailPhys; /* +0x000c */ unsigned long dwTotalPageFile; /* +0x0010 */ unsigned long dwAvailPageFile; /* +0x0014 */ unsigned long dwTotalVirtual; /* +0x0018 */ unsigned long dwAvailVirtual; /* +0x001c */ }; struct tagTITLEBARINFOEX { unsigned long cbSize; /* +0x0000 */ unsigned char rcTitleBar[16]; /* +0x0004 c0 12 00 00 */ unsigned char rgstate[24]; /* +0x0014 ab 18 00 00 */ unsigned char rgrect[96]; /* +0x002c c5 1e 00 00 */ }; struct tagCLEANLOCALSTORAGE { unsigned char pInterface[4]; /* +0x0000 2b 15 00 00 */ void *pStorage; /* +0x0004 */ unsigned long flags; /* +0x0008 */ }; struct _TOKEN_APPCONTAINER_INFORMATION { void *TokenAppContainer; /* +0x0000 */ }; struct tagTTPOLYGONHEADER { unsigned long cb; /* +0x0000 */ unsigned long dwType; /* +0x0004 */ unsigned char pfxStart[8]; /* +0x0008 6c 19 00 00 */ }; struct tagMSGBOXPARAMSW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char hwndOwner[4]; /* +0x0004 fc 11 00 00 */ unsigned char hInstance[4]; /* +0x0008 f5 12 00 00 */ unsigned char lpszText[4]; /* +0x000c 4f 13 00 00 */ unsigned char lpszCaption[4]; /* +0x0010 4f 13 00 00 */ unsigned long dwStyle; /* +0x0014 */ unsigned char lpszIcon[4]; /* +0x0018 4f 13 00 00 */ unsigned long dwContextHelpId; /* +0x001c */ unsigned char lpfnMsgBoxCallback[4]; /* +0x0020 d4 1e 00 00 */ unsigned long dwLanguageId; /* +0x0024 */ }; struct _SERVICE_CONTROL_STATUS_REASON_PARAMSW { unsigned long dwReason; /* +0x0000 */ unsigned char pszComment[4]; /* +0x0004 71 04 00 00 */ unsigned char ServiceStatus[36]; /* +0x0008 11 14 00 00 */ }; struct tagAXESLISTW { unsigned long axlReserved; /* +0x0000 */ unsigned long axlNumAxes; /* +0x0004 */ unsigned char axlAxisInfo[640]; /* +0x0008 ed 1e 00 00 */ }; struct _IMAGE_ARCHIVE_MEMBER_HEADER { unsigned char Name[16]; /* +0x0000 d3 19 00 00 */ unsigned char Date[12]; /* +0x0010 9d 14 00 00 */ unsigned char UserID[6]; /* +0x001c 08 1a 00 00 */ unsigned char GroupID[6]; /* +0x0022 08 1a 00 00 */ unsigned char Mode[8]; /* +0x0028 20 1a 00 00 */ unsigned char Size[10]; /* +0x0030 0b 1f 00 00 */ unsigned char EndHeader[2]; /* +0x003a 9c 14 00 00 */ }; struct _SERVICE_FAILURE_ACTIONSW { unsigned long dwResetPeriod; /* +0x0000 */ unsigned char lpRebootMsg[4]; /* +0x0004 71 04 00 00 */ unsigned char lpCommand[4]; /* +0x0008 71 04 00 00 */ unsigned long cActions; /* +0x000c */ unsigned char lpsaActions[4]; /* +0x0010 2c 1f 00 00 */ }; struct _SERVICE_PREFERRED_NODE_INFO { unsigned short usPreferredNode; /* +0x0000 */ unsigned char fDelete; /* +0x0002 */ }; struct _IMAGE_EXPORT_DIRECTORY { unsigned long Characteristics; /* +0x0000 */ unsigned long TimeDateStamp; /* +0x0004 */ unsigned short MajorVersion; /* +0x0008 */ unsigned short MinorVersion; /* +0x000a */ unsigned long Name; /* +0x000c */ unsigned long Base; /* +0x0010 */ unsigned long NumberOfFunctions; /* +0x0014 */ unsigned long NumberOfNames; /* +0x0018 */ unsigned long AddressOfFunctions; /* +0x001c */ unsigned long AddressOfNames; /* +0x0020 */ unsigned long AddressOfNameOrdinals; /* +0x0024 */ }; struct tagENUMTEXTMETRICW { unsigned char etmNewTextMetricEx[100]; /* +0x0000 4b 1f 00 00 */ unsigned char etmAxesList[648]; /* +0x0064 52 1b 00 00 */ }; struct tagACTCTX_SECTION_KEYED_DATA { unsigned long cbSize; /* +0x0000 */ unsigned long ulDataFormatVersion; /* +0x0004 */ void *lpData; /* +0x0008 */ unsigned long ulLength; /* +0x000c */ void *lpSectionGlobalData; /* +0x0010 */ unsigned long ulSectionGlobalDataLength; /* +0x0014 */ void *lpSectionBase; /* +0x0018 */ unsigned long ulSectionTotalLength; /* +0x001c */ void *hActCtx; /* +0x0020 */ unsigned long ulAssemblyRosterIndex; /* +0x0024 */ unsigned long ulFlags; /* +0x0028 */ unsigned char AssemblyMetadata[20]; /* +0x002c 50 1f 00 00 */ }; struct tagICONMETRICSA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char iHorzSpacing[4]; /* +0x0004 74 00 00 00 */ unsigned char iVertSpacing[4]; /* +0x0008 74 00 00 00 */ unsigned char iTitleWrap[4]; /* +0x000c 74 00 00 00 */ unsigned char lfFont[60]; /* +0x0010 0b 14 00 00 */ }; struct _PROCESSOR_GROUP_INFO { unsigned char MaximumProcessorCount; /* +0x0000 */ unsigned char ActiveProcessorCount; /* +0x0001 */ unsigned char Reserved[38]; /* +0x0002 64 1f 00 00 */ unsigned long ActiveProcessorMask; /* +0x0028 */ }; struct tagEMREXTTEXTOUTA { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char rclBounds[16]; /* +0x0008 f3 11 00 00 */ unsigned long iGraphicsMode; /* +0x0018 */ unsigned char exScale[4]; /* +0x001c 40 00 00 00 */ unsigned char eyScale[4]; /* +0x0020 40 00 00 00 */ unsigned char emrtext[40]; /* +0x0024 9e 16 00 00 */ }; struct tagEMRPLGBLT { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char rclBounds[16]; /* +0x0008 f3 11 00 00 */ unsigned char aptlDest[24]; /* +0x0018 69 1f 00 00 */ long xSrc; /* +0x0030 */ long ySrc; /* +0x0034 */ long cxSrc; /* +0x0038 */ long cySrc; /* +0x003c */ unsigned char xformSrc[24]; /* +0x0040 f4 11 00 00 */ unsigned long crBkColorSrc; /* +0x0058 */ unsigned long iUsageSrc; /* +0x005c */ unsigned long offBmiSrc; /* +0x0060 */ unsigned long cbBmiSrc; /* +0x0064 */ unsigned long offBitsSrc; /* +0x0068 */ unsigned long cbBitsSrc; /* +0x006c */ long xMask; /* +0x0070 */ long yMask; /* +0x0074 */ unsigned long iUsageMask; /* +0x0078 */ unsigned long offBmiMask; /* +0x007c */ unsigned long cbBmiMask; /* +0x0080 */ unsigned long offBitsMask; /* +0x0084 */ unsigned long cbBitsMask; /* +0x0088 */ }; struct _LOAD_DLL_DEBUG_INFO { void *hFile; /* +0x0000 */ void *lpBaseOfDll; /* +0x0004 */ unsigned long dwDebugInfoFileOffset; /* +0x0008 */ unsigned long nDebugInfoSize; /* +0x000c */ void *lpImageName; /* +0x0010 */ unsigned short fUnicode; /* +0x0014 */ }; struct _tagAUTHENTICATEINFO { unsigned long dwFlags; /* +0x0000 */ unsigned long dwReserved; /* +0x0004 */ }; struct _ACL { unsigned char AclRevision; /* +0x0000 */ unsigned char Sbz1; /* +0x0001 */ unsigned short AclSize; /* +0x0002 */ unsigned short AceCount; /* +0x0004 */ unsigned short Sbz2; /* +0x0006 */ }; struct _IMAGE_RUNTIME_FUNCTION_ENTRY { unsigned long BeginAddress; /* +0x0000 */ unsigned long EndAddress; /* +0x0004 */ unsigned long UnwindInfoAddress; /* +0x0008 */ }; struct tagCIEXYZ { long ciexyzX; /* +0x0000 */ long ciexyzY; /* +0x0004 */ long ciexyzZ; /* +0x0008 */ }; struct _SYSTEM_PROCESSOR_CYCLE_TIME_INFORMATION { unsigned long long CycleTime; /* +0x0000 */ }; struct tagRGBQUAD { unsigned char rgbBlue; /* +0x0000 */ unsigned char rgbGreen; /* +0x0001 */ unsigned char rgbRed; /* +0x0002 */ unsigned char rgbReserved; /* +0x0003 */ }; struct tagRPC_EE_INFO_PARAM { unsigned char ParameterType[16]; /* +0x0000 b7 1f 00 00 */ }; struct tagRPC_EE_INFO_PARAM:: { char *AnsiString; /* +0x0000 */ /* unsigned char UnicodeString[0]; +0x0000 71 04 00 00 */ long LVal; /* +0x0000 */ short SVal; /* +0x0000 */ unsigned long long PVal; /* +0x0000 */ unsigned char BVal[8]; /* +0x0000 bb 1f 00 00 */ }; struct _FILE_SEGMENT_ELEMENT { void *Buffer; /* +0x0000 */ unsigned long long Alignment; /* +0x0000 */ }; struct _SID_AND_ATTRIBUTES_HASH { unsigned long SidCount; /* +0x0000 */ unsigned char SidAttr[4]; /* +0x0004 78 16 00 00 */ unsigned char Hash[128]; /* +0x0008 c1 1f 00 00 */ }; struct _SERVICE_FAILURE_ACTIONS_FLAG { unsigned char fFailureActionsOnNonCrashFailures[4]; /* +0x0000 74 00 00 00 */ }; struct _div_t { unsigned char quot[4]; /* +0x0000 74 00 00 00 */ unsigned char rem[4]; /* +0x0004 74 00 00 00 */ }; struct tagStorageLayout { unsigned long LayoutType; /* +0x0000 */ unsigned char pwcsElementName[4]; /* +0x0004 71 04 00 00 */ unsigned char cOffset[8]; /* +0x0008 db 13 00 00 */ unsigned char cBytes[8]; /* +0x0010 db 13 00 00 */ }; struct _LDT_ENTRY:::: { /* unsigned char BaseMid[0]; +0x0000 dc 19 00 00 */ /* unsigned char Type[0]; +0x0000 de 1f 00 00 */ /* unsigned char Dpl[0]; +0x0000 df 1f 00 00 */ /* unsigned char Pres[0]; +0x0000 e0 1f 00 00 */ /* unsigned char LimitHi[0]; +0x0000 e1 1f 00 00 */ /* unsigned char Sys[0]; +0x0000 e2 1f 00 00 */ /* unsigned char Reserved_0[0]; +0x0000 e3 1f 00 00 */ /* unsigned char Default_Big[0]; +0x0000 e4 1f 00 00 */ /* unsigned char Granularity[0]; +0x0000 e5 1f 00 00 */ unsigned char BaseHi[4]; /* +0x0000 e6 1f 00 00 */ }; struct _LDT_ENTRY:::: { unsigned char BaseMid; /* +0x0000 */ unsigned char Flags1; /* +0x0001 */ unsigned char Flags2; /* +0x0002 */ unsigned char BaseHi; /* +0x0003 */ }; struct tagHIGHCONTRASTA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ char *lpszDefaultScheme; /* +0x0008 */ }; struct _RPC_HTTP_TRANSPORT_CREDENTIALS_V2_A { unsigned char TransportCredentials[4]; /* +0x0000 14 15 00 00 */ unsigned long Flags; /* +0x0004 */ unsigned long AuthenticationTarget; /* +0x0008 */ unsigned long NumberOfAuthnSchemes; /* +0x000c */ unsigned long *AuthnSchemes; /* +0x0010 */ unsigned char *ServerCertificateSubject; /* +0x0014 */ unsigned char ProxyCredentials[4]; /* +0x0018 14 15 00 00 */ unsigned long NumberOfProxyAuthnSchemes; /* +0x001c */ unsigned long *ProxyAuthnSchemes; /* +0x0020 */ }; struct _JOB_SET_ARRAY { void *JobHandle; /* +0x0000 */ unsigned long MemberLevel; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ }; struct tagDESIGNVECTOR { unsigned long dvReserved; /* +0x0000 */ unsigned long dvNumAxes; /* +0x0004 */ unsigned char dvValues[64]; /* +0x0008 f3 1f 00 00 */ }; struct tagLOGPEN { unsigned char lopnStyle[4]; /* +0x0000 75 00 00 00 */ unsigned char lopnWidth[8]; /* +0x0004 ce 12 00 00 */ unsigned long lopnColor; /* +0x000c */ }; struct _FLAGGED_WORD_BLOB { unsigned long fFlags; /* +0x0000 */ unsigned long clSize; /* +0x0004 */ unsigned char asData[4]; /* +0x0008 56 14 00 00 */ }; struct _MIDL_FORMAT_STRING { short Pad; /* +0x0000 */ /* unsigned char Format[0]; +0x0002 fc 1f 00 00 */ }; struct _GLYPHMETRICS { unsigned char gmBlackBoxX[4]; /* +0x0000 75 00 00 00 */ unsigned char gmBlackBoxY[4]; /* +0x0004 75 00 00 00 */ unsigned char gmptGlyphOrigin[8]; /* +0x0008 ce 12 00 00 */ short gmCellIncX; /* +0x0010 */ short gmCellIncY; /* +0x0012 */ }; struct tagAXESLISTA { unsigned long axlReserved; /* +0x0000 */ unsigned long axlNumAxes; /* +0x0004 */ unsigned char axlAxisInfo[384]; /* +0x0008 02 20 00 00 */ }; struct _JOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION { unsigned char BasicInfo[48]; /* +0x0000 1e 20 00 00 */ unsigned char IoInfo[48]; /* +0x0030 82 1e 00 00 */ }; struct tagRID_DEVICE_INFO_MOUSE { unsigned long dwId; /* +0x0000 */ unsigned long dwNumberOfButtons; /* +0x0004 */ unsigned long dwSampleRate; /* +0x0008 */ unsigned char fHasHorizontalWheel[4]; /* +0x000c 74 00 00 00 */ }; struct tagCHANGEFILTERSTRUCT { unsigned long cbSize; /* +0x0000 */ unsigned long ExtStatus; /* +0x0004 */ }; struct _OSVERSIONINFOEXW { unsigned long dwOSVersionInfoSize; /* +0x0000 */ unsigned long dwMajorVersion; /* +0x0004 */ unsigned long dwMinorVersion; /* +0x0008 */ unsigned long dwBuildNumber; /* +0x000c */ unsigned long dwPlatformId; /* +0x0010 */ unsigned char szCSDVersion[256]; /* +0x0014 7e 13 00 00 */ unsigned short wServicePackMajor; /* +0x0114 */ unsigned short wServicePackMinor; /* +0x0116 */ unsigned short wSuiteMask; /* +0x0118 */ unsigned char wProductType; /* +0x011a */ unsigned char wReserved; /* +0x011b */ }; struct _DEBUG_EVENT { unsigned long dwDebugEventCode; /* +0x0000 */ unsigned long dwProcessId; /* +0x0004 */ unsigned long dwThreadId; /* +0x0008 */ }; struct _SECURITY_DESCRIPTOR_RELATIVE { unsigned char Revision; /* +0x0000 */ unsigned char Sbz1; /* +0x0001 */ unsigned short Control; /* +0x0002 */ unsigned long Owner; /* +0x0004 */ unsigned long Group; /* +0x0008 */ unsigned long Sacl; /* +0x000c */ unsigned long Dacl; /* +0x0010 */ }; struct _FILE_ALLOCATION_INFO { unsigned char AllocationSize[8]; /* +0x0000 db 13 00 00 */ }; struct _RPC_BINDING_HANDLE_TEMPLATE_V1_W:: { unsigned short *Reserved; /* +0x0000 */ }; struct _RPC_MESSAGE { void *Handle; /* +0x0000 */ unsigned long DataRepresentation; /* +0x0004 */ void *Buffer; /* +0x0008 */ unsigned char BufferLength[4]; /* +0x000c 75 00 00 00 */ unsigned char ProcNum[4]; /* +0x0010 75 00 00 00 */ unsigned char TransferSyntax[4]; /* +0x0014 83 20 00 00 */ void *RpcInterfaceInformation; /* +0x0018 */ void *ReservedForRuntime; /* +0x001c */ void *ManagerEpv; /* +0x0020 */ void *ImportContext; /* +0x0024 */ unsigned long RpcFlags; /* +0x0028 */ }; struct _FILE_STREAM_INFO { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long StreamNameLength; /* +0x0004 */ unsigned char StreamSize[8]; /* +0x0008 db 13 00 00 */ unsigned char StreamAllocationSize[8]; /* +0x0010 db 13 00 00 */ unsigned char StreamName[8]; /* +0x0018 83 12 00 00 */ }; struct _TOKEN_STATISTICS { unsigned char TokenId[8]; /* +0x0000 37 13 00 00 */ unsigned char AuthenticationId[8]; /* +0x0008 37 13 00 00 */ unsigned char ExpirationTime[8]; /* +0x0010 db 13 00 00 */ unsigned char TokenType[4]; /* +0x0018 8a 20 00 00 */ unsigned char ImpersonationLevel[4]; /* +0x001c 8b 20 00 00 */ unsigned long DynamicCharged; /* +0x0020 */ unsigned long DynamicAvailable; /* +0x0024 */ unsigned long GroupCount; /* +0x0028 */ unsigned long PrivilegeCount; /* +0x002c */ unsigned char ModifiedId[8]; /* +0x0030 37 13 00 00 */ }; struct tagTOUCH_HIT_TESTING_PROXIMITY_EVALUATION { unsigned short score; /* +0x0000 */ unsigned char adjustedPoint[8]; /* +0x0004 ce 12 00 00 */ }; struct _RPC_BINDING_HANDLE_SECURITY_V1_A { unsigned long Version; /* +0x0000 */ unsigned char *ServerPrincName; /* +0x0004 */ unsigned long AuthnLevel; /* +0x0008 */ unsigned long AuthnSvc; /* +0x000c */ unsigned char AuthIdentity[4]; /* +0x0010 14 15 00 00 */ unsigned char SecurityQos[4]; /* +0x0014 5b 17 00 00 */ }; struct tagQUERYCONTEXT { unsigned long dwContext; /* +0x0000 */ unsigned char Platform[16]; /* +0x0004 a6 20 00 00 */ unsigned long Locale; /* +0x0014 */ unsigned long dwVersionHi; /* +0x0018 */ unsigned long dwVersionLo; /* +0x001c */ }; struct _PRIVILEGE_SET { unsigned long PrivilegeCount; /* +0x0000 */ unsigned long Control; /* +0x0004 */ unsigned char Privilege[12]; /* +0x0008 ac 20 00 00 */ }; struct _TAPE_GET_POSITION { unsigned long Type; /* +0x0000 */ unsigned long Partition; /* +0x0004 */ unsigned char Offset[8]; /* +0x0008 db 13 00 00 */ }; struct tagEMREOF { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned long nPalEntries; /* +0x0008 */ unsigned long offPalEntries; /* +0x000c */ unsigned long nSizeLast; /* +0x0010 */ }; struct _stat32i64 { unsigned char st_dev[4]; /* +0x0000 75 00 00 00 */ unsigned short st_ino; /* +0x0004 */ unsigned short st_mode; /* +0x0006 */ short st_nlink; /* +0x0008 */ short st_uid; /* +0x000a */ short st_gid; /* +0x000c */ unsigned char st_rdev[8]; /* +0x0010 75 00 00 00 */ long long st_size; /* +0x0018 */ long st_atime; /* +0x0020 */ long st_mtime; /* +0x0024 */ long st_ctime; /* +0x0028 */ }; struct _wfinddata64_t { unsigned char attrib[8]; /* +0x0000 75 00 00 00 */ long long time_create; /* +0x0008 */ long long time_access; /* +0x0010 */ long long time_write; /* +0x0018 */ long long size; /* +0x0020 */ unsigned char name[520]; /* +0x0028 a8 13 00 00 */ }; struct tagPALETTEENTRY { unsigned char peRed; /* +0x0000 */ unsigned char peGreen; /* +0x0001 */ unsigned char peBlue; /* +0x0002 */ unsigned char peFlags; /* +0x0003 */ }; struct tagRPC_CALL_ATTRIBUTES_V1_W { unsigned char Version[4]; /* +0x0000 75 00 00 00 */ unsigned long Flags; /* +0x0004 */ unsigned long ServerPrincipalNameBufferLength; /* +0x0008 */ unsigned short *ServerPrincipalName; /* +0x000c */ unsigned long ClientPrincipalNameBufferLength; /* +0x0010 */ unsigned short *ClientPrincipalName; /* +0x0014 */ unsigned long AuthenticationLevel; /* +0x0018 */ unsigned long AuthenticationService; /* +0x001c */ unsigned char NullSession[4]; /* +0x0020 74 00 00 00 */ }; struct _s__CatchableType { unsigned char properties[4]; /* +0x0000 75 00 00 00 */ unsigned char pType[4]; /* +0x0004 84 14 00 00 */ unsigned char thisDisplacement[12]; /* +0x0008 5e 1d 00 00 */ unsigned char sizeOrOffset[4]; /* +0x0014 74 00 00 00 */ unsigned char copyFunction[4]; /* +0x0018 10 14 00 00 */ }; struct tagLOGCOLORSPACEW { unsigned long lcsSignature; /* +0x0000 */ unsigned long lcsVersion; /* +0x0004 */ unsigned long lcsSize; /* +0x0008 */ long lcsCSType; /* +0x000c */ long lcsIntent; /* +0x0010 */ unsigned char lcsEndpoints[36]; /* +0x0014 eb 1f 00 00 */ unsigned long lcsGammaRed; /* +0x0038 */ unsigned long lcsGammaGreen; /* +0x003c */ unsigned long lcsGammaBlue; /* +0x0040 */ unsigned char lcsFilename[520]; /* +0x0044 a8 13 00 00 */ }; struct tagPOINTER_PEN_INFO { unsigned char pointerInfo[80]; /* +0x0000 4b 1b 00 00 */ unsigned char penFlags[4]; /* +0x0050 75 00 00 00 */ unsigned char penMask[4]; /* +0x0054 75 00 00 00 */ unsigned char pressure[4]; /* +0x0058 75 00 00 00 */ unsigned char rotation[4]; /* +0x005c 75 00 00 00 */ unsigned char tiltX[4]; /* +0x0060 74 00 00 00 */ unsigned char tiltY[4]; /* +0x0064 74 00 00 00 */ }; struct _GRADIENT_RECT { unsigned long UpperLeft; /* +0x0000 */ unsigned long LowerRight; /* +0x0004 */ }; struct _ADMINISTRATOR_POWER_POLICY { unsigned char MinSleep[4]; /* +0x0000 df 13 00 00 */ unsigned char MaxSleep[4]; /* +0x0004 df 13 00 00 */ unsigned long MinVideoTimeout; /* +0x0008 */ unsigned long MaxVideoTimeout; /* +0x000c */ unsigned long MinSpindownTimeout; /* +0x0010 */ unsigned long MaxSpindownTimeout; /* +0x0014 */ }; struct _IMAGE_RESOURCE_DATA_ENTRY { unsigned long OffsetToData; /* +0x0000 */ unsigned long Size; /* +0x0004 */ unsigned long CodePage; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ }; struct _TAPE_ERASE { unsigned long Type; /* +0x0000 */ unsigned char Immediate; /* +0x0004 */ }; struct _RemotableHandle { long fContext; /* +0x0000 */ }; struct _STRRET { unsigned char uType[4]; /* +0x0000 75 00 00 00 */ /* unsigned char pOleStr[0]; +0x0004 71 04 00 00 */ /* unsigned char uOffset[0]; +0x0004 75 00 00 00 */ unsigned char cStr[260]; /* +0x0004 f8 1a 00 00 */ }; struct tagEMRPOLYPOLYLINE16 { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char rclBounds[16]; /* +0x0008 f3 11 00 00 */ unsigned long nPolys; /* +0x0018 */ unsigned long cpts; /* +0x001c */ unsigned char aPolyCounts[4]; /* +0x0020 01 12 00 00 */ unsigned char apts[4]; /* +0x0024 75 1a 00 00 */ }; struct _SERVICE_REQUIRED_PRIVILEGES_INFOA { char *pmszRequiredPrivileges; /* +0x0000 */ }; struct _FLAG_STGMEDIUM { long ContextFlags; /* +0x0000 */ long fPassOwnership; /* +0x0004 */ unsigned char Stgmed[12]; /* +0x0008 8c 1e 00 00 */ }; struct tagCUSTDATA { unsigned long cCustData; /* +0x0000 */ unsigned char prgCustData[4]; /* +0x0004 8d 13 00 00 */ }; struct _JOBOBJECT_BASIC_ACCOUNTING_INFORMATION { unsigned char TotalUserTime[8]; /* +0x0000 db 13 00 00 */ unsigned char TotalKernelTime[8]; /* +0x0008 db 13 00 00 */ unsigned char ThisPeriodTotalUserTime[8]; /* +0x0010 db 13 00 00 */ unsigned char ThisPeriodTotalKernelTime[8]; /* +0x0018 db 13 00 00 */ unsigned long TotalPageFaultCount; /* +0x0020 */ unsigned long TotalProcesses; /* +0x0024 */ unsigned long ActiveProcesses; /* +0x0028 */ unsigned long TotalTerminatedProcesses; /* +0x002c */ }; struct _COMSTAT { /* unsigned char fCtsHold[0]; +0x0000 4a 12 00 00 */ /* unsigned char fDsrHold[0]; +0x0000 9b 15 00 00 */ /* unsigned char fRlsdHold[0]; +0x0000 68 18 00 00 */ /* unsigned char fXoffHold[0]; +0x0000 69 18 00 00 */ /* unsigned char fXoffSent[0]; +0x0000 40 21 00 00 */ /* unsigned char fEof[0]; +0x0000 41 21 00 00 */ /* unsigned char fTxim[0]; +0x0000 6b 18 00 00 */ unsigned char fReserved[4]; /* +0x0000 b1 1a 00 00 */ unsigned long cbInQue; /* +0x0004 */ unsigned long cbOutQue; /* +0x0008 */ }; struct tagPOINTER_INFO { unsigned long pointerType; /* +0x0000 */ unsigned char pointerId[4]; /* +0x0004 75 00 00 00 */ unsigned char frameId[4]; /* +0x0008 75 00 00 00 */ unsigned char pointerFlags[4]; /* +0x000c 75 00 00 00 */ void *sourceDevice; /* +0x0010 */ unsigned char hwndTarget[4]; /* +0x0014 fc 11 00 00 */ unsigned char ptPixelLocation[8]; /* +0x0018 ce 12 00 00 */ unsigned char ptHimetricLocation[8]; /* +0x0020 ce 12 00 00 */ unsigned char ptPixelLocationRaw[8]; /* +0x0028 ce 12 00 00 */ unsigned char ptHimetricLocationRaw[8]; /* +0x0030 ce 12 00 00 */ unsigned long dwTime; /* +0x0038 */ unsigned char historyCount[4]; /* +0x003c 75 00 00 00 */ unsigned char InputData[4]; /* +0x0040 74 00 00 00 */ unsigned long dwKeyStates; /* +0x0044 */ unsigned long long PerformanceCount; /* +0x0048 */ }; struct _TRANSACTIONMANAGER_LOG_INFORMATION { unsigned char LogIdentity[16]; /* +0x0000 ce 13 00 00 */ }; struct tagHW_PROFILE_INFOW { unsigned long dwDockInfo; /* +0x0000 */ unsigned char szHwProfileGuid[78]; /* +0x0004 61 21 00 00 */ unsigned char szHwProfileName[162]; /* +0x0052 62 21 00 00 */ }; struct tagPANOSE { unsigned char bFamilyType; /* +0x0000 */ unsigned char bSerifStyle; /* +0x0001 */ unsigned char bWeight; /* +0x0002 */ unsigned char bProportion; /* +0x0003 */ unsigned char bContrast; /* +0x0004 */ unsigned char bStrokeVariation; /* +0x0005 */ unsigned char bArmStyle; /* +0x0006 */ unsigned char bLetterform; /* +0x0007 */ unsigned char bMidline; /* +0x0008 */ unsigned char bXHeight; /* +0x0009 */ }; struct _ENUM_SERVICE_STATUS_PROCESSW { unsigned char lpServiceName[4]; /* +0x0000 71 04 00 00 */ unsigned char lpDisplayName[4]; /* +0x0004 71 04 00 00 */ unsigned char ServiceStatusProcess[36]; /* +0x0008 11 14 00 00 */ }; struct tagIMEMENUITEMINFOA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char fType[4]; /* +0x0004 75 00 00 00 */ unsigned char fState[4]; /* +0x0008 75 00 00 00 */ unsigned char wID[4]; /* +0x000c 75 00 00 00 */ unsigned char hbmpChecked[4]; /* +0x0010 b9 14 00 00 */ unsigned char hbmpUnchecked[4]; /* +0x0014 b9 14 00 00 */ unsigned long dwItemData; /* +0x0018 */ unsigned char szString[80]; /* +0x001c 73 21 00 00 */ unsigned char hbmpItem[4]; /* +0x006c b9 14 00 00 */ }; struct tagKERNINGPAIR { unsigned short wFirst; /* +0x0000 */ unsigned short wSecond; /* +0x0002 */ unsigned char iKernAmount[4]; /* +0x0004 74 00 00 00 */ }; struct tagCOLORMATCHTOTARGET { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned long dwAction; /* +0x0008 */ unsigned long dwFlags; /* +0x000c */ unsigned long cbName; /* +0x0010 */ unsigned long cbData; /* +0x0014 */ unsigned char Data[4]; /* +0x0018 04 12 00 00 */ }; struct _wireSAFEARR_UNKNOWN { unsigned long Size; /* +0x0000 */ unsigned char apUnknown[4]; /* +0x0004 f2 19 00 00 */ }; struct tagEMRCREATEPEN { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned long ihPen; /* +0x0008 */ unsigned char lopn[16]; /* +0x000c 09 15 00 00 */ }; struct _MIDL_STUBLESS_PROXY_INFO { unsigned char pStubDesc[4]; /* +0x0000 99 1d 00 00 */ unsigned char ProcFormatString[4]; /* +0x0004 aa 19 00 00 */ unsigned char FormatStringOffset[4]; /* +0x0008 ac 19 00 00 */ unsigned char pTransferSyntax[4]; /* +0x000c 83 20 00 00 */ unsigned long nCount; /* +0x0010 */ unsigned char pSyntaxInfo[4]; /* +0x0014 9e 21 00 00 */ }; struct _PROCESS_MITIGATION_DEP_POLICY { unsigned long Flags; /* +0x0000 */ /* unsigned char Enable[0]; +0x0000 4a 12 00 00 */ /* unsigned char DisableAtlThunkEmulation[0]; +0x0000 9b 15 00 00 */ unsigned char ReservedFlags[4]; /* +0x0000 9c 15 00 00 */ unsigned char Permanent; /* +0x0004 */ }; struct _KEY_EVENT_RECORD { unsigned char bKeyDown[4]; /* +0x0000 74 00 00 00 */ unsigned short wRepeatCount; /* +0x0004 */ unsigned short wVirtualKeyCode; /* +0x0006 */ unsigned short wVirtualScanCode; /* +0x0008 */ }; struct _KEY_EVENT_RECORD:: { /* unsigned char UnicodeChar[0]; +0x0000 71 00 00 00 */ char AsciiChar; /* +0x0000 */ }; struct _RPC_SECURITY_QOS { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ }; struct _SEC_WINNT_AUTH_IDENTITY_A { unsigned char *User; /* +0x0000 */ unsigned long UserLength; /* +0x0004 */ unsigned char *Domain; /* +0x0008 */ unsigned long DomainLength; /* +0x000c */ unsigned char *Password; /* +0x0010 */ unsigned long PasswordLength; /* +0x0014 */ unsigned long Flags; /* +0x0018 */ }; struct tagCLIENTCREATESTRUCT { void *hWindowMenu; /* +0x0000 */ unsigned char idFirstChild[4]; /* +0x0004 75 00 00 00 */ }; struct _CONSOLE_HISTORY_INFO { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char HistoryBufferSize[4]; /* +0x0004 75 00 00 00 */ unsigned char NumberOfHistoryBuffers[4]; /* +0x0008 75 00 00 00 */ unsigned long dwFlags; /* +0x000c */ }; struct _OBJECTID { unsigned char Lineage[16]; /* +0x0000 ce 13 00 00 */ unsigned long Uniquifier; /* +0x0010 */ }; struct tagEMRSETPIXELV { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char ptlPixel[8]; /* +0x0008 58 12 00 00 */ unsigned long crColor; /* +0x0010 */ }; struct _RPC_SERVER_INTERFACE { unsigned char Length[4]; /* +0x0000 75 00 00 00 */ unsigned char InterfaceId[20]; /* +0x0004 24 14 00 00 */ unsigned char TransferSyntax[20]; /* +0x0018 24 14 00 00 */ unsigned char DispatchTable[4]; /* +0x002c a8 19 00 00 */ unsigned char RpcProtseqEndpointCount[4]; /* +0x0030 75 00 00 00 */ unsigned char RpcProtseqEndpoint[4]; /* +0x0034 fc 17 00 00 */ void *DefaultManagerEpv; /* +0x0038 */ unsigned char InterpreterInfo[4]; /* +0x003c 92 15 00 00 */ unsigned char Flags[4]; /* +0x0040 75 00 00 00 */ }; struct _NT_TIB64 { unsigned long long ExceptionList; /* +0x0000 */ unsigned long long StackBase; /* +0x0008 */ unsigned long long StackLimit; /* +0x0010 */ unsigned long long SubSystemTib; /* +0x0018 */ unsigned long long FiberData; /* +0x0020 */ unsigned long Version; /* +0x0020 */ unsigned long long ArbitraryUserPointer; /* +0x0028 */ unsigned long long Self; /* +0x0030 */ }; struct _UMS_SCHEDULER_STARTUP_INFO { unsigned long UmsVersion; /* +0x0000 */ void *CompletionList; /* +0x0004 */ unsigned char SchedulerProc[4]; /* +0x0008 d0 21 00 00 */ void *SchedulerParam; /* +0x000c */ }; struct _ABCFLOAT { unsigned char abcfA[4]; /* +0x0000 40 00 00 00 */ unsigned char abcfB[4]; /* +0x0004 40 00 00 00 */ unsigned char abcfC[4]; /* +0x0008 40 00 00 00 */ }; struct tagEMRCREATECOLORSPACE { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned long ihCS; /* +0x0008 */ unsigned char lcs[328]; /* +0x000c d5 21 00 00 */ }; struct _numberfmtW { unsigned char NumDigits[4]; /* +0x0000 75 00 00 00 */ unsigned char LeadingZero[4]; /* +0x0004 75 00 00 00 */ unsigned char Grouping[4]; /* +0x0008 75 00 00 00 */ unsigned char lpDecimalSep[4]; /* +0x000c 71 04 00 00 */ unsigned char lpThousandSep[4]; /* +0x0010 71 04 00 00 */ unsigned char NegativeOrder[4]; /* +0x0014 75 00 00 00 */ }; struct _IMAGE_ALPHA64_RUNTIME_FUNCTION_ENTRY { unsigned long long BeginAddress; /* +0x0000 */ unsigned long long EndAddress; /* +0x0008 */ unsigned long long ExceptionHandler; /* +0x0010 */ unsigned long long HandlerData; /* +0x0018 */ unsigned long long PrologEndAddress; /* +0x0020 */ }; struct _POWER_SESSION_TIMEOUTS { unsigned long InputTimeout; /* +0x0000 */ unsigned long DisplayTimeout; /* +0x0004 */ }; struct _TAPE_GET_MEDIA_PARAMETERS { unsigned char Capacity[8]; /* +0x0000 db 13 00 00 */ unsigned char Remaining[8]; /* +0x0008 db 13 00 00 */ unsigned long BlockSize; /* +0x0010 */ unsigned long PartitionCount; /* +0x0014 */ unsigned char WriteProtected; /* +0x0018 */ }; struct _wfinddatai64_t { unsigned char attrib[4]; /* +0x0000 75 00 00 00 */ long time_create; /* +0x0004 */ long time_access; /* +0x0008 */ long time_write; /* +0x000c */ long long size; /* +0x0010 */ unsigned char name[520]; /* +0x0018 a8 13 00 00 */ }; struct _TOKEN_ELEVATION { unsigned long TokenIsElevated; /* +0x0000 */ }; struct _MEMORY_PRIORITY_INFORMATION { unsigned long MemoryPriority; /* +0x0000 */ }; struct tagSTATDATA { unsigned char formatetc[20]; /* +0x0000 c8 14 00 00 */ unsigned long advf; /* +0x0014 */ unsigned char pAdvSink[4]; /* +0x0018 cb 14 00 00 */ unsigned long dwConnection; /* +0x001c */ }; struct _userSTGMEDIUM::_STGMEDIUM_UNION { unsigned long tymed; /* +0x0000 */ }; struct _userSTGMEDIUM::_STGMEDIUM_UNION::__MIDL_IAdviseSink_0003 { /* unsigned char hMetaFilePict[0]; +0x0000 19 22 00 00 */ /* unsigned char hHEnhMetaFile[0]; +0x0000 1b 22 00 00 */ /* unsigned char hGdiHandle[0]; +0x0000 1d 22 00 00 */ /* unsigned char hGlobal[0]; +0x0000 76 12 00 00 */ /* unsigned char lpszFileName[0]; +0x0000 71 04 00 00 */ /* unsigned char pstm[0]; +0x0000 b7 13 00 00 */ unsigned char pstg[4]; /* +0x0000 b7 13 00 00 */ }; struct _IMAGE_BOUND_FORWARDER_REF { unsigned long TimeDateStamp; /* +0x0000 */ unsigned short OffsetModuleName; /* +0x0004 */ unsigned short Reserved; /* +0x0006 */ }; struct tagRAWINPUTDEVICELIST { void *hDevice; /* +0x0000 */ unsigned long dwType; /* +0x0004 */ }; struct _TRANSACTION_ENLISTMENT_PAIR { unsigned char EnlistmentId[16]; /* +0x0000 ce 13 00 00 */ unsigned char ResourceManagerId[16]; /* +0x0010 ce 13 00 00 */ }; struct tagDIBSECTION { unsigned char dsBm[24]; /* +0x0000 2c 22 00 00 */ unsigned char dsBmih[40]; /* +0x0018 2d 22 00 00 */ unsigned char dsBitfields[12]; /* +0x0040 13 12 00 00 */ void *dshSection; /* +0x004c */ unsigned long dsOffset; /* +0x0050 */ }; struct _WOW64_LDT_ENTRY { unsigned short LimitLow; /* +0x0000 */ unsigned short BaseLow; /* +0x0002 */ }; struct _WIN32_STREAM_ID { unsigned long dwStreamId; /* +0x0000 */ unsigned long dwStreamAttributes; /* +0x0004 */ unsigned char Size[8]; /* +0x0008 db 13 00 00 */ unsigned long dwStreamNameSize; /* +0x0010 */ unsigned char cStreamName[4]; /* +0x0014 83 12 00 00 */ }; struct _FILE_ATTRIBUTE_TAG_INFO { unsigned long FileAttributes; /* +0x0000 */ unsigned long ReparseTag; /* +0x0004 */ }; struct tagENUMLOGFONTEXW { unsigned char elfLogFont[92]; /* +0x0000 04 14 00 00 */ unsigned char elfFullName[128]; /* +0x005c 0f 18 00 00 */ unsigned char elfStyle[64]; /* +0x00dc 7c 13 00 00 */ unsigned char elfScript[64]; /* +0x011c 7c 13 00 00 */ }; struct _TOKEN_OWNER { void *Owner; /* +0x0000 */ }; struct _tagRemBINDINFO { unsigned long cbSize; /* +0x0000 */ unsigned char szExtraInfo[4]; /* +0x0004 71 04 00 00 */ unsigned long grfBindInfoF; /* +0x0008 */ unsigned long dwBindVerb; /* +0x000c */ unsigned char szCustomVerb[4]; /* +0x0010 71 04 00 00 */ unsigned long cbstgmedData; /* +0x0014 */ unsigned long dwOptions; /* +0x0018 */ unsigned long dwOptionsFlags; /* +0x001c */ unsigned long dwCodePage; /* +0x0020 */ unsigned char securityAttributes[12]; /* +0x0024 f9 13 00 00 */ unsigned char iid[16]; /* +0x0030 ce 13 00 00 */ unsigned char pUnk[4]; /* +0x0040 2b 15 00 00 */ unsigned long dwReserved; /* +0x0044 */ }; struct _EVENTSFORLOGFILE { unsigned long ulSize; /* +0x0000 */ unsigned char szLogicalLogFile[512]; /* +0x0004 49 22 00 00 */ unsigned long ulNumRecords; /* +0x0204 */ /* unsigned char pEventLogRecords[0]; +0x0208 4b 22 00 00 */ }; struct _COAUTHINFO { unsigned long dwAuthnSvc; /* +0x0000 */ unsigned long dwAuthzSvc; /* +0x0004 */ unsigned char pwszServerPrincName[4]; /* +0x0008 71 04 00 00 */ unsigned long dwAuthnLevel; /* +0x000c */ unsigned long dwImpersonationLevel; /* +0x0010 */ unsigned char pAuthIdentityData[4]; /* +0x0014 6f 22 00 00 */ unsigned long dwCapabilities; /* +0x0018 */ }; struct _SUPPORTED_OS_INFO { unsigned short OsCount; /* +0x0000 */ unsigned short MitigationExist; /* +0x0002 */ unsigned char OsList[8]; /* +0x0004 72 22 00 00 */ }; struct _SERVICE_START_REASON { unsigned long dwReason; /* +0x0000 */ }; struct _RPC_ASYNC_STATE { unsigned char Size[4]; /* +0x0000 75 00 00 00 */ unsigned long Signature; /* +0x0004 */ long Lock; /* +0x0008 */ unsigned long Flags; /* +0x000c */ void *StubInfo; /* +0x0010 */ void *UserInfo; /* +0x0014 */ void *RuntimeInfo; /* +0x0018 */ unsigned char Event[4]; /* +0x001c 5d 12 00 00 */ unsigned char NotificationType[4]; /* +0x0020 77 22 00 00 */ unsigned char u[16]; /* +0x0024 78 22 00 00 */ unsigned char Reserved[16]; /* +0x0034 79 22 00 00 */ }; struct tagCAUUID { unsigned long cElems; /* +0x0000 */ unsigned char pElems[4]; /* +0x0004 78 15 00 00 */ }; struct _TOKEN_ORIGIN { unsigned char OriginatingLogonSession[8]; /* +0x0000 37 13 00 00 */ }; struct _SERVICE_CONTROL_STATUS_REASON_PARAMSA { unsigned long dwReason; /* +0x0000 */ char *pszComment; /* +0x0004 */ unsigned char ServiceStatus[36]; /* +0x0008 11 14 00 00 */ }; struct tagLAYERPLANEDESCRIPTOR { unsigned short nSize; /* +0x0000 */ unsigned short nVersion; /* +0x0002 */ unsigned long dwFlags; /* +0x0004 */ unsigned char iPixelType; /* +0x0008 */ unsigned char cColorBits; /* +0x0009 */ unsigned char cRedBits; /* +0x000a */ unsigned char cRedShift; /* +0x000b */ unsigned char cGreenBits; /* +0x000c */ unsigned char cGreenShift; /* +0x000d */ unsigned char cBlueBits; /* +0x000e */ unsigned char cBlueShift; /* +0x000f */ unsigned char cAlphaBits; /* +0x0010 */ unsigned char cAlphaShift; /* +0x0011 */ unsigned char cAccumBits; /* +0x0012 */ unsigned char cAccumRedBits; /* +0x0013 */ unsigned char cAccumGreenBits; /* +0x0014 */ unsigned char cAccumBlueBits; /* +0x0015 */ unsigned char cAccumAlphaBits; /* +0x0016 */ unsigned char cDepthBits; /* +0x0017 */ unsigned char cStencilBits; /* +0x0018 */ unsigned char cAuxBuffers; /* +0x0019 */ unsigned char iLayerPlane; /* +0x001a */ unsigned char bReserved; /* +0x001b */ unsigned long crTransparent; /* +0x001c */ }; struct tagPOINTER_DEVICE_CURSOR_INFO { unsigned char cursorId[4]; /* +0x0000 75 00 00 00 */ unsigned char cursor[4]; /* +0x0004 9f 22 00 00 */ }; struct _CONSOLE_CURSOR_INFO { unsigned long dwSize; /* +0x0000 */ unsigned char bVisible[4]; /* +0x0004 74 00 00 00 */ }; struct _STARTUPINFOW { unsigned long cb; /* +0x0000 */ unsigned char lpReserved[4]; /* +0x0004 71 04 00 00 */ unsigned char lpDesktop[4]; /* +0x0008 71 04 00 00 */ unsigned char lpTitle[4]; /* +0x000c 71 04 00 00 */ unsigned long dwX; /* +0x0010 */ unsigned long dwY; /* +0x0014 */ unsigned long dwXSize; /* +0x0018 */ unsigned long dwYSize; /* +0x001c */ unsigned long dwXCountChars; /* +0x0020 */ unsigned long dwYCountChars; /* +0x0024 */ unsigned long dwFillAttribute; /* +0x0028 */ unsigned long dwFlags; /* +0x002c */ unsigned short wShowWindow; /* +0x0030 */ unsigned short cbReserved2; /* +0x0032 */ unsigned char *lpReserved2; /* +0x0034 */ void *hStdInput; /* +0x0038 */ void *hStdOutput; /* +0x003c */ void *hStdError; /* +0x0040 */ }; struct _FILE_DISPOSITION_INFO { unsigned char DeleteFileW; /* +0x0000 */ }; struct tagBITMAPCOREHEADER { unsigned long bcSize; /* +0x0000 */ unsigned short bcWidth; /* +0x0004 */ unsigned short bcHeight; /* +0x0006 */ unsigned short bcPlanes; /* +0x0008 */ unsigned short bcBitCount; /* +0x000a */ }; struct DISPLAYCONFIG_SET_TARGET_PERSISTENCE { unsigned char header[20]; /* +0x0000 47 1b 00 00 */ /* unsigned char bootPersistenceOn[0]; +0x0014 40 17 00 00 */ /* unsigned char reserved[0]; +0x0014 ad 22 00 00 */ unsigned char value[4]; /* +0x0014 75 00 00 00 */ }; struct _SERVICE_STATUS { unsigned long dwServiceType; /* +0x0000 */ unsigned long dwCurrentState; /* +0x0004 */ unsigned long dwControlsAccepted; /* +0x0008 */ unsigned long dwWin32ExitCode; /* +0x000c */ unsigned long dwServiceSpecificExitCode; /* +0x0010 */ unsigned long dwCheckPoint; /* +0x0014 */ unsigned long dwWaitHint; /* +0x0018 */ }; struct _SHORT_SIZEDARR { unsigned long clSize; /* +0x0000 */ unsigned short *pData; /* +0x0004 */ }; struct tagEMRSELECTOBJECT { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned long ihObject; /* +0x0008 */ }; struct _userHGLOBAL { long fContext; /* +0x0000 */ }; struct _userHGLOBAL::__MIDL_IWinTypes_0003 { long hInproc; /* +0x0000 */ /* unsigned char hRemote[0]; +0x0000 46 1f 00 00 */ long long hInproc64; /* +0x0000 */ }; struct _ACTIVATION_CONTEXT_DETAILED_INFORMATION { unsigned long dwFlags; /* +0x0000 */ unsigned long ulFormatVersion; /* +0x0004 */ unsigned long ulAssemblyCount; /* +0x0008 */ unsigned long ulRootManifestPathType; /* +0x000c */ unsigned long ulRootManifestPathChars; /* +0x0010 */ unsigned long ulRootConfigurationPathType; /* +0x0014 */ unsigned long ulRootConfigurationPathChars; /* +0x0018 */ unsigned long ulAppDirPathType; /* +0x001c */ unsigned long ulAppDirPathChars; /* +0x0020 */ unsigned char lpRootManifestPath[4]; /* +0x0024 4f 13 00 00 */ unsigned char lpRootConfigurationPath[4]; /* +0x0028 4f 13 00 00 */ unsigned char lpAppDirPath[4]; /* +0x002c 4f 13 00 00 */ }; struct tagLASTINPUTINFO { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwTime; /* +0x0004 */ }; struct tagHELPINFO { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char iContextType[4]; /* +0x0004 74 00 00 00 */ unsigned char iCtrlId[4]; /* +0x0008 74 00 00 00 */ void *hItemHandle; /* +0x000c */ unsigned long dwContextId; /* +0x0010 */ unsigned char MousePos[8]; /* +0x0014 ce 12 00 00 */ }; struct tagACTCTX_SECTION_KEYED_DATA_2600 { unsigned long cbSize; /* +0x0000 */ unsigned long ulDataFormatVersion; /* +0x0004 */ void *lpData; /* +0x0008 */ unsigned long ulLength; /* +0x000c */ void *lpSectionGlobalData; /* +0x0010 */ unsigned long ulSectionGlobalDataLength; /* +0x0014 */ void *lpSectionBase; /* +0x0018 */ unsigned long ulSectionTotalLength; /* +0x001c */ void *hActCtx; /* +0x0020 */ unsigned long ulAssemblyRosterIndex; /* +0x0024 */ }; struct tagUPDATELAYEREDWINDOWINFO { unsigned long cbSize; /* +0x0000 */ unsigned char hdcDst[4]; /* +0x0004 32 18 00 00 */ unsigned char pptDst[4]; /* +0x0008 d7 22 00 00 */ unsigned char psize[4]; /* +0x000c d9 22 00 00 */ unsigned char hdcSrc[4]; /* +0x0010 32 18 00 00 */ unsigned char pptSrc[4]; /* +0x0014 d7 22 00 00 */ unsigned long crKey; /* +0x0018 */ unsigned char pblend[4]; /* +0x001c dc 22 00 00 */ unsigned long dwFlags; /* +0x0020 */ unsigned char prcDirty[4]; /* +0x0024 1a 18 00 00 */ }; struct _IMAGE_DEBUG_MISC { unsigned long DataType; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned char Unicode; /* +0x0008 */ unsigned char Reserved[3]; /* +0x0009 49 12 00 00 */ unsigned char Data[4]; /* +0x000c 04 12 00 00 */ }; struct tagEMRSETCOLORADJUSTMENT { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char ColorAdjustment[24]; /* +0x0008 f2 22 00 00 */ }; struct _FPO_DATA { unsigned long ulOffStart; /* +0x0000 */ unsigned long cbProcSize; /* +0x0004 */ unsigned long cdwLocals; /* +0x0008 */ unsigned short cdwParams; /* +0x000c */ /* unsigned char cbProlog[0]; +0x000e f9 22 00 00 */ /* unsigned char cbRegs[0]; +0x000e fa 22 00 00 */ /* unsigned char fHasSEH[0]; +0x000e fb 22 00 00 */ /* unsigned char fUseBP[0]; +0x000e fc 22 00 00 */ /* unsigned char reserved[0]; +0x000e fd 22 00 00 */ unsigned char cbFrame[2]; /* +0x000e fe 22 00 00 */ }; struct tagNONCLIENTMETRICSW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char iBorderWidth[4]; /* +0x0004 74 00 00 00 */ unsigned char iScrollWidth[4]; /* +0x0008 74 00 00 00 */ unsigned char iScrollHeight[4]; /* +0x000c 74 00 00 00 */ unsigned char iCaptionWidth[4]; /* +0x0010 74 00 00 00 */ unsigned char iCaptionHeight[4]; /* +0x0014 74 00 00 00 */ unsigned char lfCaptionFont[92]; /* +0x0018 04 14 00 00 */ unsigned char iSmCaptionWidth[4]; /* +0x0074 74 00 00 00 */ unsigned char iSmCaptionHeight[4]; /* +0x0078 74 00 00 00 */ unsigned char lfSmCaptionFont[92]; /* +0x007c 04 14 00 00 */ unsigned char iMenuWidth[4]; /* +0x00d8 74 00 00 00 */ unsigned char iMenuHeight[4]; /* +0x00dc 74 00 00 00 */ unsigned char lfMenuFont[92]; /* +0x00e0 04 14 00 00 */ unsigned char lfStatusFont[92]; /* +0x013c 04 14 00 00 */ unsigned char lfMessageFont[92]; /* +0x0198 04 14 00 00 */ unsigned char iPaddedBorderWidth[4]; /* +0x01f4 74 00 00 00 */ }; struct _CONSOLE_SCREEN_BUFFER_INFO { unsigned char dwSize[4]; /* +0x0000 bc 14 00 00 */ unsigned char dwCursorPosition[4]; /* +0x0004 bc 14 00 00 */ unsigned short wAttributes; /* +0x0008 */ unsigned char srWindow[8]; /* +0x000a 8a 1c 00 00 */ unsigned char dwMaximumWindowSize[4]; /* +0x0012 bc 14 00 00 */ }; struct tagCSPLATFORM { unsigned long dwPlatformId; /* +0x0000 */ unsigned long dwVersionHi; /* +0x0004 */ unsigned long dwVersionLo; /* +0x0008 */ unsigned long dwProcessorArch; /* +0x000c */ }; struct _SERVICE_DESCRIPTIONA { char *lpDescription; /* +0x0000 */ }; struct tagEMRPOLYDRAW16 { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char rclBounds[16]; /* +0x0008 f3 11 00 00 */ unsigned long cpts; /* +0x0018 */ unsigned char apts[4]; /* +0x001c 75 1a 00 00 */ unsigned char abTypes[4]; /* +0x0020 04 12 00 00 */ }; struct _LONG_SIZEDARR { unsigned long clSize; /* +0x0000 */ unsigned long *pData; /* +0x0004 */ }; struct _JOBOBJECT_NOTIFICATION_LIMIT_INFORMATION { unsigned long long IoReadBytesLimit; /* +0x0000 */ unsigned long long IoWriteBytesLimit; /* +0x0008 */ unsigned char PerJobUserTimeLimit[8]; /* +0x0010 db 13 00 00 */ unsigned long long JobMemoryLimit; /* +0x0018 */ unsigned char RateControlTolerance[4]; /* +0x0020 64 15 00 00 */ unsigned char RateControlToleranceInterval[4]; /* +0x0024 65 15 00 00 */ unsigned long LimitFlags; /* +0x0028 */ }; struct _SEC_WINNT_AUTH_IDENTITY_W { unsigned short *User; /* +0x0000 */ unsigned long UserLength; /* +0x0004 */ unsigned short *Domain; /* +0x0008 */ unsigned long DomainLength; /* +0x000c */ unsigned short *Password; /* +0x0010 */ unsigned long PasswordLength; /* +0x0014 */ unsigned long Flags; /* +0x0018 */ }; struct _NDR_USER_MARSHAL_INFO { unsigned long InformationLevel; /* +0x0000 */ unsigned char Level1[40]; /* +0x0004 40 23 00 00 */ }; struct tagEMRSETVIEWPORTORGEX { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char ptlOrigin[8]; /* +0x0008 58 12 00 00 */ }; struct _WOW64_DESCRIPTOR_TABLE_ENTRY { unsigned long Selector; /* +0x0000 */ unsigned char Descriptor[8]; /* +0x0004 48 23 00 00 */ }; struct _SERVICE_TABLE_ENTRYA { char *lpServiceName; /* +0x0000 */ unsigned char lpServiceProc[4]; /* +0x0004 08 20 00 00 */ }; struct tagENUMLOGFONTEXA { unsigned char elfLogFont[60]; /* +0x0000 0b 14 00 00 */ unsigned char elfFullName[64]; /* +0x003c ac 14 00 00 */ unsigned char elfStyle[32]; /* +0x007c ad 14 00 00 */ unsigned char elfScript[32]; /* +0x009c ad 14 00 00 */ }; struct _RPC_PROTSEQ_VECTORA { unsigned char Count[4]; /* +0x0000 75 00 00 00 */ unsigned char Protseq[4]; /* +0x0004 4f 23 00 00 */ }; struct _TRANSACTIONMANAGER_OLDEST_INFORMATION { unsigned char OldestTransactionGuid[16]; /* +0x0000 ce 13 00 00 */ }; struct tagMETAHEADER { unsigned short mtType; /* +0x0000 */ unsigned short mtHeaderSize; /* +0x0002 */ unsigned short mtVersion; /* +0x0004 */ unsigned long mtSize; /* +0x0006 */ unsigned short mtNoObjects; /* +0x000a */ unsigned long mtMaxRecord; /* +0x000c */ unsigned short mtNoParameters; /* +0x0010 */ }; struct _REMOTE_NAME_INFOW { unsigned char lpUniversalName[4]; /* +0x0000 71 04 00 00 */ unsigned char lpConnectionName[4]; /* +0x0004 71 04 00 00 */ unsigned char lpRemainingPath[4]; /* +0x0008 71 04 00 00 */ }; struct tagFILTERKEYS { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned long iWaitMSec; /* +0x0008 */ unsigned long iDelayMSec; /* +0x000c */ unsigned long iRepeatMSec; /* +0x0010 */ unsigned long iBounceMSec; /* +0x0014 */ }; struct tagEMRSETTEXTCOLOR { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned long crColor; /* +0x0008 */ }; struct tagSTATPROPSTG { unsigned char lpwstrName[4]; /* +0x0000 71 04 00 00 */ unsigned long propid; /* +0x0004 */ unsigned short vt; /* +0x0008 */ }; struct tagWNDCLASSA { unsigned char style[4]; /* +0x0000 75 00 00 00 */ unsigned char lpfnWndProc[4]; /* +0x0004 b9 1c 00 00 */ unsigned char cbClsExtra[4]; /* +0x0008 74 00 00 00 */ unsigned char cbWndExtra[4]; /* +0x000c 74 00 00 00 */ unsigned char hInstance[4]; /* +0x0010 f5 12 00 00 */ unsigned char hIcon[4]; /* +0x0014 92 19 00 00 */ unsigned char hCursor[4]; /* +0x0018 92 19 00 00 */ unsigned char hbrBackground[4]; /* +0x001c 98 1a 00 00 */ unsigned char lpszMenuName[4]; /* +0x0020 bf 12 00 00 */ unsigned char lpszClassName[4]; /* +0x0024 bf 12 00 00 */ }; struct _XSTATE_CONTEXT { unsigned long long Mask; /* +0x0000 */ unsigned long Length; /* +0x0008 */ unsigned long Reserved1; /* +0x000c */ unsigned char Area[4]; /* +0x0010 c7 23 00 00 */ unsigned long Reserved2; /* +0x0014 */ void *Buffer; /* +0x0018 */ unsigned long Reserved3; /* +0x001c */ }; struct tagDELETEITEMSTRUCT { unsigned char CtlType[4]; /* +0x0000 75 00 00 00 */ unsigned char CtlID[4]; /* +0x0004 75 00 00 00 */ unsigned char itemID[4]; /* +0x0008 75 00 00 00 */ unsigned char hwndItem[4]; /* +0x000c fc 11 00 00 */ unsigned long itemData; /* +0x0010 */ }; struct _RPC_C_OPT_COOKIE_AUTH_DESCRIPTOR { unsigned long BufferSize; /* +0x0000 */ char *Buffer; /* +0x0004 */ }; struct tagIMECHARPOSITION { unsigned long dwSize; /* +0x0000 */ unsigned long dwCharPos; /* +0x0004 */ unsigned char pt[8]; /* +0x0008 ce 12 00 00 */ unsigned char cLineHeight[4]; /* +0x0010 75 00 00 00 */ unsigned char rcDocument[16]; /* +0x0014 c0 12 00 00 */ }; struct _s__ThrowInfo { unsigned char attributes[4]; /* +0x0000 75 00 00 00 */ unsigned char pmfnUnwind[4]; /* +0x0004 10 14 00 00 */ unsigned char pForwardCompat[4]; /* +0x0008 a9 14 00 00 */ unsigned char pCatchableTypeArray[4]; /* +0x000c e0 23 00 00 */ }; struct _TRANSACTIONMANAGER_LOGPATH_INFORMATION { unsigned long LogPathLength; /* +0x0000 */ unsigned char LogPath[4]; /* +0x0004 83 12 00 00 */ }; struct _TRANSACTION_BASIC_INFORMATION { unsigned char TransactionId[16]; /* +0x0000 ce 13 00 00 */ unsigned long State; /* +0x0010 */ unsigned long Outcome; /* +0x0014 */ }; struct tagMENUGETOBJECTINFO { unsigned long dwFlags; /* +0x0000 */ unsigned char uPos[4]; /* +0x0004 75 00 00 00 */ unsigned char hmenu[4]; /* +0x0008 4d 13 00 00 */ void *riid; /* +0x000c */ void *pvObj; /* +0x0010 */ }; struct tagWNDCLASSW { unsigned char style[4]; /* +0x0000 75 00 00 00 */ unsigned char lpfnWndProc[4]; /* +0x0004 b9 1c 00 00 */ unsigned char cbClsExtra[4]; /* +0x0008 74 00 00 00 */ unsigned char cbWndExtra[4]; /* +0x000c 74 00 00 00 */ unsigned char hInstance[4]; /* +0x0010 f5 12 00 00 */ unsigned char hIcon[4]; /* +0x0014 92 19 00 00 */ unsigned char hCursor[4]; /* +0x0018 92 19 00 00 */ unsigned char hbrBackground[4]; /* +0x001c 98 1a 00 00 */ unsigned char lpszMenuName[4]; /* +0x0020 4f 13 00 00 */ unsigned char lpszClassName[4]; /* +0x0024 4f 13 00 00 */ }; struct tagRPC_EXTENDED_ERROR_INFO { unsigned long Version; /* +0x0000 */ unsigned char ComputerName[4]; /* +0x0004 71 04 00 00 */ unsigned long ProcessID; /* +0x0008 */ }; struct tagNEWTEXTMETRICW { long tmHeight; /* +0x0000 */ long tmAscent; /* +0x0004 */ long tmDescent; /* +0x0008 */ long tmInternalLeading; /* +0x000c */ long tmExternalLeading; /* +0x0010 */ long tmAveCharWidth; /* +0x0014 */ long tmMaxCharWidth; /* +0x0018 */ long tmWeight; /* +0x001c */ long tmOverhang; /* +0x0020 */ long tmDigitizedAspectX; /* +0x0024 */ long tmDigitizedAspectY; /* +0x0028 */ unsigned char tmFirstChar[2]; /* +0x002c 71 00 00 00 */ unsigned char tmLastChar[2]; /* +0x002e 71 00 00 00 */ unsigned char tmDefaultChar[2]; /* +0x0030 71 00 00 00 */ unsigned char tmBreakChar[2]; /* +0x0032 71 00 00 00 */ unsigned char tmItalic; /* +0x0034 */ unsigned char tmUnderlined; /* +0x0035 */ unsigned char tmStruckOut; /* +0x0036 */ unsigned char tmPitchAndFamily; /* +0x0037 */ unsigned char tmCharSet; /* +0x0038 */ unsigned long ntmFlags; /* +0x003c */ unsigned char ntmSizeEM[4]; /* +0x0040 75 00 00 00 */ unsigned char ntmCellHeight[4]; /* +0x0044 75 00 00 00 */ unsigned char ntmAvgWidth[4]; /* +0x0048 75 00 00 00 */ }; struct DISPLAYCONFIG_2DREGION { unsigned char cx[4]; /* +0x0000 75 00 00 00 */ unsigned char cy[4]; /* +0x0004 75 00 00 00 */ }; struct tagEMRMASKBLT { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char rclBounds[16]; /* +0x0008 f3 11 00 00 */ long xDest; /* +0x0018 */ long yDest; /* +0x001c */ long cxDest; /* +0x0020 */ long cyDest; /* +0x0024 */ unsigned long dwRop; /* +0x0028 */ long xSrc; /* +0x002c */ long ySrc; /* +0x0030 */ unsigned char xformSrc[24]; /* +0x0034 f4 11 00 00 */ unsigned long crBkColorSrc; /* +0x004c */ unsigned long iUsageSrc; /* +0x0050 */ unsigned long offBmiSrc; /* +0x0054 */ unsigned long cbBmiSrc; /* +0x0058 */ unsigned long offBitsSrc; /* +0x005c */ unsigned long cbBitsSrc; /* +0x0060 */ long xMask; /* +0x0064 */ long yMask; /* +0x0068 */ unsigned long iUsageMask; /* +0x006c */ unsigned long offBmiMask; /* +0x0070 */ unsigned long cbBmiMask; /* +0x0074 */ unsigned long offBitsMask; /* +0x0078 */ unsigned long cbBitsMask; /* +0x007c */ }; struct _IMAGE_AUX_SYMBOL_EX:: { unsigned long crc; /* +0x0000 */ unsigned char rgbReserved[16]; /* +0x0004 d3 19 00 00 */ }; struct _IMAGE_AUX_SYMBOL_EX:: { unsigned long Length; /* +0x0000 */ unsigned short NumberOfRelocations; /* +0x0004 */ unsigned short NumberOfLinenumbers; /* +0x0006 */ unsigned long CheckSum; /* +0x0008 */ short Number; /* +0x000c */ unsigned char Selection; /* +0x000e */ unsigned char bReserved; /* +0x000f */ short HighNumber; /* +0x0010 */ unsigned char rgbReserved[2]; /* +0x0012 9c 14 00 00 */ }; struct _IMAGE_AUX_SYMBOL_EX:: { unsigned char Name[20]; /* +0x0000 e9 13 00 00 */ }; struct _IMAGE_AUX_SYMBOL_EX:: { unsigned long WeakDefaultSymIndex; /* +0x0000 */ unsigned long WeakSearchType; /* +0x0004 */ unsigned char rgbReserved[12]; /* +0x0008 9d 14 00 00 */ }; struct _SERVICE_SID_INFO { unsigned long dwServiceSidType; /* +0x0000 */ }; struct tagEMRPIXELFORMAT { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char pfd[40]; /* +0x0008 e4 1a 00 00 */ }; struct _REASON_CONTEXT { unsigned long Version; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ }; struct _REASON_CONTEXT:::: { unsigned char LocalizedReasonModule[4]; /* +0x0000 f5 12 00 00 */ unsigned long LocalizedReasonId; /* +0x0004 */ unsigned long ReasonStringCount; /* +0x0008 */ unsigned char ReasonStrings[4]; /* +0x000c d1 12 00 00 */ }; struct tagCREATESTRUCTA { void *lpCreateParams; /* +0x0000 */ unsigned char hInstance[4]; /* +0x0004 f5 12 00 00 */ unsigned char hMenu[4]; /* +0x0008 4d 13 00 00 */ unsigned char hwndParent[4]; /* +0x000c fc 11 00 00 */ unsigned char cy[4]; /* +0x0010 74 00 00 00 */ unsigned char cx[4]; /* +0x0014 74 00 00 00 */ unsigned char y[4]; /* +0x0018 74 00 00 00 */ unsigned char x[4]; /* +0x001c 74 00 00 00 */ long style; /* +0x0020 */ unsigned char lpszName[4]; /* +0x0024 bf 12 00 00 */ unsigned char lpszClass[4]; /* +0x0028 bf 12 00 00 */ unsigned long dwExStyle; /* +0x002c */ }; struct tagSOUNDSENTRYA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned long iFSTextEffect; /* +0x0008 */ unsigned long iFSTextEffectMSec; /* +0x000c */ unsigned long iFSTextEffectColorBits; /* +0x0010 */ unsigned long iFSGrafEffect; /* +0x0014 */ unsigned long iFSGrafEffectMSec; /* +0x0018 */ unsigned long iFSGrafEffectColor; /* +0x001c */ unsigned long iWindowsEffect; /* +0x0020 */ unsigned long iWindowsEffectMSec; /* +0x0024 */ char *lpszWindowsEffectDLL; /* +0x0028 */ unsigned long iWindowsEffectOrdinal; /* +0x002c */ }; struct _numberfmtA { unsigned char NumDigits[4]; /* +0x0000 75 00 00 00 */ unsigned char LeadingZero[4]; /* +0x0004 75 00 00 00 */ unsigned char Grouping[4]; /* +0x0008 75 00 00 00 */ char *lpDecimalSep; /* +0x000c */ char *lpThousandSep; /* +0x0010 */ unsigned char NegativeOrder[4]; /* +0x0014 75 00 00 00 */ }; struct _SERVICE_TIMECHANGE_INFO { unsigned char liNewTime[8]; /* +0x0000 db 13 00 00 */ unsigned char liOldTime[8]; /* +0x0008 db 13 00 00 */ }; struct tagINTERFACEDATA { unsigned char pmethdata[4]; /* +0x0000 55 13 00 00 */ unsigned char cMembers[4]; /* +0x0004 75 00 00 00 */ }; struct tagPICTDESC { unsigned char cbSizeofstruct[4]; /* +0x0000 75 00 00 00 */ unsigned char picType[4]; /* +0x0004 75 00 00 00 */ /* unsigned char bmp[0]; +0x0008 fd 24 00 00 */ /* unsigned char wmf[0]; +0x0008 fe 24 00 00 */ /* unsigned char icon[0]; +0x0008 ff 24 00 00 */ unsigned char emf[12]; /* +0x0008 00 25 00 00 */ }; struct _ICONINFO { unsigned char fIcon[4]; /* +0x0000 74 00 00 00 */ unsigned long xHotspot; /* +0x0004 */ unsigned long yHotspot; /* +0x0008 */ unsigned char hbmMask[4]; /* +0x000c b9 14 00 00 */ unsigned char hbmColor[4]; /* +0x0010 b9 14 00 00 */ }; struct _SE_ACCESS_REQUEST { unsigned long Size; /* +0x0000 */ unsigned char SeSecurityDescriptor[4]; /* +0x0004 09 25 00 00 */ unsigned long DesiredAccess; /* +0x0008 */ unsigned long PreviouslyGrantedAccess; /* +0x000c */ void *PrincipalSelfSid; /* +0x0010 */ unsigned char GenericMapping[4]; /* +0x0014 f2 1c 00 00 */ unsigned long ObjectTypeListCount; /* +0x0018 */ unsigned char ObjectTypeList[4]; /* +0x001c 0b 25 00 00 */ }; struct tagRPC_EXTENDED_ERROR_INFO:: { /* unsigned char SystemTime[0]; +0x0000 7d 13 00 00 */ unsigned char FileTime[16]; /* +0x0000 91 14 00 00 */ }; struct _PROCESS_INFORMATION { void *hProcess; /* +0x0000 */ void *hThread; /* +0x0004 */ unsigned long dwProcessId; /* +0x0008 */ unsigned long dwThreadId; /* +0x000c */ }; struct tagWINDOWPOS { unsigned char hwnd[4]; /* +0x0000 fc 11 00 00 */ unsigned char hwndInsertAfter[4]; /* +0x0004 fc 11 00 00 */ unsigned char x[4]; /* +0x0008 74 00 00 00 */ unsigned char y[4]; /* +0x000c 74 00 00 00 */ unsigned char cx[4]; /* +0x0010 74 00 00 00 */ unsigned char cy[4]; /* +0x0014 74 00 00 00 */ unsigned char flags[4]; /* +0x0018 75 00 00 00 */ }; struct tagNONCLIENTMETRICSA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char iBorderWidth[4]; /* +0x0004 74 00 00 00 */ unsigned char iScrollWidth[4]; /* +0x0008 74 00 00 00 */ unsigned char iScrollHeight[4]; /* +0x000c 74 00 00 00 */ unsigned char iCaptionWidth[4]; /* +0x0010 74 00 00 00 */ unsigned char iCaptionHeight[4]; /* +0x0014 74 00 00 00 */ unsigned char lfCaptionFont[60]; /* +0x0018 0b 14 00 00 */ unsigned char iSmCaptionWidth[4]; /* +0x0054 74 00 00 00 */ unsigned char iSmCaptionHeight[4]; /* +0x0058 74 00 00 00 */ unsigned char lfSmCaptionFont[60]; /* +0x005c 0b 14 00 00 */ unsigned char iMenuWidth[4]; /* +0x0098 74 00 00 00 */ unsigned char iMenuHeight[4]; /* +0x009c 74 00 00 00 */ unsigned char lfMenuFont[60]; /* +0x00a0 0b 14 00 00 */ unsigned char lfStatusFont[60]; /* +0x00dc 0b 14 00 00 */ unsigned char lfMessageFont[60]; /* +0x0118 0b 14 00 00 */ unsigned char iPaddedBorderWidth[4]; /* +0x0154 74 00 00 00 */ }; struct tagGLYPHSET { unsigned long cbThis; /* +0x0000 */ unsigned long flAccel; /* +0x0004 */ unsigned long cGlyphsSupported; /* +0x0008 */ unsigned long cRanges; /* +0x000c */ unsigned char ranges[4]; /* +0x0010 54 25 00 00 */ }; struct tagMDICREATESTRUCTW { unsigned char szClass[4]; /* +0x0000 4f 13 00 00 */ unsigned char szTitle[4]; /* +0x0004 4f 13 00 00 */ void *hOwner; /* +0x0008 */ unsigned char x[4]; /* +0x000c 74 00 00 00 */ unsigned char y[4]; /* +0x0010 74 00 00 00 */ unsigned char cx[4]; /* +0x0014 74 00 00 00 */ unsigned char cy[4]; /* +0x0018 74 00 00 00 */ unsigned long style; /* +0x001c */ long lParam; /* +0x0020 */ }; struct _KCRM_TRANSACTION_BLOB { unsigned char UOW[16]; /* +0x0000 ce 13 00 00 */ unsigned char TmIdentity[16]; /* +0x0010 ce 13 00 00 */ unsigned long IsolationLevel; /* +0x0020 */ unsigned long IsolationFlags; /* +0x0024 */ unsigned long Timeout; /* +0x0028 */ unsigned char Description[128]; /* +0x002c 0f 18 00 00 */ }; struct _cpinfo { unsigned char MaxCharSize[4]; /* +0x0000 75 00 00 00 */ unsigned char DefaultChar[2]; /* +0x0004 9c 14 00 00 */ unsigned char LeadByte[14]; /* +0x0006 9d 14 00 00 */ }; struct _POWER_SESSION_CONNECT { unsigned char Connected; /* +0x0000 */ unsigned char Console; /* +0x0001 */ }; struct tagRPC_CALL_ATTRIBUTES_V2_A { unsigned char Version[4]; /* +0x0000 75 00 00 00 */ unsigned long Flags; /* +0x0004 */ unsigned long ServerPrincipalNameBufferLength; /* +0x0008 */ unsigned char *ServerPrincipalName; /* +0x000c */ unsigned long ClientPrincipalNameBufferLength; /* +0x0010 */ unsigned char *ClientPrincipalName; /* +0x0014 */ unsigned long AuthenticationLevel; /* +0x0018 */ unsigned long AuthenticationService; /* +0x001c */ unsigned char NullSession[4]; /* +0x0020 74 00 00 00 */ unsigned char KernelModeCaller[4]; /* +0x0024 74 00 00 00 */ unsigned long ProtocolSequence; /* +0x0028 */ unsigned long IsClientLocal; /* +0x002c */ void *ClientPID; /* +0x0030 */ unsigned long CallStatus; /* +0x0034 */ unsigned char CallType[4]; /* +0x0038 f8 14 00 00 */ unsigned char CallLocalAddress[4]; /* +0x003c fa 14 00 00 */ unsigned short OpNum; /* +0x0040 */ unsigned char InterfaceUuid[16]; /* +0x0044 ce 13 00 00 */ }; struct _FILE_NAME_INFO { unsigned long FileNameLength; /* +0x0000 */ unsigned char FileName[4]; /* +0x0004 83 12 00 00 */ }; struct tagIMEMENUITEMINFOW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char fType[4]; /* +0x0004 75 00 00 00 */ unsigned char fState[4]; /* +0x0008 75 00 00 00 */ unsigned char wID[4]; /* +0x000c 75 00 00 00 */ unsigned char hbmpChecked[4]; /* +0x0010 b9 14 00 00 */ unsigned char hbmpUnchecked[4]; /* +0x0014 b9 14 00 00 */ unsigned long dwItemData; /* +0x0018 */ unsigned char szString[160]; /* +0x001c 62 21 00 00 */ unsigned char hbmpItem[4]; /* +0x00bc b9 14 00 00 */ }; struct _OPERATION_START_PARAMETERS { unsigned long Version; /* +0x0000 */ unsigned long OperationId; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ }; struct tagEMRSETMITERLIMIT { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char eMiterLimit[4]; /* +0x0008 40 00 00 00 */ }; struct _wfinddata_t { unsigned char attrib[4]; /* +0x0000 75 00 00 00 */ long time_create; /* +0x0004 */ long time_access; /* +0x0008 */ long time_write; /* +0x000c */ unsigned long size; /* +0x0010 */ unsigned char name[520]; /* +0x0014 a8 13 00 00 */ }; struct _SLIST_HEADER { unsigned long long Alignment; /* +0x0000 */ unsigned char Next[4]; /* +0x0000 78 18 00 00 */ unsigned short Depth; /* +0x0004 */ unsigned short Sequence; /* +0x0006 */ }; struct tagLOGBRUSH32 { unsigned char lbStyle[4]; /* +0x0000 75 00 00 00 */ unsigned long lbColor; /* +0x0004 */ unsigned long lbHatch; /* +0x0008 */ }; struct tagOCPFIPARAMS { unsigned long cbStructSize; /* +0x0000 */ unsigned char hWndOwner[4]; /* +0x0004 fc 11 00 00 */ unsigned char x[4]; /* +0x0008 74 00 00 00 */ unsigned char y[4]; /* +0x000c 74 00 00 00 */ unsigned char lpszCaption[4]; /* +0x0010 4f 13 00 00 */ unsigned long cObjects; /* +0x0014 */ unsigned char lplpUnk[4]; /* +0x0018 f2 19 00 00 */ unsigned long cPages; /* +0x001c */ unsigned char lpPages[4]; /* +0x0020 78 15 00 00 */ unsigned long lcid; /* +0x0024 */ long dispidInitialProperty; /* +0x0028 */ }; enum __vc_attributes::pointer_defaultAttribute::type_e { ptr = 0, ref = 1, unique = 2 }; enum __vc_attributes::threadingAttribute::threading_e { apartment = 1, single = 2, free = 3, neutral = 4, both = 5 }; enum __vc_attributes::event_receiverAttribute::type_e { native = 0, com = 1, managed = 2 }; enum __vc_attributes::aggregatableAttribute::type_e { never = 0, allowed = 1, always = 2 }; enum __vc_attributes::event_sourceAttribute::optimize_e { speed = 0, size = 1 }; enum __vc_attributes::moduleAttribute::type_e { dll = 1, exe = 2, service = 3, unspecified = 4, EXE = 2, SERVICE = 3 }; enum __vc_attributes::helper_attributes::usageAttribute::usage_e { eAnyUsage = 0, eCoClassUsage = 1, eCOMInterfaceUsage = 2, eInterfaceUsage = 6, eMemberUsage = 8, eMethodUsage = 16, eInterfaceMethodUsage = 32, eInterfaceMemberUsage = 64, eCoClassMemberUsage = 128, eCoClassMethodUsage = 256, eGlobalMethodUsage = 768, eGlobalDataUsage = 1024, eClassUsage = 2048, eInterfaceParameterUsage = 4096, eMethodParameterUsage = 12288, eIDLModuleUsage = 16384, = 32770 }; enum __vc_attributes::helper_attributes::v1_alttypeAttribute::type_e { eBoolean = 0, eInteger = 1, eFloat = 2, eDouble = 3 }; struct tagEMRGDICOMMENT { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned long cbData; /* +0x0008 */ unsigned char Data[4]; /* +0x000c 04 12 00 00 */ }; struct tagMENUINFO { unsigned long cbSize; /* +0x0000 */ unsigned long fMask; /* +0x0004 */ unsigned long dwStyle; /* +0x0008 */ unsigned char cyMax[4]; /* +0x000c 75 00 00 00 */ unsigned char hbrBack[4]; /* +0x0010 98 1a 00 00 */ unsigned long dwContextHelpID; /* +0x0014 */ unsigned long dwMenuData; /* +0x0018 */ }; struct _FILE_ID_BOTH_DIR_INFO { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long FileIndex; /* +0x0004 */ unsigned char CreationTime[8]; /* +0x0008 db 13 00 00 */ unsigned char LastAccessTime[8]; /* +0x0010 db 13 00 00 */ unsigned char LastWriteTime[8]; /* +0x0018 db 13 00 00 */ unsigned char ChangeTime[8]; /* +0x0020 db 13 00 00 */ unsigned char EndOfFile[8]; /* +0x0028 db 13 00 00 */ unsigned char AllocationSize[8]; /* +0x0030 db 13 00 00 */ unsigned long FileAttributes; /* +0x0038 */ unsigned long FileNameLength; /* +0x003c */ unsigned long EaSize; /* +0x0040 */ char ShortNameLength; /* +0x0044 */ unsigned char ShortName[26]; /* +0x0046 1b 29 00 00 */ unsigned char FileId[8]; /* +0x0060 db 13 00 00 */ unsigned char FileName[8]; /* +0x0068 83 12 00 00 */ }; struct tagRECONVERTSTRING { unsigned long dwSize; /* +0x0000 */ unsigned long dwVersion; /* +0x0004 */ unsigned long dwStrLen; /* +0x0008 */ unsigned long dwStrOffset; /* +0x000c */ unsigned long dwCompStrLen; /* +0x0010 */ unsigned long dwCompStrOffset; /* +0x0014 */ unsigned long dwTargetStrLen; /* +0x0018 */ unsigned long dwTargetStrOffset; /* +0x001c */ }; struct _NETCONNECTINFOSTRUCT { unsigned long cbStructure; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned long dwSpeed; /* +0x0008 */ unsigned long dwDelay; /* +0x000c */ unsigned long dwOptDataSize; /* +0x0010 */ }; struct tagALTTABINFO { unsigned long cbSize; /* +0x0000 */ unsigned char cItems[4]; /* +0x0004 74 00 00 00 */ unsigned char cColumns[4]; /* +0x0008 74 00 00 00 */ unsigned char cRows[4]; /* +0x000c 74 00 00 00 */ unsigned char iColFocus[4]; /* +0x0010 74 00 00 00 */ unsigned char iRowFocus[4]; /* +0x0014 74 00 00 00 */ unsigned char cxItem[4]; /* +0x0018 74 00 00 00 */ unsigned char cyItem[4]; /* +0x001c 74 00 00 00 */ unsigned char ptStart[8]; /* +0x0020 ce 12 00 00 */ }; struct _userHBITMAP { long fContext; /* +0x0000 */ }; struct _userHBITMAP::__MIDL_IWinTypes_0007 { long hInproc; /* +0x0000 */ /* unsigned char hRemote[0]; +0x0000 3d 29 00 00 */ long long hInproc64; /* +0x0000 */ }; struct _TAPE_CREATE_PARTITION { unsigned long Method; /* +0x0000 */ unsigned long Count; /* +0x0004 */ unsigned long Size; /* +0x0008 */ }; struct tagEMRSETCOLORSPACE { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned long ihCS; /* +0x0008 */ }; struct _SYSTEM_POWER_POLICY { unsigned long Revision; /* +0x0000 */ unsigned char PowerButton[12]; /* +0x0004 a2 18 00 00 */ unsigned char SleepButton[12]; /* +0x0010 a2 18 00 00 */ unsigned char LidClose[12]; /* +0x001c a2 18 00 00 */ unsigned char LidOpenWake[4]; /* +0x0028 df 13 00 00 */ unsigned long Reserved; /* +0x002c */ unsigned char Idle[12]; /* +0x0030 a2 18 00 00 */ unsigned long IdleTimeout; /* +0x003c */ unsigned char IdleSensitivity; /* +0x0040 */ unsigned char DynamicThrottle; /* +0x0041 */ unsigned char Spare2[2]; /* +0x0042 9c 14 00 00 */ unsigned char MinSleep[4]; /* +0x0044 df 13 00 00 */ unsigned char MaxSleep[4]; /* +0x0048 df 13 00 00 */ unsigned char ReducedLatencySleep[4]; /* +0x004c df 13 00 00 */ unsigned long WinLogonFlags; /* +0x0050 */ unsigned long Spare3; /* +0x0054 */ unsigned long DozeS4Timeout; /* +0x0058 */ unsigned long BroadcastCapacityResolution; /* +0x005c */ unsigned char DischargePolicy[96]; /* +0x0060 92 29 00 00 */ unsigned long VideoTimeout; /* +0x00c0 */ unsigned char VideoDimDisplay; /* +0x00c4 */ unsigned char VideoReserved[12]; /* +0x00c8 13 12 00 00 */ unsigned long SpindownTimeout; /* +0x00d4 */ unsigned char OptimizeForPower; /* +0x00d8 */ unsigned char FanThrottleTolerance; /* +0x00d9 */ unsigned char ForcedThrottle; /* +0x00da */ unsigned char MinThrottle; /* +0x00db */ unsigned char OverThrottled[12]; /* +0x00dc a2 18 00 00 */ }; struct _TRANSACTION_LIST_INFORMATION { unsigned long NumberOfTransactions; /* +0x0000 */ unsigned char TransactionInformation[16]; /* +0x0004 95 29 00 00 */ }; struct _wireSAFEARR_BSTR { unsigned long Size; /* +0x0000 */ unsigned char aBstr[4]; /* +0x0004 9a 29 00 00 */ }; struct _PROCESS_MITIGATION_STACKCHECK_POLICY { unsigned long Flags; /* +0x0000 */ /* unsigned char Permanent[0]; +0x0000 4a 12 00 00 */ unsigned char ReservedFlags[4]; /* +0x0000 4b 12 00 00 */ }; struct tagSOUNDSENTRYW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned long iFSTextEffect; /* +0x0008 */ unsigned long iFSTextEffectMSec; /* +0x000c */ unsigned long iFSTextEffectColorBits; /* +0x0010 */ unsigned long iFSGrafEffect; /* +0x0014 */ unsigned long iFSGrafEffectMSec; /* +0x0018 */ unsigned long iFSGrafEffectColor; /* +0x001c */ unsigned long iWindowsEffect; /* +0x0020 */ unsigned long iWindowsEffectMSec; /* +0x0024 */ unsigned char lpszWindowsEffectDLL[4]; /* +0x0028 71 04 00 00 */ unsigned long iWindowsEffectOrdinal; /* +0x002c */ }; struct _OLESTREAM { unsigned char lpstbl[4]; /* +0x0000 a6 29 00 00 */ }; struct _IMAGE_FUNCTION_ENTRY { unsigned long StartingAddress; /* +0x0000 */ unsigned long EndingAddress; /* +0x0004 */ unsigned long EndOfPrologue; /* +0x0008 */ }; struct tagMEASUREITEMSTRUCT { unsigned char CtlType[4]; /* +0x0000 75 00 00 00 */ unsigned char CtlID[4]; /* +0x0004 75 00 00 00 */ unsigned char itemID[4]; /* +0x0008 75 00 00 00 */ unsigned char itemWidth[4]; /* +0x000c 75 00 00 00 */ unsigned char itemHeight[4]; /* +0x0010 75 00 00 00 */ unsigned long itemData; /* +0x0014 */ }; struct _RPC_PROTSEQ_ENDPOINT { unsigned char *RpcProtocolSequence; /* +0x0000 */ unsigned char *Endpoint; /* +0x0004 */ }; struct tagENUMLOGFONTW { unsigned char elfLogFont[92]; /* +0x0000 04 14 00 00 */ unsigned char elfFullName[128]; /* +0x005c 0f 18 00 00 */ unsigned char elfStyle[64]; /* +0x00dc 7c 13 00 00 */ }; struct _CREATE_THREAD_DEBUG_INFO { void *hThread; /* +0x0000 */ void *lpThreadLocalBase; /* +0x0004 */ unsigned char lpStartAddress[4]; /* +0x0008 96 13 00 00 */ }; struct _FILE_RENAME_INFO { unsigned char ReplaceIfExists; /* +0x0000 */ void *RootDirectory; /* +0x0004 */ unsigned long FileNameLength; /* +0x0008 */ unsigned char FileName[4]; /* +0x000c 83 12 00 00 */ }; struct tagMSGBOXPARAMSA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char hwndOwner[4]; /* +0x0004 fc 11 00 00 */ unsigned char hInstance[4]; /* +0x0008 f5 12 00 00 */ unsigned char lpszText[4]; /* +0x000c bf 12 00 00 */ unsigned char lpszCaption[4]; /* +0x0010 bf 12 00 00 */ unsigned long dwStyle; /* +0x0014 */ unsigned char lpszIcon[4]; /* +0x0018 bf 12 00 00 */ unsigned long dwContextHelpId; /* +0x001c */ unsigned char lpfnMsgBoxCallback[4]; /* +0x0020 d4 1e 00 00 */ unsigned long dwLanguageId; /* +0x0024 */ }; struct DISPLAYCONFIG_VIDEO_SIGNAL_INFO { unsigned long long pixelRate; /* +0x0000 */ unsigned char hSyncFreq[8]; /* +0x0008 01 2a 00 00 */ unsigned char vSyncFreq[8]; /* +0x0010 01 2a 00 00 */ unsigned char activeSize[8]; /* +0x0018 02 2a 00 00 */ unsigned char totalSize[8]; /* +0x0020 02 2a 00 00 */ unsigned char videoStandard[4]; /* +0x0028 75 00 00 00 */ unsigned char scanLineOrdering[4]; /* +0x002c 03 2a 00 00 */ }; struct _IMAGE_SECTION_HEADER { unsigned char Name[40]; /* +0x0000 20 1a 00 00 */ }; struct _IMAGE_SECTION_HEADER:: { unsigned long PhysicalAddress; /* +0x0000 */ unsigned long VirtualSize; /* +0x0000 */ }; struct tagBITMAP { long bmType; /* +0x0000 */ long bmWidth; /* +0x0004 */ long bmHeight; /* +0x0008 */ long bmWidthBytes; /* +0x000c */ unsigned short bmPlanes; /* +0x0010 */ unsigned short bmBitsPixel; /* +0x0012 */ void *bmBits; /* +0x0014 */ }; struct _CONSOLE_FONT_INFO { unsigned long nFont; /* +0x0000 */ unsigned char dwFontSize[4]; /* +0x0004 bc 14 00 00 */ }; struct tagSTGOPTIONS { unsigned short usVersion; /* +0x0000 */ unsigned short reserved; /* +0x0002 */ unsigned long ulSectorSize; /* +0x0004 */ unsigned char pwcsTemplateFile[4]; /* +0x0008 4f 13 00 00 */ }; struct _DISCDLGSTRUCTW { unsigned long cbStructure; /* +0x0000 */ unsigned char hwndOwner[4]; /* +0x0004 fc 11 00 00 */ unsigned char lpLocalName[4]; /* +0x0008 71 04 00 00 */ unsigned char lpRemoteName[4]; /* +0x000c 71 04 00 00 */ unsigned long dwFlags; /* +0x0010 */ }; struct tagACTCTXW { unsigned long cbSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char lpSource[4]; /* +0x0008 4f 13 00 00 */ unsigned short wProcessorArchitecture; /* +0x000c */ unsigned short wLangId; /* +0x000e */ unsigned char lpAssemblyDirectory[4]; /* +0x0010 4f 13 00 00 */ unsigned char lpResourceName[4]; /* +0x0014 4f 13 00 00 */ unsigned char lpApplicationName[4]; /* +0x0018 4f 13 00 00 */ unsigned char hModule[4]; /* +0x001c f5 12 00 00 */ }; struct tagLOCALESIGNATURE { unsigned char lsUsb[16]; /* +0x0000 c2 15 00 00 */ unsigned char lsCsbDefault[8]; /* +0x0010 c3 15 00 00 */ unsigned char lsCsbSupported[8]; /* +0x0018 c3 15 00 00 */ }; struct tagVersionedStream { unsigned char guidVersion[16]; /* +0x0000 ce 13 00 00 */ unsigned char pStream[4]; /* +0x0010 40 18 00 00 */ }; struct _JOBOBJECT_BASIC_PROCESS_ID_LIST { unsigned long NumberOfAssignedProcesses; /* +0x0000 */ unsigned long NumberOfProcessIdsInList; /* +0x0004 */ unsigned char ProcessIdList[4]; /* +0x0008 01 12 00 00 */ }; struct _REMSECURITY_ATTRIBUTES { unsigned long nLength; /* +0x0000 */ unsigned long lpSecurityDescriptor; /* +0x0004 */ unsigned char bInheritHandle[4]; /* +0x0008 74 00 00 00 */ }; struct _CLAIM_SECURITY_ATTRIBUTE_FQBN_VALUE { unsigned long long Version; /* +0x0000 */ unsigned char Name[8]; /* +0x0008 71 04 00 00 */ }; struct tagNEWTEXTMETRICA { long tmHeight; /* +0x0000 */ long tmAscent; /* +0x0004 */ long tmDescent; /* +0x0008 */ long tmInternalLeading; /* +0x000c */ long tmExternalLeading; /* +0x0010 */ long tmAveCharWidth; /* +0x0014 */ long tmMaxCharWidth; /* +0x0018 */ long tmWeight; /* +0x001c */ long tmOverhang; /* +0x0020 */ long tmDigitizedAspectX; /* +0x0024 */ long tmDigitizedAspectY; /* +0x0028 */ unsigned char tmFirstChar; /* +0x002c */ unsigned char tmLastChar; /* +0x002d */ unsigned char tmDefaultChar; /* +0x002e */ unsigned char tmBreakChar; /* +0x002f */ unsigned char tmItalic; /* +0x0030 */ unsigned char tmUnderlined; /* +0x0031 */ unsigned char tmStruckOut; /* +0x0032 */ unsigned char tmPitchAndFamily; /* +0x0033 */ unsigned char tmCharSet; /* +0x0034 */ unsigned long ntmFlags; /* +0x0038 */ unsigned char ntmSizeEM[4]; /* +0x003c 75 00 00 00 */ unsigned char ntmCellHeight[4]; /* +0x0040 75 00 00 00 */ unsigned char ntmAvgWidth[4]; /* +0x0044 75 00 00 00 */ }; struct _IMAGE_ARM_RUNTIME_FUNCTION_ENTRY { unsigned long BeginAddress; /* +0x0000 */ unsigned long UnwindData; /* +0x0004 */ /* unsigned char Flag[0]; +0x0004 5d 2a 00 00 */ /* unsigned char FunctionLength[0]; +0x0004 5e 2a 00 00 */ /* unsigned char Ret[0]; +0x0004 df 1f 00 00 */ /* unsigned char H[0]; +0x0004 e0 1f 00 00 */ /* unsigned char Reg[0]; +0x0004 5f 2a 00 00 */ /* unsigned char R[0]; +0x0004 60 2a 00 00 */ /* unsigned char L[0]; +0x0004 e2 1f 00 00 */ /* unsigned char C[0]; +0x0004 e3 1f 00 00 */ unsigned char StackAdjust[4]; /* +0x0004 61 2a 00 00 */ }; struct tagSIZE { long cx; /* +0x0000 */ long cy; /* +0x0004 */ }; struct tagTOUCH_HIT_TESTING_INPUT { unsigned char pointerId[4]; /* +0x0000 75 00 00 00 */ unsigned char point[8]; /* +0x0004 ce 12 00 00 */ unsigned char boundingBox[16]; /* +0x000c c0 12 00 00 */ unsigned char nonOccludedBoundingBox[16]; /* +0x001c c0 12 00 00 */ unsigned char orientation[4]; /* +0x002c 75 00 00 00 */ }; struct _tagPROTOCOLFILTERDATA { unsigned long cbSize; /* +0x0000 */ unsigned char pProtocolSink[4]; /* +0x0004 a9 1b 00 00 */ unsigned char pProtocol[4]; /* +0x0008 75 16 00 00 */ unsigned char pUnk[4]; /* +0x000c 2b 15 00 00 */ unsigned long dwFilterFlags; /* +0x0010 */ }; struct tagBITMAPFILEHEADER { unsigned short bfType; /* +0x0000 */ unsigned long bfSize; /* +0x0002 */ unsigned short bfReserved1; /* +0x0006 */ unsigned short bfReserved2; /* +0x0008 */ unsigned long bfOffBits; /* +0x000a */ }; struct _SERVICE_DESCRIPTIONW { unsigned char lpDescription[4]; /* +0x0000 71 04 00 00 */ }; struct _IMAGE_NT_HEADERS64 { unsigned long Signature; /* +0x0000 */ unsigned char FileHeader[20]; /* +0x0004 01 15 00 00 */ unsigned char OptionalHeader[240]; /* +0x0018 e5 1d 00 00 */ }; struct _WGLSWAP { unsigned char hdc[4]; /* +0x0000 32 18 00 00 */ unsigned char uiFlags[4]; /* +0x0004 75 00 00 00 */ }; struct _FIXED { unsigned short fract; /* +0x0000 */ short value; /* +0x0002 */ }; struct _PSINJECTDATA { unsigned long DataBytes; /* +0x0000 */ unsigned short InjectionPoint; /* +0x0004 */ unsigned short PageNumber; /* +0x0006 */ }; struct _RGNDATA { unsigned char rdh[32]; /* +0x0000 16 2b 00 00 */ unsigned char Buffer[4]; /* +0x0020 ea 1b 00 00 */ }; struct _tagHIT_LOGGING_INFO { unsigned long dwStructSize; /* +0x0000 */ char *lpszLoggedUrlName; /* +0x0004 */ unsigned char StartTime[16]; /* +0x0008 7d 13 00 00 */ unsigned char EndTime[16]; /* +0x0018 7d 13 00 00 */ char *lpszExtendedInfo; /* +0x0028 */ }; struct DISPLAYCONFIG_DEVICE_INFO_HEADER { unsigned char type[4]; /* +0x0000 25 2b 00 00 */ unsigned char size[4]; /* +0x0004 75 00 00 00 */ unsigned char adapterId[8]; /* +0x0008 37 13 00 00 */ unsigned char id[4]; /* +0x0010 75 00 00 00 */ }; struct tagEMREXTFLOODFILL { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char ptlStart[8]; /* +0x0008 58 12 00 00 */ unsigned long crColor; /* +0x0010 */ unsigned long iMode; /* +0x0014 */ }; struct _EVENTLOG_FULL_INFORMATION { unsigned long dwFull; /* +0x0000 */ }; struct _XSAVE_AREA { unsigned char LegacyState[512]; /* +0x0000 44 1a 00 00 */ unsigned char Header[64]; /* +0x0200 bc 2a 00 00 */ }; struct tagRAWINPUTDEVICE { unsigned short usUsagePage; /* +0x0000 */ unsigned short usUsage; /* +0x0002 */ unsigned long dwFlags; /* +0x0004 */ unsigned char hwndTarget[4]; /* +0x0008 fc 11 00 00 */ }; struct tagCONNECTDATA { unsigned char pUnk[4]; /* +0x0000 2b 15 00 00 */ unsigned long dwCookie; /* +0x0004 */ }; struct _SECURITY_DESCRIPTOR { unsigned char Revision; /* +0x0000 */ unsigned char Sbz1; /* +0x0001 */ unsigned short Control; /* +0x0002 */ void *Owner; /* +0x0004 */ void *Group; /* +0x0008 */ unsigned char Sacl[4]; /* +0x000c bd 15 00 00 */ unsigned char Dacl[4]; /* +0x0010 bd 15 00 00 */ }; struct _WIN32_FIND_STREAM_DATA { unsigned char StreamSize[8]; /* +0x0000 db 13 00 00 */ unsigned char cStreamName[592]; /* +0x0008 8a 2b 00 00 */ }; struct tagPARAMDATA { unsigned char szName[4]; /* +0x0000 71 04 00 00 */ unsigned short vt; /* +0x0004 */ }; struct _FILE_FULL_DIR_INFO { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long FileIndex; /* +0x0004 */ unsigned char CreationTime[8]; /* +0x0008 db 13 00 00 */ unsigned char LastAccessTime[8]; /* +0x0010 db 13 00 00 */ unsigned char LastWriteTime[8]; /* +0x0018 db 13 00 00 */ unsigned char ChangeTime[8]; /* +0x0020 db 13 00 00 */ unsigned char EndOfFile[8]; /* +0x0028 db 13 00 00 */ unsigned char AllocationSize[8]; /* +0x0030 db 13 00 00 */ unsigned long FileAttributes; /* +0x0038 */ unsigned long FileNameLength; /* +0x003c */ unsigned long EaSize; /* +0x0040 */ unsigned char FileName[4]; /* +0x0044 83 12 00 00 */ }; struct _POWER_PLATFORM_INFORMATION { unsigned char Role[4]; /* +0x0000 34 23 00 00 */ unsigned char AoAc; /* +0x0004 */ }; struct _IMAGE_RESOURCE_DIR_STRING_U { unsigned short Length; /* +0x0000 */ unsigned char NameString[2]; /* +0x0002 83 12 00 00 */ }; struct _USER_MARSHAL_CB { unsigned long Flags; /* +0x0000 */ unsigned char pStubMsg[4]; /* +0x0004 a0 2b 00 00 */ unsigned char pReserve[4]; /* +0x0008 aa 19 00 00 */ unsigned long Signature; /* +0x000c */ unsigned char CBType[4]; /* +0x0010 a1 2b 00 00 */ unsigned char pFormat[4]; /* +0x0014 aa 19 00 00 */ unsigned char pTypeFormat[4]; /* +0x0018 aa 19 00 00 */ }; struct _PROCESS_MITIGATION_STRICT_HANDLE_CHECK_POLICY { unsigned long Flags; /* +0x0000 */ /* unsigned char RaiseExceptionOnInvalidHandleReference[0]; +0x0000 4a 12 00 00 */ /* unsigned char HandleExceptionsPermanentlyEnabled[0]; +0x0000 9b 15 00 00 */ unsigned char ReservedFlags[4]; /* +0x0000 9c 15 00 00 */ }; struct tagTTPOLYCURVE { unsigned short wType; /* +0x0000 */ unsigned short cpfx; /* +0x0002 */ unsigned char apfx[8]; /* +0x0004 b8 2b 00 00 */ }; struct _TP_POOL_STACK_INFORMATION { unsigned long StackReserve; /* +0x0000 */ unsigned long StackCommit; /* +0x0004 */ }; struct _RPC_SECURITY_QOS_V4_W { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ unsigned long AdditionalSecurityInfoType; /* +0x0010 */ }; struct _NT_TIB32 { unsigned long ExceptionList; /* +0x0000 */ unsigned long StackBase; /* +0x0004 */ unsigned long StackLimit; /* +0x0008 */ unsigned long SubSystemTib; /* +0x000c */ unsigned long FiberData; /* +0x0010 */ unsigned long Version; /* +0x0010 */ unsigned long ArbitraryUserPointer; /* +0x0014 */ unsigned long Self; /* +0x0018 */ }; struct _TAPE_PREPARE { unsigned long Operation; /* +0x0000 */ unsigned char Immediate; /* +0x0004 */ }; struct _RESOURCEMANAGER_COMPLETION_INFORMATION { void *IoCompletionPortHandle; /* +0x0000 */ unsigned long CompletionKey; /* +0x0004 */ }; struct _ACTIVATION_CONTEXT_COMPATIBILITY_INFORMATION { unsigned long ElementCount; /* +0x0000 */ /* unsigned char Elements[0]; +0x0004 f2 2b 00 00 */ }; struct tagXFORM { unsigned char eM11[4]; /* +0x0000 40 00 00 00 */ unsigned char eM12[4]; /* +0x0004 40 00 00 00 */ unsigned char eM21[4]; /* +0x0008 40 00 00 00 */ unsigned char eM22[4]; /* +0x000c 40 00 00 00 */ unsigned char eDx[4]; /* +0x0010 40 00 00 00 */ unsigned char eDy[4]; /* +0x0014 40 00 00 00 */ }; struct DISPLAYCONFIG_SOURCE_DEVICE_NAME { unsigned char header[20]; /* +0x0000 47 1b 00 00 */ unsigned char viewGdiDeviceName[64]; /* +0x0014 7c 13 00 00 */ }; struct tagEMRCREATEPALETTE { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned long ihPal; /* +0x0008 */ unsigned char lgpl[8]; /* +0x000c 8a 24 00 00 */ }; struct tagEMRCREATEBRUSHINDIRECT { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned long ihBrush; /* +0x0008 */ unsigned char lb[12]; /* +0x000c 19 15 00 00 */ }; struct _JOBOBJECT_BASIC_UI_RESTRICTIONS { unsigned long UIRestrictionsClass; /* +0x0000 */ }; struct tagSTYLEBUFA { unsigned long dwStyle; /* +0x0000 */ unsigned char szDescription[32]; /* +0x0004 94 1a 00 00 */ }; struct pvalueA { char *pv_valuename; /* +0x0000 */ unsigned char pv_valuelen[4]; /* +0x0004 74 00 00 00 */ void *pv_value_context; /* +0x0008 */ unsigned long pv_type; /* +0x000c */ }; struct tagCY { unsigned long Lo; /* +0x0000 */ long Hi; /* +0x0004 */ long long int64; /* +0x0000 */ }; struct _SECURITY_CAPABILITIES { void *AppContainerSid; /* +0x0000 */ unsigned char Capabilities[4]; /* +0x0004 78 16 00 00 */ unsigned long CapabilityCount; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ }; struct _TRANSACTION_NOTIFICATION { void *TransactionKey; /* +0x0000 */ unsigned long TransactionNotification; /* +0x0004 */ unsigned char TmVirtualClock[8]; /* +0x0008 db 13 00 00 */ unsigned long ArgumentLength; /* +0x0010 */ }; struct tagBITMAPINFO { unsigned char bmiHeader[40]; /* +0x0000 2d 22 00 00 */ unsigned char bmiColors[4]; /* +0x0028 58 2c 00 00 */ }; struct _COMMTIMEOUTS { unsigned long ReadIntervalTimeout; /* +0x0000 */ unsigned long ReadTotalTimeoutMultiplier; /* +0x0004 */ unsigned long ReadTotalTimeoutConstant; /* +0x0008 */ unsigned long WriteTotalTimeoutMultiplier; /* +0x000c */ unsigned long WriteTotalTimeoutConstant; /* +0x0010 */ }; struct _REPARSE_GUID_DATA_BUFFER { unsigned long ReparseTag; /* +0x0000 */ unsigned short ReparseDataLength; /* +0x0004 */ unsigned short Reserved; /* +0x0006 */ unsigned char ReparseGuid[20]; /* +0x0008 ce 13 00 00 */ }; struct _REPARSE_GUID_DATA_BUFFER:: { unsigned char DataBuffer[1]; /* +0x0000 04 12 00 00 */ }; struct IMAGE_AUX_SYMBOL_TOKEN_DEF { unsigned char bAuxType; /* +0x0000 */ unsigned char bReserved; /* +0x0001 */ unsigned long SymbolTableIndex; /* +0x0002 */ unsigned char rgbReserved[12]; /* +0x0006 9d 14 00 00 */ }; struct tagLOGCOLORSPACEA { unsigned long lcsSignature; /* +0x0000 */ unsigned long lcsVersion; /* +0x0004 */ unsigned long lcsSize; /* +0x0008 */ long lcsCSType; /* +0x000c */ long lcsIntent; /* +0x0010 */ unsigned char lcsEndpoints[36]; /* +0x0014 eb 1f 00 00 */ unsigned long lcsGammaRed; /* +0x0038 */ unsigned long lcsGammaGreen; /* +0x003c */ unsigned long lcsGammaBlue; /* +0x0040 */ unsigned char lcsFilename[260]; /* +0x0044 f8 1a 00 00 */ }; struct _TOKEN_PRIMARY_GROUP { void *PrimaryGroup; /* +0x0000 */ }; struct _wireSAFEARR_DISPATCH { unsigned long Size; /* +0x0000 */ unsigned char apDispatch[4]; /* +0x0004 8b 1f 00 00 */ }; struct _SECURITY_QUALITY_OF_SERVICE { unsigned long Length; /* +0x0000 */ unsigned char ImpersonationLevel[4]; /* +0x0004 8b 20 00 00 */ unsigned char ContextTrackingMode; /* +0x0008 */ unsigned char EffectiveOnly; /* +0x0009 */ }; struct tagPELARRAY { long paXCount; /* +0x0000 */ long paYCount; /* +0x0004 */ long paXExt; /* +0x0008 */ long paYExt; /* +0x000c */ unsigned char paRGBs; /* +0x0010 */ }; struct _IMAGE_AUX_SYMBOL:: { unsigned long crc; /* +0x0000 */ unsigned char rgbReserved[14]; /* +0x0004 e8 2c 00 00 */ }; struct _IMAGE_AUX_SYMBOL:: { unsigned long Length; /* +0x0000 */ unsigned short NumberOfRelocations; /* +0x0004 */ unsigned short NumberOfLinenumbers; /* +0x0006 */ unsigned long CheckSum; /* +0x0008 */ short Number; /* +0x000c */ unsigned char Selection; /* +0x000e */ unsigned char bReserved; /* +0x000f */ short HighNumber; /* +0x0010 */ }; struct _IMAGE_AUX_SYMBOL:: { unsigned char Name[18]; /* +0x0000 ed 2c 00 00 */ }; struct _IMAGE_AUX_SYMBOL:: { unsigned long TagIndex; /* +0x0000 */ }; struct _IMAGE_AUX_SYMBOL:::::: { unsigned char Dimension[8]; /* +0x0000 72 22 00 00 */ }; struct _IMAGE_AUX_SYMBOL:::::: { unsigned long PointerToLinenumber; /* +0x0000 */ unsigned long PointerToNextFunction; /* +0x0004 */ }; struct _IMAGE_AUX_SYMBOL:::::: { unsigned short Linenumber; /* +0x0000 */ unsigned short Size; /* +0x0002 */ }; struct tagCURSORSHAPE { unsigned char xHotSpot[4]; /* +0x0000 74 00 00 00 */ unsigned char yHotSpot[4]; /* +0x0004 74 00 00 00 */ unsigned char cx[4]; /* +0x0008 74 00 00 00 */ unsigned char cy[4]; /* +0x000c 74 00 00 00 */ unsigned char cbWidth[4]; /* +0x0010 74 00 00 00 */ unsigned char Planes; /* +0x0014 */ unsigned char BitsPixel; /* +0x0015 */ }; struct tagI_RpcProxyCallbackInterface { unsigned char IsValidMachineFn[4]; /* +0x0000 7e 21 00 00 */ unsigned char GetClientAddressFn[4]; /* +0x0004 f1 29 00 00 */ unsigned char GetConnectionTimeoutFn[4]; /* +0x0008 66 19 00 00 */ unsigned char PerformCalloutFn[4]; /* +0x000c 52 1a 00 00 */ unsigned char FreeCalloutStateFn[4]; /* +0x0010 25 20 00 00 */ unsigned char GetClientSessionAndResourceUUIDFn[4]; /* +0x0014 1e 2d 00 00 */ unsigned char ProxyFilterIfFn[4]; /* +0x0018 21 2d 00 00 */ unsigned char RpcProxyUpdatePerfCounterFn[4]; /* +0x001c cf 1f 00 00 */ unsigned char RpcProxyUpdatePerfCounterBackendServerFn[4]; /* +0x0020 e3 20 00 00 */ }; struct _tagStartParam { unsigned char iid[16]; /* +0x0000 ce 13 00 00 */ unsigned char pIBindCtx[4]; /* +0x0010 68 17 00 00 */ unsigned char pItf[4]; /* +0x0014 2b 15 00 00 */ }; struct tagExtentInfo { unsigned long cb; /* +0x0000 */ unsigned long dwExtentMode; /* +0x0004 */ unsigned char sizelProposed[8]; /* +0x0008 21 13 00 00 */ }; struct _QUERY_SERVICE_CONFIGA { unsigned long dwServiceType; /* +0x0000 */ unsigned long dwStartType; /* +0x0004 */ unsigned long dwErrorControl; /* +0x0008 */ char *lpBinaryPathName; /* +0x000c */ char *lpLoadOrderGroup; /* +0x0010 */ unsigned long dwTagId; /* +0x0014 */ char *lpDependencies; /* +0x0018 */ char *lpServiceStartName; /* +0x001c */ char *lpDisplayName; /* +0x0020 */ }; struct _IMAGE_RESOURCE_DIRECTORY_STRING { unsigned short Length; /* +0x0000 */ unsigned char NameString[2]; /* +0x0002 ea 1b 00 00 */ }; struct tagPOINTF { unsigned char x[4]; /* +0x0000 40 00 00 00 */ unsigned char y[4]; /* +0x0004 40 00 00 00 */ }; struct _SERVICE_TRIGGER_INFO { unsigned long cTriggers; /* +0x0000 */ unsigned char pTriggers[4]; /* +0x0004 69 16 00 00 */ unsigned char *pReserved; /* +0x0008 */ }; struct _tagCODEBASEHOLD { unsigned long cbSize; /* +0x0000 */ unsigned char szDistUnit[4]; /* +0x0004 71 04 00 00 */ unsigned char szCodeBase[4]; /* +0x0008 71 04 00 00 */ unsigned long dwVersionMS; /* +0x000c */ unsigned long dwVersionLS; /* +0x0010 */ unsigned long dwStyle; /* +0x0014 */ }; struct tagPARAMDESCEX { unsigned long cBytes; /* +0x0000 */ unsigned char varDefaultValue[16]; /* +0x0008 a0 17 00 00 */ }; struct _CLAIM_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE { void *pValue; /* +0x0000 */ unsigned long ValueLength; /* +0x0004 */ }; struct pvalueW { unsigned char pv_valuename[4]; /* +0x0000 71 04 00 00 */ unsigned char pv_valuelen[4]; /* +0x0004 74 00 00 00 */ void *pv_value_context; /* +0x0008 */ unsigned long pv_type; /* +0x000c */ }; struct _NETRESOURCEA { unsigned long dwScope; /* +0x0000 */ unsigned long dwType; /* +0x0004 */ unsigned long dwDisplayType; /* +0x0008 */ unsigned long dwUsage; /* +0x000c */ char *lpLocalName; /* +0x0010 */ char *lpRemoteName; /* +0x0014 */ char *lpComment; /* +0x0018 */ char *lpProvider; /* +0x001c */ }; struct _TAPE_GET_DRIVE_PARAMETERS { unsigned char ECC; /* +0x0000 */ unsigned char Compression; /* +0x0001 */ unsigned char DataPadding; /* +0x0002 */ unsigned char ReportSetmarks; /* +0x0003 */ unsigned long DefaultBlockSize; /* +0x0004 */ unsigned long MaximumBlockSize; /* +0x0008 */ unsigned long MinimumBlockSize; /* +0x000c */ unsigned long MaximumPartitionCount; /* +0x0010 */ unsigned long FeaturesLow; /* +0x0014 */ unsigned long FeaturesHigh; /* +0x0018 */ unsigned long EOTWarningZoneSize; /* +0x001c */ }; struct tagRAWINPUTHEADER { unsigned long dwType; /* +0x0000 */ unsigned long dwSize; /* +0x0004 */ void *hDevice; /* +0x0008 */ unsigned char wParam[4]; /* +0x000c 75 00 00 00 */ }; struct ANON_OBJECT_HEADER_V2 { unsigned short Sig1; /* +0x0000 */ unsigned short Sig2; /* +0x0002 */ unsigned short Version; /* +0x0004 */ unsigned short Machine; /* +0x0006 */ unsigned long TimeDateStamp; /* +0x0008 */ unsigned char ClassID[16]; /* +0x000c ce 13 00 00 */ unsigned long SizeOfData; /* +0x001c */ unsigned long Flags; /* +0x0020 */ unsigned long MetaDataSize; /* +0x0024 */ unsigned long MetaDataOffset; /* +0x0028 */ }; struct _IMAGE_OPTIONAL_HEADER { unsigned short Magic; /* +0x0000 */ unsigned char MajorLinkerVersion; /* +0x0002 */ unsigned char MinorLinkerVersion; /* +0x0003 */ unsigned long SizeOfCode; /* +0x0004 */ unsigned long SizeOfInitializedData; /* +0x0008 */ unsigned long SizeOfUninitializedData; /* +0x000c */ unsigned long AddressOfEntryPoint; /* +0x0010 */ unsigned long BaseOfCode; /* +0x0014 */ unsigned long BaseOfData; /* +0x0018 */ unsigned long ImageBase; /* +0x001c */ unsigned long SectionAlignment; /* +0x0020 */ unsigned long FileAlignment; /* +0x0024 */ unsigned short MajorOperatingSystemVersion; /* +0x0028 */ unsigned short MinorOperatingSystemVersion; /* +0x002a */ unsigned short MajorImageVersion; /* +0x002c */ unsigned short MinorImageVersion; /* +0x002e */ unsigned short MajorSubsystemVersion; /* +0x0030 */ unsigned short MinorSubsystemVersion; /* +0x0032 */ unsigned long Win32VersionValue; /* +0x0034 */ unsigned long SizeOfImage; /* +0x0038 */ unsigned long SizeOfHeaders; /* +0x003c */ unsigned long CheckSum; /* +0x0040 */ unsigned short Subsystem; /* +0x0044 */ unsigned short DllCharacteristics; /* +0x0046 */ unsigned long SizeOfStackReserve; /* +0x0048 */ unsigned long SizeOfStackCommit; /* +0x004c */ unsigned long SizeOfHeapReserve; /* +0x0050 */ unsigned long SizeOfHeapCommit; /* +0x0054 */ unsigned long LoaderFlags; /* +0x0058 */ unsigned long NumberOfRvaAndSizes; /* +0x005c */ unsigned char DataDirectory[128]; /* +0x0060 72 14 00 00 */ }; struct _COSERVERINFO { unsigned long dwReserved1; /* +0x0000 */ unsigned char pwszName[4]; /* +0x0004 71 04 00 00 */ unsigned char pAuthInfo[4]; /* +0x0008 fc 2d 00 00 */ unsigned long dwReserved2; /* +0x000c */ }; struct _RPC_CLIENT_INTERFACE { unsigned char Length[4]; /* +0x0000 75 00 00 00 */ unsigned char InterfaceId[20]; /* +0x0004 24 14 00 00 */ unsigned char TransferSyntax[20]; /* +0x0018 24 14 00 00 */ unsigned char DispatchTable[4]; /* +0x002c a8 19 00 00 */ unsigned char RpcProtseqEndpointCount[4]; /* +0x0030 75 00 00 00 */ unsigned char RpcProtseqEndpoint[4]; /* +0x0034 fc 17 00 00 */ unsigned long Reserved; /* +0x0038 */ unsigned char InterpreterInfo[4]; /* +0x003c 92 15 00 00 */ unsigned char Flags[4]; /* +0x0040 75 00 00 00 */ }; struct _GENERIC_MAPPING { unsigned long GenericRead; /* +0x0000 */ unsigned long GenericWrite; /* +0x0004 */ unsigned long GenericExecute; /* +0x0008 */ unsigned long GenericAll; /* +0x000c */ }; struct COPYFILE2_EXTENDED_PARAMETERS { unsigned long dwSize; /* +0x0000 */ unsigned long dwCopyFlags; /* +0x0004 */ unsigned char pfCancel[4]; /* +0x0008 74 04 00 00 */ unsigned char pProgressRoutine[4]; /* +0x000c 90 1d 00 00 */ void *pvCallbackContext; /* +0x0010 */ }; struct _CrtMemState { unsigned char pBlockHeader[4]; /* +0x0000 1f 2e 00 00 */ unsigned char lCounts[20]; /* +0x0004 20 2e 00 00 */ unsigned char lSizes[20]; /* +0x0018 20 2e 00 00 */ unsigned char lHighWaterCount[4]; /* +0x002c 75 00 00 00 */ unsigned char lTotalCount[4]; /* +0x0030 75 00 00 00 */ }; struct _TOKEN_PRIVILEGES { unsigned long PrivilegeCount; /* +0x0000 */ unsigned char Privileges[12]; /* +0x0004 ac 20 00 00 */ }; struct tagCALPOLESTR { unsigned long cElems; /* +0x0000 */ unsigned char pElems[4]; /* +0x0004 d1 12 00 00 */ }; struct provider_info { unsigned char pi_R0_1val[4]; /* +0x0000 6d 12 00 00 */ unsigned char pi_R0_allvals[4]; /* +0x0004 6d 12 00 00 */ unsigned char pi_R3_1val[4]; /* +0x0008 6d 12 00 00 */ unsigned char pi_R3_allvals[4]; /* +0x000c 6d 12 00 00 */ unsigned long pi_flags; /* +0x0010 */ void *pi_key_context; /* +0x0014 */ }; struct _RPC_SECURITY_QOS_V4_A { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ unsigned long AdditionalSecurityInfoType; /* +0x0010 */ }; struct _GROUP_AFFINITY { unsigned long Mask; /* +0x0000 */ unsigned short Group; /* +0x0004 */ unsigned char Reserved[6]; /* +0x0006 79 2e 00 00 */ }; struct DISPLAYCONFIG_PATH_INFO { unsigned char sourceInfo[20]; /* +0x0000 7e 2e 00 00 */ unsigned char targetInfo[48]; /* +0x0014 7f 2e 00 00 */ unsigned char flags[4]; /* +0x0044 75 00 00 00 */ }; struct _CONSOLE_SELECTION_INFO { unsigned long dwFlags; /* +0x0000 */ unsigned char dwSelectionAnchor[4]; /* +0x0004 bc 14 00 00 */ unsigned char srSelection[8]; /* +0x0008 8a 1c 00 00 */ }; struct _MEMORYSTATUSEX { unsigned long dwLength; /* +0x0000 */ unsigned long dwMemoryLoad; /* +0x0004 */ unsigned long long ullTotalPhys; /* +0x0008 */ unsigned long long ullAvailPhys; /* +0x0010 */ unsigned long long ullTotalPageFile; /* +0x0018 */ unsigned long long ullAvailPageFile; /* +0x0020 */ unsigned long long ullTotalVirtual; /* +0x0028 */ unsigned long long ullAvailVirtual; /* +0x0030 */ unsigned long long ullAvailExtendedVirtual; /* +0x0038 */ }; struct tagCHARSETINFO { unsigned char ciCharset[4]; /* +0x0000 75 00 00 00 */ unsigned char ciACP[4]; /* +0x0004 75 00 00 00 */ unsigned char fs[24]; /* +0x0008 03 19 00 00 */ }; struct tagPROPSPEC { unsigned long ulKind; /* +0x0000 */ unsigned long propid; /* +0x0004 */ unsigned char lpwstr[4]; /* +0x0004 71 04 00 00 */ }; struct _ICONINFOEXA { unsigned long cbSize; /* +0x0000 */ unsigned char fIcon[4]; /* +0x0004 74 00 00 00 */ unsigned long xHotspot; /* +0x0008 */ unsigned long yHotspot; /* +0x000c */ unsigned char hbmMask[4]; /* +0x0010 b9 14 00 00 */ unsigned char hbmColor[4]; /* +0x0014 b9 14 00 00 */ unsigned short wResID; /* +0x0018 */ unsigned char szModName[260]; /* +0x001a f8 1a 00 00 */ unsigned char szResName[262]; /* +0x011e f8 1a 00 00 */ }; struct _WIN32_FIND_DATAA { unsigned long dwFileAttributes; /* +0x0000 */ unsigned char ftCreationTime[8]; /* +0x0004 91 14 00 00 */ unsigned char ftLastAccessTime[8]; /* +0x000c 91 14 00 00 */ unsigned char ftLastWriteTime[8]; /* +0x0014 91 14 00 00 */ unsigned long nFileSizeHigh; /* +0x001c */ unsigned long nFileSizeLow; /* +0x0020 */ unsigned long dwReserved0; /* +0x0024 */ unsigned long dwReserved1; /* +0x0028 */ unsigned char cFileName[260]; /* +0x002c f8 1a 00 00 */ unsigned char cAlternateFileName[16]; /* +0x0130 e5 2e 00 00 */ }; struct tagEMRGLSBOUNDEDRECORD { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char rclBounds[16]; /* +0x0008 f3 11 00 00 */ unsigned long cbData; /* +0x0018 */ unsigned char Data[4]; /* +0x001c 04 12 00 00 */ }; struct _IMAGE_OS2_HEADER { unsigned short ne_magic; /* +0x0000 */ char ne_ver; /* +0x0002 */ char ne_rev; /* +0x0003 */ unsigned short ne_enttab; /* +0x0004 */ unsigned short ne_cbenttab; /* +0x0006 */ long ne_crc; /* +0x0008 */ unsigned short ne_flags; /* +0x000c */ unsigned short ne_autodata; /* +0x000e */ unsigned short ne_heap; /* +0x0010 */ unsigned short ne_stack; /* +0x0012 */ long ne_csip; /* +0x0014 */ long ne_sssp; /* +0x0018 */ unsigned short ne_cseg; /* +0x001c */ unsigned short ne_cmod; /* +0x001e */ unsigned short ne_cbnrestab; /* +0x0020 */ unsigned short ne_segtab; /* +0x0022 */ unsigned short ne_rsrctab; /* +0x0024 */ unsigned short ne_restab; /* +0x0026 */ unsigned short ne_modtab; /* +0x0028 */ unsigned short ne_imptab; /* +0x002a */ long ne_nrestab; /* +0x002c */ unsigned short ne_cmovent; /* +0x0030 */ unsigned short ne_align; /* +0x0032 */ unsigned short ne_cres; /* +0x0034 */ unsigned char ne_exetyp; /* +0x0036 */ unsigned char ne_flagsothers; /* +0x0037 */ unsigned short ne_pretthunks; /* +0x0038 */ unsigned short ne_psegrefbytes; /* +0x003a */ unsigned short ne_swaparea; /* +0x003c */ unsigned short ne_expver; /* +0x003e */ }; struct _ACTIVATION_CONTEXT_RUN_LEVEL_INFORMATION { unsigned long ulFlags; /* +0x0000 */ unsigned char RunLevel[4]; /* +0x0004 ff 2e 00 00 */ unsigned long UiAccess; /* +0x0008 */ }; struct DISPLAYCONFIG_PATH_TARGET_INFO { unsigned char adapterId[8]; /* +0x0000 37 13 00 00 */ unsigned char id[4]; /* +0x0008 75 00 00 00 */ unsigned char modeInfoIdx[4]; /* +0x000c 75 00 00 00 */ unsigned char outputTechnology[4]; /* +0x0010 02 2f 00 00 */ unsigned char rotation[4]; /* +0x0014 03 2f 00 00 */ unsigned char scaling[4]; /* +0x0018 04 2f 00 00 */ unsigned char refreshRate[8]; /* +0x001c 01 2a 00 00 */ unsigned char scanLineOrdering[4]; /* +0x0024 03 2a 00 00 */ unsigned char targetAvailable[4]; /* +0x0028 74 00 00 00 */ unsigned char statusFlags[4]; /* +0x002c 75 00 00 00 */ }; struct tagACTCTX_SECTION_KEYED_DATA_ASSEMBLY_METADATA { void *lpInformation; /* +0x0000 */ void *lpSectionBase; /* +0x0004 */ unsigned long ulSectionLength; /* +0x0008 */ void *lpSectionGlobalDataBase; /* +0x000c */ unsigned long ulSectionGlobalDataLength; /* +0x0010 */ }; struct tagHANDLETABLE { unsigned char objectHandle[4]; /* +0x0000 0f 2f 00 00 */ }; struct _IMAGE_TLS_DIRECTORY32 { unsigned long StartAddressOfRawData; /* +0x0000 */ unsigned long EndAddressOfRawData; /* +0x0004 */ unsigned long AddressOfIndex; /* +0x0008 */ unsigned long AddressOfCallBacks; /* +0x000c */ unsigned long SizeOfZeroFill; /* +0x0010 */ unsigned long Characteristics; /* +0x0014 */ }; struct _DRAWPATRECT { unsigned char ptPosition[8]; /* +0x0000 ce 12 00 00 */ unsigned char ptSize[8]; /* +0x0008 ce 12 00 00 */ unsigned short wStyle; /* +0x0010 */ unsigned short wPattern; /* +0x0012 */ }; struct DISPLAYCONFIG_MODE_INFO { unsigned char infoType[4]; /* +0x0000 42 2f 00 00 */ unsigned char id[4]; /* +0x0004 75 00 00 00 */ unsigned char adapterId[8]; /* +0x0008 37 13 00 00 */ /* unsigned char targetMode[0]; +0x0010 48 1b 00 00 */ unsigned char sourceMode[48]; /* +0x0010 43 2f 00 00 */ }; struct tagEMRBITBLT { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char rclBounds[16]; /* +0x0008 f3 11 00 00 */ long xDest; /* +0x0018 */ long yDest; /* +0x001c */ long cxDest; /* +0x0020 */ long cyDest; /* +0x0024 */ unsigned long dwRop; /* +0x0028 */ long xSrc; /* +0x002c */ long ySrc; /* +0x0030 */ unsigned char xformSrc[24]; /* +0x0034 f4 11 00 00 */ unsigned long crBkColorSrc; /* +0x004c */ unsigned long iUsageSrc; /* +0x0050 */ unsigned long offBmiSrc; /* +0x0054 */ unsigned long cbBmiSrc; /* +0x0058 */ unsigned long offBitsSrc; /* +0x005c */ unsigned long cbBitsSrc; /* +0x0060 */ }; struct tagOleMenuGroupWidths { unsigned char width[24]; /* +0x0000 5b 2f 00 00 */ }; struct tagMDINEXTMENU { unsigned char hmenuIn[4]; /* +0x0000 4d 13 00 00 */ unsigned char hmenuNext[4]; /* +0x0004 4d 13 00 00 */ unsigned char hwndNext[4]; /* +0x0008 fc 11 00 00 */ }; struct _EXCEPTION_RECORD { unsigned long ExceptionCode; /* +0x0000 */ unsigned long ExceptionFlags; /* +0x0004 */ unsigned char ExceptionRecord[4]; /* +0x0008 7d 1e 00 00 */ void *ExceptionAddress; /* +0x000c */ unsigned long NumberParameters; /* +0x0010 */ unsigned char ExceptionInformation[60]; /* +0x0014 3e 1d 00 00 */ }; struct _APPLICATIONLAUNCH_SETTING_VALUE { unsigned char ActivationTime[8]; /* +0x0000 db 13 00 00 */ unsigned long Flags; /* +0x0008 */ unsigned long ButtonInstanceID; /* +0x000c */ }; struct _userCLIPFORMAT::__MIDL_IWinTypes_0001 { unsigned long dwValue; /* +0x0000 */ unsigned char pwszName[4]; /* +0x0000 71 04 00 00 */ }; struct _userHMETAFILEPICT { long fContext; /* +0x0000 */ }; struct _userHMETAFILEPICT::__MIDL_IWinTypes_0005 { long hInproc; /* +0x0000 */ /* unsigned char hRemote[0]; +0x0000 af 2f 00 00 */ long long hInproc64; /* +0x0000 */ }; struct _RPC_SECURITY_QOS_V5_W { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ unsigned long AdditionalSecurityInfoType; /* +0x0010 */ }; struct _tagDATAINFO { unsigned long ulTotalSize; /* +0x0000 */ unsigned long ulavrPacketSize; /* +0x0004 */ unsigned long ulConnectSpeed; /* +0x0008 */ unsigned long ulProcessorSpeed; /* +0x000c */ }; struct _RPC_HTTP_TRANSPORT_CREDENTIALS_V2_W { unsigned char TransportCredentials[4]; /* +0x0000 59 17 00 00 */ unsigned long Flags; /* +0x0004 */ unsigned long AuthenticationTarget; /* +0x0008 */ unsigned long NumberOfAuthnSchemes; /* +0x000c */ unsigned long *AuthnSchemes; /* +0x0010 */ unsigned short *ServerCertificateSubject; /* +0x0014 */ unsigned char ProxyCredentials[4]; /* +0x0018 59 17 00 00 */ unsigned long NumberOfProxyAuthnSchemes; /* +0x001c */ unsigned long *ProxyAuthnSchemes; /* +0x0020 */ }; struct CONFIRMSAFETY { unsigned char clsid[16]; /* +0x0000 ce 13 00 00 */ unsigned char pUnk[4]; /* +0x0010 2b 15 00 00 */ unsigned long dwFlags; /* +0x0014 */ }; struct _FILE_NOTIFY_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long Action; /* +0x0004 */ unsigned long FileNameLength; /* +0x0008 */ unsigned char FileName[4]; /* +0x000c 83 12 00 00 */ }; struct tagAspectInfo { unsigned long cb; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ }; struct _ENLISTMENT_CRM_INFORMATION { unsigned char CrmTransactionManagerId[16]; /* +0x0000 ce 13 00 00 */ unsigned char CrmResourceManagerId[16]; /* +0x0010 ce 13 00 00 */ unsigned char CrmEnlistmentId[16]; /* +0x0020 ce 13 00 00 */ }; struct _EXCEPTION_RECORD64 { unsigned long ExceptionCode; /* +0x0000 */ unsigned long ExceptionFlags; /* +0x0004 */ unsigned long long ExceptionRecord; /* +0x0008 */ unsigned long long ExceptionAddress; /* +0x0010 */ unsigned long NumberParameters; /* +0x0018 */ unsigned long __unusedAlignment; /* +0x001c */ unsigned char ExceptionInformation[120]; /* +0x0020 f9 2f 00 00 */ }; struct tagEMRRESIZEPALETTE { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned long ihPal; /* +0x0008 */ unsigned long cEntries; /* +0x000c */ }; struct _LUID_AND_ATTRIBUTES { unsigned char Luid[8]; /* +0x0000 37 13 00 00 */ unsigned long Attributes; /* +0x0008 */ }; struct _SID { unsigned char Revision; /* +0x0000 */ unsigned char SubAuthorityCount; /* +0x0001 */ unsigned char IdentifierAuthority[6]; /* +0x0002 8d 12 00 00 */ unsigned char SubAuthority[4]; /* +0x0008 01 12 00 00 */ }; struct _OBJECT_TYPE_LIST { unsigned short Level; /* +0x0000 */ unsigned short Sbz; /* +0x0002 */ unsigned char ObjectType[4]; /* +0x0004 78 15 00 00 */ }; struct _TIME_ZONE_INFORMATION { long Bias; /* +0x0000 */ unsigned char StandardName[64]; /* +0x0004 7c 13 00 00 */ unsigned char StandardDate[16]; /* +0x0044 7d 13 00 00 */ long StandardBias; /* +0x0054 */ unsigned char DaylightName[64]; /* +0x0058 7c 13 00 00 */ unsigned char DaylightDate[16]; /* +0x0098 7d 13 00 00 */ long DaylightBias; /* +0x00a8 */ }; struct _POWER_MONITOR_INVOCATION { unsigned char On; /* +0x0000 */ unsigned char Console; /* +0x0001 */ }; struct tagNCCALCSIZE_PARAMS { unsigned char rgrc[48]; /* +0x0000 52 30 00 00 */ unsigned char lppos[4]; /* +0x0030 42 1f 00 00 */ }; struct _PROCESS_MITIGATION_ASLR_POLICY { unsigned long Flags; /* +0x0000 */ /* unsigned char EnableStackRandomization[0]; +0x0000 4a 12 00 00 */ /* unsigned char EnableForceRelocateImages[0]; +0x0000 9b 15 00 00 */ /* unsigned char EnableHighEntropy[0]; +0x0000 68 18 00 00 */ /* unsigned char DisallowStrippedImages[0]; +0x0000 69 18 00 00 */ unsigned char ReservedFlags[4]; /* +0x0000 55 30 00 00 */ }; struct _IMAGE_DELAYLOAD_DESCRIPTOR:: { unsigned long AllAttributes; /* +0x0000 */ /* unsigned char RvaBased[0]; +0x0000 4a 12 00 00 */ unsigned char ReservedAttributes[4]; /* +0x0000 4b 12 00 00 */ }; struct _QUERY_SERVICE_LOCK_STATUSA { unsigned long fIsLocked; /* +0x0000 */ char *lpLockOwner; /* +0x0004 */ unsigned long dwLockDuration; /* +0x0008 */ }; struct tagEMRGRADIENTFILL { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned char rclBounds[16]; /* +0x0008 f3 11 00 00 */ unsigned long nVer; /* +0x0018 */ unsigned long nTri; /* +0x001c */ unsigned long ulMode; /* +0x0020 */ unsigned char Ver[16]; /* +0x0024 6b 30 00 00 */ }; struct tagTPMPARAMS { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char rcExclude[16]; /* +0x0004 c0 12 00 00 */ }; struct tagQACONTAINER { unsigned long cbSize; /* +0x0000 */ unsigned char pClientSite[4]; /* +0x0004 48 29 00 00 */ unsigned char pAdviseSink[4]; /* +0x0008 94 30 00 00 */ unsigned char pPropertyNotifySink[4]; /* +0x000c a1 1e 00 00 */ unsigned char pUnkEventSink[4]; /* +0x0010 2b 15 00 00 */ unsigned long dwAmbientFlags; /* +0x0014 */ unsigned long colorFore; /* +0x0018 */ unsigned long colorBack; /* +0x001c */ unsigned char pFont[4]; /* +0x0020 a0 2e 00 00 */ unsigned char pUndoMgr[4]; /* +0x0024 7c 19 00 00 */ unsigned long dwAppearance; /* +0x0028 */ long lcid; /* +0x002c */ unsigned char hpal[4]; /* +0x0030 67 18 00 00 */ unsigned char pBindHost[4]; /* +0x0034 51 1d 00 00 */ unsigned char pOleControlSite[4]; /* +0x0038 d0 2e 00 00 */ unsigned char pServiceProvider[4]; /* +0x003c 07 2a 00 00 */ }; struct tagFORMATETC { unsigned short cfFormat; /* +0x0000 */ unsigned char ptd[4]; /* +0x0004 85 24 00 00 */ unsigned long dwAspect; /* +0x0008 */ long lindex; /* +0x000c */ unsigned long tymed; /* +0x0010 */ }; struct _ENLISTMENT_BASIC_INFORMATION { unsigned char EnlistmentId[16]; /* +0x0000 ce 13 00 00 */ unsigned char TransactionId[16]; /* +0x0010 ce 13 00 00 */ unsigned char ResourceManagerId[16]; /* +0x0020 ce 13 00 00 */ }; struct tagPARSEDURLW { unsigned long cbSize; /* +0x0000 */ unsigned char pszProtocol[4]; /* +0x0004 4f 13 00 00 */ unsigned char cchProtocol[4]; /* +0x0008 75 00 00 00 */ unsigned char pszSuffix[4]; /* +0x000c 4f 13 00 00 */ unsigned char cchSuffix[4]; /* +0x0010 75 00 00 00 */ unsigned char nScheme[4]; /* +0x0014 75 00 00 00 */ }; struct _IMAGE_ROM_OPTIONAL_HEADER { unsigned short Magic; /* +0x0000 */ unsigned char MajorLinkerVersion; /* +0x0002 */ unsigned char MinorLinkerVersion; /* +0x0003 */ unsigned long SizeOfCode; /* +0x0004 */ unsigned long SizeOfInitializedData; /* +0x0008 */ unsigned long SizeOfUninitializedData; /* +0x000c */ unsigned long AddressOfEntryPoint; /* +0x0010 */ unsigned long BaseOfCode; /* +0x0014 */ unsigned long BaseOfData; /* +0x0018 */ unsigned long BaseOfBss; /* +0x001c */ unsigned long GprMask; /* +0x0020 */ unsigned char CprMask[16]; /* +0x0024 c2 15 00 00 */ unsigned long GpValue; /* +0x0034 */ }; struct COPYFILE2_MESSAGE { unsigned char Type[4]; /* +0x0000 b7 30 00 00 */ unsigned long dwPadding; /* +0x0004 */ }; struct COPYFILE2_MESSAGE:::: { unsigned char CopyPhase[4]; /* +0x0000 c3 30 00 00 */ unsigned long dwStreamNumber; /* +0x0004 */ unsigned char hrFailure[4]; /* +0x0008 08 00 00 00 */ unsigned long dwReserved; /* +0x000c */ unsigned char uliChunkNumber[8]; /* +0x0010 5e 20 00 00 */ unsigned char uliStreamSize[8]; /* +0x0018 5e 20 00 00 */ unsigned char uliStreamBytesTransferred[8]; /* +0x0020 5e 20 00 00 */ unsigned char uliTotalFileSize[8]; /* +0x0028 5e 20 00 00 */ unsigned char uliTotalBytesTransferred[8]; /* +0x0030 5e 20 00 00 */ }; struct COPYFILE2_MESSAGE:::: { unsigned long dwReserved; /* +0x0000 */ }; struct COPYFILE2_MESSAGE:::: { unsigned long dwStreamNumber; /* +0x0000 */ unsigned long dwReserved; /* +0x0004 */ void *hSourceFile; /* +0x0008 */ void *hDestinationFile; /* +0x000c */ unsigned char uliStreamSize[8]; /* +0x0010 5e 20 00 00 */ unsigned char uliStreamBytesTransferred[8]; /* +0x0018 5e 20 00 00 */ unsigned char uliTotalFileSize[8]; /* +0x0020 5e 20 00 00 */ unsigned char uliTotalBytesTransferred[8]; /* +0x0028 5e 20 00 00 */ }; struct COPYFILE2_MESSAGE:::: { unsigned long dwStreamNumber; /* +0x0000 */ unsigned long dwReserved; /* +0x0004 */ void *hSourceFile; /* +0x0008 */ void *hDestinationFile; /* +0x000c */ unsigned char uliStreamSize[8]; /* +0x0010 5e 20 00 00 */ unsigned char uliTotalFileSize[8]; /* +0x0018 5e 20 00 00 */ }; struct COPYFILE2_MESSAGE:::: { unsigned long dwStreamNumber; /* +0x0000 */ unsigned long dwReserved; /* +0x0004 */ void *hSourceFile; /* +0x0008 */ void *hDestinationFile; /* +0x000c */ unsigned char uliChunkNumber[8]; /* +0x0010 5e 20 00 00 */ unsigned char uliChunkSize[8]; /* +0x0018 5e 20 00 00 */ unsigned char uliStreamSize[8]; /* +0x0020 5e 20 00 00 */ unsigned char uliStreamBytesTransferred[8]; /* +0x0028 5e 20 00 00 */ unsigned char uliTotalFileSize[8]; /* +0x0030 5e 20 00 00 */ unsigned char uliTotalBytesTransferred[8]; /* +0x0038 5e 20 00 00 */ }; struct COPYFILE2_MESSAGE:::: { unsigned long dwStreamNumber; /* +0x0000 */ unsigned long dwReserved; /* +0x0004 */ void *hSourceFile; /* +0x0008 */ void *hDestinationFile; /* +0x000c */ unsigned char uliChunkNumber[8]; /* +0x0010 5e 20 00 00 */ unsigned char uliChunkSize[8]; /* +0x0018 5e 20 00 00 */ unsigned char uliStreamSize[8]; /* +0x0020 5e 20 00 00 */ unsigned char uliTotalFileSize[8]; /* +0x0028 5e 20 00 00 */ }; struct _INPUT_RECORD { unsigned short EventType; /* +0x0000 */ }; struct _RPC_HTTP_TRANSPORT_CREDENTIALS_W { unsigned char TransportCredentials[4]; /* +0x0000 59 17 00 00 */ unsigned long Flags; /* +0x0004 */ unsigned long AuthenticationTarget; /* +0x0008 */ unsigned long NumberOfAuthnSchemes; /* +0x000c */ unsigned long *AuthnSchemes; /* +0x0010 */ unsigned short *ServerCertificateSubject; /* +0x0014 */ }; struct _ACL_SIZE_INFORMATION { unsigned long AceCount; /* +0x0000 */ unsigned long AclBytesInUse; /* +0x0004 */ unsigned long AclBytesFree; /* +0x0008 */ }; struct _TAPE_WRITE_MARKS { unsigned long Type; /* +0x0000 */ unsigned long Count; /* +0x0004 */ unsigned char Immediate; /* +0x0008 */ }; struct _JOBOBJECT_ASSOCIATE_COMPLETION_PORT { void *CompletionKey; /* +0x0000 */ void *CompletionPort; /* +0x0004 */ }; struct _IMAGE_BOUND_IMPORT_DESCRIPTOR { unsigned long TimeDateStamp; /* +0x0000 */ unsigned short OffsetModuleName; /* +0x0004 */ unsigned short NumberOfModuleForwarderRefs; /* +0x0006 */ }; struct _TOKEN_DEVICE_CLAIMS { void *DeviceClaims; /* +0x0000 */ }; struct _ACCESS_REASONS { unsigned char Data[128]; /* +0x0000 c1 1f 00 00 */ }; struct tm { unsigned char tm_sec[4]; /* +0x0000 74 00 00 00 */ unsigned char tm_min[4]; /* +0x0004 74 00 00 00 */ unsigned char tm_hour[4]; /* +0x0008 74 00 00 00 */ unsigned char tm_mday[4]; /* +0x000c 74 00 00 00 */ unsigned char tm_mon[4]; /* +0x0010 74 00 00 00 */ unsigned char tm_year[4]; /* +0x0014 74 00 00 00 */ unsigned char tm_wday[4]; /* +0x0018 74 00 00 00 */ unsigned char tm_yday[4]; /* +0x001c 74 00 00 00 */ unsigned char tm_isdst[4]; /* +0x0020 74 00 00 00 */ }; struct _INPUT_RECORD:: { /* unsigned char KeyEvent[0]; +0x0000 51 31 00 00 */ /* unsigned char MouseEvent[0]; +0x0000 03 21 00 00 */ /* unsigned char WindowBufferSizeEvent[0]; +0x0000 52 31 00 00 */ /* unsigned char MenuEvent[0]; +0x0000 62 23 00 00 */ unsigned char FocusEvent[16]; /* +0x0000 cb 2f 00 00 */ }; struct _IMAGE_LINENUMBER:: { unsigned long SymbolTableIndex; /* +0x0000 */ unsigned long VirtualAddress; /* +0x0000 */ }; struct _PSFEATURE_CUSTPAPER { long lOrientation; /* +0x0000 */ long lWidth; /* +0x0004 */ long lHeight; /* +0x0008 */ long lWidthOffset; /* +0x000c */ long lHeightOffset; /* +0x0010 */ }; struct tagNEWTEXTMETRICEXW { unsigned char ntmTm[76]; /* +0x0000 46 29 00 00 */ unsigned char ntmFontSig[24]; /* +0x004c 03 19 00 00 */ }; struct tagCUSTDATAITEM { unsigned char guid[16]; /* +0x0000 ce 13 00 00 */ unsigned char varValue[16]; /* +0x0010 a0 17 00 00 */ }; struct _RGNDATAHEADER { unsigned long dwSize; /* +0x0000 */ unsigned long iType; /* +0x0004 */ unsigned long nCount; /* +0x0008 */ unsigned long nRgnSize; /* +0x000c */ unsigned char rcBound[16]; /* +0x0010 c0 12 00 00 */ }; struct tagEMRFORMAT { unsigned long dSignature; /* +0x0000 */ unsigned long nVersion; /* +0x0004 */ unsigned long cbData; /* +0x0008 */ unsigned long offData; /* +0x000c */ }; struct _xml_error { unsigned char _nLine[4]; /* +0x0000 75 00 00 00 */ unsigned char _pchBuf[4]; /* +0x0004 71 04 00 00 */ unsigned char _cchBuf[4]; /* +0x0008 75 00 00 00 */ unsigned char _ich[4]; /* +0x000c 75 00 00 00 */ unsigned char _pszFound[4]; /* +0x0010 71 04 00 00 */ unsigned char _pszExpected[4]; /* +0x0014 71 04 00 00 */ unsigned long _reserved1; /* +0x0018 */ unsigned long _reserved2; /* +0x001c */ }; struct _RemotableHandle::__MIDL_IWinTypes_0009 { long hInproc; /* +0x0000 */ long hRemote; /* +0x0000 */ }; struct tagRID_DEVICE_INFO_HID { unsigned long dwVendorId; /* +0x0000 */ unsigned long dwProductId; /* +0x0004 */ unsigned long dwVersionNumber; /* +0x0008 */ unsigned short usUsagePage; /* +0x000c */ unsigned short usUsage; /* +0x000e */ }; struct tagOIFI { unsigned char cb[4]; /* +0x0000 75 00 00 00 */ unsigned char fMDIApp[4]; /* +0x0004 74 00 00 00 */ unsigned char hwndFrame[4]; /* +0x0008 fc 11 00 00 */ unsigned char haccel[4]; /* +0x000c 5f 13 00 00 */ unsigned char cAccelEntries[4]; /* +0x0010 75 00 00 00 */ }; struct IMAGE_LOAD_CONFIG_DIRECTORY32 { unsigned long Size; /* +0x0000 */ unsigned long TimeDateStamp; /* +0x0004 */ unsigned short MajorVersion; /* +0x0008 */ unsigned short MinorVersion; /* +0x000a */ unsigned long GlobalFlagsClear; /* +0x000c */ unsigned long GlobalFlagsSet; /* +0x0010 */ unsigned long CriticalSectionDefaultTimeout; /* +0x0014 */ unsigned long DeCommitFreeBlockThreshold; /* +0x0018 */ unsigned long DeCommitTotalFreeThreshold; /* +0x001c */ unsigned long LockPrefixTable; /* +0x0020 */ unsigned long MaximumAllocationSize; /* +0x0024 */ unsigned long VirtualMemoryThreshold; /* +0x0028 */ unsigned long ProcessHeapFlags; /* +0x002c */ unsigned long ProcessAffinityMask; /* +0x0030 */ unsigned short CSDVersion; /* +0x0034 */ unsigned short Reserved1; /* +0x0036 */ unsigned long EditList; /* +0x0038 */ unsigned long SecurityCookie; /* +0x003c */ unsigned long SEHandlerTable; /* +0x0040 */ unsigned long SEHandlerCount; /* +0x0044 */ }; struct _TP_CALLBACK_ENVIRON_V3 { unsigned long Version; /* +0x0000 */ unsigned char Pool[4]; /* +0x0004 bf 31 00 00 */ unsigned char CleanupGroup[4]; /* +0x0008 c0 31 00 00 */ unsigned char CleanupGroupCancelCallback[4]; /* +0x000c c2 31 00 00 */ void *RaceDll; /* +0x0010 */ unsigned char ActivationContext[4]; /* +0x0014 c4 31 00 00 */ unsigned char FinalizationCallback[16]; /* +0x0018 c7 31 00 00 */ }; struct _UNIVERSAL_NAME_INFOA { char *lpUniversalName; /* +0x0000 */ }; struct tagEMRSETMAPPERFLAGS { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned long dwFlags; /* +0x0008 */ }; struct _SYSTEM_POWER_STATUS { unsigned char ACLineStatus; /* +0x0000 */ unsigned char BatteryFlag; /* +0x0001 */ unsigned char BatteryLifePercent; /* +0x0002 */ unsigned char Reserved1; /* +0x0003 */ unsigned long BatteryLifeTime; /* +0x0004 */ unsigned long BatteryFullLifeTime; /* +0x0008 */ }; struct DISPLAYCONFIG_TARGET_MODE { unsigned char targetVideoSignalInfo[48]; /* +0x0000 ec 31 00 00 */ }; struct tagCBT_CREATEWNDA { unsigned char lpcs[4]; /* +0x0000 69 23 00 00 */ unsigned char hwndInsertAfter[4]; /* +0x0004 fc 11 00 00 */ }; struct _FILEMUIINFO { unsigned long dwSize; /* +0x0000 */ unsigned long dwVersion; /* +0x0004 */ unsigned long dwFileType; /* +0x0008 */ unsigned char pChecksum[16]; /* +0x000c d3 19 00 00 */ unsigned char pServiceChecksum[16]; /* +0x001c d3 19 00 00 */ unsigned long dwLanguageNameOffset; /* +0x002c */ unsigned long dwTypeIDMainSize; /* +0x0030 */ unsigned long dwTypeIDMainOffset; /* +0x0034 */ unsigned long dwTypeNameMainOffset; /* +0x0038 */ unsigned long dwTypeIDMUISize; /* +0x003c */ unsigned long dwTypeIDMUIOffset; /* +0x0040 */ unsigned long dwTypeNameMUIOffset; /* +0x0044 */ unsigned char abBuffer[8]; /* +0x0048 20 1a 00 00 */ }; struct _IO_COUNTERS { unsigned long long ReadOperationCount; /* +0x0000 */ unsigned long long WriteOperationCount; /* +0x0008 */ unsigned long long OtherOperationCount; /* +0x0010 */ unsigned long long ReadTransferCount; /* +0x0018 */ unsigned long long WriteTransferCount; /* +0x0020 */ unsigned long long OtherTransferCount; /* +0x0028 */ }; struct tagRID_DEVICE_INFO_KEYBOARD { unsigned long dwType; /* +0x0000 */ unsigned long dwSubType; /* +0x0004 */ unsigned long dwKeyboardMode; /* +0x0008 */ unsigned long dwNumberOfFunctionKeys; /* +0x000c */ unsigned long dwNumberOfIndicators; /* +0x0010 */ unsigned long dwNumberOfKeysTotal; /* +0x0014 */ }; struct _userHPALETTE { long fContext; /* +0x0000 */ }; struct _userHPALETTE::__MIDL_IWinTypes_0008 { long hInproc; /* +0x0000 */ /* unsigned char hRemote[0]; +0x0000 8b 24 00 00 */ long long hInproc64; /* +0x0000 */ }; struct _userBITMAP { long bmType; /* +0x0000 */ long bmWidth; /* +0x0004 */ long bmHeight; /* +0x0008 */ long bmWidthBytes; /* +0x000c */ unsigned short bmPlanes; /* +0x0010 */ unsigned short bmBitsPixel; /* +0x0012 */ unsigned long cbSize; /* +0x0014 */ unsigned char pBuffer[4]; /* +0x0018 04 12 00 00 */ }; struct ANON_OBJECT_HEADER_BIGOBJ { unsigned short Sig1; /* +0x0000 */ unsigned short Sig2; /* +0x0002 */ unsigned short Version; /* +0x0004 */ unsigned short Machine; /* +0x0006 */ unsigned long TimeDateStamp; /* +0x0008 */ unsigned char ClassID[16]; /* +0x000c ce 13 00 00 */ unsigned long SizeOfData; /* +0x001c */ unsigned long Flags; /* +0x0020 */ unsigned long MetaDataSize; /* +0x0024 */ unsigned long MetaDataOffset; /* +0x0028 */ unsigned long NumberOfSections; /* +0x002c */ unsigned long PointerToSymbolTable; /* +0x0030 */ unsigned long NumberOfSymbols; /* +0x0034 */ }; struct _SE_IMPERSONATION_STATE { void *Token; /* +0x0000 */ unsigned char CopyOnOpen; /* +0x0004 */ unsigned char EffectiveOnly; /* +0x0005 */ unsigned char Level[4]; /* +0x0008 8b 20 00 00 */ }; struct _currencyfmtA { unsigned char NumDigits[4]; /* +0x0000 75 00 00 00 */ unsigned char LeadingZero[4]; /* +0x0004 75 00 00 00 */ unsigned char Grouping[4]; /* +0x0008 75 00 00 00 */ char *lpDecimalSep; /* +0x000c */ char *lpThousandSep; /* +0x0010 */ unsigned char NegativeOrder[4]; /* +0x0014 75 00 00 00 */ unsigned char PositiveOrder[4]; /* +0x0018 75 00 00 00 */ char *lpCurrencySymbol; /* +0x001c */ }; struct tagDRAWITEMSTRUCT { unsigned char CtlType[4]; /* +0x0000 75 00 00 00 */ unsigned char CtlID[4]; /* +0x0004 75 00 00 00 */ unsigned char itemID[4]; /* +0x0008 75 00 00 00 */ unsigned char itemAction[4]; /* +0x000c 75 00 00 00 */ unsigned char itemState[4]; /* +0x0010 75 00 00 00 */ unsigned char hwndItem[4]; /* +0x0014 fc 11 00 00 */ unsigned char hDC[4]; /* +0x0018 32 18 00 00 */ unsigned char rcItem[16]; /* +0x001c c0 12 00 00 */ unsigned long itemData; /* +0x002c */ }; struct _TypeDescriptor { unsigned char pVFTable[4]; /* +0x0000 92 15 00 00 */ void *spare; /* +0x0004 */ /* unsigned char name[0]; +0x0008 60 32 00 00 */ }; struct tagSOLE_AUTHENTICATION_LIST { unsigned long cAuthInfo; /* +0x0000 */ unsigned char aAuthInfo[4]; /* +0x0004 8a 1b 00 00 */ }; struct tagGCP_RESULTSW { unsigned long lStructSize; /* +0x0000 */ unsigned char lpOutString[4]; /* +0x0004 71 04 00 00 */ unsigned char lpOrder[4]; /* +0x0008 75 04 00 00 */ unsigned char lpDx[4]; /* +0x000c 74 04 00 00 */ unsigned char lpCaretPos[4]; /* +0x0010 74 04 00 00 */ char *lpClass; /* +0x0014 */ unsigned char lpGlyphs[4]; /* +0x0018 71 04 00 00 */ unsigned char nGlyphs[4]; /* +0x001c 75 00 00 00 */ unsigned char nMaxFit[4]; /* +0x0020 74 00 00 00 */ }; struct _RPC_ASYNC_NOTIFICATION_INFO:: { unsigned char hWnd[4]; /* +0x0000 fc 11 00 00 */ unsigned char Msg[4]; /* +0x0004 75 00 00 00 */ }; struct _RPC_ASYNC_NOTIFICATION_INFO:: { void *hIOPort; /* +0x0000 */ unsigned long dwNumberOfBytesTransferred; /* +0x0004 */ unsigned long dwCompletionKey; /* +0x0008 */ unsigned char lpOverlapped[4]; /* +0x000c 4b 15 00 00 */ }; struct _RPC_ASYNC_NOTIFICATION_INFO:: { unsigned char NotificationRoutine[4]; /* +0x0000 60 12 00 00 */ void *hThread; /* +0x0004 */ }; struct _CLAIM_SECURITY_ATTRIBUTE_RELATIVE_V1 { unsigned long Name; /* +0x0000 */ unsigned short ValueType; /* +0x0004 */ unsigned short Reserved; /* +0x0006 */ unsigned long Flags; /* +0x0008 */ unsigned long ValueCount; /* +0x000c */ }; struct _CLAIM_SECURITY_ATTRIBUTE_RELATIVE_V1:: { /* unsigned char pInt64[0]; +0x0000 01 12 00 00 */ /* unsigned char pUint64[0]; +0x0000 01 12 00 00 */ /* unsigned char ppString[0]; +0x0000 01 12 00 00 */ /* unsigned char pFqbn[0]; +0x0000 01 12 00 00 */ unsigned char pOctetString[4]; /* +0x0000 01 12 00 00 */ }; struct tagLOGFONTA { long lfHeight; /* +0x0000 */ long lfWidth; /* +0x0004 */ long lfEscapement; /* +0x0008 */ long lfOrientation; /* +0x000c */ long lfWeight; /* +0x0010 */ unsigned char lfItalic; /* +0x0014 */ unsigned char lfUnderline; /* +0x0015 */ unsigned char lfStrikeOut; /* +0x0016 */ unsigned char lfCharSet; /* +0x0017 */ unsigned char lfOutPrecision; /* +0x0018 */ unsigned char lfClipPrecision; /* +0x0019 */ unsigned char lfQuality; /* +0x001a */ unsigned char lfPitchAndFamily; /* +0x001b */ unsigned char lfFaceName[32]; /* +0x001c 94 1a 00 00 */ }; struct DISPLAYCONFIG_ADAPTER_NAME { unsigned char header[20]; /* +0x0000 47 1b 00 00 */ unsigned char adapterDevicePath[256]; /* +0x0014 7e 13 00 00 */ }; struct _POWER_IDLE_RESILIENCY { unsigned long CoalescingTimeout; /* +0x0000 */ unsigned long IdleResiliencyPeriod; /* +0x0004 */ }; struct _QUOTA_LIMITS_EX { unsigned long PagedPoolLimit; /* +0x0000 */ unsigned long NonPagedPoolLimit; /* +0x0004 */ unsigned long MinimumWorkingSetSize; /* +0x0008 */ unsigned long MaximumWorkingSetSize; /* +0x000c */ unsigned long PagefileLimit; /* +0x0010 */ unsigned char TimeLimit[8]; /* +0x0018 db 13 00 00 */ unsigned long WorkingSetLimit; /* +0x0020 */ unsigned long Reserved2; /* +0x0024 */ unsigned long Reserved3; /* +0x0028 */ unsigned long Reserved4; /* +0x002c */ unsigned long Flags; /* +0x0030 */ unsigned char CpuRateLimit[4]; /* +0x0034 79 2a 00 00 */ }; struct _IMAGE_IMPORT_BY_NAME { unsigned short Hint; /* +0x0000 */ unsigned char Name[2]; /* +0x0002 ea 1b 00 00 */ }; struct tagEMREXTSELECTCLIPRGN { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned long cbRgnData; /* +0x0008 */ unsigned long iMode; /* +0x000c */ unsigned char RgnData[4]; /* +0x0010 04 12 00 00 */ }; struct _IMAGE_BASE_RELOCATION { unsigned long VirtualAddress; /* +0x0000 */ unsigned long SizeOfBlock; /* +0x0004 */ }; struct _FILE_END_OF_FILE_INFO { unsigned char EndOfFile[8]; /* +0x0000 db 13 00 00 */ }; struct tagSERIALIZEDPROPERTYVALUE { unsigned long dwType; /* +0x0000 */ unsigned char rgb[4]; /* +0x0004 04 12 00 00 */ }; struct tagCADWORD { unsigned long cElems; /* +0x0000 */ unsigned long *pElems; /* +0x0004 */ }; struct tagHW_PROFILE_INFOA { unsigned long dwDockInfo; /* +0x0000 */ unsigned char szHwProfileGuid[39]; /* +0x0004 e3 32 00 00 */ unsigned char szHwProfileName[81]; /* +0x002b 73 21 00 00 */ }; struct tagEMRSETPALETTEENTRIES { unsigned char emr[8]; /* +0x0000 f2 11 00 00 */ unsigned long ihPal; /* +0x0008 */ unsigned long iStart; /* +0x000c */ unsigned long cEntries; /* +0x0010 */ unsigned char aPalEntries[4]; /* +0x0014 22 1c 00 00 */ }; struct _IMAGE_SYMBOL:: { unsigned char ShortName[8]; /* +0x0000 20 1a 00 00 */ }; struct _IMAGE_SYMBOL:::: { unsigned long Short; /* +0x0000 */ unsigned long Long; /* +0x0004 */ }; struct _WINDOW_BUFFER_SIZE_RECORD { unsigned char dwSize[4]; /* +0x0000 bc 14 00 00 */ }; struct SET_POWER_SETTING_VALUE { unsigned long Version; /* +0x0000 */ unsigned char Guid[16]; /* +0x0004 ce 13 00 00 */ unsigned char PowerCondition[4]; /* +0x0014 7a 33 00 00 */ unsigned long DataLength; /* +0x0018 */ unsigned char Data[4]; /* +0x001c 04 12 00 00 */ }; struct BATTERY_REPORTING_SCALE { unsigned long Granularity; /* +0x0000 */ unsigned long Capacity; /* +0x0004 */ }; struct PPM_WMI_LEGACY_PERFSTATE { unsigned long Frequency; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long PercentFrequency; /* +0x0008 */ }; struct PPM_WMI_PERF_STATE { unsigned long Frequency; /* +0x0000 */ unsigned long Power; /* +0x0004 */ unsigned char PercentFrequency; /* +0x0008 */ unsigned char IncreaseLevel; /* +0x0009 */ unsigned char DecreaseLevel; /* +0x000a */ unsigned char Type; /* +0x000b */ unsigned long IncreaseTime; /* +0x000c */ unsigned long DecreaseTime; /* +0x0010 */ unsigned long long Control; /* +0x0018 */ unsigned long long Status; /* +0x0020 */ unsigned long HitCount; /* +0x0028 */ unsigned long Reserved1; /* +0x002c */ unsigned long long Reserved2; /* +0x0030 */ unsigned long long Reserved3; /* +0x0038 */ }; struct PPM_WMI_PERF_STATES { unsigned long Count; /* +0x0000 */ unsigned long MaxFrequency; /* +0x0004 */ unsigned long CurrentState; /* +0x0008 */ unsigned long MaxPerfState; /* +0x000c */ unsigned long MinPerfState; /* +0x0010 */ unsigned long LowestPerfState; /* +0x0014 */ unsigned long ThermalConstraint; /* +0x0018 */ unsigned char BusyAdjThreshold; /* +0x001c */ unsigned char PolicyType; /* +0x001d */ unsigned char Type; /* +0x001e */ unsigned char Reserved; /* +0x001f */ unsigned long TimerInterval; /* +0x0020 */ unsigned long long TargetProcessors; /* +0x0028 */ unsigned long PStateHandler; /* +0x0030 */ unsigned long PStateContext; /* +0x0034 */ unsigned long TStateHandler; /* +0x0038 */ unsigned long TStateContext; /* +0x003c */ unsigned long FeedbackHandler; /* +0x0040 */ unsigned long Reserved1; /* +0x0044 */ unsigned long long Reserved2; /* +0x0048 */ unsigned char State[64]; /* +0x0050 83 33 00 00 */ }; struct PPM_WMI_PERF_STATES_EX { unsigned long Count; /* +0x0000 */ unsigned long MaxFrequency; /* +0x0004 */ unsigned long CurrentState; /* +0x0008 */ unsigned long MaxPerfState; /* +0x000c */ unsigned long MinPerfState; /* +0x0010 */ unsigned long LowestPerfState; /* +0x0014 */ unsigned long ThermalConstraint; /* +0x0018 */ unsigned char BusyAdjThreshold; /* +0x001c */ unsigned char PolicyType; /* +0x001d */ unsigned char Type; /* +0x001e */ unsigned char Reserved; /* +0x001f */ unsigned long TimerInterval; /* +0x0020 */ void *TargetProcessors; /* +0x0024 */ unsigned long PStateHandler; /* +0x0028 */ unsigned long PStateContext; /* +0x002c */ unsigned long TStateHandler; /* +0x0030 */ unsigned long TStateContext; /* +0x0034 */ unsigned long FeedbackHandler; /* +0x0038 */ unsigned long Reserved1; /* +0x003c */ unsigned long long Reserved2; /* +0x0040 */ unsigned char State[64]; /* +0x0048 83 33 00 00 */ }; struct PPM_IDLE_STATE_ACCOUNTING { unsigned long IdleTransitions; /* +0x0000 */ unsigned long FailedTransitions; /* +0x0004 */ unsigned long InvalidBucketIndex; /* +0x0008 */ unsigned long long TotalTime; /* +0x0010 */ unsigned char IdleTimeBuckets[24]; /* +0x0018 ab 18 00 00 */ }; struct PPM_IDLE_ACCOUNTING { unsigned long StateCount; /* +0x0000 */ unsigned long TotalTransitions; /* +0x0004 */ unsigned long ResetCount; /* +0x0008 */ unsigned long long StartTime; /* +0x0010 */ unsigned char State[48]; /* +0x0018 8a 33 00 00 */ }; struct PPM_IDLE_STATE_ACCOUNTING_EX { unsigned long long TotalTime; /* +0x0000 */ unsigned long IdleTransitions; /* +0x0008 */ unsigned long FailedTransitions; /* +0x000c */ unsigned long InvalidBucketIndex; /* +0x0010 */ unsigned long MinTimeUs; /* +0x0014 */ unsigned long MaxTimeUs; /* +0x0018 */ unsigned char IdleTimeBuckets[384]; /* +0x0020 8d 33 00 00 */ }; struct PPM_IDLE_ACCOUNTING_EX { unsigned long StateCount; /* +0x0000 */ unsigned long TotalTransitions; /* +0x0004 */ unsigned long ResetCount; /* +0x0008 */ unsigned long long StartTime; /* +0x0010 */ unsigned char State[416]; /* +0x0018 90 33 00 00 */ }; struct PPM_PERFSTATE_EVENT { unsigned long State; /* +0x0000 */ unsigned long Status; /* +0x0004 */ unsigned long Latency; /* +0x0008 */ unsigned long Speed; /* +0x000c */ unsigned long Processor; /* +0x0010 */ }; struct PPM_PERFSTATE_DOMAIN_EVENT { unsigned long State; /* +0x0000 */ unsigned long Latency; /* +0x0004 */ unsigned long Speed; /* +0x0008 */ unsigned long long Processors; /* +0x0010 */ }; struct PPM_IDLESTATE_EVENT { unsigned long NewState; /* +0x0000 */ unsigned long OldState; /* +0x0004 */ unsigned long long Processors; /* +0x0008 */ }; struct PPM_THERMALCHANGE_EVENT { unsigned long ThermalConstraint; /* +0x0000 */ unsigned long long Processors; /* +0x0008 */ }; struct SYSTEM_POWER_LEVEL { unsigned char Enable; /* +0x0000 */ unsigned char Spare[3]; /* +0x0001 49 12 00 00 */ unsigned long BatteryLevel; /* +0x0004 */ unsigned char PowerPolicy[12]; /* +0x0008 a2 18 00 00 */ unsigned char MinSystemState[4]; /* +0x0014 df 13 00 00 */ }; struct PROCESSOR_IDLESTATE_INFO { unsigned long TimeCheck; /* +0x0000 */ unsigned char DemotePercent; /* +0x0004 */ unsigned char PromotePercent; /* +0x0005 */ unsigned char Spare[2]; /* +0x0006 9c 14 00 00 */ }; struct PROCESSOR_IDLESTATE_POLICY { unsigned short Revision; /* +0x0000 */ }; struct PROCESSOR_IDLESTATE_POLICY:: { unsigned short AsWORD; /* +0x0000 */ /* unsigned char AllowScaling[0]; +0x0000 a3 33 00 00 */ /* unsigned char Disabled[0]; +0x0000 a4 33 00 00 */ unsigned char Reserved[2]; /* +0x0000 a5 33 00 00 */ }; struct PROCESSOR_PERFSTATE_POLICY { unsigned long Revision; /* +0x0000 */ unsigned char MaxThrottle; /* +0x0004 */ unsigned char MinThrottle; /* +0x0005 */ unsigned char BusyAdjThreshold; /* +0x0006 */ unsigned char Spare; /* +0x0007 */ unsigned char Flags[1]; /* +0x0007 a8 33 00 00 */ unsigned long TimeCheck; /* +0x0008 */ unsigned long IncreaseTime; /* +0x000c */ unsigned long DecreaseTime; /* +0x0010 */ unsigned long IncreasePercent; /* +0x0014 */ unsigned long DecreasePercent; /* +0x0018 */ }; struct PROCESSOR_PERFSTATE_POLICY:::: { unsigned char AsBYTE; /* +0x0000 */ /* unsigned char NoDomainAccounting[0]; +0x0000 ab 33 00 00 */ /* unsigned char IncreasePolicy[0]; +0x0000 ac 33 00 00 */ /* unsigned char DecreasePolicy[0]; +0x0000 ad 33 00 00 */ unsigned char Reserved[1]; /* +0x0000 ae 33 00 00 */ }; struct SYSTEM_BATTERY_STATE { unsigned char AcOnLine; /* +0x0000 */ unsigned char BatteryPresent; /* +0x0001 */ unsigned char Charging; /* +0x0002 */ unsigned char Discharging; /* +0x0003 */ unsigned char Spare1[4]; /* +0x0004 ae 14 00 00 */ unsigned long MaxCapacity; /* +0x0008 */ unsigned long RemainingCapacity; /* +0x000c */ unsigned long Rate; /* +0x0010 */ unsigned long EstimatedTime; /* +0x0014 */ unsigned long DefaultAlert1; /* +0x0018 */ unsigned long DefaultAlert2; /* +0x001c */ }; struct IMAGE_LOAD_CONFIG_DIRECTORY64 { unsigned long Size; /* +0x0000 */ unsigned long TimeDateStamp; /* +0x0004 */ unsigned short MajorVersion; /* +0x0008 */ unsigned short MinorVersion; /* +0x000a */ unsigned long GlobalFlagsClear; /* +0x000c */ unsigned long GlobalFlagsSet; /* +0x0010 */ unsigned long CriticalSectionDefaultTimeout; /* +0x0014 */ unsigned long long DeCommitFreeBlockThreshold; /* +0x0018 */ unsigned long long DeCommitTotalFreeThreshold; /* +0x0020 */ unsigned long long LockPrefixTable; /* +0x0028 */ unsigned long long MaximumAllocationSize; /* +0x0030 */ unsigned long long VirtualMemoryThreshold; /* +0x0038 */ unsigned long long ProcessAffinityMask; /* +0x0040 */ unsigned long ProcessHeapFlags; /* +0x0048 */ unsigned short CSDVersion; /* +0x004c */ unsigned short Reserved1; /* +0x004e */ unsigned long long EditList; /* +0x0050 */ unsigned long long SecurityCookie; /* +0x0058 */ unsigned long long SEHandlerTable; /* +0x0060 */ unsigned long long SEHandlerCount; /* +0x0068 */ }; struct SHELLHOOKINFO { unsigned char hwnd[4]; /* +0x0000 fc 11 00 00 */ unsigned char rc[16]; /* +0x0004 c0 12 00 00 */ }; struct POWERBROADCAST_SETTING { unsigned char PowerSetting[16]; /* +0x0000 ce 13 00 00 */ unsigned long DataLength; /* +0x0010 */ unsigned char Data[4]; /* +0x0014 04 12 00 00 */ }; struct BSMINFO { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char hdesk[4]; /* +0x0004 be 33 00 00 */ unsigned char hwnd[4]; /* +0x0008 fc 11 00 00 */ unsigned char luid[8]; /* +0x000c 37 13 00 00 */ }; struct FLASHWINFO { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char hwnd[4]; /* +0x0004 fc 11 00 00 */ unsigned long dwFlags; /* +0x0008 */ unsigned char uCount[4]; /* +0x000c 75 00 00 00 */ unsigned long dwTimeout; /* +0x0010 */ }; struct DLGTEMPLATE { unsigned long style; /* +0x0000 */ unsigned long dwExtendedStyle; /* +0x0004 */ unsigned short cdit; /* +0x0008 */ short x; /* +0x000a */ short y; /* +0x000c */ short cx; /* +0x000e */ short cy; /* +0x0010 */ }; struct DLGITEMTEMPLATE { unsigned long style; /* +0x0000 */ unsigned long dwExtendedStyle; /* +0x0004 */ short x; /* +0x0008 */ short y; /* +0x000a */ short cx; /* +0x000c */ short cy; /* +0x000e */ unsigned short id; /* +0x0010 */ }; struct MENUITEMTEMPLATEHEADER { unsigned short versionNumber; /* +0x0000 */ unsigned short offset; /* +0x0002 */ }; struct SERVICE_TRIGGER_CUSTOM_STATE_ID { unsigned char Data[8]; /* +0x0000 c3 15 00 00 */ }; struct RPC_STATS_VECTOR { unsigned char Count[4]; /* +0x0000 75 00 00 00 */ unsigned char Stats[4]; /* +0x0004 01 12 00 00 */ }; struct RPC_IF_ID_VECTOR { unsigned long Count; /* +0x0000 */ unsigned char IfId[4]; /* +0x0004 cf 33 00 00 */ }; struct RPC_CLIENT_INFORMATION1 { unsigned char *UserName; /* +0x0000 */ unsigned char *ComputerName; /* +0x0004 */ unsigned short Privilege; /* +0x0008 */ unsigned long AuthFlags; /* +0x000c */ }; struct { unsigned char pad[8]; /* +0x0000 d4 33 00 00 */ void *userContext; /* +0x0008 */ }; struct _LDOUBLE { unsigned char ld[10]; /* +0x0000 0b 1f 00 00 */ }; struct _CRT_DOUBLE { unsigned char x[8]; /* +0x0000 41 00 00 00 */ }; struct _CRT_FLOAT { unsigned char f[4]; /* +0x0000 40 00 00 00 */ }; struct NUMPARSE { unsigned char cDig[4]; /* +0x0000 74 00 00 00 */ unsigned long dwInFlags; /* +0x0004 */ unsigned long dwOutFlags; /* +0x0008 */ unsigned char cchUsed[4]; /* +0x000c 74 00 00 00 */ unsigned char nBaseShift[4]; /* +0x0010 74 00 00 00 */ unsigned char nPwr10[4]; /* +0x0014 74 00 00 00 */ }; struct UDATE { unsigned char st[16]; /* +0x0000 7d 13 00 00 */ unsigned short wDayOfYear; /* +0x0010 */ }; struct _SC_ACTION { unsigned char Type[4]; /* +0x0000 fe 33 00 00 */ unsigned long Delay; /* +0x0004 */ }; struct _TOKEN_MANDATORY_POLICY { unsigned long Policy; /* +0x0000 */ }; struct _wireBRECORD { unsigned long fFlags; /* +0x0000 */ unsigned long clSize; /* +0x0004 */ unsigned char pRecInfo[4]; /* +0x0008 3f 2a 00 00 */ unsigned char *pRecord; /* +0x000c */ }; struct tagWCRANGE { unsigned char wcLow[2]; /* +0x0000 71 00 00 00 */ unsigned short cGlyphs; /* +0x0002 */ }; struct tagSTATPROPSETSTG { unsigned char fmtid[16]; /* +0x0000 ce 13 00 00 */ unsigned char clsid[16]; /* +0x0010 ce 13 00 00 */ unsigned long grfFlags; /* +0x0020 */ unsigned char mtime[8]; /* +0x0024 91 14 00 00 */ unsigned char ctime[8]; /* +0x002c 91 14 00 00 */ unsigned char atime[8]; /* +0x0034 91 14 00 00 */ unsigned long dwOSVersion; /* +0x003c */ }; struct _ZONEATTRIBUTES { unsigned long cbSize; /* +0x0000 */ unsigned char szDisplayName[520]; /* +0x0004 a8 13 00 00 */ unsigned char szDescription[400]; /* +0x020c 55 34 00 00 */ unsigned char szIconPath[520]; /* +0x039c a8 13 00 00 */ unsigned long dwTemplateMinLevel; /* +0x05a4 */ unsigned long dwTemplateRecommended; /* +0x05a8 */ unsigned long dwTemplateCurrentLevel; /* +0x05ac */ unsigned long dwFlags; /* +0x05b0 */ }; struct _LDBL12 { unsigned char ld12[12]; /* +0x0000 9d 14 00 00 */ }; struct _TAPE_SET_MEDIA_PARAMETERS { unsigned long BlockSize; /* +0x0000 */ }; struct POWER_ACTION_POLICY { unsigned char Action[4]; /* +0x0000 f7 22 00 00 */ unsigned long Flags; /* +0x0004 */ unsigned long EventCode; /* +0x0008 */ }; struct MENUITEMTEMPLATE { unsigned short mtOption; /* +0x0000 */ unsigned short mtID; /* +0x0002 */ unsigned char mtString[2]; /* +0x0004 83 12 00 00 */ }; struct tagINTERFACEINFO { unsigned char pUnk[4]; /* +0x0000 2b 15 00 00 */ unsigned char iid[16]; /* +0x0004 ce 13 00 00 */ unsigned short wMethod; /* +0x0014 */ }; struct tagFONTDESC { unsigned char cbSizeofstruct[4]; /* +0x0000 75 00 00 00 */ unsigned char lpstrName[4]; /* +0x0004 71 04 00 00 */ unsigned char cySize[8]; /* +0x0008 b6 2a 00 00 */ short sWeight; /* +0x0010 */ short sCharset; /* +0x0012 */ unsigned char fItalic[4]; /* +0x0014 74 00 00 00 */ unsigned char fUnderline[4]; /* +0x0018 74 00 00 00 */ unsigned char fStrikethrough[4]; /* +0x001c 74 00 00 00 */ }; struct _MESSAGE_RESOURCE_DATA { unsigned long NumberOfBlocks; /* +0x0000 */ unsigned char Blocks[12]; /* +0x0004 a1 34 00 00 */ }; struct _TOKEN_GROUPS { unsigned long GroupCount; /* +0x0000 */ unsigned char Groups[8]; /* +0x0004 68 19 00 00 */ }; struct _TOKEN_AUDIT_POLICY { unsigned char PerUserPolicy[29]; /* +0x0000 d5 34 00 00 */ }; struct tagRemSNB { unsigned long ulCntStr; /* +0x0000 */ unsigned long ulCntChar; /* +0x0004 */ unsigned char rgString[4]; /* +0x0008 83 12 00 00 */ }; struct FILE_ID_DESCRIPTOR { unsigned long dwSize; /* +0x0000 */ unsigned char Type[4]; /* +0x0004 03 23 00 00 */ /* unsigned char FileId[0]; +0x0008 db 13 00 00 */ unsigned char ObjectId[16]; /* +0x0008 ce 13 00 00 */ }; struct tagCOLORADJUSTMENT { unsigned short caSize; /* +0x0000 */ unsigned short caFlags; /* +0x0002 */ unsigned short caIlluminantIndex; /* +0x0004 */ unsigned short caRedGamma; /* +0x0006 */ unsigned short caGreenGamma; /* +0x0008 */ unsigned short caBlueGamma; /* +0x000a */ unsigned short caReferenceBlack; /* +0x000c */ unsigned short caReferenceWhite; /* +0x000e */ short caContrast; /* +0x0010 */ short caBrightness; /* +0x0012 */ short caColorfulness; /* +0x0014 */ short caRedGreenTint; /* +0x0016 */ }; struct _MENU_EVENT_RECORD { unsigned char dwCommandId[4]; /* +0x0000 75 00 00 00 */ }; struct _DEBUG_EVENT:: { /* unsigned char Exception[0]; +0x0000 6b 21 00 00 */ /* unsigned char CreateThread[0]; +0x0000 3c 34 00 00 */ /* unsigned char CreateProcessInfo[0]; +0x0000 52 2e 00 00 */ /* unsigned char ExitThread[0]; +0x0000 ee 19 00 00 */ /* unsigned char ExitProcess[0]; +0x0000 f6 2d 00 00 */ /* unsigned char LoadDll[0]; +0x0000 da 29 00 00 */ /* unsigned char UnloadDll[0]; +0x0000 3b 35 00 00 */ /* unsigned char DebugString[0]; +0x0000 a7 2a 00 00 */ unsigned char RipInfo[84]; /* +0x0000 99 30 00 00 */ }; struct _FILE_REMOTE_PROTOCOL_INFO { unsigned short StructureVersion; /* +0x0000 */ unsigned short StructureSize; /* +0x0002 */ unsigned long Protocol; /* +0x0004 */ unsigned short ProtocolMajorVersion; /* +0x0008 */ unsigned short ProtocolMinorVersion; /* +0x000a */ unsigned short ProtocolRevision; /* +0x000c */ unsigned short Reserved; /* +0x000e */ unsigned long Flags; /* +0x0010 */ }; struct _IMAGE_THUNK_DATA64:: { unsigned long long ForwarderString; /* +0x0000 */ unsigned long long Function; /* +0x0000 */ unsigned long long Ordinal; /* +0x0000 */ unsigned long long AddressOfData; /* +0x0000 */ }; struct _TOKEN_USER_CLAIMS { void *UserClaims; /* +0x0000 */ }; struct _IMAGE_SYMBOL_EX:: { unsigned char ShortName[8]; /* +0x0000 20 1a 00 00 */ }; struct tagPICTDESC:::: { unsigned char hemf[4]; /* +0x0000 46 1c 00 00 */ }; struct tagPICTDESC:::: { unsigned char hicon[4]; /* +0x0000 92 19 00 00 */ }; struct tagPICTDESC:::: { unsigned char hmeta[4]; /* +0x0000 cd 1b 00 00 */ unsigned char xExt[4]; /* +0x0004 74 00 00 00 */ unsigned char yExt[4]; /* +0x0008 74 00 00 00 */ }; struct tagPICTDESC:::: { unsigned char hbitmap[4]; /* +0x0000 b9 14 00 00 */ unsigned char hpal[4]; /* +0x0004 67 18 00 00 */ }; struct _IMAGE_RESOURCE_DIRECTORY { unsigned long Characteristics; /* +0x0000 */ unsigned long TimeDateStamp; /* +0x0004 */ unsigned short MajorVersion; /* +0x0008 */ unsigned short MinorVersion; /* +0x000a */ unsigned short NumberOfNamedEntries; /* +0x000c */ unsigned short NumberOfIdEntries; /* +0x000e */ }; struct _s__RTTIBaseClassArray { unsigned char arrayOfBaseClassDescriptors[1]; /* +0x0000 b3 35 00 00 */ }; struct localeinfo_struct { unsigned char locinfo[4]; /* +0x0000 b8 35 00 00 */ unsigned char mbcinfo[4]; /* +0x0004 ba 35 00 00 */ }; struct _GDI_NONREMOTE { long fContext; /* +0x0000 */ }; struct _GDI_NONREMOTE::__MIDL_IWinTypes_0002 { long hInproc; /* +0x0000 */ unsigned char hRemote[4]; /* +0x0000 f3 35 00 00 */ }; struct tagCWPSTRUCT { long lParam; /* +0x0000 */ unsigned char wParam[4]; /* +0x0004 75 00 00 00 */ unsigned char message[4]; /* +0x0008 75 00 00 00 */ unsigned char hwnd[4]; /* +0x000c fc 11 00 00 */ }; struct PPM_WMI_IDLE_STATE { unsigned long Latency; /* +0x0000 */ unsigned long Power; /* +0x0004 */ unsigned long TimeCheck; /* +0x0008 */ unsigned char PromotePercent; /* +0x000c */ unsigned char DemotePercent; /* +0x000d */ unsigned char StateType; /* +0x000e */ unsigned char Reserved; /* +0x000f */ unsigned long StateFlags; /* +0x0010 */ unsigned long Context; /* +0x0014 */ unsigned long IdleHandler; /* +0x0018 */ unsigned long Reserved1; /* +0x001c */ }; struct PPM_WMI_IDLE_STATES_EX { unsigned long Type; /* +0x0000 */ unsigned long Count; /* +0x0004 */ unsigned long TargetState; /* +0x0008 */ unsigned long OldState; /* +0x000c */ void *TargetProcessors; /* +0x0010 */ unsigned char State[32]; /* +0x0014 52 36 00 00 */ }; struct _REMOTE_NAME_INFOA { char *lpUniversalName; /* +0x0000 */ char *lpConnectionName; /* +0x0004 */ char *lpRemainingPath; /* +0x0008 */ }; struct tagOLEVERB { long lVerb; /* +0x0000 */ unsigned char lpszVerbName[4]; /* +0x0004 71 04 00 00 */ unsigned long fuFlags; /* +0x0008 */ unsigned long grfAttribs; /* +0x000c */ }; struct _ImageArchitectureHeader { /* unsigned char AmaskValue[0]; +0x0000 40 17 00 00 */ unsigned char AmaskShift[4]; /* +0x0000 70 36 00 00 */ unsigned long FirstEntryRVA; /* +0x0004 */ }; struct _FILE_REMOTE_PROTOCOL_INFO:: { unsigned char Reserved[64]; /* +0x0000 8b 1c 00 00 */ }; struct _FILE_REMOTE_PROTOCOL_INFO:: { unsigned char Reserved[32]; /* +0x0000 9d 36 00 00 */ }; struct NOTIFY_USER_POWER_SETTING { unsigned char Guid[16]; /* +0x0000 ce 13 00 00 */ }; struct _IMAGE_TLS_DIRECTORY64 { unsigned long long StartAddressOfRawData; /* +0x0000 */ unsigned long long EndAddressOfRawData; /* +0x0008 */ unsigned long long AddressOfIndex; /* +0x0010 */ unsigned long long AddressOfCallBacks; /* +0x0018 */ unsigned long SizeOfZeroFill; /* +0x0020 */ unsigned long Characteristics; /* +0x0024 */ }; struct _RPC_BINDING_VECTOR { unsigned long Count; /* +0x0000 */ unsigned char BindingH[4]; /* +0x0004 0f 2f 00 00 */ }; struct IMAGE_COR20_HEADER { unsigned long cb; /* +0x0000 */ unsigned short MajorRuntimeVersion; /* +0x0004 */ unsigned short MinorRuntimeVersion; /* +0x0006 */ unsigned char MetaData[8]; /* +0x0008 71 14 00 00 */ unsigned long Flags; /* +0x0010 */ unsigned long EntryPointToken; /* +0x0014 */ unsigned long EntryPointRVA; /* +0x0014 */ unsigned char Resources[8]; /* +0x0018 71 14 00 00 */ unsigned char StrongNameSignature[8]; /* +0x0020 71 14 00 00 */ unsigned char CodeManagerTable[8]; /* +0x0028 71 14 00 00 */ unsigned char VTableFixups[8]; /* +0x0030 71 14 00 00 */ unsigned char ExportAddressTableJumps[8]; /* +0x0038 71 14 00 00 */ unsigned char ManagedNativeHeader[8]; /* +0x0040 71 14 00 00 */ }; struct _TOKEN_ACCESS_INFORMATION { unsigned char SidHash[4]; /* +0x0000 b9 2a 00 00 */ unsigned char RestrictedSidHash[4]; /* +0x0004 b9 2a 00 00 */ unsigned char Privileges[4]; /* +0x0008 cc 19 00 00 */ unsigned char AuthenticationId[8]; /* +0x000c 37 13 00 00 */ unsigned char TokenType[4]; /* +0x0014 8a 20 00 00 */ unsigned char ImpersonationLevel[4]; /* +0x0018 8b 20 00 00 */ unsigned char MandatoryPolicy[4]; /* +0x001c 6c 24 00 00 */ unsigned long Flags; /* +0x0020 */ unsigned long AppContainerNumber; /* +0x0024 */ void *PackageSid; /* +0x0028 */ unsigned char CapabilitiesHash[4]; /* +0x002c b9 2a 00 00 */ }; struct _SERVICE_FAILURE_ACTIONSA { unsigned long dwResetPeriod; /* +0x0000 */ char *lpRebootMsg; /* +0x0004 */ char *lpCommand; /* +0x0008 */ unsigned long cActions; /* +0x000c */ unsigned char lpsaActions[4]; /* +0x0010 2c 1f 00 00 */ }; struct PPM_WMI_IDLE_STATES { unsigned long Type; /* +0x0000 */ unsigned long Count; /* +0x0004 */ unsigned long TargetState; /* +0x0008 */ unsigned long OldState; /* +0x000c */ unsigned long long TargetProcessors; /* +0x0010 */ unsigned char State[32]; /* +0x0018 52 36 00 00 */ }; struct tagCANDIDATELIST { unsigned long dwSize; /* +0x0000 */ unsigned long dwStyle; /* +0x0004 */ unsigned long dwCount; /* +0x0008 */ unsigned long dwSelection; /* +0x000c */ unsigned long dwPageStart; /* +0x0010 */ unsigned long dwPageSize; /* +0x0014 */ unsigned char dwOffset[4]; /* +0x0018 01 12 00 00 */ }; struct _ACL_REVISION_INFORMATION { unsigned long AclRevision; /* +0x0000 */ }; struct PPM_IDLE_STATE_BUCKET_EX { unsigned long long TotalTimeUs; /* +0x0000 */ unsigned long MinTimeUs; /* +0x0008 */ unsigned long MaxTimeUs; /* +0x000c */ unsigned long Count; /* +0x0010 */ }; struct _IMAGE_IMPORT_DESCRIPTOR { unsigned long Characteristics; /* +0x0000 */ unsigned long OriginalFirstThunk; /* +0x0000 */ unsigned long TimeDateStamp; /* +0x0004 */ unsigned long ForwarderChain; /* +0x0008 */ unsigned long Name; /* +0x000c */ unsigned long FirstThunk; /* +0x0010 */ }; struct _PMD { unsigned char mdisp[4]; /* +0x0000 74 00 00 00 */ unsigned char pdisp[4]; /* +0x0004 74 00 00 00 */ unsigned char vdisp[4]; /* +0x0008 74 00 00 00 */ }; struct _RPC_HTTP_TRANSPORT_CREDENTIALS_V3_W { void *TransportCredentials; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long AuthenticationTarget; /* +0x0008 */ unsigned long NumberOfAuthnSchemes; /* +0x000c */ unsigned long *AuthnSchemes; /* +0x0010 */ unsigned short *ServerCertificateSubject; /* +0x0014 */ void *ProxyCredentials; /* +0x0018 */ unsigned long NumberOfProxyAuthnSchemes; /* +0x001c */ unsigned long *ProxyAuthnSchemes; /* +0x0020 */ }; struct tagHARDWAREHOOKSTRUCT { unsigned char hwnd[4]; /* +0x0000 fc 11 00 00 */ unsigned char message[4]; /* +0x0004 75 00 00 00 */ unsigned char wParam[4]; /* +0x0008 75 00 00 00 */ long lParam; /* +0x000c */ }; struct _PSFEATURE_OUTPUT { unsigned char bPageIndependent[4]; /* +0x0000 74 00 00 00 */ unsigned char bSetPageDevice[4]; /* +0x0004 74 00 00 00 */ }; struct _DLLVERSIONINFO2 { unsigned char info1[20]; /* +0x0000 58 37 00 00 */ unsigned long dwFlags; /* +0x0014 */ unsigned long long ullVersion; /* +0x0018 */ }; struct PPM_THERMAL_POLICY_EVENT { unsigned char Mode; /* +0x0000 */ unsigned long long Processors; /* +0x0008 */ }; struct SYSTEM_POWER_CAPABILITIES { unsigned char PowerButtonPresent; /* +0x0000 */ unsigned char SleepButtonPresent; /* +0x0001 */ unsigned char LidPresent; /* +0x0002 */ unsigned char SystemS1; /* +0x0003 */ unsigned char SystemS2; /* +0x0004 */ unsigned char SystemS3; /* +0x0005 */ unsigned char SystemS4; /* +0x0006 */ unsigned char SystemS5; /* +0x0007 */ unsigned char HiberFilePresent; /* +0x0008 */ unsigned char FullWake; /* +0x0009 */ unsigned char VideoDimPresent; /* +0x000a */ unsigned char ApmPresent; /* +0x000b */ unsigned char UpsPresent; /* +0x000c */ unsigned char ThermalControl; /* +0x000d */ unsigned char ProcessorThrottle; /* +0x000e */ unsigned char ProcessorMinThrottle; /* +0x000f */ unsigned char ProcessorMaxThrottle; /* +0x0010 */ unsigned char FastSystemS4; /* +0x0011 */ unsigned char Hiberboot; /* +0x0012 */ unsigned char WakeAlarmPresent; /* +0x0013 */ unsigned char AoAc; /* +0x0014 */ unsigned char DiskSpinDown; /* +0x0015 */ unsigned char spare3[8]; /* +0x0016 20 1a 00 00 */ unsigned char SystemBatteriesPresent; /* +0x001e */ unsigned char BatteriesAreShortTerm; /* +0x001f */ unsigned char BatteryScale[24]; /* +0x0020 94 37 00 00 */ unsigned char AcOnLineWake[4]; /* +0x0038 df 13 00 00 */ unsigned char SoftLidWake[4]; /* +0x003c df 13 00 00 */ unsigned char RtcWake[4]; /* +0x0040 df 13 00 00 */ unsigned char MinDeviceWakeState[4]; /* +0x0044 df 13 00 00 */ unsigned char DefaultLowLatencyWake[4]; /* +0x0048 df 13 00 00 */ }; struct DISPLAYCONFIG_TARGET_DEVICE_NAME { unsigned char header[20]; /* +0x0000 47 1b 00 00 */ unsigned char flags[4]; /* +0x0014 ad 37 00 00 */ unsigned char outputTechnology[4]; /* +0x0018 02 2f 00 00 */ unsigned short edidManufactureId; /* +0x001c */ unsigned short edidProductCodeId; /* +0x001e */ unsigned char connectorInstance[4]; /* +0x0020 75 00 00 00 */ unsigned char monitorFriendlyDeviceName[128]; /* +0x0024 0f 18 00 00 */ unsigned char monitorDevicePath[256]; /* +0x00a4 7e 13 00 00 */ }; struct _CLAIM_SECURITY_ATTRIBUTES_INFORMATION:: { unsigned char pAttributeV1[4]; /* +0x0000 d4 18 00 00 */ }; struct _wireVARIANT { unsigned long clSize; /* +0x0000 */ unsigned long rpcReserved; /* +0x0004 */ unsigned short vt; /* +0x0008 */ unsigned short wReserved1; /* +0x000a */ unsigned short wReserved2; /* +0x000c */ unsigned short wReserved3; /* +0x000e */ long long llVal; /* +0x0010 */ long lVal; /* +0x0010 */ unsigned char bVal; /* +0x0010 */ short iVal; /* +0x0010 */ /* unsigned char fltVal[0]; +0x0010 40 00 00 00 */ /* unsigned char dblVal[0]; +0x0010 41 00 00 00 */ short boolVal; /* +0x0010 */ long scode; /* +0x0010 */ /* unsigned char cyVal[0]; +0x0010 b6 2a 00 00 */ /* unsigned char date[0]; +0x0010 41 00 00 00 */ /* unsigned char bstrVal[0]; +0x0010 64 17 00 00 */ /* unsigned char punkVal[0]; +0x0010 2b 15 00 00 */ /* unsigned char pdispVal[0]; +0x0010 7b 1f 00 00 */ /* unsigned char parray[0]; +0x0010 39 37 00 00 */ /* unsigned char brecVal[0]; +0x0010 88 13 00 00 */ unsigned char *pbVal; /* +0x0010 */ short *piVal; /* +0x0010 */ long *plVal; /* +0x0010 */ long long *pllVal; /* +0x0010 */ /* unsigned char pfltVal[0]; +0x0010 40 04 00 00 */ /* unsigned char pdblVal[0]; +0x0010 41 04 00 00 */ short *pboolVal; /* +0x0010 */ long *pscode; /* +0x0010 */ /* unsigned char pcyVal[0]; +0x0010 b7 2a 00 00 */ /* unsigned char pdate[0]; +0x0010 41 04 00 00 */ /* unsigned char pbstrVal[0]; +0x0010 9a 29 00 00 */ /* unsigned char ppunkVal[0]; +0x0010 f2 19 00 00 */ /* unsigned char ppdispVal[0]; +0x0010 8b 1f 00 00 */ /* unsigned char pparray[0]; +0x0010 cb 37 00 00 */ /* unsigned char pvarVal[0]; +0x0010 dc 1b 00 00 */ char cVal; /* +0x0010 */ unsigned short uiVal; /* +0x0010 */ unsigned long ulVal; /* +0x0010 */ unsigned long long ullVal; /* +0x0010 */ /* unsigned char intVal[0]; +0x0010 74 00 00 00 */ /* unsigned char uintVal[0]; +0x0010 75 00 00 00 */ /* unsigned char decVal[0]; +0x0010 55 18 00 00 */ /* unsigned char pdecVal[0]; +0x0010 56 18 00 00 */ char *pcVal; /* +0x0010 */ unsigned short *puiVal; /* +0x0010 */ unsigned long *pulVal; /* +0x0010 */ unsigned long long *pullVal; /* +0x0010 */ /* unsigned char pintVal[0]; +0x0010 74 04 00 00 */ unsigned char puintVal[16]; /* +0x0010 75 04 00 00 */ }; struct tagARRAYDESC { unsigned char tdescElem[8]; /* +0x0000 b8 2c 00 00 */ unsigned short cDims; /* +0x0008 */ unsigned char rgbounds[8]; /* +0x000c 6f 1b 00 00 */ }; struct RPC_IMPORT_CONTEXT_P { void *LookupContext; /* +0x0000 */ void *ProposedHandle; /* +0x0004 */ unsigned char Bindings[4]; /* +0x0008 dc 37 00 00 */ }; struct _GDI_OBJECT::__MIDL_IAdviseSink_0002 { /* unsigned char hBitmap[0]; +0x0000 0f 1f 00 00 */ /* unsigned char hPalette[0]; +0x0000 e5 19 00 00 */ unsigned char hGeneric[4]; /* +0x0000 76 12 00 00 */ }; struct tagMONITORINFO { unsigned long cbSize; /* +0x0000 */ unsigned char rcMonitor[16]; /* +0x0004 c0 12 00 00 */ unsigned char rcWork[16]; /* +0x0014 c0 12 00 00 */ unsigned long dwFlags; /* +0x0024 */ }; struct tagCOMPOSITIONFORM { unsigned long dwStyle; /* +0x0000 */ unsigned char ptCurrentPos[8]; /* +0x0004 ce 12 00 00 */ unsigned char rcArea[16]; /* +0x000c c0 12 00 00 */ }; struct _stat64i32 { unsigned char st_dev[4]; /* +0x0000 75 00 00 00 */ unsigned short st_ino; /* +0x0004 */ unsigned short st_mode; /* +0x0006 */ short st_nlink; /* +0x0008 */ short st_uid; /* +0x000a */ short st_gid; /* +0x000c */ unsigned char st_rdev[4]; /* +0x0010 75 00 00 00 */ long st_size; /* +0x0014 */ long long st_atime; /* +0x0018 */ long long st_mtime; /* +0x0020 */ long long st_ctime; /* +0x0028 */ }; struct tagRAWINPUT:: { /* unsigned char mouse[0]; +0x0000 65 1d 00 00 */ /* unsigned char keyboard[0]; +0x0000 08 19 00 00 */ unsigned char hid[24]; /* +0x0000 e3 2e 00 00 */ }; struct BITMAPV5HEADER { unsigned long bV5Size; /* +0x0000 */ long bV5Width; /* +0x0004 */ long bV5Height; /* +0x0008 */ unsigned short bV5Planes; /* +0x000c */ unsigned short bV5BitCount; /* +0x000e */ unsigned long bV5Compression; /* +0x0010 */ unsigned long bV5SizeImage; /* +0x0014 */ long bV5XPelsPerMeter; /* +0x0018 */ long bV5YPelsPerMeter; /* +0x001c */ unsigned long bV5ClrUsed; /* +0x0020 */ unsigned long bV5ClrImportant; /* +0x0024 */ unsigned long bV5RedMask; /* +0x0028 */ unsigned long bV5GreenMask; /* +0x002c */ unsigned long bV5BlueMask; /* +0x0030 */ unsigned long bV5AlphaMask; /* +0x0034 */ unsigned long bV5CSType; /* +0x0038 */ unsigned char bV5Endpoints[36]; /* +0x003c eb 1f 00 00 */ unsigned long bV5GammaRed; /* +0x0060 */ unsigned long bV5GammaGreen; /* +0x0064 */ unsigned long bV5GammaBlue; /* +0x0068 */ unsigned long bV5Intent; /* +0x006c */ unsigned long bV5ProfileData; /* +0x0070 */ unsigned long bV5ProfileSize; /* +0x0074 */ unsigned long bV5Reserved; /* +0x0078 */ }; struct _OVERLAPPED { unsigned long Internal; /* +0x0000 */ unsigned long InternalHigh; /* +0x0004 */ unsigned long Offset; /* +0x0008 */ unsigned long OffsetHigh; /* +0x000c */ void *Pointer; /* +0x0008 */ void *hEvent; /* +0x0010 */ }; struct BITMAPV4HEADER { unsigned long bV4Size; /* +0x0000 */ long bV4Width; /* +0x0004 */ long bV4Height; /* +0x0008 */ unsigned short bV4Planes; /* +0x000c */ unsigned short bV4BitCount; /* +0x000e */ unsigned long bV4V4Compression; /* +0x0010 */ unsigned long bV4SizeImage; /* +0x0014 */ long bV4XPelsPerMeter; /* +0x0018 */ long bV4YPelsPerMeter; /* +0x001c */ unsigned long bV4ClrUsed; /* +0x0020 */ unsigned long bV4ClrImportant; /* +0x0024 */ unsigned long bV4RedMask; /* +0x0028 */ unsigned long bV4GreenMask; /* +0x002c */ unsigned long bV4BlueMask; /* +0x0030 */ unsigned long bV4AlphaMask; /* +0x0034 */ unsigned long bV4CSType; /* +0x0038 */ unsigned char bV4Endpoints[36]; /* +0x003c eb 1f 00 00 */ unsigned long bV4GammaRed; /* +0x0060 */ unsigned long bV4GammaGreen; /* +0x0064 */ unsigned long bV4GammaBlue; /* +0x0068 */ }; enum _SOMITEMTYPE { SOMITEM_SCHEMA = 4096, SOMITEM_ATTRIBUTE = 4097, SOMITEM_ATTRIBUTEGROUP = 4098, SOMITEM_NOTATION = 4099, SOMITEM_ANNOTATION = 4100, SOMITEM_IDENTITYCONSTRAINT = 4352, SOMITEM_KEY = 4353, SOMITEM_KEYREF = 4354, SOMITEM_UNIQUE = 4355, SOMITEM_ANYTYPE = 8192, SOMITEM_DATATYPE = 8448, SOMITEM_DATATYPE_ANYTYPE = 8449, SOMITEM_DATATYPE_ANYURI = 8450, SOMITEM_DATATYPE_BASE64BINARY = 8451, SOMITEM_DATATYPE_BOOLEAN = 8452, SOMITEM_DATATYPE_BYTE = 8453, SOMITEM_DATATYPE_DATE = 8454, SOMITEM_DATATYPE_DATETIME = 8455, SOMITEM_DATATYPE_DAY = 8456, SOMITEM_DATATYPE_DECIMAL = 8457, SOMITEM_DATATYPE_DOUBLE = 8458, SOMITEM_DATATYPE_DURATION = 8459, SOMITEM_DATATYPE_ENTITIES = 8460, SOMITEM_DATATYPE_ENTITY = 8461, SOMITEM_DATATYPE_FLOAT = 8462, SOMITEM_DATATYPE_HEXBINARY = 8463, SOMITEM_DATATYPE_ID = 8464, SOMITEM_DATATYPE_IDREF = 8465, SOMITEM_DATATYPE_IDREFS = 8466, SOMITEM_DATATYPE_INT = 8467, SOMITEM_DATATYPE_INTEGER = 8468, SOMITEM_DATATYPE_LANGUAGE = 8469, SOMITEM_DATATYPE_LONG = 8470, SOMITEM_DATATYPE_MONTH = 8471, SOMITEM_DATATYPE_MONTHDAY = 8472, SOMITEM_DATATYPE_NAME = 8473, SOMITEM_DATATYPE_NCNAME = 8474, SOMITEM_DATATYPE_NEGATIVEINTEGER = 8475, SOMITEM_DATATYPE_NMTOKEN = 8476, SOMITEM_DATATYPE_NMTOKENS = 8477, SOMITEM_DATATYPE_NONNEGATIVEINTEGER = 8478, SOMITEM_DATATYPE_NONPOSITIVEINTEGER = 8479, SOMITEM_DATATYPE_NORMALIZEDSTRING = 8480, SOMITEM_DATATYPE_NOTATION = 8481, SOMITEM_DATATYPE_POSITIVEINTEGER = 8482, SOMITEM_DATATYPE_QNAME = 8483, SOMITEM_DATATYPE_SHORT = 8484, SOMITEM_DATATYPE_STRING = 8485, SOMITEM_DATATYPE_TIME = 8486, SOMITEM_DATATYPE_TOKEN = 8487, SOMITEM_DATATYPE_UNSIGNEDBYTE = 8488, SOMITEM_DATATYPE_UNSIGNEDINT = 8489, SOMITEM_DATATYPE_UNSIGNEDLONG = 8490, SOMITEM_DATATYPE_UNSIGNEDSHORT = 8491, SOMITEM_DATATYPE_YEAR = 8492, SOMITEM_DATATYPE_YEARMONTH = 8493, SOMITEM_DATATYPE_ANYSIMPLETYPE = 8703, SOMITEM_SIMPLETYPE = 8704, SOMITEM_COMPLEXTYPE = 9216, SOMITEM_PARTICLE = 16384, SOMITEM_ANY = 16385, SOMITEM_ANYATTRIBUTE = 16386, SOMITEM_ELEMENT = 16387, SOMITEM_GROUP = 16640, SOMITEM_ALL = 16641, SOMITEM_CHOICE = 16642, SOMITEM_SEQUENCE = 16643, SOMITEM_EMPTYPARTICLE = 16644, SOMITEM_NULL = 2048, SOMITEM_NULL_TYPE = 10240, SOMITEM_NULL_ANY = 18433, SOMITEM_NULL_ANYATTRIBUTE = 18434, SOMITEM_NULL_ELEMENT = 18435 }; enum tagGPFIDL_FLAGS { GPFIDL_DEFAULT = 0, GPFIDL_ALTNAME = 1, GPFIDL_UNCPRINTER = 2 }; enum FOLDERFLAGS { FWF_NONE = 0, FWF_AUTOARRANGE = 1, FWF_ABBREVIATEDNAMES = 2, FWF_SNAPTOGRID = 4, FWF_OWNERDATA = 8, FWF_BESTFITWINDOW = 16, FWF_DESKTOP = 32, FWF_SINGLESEL = 64, FWF_NOSUBFOLDERS = 128, FWF_TRANSPARENT = 256, FWF_NOCLIENTEDGE = 512, FWF_NOSCROLL = 1024, FWF_ALIGNLEFT = 2048, FWF_NOICONS = 4096, FWF_SHOWSELALWAYS = 8192, FWF_NOVISIBLE = 16384, = 32770 }; enum _SYSDBG_COMMAND { SysDbgQueryModuleInformation = 0, SysDbgQueryTraceInformation = 1, SysDbgSetTracepoint = 2, SysDbgSetSpecialCall = 3, SysDbgClearSpecialCalls = 4, SysDbgQuerySpecialCalls = 5, SysDbgBreakPoint = 6, SysDbgQueryVersion = 7, SysDbgReadVirtual = 8, SysDbgWriteVirtual = 9, SysDbgReadPhysical = 10, SysDbgWritePhysical = 11, SysDbgReadControlSpace = 12, SysDbgWriteControlSpace = 13, SysDbgReadIoSpace = 14, SysDbgWriteIoSpace = 15, SysDbgReadMsr = 16, SysDbgWriteMsr = 17, SysDbgReadBusData = 18, SysDbgWriteBusData = 19, SysDbgCheckLowMemory = 20, SysDbgEnableKernelDebugger = 21, SysDbgDisableKernelDebugger = 22, SysDbgGetAutoKdEnable = 23, SysDbgSetAutoKdEnable = 24, SysDbgGetPrintBufferSize = 25, SysDbgSetPrintBufferSize = 26, SysDbgGetKdUmExceptionEnable = 27, SysDbgSetKdUmExceptionEnable = 28, SysDbgGetTriageDump = 29, SysDbgGetKdBlockEnable = 30, SysDbgSetKdBlockEnable = 31, SysDbgRegisterForUmBreakInfo = 32, SysDbgGetUmBreakPid = 33, SysDbgClearUmBreakPid = 34, SysDbgGetUmAttachPid = 35, SysDbgClearUmAttachPid = 36 }; enum _TOKEN_SECURITY_ATTRIBUTE_OPERATION { TOKEN_SECURITY_ATTRIBUTE_OPERATION_NONE = 0, TOKEN_SECURITY_ATTRIBUTE_OPERATION_REPLACE_ALL = 1, TOKEN_SECURITY_ATTRIBUTE_OPERATION_ADD = 2, TOKEN_SECURITY_ATTRIBUTE_OPERATION_DELETE = 3, TOKEN_SECURITY_ATTRIBUTE_OPERATION_REPLACE = 4 }; enum FOLDERVIEWMODE { FVM_AUTO = -1, FVM_FIRST = 1, FVM_ICON = 1, FVM_SMALLICON = 2, FVM_LIST = 3, FVM_DETAILS = 4, FVM_THUMBNAIL = 5, FVM_TILE = 6, FVM_THUMBSTRIP = 7, FVM_CONTENT = 8, FVM_LAST = 8 }; enum SHSTOCKICONID { SIID_DOCNOASSOC = 0, SIID_DOCASSOC = 1, SIID_APPLICATION = 2, SIID_FOLDER = 3, SIID_FOLDEROPEN = 4, SIID_DRIVE525 = 5, SIID_DRIVE35 = 6, SIID_DRIVEREMOVE = 7, SIID_DRIVEFIXED = 8, SIID_DRIVENET = 9, SIID_DRIVENETDISABLED = 10, SIID_DRIVECD = 11, SIID_DRIVERAM = 12, SIID_WORLD = 13, SIID_SERVER = 15, SIID_PRINTER = 16, SIID_MYNETWORK = 17, SIID_FIND = 22, SIID_HELP = 23, SIID_SHARE = 28, SIID_LINK = 29, SIID_SLOWFILE = 30, SIID_RECYCLER = 31, SIID_RECYCLERFULL = 32, SIID_MEDIACDAUDIO = 40, SIID_LOCK = 47, SIID_AUTOLIST = 49, SIID_PRINTERNET = 50, SIID_SERVERSHARE = 51, SIID_PRINTERFAX = 52, SIID_PRINTERFAXNET = 53, SIID_PRINTERFILE = 54, SIID_STACK = 55, SIID_MEDIASVCD = 56, SIID_STUFFEDFOLDER = 57, SIID_DRIVEUNKNOWN = 58, SIID_DRIVEDVD = 59, SIID_MEDIADVD = 60, SIID_MEDIADVDRAM = 61, SIID_MEDIADVDRW = 62, SIID_MEDIADVDR = 63, SIID_MEDIADVDROM = 64, SIID_MEDIACDAUDIOPLUS = 65, SIID_MEDIACDRW = 66, SIID_MEDIACDR = 67, SIID_MEDIACDBURN = 68, SIID_MEDIABLANKCD = 69, SIID_MEDIACDROM = 70, SIID_AUDIOFILES = 71, SIID_IMAGEFILES = 72, SIID_VIDEOFILES = 73, SIID_MIXEDFILES = 74, SIID_FOLDERBACK = 75, SIID_FOLDERFRONT = 76, SIID_SHIELD = 77, SIID_WARNING = 78, SIID_INFO = 79, SIID_ERROR = 80, SIID_KEY = 81, SIID_SOFTWARE = 82, SIID_RENAME = 83, SIID_DELETE = 84, SIID_MEDIAAUDIODVD = 85, SIID_MEDIAMOVIEDVD = 86, SIID_MEDIAENHANCEDCD = 87, SIID_MEDIAENHANCEDDVD = 88, SIID_MEDIAHDDVD = 89, SIID_MEDIABLURAY = 90, SIID_MEDIAVCD = 91, SIID_MEDIADVDPLUSR = 92, SIID_MEDIADVDPLUSRW = 93, SIID_DESKTOPPC = 94, SIID_MOBILEPC = 95, SIID_USERS = 96, SIID_MEDIASMARTMEDIA = 97, SIID_MEDIACOMPACTFLASH = 98, SIID_DEVICECELLPHONE = 99, SIID_DEVICECAMERA = 100, SIID_DEVICEVIDEOCAMERA = 101, SIID_DEVICEAUDIOPLAYER = 102, SIID_NETWORKCONNECT = 103, SIID_INTERNET = 104, SIID_ZIPFILE = 105, SIID_SETTINGS = 106, SIID_DRIVEHDDVD = 132, SIID_DRIVEBD = 133, SIID_MEDIAHDDVDROM = 134, SIID_MEDIAHDDVDR = 135, SIID_MEDIAHDDVDRAM = 136, SIID_MEDIABDROM = 137, SIID_MEDIABDR = 138, SIID_MEDIABDRE = 139, SIID_CLUSTEREDDRIVE = 140, SIID_MAX_ICONS = 175 }; enum tagSMINFOMASK { SMIM_TYPE = 1, SMIM_FLAGS = 2, SMIM_ICON = 4 }; enum TBPFLAG { TBPF_NOPROGRESS = 0, TBPF_INDETERMINATE = 1, TBPF_NORMAL = 2, TBPF_ERROR = 4, TBPF_PAUSED = 8 }; enum RESTRICTIONS { REST_NONE = 0, REST_NORUN = 1, REST_NOCLOSE = 2, REST_NOSAVESET = 4, REST_NOFILEMENU = 8, REST_NOSETFOLDERS = 16, REST_NOSETTASKBAR = 32, REST_NODESKTOP = 64, REST_NOFIND = 128, REST_NODRIVES = 256, REST_NODRIVEAUTORUN = 512, REST_NODRIVETYPEAUTORUN = 1024, REST_NONETHOOD = 2048, REST_STARTBANNER = 4096, REST_RESTRICTRUN = 8192, REST_NOPRINTERTABS = 16384, = 32770 }; enum DROPIMAGETYPE { DROPIMAGE_INVALID = -1, DROPIMAGE_NONE = 0, DROPIMAGE_COPY = 1, DROPIMAGE_MOVE = 2, DROPIMAGE_LINK = 4, DROPIMAGE_LABEL = 6, DROPIMAGE_WARNING = 7, DROPIMAGE_NOIMAGE = 8 }; enum WMIDPREQUESTCODE { WMI_GET_ALL_DATA = 0, WMI_GET_SINGLE_INSTANCE = 1, WMI_SET_SINGLE_INSTANCE = 2, WMI_SET_SINGLE_ITEM = 3, WMI_ENABLE_EVENTS = 4, WMI_DISABLE_EVENTS = 5, WMI_ENABLE_COLLECTION = 6, WMI_DISABLE_COLLECTION = 7, WMI_REGINFO = 8, WMI_EXECUTE_METHOD = 9, WMI_CAPTURE_STATE = 10 }; enum DATAOBJ_GET_ITEM_FLAGS { DOGIF_DEFAULT = 0, DOGIF_TRAVERSE_LINK = 1, DOGIF_NO_HDROP = 2, DOGIF_NO_URL = 4, DOGIF_ONLY_IF_ONE = 8 }; enum _DPFLTR_TYPE { DPFLTR_SYSTEM_ID = 0, DPFLTR_SMSS_ID = 1, DPFLTR_SETUP_ID = 2, DPFLTR_NTFS_ID = 3, DPFLTR_FSTUB_ID = 4, DPFLTR_CRASHDUMP_ID = 5, DPFLTR_CDAUDIO_ID = 6, DPFLTR_CDROM_ID = 7, DPFLTR_CLASSPNP_ID = 8, DPFLTR_DISK_ID = 9, DPFLTR_REDBOOK_ID = 10, DPFLTR_STORPROP_ID = 11, DPFLTR_SCSIPORT_ID = 12, DPFLTR_SCSIMINIPORT_ID = 13, DPFLTR_CONFIG_ID = 14, DPFLTR_I8042PRT_ID = 15, DPFLTR_SERMOUSE_ID = 16, DPFLTR_LSERMOUS_ID = 17, DPFLTR_KBDHID_ID = 18, DPFLTR_MOUHID_ID = 19, DPFLTR_KBDCLASS_ID = 20, DPFLTR_MOUCLASS_ID = 21, DPFLTR_TWOTRACK_ID = 22, DPFLTR_WMILIB_ID = 23, DPFLTR_ACPI_ID = 24, DPFLTR_AMLI_ID = 25, DPFLTR_HALIA64_ID = 26, DPFLTR_VIDEO_ID = 27, DPFLTR_SVCHOST_ID = 28, DPFLTR_VIDEOPRT_ID = 29, DPFLTR_TCPIP_ID = 30, DPFLTR_DMSYNTH_ID = 31, DPFLTR_NTOSPNP_ID = 32, DPFLTR_FASTFAT_ID = 33, DPFLTR_SAMSS_ID = 34, DPFLTR_PNPMGR_ID = 35, DPFLTR_NETAPI_ID = 36, DPFLTR_SCSERVER_ID = 37, DPFLTR_SCCLIENT_ID = 38, DPFLTR_SERIAL_ID = 39, DPFLTR_SERENUM_ID = 40, DPFLTR_UHCD_ID = 41, DPFLTR_RPCPROXY_ID = 42, DPFLTR_AUTOCHK_ID = 43, DPFLTR_DCOMSS_ID = 44, DPFLTR_UNIMODEM_ID = 45, DPFLTR_SIS_ID = 46, DPFLTR_FLTMGR_ID = 47, DPFLTR_WMICORE_ID = 48, DPFLTR_BURNENG_ID = 49, DPFLTR_IMAPI_ID = 50, DPFLTR_SXS_ID = 51, DPFLTR_FUSION_ID = 52, DPFLTR_IDLETASK_ID = 53, DPFLTR_SOFTPCI_ID = 54, DPFLTR_TAPE_ID = 55, DPFLTR_MCHGR_ID = 56, DPFLTR_IDEP_ID = 57, DPFLTR_PCIIDE_ID = 58, DPFLTR_FLOPPY_ID = 59, DPFLTR_FDC_ID = 60, DPFLTR_TERMSRV_ID = 61, DPFLTR_W32TIME_ID = 62, DPFLTR_PREFETCHER_ID = 63, DPFLTR_RSFILTER_ID = 64, DPFLTR_FCPORT_ID = 65, DPFLTR_PCI_ID = 66, DPFLTR_DMIO_ID = 67, DPFLTR_DMCONFIG_ID = 68, DPFLTR_DMADMIN_ID = 69, DPFLTR_WSOCKTRANSPORT_ID = 70, DPFLTR_VSS_ID = 71, DPFLTR_PNPMEM_ID = 72, DPFLTR_PROCESSOR_ID = 73, DPFLTR_DMSERVER_ID = 74, DPFLTR_SR_ID = 75, DPFLTR_INFINIBAND_ID = 76, DPFLTR_IHVDRIVER_ID = 77, DPFLTR_IHVVIDEO_ID = 78, DPFLTR_IHVAUDIO_ID = 79, DPFLTR_IHVNETWORK_ID = 80, DPFLTR_IHVSTREAMING_ID = 81, DPFLTR_IHVBUS_ID = 82, DPFLTR_HPS_ID = 83, DPFLTR_RTLTHREADPOOL_ID = 84, DPFLTR_LDR_ID = 85, DPFLTR_TCPIP6_ID = 86, DPFLTR_ISAPNP_ID = 87, DPFLTR_SHPC_ID = 88, DPFLTR_STORPORT_ID = 89, DPFLTR_STORMINIPORT_ID = 90, DPFLTR_PRINTSPOOLER_ID = 91, DPFLTR_VSSDYNDISK_ID = 92, DPFLTR_VERIFIER_ID = 93, DPFLTR_VDS_ID = 94, DPFLTR_VDSBAS_ID = 95, DPFLTR_VDSDYN_ID = 96, DPFLTR_VDSDYNDR_ID = 97, DPFLTR_VDSLDR_ID = 98, DPFLTR_VDSUTIL_ID = 99, DPFLTR_DFRGIFC_ID = 100, DPFLTR_DEFAULT_ID = 101, DPFLTR_MM_ID = 102, DPFLTR_DFSC_ID = 103, DPFLTR_WOW64_ID = 104, DPFLTR_ALPC_ID = 105, DPFLTR_WDI_ID = 106, DPFLTR_PERFLIB_ID = 107, DPFLTR_KTM_ID = 108, DPFLTR_IOSTRESS_ID = 109, DPFLTR_HEAP_ID = 110, DPFLTR_WHEA_ID = 111, DPFLTR_USERGDI_ID = 112, DPFLTR_MMCSS_ID = 113, DPFLTR_TPM_ID = 114, DPFLTR_THREADORDER_ID = 115, DPFLTR_ENVIRON_ID = 116, DPFLTR_EMS_ID = 117, DPFLTR_WDT_ID = 118, DPFLTR_FVEVOL_ID = 119, DPFLTR_NDIS_ID = 120, DPFLTR_NVCTRACE_ID = 121, DPFLTR_LUAFV_ID = 122, DPFLTR_APPCOMPAT_ID = 123, DPFLTR_USBSTOR_ID = 124, DPFLTR_SBP2PORT_ID = 125, DPFLTR_COVERAGE_ID = 126, DPFLTR_CACHEMGR_ID = 127, DPFLTR_MOUNTMGR_ID = 128, DPFLTR_CFR_ID = 129, DPFLTR_TXF_ID = 130, DPFLTR_KSECDD_ID = 131, DPFLTR_FLTREGRESS_ID = 132, DPFLTR_MPIO_ID = 133, DPFLTR_MSDSM_ID = 134, DPFLTR_UDFS_ID = 135, DPFLTR_PSHED_ID = 136, DPFLTR_STORVSP_ID = 137, DPFLTR_LSASS_ID = 138, DPFLTR_SSPICLI_ID = 139, DPFLTR_CNG_ID = 140, DPFLTR_EXFAT_ID = 141, DPFLTR_FILETRACE_ID = 142, DPFLTR_XSAVE_ID = 143, DPFLTR_SE_ID = 144, DPFLTR_DRIVEEXTENDER_ID = 145, DPFLTR_POWER_ID = 146, DPFLTR_CRASHDUMPXHCI_ID = 147, DPFLTR_GPIO_ID = 148, DPFLTR_ENDOFTABLE_ID = 149 }; enum _PS_ATTRIBUTE_NUM { PsAttributeParentProcess = 0, PsAttributeDebugObject = 1, PsAttributeToken = 2, PsAttributeClientId = 3, PsAttributeTebAddress = 4, PsAttributeImageName = 5, PsAttributeImageInfo = 6, PsAttributeMemoryReserve = 7, PsAttributePriorityClass = 8, PsAttributeErrorMode = 9, PsAttributeStdHandleInfo = 10, PsAttributeHandleList = 11, PsAttributeGroupAffinity = 12, PsAttributePreferredNode = 13, PsAttributeIdealProcessor = 14, PsAttributeUmsThread = 15, PsAttributeMitigationOptions = 16, PsAttributeSecurityCapabilities = 17, PsAttributeMax = 18 }; enum _PROCESSINFOCLASS { ProcessBasicInformation = 0, ProcessQuotaLimits = 1, ProcessIoCounters = 2, ProcessVmCounters = 3, ProcessTimes = 4, ProcessBasePriority = 5, ProcessRaisePriority = 6, ProcessDebugPort = 7, ProcessExceptionPort = 8, ProcessAccessToken = 9, ProcessLdtInformation = 10, ProcessLdtSize = 11, ProcessDefaultHardErrorMode = 12, ProcessIoPortHandlers = 13, ProcessPooledUsageAndLimits = 14, ProcessWorkingSetWatch = 15, ProcessUserModeIOPL = 16, ProcessEnableAlignmentFaultFixup = 17, ProcessPriorityClass = 18, ProcessWx86Information = 19, ProcessHandleCount = 20, ProcessAffinityMask = 21, ProcessPriorityBoost = 22, ProcessDeviceMap = 23, ProcessSessionInformation = 24, ProcessForegroundInformation = 25, ProcessWow64Information = 26, ProcessImageFileName = 27, ProcessLUIDDeviceMapsEnabled = 28, ProcessBreakOnTermination = 29, ProcessDebugObjectHandle = 30, ProcessDebugFlags = 31, ProcessHandleTracing = 32, ProcessIoPriority = 33, ProcessExecuteFlags = 34, ProcessTlsInformation = 35, ProcessCookie = 36, ProcessImageInformation = 37, ProcessCycleTime = 38, ProcessPagePriority = 39, ProcessInstrumentationCallback = 40, ProcessThreadStackAllocation = 41, ProcessWorkingSetWatchEx = 42, ProcessImageFileNameWin32 = 43, ProcessImageFileMapping = 44, ProcessAffinityUpdateMode = 45, ProcessMemoryAllocationMode = 46, ProcessGroupInformation = 47, ProcessTokenVirtualizationEnabled = 48, ProcessConsoleHostProcess = 49, ProcessWindowInformation = 50, ProcessHandleInformation = 51, ProcessMitigationPolicy = 52, ProcessDynamicFunctionTableInformation = 53, ProcessHandleCheckingMode = 54, ProcessKeepAliveCount = 55, ProcessRevokeFileHandles = 56, MaxProcessInfoClass = 57 }; enum _SYSTEM_INFORMATION_CLASS { SystemBasicInformation = 0, SystemProcessorInformation = 1, SystemPerformanceInformation = 2, SystemTimeOfDayInformation = 3, SystemPathInformation = 4, SystemProcessInformation = 5, SystemCallCountInformation = 6, SystemDeviceInformation = 7, SystemProcessorPerformanceInformation = 8, SystemFlagsInformation = 9, SystemCallTimeInformation = 10, SystemModuleInformation = 11, SystemLocksInformation = 12, SystemStackTraceInformation = 13, SystemPagedPoolInformation = 14, SystemNonPagedPoolInformation = 15, SystemHandleInformation = 16, SystemObjectInformation = 17, SystemPageFileInformation = 18, SystemVdmInstemulInformation = 19, SystemVdmBopInformation = 20, SystemFileCacheInformation = 21, SystemPoolTagInformation = 22, SystemInterruptInformation = 23, SystemDpcBehaviorInformation = 24, SystemFullMemoryInformation = 25, SystemLoadGdiDriverInformation = 26, SystemUnloadGdiDriverInformation = 27, SystemTimeAdjustmentInformation = 28, SystemSummaryMemoryInformation = 29, SystemMirrorMemoryInformation = 30, SystemPerformanceTraceInformation = 31, SystemObsolete0 = 32, SystemExceptionInformation = 33, SystemCrashDumpStateInformation = 34, SystemKernelDebuggerInformation = 35, SystemContextSwitchInformation = 36, SystemRegistryQuotaInformation = 37, SystemExtendServiceTableInformation = 38, SystemPrioritySeperation = 39, SystemVerifierAddDriverInformation = 40, SystemVerifierRemoveDriverInformation = 41, SystemProcessorIdleInformation = 42, SystemLegacyDriverInformation = 43, SystemCurrentTimeZoneInformation = 44, SystemLookasideInformation = 45, SystemTimeSlipNotification = 46, SystemSessionCreate = 47, SystemSessionDetach = 48, SystemSessionInformation = 49, SystemRangeStartInformation = 50, SystemVerifierInformation = 51, SystemVerifierThunkExtend = 52, SystemSessionProcessInformation = 53, SystemLoadGdiDriverInSystemSpace = 54, SystemNumaProcessorMap = 55, SystemPrefetcherInformation = 56, SystemExtendedProcessInformation = 57, SystemRecommendedSharedDataAlignment = 58, SystemComPlusPackage = 59, SystemNumaAvailableMemory = 60, SystemProcessorPowerInformation = 61, SystemEmulationBasicInformation = 62, SystemEmulationProcessorInformation = 63, SystemExtendedHandleInformation = 64, SystemLostDelayedWriteInformation = 65, SystemBigPoolInformation = 66, SystemSessionPoolTagInformation = 67, SystemSessionMappedViewInformation = 68, SystemHotpatchInformation = 69, SystemObjectSecurityMode = 70, SystemWatchdogTimerHandler = 71, SystemWatchdogTimerInformation = 72, SystemLogicalProcessorInformation = 73, SystemWow64SharedInformationObsolete = 74, SystemRegisterFirmwareTableInformationHandler = 75, SystemFirmwareTableInformation = 76, SystemModuleInformationEx = 77, SystemVerifierTriageInformation = 78, SystemSuperfetchInformation = 79, SystemMemoryListInformation = 80, SystemFileCacheInformationEx = 81, SystemThreadPriorityClientIdInformation = 82, SystemProcessorIdleCycleTimeInformation = 83, SystemVerifierCancellationInformation = 84, SystemProcessorPowerInformationEx = 85, SystemRefTraceInformation = 86, SystemSpecialPoolInformation = 87, SystemProcessIdInformation = 88, SystemErrorPortInformation = 89, SystemBootEnvironmentInformation = 90, SystemHypervisorInformation = 91, SystemVerifierInformationEx = 92, SystemTimeZoneInformation = 93, SystemImageFileExecutionOptionsInformation = 94, SystemCoverageInformation = 95, SystemPrefetchPatchInformation = 96, SystemVerifierFaultsInformation = 97, SystemSystemPartitionInformation = 98, SystemSystemDiskInformation = 99, SystemProcessorPerformanceDistribution = 100, SystemNumaProximityNodeInformation = 101, SystemDynamicTimeZoneInformation = 102, SystemCodeIntegrityInformation = 103, SystemProcessorMicrocodeUpdateInformation = 104, SystemProcessorBrandString = 105, SystemVirtualAddressInformation = 106, SystemLogicalProcessorAndGroupInformation = 107, SystemProcessorCycleTimeInformation = 108, SystemStoreInformation = 109, SystemRegistryAppendString = 110, SystemAitSamplingValue = 111, SystemVhdBootInformation = 112, SystemCpuQuotaInformation = 113, SystemNativeBasicInformation = 114, SystemErrorPortTimeouts = 115, SystemLowPriorityIoInformation = 116, SystemBootEntropyInformation = 117, SystemVerifierCountersInformation = 118, SystemPagedPoolInformationEx = 119, SystemSystemPtesInformationEx = 120, SystemNodeDistanceInformation = 121, SystemAcpiAuditInformation = 122, SystemBasicPerformanceInformation = 123, SystemQueryPerformanceCounterInformation = 124, SystemSessionBigPoolInformation = 125, SystemBootGraphicsInformation = 126, SystemScrubPhysicalMemoryInformation = 127, SystemBadPageInformation = 128, SystemProcessorProfileControlArea = 129, SystemCombinePhysicalMemoryInformation = 130, SystemEntropyInterruptTimingCallback = 131, SystemConsoleInformation = 132, SystemPlatformBinaryInformation = 133, SystemThrottleNotificationInformation = 134, SystemHypervisorProcessorCountInformation = 135, SystemDeviceDataInformation = 136, SystemDeviceDataEnumerationInformation = 137, SystemMemoryTopologyInformation = 138, SystemMemoryChannelInformation = 139, SystemBootLogoInformation = 140, MaxSystemInfoClass = 141 }; enum ShellSpecialFolderConstants { ssfDESKTOP = 0, ssfPROGRAMS = 2, ssfCONTROLS = 3, ssfPRINTERS = 4, ssfPERSONAL = 5, ssfFAVORITES = 6, ssfSTARTUP = 7, ssfRECENT = 8, ssfSENDTO = 9, ssfBITBUCKET = 10, ssfSTARTMENU = 11, ssfDESKTOPDIRECTORY = 16, ssfDRIVES = 17, ssfNETWORK = 18, ssfNETHOOD = 19, ssfFONTS = 20, ssfTEMPLATES = 21, ssfCOMMONSTARTMENU = 22, ssfCOMMONPROGRAMS = 23, ssfCOMMONSTARTUP = 24, ssfCOMMONDESKTOPDIR = 25, ssfAPPDATA = 26, ssfPRINTHOOD = 27, ssfLOCALAPPDATA = 28, ssfALTSTARTUP = 29, ssfCOMMONALTSTARTUP = 30, ssfCOMMONFAVORITES = 31, ssfINTERNETCACHE = 32, ssfCOOKIES = 33, ssfHISTORY = 34, ssfCOMMONAPPDATA = 35, ssfWINDOWS = 36, ssfSYSTEM = 37, ssfPROGRAMFILES = 38, ssfMYPICTURES = 39, ssfPROFILE = 40, ssfSYSTEMx86 = 41, ssfPROGRAMFILESx86 = 48 }; enum BrowserNavConstants { navOpenInNewWindow = 1, navNoHistory = 2, navNoReadFromCache = 4, navNoWriteToCache = 8, navAllowAutosearch = 16, navBrowserBar = 32, navHyperlink = 64, navEnforceRestricted = 128, navNewWindowsManaged = 256, navUntrustedForDownload = 512, navTrustedForActiveX = 1024, navOpenInNewTab = 2048, navOpenInBackgroundTab = 4096, navKeepWordWheelText = 8192, navVirtualTab = 16384, = 32770 }; enum OLECMDID { OLECMDID_OPEN = 1, OLECMDID_NEW = 2, OLECMDID_SAVE = 3, OLECMDID_SAVEAS = 4, OLECMDID_SAVECOPYAS = 5, OLECMDID_PRINT = 6, OLECMDID_PRINTPREVIEW = 7, OLECMDID_PAGESETUP = 8, OLECMDID_SPELL = 9, OLECMDID_PROPERTIES = 10, OLECMDID_CUT = 11, OLECMDID_COPY = 12, OLECMDID_PASTE = 13, OLECMDID_PASTESPECIAL = 14, OLECMDID_UNDO = 15, OLECMDID_REDO = 16, OLECMDID_SELECTALL = 17, OLECMDID_CLEARSELECTION = 18, OLECMDID_ZOOM = 19, OLECMDID_GETZOOMRANGE = 20, OLECMDID_UPDATECOMMANDS = 21, OLECMDID_REFRESH = 22, OLECMDID_STOP = 23, OLECMDID_HIDETOOLBARS = 24, OLECMDID_SETPROGRESSMAX = 25, OLECMDID_SETPROGRESSPOS = 26, OLECMDID_SETPROGRESSTEXT = 27, OLECMDID_SETTITLE = 28, OLECMDID_SETDOWNLOADSTATE = 29, OLECMDID_STOPDOWNLOAD = 30, OLECMDID_ONTOOLBARACTIVATED = 31, OLECMDID_FIND = 32, OLECMDID_DELETE = 33, OLECMDID_HTTPEQUIV = 34, OLECMDID_HTTPEQUIV_DONE = 35, OLECMDID_ENABLE_INTERACTION = 36, OLECMDID_ONUNLOAD = 37, OLECMDID_PROPERTYBAG2 = 38, OLECMDID_PREREFRESH = 39, OLECMDID_SHOWSCRIPTERROR = 40, OLECMDID_SHOWMESSAGE = 41, OLECMDID_SHOWFIND = 42, OLECMDID_SHOWPAGESETUP = 43, OLECMDID_SHOWPRINT = 44, OLECMDID_CLOSE = 45, OLECMDID_ALLOWUILESSSAVEAS = 46, OLECMDID_DONTDOWNLOADCSS = 47, OLECMDID_UPDATEPAGESTATUS = 48, OLECMDID_PRINT2 = 49, OLECMDID_PRINTPREVIEW2 = 50, OLECMDID_SETPRINTTEMPLATE = 51, OLECMDID_GETPRINTTEMPLATE = 52, OLECMDID_PAGEACTIONBLOCKED = 55, OLECMDID_PAGEACTIONUIQUERY = 56, OLECMDID_FOCUSVIEWCONTROLS = 57, OLECMDID_FOCUSVIEWCONTROLSQUERY = 58, OLECMDID_SHOWPAGEACTIONMENU = 59, OLECMDID_ADDTRAVELENTRY = 60, OLECMDID_UPDATETRAVELENTRY = 61, OLECMDID_UPDATEBACKFORWARDSTATE = 62, OLECMDID_OPTICAL_ZOOM = 63, OLECMDID_OPTICAL_GETZOOMRANGE = 64, OLECMDID_WINDOWSTATECHANGED = 65, OLECMDID_ACTIVEXINSTALLSCOPE = 66, OLECMDID_UPDATETRAVELENTRY_DATARECOVERY = 67, OLECMDID_SHOWTASKDLG = 68, OLECMDID_POPSTATEEVENT = 69, OLECMDID_VIEWPORT_MODE = 70, OLECMDID_LAYOUT_VIEWPORT_WIDTH = 71, OLECMDID_VISUAL_VIEWPORT_EXCLUDE_BOTTOM = 72 }; enum _PLUGPLAY_CONTROL_CLASS { PlugPlayControlEnumerateDevice = 0, PlugPlayControlRegisterNewDevice = 1, PlugPlayControlDeregisterDevice = 2, PlugPlayControlInitializeDevice = 3, PlugPlayControlStartDevice = 4, PlugPlayControlUnlockDevice = 5, PlugPlayControlQueryAndRemoveDevice = 6, PlugPlayControlUserResponse = 7, PlugPlayControlGenerateLegacyDevice = 8, PlugPlayControlGetInterfaceDeviceList = 9, PlugPlayControlProperty = 10, PlugPlayControlDeviceClassAssociation = 11, PlugPlayControlGetRelatedDevice = 12, PlugPlayControlGetInterfaceDeviceAlias = 13, PlugPlayControlDeviceStatus = 14, PlugPlayControlGetDeviceDepth = 15, PlugPlayControlQueryDeviceRelations = 16, PlugPlayControlTargetDeviceRelation = 17, PlugPlayControlQueryConflictList = 18, PlugPlayControlRetrieveDock = 19, PlugPlayControlResetDevice = 20, PlugPlayControlHaltDevice = 21, PlugPlayControlGetBlockedDriverList = 22, MaxPlugPlayControl = 23 }; enum _KF_REDIRECTION_CAPABILITIES { KF_REDIRECTION_CAPABILITIES_ALLOW_ALL = 255, KF_REDIRECTION_CAPABILITIES_REDIRECTABLE = 1, /* KF_REDIRECTION_CAPABILITIES_DENY_ALL = Unavail */ }; enum _SYSTEM_VA_TYPE { SystemVaTypeAll = 0, SystemVaTypeNonPagedPool = 1, SystemVaTypePagedPool = 2, SystemVaTypeSystemCache = 3, SystemVaTypeSystemPtes = 4, SystemVaTypeSessionSpace = 5, SystemVaTypeMax = 6 }; enum _INTERFACE_TYPE { InterfaceTypeUndefined = -1, Internal = 0, Isa = 1, Eisa = 2, MicroChannel = 3, TurboChannel = 4, PCIBus = 5, VMEBus = 6, NuBus = 7, PCMCIABus = 8, CBus = 9, MPIBus = 10, MPSABus = 11, ProcessorInternal = 12, InternalPowerBus = 13, PNPISABus = 14, PNPBus = 15, Vmcs = 16, ACPIBus = 17, MaximumInterfaceType = 18 }; enum _KPROFILE_SOURCE { ProfileTime = 0, ProfileAlignmentFixup = 1, ProfileTotalIssues = 2, ProfilePipelineDry = 3, ProfileLoadInstructions = 4, ProfilePipelineFrozen = 5, ProfileBranchInstructions = 6, ProfileTotalNonissues = 7, ProfileDcacheMisses = 8, ProfileIcacheMisses = 9, ProfileCacheMisses = 10, ProfileBranchMispredictions = 11, ProfileStoreInstructions = 12, ProfileFpInstructions = 13, ProfileIntegerInstructions = 14, Profile2Issue = 15, Profile3Issue = 16, Profile4Issue = 17, ProfileSpecialInstructions = 18, ProfileTotalCycles = 19, ProfileIcacheIssues = 20, ProfileDcacheAccesses = 21, ProfileMemoryBarrierCycles = 22, ProfileLoadLinkedIssues = 23, ProfileMaximum = 24 }; enum EXPLORER_BROWSER_OPTIONS { EBO_NONE = 0, EBO_NAVIGATEONCE = 1, EBO_SHOWFRAMES = 2, EBO_ALWAYSNAVIGATE = 4, EBO_NOTRAVELLOG = 8, EBO_NOWRAPPERWINDOW = 16, EBO_HTMLSHAREPOINTVIEW = 32, EBO_NOBORDER = 64 }; enum _BUS_DATA_TYPE { ConfigurationSpaceUndefined = -1, Cmos = 0, EisaConfiguration = 1, Pos = 2, CbusConfiguration = 3, PCIConfiguration = 4, VMEConfiguration = 5, NuBusConfiguration = 6, PCMCIAConfiguration = 7, MPIConfiguration = 8, MPSAConfiguration = 9, PNPISAConfiguration = 10, SgiInternalConfiguration = 11, MaximumBusDataType = 12 }; enum FD_FLAGS { FD_CLSID = 1, FD_SIZEPOINT = 2, FD_ATTRIBUTES = 4, FD_CREATETIME = 8, FD_ACCESSTIME = 16, FD_WRITESTIME = 32, FD_FILESIZE = 64, FD_PROGRESSUI = 16384, = 32770 }; enum _RTL_PATH_TYPE { RtlPathTypeUnknown = 0, RtlPathTypeUncAbsolute = 1, RtlPathTypeDriveAbsolute = 2, RtlPathTypeDriveRelative = 3, RtlPathTypeRooted = 4, RtlPathTypeRelative = 5, RtlPathTypeLocalDevice = 6, RtlPathTypeRootLocalDevice = 7 }; enum _WORKER_FACTORY_CALLBACK_CLASS { WorkerFactoryCallbackNormal = 0, WorkerFactoryCallbackLongRunning = 1, WorkerFactoryCallbackIndependent = 2, WorkerFactoryCallbackDetectedUnrecoverableError = 3 }; enum _TRACE_QUERY_INFO_CLASS { TraceGuidQueryList = 0, TraceGuidQueryInfo = 1, TraceGuidQueryProcess = 2, TraceStackTracingInfo = 3, TraceSystemTraceEnableFlagsInfo = 4, TraceSampledProfileIntervalInfo = 5, TraceProfileSourceConfigInfo = 6, TraceProfileSourceListInfo = 7, TracePmcEventListInfo = 8, TracePmcCounterListInfo = 9, MaxTraceSetInfoClass = 10 }; enum _MUTANT_INFORMATION_CLASS { MutantBasicInformation = 0, MutantOwnerInformation = 1 }; enum DISPLAY_ORIENTATIONS { DO_NONE = 0, DO_LANDSCAPE = 1, DO_PORTRAIT = 2, DO_LANDSCAPE_FLIPPED = 4, DO_PORTRAIT_FLIPPED = 8 }; enum STGOP { STGOP_MOVE = 1, STGOP_COPY = 2, STGOP_SYNC = 3, STGOP_REMOVE = 5, STGOP_RENAME = 6, STGOP_APPLYPROPERTIES = 8, STGOP_NEW = 10 }; enum _SVGIO { SVGIO_BACKGROUND = 0, SVGIO_SELECTION = 1, SVGIO_ALLVIEW = 2, SVGIO_CHECKED = 3, SVGIO_TYPE_MASK = 15, = 32771 }; enum DEFAULT_FOLDER_MENU_RESTRICTIONS { DFMR_DEFAULT = 0, DFMR_NO_STATIC_VERBS = 8, DFMR_STATIC_VERBS_ONLY = 16, DFMR_NO_RESOURCE_VERBS = 32, DFMR_OPTIN_HANDLERS_ONLY = 64, DFMR_RESOURCE_AND_FOLDER_VERBS_ONLY = 128, DFMR_USE_SPECIFIED_HANDLERS = 256, DFMR_USE_SPECIFIED_VERBS = 512, DFMR_NO_ASYNC_VERBS = 1024 }; enum _TRANSFER_SOURCE_FLAGS { TSF_NORMAL = 0, TSF_FAIL_EXIST = 0, TSF_RENAME_EXIST = 1, TSF_OVERWRITE_EXIST = 2, TSF_ALLOW_DECRYPTION = 4, TSF_NO_SECURITY = 8, TSF_COPY_CREATION_TIME = 16, TSF_COPY_WRITE_TIME = 32, TSF_USE_FULL_ACCESS = 64, TSF_DELETE_RECYCLE_IF_POSSIBLE = 128, TSF_COPY_HARD_LINK = 256, TSF_COPY_LOCALIZED_NAME = 512, TSF_MOVE_AS_COPY_DELETE = 1024, TSF_SUSPEND_SHELLEVENTS = 2048 }; enum _JOURNAL_CHANGE_INFORMATION_CLASS { JournalCreateKey = 0, JournalDeleteKey = 1, JournalRenameKey = 2, JournalSetValue = 3, JournalDeleteValue = 4, JournalSetKeySecurity = 5, JournalSetKeyUserFlags = 6, JournalSetLastWriteTime = 7, JournalBeginTransaction = 8, JournalCommitTransaction = 9, JournalAbortTransaction = 10, MaxJournalChangeAction = 11 }; enum _TP_TRACE_TYPE { TpTraceThreadPriority = 1, TpTraceThreadAffinity = 2, MaxTpTraceType = 3 }; enum OLECMDID_PAGEACTIONFLAG { OLECMDIDF_PAGEACTION_FILEDOWNLOAD = 1, OLECMDIDF_PAGEACTION_ACTIVEXINSTALL = 2, OLECMDIDF_PAGEACTION_ACTIVEXTRUSTFAIL = 4, OLECMDIDF_PAGEACTION_ACTIVEXUSERDISABLE = 8, OLECMDIDF_PAGEACTION_ACTIVEXDISALLOW = 16, OLECMDIDF_PAGEACTION_ACTIVEXUNSAFE = 32, OLECMDIDF_PAGEACTION_POPUPWINDOW = 64, OLECMDIDF_PAGEACTION_LOCALMACHINE = 128, OLECMDIDF_PAGEACTION_MIMETEXTPLAIN = 256, OLECMDIDF_PAGEACTION_SCRIPTNAVIGATE = 512, OLECMDIDF_PAGEACTION_SCRIPTNAVIGATE_ACTIVEXINSTALL = 512, OLECMDIDF_PAGEACTION_PROTLOCKDOWNLOCALMACHINE = 1024, OLECMDIDF_PAGEACTION_PROTLOCKDOWNTRUSTED = 2048, OLECMDIDF_PAGEACTION_PROTLOCKDOWNINTRANET = 4096, OLECMDIDF_PAGEACTION_PROTLOCKDOWNINTERNET = 8192, OLECMDIDF_PAGEACTION_PROTLOCKDOWNRESTRICTED = 16384, = 32770 }; enum POWER_STATE_HANDLER_TYPE { PowerStateSleeping1 = 0, PowerStateSleeping2 = 1, PowerStateSleeping3 = 2, PowerStateSleeping4 = 3, PowerStateShutdownOff = 4, PowerStateShutdownReset = 5, PowerStateSleeping4Firmware = 6, PowerStateMaximum = 7 }; enum _TASKDIALOG_COMMON_BUTTON_FLAGS { TDCBF_OK_BUTTON = 1, TDCBF_YES_BUTTON = 2, TDCBF_NO_BUTTON = 4, TDCBF_CANCEL_BUTTON = 8, TDCBF_RETRY_BUTTON = 16, TDCBF_CLOSE_BUTTON = 32 }; enum _DMA_WIDTH { Width8Bits = 0, Width16Bits = 1, Width32Bits = 2, Width64Bits = 3, WidthNoWrap = 4, MaximumDmaWidth = 5 }; enum CDCONTROLSTATEF { CDCS_INACTIVE = 0, CDCS_ENABLED = 1, CDCS_VISIBLE = 2, CDCS_ENABLEDVISIBLE = 3 }; enum _TASKDIALOG_FLAGS { TDF_ENABLE_HYPERLINKS = 1, TDF_USE_HICON_MAIN = 2, TDF_USE_HICON_FOOTER = 4, TDF_ALLOW_DIALOG_CANCELLATION = 8, TDF_USE_COMMAND_LINKS = 16, TDF_USE_COMMAND_LINKS_NO_ICON = 32, TDF_EXPAND_FOOTER_AREA = 64, TDF_EXPANDED_BY_DEFAULT = 128, TDF_VERIFICATION_FLAG_CHECKED = 256, TDF_SHOW_PROGRESS_BAR = 512, TDF_SHOW_MARQUEE_PROGRESS_BAR = 1024, TDF_CALLBACK_TIMER = 2048, TDF_POSITION_RELATIVE_TO_WINDOW = 4096, TDF_RTL_LAYOUT = 8192, TDF_NO_DEFAULT_RADIO_BUTTON = 16384, = 32770 }; enum TrustLevel { BaseTrust = 0, PartialTrust = 1, FullTrust = 2 }; enum SHELL_LINK_DATA_FLAGS { SLDF_DEFAULT = 0, SLDF_HAS_ID_LIST = 1, SLDF_HAS_LINK_INFO = 2, SLDF_HAS_NAME = 4, SLDF_HAS_RELPATH = 8, SLDF_HAS_WORKINGDIR = 16, SLDF_HAS_ARGS = 32, SLDF_HAS_ICONLOCATION = 64, SLDF_UNICODE = 128, SLDF_FORCE_NO_LINKINFO = 256, SLDF_HAS_EXP_SZ = 512, SLDF_RUN_IN_SEPARATE = 1024, SLDF_HAS_DARWINID = 4096, SLDF_RUNAS_USER = 8192, SLDF_HAS_EXP_ICON_SZ = 16384, = 32770 }; enum _TASKDIALOG_MESSAGES { TDM_NAVIGATE_PAGE = 1125, TDM_CLICK_BUTTON = 1126, TDM_SET_MARQUEE_PROGRESS_BAR = 1127, TDM_SET_PROGRESS_BAR_STATE = 1128, TDM_SET_PROGRESS_BAR_RANGE = 1129, TDM_SET_PROGRESS_BAR_POS = 1130, TDM_SET_PROGRESS_BAR_MARQUEE = 1131, TDM_SET_ELEMENT_TEXT = 1132, TDM_CLICK_RADIO_BUTTON = 1134, TDM_ENABLE_BUTTON = 1135, TDM_ENABLE_RADIO_BUTTON = 1136, TDM_CLICK_VERIFICATION = 1137, TDM_UPDATE_ELEMENT_TEXT = 1138, TDM_SET_BUTTON_ELEVATION_REQUIRED_STATE = 1139, TDM_UPDATE_ICON = 1140 }; enum _FP_IEEE_OPERATION_CODE { FpCodeUnspecified = 0, FpCodeAdd = 1, FpCodeSubtract = 2, FpCodeMultiply = 3, FpCodeDivide = 4, FpCodeSquareRoot = 5, FpCodeRemainder = 6, FpCodeCompare = 7, FpCodeConvert = 8, FpCodeRound = 9, FpCodeTruncate = 10, FpCodeFloor = 11, FpCodeCeil = 12, FpCodeAcos = 13, FpCodeAsin = 14, FpCodeAtan = 15, FpCodeAtan2 = 16, FpCodeCabs = 17, FpCodeCos = 18, FpCodeCosh = 19, FpCodeExp = 20, FpCodeFabs = 21, FpCodeFmod = 22, FpCodeFrexp = 23, FpCodeHypot = 24, FpCodeLdexp = 25, FpCodeLog = 26, FpCodeLog10 = 27, FpCodeModf = 28, FpCodePow = 29, FpCodeSin = 30, FpCodeSinh = 31, FpCodeTan = 32, FpCodeTanh = 33, FpCodeY0 = 34, FpCodeY1 = 35, FpCodeYn = 36 }; enum NSTCSTYLE2 { NSTCS2_DEFAULT = 0, NSTCS2_INTERRUPTNOTIFICATIONS = 1, NSTCS2_SHOWNULLSPACEMENU = 2, NSTCS2_DISPLAYPADDING = 4, NSTCS2_DISPLAYPINNEDONLY = 8, NTSCS2_NOSINGLETONAUTOEXPAND = 16, NTSCS2_NEVERINSERTNONENUMERATED = 32 }; enum OLECMDID_REFRESHFLAG { OLECMDIDF_REFRESH_NORMAL = 0, OLECMDIDF_REFRESH_IFEXPIRED = 1, OLECMDIDF_REFRESH_CONTINUE = 2, OLECMDIDF_REFRESH_COMPLETELY = 3, OLECMDIDF_REFRESH_NO_CACHE = 4, OLECMDIDF_REFRESH_RELOAD = 5, OLECMDIDF_REFRESH_LEVELMASK = 255, OLECMDIDF_REFRESH_CLEARUSERINPUT = 4096, OLECMDIDF_REFRESH_PROMPTIFOFFLINE = 8192, OLECMDIDF_REFRESH_THROUGHSCRIPT = 16384, = 32770 }; enum _RTL_RXACT_OPERATION { RtlRXactOperationDelete = 1, RtlRXactOperationSetValue = 2, RtlRXactOperationDelAttribute = 3, RtlRXactOperationSetAttribute = 4 }; enum _IRQ_PRIORITY { IrqPriorityUndefined = 0, IrqPriorityLow = 1, IrqPriorityNormal = 2, IrqPriorityHigh = 3 }; enum PO_FIXED_WAKE_SOURCE_TYPE { FixedWakeSourcePowerButton = 0, FixedWakeSourceSleepButton = 1, FixedWakeSourceRtc = 2, FixedWakeSourceDozeToHibernate = 3 }; enum _THREADINFOCLASS { ThreadBasicInformation = 0, ThreadTimes = 1, ThreadPriority = 2, ThreadBasePriority = 3, ThreadAffinityMask = 4, ThreadImpersonationToken = 5, ThreadDescriptorTableEntry = 6, ThreadEnableAlignmentFaultFixup = 7, ThreadEventPair_Reusable = 8, ThreadQuerySetWin32StartAddress = 9, ThreadZeroTlsCell = 10, ThreadPerformanceCount = 11, ThreadAmILastThread = 12, ThreadIdealProcessor = 13, ThreadPriorityBoost = 14, ThreadSetTlsArrayAddress = 15, ThreadIsIoPending = 16, ThreadHideFromDebugger = 17, ThreadBreakOnTermination = 18, ThreadSwitchLegacyState = 19, ThreadIsTerminated = 20, ThreadLastSystemCall = 21, ThreadIoPriority = 22, ThreadCycleTime = 23, ThreadPagePriority = 24, ThreadActualBasePriority = 25, ThreadTebInformation = 26, ThreadCSwitchMon = 27, ThreadCSwitchPmu = 28, ThreadWow64Context = 29, ThreadGroupInformation = 30, ThreadUmsInformation = 31, ThreadCounterProfiling = 32, ThreadIdealProcessorEx = 33, ThreadCpuAccountingInformation = 34, ThreadSwitchStackCheck = 35, MaxThreadInfoClass = 36 }; enum _SE_AUDIT_OPERATION { AuditPrivilegeObject = 0, AuditPrivilegeService = 1, AuditAccessCheck = 2, AuditOpenObject = 3, AuditOpenObjectWithTransaction = 4, AuditCloseObject = 5, AuditDeleteObject = 6, AuditOpenObjectForDelete = 7, AuditOpenObjectForDeleteWithTransaction = 8, AuditCloseNonObject = 9, AuditOpenNonObject = 10, AuditObjectReference = 11, AuditHandleCreation = 12 }; enum MARKUPMESSAGE { MARKUPMESSAGE_KEYEXECUTE = 0, MARKUPMESSAGE_CLICKEXECUTE = 1, MARKUPMESSAGE_WANTFOCUS = 2 }; enum _SUITE_TYPE { SmallBusiness = 0, Enterprise = 1, BackOffice = 2, CommunicationServer = 3, TerminalServer = 4, SmallBusinessRestricted = 5, EmbeddedNT = 6, DataCenter = 7, SingleUserTS = 8, Personal = 9, Blade = 10, EmbeddedRestricted = 11, SecurityAppliance = 12, StorageServer = 13, ComputeServer = 14, WHServer = 15, MaxSuiteType = 16 }; enum _XHR_COOKIE_FLAG { XHR_COOKIE_IS_SECURE = 1, XHR_COOKIE_IS_SESSION = 2, XHR_COOKIE_THIRD_PARTY = 16, XHR_COOKIE_PROMPT_REQUIRED = 32, XHR_COOKIE_EVALUATE_P3P = 64, XHR_COOKIE_APPLY_P3P = 128, XHR_COOKIE_P3P_ENABLED = 256, XHR_COOKIE_IS_RESTRICTED = 512, XHR_COOKIE_IE6 = 1024, XHR_COOKIE_IS_LEGACY = 2048, XHR_COOKIE_NON_SCRIPT = 4096, XHR_COOKIE_HTTPONLY = 8192 }; enum SecureLockIconConstants { secureLockIconUnsecure = 0, secureLockIconMixed = 1, secureLockIconSecureUnknownBits = 2, secureLockIconSecure40Bit = 3, secureLockIconSecure56Bit = 4, secureLockIconSecureFortezza = 5, secureLockIconSecure128Bit = 6 }; enum _EXPLORERPANESTATE { EPS_DONTCARE = 0, EPS_DEFAULT_ON = 1, EPS_DEFAULT_OFF = 2, ˙˙EPS_STATEMASK = 32770, /* EPS_INITIALSTATE = Unavail */ }; enum APPDOCLISTTYPE { ADLT_RECENT = 0, ADLT_FREQUENT = 1 }; enum PROPDESC_AGGREGATION_TYPE { PDAT_DEFAULT = 0, PDAT_FIRST = 1, PDAT_SUM = 2, PDAT_AVERAGE = 3, PDAT_DATERANGE = 4, PDAT_UNION = 5, PDAT_MAX = 6, PDAT_MIN = 7 }; enum PROPDESC_FORMAT_FLAGS { PDFF_DEFAULT = 0, PDFF_PREFIXNAME = 1, PDFF_FILENAME = 2, PDFF_ALWAYSKB = 4, PDFF_RESERVED_RIGHTTOLEFT = 8, PDFF_SHORTTIME = 16, PDFF_LONGTIME = 32, PDFF_HIDETIME = 64, PDFF_SHORTDATE = 128, PDFF_LONGDATE = 256, PDFF_HIDEDATE = 512, PDFF_RELATIVEDATE = 1024, PDFF_USEEDITINVITATION = 2048, PDFF_READONLY = 4096, PDFF_NOAUTOREADINGORDER = 8192 }; enum PROPDESC_TYPE_FLAGS { PDTF_DEFAULT = 0, PDTF_MULTIPLEVALUES = 1, PDTF_ISINNATE = 2, PDTF_ISGROUP = 4, PDTF_CANGROUPBY = 8, PDTF_CANSTACKBY = 16, PDTF_ISTREEPROPERTY = 32, PDTF_INCLUDEINFULLTEXTQUERY = 64, PDTF_ISVIEWABLE = 128, PDTF_ISQUERYABLE = 256, PDTF_CANBEPURGED = 512, PDTF_SEARCHRAWVALUE = 1024, = 32771 }; enum _BOOT_ENTROPY_SOURCE_ID { BootEntropySourceNone = 0, BootEntropySourceSeedfile = 1, BootEntropySourceExternal = 2, BootEntropySourceTpm = 3, BootEntropySourceRdrand = 4, BootEntropySourceTime = 5, BootEntropySourceAcpiOem0 = 6, BootEntropySourceUefi = 7, BootMaxEntropySources = 7 }; enum PROPDESC_VIEW_FLAGS { PDVF_DEFAULT = 0, PDVF_CENTERALIGN = 1, PDVF_RIGHTALIGN = 2, PDVF_BEGINNEWGROUP = 4, PDVF_FILLAREA = 8, PDVF_SORTDESCENDING = 16, PDVF_SHOWONLYIFPRESENT = 32, PDVF_SHOWBYDEFAULT = 64, PDVF_SHOWINPRIMARYLIST = 128, PDVF_SHOWINSECONDARYLIST = 256, PDVF_HIDELABEL = 512, PDVF_HIDDEN = 2048, PDVF_CANWRAP = 4096, PDVF_MASK_ALL = 7167 }; enum _WNF_USER_DELIVERY_STATE { WNF_USER_DELIVERY_STATE_READY = 0, WNF_USER_DELIVERY_STATE_CANCELLED = 1, WNF_USER_DELIVERY_STATE_IN_PROGRESS = 2, WNF_USER_DELIVERY_STATE_SUCCEEDED = 3, WNF_USER_DELIVERY_STATE_FAILED = 4, WNF_USER_DELIVERY_STATE_REQUIRES_RETRY = 5, WNF_USER_DELIVERY_STATE_COMPLETE = 6 }; enum _TIMER_INFORMATION_CLASS { TimerBasicInformation = 0 }; enum NAMESPACEWALKFLAG { NSWF_DEFAULT = 0, NSWF_NONE_IMPLIES_ALL = 1, NSWF_ONE_IMPLIES_ALL = 2, NSWF_DONT_TRAVERSE_LINKS = 4, NSWF_DONT_ACCUMULATE_RESULT = 8, NSWF_TRAVERSE_STREAM_JUNCTIONS = 16, NSWF_FILESYSTEM_ONLY = 32, NSWF_SHOW_PROGRESS = 64, NSWF_FLAG_VIEWORDER = 128, NSWF_IGNORE_AUTOPLAY_HIDA = 256, NSWF_ASYNC = 512, NSWF_DONT_RESOLVE_LINKS = 1024, NSWF_ACCUMULATE_FOLDERS = 2048, NSWF_DONT_SORT = 4096, NSWF_USE_TRANSFER_MEDIUM = 8192, NSWF_DONT_TRAVERSE_STREAM_JUNCTIONS = 16384 }; enum FILE_USAGE_TYPE { FUT_PLAYING = 0, FUT_EDITING = 1, FUT_GENERIC = 2 }; enum SIATTRIBFLAGS { SIATTRIBFLAGS_AND = 1, SIATTRIBFLAGS_OR = 2, SIATTRIBFLAGS_APPCOMPAT = 3, SIATTRIBFLAGS_MASK = 3, SIATTRIBFLAGS_ALLITEMS = 16384 }; enum _PNP_VETO_TYPE { PNP_VetoTypeUnknown = 0, PNP_VetoLegacyDevice = 1, PNP_VetoPendingClose = 2, PNP_VetoWindowsApp = 3, PNP_VetoWindowsService = 4, PNP_VetoOutstandingOpen = 5, PNP_VetoDevice = 6, PNP_VetoDriver = 7, PNP_VetoIllegalDeviceRequest = 8, PNP_VetoInsufficientPower = 9, PNP_VetoNonDisableable = 10, PNP_VetoLegacyDriver = 11, PNP_VetoInsufficientRights = 12 }; enum _OBJECT_INFORMATION_CLASS { ObjectBasicInformation = 0, ObjectNameInformation = 1, ObjectTypeInformation = 2, ObjectTypesInformation = 3, ObjectHandleFlagInformation = 4, ObjectSessionInformation = 5, MaxObjectInfoClass = 6 }; enum _IO_SESSION_STATE { IoSessionStateCreated = 1, IoSessionStateInitialized = 2, IoSessionStateConnected = 3, IoSessionStateDisconnected = 4, IoSessionStateDisconnectedLoggedOn = 5, IoSessionStateLoggedOn = 6, IoSessionStateLoggedOff = 7, IoSessionStateTerminated = 8, IoSessionStateMax = 9 }; enum OLECMDF { OLECMDF_SUPPORTED = 1, OLECMDF_ENABLED = 2, OLECMDF_LATCHED = 4, OLECMDF_NINCHED = 8, OLECMDF_INVISIBLE = 16, OLECMDF_DEFHIDEONCTXTMENU = 32 }; enum ATTACHMENT_PROMPT { ATTACHMENT_PROMPT_NONE = 0, ATTACHMENT_PROMPT_SAVE = 1, ATTACHMENT_PROMPT_EXEC = 2, ATTACHMENT_PROMPT_EXEC_OR_SAVE = 3 }; enum _NSTCSTYLE { NSTCS_HASEXPANDOS = 1, NSTCS_HASLINES = 2, NSTCS_SINGLECLICKEXPAND = 4, NSTCS_FULLROWSELECT = 8, NSTCS_SPRINGEXPAND = 16, NSTCS_HORIZONTALSCROLL = 32, NSTCS_ROOTHASEXPANDO = 64, NSTCS_SHOWSELECTIONALWAYS = 128, NSTCS_NOINFOTIP = 512, NSTCS_EVENHEIGHT = 1024, NSTCS_NOREPLACEOPEN = 2048, NSTCS_DISABLEDRAGDROP = 4096, NSTCS_NOORDERSTREAM = 8192, NSTCS_RICHTOOLTIP = 16384, = 32770 }; enum _PNP_QUERY_RELATION { PnpQueryEjectRelations = 0, PnpQueryRemovalRelations = 1, PnpQueryPowerRelations = 2, PnpQueryBusRelations = 3, PnpQueryTransportRelations = 4, MaxPnpQueryRelations = 5 }; enum _MARKUPSTATE { MARKUPSTATE_FOCUSED = 1, MARKUPSTATE_ENABLED = 2, MARKUPSTATE_VISITED = 4, MARKUPSTATE_HOT = 8, MARKUPSTATE_DEFAULTCOLORS = 16, /* MARKUPSTATE_ALLOWMARKUP = Unavail */ }; enum _KF_DEFINITION_FLAGS { KFDF_LOCAL_REDIRECT_ONLY = 2, KFDF_ROAMABLE = 4, KFDF_PRECREATE = 8, KFDF_STREAM = 16, KFDF_PUBLISHEXPANDEDPATH = 32 }; enum _IO_SESSION_EVENT { IoSessionEventIgnore = 0, IoSessionEventCreated = 1, IoSessionEventTerminated = 2, IoSessionEventConnected = 3, IoSessionEventDisconnected = 4, IoSessionEventLogon = 5, IoSessionEventLogoff = 6, IoSessionEventMax = 7 }; enum _FILE_INFORMATION_CLASS { FileDirectoryInformation = 1, FileFullDirectoryInformation = 2, FileBothDirectoryInformation = 3, FileBasicInformation = 4, FileStandardInformation = 5, FileInternalInformation = 6, FileEaInformation = 7, FileAccessInformation = 8, FileNameInformation = 9, FileRenameInformation = 10, FileLinkInformation = 11, FileNamesInformation = 12, FileDispositionInformation = 13, FilePositionInformation = 14, FileFullEaInformation = 15, FileModeInformation = 16, FileAlignmentInformation = 17, FileAllInformation = 18, FileAllocationInformation = 19, FileEndOfFileInformation = 20, FileAlternateNameInformation = 21, FileStreamInformation = 22, FilePipeInformation = 23, FilePipeLocalInformation = 24, FilePipeRemoteInformation = 25, FileMailslotQueryInformation = 26, FileMailslotSetInformation = 27, FileCompressionInformation = 28, FileObjectIdInformation = 29, FileCompletionInformation = 30, FileMoveClusterInformation = 31, FileQuotaInformation = 32, FileReparsePointInformation = 33, FileNetworkOpenInformation = 34, FileAttributeTagInformation = 35, FileTrackingInformation = 36, FileIdBothDirectoryInformation = 37, FileIdFullDirectoryInformation = 38, FileValidDataLengthInformation = 39, FileShortNameInformation = 40, FileIoCompletionNotificationInformation = 41, FileIoStatusBlockRangeInformation = 42, FileIoPriorityHintInformation = 43, FileSfioReserveInformation = 44, FileSfioVolumeInformation = 45, FileHardLinkInformation = 46, FileProcessIdsUsingFileInformation = 47, FileNormalizedNameInformation = 48, FileNetworkPhysicalNameInformation = 49, FileIdGlobalTxDirectoryInformation = 50, FileIsRemoteDeviceInformation = 51, FileAttributeCacheInformation = 52, FileNumaNodeInformation = 53, FileStandardLinkInformation = 54, FileRemoteProtocolInformation = 55, FileRenameInformationBypassAccessCheck = 56, FileLinkInformationBypassAccessCheck = 57, FileIntegrityStreamInformation = 58, FileVolumeNameInformation = 59, FileMaximumInformation = 60 }; enum _ALPC_PORT_INFORMATION_CLASS { AlpcBasicInformation = 0, AlpcPortInformation = 1, AlpcAssociateCompletionPortInformation = 2, AlpcConnectedSIDInformation = 3, AlpcServerInformation = 4, AlpcMessageZoneInformation = 5, AlpcRegisterCompletionListInformation = 6, AlpcUnregisterCompletionListInformation = 7, AlpcAdjustCompletionListConcurrencyCountInformation = 8, AlpcRegisterCallbackInformation = 9, AlpcCompletionListRundownInformation = 10 }; enum _SPBEGINF { SPBEGINF_NORMAL = 0, SPBEGINF_AUTOTIME = 2, SPBEGINF_NOPROGRESSBAR = 16, SPBEGINF_MARQUEEPROGRESS = 32, SPBEGINF_NOCANCELBUTTON = 64 }; enum tagMENUPOPUPSELECT { MPOS_EXECUTE = 0, MPOS_FULLCANCEL = 1, MPOS_CANCELLEVEL = 2, MPOS_SELECTLEFT = 3, MPOS_SELECTRIGHT = 4, MPOS_CHILDTRACKING = 5 }; enum PSC_STATE { PSC_NORMAL = 0, PSC_NOTINSOURCE = 1, PSC_DIRTY = 2, PSC_READONLY = 3 }; enum _NSTCECLICKTYPE { NSTCECT_LBUTTON = 1, NSTCECT_MBUTTON = 2, NSTCECT_RBUTTON = 3, NSTCECT_BUTTON = 3, NSTCECT_DBLCLICK = 4 }; enum DEF_SHARE_ID { DEFSHAREID_USERS = 1, DEFSHAREID_PUBLIC = 2 }; enum AHE_TYPE { AHE_DESKTOP = 0, AHE_IMMERSIVE = 1 }; enum _FP__IEEE_FORMAT { FpFormatFp32 = 0, FpFormatFp64 = 1, FpFormatFp80 = 2, FpFormatFp128 = 3, FpFormatI16 = 4, FpFormatI32 = 5, FpFormatI64 = 6, FpFormatU16 = 7, FpFormatU32 = 8, FpFormatU64 = 9, FpFormatCompare = 10, FpFormatString = 11 }; enum _LEARNING_MODE_LOG_LEVEL { LearningModeLogLevelPassive = 0, LearningModeLogLevelNormalApc = 1, LearningModeLogLevelSpecialApc = 2, LearningModeLogLevelMax = 3 }; enum CM_MASK { CM_MASK_WIDTH = 1, CM_MASK_DEFAULTWIDTH = 2, CM_MASK_IDEALWIDTH = 4, CM_MASK_NAME = 8, CM_MASK_STATE = 16 }; enum _TASKDIALOG_ELEMENTS { TDE_CONTENT = 0, TDE_EXPANDED_INFORMATION = 1, TDE_FOOTER = 2, TDE_MAIN_INSTRUCTION = 3 }; enum tagCONDITION_OPERATION { COP_IMPLICIT = 0, COP_EQUAL = 1, COP_NOTEQUAL = 2, COP_LESSTHAN = 3, COP_GREATERTHAN = 4, COP_LESSTHANOREQUAL = 5, COP_GREATERTHANOREQUAL = 6, COP_VALUE_STARTSWITH = 7, COP_VALUE_ENDSWITH = 8, COP_VALUE_CONTAINS = 9, COP_VALUE_NOTCONTAINS = 10, COP_DOSWILDCARDS = 11, COP_WORD_EQUAL = 12, COP_WORD_STARTSWITH = 13, COP_APPLICATION_SPECIFIC = 14 }; enum _SCHEMAPROCESSCONTENTS { SCHEMAPROCESSCONTENTS_NONE = 0, SCHEMAPROCESSCONTENTS_SKIP = 1, SCHEMAPROCESSCONTENTS_LAX = 2, SCHEMAPROCESSCONTENTS_STRICT = 3 }; enum _NSTCITEMSTATE { NSTCIS_NONE = 0, NSTCIS_SELECTED = 1, NSTCIS_EXPANDED = 2, NSTCIS_BOLD = 4, NSTCIS_DISABLED = 8, NSTCIS_SELECTEDNOEXPAND = 16 }; enum PROPDESC_SEARCHINFO_FLAGS { PDSIF_DEFAULT = 0, PDSIF_ININVERTEDINDEX = 1, PDSIF_ISCOLUMN = 2, PDSIF_ISCOLUMNSPARSE = 4, PDSIF_ALWAYSINCLUDE = 8, PDSIF_USEFORTYPEAHEAD = 16 }; enum _THREAD_UMS_INFORMATION_COMMAND { UmsInformationCommandInvalid = 0, UmsInformationCommandAttach = 1, UmsInformationCommandDetach = 2 }; enum LIBRARYFOLDERFILTER { LFF_FORCEFILESYSTEM = 1, LFF_STORAGEITEMS = 2, LFF_ALLITEMS = 3 }; enum SHARE_ROLE { SHARE_ROLE_INVALID = -1, SHARE_ROLE_READER = 0, SHARE_ROLE_CONTRIBUTOR = 1, SHARE_ROLE_CO_OWNER = 2, SHARE_ROLE_OWNER = 3, SHARE_ROLE_CUSTOM = 4, SHARE_ROLE_MIXED = 5 }; enum SVUIA_STATUS { SVUIA_DEACTIVATE = 0, SVUIA_ACTIVATE_NOFOCUS = 1, SVUIA_ACTIVATE_FOCUS = 2, SVUIA_INPLACEACTIVATE = 3 }; enum _MEMORY_INFORMATION_CLASS { MemoryBasicInformation = 0, MemoryWorkingSetInformation = 1, MemoryMappedFilenameInformation = 2, MemoryRegionInformation = 3, MemoryWorkingSetExInformation = 4 }; enum CATSORT_FLAGS { CATSORT_DEFAULT = 0, CATSORT_NAME = 1 }; enum _tagACENUMOPTION { ACEO_NONE = 0, ACEO_MOSTRECENTFIRST = 1, /* ACEO_FIRSTUNUSED = Unavail */ }; enum HOMEGROUPSHARINGCHOICES { HGSC_NONE = 0, HGSC_MUSICLIBRARY = 1, HGSC_PICTURESLIBRARY = 2, HGSC_VIDEOSLIBRARY = 4, HGSC_DOCUMENTSLIBRARY = 8, HGSC_PRINTERS = 16 }; enum FDE_OVERWRITE_RESPONSE { FDEOR_DEFAULT = 0, FDEOR_ACCEPT = 1, FDEOR_REFUSE = 2 }; enum _SECTION_INFORMATION_CLASS { SectionBasicInformation = 0, SectionImageInformation = 1, SectionRelocationInformation = 2, MaxSectionInfoClass = 3 }; /* enum { LdrpNoDevice = 0, LdrpWebDAV = 1, LdrpRemote = 2, LdrpAnyDevice = -1, LdrpAnyDevice2bit = 3 }; */ enum _NT_PRODUCT_TYPE { NtProductWinNt = 1, NtProductLanManNt = 2, NtProductServer = 3 }; enum __MIDL_IOleDocument_0001 { DOCMISC_CANCREATEMULTIPLEVIEWS = 1, DOCMISC_SUPPORTCOMPLEXRECTANGLES = 2, DOCMISC_CANTOPENEDIT = 4, DOCMISC_NOFILESUPPORT = 8 }; enum ShellWindowFindWindowOptions { SWFO_NEEDDISPATCH = 1, SWFO_INCLUDEPENDING = 2, SWFO_COOKIEPASSED = 4 }; enum tagSMINFOFLAGS { SMIF_ICON = 1, SMIF_ACCELERATOR = 2, SMIF_DROPTARGET = 4, SMIF_SUBMENU = 8, SMIF_CHECKED = 32, SMIF_DROPCASCADE = 64, SMIF_HIDDEN = 128, SMIF_DISABLED = 256, SMIF_TRACKPOPUP = 512, SMIF_DEMOTED = 1024, SMIF_ALTSTATE = 2048, SMIF_DRAGNDROP = 4096, SMIF_NEW = 8192 }; enum PKA_FLAGS { PKA_SET = 0, PKA_APPEND = 1, PKA_DELETE = 2 }; enum _RTL_GENERIC_COMPARE_RESULTS { GenericLessThan = 0, GenericGreaterThan = 1, GenericEqual = 2 }; enum _PLUGPLAY_EVENT_CATEGORY { HardwareProfileChangeEvent = 0, TargetDeviceChangeEvent = 1, DeviceClassChangeEvent = 2, CustomDeviceEvent = 3, DeviceInstallEvent = 4, DeviceArrivalEvent = 5, VetoEvent = 6, BlockedDriverEvent = 7, InvalidIDEvent = 8, DevicePropertyChangeEvent = 9, DeviceInstanceRemovalEvent = 10, DeviceInstanceStartedEvent = 11, MaxPlugEventCategory = 12 }; enum KNOWN_FOLDER_FLAG { KF_FLAG_DEFAULT = 0, /* KF_FLAG_NO_APPCONTAINER_REDIRECTION = Unavail */ }; enum tagDESKBANDCID { DBID_BANDINFOCHANGED = 0, DBID_SHOWONLY = 1, DBID_MAXIMIZEBAND = 2, DBID_PUSHCHEVRON = 3, DBID_DELAYINIT = 4, DBID_FINISHINIT = 5, DBID_SETWINDOWTHEME = 6, DBID_PERMITAUTOHIDE = 7 }; enum FVTEXTTYPE { FVST_EMPTYTEXT = 0 }; enum _IRQ_DEVICE_POLICY { IrqPolicyMachineDefault = 0, IrqPolicyAllCloseProcessors = 1, IrqPolicyOneCloseProcessor = 2, IrqPolicyAllProcessorsInMachine = 3, IrqPolicySpecifiedProcessors = 4, IrqPolicySpreadMessagesAcrossAllProcessors = 5 }; enum _KSPIN_LOCK_QUEUE_NUMBER { LockQueueUnusedSpare0 = 0, LockQueueExpansionLock = 1, LockQueueUnusedSpare2 = 2, LockQueueSystemSpaceLock = 3, LockQueueVacbLock = 4, LockQueueMasterLock = 5, LockQueueNonPagedPoolLock = 6, LockQueueIoCancelLock = 7, LockQueueWorkQueueLock = 8, LockQueueIoVpbLock = 9, LockQueueIoDatabaseLock = 10, LockQueueIoCompletionLock = 11, LockQueueNtfsStructLock = 12, LockQueueAfdWorkQueueLock = 13, LockQueueBcbLock = 14, LockQueueMmNonPagedPoolLock = 15, LockQueueUnusedSpare16 = 16, LockQueueMaximumLock = 17 }; enum CATEGORYINFO_FLAGS { CATINFO_NORMAL = 0, CATINFO_COLLAPSED = 1, CATINFO_HIDDEN = 2, CATINFO_EXPANDED = 4, CATINFO_NOHEADER = 8, CATINFO_NOTCOLLAPSIBLE = 16, CATINFO_NOHEADERCOUNT = 32, CATINFO_SUBSETTED = 64 }; enum _LDR_DDAG_STATE { LdrModulesMerged = -1, LdrModulesInitError = -1, LdrModulesSnapError = -1, LdrModulesUnloaded = -1, LdrModulesUnloading = -1, LdrModulesPlaceHolder = 0, LdrModulesMapping = 1, LdrModulesMapped = 2, LdrModulesWaitingForDependencies = 3, LdrModulesSnapping = 4, LdrModulesSnapped = 5, LdrModulesCondensed = 6, LdrModulesReadyToInit = 7, LdrModulesInitializing = 8, LdrModulesReadyToRun = 9 }; enum VPCOLORFLAGS { VPCF_TEXT = 1, VPCF_BACKGROUND = 2, VPCF_SORTCOLUMN = 3, VPCF_SUBTEXT = 4, VPCF_TEXTBACKGROUND = 5 }; enum tagMENUPOPUPPOPUPFLAGS { MPPF_SETFOCUS = 1, MPPF_INITIALSELECT = 2, MPPF_NOANIMATE = 4, MPPF_KEYBOARD = 16, MPPF_REPOSITION = 32, MPPF_FORCEZORDER = 64, MPPF_FINALSELECT = 128, /* MPPF_TOP = Unavail */ }; enum FOLDERLOGICALVIEWMODE { FLVM_UNSPECIFIED = -1, FLVM_FIRST = 1, FLVM_DETAILS = 1, FLVM_TILES = 2, FLVM_ICONS = 3, FLVM_LIST = 4, FLVM_CONTENT = 5, FLVM_LAST = 5 }; enum _SYSTEM_MEMORY_LIST_COMMAND { MemoryCaptureAccessedBits = 0, MemoryCaptureAndResetAccessedBits = 1, MemoryEmptyWorkingSets = 2, MemoryFlushModifiedList = 3, MemoryPurgeStandbyList = 4, MemoryPurgeLowPriorityStandbyList = 5, MemoryCommandMax = 6 }; enum _FSINFOCLASS { FileFsVolumeInformation = 1, FileFsLabelInformation = 2, FileFsSizeInformation = 3, FileFsDeviceInformation = 4, FileFsAttributeInformation = 5, FileFsControlInformation = 6, FileFsFullSizeInformation = 7, FileFsObjectIdInformation = 8, FileFsDriverPathInformation = 9, FileFsVolumeFlagsInformation = 10, FileFsSectorSizeInformation = 11, FileFsMaximumInformation = 12 }; enum _SECPKG_ATTR_LCT_STATUS { SecPkgAttrLastClientTokenYes = 0, SecPkgAttrLastClientTokenNo = 1, SecPkgAttrLastClientTokenMaybe = 2 }; enum _WATCHDOG_HANDLER_ACTION { WdActionSetTimeoutValue = 0, WdActionQueryTimeoutValue = 1, WdActionResetTimer = 2, WdActionStopTimer = 3, WdActionStartTimer = 4, WdActionSetTriggerAction = 5, WdActionQueryTriggerAction = 6, WdActionQueryState = 7, WdActionSleep = 8, WdActionWake = 9, WdActionMarkHiberPhase = 10 }; enum PROPDESC_ENUMFILTER { PDEF_ALL = 0, PDEF_SYSTEM = 1, PDEF_NONSYSTEM = 2, PDEF_VIEWABLE = 3, PDEF_QUERYABLE = 4, PDEF_INFULLTEXTQUERY = 5, PDEF_COLUMN = 6 }; enum _WORKERFACTORYINFOCLASS { WorkerFactoryTimeout = 0, WorkerFactoryRetryTimeout = 1, WorkerFactoryIdleTimeout = 2, WorkerFactoryBindingCount = 3, WorkerFactoryThreadMinimum = 4, WorkerFactoryThreadMaximum = 5, WorkerFactoryPaused = 6, WorkerFactoryBasicInformation = 7, WorkerFactoryAdjustThreadGoal = 8, WorkerFactoryCallbackType = 9, WorkerFactoryStackInformation = 10, MaxWorkerFactoryInfoClass = 11 }; enum PO_WAKE_SOURCE_TYPE { DeviceWakeSourceType = 0, FixedWakeSourceType = 1, TimerWakeSourceType = 2 }; enum _ASSOC_FILTER { ASSOC_FILTER_NONE = 0, ASSOC_FILTER_RECOMMENDED = 1 }; enum _BROWSERFRAMEOPTIONS { BFO_NONE = 0, BFO_BROWSER_PERSIST_SETTINGS = 1, BFO_RENAME_FOLDER_OPTIONS_TOINTERNET = 2, BFO_BOTH_OPTIONS = 4, BIF_PREFER_INTERNET_SHORTCUT = 8, BFO_BROWSE_NO_IN_NEW_PROCESS = 16, BFO_ENABLE_HYPERLINK_TRACKING = 32, BFO_USE_IE_OFFLINE_SUPPORT = 64, BFO_SUBSTITUE_INTERNET_START_PAGE = 128, BFO_USE_IE_LOGOBANDING = 256, BFO_ADD_IE_TOCAPTIONBAR = 512, BFO_USE_DIALUP_REF = 1024, BFO_USE_IE_TOOLBAR = 2048, BFO_NO_PARENT_FOLDER_SUPPORT = 4096, BFO_NO_REOPEN_NEXT_RESTART = 8192, BFO_GO_HOME_PAGE = 16384, = 32770 }; enum _SV3CVW3_FLAGS { SV3CVW3_DEFAULT = 0, SV3CVW3_NONINTERACTIVE = 1, SV3CVW3_FORCEVIEWMODE = 2, SV3CVW3_FORCEFOLDERFLAGS = 4 }; enum _SECPKG_CRED_CLASS { SecPkgCredClass_None = 0, SecPkgCredClass_Ephemeral = 10, SecPkgCredClass_PersistedGeneric = 20, SecPkgCredClass_PersistedSpecific = 30, SecPkgCredClass_Explicit = 40 }; enum THUMBBUTTONFLAGS { THBF_ENABLED = 0, THBF_DISABLED = 1, THBF_DISMISSONCLICK = 2, THBF_NOBACKGROUND = 4, THBF_HIDDEN = 8, THBF_NONINTERACTIVE = 16 }; enum _EXPCMDFLAGS { ECF_DEFAULT = 0, ECF_HASSUBCOMMANDS = 1, ECF_HASSPLITBUTTON = 2, ECF_HIDELABEL = 4, ECF_ISSEPARATOR = 8, ECF_HASLUASHIELD = 16, ECF_SEPARATORBEFORE = 32, ECF_SEPARATORAFTER = 64, ECF_ISDROPDOWN = 128, ECF_TOGGLEABLE = 256, ECF_AUTOMENUICONS = 512 }; enum _KEY_SET_INFORMATION_CLASS { KeyWriteTimeInformation = 0, KeyWow64FlagsInformation = 1, KeyControlFlagsInformation = 2, KeySetVirtualizationInformation = 3, KeySetDebugInformation = 4, KeySetHandleTagsInformation = 5, MaxKeySetInfoClass = 6 }; enum EXTENDED_NAME_FORMAT { NameUnknown = 0, NameFullyQualifiedDN = 1, NameSamCompatible = 2, NameDisplay = 3, NameUniqueId = 6, NameCanonical = 7, NameUserPrincipal = 8, NameCanonicalEx = 9, NameServicePrincipal = 10, NameDnsDomain = 12, NameGivenName = 13, NameSurname = 14 }; enum VERIFIER_MODE { VERIFIER_MODE_UNUSED = 0, VERIFIER_MODE_TRIAGE = 1, VERIFIER_MODE_FIELD = 2, VERIFIER_MODE_LOGO = 3, VERIFIER_MODE_TEST = 4 }; enum _SHRINK_VOLUME_REQUEST_TYPES { ShrinkPrepare = 1, ShrinkCommit = 2, ShrinkAbort = 3 }; enum _TABLE_SEARCH_RESULT { TableEmptyTree = 0, TableFoundNode = 1, TableInsertAsLeft = 2, TableInsertAsRight = 3 }; enum tagIESHORTCUTFLAGS { IESHORTCUT_NEWBROWSER = 1, IESHORTCUT_OPENNEWTAB = 2, IESHORTCUT_FORCENAVIGATE = 4, IESHORTCUT_BACKGROUNDTAB = 8 }; enum _SVSIF { SVSI_DESELECT = 0, SVSI_SELECT = 1, SVSI_EDIT = 3, SVSI_DESELECTOTHERS = 4, SVSI_ENSUREVISIBLE = 8, SVSI_FOCUSED = 16, SVSI_TRANSLATEPT = 32, SVSI_SELECTIONMARK = 64, SVSI_POSITIONITEM = 128, SVSI_CHECK = 256, SVSI_CHECK2 = 512, SVSI_KEYBOARDSELECT = 1025, /* SVSI_NOTAKEFOCUS = Unavail */ }; enum PROPDESC_RELATIVEDESCRIPTION_TYPE { PDRDT_GENERAL = 0, PDRDT_DATE = 1, PDRDT_SIZE = 2, PDRDT_COUNT = 3, PDRDT_REVISION = 4, PDRDT_LENGTH = 5, PDRDT_DURATION = 6, PDRDT_SPEED = 7, PDRDT_RATE = 8, PDRDT_RATING = 9, PDRDT_PRIORITY = 10 }; enum _WNF_STATE_NAME_INFORMATION { WnfInfoStateNameExist = 0, WnfInfoSubscribersPresent = 1, WnfInfoIsQuiescent = 2 }; enum _SHUTDOWN_ACTION { ShutdownNoReboot = 0, ShutdownReboot = 1, ShutdownPowerOff = 2 }; enum _SCHEMADERIVATIONMETHOD { SCHEMADERIVATIONMETHOD_EMPTY = 0, SCHEMADERIVATIONMETHOD_SUBSTITUTION = 1, SCHEMADERIVATIONMETHOD_EXTENSION = 2, SCHEMADERIVATIONMETHOD_RESTRICTION = 4, SCHEMADERIVATIONMETHOD_LIST = 8, SCHEMADERIVATIONMETHOD_UNION = 16, SCHEMADERIVATIONMETHOD_ALL = 255, SCHEMADERIVATIONMETHOD_NONE = 256 }; enum VPWATERMARKFLAGS { VPWF_DEFAULT = 0, VPWF_ALPHABLEND = 1 }; enum _PORT_INFORMATION_CLASS { PortBasicInformation = 0, PortDumpInformation = 1 }; enum DEFAULTSAVEFOLDERTYPE { DSFT_DETECT = 1, DSFT_PRIVATE = 2, DSFT_PUBLIC = 3 }; enum _HARDERROR_RESPONSE_OPTION { OptionAbortRetryIgnore = 0, OptionOk = 1, OptionOkCancel = 2, OptionRetryCancel = 3, OptionYesNo = 4, OptionYesNoCancel = 5, OptionShutdownSystem = 6, OptionOkNoWait = 7, OptionCancelTryContinue = 8 }; enum _SIIGBF { SIIGBF_RESIZETOFIT = 0, SIIGBF_BIGGERSIZEOK = 1, SIIGBF_MEMORYONLY = 2, SIIGBF_ICONONLY = 4, SIIGBF_THUMBNAILONLY = 8, SIIGBF_INCACHEONLY = 16, SIIGBF_CROPTOSQUARE = 32, SIIGBF_WIDETHUMBNAILS = 64, SIIGBF_ICONBACKGROUND = 128 }; enum PAGEACTION_UI { PAGEACTION_UI_DEFAULT = 0, PAGEACTION_UI_MODAL = 1, PAGEACTION_UI_MODELESS = 2, PAGEACTION_UI_SILENT = 3 }; enum ShellWindowTypeConstants { SWC_EXPLORER = 0, SWC_BROWSER = 1, SWC_3RDPARTY = 2, SWC_CALLBACK = 4, SWC_DESKTOP = 8 }; enum _TRANSFER_ADVISE_STATE { TS_NONE = 0, TS_PERFORMING = 1, TS_PREPARING = 2, TS_INDETERMINATE = 4 }; enum PROPDESC_COLUMNINDEX_TYPE { PDCIT_NONE = 0, PDCIT_ONDISK = 1, PDCIT_INMEMORY = 2, PDCIT_ONDEMAND = 3, PDCIT_ONDISKALL = 4, PDCIT_ONDISKVECTOR = 5 }; enum _SYSTEM_PIXEL_FORMAT { SystemPixelFormatUnknown = 0, SystemPixelFormatR8G8B8 = 1, SystemPixelFormatR8G8B8X8 = 2, SystemPixelFormatB8G8R8 = 3, SystemPixelFormatB8G8R8X8 = 4 }; enum _tagAUTOCOMPLETEOPTIONS { ACO_NONE = 0, ACO_AUTOSUGGEST = 1, ACO_AUTOAPPEND = 2, ACO_SEARCH = 4, ACO_FILTERPREFIXES = 8, ACO_USETAB = 16, ACO_UPDOWNKEYDROPSLIST = 32, ACO_RTLREADING = 64, ACO_WORD_FILTER = 128, ACO_NOPREFIXFILTERING = 256 }; enum _KF_REDIRECT_FLAGS { KF_REDIRECT_USER_EXCLUSIVE = 1, KF_REDIRECT_COPY_SOURCE_DACL = 2, KF_REDIRECT_OWNER_USER = 4, KF_REDIRECT_SET_OWNER_EXPLICIT = 8, KF_REDIRECT_CHECK_ONLY = 16, KF_REDIRECT_WITH_UI = 32, KF_REDIRECT_UNPIN = 64, KF_REDIRECT_PIN = 128, KF_REDIRECT_COPY_CONTENTS = 512, KF_REDIRECT_DEL_SOURCE_CONTENTS = 1024, KF_REDIRECT_EXCLUDE_ALL_KNOWN_SUBFOLDERS = 2048 }; enum PROPENUMTYPE { PET_DISCRETEVALUE = 0, PET_RANGEDVALUE = 1, PET_DEFAULTVALUE = 2, PET_ENDRANGE = 3 }; enum NWMF { NWMF_UNLOADING = 1, NWMF_USERINITED = 2, NWMF_FIRST = 4, NWMF_OVERRIDEKEY = 8, NWMF_SHOWHELP = 16, NWMF_HTMLDIALOG = 32, NWMF_FROMDIALOGCHILD = 64, NWMF_USERREQUESTED = 128, NWMF_USERALLOWED = 256, /* NWMF_FORCEWINDOW = Unavail */ }; enum _KEY_INFORMATION_CLASS { KeyBasicInformation = 0, KeyNodeInformation = 1, KeyFullInformation = 2, KeyNameInformation = 3, KeyCachedInformation = 4, KeyFlagsInformation = 5, KeyVirtualizationInformation = 6, KeyHandleTagsInformation = 7, MaxKeyInfoClass = 8 }; enum _REG_ACTION { KeyAdded = 0, KeyRemoved = 1, KeyModified = 2 }; enum _BOOT_ENTROPY_SOURCE_RESULT_CODE { BootEntropySourceStructureUninitialized = 0, BootEntropySourceDisabledByPolicy = 1, BootEntropySourceNotPresent = 2, BootEntropySourceError = 3, BootEntropySourceSuccess = 4 }; enum LIBRARYSAVEFLAGS { LSF_FAILIFTHERE = 0, LSF_OVERRIDEEXISTING = 1, LSF_MAKEUNIQUENAME = 2 }; enum _FILEOPENDIALOGOPTIONS { FOS_OVERWRITEPROMPT = 2, FOS_STRICTFILETYPES = 4, FOS_NOCHANGEDIR = 8, FOS_PICKFOLDERS = 32, FOS_FORCEFILESYSTEM = 64, FOS_ALLNONSTORAGEITEMS = 128, FOS_NOVALIDATE = 256, FOS_ALLOWMULTISELECT = 512, FOS_PATHMUSTEXIST = 2048, FOS_FILEMUSTEXIST = 4096, FOS_CREATEPROMPT = 8192, FOS_SHAREAWARE = 16384, = 32770 }; enum GETPROPERTYSTOREFLAGS { GPS_DEFAULT = 0, GPS_HANDLERPROPERTIESONLY = 1, GPS_READWRITE = 2, GPS_TEMPORARY = 4, GPS_FASTPROPERTIESONLY = 8, GPS_OPENSLOWITEM = 16, GPS_DELAYCREATION = 32, GPS_BESTEFFORT = 64, GPS_NO_OPLOCK = 128, GPS_MASK_VALID = 255 }; enum _CSV_INTERNAL_CONTROL_OP { CsvInternalControlPrefetchRetrievalPointers = 0, CsvInternalControlQueryRetrievalPointers = 1, CsvInternalControlStartRedirectFile = 2, CsvInternalControlStopRedirectFile = 3, CsvInternalControlQueryRedirectState = 4, CsvInternalControlQueryFileStatistic = 5 }; enum ASSOCIATIONTYPE { AT_FILEEXTENSION = 0, AT_URLPROTOCOL = 1, AT_STARTMENUCLIENT = 2, AT_MIMETYPE = 3 }; enum CM_STATE { CM_STATE_NONE = 0, CM_STATE_VISIBLE = 1, CM_STATE_FIXEDWIDTH = 2, CM_STATE_NOSORTBYFOLDERNESS = 4, CM_STATE_ALWAYSVISIBLE = 8 }; enum PROPDESC_SORTDESCRIPTION { PDSD_GENERAL = 0, PDSD_A_Z = 1, PDSD_LOWEST_HIGHEST = 2, PDSD_SMALLEST_BIGGEST = 3, PDSD_OLDEST_NEWEST = 4 }; enum _SASL_AUTHZID_STATE { Sasl_AuthZIDForbidden = 0, Sasl_AuthZIDProcessed = 1 }; enum _CM_SHARE_DISPOSITION { CmResourceShareUndetermined = 0, CmResourceShareDeviceExclusive = 1, CmResourceShareDriverExclusive = 2, CmResourceShareShared = 3 }; enum _WINSTOREFLAG { WINSTOREFLAG_HOME = 0, WINSTOREFLAG_SEARCH = 1, WINSTOREFLAG_PRODUCTPAGE = 2, WINSTOREFLAG_REVIEW = 3, WINSTOREFLAG_REPORTPROBLEM = 4, WINSTOREFLAG_PURCHASE = 5, WINSTOREFLAG_ACCEPT_TOS = 6, WINSTOREFLAG_CREATE_LIVEID = 7, WINSTOREFLAG_CREATE_CTP_ACCOUNT = 8, WINSTOREFLAG_MODIFY_DEFAULT_PI = 9, WINSTOREFLAG_REACQUIRE = 10, WINSTOREFLAG_UPDATES = 11, WINSTOREFLAG_MAX = 12 }; enum SLR_FLAGS { SLR_NO_UI = 1, SLR_ANY_MATCH = 2, SLR_UPDATE = 4, SLR_NOUPDATE = 8, SLR_NOSEARCH = 16, SLR_NOTRACK = 32, SLR_NOLINKINFO = 64, SLR_INVOKE_MSI = 128, SLR_NO_UI_WITH_MSG_PUMP = 257, SLR_OFFER_DELETE_WITHOUT_FILE = 512, SLR_KNOWNFOLDER = 1024, SLR_MACHINE_IN_LOCAL_TARGET = 2048, SLR_UPDATE_MACHINE_AND_SID = 4096 }; enum ShellFolderViewOptions { SFVVO_SHOWALLOBJECTS = 1, SFVVO_SHOWEXTENSIONS = 2, SFVVO_SHOWCOMPCOLOR = 8, SFVVO_SHOWSYSFILES = 32, SFVVO_WIN95CLASSIC = 64, SFVVO_DOUBLECLICKINWEBVIEW = 128, SFVVO_DESKTOPHTML = 512 }; enum _COVERAGE_REQUEST_CODES { CoverageAllModules = 0, CoverageSearchByHash = 1, CoverageSearchByName = 2 }; enum _IO_PRIORITY_HINT { IoPriorityVeryLow = 0, IoPriorityLow = 1, IoPriorityNormal = 2, IoPriorityHigh = 3, IoPriorityCritical = 4, MaxIoPriorityTypes = 5 }; enum PDOPSTATUS { PDOPS_RUNNING = 1, PDOPS_PAUSED = 2, PDOPS_CANCELLED = 3, PDOPS_STOPPED = 4, PDOPS_ERRORS = 5 }; enum _SPINITF { SPINITF_NORMAL = 0, SPINITF_MODAL = 1, SPINITF_NOMINIMIZE = 8 }; enum OLECMDID_BROWSERSTATEFLAG { OLECMDIDF_BROWSERSTATE_EXTENSIONSOFF = 1, OLECMDIDF_BROWSERSTATE_IESECURITY = 2, OLECMDIDF_BROWSERSTATE_PROTECTEDMODE_OFF = 4, OLECMDIDF_BROWSERSTATE_RESET = 8 }; enum __MIDL_IPrint_0001 { PRINTFLAG_MAYBOTHERUSER = 1, PRINTFLAG_PROMPTUSER = 2, PRINTFLAG_USERMAYCHANGEPRINTER = 4, PRINTFLAG_RECOMPOSETODEVICE = 8, PRINTFLAG_DONTACTUALLYPRINT = 16, PRINTFLAG_FORCEPROPERTIES = 32, PRINTFLAG_PRINTTOFILE = 64 }; enum _HARDERROR_RESPONSE { ResponseReturnToCaller = 0, ResponseNotHandled = 1, ResponseAbort = 2, ResponseCancel = 3, ResponseIgnore = 4, ResponseNo = 5, ResponseOk = 6, ResponseRetry = 7, ResponseYes = 8, ResponseTryAgain = 9, ResponseContinue = 10 }; /* enum { SFBID_PIDLCHANGED = 0 }; */ enum ASSOCIATIONLEVEL { AL_MACHINE = 0, AL_EFFECTIVE = 1, AL_USER = 2 }; enum _DMA_SPEED { Compatible = 0, TypeA = 1, TypeB = 2, TypeC = 3, TypeF = 4, MaximumDmaSpeed = 5 }; enum _QUERY_FILE_LAYOUT_FILTER_TYPE { QUERY_FILE_LAYOUT_FILTER_TYPE_NONE = 0, QUERY_FILE_LAYOUT_FILTER_TYPE_CLUSTERS = 1, QUERY_FILE_LAYOUT_FILTER_TYPE_FILEID = 2, QUERY_FILE_LAYOUT_NUM_FILTER_TYPES = 3 }; enum _TIMER_SET_INFORMATION_CLASS { TimerSetCoalescableTimer = 0, MaxTimerInfoClass = 1 }; enum _IRQ_GROUP_POLICY { GroupAffinityAllGroupZero = 0, GroupAffinityDontCare = 1 }; enum RTL_BSD_ITEM_TYPE { RtlBsdItemVersionNumber = 0, RtlBsdItemProductType = 1, RtlBsdItemAabEnabled = 2, RtlBsdItemAabTimeout = 3, RtlBsdItemBootGood = 4, RtlBsdItemBootShutdown = 5, RtlBsdSleepInProgress = 6, RtlBsdPowerTransition = 7, RtlBsdItemBootAttemptCount = 8, RtlBsdItemMax = 9 }; enum _PS_WAKE_REASON { PsWakeReasonUser = 0, PsWakeReasonDevice = 1, PsWakeReasonKernel = 2, PsWakeReasonPower = 3, PsMaxWakeReasons = 4 }; enum _PROPERTYUI_FLAGS { PUIF_DEFAULT = 0, PUIF_RIGHTALIGN = 1, PUIF_NOLABELININFOTIP = 2 }; enum SCNRT_STATUS { SCNRT_ENABLE = 0, SCNRT_DISABLE = 1 }; enum _EXPCMDSTATE { ECS_ENABLED = 0, ECS_DISABLED = 1, ECS_HIDDEN = 2, ECS_CHECKBOX = 4, ECS_CHECKED = 8, ECS_RADIOCHECK = 16 }; enum PROPDESC_CONDITION_TYPE { PDCOT_NONE = 0, PDCOT_STRING = 1, PDCOT_SIZE = 2, PDCOT_DATETIME = 3, PDCOT_BOOLEAN = 4, PDCOT_NUMBER = 5 }; enum _FP_IEEE_COMPARE_RESULT { FpCompareEqual = 0, FpCompareGreater = 1, FpCompareLess = 2, FpCompareUnordered = 3 }; enum APPLICATION_LAYOUT_STATE { ALS_FULLSCREEN = 0, ALS_FILLED = 1, ALS_SNAPPED = 2 }; enum _NSTCEHITTEST { NSTCEHT_NOWHERE = 1, NSTCEHT_ONITEMICON = 2, NSTCEHT_ONITEMLABEL = 4, NSTCEHT_ONITEMINDENT = 8, NSTCEHT_ONITEMBUTTON = 16, NSTCEHT_ONITEMRIGHT = 32, NSTCEHT_ONITEMSTATEICON = 64, NSTCEHT_ONITEM = 70, NSTCEHT_ONITEMTABBUTTON = 4096 }; enum _SecDelegationType { SecFull = 0, SecService = 1, SecTree = 2, SecDirectory = 3, SecObject = 4 }; enum ASSOCCLASS { ASSOCCLASS_SHELL_KEY = 0, ASSOCCLASS_PROGID_KEY = 1, ASSOCCLASS_PROGID_STR = 2, ASSOCCLASS_CLSID_KEY = 3, ASSOCCLASS_CLSID_STR = 4, ASSOCCLASS_APP_KEY = 5, ASSOCCLASS_APP_STR = 6, ASSOCCLASS_SYSTEM_STR = 7, ASSOCCLASS_FOLDER = 8, ASSOCCLASS_STAR = 9 }; enum _SXH_SERVER_CERT_OPTION { SXH_SERVER_CERT_IGNORE_UNKNOWN_CA = 256, SXH_SERVER_CERT_IGNORE_WRONG_USAGE = 512, SXH_SERVER_CERT_IGNORE_CERT_CN_INVALID = 4096, SXH_SERVER_CERT_IGNORE_CERT_DATE_INVALID = 8192, SXH_SERVER_CERT_IGNORE_ALL_SERVER_ERRORS = 13056 }; enum PS_CREATE_STATE { PsCreateInitialState = 0, PsCreateFailOnFileOpen = 1, PsCreateFailOnSectionCreate = 2, PsCreateFailExeFormat = 3, PsCreateFailMachineMismatch = 4, PsCreateFailExeName = 5, PsCreateSuccess = 6, PsCreateMaximumStates = 7 }; enum _RTL_STACK_TRACE_DATABASE_CONTROL { BackTraceDatabaseCreate = 0, BackTraceDatabaseDelete = 1, BackTraceDatabaseFlush = 2, BackTraceDatabaseMaxControl = 3 }; enum _SCHEMAUSE { SCHEMAUSE_OPTIONAL = 0, SCHEMAUSE_PROHIBITED = 1, SCHEMAUSE_REQUIRED = 2 }; enum _SXH_PROXY_SETTING { SXH_PROXY_SET_DEFAULT = 0, SXH_PROXY_SET_PRECONFIG = 0, SXH_PROXY_SET_DIRECT = 1, SXH_PROXY_SET_PROXY = 2 }; enum FOLDERVIEWOPTIONS { FVO_DEFAULT = 0, FVO_VISTALAYOUT = 1, FVO_CUSTOMPOSITION = 2, FVO_CUSTOMORDERING = 4, FVO_SUPPORTHYPERLINKS = 8, FVO_NOANIMATIONS = 16, FVO_NOSCROLLTIPS = 32 }; enum PROPDESC_GROUPING_RANGE { PDGR_DISCRETE = 0, PDGR_ALPHANUMERIC = 1, PDGR_SIZE = 2, PDGR_DYNAMIC = 3, PDGR_DATE = 4, PDGR_PERCENT = 5, PDGR_ENUMERATED = 6 }; enum _JOURNAL_INFORMATION_CLASS { JournalAbsoluteInformation = 0, JournalClientInformation = 1, MaxJournalInformation = 2 }; enum _tagAUTOCOMPLETELISTOPTIONS { ACLO_NONE = 0, ACLO_CURRENTDIR = 1, ACLO_MYCOMPUTER = 2, ACLO_DESKTOP = 4, ACLO_FAVORITES = 8, ACLO_FILESYSONLY = 16, ACLO_FILESYSDIRS = 32, ACLO_VIRTUALNAMESPACE = 64 }; enum _WNF_STATE_NAME_LIFETIME { WnfWellKnownStateName = 0, WnfPermanentStateName = 1, WnfPersistentStateName = 2, WnfTemporaryStateName = 3 }; enum OLECMDTEXTF { OLECMDTEXTF_NONE = 0, OLECMDTEXTF_NAME = 1, OLECMDTEXTF_STATUS = 2 }; enum CPVIEW { CPVIEW_CLASSIC = 0, CPVIEW_ALLITEMS = 0, CPVIEW_CATEGORY = 1, CPVIEW_HOME = 1 }; enum ATTACHMENT_ACTION { ATTACHMENT_ACTION_CANCEL = 0, ATTACHMENT_ACTION_SAVE = 1, ATTACHMENT_ACTION_EXEC = 2 }; enum WS_CACHEPROVIDER { WS_CACHEPROVIDER_SQR = 0, WS_CACHEPROVIDER_LICENSE = 1, WS_CACHEPROVIDER_WU = 2, WS_CACHEPROVIDER_COMMERCE = 3, WS_CACHEPROVIDER_PARENTAL = 4, WS_CACHEPROVIDER_HTTP = 5 }; enum DESKTOP_SLIDESHOW_STATE { DSS_ENABLED = 1, DSS_SLIDESHOW = 2 }; enum _XHR_COOKIE_STATE { XHR_COOKIE_STATE_UNKNOWN = 0, XHR_COOKIE_STATE_ACCEPT = 1, XHR_COOKIE_STATE_PROMPT = 2, XHR_COOKIE_STATE_LEASH = 3, XHR_COOKIE_STATE_DOWNGRADE = 4, XHR_COOKIE_STATE_REJECT = 5 }; enum COMPARTMENT_ID { UNSPECIFIED_COMPARTMENT_ID = 0, DEFAULT_COMPARTMENT_ID = 1 }; enum tagOPEN_AS_INFO_FLAGS { OAIF_ALLOW_REGISTRATION = 1, OAIF_REGISTER_EXT = 2, OAIF_EXEC = 4, OAIF_FORCE_REGISTRATION = 8, OAIF_HIDE_REGISTRATION = 32, OAIF_URL_PROTOCOL = 64, OAIF_FILE_IS_URI = 128 }; enum _SHGDNF { SHGDN_NORMAL = 0, SHGDN_INFOLDER = 1, SHGDN_FOREDITING = 4096, SHGDN_FORADDRESSBAR = 16384, = 32770 }; enum PROPDESC_DISPLAYTYPE { PDDT_STRING = 0, PDDT_NUMBER = 1, PDDT_BOOLEAN = 2, PDDT_DATETIME = 3, PDDT_ENUMERATED = 4 }; enum _ALTERNATIVE_ARCHITECTURE_TYPE { StandardDesign = 0, NEC98x86 = 1, EndAlternatives = 2 }; enum NSTCFOLDERCAPABILITIES { NSTCFC_NONE = 0, NSTCFC_PINNEDITEMFILTERING = 1, NSTCFC_DELAY_REGISTER_NOTIFY = 2 }; enum _EVENT_INFORMATION_CLASS { EventBasicInformation = 0 }; enum _TASKDIALOG_NOTIFICATIONS { TDN_CREATED = 0, TDN_NAVIGATED = 1, TDN_BUTTON_CLICKED = 2, TDN_HYPERLINK_CLICKED = 3, TDN_TIMER = 4, TDN_DESTROYED = 5, TDN_RADIO_BUTTON_CLICKED = 6, TDN_DIALOG_CONSTRUCTED = 7, TDN_VERIFICATION_CLICKED = 8, TDN_HELP = 9, TDN_EXPANDO_BUTTON_CLICKED = 10 }; enum tagMENUBANDHANDLERCID { MBHANDCID_PIDLSELECT = 0 }; enum _PS_STD_HANDLE_STATE { PsNeverDuplicate = 0, PsRequestDuplicate = 1, PsAlwaysDuplicate = 2, PsMaxStdHandleStates = 3 }; enum __MIDL_IWindowsStoreInstallProgress_0001 { IP_ACQUIRING_LICENSE = 0, IP_DOWNLOADING = 1, IP_INSTALLING = 2 }; enum _NMCII_FLAGS { NMCII_NONE = 0, NMCII_ITEMS = 1, NMCII_FOLDERS = 2 }; enum tagCONDITION_TYPE { CT_AND_CONDITION = 0, CT_OR_CONDITION = 1, CT_NOT_CONDITION = 2, CT_LEAF_CONDITION = 3 }; enum _REQUESTER_TYPE { KernelRequester = 0, UserProcessRequester = 1, UserSharedServiceRequester = 2 }; enum RefreshConstants { REFRESH_NORMAL = 0, REFRESH_IFEXPIRED = 1, REFRESH_COMPLETELY = 3 }; enum _TP_LOG_LEVEL { TP_LOG_LEVEL_ERROR = 0, TP_LOG_LEVEL_WARNING = 1, TP_LOG_LEVEL_INFO = 2, TP_LOG_LEVEL_TRACE_ENTER = 3, TP_LOG_LEVEL_TRACE_LEAVE = 4 }; enum _NMCSAEI_FLAGS { NMCSAEI_SELECT = 0, NMCSAEI_EDIT = 1 }; enum OfflineFolderStatus { OFS_INACTIVE = -1, OFS_ONLINE = 0, OFS_OFFLINE = 1, OFS_SERVERBACK = 2, OFS_DIRTYCACHE = 3 }; /* enum { DBCID_EMPTY = 0, DBCID_ONDRAG = 1, DBCID_CLSIDOFBAR = 2, DBCID_RESIZE = 3, DBCID_GETBAR = 4 }; */ enum _PERSIST_SPROPSTORE_FLAGS { FPSPS_DEFAULT = 0, FPSPS_READONLY = 1 }; enum _SCHEMATYPEVARIETY { SCHEMATYPEVARIETY_NONE = -1, SCHEMATYPEVARIETY_ATOMIC = 0, SCHEMATYPEVARIETY_LIST = 1, SCHEMATYPEVARIETY_UNION = 2 }; enum _SERVERXMLHTTP_OPTION { SXH_OPTION_URL = -1, SXH_OPTION_URL_CODEPAGE = 0, SXH_OPTION_ESCAPE_PERCENT_IN_URL = 1, SXH_OPTION_IGNORE_SERVER_SSL_CERT_ERROR_FLAGS = 2, SXH_OPTION_SELECT_CLIENT_SSL_CERT = 3 }; enum _MEMORY_RESERVE_TYPE { MemoryReserveUserApc = 0, MemoryReserveIoCompletion = 1, MemoryReserveTypeMax = 2 }; enum _EVENT_TYPE { NotificationEvent = 0, SynchronizationEvent = 1 }; enum NSTCGNI { NSTCGNI_NEXT = 0, NSTCGNI_NEXTVISIBLE = 1, NSTCGNI_PREV = 2, NSTCGNI_PREVVISIBLE = 3, NSTCGNI_PARENT = 4, NSTCGNI_CHILD = 5, NSTCGNI_FIRSTVISIBLE = 6, NSTCGNI_LASTVISIBLE = 7 }; enum SLGP_FLAGS { SLGP_SHORTPATH = 1, SLGP_UNCPRIORITY = 2, SLGP_RAWPATH = 4, SLGP_RELATIVEPRIORITY = 8 }; enum SHARD { SHARD_PIDL = 1, SHARD_PATHA = 2, SHARD_PATHW = 3, SHARD_APPIDINFO = 4, SHARD_APPIDINFOIDLIST = 5, SHARD_LINK = 6, SHARD_APPIDINFOLINK = 7, SHARD_SHELLITEM = 8 }; enum OLECMDEXECOPT { OLECMDEXECOPT_DODEFAULT = 0, OLECMDEXECOPT_PROMPTUSER = 1, OLECMDEXECOPT_DONTPROMPTUSER = 2, OLECMDEXECOPT_SHOWHELP = 3 }; enum _CDBE_ACTIONS { CDBE_TYPE_MUSIC = 1, CDBE_TYPE_DATA = 2, CDBE_TYPE_ALL = -1 }; enum _PROPERTYUI_FORMAT_FLAGS { PUIFFDF_DEFAULT = 0, PUIFFDF_RIGHTTOLEFT = 1, PUIFFDF_SHORTFORMAT = 2, PUIFFDF_NOTIME = 4, PUIFFDF_FRIENDLYDATE = 8 }; enum _PDMODE { PDM_DEFAULT = 0, PDM_RUN = 1, PDM_PREFLIGHT = 2, PDM_UNDOING = 4, PDM_ERRORSBLOCKING = 8, PDM_INDETERMINATE = 16 }; enum DESKTOP_WALLPAPER_POSITION { DWPOS_CENTER = 0, DWPOS_TILE = 1, DWPOS_STRETCH = 2, DWPOS_FIT = 3, DWPOS_FILL = 4, DWPOS_SPAN = 5 }; enum DESKTOP_SLIDESHOW_DIRECTION { DSD_FORWARD = 0, DSD_BACKWARD = 1 }; enum UNDOCK_REASON { UR_RESOLUTION_CHANGE = 0, UR_MONITOR_DISCONNECT = 1, UR_TRANSITION_TO_DESKTOP = 2 }; enum _LINK_TRACKING_INFORMATION_TYPE { NtfsLinkTrackingInformation = 0, DfsLinkTrackingInformation = 1 }; enum _TIMER_TYPE { NotificationTimer = 0, SynchronizationTimer = 1 }; enum OLECMDID_WINDOWSTATE_FLAG { OLECMDIDF_WINDOWSTATE_USERVISIBLE = 1, OLECMDIDF_WINDOWSTATE_ENABLED = 2, /* OLECMDIDF_WINDOWSTATE_USERVISIBLE_VALID = Unavail */ }; enum _SE_SIGNING_LEVEL { SE_SIGNING_LEVEL_UNCHECKED = 0, SE_SIGNING_LEVEL_PROTECTED_PROCESS = 1, SE_SIGNING_LEVEL_UNSIGNED = 2, SE_SIGNING_LEVEL_AUTHENTICODE = 4, SE_SIGNING_LEVEL_DRM_PROTECTED = 5, SE_SIGNING_LEVEL_WINDOWS = 6, SE_SIGNING_LEVEL_WINDOWS_PROTECTED = 7 }; enum SHGFP_TYPE { SHGFP_TYPE_CURRENT = 0, SHGFP_TYPE_DEFAULT = 1 }; enum THUMBBUTTONMASK { THB_BITMAP = 1, THB_ICON = 2, THB_TOOLTIP = 4, THB_FLAGS = 8 }; enum ACTIVATEOPTIONS { AO_NONE = 0, AO_AUTHORINGMODE = 1 }; enum _SYSTEM_CRASH_DUMP_CONFIGURATION_CLASS { SystemCrashDumpDisable = 0, SystemCrashDumpReconfigure = 1, SystemCrashDumpInitializationComplete = 2 }; enum _PROCESS_TLS_INFORMATION_TYPE { ProcessTlsReplaceIndex = 0, ProcessTlsReplaceVector = 1, MaxProcessTlsOperation = 2 }; enum _SPTEXT { SPTEXT_ACTIONDESCRIPTION = 1, SPTEXT_ACTIONDETAIL = 2 }; enum tagBANDSITECID { BSID_BANDADDED = 0, BSID_BANDREMOVED = 1 }; enum PBM_MUTE_STATE { MS_MUTED = 1, MS_UNMUTED = 2 }; enum _SHCONTF { SHCONTF_CHECKING_FOR_CHILDREN = 16, SHCONTF_FOLDERS = 32, SHCONTF_NONFOLDERS = 64, SHCONTF_INCLUDEHIDDEN = 128, SHCONTF_INIT_ON_FIRST_NEXT = 256, SHCONTF_NETPRINTERSRCH = 512, SHCONTF_SHAREABLE = 1024, SHCONTF_STORAGE = 2048, SHCONTF_NAVIGATION_ENUM = 4096, SHCONTF_FASTITEMS = 8192, SHCONTF_FLATLIST = 16384, = 32770 }; enum _EXCEPTION_LOG_TYPE { LogExceptionEmpty = 0, LogExceptionDispatch = 1, LogExceptionHandler = 2 }; enum _MEMORY_WORKING_SET_EX_LOCATION { MemoryLocationInvalid = 0, MemoryLocationResident = 1, MemoryLocationPagefile = 2, MemoryLocationReserved = 3 }; enum EXPLORER_BROWSER_FILL_FLAGS { EBF_NONE = 0, EBF_SELECTFROMDATAOBJECT = 256, EBF_NODROPTARGET = 512 }; enum _LI_METRIC { LIM_SMALL = 0, LIM_LARGE = 1 }; enum _SCHEMAWHITESPACE { SCHEMAWHITESPACE_NONE = -1, SCHEMAWHITESPACE_PRESERVE = 0, SCHEMAWHITESPACE_REPLACE = 1, SCHEMAWHITESPACE_COLLAPSE = 2 }; enum _EVENT_INFO_CLASS { EventProviderBinaryTrackInfo = 0, MaxEventInfo = 1 }; enum KNOWNDESTCATEGORY { KDC_FREQUENT = 1, KDC_RECENT = 2 }; enum CommandStateChangeConstants { CSC_UPDATECOMMANDS = -1, CSC_NAVIGATEFORWARD = 1, CSC_NAVIGATEBACK = 2 }; enum STPFLAG { STPF_NONE = 0, STPF_USEAPPTHUMBNAILALWAYS = 1, STPF_USEAPPTHUMBNAILWHENACTIVE = 2, STPF_USEAPPPEEKALWAYS = 4, STPF_USEAPPPEEKWHENACTIVE = 8 }; enum DSH_FLAGS { DSH_ALLOWDROPDESCRIPTIONTEXT = 1 }; enum _FP__IEEE_ROUNDING_MODE { FpRoundNearest = 0, FpRoundMinusInfinity = 1, FpRoundPlusInfinity = 2, FpRoundChopped = 3 }; enum tagSMINFOTYPE { SMIT_SEPARATOR = 1, SMIT_STRING = 2 }; enum LIBRARYMANAGEDIALOGOPTIONS { LMD_DEFAULT = 0, LMD_ALLOWUNINDEXABLENETWORKLOCATIONS = 1 }; enum _WNF_DATA_SCOPE { WnfDataScopeSystem = 0, WnfDataScopeSession = 1, WnfDataScopeUser = 2, WnfDataScopeProcess = 3 }; enum _SEMAPHORE_INFORMATION_CLASS { SemaphoreBasicInformation = 0 }; enum _POWER_STATE_TYPE { SystemPowerState = 0, DevicePowerState = 1 }; /* enum { BMICON_LARGE = 0, BMICON_SMALL = 1 }; */ enum _SIGDN { SIGDN_NORMALDISPLAY = 0, €€SIGDN_PARENTRELATIVEPARSING = 32771, = 32771 }; enum _SICHINTF { SICHINT_DISPLAY = 0, = 32771 }; enum QUERY_USER_NOTIFICATION_STATE { QUNS_NOT_PRESENT = 1, QUNS_BUSY = 2, QUNS_RUNNING_D3D_FULL_SCREEN = 3, QUNS_PRESENTATION_MODE = 4, QUNS_ACCEPTS_NOTIFICATIONS = 5, QUNS_QUIET_TIME = 6, QUNS_IMMERSIVE = 7 }; enum _NSTCROOTSTYLE { NSTCRS_VISIBLE = 0, NSTCRS_HIDDEN = 1, NSTCRS_EXPANDED = 2 }; /* enum { ISHCUTCMDID_DOWNLOADICON = 0, ISHCUTCMDID_INTSHORTCUTCREATE = 1, ISHCUTCMDID_COMMITHISTORY = 2, ISHCUTCMDID_SETUSERAWURL = 3 }; */ enum WPCSETTING { WPCSETTING_LOGGING_ENABLED = 1, WPCSETTING_FILEDOWNLOAD_BLOCKED = 2 }; enum _WATCHDOG_INFORMATION_CLASS { WdInfoTimeoutValue = 0, WdInfoResetTimer = 1, WdInfoStopTimer = 2, WdInfoStartTimer = 3, WdInfoTriggerAction = 4, WdInfoState = 5 }; enum _KEY_VALUE_INFORMATION_CLASS { KeyValueBasicInformation = 0, KeyValueFullInformation = 1, KeyValuePartialInformation = 2, KeyValueFullInformationAlign64 = 3, KeyValuePartialInformationAlign64 = 4, MaxKeyValueInfoClass = 5 }; enum _PROPERTYUI_NAME_FLAGS { PUIFNF_DEFAULT = 0, PUIFNF_MNEMONIC = 1 }; enum PBM_PLAY_STATE { PS_PLAYING = 1, PS_PAUSED = 2, PS_STOPPED = 3 }; enum CM_ENUM_FLAGS { CM_ENUM_ALL = 1, CM_ENUM_VISIBLE = 2 }; enum _TASKDIALOG_ICON_ELEMENTS { TDIE_ICON_MAIN = 0, TDIE_ICON_FOOTER = 1 }; enum IGNOREMIME { IGNOREMIME_PROMPT = 1, IGNOREMIME_TEXT = 2 }; enum tagCDBURNINGEXTENSIONRET { CDBE_RET_DEFAULT = 0, CDBE_RET_DONTRUNOTHEREXTS = 1, CDBE_RET_STOPWIZARD = 2 }; enum FDE_SHAREVIOLATION_RESPONSE { FDESVR_DEFAULT = 0, FDESVR_ACCEPT = 1, FDESVR_REFUSE = 2 }; enum _OPPROGDLGF { OPPROGDLG_DEFAULT = 0, OPPROGDLG_ENABLEPAUSE = 128, OPPROGDLG_ALLOWUNDO = 256, OPPROGDLG_DONTDISPLAYSOURCEPATH = 512, OPPROGDLG_DONTDISPLAYDESTPATH = 1024, OPPROGDLG_NOMULTIDAYESTIMATES = 2048, OPPROGDLG_DONTDISPLAYLOCATIONS = 4096 }; enum FDAP { FDAP_BOTTOM = 0, FDAP_TOP = 1 }; enum LIBRARYOPTIONFLAGS { LOF_DEFAULT = 0, LOF_PINNEDTONAVPANE = 1, LOF_MASK_ALL = 1 }; enum _SCHEMACONTENTTYPE { SCHEMACONTENTTYPE_EMPTY = 0, SCHEMACONTENTTYPE_TEXTONLY = 1, SCHEMACONTENTTYPE_ELEMENTONLY = 2, SCHEMACONTENTTYPE_MIXED = 3 }; enum PBM_SESSION_TYPE { ST_COMMUNICATION = 1, ST_MEDIA = 2 }; enum _XHR_PROPERTY { XHR_PROP_NO_CRED_PROMPT = 0, XHR_PROP_NO_AUTH = 1, XHR_PROP_TIMEOUT = 2 }; enum KF_CATEGORY { KF_CATEGORY_VIRTUAL = 1, KF_CATEGORY_FIXED = 2, KF_CATEGORY_COMMON = 3, KF_CATEGORY_PERUSER = 4 }; enum MARKUPLINKTEXT { MARKUPLINKTEXT_URL = 0, MARKUPLINKTEXT_ID = 1, MARKUPLINKTEXT_TEXT = 2 }; enum OLECMDID_VIEWPORT_MODE_FLAG { OLECMDIDF_VIEWPORTMODE_FIXED_LAYOUT_WIDTH = 1, OLECMDIDF_VIEWPORTMODE_EXCLUDE_VISUAL_BOTTOM = 2, /* OLECMDIDF_VIEWPORTMODE_FIXED_LAYOUT_WIDTH_VALID = Unavail */ }; enum _ATOM_INFORMATION_CLASS { AtomBasicInformation = 0, AtomTableInformation = 1 }; enum OLECMDID_OPTICAL_ZOOMFLAG { OLECMDIDF_OPTICAL_ZOOM_NOPERSIST = 1, OLECMDIDF_OPTICAL_ZOOM_NOLAYOUT = 16 }; enum IMMERSIVE_MONITOR_MODE { IMM_UNKNOWN = 0, IMM_DESKTOP = 1, IMM_IMMERSIVE = 2 }; enum _SYSTEM_FIRMWARE_TABLE_ACTION { SystemFirmwareTable_Enumerate = 0, SystemFirmwareTable_Get = 1 }; enum CM_SET_WIDTH_VALUE { CM_WIDTH_USEDEFAULT = -1, CM_WIDTH_AUTOSIZE = -1 }; enum _WAIT_TYPE { WaitAll = 0, WaitAny = 1, WaitNotification = 2 }; enum _TP_DEBUG_CLASS { TP_DEBUG_CLASS_POOL = 0 }; enum _SECTION_INHERIT { ViewShare = 1, ViewUnmap = 2 }; enum FFFP_MODE { FFFP_EXACTMATCH = 0, FFFP_NEARESTPARENTMATCH = 1 }; enum _HEAP_INFORMATION_CLASS { HeapCompatibilityInformation = 0, HeapEnableTerminationOnCorruption = 1, HeapExtendedInformation = 2,  = 32771 }; enum _WOW64_FUNCTION_CODE64 { WOW64_FUNCTION_NOP = 0, WOW64_FUNCTION_QUERY_PROCESS_DEBUG_INFO = 1, WOW64_FUNCTION_MAXIMUM = 2 }; enum PBM_EVENT { PE_DUCKSESSION = 1, PE_UNDUCKSESSION = 2 }; enum tagSORTDIRECTION { SORT_DESCENDING = -1, SORT_ASCENDING = 1 }; enum MARKUPSIZE { MARKUPSIZE_CALCWIDTH = 0, MARKUPSIZE_CALCHEIGHT = 1 }; enum DESKTOP_SLIDESHOW_OPTIONS { DSO_SHUFFLEIMAGES = 1 }; enum NewProcessCauseConstants { ProtectedModeRedirect = 1 }; enum _TVITEMPART { TVGIPR_BUTTON = 1 }; enum _ALPC_MESSAGE_INFORMATION_CLASS { AlpcMessageSidInformation = 0, AlpcMessageTokenModifiedIdInformation = 1 }; enum _IO_COMPLETION_INFORMATION_CLASS { IoCompletionBasicInformation = 0 }; enum MCA_EXCEPTION_TYPE { HAL_MCE_RECORD = 0, HAL_MCA_RECORD = 1 }; enum _EXPPS { EXPPS_FILETYPES = 1 }; enum FOLDER_ENUM_MODE { FEM_VIEWRESULT = 0, FEM_NAVIGATION = 1 }; enum RESOLUTION_SCALE { RS_100PERCENT = 0, RS_140PERCENT = 1, RS_180PERCENT = 2 }; enum Microsoft::WRL::ModuleType { InProc = 1, OutOfProc = 2, DisableCaching = 4, InProcDisableCaching = 5, OutOfProcDisableCaching = 6 }; enum Microsoft::WRL::FactoryCacheFlags { FactoryCacheDefault = 0, FactoryCacheEnabled = 1, FactoryCacheDisabled = 2 }; enum _SPACTION { SPACTION_NONE = 0, SPACTION_MOVING = 1, SPACTION_COPYING = 2, SPACTION_RECYCLING = 3, SPACTION_APPLYINGATTRIBS = 4, SPACTION_DOWNLOADING = 5, SPACTION_SEARCHING_INTERNET = 6, SPACTION_CALCULATING = 7, SPACTION_UPLOADING = 8, SPACTION_SEARCHING_FILES = 9, SPACTION_DELETING = 10, SPACTION_RENAMING = 11, SPACTION_FORMATTING = 12, SPACTION_COPY_MOVING = 13 }; struct _CM_DISK_GEOMETRY_DEVICE_DATA { unsigned long BytesPerSector; /* +0x0000 */ unsigned long NumberOfCylinders; /* +0x0004 */ unsigned long SectorsPerTrack; /* +0x0008 */ unsigned long NumberOfHeads; /* +0x000c */ }; struct _PLUGPLAY_CONTROL_CONFLICT_DATA { unsigned char DeviceInstance[8]; /* +0x0000 7c 3b 00 00 */ unsigned char ResourceList[4]; /* +0x0008 7e 3b 00 00 */ unsigned long ResourceListSize; /* +0x000c */ unsigned char ConflictBuffer[4]; /* +0x0010 80 3b 00 00 */ unsigned long ConflictBufferSize; /* +0x0014 */ unsigned long Flags; /* +0x0018 */ long Status; /* +0x001c */ }; struct _FOUR_PART_VERSION { unsigned long long Version64; /* +0x0000 */ }; struct _FOUR_PART_VERSION:: { unsigned short Revision; /* +0x0000 */ unsigned short Build; /* +0x0002 */ unsigned short Minor; /* +0x0004 */ unsigned short Major; /* +0x0006 */ }; struct _FOUR_PART_VERSION:: { unsigned long BuildAndRevision; /* +0x0000 */ unsigned long MajorAndMinor; /* +0x0004 */ }; struct tagINITCOMMONCONTROLSEX { unsigned long dwSize; /* +0x0000 */ unsigned long dwICC; /* +0x0004 */ }; struct tagLVGROUPMETRICS { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char mask[4]; /* +0x0004 75 00 00 00 */ unsigned char Left[4]; /* +0x0008 75 00 00 00 */ unsigned char Top[4]; /* +0x000c 75 00 00 00 */ unsigned char Right[4]; /* +0x0010 75 00 00 00 */ unsigned char Bottom[4]; /* +0x0014 75 00 00 00 */ unsigned long crLeft; /* +0x0018 */ unsigned long crTop; /* +0x001c */ unsigned long crRight; /* +0x0020 */ unsigned long crBottom; /* +0x0024 */ unsigned long crHeader; /* +0x0028 */ unsigned long crFooter; /* +0x002c */ }; struct _FILE_INITIATE_REPAIR_OUTPUT_BUFFER { unsigned long long Hint1; /* +0x0000 */ unsigned long long Hint2; /* +0x0008 */ unsigned long long Clsn; /* +0x0010 */ long Status; /* +0x0018 */ }; struct _BOOT_ENTROPY_SOURCE_NT_RESULT { unsigned char SourceId[8]; /* +0x0000 97 3b 00 00 */ unsigned long long Policy; /* +0x0008 */ unsigned char ResultCode[4]; /* +0x0010 98 3b 00 00 */ long ResultStatus; /* +0x0014 */ unsigned long long Time; /* +0x0018 */ unsigned long EntropyLength; /* +0x0020 */ unsigned char EntropyData[68]; /* +0x0024 ac 14 00 00 */ }; struct _MM_COMBINEDPAGE_IDENTITY { unsigned char PfnIdentity[16]; /* +0x0000 9b 3b 00 00 */ /* unsigned char SharedInitial[0]; +0x0010 4a 12 00 00 */ unsigned long ProtoPte; /* +0x0010 */ }; struct _SecPkgContext_ProtoInfoW { unsigned char sProtocolName[4]; /* +0x0000 71 04 00 00 */ unsigned long majorVersion; /* +0x0004 */ unsigned long minorVersion; /* +0x0008 */ }; struct tagNMBCDROPDOWN { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char rcButton[16]; /* +0x000c c0 12 00 00 */ }; struct _FILE_IO_COMPLETION_INFORMATION { void *KeyContext; /* +0x0000 */ void *ApcContext; /* +0x0004 */ unsigned char IoStatusBlock[8]; /* +0x0008 a8 3b 00 00 */ }; struct _SYSTEM_THREAD_INFORMATION { unsigned char KernelTime[8]; /* +0x0000 db 13 00 00 */ unsigned char UserTime[8]; /* +0x0008 db 13 00 00 */ unsigned char CreateTime[8]; /* +0x0010 db 13 00 00 */ unsigned long WaitTime; /* +0x0018 */ void *StartAddress; /* +0x001c */ unsigned char ClientId[8]; /* +0x0020 ab 3b 00 00 */ long Priority; /* +0x0028 */ long BasePriority; /* +0x002c */ unsigned long ContextSwitches; /* +0x0030 */ unsigned long ThreadState; /* +0x0034 */ unsigned long WaitReason; /* +0x0038 */ }; struct _SecPkgCredentials_SSIProviderW { unsigned char sProviderName[4]; /* +0x0000 71 04 00 00 */ unsigned long ProviderInfoLength; /* +0x0004 */ char *ProviderInfo; /* +0x0008 */ }; struct tagLVBKIMAGEA { unsigned long ulFlags; /* +0x0000 */ unsigned char hbm[4]; /* +0x0004 b9 14 00 00 */ char *pszImage; /* +0x0008 */ unsigned char cchImageMax[4]; /* +0x000c 75 00 00 00 */ unsigned char xOffsetPercent[4]; /* +0x0010 74 00 00 00 */ unsigned char yOffsetPercent[4]; /* +0x0014 74 00 00 00 */ }; struct _SINGLE_LIST_ENTRY32 { unsigned long Next; /* +0x0000 */ }; struct _Wx86TIB { unsigned long Size; /* +0x0000 */ unsigned long InitialPc; /* +0x0004 */ void *StackBase; /* +0x0008 */ void *StackLimit; /* +0x000c */ void *DeallocationStack; /* +0x0010 */ unsigned long LogFlags; /* +0x0014 */ unsigned long InitialSp; /* +0x0018 */ unsigned char SimulationCount; /* +0x001c */ unsigned char InCpuSimulation; /* +0x001d */ unsigned char EmulateInitialPc; /* +0x001e */ unsigned char Initialized; /* +0x001f */ unsigned char ExceptionList[4]; /* +0x0020 c6 3b 00 00 */ void *CpuContext; /* +0x0024 */ unsigned char InitialExceptionContext[4]; /* +0x0028 7f 1e 00 00 */ void *pCallersRIID; /* +0x002c */ void *pCallersUnknown; /* +0x0030 */ unsigned long Flags; /* +0x0034 */ void *SelfRegDllName; /* +0x0038 */ void *SelfRegDllHandle; /* +0x003c */ }; struct _SYSTEM_SESSION_BIGPOOL_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long SessionId; /* +0x0004 */ unsigned long Count; /* +0x0008 */ unsigned char AllocatedInfo[12]; /* +0x000c cc 3b 00 00 */ }; struct _SecPkgContext_NegoPackageInfo { unsigned long PackageMask; /* +0x0000 */ }; struct _SYSTEM_POWER_STATE_CONTEXT { /* unsigned char Reserved1[0]; +0x0000 dc 19 00 00 */ /* unsigned char TargetSystemState[0]; +0x0000 df 3b 00 00 */ /* unsigned char EffectiveSystemState[0]; +0x0000 e0 3b 00 00 */ /* unsigned char CurrentSystemState[0]; +0x0000 e1 1f 00 00 */ /* unsigned char IgnoreHibernationPath[0]; +0x0000 e2 1f 00 00 */ /* unsigned char PseudoTransition[0]; +0x0000 e3 1f 00 00 */ /* unsigned char Reserved2[0]; +0x0000 61 2a 00 00 */ unsigned long ContextAsUlong; /* +0x0000 */ }; struct _PROPSHEETPAGEA { unsigned long dwSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char hInstance[4]; /* +0x0008 f5 12 00 00 */ /* unsigned char pszTemplate[0]; +0x000c bf 12 00 00 */ unsigned char pResource[4]; /* +0x000c a9 1a 00 00 */ /* unsigned char hIcon[0]; +0x0010 92 19 00 00 */ unsigned char pszIcon[4]; /* +0x0010 bf 12 00 00 */ unsigned char pszTitle[4]; /* +0x0014 bf 12 00 00 */ unsigned char pfnDlgProc[4]; /* +0x0018 22 20 00 00 */ long lParam; /* +0x001c */ unsigned char pfnCallback[4]; /* +0x0020 f9 3b 00 00 */ unsigned char pcRefParent[4]; /* +0x0024 75 04 00 00 */ unsigned char pszHeaderTitle[4]; /* +0x0028 bf 12 00 00 */ unsigned char pszHeaderSubTitle[4]; /* +0x002c bf 12 00 00 */ void *hActCtx; /* +0x0030 */ /* unsigned char hbmHeader[0]; +0x0034 b9 14 00 00 */ unsigned char pszbmHeader[4]; /* +0x0034 bf 12 00 00 */ }; struct IWSCacheDataProvider::METADATA_FROM_PROVIDER { unsigned char fUseDataAlreadyInCache[1]; /* +0x0000 30 00 00 00 */ unsigned char fDoNotCacheResult[3]; /* +0x0001 30 00 00 00 */ unsigned char cRetriesRemaining[4]; /* +0x0004 75 00 00 00 */ unsigned long ulValidityTimeInSeconds; /* +0x0008 */ long long lLastModified; /* +0x0010 */ }; struct IWSCacheDataProvider::METADATA_FROM_CACHE { unsigned char fDataInCacheButExpired[8]; /* +0x0000 30 00 00 00 */ long long lLastModifiedTime; /* +0x0008 */ unsigned char cRetriesRemaining[4]; /* +0x0010 75 00 00 00 */ unsigned char pszCacheEntryFilename[4]; /* +0x0014 4f 13 00 00 */ }; struct _FILEGROUPDESCRIPTORW { unsigned char cItems[4]; /* +0x0000 75 00 00 00 */ unsigned char fgd[592]; /* +0x0004 24 3c 00 00 */ }; struct _COVERAGE_MODULE_INFO { unsigned long ModuleInfoSize; /* +0x0000 */ unsigned long IsBinaryLoaded; /* +0x0004 */ unsigned char ModulePathName[8]; /* +0x0008 7c 3b 00 00 */ unsigned long CoverageSectionSize; /* +0x0010 */ unsigned char CoverageSection[4]; /* +0x0014 04 12 00 00 */ }; struct _SYSTEM_PREFETCH_PATCH_INFORMATION { unsigned long PrefetchPatchCount; /* +0x0000 */ }; struct _FILE_FS_VOLUME_INFORMATION { unsigned char VolumeCreationTime[8]; /* +0x0000 db 13 00 00 */ unsigned long VolumeSerialNumber; /* +0x0008 */ unsigned long VolumeLabelLength; /* +0x000c */ unsigned char SupportsObjects; /* +0x0010 */ unsigned char VolumeLabel[6]; /* +0x0012 83 12 00 00 */ }; struct _EFI_DRIVER_ENTRY_LIST { unsigned long NextEntryOffset; /* +0x0000 */ unsigned char DriverEntry[20]; /* +0x0004 4c 3c 00 00 */ }; struct _SYSTEM_HANDLE_TABLE_ENTRY_INFO { unsigned short UniqueProcessId; /* +0x0000 */ unsigned short CreatorBackTraceIndex; /* +0x0002 */ unsigned char ObjectTypeIndex; /* +0x0004 */ unsigned char HandleAttributes; /* +0x0005 */ unsigned short HandleValue; /* +0x0006 */ void *Object; /* +0x0008 */ unsigned long GrantedAccess; /* +0x000c */ }; struct _PROCESS_FOREGROUND_BACKGROUND { unsigned char Foreground; /* +0x0000 */ }; struct _STORAGE_QUERY_DEPENDENT_VOLUME_LEV1_ENTRY { unsigned long EntryLength; /* +0x0000 */ unsigned long DependencyTypeFlags; /* +0x0004 */ unsigned long ProviderSpecificFlags; /* +0x0008 */ unsigned char VirtualStorageType[20]; /* +0x000c 53 3c 00 00 */ }; struct _GENERATE_NAME_CONTEXT { unsigned short Checksum; /* +0x0000 */ unsigned char ChecksumInserted; /* +0x0002 */ unsigned char NameLength; /* +0x0003 */ unsigned char NameBuffer[16]; /* +0x0004 56 3c 00 00 */ unsigned long ExtensionLength; /* +0x0014 */ unsigned char ExtensionBuffer[8]; /* +0x0018 57 3c 00 00 */ unsigned long LastIndexValue; /* +0x0020 */ }; struct _HEAP_EXTENDED_INFORMATION { void *Process; /* +0x0000 */ unsigned long Heap; /* +0x0004 */ unsigned long Level; /* +0x0008 */ unsigned char CallbackRoutine[4]; /* +0x000c 5e 3c 00 00 */ void *CallbackContext; /* +0x0010 */ /* unsigned char ProcessHeapInformation[0]; +0x0014 5f 3c 00 00 */ unsigned char HeapInformation[24]; /* +0x0014 b0 3b 00 00 */ }; struct _BOOT_ENTRY_LIST { unsigned long NextEntryOffset; /* +0x0000 */ unsigned char BootEntry[32]; /* +0x0004 18 3c 00 00 */ }; struct tagREBARINFO { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char fMask[4]; /* +0x0004 75 00 00 00 */ unsigned char himl[4]; /* +0x0008 8d 3c 00 00 */ }; struct _LUTF8_STRING { unsigned long Length; /* +0x0000 */ unsigned long MaximumLength; /* +0x0004 */ unsigned char *Buffer; /* +0x0008 */ }; struct _IO_RESOURCE_DESCRIPTOR { unsigned char Option; /* +0x0000 */ unsigned char Type; /* +0x0001 */ unsigned char ShareDisposition; /* +0x0002 */ unsigned char Spare1; /* +0x0003 */ unsigned short Flags; /* +0x0004 */ unsigned short Spare2; /* +0x0006 */ }; struct tagNMREBARCHEVRON { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char uBand[4]; /* +0x000c 75 00 00 00 */ unsigned char wID[4]; /* +0x0010 75 00 00 00 */ long lParam; /* +0x0014 */ unsigned char rc[16]; /* +0x0018 c0 12 00 00 */ long lParamNM; /* +0x0028 */ }; struct _FILE_MAILSLOT_QUERY_INFORMATION { unsigned long MaximumMessageSize; /* +0x0000 */ unsigned long MailslotQuota; /* +0x0004 */ unsigned long NextMessageSize; /* +0x0008 */ unsigned long MessagesAvailable; /* +0x000c */ unsigned char ReadTimeout[8]; /* +0x0010 db 13 00 00 */ }; struct _ENCRYPTED_DATA_INFO { unsigned long long StartingFileOffset; /* +0x0000 */ unsigned long OutputBufferOffset; /* +0x0008 */ unsigned long BytesWithinFileSize; /* +0x000c */ unsigned long BytesWithinValidDataLength; /* +0x0010 */ unsigned short CompressionFormat; /* +0x0014 */ unsigned char DataUnitShift; /* +0x0016 */ unsigned char ChunkShift; /* +0x0017 */ unsigned char ClusterShift; /* +0x0018 */ unsigned char EncryptionFormat; /* +0x0019 */ unsigned short NumberOfDataBlocks; /* +0x001a */ unsigned char DataBlockSize[4]; /* +0x001c 01 12 00 00 */ }; struct _MUILANGUAGES { unsigned char TotalSize[4]; /* +0x0000 75 00 00 00 */ unsigned short MaxNumLanguages; /* +0x0004 */ unsigned short NumLanguages; /* +0x0006 */ unsigned short NumInstalledLanguages; /* +0x0008 */ unsigned char LangInfos[4]; /* +0x000c a9 3c 00 00 */ }; struct _HEAP_PERFORMANCE_COUNTERS_INFORMATION { unsigned long Size; /* +0x0000 */ unsigned long Version; /* +0x0004 */ unsigned long HeapIndex; /* +0x0008 */ unsigned long LastHeapIndex; /* +0x000c */ unsigned long BaseAddress; /* +0x0010 */ unsigned long ReserveSize; /* +0x0014 */ unsigned long CommitSize; /* +0x0018 */ unsigned long SegmentCount; /* +0x001c */ unsigned long LargeUCRMemory; /* +0x0020 */ unsigned long UCRLength; /* +0x0024 */ unsigned long AllocatedSpace; /* +0x0028 */ unsigned long FreeSpace; /* +0x002c */ unsigned long FreeListLength; /* +0x0030 */ unsigned long Contention; /* +0x0034 */ unsigned long VirtualBlocks; /* +0x0038 */ unsigned long CommitRate; /* +0x003c */ unsigned long DecommitRate; /* +0x0040 */ }; struct tagLVHITTESTINFO { unsigned char pt[8]; /* +0x0000 ce 12 00 00 */ unsigned char flags[4]; /* +0x0008 75 00 00 00 */ unsigned char iItem[4]; /* +0x000c 74 00 00 00 */ unsigned char iSubItem[4]; /* +0x0010 74 00 00 00 */ unsigned char iGroup[4]; /* +0x0014 74 00 00 00 */ }; struct _PLUGPLAY_CONTROL_RELATED_DEVICE_DATA { unsigned char TargetDeviceInstance[8]; /* +0x0000 7c 3b 00 00 */ unsigned long Relation; /* +0x0008 */ unsigned char RelatedDeviceInstance[4]; /* +0x000c 71 04 00 00 */ unsigned long RelatedDeviceInstanceLength; /* +0x0010 */ }; struct _MUILANGINFO { unsigned short Flags; /* +0x0000 */ unsigned short Reserved; /* +0x0002 */ unsigned short LangId; /* +0x0004 */ short LangNameIndex; /* +0x0006 */ unsigned short FallbackTypes; /* +0x0008 */ short NeutralLangSpec; /* +0x000a */ unsigned char FallbackSpecs[8]; /* +0x000c b6 3c 00 00 */ unsigned char AlternateCodePage[8]; /* +0x0014 b6 3c 00 00 */ }; struct _TXFS_CREATE_MINIVERSION_INFO { unsigned short StructureVersion; /* +0x0000 */ unsigned short StructureLength; /* +0x0002 */ unsigned long BaseVersion; /* +0x0004 */ unsigned short MiniVersion; /* +0x0008 */ }; struct _VARIABLE_NAME { unsigned long NextEntryOffset; /* +0x0000 */ unsigned char VendorGuid[16]; /* +0x0004 ce 13 00 00 */ unsigned char Name[4]; /* +0x0014 83 12 00 00 */ }; struct _SYSTEM_POOLTAG_INFORMATION { unsigned long Count; /* +0x0000 */ unsigned char TagInfo[28]; /* +0x0004 e8 3c 00 00 */ }; struct _SYSDBG_CONTROL_SPACE { unsigned long long Address; /* +0x0000 */ void *Buffer; /* +0x0008 */ unsigned long Request; /* +0x000c */ unsigned long Processor; /* +0x0010 */ }; struct _SFV_CREATE { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char pshf[4]; /* +0x0004 ee 3c 00 00 */ unsigned char psvOuter[4]; /* +0x0008 d4 3c 00 00 */ unsigned char psfvcb[4]; /* +0x000c f0 3c 00 00 */ }; struct _FAT_STATISTICS { unsigned long CreateHits; /* +0x0000 */ unsigned long SuccessfulCreates; /* +0x0004 */ unsigned long FailedCreates; /* +0x0008 */ unsigned long NonCachedReads; /* +0x000c */ unsigned long NonCachedReadBytes; /* +0x0010 */ unsigned long NonCachedWrites; /* +0x0014 */ unsigned long NonCachedWriteBytes; /* +0x0018 */ unsigned long NonCachedDiskReads; /* +0x001c */ unsigned long NonCachedDiskWrites; /* +0x0020 */ }; struct _SYSTEM_PROCESS_INFORMATION_EXTENSION { unsigned char DiskCounters[40]; /* +0x0000 9c 3d 00 00 */ unsigned long Flags; /* +0x0028 */ /* unsigned char HasStrongId[0]; +0x0028 4a 12 00 00 */ unsigned char Spare[8]; /* +0x0028 4b 12 00 00 */ }; struct _JOURNAL_SET_KEY_SECURITY_INFORMATION { unsigned char Action[8]; /* +0x0000 9f 3d 00 00 */ unsigned long long RecordNumber; /* +0x0008 */ unsigned char TimeStamp[8]; /* +0x0010 db 13 00 00 */ unsigned char KeyPathName[8]; /* +0x0018 7c 3b 00 00 */ unsigned long OldSecurityDescriptorLength; /* +0x0020 */ void *OldSecurityDescriptor; /* +0x0024 */ unsigned long NewSecurityDescriptorLength; /* +0x0028 */ void *NewSecurityDescriptor; /* +0x002c */ }; struct tagCOMBOBOXEXITEMW { unsigned char mask[4]; /* +0x0000 75 00 00 00 */ unsigned char iItem[4]; /* +0x0004 74 00 00 00 */ unsigned char pszText[4]; /* +0x0008 71 04 00 00 */ unsigned char cchTextMax[4]; /* +0x000c 74 00 00 00 */ unsigned char iImage[4]; /* +0x0010 74 00 00 00 */ unsigned char iSelectedImage[4]; /* +0x0014 74 00 00 00 */ unsigned char iOverlay[4]; /* +0x0018 74 00 00 00 */ unsigned char iIndent[4]; /* +0x001c 74 00 00 00 */ long lParam; /* +0x0020 */ }; struct _SHDESCRIPTIONID { unsigned long dwDescriptionId; /* +0x0000 */ unsigned char clsid[16]; /* +0x0004 ce 13 00 00 */ }; struct _SYSDBG_VIRTUAL { void *Address; /* +0x0000 */ void *Buffer; /* +0x0004 */ unsigned long Request; /* +0x0008 */ }; struct _STRING64 { unsigned short Length; /* +0x0000 */ unsigned short MaximumLength; /* +0x0002 */ unsigned long long Buffer; /* +0x0008 */ }; struct tagNMTVGETINFOTIPW { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char pszText[4]; /* +0x000c 71 04 00 00 */ unsigned char cchTextMax[4]; /* +0x0010 74 00 00 00 */ unsigned char hItem[4]; /* +0x0014 b1 3d 00 00 */ long lParam; /* +0x0018 */ }; struct _STORAGE_QUERY_DEPENDENT_VOLUME_LEV2_ENTRY { unsigned long EntryLength; /* +0x0000 */ unsigned long DependencyTypeFlags; /* +0x0004 */ unsigned long ProviderSpecificFlags; /* +0x0008 */ unsigned char VirtualStorageType[20]; /* +0x000c 53 3c 00 00 */ unsigned long AncestorLevel; /* +0x0020 */ unsigned long HostVolumeNameOffset; /* +0x0024 */ unsigned long HostVolumeNameSize; /* +0x0028 */ unsigned long DependentVolumeNameOffset; /* +0x002c */ unsigned long DependentVolumeNameSize; /* +0x0030 */ unsigned long RelativePathOffset; /* +0x0034 */ unsigned long RelativePathSize; /* +0x0038 */ unsigned long DependentDeviceNameOffset; /* +0x003c */ unsigned long DependentDeviceNameSize; /* +0x0040 */ }; struct _CSV_NAMESPACE_INFO { unsigned long Version; /* +0x0000 */ unsigned long DeviceNumber; /* +0x0004 */ unsigned char StartingOffset[8]; /* +0x0008 db 13 00 00 */ unsigned long SectorSize; /* +0x0010 */ }; struct _SYSTEM_VERIFIER_ISSUE { unsigned long IssueType; /* +0x0000 */ void *Address; /* +0x0004 */ unsigned char Parameters[8]; /* +0x0008 c3 15 00 00 */ }; struct _CPTABLEINFO { unsigned short CodePage; /* +0x0000 */ unsigned short MaximumCharacterSize; /* +0x0002 */ unsigned short DefaultChar; /* +0x0004 */ unsigned short UniDefaultChar; /* +0x0006 */ unsigned short TransDefaultChar; /* +0x0008 */ unsigned short TransUniDefaultChar; /* +0x000a */ unsigned short DBCSCodePage; /* +0x000c */ unsigned char LeadByte[14]; /* +0x000e 9d 14 00 00 */ unsigned short *MultiByteTable; /* +0x001c */ void *WideCharTable; /* +0x0020 */ unsigned short *DBCSRanges; /* +0x0024 */ unsigned short *DBCSOffsets; /* +0x0028 */ }; struct tagNMDATETIMEWMKEYDOWNW { unsigned char nmhdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char nVirtKey[4]; /* +0x000c 74 00 00 00 */ unsigned char pszFormat[4]; /* +0x0010 4f 13 00 00 */ unsigned char st[16]; /* +0x0014 7d 13 00 00 */ }; struct _SYSTEM_LEGACY_DRIVER_INFORMATION { unsigned long VetoType; /* +0x0000 */ unsigned char VetoList[8]; /* +0x0004 7c 3b 00 00 */ }; struct _TRACE_GUID_PROPERTIES { unsigned char Guid[16]; /* +0x0000 ce 13 00 00 */ unsigned long GuidType; /* +0x0010 */ unsigned long LoggerId; /* +0x0014 */ unsigned long EnableLevel; /* +0x0018 */ unsigned long EnableFlags; /* +0x001c */ unsigned char IsEnable; /* +0x0020 */ }; struct _SecPkgContext_ProtoInfoA { char *sProtocolName; /* +0x0000 */ unsigned long majorVersion; /* +0x0004 */ unsigned long minorVersion; /* +0x0008 */ }; struct _THREAD_BASIC_INFORMATION { long ExitStatus; /* +0x0000 */ unsigned char TebBaseAddress[4]; /* +0x0004 04 3e 00 00 */ unsigned char ClientId[8]; /* +0x0008 ab 3b 00 00 */ unsigned long AffinityMask; /* +0x0010 */ long Priority; /* +0x0014 */ long BasePriority; /* +0x0018 */ }; struct _RTL_UMS_SCHEDULER_STARTUP_INFO { unsigned long UmsVersion; /* +0x0000 */ unsigned char CompletionList[4]; /* +0x0004 08 3e 00 00 */ unsigned char SchedulerProc[4]; /* +0x0008 d0 21 00 00 */ void *SchedulerParam; /* +0x000c */ }; struct tagNMOBJECTNOTIFY { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char iItem[4]; /* +0x000c 74 00 00 00 */ unsigned char piid[4]; /* +0x0010 0b 17 00 00 */ void *pObject; /* +0x0014 */ unsigned char hResult[4]; /* +0x0018 08 00 00 00 */ unsigned long dwFlags; /* +0x001c */ }; struct tagXHR_COOKIE { unsigned char pwszUrl[4]; /* +0x0000 71 04 00 00 */ unsigned char pwszName[4]; /* +0x0004 71 04 00 00 */ unsigned char pwszValue[4]; /* +0x0008 71 04 00 00 */ unsigned char pwszP3PPolicy[4]; /* +0x000c 71 04 00 00 */ unsigned char ftExpires[8]; /* +0x0010 91 14 00 00 */ unsigned long dwFlags; /* +0x0018 */ }; struct _ALPC_PORT_MESSAGE_ZONE_INFORMATION { void *Buffer; /* +0x0000 */ unsigned long Size; /* +0x0004 */ }; struct tagNMLVGETINFOTIPA { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned long dwFlags; /* +0x000c */ char *pszText; /* +0x0010 */ unsigned char cchTextMax[4]; /* +0x0014 74 00 00 00 */ unsigned char iItem[4]; /* +0x0018 74 00 00 00 */ unsigned char iSubItem[4]; /* +0x001c 74 00 00 00 */ long lParam; /* +0x0020 */ }; struct _SCRUB_DATA_INPUT { unsigned long Flags; /* +0x0000 */ unsigned long MaximumIos; /* +0x0004 */ unsigned char Reserved[8]; /* +0x0008 c3 15 00 00 */ unsigned char ResumeContext[816]; /* +0x0010 27 3e 00 00 */ }; struct SHARDAPPIDINFO { unsigned char psi[4]; /* +0x0000 bc 3c 00 00 */ unsigned char pszAppID[4]; /* +0x0004 4f 13 00 00 */ }; struct _FILE_FS_DRIVER_PATH_INFORMATION { unsigned char DriverInPath; /* +0x0000 */ unsigned long DriverNameLength; /* +0x0004 */ unsigned char DriverName[4]; /* +0x0008 83 12 00 00 */ }; struct _NLSTABLEINFO { unsigned char OemTableInfo[44]; /* +0x0000 4f 3e 00 00 */ unsigned char AnsiTableInfo[44]; /* +0x002c 4f 3e 00 00 */ unsigned short *UpperCaseTable; /* +0x0058 */ unsigned short *LowerCaseTable; /* +0x005c */ }; struct SHARDAPPIDINFOIDLIST { unsigned char pidl[4]; /* +0x0000 e2 3d 00 00 */ unsigned char pszAppID[4]; /* +0x0004 4f 13 00 00 */ }; struct _SYSTEM_OBJECTTYPE_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long NumberOfObjects; /* +0x0004 */ unsigned long NumberOfHandles; /* +0x0008 */ unsigned long TypeIndex; /* +0x000c */ unsigned long InvalidAttributes; /* +0x0010 */ unsigned char GenericMapping[16]; /* +0x0014 f1 1c 00 00 */ unsigned long ValidAccessMask; /* +0x0024 */ unsigned long PoolType; /* +0x0028 */ unsigned char SecurityRequired; /* +0x002c */ unsigned char WaitableObject; /* +0x002d */ unsigned char TypeName[8]; /* +0x0030 7c 3b 00 00 */ }; struct _PLUGPLAY_CONTROL_INTERFACE_ALIAS_DATA { unsigned char SymbolicLinkName[8]; /* +0x0000 7c 3b 00 00 */ unsigned char AliasClassGuid[4]; /* +0x0008 78 15 00 00 */ unsigned char AliasSymbolicLinkName[4]; /* +0x000c 71 04 00 00 */ unsigned long AliasSymbolicLinkNameLength; /* +0x0010 */ }; struct _RTL_HEAP_ENTRY { unsigned long Size; /* +0x0000 */ unsigned short Flags; /* +0x0004 */ unsigned short AllocatorBackTraceIndex; /* +0x0006 */ }; struct _FINDFIRSTACTIVATIONCONTEXTSECTION { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned char ExtensionGuid[4]; /* +0x0008 0b 17 00 00 */ unsigned long Id; /* +0x000c */ unsigned long Depth; /* +0x0010 */ unsigned long OutFlags; /* +0x0014 */ }; struct tagNMPGHOTITEM { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char idOld[4]; /* +0x000c 74 00 00 00 */ unsigned char idNew[4]; /* +0x0010 74 00 00 00 */ unsigned long dwFlags; /* +0x0014 */ }; struct _SET_PURGE_FAILURE_MODE_INPUT { unsigned long Flags; /* +0x0000 */ }; struct DELEGATEITEMID { unsigned short cbSize; /* +0x0000 */ unsigned short wOuter; /* +0x0002 */ unsigned short cbInner; /* +0x0004 */ unsigned char rgb[1]; /* +0x0006 04 12 00 00 */ }; struct _RTL_TRACE_BLOCK { unsigned long Magic; /* +0x0000 */ unsigned long Count; /* +0x0004 */ unsigned long Size; /* +0x0008 */ unsigned long UserCount; /* +0x000c */ unsigned long UserSize; /* +0x0010 */ void *UserContext; /* +0x0014 */ unsigned char Next[4]; /* +0x0018 a9 3e 00 00 */ unsigned char Trace[4]; /* +0x001c 74 12 00 00 */ }; struct _STRING { unsigned short Length; /* +0x0000 */ unsigned short MaximumLength; /* +0x0002 */ char *Buffer; /* +0x0004 */ }; struct _PS_MEMORY_RESERVE { void *ReserveAddress; /* +0x0000 */ unsigned long ReserveSize; /* +0x0004 */ }; struct _SYSTEM_SET_TIME_ADJUST_INFORMATION { unsigned long TimeAdjustment; /* +0x0000 */ unsigned char Enable; /* +0x0004 */ }; struct _FILE_PIPE_ASSIGN_EVENT_BUFFER { void *EventHandle; /* +0x0000 */ unsigned long KeyValue; /* +0x0004 */ }; struct tagNMCUSTOMDRAWINFO { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned long dwDrawStage; /* +0x000c */ unsigned char hdc[4]; /* +0x0010 32 18 00 00 */ unsigned char rc[16]; /* +0x0014 c0 12 00 00 */ unsigned long dwItemSpec; /* +0x0024 */ unsigned char uItemState[4]; /* +0x0028 75 00 00 00 */ long lItemlParam; /* +0x002c */ }; struct _PROTOGON_STATISTICS { unsigned long Unused; /* +0x0000 */ }; struct _MCA_EXCEPTION { unsigned long VersionNumber; /* +0x0000 */ unsigned char ExceptionType[4]; /* +0x0004 e2 3e 00 00 */ unsigned char TimeStamp[8]; /* +0x0008 db 13 00 00 */ unsigned long ProcessorNumber; /* +0x0010 */ unsigned long Reserved1; /* +0x0014 */ }; struct _SecPkgCredentials_NamesW { unsigned char sUserName[4]; /* +0x0000 71 04 00 00 */ }; struct _SE_PACKAGE_CAPABILITY_INFO { unsigned long Remaining; /* +0x0000 */ unsigned long PackageGrantedAccess; /* +0x0004 */ unsigned long CapabilityGrantedAccess; /* +0x0008 */ unsigned long UserGroupsRemaining; /* +0x000c */ unsigned char PackagesPresent; /* +0x0010 */ unsigned char PackageMatch; /* +0x0011 */ unsigned char CapabilityMatch; /* +0x0012 */ unsigned char LogPermissiveFailure; /* +0x0013 */ }; struct _DRIVER_VERIFIER_THUNK_PAIRS { unsigned char PristineRoutine[4]; /* +0x0000 96 13 00 00 */ unsigned char NewRoutine[4]; /* +0x0004 96 13 00 00 */ }; struct _SYSTEM_VERIFIER_TRIAGE_INFORMATION { unsigned long ActionTaken; /* +0x0000 */ unsigned char CrashData[20]; /* +0x0004 5a 15 00 00 */ unsigned long VerifierMode; /* +0x0018 */ unsigned long VerifierFlags; /* +0x001c */ unsigned char VerifierTargets[512]; /* +0x0020 49 22 00 00 */ }; struct _JOURNAL_RENAME_KEY_INFORMATION { unsigned char Action[8]; /* +0x0000 9f 3d 00 00 */ unsigned long long RecordNumber; /* +0x0008 */ unsigned char TimeStamp[8]; /* +0x0010 db 13 00 00 */ unsigned char KeyPathName[8]; /* +0x0018 7c 3b 00 00 */ unsigned char KeyKeyName[8]; /* +0x0020 7c 3b 00 00 */ }; struct _NMTBCUSTOMDRAW { unsigned char nmcd[48]; /* +0x0000 f7 3e 00 00 */ unsigned char hbrMonoDither[4]; /* +0x0030 98 1a 00 00 */ unsigned char hbrLines[4]; /* +0x0034 98 1a 00 00 */ unsigned char hpenLines[4]; /* +0x0038 7b 38 00 00 */ unsigned long clrText; /* +0x003c */ unsigned long clrMark; /* +0x0040 */ unsigned long clrTextHighlight; /* +0x0044 */ unsigned long clrBtnFace; /* +0x0048 */ unsigned long clrBtnHighlight; /* +0x004c */ unsigned long clrHighlightHotTrack; /* +0x0050 */ unsigned char rcText[16]; /* +0x0054 c0 12 00 00 */ unsigned char nStringBkMode[4]; /* +0x0064 74 00 00 00 */ unsigned char nHLStringBkMode[4]; /* +0x0068 74 00 00 00 */ unsigned char iListGap[4]; /* +0x006c 74 00 00 00 */ }; struct _FILE_PIPE_LOCAL_INFORMATION { unsigned long NamedPipeType; /* +0x0000 */ unsigned long NamedPipeConfiguration; /* +0x0004 */ unsigned long MaximumInstances; /* +0x0008 */ unsigned long CurrentInstances; /* +0x000c */ unsigned long InboundQuota; /* +0x0010 */ unsigned long ReadDataAvailable; /* +0x0014 */ unsigned long OutboundQuota; /* +0x0018 */ unsigned long WriteQuotaAvailable; /* +0x001c */ unsigned long NamedPipeState; /* +0x0020 */ unsigned long NamedPipeEnd; /* +0x0024 */ }; struct _MUILANGLIST { unsigned char TotalSize[4]; /* +0x0000 75 00 00 00 */ unsigned short NumLanguages; /* +0x0004 */ unsigned short MaxNumLanguages; /* +0x0006 */ unsigned char bUseUseMachineConfigList; /* +0x0008 */ unsigned char RegInfo[4]; /* +0x000c 10 3f 00 00 */ unsigned char Languages[8]; /* +0x0010 12 3f 00 00 */ unsigned long long ullMask; /* +0x0018 */ unsigned char uConsoleFlag[4]; /* +0x0020 75 00 00 00 */ unsigned char Checksum[20]; /* +0x0024 13 3f 00 00 */ }; struct _ACTIVATION_CONTEXT_SECTION_KEYED_DATA { unsigned long Size; /* +0x0000 */ unsigned long DataFormatVersion; /* +0x0004 */ void *Data; /* +0x0008 */ unsigned long Length; /* +0x000c */ void *SectionGlobalData; /* +0x0010 */ unsigned long SectionGlobalDataLength; /* +0x0014 */ void *SectionBase; /* +0x0018 */ unsigned long SectionTotalLength; /* +0x001c */ unsigned char ActivationContext[4]; /* +0x0020 c4 31 00 00 */ unsigned long AssemblyRosterIndex; /* +0x0024 */ unsigned long Flags; /* +0x0028 */ unsigned char AssemblyMetadata[20]; /* +0x002c 16 3f 00 00 */ }; struct tagNMREBARSPLITTER { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char rcSizing[16]; /* +0x000c c0 12 00 00 */ }; struct _PROCESSOR_IDLE_STATE { unsigned char StateType; /* +0x0000 */ unsigned long StateFlags; /* +0x0004 */ unsigned long HardwareLatency; /* +0x0008 */ unsigned long Power; /* +0x000c */ unsigned long Context; /* +0x0010 */ unsigned char Handler[4]; /* +0x0014 21 3f 00 00 */ }; struct _PLUGPLAY_CUSTOM_NOTIFICATION { unsigned char HeaderInfo[20]; /* +0x0000 26 3f 00 00 */ void *FileObject; /* +0x0014 */ long NameBufferOffset; /* +0x0018 */ unsigned char CustomDataBuffer[4]; /* +0x001c 04 12 00 00 */ }; struct _UNICODE_PREFIX_TABLE_ENTRY { short NodeTypeCode; /* +0x0000 */ short NameLength; /* +0x0002 */ unsigned char NextPrefixTree[4]; /* +0x0004 2c 3f 00 00 */ unsigned char CaseMatch[4]; /* +0x0008 2c 3f 00 00 */ unsigned char Links[12]; /* +0x000c 2d 3f 00 00 */ unsigned char Prefix[4]; /* +0x0018 2e 3f 00 00 */ }; struct _CMINVOKECOMMANDINFOEX { unsigned long cbSize; /* +0x0000 */ unsigned long fMask; /* +0x0004 */ unsigned char hwnd[4]; /* +0x0008 fc 11 00 00 */ unsigned char lpVerb[4]; /* +0x000c bf 12 00 00 */ unsigned char lpParameters[4]; /* +0x0010 bf 12 00 00 */ unsigned char lpDirectory[4]; /* +0x0014 bf 12 00 00 */ unsigned char nShow[4]; /* +0x0018 74 00 00 00 */ unsigned long dwHotKey; /* +0x001c */ void *hIcon; /* +0x0020 */ unsigned char lpTitle[4]; /* +0x0024 bf 12 00 00 */ unsigned char lpVerbW[4]; /* +0x0028 4f 13 00 00 */ unsigned char lpParametersW[4]; /* +0x002c 4f 13 00 00 */ unsigned char lpDirectoryW[4]; /* +0x0030 4f 13 00 00 */ unsigned char lpTitleW[4]; /* +0x0034 4f 13 00 00 */ unsigned char ptInvoke[8]; /* +0x0038 ce 12 00 00 */ }; struct _SYSTEM_SPECIAL_POOL_INFORMATION { unsigned long PoolTag; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ }; struct _COVERAGE_MODULE_REQUEST { unsigned char RequestType[20]; /* +0x0000 c2 3e 00 00 */ }; struct _RTL_PROCESS_VERIFIER_OPTIONS { unsigned long SizeStruct; /* +0x0000 */ unsigned long Option; /* +0x0004 */ unsigned char OptionData[4]; /* +0x0008 04 12 00 00 */ }; struct _SecPkgContext_StreamSizes { unsigned long cbHeader; /* +0x0000 */ unsigned long cbTrailer; /* +0x0004 */ unsigned long cbMaximumMessage; /* +0x0008 */ unsigned long cBuffers; /* +0x000c */ unsigned long cbBlockSize; /* +0x0010 */ }; struct tagTCITEMHEADERA { unsigned char mask[4]; /* +0x0000 75 00 00 00 */ unsigned char lpReserved1[4]; /* +0x0004 75 00 00 00 */ unsigned char lpReserved2[4]; /* +0x0008 75 00 00 00 */ char *pszText; /* +0x000c */ unsigned char cchTextMax[4]; /* +0x0010 74 00 00 00 */ unsigned char iImage[4]; /* +0x0014 74 00 00 00 */ }; struct _RTL_UMS_CONTEXT { unsigned char Link[4]; /* +0x0000 78 18 00 00 */ unsigned char Context[716]; /* +0x0004 7e 1e 00 00 */ void *Teb; /* +0x02d0 */ void *UserContext; /* +0x02d4 */ /* unsigned char ScheduledThread[0]; +0x02d8 54 3f 00 00 */ /* unsigned char Suspended[0]; +0x02d8 55 3f 00 00 */ /* unsigned char VolatileContext[0]; +0x02d8 56 3f 00 00 */ /* unsigned char Terminated[0]; +0x02d8 57 3f 00 00 */ /* unsigned char DebugActive[0]; +0x02d8 58 3f 00 00 */ /* unsigned char RunningOnSelfThread[0]; +0x02d8 59 3f 00 00 */ /* unsigned char DenyRunningOnSelfThread[0]; +0x02d8 5a 3f 00 00 */ unsigned char Flags[8]; /* +0x02d8 5b 3f 00 00 */ /* unsigned char KernelUpdateLock[0]; +0x02e0 5d 3f 00 00 */ /* unsigned char PrimaryClientID[0]; +0x02e0 5e 3f 00 00 */ unsigned char ContextLock[8]; /* +0x02e0 5c 3f 00 00 */ unsigned char PrimaryUmsContext[4]; /* +0x02e8 60 3f 00 00 */ unsigned long SwitchCount; /* +0x02ec */ unsigned long KernelYieldCount; /* +0x02f0 */ unsigned long MixedYieldCount; /* +0x02f4 */ unsigned long YieldCount; /* +0x02f8 */ }; struct tagNMLVFINDITEMA { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char iStart[4]; /* +0x000c 74 00 00 00 */ unsigned char lvfi[24]; /* +0x0010 64 3f 00 00 */ }; struct XSAVE_CPU_INFO { unsigned char Processor; /* +0x0000 */ unsigned short Family; /* +0x0002 */ unsigned short Model; /* +0x0004 */ unsigned short Stepping; /* +0x0006 */ unsigned short ExtendedModel; /* +0x0008 */ unsigned long ExtendedFamily; /* +0x000c */ unsigned long long MicrocodeVersion; /* +0x0010 */ unsigned long Reserved; /* +0x0018 */ }; struct _OBJECT_DIRECTORY_INFORMATION { unsigned char Name[8]; /* +0x0000 7c 3b 00 00 */ unsigned char TypeName[8]; /* +0x0008 7c 3b 00 00 */ }; struct _JOURNAL_CLIENT_INFORMATION { unsigned char StartTimeStamp[8]; /* +0x0000 db 13 00 00 */ unsigned char CurrentTimeStamp[8]; /* +0x0008 db 13 00 00 */ unsigned long long RecordsToProcess; /* +0x0010 */ unsigned long RelativeFillLevel; /* +0x0018 */ }; struct _RTL_BITMAP { unsigned long SizeOfBitMap; /* +0x0000 */ unsigned long *Buffer; /* +0x0004 */ }; struct _FILE_REPARSE_POINT_INFORMATION { long long FileReference; /* +0x0000 */ unsigned long Tag; /* +0x0008 */ }; struct _RTL_STACK_CONTEXT_ENTRY { unsigned long Address; /* +0x0000 */ unsigned long Data; /* +0x0004 */ }; struct tagPAGESET { unsigned long cbStruct; /* +0x0000 */ unsigned char fOddPages[4]; /* +0x0004 74 00 00 00 */ unsigned char fEvenPages[4]; /* +0x0008 74 00 00 00 */ unsigned long cPageRange; /* +0x000c */ unsigned char rgPages[8]; /* +0x0010 a5 3f 00 00 */ }; struct _TRIPLE_LIST_ITERATOR { unsigned char List[4]; /* +0x0000 ba 3f 00 00 */ unsigned char NextEntry[4]; /* +0x0004 f4 3e 00 00 */ unsigned char ActiveList; /* +0x0008 */ unsigned char ProbeReads; /* +0x0009 */ unsigned char ReturnDataOffset; /* +0x000a */ unsigned char Wow64List; /* +0x000b */ }; struct tagNMTREEVIEWA { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char action[4]; /* +0x000c 75 00 00 00 */ unsigned char itemOld[40]; /* +0x0010 bd 3f 00 00 */ unsigned char itemNew[40]; /* +0x0038 bd 3f 00 00 */ unsigned char ptDrag[8]; /* +0x0060 ce 12 00 00 */ }; struct _PO_WAKE_SOURCE_TIMER { unsigned char Header[8]; /* +0x0000 c0 3f 00 00 */ unsigned char Reason[24]; /* +0x0008 c1 3f 00 00 */ }; struct _CM_PNP_BIOS_INSTALLATION_CHECK { unsigned char Signature[4]; /* +0x0000 ae 14 00 00 */ unsigned char Revision; /* +0x0004 */ unsigned char Length; /* +0x0005 */ unsigned short ControlField; /* +0x0006 */ unsigned char Checksum; /* +0x0008 */ unsigned long EventFlagAddress; /* +0x0009 */ unsigned short RealModeEntryOffset; /* +0x000d */ unsigned short RealModeEntrySegment; /* +0x000f */ unsigned short ProtectedModeEntryOffset; /* +0x0011 */ unsigned long ProtectedModeCodeBaseAddress; /* +0x0013 */ unsigned long OemDeviceId; /* +0x0017 */ unsigned short RealModeDataBaseAddress; /* +0x001b */ unsigned long ProtectedModeDataBaseAddress; /* +0x001d */ }; struct _PROCESS_TLS_INFORMATION { unsigned long Flags; /* +0x0000 */ unsigned long OperationType; /* +0x0004 */ unsigned long ThreadDataCount; /* +0x0008 */ unsigned long TlsIndex; /* +0x000c */ unsigned long PreviousCount; /* +0x000c */ unsigned char ThreadData[12]; /* +0x0010 ed 3f 00 00 */ }; struct _SYSTEM_ACPI_AUDIT_INFORMATION { unsigned long RsdpCount; /* +0x0000 */ /* unsigned char SameRsdt[0]; +0x0004 4a 12 00 00 */ /* unsigned char SlicPresent[0]; +0x0004 9b 15 00 00 */ unsigned char SlicDifferent[4]; /* +0x0004 68 18 00 00 */ }; struct _SecPkgContext_SubjectAttributes { void *AttributeInfo; /* +0x0000 */ }; struct _SECURITY_FUNCTION_TABLE_A { unsigned long dwVersion; /* +0x0000 */ unsigned char EnumerateSecurityPackagesA[4]; /* +0x0004 fb 3f 00 00 */ unsigned char QueryCredentialsAttributesA[4]; /* +0x0008 fe 3f 00 00 */ unsigned char AcquireCredentialsHandleA[4]; /* +0x000c 04 40 00 00 */ unsigned char FreeCredentialsHandle[4]; /* +0x0010 07 40 00 00 */ void *Reserved2; /* +0x0014 */ unsigned char InitializeSecurityContextA[4]; /* +0x0018 0a 40 00 00 */ unsigned char AcceptSecurityContext[4]; /* +0x001c 0d 40 00 00 */ unsigned char CompleteAuthToken[4]; /* +0x0020 10 40 00 00 */ unsigned char DeleteSecurityContext[4]; /* +0x0024 07 40 00 00 */ unsigned char ApplyControlToken[4]; /* +0x0028 10 40 00 00 */ unsigned char QueryContextAttributesA[4]; /* +0x002c fe 3f 00 00 */ unsigned char ImpersonateSecurityContext[4]; /* +0x0030 07 40 00 00 */ unsigned char RevertSecurityContext[4]; /* +0x0034 07 40 00 00 */ unsigned char MakeSignature[4]; /* +0x0038 99 3c 00 00 */ unsigned char VerifySignature[4]; /* +0x003c 13 40 00 00 */ unsigned char FreeContextBuffer[4]; /* +0x0040 15 40 00 00 */ unsigned char QuerySecurityPackageInfoA[4]; /* +0x0044 18 40 00 00 */ void *Reserved3; /* +0x0048 */ void *Reserved4; /* +0x004c */ unsigned char ExportSecurityContext[4]; /* +0x0050 1d 40 00 00 */ unsigned char ImportSecurityContextA[4]; /* +0x0054 20 40 00 00 */ unsigned char AddCredentialsA[4]; /* +0x0058 23 40 00 00 */ void *Reserved8; /* +0x005c */ unsigned char QuerySecurityContextToken[4]; /* +0x0060 1e 3c 00 00 */ unsigned char EncryptMessage[4]; /* +0x0064 99 3c 00 00 */ unsigned char DecryptMessage[4]; /* +0x0068 13 40 00 00 */ unsigned char SetContextAttributesA[4]; /* +0x006c bf 3e 00 00 */ unsigned char SetCredentialsAttributesA[4]; /* +0x0070 bf 3e 00 00 */ unsigned char ChangeAccountPasswordA[4]; /* +0x0074 26 40 00 00 */ }; struct _MOF_FIELD { unsigned long long DataPtr; /* +0x0000 */ unsigned long Length; /* +0x0008 */ unsigned long DataType; /* +0x000c */ }; struct _PROPSHEETHEADERW_V2 { unsigned long dwSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char hwndParent[4]; /* +0x0008 fc 11 00 00 */ unsigned char hInstance[4]; /* +0x000c f5 12 00 00 */ /* unsigned char hIcon[0]; +0x0010 92 19 00 00 */ unsigned char pszIcon[4]; /* +0x0010 4f 13 00 00 */ unsigned char pszCaption[4]; /* +0x0014 4f 13 00 00 */ unsigned char nPages[4]; /* +0x0018 75 00 00 00 */ /* unsigned char nStartPage[0]; +0x001c 75 00 00 00 */ unsigned char pStartPage[4]; /* +0x001c 4f 13 00 00 */ /* unsigned char ppsp[0]; +0x0020 34 40 00 00 */ unsigned char phpage[4]; /* +0x0020 37 40 00 00 */ unsigned char pfnCallback[4]; /* +0x0024 3a 40 00 00 */ /* unsigned char hbmWatermark[0]; +0x0028 b9 14 00 00 */ unsigned char pszbmWatermark[4]; /* +0x0028 4f 13 00 00 */ unsigned char hplWatermark[4]; /* +0x002c 67 18 00 00 */ /* unsigned char hbmHeader[0]; +0x0030 b9 14 00 00 */ unsigned char pszbmHeader[4]; /* +0x0030 4f 13 00 00 */ }; struct _IO_SESSION_CONNECT_INFO { unsigned long SessionId; /* +0x0000 */ unsigned char LocalSession; /* +0x0004 */ }; struct tagLVDISPINFOW { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char item[60]; /* +0x000c 57 40 00 00 */ }; struct _FILE_LEVEL_TRIM_RANGE { unsigned long long Offset; /* +0x0000 */ unsigned long long Length; /* +0x0008 */ }; struct tagTRBTHUMBPOSCHANGING { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned long dwPos; /* +0x000c */ unsigned char nReason[4]; /* +0x0010 74 00 00 00 */ }; struct _TASKDIALOG_BUTTON { unsigned char nButtonID[4]; /* +0x0000 74 00 00 00 */ unsigned char pszButtonText[4]; /* +0x0004 4f 13 00 00 */ }; struct _REQUEST_OPLOCK_INPUT_BUFFER { unsigned short StructureVersion; /* +0x0000 */ unsigned short StructureLength; /* +0x0002 */ unsigned long RequestedOplockLevel; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ }; struct tagREBARBANDINFOA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char fMask[4]; /* +0x0004 75 00 00 00 */ unsigned char fStyle[4]; /* +0x0008 75 00 00 00 */ unsigned long clrFore; /* +0x000c */ unsigned long clrBack; /* +0x0010 */ char *lpText; /* +0x0014 */ unsigned char cch[4]; /* +0x0018 75 00 00 00 */ unsigned char iImage[4]; /* +0x001c 74 00 00 00 */ unsigned char hwndChild[4]; /* +0x0020 fc 11 00 00 */ unsigned char cxMinChild[4]; /* +0x0024 75 00 00 00 */ unsigned char cyMinChild[4]; /* +0x0028 75 00 00 00 */ unsigned char cx[4]; /* +0x002c 75 00 00 00 */ unsigned char hbmBack[4]; /* +0x0030 b9 14 00 00 */ unsigned char wID[4]; /* +0x0034 75 00 00 00 */ unsigned char cyChild[4]; /* +0x0038 75 00 00 00 */ unsigned char cyMaxChild[4]; /* +0x003c 75 00 00 00 */ unsigned char cyIntegral[4]; /* +0x0040 75 00 00 00 */ unsigned char cxIdeal[4]; /* +0x0044 75 00 00 00 */ long lParam; /* +0x0048 */ unsigned char cxHeader[4]; /* +0x004c 75 00 00 00 */ unsigned char rcChevronLocation[16]; /* +0x0050 c0 12 00 00 */ unsigned char uChevronState[4]; /* +0x0060 75 00 00 00 */ }; struct _TT_HITTESTINFOA { unsigned char hwnd[4]; /* +0x0000 fc 11 00 00 */ unsigned char pt[8]; /* +0x0004 ce 12 00 00 */ unsigned char ti[48]; /* +0x000c 97 40 00 00 */ }; struct _PHYSICAL_CHANNEL_RUN { unsigned long NodeNumber; /* +0x0000 */ unsigned long ChannelNumber; /* +0x0004 */ unsigned long long BasePage; /* +0x0008 */ unsigned long long PageCount; /* +0x0010 */ unsigned long Flags; /* +0x0018 */ }; struct _PLUGPLAY_CONTROL_USER_RESPONSE_DATA { unsigned long Response; /* +0x0000 */ unsigned char VetoType[4]; /* +0x0004 a0 40 00 00 */ unsigned char VetoName[4]; /* +0x0008 71 04 00 00 */ unsigned long VetoNameLength; /* +0x000c */ }; struct _FILE_ZERO_DATA_INFORMATION { unsigned char FileOffset[8]; /* +0x0000 db 13 00 00 */ unsigned char BeyondFinalZero[8]; /* +0x0008 db 13 00 00 */ }; struct _ENCRYPTION_BUFFER { unsigned long EncryptionOperation; /* +0x0000 */ unsigned char Private[4]; /* +0x0004 04 12 00 00 */ }; struct _SYSTEM_POWER_STATE_DISABLE_REASON { unsigned char AffectedState[8]; /* +0x0000 20 1a 00 00 */ unsigned long PowerReasonCode; /* +0x0008 */ unsigned long PowerReasonLength; /* +0x000c */ }; struct _PLUGPLAY_CONTROL_DEPTH_DATA { unsigned char DeviceInstance[8]; /* +0x0000 7c 3b 00 00 */ unsigned long DeviceDepth; /* +0x0008 */ }; struct tagNMRBAUTOSIZE { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char fChanged[4]; /* +0x000c 74 00 00 00 */ unsigned char rcTarget[16]; /* +0x0010 c0 12 00 00 */ unsigned char rcActual[16]; /* +0x0020 c0 12 00 00 */ }; struct tagLVCOLUMNW { unsigned char mask[4]; /* +0x0000 75 00 00 00 */ unsigned char fmt[4]; /* +0x0004 74 00 00 00 */ unsigned char cx[4]; /* +0x0008 74 00 00 00 */ unsigned char pszText[4]; /* +0x000c 71 04 00 00 */ unsigned char cchTextMax[4]; /* +0x0010 74 00 00 00 */ unsigned char iSubItem[4]; /* +0x0014 74 00 00 00 */ unsigned char iImage[4]; /* +0x0018 74 00 00 00 */ unsigned char iOrder[4]; /* +0x001c 74 00 00 00 */ unsigned char cxMin[4]; /* +0x0020 74 00 00 00 */ unsigned char cxDefault[4]; /* +0x0024 74 00 00 00 */ unsigned char cxIdeal[4]; /* +0x0028 74 00 00 00 */ }; struct tagMCGRIDINFO { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwPart; /* +0x0004 */ unsigned long dwFlags; /* +0x0008 */ unsigned char iCalendar[4]; /* +0x000c 74 00 00 00 */ unsigned char iRow[4]; /* +0x0010 74 00 00 00 */ unsigned char iCol[4]; /* +0x0014 74 00 00 00 */ unsigned char bSelected[4]; /* +0x0018 74 00 00 00 */ unsigned char stStart[16]; /* +0x001c 7d 13 00 00 */ unsigned char stEnd[16]; /* +0x002c 7d 13 00 00 */ unsigned char rc[16]; /* +0x003c c0 12 00 00 */ unsigned char pszName[4]; /* +0x004c 71 04 00 00 */ unsigned char cchName[4]; /* +0x0050 75 00 00 00 */ }; struct tagNMTOOLBARW { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char iItem[4]; /* +0x000c 74 00 00 00 */ unsigned char tbButton[20]; /* +0x0010 8a 3c 00 00 */ unsigned char cchText[4]; /* +0x0024 74 00 00 00 */ unsigned char pszText[4]; /* +0x0028 71 04 00 00 */ unsigned char rcButton[16]; /* +0x002c c0 12 00 00 */ }; struct _TOKEN_SECURITY_ATTRIBUTE_RELATIVE_V1 { unsigned long Name; /* +0x0000 */ unsigned short ValueType; /* +0x0004 */ unsigned short Reserved; /* +0x0006 */ unsigned long Flags; /* +0x0008 */ unsigned long ValueCount; /* +0x000c */ }; struct _XSAVE_POLICY { unsigned long Version; /* +0x0000 */ unsigned long Size; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ unsigned long MaxSaveAreaLength; /* +0x000c */ unsigned long long FeatureBitmask; /* +0x0010 */ unsigned long NumberOfFeatures; /* +0x0018 */ unsigned char Features[16]; /* +0x0020 33 41 00 00 */ }; struct tagTVSORTCB { unsigned char hParent[4]; /* +0x0000 b1 3d 00 00 */ unsigned char lpfnCompare[4]; /* +0x0004 3d 41 00 00 */ long lParam; /* +0x0008 */ }; struct _FILE_FS_PERSISTENT_VOLUME_INFORMATION { unsigned long VolumeFlags; /* +0x0000 */ unsigned long FlagMask; /* +0x0004 */ unsigned long Version; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ }; struct _SYSTEM_BASIC_INFORMATION64 { unsigned long Reserved; /* +0x0000 */ unsigned long TimerResolution; /* +0x0004 */ unsigned long PageSize; /* +0x0008 */ unsigned long NumberOfPhysicalPages; /* +0x000c */ unsigned long LowestPhysicalPageNumber; /* +0x0010 */ unsigned long HighestPhysicalPageNumber; /* +0x0014 */ unsigned long AllocationGranularity; /* +0x0018 */ unsigned long long MinimumUserModeAddress; /* +0x0020 */ unsigned long long MaximumUserModeAddress; /* +0x0028 */ unsigned long long ActiveProcessorsAffinityMask; /* +0x0030 */ char NumberOfProcessors; /* +0x0038 */ }; struct _SYSTEM_SPCALL2_INFORMATION { void *InputData; /* +0x0000 */ void *OutputData; /* +0x0004 */ unsigned long InputDataSize; /* +0x0008 */ unsigned long OutputDataSize; /* +0x000c */ long Status; /* +0x0010 */ }; struct _FILE_FS_CONTROL_INFORMATION { unsigned char FreeSpaceStartFiltering[8]; /* +0x0000 db 13 00 00 */ unsigned char FreeSpaceThreshold[8]; /* +0x0008 db 13 00 00 */ unsigned char FreeSpaceStopFiltering[8]; /* +0x0010 db 13 00 00 */ unsigned char DefaultQuotaThreshold[8]; /* +0x0018 db 13 00 00 */ unsigned char DefaultQuotaLimit[8]; /* +0x0020 db 13 00 00 */ unsigned long FileSystemControlFlags; /* +0x0028 */ }; struct tagNMHDDISPINFOW { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char iItem[4]; /* +0x000c 74 00 00 00 */ unsigned char mask[4]; /* +0x0010 75 00 00 00 */ unsigned char pszText[4]; /* +0x0014 71 04 00 00 */ unsigned char cchTextMax[4]; /* +0x0018 74 00 00 00 */ unsigned char iImage[4]; /* +0x001c 74 00 00 00 */ long lParam; /* +0x0020 */ }; struct CATEGORY_INFO { unsigned char cif[4]; /* +0x0000 60 41 00 00 */ unsigned char wszName[520]; /* +0x0004 a8 13 00 00 */ }; struct _RTL_UMS_COMPLETION_LIST { unsigned char ThreadListHead[4]; /* +0x0000 79 18 00 00 */ void *CompletionEvent; /* +0x0004 */ unsigned long CompletionFlags; /* +0x0008 */ unsigned char InternalListHead[4]; /* +0x000c 78 18 00 00 */ }; struct _SecPkgInfoA { unsigned long fCapabilities; /* +0x0000 */ unsigned short wVersion; /* +0x0004 */ unsigned short wRPCID; /* +0x0006 */ unsigned long cbMaxToken; /* +0x0008 */ char *Name; /* +0x000c */ char *Comment; /* +0x0010 */ }; struct _RTL_PERTHREAD_CURDIR { unsigned char CurrentDirectories[4]; /* +0x0000 df 3e 00 00 */ unsigned char ImageName[4]; /* +0x0004 2e 3f 00 00 */ void *Environment; /* +0x0008 */ }; struct _SYSTEM_SYSTEM_PARTITION_INFORMATION { unsigned char SystemPartition[8]; /* +0x0000 7c 3b 00 00 */ }; struct _IO_COMPLETION_BASIC_INFORMATION { long Depth; /* +0x0000 */ }; struct _RTL_USER_PROCESS_INFORMATION { unsigned long Length; /* +0x0000 */ void *Process; /* +0x0004 */ void *Thread; /* +0x0008 */ unsigned char ClientId[8]; /* +0x000c ab 3b 00 00 */ unsigned char ImageInformation[48]; /* +0x0014 7a 41 00 00 */ }; struct _SYSTEM_WATCHDOG_TIMER_INFORMATION { unsigned char WdInfoClass[4]; /* +0x0000 90 41 00 00 */ unsigned long DataValue; /* +0x0004 */ }; struct _SYSTEM_BOOT_ENVIRONMENT_INFORMATION { unsigned char BootIdentifier[16]; /* +0x0000 ce 13 00 00 */ unsigned char FirmwareType[8]; /* +0x0010 14 29 00 00 */ unsigned long long BootFlags; /* +0x0018 */ }; struct _LARGE_INTEGER { unsigned long LowPart; /* +0x0000 */ long HighPart; /* +0x0004 */ }; struct _PROPSHEETHEADERW_V1 { unsigned long dwSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char hwndParent[4]; /* +0x0008 fc 11 00 00 */ unsigned char hInstance[4]; /* +0x000c f5 12 00 00 */ /* unsigned char hIcon[0]; +0x0010 92 19 00 00 */ unsigned char pszIcon[4]; /* +0x0010 4f 13 00 00 */ unsigned char pszCaption[4]; /* +0x0014 4f 13 00 00 */ unsigned char nPages[4]; /* +0x0018 75 00 00 00 */ /* unsigned char nStartPage[0]; +0x001c 75 00 00 00 */ unsigned char pStartPage[4]; /* +0x001c 4f 13 00 00 */ /* unsigned char ppsp[0]; +0x0020 34 40 00 00 */ unsigned char phpage[4]; /* +0x0020 37 40 00 00 */ unsigned char pfnCallback[4]; /* +0x0024 3a 40 00 00 */ }; struct _PLUGPLAY_NOTIFY_HDR { unsigned short Version; /* +0x0000 */ unsigned short Size; /* +0x0002 */ unsigned char Event[16]; /* +0x0004 ce 13 00 00 */ }; struct _SHRINK_VOLUME_INFORMATION { unsigned char ShrinkRequestType[8]; /* +0x0000 ae 41 00 00 */ unsigned long long Flags; /* +0x0008 */ long long NewNumberOfSectors; /* +0x0010 */ }; struct _COMPOUND_ACCESS_ALLOWED_ACE { unsigned char Header[4]; /* +0x0000 45 15 00 00 */ unsigned long Mask; /* +0x0004 */ unsigned short CompoundAceType; /* +0x0008 */ unsigned short Reserved; /* +0x000a */ unsigned long SidStart; /* +0x000c */ }; struct _LDR_SERVICE_TAG_RECORD { unsigned char Next[4]; /* +0x0000 b7 41 00 00 */ unsigned long ServiceTag; /* +0x0004 */ }; struct _PROCESS_HEAP_INFORMATION { unsigned long ReserveSize; /* +0x0000 */ unsigned long CommitSize; /* +0x0004 */ unsigned long NumberOfHeaps; /* +0x0008 */ unsigned long FirstHeapInformationOffset; /* +0x000c */ }; struct tagNMDATETIMEFORMATQUERYA { unsigned char nmhdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char pszFormat[4]; /* +0x000c bf 12 00 00 */ unsigned char szMax[8]; /* +0x0010 21 13 00 00 */ }; struct _PORT_VIEW { unsigned long Length; /* +0x0000 */ void *SectionHandle; /* +0x0004 */ unsigned long SectionOffset; /* +0x0008 */ unsigned long ViewSize; /* +0x000c */ void *ViewBase; /* +0x0010 */ void *ViewRemoteBase; /* +0x0014 */ }; struct _OBJECT_ATTRIBUTES32 { unsigned long Length; /* +0x0000 */ unsigned long RootDirectory; /* +0x0004 */ unsigned long ObjectName; /* +0x0008 */ unsigned long Attributes; /* +0x000c */ unsigned long SecurityDescriptor; /* +0x0010 */ unsigned long SecurityQualityOfService; /* +0x0014 */ }; struct _PROPSHEETHEADERA_V1 { unsigned long dwSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char hwndParent[4]; /* +0x0008 fc 11 00 00 */ unsigned char hInstance[4]; /* +0x000c f5 12 00 00 */ /* unsigned char hIcon[0]; +0x0010 92 19 00 00 */ unsigned char pszIcon[4]; /* +0x0010 bf 12 00 00 */ unsigned char pszCaption[4]; /* +0x0014 bf 12 00 00 */ unsigned char nPages[4]; /* +0x0018 75 00 00 00 */ /* unsigned char nStartPage[0]; +0x001c 75 00 00 00 */ unsigned char pStartPage[4]; /* +0x001c bf 12 00 00 */ /* unsigned char ppsp[0]; +0x0020 f0 41 00 00 */ unsigned char phpage[4]; /* +0x0020 37 40 00 00 */ unsigned char pfnCallback[4]; /* +0x0024 3a 40 00 00 */ }; struct _QCMINFO_IDMAP_PLACEMENT { unsigned char id[4]; /* +0x0000 75 00 00 00 */ unsigned char fFlags[4]; /* +0x0004 75 00 00 00 */ }; struct _FILE_ATTRIBUTE_CACHE_PAIR { unsigned char Name[200]; /* +0x0000 ff 41 00 00 */ unsigned char Value[12]; /* +0x00c8 00 42 00 00 */ }; struct _CM_EISA_SLOT_INFORMATION { unsigned char ReturnCode; /* +0x0000 */ unsigned char ReturnFlags; /* +0x0001 */ unsigned char MajorRevision; /* +0x0002 */ unsigned char MinorRevision; /* +0x0003 */ unsigned short Checksum; /* +0x0004 */ unsigned char NumberFunctions; /* +0x0006 */ unsigned char FunctionInformation; /* +0x0007 */ unsigned long CompressedId; /* +0x0008 */ }; struct _RTL_BITMAP_RUN { unsigned long StartingIndex; /* +0x0000 */ unsigned long NumberOfBits; /* +0x0004 */ }; struct _SYSTEM_VERIFIER_INFORMATION_EX { unsigned long VerifyMode; /* +0x0000 */ unsigned long OptionChanges; /* +0x0004 */ unsigned char PreviousBucketName[8]; /* +0x0008 7c 3b 00 00 */ unsigned long IrpCancelTimeoutMsec; /* +0x0010 */ unsigned long VerifierExtensionEnabled; /* +0x0014 */ unsigned char Reserved[12]; /* +0x0018 13 12 00 00 */ }; struct _KEY_BASIC_INFORMATION { unsigned char LastWriteTime[8]; /* +0x0000 db 13 00 00 */ unsigned long TitleIndex; /* +0x0008 */ unsigned long NameLength; /* +0x000c */ unsigned char Name[8]; /* +0x0010 83 12 00 00 */ }; struct _RTL_AVL_ENTRY { unsigned char BalancedLinks[16]; /* +0x0000 55 42 00 00 */ long long UserData; /* +0x0010 */ }; struct _MUISTRINGPOOL { unsigned char TotalSize[4]; /* +0x0000 75 00 00 00 */ unsigned short MaxNumStrings; /* +0x0004 */ unsigned short NumStrings; /* +0x0006 */ unsigned short MaxNumCharsInPool; /* +0x0008 */ unsigned short NumCharsInPool; /* +0x000a */ short *Strings; /* +0x000c */ unsigned char Pool[4]; /* +0x0010 71 04 00 00 */ }; struct _ACTIVATION_CONTEXT_ASSEMBLY_DATA { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned char AssemblyName[4]; /* +0x0008 4f 13 00 00 */ unsigned long AssemblyNameLength; /* +0x000c */ unsigned long HashAlgorithm; /* +0x0010 */ unsigned long PseudoKey; /* +0x0014 */ }; struct _PS_CPU_QUOTA_QUERY_ENTRY { unsigned long SessionId; /* +0x0000 */ unsigned long Weight; /* +0x0004 */ }; struct _SYSTEM_SESSION_MAPPED_VIEW_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long SessionId; /* +0x0004 */ unsigned long ViewFailures; /* +0x0008 */ unsigned long NumberOfBytesAvailable; /* +0x000c */ unsigned long NumberOfBytesAvailableContiguous; /* +0x0010 */ }; struct _FILE_OBJECTID_BUFFER { unsigned char ObjectId[16]; /* +0x0000 d3 19 00 00 */ unsigned char BirthVolumeId[16]; /* +0x0010 d3 19 00 00 */ unsigned char BirthObjectId[16]; /* +0x0020 d3 19 00 00 */ /* unsigned char DomainId[-32]; +0x0030 d3 19 00 00 */ unsigned char ExtendedInfo[48]; /* +0x0010 7a 42 00 00 */ }; struct _TXFS_SAVEPOINT_INFORMATION { void *KtmTransaction; /* +0x0000 */ unsigned long ActionCode; /* +0x0004 */ unsigned long SavepointId; /* +0x0008 */ }; struct _STORAGE_QUERY_DEPENDENT_VOLUME_REQUEST { unsigned long RequestLevel; /* +0x0000 */ unsigned long RequestFlags; /* +0x0004 */ }; struct _ATOM_BASIC_INFORMATION { unsigned short UsageCount; /* +0x0000 */ unsigned short Flags; /* +0x0002 */ unsigned short NameLength; /* +0x0004 */ unsigned char Name[2]; /* +0x0006 83 12 00 00 */ }; struct _SL_APPX_CACHE_VALUE_DESCRIPTOR { unsigned char HashedName[32]; /* +0x0000 ad 14 00 00 */ unsigned long long Expiration; /* +0x0020 */ unsigned long DataSize; /* +0x0028 */ unsigned char Data[4]; /* +0x002c 04 12 00 00 */ }; struct _PROPSHEETPAGEW_V3 { unsigned long dwSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char hInstance[4]; /* +0x0008 f5 12 00 00 */ /* unsigned char pszTemplate[0]; +0x000c 4f 13 00 00 */ unsigned char pResource[4]; /* +0x000c a9 1a 00 00 */ /* unsigned char hIcon[0]; +0x0010 92 19 00 00 */ unsigned char pszIcon[4]; /* +0x0010 4f 13 00 00 */ unsigned char pszTitle[4]; /* +0x0014 4f 13 00 00 */ unsigned char pfnDlgProc[4]; /* +0x0018 22 20 00 00 */ long lParam; /* +0x001c */ unsigned char pfnCallback[4]; /* +0x0020 88 42 00 00 */ unsigned char pcRefParent[4]; /* +0x0024 75 04 00 00 */ unsigned char pszHeaderTitle[4]; /* +0x0028 4f 13 00 00 */ unsigned char pszHeaderSubTitle[4]; /* +0x002c 4f 13 00 00 */ void *hActCtx; /* +0x0030 */ }; struct tagNMTTDISPINFOW { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char lpszText[4]; /* +0x000c 71 04 00 00 */ unsigned char szText[160]; /* +0x0010 62 21 00 00 */ unsigned char hinst[4]; /* +0x00b0 f5 12 00 00 */ unsigned char uFlags[4]; /* +0x00b4 75 00 00 00 */ long lParam; /* +0x00b8 */ }; struct _FSCTL_OFFLOAD_WRITE_OUTPUT { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long long LengthWritten; /* +0x0008 */ }; struct _SL_APPX_CACHE { unsigned long Version; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long DataSize; /* +0x0008 */ unsigned long long DataCheckSum; /* +0x0010 */ unsigned char Descriptors[48]; /* +0x0018 94 42 00 00 */ }; struct _RTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_EXTENDED { unsigned long Size; /* +0x0000 */ unsigned long Format; /* +0x0004 */ unsigned char Frame[12]; /* +0x0008 97 42 00 00 */ void *Extra1; /* +0x0014 */ void *Extra2; /* +0x0018 */ void *Extra3; /* +0x001c */ void *Extra4; /* +0x0020 */ }; struct tagNMTBSAVE { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned long *pData; /* +0x000c */ unsigned long *pCurrent; /* +0x0010 */ unsigned char cbData[4]; /* +0x0014 75 00 00 00 */ unsigned char iItem[4]; /* +0x0018 74 00 00 00 */ unsigned char cButtons[4]; /* +0x001c 74 00 00 00 */ unsigned char tbButton[20]; /* +0x0020 8a 3c 00 00 */ }; struct _SE_AUDIT_INFO { unsigned long Size; /* +0x0000 */ unsigned char AuditType[4]; /* +0x0004 d1 36 00 00 */ unsigned char AuditOperation[4]; /* +0x0008 ae 42 00 00 */ unsigned long AuditFlags; /* +0x000c */ unsigned char SubsystemName[8]; /* +0x0010 7c 3b 00 00 */ unsigned char ObjectTypeName[8]; /* +0x0018 7c 3b 00 00 */ unsigned char ObjectName[8]; /* +0x0020 7c 3b 00 00 */ void *HandleId; /* +0x0028 */ unsigned char TransactionId[4]; /* +0x002c 78 15 00 00 */ unsigned char OperationId[4]; /* +0x0030 c4 2f 00 00 */ unsigned char ObjectCreation; /* +0x0034 */ unsigned char GenerateOnClose; /* +0x0035 */ }; struct _JOBOBJECT_EXTENDED_ACCOUNTING_INFORMATION { unsigned char BasicInfo[48]; /* +0x0000 1e 20 00 00 */ unsigned char IoInfo[48]; /* +0x0030 82 1e 00 00 */ unsigned char DiskIoInfo[40]; /* +0x0060 9c 3d 00 00 */ unsigned long long ContextSwitches; /* +0x0088 */ unsigned char TotalCycleTime[8]; /* +0x0090 db 13 00 00 */ }; struct _SYSTEM_POOLTAG { /* unsigned char Tag[0]; +0x0000 ae 14 00 00 */ unsigned long TagUlong; /* +0x0000 */ unsigned long PagedAllocs; /* +0x0004 */ unsigned long PagedFrees; /* +0x0008 */ unsigned long PagedUsed; /* +0x000c */ unsigned long NonPagedAllocs; /* +0x0010 */ unsigned long NonPagedFrees; /* +0x0014 */ unsigned long NonPagedUsed; /* +0x0018 */ }; struct _RC_CONFIG { unsigned long dwSignature; /* +0x0000 */ unsigned long dwLength; /* +0x0004 */ unsigned long dwRCConfigVersion; /* +0x0008 */ unsigned long dwFilePathType; /* +0x000c */ unsigned long dwFileType; /* +0x0010 */ unsigned long dwSystemAttributes; /* +0x0014 */ unsigned long dwUltimateFallbackLocation; /* +0x0018 */ unsigned char dwServiceCheckSum[16]; /* +0x001c c2 15 00 00 */ unsigned char dwChecksum[16]; /* +0x002c c2 15 00 00 */ unsigned long dwReserved1; /* +0x003c */ unsigned long dwReserved2; /* +0x0040 */ unsigned long dwMUIFileNameOffset; /* +0x0044 */ unsigned long dwMUIFileNameLength; /* +0x0048 */ unsigned long dwMUIFilePathOffset; /* +0x004c */ unsigned long dwMUIFilePathLength; /* +0x0050 */ unsigned long dwMainResNameTypesOffset; /* +0x0054 */ unsigned long dwMainResNameTypesLength; /* +0x0058 */ unsigned long dwMainResIDTypesOffset; /* +0x005c */ unsigned long dwMainResIDTypesLength; /* +0x0060 */ unsigned long dwMUIResNameTypesOffset; /* +0x0064 */ unsigned long dwMUIResNameTypesLength; /* +0x0068 */ unsigned long dwMUIResIDTypesOffset; /* +0x006c */ unsigned long dwMUIResIDTypesLength; /* +0x0070 */ unsigned long dwLanguageOffset; /* +0x0074 */ unsigned long dwLanguageLength; /* +0x0078 */ unsigned long dwUltimateFallbackLanguageOffset; /* +0x007c */ unsigned long dwUltimateFallbackLanguageLength; /* +0x0080 */ }; struct _WNF_DELIVERY_DESCRIPTOR { unsigned char StateName[8]; /* +0x0000 30 3c 00 00 */ unsigned long ChangeStamp; /* +0x0008 */ unsigned long DeliveryFlag; /* +0x000c */ unsigned long DeliveryState; /* +0x0010 */ unsigned long ReliableRetryDelay; /* +0x0014 */ unsigned long BatchRetry; /* +0x0018 */ unsigned long StateDataSize; /* +0x001c */ unsigned long EventMask; /* +0x0020 */ unsigned char TypeId[16]; /* +0x0024 c7 42 00 00 */ unsigned long StateDataOffset; /* +0x0034 */ }; struct tagNMTOOLTIPSCREATED { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char hwndToolTips[4]; /* +0x000c fc 11 00 00 */ }; struct _PUBLIC_OBJECT_BASIC_INFORMATION { unsigned long Attributes; /* +0x0000 */ unsigned long GrantedAccess; /* +0x0004 */ unsigned long HandleCount; /* +0x0008 */ unsigned long PointerCount; /* +0x000c */ unsigned char Reserved[40]; /* +0x0010 e3 42 00 00 */ }; struct _FSCTL_OFFLOAD_READ_OUTPUT { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long long TransferLength; /* +0x0008 */ unsigned char Token[512]; /* +0x0010 61 15 00 00 */ }; struct _SYSTEM_PROCESSOR_INFORMATION { unsigned short ProcessorArchitecture; /* +0x0000 */ unsigned short ProcessorLevel; /* +0x0002 */ unsigned short ProcessorRevision; /* +0x0004 */ unsigned short MaximumProcessors; /* +0x0006 */ unsigned long ProcessorFeatureBits; /* +0x0008 */ }; struct _SYSTEM_BIGPOOL_ENTRY { void *VirtualAddress; /* +0x0000 */ unsigned char NonPaged[4]; /* +0x0000 4a 12 00 00 */ unsigned long SizeInBytes; /* +0x0004 */ /* unsigned char Tag[0]; +0x0008 ae 14 00 00 */ unsigned long TagUlong; /* +0x0008 */ }; struct _RTL_CRITICAL_SECTION_DEBUG64 { unsigned short Type; /* +0x0000 */ unsigned short CreatorBackTraceIndex; /* +0x0002 */ unsigned long long CriticalSection; /* +0x0008 */ unsigned char ProcessLocksList[16]; /* +0x0010 f3 42 00 00 */ unsigned long EntryCount; /* +0x0020 */ unsigned long ContentionCount; /* +0x0024 */ unsigned char Spare[8]; /* +0x0028 c3 15 00 00 */ }; struct tagTCHITTESTINFO { unsigned char pt[8]; /* +0x0000 ce 12 00 00 */ unsigned char flags[4]; /* +0x0008 75 00 00 00 */ }; struct _DEFERRED_REPAIR_EXTENT { unsigned char VolumeByteOffset[8]; /* +0x0000 db 13 00 00 */ unsigned long Length; /* +0x0008 */ unsigned long RepairFlags; /* +0x000c */ }; struct _SYSTEM_MEMORY_TOPOLOGY_INFORMATION { unsigned long long NumberOfRuns; /* +0x0000 */ unsigned long NumberOfNodes; /* +0x0008 */ unsigned long NumberOfChannels; /* +0x000c */ unsigned char Run[32]; /* +0x0010 fd 42 00 00 */ }; struct tagLVFOOTERITEM { unsigned char mask[4]; /* +0x0000 75 00 00 00 */ unsigned char iItem[4]; /* +0x0004 74 00 00 00 */ unsigned char pszText[4]; /* +0x0008 71 04 00 00 */ unsigned char cchTextMax[4]; /* +0x000c 74 00 00 00 */ unsigned char state[4]; /* +0x0010 75 00 00 00 */ unsigned char stateMask[4]; /* +0x0014 75 00 00 00 */ }; struct _KERNEL_USER_TIMES { unsigned char CreateTime[8]; /* +0x0000 db 13 00 00 */ unsigned char ExitTime[8]; /* +0x0008 db 13 00 00 */ unsigned char KernelTime[8]; /* +0x0010 db 13 00 00 */ unsigned char UserTime[8]; /* +0x0018 db 13 00 00 */ }; struct _DECRYPTION_STATUS_BUFFER { unsigned char NoEncryptedStreams; /* +0x0000 */ }; struct _SYSTEM_HANDLE_INFORMATION_EX { unsigned long NumberOfHandles; /* +0x0000 */ unsigned long Reserved; /* +0x0004 */ unsigned char Handles[28]; /* +0x0008 0b 43 00 00 */ }; struct __PUBLIC_OBJECT_TYPE_INFORMATION { unsigned char TypeName[8]; /* +0x0000 7c 3b 00 00 */ unsigned char Reserved[88]; /* +0x0008 21 43 00 00 */ }; struct _SD_CHANGE_MACHINE_SID_INPUT { unsigned short CurrentMachineSIDOffset; /* +0x0000 */ unsigned short CurrentMachineSIDLength; /* +0x0002 */ unsigned short NewMachineSIDOffset; /* +0x0004 */ unsigned short NewMachineSIDLength; /* +0x0006 */ }; struct tagNMREBARCHILDSIZE { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char uBand[4]; /* +0x000c 75 00 00 00 */ unsigned char wID[4]; /* +0x0010 75 00 00 00 */ unsigned char rcChild[16]; /* +0x0014 c0 12 00 00 */ unsigned char rcBand[16]; /* +0x0024 c0 12 00 00 */ }; struct _QCMINFO_IDMAP { unsigned char nMaxIds[4]; /* +0x0000 75 00 00 00 */ unsigned char pIdList[8]; /* +0x0004 29 43 00 00 */ }; struct _PS_ATTRIBUTE { unsigned long Attribute; /* +0x0000 */ unsigned long Size; /* +0x0004 */ unsigned long Value; /* +0x0008 */ void *ValuePtr; /* +0x0008 */ unsigned long *ReturnLength; /* +0x000c */ }; struct _FILE_SFIO_RESERVE_INFORMATION { unsigned long RequestsPerPeriod; /* +0x0000 */ unsigned long Period; /* +0x0004 */ unsigned char RetryFailures; /* +0x0008 */ unsigned char Discardable; /* +0x0009 */ unsigned long RequestSize; /* +0x000c */ unsigned long NumOutstandingRequests; /* +0x0010 */ }; struct _MEMORY_WORKING_SET_BLOCK { /* unsigned char Protection[0]; +0x0000 30 43 00 00 */ /* unsigned char ShareCount[0]; +0x0000 31 43 00 00 */ /* unsigned char Shared[0]; +0x0000 6d 18 00 00 */ /* unsigned char Node[0]; +0x0000 32 43 00 00 */ unsigned char VirtualPage[4]; /* +0x0000 33 43 00 00 */ }; struct _FILE_SET_SPARSE_BUFFER { unsigned char SetSparse; /* +0x0000 */ }; struct _PLUGPLAY_CONTROL_STATUS_DATA { unsigned char DeviceInstance[8]; /* +0x0000 7c 3b 00 00 */ unsigned long Operation; /* +0x0008 */ unsigned long DeviceStatus; /* +0x000c */ unsigned long DeviceProblem; /* +0x0010 */ unsigned long Flags; /* +0x0014 */ }; struct _SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION { unsigned char IdleTime[8]; /* +0x0000 db 13 00 00 */ unsigned char KernelTime[8]; /* +0x0008 db 13 00 00 */ unsigned char UserTime[8]; /* +0x0010 db 13 00 00 */ unsigned char DpcTime[8]; /* +0x0018 db 13 00 00 */ unsigned char InterruptTime[8]; /* +0x0020 db 13 00 00 */ unsigned long InterruptCount; /* +0x0028 */ }; struct _SYSTEM_PROCESSOR_IDLE_INFORMATION { unsigned long long IdleTime; /* +0x0000 */ unsigned long long C1Time; /* +0x0008 */ unsigned long long C2Time; /* +0x0010 */ unsigned long long C3Time; /* +0x0018 */ unsigned long C1Transitions; /* +0x0020 */ unsigned long C2Transitions; /* +0x0024 */ unsigned long C3Transitions; /* +0x0028 */ unsigned long Padding; /* +0x002c */ }; struct _FIBER { void *FiberData; /* +0x0000 */ unsigned char ExceptionList[4]; /* +0x0004 c6 3b 00 00 */ void *StackBase; /* +0x0008 */ void *StackLimit; /* +0x000c */ void *DeallocationStack; /* +0x0010 */ unsigned char FiberContext[716]; /* +0x0014 7e 1e 00 00 */ unsigned char Wx86Tib[4]; /* +0x02e0 59 43 00 00 */ unsigned char ActivationContextStackPointer[4]; /* +0x02e4 5b 43 00 00 */ void *FlsData; /* +0x02e8 */ unsigned long GuaranteedStackBytes; /* +0x02ec */ unsigned short TebFlags; /* +0x02f0 */ unsigned short ReservedPad; /* +0x02f2 */ }; struct _KAFFINITY_EX { unsigned short Count; /* +0x0000 */ unsigned short Size; /* +0x0002 */ unsigned long Reserved; /* +0x0004 */ unsigned char Bitmap[4]; /* +0x0008 01 12 00 00 */ }; struct _FILE_COMPLETION_INFORMATION { void *Port; /* +0x0000 */ void *Key; /* +0x0004 */ }; struct _KEY_VIRTUALIZATION_INFORMATION { /* unsigned char VirtualizationCandidate[0]; +0x0000 4a 12 00 00 */ /* unsigned char VirtualizationEnabled[0]; +0x0000 9b 15 00 00 */ /* unsigned char VirtualTarget[0]; +0x0000 68 18 00 00 */ /* unsigned char VirtualStore[0]; +0x0000 69 18 00 00 */ /* unsigned char VirtualSource[0]; +0x0000 40 21 00 00 */ unsigned char Reserved[4]; /* +0x0000 68 43 00 00 */ }; struct _RTL_QUERY_REGISTRY_TABLE { unsigned char QueryRoutine[4]; /* +0x0000 71 43 00 00 */ unsigned long Flags; /* +0x0004 */ unsigned char Name[4]; /* +0x0008 71 04 00 00 */ void *EntryContext; /* +0x000c */ unsigned long DefaultType; /* +0x0010 */ void *DefaultData; /* +0x0014 */ unsigned long DefaultLength; /* +0x0018 */ }; struct tagNMMOUSE { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned long dwItemSpec; /* +0x000c */ unsigned long dwItemData; /* +0x0010 */ unsigned char pt[8]; /* +0x0014 ce 12 00 00 */ long dwHitInfo; /* +0x001c */ }; struct _EISA_MEMORY_TYPE { /* unsigned char ReadWrite[0]; +0x0000 ab 33 00 00 */ /* unsigned char Cached[0]; +0x0000 7b 43 00 00 */ /* unsigned char Reserved0[0]; +0x0000 7c 43 00 00 */ /* unsigned char Type[0]; +0x0000 ad 33 00 00 */ /* unsigned char Shared[0]; +0x0000 7d 43 00 00 */ /* unsigned char Reserved1[0]; +0x0000 7e 43 00 00 */ unsigned char MoreEntries[1]; /* +0x0000 7f 43 00 00 */ }; struct _RTL_TRACE_ENUMERATE { unsigned char Database[4]; /* +0x0000 83 43 00 00 */ unsigned long Index; /* +0x0004 */ unsigned char Block[4]; /* +0x0008 a9 3e 00 00 */ }; struct _FILE_LEVEL_TRIM_OUTPUT { unsigned long NumRangesProccessed; /* +0x0000 */ }; struct _FILE_ACCESS_INFORMATION { unsigned long AccessFlags; /* +0x0000 */ }; struct _API_SET_VALUE_ENTRY { unsigned long NameOffset; /* +0x0000 */ unsigned long NameLength; /* +0x0004 */ unsigned long ValueOffset; /* +0x0008 */ unsigned long ValueLength; /* +0x000c */ }; struct _DMA_CONFIGURATION_BYTE1 { /* unsigned char Reserved0[0]; +0x0000 b1 43 00 00 */ /* unsigned char TransferSize[0]; +0x0000 b2 43 00 00 */ /* unsigned char Timing[0]; +0x0000 b3 43 00 00 */ unsigned char Reserved1[1]; /* +0x0000 b4 43 00 00 */ }; struct _LDR_DATA_TABLE_ENTRY32 { unsigned char InLoadOrderLinks[8]; /* +0x0000 bb 43 00 00 */ unsigned char InMemoryOrderLinks[8]; /* +0x0008 bb 43 00 00 */ unsigned char InInitializationOrderLinks[8]; /* +0x0010 bb 43 00 00 */ unsigned long DllBase; /* +0x0018 */ unsigned long EntryPoint; /* +0x001c */ unsigned long SizeOfImage; /* +0x0020 */ unsigned char FullDllName[8]; /* +0x0024 1b 3f 00 00 */ unsigned char BaseDllName[8]; /* +0x002c 1b 3f 00 00 */ unsigned long Flags; /* +0x0034 */ unsigned short LoadCount; /* +0x0038 */ unsigned short TlsIndex; /* +0x003a */ /* unsigned char HashLinks[0]; +0x003c bb 43 00 00 */ unsigned long SectionPointer; /* +0x003c */ unsigned long CheckSum; /* +0x0040 */ unsigned long TimeDateStamp; /* +0x0044 */ unsigned long LoadedImports; /* +0x0044 */ }; struct _FILE_QUOTA_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long SidLength; /* +0x0004 */ unsigned char ChangeTime[8]; /* +0x0008 db 13 00 00 */ unsigned char QuotaUsed[8]; /* +0x0010 db 13 00 00 */ unsigned char QuotaThreshold[8]; /* +0x0018 db 13 00 00 */ unsigned char QuotaLimit[8]; /* +0x0020 db 13 00 00 */ unsigned char Sid[16]; /* +0x0028 7d 2f 00 00 */ }; struct _PLUGPLAY_CONTROL_CONFLICT_LIST { unsigned long Reserved1; /* +0x0000 */ unsigned long Reserved2; /* +0x0004 */ unsigned long ConflictsCounted; /* +0x0008 */ unsigned long ConflictsListed; /* +0x000c */ unsigned long RequiredBufferSize; /* +0x0010 */ unsigned char ConflictEntry[40]; /* +0x0018 c1 43 00 00 */ }; struct tagLVINSERTGROUPSORTED { unsigned char pfnGroupCompare[4]; /* +0x0000 d5 43 00 00 */ void *pvData; /* +0x0004 */ unsigned char lvGroup[96]; /* +0x0008 d6 43 00 00 */ }; struct _HEAP_INFORMATION { unsigned long Address; /* +0x0000 */ unsigned long Mode; /* +0x0004 */ unsigned long ReserveSize; /* +0x0008 */ unsigned long CommitSize; /* +0x000c */ unsigned long FirstRegionInformationOffset; /* +0x0010 */ unsigned long NextHeapInformationOffset; /* +0x0014 */ }; struct tagNMLVCUSTOMDRAW { unsigned char nmcd[48]; /* +0x0000 f7 3e 00 00 */ unsigned long clrText; /* +0x0030 */ unsigned long clrTextBk; /* +0x0034 */ unsigned char iSubItem[4]; /* +0x0038 74 00 00 00 */ unsigned long dwItemType; /* +0x003c */ unsigned long clrFace; /* +0x0040 */ unsigned char iIconEffect[4]; /* +0x0044 74 00 00 00 */ unsigned char iIconPhase[4]; /* +0x0048 74 00 00 00 */ unsigned char iPartId[4]; /* +0x004c 74 00 00 00 */ unsigned char iStateId[4]; /* +0x0050 74 00 00 00 */ unsigned char rcText[16]; /* +0x0054 c0 12 00 00 */ unsigned char uAlign[4]; /* +0x0064 75 00 00 00 */ }; struct tagTVITEMEXW { unsigned char mask[4]; /* +0x0000 75 00 00 00 */ unsigned char hItem[4]; /* +0x0004 b1 3d 00 00 */ unsigned char state[4]; /* +0x0008 75 00 00 00 */ unsigned char stateMask[4]; /* +0x000c 75 00 00 00 */ unsigned char pszText[4]; /* +0x0010 71 04 00 00 */ unsigned char cchTextMax[4]; /* +0x0014 74 00 00 00 */ unsigned char iImage[4]; /* +0x0018 74 00 00 00 */ unsigned char iSelectedImage[4]; /* +0x001c 74 00 00 00 */ unsigned char cChildren[4]; /* +0x0020 74 00 00 00 */ long lParam; /* +0x0024 */ unsigned char iIntegral[4]; /* +0x0028 74 00 00 00 */ unsigned char uStateEx[4]; /* +0x002c 75 00 00 00 */ unsigned char hwnd[4]; /* +0x0030 fc 11 00 00 */ unsigned char iExpandedImage[4]; /* +0x0034 74 00 00 00 */ unsigned char iReserved[4]; /* +0x0038 74 00 00 00 */ }; struct _KLDR_DATA_TABLE_ENTRY { unsigned char InLoadOrderLinks[8]; /* +0x0000 f7 19 00 00 */ void *ExceptionTable; /* +0x0008 */ unsigned long ExceptionTableSize; /* +0x000c */ void *GpValue; /* +0x0010 */ unsigned char NonPagedDebugInfo[4]; /* +0x0014 3e 31 00 00 */ void *DllBase; /* +0x0018 */ void *EntryPoint; /* +0x001c */ unsigned long SizeOfImage; /* +0x0020 */ unsigned char FullDllName[8]; /* +0x0024 7c 3b 00 00 */ unsigned char BaseDllName[8]; /* +0x002c 7c 3b 00 00 */ unsigned long Flags; /* +0x0034 */ unsigned short LoadCount; /* +0x0038 */ unsigned short __Unused5; /* +0x003a */ void *SectionPointer; /* +0x003c */ unsigned long CheckSum; /* +0x0040 */ unsigned long CoverageSectionSize; /* +0x0044 */ void *CoverageSection; /* +0x0048 */ void *LoadedImports; /* +0x004c */ void *PatchInformation; /* +0x0050 */ unsigned long SizeOfImageNotRounded; /* +0x0054 */ unsigned long TimeDateStamp; /* +0x0058 */ }; struct _IO_ERROR_LOG_MESSAGE { unsigned short Type; /* +0x0000 */ unsigned short Size; /* +0x0002 */ unsigned short DriverNameLength; /* +0x0004 */ unsigned char TimeStamp[8]; /* +0x0008 db 13 00 00 */ unsigned long DriverNameOffset; /* +0x0010 */ unsigned char EntryData[48]; /* +0x0018 25 44 00 00 */ }; struct _CM_RESOURCE_LIST { unsigned long Count; /* +0x0000 */ unsigned char List[32]; /* +0x0004 2b 44 00 00 */ }; struct _PLUGPLAY_CONTROL_INTERFACE_LIST_DATA { unsigned char DeviceInstance[8]; /* +0x0000 7c 3b 00 00 */ unsigned char InterfaceGuid[4]; /* +0x0008 78 15 00 00 */ unsigned char InterfaceList[4]; /* +0x000c 71 04 00 00 */ unsigned long InterfaceListSize; /* +0x0010 */ unsigned long Flags; /* +0x0014 */ }; struct _LOOKUP_STREAM_FROM_CLUSTER_OUTPUT { unsigned long Offset; /* +0x0000 */ unsigned long NumberOfMatches; /* +0x0004 */ unsigned long BufferSizeRequired; /* +0x0008 */ }; struct _PROPSHEETPAGEW { unsigned long dwSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char hInstance[4]; /* +0x0008 f5 12 00 00 */ /* unsigned char pszTemplate[0]; +0x000c 4f 13 00 00 */ unsigned char pResource[4]; /* +0x000c a9 1a 00 00 */ /* unsigned char hIcon[0]; +0x0010 92 19 00 00 */ unsigned char pszIcon[4]; /* +0x0010 4f 13 00 00 */ unsigned char pszTitle[4]; /* +0x0014 4f 13 00 00 */ unsigned char pfnDlgProc[4]; /* +0x0018 22 20 00 00 */ long lParam; /* +0x001c */ unsigned char pfnCallback[4]; /* +0x0020 88 42 00 00 */ unsigned char pcRefParent[4]; /* +0x0024 75 04 00 00 */ unsigned char pszHeaderTitle[4]; /* +0x0028 4f 13 00 00 */ unsigned char pszHeaderSubTitle[4]; /* +0x002c 4f 13 00 00 */ void *hActCtx; /* +0x0030 */ /* unsigned char hbmHeader[0]; +0x0034 b9 14 00 00 */ unsigned char pszbmHeader[4]; /* +0x0034 4f 13 00 00 */ }; struct _LDR_ENUM_RESOURCE_ENTRY:: { unsigned long NameOrId; /* +0x0000 */ /* unsigned char Name[0]; +0x0000 9c 22 00 00 */ unsigned short Id; /* +0x0000 */ unsigned short NameIsPresent; /* +0x0002 */ }; struct _SYSTEM_PROCESSOR_MICROCODE_UPDATE_INFORMATION { unsigned long Operation; /* +0x0000 */ }; struct _MUILANGCFGLIST { unsigned char TotalSize[4]; /* +0x0000 75 00 00 00 */ unsigned short NumLanguages; /* +0x0004 */ unsigned short MaxNumLanguages; /* +0x0006 */ unsigned char LanguageConfigs[4]; /* +0x0008 97 44 00 00 */ }; struct _PROPSHEETPAGEW_V2 { unsigned long dwSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char hInstance[4]; /* +0x0008 f5 12 00 00 */ /* unsigned char pszTemplate[0]; +0x000c 4f 13 00 00 */ unsigned char pResource[4]; /* +0x000c a9 1a 00 00 */ /* unsigned char hIcon[0]; +0x0010 92 19 00 00 */ unsigned char pszIcon[4]; /* +0x0010 4f 13 00 00 */ unsigned char pszTitle[4]; /* +0x0014 4f 13 00 00 */ unsigned char pfnDlgProc[4]; /* +0x0018 22 20 00 00 */ long lParam; /* +0x001c */ unsigned char pfnCallback[4]; /* +0x0020 88 42 00 00 */ unsigned char pcRefParent[4]; /* +0x0024 75 04 00 00 */ unsigned char pszHeaderTitle[4]; /* +0x0028 4f 13 00 00 */ unsigned char pszHeaderSubTitle[4]; /* +0x002c 4f 13 00 00 */ }; struct _IDA { unsigned char cidl[4]; /* +0x0000 75 00 00 00 */ unsigned char aoffset[4]; /* +0x0004 af 44 00 00 */ }; struct _SecPkgInfoW { unsigned long fCapabilities; /* +0x0000 */ unsigned short wVersion; /* +0x0004 */ unsigned short wRPCID; /* +0x0006 */ unsigned long cbMaxToken; /* +0x0008 */ unsigned char Name[4]; /* +0x000c 71 04 00 00 */ unsigned char Comment[4]; /* +0x0010 71 04 00 00 */ }; struct _DPASTREAMINFO { unsigned char iPos[4]; /* +0x0000 74 00 00 00 */ void *pvItem; /* +0x0004 */ }; struct _EVENT_TRACE { unsigned char Header[48]; /* +0x0000 b8 44 00 00 */ unsigned long InstanceId; /* +0x0030 */ unsigned long ParentInstanceId; /* +0x0034 */ unsigned char ParentGuid[16]; /* +0x0038 ce 13 00 00 */ void *MofData; /* +0x0048 */ unsigned long MofLength; /* +0x004c */ unsigned long ClientContext; /* +0x0050 */ unsigned char BufferContext[8]; /* +0x0050 b9 44 00 00 */ }; struct _VM_COUNTERS { unsigned long PeakVirtualSize; /* +0x0000 */ unsigned long VirtualSize; /* +0x0004 */ unsigned long PageFaultCount; /* +0x0008 */ unsigned long PeakWorkingSetSize; /* +0x000c */ unsigned long WorkingSetSize; /* +0x0010 */ unsigned long QuotaPeakPagedPoolUsage; /* +0x0014 */ unsigned long QuotaPagedPoolUsage; /* +0x0018 */ unsigned long QuotaPeakNonPagedPoolUsage; /* +0x001c */ unsigned long QuotaNonPagedPoolUsage; /* +0x0020 */ unsigned long PagefileUsage; /* +0x0024 */ unsigned long PeakPagefileUsage; /* +0x0028 */ }; struct _SL_KMEM_CACHE { unsigned long TotalSize; /* +0x0000 */ unsigned long SizeOfData; /* +0x0004 */ unsigned long SignatureSize; /* +0x0008 */ unsigned long Flags; /* +0x000c */ unsigned long Version; /* +0x0010 */ unsigned char Descriptors[20]; /* +0x0014 bf 44 00 00 */ }; struct _FILE_PIPE_EVENT_BUFFER { unsigned long NamedPipeState; /* +0x0000 */ unsigned long EntryType; /* +0x0004 */ unsigned long ByteCount; /* +0x0008 */ unsigned long KeyValue; /* +0x000c */ unsigned long NumberRequests; /* +0x0010 */ }; struct _SECTION_IMAGE_INFORMATION32 { unsigned long TransferAddress; /* +0x0000 */ unsigned long ZeroBits; /* +0x0004 */ unsigned long MaximumStackSize; /* +0x0008 */ unsigned long CommittedStackSize; /* +0x000c */ unsigned long SubSystemType; /* +0x0010 */ unsigned short SubSystemMinorVersion; /* +0x0014 */ unsigned short SubSystemMajorVersion; /* +0x0016 */ unsigned long SubSystemVersion; /* +0x0014 */ unsigned long GpValue; /* +0x0018 */ unsigned short ImageCharacteristics; /* +0x001c */ unsigned short DllCharacteristics; /* +0x001e */ unsigned short Machine; /* +0x0020 */ unsigned char ImageContainsCode; /* +0x0022 */ unsigned char ImageFlags; /* +0x0023 */ /* unsigned char ComPlus[0]; +0x0023 ab 33 00 00 */ /* unsigned char ImageDynamicallyRelocated[0]; +0x0023 7b 43 00 00 */ unsigned char Reserved[1]; /* +0x0023 c6 44 00 00 */ unsigned long LoaderFlags; /* +0x0024 */ unsigned long ImageFileSize; /* +0x0028 */ unsigned long CheckSum; /* +0x002c */ }; struct _RTL_RB_TREE { unsigned char Root[4]; /* +0x0000 cc 44 00 00 */ unsigned char Min[4]; /* +0x0004 cc 44 00 00 */ }; struct SHELL_ITEM_RESOURCE { unsigned char guidType[16]; /* +0x0000 ce 13 00 00 */ unsigned char szName[520]; /* +0x0010 a8 13 00 00 */ }; struct _TOKEN_SECURITY_ATTRIBUTE_FQBN_VALUE { unsigned long long Version; /* +0x0000 */ unsigned char Name[8]; /* +0x0008 7c 3b 00 00 */ }; struct _THREAD_TLS_INFORMATION { unsigned long Flags; /* +0x0000 */ void *NewTlsData; /* +0x0004 */ void *OldTlsData; /* +0x0004 */ void *ThreadId; /* +0x0008 */ }; struct _THREAD_LAST_SYSCALL_INFORMATION { void *FirstArgument; /* +0x0000 */ unsigned short SystemCallNumber; /* +0x0004 */ }; struct _RTL_PROCESS_LOCK_INFORMATION { void *Address; /* +0x0000 */ unsigned short Type; /* +0x0004 */ unsigned short CreatorBackTraceIndex; /* +0x0006 */ void *OwningThread; /* +0x0008 */ long LockCount; /* +0x000c */ unsigned long ContentionCount; /* +0x0010 */ unsigned long EntryCount; /* +0x0014 */ long RecursionCount; /* +0x0018 */ unsigned long NumberOfWaitingShared; /* +0x001c */ unsigned long NumberOfWaitingExclusive; /* +0x0020 */ }; struct tagCOLORSCHEME { unsigned long dwSize; /* +0x0000 */ unsigned long clrBtnHighlight; /* +0x0004 */ unsigned long clrBtnShadow; /* +0x0008 */ }; struct tagDRAGLISTINFO { unsigned char uNotification[4]; /* +0x0000 75 00 00 00 */ unsigned char hWnd[4]; /* +0x0004 fc 11 00 00 */ unsigned char ptCursor[8]; /* +0x0008 ce 12 00 00 */ }; struct _FP_64 { unsigned char W[8]; /* +0x0000 c3 15 00 00 */ }; struct _REPARSE_POINT_INFORMATION { unsigned short ReparseDataLength; /* +0x0000 */ unsigned short UnparsedNameLength; /* +0x0002 */ }; struct _SL_KMEM_CACHE_VALUE_DESCRIPTOR { unsigned short Size; /* +0x0000 */ unsigned short NameLength; /* +0x0002 */ unsigned short Type; /* +0x0004 */ unsigned short DataLength; /* +0x0006 */ unsigned long Attributes; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ unsigned char Name[4]; /* +0x0010 83 12 00 00 */ }; struct _SECTIONBASICINFO { void *BaseAddress; /* +0x0000 */ unsigned long AllocationAttributes; /* +0x0004 */ unsigned char MaximumSize[8]; /* +0x0008 db 13 00 00 */ }; struct _THREAD_PERFORMANCE_DATA { unsigned short Size; /* +0x0000 */ unsigned short Version; /* +0x0002 */ unsigned char ProcessorNumber[4]; /* +0x0004 53 35 00 00 */ unsigned long ContextSwitches; /* +0x0008 */ unsigned long HwCountersCount; /* +0x000c */ unsigned char UpdateCount[8]; /* +0x0010 5c 3f 00 00 */ unsigned long long WaitReasonBitMap; /* +0x0018 */ unsigned long long HardwareCounters; /* +0x0020 */ unsigned char CycleTime[24]; /* +0x0028 1e 45 00 00 */ unsigned char HwCounters[384]; /* +0x0040 1f 45 00 00 */ }; struct _FILESYSTEM_STATISTICS { unsigned short FileSystemType; /* +0x0000 */ unsigned short Version; /* +0x0002 */ unsigned long SizeOfCompleteStructure; /* +0x0004 */ unsigned long UserFileReads; /* +0x0008 */ unsigned long UserFileReadBytes; /* +0x000c */ unsigned long UserDiskReads; /* +0x0010 */ unsigned long UserFileWrites; /* +0x0014 */ unsigned long UserFileWriteBytes; /* +0x0018 */ unsigned long UserDiskWrites; /* +0x001c */ unsigned long MetaDataReads; /* +0x0020 */ unsigned long MetaDataReadBytes; /* +0x0024 */ unsigned long MetaDataDiskReads; /* +0x0028 */ unsigned long MetaDataWrites; /* +0x002c */ unsigned long MetaDataWriteBytes; /* +0x0030 */ unsigned long MetaDataDiskWrites; /* +0x0034 */ }; struct _FXSAVE_FORMAT { unsigned short ControlWord; /* +0x0000 */ unsigned short StatusWord; /* +0x0002 */ unsigned short TagWord; /* +0x0004 */ unsigned short ErrorOpcode; /* +0x0006 */ unsigned long ErrorOffset; /* +0x0008 */ unsigned long ErrorSelector; /* +0x000c */ unsigned long DataOffset; /* +0x0010 */ unsigned long DataSelector; /* +0x0014 */ unsigned long MXCsr; /* +0x0018 */ unsigned long MXCsrMask; /* +0x001c */ unsigned char RegisterArea[128]; /* +0x0020 38 45 00 00 */ unsigned char Reserved3[128]; /* +0x00a0 38 45 00 00 */ unsigned char Reserved4[192]; /* +0x0120 39 45 00 00 */ }; struct _MEMORY_WORKING_SET_EX_BLOCK { /* unsigned char Valid[0]; +0x0000 4a 12 00 00 */ /* unsigned char ShareCount[0]; +0x0000 3c 45 00 00 */ /* unsigned char Win32Protection[0]; +0x0000 3d 45 00 00 */ /* unsigned char Shared[0]; +0x0000 e0 1f 00 00 */ /* unsigned char Node[0]; +0x0000 3e 45 00 00 */ /* unsigned char Locked[0]; +0x0000 e4 1f 00 00 */ /* unsigned char LargePage[0]; +0x0000 e5 1f 00 00 */ /* unsigned char Priority[0]; +0x0000 3f 45 00 00 */ /* unsigned char Reserved[0]; +0x0000 40 45 00 00 */ /* unsigned char Bad[0]; +0x0000 ed 14 00 00 */ unsigned char Invalid[4]; /* +0x0000 41 45 00 00 */ }; struct _SYSTEM_BASIC_PERFORMANCE_INFORMATION { unsigned long AvailablePages; /* +0x0000 */ unsigned long CommittedPages; /* +0x0004 */ unsigned long CommitLimit; /* +0x0008 */ unsigned long PeakCommitment; /* +0x000c */ }; struct _EISA_IRQ_CONFIGURATION { unsigned char ConfigurationByte[1]; /* +0x0000 4f 45 00 00 */ unsigned char Reserved; /* +0x0001 */ }; struct _TRIPLE_LIST { /* unsigned char ControlBits[0]; +0x0000 52 45 00 00 */ unsigned char CombinedControlBits[4]; /* +0x0000 5b 3f 00 00 */ unsigned char Head[16]; /* +0x0004 f3 3e 00 00 */ unsigned char Tail[12]; /* +0x0014 53 45 00 00 */ unsigned char RemoveCallback[4]; /* +0x0020 d1 44 00 00 */ void *RemoveContext; /* +0x0024 */ unsigned char PendingHead[4]; /* +0x0028 f4 3e 00 00 */ unsigned char PendingTailPtr[4]; /* +0x002c 54 45 00 00 */ unsigned long PendingListIndex; /* +0x0030 */ }; struct _TRIPLE_LIST:::: { /* unsigned char SwitchSelectorBit0[0]; +0x0000 54 3f 00 00 */ /* unsigned char ActiveListBit0[0]; +0x0000 55 3f 00 00 */ /* unsigned char OverflowActiveListBit0[0]; +0x0000 56 3f 00 00 */ /* unsigned char SwitchSelectorBit1[0]; +0x0000 57 3f 00 00 */ /* unsigned char ActiveListBit1[0]; +0x0000 58 3f 00 00 */ /* unsigned char OverflowActiveListBit1[0]; +0x0000 59 3f 00 00 */ /* unsigned char ReaderDidTheSwitch[0]; +0x0000 5a 3f 00 00 */ /* unsigned char Reserved[0]; +0x0000 57 45 00 00 */ /* unsigned char ReaderBusy[0]; +0x0000 58 45 00 00 */ /* unsigned char UpdateReady[0]; +0x0000 59 45 00 00 */ unsigned char OverflowUpdateReady[4]; /* +0x0000 5a 45 00 00 */ }; struct _RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION { void *ReflectionProcessHandle; /* +0x0000 */ void *ReflectionThreadHandle; /* +0x0004 */ unsigned char ReflectionClientId[8]; /* +0x0008 ab 3b 00 00 */ }; struct _SHFILEINFOW { unsigned char hIcon[4]; /* +0x0000 92 19 00 00 */ unsigned char iIcon[4]; /* +0x0004 74 00 00 00 */ unsigned long dwAttributes; /* +0x0008 */ unsigned char szDisplayName[520]; /* +0x000c a8 13 00 00 */ unsigned char szTypeName[160]; /* +0x0214 62 21 00 00 */ }; struct _SYSTEM_BOOT_GRAPHICS_INFORMATION { unsigned char FrameBuffer[8]; /* +0x0000 db 13 00 00 */ unsigned long Width; /* +0x0008 */ unsigned long Height; /* +0x000c */ unsigned long PixelStride; /* +0x0010 */ unsigned long Flags; /* +0x0014 */ unsigned char Format[8]; /* +0x0018 65 45 00 00 */ }; struct _SYSDBG_IO_SPACE { unsigned long long Address; /* +0x0000 */ void *Buffer; /* +0x0008 */ unsigned long Request; /* +0x000c */ unsigned char InterfaceType[4]; /* +0x0010 68 45 00 00 */ unsigned long BusNumber; /* +0x0014 */ unsigned long AddressSpace; /* +0x0018 */ }; struct _SCRUB_DATA_OUTPUT { unsigned long Flags; /* +0x0000 */ unsigned long ExtentCount; /* +0x0004 */ unsigned long Status; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ unsigned char ResumeContext[816]; /* +0x0010 27 3e 00 00 */ unsigned char Extents[16]; /* +0x0340 6e 45 00 00 */ }; struct _SYSTEM_POOL_INFORMATION { unsigned long TotalSize; /* +0x0000 */ void *FirstEntry; /* +0x0004 */ unsigned short EntryOverhead; /* +0x0008 */ unsigned char PoolTagPresent; /* +0x000a */ unsigned char Spare0; /* +0x000b */ unsigned long NumberOfEntries; /* +0x000c */ unsigned char Entries[12]; /* +0x0010 72 45 00 00 */ }; struct _SYSTEM_PROCESS_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long NumberOfThreads; /* +0x0004 */ unsigned char WorkingSetPrivateSize[8]; /* +0x0008 db 13 00 00 */ unsigned long HardFaultCount; /* +0x0010 */ unsigned long NumberOfThreadsHighWatermark; /* +0x0014 */ unsigned long long CycleTime; /* +0x0018 */ unsigned char CreateTime[8]; /* +0x0020 db 13 00 00 */ unsigned char UserTime[8]; /* +0x0028 db 13 00 00 */ unsigned char KernelTime[8]; /* +0x0030 db 13 00 00 */ unsigned char ImageName[8]; /* +0x0038 7c 3b 00 00 */ long BasePriority; /* +0x0040 */ void *UniqueProcessId; /* +0x0044 */ void *InheritedFromUniqueProcessId; /* +0x0048 */ unsigned long HandleCount; /* +0x004c */ unsigned long SessionId; /* +0x0050 */ unsigned long UniqueProcessKey; /* +0x0054 */ unsigned long PeakVirtualSize; /* +0x0058 */ unsigned long VirtualSize; /* +0x005c */ unsigned long PageFaultCount; /* +0x0060 */ unsigned long PeakWorkingSetSize; /* +0x0064 */ unsigned long WorkingSetSize; /* +0x0068 */ unsigned long QuotaPeakPagedPoolUsage; /* +0x006c */ unsigned long QuotaPagedPoolUsage; /* +0x0070 */ unsigned long QuotaPeakNonPagedPoolUsage; /* +0x0074 */ unsigned long QuotaNonPagedPoolUsage; /* +0x0078 */ unsigned long PagefileUsage; /* +0x007c */ unsigned long PeakPagefileUsage; /* +0x0080 */ unsigned long PrivatePageCount; /* +0x0084 */ unsigned char ReadOperationCount[8]; /* +0x0088 db 13 00 00 */ unsigned char WriteOperationCount[8]; /* +0x0090 db 13 00 00 */ unsigned char OtherOperationCount[8]; /* +0x0098 db 13 00 00 */ unsigned char ReadTransferCount[8]; /* +0x00a0 db 13 00 00 */ unsigned char WriteTransferCount[8]; /* +0x00a8 db 13 00 00 */ unsigned char OtherTransferCount[8]; /* +0x00b0 db 13 00 00 */ }; struct _KEY_VALUE_ENTRY { unsigned char ValueName[4]; /* +0x0000 2e 3f 00 00 */ unsigned long DataLength; /* +0x0004 */ unsigned long DataOffset; /* +0x0008 */ unsigned long Type; /* +0x000c */ }; struct _REPAIR_COPIES_INPUT { unsigned long Flags; /* +0x0000 */ unsigned char FileOffset[8]; /* +0x0008 db 13 00 00 */ unsigned long Length; /* +0x0010 */ unsigned long SourceCopy; /* +0x0014 */ unsigned long NumberOfRepairCopies; /* +0x0018 */ unsigned char RepairCopies[4]; /* +0x001c 01 12 00 00 */ }; struct _PEBS_DS_SAVE_AREA { unsigned long long BtsBufferBase; /* +0x0000 */ unsigned long long BtsIndex; /* +0x0008 */ unsigned long long BtsAbsoluteMaximum; /* +0x0010 */ unsigned long long BtsInterruptThreshold; /* +0x0018 */ unsigned long long PebsBufferBase; /* +0x0020 */ unsigned long long PebsIndex; /* +0x0028 */ unsigned long long PebsAbsoluteMaximum; /* +0x0030 */ unsigned long long PebsInterruptThreshold; /* +0x0038 */ unsigned long long PebsCounterReset0; /* +0x0040 */ unsigned long long PebsCounterReset1; /* +0x0048 */ unsigned long long PebsCounterReset2; /* +0x0050 */ unsigned long long PebsCounterReset3; /* +0x0058 */ }; struct _EFI_DRIVER_ENTRY { unsigned long Version; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned long Id; /* +0x0008 */ unsigned long FriendlyNameOffset; /* +0x000c */ unsigned long DriverFilePathOffset; /* +0x0010 */ }; struct _RTL_AVL_TABLE { unsigned char BalancedRoot[16]; /* +0x0000 55 42 00 00 */ void *OrderedPointer; /* +0x0010 */ unsigned long WhichOrderedElement; /* +0x0014 */ unsigned long NumberGenericTableElements; /* +0x0018 */ unsigned long DepthOfTree; /* +0x001c */ unsigned char RestartKey[4]; /* +0x0020 8a 45 00 00 */ unsigned long DeleteCount; /* +0x0024 */ unsigned char CompareRoutine[4]; /* +0x0028 8d 45 00 00 */ unsigned char AllocateRoutine[4]; /* +0x002c ee 41 00 00 */ unsigned char FreeRoutine[4]; /* +0x0030 90 45 00 00 */ void *TableContext; /* +0x0034 */ }; struct _PLUGPLAY_CONTROL_CONFLICT_ENTRY { unsigned long DeviceInstance; /* +0x0000 */ unsigned long DeviceFlags; /* +0x0004 */ unsigned long ResourceType; /* +0x0008 */ unsigned long long ResourceStart; /* +0x0010 */ unsigned long long ResourceEnd; /* +0x0018 */ unsigned long ResourceFlags; /* +0x0020 */ }; struct _FILE_NETWORK_OPEN_INFORMATION { unsigned char CreationTime[8]; /* +0x0000 db 13 00 00 */ unsigned char LastAccessTime[8]; /* +0x0008 db 13 00 00 */ unsigned char LastWriteTime[8]; /* +0x0010 db 13 00 00 */ unsigned char ChangeTime[8]; /* +0x0018 db 13 00 00 */ unsigned char AllocationSize[8]; /* +0x0020 db 13 00 00 */ unsigned char EndOfFile[8]; /* +0x0028 db 13 00 00 */ unsigned long FileAttributes; /* +0x0030 */ }; struct _PO_WAKE_SOURCE_INFO { unsigned long Count; /* +0x0000 */ unsigned char Offsets[4]; /* +0x0004 01 12 00 00 */ }; struct _RTL_DEBUG_INFORMATION32 { unsigned long SectionHandleClient; /* +0x0000 */ unsigned long ViewBaseClient; /* +0x0004 */ unsigned long ViewBaseTarget; /* +0x0008 */ unsigned long ViewBaseDelta; /* +0x000c */ unsigned long EventPairClient; /* +0x0010 */ unsigned long EventPairTarget; /* +0x0014 */ unsigned long TargetProcessId; /* +0x0018 */ unsigned long TargetThreadHandle; /* +0x001c */ unsigned long Flags; /* +0x0020 */ unsigned long OffsetFree; /* +0x0024 */ unsigned long CommitSize; /* +0x0028 */ unsigned long ViewSize; /* +0x002c */ unsigned long Modules; /* +0x0030 */ unsigned long ModulesEx; /* +0x0030 */ unsigned long BackTraces; /* +0x0034 */ unsigned long Heaps; /* +0x0038 */ unsigned long Locks; /* +0x003c */ unsigned long SpecificHeap; /* +0x0040 */ unsigned long TargetProcessHandle; /* +0x0044 */ unsigned long VerifierOptions; /* +0x0048 */ unsigned long ProcessHeap; /* +0x004c */ unsigned long CriticalSectionHandle; /* +0x0050 */ unsigned long CriticalSectionOwnerThread; /* +0x0054 */ unsigned char Reserved[16]; /* +0x0058 c2 15 00 00 */ }; struct _RB_HITTESTINFO { unsigned char pt[8]; /* +0x0000 ce 12 00 00 */ unsigned char flags[4]; /* +0x0008 75 00 00 00 */ unsigned char iBand[4]; /* +0x000c 74 00 00 00 */ }; struct _TP_DIRECT { unsigned char Task[20]; /* +0x0000 00 46 00 00 */ unsigned long Lock; /* +0x0014 */ unsigned char IoCompletionInformationList[8]; /* +0x0018 f7 19 00 00 */ unsigned char Callback[4]; /* +0x0020 05 46 00 00 */ unsigned long NumaNode; /* +0x0024 */ unsigned char IdealProcessor; /* +0x0028 */ }; struct _RTL_CRITICAL_SECTION64 { unsigned long long DebugInfo; /* +0x0000 */ long LockCount; /* +0x0008 */ long RecursionCount; /* +0x000c */ unsigned long long OwningThread; /* +0x0010 */ unsigned long long LockSemaphore; /* +0x0018 */ unsigned long long SpinCount; /* +0x0020 */ }; struct tagLVFINDINFOW { unsigned char flags[4]; /* +0x0000 75 00 00 00 */ unsigned char psz[4]; /* +0x0004 4f 13 00 00 */ long lParam; /* +0x0008 */ unsigned char pt[8]; /* +0x000c ce 12 00 00 */ unsigned char vkDirection[4]; /* +0x0014 75 00 00 00 */ }; struct _PO_WAKE_SOURCE_FIXED { unsigned char Header[8]; /* +0x0000 c0 3f 00 00 */ unsigned char FixedWakeSourceType[4]; /* +0x0008 4d 3e 00 00 */ }; struct tagLVTILEINFO { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char iItem[4]; /* +0x0004 74 00 00 00 */ unsigned char cColumns[4]; /* +0x0008 75 00 00 00 */ unsigned char puColumns[4]; /* +0x000c 75 04 00 00 */ unsigned char piColFmt[4]; /* +0x0010 74 04 00 00 */ }; struct _SYSTEM_PREFETCH_STATS { unsigned long DemandFilePageCount; /* +0x0000 */ unsigned long DemandFileIOCount; /* +0x0004 */ unsigned long TrickleFilePageCount; /* +0x0008 */ unsigned long TrickleFileIOCount; /* +0x000c */ unsigned long DemandPrivatePageCount; /* +0x0010 */ unsigned long DemandPrivateIOCount; /* +0x0014 */ unsigned long TricklePrivatePageCount; /* +0x0018 */ unsigned long TricklePrivateIOCount; /* +0x001c */ }; struct _PSHNOTIFY { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ long lParam; /* +0x000c */ }; struct tagNMTBRESTORE { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned long *pData; /* +0x000c */ unsigned long *pCurrent; /* +0x0010 */ unsigned char cbData[4]; /* +0x0014 75 00 00 00 */ unsigned char iItem[4]; /* +0x0018 74 00 00 00 */ unsigned char cButtons[4]; /* +0x001c 74 00 00 00 */ unsigned char cbBytesPerRecord[4]; /* +0x0020 74 00 00 00 */ unsigned char tbButton[20]; /* +0x0024 8a 3c 00 00 */ }; struct _PEB_LDR_DATA { unsigned long Length; /* +0x0000 */ unsigned char Initialized; /* +0x0004 */ void *SsHandle; /* +0x0008 */ unsigned char InLoadOrderModuleList[8]; /* +0x000c f7 19 00 00 */ unsigned char InMemoryOrderModuleList[8]; /* +0x0014 f7 19 00 00 */ unsigned char InInitializationOrderModuleList[8]; /* +0x001c f7 19 00 00 */ void *EntryInProgress; /* +0x0024 */ unsigned char ShutdownInProgress; /* +0x0028 */ void *ShutdownThreadId; /* +0x002c */ }; struct _MUICCENTRY { unsigned char lCultureNameOffset[4]; /* +0x0000 75 00 00 00 */ unsigned char ulCultureID[4]; /* +0x0004 75 00 00 00 */ unsigned long ulLanguageType; /* +0x0008 */ unsigned char pNeutralCulture[4]; /* +0x000c 29 46 00 00 */ unsigned char lBaseLanguageIndices[16]; /* +0x0010 2a 46 00 00 */ unsigned char lParentLanguageIndices[16]; /* +0x0020 2b 46 00 00 */ }; struct _FILE_QUERY_SPARING_BUFFER { unsigned long SparingUnitBytes; /* +0x0000 */ unsigned char SoftwareSparing; /* +0x0004 */ unsigned long TotalSpareBlocks; /* +0x0008 */ unsigned long FreeSpareBlocks; /* +0x000c */ }; struct _SYSTEM_CONSOLE_INFORMATION { /* unsigned char DriverLoaded[0]; +0x0000 4a 12 00 00 */ unsigned char Spare[4]; /* +0x0000 4b 12 00 00 */ }; struct _TRIPLE_LIST_ENTRY { unsigned char Flink[12]; /* +0x0000 53 45 00 00 */ unsigned char Blink[4]; /* +0x000c f4 3e 00 00 */ }; struct _SYSTEM_WORKINGSET_ENTRY { unsigned long UniqueProcessId; /* +0x0000 */ unsigned long SessionId; /* +0x0000 */ unsigned long WorkingSetPageCount; /* +0x0004 */ unsigned long CommitPageCount; /* +0x0008 */ unsigned long PagedPoolPageCount; /* +0x000c */ unsigned long VirtualSizeInPages; /* +0x000c */ unsigned long PrivateWorkingSetPageCount; /* +0x0010 */ }; struct tagTVDISPINFOW { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char item[40]; /* +0x000c 70 46 00 00 */ }; struct _browseinfoA { unsigned char hwndOwner[4]; /* +0x0000 fc 11 00 00 */ unsigned char pidlRoot[4]; /* +0x0004 e2 3d 00 00 */ char *pszDisplayName; /* +0x0008 */ unsigned char lpszTitle[4]; /* +0x000c bf 12 00 00 */ unsigned char ulFlags[4]; /* +0x0010 75 00 00 00 */ unsigned char lpfn[4]; /* +0x0014 75 46 00 00 */ long lParam; /* +0x0018 */ unsigned char iImage[4]; /* +0x001c 74 00 00 00 */ }; struct _EVENT_FILTER_HEADER { unsigned short Id; /* +0x0000 */ unsigned char Version; /* +0x0002 */ unsigned char Reserved[5]; /* +0x0003 78 46 00 00 */ unsigned long long InstanceId; /* +0x0008 */ unsigned long Size; /* +0x0010 */ unsigned long NextOffset; /* +0x0014 */ }; struct _SecPkgContext_SessionKey { unsigned long SessionKeyLength; /* +0x0000 */ unsigned char *SessionKey; /* +0x0004 */ }; struct _TXFS_ROLLFORWARD_REDO_INFORMATION { unsigned char LastVirtualClock[8]; /* +0x0000 db 13 00 00 */ unsigned long long LastRedoLsn; /* +0x0008 */ unsigned long long HighestRecoveryLsn; /* +0x0010 */ unsigned long Flags; /* +0x0018 */ }; struct _QCMINFO { unsigned char hmenu[4]; /* +0x0000 4d 13 00 00 */ unsigned char indexMenu[4]; /* +0x0004 75 00 00 00 */ unsigned char idCmdFirst[4]; /* +0x0008 75 00 00 00 */ unsigned char idCmdLast[4]; /* +0x000c 75 00 00 00 */ unsigned char pIdMap[4]; /* +0x0010 8b 46 00 00 */ }; struct _SecHandle { unsigned long dwLower; /* +0x0000 */ unsigned long dwUpper; /* +0x0004 */ }; struct _FILE_FS_FULL_SIZE_INFORMATION { unsigned char TotalAllocationUnits[8]; /* +0x0000 db 13 00 00 */ unsigned char CallerAvailableAllocationUnits[8]; /* +0x0008 db 13 00 00 */ unsigned char ActualAvailableAllocationUnits[8]; /* +0x0010 db 13 00 00 */ unsigned long SectorsPerAllocationUnit; /* +0x0018 */ unsigned long BytesPerSector; /* +0x001c */ }; struct _SYSTEM_PROCESS_ID_INFORMATION { void *ProcessId; /* +0x0000 */ unsigned char ImageName[8]; /* +0x0004 7c 3b 00 00 */ }; struct _SYSTEM_PREFETCH_OPTIONS { /* unsigned char LowerPriority[0]; +0x0000 4a 12 00 00 */ /* unsigned char VirtualOffsets[0]; +0x0000 9b 15 00 00 */ /* unsigned char TrickleIOs[0]; +0x0000 68 18 00 00 */ /* unsigned char SkipInStorePages[0]; +0x0000 69 18 00 00 */ /* unsigned char PrefetchFilesByVa[0]; +0x0000 40 21 00 00 */ /* unsigned char Spare[0]; +0x0000 31 43 00 00 */ unsigned char ScenarioType[4]; /* +0x0000 ad 46 00 00 */ }; struct _SHCREATEPROCESSINFOW { unsigned long cbSize; /* +0x0000 */ unsigned long fMask; /* +0x0004 */ unsigned char hwnd[4]; /* +0x0008 fc 11 00 00 */ unsigned char pszFile[4]; /* +0x000c 4f 13 00 00 */ unsigned char pszParameters[4]; /* +0x0010 4f 13 00 00 */ unsigned char pszCurrentDirectory[4]; /* +0x0014 4f 13 00 00 */ void *hUserToken; /* +0x0018 */ unsigned char lpProcessAttributes[4]; /* +0x001c 12 13 00 00 */ unsigned char lpThreadAttributes[4]; /* +0x0020 12 13 00 00 */ unsigned char bInheritHandles[4]; /* +0x0024 74 00 00 00 */ unsigned long dwCreationFlags; /* +0x0028 */ unsigned char lpStartupInfo[4]; /* +0x002c 95 14 00 00 */ unsigned char lpProcessInformation[4]; /* +0x0030 cd 34 00 00 */ }; struct _FILE_MAKE_COMPATIBLE_BUFFER { unsigned char CloseDisc; /* +0x0000 */ }; struct _CM_MCA_POS_DATA { unsigned short AdapterId; /* +0x0000 */ unsigned char PosData1; /* +0x0002 */ unsigned char PosData2; /* +0x0003 */ unsigned char PosData3; /* +0x0004 */ unsigned char PosData4; /* +0x0005 */ }; struct _NM_UPDOWN { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char iPos[4]; /* +0x000c 74 00 00 00 */ unsigned char iDelta[4]; /* +0x0010 74 00 00 00 */ }; struct _FILE_MAILSLOT_SET_INFORMATION { unsigned char ReadTimeout[4]; /* +0x0000 dc 13 00 00 */ }; struct _RTL_DYNAMIC_HASH_TABLE { unsigned long Flags; /* +0x0000 */ unsigned long Shift; /* +0x0004 */ unsigned long TableSize; /* +0x0008 */ unsigned long Pivot; /* +0x000c */ unsigned long DivisorMask; /* +0x0010 */ unsigned long NumEntries; /* +0x0014 */ unsigned long NonEmptyBuckets; /* +0x0018 */ unsigned long NumEnumerators; /* +0x001c */ void *Directory; /* +0x0020 */ }; struct tagTCITEMA { unsigned char mask[4]; /* +0x0000 75 00 00 00 */ unsigned long dwState; /* +0x0004 */ unsigned long dwStateMask; /* +0x0008 */ char *pszText; /* +0x000c */ unsigned char cchTextMax[4]; /* +0x0010 74 00 00 00 */ unsigned char iImage[4]; /* +0x0014 74 00 00 00 */ long lParam; /* +0x0018 */ }; struct _SYSTEM_DEVICE_DATA_INFORMATION { unsigned char DeviceId[8]; /* +0x0000 7c 3b 00 00 */ unsigned char DataName[8]; /* +0x0008 7c 3b 00 00 */ unsigned long DataType; /* +0x0010 */ unsigned long DataBufferLength; /* +0x0014 */ void *DataBuffer; /* +0x0018 */ }; struct tagLVITEMINDEX { unsigned char iItem[4]; /* +0x0000 74 00 00 00 */ unsigned char iGroup[4]; /* +0x0004 74 00 00 00 */ }; struct _WAKE_TIMER_INFO { unsigned long OffsetToNext; /* +0x0000 */ unsigned char DueTime[8]; /* +0x0008 5e 20 00 00 */ unsigned long Period; /* +0x0010 */ unsigned char ReasonContext[28]; /* +0x0014 c1 3f 00 00 */ }; struct _LDR_IMPORT_CALLBACK_INFO { unsigned char ImportCallbackRoutine[4]; /* +0x0000 5b 47 00 00 */ void *ImportCallbackParameter; /* +0x0004 */ }; struct _PS_ATTRIBUTE_LIST { unsigned long TotalLength; /* +0x0000 */ unsigned char Attributes[16]; /* +0x0004 5f 47 00 00 */ }; struct tagNMBCHOTITEM { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned long dwFlags; /* +0x000c */ }; struct tagSMINFO { unsigned long dwMask; /* +0x0000 */ unsigned long dwType; /* +0x0004 */ unsigned long dwFlags; /* +0x0008 */ unsigned char iIcon[4]; /* +0x000c 74 00 00 00 */ }; struct _OBJECT_ATTRIBUTES { unsigned long Length; /* +0x0000 */ void *RootDirectory; /* +0x0004 */ unsigned char ObjectName[4]; /* +0x0008 2e 3f 00 00 */ unsigned long Attributes; /* +0x000c */ void *SecurityDescriptor; /* +0x0010 */ void *SecurityQualityOfService; /* +0x0014 */ }; struct tagNMHDDISPINFOA { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char iItem[4]; /* +0x000c 74 00 00 00 */ unsigned char mask[4]; /* +0x0010 75 00 00 00 */ char *pszText; /* +0x0014 */ unsigned char cchTextMax[4]; /* +0x0018 74 00 00 00 */ unsigned char iImage[4]; /* +0x001c 74 00 00 00 */ long lParam; /* +0x0020 */ }; struct _DRAGINFOA { unsigned char uSize[4]; /* +0x0000 75 00 00 00 */ unsigned char pt[8]; /* +0x0004 ce 12 00 00 */ unsigned char fNC[4]; /* +0x000c 74 00 00 00 */ char *lpFileList; /* +0x0010 */ unsigned long grfKeyState; /* +0x0014 */ }; struct _DMA_CONFIGURATION_BYTE0 { /* unsigned char Channel[0]; +0x0000 b5 47 00 00 */ /* unsigned char Reserved[0]; +0x0000 b6 47 00 00 */ /* unsigned char Shared[0]; +0x0000 7e 43 00 00 */ unsigned char MoreEntries[1]; /* +0x0000 7f 43 00 00 */ }; struct _PROCESS_MITIGATION_POLICY_INFORMATION { unsigned char Policy[4]; /* +0x0000 a5 2a 00 00 */ /* unsigned char ASLRPolicy[0]; +0x0004 51 37 00 00 */ /* unsigned char StackCheckPolicy[0]; +0x0004 48 2a 00 00 */ /* unsigned char StrictHandleCheckPolicy[0]; +0x0004 cb 36 00 00 */ unsigned char SystemCallDisablePolicy[4]; /* +0x0004 b9 2e 00 00 */ }; struct _SEC_WINNT_AUTH_IDENTITY_INFO { /* unsigned char AuthIdExw[0]; +0x0000 cb 40 00 00 */ /* unsigned char AuthIdExa[0]; +0x0000 bf 47 00 00 */ /* unsigned char AuthId_a[0]; +0x0000 13 15 00 00 */ /* unsigned char AuthId_w[0]; +0x0000 58 17 00 00 */ unsigned char AuthIdEx2[48]; /* +0x0000 c0 47 00 00 */ }; struct _SYSTEM_WATCHDOG_HANDLER_INFORMATION { unsigned char WdHandler[4]; /* +0x0000 e2 47 00 00 */ void *Context; /* +0x0004 */ }; struct _WNODE_HEADER { unsigned long BufferSize; /* +0x0000 */ unsigned long ProviderId; /* +0x0004 */ unsigned long long HistoricalContext; /* +0x0008 */ unsigned long Version; /* +0x0008 */ unsigned long Linkage; /* +0x000c */ unsigned long CountLost; /* +0x0010 */ void *KernelHandle; /* +0x0010 */ unsigned char TimeStamp[8]; /* +0x0010 db 13 00 00 */ unsigned char Guid[16]; /* +0x0018 ce 13 00 00 */ unsigned long ClientContext; /* +0x0028 */ unsigned long Flags; /* +0x002c */ }; struct _FILE_FS_LABEL_INFORMATION { unsigned long VolumeLabelLength; /* +0x0000 */ unsigned char VolumeLabel[4]; /* +0x0004 83 12 00 00 */ }; struct _SD_GLOBAL_CHANGE_INPUT { unsigned long Flags; /* +0x0000 */ unsigned long ChangeType; /* +0x0004 */ /* unsigned char SdChange[0]; +0x0008 ed 47 00 00 */ /* unsigned char SdQueryStats[0]; +0x0008 ee 47 00 00 */ unsigned char SdEnumSds[16]; /* +0x0008 ef 47 00 00 */ }; struct tagLVKEYDOWN { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned short wVKey; /* +0x000c */ unsigned char flags[4]; /* +0x000e 75 00 00 00 */ }; struct _KLOCK_QUEUE_HANDLE { unsigned char LockQueue[8]; /* +0x0000 7b 46 00 00 */ unsigned char OldIrql; /* +0x0008 */ }; struct tagNMDATETIMEFORMATA { unsigned char nmhdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char pszFormat[4]; /* +0x000c bf 12 00 00 */ unsigned char st[16]; /* +0x0010 7d 13 00 00 */ unsigned char pszDisplay[4]; /* +0x0020 bf 12 00 00 */ unsigned char szDisplay[64]; /* +0x0024 fa 47 00 00 */ }; struct _SYSDBG_MSR { unsigned long Msr; /* +0x0000 */ unsigned long long Data; /* +0x0008 */ }; struct _JOURNAL_SET_DELETE_VALUE_INFORMATION { unsigned char Action[8]; /* +0x0000 9f 3d 00 00 */ unsigned long long RecordNumber; /* +0x0008 */ unsigned char TimeStamp[8]; /* +0x0010 db 13 00 00 */ unsigned char KeyPathName[8]; /* +0x0018 7c 3b 00 00 */ unsigned char ValueName[8]; /* +0x0020 7c 3b 00 00 */ unsigned long OldValueType; /* +0x0028 */ unsigned long OldDataLength; /* +0x002c */ void *OldData; /* +0x0030 */ unsigned long NewValueType; /* +0x0034 */ unsigned long NewDataLength; /* +0x0038 */ void *NewData; /* +0x003c */ }; struct _IO_RESOURCE_LIST { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned long Count; /* +0x0004 */ unsigned char Descriptors[32]; /* +0x0008 06 48 00 00 */ }; struct _HEAP_RANGE_INFORMATION { unsigned long Address; /* +0x0000 */ unsigned long Size; /* +0x0004 */ unsigned long Type; /* +0x0008 */ unsigned long Protection; /* +0x000c */ unsigned long FirstBlockInformationOffset; /* +0x0010 */ unsigned long NextRangeInformationOffset; /* +0x0014 */ }; struct _SecPkgCredentials_Cert { unsigned long EncodedCertSize; /* +0x0000 */ unsigned char *EncodedCert; /* +0x0004 */ }; struct _LDR_DATA_TABLE_ENTRY { unsigned char InLoadOrderLinks[8]; /* +0x0000 f7 19 00 00 */ unsigned char InMemoryOrderLinks[8]; /* +0x0008 f7 19 00 00 */ /* unsigned char InInitializationOrderLinks[0]; +0x0010 f7 19 00 00 */ unsigned char InProgressLinks[8]; /* +0x0010 f7 19 00 00 */ void *DllBase; /* +0x0018 */ void *EntryPoint; /* +0x001c */ unsigned long SizeOfImage; /* +0x0020 */ unsigned char FullDllName[8]; /* +0x0024 7c 3b 00 00 */ unsigned char BaseDllName[8]; /* +0x002c 7c 3b 00 00 */ /* unsigned char FlagGroup[0]; +0x0034 ae 14 00 00 */ unsigned long Flags; /* +0x0034 */ /* unsigned char PackagedBinary[0]; +0x0034 4a 12 00 00 */ /* unsigned char MarkedForRemoval[0]; +0x0034 9b 15 00 00 */ /* unsigned char ImageDll[0]; +0x0034 68 18 00 00 */ /* unsigned char LoadNotificationsSent[0]; +0x0034 69 18 00 00 */ /* unsigned char TelemetryEntryProcessed[0]; +0x0034 40 21 00 00 */ /* unsigned char ProcessStaticImport[0]; +0x0034 41 21 00 00 */ /* unsigned char InLegacyLists[0]; +0x0034 6b 18 00 00 */ /* unsigned char InIndexes[0]; +0x0034 6c 18 00 00 */ /* unsigned char ShimDll[0]; +0x0034 6d 18 00 00 */ /* unsigned char InExceptionTable[0]; +0x0034 6e 18 00 00 */ /* unsigned char ReservedFlags1[0]; +0x0034 0f 48 00 00 */ /* unsigned char LoadInProgress[0]; +0x0034 10 48 00 00 */ /* unsigned char ReservedFlags2[0]; +0x0034 11 48 00 00 */ /* unsigned char EntryProcessed[0]; +0x0034 72 18 00 00 */ /* unsigned char ReservedFlags3[0]; +0x0034 12 48 00 00 */ /* unsigned char DontCallForThreads[0]; +0x0034 13 48 00 00 */ /* unsigned char ProcessAttachCalled[0]; +0x0034 60 2a 00 00 */ /* unsigned char ProcessAttachFailed[0]; +0x0034 e2 1f 00 00 */ /* unsigned char CorDeferredValidate[0]; +0x0034 e3 1f 00 00 */ /* unsigned char CorImage[0]; +0x0034 e4 1f 00 00 */ /* unsigned char DontRelocate[0]; +0x0034 e5 1f 00 00 */ /* unsigned char CorILOnly[0]; +0x0034 14 48 00 00 */ /* unsigned char ReservedFlags5[0]; +0x0034 15 48 00 00 */ /* unsigned char Redirected[0]; +0x0034 16 48 00 00 */ /* unsigned char ReservedFlags6[0]; +0x0034 17 48 00 00 */ unsigned char CompatDatabaseProcessed[4]; /* +0x0034 ed 14 00 00 */ unsigned short ObsoleteLoadCount; /* +0x0038 */ unsigned short TlsIndex; /* +0x003a */ unsigned char HashLinks[8]; /* +0x003c f7 19 00 00 */ unsigned long TimeDateStamp; /* +0x0044 */ unsigned char EntryPointActivationContext[4]; /* +0x0048 c4 31 00 00 */ void *PatchInformation; /* +0x004c */ unsigned char DdagNode[4]; /* +0x0050 19 48 00 00 */ unsigned char NodeModuleLink[8]; /* +0x0054 f7 19 00 00 */ unsigned char SnapContext[4]; /* +0x005c 1b 48 00 00 */ void *SwitchBackContext; /* +0x0060 */ unsigned char BaseAddressIndexNode[12]; /* +0x0064 cb 44 00 00 */ unsigned char MappingInfoIndexNode[12]; /* +0x0070 cb 44 00 00 */ unsigned long OriginalBase; /* +0x007c */ unsigned char LoadTime[8]; /* +0x0080 db 13 00 00 */ unsigned long BaseNameHashValue; /* +0x0088 */ }; struct _FILE_GET_EA_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned char EaNameLength; /* +0x0004 */ unsigned char EaName[3]; /* +0x0005 ea 1b 00 00 */ }; struct _QUERY_FILE_LAYOUT_OUTPUT { unsigned long FileEntryCount; /* +0x0000 */ unsigned long FirstFileOffset; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ }; struct _PROCESSOR_IDLE_STATES { unsigned long Size; /* +0x0000 */ unsigned long Revision; /* +0x0004 */ unsigned long Count; /* +0x0008 */ unsigned long Type; /* +0x000c */ unsigned long TargetProcessors; /* +0x0010 */ unsigned char State[24]; /* +0x0014 23 48 00 00 */ }; struct _RTL_PROCESS_BACKTRACE_INFORMATION { char *SymbolicBackTrace; /* +0x0000 */ unsigned long TraceCount; /* +0x0004 */ unsigned short Index; /* +0x0008 */ unsigned short Depth; /* +0x000a */ unsigned char BackTrace[128]; /* +0x000c 39 48 00 00 */ }; struct _PROCESS_KEEPALIVE_COUNT_INFORMATION { unsigned long Count; /* +0x0000 */ }; struct _SYSTEM_POWER_LOGGING_ENTRY { unsigned long Reason; /* +0x0000 */ unsigned long States; /* +0x0004 */ }; struct _SYSTEM_IMAGE_FILE_EXECUTION_OPTIONS_INFORMATION { unsigned long FlagsToEnable; /* +0x0000 */ unsigned long FlagsToDisable; /* +0x0004 */ }; struct WMIREGGUIDW { unsigned char Guid[16]; /* +0x0000 ce 13 00 00 */ unsigned long Flags; /* +0x0010 */ unsigned long InstanceCount; /* +0x0014 */ unsigned long InstanceNameList; /* +0x0018 */ unsigned long BaseNameOffset; /* +0x0018 */ unsigned long Pdo; /* +0x0018 */ unsigned long InstanceInfo; /* +0x0018 */ }; struct _FILE_INTEGRITY_STREAM_INFORMATION { unsigned short ChecksumAlgorithm; /* +0x0000 */ unsigned char ChecksumChunkShift; /* +0x0002 */ unsigned char ClusterShift; /* +0x0003 */ unsigned long Flags; /* +0x0004 */ }; struct _DIAGNOSTIC_BUFFER { unsigned long Size; /* +0x0000 */ unsigned char CallerType[4]; /* +0x0004 96 48 00 00 */ unsigned long ProcessImageNameOffset; /* +0x0008 */ unsigned long ProcessId; /* +0x000c */ unsigned long ServiceTag; /* +0x0010 */ unsigned long DeviceDescriptionOffset; /* +0x0008 */ unsigned long DevicePathOffset; /* +0x000c */ unsigned long ReasonOffset; /* +0x0014 */ }; struct _SYSTEM_VERIFIER_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long Level; /* +0x0004 */ unsigned char DriverName[8]; /* +0x0008 7c 3b 00 00 */ unsigned long RaiseIrqls; /* +0x0010 */ unsigned long AcquireSpinLocks; /* +0x0014 */ unsigned long SynchronizeExecutions; /* +0x0018 */ unsigned long AllocationsAttempted; /* +0x001c */ unsigned long AllocationsSucceeded; /* +0x0020 */ unsigned long AllocationsSucceededSpecialPool; /* +0x0024 */ unsigned long AllocationsWithNoTag; /* +0x0028 */ unsigned long TrimRequests; /* +0x002c */ unsigned long Trims; /* +0x0030 */ unsigned long AllocationsFailed; /* +0x0034 */ unsigned long AllocationsFailedDeliberately; /* +0x0038 */ unsigned long Loads; /* +0x003c */ unsigned long Unloads; /* +0x0040 */ unsigned long UnTrackedPool; /* +0x0044 */ unsigned long CurrentPagedPoolAllocations; /* +0x0048 */ unsigned long CurrentNonPagedPoolAllocations; /* +0x004c */ unsigned long PeakPagedPoolAllocations; /* +0x0050 */ unsigned long PeakNonPagedPoolAllocations; /* +0x0054 */ unsigned long PagedPoolUsageInBytes; /* +0x0058 */ unsigned long NonPagedPoolUsageInBytes; /* +0x005c */ unsigned long PeakPagedPoolUsageInBytes; /* +0x0060 */ unsigned long PeakNonPagedPoolUsageInBytes; /* +0x0064 */ }; struct _CM_SERIAL_DEVICE_DATA { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned long BaudClock; /* +0x0004 */ }; struct SHARDAPPIDINFOLINK { unsigned char psl[4]; /* +0x0000 a8 48 00 00 */ unsigned char pszAppID[4]; /* +0x0004 4f 13 00 00 */ }; struct _KEY_VALUE_FULL_INFORMATION { unsigned long TitleIndex; /* +0x0000 */ unsigned long Type; /* +0x0004 */ unsigned long DataOffset; /* +0x0008 */ unsigned long DataLength; /* +0x000c */ unsigned long NameLength; /* +0x0010 */ unsigned char Name[4]; /* +0x0014 83 12 00 00 */ }; struct _FILE_GET_QUOTA_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long SidLength; /* +0x0004 */ unsigned char Sid[12]; /* +0x0008 7d 2f 00 00 */ }; struct _FILE_PIPE_CLIENT_PROCESS_BUFFER { void *ClientSession; /* +0x0000 */ void *ClientProcess; /* +0x0004 */ }; struct _SYSTEM_SESSION_PROCESS_INFORMATION { unsigned long SessionId; /* +0x0000 */ unsigned long SizeOfBuf; /* +0x0004 */ void *Buffer; /* +0x0008 */ }; struct _SYSTEM_VA_LIST_INFORMATION { unsigned long VirtualSize; /* +0x0000 */ unsigned long VirtualPeak; /* +0x0004 */ unsigned long VirtualLimit; /* +0x0008 */ unsigned long AllocationFailures; /* +0x000c */ }; struct tagNMDATETIMEFORMATW { unsigned char nmhdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char pszFormat[4]; /* +0x000c 4f 13 00 00 */ unsigned char st[16]; /* +0x0010 7d 13 00 00 */ unsigned char pszDisplay[4]; /* +0x0020 4f 13 00 00 */ unsigned char szDisplay[128]; /* +0x0024 0f 18 00 00 */ }; struct _ACTIVATION_CONTEXT_SECTION_KEYED_DATA_ASSEMBLY_METADATA { unsigned char Information[4]; /* +0x0000 da 48 00 00 */ void *SectionBase; /* +0x0004 */ unsigned long SectionLength; /* +0x0008 */ void *SectionGlobalDataBase; /* +0x000c */ unsigned long SectionGlobalDataLength; /* +0x0010 */ }; struct _LDR_DDAG_NODE { unsigned char Modules[8]; /* +0x0000 f7 19 00 00 */ unsigned char ServiceTagList[4]; /* +0x0008 b7 41 00 00 */ unsigned long LoadCount; /* +0x000c */ unsigned long ReferenceCount; /* +0x0010 */ unsigned long DependencyCount; /* +0x0014 */ /* unsigned char Dependencies[0]; +0x0018 9a 40 00 00 */ unsigned char RemovalLink[4]; /* +0x0018 78 18 00 00 */ unsigned char IncomingDependencies[4]; /* +0x001c 9a 40 00 00 */ unsigned char State[4]; /* +0x0020 dd 48 00 00 */ unsigned char CondenseLink[4]; /* +0x0024 78 18 00 00 */ unsigned long PreorderNumber; /* +0x0028 */ unsigned long LowestLink; /* +0x002c */ }; struct _LPC_CLIENT_DIED_MSG { unsigned char PortMsg[24]; /* +0x0000 c2 44 00 00 */ unsigned char CreateTime[8]; /* +0x0018 db 13 00 00 */ }; struct _SecPkgContext_Lifespan { unsigned char tsStart[8]; /* +0x0000 db 13 00 00 */ unsigned char tsExpiry[8]; /* +0x0008 db 13 00 00 */ }; struct _TRACE_PROVIDER_INSTANCE_INFO { unsigned long NextOffset; /* +0x0000 */ unsigned long EnableCount; /* +0x0004 */ unsigned long Pid; /* +0x0008 */ unsigned long Flags; /* +0x000c */ }; struct _CSV_INTERNAL_CONTROL_PARAM { unsigned char Operation[8]; /* +0x0000 f2 48 00 00 */ long long Unused; /* +0x0008 */ }; struct _MCI_ADDR { unsigned long Address; /* +0x0000 */ unsigned long Reserved; /* +0x0004 */ unsigned long long QuadPart; /* +0x0000 */ }; struct _CSFV { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char pshf[4]; /* +0x0004 ee 3c 00 00 */ unsigned char psvOuter[4]; /* +0x0008 d4 3c 00 00 */ unsigned char pidl[4]; /* +0x000c e2 3d 00 00 */ long lEvents; /* +0x0010 */ unsigned char pfnCallback[4]; /* +0x0014 f9 48 00 00 */ unsigned char fvm[4]; /* +0x0018 d6 3c 00 00 */ }; struct _FILE_MAILSLOT_PEEK_BUFFER { unsigned long ReadDataAvailable; /* +0x0000 */ unsigned long NumberOfMessages; /* +0x0004 */ unsigned long MessageLength; /* +0x0008 */ }; struct tagNMTOOLBARA { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char iItem[4]; /* +0x000c 74 00 00 00 */ unsigned char tbButton[20]; /* +0x0010 8a 3c 00 00 */ unsigned char cchText[4]; /* +0x0024 74 00 00 00 */ char *pszText; /* +0x0028 */ unsigned char rcButton[16]; /* +0x002c c0 12 00 00 */ }; struct _EVENT_INSTANCE_HEADER { unsigned short Size; /* +0x0000 */ unsigned short FieldTypeFlags; /* +0x0002 */ unsigned char HeaderType; /* +0x0002 */ unsigned char MarkerFlags; /* +0x0003 */ unsigned long Version; /* +0x0004 */ unsigned char Class[4]; /* +0x0004 0e 49 00 00 */ unsigned long ThreadId; /* +0x0008 */ unsigned long ProcessId; /* +0x000c */ unsigned char TimeStamp[8]; /* +0x0010 db 13 00 00 */ unsigned long long RegHandle; /* +0x0018 */ unsigned long InstanceId; /* +0x0020 */ unsigned long ParentInstanceId; /* +0x0024 */ unsigned long KernelTime; /* +0x0028 */ unsigned long UserTime; /* +0x002c */ unsigned long long ProcessorTime; /* +0x0028 */ unsigned long EventId; /* +0x0028 */ unsigned long Flags; /* +0x002c */ unsigned long long ParentRegHandle; /* +0x0030 */ }; struct _EVENT_INSTANCE_HEADER:::: { unsigned char Type; /* +0x0000 */ unsigned char Level; /* +0x0001 */ unsigned short Version; /* +0x0002 */ }; struct tagNMTVASYNCDRAW { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char pimldp[4]; /* +0x000c 19 49 00 00 */ unsigned char hr[4]; /* +0x0010 08 00 00 00 */ unsigned char hItem[4]; /* +0x0014 b1 3d 00 00 */ long lParam; /* +0x0018 */ unsigned long dwRetFlags; /* +0x001c */ unsigned char iRetImageIndex[4]; /* +0x0020 74 00 00 00 */ }; struct _DRAGINFOW { unsigned char uSize[4]; /* +0x0000 75 00 00 00 */ unsigned char pt[8]; /* +0x0004 ce 12 00 00 */ unsigned char fNC[4]; /* +0x000c 74 00 00 00 */ unsigned char lpFileList[4]; /* +0x0010 71 04 00 00 */ unsigned long grfKeyState; /* +0x0014 */ }; struct _WNF_PUBLISH_DESCRIPTOR { unsigned char StateName[8]; /* +0x0000 30 3c 00 00 */ unsigned char TypeId[4]; /* +0x0008 1e 49 00 00 */ unsigned char StateData[4]; /* +0x000c 92 15 00 00 */ unsigned long StateDataLength; /* +0x0010 */ }; struct _MEMORY_WORKING_SET_INFORMATION { unsigned long NumberOfEntries; /* +0x0000 */ unsigned char WorkingSetInfo[4]; /* +0x0004 21 49 00 00 */ }; struct _PLUGPLAY_CONTROL_DEVICE_CONTROL_DATA { unsigned char DeviceInstance[8]; /* +0x0000 7c 3b 00 00 */ unsigned long Flags; /* +0x0008 */ }; struct _SYSTEM_CALL_TIME_INFORMATION { unsigned long Length; /* +0x0000 */ unsigned long TotalCalls; /* +0x0004 */ unsigned char TimeOfCalls[8]; /* +0x0008 3e 49 00 00 */ }; struct tagTVINSERTSTRUCTW { unsigned char hParent[4]; /* +0x0000 b1 3d 00 00 */ unsigned char hInsertAfter[4]; /* +0x0004 b1 3d 00 00 */ /* unsigned char itemex[0]; +0x0008 43 49 00 00 */ unsigned char item[60]; /* +0x0008 70 46 00 00 */ }; struct _RETRIEVAL_POINTER_BASE { unsigned char FileAreaOffset[8]; /* +0x0000 db 13 00 00 */ }; struct tagTCITEMHEADERW { unsigned char mask[4]; /* +0x0000 75 00 00 00 */ unsigned char lpReserved1[4]; /* +0x0004 75 00 00 00 */ unsigned char lpReserved2[4]; /* +0x0008 75 00 00 00 */ unsigned char pszText[4]; /* +0x000c 71 04 00 00 */ unsigned char cchTextMax[4]; /* +0x0010 74 00 00 00 */ unsigned char iImage[4]; /* +0x0014 74 00 00 00 */ }; struct _FILE_PATH { unsigned long Version; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned long Type; /* +0x0008 */ unsigned char FilePath[4]; /* +0x000c 04 12 00 00 */ }; struct _SYSTEM_HYPERVISOR_QUERY_INFORMATION { unsigned char HypervisorConnected; /* +0x0000 */ unsigned char Spare0[7]; /* +0x0001 54 49 00 00 */ unsigned long long EnabledAddressSpaceEnlightenments; /* +0x0008 */ }; struct _EISA_IRQ_DESCRIPTOR { /* unsigned char Interrupt[0]; +0x0000 66 49 00 00 */ /* unsigned char Reserved[0]; +0x0000 67 49 00 00 */ /* unsigned char LevelTriggered[0]; +0x0000 7d 43 00 00 */ /* unsigned char Shared[0]; +0x0000 7e 43 00 00 */ unsigned char MoreEntries[1]; /* +0x0000 7f 43 00 00 */ }; struct _SHELLEXECUTEINFOA { unsigned long cbSize; /* +0x0000 */ unsigned long fMask; /* +0x0004 */ unsigned char hwnd[4]; /* +0x0008 fc 11 00 00 */ unsigned char lpVerb[4]; /* +0x000c bf 12 00 00 */ unsigned char lpFile[4]; /* +0x0010 bf 12 00 00 */ unsigned char lpParameters[4]; /* +0x0014 bf 12 00 00 */ unsigned char lpDirectory[4]; /* +0x0018 bf 12 00 00 */ unsigned char nShow[4]; /* +0x001c 74 00 00 00 */ unsigned char hInstApp[4]; /* +0x0020 f5 12 00 00 */ void *lpIDList; /* +0x0024 */ unsigned char lpClass[4]; /* +0x0028 bf 12 00 00 */ unsigned char hkeyClass[4]; /* +0x002c 63 2f 00 00 */ unsigned long dwHotKey; /* +0x0030 */ void *hIcon; /* +0x0034 */ void *hMonitor; /* +0x0034 */ void *hProcess; /* +0x0038 */ }; struct _SYSTEM_PROCESSOR_PERFORMANCE_DISTRIBUTION { unsigned long ProcessorCount; /* +0x0000 */ unsigned char Offsets[4]; /* +0x0004 01 12 00 00 */ }; struct _SECTION_IMAGE_INFORMATION { void *TransferAddress; /* +0x0000 */ unsigned long ZeroBits; /* +0x0004 */ unsigned long MaximumStackSize; /* +0x0008 */ unsigned long CommittedStackSize; /* +0x000c */ unsigned long SubSystemType; /* +0x0010 */ unsigned short SubSystemMinorVersion; /* +0x0014 */ unsigned short SubSystemMajorVersion; /* +0x0016 */ unsigned long SubSystemVersion; /* +0x0014 */ unsigned long GpValue; /* +0x0018 */ unsigned short ImageCharacteristics; /* +0x001c */ unsigned short DllCharacteristics; /* +0x001e */ unsigned short Machine; /* +0x0020 */ unsigned char ImageContainsCode; /* +0x0022 */ unsigned char ImageFlags; /* +0x0023 */ /* unsigned char ComPlusNativeReady[0]; +0x0023 ab 33 00 00 */ /* unsigned char ComPlusILOnly[0]; +0x0023 7b 43 00 00 */ /* unsigned char ImageDynamicallyRelocated[0]; +0x0023 7c 43 00 00 */ /* unsigned char ImageMappedFlat[0]; +0x0023 7f 49 00 00 */ /* unsigned char BaseBelow4gb[0]; +0x0023 67 49 00 00 */ unsigned char Reserved[1]; /* +0x0023 ae 33 00 00 */ unsigned long LoaderFlags; /* +0x0024 */ unsigned long ImageFileSize; /* +0x0028 */ unsigned long CheckSum; /* +0x002c */ }; struct SHCSCHANGENOTIFYSTRUCT { long lEvent; /* +0x0000 */ unsigned char pidl1[4]; /* +0x0004 e2 3d 00 00 */ unsigned char pidl2[4]; /* +0x0008 e2 3d 00 00 */ }; struct _NTFS_STATISTICS { unsigned long LogFileFullExceptions; /* +0x0000 */ unsigned long OtherExceptions; /* +0x0004 */ unsigned long MftReads; /* +0x0008 */ unsigned long MftReadBytes; /* +0x000c */ unsigned long MftWrites; /* +0x0010 */ unsigned long MftWriteBytes; /* +0x0014 */ }; struct _SYSTEM_SESSION_POOLTAG_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long SessionId; /* +0x0004 */ unsigned long Count; /* +0x0008 */ unsigned char TagInfo[28]; /* +0x000c e8 3c 00 00 */ }; struct tagNMLVGETINFOTIPW { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned long dwFlags; /* +0x000c */ unsigned char pszText[4]; /* +0x0010 71 04 00 00 */ unsigned char cchTextMax[4]; /* +0x0014 74 00 00 00 */ unsigned char iItem[4]; /* +0x0018 74 00 00 00 */ unsigned char iSubItem[4]; /* +0x001c 74 00 00 00 */ long lParam; /* +0x0020 */ }; struct _PROCESS_CYCLE_TIME_INFORMATION { unsigned long long AccumulatedCycles; /* +0x0000 */ unsigned long long CurrentCycleCount; /* +0x0008 */ }; struct _HEAP_BLOCK_EXTRA_INFORMATION { unsigned char Next; /* +0x0000 */ unsigned long Type; /* +0x0004 */ unsigned long Size; /* +0x0008 */ }; struct _ETW_BUFFER_CONTEXT { unsigned char ProcessorNumber; /* +0x0000 */ unsigned char Alignment; /* +0x0001 */ unsigned short ProcessorIndex; /* +0x0000 */ unsigned short LoggerId; /* +0x0002 */ }; struct _HD_ITEMA { unsigned char mask[4]; /* +0x0000 75 00 00 00 */ unsigned char cxy[4]; /* +0x0004 74 00 00 00 */ char *pszText; /* +0x0008 */ unsigned char hbm[4]; /* +0x000c b9 14 00 00 */ unsigned char cchTextMax[4]; /* +0x0010 74 00 00 00 */ unsigned char fmt[4]; /* +0x0014 74 00 00 00 */ long lParam; /* +0x0018 */ unsigned char iImage[4]; /* +0x001c 74 00 00 00 */ unsigned char iOrder[4]; /* +0x0020 74 00 00 00 */ unsigned char type[4]; /* +0x0024 75 00 00 00 */ void *pvFilter; /* +0x0028 */ unsigned char state[4]; /* +0x002c 75 00 00 00 */ }; struct _SHNAMEMAPPINGA { char *pszOldPath; /* +0x0000 */ char *pszNewPath; /* +0x0004 */ unsigned char cchOldPath[4]; /* +0x0008 74 00 00 00 */ unsigned char cchNewPath[4]; /* +0x000c 74 00 00 00 */ }; struct _XSAVE_VENDOR { unsigned char VendorId[16]; /* +0x0000 13 12 00 00 */ unsigned char SupportedCpu[40]; /* +0x0010 26 4a 00 00 */ }; struct _SV2CVW2_PARAMS { unsigned long cbSize; /* +0x0000 */ unsigned char psvPrev[4]; /* +0x0004 d4 3c 00 00 */ unsigned char pfs[4]; /* +0x0008 ad 40 00 00 */ unsigned char psbOwner[4]; /* +0x000c d2 3c 00 00 */ unsigned char prcView[4]; /* +0x0010 c0 1d 00 00 */ unsigned char pvid[4]; /* +0x0014 0b 17 00 00 */ unsigned char hwndView[4]; /* +0x0018 fc 11 00 00 */ }; struct _FNSAVE_FORMAT { unsigned long ControlWord; /* +0x0000 */ unsigned long StatusWord; /* +0x0004 */ unsigned long TagWord; /* +0x0008 */ unsigned long ErrorOffset; /* +0x000c */ unsigned long ErrorSelector; /* +0x0010 */ unsigned long DataOffset; /* +0x0014 */ unsigned long DataSelector; /* +0x0018 */ unsigned char RegisterArea[80]; /* +0x001c be 1e 00 00 */ }; struct _RTL_CRITICAL_SECTION32 { unsigned long DebugInfo; /* +0x0000 */ long LockCount; /* +0x0004 */ long RecursionCount; /* +0x0008 */ unsigned long OwningThread; /* +0x000c */ unsigned long LockSemaphore; /* +0x0010 */ unsigned long SpinCount; /* +0x0014 */ }; struct _HEAP_REGION_INFORMATION { unsigned long Address; /* +0x0000 */ unsigned long ReserveSize; /* +0x0004 */ unsigned long CommitSize; /* +0x0008 */ unsigned long FirstRangeInformationOffset; /* +0x000c */ unsigned long NextRegionInformationOffset; /* +0x0010 */ }; struct _COUNTER_READING { unsigned char Type[4]; /* +0x0000 a9 15 00 00 */ unsigned long Index; /* +0x0004 */ unsigned long long Start; /* +0x0008 */ unsigned long long Total; /* +0x0010 */ }; struct _SEMAPHORE_BASIC_INFORMATION { long CurrentCount; /* +0x0000 */ long MaximumCount; /* +0x0004 */ }; struct _QUERY_PERFORMANCE_COUNTER_FLAGS { /* unsigned char KernelTransition[0]; +0x0000 4a 12 00 00 */ /* unsigned char Reserved[0]; +0x0000 4b 12 00 00 */ unsigned long ul; /* +0x0000 */ }; struct _SECURITY_FUNCTION_TABLE_W { unsigned long dwVersion; /* +0x0000 */ unsigned char EnumerateSecurityPackagesW[4]; /* +0x0004 8e 3e 00 00 */ unsigned char QueryCredentialsAttributesW[4]; /* +0x0008 fe 3f 00 00 */ unsigned char AcquireCredentialsHandleW[4]; /* +0x000c 5c 4a 00 00 */ unsigned char FreeCredentialsHandle[4]; /* +0x0010 07 40 00 00 */ void *Reserved2; /* +0x0014 */ unsigned char InitializeSecurityContextW[4]; /* +0x0018 12 47 00 00 */ unsigned char AcceptSecurityContext[4]; /* +0x001c 0d 40 00 00 */ unsigned char CompleteAuthToken[4]; /* +0x0020 10 40 00 00 */ unsigned char DeleteSecurityContext[4]; /* +0x0024 07 40 00 00 */ unsigned char ApplyControlToken[4]; /* +0x0028 10 40 00 00 */ unsigned char QueryContextAttributesW[4]; /* +0x002c fe 3f 00 00 */ unsigned char ImpersonateSecurityContext[4]; /* +0x0030 07 40 00 00 */ unsigned char RevertSecurityContext[4]; /* +0x0034 07 40 00 00 */ unsigned char MakeSignature[4]; /* +0x0038 99 3c 00 00 */ unsigned char VerifySignature[4]; /* +0x003c 13 40 00 00 */ unsigned char FreeContextBuffer[4]; /* +0x0040 15 40 00 00 */ unsigned char QuerySecurityPackageInfoW[4]; /* +0x0044 5f 4a 00 00 */ void *Reserved3; /* +0x0048 */ void *Reserved4; /* +0x004c */ unsigned char ExportSecurityContext[4]; /* +0x0050 1d 40 00 00 */ unsigned char ImportSecurityContextW[4]; /* +0x0054 62 4a 00 00 */ unsigned char AddCredentialsW[4]; /* +0x0058 65 4a 00 00 */ void *Reserved8; /* +0x005c */ unsigned char QuerySecurityContextToken[4]; /* +0x0060 1e 3c 00 00 */ unsigned char EncryptMessage[4]; /* +0x0064 99 3c 00 00 */ unsigned char DecryptMessage[4]; /* +0x0068 13 40 00 00 */ unsigned char SetContextAttributesW[4]; /* +0x006c bf 3e 00 00 */ unsigned char SetCredentialsAttributesW[4]; /* +0x0070 bf 3e 00 00 */ unsigned char ChangeAccountPasswordW[4]; /* +0x0074 77 45 00 00 */ }; struct _ALPC_PORT_ATTRIBUTES { unsigned long Flags; /* +0x0000 */ unsigned char SecurityQos[12]; /* +0x0004 8c 31 00 00 */ unsigned long MaxMessageLength; /* +0x0010 */ unsigned long MemoryBandwidth; /* +0x0014 */ unsigned long MaxPoolUsage; /* +0x0018 */ unsigned long MaxSectionSize; /* +0x001c */ unsigned long MaxViewSize; /* +0x0020 */ unsigned long MaxTotalSectionSize; /* +0x0024 */ unsigned long DupObjectTypes; /* +0x0028 */ }; struct _SYSTEM_HANDLE_INFORMATION { unsigned long NumberOfHandles; /* +0x0000 */ unsigned char Handles[16]; /* +0x0004 6a 4a 00 00 */ }; struct _FSCTL_OFFLOAD_WRITE_INPUT { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long long FileOffset; /* +0x0008 */ unsigned long long CopyLength; /* +0x0010 */ unsigned long long TransferOffset; /* +0x0018 */ unsigned char Token[512]; /* +0x0020 61 15 00 00 */ }; struct _PROCESS_MEMORY_ALLOCATION_MODE { unsigned long Flags; /* +0x0000 */ /* unsigned char TopDown[0]; +0x0000 4a 12 00 00 */ unsigned char Reserved[4]; /* +0x0000 4b 12 00 00 */ }; struct _FILE_FULL_EA_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned char Flags; /* +0x0004 */ unsigned char EaNameLength; /* +0x0005 */ unsigned short EaValueLength; /* +0x0006 */ unsigned char EaName[4]; /* +0x0008 ea 1b 00 00 */ }; struct _TXFS_WRITE_BACKUP_INFORMATION { unsigned char Buffer[1]; /* +0x0000 04 12 00 00 */ }; struct _BOOT_AREA_INFO { unsigned long BootSectorCount; /* +0x0000 */ }; struct _HARDERROR_MSG { unsigned char h[24]; /* +0x0000 c2 44 00 00 */ long Status; /* +0x0018 */ unsigned char ErrorTime[8]; /* +0x0020 db 13 00 00 */ unsigned long ValidResponseOptions; /* +0x0028 */ unsigned long Response; /* +0x002c */ unsigned long NumberOfParameters; /* +0x0030 */ unsigned long UnicodeStringParameterMask; /* +0x0034 */ unsigned char Parameters[24]; /* +0x0038 5a 15 00 00 */ }; struct _PLUGPLAY_CONTROL_CLASS_ASSOCIATION_DATA { unsigned char DeviceInstance[8]; /* +0x0000 7c 3b 00 00 */ unsigned char InterfaceGuid[4]; /* +0x0008 78 15 00 00 */ unsigned char Reference[8]; /* +0x000c 7c 3b 00 00 */ unsigned char Register; /* +0x0014 */ unsigned char SymLink[4]; /* +0x0018 71 04 00 00 */ unsigned long SymLinkLength; /* +0x001c */ }; struct _RTL_BALANCED_NODE { /* unsigned char Children[0]; +0x0000 db 4a 00 00 */ unsigned char Left[4]; /* +0x0000 cc 44 00 00 */ unsigned char Right[4]; /* +0x0004 cc 44 00 00 */ /* unsigned char Red[0]; +0x0008 ab 33 00 00 */ /* unsigned char Balance[0]; +0x0008 b1 43 00 00 */ unsigned long ParentValue; /* +0x0008 */ }; struct _HD_TEXTFILTERW { unsigned char pszText[4]; /* +0x0000 71 04 00 00 */ unsigned char cchTextMax[4]; /* +0x0004 74 00 00 00 */ }; struct _SecPkgContext_NegotiationInfoA { unsigned char PackageInfo[4]; /* +0x0000 f7 3f 00 00 */ unsigned long NegotiationState; /* +0x0004 */ }; struct _SecPkgContext_LogoffTime { unsigned char tsLogoffTime[8]; /* +0x0000 db 13 00 00 */ }; struct _FILE_IO_PRIORITY_HINT_INFORMATION { unsigned char PriorityHint[4]; /* +0x0000 26 4b 00 00 */ }; struct _SECTION_IMAGE_INFORMATION64 { unsigned long long TransferAddress; /* +0x0000 */ unsigned long ZeroBits; /* +0x0008 */ unsigned long long MaximumStackSize; /* +0x0010 */ unsigned long long CommittedStackSize; /* +0x0018 */ unsigned long SubSystemType; /* +0x0020 */ unsigned short SubSystemMinorVersion; /* +0x0024 */ unsigned short SubSystemMajorVersion; /* +0x0026 */ unsigned long SubSystemVersion; /* +0x0024 */ unsigned long GpValue; /* +0x0028 */ unsigned short ImageCharacteristics; /* +0x002c */ unsigned short DllCharacteristics; /* +0x002e */ unsigned short Machine; /* +0x0030 */ unsigned char ImageContainsCode; /* +0x0032 */ unsigned char ImageFlags; /* +0x0033 */ /* unsigned char ComPlus[0]; +0x0033 ab 33 00 00 */ /* unsigned char ImageDynamicallyRelocated[0]; +0x0033 7b 43 00 00 */ unsigned char Reserved[1]; /* +0x0033 c6 44 00 00 */ unsigned long LoaderFlags; /* +0x0034 */ unsigned long ImageFileSize; /* +0x0038 */ unsigned long CheckSum; /* +0x003c */ }; struct _LINK_TRACKING_INFORMATION { unsigned char Type[4]; /* +0x0000 5b 4b 00 00 */ unsigned char VolumeId[16]; /* +0x0004 d3 19 00 00 */ }; struct _SHChangeNotifyEntry { unsigned char pidl[4]; /* +0x0000 e2 3d 00 00 */ unsigned char fRecursive[4]; /* +0x0004 74 00 00 00 */ }; struct _REPAIR_DEFERRED_EXTENTS_INPUT { unsigned long Flags; /* +0x0000 */ unsigned long ExtentCount; /* +0x0004 */ unsigned char Extents[16]; /* +0x0008 6e 45 00 00 */ }; struct _COVERAGE_MODULES { unsigned long ListAndReset; /* +0x0000 */ unsigned long NumberOfModules; /* +0x0004 */ unsigned char ModuleRequestInfo[20]; /* +0x0008 65 4b 00 00 */ unsigned char Modules[24]; /* +0x001c 67 4b 00 00 */ }; struct _LOOKUP_STREAM_FROM_CLUSTER_ENTRY { unsigned long OffsetToNext; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned char Reserved[8]; /* +0x0008 db 13 00 00 */ unsigned char Cluster[8]; /* +0x0010 db 13 00 00 */ unsigned char FileName[8]; /* +0x0018 83 12 00 00 */ }; struct _KEY_VALUE_PARTIAL_INFORMATION { unsigned long TitleIndex; /* +0x0000 */ unsigned long Type; /* +0x0004 */ unsigned long DataLength; /* +0x0008 */ unsigned char Data[4]; /* +0x000c 04 12 00 00 */ }; struct _INVERTED_FUNCTION_TABLE { unsigned long CurrentSize; /* +0x0000 */ unsigned long MaximumSize; /* +0x0004 */ unsigned char Epoch[4]; /* +0x0008 53 3f 00 00 */ unsigned char Overflow; /* +0x000c */ unsigned char TableEntry[8192]; /* +0x0010 75 4b 00 00 */ }; struct _TRACE_GUID_REGISTRATION { unsigned char Guid[4]; /* +0x0000 0b 17 00 00 */ void *RegHandle; /* +0x0004 */ }; struct _THREAD_PROFILING_INFORMATION { unsigned long long HardwareCounters; /* +0x0000 */ unsigned long Flags; /* +0x0008 */ unsigned long Enable; /* +0x000c */ unsigned char PerformanceData[8]; /* +0x0010 7d 4b 00 00 */ }; struct _KEY_NAME_INFORMATION { unsigned long NameLength; /* +0x0000 */ unsigned char Name[4]; /* +0x0004 83 12 00 00 */ }; struct _RTL_PROCESS_HEAPS { unsigned long NumberOfHeaps; /* +0x0000 */ unsigned char Heaps[64]; /* +0x0004 85 4b 00 00 */ }; struct tagTVDISPINFOA { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char item[40]; /* +0x000c bd 3f 00 00 */ }; struct _KEY_WOW64_FLAGS_INFORMATION { unsigned long UserFlags; /* +0x0000 */ }; struct _RTL_ANSI_STRING_BUFFER { unsigned char String[8]; /* +0x0000 92 3f 00 00 */ unsigned char ByteBuffer[24]; /* +0x0008 92 4b 00 00 */ unsigned char MinimumStaticBufferForTerminalNul[4]; /* +0x0020 04 12 00 00 */ }; struct _REPAIR_DEFERRED_EXTENTS_OUTPUT { unsigned long Status; /* +0x0000 */ unsigned long ErrorExtentIndex; /* +0x0004 */ unsigned char ErrorExtent[16]; /* +0x0008 6d 45 00 00 */ }; struct _TEB_ACTIVE_FRAME_CONTEXT_EX { unsigned char BasicContext[8]; /* +0x0000 e4 4b 00 00 */ unsigned char SourceLocation[4]; /* +0x0008 bf 12 00 00 */ }; struct _SHNAMEMAPPINGW { unsigned char pszOldPath[4]; /* +0x0000 71 04 00 00 */ unsigned char pszNewPath[4]; /* +0x0004 71 04 00 00 */ unsigned char cchOldPath[4]; /* +0x0008 74 00 00 00 */ unsigned char cchNewPath[4]; /* +0x000c 74 00 00 00 */ }; enum __MIDL_IInstallControl_0003 { ISF_DOWNLOAD = 1, ISF_INSTALL = 2, = 32771 }; struct _TXFS_LIST_TRANSACTION_LOCKED_FILES { unsigned char KtmTransaction[16]; /* +0x0000 ce 13 00 00 */ unsigned long long NumberOfFiles; /* +0x0010 */ unsigned long long BufferSizeRequired; /* +0x0018 */ unsigned long long Offset; /* +0x0020 */ }; struct _FILE_ATTRIBUTE_CACHE_VALUE { long Status; /* +0x0000 */ unsigned short Size; /* +0x0004 */ unsigned short RequiredSize; /* +0x0006 */ unsigned char Data[4]; /* +0x0008 04 12 00 00 */ }; struct _LOAD_ASDATA_TABLE { void *Module; /* +0x0000 */ unsigned char FilePath[4]; /* +0x0004 71 04 00 00 */ unsigned long Size; /* +0x0008 */ void *Handle; /* +0x000c */ long RefCount; /* +0x0010 */ unsigned char EntryPointActivationContext[4]; /* +0x0014 c4 31 00 00 */ }; struct _PS_CPU_QUOTA_QUERY_INFORMATION { unsigned long SessionCount; /* +0x0000 */ unsigned char SessionInformation[8]; /* +0x0004 33 4c 00 00 */ }; struct tagNMDATETIMEFORMATQUERYW { unsigned char nmhdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char pszFormat[4]; /* +0x000c 4f 13 00 00 */ unsigned char szMax[8]; /* +0x0010 21 13 00 00 */ }; struct _FILE_MOVE_CLUSTER_INFORMATION { unsigned long ClusterCount; /* +0x0000 */ void *RootDirectory; /* +0x0004 */ unsigned long FileNameLength; /* +0x0008 */ unsigned char FileName[4]; /* +0x000c 83 12 00 00 */ }; struct _FILE_VALID_DATA_LENGTH_INFORMATION { unsigned char ValidDataLength[8]; /* +0x0000 db 13 00 00 */ }; struct _RTL_STACK_TRACE_DATABASE_CREATE { void *CommitBase; /* +0x0000 */ unsigned long CommitSize; /* +0x0004 */ unsigned long ReserveSize; /* +0x0008 */ }; struct _STRING32 { unsigned short Length; /* +0x0000 */ unsigned short MaximumLength; /* +0x0002 */ unsigned long Buffer; /* +0x0004 */ }; struct _KLDR_DATA_TABLE_ENTRY64 { unsigned char InLoadOrderLinks[16]; /* +0x0000 f3 42 00 00 */ unsigned long long __Undefined1; /* +0x0010 */ unsigned long long __Undefined2; /* +0x0018 */ unsigned long long __Undefined3; /* +0x0020 */ unsigned long long NonPagedDebugInfo; /* +0x0028 */ unsigned long long DllBase; /* +0x0030 */ unsigned long long EntryPoint; /* +0x0038 */ unsigned long SizeOfImage; /* +0x0040 */ unsigned char FullDllName[16]; /* +0x0048 7a 4c 00 00 */ unsigned char BaseDllName[16]; /* +0x0058 7a 4c 00 00 */ unsigned long Flags; /* +0x0068 */ unsigned short LoadCount; /* +0x006c */ unsigned short __Undefined5; /* +0x006e */ unsigned long long __Undefined6; /* +0x0070 */ unsigned long CheckSum; /* +0x0078 */ unsigned long __padding1; /* +0x007c */ unsigned long TimeDateStamp; /* +0x0080 */ unsigned long __padding2; /* +0x0084 */ }; struct _FILE_BOTH_DIR_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long FileIndex; /* +0x0004 */ unsigned char CreationTime[8]; /* +0x0008 db 13 00 00 */ unsigned char LastAccessTime[8]; /* +0x0010 db 13 00 00 */ unsigned char LastWriteTime[8]; /* +0x0018 db 13 00 00 */ unsigned char ChangeTime[8]; /* +0x0020 db 13 00 00 */ unsigned char EndOfFile[8]; /* +0x0028 db 13 00 00 */ unsigned char AllocationSize[8]; /* +0x0030 db 13 00 00 */ unsigned long FileAttributes; /* +0x0038 */ unsigned long FileNameLength; /* +0x003c */ unsigned long EaSize; /* +0x0040 */ char ShortNameLength; /* +0x0044 */ unsigned char ShortName[24]; /* +0x0046 1b 29 00 00 */ unsigned char FileName[2]; /* +0x005e 83 12 00 00 */ }; struct _SYSTEM_PROCESSOR_PERFORMANCE_HITCOUNT { unsigned long Hits; /* +0x0000 */ unsigned char PercentFrequency; /* +0x0004 */ }; struct _SYSTEM_VERIFIER_COUNTERS_INFORMATION { unsigned char Legacy[104]; /* +0x0000 82 4c 00 00 */ unsigned long RaiseIrqls; /* +0x0068 */ unsigned long AcquireSpinLocks; /* +0x006c */ unsigned long SynchronizeExecutions; /* +0x0070 */ unsigned long AllocationsWithNoTag; /* +0x0074 */ unsigned long AllocationsFailed; /* +0x0078 */ unsigned long AllocationsFailedDeliberately; /* +0x007c */ unsigned long LockedBytes; /* +0x0080 */ unsigned long PeakLockedBytes; /* +0x0084 */ unsigned long MappedLockedBytes; /* +0x0088 */ unsigned long PeakMappedLockedBytes; /* +0x008c */ unsigned long MappedIoSpaceBytes; /* +0x0090 */ unsigned long PeakMappedIoSpaceBytes; /* +0x0094 */ unsigned long PagesForMdlBytes; /* +0x0098 */ unsigned long PeakPagesForMdlBytes; /* +0x009c */ unsigned long ContiguousMemoryBytes; /* +0x00a0 */ unsigned long PeakContiguousMemoryBytes; /* +0x00a4 */ }; struct _SYSTEM_EXTENDED_THREAD_INFORMATION { unsigned char ThreadInfo[64]; /* +0x0000 85 4c 00 00 */ void *StackBase; /* +0x0040 */ void *StackLimit; /* +0x0044 */ void *Win32StartAddress; /* +0x0048 */ void *TebBase; /* +0x004c */ unsigned long Reserved2; /* +0x0050 */ unsigned long Reserved3; /* +0x0054 */ unsigned long Reserved4; /* +0x0058 */ }; struct _RTL_RELATIVE_NAME_U { unsigned char RelativeName[8]; /* +0x0000 7c 3b 00 00 */ void *ContainingDirectory; /* +0x0008 */ unsigned char CurDirRef[4]; /* +0x000c 89 4c 00 00 */ }; struct tagTVITEMCHANGE { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char uChanged[4]; /* +0x000c 75 00 00 00 */ unsigned char hItem[4]; /* +0x0010 b1 3d 00 00 */ unsigned char uStateNew[4]; /* +0x0014 75 00 00 00 */ unsigned char uStateOld[4]; /* +0x0018 75 00 00 00 */ long lParam; /* +0x001c */ }; struct _FILEOFFSET_INFORMATION { /* unsigned char DontUse[0]; +0x0000 a3 4c 00 00 */ /* unsigned char Offset[0]; +0x0000 a4 4c 00 00 */ unsigned char Reserved[8]; /* +0x0000 a5 4c 00 00 */ }; struct _SecPkgContext_LastClientTokenStatus { unsigned char LastClientTokenStatus[4]; /* +0x0000 a8 4c 00 00 */ }; struct _BOOT_AREA_INFO:: { unsigned char Offset[8]; /* +0x0000 db 13 00 00 */ }; struct _MEMORY_SCRUB_INFORMATION { void *Handle; /* +0x0000 */ unsigned long PagesScrubbed; /* +0x0004 */ }; struct _SHChangeUpdateImageIDList { unsigned short cb; /* +0x0000 */ unsigned char iIconIndex[4]; /* +0x0002 74 00 00 00 */ unsigned char iCurIndex[4]; /* +0x0006 74 00 00 00 */ unsigned char uFlags[4]; /* +0x000a 75 00 00 00 */ unsigned long dwProcessID; /* +0x000e */ unsigned char szName[520]; /* +0x0012 a8 13 00 00 */ unsigned short cbZero; /* +0x021a */ }; struct tagWNODE_METHOD_ITEM { unsigned char WnodeHeader[48]; /* +0x0000 b5 4c 00 00 */ unsigned long OffsetInstanceName; /* +0x0030 */ unsigned long InstanceIndex; /* +0x0034 */ unsigned long MethodId; /* +0x0038 */ unsigned long DataBlockOffset; /* +0x003c */ unsigned long SizeDataBlock; /* +0x0040 */ unsigned char VariableData[4]; /* +0x0044 fc 1f 00 00 */ }; struct _SecPkgContext_PackageInfoW { unsigned char PackageInfo[4]; /* +0x0000 8a 3e 00 00 */ }; struct _CONTEXT_CHUNK { long Offset; /* +0x0000 */ unsigned long Length; /* +0x0004 */ }; struct _JOURNAL_SET_KEY_USER_FLAGS_INFORMATION { unsigned char Action[8]; /* +0x0000 9f 3d 00 00 */ unsigned long long RecordNumber; /* +0x0008 */ unsigned char TimeStamp[8]; /* +0x0010 db 13 00 00 */ unsigned char KeyPathName[8]; /* +0x0018 7c 3b 00 00 */ unsigned long OldFlags; /* +0x0020 */ unsigned long NewFlags; /* +0x0024 */ }; struct tagNMDATETIMESTRINGA { unsigned char nmhdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char pszUserString[4]; /* +0x000c bf 12 00 00 */ unsigned char st[16]; /* +0x0010 7d 13 00 00 */ unsigned long dwFlags; /* +0x0020 */ }; struct ASSOCIATIONELEMENT { unsigned char ac[4]; /* +0x0000 ca 4c 00 00 */ unsigned char hkClass[4]; /* +0x0004 63 2f 00 00 */ unsigned char pszClass[4]; /* +0x0008 4f 13 00 00 */ }; struct _SYSTEM_HIBERFILE_INFORMATION { unsigned long NumberOfMcbPairs; /* +0x0000 */ unsigned char Mcb[8]; /* +0x0008 3e 49 00 00 */ }; struct _SecPkgContext_KeyInfoA { char *sSignatureAlgorithmName; /* +0x0000 */ char *sEncryptAlgorithmName; /* +0x0004 */ unsigned long KeySize; /* +0x0008 */ unsigned long SignatureAlgorithm; /* +0x000c */ unsigned long EncryptAlgorithm; /* +0x0010 */ }; struct _CSV_QUERY_REDIRECT_STATE { unsigned long MdsNodeId; /* +0x0000 */ unsigned long DsNodeId; /* +0x0004 */ unsigned char FileRedirected; /* +0x0008 */ }; struct _RTL_HANDLE_TABLE { unsigned long MaximumNumberOfHandles; /* +0x0000 */ unsigned long SizeOfHandleTableEntry; /* +0x0004 */ unsigned long UseHeap; /* +0x0008 */ unsigned long TableSize; /* +0x000c */ unsigned char FreeHandles[4]; /* +0x0010 1d 4d 00 00 */ unsigned char CommittedHandles[4]; /* +0x0014 1d 4d 00 00 */ unsigned char UnCommittedHandles[4]; /* +0x0018 1d 4d 00 00 */ unsigned char MaxReservedHandles[4]; /* +0x001c 1d 4d 00 00 */ }; struct tagNMREBAR { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned long dwMask; /* +0x000c */ unsigned char uBand[4]; /* +0x0010 75 00 00 00 */ unsigned char fStyle[4]; /* +0x0014 75 00 00 00 */ unsigned char wID[4]; /* +0x0018 75 00 00 00 */ long lParam; /* +0x001c */ }; struct tagLVITEMA { unsigned char mask[4]; /* +0x0000 75 00 00 00 */ unsigned char iItem[4]; /* +0x0004 74 00 00 00 */ unsigned char iSubItem[4]; /* +0x0008 74 00 00 00 */ unsigned char state[4]; /* +0x000c 75 00 00 00 */ unsigned char stateMask[4]; /* +0x0010 75 00 00 00 */ char *pszText; /* +0x0014 */ unsigned char cchTextMax[4]; /* +0x0018 74 00 00 00 */ unsigned char iImage[4]; /* +0x001c 74 00 00 00 */ long lParam; /* +0x0020 */ unsigned char iIndent[4]; /* +0x0024 74 00 00 00 */ unsigned char iGroupId[4]; /* +0x0028 74 00 00 00 */ unsigned char cColumns[4]; /* +0x002c 75 00 00 00 */ unsigned char puColumns[4]; /* +0x0030 75 04 00 00 */ unsigned char piColFmt[4]; /* +0x0034 74 04 00 00 */ unsigned char iGroup[4]; /* +0x0038 74 00 00 00 */ }; struct _BOOT_ENTRY { unsigned long Version; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned long Id; /* +0x0008 */ unsigned long Attributes; /* +0x000c */ unsigned long FriendlyNameOffset; /* +0x0010 */ unsigned long BootFilePathOffset; /* +0x0014 */ unsigned long OsOptionsLength; /* +0x0018 */ unsigned char OsOptions[4]; /* +0x001c 04 12 00 00 */ }; struct _RTL_DEBUG_INFORMATION { void *SectionHandleClient; /* +0x0000 */ void *ViewBaseClient; /* +0x0004 */ void *ViewBaseTarget; /* +0x0008 */ unsigned long ViewBaseDelta; /* +0x000c */ void *EventPairClient; /* +0x0010 */ void *EventPairTarget; /* +0x0014 */ void *TargetProcessId; /* +0x0018 */ void *TargetThreadHandle; /* +0x001c */ unsigned long Flags; /* +0x0020 */ unsigned long OffsetFree; /* +0x0024 */ unsigned long CommitSize; /* +0x0028 */ unsigned long ViewSize; /* +0x002c */ /* unsigned char Modules[0]; +0x0030 94 46 00 00 */ unsigned char ModulesEx[4]; /* +0x0030 50 4d 00 00 */ unsigned char BackTraces[4]; /* +0x0034 eb 42 00 00 */ unsigned char Heaps[4]; /* +0x0038 52 4d 00 00 */ unsigned char Locks[4]; /* +0x003c 54 4d 00 00 */ void *SpecificHeap; /* +0x0040 */ void *TargetProcessHandle; /* +0x0044 */ unsigned char VerifierOptions[4]; /* +0x0048 56 4d 00 00 */ void *ProcessHeap; /* +0x004c */ void *CriticalSectionHandle; /* +0x0050 */ void *CriticalSectionOwnerThread; /* +0x0054 */ unsigned char Reserved[16]; /* +0x0058 57 4d 00 00 */ }; struct _PS_SYSTEM_DLL_INIT_BLOCK { unsigned long Size; /* +0x0000 */ unsigned long SystemDllWowRelocation; /* +0x0004 */ unsigned long long SystemDllNativeRelocation; /* +0x0008 */ unsigned char Wow64SharedInformation[64]; /* +0x0010 8b 1c 00 00 */ unsigned long RngData; /* +0x0050 */ unsigned long long MitigationOptions; /* +0x0058 */ }; struct _RTL_RESOURCE { unsigned char CriticalSection[24]; /* +0x0000 fc 16 00 00 */ void *SharedSemaphore; /* +0x0018 */ unsigned char NumberOfWaitingShared[4]; /* +0x001c 53 3f 00 00 */ void *ExclusiveSemaphore; /* +0x0020 */ unsigned char NumberOfWaitingExclusive[4]; /* +0x0024 53 3f 00 00 */ unsigned char NumberOfActive[4]; /* +0x0028 5b 3f 00 00 */ void *ExclusiveOwnerThread; /* +0x002c */ unsigned long Flags; /* +0x0030 */ unsigned char DebugInfo[4]; /* +0x0034 26 1a 00 00 */ }; struct _SecPkgContext_NativeNamesA { char *sClientName; /* +0x0000 */ char *sServerName; /* +0x0004 */ }; struct _PROFILE_SOURCE_INFO { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long Source; /* +0x0004 */ unsigned long MinInterval; /* +0x0008 */ unsigned long MaxInterval; /* +0x000c */ unsigned long long Reserved; /* +0x0010 */ unsigned char Description[8]; /* +0x0018 83 12 00 00 */ }; struct _PROCESS_AFFINITY_UPDATE_MODE { unsigned long Flags; /* +0x0000 */ /* unsigned char EnableAutoUpdate[0]; +0x0000 4a 12 00 00 */ /* unsigned char Permanent[0]; +0x0000 9b 15 00 00 */ unsigned char Reserved[4]; /* +0x0000 9c 15 00 00 */ }; struct _SD_CHANGE_MACHINE_SID_OUTPUT { unsigned long long NumSDChangedSuccess; /* +0x0000 */ unsigned long long NumSDChangedFail; /* +0x0008 */ unsigned long long NumSDUnused; /* +0x0010 */ unsigned long long NumSDTotal; /* +0x0018 */ unsigned long long NumMftSDChangedSuccess; /* +0x0020 */ unsigned long long NumMftSDChangedFail; /* +0x0028 */ unsigned long long NumMftSDTotal; /* +0x0030 */ }; struct _COVERAGE_MODULE_REQUEST:: { /* unsigned char MD5Hash[0]; +0x0000 d3 19 00 00 */ unsigned char ModuleName[16]; /* +0x0000 7c 3b 00 00 */ }; struct tagNMLVFINDITEMW { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char iStart[4]; /* +0x000c 74 00 00 00 */ unsigned char lvfi[24]; /* +0x0010 b1 4d 00 00 */ }; struct _OBJECT_TYPE_INFORMATION { unsigned char TypeName[8]; /* +0x0000 7c 3b 00 00 */ unsigned long TotalNumberOfObjects; /* +0x0008 */ unsigned long TotalNumberOfHandles; /* +0x000c */ unsigned long TotalPagedPoolUsage; /* +0x0010 */ unsigned long TotalNonPagedPoolUsage; /* +0x0014 */ unsigned long TotalNamePoolUsage; /* +0x0018 */ unsigned long TotalHandleTableUsage; /* +0x001c */ unsigned long HighWaterNumberOfObjects; /* +0x0020 */ unsigned long HighWaterNumberOfHandles; /* +0x0024 */ unsigned long HighWaterPagedPoolUsage; /* +0x0028 */ unsigned long HighWaterNonPagedPoolUsage; /* +0x002c */ unsigned long HighWaterNamePoolUsage; /* +0x0030 */ unsigned long HighWaterHandleTableUsage; /* +0x0034 */ unsigned long InvalidAttributes; /* +0x0038 */ unsigned char GenericMapping[16]; /* +0x003c f1 1c 00 00 */ unsigned long ValidAccessMask; /* +0x004c */ unsigned char SecurityRequired; /* +0x0050 */ unsigned char MaintainHandleCount; /* +0x0051 */ unsigned long PoolType; /* +0x0054 */ unsigned long DefaultPagedPoolCharge; /* +0x0058 */ unsigned long DefaultNonPagedPoolCharge; /* +0x005c */ }; struct _FSCTL_QUERY_FAT_BPB_BUFFER { unsigned char First0x24BytesOfBootSector[36]; /* +0x0000 c2 4d 00 00 */ }; struct _TRACE_PROFILE_INTERVAL { unsigned long Source; /* +0x0000 */ unsigned long Interval; /* +0x0004 */ }; struct _DEVICE_FLAGS { /* unsigned char Failed[0]; +0x0000 4a 12 00 00 */ /* unsigned char ReadOnly[0]; +0x0000 9b 15 00 00 */ /* unsigned char Removable[0]; +0x0000 68 18 00 00 */ /* unsigned char ConsoleIn[0]; +0x0000 69 18 00 00 */ /* unsigned char ConsoleOut[0]; +0x0000 40 21 00 00 */ /* unsigned char Input[0]; +0x0000 41 21 00 00 */ unsigned char Output[4]; /* +0x0000 6b 18 00 00 */ }; struct _PROCESS_HANDLE_INFORMATION { unsigned long HandleCount; /* +0x0000 */ unsigned long HandleCountHighWatermark; /* +0x0004 */ }; struct _CM_INT13_DRIVE_PARAMETER { unsigned short DriveSelect; /* +0x0000 */ unsigned long MaxCylinders; /* +0x0002 */ unsigned short SectorsPerTrack; /* +0x0006 */ unsigned short MaxHeads; /* +0x0008 */ unsigned short NumberDrives; /* +0x000a */ }; struct _PLUGPLAY_CONTROL_LEGACY_DEVGEN_DATA { unsigned char ServiceName[8]; /* +0x0000 7c 3b 00 00 */ unsigned char DeviceInstance[4]; /* +0x0008 71 04 00 00 */ unsigned long DeviceInstanceLength; /* +0x000c */ }; struct _SecPkgContext_PackageInfoA { unsigned char PackageInfo[4]; /* +0x0000 f7 3f 00 00 */ }; struct _SHELLEXECUTEINFOW { unsigned long cbSize; /* +0x0000 */ unsigned long fMask; /* +0x0004 */ unsigned char hwnd[4]; /* +0x0008 fc 11 00 00 */ unsigned char lpVerb[4]; /* +0x000c 4f 13 00 00 */ unsigned char lpFile[4]; /* +0x0010 4f 13 00 00 */ unsigned char lpParameters[4]; /* +0x0014 4f 13 00 00 */ unsigned char lpDirectory[4]; /* +0x0018 4f 13 00 00 */ unsigned char nShow[4]; /* +0x001c 74 00 00 00 */ unsigned char hInstApp[4]; /* +0x0020 f5 12 00 00 */ void *lpIDList; /* +0x0024 */ unsigned char lpClass[4]; /* +0x0028 4f 13 00 00 */ unsigned char hkeyClass[4]; /* +0x002c 63 2f 00 00 */ unsigned long dwHotKey; /* +0x0030 */ void *hIcon; /* +0x0034 */ void *hMonitor; /* +0x0034 */ void *hProcess; /* +0x0038 */ }; struct tagWNODE_EVENT_ITEM { unsigned char WnodeHeader[48]; /* +0x0000 b5 4c 00 00 */ }; struct tagBANDSITEINFO { unsigned long dwMask; /* +0x0000 */ unsigned long dwState; /* +0x0004 */ unsigned long dwStyle; /* +0x0008 */ }; struct tagWNODE_SINGLE_INSTANCE { unsigned char WnodeHeader[48]; /* +0x0000 b5 4c 00 00 */ unsigned long OffsetInstanceName; /* +0x0030 */ unsigned long InstanceIndex; /* +0x0034 */ unsigned long DataBlockOffset; /* +0x0038 */ unsigned long SizeDataBlock; /* +0x003c */ /* unsigned char VariableData[0]; +0x0040 fc 1f 00 00 */ }; struct _LPC_UNREGISTER_PROCESS_MSG { unsigned char PortMsg[24]; /* +0x0000 c2 44 00 00 */ void *UniqueProcessId; /* +0x0018 */ }; struct _SFV_SETITEMPOS { unsigned char pidl[4]; /* +0x0000 e2 3d 00 00 */ unsigned char pt[8]; /* +0x0004 ce 12 00 00 */ }; struct tagNMTTCUSTOMDRAW { unsigned char nmcd[48]; /* +0x0000 f7 3e 00 00 */ unsigned char uDrawFlags[4]; /* +0x0030 75 00 00 00 */ }; struct _SHFILEOPSTRUCTW { unsigned char hwnd[4]; /* +0x0000 fc 11 00 00 */ unsigned char wFunc[4]; /* +0x0004 75 00 00 00 */ unsigned char pFrom[4]; /* +0x0008 4f 13 00 00 */ unsigned char pTo[4]; /* +0x000c 4f 13 00 00 */ unsigned short fFlags; /* +0x0010 */ unsigned char fAnyOperationsAborted[4]; /* +0x0012 74 00 00 00 */ void *hNameMappings; /* +0x0016 */ unsigned char lpszProgressTitle[4]; /* +0x001a 4f 13 00 00 */ }; struct _PROCESS_EXCEPTION_PORT { void *ExceptionPortHandle; /* +0x0000 */ unsigned long StateFlags; /* +0x0004 */ }; struct _KEY_HANDLE_TAGS_INFORMATION { unsigned long HandleTags; /* +0x0000 */ }; struct _RTL_MODULE_BASIC_INFO { void *ImageBase; /* +0x0000 */ }; struct _OBJECT_NAME_INFORMATION { unsigned char Name[8]; /* +0x0000 7c 3b 00 00 */ }; struct _SYSTEM_KERNEL_DEBUGGER_INFORMATION { unsigned char KernelDebuggerEnabled; /* +0x0000 */ unsigned char KernelDebuggerNotPresent; /* +0x0001 */ }; struct _REG_NOTIFY_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned char Action[4]; /* +0x0004 35 4e 00 00 */ unsigned long KeyLength; /* +0x0008 */ unsigned char Key[4]; /* +0x000c 83 12 00 00 */ }; struct _PROCESS_PRIORITY_CLASS { unsigned char Foreground; /* +0x0000 */ unsigned char PriorityClass; /* +0x0001 */ }; struct _TXFS_TRANSACTION_ACTIVE_INFO { unsigned char TransactionsActiveAtSnapshot; /* +0x0000 */ }; struct _EVENT_BASIC_INFORMATION { unsigned char EventType[4]; /* +0x0000 4f 4e 00 00 */ long EventState; /* +0x0004 */ }; struct _PROCESSOR_PROFILE_CONTROL_AREA { unsigned char PebsDsSaveArea[96]; /* +0x0000 55 41 00 00 */ }; struct _PAGE_PRIORITY_INFORMATION { unsigned long PagePriority; /* +0x0000 */ }; struct tagLVFINDINFOA { unsigned char flags[4]; /* +0x0000 75 00 00 00 */ unsigned char psz[4]; /* +0x0004 bf 12 00 00 */ long lParam; /* +0x0008 */ unsigned char pt[8]; /* +0x000c ce 12 00 00 */ unsigned char vkDirection[4]; /* +0x0014 75 00 00 00 */ }; struct _POWER_STATE { /* unsigned char SystemState[0]; +0x0000 df 13 00 00 */ unsigned char DeviceState[4]; /* +0x0000 dd 13 00 00 */ }; struct tagTBADDBITMAP { unsigned char hInst[4]; /* +0x0000 f5 12 00 00 */ unsigned char nID[4]; /* +0x0004 75 00 00 00 */ }; struct tagNMTBGETINFOTIPA { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ char *pszText; /* +0x000c */ unsigned char cchTextMax[4]; /* +0x0010 74 00 00 00 */ unsigned char iItem[4]; /* +0x0014 74 00 00 00 */ long lParam; /* +0x0018 */ }; struct _CLIENT_ID64 { unsigned long long UniqueProcess; /* +0x0000 */ unsigned long long UniqueThread; /* +0x0008 */ }; struct _PLUGPLAY_CONTROL_BLOCKED_DRIVER_DATA { unsigned long Flags; /* +0x0000 */ unsigned long BufferLength; /* +0x0004 */ void *Buffer; /* +0x0008 */ }; struct _TBINFO { unsigned char cbuttons[4]; /* +0x0000 75 00 00 00 */ unsigned char uFlags[4]; /* +0x0004 75 00 00 00 */ }; struct tagWNODE_TOO_SMALL { unsigned char WnodeHeader[48]; /* +0x0000 b5 4c 00 00 */ unsigned long SizeNeeded; /* +0x0030 */ }; struct _PROCESS_DISK_COUNTERS { unsigned long long BytesRead; /* +0x0000 */ unsigned long long BytesWritten; /* +0x0008 */ unsigned long long ReadOperationCount; /* +0x0010 */ unsigned long long WriteOperationCount; /* +0x0018 */ unsigned long long FlushOperationCount; /* +0x0020 */ }; struct _SecPkgContext_CredentialNameA { unsigned long CredentialType; /* +0x0000 */ char *sCredentialName; /* +0x0004 */ }; struct tagLVGROUP { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char mask[4]; /* +0x0004 75 00 00 00 */ unsigned char pszHeader[4]; /* +0x0008 71 04 00 00 */ unsigned char cchHeader[4]; /* +0x000c 74 00 00 00 */ unsigned char pszFooter[4]; /* +0x0010 71 04 00 00 */ unsigned char cchFooter[4]; /* +0x0014 74 00 00 00 */ unsigned char iGroupId[4]; /* +0x0018 74 00 00 00 */ unsigned char stateMask[4]; /* +0x001c 75 00 00 00 */ unsigned char state[4]; /* +0x0020 75 00 00 00 */ unsigned char uAlign[4]; /* +0x0024 75 00 00 00 */ unsigned char pszSubtitle[4]; /* +0x0028 71 04 00 00 */ unsigned char cchSubtitle[4]; /* +0x002c 75 00 00 00 */ unsigned char pszTask[4]; /* +0x0030 71 04 00 00 */ unsigned char cchTask[4]; /* +0x0034 75 00 00 00 */ unsigned char pszDescriptionTop[4]; /* +0x0038 71 04 00 00 */ unsigned char cchDescriptionTop[4]; /* +0x003c 75 00 00 00 */ unsigned char pszDescriptionBottom[4]; /* +0x0040 71 04 00 00 */ unsigned char cchDescriptionBottom[4]; /* +0x0044 75 00 00 00 */ unsigned char iTitleImage[4]; /* +0x0048 74 00 00 00 */ unsigned char iExtendedImage[4]; /* +0x004c 74 00 00 00 */ unsigned char iFirstItem[4]; /* +0x0050 74 00 00 00 */ unsigned char cItems[4]; /* +0x0054 75 00 00 00 */ unsigned char pszSubsetTitle[4]; /* +0x0058 71 04 00 00 */ unsigned char cchSubsetTitle[4]; /* +0x005c 75 00 00 00 */ }; struct _SI_COPYFILE { unsigned long SourceFileNameLength; /* +0x0000 */ unsigned long DestinationFileNameLength; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ unsigned char FileNameBuffer[4]; /* +0x000c 83 12 00 00 */ }; struct _UDACCEL { unsigned char nSec[4]; /* +0x0000 75 00 00 00 */ unsigned char nInc[4]; /* +0x0004 75 00 00 00 */ }; struct tagNMTBGETINFOTIPW { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char pszText[4]; /* +0x000c 71 04 00 00 */ unsigned char cchTextMax[4]; /* +0x0010 74 00 00 00 */ unsigned char iItem[4]; /* +0x0014 74 00 00 00 */ long lParam; /* +0x0018 */ }; struct _RTL_ELEVATION_FLAGS { unsigned long Flags; /* +0x0000 */ /* unsigned char ElevationEnabled[0]; +0x0000 4a 12 00 00 */ /* unsigned char VirtualizationEnabled[0]; +0x0000 9b 15 00 00 */ /* unsigned char InstallerDetectEnabled[0]; +0x0000 68 18 00 00 */ unsigned char ReservedBits[4]; /* +0x0000 c2 4e 00 00 */ }; struct _EXCEPTION_LOG { unsigned char ExceptionRecord[80]; /* +0x0000 ff 18 00 00 */ unsigned char ContextRecord[716]; /* +0x0050 7e 1e 00 00 */ unsigned char Type[4]; /* +0x031c e9 4e 00 00 */ long Disposition; /* +0x0320 */ unsigned long Thread; /* +0x0324 */ unsigned long ControlPc; /* +0x0328 */ void *Handler; /* +0x032c */ }; struct _SHChangeProductKeyAsIDList { unsigned short cb; /* +0x0000 */ unsigned char wszProductKey[78]; /* +0x0002 61 21 00 00 */ unsigned short cbZero; /* +0x0050 */ }; struct _SYSTEM_MEMORY_CHANNEL_INFORMATION { unsigned long ChannelNumber; /* +0x0000 */ unsigned long ChannelHeatIndex; /* +0x0004 */ unsigned long long TotalPageCount; /* +0x0008 */ unsigned long long ZeroPageCount; /* +0x0010 */ unsigned long long FreePageCount; /* +0x0018 */ unsigned long long StandbyPageCount; /* +0x0020 */ }; struct _OBJECT_BASIC_INFORMATION { unsigned long Attributes; /* +0x0000 */ unsigned long GrantedAccess; /* +0x0004 */ unsigned long HandleCount; /* +0x0008 */ unsigned long PointerCount; /* +0x000c */ unsigned long PagedPoolCharge; /* +0x0010 */ unsigned long NonPagedPoolCharge; /* +0x0014 */ unsigned char Reserved[12]; /* +0x0018 13 12 00 00 */ unsigned long NameInfoSize; /* +0x0024 */ unsigned long TypeInfoSize; /* +0x0028 */ unsigned long SecurityDescriptorSize; /* +0x002c */ unsigned char CreationTime[8]; /* +0x0030 db 13 00 00 */ }; struct _COVERAGE_SECTION_HEADER { unsigned long Signature; /* +0x0000 */ unsigned long CoverageType; /* +0x0004 */ unsigned char MD5Hash[16]; /* +0x0008 d3 19 00 00 */ unsigned long CoverageSectionSize; /* +0x0018 */ unsigned long CoverageVectorSize; /* +0x001c */ unsigned long CoverageVectorOffset; /* +0x0020 */ unsigned long ExtraDataOffset; /* +0x0024 */ }; struct _PORT_DATA_ENTRY { void *Base; /* +0x0000 */ unsigned long Size; /* +0x0004 */ }; struct _RTL_DYNAMIC_HASH_TABLE_CONTEXT { unsigned char ChainHead[4]; /* +0x0000 f7 36 00 00 */ unsigned char PrevLinkage[4]; /* +0x0004 f7 36 00 00 */ unsigned long Signature; /* +0x0008 */ }; struct _NOTIFYICONDATAA { unsigned long cbSize; /* +0x0000 */ unsigned char hWnd[4]; /* +0x0004 fc 11 00 00 */ unsigned char uID[4]; /* +0x0008 75 00 00 00 */ unsigned char uFlags[4]; /* +0x000c 75 00 00 00 */ unsigned char uCallbackMessage[4]; /* +0x0010 75 00 00 00 */ unsigned char hIcon[4]; /* +0x0014 92 19 00 00 */ unsigned char szTip[128]; /* +0x0018 29 14 00 00 */ unsigned long dwState; /* +0x0098 */ unsigned long dwStateMask; /* +0x009c */ unsigned char szInfo[256]; /* +0x00a0 42 4f 00 00 */ /* unsigned char uTimeout[0]; +0x01a0 75 00 00 00 */ unsigned char uVersion[4]; /* +0x01a0 75 00 00 00 */ unsigned char szInfoTitle[64]; /* +0x01a4 fa 47 00 00 */ unsigned long dwInfoFlags; /* +0x01e4 */ unsigned char guidItem[16]; /* +0x01e8 ce 13 00 00 */ unsigned char hBalloonIcon[4]; /* +0x01f8 92 19 00 00 */ }; struct _PROCESS_HANDLE_TABLE_ENTRY_INFO { void *HandleValue; /* +0x0000 */ unsigned long HandleCount; /* +0x0004 */ unsigned long PointerCount; /* +0x0008 */ unsigned long GrantedAccess; /* +0x000c */ unsigned long ObjectTypeIndex; /* +0x0010 */ unsigned long HandleAttributes; /* +0x0014 */ unsigned long Reserved; /* +0x0018 */ }; struct _CM_COMPONENT_INFORMATION { unsigned char Flags[4]; /* +0x0000 4f 4f 00 00 */ unsigned long Version; /* +0x0004 */ unsigned long Key; /* +0x0008 */ unsigned long AffinityMask; /* +0x000c */ }; struct _MUIREGISTRYINFO { unsigned char Owned[4]; /* +0x0000 75 00 00 00 */ unsigned char InstallLanguageFallback[8]; /* +0x0004 72 22 00 00 */ unsigned long Generation; /* +0x000c */ unsigned long ProcessGeneration; /* +0x0010 */ unsigned char Installed[4]; /* +0x0014 53 4f 00 00 */ unsigned char Strings[4]; /* +0x0018 35 44 00 00 */ unsigned char MachineConfig[4]; /* +0x001c 55 4f 00 00 */ unsigned char UserConfig[4]; /* +0x0020 55 4f 00 00 */ unsigned char MachinePreferred[4]; /* +0x0024 57 4f 00 00 */ unsigned char UserPreferred[4]; /* +0x0028 57 4f 00 00 */ unsigned char ProcessPreferred[4]; /* +0x002c 57 4f 00 00 */ unsigned char MergedUser[4]; /* +0x0030 57 4f 00 00 */ unsigned char MergedMachine[4]; /* +0x0034 57 4f 00 00 */ unsigned char MergedFallback[4]; /* +0x0038 57 4f 00 00 */ unsigned char PrevRegInfo[4]; /* +0x003c 10 3f 00 00 */ unsigned long MUI_Locked; /* +0x0040 */ unsigned long MUI_SE; /* +0x0044 */ unsigned long MUI_NumberAllowed; /* +0x0048 */ unsigned char MUI_AllowedLanguage[4]; /* +0x004c 71 04 00 00 */ unsigned char MUI_InstalledSKU[4]; /* +0x0050 71 04 00 00 */ unsigned long cbInstalledSKU; /* +0x0054 */ unsigned long cbAllowedLanguage; /* +0x0058 */ unsigned char MUI_DisallowedLanguage[4]; /* +0x005c 71 04 00 00 */ unsigned long cbDisallowedLanguage; /* +0x0060 */ }; struct _RTL_PROCESS_BACKTRACES { unsigned long CommittedMemory; /* +0x0000 */ unsigned long ReservedMemory; /* +0x0004 */ unsigned long NumberOfBackTraceLookups; /* +0x0008 */ unsigned long NumberOfBackTraces; /* +0x000c */ unsigned char BackTraces[140]; /* +0x0010 5b 4f 00 00 */ }; struct _FILE_NAMES_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long FileIndex; /* +0x0004 */ unsigned long FileNameLength; /* +0x0008 */ unsigned char FileName[4]; /* +0x000c 83 12 00 00 */ }; struct tagTVGETITEMPARTRECTINFO { unsigned char hti[4]; /* +0x0000 b1 3d 00 00 */ unsigned char prc[4]; /* +0x0004 c0 1d 00 00 */ unsigned char partID[4]; /* +0x0008 94 4f 00 00 */ }; struct _FILE_EA_INFORMATION { unsigned long EaSize; /* +0x0000 */ }; struct _EVENT_TRACE_PROPERTIES { unsigned char Wnode[48]; /* +0x0000 b5 4c 00 00 */ unsigned long BufferSize; /* +0x0030 */ unsigned long MinimumBuffers; /* +0x0034 */ unsigned long MaximumBuffers; /* +0x0038 */ unsigned long MaximumFileSize; /* +0x003c */ unsigned long LogFileMode; /* +0x0040 */ unsigned long FlushTimer; /* +0x0044 */ unsigned long EnableFlags; /* +0x0048 */ long AgeLimit; /* +0x004c */ unsigned long NumberOfBuffers; /* +0x0050 */ unsigned long FreeBuffers; /* +0x0054 */ unsigned long EventsLost; /* +0x0058 */ unsigned long BuffersWritten; /* +0x005c */ unsigned long LogBuffersLost; /* +0x0060 */ unsigned long RealTimeBuffersLost; /* +0x0064 */ void *LoggerThreadId; /* +0x0068 */ unsigned long LogFileNameOffset; /* +0x006c */ unsigned long LoggerNameOffset; /* +0x0070 */ }; struct _KEY_VALUE_PARTIAL_INFORMATION_ALIGN64 { unsigned long Type; /* +0x0000 */ unsigned long DataLength; /* +0x0004 */ unsigned char Data[4]; /* +0x0008 04 12 00 00 */ }; struct _PLUGPLAY_CONTROL_INSTALL_DATA { unsigned long BufferLength; /* +0x0000 */ unsigned char Buffer[4]; /* +0x0004 71 04 00 00 */ }; struct _SYSTEM_PROCESSOR_POLICY_INFORMATION { unsigned long Length; /* +0x0000 */ unsigned long PolicyId; /* +0x0004 */ unsigned char Policy[48]; /* +0x0008 fa 4f 00 00 */ }; struct _HD_TEXTFILTERA { char *pszText; /* +0x0000 */ unsigned char cchTextMax[4]; /* +0x0004 74 00 00 00 */ }; struct PREVIEWHANDLERFRAMEINFO { unsigned char haccel[4]; /* +0x0000 5f 13 00 00 */ unsigned char cAccelEntries[4]; /* +0x0004 75 00 00 00 */ }; struct _KEY_VALUE_BASIC_INFORMATION { unsigned long TitleIndex; /* +0x0000 */ unsigned long Type; /* +0x0004 */ unsigned long NameLength; /* +0x0008 */ unsigned char Name[4]; /* +0x000c 83 12 00 00 */ }; struct _SecPkgContext_AuthorityA { char *sAuthorityName; /* +0x0000 */ }; struct _TEB { unsigned char NtTib[28]; /* +0x0000 86 1c 00 00 */ void *EnvironmentPointer; /* +0x001c */ unsigned char ClientId[8]; /* +0x0020 ab 3b 00 00 */ void *ActiveRpcHandle; /* +0x0028 */ void *ThreadLocalStoragePointer; /* +0x002c */ unsigned char ProcessEnvironmentBlock[4]; /* +0x0030 0f 50 00 00 */ unsigned long LastErrorValue; /* +0x0034 */ unsigned long CountOfOwnedCriticalSections; /* +0x0038 */ void *CsrClientThread; /* +0x003c */ void *Win32ThreadInfo; /* +0x0040 */ unsigned char User32Reserved[104]; /* +0x0044 10 50 00 00 */ unsigned char UserReserved[20]; /* +0x00ac 5a 15 00 00 */ void *WOW32Reserved; /* +0x00c0 */ unsigned long CurrentLocale; /* +0x00c4 */ unsigned long FpSoftwareStatusRegister; /* +0x00c8 */ unsigned char SystemReserved1[216]; /* +0x00cc 11 50 00 00 */ long ExceptionCode; /* +0x01a4 */ unsigned char ActivationContextStackPointer[4]; /* +0x01a8 5b 43 00 00 */ unsigned char SpareBytes[36]; /* +0x01ac c2 4d 00 00 */ unsigned long TxFsContext; /* +0x01d0 */ unsigned char GdiTebBatch[1248]; /* +0x01d4 12 50 00 00 */ unsigned char RealClientId[8]; /* +0x06b4 ab 3b 00 00 */ void *GdiCachedProcessHandle; /* +0x06bc */ unsigned long GdiClientPID; /* +0x06c0 */ unsigned long GdiClientTID; /* +0x06c4 */ void *GdiThreadLocalInfo; /* +0x06c8 */ unsigned char Win32ClientInfo[248]; /* +0x06cc 13 50 00 00 */ unsigned char glDispatchTable[932]; /* +0x07c4 14 50 00 00 */ unsigned char glReserved1[116]; /* +0x0b68 15 50 00 00 */ void *glReserved2; /* +0x0bdc */ void *glSectionInfo; /* +0x0be0 */ void *glSection; /* +0x0be4 */ void *glTable; /* +0x0be8 */ void *glCurrentRC; /* +0x0bec */ void *glContext; /* +0x0bf0 */ unsigned long LastStatusValue; /* +0x0bf4 */ unsigned char StaticUnicodeString[8]; /* +0x0bf8 7c 3b 00 00 */ unsigned char StaticUnicodeBuffer[524]; /* +0x0c00 16 50 00 00 */ void *DeallocationStack; /* +0x0e0c */ unsigned char TlsSlots[256]; /* +0x0e10 17 50 00 00 */ unsigned char TlsLinks[8]; /* +0x0f10 f7 19 00 00 */ void *Vdm; /* +0x0f18 */ void *ReservedForNtRpc; /* +0x0f1c */ unsigned char DbgSsReserved[8]; /* +0x0f20 d4 33 00 00 */ unsigned long HardErrorMode; /* +0x0f28 */ unsigned char Instrumentation[36]; /* +0x0f2c 18 50 00 00 */ unsigned char ActivityId[16]; /* +0x0f50 ce 13 00 00 */ void *SubProcessTag; /* +0x0f60 */ void *EtwLocalData; /* +0x0f64 */ void *EtwTraceData; /* +0x0f68 */ void *WinSockData; /* +0x0f6c */ unsigned long GdiBatchCount; /* +0x0f70 */ /* unsigned char CurrentIdealProcessor[0]; +0x0f74 53 35 00 00 */ unsigned long IdealProcessorValue; /* +0x0f74 */ unsigned char ReservedPad0; /* +0x0f74 */ unsigned char ReservedPad1; /* +0x0f75 */ unsigned char ReservedPad2; /* +0x0f76 */ unsigned char IdealProcessor; /* +0x0f77 */ unsigned long GuaranteedStackBytes; /* +0x0f78 */ void *ReservedForPerf; /* +0x0f7c */ void *ReservedForOle; /* +0x0f80 */ unsigned long WaitingOnLoaderLock; /* +0x0f84 */ void *SavedPriorityState; /* +0x0f88 */ unsigned long ReservedForCodeCoverage; /* +0x0f8c */ void *ThreadPoolData; /* +0x0f90 */ unsigned char TlsExpansionSlots[4]; /* +0x0f94 74 12 00 00 */ unsigned long MuiGeneration; /* +0x0f98 */ unsigned long IsImpersonating; /* +0x0f9c */ void *NlsCache; /* +0x0fa0 */ void *pShimData; /* +0x0fa4 */ unsigned short HeapVirtualAffinity; /* +0x0fa8 */ unsigned short LowFragHeapDataSlot; /* +0x0faa */ void *CurrentTransactionHandle; /* +0x0fac */ unsigned char ActiveFrame[4]; /* +0x0fb0 19 50 00 00 */ void *FlsData; /* +0x0fb4 */ void *PreferredLanguages; /* +0x0fb8 */ void *UserPrefLanguages; /* +0x0fbc */ void *MergedPrefLanguages; /* +0x0fc0 */ unsigned long MuiImpersonation; /* +0x0fc4 */ /* unsigned char CrossTebFlags[0]; +0x0fc8 1a 50 00 00 */ unsigned char SpareCrossTebBits[2]; /* +0x0fc8 1b 50 00 00 */ unsigned short SameTebFlags; /* +0x0fca */ /* unsigned char SafeThunkCall[0]; +0x0fca a3 33 00 00 */ /* unsigned char InDebugPrint[0]; +0x0fca a4 33 00 00 */ /* unsigned char HasFiberData[0]; +0x0fca 1c 50 00 00 */ /* unsigned char SkipThreadAttach[0]; +0x0fca 1d 50 00 00 */ /* unsigned char WerInShipAssertCode[0]; +0x0fca 1e 50 00 00 */ /* unsigned char RanProcessInit[0]; +0x0fca 1f 50 00 00 */ /* unsigned char ClonedThread[0]; +0x0fca 20 50 00 00 */ /* unsigned char SuppressDebugMsg[0]; +0x0fca 21 50 00 00 */ /* unsigned char DisableUserStackWalk[0]; +0x0fca 22 50 00 00 */ /* unsigned char RtlExceptionAttached[0]; +0x0fca 23 50 00 00 */ /* unsigned char InitialThread[0]; +0x0fca 24 50 00 00 */ /* unsigned char SessionAware[0]; +0x0fca fb 22 00 00 */ /* unsigned char DisabledStackCheck[0]; +0x0fca fc 22 00 00 */ unsigned char SpareSameTebBits[2]; /* +0x0fca 25 50 00 00 */ void *TxnScopeEnterCallback; /* +0x0fcc */ void *TxnScopeExitCallback; /* +0x0fd0 */ void *TxnScopeContext; /* +0x0fd4 */ unsigned long LockCount; /* +0x0fd8 */ unsigned long SpareUlong0; /* +0x0fdc */ void *ResourceRetValue; /* +0x0fe0 */ void *ReservedForWdf; /* +0x0fe4 */ }; struct _SYSTEM_PAGEFILE_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long TotalSize; /* +0x0004 */ unsigned long TotalInUse; /* +0x0008 */ unsigned long PeakUsage; /* +0x000c */ unsigned char PageFileName[8]; /* +0x0010 7c 3b 00 00 */ }; struct _WNF_TYPE_ID { unsigned char TypeId[16]; /* +0x0000 ce 13 00 00 */ }; struct _ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_GET_ROOT { void *ResolutionContext; /* +0x0000 */ unsigned long RootIndex; /* +0x0004 */ unsigned char CancelResolution; /* +0x0008 */ unsigned char NoMoreEntries; /* +0x0009 */ unsigned char Root[8]; /* +0x000c 7c 3b 00 00 */ }; struct _REPAIR_COPIES_OUTPUT { unsigned char FileOffsetRestart[8]; /* +0x0000 db 13 00 00 */ unsigned long Status; /* +0x0008 */ unsigned long ExtentCount; /* +0x000c */ unsigned char Extents[16]; /* +0x0010 6e 45 00 00 */ }; struct _RTL_LFG_RNG_STATE { unsigned char SeedArray[224]; /* +0x0000 30 50 00 00 */ long Next; /* +0x00e0 */ long NextP; /* +0x00e4 */ }; struct _FILE_LAYOUT_ENTRY { unsigned long Version; /* +0x0000 */ unsigned long NextFileOffset; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ unsigned long FileAttributes; /* +0x000c */ unsigned long long FileReferenceNumber; /* +0x0010 */ unsigned long FirstNameOffset; /* +0x0018 */ unsigned long FirstStreamOffset; /* +0x001c */ unsigned long ExtraInfoOffset; /* +0x0020 */ unsigned long Reserved; /* +0x0024 */ }; struct _tagOLECMD { unsigned long cmdID; /* +0x0000 */ unsigned long cmdf; /* +0x0004 */ }; struct _CSV_IS_OWNED_BY_CSVFS { unsigned char OwnedByCSVFS; /* +0x0000 */ }; struct _TIME_FIELDS { short Year; /* +0x0000 */ short Month; /* +0x0002 */ short Day; /* +0x0004 */ short Hour; /* +0x0006 */ short Minute; /* +0x0008 */ short Second; /* +0x000a */ short Milliseconds; /* +0x000c */ short Weekday; /* +0x000e */ }; struct _Wx86ThreadState { unsigned long *CallBx86Eip; /* +0x0000 */ void *DeallocationCpu; /* +0x0004 */ unsigned char UseKnownWx86Dll; /* +0x0008 */ char OleStubInvoked; /* +0x0009 */ }; struct tagNMLVEMPTYMARKUP { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned long dwFlags; /* +0x000c */ unsigned char szMarkup[4168]; /* +0x0010 62 50 00 00 */ }; struct _ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_SUCCESSFUL { void *ResolutionContext; /* +0x0000 */ unsigned long RootIndexUsed; /* +0x0004 */ }; struct _RTL_BACKOFF { unsigned long Delay; /* +0x0000 */ }; struct _DEDUP_CHUNK_INFORMATION_HASH32 { unsigned long ChunkFlags; /* +0x0000 */ long long ChunkOffsetInFile; /* +0x0008 */ long long ChunkSize; /* +0x0010 */ unsigned char HashVal[32]; /* +0x0018 ad 14 00 00 */ }; struct _KEY_CACHED_INFORMATION { unsigned char LastWriteTime[8]; /* +0x0000 db 13 00 00 */ unsigned long TitleIndex; /* +0x0008 */ unsigned long SubKeys; /* +0x000c */ unsigned long MaxNameLen; /* +0x0010 */ unsigned long Values; /* +0x0014 */ unsigned long MaxValueNameLen; /* +0x0018 */ unsigned long MaxValueDataLen; /* +0x001c */ unsigned long NameLength; /* +0x0020 */ }; struct _PROCESS_HANDLE_TRACING_ENABLE_EX { unsigned long Flags; /* +0x0000 */ unsigned long TotalSlots; /* +0x0004 */ }; struct _EISA_PORT_DESCRIPTOR { /* unsigned char NumberPorts[0]; +0x0000 8b 50 00 00 */ /* unsigned char Reserved[0]; +0x0000 7d 43 00 00 */ /* unsigned char Shared[0]; +0x0000 7e 43 00 00 */ unsigned char MoreEntries[1]; /* +0x0000 7f 43 00 00 */ }; struct _PROPSHEETHEADERA_V2 { unsigned long dwSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char hwndParent[4]; /* +0x0008 fc 11 00 00 */ unsigned char hInstance[4]; /* +0x000c f5 12 00 00 */ /* unsigned char hIcon[0]; +0x0010 92 19 00 00 */ unsigned char pszIcon[4]; /* +0x0010 bf 12 00 00 */ unsigned char pszCaption[4]; /* +0x0014 bf 12 00 00 */ unsigned char nPages[4]; /* +0x0018 75 00 00 00 */ /* unsigned char nStartPage[0]; +0x001c 75 00 00 00 */ unsigned char pStartPage[4]; /* +0x001c bf 12 00 00 */ /* unsigned char ppsp[0]; +0x0020 f0 41 00 00 */ unsigned char phpage[4]; /* +0x0020 37 40 00 00 */ unsigned char pfnCallback[4]; /* +0x0024 3a 40 00 00 */ /* unsigned char hbmWatermark[0]; +0x0028 b9 14 00 00 */ unsigned char pszbmWatermark[4]; /* +0x0028 bf 12 00 00 */ unsigned char hplWatermark[4]; /* +0x002c 67 18 00 00 */ /* unsigned char hbmHeader[0]; +0x0030 b9 14 00 00 */ unsigned char pszbmHeader[4]; /* +0x0030 bf 12 00 00 */ }; struct _SYSTEM_PERFORMANCE_INFORMATION { unsigned char IdleProcessTime[8]; /* +0x0000 db 13 00 00 */ unsigned char IoReadTransferCount[8]; /* +0x0008 db 13 00 00 */ unsigned char IoWriteTransferCount[8]; /* +0x0010 db 13 00 00 */ unsigned char IoOtherTransferCount[8]; /* +0x0018 db 13 00 00 */ unsigned long IoReadOperationCount; /* +0x0020 */ unsigned long IoWriteOperationCount; /* +0x0024 */ unsigned long IoOtherOperationCount; /* +0x0028 */ unsigned long AvailablePages; /* +0x002c */ unsigned long CommittedPages; /* +0x0030 */ unsigned long CommitLimit; /* +0x0034 */ unsigned long PeakCommitment; /* +0x0038 */ unsigned long PageFaultCount; /* +0x003c */ unsigned long CopyOnWriteCount; /* +0x0040 */ unsigned long TransitionCount; /* +0x0044 */ unsigned long CacheTransitionCount; /* +0x0048 */ unsigned long DemandZeroCount; /* +0x004c */ unsigned long PageReadCount; /* +0x0050 */ unsigned long PageReadIoCount; /* +0x0054 */ unsigned long CacheReadCount; /* +0x0058 */ unsigned long CacheIoCount; /* +0x005c */ unsigned long DirtyPagesWriteCount; /* +0x0060 */ unsigned long DirtyWriteIoCount; /* +0x0064 */ unsigned long MappedPagesWriteCount; /* +0x0068 */ unsigned long MappedWriteIoCount; /* +0x006c */ unsigned long PagedPoolPages; /* +0x0070 */ unsigned long NonPagedPoolPages; /* +0x0074 */ unsigned long PagedPoolAllocs; /* +0x0078 */ unsigned long PagedPoolFrees; /* +0x007c */ unsigned long NonPagedPoolAllocs; /* +0x0080 */ unsigned long NonPagedPoolFrees; /* +0x0084 */ unsigned long FreeSystemPtes; /* +0x0088 */ unsigned long ResidentSystemCodePage; /* +0x008c */ unsigned long TotalSystemDriverPages; /* +0x0090 */ unsigned long TotalSystemCodePages; /* +0x0094 */ unsigned long NonPagedPoolLookasideHits; /* +0x0098 */ unsigned long PagedPoolLookasideHits; /* +0x009c */ unsigned long AvailablePagedPoolPages; /* +0x00a0 */ unsigned long ResidentSystemCachePage; /* +0x00a4 */ unsigned long ResidentPagedPoolPage; /* +0x00a8 */ unsigned long ResidentSystemDriverPage; /* +0x00ac */ unsigned long CcFastReadNoWait; /* +0x00b0 */ unsigned long CcFastReadWait; /* +0x00b4 */ unsigned long CcFastReadResourceMiss; /* +0x00b8 */ unsigned long CcFastReadNotPossible; /* +0x00bc */ unsigned long CcFastMdlReadNoWait; /* +0x00c0 */ unsigned long CcFastMdlReadWait; /* +0x00c4 */ unsigned long CcFastMdlReadResourceMiss; /* +0x00c8 */ unsigned long CcFastMdlReadNotPossible; /* +0x00cc */ unsigned long CcMapDataNoWait; /* +0x00d0 */ unsigned long CcMapDataWait; /* +0x00d4 */ unsigned long CcMapDataNoWaitMiss; /* +0x00d8 */ unsigned long CcMapDataWaitMiss; /* +0x00dc */ unsigned long CcPinMappedDataCount; /* +0x00e0 */ unsigned long CcPinReadNoWait; /* +0x00e4 */ unsigned long CcPinReadWait; /* +0x00e8 */ unsigned long CcPinReadNoWaitMiss; /* +0x00ec */ unsigned long CcPinReadWaitMiss; /* +0x00f0 */ unsigned long CcCopyReadNoWait; /* +0x00f4 */ unsigned long CcCopyReadWait; /* +0x00f8 */ unsigned long CcCopyReadNoWaitMiss; /* +0x00fc */ unsigned long CcCopyReadWaitMiss; /* +0x0100 */ unsigned long CcMdlReadNoWait; /* +0x0104 */ unsigned long CcMdlReadWait; /* +0x0108 */ unsigned long CcMdlReadNoWaitMiss; /* +0x010c */ unsigned long CcMdlReadWaitMiss; /* +0x0110 */ unsigned long CcReadAheadIos; /* +0x0114 */ unsigned long CcLazyWriteIos; /* +0x0118 */ unsigned long CcLazyWritePages; /* +0x011c */ unsigned long CcDataFlushes; /* +0x0120 */ unsigned long CcDataPages; /* +0x0124 */ unsigned long ContextSwitches; /* +0x0128 */ unsigned long FirstLevelTbFills; /* +0x012c */ unsigned long SecondLevelTbFills; /* +0x0130 */ unsigned long SystemCalls; /* +0x0134 */ unsigned long long CcTotalDirtyPages; /* +0x0138 */ unsigned long long CcDirtyPageThreshold; /* +0x0140 */ long long ResidentAvailablePages; /* +0x0148 */ }; struct _RTL_MODULE_EXTENDED_INFO { unsigned char BasicInfo[4]; /* +0x0000 a1 50 00 00 */ unsigned long ImageSize; /* +0x0004 */ unsigned short FileNameOffset; /* +0x0008 */ unsigned char FullPathName[258]; /* +0x000a e6 13 00 00 */ }; struct _PROCESS_WS_WATCH_INFORMATION_EX { unsigned char BasicInfo[8]; /* +0x0000 b3 47 00 00 */ unsigned long FaultingThreadId; /* +0x0008 */ unsigned long Flags; /* +0x000c */ }; struct tagTVHITTESTINFO { unsigned char pt[8]; /* +0x0000 ce 12 00 00 */ unsigned char flags[4]; /* +0x0008 75 00 00 00 */ unsigned char hItem[4]; /* +0x000c b1 3d 00 00 */ }; struct _TRACE_ENABLE_INFO { unsigned long IsEnabled; /* +0x0000 */ unsigned char Level; /* +0x0004 */ unsigned char Reserved1; /* +0x0005 */ unsigned short LoggerId; /* +0x0006 */ unsigned long EnableProperty; /* +0x0008 */ unsigned long Reserved2; /* +0x000c */ unsigned long long MatchAnyKeyword; /* +0x0010 */ unsigned long long MatchAllKeyword; /* +0x0018 */ }; struct _FP_80 { unsigned char W[12]; /* +0x0000 13 12 00 00 */ }; struct _ALPC_TOKEN_ATTR { unsigned char TokenId[8]; /* +0x0000 37 13 00 00 */ unsigned char AuthenticationId[8]; /* +0x0008 37 13 00 00 */ unsigned char ModifiedId[8]; /* +0x0010 37 13 00 00 */ }; struct _PROPSHEETPAGEA_V1 { unsigned long dwSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char hInstance[4]; /* +0x0008 f5 12 00 00 */ /* unsigned char pszTemplate[0]; +0x000c bf 12 00 00 */ unsigned char pResource[4]; /* +0x000c a9 1a 00 00 */ /* unsigned char hIcon[0]; +0x0010 92 19 00 00 */ unsigned char pszIcon[4]; /* +0x0010 bf 12 00 00 */ unsigned char pszTitle[4]; /* +0x0014 bf 12 00 00 */ unsigned char pfnDlgProc[4]; /* +0x0018 22 20 00 00 */ long lParam; /* +0x001c */ unsigned char pfnCallback[4]; /* +0x0020 f9 3b 00 00 */ unsigned char pcRefParent[4]; /* +0x0024 75 04 00 00 */ }; struct _FILE_PREFETCH { unsigned long Type; /* +0x0000 */ unsigned long Count; /* +0x0004 */ unsigned char Prefetch[8]; /* +0x0008 d9 50 00 00 */ }; struct _ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA { /* unsigned char ResolutionBeginning[0]; +0x0000 de 50 00 00 */ /* unsigned char GetRoot[0]; +0x0000 df 50 00 00 */ /* unsigned char ResolutionSuccessful[0]; +0x0000 e0 50 00 00 */ unsigned char ResolutionEnding[32]; /* +0x0000 e1 50 00 00 */ }; struct _TRACE_LOGFILE_HEADER { unsigned long BufferSize; /* +0x0000 */ unsigned long Version; /* +0x0004 */ unsigned char VersionDetail[4]; /* +0x0004 f1 50 00 00 */ unsigned long ProviderVersion; /* +0x0008 */ unsigned long NumberOfProcessors; /* +0x000c */ unsigned char EndTime[8]; /* +0x0010 db 13 00 00 */ unsigned long TimerResolution; /* +0x0018 */ unsigned long MaximumFileSize; /* +0x001c */ unsigned long LogFileMode; /* +0x0020 */ unsigned long BuffersWritten; /* +0x0024 */ /* unsigned char LogInstanceGuid[0]; +0x0028 ce 13 00 00 */ unsigned long StartBuffers; /* +0x0028 */ unsigned long PointerSize; /* +0x002c */ unsigned long EventsLost; /* +0x0030 */ unsigned long CpuSpeedInMHz; /* +0x0034 */ unsigned char LoggerName[4]; /* +0x0038 71 04 00 00 */ unsigned char LogFileName[4]; /* +0x003c 71 04 00 00 */ unsigned char TimeZone[176]; /* +0x0040 d3 30 00 00 */ unsigned char BootTime[8]; /* +0x00f0 db 13 00 00 */ unsigned char PerfFreq[8]; /* +0x00f8 db 13 00 00 */ unsigned char StartTime[8]; /* +0x0100 db 13 00 00 */ unsigned long ReservedFlags; /* +0x0108 */ unsigned long BuffersLost; /* +0x010c */ }; struct _SYSTEM_EXCEPTION_INFORMATION { unsigned long AlignmentFixupCount; /* +0x0000 */ unsigned long ExceptionDispatchCount; /* +0x0004 */ unsigned long FloatingEmulationCount; /* +0x0008 */ unsigned long ByteWordEmulationCount; /* +0x000c */ }; struct _CM_FLOPPY_DEVICE_DATA { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned char Size[8]; /* +0x0004 5e 17 00 00 */ unsigned long MaxDensity; /* +0x000c */ unsigned long MountDensity; /* +0x0010 */ unsigned char StepRateHeadUnloadTime; /* +0x0014 */ unsigned char HeadLoadTime; /* +0x0015 */ unsigned char MotorOffTime; /* +0x0016 */ unsigned char SectorLengthCode; /* +0x0017 */ unsigned char SectorPerTrack; /* +0x0018 */ unsigned char ReadWriteGapLength; /* +0x0019 */ unsigned char DataTransferLength; /* +0x001a */ unsigned char FormatGapLength; /* +0x001b */ unsigned char FormatFillCharacter; /* +0x001c */ unsigned char HeadSettleTime; /* +0x001d */ unsigned char MotorSettleTime; /* +0x001e */ unsigned char MaximumTrackValue; /* +0x001f */ unsigned char DataTransferRate; /* +0x0020 */ }; struct _SYSTEM_PROCESSOR_POWER_INFORMATION { unsigned char CurrentFrequency; /* +0x0000 */ unsigned char ThermalLimitFrequency; /* +0x0001 */ unsigned char ConstantThrottleFrequency; /* +0x0002 */ unsigned char DegradedThrottleFrequency; /* +0x0003 */ unsigned char LastBusyFrequency; /* +0x0004 */ unsigned char LastC3Frequency; /* +0x0005 */ unsigned char LastAdjustedBusyFrequency; /* +0x0006 */ unsigned char ProcessorMinThrottle; /* +0x0007 */ unsigned char ProcessorMaxThrottle; /* +0x0008 */ unsigned long NumberOfFrequencies; /* +0x000c */ unsigned long PromotionCount; /* +0x0010 */ unsigned long DemotionCount; /* +0x0014 */ unsigned long ErrorCount; /* +0x0018 */ unsigned long RetryCount; /* +0x001c */ unsigned long long CurrentFrequencyTime; /* +0x0020 */ unsigned long long CurrentProcessorTime; /* +0x0028 */ unsigned long long CurrentProcessorIdleTime; /* +0x0030 */ unsigned long long LastProcessorTime; /* +0x0038 */ unsigned long long LastProcessorIdleTime; /* +0x0040 */ }; struct _RTL_RXACT_LOG { unsigned long OperationCount; /* +0x0000 */ unsigned long LogSize; /* +0x0004 */ unsigned long LogSizeInUse; /* +0x0008 */ }; struct _LDR_RESLOADER_RET { void *Module; /* +0x0000 */ void *DataEntry; /* +0x0004 */ void *TargetModule; /* +0x0008 */ }; struct _FILEDESCRIPTORA { unsigned long dwFlags; /* +0x0000 */ unsigned char clsid[16]; /* +0x0004 ce 13 00 00 */ unsigned char sizel[8]; /* +0x0014 21 13 00 00 */ unsigned char pointl[8]; /* +0x001c 58 12 00 00 */ unsigned long dwFileAttributes; /* +0x0024 */ unsigned char ftCreationTime[8]; /* +0x0028 91 14 00 00 */ unsigned char ftLastAccessTime[8]; /* +0x0030 91 14 00 00 */ unsigned char ftLastWriteTime[8]; /* +0x0038 91 14 00 00 */ unsigned long nFileSizeHigh; /* +0x0040 */ unsigned long nFileSizeLow; /* +0x0044 */ unsigned char cFileName[260]; /* +0x0048 f8 1a 00 00 */ }; struct _SYSTEM_GDI_DRIVER_INFORMATION { unsigned char DriverName[8]; /* +0x0000 7c 3b 00 00 */ void *ImageAddress; /* +0x0008 */ void *SectionPointer; /* +0x000c */ void *EntryPoint; /* +0x0010 */ unsigned char ExportSectionPointer[4]; /* +0x0014 26 31 00 00 */ unsigned long ImageLength; /* +0x0018 */ }; struct _LEARNING_MODE_OBJECT_INFORMATION { unsigned char ListEntry[4]; /* +0x0000 78 18 00 00 */ unsigned char LogLevel[4]; /* +0x0004 2d 51 00 00 */ unsigned char ObjectType[4]; /* +0x0008 2e 3f 00 00 */ unsigned char ObjectName[4]; /* +0x000c 2e 3f 00 00 */ void *RootDirectory; /* +0x0010 */ unsigned char FullObjectName[8]; /* +0x0014 7c 3b 00 00 */ }; struct _SYSTEM_VHD_BOOT_INFORMATION { unsigned char OsDiskIsVhd; /* +0x0000 */ unsigned long OsVhdFilePathOffset; /* +0x0004 */ unsigned char OsVhdParentVolume[4]; /* +0x0008 83 12 00 00 */ }; struct _TRACE_LOGFILE_HEADER:::: { unsigned char MajorVersion; /* +0x0000 */ unsigned char MinorVersion; /* +0x0001 */ unsigned char SubVersion; /* +0x0002 */ unsigned char SubMinorVersion; /* +0x0003 */ }; struct _EVENT_TRACE_LOGFILEA { char *LogFileName; /* +0x0000 */ char *LoggerName; /* +0x0004 */ long long CurrentTime; /* +0x0008 */ unsigned long BuffersRead; /* +0x0010 */ unsigned long LogFileMode; /* +0x0014 */ unsigned long ProcessTraceMode; /* +0x0014 */ unsigned char CurrentEvent[88]; /* +0x0018 56 51 00 00 */ unsigned char LogfileHeader[272]; /* +0x0070 57 51 00 00 */ unsigned char BufferCallback[4]; /* +0x0180 cf 48 00 00 */ unsigned long BufferSize; /* +0x0184 */ unsigned long Filled; /* +0x0188 */ unsigned long EventsLost; /* +0x018c */ /* unsigned char EventCallback[0]; +0x0190 5b 51 00 00 */ unsigned char EventRecordCallback[4]; /* +0x0190 5f 51 00 00 */ unsigned long IsKernelTrace; /* +0x0194 */ void *Context; /* +0x0198 */ }; struct _RTL_PROCESS_MODULES { unsigned long NumberOfModules; /* +0x0000 */ unsigned char Modules[284]; /* +0x0004 62 51 00 00 */ }; struct _PEB { unsigned char InheritedAddressSpace; /* +0x0000 */ unsigned char ReadImageFileExecOptions; /* +0x0001 */ unsigned char BeingDebugged; /* +0x0002 */ unsigned char BitField; /* +0x0003 */ /* unsigned char ImageUsesLargePages[0]; +0x0003 ab 33 00 00 */ /* unsigned char IsProtectedProcess[0]; +0x0003 7b 43 00 00 */ /* unsigned char IsLegacyProcess[0]; +0x0003 7c 43 00 00 */ /* unsigned char IsImageDynamicallyRelocated[0]; +0x0003 7f 49 00 00 */ /* unsigned char SkipPatchingUser32Forwarders[0]; +0x0003 67 49 00 00 */ unsigned char SpareBits[1]; /* +0x0003 ae 33 00 00 */ void *Mutant; /* +0x0004 */ void *ImageBaseAddress; /* +0x0008 */ unsigned char Ldr[4]; /* +0x000c 66 51 00 00 */ unsigned char ProcessParameters[4]; /* +0x0010 fe 47 00 00 */ void *SubSystemData; /* +0x0014 */ void *ProcessHeap; /* +0x0018 */ unsigned char FastPebLock[4]; /* +0x001c 9e 18 00 00 */ void *AtlThunkSListPtr; /* +0x0020 */ void *IFEOKey; /* +0x0024 */ unsigned long CrossProcessFlags; /* +0x0028 */ /* unsigned char ProcessInJob[0]; +0x0028 4a 12 00 00 */ /* unsigned char ProcessInitializing[0]; +0x0028 9b 15 00 00 */ /* unsigned char ProcessUsingVEH[0]; +0x0028 68 18 00 00 */ /* unsigned char ProcessUsingVCH[0]; +0x0028 69 18 00 00 */ /* unsigned char ProcessUsingFTH[0]; +0x0028 40 21 00 00 */ unsigned char ReservedBits0[4]; /* +0x0028 68 43 00 00 */ void *KernelCallbackTable; /* +0x002c */ void *UserSharedInfoPtr; /* +0x002c */ unsigned char SystemReserved[4]; /* +0x0030 01 12 00 00 */ unsigned long AtlThunkSListPtr32; /* +0x0034 */ void *ApiSetMap; /* +0x0038 */ unsigned long TlsExpansionCounter; /* +0x003c */ void *TlsBitmap; /* +0x0040 */ unsigned char TlsBitmapBits[8]; /* +0x0044 c3 15 00 00 */ void *ReadOnlySharedMemoryBase; /* +0x004c */ void *HotpatchInformation; /* +0x0050 */ unsigned char ReadOnlyStaticServerData[4]; /* +0x0054 74 12 00 00 */ void *AnsiCodePageData; /* +0x0058 */ void *OemCodePageData; /* +0x005c */ void *UnicodeCaseTableData; /* +0x0060 */ unsigned long NumberOfProcessors; /* +0x0064 */ unsigned long NtGlobalFlag; /* +0x0068 */ unsigned char CriticalSectionTimeout[8]; /* +0x0070 db 13 00 00 */ unsigned long HeapSegmentReserve; /* +0x0078 */ unsigned long HeapSegmentCommit; /* +0x007c */ unsigned long HeapDeCommitTotalFreeThreshold; /* +0x0080 */ unsigned long HeapDeCommitFreeBlockThreshold; /* +0x0084 */ unsigned long NumberOfHeaps; /* +0x0088 */ unsigned long MaximumNumberOfHeaps; /* +0x008c */ unsigned char ProcessHeaps[4]; /* +0x0090 74 12 00 00 */ void *GdiSharedHandleTable; /* +0x0094 */ void *ProcessStarterHelper; /* +0x0098 */ unsigned long GdiDCAttributeList; /* +0x009c */ unsigned char LoaderLock[4]; /* +0x00a0 9e 18 00 00 */ unsigned long OSMajorVersion; /* +0x00a4 */ unsigned long OSMinorVersion; /* +0x00a8 */ unsigned short OSBuildNumber; /* +0x00ac */ unsigned short OSCSDVersion; /* +0x00ae */ unsigned long OSPlatformId; /* +0x00b0 */ unsigned long ImageSubsystem; /* +0x00b4 */ unsigned long ImageSubsystemMajorVersion; /* +0x00b8 */ unsigned long ImageSubsystemMinorVersion; /* +0x00bc */ unsigned long ActiveProcessAffinityMask; /* +0x00c0 */ unsigned char GdiHandleBuffer[136]; /* +0x00c4 67 51 00 00 */ unsigned char PostProcessInitRoutine[4]; /* +0x014c aa 34 00 00 */ void *TlsExpansionBitmap; /* +0x0150 */ unsigned char TlsExpansionBitmapBits[128]; /* +0x0154 c1 1f 00 00 */ unsigned long SessionId; /* +0x01d4 */ unsigned char AppCompatFlags[8]; /* +0x01d8 5e 20 00 00 */ unsigned char AppCompatFlagsUser[8]; /* +0x01e0 5e 20 00 00 */ void *pShimData; /* +0x01e8 */ void *AppCompatInfo; /* +0x01ec */ unsigned char CSDVersion[8]; /* +0x01f0 7c 3b 00 00 */ unsigned char ActivationContextData[4]; /* +0x01f8 6a 51 00 00 */ unsigned char ProcessAssemblyStorageMap[4]; /* +0x01fc 6c 51 00 00 */ unsigned char SystemDefaultActivationContextData[4]; /* +0x0200 6a 51 00 00 */ unsigned char SystemAssemblyStorageMap[4]; /* +0x0204 6c 51 00 00 */ unsigned long MinimumStackCommit; /* +0x0208 */ unsigned char FlsCallback[4]; /* +0x020c 6e 51 00 00 */ unsigned char FlsListHead[8]; /* +0x0210 f7 19 00 00 */ void *FlsBitmap; /* +0x0218 */ unsigned char FlsBitmapBits[16]; /* +0x021c c2 15 00 00 */ unsigned long FlsHighIndex; /* +0x022c */ void *WerRegistrationData; /* +0x0230 */ void *WerShipAssertPtr; /* +0x0234 */ void *pUnused; /* +0x0238 */ void *pImageHeaderHash; /* +0x023c */ unsigned long TracingFlags; /* +0x0240 */ /* unsigned char HeapTracingEnabled[0]; +0x0240 4a 12 00 00 */ /* unsigned char CritSecTracingEnabled[0]; +0x0240 9b 15 00 00 */ /* unsigned char LibLoaderTracingEnabled[0]; +0x0240 68 18 00 00 */ unsigned char SpareTracingBits[8]; /* +0x0240 c2 4e 00 00 */ unsigned long long CsrServerReadOnlySharedMemoryBase; /* +0x0248 */ }; struct _CALL_FRAME { void *ReturnAddress; /* +0x0000 */ void *Param1; /* +0x0004 */ void *Param2; /* +0x0008 */ void *CompatibilityArea; /* +0x000c */ }; struct _LDT_SIZE { unsigned long Length; /* +0x0000 */ }; struct _SYSTEM_CODEINTEGRITY_INFORMATION { unsigned long Length; /* +0x0000 */ unsigned long CodeIntegrityOptions; /* +0x0004 */ }; struct _PROCESS_ACCESS_TOKEN { void *Token; /* +0x0000 */ void *Thread; /* +0x0004 */ }; struct _STORAGE_QUERY_DEPENDENT_VOLUME_RESPONSE { unsigned long ResponseLevel; /* +0x0000 */ unsigned long NumberEntries; /* +0x0004 */ /* unsigned char Lev1Depends[0]; +0x0008 9e 51 00 00 */ unsigned char Lev2Depends[68]; /* +0x0008 a0 51 00 00 */ }; struct _SFVM_PROPPAGE_DATA { unsigned long dwReserved; /* +0x0000 */ unsigned char pfn[4]; /* +0x0004 b4 40 00 00 */ long lParam; /* +0x0008 */ }; struct _LOOKUP_STREAM_FROM_CLUSTER_INPUT { unsigned long Flags; /* +0x0000 */ unsigned long NumberOfClusters; /* +0x0004 */ unsigned char Cluster[8]; /* +0x0008 3e 49 00 00 */ }; struct _SYSTEM_INTERRUPT_INFORMATION { unsigned long ContextSwitches; /* +0x0000 */ unsigned long DpcCount; /* +0x0004 */ unsigned long DpcRate; /* +0x0008 */ unsigned long TimeIncrement; /* +0x000c */ unsigned long DpcBypassCount; /* +0x0010 */ unsigned long ApcBypassCount; /* +0x0014 */ }; struct tagNMTREEVIEWW { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char action[4]; /* +0x000c 75 00 00 00 */ unsigned char itemOld[40]; /* +0x0010 70 46 00 00 */ unsigned char itemNew[40]; /* +0x0038 70 46 00 00 */ unsigned char ptDrag[8]; /* +0x0060 ce 12 00 00 */ }; struct _TXFS_START_RM_INFORMATION { unsigned long Flags; /* +0x0000 */ unsigned long long LogContainerSize; /* +0x0008 */ unsigned long LogContainerCountMin; /* +0x0010 */ unsigned long LogContainerCountMax; /* +0x0014 */ unsigned long LogGrowthIncrement; /* +0x0018 */ unsigned long LogAutoShrinkPercentage; /* +0x001c */ unsigned long TmLogPathOffset; /* +0x0020 */ unsigned short TmLogPathLength; /* +0x0024 */ unsigned short LoggingMode; /* +0x0026 */ unsigned short LogPathLength; /* +0x0028 */ unsigned short Reserved; /* +0x002a */ unsigned char LogPath[4]; /* +0x002c 83 12 00 00 */ }; struct _STREAM_LAYOUT_ENTRY { unsigned long Version; /* +0x0000 */ unsigned long NextStreamOffset; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ unsigned long ExtentInformationOffset; /* +0x000c */ unsigned char AllocationSize[8]; /* +0x0010 db 13 00 00 */ unsigned char EndOfFile[8]; /* +0x0018 db 13 00 00 */ unsigned long StreamIdentifierLength; /* +0x0020 */ unsigned long Reserved; /* +0x0024 */ unsigned char StreamIdentifier[8]; /* +0x0028 83 12 00 00 */ }; struct _PARSE_MESSAGE_CONTEXT { unsigned long fFlags; /* +0x0000 */ unsigned long cwSavColumn; /* +0x0004 */ unsigned long iwSrc; /* +0x0008 */ unsigned long iwDst; /* +0x000c */ unsigned long iwDstSpace; /* +0x0010 */ char *lpvArgStart; /* +0x0014 */ }; struct _QUERY_FILE_LAYOUT_INPUT { unsigned long NumberOfPairs; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned char FilterType[4]; /* +0x0008 bb 51 00 00 */ unsigned long Reserved; /* +0x000c */ }; struct _QUERY_FILE_LAYOUT_INPUT:: { /* unsigned char ClusterRanges[0]; +0x0000 bf 51 00 00 */ unsigned char FileReferenceRanges[16]; /* +0x0000 c0 51 00 00 */ }; struct _FILE_VOLUME_NAME_INFORMATION { unsigned long DeviceNameLength; /* +0x0000 */ unsigned char DeviceName[4]; /* +0x0004 83 12 00 00 */ }; struct _KAFFINITY_ENUMERATION_CONTEXT { unsigned char Affinity[4]; /* +0x0000 be 47 00 00 */ unsigned long CurrentMask; /* +0x0004 */ unsigned short CurrentIndex; /* +0x0008 */ }; struct _SYSTEM_HOTPATCH_CODE_INFORMATION { unsigned long Flags; /* +0x0000 */ unsigned long InfoSize; /* +0x0004 */ /* unsigned char CodeInfo[0]; +0x0008 da 51 00 00 */ /* unsigned char KernelInfo[0]; +0x0008 db 51 00 00 */ /* unsigned char UserModeInfo[0]; +0x0008 dc 51 00 00 */ /* unsigned char InjectionInfo[0]; +0x0008 dd 51 00 00 */ unsigned char AtomicSwap[48]; /* +0x0008 de 51 00 00 */ }; struct _SYSTEM_HOTPATCH_CODE_INFORMATION:::: { unsigned long long ParentDirectory; /* +0x0000 */ unsigned long long ObjectHandle1; /* +0x0008 */ unsigned long long ObjectHandle2; /* +0x0010 */ }; struct _SYSTEM_HOTPATCH_CODE_INFORMATION:::: { unsigned short NameOffset; /* +0x0000 */ unsigned short NameLength; /* +0x0002 */ unsigned short TargetNameOffset; /* +0x0004 */ unsigned short TargetNameLength; /* +0x0006 */ unsigned short ColdpatchImagePathOffset; /* +0x0008 */ unsigned short ColdpatchImagePathLength; /* +0x000a */ unsigned long long TargetProcess; /* +0x0010 */ }; struct _SYSTEM_HOTPATCH_CODE_INFORMATION:::: { unsigned short NameOffset; /* +0x0000 */ unsigned short NameLength; /* +0x0002 */ unsigned short TargetNameOffset; /* +0x0004 */ unsigned short TargetNameLength; /* +0x0006 */ unsigned short ColdpatchImagePathOffset; /* +0x0008 */ unsigned short ColdpatchImagePathLength; /* +0x000a */ unsigned char PatchingFinished; /* +0x000c */ }; struct _SYSTEM_HOTPATCH_CODE_INFORMATION:::: { unsigned short NameOffset; /* +0x0000 */ unsigned short NameLength; /* +0x0002 */ }; struct _SYSTEM_HOTPATCH_CODE_INFORMATION:::: { unsigned long DescriptorsCount; /* +0x0000 */ unsigned char CodeDescriptors[40]; /* +0x0008 e9 51 00 00 */ }; struct _SecPkgContext_NegoStatus { unsigned long LastStatus; /* +0x0000 */ }; struct _SYSTEM_QUERY_PERFORMANCE_COUNTER_INFORMATION { unsigned long Version; /* +0x0000 */ unsigned char Flags[4]; /* +0x0004 f0 51 00 00 */ unsigned char ValidFlags[4]; /* +0x0008 f0 51 00 00 */ }; struct _RTL_UNICODE_STRING_BUFFER { unsigned char String[8]; /* +0x0000 7c 3b 00 00 */ unsigned char ByteBuffer[24]; /* +0x0008 92 4b 00 00 */ unsigned char MinimumStaticBufferForTerminalNul[4]; /* +0x0020 9c 14 00 00 */ }; struct _FILE_ID_GLOBAL_TX_DIR_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long FileIndex; /* +0x0004 */ unsigned char CreationTime[8]; /* +0x0008 db 13 00 00 */ unsigned char LastAccessTime[8]; /* +0x0010 db 13 00 00 */ unsigned char LastWriteTime[8]; /* +0x0018 db 13 00 00 */ unsigned char ChangeTime[8]; /* +0x0020 db 13 00 00 */ unsigned char EndOfFile[8]; /* +0x0028 db 13 00 00 */ unsigned char AllocationSize[8]; /* +0x0030 db 13 00 00 */ unsigned long FileAttributes; /* +0x0038 */ unsigned long FileNameLength; /* +0x003c */ unsigned char FileId[8]; /* +0x0040 db 13 00 00 */ unsigned char LockingTransactionId[16]; /* +0x0048 ce 13 00 00 */ unsigned long TxInfoFlags; /* +0x0058 */ unsigned char FileName[4]; /* +0x005c 83 12 00 00 */ }; struct _LDR_FAILURE_DATA { long Status; /* +0x0000 */ unsigned char ImageName[64]; /* +0x0004 7c 13 00 00 */ unsigned char AdditionalInfo[64]; /* +0x0044 7c 13 00 00 */ }; struct _SYSTEM_HYPERVISOR_PROCESSOR_COUNT_INFORMATION { unsigned long NumberOfLogicalProcessors; /* +0x0000 */ unsigned long NumberOfCores; /* +0x0004 */ }; struct NSTCCUSTOMDRAW { unsigned char psi[4]; /* +0x0000 bc 3c 00 00 */ unsigned char uItemState[4]; /* +0x0004 75 00 00 00 */ unsigned long nstcis; /* +0x0008 */ unsigned char pszText[4]; /* +0x000c 4f 13 00 00 */ unsigned char iImage[4]; /* +0x0010 74 00 00 00 */ unsigned char himl[4]; /* +0x0014 8d 3c 00 00 */ unsigned char iLevel[4]; /* +0x0018 74 00 00 00 */ unsigned char iIndent[4]; /* +0x001c 74 00 00 00 */ }; struct _X86_CALL_FRAME { unsigned long ReturnAddress; /* +0x0000 */ unsigned long Param1; /* +0x0004 */ unsigned long Param2; /* +0x0008 */ unsigned long CompatibilityArea; /* +0x000c */ }; struct tagLVTILEVIEWINFO { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwMask; /* +0x0004 */ unsigned long dwFlags; /* +0x0008 */ unsigned char sizeTile[8]; /* +0x000c 21 13 00 00 */ unsigned char cLines[4]; /* +0x0014 74 00 00 00 */ unsigned char rcLabelMargin[16]; /* +0x0018 c0 12 00 00 */ }; struct _SHFILEOPSTRUCTA { unsigned char hwnd[4]; /* +0x0000 fc 11 00 00 */ unsigned char wFunc[4]; /* +0x0004 75 00 00 00 */ unsigned char pFrom[4]; /* +0x0008 bf 12 00 00 */ unsigned char pTo[4]; /* +0x000c bf 12 00 00 */ unsigned short fFlags; /* +0x0010 */ unsigned char fAnyOperationsAborted[4]; /* +0x0012 74 00 00 00 */ void *hNameMappings; /* +0x0016 */ unsigned char lpszProgressTitle[4]; /* +0x001a bf 12 00 00 */ }; struct tagREBARBANDINFOW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char fMask[4]; /* +0x0004 75 00 00 00 */ unsigned char fStyle[4]; /* +0x0008 75 00 00 00 */ unsigned long clrFore; /* +0x000c */ unsigned long clrBack; /* +0x0010 */ unsigned char lpText[4]; /* +0x0014 71 04 00 00 */ unsigned char cch[4]; /* +0x0018 75 00 00 00 */ unsigned char iImage[4]; /* +0x001c 74 00 00 00 */ unsigned char hwndChild[4]; /* +0x0020 fc 11 00 00 */ unsigned char cxMinChild[4]; /* +0x0024 75 00 00 00 */ unsigned char cyMinChild[4]; /* +0x0028 75 00 00 00 */ unsigned char cx[4]; /* +0x002c 75 00 00 00 */ unsigned char hbmBack[4]; /* +0x0030 b9 14 00 00 */ unsigned char wID[4]; /* +0x0034 75 00 00 00 */ unsigned char cyChild[4]; /* +0x0038 75 00 00 00 */ unsigned char cyMaxChild[4]; /* +0x003c 75 00 00 00 */ unsigned char cyIntegral[4]; /* +0x0040 75 00 00 00 */ unsigned char cxIdeal[4]; /* +0x0044 75 00 00 00 */ long lParam; /* +0x0048 */ unsigned char cxHeader[4]; /* +0x004c 75 00 00 00 */ unsigned char rcChevronLocation[16]; /* +0x0050 c0 12 00 00 */ unsigned char uChevronState[4]; /* +0x0060 75 00 00 00 */ }; struct _UNIQUE_PROCESS_INFORMATION { /* unsigned char DontUse[0]; +0x0000 a3 4c 00 00 */ /* unsigned char UniqueProcessKey[0]; +0x0000 a4 4c 00 00 */ unsigned char Reserved[8]; /* +0x0000 a5 4c 00 00 */ }; struct _RTL_QUERY_DEBUG_INFORMATION_INFO { unsigned long UniqueProcessId; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long long Buffer; /* +0x0008 */ }; struct _XSAVE_VENDORS { unsigned long NumberOfVendors; /* +0x0000 */ unsigned char Vendor[56]; /* +0x0008 96 52 00 00 */ }; struct _FILE_ALL_INFORMATION { unsigned char BasicInformation[40]; /* +0x0000 99 52 00 00 */ unsigned char StandardInformation[24]; /* +0x0028 9a 52 00 00 */ unsigned char InternalInformation[8]; /* +0x0040 9b 52 00 00 */ unsigned char EaInformation[4]; /* +0x0048 78 42 00 00 */ unsigned char AccessInformation[4]; /* +0x004c 46 49 00 00 */ unsigned char PositionInformation[8]; /* +0x0050 9c 52 00 00 */ unsigned char ModeInformation[4]; /* +0x0058 eb 3e 00 00 */ unsigned char AlignmentInformation[4]; /* +0x005c fd 41 00 00 */ unsigned char NameInformation[8]; /* +0x0060 9d 52 00 00 */ }; struct _TP_TASK { unsigned char Callbacks[4]; /* +0x0000 a2 52 00 00 */ unsigned long NumaNode; /* +0x0004 */ unsigned char IdealProcessor; /* +0x0008 */ unsigned char ListEntry[8]; /* +0x000c f7 19 00 00 */ }; struct _FP_IEEE_RECORD { unsigned char Operand1[24]; /* +0x0000 a5 52 00 00 */ unsigned char Operand2[24]; /* +0x0018 a5 52 00 00 */ unsigned char Result[24]; /* +0x0030 a5 52 00 00 */ }; struct _CM_ROM_BLOCK { unsigned long Address; /* +0x0000 */ unsigned long Size; /* +0x0004 */ }; struct _FILE_ATTRIBUTE_CACHE_VALUES { unsigned long Flags; /* +0x0000 */ unsigned long NumberOfValues; /* +0x0004 */ unsigned char Attributes[212]; /* +0x0008 c1 52 00 00 */ }; struct _PERSIST_FOLDER_TARGET_INFO { unsigned char pidlTargetFolder[4]; /* +0x0000 6e 40 00 00 */ unsigned char szTargetParsingName[520]; /* +0x0004 a8 13 00 00 */ unsigned char szNetworkProvider[520]; /* +0x020c a8 13 00 00 */ unsigned long dwAttributes; /* +0x0414 */ unsigned char csidl[4]; /* +0x0418 74 00 00 00 */ }; struct _LUNICODE_STRING { unsigned long Length; /* +0x0000 */ unsigned long MaximumLength; /* +0x0004 */ unsigned char Buffer[4]; /* +0x0008 71 04 00 00 */ }; struct _WINDOWS_OS_OPTIONS { unsigned char Signature[8]; /* +0x0000 20 1a 00 00 */ unsigned long Version; /* +0x0008 */ unsigned long Length; /* +0x000c */ unsigned long OsLoadPathOffset; /* +0x0010 */ unsigned char OsLoadOptions[4]; /* +0x0014 83 12 00 00 */ }; struct _JOURNAL_ABSOLUTE_INFORMATION { unsigned char StartTimeStamp[8]; /* +0x0000 db 13 00 00 */ unsigned char EndTimeStamp[8]; /* +0x0008 db 13 00 00 */ unsigned long long NumberOfRecords; /* +0x0010 */ unsigned long FillLevel; /* +0x0018 */ }; struct tagNMLVODSTATECHANGE { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char iFrom[4]; /* +0x000c 74 00 00 00 */ unsigned char iTo[4]; /* +0x0010 74 00 00 00 */ unsigned char uNewState[4]; /* +0x0014 75 00 00 00 */ unsigned char uOldState[4]; /* +0x0018 75 00 00 00 */ }; struct _FILE_LINKS_INFORMATION { unsigned long BytesNeeded; /* +0x0000 */ unsigned long EntriesReturned; /* +0x0004 */ unsigned char Entry[24]; /* +0x0008 d8 52 00 00 */ }; struct _SYSTEM_POWER_INFORMATION { unsigned long MaxIdlenessAllowed; /* +0x0000 */ unsigned long Idleness; /* +0x0004 */ unsigned long TimeRemaining; /* +0x0008 */ unsigned char CoolingMode; /* +0x000c */ }; struct _RTL_HEAP_PARAMETERS { unsigned long Length; /* +0x0000 */ unsigned long SegmentReserve; /* +0x0004 */ unsigned long SegmentCommit; /* +0x0008 */ unsigned long DeCommitFreeBlockThreshold; /* +0x000c */ unsigned long DeCommitTotalFreeThreshold; /* +0x0010 */ unsigned long MaximumAllocationSize; /* +0x0014 */ unsigned long VirtualMemoryThreshold; /* +0x0018 */ unsigned long InitialCommit; /* +0x001c */ unsigned long InitialReserve; /* +0x0020 */ unsigned char CommitRoutine[4]; /* +0x0024 dd 52 00 00 */ unsigned char Reserved[8]; /* +0x0028 c3 15 00 00 */ }; struct _FILEGROUPDESCRIPTORA { unsigned char cItems[4]; /* +0x0000 75 00 00 00 */ unsigned char fgd[332]; /* +0x0004 f0 52 00 00 */ }; struct _FILE_MODE_INFORMATION { unsigned long Mode; /* +0x0000 */ }; struct _LAST_EXCEPTION_LOG { unsigned char ExceptionRecord[80]; /* +0x0000 ff 18 00 00 */ unsigned char ContextRecord[716]; /* +0x0050 7e 1e 00 00 */ unsigned long ControlPc; /* +0x031c */ unsigned char Disposition[4]; /* +0x0320 f5 52 00 00 */ unsigned char HandlerData[20]; /* +0x0324 5a 15 00 00 */ }; struct _RTL_RXACT_CONTEXT { void *RootRegistryKey; /* +0x0000 */ void *RXactKey; /* +0x0004 */ unsigned char HandlesValid; /* +0x0008 */ unsigned char RXactLog[4]; /* +0x000c f9 52 00 00 */ }; struct _SYSTEM_BIGPOOL_INFORMATION { unsigned long Count; /* +0x0000 */ unsigned char AllocatedInfo[12]; /* +0x0004 cc 3b 00 00 */ }; struct _PROCESS_EXTENDED_BASIC_INFORMATION { unsigned long Size; /* +0x0000 */ unsigned char BasicInfo[24]; /* +0x0004 2c 53 00 00 */ unsigned long Flags; /* +0x001c */ /* unsigned char IsProtectedProcess[0]; +0x001c 4a 12 00 00 */ /* unsigned char IsWow64Process[0]; +0x001c 9b 15 00 00 */ /* unsigned char IsProcessDeleting[0]; +0x001c 68 18 00 00 */ /* unsigned char IsCrossSessionCreate[0]; +0x001c 69 18 00 00 */ /* unsigned char IsFrozen[0]; +0x001c 40 21 00 00 */ /* unsigned char IsIdleAware[0]; +0x001c 41 21 00 00 */ unsigned char SpareBits[4]; /* +0x001c 2d 53 00 00 */ }; struct _SYSTEM_SYSTEM_DISK_INFORMATION { unsigned char SystemDisk[8]; /* +0x0000 7c 3b 00 00 */ }; struct _TBBUTTON { unsigned char iBitmap[4]; /* +0x0000 74 00 00 00 */ unsigned char idCommand[4]; /* +0x0004 74 00 00 00 */ unsigned char fsState; /* +0x0008 */ unsigned char fsStyle; /* +0x0009 */ unsigned char bReserved[2]; /* +0x000a 9c 14 00 00 */ unsigned long dwData; /* +0x000c */ unsigned char iString[4]; /* +0x0010 74 00 00 00 */ }; struct _OPEN_PRINTER_PROPS_INFOW { unsigned long dwSize; /* +0x0000 */ unsigned char pszSheetName[4]; /* +0x0004 71 04 00 00 */ unsigned char uSheetIndex[4]; /* +0x0008 75 00 00 00 */ unsigned long dwFlags; /* +0x000c */ unsigned char bModal[4]; /* +0x0010 74 00 00 00 */ }; struct tagLVCOLUMNA { unsigned char mask[4]; /* +0x0000 75 00 00 00 */ unsigned char fmt[4]; /* +0x0004 74 00 00 00 */ unsigned char cx[4]; /* +0x0008 74 00 00 00 */ char *pszText; /* +0x000c */ unsigned char cchTextMax[4]; /* +0x0010 74 00 00 00 */ unsigned char iSubItem[4]; /* +0x0014 74 00 00 00 */ unsigned char iImage[4]; /* +0x0018 74 00 00 00 */ unsigned char iOrder[4]; /* +0x001c 74 00 00 00 */ unsigned char cxMin[4]; /* +0x0020 74 00 00 00 */ unsigned char cxDefault[4]; /* +0x0024 74 00 00 00 */ unsigned char cxIdeal[4]; /* +0x0028 74 00 00 00 */ }; struct _PLEX_READ_DATA_REQUEST { unsigned char ByteOffset[8]; /* +0x0000 db 13 00 00 */ unsigned long ByteLength; /* +0x0008 */ unsigned long PlexNumber; /* +0x000c */ }; struct _SYSTEM_CALL_COUNT_INFORMATION { unsigned long Length; /* +0x0000 */ unsigned long NumberOfTables; /* +0x0004 */ }; struct _MEMORY_WORKING_SET_EX_BLOCK:::: { /* unsigned char Valid[0]; +0x0000 4a 12 00 00 */ /* unsigned char Reserved0[0]; +0x0000 74 53 00 00 */ /* unsigned char Shared[0]; +0x0000 e0 1f 00 00 */ /* unsigned char Reserved1[0]; +0x0000 75 53 00 00 */ /* unsigned char PageTable[0]; +0x0000 e3 1f 00 00 */ /* unsigned char Location[0]; +0x0000 76 53 00 00 */ /* unsigned char Reserved2[0]; +0x0000 77 53 00 00 */ unsigned char Bad[4]; /* +0x0000 ed 14 00 00 */ }; struct _NRESARRAY { unsigned char cItems[4]; /* +0x0000 75 00 00 00 */ unsigned char nr[32]; /* +0x0004 7c 53 00 00 */ }; struct _API_SET_NAMESPACE_ARRAY { unsigned long Version; /* +0x0000 */ unsigned long Count; /* +0x0004 */ unsigned char Array[12]; /* +0x0008 7f 53 00 00 */ }; struct _SYSTEM_QUERY_TIME_ADJUST_INFORMATION { unsigned long TimeAdjustment; /* +0x0000 */ unsigned long TimeIncrement; /* +0x0004 */ unsigned char Enable; /* +0x0008 */ }; struct _RTL_USER_PROCESS_PARAMETERS { unsigned long MaximumLength; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ unsigned long DebugFlags; /* +0x000c */ void *ConsoleHandle; /* +0x0010 */ unsigned long ConsoleFlags; /* +0x0014 */ void *StandardInput; /* +0x0018 */ void *StandardOutput; /* +0x001c */ void *StandardError; /* +0x0020 */ unsigned char CurrentDirectory[12]; /* +0x0024 99 53 00 00 */ unsigned char DllPath[8]; /* +0x0030 7c 3b 00 00 */ unsigned char ImagePathName[8]; /* +0x0038 7c 3b 00 00 */ unsigned char CommandLine[8]; /* +0x0040 7c 3b 00 00 */ void *Environment; /* +0x0048 */ unsigned long StartingX; /* +0x004c */ unsigned long StartingY; /* +0x0050 */ unsigned long CountX; /* +0x0054 */ unsigned long CountY; /* +0x0058 */ unsigned long CountCharsX; /* +0x005c */ unsigned long CountCharsY; /* +0x0060 */ unsigned long FillAttribute; /* +0x0064 */ unsigned long WindowFlags; /* +0x0068 */ unsigned long ShowWindowFlags; /* +0x006c */ unsigned char WindowTitle[8]; /* +0x0070 7c 3b 00 00 */ unsigned char DesktopInfo[8]; /* +0x0078 7c 3b 00 00 */ unsigned char ShellInfo[8]; /* +0x0080 7c 3b 00 00 */ unsigned char RuntimeData[8]; /* +0x0088 7c 3b 00 00 */ unsigned char CurrentDirectores[512]; /* +0x0090 9a 53 00 00 */ unsigned char EnvironmentSize[4]; /* +0x0290 53 3f 00 00 */ unsigned char EnvironmentVersion[4]; /* +0x0294 53 3f 00 00 */ unsigned char PackageMoniker[8]; /* +0x0298 7c 3b 00 00 */ void *PackageDependencyData; /* +0x02a0 */ unsigned long ProcessGroupId; /* +0x02a4 */ }; struct _FILE_TRACKING_INFORMATION { void *DestinationFile; /* +0x0000 */ unsigned long ObjectInformationLength; /* +0x0004 */ unsigned char ObjectInformation[4]; /* +0x0008 ea 1b 00 00 */ }; struct EVENT_INSTANCE_INFO { void *RegHandle; /* +0x0000 */ unsigned long InstanceId; /* +0x0004 */ }; struct _SE_LEARNING_MODE_USER_OBJECT_DATA { unsigned long Cookie; /* +0x0000 */ unsigned char ObjectType[4]; /* +0x0004 2e 3f 00 00 */ unsigned char ObjectName[4]; /* +0x0008 2e 3f 00 00 */ }; struct tagNMDATETIMESTRINGW { unsigned char nmhdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char pszUserString[4]; /* +0x000c 4f 13 00 00 */ unsigned char st[16]; /* +0x0010 7d 13 00 00 */ unsigned long dwFlags; /* +0x0020 */ }; struct _REPARSE_DATA_BUFFER { unsigned long ReparseTag; /* +0x0000 */ unsigned short ReparseDataLength; /* +0x0004 */ unsigned short Reserved; /* +0x0006 */ /* unsigned char SymbolicLinkReparseBuffer[0]; +0x0008 06 54 00 00 */ /* unsigned char MountPointReparseBuffer[0]; +0x0008 07 54 00 00 */ unsigned char GenericReparseBuffer[16]; /* +0x0008 08 54 00 00 */ }; struct _REPARSE_DATA_BUFFER:::: { unsigned short SubstituteNameOffset; /* +0x0000 */ unsigned short SubstituteNameLength; /* +0x0002 */ unsigned short PrintNameOffset; /* +0x0004 */ unsigned short PrintNameLength; /* +0x0006 */ unsigned char PathBuffer[2]; /* +0x0008 83 12 00 00 */ }; struct _REPARSE_DATA_BUFFER:::: { unsigned short SubstituteNameOffset; /* +0x0000 */ unsigned short SubstituteNameLength; /* +0x0002 */ unsigned short PrintNameOffset; /* +0x0004 */ unsigned short PrintNameLength; /* +0x0006 */ unsigned long Flags; /* +0x0008 */ unsigned char PathBuffer[4]; /* +0x000c 83 12 00 00 */ }; struct _HOTPATCH_HOOK_DESCRIPTOR { unsigned long long TargetAddress; /* +0x0000 */ unsigned long long MappedAddress; /* +0x0008 */ unsigned long CodeOffset; /* +0x0010 */ unsigned long CodeSize; /* +0x0014 */ unsigned long OrigCodeOffset; /* +0x0018 */ unsigned long ValidationOffset; /* +0x001c */ unsigned long ValidationSize; /* +0x0020 */ }; struct _RTL_HEAP_INFORMATION { void *BaseAddress; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned short EntryOverhead; /* +0x0008 */ unsigned short CreatorBackTraceIndex; /* +0x000a */ unsigned long BytesAllocated; /* +0x000c */ unsigned long BytesCommitted; /* +0x0010 */ unsigned long NumberOfTags; /* +0x0014 */ unsigned long NumberOfEntries; /* +0x0018 */ unsigned long NumberOfPseudoTags; /* +0x001c */ unsigned long PseudoTagGranularity; /* +0x0020 */ unsigned char Reserved[20]; /* +0x0024 5a 15 00 00 */ unsigned char Tags[4]; /* +0x0038 f9 47 00 00 */ unsigned char Entries[4]; /* +0x003c 13 54 00 00 */ }; struct tagPAGERANGE { long nFromPage; /* +0x0000 */ long nToPage; /* +0x0004 */ }; struct _RTL_HEAP_WALK_ENTRY { void *DataAddress; /* +0x0000 */ unsigned long DataSize; /* +0x0004 */ unsigned char OverheadBytes; /* +0x0008 */ unsigned char SegmentIndex; /* +0x0009 */ unsigned short Flags; /* +0x000a */ /* unsigned char Block[0]; +0x000c 29 54 00 00 */ unsigned char Segment[16]; /* +0x000c 2a 54 00 00 */ }; struct _RTL_HEAP_WALK_ENTRY:::: { unsigned long CommittedSize; /* +0x0000 */ unsigned long UnCommittedSize; /* +0x0004 */ void *FirstEntry; /* +0x0008 */ void *LastEntry; /* +0x000c */ }; struct _RTL_HEAP_WALK_ENTRY:::: { unsigned long Settable; /* +0x0000 */ unsigned short TagIndex; /* +0x0004 */ unsigned short AllocatorBackTraceIndex; /* +0x0006 */ unsigned char Reserved[8]; /* +0x0008 c3 15 00 00 */ }; struct _VM_COUNTERS_EX { unsigned long PeakVirtualSize; /* +0x0000 */ unsigned long VirtualSize; /* +0x0004 */ unsigned long PageFaultCount; /* +0x0008 */ unsigned long PeakWorkingSetSize; /* +0x000c */ unsigned long WorkingSetSize; /* +0x0010 */ unsigned long QuotaPeakPagedPoolUsage; /* +0x0014 */ unsigned long QuotaPagedPoolUsage; /* +0x0018 */ unsigned long QuotaPeakNonPagedPoolUsage; /* +0x001c */ unsigned long QuotaNonPagedPoolUsage; /* +0x0020 */ unsigned long PagefileUsage; /* +0x0024 */ unsigned long PeakPagefileUsage; /* +0x0028 */ unsigned long PrivateUsage; /* +0x002c */ }; struct _QUAD { long long UseThisFieldToCopy; /* +0x0000 */ unsigned char DoNotUseThisField[8]; /* +0x0000 41 00 00 00 */ }; struct _VARIABLE_NAME_AND_VALUE { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long ValueOffset; /* +0x0004 */ unsigned long ValueLength; /* +0x0008 */ unsigned long Attributes; /* +0x000c */ unsigned char VendorGuid[16]; /* +0x0010 ce 13 00 00 */ unsigned char Name[4]; /* +0x0020 83 12 00 00 */ }; struct _SYSTEM_REGISTRY_APPEND_STRING_PARAMETERS { void *KeyHandle; /* +0x0000 */ unsigned char ValueNamePointer[4]; /* +0x0004 2e 3f 00 00 */ unsigned long *RequiredLengthPointer; /* +0x0008 */ unsigned char *Buffer; /* +0x000c */ unsigned long BufferLength; /* +0x0010 */ unsigned long Type; /* +0x0014 */ unsigned char *AppendBuffer; /* +0x0018 */ unsigned long AppendBufferLength; /* +0x001c */ unsigned char CreateIfDoesntExist; /* +0x0020 */ unsigned char TruncateExistingValue; /* +0x0021 */ }; struct _PROCESS_STACK_ALLOCATION_INFORMATION_EX { unsigned long PreferredNode; /* +0x0000 */ unsigned long Reserved0; /* +0x0004 */ unsigned long Reserved1; /* +0x0008 */ unsigned long Reserved2; /* +0x000c */ unsigned char AllocInfo[12]; /* +0x0010 43 54 00 00 */ }; struct _STREAM_EXTENT_ENTRY { unsigned long Flags; /* +0x0000 */ }; struct SHDRAGIMAGE { unsigned char sizeDragImage[8]; /* +0x0000 21 13 00 00 */ unsigned char ptOffset[8]; /* +0x0008 ce 12 00 00 */ unsigned char hbmpDragImage[4]; /* +0x0010 b9 14 00 00 */ unsigned long crColorKey; /* +0x0014 */ }; struct _DROPFILES { unsigned long pFiles; /* +0x0000 */ unsigned char pt[8]; /* +0x0004 ce 12 00 00 */ unsigned char fNC[4]; /* +0x000c 74 00 00 00 */ unsigned char fWide[4]; /* +0x0010 74 00 00 00 */ }; struct tagNMHEADERW { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char iItem[4]; /* +0x000c 74 00 00 00 */ unsigned char iButton[4]; /* +0x0010 74 00 00 00 */ unsigned char pitem[4]; /* +0x0014 67 54 00 00 */ }; struct tagTVITEMEXA { unsigned char mask[4]; /* +0x0000 75 00 00 00 */ unsigned char hItem[4]; /* +0x0004 b1 3d 00 00 */ unsigned char state[4]; /* +0x0008 75 00 00 00 */ unsigned char stateMask[4]; /* +0x000c 75 00 00 00 */ char *pszText; /* +0x0010 */ unsigned char cchTextMax[4]; /* +0x0014 74 00 00 00 */ unsigned char iImage[4]; /* +0x0018 74 00 00 00 */ unsigned char iSelectedImage[4]; /* +0x001c 74 00 00 00 */ unsigned char cChildren[4]; /* +0x0020 74 00 00 00 */ long lParam; /* +0x0024 */ unsigned char iIntegral[4]; /* +0x0028 74 00 00 00 */ unsigned char uStateEx[4]; /* +0x002c 75 00 00 00 */ unsigned char hwnd[4]; /* +0x0030 fc 11 00 00 */ unsigned char iExpandedImage[4]; /* +0x0034 74 00 00 00 */ unsigned char iReserved[4]; /* +0x0038 74 00 00 00 */ }; struct _THREAD_TEB_INFORMATION { void *TebInformation; /* +0x0000 */ unsigned long TebOffset; /* +0x0004 */ unsigned long BytesToRead; /* +0x0008 */ }; struct _JOBOBJECT_WAKE_FILTER { unsigned long HighEdgeFilter; /* +0x0000 */ unsigned long LowEdgeFilter; /* +0x0004 */ }; struct _FILE_LAYOUT_NAME_ENTRY { unsigned long NextNameOffset; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long long ParentFileReferenceNumber; /* +0x0008 */ unsigned long FileNameLength; /* +0x0010 */ unsigned long Reserved; /* +0x0014 */ unsigned char FileName[8]; /* +0x0018 83 12 00 00 */ }; struct _MCA_EXCEPTION:::: { unsigned long long Address; /* +0x0000 */ unsigned long long Type; /* +0x0008 */ }; struct _MCA_EXCEPTION:::: { unsigned char BankNumber; /* +0x0000 */ unsigned char Reserved2[7]; /* +0x0001 54 49 00 00 */ unsigned char Status[8]; /* +0x0008 d5 50 00 00 */ unsigned char Address[8]; /* +0x0010 a7 54 00 00 */ unsigned long long Misc; /* +0x0018 */ }; struct _PLUGPLAY_EVENT_BLOCK { unsigned char EventGuid[16]; /* +0x0000 ce 13 00 00 */ unsigned char EventCategory[4]; /* +0x0010 dc 54 00 00 */ unsigned long *Result; /* +0x0014 */ unsigned long Flags; /* +0x0018 */ unsigned long TotalSize; /* +0x001c */ void *DeviceObject; /* +0x0020 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { unsigned char DeviceId[2]; /* +0x0000 83 12 00 00 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { unsigned char PowerSettingGuid[16]; /* +0x0000 ce 13 00 00 */ unsigned long Flags; /* +0x0010 */ unsigned long SessionId; /* +0x0014 */ unsigned long DataLength; /* +0x0018 */ unsigned char Data[4]; /* +0x001c 04 12 00 00 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { unsigned char ParentId[2]; /* +0x0000 83 12 00 00 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { unsigned char BlockedDriverGuid[16]; /* +0x0000 ce 13 00 00 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { unsigned char VetoType[4]; /* +0x0000 a0 40 00 00 */ unsigned char DeviceIdVetoNameBuffer[4]; /* +0x0004 83 12 00 00 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { unsigned long NotificationCode; /* +0x0000 */ unsigned long NotificationData; /* +0x0004 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { void *Notification; /* +0x0000 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { void *NotificationStructure; /* +0x0000 */ unsigned char DeviceId[4]; /* +0x0004 83 12 00 00 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { unsigned char ClassGuid[16]; /* +0x0000 ce 13 00 00 */ unsigned char SymbolicLinkName[4]; /* +0x0010 83 12 00 00 */ }; struct _RTL_AVL_TREE { unsigned char Root[4]; /* +0x0000 cc 44 00 00 */ }; struct _FILE_ID_FULL_DIR_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long FileIndex; /* +0x0004 */ unsigned char CreationTime[8]; /* +0x0008 db 13 00 00 */ unsigned char LastAccessTime[8]; /* +0x0010 db 13 00 00 */ unsigned char LastWriteTime[8]; /* +0x0018 db 13 00 00 */ unsigned char ChangeTime[8]; /* +0x0020 db 13 00 00 */ unsigned char EndOfFile[8]; /* +0x0028 db 13 00 00 */ unsigned char AllocationSize[8]; /* +0x0030 db 13 00 00 */ unsigned long FileAttributes; /* +0x0038 */ unsigned long FileNameLength; /* +0x003c */ unsigned long EaSize; /* +0x0040 */ unsigned char FileId[8]; /* +0x0048 db 13 00 00 */ unsigned char FileName[8]; /* +0x0050 83 12 00 00 */ }; struct _POOLED_USAGE_AND_LIMITS { unsigned long PeakPagedPoolUsage; /* +0x0000 */ unsigned long PagedPoolUsage; /* +0x0004 */ unsigned long PagedPoolLimit; /* +0x0008 */ unsigned long PeakNonPagedPoolUsage; /* +0x000c */ unsigned long NonPagedPoolUsage; /* +0x0010 */ unsigned long NonPagedPoolLimit; /* +0x0014 */ unsigned long PeakPagefileUsage; /* +0x0018 */ unsigned long PagefileUsage; /* +0x001c */ unsigned long PagefileLimit; /* +0x0020 */ }; struct _CLUSTER_RANGE { unsigned char StartingCluster[8]; /* +0x0000 db 13 00 00 */ unsigned char ClusterCount[8]; /* +0x0008 db 13 00 00 */ }; struct _CM_SCSI_DEVICE_DATA { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned char HostIdentifier; /* +0x0004 */ }; struct SORTCOLUMN { unsigned char propkey[20]; /* +0x0000 5b 23 00 00 */ unsigned char direction[4]; /* +0x0014 74 00 00 00 */ }; struct _REPARSE_INDEX_KEY { unsigned long FileReparseTag; /* +0x0000 */ unsigned char FileId[8]; /* +0x0004 db 13 00 00 */ }; struct _REMOTE_LINK_TRACKING_INFORMATION_ { void *TargetFileObject; /* +0x0000 */ unsigned long TargetLinkTrackingInformationLength; /* +0x0004 */ unsigned char TargetLinkTrackingInformationBuffer[4]; /* +0x0008 04 12 00 00 */ }; struct tagNMLVCACHEHINT { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char iFrom[4]; /* +0x000c 74 00 00 00 */ unsigned char iTo[4]; /* +0x0010 74 00 00 00 */ }; struct _TXFS_LIST_TRANSACTIONS { unsigned long long NumberOfTransactions; /* +0x0000 */ unsigned long long BufferSizeRequired; /* +0x0008 */ }; struct _SYSDBG_BUS_DATA { unsigned long Address; /* +0x0000 */ void *Buffer; /* +0x0004 */ unsigned long Request; /* +0x0008 */ unsigned char BusDataType[4]; /* +0x000c 46 55 00 00 */ unsigned long BusNumber; /* +0x0010 */ unsigned long SlotNumber; /* +0x0014 */ }; struct _DESCRIPTOR_TABLE_ENTRY { unsigned long Selector; /* +0x0000 */ unsigned char Descriptor[8]; /* +0x0004 2e 21 00 00 */ }; struct _PREFIX_TABLE { short NodeTypeCode; /* +0x0000 */ short NameLength; /* +0x0002 */ unsigned char NextPrefixTree[4]; /* +0x0004 49 51 00 00 */ }; struct _SEC_WINNT_AUTH_IDENTITY_EXW { unsigned long Version; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned short *User; /* +0x0008 */ unsigned long UserLength; /* +0x000c */ unsigned short *Domain; /* +0x0010 */ unsigned long DomainLength; /* +0x0014 */ unsigned short *Password; /* +0x0018 */ unsigned long PasswordLength; /* +0x001c */ unsigned long Flags; /* +0x0020 */ unsigned short *PackageList; /* +0x0024 */ unsigned long PackageListLength; /* +0x0028 */ }; struct _REQUEST_RAW_ENCRYPTED_DATA { long long FileOffset; /* +0x0000 */ unsigned long Length; /* +0x0008 */ }; struct _SYSTEM_PROCESSOR_PERFORMANCE_STATE_DISTRIBUTION { unsigned long ProcessorNumber; /* +0x0000 */ unsigned long StateCount; /* +0x0004 */ unsigned char States[8]; /* +0x0008 7b 55 00 00 */ }; struct _IMAGELISTDRAWPARAMS { unsigned long cbSize; /* +0x0000 */ unsigned char himl[4]; /* +0x0004 8d 3c 00 00 */ unsigned char i[4]; /* +0x0008 74 00 00 00 */ unsigned char hdcDst[4]; /* +0x000c 32 18 00 00 */ unsigned char x[4]; /* +0x0010 74 00 00 00 */ unsigned char y[4]; /* +0x0014 74 00 00 00 */ unsigned char cx[4]; /* +0x0018 74 00 00 00 */ unsigned char cy[4]; /* +0x001c 74 00 00 00 */ unsigned char xBitmap[4]; /* +0x0020 74 00 00 00 */ unsigned char yBitmap[4]; /* +0x0024 74 00 00 00 */ unsigned long rgbBk; /* +0x0028 */ unsigned long rgbFg; /* +0x002c */ unsigned char fStyle[4]; /* +0x0030 75 00 00 00 */ unsigned long dwRop; /* +0x0034 */ unsigned long fState; /* +0x0038 */ unsigned long Frame; /* +0x003c */ unsigned long crEffect; /* +0x0040 */ }; struct _INITIAL_TEB:: { void *OldStackBase; /* +0x0000 */ void *OldStackLimit; /* +0x0004 */ }; struct _RTL_PROCESS_LOCKS { unsigned long NumberOfLocks; /* +0x0000 */ unsigned char Locks[36]; /* +0x0004 a2 55 00 00 */ }; struct _RTL_TIME_ZONE_INFORMATION { long Bias; /* +0x0000 */ unsigned char StandardName[64]; /* +0x0004 7c 13 00 00 */ unsigned char StandardStart[16]; /* +0x0044 72 51 00 00 */ long StandardBias; /* +0x0054 */ unsigned char DaylightName[64]; /* +0x0058 7c 13 00 00 */ unsigned char DaylightStart[16]; /* +0x0098 72 51 00 00 */ long DaylightBias; /* +0x00a8 */ }; struct _ALPC_PORT_CALLBACK_INFORMATION { void *CallbackObject; /* +0x0000 */ void *Context; /* +0x0004 */ }; struct _SHChangeDWORDAsIDList { unsigned short cb; /* +0x0000 */ unsigned long dwItem1; /* +0x0002 */ unsigned long dwItem2; /* +0x0006 */ unsigned short cbZero; /* +0x000a */ }; struct _FP_32 { unsigned char W[4]; /* +0x0000 01 12 00 00 */ }; struct _SYSTEM_OBJECT_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ void *Object; /* +0x0004 */ void *CreatorUniqueProcess; /* +0x0008 */ unsigned short CreatorBackTraceIndex; /* +0x000c */ unsigned short Flags; /* +0x000e */ long PointerCount; /* +0x0010 */ long HandleCount; /* +0x0014 */ unsigned long PagedPoolCharge; /* +0x0018 */ unsigned long NonPagedPoolCharge; /* +0x001c */ void *ExclusiveProcessId; /* +0x0020 */ void *SecurityDescriptor; /* +0x0024 */ unsigned char NameInfo[8]; /* +0x0028 c2 55 00 00 */ }; struct _FILE_FS_SIZE_INFORMATION { unsigned char TotalAllocationUnits[8]; /* +0x0000 db 13 00 00 */ unsigned char AvailableAllocationUnits[8]; /* +0x0008 db 13 00 00 */ unsigned long SectorsPerAllocationUnit; /* +0x0010 */ unsigned long BytesPerSector; /* +0x0014 */ }; struct _PO_WAKE_SOURCE_DEVICE { unsigned char Header[8]; /* +0x0000 c0 3f 00 00 */ unsigned char InstancePath[4]; /* +0x0008 83 12 00 00 */ }; struct _KEY_CONTROL_FLAGS_INFORMATION { unsigned long ControlFlags; /* +0x0000 */ }; struct _MUILANGLISTNODE { unsigned short LanguageType; /* +0x0000 */ unsigned short Reserved; /* +0x0002 */ short LanguageSpec; /* +0x0004 */ }; struct _FILE_PIPE_CLIENT_PROCESS_BUFFER_EX { void *ClientSession; /* +0x0000 */ void *ClientProcess; /* +0x0004 */ unsigned short ClientComputerNameLength; /* +0x0008 */ unsigned char ClientComputerBuffer[34]; /* +0x000a a4 19 00 00 */ }; struct tagNMTTDISPINFOA { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ char *lpszText; /* +0x000c */ unsigned char szText[80]; /* +0x0010 73 21 00 00 */ unsigned char hinst[4]; /* +0x0060 f5 12 00 00 */ unsigned char uFlags[4]; /* +0x0064 75 00 00 00 */ long lParam; /* +0x0068 */ }; struct _RTL_CRITICAL_SECTION_DEBUG32 { unsigned short Type; /* +0x0000 */ unsigned short CreatorBackTraceIndex; /* +0x0002 */ unsigned long CriticalSection; /* +0x0004 */ unsigned char ProcessLocksList[8]; /* +0x0008 bb 43 00 00 */ unsigned long EntryCount; /* +0x0010 */ unsigned long ContentionCount; /* +0x0014 */ unsigned char Spare[8]; /* +0x0018 c3 15 00 00 */ }; struct tagNMTVGETINFOTIPA { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ char *pszText; /* +0x000c */ unsigned char cchTextMax[4]; /* +0x0010 74 00 00 00 */ unsigned char hItem[4]; /* +0x0014 b1 3d 00 00 */ long lParam; /* +0x0018 */ }; struct _TASKDIALOGCONFIG { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char hwndParent[4]; /* +0x0004 fc 11 00 00 */ unsigned char hInstance[4]; /* +0x0008 f5 12 00 00 */ unsigned char dwFlags[4]; /* +0x000c 74 00 00 00 */ unsigned char dwCommonButtons[4]; /* +0x0010 74 00 00 00 */ unsigned char pszWindowTitle[4]; /* +0x0014 4f 13 00 00 */ /* unsigned char hMainIcon[0]; +0x0018 92 19 00 00 */ unsigned char pszMainIcon[4]; /* +0x0018 4f 13 00 00 */ unsigned char pszMainInstruction[4]; /* +0x001c 4f 13 00 00 */ unsigned char pszContent[4]; /* +0x0020 4f 13 00 00 */ unsigned char cButtons[4]; /* +0x0024 75 00 00 00 */ unsigned char pButtons[4]; /* +0x0028 03 56 00 00 */ unsigned char nDefaultButton[4]; /* +0x002c 74 00 00 00 */ unsigned char cRadioButtons[4]; /* +0x0030 75 00 00 00 */ unsigned char pRadioButtons[4]; /* +0x0034 03 56 00 00 */ unsigned char nDefaultRadioButton[4]; /* +0x0038 74 00 00 00 */ unsigned char pszVerificationText[4]; /* +0x003c 4f 13 00 00 */ unsigned char pszExpandedInformation[4]; /* +0x0040 4f 13 00 00 */ unsigned char pszExpandedControlText[4]; /* +0x0044 4f 13 00 00 */ unsigned char pszCollapsedControlText[4]; /* +0x0048 4f 13 00 00 */ /* unsigned char hFooterIcon[0]; +0x004c 92 19 00 00 */ unsigned char pszFooterIcon[4]; /* +0x004c 4f 13 00 00 */ unsigned char pszFooter[4]; /* +0x0050 4f 13 00 00 */ unsigned char pfCallback[4]; /* +0x0054 06 56 00 00 */ long lpCallbackData; /* +0x0058 */ unsigned char cxWidth[4]; /* +0x005c 75 00 00 00 */ }; struct WMIREGINFOW { unsigned long BufferSize; /* +0x0000 */ unsigned long NextWmiRegInfo; /* +0x0004 */ unsigned long RegistryPath; /* +0x0008 */ unsigned long MofResourceName; /* +0x000c */ unsigned long GuidCount; /* +0x0010 */ /* unsigned char WmiRegGuid[0]; +0x0014 0d 56 00 00 */ }; struct _FILE_REFERENCE_RANGE { unsigned long long StartingFileReferenceNumber; /* +0x0000 */ unsigned long long EndingFileReferenceNumber; /* +0x0008 */ }; struct _TOKEN_SECURITY_ATTRIBUTES_INFORMATION { unsigned short Version; /* +0x0000 */ unsigned short Reserved; /* +0x0002 */ unsigned long AttributeCount; /* +0x0004 */ }; struct _TOKEN_SECURITY_ATTRIBUTES_INFORMATION:: { unsigned char pAttributeV1[4]; /* +0x0000 4c 56 00 00 */ }; struct _FILE_PIPE_REMOTE_INFORMATION { unsigned char CollectDataTime[8]; /* +0x0000 db 13 00 00 */ unsigned long MaximumCollectionCount; /* +0x0008 */ }; struct _ALPC_BASIC_INFORMATION { unsigned long Flags; /* +0x0000 */ unsigned long SequenceNo; /* +0x0004 */ void *PortContext; /* +0x0008 */ }; struct _FILE_LEVEL_TRIM { unsigned long Key; /* +0x0000 */ unsigned long NumRanges; /* +0x0004 */ unsigned char Ranges[16]; /* +0x0008 c3 56 00 00 */ }; struct _SYSTEM_REGISTRY_QUOTA_INFORMATION { unsigned long RegistryQuotaAllowed; /* +0x0000 */ unsigned long RegistryQuotaUsed; /* +0x0004 */ unsigned long PagedPoolSize; /* +0x0008 */ }; struct _FILE_IS_REMOTE_DEVICE_INFORMATION { unsigned char IsRemote; /* +0x0000 */ }; struct tagTBSAVEPARAMSA { unsigned char hkr[4]; /* +0x0000 63 2f 00 00 */ unsigned char pszSubKey[4]; /* +0x0004 bf 12 00 00 */ unsigned char pszValueName[4]; /* +0x0008 bf 12 00 00 */ }; struct tagAASHELLMENUITEM { void *lpReserved1; /* +0x0000 */ unsigned char iReserved[4]; /* +0x0004 74 00 00 00 */ unsigned char uiReserved[4]; /* +0x0008 75 00 00 00 */ unsigned char lpName[4]; /* +0x000c 05 54 00 00 */ unsigned char psz[4]; /* +0x0010 71 04 00 00 */ }; struct _PROCESSOR_POWER_INFORMATION { unsigned long Number; /* +0x0000 */ unsigned long MaxMhz; /* +0x0004 */ unsigned long CurrentMhz; /* +0x0008 */ unsigned long MhzLimit; /* +0x000c */ unsigned long MaxIdleState; /* +0x0010 */ unsigned long CurrentIdleState; /* +0x0014 */ }; struct _SecBuffer { unsigned long cbBuffer; /* +0x0000 */ unsigned long BufferType; /* +0x0004 */ void *pvBuffer; /* +0x0008 */ }; struct _LDR_SECTION_INFO { void *SectionHandle; /* +0x0000 */ unsigned long DesiredAccess; /* +0x0004 */ unsigned char ObjA[4]; /* +0x0008 20 57 00 00 */ unsigned long SectionPageProtection; /* +0x000c */ unsigned long AllocationAttributes; /* +0x0010 */ }; struct _MMPFN_IDENTITY:::: { unsigned char CombinedPage[4]; /* +0x0000 4a 12 00 00 */ }; struct _MMPFN_IDENTITY:::: { /* unsigned char Image[0]; +0x0000 4a 12 00 00 */ unsigned char Mismatch[4]; /* +0x0000 9b 15 00 00 */ }; struct _MMPFN_IDENTITY:: { /* unsigned char e1[0]; +0x0000 31 57 00 00 */ /* unsigned char e2[0]; +0x0000 32 57 00 00 */ /* unsigned char e3[0]; +0x0000 33 57 00 00 */ unsigned char e4[8]; /* +0x0000 34 57 00 00 */ }; struct _FILE_ALLOCATED_RANGE_BUFFER { unsigned char FileOffset[8]; /* +0x0000 db 13 00 00 */ unsigned char Length[8]; /* +0x0008 db 13 00 00 */ }; struct _RTL_UNLOAD_EVENT_TRACE32 { unsigned long BaseAddress; /* +0x0000 */ unsigned long SizeOfImage; /* +0x0004 */ unsigned long Sequence; /* +0x0008 */ unsigned long TimeDateStamp; /* +0x000c */ unsigned long CheckSum; /* +0x0010 */ unsigned char ImageName[64]; /* +0x0014 7c 13 00 00 */ unsigned char Version[8]; /* +0x0054 c3 15 00 00 */ }; struct _openasinfo { unsigned char pcszFile[4]; /* +0x0000 4f 13 00 00 */ unsigned char pcszClass[4]; /* +0x0004 4f 13 00 00 */ unsigned char oaifInFlags[4]; /* +0x0008 74 00 00 00 */ }; struct _FILE_DIRECTORY_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long FileIndex; /* +0x0004 */ unsigned char CreationTime[8]; /* +0x0008 db 13 00 00 */ unsigned char LastAccessTime[8]; /* +0x0010 db 13 00 00 */ unsigned char LastWriteTime[8]; /* +0x0018 db 13 00 00 */ unsigned char ChangeTime[8]; /* +0x0020 db 13 00 00 */ unsigned char EndOfFile[8]; /* +0x0028 db 13 00 00 */ unsigned char AllocationSize[8]; /* +0x0030 db 13 00 00 */ unsigned long FileAttributes; /* +0x0038 */ unsigned long FileNameLength; /* +0x003c */ unsigned char FileName[8]; /* +0x0040 83 12 00 00 */ }; struct tagNMDATETIMEWMKEYDOWNA { unsigned char nmhdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char nVirtKey[4]; /* +0x000c 74 00 00 00 */ unsigned char pszFormat[4]; /* +0x0010 bf 12 00 00 */ unsigned char st[16]; /* +0x0014 7d 13 00 00 */ }; struct tagSMDATA { unsigned long dwMask; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char hmenu[4]; /* +0x0008 4d 13 00 00 */ unsigned char hwnd[4]; /* +0x000c fc 11 00 00 */ unsigned char uId[4]; /* +0x0010 75 00 00 00 */ unsigned char uIdParent[4]; /* +0x0014 75 00 00 00 */ unsigned char uIdAncestor[4]; /* +0x0018 75 00 00 00 */ unsigned char punk[4]; /* +0x001c 2b 15 00 00 */ unsigned char pidlFolder[4]; /* +0x0020 6e 40 00 00 */ unsigned char pidlItem[4]; /* +0x0024 6e 40 00 00 */ unsigned char psf[4]; /* +0x0028 ee 3c 00 00 */ void *pvUserData; /* +0x002c */ }; struct _FSCTL_OFFLOAD_READ_INPUT { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long TokenTimeToLive; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ unsigned long long FileOffset; /* +0x0010 */ unsigned long long CopyLength; /* +0x0018 */ }; struct _SYSTEM_BOOT_LOGO_INFORMATION { unsigned char Bitmap[1]; /* +0x0000 04 12 00 00 */ }; struct _DETAILSINFO { unsigned char pidl[4]; /* +0x0000 e2 3d 00 00 */ unsigned char fmt[4]; /* +0x0004 74 00 00 00 */ unsigned char cxChar[4]; /* +0x0008 74 00 00 00 */ unsigned char str[264]; /* +0x000c 23 12 00 00 */ unsigned char iImage[4]; /* +0x0114 74 00 00 00 */ }; struct _PROCESS_BASIC_INFORMATION { long ExitStatus; /* +0x0000 */ unsigned char PebBaseAddress[4]; /* +0x0004 0f 50 00 00 */ unsigned long AffinityMask; /* +0x0008 */ long BasePriority; /* +0x000c */ unsigned long UniqueProcessId; /* +0x0010 */ unsigned long InheritedFromUniqueProcessId; /* +0x0014 */ }; struct tagNMCUSTOMSPLITRECTINFO { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char rcClient[16]; /* +0x000c c0 12 00 00 */ unsigned char rcButton[16]; /* +0x001c c0 12 00 00 */ unsigned char rcSplit[16]; /* +0x002c c0 12 00 00 */ }; struct tagNMSELCHANGE { unsigned char nmhdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char stSelStart[16]; /* +0x000c 7d 13 00 00 */ unsigned char stSelEnd[16]; /* +0x001c 7d 13 00 00 */ }; struct _LDR_DLL_NOTIFICATION_DATA { /* unsigned char Loaded[0]; +0x0000 4a 4d 00 00 */ unsigned char Unloaded[20]; /* +0x0000 b1 57 00 00 */ }; struct tagTVITEMW { unsigned char mask[4]; /* +0x0000 75 00 00 00 */ unsigned char hItem[4]; /* +0x0004 b1 3d 00 00 */ unsigned char state[4]; /* +0x0008 75 00 00 00 */ unsigned char stateMask[4]; /* +0x000c 75 00 00 00 */ unsigned char pszText[4]; /* +0x0010 71 04 00 00 */ unsigned char cchTextMax[4]; /* +0x0014 74 00 00 00 */ unsigned char iImage[4]; /* +0x0018 74 00 00 00 */ unsigned char iSelectedImage[4]; /* +0x001c 74 00 00 00 */ unsigned char cChildren[4]; /* +0x0020 74 00 00 00 */ long lParam; /* +0x0024 */ }; struct CM_COLUMNINFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwMask; /* +0x0004 */ unsigned long dwState; /* +0x0008 */ unsigned char uWidth[4]; /* +0x000c 75 00 00 00 */ unsigned char uDefaultWidth[4]; /* +0x0010 75 00 00 00 */ unsigned char uIdealWidth[4]; /* +0x0014 75 00 00 00 */ unsigned char wszName[160]; /* +0x0018 62 21 00 00 */ }; struct _SYSTEM_NUMA_PROXIMITY_MAP { unsigned long NodeProximityId; /* +0x0000 */ unsigned short NodeNumber; /* +0x0004 */ }; struct _JOURNAL_SET_KEY_LAST_WRITE_TIME_INFORMATION { unsigned char Action[8]; /* +0x0000 9f 3d 00 00 */ unsigned long long RecordNumber; /* +0x0008 */ unsigned char TimeStamp[8]; /* +0x0010 db 13 00 00 */ unsigned char KeyPathName[8]; /* +0x0018 7c 3b 00 00 */ unsigned char OldLastWriteTime[8]; /* +0x0020 db 13 00 00 */ unsigned char NewLastWriteTime[8]; /* +0x0028 db 13 00 00 */ }; struct PROPPRG { unsigned short flPrg; /* +0x0000 */ unsigned short flPrgInit; /* +0x0002 */ unsigned char achTitle[30]; /* +0x0004 ea 57 00 00 */ unsigned char achCmdLine[128]; /* +0x0022 29 14 00 00 */ unsigned char achWorkDir[64]; /* +0x00a2 fa 47 00 00 */ unsigned short wHotKey; /* +0x00e2 */ unsigned char achIconFile[80]; /* +0x00e4 73 21 00 00 */ unsigned short wIconIndex; /* +0x0134 */ unsigned long dwEnhModeFlags; /* +0x0136 */ unsigned long dwRealModeFlags; /* +0x013a */ unsigned char achOtherFile[80]; /* +0x013e 73 21 00 00 */ unsigned char achPIFFile[260]; /* +0x018e f8 1a 00 00 */ }; struct _CM_PCCARD_DEVICE_DATA { unsigned char Flags; /* +0x0000 */ unsigned char ErrorCode; /* +0x0001 */ unsigned short Reserved; /* +0x0002 */ unsigned long BusData; /* +0x0004 */ unsigned long DeviceId; /* +0x0008 */ unsigned long LegacyBaseAddress; /* +0x000c */ unsigned char IRQMap[16]; /* +0x0010 d3 19 00 00 */ }; struct _RTL_BALANCED_LINKS { unsigned char Parent[4]; /* +0x0000 8a 45 00 00 */ unsigned char LeftChild[4]; /* +0x0004 8a 45 00 00 */ unsigned char RightChild[4]; /* +0x0008 8a 45 00 00 */ char Balance; /* +0x000c */ unsigned char Reserved[3]; /* +0x000d 49 12 00 00 */ }; struct tagNMKEY { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char nVKey[4]; /* +0x000c 75 00 00 00 */ unsigned char uFlags[4]; /* +0x0010 75 00 00 00 */ }; struct _COUNTED_REASON_CONTEXT { unsigned long Version; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned char ResourceFileName[8]; /* +0x0008 7c 3b 00 00 */ unsigned short ResourceReasonId; /* +0x0010 */ unsigned long StringCount; /* +0x0014 */ /* unsigned char ReasonStrings[-16]; +0x0018 2e 3f 00 00 */ unsigned char SimpleString[20]; /* +0x0008 7c 3b 00 00 */ }; struct _INVERTED_FUNCTION_TABLE_ENTRY { void *FunctionTable; /* +0x0000 */ void *ImageBase; /* +0x0004 */ unsigned long SizeOfImage; /* +0x0008 */ unsigned long SizeOfTable; /* +0x000c */ }; struct _PROCESS_REVOKE_FILE_HANDLES_INFORMATION { unsigned char TargetDevicePath[8]; /* +0x0000 7c 3b 00 00 */ }; struct _SHSTOCKICONINFO { unsigned long cbSize; /* +0x0000 */ unsigned char hIcon[4]; /* +0x0004 92 19 00 00 */ unsigned char iSysImageIndex[4]; /* +0x0008 74 00 00 00 */ unsigned char iIcon[4]; /* +0x000c 74 00 00 00 */ unsigned char szPath[520]; /* +0x0010 a8 13 00 00 */ }; struct _SecPkgContext_NamesA { char *sUserName; /* +0x0000 */ }; struct _SD_QUERY_STATS_OUTPUT { unsigned long long SdsStreamSize; /* +0x0000 */ unsigned long long SdsAllocationSize; /* +0x0008 */ unsigned long long SiiStreamSize; /* +0x0010 */ unsigned long long SiiAllocationSize; /* +0x0018 */ unsigned long long SdhStreamSize; /* +0x0020 */ unsigned long long SdhAllocationSize; /* +0x0028 */ unsigned long long NumSDTotal; /* +0x0030 */ unsigned long long NumSDUnused; /* +0x0038 */ }; struct _OPEN_PRINTER_PROPS_INFOA { unsigned long dwSize; /* +0x0000 */ char *pszSheetName; /* +0x0004 */ unsigned char uSheetIndex[4]; /* +0x0008 75 00 00 00 */ unsigned long dwFlags; /* +0x000c */ unsigned char bModal[4]; /* +0x0010 74 00 00 00 */ }; struct tagNMVIEWCHANGE { unsigned char nmhdr[12]; /* +0x0000 b7 31 00 00 */ unsigned long dwOldView; /* +0x000c */ unsigned long dwNewView; /* +0x0010 */ }; struct tagNMTVCUSTOMDRAW { unsigned char nmcd[48]; /* +0x0000 f7 3e 00 00 */ unsigned long clrText; /* +0x0030 */ unsigned long clrTextBk; /* +0x0034 */ unsigned char iLevel[4]; /* +0x0038 74 00 00 00 */ }; struct _RTL_UNLOAD_EVENT_TRACE { void *BaseAddress; /* +0x0000 */ unsigned long SizeOfImage; /* +0x0004 */ unsigned long Sequence; /* +0x0008 */ unsigned long TimeDateStamp; /* +0x000c */ unsigned long CheckSum; /* +0x0010 */ unsigned char ImageName[64]; /* +0x0014 7c 13 00 00 */ unsigned char Version[8]; /* +0x0054 c3 15 00 00 */ }; struct tagNMITEMACTIVATE { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char iItem[4]; /* +0x000c 74 00 00 00 */ unsigned char iSubItem[4]; /* +0x0010 74 00 00 00 */ unsigned char uNewState[4]; /* +0x0014 75 00 00 00 */ unsigned char uOldState[4]; /* +0x0018 75 00 00 00 */ unsigned char uChanged[4]; /* +0x001c 75 00 00 00 */ unsigned char ptAction[8]; /* +0x0020 ce 12 00 00 */ long lParam; /* +0x0028 */ unsigned char uKeyFlags[4]; /* +0x002c 75 00 00 00 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR { unsigned char Type; /* +0x0000 */ unsigned char ShareDisposition; /* +0x0001 */ unsigned short Flags; /* +0x0002 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned char Class; /* +0x0000 */ unsigned char Type; /* +0x0001 */ unsigned char Reserved1; /* +0x0002 */ unsigned char Reserved2; /* +0x0003 */ unsigned long IdLowPart; /* +0x0004 */ unsigned long IdHighPart; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned char Start[8]; /* +0x0000 db 13 00 00 */ unsigned long Length64; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned char Start[8]; /* +0x0000 db 13 00 00 */ unsigned long Length48; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned char Start[8]; /* +0x0000 db 13 00 00 */ unsigned long Length40; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned long DataSize; /* +0x0000 */ unsigned long Reserved1; /* +0x0004 */ unsigned long Reserved2; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned long Start; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned long Reserved; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned char Data[12]; /* +0x0000 13 12 00 00 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned long Channel; /* +0x0000 */ unsigned long RequestLine; /* +0x0004 */ unsigned long Reserved1; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned long Channel; /* +0x0000 */ unsigned long Port; /* +0x0004 */ unsigned long Reserved1; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned char Start[8]; /* +0x0000 db 13 00 00 */ unsigned long Length; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { /* unsigned char Raw[0]; +0x0000 49 58 00 00 */ unsigned char Translated[12]; /* +0x0000 4a 58 00 00 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::::::: { unsigned long Level; /* +0x0000 */ unsigned long Vector; /* +0x0004 */ unsigned long Affinity; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::::::: { unsigned short Reserved; /* +0x0000 */ unsigned short MessageCount; /* +0x0002 */ unsigned long Vector; /* +0x0004 */ unsigned long Affinity; /* +0x0008 */ }; struct _ATOM_TABLE_INFORMATION { unsigned long NumberOfAtoms; /* +0x0000 */ unsigned char Atoms[4]; /* +0x0004 56 14 00 00 */ }; struct _BOOT_ENTROPY_NT_RESULT { unsigned long maxEntropySources; /* +0x0000 */ unsigned char EntropySourceResult[728]; /* +0x0008 92 58 00 00 */ unsigned char SeedBytesForCng[48]; /* +0x02e0 7a 42 00 00 */ }; struct _EISA_MEMORY_CONFIGURATION { unsigned char ConfigurationByte[1]; /* +0x0000 95 58 00 00 */ unsigned char DataSize; /* +0x0001 */ unsigned short AddressLowWord; /* +0x0002 */ unsigned char AddressHighByte; /* +0x0004 */ unsigned short MemorySize; /* +0x0005 */ }; struct _PROCESS_BASIC_INFORMATION64 { long ExitStatus; /* +0x0000 */ unsigned char Pad1[4]; /* +0x0004 75 00 00 00 */ unsigned long long PebBaseAddress; /* +0x0008 */ unsigned long long AffinityMask; /* +0x0010 */ long BasePriority; /* +0x0018 */ unsigned char Pad2[4]; /* +0x001c 75 00 00 00 */ unsigned long long UniqueProcessId; /* +0x0020 */ unsigned long long InheritedFromUniqueProcessId; /* +0x0028 */ }; struct _FILE_REMOTE_PROTOCOL_INFORMATION { unsigned short StructureVersion; /* +0x0000 */ unsigned short StructureSize; /* +0x0002 */ unsigned long Protocol; /* +0x0004 */ unsigned short ProtocolMajorVersion; /* +0x0008 */ unsigned short ProtocolMinorVersion; /* +0x000a */ unsigned short ProtocolRevision; /* +0x000c */ unsigned short Reserved; /* +0x000e */ unsigned long Flags; /* +0x0010 */ }; struct _FILE_SET_DEFECT_MGMT_BUFFER { unsigned char Disable; /* +0x0000 */ }; struct _TIMER_SET_COALESCABLE_TIMER_INFO { unsigned char DueTime[8]; /* +0x0000 db 13 00 00 */ unsigned char TimerApcRoutine[4]; /* +0x0008 5b 49 00 00 */ void *TimerContext; /* +0x000c */ unsigned char WakeContext[4]; /* +0x0010 a5 58 00 00 */ unsigned long Period; /* +0x0014 */ unsigned long TolerableDelay; /* +0x0018 */ unsigned char *PreviousState; /* +0x001c */ }; struct _FILE_SYSTEM_RECOGNITION_INFORMATION { unsigned char FileSystem[9]; /* +0x0000 bd 58 00 00 */ }; struct _UNICODE_PREFIX_TABLE { short NodeTypeCode; /* +0x0000 */ short NameLength; /* +0x0002 */ unsigned char NextPrefixTree[4]; /* +0x0004 2c 3f 00 00 */ unsigned char LastNextEntry[4]; /* +0x0008 2c 3f 00 00 */ }; struct _PROCESS_SESSION_INFORMATION { unsigned long SessionId; /* +0x0000 */ }; struct tagTVINSERTSTRUCTA { unsigned char hParent[4]; /* +0x0000 b1 3d 00 00 */ unsigned char hInsertAfter[4]; /* +0x0004 b1 3d 00 00 */ /* unsigned char itemex[0]; +0x0008 21 4c 00 00 */ unsigned char item[60]; /* +0x0008 bd 3f 00 00 */ }; struct _SYSTEM_CONTEXT_SWITCH_INFORMATION { unsigned long ContextSwitches; /* +0x0000 */ unsigned long FindAny; /* +0x0004 */ unsigned long FindLast; /* +0x0008 */ unsigned long FindIdeal; /* +0x000c */ unsigned long IdleAny; /* +0x0010 */ unsigned long IdleCurrent; /* +0x0014 */ unsigned long IdleLast; /* +0x0018 */ unsigned long IdleIdeal; /* +0x001c */ unsigned long PreemptAny; /* +0x0020 */ unsigned long PreemptCurrent; /* +0x0024 */ unsigned long PreemptLast; /* +0x0028 */ unsigned long SwitchToIdle; /* +0x002c */ }; struct _CONTEXT_EX { unsigned char All[8]; /* +0x0000 27 56 00 00 */ unsigned char Legacy[8]; /* +0x0008 27 56 00 00 */ unsigned char XState[8]; /* +0x0010 27 56 00 00 */ }; struct _SYSTEM_DEVICE_INFORMATION { unsigned long NumberOfDisks; /* +0x0000 */ unsigned long NumberOfFloppies; /* +0x0004 */ unsigned long NumberOfCdRoms; /* +0x0008 */ unsigned long NumberOfTapes; /* +0x000c */ unsigned long NumberOfSerialPorts; /* +0x0010 */ unsigned long NumberOfParallelPorts; /* +0x0014 */ }; struct _FLS_DATA { unsigned char Entry[8]; /* +0x0000 f7 19 00 00 */ unsigned char Slots[512]; /* +0x0008 e6 58 00 00 */ }; struct _EVENT_TRACE_HEADER { unsigned short Size; /* +0x0000 */ unsigned short FieldTypeFlags; /* +0x0002 */ unsigned char HeaderType; /* +0x0002 */ unsigned char MarkerFlags; /* +0x0003 */ unsigned long Version; /* +0x0004 */ unsigned char Class[4]; /* +0x0004 ef 58 00 00 */ unsigned long ThreadId; /* +0x0008 */ unsigned long ProcessId; /* +0x000c */ unsigned char TimeStamp[8]; /* +0x0010 db 13 00 00 */ /* unsigned char Guid[0]; +0x0018 ce 13 00 00 */ unsigned long long GuidPtr; /* +0x0018 */ unsigned long KernelTime; /* +0x0028 */ unsigned long UserTime; /* +0x002c */ unsigned long long ProcessorTime; /* +0x0028 */ unsigned long ClientContext; /* +0x0028 */ unsigned long Flags; /* +0x002c */ }; struct _PO_WAKE_SOURCE_HEADER { unsigned char Type[4]; /* +0x0000 3b 59 00 00 */ unsigned long Size; /* +0x0004 */ }; struct _COLORMAP { unsigned long from; /* +0x0000 */ unsigned long to; /* +0x0004 */ }; struct _ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_BEGINNING { unsigned char Data[4]; /* +0x0000 92 15 00 00 */ unsigned long AssemblyRosterIndex; /* +0x0004 */ void *ResolutionContext; /* +0x0008 */ unsigned char Root[8]; /* +0x000c 7c 3b 00 00 */ unsigned char KnownRoot; /* +0x0014 */ unsigned long RootCount; /* +0x0018 */ unsigned char CancelResolution; /* +0x001c */ }; struct tagTBSAVEPARAMSW { unsigned char hkr[4]; /* +0x0000 63 2f 00 00 */ unsigned char pszSubKey[4]; /* +0x0004 4f 13 00 00 */ unsigned char pszValueName[4]; /* +0x0008 4f 13 00 00 */ }; struct tagWNODE_ALL_DATA { unsigned char WnodeHeader[48]; /* +0x0000 b5 4c 00 00 */ unsigned long DataBlockOffset; /* +0x0030 */ unsigned long InstanceCount; /* +0x0034 */ unsigned long OffsetInstanceNameOffsets; /* +0x0038 */ unsigned long FixedInstanceSize; /* +0x003c */ unsigned char OffsetInstanceDataAndLength[12]; /* +0x003c 5b 59 00 00 */ }; struct _MEMORY_COMBINE_INFORMATION { void *Handle; /* +0x0000 */ unsigned long PagesCombined; /* +0x0004 */ }; struct _SecPkgContext_PasswordExpiry { unsigned char tsPasswordExpires[8]; /* +0x0000 db 13 00 00 */ }; struct _tagOLECMDTEXT { unsigned long cmdtextf; /* +0x0000 */ unsigned long cwActual; /* +0x0004 */ unsigned long cwBuf; /* +0x0008 */ unsigned char rgwz[4]; /* +0x000c 83 12 00 00 */ }; struct _RTL_HEAP_ENTRY:::: { unsigned long CommittedSize; /* +0x0000 */ void *FirstBlock; /* +0x0004 */ }; struct _RTL_HEAP_ENTRY:::: { unsigned long Settable; /* +0x0000 */ unsigned long Tag; /* +0x0004 */ }; struct tagLITEM { unsigned char mask[4]; /* +0x0000 75 00 00 00 */ unsigned char iLink[4]; /* +0x0004 74 00 00 00 */ unsigned char state[4]; /* +0x0008 75 00 00 00 */ unsigned char stateMask[4]; /* +0x000c 75 00 00 00 */ unsigned char szID[96]; /* +0x0010 b5 59 00 00 */ unsigned char szUrl[4168]; /* +0x0070 62 50 00 00 */ }; struct _ACTIVATION_CONTEXT_STACK { unsigned char ActiveFrame[4]; /* +0x0000 bb 59 00 00 */ unsigned char FrameListCache[8]; /* +0x0004 f7 19 00 00 */ unsigned long Flags; /* +0x000c */ unsigned long NextCookieSequenceNumber; /* +0x0010 */ unsigned long StackId; /* +0x0014 */ }; struct _CMINVOKECOMMANDINFO { unsigned long cbSize; /* +0x0000 */ unsigned long fMask; /* +0x0004 */ unsigned char hwnd[4]; /* +0x0008 fc 11 00 00 */ unsigned char lpVerb[4]; /* +0x000c bf 12 00 00 */ unsigned char lpParameters[4]; /* +0x0010 bf 12 00 00 */ unsigned char lpDirectory[4]; /* +0x0014 bf 12 00 00 */ unsigned char nShow[4]; /* +0x0018 74 00 00 00 */ unsigned long dwHotKey; /* +0x001c */ void *hIcon; /* +0x0020 */ }; struct _SYSTEM_THREAD_CID_PRIORITY_INFORMATION { unsigned char ClientId[8]; /* +0x0000 ab 3b 00 00 */ long Priority; /* +0x0008 */ }; struct _JOURNAL_CREATE_DELETE_KEY_INFORMATION { unsigned char Action[8]; /* +0x0000 9f 3d 00 00 */ unsigned long long RecordNumber; /* +0x0008 */ unsigned char TimeStamp[8]; /* +0x0010 db 13 00 00 */ unsigned char KeyPathName[8]; /* +0x0018 7c 3b 00 00 */ unsigned long SecurityDescriptorLength; /* +0x0020 */ void *SecurityDescriptor; /* +0x0024 */ unsigned short ClassLength; /* +0x0028 */ void *ClassData; /* +0x002c */ unsigned char SymbolicLink; /* +0x0030 */ }; struct tagTVDISPINFOEXA { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char item[60]; /* +0x000c 21 4c 00 00 */ }; struct _FILE_IOSTATUSBLOCK_RANGE_INFORMATION { unsigned char *IoStatusBlockRange; /* +0x0000 */ unsigned long Length; /* +0x0004 */ }; struct _KEY_WRITE_TIME_INFORMATION { unsigned char LastWriteTime[8]; /* +0x0000 db 13 00 00 */ }; struct _CLASSIC_EVENT_ID { unsigned char EventGuid[16]; /* +0x0000 ce 13 00 00 */ unsigned char Type; /* +0x0010 */ unsigned char Reserved[7]; /* +0x0011 54 49 00 00 */ }; struct tagDATABLOCKHEADER { unsigned long cbSize; /* +0x0000 */ unsigned long dwSignature; /* +0x0004 */ }; struct tagWNODE_SINGLE_ITEM { unsigned char WnodeHeader[48]; /* +0x0000 b5 4c 00 00 */ unsigned long OffsetInstanceName; /* +0x0030 */ unsigned long InstanceIndex; /* +0x0034 */ unsigned long ItemId; /* +0x0038 */ unsigned long DataBlockOffset; /* +0x003c */ unsigned long SizeDataItem; /* +0x0040 */ unsigned char VariableData[4]; /* +0x0044 fc 1f 00 00 */ }; struct _FILE_OBJECTID_INFORMATION { long long FileReference; /* +0x0000 */ unsigned char ObjectId[16]; /* +0x0008 d3 19 00 00 */ unsigned char BirthVolumeId[16]; /* +0x0018 d3 19 00 00 */ unsigned char BirthObjectId[16]; /* +0x0028 d3 19 00 00 */ /* unsigned char DomainId[-32]; +0x0038 d3 19 00 00 */ unsigned char ExtendedInfo[48]; /* +0x0018 7a 42 00 00 */ }; struct _TTGETTITLE { unsigned long dwSize; /* +0x0000 */ unsigned char uTitleBitmap[4]; /* +0x0004 75 00 00 00 */ unsigned char cch[4]; /* +0x0008 75 00 00 00 */ unsigned char pszTitle[4]; /* +0x000c 71 04 00 00 */ }; struct _RTL_USER_PROCESS_INFORMATION64 { unsigned long Length; /* +0x0000 */ long long Process; /* +0x0008 */ long long Thread; /* +0x0010 */ unsigned char ClientId[16]; /* +0x0018 cb 4f 00 00 */ unsigned char ImageInformation[64]; /* +0x0028 55 4e 00 00 */ }; struct _PROCESS_HANDLE_TRACING_QUERY { void *Handle; /* +0x0000 */ unsigned long TotalTraces; /* +0x0004 */ unsigned char HandleTrace[80]; /* +0x0008 17 5a 00 00 */ }; struct _SYSTEM_PROCESSOR_PROFILE_CONTROL_AREA { unsigned char ProcessorProfileControlArea[4]; /* +0x0000 1e 5a 00 00 */ unsigned char Allocate; /* +0x0004 */ }; struct _HD_HITTESTINFO { unsigned char pt[8]; /* +0x0000 ce 12 00 00 */ unsigned char flags[4]; /* +0x0008 75 00 00 00 */ unsigned char iItem[4]; /* +0x000c 74 00 00 00 */ }; struct tagNMHDFILTERBTNCLICK { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char iItem[4]; /* +0x000c 74 00 00 00 */ unsigned char rc[16]; /* +0x0010 c0 12 00 00 */ }; struct _JOBOBJECT_WAKE_INFORMATION { unsigned long long NotificationChannel; /* +0x0000 */ unsigned char WakeCounters[32]; /* +0x0008 46 5a 00 00 */ }; struct _KEY_OPEN_SUBKEYS_INFORMATION { unsigned long Count; /* +0x0000 */ unsigned char KeyArray[12]; /* +0x0004 4a 5a 00 00 */ }; struct tagLVBKIMAGEW { unsigned long ulFlags; /* +0x0000 */ unsigned char hbm[4]; /* +0x0004 b9 14 00 00 */ unsigned char pszImage[4]; /* +0x0008 71 04 00 00 */ unsigned char cchImageMax[4]; /* +0x000c 75 00 00 00 */ unsigned char xOffsetPercent[4]; /* +0x0010 74 00 00 00 */ unsigned char yOffsetPercent[4]; /* +0x0014 74 00 00 00 */ }; struct tagNMDATETIMECHANGE { unsigned char nmhdr[12]; /* +0x0000 b7 31 00 00 */ unsigned long dwFlags; /* +0x000c */ unsigned char st[16]; /* +0x0010 7d 13 00 00 */ }; struct _EXTENDED_ENCRYPTED_DATA_INFO { unsigned long ExtendedCode; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ }; struct tagTCITEMW { unsigned char mask[4]; /* +0x0000 75 00 00 00 */ unsigned long dwState; /* +0x0004 */ unsigned long dwStateMask; /* +0x0008 */ unsigned char pszText[4]; /* +0x000c 71 04 00 00 */ unsigned char cchTextMax[4]; /* +0x0010 74 00 00 00 */ unsigned char iImage[4]; /* +0x0014 74 00 00 00 */ long lParam; /* +0x0018 */ }; struct _MEMORY_WORKING_SET_EX_INFORMATION { void *VirtualAddress; /* +0x0000 */ }; struct _MEMORY_WORKING_SET_EX_INFORMATION:: { /* unsigned char VirtualAttributes[0]; +0x0000 b3 5a 00 00 */ unsigned long Long; /* +0x0000 */ }; struct _SecPkgContext_AuthorityW { unsigned char sAuthorityName[4]; /* +0x0000 71 04 00 00 */ }; struct _SecPkgContext_ClientSpecifiedTarget { unsigned char sTargetName[4]; /* +0x0000 71 04 00 00 */ }; struct _LDRP_CSLIST { unsigned char Tail[4]; /* +0x0000 79 18 00 00 */ }; struct tagTOOLINFOA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char uFlags[4]; /* +0x0004 75 00 00 00 */ unsigned char hwnd[4]; /* +0x0008 fc 11 00 00 */ unsigned char uId[4]; /* +0x000c 75 00 00 00 */ unsigned char rect[16]; /* +0x0010 c0 12 00 00 */ unsigned char hinst[4]; /* +0x0020 f5 12 00 00 */ char *lpszText; /* +0x0024 */ long lParam; /* +0x0028 */ void *lpReserved; /* +0x002c */ }; struct _IMAGEINFO { unsigned char hbmImage[4]; /* +0x0000 b9 14 00 00 */ unsigned char hbmMask[4]; /* +0x0004 b9 14 00 00 */ unsigned char Unused1[4]; /* +0x0008 74 00 00 00 */ unsigned char Unused2[4]; /* +0x000c 74 00 00 00 */ unsigned char rcImage[16]; /* +0x0010 c0 12 00 00 */ }; struct _TXFS_MODIFY_RM { unsigned long Flags; /* +0x0000 */ unsigned long LogContainerCountMax; /* +0x0004 */ unsigned long LogContainerCountMin; /* +0x0008 */ unsigned long LogContainerCount; /* +0x000c */ unsigned long LogGrowthIncrement; /* +0x0010 */ unsigned long LogAutoShrinkPercentage; /* +0x0014 */ unsigned long long Reserved; /* +0x0018 */ unsigned short LoggingMode; /* +0x0020 */ }; struct _ALPC_SECURITY_ATTR { unsigned long Flags; /* +0x0000 */ unsigned char QoS[4]; /* +0x0004 8d 31 00 00 */ void *ContextHandle; /* +0x0008 */ }; struct _SYSTEM_VERIFIER_FAULTS_INFORMATION { unsigned long Probability; /* +0x0000 */ unsigned long MaxProbability; /* +0x0004 */ unsigned char PoolTags[8]; /* +0x0008 7c 3b 00 00 */ unsigned char Applications[8]; /* +0x0010 7c 3b 00 00 */ }; struct tagLHITTESTINFO { unsigned char pt[8]; /* +0x0000 ce 12 00 00 */ unsigned char item[4280]; /* +0x0008 ed 5a 00 00 */ }; struct _ALPC_DATA_VIEW_ATTR { unsigned long Flags; /* +0x0000 */ void *SectionHandle; /* +0x0004 */ void *ViewBase; /* +0x0008 */ unsigned long ViewSize; /* +0x000c */ }; struct _CM_PNP_BIOS_DEVICE_NODE { unsigned short Size; /* +0x0000 */ unsigned char Node; /* +0x0002 */ unsigned long ProductId; /* +0x0003 */ unsigned char DeviceType[3]; /* +0x0007 49 12 00 00 */ unsigned short DeviceAttributes; /* +0x000a */ }; struct _PLUGPLAY_CONTROL_TARGET_RELATION_DATA { void *UserFileHandle; /* +0x0000 */ long Status; /* +0x0004 */ unsigned long DeviceInstanceLen; /* +0x0008 */ unsigned char DeviceInstance[4]; /* +0x000c 71 04 00 00 */ }; struct _SecPkgContext_Bindings { unsigned long BindingsLength; /* +0x0000 */ unsigned char Bindings[4]; /* +0x0004 c7 5a 00 00 */ }; struct _FILE_POSITION_INFORMATION { unsigned char CurrentByteOffset[8]; /* +0x0000 db 13 00 00 */ }; struct _PLUGPLAY_CONTROL_DEVICE_RELATIONS_DATA { unsigned char DeviceInstance[8]; /* +0x0000 7c 3b 00 00 */ unsigned char Operation[4]; /* +0x0008 aa 54 00 00 */ unsigned long BufferLength; /* +0x000c */ unsigned char Buffer[4]; /* +0x0010 71 04 00 00 */ }; struct _FILE_NUMA_NODE_INFORMATION { unsigned short NodeNumber; /* +0x0000 */ }; struct _RTL_DYNAMIC_HASH_TABLE_ENUMERATOR { unsigned char HashEntry[12]; /* +0x0000 16 56 00 00 */ unsigned char ChainHead[4]; /* +0x000c f7 36 00 00 */ unsigned long BucketIndex; /* +0x0010 */ }; struct _CSTRING { unsigned short Length; /* +0x0000 */ unsigned short MaximumLength; /* +0x0002 */ unsigned char Buffer[4]; /* +0x0004 bf 12 00 00 */ }; struct _PROCESS_DEVICEMAP_INFORMATION { /* unsigned char Set[0]; +0x0000 94 5b 00 00 */ unsigned char Query[36]; /* +0x0000 95 5b 00 00 */ }; struct _PROCESS_WINDOW_INFORMATION { unsigned long WindowFlags; /* +0x0000 */ unsigned short WindowTitleLength; /* +0x0004 */ unsigned char WindowTitle[2]; /* +0x0006 83 12 00 00 */ }; struct _TXFS_QUERY_RM_INFORMATION { unsigned long BytesRequired; /* +0x0000 */ unsigned long long TailLsn; /* +0x0008 */ unsigned long long CurrentLsn; /* +0x0010 */ unsigned long long ArchiveTailLsn; /* +0x0018 */ unsigned long long LogContainerSize; /* +0x0020 */ unsigned char HighestVirtualClock[8]; /* +0x0028 db 13 00 00 */ unsigned long LogContainerCount; /* +0x0030 */ unsigned long LogContainerCountMax; /* +0x0034 */ unsigned long LogContainerCountMin; /* +0x0038 */ unsigned long LogGrowthIncrement; /* +0x003c */ unsigned long LogAutoShrinkPercentage; /* +0x0040 */ unsigned long Flags; /* +0x0044 */ unsigned short LoggingMode; /* +0x0048 */ unsigned short Reserved; /* +0x004a */ unsigned long RmState; /* +0x004c */ unsigned long long LogCapacity; /* +0x0050 */ unsigned long long LogFree; /* +0x0058 */ unsigned long long TopsSize; /* +0x0060 */ unsigned long long TopsUsed; /* +0x0068 */ unsigned long long TransactionCount; /* +0x0070 */ unsigned long long OnePCCount; /* +0x0078 */ unsigned long long TwoPCCount; /* +0x0080 */ unsigned long long NumberLogFileFull; /* +0x0088 */ unsigned long long OldestTransactionAge; /* +0x0090 */ unsigned char RMName[16]; /* +0x0098 ce 13 00 00 */ unsigned long TmLogPathOffset; /* +0x00a8 */ }; struct _RTL_PROCESS_BACKTRACES_CONTROL { unsigned long ControlCode; /* +0x0000 */ unsigned long ControlSize; /* +0x0004 */ /* unsigned char ControlData[0]; +0x0008 04 12 00 00 */ unsigned char DatabaseCreate[12]; /* +0x0008 bf 5b 00 00 */ }; struct __m128i { /* unsigned char m128i_i8[0]; +0x0000 e4 5b 00 00 */ /* unsigned char m128i_i16[0]; +0x0000 e5 5b 00 00 */ /* unsigned char m128i_i32[0]; +0x0000 2b 46 00 00 */ /* unsigned char m128i_i64[0]; +0x0000 e6 5b 00 00 */ /* unsigned char m128i_u8[0]; +0x0000 d3 19 00 00 */ /* unsigned char m128i_u16[0]; +0x0000 e7 5b 00 00 */ /* unsigned char m128i_u32[0]; +0x0000 e8 5b 00 00 */ unsigned char m128i_u64[16]; /* +0x0000 b7 1a 00 00 */ }; struct tagNMIPADDRESS { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char iField[4]; /* +0x000c 74 00 00 00 */ unsigned char iValue[4]; /* +0x0010 74 00 00 00 */ }; struct _PROCESS_DEVICEMAP_INFORMATION_EX { /* unsigned char Set[0]; +0x0000 f7 5b 00 00 */ unsigned char Query[36]; /* +0x0000 f8 5b 00 00 */ unsigned long Flags; /* +0x0024 */ }; struct _FILE_LINK_ENTRY_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ long long ParentFileId; /* +0x0008 */ unsigned long FileNameLength; /* +0x0010 */ unsigned char FileName[4]; /* +0x0014 83 12 00 00 */ }; struct _FP_IEEE_VALUE:: { /* unsigned char RoundingMode[0]; +0x0000 5d 2a 00 00 */ /* unsigned char Inexact[0]; +0x0000 68 18 00 00 */ /* unsigned char Underflow[0]; +0x0000 69 18 00 00 */ /* unsigned char Overflow[0]; +0x0000 40 21 00 00 */ /* unsigned char ZeroDivide[0]; +0x0000 41 21 00 00 */ /* unsigned char InvalidOperation[0]; +0x0000 6b 18 00 00 */ /* unsigned char OperandValid[0]; +0x0000 6c 18 00 00 */ /* unsigned char Format[0]; +0x0000 df 3b 00 00 */ /* unsigned char Precision[0]; +0x0000 e0 3b 00 00 */ /* unsigned char Operation[0]; +0x0000 ff 5b 00 00 */ /* unsigned char Spare[0]; +0x0000 00 5c 00 00 */ unsigned char HardwareException[4]; /* +0x0000 ed 14 00 00 */ }; struct _FP_IEEE_VALUE:: { short I16Value; /* +0x0000 */ unsigned short U16Value; /* +0x0000 */ long I32Value; /* +0x0000 */ unsigned long U32Value; /* +0x0000 */ void *StringValue; /* +0x0000 */ unsigned long CompareValue; /* +0x0000 */ /* unsigned char Fp32Value[0]; +0x0000 03 5c 00 00 */ /* unsigned char I64Value[0]; +0x0000 db 13 00 00 */ /* unsigned char U64Value[0]; +0x0000 5e 20 00 00 */ /* unsigned char Fp64Value[0]; +0x0000 04 5c 00 00 */ /* unsigned char Fp80Value[0]; +0x0000 95 43 00 00 */ unsigned char Fp128Value[16]; /* +0x0000 8b 42 00 00 */ }; struct _XSAVE_FEATURE { unsigned long FeatureId; /* +0x0000 */ /* unsigned char Vendors[0]; +0x0008 3b 5c 00 00 */ unsigned long long Unused; /* +0x0008 */ }; struct tagNMREBARAUTOBREAK { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char uBand[4]; /* +0x000c 75 00 00 00 */ unsigned char wID[4]; /* +0x0010 75 00 00 00 */ long lParam; /* +0x0014 */ unsigned char uMsg[4]; /* +0x0018 75 00 00 00 */ unsigned char fStyleCurrent[4]; /* +0x001c 75 00 00 00 */ unsigned char fAutoBreak[4]; /* +0x0020 74 00 00 00 */ }; struct _ALPC_MESSAGE_ATTRIBUTES { unsigned long AllocatedAttributes; /* +0x0000 */ unsigned long ValidAttributes; /* +0x0004 */ }; struct _FILE_PROCESS_IDS_USING_FILE_INFORMATION { unsigned long NumberOfProcessIdsInList; /* +0x0000 */ unsigned char ProcessIdList[4]; /* +0x0004 01 12 00 00 */ }; struct _CM_MONITOR_DEVICE_DATA { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned short HorizontalScreenSize; /* +0x0004 */ unsigned short VerticalScreenSize; /* +0x0006 */ unsigned short HorizontalResolution; /* +0x0008 */ unsigned short VerticalResolution; /* +0x000a */ unsigned short HorizontalDisplayTimeLow; /* +0x000c */ unsigned short HorizontalDisplayTime; /* +0x000e */ unsigned short HorizontalDisplayTimeHigh; /* +0x0010 */ unsigned short HorizontalBackPorchLow; /* +0x0012 */ unsigned short HorizontalBackPorch; /* +0x0014 */ unsigned short HorizontalBackPorchHigh; /* +0x0016 */ unsigned short HorizontalFrontPorchLow; /* +0x0018 */ unsigned short HorizontalFrontPorch; /* +0x001a */ unsigned short HorizontalFrontPorchHigh; /* +0x001c */ unsigned short HorizontalSyncLow; /* +0x001e */ unsigned short HorizontalSync; /* +0x0020 */ unsigned short HorizontalSyncHigh; /* +0x0022 */ unsigned short VerticalBackPorchLow; /* +0x0024 */ unsigned short VerticalBackPorch; /* +0x0026 */ unsigned short VerticalBackPorchHigh; /* +0x0028 */ unsigned short VerticalFrontPorchLow; /* +0x002a */ unsigned short VerticalFrontPorch; /* +0x002c */ unsigned short VerticalFrontPorchHigh; /* +0x002e */ unsigned short VerticalSyncLow; /* +0x0030 */ unsigned short VerticalSync; /* +0x0032 */ unsigned short VerticalSyncHigh; /* +0x0034 */ }; struct _PORT_DATA_INFORMATION { unsigned long CountDataEntries; /* +0x0000 */ unsigned char DataEntries[8]; /* +0x0004 52 5c 00 00 */ }; struct _ALPC_HANDLE_ATTR { unsigned long Flags; /* +0x0000 */ void *Handle; /* +0x0004 */ unsigned long ObjectType; /* +0x0008 */ unsigned long DesiredAccess; /* +0x000c */ }; struct _ACTIVATION_CONTEXT_SECTION_KEYED_DATA_2600 { unsigned long Size; /* +0x0000 */ unsigned long DataFormatVersion; /* +0x0004 */ void *Data; /* +0x0008 */ unsigned long Length; /* +0x000c */ void *SectionGlobalData; /* +0x0010 */ unsigned long SectionGlobalDataLength; /* +0x0014 */ void *SectionBase; /* +0x0018 */ unsigned long SectionTotalLength; /* +0x001c */ unsigned char ActivationContext[4]; /* +0x0020 c4 31 00 00 */ unsigned long AssemblyRosterIndex; /* +0x0024 */ unsigned long Flags; /* +0x0028 */ }; struct _PROCESS_WS_WATCH_INFORMATION { void *FaultingPc; /* +0x0000 */ void *FaultingVa; /* +0x0004 */ }; struct _COVERAGE_UNLOADED_MODULE_ENTRY { unsigned char NextEntry[8]; /* +0x0000 f7 19 00 00 */ unsigned char BaseDllName[8]; /* +0x0008 7c 3b 00 00 */ unsigned char FullDllName[8]; /* +0x0010 7c 3b 00 00 */ unsigned long CoverageSectionSize; /* +0x0018 */ void *CoverageSection; /* +0x001c */ }; struct _RTLP_PROCESS_REFLECTION_CONTEXT { unsigned long ReflectionContextSize; /* +0x0000 */ unsigned long ReflectionFlags; /* +0x0004 */ unsigned char ReflectionRoutine[4]; /* +0x0008 15 40 00 00 */ void *ReflectionParameter; /* +0x000c */ void *ReflectedProcessCreatedEvent; /* +0x0010 */ void *ReflectedProcessHandlesDuplicatedEvent; /* +0x0014 */ void *ReflectionStartEvent; /* +0x0018 */ unsigned char ReflectionInformation[16]; /* +0x001c b9 43 00 00 */ }; struct _PROPSHEETPAGEA_V3 { unsigned long dwSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char hInstance[4]; /* +0x0008 f5 12 00 00 */ /* unsigned char pszTemplate[0]; +0x000c bf 12 00 00 */ unsigned char pResource[4]; /* +0x000c a9 1a 00 00 */ /* unsigned char hIcon[0]; +0x0010 92 19 00 00 */ unsigned char pszIcon[4]; /* +0x0010 bf 12 00 00 */ unsigned char pszTitle[4]; /* +0x0014 bf 12 00 00 */ unsigned char pfnDlgProc[4]; /* +0x0018 22 20 00 00 */ long lParam; /* +0x001c */ unsigned char pfnCallback[4]; /* +0x0020 f9 3b 00 00 */ unsigned char pcRefParent[4]; /* +0x0024 75 04 00 00 */ unsigned char pszHeaderTitle[4]; /* +0x0028 bf 12 00 00 */ unsigned char pszHeaderSubTitle[4]; /* +0x002c bf 12 00 00 */ void *hActCtx; /* +0x0030 */ }; struct _ENABLE_TRACE_PARAMETERS { unsigned long Version; /* +0x0000 */ unsigned long EnableProperty; /* +0x0004 */ unsigned long ControlFlags; /* +0x0008 */ unsigned char SourceId[16]; /* +0x000c ce 13 00 00 */ unsigned char EnableFilterDesc[4]; /* +0x001c de 5c 00 00 */ }; struct _KEY_FULL_INFORMATION { unsigned char LastWriteTime[8]; /* +0x0000 db 13 00 00 */ unsigned long TitleIndex; /* +0x0008 */ unsigned long ClassOffset; /* +0x000c */ unsigned long ClassLength; /* +0x0010 */ unsigned long SubKeys; /* +0x0014 */ unsigned long MaxNameLen; /* +0x0018 */ unsigned long MaxClassLen; /* +0x001c */ unsigned long Values; /* +0x0020 */ unsigned long MaxValueNameLen; /* +0x0024 */ unsigned long MaxValueDataLen; /* +0x0028 */ unsigned char Class[4]; /* +0x002c 83 12 00 00 */ }; struct _ITEMSPACING { unsigned char cxSmall[4]; /* +0x0000 74 00 00 00 */ unsigned char cySmall[4]; /* +0x0004 74 00 00 00 */ unsigned char cxLarge[4]; /* +0x0008 74 00 00 00 */ unsigned char cyLarge[4]; /* +0x000c 74 00 00 00 */ }; struct _SYSTEM_BASIC_INFORMATION { unsigned long Reserved; /* +0x0000 */ unsigned long TimerResolution; /* +0x0004 */ unsigned long PageSize; /* +0x0008 */ unsigned long NumberOfPhysicalPages; /* +0x000c */ unsigned long LowestPhysicalPageNumber; /* +0x0010 */ unsigned long HighestPhysicalPageNumber; /* +0x0014 */ unsigned long AllocationGranularity; /* +0x0018 */ unsigned long MinimumUserModeAddress; /* +0x001c */ unsigned long MaximumUserModeAddress; /* +0x0020 */ unsigned long ActiveProcessorsAffinityMask; /* +0x0024 */ char NumberOfProcessors; /* +0x0028 */ }; struct _FILE_SFIO_VOLUME_INFORMATION { unsigned long MaximumRequestsPerPeriod; /* +0x0000 */ unsigned long MinimumPeriod; /* +0x0004 */ unsigned long MinimumTransferSize; /* +0x0008 */ }; struct _HEAP_BLOCK_SETTABLE_INFORMATION { unsigned long Settable; /* +0x0000 */ unsigned short TagIndex; /* +0x0004 */ unsigned short AllocatorBackTraceIndex; /* +0x0006 */ }; struct _KLDR_DATA_TABLE_ENTRY32 { unsigned char InLoadOrderLinks[8]; /* +0x0000 bb 43 00 00 */ unsigned long __Undefined1; /* +0x0008 */ unsigned long __Undefined2; /* +0x000c */ unsigned long __Undefined3; /* +0x0010 */ unsigned long NonPagedDebugInfo; /* +0x0014 */ unsigned long DllBase; /* +0x0018 */ unsigned long EntryPoint; /* +0x001c */ unsigned long SizeOfImage; /* +0x0020 */ unsigned char FullDllName[8]; /* +0x0024 1b 3f 00 00 */ unsigned char BaseDllName[8]; /* +0x002c 1b 3f 00 00 */ unsigned long Flags; /* +0x0034 */ unsigned short LoadCount; /* +0x0038 */ unsigned short __Undefined5; /* +0x003a */ unsigned long __Undefined6; /* +0x003c */ unsigned long CheckSum; /* +0x0040 */ unsigned long TimeDateStamp; /* +0x0044 */ }; struct tagWNODE_EVENT_REFERENCE { unsigned char WnodeHeader[48]; /* +0x0000 b5 4c 00 00 */ unsigned char TargetGuid[16]; /* +0x0030 ce 13 00 00 */ unsigned long TargetDataBlockSize; /* +0x0040 */ unsigned long TargetInstanceIndex; /* +0x0044 */ unsigned char TargetInstanceName[4]; /* +0x0044 4b 5d 00 00 */ }; struct _TXFS_LIST_TRANSACTIONS_ENTRY { unsigned char TransactionId[16]; /* +0x0000 ce 13 00 00 */ unsigned long TransactionState; /* +0x0010 */ unsigned long Reserved1; /* +0x0014 */ unsigned long Reserved2; /* +0x0018 */ long long Reserved3; /* +0x0020 */ }; struct _FILE_PIPE_PEEK_BUFFER { unsigned long NamedPipeState; /* +0x0000 */ unsigned long ReadDataAvailable; /* +0x0004 */ unsigned long NumberOfMessages; /* +0x0008 */ unsigned long MessageLength; /* +0x000c */ unsigned char Data[4]; /* +0x0010 ea 1b 00 00 */ }; struct _PLUGPLAY_CONTROL_CONFLICT_STRINGS { unsigned long NullDeviceInstance; /* +0x0000 */ unsigned char DeviceInstanceStrings[4]; /* +0x0004 83 12 00 00 */ }; struct _MUTANT_OWNER_INFORMATION { unsigned char ClientId[8]; /* +0x0000 ab 3b 00 00 */ }; struct _TRACE_LOGFILE_HEADER64 { unsigned long BufferSize; /* +0x0000 */ unsigned long Version; /* +0x0004 */ unsigned char VersionDetail[4]; /* +0x0004 9c 5d 00 00 */ unsigned long ProviderVersion; /* +0x0008 */ unsigned long NumberOfProcessors; /* +0x000c */ unsigned char EndTime[8]; /* +0x0010 db 13 00 00 */ unsigned long TimerResolution; /* +0x0018 */ unsigned long MaximumFileSize; /* +0x001c */ unsigned long LogFileMode; /* +0x0020 */ unsigned long BuffersWritten; /* +0x0024 */ /* unsigned char LogInstanceGuid[0]; +0x0028 ce 13 00 00 */ unsigned long StartBuffers; /* +0x0028 */ unsigned long PointerSize; /* +0x002c */ unsigned long EventsLost; /* +0x0030 */ unsigned long CpuSpeedInMHz; /* +0x0034 */ unsigned long long LoggerName; /* +0x0038 */ unsigned long long LogFileName; /* +0x0040 */ unsigned char TimeZone[176]; /* +0x0048 d3 30 00 00 */ unsigned char BootTime[8]; /* +0x00f8 db 13 00 00 */ unsigned char PerfFreq[8]; /* +0x0100 db 13 00 00 */ unsigned char StartTime[8]; /* +0x0108 db 13 00 00 */ unsigned long ReservedFlags; /* +0x0110 */ unsigned long BuffersLost; /* +0x0114 */ }; struct _AppBarData { unsigned long cbSize; /* +0x0000 */ unsigned char hWnd[4]; /* +0x0004 fc 11 00 00 */ unsigned char uCallbackMessage[4]; /* +0x0008 75 00 00 00 */ unsigned char uEdge[4]; /* +0x000c 75 00 00 00 */ unsigned char rc[16]; /* +0x0010 c0 12 00 00 */ long lParam; /* +0x0020 */ }; struct _browseinfoW { unsigned char hwndOwner[4]; /* +0x0000 fc 11 00 00 */ unsigned char pidlRoot[4]; /* +0x0004 e2 3d 00 00 */ unsigned char pszDisplayName[4]; /* +0x0008 71 04 00 00 */ unsigned char lpszTitle[4]; /* +0x000c 4f 13 00 00 */ unsigned char ulFlags[4]; /* +0x0010 75 00 00 00 */ unsigned char lpfn[4]; /* +0x0014 75 46 00 00 */ long lParam; /* +0x0018 */ unsigned char iImage[4]; /* +0x001c 74 00 00 00 */ }; struct _FILE_PREFETCH_EX { unsigned long Type; /* +0x0000 */ unsigned long Count; /* +0x0004 */ void *Context; /* +0x0008 */ unsigned char Prefetch[8]; /* +0x0010 d9 50 00 00 */ }; struct _CM_FULL_RESOURCE_DESCRIPTOR { unsigned char InterfaceType[4]; /* +0x0000 68 45 00 00 */ unsigned long BusNumber; /* +0x0004 */ unsigned char PartialResourceList[24]; /* +0x0008 df 5d 00 00 */ }; struct _PORT_MESSAGE:::: { short Type; /* +0x0000 */ short DataInfoOffset; /* +0x0002 */ }; struct _PORT_MESSAGE:::: { short DataLength; /* +0x0000 */ short TotalLength; /* +0x0002 */ }; struct _FILE_FS_ATTRIBUTE_INFORMATION { unsigned long FileSystemAttributes; /* +0x0000 */ long MaximumComponentNameLength; /* +0x0004 */ unsigned long FileSystemNameLength; /* +0x0008 */ unsigned char FileSystemName[4]; /* +0x000c 83 12 00 00 */ }; struct _HD_LAYOUT { unsigned char prc[4]; /* +0x0000 c0 1d 00 00 */ unsigned char pwpos[4]; /* +0x0004 42 1f 00 00 */ }; struct _TRACE_GUID_INFO { unsigned long InstanceCount; /* +0x0000 */ unsigned long Reserved; /* +0x0004 */ }; struct _MUICCHEADER { unsigned char ulMaxStringsSize[4]; /* +0x0000 75 00 00 00 */ unsigned char ulSizeStrings[4]; /* +0x0004 75 00 00 00 */ unsigned char ulMaxNumInstalledCultures[4]; /* +0x0008 75 00 00 00 */ unsigned char ulNumInstalledCultures[4]; /* +0x000c 75 00 00 00 */ unsigned char ulMaxNumUnverifiedCultures[4]; /* +0x0010 75 00 00 00 */ unsigned char ulNumUnverifiedCultures[4]; /* +0x0014 75 00 00 00 */ }; struct _SecPkgContext_TargetInformation { unsigned long MarshalledTargetInfoLength; /* +0x0000 */ unsigned char *MarshalledTargetInfo; /* +0x0004 */ }; struct _SYSTEM_VDM_INSTEMUL_INFO { unsigned long SegmentNotPresent; /* +0x0000 */ unsigned long VdmOpcode0F; /* +0x0004 */ unsigned long OpcodeESPrefix; /* +0x0008 */ unsigned long OpcodeCSPrefix; /* +0x000c */ unsigned long OpcodeSSPrefix; /* +0x0010 */ unsigned long OpcodeDSPrefix; /* +0x0014 */ unsigned long OpcodeFSPrefix; /* +0x0018 */ unsigned long OpcodeGSPrefix; /* +0x001c */ unsigned long OpcodeOPER32Prefix; /* +0x0020 */ unsigned long OpcodeADDR32Prefix; /* +0x0024 */ unsigned long OpcodeINSB; /* +0x0028 */ unsigned long OpcodeINSW; /* +0x002c */ unsigned long OpcodeOUTSB; /* +0x0030 */ unsigned long OpcodeOUTSW; /* +0x0034 */ unsigned long OpcodePUSHF; /* +0x0038 */ unsigned long OpcodePOPF; /* +0x003c */ unsigned long OpcodeINTnn; /* +0x0040 */ unsigned long OpcodeINTO; /* +0x0044 */ unsigned long OpcodeIRET; /* +0x0048 */ unsigned long OpcodeINBimm; /* +0x004c */ unsigned long OpcodeINWimm; /* +0x0050 */ unsigned long OpcodeOUTBimm; /* +0x0054 */ unsigned long OpcodeOUTWimm; /* +0x0058 */ unsigned long OpcodeINB; /* +0x005c */ unsigned long OpcodeINW; /* +0x0060 */ unsigned long OpcodeOUTB; /* +0x0064 */ unsigned long OpcodeOUTW; /* +0x0068 */ unsigned long OpcodeLOCKPrefix; /* +0x006c */ unsigned long OpcodeREPNEPrefix; /* +0x0070 */ unsigned long OpcodeREPPrefix; /* +0x0074 */ unsigned long OpcodeHLT; /* +0x0078 */ unsigned long OpcodeCLI; /* +0x007c */ unsigned long OpcodeSTI; /* +0x0080 */ unsigned long BopCount; /* +0x0084 */ }; struct _SecPkgContext_NegotiationInfoW { unsigned char PackageInfo[4]; /* +0x0000 8a 3e 00 00 */ unsigned long NegotiationState; /* +0x0004 */ }; struct _SecPkgContext_NegoKeys { unsigned long KeyType; /* +0x0000 */ unsigned short KeyLength; /* +0x0004 */ unsigned char *KeyValue; /* +0x0008 */ unsigned long VerifyKeyType; /* +0x000c */ unsigned short VerifyKeyLength; /* +0x0010 */ unsigned char *VerifyKeyValue; /* +0x0014 */ }; struct tagBUTTON_SPLITINFO { unsigned char mask[4]; /* +0x0000 75 00 00 00 */ unsigned char himlGlyph[4]; /* +0x0004 8d 3c 00 00 */ unsigned char uSplitStyle[4]; /* +0x0008 75 00 00 00 */ unsigned char size[8]; /* +0x000c 21 13 00 00 */ }; struct _PATHNAME_BUFFER { unsigned long PathNameLength; /* +0x0000 */ unsigned char Name[4]; /* +0x0004 83 12 00 00 */ }; struct _ALPC_SERVER_INFORMATION { /* unsigned char In[0]; +0x0000 38 5e 00 00 */ unsigned char Out[16]; /* +0x0000 39 5e 00 00 */ }; struct _ALPC_SERVER_INFORMATION:::: { unsigned char ThreadBlocked; /* +0x0000 */ void *ConnectedProcessId; /* +0x0004 */ unsigned char ConnectionPortName[8]; /* +0x0008 7c 3b 00 00 */ }; struct _ALPC_SERVER_INFORMATION:::: { void *ThreadHandle; /* +0x0000 */ }; struct _SYSTEM_DPC_BEHAVIOR_INFORMATION { unsigned long Spare; /* +0x0000 */ unsigned long DpcQueueDepth; /* +0x0004 */ unsigned long MinimumDpcRate; /* +0x0008 */ unsigned long AdjustDpcThreshold; /* +0x000c */ unsigned long IdealDpcRate; /* +0x0010 */ }; struct _EISA_DMA_CONFIGURATION { unsigned char ConfigurationByte0[1]; /* +0x0000 46 5e 00 00 */ unsigned char ConfigurationByte1[1]; /* +0x0001 47 5e 00 00 */ }; struct _RTL_GENERIC_TABLE { unsigned char TableRoot[4]; /* +0x0000 5c 5e 00 00 */ unsigned char InsertOrderList[8]; /* +0x0004 f7 19 00 00 */ unsigned char OrderedPointer[4]; /* +0x000c f7 36 00 00 */ unsigned long WhichOrderedElement; /* +0x0010 */ unsigned long NumberGenericTableElements; /* +0x0014 */ unsigned char CompareRoutine[4]; /* +0x0018 5f 5e 00 00 */ unsigned char AllocateRoutine[4]; /* +0x001c 60 5e 00 00 */ unsigned char FreeRoutine[4]; /* +0x0020 de 5d 00 00 */ void *TableContext; /* +0x0024 */ }; struct _IO_ERROR_LOG_PACKET { unsigned char MajorFunctionCode; /* +0x0000 */ unsigned char RetryCount; /* +0x0001 */ unsigned short DumpDataSize; /* +0x0002 */ unsigned short NumberOfStrings; /* +0x0004 */ unsigned short StringOffset; /* +0x0006 */ unsigned short EventCategory; /* +0x0008 */ long ErrorCode; /* +0x000c */ unsigned long UniqueErrorValue; /* +0x0010 */ long FinalStatus; /* +0x0014 */ unsigned long SequenceNumber; /* +0x0018 */ unsigned long IoControlCode; /* +0x001c */ unsigned char DeviceOffset[8]; /* +0x0020 db 13 00 00 */ unsigned char DumpData[8]; /* +0x0028 01 12 00 00 */ }; struct _SecPkgContext_AuthzID { unsigned long AuthzIDLength; /* +0x0000 */ char *AuthzID; /* +0x0004 */ }; struct __JUMP_BUFFER { unsigned long Ebp; /* +0x0000 */ unsigned long Ebx; /* +0x0004 */ unsigned long Edi; /* +0x0008 */ unsigned long Esi; /* +0x000c */ unsigned long Esp; /* +0x0010 */ unsigned long Eip; /* +0x0014 */ unsigned long Registration; /* +0x0018 */ unsigned long TryLevel; /* +0x001c */ unsigned long Cookie; /* +0x0020 */ unsigned long UnwindFunc; /* +0x0024 */ unsigned char UnwindData[24]; /* +0x0028 ab 18 00 00 */ }; struct _DEDUP_QUERY_FILE_HASHES_INPUT_BUFFER { unsigned long Version; /* +0x0000 */ unsigned long QueryFlags; /* +0x0004 */ unsigned long HashAlgorithm; /* +0x0008 */ unsigned char RangeOffsetInFile[8]; /* +0x0010 db 13 00 00 */ unsigned char RangeLength[8]; /* +0x0018 db 13 00 00 */ }; struct _SYSTEM_LOOKASIDE_INFORMATION { unsigned short CurrentDepth; /* +0x0000 */ unsigned short MaximumDepth; /* +0x0002 */ unsigned long TotalAllocates; /* +0x0004 */ unsigned long AllocateMisses; /* +0x0008 */ unsigned long TotalFrees; /* +0x000c */ unsigned long FreeMisses; /* +0x0010 */ unsigned long Type; /* +0x0014 */ unsigned long Tag; /* +0x0018 */ unsigned long Size; /* +0x001c */ }; struct _NOTIFYICONDATAW { unsigned long cbSize; /* +0x0000 */ unsigned char hWnd[4]; /* +0x0004 fc 11 00 00 */ unsigned char uID[4]; /* +0x0008 75 00 00 00 */ unsigned char uFlags[4]; /* +0x000c 75 00 00 00 */ unsigned char uCallbackMessage[4]; /* +0x0010 75 00 00 00 */ unsigned char hIcon[4]; /* +0x0014 92 19 00 00 */ unsigned char szTip[256]; /* +0x0018 7e 13 00 00 */ unsigned long dwState; /* +0x0118 */ unsigned long dwStateMask; /* +0x011c */ unsigned char szInfo[512]; /* +0x0120 49 22 00 00 */ /* unsigned char uTimeout[0]; +0x0320 75 00 00 00 */ unsigned char uVersion[4]; /* +0x0320 75 00 00 00 */ unsigned char szInfoTitle[128]; /* +0x0324 0f 18 00 00 */ unsigned long dwInfoFlags; /* +0x03a4 */ unsigned char guidItem[16]; /* +0x03a8 ce 13 00 00 */ unsigned char hBalloonIcon[4]; /* +0x03b8 92 19 00 00 */ }; struct _MUTANT_BASIC_INFORMATION { long CurrentCount; /* +0x0000 */ unsigned char OwnedByCaller; /* +0x0004 */ unsigned char AbandonedState; /* +0x0005 */ }; struct _SYSTEM_FILECACHE_INFORMATION { unsigned long CurrentSize; /* +0x0000 */ unsigned long PeakSize; /* +0x0004 */ unsigned long PageFaultCount; /* +0x0008 */ unsigned long MinimumWorkingSet; /* +0x000c */ unsigned long MaximumWorkingSet; /* +0x0010 */ unsigned long CurrentSizeIncludingTransitionInPages; /* +0x0014 */ unsigned long PeakSizeIncludingTransitionInPages; /* +0x0018 */ unsigned long TransitionRePurposeCount; /* +0x001c */ unsigned long Flags; /* +0x0020 */ }; struct _MEMORY_FRAME_INFORMATION { /* unsigned char UseDescription[0]; +0x0000 a1 5e 00 00 */ /* unsigned char ListDescription[0]; +0x0000 a2 5e 00 00 */ /* unsigned char Reserved0[0]; +0x0000 a3 5e 00 00 */ /* unsigned char Pinned[0]; +0x0000 a4 5e 00 00 */ /* unsigned char DontUse[0]; +0x0000 a4 4c 00 00 */ /* unsigned char Priority[0]; +0x0000 a5 5e 00 00 */ unsigned char Reserved[8]; /* +0x0000 a6 5e 00 00 */ }; struct _SecPkgContext_AccessToken { void *AccessToken; /* +0x0000 */ }; struct _KEY_SET_VIRTUALIZATION_INFORMATION { /* unsigned char VirtualTarget[0]; +0x0000 4a 12 00 00 */ /* unsigned char VirtualStore[0]; +0x0000 9b 15 00 00 */ /* unsigned char VirtualSource[0]; +0x0000 68 18 00 00 */ unsigned char Reserved[4]; /* +0x0000 c2 4e 00 00 */ }; struct _FILE_FS_DEVICE_INFORMATION { unsigned long DeviceType; /* +0x0000 */ unsigned long Characteristics; /* +0x0004 */ }; struct __m256i { /* unsigned char m256i_i8[0]; +0x0000 94 1a 00 00 */ /* unsigned char m256i_i16[0]; +0x0000 d5 5e 00 00 */ /* unsigned char m256i_i32[0]; +0x0000 d6 5e 00 00 */ /* unsigned char m256i_i64[0]; +0x0000 d7 5e 00 00 */ /* unsigned char m256i_u8[0]; +0x0000 ad 14 00 00 */ /* unsigned char m256i_u16[0]; +0x0000 d8 5e 00 00 */ /* unsigned char m256i_u32[0]; +0x0000 d9 5e 00 00 */ unsigned char m256i_u64[32]; /* +0x0000 46 5a 00 00 */ }; struct _SYSTEM_POOL_ENTRY { unsigned char Allocated; /* +0x0000 */ unsigned char Spare0; /* +0x0001 */ unsigned short AllocatorBackTraceIndex; /* +0x0002 */ unsigned long Size; /* +0x0004 */ /* unsigned char Tag[0]; +0x0008 ae 14 00 00 */ unsigned long TagUlong; /* +0x0008 */ void *ProcessChargedQuota; /* +0x0008 */ }; struct _PS_CREATE_INFO { unsigned long Size; /* +0x0000 */ unsigned char State[4]; /* +0x0004 e2 5e 00 00 */ /* unsigned char InitState[0]; +0x0008 e3 5e 00 00 */ /* unsigned char FailSection[0]; +0x0008 e4 5e 00 00 */ /* unsigned char ExeFormat[0]; +0x0008 e5 5e 00 00 */ /* unsigned char ExeName[0]; +0x0008 e6 5e 00 00 */ unsigned char SuccessState[64]; /* +0x0008 e7 5e 00 00 */ }; struct _ALPC_CONTEXT_ATTR { void *PortContext; /* +0x0000 */ void *MessageContext; /* +0x0004 */ unsigned long Sequence; /* +0x0008 */ unsigned long MessageId; /* +0x000c */ unsigned long CallbackId; /* +0x0010 */ }; struct _SEC_NEGOTIATION_INFO { unsigned long Size; /* +0x0000 */ unsigned long NameLength; /* +0x0004 */ unsigned char Name[4]; /* +0x0008 71 04 00 00 */ void *Reserved; /* +0x000c */ }; struct _SecPkgCredentials_KdcProxySettingsW { unsigned long Version; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned short ProxyServerOffset; /* +0x0008 */ unsigned short ProxyServerLength; /* +0x000a */ unsigned short ClientTlsCredOffset; /* +0x000c */ unsigned short ClientTlsCredLength; /* +0x000e */ }; struct _tagEDITBALLOONTIP { unsigned long cbStruct; /* +0x0000 */ unsigned char pszTitle[4]; /* +0x0004 4f 13 00 00 */ unsigned char pszText[4]; /* +0x0008 4f 13 00 00 */ unsigned char ttiIcon[4]; /* +0x000c 74 00 00 00 */ }; struct _SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX { void *Object; /* +0x0000 */ unsigned long UniqueProcessId; /* +0x0004 */ unsigned long HandleValue; /* +0x0008 */ unsigned long GrantedAccess; /* +0x000c */ unsigned short CreatorBackTraceIndex; /* +0x0010 */ unsigned short ObjectTypeIndex; /* +0x0012 */ unsigned long HandleAttributes; /* +0x0014 */ unsigned long Reserved; /* +0x0018 */ }; struct _MUILANGCFGNODE { short LangSpec; /* +0x0000 */ unsigned short FallbackTypes; /* +0x0002 */ unsigned short Reserved; /* +0x0004 */ unsigned char FallbackSpecs[6]; /* +0x0006 0e 5f 00 00 */ }; struct _SYSTEM_VERIFIER_CANCELLATION_INFORMATION { unsigned long CancelProbability; /* +0x0000 */ unsigned long CancelThreshold; /* +0x0004 */ unsigned long CompletionThreshold; /* +0x0008 */ unsigned long CancellationVerifierDisabled; /* +0x000c */ unsigned long AvailableIssues; /* +0x0010 */ unsigned char Issues[2048]; /* +0x0014 25 5f 00 00 */ }; struct _SecPkgContext_CredentialNameW { unsigned long CredentialType; /* +0x0000 */ unsigned char sCredentialName[4]; /* +0x0004 71 04 00 00 */ }; struct _NTFS_STATISTICS:: { unsigned long Calls; /* +0x0000 */ unsigned long Clusters; /* +0x0004 */ unsigned long Hints; /* +0x0008 */ unsigned long RunsReturned; /* +0x000c */ unsigned long HintsHonored; /* +0x0010 */ unsigned long HintsClusters; /* +0x0014 */ unsigned long Cache; /* +0x0018 */ unsigned long CacheClusters; /* +0x001c */ unsigned long CacheMiss; /* +0x0020 */ unsigned long CacheMissClusters; /* +0x0024 */ }; struct _NTFS_STATISTICS:: { unsigned short Write; /* +0x0000 */ unsigned short Create; /* +0x0002 */ unsigned short SetInfo; /* +0x0004 */ unsigned short Flush; /* +0x0006 */ }; struct _NTFS_STATISTICS:: { unsigned short Write; /* +0x0000 */ unsigned short Create; /* +0x0002 */ unsigned short SetInfo; /* +0x0004 */ }; struct _MEMORY_REGION_INFORMATION { void *AllocationBase; /* +0x0000 */ unsigned long AllocationProtect; /* +0x0004 */ unsigned long RegionType; /* +0x0008 */ unsigned long RegionSize; /* +0x000c */ unsigned long CommitSize; /* +0x0010 */ }; struct _SYSTEM_NUMA_INFORMATION { unsigned long HighestNodeNumber; /* +0x0000 */ unsigned long Reserved; /* +0x0004 */ /* unsigned char ActiveProcessorsGroupAffinity[0]; +0x0008 7c 5f 00 00 */ /* unsigned char AvailableMemory[0]; +0x0008 7d 5f 00 00 */ unsigned char Pad[256]; /* +0x0008 7e 5f 00 00 */ }; struct _RTL_UNLOAD_EVENT_TRACE64 { unsigned long long BaseAddress; /* +0x0000 */ unsigned long long SizeOfImage; /* +0x0008 */ unsigned long Sequence; /* +0x0010 */ unsigned long TimeDateStamp; /* +0x0014 */ unsigned long CheckSum; /* +0x0018 */ unsigned char ImageName[64]; /* +0x001c 7c 13 00 00 */ unsigned char Version[12]; /* +0x005c c3 15 00 00 */ }; struct _KEY_NODE_INFORMATION { unsigned char LastWriteTime[8]; /* +0x0000 db 13 00 00 */ unsigned long TitleIndex; /* +0x0008 */ unsigned long ClassOffset; /* +0x000c */ unsigned long ClassLength; /* +0x0010 */ unsigned long NameLength; /* +0x0014 */ unsigned char Name[8]; /* +0x0018 83 12 00 00 */ }; struct _CM_PARTIAL_RESOURCE_LIST { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned long Count; /* +0x0004 */ unsigned char PartialDescriptors[16]; /* +0x0008 9d 5f 00 00 */ }; struct tagAAMENUFILENAME { short cbTotal; /* +0x0000 */ unsigned char rgbReserved[12]; /* +0x0002 9d 14 00 00 */ unsigned char szFileName[2]; /* +0x000e 83 12 00 00 */ }; struct _PLUGPLAY_CONTROL_QUERY_AND_REMOVE_DATA { unsigned char DeviceInstance[8]; /* +0x0000 7c 3b 00 00 */ unsigned long Flags; /* +0x0008 */ unsigned char VetoType[4]; /* +0x000c a0 40 00 00 */ unsigned char VetoName[4]; /* +0x0010 71 04 00 00 */ unsigned long VetoNameLength; /* +0x0014 */ }; struct _RTL_HEAP_TAG_INFO { unsigned long NumberOfAllocations; /* +0x0000 */ unsigned long NumberOfFrees; /* +0x0004 */ unsigned long BytesAllocated; /* +0x0008 */ }; struct _SecPkgCredentials_SSIProviderA { char *sProviderName; /* +0x0000 */ unsigned long ProviderInfoLength; /* +0x0004 */ char *ProviderInfo; /* +0x0008 */ }; struct _WNF_UPDATE_DESCRIPTOR { unsigned char StateName[4]; /* +0x0000 32 3c 00 00 */ unsigned char TypeId[4]; /* +0x0004 9c 51 00 00 */ unsigned char StateData[4]; /* +0x0008 92 15 00 00 */ unsigned long Length; /* +0x000c */ void *ExplicitScope; /* +0x0010 */ }; struct _SD_QUERY_STATS_INPUT { unsigned long Reserved; /* +0x0000 */ }; struct tagNMLINK { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char item[4280]; /* +0x000c ed 5a 00 00 */ }; struct _FP_128 { unsigned char W[16]; /* +0x0000 c2 15 00 00 */ }; struct tagDATETIMEPICKERINFO { unsigned long cbSize; /* +0x0000 */ unsigned char rcCheck[16]; /* +0x0004 c0 12 00 00 */ unsigned long stateCheck; /* +0x0014 */ unsigned char rcButton[16]; /* +0x0018 c0 12 00 00 */ unsigned long stateButton; /* +0x0028 */ unsigned char hwndEdit[4]; /* +0x002c fc 11 00 00 */ unsigned char hwndUD[4]; /* +0x0030 fc 11 00 00 */ unsigned char hwndDropDown[4]; /* +0x0034 fc 11 00 00 */ }; enum RO_INIT_TYPE { RO_INIT_SINGLETHREADED = 0, RO_INIT_MULTITHREADED = 1 }; struct _TOKEN_SECURITY_ATTRIBUTES_AND_OPERATION_INFORMATION { unsigned char Attributes[4]; /* +0x0000 ad 5a 00 00 */ unsigned char Operations[4]; /* +0x0004 bf 4a 00 00 */ }; struct _FILE_FS_OBJECTID_INFORMATION { unsigned char ObjectId[16]; /* +0x0000 d3 19 00 00 */ unsigned char ExtendedInfo[48]; /* +0x0010 7a 42 00 00 */ }; struct _SYSTEM_FIRMWARE_TABLE_HANDLER { unsigned long ProviderSignature; /* +0x0000 */ unsigned char Register; /* +0x0004 */ unsigned char FirmwareTableHandler[4]; /* +0x0008 b2 3e 00 00 */ void *DriverObject; /* +0x000c */ }; struct _SecPkgContext_Sizes { unsigned long cbMaxToken; /* +0x0000 */ unsigned long cbMaxSignature; /* +0x0004 */ unsigned long cbBlockSize; /* +0x0008 */ unsigned long cbSecurityTrailer; /* +0x000c */ }; struct _RTL_PROCESS_MODULE_INFORMATION { void *Section; /* +0x0000 */ void *MappedBase; /* +0x0004 */ void *ImageBase; /* +0x0008 */ unsigned long ImageSize; /* +0x000c */ unsigned long Flags; /* +0x0010 */ unsigned short LoadOrderIndex; /* +0x0014 */ unsigned short InitOrderIndex; /* +0x0016 */ unsigned short LoadCount; /* +0x0018 */ unsigned short OffsetToFileName; /* +0x001a */ unsigned char FullPathName[256]; /* +0x001c e6 13 00 00 */ }; struct _LDR_DLL_UNLOADED_NOTIFICATION_DATA { unsigned long Flags; /* +0x0000 */ unsigned char FullDllName[4]; /* +0x0004 66 59 00 00 */ unsigned char BaseDllName[4]; /* +0x0008 66 59 00 00 */ void *DllBase; /* +0x000c */ unsigned long SizeOfImage; /* +0x0010 */ }; struct _TXFS_READ_BACKUP_INFORMATION_OUT { unsigned long BufferLength; /* +0x0000 */ unsigned char Buffer[4]; /* +0x0000 04 12 00 00 */ }; struct _HEAP_BLOCK_INFORMATION { unsigned long Address; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long DataSize; /* +0x0008 */ unsigned long OverheadSize; /* +0x000c */ unsigned long NextBlockInformationOffset; /* +0x0010 */ }; struct _SecPkgContext_DceInfo { unsigned long AuthzSvc; /* +0x0000 */ void *pPac; /* +0x0004 */ }; struct _TP_DEBUG_FREE_INFO { unsigned long FreeListSize; /* +0x0000 */ }; struct tagCOMBOBOXEXITEMA { unsigned char mask[4]; /* +0x0000 75 00 00 00 */ unsigned char iItem[4]; /* +0x0004 74 00 00 00 */ char *pszText; /* +0x0008 */ unsigned char cchTextMax[4]; /* +0x000c 74 00 00 00 */ unsigned char iImage[4]; /* +0x0010 74 00 00 00 */ unsigned char iSelectedImage[4]; /* +0x0014 74 00 00 00 */ unsigned char iOverlay[4]; /* +0x0018 74 00 00 00 */ unsigned char iIndent[4]; /* +0x001c 74 00 00 00 */ long lParam; /* +0x0020 */ }; struct _SYSDBG_PHYSICAL { unsigned char Address[8]; /* +0x0000 db 13 00 00 */ void *Buffer; /* +0x0008 */ unsigned long Request; /* +0x000c */ }; struct _PREFIX_TABLE_ENTRY { short NodeTypeCode; /* +0x0000 */ short NameLength; /* +0x0002 */ unsigned char NextPrefixTree[4]; /* +0x0004 49 51 00 00 */ unsigned char Links[12]; /* +0x0008 2d 3f 00 00 */ unsigned char Prefix[4]; /* +0x0014 93 3f 00 00 */ }; struct _PAGEDIR_INFORMATION { /* unsigned char DontUse[0]; +0x0000 a3 4c 00 00 */ /* unsigned char PageDirectoryBase[0]; +0x0000 a4 4c 00 00 */ unsigned char Reserved[8]; /* +0x0000 a5 4c 00 00 */ }; struct _SYSTEM_MEMORY_LIST_INFORMATION { unsigned long ZeroPageCount; /* +0x0000 */ unsigned long FreePageCount; /* +0x0004 */ unsigned long ModifiedPageCount; /* +0x0008 */ unsigned long ModifiedNoWritePageCount; /* +0x000c */ unsigned long BadPageCount; /* +0x0010 */ unsigned char PageCountByPriority[32]; /* +0x0014 9d 36 00 00 */ unsigned char RepurposedPagesByPriority[32]; /* +0x0034 9d 36 00 00 */ unsigned long ModifiedPageCountPageFile; /* +0x0054 */ }; struct _TXFS_LIST_TRANSACTION_LOCKED_FILES_ENTRY { unsigned long long Offset; /* +0x0000 */ unsigned long NameFlags; /* +0x0008 */ long long FileId; /* +0x0010 */ unsigned long Reserved1; /* +0x0018 */ unsigned long Reserved2; /* +0x001c */ long long Reserved3; /* +0x0020 */ unsigned char FileName[8]; /* +0x0028 83 12 00 00 */ }; struct _TIMER_BASIC_INFORMATION { unsigned char RemainingTime[8]; /* +0x0000 db 13 00 00 */ unsigned char TimerState; /* +0x0008 */ }; struct _REASON_BUFFER { unsigned long Flags; /* +0x0000 */ unsigned long ResourceFileNameOffset; /* +0x0004 */ unsigned short ResourceReasonId; /* +0x0008 */ unsigned long StringCount; /* +0x000c */ unsigned long SubstitutionStringsOffset; /* +0x0010 */ unsigned long SimpleStringOffset; /* +0x0004 */ }; struct _SHQUERYRBINFO { unsigned long cbSize; /* +0x0000 */ long long i64Size; /* +0x0004 */ long long i64NumItems; /* +0x000c */ }; struct _WORKER_FACTORY_BASIC_INFORMATION { unsigned char Timeout[8]; /* +0x0000 db 13 00 00 */ unsigned char RetryTimeout[8]; /* +0x0008 db 13 00 00 */ unsigned char IdleTimeout[8]; /* +0x0010 db 13 00 00 */ unsigned char Paused; /* +0x0018 */ unsigned char TimerSet; /* +0x0019 */ unsigned char QueuedToExWorker; /* +0x001a */ unsigned char MayCreate; /* +0x001b */ unsigned char CreateInProgress; /* +0x001c */ unsigned char InsertedIntoQueue; /* +0x001d */ unsigned char Shutdown; /* +0x001e */ unsigned long BindingCount; /* +0x0020 */ unsigned long ThreadMinimum; /* +0x0024 */ unsigned long ThreadMaximum; /* +0x0028 */ unsigned long PendingWorkerCount; /* +0x002c */ unsigned long WaitingWorkerCount; /* +0x0030 */ unsigned long TotalWorkerCount; /* +0x0034 */ unsigned long ReleaseCount; /* +0x0038 */ long long InfiniteWaitGoal; /* +0x0040 */ unsigned char StartRoutine[4]; /* +0x0048 15 40 00 00 */ void *StartParameter; /* +0x004c */ void *ProcessId; /* +0x0050 */ unsigned long StackReserve; /* +0x0054 */ unsigned long StackCommit; /* +0x0058 */ long LastThreadCreationStatus; /* +0x005c */ }; struct _SEC_WINNT_AUTH_IDENTITY_EXA { unsigned long Version; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned char *User; /* +0x0008 */ unsigned long UserLength; /* +0x000c */ unsigned char *Domain; /* +0x0010 */ unsigned long DomainLength; /* +0x0014 */ unsigned char *Password; /* +0x0018 */ unsigned long PasswordLength; /* +0x001c */ unsigned long Flags; /* +0x0020 */ unsigned char *PackageList; /* +0x0024 */ unsigned long PackageListLength; /* +0x0028 */ }; struct _LDT_INFORMATION { unsigned long Start; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned char LdtEntries[8]; /* +0x0008 30 61 00 00 */ }; struct _TEB_ACTIVE_FRAME { unsigned long Flags; /* +0x0000 */ unsigned char Previous[4]; /* +0x0004 19 50 00 00 */ unsigned char Context[4]; /* +0x0008 38 61 00 00 */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long Length64; /* +0x0000 */ unsigned long Alignment64; /* +0x0004 */ unsigned char MinimumAddress[8]; /* +0x0008 db 13 00 00 */ unsigned char MaximumAddress[8]; /* +0x0010 db 13 00 00 */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long Length48; /* +0x0000 */ unsigned long Alignment48; /* +0x0004 */ unsigned char MinimumAddress[8]; /* +0x0008 db 13 00 00 */ unsigned char MaximumAddress[8]; /* +0x0010 db 13 00 00 */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long Length40; /* +0x0000 */ unsigned long Alignment40; /* +0x0004 */ unsigned char MinimumAddress[8]; /* +0x0008 db 13 00 00 */ unsigned char MaximumAddress[8]; /* +0x0010 db 13 00 00 */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long Priority; /* +0x0000 */ unsigned long Reserved1; /* +0x0004 */ unsigned long Reserved2; /* +0x0008 */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long Length; /* +0x0000 */ unsigned long MinBusNumber; /* +0x0004 */ unsigned long MaxBusNumber; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long Length; /* +0x0000 */ unsigned long Alignment; /* +0x0004 */ unsigned char MinimumAddress[8]; /* +0x0008 db 13 00 00 */ unsigned char MaximumAddress[8]; /* +0x0010 db 13 00 00 */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long RequestLine; /* +0x0000 */ unsigned long Reserved; /* +0x0004 */ unsigned long Channel; /* +0x0008 */ unsigned long TransferWidth; /* +0x000c */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long MinimumChannel; /* +0x0000 */ unsigned long MaximumChannel; /* +0x0004 */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long MinimumVector; /* +0x0000 */ unsigned long MaximumVector; /* +0x0004 */ unsigned char AffinityPolicy[4]; /* +0x0008 47 5d 00 00 */ unsigned char PriorityPolicy[4]; /* +0x000c a4 50 00 00 */ unsigned long TargetedProcessors; /* +0x0010 */ }; struct _XSAVE_SUPPORTED_CPU { unsigned char CpuInfo[32]; /* +0x0000 01 3e 00 00 */ /* unsigned char CpuErrata[0]; +0x0020 ad 42 00 00 */ unsigned long long Unused; /* +0x0020 */ }; struct _PLUGPLAY_CONTROL_PROPERTY_DATA { unsigned char DeviceInstance[8]; /* +0x0000 7c 3b 00 00 */ unsigned long PropertyType; /* +0x0008 */ void *Buffer; /* +0x000c */ unsigned long BufferSize; /* +0x0010 */ }; struct _HARDWARE_COUNTER { unsigned char Type[4]; /* +0x0000 a9 15 00 00 */ unsigned long Reserved; /* +0x0004 */ unsigned long long Index; /* +0x0008 */ }; struct _FILEDESCRIPTORW { unsigned long dwFlags; /* +0x0000 */ unsigned char clsid[16]; /* +0x0004 ce 13 00 00 */ unsigned char sizel[8]; /* +0x0014 21 13 00 00 */ unsigned char pointl[8]; /* +0x001c 58 12 00 00 */ unsigned long dwFileAttributes; /* +0x0024 */ unsigned char ftCreationTime[8]; /* +0x0028 91 14 00 00 */ unsigned char ftLastAccessTime[8]; /* +0x0030 91 14 00 00 */ unsigned char ftLastWriteTime[8]; /* +0x0038 91 14 00 00 */ unsigned long nFileSizeHigh; /* +0x0040 */ unsigned long nFileSizeLow; /* +0x0044 */ unsigned char cFileName[520]; /* +0x0048 a8 13 00 00 */ }; struct _SecBufferDesc { unsigned long ulVersion; /* +0x0000 */ unsigned long cBuffers; /* +0x0004 */ unsigned char pBuffers[4]; /* +0x0008 1a 40 00 00 */ }; struct tagNMLISTVIEW { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char iItem[4]; /* +0x000c 74 00 00 00 */ unsigned char iSubItem[4]; /* +0x0010 74 00 00 00 */ unsigned char uNewState[4]; /* +0x0014 75 00 00 00 */ unsigned char uOldState[4]; /* +0x0018 75 00 00 00 */ unsigned char uChanged[4]; /* +0x001c 75 00 00 00 */ unsigned char ptAction[8]; /* +0x0020 ce 12 00 00 */ long lParam; /* +0x0028 */ }; struct _REMOTE_PORT_VIEW { unsigned long Length; /* +0x0000 */ unsigned long ViewSize; /* +0x0004 */ void *ViewBase; /* +0x0008 */ }; struct _FSCTL_INTEGRITY_INFORMATION_BUFFER { unsigned short ChecksumAlgorithm; /* +0x0000 */ unsigned short Reserved; /* +0x0002 */ unsigned long Flags; /* +0x0004 */ }; struct tagNMLVSCROLL { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char dx[4]; /* +0x000c 74 00 00 00 */ unsigned char dy[4]; /* +0x0010 74 00 00 00 */ }; struct _SECURITY_SEED_AND_LENGTH { unsigned char Length; /* +0x0000 */ unsigned char Seed; /* +0x0001 */ }; struct _PS_CREATE_INFO:::: { unsigned long OutputFlags; /* +0x0000 */ /* unsigned char ProtectedProcess[0]; +0x0000 ab 33 00 00 */ /* unsigned char AddressSpaceOverride[0]; +0x0000 7b 43 00 00 */ /* unsigned char DevOverrideEnabled[0]; +0x0000 7c 43 00 00 */ /* unsigned char ManifestDetected[0]; +0x0000 7f 49 00 00 */ unsigned char SpareBits1[1]; /* +0x0000 f1 61 00 00 */ unsigned char SpareBits2[1]; /* +0x0001 f2 61 00 00 */ unsigned char SpareBits3[2]; /* +0x0002 1b 50 00 00 */ void *FileHandle; /* +0x0004 */ void *SectionHandle; /* +0x0008 */ unsigned long long UserProcessParametersNative; /* +0x0010 */ unsigned long UserProcessParametersWow64; /* +0x0018 */ unsigned long CurrentParameterFlags; /* +0x001c */ unsigned long long PebAddressNative; /* +0x0020 */ unsigned long PebAddressWow64; /* +0x0028 */ unsigned long long ManifestAddress; /* +0x0030 */ unsigned long ManifestSize; /* +0x0038 */ }; struct _PS_CREATE_INFO:::: { void *IFEOKey; /* +0x0000 */ }; struct _PS_CREATE_INFO:::: { unsigned short DllCharacteristics; /* +0x0000 */ }; struct _PS_CREATE_INFO:::: { void *FileHandle; /* +0x0000 */ }; struct _PS_CREATE_INFO:::: { unsigned long InitFlags; /* +0x0000 */ /* unsigned char WriteOutputOnExit[0]; +0x0000 ab 33 00 00 */ /* unsigned char DetectManifest[0]; +0x0000 7b 43 00 00 */ /* unsigned char IFEOSkipDebugger[0]; +0x0000 7c 43 00 00 */ /* unsigned char IFEODoNotPropagateKeyState[0]; +0x0000 7f 49 00 00 */ unsigned char SpareBits1[1]; /* +0x0000 f1 61 00 00 */ unsigned char SpareBits2[1]; /* +0x0001 f2 61 00 00 */ unsigned char ProhibitedImageCharacteristics[2]; /* +0x0002 1b 50 00 00 */ unsigned long AdditionalFileAccess; /* +0x0004 */ }; struct _RTL_HEAP_TAG { unsigned long NumberOfAllocations; /* +0x0000 */ unsigned long NumberOfFrees; /* +0x0004 */ unsigned long BytesAllocated; /* +0x0008 */ unsigned short TagIndex; /* +0x000c */ unsigned short CreatorBackTraceIndex; /* +0x000e */ unsigned char TagName[48]; /* +0x0010 01 62 00 00 */ }; struct tagTOOLINFOW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char uFlags[4]; /* +0x0004 75 00 00 00 */ unsigned char hwnd[4]; /* +0x0008 fc 11 00 00 */ unsigned char uId[4]; /* +0x000c 75 00 00 00 */ unsigned char rect[16]; /* +0x0010 c0 12 00 00 */ unsigned char hinst[4]; /* +0x0020 f5 12 00 00 */ unsigned char lpszText[4]; /* +0x0024 71 04 00 00 */ long lParam; /* +0x0028 */ void *lpReserved; /* +0x002c */ }; struct _SYSTEM_FIRMWARE_TABLE_INFORMATION { unsigned long ProviderSignature; /* +0x0000 */ unsigned char Action[4]; /* +0x0004 14 62 00 00 */ unsigned long TableID; /* +0x0008 */ unsigned long TableBufferLength; /* +0x000c */ unsigned char TableBuffer[4]; /* +0x0010 04 12 00 00 */ }; struct _SD_GLOBAL_CHANGE_OUTPUT { unsigned long Flags; /* +0x0000 */ unsigned long ChangeType; /* +0x0004 */ /* unsigned char SdChange[0]; +0x0008 7f 45 00 00 */ /* unsigned char SdQueryStats[0]; +0x0008 f2 55 00 00 */ unsigned char SdEnumSds[64]; /* +0x0008 ec 5e 00 00 */ }; struct _IO_STATUS_BLOCK { long Status; /* +0x0000 */ void *Pointer; /* +0x0000 */ unsigned long Information; /* +0x0004 */ }; struct tagLVSETINFOTIP { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned char pszText[4]; /* +0x0008 71 04 00 00 */ unsigned char iItem[4]; /* +0x000c 74 00 00 00 */ unsigned char iSubItem[4]; /* +0x0010 74 00 00 00 */ }; struct _PROCESS_EXTENDED_BASIC_INFORMATION64 { unsigned long long Size; /* +0x0000 */ unsigned char BasicInfo[48]; /* +0x0008 5a 62 00 00 */ /* unsigned char Flags[0]; +0x0038 75 00 00 00 */ /* unsigned char IsProtectedProcess[0]; +0x0038 40 17 00 00 */ /* unsigned char IsWow64Process[0]; +0x0038 41 17 00 00 */ /* unsigned char IsProcessDeleting[0]; +0x0038 42 17 00 00 */ /* unsigned char IsCrossSessionCreate[0]; +0x0038 5b 62 00 00 */ unsigned char SpareBits[8]; /* +0x0038 5c 62 00 00 */ }; struct _UNICODE_STRING { unsigned short Length; /* +0x0000 */ unsigned short MaximumLength; /* +0x0002 */ unsigned char Buffer[4]; /* +0x0004 71 04 00 00 */ }; struct _RTL_DYNAMIC_TIME_ZONE_INFORMATION { unsigned char tzi[172]; /* +0x0000 37 57 00 00 */ unsigned char TimeZoneKeyName[256]; /* +0x00ac 7e 13 00 00 */ unsigned char DynamicDaylightTimeDisabled; /* +0x01ac */ }; struct _THREAD_UMS_INFORMATION { unsigned char Command[4]; /* +0x0000 74 62 00 00 */ unsigned char CompletionList[4]; /* +0x0004 08 3e 00 00 */ unsigned char UmsContext[4]; /* +0x0008 60 3f 00 00 */ }; struct _PS_STD_HANDLE_INFO { unsigned long Flags; /* +0x0000 */ /* unsigned char StdHandleState[0]; +0x0000 5d 2a 00 00 */ unsigned char PseudoHandleMask[4]; /* +0x0000 79 62 00 00 */ unsigned long StdHandleSubsystemType; /* +0x0004 */ }; struct tagTVDISPINFOEXW { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char item[60]; /* +0x000c 43 49 00 00 */ }; struct _FILE_INTERNAL_INFORMATION { unsigned char IndexNumber[8]; /* +0x0000 db 13 00 00 */ }; struct _PLUGPLAY_CONTROL_RETRIEVE_DOCK_DATA { unsigned long DeviceInstanceLength; /* +0x0000 */ unsigned char DeviceInstance[4]; /* +0x0004 71 04 00 00 */ }; struct tagNMTVSTATEIMAGECHANGING { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char hti[4]; /* +0x000c b1 3d 00 00 */ unsigned char iOldStateImageIndex[4]; /* +0x0010 74 00 00 00 */ unsigned char iNewStateImageIndex[4]; /* +0x0014 74 00 00 00 */ }; struct _SD_ENUM_SDS_ENTRY { unsigned long Hash; /* +0x0000 */ unsigned long SecurityId; /* +0x0004 */ unsigned long long Offset; /* +0x0008 */ unsigned long Length; /* +0x0010 */ unsigned char Descriptor[4]; /* +0x0014 04 12 00 00 */ }; struct _SFVM_HELPTOPIC_DATA { unsigned char wszHelpFile[520]; /* +0x0000 a8 13 00 00 */ unsigned char wszHelpTopic[520]; /* +0x0208 a8 13 00 00 */ }; struct _EVENT_FILTER_DESCRIPTOR { unsigned long long Ptr; /* +0x0000 */ unsigned long Size; /* +0x0008 */ unsigned long Type; /* +0x000c */ }; struct tagLVFOOTERINFO { unsigned char mask[4]; /* +0x0000 75 00 00 00 */ unsigned char pszText[4]; /* +0x0004 71 04 00 00 */ unsigned char cchTextMax[4]; /* +0x0008 74 00 00 00 */ unsigned char cItems[4]; /* +0x000c 75 00 00 00 */ }; struct _FILE_DISPOSITION_INFORMATION { unsigned char DeleteFile; /* +0x0000 */ }; struct _FILE_PIPE_WAIT_FOR_BUFFER { unsigned char Timeout[8]; /* +0x0000 db 13 00 00 */ unsigned long NameLength; /* +0x0008 */ unsigned char TimeoutSpecified; /* +0x000c */ unsigned char Name[2]; /* +0x000e 83 12 00 00 */ }; struct _PROCESS_HANDLE_TRACING_ENTRY { void *Handle; /* +0x0000 */ unsigned char ClientId[8]; /* +0x0004 ab 3b 00 00 */ unsigned long Type; /* +0x000c */ unsigned char Stacks[64]; /* +0x0010 d0 62 00 00 */ }; struct _REQUEST_OPLOCK_OUTPUT_BUFFER { unsigned short StructureVersion; /* +0x0000 */ unsigned short StructureLength; /* +0x0002 */ unsigned long OriginalOplockLevel; /* +0x0004 */ unsigned long NewOplockLevel; /* +0x0008 */ unsigned long Flags; /* +0x000c */ unsigned long AccessMode; /* +0x0010 */ unsigned short ShareMode; /* +0x0014 */ }; struct DESKBANDINFO { unsigned long dwMask; /* +0x0000 */ unsigned char ptMinSize[8]; /* +0x0004 58 12 00 00 */ unsigned char ptMaxSize[8]; /* +0x000c 58 12 00 00 */ unsigned char ptIntegral[8]; /* +0x0014 58 12 00 00 */ unsigned char ptActual[8]; /* +0x001c 58 12 00 00 */ unsigned char wszTitle[512]; /* +0x0024 49 22 00 00 */ unsigned long dwModeFlags; /* +0x0224 */ unsigned long crBkgnd; /* +0x0228 */ }; struct _HD_ITEMW { unsigned char mask[4]; /* +0x0000 75 00 00 00 */ unsigned char cxy[4]; /* +0x0004 74 00 00 00 */ unsigned char pszText[4]; /* +0x0008 71 04 00 00 */ unsigned char hbm[4]; /* +0x000c b9 14 00 00 */ unsigned char cchTextMax[4]; /* +0x0010 74 00 00 00 */ unsigned char fmt[4]; /* +0x0014 74 00 00 00 */ long lParam; /* +0x0018 */ unsigned char iImage[4]; /* +0x001c 74 00 00 00 */ unsigned char iOrder[4]; /* +0x0020 74 00 00 00 */ unsigned char type[4]; /* +0x0024 75 00 00 00 */ void *pvFilter; /* +0x0028 */ unsigned char state[4]; /* +0x002c 75 00 00 00 */ }; struct _TT_HITTESTINFOW { unsigned char hwnd[4]; /* +0x0000 fc 11 00 00 */ unsigned char pt[8]; /* +0x0004 ce 12 00 00 */ unsigned char ti[48]; /* +0x000c 6e 46 00 00 */ }; struct _SEC_CHANNEL_BINDINGS { unsigned long dwInitiatorAddrType; /* +0x0000 */ unsigned long cbInitiatorLength; /* +0x0004 */ unsigned long dwInitiatorOffset; /* +0x0008 */ unsigned long dwAcceptorAddrType; /* +0x000c */ unsigned long cbAcceptorLength; /* +0x0010 */ unsigned long dwAcceptorOffset; /* +0x0014 */ unsigned long cbApplicationDataLength; /* +0x0018 */ unsigned long dwApplicationDataOffset; /* +0x001c */ }; struct tagLVDISPINFO { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char item[60]; /* +0x000c 5a 50 00 00 */ }; struct _SYSTEM_CRASH_DUMP_STATE_INFORMATION { unsigned char CrashDumpConfigurationClass[4]; /* +0x0000 46 63 00 00 */ }; struct _FILE_PIPE_INFORMATION { unsigned long ReadMode; /* +0x0000 */ unsigned long CompletionMode; /* +0x0004 */ }; struct _CM_KEYBOARD_DEVICE_DATA { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned char Type; /* +0x0004 */ unsigned char Subtype; /* +0x0005 */ unsigned short KeyboardFlags; /* +0x0006 */ }; struct tagLVITEMW { unsigned char mask[4]; /* +0x0000 75 00 00 00 */ unsigned char iItem[4]; /* +0x0004 74 00 00 00 */ unsigned char iSubItem[4]; /* +0x0008 74 00 00 00 */ unsigned char state[4]; /* +0x000c 75 00 00 00 */ unsigned char stateMask[4]; /* +0x0010 75 00 00 00 */ unsigned char pszText[4]; /* +0x0014 71 04 00 00 */ unsigned char cchTextMax[4]; /* +0x0018 74 00 00 00 */ unsigned char iImage[4]; /* +0x001c 74 00 00 00 */ long lParam; /* +0x0020 */ unsigned char iIndent[4]; /* +0x0024 74 00 00 00 */ unsigned char iGroupId[4]; /* +0x0028 74 00 00 00 */ unsigned char cColumns[4]; /* +0x002c 75 00 00 00 */ unsigned char puColumns[4]; /* +0x0030 75 04 00 00 */ unsigned char piColFmt[4]; /* +0x0034 74 04 00 00 */ unsigned char iGroup[4]; /* +0x0038 74 00 00 00 */ }; struct _SYSTEM_ERROR_PORT_TIMEOUTS { unsigned long StartTimeout; /* +0x0000 */ unsigned long CommTimeout; /* +0x0004 */ }; struct THUMBBUTTON { unsigned char dwMask[4]; /* +0x0000 c3 63 00 00 */ unsigned char iId[4]; /* +0x0004 75 00 00 00 */ unsigned char iBitmap[4]; /* +0x0008 75 00 00 00 */ unsigned char hIcon[4]; /* +0x000c 92 19 00 00 */ unsigned char szTip[520]; /* +0x0010 a8 13 00 00 */ unsigned char dwFlags[4]; /* +0x0218 c4 63 00 00 */ }; struct _PROCESS_DEVICEMAP_INFORMATION:::: { unsigned long DriveMap; /* +0x0000 */ unsigned char DriveType[32]; /* +0x0004 ad 14 00 00 */ }; struct _PROCESS_DEVICEMAP_INFORMATION:::: { void *DirectoryHandle; /* +0x0000 */ }; struct _JOURNAL_TRANSACTION_BOUNDARY_INFORMATION { unsigned char Action[8]; /* +0x0000 9f 3d 00 00 */ unsigned long long RecordNumber; /* +0x0008 */ unsigned char TimeStamp[8]; /* +0x0010 db 13 00 00 */ unsigned char TransactionID[16]; /* +0x0018 ce 13 00 00 */ }; struct _EX_ATTRIBUTE_INFORMATION_REGISTRATION { unsigned char QueryRoutine[4]; /* +0x0000 44 43 00 00 */ unsigned char SetRoutine[4]; /* +0x0004 44 43 00 00 */ }; struct EXTRASEARCH { unsigned char guidSearch[16]; /* +0x0000 ce 13 00 00 */ unsigned char wszFriendlyName[160]; /* +0x0010 62 21 00 00 */ unsigned char wszUrl[4168]; /* +0x00b0 62 50 00 00 */ }; struct _JOBOBJECT_FREEZE_INFORMATION { unsigned long Flags; /* +0x0000 */ /* unsigned char FreezeOperation[0]; +0x0000 4a 12 00 00 */ /* unsigned char FilterOperation[0]; +0x0000 9b 15 00 00 */ unsigned char Reserved[4]; /* +0x0000 9c 15 00 00 */ unsigned char Freeze; /* +0x0004 */ unsigned char Reserved0[3]; /* +0x0005 49 12 00 00 */ unsigned char WakeFilter[8]; /* +0x0008 85 54 00 00 */ }; struct _CM_SONIC_DEVICE_DATA { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned short DataConfigurationRegister; /* +0x0004 */ unsigned char EthernetAddress[8]; /* +0x0006 20 1a 00 00 */ }; struct _SD_ENUM_SDS_INPUT { unsigned long long StartingOffset; /* +0x0000 */ unsigned long long MaxSDEntriesToReturn; /* +0x0008 */ }; struct _PROCESS_HANDLE_SNAPSHOT_INFORMATION { unsigned long NumberOfHandles; /* +0x0000 */ unsigned long Reserved; /* +0x0004 */ unsigned char Handles[28]; /* +0x0008 ec 64 00 00 */ }; struct NTFS_EXTENDED_VOLUME_DATA { unsigned long ByteCount; /* +0x0000 */ unsigned short MajorVersion; /* +0x0004 */ unsigned short MinorVersion; /* +0x0006 */ unsigned long BytesPerPhysicalSector; /* +0x0008 */ }; struct STARTING_LCN_INPUT_BUFFER { unsigned char StartingLcn[8]; /* +0x0000 db 13 00 00 */ }; struct VOLUME_BITMAP_BUFFER { unsigned char StartingLcn[8]; /* +0x0000 db 13 00 00 */ unsigned char BitmapSize[8]; /* +0x0008 db 13 00 00 */ unsigned char Buffer[8]; /* +0x0010 04 12 00 00 */ }; struct STARTING_VCN_INPUT_BUFFER { unsigned char StartingVcn[8]; /* +0x0000 db 13 00 00 */ }; struct NTFS_FILE_RECORD_OUTPUT_BUFFER { unsigned char FileReferenceNumber[8]; /* +0x0000 db 13 00 00 */ unsigned long FileRecordLength; /* +0x0008 */ unsigned char FileRecordBuffer[4]; /* +0x000c 04 12 00 00 */ }; struct FIND_BY_SID_DATA { unsigned long Restart; /* +0x0000 */ unsigned char Sid[12]; /* +0x0004 7d 2f 00 00 */ }; struct CREATE_USN_JOURNAL_DATA { unsigned long long MaximumSize; /* +0x0000 */ unsigned long long AllocationDelta; /* +0x0008 */ }; struct READ_USN_JOURNAL_DATA { long long StartUsn; /* +0x0000 */ unsigned long ReasonMask; /* +0x0008 */ unsigned long ReturnOnlyOnClose; /* +0x000c */ unsigned long long Timeout; /* +0x0010 */ unsigned long long BytesToWaitFor; /* +0x0018 */ unsigned long long UsnJournalID; /* +0x0020 */ }; struct USN_RECORD { unsigned long RecordLength; /* +0x0000 */ unsigned short MajorVersion; /* +0x0004 */ unsigned short MinorVersion; /* +0x0006 */ unsigned long long FileReferenceNumber; /* +0x0008 */ unsigned long long ParentFileReferenceNumber; /* +0x0010 */ long long Usn; /* +0x0018 */ unsigned char TimeStamp[8]; /* +0x0020 db 13 00 00 */ unsigned long Reason; /* +0x0028 */ unsigned long SourceInfo; /* +0x002c */ unsigned long SecurityId; /* +0x0030 */ unsigned long FileAttributes; /* +0x0034 */ unsigned short FileNameLength; /* +0x0038 */ unsigned short FileNameOffset; /* +0x003a */ unsigned char FileName[4]; /* +0x003c 83 12 00 00 */ }; struct USN_JOURNAL_DATA { unsigned long long UsnJournalID; /* +0x0000 */ long long FirstUsn; /* +0x0008 */ long long NextUsn; /* +0x0010 */ long long LowestValidUsn; /* +0x0018 */ long long MaxUsn; /* +0x0020 */ unsigned long long MaximumSize; /* +0x0028 */ unsigned long long AllocationDelta; /* +0x0030 */ }; struct DELETE_USN_JOURNAL_DATA { unsigned long long UsnJournalID; /* +0x0000 */ unsigned long DeleteFlags; /* +0x0008 */ }; struct MARK_HANDLE_INFO { unsigned long UsnSourceInfo; /* +0x0000 */ unsigned long CopyNumber; /* +0x0000 */ void *VolumeHandle; /* +0x0004 */ unsigned long HandleInfo; /* +0x0008 */ }; struct BULK_SECURITY_TEST_DATA { unsigned long DesiredAccess; /* +0x0000 */ unsigned char SecurityIds[4]; /* +0x0004 01 12 00 00 */ }; struct POWER_STATE_NOTIFY_HANDLER { unsigned char Handler[4]; /* +0x0000 21 65 00 00 */ void *Context; /* +0x0004 */ }; struct PROCESSOR_IDLE_TIMES { unsigned long long StartTime; /* +0x0000 */ unsigned long long EndTime; /* +0x0008 */ unsigned char Reserved[16]; /* +0x0010 c2 15 00 00 */ }; struct RTL_ACE_DATA { unsigned char AceType; /* +0x0000 */ unsigned char InheritFlags; /* +0x0001 */ unsigned char AceFlags; /* +0x0002 */ unsigned long Mask; /* +0x0004 */ unsigned char Sid[4]; /* +0x0008 74 12 00 00 */ }; struct TBINSERTMARK { unsigned char iButton[4]; /* +0x0000 74 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ }; struct TBREPLACEBITMAP { unsigned char hInstOld[4]; /* +0x0000 f5 12 00 00 */ unsigned char nIDOld[4]; /* +0x0004 75 00 00 00 */ unsigned char hInstNew[4]; /* +0x0008 f5 12 00 00 */ unsigned char nIDNew[4]; /* +0x000c 75 00 00 00 */ unsigned char nButtons[4]; /* +0x0010 74 00 00 00 */ }; struct TBBUTTONINFOA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwMask; /* +0x0004 */ unsigned char idCommand[4]; /* +0x0008 74 00 00 00 */ unsigned char iImage[4]; /* +0x000c 74 00 00 00 */ unsigned char fsState; /* +0x0010 */ unsigned char fsStyle; /* +0x0011 */ unsigned short cx; /* +0x0012 */ unsigned long lParam; /* +0x0014 */ char *pszText; /* +0x0018 */ unsigned char cchText[4]; /* +0x001c 74 00 00 00 */ }; struct TBBUTTONINFOW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwMask; /* +0x0004 */ unsigned char idCommand[4]; /* +0x0008 74 00 00 00 */ unsigned char iImage[4]; /* +0x000c 74 00 00 00 */ unsigned char fsState; /* +0x0010 */ unsigned char fsStyle; /* +0x0011 */ unsigned short cx; /* +0x0012 */ unsigned long lParam; /* +0x0014 */ unsigned char pszText[4]; /* +0x0018 71 04 00 00 */ unsigned char cchText[4]; /* +0x001c 74 00 00 00 */ }; struct TBMETRICS { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwMask; /* +0x0004 */ unsigned char cxPad[4]; /* +0x0008 74 00 00 00 */ unsigned char cyPad[4]; /* +0x000c 74 00 00 00 */ unsigned char cxBarPad[4]; /* +0x0010 74 00 00 00 */ unsigned char cyBarPad[4]; /* +0x0014 74 00 00 00 */ unsigned char cxButtonSpacing[4]; /* +0x0018 74 00 00 00 */ unsigned char cyButtonSpacing[4]; /* +0x001c 74 00 00 00 */ }; struct NMTBDISPINFOW { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned long dwMask; /* +0x000c */ unsigned char idCommand[4]; /* +0x0010 74 00 00 00 */ unsigned long lParam; /* +0x0014 */ unsigned char iImage[4]; /* +0x0018 74 00 00 00 */ unsigned char pszText[4]; /* +0x001c 71 04 00 00 */ unsigned char cchText[4]; /* +0x0020 74 00 00 00 */ }; struct PBRANGE { unsigned char iLow[4]; /* +0x0000 74 00 00 00 */ unsigned char iHigh[4]; /* +0x0004 74 00 00 00 */ }; struct LVINSERTMARK { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned char iItem[4]; /* +0x0008 74 00 00 00 */ unsigned long dwReserved; /* +0x000c */ }; struct NMCOMBOBOXEXW { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char ceItem[36]; /* +0x000c 18 63 00 00 */ }; struct NMCBEDRAGBEGINA { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char iItemid[4]; /* +0x000c 74 00 00 00 */ unsigned char szText[260]; /* +0x0010 f8 1a 00 00 */ }; struct NMCBEENDEDITW { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char fChanged[4]; /* +0x000c 74 00 00 00 */ unsigned char iNewSelection[4]; /* +0x0010 74 00 00 00 */ unsigned char szText[520]; /* +0x0014 a8 13 00 00 */ unsigned char iWhy[4]; /* +0x021c 74 00 00 00 */ }; struct NMPGSCROLL { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned short fwKeys; /* +0x000c */ unsigned char rcParent[16]; /* +0x000e c0 12 00 00 */ unsigned char iDir[4]; /* +0x001e 74 00 00 00 */ unsigned char iXpos[4]; /* +0x0022 74 00 00 00 */ unsigned char iYpos[4]; /* +0x0026 74 00 00 00 */ unsigned char iScroll[4]; /* +0x002a 74 00 00 00 */ }; struct BUTTON_IMAGELIST { unsigned char himl[4]; /* +0x0000 8d 3c 00 00 */ unsigned char margin[16]; /* +0x0004 c0 12 00 00 */ unsigned char uAlign[4]; /* +0x0014 75 00 00 00 */ }; struct NT_CONSOLE_PROPS { unsigned char dbh[8]; /* +0x0000 e9 48 00 00 */ unsigned short wFillAttribute; /* +0x0008 */ unsigned short wPopupFillAttribute; /* +0x000a */ unsigned char dwScreenBufferSize[4]; /* +0x000c bc 14 00 00 */ unsigned char dwWindowSize[4]; /* +0x0010 bc 14 00 00 */ unsigned char dwWindowOrigin[4]; /* +0x0014 bc 14 00 00 */ unsigned long nFont; /* +0x0018 */ unsigned long nInputBufferSize; /* +0x001c */ unsigned char dwFontSize[4]; /* +0x0020 bc 14 00 00 */ unsigned char uFontFamily[4]; /* +0x0024 75 00 00 00 */ unsigned char uFontWeight[4]; /* +0x0028 75 00 00 00 */ unsigned char FaceName[64]; /* +0x002c 7c 13 00 00 */ unsigned char uCursorSize[4]; /* +0x006c 75 00 00 00 */ unsigned char bFullScreen[4]; /* +0x0070 74 00 00 00 */ unsigned char bQuickEdit[4]; /* +0x0074 74 00 00 00 */ unsigned char bInsertMode[4]; /* +0x0078 74 00 00 00 */ unsigned char bAutoPosition[4]; /* +0x007c 74 00 00 00 */ unsigned char uHistoryBufferSize[4]; /* +0x0080 75 00 00 00 */ unsigned char uNumberOfHistoryBuffers[4]; /* +0x0084 75 00 00 00 */ unsigned char bHistoryNoDup[4]; /* +0x0088 74 00 00 00 */ unsigned char ColorTable[64]; /* +0x008c 8b 1c 00 00 */ }; struct NT_FE_CONSOLE_PROPS { unsigned char dbh[8]; /* +0x0000 e9 48 00 00 */ unsigned char uCodePage[4]; /* +0x0008 75 00 00 00 */ }; struct EXP_SPECIAL_FOLDER { unsigned long cbSize; /* +0x0000 */ unsigned long dwSignature; /* +0x0004 */ unsigned long idSpecialFolder; /* +0x0008 */ unsigned long cbOffset; /* +0x000c */ }; struct EXP_SZ_LINK { unsigned long cbSize; /* +0x0000 */ unsigned long dwSignature; /* +0x0004 */ unsigned char szTarget[260]; /* +0x0008 f8 1a 00 00 */ unsigned char swzTarget[520]; /* +0x010c a8 13 00 00 */ }; struct EXP_PROPERTYSTORAGE { unsigned long cbSize; /* +0x0000 */ unsigned long dwSignature; /* +0x0004 */ unsigned char abPropertyStorage[1]; /* +0x0008 04 12 00 00 */ }; struct SHFOLDERCUSTOMSETTINGS { unsigned long dwSize; /* +0x0000 */ unsigned long dwMask; /* +0x0004 */ unsigned char pvid[4]; /* +0x0008 78 15 00 00 */ unsigned char pszWebViewTemplate[4]; /* +0x000c 71 04 00 00 */ unsigned long cchWebViewTemplate; /* +0x0010 */ unsigned char pszWebViewTemplateVersion[4]; /* +0x0014 71 04 00 00 */ unsigned char pszInfoTip[4]; /* +0x0018 71 04 00 00 */ unsigned long cchInfoTip; /* +0x001c */ unsigned char pclsid[4]; /* +0x0020 78 15 00 00 */ unsigned long dwFlags; /* +0x0024 */ unsigned char pszIconFile[4]; /* +0x0028 71 04 00 00 */ unsigned long cchIconFile; /* +0x002c */ unsigned char iIconIndex[4]; /* +0x0030 74 00 00 00 */ unsigned char pszLogo[4]; /* +0x0034 71 04 00 00 */ unsigned long cchLogo; /* +0x0038 */ }; struct SHCOLUMNINFO { unsigned char scid[20]; /* +0x0000 5b 23 00 00 */ unsigned short vt; /* +0x0014 */ unsigned long fmt; /* +0x0016 */ unsigned char cChars[4]; /* +0x001a 75 00 00 00 */ unsigned long csFlags; /* +0x001e */ unsigned char wszTitle[160]; /* +0x0022 62 21 00 00 */ unsigned char wszDescription[256]; /* +0x00c2 7e 13 00 00 */ }; struct SHCOLUMNINIT { unsigned long dwFlags; /* +0x0000 */ unsigned long dwReserved; /* +0x0004 */ unsigned char wszFolder[520]; /* +0x0008 a8 13 00 00 */ }; struct SHCOLUMNDATA { unsigned long dwFlags; /* +0x0000 */ unsigned long dwFileAttributes; /* +0x0004 */ unsigned long dwReserved; /* +0x0008 */ unsigned char pwszExt[4]; /* +0x000c 71 04 00 00 */ unsigned char wszFile[520]; /* +0x0010 a8 13 00 00 */ }; struct FILE_ATTRIBUTES_ARRAY { unsigned char cItems[4]; /* +0x0000 75 00 00 00 */ unsigned long dwSumFileAttributes; /* +0x0004 */ unsigned long dwProductFileAttributes; /* +0x0008 */ unsigned char rgdwFileAttributes[4]; /* +0x000c 01 12 00 00 */ }; struct DROPDESCRIPTION { unsigned char type[4]; /* +0x0000 57 65 00 00 */ unsigned char szMessage[520]; /* +0x0004 a8 13 00 00 */ unsigned char szInsert[520]; /* +0x020c a8 13 00 00 */ }; struct AUTO_SCROLL_DATA { unsigned char iNextSample[4]; /* +0x0000 74 00 00 00 */ unsigned long dwLastScroll; /* +0x0004 */ unsigned char bFull[4]; /* +0x0008 74 00 00 00 */ unsigned char pts[24]; /* +0x000c 5a 65 00 00 */ unsigned char dwTimes[12]; /* +0x0024 13 12 00 00 */ }; struct CABINETSTATE { unsigned short cLength; /* +0x0000 */ unsigned short nVersion; /* +0x0002 */ /* unsigned char fFullPathTitle[0]; +0x0004 80 1a 00 00 */ /* unsigned char fSaveLocalView[0]; +0x0004 81 1a 00 00 */ /* unsigned char fNotShell[0]; +0x0004 9c 1d 00 00 */ /* unsigned char fSimpleDefault[0]; +0x0004 9d 1d 00 00 */ /* unsigned char fDontShowDescBar[0]; +0x0004 9e 1d 00 00 */ /* unsigned char fNewWindowMode[0]; +0x0004 9f 1d 00 00 */ /* unsigned char fShowCompColor[0]; +0x0004 a0 1d 00 00 */ /* unsigned char fDontPrettyNames[0]; +0x0004 a1 1d 00 00 */ /* unsigned char fAdminsCreateCommonGroups[0]; +0x0004 a2 1d 00 00 */ unsigned char fUnusedFlags[4]; /* +0x0004 5d 65 00 00 */ unsigned char fMenuEnumFilter[4]; /* +0x0008 75 00 00 00 */ }; struct DEFCONTEXTMENU { unsigned char hwnd[4]; /* +0x0000 fc 11 00 00 */ unsigned char pcmcb[4]; /* +0x0004 0f 4b 00 00 */ unsigned char pidlFolder[4]; /* +0x0008 e2 3d 00 00 */ unsigned char psf[4]; /* +0x000c ee 3c 00 00 */ unsigned char cidl[4]; /* +0x0010 75 00 00 00 */ unsigned char apidl[4]; /* +0x0014 10 4b 00 00 */ unsigned char punkAssociationInfo[4]; /* +0x0018 2b 15 00 00 */ unsigned char cKeys[4]; /* +0x001c 75 00 00 00 */ unsigned char aKeys[4]; /* +0x0020 12 4b 00 00 */ }; struct SHELLSTATEA { /* unsigned char fShowAllObjects[0]; +0x0000 80 1a 00 00 */ /* unsigned char fShowExtensions[0]; +0x0000 81 1a 00 00 */ /* unsigned char fNoConfirmRecycle[0]; +0x0000 9c 1d 00 00 */ /* unsigned char fShowSysFiles[0]; +0x0000 9d 1d 00 00 */ /* unsigned char fShowCompColor[0]; +0x0000 9e 1d 00 00 */ /* unsigned char fDoubleClickInWebView[0]; +0x0000 9f 1d 00 00 */ /* unsigned char fDesktopHTML[0]; +0x0000 a0 1d 00 00 */ /* unsigned char fWin95Classic[0]; +0x0000 a1 1d 00 00 */ /* unsigned char fDontPrettyPath[0]; +0x0000 a2 1d 00 00 */ /* unsigned char fShowAttribCol[0]; +0x0000 a3 1d 00 00 */ /* unsigned char fMapNetDrvBtn[0]; +0x0000 a4 1d 00 00 */ /* unsigned char fShowInfoTip[0]; +0x0000 a5 1d 00 00 */ /* unsigned char fHideIcons[0]; +0x0000 a6 1d 00 00 */ /* unsigned char fWebView[0]; +0x0000 62 65 00 00 */ /* unsigned char fFilter[0]; +0x0000 63 65 00 00 */ /* unsigned char fShowSuperHidden[0]; +0x0000 64 65 00 00 */ unsigned char fNoNetCrawling[4]; /* +0x0000 65 65 00 00 */ unsigned long dwWin95Unused; /* +0x0004 */ unsigned char uWin95Unused[4]; /* +0x0008 75 00 00 00 */ long lParamSort; /* +0x000c */ unsigned char iSortDirection[4]; /* +0x0010 74 00 00 00 */ unsigned char version[4]; /* +0x0014 75 00 00 00 */ unsigned char uNotUsed[4]; /* +0x0018 75 00 00 00 */ /* unsigned char fSepProcess[0]; +0x001c 80 1a 00 00 */ /* unsigned char fStartPanelOn[0]; +0x001c 81 1a 00 00 */ /* unsigned char fShowStartPage[0]; +0x001c 9c 1d 00 00 */ /* unsigned char fAutoCheckSelect[0]; +0x001c 9d 1d 00 00 */ /* unsigned char fIconsOnly[0]; +0x001c 9e 1d 00 00 */ /* unsigned char fShowTypeOverlay[0]; +0x001c 9f 1d 00 00 */ /* unsigned char fShowStatusBar[0]; +0x001c a0 1d 00 00 */ unsigned char fSpareFlags[4]; /* +0x001c 66 65 00 00 */ }; struct SHELLSTATEW { /* unsigned char fShowAllObjects[0]; +0x0000 80 1a 00 00 */ /* unsigned char fShowExtensions[0]; +0x0000 81 1a 00 00 */ /* unsigned char fNoConfirmRecycle[0]; +0x0000 9c 1d 00 00 */ /* unsigned char fShowSysFiles[0]; +0x0000 9d 1d 00 00 */ /* unsigned char fShowCompColor[0]; +0x0000 9e 1d 00 00 */ /* unsigned char fDoubleClickInWebView[0]; +0x0000 9f 1d 00 00 */ /* unsigned char fDesktopHTML[0]; +0x0000 a0 1d 00 00 */ /* unsigned char fWin95Classic[0]; +0x0000 a1 1d 00 00 */ /* unsigned char fDontPrettyPath[0]; +0x0000 a2 1d 00 00 */ /* unsigned char fShowAttribCol[0]; +0x0000 a3 1d 00 00 */ /* unsigned char fMapNetDrvBtn[0]; +0x0000 a4 1d 00 00 */ /* unsigned char fShowInfoTip[0]; +0x0000 a5 1d 00 00 */ /* unsigned char fHideIcons[0]; +0x0000 a6 1d 00 00 */ /* unsigned char fWebView[0]; +0x0000 62 65 00 00 */ /* unsigned char fFilter[0]; +0x0000 63 65 00 00 */ /* unsigned char fShowSuperHidden[0]; +0x0000 64 65 00 00 */ unsigned char fNoNetCrawling[4]; /* +0x0000 65 65 00 00 */ unsigned long dwWin95Unused; /* +0x0004 */ unsigned char uWin95Unused[4]; /* +0x0008 75 00 00 00 */ long lParamSort; /* +0x000c */ unsigned char iSortDirection[4]; /* +0x0010 74 00 00 00 */ unsigned char version[4]; /* +0x0014 75 00 00 00 */ unsigned char uNotUsed[4]; /* +0x0018 75 00 00 00 */ /* unsigned char fSepProcess[0]; +0x001c 80 1a 00 00 */ /* unsigned char fStartPanelOn[0]; +0x001c 81 1a 00 00 */ /* unsigned char fShowStartPage[0]; +0x001c 9c 1d 00 00 */ /* unsigned char fAutoCheckSelect[0]; +0x001c 9d 1d 00 00 */ /* unsigned char fIconsOnly[0]; +0x001c 9e 1d 00 00 */ /* unsigned char fShowTypeOverlay[0]; +0x001c 9f 1d 00 00 */ unsigned char fShowStatusBar[4]; /* +0x001c a0 1d 00 00 */ unsigned char uNotUsedWin2KMarker[4]; /* +0x0020 75 00 00 00 */ unsigned char fSpareFlags[4]; /* +0x0024 69 65 00 00 */ }; struct SHELLFLAGSTATE { /* unsigned char fShowAllObjects[0]; +0x0000 80 1a 00 00 */ /* unsigned char fShowExtensions[0]; +0x0000 81 1a 00 00 */ /* unsigned char fNoConfirmRecycle[0]; +0x0000 9c 1d 00 00 */ /* unsigned char fShowSysFiles[0]; +0x0000 9d 1d 00 00 */ /* unsigned char fShowCompColor[0]; +0x0000 9e 1d 00 00 */ /* unsigned char fDoubleClickInWebView[0]; +0x0000 9f 1d 00 00 */ /* unsigned char fDesktopHTML[0]; +0x0000 a0 1d 00 00 */ /* unsigned char fWin95Classic[0]; +0x0000 a1 1d 00 00 */ /* unsigned char fDontPrettyPath[0]; +0x0000 a2 1d 00 00 */ /* unsigned char fShowAttribCol[0]; +0x0000 a3 1d 00 00 */ /* unsigned char fMapNetDrvBtn[0]; +0x0000 a4 1d 00 00 */ /* unsigned char fShowInfoTip[0]; +0x0000 a5 1d 00 00 */ /* unsigned char fHideIcons[0]; +0x0000 a6 1d 00 00 */ /* unsigned char fAutoCheckSelect[0]; +0x0000 62 65 00 00 */ /* unsigned char fIconsOnly[0]; +0x0000 63 65 00 00 */ unsigned char fRestFlags[4]; /* +0x0000 6c 65 00 00 */ }; struct __m256d { unsigned char m256d_f64[32]; /* +0x0000 6f 65 00 00 */ }; struct REPLACE_DATA { unsigned char pszToReplace[4]; /* +0x0000 4f 13 00 00 */ unsigned char pszReplaceWith[4]; /* +0x0004 4f 13 00 00 */ }; struct NAME_VALUE_PAIR { unsigned char pszName[4]; /* +0x0000 4f 13 00 00 */ unsigned char pszValue[4]; /* +0x0004 71 04 00 00 */ }; struct OFFSETINSTANCEDATAANDLENGTH { unsigned long OffsetInstanceData; /* +0x0000 */ unsigned long LengthInstanceData; /* +0x0004 */ }; struct tagNMDAYSTATE { unsigned char nmhdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char stStart[16]; /* +0x000c 7d 13 00 00 */ unsigned char cDayState[4]; /* +0x001c 74 00 00 00 */ unsigned long *prgDayState; /* +0x0020 */ }; struct _LDR_VERIFY_IMAGE_INFO { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned char CallbackInfo[8]; /* +0x0008 85 4d 00 00 */ unsigned char SectionInfo[20]; /* +0x0010 bb 65 00 00 */ unsigned short ImageCharacteristics; /* +0x0024 */ }; struct _SecPkgContext_KeyInfoW { unsigned char sSignatureAlgorithmName[4]; /* +0x0000 71 04 00 00 */ unsigned char sEncryptAlgorithmName[4]; /* +0x0004 71 04 00 00 */ unsigned long KeySize; /* +0x0008 */ unsigned long SignatureAlgorithm; /* +0x000c */ unsigned long EncryptAlgorithm; /* +0x0010 */ }; struct _VIRTUAL_STORAGE_TYPE { unsigned long DeviceId; /* +0x0000 */ unsigned char VendorId[16]; /* +0x0004 ce 13 00 00 */ }; struct _IO_RESOURCE_REQUIREMENTS_LIST { unsigned long ListSize; /* +0x0000 */ unsigned char InterfaceType[4]; /* +0x0004 68 45 00 00 */ unsigned long BusNumber; /* +0x0008 */ unsigned long SlotNumber; /* +0x000c */ unsigned char Reserved[12]; /* +0x0010 13 12 00 00 */ unsigned long AlternativeLists; /* +0x001c */ unsigned char List[40]; /* +0x0020 e1 65 00 00 */ }; struct _SecPkgContext_Target { unsigned long TargetLength; /* +0x0000 */ char *Target; /* +0x0004 */ }; struct _OBJECT_ATTRIBUTES64 { unsigned long Length; /* +0x0000 */ unsigned long long RootDirectory; /* +0x0008 */ unsigned long long ObjectName; /* +0x0010 */ unsigned long Attributes; /* +0x0018 */ unsigned long long SecurityDescriptor; /* +0x0020 */ unsigned long long SecurityQualityOfService; /* +0x0028 */ }; struct _RTL_PROCESS_MODULE_INFORMATION_EX { unsigned short NextOffset; /* +0x0000 */ unsigned char BaseInfo[284]; /* +0x0004 52 4e 00 00 */ unsigned long ImageChecksum; /* +0x0120 */ unsigned long TimeDateStamp; /* +0x0124 */ void *DefaultBase; /* +0x0128 */ }; struct _ALPC_PORT_COMPLETION_LIST_INFORMATION { void *Buffer; /* +0x0000 */ unsigned long Size; /* +0x0004 */ unsigned long ConcurrencyCount; /* +0x0008 */ unsigned long AttributeFlags; /* +0x000c */ }; struct _SYSTEM_LOW_PRIORITY_IO_INFORMATION { unsigned long LowPriReadOperations; /* +0x0000 */ unsigned long LowPriWriteOperations; /* +0x0004 */ unsigned long KernelBumpedToNormalOperations; /* +0x0008 */ unsigned long LowPriPagingReadOperations; /* +0x000c */ unsigned long KernelPagingReadsBumpedToNormal; /* +0x0010 */ unsigned long LowPriPagingWriteOperations; /* +0x0014 */ unsigned long KernelPagingWritesBumpedToNormal; /* +0x0018 */ unsigned long BoostedIrpCount; /* +0x001c */ unsigned long BoostedPagingIrpCount; /* +0x0020 */ unsigned long BlanketBoostCount; /* +0x0024 */ }; struct _SecPkgContext_NativeNamesW { unsigned char sClientName[4]; /* +0x0000 71 04 00 00 */ unsigned char sServerName[4]; /* +0x0004 71 04 00 00 */ }; struct _FILE_TYPE_NOTIFICATION_INPUT { unsigned long Flags; /* +0x0000 */ unsigned long NumFileTypeIDs; /* +0x0004 */ unsigned char FileTypeID[16]; /* +0x0008 f1 17 00 00 */ }; struct NMTBDISPINFOA { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned long dwMask; /* +0x000c */ unsigned char idCommand[4]; /* +0x0010 74 00 00 00 */ unsigned long lParam; /* +0x0014 */ unsigned char iImage[4]; /* +0x0018 74 00 00 00 */ char *pszText; /* +0x001c */ unsigned char cchText[4]; /* +0x0020 74 00 00 00 */ }; struct _EVENT_TRACE_LOGFILEW { unsigned char LogFileName[4]; /* +0x0000 71 04 00 00 */ unsigned char LoggerName[4]; /* +0x0004 71 04 00 00 */ long long CurrentTime; /* +0x0008 */ unsigned long BuffersRead; /* +0x0010 */ unsigned long LogFileMode; /* +0x0014 */ unsigned long ProcessTraceMode; /* +0x0014 */ unsigned char CurrentEvent[88]; /* +0x0018 56 51 00 00 */ unsigned char LogfileHeader[272]; /* +0x0070 57 51 00 00 */ unsigned char BufferCallback[4]; /* +0x0180 17 47 00 00 */ unsigned long BufferSize; /* +0x0184 */ unsigned long Filled; /* +0x0188 */ unsigned long EventsLost; /* +0x018c */ /* unsigned char EventCallback[0]; +0x0190 5b 51 00 00 */ unsigned char EventRecordCallback[4]; /* +0x0190 5f 51 00 00 */ unsigned long IsKernelTrace; /* +0x0194 */ void *Context; /* +0x0198 */ }; struct _MCI_STATS:: { unsigned short McaCod; /* +0x0000 */ unsigned short MsCod; /* +0x0002 */ /* unsigned char OtherInfo[0]; +0x0004 66 66 00 00 */ /* unsigned char Damage[0]; +0x0004 67 66 00 00 */ /* unsigned char AddressValid[0]; +0x0004 68 66 00 00 */ /* unsigned char MiscValid[0]; +0x0004 69 66 00 00 */ /* unsigned char Enabled[0]; +0x0004 16 48 00 00 */ /* unsigned char UnCorrected[0]; +0x0004 6a 66 00 00 */ /* unsigned char OverFlow[0]; +0x0004 de 19 00 00 */ unsigned char Valid[4]; /* +0x0004 ed 14 00 00 */ }; struct tagNMHEADERA { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char iItem[4]; /* +0x000c 74 00 00 00 */ unsigned char iButton[4]; /* +0x0010 74 00 00 00 */ unsigned char pitem[4]; /* +0x0014 8a 66 00 00 */ }; struct _TEB_ACTIVE_FRAME_EX { unsigned char BasicFrame[12]; /* +0x0000 13 49 00 00 */ void *ExtensionIdentifier; /* +0x000c */ }; struct BANDINFOSFB { unsigned long dwMask; /* +0x0000 */ unsigned long dwStateMask; /* +0x0004 */ unsigned long dwState; /* +0x0008 */ unsigned long crBkgnd; /* +0x000c */ unsigned long crBtnLt; /* +0x0010 */ unsigned long crBtnDk; /* +0x0014 */ unsigned short wViewMode; /* +0x0018 */ unsigned short wAlign; /* +0x001a */ unsigned char psf[4]; /* +0x001c ee 3c 00 00 */ unsigned char pidl[4]; /* +0x0020 6e 40 00 00 */ }; struct _TOKEN_SECURITY_ATTRIBUTE_V1 { unsigned char Name[8]; /* +0x0000 7c 3b 00 00 */ unsigned short ValueType; /* +0x0008 */ unsigned short Reserved; /* +0x000a */ unsigned long Flags; /* +0x000c */ unsigned long ValueCount; /* +0x0010 */ }; struct MOVE_FILE_RECORD_DATA { void *FileHandle; /* +0x0000 */ unsigned char SourceFileRecord[8]; /* +0x0008 db 13 00 00 */ unsigned char TargetFileRecord[8]; /* +0x0010 db 13 00 00 */ }; struct _PS_CPU_QUOTA_SET_INFORMATION { long long SessionHandle; /* +0x0000 */ unsigned long Weight; /* +0x0008 */ }; struct NTFS_VOLUME_DATA_BUFFER { unsigned char VolumeSerialNumber[8]; /* +0x0000 db 13 00 00 */ unsigned char NumberSectors[8]; /* +0x0008 db 13 00 00 */ unsigned char TotalClusters[8]; /* +0x0010 db 13 00 00 */ unsigned char FreeClusters[8]; /* +0x0018 db 13 00 00 */ unsigned char TotalReserved[8]; /* +0x0020 db 13 00 00 */ unsigned long BytesPerSector; /* +0x0028 */ unsigned long BytesPerCluster; /* +0x002c */ unsigned long BytesPerFileRecordSegment; /* +0x0030 */ unsigned long ClustersPerFileRecordSegment; /* +0x0034 */ unsigned char MftValidDataLength[8]; /* +0x0038 db 13 00 00 */ unsigned char MftStartLcn[8]; /* +0x0040 db 13 00 00 */ unsigned char Mft2StartLcn[8]; /* +0x0048 db 13 00 00 */ unsigned char MftZoneStart[8]; /* +0x0050 db 13 00 00 */ unsigned char MftZoneEnd[8]; /* +0x0058 db 13 00 00 */ }; struct tagTVITEMA { unsigned char mask[4]; /* +0x0000 75 00 00 00 */ unsigned char hItem[4]; /* +0x0004 b1 3d 00 00 */ unsigned char state[4]; /* +0x0008 75 00 00 00 */ unsigned char stateMask[4]; /* +0x000c 75 00 00 00 */ char *pszText; /* +0x0010 */ unsigned char cchTextMax[4]; /* +0x0014 74 00 00 00 */ unsigned char iImage[4]; /* +0x0018 74 00 00 00 */ unsigned char iSelectedImage[4]; /* +0x001c 74 00 00 00 */ unsigned char cChildren[4]; /* +0x0020 74 00 00 00 */ long lParam; /* +0x0024 */ }; struct _SYSTEM_MEMORY_INFORMATION { unsigned long PagedPoolCommitPageCount; /* +0x0000 */ unsigned long NonPagedPoolPageCount; /* +0x0004 */ unsigned long MdlPageCount; /* +0x0008 */ unsigned long CommitPageCount; /* +0x000c */ }; struct _TRACE_LOGFILE_HEADER32 { unsigned long BufferSize; /* +0x0000 */ unsigned long Version; /* +0x0004 */ unsigned char VersionDetail[4]; /* +0x0004 26 67 00 00 */ unsigned long ProviderVersion; /* +0x0008 */ unsigned long NumberOfProcessors; /* +0x000c */ unsigned char EndTime[8]; /* +0x0010 db 13 00 00 */ unsigned long TimerResolution; /* +0x0018 */ unsigned long MaximumFileSize; /* +0x001c */ unsigned long LogFileMode; /* +0x0020 */ unsigned long BuffersWritten; /* +0x0024 */ /* unsigned char LogInstanceGuid[0]; +0x0028 ce 13 00 00 */ unsigned long StartBuffers; /* +0x0028 */ unsigned long PointerSize; /* +0x002c */ unsigned long EventsLost; /* +0x0030 */ unsigned long CpuSpeedInMHz; /* +0x0034 */ unsigned char LoggerName[4]; /* +0x0038 75 00 00 00 */ unsigned char LogFileName[4]; /* +0x003c 75 00 00 00 */ unsigned char TimeZone[176]; /* +0x0040 d3 30 00 00 */ unsigned char BootTime[8]; /* +0x00f0 db 13 00 00 */ unsigned char PerfFreq[8]; /* +0x00f8 db 13 00 00 */ unsigned char StartTime[8]; /* +0x0100 db 13 00 00 */ unsigned long ReservedFlags; /* +0x0108 */ unsigned long BuffersLost; /* +0x010c */ }; struct _ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_ENDING { void *ResolutionContext; /* +0x0000 */ }; struct _SEC_WINNT_AUTH_IDENTITY_EX2 { unsigned long Version; /* +0x0000 */ unsigned short cbHeaderLength; /* +0x0004 */ unsigned long cbStructureLength; /* +0x0008 */ unsigned long UserOffset; /* +0x000c */ unsigned short UserLength; /* +0x0010 */ unsigned long DomainOffset; /* +0x0014 */ unsigned short DomainLength; /* +0x0018 */ unsigned long PackedCredentialsOffset; /* +0x001c */ unsigned short PackedCredentialsLength; /* +0x0020 */ unsigned long Flags; /* +0x0024 */ unsigned long PackageListOffset; /* +0x0028 */ unsigned short PackageListLength; /* +0x002c */ }; struct _STREAM_EXTENT_ENTRY:: { unsigned char RetrievalPointers[32]; /* +0x0000 72 47 00 00 */ }; struct _PROCESS_STACK_ALLOCATION_INFORMATION { unsigned long ReserveSize; /* +0x0000 */ unsigned long ZeroBits; /* +0x0004 */ void *StackBase; /* +0x0008 */ }; struct tagNC_ADDRESS { unsigned char pAddrInfo[4]; /* +0x0000 9a 67 00 00 */ unsigned short PortNumber; /* +0x0004 */ unsigned char PrefixLength; /* +0x0006 */ }; struct _KSPIN_LOCK_QUEUE { unsigned char Next[4]; /* +0x0000 b7 67 00 00 */ unsigned char Lock[4]; /* +0x0004 b8 67 00 00 */ }; struct MFT_ENUM_DATA { unsigned long long StartFileReferenceNumber; /* +0x0000 */ long long LowUsn; /* +0x0008 */ long long HighUsn; /* +0x0010 */ }; struct tagNMCHAR { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char ch[4]; /* +0x000c 75 00 00 00 */ unsigned long dwItemPrev; /* +0x0010 */ unsigned long dwItemNext; /* +0x0014 */ }; struct _OBJECT_TYPES_INFORMATION { unsigned long NumberOfTypes; /* +0x0000 */ }; struct _PROPSHEETPAGEW_V1 { unsigned long dwSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char hInstance[4]; /* +0x0008 f5 12 00 00 */ /* unsigned char pszTemplate[0]; +0x000c 4f 13 00 00 */ unsigned char pResource[4]; /* +0x000c a9 1a 00 00 */ /* unsigned char hIcon[0]; +0x0010 92 19 00 00 */ unsigned char pszIcon[4]; /* +0x0010 4f 13 00 00 */ unsigned char pszTitle[4]; /* +0x0014 4f 13 00 00 */ unsigned char pfnDlgProc[4]; /* +0x0018 22 20 00 00 */ long lParam; /* +0x001c */ unsigned char pfnCallback[4]; /* +0x0020 88 42 00 00 */ unsigned char pcRefParent[4]; /* +0x0024 75 04 00 00 */ }; struct tagNMCUSTOMTEXT { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char hDC[4]; /* +0x000c 32 18 00 00 */ unsigned char lpString[4]; /* +0x0010 4f 13 00 00 */ unsigned char nCount[4]; /* +0x0014 74 00 00 00 */ unsigned char lpRect[4]; /* +0x0018 c0 1d 00 00 */ unsigned char uFormat[4]; /* +0x001c 75 00 00 00 */ unsigned char fLink[4]; /* +0x0020 74 00 00 00 */ }; struct __m128d { unsigned char m128d_f64[16]; /* +0x0000 4f 68 00 00 */ }; struct _SYSTEM_REF_TRACE_INFORMATION { unsigned char TraceEnable; /* +0x0000 */ unsigned char TracePermanent; /* +0x0001 */ unsigned char TraceProcessName[8]; /* +0x0004 7c 3b 00 00 */ unsigned char TracePoolTags[8]; /* +0x000c 7c 3b 00 00 */ }; struct _HEAP_INFORMATION_ITEM { unsigned long Level; /* +0x0000 */ unsigned long Size; /* +0x0004 */ /* unsigned char ProcessHeapInformation[0]; +0x0008 5f 3c 00 00 */ /* unsigned char HeapInformation[0]; +0x0008 b0 3b 00 00 */ /* unsigned char HeapRegionInformation[0]; +0x0008 74 3b 00 00 */ /* unsigned char HeapRangeInformation[0]; +0x0008 16 54 00 00 */ /* unsigned char HeapBlockInformation[0]; +0x0008 c2 5d 00 00 */ /* unsigned char HeapPerfInformation[0]; +0x0008 9e 3b 00 00 */ unsigned long DynamicStart; /* +0x0008 */ }; struct _API_SET_NAMESPACE_ENTRY { unsigned long NameOffset; /* +0x0000 */ unsigned long NameLength; /* +0x0004 */ unsigned long DataOffset; /* +0x0008 */ }; struct _RTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_BASIC { unsigned long Size; /* +0x0000 */ unsigned long Format; /* +0x0004 */ unsigned char Frame[12]; /* +0x0008 97 42 00 00 */ }; struct NTFS_FILE_RECORD_INPUT_BUFFER { unsigned char FileReferenceNumber[8]; /* +0x0000 db 13 00 00 */ }; struct NMCBEDRAGBEGINW { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char iItemid[4]; /* +0x000c 74 00 00 00 */ unsigned char szText[520]; /* +0x0010 a8 13 00 00 */ }; struct DiscoveryService::ANNOTATION_VALUE { unsigned char pszAnnotation[4]; /* +0x0000 4f 13 00 00 */ unsigned char pszValue[4]; /* +0x0004 4f 13 00 00 */ }; enum DiscoveryService::DS_SERVICES { DS_DISCOVERY = 0, DS_FEATURED = 1, DS_PERSONAL_RECOMMENDATIONS = 2, DS_NON_PERSONAL_RECOMMENDATIONS = 3, DS_SEARCH_SUGGESTIONS = 4, DS_SEARCH_RESULTS = 5, DS_CATEGORIES = 6, DS_PRODUCT_TILE = 7, DS_PRODUCT_BROWSE_LIST = 8, DS_EXTENDED_METADATA = 9, DS_WRITE_RATING_REVIEW = 10, DS_WRITE_PROBLEM_APP = 11, DS_WRITE_PROBLEM_REVIEW = 12, DS_BUSINESS_INTELLIGENCE = 13, DS_GET_REVIEWS = 14, DS_CREATE_PAYMENT_ACCOUNT = 15, DS_ADD_PAYMENT_ACCOUNT = 16, DS_ADD_PI = 17, DS_MODIFY_PI = 18, DS_GET_ALL_PI = 19, DS_GET_DEFAULT_PI = 20, DS_SET_DEFAULT_PI = 21, DS_CALCULATE_FINAL_PRICE = 22, DS_CONFIRM_PURCHASE = 23, DS_LICENSING_BASE_URL = 24, DS_IMAGES = 25, DS_PAGES = 26, DS_NAMESPACE = 27, DS_INAPP_PURCHASE_CREATE = 28, DS_INAPP_PURCHASE_CONFIRM = 29, DS_TOPIC = 30, DS_WRITE_REVIEW_HELPFULNESS = 31, DS_GET_USER_REVIEW = 32, DS_INAPP_OFFERS = 33, DS_CHANNEL = 34, DS_GET_IDENTITY_SETTINGS = 35, DS_WRITE_IDENTITY_SETTINGS = 36, DS_PRODUCT_TILE_BY_PACKAGE = 37, DS_GET_MYAPPS = 38, DS_DEV_LICENSING_BASE_URL = 39, DS_GET_BANNEDAPPS = 40, DS_PRODUCT_TILE_EXTENDED_BY_PACKAGE = 41, DS_SERVICES_MAX = 42 }; struct _SYSDBG_TRIAGE_DUMP { unsigned long Flags; /* +0x0000 */ unsigned long BugCheckCode; /* +0x0004 */ unsigned long BugCheckParam1; /* +0x0008 */ unsigned long BugCheckParam2; /* +0x000c */ unsigned long BugCheckParam3; /* +0x0010 */ unsigned long BugCheckParam4; /* +0x0014 */ unsigned long ProcessHandles; /* +0x0018 */ unsigned long ThreadHandles; /* +0x001c */ unsigned char Handles[4]; /* +0x0020 74 12 00 00 */ }; struct DFMICS { unsigned long cbSize; /* +0x0000 */ unsigned long fMask; /* +0x0004 */ long lParam; /* +0x0008 */ unsigned char idCmdFirst[4]; /* +0x000c 75 00 00 00 */ unsigned char idDefMax[4]; /* +0x0010 75 00 00 00 */ unsigned char pici[4]; /* +0x0014 73 44 00 00 */ unsigned char punkSite[4]; /* +0x0018 2b 15 00 00 */ }; struct _SYSTEM_PLATFORM_BINARY_INFORMATION { void *HandoffBuffer; /* +0x0000 */ void *CommandLineBuffer; /* +0x0004 */ unsigned long HandoffBufferSize; /* +0x0008 */ unsigned long CommandLineBufferSize; /* +0x000c */ }; struct _PROPSHEETPAGEA_V2 { unsigned long dwSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char hInstance[4]; /* +0x0008 f5 12 00 00 */ /* unsigned char pszTemplate[0]; +0x000c bf 12 00 00 */ unsigned char pResource[4]; /* +0x000c a9 1a 00 00 */ /* unsigned char hIcon[0]; +0x0010 92 19 00 00 */ unsigned char pszIcon[4]; /* +0x0010 bf 12 00 00 */ unsigned char pszTitle[4]; /* +0x0014 bf 12 00 00 */ unsigned char pfnDlgProc[4]; /* +0x0018 22 20 00 00 */ long lParam; /* +0x001c */ unsigned char pfnCallback[4]; /* +0x0020 f9 3b 00 00 */ unsigned char pcRefParent[4]; /* +0x0024 75 04 00 00 */ unsigned char pszHeaderTitle[4]; /* +0x0028 bf 12 00 00 */ unsigned char pszHeaderSubTitle[4]; /* +0x002c bf 12 00 00 */ }; struct _SD_ENUM_SDS_OUTPUT { unsigned long long NextOffset; /* +0x0000 */ unsigned long long NumSDEntriesReturned; /* +0x0008 */ unsigned long long NumSDBytesReturned; /* +0x0010 */ unsigned char SDEntry[24]; /* +0x0018 72 69 00 00 */ }; struct _TXFS_GET_TRANSACTED_VERSION { unsigned long ThisBaseVersion; /* +0x0000 */ unsigned long LatestVersion; /* +0x0004 */ unsigned short ThisMiniVersion; /* +0x0008 */ unsigned short FirstMiniVersion; /* +0x000a */ unsigned short LatestMiniVersion; /* +0x000c */ }; struct _EXCEPTION_REGISTRATION_RECORD { unsigned char Next[4]; /* +0x0000 c6 3b 00 00 */ unsigned char Handler[4]; /* +0x0004 8c 69 00 00 */ }; struct XSAVE_CPU_ERRATA { unsigned long NumberOfErrata; /* +0x0000 */ unsigned char Errata[32]; /* +0x0008 96 69 00 00 */ }; struct FOLDERSETTINGS { unsigned char ViewMode[4]; /* +0x0000 75 00 00 00 */ unsigned char fFlags[4]; /* +0x0004 75 00 00 00 */ }; struct _FILE_QUERY_ON_DISK_VOL_INFO_BUFFER { unsigned char DirectoryCount[8]; /* +0x0000 db 13 00 00 */ unsigned char FileCount[8]; /* +0x0008 db 13 00 00 */ unsigned short FsFormatMajVersion; /* +0x0010 */ unsigned short FsFormatMinVersion; /* +0x0012 */ unsigned char FsFormatName[28]; /* +0x0014 1b 29 00 00 */ unsigned char FormatTime[8]; /* +0x0030 db 13 00 00 */ unsigned char LastUpdateTime[8]; /* +0x0038 db 13 00 00 */ unsigned char CopyrightInfo[68]; /* +0x0040 f8 69 00 00 */ unsigned char AbstractInfo[68]; /* +0x0084 f8 69 00 00 */ unsigned char FormattingImplementationInfo[68]; /* +0x00c8 f8 69 00 00 */ unsigned char LastModifyingImplementationInfo[68]; /* +0x010c f8 69 00 00 */ }; struct tagNMLVLINK { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char link[4280]; /* +0x000c ed 5a 00 00 */ unsigned char iItem[4]; /* +0x10c4 74 00 00 00 */ unsigned char iSubItem[4]; /* +0x10c8 74 00 00 00 */ }; struct _RTL_HANDLE_TABLE_ENTRY { unsigned long Flags; /* +0x0000 */ unsigned char NextFree[4]; /* +0x0000 1d 4d 00 00 */ }; struct NMCBEENDEDITA { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char fChanged[4]; /* +0x000c 74 00 00 00 */ unsigned char iNewSelection[4]; /* +0x0010 74 00 00 00 */ unsigned char szText[260]; /* +0x0014 f8 1a 00 00 */ unsigned char iWhy[4]; /* +0x0118 74 00 00 00 */ }; struct _NOTIFYICONIDENTIFIER { unsigned long cbSize; /* +0x0000 */ unsigned char hWnd[4]; /* +0x0004 fc 11 00 00 */ unsigned char uID[4]; /* +0x0008 75 00 00 00 */ unsigned char guidItem[16]; /* +0x000c ce 13 00 00 */ }; struct _FILE_STANDARD_LINK_INFORMATION { unsigned long NumberOfAccessibleLinks; /* +0x0000 */ unsigned long TotalNumberOfLinks; /* +0x0004 */ unsigned char DeletePending; /* +0x0008 */ unsigned char Directory; /* +0x0009 */ }; struct NMCOMBOBOXEXA { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned char ceItem[36]; /* +0x000c fa 49 00 00 */ }; struct _SECURITY_PACKAGE_OPTIONS { unsigned long Size; /* +0x0000 */ unsigned long Type; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ unsigned long SignatureSize; /* +0x000c */ void *Signature; /* +0x0010 */ }; struct _BOOT_OPTIONS { unsigned long Version; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned long Timeout; /* +0x0008 */ unsigned long CurrentBootEntryId; /* +0x000c */ unsigned long NextBootEntryId; /* +0x0010 */ unsigned char HeadlessRedirection[4]; /* +0x0014 83 12 00 00 */ }; struct MOVE_FILE_DATA { void *FileHandle; /* +0x0000 */ unsigned char StartingVcn[8]; /* +0x0008 db 13 00 00 */ unsigned char StartingLcn[8]; /* +0x0010 db 13 00 00 */ unsigned long ClusterCount; /* +0x0018 */ }; struct _SecPkgContext_CredInfo { unsigned char CredClass[4]; /* +0x0000 92 69 00 00 */ unsigned long IsPromptingNeeded; /* +0x0004 */ }; struct EXP_DARWIN_LINK { unsigned char dbh[8]; /* +0x0000 e9 48 00 00 */ unsigned char szDarwinID[260]; /* +0x0008 f8 1a 00 00 */ unsigned char szwDarwinID[520]; /* +0x010c a8 13 00 00 */ }; struct _API_SET_VALUE_ARRAY { unsigned long Count; /* +0x0000 */ unsigned char Array[16]; /* +0x0004 a7 6a 00 00 */ }; struct _COMPRESSED_DATA_INFO { unsigned short CompressionFormatAndEngine; /* +0x0000 */ unsigned char CompressionUnitShift; /* +0x0002 */ unsigned char ChunkShift; /* +0x0003 */ unsigned char ClusterShift; /* +0x0004 */ unsigned char Reserved; /* +0x0005 */ unsigned short NumberOfChunks; /* +0x0006 */ unsigned char CompressedChunkSizes[4]; /* +0x0008 01 12 00 00 */ }; struct _SYSTEM_TIMEOFDAY_INFORMATION { unsigned char BootTime[8]; /* +0x0000 db 13 00 00 */ unsigned char CurrentTime[8]; /* +0x0008 db 13 00 00 */ unsigned char TimeZoneBias[8]; /* +0x0010 db 13 00 00 */ unsigned long TimeZoneId; /* +0x0018 */ unsigned long Reserved; /* +0x001c */ unsigned long long BootTimeBias; /* +0x0020 */ unsigned long long SleepTimeBias; /* +0x0028 */ }; struct _CM_EISA_FUNCTION_INFORMATION { unsigned long CompressedId; /* +0x0000 */ unsigned char IdSlotFlags1; /* +0x0004 */ unsigned char IdSlotFlags2; /* +0x0005 */ unsigned char MinorRevision; /* +0x0006 */ unsigned char MajorRevision; /* +0x0007 */ unsigned char Selections[26]; /* +0x0008 b2 6a 00 00 */ unsigned char FunctionFlags; /* +0x0022 */ unsigned char TypeString[80]; /* +0x0023 be 1e 00 00 */ unsigned char EisaMemory[63]; /* +0x0073 b3 6a 00 00 */ unsigned char EisaIrq[14]; /* +0x00b2 b4 6a 00 00 */ unsigned char EisaDma[8]; /* +0x00c0 b5 6a 00 00 */ unsigned char EisaPort[60]; /* +0x00c8 b6 6a 00 00 */ unsigned char InitializationData[60]; /* +0x0104 b7 6a 00 00 */ }; struct _SYSTEM_HOTPATCH_MODULE_QUERY_PARAMETERS { unsigned long QueryFlags; /* +0x0000 */ void *ProcessHandle; /* +0x0004 */ }; struct _SL_HWID_DEVICE_INFO { unsigned long SizeBytes; /* +0x0000 */ unsigned char Type; /* +0x0004 */ unsigned char DeviceRemovalPolicy; /* +0x0005 */ unsigned char AuthenticationStatus; /* +0x0006 */ unsigned char Disposition; /* +0x0007 */ unsigned long DeviceNodeLevel; /* +0x0008 */ unsigned char Guid[16]; /* +0x000c ce 13 00 00 */ unsigned char Data[4]; /* +0x001c 04 12 00 00 */ }; struct _RTL_BUFFER { unsigned char *Buffer; /* +0x0000 */ unsigned char *StaticBuffer; /* +0x0004 */ unsigned long Size; /* +0x0008 */ unsigned long StaticSize; /* +0x000c */ unsigned long ReservedForAllocatedSize; /* +0x0010 */ void *ReservedForIMalloc; /* +0x0014 */ }; struct KEY_PID_ARRAY { void *PID; /* +0x0000 */ unsigned char KeyName[8]; /* +0x0004 7c 3b 00 00 */ }; struct _RTL_STACK_CONTEXT { unsigned long NumberOfEntries; /* +0x0000 */ unsigned char Entry[8]; /* +0x0004 ab 6b 00 00 */ }; struct _EISA_PORT_CONFIGURATION { unsigned char Configuration[1]; /* +0x0000 f7 60 00 00 */ unsigned short PortAddress; /* +0x0001 */ }; struct POWER_STATE_HANDLER { unsigned char Type[4]; /* +0x0000 8d 3b 00 00 */ unsigned char RtcWake; /* +0x0004 */ unsigned char Spare[3]; /* +0x0005 49 12 00 00 */ unsigned char Handler[4]; /* +0x0008 a0 62 00 00 */ void *Context; /* +0x000c */ }; struct _KEY_FLAGS_INFORMATION { unsigned long Wow64Flags; /* +0x0000 */ unsigned long KeyFlags; /* +0x0004 */ unsigned long ControlFlags; /* +0x0008 */ }; struct NMPGCALCSIZE { unsigned char hdr[12]; /* +0x0000 b7 31 00 00 */ unsigned long dwFlag; /* +0x000c */ unsigned char iWidth[4]; /* +0x0010 74 00 00 00 */ unsigned char iHeight[4]; /* +0x0014 74 00 00 00 */ }; struct _CM_VIDEO_DEVICE_DATA { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned long VideoClock; /* +0x0004 */ }; struct _SHFILEINFOA { unsigned char hIcon[4]; /* +0x0000 92 19 00 00 */ unsigned char iIcon[4]; /* +0x0004 74 00 00 00 */ unsigned long dwAttributes; /* +0x0008 */ unsigned char szDisplayName[260]; /* +0x000c f8 1a 00 00 */ unsigned char szTypeName[80]; /* +0x0110 73 21 00 00 */ }; struct _TOKEN_SECURITY_ATTRIBUTE_V1:: { long long *pInt64; /* +0x0000 */ unsigned long long *pUint64; /* +0x0000 */ /* unsigned char pString[0]; +0x0000 2e 3f 00 00 */ /* unsigned char pFqbn[0]; +0x0000 ce 4c 00 00 */ unsigned char pOctetString[4]; /* +0x0000 4e 4f 00 00 */ }; struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME { unsigned char Previous[4]; /* +0x0000 bb 59 00 00 */ unsigned char ActivationContext[4]; /* +0x0004 c4 31 00 00 */ unsigned long Flags; /* +0x0008 */ }; struct _OBJECT_HANDLE_FLAG_INFORMATION { unsigned char Inherit; /* +0x0000 */ unsigned char ProtectFromClose; /* +0x0001 */ }; struct _LDR_DATA_TABLE_ENTRY64 { unsigned char InLoadOrderLinks[16]; /* +0x0000 f3 42 00 00 */ unsigned char InMemoryOrderLinks[16]; /* +0x0010 f3 42 00 00 */ unsigned char InInitializationOrderLinks[16]; /* +0x0020 f3 42 00 00 */ unsigned long long DllBase; /* +0x0030 */ unsigned long long EntryPoint; /* +0x0038 */ unsigned long SizeOfImage; /* +0x0040 */ unsigned char FullDllName[16]; /* +0x0048 7a 4c 00 00 */ unsigned char BaseDllName[16]; /* +0x0058 7a 4c 00 00 */ unsigned long Flags; /* +0x0068 */ unsigned short LoadCount; /* +0x006c */ unsigned short TlsIndex; /* +0x006e */ /* unsigned char HashLinks[0]; +0x0070 f3 42 00 00 */ unsigned long long SectionPointer; /* +0x0070 */ unsigned long CheckSum; /* +0x0078 */ unsigned long TimeDateStamp; /* +0x0080 */ unsigned long long LoadedImports; /* +0x0080 */ }; struct MCHITTESTINFO { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char pt[8]; /* +0x0004 ce 12 00 00 */ unsigned char uHit[4]; /* +0x000c 75 00 00 00 */ unsigned char st[16]; /* +0x0010 7d 13 00 00 */ unsigned char rc[16]; /* +0x0020 c0 12 00 00 */ unsigned char iOffset[4]; /* +0x0030 74 00 00 00 */ unsigned char iRow[4]; /* +0x0034 74 00 00 00 */ unsigned char iCol[4]; /* +0x0038 74 00 00 00 */ }; enum __MIDL_IWindowsStoreUtilities_0001 { SU_LICENSING = 0 }; struct RETRIEVAL_POINTERS_BUFFER { unsigned long ExtentCount; /* +0x0000 */ unsigned char StartingVcn[24]; /* +0x0008 db 13 00 00 */ }; struct RETRIEVAL_POINTERS_BUFFER:: { unsigned char NextVcn[8]; /* +0x0000 db 13 00 00 */ unsigned char Lcn[8]; /* +0x0008 db 13 00 00 */ }; struct __m256 { unsigned char m256_f32[32]; /* +0x0000 31 6f 00 00 */ }; struct _FILETIME { unsigned long dwLowDateTime; /* +0x0000 */ unsigned long dwHighDateTime; /* +0x0004 */ }; struct tagCStdPSFactoryBuffer { unsigned char lpVtbl[4]; /* +0x0000 5a 6f 00 00 */ long RefCount; /* +0x0004 */ unsigned char pProxyFileList[4]; /* +0x0008 5e 6f 00 00 */ long Filler1; /* +0x000c */ }; struct _NDR_CS_SIZE_CONVERT_ROUTINES { unsigned char pfnNetSize[4]; /* +0x0000 65 6f 00 00 */ unsigned char pfnToNetCs[4]; /* +0x0004 68 6f 00 00 */ unsigned char pfnLocalSize[4]; /* +0x0008 65 6f 00 00 */ unsigned char pfnFromNetCs[4]; /* +0x000c 6b 6f 00 00 */ }; struct _MALLOC_FREE_STRUCT { unsigned char pfnAllocate[4]; /* +0x0000 57 15 00 00 */ unsigned char pfnFree[4]; /* +0x0004 10 14 00 00 */ }; struct _COMM_FAULT_OFFSETS { short CommOffset; /* +0x0000 */ short FaultOffset; /* +0x0002 */ }; struct RPC_DISPATCH_TABLE { unsigned char DispatchTableCount[4]; /* +0x0000 75 00 00 00 */ unsigned char DispatchTable[4]; /* +0x0004 7a 6f 00 00 */ long Reserved; /* +0x0008 */ }; struct ARRAY_INFO { long Dimension; /* +0x0000 */ unsigned long *BufferConformanceMark; /* +0x0004 */ unsigned long *BufferVarianceMark; /* +0x0008 */ unsigned long *MaxCountArray; /* +0x000c */ unsigned long *OffsetArray; /* +0x0010 */ unsigned long *ActualCountArray; /* +0x0014 */ }; struct _NDR_EXPR_DESC { unsigned char pOffset[4]; /* +0x0000 ac 19 00 00 */ unsigned char pFormatExpr[4]; /* +0x0004 aa 19 00 00 */ }; struct _RPC_SYNTAX_IDENTIFIER { unsigned char SyntaxGUID[16]; /* +0x0000 ce 13 00 00 */ unsigned char SyntaxVersion[4]; /* +0x0010 de 1d 00 00 */ }; struct _USER_MARSHAL_ROUTINE_QUADRUPLE { unsigned char pfnBufferSize[4]; /* +0x0000 8b 6f 00 00 */ unsigned char pfnMarshall[4]; /* +0x0004 88 6f 00 00 */ unsigned char pfnUnmarshall[4]; /* +0x0008 88 6f 00 00 */ unsigned char pfnFree[4]; /* +0x000c 8e 6f 00 00 */ }; struct _MIDL_STUB_DESC { void *RpcInterfaceInformation; /* +0x0000 */ unsigned char pfnAllocate[4]; /* +0x0004 57 15 00 00 */ unsigned char pfnFree[4]; /* +0x0008 10 14 00 00 */ unsigned char IMPLICIT_HANDLE_INFO[4]; /* +0x000c 91 6f 00 00 */ unsigned char apfnNdrRundownRoutines[4]; /* +0x0010 93 6f 00 00 */ unsigned char aGenericBindingRoutinePairs[4]; /* +0x0014 95 6f 00 00 */ unsigned char apfnExprEval[4]; /* +0x0018 97 6f 00 00 */ unsigned char aXmitQuintuple[4]; /* +0x001c 99 6f 00 00 */ unsigned char pFormatTypes[4]; /* +0x0020 aa 19 00 00 */ unsigned char fCheckBounds[4]; /* +0x0024 74 00 00 00 */ unsigned long Version; /* +0x0028 */ unsigned char pMallocFreeStruct[4]; /* +0x002c 9b 6f 00 00 */ long MIDLVersion; /* +0x0030 */ unsigned char CommFaultOffsets[4]; /* +0x0034 9e 6f 00 00 */ unsigned char aUserMarshalQuadruple[4]; /* +0x0038 a1 6f 00 00 */ unsigned char NotifyRoutineTable[4]; /* +0x003c a3 6f 00 00 */ unsigned long mFlags; /* +0x0040 */ unsigned char CsRoutineTables[4]; /* +0x0044 a6 6f 00 00 */ void *ProxyServerInfo; /* +0x0048 */ unsigned char pExprInfo[4]; /* +0x004c a9 6f 00 00 */ }; struct _GENERIC_BINDING_ROUTINE_PAIR { unsigned char pfnBind[4]; /* +0x0000 d7 1a 00 00 */ unsigned char pfnUnbind[4]; /* +0x0004 da 1a 00 00 */ }; struct _FULL_PTR_XLAT_TABLES { void *RefIdToPointer; /* +0x0000 */ void *PointerToRefId; /* +0x0004 */ unsigned long NextRefId; /* +0x0008 */ unsigned char XlatSide[4]; /* +0x000c 85 10 00 00 */ }; struct _NDR_CS_ROUTINES { unsigned char pSizeConvertRoutines[4]; /* +0x0000 b1 6f 00 00 */ unsigned char pTagGettingRoutines[4]; /* +0x0004 b2 6f 00 00 */ }; struct _XMIT_ROUTINE_QUINTUPLE { unsigned char pfnTranslateToXmit[4]; /* +0x0000 83 6f 00 00 */ unsigned char pfnTranslateFromXmit[4]; /* +0x0004 83 6f 00 00 */ unsigned char pfnFreeXmit[4]; /* +0x0008 83 6f 00 00 */ unsigned char pfnFreeInst[4]; /* +0x000c 83 6f 00 00 */ }; struct _MIDL_STUB_MESSAGE { unsigned char RpcMsg[4]; /* +0x0000 92 1d 00 00 */ unsigned char *Buffer; /* +0x0004 */ unsigned char *BufferStart; /* +0x0008 */ unsigned char *BufferEnd; /* +0x000c */ unsigned char *BufferMark; /* +0x0010 */ unsigned long BufferLength; /* +0x0014 */ unsigned long MemorySize; /* +0x0018 */ unsigned char *Memory; /* +0x001c */ unsigned char IsClient; /* +0x0020 */ unsigned char Pad; /* +0x0021 */ unsigned short uFlags2; /* +0x0022 */ unsigned char ReuseBuffer[4]; /* +0x0024 74 00 00 00 */ unsigned char pAllocAllNodesContext[4]; /* +0x0028 94 1d 00 00 */ unsigned char pPointerQueueState[4]; /* +0x002c 96 1d 00 00 */ unsigned char IgnoreEmbeddedPointers[4]; /* +0x0030 74 00 00 00 */ unsigned char *PointerBufferMark; /* +0x0034 */ unsigned char CorrDespIncrement; /* +0x0038 */ unsigned char uFlags; /* +0x0039 */ unsigned short UniquePtrCount; /* +0x003a */ unsigned long MaxCount; /* +0x003c */ unsigned long Offset; /* +0x0040 */ unsigned long ActualCount; /* +0x0044 */ unsigned char pfnAllocate[4]; /* +0x0048 57 15 00 00 */ unsigned char pfnFree[4]; /* +0x004c 10 14 00 00 */ unsigned char *StackTop; /* +0x0050 */ unsigned char *pPresentedType; /* +0x0054 */ unsigned char *pTransmitType; /* +0x0058 */ void *SavedHandle; /* +0x005c */ unsigned char StubDesc[4]; /* +0x0060 99 1d 00 00 */ unsigned char FullPtrXlatTables[4]; /* +0x0064 9b 1d 00 00 */ unsigned long FullPtrRefId; /* +0x0068 */ unsigned long PointerLength; /* +0x006c */ /* unsigned char fInDontFree[0]; +0x0070 80 1a 00 00 */ /* unsigned char fDontCallFreeInst[0]; +0x0070 81 1a 00 00 */ /* unsigned char fInOnlyParam[0]; +0x0070 9c 1d 00 00 */ /* unsigned char fHasReturn[0]; +0x0070 9d 1d 00 00 */ /* unsigned char fHasExtensions[0]; +0x0070 9e 1d 00 00 */ /* unsigned char fHasNewCorrDesc[0]; +0x0070 9f 1d 00 00 */ /* unsigned char fIsIn[0]; +0x0070 a0 1d 00 00 */ /* unsigned char fIsOut[0]; +0x0070 a1 1d 00 00 */ /* unsigned char fIsOicf[0]; +0x0070 a2 1d 00 00 */ /* unsigned char fBufferValid[0]; +0x0070 a3 1d 00 00 */ /* unsigned char fHasMemoryValidateCallback[0]; +0x0070 a4 1d 00 00 */ /* unsigned char fInFree[0]; +0x0070 a5 1d 00 00 */ /* unsigned char fNeedMCCP[0]; +0x0070 a6 1d 00 00 */ /* unsigned char fUnused[0]; +0x0070 a7 1d 00 00 */ unsigned char fUnused2[4]; /* +0x0070 a8 1d 00 00 */ unsigned long dwDestContext; /* +0x0074 */ void *pvDestContext; /* +0x0078 */ unsigned char SavedContextHandles[4]; /* +0x007c b7 6f 00 00 */ long ParamNumber; /* +0x0080 */ unsigned char pRpcChannelBuffer[4]; /* +0x0084 59 15 00 00 */ unsigned char pArrayInfo[4]; /* +0x0088 aa 1d 00 00 */ unsigned long *SizePtrCountArray; /* +0x008c */ unsigned long *SizePtrOffsetArray; /* +0x0090 */ unsigned long *SizePtrLengthArray; /* +0x0094 */ void *pArgQueue; /* +0x0098 */ unsigned long dwStubPhase; /* +0x009c */ void *LowStackMark; /* +0x00a0 */ unsigned char pAsyncMsg[4]; /* +0x00a4 ac 1d 00 00 */ unsigned char pCorrInfo[4]; /* +0x00a8 ae 1d 00 00 */ unsigned char *pCorrMemory; /* +0x00ac */ void *pMemoryList; /* +0x00b0 */ unsigned char pCSInfo[4]; /* +0x00b4 74 00 00 00 */ unsigned char *ConformanceMark; /* +0x00b8 */ unsigned char *VarianceMark; /* +0x00bc */ unsigned char Unused[4]; /* +0x00c0 74 00 00 00 */ unsigned char pContext[4]; /* +0x00c4 b0 1d 00 00 */ void *ContextHandleHash; /* +0x00c8 */ void *pUserMarshalList; /* +0x00cc */ unsigned char Reserved51_3[4]; /* +0x00d0 74 00 00 00 */ unsigned char Reserved51_4[4]; /* +0x00d4 74 00 00 00 */ unsigned char Reserved51_5[4]; /* +0x00d8 74 00 00 00 */ }; struct IRpcProxyBufferVtbl { unsigned char QueryInterface[4]; /* +0x0000 be 6f 00 00 */ unsigned char AddRef[4]; /* +0x0004 c1 6f 00 00 */ unsigned char Release[4]; /* +0x0008 c1 6f 00 00 */ unsigned char Connect[4]; /* +0x000c c4 6f 00 00 */ unsigned char Disconnect[4]; /* +0x0010 c6 6f 00 00 */ }; struct _RPC_VERSION { unsigned short MajorVersion; /* +0x0000 */ unsigned short MinorVersion; /* +0x0002 */ }; struct IRpcChannelBufferVtbl { unsigned char QueryInterface[4]; /* +0x0000 cd 6f 00 00 */ unsigned char AddRef[4]; /* +0x0004 d0 6f 00 00 */ unsigned char Release[4]; /* +0x0008 d0 6f 00 00 */ unsigned char GetBuffer[4]; /* +0x000c d3 6f 00 00 */ unsigned char SendReceive[4]; /* +0x0010 d6 6f 00 00 */ unsigned char FreeBuffer[4]; /* +0x0014 d9 6f 00 00 */ unsigned char GetDestCtx[4]; /* +0x0018 dc 6f 00 00 */ unsigned char IsConnected[4]; /* +0x001c de 6f 00 00 */ }; struct _MIDL_SERVER_INFO_ { unsigned char pStubDesc[4]; /* +0x0000 99 1d 00 00 */ unsigned char DispatchTable[4]; /* +0x0004 e4 6f 00 00 */ unsigned char ProcString[4]; /* +0x0008 aa 19 00 00 */ unsigned char FmtStringOffset[4]; /* +0x000c ac 19 00 00 */ unsigned char ThunkTable[4]; /* +0x0010 97 6f 00 00 */ unsigned char pTransferSyntax[4]; /* +0x0014 83 20 00 00 */ unsigned long nCount; /* +0x0018 */ unsigned char pSyntaxInfo[4]; /* +0x001c 9e 21 00 00 */ }; struct tagCInterfaceStubVtbl { unsigned char header[16]; /* +0x0000 e7 6f 00 00 */ unsigned char Vtbl[40]; /* +0x0010 e8 6f 00 00 */ }; struct IUnknownVtbl { unsigned char QueryInterface[4]; /* +0x0000 ef 6f 00 00 */ unsigned char AddRef[4]; /* +0x0004 f1 6f 00 00 */ unsigned char Release[4]; /* +0x0008 f1 6f 00 00 */ }; struct IPSFactoryBuffer { unsigned char lpVtbl[4]; /* +0x0000 f4 6f 00 00 */ }; struct IRpcChannelBuffer { unsigned char lpVtbl[4]; /* +0x0000 f8 6f 00 00 */ }; struct IUnknown { unsigned char lpVtbl[4]; /* +0x0000 ff 6f 00 00 */ }; struct IRpcProxyBuffer { unsigned char lpVtbl[4]; /* +0x0000 03 70 00 00 */ }; struct tagProxyFileInfo { unsigned char pProxyVtblList[4]; /* +0x0000 08 70 00 00 */ unsigned char pStubVtblList[4]; /* +0x0004 0a 70 00 00 */ unsigned char pNamesArray[4]; /* +0x0008 0c 70 00 00 */ unsigned char pDelegatedIIDs[4]; /* +0x000c 0d 70 00 00 */ unsigned char pIIDLookupRtn[4]; /* +0x0010 0e 70 00 00 */ unsigned short TableSize; /* +0x0014 */ unsigned short TableVersion; /* +0x0016 */ unsigned char pAsyncIIDLookup[4]; /* +0x0018 0d 70 00 00 */ long Filler2; /* +0x001c */ long Filler3; /* +0x0020 */ long Filler4; /* +0x0024 */ }; struct tagCInterfaceProxyVtbl { unsigned char header[4]; /* +0x0000 16 70 00 00 */ /* unsigned char Vtbl[0]; +0x0004 17 70 00 00 */ }; struct tagCInterfaceProxyHeader { unsigned char piid[4]; /* +0x0000 0b 17 00 00 */ }; struct tagCInterfaceStubHeader { unsigned char piid[4]; /* +0x0000 0b 17 00 00 */ unsigned char pServerInfo[4]; /* +0x0004 1d 70 00 00 */ unsigned long DispatchTableCount; /* +0x0008 */ unsigned char pDispatchTable[4]; /* +0x000c 1f 70 00 00 */ }; /* struct { /* unsigned char LongFunction[0]; +0x0000 4a 12 00 00 /* unsigned char Persistent[0]; +0x0000 9b 15 00 00 unsigned char Private[4]; +0x0000 9c 15 00 00 }; */ /* struct { unsigned long Flags; +0x0000 unsigned char s[4]; +0x0000 24 70 00 00 }; */ struct _TP_CALLBACK_ENVIRON_V3 { unsigned long Version; /* +0x0000 */ unsigned char Pool[4]; /* +0x0004 bf 31 00 00 */ unsigned char CleanupGroup[4]; /* +0x0008 c0 31 00 00 */ unsigned char CleanupGroupCancelCallback[4]; /* +0x000c c2 31 00 00 */ void *RaceDll; /* +0x0010 */ unsigned char ActivationContext[4]; /* +0x0014 c4 31 00 00 */ unsigned char FinalizationCallback[4]; /* +0x0018 c7 31 00 00 */ unsigned char u[4]; /* +0x001c 26 70 00 00 */ unsigned char CallbackPriority[4]; /* +0x0020 9f 11 00 00 */ unsigned long Size; /* +0x0024 */ }; struct IRpcStubBuffer { unsigned char lpVtbl[4]; /* +0x0000 29 70 00 00 */ }; struct tagRPCOLEMESSAGE { void *reserved1; /* +0x0000 */ unsigned long dataRepresentation; /* +0x0004 */ void *Buffer; /* +0x0008 */ unsigned long cbBuffer; /* +0x000c */ unsigned long iMethod; /* +0x0010 */ unsigned char reserved2[20]; /* +0x0014 2c 70 00 00 */ unsigned long rpcFlags; /* +0x0028 */ }; struct IPSFactoryBufferVtbl { unsigned char QueryInterface[4]; /* +0x0000 33 70 00 00 */ unsigned char AddRef[4]; /* +0x0004 36 70 00 00 */ unsigned char Release[4]; /* +0x0008 36 70 00 00 */ unsigned char CreateProxy[4]; /* +0x000c 3a 70 00 00 */ unsigned char CreateStub[4]; /* +0x0010 3e 70 00 00 */ }; struct IRpcStubBufferVtbl { unsigned char QueryInterface[4]; /* +0x0000 45 70 00 00 */ unsigned char AddRef[4]; /* +0x0004 48 70 00 00 */ unsigned char Release[4]; /* +0x0008 48 70 00 00 */ unsigned char Connect[4]; /* +0x000c 4b 70 00 00 */ unsigned char Disconnect[4]; /* +0x0010 4d 70 00 00 */ unsigned char Invoke[4]; /* +0x0014 50 70 00 00 */ unsigned char IsIIDSupported[4]; /* +0x0018 53 70 00 00 */ unsigned char CountRefs[4]; /* +0x001c 48 70 00 00 */ unsigned char DebugServerQueryInterface[4]; /* +0x0020 56 70 00 00 */ unsigned char DebugServerRelease[4]; /* +0x0024 59 70 00 00 */ }; struct _IMAGE_DOS_HEADER { unsigned short e_magic; /* +0x0000 */ unsigned short e_cblp; /* +0x0002 */ unsigned short e_cp; /* +0x0004 */ unsigned short e_crlc; /* +0x0006 */ unsigned short e_cparhdr; /* +0x0008 */ unsigned short e_minalloc; /* +0x000a */ unsigned short e_maxalloc; /* +0x000c */ unsigned short e_ss; /* +0x000e */ unsigned short e_sp; /* +0x0010 */ unsigned short e_csum; /* +0x0012 */ unsigned short e_ip; /* +0x0014 */ unsigned short e_cs; /* +0x0016 */ unsigned short e_lfarlc; /* +0x0018 */ unsigned short e_ovno; /* +0x001a */ unsigned char e_res[8]; /* +0x001c 72 22 00 00 */ unsigned short e_oemid; /* +0x0024 */ unsigned short e_oeminfo; /* +0x0026 */ unsigned char e_res2[20]; /* +0x0028 71 70 00 00 */ long e_lfanew; /* +0x003c */ }; struct _RTL_CRITICAL_SECTION { unsigned char DebugInfo[4]; /* +0x0000 26 1a 00 00 */ long LockCount; /* +0x0004 */ long RecursionCount; /* +0x0008 */ void *OwningThread; /* +0x000c */ void *LockSemaphore; /* +0x0010 */ unsigned long SpinCount; /* +0x0014 */ }; enum __MIDL_IBackgroundCopyJob_0002 { BG_JOB_STATE_QUEUED = 0, BG_JOB_STATE_CONNECTING = 1, BG_JOB_STATE_TRANSFERRING = 2, BG_JOB_STATE_SUSPENDED = 3, BG_JOB_STATE_ERROR = 4, BG_JOB_STATE_TRANSIENT_ERROR = 5, BG_JOB_STATE_TRANSFERRED = 6, BG_JOB_STATE_ACKNOWLEDGED = 7, BG_JOB_STATE_CANCELLED = 8 }; enum __MIDL_IWindowsStoreSilentInstaller_0001 { WSSI_STORE_NOT_AVAILABLE = 0, WSSI_USER_NOT_A_STORE_USER = 1, WSSI_APP_CANNOT_BE_SILENTLY_INSTALLED = 2, WSSI_APP_NOT_AVAILABLE = 3, WSSI_TRY_AGAIN_LATER = 4, WSSI_APP_ALREADY_INSTALLED = 5, WSSI_APP_INSTALLING = 6 }; enum Windows::Foundation::AsyncStatus { Created = 0, Started = 1, Completed = 2, Canceled = 3, Error = 4 }; enum tagNetworkCostPolicy { networkCostPolicyMin = 0, networkCostPolicyPriorityBased = 0, networkCostPolicyDefault = 0, networkCostPolicyAlways = 1, networkCostPolicyNotRoaming = 2, networkCostPolicyNotRoamingNotCongested = 3, networkCostPolicyNoSurcharge = 4, networkCostPolicyStandard = 5, networkCostPolicyUnrestricted = 6, networkCostPolicyMax = 6 }; enum __MIDL_IBackgroundCopyJob_0004 { BG_JOB_PROXY_USAGE_PRECONFIG = 0, BG_JOB_PROXY_USAGE_NO_PROXY = 1, BG_JOB_PROXY_USAGE_OVERRIDE = 2, BG_JOB_PROXY_USAGE_AUTODETECT = 3 }; enum _JOBOBJECTINFOCLASS { JobObjectBasicAccountingInformation = 1, JobObjectBasicLimitInformation = 2, JobObjectBasicProcessIdList = 3, JobObjectBasicUIRestrictions = 4, JobObjectSecurityLimitInformation = 5, JobObjectEndOfJobTimeInformation = 6, JobObjectAssociateCompletionPortInformation = 7, JobObjectBasicAndIoAccountingInformation = 8, JobObjectExtendedLimitInformation = 9, JobObjectJobSetInformation = 10, JobObjectGroupInformation = 11, JobObjectNotificationLimitInformation = 12, JobObjectLimitViolationInformation = 13, JobObjectGroupInformationEx = 14, JobObjectCpuRateControlInformation = 15, JobObjectCompletionFilter = 16, JobObjectCompletionCounter = 17, JobObjectFreezeInformation = 18, JobObjectExtendedAccountingInformation = 19, JobObjectWakeInformation = 20, JobObjectIdleAwareInformation = 21, JobObjectSchedulingRankBiasInformation = 22, JobObjectTimerVirtualizationInformation = 23, JobObjectCycleTimeNotification = 24, JobObjectReserved1Information = 18, JobObjectReserved2Information = 19, JobObjectReserved3Information = 20, JobObjectReserved4Information = 21, JobObjectReserved5Information = 22, JobObjectReserved6Information = 23, JobObjectReserved7Information = 24, MaxJobObjectInfoClass = 25 }; enum __MIDL_IBackgroundCopyJob_0001 { BG_JOB_PRIORITY_FOREGROUND = 0, BG_JOB_PRIORITY_HIGH = 1, BG_JOB_PRIORITY_NORMAL = 2, BG_JOB_PRIORITY_LOW = 3 }; enum Windows::ApplicationModel::Contacts::ContactFieldType { ContactFieldType_Email = 0, ContactFieldType_PhoneNumber = 1, ContactFieldType_Location = 2, ContactFieldType_InstantMessage = 3, ContactFieldType_Custom = 4 }; enum Windows::ApplicationModel::Contacts::ContactFieldCategory { ContactFieldCategory_None = 0, ContactFieldCategory_Home = 1, ContactFieldCategory_Work = 2, ContactFieldCategory_Mobile = 3, ContactFieldCategory_Other = 4 }; enum Windows::ApplicationModel::Contacts::ContactSelectionMode { ContactSelectionMode_Contacts = 0, ContactSelectionMode_Fields = 1 }; enum Windows::ApplicationModel::Activation::ApplicationExecutionState { ApplicationExecutionState_NotRunning = 0, ApplicationExecutionState_Running = 1, ApplicationExecutionState_Suspended = 2, ApplicationExecutionState_Terminated = 3 }; enum Windows::ApplicationModel::Activation::ActivationKind { ActivationKind_Launch = 0, ActivationKind_Search = 1, ActivationKind_ShareTarget = 2, ActivationKind_SendTarget = 3, ActivationKind_File = 4, ActivationKind_Protocol = 5, ActivationKind_FilePicker = 6, ActivationKind_ContactPicker = 7, ActivationKind_Device = 8, ActivationKind_PrintTaskSettings = 9, ActivationKind_CameraSettings = 10 }; enum Windows::ApplicationModel::Background::BackgroundTaskCancellationReason { BackgroundTaskCancellationReason_Abort = 0, BackgroundTaskCancellationReason_Terminating = 1, BackgroundTaskCancellationReason_LoggingOff = 2, BackgroundTaskCancellationReason_ServicingUpdate = 3 }; enum Windows::Graphics::Imaging::BitmapCodecEnumerationFilter { BitmapCodecEnumerationFilter_None = 0, BitmapCodecEnumerationFilter_WindowsProvided = 1 }; enum Windows::Graphics::Imaging::BitmapRotation { BitmapRotation_None = 0, BitmapRotation_Clockwise90Degrees = 1, BitmapRotation_Clockwise180Degrees = 2, BitmapRotation_Clockwise270Degrees = 3 }; enum Windows::Graphics::Imaging::BitmapFlip { BitmapFlip_None = 0, BitmapFlip_Horizontal = 1, BitmapFlip_Vertical = 2 }; enum Windows::Graphics::Imaging::PngFilterMode { PngFilterMode_Automatic = 0, PngFilterMode_None = 1, PngFilterMode_Sub = 2, PngFilterMode_Up = 3, PngFilterMode_Average = 4, PngFilterMode_Paeth = 5, PngFilterMode_Adaptive = 6 }; enum Windows::Graphics::Imaging::BitmapAlphaMode { BitmapAlphaMode_Premultiplied = 0, BitmapAlphaMode_Straight = 1, BitmapAlphaMode_Ignore = 2 }; enum Windows::Graphics::Imaging::JpegSubsamplingMode { JpegSubsamplingMode_Default = 0, JpegSubsamplingMode_Y4Cb2Cr0 = 1, JpegSubsamplingMode_Y4Cb2Cr2 = 2, JpegSubsamplingMode_Y4Cb4Cr4 = 3 }; enum Windows::Graphics::Imaging::TiffCompressionMode { TiffCompressionMode_Automatic = 0, TiffCompressionMode_None = 1, TiffCompressionMode_Ccitt3 = 2, TiffCompressionMode_Ccitt4 = 3, TiffCompressionMode_Lzw = 4, TiffCompressionMode_Rle = 5, TiffCompressionMode_Zip = 6, TiffCompressionMode_LzwhDifferencing = 7 }; enum Windows::Graphics::Imaging::ColorManagementMode { ColorManagementMode_DoNotColorManage = 0, ColorManagementMode_ColorManageToSRgb = 1 }; enum Windows::Graphics::Display::ResolutionScale { ResolutionScale_Scale100Percent = 0, ResolutionScale_Scale140Percent = 1, ResolutionScale_Scale180Percent = 2 }; enum Windows::Devices::Input::PointerDeviceType { PointerDeviceType_Touch = 0, PointerDeviceType_Pen = 1, PointerDeviceType_Mouse = 2 }; enum Windows::Foundation::PropertyType { PropertyType_Empty = 0, PropertyType_UInt8 = 1, PropertyType_Int16 = 2, PropertyType_UInt16 = 3, PropertyType_Int32 = 4, PropertyType_UInt32 = 5, PropertyType_Int64 = 6, PropertyType_UInt64 = 7, PropertyType_Single = 8, PropertyType_Double = 9, PropertyType_Char16 = 10, PropertyType_Boolean = 11, PropertyType_String = 12, PropertyType_Inspectable = 13, PropertyType_DateTime = 14, PropertyType_TimeSpan = 15, PropertyType_Guid = 16, PropertyType_Point = 17, PropertyType_Size = 18, PropertyType_Rect = 19, PropertyType_OtherType = 20, PropertyType_UInt8Array = 1025, PropertyType_Int16Array = 1026, PropertyType_UInt16Array = 1027, PropertyType_Int32Array = 1028, PropertyType_UInt32Array = 1029, PropertyType_Int64Array = 1030, PropertyType_UInt64Array = 1031, PropertyType_SingleArray = 1032, PropertyType_DoubleArray = 1033, PropertyType_Char16Array = 1034, PropertyType_BooleanArray = 1035, PropertyType_StringArray = 1036, PropertyType_InspectableArray = 1037, PropertyType_DateTimeArray = 1038, PropertyType_TimeSpanArray = 1039, PropertyType_GuidArray = 1040, PropertyType_PointArray = 1041, PropertyType_SizeArray = 1042, PropertyType_RectArray = 1043, PropertyType_OtherTypeArray = 1044 }; enum Windows::Storage::StorageDeleteOption { StorageDeleteOption_LocationBasedRecycleBinBehavior = 0, StorageDeleteOption_TryMoveToRecycleBin = 1, StorageDeleteOption_PermanentDelete = 2 }; enum Windows::Storage::CreationCollisionOption { CreationCollisionOption_GenerateUniqueName = 0, CreationCollisionOption_ReplaceExisting = 1, CreationCollisionOption_FailIfExists = 2, CreationCollisionOption_OpenIfExists = 3 }; enum Windows::Storage::NameCollisionOption { NameCollisionOption_GenerateUniqueName = 0, NameCollisionOption_ReplaceExisting = 1, NameCollisionOption_FailIfExists = 2 }; enum Windows::Storage::FileProperties::ThumbnailMode { ThumbnailMode_PicturesView = 0, ThumbnailMode_VideosView = 1, ThumbnailMode_MusicView = 2, ThumbnailMode_DocumentsView = 3, ThumbnailMode_ListView = 4, ThumbnailMode_SingleItem = 5 }; enum Windows::Storage::FileAccessMode { FileAccessMode_Read = 0, FileAccessMode_ReadWrite = 1, FileAccessMode_ReadWriteUnsafe = 2, FileAccessMode_ReadWriteNoCopyOnWrite = 3 }; enum Windows::Storage::ApplicationDataLocality { ApplicationDataLocality_Local = 0, ApplicationDataLocality_Roaming = 1, ApplicationDataLocality_Temporary = 2 }; enum Windows::Storage::Search::IndexedState { IndexedState_Unknown = 0, IndexedState_NotIndexed = 1, IndexedState_PartiallyIndexed = 2, IndexedState_FullyIndexed = 3 }; enum Windows::Storage::Search::FolderDepth { FolderDepth_Shallow = 0, FolderDepth_Deep = 1 }; enum Windows::Storage::Search::CommonFolderQuery { CommonFolderQuery_DefaultQuery = 0, CommonFolderQuery_GroupByYear = 1, CommonFolderQuery_GroupByMonth = 2, CommonFolderQuery_GroupByArtist = 3, CommonFolderQuery_GroupByAlbum = 4, CommonFolderQuery_GroupByAlbumArtist = 5, CommonFolderQuery_GroupByComposer = 6, CommonFolderQuery_GroupByGenre = 7, CommonFolderQuery_GroupByPublishedYear = 8, CommonFolderQuery_GroupByRating = 9, CommonFolderQuery_GroupByTag = 10, CommonFolderQuery_GroupByAuthor = 11, CommonFolderQuery_GroupByType = 12 }; enum Windows::Storage::Pickers::Provider::AddFileToBasketResult { AddFileToBasketResult_AddedToBasket = 0, AddFileToBasketResult_AlreadyInBasket = 1, AddFileToBasketResult_NotAllowedInBasket = 2, AddFileToBasketResult_BasketUnavailable = 3 }; enum Windows::Storage::Pickers::PickerLocationId { PickerLocationId_DocumentsLibrary = 0, PickerLocationId_ComputerFolder = 1, PickerLocationId_Desktop = 2, PickerLocationId_Downloads = 3, PickerLocationId_HomeGroup = 4, PickerLocationId_MusicLibrary = 5, PickerLocationId_PicturesLibrary = 6, PickerLocationId_VideosLibrary = 7 }; enum __MIDL_IBackgroundCopyJob2_0002 { BG_AUTH_SCHEME_BASIC = 1, BG_AUTH_SCHEME_DIGEST = 2, BG_AUTH_SCHEME_NTLM = 3, BG_AUTH_SCHEME_NEGOTIATE = 4, BG_AUTH_SCHEME_PASSPORT = 5 }; enum __MIDL_IBackgroundCopyJobHttpOptions_0001 { BG_CERT_STORE_LOCATION_CURRENT_USER = 0, BG_CERT_STORE_LOCATION_LOCAL_MACHINE = 1, BG_CERT_STORE_LOCATION_CURRENT_SERVICE = 2, BG_CERT_STORE_LOCATION_SERVICES = 3, BG_CERT_STORE_LOCATION_USERS = 4, BG_CERT_STORE_LOCATION_CURRENT_USER_GROUP_POLICY = 5, BG_CERT_STORE_LOCATION_LOCAL_MACHINE_GROUP_POLICY = 6, BG_CERT_STORE_LOCATION_LOCAL_MACHINE_ENTERPRISE = 7 }; enum Microsoft::WRL::RuntimeClassType { WinRt = 1, ClassicCom = 2, WinRtClassicComMix = 3, InhibitWeakReference = 4, Delegate = 2 }; enum tagUpdateExceptionContext { uecGeneral = 1, uecWindowsDriver = 2, uecWindowsInstaller = 3 }; enum tagInstallationImpact { iiNormal = 0, iiMinor = 1, iiRequiresExclusiveHandling = 2 }; enum tagUpdateOperation { uoInstallation = 1, uoUninstallation = 2 }; enum tagInstallationRebootBehavior { irbNeverReboots = 0, irbAlwaysRequiresReboot = 1, irbCanRequestReboot = 2 }; enum tagOperationResultCode { orcNotStarted = 0, orcInProgress = 1, orcSucceeded = 2, orcSucceededWithErrors = 3, orcFailed = 4, orcAborted = 5 }; enum tagServerSelection { ssDefault = 0, ssManagedServer = 1, ssWindowsUpdate = 2, ssOthers = 3 }; enum tagDownloadPhase { dphInitializing = 1, dphDownloading = 2, dphVerifying = 3 }; enum tagDeploymentAction { daNone = 0, daInstallation = 1, daUninstallation = 2, daDetection = 3 }; enum tagDownloadPriority { dpLow = 1, dpNormal = 2, dpHigh = 3, dpExtraHigh = 4 }; enum tagUpdateType { utSoftware = 1, utDriver = 2 }; struct tagPARAMDESC { unsigned char pparamdescex[4]; /* +0x0000 f2 72 00 00 */ unsigned short wParamFlags; /* +0x0004 */ }; struct tagBINDPTR { /* unsigned char lpfuncdesc[0]; +0x0000 a9 2c 00 00 */ /* unsigned char lpvardesc[0]; +0x0000 72 25 00 00 */ unsigned char lptcomp[4]; /* +0x0000 aa 20 00 00 */ }; struct _RTL_RUN_ONCE { void *Ptr; /* +0x0000 */ unsigned long Value; /* +0x0000 */ unsigned char State[4]; /* +0x0000 5d 2a 00 00 */ }; struct _CURDIR { unsigned char DosPath[8]; /* +0x0000 7c 3b 00 00 */ void *Handle; /* +0x0008 */ }; struct tagELEMDESC { unsigned char tdesc[8]; /* +0x0000 b8 2c 00 00 */ /* unsigned char idldesc[0]; +0x0008 be 2c 00 00 */ unsigned char paramdesc[8]; /* +0x0008 24 38 00 00 */ }; struct _IMAGE_DATA_DIRECTORY { unsigned long VirtualAddress; /* +0x0000 */ unsigned long Size; /* +0x0004 */ }; struct tagSAFEARRAYBOUND { unsigned long cElements; /* +0x0000 */ long lLbound; /* +0x0004 */ }; struct _MCGEN_TRACE_CONTEXT { unsigned long long RegistrationHandle; /* +0x0000 */ unsigned long long Logger; /* +0x0008 */ unsigned long long MatchAnyKeyword; /* +0x0010 */ unsigned long long MatchAllKeyword; /* +0x0018 */ unsigned long Flags; /* +0x0020 */ unsigned long IsEnabled; /* +0x0024 */ unsigned char Level; /* +0x0028 */ unsigned char Reserve; /* +0x0029 */ unsigned short EnableBitsCount; /* +0x002a */ unsigned long *EnableBitMask; /* +0x002c */ unsigned char EnableKeyWords[4]; /* +0x0030 99 73 00 00 */ unsigned char EnableLevel[4]; /* +0x0034 aa 19 00 00 */ }; struct __MIDL_IInstallControl_0004 { unsigned char state[4]; /* +0x0000 1a 4c 00 00 */ unsigned char pd[12]; /* +0x0004 9c 73 00 00 */ }; struct tagTYPEDESC { /* unsigned char lptdesc[0]; +0x0000 b9 2c 00 00 */ /* unsigned char lpadesc[0]; +0x0000 a0 73 00 00 */ unsigned long hreftype; /* +0x0000 */ unsigned short vt; /* +0x0004 */ }; struct __MIDL___MIDL_itf_internal_0000_0001_0001 { unsigned char pszPRAID[4]; /* +0x0000 71 04 00 00 */ unsigned char pszDisplayName[4]; /* +0x0004 71 04 00 00 */ unsigned char pszShortName[4]; /* +0x0008 71 04 00 00 */ unsigned char pszSmallIconPath[4]; /* +0x000c 71 04 00 00 */ unsigned char pszLocalSmallIconPath[4]; /* +0x0010 71 04 00 00 */ unsigned char pszTilePath[4]; /* +0x0014 71 04 00 00 */ unsigned char pszLocalTilePath[4]; /* +0x0018 71 04 00 00 */ long lTileSize; /* +0x001c */ unsigned char pszBgColor[4]; /* +0x0020 71 04 00 00 */ unsigned char pszFgColor[4]; /* +0x0024 71 04 00 00 */ }; struct _RTL_DRIVE_LETTER_CURDIR { unsigned short Flags; /* +0x0000 */ unsigned short Length; /* +0x0002 */ unsigned long TimeStamp; /* +0x0004 */ unsigned char DosPath[8]; /* +0x0008 92 3f 00 00 */ }; struct tagFUNCDESC { long memid; /* +0x0000 */ long *lprgscode; /* +0x0004 */ unsigned char lprgelemdescParam[4]; /* +0x0008 c9 18 00 00 */ unsigned char funckind[4]; /* +0x000c eb 10 00 00 */ unsigned char invkind[4]; /* +0x0010 39 11 00 00 */ unsigned char callconv[4]; /* +0x0014 95 10 00 00 */ short cParams; /* +0x0018 */ short cParamsOpt; /* +0x001a */ short oVft; /* +0x001c */ short cScodes; /* +0x001e */ unsigned char elemdescFunc[16]; /* +0x0020 c8 18 00 00 */ unsigned short wFuncFlags; /* +0x0030 */ }; struct tagIDLDESC { unsigned long dwReserved; /* +0x0000 */ unsigned short wIDLFlags; /* +0x0004 */ }; struct _RTL_SPLAY_LINKS { unsigned char Parent[4]; /* +0x0000 5c 5e 00 00 */ unsigned char LeftChild[4]; /* +0x0004 5c 5e 00 00 */ unsigned char RightChild[4]; /* +0x0008 5c 5e 00 00 */ }; struct __MIDL_IWinStoreBroker_0001 { unsigned char AppId[16]; /* +0x0000 ce 13 00 00 */ unsigned long cAppUpdates; /* +0x0010 */ }; struct _EXCEPTION_RECORD { long ExceptionCode; /* +0x0000 */ unsigned long ExceptionFlags; /* +0x0004 */ unsigned char ExceptionRecord[4]; /* +0x0008 7d 1e 00 00 */ void *ExceptionAddress; /* +0x000c */ unsigned long NumberParameters; /* +0x0010 */ unsigned char ExceptionInformation[60]; /* +0x0014 3e 1d 00 00 */ }; struct TOffset { unsigned char off[4]; /* +0x0000 75 00 00 00 */ }; struct _RTL_DYNAMIC_HASH_TABLE_ENTRY { unsigned char Linkage[8]; /* +0x0000 f7 19 00 00 */ unsigned long Signature; /* +0x0008 */ }; struct Microsoft::WRL::Details::CreatorMap { unsigned char factoryCreator[20]; /* +0x0000 b1 75 00 00 */ }; struct Microsoft::WRL::Details::CreatorMap:: { /* unsigned char clsid[0]; +0x0000 0b 17 00 00 */ unsigned char getRuntimeName[4]; /* +0x0000 12 17 00 00 */ }; struct Microsoft::WRL::Details::FactoryCache { unsigned char factory[8]; /* +0x0000 2b 15 00 00 */ }; struct Microsoft::WRL::Details::FactoryCache:: { /* unsigned char winrt[0]; +0x0000 ab 3d 00 00 */ unsigned long com; /* +0x0000 */ }; struct Microsoft::WRL::Details::BoolStruct { unsigned char Member[4]; /* +0x0000 74 00 00 00 */ }; struct _POINTL { long x; /* +0x0000 */ long y; /* +0x0004 */ }; struct TRgOffset { unsigned long cItems; /* +0x0000 */ unsigned char offrg[4]; /* +0x0004 75 00 00 00 */ }; struct ProductTileList { unsigned long cTotalTiles; /* +0x0000 */ unsigned long uPageSize; /* +0x0004 */ unsigned long uPageNum; /* +0x0008 */ }; struct tagCADBL { unsigned long cElems; /* +0x0000 */ unsigned char pElems[4]; /* +0x0004 41 04 00 00 */ }; struct _EVENT_DESCRIPTOR { unsigned short Id; /* +0x0000 */ unsigned char Version; /* +0x0002 */ unsigned char Channel; /* +0x0003 */ unsigned char Level; /* +0x0004 */ unsigned char Opcode; /* +0x0005 */ unsigned short Task; /* +0x0006 */ unsigned long long Keyword; /* +0x0008 */ }; struct tagBIND_OPTS { unsigned long cbStruct; /* +0x0000 */ unsigned long grfFlags; /* +0x0004 */ unsigned long grfMode; /* +0x0008 */ unsigned long dwTickCountDeadline; /* +0x000c */ }; struct tagCAUB { unsigned long cElems; /* +0x0000 */ unsigned char *pElems; /* +0x0004 */ }; struct _SYSTEM_INFO { unsigned long dwOemId; /* +0x0000 */ unsigned short wProcessorArchitecture; /* +0x0000 */ unsigned short wReserved; /* +0x0002 */ unsigned long dwPageSize; /* +0x0004 */ void *lpMinimumApplicationAddress; /* +0x0008 */ void *lpMaximumApplicationAddress; /* +0x000c */ unsigned long dwActiveProcessorMask; /* +0x0010 */ unsigned long dwNumberOfProcessors; /* +0x0014 */ unsigned long dwProcessorType; /* +0x0018 */ unsigned long dwAllocationGranularity; /* +0x001c */ unsigned short wProcessorLevel; /* +0x0020 */ unsigned short wProcessorRevision; /* +0x0022 */ }; struct tagCACY { unsigned long cElems; /* +0x0000 */ unsigned char pElems[4]; /* +0x0004 b7 2a 00 00 */ }; struct LIST_ENTRY32 { unsigned long Flink; /* +0x0000 */ unsigned long Blink; /* +0x0004 */ }; struct _DLLVERSIONINFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwMajorVersion; /* +0x0004 */ unsigned long dwMinorVersion; /* +0x0008 */ unsigned long dwBuildNumber; /* +0x000c */ unsigned long dwPlatformID; /* +0x0010 */ }; struct ATL::CExpansionVector::EXPANDER { unsigned char szKey[4]; /* +0x0000 71 04 00 00 */ unsigned char szValue[4]; /* +0x0004 71 04 00 00 */ }; struct ATL::_ATL_REGMAP_ENTRY { unsigned char szKey[4]; /* +0x0000 4f 13 00 00 */ unsigned char szData[4]; /* +0x0004 4f 13 00 00 */ }; struct ATL::_AtlCreateWndData { void *m_pThis; /* +0x0000 */ unsigned long m_dwThreadID; /* +0x0004 */ unsigned char m_pNext[4]; /* +0x0008 23 17 00 00 */ }; struct ATL::_ATL_CATMAP_ENTRY { unsigned char iType[4]; /* +0x0000 74 00 00 00 */ unsigned char pcatid[4]; /* +0x0004 0b 17 00 00 */ }; struct ATL::_ATL_TERMFUNC_ELEM { unsigned char pFunc[4]; /* +0x0000 3c 16 00 00 */ unsigned long dw; /* +0x0004 */ unsigned char pNext[4]; /* +0x0008 25 17 00 00 */ }; struct ATL::_ATL_SAFE_ALLOCA_IMPL::CAtlSafeAllocBufferManager::CAtlSafeAllocBufferNode { unsigned char m_pNext[4]; /* +0x0000 d9 78 00 00 */ unsigned char _pad[4]; /* +0x0004 ae 14 00 00 */ }; struct ATL::_AtlAptCreateObjData { unsigned char pfnCreateInstance[4]; /* +0x0000 10 17 00 00 */ unsigned char piid[4]; /* +0x0004 0b 17 00 00 */ void *hEvent; /* +0x0008 */ unsigned char pStream[4]; /* +0x000c 40 18 00 00 */ unsigned char hRes[4]; /* +0x0010 08 00 00 00 */ }; struct ATL::CRegParser::CParseBuffer { unsigned char nPos[4]; /* +0x0000 74 00 00 00 */ unsigned char nSize[4]; /* +0x0004 74 00 00 00 */ unsigned char p[4]; /* +0x0008 71 04 00 00 */ }; struct ATL::CComBSTR { unsigned char m_str[4]; /* +0x0000 71 04 00 00 */ }; struct ATL::_ATL_INTMAP_ENTRY { unsigned char piid[4]; /* +0x0000 0b 17 00 00 */ unsigned long dw; /* +0x0004 */ unsigned char pFunc[4]; /* +0x0008 ff 7a 00 00 */ }; struct ATL::_stdcallthunk { unsigned long m_mov; /* +0x0000 */ unsigned long m_this; /* +0x0004 */ unsigned char m_jmp; /* +0x0008 */ unsigned long m_relproc; /* +0x0009 */ }; struct _MEMORY_BASIC_INFORMATION { void *BaseAddress; /* +0x0000 */ void *AllocationBase; /* +0x0004 */ unsigned long AllocationProtect; /* +0x0008 */ unsigned long RegionSize; /* +0x000c */ unsigned long State; /* +0x0010 */ unsigned long Protect; /* +0x0014 */ unsigned long Type; /* +0x0018 */ }; struct _RTL_SRWLOCK { /* unsigned char Locked[0]; +0x0000 4a 12 00 00 */ /* unsigned char Waiting[0]; +0x0000 9b 15 00 00 */ /* unsigned char Waking[0]; +0x0000 68 18 00 00 */ /* unsigned char MultipleShared[0]; +0x0000 69 18 00 00 */ /* unsigned char Shared[0]; +0x0000 55 30 00 00 */ unsigned long Value; /* +0x0000 */ void *Ptr; /* +0x0000 */ }; struct tagEXCEPINFO { unsigned short wCode; /* +0x0000 */ unsigned short wReserved; /* +0x0002 */ unsigned char bstrSource[4]; /* +0x0004 71 04 00 00 */ unsigned char bstrDescription[4]; /* +0x0008 71 04 00 00 */ unsigned char bstrHelpFile[4]; /* +0x000c 71 04 00 00 */ unsigned long dwHelpContext; /* +0x0010 */ void *pvReserved; /* +0x0014 */ unsigned char pfnDeferredFillIn[4]; /* +0x0018 bd 7b 00 00 */ long scode; /* +0x001c */ }; struct tagVARDESC { long memid; /* +0x0000 */ unsigned char lpstrSchema[4]; /* +0x0004 71 04 00 00 */ unsigned long oInst; /* +0x0008 */ unsigned char lpvarValue[4]; /* +0x0008 a3 17 00 00 */ unsigned char elemdescVar[16]; /* +0x000c c8 18 00 00 */ unsigned short wVarFlags; /* +0x001c */ unsigned char varkind[4]; /* +0x0020 a9 10 00 00 */ }; struct DefaultPI { unsigned char fSuccess[4]; /* +0x0000 30 00 00 00 */ unsigned long ulErrorCode; /* +0x0004 */ }; enum __MIDL_IBackgroundCopyJob_0003 { BG_JOB_TYPE_DOWNLOAD = 0, BG_JOB_TYPE_UPLOAD = 1, BG_JOB_TYPE_UPLOAD_REPLY = 2 }; struct tagDEC { unsigned short wReserved; /* +0x0000 */ unsigned char scale; /* +0x0002 */ unsigned char sign; /* +0x0003 */ unsigned short signscale; /* +0x0002 */ unsigned long Hi32; /* +0x0004 */ unsigned long Lo32; /* +0x0008 */ unsigned long Mid32; /* +0x000c */ unsigned long long Lo64; /* +0x0008 */ }; struct _CLIENT_ID { void *UniqueProcess; /* +0x0000 */ void *UniqueThread; /* +0x0004 */ }; struct tagBSTRBLOB { unsigned long cbSize; /* +0x0000 */ unsigned char *pData; /* +0x0004 */ }; struct tagCAH { unsigned long cElems; /* +0x0000 */ unsigned char pElems[4]; /* +0x0004 dc 13 00 00 */ }; struct _PROCESSOR_NUMBER { unsigned short Group; /* +0x0000 */ unsigned char Number; /* +0x0002 */ unsigned char Reserved; /* +0x0003 */ }; struct TRgOffset { unsigned long cItems; /* +0x0000 */ unsigned char offrg[4]; /* +0x0004 75 00 00 00 */ }; struct tagCAUI { unsigned long cElems; /* +0x0000 */ unsigned short *pElems; /* +0x0004 */ }; struct Subcategory { unsigned long uId; /* +0x0000 */ }; struct tagCAFILETIME { unsigned long cElems; /* +0x0000 */ unsigned char pElems[4]; /* +0x0004 d7 3f 00 00 */ }; struct _IMAGE_FILE_HEADER { unsigned short Machine; /* +0x0000 */ unsigned short NumberOfSections; /* +0x0002 */ unsigned long TimeDateStamp; /* +0x0004 */ unsigned long PointerToSymbolTable; /* +0x0008 */ unsigned long NumberOfSymbols; /* +0x000c */ unsigned short SizeOfOptionalHeader; /* +0x0010 */ unsigned short Characteristics; /* +0x0012 */ }; struct _XSTATE_FEATURE { unsigned long Offset; /* +0x0000 */ unsigned long Size; /* +0x0004 */ }; struct tagDISPPARAMS { unsigned char rgvarg[4]; /* +0x0000 a3 17 00 00 */ long *rgdispidNamedArgs; /* +0x0004 */ unsigned char cArgs[4]; /* +0x0008 75 00 00 00 */ unsigned char cNamedArgs[4]; /* +0x000c 75 00 00 00 */ }; struct tagSAFEARRAY { unsigned short cDims; /* +0x0000 */ unsigned short fFeatures; /* +0x0002 */ unsigned long cbElements; /* +0x0004 */ unsigned long cLocks; /* +0x0008 */ void *pvData; /* +0x000c */ unsigned char rgsabound[8]; /* +0x0010 6f 1b 00 00 */ }; struct _KSYSTEM_TIME { unsigned long LowPart; /* +0x0000 */ long High1Time; /* +0x0004 */ long High2Time; /* +0x0008 */ }; struct tagPROPVARIANT { unsigned short vt; /* +0x0000 */ unsigned short wReserved1; /* +0x0002 */ unsigned short wReserved2; /* +0x0004 */ unsigned short wReserved3; /* +0x0006 */ char cVal; /* +0x0008 */ unsigned char bVal; /* +0x0008 */ short iVal; /* +0x0008 */ unsigned short uiVal; /* +0x0008 */ long lVal; /* +0x0008 */ unsigned long ulVal; /* +0x0008 */ /* unsigned char intVal[0]; +0x0008 74 00 00 00 */ /* unsigned char uintVal[0]; +0x0008 75 00 00 00 */ /* unsigned char hVal[0]; +0x0008 db 13 00 00 */ /* unsigned char uhVal[0]; +0x0008 5e 20 00 00 */ /* unsigned char fltVal[0]; +0x0008 40 00 00 00 */ /* unsigned char dblVal[0]; +0x0008 41 00 00 00 */ short boolVal; /* +0x0008 */ long scode; /* +0x0008 */ /* unsigned char cyVal[0]; +0x0008 b6 2a 00 00 */ /* unsigned char date[0]; +0x0008 41 00 00 00 */ /* unsigned char filetime[0]; +0x0008 91 14 00 00 */ /* unsigned char puuid[0]; +0x0008 78 15 00 00 */ /* unsigned char pclipdata[0]; +0x0008 b9 7c 00 00 */ /* unsigned char bstrVal[0]; +0x0008 71 04 00 00 */ /* unsigned char bstrblobVal[0]; +0x0008 e8 24 00 00 */ /* unsigned char blob[0]; +0x0008 bc 22 00 00 */ char *pszVal; /* +0x0008 */ /* unsigned char pwszVal[0]; +0x0008 71 04 00 00 */ /* unsigned char punkVal[0]; +0x0008 2b 15 00 00 */ /* unsigned char pdispVal[0]; +0x0008 7b 1f 00 00 */ /* unsigned char pStream[0]; +0x0008 40 18 00 00 */ /* unsigned char pStorage[0]; +0x0008 ae 13 00 00 */ /* unsigned char pVersionedStream[0]; +0x0008 bb 7c 00 00 */ /* unsigned char parray[0]; +0x0008 bd 7c 00 00 */ /* unsigned char cac[0]; +0x0008 be 7c 00 00 */ /* unsigned char caub[0]; +0x0008 bf 7c 00 00 */ /* unsigned char cai[0]; +0x0008 c0 7c 00 00 */ /* unsigned char caui[0]; +0x0008 c1 7c 00 00 */ /* unsigned char cal[0]; +0x0008 c2 7c 00 00 */ /* unsigned char caul[0]; +0x0008 c3 7c 00 00 */ /* unsigned char cah[0]; +0x0008 c4 7c 00 00 */ /* unsigned char cauh[0]; +0x0008 c5 7c 00 00 */ /* unsigned char caflt[0]; +0x0008 c6 7c 00 00 */ /* unsigned char cadbl[0]; +0x0008 c7 7c 00 00 */ /* unsigned char cabool[0]; +0x0008 c8 7c 00 00 */ /* unsigned char cascode[0]; +0x0008 c9 7c 00 00 */ /* unsigned char cacy[0]; +0x0008 ca 7c 00 00 */ /* unsigned char cadate[0]; +0x0008 cb 7c 00 00 */ /* unsigned char cafiletime[0]; +0x0008 cc 7c 00 00 */ /* unsigned char cauuid[0]; +0x0008 cd 7c 00 00 */ /* unsigned char caclipdata[0]; +0x0008 ce 7c 00 00 */ /* unsigned char cabstr[0]; +0x0008 cf 7c 00 00 */ /* unsigned char cabstrblob[0]; +0x0008 d0 7c 00 00 */ /* unsigned char calpstr[0]; +0x0008 d1 7c 00 00 */ /* unsigned char calpwstr[0]; +0x0008 d2 7c 00 00 */ /* unsigned char capropvar[0]; +0x0008 d3 7c 00 00 */ char *pcVal; /* +0x0008 */ unsigned char *pbVal; /* +0x0008 */ short *piVal; /* +0x0008 */ unsigned short *puiVal; /* +0x0008 */ long *plVal; /* +0x0008 */ unsigned long *pulVal; /* +0x0008 */ /* unsigned char pintVal[0]; +0x0008 74 04 00 00 */ /* unsigned char puintVal[0]; +0x0008 75 04 00 00 */ /* unsigned char pfltVal[0]; +0x0008 40 04 00 00 */ /* unsigned char pdblVal[0]; +0x0008 41 04 00 00 */ short *pboolVal; /* +0x0008 */ /* unsigned char pdecVal[0]; +0x0008 56 18 00 00 */ long *pscode; /* +0x0008 */ /* unsigned char pcyVal[0]; +0x0008 b7 2a 00 00 */ /* unsigned char pdate[0]; +0x0008 41 04 00 00 */ /* unsigned char pbstrVal[0]; +0x0008 d1 12 00 00 */ /* unsigned char ppunkVal[0]; +0x0008 f2 19 00 00 */ /* unsigned char ppdispVal[0]; +0x0008 8b 1f 00 00 */ /* unsigned char pparray[0]; +0x0008 d4 7c 00 00 */ /* unsigned char pvarVal[-8]; +0x0008 cd 16 00 00 */ unsigned char decVal[16]; /* +0x0000 55 18 00 00 */ }; struct _LIST_ENTRY { unsigned char Flink[4]; /* +0x0000 f7 36 00 00 */ unsigned char Blink[4]; /* +0x0004 f7 36 00 00 */ }; struct _GDI_TEB_BATCH { unsigned long Offset; /* +0x0000 */ unsigned long HDC; /* +0x0004 */ unsigned char Buffer[1240]; /* +0x0008 ee 7c 00 00 */ }; struct tagCAPROPVARIANT { unsigned long cElems; /* +0x0000 */ unsigned char pElems[4]; /* +0x0004 cd 16 00 00 */ }; struct __m128 { /* unsigned char m128_f32[0]; +0x0000 0c 7d 00 00 */ /* unsigned char m128_u64[0]; +0x0000 b7 1a 00 00 */ /* unsigned char m128_i8[0]; +0x0000 e4 5b 00 00 */ /* unsigned char m128_i16[0]; +0x0000 e5 5b 00 00 */ /* unsigned char m128_i32[0]; +0x0000 2b 46 00 00 */ /* unsigned char m128_i64[0]; +0x0000 e6 5b 00 00 */ /* unsigned char m128_u8[0]; +0x0000 d3 19 00 00 */ /* unsigned char m128_u16[0]; +0x0000 e7 5b 00 00 */ unsigned char m128_u32[16]; /* +0x0000 e8 5b 00 00 */ }; struct tagCLIPDATA { unsigned long cbSize; /* +0x0000 */ long ulClipFmt; /* +0x0004 */ unsigned char *pClipData; /* +0x0008 */ }; struct tagCAC { unsigned long cElems; /* +0x0000 */ char *pElems; /* +0x0004 */ }; enum PURCHASE_STATE { PS_NOT_STARTED = 0, PS_IN_CREATE_TRANSACTION = 1, PS_IN_CONFIRM_PURCHASE = 2, PS_IN_ACQUIRE_LICENSE = 3, PS_PURCHASE_COMPLETE = 4, PS_ERROR = 5, PS_DOWNLOAD_STARTED = 6, PS_IN_DOWNLOAD_IMAGES = 7 }; struct tagTYPEATTR { unsigned char guid[16]; /* +0x0000 ce 13 00 00 */ unsigned long lcid; /* +0x0010 */ unsigned long dwReserved; /* +0x0014 */ long memidConstructor; /* +0x0018 */ long memidDestructor; /* +0x001c */ unsigned char lpstrSchema[4]; /* +0x0020 71 04 00 00 */ unsigned long cbSizeInstance; /* +0x0024 */ unsigned char typekind[4]; /* +0x0028 5b 10 00 00 */ unsigned short cFuncs; /* +0x002c */ unsigned short cVars; /* +0x002e */ unsigned short cImplTypes; /* +0x0030 */ unsigned short cbSizeVft; /* +0x0032 */ unsigned short cbAlignment; /* +0x0034 */ unsigned short wTypeFlags; /* +0x0036 */ unsigned short wMajorVerNum; /* +0x0038 */ unsigned short wMinorVerNum; /* +0x003a */ unsigned char tdescAlias[8]; /* +0x003c b8 2c 00 00 */ unsigned char idldescType[8]; /* +0x0044 be 2c 00 00 */ }; enum __MIDL_IBackgroundCopyJob2_0001 { BG_AUTH_TARGET_SERVER = 1, BG_AUTH_TARGET_PROXY = 2 }; struct tagBLOB { unsigned long cbSize; /* +0x0000 */ unsigned char *pBlobData; /* +0x0004 */ }; struct _LARGE_INTEGER:: { unsigned long LowPart; /* +0x0000 */ long HighPart; /* +0x0004 */ }; struct tagCATEGORYINFO { unsigned char catid[16]; /* +0x0000 ce 13 00 00 */ unsigned long lcid; /* +0x0010 */ unsigned char szDescription[256]; /* +0x0014 7e 13 00 00 */ }; struct _KUSER_SHARED_DATA { unsigned long TickCountLowDeprecated; /* +0x0000 */ unsigned long TickCountMultiplier; /* +0x0004 */ unsigned char InterruptTime[12]; /* +0x0008 e0 7d 00 00 */ unsigned char SystemTime[12]; /* +0x0014 e0 7d 00 00 */ unsigned char TimeZoneBias[12]; /* +0x0020 e0 7d 00 00 */ unsigned short ImageNumberLow; /* +0x002c */ unsigned short ImageNumberHigh; /* +0x002e */ unsigned char NtSystemRoot[520]; /* +0x0030 a8 13 00 00 */ unsigned long MaxStackTraceDepth; /* +0x0238 */ unsigned long CryptoExponent; /* +0x023c */ unsigned long TimeZoneId; /* +0x0240 */ unsigned long LargePageMinimum; /* +0x0244 */ unsigned long AitSamplingValue; /* +0x0248 */ unsigned long AppCompatFlag; /* +0x024c */ unsigned long long RNGSeedVersion; /* +0x0250 */ unsigned long GlobalValidationRunlevel; /* +0x0258 */ unsigned char Reserved2[8]; /* +0x025c c3 15 00 00 */ unsigned char NtProductType[4]; /* +0x0264 b5 39 00 00 */ unsigned char ProductTypeIsValid; /* +0x0268 */ unsigned char Reserved0[1]; /* +0x0269 04 12 00 00 */ unsigned short NativeProcessorArchitecture; /* +0x026a */ unsigned long NtMajorVersion; /* +0x026c */ unsigned long NtMinorVersion; /* +0x0270 */ unsigned char ProcessorFeatures[64]; /* +0x0274 ac 14 00 00 */ unsigned long Reserved1; /* +0x02b4 */ unsigned long Reserved3; /* +0x02b8 */ unsigned char TimeSlip[4]; /* +0x02bc 53 3f 00 00 */ unsigned char AlternativeArchitecture[4]; /* +0x02c0 99 3a 00 00 */ unsigned char AltArchitecturePad[4]; /* +0x02c4 01 12 00 00 */ unsigned char SystemExpirationDate[8]; /* +0x02c8 db 13 00 00 */ unsigned long SuiteMask; /* +0x02d0 */ unsigned char KdDebuggerEnabled; /* +0x02d4 */ unsigned char MitigationPolicies; /* +0x02d5 */ /* unsigned char NXSupportPolicy[0]; +0x02d5 b1 43 00 00 */ /* unsigned char SEHValidationPolicy[0]; +0x02d5 b2 43 00 00 */ /* unsigned char CurDirDevicesSkippedForDlls[0]; +0x02d5 b3 43 00 00 */ unsigned char Reserved[1]; /* +0x02d5 b4 43 00 00 */ unsigned char Reserved6[2]; /* +0x02d6 9c 14 00 00 */ unsigned char ActiveConsoleId[4]; /* +0x02d8 53 3f 00 00 */ unsigned char DismountCount[4]; /* +0x02dc 53 3f 00 00 */ unsigned long ComPlusPackage; /* +0x02e0 */ unsigned long LastSystemRITEventTickCount; /* +0x02e4 */ unsigned long NumberOfPhysicalPages; /* +0x02e8 */ unsigned char SafeBootMode; /* +0x02ec */ unsigned char Reserved12[3]; /* +0x02ed 49 12 00 00 */ unsigned long SharedDataFlags; /* +0x02f0 */ /* unsigned char DbgErrorPortPresent[0]; +0x02f0 4a 12 00 00 */ /* unsigned char DbgElevationEnabled[0]; +0x02f0 9b 15 00 00 */ /* unsigned char DbgVirtEnabled[0]; +0x02f0 68 18 00 00 */ /* unsigned char DbgInstallerDetectEnabled[0]; +0x02f0 69 18 00 00 */ /* unsigned char DbgLkgEnabled[0]; +0x02f0 40 21 00 00 */ /* unsigned char DbgDynProcessorEnabled[0]; +0x02f0 41 21 00 00 */ /* unsigned char DbgConsoleBrokerEnabled[0]; +0x02f0 6b 18 00 00 */ unsigned char SpareBits[4]; /* +0x02f0 b1 1a 00 00 */ unsigned char DataFlagsPad[4]; /* +0x02f4 01 12 00 00 */ unsigned long long TestRetInstruction; /* +0x02f8 */ unsigned long Reserved9; /* +0x0300 */ unsigned long Reserved10; /* +0x0304 */ unsigned char SystemCallPad[24]; /* +0x0308 e1 7d 00 00 */ /* unsigned char TickCount[0]; +0x0320 e0 7d 00 00 */ /* unsigned char TickCountQuad[0]; +0x0320 5c 3f 00 00 */ unsigned char ReservedTickCountOverlay[12]; /* +0x0320 13 12 00 00 */ unsigned char TickCountPad[4]; /* +0x032c 01 12 00 00 */ unsigned long Cookie; /* +0x0330 */ unsigned char CookiePad[4]; /* +0x0334 01 12 00 00 */ long long ConsoleSessionForegroundProcessId; /* +0x0338 */ unsigned char TimeUpdateSequence[8]; /* +0x0340 5c 3f 00 00 */ unsigned long long LastTimeUpdateQpcValue; /* +0x0348 */ unsigned long long LastInterruptTimeUpdateQpcValue; /* +0x0350 */ unsigned long long QpcTimeIncrement; /* +0x0358 */ unsigned long QpcTimeIncrement32; /* +0x0360 */ unsigned char Reserved8[28]; /* +0x0364 e2 7d 00 00 */ unsigned char UserModeGlobalLogger[32]; /* +0x0380 d8 5e 00 00 */ unsigned long ImageFileExecutionOptions; /* +0x03a0 */ unsigned long LangGenerationCount; /* +0x03a4 */ unsigned char InterruptTimeBias[8]; /* +0x03a8 5c 3f 00 00 */ unsigned char TscQpcBias[8]; /* +0x03b0 5c 3f 00 00 */ unsigned char ActiveProcessorCount[4]; /* +0x03b8 53 3f 00 00 */ unsigned char ActiveGroupCount[1]; /* +0x03bc e3 7d 00 00 */ unsigned char QpcTimeIncrementShift; /* +0x03bd */ unsigned short TscQpcData; /* +0x03be */ unsigned char TscQpcEnabled[1]; /* +0x03be e3 7d 00 00 */ unsigned char TscQpcShift; /* +0x03bf */ unsigned char XState[528]; /* +0x03c0 26 22 00 00 */ }; struct _ULARGE_INTEGER { unsigned long LowPart; /* +0x0000 */ unsigned long HighPart; /* +0x0004 */ }; struct _ULARGE_INTEGER:: { unsigned long LowPart; /* +0x0000 */ unsigned long HighPart; /* +0x0004 */ }; struct _EVENT_DATA_DESCRIPTOR { unsigned long long Ptr; /* +0x0000 */ unsigned long Size; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ }; struct TRgOffset { unsigned long cItems; /* +0x0000 */ unsigned char offrg[4]; /* +0x0004 75 00 00 00 */ }; struct tagLC_ID { unsigned short wLanguage; /* +0x0000 */ unsigned short wCountry; /* +0x0002 */ unsigned short wCodePage; /* +0x0004 */ }; struct tagCAI { unsigned long cElems; /* +0x0000 */ short *pElems; /* +0x0004 */ }; struct TRgOffset { unsigned long cItems; /* +0x0000 */ unsigned char offrg[4]; /* +0x0004 75 00 00 00 */ }; struct _TP_TASK_CALLBACKS { unsigned char ExecuteCallback[4]; /* +0x0000 41 7e 00 00 */ unsigned char Unposted[4]; /* +0x0004 06 7c 00 00 */ }; struct tagTLIBATTR { unsigned char guid[16]; /* +0x0000 ce 13 00 00 */ unsigned long lcid; /* +0x0010 */ unsigned char syskind[4]; /* +0x0014 c9 11 00 00 */ unsigned short wMajorVerNum; /* +0x0018 */ unsigned short wMinorVerNum; /* +0x001a */ unsigned short wLibFlags; /* +0x001c */ }; struct _XSTATE_CONFIGURATION { unsigned long long EnabledFeatures; /* +0x0000 */ unsigned long Size; /* +0x0008 */ unsigned char OptimizedSave[4]; /* +0x000c 4a 12 00 00 */ unsigned char Features[512]; /* +0x0010 ed 7e 00 00 */ }; struct threadlocaleinfostruct:: { char *locale; /* +0x0000 */ unsigned char wlocale[4]; /* +0x0004 71 04 00 00 */ unsigned char refcount[4]; /* +0x0008 74 04 00 00 */ unsigned char wrefcount[4]; /* +0x000c 74 04 00 00 */ }; struct tagVARIANT { unsigned short vt; /* +0x0000 */ unsigned short wReserved1; /* +0x0002 */ unsigned short wReserved2; /* +0x0004 */ unsigned short wReserved3; /* +0x0006 */ long long llVal; /* +0x0008 */ long lVal; /* +0x0008 */ unsigned char bVal; /* +0x0008 */ short iVal; /* +0x0008 */ /* unsigned char fltVal[0]; +0x0008 40 00 00 00 */ /* unsigned char dblVal[0]; +0x0008 41 00 00 00 */ short boolVal; /* +0x0008 */ long scode; /* +0x0008 */ /* unsigned char cyVal[0]; +0x0008 b6 2a 00 00 */ /* unsigned char date[0]; +0x0008 41 00 00 00 */ /* unsigned char bstrVal[0]; +0x0008 71 04 00 00 */ /* unsigned char punkVal[0]; +0x0008 2b 15 00 00 */ /* unsigned char pdispVal[0]; +0x0008 7b 1f 00 00 */ /* unsigned char parray[0]; +0x0008 bd 7c 00 00 */ unsigned char *pbVal; /* +0x0008 */ short *piVal; /* +0x0008 */ long *plVal; /* +0x0008 */ long long *pllVal; /* +0x0008 */ /* unsigned char pfltVal[0]; +0x0008 40 04 00 00 */ /* unsigned char pdblVal[0]; +0x0008 41 04 00 00 */ short *pboolVal; /* +0x0008 */ long *pscode; /* +0x0008 */ /* unsigned char pcyVal[0]; +0x0008 b7 2a 00 00 */ /* unsigned char pdate[0]; +0x0008 41 04 00 00 */ /* unsigned char pbstrVal[0]; +0x0008 d1 12 00 00 */ /* unsigned char ppunkVal[0]; +0x0008 f2 19 00 00 */ /* unsigned char ppdispVal[0]; +0x0008 8b 1f 00 00 */ /* unsigned char pparray[0]; +0x0008 d4 7c 00 00 */ /* unsigned char pvarVal[0]; +0x0008 a3 17 00 00 */ void *byref; /* +0x0008 */ char cVal; /* +0x0008 */ unsigned short uiVal; /* +0x0008 */ unsigned long ulVal; /* +0x0008 */ unsigned long long ullVal; /* +0x0008 */ /* unsigned char intVal[0]; +0x0008 74 00 00 00 */ /* unsigned char uintVal[0]; +0x0008 75 00 00 00 */ /* unsigned char pdecVal[0]; +0x0008 56 18 00 00 */ char *pcVal; /* +0x0008 */ unsigned short *puiVal; /* +0x0008 */ unsigned long *pulVal; /* +0x0008 */ unsigned long long *pullVal; /* +0x0008 */ /* unsigned char pintVal[0]; +0x0008 74 04 00 00 */ /* unsigned char puintVal[0]; +0x0008 75 04 00 00 */ void *pvRecord; /* +0x0008 */ /* unsigned char pRecInfo[-12]; +0x000c 3f 2a 00 00 */ unsigned char decVal[16]; /* +0x0000 55 18 00 00 */ }; struct EventRegistrationToken { long long value; /* +0x0000 */ }; struct TRgOffset { unsigned long cItems; /* +0x0000 */ unsigned char offrg[4]; /* +0x0004 75 00 00 00 */ }; struct tagCAL { unsigned long cElems; /* +0x0000 */ long *pElems; /* +0x0004 */ }; struct TOffset { unsigned char off[4]; /* +0x0000 75 00 00 00 */ }; struct CInstallControl::WORKITEM_DATA { unsigned char pAI[4]; /* +0x0000 7c 7f 00 00 */ unsigned char pControl[4]; /* +0x0004 7b 7c 00 00 */ }; struct tagCAUH { unsigned long cElems; /* +0x0000 */ unsigned char pElems[4]; /* +0x0004 5f 20 00 00 */ }; struct Category { unsigned long uId; /* +0x0000 */ }; struct _ldiv_t { long quot; /* +0x0000 */ long rem; /* +0x0004 */ }; enum Windows::Storage::Pickers::PickerViewMode { PickerViewMode_List = 0, PickerViewMode_Thumbnail = 1 }; enum Windows::Storage::Search::IndexerOption { IndexerOption_UseIndexerWhenAvailable = 0, IndexerOption_OnlyUseIndexer = 1, IndexerOption_DoNotUseIndexer = 2 }; enum Windows::Storage::Search::DateStackOption { DateStackOption_None = 0, DateStackOption_Year = 1, DateStackOption_Month = 2 }; enum Windows::Storage::Search::CommonFileQuery { CommonFileQuery_DefaultQuery = 0, CommonFileQuery_OrderByName = 1, CommonFileQuery_OrderByTitle = 2, CommonFileQuery_OrderByMusicInfo = 3, CommonFileQuery_OrderBySearchRank = 4, CommonFileQuery_OrderByDate = 5 }; struct Windows::Storage::Search::SortEntry { unsigned char PropertyName[4]; /* +0x0000 4b 6f 00 00 */ unsigned char AscendingOrder; /* +0x0004 */ }; struct Windows::Storage::AccessCache::AccessListEntry { unsigned char Token[4]; /* +0x0000 4b 6f 00 00 */ unsigned char Metadata[4]; /* +0x0004 4b 6f 00 00 */ }; enum Windows::Storage::ApplicationDataCreateDisposition { ApplicationDataCreateDisposition_Always = 0, ApplicationDataCreateDisposition_Existing = 1 }; struct Windows::Foundation::Point { unsigned char X[4]; /* +0x0000 40 00 00 00 */ unsigned char Y[4]; /* +0x0004 40 00 00 00 */ }; struct Windows::Foundation::TimeSpan { long long Duration; /* +0x0000 */ }; struct Windows::Foundation::Size { unsigned char Width[4]; /* +0x0000 40 00 00 00 */ unsigned char Height[4]; /* +0x0004 40 00 00 00 */ }; enum Windows::Foundation::Collections::CollectionChange { Reset = 0, ItemInserted = 1, ItemRemoved = 2, ItemChanged = 3 }; struct Windows::Foundation::DateTime { long long UniversalTime; /* +0x0000 */ }; struct Windows::Foundation::Rect { unsigned char X[4]; /* +0x0000 40 00 00 00 */ unsigned char Y[4]; /* +0x0004 40 00 00 00 */ unsigned char Width[4]; /* +0x0008 40 00 00 00 */ unsigned char Height[4]; /* +0x000c 40 00 00 00 */ }; enum Windows::Graphics::Imaging::BitmapInterpolationMode { BitmapInterpolationMode_NearestNeighbor = 0, BitmapInterpolationMode_Linear = 1, BitmapInterpolationMode_Cubic = 2, BitmapInterpolationMode_Fant = 3 }; enum Windows::Graphics::Imaging::ExifOrientationMode { ExifOrientationMode_IgnoreExifOrientation = 0, ExifOrientationMode_RespectExifOrientation = 1 }; enum Windows::UI::Core::CoreCursorType { CoreCursorType_Arrow = 0, CoreCursorType_Cross = 1, CoreCursorType_Custom = 2, CoreCursorType_Hand = 3, CoreCursorType_Help = 4, CoreCursorType_IBeam = 5, CoreCursorType_SizeAll = 6, CoreCursorType_SizeNortheastSouthwest = 7, CoreCursorType_SizeNorthSouth = 8, CoreCursorType_SizeNorthwestSoutheast = 9, CoreCursorType_SizeWestEast = 10, CoreCursorType_UniversalNo = 11, CoreCursorType_UpArrow = 12, CoreCursorType_Wait = 13 }; enum Windows::UI::Core::CoreDispatcherPriority { CoreDispatcherPriority_High = 2, CoreDispatcherPriority_Low = 0, CoreDispatcherPriority_Normal = 1 }; enum Windows::UI::Core::CoreProcessEventsOption { CoreProcessEventsOption_ProcessOneAndAllPending = 0, CoreProcessEventsOption_ProcessOneIfPresent = 1, CoreProcessEventsOption_ProcessUntilQuit = 2, CoreProcessEventsOption_ProcessAllIfPresent = 3 }; enum Windows::UI::Core::CoreWindowFlowDirection { CoreWindowFlowDirection_LeftToRight = 0, CoreWindowFlowDirection_RightToLeft = 1 }; enum Windows::System::VirtualKey { VirtualKey_None = 0, VirtualKey_LeftButton = 1, VirtualKey_RightButton = 2, VirtualKey_Cancel = 3, VirtualKey_MiddleButton = 4, VirtualKey_XButton1 = 5, VirtualKey_XButton2 = 6, VirtualKey_Back = 8, VirtualKey_Tab = 9, VirtualKey_Clear = 12, VirtualKey_Enter = 13, VirtualKey_Shift = 16, VirtualKey_Control = 17, VirtualKey_Menu = 18, VirtualKey_Pause = 19, VirtualKey_CapitalLock = 20, VirtualKey_Kana = 21, VirtualKey_Hangul = 21, VirtualKey_Junja = 23, VirtualKey_Final = 24, VirtualKey_Hanja = 25, VirtualKey_Kanji = 25, VirtualKey_Escape = 27, VirtualKey_Convert = 28, VirtualKey_NonConvert = 29, VirtualKey_Accept = 30, VirtualKey_ModeChange = 31, VirtualKey_Space = 32, VirtualKey_PageUp = 33, VirtualKey_PageDown = 34, VirtualKey_End = 35, VirtualKey_Home = 36, VirtualKey_Left = 37, VirtualKey_Up = 38, VirtualKey_Right = 39, VirtualKey_Down = 40, VirtualKey_Select = 41, VirtualKey_Print = 42, VirtualKey_Execute = 43, VirtualKey_Snapshot = 44, VirtualKey_Insert = 45, VirtualKey_Delete = 46, VirtualKey_Help = 47, VirtualKey_Number0 = 48, VirtualKey_Number1 = 49, VirtualKey_Number2 = 50, VirtualKey_Number3 = 51, VirtualKey_Number4 = 52, VirtualKey_Number5 = 53, VirtualKey_Number6 = 54, VirtualKey_Number7 = 55, VirtualKey_Number8 = 56, VirtualKey_Number9 = 57, VirtualKey_A = 65, VirtualKey_B = 66, VirtualKey_C = 67, VirtualKey_D = 68, VirtualKey_E = 69, VirtualKey_F = 70, VirtualKey_G = 71, VirtualKey_H = 72, VirtualKey_I = 73, VirtualKey_J = 74, VirtualKey_K = 75, VirtualKey_L = 76, VirtualKey_M = 77, VirtualKey_N = 78, VirtualKey_O = 79, VirtualKey_P = 80, VirtualKey_Q = 81, VirtualKey_R = 82, VirtualKey_S = 83, VirtualKey_T = 84, VirtualKey_U = 85, VirtualKey_V = 86, VirtualKey_W = 87, VirtualKey_X = 88, VirtualKey_Y = 89, VirtualKey_Z = 90, VirtualKey_LeftWindows = 91, VirtualKey_RightWindows = 92, VirtualKey_Application = 93, VirtualKey_Sleep = 95, VirtualKey_NumberPad0 = 96, VirtualKey_NumberPad1 = 97, VirtualKey_NumberPad2 = 98, VirtualKey_NumberPad3 = 99, VirtualKey_NumberPad4 = 100, VirtualKey_NumberPad5 = 101, VirtualKey_NumberPad6 = 102, VirtualKey_NumberPad7 = 103, VirtualKey_NumberPad8 = 104, VirtualKey_NumberPad9 = 105, VirtualKey_Multiply = 106, VirtualKey_Add = 107, VirtualKey_Separator = 108, VirtualKey_Subtract = 109, VirtualKey_Decimal = 110, VirtualKey_Divide = 111, VirtualKey_F1 = 112, VirtualKey_F2 = 113, VirtualKey_F3 = 114, VirtualKey_F4 = 115, VirtualKey_F5 = 116, VirtualKey_F6 = 117, VirtualKey_F7 = 118, VirtualKey_F8 = 119, VirtualKey_F9 = 120, VirtualKey_F10 = 121, VirtualKey_F11 = 122, VirtualKey_F12 = 123, VirtualKey_F13 = 124, VirtualKey_F14 = 125, VirtualKey_F15 = 126, VirtualKey_F16 = 127, VirtualKey_F17 = 128, VirtualKey_F18 = 129, VirtualKey_F19 = 130, VirtualKey_F20 = 131, VirtualKey_F21 = 132, VirtualKey_F22 = 133, VirtualKey_F23 = 134, VirtualKey_F24 = 135, VirtualKey_NumberKeyLock = 144, VirtualKey_Scroll = 145, VirtualKey_LeftShift = 160, VirtualKey_RightShift = 161, VirtualKey_LeftControl = 162, VirtualKey_RightControl = 163, VirtualKey_LeftMenu = 164, VirtualKey_RightMenu = 165 }; enum Windows::ApplicationModel::Contacts::Provider::AddContactToBasketResult { AddContactToBasketResult_AddedToBasket = 0, AddContactToBasketResult_AlreadyInBasket = 1, AddContactToBasketResult_BasketUnavailable = 2 }; struct _iobuf { char *_ptr; /* +0x0000 */ unsigned char _cnt[4]; /* +0x0004 74 00 00 00 */ char *_base; /* +0x0008 */ unsigned char _flag[4]; /* +0x000c 74 00 00 00 */ unsigned char _file[4]; /* +0x0010 74 00 00 00 */ unsigned char _charbuf[4]; /* +0x0014 74 00 00 00 */ unsigned char _bufsiz[4]; /* +0x0018 74 00 00 00 */ char *_tmpfname; /* +0x001c */ }; struct TRgOffset { unsigned long cItems; /* +0x0000 */ unsigned char offrg[4]; /* +0x0004 75 00 00 00 */ }; struct TRgOffset { unsigned long cItems; /* +0x0000 */ unsigned char offrg[4]; /* +0x0004 75 00 00 00 */ }; struct TRgOffset { unsigned long cItems; /* +0x0000 */ unsigned char offrg[4]; /* +0x0004 75 00 00 00 */ }; struct SortOption { unsigned long uId; /* +0x0000 */ }; struct _EXCEPTION_REGISTRATION_RECORD { unsigned char Next[4]; /* +0x0000 c6 3b 00 00 */ unsigned char Handler[4]; /* +0x0004 68 77 00 00 */ }; struct tagSTATSTG { unsigned char pwcsName[4]; /* +0x0000 71 04 00 00 */ unsigned long type; /* +0x0004 */ unsigned char cbSize[8]; /* +0x0008 5e 20 00 00 */ unsigned char mtime[8]; /* +0x0010 91 14 00 00 */ unsigned char ctime[8]; /* +0x0018 91 14 00 00 */ unsigned char atime[8]; /* +0x0020 91 14 00 00 */ unsigned long grfMode; /* +0x0028 */ unsigned long grfLocksSupported; /* +0x002c */ unsigned char clsid[16]; /* +0x0030 ce 13 00 00 */ unsigned long grfStateBits; /* +0x0040 */ unsigned long reserved; /* +0x0044 */ }; struct TRgOffset { unsigned long cItems; /* +0x0000 */ unsigned char offrg[4]; /* +0x0004 75 00 00 00 */ }; struct NamedValue { unsigned long uId; /* +0x0000 */ }; struct _NT_TIB { unsigned char ExceptionList[4]; /* +0x0000 c6 3b 00 00 */ void *StackBase; /* +0x0004 */ void *StackLimit; /* +0x0008 */ void *SubSystemTib; /* +0x000c */ void *FiberData; /* +0x0010 */ unsigned long Version; /* +0x0010 */ void *ArbitraryUserPointer; /* +0x0014 */ unsigned char Self[4]; /* +0x0018 87 1c 00 00 */ }; struct tagCAFLT { unsigned long cElems; /* +0x0000 */ unsigned char pElems[4]; /* +0x0004 40 04 00 00 */ }; struct tagCALPSTR { unsigned long cElems; /* +0x0000 */ unsigned char pElems[4]; /* +0x0004 05 20 00 00 */ }; struct _RTL_CRITICAL_SECTION_DEBUG { unsigned short Type; /* +0x0000 */ unsigned short CreatorBackTraceIndex; /* +0x0002 */ unsigned char CriticalSection[4]; /* +0x0004 9e 18 00 00 */ unsigned char ProcessLocksList[8]; /* +0x0008 f7 19 00 00 */ unsigned long EntryCount; /* +0x0010 */ unsigned long ContentionCount; /* +0x0014 */ unsigned long Flags; /* +0x0018 */ unsigned short CreatorBackTraceIndexHigh; /* +0x001c */ unsigned short SpareUSHORT; /* +0x001e */ }; enum _TASK_CREATION { TASK_VALIDATE_ONLY = 1, TASK_CREATE = 2, TASK_UPDATE = 4, TASK_CREATE_OR_UPDATE = 6, TASK_DISABLE = 8, TASK_DONT_ADD_PRINCIPAL_ACE = 16, TASK_IGNORE_REGISTRATION_TRIGGERS = 32 }; struct _TEB_ACTIVE_FRAME_CONTEXT { unsigned long Flags; /* +0x0000 */ unsigned char FrameName[4]; /* +0x0004 bf 12 00 00 */ }; struct TRgOffset { unsigned long cItems; /* +0x0000 */ unsigned char offrg[4]; /* +0x0004 75 00 00 00 */ }; struct TRgOffset { unsigned long cItems; /* +0x0000 */ unsigned char offrg[4]; /* +0x0004 75 00 00 00 */ }; enum RoVariant::States { StateIsNull = 0, StateIsObjNoRef = 1, StateIsObj = 3, StateIsPV = 7 }; struct RoVariant::OutRef { unsigned char _pOwner[4]; /* +0x0000 79 a2 00 00 */ unsigned char _pI[4]; /* +0x0004 96 49 00 00 */ }; struct RoVariant::Accessor { unsigned char _pI[4]; /* +0x0000 96 49 00 00 */ unsigned char _hrState[4]; /* +0x0004 08 00 00 00 */ }; struct HSTRING_HEADER:: { void *Reserved1; /* +0x0000 */ unsigned char Reserved2[20]; /* +0x0000 c5 a2 00 00 */ }; struct Channel { unsigned long ulChannelId; /* +0x0000 */ }; struct _TP_CALLBACK_ENVIRON_V3:: { unsigned long Flags; /* +0x0000 */ }; struct QITAB { unsigned char piid[4]; /* +0x0000 0b 17 00 00 */ unsigned char dwOffset[4]; /* +0x0004 74 00 00 00 */ }; struct tagCABSTRBLOB { unsigned long cElems; /* +0x0000 */ unsigned char pElems[4]; /* +0x0004 e9 24 00 00 */ }; enum Globals::ALLOWSTATE { AS_ALLOWED = 0, AS_DENIED_ACCESS = 1, AS_DENIED_POLICY = 2 }; enum Globals::CEventSink::PHASE { PHASE_DISCOVERY = 0, PHASE_CHANNEL = 1, PHASE_SETTINGS = 2, PHASE_NAMESPACE = 3 }; struct TRgOffset { unsigned long cItems; /* +0x0000 */ unsigned char offrg[4]; /* +0x0004 75 00 00 00 */ }; struct __MIDL___MIDL_itf_internal_0000_0001_0002 { unsigned char pszPackageFamilyName[4]; /* +0x0000 71 04 00 00 */ unsigned char cProducts[4]; /* +0x0004 75 00 00 00 */ unsigned char rgProducts[4]; /* +0x0008 b8 a3 00 00 */ }; struct tagCACLIPDATA { unsigned long cElems; /* +0x0000 */ unsigned char pElems[4]; /* +0x0004 b9 7c 00 00 */ }; struct RecList { unsigned long uCatId; /* +0x0000 */ unsigned long uListId; /* +0x0004 */ }; struct LIST_ENTRY64 { unsigned long long Flink; /* +0x0000 */ unsigned long long Blink; /* +0x0008 */ }; struct _SHITEMID { unsigned short cb; /* +0x0000 */ unsigned char abID[1]; /* +0x0002 04 12 00 00 */ }; struct __m64 { unsigned long long m64_u64; /* +0x0000 */ /* unsigned char m64_f32[0]; +0x0000 19 a4 00 00 */ /* unsigned char m64_i8[0]; +0x0000 5e 17 00 00 */ /* unsigned char m64_i16[0]; +0x0000 b6 3c 00 00 */ /* unsigned char m64_i32[0]; +0x0000 1a a4 00 00 */ long long m64_i64; /* +0x0000 */ /* unsigned char m64_u8[0]; +0x0000 20 1a 00 00 */ /* unsigned char m64_u16[0]; +0x0000 72 22 00 00 */ unsigned char m64_u32[8]; /* +0x0000 1b a4 00 00 */ }; struct tagMSG { unsigned char hwnd[4]; /* +0x0000 fc 11 00 00 */ unsigned char message[4]; /* +0x0004 75 00 00 00 */ unsigned char wParam[4]; /* +0x0008 75 00 00 00 */ long lParam; /* +0x000c */ unsigned long time; /* +0x0010 */ unsigned char pt[8]; /* +0x0014 ce 12 00 00 */ }; enum WinStore::UI::PurchaseType { PurchaseType_Paid = 0, PurchaseType_Trial = 1, PurchaseType_Free = 2 }; enum CNamespace::NAMESPACE_PAGE { NP_FRAME = 0, NP_HOME = 1, NP_RESULTS = 2, NP_PDP = 3, NP_TOPIC = 4, NP_REACQUIRE = 5, NP_UPDATES = 6, NP_SETTINGS = 7, NP_REVIEW = 8, NP_REPORT_PROBLEM = 9, NP_INSTALLS = 10, NP_MAX = 11 }; struct ReviewsList { unsigned long ulTotalReviewCount; /* +0x0000 */ unsigned long ulTotalRatingCount; /* +0x0004 */ }; struct TRgOffset { unsigned long cItems; /* +0x0000 */ unsigned char offrg[4]; /* +0x0004 75 00 00 00 */ }; struct KNOWNFOLDER_DEFINITION { unsigned char category[4]; /* +0x0000 3b 3b 00 00 */ unsigned char pszName[4]; /* +0x0004 71 04 00 00 */ unsigned char pszDescription[4]; /* +0x0008 71 04 00 00 */ unsigned char fidParent[16]; /* +0x000c ce 13 00 00 */ unsigned char pszRelativePath[4]; /* +0x001c 71 04 00 00 */ unsigned char pszParsingName[4]; /* +0x0020 71 04 00 00 */ unsigned char pszTooltip[4]; /* +0x0024 71 04 00 00 */ unsigned char pszLocalizedName[4]; /* +0x0028 71 04 00 00 */ unsigned char pszIcon[4]; /* +0x002c 71 04 00 00 */ unsigned char pszSecurity[4]; /* +0x0030 71 04 00 00 */ unsigned long dwAttributes; /* +0x0034 */ unsigned long kfdFlags; /* +0x0038 */ unsigned char ftidType[16]; /* +0x003c ce 13 00 00 */ }; enum Windows::UI::Notifications::NotificationSetting { NotificationSetting_Enabled = 0, NotificationSetting_DisabledForApplication = 1, NotificationSetting_DisabledForUser = 2, NotificationSetting_DisabledByGroupPolicy = 3, NotificationSetting_DisabledByManifest = 4 }; enum Windows::UI::Notifications::TileTemplateType { TileTemplateType_TileSquareImage = 0, TileTemplateType_TileWideImageCollection = 1, TileTemplateType_TileWideImageAndText = 2, TileTemplateType_TileWideImage = 3, TileTemplateType_TileWidePeekImageAndText = 4, TileTemplateType_TileWidePeekImageCollection01 = 5, TileTemplateType_TileWidePeekImageCollection02 = 6, TileTemplateType_TileWidePeekImageCollection03 = 7, TileTemplateType_TileWidePeekImageCollection04 = 8, TileTemplateType_TileWidePeekImageCollection05 = 9, TileTemplateType_TileWidePeekImageCollection06 = 10, TileTemplateType_TileWidePeekImage01 = 11, TileTemplateType_TileWidePeekImage02 = 12, TileTemplateType_TileWidePeekImage03 = 13, TileTemplateType_TileWidePeekImage04 = 14, TileTemplateType_TileWidePeekImage05 = 15, TileTemplateType_TileWidePeekImage06 = 16, TileTemplateType_TileWideSmallImageAndText01 = 17, TileTemplateType_TileWideSmallImageAndText02 = 18, TileTemplateType_TileWideSmallImageAndText03 = 19, TileTemplateType_TileWideSmallImageAndText04 = 20, TileTemplateType_TileWideText01 = 21, TileTemplateType_TileWideText02 = 22, TileTemplateType_TileWideText03 = 23, TileTemplateType_TileWideText04 = 24, TileTemplateType_TileWideText05 = 25, TileTemplateType_TileWideText06 = 26, TileTemplateType_TileWideText07 = 27, TileTemplateType_TileWideText08 = 28, TileTemplateType_TileWideText09 = 29, TileTemplateType_TileWideBlockAndText01 = 30 }; enum Windows::UI::Notifications::ToastTemplateType { ToastTemplateType_ToastImageAndText01 = 0, ToastTemplateType_ToastImageAndText02 = 1, ToastTemplateType_ToastImageAndText03 = 2, ToastTemplateType_ToastImageAndText04 = 3, ToastTemplateType_ToastSmallImageAndText01 = 4, ToastTemplateType_ToastSmallImageAndText02 = 5, ToastTemplateType_ToastSmallImageAndText03 = 6, ToastTemplateType_ToastSmallImageAndText04 = 7, ToastTemplateType_ToastText01 = 8, ToastTemplateType_ToastText02 = 9, ToastTemplateType_ToastText03 = 10, ToastTemplateType_ToastText04 = 11 }; enum Windows::UI::Notifications::BadgeTemplateType { BadgeTemplateType_BadgeGlyph = 0, BadgeTemplateType_BadgeNumber = 1 }; enum Windows::Data::Xml::Dom::NodeType { NodeType_Invalid = 0, NodeType_ElementNode = 1, NodeType_AttributeNode = 2, NodeType_TextNode = 3, NodeType_DataSectionNode = 4, NodeType_EntityReferenceNode = 5, NodeType_EntityNode = 6, NodeType_ProcessingInstructionNode = 7, NodeType_CommentNode = 8, NodeType_DocumentNode = 9, NodeType_DocumentTypeNode = 10, NodeType_DocumentFragmentNode = 11, NodeType_NotationNode = 12 }; enum Windows::UI::Notifications::ToastDismissalReason { ToastDismissalReason_UserCanceled = 0, ToastDismissalReason_ApplicationHidden = 1, ToastDismissalReason_TimedOut = 2 }; struct _HTTP_REQUEST_CALLBACK { unsigned char Type[4]; /* +0x0000 ae aa 00 00 */ void *pvContext; /* +0x0004 */ unsigned char pRequest[4]; /* +0x0008 b0 aa 00 00 */ /* unsigned char DataUploaded[0]; +0x000c b1 aa 00 00 */ /* unsigned char DataUploadResponse[0]; +0x000c b2 aa 00 00 */ unsigned char RedirectResponse[4]; /* +0x000c b3 aa 00 00 */ }; enum CHttpRequest::PHASE_OF_REQUEST { POR_NONE = 0, POR_SENDING = 1, POR_RECEIVING = 2, POR_READING = 3, POR_WRITING = 4 }; struct _HTTP_REQUEST_CALLBACK:::: { unsigned char pszNewUrl[4]; /* +0x0000 4f 13 00 00 */ }; struct _HTTP_REQUEST_CALLBACK:::: { unsigned long dwHttpResponseStatusCode; /* +0x0000 */ }; struct _HTTP_REQUEST_CALLBACK:::: { unsigned char cbBytesUploaded[4]; /* +0x0000 75 00 00 00 */ }; struct CHttpRequest::_WINHTTP_ASYNC_COMPLETION_INFO:: { void *pvData; /* +0x0000 */ unsigned long cbData; /* +0x0004 */ }; struct CHttpRequest::_WINHTTP_ASYNC_COMPLETION_INFO:: { unsigned long cbWritten; /* +0x0000 */ }; struct _winstore2Eui_MIDL_PROC_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[2732]; /* +0x0002 38 ab 00 00 */ }; /* struct { unsigned char header[8]; +0x0000 16 70 00 00 unsigned char Vtbl[28]; +0x0008 3b ab 00 00 }; */ /* struct { unsigned char header[8]; +0x0000 16 70 00 00 unsigned char Vtbl[16]; +0x0008 57 4d 00 00 }; */ struct _winstore2Eui_MIDL_TYPE_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[124]; /* +0x0002 46 ab 00 00 */ }; /* struct { unsigned char header[8]; +0x0000 16 70 00 00 unsigned char Vtbl[288]; +0x0008 54 ab 00 00 }; */ struct tagCInterfaceProxyVtbl { unsigned char header[8]; /* +0x0000 16 70 00 00 */ /* unsigned char Vtbl[0]; +0x0008 17 70 00 00 */ }; struct _internal_MIDL_TYPE_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[550]; /* +0x0002 72 ab 00 00 */ }; /* struct { unsigned char header[8]; +0x0000 16 70 00 00 unsigned char Vtbl[40]; +0x0008 79 ab 00 00 }; */ /* struct { unsigned char header[8]; +0x0000 16 70 00 00 unsigned char Vtbl[48]; +0x0008 7c ab 00 00 }; */ struct _internal_MIDL_PROC_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[614]; /* +0x0002 80 ab 00 00 */ }; struct _winstoreapi_MIDL_TYPE_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[46]; /* +0x0002 83 ab 00 00 */ }; /* struct { unsigned char header[8]; +0x0000 16 70 00 00 unsigned char Vtbl[20]; +0x0008 2c 70 00 00 }; */ struct _winstoreapi_MIDL_PROC_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[374]; /* +0x0002 8a ab 00 00 */ }; /* struct { unsigned char header[8]; +0x0000 16 70 00 00 unsigned char Vtbl[36]; +0x0008 18 50 00 00 }; */ enum CCheckpoints::INSTALL_CHECKPOINTS { ICP_NONE = 1, ICP_ACQUIRELICENSE = 2, ICP_DOWNLOAD = 3, ICP_INSTALL = 4 }; enum CCheckpoints::UNINSTALL_CHECKPOINTS { UCP_NONE = 1 }; enum CCheckpoints::CHECKPOINT_TYPE { CPT_INVALID = 0, CPT_INSTALL = 1, CPT_DCA_INSTALL = 2, CPT_UPDATE_INSTALL = 3, CPT_UNINSTALL = 4 }; enum CActionItem::ACTION_ITEM_STATE { AIS_ACTIVE = 0, AIS_PAUSED = 1, AIS_ERROR = 2 }; enum tag_WBEM_GENERIC_FLAG_TYPE { WBEM_FLAG_RETURN_IMMEDIATELY = 16, WBEM_FLAG_RETURN_WBEM_COMPLETE = 0, WBEM_FLAG_BIDIRECTIONAL = 0, WBEM_FLAG_FORWARD_ONLY = 32, WBEM_FLAG_NO_ERROR_OBJECT = 64, WBEM_FLAG_RETURN_ERROR_OBJECT = 0, WBEM_FLAG_SEND_STATUS = 128, WBEM_FLAG_DONT_SEND_STATUS = 0, WBEM_FLAG_ENSURE_LOCATABLE = 256, WBEM_FLAG_DIRECT_READ = 512, WBEM_FLAG_SEND_ONLY_SELECTED = 0, WBEM_RETURN_WHEN_COMPLETE = 0, WBEM_RETURN_IMMEDIATELY = 16, /* WBEM_MASK_RESERVED_FLAGS = Unavail */ }; enum WU_INSTALLED_FLAG { WU_INSTALLED_NO = 0, WU_INSTALLED_YES = 1, WU_INSTALLED_DONT_CARE = 2 }; enum Windows::Foundation::Collections::supports_cleanup >:: { value = 1 }; enum tagPROPVAR_COMPARE_FLAGS { PVCF_DEFAULT = 0, PVCF_TREATEMPTYASGREATERTHAN = 1, PVCF_USESTRCMP = 2, PVCF_USESTRCMPC = 4, PVCF_USESTRCMPI = 8, PVCF_USESTRCMPIC = 16 }; enum PROPVAR_COMPARE_UNIT { PVCU_DEFAULT = 0, PVCU_SECOND = 1, PVCU_MINUTE = 2, PVCU_HOUR = 3, PVCU_DAY = 4, PVCU_MONTH = 5, PVCU_YEAR = 6 }; enum WbemChangeFlagEnum { wbemChangeFlagCreateOrUpdate = 0, wbemChangeFlagUpdateOnly = 1, wbemChangeFlagCreateOnly = 2, wbemChangeFlagUpdateCompatible = 0, wbemChangeFlagUpdateSafeMode = 32, wbemChangeFlagUpdateForceMode = 64, wbemChangeFlagStrongValidation = 128, /* wbemChangeFlagAdvisory = Unavail */ }; enum WbemQueryFlagEnum { wbemQueryFlagDeep = 0, wbemQueryFlagShallow = 1, wbemQueryFlagPrototype = 2 }; enum tag_WBEM_EXTRA_RETURN_CODES { WBEM_S_INITIALIZED = 0, /* WBEM_S_LIMITED_SERVICE = Unavail */ }; enum tagAutoSelectionMode { asLetWindowsUpdateDecide = 0, asAutoSelectIfDownloaded = 1, asNeverAutoSelect = 2, asAlwaysAutoSelect = 3 }; enum tagAutoDownloadMode { adLetWindowsUpdateDecide = 0, adNeverAutoDownload = 1, adAlwaysAutoDownload = 2 }; enum _tagSLDATATYPE { SL_DATA_NONE = 0, SL_DATA_SZ = 1, SL_DATA_DWORD = 4, SL_DATA_BINARY = 3, SL_DATA_MULTI_SZ = 7, SL_DATA_SUM = 100 }; struct Windows::Graphics::Imaging::BitmapBounds { unsigned char X[4]; /* +0x0000 75 00 00 00 */ unsigned char Y[4]; /* +0x0004 75 00 00 00 */ unsigned char Width[4]; /* +0x0008 75 00 00 00 */ unsigned char Height[4]; /* +0x000c 75 00 00 00 */ }; struct Windows::Management::Deployment::DeploymentProgress { unsigned char state[4]; /* +0x0000 b5 ac 00 00 */ unsigned char percentage[4]; /* +0x0004 75 00 00 00 */ }; struct CCheckpoints::CHECKPOINT { unsigned char type[4]; /* +0x0000 98 ad 00 00 */ unsigned char iCheckpoint[4]; /* +0x0004 74 00 00 00 */ unsigned char pd[12]; /* +0x0008 9c 73 00 00 */ unsigned char pszExtra[4]; /* +0x0014 71 04 00 00 */ }; struct CProgressDispatcher::tagPROGRESS_HANDLER { unsigned long dwGITCookie; /* +0x0000 */ unsigned long dwCookie; /* +0x0004 */ unsigned char pNext[4]; /* +0x0008 90 ab 00 00 */ }; struct Windows::ApplicationModel::PackageVersion { unsigned short Major; /* +0x0000 */ unsigned short Minor; /* +0x0002 */ unsigned short Build; /* +0x0004 */ unsigned short Revision; /* +0x0006 */ }; enum SETTINGS_FLAGS { SETTING_NONE = 0, SETTING_IDENTITY = 1, SETTING_PARENTAL = 2, SETTING_DEFAULT_PI = 4 }; enum Windows::ApplicationModel::Store::StoreAuthenticationFlag { StoreAuthenticationFlag_AlwaysPrompt = 0, StoreAuthenticationFlag_NeverPrompt = 1, StoreAuthenticationFlag_PromptIfNeeded = 2 }; enum XWinRT::ComLock::Kind { Kind_Srw = 0, Kind_StaReentrancy = 1 }; enum ELEVATION_STATE { ELEVATION_NOT_CHECKED = 0, ELEVATION_CHECKED_SHIELD = 1, ELEVATION_CHECKED_NOSHIELD = 2 }; enum SMARTSCREEN_LEVEL { SMARTSCREEN_OFF = 0, SMARTSCREEN_PROMPT = 1, SMARTSCREEN_REQUIREADMIN = 2 }; enum COMMAND_SET { CS_FIRST = 0, CS_SORTORDER = 0, CS_NAVPANE = 1, CS_PREVIEWPANE = 2, CS_SHOWHIDE = 3, CS_CLIPBOARD = 4, CS_VOLUMEADDREMOVE = 5, CS_LIBRARYADD = 6, CS_LEGACYBARSCHANGED = 7, CS_LAST = 8 }; enum __MIDL___MIDL_itf_shpriv_0000_0768_0001 { PIL_MANAGED_BY_APPLICATION = 0, PIL_MOST_RECENTLY_USED = 1, PIL_SYSTEM = 2 }; enum TILE_IMAGE_BASE_PATH { TILE_IMAGE_URL = 0, TILE_IMAGE_PACKAGE = 1, TILE_IMAGE_APPDATA_LOCAL_UNSTRUCTURED = 2, TILE_IMAGE_LOCAL_URL_CACHE = 3, TILE_IMAGE_FILE_PATH = 4, TILE_IMAGE_END = 5 }; enum CACHE_PRELOAD_TYPE { CPT_START_CACHE = 0, CPT_LOGO_CACHE = 1, CPT_END = 2 }; enum TILE_CACHE_VALID_CONTENTS { TCV_NONE = 0, TCV_NOTIFICATIONID = 1, TCV_BADGE = 2, TCV_ARRIVALTIME = 4, TCV_EXPIRYTIME = 8, TCV_LOGO = 32, TCV_ALTTEXT = 64, TCV_START_PII_DATA = 64, TCV_SMALLNOTIFICATION = 128, TCV_LARGENOTIFICATION = 256, TCV_PEEKTEXT = 512, TCV_SECONDARYIMAGE = 1024, TCV_ENDOFDATA = 2048, TCV_HEADERONLY = 15, TCV_DATAONLY = 2016, TCV_ALL = 2031, TCV_SMALLNOTIFICATIONMIN = 205, TCV_LARGENOTIFICATIONMIN = 333, TCV_SMALLNOTIFICATIONALL = 1741, TCV_LARGENOTIFICATIONALL = 1869, TCV_IMAGECONTENT = 1440, TCV_LOGOCACHE = 32, TCV_DEFAULTCACHESMALL = 128, TCV_DEFAULTCACHELARGE = 256, TCV_DEFAULTCACHEALL = 384, TCV_APPSPACECACHESMALL = 239, TCV_APPSPACECACHELARGE = 367, TCV_TICKLECACHESMALL = 205, TCV_TICKLECACHELARGE = 333, TCV_NOTIFICATIONALL = 1997, TCV_LOGOCACHEALL = 32, TCV_TICKLECACHEALL = 1997, TCV_APPSPACECACHEALL = 2031, TCV_PII = 1986 }; enum TILE_SUBSCRIPTION_OPTIONS { TSO_NONE = 0, TSO_DEFAULT_APPSPACE = 1, TSO_BADGE_NOTIFICATIONS = 2, TSO_APPSPACE_NOTIFICATIONS = 4, TSO_ALL_NOTIFICATIONS = 7 }; enum BADGE_GLYPH_TYPE { BADGE_GLYPH_NONE = 0, BADGE_GLYPH_ACTIVITY = 1, BADGE_GLYPH_ALERT = 2, BADGE_GLYPH_AVAILABLE = 3, BADGE_GLYPH_AWAY = 4, BADGE_GLYPH_BUSY = 5, BADGE_GLYPH_NEWMESSAGE = 6, BADGE_GLYPH_PAUSED = 7, BADGE_GLYPH_PLAYING = 8, BADGE_GLYPH_UNAVAILABLE = 9, BADGE_GLYPH_ERROR = 10, BADGE_GLYPH_END = 11 }; enum TILE_BADGE_TYPE { TILE_BADGE_UNINITIALIZED = 0, TILE_BADGE_NONE = 1, TILE_BADGE_NUMBER = 2, TILE_BADGE_GLYPH = 3, TILE_BADGE_END = 4 }; enum TILE_BADGE_FORCE_PLATE { TBFP_OFF = 0, TBFP_ON = 1, TBFP_DYNAMIC = 2, TBFP_END = 3 }; enum TILE_BRANDING { TILE_BRANDING_INIT = 0, TILE_BRANDING_NONE = 1, TILE_BRANDING_LOGO = 2, TILE_BRANDING_NAME = 4, TILE_BRANDING_NAME_AND_LOGO = 6 }; enum TILE_LAYOUT_SIZE { TLS_NOT_IN_LAYOUT = 0, TLS_SMALL = 0, TLS_MEDIUM = 1, TLS_END = 2 }; enum TILE_ZOOM_LEVEL { TILE_ZOOM_100 = 0, TILE_ZOOM_25 = 1, TILE_ZOOM_20 = 2, TILE_ZOOM_16 = 3 }; enum TILE_DUI_TEMPLATE { TILE_UNKNOWN = 0, TILE_DESKTOP = 1, TILE_IMMERSIVE = 2, TILE_TOAST = 3, TILE_LISTDESKTOP = 4, TILE_LISTIMMERSIVE = 5, TILE_FILESYSTEMTILE = 6, TILE_DUI_TEMPLATE_END = 7 }; enum TILE_THEME_SELECTOR { TILE_THEME_DEFAULT = 0, TILE_THEME_HIGH_CONTRAST_BLACK = 1, TILE_THEME_HIGH_CONTRAST_WHITE = 2, TILE_THEME_END = 3 }; enum TILE_INSTALLSTATE { TILE_INSTALLSTATE_NORMAL = 0, TILE_INSTALLSTATE_INSTALLING = 1, TILE_INSTALLSTATE_QUEUED = 2, TILE_INSTALLSTATE_PAUSED = 3, TILE_INSTALLSTATE_ERROR = 4, TILE_INSTALLSTATE_RESET = 5, TILE_INSTALLSTATE_BLOCKED = 6 }; enum TILE_STATE { TS_DEFAULT = 0, TS_APPSPACE_NOTIFICATIONS_DISABLED = 1, TS_LOADING_COMPLETE = 2, TS_CACHED_LOGO = 4, TS_NOTIFICATION_APPSPACE = 8, TS_CACHED_APPSPACE = 16, TS_CACHED_DEFAULT_APPSPACE = 32, TS_CACHED_TICKLE = 64, TS_EXCLUSIVE_APPSPACE_FLAGS = 120 }; enum STREAM_REFERENCE_TYPE { STREAMREFERENCE_NONE = 0, STREAMREFERENCE_FILE = 1, STREAMREFERENCE_URI = 2, STREAMREFERENCE_STREAM = 3 }; enum SEARCHPANE_HOTKEY { SPHK_SHOWSEARCHPANE = 0, SPHK_SEARCHSETTINGS = 1, SPHK_SEARCHFILES = 2 }; enum SEARCHPANE_COUNT_TASK_TYPE { SPCTT_APPS = 0, SPCTT_SETTINGS = 1, SPCTT_FILES = 2 }; enum SEARCH_SUBMIT_TYPE { SST_SEARCH_BUTTON = 0, SST_ENTER_KEY = 1, SST_TYPEAHEAD = 2 }; enum SEARCH_TYPEAHEAD_ITEM_TYPE { STA_TYPE_SEARCHSUGGESTION = 0, STA_TYPE_SEPARATOR = 1, STA_TYPE_RESULTSUGGESTION = 2 }; enum LAST_COPYITEM_ERROR_TYPE { LAST_COPYITEM_ERROR_SRC = 0, LAST_COPYITEM_ERROR_DST = 1, LAST_COPYITEM_ERROR_NOINFO = 2 }; enum VIDEO_RESIZE_FLAGS { VRF_NONE = 0, VRF_RESTRICT = 1, VRF_SCALE = 2, VRF_CROP = 3 }; enum USER_TILE_TYPE { UTT_IMAGE_96 = 0, UTT_IMAGE_448 = 1, UTT_VIDEO_448 = 2, UTT_DEFAULT = 3, UTT_IMAGE_40 = 4, UTT_IMAGE_198 = 5, UTT_VIDEO_198 = 6 }; enum DOCKED_FILL_PREFERENCE { DFP_NOFILL = 0, DFP_FILL = 1, DFP_FILLTOMAXIMUMHEIGHT = 2 }; enum MODE_CHANGE_REASON { MCR_NONE = 0, MCR_ACTIVATION = 1, MCR_MONITORCHANGE = 2, MCR_OWNEDWINDOWCREATED = 3, MCR_EXTERNAL = 4 }; enum GUTTER_LOCATION { GL_LEFT = 0, GL_RIGHT = 1 }; enum GUTTER_SLIDE_LOCATION { GSL_OFFSCREEN_LEFT = 0, GSL_LEFT = 1, GSL_RIGHT = 2, GSL_OFFSCREEN_RIGHT = 3 }; enum GUTTER_SLIDE_DIRECTION { GSD_RIGHT = 0, GSD_LEFT = 1 }; enum SWITCH_LOCATION { SL_BODY_DEFAULT = 0, SL_SNAPPED_DEFAULT = 1, SL_SNAPPED_LEFT = 2, SL_SNAPPED_RIGHT = 3 }; enum IMM_APP_LOCATION { IAL_FULLSCREEN = 0, IAL_FILLED_LEFT = 1, IAL_FILLED_RIGHT = 2, IAL_SNAPPED_LEFT = 3, IAL_SNAPPED_RIGHT = 4 }; enum IMM_APP_ARRANGEMENT { IAA_FULLSCREEN = 0, IAA_SNAPPED_LEFT = 1, IAA_SNAPPED_RIGHT = 2 }; enum PLM_PACKAGE_STATE { PPS_UNKNOWN = 0, PPS_ACTIVE = 1, PPS_SUSPENDING = 2, PPS_SUSPENDED = 3, PPS_TERMINATED = 4 }; enum _PLM_TASK_COMPLETION_CATEGORY { PT_TC_INVALID = 0, PT_TC_PBM = 1, PT_TC_PICKER = 2, PT_TC_SHARING = 3, PT_TC_PRINTING = 4, PT_TC_DEVICE_SYNC = 5, PT_TC_KERNEL_MODE = 6, PT_TC_CAMERA_DCA = 7, PT_TC_PRINTER_DCA = 8, PT_TC_POWER_REQUEST = 9, PT_TC_MAX = 10 }; enum SWITCH_DIRECTION { SWITCH_OLDER = 0, SWITCH_NEWER = 1 }; enum DROP_FEEDBACK_ACTION { DFA_REGISTER = 0, DFA_UPDATE = 1 }; enum DROP_FEEDBACK_TYPE { DFT_DROP_AREA = 0, DFT_GUTTER = 1 }; enum IMMERSIVE_HOT_KEY_ID { IHKID_DESKTOP = 0, IHKID_MINIMIZEALL = 1, IHKID_SHAKE = 2, IHKID_PRIORPEARL = 3, IHKID_NEXTPEARL = 4, IHKID_SETTINGS = 5, IHKID_CHARMBAR = 6, IHKID_CHARMMENU = 7, IHKID_APPBAR = 8, IHKID_MAX = 9 }; enum IAM_APPLICATION_REALM { IAR_IMMERSIVE = 0, IAR_DESKTOP = 1, IAR_CURRENT = 2 }; enum IMMERSIVE_MONITOR_MOVE_DIRECTION { IMMD_PREVIOUS = 0, IMMD_NEXT = 1 }; enum TEMPORARY_APP_VISUAL_TYPE { TAVT_INVALID = 0, TAVT_DROPFEEDBACK = 1, TAVT_DRAGVISUAL = 2, TAVT_APPTIP = 3 }; enum IMM_SYSTEM_MODE { ISM_NONE = -1, ISM_DESKTOP = 0, ISM_IMMERSIVE = 1 }; enum IMM_APP_CHANGED { IAC_UNKNOWN = 0, IAC_STARTED = 1, IAC_FOREGROUND = 2, IAC_BACKGROUND = 3, IAC_SHOWN = 4, IAC_HIDDEN = 5, IAC_CLOSED = 6, IAC_WINDOWPRESENTATIONDECLINED = 7, IAC_PRESENTEDWINDOWCHANGED = 8, IAC_MOBODYENTERED = 9, IAC_MOBODYEXIT = 10, IAC_HASPACKAGEID = 11 }; enum APPCMDUI_INVOCATION_SOURCE { AIS_EDGEGESTURE = 0, AIS_KEYBOARDSHORTCUT = 1 }; enum EDGEUI_COMPONENT { EUIC_UNKNOWN = -1, EUIC_SWITCHER = 0, EUIC_CHARMSBAR = 1, EUIC_APPBAR = 2 }; enum SPLASHSCREEN_IMAGE_TYPE { SSIT_SMALL = 0, SSIT_LARGE = 1, SSIT_COUNT = 2, SSIT_INVALID = 3 }; enum __MIDL___MIDL_itf_shpriv_0000_0549_0001 { STC_UNINITIALIZED = 0, STC_SHARE = 1, STC_SEND = 2 }; enum TOUCHVIEW_SELECTION_MODE { TSM_SINGLE = 0, TSM_MULTIPLE = 1 }; enum tagCS_COLUMN_WIDTH_TYPE { COLWT_CURRENT = 0, COLWT_DEFAULT = 1, COLWT_MINIMUM = 2, COLWT_IDEAL = 3 }; enum tagSET_COLUMNS_NOTIFY_OPTIONS { SCNO_DEFAULT = 0, SCNO_REORDERONLY = 1 }; enum tagCS_COLUMN_SET { COLSET_ALL = 0, COLSET_VISIBLE = 1, COLSET_COLUMNID = 2 }; enum VIEW_SETTING_ID { VSIDF_VIEWMODE = 1, VSIDF_IMAGESIZE = 2, VSIDF_SORTCOLUMNS = 4, VSIDF_GROUPBY = 8, VSIDF_FOLDERFLAGS = 16, VSIDF_SUBSETCOUNT = 32, VSIDF_FOLDERTYPE = 64, VSIDF_VISIBLECOLUMNSWIDTH = 128, VSIDF_VISIBLECOLUMNSSET = 256, VSIDF_VISIBLECOLUMNSORDER = 512, VSIDF_VISIBLECOLUMNSALL = 896 }; enum GETSORTCOLUMN { GSC_ARRANGEBY = 0, GSC_SORTBY = 1 }; enum LINESCROLLERVALUE { LSV_VIRT_ANCHOR_X = 0, LSV_VIRT_ANCHOR_Y = 1, LSV_VIRT_TARGET_X = 2, LSV_VIRT_TARGET_Y = 3 }; enum SELECTIONSTATEVALUE { SSV_ITEM = 0, SSV_ISSELECTED = 1, SSV_ITEMCOLLECTION = 2, SSV_SELECTEDTYPE = 3 }; enum SELECTIONMANAGERVALUE { SMV_ITEMSELECTIONSTATES_REALIZED = 0, SMV_ITEMSELECTIONSTATES_UNREALIZED = 1, SMV_COLLECTIONSELECTIONSTATES_REALIZED = 2, SMV_COLLECTIONSELECTIONSTATES_UNREALIZED = 3, SMV_SELECTION = 4 }; enum ITEMDEVIRTUALIZERVALUE { IDV_STARTINGITEM = 0, IDV_DEVIRTUALIZATIONTYPE = 1, IDV_ISDEVIRTUALIZED = 2, IDV_HRDEVIRTUALIZE = 3, IDV_ELAPSEDFULLDEVIRTUALIZATIONTIME = 4 }; enum VIRTUALIZEDSELECTIONARRAYVALUE { VSAV_ZEROTHITEMDEVIRTUALIZER = 0, VSAV_PARTIALDEVIRTUALIZER = 1, VSAV_FULLDEVIRTUALIZER = 2, VSAV_STARTINGITEM = 3, VSAV_INDEXSTARTINGITEM = 4 }; enum VIRTUALUIGROUPITEMVALUE { VUGIV_VERSION = 0, VUGIV_ITEM = 1, VUGIV_ITEMCOLLECTION = 2 }; enum ELEMENTSPYVALUE { ESV_DISPLAYNAME = 0, ESV_POINTERVALUE = 1, ESV_UICOLLECTION_UIVERSION = 2, ESV_UICOLLECTION_DISPLAYNAME = 3, ESV_UICOLLECTION_COLLECTION = 4 }; enum ITEMSVIEWSPYVALUE { IVV_FOCUSEDITEM = 0, IVV_FIRSTPAGERESULTS_STATE = 1, IVV_SELECTIONMANAGER = 2, IVV_EVENTQUEUE_SIZE = 3, IVV_VIRTUALUIGROUPITEM_COLLECTION = 4, IVV_PROCESSID = 5, IVV_THREADID = 6, IVV_LINESCROLLER = 7 }; enum tagLC_NEXT_INDEX_STATE { LCNIS_DEFAULT = 0, LCNIS_SELECTED = 1, LCNIS_FOCUSED = 2, LCNIS_SELECTIONMARKED = 3 }; enum tagLC_SELECTION_MODE { LCSM_DESELECT_ALL = 0, LCSM_SELECT_ALL = 1, LCSM_INVERTSELECTION = 2 }; enum tagLC_ITEM_SET_ORDER { LCISO_DEFAULT = 0, LCISO_FOCUSEDFIRST = 1, LCISO_VISIBLEORDER = 2 }; enum tagLC_ITEM_SET_TYPE { LCIC_ALLITEMS = 0, LCIC_SELECTED = 1, LCIC_CHECKED = 2 }; enum tagLC_POINT_TYPE { LCPT_SCREEN = 0, LCPT_CLIENT = 1, LCPT_SCROLL = 2 }; enum tagUAEVENT { UAE_LAUNCH = 0, UAE_SWITCH = 1, UAE_TIME = 2, UAE_SESSION = 3, UAE_EXCLUDEAPP = 4 }; enum tagDESTCATTYPE { DCT_CUSTOM = 0, DCT_KNOWN = 1, DCT_TASKS = 2 }; enum tagSM_KEYBOARDNAVIGATE { SM_ENTERINGSEACHVIEW = 0, SM_INSIDESEARCHVIEW = 1 }; enum SHARING_MENU_PRESENTATION_STATE { PRESENTATION_STATE_UNKNOWN = 0, PRESENTATION_STATE_WORKGROUP = 1, PRESENTATION_STATE_HOMEGROUP = 2, PRESENTATION_STATE_DOMAIN = 3 }; enum SHARING_MENU_SHARE_STATE { SHARE_STATE_UNKNOWN = 0, SHARE_STATE_NOT_SHAREABLE = 1, SHARE_STATE_SHAREABLE = 2 }; enum SHARE_MODE { MODE_SMB = 0, MODE_INPLACE = 1, MODE_LIBRARY = 2, MODE_CLASSIC = 3 }; enum SHARE_ACTIVATION_MODE { ACTIVATION_MODE_PRIVATE = 0, ACTIVATION_MODE_HOMEGROUP_RO = 1, ACTIVATION_MODE_HOMEGROUP_RW = 2, ACTIVATION_MODE_HOMEGROUP_NONE = 3, ACTIVATION_MODE_USER_RO = 4, ACTIVATION_MODE_LIBRARY_ADD = 5, ACTIVATION_MODE_LIBRARY_REMOVAL = 6, ACTIVATION_MODE_OTHER = 7 }; enum _SHARE_ITEM_TYPE { SIT_FILE = 0, SIT_FOLDER = 1, SIT_DRIVE = 2, SIT_LIBRARY = 3, SIT_UNSUPPORTED = 4 }; enum _tagSHARE_EVENT { SHARE_EVT_ITEM_SHARED = 0, SHARE_EVT_ITEM_UNSHARED = 1, SHARE_EVT_ERR_ITEM_LOCATION = 2, SHARE_EVT_ERR_NO_WRITE_DAC = 3, SHARE_EVT_ERR_INHERITED_PERM = 4, SHARE_EVT_ERR_CORRUPTED_LIBRARY = 5, SHARE_EVT_ERR_EXCLUSION_FAILED = 6, SHARE_EVT_ERR_ROOTDRIVE = 7, SHARE_EVT_ERR_SYSTEM_LOCATION = 8, SHARE_EVT_ERR_FOLDER_UNAVAILABLE_SCOPE = 9, SHARE_EVT_WARN_PUBLISH_FAILED = 10, SHARE_EVT_WARN_UNPUBLISH_FAILED = 11, SHARE_EVT_WARN_UPDATE_FAILED = 12, SHARE_EVT_WARN_NOT_SUPPORTED_SCOPE = 13, SHARE_EVT_WARN_FILESYSTEM_ACLS_NOT_SUPPORTED = 14, SHARE_EVT_WARN_ITEM_FILTERED = 15 }; enum TRAYORIENTATION { TO_BOTTOM = 0, TO_RIGHT = 1, TO_LEFT = 2, TO_TOP = 3 }; enum tagBPASCODE { BPAS_START = 0, BPAS_INDETERMINATE = 1, BPAS_STOP = 2 }; enum PROPCTL_RECT_TYPE { PCRT_MINIMUM = 0, PCRT_IDEAL = 1 }; enum tagPROPCTL_FLAGS { PCF_NONE = 0, PCF_VISIBLE = 1, PCF_READONLY = 2, PCF_USEACTIVEBORDERS = 4, PCF_USEEDITINVITATION = 8, PCF_VERTPOS_TOP = 0, PCF_VERTPOS_CENTER = 16, PCF_VERTPOS_BOTTOM = 32, PCF_VERTPOS_MASK = 48, PCF_HORZPOS_LEFT = 0, PCF_HORZPOS_CENTER = 64, PCF_HORZPOS_RIGHT = 128, PCF_HORZPOS_MASK = 192, PCF_RTLREADING = 512, PCF_CAN_WRAP_TEXT = 1024, PCF_POS_MASK = 1776, PCF_NORMAL_TEXT = 0, PCF_SHADOW_TEXT = 256, PCF_FONT_MASK = 256, PCF_FLAGS_MASK = 2047 }; enum tagITEM_CHANGE_TYPE { ICHT_INSERT = 0, ICHT_DELETE = 1, ICHT_UPDATE = 2, ICHT_FILTER = 3 }; enum REMOVEITEMTYPE { RIT_DEFAULT = 0, RIT_DELETE = 1 }; enum SEARCHTEXTTYPE { STTYPE_DEFAULT = 0, STTYPE_INITIAL = 1 }; enum TRYHARDERSCOPES { THS_SPECIFIC_LIBRARY = 0, THS_ALL_LIBRARIES = 1, THS_ALL_USER_LIBRARIES = 2, THS_COMPUTER = 3, THS_CUSTOM_CANCEL = 4, THS_CUSTOM_NAVIGATE = 5, THS_INTERNET = 6, THS_GP_LIBRARY = 7, THS_GP_URL = 8, THS_SUBFOLDER = 9, THS_FILE_CONTENTS = 10, THS_UNUSED = 11, THS_OTHER = 12, THS_HISTORYVAULT = 13 }; enum AWSTYPE { AWS_SCURVE = 0, AWS_LINEAR = 1 }; enum tagRECYCLEBIN_TYPE { RBT_VOLUME = 0, RBT_KNOWNFOLDER = 1 }; enum SHELL_BROWSER_FRAME_SIZE_POSITION { SBFSP_XPOS = 1, SBFSP_XOFF = 2, SBFSP_YPOS = 4, SBFSP_YOFF = 8, SBFSP_WIDTHSET = 16, SBFSP_WIDTHINCR = 32, SBFSP_HEIGHTSET = 64, SBFSP_HEIGHTINCR = 128, = 32771 }; enum SHELLSEARCHCOMMAND { SSC_SEARCH_EXEC = 0, SSC_SEARCH_RETURNKEY = 1, SSC_AUTOCOMPLETE_DELETE = 2 }; enum SHELL_SEARCH_BAND_SEARCH_STATE { SSBSS_DEFAULT = 0, SSBSS_NEW_PROVIDERS = 1, SSBSS_WEB = 2, SSBSS_FOLDER = 3 }; enum GET_PROPERTY_STORE_TYPE { GIPST_CACHED = 0, GIPST_FALLBACK = 1 }; enum ENUM_FILE_INFORMATION_CLASS { ENUM_FILE_ID_BOTH_DIR_INFO = 0, ENUM_FILE_BOTH_DIR_INFO = 1, ENUM_FILE_FULL_DIR_INFO = 2 }; enum CONFIRMATIONRESPONSE { CONFRES_CONTINUE = 0, CONFRES_SKIP = 1, CONFRES_RETRY = 2, CONFRES_RENAME = 3, CONFRES_CANCEL = 4, CONFRES_UNDO = 5, CONFRES_RENAME_LEFT = 3, CONFRES_RENAME_RIGHT = 6, CONFRES_ELEVATE = 7, CONFRES_CLOSE = 8 }; enum DESTLISTTYPE { DLT_PINNED = 0, DLT_RECENT = 1, DLT_FREQUENT = 2 }; enum tagTASKTYPE { NOTASKS = 0, SPECIALPICTURETASKS = 1, SPECIALMUSICTASKS = 2, SPECIALDOCUMENTTASKS = 3, SPECIALVIDEOTASKS = 4, SPECIALGENERICTASKS = 5, VIEWCONTROLTASKS = 6, COMMONFILEDIALOGTASKS = 7 }; enum tagVIEWSETTINGACTION { VSA_Extend = 0, VSA_Clone = 1, VSA_Disconnect = 2, VSA_Force = 3, VSA_Noopt = 4, VSA_Unforce = 5 }; enum DISPLAYSETTINGEVENTTYPE { DSET_DISPLAYDATA_LOADED = 1, DSET_PATH_CHANGED = 2, DSET_VIEW_ORDER_CHANGED = 4, DSET_VIEW_POSITION_CHANGED = 256, DSET_VIEW_RESOLUTION_CHANGED = 512, DSET_VIEW_COLOR_CHANGED = 1024, DSET_VIEW_FREQ_CHANGED = 2048, DSET_VIEW_ROTATION_CHANGED = 4096, DSET_VIEW_PRIMARY_CHANGED = 8192, DSET_VIEW_AUTOROTATION_CHANGED = 16384, = 32770 }; enum tagPropPageOnApply { PPOAACTION_CANCEL = 0, PPOAACTION_OK = 1, PPOAACTION_APPLY = 2 }; enum OPERATION_TYPE { OT_NONE = 0, OT_COPY = 1, OT_MOVE = 2, OT_RECYCLE = 3, OT_DELETE = 4, OT_RENAME = 5, OT_APPLYPROPS = 6, OT_DOWNLOAD = 7, OT_MOVE_AS_COPY_DELETE = 8 }; enum OPERATION_MODE { OM_PREPARING = 1, OM_RUNNING = 2, OM_INDETERMINATE = 3, OM_INTERRUPTED = 4 }; enum RESOLUTION_TYPE { RT_REPLACE = 1, RT_SKIP = 2, RT_DECIDEFOREACH = 3 }; enum OPERATION_INTERRUPT_RESPONSE_SINGLE { OIRS_ELEVATE = 1, OIRS_DELETE = 2, OIRS_SKIP = 3, OIRS_CANCEL = 4, OIRS_RETRY = 5, OIRS_YES = 6, OIRS_OK = 7, OIRS_NO = 8, OIRS_KEEPSOURCE = 9, OIRS_KEEPDEST = 10, OIRS_KEEPBOTH = 11 }; enum FLYOUTMENU_SETTING { FMS_ShowSleepOption = 0, FMS_ShowHibernateOption = 1, FMS_ShowLockOption = 2 }; enum __MIDL___MIDL_itf_structuredquery_0000_0012_0001 { NEC_LOW = 0, NEC_MEDIUM = 1, NEC_HIGH = 2 }; enum tagQUERY_PARSER_MANAGER_OPTION { QPMO_SCHEMA_BINARY_NAME = 0, QPMO_PRELOCALIZED_SCHEMA_BINARY_PATH = 1, QPMO_UNLOCALIZED_SCHEMA_BINARY_PATH = 2, QPMO_LOCALIZED_SCHEMA_BINARY_PATH = 3, QPMO_APPEND_LCID_TO_LOCALIZED_PATH = 4, QPMO_LOCALIZER_SUPPORT = 5 }; enum tagINTERVAL_LIMIT_KIND { ILK_EXPLICIT_INCLUDED = 0, ILK_EXPLICIT_EXCLUDED = 1, ILK_NEGATIVE_INFINITY = 2, ILK_POSITIVE_INFINITY = 3 }; enum CASE_REQUIREMENT { CASE_REQUIREMENT_ANY = 0, CASE_REQUIREMENT_UPPER_IF_AQS = 1 }; enum tagSTRUCTURED_QUERY_PARSE_ERROR { SQPE_NONE = 0, SQPE_EXTRA_OPENING_PARENTHESIS = 1, SQPE_EXTRA_CLOSING_PARENTHESIS = 2, SQPE_IGNORED_MODIFIER = 3, SQPE_IGNORED_CONNECTOR = 4, SQPE_IGNORED_KEYWORD = 5, SQPE_UNHANDLED = 6 }; enum tagSTRUCTURED_QUERY_MULTIOPTION { SQMO_VIRTUAL_PROPERTY = 0, SQMO_DEFAULT_PROPERTY = 1, SQMO_GENERATOR_FOR_TYPE = 2, SQMO_MAP_PROPERTY = 3 }; enum tagSTRUCTURED_QUERY_SINGLE_OPTION { SQSO_SCHEMA = 0, SQSO_LOCALE_WORD_BREAKING = 1, SQSO_WORD_BREAKER = 2, SQSO_NATURAL_SYNTAX = 3, SQSO_AUTOMATIC_WILDCARD = 4, SQSO_TRACE_LEVEL = 5, SQSO_LANGUAGE_KEYWORDS = 6, SQSO_SYNTAX = 7, SQSO_TIME_ZONE = 8, SQSO_IMPLICIT_CONNECTOR = 9, SQSO_CONNECTOR_CASE = 10 }; enum tagSTRUCTURED_QUERY_SYNTAX { SQS_NO_SYNTAX = 0, SQS_ADVANCED_QUERY_SYNTAX = 1, SQS_NATURAL_QUERY_SYNTAX = 2 }; enum SYNCMGR_PRESENTER_CHOICE { SYNCMGR_PC_NO_CHOICE = 0, SYNCMGR_PC_KEEP_ONE = 1, SYNCMGR_PC_KEEP_MULTIPLE = 2, SYNCMGR_PC_KEEP_RECENT = 3, SYNCMGR_PC_REMOVE_FROM_SYNC_SET = 4, SYNCMGR_PC_SKIP = 5 }; enum SYNCMGR_PRESENTER_NEXT_STEP { SYNCMGR_PNS_CONTINUE = 0, SYNCMGR_PNS_DEFAULT = 1, SYNCMGR_PNS_CANCEL = 2 }; enum SYNCMGR_RESOLUTION_FEEDBACK { SYNCMGR_RF_CONTINUE = 0, SYNCMGR_RF_REFRESH = 1, SYNCMGR_RF_CANCEL = 2 }; enum SYNCMGR_UPDATE_REASON { SYNCMGR_UR_ADDED = 0, SYNCMGR_UR_CHANGED = 1, SYNCMGR_UR_REMOVED = 2, SYNCMGR_UR_MAX = 2 }; enum SYNCMGR_EVENT_LEVEL { SYNCMGR_EL_INFORMATION = 1, SYNCMGR_EL_WARNING = 2, SYNCMGR_EL_ERROR = 3, SYNCMGR_EL_MAX = 3 }; enum SYNCMGR_CANCEL_REQUEST { SYNCMGR_CR_NONE = 0, SYNCMGR_CR_CANCEL_ITEM = 1, SYNCMGR_CR_CANCEL_ALL = 2, SYNCMGR_CR_MAX = 2 }; enum SYNCMGR_PROGRESS_STATUS { SYNCMGR_PS_UPDATING = 1, SYNCMGR_PS_UPDATING_INDETERMINATE = 2, SYNCMGR_PS_SUCCEEDED = 3, SYNCMGR_PS_FAILED = 4, SYNCMGR_PS_CANCELED = 5, SYNCMGR_PS_DISCONNECTED = 6, SYNCMGR_PS_MAX = 6 }; enum SYNCMGR_HANDLER_TYPE { SYNCMGR_HT_UNSPECIFIED = 0, SYNCMGR_HT_APPLICATION = 1, SYNCMGR_HT_DEVICE = 2, SYNCMGR_HT_FOLDER = 3, SYNCMGR_HT_SERVICE = 4, SYNCMGR_HT_COMPUTER = 5, SYNCMGR_HT_MIN = 0, SYNCMGR_HT_MAX = 5 }; enum SYNCMGR_HANDLER_POLICIES { SYNCMGR_HPM_NONE = 0, SYNCMGR_HPM_PREVENT_ACTIVATE = 1, SYNCMGR_HPM_PREVENT_DEACTIVATE = 2, SYNCMGR_HPM_PREVENT_ENABLE = 4, SYNCMGR_HPM_PREVENT_DISABLE = 8, SYNCMGR_HPM_PREVENT_START_SYNC = 16, SYNCMGR_HPM_PREVENT_STOP_SYNC = 32, SYNCMGR_HPM_DISABLE_ENABLE = 256, SYNCMGR_HPM_DISABLE_DISABLE = 512, SYNCMGR_HPM_DISABLE_START_SYNC = 1024, SYNCMGR_HPM_DISABLE_STOP_SYNC = 2048, SYNCMGR_HPM_DISABLE_BROWSE = 4096, SYNCMGR_HPM_DISABLE_SCHEDULE = 8192, /* SYNCMGR_HPM_HIDDEN_BY_DEFAULT = Unavail */ }; enum SECURELOCKCODE { SECURELOCK_NOCHANGE = -1, SECURELOCK_SET_UNSECURE = 0, SECURELOCK_SET_MIXED = 1, SECURELOCK_SET_SECUREUNKNOWNBIT = 2, SECURELOCK_SET_SECURE40BIT = 3, SECURELOCK_SET_SECURE56BIT = 4, SECURELOCK_SET_FORTEZZA = 5, SECURELOCK_SET_SECURE128BIT = 6, SECURELOCK_FIRSTSUGGEST = 7, SECURELOCK_SUGGEST_UNSECURE = 7, SECURELOCK_SUGGEST_MIXED = 8, SECURELOCK_SUGGEST_SECUREUNKNOWNBIT = 9, SECURELOCK_SUGGEST_SECURE40BIT = 10, SECURELOCK_SUGGEST_SECURE56BIT = 11, SECURELOCK_SUGGEST_FORTEZZA = 12, SECURELOCK_SUGGEST_SECURE128BIT = 13 }; enum APP_INFO_PROPERTY { AIP_NAME = 0, AIP_LOGO_URL = 1, AIP_SCREENSHOT_URL = 2, AIP_CURRENCY_SYMBOL = 3, AIP_PRICE = 4, AIP_DESCRIPTION = 5, AIP_FEATURES = 6, AIP_RATING = 7, AIP_CATEGORY = 8, AIP_CATEGORYID = 9, AIP_SUBCATEGORY = 10, AIP_SUBCATEGORYID = 11, AIP_VERSION = 12, AIP_RELEASE_DATE = 13, AIP_SIZE = 14, AIP_LANGUAGE = 15, AIP_SYSTEM_REQUIREMENTS = 16, AIP_APP_CAPABILITIES = 17, AIP_DEVICE_CAPABILITIES = 18, AIP_EULA = 19, AIP_RELEASE_NOTES = 20, AIP_FREE_APP = 21, AIP_FREE_TRIAL_AVAILABLE = 22, AIP_LICENSE_STATUS = 23, AIP_INSTALL_STATUS = 24, AIP_DEVELOPER = 25, AIP_PUBLISHER = 26, AIP_WEBSITE = 27, AIP_SUPPORT_FORUM = 28, AIP_DEVELOPER_EMAIL = 29, AIP_REVIEW_COUNT = 30, AIP_SUPPORTED_ARCHITECTURES = 31, AIP_REVIEW_RATING = 32, AIP_REVIEW_TITLE = 33, AIP_REVIEW_COMMENT = 34, AIP_RATING_COUNT = 35, AIP_APP_LANGUAGE = 36, AIP_FOREFROUND_COLOR = 37, AIP_BACKGROUND_COLOR = 38, AIP_GAMERATINGS = 39, AIP_CONTENTRATING = 40, AIP_ACCESSIBLE = 41, AIP_COPYRIGHT = 42 }; struct Windows::Devices::Input::PointerDeviceUsage { unsigned char UsagePage[4]; /* +0x0000 75 00 00 00 */ unsigned char Usage[4]; /* +0x0004 75 00 00 00 */ unsigned char MinLogical[4]; /* +0x0008 74 00 00 00 */ unsigned char MaxLogical[4]; /* +0x000c 74 00 00 00 */ unsigned char MinPhysical[4]; /* +0x0010 74 00 00 00 */ unsigned char MaxPhysical[4]; /* +0x0014 74 00 00 00 */ unsigned char Unit[4]; /* +0x0018 75 00 00 00 */ unsigned char PhysicalMultiplier[4]; /* +0x001c 40 00 00 00 */ }; struct Windows::UI::Core::CoreProximityEvaluation { unsigned char Score[4]; /* +0x0000 74 00 00 00 */ unsigned char AdjustedPoint[8]; /* +0x0004 36 9e 00 00 */ }; struct Windows::UI::Core::CorePhysicalKeyStatus { unsigned char RepeatCount[4]; /* +0x0000 75 00 00 00 */ unsigned char ScanCode[4]; /* +0x0004 75 00 00 00 */ unsigned char IsExtendedKey; /* +0x0008 */ unsigned char IsMenuKeyDown; /* +0x0009 */ unsigned char WasKeyDown; /* +0x000a */ unsigned char IsKeyReleased; /* +0x000b */ }; enum APP_INFO_CATEGORY_FLAGS { AIC_NONE = 0, AIC_BASIC = 1, AIC_ADVANCED = 2, AIC_INSTALL = 4, AIC_LICENSE = 8, AIC_REVIEW = 16, AIC_REVIEWLIST = 32 }; struct CONFIRM_CONFLICT_ITEM { unsigned char pShellItem[4]; /* +0x0000 0a b9 00 00 */ unsigned char pszOriginalName[4]; /* +0x0004 71 04 00 00 */ unsigned char pszAlternateName[4]; /* +0x0008 71 04 00 00 */ unsigned char pszLocationShort[4]; /* +0x000c 71 04 00 00 */ unsigned char pszLocationFull[4]; /* +0x0010 71 04 00 00 */ unsigned char nType[4]; /* +0x0014 0b b9 00 00 */ }; enum tagQueryUpdateAction { QUA_ADD = 0, QUA_REMOVE = 1, QUA_CHANGE = 2 }; struct CONFLICT_ITEM_METADATA { unsigned char ftDateModified[8]; /* +0x0000 91 14 00 00 */ unsigned long long ullSize; /* +0x0008 */ unsigned char pszItemName[4]; /* +0x0010 71 04 00 00 */ unsigned char pszItemPath[4]; /* +0x0014 71 04 00 00 */ }; enum tagDISPLAY_SUPPORTED_ORIENTATIONS { DSO_NONE = 0, DSO_0 = 1, DSO_90 = 2, DSO_180 = 4, DSO_270 = 8 }; enum tagENUMVIEWPROPFLAG { EVPF_NO_UNMATCH_ASPECRATIO = 1, EVPF_DISTINCT_RESOLUTION = 2 }; enum tagUISCB_FLAGS { UISCBF_HASITEMSREADY = 1, UISCBF_ITEMSREADY = 2 }; struct _RESOLVED_USERNAME_INFO { unsigned char bResolved[4]; /* +0x0000 74 00 00 00 */ unsigned char pszResolvedName[4]; /* +0x0004 71 04 00 00 */ }; struct _RESOLVED_USERNAME_LIST { unsigned long cItems; /* +0x0000 */ unsigned char rgUserNameInfo[8]; /* +0x0004 4e b9 00 00 */ }; enum NAMESPACE_FOLDER_PREFERENCES_FLAGS { FVPF_DEFAULT = 0, FVPF_ALLOWITEMSVIEW = 1 }; enum _BACKGROUND_TASK_CAPABILITY { BTC_AUDIO = 1, BTC_REALTIME_COMMUNICATION = 2, BTC_SYSTEM_EVENT = 4, BTC_TIMER = 8, BTC_PUSH_NOTIFICATION = 16, ˙˙BTC_ANY_CAPABILITY = 32770 }; struct XWinRT::XPlex { unsigned char pNext[4]; /* +0x0000 d5 ba 00 00 */ }; struct XWinRT::detail::ReentrancyGuard<1> { unsigned char _hr[4]; /* +0x0000 08 00 00 00 */ unsigned char _pGuard[4]; /* +0x0004 76 43 00 00 */ }; struct XWinRT::FakeStl::_align_type { /* unsigned char _val[0]; +0x0000 74 00 00 00 */ unsigned char _pad[4]; /* +0x0000 21 bc 00 00 */ }; struct XWinRT::IntVersionTag { unsigned char _iVersion[4]; /* +0x0000 74 00 00 00 */ }; struct CHttpResponseInfo::HEADER_NAME_VALUE { unsigned char pszHeaderName[4]; /* +0x0000 4f 13 00 00 */ unsigned char rgpszHeaderValues[4]; /* +0x0004 d1 12 00 00 */ unsigned char pcValues[4]; /* +0x0008 75 04 00 00 */ }; struct CHttpResponseInfo::HEADER_MODIFIER { unsigned char pszHeaderName[4]; /* +0x0000 4f 13 00 00 */ unsigned long dwModifier; /* +0x0004 */ }; struct CHttpResponseInfo::INTERNAL_HNV { unsigned char phnv[4]; /* +0x0000 1d be 00 00 */ unsigned char cValuesMax[4]; /* +0x0004 75 00 00 00 */ unsigned char iHeaderLast[4]; /* +0x0008 75 00 00 00 */ }; struct _DRMID { unsigned char uVersion[4]; /* +0x0000 75 00 00 00 */ unsigned char wszIDType[4]; /* +0x0004 71 04 00 00 */ unsigned char wszID[4]; /* +0x0008 71 04 00 00 */ }; struct _DRMBOUNDLICENSEPARAMS { unsigned char uVersion[4]; /* +0x0000 75 00 00 00 */ unsigned long hEnablingPrincipal; /* +0x0004 */ unsigned long hSecureStore; /* +0x0008 */ unsigned char wszRightsRequested[4]; /* +0x000c 71 04 00 00 */ unsigned char wszRightsGroup[4]; /* +0x0010 71 04 00 00 */ unsigned char idResource[12]; /* +0x0014 5d be 00 00 */ unsigned char cAuthenticatorCount[4]; /* +0x0020 75 00 00 00 */ unsigned long *rghAuthenticators; /* +0x0024 */ unsigned char wszDefaultEnablingPrincipalCredentials[4]; /* +0x0028 71 04 00 00 */ unsigned long dwFlags; /* +0x002c */ }; struct _DRM_LICENSE_ACQ_DATA { unsigned char uVersion[4]; /* +0x0000 75 00 00 00 */ unsigned char wszURL[4]; /* +0x0004 71 04 00 00 */ unsigned char wszLocalFilename[4]; /* +0x0008 71 04 00 00 */ unsigned char *pbPostData; /* +0x000c */ unsigned long dwPostDataSize; /* +0x0010 */ unsigned char wszFriendlyName[4]; /* +0x0014 71 04 00 00 */ }; struct _DRM_ACTSERV_INFO { unsigned char uVersion[4]; /* +0x0000 75 00 00 00 */ unsigned char wszPubKey[4]; /* +0x0004 71 04 00 00 */ unsigned char wszURL[4]; /* +0x0008 71 04 00 00 */ }; struct _DRM_CLIENT_VERSION_INFO { unsigned char uStructVersion[4]; /* +0x0000 75 00 00 00 */ unsigned char dwVersion[16]; /* +0x0004 c2 15 00 00 */ unsigned char wszHierarchy[512]; /* +0x0014 49 22 00 00 */ unsigned char wszProductId[512]; /* +0x0214 49 22 00 00 */ unsigned char wszProductDescription[512]; /* +0x0414 49 22 00 00 */ }; struct URL_COMPONENTS { unsigned long dwStructSize; /* +0x0000 */ unsigned char lpszScheme[4]; /* +0x0004 71 04 00 00 */ unsigned long dwSchemeLength; /* +0x0008 */ unsigned char nScheme[4]; /* +0x000c 74 00 00 00 */ unsigned char lpszHostName[4]; /* +0x0010 71 04 00 00 */ unsigned long dwHostNameLength; /* +0x0014 */ unsigned short nPort; /* +0x0018 */ unsigned char lpszUserName[4]; /* +0x001c 71 04 00 00 */ unsigned long dwUserNameLength; /* +0x0020 */ unsigned char lpszPassword[4]; /* +0x0024 71 04 00 00 */ unsigned long dwPasswordLength; /* +0x0028 */ unsigned char lpszUrlPath[4]; /* +0x002c 71 04 00 00 */ unsigned long dwUrlPathLength; /* +0x0030 */ unsigned char lpszExtraInfo[4]; /* +0x0034 71 04 00 00 */ unsigned long dwExtraInfoLength; /* +0x0038 */ }; enum CNamespace::SORT_TYPE { ST_BROWSE = 0, ST_SEARCH = 1 }; enum CWinStorePCS::PCS_STATE { PCS_IDLE = 0, PCS_AUTH_USER = 1, PCS_IN_ADD_PAYMENT_ACCOUNT = 2, PCS_IN_SET_DEFAULT_PI = 3, PCS_ERROR = 4 }; struct FRAME_HOST_PATH { unsigned char pszFrame[4]; /* +0x0000 4f 13 00 00 */ unsigned char pszHostname[4]; /* +0x0004 4f 13 00 00 */ unsigned char pszPath[4]; /* +0x0008 4f 13 00 00 */ }; enum PURCHASE_TYPE { PT_BUY = 1, PT_TRY = 2, PT_IN_APP = 3, PT_TOKEN = 4, PT_INSTALLONLY = 5, PT_DCA = 6 }; enum CInAppPurchaseDlg::PURCHASE_EVENT_TYPE { PET_APP_TILE = 0, PET_CREATE_PURCHASE = 1, PET_CONFIRM_PURCHASE = 2, PET_ACQUIRE_LICENSE = 3 }; enum CInAppPurchaseDlg::PURCHASE_STATE { PS_GETTING_PRICE = 0, PS_SHOWING_PRICE = 1, PS_PURCHASING = 2, PS_PURCHASE_CONFIRMED = 3, PS_ERROR = 4 }; struct TRgOffset { unsigned long cItems; /* +0x0000 */ unsigned char offrg[4]; /* +0x0004 75 00 00 00 */ }; struct PURCHASE_CREATE_RESPONSE_DATA { unsigned long ulErr; /* +0x0000 */ unsigned char bstrPcsUrl[4]; /* +0x0004 71 04 00 00 */ unsigned char bstrTransactionId[4]; /* +0x0008 71 04 00 00 */ unsigned char bstrCurrency[4]; /* +0x000c 71 04 00 00 */ unsigned char bstrCurrencySymbol[4]; /* +0x0010 71 04 00 00 */ unsigned char bstrPrice[4]; /* +0x0014 71 04 00 00 */ unsigned char pd[12]; /* +0x0018 9c 73 00 00 */ }; struct ERROR_AND_WSF { unsigned long ulError; /* +0x0000 */ unsigned char wsf[4]; /* +0x0004 d6 c0 00 00 */ }; struct PURCHASE_CONFIRM_RESPONSE_DATA { unsigned long ulErr; /* +0x0000 */ }; enum COMMERCE_ACTIONS { CA_INAPP_CREATE = 0, CA_INAPP_CONFIRM = 1, CA_PURCHASE_CREATE = 2, CA_PURCHASE_CONFIRM = 3, CA_PAYMENT_CREATE_ACCOUNT = 4, CA_PAYMENT_ADD_ACCOUNT = 5, CA_PAYMENT_ADD_PI = 6, CA_PAYMENT_SET_DEFAULT_PI = 7, CA_AUTH_FOR_PCS = 8, CA_MAX = 9 }; struct ERROR_TO_IDS { unsigned long ulError; /* +0x0000 */ unsigned char ids[4]; /* +0x0004 74 00 00 00 */ }; struct COMMERCE_SERVICE_AND_SELECTOR { unsigned char service[4]; /* +0x0000 13 69 00 00 */ unsigned char pszSelector[4]; /* +0x0004 4f 13 00 00 */ }; struct AUTH_FOR_PCS_RESPONSE { unsigned char rgpszCookies[4]; /* +0x0000 d1 12 00 00 */ unsigned char cCookies[4]; /* +0x0004 75 00 00 00 */ unsigned char pszP3P[4]; /* +0x0008 71 04 00 00 */ }; enum tagSearchScope { searchScopeDefault = 0, searchScopeMachineOnly = 1, searchScopeCurrentUserOnly = 2, searchScopeMachineAndCurrentUser = 3, searchScopeMachineAndAllUsers = 4, searchScopeAllUsers = 5 }; enum InternetCookieState { COOKIE_STATE_UNKNOWN = 0, COOKIE_STATE_ACCEPT = 1, COOKIE_STATE_PROMPT = 2, COOKIE_STATE_LEASH = 3, COOKIE_STATE_DOWNGRADE = 4, COOKIE_STATE_REJECT = 5, COOKIE_STATE_MAX = 5 }; enum INTERNET_SCHEME { INTERNET_SCHEME_PARTIAL = -1, INTERNET_SCHEME_UNKNOWN = -1, INTERNET_SCHEME_DEFAULT = 0, INTERNET_SCHEME_FTP = 1, INTERNET_SCHEME_GOPHER = 2, INTERNET_SCHEME_HTTP = 3, INTERNET_SCHEME_HTTPS = 4, INTERNET_SCHEME_FILE = 5, INTERNET_SCHEME_NEWS = 6, INTERNET_SCHEME_MAILTO = 7, INTERNET_SCHEME_SOCKS = 8, INTERNET_SCHEME_JAVASCRIPT = 9, INTERNET_SCHEME_VBSCRIPT = 10, INTERNET_SCHEME_RES = 11, INTERNET_SCHEME_FIRST = 1, INTERNET_SCHEME_LAST = 11 }; enum Windows::UI::Popups::Placement { Placement_Above = 0, Placement_Below = 1, Placement_Left = 2, Placement_Right = 3 }; struct PHASE2_INIT { unsigned char hr[4]; /* +0x0000 08 00 00 00 */ void *hSemaphore; /* +0x0004 */ }; struct AUTH_UNIQUE_ID_INFORMATION { void *hEvent; /* +0x0000 */ unsigned char pszUniqueID[4]; /* +0x0004 71 04 00 00 */ unsigned char hr[4]; /* +0x0008 08 00 00 00 */ }; struct AUTH_SERVICE_TICKET_INFORMATION { void *hEvent; /* +0x0000 */ unsigned char pszPolicy[4]; /* +0x0004 4f 13 00 00 */ unsigned char authenticationFlag[4]; /* +0x0008 37 b8 00 00 */ unsigned char pszServiceTicket[4]; /* +0x000c 71 04 00 00 */ unsigned char hr[4]; /* +0x0010 08 00 00 00 */ }; struct AUTH_WEB_AUTH_INFORMATION { void *hEvent; /* +0x0000 */ unsigned char pszUrl[4]; /* +0x0004 4f 13 00 00 */ unsigned char pszAuthUrl[4]; /* +0x0008 71 04 00 00 */ unsigned char pszPostData[4]; /* +0x000c 71 04 00 00 */ unsigned char hr[4]; /* +0x0010 08 00 00 00 */ }; struct AUTH_LOGOUT_INFORMATION { void *hEvent; /* +0x0000 */ unsigned char hr[4]; /* +0x0004 08 00 00 00 */ }; enum CCacheWorkitem::WORKITEM_OPERATION { WO_QUERY = 0, WO_STORE = 1, WO_PURGE_EXPIRED_ENTRIES = 2, WO_DELETE_FILE = 3, WO_CHECK_DISK_USAGE = 4 }; enum CMetadataRecords::PURGE_TYPE { PT_EXPIRED = 0, PT_ALL = 1, PT_OLD = 2 }; enum CMetadataRecords::BLOCKTYPE_LIST { BT_FREELIST = 0, BT_METADATA = 1 }; enum CMetadataRecords::TRAVERSAL_DIRECTION { TD_LEFT = 0, TD_RIGHT = 1, TD_NEXT = 2 }; struct CACHEPROVIDER { unsigned char Provider[4]; /* +0x0000 2e 4b 00 00 */ unsigned char pfnCreate[4]; /* +0x0004 ed d0 00 00 */ }; struct HEAP_BLOCK { unsigned char offNextBlock[8]; /* +0x0000 75 00 00 00 */ unsigned long long lReadFirst; /* +0x0008 */ unsigned long long lReadLast; /* +0x0010 */ /* unsigned char record[0]; +0x0018 32 d1 00 00 */ unsigned char stNameContinued[296]; /* +0x0018 33 d1 00 00 */ }; struct METADATA_RECORD { unsigned char offLeft[4]; /* +0x0000 75 00 00 00 */ unsigned char offRight[4]; /* +0x0004 75 00 00 00 */ unsigned long dwProvider; /* +0x0008 */ long long lLastModified; /* +0x0010 */ long long lExpiryTime; /* +0x0018 */ unsigned char cRetriesRemaining[4]; /* +0x0020 75 00 00 00 */ unsigned char cchName[4]; /* +0x0024 75 00 00 00 */ unsigned char stName[256]; /* +0x0028 7e 13 00 00 */ }; struct METADATA_HEADER { unsigned long dwVersion; /* +0x0000 */ unsigned char cbHeap[4]; /* +0x0004 75 00 00 00 */ unsigned char offMetadata[4]; /* +0x0008 75 00 00 00 */ unsigned char offFreelist[4]; /* +0x000c 75 00 00 00 */ unsigned long long lReadFirst; /* +0x0010 */ unsigned long long lReadLast; /* +0x0018 */ }; enum CSimpleStack<`CMetadataRecords::EnumerateTreeInorder'::`2'::BLOCK_AND_PARENT>::Direction { D_BOTTOM_UP = 0, D_TOP_DOWN = 1 }; struct CMetadataRecords::PURGE_CONTEXT_INFO { unsigned char Stack[12]; /* +0x0000 d4 d1 00 00 */ unsigned char pt[4]; /* +0x000c 08 d1 00 00 */ }; struct CMetadataRecords::BLOCK_AND_PARENT { unsigned char pBlock[4]; /* +0x0000 11 d1 00 00 */ unsigned char pParent[4]; /* +0x0004 11 d1 00 00 */ }; struct CMetadataRecords::EnumerateTreeInorder::__l2::BLOCK_AND_PARENT { unsigned char pBlock[4]; /* +0x0000 11 d1 00 00 */ unsigned char pParent[4]; /* +0x0004 11 d1 00 00 */ unsigned char tdNext[4]; /* +0x0008 18 d1 00 00 */ }; enum XML_NODE_TYPES { XNT_BSTR = 1, XNT_BOOL = 3, XNT_ULONG = 4, XNT_IMAGE_URL = 5, = 32771 }; enum SERVICE_CATEGORIES { SC_BROWSE = 0, SC_SEARCH = 1, SC_4R = 2, SC_4RLIMITED = 3, SC_PURCHASE = 4, SC_LICENSING = 5, SC_IMAGES = 6, SC_PAGES = 7, SC_BI = 8, SC_IDENTITY = 9, SC_AUTH = 10, SC_DEVLICENSING = 11, SC_BANNEDAPPS = 12, SC_MAX = 13 }; enum SERVICE_FLAGS { SF_NONE = 0, SF_POST = 1, SF_CACHEABLE_POST = 2 }; struct SERVICE_RETRY_INFO { unsigned long ulBackoffInterval; /* +0x0000 */ long long ullLastFailure; /* +0x0008 */ unsigned long cRetriesMax; /* +0x0010 */ unsigned long cRetriesRemaining; /* +0x0014 */ }; struct SERVICE_NAMES { unsigned char sc[4]; /* +0x0000 32 d2 00 00 */ unsigned char pszName[4]; /* +0x0004 71 04 00 00 */ unsigned char flags[4]; /* +0x0008 33 d2 00 00 */ }; struct ANNOTATION_TO_VALUE { unsigned char pszAnnotation[4]; /* +0x0000 71 04 00 00 */ unsigned char pfnGetValue[4]; /* +0x0004 12 17 00 00 */ }; struct XML_NODE_INFO { unsigned char pszXpath[4]; /* +0x0000 4f 13 00 00 */ unsigned char offVal[4]; /* +0x0004 75 00 00 00 */ unsigned char xnt[4]; /* +0x0008 4e d2 00 00 */ }; enum HttpRequestCallbackType { HttpRequestStart = 0, HttpRequestRedirected = 1, HttpRequestDataDownloaded = 2, HttpRequestDataUploaded = 3, HttpRequestDataUploadResponse = 4 }; struct HISTORY_FILE_HEADER { unsigned long dwVersion; /* +0x0000 */ }; struct PROTOCOL_ACTIONS { unsigned char pszAction[4]; /* +0x0000 4f 13 00 00 */ unsigned char pfnAction[4]; /* +0x0004 b0 51 00 00 */ }; struct Microsoft::WRL::Details::CreatorMap { unsigned char factoryCreator[20]; /* +0x0000 b1 75 00 00 */ }; enum CInstallProgressManager::APP_STORE_INSTALL_STATE { IS_NONE = 0, IS_UPDATE_AVAILABLE = 1, IS_ACQUIRING_LICENSE = 2, IS_DOWNLOADING = 3, IS_INSTALLING = 4, IS_PAUSED = 5, IS_CANCELLED = 6, IS_ERROR = 7, IS_COMPLETED = 8 }; enum CUpdateList::PHASE { PHASE_INVALID = 0, PHASE_WU = 1, PHASE_APPINFO = 2 }; enum _tagWSLICENSE_LICENSE_STATUS { WSLICENSE_STATUS_UNLICENSED = 0, WSLICENSE_STATUS_ACTIVE = 1, WSLICENSE_STATUS_EXPIRED = 2, WSLICENSE_STATUS_REVOKED = 3, WSLICENSE_STATUS_BANNED = 4 }; enum _tagWSLICENSE_LICENSE_TYPE { WSLICENSE_TYPE_TRIAL = 0, WSLICENSE_TYPE_FULL = 1 }; struct _tagWS_PRODUCT_LICENSE_RESULTS { unsigned char eStatus[4]; /* +0x0000 39 d9 00 00 */ unsigned char hrReason[4]; /* +0x0004 08 00 00 00 */ unsigned char ftValidityExpiration[8]; /* +0x0008 91 14 00 00 */ unsigned char eType[4]; /* +0x0010 3a d9 00 00 */ unsigned char productID[16]; /* +0x0014 ce 13 00 00 */ }; struct _tagWS_FEATURE_LICENSE_RESULTS { unsigned char eStatus[4]; /* +0x0000 39 d9 00 00 */ unsigned char hrReason[4]; /* +0x0004 08 00 00 00 */ unsigned char ftValidityExpiration[8]; /* +0x0008 91 14 00 00 */ unsigned char pwszFeatureID[204]; /* +0x0010 41 d9 00 00 */ }; enum CPurchasedAppList::PHASE { PHASE_INVALID = 0, PHASE_LICENSE = 1, PHASE_APPINFO = 2 }; struct tagWSActiveDevice { unsigned char machineID[16]; /* +0x0000 ce 13 00 00 */ unsigned char ftDatedAdded[8]; /* +0x0010 91 14 00 00 */ unsigned char SystemName[4]; /* +0x0018 4f 13 00 00 */ unsigned char Manufacturer[4]; /* +0x001c 4f 13 00 00 */ unsigned char Model[4]; /* +0x0020 4f 13 00 00 */ }; struct CLicenseProvider::GetData::__l2:: { unsigned char pszSelector[4]; /* +0x0000 4f 13 00 00 */ unsigned char pfnProvider[4]; /* +0x0004 54 db 00 00 */ }; struct { unsigned char pszName[4]; /* +0x0000 4f 13 00 00 */ unsigned char aip[4]; /* +0x0004 bd b8 00 00 */ unsigned char aic[4]; /* +0x0008 a7 b8 00 00 */ }; enum REVIEW_SORT_BY { REVIEW_SORT_DATE = 0, REVIEW_SORT_RATING = 1, REVIEW_SORT_HELPFUL = 2 }; enum REVIEW_SORT_DIRECTION { REVIEW_SORT_ASCENDING = 0, REVIEW_SORT_DESCENDING = 1 }; struct WINHTTP_ASYNC_RESULT { unsigned long dwResult; /* +0x0000 */ unsigned long dwError; /* +0x0004 */ }; struct WINHTTP_PROXY_INFO { unsigned long dwAccessType; /* +0x0000 */ unsigned char lpszProxy[4]; /* +0x0004 71 04 00 00 */ unsigned char lpszProxyBypass[4]; /* +0x0008 71 04 00 00 */ }; struct WINHTTP_CURRENT_USER_IE_PROXY_CONFIG { unsigned char fAutoDetect[4]; /* +0x0000 74 00 00 00 */ unsigned char lpszAutoConfigUrl[4]; /* +0x0004 71 04 00 00 */ unsigned char lpszProxy[4]; /* +0x0008 71 04 00 00 */ unsigned char lpszProxyBypass[4]; /* +0x000c 71 04 00 00 */ }; struct WINHTTP_AUTOPROXY_OPTIONS { unsigned long dwFlags; /* +0x0000 */ unsigned long dwAutoDetectFlags; /* +0x0004 */ unsigned char lpszAutoConfigUrl[4]; /* +0x0008 4f 13 00 00 */ void *lpvReserved; /* +0x000c */ unsigned long dwReserved; /* +0x0010 */ unsigned char fAutoLogonIfChallenged[4]; /* +0x0014 74 00 00 00 */ }; struct _UNICODE_STRING { unsigned short Length; /* +0x0000 */ unsigned short MaximumLength; /* +0x0002 */ unsigned short *Buffer; /* +0x0004 */ }; struct _IMAGE_THUNK_DATA32 { unsigned char u1[4]; /* +0x0000 ea dc 00 00 */ }; struct _LARGE_INTEGER { unsigned long LowPart; /* +0x0000 */ long HighPart; /* +0x0004 */ /* unsigned char u[0]; +0x0000 ed dc 00 00 */ long long QuadPart; /* +0x0000 */ }; struct _KUSER_SHARED_DATA { unsigned long TickCountLowDeprecated; /* +0x0000 */ unsigned long TickCountMultiplier; /* +0x0004 */ unsigned char InterruptTime[12]; /* +0x0008 e0 7d 00 00 */ unsigned char SystemTime[12]; /* +0x0014 e0 7d 00 00 */ unsigned char TimeZoneBias[12]; /* +0x0020 e0 7d 00 00 */ unsigned short ImageNumberLow; /* +0x002c */ unsigned short ImageNumberHigh; /* +0x002e */ unsigned char NtSystemRoot[520]; /* +0x0030 a8 13 00 00 */ unsigned long MaxStackTraceDepth; /* +0x0238 */ unsigned long CryptoExponent; /* +0x023c */ unsigned long TimeZoneId; /* +0x0240 */ unsigned long LargePageMinimum; /* +0x0244 */ unsigned long AitSamplingValue; /* +0x0248 */ unsigned long AppCompatFlag; /* +0x024c */ unsigned long long RNGSeedVersion; /* +0x0250 */ unsigned long GlobalValidationRunlevel; /* +0x0258 */ unsigned char Reserved2[8]; /* +0x025c c3 15 00 00 */ unsigned char NtProductType[4]; /* +0x0264 1d 6c 00 00 */ unsigned char ProductTypeIsValid; /* +0x0268 */ unsigned char Reserved0[1]; /* +0x0269 04 12 00 00 */ unsigned short NativeProcessorArchitecture; /* +0x026a */ unsigned long NtMajorVersion; /* +0x026c */ unsigned long NtMinorVersion; /* +0x0270 */ unsigned char ProcessorFeatures[64]; /* +0x0274 ac 14 00 00 */ unsigned long Reserved1; /* +0x02b4 */ unsigned long Reserved3; /* +0x02b8 */ unsigned char TimeSlip[4]; /* +0x02bc 53 3f 00 00 */ unsigned char AlternativeArchitecture[4]; /* +0x02c0 f0 dc 00 00 */ unsigned char AltArchitecturePad[4]; /* +0x02c4 01 12 00 00 */ unsigned char SystemExpirationDate[8]; /* +0x02c8 db 13 00 00 */ unsigned long SuiteMask; /* +0x02d0 */ unsigned char KdDebuggerEnabled; /* +0x02d4 */ unsigned char MitigationPolicies; /* +0x02d5 */ /* unsigned char NXSupportPolicy[0]; +0x02d5 b1 43 00 00 */ /* unsigned char SEHValidationPolicy[0]; +0x02d5 b2 43 00 00 */ /* unsigned char CurDirDevicesSkippedForDlls[0]; +0x02d5 b3 43 00 00 */ unsigned char Reserved[1]; /* +0x02d5 b4 43 00 00 */ unsigned char Reserved6[2]; /* +0x02d6 9c 14 00 00 */ unsigned char ActiveConsoleId[4]; /* +0x02d8 53 3f 00 00 */ unsigned char DismountCount[4]; /* +0x02dc 53 3f 00 00 */ unsigned long ComPlusPackage; /* +0x02e0 */ unsigned long LastSystemRITEventTickCount; /* +0x02e4 */ unsigned long NumberOfPhysicalPages; /* +0x02e8 */ unsigned char SafeBootMode; /* +0x02ec */ unsigned char Reserved12[3]; /* +0x02ed 49 12 00 00 */ unsigned long SharedDataFlags; /* +0x02f0 */ /* unsigned char DbgErrorPortPresent[0]; +0x02f0 4a 12 00 00 */ /* unsigned char DbgElevationEnabled[0]; +0x02f0 9b 15 00 00 */ /* unsigned char DbgVirtEnabled[0]; +0x02f0 68 18 00 00 */ /* unsigned char DbgInstallerDetectEnabled[0]; +0x02f0 69 18 00 00 */ /* unsigned char DbgLkgEnabled[0]; +0x02f0 40 21 00 00 */ /* unsigned char DbgDynProcessorEnabled[0]; +0x02f0 41 21 00 00 */ /* unsigned char DbgConsoleBrokerEnabled[0]; +0x02f0 6b 18 00 00 */ unsigned char SpareBits[4]; /* +0x02f0 b1 1a 00 00 */ unsigned char DataFlagsPad[4]; /* +0x02f4 01 12 00 00 */ unsigned long long TestRetInstruction; /* +0x02f8 */ unsigned long Reserved9; /* +0x0300 */ unsigned long Reserved10; /* +0x0304 */ unsigned char SystemCallPad[24]; /* +0x0308 e1 7d 00 00 */ /* unsigned char TickCount[0]; +0x0320 e0 7d 00 00 */ /* unsigned char TickCountQuad[0]; +0x0320 5c 3f 00 00 */ unsigned char ReservedTickCountOverlay[12]; /* +0x0320 13 12 00 00 */ unsigned char TickCountPad[4]; /* +0x032c 01 12 00 00 */ unsigned long Cookie; /* +0x0330 */ unsigned char CookiePad[4]; /* +0x0334 01 12 00 00 */ long long ConsoleSessionForegroundProcessId; /* +0x0338 */ unsigned char TimeUpdateSequence[8]; /* +0x0340 5c 3f 00 00 */ unsigned long long LastTimeUpdateQpcValue; /* +0x0348 */ unsigned long long LastInterruptTimeUpdateQpcValue; /* +0x0350 */ unsigned long long QpcTimeIncrement; /* +0x0358 */ unsigned long QpcTimeIncrement32; /* +0x0360 */ unsigned char Reserved8[28]; /* +0x0364 e2 7d 00 00 */ unsigned char UserModeGlobalLogger[32]; /* +0x0380 d8 5e 00 00 */ unsigned long ImageFileExecutionOptions; /* +0x03a0 */ unsigned long LangGenerationCount; /* +0x03a4 */ unsigned char InterruptTimeBias[8]; /* +0x03a8 5c 3f 00 00 */ unsigned char TscQpcBias[8]; /* +0x03b0 5c 3f 00 00 */ unsigned char ActiveProcessorCount[4]; /* +0x03b8 53 3f 00 00 */ unsigned char ActiveGroupCount[1]; /* +0x03bc e3 7d 00 00 */ unsigned char QpcTimeIncrementShift; /* +0x03bd */ unsigned short TscQpcData; /* +0x03be */ unsigned char TscQpcEnabled[1]; /* +0x03be e3 7d 00 00 */ unsigned char TscQpcShift; /* +0x03bf */ unsigned char XState[528]; /* +0x03c0 26 22 00 00 */ }; struct _ULARGE_INTEGER { unsigned long LowPart; /* +0x0000 */ unsigned long HighPart; /* +0x0004 */ /* unsigned char u[0]; +0x0000 f3 dc 00 00 */ unsigned long long QuadPart; /* +0x0000 */ }; struct _TP_CALLBACK_ENVIRON_V3 { unsigned long Version; /* +0x0000 */ unsigned char Pool[4]; /* +0x0004 bf 31 00 00 */ unsigned char CleanupGroup[4]; /* +0x0008 c0 31 00 00 */ unsigned char CleanupGroupCancelCallback[4]; /* +0x000c c2 31 00 00 */ void *RaceDll; /* +0x0010 */ unsigned char ActivationContext[4]; /* +0x0014 c4 31 00 00 */ unsigned char FinalizationCallback[4]; /* +0x0018 c7 31 00 00 */ unsigned char u[4]; /* +0x001c 26 70 00 00 */ unsigned char CallbackPriority[4]; /* +0x0020 c9 31 00 00 */ unsigned long Size; /* +0x0024 */ }; struct _IMAGE_DELAYLOAD_DESCRIPTOR { unsigned char Attributes[4]; /* +0x0000 f8 dc 00 00 */ unsigned long DllNameRVA; /* +0x0004 */ unsigned long ModuleHandleRVA; /* +0x0008 */ unsigned long ImportAddressTableRVA; /* +0x000c */ unsigned long ImportNameTableRVA; /* +0x0010 */ unsigned long BoundImportAddressTableRVA; /* +0x0014 */ unsigned long UnloadInformationTableRVA; /* +0x0018 */ unsigned long TimeDateStamp; /* +0x001c */ }; struct _DELAYLOAD_INFO { unsigned long Size; /* +0x0000 */ unsigned char DelayloadDescriptor[4]; /* +0x0004 b6 29 00 00 */ unsigned char ThunkAddress[4]; /* +0x0008 d2 19 00 00 */ unsigned char TargetDllName[4]; /* +0x000c bf 12 00 00 */ unsigned char TargetApiDescriptor[8]; /* +0x0010 fb dc 00 00 */ void *TargetModuleBase; /* +0x0018 */ void *Unused; /* +0x001c */ unsigned long LastError; /* +0x0020 */ }; /* struct { /* unsigned char Name[0]; +0x0000 bf 12 00 00 unsigned long Ordinal; +0x0000 }; */ struct _DELAYLOAD_PROC_DESCRIPTOR { unsigned long ImportDescribedByName; /* +0x0000 */ unsigned char Description[4]; /* +0x0004 ff dc 00 00 */ }; struct $_TypeDescriptor$_extraBytes_24 { unsigned char pVFTable[4]; /* +0x0000 92 15 00 00 */ void *spare; /* +0x0004 */ unsigned char name[24]; /* +0x0008 26 dd 00 00 */ }; struct _s__CatchableType { unsigned char properties[4]; /* +0x0000 75 00 00 00 */ unsigned char pType[4]; /* +0x0004 84 14 00 00 */ unsigned char thisDisplacement[12]; /* +0x0008 5e 1d 00 00 */ unsigned char sizeOrOffset[4]; /* +0x0014 74 00 00 00 */ unsigned char copyFunction[4]; /* +0x0018 29 dd 00 00 */ }; struct _s__ThrowInfo { unsigned char attributes[4]; /* +0x0000 75 00 00 00 */ unsigned char pmfnUnwind[4]; /* +0x0004 29 dd 00 00 */ unsigned char pForwardCompat[4]; /* +0x0008 a9 14 00 00 */ unsigned char pCatchableTypeArray[4]; /* +0x000c e0 23 00 00 */ }; struct $_s__CatchableTypeArray$_extraBytes_8 { unsigned char nCatchableTypes[4]; /* +0x0000 74 00 00 00 */ unsigned char arrayOfCatchableTypes[8]; /* +0x0004 2e dd 00 00 */ }; struct _IMAGE_SECTION_HEADER { unsigned char Name[8]; /* +0x0000 20 1a 00 00 */ unsigned char Misc[4]; /* +0x0008 4c dd 00 00 */ unsigned long VirtualAddress; /* +0x000c */ unsigned long SizeOfRawData; /* +0x0010 */ unsigned long PointerToRawData; /* +0x0014 */ unsigned long PointerToRelocations; /* +0x0018 */ unsigned long PointerToLinenumbers; /* +0x001c */ unsigned short NumberOfRelocations; /* +0x0020 */ unsigned short NumberOfLinenumbers; /* +0x0022 */ unsigned long Characteristics; /* +0x0024 */ }; struct FT { unsigned long long ft_scalar; /* +0x0000 */ unsigned char ft_struct[8]; /* +0x0000 91 14 00 00 */ }; struct _PEB { unsigned char InheritedAddressSpace; /* +0x0000 */ unsigned char ReadImageFileExecOptions; /* +0x0001 */ unsigned char BeingDebugged; /* +0x0002 */ unsigned char BitField; /* +0x0003 */ /* unsigned char ImageUsesLargePages[0]; +0x0003 ab 33 00 00 */ /* unsigned char IsProtectedProcess[0]; +0x0003 7b 43 00 00 */ /* unsigned char IsLegacyProcess[0]; +0x0003 7c 43 00 00 */ /* unsigned char IsImageDynamicallyRelocated[0]; +0x0003 7f 49 00 00 */ /* unsigned char SkipPatchingUser32Forwarders[0]; +0x0003 67 49 00 00 */ unsigned char SpareBits[1]; /* +0x0003 ae 33 00 00 */ void *Mutant; /* +0x0004 */ void *ImageBaseAddress; /* +0x0008 */ unsigned char Ldr[4]; /* +0x000c 66 51 00 00 */ unsigned char ProcessParameters[4]; /* +0x0010 fe 47 00 00 */ void *SubSystemData; /* +0x0014 */ void *ProcessHeap; /* +0x0018 */ unsigned char FastPebLock[4]; /* +0x001c 9e 18 00 00 */ void *AtlThunkSListPtr; /* +0x0020 */ void *IFEOKey; /* +0x0024 */ unsigned long CrossProcessFlags; /* +0x0028 */ /* unsigned char ProcessInJob[0]; +0x0028 4a 12 00 00 */ /* unsigned char ProcessInitializing[0]; +0x0028 9b 15 00 00 */ /* unsigned char ProcessUsingVEH[0]; +0x0028 68 18 00 00 */ /* unsigned char ProcessUsingVCH[0]; +0x0028 69 18 00 00 */ /* unsigned char ProcessUsingFTH[0]; +0x0028 40 21 00 00 */ unsigned char ReservedBits0[4]; /* +0x0028 68 43 00 00 */ void *KernelCallbackTable; /* +0x002c */ void *UserSharedInfoPtr; /* +0x002c */ unsigned char SystemReserved[4]; /* +0x0030 01 12 00 00 */ unsigned long AtlThunkSListPtr32; /* +0x0034 */ void *ApiSetMap; /* +0x0038 */ unsigned long TlsExpansionCounter; /* +0x003c */ void *TlsBitmap; /* +0x0040 */ unsigned char TlsBitmapBits[8]; /* +0x0044 c3 15 00 00 */ void *ReadOnlySharedMemoryBase; /* +0x004c */ void *HotpatchInformation; /* +0x0050 */ unsigned char ReadOnlyStaticServerData[4]; /* +0x0054 74 12 00 00 */ void *AnsiCodePageData; /* +0x0058 */ void *OemCodePageData; /* +0x005c */ void *UnicodeCaseTableData; /* +0x0060 */ unsigned long NumberOfProcessors; /* +0x0064 */ unsigned long NtGlobalFlag; /* +0x0068 */ unsigned char CriticalSectionTimeout[8]; /* +0x0070 db 13 00 00 */ unsigned long HeapSegmentReserve; /* +0x0078 */ unsigned long HeapSegmentCommit; /* +0x007c */ unsigned long HeapDeCommitTotalFreeThreshold; /* +0x0080 */ unsigned long HeapDeCommitFreeBlockThreshold; /* +0x0084 */ unsigned long NumberOfHeaps; /* +0x0088 */ unsigned long MaximumNumberOfHeaps; /* +0x008c */ unsigned char ProcessHeaps[4]; /* +0x0090 74 12 00 00 */ void *GdiSharedHandleTable; /* +0x0094 */ void *ProcessStarterHelper; /* +0x0098 */ unsigned long GdiDCAttributeList; /* +0x009c */ unsigned char LoaderLock[4]; /* +0x00a0 9e 18 00 00 */ unsigned long OSMajorVersion; /* +0x00a4 */ unsigned long OSMinorVersion; /* +0x00a8 */ unsigned short OSBuildNumber; /* +0x00ac */ unsigned short OSCSDVersion; /* +0x00ae */ unsigned long OSPlatformId; /* +0x00b0 */ unsigned long ImageSubsystem; /* +0x00b4 */ unsigned long ImageSubsystemMajorVersion; /* +0x00b8 */ unsigned long ImageSubsystemMinorVersion; /* +0x00bc */ unsigned long ActiveProcessAffinityMask; /* +0x00c0 */ unsigned char GdiHandleBuffer[136]; /* +0x00c4 67 51 00 00 */ unsigned char PostProcessInitRoutine[4]; /* +0x014c 94 67 00 00 */ void *TlsExpansionBitmap; /* +0x0150 */ unsigned char TlsExpansionBitmapBits[128]; /* +0x0154 c1 1f 00 00 */ unsigned long SessionId; /* +0x01d4 */ unsigned char AppCompatFlags[8]; /* +0x01d8 5e 20 00 00 */ unsigned char AppCompatFlagsUser[8]; /* +0x01e0 5e 20 00 00 */ void *pShimData; /* +0x01e8 */ void *AppCompatInfo; /* +0x01ec */ unsigned char CSDVersion[8]; /* +0x01f0 7c 3b 00 00 */ unsigned char ActivationContextData[4]; /* +0x01f8 6a 51 00 00 */ unsigned char ProcessAssemblyStorageMap[4]; /* +0x01fc 6c 51 00 00 */ unsigned char SystemDefaultActivationContextData[4]; /* +0x0200 6a 51 00 00 */ unsigned char SystemAssemblyStorageMap[4]; /* +0x0204 6c 51 00 00 */ unsigned long MinimumStackCommit; /* +0x0208 */ unsigned char FlsCallback[4]; /* +0x020c 6e 51 00 00 */ unsigned char FlsListHead[8]; /* +0x0210 f7 19 00 00 */ void *FlsBitmap; /* +0x0218 */ unsigned char FlsBitmapBits[16]; /* +0x021c c2 15 00 00 */ unsigned long FlsHighIndex; /* +0x022c */ void *WerRegistrationData; /* +0x0230 */ void *WerShipAssertPtr; /* +0x0234 */ void *pUnused; /* +0x0238 */ void *pImageHeaderHash; /* +0x023c */ unsigned long TracingFlags; /* +0x0240 */ /* unsigned char HeapTracingEnabled[0]; +0x0240 4a 12 00 00 */ /* unsigned char CritSecTracingEnabled[0]; +0x0240 9b 15 00 00 */ /* unsigned char LibLoaderTracingEnabled[0]; +0x0240 68 18 00 00 */ unsigned char SpareTracingBits[8]; /* +0x0240 c2 4e 00 00 */ unsigned long long CsrServerReadOnlySharedMemoryBase; /* +0x0248 */ }; enum __enative_startup_state { __uninitialized = 0, __initializing = 1, __initialized = 2 };