windows_structures - thawk/wiki GitHub Wiki
目录
- 1. 命令
-
2. ntdll（32位）中的结构
- 2.1. ntdll_779d0000!BUS_QUERY_ID_TYPE
- 2.2. ntdll_779d0000!DEVICE_TEXT_TYPE
- 2.3. ntdll_779d0000!DISPLAYCONFIG_SCANLINE_ORDERING
- 2.4. ntdll_779d0000!LIST_ENTRY32
- 2.5. ntdll_779d0000!LIST_ENTRY64
- 2.6. ntdll_779d0000!LSA_FOREST_TRUST_RECORD_TYPE
- 2.7. ntdll_779d0000!MCA_EXCEPTION_TYPE
- 2.8. ntdll_779d0000!POWER_ACTION
- 2.9. ntdll_779d0000!ReplacesCorHdrNumericDefines
- 2.10. ntdll_779d0000!_ACCESS_REASONS
- 2.11. ntdll_779d0000!_ACCESS_STATE
- 2.12. ntdll_779d0000!_ACL
- 2.13. ntdll_779d0000!_ACTIVATION_CONTEXT_STACK
- 2.14. ntdll_779d0000!_ALPC_PROCESS_CONTEXT
- 2.15. ntdll_779d0000!_ALTERNATIVE_ARCHITECTURE_TYPE
- 2.16. ntdll_779d0000!_AUX_ACCESS_DATA
- 2.17. ntdll_779d0000!_CACHED_KSTACK_LIST
- 2.18. ntdll_779d0000!_CACHE_DESCRIPTOR
- 2.19. ntdll_779d0000!_CLIENT_ID
- 2.20. ntdll_779d0000!_CM_FULL_RESOURCE_DESCRIPTOR
- 2.21. ntdll_779d0000!_CM_PARTIAL_RESOURCE_DESCRIPTOR
- 2.22. ntdll_779d0000!_CM_PARTIAL_RESOURCE_LIST
- 2.23. ntdll_779d0000!_CM_RESOURCE_LIST
- 2.24. ntdll_779d0000!_COMPRESSED_DATA_INFO
- 2.25. ntdll_779d0000!_CONTEXT
- 2.26. ntdll_779d0000!_COUNTER_READING
- 2.27. ntdll_779d0000!_CURDIR
- 2.28. ntdll_779d0000!_DESCRIPTOR
- 2.29. ntdll_779d0000!_DEVICE_CAPABILITIES
- 2.30. ntdll_779d0000!_DEVICE_OBJECT
- 2.31. ntdll_779d0000!_DEVICE_POWER_STATE
- 2.32. ntdll_779d0000!_DEVICE_RELATION_TYPE
- 2.33. ntdll_779d0000!_DEVICE_USAGE_NOTIFICATION_TYPE
- 2.34. ntdll_779d0000!_DEVOBJ_EXTENSION
- 2.35. ntdll_779d0000!_DISPATCHER_HEADER
- 2.36. ntdll_779d0000!_DPH_BLOCK_INFORMATION
- 2.37. ntdll_779d0000!_DPH_HEAP_BLOCK
- 2.38. ntdll_779d0000!_DPH_HEAP_ROOT
- 2.39. ntdll_779d0000!_DRIVER_EXTENSION
- 2.40. ntdll_779d0000!_DRIVER_OBJECT
- 2.41. ntdll_779d0000!_EJOB
- 2.42. ntdll_779d0000!_EPROCESS
- 2.43. ntdll_779d0000!_ERESOURCE
- 2.44. ntdll_779d0000!_ETHREAD
- 2.45. ntdll_779d0000!_EVENT_DATA_DESCRIPTOR
- 2.46. ntdll_779d0000!_EVENT_DESCRIPTOR
- 2.47. ntdll_779d0000!_EVENT_DESCRIPTOR
- 2.48. ntdll_779d0000!_EVENT_TYPE
- 2.49. ntdll_779d0000!_EXCEPTION_DISPOSITION
- 2.50. ntdll_779d0000!_EXCEPTION_RECORD
- 2.51. ntdll_779d0000!_EXCEPTION_REGISTRATION_RECORD
- 2.52. ntdll_779d0000!_EX_FAST_REF
- 2.53. ntdll_779d0000!_EX_PUSH_LOCK
- 2.54. ntdll_779d0000!_EX_PUSH_LOCK_CACHE_AWARE
- 2.55. ntdll_779d0000!_EX_PUSH_LOCK_WAIT_BLOCK
- 2.56. ntdll_779d0000!_EX_RUNDOWN_REF
- 2.57. ntdll_779d0000!_FAST_IO_DISPATCH
- 2.58. ntdll_779d0000!_FAST_MUTEX
- 2.59. ntdll_779d0000!_FILE_BASIC_INFORMATION
- 2.60. ntdll_779d0000!_FILE_GET_QUOTA_INFORMATION
- 2.61. ntdll_779d0000!_FILE_INFORMATION_CLASS
- 2.62. ntdll_779d0000!_FILE_NETWORK_OPEN_INFORMATION
- 2.63. ntdll_779d0000!_FILE_OBJECT
- 2.64. ntdll_779d0000!_FILE_STANDARD_INFORMATION
- 2.65. ntdll_779d0000!_FLOATING_SAVE_AREA
- 2.66. ntdll_779d0000!_FSINFOCLASS
- 2.67. ntdll_779d0000!_FS_FILTER_CALLBACKS
- 2.68. ntdll_779d0000!_FS_FILTER_CALLBACK_DATA
- 2.69. ntdll_779d0000!_FS_FILTER_PARAMETERS
- 2.70. ntdll_779d0000!_FS_FILTER_SECTION_SYNC_TYPE
- 2.71. ntdll_779d0000!_FS_FILTER_STREAM_FO_NOTIFICATION_TYPE
- 2.72. ntdll_779d0000!_GDI_TEB_BATCH
- 2.73. ntdll_779d0000!_GENERAL_LOOKASIDE
- 2.74. ntdll_779d0000!_GENERAL_LOOKASIDE_POOL
- 2.75. ntdll_779d0000!_GENERIC_MAPPING
- 2.76. ntdll_779d0000!_GROUP_AFFINITY
- 2.77. ntdll_779d0000!_GROUP_AFFINITY
- 2.78. ntdll_779d0000!_GUID
- 2.79. ntdll_779d0000!_GUID
- 2.80. ntdll_779d0000!_HANDLE_TABLE
- 2.81. ntdll_779d0000!_HANDLE_TABLE_ENTRY
- 2.82. ntdll_779d0000!_HANDLE_TABLE_ENTRY_INFO
- 2.83. ntdll_779d0000!_HANDLE_TRACE_DB_ENTRY
- 2.84. ntdll_779d0000!_HANDLE_TRACE_DEBUG_INFO
- 2.85. ntdll_779d0000!_HARDWARE_COUNTER_TYPE
- 2.86. ntdll_779d0000!_HARDWARE_PTE_X86
- 2.87. ntdll_779d0000!_HEAP
- 2.88. ntdll_779d0000!_HEAP_BUCKET
- 2.89. ntdll_779d0000!_HEAP_BUCKET
- 2.90. ntdll_779d0000!_HEAP_BUCKET_COUNTERS
- 2.91. ntdll_779d0000!_HEAP_BUCKET_RUN_INFO
- 2.92. ntdll_779d0000!_HEAP_COUNTERS
- 2.93. ntdll_779d0000!_HEAP_DEBUGGING_INFORMATION
- 2.94. ntdll_779d0000!_HEAP_ENTRY
- 2.95. ntdll_779d0000!_HEAP_ENTRY_EXTRA
- 2.96. ntdll_779d0000!_HEAP_FAILURE_INFORMATION
- 2.97. ntdll_779d0000!_HEAP_FAILURE_TYPE
- 2.98. ntdll_779d0000!_HEAP_FREE_ENTRY
- 2.99. ntdll_779d0000!_HEAP_LIST_LOOKUP
- 2.100. ntdll_779d0000!_HEAP_LOCAL_DATA
- 2.101. ntdll_779d0000!_HEAP_LOCAL_DATA
- 2.102. ntdll_779d0000!_HEAP_LOCAL_SEGMENT_INFO
- 2.103. ntdll_779d0000!_HEAP_LOCK
- 2.104. ntdll_779d0000!_HEAP_PSEUDO_TAG_ENTRY
- 2.105. ntdll_779d0000!_HEAP_SEGMENT
- 2.106. ntdll_779d0000!_HEAP_SUBSEGMENT
- 2.107. ntdll_779d0000!_HEAP_TAG_ENTRY
- 2.108. ntdll_779d0000!_HEAP_TUNING_PARAMETERS
- 2.109. ntdll_779d0000!_HEAP_UCR_DESCRIPTOR
- 2.110. ntdll_779d0000!_HEAP_USERDATA_HEADER
- 2.111. ntdll_779d0000!_HEAP_USERDATA_HEADER
- 2.112. ntdll_779d0000!_IMAGE_DATA_DIRECTORY
- 2.113. ntdll_779d0000!_IMAGE_DOS_HEADER
- 2.114. ntdll_779d0000!_IMAGE_FILE_HEADER
- 2.115. ntdll_779d0000!_IMAGE_NT_HEADERS
- 2.116. ntdll_779d0000!_IMAGE_OPTIONAL_HEADER
- 2.117. ntdll_779d0000!_INITIAL_PRIVILEGE_SET
- 2.118. ntdll_779d0000!_INTERFACE
- 2.119. ntdll_779d0000!_INTERFACE_TYPE
- 2.120. ntdll_779d0000!_INTERLOCK_SEQ
- 2.121. ntdll_779d0000!_IO_ALLOCATION_ACTION
- 2.122. ntdll_779d0000!_IO_CLIENT_EXTENSION
- 2.123. ntdll_779d0000!_IO_COMPLETION_CONTEXT
- 2.124. ntdll_779d0000!_IO_DRIVER_CREATE_CONTEXT
- 2.125. ntdll_779d0000!_IO_PRIORITY_HINT
- 2.126. ntdll_779d0000!_IO_PRIORITY_INFO
- 2.127. ntdll_779d0000!_IO_RESOURCE_DESCRIPTOR
- 2.128. ntdll_779d0000!_IO_RESOURCE_LIST
- 2.129. ntdll_779d0000!_IO_RESOURCE_REQUIREMENTS_LIST
- 2.130. ntdll_779d0000!_IO_SECURITY_CONTEXT
- 2.131. ntdll_779d0000!_IO_STACK_LOCATION
- 2.132. ntdll_779d0000!_IO_STATUS_BLOCK
- 2.133. ntdll_779d0000!_IO_STATUS_BLOCK
- 2.134. ntdll_779d0000!_IO_TIMER
- 2.135. ntdll_779d0000!_IRP
- 2.136. ntdll_779d0000!_IRQ_PRIORITY
- 2.137. ntdll_779d0000!_KAFFINITY_EX
- 2.138. ntdll_779d0000!_KAFFINITY_EX
- 2.139. ntdll_779d0000!_KAPC
- 2.140. ntdll_779d0000!_KAPC_STATE
- 2.141. ntdll_779d0000!_KDEVICE_QUEUE
- 2.142. ntdll_779d0000!_KDEVICE_QUEUE_ENTRY
- 2.143. ntdll_779d0000!_KDPC
- 2.144. ntdll_779d0000!_KDPC_DATA
- 2.145. ntdll_779d0000!_KEVENT
- 2.146. ntdll_779d0000!_KEXECUTE_OPTIONS
- 2.147. ntdll_779d0000!_KGATE
- 2.148. ntdll_779d0000!_KGDTENTRY
- 2.149. ntdll_779d0000!_KIDTENTRY
- 2.150. ntdll_779d0000!_KNODE
- 2.151. ntdll_779d0000!_KOBJECTS
- 2.152. ntdll_779d0000!_KPCR
- 2.153. ntdll_779d0000!_KPRCB
- 2.154. ntdll_779d0000!_KPROCESS
- 2.155. ntdll_779d0000!_KPROCESSOR_STATE
- 2.156. ntdll_779d0000!_KPROCESS_STATE
- 2.157. ntdll_779d0000!_KQUEUE
- 2.158. ntdll_779d0000!_KSEMAPHORE
- 2.159. ntdll_779d0000!_KSPECIAL_REGISTERS
- 2.160. ntdll_779d0000!_KSPIN_LOCK_QUEUE
- 2.161. ntdll_779d0000!_KSPIN_LOCK_QUEUE_NUMBER
- 2.162. ntdll_779d0000!_KSTACK_COUNT
- 2.163. ntdll_779d0000!_KSYSTEM_TIME
- 2.164. ntdll_779d0000!_KSYSTEM_TIME
- 2.165. ntdll_779d0000!_KTHREAD
- 2.166. ntdll_779d0000!_KTHREAD_COUNTERS
- 2.167. ntdll_779d0000!_KTIMER
- 2.168. ntdll_779d0000!_KTIMER_TABLE
- 2.169. ntdll_779d0000!_KTIMER_TABLE_ENTRY
- 2.170. ntdll_779d0000!_KTRAP_FRAME
- 2.171. ntdll_779d0000!_KTSS
- 2.172. ntdll_779d0000!_KUSER_SHARED_DATA
- 2.173. ntdll_779d0000!_KWAIT_BLOCK
- 2.174. ntdll_779d0000!_KWAIT_BLOCK_STATE
- 2.175. ntdll_779d0000!_KWAIT_STATE
- 2.176. ntdll_779d0000!_KWAIT_STATUS_REGISTER
- 2.177. ntdll_779d0000!_KiIoAccessMap
- 2.178. ntdll_779d0000!_LARGE_INTEGER
- 2.179. ntdll_779d0000!_LARGE_INTEGER
- 2.180. ntdll_779d0000!_LARGE_INTEGER
- 2.181. ntdll_779d0000!_LDR_DATA_TABLE_ENTRY
- 2.182. ntdll_779d0000!_LFH_BLOCK_ZONE
- 2.183. ntdll_779d0000!_LFH_HEAP
- 2.184. ntdll_779d0000!_LFH_HEAP
- 2.185. ntdll_779d0000!_LIST_ENTRY
- 2.186. ntdll_779d0000!_LIST_ENTRY
- 2.187. ntdll_779d0000!_LOOKASIDE_LIST_EX
- 2.188. ntdll_779d0000!_LUID
- 2.189. ntdll_779d0000!_LUID_AND_ATTRIBUTES
- 2.190. ntdll_779d0000!_M128A
- 2.191. ntdll_779d0000!_MAILSLOT_CREATE_PARAMETERS
- 2.192. ntdll_779d0000!_MCA_EXCEPTION
- 2.193. ntdll_779d0000!_MCI_ADDR
- 2.194. ntdll_779d0000!_MCI_STATS
- 2.195. ntdll_779d0000!_MDL
- 2.196. ntdll_779d0000!_MEMORY_CACHING_TYPE_ORIG
- 2.197. ntdll_779d0000!_MMADDRESS_NODE
- 2.198. ntdll_779d0000!_MMSUPPORT
- 2.199. ntdll_779d0000!_MMSUPPORT_FLAGS
- 2.200. ntdll_779d0000!_MM_AVL_TABLE
- 2.201. ntdll_779d0000!_MM_DRIVER_VERIFIER_DATA
- 2.202. ntdll_779d0000!_MM_PAGE_ACCESS_INFO
- 2.203. ntdll_779d0000!_MM_PAGE_ACCESS_INFO_FLAGS
- 2.204. ntdll_779d0000!_MM_PAGE_ACCESS_INFO_HEADER
- 2.205. ntdll_779d0000!_MM_PAGE_ACCESS_TYPE
- 2.206. ntdll_779d0000!_MODE
- 2.207. ntdll_779d0000!_NAMED_PIPE_CREATE_PARAMETERS
- 2.208. ntdll_779d0000!_NPAGED_LOOKASIDE_LIST
- 2.209. ntdll_779d0000!_NT_PRODUCT_TYPE
- 2.210. ntdll_779d0000!_NT_TIB
- 2.211. ntdll_779d0000!_OBJECT_ATTRIBUTES
- 2.212. ntdll_779d0000!_OBJECT_DUMP_CONTROL
- 2.213. ntdll_779d0000!_OBJECT_HANDLE_INFORMATION
- 2.214. ntdll_779d0000!_OBJECT_NAME_INFORMATION
- 2.215. ntdll_779d0000!_OBJECT_TYPE
- 2.216. ntdll_779d0000!_OBJECT_TYPE_INITIALIZER
- 2.217. ntdll_779d0000!_OB_OPEN_REASON
- 2.218. ntdll_779d0000!_OWNER_ENTRY
- 2.219. ntdll_779d0000!_PAGED_LOOKASIDE_LIST
- 2.220. ntdll_779d0000!_PEB
- 2.221. ntdll_779d0000!_PEB_LDR_DATA
- 2.222. ntdll_779d0000!_PERFINFO_GROUPMASK
- 2.223. ntdll_779d0000!_PF_FILE_ACCESS_TYPE
- 2.224. ntdll_779d0000!_PF_KERNEL_GLOBALS
- 2.225. ntdll_779d0000!_POOL_TYPE
- 2.226. ntdll_779d0000!_POWER_SEQUENCE
- 2.227. ntdll_779d0000!_POWER_STATE
- 2.228. ntdll_779d0000!_POWER_STATE_TYPE
- 2.229. ntdll_779d0000!_PO_DIAG_STACK_RECORD
- 2.230. ntdll_779d0000!_PPM_FFH_THROTTLE_STATE_INFO
- 2.231. ntdll_779d0000!_PPM_IDLE_STATE
- 2.232. ntdll_779d0000!_PPM_IDLE_STATES
- 2.233. ntdll_779d0000!_PP_LOOKASIDE_LIST
- 2.234. ntdll_779d0000!_PP_NPAGED_LOOKASIDE_NUMBER
- 2.235. ntdll_779d0000!_PRIVILEGE_SET
- 2.236. ntdll_779d0000!_PROCESSOR_CACHE_TYPE
- 2.237. ntdll_779d0000!_PROCESSOR_NUMBER
- 2.238. ntdll_779d0000!_PROCESSOR_POWER_STATE
- 2.239. ntdll_779d0000!_PROC_HISTORY_ENTRY
- 2.240. ntdll_779d0000!_PROC_HYPERVISOR_STATE
- 2.241. ntdll_779d0000!_PROC_IDLE_ACCOUNTING
- 2.242. ntdll_779d0000!_PROC_IDLE_SNAP
- 2.243. ntdll_779d0000!_PROC_IDLE_STATE_ACCOUNTING
- 2.244. ntdll_779d0000!_PROC_IDLE_STATE_BUCKET
- 2.245. ntdll_779d0000!_PROC_PERF_CONSTRAINT
- 2.246. ntdll_779d0000!_PROC_PERF_DOMAIN
- 2.247. ntdll_779d0000!_PROC_PERF_LOAD
- 2.248. ntdll_779d0000!_PSP_CPU_SHARE_CAPTURED_WEIGHT_DATA
- 2.249. ntdll_779d0000!_PS_CLIENT_SECURITY_CONTEXT
- 2.250. ntdll_779d0000!_PS_CPU_QUOTA_BLOCK
- 2.251. ntdll_779d0000!_PS_PER_CPU_QUOTA_CACHE_AWARE
- 2.252. ntdll_779d0000!_PS_RESOURCE_TYPE
- 2.253. ntdll_779d0000!_QUAD
- 2.254. ntdll_779d0000!_QUAD
- 2.255. ntdll_779d0000!_QUAD
- 2.256. ntdll_779d0000!_REG_NOTIFY_CLASS
- 2.257. ntdll_779d0000!_RTL_ACTIVATION_CONTEXT_STACK_FRAME
- 2.258. ntdll_779d0000!_RTL_AVL_TABLE
- 2.259. ntdll_779d0000!_RTL_BALANCED_LINKS
- 2.260. ntdll_779d0000!_RTL_CRITICAL_SECTION
- 2.261. ntdll_779d0000!_RTL_CRITICAL_SECTION_DEBUG
- 2.262. ntdll_779d0000!_RTL_DRIVE_LETTER_CURDIR
- 2.263. ntdll_779d0000!_RTL_DYNAMIC_HASH_TABLE
- 2.264. ntdll_779d0000!_RTL_DYNAMIC_HASH_TABLE_CONTEXT
- 2.265. ntdll_779d0000!_RTL_DYNAMIC_HASH_TABLE_ENTRY
- 2.266. ntdll_779d0000!_RTL_DYNAMIC_HASH_TABLE_ENUMERATOR
- 2.267. ntdll_779d0000!_RTL_GENERIC_COMPARE_RESULTS
- 2.268. ntdll_779d0000!_RTL_SRWLOCK
- 2.269. ntdll_779d0000!_RTL_STACK_DATABASE_LOCK
- 2.270. ntdll_779d0000!_RTL_STACK_TRACE_ENTRY
- 2.271. ntdll_779d0000!_RTL_STD_LIST_ENTRY
- 2.272. ntdll_779d0000!_RTL_STD_LIST_HEAD
- 2.273. ntdll_779d0000!_RTL_TRACE_BLOCK
- 2.274. ntdll_779d0000!_RTL_TRACE_DATABASE
- 2.275. ntdll_779d0000!_RTL_TRACE_SEGMENT
- 2.276. ntdll_779d0000!_RTL_USER_PROCESS_PARAMETERS
- 2.277. ntdll_779d0000!_SECTION_OBJECT_POINTERS
- 2.278. ntdll_779d0000!_SECURITY_DESCRIPTOR
- 2.279. ntdll_779d0000!_SECURITY_IMPERSONATION_LEVEL
- 2.280. ntdll_779d0000!_SECURITY_OPERATION_CODE
- 2.281. ntdll_779d0000!_SECURITY_QUALITY_OF_SERVICE
- 2.282. ntdll_779d0000!_SECURITY_SUBJECT_CONTEXT
- 2.283. ntdll_779d0000!_SE_AUDIT_PROCESS_CREATION_INFO
- 2.284. ntdll_779d0000!_SID
- 2.285. ntdll_779d0000!_SID_IDENTIFIER_AUTHORITY
- 2.286. ntdll_779d0000!_SINGLE_LIST_ENTRY
- 2.287. ntdll_779d0000!_SLIST_HEADER
- 2.288. ntdll_779d0000!_STACK_TRACE_DATABASE
- 2.289. ntdll_779d0000!_STRING
- 2.290. ntdll_779d0000!_SYSTEM_POWER_STATE
- 2.291. ntdll_779d0000!_SYSTEM_POWER_STATE_CONTEXT
- 2.292. ntdll_779d0000!_TEB
- 2.293. ntdll_779d0000!_TEB_ACTIVE_FRAME
- 2.294. ntdll_779d0000!_TEB_ACTIVE_FRAME_CONTEXT
- 2.295. ntdll_779d0000!_TEB_ACTIVE_FRAME_CONTEXT
- 2.296. ntdll_779d0000!_TERMINATION_PORT
- 2.297. ntdll_779d0000!_THREAD_PERFORMANCE_DATA
- 2.298. ntdll_779d0000!_TP_CALLBACK_ENVIRON_V3
- 2.299. ntdll_779d0000!_TP_CALLBACK_PRIORITY
- 2.300. ntdll_779d0000!_TP_DIRECT
- 2.301. ntdll_779d0000!_TP_NBQ_GUARD
- 2.302. ntdll_779d0000!_TP_TASK
- 2.303. ntdll_779d0000!_TP_TASK_CALLBACKS
- 2.304. ntdll_779d0000!_TP_TASK_CALLBACKS
- 2.305. ntdll_779d0000!_TXN_PARAMETER_BLOCK
- 2.306. ntdll_779d0000!_ULARGE_INTEGER
- 2.307. ntdll_779d0000!_ULARGE_INTEGER
- 2.308. ntdll_779d0000!_ULARGE_INTEGER
- 2.309. ntdll_779d0000!_UNICODE_STRING
- 2.310. ntdll_779d0000!_UNICODE_STRING
- 2.311. ntdll_779d0000!_UNICODE_STRING
- 2.312. ntdll_779d0000!_USER_MEMORY_CACHE_ENTRY
- 2.313. ntdll_779d0000!_VPB
- 2.314. ntdll_779d0000!_WAIT_CONTEXT_BLOCK
- 2.315. ntdll_779d0000!_WHEA_ERROR_PACKET_DATA_FORMAT
- 2.316. ntdll_779d0000!_WHEA_ERROR_PACKET_FLAGS
- 2.317. ntdll_779d0000!_WHEA_ERROR_PACKET_V2
- 2.318. ntdll_779d0000!_WHEA_ERROR_RECORD
- 2.319. ntdll_779d0000!_WHEA_ERROR_RECORD_HEADER
- 2.320. ntdll_779d0000!_WHEA_ERROR_RECORD_HEADER_FLAGS
- 2.321. ntdll_779d0000!_WHEA_ERROR_RECORD_HEADER_VALIDBITS
- 2.322. ntdll_779d0000!_WHEA_ERROR_RECORD_SECTION_DESCRIPTOR
- 2.323. ntdll_779d0000!_WHEA_ERROR_RECORD_SECTION_DESCRIPTOR_FLAGS
- 2.324. ntdll_779d0000!_WHEA_ERROR_RECORD_SECTION_DESCRIPTOR_VALIDBITS
- 2.325. ntdll_779d0000!_WHEA_ERROR_SEVERITY
- 2.326. ntdll_779d0000!_WHEA_ERROR_SOURCE_TYPE
- 2.327. ntdll_779d0000!_WHEA_ERROR_TYPE
- 2.328. ntdll_779d0000!_WHEA_PERSISTENCE_INFO
- 2.329. ntdll_779d0000!_WHEA_REVISION
- 2.330. ntdll_779d0000!_WHEA_TIMESTAMP
- 2.331. ntdll_779d0000!_WORKING_SET_TYPE
- 2.332. ntdll_779d0000!_XSAVE_AREA
- 2.333. ntdll_779d0000!_XSAVE_AREA_HEADER
- 2.334. ntdll_779d0000!_XSAVE_FORMAT
- 2.335. ntdll_779d0000!_XSTATE_CONFIGURATION
- 2.336. ntdll_779d0000!_XSTATE_CONTEXT
- 2.337. ntdll_779d0000!_XSTATE_FEATURE
- 2.338. ntdll_779d0000!_XSTATE_SAVE
- 2.339. ntdll_779d0000!_flags
-
3. verifier（32位）中的结构
- 3.1. verifier_6f210000!DISPLAYCONFIG_SCANLINE_ORDERING
- 3.2. verifier_6f210000!LIST_ENTRY32
- 3.3. verifier_6f210000!LIST_ENTRY64
- 3.4. verifier_6f210000!ReplacesCorHdrNumericDefines
- 3.5. verifier_6f210000!_ACTIVATION_CONTEXT_STACK
- 3.6. verifier_6f210000!_ALTERNATIVE_ARCHITECTURE_TYPE
- 3.7. verifier_6f210000!_AVRF_DEADLOCK_GLOBALS
- 3.8. verifier_6f210000!_AVRF_DEADLOCK_NODE
- 3.9. verifier_6f210000!_AVRF_DEADLOCK_RESOURCE
- 3.10. verifier_6f210000!_AVRF_DEADLOCK_RESOURCE_TYPE
- 3.11. verifier_6f210000!_AVRF_DEADLOCK_THREAD
- 3.12. verifier_6f210000!_AVRF_EXCEPTION_LOG_ENTRY
- 3.13. verifier_6f210000!_AVRF_THREAD_ENTRY
- 3.14. verifier_6f210000!_AVRF_TRACKER
- 3.15. verifier_6f210000!_AVRF_TRACKER_ENTRY
- 3.16. verifier_6f210000!_CLIENT_ID
- 3.17. verifier_6f210000!_CONTEXT
- 3.18. verifier_6f210000!_CRITICAL_SECTION_SPLAY_NODE
- 3.19. verifier_6f210000!_CURDIR
- 3.20. verifier_6f210000!_DPH_BLOCK_INFORMATION
- 3.21. verifier_6f210000!_DPH_BLOCK_INTERNAL_INFORMATION
- 3.22. verifier_6f210000!_DPH_DELAY_FREE_FLAGS
- 3.23. verifier_6f210000!_DPH_DELAY_FREE_QUEUE_ENTRY
- 3.24. verifier_6f210000!_DPH_HEAP_BLOCK
- 3.25. verifier_6f210000!_DPH_HEAP_BLOCK_FLAGS
- 3.26. verifier_6f210000!_DPH_HEAP_ROOT
- 3.27. verifier_6f210000!_EXCEPTION_DISPOSITION
- 3.28. verifier_6f210000!_EXCEPTION_RECORD
- 3.29. verifier_6f210000!_EXCEPTION_REGISTRATION_RECORD
- 3.30. verifier_6f210000!_FLOATING_SAVE_AREA
- 3.31. verifier_6f210000!_GDI_TEB_BATCH
- 3.32. verifier_6f210000!_GUID
- 3.33. verifier_6f210000!_IMAGE_DATA_DIRECTORY
- 3.34. verifier_6f210000!_IMAGE_DOS_HEADER
- 3.35. verifier_6f210000!_IMAGE_FILE_HEADER
- 3.36. verifier_6f210000!_IMAGE_NT_HEADERS
- 3.37. verifier_6f210000!_IMAGE_OPTIONAL_HEADER
- 3.38. verifier_6f210000!_IO_STATUS_BLOCK
- 3.39. verifier_6f210000!_KSPIN_LOCK_QUEUE_NUMBER
- 3.40. verifier_6f210000!_KSYSTEM_TIME
- 3.41. verifier_6f210000!_KSYSTEM_TIME
- 3.42. verifier_6f210000!_KUSER_SHARED_DATA
- 3.43. verifier_6f210000!_LARGE_INTEGER
- 3.44. verifier_6f210000!_LIST_ENTRY
- 3.45. verifier_6f210000!_LIST_ENTRY
- 3.46. verifier_6f210000!_LUID
- 3.47. verifier_6f210000!_NT_PRODUCT_TYPE
- 3.48. verifier_6f210000!_NT_TIB
- 3.49. verifier_6f210000!_PEB
- 3.50. verifier_6f210000!_PEB_LDR_DATA
- 3.51. verifier_6f210000!_PROCESSOR_NUMBER
- 3.52. verifier_6f210000!_RTL_ACTIVATION_CONTEXT_STACK_FRAME
- 3.53. verifier_6f210000!_RTL_AVL_TABLE
- 3.54. verifier_6f210000!_RTL_BALANCED_LINKS
- 3.55. verifier_6f210000!_RTL_CRITICAL_SECTION
- 3.56. verifier_6f210000!_RTL_CRITICAL_SECTION_DEBUG
- 3.57. verifier_6f210000!_RTL_DRIVE_LETTER_CURDIR
- 3.58. verifier_6f210000!_RTL_DYNAMIC_HASH_TABLE
- 3.59. verifier_6f210000!_RTL_DYNAMIC_HASH_TABLE_CONTEXT
- 3.60. verifier_6f210000!_RTL_DYNAMIC_HASH_TABLE_ENTRY
- 3.61. verifier_6f210000!_RTL_DYNAMIC_HASH_TABLE_ENUMERATOR
- 3.62. verifier_6f210000!_RTL_GENERIC_COMPARE_RESULTS
- 3.63. verifier_6f210000!_RTL_SPLAY_LINKS
- 3.64. verifier_6f210000!_RTL_TRACE_BLOCK
- 3.65. verifier_6f210000!_RTL_USER_PROCESS_PARAMETERS
- 3.66. verifier_6f210000!_SINGLE_LIST_ENTRY
- 3.67. verifier_6f210000!_STRING
- 3.68. verifier_6f210000!_TEB
- 3.69. verifier_6f210000!_TEB_ACTIVE_FRAME
- 3.70. verifier_6f210000!_TEB_ACTIVE_FRAME_CONTEXT
- 3.71. verifier_6f210000!_TEB_ACTIVE_FRAME_CONTEXT
- 3.72. verifier_6f210000!_TP_CALLBACK_ENVIRON_V3
- 3.73. verifier_6f210000!_TP_CALLBACK_PRIORITY
- 3.74. verifier_6f210000!_TP_DIRECT
- 3.75. verifier_6f210000!_TP_NBQ_GUARD
- 3.76. verifier_6f210000!_TP_TASK
- 3.77. verifier_6f210000!_TP_TASK_CALLBACKS
- 3.78. verifier_6f210000!_TP_TASK_CALLBACKS
- 3.79. verifier_6f210000!_ULARGE_INTEGER
- 3.80. verifier_6f210000!_UNICODE_STRING
- 3.81. verifier_6f210000!_UNICODE_STRING
- 3.82. verifier_6f210000!_XSTATE_CONFIGURATION
- 3.83. verifier_6f210000!_XSTATE_FEATURE
BusQueryDeviceID = 0n0 BusQueryHardwareIDs = 0n1 BusQueryCompatibleIDs = 0n2 BusQueryInstanceID = 0n3 BusQueryDeviceSerialNumber = 0n4 BusQueryContainerID = 0n5
DeviceTextDescription = 0n0 DeviceTextLocationInformation = 0n1
DISPLAYCONFIG_SCANLINE_ORDERING_UNSPECIFIED = 0n0 DISPLAYCONFIG_SCANLINE_ORDERING_PROGRESSIVE = 0n1 DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACED = 0n2 DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACED_UPPERFIELDFIRST = 0n2 DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACED_LOWERFIELDFIRST = 0n3 DISPLAYCONFIG_SCANLINE_ORDERING_FORCE_UINT32 = 0n-1
ForestTrustTopLevelName = 0n0 ForestTrustTopLevelNameEx = 0n1 ForestTrustDomainInfo = 0n2 ForestTrustRecordTypeLast = 0n2
PowerActionNone = 0n0 PowerActionReserved = 0n1 PowerActionSleep = 0n2 PowerActionHibernate = 0n3 PowerActionShutdown = 0n4 PowerActionShutdownReset = 0n5 PowerActionShutdownOff = 0n6 PowerActionWarmEject = 0n7
COMIMAGE_FLAGS_ILONLY = 0n1 COMIMAGE_FLAGS_32BITREQUIRED = 0n2 COMIMAGE_FLAGS_IL_LIBRARY = 0n4 COMIMAGE_FLAGS_STRONGNAMESIGNED = 0n8 COMIMAGE_FLAGS_NATIVE_ENTRYPOINT = 0n16 COMIMAGE_FLAGS_TRACKDEBUGDATA = 0x10000 COR_VERSION_MAJOR_V2 = 0n2 COR_VERSION_MAJOR = 0n2 COR_VERSION_MINOR = 0n0 COR_DELETED_NAME_LENGTH = 0n8 COR_VTABLEGAP_NAME_LENGTH = 0n8 NATIVE_TYPE_MAX_CB = 0n1 COR_ILMETHOD_SECT_SMALL_MAX_DATASIZE = 0n255 IMAGE_COR_MIH_METHODRVA = 0n1 IMAGE_COR_MIH_EHRVA = 0n2 IMAGE_COR_MIH_BASICBLOCK = 0n8 COR_VTABLE_32BIT = 0n1 COR_VTABLE_64BIT = 0n2 COR_VTABLE_FROM_UNMANAGED = 0n4 COR_VTABLE_FROM_UNMANAGED_RETAIN_APPDOMAIN = 0n8 COR_VTABLE_CALL_MOST_DERIVED = 0n16 IMAGE_COR_EATJ_THUNK_SIZE = 0n32 MAX_CLASS_NAME = 0n1024 MAX_PACKAGE_NAME = 0n1024
+0x000 OperationID : _LUID
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x008 SecurityEvaluated : UChar
+0x009 GenerateAudit : UChar
+0x00a GenerateOnClose : UChar
+0x00b PrivilegesAllocated : UChar
+0x00c Flags : Uint4B
+0x010 RemainingDesiredAccess : Uint4B
+0x014 PreviouslyGrantedAccess : Uint4B
+0x018 OriginalDesiredAccess : Uint4B
+0x01c SubjectSecurityContext : _SECURITY_SUBJECT_CONTEXT
+0x000 ClientToken : Ptr32
+0x004 ImpersonationLevel :
SecurityAnonymous = 0n0
SecurityIdentification = 0n1
SecurityImpersonation = 0n2
SecurityDelegation = 0n3
+0x008 PrimaryToken : Ptr32
+0x00c ProcessAuditId : Ptr32
+0x02c SecurityDescriptor : Ptr32
+0x030 AuxData : Ptr32
+0x034 Privileges : <unnamed-tag>
+0x000 InitialPrivilegeSet : _INITIAL_PRIVILEGE_SET
+0x000 PrivilegeCount : Uint4B
+0x004 Control : Uint4B
+0x008 Privilege : _LUID_AND_ATTRIBUTES
+0x000 Luid : _LUID
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x008 Attributes : Uint4B
+0x000 PrivilegeSet : _PRIVILEGE_SET
+0x000 PrivilegeCount : Uint4B
+0x004 Control : Uint4B
+0x008 Privilege : _LUID_AND_ATTRIBUTES
+0x000 Luid : _LUID
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x008 Attributes : Uint4B
+0x060 AuditPrivileges : UChar
+0x064 ObjectName : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x06c ObjectTypeName : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x000 AclRevision : UChar +0x001 Sbz1 : UChar +0x002 AclSize : Uint2B +0x004 AceCount : Uint2B +0x006 Sbz2 : Uint2B
+0x000 ActiveFrame : Ptr32
+0x004 FrameListCache : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x00c Flags : Uint4B
+0x010 NextCookieSequenceNumber : Uint4B
+0x014 StackId : Uint4B
+0x000 Lock : _EX_PUSH_LOCK
+0x000 Locked : Pos 0, 1 Bit
+0x000 Waiting : Pos 1, 1 Bit
+0x000 Waking : Pos 2, 1 Bit
+0x000 MultipleShared : Pos 3, 1 Bit
+0x000 Shared : Pos 4, 28 Bits
+0x000 Value : Uint4B
+0x000 Ptr : Ptr32
+0x004 ViewListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x00c PagedPoolQuotaCache : Uint4B
StandardDesign = 0n0 NEC98x86 = 0n1 EndAlternatives = 0n2
+0x000 PrivilegesUsed : Ptr32
+0x004 GenericMapping : _GENERIC_MAPPING
+0x000 GenericRead : Uint4B
+0x004 GenericWrite : Uint4B
+0x008 GenericExecute : Uint4B
+0x00c GenericAll : Uint4B
+0x014 AccessesToAudit : Uint4B
+0x018 MaximumAuditMask : Uint4B
+0x01c TransactionId : _GUID
+0x000 Data1 : Uint4B
+0x004 Data2 : Uint2B
+0x006 Data3 : Uint2B
+0x008 Data4 : UChar
+0x02c NewSecurityDescriptor : Ptr32
+0x030 ExistingSecurityDescriptor : Ptr32
+0x034 ParentSecurityDescriptor : Ptr32
+0x038 DeRefSecurityDescriptor : Ptr32
+0x03c SDLock : Ptr32
+0x040 AccessReasons : _ACCESS_REASONS
+0x000 Data : Uint4B
+0x000 SListHead : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x008 MinimumFree : Int4B
+0x00c Misses : Uint4B
+0x010 MissesLast : Uint4B
+0x014 Pad0 : Uint4B
+0x000 Level : UChar
+0x001 Associativity : UChar
+0x002 LineSize : Uint2B
+0x004 Size : Uint4B
+0x008 Type :
CacheUnified = 0n0
CacheInstruction = 0n1
CacheData = 0n2
CacheTrace = 0n3
+0x000 InterfaceType :
InterfaceTypeUndefined = 0n-1
Internal = 0n0
Isa = 0n1
Eisa = 0n2
MicroChannel = 0n3
TurboChannel = 0n4
PCIBus = 0n5
VMEBus = 0n6
NuBus = 0n7
PCMCIABus = 0n8
CBus = 0n9
MPIBus = 0n10
MPSABus = 0n11
ProcessorInternal = 0n12
InternalPowerBus = 0n13
PNPISABus = 0n14
PNPBus = 0n15
Vmcs = 0n16
MaximumInterfaceType = 0n17
+0x004 BusNumber : Uint4B
+0x008 PartialResourceList : _CM_PARTIAL_RESOURCE_LIST
+0x000 Version : Uint2B
+0x002 Revision : Uint2B
+0x004 Count : Uint4B
+0x008 PartialDescriptors : _CM_PARTIAL_RESOURCE_DESCRIPTOR
+0x000 Type : UChar
+0x001 ShareDisposition : UChar
+0x002 Flags : Uint2B
+0x004 u : <unnamed-tag>
+0x000 Generic : <unnamed-tag>
+0x000 Start : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 Length : Uint4B
+0x000 Port : <unnamed-tag>
+0x000 Start : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 Length : Uint4B
+0x000 Interrupt : <unnamed-tag>
+0x000 Level : Uint2B
+0x002 Group : Uint2B
+0x004 Vector : Uint4B
+0x008 Affinity : Uint4B
+0x000 MessageInterrupt : <unnamed-tag>
+0x000 Raw : <unnamed-tag>
+0x000 Group : Uint2B
+0x002 MessageCount : Uint2B
+0x004 Vector : Uint4B
+0x008 Affinity : Uint4B
+0x000 Translated : <unnamed-tag>
+0x000 Level : Uint2B
+0x002 Group : Uint2B
+0x004 Vector : Uint4B
+0x008 Affinity : Uint4B
+0x000 Memory : <unnamed-tag>
+0x000 Start : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 Length : Uint4B
+0x000 Dma : <unnamed-tag>
+0x000 Channel : Uint4B
+0x004 Port : Uint4B
+0x008 Reserved1 : Uint4B
+0x000 DevicePrivate : <unnamed-tag>
+0x000 Data : Uint4B
+0x000 BusNumber : <unnamed-tag>
+0x000 Start : Uint4B
+0x004 Length : Uint4B
+0x008 Reserved : Uint4B
+0x000 DeviceSpecificData : <unnamed-tag>
+0x000 DataSize : Uint4B
+0x004 Reserved1 : Uint4B
+0x008 Reserved2 : Uint4B
+0x000 Memory40 : <unnamed-tag>
+0x000 Start : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 Length40 : Uint4B
+0x000 Memory48 : <unnamed-tag>
+0x000 Start : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 Length48 : Uint4B
+0x000 Memory64 : <unnamed-tag>
+0x000 Start : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 Length64 : Uint4B
+0x000 Type : UChar
+0x001 ShareDisposition : UChar
+0x002 Flags : Uint2B
+0x004 u : <unnamed-tag>
+0x000 Generic : <unnamed-tag>
+0x000 Start : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 Length : Uint4B
+0x000 Port : <unnamed-tag>
+0x000 Start : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 Length : Uint4B
+0x000 Interrupt : <unnamed-tag>
+0x000 Level : Uint2B
+0x002 Group : Uint2B
+0x004 Vector : Uint4B
+0x008 Affinity : Uint4B
+0x000 MessageInterrupt : <unnamed-tag>
+0x000 Raw : <unnamed-tag>
+0x000 Group : Uint2B
+0x002 MessageCount : Uint2B
+0x004 Vector : Uint4B
+0x008 Affinity : Uint4B
+0x000 Translated : <unnamed-tag>
+0x000 Level : Uint2B
+0x002 Group : Uint2B
+0x004 Vector : Uint4B
+0x008 Affinity : Uint4B
+0x000 Memory : <unnamed-tag>
+0x000 Start : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 Length : Uint4B
+0x000 Dma : <unnamed-tag>
+0x000 Channel : Uint4B
+0x004 Port : Uint4B
+0x008 Reserved1 : Uint4B
+0x000 DevicePrivate : <unnamed-tag>
+0x000 Data : Uint4B
+0x000 BusNumber : <unnamed-tag>
+0x000 Start : Uint4B
+0x004 Length : Uint4B
+0x008 Reserved : Uint4B
+0x000 DeviceSpecificData : <unnamed-tag>
+0x000 DataSize : Uint4B
+0x004 Reserved1 : Uint4B
+0x008 Reserved2 : Uint4B
+0x000 Memory40 : <unnamed-tag>
+0x000 Start : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 Length40 : Uint4B
+0x000 Memory48 : <unnamed-tag>
+0x000 Start : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 Length48 : Uint4B
+0x000 Memory64 : <unnamed-tag>
+0x000 Start : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 Length64 : Uint4B
+0x000 Version : Uint2B
+0x002 Revision : Uint2B
+0x004 Count : Uint4B
+0x008 PartialDescriptors : _CM_PARTIAL_RESOURCE_DESCRIPTOR
+0x000 Type : UChar
+0x001 ShareDisposition : UChar
+0x002 Flags : Uint2B
+0x004 u : <unnamed-tag>
+0x000 Generic : <unnamed-tag>
+0x000 Start : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 Length : Uint4B
+0x000 Port : <unnamed-tag>
+0x000 Start : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 Length : Uint4B
+0x000 Interrupt : <unnamed-tag>
+0x000 Level : Uint2B
+0x002 Group : Uint2B
+0x004 Vector : Uint4B
+0x008 Affinity : Uint4B
+0x000 MessageInterrupt : <unnamed-tag>
+0x000 Raw : <unnamed-tag>
+0x000 Group : Uint2B
+0x002 MessageCount : Uint2B
+0x004 Vector : Uint4B
+0x008 Affinity : Uint4B
+0x000 Translated : <unnamed-tag>
+0x000 Level : Uint2B
+0x002 Group : Uint2B
+0x004 Vector : Uint4B
+0x008 Affinity : Uint4B
+0x000 Memory : <unnamed-tag>
+0x000 Start : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 Length : Uint4B
+0x000 Dma : <unnamed-tag>
+0x000 Channel : Uint4B
+0x004 Port : Uint4B
+0x008 Reserved1 : Uint4B
+0x000 DevicePrivate : <unnamed-tag>
+0x000 Data : Uint4B
+0x000 BusNumber : <unnamed-tag>
+0x000 Start : Uint4B
+0x004 Length : Uint4B
+0x008 Reserved : Uint4B
+0x000 DeviceSpecificData : <unnamed-tag>
+0x000 DataSize : Uint4B
+0x004 Reserved1 : Uint4B
+0x008 Reserved2 : Uint4B
+0x000 Memory40 : <unnamed-tag>
+0x000 Start : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 Length40 : Uint4B
+0x000 Memory48 : <unnamed-tag>
+0x000 Start : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 Length48 : Uint4B
+0x000 Memory64 : <unnamed-tag>
+0x000 Start : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 Length64 : Uint4B
+0x000 Count : Uint4B
+0x004 List : _CM_FULL_RESOURCE_DESCRIPTOR
+0x000 InterfaceType :
InterfaceTypeUndefined = 0n-1
Internal = 0n0
Isa = 0n1
Eisa = 0n2
MicroChannel = 0n3
TurboChannel = 0n4
PCIBus = 0n5
VMEBus = 0n6
NuBus = 0n7
PCMCIABus = 0n8
CBus = 0n9
MPIBus = 0n10
MPSABus = 0n11
ProcessorInternal = 0n12
InternalPowerBus = 0n13
PNPISABus = 0n14
PNPBus = 0n15
Vmcs = 0n16
MaximumInterfaceType = 0n17
+0x004 BusNumber : Uint4B
+0x008 PartialResourceList : _CM_PARTIAL_RESOURCE_LIST
+0x000 Version : Uint2B
+0x002 Revision : Uint2B
+0x004 Count : Uint4B
+0x008 PartialDescriptors : _CM_PARTIAL_RESOURCE_DESCRIPTOR
+0x000 Type : UChar
+0x001 ShareDisposition : UChar
+0x002 Flags : Uint2B
+0x004 u : <unnamed-tag>
+0x000 Generic : <unnamed-tag>
+0x000 Start : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 Length : Uint4B
+0x000 Port : <unnamed-tag>
+0x000 Start : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 Length : Uint4B
+0x000 Interrupt : <unnamed-tag>
+0x000 Level : Uint2B
+0x002 Group : Uint2B
+0x004 Vector : Uint4B
+0x008 Affinity : Uint4B
+0x000 MessageInterrupt : <unnamed-tag>
+0x000 Raw : <unnamed-tag>
+0x000 Group : Uint2B
+0x002 MessageCount : Uint2B
+0x004 Vector : Uint4B
+0x008 Affinity : Uint4B
+0x000 Translated : <unnamed-tag>
+0x000 Level : Uint2B
+0x002 Group : Uint2B
+0x004 Vector : Uint4B
+0x008 Affinity : Uint4B
+0x000 Memory : <unnamed-tag>
+0x000 Start : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 Length : Uint4B
+0x000 Dma : <unnamed-tag>
+0x000 Channel : Uint4B
+0x004 Port : Uint4B
+0x008 Reserved1 : Uint4B
+0x000 DevicePrivate : <unnamed-tag>
+0x000 Data : Uint4B
+0x000 BusNumber : <unnamed-tag>
+0x000 Start : Uint4B
+0x004 Length : Uint4B
+0x008 Reserved : Uint4B
+0x000 DeviceSpecificData : <unnamed-tag>
+0x000 DataSize : Uint4B
+0x004 Reserved1 : Uint4B
+0x008 Reserved2 : Uint4B
+0x000 Memory40 : <unnamed-tag>
+0x000 Start : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 Length40 : Uint4B
+0x000 Memory48 : <unnamed-tag>
+0x000 Start : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 Length48 : Uint4B
+0x000 Memory64 : <unnamed-tag>
+0x000 Start : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 Length64 : Uint4B
+0x000 CompressionFormatAndEngine : Uint2B +0x002 CompressionUnitShift : UChar +0x003 ChunkShift : UChar +0x004 ClusterShift : UChar +0x005 Reserved : UChar +0x006 NumberOfChunks : Uint2B +0x008 CompressedChunkSizes : Uint4B
+0x000 ContextFlags : Uint4B
+0x004 Dr0 : Uint4B
+0x008 Dr1 : Uint4B
+0x00c Dr2 : Uint4B
+0x010 Dr3 : Uint4B
+0x014 Dr6 : Uint4B
+0x018 Dr7 : Uint4B
+0x01c FloatSave : _FLOATING_SAVE_AREA
+0x000 ControlWord : Uint4B
+0x004 StatusWord : Uint4B
+0x008 TagWord : Uint4B
+0x00c ErrorOffset : Uint4B
+0x010 ErrorSelector : Uint4B
+0x014 DataOffset : Uint4B
+0x018 DataSelector : Uint4B
+0x01c RegisterArea : UChar
+0x06c Cr0NpxState : Uint4B
+0x08c SegGs : Uint4B
+0x090 SegFs : Uint4B
+0x094 SegEs : Uint4B
+0x098 SegDs : Uint4B
+0x09c Edi : Uint4B
+0x0a0 Esi : Uint4B
+0x0a4 Ebx : Uint4B
+0x0a8 Edx : Uint4B
+0x0ac Ecx : Uint4B
+0x0b0 Eax : Uint4B
+0x0b4 Ebp : Uint4B
+0x0b8 Eip : Uint4B
+0x0bc SegCs : Uint4B
+0x0c0 EFlags : Uint4B
+0x0c4 Esp : Uint4B
+0x0c8 SegSs : Uint4B
+0x0cc ExtendedRegisters : UChar
+0x000 Type :
PMCCounter = 0n0
MaxHardwareCounterType = 0n1
+0x004 Index : Uint4B
+0x008 Start : Uint8B
+0x010 Total : Uint8B
+0x000 DosPath : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x008 Handle : Ptr32
+0x000 Size : Uint2B
+0x002 Version : Uint2B
+0x004 DeviceD1 : Pos 0, 1 Bit
+0x004 DeviceD2 : Pos 1, 1 Bit
+0x004 LockSupported : Pos 2, 1 Bit
+0x004 EjectSupported : Pos 3, 1 Bit
+0x004 Removable : Pos 4, 1 Bit
+0x004 DockDevice : Pos 5, 1 Bit
+0x004 UniqueID : Pos 6, 1 Bit
+0x004 SilentInstall : Pos 7, 1 Bit
+0x004 RawDeviceOK : Pos 8, 1 Bit
+0x004 SurpriseRemovalOK : Pos 9, 1 Bit
+0x004 WakeFromD0 : Pos 10, 1 Bit
+0x004 WakeFromD1 : Pos 11, 1 Bit
+0x004 WakeFromD2 : Pos 12, 1 Bit
+0x004 WakeFromD3 : Pos 13, 1 Bit
+0x004 HardwareDisabled : Pos 14, 1 Bit
+0x004 NonDynamic : Pos 15, 1 Bit
+0x004 WarmEjectSupported : Pos 16, 1 Bit
+0x004 NoDisplayInUI : Pos 17, 1 Bit
+0x004 Reserved1 : Pos 18, 1 Bit
+0x004 Reserved : Pos 19, 13 Bits
+0x008 Address : Uint4B
+0x00c UINumber : Uint4B
+0x010 DeviceState :
PowerDeviceUnspecified = 0n0
PowerDeviceD0 = 0n1
PowerDeviceD1 = 0n2
PowerDeviceD2 = 0n3
PowerDeviceD3 = 0n4
PowerDeviceMaximum = 0n5
+0x02c SystemWake :
PowerSystemUnspecified = 0n0
PowerSystemWorking = 0n1
PowerSystemSleeping1 = 0n2
PowerSystemSleeping2 = 0n3
PowerSystemSleeping3 = 0n4
PowerSystemHibernate = 0n5
PowerSystemShutdown = 0n6
PowerSystemMaximum = 0n7
+0x030 DeviceWake :
PowerDeviceUnspecified = 0n0
PowerDeviceD0 = 0n1
PowerDeviceD1 = 0n2
PowerDeviceD2 = 0n3
PowerDeviceD3 = 0n4
PowerDeviceMaximum = 0n5
+0x034 D1Latency : Uint4B
+0x038 D2Latency : Uint4B
+0x03c D3Latency : Uint4B
+0x000 Type : Int2B
+0x002 Size : Uint2B
+0x004 ReferenceCount : Int4B
+0x008 DriverObject : Ptr32
+0x00c NextDevice : Ptr32
+0x010 AttachedDevice : Ptr32
+0x014 CurrentIrp : Ptr32
+0x018 Timer : Ptr32
+0x01c Flags : Uint4B
+0x020 Characteristics : Uint4B
+0x024 Vpb : Ptr32
+0x028 DeviceExtension : Ptr32
+0x02c DeviceType : Uint4B
+0x030 StackSize : Char
+0x034 Queue : <unnamed-tag>
+0x000 ListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x000 Wcb : _WAIT_CONTEXT_BLOCK
+0x000 WaitQueueEntry : _KDEVICE_QUEUE_ENTRY
+0x000 DeviceListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 SortKey : Uint4B
+0x00c Inserted : UChar
+0x010 DeviceRoutine : Ptr32
+0x014 DeviceContext : Ptr32
+0x018 NumberOfMapRegisters : Uint4B
+0x01c DeviceObject : Ptr32
+0x020 CurrentIrp : Ptr32
+0x024 BufferChainingDpc : Ptr32
+0x05c AlignmentRequirement : Uint4B
+0x060 DeviceQueue : _KDEVICE_QUEUE
+0x000 Type : Int2B
+0x002 Size : Int2B
+0x004 DeviceListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x00c Lock : Uint4B
+0x010 Busy : UChar
+0x074 Dpc : _KDPC
+0x000 Type : UChar
+0x001 Importance : UChar
+0x002 Number : Uint2B
+0x004 DpcListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x00c DeferredRoutine : Ptr32
+0x010 DeferredContext : Ptr32
+0x014 SystemArgument1 : Ptr32
+0x018 SystemArgument2 : Ptr32
+0x01c DpcData : Ptr32
+0x094 ActiveThreadCount : Uint4B
+0x098 SecurityDescriptor : Ptr32
+0x09c DeviceLock : _KEVENT
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x0ac SectorSize : Uint2B
+0x0ae Spare1 : Uint2B
+0x0b0 DeviceObjectExtension : Ptr32
+0x0b4 Reserved : Ptr32
PowerDeviceUnspecified = 0n0 PowerDeviceD0 = 0n1 PowerDeviceD1 = 0n2 PowerDeviceD2 = 0n3 PowerDeviceD3 = 0n4 PowerDeviceMaximum = 0n5
BusRelations = 0n0 EjectionRelations = 0n1 PowerRelations = 0n2 RemovalRelations = 0n3 TargetDeviceRelation = 0n4 SingleBusRelations = 0n5 TransportRelations = 0n6
DeviceUsageTypeUndefined = 0n0 DeviceUsageTypePaging = 0n1 DeviceUsageTypeHibernation = 0n2 DeviceUsageTypeDumpFile = 0n3
+0x000 Type : Int2B
+0x002 Size : Uint2B
+0x004 DeviceObject : Ptr32
+0x008 PowerFlags : Uint4B
+0x00c Dope : Ptr32
+0x010 ExtensionFlags : Uint4B
+0x014 DeviceNode : Ptr32
+0x018 AttachedTo : Ptr32
+0x01c StartIoCount : Int4B
+0x020 StartIoKey : Int4B
+0x024 StartIoFlags : Uint4B
+0x028 Vpb : Ptr32
+0x02c DependentList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x034 ProviderList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x000 StartStamp : Uint4B
+0x004 Heap : Ptr32
+0x008 RequestedSize : Uint4B
+0x00c ActualSize : Uint4B
+0x010 FreeQueue : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 FreePushList : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x010 TraceIndex : Uint2B
+0x018 StackTrace : Ptr32
+0x01c EndStamp : Uint4B
+0x000 pNextAlloc : Ptr32
+0x000 AvailableEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x000 TableLinks : _RTL_BALANCED_LINKS
+0x000 Parent : Ptr32
+0x004 LeftChild : Ptr32
+0x008 RightChild : Ptr32
+0x00c Balance : Char
+0x00d Reserved : UChar
+0x010 pUserAllocation : Ptr32
+0x014 pVirtualBlock : Ptr32
+0x018 nVirtualBlockSize : Uint4B
+0x01c nVirtualAccessSize : Uint4B
+0x020 nUserRequestedSize : Uint4B
+0x024 nUserActualSize : Uint4B
+0x028 UserValue : Ptr32
+0x02c UserFlags : Uint4B
+0x030 StackTrace : Ptr32
+0x034 AdjacencyEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x03c pVirtualRegion : Ptr32
+0x000 Signature : Uint4B
+0x004 HeapFlags : Uint4B
+0x008 HeapCritSect : Ptr32
+0x00c nRemoteLockAcquired : Uint4B
+0x010 pVirtualStorageListHead : Ptr32
+0x014 pVirtualStorageListTail : Ptr32
+0x018 nVirtualStorageRanges : Uint4B
+0x01c nVirtualStorageBytes : Uint4B
+0x020 BusyNodesTable : _RTL_AVL_TABLE
+0x000 BalancedRoot : _RTL_BALANCED_LINKS
+0x000 Parent : Ptr32
+0x004 LeftChild : Ptr32
+0x008 RightChild : Ptr32
+0x00c Balance : Char
+0x00d Reserved : UChar
+0x010 OrderedPointer : Ptr32
+0x014 WhichOrderedElement : Uint4B
+0x018 NumberGenericTableElements : Uint4B
+0x01c DepthOfTree : Uint4B
+0x020 RestartKey : Ptr32
+0x024 DeleteCount : Uint4B
+0x028 CompareRoutine : Ptr32
+0x02c AllocateRoutine : Ptr32
+0x030 FreeRoutine : Ptr32
+0x034 TableContext : Ptr32
+0x058 NodeToAllocate : Ptr32
+0x05c nBusyAllocations : Uint4B
+0x060 nBusyAllocationBytesCommitted : Uint4B
+0x064 pFreeAllocationListHead : Ptr32
+0x068 pFreeAllocationListTail : Ptr32
+0x06c nFreeAllocations : Uint4B
+0x070 nFreeAllocationBytesCommitted : Uint4B
+0x074 AvailableAllocationHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x07c nAvailableAllocations : Uint4B
+0x080 nAvailableAllocationBytesCommitted : Uint4B
+0x084 pUnusedNodeListHead : Ptr32
+0x088 pUnusedNodeListTail : Ptr32
+0x08c nUnusedNodes : Uint4B
+0x090 nBusyAllocationBytesAccessible : Uint4B
+0x094 pNodePoolListHead : Ptr32
+0x098 pNodePoolListTail : Ptr32
+0x09c nNodePools : Uint4B
+0x0a0 nNodePoolBytes : Uint4B
+0x0a4 NextHeap : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x0ac ExtraFlags : Uint4B
+0x0b0 Seed : Uint4B
+0x0b4 NormalHeap : Ptr32
+0x0b8 CreateStackTrace : Ptr32
+0x0bc FirstThread : Ptr32
+0x000 DriverObject : Ptr32
+0x004 AddDevice : Ptr32
+0x008 Count : Uint4B
+0x00c ServiceKeyName : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x014 ClientDriverExtension : Ptr32
+0x018 FsFilterCallbacks : Ptr32
+0x000 Type : Int2B
+0x002 Size : Int2B
+0x004 DeviceObject : Ptr32
+0x008 Flags : Uint4B
+0x00c DriverStart : Ptr32
+0x010 DriverSize : Uint4B
+0x014 DriverSection : Ptr32
+0x018 DriverExtension : Ptr32
+0x01c DriverName : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x024 HardwareDatabase : Ptr32
+0x028 FastIoDispatch : Ptr32
+0x02c DriverInit : Ptr32
+0x030 DriverStartIo : Ptr32
+0x034 DriverUnload : Ptr32
+0x038 MajorFunction : Ptr32
+0x000 Event : _KEVENT
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 JobLinks : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x018 ProcessListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x020 JobLock : _ERESOURCE
+0x000 SystemResourcesList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 OwnerTable : Ptr32
+0x00c ActiveCount : Int2B
+0x00e Flag : Uint2B
+0x010 SharedWaiters : Ptr32
+0x014 ExclusiveWaiters : Ptr32
+0x018 OwnerEntry : _OWNER_ENTRY
+0x000 OwnerThread : Uint4B
+0x004 IoPriorityBoosted : Pos 0, 1 Bit
+0x004 OwnerReferenced : Pos 1, 1 Bit
+0x004 OwnerCount : Pos 2, 30 Bits
+0x004 TableSize : Uint4B
+0x020 ActiveEntries : Uint4B
+0x024 ContentionCount : Uint4B
+0x028 NumberOfSharedWaiters : Uint4B
+0x02c NumberOfExclusiveWaiters : Uint4B
+0x030 Address : Ptr32
+0x030 CreatorBackTraceIndex : Uint4B
+0x034 SpinLock : Uint4B
+0x058 TotalUserTime : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x060 TotalKernelTime : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x068 ThisPeriodTotalUserTime : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x070 ThisPeriodTotalKernelTime : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x078 TotalPageFaultCount : Uint4B
+0x07c TotalProcesses : Uint4B
+0x080 ActiveProcesses : Uint4B
+0x084 TotalTerminatedProcesses : Uint4B
+0x088 PerProcessUserTimeLimit : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x090 PerJobUserTimeLimit : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x098 MinimumWorkingSetSize : Uint4B
+0x09c MaximumWorkingSetSize : Uint4B
+0x0a0 LimitFlags : Uint4B
+0x0a4 ActiveProcessLimit : Uint4B
+0x0a8 Affinity : _KAFFINITY_EX
+0x000 Count : Uint2B
+0x002 Size : Uint2B
+0x004 Reserved : Uint4B
+0x008 Bitmap : Uint4B
+0x0c0 PriorityClass : UChar
+0x0c4 AccessState : Ptr32
+0x0c8 UIRestrictionsClass : Uint4B
+0x0cc EndOfJobTimeAction : Uint4B
+0x0d0 CompletionPort : Ptr32
+0x0d4 CompletionKey : Ptr32
+0x0d8 SessionId : Uint4B
+0x0dc SchedulingClass : Uint4B
+0x0e0 ReadOperationCount : Uint8B
+0x0e8 WriteOperationCount : Uint8B
+0x0f0 OtherOperationCount : Uint8B
+0x0f8 ReadTransferCount : Uint8B
+0x100 WriteTransferCount : Uint8B
+0x108 OtherTransferCount : Uint8B
+0x110 ProcessMemoryLimit : Uint4B
+0x114 JobMemoryLimit : Uint4B
+0x118 PeakProcessMemoryUsed : Uint4B
+0x11c PeakJobMemoryUsed : Uint4B
+0x120 CurrentJobMemoryUsed : Uint8B
+0x128 MemoryLimitsLock : _EX_PUSH_LOCK
+0x000 Locked : Pos 0, 1 Bit
+0x000 Waiting : Pos 1, 1 Bit
+0x000 Waking : Pos 2, 1 Bit
+0x000 MultipleShared : Pos 3, 1 Bit
+0x000 Shared : Pos 4, 28 Bits
+0x000 Value : Uint4B
+0x000 Ptr : Ptr32
+0x12c JobSetLinks : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x134 MemberLevel : Uint4B
+0x138 JobFlags : Uint4B
+0x000 Pcb : _KPROCESS
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 ProfileListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x018 DirectoryTableBase : Uint4B
+0x01c LdtDescriptor : _KGDTENTRY
+0x000 LimitLow : Uint2B
+0x002 BaseLow : Uint2B
+0x004 HighWord : <unnamed-tag>
+0x000 Bytes : <unnamed-tag>
+0x000 BaseMid : UChar
+0x001 Flags1 : UChar
+0x002 Flags2 : UChar
+0x003 BaseHi : UChar
+0x000 Bits : <unnamed-tag>
+0x000 BaseMid : Pos 0, 8 Bits
+0x000 Type : Pos 8, 5 Bits
+0x000 Dpl : Pos 13, 2 Bits
+0x000 Pres : Pos 15, 1 Bit
+0x000 LimitHi : Pos 16, 4 Bits
+0x000 Sys : Pos 20, 1 Bit
+0x000 Reserved_0 : Pos 21, 1 Bit
+0x000 Default_Big : Pos 22, 1 Bit
+0x000 Granularity : Pos 23, 1 Bit
+0x000 BaseHi : Pos 24, 8 Bits
+0x024 Int21Descriptor : _KIDTENTRY
+0x000 Offset : Uint2B
+0x002 Selector : Uint2B
+0x004 Access : Uint2B
+0x006 ExtendedOffset : Uint2B
+0x02c ThreadListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x034 ProcessLock : Uint4B
+0x038 Affinity : _KAFFINITY_EX
+0x000 Count : Uint2B
+0x002 Size : Uint2B
+0x004 Reserved : Uint4B
+0x008 Bitmap : Uint4B
+0x050 ReadyListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x058 SwapListEntry : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x05c ActiveProcessors : _KAFFINITY_EX
+0x000 Count : Uint2B
+0x002 Size : Uint2B
+0x004 Reserved : Uint4B
+0x008 Bitmap : Uint4B
+0x074 AutoAlignment : Pos 0, 1 Bit
+0x074 DisableBoost : Pos 1, 1 Bit
+0x074 DisableQuantum : Pos 2, 1 Bit
+0x074 ActiveGroupsMask : Pos 3, 4 Bits
+0x074 ReservedFlags : Pos 7, 25 Bits
+0x074 ProcessFlags : Int4B
+0x078 BasePriority : Char
+0x079 QuantumReset : Char
+0x07a Visited : UChar
+0x07b Unused3 : UChar
+0x07c ThreadSeed : Uint4B
+0x08c IdealNode : Uint2B
+0x094 IdealGlobalNode : Uint2B
+0x096 Flags : _KEXECUTE_OPTIONS
+0x000 ExecuteDisable : Pos 0, 1 Bit
+0x000 ExecuteEnable : Pos 1, 1 Bit
+0x000 DisableThunkEmulation : Pos 2, 1 Bit
+0x000 Permanent : Pos 3, 1 Bit
+0x000 ExecuteDispatchEnable : Pos 4, 1 Bit
+0x000 ImageDispatchEnable : Pos 5, 1 Bit
+0x000 DisableExceptionChainValidation : Pos 6, 1 Bit
+0x000 Spare : Pos 7, 1 Bit
+0x000 ExecuteOptions : UChar
+0x097 Unused1 : UChar
+0x098 IopmOffset : Uint2B
+0x09c Unused4 : Uint4B
+0x0a0 StackCount : _KSTACK_COUNT
+0x000 Value : Int4B
+0x000 State : Pos 0, 3 Bits
+0x000 StackCount : Pos 3, 29 Bits
+0x0a4 ProcessListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x0b0 CycleTime : Uint8B
+0x0b8 KernelTime : Uint4B
+0x0bc UserTime : Uint4B
+0x0c0 VdmTrapcHandler : Ptr32
+0x0c8 ProcessLock : _EX_PUSH_LOCK
+0x000 Locked : Pos 0, 1 Bit
+0x000 Waiting : Pos 1, 1 Bit
+0x000 Waking : Pos 2, 1 Bit
+0x000 MultipleShared : Pos 3, 1 Bit
+0x000 Shared : Pos 4, 28 Bits
+0x000 Value : Uint4B
+0x000 Ptr : Ptr32
+0x0d0 CreateTime : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x0d8 ExitTime : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x0e0 RundownProtect : _EX_RUNDOWN_REF
+0x000 Count : Uint4B
+0x000 Ptr : Ptr32
+0x0e4 UniqueProcessId : Ptr32
+0x0e8 ActiveProcessLinks : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x0f0 ProcessQuotaUsage : Uint4B
+0x0f8 ProcessQuotaPeak : Uint4B
+0x100 CommitCharge : Uint4B
+0x104 QuotaBlock : Ptr32
+0x108 CpuQuotaBlock : Ptr32
+0x10c PeakVirtualSize : Uint4B
+0x110 VirtualSize : Uint4B
+0x114 SessionProcessLinks : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x11c DebugPort : Ptr32
+0x120 ExceptionPortData : Ptr32
+0x120 ExceptionPortValue : Uint4B
+0x120 ExceptionPortState : Pos 0, 3 Bits
+0x124 ObjectTable : Ptr32
+0x128 Token : _EX_FAST_REF
+0x000 Object : Ptr32
+0x000 RefCnt : Pos 0, 3 Bits
+0x000 Value : Uint4B
+0x12c WorkingSetPage : Uint4B
+0x130 AddressCreationLock : _EX_PUSH_LOCK
+0x000 Locked : Pos 0, 1 Bit
+0x000 Waiting : Pos 1, 1 Bit
+0x000 Waking : Pos 2, 1 Bit
+0x000 MultipleShared : Pos 3, 1 Bit
+0x000 Shared : Pos 4, 28 Bits
+0x000 Value : Uint4B
+0x000 Ptr : Ptr32
+0x134 RotateInProgress : Ptr32
+0x138 ForkInProgress : Ptr32
+0x13c HardwareTrigger : Uint4B
+0x140 PhysicalVadRoot : Ptr32
+0x144 CloneRoot : Ptr32
+0x148 NumberOfPrivatePages : Uint4B
+0x14c NumberOfLockedPages : Uint4B
+0x150 Win32Process : Ptr32
+0x154 Job : Ptr32
+0x158 SectionObject : Ptr32
+0x15c SectionBaseAddress : Ptr32
+0x160 Cookie : Uint4B
+0x164 Spare8 : Uint4B
+0x168 WorkingSetWatch : Ptr32
+0x16c Win32WindowStation : Ptr32
+0x170 InheritedFromUniqueProcessId : Ptr32
+0x174 LdtInformation : Ptr32
+0x178 VdmObjects : Ptr32
+0x17c ConsoleHostProcess : Uint4B
+0x180 DeviceMap : Ptr32
+0x184 EtwDataSource : Ptr32
+0x188 FreeTebHint : Ptr32
+0x190 PageDirectoryPte : _HARDWARE_PTE_X86
+0x000 Valid : Pos 0, 1 Bit
+0x000 Write : Pos 1, 1 Bit
+0x000 Owner : Pos 2, 1 Bit
+0x000 WriteThrough : Pos 3, 1 Bit
+0x000 CacheDisable : Pos 4, 1 Bit
+0x000 Accessed : Pos 5, 1 Bit
+0x000 Dirty : Pos 6, 1 Bit
+0x000 LargePage : Pos 7, 1 Bit
+0x000 Global : Pos 8, 1 Bit
+0x000 CopyOnWrite : Pos 9, 1 Bit
+0x000 Prototype : Pos 10, 1 Bit
+0x000 reserved : Pos 11, 1 Bit
+0x000 PageFrameNumber : Pos 12, 20 Bits
+0x190 Filler : Uint8B
+0x198 Session : Ptr32
+0x19c ImageFileName : UChar
+0x1ab PriorityClass : UChar
+0x1ac JobLinks : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x1b4 LockedPagesList : Ptr32
+0x1b8 ThreadListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x1c0 SecurityPort : Ptr32
+0x1c4 PaeTop : Ptr32
+0x1c8 ActiveThreads : Uint4B
+0x1cc ImagePathHash : Uint4B
+0x1d0 DefaultHardErrorProcessing : Uint4B
+0x1d4 LastThreadExitStatus : Int4B
+0x1d8 Peb : Ptr32
+0x1dc PrefetchTrace : _EX_FAST_REF
+0x000 Object : Ptr32
+0x000 RefCnt : Pos 0, 3 Bits
+0x000 Value : Uint4B
+0x1e0 ReadOperationCount : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x1e8 WriteOperationCount : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x1f0 OtherOperationCount : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x1f8 ReadTransferCount : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x200 WriteTransferCount : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x208 OtherTransferCount : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x210 CommitChargeLimit : Uint4B
+0x214 CommitChargePeak : Uint4B
+0x218 AweInfo : Ptr32
+0x21c SeAuditProcessCreationInfo : _SE_AUDIT_PROCESS_CREATION_INFO
+0x000 ImageFileName : Ptr32
+0x220 Vm : _MMSUPPORT
+0x000 WorkingSetMutex : _EX_PUSH_LOCK
+0x000 Locked : Pos 0, 1 Bit
+0x000 Waiting : Pos 1, 1 Bit
+0x000 Waking : Pos 2, 1 Bit
+0x000 MultipleShared : Pos 3, 1 Bit
+0x000 Shared : Pos 4, 28 Bits
+0x000 Value : Uint4B
+0x000 Ptr : Ptr32
+0x004 ExitGate : Ptr32
+0x008 AccessLog : Ptr32
+0x00c WorkingSetExpansionLinks : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x014 AgeDistribution : Uint4B
+0x030 MinimumWorkingSetSize : Uint4B
+0x034 WorkingSetSize : Uint4B
+0x038 WorkingSetPrivateSize : Uint4B
+0x03c MaximumWorkingSetSize : Uint4B
+0x040 ChargedWslePages : Uint4B
+0x044 ActualWslePages : Uint4B
+0x048 WorkingSetSizeOverhead : Uint4B
+0x04c PeakWorkingSetSize : Uint4B
+0x050 HardFaultCount : Uint4B
+0x054 VmWorkingSetList : Ptr32
+0x058 NextPageColor : Uint2B
+0x05a LastTrimStamp : Uint2B
+0x05c PageFaultCount : Uint4B
+0x060 RepurposeCount : Uint4B
+0x064 Spare : Uint4B
+0x068 Flags : _MMSUPPORT_FLAGS
+0x000 WorkingSetType : Pos 0, 3 Bits
+0x000 ModwriterAttached : Pos 3, 1 Bit
+0x000 TrimHard : Pos 4, 1 Bit
+0x000 MaximumWorkingSetHard : Pos 5, 1 Bit
+0x000 ForceTrim : Pos 6, 1 Bit
+0x000 MinimumWorkingSetHard : Pos 7, 1 Bit
+0x001 SessionMaster : Pos 0, 1 Bit
+0x001 TrimmerState : Pos 1, 2 Bits
+0x001 Reserved : Pos 3, 1 Bit
+0x001 PageStealers : Pos 4, 4 Bits
+0x002 MemoryPriority : Pos 0, 8 Bits
+0x003 WsleDeleted : Pos 0, 1 Bit
+0x003 VmExiting : Pos 1, 1 Bit
+0x003 ExpansionFailed : Pos 2, 1 Bit
+0x003 Available : Pos 3, 5 Bits
+0x28c MmProcessLinks : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x294 HighestUserAddress : Ptr32
+0x298 ModifiedPageCount : Uint4B
+0x29c Flags2 : Uint4B
+0x29c JobNotReallyActive : Pos 0, 1 Bit
+0x29c AccountingFolded : Pos 1, 1 Bit
+0x29c NewProcessReported : Pos 2, 1 Bit
+0x29c ExitProcessReported : Pos 3, 1 Bit
+0x29c ReportCommitChanges : Pos 4, 1 Bit
+0x29c LastReportMemory : Pos 5, 1 Bit
+0x29c ReportPhysicalPageChanges : Pos 6, 1 Bit
+0x29c HandleTableRundown : Pos 7, 1 Bit
+0x29c NeedsHandleRundown : Pos 8, 1 Bit
+0x29c RefTraceEnabled : Pos 9, 1 Bit
+0x29c NumaAware : Pos 10, 1 Bit
+0x29c ProtectedProcess : Pos 11, 1 Bit
+0x29c DefaultPagePriority : Pos 12, 3 Bits
+0x29c PrimaryTokenFrozen : Pos 15, 1 Bit
+0x29c ProcessVerifierTarget : Pos 16, 1 Bit
+0x29c StackRandomizationDisabled : Pos 17, 1 Bit
+0x29c AffinityPermanent : Pos 18, 1 Bit
+0x29c AffinityUpdateEnable : Pos 19, 1 Bit
+0x29c PropagateNode : Pos 20, 1 Bit
+0x29c ExplicitAffinity : Pos 21, 1 Bit
+0x2a0 Flags : Uint4B
+0x2a0 CreateReported : Pos 0, 1 Bit
+0x2a0 NoDebugInherit : Pos 1, 1 Bit
+0x2a0 ProcessExiting : Pos 2, 1 Bit
+0x2a0 ProcessDelete : Pos 3, 1 Bit
+0x2a0 Wow64SplitPages : Pos 4, 1 Bit
+0x2a0 VmDeleted : Pos 5, 1 Bit
+0x2a0 OutswapEnabled : Pos 6, 1 Bit
+0x2a0 Outswapped : Pos 7, 1 Bit
+0x2a0 ForkFailed : Pos 8, 1 Bit
+0x2a0 Wow64VaSpace4Gb : Pos 9, 1 Bit
+0x2a0 AddressSpaceInitialized : Pos 10, 2 Bits
+0x2a0 SetTimerResolution : Pos 12, 1 Bit
+0x2a0 BreakOnTermination : Pos 13, 1 Bit
+0x2a0 DeprioritizeViews : Pos 14, 1 Bit
+0x2a0 WriteWatch : Pos 15, 1 Bit
+0x2a0 ProcessInSession : Pos 16, 1 Bit
+0x2a0 OverrideAddressSpace : Pos 17, 1 Bit
+0x2a0 HasAddressSpace : Pos 18, 1 Bit
+0x2a0 LaunchPrefetched : Pos 19, 1 Bit
+0x2a0 InjectInpageErrors : Pos 20, 1 Bit
+0x2a0 VmTopDown : Pos 21, 1 Bit
+0x2a0 ImageNotifyDone : Pos 22, 1 Bit
+0x2a0 PdeUpdateNeeded : Pos 23, 1 Bit
+0x2a0 VdmAllowed : Pos 24, 1 Bit
+0x2a0 CrossSessionCreate : Pos 25, 1 Bit
+0x2a0 ProcessInserted : Pos 26, 1 Bit
+0x2a0 DefaultIoPriority : Pos 27, 3 Bits
+0x2a0 ProcessSelfDelete : Pos 30, 1 Bit
+0x2a0 SetTimerResolutionLink : Pos 31, 1 Bit
+0x2a4 ExitStatus : Int4B
+0x2a8 VadRoot : _MM_AVL_TABLE
+0x000 BalancedRoot : _MMADDRESS_NODE
+0x000 u1 : <unnamed-tag>
+0x000 Balance : Pos 0, 2 Bits
+0x000 Parent : Ptr32
+0x004 LeftChild : Ptr32
+0x008 RightChild : Ptr32
+0x00c StartingVpn : Uint4B
+0x010 EndingVpn : Uint4B
+0x014 DepthOfTree : Pos 0, 5 Bits
+0x014 Unused : Pos 5, 3 Bits
+0x014 NumberGenericTableElements : Pos 8, 24 Bits
+0x018 NodeHint : Ptr32
+0x01c NodeFreeHint : Ptr32
+0x2c8 AlpcContext : _ALPC_PROCESS_CONTEXT
+0x000 Lock : _EX_PUSH_LOCK
+0x000 Locked : Pos 0, 1 Bit
+0x000 Waiting : Pos 1, 1 Bit
+0x000 Waking : Pos 2, 1 Bit
+0x000 MultipleShared : Pos 3, 1 Bit
+0x000 Shared : Pos 4, 28 Bits
+0x000 Value : Uint4B
+0x000 Ptr : Ptr32
+0x004 ViewListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x00c PagedPoolQuotaCache : Uint4B
+0x2d8 TimerResolutionLink : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x2e0 RequestedTimerResolution : Uint4B
+0x2e4 ActiveThreadsHighWatermark : Uint4B
+0x2e8 SmallestTimerResolution : Uint4B
+0x2ec TimerResolutionStackRecord : Ptr32
+0x000 SystemResourcesList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 OwnerTable : Ptr32
+0x00c ActiveCount : Int2B
+0x00e Flag : Uint2B
+0x010 SharedWaiters : Ptr32
+0x014 ExclusiveWaiters : Ptr32
+0x018 OwnerEntry : _OWNER_ENTRY
+0x000 OwnerThread : Uint4B
+0x004 IoPriorityBoosted : Pos 0, 1 Bit
+0x004 OwnerReferenced : Pos 1, 1 Bit
+0x004 OwnerCount : Pos 2, 30 Bits
+0x004 TableSize : Uint4B
+0x020 ActiveEntries : Uint4B
+0x024 ContentionCount : Uint4B
+0x028 NumberOfSharedWaiters : Uint4B
+0x02c NumberOfExclusiveWaiters : Uint4B
+0x030 Address : Ptr32
+0x030 CreatorBackTraceIndex : Uint4B
+0x034 SpinLock : Uint4B
+0x000 Tcb : _KTHREAD
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 CycleTime : Uint8B
+0x018 HighCycleTime : Uint4B
+0x020 QuantumTarget : Uint8B
+0x028 InitialStack : Ptr32
+0x02c StackLimit : Ptr32
+0x030 KernelStack : Ptr32
+0x034 ThreadLock : Uint4B
+0x038 WaitRegister : _KWAIT_STATUS_REGISTER
+0x000 Flags : UChar
+0x000 State : Pos 0, 2 Bits
+0x000 Affinity : Pos 2, 1 Bit
+0x000 Priority : Pos 3, 1 Bit
+0x000 Apc : Pos 4, 1 Bit
+0x000 UserApc : Pos 5, 1 Bit
+0x000 Alert : Pos 6, 1 Bit
+0x000 Unused : Pos 7, 1 Bit
+0x039 Running : UChar
+0x03a Alerted : UChar
+0x03c KernelStackResident : Pos 0, 1 Bit
+0x03c ReadyTransition : Pos 1, 1 Bit
+0x03c ProcessReadyQueue : Pos 2, 1 Bit
+0x03c WaitNext : Pos 3, 1 Bit
+0x03c SystemAffinityActive : Pos 4, 1 Bit
+0x03c Alertable : Pos 5, 1 Bit
+0x03c GdiFlushActive : Pos 6, 1 Bit
+0x03c UserStackWalkActive : Pos 7, 1 Bit
+0x03c ApcInterruptRequest : Pos 8, 1 Bit
+0x03c ForceDeferSchedule : Pos 9, 1 Bit
+0x03c QuantumEndMigrate : Pos 10, 1 Bit
+0x03c UmsDirectedSwitchEnable : Pos 11, 1 Bit
+0x03c TimerActive : Pos 12, 1 Bit
+0x03c Reserved : Pos 13, 19 Bits
+0x03c MiscFlags : Int4B
+0x040 ApcState : _KAPC_STATE
+0x000 ApcListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 Process : Ptr32
+0x014 KernelApcInProgress : UChar
+0x015 KernelApcPending : UChar
+0x016 UserApcPending : UChar
+0x040 ApcStateFill : UChar
+0x057 Priority : Char
+0x058 NextProcessor : Uint4B
+0x05c DeferredProcessor : Uint4B
+0x060 ApcQueueLock : Uint4B
+0x064 ContextSwitches : Uint4B
+0x068 State : UChar
+0x069 NpxState : Char
+0x06a WaitIrql : UChar
+0x06b WaitMode : Char
+0x06c WaitStatus : Int4B
+0x070 WaitBlockList : Ptr32
+0x074 WaitListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x074 SwapListEntry : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x07c Queue : Ptr32
+0x080 WaitTime : Uint4B
+0x084 KernelApcDisable : Int2B
+0x086 SpecialApcDisable : Int2B
+0x084 CombinedApcDisable : Uint4B
+0x088 Teb : Ptr32
+0x090 Timer : _KTIMER
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 DueTime : _ULARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 QuadPart : Uint8B
+0x018 TimerListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x020 Dpc : Ptr32
+0x024 Period : Uint4B
+0x0b8 AutoAlignment : Pos 0, 1 Bit
+0x0b8 DisableBoost : Pos 1, 1 Bit
+0x0b8 EtwStackTraceApc1Inserted : Pos 2, 1 Bit
+0x0b8 EtwStackTraceApc2Inserted : Pos 3, 1 Bit
+0x0b8 CalloutActive : Pos 4, 1 Bit
+0x0b8 ApcQueueable : Pos 5, 1 Bit
+0x0b8 EnableStackSwap : Pos 6, 1 Bit
+0x0b8 GuiThread : Pos 7, 1 Bit
+0x0b8 UmsPerformingSyscall : Pos 8, 1 Bit
+0x0b8 ReservedFlags : Pos 9, 23 Bits
+0x0b8 ThreadFlags : Int4B
+0x0bc ServiceTable : Ptr32
+0x0c0 WaitBlock : _KWAIT_BLOCK
+0x000 WaitListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 Thread : Ptr32
+0x00c Object : Ptr32
+0x010 NextWaitBlock : Ptr32
+0x014 WaitKey : Uint2B
+0x016 WaitType : UChar
+0x017 BlockState : UChar
+0x120 QueueListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x128 TrapFrame : Ptr32
+0x12c FirstArgument : Ptr32
+0x130 CallbackStack : Ptr32
+0x130 CallbackDepth : Uint4B
+0x134 ApcStateIndex : UChar
+0x135 BasePriority : Char
+0x136 PriorityDecrement : Char
+0x136 ForegroundBoost : Pos 0, 4 Bits
+0x136 UnusualBoost : Pos 4, 4 Bits
+0x137 Preempted : UChar
+0x138 AdjustReason : UChar
+0x139 AdjustIncrement : Char
+0x13a PreviousMode : Char
+0x13b Saturation : Char
+0x13c SystemCallNumber : Uint4B
+0x140 FreezeCount : Uint4B
+0x144 UserAffinity : _GROUP_AFFINITY
+0x000 Mask : Uint4B
+0x004 Group : Uint2B
+0x006 Reserved : Uint2B
+0x150 Process : Ptr32
+0x154 Affinity : _GROUP_AFFINITY
+0x000 Mask : Uint4B
+0x004 Group : Uint2B
+0x006 Reserved : Uint2B
+0x160 IdealProcessor : Uint4B
+0x164 UserIdealProcessor : Uint4B
+0x168 ApcStatePointer : Ptr32
+0x170 SavedApcState : _KAPC_STATE
+0x000 ApcListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 Process : Ptr32
+0x014 KernelApcInProgress : UChar
+0x015 KernelApcPending : UChar
+0x016 UserApcPending : UChar
+0x170 SavedApcStateFill : UChar
+0x187 WaitReason : UChar
+0x188 SuspendCount : Char
+0x189 Spare1 : Char
+0x18a OtherPlatformFill : UChar
+0x18c Win32Thread : Ptr32
+0x190 StackBase : Ptr32
+0x194 SuspendApc : _KAPC
+0x000 Type : UChar
+0x001 SpareByte0 : UChar
+0x002 Size : UChar
+0x003 SpareByte1 : UChar
+0x004 SpareLong0 : Uint4B
+0x008 Thread : Ptr32
+0x00c ApcListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x014 KernelRoutine : Ptr32
+0x018 RundownRoutine : Ptr32
+0x01c NormalRoutine : Ptr32
+0x020 NormalContext : Ptr32
+0x024 SystemArgument1 : Ptr32
+0x028 SystemArgument2 : Ptr32
+0x02c ApcStateIndex : Char
+0x02d ApcMode : Char
+0x02e Inserted : UChar
+0x194 SuspendApcFill0 : UChar
+0x195 ResourceIndex : UChar
+0x194 SuspendApcFill1 : UChar
+0x197 QuantumReset : UChar
+0x194 SuspendApcFill2 : UChar
+0x198 KernelTime : Uint4B
+0x194 SuspendApcFill3 : UChar
+0x1b8 WaitPrcb : Ptr32
+0x194 SuspendApcFill4 : UChar
+0x1bc LegoData : Ptr32
+0x194 SuspendApcFill5 : UChar
+0x1c3 LargeStack : UChar
+0x1c4 UserTime : Uint4B
+0x1c8 SuspendSemaphore : _KSEMAPHORE
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 Limit : Int4B
+0x1c8 SuspendSemaphorefill : UChar
+0x1dc SListFaultCount : Uint4B
+0x1e0 ThreadListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x1e8 MutantListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x1f0 SListFaultAddress : Ptr32
+0x1f4 ThreadCounters : Ptr32
+0x1f8 XStateSave : Ptr32
+0x200 CreateTime : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x208 ExitTime : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x208 KeyedWaitChain : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x210 ExitStatus : Int4B
+0x214 PostBlockList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x214 ForwardLinkShadow : Ptr32
+0x218 StartAddress : Ptr32
+0x21c TerminationPort : Ptr32
+0x21c ReaperLink : Ptr32
+0x21c KeyedWaitValue : Ptr32
+0x220 ActiveTimerListLock : Uint4B
+0x224 ActiveTimerListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x22c Cid : _CLIENT_ID
+0x000 UniqueProcess : Ptr32
+0x004 UniqueThread : Ptr32
+0x234 KeyedWaitSemaphore : _KSEMAPHORE
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 Limit : Int4B
+0x234 AlpcWaitSemaphore : _KSEMAPHORE
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 Limit : Int4B
+0x248 ClientSecurity : _PS_CLIENT_SECURITY_CONTEXT
+0x000 ImpersonationData : Uint4B
+0x000 ImpersonationToken : Ptr32
+0x000 ImpersonationLevel : Pos 0, 2 Bits
+0x000 EffectiveOnly : Pos 2, 1 Bit
+0x24c IrpList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x254 TopLevelIrp : Uint4B
+0x258 DeviceToVerify : Ptr32
+0x25c CpuQuotaApc : Ptr32
+0x260 Win32StartAddress : Ptr32
+0x264 LegacyPowerObject : Ptr32
+0x268 ThreadListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x270 RundownProtect : _EX_RUNDOWN_REF
+0x000 Count : Uint4B
+0x000 Ptr : Ptr32
+0x274 ThreadLock : _EX_PUSH_LOCK
+0x000 Locked : Pos 0, 1 Bit
+0x000 Waiting : Pos 1, 1 Bit
+0x000 Waking : Pos 2, 1 Bit
+0x000 MultipleShared : Pos 3, 1 Bit
+0x000 Shared : Pos 4, 28 Bits
+0x000 Value : Uint4B
+0x000 Ptr : Ptr32
+0x278 ReadClusterSize : Uint4B
+0x27c MmLockOrdering : Int4B
+0x280 CrossThreadFlags : Uint4B
+0x280 Terminated : Pos 0, 1 Bit
+0x280 ThreadInserted : Pos 1, 1 Bit
+0x280 HideFromDebugger : Pos 2, 1 Bit
+0x280 ActiveImpersonationInfo : Pos 3, 1 Bit
+0x280 SystemThread : Pos 4, 1 Bit
+0x280 HardErrorsAreDisabled : Pos 5, 1 Bit
+0x280 BreakOnTermination : Pos 6, 1 Bit
+0x280 SkipCreationMsg : Pos 7, 1 Bit
+0x280 SkipTerminationMsg : Pos 8, 1 Bit
+0x280 CopyTokenOnOpen : Pos 9, 1 Bit
+0x280 ThreadIoPriority : Pos 10, 3 Bits
+0x280 ThreadPagePriority : Pos 13, 3 Bits
+0x280 RundownFail : Pos 16, 1 Bit
+0x280 NeedsWorkingSetAging : Pos 17, 1 Bit
+0x284 SameThreadPassiveFlags : Uint4B
+0x284 ActiveExWorker : Pos 0, 1 Bit
+0x284 ExWorkerCanWaitUser : Pos 1, 1 Bit
+0x284 MemoryMaker : Pos 2, 1 Bit
+0x284 ClonedThread : Pos 3, 1 Bit
+0x284 KeyedEventInUse : Pos 4, 1 Bit
+0x284 RateApcState : Pos 5, 2 Bits
+0x284 SelfTerminate : Pos 7, 1 Bit
+0x288 SameThreadApcFlags : Uint4B
+0x288 Spare : Pos 0, 1 Bit
+0x288 StartAddressInvalid : Pos 1, 1 Bit
+0x288 EtwPageFaultCalloutActive : Pos 2, 1 Bit
+0x288 OwnsProcessWorkingSetExclusive : Pos 3, 1 Bit
+0x288 OwnsProcessWorkingSetShared : Pos 4, 1 Bit
+0x288 OwnsSystemCacheWorkingSetExclusive : Pos 5, 1 Bit
+0x288 OwnsSystemCacheWorkingSetShared : Pos 6, 1 Bit
+0x288 OwnsSessionWorkingSetExclusive : Pos 7, 1 Bit
+0x289 OwnsSessionWorkingSetShared : Pos 0, 1 Bit
+0x289 OwnsProcessAddressSpaceExclusive : Pos 1, 1 Bit
+0x289 OwnsProcessAddressSpaceShared : Pos 2, 1 Bit
+0x289 SuppressSymbolLoad : Pos 3, 1 Bit
+0x289 Prefetching : Pos 4, 1 Bit
+0x289 OwnsDynamicMemoryShared : Pos 5, 1 Bit
+0x289 OwnsChangeControlAreaExclusive : Pos 6, 1 Bit
+0x289 OwnsChangeControlAreaShared : Pos 7, 1 Bit
+0x28a OwnsPagedPoolWorkingSetExclusive : Pos 0, 1 Bit
+0x28a OwnsPagedPoolWorkingSetShared : Pos 1, 1 Bit
+0x28a OwnsSystemPtesWorkingSetExclusive : Pos 2, 1 Bit
+0x28a OwnsSystemPtesWorkingSetShared : Pos 3, 1 Bit
+0x28a TrimTrigger : Pos 4, 2 Bits
+0x28a Spare1 : Pos 6, 2 Bits
+0x28b PriorityRegionActive : UChar
+0x28c CacheManagerActive : UChar
+0x28d DisablePageFaultClustering : UChar
+0x28e ActiveFaultCount : UChar
+0x28f LockOrderState : UChar
+0x290 AlpcMessageId : Uint4B
+0x294 AlpcMessage : Ptr32
+0x294 AlpcReceiveAttributeSet : Uint4B
+0x298 AlpcWaitListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x2a0 CacheManagerCount : Uint4B
+0x2a4 IoBoostCount : Uint4B
+0x2a8 IrpListLock : Uint4B
+0x2ac ReservedForSynchTracking : Ptr32
+0x2b0 CmCallbackListHead : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x000 Ptr : Uint8B +0x008 Size : Uint4B +0x00c Reserved : Uint4B
+0x000 Id : Uint2B +0x002 Version : UChar +0x003 Channel : UChar +0x004 Level : UChar +0x005 Opcode : UChar +0x006 Task : Uint2B +0x008 Keyword : Uint8B
+0x000 Id : Uint2B +0x002 Version : UChar +0x003 Channel : UChar +0x004 Level : UChar +0x005 Opcode : UChar +0x006 Task : Uint2B +0x008 Keyword : Uint8B
ExceptionContinueExecution = 0n0 ExceptionContinueSearch = 0n1 ExceptionNestedException = 0n2 ExceptionCollidedUnwind = 0n3
+0x000 ExceptionCode : Int4B +0x004 ExceptionFlags : Uint4B +0x008 ExceptionRecord : Ptr32 +0x00c ExceptionAddress : Ptr32 +0x010 NumberParameters : Uint4B +0x014 ExceptionInformation : Uint4B
+0x000 Object : Ptr32 +0x000 RefCnt : Pos 0, 3 Bits +0x000 Value : Uint4B
+0x000 Locked : Pos 0, 1 Bit +0x000 Waiting : Pos 1, 1 Bit +0x000 Waking : Pos 2, 1 Bit +0x000 MultipleShared : Pos 3, 1 Bit +0x000 Shared : Pos 4, 28 Bits +0x000 Value : Uint4B +0x000 Ptr : Ptr32
+0x000 WakeEvent : _KEVENT
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 Next : Ptr32
+0x014 Last : Ptr32
+0x018 Previous : Ptr32
+0x01c ShareCount : Int4B
+0x020 Flags : Int4B
+0x000 SizeOfFastIoDispatch : Uint4B +0x004 FastIoCheckIfPossible : Ptr32 +0x008 FastIoRead : Ptr32 +0x00c FastIoWrite : Ptr32 +0x010 FastIoQueryBasicInfo : Ptr32 +0x014 FastIoQueryStandardInfo : Ptr32 +0x018 FastIoLock : Ptr32 +0x01c FastIoUnlockSingle : Ptr32 +0x020 FastIoUnlockAll : Ptr32 +0x024 FastIoUnlockAllByKey : Ptr32 +0x028 FastIoDeviceControl : Ptr32 +0x02c AcquireFileForNtCreateSection : Ptr32 +0x030 ReleaseFileForNtCreateSection : Ptr32 +0x034 FastIoDetachDevice : Ptr32 +0x038 FastIoQueryNetworkOpenInfo : Ptr32 +0x03c AcquireForModWrite : Ptr32 +0x040 MdlRead : Ptr32 +0x044 MdlReadComplete : Ptr32 +0x048 PrepareMdlWrite : Ptr32 +0x04c MdlWriteComplete : Ptr32 +0x050 FastIoReadCompressed : Ptr32 +0x054 FastIoWriteCompressed : Ptr32 +0x058 MdlReadCompleteCompressed : Ptr32 +0x05c MdlWriteCompleteCompressed : Ptr32 +0x060 FastIoQueryOpen : Ptr32 +0x064 ReleaseForModWrite : Ptr32 +0x068 AcquireForCcFlush : Ptr32 +0x06c ReleaseForCcFlush : Ptr32
+0x000 Count : Int4B
+0x004 Owner : Ptr32
+0x008 Contention : Uint4B
+0x00c Event : _KEVENT
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x01c OldIrql : Uint4B
+0x000 CreationTime : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 LastAccessTime : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x010 LastWriteTime : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x018 ChangeTime : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x020 FileAttributes : Uint4B
+0x000 NextEntryOffset : Uint4B
+0x004 SidLength : Uint4B
+0x008 Sid : _SID
+0x000 Revision : UChar
+0x001 SubAuthorityCount : UChar
+0x002 IdentifierAuthority : _SID_IDENTIFIER_AUTHORITY
+0x000 Value : UChar
+0x008 SubAuthority : Uint4B
FileDirectoryInformation = 0n1 FileFullDirectoryInformation = 0n2 FileBothDirectoryInformation = 0n3 FileBasicInformation = 0n4 FileStandardInformation = 0n5 FileInternalInformation = 0n6 FileEaInformation = 0n7 FileAccessInformation = 0n8 FileNameInformation = 0n9 FileRenameInformation = 0n10 FileLinkInformation = 0n11 FileNamesInformation = 0n12 FileDispositionInformation = 0n13 FilePositionInformation = 0n14 FileFullEaInformation = 0n15 FileModeInformation = 0n16 FileAlignmentInformation = 0n17 FileAllInformation = 0n18 FileAllocationInformation = 0n19 FileEndOfFileInformation = 0n20 FileAlternateNameInformation = 0n21 FileStreamInformation = 0n22 FilePipeInformation = 0n23 FilePipeLocalInformation = 0n24 FilePipeRemoteInformation = 0n25 FileMailslotQueryInformation = 0n26 FileMailslotSetInformation = 0n27 FileCompressionInformation = 0n28 FileObjectIdInformation = 0n29 FileCompletionInformation = 0n30 FileMoveClusterInformation = 0n31 FileQuotaInformation = 0n32 FileReparsePointInformation = 0n33 FileNetworkOpenInformation = 0n34 FileAttributeTagInformation = 0n35 FileTrackingInformation = 0n36 FileIdBothDirectoryInformation = 0n37 FileIdFullDirectoryInformation = 0n38 FileValidDataLengthInformation = 0n39 FileShortNameInformation = 0n40 FileIoCompletionNotificationInformation = 0n41 FileIoStatusBlockRangeInformation = 0n42 FileIoPriorityHintInformation = 0n43 FileSfioReserveInformation = 0n44 FileSfioVolumeInformation = 0n45 FileHardLinkInformation = 0n46 FileProcessIdsUsingFileInformation = 0n47 FileNormalizedNameInformation = 0n48 FileNetworkPhysicalNameInformation = 0n49 FileIdGlobalTxDirectoryInformation = 0n50 FileIsRemoteDeviceInformation = 0n51 FileAttributeCacheInformation = 0n52 FileNumaNodeInformation = 0n53 FileStandardLinkInformation = 0n54 FileRemoteProtocolInformation = 0n55 FileMaximumInformation = 0n56
+0x000 CreationTime : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 LastAccessTime : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x010 LastWriteTime : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x018 ChangeTime : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x020 AllocationSize : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x028 EndOfFile : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x030 FileAttributes : Uint4B
+0x000 Type : Int2B
+0x002 Size : Int2B
+0x004 DeviceObject : Ptr32
+0x008 Vpb : Ptr32
+0x00c FsContext : Ptr32
+0x010 FsContext2 : Ptr32
+0x014 SectionObjectPointer : Ptr32
+0x018 PrivateCacheMap : Ptr32
+0x01c FinalStatus : Int4B
+0x020 RelatedFileObject : Ptr32
+0x024 LockOperation : UChar
+0x025 DeletePending : UChar
+0x026 ReadAccess : UChar
+0x027 WriteAccess : UChar
+0x028 DeleteAccess : UChar
+0x029 SharedRead : UChar
+0x02a SharedWrite : UChar
+0x02b SharedDelete : UChar
+0x02c Flags : Uint4B
+0x030 FileName : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x038 CurrentByteOffset : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x040 Waiters : Uint4B
+0x044 Busy : Uint4B
+0x048 LastLock : Ptr32
+0x04c Lock : _KEVENT
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x05c Event : _KEVENT
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x06c CompletionContext : Ptr32
+0x070 IrpListLock : Uint4B
+0x074 IrpList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x07c FileObjectExtension : Ptr32
+0x000 AllocationSize : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x008 EndOfFile : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x010 NumberOfLinks : Uint4B
+0x014 DeletePending : UChar
+0x015 Directory : UChar
+0x000 ControlWord : Uint4B +0x004 StatusWord : Uint4B +0x008 TagWord : Uint4B +0x00c ErrorOffset : Uint4B +0x010 ErrorSelector : Uint4B +0x014 DataOffset : Uint4B +0x018 DataSelector : Uint4B +0x01c RegisterArea : UChar +0x06c Cr0NpxState : Uint4B
FileFsVolumeInformation = 0n1 FileFsLabelInformation = 0n2 FileFsSizeInformation = 0n3 FileFsDeviceInformation = 0n4 FileFsAttributeInformation = 0n5 FileFsControlInformation = 0n6 FileFsFullSizeInformation = 0n7 FileFsObjectIdInformation = 0n8 FileFsDriverPathInformation = 0n9 FileFsVolumeFlagsInformation = 0n10 FileFsMaximumInformation = 0n11
+0x000 SizeOfFsFilterCallbacks : Uint4B +0x004 Reserved : Uint4B +0x008 PreAcquireForSectionSynchronization : Ptr32 +0x00c PostAcquireForSectionSynchronization : Ptr32 +0x010 PreReleaseForSectionSynchronization : Ptr32 +0x014 PostReleaseForSectionSynchronization : Ptr32 +0x018 PreAcquireForCcFlush : Ptr32 +0x01c PostAcquireForCcFlush : Ptr32 +0x020 PreReleaseForCcFlush : Ptr32 +0x024 PostReleaseForCcFlush : Ptr32 +0x028 PreAcquireForModifiedPageWriter : Ptr32 +0x02c PostAcquireForModifiedPageWriter : Ptr32 +0x030 PreReleaseForModifiedPageWriter : Ptr32 +0x034 PostReleaseForModifiedPageWriter : Ptr32
+0x000 SizeOfFsFilterCallbackData : Uint4B
+0x004 Operation : UChar
+0x005 Reserved : UChar
+0x008 DeviceObject : Ptr32
+0x00c FileObject : Ptr32
+0x010 Parameters : _FS_FILTER_PARAMETERS
+0x000 AcquireForModifiedPageWriter : <unnamed-tag>
+0x000 EndingOffset : Ptr32
+0x004 ResourceToRelease : Ptr32
+0x000 ReleaseForModifiedPageWriter : <unnamed-tag>
+0x000 ResourceToRelease : Ptr32
+0x000 AcquireForSectionSynchronization : <unnamed-tag>
+0x000 SyncType :
SyncTypeOther = 0n0
SyncTypeCreateSection = 0n1
+0x004 PageProtection : Uint4B
+0x000 NotifyStreamFileObject : <unnamed-tag>
+0x000 NotificationType :
NotifyTypeCreate = 0n0
NotifyTypeRetired = 0n1
+0x004 SafeToRecurse : UChar
+0x000 Others : <unnamed-tag>
+0x000 Argument1 : Ptr32
+0x004 Argument2 : Ptr32
+0x008 Argument3 : Ptr32
+0x00c Argument4 : Ptr32
+0x010 Argument5 : Ptr32
+0x000 AcquireForModifiedPageWriter : <unnamed-tag>
+0x000 EndingOffset : Ptr32
+0x004 ResourceToRelease : Ptr32
+0x000 ReleaseForModifiedPageWriter : <unnamed-tag>
+0x000 ResourceToRelease : Ptr32
+0x000 AcquireForSectionSynchronization : <unnamed-tag>
+0x000 SyncType :
SyncTypeOther = 0n0
SyncTypeCreateSection = 0n1
+0x004 PageProtection : Uint4B
+0x000 NotifyStreamFileObject : <unnamed-tag>
+0x000 NotificationType :
NotifyTypeCreate = 0n0
NotifyTypeRetired = 0n1
+0x004 SafeToRecurse : UChar
+0x000 Others : <unnamed-tag>
+0x000 Argument1 : Ptr32
+0x004 Argument2 : Ptr32
+0x008 Argument3 : Ptr32
+0x00c Argument4 : Ptr32
+0x010 Argument5 : Ptr32
NotifyTypeCreate = 0n0 NotifyTypeRetired = 0n1
+0x000 Offset : Uint4B +0x004 HDC : Uint4B +0x008 Buffer : Uint4B
+0x000 ListHead : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x000 SingleListHead : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x008 Depth : Uint2B
+0x00a MaximumDepth : Uint2B
+0x00c TotalAllocates : Uint4B
+0x010 AllocateMisses : Uint4B
+0x010 AllocateHits : Uint4B
+0x014 TotalFrees : Uint4B
+0x018 FreeMisses : Uint4B
+0x018 FreeHits : Uint4B
+0x01c Type :
NonPagedPool = 0n0
PagedPool = 0n1
NonPagedPoolMustSucceed = 0n2
DontUseThisType = 0n3
NonPagedPoolCacheAligned = 0n4
PagedPoolCacheAligned = 0n5
NonPagedPoolCacheAlignedMustS = 0n6
MaxPoolType = 0n7
NonPagedPoolSession = 0n32
PagedPoolSession = 0n33
NonPagedPoolMustSucceedSession = 0n34
DontUseThisTypeSession = 0n35
NonPagedPoolCacheAlignedSession = 0n36
PagedPoolCacheAlignedSession = 0n37
NonPagedPoolCacheAlignedMustSSession = 0n38
+0x020 Tag : Uint4B
+0x024 Size : Uint4B
+0x028 AllocateEx : Ptr32
+0x028 Allocate : Ptr32
+0x02c FreeEx : Ptr32
+0x02c Free : Ptr32
+0x030 ListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x038 LastTotalAllocates : Uint4B
+0x03c LastAllocateMisses : Uint4B
+0x03c LastAllocateHits : Uint4B
+0x040 Future : Uint4B
+0x000 ListHead : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x000 SingleListHead : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x008 Depth : Uint2B
+0x00a MaximumDepth : Uint2B
+0x00c TotalAllocates : Uint4B
+0x010 AllocateMisses : Uint4B
+0x010 AllocateHits : Uint4B
+0x014 TotalFrees : Uint4B
+0x018 FreeMisses : Uint4B
+0x018 FreeHits : Uint4B
+0x01c Type :
NonPagedPool = 0n0
PagedPool = 0n1
NonPagedPoolMustSucceed = 0n2
DontUseThisType = 0n3
NonPagedPoolCacheAligned = 0n4
PagedPoolCacheAligned = 0n5
NonPagedPoolCacheAlignedMustS = 0n6
MaxPoolType = 0n7
NonPagedPoolSession = 0n32
PagedPoolSession = 0n33
NonPagedPoolMustSucceedSession = 0n34
DontUseThisTypeSession = 0n35
NonPagedPoolCacheAlignedSession = 0n36
PagedPoolCacheAlignedSession = 0n37
NonPagedPoolCacheAlignedMustSSession = 0n38
+0x020 Tag : Uint4B
+0x024 Size : Uint4B
+0x028 AllocateEx : Ptr32
+0x028 Allocate : Ptr32
+0x02c FreeEx : Ptr32
+0x02c Free : Ptr32
+0x030 ListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x038 LastTotalAllocates : Uint4B
+0x03c LastAllocateMisses : Uint4B
+0x03c LastAllocateHits : Uint4B
+0x040 Future : Uint4B
+0x000 GenericRead : Uint4B +0x004 GenericWrite : Uint4B +0x008 GenericExecute : Uint4B +0x00c GenericAll : Uint4B
+0x000 Mask : Uint4B +0x004 Group : Uint2B +0x006 Reserved : Uint2B
+0x000 Mask : Uint4B +0x004 Group : Uint2B +0x006 Reserved : Uint2B
+0x000 Data1 : Uint4B +0x004 Data2 : Uint2B +0x006 Data3 : Uint2B +0x008 Data4 : UChar
+0x000 Data1 : Uint4B +0x004 Data2 : Uint2B +0x006 Data3 : Uint2B +0x008 Data4 : UChar
+0x000 TableCode : Uint4B
+0x004 QuotaProcess : Ptr32
+0x008 UniqueProcessId : Ptr32
+0x00c HandleLock : _EX_PUSH_LOCK
+0x000 Locked : Pos 0, 1 Bit
+0x000 Waiting : Pos 1, 1 Bit
+0x000 Waking : Pos 2, 1 Bit
+0x000 MultipleShared : Pos 3, 1 Bit
+0x000 Shared : Pos 4, 28 Bits
+0x000 Value : Uint4B
+0x000 Ptr : Ptr32
+0x010 HandleTableList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x018 HandleContentionEvent : _EX_PUSH_LOCK
+0x000 Locked : Pos 0, 1 Bit
+0x000 Waiting : Pos 1, 1 Bit
+0x000 Waking : Pos 2, 1 Bit
+0x000 MultipleShared : Pos 3, 1 Bit
+0x000 Shared : Pos 4, 28 Bits
+0x000 Value : Uint4B
+0x000 Ptr : Ptr32
+0x01c DebugInfo : Ptr32
+0x020 ExtraInfoPages : Int4B
+0x024 Flags : Uint4B
+0x024 StrictFIFO : Pos 0, 1 Bit
+0x028 FirstFreeHandle : Uint4B
+0x02c LastFreeHandleEntry : Ptr32
+0x030 HandleCount : Uint4B
+0x034 NextHandleNeedingPool : Uint4B
+0x038 HandleCountHighWatermark : Uint4B
+0x000 Object : Ptr32 +0x000 ObAttributes : Uint4B +0x000 InfoTable : Ptr32 +0x000 Value : Uint4B +0x004 GrantedAccess : Uint4B +0x004 GrantedAccessIndex : Uint2B +0x006 CreatorBackTraceIndex : Uint2B +0x004 NextFreeTableEntry : Uint4B
+0x000 ClientId : _CLIENT_ID
+0x000 UniqueProcess : Ptr32
+0x004 UniqueThread : Ptr32
+0x008 Handle : Ptr32
+0x00c Type : Uint4B
+0x010 StackTrace : Ptr32
+0x000 RefCount : Int4B
+0x004 TableSize : Uint4B
+0x008 BitMaskFlags : Uint4B
+0x00c CloseCompactionLock : _FAST_MUTEX
+0x000 Count : Int4B
+0x004 Owner : Ptr32
+0x008 Contention : Uint4B
+0x00c Event : _KEVENT
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x01c OldIrql : Uint4B
+0x02c CurrentStackIndex : Uint4B
+0x030 TraceDb : _HANDLE_TRACE_DB_ENTRY
+0x000 ClientId : _CLIENT_ID
+0x000 UniqueProcess : Ptr32
+0x004 UniqueThread : Ptr32
+0x008 Handle : Ptr32
+0x00c Type : Uint4B
+0x010 StackTrace : Ptr32
+0x000 Valid : Pos 0, 1 Bit +0x000 Write : Pos 1, 1 Bit +0x000 Owner : Pos 2, 1 Bit +0x000 WriteThrough : Pos 3, 1 Bit +0x000 CacheDisable : Pos 4, 1 Bit +0x000 Accessed : Pos 5, 1 Bit +0x000 Dirty : Pos 6, 1 Bit +0x000 LargePage : Pos 7, 1 Bit +0x000 Global : Pos 8, 1 Bit +0x000 CopyOnWrite : Pos 9, 1 Bit +0x000 Prototype : Pos 10, 1 Bit +0x000 reserved : Pos 11, 1 Bit +0x000 PageFrameNumber : Pos 12, 20 Bits
+0x000 Entry : _HEAP_ENTRY
+0x000 Size : Uint2B
+0x002 Flags : UChar
+0x003 SmallTagIndex : UChar
+0x000 SubSegmentCode : Ptr32
+0x004 PreviousSize : Uint2B
+0x006 SegmentOffset : UChar
+0x006 LFHFlags : UChar
+0x007 UnusedBytes : UChar
+0x000 FunctionIndex : Uint2B
+0x002 ContextValue : Uint2B
+0x000 InterceptorValue : Uint4B
+0x004 UnusedBytesLength : Uint2B
+0x006 EntryOffset : UChar
+0x007 ExtendedBlockSignature : UChar
+0x000 Code1 : Uint4B
+0x004 Code2 : Uint2B
+0x006 Code3 : UChar
+0x007 Code4 : UChar
+0x000 AgregateCode : Uint8B
+0x008 SegmentSignature : Uint4B
+0x00c SegmentFlags : Uint4B
+0x010 SegmentListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x018 Heap : Ptr32
+0x01c BaseAddress : Ptr32
+0x020 NumberOfPages : Uint4B
+0x024 FirstEntry : Ptr32
+0x028 LastValidEntry : Ptr32
+0x02c NumberOfUnCommittedPages : Uint4B
+0x030 NumberOfUnCommittedRanges : Uint4B
+0x034 SegmentAllocatorBackTraceIndex : Uint2B
+0x036 Reserved : Uint2B
+0x038 UCRSegmentList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x040 Flags : Uint4B
+0x044 ForceFlags : Uint4B
+0x048 CompatibilityFlags : Uint4B
+0x04c EncodeFlagMask : Uint4B
+0x050 Encoding : _HEAP_ENTRY
+0x000 Size : Uint2B
+0x002 Flags : UChar
+0x003 SmallTagIndex : UChar
+0x000 SubSegmentCode : Ptr32
+0x004 PreviousSize : Uint2B
+0x006 SegmentOffset : UChar
+0x006 LFHFlags : UChar
+0x007 UnusedBytes : UChar
+0x000 FunctionIndex : Uint2B
+0x002 ContextValue : Uint2B
+0x000 InterceptorValue : Uint4B
+0x004 UnusedBytesLength : Uint2B
+0x006 EntryOffset : UChar
+0x007 ExtendedBlockSignature : UChar
+0x000 Code1 : Uint4B
+0x004 Code2 : Uint2B
+0x006 Code3 : UChar
+0x007 Code4 : UChar
+0x000 AgregateCode : Uint8B
+0x058 PointerKey : Uint4B
+0x05c Interceptor : Uint4B
+0x060 VirtualMemoryThreshold : Uint4B
+0x064 Signature : Uint4B
+0x068 SegmentReserve : Uint4B
+0x06c SegmentCommit : Uint4B
+0x070 DeCommitFreeBlockThreshold : Uint4B
+0x074 DeCommitTotalFreeThreshold : Uint4B
+0x078 TotalFreeSize : Uint4B
+0x07c MaximumAllocationSize : Uint4B
+0x080 ProcessHeapsListIndex : Uint2B
+0x082 HeaderValidateLength : Uint2B
+0x084 HeaderValidateCopy : Ptr32
+0x088 NextAvailableTagIndex : Uint2B
+0x08a MaximumTagIndex : Uint2B
+0x08c TagEntries : Ptr32
+0x090 UCRList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x098 AlignRound : Uint4B
+0x09c AlignMask : Uint4B
+0x0a0 VirtualAllocdBlocks : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x0a8 SegmentList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x0b0 AllocatorBackTraceIndex : Uint2B
+0x0b4 NonDedicatedListLength : Uint4B
+0x0b8 BlocksIndex : Ptr32
+0x0bc UCRIndex : Ptr32
+0x0c0 PseudoTagEntries : Ptr32
+0x0c4 FreeLists : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x0cc LockVariable : Ptr32
+0x0d0 CommitRoutine : Ptr32
+0x0d4 FrontEndHeap : Ptr32
+0x0d8 FrontHeapLockCount : Uint2B
+0x0da FrontEndHeapType : UChar
+0x0dc Counters : _HEAP_COUNTERS
+0x000 TotalMemoryReserved : Uint4B
+0x004 TotalMemoryCommitted : Uint4B
+0x008 TotalMemoryLargeUCR : Uint4B
+0x00c TotalSizeInVirtualBlocks : Uint4B
+0x010 TotalSegments : Uint4B
+0x014 TotalUCRs : Uint4B
+0x018 CommittOps : Uint4B
+0x01c DeCommitOps : Uint4B
+0x020 LockAcquires : Uint4B
+0x024 LockCollisions : Uint4B
+0x028 CommitRate : Uint4B
+0x02c DecommittRate : Uint4B
+0x030 CommitFailures : Uint4B
+0x034 InBlockCommitFailures : Uint4B
+0x038 CompactHeapCalls : Uint4B
+0x03c CompactedUCRs : Uint4B
+0x040 AllocAndFreeOps : Uint4B
+0x044 InBlockDeccommits : Uint4B
+0x048 InBlockDeccomitSize : Uint4B
+0x04c HighWatermarkSize : Uint4B
+0x050 LastPolledSize : Uint4B
+0x130 TuningParameters : _HEAP_TUNING_PARAMETERS
+0x000 CommittThresholdShift : Uint4B
+0x004 MaxPreCommittThreshold : Uint4B
+0x000 BlockUnits : Uint2B +0x002 SizeIndex : UChar +0x003 UseAffinity : Pos 0, 1 Bit +0x003 DebugFlags : Pos 1, 2 Bits
+0x000 BlockUnits : Uint2B +0x002 SizeIndex : UChar +0x003 UseAffinity : Pos 0, 1 Bit +0x003 DebugFlags : Pos 1, 2 Bits
+0x000 TotalBlocks : Uint4B +0x004 SubSegmentCounts : Uint4B +0x000 Aggregate64 : Int8B
+0x000 Bucket : Uint4B +0x004 RunLength : Uint4B +0x000 Aggregate64 : Int8B
+0x000 TotalMemoryReserved : Uint4B +0x004 TotalMemoryCommitted : Uint4B +0x008 TotalMemoryLargeUCR : Uint4B +0x00c TotalSizeInVirtualBlocks : Uint4B +0x010 TotalSegments : Uint4B +0x014 TotalUCRs : Uint4B +0x018 CommittOps : Uint4B +0x01c DeCommitOps : Uint4B +0x020 LockAcquires : Uint4B +0x024 LockCollisions : Uint4B +0x028 CommitRate : Uint4B +0x02c DecommittRate : Uint4B +0x030 CommitFailures : Uint4B +0x034 InBlockCommitFailures : Uint4B +0x038 CompactHeapCalls : Uint4B +0x03c CompactedUCRs : Uint4B +0x040 AllocAndFreeOps : Uint4B +0x044 InBlockDeccommits : Uint4B +0x048 InBlockDeccomitSize : Uint4B +0x04c HighWatermarkSize : Uint4B +0x050 LastPolledSize : Uint4B
+0x000 InterceptorFunction : Ptr32 +0x004 InterceptorValue : Uint2B +0x008 ExtendedOptions : Uint4B +0x00c StackTraceDepth : Uint4B +0x010 MinTotalBlockSize : Uint4B +0x014 MaxTotalBlockSize : Uint4B +0x018 HeapLeakEnumerationRoutine : Ptr32
+0x000 Size : Uint2B +0x002 Flags : UChar +0x003 SmallTagIndex : UChar +0x000 SubSegmentCode : Ptr32 +0x004 PreviousSize : Uint2B +0x006 SegmentOffset : UChar +0x006 LFHFlags : UChar +0x007 UnusedBytes : UChar +0x000 FunctionIndex : Uint2B +0x002 ContextValue : Uint2B +0x000 InterceptorValue : Uint4B +0x004 UnusedBytesLength : Uint2B +0x006 EntryOffset : UChar +0x007 ExtendedBlockSignature : UChar +0x000 Code1 : Uint4B +0x004 Code2 : Uint2B +0x006 Code3 : UChar +0x007 Code4 : UChar +0x000 AgregateCode : Uint8B
+0x000 AllocatorBackTraceIndex : Uint2B +0x002 TagIndex : Uint2B +0x004 Settable : Uint4B +0x000 ZeroInit : Uint8B
+0x000 Version : Uint4B
+0x004 StructureSize : Uint4B
+0x008 FailureType :
heap_failure_internal = 0n0
heap_failure_unknown = 0n1
heap_failure_generic = 0n2
heap_failure_entry_corruption = 0n3
heap_failure_multiple_entries_corruption = 0n4
heap_failure_virtual_block_corruption = 0n5
heap_failure_buffer_overrun = 0n6
heap_failure_buffer_underrun = 0n7
heap_failure_block_not_busy = 0n8
heap_failure_invalid_argument = 0n9
heap_failure_usage_after_free = 0n10
heap_failure_cross_heap_operation = 0n11
heap_failure_freelists_corruption = 0n12
heap_failure_listentry_corruption = 0n13
+0x00c HeapAddress : Ptr32
+0x010 Address : Ptr32
+0x014 Param1 : Ptr32
+0x018 Param2 : Ptr32
+0x01c Param3 : Ptr32
+0x020 PreviousBlock : Ptr32
+0x024 NextBlock : Ptr32
+0x028 ExpectedEncodedEntry : _HEAP_ENTRY
+0x000 Size : Uint2B
+0x002 Flags : UChar
+0x003 SmallTagIndex : UChar
+0x000 SubSegmentCode : Ptr32
+0x004 PreviousSize : Uint2B
+0x006 SegmentOffset : UChar
+0x006 LFHFlags : UChar
+0x007 UnusedBytes : UChar
+0x000 FunctionIndex : Uint2B
+0x002 ContextValue : Uint2B
+0x000 InterceptorValue : Uint4B
+0x004 UnusedBytesLength : Uint2B
+0x006 EntryOffset : UChar
+0x007 ExtendedBlockSignature : UChar
+0x000 Code1 : Uint4B
+0x004 Code2 : Uint2B
+0x006 Code3 : UChar
+0x007 Code4 : UChar
+0x000 AgregateCode : Uint8B
+0x030 ExpectedDecodedEntry : _HEAP_ENTRY
+0x000 Size : Uint2B
+0x002 Flags : UChar
+0x003 SmallTagIndex : UChar
+0x000 SubSegmentCode : Ptr32
+0x004 PreviousSize : Uint2B
+0x006 SegmentOffset : UChar
+0x006 LFHFlags : UChar
+0x007 UnusedBytes : UChar
+0x000 FunctionIndex : Uint2B
+0x002 ContextValue : Uint2B
+0x000 InterceptorValue : Uint4B
+0x004 UnusedBytesLength : Uint2B
+0x006 EntryOffset : UChar
+0x007 ExtendedBlockSignature : UChar
+0x000 Code1 : Uint4B
+0x004 Code2 : Uint2B
+0x006 Code3 : UChar
+0x007 Code4 : UChar
+0x000 AgregateCode : Uint8B
+0x038 StackTrace : Ptr32
heap_failure_internal = 0n0 heap_failure_unknown = 0n1 heap_failure_generic = 0n2 heap_failure_entry_corruption = 0n3 heap_failure_multiple_entries_corruption = 0n4 heap_failure_virtual_block_corruption = 0n5 heap_failure_buffer_overrun = 0n6 heap_failure_buffer_underrun = 0n7 heap_failure_block_not_busy = 0n8 heap_failure_invalid_argument = 0n9 heap_failure_usage_after_free = 0n10 heap_failure_cross_heap_operation = 0n11 heap_failure_freelists_corruption = 0n12 heap_failure_listentry_corruption = 0n13
+0x000 Size : Uint2B
+0x002 Flags : UChar
+0x003 SmallTagIndex : UChar
+0x000 SubSegmentCode : Ptr32
+0x004 PreviousSize : Uint2B
+0x006 SegmentOffset : UChar
+0x006 LFHFlags : UChar
+0x007 UnusedBytes : UChar
+0x000 FunctionIndex : Uint2B
+0x002 ContextValue : Uint2B
+0x000 InterceptorValue : Uint4B
+0x004 UnusedBytesLength : Uint2B
+0x006 EntryOffset : UChar
+0x007 ExtendedBlockSignature : UChar
+0x000 Code1 : Uint4B
+0x004 Code2 : Uint2B
+0x006 Code3 : UChar
+0x007 Code4 : UChar
+0x000 AgregateCode : Uint8B
+0x008 FreeList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x000 ExtendedLookup : Ptr32 +0x004 ArraySize : Uint4B +0x008 ExtraItem : Uint4B +0x00c ItemCount : Uint4B +0x010 OutOfRangeItems : Uint4B +0x014 BaseIndex : Uint4B +0x018 ListHead : Ptr32 +0x01c ListsInUseUlong : Ptr32 +0x020 ListHints : Ptr32
+0x000 DeletedSubSegments : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x008 CrtZone : Ptr32
+0x00c LowFragHeap : Ptr32
+0x010 Sequence : Uint4B
+0x018 SegmentInfo : _HEAP_LOCAL_SEGMENT_INFO
+0x000 Hint : Ptr32
+0x004 ActiveSubsegment : Ptr32
+0x008 CachedItems : Ptr32
+0x048 SListHeader : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x050 Counters : _HEAP_BUCKET_COUNTERS
+0x000 TotalBlocks : Uint4B
+0x004 SubSegmentCounts : Uint4B
+0x000 Aggregate64 : Int8B
+0x058 LocalData : Ptr32
+0x05c LastOpSequence : Uint4B
+0x060 BucketIndex : Uint2B
+0x062 LastUsed : Uint2B
+0x000 DeletedSubSegments : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x008 CrtZone : Ptr32
+0x00c LowFragHeap : Ptr32
+0x010 Sequence : Uint4B
+0x018 SegmentInfo : _HEAP_LOCAL_SEGMENT_INFO
+0x000 Hint : Ptr32
+0x004 ActiveSubsegment : Ptr32
+0x008 CachedItems : Ptr32
+0x048 SListHeader : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x050 Counters : _HEAP_BUCKET_COUNTERS
+0x000 TotalBlocks : Uint4B
+0x004 SubSegmentCounts : Uint4B
+0x000 Aggregate64 : Int8B
+0x058 LocalData : Ptr32
+0x05c LastOpSequence : Uint4B
+0x060 BucketIndex : Uint2B
+0x062 LastUsed : Uint2B
+0x000 Hint : Ptr32
+0x004 ActiveSubsegment : Ptr32
+0x008 CachedItems : Ptr32
+0x048 SListHeader : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x050 Counters : _HEAP_BUCKET_COUNTERS
+0x000 TotalBlocks : Uint4B
+0x004 SubSegmentCounts : Uint4B
+0x000 Aggregate64 : Int8B
+0x058 LocalData : Ptr32
+0x05c LastOpSequence : Uint4B
+0x060 BucketIndex : Uint2B
+0x062 LastUsed : Uint2B
+0x000 Lock : <unnamed-tag>
+0x000 CriticalSection : _RTL_CRITICAL_SECTION
+0x000 DebugInfo : Ptr32
+0x004 LockCount : Int4B
+0x008 RecursionCount : Int4B
+0x00c OwningThread : Ptr32
+0x010 LockSemaphore : Ptr32
+0x014 SpinCount : Uint4B
+0x000 Allocs : Uint4B +0x004 Frees : Uint4B +0x008 Size : Uint4B
+0x000 Entry : _HEAP_ENTRY
+0x000 Size : Uint2B
+0x002 Flags : UChar
+0x003 SmallTagIndex : UChar
+0x000 SubSegmentCode : Ptr32
+0x004 PreviousSize : Uint2B
+0x006 SegmentOffset : UChar
+0x006 LFHFlags : UChar
+0x007 UnusedBytes : UChar
+0x000 FunctionIndex : Uint2B
+0x002 ContextValue : Uint2B
+0x000 InterceptorValue : Uint4B
+0x004 UnusedBytesLength : Uint2B
+0x006 EntryOffset : UChar
+0x007 ExtendedBlockSignature : UChar
+0x000 Code1 : Uint4B
+0x004 Code2 : Uint2B
+0x006 Code3 : UChar
+0x007 Code4 : UChar
+0x000 AgregateCode : Uint8B
+0x008 SegmentSignature : Uint4B
+0x00c SegmentFlags : Uint4B
+0x010 SegmentListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x018 Heap : Ptr32
+0x01c BaseAddress : Ptr32
+0x020 NumberOfPages : Uint4B
+0x024 FirstEntry : Ptr32
+0x028 LastValidEntry : Ptr32
+0x02c NumberOfUnCommittedPages : Uint4B
+0x030 NumberOfUnCommittedRanges : Uint4B
+0x034 SegmentAllocatorBackTraceIndex : Uint2B
+0x036 Reserved : Uint2B
+0x038 UCRSegmentList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x000 LocalInfo : Ptr32
+0x004 UserBlocks : Ptr32
+0x008 AggregateExchg : _INTERLOCK_SEQ
+0x000 Depth : Uint2B
+0x002 FreeEntryOffset : Uint2B
+0x000 OffsetAndDepth : Uint4B
+0x004 Sequence : Uint4B
+0x000 Exchg : Int8B
+0x010 BlockSize : Uint2B
+0x012 Flags : Uint2B
+0x014 BlockCount : Uint2B
+0x016 SizeIndex : UChar
+0x017 AffinityIndex : UChar
+0x010 Alignment : Uint4B
+0x018 SFreeListEntry : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x01c Lock : Uint4B
+0x000 Allocs : Uint4B +0x004 Frees : Uint4B +0x008 Size : Uint4B +0x00c TagIndex : Uint2B +0x00e CreatorBackTraceIndex : Uint2B +0x010 TagName : Wchar
+0x000 CommittThresholdShift : Uint4B +0x004 MaxPreCommittThreshold : Uint4B
+0x000 ListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 SegmentEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 Address : Ptr32
+0x014 Size : Uint4B
+0x000 SFreeListEntry : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x000 SubSegment : Ptr32
+0x004 Reserved : Ptr32
+0x008 SizeIndex : Uint4B
+0x00c Signature : Uint4B
+0x000 SFreeListEntry : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x000 SubSegment : Ptr32
+0x004 Reserved : Ptr32
+0x008 SizeIndex : Uint4B
+0x00c Signature : Uint4B
+0x000 e_magic : Uint2B +0x002 e_cblp : Uint2B +0x004 e_cp : Uint2B +0x006 e_crlc : Uint2B +0x008 e_cparhdr : Uint2B +0x00a e_minalloc : Uint2B +0x00c e_maxalloc : Uint2B +0x00e e_ss : Uint2B +0x010 e_sp : Uint2B +0x012 e_csum : Uint2B +0x014 e_ip : Uint2B +0x016 e_cs : Uint2B +0x018 e_lfarlc : Uint2B +0x01a e_ovno : Uint2B +0x01c e_res : Uint2B +0x024 e_oemid : Uint2B +0x026 e_oeminfo : Uint2B +0x028 e_res2 : Uint2B +0x03c e_lfanew : Int4B
+0x000 Machine : Uint2B +0x002 NumberOfSections : Uint2B +0x004 TimeDateStamp : Uint4B +0x008 PointerToSymbolTable : Uint4B +0x00c NumberOfSymbols : Uint4B +0x010 SizeOfOptionalHeader : Uint2B +0x012 Characteristics : Uint2B
+0x000 Signature : Uint4B
+0x004 FileHeader : _IMAGE_FILE_HEADER
+0x000 Machine : Uint2B
+0x002 NumberOfSections : Uint2B
+0x004 TimeDateStamp : Uint4B
+0x008 PointerToSymbolTable : Uint4B
+0x00c NumberOfSymbols : Uint4B
+0x010 SizeOfOptionalHeader : Uint2B
+0x012 Characteristics : Uint2B
+0x018 OptionalHeader : _IMAGE_OPTIONAL_HEADER
+0x000 Magic : Uint2B
+0x002 MajorLinkerVersion : UChar
+0x003 MinorLinkerVersion : UChar
+0x004 SizeOfCode : Uint4B
+0x008 SizeOfInitializedData : Uint4B
+0x00c SizeOfUninitializedData : Uint4B
+0x010 AddressOfEntryPoint : Uint4B
+0x014 BaseOfCode : Uint4B
+0x018 BaseOfData : Uint4B
+0x01c ImageBase : Uint4B
+0x020 SectionAlignment : Uint4B
+0x024 FileAlignment : Uint4B
+0x028 MajorOperatingSystemVersion : Uint2B
+0x02a MinorOperatingSystemVersion : Uint2B
+0x02c MajorImageVersion : Uint2B
+0x02e MinorImageVersion : Uint2B
+0x030 MajorSubsystemVersion : Uint2B
+0x032 MinorSubsystemVersion : Uint2B
+0x034 Win32VersionValue : Uint4B
+0x038 SizeOfImage : Uint4B
+0x03c SizeOfHeaders : Uint4B
+0x040 CheckSum : Uint4B
+0x044 Subsystem : Uint2B
+0x046 DllCharacteristics : Uint2B
+0x048 SizeOfStackReserve : Uint4B
+0x04c SizeOfStackCommit : Uint4B
+0x050 SizeOfHeapReserve : Uint4B
+0x054 SizeOfHeapCommit : Uint4B
+0x058 LoaderFlags : Uint4B
+0x05c NumberOfRvaAndSizes : Uint4B
+0x060 DataDirectory : _IMAGE_DATA_DIRECTORY
+0x000 VirtualAddress : Uint4B
+0x004 Size : Uint4B
+0x000 Magic : Uint2B
+0x002 MajorLinkerVersion : UChar
+0x003 MinorLinkerVersion : UChar
+0x004 SizeOfCode : Uint4B
+0x008 SizeOfInitializedData : Uint4B
+0x00c SizeOfUninitializedData : Uint4B
+0x010 AddressOfEntryPoint : Uint4B
+0x014 BaseOfCode : Uint4B
+0x018 BaseOfData : Uint4B
+0x01c ImageBase : Uint4B
+0x020 SectionAlignment : Uint4B
+0x024 FileAlignment : Uint4B
+0x028 MajorOperatingSystemVersion : Uint2B
+0x02a MinorOperatingSystemVersion : Uint2B
+0x02c MajorImageVersion : Uint2B
+0x02e MinorImageVersion : Uint2B
+0x030 MajorSubsystemVersion : Uint2B
+0x032 MinorSubsystemVersion : Uint2B
+0x034 Win32VersionValue : Uint4B
+0x038 SizeOfImage : Uint4B
+0x03c SizeOfHeaders : Uint4B
+0x040 CheckSum : Uint4B
+0x044 Subsystem : Uint2B
+0x046 DllCharacteristics : Uint2B
+0x048 SizeOfStackReserve : Uint4B
+0x04c SizeOfStackCommit : Uint4B
+0x050 SizeOfHeapReserve : Uint4B
+0x054 SizeOfHeapCommit : Uint4B
+0x058 LoaderFlags : Uint4B
+0x05c NumberOfRvaAndSizes : Uint4B
+0x060 DataDirectory : _IMAGE_DATA_DIRECTORY
+0x000 VirtualAddress : Uint4B
+0x004 Size : Uint4B
+0x000 PrivilegeCount : Uint4B
+0x004 Control : Uint4B
+0x008 Privilege : _LUID_AND_ATTRIBUTES
+0x000 Luid : _LUID
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x008 Attributes : Uint4B
+0x000 Size : Uint2B +0x002 Version : Uint2B +0x004 Context : Ptr32 +0x008 InterfaceReference : Ptr32 +0x00c InterfaceDereference : Ptr32
InterfaceTypeUndefined = 0n-1 Internal = 0n0 Isa = 0n1 Eisa = 0n2 MicroChannel = 0n3 TurboChannel = 0n4 PCIBus = 0n5 VMEBus = 0n6 NuBus = 0n7 PCMCIABus = 0n8 CBus = 0n9 MPIBus = 0n10 MPSABus = 0n11 ProcessorInternal = 0n12 InternalPowerBus = 0n13 PNPISABus = 0n14 PNPBus = 0n15 Vmcs = 0n16 MaximumInterfaceType = 0n17
+0x000 Depth : Uint2B +0x002 FreeEntryOffset : Uint2B +0x000 OffsetAndDepth : Uint4B +0x004 Sequence : Uint4B +0x000 Exchg : Int8B
KeepObject = 0n1 DeallocateObject = 0n2 DeallocateObjectKeepRegisters = 0n3
+0x000 NextExtension : Ptr32 +0x004 ClientIdentificationAddress : Ptr32
+0x000 Size : Int2B +0x004 ExtraCreateParameter : Ptr32 +0x008 DeviceObjectHint : Ptr32 +0x00c TxnParameters : Ptr32
IoPriorityVeryLow = 0n0 IoPriorityLow = 0n1 IoPriorityNormal = 0n2 IoPriorityHigh = 0n3 IoPriorityCritical = 0n4 MaxIoPriorityTypes = 0n5
+0x000 Size : Uint4B
+0x004 ThreadPriority : Uint4B
+0x008 PagePriority : Uint4B
+0x00c IoPriority :
IoPriorityVeryLow = 0n0
IoPriorityLow = 0n1
IoPriorityNormal = 0n2
IoPriorityHigh = 0n3
IoPriorityCritical = 0n4
MaxIoPriorityTypes = 0n5
+0x000 Option : UChar
+0x001 Type : UChar
+0x002 ShareDisposition : UChar
+0x003 Spare1 : UChar
+0x004 Flags : Uint2B
+0x006 Spare2 : Uint2B
+0x008 u : <unnamed-tag>
+0x000 Port : <unnamed-tag>
+0x000 Length : Uint4B
+0x004 Alignment : Uint4B
+0x008 MinimumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x010 MaximumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 Memory : <unnamed-tag>
+0x000 Length : Uint4B
+0x004 Alignment : Uint4B
+0x008 MinimumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x010 MaximumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 Interrupt : <unnamed-tag>
+0x000 MinimumVector : Uint4B
+0x004 MaximumVector : Uint4B
+0x008 AffinityPolicy : Uint2B
+0x00a Group : Uint2B
+0x00c PriorityPolicy :
IrqPriorityUndefined = 0n0
IrqPriorityLow = 0n1
IrqPriorityNormal = 0n2
IrqPriorityHigh = 0n3
+0x010 TargetedProcessors : Uint4B
+0x000 Dma : <unnamed-tag>
+0x000 MinimumChannel : Uint4B
+0x004 MaximumChannel : Uint4B
+0x000 Generic : <unnamed-tag>
+0x000 Length : Uint4B
+0x004 Alignment : Uint4B
+0x008 MinimumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x010 MaximumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 DevicePrivate : <unnamed-tag>
+0x000 Data : Uint4B
+0x000 BusNumber : <unnamed-tag>
+0x000 Length : Uint4B
+0x004 MinBusNumber : Uint4B
+0x008 MaxBusNumber : Uint4B
+0x00c Reserved : Uint4B
+0x000 ConfigData : <unnamed-tag>
+0x000 Priority : Uint4B
+0x004 Reserved1 : Uint4B
+0x008 Reserved2 : Uint4B
+0x000 Memory40 : <unnamed-tag>
+0x000 Length40 : Uint4B
+0x004 Alignment40 : Uint4B
+0x008 MinimumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x010 MaximumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 Memory48 : <unnamed-tag>
+0x000 Length48 : Uint4B
+0x004 Alignment48 : Uint4B
+0x008 MinimumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x010 MaximumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 Memory64 : <unnamed-tag>
+0x000 Length64 : Uint4B
+0x004 Alignment64 : Uint4B
+0x008 MinimumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x010 MaximumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 Version : Uint2B
+0x002 Revision : Uint2B
+0x004 Count : Uint4B
+0x008 Descriptors : _IO_RESOURCE_DESCRIPTOR
+0x000 Option : UChar
+0x001 Type : UChar
+0x002 ShareDisposition : UChar
+0x003 Spare1 : UChar
+0x004 Flags : Uint2B
+0x006 Spare2 : Uint2B
+0x008 u : <unnamed-tag>
+0x000 Port : <unnamed-tag>
+0x000 Length : Uint4B
+0x004 Alignment : Uint4B
+0x008 MinimumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x010 MaximumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 Memory : <unnamed-tag>
+0x000 Length : Uint4B
+0x004 Alignment : Uint4B
+0x008 MinimumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x010 MaximumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 Interrupt : <unnamed-tag>
+0x000 MinimumVector : Uint4B
+0x004 MaximumVector : Uint4B
+0x008 AffinityPolicy : Uint2B
+0x00a Group : Uint2B
+0x00c PriorityPolicy :
IrqPriorityUndefined = 0n0
IrqPriorityLow = 0n1
IrqPriorityNormal = 0n2
IrqPriorityHigh = 0n3
+0x010 TargetedProcessors : Uint4B
+0x000 Dma : <unnamed-tag>
+0x000 MinimumChannel : Uint4B
+0x004 MaximumChannel : Uint4B
+0x000 Generic : <unnamed-tag>
+0x000 Length : Uint4B
+0x004 Alignment : Uint4B
+0x008 MinimumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x010 MaximumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 DevicePrivate : <unnamed-tag>
+0x000 Data : Uint4B
+0x000 BusNumber : <unnamed-tag>
+0x000 Length : Uint4B
+0x004 MinBusNumber : Uint4B
+0x008 MaxBusNumber : Uint4B
+0x00c Reserved : Uint4B
+0x000 ConfigData : <unnamed-tag>
+0x000 Priority : Uint4B
+0x004 Reserved1 : Uint4B
+0x008 Reserved2 : Uint4B
+0x000 Memory40 : <unnamed-tag>
+0x000 Length40 : Uint4B
+0x004 Alignment40 : Uint4B
+0x008 MinimumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x010 MaximumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 Memory48 : <unnamed-tag>
+0x000 Length48 : Uint4B
+0x004 Alignment48 : Uint4B
+0x008 MinimumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x010 MaximumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 Memory64 : <unnamed-tag>
+0x000 Length64 : Uint4B
+0x004 Alignment64 : Uint4B
+0x008 MinimumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x010 MaximumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 ListSize : Uint4B
+0x004 InterfaceType :
InterfaceTypeUndefined = 0n-1
Internal = 0n0
Isa = 0n1
Eisa = 0n2
MicroChannel = 0n3
TurboChannel = 0n4
PCIBus = 0n5
VMEBus = 0n6
NuBus = 0n7
PCMCIABus = 0n8
CBus = 0n9
MPIBus = 0n10
MPSABus = 0n11
ProcessorInternal = 0n12
InternalPowerBus = 0n13
PNPISABus = 0n14
PNPBus = 0n15
Vmcs = 0n16
MaximumInterfaceType = 0n17
+0x008 BusNumber : Uint4B
+0x00c SlotNumber : Uint4B
+0x010 Reserved : Uint4B
+0x01c AlternativeLists : Uint4B
+0x020 List : _IO_RESOURCE_LIST
+0x000 Version : Uint2B
+0x002 Revision : Uint2B
+0x004 Count : Uint4B
+0x008 Descriptors : _IO_RESOURCE_DESCRIPTOR
+0x000 Option : UChar
+0x001 Type : UChar
+0x002 ShareDisposition : UChar
+0x003 Spare1 : UChar
+0x004 Flags : Uint2B
+0x006 Spare2 : Uint2B
+0x008 u : <unnamed-tag>
+0x000 Port : <unnamed-tag>
+0x000 Length : Uint4B
+0x004 Alignment : Uint4B
+0x008 MinimumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x010 MaximumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 Memory : <unnamed-tag>
+0x000 Length : Uint4B
+0x004 Alignment : Uint4B
+0x008 MinimumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x010 MaximumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 Interrupt : <unnamed-tag>
+0x000 MinimumVector : Uint4B
+0x004 MaximumVector : Uint4B
+0x008 AffinityPolicy : Uint2B
+0x00a Group : Uint2B
+0x00c PriorityPolicy :
IrqPriorityUndefined = 0n0
IrqPriorityLow = 0n1
IrqPriorityNormal = 0n2
IrqPriorityHigh = 0n3
+0x010 TargetedProcessors : Uint4B
+0x000 Dma : <unnamed-tag>
+0x000 MinimumChannel : Uint4B
+0x004 MaximumChannel : Uint4B
+0x000 Generic : <unnamed-tag>
+0x000 Length : Uint4B
+0x004 Alignment : Uint4B
+0x008 MinimumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x010 MaximumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 DevicePrivate : <unnamed-tag>
+0x000 Data : Uint4B
+0x000 BusNumber : <unnamed-tag>
+0x000 Length : Uint4B
+0x004 MinBusNumber : Uint4B
+0x008 MaxBusNumber : Uint4B
+0x00c Reserved : Uint4B
+0x000 ConfigData : <unnamed-tag>
+0x000 Priority : Uint4B
+0x004 Reserved1 : Uint4B
+0x008 Reserved2 : Uint4B
+0x000 Memory40 : <unnamed-tag>
+0x000 Length40 : Uint4B
+0x004 Alignment40 : Uint4B
+0x008 MinimumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x010 MaximumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 Memory48 : <unnamed-tag>
+0x000 Length48 : Uint4B
+0x004 Alignment48 : Uint4B
+0x008 MinimumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x010 MaximumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 Memory64 : <unnamed-tag>
+0x000 Length64 : Uint4B
+0x004 Alignment64 : Uint4B
+0x008 MinimumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x010 MaximumAddress : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 SecurityQos : Ptr32 +0x004 AccessState : Ptr32 +0x008 DesiredAccess : Uint4B +0x00c FullCreateOptions : Uint4B
+0x000 MajorFunction : UChar
+0x001 MinorFunction : UChar
+0x002 Flags : UChar
+0x003 Control : UChar
+0x004 Parameters : <unnamed-tag>
+0x000 Create : <unnamed-tag>
+0x000 SecurityContext : Ptr32
+0x004 Options : Uint4B
+0x008 FileAttributes : Uint2B
+0x00a ShareAccess : Uint2B
+0x00c EaLength : Uint4B
+0x000 CreatePipe : <unnamed-tag>
+0x000 SecurityContext : Ptr32
+0x004 Options : Uint4B
+0x008 Reserved : Uint2B
+0x00a ShareAccess : Uint2B
+0x00c Parameters : Ptr32
+0x000 CreateMailslot : <unnamed-tag>
+0x000 SecurityContext : Ptr32
+0x004 Options : Uint4B
+0x008 Reserved : Uint2B
+0x00a ShareAccess : Uint2B
+0x00c Parameters : Ptr32
+0x000 Read : <unnamed-tag>
+0x000 Length : Uint4B
+0x004 Key : Uint4B
+0x008 ByteOffset : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 Write : <unnamed-tag>
+0x000 Length : Uint4B
+0x004 Key : Uint4B
+0x008 ByteOffset : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 QueryDirectory : <unnamed-tag>
+0x000 Length : Uint4B
+0x004 FileName : Ptr32
+0x008 FileInformationClass :
FileDirectoryInformation = 0n1
FileFullDirectoryInformation = 0n2
FileBothDirectoryInformation = 0n3
FileBasicInformation = 0n4
FileStandardInformation = 0n5
FileInternalInformation = 0n6
FileEaInformation = 0n7
FileAccessInformation = 0n8
FileNameInformation = 0n9
FileRenameInformation = 0n10
FileLinkInformation = 0n11
FileNamesInformation = 0n12
FileDispositionInformation = 0n13
FilePositionInformation = 0n14
FileFullEaInformation = 0n15
FileModeInformation = 0n16
FileAlignmentInformation = 0n17
FileAllInformation = 0n18
FileAllocationInformation = 0n19
FileEndOfFileInformation = 0n20
FileAlternateNameInformation = 0n21
FileStreamInformation = 0n22
FilePipeInformation = 0n23
FilePipeLocalInformation = 0n24
FilePipeRemoteInformation = 0n25
FileMailslotQueryInformation = 0n26
FileMailslotSetInformation = 0n27
FileCompressionInformation = 0n28
FileObjectIdInformation = 0n29
FileCompletionInformation = 0n30
FileMoveClusterInformation = 0n31
FileQuotaInformation = 0n32
FileReparsePointInformation = 0n33
FileNetworkOpenInformation = 0n34
FileAttributeTagInformation = 0n35
FileTrackingInformation = 0n36
FileIdBothDirectoryInformation = 0n37
FileIdFullDirectoryInformation = 0n38
FileValidDataLengthInformation = 0n39
FileShortNameInformation = 0n40
FileIoCompletionNotificationInformation = 0n41
FileIoStatusBlockRangeInformation = 0n42
FileIoPriorityHintInformation = 0n43
FileSfioReserveInformation = 0n44
FileSfioVolumeInformation = 0n45
FileHardLinkInformation = 0n46
FileProcessIdsUsingFileInformation = 0n47
FileNormalizedNameInformation = 0n48
FileNetworkPhysicalNameInformation = 0n49
FileIdGlobalTxDirectoryInformation = 0n50
FileIsRemoteDeviceInformation = 0n51
FileAttributeCacheInformation = 0n52
FileNumaNodeInformation = 0n53
FileStandardLinkInformation = 0n54
FileRemoteProtocolInformation = 0n55
FileMaximumInformation = 0n56
+0x00c FileIndex : Uint4B
+0x000 NotifyDirectory : <unnamed-tag>
+0x000 Length : Uint4B
+0x004 CompletionFilter : Uint4B
+0x000 QueryFile : <unnamed-tag>
+0x000 Length : Uint4B
+0x004 FileInformationClass :
FileDirectoryInformation = 0n1
FileFullDirectoryInformation = 0n2
FileBothDirectoryInformation = 0n3
FileBasicInformation = 0n4
FileStandardInformation = 0n5
FileInternalInformation = 0n6
FileEaInformation = 0n7
FileAccessInformation = 0n8
FileNameInformation = 0n9
FileRenameInformation = 0n10
FileLinkInformation = 0n11
FileNamesInformation = 0n12
FileDispositionInformation = 0n13
FilePositionInformation = 0n14
FileFullEaInformation = 0n15
FileModeInformation = 0n16
FileAlignmentInformation = 0n17
FileAllInformation = 0n18
FileAllocationInformation = 0n19
FileEndOfFileInformation = 0n20
FileAlternateNameInformation = 0n21
FileStreamInformation = 0n22
FilePipeInformation = 0n23
FilePipeLocalInformation = 0n24
FilePipeRemoteInformation = 0n25
FileMailslotQueryInformation = 0n26
FileMailslotSetInformation = 0n27
FileCompressionInformation = 0n28
FileObjectIdInformation = 0n29
FileCompletionInformation = 0n30
FileMoveClusterInformation = 0n31
FileQuotaInformation = 0n32
FileReparsePointInformation = 0n33
FileNetworkOpenInformation = 0n34
FileAttributeTagInformation = 0n35
FileTrackingInformation = 0n36
FileIdBothDirectoryInformation = 0n37
FileIdFullDirectoryInformation = 0n38
FileValidDataLengthInformation = 0n39
FileShortNameInformation = 0n40
FileIoCompletionNotificationInformation = 0n41
FileIoStatusBlockRangeInformation = 0n42
FileIoPriorityHintInformation = 0n43
FileSfioReserveInformation = 0n44
FileSfioVolumeInformation = 0n45
FileHardLinkInformation = 0n46
FileProcessIdsUsingFileInformation = 0n47
FileNormalizedNameInformation = 0n48
FileNetworkPhysicalNameInformation = 0n49
FileIdGlobalTxDirectoryInformation = 0n50
FileIsRemoteDeviceInformation = 0n51
FileAttributeCacheInformation = 0n52
FileNumaNodeInformation = 0n53
FileStandardLinkInformation = 0n54
FileRemoteProtocolInformation = 0n55
FileMaximumInformation = 0n56
+0x000 SetFile : <unnamed-tag>
+0x000 Length : Uint4B
+0x004 FileInformationClass :
FileDirectoryInformation = 0n1
FileFullDirectoryInformation = 0n2
FileBothDirectoryInformation = 0n3
FileBasicInformation = 0n4
FileStandardInformation = 0n5
FileInternalInformation = 0n6
FileEaInformation = 0n7
FileAccessInformation = 0n8
FileNameInformation = 0n9
FileRenameInformation = 0n10
FileLinkInformation = 0n11
FileNamesInformation = 0n12
FileDispositionInformation = 0n13
FilePositionInformation = 0n14
FileFullEaInformation = 0n15
FileModeInformation = 0n16
FileAlignmentInformation = 0n17
FileAllInformation = 0n18
FileAllocationInformation = 0n19
FileEndOfFileInformation = 0n20
FileAlternateNameInformation = 0n21
FileStreamInformation = 0n22
FilePipeInformation = 0n23
FilePipeLocalInformation = 0n24
FilePipeRemoteInformation = 0n25
FileMailslotQueryInformation = 0n26
FileMailslotSetInformation = 0n27
FileCompressionInformation = 0n28
FileObjectIdInformation = 0n29
FileCompletionInformation = 0n30
FileMoveClusterInformation = 0n31
FileQuotaInformation = 0n32
FileReparsePointInformation = 0n33
FileNetworkOpenInformation = 0n34
FileAttributeTagInformation = 0n35
FileTrackingInformation = 0n36
FileIdBothDirectoryInformation = 0n37
FileIdFullDirectoryInformation = 0n38
FileValidDataLengthInformation = 0n39
FileShortNameInformation = 0n40
FileIoCompletionNotificationInformation = 0n41
FileIoStatusBlockRangeInformation = 0n42
FileIoPriorityHintInformation = 0n43
FileSfioReserveInformation = 0n44
FileSfioVolumeInformation = 0n45
FileHardLinkInformation = 0n46
FileProcessIdsUsingFileInformation = 0n47
FileNormalizedNameInformation = 0n48
FileNetworkPhysicalNameInformation = 0n49
FileIdGlobalTxDirectoryInformation = 0n50
FileIsRemoteDeviceInformation = 0n51
FileAttributeCacheInformation = 0n52
FileNumaNodeInformation = 0n53
FileStandardLinkInformation = 0n54
FileRemoteProtocolInformation = 0n55
FileMaximumInformation = 0n56
+0x008 FileObject : Ptr32
+0x00c ReplaceIfExists : UChar
+0x00d AdvanceOnly : UChar
+0x00c ClusterCount : Uint4B
+0x00c DeleteHandle : Ptr32
+0x000 QueryEa : <unnamed-tag>
+0x000 Length : Uint4B
+0x004 EaList : Ptr32
+0x008 EaListLength : Uint4B
+0x00c EaIndex : Uint4B
+0x000 SetEa : <unnamed-tag>
+0x000 Length : Uint4B
+0x000 QueryVolume : <unnamed-tag>
+0x000 Length : Uint4B
+0x004 FsInformationClass :
FileFsVolumeInformation = 0n1
FileFsLabelInformation = 0n2
FileFsSizeInformation = 0n3
FileFsDeviceInformation = 0n4
FileFsAttributeInformation = 0n5
FileFsControlInformation = 0n6
FileFsFullSizeInformation = 0n7
FileFsObjectIdInformation = 0n8
FileFsDriverPathInformation = 0n9
FileFsVolumeFlagsInformation = 0n10
FileFsMaximumInformation = 0n11
+0x000 SetVolume : <unnamed-tag>
+0x000 Length : Uint4B
+0x004 FsInformationClass :
FileFsVolumeInformation = 0n1
FileFsLabelInformation = 0n2
FileFsSizeInformation = 0n3
FileFsDeviceInformation = 0n4
FileFsAttributeInformation = 0n5
FileFsControlInformation = 0n6
FileFsFullSizeInformation = 0n7
FileFsObjectIdInformation = 0n8
FileFsDriverPathInformation = 0n9
FileFsVolumeFlagsInformation = 0n10
FileFsMaximumInformation = 0n11
+0x000 FileSystemControl : <unnamed-tag>
+0x000 OutputBufferLength : Uint4B
+0x004 InputBufferLength : Uint4B
+0x008 FsControlCode : Uint4B
+0x00c Type3InputBuffer : Ptr32
+0x000 LockControl : <unnamed-tag>
+0x000 Length : Ptr32
+0x004 Key : Uint4B
+0x008 ByteOffset : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 DeviceIoControl : <unnamed-tag>
+0x000 OutputBufferLength : Uint4B
+0x004 InputBufferLength : Uint4B
+0x008 IoControlCode : Uint4B
+0x00c Type3InputBuffer : Ptr32
+0x000 QuerySecurity : <unnamed-tag>
+0x000 SecurityInformation : Uint4B
+0x004 Length : Uint4B
+0x000 SetSecurity : <unnamed-tag>
+0x000 SecurityInformation : Uint4B
+0x004 SecurityDescriptor : Ptr32
+0x000 MountVolume : <unnamed-tag>
+0x000 Vpb : Ptr32
+0x004 DeviceObject : Ptr32
+0x000 VerifyVolume : <unnamed-tag>
+0x000 Vpb : Ptr32
+0x004 DeviceObject : Ptr32
+0x000 Scsi : <unnamed-tag>
+0x000 Srb : Ptr32
+0x000 QueryQuota : <unnamed-tag>
+0x000 Length : Uint4B
+0x004 StartSid : Ptr32
+0x008 SidList : Ptr32
+0x00c SidListLength : Uint4B
+0x000 SetQuota : <unnamed-tag>
+0x000 Length : Uint4B
+0x000 QueryDeviceRelations : <unnamed-tag>
+0x000 Type :
BusRelations = 0n0
EjectionRelations = 0n1
PowerRelations = 0n2
RemovalRelations = 0n3
TargetDeviceRelation = 0n4
SingleBusRelations = 0n5
TransportRelations = 0n6
+0x000 QueryInterface : <unnamed-tag>
+0x000 InterfaceType : Ptr32
+0x004 Size : Uint2B
+0x006 Version : Uint2B
+0x008 Interface : Ptr32
+0x00c InterfaceSpecificData : Ptr32
+0x000 DeviceCapabilities : <unnamed-tag>
+0x000 Capabilities : Ptr32
+0x000 FilterResourceRequirements : <unnamed-tag>
+0x000 IoResourceRequirementList : Ptr32
+0x000 ReadWriteConfig : <unnamed-tag>
+0x000 WhichSpace : Uint4B
+0x004 Buffer : Ptr32
+0x008 Offset : Uint4B
+0x00c Length : Uint4B
+0x000 SetLock : <unnamed-tag>
+0x000 Lock : UChar
+0x000 QueryId : <unnamed-tag>
+0x000 IdType :
BusQueryDeviceID = 0n0
BusQueryHardwareIDs = 0n1
BusQueryCompatibleIDs = 0n2
BusQueryInstanceID = 0n3
BusQueryDeviceSerialNumber = 0n4
BusQueryContainerID = 0n5
+0x000 QueryDeviceText : <unnamed-tag>
+0x000 DeviceTextType :
DeviceTextDescription = 0n0
DeviceTextLocationInformation = 0n1
+0x004 LocaleId : Uint4B
+0x000 UsageNotification : <unnamed-tag>
+0x000 InPath : UChar
+0x001 Reserved : UChar
+0x004 Type :
DeviceUsageTypeUndefined = 0n0
DeviceUsageTypePaging = 0n1
DeviceUsageTypeHibernation = 0n2
DeviceUsageTypeDumpFile = 0n3
+0x000 WaitWake : <unnamed-tag>
+0x000 PowerState :
PowerSystemUnspecified = 0n0
PowerSystemWorking = 0n1
PowerSystemSleeping1 = 0n2
PowerSystemSleeping2 = 0n3
PowerSystemSleeping3 = 0n4
PowerSystemHibernate = 0n5
PowerSystemShutdown = 0n6
PowerSystemMaximum = 0n7
+0x000 PowerSequence : <unnamed-tag>
+0x000 PowerSequence : Ptr32
+0x000 Power : <unnamed-tag>
+0x000 SystemContext : Uint4B
+0x000 SystemPowerStateContext : _SYSTEM_POWER_STATE_CONTEXT
+0x000 Reserved1 : Pos 0, 8 Bits
+0x000 TargetSystemState : Pos 8, 4 Bits
+0x000 EffectiveSystemState : Pos 12, 4 Bits
+0x000 CurrentSystemState : Pos 16, 4 Bits
+0x000 IgnoreHibernationPath : Pos 20, 1 Bit
+0x000 PseudoTransition : Pos 21, 1 Bit
+0x000 Reserved2 : Pos 22, 10 Bits
+0x000 ContextAsUlong : Uint4B
+0x004 Type :
SystemPowerState = 0n0
DevicePowerState = 0n1
+0x008 State : _POWER_STATE
+0x000 SystemState :
PowerSystemUnspecified = 0n0
PowerSystemWorking = 0n1
PowerSystemSleeping1 = 0n2
PowerSystemSleeping2 = 0n3
PowerSystemSleeping3 = 0n4
PowerSystemHibernate = 0n5
PowerSystemShutdown = 0n6
PowerSystemMaximum = 0n7
+0x000 DeviceState :
PowerDeviceUnspecified = 0n0
PowerDeviceD0 = 0n1
PowerDeviceD1 = 0n2
PowerDeviceD2 = 0n3
PowerDeviceD3 = 0n4
PowerDeviceMaximum = 0n5
+0x00c ShutdownType :
PowerActionNone = 0n0
PowerActionReserved = 0n1
PowerActionSleep = 0n2
PowerActionHibernate = 0n3
PowerActionShutdown = 0n4
PowerActionShutdownReset = 0n5
PowerActionShutdownOff = 0n6
PowerActionWarmEject = 0n7
+0x000 StartDevice : <unnamed-tag>
+0x000 AllocatedResources : Ptr32
+0x004 AllocatedResourcesTranslated : Ptr32
+0x000 WMI : <unnamed-tag>
+0x000 ProviderId : Uint4B
+0x004 DataPath : Ptr32
+0x008 BufferSize : Uint4B
+0x00c Buffer : Ptr32
+0x000 Others : <unnamed-tag>
+0x000 Argument1 : Ptr32
+0x004 Argument2 : Ptr32
+0x008 Argument3 : Ptr32
+0x00c Argument4 : Ptr32
+0x014 DeviceObject : Ptr32
+0x018 FileObject : Ptr32
+0x01c CompletionRoutine : Ptr32
+0x020 Context : Ptr32
+0x000 Status : Int4B +0x000 Pointer : Ptr32 +0x004 Information : Uint4B
+0x000 Status : Int4B +0x000 Pointer : Ptr32 +0x004 Information : Uint4B
+0x000 Type : Int2B
+0x002 TimerFlag : Int2B
+0x004 TimerList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x00c TimerRoutine : Ptr32
+0x010 Context : Ptr32
+0x014 DeviceObject : Ptr32
+0x000 Type : Int2B
+0x002 Size : Uint2B
+0x004 MdlAddress : Ptr32
+0x008 Flags : Uint4B
+0x00c AssociatedIrp : <unnamed-tag>
+0x000 MasterIrp : Ptr32
+0x000 IrpCount : Int4B
+0x000 SystemBuffer : Ptr32
+0x010 ThreadListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x018 IoStatus : _IO_STATUS_BLOCK
+0x000 Status : Int4B
+0x000 Pointer : Ptr32
+0x004 Information : Uint4B
+0x020 RequestorMode : Char
+0x021 PendingReturned : UChar
+0x022 StackCount : Char
+0x023 CurrentLocation : Char
+0x024 Cancel : UChar
+0x025 CancelIrql : UChar
+0x026 ApcEnvironment : Char
+0x027 AllocationFlags : UChar
+0x028 UserIosb : Ptr32
+0x02c UserEvent : Ptr32
+0x030 Overlay : <unnamed-tag>
+0x000 AsynchronousParameters : <unnamed-tag>
+0x000 UserApcRoutine : Ptr32
+0x000 IssuingProcess : Ptr32
+0x004 UserApcContext : Ptr32
+0x000 AllocationSize : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x038 CancelRoutine : Ptr32
+0x03c UserBuffer : Ptr32
+0x040 Tail : <unnamed-tag>
+0x000 Overlay : <unnamed-tag>
+0x000 DeviceQueueEntry : _KDEVICE_QUEUE_ENTRY
+0x000 DeviceListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 SortKey : Uint4B
+0x00c Inserted : UChar
+0x000 DriverContext : Ptr32
+0x010 Thread : Ptr32
+0x014 AuxiliaryBuffer : Ptr32
+0x018 ListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x020 CurrentStackLocation : Ptr32
+0x020 PacketType : Uint4B
+0x024 OriginalFileObject : Ptr32
+0x000 Apc : _KAPC
+0x000 Type : UChar
+0x001 SpareByte0 : UChar
+0x002 Size : UChar
+0x003 SpareByte1 : UChar
+0x004 SpareLong0 : Uint4B
+0x008 Thread : Ptr32
+0x00c ApcListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x014 KernelRoutine : Ptr32
+0x018 RundownRoutine : Ptr32
+0x01c NormalRoutine : Ptr32
+0x020 NormalContext : Ptr32
+0x024 SystemArgument1 : Ptr32
+0x028 SystemArgument2 : Ptr32
+0x02c ApcStateIndex : Char
+0x02d ApcMode : Char
+0x02e Inserted : UChar
+0x000 CompletionKey : Ptr32
IrqPriorityUndefined = 0n0 IrqPriorityLow = 0n1 IrqPriorityNormal = 0n2 IrqPriorityHigh = 0n3
+0x000 Count : Uint2B +0x002 Size : Uint2B +0x004 Reserved : Uint4B +0x008 Bitmap : Uint4B
+0x000 Count : Uint2B +0x002 Size : Uint2B +0x004 Reserved : Uint4B +0x008 Bitmap : Uint4B
+0x000 Type : UChar
+0x001 SpareByte0 : UChar
+0x002 Size : UChar
+0x003 SpareByte1 : UChar
+0x004 SpareLong0 : Uint4B
+0x008 Thread : Ptr32
+0x00c ApcListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x014 KernelRoutine : Ptr32
+0x018 RundownRoutine : Ptr32
+0x01c NormalRoutine : Ptr32
+0x020 NormalContext : Ptr32
+0x024 SystemArgument1 : Ptr32
+0x028 SystemArgument2 : Ptr32
+0x02c ApcStateIndex : Char
+0x02d ApcMode : Char
+0x02e Inserted : UChar
+0x000 ApcListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 Process : Ptr32
+0x014 KernelApcInProgress : UChar
+0x015 KernelApcPending : UChar
+0x016 UserApcPending : UChar
+0x000 Type : Int2B
+0x002 Size : Int2B
+0x004 DeviceListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x00c Lock : Uint4B
+0x010 Busy : UChar
+0x000 DeviceListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 SortKey : Uint4B
+0x00c Inserted : UChar
+0x000 Type : UChar
+0x001 Importance : UChar
+0x002 Number : Uint2B
+0x004 DpcListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x00c DeferredRoutine : Ptr32
+0x010 DeferredContext : Ptr32
+0x014 SystemArgument1 : Ptr32
+0x018 SystemArgument2 : Ptr32
+0x01c DpcData : Ptr32
+0x000 DpcListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 DpcLock : Uint4B
+0x00c DpcQueueDepth : Int4B
+0x010 DpcCount : Uint4B
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x000 ExecuteDisable : Pos 0, 1 Bit +0x000 ExecuteEnable : Pos 1, 1 Bit +0x000 DisableThunkEmulation : Pos 2, 1 Bit +0x000 Permanent : Pos 3, 1 Bit +0x000 ExecuteDispatchEnable : Pos 4, 1 Bit +0x000 ImageDispatchEnable : Pos 5, 1 Bit +0x000 DisableExceptionChainValidation : Pos 6, 1 Bit +0x000 Spare : Pos 7, 1 Bit +0x000 ExecuteOptions : UChar
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x000 LimitLow : Uint2B
+0x002 BaseLow : Uint2B
+0x004 HighWord : <unnamed-tag>
+0x000 Bytes : <unnamed-tag>
+0x000 BaseMid : UChar
+0x001 Flags1 : UChar
+0x002 Flags2 : UChar
+0x003 BaseHi : UChar
+0x000 Bits : <unnamed-tag>
+0x000 BaseMid : Pos 0, 8 Bits
+0x000 Type : Pos 8, 5 Bits
+0x000 Dpl : Pos 13, 2 Bits
+0x000 Pres : Pos 15, 1 Bit
+0x000 LimitHi : Pos 16, 4 Bits
+0x000 Sys : Pos 20, 1 Bit
+0x000 Reserved_0 : Pos 21, 1 Bit
+0x000 Default_Big : Pos 22, 1 Bit
+0x000 Granularity : Pos 23, 1 Bit
+0x000 BaseHi : Pos 24, 8 Bits
+0x000 Offset : Uint2B +0x002 Selector : Uint2B +0x004 Access : Uint2B +0x006 ExtendedOffset : Uint2B
+0x000 PagedPoolSListHead : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x008 NonPagedPoolSListHead : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x020 Affinity : _GROUP_AFFINITY
+0x000 Mask : Uint4B
+0x004 Group : Uint2B
+0x006 Reserved : Uint2B
+0x02c ProximityId : Uint4B
+0x030 NodeNumber : Uint2B
+0x032 PrimaryNodeNumber : Uint2B
+0x034 MaximumProcessors : UChar
+0x035 Color : UChar
+0x036 Flags : _flags
+0x000 Removable : Pos 0, 1 Bit
+0x000 GroupAssigned : Pos 1, 1 Bit
+0x000 GroupCommitted : Pos 2, 1 Bit
+0x000 GroupAssignmentFixed : Pos 3, 1 Bit
+0x000 Fill : Pos 4, 4 Bits
+0x037 NodePad0 : UChar
+0x038 Seed : Uint4B
+0x03c MmShiftedColor : Uint4B
+0x040 FreeCount : Uint4B
+0x048 CachedKernelStacks : _CACHED_KSTACK_LIST
+0x000 SListHead : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x008 MinimumFree : Int4B
+0x00c Misses : Uint4B
+0x010 MissesLast : Uint4B
+0x014 Pad0 : Uint4B
+0x060 ParkLock : Int4B
+0x064 NodePad1 : Uint4B
EventNotificationObject = 0n0 EventSynchronizationObject = 0n1 MutantObject = 0n2 ProcessObject = 0n3 QueueObject = 0n4 SemaphoreObject = 0n5 ThreadObject = 0n6 GateObject = 0n7 TimerNotificationObject = 0n8 TimerSynchronizationObject = 0n9 Spare2Object = 0n10 Spare3Object = 0n11 Spare4Object = 0n12 Spare5Object = 0n13 Spare6Object = 0n14 Spare7Object = 0n15 Spare8Object = 0n16 Spare9Object = 0n17 ApcObject = 0n18 DpcObject = 0n19 DeviceQueueObject = 0n20 EventPairObject = 0n21 InterruptObject = 0n22 ProfileObject = 0n23 ThreadedDpcObject = 0n24 MaximumKernelObject = 0n25
+0x000 NtTib : _NT_TIB
+0x000 ExceptionList : Ptr32
+0x004 StackBase : Ptr32
+0x008 StackLimit : Ptr32
+0x00c SubSystemTib : Ptr32
+0x010 FiberData : Ptr32
+0x010 Version : Uint4B
+0x014 ArbitraryUserPointer : Ptr32
+0x018 Self : Ptr32
+0x000 Used_ExceptionList : Ptr32
+0x004 Used_StackBase : Ptr32
+0x008 Spare2 : Ptr32
+0x00c TssCopy : Ptr32
+0x010 ContextSwitches : Uint4B
+0x014 SetMemberCopy : Uint4B
+0x018 Used_Self : Ptr32
+0x01c SelfPcr : Ptr32
+0x020 Prcb : Ptr32
+0x024 Irql : UChar
+0x028 IRR : Uint4B
+0x02c IrrActive : Uint4B
+0x030 IDR : Uint4B
+0x034 KdVersionBlock : Ptr32
+0x038 IDT : Ptr32
+0x03c GDT : Ptr32
+0x040 TSS : Ptr32
+0x044 MajorVersion : Uint2B
+0x046 MinorVersion : Uint2B
+0x048 SetMember : Uint4B
+0x04c StallScaleFactor : Uint4B
+0x050 SpareUnused : UChar
+0x051 Number : UChar
+0x052 Spare0 : UChar
+0x053 SecondLevelCacheAssociativity : UChar
+0x054 VdmAlert : Uint4B
+0x058 KernelReserved : Uint4B
+0x090 SecondLevelCacheSize : Uint4B
+0x094 HalReserved : Uint4B
+0x0d4 InterruptMode : Uint4B
+0x0d8 Spare1 : UChar
+0x0dc KernelReserved2 : Uint4B
+0x120 PrcbData : _KPRCB
+0x000 MinorVersion : Uint2B
+0x002 MajorVersion : Uint2B
+0x004 CurrentThread : Ptr32
+0x008 NextThread : Ptr32
+0x00c IdleThread : Ptr32
+0x010 LegacyNumber : UChar
+0x011 NestingLevel : UChar
+0x012 BuildType : Uint2B
+0x014 CpuType : Char
+0x015 CpuID : Char
+0x016 CpuStep : Uint2B
+0x016 CpuStepping : UChar
+0x017 CpuModel : UChar
+0x018 ProcessorState : _KPROCESSOR_STATE
+0x000 ContextFrame : _CONTEXT
+0x000 ContextFlags : Uint4B
+0x004 Dr0 : Uint4B
+0x008 Dr1 : Uint4B
+0x00c Dr2 : Uint4B
+0x010 Dr3 : Uint4B
+0x014 Dr6 : Uint4B
+0x018 Dr7 : Uint4B
+0x01c FloatSave : _FLOATING_SAVE_AREA
+0x000 ControlWord : Uint4B
+0x004 StatusWord : Uint4B
+0x008 TagWord : Uint4B
+0x00c ErrorOffset : Uint4B
+0x010 ErrorSelector : Uint4B
+0x014 DataOffset : Uint4B
+0x018 DataSelector : Uint4B
+0x01c RegisterArea : UChar
+0x06c Cr0NpxState : Uint4B
+0x08c SegGs : Uint4B
+0x090 SegFs : Uint4B
+0x094 SegEs : Uint4B
+0x098 SegDs : Uint4B
+0x09c Edi : Uint4B
+0x0a0 Esi : Uint4B
+0x0a4 Ebx : Uint4B
+0x0a8 Edx : Uint4B
+0x0ac Ecx : Uint4B
+0x0b0 Eax : Uint4B
+0x0b4 Ebp : Uint4B
+0x0b8 Eip : Uint4B
+0x0bc SegCs : Uint4B
+0x0c0 EFlags : Uint4B
+0x0c4 Esp : Uint4B
+0x0c8 SegSs : Uint4B
+0x0cc ExtendedRegisters : UChar
+0x2cc SpecialRegisters : _KSPECIAL_REGISTERS
+0x000 Cr0 : Uint4B
+0x004 Cr2 : Uint4B
+0x008 Cr3 : Uint4B
+0x00c Cr4 : Uint4B
+0x010 KernelDr0 : Uint4B
+0x014 KernelDr1 : Uint4B
+0x018 KernelDr2 : Uint4B
+0x01c KernelDr3 : Uint4B
+0x020 KernelDr6 : Uint4B
+0x024 KernelDr7 : Uint4B
+0x028 Gdtr : _DESCRIPTOR
+0x000 Pad : Uint2B
+0x002 Limit : Uint2B
+0x004 Base : Uint4B
+0x030 Idtr : _DESCRIPTOR
+0x000 Pad : Uint2B
+0x002 Limit : Uint2B
+0x004 Base : Uint4B
+0x038 Tr : Uint2B
+0x03a Ldtr : Uint2B
+0x03c Reserved : Uint4B
+0x338 KernelReserved : Uint4B
+0x378 HalReserved : Uint4B
+0x3b8 CFlushSize : Uint4B
+0x3bc CoresPerPhysicalProcessor : UChar
+0x3bd LogicalProcessorsPerCore : UChar
+0x3be PrcbPad0 : UChar
+0x3c0 MHz : Uint4B
+0x3c4 CpuVendor : UChar
+0x3c5 GroupIndex : UChar
+0x3c6 Group : Uint2B
+0x3c8 GroupSetMember : Uint4B
+0x3cc Number : Uint4B
+0x3d0 PrcbPad1 : UChar
+0x418 LockQueue : _KSPIN_LOCK_QUEUE
+0x000 Next : Ptr32
+0x004 Lock : Ptr32
+0x4a0 NpxThread : Ptr32
+0x4a4 InterruptCount : Uint4B
+0x4a8 KernelTime : Uint4B
+0x4ac UserTime : Uint4B
+0x4b0 DpcTime : Uint4B
+0x4b4 DpcTimeCount : Uint4B
+0x4b8 InterruptTime : Uint4B
+0x4bc AdjustDpcThreshold : Uint4B
+0x4c0 PageColor : Uint4B
+0x4c4 DebuggerSavedIRQL : UChar
+0x4c5 NodeColor : UChar
+0x4c6 PrcbPad20 : UChar
+0x4c8 NodeShiftedColor : Uint4B
+0x4cc ParentNode : Ptr32
+0x4d0 SecondaryColorMask : Uint4B
+0x4d4 DpcTimeLimit : Uint4B
+0x4d8 PrcbPad21 : Uint4B
+0x4e0 CcFastReadNoWait : Uint4B
+0x4e4 CcFastReadWait : Uint4B
+0x4e8 CcFastReadNotPossible : Uint4B
+0x4ec CcCopyReadNoWait : Uint4B
+0x4f0 CcCopyReadWait : Uint4B
+0x4f4 CcCopyReadNoWaitMiss : Uint4B
+0x4f8 MmSpinLockOrdering : Int4B
+0x4fc IoReadOperationCount : Int4B
+0x500 IoWriteOperationCount : Int4B
+0x504 IoOtherOperationCount : Int4B
+0x508 IoReadTransferCount : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x510 IoWriteTransferCount : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x518 IoOtherTransferCount : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x520 CcFastMdlReadNoWait : Uint4B
+0x524 CcFastMdlReadWait : Uint4B
+0x528 CcFastMdlReadNotPossible : Uint4B
+0x52c CcMapDataNoWait : Uint4B
+0x530 CcMapDataWait : Uint4B
+0x534 CcPinMappedDataCount : Uint4B
+0x538 CcPinReadNoWait : Uint4B
+0x53c CcPinReadWait : Uint4B
+0x540 CcMdlReadNoWait : Uint4B
+0x544 CcMdlReadWait : Uint4B
+0x548 CcLazyWriteHotSpots : Uint4B
+0x54c CcLazyWriteIos : Uint4B
+0x550 CcLazyWritePages : Uint4B
+0x554 CcDataFlushes : Uint4B
+0x558 CcDataPages : Uint4B
+0x55c CcLostDelayedWrites : Uint4B
+0x560 CcFastReadResourceMiss : Uint4B
+0x564 CcCopyReadWaitMiss : Uint4B
+0x568 CcFastMdlReadResourceMiss : Uint4B
+0x56c CcMapDataNoWaitMiss : Uint4B
+0x570 CcMapDataWaitMiss : Uint4B
+0x574 CcPinReadNoWaitMiss : Uint4B
+0x578 CcPinReadWaitMiss : Uint4B
+0x57c CcMdlReadNoWaitMiss : Uint4B
+0x580 CcMdlReadWaitMiss : Uint4B
+0x584 CcReadAheadIos : Uint4B
+0x588 KeAlignmentFixupCount : Uint4B
+0x58c KeExceptionDispatchCount : Uint4B
+0x590 KeSystemCalls : Uint4B
+0x594 AvailableTime : Uint4B
+0x598 PrcbPad22 : Uint4B
+0x5a0 PPLookasideList : _PP_LOOKASIDE_LIST
+0x000 P : Ptr32
+0x004 L : Ptr32
+0x620 PPNPagedLookasideList : _GENERAL_LOOKASIDE_POOL
+0x000 ListHead : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x000 SingleListHead : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x008 Depth : Uint2B
+0x00a MaximumDepth : Uint2B
+0x00c TotalAllocates : Uint4B
+0x010 AllocateMisses : Uint4B
+0x010 AllocateHits : Uint4B
+0x014 TotalFrees : Uint4B
+0x018 FreeMisses : Uint4B
+0x018 FreeHits : Uint4B
+0x01c Type :
NonPagedPool = 0n0
PagedPool = 0n1
NonPagedPoolMustSucceed = 0n2
DontUseThisType = 0n3
NonPagedPoolCacheAligned = 0n4
PagedPoolCacheAligned = 0n5
NonPagedPoolCacheAlignedMustS = 0n6
MaxPoolType = 0n7
NonPagedPoolSession = 0n32
PagedPoolSession = 0n33
NonPagedPoolMustSucceedSession = 0n34
DontUseThisTypeSession = 0n35
NonPagedPoolCacheAlignedSession = 0n36
PagedPoolCacheAlignedSession = 0n37
NonPagedPoolCacheAlignedMustSSession = 0n38
+0x020 Tag : Uint4B
+0x024 Size : Uint4B
+0x028 AllocateEx : Ptr32
+0x028 Allocate : Ptr32
+0x02c FreeEx : Ptr32
+0x02c Free : Ptr32
+0x030 ListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x038 LastTotalAllocates : Uint4B
+0x03c LastAllocateMisses : Uint4B
+0x03c LastAllocateHits : Uint4B
+0x040 Future : Uint4B
+0xf20 PPPagedLookasideList : _GENERAL_LOOKASIDE_POOL
+0x000 ListHead : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x000 SingleListHead : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x008 Depth : Uint2B
+0x00a MaximumDepth : Uint2B
+0x00c TotalAllocates : Uint4B
+0x010 AllocateMisses : Uint4B
+0x010 AllocateHits : Uint4B
+0x014 TotalFrees : Uint4B
+0x018 FreeMisses : Uint4B
+0x018 FreeHits : Uint4B
+0x01c Type :
NonPagedPool = 0n0
PagedPool = 0n1
NonPagedPoolMustSucceed = 0n2
DontUseThisType = 0n3
NonPagedPoolCacheAligned = 0n4
PagedPoolCacheAligned = 0n5
NonPagedPoolCacheAlignedMustS = 0n6
MaxPoolType = 0n7
NonPagedPoolSession = 0n32
PagedPoolSession = 0n33
NonPagedPoolMustSucceedSession = 0n34
DontUseThisTypeSession = 0n35
NonPagedPoolCacheAlignedSession = 0n36
PagedPoolCacheAlignedSession = 0n37
NonPagedPoolCacheAlignedMustSSession = 0n38
+0x020 Tag : Uint4B
+0x024 Size : Uint4B
+0x028 AllocateEx : Ptr32
+0x028 Allocate : Ptr32
+0x02c FreeEx : Ptr32
+0x02c Free : Ptr32
+0x030 ListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x038 LastTotalAllocates : Uint4B
+0x03c LastAllocateMisses : Uint4B
+0x03c LastAllocateHits : Uint4B
+0x040 Future : Uint4B
+0x1820 PacketBarrier : Uint4B
+0x1824 ReverseStall : Int4B
+0x1828 IpiFrame : Ptr32
+0x182c PrcbPad3 : UChar
+0x1860 CurrentPacket : Ptr32
+0x186c TargetSet : Uint4B
+0x1870 WorkerRoutine : Ptr32
+0x1874 IpiFrozen : Uint4B
+0x1878 PrcbPad4 : UChar
+0x18a0 RequestSummary : Uint4B
+0x18a4 SignalDone : Ptr32
+0x18a8 PrcbPad50 : UChar
+0x18e0 DpcData : _KDPC_DATA
+0x000 DpcListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 DpcLock : Uint4B
+0x00c DpcQueueDepth : Int4B
+0x010 DpcCount : Uint4B
+0x1908 DpcStack : Ptr32
+0x190c MaximumDpcQueueDepth : Int4B
+0x1910 DpcRequestRate : Uint4B
+0x1914 MinimumDpcRate : Uint4B
+0x1918 DpcLastCount : Uint4B
+0x191c PrcbLock : Uint4B
+0x1920 DpcGate : _KGATE
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x1930 ThreadDpcEnable : UChar
+0x1931 QuantumEnd : UChar
+0x1932 DpcRoutineActive : UChar
+0x1933 IdleSchedule : UChar
+0x1934 DpcRequestSummary : Int4B
+0x1934 DpcRequestSlot : Int2B
+0x1934 NormalDpcState : Int2B
+0x1936 DpcThreadActive : Pos 0, 1 Bit
+0x1936 ThreadDpcState : Int2B
+0x1938 TimerHand : Uint4B
+0x193c LastTick : Uint4B
+0x1940 MasterOffset : Int4B
+0x1944 PrcbPad41 : Uint4B
+0x194c PeriodicCount : Uint4B
+0x1950 PeriodicBias : Uint4B
+0x1958 TickOffset : Uint8B
+0x1960 TimerTable : _KTIMER_TABLE
+0x000 TimerExpiry : Ptr32
+0x040 TimerEntries : _KTIMER_TABLE_ENTRY
+0x000 Lock : Uint4B
+0x004 Entry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 Time : _ULARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 QuadPart : Uint8B
+0x31a0 CallDpc : _KDPC
+0x000 Type : UChar
+0x001 Importance : UChar
+0x002 Number : Uint2B
+0x004 DpcListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x00c DeferredRoutine : Ptr32
+0x010 DeferredContext : Ptr32
+0x014 SystemArgument1 : Ptr32
+0x018 SystemArgument2 : Ptr32
+0x01c DpcData : Ptr32
+0x31c0 ClockKeepAlive : Int4B
+0x31c4 ClockCheckSlot : UChar
+0x31c5 ClockPollCycle : UChar
+0x31c6 PrcbPad6 : UChar
+0x31c8 DpcWatchdogPeriod : Int4B
+0x31cc DpcWatchdogCount : Int4B
+0x31d0 ThreadWatchdogPeriod : Int4B
+0x31d4 ThreadWatchdogCount : Int4B
+0x31d8 KeSpinLockOrdering : Int4B
+0x31dc PrcbPad70 : Uint4B
+0x31e0 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x31e8 WaitLock : Uint4B
+0x31ec ReadySummary : Uint4B
+0x31f0 QueueIndex : Uint4B
+0x31f4 DeferredReadyListHead : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x31f8 StartCycles : Uint8B
+0x3200 CycleTime : Uint8B
+0x3208 HighCycleTime : Uint4B
+0x320c PrcbPad71 : Uint4B
+0x3210 PrcbPad72 : Uint8B
+0x3220 DispatcherReadyListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x3320 ChainedInterruptList : Ptr32
+0x3324 LookasideIrpFloat : Int4B
+0x3328 MmPageFaultCount : Int4B
+0x332c MmCopyOnWriteCount : Int4B
+0x3330 MmTransitionCount : Int4B
+0x3334 MmCacheTransitionCount : Int4B
+0x3338 MmDemandZeroCount : Int4B
+0x333c MmPageReadCount : Int4B
+0x3340 MmPageReadIoCount : Int4B
+0x3344 MmCacheReadCount : Int4B
+0x3348 MmCacheIoCount : Int4B
+0x334c MmDirtyPagesWriteCount : Int4B
+0x3350 MmDirtyWriteIoCount : Int4B
+0x3354 MmMappedPagesWriteCount : Int4B
+0x3358 MmMappedWriteIoCount : Int4B
+0x335c CachedCommit : Uint4B
+0x3360 CachedResidentAvailable : Uint4B
+0x3364 HyperPte : Ptr32
+0x3368 PrcbPad8 : UChar
+0x336c VendorString : UChar
+0x3379 InitialApicId : UChar
+0x337a LogicalProcessorsPerPhysicalProcessor : UChar
+0x337b PrcbPad9 : UChar
+0x3380 FeatureBits : Uint4B
+0x3388 UpdateSignature : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x3390 IsrTime : Uint8B
+0x3398 RuntimeAccumulation : Uint8B
+0x33a0 PowerState : _PROCESSOR_POWER_STATE
+0x000 IdleStates : Ptr32
+0x008 IdleTimeLast : Uint8B
+0x010 IdleTimeTotal : Uint8B
+0x018 IdleTimeEntry : Uint8B
+0x020 IdleAccounting : Ptr32
+0x024 Hypervisor :
ProcHypervisorNone = 0n0
ProcHypervisorPresent = 0n1
ProcHypervisorPower = 0n2
+0x028 PerfHistoryTotal : Uint4B
+0x02c ThermalConstraint : UChar
+0x02d PerfHistoryCount : UChar
+0x02e PerfHistorySlot : UChar
+0x02f Reserved : UChar
+0x030 LastSysTime : Uint4B
+0x034 WmiDispatchPtr : Uint4B
+0x038 WmiInterfaceEnabled : Int4B
+0x040 FFHThrottleStateInfo : _PPM_FFH_THROTTLE_STATE_INFO
+0x000 EnableLogging : UChar
+0x004 MismatchCount : Uint4B
+0x008 Initialized : UChar
+0x010 LastValue : Uint8B
+0x018 LastLogTickCount : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x060 PerfActionDpc : _KDPC
+0x000 Type : UChar
+0x001 Importance : UChar
+0x002 Number : Uint2B
+0x004 DpcListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x00c DeferredRoutine : Ptr32
+0x010 DeferredContext : Ptr32
+0x014 SystemArgument1 : Ptr32
+0x018 SystemArgument2 : Ptr32
+0x01c DpcData : Ptr32
+0x080 PerfActionMask : Int4B
+0x088 IdleCheck : _PROC_IDLE_SNAP
+0x000 Time : Uint8B
+0x008 Idle : Uint8B
+0x098 PerfCheck : _PROC_IDLE_SNAP
+0x000 Time : Uint8B
+0x008 Idle : Uint8B
+0x0a8 Domain : Ptr32
+0x0ac PerfConstraint : Ptr32
+0x0b0 Load : Ptr32
+0x0b4 PerfHistory : Ptr32
+0x0b8 Utility : Uint4B
+0x0bc OverUtilizedHistory : Uint4B
+0x0c0 AffinityCount : Uint4B
+0x0c4 AffinityHistory : Uint4B
+0x3468 DpcWatchdogDpc : _KDPC
+0x000 Type : UChar
+0x001 Importance : UChar
+0x002 Number : Uint2B
+0x004 DpcListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x00c DeferredRoutine : Ptr32
+0x010 DeferredContext : Ptr32
+0x014 SystemArgument1 : Ptr32
+0x018 SystemArgument2 : Ptr32
+0x01c DpcData : Ptr32
+0x3488 DpcWatchdogTimer : _KTIMER
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 DueTime : _ULARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 QuadPart : Uint8B
+0x018 TimerListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x020 Dpc : Ptr32
+0x024 Period : Uint4B
+0x34b0 WheaInfo : Ptr32
+0x34b4 EtwSupport : Ptr32
+0x34b8 InterruptObjectPool : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x34c0 HypercallPageList : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x34c8 HypercallPageVirtual : Ptr32
+0x34cc VirtualApicAssist : Ptr32
+0x34d0 StatisticsPage : Ptr32
+0x34d4 RateControl : Ptr32
+0x34d8 Cache : _CACHE_DESCRIPTOR
+0x000 Level : UChar
+0x001 Associativity : UChar
+0x002 LineSize : Uint2B
+0x004 Size : Uint4B
+0x008 Type :
CacheUnified = 0n0
CacheInstruction = 0n1
CacheData = 0n2
CacheTrace = 0n3
+0x3514 CacheCount : Uint4B
+0x3518 CacheProcessorMask : Uint4B
+0x352c PackageProcessorSet : _KAFFINITY_EX
+0x000 Count : Uint2B
+0x002 Size : Uint2B
+0x004 Reserved : Uint4B
+0x008 Bitmap : Uint4B
+0x3544 PrcbPad91 : Uint4B
+0x357c CoreProcessorSet : Uint4B
+0x3580 TimerExpirationDpc : _KDPC
+0x000 Type : UChar
+0x001 Importance : UChar
+0x002 Number : Uint2B
+0x004 DpcListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x00c DeferredRoutine : Ptr32
+0x010 DeferredContext : Ptr32
+0x014 SystemArgument1 : Ptr32
+0x018 SystemArgument2 : Ptr32
+0x01c DpcData : Ptr32
+0x35a0 SpinLockAcquireCount : Uint4B
+0x35a4 SpinLockContentionCount : Uint4B
+0x35a8 SpinLockSpinCount : Uint4B
+0x35ac IpiSendRequestBroadcastCount : Uint4B
+0x35b0 IpiSendRequestRoutineCount : Uint4B
+0x35b4 IpiSendSoftwareInterruptCount : Uint4B
+0x35b8 ExInitializeResourceCount : Uint4B
+0x35bc ExReInitializeResourceCount : Uint4B
+0x35c0 ExDeleteResourceCount : Uint4B
+0x35c4 ExecutiveResourceAcquiresCount : Uint4B
+0x35c8 ExecutiveResourceContentionsCount : Uint4B
+0x35cc ExecutiveResourceReleaseExclusiveCount : Uint4B
+0x35d0 ExecutiveResourceReleaseSharedCount : Uint4B
+0x35d4 ExecutiveResourceConvertsCount : Uint4B
+0x35d8 ExAcqResExclusiveAttempts : Uint4B
+0x35dc ExAcqResExclusiveAcquiresExclusive : Uint4B
+0x35e0 ExAcqResExclusiveAcquiresExclusiveRecursive : Uint4B
+0x35e4 ExAcqResExclusiveWaits : Uint4B
+0x35e8 ExAcqResExclusiveNotAcquires : Uint4B
+0x35ec ExAcqResSharedAttempts : Uint4B
+0x35f0 ExAcqResSharedAcquiresExclusive : Uint4B
+0x35f4 ExAcqResSharedAcquiresShared : Uint4B
+0x35f8 ExAcqResSharedAcquiresSharedRecursive : Uint4B
+0x35fc ExAcqResSharedWaits : Uint4B
+0x3600 ExAcqResSharedNotAcquires : Uint4B
+0x3604 ExAcqResSharedStarveExclusiveAttempts : Uint4B
+0x3608 ExAcqResSharedStarveExclusiveAcquiresExclusive : Uint4B
+0x360c ExAcqResSharedStarveExclusiveAcquiresShared : Uint4B
+0x3610 ExAcqResSharedStarveExclusiveAcquiresSharedRecursive : Uint4B
+0x3614 ExAcqResSharedStarveExclusiveWaits : Uint4B
+0x3618 ExAcqResSharedStarveExclusiveNotAcquires : Uint4B
+0x361c ExAcqResSharedWaitForExclusiveAttempts : Uint4B
+0x3620 ExAcqResSharedWaitForExclusiveAcquiresExclusive : Uint4B
+0x3624 ExAcqResSharedWaitForExclusiveAcquiresShared : Uint4B
+0x3628 ExAcqResSharedWaitForExclusiveAcquiresSharedRecursive : Uint4B
+0x362c ExAcqResSharedWaitForExclusiveWaits : Uint4B
+0x3630 ExAcqResSharedWaitForExclusiveNotAcquires : Uint4B
+0x3634 ExSetResOwnerPointerExclusive : Uint4B
+0x3638 ExSetResOwnerPointerSharedNew : Uint4B
+0x363c ExSetResOwnerPointerSharedOld : Uint4B
+0x3640 ExTryToAcqExclusiveAttempts : Uint4B
+0x3644 ExTryToAcqExclusiveAcquires : Uint4B
+0x3648 ExBoostExclusiveOwner : Uint4B
+0x364c ExBoostSharedOwners : Uint4B
+0x3650 ExEtwSynchTrackingNotificationsCount : Uint4B
+0x3654 ExEtwSynchTrackingNotificationsAccountedCount : Uint4B
+0x3658 Context : Ptr32
+0x365c ContextFlags : Uint4B
+0x3660 ExtendedState : Ptr32
+0x000 MinorVersion : Uint2B
+0x002 MajorVersion : Uint2B
+0x004 CurrentThread : Ptr32
+0x008 NextThread : Ptr32
+0x00c IdleThread : Ptr32
+0x010 LegacyNumber : UChar
+0x011 NestingLevel : UChar
+0x012 BuildType : Uint2B
+0x014 CpuType : Char
+0x015 CpuID : Char
+0x016 CpuStep : Uint2B
+0x016 CpuStepping : UChar
+0x017 CpuModel : UChar
+0x018 ProcessorState : _KPROCESSOR_STATE
+0x000 ContextFrame : _CONTEXT
+0x000 ContextFlags : Uint4B
+0x004 Dr0 : Uint4B
+0x008 Dr1 : Uint4B
+0x00c Dr2 : Uint4B
+0x010 Dr3 : Uint4B
+0x014 Dr6 : Uint4B
+0x018 Dr7 : Uint4B
+0x01c FloatSave : _FLOATING_SAVE_AREA
+0x000 ControlWord : Uint4B
+0x004 StatusWord : Uint4B
+0x008 TagWord : Uint4B
+0x00c ErrorOffset : Uint4B
+0x010 ErrorSelector : Uint4B
+0x014 DataOffset : Uint4B
+0x018 DataSelector : Uint4B
+0x01c RegisterArea : UChar
+0x06c Cr0NpxState : Uint4B
+0x08c SegGs : Uint4B
+0x090 SegFs : Uint4B
+0x094 SegEs : Uint4B
+0x098 SegDs : Uint4B
+0x09c Edi : Uint4B
+0x0a0 Esi : Uint4B
+0x0a4 Ebx : Uint4B
+0x0a8 Edx : Uint4B
+0x0ac Ecx : Uint4B
+0x0b0 Eax : Uint4B
+0x0b4 Ebp : Uint4B
+0x0b8 Eip : Uint4B
+0x0bc SegCs : Uint4B
+0x0c0 EFlags : Uint4B
+0x0c4 Esp : Uint4B
+0x0c8 SegSs : Uint4B
+0x0cc ExtendedRegisters : UChar
+0x2cc SpecialRegisters : _KSPECIAL_REGISTERS
+0x000 Cr0 : Uint4B
+0x004 Cr2 : Uint4B
+0x008 Cr3 : Uint4B
+0x00c Cr4 : Uint4B
+0x010 KernelDr0 : Uint4B
+0x014 KernelDr1 : Uint4B
+0x018 KernelDr2 : Uint4B
+0x01c KernelDr3 : Uint4B
+0x020 KernelDr6 : Uint4B
+0x024 KernelDr7 : Uint4B
+0x028 Gdtr : _DESCRIPTOR
+0x000 Pad : Uint2B
+0x002 Limit : Uint2B
+0x004 Base : Uint4B
+0x030 Idtr : _DESCRIPTOR
+0x000 Pad : Uint2B
+0x002 Limit : Uint2B
+0x004 Base : Uint4B
+0x038 Tr : Uint2B
+0x03a Ldtr : Uint2B
+0x03c Reserved : Uint4B
+0x338 KernelReserved : Uint4B
+0x378 HalReserved : Uint4B
+0x3b8 CFlushSize : Uint4B
+0x3bc CoresPerPhysicalProcessor : UChar
+0x3bd LogicalProcessorsPerCore : UChar
+0x3be PrcbPad0 : UChar
+0x3c0 MHz : Uint4B
+0x3c4 CpuVendor : UChar
+0x3c5 GroupIndex : UChar
+0x3c6 Group : Uint2B
+0x3c8 GroupSetMember : Uint4B
+0x3cc Number : Uint4B
+0x3d0 PrcbPad1 : UChar
+0x418 LockQueue : _KSPIN_LOCK_QUEUE
+0x000 Next : Ptr32
+0x004 Lock : Ptr32
+0x4a0 NpxThread : Ptr32
+0x4a4 InterruptCount : Uint4B
+0x4a8 KernelTime : Uint4B
+0x4ac UserTime : Uint4B
+0x4b0 DpcTime : Uint4B
+0x4b4 DpcTimeCount : Uint4B
+0x4b8 InterruptTime : Uint4B
+0x4bc AdjustDpcThreshold : Uint4B
+0x4c0 PageColor : Uint4B
+0x4c4 DebuggerSavedIRQL : UChar
+0x4c5 NodeColor : UChar
+0x4c6 PrcbPad20 : UChar
+0x4c8 NodeShiftedColor : Uint4B
+0x4cc ParentNode : Ptr32
+0x4d0 SecondaryColorMask : Uint4B
+0x4d4 DpcTimeLimit : Uint4B
+0x4d8 PrcbPad21 : Uint4B
+0x4e0 CcFastReadNoWait : Uint4B
+0x4e4 CcFastReadWait : Uint4B
+0x4e8 CcFastReadNotPossible : Uint4B
+0x4ec CcCopyReadNoWait : Uint4B
+0x4f0 CcCopyReadWait : Uint4B
+0x4f4 CcCopyReadNoWaitMiss : Uint4B
+0x4f8 MmSpinLockOrdering : Int4B
+0x4fc IoReadOperationCount : Int4B
+0x500 IoWriteOperationCount : Int4B
+0x504 IoOtherOperationCount : Int4B
+0x508 IoReadTransferCount : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x510 IoWriteTransferCount : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x518 IoOtherTransferCount : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x520 CcFastMdlReadNoWait : Uint4B
+0x524 CcFastMdlReadWait : Uint4B
+0x528 CcFastMdlReadNotPossible : Uint4B
+0x52c CcMapDataNoWait : Uint4B
+0x530 CcMapDataWait : Uint4B
+0x534 CcPinMappedDataCount : Uint4B
+0x538 CcPinReadNoWait : Uint4B
+0x53c CcPinReadWait : Uint4B
+0x540 CcMdlReadNoWait : Uint4B
+0x544 CcMdlReadWait : Uint4B
+0x548 CcLazyWriteHotSpots : Uint4B
+0x54c CcLazyWriteIos : Uint4B
+0x550 CcLazyWritePages : Uint4B
+0x554 CcDataFlushes : Uint4B
+0x558 CcDataPages : Uint4B
+0x55c CcLostDelayedWrites : Uint4B
+0x560 CcFastReadResourceMiss : Uint4B
+0x564 CcCopyReadWaitMiss : Uint4B
+0x568 CcFastMdlReadResourceMiss : Uint4B
+0x56c CcMapDataNoWaitMiss : Uint4B
+0x570 CcMapDataWaitMiss : Uint4B
+0x574 CcPinReadNoWaitMiss : Uint4B
+0x578 CcPinReadWaitMiss : Uint4B
+0x57c CcMdlReadNoWaitMiss : Uint4B
+0x580 CcMdlReadWaitMiss : Uint4B
+0x584 CcReadAheadIos : Uint4B
+0x588 KeAlignmentFixupCount : Uint4B
+0x58c KeExceptionDispatchCount : Uint4B
+0x590 KeSystemCalls : Uint4B
+0x594 AvailableTime : Uint4B
+0x598 PrcbPad22 : Uint4B
+0x5a0 PPLookasideList : _PP_LOOKASIDE_LIST
+0x000 P : Ptr32
+0x004 L : Ptr32
+0x620 PPNPagedLookasideList : _GENERAL_LOOKASIDE_POOL
+0x000 ListHead : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x000 SingleListHead : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x008 Depth : Uint2B
+0x00a MaximumDepth : Uint2B
+0x00c TotalAllocates : Uint4B
+0x010 AllocateMisses : Uint4B
+0x010 AllocateHits : Uint4B
+0x014 TotalFrees : Uint4B
+0x018 FreeMisses : Uint4B
+0x018 FreeHits : Uint4B
+0x01c Type :
NonPagedPool = 0n0
PagedPool = 0n1
NonPagedPoolMustSucceed = 0n2
DontUseThisType = 0n3
NonPagedPoolCacheAligned = 0n4
PagedPoolCacheAligned = 0n5
NonPagedPoolCacheAlignedMustS = 0n6
MaxPoolType = 0n7
NonPagedPoolSession = 0n32
PagedPoolSession = 0n33
NonPagedPoolMustSucceedSession = 0n34
DontUseThisTypeSession = 0n35
NonPagedPoolCacheAlignedSession = 0n36
PagedPoolCacheAlignedSession = 0n37
NonPagedPoolCacheAlignedMustSSession = 0n38
+0x020 Tag : Uint4B
+0x024 Size : Uint4B
+0x028 AllocateEx : Ptr32
+0x028 Allocate : Ptr32
+0x02c FreeEx : Ptr32
+0x02c Free : Ptr32
+0x030 ListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x038 LastTotalAllocates : Uint4B
+0x03c LastAllocateMisses : Uint4B
+0x03c LastAllocateHits : Uint4B
+0x040 Future : Uint4B
+0xf20 PPPagedLookasideList : _GENERAL_LOOKASIDE_POOL
+0x000 ListHead : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x000 SingleListHead : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x008 Depth : Uint2B
+0x00a MaximumDepth : Uint2B
+0x00c TotalAllocates : Uint4B
+0x010 AllocateMisses : Uint4B
+0x010 AllocateHits : Uint4B
+0x014 TotalFrees : Uint4B
+0x018 FreeMisses : Uint4B
+0x018 FreeHits : Uint4B
+0x01c Type :
NonPagedPool = 0n0
PagedPool = 0n1
NonPagedPoolMustSucceed = 0n2
DontUseThisType = 0n3
NonPagedPoolCacheAligned = 0n4
PagedPoolCacheAligned = 0n5
NonPagedPoolCacheAlignedMustS = 0n6
MaxPoolType = 0n7
NonPagedPoolSession = 0n32
PagedPoolSession = 0n33
NonPagedPoolMustSucceedSession = 0n34
DontUseThisTypeSession = 0n35
NonPagedPoolCacheAlignedSession = 0n36
PagedPoolCacheAlignedSession = 0n37
NonPagedPoolCacheAlignedMustSSession = 0n38
+0x020 Tag : Uint4B
+0x024 Size : Uint4B
+0x028 AllocateEx : Ptr32
+0x028 Allocate : Ptr32
+0x02c FreeEx : Ptr32
+0x02c Free : Ptr32
+0x030 ListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x038 LastTotalAllocates : Uint4B
+0x03c LastAllocateMisses : Uint4B
+0x03c LastAllocateHits : Uint4B
+0x040 Future : Uint4B
+0x1820 PacketBarrier : Uint4B
+0x1824 ReverseStall : Int4B
+0x1828 IpiFrame : Ptr32
+0x182c PrcbPad3 : UChar
+0x1860 CurrentPacket : Ptr32
+0x186c TargetSet : Uint4B
+0x1870 WorkerRoutine : Ptr32
+0x1874 IpiFrozen : Uint4B
+0x1878 PrcbPad4 : UChar
+0x18a0 RequestSummary : Uint4B
+0x18a4 SignalDone : Ptr32
+0x18a8 PrcbPad50 : UChar
+0x18e0 DpcData : _KDPC_DATA
+0x000 DpcListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 DpcLock : Uint4B
+0x00c DpcQueueDepth : Int4B
+0x010 DpcCount : Uint4B
+0x1908 DpcStack : Ptr32
+0x190c MaximumDpcQueueDepth : Int4B
+0x1910 DpcRequestRate : Uint4B
+0x1914 MinimumDpcRate : Uint4B
+0x1918 DpcLastCount : Uint4B
+0x191c PrcbLock : Uint4B
+0x1920 DpcGate : _KGATE
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x1930 ThreadDpcEnable : UChar
+0x1931 QuantumEnd : UChar
+0x1932 DpcRoutineActive : UChar
+0x1933 IdleSchedule : UChar
+0x1934 DpcRequestSummary : Int4B
+0x1934 DpcRequestSlot : Int2B
+0x1934 NormalDpcState : Int2B
+0x1936 DpcThreadActive : Pos 0, 1 Bit
+0x1936 ThreadDpcState : Int2B
+0x1938 TimerHand : Uint4B
+0x193c LastTick : Uint4B
+0x1940 MasterOffset : Int4B
+0x1944 PrcbPad41 : Uint4B
+0x194c PeriodicCount : Uint4B
+0x1950 PeriodicBias : Uint4B
+0x1958 TickOffset : Uint8B
+0x1960 TimerTable : _KTIMER_TABLE
+0x000 TimerExpiry : Ptr32
+0x040 TimerEntries : _KTIMER_TABLE_ENTRY
+0x000 Lock : Uint4B
+0x004 Entry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 Time : _ULARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 QuadPart : Uint8B
+0x31a0 CallDpc : _KDPC
+0x000 Type : UChar
+0x001 Importance : UChar
+0x002 Number : Uint2B
+0x004 DpcListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x00c DeferredRoutine : Ptr32
+0x010 DeferredContext : Ptr32
+0x014 SystemArgument1 : Ptr32
+0x018 SystemArgument2 : Ptr32
+0x01c DpcData : Ptr32
+0x31c0 ClockKeepAlive : Int4B
+0x31c4 ClockCheckSlot : UChar
+0x31c5 ClockPollCycle : UChar
+0x31c6 PrcbPad6 : UChar
+0x31c8 DpcWatchdogPeriod : Int4B
+0x31cc DpcWatchdogCount : Int4B
+0x31d0 ThreadWatchdogPeriod : Int4B
+0x31d4 ThreadWatchdogCount : Int4B
+0x31d8 KeSpinLockOrdering : Int4B
+0x31dc PrcbPad70 : Uint4B
+0x31e0 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x31e8 WaitLock : Uint4B
+0x31ec ReadySummary : Uint4B
+0x31f0 QueueIndex : Uint4B
+0x31f4 DeferredReadyListHead : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x31f8 StartCycles : Uint8B
+0x3200 CycleTime : Uint8B
+0x3208 HighCycleTime : Uint4B
+0x320c PrcbPad71 : Uint4B
+0x3210 PrcbPad72 : Uint8B
+0x3220 DispatcherReadyListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x3320 ChainedInterruptList : Ptr32
+0x3324 LookasideIrpFloat : Int4B
+0x3328 MmPageFaultCount : Int4B
+0x332c MmCopyOnWriteCount : Int4B
+0x3330 MmTransitionCount : Int4B
+0x3334 MmCacheTransitionCount : Int4B
+0x3338 MmDemandZeroCount : Int4B
+0x333c MmPageReadCount : Int4B
+0x3340 MmPageReadIoCount : Int4B
+0x3344 MmCacheReadCount : Int4B
+0x3348 MmCacheIoCount : Int4B
+0x334c MmDirtyPagesWriteCount : Int4B
+0x3350 MmDirtyWriteIoCount : Int4B
+0x3354 MmMappedPagesWriteCount : Int4B
+0x3358 MmMappedWriteIoCount : Int4B
+0x335c CachedCommit : Uint4B
+0x3360 CachedResidentAvailable : Uint4B
+0x3364 HyperPte : Ptr32
+0x3368 PrcbPad8 : UChar
+0x336c VendorString : UChar
+0x3379 InitialApicId : UChar
+0x337a LogicalProcessorsPerPhysicalProcessor : UChar
+0x337b PrcbPad9 : UChar
+0x3380 FeatureBits : Uint4B
+0x3388 UpdateSignature : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x3390 IsrTime : Uint8B
+0x3398 RuntimeAccumulation : Uint8B
+0x33a0 PowerState : _PROCESSOR_POWER_STATE
+0x000 IdleStates : Ptr32
+0x008 IdleTimeLast : Uint8B
+0x010 IdleTimeTotal : Uint8B
+0x018 IdleTimeEntry : Uint8B
+0x020 IdleAccounting : Ptr32
+0x024 Hypervisor :
ProcHypervisorNone = 0n0
ProcHypervisorPresent = 0n1
ProcHypervisorPower = 0n2
+0x028 PerfHistoryTotal : Uint4B
+0x02c ThermalConstraint : UChar
+0x02d PerfHistoryCount : UChar
+0x02e PerfHistorySlot : UChar
+0x02f Reserved : UChar
+0x030 LastSysTime : Uint4B
+0x034 WmiDispatchPtr : Uint4B
+0x038 WmiInterfaceEnabled : Int4B
+0x040 FFHThrottleStateInfo : _PPM_FFH_THROTTLE_STATE_INFO
+0x000 EnableLogging : UChar
+0x004 MismatchCount : Uint4B
+0x008 Initialized : UChar
+0x010 LastValue : Uint8B
+0x018 LastLogTickCount : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x060 PerfActionDpc : _KDPC
+0x000 Type : UChar
+0x001 Importance : UChar
+0x002 Number : Uint2B
+0x004 DpcListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x00c DeferredRoutine : Ptr32
+0x010 DeferredContext : Ptr32
+0x014 SystemArgument1 : Ptr32
+0x018 SystemArgument2 : Ptr32
+0x01c DpcData : Ptr32
+0x080 PerfActionMask : Int4B
+0x088 IdleCheck : _PROC_IDLE_SNAP
+0x000 Time : Uint8B
+0x008 Idle : Uint8B
+0x098 PerfCheck : _PROC_IDLE_SNAP
+0x000 Time : Uint8B
+0x008 Idle : Uint8B
+0x0a8 Domain : Ptr32
+0x0ac PerfConstraint : Ptr32
+0x0b0 Load : Ptr32
+0x0b4 PerfHistory : Ptr32
+0x0b8 Utility : Uint4B
+0x0bc OverUtilizedHistory : Uint4B
+0x0c0 AffinityCount : Uint4B
+0x0c4 AffinityHistory : Uint4B
+0x3468 DpcWatchdogDpc : _KDPC
+0x000 Type : UChar
+0x001 Importance : UChar
+0x002 Number : Uint2B
+0x004 DpcListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x00c DeferredRoutine : Ptr32
+0x010 DeferredContext : Ptr32
+0x014 SystemArgument1 : Ptr32
+0x018 SystemArgument2 : Ptr32
+0x01c DpcData : Ptr32
+0x3488 DpcWatchdogTimer : _KTIMER
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 DueTime : _ULARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 QuadPart : Uint8B
+0x018 TimerListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x020 Dpc : Ptr32
+0x024 Period : Uint4B
+0x34b0 WheaInfo : Ptr32
+0x34b4 EtwSupport : Ptr32
+0x34b8 InterruptObjectPool : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x34c0 HypercallPageList : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x34c8 HypercallPageVirtual : Ptr32
+0x34cc VirtualApicAssist : Ptr32
+0x34d0 StatisticsPage : Ptr32
+0x34d4 RateControl : Ptr32
+0x34d8 Cache : _CACHE_DESCRIPTOR
+0x000 Level : UChar
+0x001 Associativity : UChar
+0x002 LineSize : Uint2B
+0x004 Size : Uint4B
+0x008 Type :
CacheUnified = 0n0
CacheInstruction = 0n1
CacheData = 0n2
CacheTrace = 0n3
+0x3514 CacheCount : Uint4B
+0x3518 CacheProcessorMask : Uint4B
+0x352c PackageProcessorSet : _KAFFINITY_EX
+0x000 Count : Uint2B
+0x002 Size : Uint2B
+0x004 Reserved : Uint4B
+0x008 Bitmap : Uint4B
+0x3544 PrcbPad91 : Uint4B
+0x357c CoreProcessorSet : Uint4B
+0x3580 TimerExpirationDpc : _KDPC
+0x000 Type : UChar
+0x001 Importance : UChar
+0x002 Number : Uint2B
+0x004 DpcListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x00c DeferredRoutine : Ptr32
+0x010 DeferredContext : Ptr32
+0x014 SystemArgument1 : Ptr32
+0x018 SystemArgument2 : Ptr32
+0x01c DpcData : Ptr32
+0x35a0 SpinLockAcquireCount : Uint4B
+0x35a4 SpinLockContentionCount : Uint4B
+0x35a8 SpinLockSpinCount : Uint4B
+0x35ac IpiSendRequestBroadcastCount : Uint4B
+0x35b0 IpiSendRequestRoutineCount : Uint4B
+0x35b4 IpiSendSoftwareInterruptCount : Uint4B
+0x35b8 ExInitializeResourceCount : Uint4B
+0x35bc ExReInitializeResourceCount : Uint4B
+0x35c0 ExDeleteResourceCount : Uint4B
+0x35c4 ExecutiveResourceAcquiresCount : Uint4B
+0x35c8 ExecutiveResourceContentionsCount : Uint4B
+0x35cc ExecutiveResourceReleaseExclusiveCount : Uint4B
+0x35d0 ExecutiveResourceReleaseSharedCount : Uint4B
+0x35d4 ExecutiveResourceConvertsCount : Uint4B
+0x35d8 ExAcqResExclusiveAttempts : Uint4B
+0x35dc ExAcqResExclusiveAcquiresExclusive : Uint4B
+0x35e0 ExAcqResExclusiveAcquiresExclusiveRecursive : Uint4B
+0x35e4 ExAcqResExclusiveWaits : Uint4B
+0x35e8 ExAcqResExclusiveNotAcquires : Uint4B
+0x35ec ExAcqResSharedAttempts : Uint4B
+0x35f0 ExAcqResSharedAcquiresExclusive : Uint4B
+0x35f4 ExAcqResSharedAcquiresShared : Uint4B
+0x35f8 ExAcqResSharedAcquiresSharedRecursive : Uint4B
+0x35fc ExAcqResSharedWaits : Uint4B
+0x3600 ExAcqResSharedNotAcquires : Uint4B
+0x3604 ExAcqResSharedStarveExclusiveAttempts : Uint4B
+0x3608 ExAcqResSharedStarveExclusiveAcquiresExclusive : Uint4B
+0x360c ExAcqResSharedStarveExclusiveAcquiresShared : Uint4B
+0x3610 ExAcqResSharedStarveExclusiveAcquiresSharedRecursive : Uint4B
+0x3614 ExAcqResSharedStarveExclusiveWaits : Uint4B
+0x3618 ExAcqResSharedStarveExclusiveNotAcquires : Uint4B
+0x361c ExAcqResSharedWaitForExclusiveAttempts : Uint4B
+0x3620 ExAcqResSharedWaitForExclusiveAcquiresExclusive : Uint4B
+0x3624 ExAcqResSharedWaitForExclusiveAcquiresShared : Uint4B
+0x3628 ExAcqResSharedWaitForExclusiveAcquiresSharedRecursive : Uint4B
+0x362c ExAcqResSharedWaitForExclusiveWaits : Uint4B
+0x3630 ExAcqResSharedWaitForExclusiveNotAcquires : Uint4B
+0x3634 ExSetResOwnerPointerExclusive : Uint4B
+0x3638 ExSetResOwnerPointerSharedNew : Uint4B
+0x363c ExSetResOwnerPointerSharedOld : Uint4B
+0x3640 ExTryToAcqExclusiveAttempts : Uint4B
+0x3644 ExTryToAcqExclusiveAcquires : Uint4B
+0x3648 ExBoostExclusiveOwner : Uint4B
+0x364c ExBoostSharedOwners : Uint4B
+0x3650 ExEtwSynchTrackingNotificationsCount : Uint4B
+0x3654 ExEtwSynchTrackingNotificationsAccountedCount : Uint4B
+0x3658 Context : Ptr32
+0x365c ContextFlags : Uint4B
+0x3660 ExtendedState : Ptr32
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 ProfileListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x018 DirectoryTableBase : Uint4B
+0x01c LdtDescriptor : _KGDTENTRY
+0x000 LimitLow : Uint2B
+0x002 BaseLow : Uint2B
+0x004 HighWord : <unnamed-tag>
+0x000 Bytes : <unnamed-tag>
+0x000 BaseMid : UChar
+0x001 Flags1 : UChar
+0x002 Flags2 : UChar
+0x003 BaseHi : UChar
+0x000 Bits : <unnamed-tag>
+0x000 BaseMid : Pos 0, 8 Bits
+0x000 Type : Pos 8, 5 Bits
+0x000 Dpl : Pos 13, 2 Bits
+0x000 Pres : Pos 15, 1 Bit
+0x000 LimitHi : Pos 16, 4 Bits
+0x000 Sys : Pos 20, 1 Bit
+0x000 Reserved_0 : Pos 21, 1 Bit
+0x000 Default_Big : Pos 22, 1 Bit
+0x000 Granularity : Pos 23, 1 Bit
+0x000 BaseHi : Pos 24, 8 Bits
+0x024 Int21Descriptor : _KIDTENTRY
+0x000 Offset : Uint2B
+0x002 Selector : Uint2B
+0x004 Access : Uint2B
+0x006 ExtendedOffset : Uint2B
+0x02c ThreadListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x034 ProcessLock : Uint4B
+0x038 Affinity : _KAFFINITY_EX
+0x000 Count : Uint2B
+0x002 Size : Uint2B
+0x004 Reserved : Uint4B
+0x008 Bitmap : Uint4B
+0x050 ReadyListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x058 SwapListEntry : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x05c ActiveProcessors : _KAFFINITY_EX
+0x000 Count : Uint2B
+0x002 Size : Uint2B
+0x004 Reserved : Uint4B
+0x008 Bitmap : Uint4B
+0x074 AutoAlignment : Pos 0, 1 Bit
+0x074 DisableBoost : Pos 1, 1 Bit
+0x074 DisableQuantum : Pos 2, 1 Bit
+0x074 ActiveGroupsMask : Pos 3, 4 Bits
+0x074 ReservedFlags : Pos 7, 25 Bits
+0x074 ProcessFlags : Int4B
+0x078 BasePriority : Char
+0x079 QuantumReset : Char
+0x07a Visited : UChar
+0x07b Unused3 : UChar
+0x07c ThreadSeed : Uint4B
+0x08c IdealNode : Uint2B
+0x094 IdealGlobalNode : Uint2B
+0x096 Flags : _KEXECUTE_OPTIONS
+0x000 ExecuteDisable : Pos 0, 1 Bit
+0x000 ExecuteEnable : Pos 1, 1 Bit
+0x000 DisableThunkEmulation : Pos 2, 1 Bit
+0x000 Permanent : Pos 3, 1 Bit
+0x000 ExecuteDispatchEnable : Pos 4, 1 Bit
+0x000 ImageDispatchEnable : Pos 5, 1 Bit
+0x000 DisableExceptionChainValidation : Pos 6, 1 Bit
+0x000 Spare : Pos 7, 1 Bit
+0x000 ExecuteOptions : UChar
+0x097 Unused1 : UChar
+0x098 IopmOffset : Uint2B
+0x09c Unused4 : Uint4B
+0x0a0 StackCount : _KSTACK_COUNT
+0x000 Value : Int4B
+0x000 State : Pos 0, 3 Bits
+0x000 StackCount : Pos 3, 29 Bits
+0x0a4 ProcessListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x0b0 CycleTime : Uint8B
+0x0b8 KernelTime : Uint4B
+0x0bc UserTime : Uint4B
+0x0c0 VdmTrapcHandler : Ptr32
+0x000 ContextFrame : _CONTEXT
+0x000 ContextFlags : Uint4B
+0x004 Dr0 : Uint4B
+0x008 Dr1 : Uint4B
+0x00c Dr2 : Uint4B
+0x010 Dr3 : Uint4B
+0x014 Dr6 : Uint4B
+0x018 Dr7 : Uint4B
+0x01c FloatSave : _FLOATING_SAVE_AREA
+0x000 ControlWord : Uint4B
+0x004 StatusWord : Uint4B
+0x008 TagWord : Uint4B
+0x00c ErrorOffset : Uint4B
+0x010 ErrorSelector : Uint4B
+0x014 DataOffset : Uint4B
+0x018 DataSelector : Uint4B
+0x01c RegisterArea : UChar
+0x06c Cr0NpxState : Uint4B
+0x08c SegGs : Uint4B
+0x090 SegFs : Uint4B
+0x094 SegEs : Uint4B
+0x098 SegDs : Uint4B
+0x09c Edi : Uint4B
+0x0a0 Esi : Uint4B
+0x0a4 Ebx : Uint4B
+0x0a8 Edx : Uint4B
+0x0ac Ecx : Uint4B
+0x0b0 Eax : Uint4B
+0x0b4 Ebp : Uint4B
+0x0b8 Eip : Uint4B
+0x0bc SegCs : Uint4B
+0x0c0 EFlags : Uint4B
+0x0c4 Esp : Uint4B
+0x0c8 SegSs : Uint4B
+0x0cc ExtendedRegisters : UChar
+0x2cc SpecialRegisters : _KSPECIAL_REGISTERS
+0x000 Cr0 : Uint4B
+0x004 Cr2 : Uint4B
+0x008 Cr3 : Uint4B
+0x00c Cr4 : Uint4B
+0x010 KernelDr0 : Uint4B
+0x014 KernelDr1 : Uint4B
+0x018 KernelDr2 : Uint4B
+0x01c KernelDr3 : Uint4B
+0x020 KernelDr6 : Uint4B
+0x024 KernelDr7 : Uint4B
+0x028 Gdtr : _DESCRIPTOR
+0x000 Pad : Uint2B
+0x002 Limit : Uint2B
+0x004 Base : Uint4B
+0x030 Idtr : _DESCRIPTOR
+0x000 Pad : Uint2B
+0x002 Limit : Uint2B
+0x004 Base : Uint4B
+0x038 Tr : Uint2B
+0x03a Ldtr : Uint2B
+0x03c Reserved : Uint4B
ProcessInMemory = 0n0 ProcessOutOfMemory = 0n1 ProcessInTransition = 0n2 ProcessOutTransition = 0n3 ProcessInSwap = 0n4 ProcessOutSwap = 0n5 ProcessAllSwapStates = 0n6
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 EntryListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x018 CurrentCount : Uint4B
+0x01c MaximumCount : Uint4B
+0x020 ThreadListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 Limit : Int4B
+0x000 Cr0 : Uint4B
+0x004 Cr2 : Uint4B
+0x008 Cr3 : Uint4B
+0x00c Cr4 : Uint4B
+0x010 KernelDr0 : Uint4B
+0x014 KernelDr1 : Uint4B
+0x018 KernelDr2 : Uint4B
+0x01c KernelDr3 : Uint4B
+0x020 KernelDr6 : Uint4B
+0x024 KernelDr7 : Uint4B
+0x028 Gdtr : _DESCRIPTOR
+0x000 Pad : Uint2B
+0x002 Limit : Uint2B
+0x004 Base : Uint4B
+0x030 Idtr : _DESCRIPTOR
+0x000 Pad : Uint2B
+0x002 Limit : Uint2B
+0x004 Base : Uint4B
+0x038 Tr : Uint2B
+0x03a Ldtr : Uint2B
+0x03c Reserved : Uint4B
LockQueueUnusedSpare0 = 0n0 LockQueueExpansionLock = 0n1 LockQueueUnusedSpare2 = 0n2 LockQueueSystemSpaceLock = 0n3 LockQueueVacbLock = 0n4 LockQueueMasterLock = 0n5 LockQueueNonPagedPoolLock = 0n6 LockQueueIoCancelLock = 0n7 LockQueueWorkQueueLock = 0n8 LockQueueIoVpbLock = 0n9 LockQueueIoDatabaseLock = 0n10 LockQueueIoCompletionLock = 0n11 LockQueueNtfsStructLock = 0n12 LockQueueAfdWorkQueueLock = 0n13 LockQueueBcbLock = 0n14 LockQueueMmNonPagedPoolLock = 0n15 LockQueueUnusedSpare16 = 0n16 LockQueueMaximumLock = 0n17
+0x000 Value : Int4B +0x000 State : Pos 0, 3 Bits +0x000 StackCount : Pos 3, 29 Bits
+0x000 LowPart : Uint4B +0x004 High1Time : Int4B +0x008 High2Time : Int4B
+0x000 LowPart : Uint4B +0x004 High1Time : Int4B +0x008 High2Time : Int4B
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 CycleTime : Uint8B
+0x018 HighCycleTime : Uint4B
+0x020 QuantumTarget : Uint8B
+0x028 InitialStack : Ptr32
+0x02c StackLimit : Ptr32
+0x030 KernelStack : Ptr32
+0x034 ThreadLock : Uint4B
+0x038 WaitRegister : _KWAIT_STATUS_REGISTER
+0x000 Flags : UChar
+0x000 State : Pos 0, 2 Bits
+0x000 Affinity : Pos 2, 1 Bit
+0x000 Priority : Pos 3, 1 Bit
+0x000 Apc : Pos 4, 1 Bit
+0x000 UserApc : Pos 5, 1 Bit
+0x000 Alert : Pos 6, 1 Bit
+0x000 Unused : Pos 7, 1 Bit
+0x039 Running : UChar
+0x03a Alerted : UChar
+0x03c KernelStackResident : Pos 0, 1 Bit
+0x03c ReadyTransition : Pos 1, 1 Bit
+0x03c ProcessReadyQueue : Pos 2, 1 Bit
+0x03c WaitNext : Pos 3, 1 Bit
+0x03c SystemAffinityActive : Pos 4, 1 Bit
+0x03c Alertable : Pos 5, 1 Bit
+0x03c GdiFlushActive : Pos 6, 1 Bit
+0x03c UserStackWalkActive : Pos 7, 1 Bit
+0x03c ApcInterruptRequest : Pos 8, 1 Bit
+0x03c ForceDeferSchedule : Pos 9, 1 Bit
+0x03c QuantumEndMigrate : Pos 10, 1 Bit
+0x03c UmsDirectedSwitchEnable : Pos 11, 1 Bit
+0x03c TimerActive : Pos 12, 1 Bit
+0x03c Reserved : Pos 13, 19 Bits
+0x03c MiscFlags : Int4B
+0x040 ApcState : _KAPC_STATE
+0x000 ApcListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 Process : Ptr32
+0x014 KernelApcInProgress : UChar
+0x015 KernelApcPending : UChar
+0x016 UserApcPending : UChar
+0x040 ApcStateFill : UChar
+0x057 Priority : Char
+0x058 NextProcessor : Uint4B
+0x05c DeferredProcessor : Uint4B
+0x060 ApcQueueLock : Uint4B
+0x064 ContextSwitches : Uint4B
+0x068 State : UChar
+0x069 NpxState : Char
+0x06a WaitIrql : UChar
+0x06b WaitMode : Char
+0x06c WaitStatus : Int4B
+0x070 WaitBlockList : Ptr32
+0x074 WaitListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x074 SwapListEntry : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x07c Queue : Ptr32
+0x080 WaitTime : Uint4B
+0x084 KernelApcDisable : Int2B
+0x086 SpecialApcDisable : Int2B
+0x084 CombinedApcDisable : Uint4B
+0x088 Teb : Ptr32
+0x090 Timer : _KTIMER
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 DueTime : _ULARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 QuadPart : Uint8B
+0x018 TimerListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x020 Dpc : Ptr32
+0x024 Period : Uint4B
+0x0b8 AutoAlignment : Pos 0, 1 Bit
+0x0b8 DisableBoost : Pos 1, 1 Bit
+0x0b8 EtwStackTraceApc1Inserted : Pos 2, 1 Bit
+0x0b8 EtwStackTraceApc2Inserted : Pos 3, 1 Bit
+0x0b8 CalloutActive : Pos 4, 1 Bit
+0x0b8 ApcQueueable : Pos 5, 1 Bit
+0x0b8 EnableStackSwap : Pos 6, 1 Bit
+0x0b8 GuiThread : Pos 7, 1 Bit
+0x0b8 UmsPerformingSyscall : Pos 8, 1 Bit
+0x0b8 ReservedFlags : Pos 9, 23 Bits
+0x0b8 ThreadFlags : Int4B
+0x0bc ServiceTable : Ptr32
+0x0c0 WaitBlock : _KWAIT_BLOCK
+0x000 WaitListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 Thread : Ptr32
+0x00c Object : Ptr32
+0x010 NextWaitBlock : Ptr32
+0x014 WaitKey : Uint2B
+0x016 WaitType : UChar
+0x017 BlockState : UChar
+0x120 QueueListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x128 TrapFrame : Ptr32
+0x12c FirstArgument : Ptr32
+0x130 CallbackStack : Ptr32
+0x130 CallbackDepth : Uint4B
+0x134 ApcStateIndex : UChar
+0x135 BasePriority : Char
+0x136 PriorityDecrement : Char
+0x136 ForegroundBoost : Pos 0, 4 Bits
+0x136 UnusualBoost : Pos 4, 4 Bits
+0x137 Preempted : UChar
+0x138 AdjustReason : UChar
+0x139 AdjustIncrement : Char
+0x13a PreviousMode : Char
+0x13b Saturation : Char
+0x13c SystemCallNumber : Uint4B
+0x140 FreezeCount : Uint4B
+0x144 UserAffinity : _GROUP_AFFINITY
+0x000 Mask : Uint4B
+0x004 Group : Uint2B
+0x006 Reserved : Uint2B
+0x150 Process : Ptr32
+0x154 Affinity : _GROUP_AFFINITY
+0x000 Mask : Uint4B
+0x004 Group : Uint2B
+0x006 Reserved : Uint2B
+0x160 IdealProcessor : Uint4B
+0x164 UserIdealProcessor : Uint4B
+0x168 ApcStatePointer : Ptr32
+0x170 SavedApcState : _KAPC_STATE
+0x000 ApcListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 Process : Ptr32
+0x014 KernelApcInProgress : UChar
+0x015 KernelApcPending : UChar
+0x016 UserApcPending : UChar
+0x170 SavedApcStateFill : UChar
+0x187 WaitReason : UChar
+0x188 SuspendCount : Char
+0x189 Spare1 : Char
+0x18a OtherPlatformFill : UChar
+0x18c Win32Thread : Ptr32
+0x190 StackBase : Ptr32
+0x194 SuspendApc : _KAPC
+0x000 Type : UChar
+0x001 SpareByte0 : UChar
+0x002 Size : UChar
+0x003 SpareByte1 : UChar
+0x004 SpareLong0 : Uint4B
+0x008 Thread : Ptr32
+0x00c ApcListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x014 KernelRoutine : Ptr32
+0x018 RundownRoutine : Ptr32
+0x01c NormalRoutine : Ptr32
+0x020 NormalContext : Ptr32
+0x024 SystemArgument1 : Ptr32
+0x028 SystemArgument2 : Ptr32
+0x02c ApcStateIndex : Char
+0x02d ApcMode : Char
+0x02e Inserted : UChar
+0x194 SuspendApcFill0 : UChar
+0x195 ResourceIndex : UChar
+0x194 SuspendApcFill1 : UChar
+0x197 QuantumReset : UChar
+0x194 SuspendApcFill2 : UChar
+0x198 KernelTime : Uint4B
+0x194 SuspendApcFill3 : UChar
+0x1b8 WaitPrcb : Ptr32
+0x194 SuspendApcFill4 : UChar
+0x1bc LegoData : Ptr32
+0x194 SuspendApcFill5 : UChar
+0x1c3 LargeStack : UChar
+0x1c4 UserTime : Uint4B
+0x1c8 SuspendSemaphore : _KSEMAPHORE
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 Limit : Int4B
+0x1c8 SuspendSemaphorefill : UChar
+0x1dc SListFaultCount : Uint4B
+0x1e0 ThreadListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x1e8 MutantListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x1f0 SListFaultAddress : Ptr32
+0x1f4 ThreadCounters : Ptr32
+0x1f8 XStateSave : Ptr32
+0x000 WaitReasonBitMap : Uint8B
+0x008 UserData : Ptr32
+0x00c Flags : Uint4B
+0x010 ContextSwitches : Uint4B
+0x018 CycleTimeBias : Uint8B
+0x020 HardwareCounters : Uint8B
+0x028 HwCounter : _COUNTER_READING
+0x000 Type :
PMCCounter = 0n0
MaxHardwareCounterType = 0n1
+0x004 Index : Uint4B
+0x008 Start : Uint8B
+0x010 Total : Uint8B
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 DueTime : _ULARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 QuadPart : Uint8B
+0x018 TimerListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x020 Dpc : Ptr32
+0x024 Period : Uint4B
+0x000 TimerExpiry : Ptr32
+0x040 TimerEntries : _KTIMER_TABLE_ENTRY
+0x000 Lock : Uint4B
+0x004 Entry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 Time : _ULARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 QuadPart : Uint8B
+0x000 Lock : Uint4B
+0x004 Entry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 Time : _ULARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 QuadPart : Uint8B
+0x000 DbgEbp : Uint4B +0x004 DbgEip : Uint4B +0x008 DbgArgMark : Uint4B +0x00c DbgArgPointer : Uint4B +0x010 TempSegCs : Uint2B +0x012 Logging : UChar +0x013 Reserved : UChar +0x014 TempEsp : Uint4B +0x018 Dr0 : Uint4B +0x01c Dr1 : Uint4B +0x020 Dr2 : Uint4B +0x024 Dr3 : Uint4B +0x028 Dr6 : Uint4B +0x02c Dr7 : Uint4B +0x030 SegGs : Uint4B +0x034 SegEs : Uint4B +0x038 SegDs : Uint4B +0x03c Edx : Uint4B +0x040 Ecx : Uint4B +0x044 Eax : Uint4B +0x048 PreviousPreviousMode : Uint4B +0x04c ExceptionList : Ptr32 +0x050 SegFs : Uint4B +0x054 Edi : Uint4B +0x058 Esi : Uint4B +0x05c Ebx : Uint4B +0x060 Ebp : Uint4B +0x064 ErrCode : Uint4B +0x068 Eip : Uint4B +0x06c SegCs : Uint4B +0x070 EFlags : Uint4B +0x074 HardwareEsp : Uint4B +0x078 HardwareSegSs : Uint4B +0x07c V86Es : Uint4B +0x080 V86Ds : Uint4B +0x084 V86Fs : Uint4B +0x088 V86Gs : Uint4B
+0x000 Backlink : Uint2B
+0x002 Reserved0 : Uint2B
+0x004 Esp0 : Uint4B
+0x008 Ss0 : Uint2B
+0x00a Reserved1 : Uint2B
+0x00c NotUsed1 : Uint4B
+0x01c CR3 : Uint4B
+0x020 Eip : Uint4B
+0x024 EFlags : Uint4B
+0x028 Eax : Uint4B
+0x02c Ecx : Uint4B
+0x030 Edx : Uint4B
+0x034 Ebx : Uint4B
+0x038 Esp : Uint4B
+0x03c Ebp : Uint4B
+0x040 Esi : Uint4B
+0x044 Edi : Uint4B
+0x048 Es : Uint2B
+0x04a Reserved2 : Uint2B
+0x04c Cs : Uint2B
+0x04e Reserved3 : Uint2B
+0x050 Ss : Uint2B
+0x052 Reserved4 : Uint2B
+0x054 Ds : Uint2B
+0x056 Reserved5 : Uint2B
+0x058 Fs : Uint2B
+0x05a Reserved6 : Uint2B
+0x05c Gs : Uint2B
+0x05e Reserved7 : Uint2B
+0x060 LDT : Uint2B
+0x062 Reserved8 : Uint2B
+0x064 Flags : Uint2B
+0x066 IoMapBase : Uint2B
+0x068 IoMaps : _KiIoAccessMap
+0x000 DirectionMap : UChar
+0x020 IoMap : UChar
+0x208c IntDirectionMap : UChar
+0x000 TickCountLowDeprecated : Uint4B
+0x004 TickCountMultiplier : Uint4B
+0x008 InterruptTime : _KSYSTEM_TIME
+0x000 LowPart : Uint4B
+0x004 High1Time : Int4B
+0x008 High2Time : Int4B
+0x014 SystemTime : _KSYSTEM_TIME
+0x000 LowPart : Uint4B
+0x004 High1Time : Int4B
+0x008 High2Time : Int4B
+0x020 TimeZoneBias : _KSYSTEM_TIME
+0x000 LowPart : Uint4B
+0x004 High1Time : Int4B
+0x008 High2Time : Int4B
+0x02c ImageNumberLow : Uint2B
+0x02e ImageNumberHigh : Uint2B
+0x030 NtSystemRoot : Wchar
+0x238 MaxStackTraceDepth : Uint4B
+0x23c CryptoExponent : Uint4B
+0x240 TimeZoneId : Uint4B
+0x244 LargePageMinimum : Uint4B
+0x248 Reserved2 : Uint4B
+0x264 NtProductType :
NtProductWinNt = 0n1
NtProductLanManNt = 0n2
NtProductServer = 0n3
+0x268 ProductTypeIsValid : UChar
+0x26c NtMajorVersion : Uint4B
+0x270 NtMinorVersion : Uint4B
+0x274 ProcessorFeatures : UChar
+0x2b4 Reserved1 : Uint4B
+0x2b8 Reserved3 : Uint4B
+0x2bc TimeSlip : Uint4B
+0x2c0 AlternativeArchitecture :
StandardDesign = 0n0
NEC98x86 = 0n1
EndAlternatives = 0n2
+0x2c4 AltArchitecturePad : Uint4B
+0x2c8 SystemExpirationDate : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x2d0 SuiteMask : Uint4B
+0x2d4 KdDebuggerEnabled : UChar
+0x2d5 NXSupportPolicy : UChar
+0x2d8 ActiveConsoleId : Uint4B
+0x2dc DismountCount : Uint4B
+0x2e0 ComPlusPackage : Uint4B
+0x2e4 LastSystemRITEventTickCount : Uint4B
+0x2e8 NumberOfPhysicalPages : Uint4B
+0x2ec SafeBootMode : UChar
+0x2ed TscQpcData : UChar
+0x2ed TscQpcEnabled : Pos 0, 1 Bit
+0x2ed TscQpcSpareFlag : Pos 1, 1 Bit
+0x2ed TscQpcShift : Pos 2, 6 Bits
+0x2ee TscQpcPad : UChar
+0x2f0 SharedDataFlags : Uint4B
+0x2f0 DbgErrorPortPresent : Pos 0, 1 Bit
+0x2f0 DbgElevationEnabled : Pos 1, 1 Bit
+0x2f0 DbgVirtEnabled : Pos 2, 1 Bit
+0x2f0 DbgInstallerDetectEnabled : Pos 3, 1 Bit
+0x2f0 DbgSystemDllRelocated : Pos 4, 1 Bit
+0x2f0 DbgDynProcessorEnabled : Pos 5, 1 Bit
+0x2f0 DbgSEHValidationEnabled : Pos 6, 1 Bit
+0x2f0 SpareBits : Pos 7, 25 Bits
+0x2f4 DataFlagsPad : Uint4B
+0x2f8 TestRetInstruction : Uint8B
+0x300 SystemCall : Uint4B
+0x304 SystemCallReturn : Uint4B
+0x308 SystemCallPad : Uint8B
+0x320 TickCount : _KSYSTEM_TIME
+0x000 LowPart : Uint4B
+0x004 High1Time : Int4B
+0x008 High2Time : Int4B
+0x320 TickCountQuad : Uint8B
+0x320 ReservedTickCountOverlay : Uint4B
+0x32c TickCountPad : Uint4B
+0x330 Cookie : Uint4B
+0x334 CookiePad : Uint4B
+0x338 ConsoleSessionForegroundProcessId : Int8B
+0x340 Wow64SharedInformation : Uint4B
+0x380 UserModeGlobalLogger : Uint2B
+0x3a0 ImageFileExecutionOptions : Uint4B
+0x3a4 LangGenerationCount : Uint4B
+0x3a8 Reserved5 : Uint8B
+0x3b0 InterruptTimeBias : Uint8B
+0x3b8 TscQpcBias : Uint8B
+0x3c0 ActiveProcessorCount : Uint4B
+0x3c4 ActiveGroupCount : Uint2B
+0x3c6 Reserved4 : Uint2B
+0x3c8 AitSamplingValue : Uint4B
+0x3cc AppCompatFlag : Uint4B
+0x3d0 SystemDllNativeRelocation : Uint8B
+0x3d8 SystemDllWowRelocation : Uint4B
+0x3dc XStatePad : Uint4B
+0x3e0 XState : _XSTATE_CONFIGURATION
+0x000 EnabledFeatures : Uint8B
+0x008 Size : Uint4B
+0x00c OptimizedSave : Pos 0, 1 Bit
+0x010 Features : _XSTATE_FEATURE
+0x000 Offset : Uint4B
+0x004 Size : Uint4B
+0x000 WaitListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 Thread : Ptr32
+0x00c Object : Ptr32
+0x010 NextWaitBlock : Ptr32
+0x014 WaitKey : Uint2B
+0x016 WaitType : UChar
+0x017 BlockState : UChar
WaitBlockBypassStart = 0n0 WaitBlockBypassComplete = 0n1 WaitBlockActive = 0n2 WaitBlockInactive = 0n3 WaitBlockAllStates = 0n4
WaitInProgress = 0n0 WaitCommitted = 0n1 WaitAborted = 0n2 MaximumWaitState = 0n3
+0x000 Flags : UChar +0x000 State : Pos 0, 2 Bits +0x000 Affinity : Pos 2, 1 Bit +0x000 Priority : Pos 3, 1 Bit +0x000 Apc : Pos 4, 1 Bit +0x000 UserApc : Pos 5, 1 Bit +0x000 Alert : Pos 6, 1 Bit +0x000 Unused : Pos 7, 1 Bit
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 InLoadOrderLinks : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 InMemoryOrderLinks : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 InInitializationOrderLinks : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x018 DllBase : Ptr32
+0x01c EntryPoint : Ptr32
+0x020 SizeOfImage : Uint4B
+0x024 FullDllName : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x02c BaseDllName : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x034 Flags : Uint4B
+0x038 LoadCount : Uint2B
+0x03a TlsIndex : Uint2B
+0x03c HashLinks : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x03c SectionPointer : Ptr32
+0x040 CheckSum : Uint4B
+0x044 TimeDateStamp : Uint4B
+0x044 LoadedImports : Ptr32
+0x048 EntryPointActivationContext : Ptr32
+0x04c PatchInformation : Ptr32
+0x050 ForwarderLinks : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x058 ServiceTagLinks : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x060 StaticLinks : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x068 ContextInformation : Ptr32
+0x06c OriginalBase : Uint4B
+0x070 LoadTime : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 ListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 FreePointer : Ptr32
+0x00c Limit : Ptr32
+0x000 Lock : _RTL_CRITICAL_SECTION
+0x000 DebugInfo : Ptr32
+0x004 LockCount : Int4B
+0x008 RecursionCount : Int4B
+0x00c OwningThread : Ptr32
+0x010 LockSemaphore : Ptr32
+0x014 SpinCount : Uint4B
+0x018 SubSegmentZones : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x020 ZoneBlockSize : Uint4B
+0x024 Heap : Ptr32
+0x028 SegmentChange : Uint4B
+0x02c SegmentCreate : Uint4B
+0x030 SegmentInsertInFree : Uint4B
+0x034 SegmentDelete : Uint4B
+0x038 CacheAllocs : Uint4B
+0x03c CacheFrees : Uint4B
+0x040 SizeInCache : Uint4B
+0x048 RunInfo : _HEAP_BUCKET_RUN_INFO
+0x000 Bucket : Uint4B
+0x004 RunLength : Uint4B
+0x000 Aggregate64 : Int8B
+0x050 UserBlockCache : _USER_MEMORY_CACHE_ENTRY
+0x000 UserBlocks : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x008 AvailableBlocks : Uint4B
+0x110 Buckets : _HEAP_BUCKET
+0x000 BlockUnits : Uint2B
+0x002 SizeIndex : UChar
+0x003 UseAffinity : Pos 0, 1 Bit
+0x003 DebugFlags : Pos 1, 2 Bits
+0x310 LocalData : _HEAP_LOCAL_DATA
+0x000 DeletedSubSegments : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x008 CrtZone : Ptr32
+0x00c LowFragHeap : Ptr32
+0x010 Sequence : Uint4B
+0x018 SegmentInfo : _HEAP_LOCAL_SEGMENT_INFO
+0x000 Hint : Ptr32
+0x004 ActiveSubsegment : Ptr32
+0x008 CachedItems : Ptr32
+0x048 SListHeader : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x050 Counters : _HEAP_BUCKET_COUNTERS
+0x000 TotalBlocks : Uint4B
+0x004 SubSegmentCounts : Uint4B
+0x000 Aggregate64 : Int8B
+0x058 LocalData : Ptr32
+0x05c LastOpSequence : Uint4B
+0x060 BucketIndex : Uint2B
+0x062 LastUsed : Uint2B
+0x000 Lock : _RTL_CRITICAL_SECTION
+0x000 DebugInfo : Ptr32
+0x004 LockCount : Int4B
+0x008 RecursionCount : Int4B
+0x00c OwningThread : Ptr32
+0x010 LockSemaphore : Ptr32
+0x014 SpinCount : Uint4B
+0x018 SubSegmentZones : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x020 ZoneBlockSize : Uint4B
+0x024 Heap : Ptr32
+0x028 SegmentChange : Uint4B
+0x02c SegmentCreate : Uint4B
+0x030 SegmentInsertInFree : Uint4B
+0x034 SegmentDelete : Uint4B
+0x038 CacheAllocs : Uint4B
+0x03c CacheFrees : Uint4B
+0x040 SizeInCache : Uint4B
+0x048 RunInfo : _HEAP_BUCKET_RUN_INFO
+0x000 Bucket : Uint4B
+0x004 RunLength : Uint4B
+0x000 Aggregate64 : Int8B
+0x050 UserBlockCache : _USER_MEMORY_CACHE_ENTRY
+0x000 UserBlocks : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x008 AvailableBlocks : Uint4B
+0x110 Buckets : _HEAP_BUCKET
+0x000 BlockUnits : Uint2B
+0x002 SizeIndex : UChar
+0x003 UseAffinity : Pos 0, 1 Bit
+0x003 DebugFlags : Pos 1, 2 Bits
+0x310 LocalData : _HEAP_LOCAL_DATA
+0x000 DeletedSubSegments : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x008 CrtZone : Ptr32
+0x00c LowFragHeap : Ptr32
+0x010 Sequence : Uint4B
+0x018 SegmentInfo : _HEAP_LOCAL_SEGMENT_INFO
+0x000 Hint : Ptr32
+0x004 ActiveSubsegment : Ptr32
+0x008 CachedItems : Ptr32
+0x048 SListHeader : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x050 Counters : _HEAP_BUCKET_COUNTERS
+0x000 TotalBlocks : Uint4B
+0x004 SubSegmentCounts : Uint4B
+0x000 Aggregate64 : Int8B
+0x058 LocalData : Ptr32
+0x05c LastOpSequence : Uint4B
+0x060 BucketIndex : Uint2B
+0x062 LastUsed : Uint2B
+0x000 L : _GENERAL_LOOKASIDE_POOL
+0x000 ListHead : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x000 SingleListHead : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x008 Depth : Uint2B
+0x00a MaximumDepth : Uint2B
+0x00c TotalAllocates : Uint4B
+0x010 AllocateMisses : Uint4B
+0x010 AllocateHits : Uint4B
+0x014 TotalFrees : Uint4B
+0x018 FreeMisses : Uint4B
+0x018 FreeHits : Uint4B
+0x01c Type :
NonPagedPool = 0n0
PagedPool = 0n1
NonPagedPoolMustSucceed = 0n2
DontUseThisType = 0n3
NonPagedPoolCacheAligned = 0n4
PagedPoolCacheAligned = 0n5
NonPagedPoolCacheAlignedMustS = 0n6
MaxPoolType = 0n7
NonPagedPoolSession = 0n32
PagedPoolSession = 0n33
NonPagedPoolMustSucceedSession = 0n34
DontUseThisTypeSession = 0n35
NonPagedPoolCacheAlignedSession = 0n36
PagedPoolCacheAlignedSession = 0n37
NonPagedPoolCacheAlignedMustSSession = 0n38
+0x020 Tag : Uint4B
+0x024 Size : Uint4B
+0x028 AllocateEx : Ptr32
+0x028 Allocate : Ptr32
+0x02c FreeEx : Ptr32
+0x02c Free : Ptr32
+0x030 ListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x038 LastTotalAllocates : Uint4B
+0x03c LastAllocateMisses : Uint4B
+0x03c LastAllocateHits : Uint4B
+0x040 Future : Uint4B
+0x000 Luid : _LUID
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x008 Attributes : Uint4B
+0x000 MailslotQuota : Uint4B
+0x004 MaximumMessageSize : Uint4B
+0x008 ReadTimeout : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x010 TimeoutSpecified : UChar
+0x000 VersionNumber : Uint4B
+0x004 ExceptionType :
HAL_MCE_RECORD = 0n0
HAL_MCA_RECORD = 0n1
+0x008 TimeStamp : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x010 ProcessorNumber : Uint4B
+0x014 Reserved1 : Uint4B
+0x018 u : <unnamed-tag>
+0x000 Mca : <unnamed-tag>
+0x000 BankNumber : UChar
+0x001 Reserved2 : UChar
+0x008 Status : _MCI_STATS
+0x000 MciStats : <unnamed-tag>
+0x000 McaCod : Uint2B
+0x002 MsCod : Uint2B
+0x004 OtherInfo : Pos 0, 25 Bits
+0x004 Damage : Pos 25, 1 Bit
+0x004 AddressValid : Pos 26, 1 Bit
+0x004 MiscValid : Pos 27, 1 Bit
+0x004 Enabled : Pos 28, 1 Bit
+0x004 UnCorrected : Pos 29, 1 Bit
+0x004 OverFlow : Pos 30, 1 Bit
+0x004 Valid : Pos 31, 1 Bit
+0x000 QuadPart : Uint8B
+0x010 Address : _MCI_ADDR
+0x000 Address : Uint4B
+0x004 Reserved : Uint4B
+0x000 QuadPart : Uint8B
+0x018 Misc : Uint8B
+0x000 Mce : <unnamed-tag>
+0x000 Address : Uint8B
+0x008 Type : Uint8B
+0x038 ExtCnt : Uint4B
+0x03c Reserved3 : Uint4B
+0x040 ExtReg : Uint8B
+0x000 Address : Uint4B +0x004 Reserved : Uint4B +0x000 QuadPart : Uint8B
+0x000 MciStats : <unnamed-tag>
+0x000 McaCod : Uint2B
+0x002 MsCod : Uint2B
+0x004 OtherInfo : Pos 0, 25 Bits
+0x004 Damage : Pos 25, 1 Bit
+0x004 AddressValid : Pos 26, 1 Bit
+0x004 MiscValid : Pos 27, 1 Bit
+0x004 Enabled : Pos 28, 1 Bit
+0x004 UnCorrected : Pos 29, 1 Bit
+0x004 OverFlow : Pos 30, 1 Bit
+0x004 Valid : Pos 31, 1 Bit
+0x000 QuadPart : Uint8B
+0x000 Next : Ptr32 +0x004 Size : Int2B +0x006 MdlFlags : Int2B +0x008 Process : Ptr32 +0x00c MappedSystemVa : Ptr32 +0x010 StartVa : Ptr32 +0x014 ByteCount : Uint4B +0x018 ByteOffset : Uint4B
+0x000 u1 : <unnamed-tag>
+0x000 Balance : Pos 0, 2 Bits
+0x000 Parent : Ptr32
+0x004 LeftChild : Ptr32
+0x008 RightChild : Ptr32
+0x00c StartingVpn : Uint4B
+0x010 EndingVpn : Uint4B
+0x000 WorkingSetMutex : _EX_PUSH_LOCK
+0x000 Locked : Pos 0, 1 Bit
+0x000 Waiting : Pos 1, 1 Bit
+0x000 Waking : Pos 2, 1 Bit
+0x000 MultipleShared : Pos 3, 1 Bit
+0x000 Shared : Pos 4, 28 Bits
+0x000 Value : Uint4B
+0x000 Ptr : Ptr32
+0x004 ExitGate : Ptr32
+0x008 AccessLog : Ptr32
+0x00c WorkingSetExpansionLinks : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x014 AgeDistribution : Uint4B
+0x030 MinimumWorkingSetSize : Uint4B
+0x034 WorkingSetSize : Uint4B
+0x038 WorkingSetPrivateSize : Uint4B
+0x03c MaximumWorkingSetSize : Uint4B
+0x040 ChargedWslePages : Uint4B
+0x044 ActualWslePages : Uint4B
+0x048 WorkingSetSizeOverhead : Uint4B
+0x04c PeakWorkingSetSize : Uint4B
+0x050 HardFaultCount : Uint4B
+0x054 VmWorkingSetList : Ptr32
+0x058 NextPageColor : Uint2B
+0x05a LastTrimStamp : Uint2B
+0x05c PageFaultCount : Uint4B
+0x060 RepurposeCount : Uint4B
+0x064 Spare : Uint4B
+0x068 Flags : _MMSUPPORT_FLAGS
+0x000 WorkingSetType : Pos 0, 3 Bits
+0x000 ModwriterAttached : Pos 3, 1 Bit
+0x000 TrimHard : Pos 4, 1 Bit
+0x000 MaximumWorkingSetHard : Pos 5, 1 Bit
+0x000 ForceTrim : Pos 6, 1 Bit
+0x000 MinimumWorkingSetHard : Pos 7, 1 Bit
+0x001 SessionMaster : Pos 0, 1 Bit
+0x001 TrimmerState : Pos 1, 2 Bits
+0x001 Reserved : Pos 3, 1 Bit
+0x001 PageStealers : Pos 4, 4 Bits
+0x002 MemoryPriority : Pos 0, 8 Bits
+0x003 WsleDeleted : Pos 0, 1 Bit
+0x003 VmExiting : Pos 1, 1 Bit
+0x003 ExpansionFailed : Pos 2, 1 Bit
+0x003 Available : Pos 3, 5 Bits
+0x000 WorkingSetType : Pos 0, 3 Bits +0x000 ModwriterAttached : Pos 3, 1 Bit +0x000 TrimHard : Pos 4, 1 Bit +0x000 MaximumWorkingSetHard : Pos 5, 1 Bit +0x000 ForceTrim : Pos 6, 1 Bit +0x000 MinimumWorkingSetHard : Pos 7, 1 Bit +0x001 SessionMaster : Pos 0, 1 Bit +0x001 TrimmerState : Pos 1, 2 Bits +0x001 Reserved : Pos 3, 1 Bit +0x001 PageStealers : Pos 4, 4 Bits +0x002 MemoryPriority : Pos 0, 8 Bits +0x003 WsleDeleted : Pos 0, 1 Bit +0x003 VmExiting : Pos 1, 1 Bit +0x003 ExpansionFailed : Pos 2, 1 Bit +0x003 Available : Pos 3, 5 Bits
+0x000 BalancedRoot : _MMADDRESS_NODE
+0x000 u1 : <unnamed-tag>
+0x000 Balance : Pos 0, 2 Bits
+0x000 Parent : Ptr32
+0x004 LeftChild : Ptr32
+0x008 RightChild : Ptr32
+0x00c StartingVpn : Uint4B
+0x010 EndingVpn : Uint4B
+0x014 DepthOfTree : Pos 0, 5 Bits
+0x014 Unused : Pos 5, 3 Bits
+0x014 NumberGenericTableElements : Pos 8, 24 Bits
+0x018 NodeHint : Ptr32
+0x01c NodeFreeHint : Ptr32
+0x000 Level : Uint4B
+0x004 RaiseIrqls : Uint4B
+0x008 AcquireSpinLocks : Uint4B
+0x00c SynchronizeExecutions : Uint4B
+0x010 AllocationsAttempted : Uint4B
+0x014 AllocationsSucceeded : Uint4B
+0x018 AllocationsSucceededSpecialPool : Uint4B
+0x01c AllocationsWithNoTag : Uint4B
+0x020 TrimRequests : Uint4B
+0x024 Trims : Uint4B
+0x028 AllocationsFailed : Uint4B
+0x02c AllocationsFailedDeliberately : Uint4B
+0x030 Loads : Uint4B
+0x034 Unloads : Uint4B
+0x038 UnTrackedPool : Uint4B
+0x03c UserTrims : Uint4B
+0x040 CurrentPagedPoolAllocations : Uint4B
+0x044 CurrentNonPagedPoolAllocations : Uint4B
+0x048 PeakPagedPoolAllocations : Uint4B
+0x04c PeakNonPagedPoolAllocations : Uint4B
+0x050 PagedBytes : Uint4B
+0x054 NonPagedBytes : Uint4B
+0x058 PeakPagedBytes : Uint4B
+0x05c PeakNonPagedBytes : Uint4B
+0x060 BurstAllocationsFailedDeliberately : Uint4B
+0x064 SessionTrims : Uint4B
+0x068 OptionChanges : Uint4B
+0x06c VerifyMode : Uint4B
+0x070 PreviousBucketName : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x078 ActivityCounter : Uint4B
+0x07c PreviousActivityCounter : Uint4B
+0x080 WorkerTrimRequests : Uint4B
+0x000 Flags : _MM_PAGE_ACCESS_INFO_FLAGS
+0x000 File : <unnamed-tag>
+0x000 FilePointerIndex : Pos 0, 9 Bits
+0x000 HardFault : Pos 9, 1 Bit
+0x000 Image : Pos 10, 1 Bit
+0x000 Spare0 : Pos 11, 1 Bit
+0x000 Private : <unnamed-tag>
+0x000 FilePointerIndex : Pos 0, 9 Bits
+0x000 HardFault : Pos 9, 1 Bit
+0x000 Spare1 : Pos 10, 2 Bits
+0x000 FileOffset : Uint8B
+0x000 VirtualAddress : Ptr32
+0x000 DontUse0 : Pos 0, 3 Bits
+0x000 Spare0 : Pos 3, 29 Bits
+0x004 PointerProtoPte : Ptr32
+0x000 File : <unnamed-tag>
+0x000 FilePointerIndex : Pos 0, 9 Bits
+0x000 HardFault : Pos 9, 1 Bit
+0x000 Image : Pos 10, 1 Bit
+0x000 Spare0 : Pos 11, 1 Bit
+0x000 Private : <unnamed-tag>
+0x000 FilePointerIndex : Pos 0, 9 Bits
+0x000 HardFault : Pos 9, 1 Bit
+0x000 Spare1 : Pos 10, 2 Bits
+0x000 Link : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Type :
MmPteAccessType = 0n0
MmCcReadAheadType = 0n1
MmPfnRepurposeType = 0n2
MmMaximumPageAccessType = 0n3
+0x008 EmptySequenceNumber : Uint4B
+0x008 CurrentFileIndex : Uint4B
+0x010 CreateTime : Uint8B
+0x018 EmptyTime : Uint8B
+0x018 TempEntry : Ptr32
+0x020 PageEntry : Ptr32
+0x024 FileEntry : Ptr32
+0x028 FirstFileEntry : Ptr32
+0x02c Process : Ptr32
+0x030 SessionId : Uint4B
+0x020 PageFrameEntry : Ptr32
+0x024 LastPageFrameEntry : Ptr32
MmPteAccessType = 0n0 MmCcReadAheadType = 0n1 MmPfnRepurposeType = 0n2 MmMaximumPageAccessType = 0n3
+0x000 NamedPipeType : Uint4B
+0x004 ReadMode : Uint4B
+0x008 CompletionMode : Uint4B
+0x00c MaximumInstances : Uint4B
+0x010 InboundQuota : Uint4B
+0x014 OutboundQuota : Uint4B
+0x018 DefaultTimeout : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x020 TimeoutSpecified : UChar
+0x000 L : _GENERAL_LOOKASIDE
+0x000 ListHead : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x000 SingleListHead : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x008 Depth : Uint2B
+0x00a MaximumDepth : Uint2B
+0x00c TotalAllocates : Uint4B
+0x010 AllocateMisses : Uint4B
+0x010 AllocateHits : Uint4B
+0x014 TotalFrees : Uint4B
+0x018 FreeMisses : Uint4B
+0x018 FreeHits : Uint4B
+0x01c Type :
NonPagedPool = 0n0
PagedPool = 0n1
NonPagedPoolMustSucceed = 0n2
DontUseThisType = 0n3
NonPagedPoolCacheAligned = 0n4
PagedPoolCacheAligned = 0n5
NonPagedPoolCacheAlignedMustS = 0n6
MaxPoolType = 0n7
NonPagedPoolSession = 0n32
PagedPoolSession = 0n33
NonPagedPoolMustSucceedSession = 0n34
DontUseThisTypeSession = 0n35
NonPagedPoolCacheAlignedSession = 0n36
PagedPoolCacheAlignedSession = 0n37
NonPagedPoolCacheAlignedMustSSession = 0n38
+0x020 Tag : Uint4B
+0x024 Size : Uint4B
+0x028 AllocateEx : Ptr32
+0x028 Allocate : Ptr32
+0x02c FreeEx : Ptr32
+0x02c Free : Ptr32
+0x030 ListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x038 LastTotalAllocates : Uint4B
+0x03c LastAllocateMisses : Uint4B
+0x03c LastAllocateHits : Uint4B
+0x040 Future : Uint4B
+0x080 Lock__ObsoleteButDoNotDelete : Uint4B
NtProductWinNt = 0n1 NtProductLanManNt = 0n2 NtProductServer = 0n3
+0x000 ExceptionList : Ptr32 +0x004 StackBase : Ptr32 +0x008 StackLimit : Ptr32 +0x00c SubSystemTib : Ptr32 +0x010 FiberData : Ptr32 +0x010 Version : Uint4B +0x014 ArbitraryUserPointer : Ptr32 +0x018 Self : Ptr32
+0x000 Length : Uint4B +0x004 RootDirectory : Ptr32 +0x008 ObjectName : Ptr32 +0x00c Attributes : Uint4B +0x010 SecurityDescriptor : Ptr32 +0x014 SecurityQualityOfService : Ptr32
+0x000 HandleAttributes : Uint4B +0x004 GrantedAccess : Uint4B
+0x000 Name : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x000 TypeList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 Name : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x010 DefaultObject : Ptr32
+0x014 Index : UChar
+0x018 TotalNumberOfObjects : Uint4B
+0x01c TotalNumberOfHandles : Uint4B
+0x020 HighWaterNumberOfObjects : Uint4B
+0x024 HighWaterNumberOfHandles : Uint4B
+0x028 TypeInfo : _OBJECT_TYPE_INITIALIZER
+0x000 Length : Uint2B
+0x002 ObjectTypeFlags : UChar
+0x002 CaseInsensitive : Pos 0, 1 Bit
+0x002 UnnamedObjectsOnly : Pos 1, 1 Bit
+0x002 UseDefaultObject : Pos 2, 1 Bit
+0x002 SecurityRequired : Pos 3, 1 Bit
+0x002 MaintainHandleCount : Pos 4, 1 Bit
+0x002 MaintainTypeList : Pos 5, 1 Bit
+0x002 SupportsObjectCallbacks : Pos 6, 1 Bit
+0x004 ObjectTypeCode : Uint4B
+0x008 InvalidAttributes : Uint4B
+0x00c GenericMapping : _GENERIC_MAPPING
+0x000 GenericRead : Uint4B
+0x004 GenericWrite : Uint4B
+0x008 GenericExecute : Uint4B
+0x00c GenericAll : Uint4B
+0x01c ValidAccessMask : Uint4B
+0x020 RetainAccess : Uint4B
+0x024 PoolType :
NonPagedPool = 0n0
PagedPool = 0n1
NonPagedPoolMustSucceed = 0n2
DontUseThisType = 0n3
NonPagedPoolCacheAligned = 0n4
PagedPoolCacheAligned = 0n5
NonPagedPoolCacheAlignedMustS = 0n6
MaxPoolType = 0n7
NonPagedPoolSession = 0n32
PagedPoolSession = 0n33
NonPagedPoolMustSucceedSession = 0n34
DontUseThisTypeSession = 0n35
NonPagedPoolCacheAlignedSession = 0n36
PagedPoolCacheAlignedSession = 0n37
NonPagedPoolCacheAlignedMustSSession = 0n38
+0x028 DefaultPagedPoolCharge : Uint4B
+0x02c DefaultNonPagedPoolCharge : Uint4B
+0x030 DumpProcedure : Ptr32
+0x034 OpenProcedure : Ptr32
+0x038 CloseProcedure : Ptr32
+0x03c DeleteProcedure : Ptr32
+0x040 ParseProcedure : Ptr32
+0x044 SecurityProcedure : Ptr32
+0x048 QueryNameProcedure : Ptr32
+0x04c OkayToCloseProcedure : Ptr32
+0x078 TypeLock : _EX_PUSH_LOCK
+0x000 Locked : Pos 0, 1 Bit
+0x000 Waiting : Pos 1, 1 Bit
+0x000 Waking : Pos 2, 1 Bit
+0x000 MultipleShared : Pos 3, 1 Bit
+0x000 Shared : Pos 4, 28 Bits
+0x000 Value : Uint4B
+0x000 Ptr : Ptr32
+0x07c Key : Uint4B
+0x080 CallbackList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x000 Length : Uint2B
+0x002 ObjectTypeFlags : UChar
+0x002 CaseInsensitive : Pos 0, 1 Bit
+0x002 UnnamedObjectsOnly : Pos 1, 1 Bit
+0x002 UseDefaultObject : Pos 2, 1 Bit
+0x002 SecurityRequired : Pos 3, 1 Bit
+0x002 MaintainHandleCount : Pos 4, 1 Bit
+0x002 MaintainTypeList : Pos 5, 1 Bit
+0x002 SupportsObjectCallbacks : Pos 6, 1 Bit
+0x004 ObjectTypeCode : Uint4B
+0x008 InvalidAttributes : Uint4B
+0x00c GenericMapping : _GENERIC_MAPPING
+0x000 GenericRead : Uint4B
+0x004 GenericWrite : Uint4B
+0x008 GenericExecute : Uint4B
+0x00c GenericAll : Uint4B
+0x01c ValidAccessMask : Uint4B
+0x020 RetainAccess : Uint4B
+0x024 PoolType :
NonPagedPool = 0n0
PagedPool = 0n1
NonPagedPoolMustSucceed = 0n2
DontUseThisType = 0n3
NonPagedPoolCacheAligned = 0n4
PagedPoolCacheAligned = 0n5
NonPagedPoolCacheAlignedMustS = 0n6
MaxPoolType = 0n7
NonPagedPoolSession = 0n32
PagedPoolSession = 0n33
NonPagedPoolMustSucceedSession = 0n34
DontUseThisTypeSession = 0n35
NonPagedPoolCacheAlignedSession = 0n36
PagedPoolCacheAlignedSession = 0n37
NonPagedPoolCacheAlignedMustSSession = 0n38
+0x028 DefaultPagedPoolCharge : Uint4B
+0x02c DefaultNonPagedPoolCharge : Uint4B
+0x030 DumpProcedure : Ptr32
+0x034 OpenProcedure : Ptr32
+0x038 CloseProcedure : Ptr32
+0x03c DeleteProcedure : Ptr32
+0x040 ParseProcedure : Ptr32
+0x044 SecurityProcedure : Ptr32
+0x048 QueryNameProcedure : Ptr32
+0x04c OkayToCloseProcedure : Ptr32
ObCreateHandle = 0n0 ObOpenHandle = 0n1 ObDuplicateHandle = 0n2 ObInheritHandle = 0n3 ObMaxOpenReason = 0n4
+0x000 OwnerThread : Uint4B +0x004 IoPriorityBoosted : Pos 0, 1 Bit +0x004 OwnerReferenced : Pos 1, 1 Bit +0x004 OwnerCount : Pos 2, 30 Bits +0x004 TableSize : Uint4B
+0x000 L : _GENERAL_LOOKASIDE
+0x000 ListHead : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x000 SingleListHead : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x008 Depth : Uint2B
+0x00a MaximumDepth : Uint2B
+0x00c TotalAllocates : Uint4B
+0x010 AllocateMisses : Uint4B
+0x010 AllocateHits : Uint4B
+0x014 TotalFrees : Uint4B
+0x018 FreeMisses : Uint4B
+0x018 FreeHits : Uint4B
+0x01c Type :
NonPagedPool = 0n0
PagedPool = 0n1
NonPagedPoolMustSucceed = 0n2
DontUseThisType = 0n3
NonPagedPoolCacheAligned = 0n4
PagedPoolCacheAligned = 0n5
NonPagedPoolCacheAlignedMustS = 0n6
MaxPoolType = 0n7
NonPagedPoolSession = 0n32
PagedPoolSession = 0n33
NonPagedPoolMustSucceedSession = 0n34
DontUseThisTypeSession = 0n35
NonPagedPoolCacheAlignedSession = 0n36
PagedPoolCacheAlignedSession = 0n37
NonPagedPoolCacheAlignedMustSSession = 0n38
+0x020 Tag : Uint4B
+0x024 Size : Uint4B
+0x028 AllocateEx : Ptr32
+0x028 Allocate : Ptr32
+0x02c FreeEx : Ptr32
+0x02c Free : Ptr32
+0x030 ListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x038 LastTotalAllocates : Uint4B
+0x03c LastAllocateMisses : Uint4B
+0x03c LastAllocateHits : Uint4B
+0x040 Future : Uint4B
+0x080 Lock__ObsoleteButDoNotDelete : _FAST_MUTEX
+0x000 Count : Int4B
+0x004 Owner : Ptr32
+0x008 Contention : Uint4B
+0x00c Event : _KEVENT
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x01c OldIrql : Uint4B
+0x000 InheritedAddressSpace : UChar
+0x001 ReadImageFileExecOptions : UChar
+0x002 BeingDebugged : UChar
+0x003 BitField : UChar
+0x003 ImageUsesLargePages : Pos 0, 1 Bit
+0x003 IsProtectedProcess : Pos 1, 1 Bit
+0x003 IsLegacyProcess : Pos 2, 1 Bit
+0x003 IsImageDynamicallyRelocated : Pos 3, 1 Bit
+0x003 SkipPatchingUser32Forwarders : Pos 4, 1 Bit
+0x003 SpareBits : Pos 5, 3 Bits
+0x004 Mutant : Ptr32
+0x008 ImageBaseAddress : Ptr32
+0x00c Ldr : Ptr32
+0x010 ProcessParameters : Ptr32
+0x014 SubSystemData : Ptr32
+0x018 ProcessHeap : Ptr32
+0x01c FastPebLock : Ptr32
+0x020 AtlThunkSListPtr : Ptr32
+0x024 IFEOKey : Ptr32
+0x028 CrossProcessFlags : Uint4B
+0x028 ProcessInJob : Pos 0, 1 Bit
+0x028 ProcessInitializing : Pos 1, 1 Bit
+0x028 ProcessUsingVEH : Pos 2, 1 Bit
+0x028 ProcessUsingVCH : Pos 3, 1 Bit
+0x028 ProcessUsingFTH : Pos 4, 1 Bit
+0x028 ReservedBits0 : Pos 5, 27 Bits
+0x02c KernelCallbackTable : Ptr32
+0x02c UserSharedInfoPtr : Ptr32
+0x030 SystemReserved : Uint4B
+0x034 AtlThunkSListPtr32 : Uint4B
+0x038 ApiSetMap : Ptr32
+0x03c TlsExpansionCounter : Uint4B
+0x040 TlsBitmap : Ptr32
+0x044 TlsBitmapBits : Uint4B
+0x04c ReadOnlySharedMemoryBase : Ptr32
+0x050 HotpatchInformation : Ptr32
+0x054 ReadOnlyStaticServerData : Ptr32
+0x058 AnsiCodePageData : Ptr32
+0x05c OemCodePageData : Ptr32
+0x060 UnicodeCaseTableData : Ptr32
+0x064 NumberOfProcessors : Uint4B
+0x068 NtGlobalFlag : Uint4B
+0x070 CriticalSectionTimeout : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x078 HeapSegmentReserve : Uint4B
+0x07c HeapSegmentCommit : Uint4B
+0x080 HeapDeCommitTotalFreeThreshold : Uint4B
+0x084 HeapDeCommitFreeBlockThreshold : Uint4B
+0x088 NumberOfHeaps : Uint4B
+0x08c MaximumNumberOfHeaps : Uint4B
+0x090 ProcessHeaps : Ptr32
+0x094 GdiSharedHandleTable : Ptr32
+0x098 ProcessStarterHelper : Ptr32
+0x09c GdiDCAttributeList : Uint4B
+0x0a0 LoaderLock : Ptr32
+0x0a4 OSMajorVersion : Uint4B
+0x0a8 OSMinorVersion : Uint4B
+0x0ac OSBuildNumber : Uint2B
+0x0ae OSCSDVersion : Uint2B
+0x0b0 OSPlatformId : Uint4B
+0x0b4 ImageSubsystem : Uint4B
+0x0b8 ImageSubsystemMajorVersion : Uint4B
+0x0bc ImageSubsystemMinorVersion : Uint4B
+0x0c0 ActiveProcessAffinityMask : Uint4B
+0x0c4 GdiHandleBuffer : Uint4B
+0x14c PostProcessInitRoutine : Ptr32
+0x150 TlsExpansionBitmap : Ptr32
+0x154 TlsExpansionBitmapBits : Uint4B
+0x1d4 SessionId : Uint4B
+0x1d8 AppCompatFlags : _ULARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 QuadPart : Uint8B
+0x1e0 AppCompatFlagsUser : _ULARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 QuadPart : Uint8B
+0x1e8 pShimData : Ptr32
+0x1ec AppCompatInfo : Ptr32
+0x1f0 CSDVersion : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x1f8 ActivationContextData : Ptr32
+0x1fc ProcessAssemblyStorageMap : Ptr32
+0x200 SystemDefaultActivationContextData : Ptr32
+0x204 SystemAssemblyStorageMap : Ptr32
+0x208 MinimumStackCommit : Uint4B
+0x20c FlsCallback : Ptr32
+0x210 FlsListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x218 FlsBitmap : Ptr32
+0x21c FlsBitmapBits : Uint4B
+0x22c FlsHighIndex : Uint4B
+0x230 WerRegistrationData : Ptr32
+0x234 WerShipAssertPtr : Ptr32
+0x238 pContextData : Ptr32
+0x23c pImageHeaderHash : Ptr32
+0x240 TracingFlags : Uint4B
+0x240 HeapTracingEnabled : Pos 0, 1 Bit
+0x240 CritSecTracingEnabled : Pos 1, 1 Bit
+0x240 SpareTracingBits : Pos 2, 30 Bits
+0x000 Length : Uint4B
+0x004 Initialized : UChar
+0x008 SsHandle : Ptr32
+0x00c InLoadOrderModuleList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x014 InMemoryOrderModuleList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x01c InInitializationOrderModuleList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x024 EntryInProgress : Ptr32
+0x028 ShutdownInProgress : UChar
+0x02c ShutdownThreadId : Ptr32
PfFileAccessTypeRead = 0n0 PfFileAccessTypeWrite = 0n1 PfFileAccessTypeMax = 0n2
+0x000 AccessBufferAgeThreshold : Uint8B
+0x008 AccessBufferRef : _EX_RUNDOWN_REF
+0x000 Count : Uint4B
+0x000 Ptr : Ptr32
+0x00c AccessBufferExistsEvent : _KEVENT
+0x000 Header : _DISPATCHER_HEADER
+0x000 Type : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Coalescable : Pos 1, 1 Bit
+0x001 KeepShifting : Pos 2, 1 Bit
+0x001 EncodedTolerableDelay : Pos 3, 5 Bits
+0x001 Abandoned : UChar
+0x001 Signalling : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CpuThrottled : Pos 0, 1 Bit
+0x002 CycleProfiling : Pos 1, 1 Bit
+0x002 CounterProfiling : Pos 2, 1 Bit
+0x002 Reserved : Pos 3, 5 Bits
+0x002 Hand : UChar
+0x002 Size : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 1 Bit
+0x003 Processor : Pos 1, 5 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Reserved2 : Pos 2, 4 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x003 DpcActive : UChar
+0x000 Lock : Int4B
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x01c AccessBufferMax : Uint4B
+0x020 AccessBufferList : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x028 StreamSequenceNumber : Int4B
+0x02c Flags : Uint4B
+0x030 ScenarioPrefetchCount : Int4B
NonPagedPool = 0n0 PagedPool = 0n1 NonPagedPoolMustSucceed = 0n2 DontUseThisType = 0n3 NonPagedPoolCacheAligned = 0n4 PagedPoolCacheAligned = 0n5 NonPagedPoolCacheAlignedMustS = 0n6 MaxPoolType = 0n7 NonPagedPoolSession = 0n32 PagedPoolSession = 0n33 NonPagedPoolMustSucceedSession = 0n34 DontUseThisTypeSession = 0n35 NonPagedPoolCacheAlignedSession = 0n36 PagedPoolCacheAlignedSession = 0n37 NonPagedPoolCacheAlignedMustSSession = 0n38
+0x000 SequenceD1 : Uint4B +0x004 SequenceD2 : Uint4B +0x008 SequenceD3 : Uint4B
+0x000 SystemState :
PowerSystemUnspecified = 0n0
PowerSystemWorking = 0n1
PowerSystemSleeping1 = 0n2
PowerSystemSleeping2 = 0n3
PowerSystemSleeping3 = 0n4
PowerSystemHibernate = 0n5
PowerSystemShutdown = 0n6
PowerSystemMaximum = 0n7
+0x000 DeviceState :
PowerDeviceUnspecified = 0n0
PowerDeviceD0 = 0n1
PowerDeviceD1 = 0n2
PowerDeviceD2 = 0n3
PowerDeviceD3 = 0n4
PowerDeviceMaximum = 0n5
+0x000 EnableLogging : UChar
+0x004 MismatchCount : Uint4B
+0x008 Initialized : UChar
+0x010 LastValue : Uint8B
+0x018 LastLogTickCount : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x000 DomainMembers : _KAFFINITY_EX
+0x000 Count : Uint2B
+0x002 Size : Uint2B
+0x004 Reserved : Uint4B
+0x008 Bitmap : Uint4B
+0x018 IdleCheck : Ptr32
+0x01c IdleHandler : Ptr32
+0x020 Context : Ptr32
+0x024 Latency : Uint4B
+0x028 Power : Uint4B
+0x02c TimeCheck : Uint4B
+0x030 StateFlags : Uint4B
+0x034 PromotePercent : UChar
+0x035 DemotePercent : UChar
+0x036 PromotePercentBase : UChar
+0x037 DemotePercentBase : UChar
+0x038 StateType : UChar
+0x000 Count : Uint4B
+0x004 Flags : <unnamed-tag>
+0x000 AsULONG : Uint4B
+0x000 AllowScaling : Pos 0, 1 Bit
+0x000 Disabled : Pos 1, 1 Bit
+0x000 HvMaxCState : Pos 2, 4 Bits
+0x000 Reserved : Pos 6, 26 Bits
+0x008 TargetState : Uint4B
+0x00c ActualState : Uint4B
+0x010 OldState : Uint4B
+0x014 NewlyUnparked : UChar
+0x018 TargetProcessors : _KAFFINITY_EX
+0x000 Count : Uint2B
+0x002 Size : Uint2B
+0x004 Reserved : Uint4B
+0x008 Bitmap : Uint4B
+0x030 State : _PPM_IDLE_STATE
+0x000 DomainMembers : _KAFFINITY_EX
+0x000 Count : Uint2B
+0x002 Size : Uint2B
+0x004 Reserved : Uint4B
+0x008 Bitmap : Uint4B
+0x018 IdleCheck : Ptr32
+0x01c IdleHandler : Ptr32
+0x020 Context : Ptr32
+0x024 Latency : Uint4B
+0x028 Power : Uint4B
+0x02c TimeCheck : Uint4B
+0x030 StateFlags : Uint4B
+0x034 PromotePercent : UChar
+0x035 DemotePercent : UChar
+0x036 PromotePercentBase : UChar
+0x037 DemotePercentBase : UChar
+0x038 StateType : UChar
LookasideSmallIrpList = 0n0 LookasideMediumIrpList = 0n1 LookasideLargeIrpList = 0n2 LookasideMdlList = 0n3 LookasideCreateInfoList = 0n4 LookasideNameBufferList = 0n5 LookasideTwilightList = 0n6 LookasideCompletionList = 0n7 LookasideScratchBufferList = 0n8 LookasideMaximumList = 0n9
+0x000 PrivilegeCount : Uint4B
+0x004 Control : Uint4B
+0x008 Privilege : _LUID_AND_ATTRIBUTES
+0x000 Luid : _LUID
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x008 Attributes : Uint4B
CacheUnified = 0n0 CacheInstruction = 0n1 CacheData = 0n2 CacheTrace = 0n3
+0x000 Group : Uint2B +0x002 Number : UChar +0x003 Reserved : UChar
+0x000 IdleStates : Ptr32
+0x008 IdleTimeLast : Uint8B
+0x010 IdleTimeTotal : Uint8B
+0x018 IdleTimeEntry : Uint8B
+0x020 IdleAccounting : Ptr32
+0x024 Hypervisor :
ProcHypervisorNone = 0n0
ProcHypervisorPresent = 0n1
ProcHypervisorPower = 0n2
+0x028 PerfHistoryTotal : Uint4B
+0x02c ThermalConstraint : UChar
+0x02d PerfHistoryCount : UChar
+0x02e PerfHistorySlot : UChar
+0x02f Reserved : UChar
+0x030 LastSysTime : Uint4B
+0x034 WmiDispatchPtr : Uint4B
+0x038 WmiInterfaceEnabled : Int4B
+0x040 FFHThrottleStateInfo : _PPM_FFH_THROTTLE_STATE_INFO
+0x000 EnableLogging : UChar
+0x004 MismatchCount : Uint4B
+0x008 Initialized : UChar
+0x010 LastValue : Uint8B
+0x018 LastLogTickCount : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x060 PerfActionDpc : _KDPC
+0x000 Type : UChar
+0x001 Importance : UChar
+0x002 Number : Uint2B
+0x004 DpcListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x00c DeferredRoutine : Ptr32
+0x010 DeferredContext : Ptr32
+0x014 SystemArgument1 : Ptr32
+0x018 SystemArgument2 : Ptr32
+0x01c DpcData : Ptr32
+0x080 PerfActionMask : Int4B
+0x088 IdleCheck : _PROC_IDLE_SNAP
+0x000 Time : Uint8B
+0x008 Idle : Uint8B
+0x098 PerfCheck : _PROC_IDLE_SNAP
+0x000 Time : Uint8B
+0x008 Idle : Uint8B
+0x0a8 Domain : Ptr32
+0x0ac PerfConstraint : Ptr32
+0x0b0 Load : Ptr32
+0x0b4 PerfHistory : Ptr32
+0x0b8 Utility : Uint4B
+0x0bc OverUtilizedHistory : Uint4B
+0x0c0 AffinityCount : Uint4B
+0x0c4 AffinityHistory : Uint4B
+0x000 Utility : Uint2B +0x002 Frequency : UChar +0x003 Reserved : UChar
ProcHypervisorNone = 0n0 ProcHypervisorPresent = 0n1 ProcHypervisorPower = 0n2
+0x000 StateCount : Uint4B
+0x004 TotalTransitions : Uint4B
+0x008 ResetCount : Uint4B
+0x010 StartTime : Uint8B
+0x018 BucketLimits : Uint8B
+0x098 State : _PROC_IDLE_STATE_ACCOUNTING
+0x000 TotalTime : Uint8B
+0x008 IdleTransitions : Uint4B
+0x00c FailedTransitions : Uint4B
+0x010 InvalidBucketIndex : Uint4B
+0x018 MinTime : Uint8B
+0x020 MaxTime : Uint8B
+0x028 IdleTimeBuckets : _PROC_IDLE_STATE_BUCKET
+0x000 TotalTime : Uint8B
+0x008 MinTime : Uint8B
+0x010 MaxTime : Uint8B
+0x018 Count : Uint4B
+0x000 TotalTime : Uint8B
+0x008 IdleTransitions : Uint4B
+0x00c FailedTransitions : Uint4B
+0x010 InvalidBucketIndex : Uint4B
+0x018 MinTime : Uint8B
+0x020 MaxTime : Uint8B
+0x028 IdleTimeBuckets : _PROC_IDLE_STATE_BUCKET
+0x000 TotalTime : Uint8B
+0x008 MinTime : Uint8B
+0x010 MaxTime : Uint8B
+0x018 Count : Uint4B
+0x000 TotalTime : Uint8B +0x008 MinTime : Uint8B +0x010 MaxTime : Uint8B +0x018 Count : Uint4B
+0x000 Prcb : Ptr32 +0x004 PerfContext : Uint4B +0x008 PercentageCap : Uint4B +0x00c ThermalCap : Uint4B +0x010 TargetFrequency : Uint4B +0x014 AcumulatedFullFrequency : Uint4B +0x018 AcumulatedZeroFrequency : Uint4B +0x01c FrequencyHistoryTotal : Uint4B +0x020 AverageFrequency : Uint4B
+0x000 Link : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 Master : Ptr32
+0x00c Members : _KAFFINITY_EX
+0x000 Count : Uint2B
+0x002 Size : Uint2B
+0x004 Reserved : Uint4B
+0x008 Bitmap : Uint4B
+0x024 FeedbackHandler : Ptr32
+0x028 GetFFHThrottleState : Ptr32
+0x02c BoostPolicyHandler : Ptr32
+0x030 PerfSelectionHandler : Ptr32
+0x034 PerfHandler : Ptr32
+0x038 Processors : Ptr32
+0x040 PerfChangeTime : Uint8B
+0x048 ProcessorCount : Uint4B
+0x04c PreviousFrequencyMhz : Uint4B
+0x050 CurrentFrequencyMhz : Uint4B
+0x054 PreviousFrequency : Uint4B
+0x058 CurrentFrequency : Uint4B
+0x05c CurrentPerfContext : Uint4B
+0x060 DesiredFrequency : Uint4B
+0x064 MaxFrequency : Uint4B
+0x068 MinPerfPercent : Uint4B
+0x06c MinThrottlePercent : Uint4B
+0x070 MaxPercent : Uint4B
+0x074 MinPercent : Uint4B
+0x078 ConstrainedMaxPercent : Uint4B
+0x07c ConstrainedMinPercent : Uint4B
+0x080 Coordination : UChar
+0x084 PerfChangeIntervalCount : Int4B
+0x000 BusyPercentage : UChar +0x001 FrequencyPercentage : UChar
+0x000 CapturedCpuShareWeight : Uint4B +0x004 CapturedTotalWeight : Uint4B +0x000 CombinedData : Int8B
+0x000 ImpersonationData : Uint4B +0x000 ImpersonationToken : Ptr32 +0x000 ImpersonationLevel : Pos 0, 2 Bits +0x000 EffectiveOnly : Pos 2, 1 Bit
+0x000 ListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 SessionId : Uint4B
+0x00c CpuShareWeight : Uint4B
+0x010 CapturedWeightData : _PSP_CPU_SHARE_CAPTURED_WEIGHT_DATA
+0x000 CapturedCpuShareWeight : Uint4B
+0x004 CapturedTotalWeight : Uint4B
+0x000 CombinedData : Int8B
+0x018 DuplicateInputMarker : Pos 0, 1 Bit
+0x018 Reserved : Pos 1, 31 Bits
+0x018 MiscFlags : Int4B
+0x000 BlockCurrentGenerationLock : Uint4B
+0x008 CyclesAccumulated : Uint8B
+0x040 CycleCredit : Uint8B
+0x048 BlockCurrentGeneration : Uint4B
+0x04c CpuCyclePercent : Uint4B
+0x050 CyclesFinishedForCurrentGeneration : UChar
+0x080 Cpu : _PS_PER_CPU_QUOTA_CACHE_AWARE
+0x000 SortedListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 IdleOnlyListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 CycleBaseAllowance : Uint8B
+0x018 CyclesRemaining : Int8B
+0x020 CurrentGeneration : Uint4B
+0x000 SortedListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 IdleOnlyListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 CycleBaseAllowance : Uint8B
+0x018 CyclesRemaining : Int8B
+0x020 CurrentGeneration : Uint4B
PsResourceNonPagedPool = 0n0 PsResourcePagedPool = 0n1 PsResourcePageFile = 0n2 PsResourceWorkingSet = 0n3 PsResourceCpuRate = 0n4 PsResourceMax = 0n5
RegNtDeleteKey = 0n0 RegNtPreDeleteKey = 0n0 RegNtSetValueKey = 0n1 RegNtPreSetValueKey = 0n1 RegNtDeleteValueKey = 0n2 RegNtPreDeleteValueKey = 0n2 RegNtSetInformationKey = 0n3 RegNtPreSetInformationKey = 0n3 RegNtRenameKey = 0n4 RegNtPreRenameKey = 0n4 RegNtEnumerateKey = 0n5 RegNtPreEnumerateKey = 0n5 RegNtEnumerateValueKey = 0n6 RegNtPreEnumerateValueKey = 0n6 RegNtQueryKey = 0n7 RegNtPreQueryKey = 0n7 RegNtQueryValueKey = 0n8 RegNtPreQueryValueKey = 0n8 RegNtQueryMultipleValueKey = 0n9 RegNtPreQueryMultipleValueKey = 0n9 RegNtPreCreateKey = 0n10 RegNtPostCreateKey = 0n11 RegNtPreOpenKey = 0n12 RegNtPostOpenKey = 0n13 RegNtKeyHandleClose = 0n14 RegNtPreKeyHandleClose = 0n14 RegNtPostDeleteKey = 0n15 RegNtPostSetValueKey = 0n16 RegNtPostDeleteValueKey = 0n17 RegNtPostSetInformationKey = 0n18 RegNtPostRenameKey = 0n19 RegNtPostEnumerateKey = 0n20 RegNtPostEnumerateValueKey = 0n21 RegNtPostQueryKey = 0n22 RegNtPostQueryValueKey = 0n23 RegNtPostQueryMultipleValueKey = 0n24 RegNtPostKeyHandleClose = 0n25 RegNtPreCreateKeyEx = 0n26 RegNtPostCreateKeyEx = 0n27 RegNtPreOpenKeyEx = 0n28 RegNtPostOpenKeyEx = 0n29 RegNtPreFlushKey = 0n30 RegNtPostFlushKey = 0n31 RegNtPreLoadKey = 0n32 RegNtPostLoadKey = 0n33 RegNtPreUnLoadKey = 0n34 RegNtPostUnLoadKey = 0n35 RegNtPreQueryKeySecurity = 0n36 RegNtPostQueryKeySecurity = 0n37 RegNtPreSetKeySecurity = 0n38 RegNtPostSetKeySecurity = 0n39 RegNtCallbackObjectContextCleanup = 0n40 RegNtPreRestoreKey = 0n41 RegNtPostRestoreKey = 0n42 RegNtPreSaveKey = 0n43 RegNtPostSaveKey = 0n44 RegNtPreReplaceKey = 0n45 RegNtPostReplaceKey = 0n46 MaxRegNtNotifyClass = 0n47
+0x000 Previous : Ptr32 +0x004 ActivationContext : Ptr32 +0x008 Flags : Uint4B
+0x000 BalancedRoot : _RTL_BALANCED_LINKS
+0x000 Parent : Ptr32
+0x004 LeftChild : Ptr32
+0x008 RightChild : Ptr32
+0x00c Balance : Char
+0x00d Reserved : UChar
+0x010 OrderedPointer : Ptr32
+0x014 WhichOrderedElement : Uint4B
+0x018 NumberGenericTableElements : Uint4B
+0x01c DepthOfTree : Uint4B
+0x020 RestartKey : Ptr32
+0x024 DeleteCount : Uint4B
+0x028 CompareRoutine : Ptr32
+0x02c AllocateRoutine : Ptr32
+0x030 FreeRoutine : Ptr32
+0x034 TableContext : Ptr32
+0x000 Parent : Ptr32 +0x004 LeftChild : Ptr32 +0x008 RightChild : Ptr32 +0x00c Balance : Char +0x00d Reserved : UChar
+0x000 DebugInfo : Ptr32 +0x004 LockCount : Int4B +0x008 RecursionCount : Int4B +0x00c OwningThread : Ptr32 +0x010 LockSemaphore : Ptr32 +0x014 SpinCount : Uint4B
+0x000 Type : Uint2B
+0x002 CreatorBackTraceIndex : Uint2B
+0x004 CriticalSection : Ptr32
+0x008 ProcessLocksList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 EntryCount : Uint4B
+0x014 ContentionCount : Uint4B
+0x018 Flags : Uint4B
+0x01c CreatorBackTraceIndexHigh : Uint2B
+0x01e SpareUSHORT : Uint2B
+0x000 Flags : Uint2B
+0x002 Length : Uint2B
+0x004 TimeStamp : Uint4B
+0x008 DosPath : _STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x000 Flags : Uint4B +0x004 Shift : Uint4B +0x008 TableSize : Uint4B +0x00c Pivot : Uint4B +0x010 DivisorMask : Uint4B +0x014 NumEntries : Uint4B +0x018 NonEmptyBuckets : Uint4B +0x01c NumEnumerators : Uint4B +0x020 Directory : Ptr32
+0x000 ChainHead : Ptr32 +0x004 PrevLinkage : Ptr32 +0x008 Signature : Uint4B
+0x000 Linkage : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 Signature : Uint4B
+0x000 HashEntry : _RTL_DYNAMIC_HASH_TABLE_ENTRY
+0x000 Linkage : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 Signature : Uint4B
+0x00c ChainHead : Ptr32
+0x010 BucketIndex : Uint4B
GenericLessThan = 0n0 GenericGreaterThan = 0n1 GenericEqual = 0n2
+0x000 Locked : Pos 0, 1 Bit +0x000 Waiting : Pos 1, 1 Bit +0x000 Waking : Pos 2, 1 Bit +0x000 MultipleShared : Pos 3, 1 Bit +0x000 Shared : Pos 4, 28 Bits +0x000 Value : Uint4B +0x000 Ptr : Ptr32
+0x000 Lock : _RTL_SRWLOCK
+0x000 Locked : Pos 0, 1 Bit
+0x000 Waiting : Pos 1, 1 Bit
+0x000 Waking : Pos 2, 1 Bit
+0x000 MultipleShared : Pos 3, 1 Bit
+0x000 Shared : Pos 4, 28 Bits
+0x000 Value : Uint4B
+0x000 Ptr : Ptr32
+0x000 HashChain : _RTL_STD_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 TraceCount : Pos 0, 11 Bits
+0x004 BlockDepth : Pos 11, 5 Bits
+0x006 IndexHigh : Uint2B
+0x008 Index : Uint2B
+0x00a Depth : Uint2B
+0x00c BackTrace : Ptr32
+0x00c FreeChain : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x000 Next : Ptr32
+0x004 Lock : _RTL_STACK_DATABASE_LOCK
+0x000 Lock : _RTL_SRWLOCK
+0x000 Locked : Pos 0, 1 Bit
+0x000 Waiting : Pos 1, 1 Bit
+0x000 Waking : Pos 2, 1 Bit
+0x000 MultipleShared : Pos 3, 1 Bit
+0x000 Shared : Pos 4, 28 Bits
+0x000 Value : Uint4B
+0x000 Ptr : Ptr32
+0x000 Magic : Uint4B +0x004 Count : Uint4B +0x008 Size : Uint4B +0x00c UserCount : Uint4B +0x010 UserSize : Uint4B +0x014 UserContext : Ptr32 +0x018 Next : Ptr32 +0x01c Trace : Ptr32
+0x000 Magic : Uint4B
+0x004 Flags : Uint4B
+0x008 Tag : Uint4B
+0x00c SegmentList : Ptr32
+0x010 MaximumSize : Uint4B
+0x014 CurrentSize : Uint4B
+0x018 Owner : Ptr32
+0x01c Lock : _RTL_CRITICAL_SECTION
+0x000 DebugInfo : Ptr32
+0x004 LockCount : Int4B
+0x008 RecursionCount : Int4B
+0x00c OwningThread : Ptr32
+0x010 LockSemaphore : Ptr32
+0x014 SpinCount : Uint4B
+0x034 NoOfBuckets : Uint4B
+0x038 Buckets : Ptr32
+0x03c HashFunction : Ptr32
+0x040 NoOfTraces : Uint4B
+0x044 NoOfHits : Uint4B
+0x048 HashCounter : Uint4B
+0x000 Magic : Uint4B +0x004 Database : Ptr32 +0x008 NextSegment : Ptr32 +0x00c TotalSize : Uint4B +0x010 SegmentStart : Ptr32 +0x014 SegmentEnd : Ptr32 +0x018 SegmentFree : Ptr32
+0x000 MaximumLength : Uint4B
+0x004 Length : Uint4B
+0x008 Flags : Uint4B
+0x00c DebugFlags : Uint4B
+0x010 ConsoleHandle : Ptr32
+0x014 ConsoleFlags : Uint4B
+0x018 StandardInput : Ptr32
+0x01c StandardOutput : Ptr32
+0x020 StandardError : Ptr32
+0x024 CurrentDirectory : _CURDIR
+0x000 DosPath : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x008 Handle : Ptr32
+0x030 DllPath : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x038 ImagePathName : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x040 CommandLine : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x048 Environment : Ptr32
+0x04c StartingX : Uint4B
+0x050 StartingY : Uint4B
+0x054 CountX : Uint4B
+0x058 CountY : Uint4B
+0x05c CountCharsX : Uint4B
+0x060 CountCharsY : Uint4B
+0x064 FillAttribute : Uint4B
+0x068 WindowFlags : Uint4B
+0x06c ShowWindowFlags : Uint4B
+0x070 WindowTitle : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x078 DesktopInfo : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x080 ShellInfo : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x088 RuntimeData : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x090 CurrentDirectores : _RTL_DRIVE_LETTER_CURDIR
+0x000 Flags : Uint2B
+0x002 Length : Uint2B
+0x004 TimeStamp : Uint4B
+0x008 DosPath : _STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x290 EnvironmentSize : Uint4B
+0x294 EnvironmentVersion : Uint4B
+0x000 DataSectionObject : Ptr32 +0x004 SharedCacheMap : Ptr32 +0x008 ImageSectionObject : Ptr32
+0x000 Revision : UChar +0x001 Sbz1 : UChar +0x002 Control : Uint2B +0x004 Owner : Ptr32 +0x008 Group : Ptr32 +0x00c Sacl : Ptr32 +0x010 Dacl : Ptr32
SecurityAnonymous = 0n0 SecurityIdentification = 0n1 SecurityImpersonation = 0n2 SecurityDelegation = 0n3
SetSecurityDescriptor = 0n0 QuerySecurityDescriptor = 0n1 DeleteSecurityDescriptor = 0n2 AssignSecurityDescriptor = 0n3
+0x000 Length : Uint4B
+0x004 ImpersonationLevel :
SecurityAnonymous = 0n0
SecurityIdentification = 0n1
SecurityImpersonation = 0n2
SecurityDelegation = 0n3
+0x008 ContextTrackingMode : UChar
+0x009 EffectiveOnly : UChar
+0x000 ClientToken : Ptr32
+0x004 ImpersonationLevel :
SecurityAnonymous = 0n0
SecurityIdentification = 0n1
SecurityImpersonation = 0n2
SecurityDelegation = 0n3
+0x008 PrimaryToken : Ptr32
+0x00c ProcessAuditId : Ptr32
+0x000 Revision : UChar
+0x001 SubAuthorityCount : UChar
+0x002 IdentifierAuthority : _SID_IDENTIFIER_AUTHORITY
+0x000 Value : UChar
+0x008 SubAuthority : Uint4B
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x000 Reserved : Char
+0x000 Lock : _RTL_STACK_DATABASE_LOCK
+0x000 Lock : _RTL_SRWLOCK
+0x000 Locked : Pos 0, 1 Bit
+0x000 Waiting : Pos 1, 1 Bit
+0x000 Waking : Pos 2, 1 Bit
+0x000 MultipleShared : Pos 3, 1 Bit
+0x000 Shared : Pos 4, 28 Bits
+0x000 Value : Uint4B
+0x000 Ptr : Ptr32
+0x038 Reserved2 : Ptr32
+0x03c PeakHashCollisionListLength : Uint4B
+0x040 LowerMemoryStart : Ptr32
+0x044 PreCommitted : UChar
+0x045 DumpInProgress : UChar
+0x048 CommitBase : Ptr32
+0x04c CurrentLowerCommitLimit : Ptr32
+0x050 CurrentUpperCommitLimit : Ptr32
+0x054 NextFreeLowerMemory : Ptr32
+0x058 NextFreeUpperMemory : Ptr32
+0x05c NumberOfEntriesLookedUp : Uint4B
+0x060 NumberOfEntriesAdded : Uint4B
+0x064 EntryIndexArray : Ptr32
+0x068 NumberOfEntriesAllocated : Uint4B
+0x06c NumberOfEntriesAvailable : Uint4B
+0x070 NumberOfAllocationFailures : Uint4B
+0x078 FreeLists : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x178 NumberOfBuckets : Uint4B
+0x17c Buckets : _RTL_STD_LIST_HEAD
+0x000 Next : Ptr32
+0x004 Lock : _RTL_STACK_DATABASE_LOCK
+0x000 Lock : _RTL_SRWLOCK
+0x000 Locked : Pos 0, 1 Bit
+0x000 Waiting : Pos 1, 1 Bit
+0x000 Waking : Pos 2, 1 Bit
+0x000 MultipleShared : Pos 3, 1 Bit
+0x000 Shared : Pos 4, 28 Bits
+0x000 Value : Uint4B
+0x000 Ptr : Ptr32
+0x000 Length : Uint2B +0x002 MaximumLength : Uint2B +0x004 Buffer : Ptr32
PowerSystemUnspecified = 0n0 PowerSystemWorking = 0n1 PowerSystemSleeping1 = 0n2 PowerSystemSleeping2 = 0n3 PowerSystemSleeping3 = 0n4 PowerSystemHibernate = 0n5 PowerSystemShutdown = 0n6 PowerSystemMaximum = 0n7
+0x000 Reserved1 : Pos 0, 8 Bits +0x000 TargetSystemState : Pos 8, 4 Bits +0x000 EffectiveSystemState : Pos 12, 4 Bits +0x000 CurrentSystemState : Pos 16, 4 Bits +0x000 IgnoreHibernationPath : Pos 20, 1 Bit +0x000 PseudoTransition : Pos 21, 1 Bit +0x000 Reserved2 : Pos 22, 10 Bits +0x000 ContextAsUlong : Uint4B
+0x000 NtTib : _NT_TIB
+0x000 ExceptionList : Ptr32
+0x004 StackBase : Ptr32
+0x008 StackLimit : Ptr32
+0x00c SubSystemTib : Ptr32
+0x010 FiberData : Ptr32
+0x010 Version : Uint4B
+0x014 ArbitraryUserPointer : Ptr32
+0x018 Self : Ptr32
+0x01c EnvironmentPointer : Ptr32
+0x020 ClientId : _CLIENT_ID
+0x000 UniqueProcess : Ptr32
+0x004 UniqueThread : Ptr32
+0x028 ActiveRpcHandle : Ptr32
+0x02c ThreadLocalStoragePointer : Ptr32
+0x030 ProcessEnvironmentBlock : Ptr32
+0x034 LastErrorValue : Uint4B
+0x038 CountOfOwnedCriticalSections : Uint4B
+0x03c CsrClientThread : Ptr32
+0x040 Win32ThreadInfo : Ptr32
+0x044 User32Reserved : Uint4B
+0x0ac UserReserved : Uint4B
+0x0c0 WOW32Reserved : Ptr32
+0x0c4 CurrentLocale : Uint4B
+0x0c8 FpSoftwareStatusRegister : Uint4B
+0x0cc SystemReserved1 : Ptr32
+0x1a4 ExceptionCode : Int4B
+0x1a8 ActivationContextStackPointer : Ptr32
+0x1ac SpareBytes : UChar
+0x1d0 TxFsContext : Uint4B
+0x1d4 GdiTebBatch : _GDI_TEB_BATCH
+0x000 Offset : Uint4B
+0x004 HDC : Uint4B
+0x008 Buffer : Uint4B
+0x6b4 RealClientId : _CLIENT_ID
+0x000 UniqueProcess : Ptr32
+0x004 UniqueThread : Ptr32
+0x6bc GdiCachedProcessHandle : Ptr32
+0x6c0 GdiClientPID : Uint4B
+0x6c4 GdiClientTID : Uint4B
+0x6c8 GdiThreadLocalInfo : Ptr32
+0x6cc Win32ClientInfo : Uint4B
+0x7c4 glDispatchTable : Ptr32
+0xb68 glReserved1 : Uint4B
+0xbdc glReserved2 : Ptr32
+0xbe0 glSectionInfo : Ptr32
+0xbe4 glSection : Ptr32
+0xbe8 glTable : Ptr32
+0xbec glCurrentRC : Ptr32
+0xbf0 glContext : Ptr32
+0xbf4 LastStatusValue : Uint4B
+0xbf8 StaticUnicodeString : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0xc00 StaticUnicodeBuffer : Wchar
+0xe0c DeallocationStack : Ptr32
+0xe10 TlsSlots : Ptr32
+0xf10 TlsLinks : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0xf18 Vdm : Ptr32
+0xf1c ReservedForNtRpc : Ptr32
+0xf20 DbgSsReserved : Ptr32
+0xf28 HardErrorMode : Uint4B
+0xf2c Instrumentation : Ptr32
+0xf50 ActivityId : _GUID
+0x000 Data1 : Uint4B
+0x004 Data2 : Uint2B
+0x006 Data3 : Uint2B
+0x008 Data4 : UChar
+0xf60 SubProcessTag : Ptr32
+0xf64 EtwLocalData : Ptr32
+0xf68 EtwTraceData : Ptr32
+0xf6c WinSockData : Ptr32
+0xf70 GdiBatchCount : Uint4B
+0xf74 CurrentIdealProcessor : _PROCESSOR_NUMBER
+0x000 Group : Uint2B
+0x002 Number : UChar
+0x003 Reserved : UChar
+0xf74 IdealProcessorValue : Uint4B
+0xf74 ReservedPad0 : UChar
+0xf75 ReservedPad1 : UChar
+0xf76 ReservedPad2 : UChar
+0xf77 IdealProcessor : UChar
+0xf78 GuaranteedStackBytes : Uint4B
+0xf7c ReservedForPerf : Ptr32
+0xf80 ReservedForOle : Ptr32
+0xf84 WaitingOnLoaderLock : Uint4B
+0xf88 SavedPriorityState : Ptr32
+0xf8c SoftPatchPtr1 : Uint4B
+0xf90 ThreadPoolData : Ptr32
+0xf94 TlsExpansionSlots : Ptr32
+0xf98 MuiGeneration : Uint4B
+0xf9c IsImpersonating : Uint4B
+0xfa0 NlsCache : Ptr32
+0xfa4 pShimData : Ptr32
+0xfa8 HeapVirtualAffinity : Uint4B
+0xfac CurrentTransactionHandle : Ptr32
+0xfb0 ActiveFrame : Ptr32
+0xfb4 FlsData : Ptr32
+0xfb8 PreferredLanguages : Ptr32
+0xfbc UserPrefLanguages : Ptr32
+0xfc0 MergedPrefLanguages : Ptr32
+0xfc4 MuiImpersonation : Uint4B
+0xfc8 CrossTebFlags : Uint2B
+0xfc8 SpareCrossTebBits : Pos 0, 16 Bits
+0xfca SameTebFlags : Uint2B
+0xfca SafeThunkCall : Pos 0, 1 Bit
+0xfca InDebugPrint : Pos 1, 1 Bit
+0xfca HasFiberData : Pos 2, 1 Bit
+0xfca SkipThreadAttach : Pos 3, 1 Bit
+0xfca WerInShipAssertCode : Pos 4, 1 Bit
+0xfca RanProcessInit : Pos 5, 1 Bit
+0xfca ClonedThread : Pos 6, 1 Bit
+0xfca SuppressDebugMsg : Pos 7, 1 Bit
+0xfca DisableUserStackWalk : Pos 8, 1 Bit
+0xfca RtlExceptionAttached : Pos 9, 1 Bit
+0xfca InitialThread : Pos 10, 1 Bit
+0xfca SpareSameTebBits : Pos 11, 5 Bits
+0xfcc TxnScopeEnterCallback : Ptr32
+0xfd0 TxnScopeExitCallback : Ptr32
+0xfd4 TxnScopeContext : Ptr32
+0xfd8 LockCount : Uint4B
+0xfdc SpareUlong0 : Uint4B
+0xfe0 ResourceRetValue : Ptr32
+0x000 Flags : Uint4B +0x004 Previous : Ptr32 +0x008 Context : Ptr32
+0x000 Size : Uint2B
+0x002 Version : Uint2B
+0x004 ProcessorNumber : _PROCESSOR_NUMBER
+0x000 Group : Uint2B
+0x002 Number : UChar
+0x003 Reserved : UChar
+0x008 ContextSwitches : Uint4B
+0x00c HwCountersCount : Uint4B
+0x010 UpdateCount : Uint8B
+0x018 WaitReasonBitMap : Uint8B
+0x020 HardwareCounters : Uint8B
+0x028 CycleTime : _COUNTER_READING
+0x000 Type :
PMCCounter = 0n0
MaxHardwareCounterType = 0n1
+0x004 Index : Uint4B
+0x008 Start : Uint8B
+0x010 Total : Uint8B
+0x040 HwCounters : _COUNTER_READING
+0x000 Type :
PMCCounter = 0n0
MaxHardwareCounterType = 0n1
+0x004 Index : Uint4B
+0x008 Start : Uint8B
+0x010 Total : Uint8B
+0x000 Version : Uint4B
+0x004 Pool : Ptr32
+0x008 CleanupGroup : Ptr32
+0x00c CleanupGroupCancelCallback : Ptr32
+0x010 RaceDll : Ptr32
+0x014 ActivationContext : Ptr32
+0x018 FinalizationCallback : Ptr32
+0x01c u : <unnamed-tag>
+0x000 Flags : Uint4B
+0x000 s : <unnamed-tag>
+0x000 LongFunction : Pos 0, 1 Bit
+0x000 Persistent : Pos 1, 1 Bit
+0x000 Private : Pos 2, 30 Bits
+0x020 CallbackPriority :
TP_CALLBACK_PRIORITY_HIGH = 0n0
TP_CALLBACK_PRIORITY_NORMAL = 0n1
TP_CALLBACK_PRIORITY_LOW = 0n2
TP_CALLBACK_PRIORITY_INVALID = 0n3
+0x024 Size : Uint4B
TP_CALLBACK_PRIORITY_HIGH = 0n0 TP_CALLBACK_PRIORITY_NORMAL = 0n1 TP_CALLBACK_PRIORITY_LOW = 0n2 TP_CALLBACK_PRIORITY_INVALID = 0n3
+0x000 Callback : Ptr32 +0x004 NumaNode : Uint4B +0x008 IdealProcessor : UChar
+0x000 GuardLinks : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 Guards : Ptr32
+0x000 Callbacks : Ptr32
+0x004 NumaNode : Uint4B
+0x008 IdealProcessor : UChar
+0x00c PostGuard : _TP_NBQ_GUARD
+0x000 GuardLinks : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 Guards : Ptr32
+0x01c NBQNode : Ptr32
+0x000 Length : Uint2B +0x002 TxFsContext : Uint2B +0x004 TransactionObject : Ptr32
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 QuadPart : Uint8B
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 QuadPart : Uint8B
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 QuadPart : Uint8B
+0x000 Length : Uint2B +0x002 MaximumLength : Uint2B +0x004 Buffer : Ptr32
+0x000 Length : Uint2B +0x002 MaximumLength : Uint2B +0x004 Buffer : Ptr32
+0x000 Length : Uint2B +0x002 MaximumLength : Uint2B +0x004 Buffer : Ptr32
+0x000 UserBlocks : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x000 Next : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr32
+0x004 Depth : Uint2B
+0x006 Sequence : Uint2B
+0x008 AvailableBlocks : Uint4B
+0x000 Type : Int2B +0x002 Size : Int2B +0x004 Flags : Uint2B +0x006 VolumeLabelLength : Uint2B +0x008 DeviceObject : Ptr32 +0x00c RealDevice : Ptr32 +0x010 SerialNumber : Uint4B +0x014 ReferenceCount : Uint4B +0x018 VolumeLabel : Wchar
+0x000 WaitQueueEntry : _KDEVICE_QUEUE_ENTRY
+0x000 DeviceListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 SortKey : Uint4B
+0x00c Inserted : UChar
+0x010 DeviceRoutine : Ptr32
+0x014 DeviceContext : Ptr32
+0x018 NumberOfMapRegisters : Uint4B
+0x01c DeviceObject : Ptr32
+0x020 CurrentIrp : Ptr32
+0x024 BufferChainingDpc : Ptr32
WheaDataFormatIPFSalRecord = 0n0 WheaDataFormatXPFMCA = 0n1 WheaDataFormatMemory = 0n2 WheaDataFormatPCIExpress = 0n3 WheaDataFormatNMIPort = 0n4 WheaDataFormatPCIXBus = 0n5 WheaDataFormatPCIXDevice = 0n6 WheaDataFormatGeneric = 0n7 WheaDataFormatMax = 0n8
+0x000 PreviousError : Pos 0, 1 Bit +0x000 Reserved1 : Pos 1, 1 Bit +0x000 HypervisorError : Pos 2, 1 Bit +0x000 Simulated : Pos 3, 1 Bit +0x000 PlatformPfaControl : Pos 4, 1 Bit +0x000 PlatformDirectedOffline : Pos 5, 1 Bit +0x000 Reserved2 : Pos 6, 26 Bits +0x000 AsULONG : Uint4B
+0x000 Signature : Uint4B
+0x004 Version : Uint4B
+0x008 Length : Uint4B
+0x00c Flags : _WHEA_ERROR_PACKET_FLAGS
+0x000 PreviousError : Pos 0, 1 Bit
+0x000 Reserved1 : Pos 1, 1 Bit
+0x000 HypervisorError : Pos 2, 1 Bit
+0x000 Simulated : Pos 3, 1 Bit
+0x000 PlatformPfaControl : Pos 4, 1 Bit
+0x000 PlatformDirectedOffline : Pos 5, 1 Bit
+0x000 Reserved2 : Pos 6, 26 Bits
+0x000 AsULONG : Uint4B
+0x010 ErrorType :
WheaErrTypeProcessor = 0n0
WheaErrTypeMemory = 0n1
WheaErrTypePCIExpress = 0n2
WheaErrTypeNMI = 0n3
WheaErrTypePCIXBus = 0n4
WheaErrTypePCIXDevice = 0n5
WheaErrTypeGeneric = 0n6
+0x014 ErrorSeverity :
WheaErrSevRecoverable = 0n0
WheaErrSevFatal = 0n1
WheaErrSevCorrected = 0n2
WheaErrSevInformational = 0n3
+0x018 ErrorSourceId : Uint4B
+0x01c ErrorSourceType :
WheaErrSrcTypeMCE = 0n0
WheaErrSrcTypeCMC = 0n1
WheaErrSrcTypeCPE = 0n2
WheaErrSrcTypeNMI = 0n3
WheaErrSrcTypePCIe = 0n4
WheaErrSrcTypeGeneric = 0n5
WheaErrSrcTypeINIT = 0n6
WheaErrSrcTypeBOOT = 0n7
WheaErrSrcTypeSCIGeneric = 0n8
WheaErrSrcTypeIPFMCA = 0n9
WheaErrSrcTypeIPFCMC = 0n10
WheaErrSrcTypeIPFCPE = 0n11
WheaErrSrcTypeMax = 0n12
+0x020 NotifyType : _GUID
+0x000 Data1 : Uint4B
+0x004 Data2 : Uint2B
+0x006 Data3 : Uint2B
+0x008 Data4 : UChar
+0x030 Context : Uint8B
+0x038 DataFormat :
WheaDataFormatIPFSalRecord = 0n0
WheaDataFormatXPFMCA = 0n1
WheaDataFormatMemory = 0n2
WheaDataFormatPCIExpress = 0n3
WheaDataFormatNMIPort = 0n4
WheaDataFormatPCIXBus = 0n5
WheaDataFormatPCIXDevice = 0n6
WheaDataFormatGeneric = 0n7
WheaDataFormatMax = 0n8
+0x03c Reserved1 : Uint4B
+0x040 DataOffset : Uint4B
+0x044 DataLength : Uint4B
+0x048 PshedDataOffset : Uint4B
+0x04c PshedDataLength : Uint4B
+0x000 Header : _WHEA_ERROR_RECORD_HEADER
+0x000 Signature : Uint4B
+0x004 Revision : _WHEA_REVISION
+0x000 MinorRevision : UChar
+0x001 MajorRevision : UChar
+0x000 AsUSHORT : Uint2B
+0x006 SignatureEnd : Uint4B
+0x00a SectionCount : Uint2B
+0x00c Severity :
WheaErrSevRecoverable = 0n0
WheaErrSevFatal = 0n1
WheaErrSevCorrected = 0n2
WheaErrSevInformational = 0n3
+0x010 ValidBits : _WHEA_ERROR_RECORD_HEADER_VALIDBITS
+0x000 PlatformId : Pos 0, 1 Bit
+0x000 Timestamp : Pos 1, 1 Bit
+0x000 PartitionId : Pos 2, 1 Bit
+0x000 Reserved : Pos 3, 29 Bits
+0x000 AsULONG : Uint4B
+0x014 Length : Uint4B
+0x018 Timestamp : _WHEA_TIMESTAMP
+0x000 Seconds : Pos 0, 8 Bits
+0x000 Minutes : Pos 8, 8 Bits
+0x000 Hours : Pos 16, 8 Bits
+0x000 Precise : Pos 24, 1 Bit
+0x000 Reserved : Pos 25, 7 Bits
+0x000 Day : Pos 32, 8 Bits
+0x000 Month : Pos 40, 8 Bits
+0x000 Year : Pos 48, 8 Bits
+0x000 Century : Pos 56, 8 Bits
+0x000 AsLARGE_INTEGER : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x020 PlatformId : _GUID
+0x000 Data1 : Uint4B
+0x004 Data2 : Uint2B
+0x006 Data3 : Uint2B
+0x008 Data4 : UChar
+0x030 PartitionId : _GUID
+0x000 Data1 : Uint4B
+0x004 Data2 : Uint2B
+0x006 Data3 : Uint2B
+0x008 Data4 : UChar
+0x040 CreatorId : _GUID
+0x000 Data1 : Uint4B
+0x004 Data2 : Uint2B
+0x006 Data3 : Uint2B
+0x008 Data4 : UChar
+0x050 NotifyType : _GUID
+0x000 Data1 : Uint4B
+0x004 Data2 : Uint2B
+0x006 Data3 : Uint2B
+0x008 Data4 : UChar
+0x060 RecordId : Uint8B
+0x068 Flags : _WHEA_ERROR_RECORD_HEADER_FLAGS
+0x000 Recovered : Pos 0, 1 Bit
+0x000 PreviousError : Pos 1, 1 Bit
+0x000 Simulated : Pos 2, 1 Bit
+0x000 Reserved : Pos 3, 29 Bits
+0x000 AsULONG : Uint4B
+0x06c PersistenceInfo : _WHEA_PERSISTENCE_INFO
+0x000 Signature : Pos 0, 16 Bits
+0x000 Length : Pos 16, 24 Bits
+0x000 Identifier : Pos 40, 16 Bits
+0x000 Attributes : Pos 56, 2 Bits
+0x000 DoNotLog : Pos 58, 1 Bit
+0x000 Reserved : Pos 59, 5 Bits
+0x000 AsULONGLONG : Uint8B
+0x074 Reserved : UChar
+0x080 SectionDescriptor : _WHEA_ERROR_RECORD_SECTION_DESCRIPTOR
+0x000 SectionOffset : Uint4B
+0x004 SectionLength : Uint4B
+0x008 Revision : _WHEA_REVISION
+0x000 MinorRevision : UChar
+0x001 MajorRevision : UChar
+0x000 AsUSHORT : Uint2B
+0x00a ValidBits : _WHEA_ERROR_RECORD_SECTION_DESCRIPTOR_VALIDBITS
+0x000 FRUId : Pos 0, 1 Bit
+0x000 FRUText : Pos 1, 1 Bit
+0x000 Reserved : Pos 2, 6 Bits
+0x000 AsUCHAR : UChar
+0x00b Reserved : UChar
+0x00c Flags : _WHEA_ERROR_RECORD_SECTION_DESCRIPTOR_FLAGS
+0x000 Primary : Pos 0, 1 Bit
+0x000 ContainmentWarning : Pos 1, 1 Bit
+0x000 Reset : Pos 2, 1 Bit
+0x000 ThresholdExceeded : Pos 3, 1 Bit
+0x000 ResourceNotAvailable : Pos 4, 1 Bit
+0x000 LatentError : Pos 5, 1 Bit
+0x000 Reserved : Pos 6, 26 Bits
+0x000 AsULONG : Uint4B
+0x010 SectionType : _GUID
+0x000 Data1 : Uint4B
+0x004 Data2 : Uint2B
+0x006 Data3 : Uint2B
+0x008 Data4 : UChar
+0x020 FRUId : _GUID
+0x000 Data1 : Uint4B
+0x004 Data2 : Uint2B
+0x006 Data3 : Uint2B
+0x008 Data4 : UChar
+0x030 SectionSeverity :
WheaErrSevRecoverable = 0n0
WheaErrSevFatal = 0n1
WheaErrSevCorrected = 0n2
WheaErrSevInformational = 0n3
+0x034 FRUText : Char
+0x000 Signature : Uint4B
+0x004 Revision : _WHEA_REVISION
+0x000 MinorRevision : UChar
+0x001 MajorRevision : UChar
+0x000 AsUSHORT : Uint2B
+0x006 SignatureEnd : Uint4B
+0x00a SectionCount : Uint2B
+0x00c Severity :
WheaErrSevRecoverable = 0n0
WheaErrSevFatal = 0n1
WheaErrSevCorrected = 0n2
WheaErrSevInformational = 0n3
+0x010 ValidBits : _WHEA_ERROR_RECORD_HEADER_VALIDBITS
+0x000 PlatformId : Pos 0, 1 Bit
+0x000 Timestamp : Pos 1, 1 Bit
+0x000 PartitionId : Pos 2, 1 Bit
+0x000 Reserved : Pos 3, 29 Bits
+0x000 AsULONG : Uint4B
+0x014 Length : Uint4B
+0x018 Timestamp : _WHEA_TIMESTAMP
+0x000 Seconds : Pos 0, 8 Bits
+0x000 Minutes : Pos 8, 8 Bits
+0x000 Hours : Pos 16, 8 Bits
+0x000 Precise : Pos 24, 1 Bit
+0x000 Reserved : Pos 25, 7 Bits
+0x000 Day : Pos 32, 8 Bits
+0x000 Month : Pos 40, 8 Bits
+0x000 Year : Pos 48, 8 Bits
+0x000 Century : Pos 56, 8 Bits
+0x000 AsLARGE_INTEGER : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x020 PlatformId : _GUID
+0x000 Data1 : Uint4B
+0x004 Data2 : Uint2B
+0x006 Data3 : Uint2B
+0x008 Data4 : UChar
+0x030 PartitionId : _GUID
+0x000 Data1 : Uint4B
+0x004 Data2 : Uint2B
+0x006 Data3 : Uint2B
+0x008 Data4 : UChar
+0x040 CreatorId : _GUID
+0x000 Data1 : Uint4B
+0x004 Data2 : Uint2B
+0x006 Data3 : Uint2B
+0x008 Data4 : UChar
+0x050 NotifyType : _GUID
+0x000 Data1 : Uint4B
+0x004 Data2 : Uint2B
+0x006 Data3 : Uint2B
+0x008 Data4 : UChar
+0x060 RecordId : Uint8B
+0x068 Flags : _WHEA_ERROR_RECORD_HEADER_FLAGS
+0x000 Recovered : Pos 0, 1 Bit
+0x000 PreviousError : Pos 1, 1 Bit
+0x000 Simulated : Pos 2, 1 Bit
+0x000 Reserved : Pos 3, 29 Bits
+0x000 AsULONG : Uint4B
+0x06c PersistenceInfo : _WHEA_PERSISTENCE_INFO
+0x000 Signature : Pos 0, 16 Bits
+0x000 Length : Pos 16, 24 Bits
+0x000 Identifier : Pos 40, 16 Bits
+0x000 Attributes : Pos 56, 2 Bits
+0x000 DoNotLog : Pos 58, 1 Bit
+0x000 Reserved : Pos 59, 5 Bits
+0x000 AsULONGLONG : Uint8B
+0x074 Reserved : UChar
+0x000 Recovered : Pos 0, 1 Bit +0x000 PreviousError : Pos 1, 1 Bit +0x000 Simulated : Pos 2, 1 Bit +0x000 Reserved : Pos 3, 29 Bits +0x000 AsULONG : Uint4B
+0x000 PlatformId : Pos 0, 1 Bit +0x000 Timestamp : Pos 1, 1 Bit +0x000 PartitionId : Pos 2, 1 Bit +0x000 Reserved : Pos 3, 29 Bits +0x000 AsULONG : Uint4B
+0x000 SectionOffset : Uint4B
+0x004 SectionLength : Uint4B
+0x008 Revision : _WHEA_REVISION
+0x000 MinorRevision : UChar
+0x001 MajorRevision : UChar
+0x000 AsUSHORT : Uint2B
+0x00a ValidBits : _WHEA_ERROR_RECORD_SECTION_DESCRIPTOR_VALIDBITS
+0x000 FRUId : Pos 0, 1 Bit
+0x000 FRUText : Pos 1, 1 Bit
+0x000 Reserved : Pos 2, 6 Bits
+0x000 AsUCHAR : UChar
+0x00b Reserved : UChar
+0x00c Flags : _WHEA_ERROR_RECORD_SECTION_DESCRIPTOR_FLAGS
+0x000 Primary : Pos 0, 1 Bit
+0x000 ContainmentWarning : Pos 1, 1 Bit
+0x000 Reset : Pos 2, 1 Bit
+0x000 ThresholdExceeded : Pos 3, 1 Bit
+0x000 ResourceNotAvailable : Pos 4, 1 Bit
+0x000 LatentError : Pos 5, 1 Bit
+0x000 Reserved : Pos 6, 26 Bits
+0x000 AsULONG : Uint4B
+0x010 SectionType : _GUID
+0x000 Data1 : Uint4B
+0x004 Data2 : Uint2B
+0x006 Data3 : Uint2B
+0x008 Data4 : UChar
+0x020 FRUId : _GUID
+0x000 Data1 : Uint4B
+0x004 Data2 : Uint2B
+0x006 Data3 : Uint2B
+0x008 Data4 : UChar
+0x030 SectionSeverity :
WheaErrSevRecoverable = 0n0
WheaErrSevFatal = 0n1
WheaErrSevCorrected = 0n2
WheaErrSevInformational = 0n3
+0x034 FRUText : Char
+0x000 Primary : Pos 0, 1 Bit +0x000 ContainmentWarning : Pos 1, 1 Bit +0x000 Reset : Pos 2, 1 Bit +0x000 ThresholdExceeded : Pos 3, 1 Bit +0x000 ResourceNotAvailable : Pos 4, 1 Bit +0x000 LatentError : Pos 5, 1 Bit +0x000 Reserved : Pos 6, 26 Bits +0x000 AsULONG : Uint4B
+0x000 FRUId : Pos 0, 1 Bit +0x000 FRUText : Pos 1, 1 Bit +0x000 Reserved : Pos 2, 6 Bits +0x000 AsUCHAR : UChar
WheaErrSevRecoverable = 0n0 WheaErrSevFatal = 0n1 WheaErrSevCorrected = 0n2 WheaErrSevInformational = 0n3
WheaErrSrcTypeMCE = 0n0 WheaErrSrcTypeCMC = 0n1 WheaErrSrcTypeCPE = 0n2 WheaErrSrcTypeNMI = 0n3 WheaErrSrcTypePCIe = 0n4 WheaErrSrcTypeGeneric = 0n5 WheaErrSrcTypeINIT = 0n6 WheaErrSrcTypeBOOT = 0n7 WheaErrSrcTypeSCIGeneric = 0n8 WheaErrSrcTypeIPFMCA = 0n9 WheaErrSrcTypeIPFCMC = 0n10 WheaErrSrcTypeIPFCPE = 0n11 WheaErrSrcTypeMax = 0n12
WheaErrTypeProcessor = 0n0 WheaErrTypeMemory = 0n1 WheaErrTypePCIExpress = 0n2 WheaErrTypeNMI = 0n3 WheaErrTypePCIXBus = 0n4 WheaErrTypePCIXDevice = 0n5 WheaErrTypeGeneric = 0n6
+0x000 Signature : Pos 0, 16 Bits +0x000 Length : Pos 16, 24 Bits +0x000 Identifier : Pos 40, 16 Bits +0x000 Attributes : Pos 56, 2 Bits +0x000 DoNotLog : Pos 58, 1 Bit +0x000 Reserved : Pos 59, 5 Bits +0x000 AsULONGLONG : Uint8B
+0x000 MinorRevision : UChar +0x001 MajorRevision : UChar +0x000 AsUSHORT : Uint2B
+0x000 Seconds : Pos 0, 8 Bits
+0x000 Minutes : Pos 8, 8 Bits
+0x000 Hours : Pos 16, 8 Bits
+0x000 Precise : Pos 24, 1 Bit
+0x000 Reserved : Pos 25, 7 Bits
+0x000 Day : Pos 32, 8 Bits
+0x000 Month : Pos 40, 8 Bits
+0x000 Year : Pos 48, 8 Bits
+0x000 Century : Pos 56, 8 Bits
+0x000 AsLARGE_INTEGER : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
WorkingSetTypeUser = 0n0 WorkingSetTypeSession = 0n1 WorkingSetTypeSystemTypes = 0n2 WorkingSetTypeSystemCache = 0n2 WorkingSetTypePagedPool = 0n3 WorkingSetTypeSystemPtes = 0n4 WorkingSetTypeMaximum = 0n5
+0x000 LegacyState : _XSAVE_FORMAT
+0x000 ControlWord : Uint2B
+0x002 StatusWord : Uint2B
+0x004 TagWord : UChar
+0x005 Reserved1 : UChar
+0x006 ErrorOpcode : Uint2B
+0x008 ErrorOffset : Uint4B
+0x00c ErrorSelector : Uint2B
+0x00e Reserved2 : Uint2B
+0x010 DataOffset : Uint4B
+0x014 DataSelector : Uint2B
+0x016 Reserved3 : Uint2B
+0x018 MxCsr : Uint4B
+0x01c MxCsr_Mask : Uint4B
+0x020 FloatRegisters : _M128A
+0x000 Low : Uint8B
+0x008 High : Int8B
+0x0a0 XmmRegisters : _M128A
+0x000 Low : Uint8B
+0x008 High : Int8B
+0x120 Reserved4 : UChar
+0x1e0 StackControl : Uint4B
+0x1fc Cr0NpxState : Uint4B
+0x200 Header : _XSAVE_AREA_HEADER
+0x000 Mask : Uint8B
+0x008 Reserved : Uint8B
+0x000 ControlWord : Uint2B
+0x002 StatusWord : Uint2B
+0x004 TagWord : UChar
+0x005 Reserved1 : UChar
+0x006 ErrorOpcode : Uint2B
+0x008 ErrorOffset : Uint4B
+0x00c ErrorSelector : Uint2B
+0x00e Reserved2 : Uint2B
+0x010 DataOffset : Uint4B
+0x014 DataSelector : Uint2B
+0x016 Reserved3 : Uint2B
+0x018 MxCsr : Uint4B
+0x01c MxCsr_Mask : Uint4B
+0x020 FloatRegisters : _M128A
+0x000 Low : Uint8B
+0x008 High : Int8B
+0x0a0 XmmRegisters : _M128A
+0x000 Low : Uint8B
+0x008 High : Int8B
+0x120 Reserved4 : UChar
+0x1e0 StackControl : Uint4B
+0x1fc Cr0NpxState : Uint4B
+0x000 EnabledFeatures : Uint8B
+0x008 Size : Uint4B
+0x00c OptimizedSave : Pos 0, 1 Bit
+0x010 Features : _XSTATE_FEATURE
+0x000 Offset : Uint4B
+0x004 Size : Uint4B
+0x000 Mask : Uint8B +0x008 Length : Uint4B +0x00c Reserved1 : Uint4B +0x010 Area : Ptr32 +0x014 Reserved2 : Uint4B +0x018 Buffer : Ptr32 +0x01c Reserved3 : Uint4B
+0x000 Reserved1 : Int8B
+0x008 Reserved2 : Uint4B
+0x00c Prev : Ptr32
+0x010 Reserved3 : Ptr32
+0x014 Thread : Ptr32
+0x018 Reserved4 : Ptr32
+0x01c Level : UChar
+0x000 XStateContext : _XSTATE_CONTEXT
+0x000 Mask : Uint8B
+0x008 Length : Uint4B
+0x00c Reserved1 : Uint4B
+0x010 Area : Ptr32
+0x014 Reserved2 : Uint4B
+0x018 Buffer : Ptr32
+0x01c Reserved3 : Uint4B
DISPLAYCONFIG_SCANLINE_ORDERING_UNSPECIFIED = 0n0 DISPLAYCONFIG_SCANLINE_ORDERING_PROGRESSIVE = 0n1 DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACED = 0n2 DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACED_UPPERFIELDFIRST = 0n2 DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACED_LOWERFIELDFIRST = 0n3 DISPLAYCONFIG_SCANLINE_ORDERING_FORCE_UINT32 = 0n-1
COMIMAGE_FLAGS_ILONLY = 0n1 COMIMAGE_FLAGS_32BITREQUIRED = 0n2 COMIMAGE_FLAGS_IL_LIBRARY = 0n4 COMIMAGE_FLAGS_STRONGNAMESIGNED = 0n8 COMIMAGE_FLAGS_NATIVE_ENTRYPOINT = 0n16 COMIMAGE_FLAGS_TRACKDEBUGDATA = 0x10000 COR_VERSION_MAJOR_V2 = 0n2 COR_VERSION_MAJOR = 0n2 COR_VERSION_MINOR = 0n0 COR_DELETED_NAME_LENGTH = 0n8 COR_VTABLEGAP_NAME_LENGTH = 0n8 NATIVE_TYPE_MAX_CB = 0n1 COR_ILMETHOD_SECT_SMALL_MAX_DATASIZE = 0n255 IMAGE_COR_MIH_METHODRVA = 0n1 IMAGE_COR_MIH_EHRVA = 0n2 IMAGE_COR_MIH_BASICBLOCK = 0n8 COR_VTABLE_32BIT = 0n1 COR_VTABLE_64BIT = 0n2 COR_VTABLE_FROM_UNMANAGED = 0n4 COR_VTABLE_FROM_UNMANAGED_RETAIN_APPDOMAIN = 0n8 COR_VTABLE_CALL_MOST_DERIVED = 0n16 IMAGE_COR_EATJ_THUNK_SIZE = 0n32 MAX_CLASS_NAME = 0n1024 MAX_PACKAGE_NAME = 0n1024
+0x000 ActiveFrame : Ptr32
+0x004 FrameListCache : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x00c Flags : Uint4B
+0x010 NextCookieSequenceNumber : Uint4B
+0x014 StackId : Uint4B
StandardDesign = 0n0 NEC98x86 = 0n1 EndAlternatives = 0n2
+0x000 Nodes : Uint4B
+0x008 Resources : Uint4B
+0x010 Threads : Uint4B
+0x018 BytesAllocated : Uint4B
+0x01c ResourceDatabase : Ptr32
+0x020 ThreadDatabase : Ptr32
+0x024 AllocationFailures : Uint4B
+0x028 NodesTrimmedBasedOnAge : Uint4B
+0x02c NodesTrimmedBasedOnCount : Uint4B
+0x030 NodesSearched : Uint4B
+0x034 MaxNodesSearched : Uint4B
+0x038 SequenceNumber : Uint4B
+0x03c RecursionDepthLimit : Uint4B
+0x040 SearchedNodesLimit : Uint4B
+0x044 DepthLimitHits : Uint4B
+0x048 SearchLimitHits : Uint4B
+0x04c ABC_ACB_Skipped : Uint4B
+0x050 OutOfOrderReleases : Uint4B
+0x054 NodesReleasedOutOfOrder : Uint4B
+0x058 NodeLevelCounter : Uint4B
+0x078 GraphNodes : Uint4B
+0x098 TotalReleases : Uint4B
+0x09c RootNodesDeleted : Uint4B
+0x0a0 ForgetHistoryCounter : Uint4B
+0x0a4 PoolTrimCounter : Uint4B
+0x0a8 FreeResourceList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x0b0 FreeThreadList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x0b8 FreeNodeList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x0c0 FreeResourceCount : Uint4B
+0x0c4 FreeThreadCount : Uint4B
+0x0c8 FreeNodeCount : Uint4B
+0x0cc Instigator : Ptr32
+0x0d0 NumberOfParticipants : Uint4B
+0x0d4 Participant : Ptr32
+0x154 CacheReductionInProgress : Uint4B
+0x000 Parent : Ptr32
+0x004 ChildrenList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x00c SiblingsList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x014 ResourceList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x014 FreeListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x01c Root : Ptr32
+0x020 ThreadEntry : Ptr32
+0x024 Active : Pos 0, 1 Bit
+0x024 OnlyTryAcquireUsed : Pos 1, 1 Bit
+0x024 ReleasedOutOfOrder : Pos 2, 1 Bit
+0x024 SequenceNumber : Pos 3, 29 Bits
+0x028 StackTrace : Ptr32
+0x0a8 ParentStackTrace : Ptr32
+0x000 Type :
AVrfpDeadlockTypeUnknown = 0n0
AVrfpDeadlockTypeCriticalSection = 0n1
AVrfpDeadlockTypeMaximum = 0n2
+0x004 NodeCount : Pos 0, 16 Bits
+0x004 RecursionCount : Pos 16, 16 Bits
+0x008 ResourceAddress : Ptr32
+0x00c ThreadOwner : Ptr32
+0x010 ResourceList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x018 HashChainList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x018 FreeListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x020 StackTrace : Ptr32
+0x0a0 LastAcquireTrace : Ptr32
+0x120 LastReleaseTrace : Ptr32
AVrfpDeadlockTypeUnknown = 0n0 AVrfpDeadlockTypeCriticalSection = 0n1 AVrfpDeadlockTypeMaximum = 0n2
+0x000 Thread : Ptr32
+0x004 CurrentTopNode : Ptr32
+0x008 ListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 FreeListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 NodeCount : Uint4B
+0x000 ThreadId : Ptr32 +0x004 ExceptionCode : Uint4B +0x008 ExceptionAddress : Ptr32 +0x00c ExceptionRecord : Ptr32 +0x010 ContextRecord : Ptr32
+0x000 HashChain : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 Id : Ptr32
+0x00c Function : Ptr32
+0x010 Parameter : Ptr32
+0x014 ParentThreadId : Ptr32
+0x018 StackSize : Uint4B
+0x01c CreationFlags : Uint4B
+0x000 Size : Uint4B
+0x004 Index : Uint4B
+0x008 EntryReplaceCallback : Ptr32
+0x00c Lock : _RTL_CRITICAL_SECTION
+0x000 DebugInfo : Ptr32
+0x004 LockCount : Int4B
+0x008 RecursionCount : Int4B
+0x00c OwningThread : Ptr32
+0x010 LockSemaphore : Ptr32
+0x014 SpinCount : Uint4B
+0x024 Entry : _AVRF_TRACKER_ENTRY
+0x000 Type : Uint2B
+0x002 TraceDepth : Uint2B
+0x004 Info : Ptr32
+0x014 Trace : Ptr32
+0x000 Type : Uint2B +0x002 TraceDepth : Uint2B +0x004 Info : Ptr32 +0x014 Trace : Ptr32
+0x000 ContextFlags : Uint4B
+0x004 Dr0 : Uint4B
+0x008 Dr1 : Uint4B
+0x00c Dr2 : Uint4B
+0x010 Dr3 : Uint4B
+0x014 Dr6 : Uint4B
+0x018 Dr7 : Uint4B
+0x01c FloatSave : _FLOATING_SAVE_AREA
+0x000 ControlWord : Uint4B
+0x004 StatusWord : Uint4B
+0x008 TagWord : Uint4B
+0x00c ErrorOffset : Uint4B
+0x010 ErrorSelector : Uint4B
+0x014 DataOffset : Uint4B
+0x018 DataSelector : Uint4B
+0x01c RegisterArea : UChar
+0x06c Cr0NpxState : Uint4B
+0x08c SegGs : Uint4B
+0x090 SegFs : Uint4B
+0x094 SegEs : Uint4B
+0x098 SegDs : Uint4B
+0x09c Edi : Uint4B
+0x0a0 Esi : Uint4B
+0x0a4 Ebx : Uint4B
+0x0a8 Edx : Uint4B
+0x0ac Ecx : Uint4B
+0x0b0 Eax : Uint4B
+0x0b4 Ebp : Uint4B
+0x0b8 Eip : Uint4B
+0x0bc SegCs : Uint4B
+0x0c0 EFlags : Uint4B
+0x0c4 Esp : Uint4B
+0x0c8 SegSs : Uint4B
+0x0cc ExtendedRegisters : UChar
+0x000 SplayLinks : _RTL_SPLAY_LINKS
+0x000 Parent : Ptr32
+0x004 LeftChild : Ptr32
+0x008 RightChild : Ptr32
+0x00c CriticalSection : Ptr32
+0x010 DebugInfo : Ptr32
+0x010 NextNode : Ptr32
+0x014 EnterThread : Ptr32
+0x018 WaitThread : Ptr32
+0x01c TryEnterThread : Ptr32
+0x020 LeaveThread : Ptr32
+0x024 InitializeThread : Ptr32
+0x028 EnterCount : Uint4B
+0x02c ContentionCount : Uint4B
+0x000 DosPath : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x008 Handle : Ptr32
+0x000 StartStamp : Uint4B
+0x004 Heap : Ptr32
+0x008 RequestedSize : Uint4B
+0x00c ActualSize : Uint4B
+0x010 Internal : _DPH_BLOCK_INTERNAL_INFORMATION
+0x000 NormalHeap : <unnamed-tag>
+0x000 DelayQueueEntry : _DPH_DELAY_FREE_QUEUE_ENTRY
+0x000 Flags : _DPH_DELAY_FREE_FLAGS
+0x000 PageHeapBlock : Pos 0, 1 Bit
+0x000 NormalHeapBlock : Pos 1, 1 Bit
+0x000 Lookaside : Pos 2, 1 Bit
+0x000 All : Uint4B
+0x004 NextEntry : Ptr32
+0x000 BusyListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x000 PageHeap : <unnamed-tag>
+0x000 UserValue : Ptr32
+0x004 UserFlags : Uint4B
+0x018 StackTrace : Ptr32
+0x01c EndStamp : Uint4B
+0x000 NormalHeap : <unnamed-tag>
+0x000 DelayQueueEntry : _DPH_DELAY_FREE_QUEUE_ENTRY
+0x000 Flags : _DPH_DELAY_FREE_FLAGS
+0x000 PageHeapBlock : Pos 0, 1 Bit
+0x000 NormalHeapBlock : Pos 1, 1 Bit
+0x000 Lookaside : Pos 2, 1 Bit
+0x000 All : Uint4B
+0x004 NextEntry : Ptr32
+0x000 BusyListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x000 PageHeap : <unnamed-tag>
+0x000 UserValue : Ptr32
+0x004 UserFlags : Uint4B
+0x000 PageHeapBlock : Pos 0, 1 Bit +0x000 NormalHeapBlock : Pos 1, 1 Bit +0x000 Lookaside : Pos 2, 1 Bit +0x000 All : Uint4B
+0x000 Flags : _DPH_DELAY_FREE_FLAGS
+0x000 PageHeapBlock : Pos 0, 1 Bit
+0x000 NormalHeapBlock : Pos 1, 1 Bit
+0x000 Lookaside : Pos 2, 1 Bit
+0x000 All : Uint4B
+0x004 NextEntry : Ptr32
+0x000 NextFullPageHeapDelayedNode : Ptr32
+0x004 DelayQueueEntry : _DPH_DELAY_FREE_QUEUE_ENTRY
+0x000 Flags : _DPH_DELAY_FREE_FLAGS
+0x000 PageHeapBlock : Pos 0, 1 Bit
+0x000 NormalHeapBlock : Pos 1, 1 Bit
+0x000 Lookaside : Pos 2, 1 Bit
+0x000 All : Uint4B
+0x004 NextEntry : Ptr32
+0x000 LookasideEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x000 UnusedListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x000 VirtualListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x000 FreeListEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x000 TableLinks : _RTL_BALANCED_LINKS
+0x000 Parent : Ptr32
+0x004 LeftChild : Ptr32
+0x008 RightChild : Ptr32
+0x00c Balance : Char
+0x00d Reserved : UChar
+0x010 pUserAllocation : Ptr32
+0x014 pVirtualBlock : Ptr32
+0x018 nVirtualBlockSize : Uint4B
+0x01c Flags : _DPH_HEAP_BLOCK_FLAGS
+0x000 Virtual : Pos 0, 1 Bit
+0x000 UnusedNode : Pos 1, 1 Bit
+0x000 Delay : Pos 2, 1 Bit
+0x000 Lookaside : Pos 3, 1 Bit
+0x000 Free : Pos 4, 1 Bit
+0x000 Busy : Pos 5, 1 Bit
+0x000 All : Uint4B
+0x020 nUserRequestedSize : Uint4B
+0x024 AdjacencyEntry : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x02c ThreadId : Uint4B
+0x030 StackTrace : Ptr32
+0x000 Virtual : Pos 0, 1 Bit +0x000 UnusedNode : Pos 1, 1 Bit +0x000 Delay : Pos 2, 1 Bit +0x000 Lookaside : Pos 3, 1 Bit +0x000 Free : Pos 4, 1 Bit +0x000 Busy : Pos 5, 1 Bit +0x000 All : Uint4B
+0x000 Signature : Uint4B
+0x004 HeapFlags : Uint4B
+0x008 HeapCritSect : Ptr32
+0x00c NodesCount : Uint4B
+0x010 VirtualStorageList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x018 VirtualStorageCount : Uint4B
+0x01c PoolReservedLimit : Ptr32
+0x020 BusyNodesTable : _RTL_AVL_TABLE
+0x000 BalancedRoot : _RTL_BALANCED_LINKS
+0x000 Parent : Ptr32
+0x004 LeftChild : Ptr32
+0x008 RightChild : Ptr32
+0x00c Balance : Char
+0x00d Reserved : UChar
+0x010 OrderedPointer : Ptr32
+0x014 WhichOrderedElement : Uint4B
+0x018 NumberGenericTableElements : Uint4B
+0x01c DepthOfTree : Uint4B
+0x020 RestartKey : Ptr32
+0x024 DeleteCount : Uint4B
+0x028 CompareRoutine : Ptr32
+0x02c AllocateRoutine : Ptr32
+0x030 FreeRoutine : Ptr32
+0x034 TableContext : Ptr32
+0x058 NodeToAllocate : Ptr32
+0x05c nBusyAllocations : Uint4B
+0x060 nBusyAllocationBytesCommitted : Uint4B
+0x064 pFreeAllocationListHead : Ptr32
+0x068 FullPageHeapDelayedListTail : Ptr32
+0x06c DelayFreeQueueHead : Ptr32
+0x070 DelayFreeQueueTail : Ptr32
+0x074 DelayFreeCount : Uint4B
+0x078 LookasideList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x080 LookasideCount : Uint4B
+0x084 UnusedNodeList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x08c UnusedNodeCount : Uint4B
+0x090 nBusyAllocationBytesAccessible : Uint4B
+0x094 GeneralizedFreeList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x09c FreeCount : Uint4B
+0x0a0 PoolCommitLimit : Ptr32
+0x0a4 NextHeap : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x0ac ExtraFlags : Uint4B
+0x0b0 Seed : Uint4B
+0x0b4 NormalHeap : Ptr32
+0x0b8 CreateStackTrace : Ptr32
+0x0bc ThreadInHeap : Ptr32
+0x0c0 BusyListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x0c8 SpecializedFreeList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x2c8 DelayFreeListLookup : Ptr32
+0x6cc HeapCritSectionStorage : _RTL_CRITICAL_SECTION
+0x000 DebugInfo : Ptr32
+0x004 LockCount : Int4B
+0x008 RecursionCount : Int4B
+0x00c OwningThread : Ptr32
+0x010 LockSemaphore : Ptr32
+0x014 SpinCount : Uint4B
ExceptionContinueExecution = 0n0 ExceptionContinueSearch = 0n1 ExceptionNestedException = 0n2 ExceptionCollidedUnwind = 0n3
+0x000 ExceptionCode : Int4B +0x004 ExceptionFlags : Uint4B +0x008 ExceptionRecord : Ptr32 +0x00c ExceptionAddress : Ptr32 +0x010 NumberParameters : Uint4B +0x014 ExceptionInformation : Uint4B
+0x000 ControlWord : Uint4B +0x004 StatusWord : Uint4B +0x008 TagWord : Uint4B +0x00c ErrorOffset : Uint4B +0x010 ErrorSelector : Uint4B +0x014 DataOffset : Uint4B +0x018 DataSelector : Uint4B +0x01c RegisterArea : UChar +0x06c Cr0NpxState : Uint4B
+0x000 Offset : Uint4B +0x004 HDC : Uint4B +0x008 Buffer : Uint4B
+0x000 Data1 : Uint4B +0x004 Data2 : Uint2B +0x006 Data3 : Uint2B +0x008 Data4 : UChar
+0x000 e_magic : Uint2B +0x002 e_cblp : Uint2B +0x004 e_cp : Uint2B +0x006 e_crlc : Uint2B +0x008 e_cparhdr : Uint2B +0x00a e_minalloc : Uint2B +0x00c e_maxalloc : Uint2B +0x00e e_ss : Uint2B +0x010 e_sp : Uint2B +0x012 e_csum : Uint2B +0x014 e_ip : Uint2B +0x016 e_cs : Uint2B +0x018 e_lfarlc : Uint2B +0x01a e_ovno : Uint2B +0x01c e_res : Uint2B +0x024 e_oemid : Uint2B +0x026 e_oeminfo : Uint2B +0x028 e_res2 : Uint2B +0x03c e_lfanew : Int4B
+0x000 Machine : Uint2B +0x002 NumberOfSections : Uint2B +0x004 TimeDateStamp : Uint4B +0x008 PointerToSymbolTable : Uint4B +0x00c NumberOfSymbols : Uint4B +0x010 SizeOfOptionalHeader : Uint2B +0x012 Characteristics : Uint2B
+0x000 Signature : Uint4B
+0x004 FileHeader : _IMAGE_FILE_HEADER
+0x000 Machine : Uint2B
+0x002 NumberOfSections : Uint2B
+0x004 TimeDateStamp : Uint4B
+0x008 PointerToSymbolTable : Uint4B
+0x00c NumberOfSymbols : Uint4B
+0x010 SizeOfOptionalHeader : Uint2B
+0x012 Characteristics : Uint2B
+0x018 OptionalHeader : _IMAGE_OPTIONAL_HEADER
+0x000 Magic : Uint2B
+0x002 MajorLinkerVersion : UChar
+0x003 MinorLinkerVersion : UChar
+0x004 SizeOfCode : Uint4B
+0x008 SizeOfInitializedData : Uint4B
+0x00c SizeOfUninitializedData : Uint4B
+0x010 AddressOfEntryPoint : Uint4B
+0x014 BaseOfCode : Uint4B
+0x018 BaseOfData : Uint4B
+0x01c ImageBase : Uint4B
+0x020 SectionAlignment : Uint4B
+0x024 FileAlignment : Uint4B
+0x028 MajorOperatingSystemVersion : Uint2B
+0x02a MinorOperatingSystemVersion : Uint2B
+0x02c MajorImageVersion : Uint2B
+0x02e MinorImageVersion : Uint2B
+0x030 MajorSubsystemVersion : Uint2B
+0x032 MinorSubsystemVersion : Uint2B
+0x034 Win32VersionValue : Uint4B
+0x038 SizeOfImage : Uint4B
+0x03c SizeOfHeaders : Uint4B
+0x040 CheckSum : Uint4B
+0x044 Subsystem : Uint2B
+0x046 DllCharacteristics : Uint2B
+0x048 SizeOfStackReserve : Uint4B
+0x04c SizeOfStackCommit : Uint4B
+0x050 SizeOfHeapReserve : Uint4B
+0x054 SizeOfHeapCommit : Uint4B
+0x058 LoaderFlags : Uint4B
+0x05c NumberOfRvaAndSizes : Uint4B
+0x060 DataDirectory : _IMAGE_DATA_DIRECTORY
+0x000 VirtualAddress : Uint4B
+0x004 Size : Uint4B
+0x000 Magic : Uint2B
+0x002 MajorLinkerVersion : UChar
+0x003 MinorLinkerVersion : UChar
+0x004 SizeOfCode : Uint4B
+0x008 SizeOfInitializedData : Uint4B
+0x00c SizeOfUninitializedData : Uint4B
+0x010 AddressOfEntryPoint : Uint4B
+0x014 BaseOfCode : Uint4B
+0x018 BaseOfData : Uint4B
+0x01c ImageBase : Uint4B
+0x020 SectionAlignment : Uint4B
+0x024 FileAlignment : Uint4B
+0x028 MajorOperatingSystemVersion : Uint2B
+0x02a MinorOperatingSystemVersion : Uint2B
+0x02c MajorImageVersion : Uint2B
+0x02e MinorImageVersion : Uint2B
+0x030 MajorSubsystemVersion : Uint2B
+0x032 MinorSubsystemVersion : Uint2B
+0x034 Win32VersionValue : Uint4B
+0x038 SizeOfImage : Uint4B
+0x03c SizeOfHeaders : Uint4B
+0x040 CheckSum : Uint4B
+0x044 Subsystem : Uint2B
+0x046 DllCharacteristics : Uint2B
+0x048 SizeOfStackReserve : Uint4B
+0x04c SizeOfStackCommit : Uint4B
+0x050 SizeOfHeapReserve : Uint4B
+0x054 SizeOfHeapCommit : Uint4B
+0x058 LoaderFlags : Uint4B
+0x05c NumberOfRvaAndSizes : Uint4B
+0x060 DataDirectory : _IMAGE_DATA_DIRECTORY
+0x000 VirtualAddress : Uint4B
+0x004 Size : Uint4B
+0x000 Status : Int4B +0x000 Pointer : Ptr32 +0x004 Information : Uint4B
LockQueueUnusedSpare0 = 0n0 LockQueueExpansionLock = 0n1 LockQueueUnusedSpare2 = 0n2 LockQueueSystemSpaceLock = 0n3 LockQueueVacbLock = 0n4 LockQueueMasterLock = 0n5 LockQueueNonPagedPoolLock = 0n6 LockQueueIoCancelLock = 0n7 LockQueueWorkQueueLock = 0n8 LockQueueIoVpbLock = 0n9 LockQueueIoDatabaseLock = 0n10 LockQueueIoCompletionLock = 0n11 LockQueueNtfsStructLock = 0n12 LockQueueAfdWorkQueueLock = 0n13 LockQueueBcbLock = 0n14 LockQueueMmNonPagedPoolLock = 0n15 LockQueueUnusedSpare16 = 0n16 LockQueueMaximumLock = 0n17
+0x000 LowPart : Uint4B +0x004 High1Time : Int4B +0x008 High2Time : Int4B
+0x000 LowPart : Uint4B +0x004 High1Time : Int4B +0x008 High2Time : Int4B
+0x000 TickCountLowDeprecated : Uint4B
+0x004 TickCountMultiplier : Uint4B
+0x008 InterruptTime : _KSYSTEM_TIME
+0x000 LowPart : Uint4B
+0x004 High1Time : Int4B
+0x008 High2Time : Int4B
+0x014 SystemTime : _KSYSTEM_TIME
+0x000 LowPart : Uint4B
+0x004 High1Time : Int4B
+0x008 High2Time : Int4B
+0x020 TimeZoneBias : _KSYSTEM_TIME
+0x000 LowPart : Uint4B
+0x004 High1Time : Int4B
+0x008 High2Time : Int4B
+0x02c ImageNumberLow : Uint2B
+0x02e ImageNumberHigh : Uint2B
+0x030 NtSystemRoot : Wchar
+0x238 MaxStackTraceDepth : Uint4B
+0x23c CryptoExponent : Uint4B
+0x240 TimeZoneId : Uint4B
+0x244 LargePageMinimum : Uint4B
+0x248 Reserved2 : Uint4B
+0x264 NtProductType :
NtProductWinNt = 0n1
NtProductLanManNt = 0n2
NtProductServer = 0n3
+0x268 ProductTypeIsValid : UChar
+0x26c NtMajorVersion : Uint4B
+0x270 NtMinorVersion : Uint4B
+0x274 ProcessorFeatures : UChar
+0x2b4 Reserved1 : Uint4B
+0x2b8 Reserved3 : Uint4B
+0x2bc TimeSlip : Uint4B
+0x2c0 AlternativeArchitecture :
StandardDesign = 0n0
NEC98x86 = 0n1
EndAlternatives = 0n2
+0x2c4 AltArchitecturePad : Uint4B
+0x2c8 SystemExpirationDate : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x2d0 SuiteMask : Uint4B
+0x2d4 KdDebuggerEnabled : UChar
+0x2d5 NXSupportPolicy : UChar
+0x2d8 ActiveConsoleId : Uint4B
+0x2dc DismountCount : Uint4B
+0x2e0 ComPlusPackage : Uint4B
+0x2e4 LastSystemRITEventTickCount : Uint4B
+0x2e8 NumberOfPhysicalPages : Uint4B
+0x2ec SafeBootMode : UChar
+0x2ed TscQpcData : UChar
+0x2ed TscQpcEnabled : Pos 0, 1 Bit
+0x2ed TscQpcSpareFlag : Pos 1, 1 Bit
+0x2ed TscQpcShift : Pos 2, 6 Bits
+0x2ee TscQpcPad : UChar
+0x2f0 SharedDataFlags : Uint4B
+0x2f0 DbgErrorPortPresent : Pos 0, 1 Bit
+0x2f0 DbgElevationEnabled : Pos 1, 1 Bit
+0x2f0 DbgVirtEnabled : Pos 2, 1 Bit
+0x2f0 DbgInstallerDetectEnabled : Pos 3, 1 Bit
+0x2f0 DbgSystemDllRelocated : Pos 4, 1 Bit
+0x2f0 DbgDynProcessorEnabled : Pos 5, 1 Bit
+0x2f0 DbgSEHValidationEnabled : Pos 6, 1 Bit
+0x2f0 SpareBits : Pos 7, 25 Bits
+0x2f4 DataFlagsPad : Uint4B
+0x2f8 TestRetInstruction : Uint8B
+0x300 SystemCall : Uint4B
+0x304 SystemCallReturn : Uint4B
+0x308 SystemCallPad : Uint8B
+0x320 TickCount : _KSYSTEM_TIME
+0x000 LowPart : Uint4B
+0x004 High1Time : Int4B
+0x008 High2Time : Int4B
+0x320 TickCountQuad : Uint8B
+0x320 ReservedTickCountOverlay : Uint4B
+0x32c TickCountPad : Uint4B
+0x330 Cookie : Uint4B
+0x334 CookiePad : Uint4B
+0x338 ConsoleSessionForegroundProcessId : Int8B
+0x340 Wow64SharedInformation : Uint4B
+0x380 UserModeGlobalLogger : Uint2B
+0x3a0 ImageFileExecutionOptions : Uint4B
+0x3a4 LangGenerationCount : Uint4B
+0x3a8 Reserved5 : Uint8B
+0x3b0 InterruptTimeBias : Uint8B
+0x3b8 TscQpcBias : Uint8B
+0x3c0 ActiveProcessorCount : Uint4B
+0x3c4 ActiveGroupCount : Uint2B
+0x3c6 Reserved4 : Uint2B
+0x3c8 AitSamplingValue : Uint4B
+0x3cc AppCompatFlag : Uint4B
+0x3d0 SystemDllNativeRelocation : Uint8B
+0x3d8 SystemDllWowRelocation : Uint4B
+0x3dc XStatePad : Uint4B
+0x3e0 XState : _XSTATE_CONFIGURATION
+0x000 EnabledFeatures : Uint8B
+0x008 Size : Uint4B
+0x00c OptimizedSave : Pos 0, 1 Bit
+0x010 Features : _XSTATE_FEATURE
+0x000 Offset : Uint4B
+0x004 Size : Uint4B
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
NtProductWinNt = 0n1 NtProductLanManNt = 0n2 NtProductServer = 0n3
+0x000 ExceptionList : Ptr32 +0x004 StackBase : Ptr32 +0x008 StackLimit : Ptr32 +0x00c SubSystemTib : Ptr32 +0x010 FiberData : Ptr32 +0x010 Version : Uint4B +0x014 ArbitraryUserPointer : Ptr32 +0x018 Self : Ptr32
+0x000 InheritedAddressSpace : UChar
+0x001 ReadImageFileExecOptions : UChar
+0x002 BeingDebugged : UChar
+0x003 BitField : UChar
+0x003 ImageUsesLargePages : Pos 0, 1 Bit
+0x003 IsProtectedProcess : Pos 1, 1 Bit
+0x003 IsLegacyProcess : Pos 2, 1 Bit
+0x003 IsImageDynamicallyRelocated : Pos 3, 1 Bit
+0x003 SkipPatchingUser32Forwarders : Pos 4, 1 Bit
+0x003 SpareBits : Pos 5, 3 Bits
+0x004 Mutant : Ptr32
+0x008 ImageBaseAddress : Ptr32
+0x00c Ldr : Ptr32
+0x010 ProcessParameters : Ptr32
+0x014 SubSystemData : Ptr32
+0x018 ProcessHeap : Ptr32
+0x01c FastPebLock : Ptr32
+0x020 AtlThunkSListPtr : Ptr32
+0x024 IFEOKey : Ptr32
+0x028 CrossProcessFlags : Uint4B
+0x028 ProcessInJob : Pos 0, 1 Bit
+0x028 ProcessInitializing : Pos 1, 1 Bit
+0x028 ProcessUsingVEH : Pos 2, 1 Bit
+0x028 ProcessUsingVCH : Pos 3, 1 Bit
+0x028 ProcessUsingFTH : Pos 4, 1 Bit
+0x028 ReservedBits0 : Pos 5, 27 Bits
+0x02c KernelCallbackTable : Ptr32
+0x02c UserSharedInfoPtr : Ptr32
+0x030 SystemReserved : Uint4B
+0x034 AtlThunkSListPtr32 : Uint4B
+0x038 ApiSetMap : Ptr32
+0x03c TlsExpansionCounter : Uint4B
+0x040 TlsBitmap : Ptr32
+0x044 TlsBitmapBits : Uint4B
+0x04c ReadOnlySharedMemoryBase : Ptr32
+0x050 HotpatchInformation : Ptr32
+0x054 ReadOnlyStaticServerData : Ptr32
+0x058 AnsiCodePageData : Ptr32
+0x05c OemCodePageData : Ptr32
+0x060 UnicodeCaseTableData : Ptr32
+0x064 NumberOfProcessors : Uint4B
+0x068 NtGlobalFlag : Uint4B
+0x070 CriticalSectionTimeout : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x078 HeapSegmentReserve : Uint4B
+0x07c HeapSegmentCommit : Uint4B
+0x080 HeapDeCommitTotalFreeThreshold : Uint4B
+0x084 HeapDeCommitFreeBlockThreshold : Uint4B
+0x088 NumberOfHeaps : Uint4B
+0x08c MaximumNumberOfHeaps : Uint4B
+0x090 ProcessHeaps : Ptr32
+0x094 GdiSharedHandleTable : Ptr32
+0x098 ProcessStarterHelper : Ptr32
+0x09c GdiDCAttributeList : Uint4B
+0x0a0 LoaderLock : Ptr32
+0x0a4 OSMajorVersion : Uint4B
+0x0a8 OSMinorVersion : Uint4B
+0x0ac OSBuildNumber : Uint2B
+0x0ae OSCSDVersion : Uint2B
+0x0b0 OSPlatformId : Uint4B
+0x0b4 ImageSubsystem : Uint4B
+0x0b8 ImageSubsystemMajorVersion : Uint4B
+0x0bc ImageSubsystemMinorVersion : Uint4B
+0x0c0 ActiveProcessAffinityMask : Uint4B
+0x0c4 GdiHandleBuffer : Uint4B
+0x14c PostProcessInitRoutine : Ptr32
+0x150 TlsExpansionBitmap : Ptr32
+0x154 TlsExpansionBitmapBits : Uint4B
+0x1d4 SessionId : Uint4B
+0x1d8 AppCompatFlags : _ULARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 QuadPart : Uint8B
+0x1e0 AppCompatFlagsUser : _ULARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 QuadPart : Uint8B
+0x1e8 pShimData : Ptr32
+0x1ec AppCompatInfo : Ptr32
+0x1f0 CSDVersion : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x1f8 ActivationContextData : Ptr32
+0x1fc ProcessAssemblyStorageMap : Ptr32
+0x200 SystemDefaultActivationContextData : Ptr32
+0x204 SystemAssemblyStorageMap : Ptr32
+0x208 MinimumStackCommit : Uint4B
+0x20c FlsCallback : Ptr32
+0x210 FlsListHead : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x218 FlsBitmap : Ptr32
+0x21c FlsBitmapBits : Uint4B
+0x22c FlsHighIndex : Uint4B
+0x230 WerRegistrationData : Ptr32
+0x234 WerShipAssertPtr : Ptr32
+0x238 pContextData : Ptr32
+0x23c pImageHeaderHash : Ptr32
+0x240 TracingFlags : Uint4B
+0x240 HeapTracingEnabled : Pos 0, 1 Bit
+0x240 CritSecTracingEnabled : Pos 1, 1 Bit
+0x240 SpareTracingBits : Pos 2, 30 Bits
+0x000 Length : Uint4B
+0x004 Initialized : UChar
+0x008 SsHandle : Ptr32
+0x00c InLoadOrderModuleList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x014 InMemoryOrderModuleList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x01c InInitializationOrderModuleList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x024 EntryInProgress : Ptr32
+0x028 ShutdownInProgress : UChar
+0x02c ShutdownThreadId : Ptr32
+0x000 Group : Uint2B +0x002 Number : UChar +0x003 Reserved : UChar
+0x000 Previous : Ptr32 +0x004 ActivationContext : Ptr32 +0x008 Flags : Uint4B
+0x000 BalancedRoot : _RTL_BALANCED_LINKS
+0x000 Parent : Ptr32
+0x004 LeftChild : Ptr32
+0x008 RightChild : Ptr32
+0x00c Balance : Char
+0x00d Reserved : UChar
+0x010 OrderedPointer : Ptr32
+0x014 WhichOrderedElement : Uint4B
+0x018 NumberGenericTableElements : Uint4B
+0x01c DepthOfTree : Uint4B
+0x020 RestartKey : Ptr32
+0x024 DeleteCount : Uint4B
+0x028 CompareRoutine : Ptr32
+0x02c AllocateRoutine : Ptr32
+0x030 FreeRoutine : Ptr32
+0x034 TableContext : Ptr32
+0x000 Parent : Ptr32 +0x004 LeftChild : Ptr32 +0x008 RightChild : Ptr32 +0x00c Balance : Char +0x00d Reserved : UChar
+0x000 DebugInfo : Ptr32 +0x004 LockCount : Int4B +0x008 RecursionCount : Int4B +0x00c OwningThread : Ptr32 +0x010 LockSemaphore : Ptr32 +0x014 SpinCount : Uint4B
+0x000 Type : Uint2B
+0x002 CreatorBackTraceIndex : Uint2B
+0x004 CriticalSection : Ptr32
+0x008 ProcessLocksList : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x010 EntryCount : Uint4B
+0x014 ContentionCount : Uint4B
+0x018 Flags : Uint4B
+0x01c CreatorBackTraceIndexHigh : Uint2B
+0x01e SpareUSHORT : Uint2B
+0x000 Flags : Uint2B
+0x002 Length : Uint2B
+0x004 TimeStamp : Uint4B
+0x008 DosPath : _STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x000 Flags : Uint4B +0x004 Shift : Uint4B +0x008 TableSize : Uint4B +0x00c Pivot : Uint4B +0x010 DivisorMask : Uint4B +0x014 NumEntries : Uint4B +0x018 NonEmptyBuckets : Uint4B +0x01c NumEnumerators : Uint4B +0x020 Directory : Ptr32
+0x000 ChainHead : Ptr32 +0x004 PrevLinkage : Ptr32 +0x008 Signature : Uint4B
+0x000 Linkage : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 Signature : Uint4B
+0x000 HashEntry : _RTL_DYNAMIC_HASH_TABLE_ENTRY
+0x000 Linkage : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 Signature : Uint4B
+0x00c ChainHead : Ptr32
+0x010 BucketIndex : Uint4B
GenericLessThan = 0n0 GenericGreaterThan = 0n1 GenericEqual = 0n2
+0x000 Parent : Ptr32 +0x004 LeftChild : Ptr32 +0x008 RightChild : Ptr32
+0x000 Magic : Uint4B +0x004 Count : Uint4B +0x008 Size : Uint4B +0x00c UserCount : Uint4B +0x010 UserSize : Uint4B +0x014 UserContext : Ptr32 +0x018 Next : Ptr32 +0x01c Trace : Ptr32
+0x000 MaximumLength : Uint4B
+0x004 Length : Uint4B
+0x008 Flags : Uint4B
+0x00c DebugFlags : Uint4B
+0x010 ConsoleHandle : Ptr32
+0x014 ConsoleFlags : Uint4B
+0x018 StandardInput : Ptr32
+0x01c StandardOutput : Ptr32
+0x020 StandardError : Ptr32
+0x024 CurrentDirectory : _CURDIR
+0x000 DosPath : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x008 Handle : Ptr32
+0x030 DllPath : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x038 ImagePathName : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x040 CommandLine : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x048 Environment : Ptr32
+0x04c StartingX : Uint4B
+0x050 StartingY : Uint4B
+0x054 CountX : Uint4B
+0x058 CountY : Uint4B
+0x05c CountCharsX : Uint4B
+0x060 CountCharsY : Uint4B
+0x064 FillAttribute : Uint4B
+0x068 WindowFlags : Uint4B
+0x06c ShowWindowFlags : Uint4B
+0x070 WindowTitle : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x078 DesktopInfo : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x080 ShellInfo : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x088 RuntimeData : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x090 CurrentDirectores : _RTL_DRIVE_LETTER_CURDIR
+0x000 Flags : Uint2B
+0x002 Length : Uint2B
+0x004 TimeStamp : Uint4B
+0x008 DosPath : _STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0x290 EnvironmentSize : Uint4B
+0x294 EnvironmentVersion : Uint4B
+0x000 Length : Uint2B +0x002 MaximumLength : Uint2B +0x004 Buffer : Ptr32
+0x000 NtTib : _NT_TIB
+0x000 ExceptionList : Ptr32
+0x004 StackBase : Ptr32
+0x008 StackLimit : Ptr32
+0x00c SubSystemTib : Ptr32
+0x010 FiberData : Ptr32
+0x010 Version : Uint4B
+0x014 ArbitraryUserPointer : Ptr32
+0x018 Self : Ptr32
+0x01c EnvironmentPointer : Ptr32
+0x020 ClientId : _CLIENT_ID
+0x000 UniqueProcess : Ptr32
+0x004 UniqueThread : Ptr32
+0x028 ActiveRpcHandle : Ptr32
+0x02c ThreadLocalStoragePointer : Ptr32
+0x030 ProcessEnvironmentBlock : Ptr32
+0x034 LastErrorValue : Uint4B
+0x038 CountOfOwnedCriticalSections : Uint4B
+0x03c CsrClientThread : Ptr32
+0x040 Win32ThreadInfo : Ptr32
+0x044 User32Reserved : Uint4B
+0x0ac UserReserved : Uint4B
+0x0c0 WOW32Reserved : Ptr32
+0x0c4 CurrentLocale : Uint4B
+0x0c8 FpSoftwareStatusRegister : Uint4B
+0x0cc SystemReserved1 : Ptr32
+0x1a4 ExceptionCode : Int4B
+0x1a8 ActivationContextStackPointer : Ptr32
+0x1ac SpareBytes : UChar
+0x1d0 TxFsContext : Uint4B
+0x1d4 GdiTebBatch : _GDI_TEB_BATCH
+0x000 Offset : Uint4B
+0x004 HDC : Uint4B
+0x008 Buffer : Uint4B
+0x6b4 RealClientId : _CLIENT_ID
+0x000 UniqueProcess : Ptr32
+0x004 UniqueThread : Ptr32
+0x6bc GdiCachedProcessHandle : Ptr32
+0x6c0 GdiClientPID : Uint4B
+0x6c4 GdiClientTID : Uint4B
+0x6c8 GdiThreadLocalInfo : Ptr32
+0x6cc Win32ClientInfo : Uint4B
+0x7c4 glDispatchTable : Ptr32
+0xb68 glReserved1 : Uint4B
+0xbdc glReserved2 : Ptr32
+0xbe0 glSectionInfo : Ptr32
+0xbe4 glSection : Ptr32
+0xbe8 glTable : Ptr32
+0xbec glCurrentRC : Ptr32
+0xbf0 glContext : Ptr32
+0xbf4 LastStatusValue : Uint4B
+0xbf8 StaticUnicodeString : _UNICODE_STRING
+0x000 Length : Uint2B
+0x002 MaximumLength : Uint2B
+0x004 Buffer : Ptr32
+0xc00 StaticUnicodeBuffer : Wchar
+0xe0c DeallocationStack : Ptr32
+0xe10 TlsSlots : Ptr32
+0xf10 TlsLinks : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0xf18 Vdm : Ptr32
+0xf1c ReservedForNtRpc : Ptr32
+0xf20 DbgSsReserved : Ptr32
+0xf28 HardErrorMode : Uint4B
+0xf2c Instrumentation : Ptr32
+0xf50 ActivityId : _GUID
+0x000 Data1 : Uint4B
+0x004 Data2 : Uint2B
+0x006 Data3 : Uint2B
+0x008 Data4 : UChar
+0xf60 SubProcessTag : Ptr32
+0xf64 EtwLocalData : Ptr32
+0xf68 EtwTraceData : Ptr32
+0xf6c WinSockData : Ptr32
+0xf70 GdiBatchCount : Uint4B
+0xf74 CurrentIdealProcessor : _PROCESSOR_NUMBER
+0x000 Group : Uint2B
+0x002 Number : UChar
+0x003 Reserved : UChar
+0xf74 IdealProcessorValue : Uint4B
+0xf74 ReservedPad0 : UChar
+0xf75 ReservedPad1 : UChar
+0xf76 ReservedPad2 : UChar
+0xf77 IdealProcessor : UChar
+0xf78 GuaranteedStackBytes : Uint4B
+0xf7c ReservedForPerf : Ptr32
+0xf80 ReservedForOle : Ptr32
+0xf84 WaitingOnLoaderLock : Uint4B
+0xf88 SavedPriorityState : Ptr32
+0xf8c SoftPatchPtr1 : Uint4B
+0xf90 ThreadPoolData : Ptr32
+0xf94 TlsExpansionSlots : Ptr32
+0xf98 MuiGeneration : Uint4B
+0xf9c IsImpersonating : Uint4B
+0xfa0 NlsCache : Ptr32
+0xfa4 pShimData : Ptr32
+0xfa8 HeapVirtualAffinity : Uint4B
+0xfac CurrentTransactionHandle : Ptr32
+0xfb0 ActiveFrame : Ptr32
+0xfb4 FlsData : Ptr32
+0xfb8 PreferredLanguages : Ptr32
+0xfbc UserPrefLanguages : Ptr32
+0xfc0 MergedPrefLanguages : Ptr32
+0xfc4 MuiImpersonation : Uint4B
+0xfc8 CrossTebFlags : Uint2B
+0xfc8 SpareCrossTebBits : Pos 0, 16 Bits
+0xfca SameTebFlags : Uint2B
+0xfca SafeThunkCall : Pos 0, 1 Bit
+0xfca InDebugPrint : Pos 1, 1 Bit
+0xfca HasFiberData : Pos 2, 1 Bit
+0xfca SkipThreadAttach : Pos 3, 1 Bit
+0xfca WerInShipAssertCode : Pos 4, 1 Bit
+0xfca RanProcessInit : Pos 5, 1 Bit
+0xfca ClonedThread : Pos 6, 1 Bit
+0xfca SuppressDebugMsg : Pos 7, 1 Bit
+0xfca DisableUserStackWalk : Pos 8, 1 Bit
+0xfca RtlExceptionAttached : Pos 9, 1 Bit
+0xfca InitialThread : Pos 10, 1 Bit
+0xfca SpareSameTebBits : Pos 11, 5 Bits
+0xfcc TxnScopeEnterCallback : Ptr32
+0xfd0 TxnScopeExitCallback : Ptr32
+0xfd4 TxnScopeContext : Ptr32
+0xfd8 LockCount : Uint4B
+0xfdc SpareUlong0 : Uint4B
+0xfe0 ResourceRetValue : Ptr32
+0x000 Flags : Uint4B +0x004 Previous : Ptr32 +0x008 Context : Ptr32
+0x000 Version : Uint4B
+0x004 Pool : Ptr32
+0x008 CleanupGroup : Ptr32
+0x00c CleanupGroupCancelCallback : Ptr32
+0x010 RaceDll : Ptr32
+0x014 ActivationContext : Ptr32
+0x018 FinalizationCallback : Ptr32
+0x01c u : <unnamed-tag>
+0x000 Flags : Uint4B
+0x000 s : <unnamed-tag>
+0x000 LongFunction : Pos 0, 1 Bit
+0x000 Persistent : Pos 1, 1 Bit
+0x000 Private : Pos 2, 30 Bits
+0x020 CallbackPriority :
TP_CALLBACK_PRIORITY_HIGH = 0n0
TP_CALLBACK_PRIORITY_NORMAL = 0n1
TP_CALLBACK_PRIORITY_LOW = 0n2
TP_CALLBACK_PRIORITY_INVALID = 0n3
+0x024 Size : Uint4B
TP_CALLBACK_PRIORITY_HIGH = 0n0 TP_CALLBACK_PRIORITY_NORMAL = 0n1 TP_CALLBACK_PRIORITY_LOW = 0n2 TP_CALLBACK_PRIORITY_INVALID = 0n3
+0x000 Callback : Ptr32 +0x004 NumaNode : Uint4B +0x008 IdealProcessor : UChar
+0x000 GuardLinks : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 Guards : Ptr32
+0x000 Callbacks : Ptr32
+0x004 NumaNode : Uint4B
+0x008 IdealProcessor : UChar
+0x00c PostGuard : _TP_NBQ_GUARD
+0x000 GuardLinks : _LIST_ENTRY
+0x000 Flink : Ptr32
+0x004 Blink : Ptr32
+0x008 Guards : Ptr32
+0x01c NBQNode : Ptr32
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 QuadPart : Uint8B
+0x000 Length : Uint2B +0x002 MaximumLength : Uint2B +0x004 Buffer : Ptr32
+0x000 Length : Uint2B +0x002 MaximumLength : Uint2B +0x004 Buffer : Ptr32
+0x000 EnabledFeatures : Uint8B
+0x008 Size : Uint4B
+0x00c OptimizedSave : Pos 0, 1 Bit
+0x010 Features : _XSTATE_FEATURE
+0x000 Offset : Uint4B
+0x004 Size : Uint4B