Generated by diff2html
© Yves Bailly, MandrakeSoft S.A. 2001
diff2html is licensed under the GNU GPL.

  vistasp2.py     win7.py
  6966 lines
304381 bytes
Last modified : Fri Feb 4 03:54:33 2011

    7853 lines
346159 bytes
Last modified : Fri Feb 4 05:12:28 2011

1 ntkrnlmp_types = {   1 ntkrpamp_types = {
2   'BATTERY_REPORTING_SCALE': [ 0x8, {   2   'BATTERY_REPORTING_SCALE': [ 0x8, {
3     'Granularity': [0x0, ['unsigned long']],   3     'Granularity': [0x0, ['unsigned long']],
4     'Capacity': [0x4, ['unsigned long']],   4     'Capacity': [0x4, ['unsigned long']],
5 }],   5 }],
6   'CMP_OFFSET_ARRAY': [ 0xc, {   6   'CMP_OFFSET_ARRAY': [ 0xc, {
7     'FileOffset': [0x0, ['unsigned long']],   7     'FileOffset': [0x0, ['unsigned long']],
8     'DataBuffer': [0x4, ['pointer', ['void']]],   8     'DataBuffer': [0x4, ['pointer', ['void']]],
9     'DataLength': [0x8, ['unsigned long']],   9     'DataLength': [0x8, ['unsigned long']],
10 }],   10 }],
      11   'DOCK_INTERFACE': [ 0x18, {
      12     'Size': [0x0, ['unsigned short']],
      13     'Version': [0x2, ['unsigned short']],
      14     'Context': [0x4, ['pointer', ['void']]],
      15     'InterfaceReference': [0x8, ['pointer', ['void']]],
      16     'InterfaceDereference': [0xc, ['pointer', ['void']]],
      17     'ProfileDepartureSetMode': [0x10, ['pointer', ['void']]],
      18     'ProfileDepartureUpdate': [0x14, ['pointer', ['void']]],
      19 }],
11   'EX_QUEUE_WORKER_INFO': [ 0x4, {   20   'EX_QUEUE_WORKER_INFO': [ 0x4, {
12     'QueueWorkerInfo': [0x0, ['long']],   21     'QueueWorkerInfo': [0x0, ['long']],
13 }],   22 }],
14   'LIST_ENTRY32': [ 0x8, {   23   'LIST_ENTRY32': [ 0x8, {
15     'Flink': [0x0, ['unsigned long']],   24     'Flink': [0x0, ['unsigned long']],
16     'Blink': [0x4, ['unsigned long']],   25     'Blink': [0x4, ['unsigned long']],
17 }],   26 }],
18   'LIST_ENTRY64': [ 0x10, {   27   'LIST_ENTRY64': [ 0x10, {
19     'Flink': [0x0, ['unsigned long long']],   28     'Flink': [0x0, ['unsigned long long']],
20     'Blink': [0x8, ['unsigned long long']],   29     'Blink': [0x8, ['unsigned long long']],
21 }],   30 }],
22   'POWER_ACTION_POLICY': [ 0xc, {   31   'POWER_ACTION_POLICY': [ 0xc, {
23     'Flags': [0x4, ['unsigned long']],   32     'Flags': [0x4, ['unsigned long']],
24     'EventCode': [0x8, ['unsigned long']],   33     'EventCode': [0x8, ['unsigned long']],
25 }],   34 }],
26   'PO_MEMORY_IMAGE': [ 0xf0, {   35   'PO_MEMORY_IMAGE': [ 0xe0, {
27     'Signature': [0x0, ['unsigned long']],   36     'Signature': [0x0, ['unsigned long']],
28     'ImageType': [0x4, ['unsigned long']],   37     'ImageType': [0x4, ['unsigned long']],
29     'CheckSum': [0x8, ['unsigned long']],   38     'CheckSum': [0x8, ['unsigned long']],
30     'LengthSelf': [0xc, ['unsigned long']],   39     'LengthSelf': [0xc, ['unsigned long']],
31     'PageSelf': [0x10, ['unsigned long']],   40     'PageSelf': [0x10, ['unsigned long']],
32     'PageSize': [0x14, ['unsigned long']],   41     'PageSize': [0x14, ['unsigned long']],
33     'SystemTime': [0x18, ['_LARGE_INTEGER']],   42     'SystemTime': [0x18, ['_LARGE_INTEGER']],
34     'InterruptTime': [0x20, ['unsigned long long']],   43     'InterruptTime': [0x20, ['unsigned long long']],
35     'FeatureFlags': [0x28, ['unsigned long']],   44     'FeatureFlags': [0x28, ['unsigned long']],
36     'HiberFlags': [0x2c, ['unsigned char']],   45     'HiberFlags': [0x2c, ['unsigned char']],
37     'spare': [0x2d, ['array', 3, ['unsigned char']]],   46     'spare': [0x2d, ['array', 3, ['unsigned char']]],
38     'NoHiberPtes': [0x30, ['unsigned long']],   47     'NoHiberPtes': [0x30, ['unsigned long']],
39     'HiberVa': [0x34, ['unsigned long']],   48     'HiberVa': [0x34, ['unsigned long']],
40     'HiberPte': [0x38, ['_LARGE_INTEGER']],   49     'HiberPte': [0x38, ['_LARGE_INTEGER']],
41     'NoFreePages': [0x40, ['unsigned long']],   50     'NoFreePages': [0x40, ['unsigned long']],
42     'FreeMapCheck': [0x44, ['unsigned long']],   51     'FreeMapCheck': [0x44, ['unsigned long']],
43     'WakeCheck': [0x48, ['unsigned long']],   52     'WakeCheck': [0x48, ['unsigned long']],
44     'TotalPages': [0x4c, ['unsigned long']],   53     'FirstTablePage': [0x4c, ['unsigned long']],
45     'FirstTablePage': [0x50, ['unsigned long']],   54     'PerfInfo': [0x50, ['_PO_HIBER_PERF']],
46     'PerfInfo': [0x58, ['_PO_HIBER_PERF']],   55     'FirmwareRuntimeInformationPages': [0xa8, ['unsigned long']],
47     'FirmwareRuntimeInformationPages': [0xb8, ['unsigned long']],   56     'FirmwareRuntimeInformation': [0xac, ['array', 1, ['unsigned long']]],
48     'FirmwareRuntimeInformation': [0xbc, ['array', 1, ['unsigned long']]],   57     'NoBootLoaderLogPages': [0xb0, ['unsigned long']],
49     'NoBootLoaderLogPages': [0xc0, ['unsigned long']],   58     'BootLoaderLogPages': [0xb4, ['array', 8, ['unsigned long']]],
50     'BootLoaderLogPages': [0xc4, ['array', 8, ['unsigned long']]],   59     'NotUsed': [0xd4, ['unsigned long']],
51     'NotUsed': [0xe4, ['unsigned long']],   60     'ResumeContextCheck': [0xd8, ['unsigned long']],
52     'ResumeContextCheck': [0xe8, ['unsigned long']],   61     'ResumeContextPages': [0xdc, ['unsigned long']],
53     'ResumeContextPages': [0xec, ['unsigned long']],      
54 }],      
55   'PPM_IDLE_ACCOUNTING': [ 0x48, {      
56     'StateCount': [0x0, ['unsigned long']],      
57     'TotalTransitions': [0x4, ['unsigned long']],      
58     'ResetCount': [0x8, ['unsigned long']],      
59     'StartTime': [0x10, ['unsigned long long']],      
60     'State': [0x18, ['array', 1, ['PPM_IDLE_STATE_ACCOUNTING']]],      
61 }],      
62   'PPM_IDLE_STATE_ACCOUNTING': [ 0x30, {      
63     'IdleTransitions': [0x0, ['unsigned long']],      
64     'FailedTransitions': [0x4, ['unsigned long']],      
65     'InvalidBucketIndex': [0x8, ['unsigned long']],      
66     'TotalTime': [0x10, ['unsigned long long']],      
67     'IdleTimeBuckets': [0x18, ['array', 6, ['unsigned long']]],      
68 }],   62 }],
69   'PROCESSOR_IDLESTATE_INFO': [ 0x8, {   63   'PROCESSOR_IDLESTATE_INFO': [ 0x8, {
70     'TimeCheck': [0x0, ['unsigned long']],   64     'TimeCheck': [0x0, ['unsigned long']],
71     'DemotePercent': [0x4, ['unsigned char']],   65     'DemotePercent': [0x4, ['unsigned char']],
72     'PromotePercent': [0x5, ['unsigned char']],   66     'PromotePercent': [0x5, ['unsigned char']],
73     'Spare': [0x6, ['array', 2, ['unsigned char']]],   67     'Spare': [0x6, ['array', 2, ['unsigned char']]],
74 }],   68 }],
75   'PROCESSOR_IDLESTATE_POLICY': [ 0x20, {   69   'PROCESSOR_IDLESTATE_POLICY': [ 0x20, {
76     'Revision': [0x0, ['unsigned short']],   70     'Revision': [0x0, ['unsigned short']],
77     'Flags': [0x2, ['unnamed_c715f09a32e1be848c9e7f3f188c2e5a']],   71     'Flags': [0x2, ['unnamed_c715f09a32e1be848c9e7f3f188c2e5a']],
78     'PolicyCount': [0x4, ['unsigned long']],   72     'PolicyCount': [0x4, ['unsigned long']],
79     'Policy': [0x8, ['array', 3, ['PROCESSOR_IDLESTATE_INFO']]],   73     'Policy': [0x8, ['array', 3, ['PROCESSOR_IDLESTATE_INFO']]],
80 }],   74 }],
81   'PROCESSOR_PERFSTATE_POLICY': [ 0x1c, {   75   'PROCESSOR_PERFSTATE_POLICY': [ 0x1c, {
82     'Revision': [0x0, ['unsigned long']],   76     'Revision': [0x0, ['unsigned long']],
83     'MaxThrottle': [0x4, ['unsigned char']],   77     'MaxThrottle': [0x4, ['unsigned char']],
84     'MinThrottle': [0x5, ['unsigned char']],   78     'MinThrottle': [0x5, ['unsigned char']],
85     'BusyAdjThreshold': [0x6, ['unsigned char']],   79     'BusyAdjThreshold': [0x6, ['unsigned char']],
86     'Flags': [0x7, ['unnamed_a099c168c58094213ffc3d5da8c5ba6b']],   80     'Flags': [0x7, ['unnamed_a099c168c58094213ffc3d5da8c5ba6b']],
87     'Spare': [0x7, ['unsigned char']],   81     'Spare': [0x7, ['unsigned char']],
88     'TimeCheck': [0x8, ['unsigned long']],   82     'TimeCheck': [0x8, ['unsigned long']],
89     'IncreaseTime': [0xc, ['unsigned long']],   83     'IncreaseTime': [0xc, ['unsigned long']],
90     'DecreaseTime': [0x10, ['unsigned long']],   84     'DecreaseTime': [0x10, ['unsigned long']],
91     'IncreasePercent': [0x14, ['unsigned long']],   85     'IncreasePercent': [0x14, ['unsigned long']],
92     'DecreasePercent': [0x18, ['unsigned long']],   86     'DecreasePercent': [0x18, ['unsigned long']],
93 }],   87 }],
94   'SYSTEM_POWER_CAPABILITIES': [ 0x4c, {   88   'SYSTEM_POWER_CAPABILITIES': [ 0x4c, {
95     'PowerButtonPresent': [0x0, ['unsigned char']],   89     'PowerButtonPresent': [0x0, ['unsigned char']],
96     'SleepButtonPresent': [0x1, ['unsigned char']],   90     'SleepButtonPresent': [0x1, ['unsigned char']],
97     'LidPresent': [0x2, ['unsigned char']],   91     'LidPresent': [0x2, ['unsigned char']],
98     'SystemS1': [0x3, ['unsigned char']],   92     'SystemS1': [0x3, ['unsigned char']],
99     'SystemS2': [0x4, ['unsigned char']],   93     'SystemS2': [0x4, ['unsigned char']],
100     'SystemS3': [0x5, ['unsigned char']],   94     'SystemS3': [0x5, ['unsigned char']],
101     'SystemS4': [0x6, ['unsigned char']],   95     'SystemS4': [0x6, ['unsigned char']],
102     'SystemS5': [0x7, ['unsigned char']],   96     'SystemS5': [0x7, ['unsigned char']],
103     'HiberFilePresent': [0x8, ['unsigned char']],   97     'HiberFilePresent': [0x8, ['unsigned char']],
104     'FullWake': [0x9, ['unsigned char']],   98     'FullWake': [0x9, ['unsigned char']],
105     'VideoDimPresent': [0xa, ['unsigned char']],   99     'VideoDimPresent': [0xa, ['unsigned char']],
106     'ApmPresent': [0xb, ['unsigned char']],   100     'ApmPresent': [0xb, ['unsigned char']],
107     'UpsPresent': [0xc, ['unsigned char']],   101     'UpsPresent': [0xc, ['unsigned char']],
108     'ThermalControl': [0xd, ['unsigned char']],   102     'ThermalControl': [0xd, ['unsigned char']],
109     'ProcessorThrottle': [0xe, ['unsigned char']],   103     'ProcessorThrottle': [0xe, ['unsigned char']],
110     'ProcessorMinThrottle': [0xf, ['unsigned char']],   104     'ProcessorMinThrottle': [0xf, ['unsigned char']],
111     'ProcessorMaxThrottle': [0x10, ['unsigned char']],   105     'ProcessorMaxThrottle': [0x10, ['unsigned char']],
112     'FastSystemS4': [0x11, ['unsigned char']],   106     'FastSystemS4': [0x11, ['unsigned char']],
113     'spare2': [0x12, ['array', 3, ['unsigned char']]],   107     'spare2': [0x12, ['array', 3, ['unsigned char']]],
114     'DiskSpinDown': [0x15, ['unsigned char']],   108     'DiskSpinDown': [0x15, ['unsigned char']],
115     'spare3': [0x16, ['array', 8, ['unsigned char']]],   109     'spare3': [0x16, ['array', 8, ['unsigned char']]],
116     'SystemBatteriesPresent': [0x1e, ['unsigned char']],   110     'SystemBatteriesPresent': [0x1e, ['unsigned char']],
117     'BatteriesAreShortTerm': [0x1f, ['unsigned char']],   111     'BatteriesAreShortTerm': [0x1f, ['unsigned char']],
118     'BatteryScale': [0x20, ['array', 3, ['BATTERY_REPORTING_SCALE']]],   112     'BatteryScale': [0x20, ['array', 3, ['BATTERY_REPORTING_SCALE']]],
119 }],   113 }],
120   'SYSTEM_POWER_LEVEL': [ 0x18, {   114   'SYSTEM_POWER_LEVEL': [ 0x18, {
121     'Enable': [0x0, ['unsigned char']],   115     'Enable': [0x0, ['unsigned char']],
122     'Spare': [0x1, ['array', 3, ['unsigned char']]],   116     'Spare': [0x1, ['array', 3, ['unsigned char']]],
123     'BatteryLevel': [0x4, ['unsigned long']],   117     'BatteryLevel': [0x4, ['unsigned long']],
124     'PowerPolicy': [0x8, ['POWER_ACTION_POLICY']],   118     'PowerPolicy': [0x8, ['POWER_ACTION_POLICY']],
125 }],   119 }],
126   'WHEA_PCIXDEVICE_REGISTER_PAIR': [ 0x10, {   120   'VACB_LEVEL_ALLOCATION_LIST': [ 0x10, {
127     'Register': [0x0, ['unsigned long long']],   121     'VacbLevelList': [0x0, ['_LIST_ENTRY']],
128     'Data': [0x8, ['unsigned long long']],   122     'VacbLevelWithBcbListHeads': [0x8, ['pointer', ['void']]],
      123     'VacbLevelsAllocated': [0xc, ['unsigned long']],
      124 }],
      125   '_ACCESS_REASONS': [ 0x80, {
      126     'Data': [0x0, ['array', 32, ['unsigned long']]],
129 }],   127 }],
130   '_ACCESS_STATE': [ 0x74, {   128   '_ACCESS_STATE': [ 0x74, {
131     'OperationID': [0x0, ['_LUID']],   129     'OperationID': [0x0, ['_LUID']],
132     'SecurityEvaluated': [0x8, ['unsigned char']],   130     'SecurityEvaluated': [0x8, ['unsigned char']],
133     'GenerateAudit': [0x9, ['unsigned char']],   131     'GenerateAudit': [0x9, ['unsigned char']],
134     'GenerateOnClose': [0xa, ['unsigned char']],   132     'GenerateOnClose': [0xa, ['unsigned char']],
135     'PrivilegesAllocated': [0xb, ['unsigned char']],   133     'PrivilegesAllocated': [0xb, ['unsigned char']],
136     'Flags': [0xc, ['unsigned long']],   134     'Flags': [0xc, ['unsigned long']],
137     'RemainingDesiredAccess': [0x10, ['unsigned long']],   135     'RemainingDesiredAccess': [0x10, ['unsigned long']],
138     'PreviouslyGrantedAccess': [0x14, ['unsigned long']],   136     'PreviouslyGrantedAccess': [0x14, ['unsigned long']],
139     'OriginalDesiredAccess': [0x18, ['unsigned long']],   137     'OriginalDesiredAccess': [0x18, ['unsigned long']],
140     'SubjectSecurityContext': [0x1c, ['_SECURITY_SUBJECT_CONTEXT']],   138     'SubjectSecurityContext': [0x1c, ['_SECURITY_SUBJECT_CONTEXT']],
141     'SecurityDescriptor': [0x2c, ['pointer', ['void']]],   139     'SecurityDescriptor': [0x2c, ['pointer', ['void']]],
142     'AuxData': [0x30, ['pointer', ['void']]],   140     'AuxData': [0x30, ['pointer', ['void']]],
143     'Privileges': [0x34, ['unnamed_8887262ba927ba9659f2847e9dca5802']],   141     'Privileges': [0x34, ['unnamed_8887262ba927ba9659f2847e9dca5802']],
144     'AuditPrivileges': [0x60, ['unsigned char']],   142     'AuditPrivileges': [0x60, ['unsigned char']],
145     'ObjectName': [0x64, ['_UNICODE_STRING']],   143     'ObjectName': [0x64, ['_UNICODE_STRING']],
146     'ObjectTypeName': [0x6c, ['_UNICODE_STRING']],   144     'ObjectTypeName': [0x6c, ['_UNICODE_STRING']],
147 }],   145 }],
148   '_ACL': [ 0x8, {   146   '_ACL': [ 0x8, {
149     'AclRevision': [0x0, ['unsigned char']],   147     'AclRevision': [0x0, ['unsigned char']],
150     'Sbz1': [0x1, ['unsigned char']],   148     'Sbz1': [0x1, ['unsigned char']],
151     'AclSize': [0x2, ['unsigned short']],   149     'AclSize': [0x2, ['unsigned short']],
152     'AceCount': [0x4, ['unsigned short']],   150     'AceCount': [0x4, ['unsigned short']],
153     'Sbz2': [0x6, ['unsigned short']],   151     'Sbz2': [0x6, ['unsigned short']],
154 }],   152 }],
155   '_ACTIVATION_CONTEXT_STACK': [ 0x18, {   153   '_ACTIVATION_CONTEXT_STACK': [ 0x18, {
156     'ActiveFrame': [0x0, ['pointer', ['_RTL_ACTIVATION_CONTEXT_STACK_FRAME']]],   154     'ActiveFrame': [0x0, ['pointer', ['_RTL_ACTIVATION_CONTEXT_STACK_FRAME']]],
157     'FrameListCache': [0x4, ['_LIST_ENTRY']],   155     'FrameListCache': [0x4, ['_LIST_ENTRY']],
158     'Flags': [0xc, ['unsigned long']],   156     'Flags': [0xc, ['unsigned long']],
159     'NextCookieSequenceNumber': [0x10, ['unsigned long']],   157     'NextCookieSequenceNumber': [0x10, ['unsigned long']],
160     'StackId': [0x14, ['unsigned long']],   158     'StackId': [0x14, ['unsigned long']],
161 }],   159 }],
      160   '_ALIGNED_AFFINITY_SUMMARY': [ 0x40, {
      161     'CpuSet': [0x0, ['_KAFFINITY_EX']],
      162     'SMTSet': [0xc, ['_KAFFINITY_EX']],
      163 }],
162   '_ALPC_COMMUNICATION_INFO': [ 0x24, {   164   '_ALPC_COMMUNICATION_INFO': [ 0x24, {
163     'ConnectionPort': [0x0, ['pointer', ['_ALPC_PORT']]],   165     'ConnectionPort': [0x0, ['pointer', ['_ALPC_PORT']]],
164     'ServerCommunicationPort': [0x4, ['pointer', ['_ALPC_PORT']]],   166     'ServerCommunicationPort': [0x4, ['pointer', ['_ALPC_PORT']]],
165     'ClientCommunicationPort': [0x8, ['pointer', ['_ALPC_PORT']]],   167     'ClientCommunicationPort': [0x8, ['pointer', ['_ALPC_PORT']]],
166     'CommunicationList': [0xc, ['_LIST_ENTRY']],   168     'CommunicationList': [0xc, ['_LIST_ENTRY']],
167     'HandleTable': [0x14, ['_ALPC_HANDLE_TABLE']],   169     'HandleTable': [0x14, ['_ALPC_HANDLE_TABLE']],
168 }],   170 }],
169   '_ALPC_COMPLETION_LIST': [ 0x54, {   171   '_ALPC_COMPLETION_LIST': [ 0x54, {
170     'Entry': [0x0, ['_LIST_ENTRY']],   172     'Entry': [0x0, ['_LIST_ENTRY']],
171     'OwnerProcess': [0x8, ['pointer', ['_EPROCESS']]],   173     'OwnerProcess': [0x8, ['pointer', ['_EPROCESS']]],
172     'Mdl': [0xc, ['pointer', ['_MDL']]],   174     'Mdl': [0xc, ['pointer', ['_MDL']]],
173     'UserVa': [0x10, ['pointer', ['void']]],   175     'UserVa': [0x10, ['pointer', ['void']]],
174     'UserLimit': [0x14, ['pointer', ['void']]],   176     'UserLimit': [0x14, ['pointer', ['void']]],
175     'DataUserVa': [0x18, ['pointer', ['void']]],   177     'DataUserVa': [0x18, ['pointer', ['void']]],
176     'SystemVa': [0x1c, ['pointer', ['void']]],   178     'SystemVa': [0x1c, ['pointer', ['void']]],
177     'TotalSize': [0x20, ['unsigned long']],   179     'TotalSize': [0x20, ['unsigned long']],
178     'Header': [0x24, ['pointer', ['_ALPC_COMPLETION_LIST_HEADER']]],   180     'Header': [0x24, ['pointer', ['_ALPC_COMPLETION_LIST_HEADER']]],
179     'List': [0x28, ['pointer', ['void']]],   181     'List': [0x28, ['pointer', ['void']]],
180     'ListSize': [0x2c, ['unsigned long']],   182     'ListSize': [0x2c, ['unsigned long']],
181     'Bitmap': [0x30, ['pointer', ['void']]],   183     'Bitmap': [0x30, ['pointer', ['void']]],
182     'BitmapSize': [0x34, ['unsigned long']],   184     'BitmapSize': [0x34, ['unsigned long']],
183     'Data': [0x38, ['pointer', ['void']]],   185     'Data': [0x38, ['pointer', ['void']]],
184     'DataSize': [0x3c, ['unsigned long']],   186     'DataSize': [0x3c, ['unsigned long']],
185     'BitmapLimit': [0x40, ['unsigned long']],   187     'BitmapLimit': [0x40, ['unsigned long']],
186     'BitmapNextHint': [0x44, ['unsigned long']],   188     'BitmapNextHint': [0x44, ['unsigned long']],
187     'ConcurrencyCount': [0x48, ['unsigned long']],   189     'ConcurrencyCount': [0x48, ['unsigned long']],
188     'AttributeFlags': [0x4c, ['unsigned long']],   190     'AttributeFlags': [0x4c, ['unsigned long']],
189     'AttributeSize': [0x50, ['unsigned long']],   191     'AttributeSize': [0x50, ['unsigned long']],
190 }],   192 }],
191   '_ALPC_COMPLETION_LIST_HEADER': [ 0x300, {   193   '_ALPC_COMPLETION_LIST_HEADER': [ 0x300, {
192     'StartMagic': [0x0, ['unsigned long long']],   194     'StartMagic': [0x0, ['unsigned long long']],
193     'TotalSize': [0x8, ['unsigned long']],   195     'TotalSize': [0x8, ['unsigned long']],
194     'ListOffset': [0xc, ['unsigned long']],   196     'ListOffset': [0xc, ['unsigned long']],
195     'ListSize': [0x10, ['unsigned long']],   197     'ListSize': [0x10, ['unsigned long']],
196     'BitmapOffset': [0x14, ['unsigned long']],   198     'BitmapOffset': [0x14, ['unsigned long']],
197     'BitmapSize': [0x18, ['unsigned long']],   199     'BitmapSize': [0x18, ['unsigned long']],
198     'DataOffset': [0x1c, ['unsigned long']],   200     'DataOffset': [0x1c, ['unsigned long']],
199     'DataSize': [0x20, ['unsigned long']],   201     'DataSize': [0x20, ['unsigned long']],
200     'AttributeFlags': [0x24, ['unsigned long']],   202     'AttributeFlags': [0x24, ['unsigned long']],
201     'AttributeSize': [0x28, ['unsigned long']],   203     'AttributeSize': [0x28, ['unsigned long']],
202     'State': [0x80, ['_ALPC_COMPLETION_LIST_STATE']],   204     'State': [0x80, ['_ALPC_COMPLETION_LIST_STATE']],
203     'LastMessageId': [0x88, ['unsigned long']],   205     'LastMessageId': [0x88, ['unsigned long']],
204     'LastCallbackId': [0x8c, ['unsigned long']],   206     'LastCallbackId': [0x8c, ['unsigned long']],
205     'PostCount': [0x100, ['unsigned long']],   207     'PostCount': [0x100, ['unsigned long']],
206     'ReturnCount': [0x180, ['unsigned long']],   208     'ReturnCount': [0x180, ['unsigned long']],
207     'LogSequenceNumber': [0x200, ['unsigned long']],   209     'LogSequenceNumber': [0x200, ['unsigned long']],
208     'UserLock': [0x280, ['_RTL_SRWLOCK']],   210     'UserLock': [0x280, ['_RTL_SRWLOCK']],
209     'EndMagic': [0x288, ['unsigned long long']],   211     'EndMagic': [0x288, ['unsigned long long']],
210 }],   212 }],
211   '_ALPC_COMPLETION_LIST_STATE': [ 0x8, {   213   '_ALPC_COMPLETION_LIST_STATE': [ 0x8, {
212     'u1': [0x0, ['unnamed_fec822c966244532cb77c6405e76e41b']],   214     'u1': [0x0, ['unnamed_fec822c966244532cb77c6405e76e41b']],
213 }],   215 }],
214   '_ALPC_COMPLETION_PACKET_LOOKASIDE': [ 0x24, {   216   '_ALPC_COMPLETION_PACKET_LOOKASIDE': [ 0x30, {
215     'Lock': [0x0, ['unsigned long']],   217     'Lock': [0x0, ['unsigned long']],
216     'Size': [0x4, ['unsigned long']],   218     'Size': [0x4, ['unsigned long']],
217     'ActiveCount': [0x8, ['unsigned long']],   219     'ActiveCount': [0x8, ['unsigned long']],
218     'PendingNullCount': [0xc, ['unsigned long']],   220     'PendingNullCount': [0xc, ['unsigned long']],
219     'PendingCheckCompletionListCount': [0x10, ['unsigned long']],   221     'PendingCheckCompletionListCount': [0x10, ['unsigned long']],
220     'PendingDelete': [0x14, ['unsigned long']],   222     'PendingDelete': [0x14, ['unsigned long']],
221     'FreeListHead': [0x18, ['_SINGLE_LIST_ENTRY']],   223     'FreeListHead': [0x18, ['_SINGLE_LIST_ENTRY']],
222     'CompletionPort': [0x1c, ['pointer', ['void']]],   224     'CompletionPort': [0x1c, ['pointer', ['void']]],
223     'CompletionKey': [0x20, ['pointer', ['void']]],   225     'CompletionKey': [0x20, ['pointer', ['void']]],
224     'Entry': [0x24, ['array', 0, ['_ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY']]],   226     'Entry': [0x24, ['array', 1, ['_ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY']]],
225 }],   227 }],
226   '_ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY': [ 0xc, {   228   '_ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY': [ 0xc, {
227     'ListEntry': [0x0, ['_SINGLE_LIST_ENTRY']],   229     'ListEntry': [0x0, ['_SINGLE_LIST_ENTRY']],
228     'Packet': [0x4, ['pointer', ['void']]],   230     'Packet': [0x4, ['pointer', ['_IO_MINI_COMPLETION_PACKET_USER']]],
229     'Lookaside': [0x8, ['pointer', ['_ALPC_COMPLETION_PACKET_LOOKASIDE']]],   231     'Lookaside': [0x8, ['pointer', ['_ALPC_COMPLETION_PACKET_LOOKASIDE']]],
230 }],   232 }],
231   '_ALPC_DISPATCH_CONTEXT': [ 0x20, {   233   '_ALPC_DISPATCH_CONTEXT': [ 0x20, {
232     'PortObject': [0x0, ['pointer', ['_ALPC_PORT']]],   234     'PortObject': [0x0, ['pointer', ['_ALPC_PORT']]],
233     'Message': [0x4, ['pointer', ['_KALPC_MESSAGE']]],   235     'Message': [0x4, ['pointer', ['_KALPC_MESSAGE']]],
234     'CommunicationInfo': [0x8, ['pointer', ['_ALPC_COMMUNICATION_INFO']]],   236     'CommunicationInfo': [0x8, ['pointer', ['_ALPC_COMMUNICATION_INFO']]],
235     'Flags': [0xc, ['unsigned long']],   237     'TargetThread': [0xc, ['pointer', ['_ETHREAD']]],
236     'TargetThread': [0x10, ['pointer', ['_ETHREAD']]],   238     'TargetPort': [0x10, ['pointer', ['_ALPC_PORT']]],
237     'TargetPort': [0x14, ['pointer', ['_ALPC_PORT']]],   239     'Flags': [0x14, ['unsigned long']],
238     'TotalLength': [0x18, ['unsigned short']],   240     'TotalLength': [0x18, ['unsigned short']],
239     'Type': [0x1a, ['unsigned short']],   241     'Type': [0x1a, ['unsigned short']],
240     'DataInfoOffset': [0x1c, ['unsigned short']],   242     'DataInfoOffset': [0x1c, ['unsigned short']],
241 }],   243 }],
242   '_ALPC_HANDLE_ENTRY': [ 0x4, {   244   '_ALPC_HANDLE_ENTRY': [ 0x4, {
243     'Object': [0x0, ['pointer', ['void']]],   245     'Object': [0x0, ['pointer', ['void']]],
244 }],   246 }],
245   '_ALPC_HANDLE_TABLE': [ 0x10, {   247   '_ALPC_HANDLE_TABLE': [ 0x10, {
246     'Flags': [0x0, ['unsigned long']],   248     'Handles': [0x0, ['pointer', ['_ALPC_HANDLE_ENTRY']]],
247     'Handles': [0x4, ['pointer', ['_ALPC_HANDLE_ENTRY']]],   249     'TotalHandles': [0x4, ['unsigned long']],
248     'TotalHandles': [0x8, ['unsigned long']],   250     'Flags': [0x8, ['unsigned long']],
249     'Lock': [0xc, ['_EX_PUSH_LOCK']],   251     'Lock': [0xc, ['_EX_PUSH_LOCK']],
250 }],   252 }],
251   '_ALPC_MESSAGE_ATTRIBUTES': [ 0x8, {   253   '_ALPC_MESSAGE_ATTRIBUTES': [ 0x8, {
252     'AllocatedAttributes': [0x0, ['unsigned long']],   254     'AllocatedAttributes': [0x0, ['unsigned long']],
253     'ValidAttributes': [0x4, ['unsigned long']],   255     'ValidAttributes': [0x4, ['unsigned long']],
254 }],   256 }],
255   '_ALPC_MESSAGE_ZONE': [ 0x18, {   257   '_ALPC_MESSAGE_ZONE': [ 0x18, {
256     'Mdl': [0x0, ['pointer', ['_MDL']]],   258     'Mdl': [0x0, ['pointer', ['_MDL']]],
257     'UserVa': [0x4, ['pointer', ['void']]],   259     'UserVa': [0x4, ['pointer', ['void']]],
258     'UserLimit': [0x8, ['pointer', ['void']]],   260     'UserLimit': [0x8, ['pointer', ['void']]],
259     'SystemVa': [0xc, ['pointer', ['void']]],   261     'SystemVa': [0xc, ['pointer', ['void']]],
260     'SystemLimit': [0x10, ['pointer', ['void']]],   262     'SystemLimit': [0x10, ['pointer', ['void']]],
261     'Size': [0x14, ['unsigned long']],   263     'Size': [0x14, ['unsigned long']],
262 }],   264 }],
263   '_ALPC_PORT': [ 0xf4, {   265   '_ALPC_PORT': [ 0xfc, {
264     'PortListEntry': [0x0, ['_LIST_ENTRY']],   266     'PortListEntry': [0x0, ['_LIST_ENTRY']],
265     'CommunicationInfo': [0x8, ['pointer', ['_ALPC_COMMUNICATION_INFO']]],   267     'CommunicationInfo': [0x8, ['pointer', ['_ALPC_COMMUNICATION_INFO']]],
266     'OwnerProcess': [0xc, ['pointer', ['_EPROCESS']]],   268     'OwnerProcess': [0xc, ['pointer', ['_EPROCESS']]],
267     'SequenceNo': [0x10, ['unsigned long']],   269     'CompletionPort': [0x10, ['pointer', ['void']]],
268     'CompletionPort': [0x14, ['pointer', ['void']]],   270     'CompletionKey': [0x14, ['pointer', ['void']]],
269     'CompletionKey': [0x18, ['pointer', ['void']]],   271     'CompletionPacketLookaside': [0x18, ['pointer', ['_ALPC_COMPLETION_PACKET_LOOKASIDE']]],
270     'CompletionPacketLookaside': [0x1c, ['pointer', ['_ALPC_COMPLETION_PACKET_LOOKASIDE']]],   272     'PortContext': [0x1c, ['pointer', ['void']]],
271     'PortContext': [0x20, ['pointer', ['void']]],   273     'StaticSecurity': [0x20, ['_SECURITY_CLIENT_CONTEXT']],
272     'StaticSecurity': [0x24, ['_SECURITY_CLIENT_CONTEXT']],   274     'MainQueue': [0x5c, ['_LIST_ENTRY']],
273     'MainQueue': [0x60, ['_LIST_ENTRY']],   275     'PendingQueue': [0x64, ['_LIST_ENTRY']],
274     'PendingQueue': [0x68, ['_LIST_ENTRY']],   276     'LargeMessageQueue': [0x6c, ['_LIST_ENTRY']],
275     'LargeMessageQueue': [0x70, ['_LIST_ENTRY']],   277     'WaitQueue': [0x74, ['_LIST_ENTRY']],
276     'WaitQueue': [0x78, ['_LIST_ENTRY']],   278     'Semaphore': [0x7c, ['pointer', ['_KSEMAPHORE']]],
277     'Semaphore': [0x80, ['pointer', ['_KSEMAPHORE']]],   279     'DummyEvent': [0x7c, ['pointer', ['_KEVENT']]],
278     'DummyEvent': [0x80, ['pointer', ['_KEVENT']]],   280     'PortAttributes': [0x80, ['_ALPC_PORT_ATTRIBUTES']],
279     'Lock': [0x84, ['_EX_PUSH_LOCK']],   281     'Lock': [0xac, ['_EX_PUSH_LOCK']],
280     'PortAttributes': [0x88, ['_ALPC_PORT_ATTRIBUTES']],   282     'ResourceListLock': [0xb0, ['_EX_PUSH_LOCK']],
281     'ResourceListLock': [0xb4, ['_EX_PUSH_LOCK']],   283     'ResourceListHead': [0xb4, ['_LIST_ENTRY']],
282     'ResourceListHead': [0xb8, ['_LIST_ENTRY']],   284     'CompletionList': [0xbc, ['pointer', ['_ALPC_COMPLETION_LIST']]],
283     'CompletionList': [0xc0, ['pointer', ['_ALPC_COMPLETION_LIST']]],   285     'MessageZone': [0xc0, ['pointer', ['_ALPC_MESSAGE_ZONE']]],
284     'MessageZone': [0xc4, ['pointer', ['_ALPC_MESSAGE_ZONE']]],   286     'CallbackObject': [0xc4, ['pointer', ['_CALLBACK_OBJECT']]],
285     'CanceledQueue': [0xc8, ['_LIST_ENTRY']],   287     'CallbackContext': [0xc8, ['pointer', ['void']]],
286     'u1': [0xd0, ['unnamed_f6d4a4b58495f329c56ef8ec0c40ae56']],   288     'CanceledQueue': [0xcc, ['_LIST_ENTRY']],
287     'TargetQueuePort': [0xd4, ['pointer', ['_ALPC_PORT']]],   289     'SequenceNo': [0xd4, ['long']],
288     'TargetSequencePort': [0xd8, ['pointer', ['_ALPC_PORT']]],   290     'u1': [0xd8, ['unnamed_f6d4a4b58495f329c56ef8ec0c40ae56']],
289     'Message': [0xdc, ['pointer', ['_KALPC_MESSAGE']]],   291     'TargetQueuePort': [0xdc, ['pointer', ['_ALPC_PORT']]],
290     'MainQueueLength': [0xe0, ['unsigned long']],   292     'TargetSequencePort': [0xe0, ['pointer', ['_ALPC_PORT']]],
291     'PendingQueueLength': [0xe4, ['unsigned long']],   293     'CachedMessage': [0xe4, ['pointer', ['_KALPC_MESSAGE']]],
292     'LargeMessageQueueLength': [0xe8, ['unsigned long']],   294     'MainQueueLength': [0xe8, ['unsigned long']],
293     'CanceledQueueLength': [0xec, ['unsigned long']],   295     'PendingQueueLength': [0xec, ['unsigned long']],
294     'WaitQueueLength': [0xf0, ['unsigned long']],   296     'LargeMessageQueueLength': [0xf0, ['unsigned long']],
      297     'CanceledQueueLength': [0xf4, ['unsigned long']],
      298     'WaitQueueLength': [0xf8, ['unsigned long']],
295 }],   299 }],
296   '_ALPC_PORT_ATTRIBUTES': [ 0x2c, {   300   '_ALPC_PORT_ATTRIBUTES': [ 0x2c, {
297     'Flags': [0x0, ['unsigned long']],   301     'Flags': [0x0, ['unsigned long']],
298     'SecurityQos': [0x4, ['_SECURITY_QUALITY_OF_SERVICE']],   302     'SecurityQos': [0x4, ['_SECURITY_QUALITY_OF_SERVICE']],
299     'MaxMessageLength': [0x10, ['unsigned long']],   303     'MaxMessageLength': [0x10, ['unsigned long']],
300     'MemoryBandwidth': [0x14, ['unsigned long']],   304     'MemoryBandwidth': [0x14, ['unsigned long']],
301     'MaxPoolUsage': [0x18, ['unsigned long']],   305     'MaxPoolUsage': [0x18, ['unsigned long']],
302     'MaxSectionSize': [0x1c, ['unsigned long']],   306     'MaxSectionSize': [0x1c, ['unsigned long']],
303     'MaxViewSize': [0x20, ['unsigned long']],   307     'MaxViewSize': [0x20, ['unsigned long']],
304     'MaxTotalSectionSize': [0x24, ['unsigned long']],   308     'MaxTotalSectionSize': [0x24, ['unsigned long']],
305     'DupObjectTypes': [0x28, ['unsigned long']],   309     'DupObjectTypes': [0x28, ['unsigned long']],
306 }],   310 }],
307   '_ALPC_PROCESS_CONTEXT': [ 0x10, {   311   '_ALPC_PROCESS_CONTEXT': [ 0x10, {
308     'Lock': [0x0, ['_EX_PUSH_LOCK']],   312     'Lock': [0x0, ['_EX_PUSH_LOCK']],
309     'ViewListHead': [0x4, ['_LIST_ENTRY']],   313     'ViewListHead': [0x4, ['_LIST_ENTRY']],
310     'PagedPoolQuotaCache': [0xc, ['unsigned long']],   314     'PagedPoolQuotaCache': [0xc, ['unsigned long']],
311 }],   315 }],
312   '_ALPHA_LOADER_BLOCK': [ 0x4, {      
313     'PlaceHolder': [0x0, ['unsigned long']],      
314 }],      
315   '_AMD64_DBGKD_CONTROL_SET': [ 0x1c, {   316   '_AMD64_DBGKD_CONTROL_SET': [ 0x1c, {
316     'TraceFlag': [0x0, ['unsigned long']],   317     'TraceFlag': [0x0, ['unsigned long']],
317     'Dr7': [0x4, ['unsigned long long']],   318     'Dr7': [0x4, ['unsigned long long']],
318     'CurrentSymbolStart': [0xc, ['unsigned long long']],   319     'CurrentSymbolStart': [0xc, ['unsigned long long']],
319     'CurrentSymbolEnd': [0x14, ['unsigned long long']],   320     'CurrentSymbolEnd': [0x14, ['unsigned long long']],
320 }],   321 }],
321   '_ARBITER_ADD_RESERVED_PARAMETERS': [ 0x4, {   322   '_ARBITER_ADD_RESERVED_PARAMETERS': [ 0x4, {
322     'ReserveDevice': [0x0, ['pointer', ['_DEVICE_OBJECT']]],   323     'ReserveDevice': [0x0, ['pointer', ['_DEVICE_OBJECT']]],
323 }],   324 }],
324   '_ARBITER_ALLOCATION_STATE': [ 0x38, {   325   '_ARBITER_ALLOCATION_STATE': [ 0x38, {
325     'Start': [0x0, ['unsigned long long']],   326     'Start': [0x0, ['unsigned long long']],
326     'End': [0x8, ['unsigned long long']],   327     'End': [0x8, ['unsigned long long']],
327     'CurrentMinimum': [0x10, ['unsigned long long']],   328     'CurrentMinimum': [0x10, ['unsigned long long']],
328     'CurrentMaximum': [0x18, ['unsigned long long']],   329     'CurrentMaximum': [0x18, ['unsigned long long']],
329     'Entry': [0x20, ['pointer', ['_ARBITER_LIST_ENTRY']]],   330     'Entry': [0x20, ['pointer', ['_ARBITER_LIST_ENTRY']]],
330     'CurrentAlternative': [0x24, ['pointer', ['_ARBITER_ALTERNATIVE']]],   331     'CurrentAlternative': [0x24, ['pointer', ['_ARBITER_ALTERNATIVE']]],
331     'AlternativeCount': [0x28, ['unsigned long']],   332     'AlternativeCount': [0x28, ['unsigned long']],
332     'Alternatives': [0x2c, ['pointer', ['_ARBITER_ALTERNATIVE']]],   333     'Alternatives': [0x2c, ['pointer', ['_ARBITER_ALTERNATIVE']]],
333     'Flags': [0x30, ['unsigned short']],   334     'Flags': [0x30, ['unsigned short']],
334     'RangeAttributes': [0x32, ['unsigned char']],   335     'RangeAttributes': [0x32, ['unsigned char']],
335     'RangeAvailableAttributes': [0x33, ['unsigned char']],   336     'RangeAvailableAttributes': [0x33, ['unsigned char']],
336     'WorkSpace': [0x34, ['unsigned long']],   337     'WorkSpace': [0x34, ['unsigned long']],
337 }],   338 }],
338   '_ARBITER_ALTERNATIVE': [ 0x38, {   339   '_ARBITER_ALTERNATIVE': [ 0x38, {
339     'Minimum': [0x0, ['unsigned long long']],   340     'Minimum': [0x0, ['unsigned long long']],
340     'Maximum': [0x8, ['unsigned long long']],   341     'Maximum': [0x8, ['unsigned long long']],
341     'Length': [0x10, ['unsigned long long']],   342     'Length': [0x10, ['unsigned long long']],
342     'Alignment': [0x18, ['unsigned long long']],   343     'Alignment': [0x18, ['unsigned long long']],
343     'Priority': [0x20, ['long']],   344     'Priority': [0x20, ['long']],
344     'Flags': [0x24, ['unsigned long']],   345     'Flags': [0x24, ['unsigned long']],
345     'Descriptor': [0x28, ['pointer', ['_IO_RESOURCE_DESCRIPTOR']]],   346     'Descriptor': [0x28, ['pointer', ['_IO_RESOURCE_DESCRIPTOR']]],
346     'Reserved': [0x2c, ['array', 3, ['unsigned long']]],   347     'Reserved': [0x2c, ['array', 3, ['unsigned long']]],
347 }],   348 }],
348   '_ARBITER_BOOT_ALLOCATION_PARAMETERS': [ 0x4, {   349   '_ARBITER_BOOT_ALLOCATION_PARAMETERS': [ 0x4, {
349     'ArbitrationList': [0x0, ['pointer', ['_LIST_ENTRY']]],   350     'ArbitrationList': [0x0, ['pointer', ['_LIST_ENTRY']]],
350 }],   351 }],
351   '_ARBITER_CONFLICT_INFO': [ 0x18, {   352   '_ARBITER_CONFLICT_INFO': [ 0x18, {
352     'OwningObject': [0x0, ['pointer', ['_DEVICE_OBJECT']]],   353     'OwningObject': [0x0, ['pointer', ['_DEVICE_OBJECT']]],
353     'Start': [0x8, ['unsigned long long']],   354     'Start': [0x8, ['unsigned long long']],
354     'End': [0x10, ['unsigned long long']],   355     'End': [0x10, ['unsigned long long']],
355 }],   356 }],
356   '_ARBITER_INSTANCE': [ 0x5ec, {   357   '_ARBITER_INSTANCE': [ 0x5ec, {
357     'Signature': [0x0, ['unsigned long']],   358     'Signature': [0x0, ['unsigned long']],
358     'MutexEvent': [0x4, ['pointer', ['_KEVENT']]],   359     'MutexEvent': [0x4, ['pointer', ['_KEVENT']]],
359     'Name': [0x8, ['pointer', ['unsigned short']]],   360     'Name': [0x8, ['pointer', ['unsigned short']]],
360     'OrderingName': [0xc, ['pointer', ['unsigned short']]],   361     'OrderingName': [0xc, ['pointer', ['unsigned short']]],
361     'ResourceType': [0x10, ['long']],   362     'ResourceType': [0x10, ['long']],
362     'Allocation': [0x14, ['pointer', ['_RTL_RANGE_LIST']]],   363     'Allocation': [0x14, ['pointer', ['_RTL_RANGE_LIST']]],
363     'PossibleAllocation': [0x18, ['pointer', ['_RTL_RANGE_LIST']]],   364     'PossibleAllocation': [0x18, ['pointer', ['_RTL_RANGE_LIST']]],
364     'OrderingList': [0x1c, ['_ARBITER_ORDERING_LIST']],   365     'OrderingList': [0x1c, ['_ARBITER_ORDERING_LIST']],
365     'ReservedList': [0x24, ['_ARBITER_ORDERING_LIST']],   366     'ReservedList': [0x24, ['_ARBITER_ORDERING_LIST']],
366     'ReferenceCount': [0x2c, ['long']],   367     'ReferenceCount': [0x2c, ['long']],
367     'Interface': [0x30, ['pointer', ['_ARBITER_INTERFACE']]],   368     'Interface': [0x30, ['pointer', ['_ARBITER_INTERFACE']]],
368     'AllocationStackMaxSize': [0x34, ['unsigned long']],   369     'AllocationStackMaxSize': [0x34, ['unsigned long']],
369     'AllocationStack': [0x38, ['pointer', ['_ARBITER_ALLOCATION_STATE']]],   370     'AllocationStack': [0x38, ['pointer', ['_ARBITER_ALLOCATION_STATE']]],
370     'UnpackRequirement': [0x3c, ['pointer', ['void']]],   371     'UnpackRequirement': [0x3c, ['pointer', ['void']]],
371     'PackResource': [0x40, ['pointer', ['void']]],   372     'PackResource': [0x40, ['pointer', ['void']]],
372     'UnpackResource': [0x44, ['pointer', ['void']]],   373     'UnpackResource': [0x44, ['pointer', ['void']]],
373     'ScoreRequirement': [0x48, ['pointer', ['void']]],   374     'ScoreRequirement': [0x48, ['pointer', ['void']]],
374     'TestAllocation': [0x4c, ['pointer', ['void']]],   375     'TestAllocation': [0x4c, ['pointer', ['void']]],
375     'RetestAllocation': [0x50, ['pointer', ['void']]],   376     'RetestAllocation': [0x50, ['pointer', ['void']]],
376     'CommitAllocation': [0x54, ['pointer', ['void']]],   377     'CommitAllocation': [0x54, ['pointer', ['void']]],
377     'RollbackAllocation': [0x58, ['pointer', ['void']]],   378     'RollbackAllocation': [0x58, ['pointer', ['void']]],
378     'BootAllocation': [0x5c, ['pointer', ['void']]],   379     'BootAllocation': [0x5c, ['pointer', ['void']]],
379     'QueryArbitrate': [0x60, ['pointer', ['void']]],   380     'QueryArbitrate': [0x60, ['pointer', ['void']]],
380     'QueryConflict': [0x64, ['pointer', ['void']]],   381     'QueryConflict': [0x64, ['pointer', ['void']]],
381     'AddReserved': [0x68, ['pointer', ['void']]],   382     'AddReserved': [0x68, ['pointer', ['void']]],
382     'StartArbiter': [0x6c, ['pointer', ['void']]],   383     'StartArbiter': [0x6c, ['pointer', ['void']]],
383     'PreprocessEntry': [0x70, ['pointer', ['void']]],   384     'PreprocessEntry': [0x70, ['pointer', ['void']]],
384     'AllocateEntry': [0x74, ['pointer', ['void']]],   385     'AllocateEntry': [0x74, ['pointer', ['void']]],
385     'GetNextAllocationRange': [0x78, ['pointer', ['void']]],   386     'GetNextAllocationRange': [0x78, ['pointer', ['void']]],
386     'FindSuitableRange': [0x7c, ['pointer', ['void']]],   387     'FindSuitableRange': [0x7c, ['pointer', ['void']]],
387     'AddAllocation': [0x80, ['pointer', ['void']]],   388     'AddAllocation': [0x80, ['pointer', ['void']]],
388     'BacktrackAllocation': [0x84, ['pointer', ['void']]],   389     'BacktrackAllocation': [0x84, ['pointer', ['void']]],
389     'OverrideConflict': [0x88, ['pointer', ['void']]],   390     'OverrideConflict': [0x88, ['pointer', ['void']]],
390     'InitializeRangeList': [0x8c, ['pointer', ['void']]],   391     'InitializeRangeList': [0x8c, ['pointer', ['void']]],
391     'TransactionInProgress': [0x90, ['unsigned char']],   392     'TransactionInProgress': [0x90, ['unsigned char']],
392     'TransactionEvent': [0x94, ['pointer', ['_KEVENT']]],   393     'TransactionEvent': [0x94, ['pointer', ['_KEVENT']]],
393     'Extension': [0x98, ['pointer', ['void']]],   394     'Extension': [0x98, ['pointer', ['void']]],
394     'BusDeviceObject': [0x9c, ['pointer', ['_DEVICE_OBJECT']]],   395     'BusDeviceObject': [0x9c, ['pointer', ['_DEVICE_OBJECT']]],
395     'ConflictCallbackContext': [0xa0, ['pointer', ['void']]],   396     'ConflictCallbackContext': [0xa0, ['pointer', ['void']]],
396     'ConflictCallback': [0xa4, ['pointer', ['void']]],   397     'ConflictCallback': [0xa4, ['pointer', ['void']]],
397     'PdoDescriptionString': [0xa8, ['array', 336, ['wchar']]],   398     'PdoDescriptionString': [0xa8, ['array', 336, ['wchar']]],
398     'PdoSymbolicNameString': [0x348, ['array', 672, ['unsigned char']]],   399     'PdoSymbolicNameString': [0x348, ['array', 672, ['unsigned char']]],
399     'PdoAddressString': [0x5e8, ['array', 1, ['wchar']]],   400     'PdoAddressString': [0x5e8, ['array', 1, ['wchar']]],
400 }],   401 }],
401   '_ARBITER_INTERFACE': [ 0x18, {   402   '_ARBITER_INTERFACE': [ 0x18, {
402     'Size': [0x0, ['unsigned short']],   403     'Size': [0x0, ['unsigned short']],
403     'Version': [0x2, ['unsigned short']],   404     'Version': [0x2, ['unsigned short']],
404     'Context': [0x4, ['pointer', ['void']]],   405     'Context': [0x4, ['pointer', ['void']]],
405     'InterfaceReference': [0x8, ['pointer', ['void']]],   406     'InterfaceReference': [0x8, ['pointer', ['void']]],
406     'InterfaceDereference': [0xc, ['pointer', ['void']]],   407     'InterfaceDereference': [0xc, ['pointer', ['void']]],
407     'ArbiterHandler': [0x10, ['pointer', ['void']]],   408     'ArbiterHandler': [0x10, ['pointer', ['void']]],
408     'Flags': [0x14, ['unsigned long']],   409     'Flags': [0x14, ['unsigned long']],
409 }],   410 }],
410   '_ARBITER_LIST_ENTRY': [ 0x38, {   411   '_ARBITER_LIST_ENTRY': [ 0x38, {
411     'ListEntry': [0x0, ['_LIST_ENTRY']],   412     'ListEntry': [0x0, ['_LIST_ENTRY']],
412     'AlternativeCount': [0x8, ['unsigned long']],   413     'AlternativeCount': [0x8, ['unsigned long']],
413     'Alternatives': [0xc, ['pointer', ['_IO_RESOURCE_DESCRIPTOR']]],   414     'Alternatives': [0xc, ['pointer', ['_IO_RESOURCE_DESCRIPTOR']]],
414     'PhysicalDeviceObject': [0x10, ['pointer', ['_DEVICE_OBJECT']]],   415     'PhysicalDeviceObject': [0x10, ['pointer', ['_DEVICE_OBJECT']]],
415     'Flags': [0x18, ['unsigned long']],   416     'Flags': [0x18, ['unsigned long']],
416     'WorkSpace': [0x1c, ['long']],   417     'WorkSpace': [0x1c, ['long']],
417     'SlotNumber': [0x24, ['unsigned long']],   418     'SlotNumber': [0x24, ['unsigned long']],
418     'BusNumber': [0x28, ['unsigned long']],   419     'BusNumber': [0x28, ['unsigned long']],
419     'Assignment': [0x2c, ['pointer', ['_CM_PARTIAL_RESOURCE_DESCRIPTOR']]],   420     'Assignment': [0x2c, ['pointer', ['_CM_PARTIAL_RESOURCE_DESCRIPTOR']]],
420     'SelectedAlternative': [0x30, ['pointer', ['_IO_RESOURCE_DESCRIPTOR']]],   421     'SelectedAlternative': [0x30, ['pointer', ['_IO_RESOURCE_DESCRIPTOR']]],
421 }],   422 }],
422   '_ARBITER_ORDERING': [ 0x10, {   423   '_ARBITER_ORDERING': [ 0x10, {
423     'Start': [0x0, ['unsigned long long']],   424     'Start': [0x0, ['unsigned long long']],
424     'End': [0x8, ['unsigned long long']],   425     'End': [0x8, ['unsigned long long']],
425 }],   426 }],
426   '_ARBITER_ORDERING_LIST': [ 0x8, {   427   '_ARBITER_ORDERING_LIST': [ 0x8, {
427     'Count': [0x0, ['unsigned short']],   428     'Count': [0x0, ['unsigned short']],
428     'Maximum': [0x2, ['unsigned short']],   429     'Maximum': [0x2, ['unsigned short']],
429     'Orderings': [0x4, ['pointer', ['_ARBITER_ORDERING']]],   430     'Orderings': [0x4, ['pointer', ['_ARBITER_ORDERING']]],
430 }],   431 }],
431   '_ARBITER_PARAMETERS': [ 0x10, {   432   '_ARBITER_PARAMETERS': [ 0x10, {
432     'Parameters': [0x0, ['unnamed_a54b23626087acf264dcd577f516ea07']],   433     'Parameters': [0x0, ['unnamed_a54b23626087acf264dcd577f516ea07']],
433 }],   434 }],
434   '_ARBITER_QUERY_ALLOCATED_RESOURCES_PARAMETERS': [ 0x4, {   435   '_ARBITER_QUERY_ALLOCATED_RESOURCES_PARAMETERS': [ 0x4, {
435     'AllocatedResources': [0x0, ['pointer', ['pointer', ['_CM_PARTIAL_RESOURCE_LIST']]]],   436     'AllocatedResources': [0x0, ['pointer', ['pointer', ['_CM_PARTIAL_RESOURCE_LIST']]]],
436 }],   437 }],
437   '_ARBITER_QUERY_ARBITRATE_PARAMETERS': [ 0x4, {   438   '_ARBITER_QUERY_ARBITRATE_PARAMETERS': [ 0x4, {
438     'ArbitrationList': [0x0, ['pointer', ['_LIST_ENTRY']]],   439     'ArbitrationList': [0x0, ['pointer', ['_LIST_ENTRY']]],
439 }],   440 }],
440   '_ARBITER_QUERY_CONFLICT_PARAMETERS': [ 0x10, {   441   '_ARBITER_QUERY_CONFLICT_PARAMETERS': [ 0x10, {
441     'PhysicalDeviceObject': [0x0, ['pointer', ['_DEVICE_OBJECT']]],   442     'PhysicalDeviceObject': [0x0, ['pointer', ['_DEVICE_OBJECT']]],
442     'ConflictingResource': [0x4, ['pointer', ['_IO_RESOURCE_DESCRIPTOR']]],   443     'ConflictingResource': [0x4, ['pointer', ['_IO_RESOURCE_DESCRIPTOR']]],
443     'ConflictCount': [0x8, ['pointer', ['unsigned long']]],   444     'ConflictCount': [0x8, ['pointer', ['unsigned long']]],
444     'Conflicts': [0xc, ['pointer', ['pointer', ['_ARBITER_CONFLICT_INFO']]]],   445     'Conflicts': [0xc, ['pointer', ['pointer', ['_ARBITER_CONFLICT_INFO']]]],
445 }],   446 }],
446   '_ARBITER_RETEST_ALLOCATION_PARAMETERS': [ 0xc, {   447   '_ARBITER_RETEST_ALLOCATION_PARAMETERS': [ 0xc, {
447     'ArbitrationList': [0x0, ['pointer', ['_LIST_ENTRY']]],   448     'ArbitrationList': [0x0, ['pointer', ['_LIST_ENTRY']]],
448     'AllocateFromCount': [0x4, ['unsigned long']],   449     'AllocateFromCount': [0x4, ['unsigned long']],
449     'AllocateFrom': [0x8, ['pointer', ['_CM_PARTIAL_RESOURCE_DESCRIPTOR']]],   450     'AllocateFrom': [0x8, ['pointer', ['_CM_PARTIAL_RESOURCE_DESCRIPTOR']]],
450 }],   451 }],
451   '_ARBITER_TEST_ALLOCATION_PARAMETERS': [ 0xc, {   452   '_ARBITER_TEST_ALLOCATION_PARAMETERS': [ 0xc, {
452     'ArbitrationList': [0x0, ['pointer', ['_LIST_ENTRY']]],   453     'ArbitrationList': [0x0, ['pointer', ['_LIST_ENTRY']]],
453     'AllocateFromCount': [0x4, ['unsigned long']],   454     'AllocateFromCount': [0x4, ['unsigned long']],
454     'AllocateFrom': [0x8, ['pointer', ['_CM_PARTIAL_RESOURCE_DESCRIPTOR']]],   455     'AllocateFrom': [0x8, ['pointer', ['_CM_PARTIAL_RESOURCE_DESCRIPTOR']]],
455 }],   456 }],
456   '_ARC_DISK_INFORMATION': [ 0x8, {   457   '_ARC_DISK_INFORMATION': [ 0x8, {
457     'DiskSignatures': [0x0, ['_LIST_ENTRY']],   458     'DiskSignatures': [0x0, ['_LIST_ENTRY']],
458 }],   459 }],
459   '_ARM_DBGKD_CONTROL_SET': [ 0xc, {   460   '_ARM_DBGKD_CONTROL_SET': [ 0xc, {
460     'Continue': [0x0, ['unsigned long']],   461     'Continue': [0x0, ['unsigned long']],
461     'CurrentSymbolStart': [0x4, ['unsigned long']],   462     'CurrentSymbolStart': [0x4, ['unsigned long']],
462     'CurrentSymbolEnd': [0x8, ['unsigned long']],   463     'CurrentSymbolEnd': [0x8, ['unsigned long']],
463 }],   464 }],
      465   '_AUTHZBASEP_SECURITY_ATTRIBUTES_INFORMATION': [ 0x18, {
      466     'SecurityAttributeCount': [0x0, ['unsigned long']],
      467     'SecurityAttributesList': [0x4, ['_LIST_ENTRY']],
      468     'WorkingSecurityAttributeCount': [0xc, ['unsigned long']],
      469     'WorkingSecurityAttributesList': [0x10, ['_LIST_ENTRY']],
      470 }],
      471   '_AUX_ACCESS_DATA': [ 0xc0, {
      472     'PrivilegesUsed': [0x0, ['pointer', ['_PRIVILEGE_SET']]],
      473     'GenericMapping': [0x4, ['_GENERIC_MAPPING']],
      474     'AccessesToAudit': [0x14, ['unsigned long']],
      475     'MaximumAuditMask': [0x18, ['unsigned long']],
      476     'TransactionId': [0x1c, ['_GUID']],
      477     'NewSecurityDescriptor': [0x2c, ['pointer', ['void']]],
      478     'ExistingSecurityDescriptor': [0x30, ['pointer', ['void']]],
      479     'ParentSecurityDescriptor': [0x34, ['pointer', ['void']]],
      480     'DeRefSecurityDescriptor': [0x38, ['pointer', ['void']]],
      481     'SDLock': [0x3c, ['pointer', ['void']]],
      482     'AccessReasons': [0x40, ['_ACCESS_REASONS']],
      483 }],
464   '_BITMAP_RANGE': [ 0x20, {   484   '_BITMAP_RANGE': [ 0x20, {
465     'Links': [0x0, ['_LIST_ENTRY']],   485     'Links': [0x0, ['_LIST_ENTRY']],
466     'BasePage': [0x8, ['long long']],   486     'BasePage': [0x8, ['long long']],
467     'FirstDirtyPage': [0x10, ['unsigned long']],   487     'FirstDirtyPage': [0x10, ['unsigned long']],
468     'LastDirtyPage': [0x14, ['unsigned long']],   488     'LastDirtyPage': [0x14, ['unsigned long']],
469     'DirtyPages': [0x18, ['unsigned long']],   489     'DirtyPages': [0x18, ['unsigned long']],
470     'Bitmap': [0x1c, ['pointer', ['unsigned long']]],   490     'Bitmap': [0x1c, ['pointer', ['unsigned long']]],
471 }],   491 }],
472   '_BLOB': [ 0x18, {   492   '_BLOB': [ 0x18, {
473     'ResourceList': [0x0, ['_LIST_ENTRY']],   493     'ResourceList': [0x0, ['_LIST_ENTRY']],
474     'FreeListEntry': [0x0, ['_SINGLE_LIST_ENTRY']],   494     'FreeListEntry': [0x0, ['_SINGLE_LIST_ENTRY']],
475     'u1': [0x8, ['unnamed_0540633ad5006dc9fcdada4ce8e375fa']],   495     'u1': [0x8, ['unnamed_0540633ad5006dc9fcdada4ce8e375fa']],
476     'ResourceId': [0x9, ['unsigned char']],   496     'ResourceId': [0x9, ['unsigned char']],
477     'CachedReferences': [0xa, ['short']],   497     'CachedReferences': [0xa, ['short']],
478     'ReferenceCount': [0xc, ['long']],   498     'ReferenceCount': [0xc, ['long']],
479     'Lock': [0x10, ['_EX_PUSH_LOCK']],   499     'Lock': [0x10, ['_EX_PUSH_LOCK']],
480     'Pad': [0x14, ['unsigned long']],   500     'Pad': [0x14, ['unsigned long']],
481 }],   501 }],
482   '_BLOB_TYPE': [ 0x24, {   502   '_BLOB_TYPE': [ 0x24, {
483     'PoolTag': [0x4, ['unsigned long']],   503     'PoolTag': [0x4, ['unsigned long']],
484     'Flags': [0x8, ['unsigned long']],   504     'Flags': [0x8, ['unsigned long']],
485     'CreatedObjects': [0xc, ['unsigned long']],   505     'CreatedObjects': [0xc, ['unsigned long']],
486     'DeletedObjects': [0x10, ['unsigned long']],   506     'DeletedObjects': [0x10, ['unsigned long']],
487     'DeleteProcedure': [0x14, ['pointer', ['void']]],   507     'DeleteProcedure': [0x14, ['pointer', ['void']]],
488     'DestroyProcedure': [0x18, ['pointer', ['void']]],   508     'DestroyProcedure': [0x18, ['pointer', ['void']]],
489     'UsualSize': [0x1c, ['unsigned long']],   509     'UsualSize': [0x1c, ['unsigned long']],
490     'LookasideIndex': [0x20, ['unsigned long']],   510     'LookasideIndex': [0x20, ['unsigned long']],
491 }],   511 }],
492   '_BUS_EXTENSION_LIST': [ 0x8, {   512   '_BUS_EXTENSION_LIST': [ 0x8, {
493     'Next': [0x0, ['pointer', ['void']]],   513     'Next': [0x0, ['pointer', ['void']]],
494     'BusExtension': [0x4, ['pointer', ['_PI_BUS_EXTENSION']]],   514     'BusExtension': [0x4, ['pointer', ['_PI_BUS_EXTENSION']]],
495 }],   515 }],
496   '_CACHED_CHILD_LIST': [ 0x8, {   516   '_CACHED_CHILD_LIST': [ 0x8, {
497     'Count': [0x0, ['unsigned long']],   517     'Count': [0x0, ['unsigned long']],
498     'ValueList': [0x4, ['unsigned long']],   518     'ValueList': [0x4, ['unsigned long']],
499     'RealKcb': [0x4, ['pointer', ['_CM_KEY_CONTROL_BLOCK']]],   519     'RealKcb': [0x4, ['pointer', ['_CM_KEY_CONTROL_BLOCK']]],
500 }],   520 }],
501   '_CACHED_KSTACK_LIST': [ 0x18, {   521   '_CACHED_KSTACK_LIST': [ 0x18, {
502     'SListHead': [0x0, ['_SLIST_HEADER']],   522     'SListHead': [0x0, ['_SLIST_HEADER']],
503     'MinimumFree': [0x8, ['long']],   523     'MinimumFree': [0x8, ['long']],
504     'Misses': [0xc, ['unsigned long']],   524     'Misses': [0xc, ['unsigned long']],
505     'MissesLast': [0x10, ['unsigned long']],   525     'MissesLast': [0x10, ['unsigned long']],
      526     'Pad0': [0x14, ['unsigned long']],
506 }],   527 }],
507   '_CACHE_DESCRIPTOR': [ 0xc, {   528   '_CACHE_DESCRIPTOR': [ 0xc, {
508     'Level': [0x0, ['unsigned char']],   529     'Level': [0x0, ['unsigned char']],
509     'Associativity': [0x1, ['unsigned char']],   530     'Associativity': [0x1, ['unsigned char']],
510     'LineSize': [0x2, ['unsigned short']],   531     'LineSize': [0x2, ['unsigned short']],
511     'Size': [0x4, ['unsigned long']],   532     'Size': [0x4, ['unsigned long']],
512 }],   533 }],
513   '_CACHE_MANAGER_CALLBACKS': [ 0x10, {   534   '_CACHE_MANAGER_CALLBACKS': [ 0x10, {
514     'AcquireForLazyWrite': [0x0, ['pointer', ['void']]],   535     'AcquireForLazyWrite': [0x0, ['pointer', ['void']]],
515     'ReleaseFromLazyWrite': [0x4, ['pointer', ['void']]],   536     'ReleaseFromLazyWrite': [0x4, ['pointer', ['void']]],
516     'AcquireForReadAhead': [0x8, ['pointer', ['void']]],   537     'AcquireForReadAhead': [0x8, ['pointer', ['void']]],
517     'ReleaseFromReadAhead': [0xc, ['pointer', ['void']]],   538     'ReleaseFromReadAhead': [0xc, ['pointer', ['void']]],
518 }],   539 }],
519   '_CACHE_UNINITIALIZE_EVENT': [ 0x14, {   540   '_CACHE_UNINITIALIZE_EVENT': [ 0x14, {
520     'Next': [0x0, ['pointer', ['_CACHE_UNINITIALIZE_EVENT']]],   541     'Next': [0x0, ['pointer', ['_CACHE_UNINITIALIZE_EVENT']]],
521     'Event': [0x4, ['_KEVENT']],   542     'Event': [0x4, ['_KEVENT']],
522 }],   543 }],
523   '_CALL_HASH_ENTRY': [ 0x14, {   544   '_CALL_HASH_ENTRY': [ 0x14, {
524     'ListEntry': [0x0, ['_LIST_ENTRY']],   545     'ListEntry': [0x0, ['_LIST_ENTRY']],
525     'CallersAddress': [0x8, ['pointer', ['void']]],   546     'CallersAddress': [0x8, ['pointer', ['void']]],
526     'CallersCaller': [0xc, ['pointer', ['void']]],   547     'CallersCaller': [0xc, ['pointer', ['void']]],
527     'CallCount': [0x10, ['unsigned long']],   548     'CallCount': [0x10, ['unsigned long']],
528 }],   549 }],
529   '_CALL_PERFORMANCE_DATA': [ 0x204, {   550   '_CALL_PERFORMANCE_DATA': [ 0x204, {
530     'SpinLock': [0x0, ['unsigned long']],   551     'SpinLock': [0x0, ['unsigned long']],
531     'HashTable': [0x4, ['array', 64, ['_LIST_ENTRY']]],   552     'HashTable': [0x4, ['array', 64, ['_LIST_ENTRY']]],
532 }],   553 }],
533   '_CELL_DATA': [ 0x50, {   554   '_CELL_DATA': [ 0x50, {
534     'u': [0x0, ['_u']],   555     'u': [0x0, ['_u']],
535 }],   556 }],
536   '_CHILD_LIST': [ 0x8, {   557   '_CHILD_LIST': [ 0x8, {
537     'Count': [0x0, ['unsigned long']],   558     'Count': [0x0, ['unsigned long']],
538     'List': [0x4, ['unsigned long']],   559     'List': [0x4, ['unsigned long']],
539 }],   560 }],
540   '_CLIENT_ID': [ 0x8, {   561   '_CLIENT_ID': [ 0x8, {
541     'UniqueProcess': [0x0, ['pointer', ['void']]],   562     'UniqueProcess': [0x0, ['pointer', ['void']]],
542     'UniqueThread': [0x4, ['pointer', ['void']]],   563     'UniqueThread': [0x4, ['pointer', ['void']]],
543 }],   564 }],
      565   '_CLIENT_ID32': [ 0x8, {
      566     'UniqueProcess': [0x0, ['unsigned long']],
      567     'UniqueThread': [0x4, ['unsigned long']],
      568 }],
      569   '_CLIENT_ID64': [ 0x10, {
      570     'UniqueProcess': [0x0, ['unsigned long long']],
      571     'UniqueThread': [0x8, ['unsigned long long']],
      572 }],
544   '_CLS_LSN': [ 0x8, {   573   '_CLS_LSN': [ 0x8, {
545     'ullOffset': [0x0, ['unsigned long long']],   574     'ullOffset': [0x0, ['unsigned long long']],
546     'offset': [0x0, ['unnamed_4eb80a7b93add350c570c5294cff7035']],   575     'offset': [0x0, ['unnamed_4eb80a7b93add350c570c5294cff7035']],
547 }],   576 }],
548   '_CMHIVE': [ 0x5e0, {   577   '_CMHIVE': [ 0x630, {
549     'Hive': [0x0, ['_HHIVE']],   578     'Hive': [0x0, ['_HHIVE']],
550     'FileHandles': [0x2e8, ['array', 6, ['pointer', ['void']]]],   579     'FileHandles': [0x2ec, ['array', 6, ['pointer', ['void']]]],
551     'NotifyList': [0x300, ['_LIST_ENTRY']],   580     'NotifyList': [0x304, ['_LIST_ENTRY']],
552     'HiveList': [0x308, ['_LIST_ENTRY']],   581     'HiveList': [0x30c, ['_LIST_ENTRY']],
553     'HiveLock': [0x310, ['pointer', ['_FAST_MUTEX']]],   582     'PreloadedHiveList': [0x314, ['_LIST_ENTRY']],
554     'ViewLock': [0x314, ['_EX_PUSH_LOCK']],   583     'HiveRundown': [0x31c, ['_EX_RUNDOWN_REF']],
555     'ViewLockOwner': [0x318, ['pointer', ['_KTHREAD']]],   584     'ParseCacheEntries': [0x320, ['_LIST_ENTRY']],
556     'ViewLockLast': [0x31c, ['unsigned long']],   585     'KcbCacheTable': [0x328, ['pointer', ['_CM_KEY_HASH_TABLE_ENTRY']]],
557     'ViewUnLockLast': [0x320, ['unsigned long']],   586     'KcbCacheTableSize': [0x32c, ['unsigned long']],
558     'WriterLock': [0x324, ['pointer', ['_FAST_MUTEX']]],   587     'Identity': [0x330, ['unsigned long']],
559     'FlusherLock': [0x328, ['_EX_PUSH_LOCK']],   588     'HiveLock': [0x334, ['pointer', ['_FAST_MUTEX']]],
560     'SecurityLock': [0x32c, ['_EX_PUSH_LOCK']],   589     'ViewLock': [0x338, ['_EX_PUSH_LOCK']],
561     'MappedViewList': [0x330, ['_LIST_ENTRY']],   590     'ViewLockOwner': [0x33c, ['pointer', ['_KTHREAD']]],
562     'PinnedViewList': [0x338, ['_LIST_ENTRY']],   591     'ViewLockLast': [0x340, ['unsigned long']],
563     'FlushedViewList': [0x340, ['_LIST_ENTRY']],   592     'ViewUnLockLast': [0x344, ['unsigned long']],
564     'MappedViewCount': [0x348, ['unsigned short']],   593     'WriterLock': [0x348, ['pointer', ['_FAST_MUTEX']]],
565     'PinnedViewCount': [0x34a, ['unsigned short']],   594     'FlusherLock': [0x34c, ['pointer', ['_ERESOURCE']]],
566     'UseCount': [0x34c, ['unsigned long']],   595     'FlushDirtyVector': [0x350, ['_RTL_BITMAP']],
567     'ViewsPerHive': [0x350, ['unsigned long']],   596     'FlushOffsetArray': [0x358, ['pointer', ['CMP_OFFSET_ARRAY']]],
568     'FileObject': [0x354, ['pointer', ['_FILE_OBJECT']]],   597     'FlushOffsetArrayCount': [0x35c, ['unsigned long']],
569     'LastShrinkHiveSize': [0x358, ['unsigned long']],   598     'FlushHiveTruncated': [0x360, ['unsigned long']],
570     'ActualFileSize': [0x360, ['_LARGE_INTEGER']],   599     'FlushLock2': [0x364, ['pointer', ['_FAST_MUTEX']]],
571     'FileFullPath': [0x368, ['_UNICODE_STRING']],   600     'SecurityLock': [0x368, ['_EX_PUSH_LOCK']],
572     'FileUserName': [0x370, ['_UNICODE_STRING']],   601     'MappedViewList': [0x36c, ['_LIST_ENTRY']],
573     'HiveRootPath': [0x378, ['_UNICODE_STRING']],   602     'PinnedViewList': [0x374, ['_LIST_ENTRY']],
574     'SecurityCount': [0x380, ['unsigned long']],   603     'FlushedViewList': [0x37c, ['_LIST_ENTRY']],
575     'SecurityCacheSize': [0x384, ['unsigned long']],   604     'MappedViewCount': [0x384, ['unsigned short']],
576     'SecurityHitHint': [0x388, ['long']],   605     'PinnedViewCount': [0x386, ['unsigned short']],
577     'SecurityCache': [0x38c, ['pointer', ['_CM_KEY_SECURITY_CACHE_ENTRY']]],   606     'UseCount': [0x388, ['unsigned long']],
578     'SecurityHash': [0x390, ['array', 64, ['_LIST_ENTRY']]],   607     'ViewsPerHive': [0x38c, ['unsigned long']],
579     'UnloadEventCount': [0x590, ['unsigned long']],   608     'FileObject': [0x390, ['pointer', ['_FILE_OBJECT']]],
580     'UnloadEventArray': [0x594, ['pointer', ['pointer', ['_KEVENT']]]],   609     'LastShrinkHiveSize': [0x394, ['unsigned long']],
581     'RootKcb': [0x598, ['pointer', ['_CM_KEY_CONTROL_BLOCK']]],   610     'ActualFileSize': [0x398, ['_LARGE_INTEGER']],
582     'Frozen': [0x59c, ['unsigned char']],   611     'FileFullPath': [0x3a0, ['_UNICODE_STRING']],
583     'UnloadWorkItem': [0x5a0, ['pointer', ['_CM_WORKITEM']]],   612     'FileUserName': [0x3a8, ['_UNICODE_STRING']],
584     'GrowOnlyMode': [0x5a4, ['unsigned char']],   613     'HiveRootPath': [0x3b0, ['_UNICODE_STRING']],
585     'GrowOffset': [0x5a8, ['unsigned long']],   614     'SecurityCount': [0x3b8, ['unsigned long']],
586     'KcbConvertListHead': [0x5ac, ['_LIST_ENTRY']],   615     'SecurityCacheSize': [0x3bc, ['unsigned long']],
587     'KnodeConvertListHead': [0x5b4, ['_LIST_ENTRY']],   616     'SecurityHitHint': [0x3c0, ['long']],
588     'CellRemapArray': [0x5bc, ['pointer', ['_CM_CELL_REMAP_BLOCK']]],   617     'SecurityCache': [0x3c4, ['pointer', ['_CM_KEY_SECURITY_CACHE_ENTRY']]],
589     'Flags': [0x5c0, ['unsigned long']],   618     'SecurityHash': [0x3c8, ['array', 64, ['_LIST_ENTRY']]],
590     'TrustClassEntry': [0x5c4, ['_LIST_ENTRY']],   619     'UnloadEventCount': [0x5c8, ['unsigned long']],
591     'FlushCount': [0x5cc, ['unsigned long']],   620     'UnloadEventArray': [0x5cc, ['pointer', ['pointer', ['_KEVENT']]]],
592     'CmRm': [0x5d0, ['pointer', ['_CM_RM']]],   621     'RootKcb': [0x5d0, ['pointer', ['_CM_KEY_CONTROL_BLOCK']]],
593     'CmRmInitFailPoint': [0x5d4, ['unsigned long']],   622     'Frozen': [0x5d4, ['unsigned char']],
594     'CmRmInitFailStatus': [0x5d8, ['long']],   623     'UnloadWorkItem': [0x5d8, ['pointer', ['_CM_WORKITEM']]],
595     'CreatorOwner': [0x5dc, ['pointer', ['_KTHREAD']]],   624     'UnloadWorkItemHolder': [0x5dc, ['_CM_WORKITEM']],
      625     'GrowOnlyMode': [0x5f0, ['unsigned char']],
      626     'GrowOffset': [0x5f4, ['unsigned long']],
      627     'KcbConvertListHead': [0x5f8, ['_LIST_ENTRY']],
      628     'KnodeConvertListHead': [0x600, ['_LIST_ENTRY']],
      629     'CellRemapArray': [0x608, ['pointer', ['_CM_CELL_REMAP_BLOCK']]],
      630     'Flags': [0x60c, ['unsigned long']],
      631     'TrustClassEntry': [0x610, ['_LIST_ENTRY']],
      632     'FlushCount': [0x618, ['unsigned long']],
      633     'CmRm': [0x61c, ['pointer', ['_CM_RM']]],
      634     'CmRmInitFailPoint': [0x620, ['unsigned long']],
      635     'CmRmInitFailStatus': [0x624, ['long']],
      636     'CreatorOwner': [0x628, ['pointer', ['_KTHREAD']]],
      637     'RundownThread': [0x62c, ['pointer', ['_KTHREAD']]],
596 }],   638 }],
597   '_CM_BIG_DATA': [ 0x8, {   639   '_CM_BIG_DATA': [ 0x8, {
598     'Signature': [0x0, ['unsigned short']],   640     'Signature': [0x0, ['unsigned short']],
599     'Count': [0x2, ['unsigned short']],   641     'Count': [0x2, ['unsigned short']],
600     'List': [0x4, ['unsigned long']],   642     'List': [0x4, ['unsigned long']],
601 }],   643 }],
602   '_CM_CACHED_VALUE_INDEX': [ 0x54, {   644   '_CM_CACHED_VALUE_INDEX': [ 0x54, {
603     'CellIndex': [0x0, ['unsigned long']],   645     'CellIndex': [0x0, ['unsigned long']],
604     'Data': [0x4, ['unnamed_86d72f9ff7f0f4872a91534aedfbb57b']],   646     'Data': [0x4, ['unnamed_86d72f9ff7f0f4872a91534aedfbb57b']],
605 }],   647 }],
606   '_CM_CELL_REMAP_BLOCK': [ 0x8, {   648   '_CM_CELL_REMAP_BLOCK': [ 0x8, {
607     'OldCell': [0x0, ['unsigned long']],   649     'OldCell': [0x0, ['unsigned long']],
608     'NewCell': [0x4, ['unsigned long']],   650     'NewCell': [0x4, ['unsigned long']],
609 }],   651 }],
610   '_CM_FULL_RESOURCE_DESCRIPTOR': [ 0x20, {   652   '_CM_FULL_RESOURCE_DESCRIPTOR': [ 0x20, {
611     'BusNumber': [0x4, ['unsigned long']],   653     'BusNumber': [0x4, ['unsigned long']],
612     'PartialResourceList': [0x8, ['_CM_PARTIAL_RESOURCE_LIST']],   654     'PartialResourceList': [0x8, ['_CM_PARTIAL_RESOURCE_LIST']],
613 }],   655 }],
614   '_CM_INDEX_HINT_BLOCK': [ 0x8, {   656   '_CM_INDEX_HINT_BLOCK': [ 0x8, {
615     'Count': [0x0, ['unsigned long']],   657     'Count': [0x0, ['unsigned long']],
616     'HashKey': [0x4, ['array', 1, ['unsigned long']]],   658     'HashKey': [0x4, ['array', 1, ['unsigned long']]],
617 }],   659 }],
618   '_CM_INTENT_LOCK': [ 0x8, {   660   '_CM_INTENT_LOCK': [ 0x8, {
619     'OwnerCount': [0x0, ['unsigned long']],   661     'OwnerCount': [0x0, ['unsigned long']],
620     'OwnerTable': [0x4, ['pointer', ['pointer', ['_CM_KCB_UOW']]]],   662     'OwnerTable': [0x4, ['pointer', ['pointer', ['_CM_KCB_UOW']]]],
621 }],   663 }],
622   '_CM_KCB_UOW': [ 0x38, {   664   '_CM_KCB_UOW': [ 0x38, {
623     'TransactionListEntry': [0x0, ['_LIST_ENTRY']],   665     'TransactionListEntry': [0x0, ['_LIST_ENTRY']],
624     'KCBLock': [0x8, ['pointer', ['_CM_INTENT_LOCK']]],   666     'KCBLock': [0x8, ['pointer', ['_CM_INTENT_LOCK']]],
625     'KeyLock': [0xc, ['pointer', ['_CM_INTENT_LOCK']]],   667     'KeyLock': [0xc, ['pointer', ['_CM_INTENT_LOCK']]],
626     'KCBListEntry': [0x10, ['_LIST_ENTRY']],   668     'KCBListEntry': [0x10, ['_LIST_ENTRY']],
627     'KeyControlBlock': [0x18, ['pointer', ['_CM_KEY_CONTROL_BLOCK']]],   669     'KeyControlBlock': [0x18, ['pointer', ['_CM_KEY_CONTROL_BLOCK']]],
628     'Transaction': [0x1c, ['pointer', ['_CM_TRANS']]],   670     'Transaction': [0x1c, ['pointer', ['_CM_TRANS']]],
629     'UoWState': [0x20, ['unsigned long']],   671     'UoWState': [0x20, ['unsigned long']],
630     'TxSecurityCell': [0x30, ['unsigned long']],   672     'TxSecurityCell': [0x30, ['unsigned long']],
631     'LastWriteTime': [0x30, ['_LARGE_INTEGER']],   673     'LastWriteTime': [0x30, ['_LARGE_INTEGER']],
632     'OldChildKCB': [0x30, ['pointer', ['_CM_KEY_CONTROL_BLOCK']]],   674     'OldChildKCB': [0x30, ['pointer', ['_CM_KEY_CONTROL_BLOCK']]],
633     'OtherChildKCB': [0x30, ['pointer', ['_CM_KEY_CONTROL_BLOCK']]],   675     'OtherChildKCB': [0x30, ['pointer', ['_CM_KEY_CONTROL_BLOCK']]],
634     'OldValueCell': [0x30, ['unsigned long']],   676     'OldValueCell': [0x30, ['unsigned long']],
635     'ChildKCB': [0x30, ['pointer', ['_CM_KEY_CONTROL_BLOCK']]],   677     'ChildKCB': [0x30, ['pointer', ['_CM_KEY_CONTROL_BLOCK']]],
636     'UserFlags': [0x30, ['unsigned long']],   678     'UserFlags': [0x30, ['unsigned long']],
637     'VolatileKeyCell': [0x30, ['unsigned long']],   679     'VolatileKeyCell': [0x30, ['unsigned long']],
638     'NewChildKCB': [0x34, ['pointer', ['_CM_KEY_CONTROL_BLOCK']]],   680     'NewChildKCB': [0x34, ['pointer', ['_CM_KEY_CONTROL_BLOCK']]],
639     'ThisVolatileKeyCell': [0x34, ['unsigned long']],   681     'ThisVolatileKeyCell': [0x34, ['unsigned long']],
640     'NewValueCell': [0x34, ['unsigned long']],   682     'NewValueCell': [0x34, ['unsigned long']],
641 }],   683 }],
642   '_CM_KEY_BODY': [ 0x2c, {   684   '_CM_KEY_BODY': [ 0x2c, {
643     'Type': [0x0, ['unsigned long']],   685     'Type': [0x0, ['unsigned long']],
644     'KeyControlBlock': [0x4, ['pointer', ['_CM_KEY_CONTROL_BLOCK']]],   686     'KeyControlBlock': [0x4, ['pointer', ['_CM_KEY_CONTROL_BLOCK']]],
645     'NotifyBlock': [0x8, ['pointer', ['_CM_NOTIFY_BLOCK']]],   687     'NotifyBlock': [0x8, ['pointer', ['_CM_NOTIFY_BLOCK']]],
646     'ProcessID': [0xc, ['pointer', ['void']]],   688     'ProcessID': [0xc, ['pointer', ['void']]],
647     'KeyBodyList': [0x10, ['_LIST_ENTRY']],   689     'KeyBodyList': [0x10, ['_LIST_ENTRY']],
648     'Flags': [0x18, ['unsigned long']],      
649     'KtmTrans': [0x1c, ['pointer', ['void']]],   690     'KtmTrans': [0x1c, ['pointer', ['void']]],
650     'KtmUow': [0x20, ['pointer', ['_GUID']]],   691     'KtmUow': [0x20, ['pointer', ['_GUID']]],
651     'ContextListHead': [0x24, ['_LIST_ENTRY']],   692     'ContextListHead': [0x24, ['_LIST_ENTRY']],
652 }],   693 }],
653   '_CM_KEY_CONTROL_BLOCK': [ 0x90, {   694   '_CM_KEY_CONTROL_BLOCK': [ 0xa0, {
654     'RefCount': [0x0, ['unsigned long']],   695     'RefCount': [0x0, ['unsigned long']],
655     'KeyHash': [0x8, ['_CM_KEY_HASH']],   696     'ConvKey': [0xc, ['unsigned long']],
656     'ConvKey': [0x8, ['unsigned long']],   697     'KeyHash': [0xc, ['_CM_KEY_HASH']],
657     'NextHash': [0xc, ['pointer', ['_CM_KEY_HASH']]],   698     'NextHash': [0x10, ['pointer', ['_CM_KEY_HASH']]],
658     'KeyHive': [0x10, ['pointer', ['_HHIVE']]],   699     'KeyHive': [0x14, ['pointer', ['_HHIVE']]],
659     'KeyCell': [0x14, ['unsigned long']],   700     'KeyCell': [0x18, ['unsigned long']],
660     'ParentKcb': [0x18, ['pointer', ['_CM_KEY_CONTROL_BLOCK']]],   701     'KcbPushlock': [0x1c, ['_EX_PUSH_LOCK']],
661     'NameBlock': [0x1c, ['pointer', ['_CM_NAME_CONTROL_BLOCK']]],   702     'SharedCount': [0x20, ['long']],
662     'CachedSecurity': [0x20, ['pointer', ['_CM_KEY_SECURITY_CACHE']]],   703     'Owner': [0x20, ['pointer', ['_KTHREAD']]],
663     'ValueCache': [0x24, ['_CACHED_CHILD_LIST']],   704     'SlotHint': [0x24, ['unsigned long']],
664     'HashKey': [0x2c, ['unsigned long']],   705     'ParentKcb': [0x28, ['pointer', ['_CM_KEY_CONTROL_BLOCK']]],
665     'SubKeyCount': [0x2c, ['unsigned long']],   706     'NameBlock': [0x2c, ['pointer', ['_CM_NAME_CONTROL_BLOCK']]],
666     'IndexHint': [0x2c, ['pointer', ['_CM_INDEX_HINT_BLOCK']]],   707     'CachedSecurity': [0x30, ['pointer', ['_CM_KEY_SECURITY_CACHE']]],
667     'KeyBodyListHead': [0x30, ['_LIST_ENTRY']],   708     'ValueCache': [0x34, ['_CACHED_CHILD_LIST']],
668     'FreeListEntry': [0x30, ['_LIST_ENTRY']],   709     'SubKeyCount': [0x3c, ['unsigned long']],
669     'KeyBodyArray': [0x38, ['array', 4, ['pointer', ['_CM_KEY_BODY']]]],   710     'IndexHint': [0x3c, ['pointer', ['_CM_INDEX_HINT_BLOCK']]],
670     'DelayCloseEntry': [0x48, ['pointer', ['void']]],   711     'HashKey': [0x3c, ['unsigned long']],
671     'KcbLastWriteTime': [0x50, ['_LARGE_INTEGER']],   712     'KeyBodyListHead': [0x40, ['_LIST_ENTRY']],
672     'KcbMaxNameLen': [0x58, ['unsigned short']],   713     'FreeListEntry': [0x40, ['_LIST_ENTRY']],
673     'KcbMaxValueNameLen': [0x5a, ['unsigned short']],   714     'KeyBodyArray': [0x48, ['array', 4, ['pointer', ['_CM_KEY_BODY']]]],
674     'KcbMaxValueDataLen': [0x5c, ['unsigned long']],   715     'KcbLastWriteTime': [0x58, ['_LARGE_INTEGER']],
675     'KCBUoWListHead': [0x64, ['_LIST_ENTRY']],   716     'KcbMaxNameLen': [0x60, ['unsigned short']],
676     'TransKCBOwner': [0x6c, ['pointer', ['_CM_TRANS']]],   717     'KcbMaxValueNameLen': [0x62, ['unsigned short']],
677     'KCBLock': [0x70, ['_CM_INTENT_LOCK']],   718     'KcbMaxValueDataLen': [0x64, ['unsigned long']],
678     'KeyLock': [0x78, ['_CM_INTENT_LOCK']],   719     'KCBUoWListHead': [0x6c, ['_LIST_ENTRY']],
679     'TransValueCache': [0x80, ['_CHILD_LIST']],   720     'Stolen': [0x74, ['pointer', ['unsigned char']]],
680     'TransValueListOwner': [0x88, ['pointer', ['_CM_TRANS']]],   721     'DelayQueueEntry': [0x74, ['_LIST_ENTRY']],
681     'FullKCBName': [0x8c, ['pointer', ['_UNICODE_STRING']]],   722     'TransKCBOwner': [0x7c, ['pointer', ['_CM_TRANS']]],
      723     'KCBLock': [0x80, ['_CM_INTENT_LOCK']],
      724     'KeyLock': [0x88, ['_CM_INTENT_LOCK']],
      725     'TransValueCache': [0x90, ['_CHILD_LIST']],
      726     'TransValueListOwner': [0x98, ['pointer', ['_CM_TRANS']]],
      727     'FullKCBName': [0x9c, ['pointer', ['_UNICODE_STRING']]],
682 }],   728 }],
683   '_CM_KEY_HASH': [ 0x10, {   729   '_CM_KEY_HASH': [ 0x10, {
684     'ConvKey': [0x0, ['unsigned long']],   730     'ConvKey': [0x0, ['unsigned long']],
685     'NextHash': [0x4, ['pointer', ['_CM_KEY_HASH']]],   731     'NextHash': [0x4, ['pointer', ['_CM_KEY_HASH']]],
686     'KeyHive': [0x8, ['pointer', ['_HHIVE']]],   732     'KeyHive': [0x8, ['pointer', ['_HHIVE']]],
687     'KeyCell': [0xc, ['unsigned long']],   733     'KeyCell': [0xc, ['unsigned long']],
688 }],   734 }],
      735   '_CM_KEY_HASH_TABLE_ENTRY': [ 0xc, {
      736     'Lock': [0x0, ['_EX_PUSH_LOCK']],
      737     'Owner': [0x4, ['pointer', ['_KTHREAD']]],
      738     'Entry': [0x8, ['pointer', ['_CM_KEY_HASH']]],
      739 }],
689   '_CM_KEY_INDEX': [ 0x8, {   740   '_CM_KEY_INDEX': [ 0x8, {
690     'Signature': [0x0, ['unsigned short']],   741     'Signature': [0x0, ['unsigned short']],
691     'Count': [0x2, ['unsigned short']],   742     'Count': [0x2, ['unsigned short']],
692     'List': [0x4, ['array', 1, ['unsigned long']]],   743     'List': [0x4, ['array', 1, ['unsigned long']]],
693 }],   744 }],
694   '_CM_KEY_NODE': [ 0x50, {   745   '_CM_KEY_NODE': [ 0x50, {
695     'Signature': [0x0, ['unsigned short']],   746     'Signature': [0x0, ['unsigned short']],
696     'Flags': [0x2, ['unsigned short']],   747     'Flags': [0x2, ['unsigned short']],
697     'LastWriteTime': [0x4, ['_LARGE_INTEGER']],   748     'LastWriteTime': [0x4, ['_LARGE_INTEGER']],
698     'Spare': [0xc, ['unsigned long']],   749     'Spare': [0xc, ['unsigned long']],
699     'Parent': [0x10, ['unsigned long']],   750     'Parent': [0x10, ['unsigned long']],
700     'SubKeyCounts': [0x14, ['array', 2, ['unsigned long']]],   751     'SubKeyCounts': [0x14, ['array', 2, ['unsigned long']]],
701     'ChildHiveReference': [0x1c, ['_CM_KEY_REFERENCE']],   752     'ChildHiveReference': [0x1c, ['_CM_KEY_REFERENCE']],
702     'SubKeyLists': [0x1c, ['array', 2, ['unsigned long']]],   753     'SubKeyLists': [0x1c, ['array', 2, ['unsigned long']]],
703     'ValueList': [0x24, ['_CHILD_LIST']],   754     'ValueList': [0x24, ['_CHILD_LIST']],
704     'Security': [0x2c, ['unsigned long']],   755     'Security': [0x2c, ['unsigned long']],
705     'Class': [0x30, ['unsigned long']],   756     'Class': [0x30, ['unsigned long']],
706     'MaxClassLen': [0x38, ['unsigned long']],   757     'MaxClassLen': [0x38, ['unsigned long']],
707     'MaxValueNameLen': [0x3c, ['unsigned long']],   758     'MaxValueNameLen': [0x3c, ['unsigned long']],
708     'MaxValueDataLen': [0x40, ['unsigned long']],   759     'MaxValueDataLen': [0x40, ['unsigned long']],
709     'WorkVar': [0x44, ['unsigned long']],   760     'WorkVar': [0x44, ['unsigned long']],
710     'NameLength': [0x48, ['unsigned short']],   761     'NameLength': [0x48, ['unsigned short']],
711     'ClassLength': [0x4a, ['unsigned short']],   762     'ClassLength': [0x4a, ['unsigned short']],
712     'Name': [0x4c, ['array', 1, ['wchar']]],   763     'Name': [0x4c, ['array', 1, ['wchar']]],
713 }],   764 }],
714   '_CM_KEY_REFERENCE': [ 0x8, {   765   '_CM_KEY_REFERENCE': [ 0x8, {
715     'KeyCell': [0x0, ['unsigned long']],   766     'KeyCell': [0x0, ['unsigned long']],
716     'KeyHive': [0x4, ['pointer', ['_HHIVE']]],   767     'KeyHive': [0x4, ['pointer', ['_HHIVE']]],
717 }],   768 }],
718   '_CM_KEY_SECURITY': [ 0x28, {   769   '_CM_KEY_SECURITY': [ 0x28, {
719     'Signature': [0x0, ['unsigned short']],   770     'Signature': [0x0, ['unsigned short']],
720     'Reserved': [0x2, ['unsigned short']],   771     'Reserved': [0x2, ['unsigned short']],
721     'Flink': [0x4, ['unsigned long']],   772     'Flink': [0x4, ['unsigned long']],
722     'Blink': [0x8, ['unsigned long']],   773     'Blink': [0x8, ['unsigned long']],
723     'ReferenceCount': [0xc, ['unsigned long']],   774     'ReferenceCount': [0xc, ['unsigned long']],
724     'DescriptorLength': [0x10, ['unsigned long']],   775     'DescriptorLength': [0x10, ['unsigned long']],
725     'Descriptor': [0x14, ['_SECURITY_DESCRIPTOR_RELATIVE']],   776     'Descriptor': [0x14, ['_SECURITY_DESCRIPTOR_RELATIVE']],
726 }],   777 }],
727   '_CM_KEY_SECURITY_CACHE': [ 0x2c, {   778   '_CM_KEY_SECURITY_CACHE': [ 0x2c, {
728     'Cell': [0x0, ['unsigned long']],   779     'Cell': [0x0, ['unsigned long']],
729     'ConvKey': [0x4, ['unsigned long']],   780     'ConvKey': [0x4, ['unsigned long']],
730     'List': [0x8, ['_LIST_ENTRY']],   781     'List': [0x8, ['_LIST_ENTRY']],
731     'DescriptorLength': [0x10, ['unsigned long']],   782     'DescriptorLength': [0x10, ['unsigned long']],
732     'RealRefCount': [0x14, ['unsigned long']],   783     'RealRefCount': [0x14, ['unsigned long']],
733     'Descriptor': [0x18, ['_SECURITY_DESCRIPTOR_RELATIVE']],   784     'Descriptor': [0x18, ['_SECURITY_DESCRIPTOR_RELATIVE']],
734 }],   785 }],
735   '_CM_KEY_SECURITY_CACHE_ENTRY': [ 0x8, {   786   '_CM_KEY_SECURITY_CACHE_ENTRY': [ 0x8, {
736     'Cell': [0x0, ['unsigned long']],   787     'Cell': [0x0, ['unsigned long']],
737     'CachedSecurity': [0x4, ['pointer', ['_CM_KEY_SECURITY_CACHE']]],   788     'CachedSecurity': [0x4, ['pointer', ['_CM_KEY_SECURITY_CACHE']]],
738 }],   789 }],
739   '_CM_KEY_VALUE': [ 0x18, {   790   '_CM_KEY_VALUE': [ 0x18, {
740     'Signature': [0x0, ['unsigned short']],   791     'Signature': [0x0, ['unsigned short']],
741     'NameLength': [0x2, ['unsigned short']],   792     'NameLength': [0x2, ['unsigned short']],
742     'DataLength': [0x4, ['unsigned long']],   793     'DataLength': [0x4, ['unsigned long']],
743     'Data': [0x8, ['unsigned long']],   794     'Data': [0x8, ['unsigned long']],
744     'Type': [0xc, ['unsigned long']],   795     'Type': [0xc, ['unsigned long']],
745     'Flags': [0x10, ['unsigned short']],   796     'Flags': [0x10, ['unsigned short']],
746     'Spare': [0x12, ['unsigned short']],   797     'Spare': [0x12, ['unsigned short']],
747     'Name': [0x14, ['array', 1, ['wchar']]],   798     'Name': [0x14, ['array', 1, ['wchar']]],
748 }],   799 }],
749   '_CM_NAME_CONTROL_BLOCK': [ 0x10, {   800   '_CM_NAME_CONTROL_BLOCK': [ 0x10, {
750     'Compressed': [0x0, ['unsigned char']],   801     'Compressed': [0x0, ['unsigned char']],
751     'RefCount': [0x2, ['unsigned short']],   802     'RefCount': [0x2, ['unsigned short']],
752     'ConvKey': [0x4, ['unsigned long']],   803     'ConvKey': [0x4, ['unsigned long']],
753     'NameHash': [0x4, ['_CM_NAME_HASH']],   804     'NameHash': [0x4, ['_CM_NAME_HASH']],
754     'NextHash': [0x8, ['pointer', ['_CM_KEY_HASH']]],   805     'NextHash': [0x8, ['pointer', ['_CM_KEY_HASH']]],
755     'NameLength': [0xc, ['unsigned short']],   806     'NameLength': [0xc, ['unsigned short']],
756     'Name': [0xe, ['array', 1, ['wchar']]],   807     'Name': [0xe, ['array', 1, ['wchar']]],
757 }],   808 }],
758   '_CM_NAME_HASH': [ 0xc, {   809   '_CM_NAME_HASH': [ 0xc, {
759     'ConvKey': [0x0, ['unsigned long']],   810     'ConvKey': [0x0, ['unsigned long']],
760     'NextHash': [0x4, ['pointer', ['_CM_NAME_HASH']]],   811     'NextHash': [0x4, ['pointer', ['_CM_NAME_HASH']]],
761     'NameLength': [0x8, ['unsigned short']],   812     'NameLength': [0x8, ['unsigned short']],
762     'Name': [0xa, ['array', 1, ['wchar']]],   813     'Name': [0xa, ['array', 1, ['wchar']]],
763 }],   814 }],
764   '_CM_NOTIFY_BLOCK': [ 0x2c, {   815   '_CM_NOTIFY_BLOCK': [ 0x2c, {
765     'HiveList': [0x0, ['_LIST_ENTRY']],   816     'HiveList': [0x0, ['_LIST_ENTRY']],
766     'PostList': [0x8, ['_LIST_ENTRY']],   817     'PostList': [0x8, ['_LIST_ENTRY']],
767     'KeyControlBlock': [0x10, ['pointer', ['_CM_KEY_CONTROL_BLOCK']]],   818     'KeyControlBlock': [0x10, ['pointer', ['_CM_KEY_CONTROL_BLOCK']]],
768     'KeyBody': [0x14, ['pointer', ['_CM_KEY_BODY']]],   819     'KeyBody': [0x14, ['pointer', ['_CM_KEY_BODY']]],
769     'SubjectContext': [0x1c, ['_SECURITY_SUBJECT_CONTEXT']],   820     'SubjectContext': [0x1c, ['_SECURITY_SUBJECT_CONTEXT']],
770 }],   821 }],
771   '_CM_PARTIAL_RESOURCE_DESCRIPTOR': [ 0x10, {   822   '_CM_PARTIAL_RESOURCE_DESCRIPTOR': [ 0x10, {
772     'Type': [0x0, ['unsigned char']],   823     'Type': [0x0, ['unsigned char']],
773     'ShareDisposition': [0x1, ['unsigned char']],   824     'ShareDisposition': [0x1, ['unsigned char']],
774     'Flags': [0x2, ['unsigned short']],   825     'Flags': [0x2, ['unsigned short']],
775     'u': [0x4, ['unnamed_3a1f49cb1789ad8bb3848d312dcf502d']],   826     'u': [0x4, ['unnamed_48607093ce2c08d4ca35d2888855f5b4']],
776 }],   827 }],
777   '_CM_PARTIAL_RESOURCE_LIST': [ 0x18, {   828   '_CM_PARTIAL_RESOURCE_LIST': [ 0x18, {
778     'Version': [0x0, ['unsigned short']],   829     'Version': [0x0, ['unsigned short']],
779     'Revision': [0x2, ['unsigned short']],   830     'Revision': [0x2, ['unsigned short']],
780     'Count': [0x4, ['unsigned long']],   831     'Count': [0x4, ['unsigned long']],
781     'PartialDescriptors': [0x8, ['array', 1, ['_CM_PARTIAL_RESOURCE_DESCRIPTOR']]],   832     'PartialDescriptors': [0x8, ['array', 1, ['_CM_PARTIAL_RESOURCE_DESCRIPTOR']]],
782 }],   833 }],
783   '_CM_RESOURCE_LIST': [ 0x24, {   834   '_CM_RESOURCE_LIST': [ 0x24, {
784     'Count': [0x0, ['unsigned long']],   835     'Count': [0x0, ['unsigned long']],
785     'List': [0x4, ['array', 1, ['_CM_FULL_RESOURCE_DESCRIPTOR']]],   836     'List': [0x4, ['array', 1, ['_CM_FULL_RESOURCE_DESCRIPTOR']]],
786 }],   837 }],
787   '_CM_RM': [ 0x58, {   838   '_CM_RM': [ 0x58, {
788     'RmListEntry': [0x0, ['_LIST_ENTRY']],   839     'RmListEntry': [0x0, ['_LIST_ENTRY']],
789     'TransactionListHead': [0x8, ['_LIST_ENTRY']],   840     'TransactionListHead': [0x8, ['_LIST_ENTRY']],
790     'TmHandle': [0x10, ['pointer', ['void']]],   841     'TmHandle': [0x10, ['pointer', ['void']]],
791     'Tm': [0x14, ['pointer', ['void']]],   842     'Tm': [0x14, ['pointer', ['void']]],
792     'RmHandle': [0x18, ['pointer', ['void']]],   843     'RmHandle': [0x18, ['pointer', ['void']]],
793     'KtmRm': [0x1c, ['pointer', ['void']]],   844     'KtmRm': [0x1c, ['pointer', ['void']]],
794     'RefCount': [0x20, ['unsigned long']],   845     'RefCount': [0x20, ['unsigned long']],
795     'ContainerNum': [0x24, ['unsigned long']],   846     'ContainerNum': [0x24, ['unsigned long']],
796     'ContainerSize': [0x28, ['unsigned long long']],   847     'ContainerSize': [0x28, ['unsigned long long']],
797     'CmHive': [0x30, ['pointer', ['_CMHIVE']]],   848     'CmHive': [0x30, ['pointer', ['_CMHIVE']]],
798     'LogFileObject': [0x34, ['pointer', ['void']]],   849     'LogFileObject': [0x34, ['pointer', ['void']]],
799     'MarshallingContext': [0x38, ['pointer', ['void']]],   850     'MarshallingContext': [0x38, ['pointer', ['void']]],
800     'RmFlags': [0x3c, ['unsigned long']],   851     'RmFlags': [0x3c, ['unsigned long']],
801     'LogStartStatus1': [0x40, ['long']],   852     'LogStartStatus1': [0x40, ['long']],
802     'LogStartStatus2': [0x44, ['long']],   853     'LogStartStatus2': [0x44, ['long']],
803     'BaseLsn': [0x48, ['unsigned long long']],   854     'BaseLsn': [0x48, ['unsigned long long']],
804     'RmLock': [0x50, ['pointer', ['_ERESOURCE']]],   855     'RmLock': [0x50, ['pointer', ['_ERESOURCE']]],
805 }],   856 }],
806   '_CM_TRANS': [ 0x68, {   857   '_CM_TRANS': [ 0x68, {
807     'TransactionListEntry': [0x0, ['_LIST_ENTRY']],   858     'TransactionListEntry': [0x0, ['_LIST_ENTRY']],
808     'KCBUoWListHead': [0x8, ['_LIST_ENTRY']],   859     'KCBUoWListHead': [0x8, ['_LIST_ENTRY']],
809     'LazyCommitListEntry': [0x10, ['_LIST_ENTRY']],   860     'LazyCommitListEntry': [0x10, ['_LIST_ENTRY']],
810     'KtmTrans': [0x18, ['pointer', ['void']]],   861     'KtmTrans': [0x18, ['pointer', ['void']]],
811     'CmRm': [0x1c, ['pointer', ['_CM_RM']]],   862     'CmRm': [0x1c, ['pointer', ['_CM_RM']]],
812     'KtmEnlistmentObject': [0x20, ['pointer', ['_KENLISTMENT']]],   863     'KtmEnlistmentObject': [0x20, ['pointer', ['_KENLISTMENT']]],
813     'KtmEnlistmentHandle': [0x24, ['pointer', ['void']]],   864     'KtmEnlistmentHandle': [0x24, ['pointer', ['void']]],
814     'KtmUow': [0x28, ['_GUID']],   865     'KtmUow': [0x28, ['_GUID']],
815     'StartLsn': [0x38, ['unsigned long long']],   866     'StartLsn': [0x38, ['unsigned long long']],
816     'TransState': [0x40, ['unsigned long']],   867     'TransState': [0x40, ['unsigned long']],
817     'HiveCount': [0x44, ['unsigned long']],   868     'HiveCount': [0x44, ['unsigned long']],
818     'HiveArray': [0x48, ['array', 8, ['pointer', ['_CMHIVE']]]],   869     'HiveArray': [0x48, ['array', 7, ['pointer', ['_CMHIVE']]]],
819 }],   870 }],
820   '_CM_VIEW_OF_FILE': [ 0x30, {   871   '_CM_VIEW_OF_FILE': [ 0x30, {
821     'MappedViewLinks': [0x0, ['_LIST_ENTRY']],   872     'MappedViewLinks': [0x0, ['_LIST_ENTRY']],
822     'PinnedViewLinks': [0x8, ['_LIST_ENTRY']],   873     'PinnedViewLinks': [0x8, ['_LIST_ENTRY']],
823     'FlushedViewLinks': [0x10, ['_LIST_ENTRY']],   874     'FlushedViewLinks': [0x10, ['_LIST_ENTRY']],
824     'CmHive': [0x18, ['pointer', ['_CMHIVE']]],   875     'CmHive': [0x18, ['pointer', ['_CMHIVE']]],
825     'Bcb': [0x1c, ['pointer', ['void']]],   876     'Bcb': [0x1c, ['pointer', ['void']]],
826     'ViewAddress': [0x20, ['pointer', ['void']]],   877     'ViewAddress': [0x20, ['pointer', ['void']]],
827     'FileOffset': [0x24, ['unsigned long']],   878     'FileOffset': [0x24, ['unsigned long']],
828     'Size': [0x28, ['unsigned long']],   879     'Size': [0x28, ['unsigned long']],
829     'UseCount': [0x2c, ['unsigned long']],   880     'UseCount': [0x2c, ['unsigned long']],
830 }],   881 }],
831   '_CM_WORKITEM': [ 0x10, {   882   '_CM_WORKITEM': [ 0x14, {
832     'ListEntry': [0x0, ['_LIST_ENTRY']],   883     'ListEntry': [0x0, ['_LIST_ENTRY']],
833     'WorkerRoutine': [0x8, ['pointer', ['void']]],   884     'Private': [0x8, ['unsigned long']],
834     'Parameter': [0xc, ['pointer', ['void']]],   885     'WorkerRoutine': [0xc, ['pointer', ['void']]],
      886     'Parameter': [0x10, ['pointer', ['void']]],
835 }],   887 }],
836   '_COMPRESSED_DATA_INFO': [ 0xc, {   888   '_COMPRESSED_DATA_INFO': [ 0xc, {
837     'CompressionFormatAndEngine': [0x0, ['unsigned short']],   889     'CompressionFormatAndEngine': [0x0, ['unsigned short']],
838     'CompressionUnitShift': [0x2, ['unsigned char']],   890     'CompressionUnitShift': [0x2, ['unsigned char']],
839     'ChunkShift': [0x3, ['unsigned char']],   891     'ChunkShift': [0x3, ['unsigned char']],
840     'ClusterShift': [0x4, ['unsigned char']],   892     'ClusterShift': [0x4, ['unsigned char']],
841     'Reserved': [0x5, ['unsigned char']],   893     'Reserved': [0x5, ['unsigned char']],
842     'NumberOfChunks': [0x6, ['unsigned short']],   894     'NumberOfChunks': [0x6, ['unsigned short']],
843     'CompressedChunkSizes': [0x8, ['array', 1, ['unsigned long']]],   895     'CompressedChunkSizes': [0x8, ['array', 1, ['unsigned long']]],
844 }],   896 }],
845   '_CONFIGURATION_COMPONENT': [ 0x24, {   897   '_CONFIGURATION_COMPONENT': [ 0x24, {
846     'Flags': [0x8, ['_DEVICE_FLAGS']],   898     'Flags': [0x8, ['_DEVICE_FLAGS']],
847     'Version': [0xc, ['unsigned short']],   899     'Version': [0xc, ['unsigned short']],
848     'Revision': [0xe, ['unsigned short']],   900     'Revision': [0xe, ['unsigned short']],
849     'Key': [0x10, ['unsigned long']],   901     'Key': [0x10, ['unsigned long']],
850     'AffinityMask': [0x14, ['unsigned long']],   902     'AffinityMask': [0x14, ['unsigned long']],
      903     'Group': [0x14, ['unsigned short']],
      904     'GroupIndex': [0x16, ['unsigned short']],
851     'ConfigurationDataLength': [0x18, ['unsigned long']],   905     'ConfigurationDataLength': [0x18, ['unsigned long']],
852     'IdentifierLength': [0x1c, ['unsigned long']],   906     'IdentifierLength': [0x1c, ['unsigned long']],
853     'Identifier': [0x20, ['pointer', ['unsigned char']]],   907     'Identifier': [0x20, ['pointer', ['unsigned char']]],
854 }],   908 }],
855   '_CONFIGURATION_COMPONENT_DATA': [ 0x34, {   909   '_CONFIGURATION_COMPONENT_DATA': [ 0x34, {
856     'Parent': [0x0, ['pointer', ['_CONFIGURATION_COMPONENT_DATA']]],   910     'Parent': [0x0, ['pointer', ['_CONFIGURATION_COMPONENT_DATA']]],
857     'Child': [0x4, ['pointer', ['_CONFIGURATION_COMPONENT_DATA']]],   911     'Child': [0x4, ['pointer', ['_CONFIGURATION_COMPONENT_DATA']]],
858     'Sibling': [0x8, ['pointer', ['_CONFIGURATION_COMPONENT_DATA']]],   912     'Sibling': [0x8, ['pointer', ['_CONFIGURATION_COMPONENT_DATA']]],
859     'ComponentEntry': [0xc, ['_CONFIGURATION_COMPONENT']],   913     'ComponentEntry': [0xc, ['_CONFIGURATION_COMPONENT']],
860     'ConfigurationData': [0x30, ['pointer', ['void']]],   914     'ConfigurationData': [0x30, ['pointer', ['void']]],
861 }],   915 }],
862   '_CONTEXT': [ 0x2cc, {   916   '_CONTEXT': [ 0x2cc, {
863     'ContextFlags': [0x0, ['unsigned long']],   917     'ContextFlags': [0x0, ['unsigned long']],
864     'Dr0': [0x4, ['unsigned long']],   918     'Dr0': [0x4, ['unsigned long']],
865     'Dr1': [0x8, ['unsigned long']],   919     'Dr1': [0x8, ['unsigned long']],
866     'Dr2': [0xc, ['unsigned long']],   920     'Dr2': [0xc, ['unsigned long']],
867     'Dr3': [0x10, ['unsigned long']],   921     'Dr3': [0x10, ['unsigned long']],
868     'Dr6': [0x14, ['unsigned long']],   922     'Dr6': [0x14, ['unsigned long']],
869     'Dr7': [0x18, ['unsigned long']],   923     'Dr7': [0x18, ['unsigned long']],
870     'FloatSave': [0x1c, ['_FLOATING_SAVE_AREA']],   924     'FloatSave': [0x1c, ['_FLOATING_SAVE_AREA']],
871     'SegGs': [0x8c, ['unsigned long']],   925     'SegGs': [0x8c, ['unsigned long']],
872     'SegFs': [0x90, ['unsigned long']],   926     'SegFs': [0x90, ['unsigned long']],
873     'SegEs': [0x94, ['unsigned long']],   927     'SegEs': [0x94, ['unsigned long']],
874     'SegDs': [0x98, ['unsigned long']],   928     'SegDs': [0x98, ['unsigned long']],
875     'Edi': [0x9c, ['unsigned long']],   929     'Edi': [0x9c, ['unsigned long']],
876     'Esi': [0xa0, ['unsigned long']],   930     'Esi': [0xa0, ['unsigned long']],
877     'Ebx': [0xa4, ['unsigned long']],   931     'Ebx': [0xa4, ['unsigned long']],
878     'Edx': [0xa8, ['unsigned long']],   932     'Edx': [0xa8, ['unsigned long']],
879     'Ecx': [0xac, ['unsigned long']],   933     'Ecx': [0xac, ['unsigned long']],
880     'Eax': [0xb0, ['unsigned long']],   934     'Eax': [0xb0, ['unsigned long']],
881     'Ebp': [0xb4, ['unsigned long']],   935     'Ebp': [0xb4, ['unsigned long']],
882     'Eip': [0xb8, ['unsigned long']],   936     'Eip': [0xb8, ['unsigned long']],
883     'SegCs': [0xbc, ['unsigned long']],   937     'SegCs': [0xbc, ['unsigned long']],
884     'EFlags': [0xc0, ['unsigned long']],   938     'EFlags': [0xc0, ['unsigned long']],
885     'Esp': [0xc4, ['unsigned long']],   939     'Esp': [0xc4, ['unsigned long']],
886     'SegSs': [0xc8, ['unsigned long']],   940     'SegSs': [0xc8, ['unsigned long']],
887     'ExtendedRegisters': [0xcc, ['array', 512, ['unsigned char']]],   941     'ExtendedRegisters': [0xcc, ['array', 512, ['unsigned char']]],
888 }],   942 }],
889   '_CONTROL_AREA': [ 0x48, {   943   '_CONTROL_AREA': [ 0x50, {
890     'Segment': [0x0, ['pointer', ['_SEGMENT']]],   944     'Segment': [0x0, ['pointer', ['_SEGMENT']]],
891     'DereferenceList': [0x4, ['_LIST_ENTRY']],   945     'DereferenceList': [0x4, ['_LIST_ENTRY']],
892     'NumberOfSectionReferences': [0xc, ['unsigned long']],   946     'NumberOfSectionReferences': [0xc, ['unsigned long']],
893     'NumberOfPfnReferences': [0x10, ['unsigned long']],   947     'NumberOfPfnReferences': [0x10, ['unsigned long']],
894     'NumberOfMappedViews': [0x14, ['unsigned long']],   948     'NumberOfMappedViews': [0x14, ['unsigned long']],
895     'NumberOfUserReferences': [0x18, ['unsigned long']],   949     'NumberOfUserReferences': [0x18, ['unsigned long']],
896     'u': [0x1c, ['unnamed_a4c7a1b1adbb4b2fbcd732abd51ff5e3']],   950     'u': [0x1c, ['unnamed_a4c7a1b1adbb4b2fbcd732abd51ff5e3']],
897     'u1': [0x20, ['unnamed_ff5ccfa466c9971561a75cd4b8c8d3a5']],   951     'FlushInProgressCount': [0x20, ['unsigned long']],
898     'FilePointer': [0x24, ['_EX_FAST_REF']],   952     'FilePointer': [0x24, ['_EX_FAST_REF']],
899     'ControlAreaLock': [0x28, ['long']],   953     'ControlAreaLock': [0x28, ['long']],
      954     'ModifiedWriteCount': [0x2c, ['unsigned long']],
900     'StartingFrame': [0x2c, ['unsigned long']],   955     'StartingFrame': [0x2c, ['unsigned long']],
901     'WaitingForDeletion': [0x30, ['pointer', ['_MI_SECTION_CREATION_GATE']]],   956     'WaitingForDeletion': [0x30, ['pointer', ['_MI_SECTION_CREATION_GATE']]],
902     'u2': [0x34, ['unnamed_633d772d74da990f02bb43bf300c598c']],   957     'u2': [0x34, ['unnamed_633d772d74da990f02bb43bf300c598c']],
903     'LockedPages': [0x40, ['long long']],   958     'LockedPages': [0x40, ['long long']],
      959     'ViewList': [0x48, ['_LIST_ENTRY']],
      960 }],
      961   '_COUNTER_READING': [ 0x18, {
      962     'Index': [0x4, ['unsigned long']],
      963     'Start': [0x8, ['unsigned long long']],
      964     'Total': [0x10, ['unsigned long long']],
904 }],   965 }],
905   '_CURDIR': [ 0xc, {   966   '_CURDIR': [ 0xc, {
906     'DosPath': [0x0, ['_UNICODE_STRING']],   967     'DosPath': [0x0, ['_UNICODE_STRING']],
907     'Handle': [0x8, ['pointer', ['void']]],   968     'Handle': [0x8, ['pointer', ['void']]],
908 }],   969 }],
909   '_DBGKD_ANY_CONTROL_SET': [ 0x1c, {   970   '_DBGKD_ANY_CONTROL_SET': [ 0x1c, {
910     'X86ControlSet': [0x0, ['_X86_DBGKD_CONTROL_SET']],   971     'X86ControlSet': [0x0, ['_X86_DBGKD_CONTROL_SET']],
911     'IA64ControlSet': [0x0, ['_IA64_DBGKD_CONTROL_SET']],      
912     'AlphaControlSet': [0x0, ['unsigned long']],   972     'AlphaControlSet': [0x0, ['unsigned long']],
913     'Amd64ControlSet': [0x0, ['_AMD64_DBGKD_CONTROL_SET']],   973     'IA64ControlSet': [0x0, ['_IA64_DBGKD_CONTROL_SET']],
      974     'PpcControlSet': [0x0, ['_PPC_DBGKD_CONTROL_SET']],
914     'ArmControlSet': [0x0, ['_ARM_DBGKD_CONTROL_SET']],   975     'ArmControlSet': [0x0, ['_ARM_DBGKD_CONTROL_SET']],
      976     'Amd64ControlSet': [0x0, ['_AMD64_DBGKD_CONTROL_SET']],
915 }],   977 }],
916   '_DBGKD_BREAKPOINTEX': [ 0x8, {   978   '_DBGKD_BREAKPOINTEX': [ 0x8, {
917     'BreakPointCount': [0x0, ['unsigned long']],   979     'BreakPointCount': [0x0, ['unsigned long']],
918     'ContinueStatus': [0x4, ['long']],   980     'ContinueStatus': [0x4, ['long']],
919 }],   981 }],
920   '_DBGKD_CONTINUE': [ 0x4, {   982   '_DBGKD_CONTINUE': [ 0x4, {
921     'ContinueStatus': [0x0, ['long']],   983     'ContinueStatus': [0x0, ['long']],
922 }],   984 }],
923   '_DBGKD_CONTINUE2': [ 0x20, {   985   '_DBGKD_CONTINUE2': [ 0x20, {
924     'ContinueStatus': [0x0, ['long']],   986     'ContinueStatus': [0x0, ['long']],
925     'AnyControlSet': [0x4, ['_DBGKD_ANY_CONTROL_SET']],   987     'AnyControlSet': [0x4, ['_DBGKD_ANY_CONTROL_SET']],
926     'ControlSet': [0x4, ['_X86_DBGKD_CONTROL_SET']],   988     'ControlSet': [0x4, ['_X86_DBGKD_CONTROL_SET']],
927 }],   989 }],
928   '_DBGKD_FILL_MEMORY': [ 0x10, {   990   '_DBGKD_FILL_MEMORY': [ 0x10, {
929     'Address': [0x0, ['unsigned long long']],   991     'Address': [0x0, ['unsigned long long']],
930     'Length': [0x8, ['unsigned long']],   992     'Length': [0x8, ['unsigned long']],
931     'Flags': [0xc, ['unsigned short']],   993     'Flags': [0xc, ['unsigned short']],
932     'PatternLength': [0xe, ['unsigned short']],   994     'PatternLength': [0xe, ['unsigned short']],
933 }],   995 }],
934   '_DBGKD_GET_CONTEXT': [ 0x4, {   996   '_DBGKD_GET_CONTEXT': [ 0x4, {
935     'Unused': [0x0, ['unsigned long']],   997     'Unused': [0x0, ['unsigned long']],
936 }],   998 }],
937   '_DBGKD_GET_INTERNAL_BREAKPOINT32': [ 0x1c, {   999   '_DBGKD_GET_INTERNAL_BREAKPOINT32': [ 0x1c, {
938     'BreakpointAddress': [0x0, ['unsigned long']],   1000     'BreakpointAddress': [0x0, ['unsigned long']],
939     'Flags': [0x4, ['unsigned long']],   1001     'Flags': [0x4, ['unsigned long']],
940     'Calls': [0x8, ['unsigned long']],   1002     'Calls': [0x8, ['unsigned long']],
941     'MaxCallsPerPeriod': [0xc, ['unsigned long']],   1003     'MaxCallsPerPeriod': [0xc, ['unsigned long']],
942     'MinInstructions': [0x10, ['unsigned long']],   1004     'MinInstructions': [0x10, ['unsigned long']],
943     'MaxInstructions': [0x14, ['unsigned long']],   1005     'MaxInstructions': [0x14, ['unsigned long']],
944     'TotalInstructions': [0x18, ['unsigned long']],   1006     'TotalInstructions': [0x18, ['unsigned long']],
945 }],   1007 }],
946   '_DBGKD_GET_INTERNAL_BREAKPOINT64': [ 0x20, {   1008   '_DBGKD_GET_INTERNAL_BREAKPOINT64': [ 0x20, {
947     'BreakpointAddress': [0x0, ['unsigned long long']],   1009     'BreakpointAddress': [0x0, ['unsigned long long']],
948     'Flags': [0x8, ['unsigned long']],   1010     'Flags': [0x8, ['unsigned long']],
949     'Calls': [0xc, ['unsigned long']],   1011     'Calls': [0xc, ['unsigned long']],
950     'MaxCallsPerPeriod': [0x10, ['unsigned long']],   1012     'MaxCallsPerPeriod': [0x10, ['unsigned long']],
951     'MinInstructions': [0x14, ['unsigned long']],   1013     'MinInstructions': [0x14, ['unsigned long']],
952     'MaxInstructions': [0x18, ['unsigned long']],   1014     'MaxInstructions': [0x18, ['unsigned long']],
953     'TotalInstructions': [0x1c, ['unsigned long']],   1015     'TotalInstructions': [0x1c, ['unsigned long']],
954 }],   1016 }],
955   '_DBGKD_GET_SET_BUS_DATA': [ 0x14, {   1017   '_DBGKD_GET_SET_BUS_DATA': [ 0x14, {
956     'BusDataType': [0x0, ['unsigned long']],   1018     'BusDataType': [0x0, ['unsigned long']],
957     'BusNumber': [0x4, ['unsigned long']],   1019     'BusNumber': [0x4, ['unsigned long']],
958     'SlotNumber': [0x8, ['unsigned long']],   1020     'SlotNumber': [0x8, ['unsigned long']],
959     'Offset': [0xc, ['unsigned long']],   1021     'Offset': [0xc, ['unsigned long']],
960     'Length': [0x10, ['unsigned long']],   1022     'Length': [0x10, ['unsigned long']],
961 }],   1023 }],
962   '_DBGKD_GET_VERSION32': [ 0x28, {   1024   '_DBGKD_GET_VERSION32': [ 0x28, {
963     'MajorVersion': [0x0, ['unsigned short']],   1025     'MajorVersion': [0x0, ['unsigned short']],
964     'MinorVersion': [0x2, ['unsigned short']],   1026     'MinorVersion': [0x2, ['unsigned short']],
965     'ProtocolVersion': [0x4, ['unsigned short']],   1027     'ProtocolVersion': [0x4, ['unsigned short']],
966     'Flags': [0x6, ['unsigned short']],   1028     'Flags': [0x6, ['unsigned short']],
967     'KernBase': [0x8, ['unsigned long']],   1029     'KernBase': [0x8, ['unsigned long']],
968     'PsLoadedModuleList': [0xc, ['unsigned long']],   1030     'PsLoadedModuleList': [0xc, ['unsigned long']],
969     'MachineType': [0x10, ['unsigned short']],   1031     'MachineType': [0x10, ['unsigned short']],
970     'ThCallbackStack': [0x12, ['unsigned short']],   1032     'ThCallbackStack': [0x12, ['unsigned short']],
971     'NextCallback': [0x14, ['unsigned short']],   1033     'NextCallback': [0x14, ['unsigned short']],
972     'FramePointer': [0x16, ['unsigned short']],   1034     'FramePointer': [0x16, ['unsigned short']],
973     'KiCallUserMode': [0x18, ['unsigned long']],   1035     'KiCallUserMode': [0x18, ['unsigned long']],
974     'KeUserCallbackDispatcher': [0x1c, ['unsigned long']],   1036     'KeUserCallbackDispatcher': [0x1c, ['unsigned long']],
975     'BreakpointWithStatus': [0x20, ['unsigned long']],   1037     'BreakpointWithStatus': [0x20, ['unsigned long']],
976     'DebuggerDataList': [0x24, ['unsigned long']],   1038     'DebuggerDataList': [0x24, ['unsigned long']],
977 }],   1039 }],
978   '_DBGKD_GET_VERSION64': [ 0x28, {   1040   '_DBGKD_GET_VERSION64': [ 0x28, {
979     'MajorVersion': [0x0, ['unsigned short']],   1041     'MajorVersion': [0x0, ['unsigned short']],
980     'MinorVersion': [0x2, ['unsigned short']],   1042     'MinorVersion': [0x2, ['unsigned short']],
981     'ProtocolVersion': [0x4, ['unsigned char']],   1043     'ProtocolVersion': [0x4, ['unsigned char']],
982     'KdSecondaryVersion': [0x5, ['unsigned char']],   1044     'KdSecondaryVersion': [0x5, ['unsigned char']],
983     'Flags': [0x6, ['unsigned short']],   1045     'Flags': [0x6, ['unsigned short']],
984     'MachineType': [0x8, ['unsigned short']],   1046     'MachineType': [0x8, ['unsigned short']],
985     'MaxPacketType': [0xa, ['unsigned char']],   1047     'MaxPacketType': [0xa, ['unsigned char']],
986     'MaxStateChange': [0xb, ['unsigned char']],   1048     'MaxStateChange': [0xb, ['unsigned char']],
987     'MaxManipulate': [0xc, ['unsigned char']],   1049     'MaxManipulate': [0xc, ['unsigned char']],
988     'Simulation': [0xd, ['unsigned char']],   1050     'Simulation': [0xd, ['unsigned char']],
989     'Unused': [0xe, ['array', 1, ['unsigned short']]],   1051     'Unused': [0xe, ['array', 1, ['unsigned short']]],
990     'KernBase': [0x10, ['unsigned long long']],   1052     'KernBase': [0x10, ['unsigned long long']],
991     'PsLoadedModuleList': [0x18, ['unsigned long long']],   1053     'PsLoadedModuleList': [0x18, ['unsigned long long']],
992     'DebuggerDataList': [0x20, ['unsigned long long']],   1054     'DebuggerDataList': [0x20, ['unsigned long long']],
993 }],   1055 }],
994   '_DBGKD_LOAD_SYMBOLS32': [ 0x18, {   1056   '_DBGKD_LOAD_SYMBOLS32': [ 0x18, {
995     'PathNameLength': [0x0, ['unsigned long']],   1057     'PathNameLength': [0x0, ['unsigned long']],
996     'BaseOfDll': [0x4, ['unsigned long']],   1058     'BaseOfDll': [0x4, ['unsigned long']],
997     'ProcessId': [0x8, ['unsigned long']],   1059     'ProcessId': [0x8, ['unsigned long']],
998     'CheckSum': [0xc, ['unsigned long']],   1060     'CheckSum': [0xc, ['unsigned long']],
999     'SizeOfImage': [0x10, ['unsigned long']],   1061     'SizeOfImage': [0x10, ['unsigned long']],
1000     'UnloadSymbols': [0x14, ['unsigned char']],   1062     'UnloadSymbols': [0x14, ['unsigned char']],
1001 }],   1063 }],
1002   '_DBGKD_LOAD_SYMBOLS64': [ 0x28, {   1064   '_DBGKD_LOAD_SYMBOLS64': [ 0x28, {
1003     'PathNameLength': [0x0, ['unsigned long']],   1065     'PathNameLength': [0x0, ['unsigned long']],
1004     'BaseOfDll': [0x8, ['unsigned long long']],   1066     'BaseOfDll': [0x8, ['unsigned long long']],
1005     'ProcessId': [0x10, ['unsigned long long']],   1067     'ProcessId': [0x10, ['unsigned long long']],
1006     'CheckSum': [0x18, ['unsigned long']],   1068     'CheckSum': [0x18, ['unsigned long']],
1007     'SizeOfImage': [0x1c, ['unsigned long']],   1069     'SizeOfImage': [0x1c, ['unsigned long']],
1008     'UnloadSymbols': [0x20, ['unsigned char']],   1070     'UnloadSymbols': [0x20, ['unsigned char']],
1009 }],   1071 }],
1010   '_DBGKD_MANIPULATE_STATE32': [ 0x34, {   1072   '_DBGKD_MANIPULATE_STATE32': [ 0x34, {
1011     'ApiNumber': [0x0, ['unsigned long']],   1073     'ApiNumber': [0x0, ['unsigned long']],
1012     'ProcessorLevel': [0x4, ['unsigned short']],   1074     'ProcessorLevel': [0x4, ['unsigned short']],
1013     'Processor': [0x6, ['unsigned short']],   1075     'Processor': [0x6, ['unsigned short']],
1014     'ReturnStatus': [0x8, ['long']],   1076     'ReturnStatus': [0x8, ['long']],
1015     'u': [0xc, ['unnamed_197f704a16143ae0721889e922549464']],   1077     'u': [0xc, ['unnamed_197f704a16143ae0721889e922549464']],
1016 }],   1078 }],
1017   '_DBGKD_MANIPULATE_STATE64': [ 0x38, {   1079   '_DBGKD_MANIPULATE_STATE64': [ 0x38, {
1018     'ApiNumber': [0x0, ['unsigned long']],   1080     'ApiNumber': [0x0, ['unsigned long']],
1019     'ProcessorLevel': [0x4, ['unsigned short']],   1081     'ProcessorLevel': [0x4, ['unsigned short']],
1020     'Processor': [0x6, ['unsigned short']],   1082     'Processor': [0x6, ['unsigned short']],
1021     'ReturnStatus': [0x8, ['long']],   1083     'ReturnStatus': [0x8, ['long']],
1022     'u': [0x10, ['unnamed_ab601e714629cddfbff87636c05c7a03']],   1084     'u': [0x10, ['unnamed_ab601e714629cddfbff87636c05c7a03']],
1023 }],   1085 }],
1024   '_DBGKD_QUERY_MEMORY': [ 0x18, {   1086   '_DBGKD_QUERY_MEMORY': [ 0x18, {
1025     'Address': [0x0, ['unsigned long long']],   1087     'Address': [0x0, ['unsigned long long']],
1026     'Reserved': [0x8, ['unsigned long long']],   1088     'Reserved': [0x8, ['unsigned long long']],
1027     'AddressSpace': [0x10, ['unsigned long']],   1089     'AddressSpace': [0x10, ['unsigned long']],
1028     'Flags': [0x14, ['unsigned long']],   1090     'Flags': [0x14, ['unsigned long']],
1029 }],   1091 }],
1030   '_DBGKD_QUERY_SPECIAL_CALLS': [ 0x4, {   1092   '_DBGKD_QUERY_SPECIAL_CALLS': [ 0x4, {
1031     'NumberOfSpecialCalls': [0x0, ['unsigned long']],   1093     'NumberOfSpecialCalls': [0x0, ['unsigned long']],
1032 }],   1094 }],
1033   '_DBGKD_READ_MEMORY32': [ 0xc, {   1095   '_DBGKD_READ_MEMORY32': [ 0xc, {
1034     'TargetBaseAddress': [0x0, ['unsigned long']],   1096     'TargetBaseAddress': [0x0, ['unsigned long']],
1035     'TransferCount': [0x4, ['unsigned long']],   1097     'TransferCount': [0x4, ['unsigned long']],
1036     'ActualBytesRead': [0x8, ['unsigned long']],   1098     'ActualBytesRead': [0x8, ['unsigned long']],
1037 }],   1099 }],
1038   '_DBGKD_READ_MEMORY64': [ 0x10, {   1100   '_DBGKD_READ_MEMORY64': [ 0x10, {
1039     'TargetBaseAddress': [0x0, ['unsigned long long']],   1101     'TargetBaseAddress': [0x0, ['unsigned long long']],
1040     'TransferCount': [0x8, ['unsigned long']],   1102     'TransferCount': [0x8, ['unsigned long']],
1041     'ActualBytesRead': [0xc, ['unsigned long']],   1103     'ActualBytesRead': [0xc, ['unsigned long']],
1042 }],   1104 }],
1043   '_DBGKD_READ_WRITE_IO32': [ 0xc, {   1105   '_DBGKD_READ_WRITE_IO32': [ 0xc, {
1044     'DataSize': [0x0, ['unsigned long']],   1106     'DataSize': [0x0, ['unsigned long']],
1045     'IoAddress': [0x4, ['unsigned long']],   1107     'IoAddress': [0x4, ['unsigned long']],
1046     'DataValue': [0x8, ['unsigned long']],   1108     'DataValue': [0x8, ['unsigned long']],
1047 }],   1109 }],
1048   '_DBGKD_READ_WRITE_IO64': [ 0x10, {   1110   '_DBGKD_READ_WRITE_IO64': [ 0x10, {
1049     'IoAddress': [0x0, ['unsigned long long']],   1111     'IoAddress': [0x0, ['unsigned long long']],
1050     'DataSize': [0x8, ['unsigned long']],   1112     'DataSize': [0x8, ['unsigned long']],
1051     'DataValue': [0xc, ['unsigned long']],   1113     'DataValue': [0xc, ['unsigned long']],
1052 }],   1114 }],
1053   '_DBGKD_READ_WRITE_IO_EXTENDED32': [ 0x18, {   1115   '_DBGKD_READ_WRITE_IO_EXTENDED32': [ 0x18, {
1054     'DataSize': [0x0, ['unsigned long']],   1116     'DataSize': [0x0, ['unsigned long']],
1055     'InterfaceType': [0x4, ['unsigned long']],   1117     'InterfaceType': [0x4, ['unsigned long']],
1056     'BusNumber': [0x8, ['unsigned long']],   1118     'BusNumber': [0x8, ['unsigned long']],
1057     'AddressSpace': [0xc, ['unsigned long']],   1119     'AddressSpace': [0xc, ['unsigned long']],
1058     'IoAddress': [0x10, ['unsigned long']],   1120     'IoAddress': [0x10, ['unsigned long']],
1059     'DataValue': [0x14, ['unsigned long']],   1121     'DataValue': [0x14, ['unsigned long']],
1060 }],   1122 }],
1061   '_DBGKD_READ_WRITE_IO_EXTENDED64': [ 0x20, {   1123   '_DBGKD_READ_WRITE_IO_EXTENDED64': [ 0x20, {
1062     'DataSize': [0x0, ['unsigned long']],   1124     'DataSize': [0x0, ['unsigned long']],
1063     'InterfaceType': [0x4, ['unsigned long']],   1125     'InterfaceType': [0x4, ['unsigned long']],
1064     'BusNumber': [0x8, ['unsigned long']],   1126     'BusNumber': [0x8, ['unsigned long']],
1065     'AddressSpace': [0xc, ['unsigned long']],   1127     'AddressSpace': [0xc, ['unsigned long']],
1066     'IoAddress': [0x10, ['unsigned long long']],   1128     'IoAddress': [0x10, ['unsigned long long']],
1067     'DataValue': [0x18, ['unsigned long']],   1129     'DataValue': [0x18, ['unsigned long']],
1068 }],   1130 }],
1069   '_DBGKD_READ_WRITE_MSR': [ 0xc, {   1131   '_DBGKD_READ_WRITE_MSR': [ 0xc, {
1070     'Msr': [0x0, ['unsigned long']],   1132     'Msr': [0x0, ['unsigned long']],
1071     'DataValueLow': [0x4, ['unsigned long']],   1133     'DataValueLow': [0x4, ['unsigned long']],
1072     'DataValueHigh': [0x8, ['unsigned long']],   1134     'DataValueHigh': [0x8, ['unsigned long']],
1073 }],   1135 }],
1074   '_DBGKD_RESTORE_BREAKPOINT': [ 0x4, {   1136   '_DBGKD_RESTORE_BREAKPOINT': [ 0x4, {
1075     'BreakPointHandle': [0x0, ['unsigned long']],   1137     'BreakPointHandle': [0x0, ['unsigned long']],
1076 }],   1138 }],
1077   '_DBGKD_SEARCH_MEMORY': [ 0x18, {   1139   '_DBGKD_SEARCH_MEMORY': [ 0x18, {
1078     'FoundAddress': [0x0, ['unsigned long long']],   1140     'FoundAddress': [0x0, ['unsigned long long']],
1079     'SearchAddress': [0x0, ['unsigned long long']],   1141     'SearchAddress': [0x0, ['unsigned long long']],
1080     'SearchLength': [0x8, ['unsigned long long']],   1142     'SearchLength': [0x8, ['unsigned long long']],
1081     'PatternLength': [0x10, ['unsigned long']],   1143     'PatternLength': [0x10, ['unsigned long']],
1082 }],   1144 }],
1083   '_DBGKD_SET_CONTEXT': [ 0x4, {   1145   '_DBGKD_SET_CONTEXT': [ 0x4, {
1084     'ContextFlags': [0x0, ['unsigned long']],   1146     'ContextFlags': [0x0, ['unsigned long']],
1085 }],   1147 }],
1086   '_DBGKD_SET_INTERNAL_BREAKPOINT32': [ 0x8, {   1148   '_DBGKD_SET_INTERNAL_BREAKPOINT32': [ 0x8, {
1087     'BreakpointAddress': [0x0, ['unsigned long']],   1149     'BreakpointAddress': [0x0, ['unsigned long']],
1088     'Flags': [0x4, ['unsigned long']],   1150     'Flags': [0x4, ['unsigned long']],
1089 }],   1151 }],
1090   '_DBGKD_SET_INTERNAL_BREAKPOINT64': [ 0x10, {   1152   '_DBGKD_SET_INTERNAL_BREAKPOINT64': [ 0x10, {
1091     'BreakpointAddress': [0x0, ['unsigned long long']],   1153     'BreakpointAddress': [0x0, ['unsigned long long']],
1092     'Flags': [0x8, ['unsigned long']],   1154     'Flags': [0x8, ['unsigned long']],
1093 }],   1155 }],
1094   '_DBGKD_SET_SPECIAL_CALL32': [ 0x4, {   1156   '_DBGKD_SET_SPECIAL_CALL32': [ 0x4, {
1095     'SpecialCall': [0x0, ['unsigned long']],   1157     'SpecialCall': [0x0, ['unsigned long']],
1096 }],   1158 }],
1097   '_DBGKD_SET_SPECIAL_CALL64': [ 0x8, {   1159   '_DBGKD_SET_SPECIAL_CALL64': [ 0x8, {
1098     'SpecialCall': [0x0, ['unsigned long long']],   1160     'SpecialCall': [0x0, ['unsigned long long']],
1099 }],   1161 }],
1100   '_DBGKD_SWITCH_PARTITION': [ 0x4, {   1162   '_DBGKD_SWITCH_PARTITION': [ 0x4, {
1101     'Partition': [0x0, ['unsigned long']],   1163     'Partition': [0x0, ['unsigned long']],
1102 }],   1164 }],
1103   '_DBGKD_WRITE_BREAKPOINT32': [ 0x8, {   1165   '_DBGKD_WRITE_BREAKPOINT32': [ 0x8, {
1104     'BreakPointAddress': [0x0, ['unsigned long']],   1166     'BreakPointAddress': [0x0, ['unsigned long']],
1105     'BreakPointHandle': [0x4, ['unsigned long']],   1167     'BreakPointHandle': [0x4, ['unsigned long']],
1106 }],   1168 }],
1107   '_DBGKD_WRITE_BREAKPOINT64': [ 0x10, {   1169   '_DBGKD_WRITE_BREAKPOINT64': [ 0x10, {
1108     'BreakPointAddress': [0x0, ['unsigned long long']],   1170     'BreakPointAddress': [0x0, ['unsigned long long']],
1109     'BreakPointHandle': [0x8, ['unsigned long']],   1171     'BreakPointHandle': [0x8, ['unsigned long']],
1110 }],   1172 }],
1111   '_DBGKD_WRITE_MEMORY32': [ 0xc, {   1173   '_DBGKD_WRITE_MEMORY32': [ 0xc, {
1112     'TargetBaseAddress': [0x0, ['unsigned long']],   1174     'TargetBaseAddress': [0x0, ['unsigned long']],
1113     'TransferCount': [0x4, ['unsigned long']],   1175     'TransferCount': [0x4, ['unsigned long']],
1114     'ActualBytesWritten': [0x8, ['unsigned long']],   1176     'ActualBytesWritten': [0x8, ['unsigned long']],
1115 }],   1177 }],
1116   '_DBGKD_WRITE_MEMORY64': [ 0x10, {   1178   '_DBGKD_WRITE_MEMORY64': [ 0x10, {
1117     'TargetBaseAddress': [0x0, ['unsigned long long']],   1179     'TargetBaseAddress': [0x0, ['unsigned long long']],
1118     'TransferCount': [0x8, ['unsigned long']],   1180     'TransferCount': [0x8, ['unsigned long']],
1119     'ActualBytesWritten': [0xc, ['unsigned long']],   1181     'ActualBytesWritten': [0xc, ['unsigned long']],
1120 }],   1182 }],
1121   '_DBGKM_EXCEPTION32': [ 0x54, {   1183   '_DBGKM_EXCEPTION32': [ 0x54, {
1122     'ExceptionRecord': [0x0, ['_EXCEPTION_RECORD32']],   1184     'ExceptionRecord': [0x0, ['_EXCEPTION_RECORD32']],
1123     'FirstChance': [0x50, ['unsigned long']],   1185     'FirstChance': [0x50, ['unsigned long']],
1124 }],   1186 }],
1125   '_DBGKM_EXCEPTION64': [ 0xa0, {   1187   '_DBGKM_EXCEPTION64': [ 0xa0, {
1126     'ExceptionRecord': [0x0, ['_EXCEPTION_RECORD64']],   1188     'ExceptionRecord': [0x0, ['_EXCEPTION_RECORD64']],
1127     'FirstChance': [0x98, ['unsigned long']],   1189     'FirstChance': [0x98, ['unsigned long']],
1128 }],   1190 }],
1129   '_DEFERRED_WRITE': [ 0x28, {   1191   '_DEFERRED_WRITE': [ 0x24, {
1130     'NodeTypeCode': [0x0, ['short']],   1192     'NodeTypeCode': [0x0, ['short']],
1131     'NodeByteSize': [0x2, ['short']],   1193     'NodeByteSize': [0x2, ['short']],
1132     'FileObject': [0x4, ['pointer', ['_FILE_OBJECT']]],   1194     'FileObject': [0x4, ['pointer', ['_FILE_OBJECT']]],
1133     'BytesToWrite': [0x8, ['unsigned long']],   1195     'BytesToWrite': [0x8, ['unsigned long']],
1134     'DeferredWriteLinks': [0xc, ['_LIST_ENTRY']],   1196     'DeferredWriteLinks': [0xc, ['_LIST_ENTRY']],
1135     'Event': [0x14, ['pointer', ['_KEVENT']]],   1197     'Event': [0x14, ['pointer', ['_KEVENT']]],
1136     'PostRoutine': [0x18, ['pointer', ['void']]],   1198     'PostRoutine': [0x18, ['pointer', ['void']]],
1137     'Context1': [0x1c, ['pointer', ['void']]],   1199     'Context1': [0x1c, ['pointer', ['void']]],
1138     'Context2': [0x20, ['pointer', ['void']]],   1200     'Context2': [0x20, ['pointer', ['void']]],
1139     'LimitModifiedPages': [0x24, ['unsigned char']],      
1140 }],   1201 }],
1141   '_DESCRIPTOR': [ 0x8, {   1202   '_DESCRIPTOR': [ 0x8, {
1142     'Pad': [0x0, ['unsigned short']],   1203     'Pad': [0x0, ['unsigned short']],
1143     'Limit': [0x2, ['unsigned short']],   1204     'Limit': [0x2, ['unsigned short']],
1144     'Base': [0x4, ['unsigned long']],   1205     'Base': [0x4, ['unsigned long']],
1145 }],   1206 }],
1146   '_DEVICE_CAPABILITIES': [ 0x40, {   1207   '_DEVICE_CAPABILITIES': [ 0x40, {
1147     'Size': [0x0, ['unsigned short']],   1208     'Size': [0x0, ['unsigned short']],
1148     'Version': [0x2, ['unsigned short']],   1209     'Version': [0x2, ['unsigned short']],
1149     'Address': [0x8, ['unsigned long']],   1210     'Address': [0x8, ['unsigned long']],
1150     'UINumber': [0xc, ['unsigned long']],   1211     'UINumber': [0xc, ['unsigned long']],
1151     'D1Latency': [0x34, ['unsigned long']],   1212     'D1Latency': [0x34, ['unsigned long']],
1152     'D2Latency': [0x38, ['unsigned long']],   1213     'D2Latency': [0x38, ['unsigned long']],
1153     'D3Latency': [0x3c, ['unsigned long']],   1214     'D3Latency': [0x3c, ['unsigned long']],
1154 }],   1215 }],
1155   '_DEVICE_FLAGS': [ 0x4, {   1216   '_DEVICE_FLAGS': [ 0x4, {
1156 }],   1217 }],
1157   '_DEVICE_MAP': [ 0x34, {   1218   '_DEVICE_MAP': [ 0x34, {
1158     'DosDevicesDirectory': [0x0, ['pointer', ['_OBJECT_DIRECTORY']]],   1219     'DosDevicesDirectory': [0x0, ['pointer', ['_OBJECT_DIRECTORY']]],
1159     'GlobalDosDevicesDirectory': [0x4, ['pointer', ['_OBJECT_DIRECTORY']]],   1220     'GlobalDosDevicesDirectory': [0x4, ['pointer', ['_OBJECT_DIRECTORY']]],
1160     'DosDevicesDirectoryHandle': [0x8, ['pointer', ['void']]],   1221     'DosDevicesDirectoryHandle': [0x8, ['pointer', ['void']]],
1161     'ReferenceCount': [0xc, ['unsigned long']],   1222     'ReferenceCount': [0xc, ['unsigned long']],
1162     'DriveMap': [0x10, ['unsigned long']],   1223     'DriveMap': [0x10, ['unsigned long']],
1163     'DriveType': [0x14, ['array', 32, ['unsigned char']]],   1224     'DriveType': [0x14, ['array', 32, ['unsigned char']]],
1164 }],   1225 }],
1165   '_DEVICE_NODE': [ 0x158, {   1226   '_DEVICE_NODE': [ 0x188, {
1166     'Sibling': [0x0, ['pointer', ['_DEVICE_NODE']]],   1227     'Sibling': [0x0, ['pointer', ['_DEVICE_NODE']]],
1167     'Child': [0x4, ['pointer', ['_DEVICE_NODE']]],   1228     'Child': [0x4, ['pointer', ['_DEVICE_NODE']]],
1168     'Parent': [0x8, ['pointer', ['_DEVICE_NODE']]],   1229     'Parent': [0x8, ['pointer', ['_DEVICE_NODE']]],
1169     'LastChild': [0xc, ['pointer', ['_DEVICE_NODE']]],   1230     'LastChild': [0xc, ['pointer', ['_DEVICE_NODE']]],
1170     'Level': [0x10, ['unsigned long']],   1231     'PhysicalDeviceObject': [0x10, ['pointer', ['_DEVICE_OBJECT']]],
1171     'Notify': [0x14, ['_PO_DEVICE_NOTIFY']],   1232     'InstancePath': [0x14, ['_UNICODE_STRING']],
1172     'PoIrpManager': [0x38, ['_PO_IRP_MANAGER']],   1233     'ServiceName': [0x1c, ['_UNICODE_STRING']],
1173     'StateHistoryEntry': [0xa0, ['unsigned long']],   1234     'PendingIrp': [0x24, ['pointer', ['_IRP']]],
1174     'CompletionStatus': [0xa4, ['long']],   1235     'Level': [0x28, ['unsigned long']],
1175     'PendingIrp': [0xa8, ['pointer', ['_IRP']]],   1236     'Notify': [0x2c, ['_PO_DEVICE_NOTIFY']],
1176     'Flags': [0xac, ['unsigned long']],   1237     'PoIrpManager': [0x68, ['_PO_IRP_MANAGER']],
1177     'UserFlags': [0xb0, ['unsigned long']],   1238     'StateHistoryEntry': [0xd0, ['unsigned long']],
1178     'Problem': [0xb4, ['unsigned long']],   1239     'CompletionStatus': [0xd4, ['long']],
1179     'PhysicalDeviceObject': [0xb8, ['pointer', ['_DEVICE_OBJECT']]],   1240     'Flags': [0xd8, ['unsigned long']],
1180     'ResourceList': [0xbc, ['pointer', ['_CM_RESOURCE_LIST']]],   1241     'UserFlags': [0xdc, ['unsigned long']],
1181     'ResourceListTranslated': [0xc0, ['pointer', ['_CM_RESOURCE_LIST']]],   1242     'Problem': [0xe0, ['unsigned long']],
1182     'InstancePath': [0xc4, ['_UNICODE_STRING']],   1243     'ResourceList': [0xe4, ['pointer', ['_CM_RESOURCE_LIST']]],
1183     'ServiceName': [0xcc, ['_UNICODE_STRING']],   1244     'ResourceListTranslated': [0xe8, ['pointer', ['_CM_RESOURCE_LIST']]],
1184     'DuplicatePDO': [0xd4, ['pointer', ['_DEVICE_OBJECT']]],   1245     'DuplicatePDO': [0xec, ['pointer', ['_DEVICE_OBJECT']]],
1185     'ResourceRequirements': [0xd8, ['pointer', ['_IO_RESOURCE_REQUIREMENTS_LIST']]],   1246     'ResourceRequirements': [0xf0, ['pointer', ['_IO_RESOURCE_REQUIREMENTS_LIST']]],
1186     'BusNumber': [0xe0, ['unsigned long']],   1247     'BusNumber': [0xf8, ['unsigned long']],
1187     'ChildBusNumber': [0xe8, ['unsigned long']],   1248     'ChildBusNumber': [0x100, ['unsigned long']],
1188     'ChildBusTypeIndex': [0xec, ['unsigned short']],   1249     'ChildBusTypeIndex': [0x104, ['unsigned short']],
1189     'RemovalPolicy': [0xee, ['unsigned char']],   1250     'RemovalPolicy': [0x106, ['unsigned char']],
1190     'HardwareRemovalPolicy': [0xef, ['unsigned char']],   1251     'HardwareRemovalPolicy': [0x107, ['unsigned char']],
1191     'TargetDeviceNotify': [0xf0, ['_LIST_ENTRY']],   1252     'TargetDeviceNotify': [0x108, ['_LIST_ENTRY']],
1192     'DeviceArbiterList': [0xf8, ['_LIST_ENTRY']],   1253     'DeviceArbiterList': [0x110, ['_LIST_ENTRY']],
1193     'DeviceTranslatorList': [0x100, ['_LIST_ENTRY']],   1254     'DeviceTranslatorList': [0x118, ['_LIST_ENTRY']],
1194     'NoTranslatorMask': [0x108, ['unsigned short']],   1255     'NoTranslatorMask': [0x120, ['unsigned short']],
1195     'QueryTranslatorMask': [0x10a, ['unsigned short']],   1256     'QueryTranslatorMask': [0x122, ['unsigned short']],
1196     'NoArbiterMask': [0x10c, ['unsigned short']],   1257     'NoArbiterMask': [0x124, ['unsigned short']],
1197     'QueryArbiterMask': [0x10e, ['unsigned short']],   1258     'QueryArbiterMask': [0x126, ['unsigned short']],
1198     'OverUsed1': [0x110, ['unnamed_8473d52d8c3caead95fe5ff698584d3f']],   1259     'OverUsed1': [0x128, ['unnamed_8473d52d8c3caead95fe5ff698584d3f']],
1199     'OverUsed2': [0x114, ['unnamed_23a3a9c41d00a359f8b339bfbcb83cd9']],   1260     'OverUsed2': [0x12c, ['unnamed_23a3a9c41d00a359f8b339bfbcb83cd9']],
1200     'BootResources': [0x118, ['pointer', ['_CM_RESOURCE_LIST']]],   1261     'BootResources': [0x130, ['pointer', ['_CM_RESOURCE_LIST']]],
1201     'BootResourcesTranslated': [0x11c, ['pointer', ['_CM_RESOURCE_LIST']]],   1262     'BootResourcesTranslated': [0x134, ['pointer', ['_CM_RESOURCE_LIST']]],
1202     'CapabilityFlags': [0x120, ['unsigned long']],   1263     'CapabilityFlags': [0x138, ['unsigned long']],
1203     'DockInfo': [0x124, ['unnamed_9f554780fea0758590d31446dedb9448']],   1264     'DockInfo': [0x13c, ['unnamed_9f554780fea0758590d31446dedb9448']],
1204     'DisableableDepends': [0x134, ['unsigned long']],   1265     'DisableableDepends': [0x14c, ['unsigned long']],
1205     'PendedSetInterfaceState': [0x138, ['_LIST_ENTRY']],   1266     'PendedSetInterfaceState': [0x150, ['_LIST_ENTRY']],
1206     'LegacyBusListEntry': [0x140, ['_LIST_ENTRY']],   1267     'LegacyBusListEntry': [0x158, ['_LIST_ENTRY']],
1207     'DriverUnloadRetryCount': [0x148, ['unsigned long']],   1268     'DriverUnloadRetryCount': [0x160, ['unsigned long']],
1208     'PreviousParent': [0x14c, ['pointer', ['_DEVICE_NODE']]],   1269     'PreviousParent': [0x164, ['pointer', ['_DEVICE_NODE']]],
1209     'DeletedChildren': [0x150, ['unsigned long']],   1270     'DeletedChildren': [0x168, ['unsigned long']],
1210     'NumaNodeIndex': [0x154, ['unsigned long']],   1271     'NumaNodeIndex': [0x16c, ['unsigned long']],
      1272     'ContainerID': [0x170, ['_GUID']],
      1273     'OverrideFlags': [0x180, ['unsigned char']],
      1274     'RequiresUnloadedDriver': [0x181, ['unsigned char']],
      1275     'PendingEjectRelations': [0x184, ['pointer', ['_PENDING_RELATIONS_LIST_ENTRY']]],
1211 }],   1276 }],
1212   '_DEVICE_OBJECT': [ 0xb8, {   1277   '_DEVICE_OBJECT': [ 0xb8, {
1213     'Type': [0x0, ['short']],   1278     'Type': [0x0, ['short']],
1214     'Size': [0x2, ['unsigned short']],   1279     'Size': [0x2, ['unsigned short']],
1215     'ReferenceCount': [0x4, ['long']],   1280     'ReferenceCount': [0x4, ['long']],
1216     'DriverObject': [0x8, ['pointer', ['_DRIVER_OBJECT']]],   1281     'DriverObject': [0x8, ['pointer', ['_DRIVER_OBJECT']]],
1217     'NextDevice': [0xc, ['pointer', ['_DEVICE_OBJECT']]],   1282     'NextDevice': [0xc, ['pointer', ['_DEVICE_OBJECT']]],
1218     'AttachedDevice': [0x10, ['pointer', ['_DEVICE_OBJECT']]],   1283     'AttachedDevice': [0x10, ['pointer', ['_DEVICE_OBJECT']]],
1219     'CurrentIrp': [0x14, ['pointer', ['_IRP']]],   1284     'CurrentIrp': [0x14, ['pointer', ['_IRP']]],
1220     'Timer': [0x18, ['pointer', ['_IO_TIMER']]],   1285     'Timer': [0x18, ['pointer', ['_IO_TIMER']]],
1221     'Flags': [0x1c, ['unsigned long']],   1286     'Flags': [0x1c, ['unsigned long']],
1222     'Characteristics': [0x20, ['unsigned long']],   1287     'Characteristics': [0x20, ['unsigned long']],
1223     'Vpb': [0x24, ['pointer', ['_VPB']]],   1288     'Vpb': [0x24, ['pointer', ['_VPB']]],
1224     'DeviceExtension': [0x28, ['pointer', ['void']]],   1289     'DeviceExtension': [0x28, ['pointer', ['void']]],
1225     'DeviceType': [0x2c, ['unsigned long']],   1290     'DeviceType': [0x2c, ['unsigned long']],
1226     'StackSize': [0x30, ['unsigned char']],   1291     'StackSize': [0x30, ['unsigned char']],
1227     'Queue': [0x34, ['unnamed_f3ff1d8a16d954813e3cd56fbe6166d8']],   1292     'Queue': [0x34, ['unnamed_f3ff1d8a16d954813e3cd56fbe6166d8']],
1228     'AlignmentRequirement': [0x5c, ['unsigned long']],   1293     'AlignmentRequirement': [0x5c, ['unsigned long']],
1229     'DeviceQueue': [0x60, ['_KDEVICE_QUEUE']],   1294     'DeviceQueue': [0x60, ['_KDEVICE_QUEUE']],
1230     'Dpc': [0x74, ['_KDPC']],   1295     'Dpc': [0x74, ['_KDPC']],
1231     'ActiveThreadCount': [0x94, ['unsigned long']],   1296     'ActiveThreadCount': [0x94, ['unsigned long']],
1232     'SecurityDescriptor': [0x98, ['pointer', ['void']]],   1297     'SecurityDescriptor': [0x98, ['pointer', ['void']]],
1233     'DeviceLock': [0x9c, ['_KEVENT']],   1298     'DeviceLock': [0x9c, ['_KEVENT']],
1234     'SectorSize': [0xac, ['unsigned short']],   1299     'SectorSize': [0xac, ['unsigned short']],
1235     'Spare1': [0xae, ['unsigned short']],   1300     'Spare1': [0xae, ['unsigned short']],
1236     'DeviceObjectExtension': [0xb0, ['pointer', ['_DEVOBJ_EXTENSION']]],   1301     'DeviceObjectExtension': [0xb0, ['pointer', ['_DEVOBJ_EXTENSION']]],
1237     'Reserved': [0xb4, ['pointer', ['void']]],   1302     'Reserved': [0xb4, ['pointer', ['void']]],
1238 }],   1303 }],
1239   '_DEVICE_OBJECT_POWER_EXTENSION': [ 0x60, {   1304   '_DEVICE_OBJECT_POWER_EXTENSION': [ 0x40, {
1240     'IdleCount': [0x0, ['unsigned long']],   1305     'IdleCount': [0x0, ['unsigned long']],
1241     'BusyCount': [0x4, ['unsigned long']],   1306     'BusyCount': [0x4, ['unsigned long']],
1242     'TotalBusyCount': [0x8, ['unsigned long']],   1307     'BusyReference': [0x8, ['unsigned long']],
1243     'ConservationIdleTime': [0xc, ['unsigned long']],   1308     'TotalBusyCount': [0xc, ['unsigned long']],
1244     'PerformanceIdleTime': [0x10, ['unsigned long']],   1309     'ConservationIdleTime': [0x10, ['unsigned long']],
1245     'DeviceObject': [0x14, ['pointer', ['_DEVICE_OBJECT']]],   1310     'PerformanceIdleTime': [0x14, ['unsigned long']],
1246     'IdleList': [0x18, ['_LIST_ENTRY']],   1311     'DeviceObject': [0x18, ['pointer', ['_DEVICE_OBJECT']]],
1247     'DeviceType': [0x20, ['unsigned char']],   1312     'IdleList': [0x1c, ['_LIST_ENTRY']],
1248     'NotifySourceList': [0x2c, ['_LIST_ENTRY']],   1313     'Volume': [0x30, ['_LIST_ENTRY']],
1249     'NotifyTargetList': [0x34, ['_LIST_ENTRY']],   1314     'Specific': [0x38, ['unnamed_35416915d9140c01cb0dc81b6efed53e']],
1250     'PowerChannelSummary': [0x3c, ['_POWER_CHANNEL_SUMMARY']],      
1251     'Volume': [0x50, ['_LIST_ENTRY']],      
1252     'Specific': [0x58, ['unnamed_35416915d9140c01cb0dc81b6efed53e']],      
1253 }],   1315 }],
1254   '_DEVICE_RELATIONS': [ 0x8, {   1316   '_DEVICE_RELATIONS': [ 0x8, {
1255     'Count': [0x0, ['unsigned long']],   1317     'Count': [0x0, ['unsigned long']],
1256     'Objects': [0x4, ['array', 1, ['pointer', ['_DEVICE_OBJECT']]]],   1318     'Objects': [0x4, ['array', 1, ['pointer', ['_DEVICE_OBJECT']]]],
1257 }],   1319 }],
1258   '_DEVOBJ_EXTENSION': [ 0x3c, {   1320   '_DEVOBJ_EXTENSION': [ 0x3c, {
1259     'Type': [0x0, ['short']],   1321     'Type': [0x0, ['short']],
1260     'Size': [0x2, ['unsigned short']],   1322     'Size': [0x2, ['unsigned short']],
1261     'DeviceObject': [0x4, ['pointer', ['_DEVICE_OBJECT']]],   1323     'DeviceObject': [0x4, ['pointer', ['_DEVICE_OBJECT']]],
1262     'PowerFlags': [0x8, ['unsigned long']],   1324     'PowerFlags': [0x8, ['unsigned long']],
1263     'Dope': [0xc, ['pointer', ['_DEVICE_OBJECT_POWER_EXTENSION']]],   1325     'Dope': [0xc, ['pointer', ['_DEVICE_OBJECT_POWER_EXTENSION']]],
1264     'ExtensionFlags': [0x10, ['unsigned long']],   1326     'ExtensionFlags': [0x10, ['unsigned long']],
1265     'DeviceNode': [0x14, ['pointer', ['void']]],   1327     'DeviceNode': [0x14, ['pointer', ['void']]],
1266     'AttachedTo': [0x18, ['pointer', ['_DEVICE_OBJECT']]],   1328     'AttachedTo': [0x18, ['pointer', ['_DEVICE_OBJECT']]],
1267     'StartIoCount': [0x1c, ['long']],   1329     'StartIoCount': [0x1c, ['long']],
1268     'StartIoKey': [0x20, ['long']],   1330     'StartIoKey': [0x20, ['long']],
1269     'StartIoFlags': [0x24, ['unsigned long']],   1331     'StartIoFlags': [0x24, ['unsigned long']],
1270     'Vpb': [0x28, ['pointer', ['_VPB']]],   1332     'Vpb': [0x28, ['pointer', ['_VPB']]],
1271     'DependentList': [0x2c, ['_LIST_ENTRY']],   1333     'DependentList': [0x2c, ['_LIST_ENTRY']],
1272     'ProviderList': [0x34, ['_LIST_ENTRY']],   1334     'ProviderList': [0x34, ['_LIST_ENTRY']],
1273 }],   1335 }],
1274   '_DEVPROPKEY': [ 0x14, {   1336   '_DIAGNOSTIC_BUFFER': [ 0x18, {
1275     'fmtid': [0x0, ['_GUID']],   1337     'Size': [0x0, ['unsigned long']],
1276     'pid': [0x10, ['unsigned long']],   1338     'ProcessImageNameOffset': [0x8, ['unsigned long']],
      1339     'DeviceDescriptionOffset': [0x8, ['unsigned long']],
      1340     'ProcessId': [0xc, ['unsigned long']],
      1341     'DevicePathOffset': [0xc, ['unsigned long']],
      1342     'ServiceTag': [0x10, ['unsigned long']],
      1343     'ReasonOffset': [0x14, ['unsigned long']],
      1344 }],
      1345   '_DIAGNOSTIC_CONTEXT': [ 0x10, {
      1346     'Process': [0x4, ['pointer', ['_EPROCESS']]],
      1347     'DeviceObject': [0x4, ['pointer', ['_DEVICE_OBJECT']]],
      1348     'ServiceTag': [0x8, ['unsigned long']],
      1349     'ReasonSize': [0xc, ['unsigned long']],
1277 }],   1350 }],
1278   '_DISPATCHER_HEADER': [ 0x10, {   1351   '_DISPATCHER_HEADER': [ 0x10, {
1279     'Type': [0x0, ['unsigned char']],   1352     'Type': [0x0, ['unsigned char']],
1280     'Lock': [0x0, ['long']],   1353     'Lock': [0x0, ['long']],
1281     'Abandoned': [0x1, ['unsigned char']],   1354     'Abandoned': [0x1, ['unsigned char']],
1282     'NpxIrql': [0x1, ['unsigned char']],      
1283     'Signalling': [0x1, ['unsigned char']],   1355     'Signalling': [0x1, ['unsigned char']],
1284     'Absolute': [0x1, ['unsigned char']],   1356     'TimerControlFlags': [0x1, ['unsigned char']],
1285     'Hand': [0x2, ['unsigned char']],   1357     'Hand': [0x2, ['unsigned char']],
      1358     'ThreadControlFlags': [0x2, ['unsigned char']],
1286     'Size': [0x2, ['unsigned char']],   1359     'Size': [0x2, ['unsigned char']],
1287     'DpcActive': [0x3, ['unsigned char']],   1360     'TimerMiscFlags': [0x3, ['unsigned char']],
1288     'DebugActive': [0x3, ['unsigned char']],   1361     'DebugActive': [0x3, ['unsigned char']],
1289     'Inserted': [0x3, ['unsigned char']],   1362     'DpcActive': [0x3, ['unsigned char']],
1290     'SignalState': [0x4, ['long']],   1363     'SignalState': [0x4, ['long']],
1291     'WaitListHead': [0x8, ['_LIST_ENTRY']],   1364     'WaitListHead': [0x8, ['_LIST_ENTRY']],
1292 }],   1365 }],
1293   '_DRIVER_EXTENSION': [ 0x1c, {   1366   '_DRIVER_EXTENSION': [ 0x1c, {
1294     'DriverObject': [0x0, ['pointer', ['_DRIVER_OBJECT']]],   1367     'DriverObject': [0x0, ['pointer', ['_DRIVER_OBJECT']]],
1295     'AddDevice': [0x4, ['pointer', ['void']]],   1368     'AddDevice': [0x4, ['pointer', ['void']]],
1296     'Count': [0x8, ['unsigned long']],   1369     'Count': [0x8, ['unsigned long']],
1297     'ServiceKeyName': [0xc, ['_UNICODE_STRING']],   1370     'ServiceKeyName': [0xc, ['_UNICODE_STRING']],
1298     'ClientDriverExtension': [0x14, ['pointer', ['_IO_CLIENT_EXTENSION']]],   1371     'ClientDriverExtension': [0x14, ['pointer', ['_IO_CLIENT_EXTENSION']]],
1299     'FsFilterCallbacks': [0x18, ['pointer', ['_FS_FILTER_CALLBACKS']]],   1372     'FsFilterCallbacks': [0x18, ['pointer', ['_FS_FILTER_CALLBACKS']]],
1300 }],   1373 }],
1301   '_DRIVER_OBJECT': [ 0xa8, {   1374   '_DRIVER_OBJECT': [ 0xa8, {
1302     'Type': [0x0, ['short']],   1375     'Type': [0x0, ['short']],
1303     'Size': [0x2, ['short']],   1376     'Size': [0x2, ['short']],
1304     'DeviceObject': [0x4, ['pointer', ['_DEVICE_OBJECT']]],   1377     'DeviceObject': [0x4, ['pointer', ['_DEVICE_OBJECT']]],
1305     'Flags': [0x8, ['unsigned long']],   1378     'Flags': [0x8, ['unsigned long']],
1306     'DriverStart': [0xc, ['pointer', ['void']]],   1379     'DriverStart': [0xc, ['pointer', ['void']]],
1307     'DriverSize': [0x10, ['unsigned long']],   1380     'DriverSize': [0x10, ['unsigned long']],
1308     'DriverSection': [0x14, ['pointer', ['void']]],   1381     'DriverSection': [0x14, ['pointer', ['void']]],
1309     'DriverExtension': [0x18, ['pointer', ['_DRIVER_EXTENSION']]],   1382     'DriverExtension': [0x18, ['pointer', ['_DRIVER_EXTENSION']]],
1310     'DriverName': [0x1c, ['_UNICODE_STRING']],   1383     'DriverName': [0x1c, ['_UNICODE_STRING']],
1311     'HardwareDatabase': [0x24, ['pointer', ['_UNICODE_STRING']]],   1384     'HardwareDatabase': [0x24, ['pointer', ['_UNICODE_STRING']]],
1312     'FastIoDispatch': [0x28, ['pointer', ['_FAST_IO_DISPATCH']]],   1385     'FastIoDispatch': [0x28, ['pointer', ['_FAST_IO_DISPATCH']]],
1313     'DriverInit': [0x2c, ['pointer', ['void']]],   1386     'DriverInit': [0x2c, ['pointer', ['void']]],
1314     'DriverStartIo': [0x30, ['pointer', ['void']]],   1387     'DriverStartIo': [0x30, ['pointer', ['void']]],
1315     'DriverUnload': [0x34, ['pointer', ['void']]],   1388     'DriverUnload': [0x34, ['pointer', ['void']]],
1316     'MajorFunction': [0x38, ['array', 28, ['pointer', ['void']]]],   1389     'MajorFunction': [0x38, ['array', 28, ['pointer', ['void']]]],
1317 }],   1390 }],
1318   '_DUAL': [ 0x13c, {   1391   '_DUAL': [ 0x13c, {
1319     'Length': [0x0, ['unsigned long']],   1392     'Length': [0x0, ['unsigned long']],
1320     'Map': [0x4, ['pointer', ['_HMAP_DIRECTORY']]],   1393     'Map': [0x4, ['pointer', ['_HMAP_DIRECTORY']]],
1321     'SmallDir': [0x8, ['pointer', ['_HMAP_TABLE']]],   1394     'SmallDir': [0x8, ['pointer', ['_HMAP_TABLE']]],
1322     'Guard': [0xc, ['unsigned long']],   1395     'Guard': [0xc, ['unsigned long']],
1323     'FreeDisplay': [0x10, ['array', 24, ['_FREE_DISPLAY']]],   1396     'FreeDisplay': [0x10, ['array', 24, ['_FREE_DISPLAY']]],
1324     'FreeSummary': [0x130, ['unsigned long']],   1397     'FreeSummary': [0x130, ['unsigned long']],
1325     'FreeBins': [0x134, ['_LIST_ENTRY']],   1398     'FreeBins': [0x134, ['_LIST_ENTRY']],
1326 }],   1399 }],
      1400   '_DUMMY_FILE_OBJECT': [ 0xa0, {
      1401     'ObjectHeader': [0x0, ['_OBJECT_HEADER']],
      1402     'FileObjectBody': [0x20, ['array', 128, ['unsigned char']]],
      1403 }],
1327   '_DUMP_INITIALIZATION_CONTEXT': [ 0x70, {   1404   '_DUMP_INITIALIZATION_CONTEXT': [ 0x70, {
1328     'Length': [0x0, ['unsigned long']],   1405     'Length': [0x0, ['unsigned long']],
1329     'Reserved': [0x4, ['unsigned long']],   1406     'Reserved': [0x4, ['unsigned long']],
1330     'MemoryBlock': [0x8, ['pointer', ['void']]],   1407     'MemoryBlock': [0x8, ['pointer', ['void']]],
1331     'CommonBuffer': [0xc, ['array', 2, ['pointer', ['void']]]],   1408     'CommonBuffer': [0xc, ['array', 2, ['pointer', ['void']]]],
1332     'PhysicalAddress': [0x18, ['array', 2, ['_LARGE_INTEGER']]],   1409     'PhysicalAddress': [0x18, ['array', 2, ['_LARGE_INTEGER']]],
1333     'StallRoutine': [0x28, ['pointer', ['void']]],   1410     'StallRoutine': [0x28, ['pointer', ['void']]],
1334     'OpenRoutine': [0x2c, ['pointer', ['void']]],   1411     'OpenRoutine': [0x2c, ['pointer', ['void']]],
1335     'WriteRoutine': [0x30, ['pointer', ['void']]],   1412     'WriteRoutine': [0x30, ['pointer', ['void']]],
1336     'FinishRoutine': [0x34, ['pointer', ['void']]],   1413     'FinishRoutine': [0x34, ['pointer', ['void']]],
1337     'AdapterObject': [0x38, ['pointer', ['_ADAPTER_OBJECT']]],   1414     'AdapterObject': [0x38, ['pointer', ['_ADAPTER_OBJECT']]],
1338     'MappedRegisterBase': [0x3c, ['pointer', ['void']]],   1415     'MappedRegisterBase': [0x3c, ['pointer', ['void']]],
1339     'PortConfiguration': [0x40, ['pointer', ['void']]],   1416     'PortConfiguration': [0x40, ['pointer', ['void']]],
1340     'CrashDump': [0x44, ['unsigned char']],   1417     'CrashDump': [0x44, ['unsigned char']],
1341     'MaximumTransferSize': [0x48, ['unsigned long']],   1418     'MaximumTransferSize': [0x48, ['unsigned long']],
1342     'CommonBufferSize': [0x4c, ['unsigned long']],   1419     'CommonBufferSize': [0x4c, ['unsigned long']],
1343     'TargetAddress': [0x50, ['pointer', ['void']]],   1420     'TargetAddress': [0x50, ['pointer', ['void']]],
1344     'WritePendingRoutine': [0x54, ['pointer', ['void']]],   1421     'WritePendingRoutine': [0x54, ['pointer', ['void']]],
1345     'PartitionStyle': [0x58, ['unsigned long']],   1422     'PartitionStyle': [0x58, ['unsigned long']],
1346     'DiskInfo': [0x5c, ['unnamed_67ada5f4213918b4387c3bffe31b288c']],   1423     'DiskInfo': [0x5c, ['unnamed_67ada5f4213918b4387c3bffe31b288c']],
1347 }],   1424 }],
1348   '_DUMP_STACK_CONTEXT': [ 0xb0, {   1425   '_DUMP_STACK_CONTEXT': [ 0xb0, {
1349     'Init': [0x0, ['_DUMP_INITIALIZATION_CONTEXT']],   1426     'Init': [0x0, ['_DUMP_INITIALIZATION_CONTEXT']],
1350     'PartitionOffset': [0x70, ['_LARGE_INTEGER']],   1427     'PartitionOffset': [0x70, ['_LARGE_INTEGER']],
1351     'DumpPointers': [0x78, ['pointer', ['void']]],   1428     'DumpPointers': [0x78, ['pointer', ['void']]],
1352     'PointersLength': [0x7c, ['unsigned long']],   1429     'PointersLength': [0x7c, ['unsigned long']],
1353     'ModulePrefix': [0x80, ['pointer', ['unsigned short']]],   1430     'ModulePrefix': [0x80, ['pointer', ['unsigned short']]],
1354     'DriverList': [0x84, ['_LIST_ENTRY']],   1431     'DriverList': [0x84, ['_LIST_ENTRY']],
1355     'InitMsg': [0x8c, ['_STRING']],   1432     'InitMsg': [0x8c, ['_STRING']],
1356     'ProgMsg': [0x94, ['_STRING']],   1433     'ProgMsg': [0x94, ['_STRING']],
1357     'DoneMsg': [0x9c, ['_STRING']],   1434     'DoneMsg': [0x9c, ['_STRING']],
1358     'FileObject': [0xa4, ['pointer', ['void']]],   1435     'FileObject': [0xa4, ['pointer', ['void']]],
1359 }],   1436 }],
      1437   '_ECP_LIST': [ 0x10, {
      1438     'Signature': [0x0, ['unsigned long']],
      1439     'Flags': [0x4, ['unsigned long']],
      1440     'EcpList': [0x8, ['_LIST_ENTRY']],
      1441 }],
1360   '_EFI_FIRMWARE_INFORMATION': [ 0x10, {   1442   '_EFI_FIRMWARE_INFORMATION': [ 0x10, {
1361     'FirmwareVersion': [0x0, ['unsigned long']],   1443     'FirmwareVersion': [0x0, ['unsigned long']],
1362     'VirtualEfiRuntimeServices': [0x4, ['pointer', ['_VIRTUAL_EFI_RUNTIME_SERVICES']]],   1444     'VirtualEfiRuntimeServices': [0x4, ['pointer', ['_VIRTUAL_EFI_RUNTIME_SERVICES']]],
1363     'SetVirtualAddressMapStatus': [0x8, ['long']],   1445     'SetVirtualAddressMapStatus': [0x8, ['long']],
1364     'MissedMappingsCount': [0xc, ['unsigned long']],   1446     'MissedMappingsCount': [0xc, ['unsigned long']],
1365 }],   1447 }],
1366   '_EJOB': [ 0x128, {   1448   '_EJOB': [ 0x138, {
1367     'Event': [0x0, ['_KEVENT']],   1449     'Event': [0x0, ['_KEVENT']],
1368     'JobLinks': [0x10, ['_LIST_ENTRY']],   1450     'JobLinks': [0x10, ['_LIST_ENTRY']],
1369     'ProcessListHead': [0x18, ['_LIST_ENTRY']],   1451     'ProcessListHead': [0x18, ['_LIST_ENTRY']],
1370     'JobLock': [0x20, ['_ERESOURCE']],   1452     'JobLock': [0x20, ['_ERESOURCE']],
1371     'TotalUserTime': [0x58, ['_LARGE_INTEGER']],   1453     'TotalUserTime': [0x58, ['_LARGE_INTEGER']],
1372     'TotalKernelTime': [0x60, ['_LARGE_INTEGER']],   1454     'TotalKernelTime': [0x60, ['_LARGE_INTEGER']],
1373     'ThisPeriodTotalUserTime': [0x68, ['_LARGE_INTEGER']],   1455     'ThisPeriodTotalUserTime': [0x68, ['_LARGE_INTEGER']],
1374     'ThisPeriodTotalKernelTime': [0x70, ['_LARGE_INTEGER']],   1456     'ThisPeriodTotalKernelTime': [0x70, ['_LARGE_INTEGER']],
1375     'TotalPageFaultCount': [0x78, ['unsigned long']],   1457     'TotalPageFaultCount': [0x78, ['unsigned long']],
1376     'TotalProcesses': [0x7c, ['unsigned long']],   1458     'TotalProcesses': [0x7c, ['unsigned long']],
1377     'ActiveProcesses': [0x80, ['unsigned long']],   1459     'ActiveProcesses': [0x80, ['unsigned long']],
1378     'TotalTerminatedProcesses': [0x84, ['unsigned long']],   1460     'TotalTerminatedProcesses': [0x84, ['unsigned long']],
1379     'PerProcessUserTimeLimit': [0x88, ['_LARGE_INTEGER']],   1461     'PerProcessUserTimeLimit': [0x88, ['_LARGE_INTEGER']],
1380     'PerJobUserTimeLimit': [0x90, ['_LARGE_INTEGER']],   1462     'PerJobUserTimeLimit': [0x90, ['_LARGE_INTEGER']],
1381     'LimitFlags': [0x98, ['unsigned long']],   1463     'MinimumWorkingSetSize': [0x98, ['unsigned long']],
1382     'MinimumWorkingSetSize': [0x9c, ['unsigned long']],   1464     'MaximumWorkingSetSize': [0x9c, ['unsigned long']],
1383     'MaximumWorkingSetSize': [0xa0, ['unsigned long']],   1465     'LimitFlags': [0xa0, ['unsigned long']],
1384     'ActiveProcessLimit': [0xa4, ['unsigned long']],   1466     'ActiveProcessLimit': [0xa4, ['unsigned long']],
1385     'Affinity': [0xa8, ['unsigned long']],   1467     'Affinity': [0xa8, ['_KAFFINITY_EX']],
1386     'PriorityClass': [0xac, ['unsigned char']],   1468     'PriorityClass': [0xb4, ['unsigned char']],
1387     'AccessState': [0xb0, ['pointer', ['_JOB_ACCESS_STATE']]],   1469     'AccessState': [0xb8, ['pointer', ['_JOB_ACCESS_STATE']]],
1388     'UIRestrictionsClass': [0xb4, ['unsigned long']],   1470     'UIRestrictionsClass': [0xbc, ['unsigned long']],
1389     'EndOfJobTimeAction': [0xb8, ['unsigned long']],   1471     'EndOfJobTimeAction': [0xc0, ['unsigned long']],
1390     'CompletionPort': [0xbc, ['pointer', ['void']]],   1472     'CompletionPort': [0xc4, ['pointer', ['void']]],
1391     'CompletionKey': [0xc0, ['pointer', ['void']]],   1473     'CompletionKey': [0xc8, ['pointer', ['void']]],
1392     'SessionId': [0xc4, ['unsigned long']],   1474     'SessionId': [0xcc, ['unsigned long']],
1393     'SchedulingClass': [0xc8, ['unsigned long']],   1475     'SchedulingClass': [0xd0, ['unsigned long']],
1394     'ReadOperationCount': [0xd0, ['unsigned long long']],   1476     'ReadOperationCount': [0xd8, ['unsigned long long']],
1395     'WriteOperationCount': [0xd8, ['unsigned long long']],   1477     'WriteOperationCount': [0xe0, ['unsigned long long']],
1396     'OtherOperationCount': [0xe0, ['unsigned long long']],   1478     'OtherOperationCount': [0xe8, ['unsigned long long']],
1397     'ReadTransferCount': [0xe8, ['unsigned long long']],   1479     'ReadTransferCount': [0xf0, ['unsigned long long']],
1398     'WriteTransferCount': [0xf0, ['unsigned long long']],   1480     'WriteTransferCount': [0xf8, ['unsigned long long']],
1399     'OtherTransferCount': [0xf8, ['unsigned long long']],   1481     'OtherTransferCount': [0x100, ['unsigned long long']],
1400     'ProcessMemoryLimit': [0x100, ['unsigned long']],   1482     'ProcessMemoryLimit': [0x108, ['unsigned long']],
1401     'JobMemoryLimit': [0x104, ['unsigned long']],   1483     'JobMemoryLimit': [0x10c, ['unsigned long']],
1402     'PeakProcessMemoryUsed': [0x108, ['unsigned long']],   1484     'PeakProcessMemoryUsed': [0x110, ['unsigned long']],
1403     'PeakJobMemoryUsed': [0x10c, ['unsigned long']],   1485     'PeakJobMemoryUsed': [0x114, ['unsigned long']],
1404     'CurrentJobMemoryUsed': [0x110, ['unsigned long']],   1486     'CurrentJobMemoryUsed': [0x118, ['unsigned long long']],
1405     'MemoryLimitsLock': [0x114, ['_EX_PUSH_LOCK']],   1487     'MemoryLimitsLock': [0x120, ['_EX_PUSH_LOCK']],
1406     'JobSetLinks': [0x118, ['_LIST_ENTRY']],   1488     'JobSetLinks': [0x124, ['_LIST_ENTRY']],
1407     'MemberLevel': [0x120, ['unsigned long']],   1489     'MemberLevel': [0x12c, ['unsigned long']],
1408     'JobFlags': [0x124, ['unsigned long']],   1490     'JobFlags': [0x130, ['unsigned long']],
1409 }],   1491 }],
1410   '_EPROCESS': [ 0x270, {   1492   '_EPROCESS': [ 0x2c0, {
1411     'Pcb': [0x0, ['_KPROCESS']],   1493     'Pcb': [0x0, ['_KPROCESS']],
1412     'ProcessLock': [0x80, ['_EX_PUSH_LOCK']],   1494     'ProcessLock': [0x98, ['_EX_PUSH_LOCK']],
1413     'CreateTime': [0x88, ['_LARGE_INTEGER']],   1495     'CreateTime': [0xa0, ['_LARGE_INTEGER']],
1414     'ExitTime': [0x90, ['_LARGE_INTEGER']],   1496     'ExitTime': [0xa8, ['_LARGE_INTEGER']],
1415     'RundownProtect': [0x98, ['_EX_RUNDOWN_REF']],   1497     'RundownProtect': [0xb0, ['_EX_RUNDOWN_REF']],
1416     'UniqueProcessId': [0x9c, ['pointer', ['void']]],   1498     'UniqueProcessId': [0xb4, ['pointer', ['void']]],
1417     'ActiveProcessLinks': [0xa0, ['_LIST_ENTRY']],   1499     'ActiveProcessLinks': [0xb8, ['_LIST_ENTRY']],
1418     'QuotaUsage': [0xa8, ['array', 3, ['unsigned long']]],   1500     'ProcessQuotaUsage': [0xc0, ['array', 2, ['unsigned long']]],
1419     'QuotaPeak': [0xb4, ['array', 3, ['unsigned long']]],   1501     'ProcessQuotaPeak': [0xc8, ['array', 2, ['unsigned long']]],
1420     'CommitCharge': [0xc0, ['unsigned long']],   1502     'CommitCharge': [0xd0, ['unsigned long']],
1421     'PeakVirtualSize': [0xc4, ['unsigned long']],   1503     'QuotaBlock': [0xd4, ['pointer', ['_EPROCESS_QUOTA_BLOCK']]],
1422     'VirtualSize': [0xc8, ['unsigned long']],   1504     'CpuQuotaBlock': [0xd8, ['pointer', ['_PS_CPU_QUOTA_BLOCK']]],
1423     'SessionProcessLinks': [0xcc, ['_LIST_ENTRY']],   1505     'PeakVirtualSize': [0xdc, ['unsigned long']],
1424     'DebugPort': [0xd4, ['pointer', ['void']]],   1506     'VirtualSize': [0xe0, ['unsigned long']],
1425     'ExceptionPortData': [0xd8, ['pointer', ['void']]],   1507     'SessionProcessLinks': [0xe4, ['_LIST_ENTRY']],
1426     'ExceptionPortValue': [0xd8, ['unsigned long']],   1508     'DebugPort': [0xec, ['pointer', ['void']]],
1427     'ObjectTable': [0xdc, ['pointer', ['_HANDLE_TABLE']]],   1509     'ExceptionPortData': [0xf0, ['pointer', ['void']]],
1428     'Token': [0xe0, ['_EX_FAST_REF']],   1510     'ExceptionPortValue': [0xf0, ['unsigned long']],
1429     'WorkingSetPage': [0xe4, ['unsigned long']],   1511     'ObjectTable': [0xf4, ['pointer', ['_HANDLE_TABLE']]],
1430     'AddressCreationLock': [0xe8, ['_EX_PUSH_LOCK']],   1512     'Token': [0xf8, ['_EX_FAST_REF']],
1431     'RotateInProgress': [0xec, ['pointer', ['_ETHREAD']]],   1513     'WorkingSetPage': [0xfc, ['unsigned long']],
1432     'ForkInProgress': [0xf0, ['pointer', ['_ETHREAD']]],   1514     'AddressCreationLock': [0x100, ['_EX_PUSH_LOCK']],
1433     'HardwareTrigger': [0xf4, ['unsigned long']],   1515     'RotateInProgress': [0x104, ['pointer', ['_ETHREAD']]],
1434     'PhysicalVadRoot': [0xf8, ['pointer', ['_MM_AVL_TABLE']]],   1516     'ForkInProgress': [0x108, ['pointer', ['_ETHREAD']]],
1435     'CloneRoot': [0xfc, ['pointer', ['void']]],   1517     'HardwareTrigger': [0x10c, ['unsigned long']],
1436     'NumberOfPrivatePages': [0x100, ['unsigned long']],   1518     'PhysicalVadRoot': [0x110, ['pointer', ['_MM_AVL_TABLE']]],
1437     'NumberOfLockedPages': [0x104, ['unsigned long']],   1519     'CloneRoot': [0x114, ['pointer', ['void']]],
1438     'Win32Process': [0x108, ['pointer', ['void']]],   1520     'NumberOfPrivatePages': [0x118, ['unsigned long']],
1439     'Job': [0x10c, ['pointer', ['_EJOB']]],   1521     'NumberOfLockedPages': [0x11c, ['unsigned long']],
1440     'SectionObject': [0x110, ['pointer', ['void']]],   1522     'Win32Process': [0x120, ['pointer', ['void']]],
1441     'SectionBaseAddress': [0x114, ['pointer', ['void']]],   1523     'Job': [0x124, ['pointer', ['_EJOB']]],
1442     'QuotaBlock': [0x118, ['pointer', ['_EPROCESS_QUOTA_BLOCK']]],   1524     'SectionObject': [0x128, ['pointer', ['void']]],
1443     'WorkingSetWatch': [0x11c, ['pointer', ['_PAGEFAULT_HISTORY']]],   1525     'SectionBaseAddress': [0x12c, ['pointer', ['void']]],
1444     'Win32WindowStation': [0x120, ['pointer', ['void']]],   1526     'Cookie': [0x130, ['unsigned long']],
1445     'InheritedFromUniqueProcessId': [0x124, ['pointer', ['void']]],   1527     'Spare8': [0x134, ['unsigned long']],
1446     'LdtInformation': [0x128, ['pointer', ['void']]],   1528     'WorkingSetWatch': [0x138, ['pointer', ['_PAGEFAULT_HISTORY']]],
1447     'Spare': [0x12c, ['pointer', ['void']]],   1529     'Win32WindowStation': [0x13c, ['pointer', ['void']]],
1448     'VdmObjects': [0x130, ['pointer', ['void']]],   1530     'InheritedFromUniqueProcessId': [0x140, ['pointer', ['void']]],
1449     'DeviceMap': [0x134, ['pointer', ['void']]],   1531     'LdtInformation': [0x144, ['pointer', ['void']]],
1450     'EtwDataSource': [0x138, ['pointer', ['void']]],   1532     'VdmObjects': [0x148, ['pointer', ['void']]],
1451     'FreeTebHint': [0x13c, ['pointer', ['void']]],   1533     'ConsoleHostProcess': [0x14c, ['unsigned long']],
1452     'Filler': [0x140, ['unsigned long long']],   1534     'DeviceMap': [0x150, ['pointer', ['void']]],
1453     'PageDirectoryPte': [0x140, ['_HARDWARE_PTE']],   1535     'EtwDataSource': [0x154, ['pointer', ['void']]],
1454     'Session': [0x148, ['pointer', ['void']]],   1536     'FreeTebHint': [0x158, ['pointer', ['void']]],
1455     'ImageFileName': [0x14c, ['array', 16, ['unsigned char']]],   1537     'Filler': [0x160, ['unsigned long long']],
1456     'JobLinks': [0x15c, ['_LIST_ENTRY']],   1538     'PageDirectoryPte': [0x160, ['_HARDWARE_PTE']],
1457     'LockedPagesList': [0x164, ['pointer', ['void']]],   1539     'Session': [0x168, ['pointer', ['void']]],
1458     'ThreadListHead': [0x168, ['_LIST_ENTRY']],   1540     'ImageFileName': [0x16c, ['array', 15, ['unsigned char']]],
1459     'SecurityPort': [0x170, ['pointer', ['void']]],   1541     'PriorityClass': [0x17b, ['unsigned char']],
1460     'PaeTop': [0x174, ['pointer', ['void']]],   1542     'JobLinks': [0x17c, ['_LIST_ENTRY']],
1461     'ActiveThreads': [0x178, ['unsigned long']],   1543     'LockedPagesList': [0x184, ['pointer', ['void']]],
1462     'ImagePathHash': [0x17c, ['unsigned long']],   1544     'ThreadListHead': [0x188, ['_LIST_ENTRY']],
1463     'DefaultHardErrorProcessing': [0x180, ['unsigned long']],   1545     'SecurityPort': [0x190, ['pointer', ['void']]],
1464     'LastThreadExitStatus': [0x184, ['long']],   1546     'PaeTop': [0x194, ['pointer', ['void']]],
1465     'Peb': [0x188, ['pointer', ['_PEB']]],   1547     'ActiveThreads': [0x198, ['unsigned long']],
1466     'PrefetchTrace': [0x18c, ['_EX_FAST_REF']],   1548     'ImagePathHash': [0x19c, ['unsigned long']],
1467     'ReadOperationCount': [0x190, ['_LARGE_INTEGER']],   1549     'DefaultHardErrorProcessing': [0x1a0, ['unsigned long']],
1468     'WriteOperationCount': [0x198, ['_LARGE_INTEGER']],   1550     'LastThreadExitStatus': [0x1a4, ['long']],
1469     'OtherOperationCount': [0x1a0, ['_LARGE_INTEGER']],   1551     'Peb': [0x1a8, ['pointer', ['_PEB']]],
1470     'ReadTransferCount': [0x1a8, ['_LARGE_INTEGER']],   1552     'PrefetchTrace': [0x1ac, ['_EX_FAST_REF']],
1471     'WriteTransferCount': [0x1b0, ['_LARGE_INTEGER']],   1553     'ReadOperationCount': [0x1b0, ['_LARGE_INTEGER']],
1472     'OtherTransferCount': [0x1b8, ['_LARGE_INTEGER']],   1554     'WriteOperationCount': [0x1b8, ['_LARGE_INTEGER']],
1473     'CommitChargeLimit': [0x1c0, ['unsigned long']],   1555     'OtherOperationCount': [0x1c0, ['_LARGE_INTEGER']],
1474     'CommitChargePeak': [0x1c4, ['unsigned long']],   1556     'ReadTransferCount': [0x1c8, ['_LARGE_INTEGER']],
1475     'AweInfo': [0x1c8, ['pointer', ['void']]],   1557     'WriteTransferCount': [0x1d0, ['_LARGE_INTEGER']],
1476     'SeAuditProcessCreationInfo': [0x1cc, ['_SE_AUDIT_PROCESS_CREATION_INFO']],   1558     'OtherTransferCount': [0x1d8, ['_LARGE_INTEGER']],
1477     'Vm': [0x1d0, ['_MMSUPPORT']],   1559     'CommitChargeLimit': [0x1e0, ['unsigned long']],
1478     'MmProcessLinks': [0x218, ['_LIST_ENTRY']],   1560     'CommitChargePeak': [0x1e4, ['unsigned long']],
1479     'ModifiedPageCount': [0x220, ['unsigned long']],   1561     'AweInfo': [0x1e8, ['pointer', ['void']]],
1480     'Flags2': [0x224, ['unsigned long']],   1562     'SeAuditProcessCreationInfo': [0x1ec, ['_SE_AUDIT_PROCESS_CREATION_INFO']],
1481     'Flags': [0x228, ['unsigned long']],   1563     'Vm': [0x1f0, ['_MMSUPPORT']],
1482     'ExitStatus': [0x22c, ['long']],   1564     'MmProcessLinks': [0x25c, ['_LIST_ENTRY']],
1483     'Spare7': [0x230, ['unsigned short']],   1565     'HighestUserAddress': [0x264, ['pointer', ['void']]],
1484     'SubSystemMinorVersion': [0x232, ['unsigned char']],   1566     'ModifiedPageCount': [0x268, ['unsigned long']],
1485     'SubSystemVersion': [0x232, ['unsigned short']],   1567     'Flags2': [0x26c, ['unsigned long']],
1486     'SubSystemMajorVersion': [0x233, ['unsigned char']],   1568     'Flags': [0x270, ['unsigned long']],
1487     'PriorityClass': [0x234, ['unsigned char']],   1569     'ExitStatus': [0x274, ['long']],
1488     'VadRoot': [0x238, ['_MM_AVL_TABLE']],   1570     'VadRoot': [0x278, ['_MM_AVL_TABLE']],
1489     'Cookie': [0x258, ['unsigned long']],   1571     'AlpcContext': [0x298, ['_ALPC_PROCESS_CONTEXT']],
1490     'AlpcContext': [0x25c, ['_ALPC_PROCESS_CONTEXT']],   1572     'TimerResolutionLink': [0x2a8, ['_LIST_ENTRY']],
      1573     'RequestedTimerResolution': [0x2b0, ['unsigned long']],
      1574     'ActiveThreadsHighWatermark': [0x2b4, ['unsigned long']],
      1575     'SmallestTimerResolution': [0x2b8, ['unsigned long']],
      1576     'TimerResolutionStackRecord': [0x2bc, ['pointer', ['_PO_DIAG_STACK_RECORD']]],
1491 }],   1577 }],
1492   '_ERESOURCE': [ 0x38, {   1578   '_ERESOURCE': [ 0x38, {
1493     'SystemResourcesList': [0x0, ['_LIST_ENTRY']],   1579     'SystemResourcesList': [0x0, ['_LIST_ENTRY']],
1494     'OwnerTable': [0x8, ['pointer', ['_OWNER_ENTRY']]],   1580     'OwnerTable': [0x8, ['pointer', ['_OWNER_ENTRY']]],
1495     'ActiveCount': [0xc, ['short']],   1581     'ActiveCount': [0xc, ['short']],
1496     'Flag': [0xe, ['unsigned short']],   1582     'Flag': [0xe, ['unsigned short']],
1497     'SharedWaiters': [0x10, ['pointer', ['_KSEMAPHORE']]],   1583     'SharedWaiters': [0x10, ['pointer', ['_KSEMAPHORE']]],
1498     'ExclusiveWaiters': [0x14, ['pointer', ['_KEVENT']]],   1584     'ExclusiveWaiters': [0x14, ['pointer', ['_KEVENT']]],
1499     'OwnerEntry': [0x18, ['_OWNER_ENTRY']],   1585     'OwnerEntry': [0x18, ['_OWNER_ENTRY']],
1500     'ActiveEntries': [0x20, ['unsigned long']],   1586     'ActiveEntries': [0x20, ['unsigned long']],
1501     'ContentionCount': [0x24, ['unsigned long']],   1587     'ContentionCount': [0x24, ['unsigned long']],
1502     'NumberOfSharedWaiters': [0x28, ['unsigned long']],   1588     'NumberOfSharedWaiters': [0x28, ['unsigned long']],
1503     'NumberOfExclusiveWaiters': [0x2c, ['unsigned long']],   1589     'NumberOfExclusiveWaiters': [0x2c, ['unsigned long']],
1504     'Address': [0x30, ['pointer', ['void']]],   1590     'Address': [0x30, ['pointer', ['void']]],
1505     'CreatorBackTraceIndex': [0x30, ['unsigned long']],   1591     'CreatorBackTraceIndex': [0x30, ['unsigned long']],
1506     'SpinLock': [0x34, ['unsigned long']],   1592     'SpinLock': [0x34, ['unsigned long']],
1507 }],   1593 }],
1508   '_ETHREAD': [ 0x288, {   1594   '_ETHREAD': [ 0x2b8, {
1509     'Tcb': [0x0, ['_KTHREAD']],   1595     'Tcb': [0x0, ['_KTHREAD']],
1510     'CreateTime': [0x1e0, ['_LARGE_INTEGER']],   1596     'CreateTime': [0x200, ['_LARGE_INTEGER']],
1511     'ExitTime': [0x1e8, ['_LARGE_INTEGER']],   1597     'ExitTime': [0x208, ['_LARGE_INTEGER']],
1512     'KeyedWaitChain': [0x1e8, ['_LIST_ENTRY']],   1598     'KeyedWaitChain': [0x208, ['_LIST_ENTRY']],
1513     'OfsChain': [0x1f0, ['pointer', ['void']]],   1599     'ExitStatus': [0x210, ['long']],
1514     'ExitStatus': [0x1f0, ['long']],   1600     'PostBlockList': [0x214, ['_LIST_ENTRY']],
1515     'PostBlockList': [0x1f4, ['_LIST_ENTRY']],   1601     'ForwardLinkShadow': [0x214, ['pointer', ['void']]],
1516     'ForwardLinkShadow': [0x1f4, ['pointer', ['void']]],   1602     'StartAddress': [0x218, ['pointer', ['void']]],
1517     'StartAddress': [0x1f8, ['pointer', ['void']]],   1603     'ReaperLink': [0x21c, ['pointer', ['_ETHREAD']]],
1518     'Win32StartParameter': [0x1fc, ['pointer', ['void']]],   1604     'TerminationPort': [0x21c, ['pointer', ['_TERMINATION_PORT']]],
1519     'KeyedWaitValue': [0x1fc, ['pointer', ['void']]],   1605     'KeyedWaitValue': [0x21c, ['pointer', ['void']]],
1520     'TerminationPort': [0x1fc, ['pointer', ['_TERMINATION_PORT']]],   1606     'ActiveTimerListLock': [0x220, ['unsigned long']],
1521     'ReaperLink': [0x1fc, ['pointer', ['_ETHREAD']]],   1607     'ActiveTimerListHead': [0x224, ['_LIST_ENTRY']],
1522     'ActiveTimerListLock': [0x200, ['unsigned long']],   1608     'Cid': [0x22c, ['_CLIENT_ID']],
1523     'ActiveTimerListHead': [0x204, ['_LIST_ENTRY']],   1609     'KeyedWaitSemaphore': [0x234, ['_KSEMAPHORE']],
1524     'Cid': [0x20c, ['_CLIENT_ID']],   1610     'AlpcWaitSemaphore': [0x234, ['_KSEMAPHORE']],
1525     'AlpcWaitSemaphore': [0x214, ['_KSEMAPHORE']],   1611     'ClientSecurity': [0x248, ['_PS_CLIENT_SECURITY_CONTEXT']],
1526     'KeyedWaitSemaphore': [0x214, ['_KSEMAPHORE']],   1612     'IrpList': [0x24c, ['_LIST_ENTRY']],
1527     'ClientSecurity': [0x228, ['_PS_CLIENT_SECURITY_CONTEXT']],   1613     'TopLevelIrp': [0x254, ['unsigned long']],
1528     'IrpList': [0x22c, ['_LIST_ENTRY']],   1614     'DeviceToVerify': [0x258, ['pointer', ['_DEVICE_OBJECT']]],
1529     'TopLevelIrp': [0x234, ['unsigned long']],   1615     'CpuQuotaApc': [0x25c, ['pointer', ['_PSP_CPU_QUOTA_APC']]],
1530     'DeviceToVerify': [0x238, ['pointer', ['_DEVICE_OBJECT']]],   1616     'Win32StartAddress': [0x260, ['pointer', ['void']]],
1531     'RateControlApc': [0x23c, ['pointer', ['_PSP_RATE_APC']]],   1617     'LegacyPowerObject': [0x264, ['pointer', ['void']]],
1532     'Win32StartAddress': [0x240, ['pointer', ['void']]],   1618     'ThreadListEntry': [0x268, ['_LIST_ENTRY']],
1533     'SparePtr0': [0x244, ['pointer', ['void']]],   1619     'RundownProtect': [0x270, ['_EX_RUNDOWN_REF']],
1534     'ThreadListEntry': [0x248, ['_LIST_ENTRY']],   1620     'ThreadLock': [0x274, ['_EX_PUSH_LOCK']],
1535     'RundownProtect': [0x250, ['_EX_RUNDOWN_REF']],   1621     'ReadClusterSize': [0x278, ['unsigned long']],
1536     'ThreadLock': [0x254, ['_EX_PUSH_LOCK']],   1622     'MmLockOrdering': [0x27c, ['long']],
1537     'ReadClusterSize': [0x258, ['unsigned long']],   1623     'CrossThreadFlags': [0x280, ['unsigned long']],
1538     'MmLockOrdering': [0x25c, ['long']],   1624     'SameThreadPassiveFlags': [0x284, ['unsigned long']],
1539     'CrossThreadFlags': [0x260, ['unsigned long']],   1625     'SameThreadApcFlags': [0x288, ['unsigned long']],
1540     'SameThreadPassiveFlags': [0x264, ['unsigned long']],   1626     'PriorityRegionActive': [0x28b, ['unsigned char']],
1541     'SameThreadApcFlags': [0x268, ['unsigned long']],   1627     'CacheManagerActive': [0x28c, ['unsigned char']],
1542     'PriorityRegionActive': [0x26b, ['unsigned char']],   1628     'DisablePageFaultClustering': [0x28d, ['unsigned char']],
1543     'CacheManagerActive': [0x26c, ['unsigned char']],   1629     'ActiveFaultCount': [0x28e, ['unsigned char']],
1544     'DisablePageFaultClustering': [0x26d, ['unsigned char']],   1630     'LockOrderState': [0x28f, ['unsigned char']],
1545     'ActiveFaultCount': [0x26e, ['unsigned char']],   1631     'AlpcMessageId': [0x290, ['unsigned long']],
1546     'AlpcMessageId': [0x270, ['unsigned long']],   1632     'AlpcReceiveAttributeSet': [0x294, ['unsigned long']],
1547     'AlpcMessage': [0x274, ['pointer', ['void']]],   1633     'AlpcMessage': [0x294, ['pointer', ['void']]],
1548     'AlpcReceiveAttributeSet': [0x274, ['unsigned long']],   1634     'AlpcWaitListEntry': [0x298, ['_LIST_ENTRY']],
1549     'AlpcWaitListEntry': [0x278, ['_LIST_ENTRY']],   1635     'CacheManagerCount': [0x2a0, ['unsigned long']],
1550     'CacheManagerCount': [0x280, ['unsigned long']],   1636     'IoBoostCount': [0x2a4, ['unsigned long']],
      1637     'IrpListLock': [0x2a8, ['unsigned long']],
      1638     'ReservedForSynchTracking': [0x2ac, ['pointer', ['void']]],
      1639     'CmCallbackListHead': [0x2b0, ['_SINGLE_LIST_ENTRY']],
1551 }],   1640 }],
1552   '_ETIMER': [ 0x98, {   1641   '_ETIMER': [ 0x98, {
1553     'KeTimer': [0x0, ['_KTIMER']],   1642     'KeTimer': [0x0, ['_KTIMER']],
1554     'TimerApc': [0x28, ['_KAPC']],   1643     'TimerApc': [0x28, ['_KAPC']],
1555     'TimerDpc': [0x58, ['_KDPC']],   1644     'TimerDpc': [0x58, ['_KDPC']],
1556     'ActiveTimerListEntry': [0x78, ['_LIST_ENTRY']],   1645     'ActiveTimerListEntry': [0x78, ['_LIST_ENTRY']],
1557     'Lock': [0x80, ['unsigned long']],   1646     'Lock': [0x80, ['unsigned long']],
1558     'Period': [0x84, ['long']],   1647     'Period': [0x84, ['long']],
1559     'ApcAssociated': [0x88, ['unsigned char']],   1648     'ApcAssociated': [0x88, ['unsigned char']],
1560     'WakeTimer': [0x89, ['unsigned char']],   1649     'WakeReason': [0x8c, ['pointer', ['_DIAGNOSTIC_CONTEXT']]],
1561     'WakeTimerListEntry': [0x8c, ['_LIST_ENTRY']],   1650     'WakeTimerListEntry': [0x90, ['_LIST_ENTRY']],
1562 }],   1651 }],
1563   '_ETW_BUFFER_CONTEXT': [ 0x4, {   1652   '_ETW_BUFFER_CONTEXT': [ 0x4, {
1564     'ProcessorNumber': [0x0, ['unsigned char']],   1653     'ProcessorNumber': [0x0, ['unsigned char']],
1565     'Alignment': [0x1, ['unsigned char']],   1654     'Alignment': [0x1, ['unsigned char']],
1566     'LoggerId': [0x2, ['unsigned short']],   1655     'LoggerId': [0x2, ['unsigned short']],
1567 }],   1656 }],
1568   '_ETW_GUID_ENTRY': [ 0x158, {   1657   '_ETW_BUFFER_HANDLE': [ 0x8, {
      1658     'TraceBuffer': [0x0, ['pointer', ['_WMI_BUFFER_HEADER']]],
      1659     'BufferFastRef': [0x4, ['pointer', ['_EX_FAST_REF']]],
      1660 }],
      1661   '_ETW_GUID_ENTRY': [ 0x178, {
1569     'GuidList': [0x0, ['_LIST_ENTRY']],   1662     'GuidList': [0x0, ['_LIST_ENTRY']],
1570     'RefCount': [0x8, ['long']],   1663     'RefCount': [0x8, ['long']],
1571     'Guid': [0xc, ['_GUID']],   1664     'Guid': [0xc, ['_GUID']],
1572     'RegListHead': [0x1c, ['_LIST_ENTRY']],   1665     'RegListHead': [0x1c, ['_LIST_ENTRY']],
1573     'SecurityDescriptor': [0x24, ['pointer', ['void']]],   1666     'SecurityDescriptor': [0x24, ['pointer', ['void']]],
      1667     'MatchId': [0x28, ['unsigned long long']],
1574     'LastEnable': [0x28, ['_ETW_LAST_ENABLE_INFO']],   1668     'LastEnable': [0x28, ['_ETW_LAST_ENABLE_INFO']],
1575     'ProviderEnableInfo': [0x38, ['_TRACE_ENABLE_INFO']],   1669     'ProviderEnableInfo': [0x38, ['_TRACE_ENABLE_INFO']],
1576     'EnableInfo': [0x58, ['array', 8, ['_TRACE_ENABLE_INFO']]],   1670     'EnableInfo': [0x58, ['array', 8, ['_TRACE_ENABLE_INFO']]],
1577 }],   1671     'FilterData': [0x158, ['array', 8, ['pointer', ['_EVENT_FILTER_HEADER']]]],
1578   '_ETW_KERNEL_TRACE_TIMESTAMP': [ 0x10, {      
1579     'KernelTraceTimeStamp': [0x0, ['array', 2, ['_LARGE_INTEGER']]],      
1580 }],   1672 }],
1581   '_ETW_LAST_ENABLE_INFO': [ 0x10, {   1673   '_ETW_LAST_ENABLE_INFO': [ 0x10, {
1582     'EnableFlags': [0x0, ['_LARGE_INTEGER']],   1674     'EnableFlags': [0x0, ['_LARGE_INTEGER']],
1583     'LoggerId': [0x8, ['unsigned short']],   1675     'LoggerId': [0x8, ['unsigned short']],
1584     'Level': [0xa, ['unsigned char']],   1676     'Level': [0xa, ['unsigned char']],
1585 }],   1677 }],
      1678   '_ETW_LOGGER_HANDLE': [ 0x1, {
      1679     'DereferenceAndLeave': [0x0, ['unsigned char']],
      1680 }],
      1681   '_ETW_PERF_COUNTERS': [ 0x18, {
      1682     'TotalActiveSessions': [0x0, ['long']],
      1683     'TotalBufferMemoryNonPagedPool': [0x4, ['long']],
      1684     'TotalBufferMemoryPagedPool': [0x8, ['long']],
      1685     'TotalGuidsEnabled': [0xc, ['long']],
      1686     'TotalGuidsNotEnabled': [0x10, ['long']],
      1687     'TotalGuidsPreEnabled': [0x14, ['long']],
      1688 }],
1586   '_ETW_PROVIDER_TABLE_ENTRY': [ 0x10, {   1689   '_ETW_PROVIDER_TABLE_ENTRY': [ 0x10, {
1587     'RefCount': [0x0, ['long']],   1690     'RefCount': [0x0, ['long']],
1588     'RegEntry': [0x8, ['pointer', ['_ETW_REG_ENTRY']]],   1691     'RegEntry': [0x8, ['pointer', ['_ETW_REG_ENTRY']]],
1589     'Caller': [0xc, ['pointer', ['void']]],   1692     'Caller': [0xc, ['pointer', ['void']]],
1590 }],   1693 }],
      1694   '_ETW_REALTIME_CONSUMER': [ 0x50, {
      1695     'Links': [0x0, ['_LIST_ENTRY']],
      1696     'ProcessHandle': [0x8, ['pointer', ['void']]],
      1697     'ProcessObject': [0xc, ['pointer', ['_EPROCESS']]],
      1698     'NextNotDelivered': [0x10, ['pointer', ['void']]],
      1699     'RealtimeConnectContext': [0x14, ['pointer', ['void']]],
      1700     'DisconnectEvent': [0x18, ['pointer', ['_KEVENT']]],
      1701     'DataAvailableEvent': [0x1c, ['pointer', ['_KEVENT']]],
      1702     'UserBufferCount': [0x20, ['pointer', ['unsigned long']]],
      1703     'UserBufferListHead': [0x24, ['pointer', ['_SINGLE_LIST_ENTRY']]],
      1704     'BuffersLost': [0x28, ['unsigned long']],
      1705     'EmptyBuffersCount': [0x2c, ['unsigned long']],
      1706     'LoggerId': [0x30, ['unsigned long']],
      1707     'ShutDownRequested': [0x34, ['unsigned char']],
      1708     'NewBuffersLost': [0x35, ['unsigned char']],
      1709     'Disconnected': [0x36, ['unsigned char']],
      1710     'ReservedBufferSpaceBitMap': [0x38, ['_RTL_BITMAP']],
      1711     'ReservedBufferSpace': [0x40, ['pointer', ['unsigned char']]],
      1712     'ReservedBufferSpaceSize': [0x44, ['unsigned long']],
      1713     'UserPagesAllocated': [0x48, ['unsigned long']],
      1714     'UserPagesReused': [0x4c, ['unsigned long']],
      1715 }],
1591   '_ETW_REF_CLOCK': [ 0x10, {   1716   '_ETW_REF_CLOCK': [ 0x10, {
1592     'StartTime': [0x0, ['_LARGE_INTEGER']],   1717     'StartTime': [0x0, ['_LARGE_INTEGER']],
1593     'StartPerfClock': [0x8, ['_LARGE_INTEGER']],   1718     'StartPerfClock': [0x8, ['_LARGE_INTEGER']],
1594 }],   1719 }],
1595   '_ETW_REG_ENTRY': [ 0x2c, {   1720   '_ETW_REG_ENTRY': [ 0x2c, {
1596     'RegList': [0x0, ['_LIST_ENTRY']],   1721     'RegList': [0x0, ['_LIST_ENTRY']],
1597     'GuidEntry': [0x8, ['pointer', ['_ETW_GUID_ENTRY']]],   1722     'GuidEntry': [0x8, ['pointer', ['_ETW_GUID_ENTRY']]],
1598     'Index': [0xc, ['unsigned short']],   1723     'Index': [0xc, ['unsigned short']],
1599     'Flags': [0xe, ['unsigned short']],   1724     'Flags': [0xe, ['unsigned short']],
1600     'EnableMask': [0x10, ['unsigned char']],   1725     'EnableMask': [0x10, ['unsigned char']],
      1726     'SessionId': [0x14, ['unsigned long']],
1601     'ReplySlot': [0x14, ['array', 4, ['pointer', ['_ETW_REG_ENTRY']]]],   1727     'ReplySlot': [0x14, ['array', 4, ['pointer', ['_ETW_REG_ENTRY']]]],
1602     'ReplyQueue': [0x14, ['pointer', ['_ETW_REPLY_QUEUE']]],   1728     'ReplyQueue': [0x14, ['pointer', ['_ETW_REPLY_QUEUE']]],
1603     'Process': [0x24, ['pointer', ['_EPROCESS']]],      
1604     'Callback': [0x24, ['pointer', ['void']]],   1729     'Callback': [0x24, ['pointer', ['void']]],
      1730     'Process': [0x24, ['pointer', ['_EPROCESS']]],
1605     'CallbackContext': [0x28, ['pointer', ['void']]],   1731     'CallbackContext': [0x28, ['pointer', ['void']]],
1606 }],   1732 }],
1607   '_ETW_REPLY_QUEUE': [ 0x2c, {   1733   '_ETW_REPLY_QUEUE': [ 0x2c, {
1608     'Queue': [0x0, ['_KQUEUE']],   1734     'Queue': [0x0, ['_KQUEUE']],
1609     'EventsLost': [0x28, ['long']],   1735     'EventsLost': [0x28, ['long']],
1610 }],   1736 }],
      1737   '_ETW_SESSION_PERF_COUNTERS': [ 0x18, {
      1738     'BufferMemoryPagedPool': [0x0, ['long']],
      1739     'BufferMemoryNonPagedPool': [0x4, ['long']],
      1740     'EventsLoggedCount': [0x8, ['unsigned long long']],
      1741     'EventsLost': [0x10, ['long']],
      1742     'NumConsumers': [0x14, ['long']],
      1743 }],
1611   '_ETW_SYSTEMTIME': [ 0x10, {   1744   '_ETW_SYSTEMTIME': [ 0x10, {
1612     'Year': [0x0, ['unsigned short']],   1745     'Year': [0x0, ['unsigned short']],
1613     'Month': [0x2, ['unsigned short']],   1746     'Month': [0x2, ['unsigned short']],
1614     'DayOfWeek': [0x4, ['unsigned short']],   1747     'DayOfWeek': [0x4, ['unsigned short']],
1615     'Day': [0x6, ['unsigned short']],   1748     'Day': [0x6, ['unsigned short']],
1616     'Hour': [0x8, ['unsigned short']],   1749     'Hour': [0x8, ['unsigned short']],
1617     'Minute': [0xa, ['unsigned short']],   1750     'Minute': [0xa, ['unsigned short']],
1618     'Second': [0xc, ['unsigned short']],   1751     'Second': [0xc, ['unsigned short']],
1619     'Milliseconds': [0xe, ['unsigned short']],   1752     'Milliseconds': [0xe, ['unsigned short']],
1620 }],   1753 }],
      1754   '_ETW_WMITRACE_WORK': [ 0xf0, {
      1755     'LoggerId': [0x0, ['unsigned long']],
      1756     'LoggerName': [0x8, ['array', 65, ['unsigned char']]],
      1757     'MatchAny': [0x8, ['unsigned long long']],
      1758     'MatchAll': [0x10, ['unsigned long long']],
      1759     'EnableProperty': [0x18, ['unsigned long']],
      1760     'Guid': [0x1c, ['_GUID']],
      1761     'Level': [0x2c, ['unsigned char']],
      1762     'FileName': [0x49, ['array', 129, ['unsigned char']]],
      1763     'MaximumFileSize': [0xcc, ['unsigned long']],
      1764     'MinBuffers': [0xd0, ['unsigned long']],
      1765     'MaxBuffers': [0xd4, ['unsigned long']],
      1766     'BufferSize': [0xd8, ['unsigned long']],
      1767     'Mode': [0xdc, ['unsigned long']],
      1768     'FlushTimer': [0xe0, ['unsigned long']],
      1769     'Status': [0xe8, ['long']],
      1770 }],
1621   '_EVENT_DATA_DESCRIPTOR': [ 0x10, {   1771   '_EVENT_DATA_DESCRIPTOR': [ 0x10, {
1622     'Ptr': [0x0, ['unsigned long long']],   1772     'Ptr': [0x0, ['unsigned long long']],
1623     'Size': [0x8, ['unsigned long']],   1773     'Size': [0x8, ['unsigned long']],
1624     'Reserved': [0xc, ['unsigned long']],   1774     'Reserved': [0xc, ['unsigned long']],
1625 }],   1775 }],
1626   '_EVENT_DESCRIPTOR': [ 0x10, {   1776   '_EVENT_DESCRIPTOR': [ 0x10, {
1627     'Id': [0x0, ['unsigned short']],   1777     'Id': [0x0, ['unsigned short']],
1628     'Version': [0x2, ['unsigned char']],   1778     'Version': [0x2, ['unsigned char']],
1629     'Channel': [0x3, ['unsigned char']],   1779     'Channel': [0x3, ['unsigned char']],
1630     'Level': [0x4, ['unsigned char']],   1780     'Level': [0x4, ['unsigned char']],
1631     'Opcode': [0x5, ['unsigned char']],   1781     'Opcode': [0x5, ['unsigned char']],
1632     'Task': [0x6, ['unsigned short']],   1782     'Task': [0x6, ['unsigned short']],
1633     'Keyword': [0x8, ['unsigned long long']],   1783     'Keyword': [0x8, ['unsigned long long']],
1634 }],   1784 }],
      1785   '_EVENT_FILTER_HEADER': [ 0x18, {
      1786     'Id': [0x0, ['unsigned short']],
      1787     'Version': [0x2, ['unsigned char']],
      1788     'Reserved': [0x3, ['array', 5, ['unsigned char']]],
      1789     'InstanceId': [0x8, ['unsigned long long']],
      1790     'Size': [0x10, ['unsigned long']],
      1791     'NextOffset': [0x14, ['unsigned long']],
      1792 }],
1635   '_EXCEPTION_POINTERS': [ 0x8, {   1793   '_EXCEPTION_POINTERS': [ 0x8, {
1636     'ExceptionRecord': [0x0, ['pointer', ['_EXCEPTION_RECORD']]],   1794     'ExceptionRecord': [0x0, ['pointer', ['_EXCEPTION_RECORD']]],
1637     'ContextRecord': [0x4, ['pointer', ['_CONTEXT']]],   1795     'ContextRecord': [0x4, ['pointer', ['_CONTEXT']]],
1638 }],   1796 }],
1639   '_EXCEPTION_RECORD': [ 0x50, {   1797   '_EXCEPTION_RECORD': [ 0x50, {
1640     'ExceptionCode': [0x0, ['long']],   1798     'ExceptionCode': [0x0, ['long']],
1641     'ExceptionFlags': [0x4, ['unsigned long']],   1799     'ExceptionFlags': [0x4, ['unsigned long']],
1642     'ExceptionRecord': [0x8, ['pointer', ['_EXCEPTION_RECORD']]],   1800     'ExceptionRecord': [0x8, ['pointer', ['_EXCEPTION_RECORD']]],
1643     'ExceptionAddress': [0xc, ['pointer', ['void']]],   1801     'ExceptionAddress': [0xc, ['pointer', ['void']]],
1644     'NumberParameters': [0x10, ['unsigned long']],   1802     'NumberParameters': [0x10, ['unsigned long']],
1645     'ExceptionInformation': [0x14, ['array', 15, ['unsigned long']]],   1803     'ExceptionInformation': [0x14, ['array', 15, ['unsigned long']]],
1646 }],   1804 }],
1647   '_EXCEPTION_RECORD32': [ 0x50, {   1805   '_EXCEPTION_RECORD32': [ 0x50, {
1648     'ExceptionCode': [0x0, ['long']],   1806     'ExceptionCode': [0x0, ['long']],
1649     'ExceptionFlags': [0x4, ['unsigned long']],   1807     'ExceptionFlags': [0x4, ['unsigned long']],
1650     'ExceptionRecord': [0x8, ['unsigned long']],   1808     'ExceptionRecord': [0x8, ['unsigned long']],
1651     'ExceptionAddress': [0xc, ['unsigned long']],   1809     'ExceptionAddress': [0xc, ['unsigned long']],
1652     'NumberParameters': [0x10, ['unsigned long']],   1810     'NumberParameters': [0x10, ['unsigned long']],
1653     'ExceptionInformation': [0x14, ['array', 15, ['unsigned long']]],   1811     'ExceptionInformation': [0x14, ['array', 15, ['unsigned long']]],
1654 }],   1812 }],
1655   '_EXCEPTION_RECORD64': [ 0x98, {   1813   '_EXCEPTION_RECORD64': [ 0x98, {
1656     'ExceptionCode': [0x0, ['long']],   1814     'ExceptionCode': [0x0, ['long']],
1657     'ExceptionFlags': [0x4, ['unsigned long']],   1815     'ExceptionFlags': [0x4, ['unsigned long']],
1658     'ExceptionRecord': [0x8, ['unsigned long long']],   1816     'ExceptionRecord': [0x8, ['unsigned long long']],
1659     'ExceptionAddress': [0x10, ['unsigned long long']],   1817     'ExceptionAddress': [0x10, ['unsigned long long']],
1660     'NumberParameters': [0x18, ['unsigned long']],   1818     'NumberParameters': [0x18, ['unsigned long']],
1661     '__unusedAlignment': [0x1c, ['unsigned long']],   1819     '__unusedAlignment': [0x1c, ['unsigned long']],
1662     'ExceptionInformation': [0x20, ['array', 15, ['unsigned long long']]],   1820     'ExceptionInformation': [0x20, ['array', 15, ['unsigned long long']]],
1663 }],   1821 }],
1664   '_EXCEPTION_REGISTRATION_RECORD': [ 0x8, {   1822   '_EXCEPTION_REGISTRATION_RECORD': [ 0x8, {
1665     'Next': [0x0, ['pointer', ['_EXCEPTION_REGISTRATION_RECORD']]],   1823     'Next': [0x0, ['pointer', ['_EXCEPTION_REGISTRATION_RECORD']]],
1666     'Handler': [0x4, ['pointer', ['void']]],   1824     'Handler': [0x4, ['pointer', ['void']]],
1667 }],   1825 }],
1668   '_EX_FAST_REF': [ 0x4, {   1826   '_EX_FAST_REF': [ 0x4, {
1669     'Object': [0x0, ['pointer', ['void']]],   1827     'Object': [0x0, ['pointer', ['void']]],
1670     'Value': [0x0, ['unsigned long']],   1828     'Value': [0x0, ['unsigned long']],
1671 }],   1829 }],
1672   '_EX_PUSH_LOCK': [ 0x4, {   1830   '_EX_PUSH_LOCK': [ 0x4, {
1673     'Ptr': [0x0, ['pointer', ['void']]],   1831     'Ptr': [0x0, ['pointer', ['void']]],
1674     'Value': [0x0, ['unsigned long']],   1832     'Value': [0x0, ['unsigned long']],
1675 }],   1833 }],
1676   '_EX_PUSH_LOCK_CACHE_AWARE': [ 0x80, {   1834   '_EX_PUSH_LOCK_CACHE_AWARE': [ 0x80, {
1677     'Locks': [0x0, ['array', 32, ['pointer', ['_EX_PUSH_LOCK']]]],   1835     'Locks': [0x0, ['array', 32, ['pointer', ['_EX_PUSH_LOCK']]]],
1678 }],   1836 }],
1679   '_EX_PUSH_LOCK_WAIT_BLOCK': [ 0x30, {   1837   '_EX_PUSH_LOCK_WAIT_BLOCK': [ 0x30, {
1680     'WakeEvent': [0x0, ['_KEVENT']],   1838     'WakeEvent': [0x0, ['_KEVENT']],
1681     'WakeGate': [0x0, ['_KGATE']],      
1682     'Next': [0x10, ['pointer', ['_EX_PUSH_LOCK_WAIT_BLOCK']]],   1839     'Next': [0x10, ['pointer', ['_EX_PUSH_LOCK_WAIT_BLOCK']]],
1683     'Last': [0x14, ['pointer', ['_EX_PUSH_LOCK_WAIT_BLOCK']]],   1840     'Last': [0x14, ['pointer', ['_EX_PUSH_LOCK_WAIT_BLOCK']]],
1684     'Previous': [0x18, ['pointer', ['_EX_PUSH_LOCK_WAIT_BLOCK']]],   1841     'Previous': [0x18, ['pointer', ['_EX_PUSH_LOCK_WAIT_BLOCK']]],
1685     'ShareCount': [0x1c, ['long']],   1842     'ShareCount': [0x1c, ['long']],
1686     'Flags': [0x20, ['long']],   1843     'Flags': [0x20, ['long']],
1687 }],   1844 }],
1688   '_EX_RUNDOWN_REF': [ 0x4, {   1845   '_EX_RUNDOWN_REF': [ 0x4, {
1689     'Count': [0x0, ['unsigned long']],   1846     'Count': [0x0, ['unsigned long']],
1690     'Ptr': [0x0, ['pointer', ['void']]],   1847     'Ptr': [0x0, ['pointer', ['void']]],
1691 }],   1848 }],
1692   '_EX_WORK_QUEUE': [ 0x3c, {   1849   '_EX_WORK_QUEUE': [ 0x3c, {
1693     'WorkerQueue': [0x0, ['_KQUEUE']],   1850     'WorkerQueue': [0x0, ['_KQUEUE']],
1694     'DynamicThreadCount': [0x28, ['unsigned long']],   1851     'DynamicThreadCount': [0x28, ['unsigned long']],
1695     'WorkItemsProcessed': [0x2c, ['unsigned long']],   1852     'WorkItemsProcessed': [0x2c, ['unsigned long']],
1696     'WorkItemsProcessedLastPass': [0x30, ['unsigned long']],   1853     'WorkItemsProcessedLastPass': [0x30, ['unsigned long']],
1697     'QueueDepthLastPass': [0x34, ['unsigned long']],   1854     'QueueDepthLastPass': [0x34, ['unsigned long']],
1698     'Info': [0x38, ['EX_QUEUE_WORKER_INFO']],   1855     'Info': [0x38, ['EX_QUEUE_WORKER_INFO']],
1699 }],   1856 }],
1700   '_FAST_IO_DISPATCH': [ 0x70, {   1857   '_FAST_IO_DISPATCH': [ 0x70, {
1701     'SizeOfFastIoDispatch': [0x0, ['unsigned long']],   1858     'SizeOfFastIoDispatch': [0x0, ['unsigned long']],
1702     'FastIoCheckIfPossible': [0x4, ['pointer', ['void']]],   1859     'FastIoCheckIfPossible': [0x4, ['pointer', ['void']]],
1703     'FastIoRead': [0x8, ['pointer', ['void']]],   1860     'FastIoRead': [0x8, ['pointer', ['void']]],
1704     'FastIoWrite': [0xc, ['pointer', ['void']]],   1861     'FastIoWrite': [0xc, ['pointer', ['void']]],
1705     'FastIoQueryBasicInfo': [0x10, ['pointer', ['void']]],   1862     'FastIoQueryBasicInfo': [0x10, ['pointer', ['void']]],
1706     'FastIoQueryStandardInfo': [0x14, ['pointer', ['void']]],   1863     'FastIoQueryStandardInfo': [0x14, ['pointer', ['void']]],
1707     'FastIoLock': [0x18, ['pointer', ['void']]],   1864     'FastIoLock': [0x18, ['pointer', ['void']]],
1708     'FastIoUnlockSingle': [0x1c, ['pointer', ['void']]],   1865     'FastIoUnlockSingle': [0x1c, ['pointer', ['void']]],
1709     'FastIoUnlockAll': [0x20, ['pointer', ['void']]],   1866     'FastIoUnlockAll': [0x20, ['pointer', ['void']]],
1710     'FastIoUnlockAllByKey': [0x24, ['pointer', ['void']]],   1867     'FastIoUnlockAllByKey': [0x24, ['pointer', ['void']]],
1711     'FastIoDeviceControl': [0x28, ['pointer', ['void']]],   1868     'FastIoDeviceControl': [0x28, ['pointer', ['void']]],
1712     'AcquireFileForNtCreateSection': [0x2c, ['pointer', ['void']]],   1869     'AcquireFileForNtCreateSection': [0x2c, ['pointer', ['void']]],
1713     'ReleaseFileForNtCreateSection': [0x30, ['pointer', ['void']]],   1870     'ReleaseFileForNtCreateSection': [0x30, ['pointer', ['void']]],
1714     'FastIoDetachDevice': [0x34, ['pointer', ['void']]],   1871     'FastIoDetachDevice': [0x34, ['pointer', ['void']]],
1715     'FastIoQueryNetworkOpenInfo': [0x38, ['pointer', ['void']]],   1872     'FastIoQueryNetworkOpenInfo': [0x38, ['pointer', ['void']]],
1716     'AcquireForModWrite': [0x3c, ['pointer', ['void']]],   1873     'AcquireForModWrite': [0x3c, ['pointer', ['void']]],
1717     'MdlRead': [0x40, ['pointer', ['void']]],   1874     'MdlRead': [0x40, ['pointer', ['void']]],
1718     'MdlReadComplete': [0x44, ['pointer', ['void']]],   1875     'MdlReadComplete': [0x44, ['pointer', ['void']]],
1719     'PrepareMdlWrite': [0x48, ['pointer', ['void']]],   1876     'PrepareMdlWrite': [0x48, ['pointer', ['void']]],
1720     'MdlWriteComplete': [0x4c, ['pointer', ['void']]],   1877     'MdlWriteComplete': [0x4c, ['pointer', ['void']]],
1721     'FastIoReadCompressed': [0x50, ['pointer', ['void']]],   1878     'FastIoReadCompressed': [0x50, ['pointer', ['void']]],
1722     'FastIoWriteCompressed': [0x54, ['pointer', ['void']]],   1879     'FastIoWriteCompressed': [0x54, ['pointer', ['void']]],
1723     'MdlReadCompleteCompressed': [0x58, ['pointer', ['void']]],   1880     'MdlReadCompleteCompressed': [0x58, ['pointer', ['void']]],
1724     'MdlWriteCompleteCompressed': [0x5c, ['pointer', ['void']]],   1881     'MdlWriteCompleteCompressed': [0x5c, ['pointer', ['void']]],
1725     'FastIoQueryOpen': [0x60, ['pointer', ['void']]],   1882     'FastIoQueryOpen': [0x60, ['pointer', ['void']]],
1726     'ReleaseForModWrite': [0x64, ['pointer', ['void']]],   1883     'ReleaseForModWrite': [0x64, ['pointer', ['void']]],
1727     'AcquireForCcFlush': [0x68, ['pointer', ['void']]],   1884     'AcquireForCcFlush': [0x68, ['pointer', ['void']]],
1728     'ReleaseForCcFlush': [0x6c, ['pointer', ['void']]],   1885     'ReleaseForCcFlush': [0x6c, ['pointer', ['void']]],
1729 }],   1886 }],
1730   '_FAST_MUTEX': [ 0x20, {   1887   '_FAST_MUTEX': [ 0x20, {
1731     'Count': [0x0, ['long']],   1888     'Count': [0x0, ['long']],
1732     'Owner': [0x4, ['pointer', ['_KTHREAD']]],   1889     'Owner': [0x4, ['pointer', ['_KTHREAD']]],
1733     'Contention': [0x8, ['unsigned long']],   1890     'Contention': [0x8, ['unsigned long']],
1734     'Gate': [0xc, ['_KEVENT']],   1891     'Event': [0xc, ['_KEVENT']],
1735     'OldIrql': [0x1c, ['unsigned long']],   1892     'OldIrql': [0x1c, ['unsigned long']],
1736 }],   1893 }],
1737   '_FILE_BASIC_INFORMATION': [ 0x28, {   1894   '_FILE_BASIC_INFORMATION': [ 0x28, {
1738     'CreationTime': [0x0, ['_LARGE_INTEGER']],   1895     'CreationTime': [0x0, ['_LARGE_INTEGER']],
1739     'LastAccessTime': [0x8, ['_LARGE_INTEGER']],   1896     'LastAccessTime': [0x8, ['_LARGE_INTEGER']],
1740     'LastWriteTime': [0x10, ['_LARGE_INTEGER']],   1897     'LastWriteTime': [0x10, ['_LARGE_INTEGER']],
1741     'ChangeTime': [0x18, ['_LARGE_INTEGER']],   1898     'ChangeTime': [0x18, ['_LARGE_INTEGER']],
1742     'FileAttributes': [0x20, ['unsigned long']],   1899     'FileAttributes': [0x20, ['unsigned long']],
1743 }],   1900 }],
1744   '_FILE_GET_QUOTA_INFORMATION': [ 0x14, {   1901   '_FILE_GET_QUOTA_INFORMATION': [ 0x14, {
1745     'NextEntryOffset': [0x0, ['unsigned long']],   1902     'NextEntryOffset': [0x0, ['unsigned long']],
1746     'SidLength': [0x4, ['unsigned long']],   1903     'SidLength': [0x4, ['unsigned long']],
1747     'Sid': [0x8, ['_SID']],   1904     'Sid': [0x8, ['_SID']],
1748 }],   1905 }],
1749   '_FILE_NETWORK_OPEN_INFORMATION': [ 0x38, {   1906   '_FILE_NETWORK_OPEN_INFORMATION': [ 0x38, {
1750     'CreationTime': [0x0, ['_LARGE_INTEGER']],   1907     'CreationTime': [0x0, ['_LARGE_INTEGER']],
1751     'LastAccessTime': [0x8, ['_LARGE_INTEGER']],   1908     'LastAccessTime': [0x8, ['_LARGE_INTEGER']],
1752     'LastWriteTime': [0x10, ['_LARGE_INTEGER']],   1909     'LastWriteTime': [0x10, ['_LARGE_INTEGER']],
1753     'ChangeTime': [0x18, ['_LARGE_INTEGER']],   1910     'ChangeTime': [0x18, ['_LARGE_INTEGER']],
1754     'AllocationSize': [0x20, ['_LARGE_INTEGER']],   1911     'AllocationSize': [0x20, ['_LARGE_INTEGER']],
1755     'EndOfFile': [0x28, ['_LARGE_INTEGER']],   1912     'EndOfFile': [0x28, ['_LARGE_INTEGER']],
1756     'FileAttributes': [0x30, ['unsigned long']],   1913     'FileAttributes': [0x30, ['unsigned long']],
1757 }],   1914 }],
1758   '_FILE_OBJECT': [ 0x80, {   1915   '_FILE_OBJECT': [ 0x80, {
1759     'Type': [0x0, ['short']],   1916     'Type': [0x0, ['short']],
1760     'Size': [0x2, ['short']],   1917     'Size': [0x2, ['short']],
1761     'DeviceObject': [0x4, ['pointer', ['_DEVICE_OBJECT']]],   1918     'DeviceObject': [0x4, ['pointer', ['_DEVICE_OBJECT']]],
1762     'Vpb': [0x8, ['pointer', ['_VPB']]],   1919     'Vpb': [0x8, ['pointer', ['_VPB']]],
1763     'FsContext': [0xc, ['pointer', ['void']]],   1920     'FsContext': [0xc, ['pointer', ['void']]],
1764     'FsContext2': [0x10, ['pointer', ['void']]],   1921     'FsContext2': [0x10, ['pointer', ['void']]],
1765     'SectionObjectPointer': [0x14, ['pointer', ['_SECTION_OBJECT_POINTERS']]],   1922     'SectionObjectPointer': [0x14, ['pointer', ['_SECTION_OBJECT_POINTERS']]],
1766     'PrivateCacheMap': [0x18, ['pointer', ['void']]],   1923     'PrivateCacheMap': [0x18, ['pointer', ['void']]],
1767     'FinalStatus': [0x1c, ['long']],   1924     'FinalStatus': [0x1c, ['long']],
1768     'RelatedFileObject': [0x20, ['pointer', ['_FILE_OBJECT']]],   1925     'RelatedFileObject': [0x20, ['pointer', ['_FILE_OBJECT']]],
1769     'LockOperation': [0x24, ['unsigned char']],   1926     'LockOperation': [0x24, ['unsigned char']],
1770     'DeletePending': [0x25, ['unsigned char']],   1927     'DeletePending': [0x25, ['unsigned char']],
1771     'ReadAccess': [0x26, ['unsigned char']],   1928     'ReadAccess': [0x26, ['unsigned char']],
1772     'WriteAccess': [0x27, ['unsigned char']],   1929     'WriteAccess': [0x27, ['unsigned char']],
1773     'DeleteAccess': [0x28, ['unsigned char']],   1930     'DeleteAccess': [0x28, ['unsigned char']],
1774     'SharedRead': [0x29, ['unsigned char']],   1931     'SharedRead': [0x29, ['unsigned char']],
1775     'SharedWrite': [0x2a, ['unsigned char']],   1932     'SharedWrite': [0x2a, ['unsigned char']],
1776     'SharedDelete': [0x2b, ['unsigned char']],   1933     'SharedDelete': [0x2b, ['unsigned char']],
1777     'Flags': [0x2c, ['unsigned long']],   1934     'Flags': [0x2c, ['unsigned long']],
1778     'FileName': [0x30, ['_UNICODE_STRING']],   1935     'FileName': [0x30, ['_UNICODE_STRING']],
1779     'CurrentByteOffset': [0x38, ['_LARGE_INTEGER']],   1936     'CurrentByteOffset': [0x38, ['_LARGE_INTEGER']],
1780     'Waiters': [0x40, ['unsigned long']],   1937     'Waiters': [0x40, ['unsigned long']],
1781     'Busy': [0x44, ['unsigned long']],   1938     'Busy': [0x44, ['unsigned long']],
1782     'LastLock': [0x48, ['pointer', ['void']]],   1939     'LastLock': [0x48, ['pointer', ['void']]],
1783     'Lock': [0x4c, ['_KEVENT']],   1940     'Lock': [0x4c, ['_KEVENT']],
1784     'Event': [0x5c, ['_KEVENT']],   1941     'Event': [0x5c, ['_KEVENT']],
1785     'CompletionContext': [0x6c, ['pointer', ['_IO_COMPLETION_CONTEXT']]],   1942     'CompletionContext': [0x6c, ['pointer', ['_IO_COMPLETION_CONTEXT']]],
1786     'IrpListLock': [0x70, ['unsigned long']],   1943     'IrpListLock': [0x70, ['unsigned long']],
1787     'IrpList': [0x74, ['_LIST_ENTRY']],   1944     'IrpList': [0x74, ['_LIST_ENTRY']],
1788     'FileObjectExtension': [0x7c, ['pointer', ['void']]],   1945     'FileObjectExtension': [0x7c, ['pointer', ['void']]],
1789 }],   1946 }],
1790   '_FILE_STANDARD_INFORMATION': [ 0x18, {   1947   '_FILE_STANDARD_INFORMATION': [ 0x18, {
1791     'AllocationSize': [0x0, ['_LARGE_INTEGER']],   1948     'AllocationSize': [0x0, ['_LARGE_INTEGER']],
1792     'EndOfFile': [0x8, ['_LARGE_INTEGER']],   1949     'EndOfFile': [0x8, ['_LARGE_INTEGER']],
1793     'NumberOfLinks': [0x10, ['unsigned long']],   1950     'NumberOfLinks': [0x10, ['unsigned long']],
1794     'DeletePending': [0x14, ['unsigned char']],   1951     'DeletePending': [0x14, ['unsigned char']],
1795     'Directory': [0x15, ['unsigned char']],   1952     'Directory': [0x15, ['unsigned char']],
1796 }],   1953 }],
1797   '_FIRMWARE_INFORMATION_LOADER_BLOCK': [ 0x14, {   1954   '_FIRMWARE_INFORMATION_LOADER_BLOCK': [ 0x14, {
1798     'u': [0x4, ['unnamed_939b3b3e3c5b2d930f62927c625e986b']],   1955     'u': [0x4, ['unnamed_939b3b3e3c5b2d930f62927c625e986b']],
1799 }],   1956 }],
1800   '_FLOATING_SAVE_AREA': [ 0x70, {   1957   '_FLOATING_SAVE_AREA': [ 0x70, {
1801     'ControlWord': [0x0, ['unsigned long']],   1958     'ControlWord': [0x0, ['unsigned long']],
1802     'StatusWord': [0x4, ['unsigned long']],   1959     'StatusWord': [0x4, ['unsigned long']],
1803     'TagWord': [0x8, ['unsigned long']],   1960     'TagWord': [0x8, ['unsigned long']],
1804     'ErrorOffset': [0xc, ['unsigned long']],   1961     'ErrorOffset': [0xc, ['unsigned long']],
1805     'ErrorSelector': [0x10, ['unsigned long']],   1962     'ErrorSelector': [0x10, ['unsigned long']],
1806     'DataOffset': [0x14, ['unsigned long']],   1963     'DataOffset': [0x14, ['unsigned long']],
1807     'DataSelector': [0x18, ['unsigned long']],   1964     'DataSelector': [0x18, ['unsigned long']],
1808     'RegisterArea': [0x1c, ['array', 80, ['unsigned char']]],   1965     'RegisterArea': [0x1c, ['array', 80, ['unsigned char']]],
1809     'Cr0NpxState': [0x6c, ['unsigned long']],   1966     'Cr0NpxState': [0x6c, ['unsigned long']],
1810 }],   1967 }],
1811   '_FNSAVE_FORMAT': [ 0x6c, {   1968   '_FNSAVE_FORMAT': [ 0x6c, {
1812     'ControlWord': [0x0, ['unsigned long']],   1969     'ControlWord': [0x0, ['unsigned long']],
1813     'StatusWord': [0x4, ['unsigned long']],   1970     'StatusWord': [0x4, ['unsigned long']],
1814     'TagWord': [0x8, ['unsigned long']],   1971     'TagWord': [0x8, ['unsigned long']],
1815     'ErrorOffset': [0xc, ['unsigned long']],   1972     'ErrorOffset': [0xc, ['unsigned long']],
1816     'ErrorSelector': [0x10, ['unsigned long']],   1973     'ErrorSelector': [0x10, ['unsigned long']],
1817     'DataOffset': [0x14, ['unsigned long']],   1974     'DataOffset': [0x14, ['unsigned long']],
1818     'DataSelector': [0x18, ['unsigned long']],   1975     'DataSelector': [0x18, ['unsigned long']],
1819     'RegisterArea': [0x1c, ['array', 80, ['unsigned char']]],   1976     'RegisterArea': [0x1c, ['array', 80, ['unsigned char']]],
1820 }],   1977 }],
1821   '_FREE_DISPLAY': [ 0xc, {   1978   '_FREE_DISPLAY': [ 0xc, {
1822     'RealVectorSize': [0x0, ['unsigned long']],   1979     'RealVectorSize': [0x0, ['unsigned long']],
1823     'Display': [0x4, ['_RTL_BITMAP']],   1980     'Display': [0x4, ['_RTL_BITMAP']],
1824 }],   1981 }],
      1982   '_FSRTL_ADVANCED_FCB_HEADER': [ 0x40, {
      1983     'NodeTypeCode': [0x0, ['short']],
      1984     'NodeByteSize': [0x2, ['short']],
      1985     'Flags': [0x4, ['unsigned char']],
      1986     'IsFastIoPossible': [0x5, ['unsigned char']],
      1987     'Flags2': [0x6, ['unsigned char']],
      1988     'Resource': [0x8, ['pointer', ['_ERESOURCE']]],
      1989     'PagingIoResource': [0xc, ['pointer', ['_ERESOURCE']]],
      1990     'AllocationSize': [0x10, ['_LARGE_INTEGER']],
      1991     'FileSize': [0x18, ['_LARGE_INTEGER']],
      1992     'ValidDataLength': [0x20, ['_LARGE_INTEGER']],
      1993     'FastMutex': [0x28, ['pointer', ['_FAST_MUTEX']]],
      1994     'FilterContexts': [0x2c, ['_LIST_ENTRY']],
      1995     'PushLock': [0x34, ['_EX_PUSH_LOCK']],
      1996     'FileContextSupportPointer': [0x38, ['pointer', ['pointer', ['void']]]],
      1997 }],
1825   '_FS_FILTER_CALLBACKS': [ 0x38, {   1998   '_FS_FILTER_CALLBACKS': [ 0x38, {
1826     'SizeOfFsFilterCallbacks': [0x0, ['unsigned long']],   1999     'SizeOfFsFilterCallbacks': [0x0, ['unsigned long']],
1827     'Reserved': [0x4, ['unsigned long']],   2000     'Reserved': [0x4, ['unsigned long']],
1828     'PreAcquireForSectionSynchronization': [0x8, ['pointer', ['void']]],   2001     'PreAcquireForSectionSynchronization': [0x8, ['pointer', ['void']]],
1829     'PostAcquireForSectionSynchronization': [0xc, ['pointer', ['void']]],   2002     'PostAcquireForSectionSynchronization': [0xc, ['pointer', ['void']]],
1830     'PreReleaseForSectionSynchronization': [0x10, ['pointer', ['void']]],   2003     'PreReleaseForSectionSynchronization': [0x10, ['pointer', ['void']]],
1831     'PostReleaseForSectionSynchronization': [0x14, ['pointer', ['void']]],   2004     'PostReleaseForSectionSynchronization': [0x14, ['pointer', ['void']]],
1832     'PreAcquireForCcFlush': [0x18, ['pointer', ['void']]],   2005     'PreAcquireForCcFlush': [0x18, ['pointer', ['void']]],
1833     'PostAcquireForCcFlush': [0x1c, ['pointer', ['void']]],   2006     'PostAcquireForCcFlush': [0x1c, ['pointer', ['void']]],
1834     'PreReleaseForCcFlush': [0x20, ['pointer', ['void']]],   2007     'PreReleaseForCcFlush': [0x20, ['pointer', ['void']]],
1835     'PostReleaseForCcFlush': [0x24, ['pointer', ['void']]],   2008     'PostReleaseForCcFlush': [0x24, ['pointer', ['void']]],
1836     'PreAcquireForModifiedPageWriter': [0x28, ['pointer', ['void']]],   2009     'PreAcquireForModifiedPageWriter': [0x28, ['pointer', ['void']]],
1837     'PostAcquireForModifiedPageWriter': [0x2c, ['pointer', ['void']]],   2010     'PostAcquireForModifiedPageWriter': [0x2c, ['pointer', ['void']]],
1838     'PreReleaseForModifiedPageWriter': [0x30, ['pointer', ['void']]],   2011     'PreReleaseForModifiedPageWriter': [0x30, ['pointer', ['void']]],
1839     'PostReleaseForModifiedPageWriter': [0x34, ['pointer', ['void']]],   2012     'PostReleaseForModifiedPageWriter': [0x34, ['pointer', ['void']]],
1840 }],   2013 }],
1841   '_FS_FILTER_CALLBACK_DATA': [ 0x24, {   2014   '_FS_FILTER_CALLBACK_DATA': [ 0x24, {
1842     'SizeOfFsFilterCallbackData': [0x0, ['unsigned long']],   2015     'SizeOfFsFilterCallbackData': [0x0, ['unsigned long']],
1843     'Operation': [0x4, ['unsigned char']],   2016     'Operation': [0x4, ['unsigned char']],
1844     'Reserved': [0x5, ['unsigned char']],   2017     'Reserved': [0x5, ['unsigned char']],
1845     'DeviceObject': [0x8, ['pointer', ['_DEVICE_OBJECT']]],   2018     'DeviceObject': [0x8, ['pointer', ['_DEVICE_OBJECT']]],
1846     'FileObject': [0xc, ['pointer', ['_FILE_OBJECT']]],   2019     'FileObject': [0xc, ['pointer', ['_FILE_OBJECT']]],
1847     'Parameters': [0x10, ['_FS_FILTER_PARAMETERS']],   2020     'Parameters': [0x10, ['_FS_FILTER_PARAMETERS']],
1848 }],   2021 }],
1849   '_FS_FILTER_PARAMETERS': [ 0x14, {   2022   '_FS_FILTER_PARAMETERS': [ 0x14, {
1850     'AcquireForModifiedPageWriter': [0x0, ['unnamed_0dab96edaa36edd978b50390e761504b']],   2023     'AcquireForModifiedPageWriter': [0x0, ['unnamed_0dab96edaa36edd978b50390e761504b']],
1851     'NotifyStreamFileObject': [0x0, ['unnamed_d9ce9b5fe28cdf433cbc0a97a4fce760']],   2024     'NotifyStreamFileObject': [0x0, ['unnamed_d9ce9b5fe28cdf433cbc0a97a4fce760']],
1852     'ReleaseForModifiedPageWriter': [0x0, ['unnamed_40c16b14a6933f79112aab3716cfb5f2']],   2025     'ReleaseForModifiedPageWriter': [0x0, ['unnamed_40c16b14a6933f79112aab3716cfb5f2']],
1853     'AcquireForSectionSynchronization': [0x0, ['unnamed_5e248afce51ed5628bacae7722ea109f']],   2026     'AcquireForSectionSynchronization': [0x0, ['unnamed_5e248afce51ed5628bacae7722ea109f']],
1854     'Others': [0x0, ['unnamed_99d0f38cc761b140bb36425556eb0da4']],   2027     'Others': [0x0, ['unnamed_99d0f38cc761b140bb36425556eb0da4']],
1855 }],   2028 }],
1856   '_FXSAVE_FORMAT': [ 0x208, {   2029   '_FXSAVE_FORMAT': [ 0x1e0, {
1857     'ControlWord': [0x0, ['unsigned short']],   2030     'ControlWord': [0x0, ['unsigned short']],
1858     'StatusWord': [0x2, ['unsigned short']],   2031     'StatusWord': [0x2, ['unsigned short']],
1859     'TagWord': [0x4, ['unsigned short']],   2032     'TagWord': [0x4, ['unsigned short']],
1860     'ErrorOpcode': [0x6, ['unsigned short']],   2033     'ErrorOpcode': [0x6, ['unsigned short']],
1861     'ErrorOffset': [0x8, ['unsigned long']],   2034     'ErrorOffset': [0x8, ['unsigned long']],
1862     'ErrorSelector': [0xc, ['unsigned long']],   2035     'ErrorSelector': [0xc, ['unsigned long']],
1863     'DataOffset': [0x10, ['unsigned long']],   2036     'DataOffset': [0x10, ['unsigned long']],
1864     'DataSelector': [0x14, ['unsigned long']],   2037     'DataSelector': [0x14, ['unsigned long']],
1865     'MXCsr': [0x18, ['unsigned long']],   2038     'MXCsr': [0x18, ['unsigned long']],
1866     'MXCsrMask': [0x1c, ['unsigned long']],   2039     'MXCsrMask': [0x1c, ['unsigned long']],
1867     'RegisterArea': [0x20, ['array', 128, ['unsigned char']]],   2040     'RegisterArea': [0x20, ['array', 128, ['unsigned char']]],
1868     'Reserved3': [0xa0, ['array', 128, ['unsigned char']]],   2041     'Reserved3': [0xa0, ['array', 128, ['unsigned char']]],
1869     'Reserved4': [0x120, ['array', 224, ['unsigned char']]],   2042     'Reserved4': [0x120, ['array', 192, ['unsigned char']]],
1870     'Align16Byte': [0x200, ['array', 8, ['unsigned char']]],      
1871 }],      
1872   '_FX_SAVE_AREA': [ 0x210, {      
1873     'U': [0x0, ['unnamed_3aa7cbd418fd0ea93c2a22be11ed4825']],      
1874     'NpxSavedCpu': [0x208, ['unsigned long']],      
1875     'Cr0NpxState': [0x20c, ['unsigned long']],      
1876 }],   2043 }],
1877   '_GDI_TEB_BATCH': [ 0x4e0, {   2044   '_GDI_TEB_BATCH': [ 0x4e0, {
1878     'Offset': [0x0, ['unsigned long']],   2045     'Offset': [0x0, ['unsigned long']],
1879     'HDC': [0x4, ['unsigned long']],   2046     'HDC': [0x4, ['unsigned long']],
1880     'Buffer': [0x8, ['array', 310, ['unsigned long']]],   2047     'Buffer': [0x8, ['array', 310, ['unsigned long']]],
1881 }],   2048 }],
      2049   '_GDI_TEB_BATCH32': [ 0x4e0, {
      2050     'Offset': [0x0, ['unsigned long']],
      2051     'HDC': [0x4, ['unsigned long']],
      2052     'Buffer': [0x8, ['array', 310, ['unsigned long']]],
      2053 }],
      2054   '_GDI_TEB_BATCH64': [ 0x4e8, {
      2055     'Offset': [0x0, ['unsigned long']],
      2056     'HDC': [0x8, ['unsigned long long']],
      2057     'Buffer': [0x10, ['array', 310, ['unsigned long']]],
      2058 }],
1882   '_GENERAL_LOOKASIDE': [ 0x80, {   2059   '_GENERAL_LOOKASIDE': [ 0x80, {
1883     'ListHead': [0x0, ['_SLIST_HEADER']],   2060     'ListHead': [0x0, ['_SLIST_HEADER']],
1884     'SingleListHead': [0x0, ['_SINGLE_LIST_ENTRY']],   2061     'SingleListHead': [0x0, ['_SINGLE_LIST_ENTRY']],
1885     'Depth': [0x8, ['unsigned short']],   2062     'Depth': [0x8, ['unsigned short']],
1886     'MaximumDepth': [0xa, ['unsigned short']],   2063     'MaximumDepth': [0xa, ['unsigned short']],
1887     'TotalAllocates': [0xc, ['unsigned long']],   2064     'TotalAllocates': [0xc, ['unsigned long']],
1888     'AllocateHits': [0x10, ['unsigned long']],   2065     'AllocateHits': [0x10, ['unsigned long']],
1889     'AllocateMisses': [0x10, ['unsigned long']],   2066     'AllocateMisses': [0x10, ['unsigned long']],
1890     'TotalFrees': [0x14, ['unsigned long']],   2067     'TotalFrees': [0x14, ['unsigned long']],
1891     'FreeHits': [0x18, ['unsigned long']],   2068     'FreeHits': [0x18, ['unsigned long']],
1892     'FreeMisses': [0x18, ['unsigned long']],   2069     'FreeMisses': [0x18, ['unsigned long']],
1893     'Tag': [0x20, ['unsigned long']],   2070     'Tag': [0x20, ['unsigned long']],
1894     'Size': [0x24, ['unsigned long']],   2071     'Size': [0x24, ['unsigned long']],
1895     'AllocateEx': [0x28, ['pointer', ['void']]],   2072     'AllocateEx': [0x28, ['pointer', ['void']]],
1896     'Allocate': [0x28, ['pointer', ['void']]],   2073     'Allocate': [0x28, ['pointer', ['void']]],
1897     'Free': [0x2c, ['pointer', ['void']]],   2074     'Free': [0x2c, ['pointer', ['void']]],
1898     'FreeEx': [0x2c, ['pointer', ['void']]],   2075     'FreeEx': [0x2c, ['pointer', ['void']]],
1899     'ListEntry': [0x30, ['_LIST_ENTRY']],   2076     'ListEntry': [0x30, ['_LIST_ENTRY']],
1900     'LastTotalAllocates': [0x38, ['unsigned long']],   2077     'LastTotalAllocates': [0x38, ['unsigned long']],
1901     'LastAllocateHits': [0x3c, ['unsigned long']],   2078     'LastAllocateHits': [0x3c, ['unsigned long']],
1902     'LastAllocateMisses': [0x3c, ['unsigned long']],   2079     'LastAllocateMisses': [0x3c, ['unsigned long']],
1903     'Future': [0x40, ['array', 2, ['unsigned long']]],   2080     'Future': [0x40, ['array', 2, ['unsigned long']]],
1904 }],   2081 }],
1905   '_GENERAL_LOOKASIDE_POOL': [ 0x48, {   2082   '_GENERAL_LOOKASIDE_POOL': [ 0x48, {
1906     'ListHead': [0x0, ['_SLIST_HEADER']],   2083     'ListHead': [0x0, ['_SLIST_HEADER']],
1907     'SingleListHead': [0x0, ['_SINGLE_LIST_ENTRY']],   2084     'SingleListHead': [0x0, ['_SINGLE_LIST_ENTRY']],
1908     'Depth': [0x8, ['unsigned short']],   2085     'Depth': [0x8, ['unsigned short']],
1909     'MaximumDepth': [0xa, ['unsigned short']],   2086     'MaximumDepth': [0xa, ['unsigned short']],
1910     'TotalAllocates': [0xc, ['unsigned long']],   2087     'TotalAllocates': [0xc, ['unsigned long']],
1911     'AllocateHits': [0x10, ['unsigned long']],   2088     'AllocateHits': [0x10, ['unsigned long']],
1912     'AllocateMisses': [0x10, ['unsigned long']],   2089     'AllocateMisses': [0x10, ['unsigned long']],
1913     'TotalFrees': [0x14, ['unsigned long']],   2090     'TotalFrees': [0x14, ['unsigned long']],
1914     'FreeHits': [0x18, ['unsigned long']],   2091     'FreeHits': [0x18, ['unsigned long']],
1915     'FreeMisses': [0x18, ['unsigned long']],   2092     'FreeMisses': [0x18, ['unsigned long']],
1916     'Tag': [0x20, ['unsigned long']],   2093     'Tag': [0x20, ['unsigned long']],
1917     'Size': [0x24, ['unsigned long']],   2094     'Size': [0x24, ['unsigned long']],
1918     'AllocateEx': [0x28, ['pointer', ['void']]],   2095     'AllocateEx': [0x28, ['pointer', ['void']]],
1919     'Allocate': [0x28, ['pointer', ['void']]],   2096     'Allocate': [0x28, ['pointer', ['void']]],
1920     'Free': [0x2c, ['pointer', ['void']]],   2097     'Free': [0x2c, ['pointer', ['void']]],
1921     'FreeEx': [0x2c, ['pointer', ['void']]],   2098     'FreeEx': [0x2c, ['pointer', ['void']]],
1922     'ListEntry': [0x30, ['_LIST_ENTRY']],   2099     'ListEntry': [0x30, ['_LIST_ENTRY']],
1923     'LastTotalAllocates': [0x38, ['unsigned long']],   2100     'LastTotalAllocates': [0x38, ['unsigned long']],
1924     'LastAllocateHits': [0x3c, ['unsigned long']],   2101     'LastAllocateHits': [0x3c, ['unsigned long']],
1925     'LastAllocateMisses': [0x3c, ['unsigned long']],   2102     'LastAllocateMisses': [0x3c, ['unsigned long']],
1926     'Future': [0x40, ['array', 2, ['unsigned long']]],   2103     'Future': [0x40, ['array', 2, ['unsigned long']]],
1927 }],   2104 }],
1928   '_GENERIC_MAPPING': [ 0x10, {   2105   '_GENERIC_MAPPING': [ 0x10, {
1929     'GenericRead': [0x0, ['unsigned long']],   2106     'GenericRead': [0x0, ['unsigned long']],
1930     'GenericWrite': [0x4, ['unsigned long']],   2107     'GenericWrite': [0x4, ['unsigned long']],
1931     'GenericExecute': [0x8, ['unsigned long']],   2108     'GenericExecute': [0x8, ['unsigned long']],
1932     'GenericAll': [0xc, ['unsigned long']],   2109     'GenericAll': [0xc, ['unsigned long']],
1933 }],   2110 }],
      2111   '_GROUP_AFFINITY': [ 0xc, {
      2112     'Mask': [0x0, ['unsigned long']],
      2113     'Group': [0x4, ['unsigned short']],
      2114     'Reserved': [0x6, ['array', 3, ['unsigned short']]],
      2115 }],
1934   '_GUID': [ 0x10, {   2116   '_GUID': [ 0x10, {
1935     'Data1': [0x0, ['unsigned long']],   2117     'Data1': [0x0, ['unsigned long']],
1936     'Data2': [0x4, ['unsigned short']],   2118     'Data2': [0x4, ['unsigned short']],
1937     'Data3': [0x6, ['unsigned short']],   2119     'Data3': [0x6, ['unsigned short']],
1938     'Data4': [0x8, ['array', 8, ['unsigned char']]],   2120     'Data4': [0x8, ['array', 8, ['unsigned char']]],
1939 }],   2121 }],
1940   '_HANDLE_TABLE': [ 0x38, {   2122   '_HANDLE_TABLE': [ 0x3c, {
1941     'TableCode': [0x0, ['unsigned long']],   2123     'TableCode': [0x0, ['unsigned long']],
1942     'QuotaProcess': [0x4, ['pointer', ['_EPROCESS']]],   2124     'QuotaProcess': [0x4, ['pointer', ['_EPROCESS']]],
1943     'UniqueProcessId': [0x8, ['pointer', ['void']]],   2125     'UniqueProcessId': [0x8, ['pointer', ['void']]],
1944     'HandleLock': [0xc, ['_EX_PUSH_LOCK']],   2126     'HandleLock': [0xc, ['_EX_PUSH_LOCK']],
1945     'HandleTableList': [0x10, ['_LIST_ENTRY']],   2127     'HandleTableList': [0x10, ['_LIST_ENTRY']],
1946     'HandleContentionEvent': [0x18, ['_EX_PUSH_LOCK']],   2128     'HandleContentionEvent': [0x18, ['_EX_PUSH_LOCK']],
1947     'DebugInfo': [0x1c, ['pointer', ['_HANDLE_TRACE_DEBUG_INFO']]],   2129     'DebugInfo': [0x1c, ['pointer', ['_HANDLE_TRACE_DEBUG_INFO']]],
1948     'ExtraInfoPages': [0x20, ['long']],   2130     'ExtraInfoPages': [0x20, ['long']],
1949     'Flags': [0x24, ['unsigned long']],   2131     'Flags': [0x24, ['unsigned long']],
1950     'FirstFreeHandle': [0x28, ['long']],   2132     'FirstFreeHandle': [0x28, ['unsigned long']],
1951     'LastFreeHandleEntry': [0x2c, ['pointer', ['_HANDLE_TABLE_ENTRY']]],   2133     'LastFreeHandleEntry': [0x2c, ['pointer', ['_HANDLE_TABLE_ENTRY']]],
1952     'HandleCount': [0x30, ['long']],   2134     'HandleCount': [0x30, ['unsigned long']],
1953     'NextHandleNeedingPool': [0x34, ['unsigned long']],   2135     'NextHandleNeedingPool': [0x34, ['unsigned long']],
      2136     'HandleCountHighWatermark': [0x38, ['unsigned long']],
1954 }],   2137 }],
1955   '_HANDLE_TABLE_ENTRY': [ 0x8, {   2138   '_HANDLE_TABLE_ENTRY': [ 0x8, {
1956     'ObAttributes': [0x0, ['unsigned long']],   2139     'ObAttributes': [0x0, ['unsigned long']],
1957     'InfoTable': [0x0, ['pointer', ['_HANDLE_TABLE_ENTRY_INFO']]],   2140     'InfoTable': [0x0, ['pointer', ['_HANDLE_TABLE_ENTRY_INFO']]],
1958     'Object': [0x0, ['pointer', ['void']]],   2141     'Object': [0x0, ['pointer', ['void']]],
1959     'Value': [0x0, ['unsigned long']],   2142     'Value': [0x0, ['unsigned long']],
1960     'GrantedAccessIndex': [0x4, ['unsigned short']],   2143     'GrantedAccessIndex': [0x4, ['unsigned short']],
1961     'NextFreeTableEntry': [0x4, ['long']],   2144     'NextFreeTableEntry': [0x4, ['unsigned long']],
1962     'GrantedAccess': [0x4, ['unsigned long']],   2145     'GrantedAccess': [0x4, ['unsigned long']],
1963     'CreatorBackTraceIndex': [0x6, ['unsigned short']],   2146     'CreatorBackTraceIndex': [0x6, ['unsigned short']],
1964 }],   2147 }],
1965   '_HANDLE_TABLE_ENTRY_INFO': [ 0x4, {   2148   '_HANDLE_TABLE_ENTRY_INFO': [ 0x4, {
1966     'AuditMask': [0x0, ['unsigned long']],   2149     'AuditMask': [0x0, ['unsigned long']],
1967 }],   2150 }],
1968   '_HANDLE_TRACE_DB_ENTRY': [ 0x50, {   2151   '_HANDLE_TRACE_DB_ENTRY': [ 0x50, {
1969     'ClientId': [0x0, ['_CLIENT_ID']],   2152     'ClientId': [0x0, ['_CLIENT_ID']],
1970     'Handle': [0x8, ['pointer', ['void']]],   2153     'Handle': [0x8, ['pointer', ['void']]],
1971     'Type': [0xc, ['unsigned long']],   2154     'Type': [0xc, ['unsigned long']],
1972     'StackTrace': [0x10, ['array', 16, ['pointer', ['void']]]],   2155     'StackTrace': [0x10, ['array', 16, ['pointer', ['void']]]],
1973 }],   2156 }],
1974   '_HANDLE_TRACE_DEBUG_INFO': [ 0x80, {   2157   '_HANDLE_TRACE_DEBUG_INFO': [ 0x80, {
1975     'RefCount': [0x0, ['long']],   2158     'RefCount': [0x0, ['long']],
1976     'TableSize': [0x4, ['unsigned long']],   2159     'TableSize': [0x4, ['unsigned long']],
1977     'BitMaskFlags': [0x8, ['unsigned long']],   2160     'BitMaskFlags': [0x8, ['unsigned long']],
1978     'CloseCompactionLock': [0xc, ['_FAST_MUTEX']],   2161     'CloseCompactionLock': [0xc, ['_FAST_MUTEX']],
1979     'CurrentStackIndex': [0x2c, ['unsigned long']],   2162     'CurrentStackIndex': [0x2c, ['unsigned long']],
1980     'TraceDb': [0x30, ['array', 1, ['_HANDLE_TRACE_DB_ENTRY']]],   2163     'TraceDb': [0x30, ['array', 1, ['_HANDLE_TRACE_DB_ENTRY']]],
1981 }],   2164 }],
1982   '_HARDWARE_PTE': [ 0x4, {   2165   '_HARDWARE_PTE': [ 0x8, {
      2166     'LowPart': [0x0, ['unsigned long']],
      2167     'HighPart': [0x4, ['unsigned long']],
1983 }],   2168 }],
1984   '_HBASE_BLOCK': [ 0x1000, {   2169   '_HBASE_BLOCK': [ 0x1000, {
1985     'Signature': [0x0, ['unsigned long']],   2170     'Signature': [0x0, ['unsigned long']],
1986     'Sequence1': [0x4, ['unsigned long']],   2171     'Sequence1': [0x4, ['unsigned long']],
1987     'Sequence2': [0x8, ['unsigned long']],   2172     'Sequence2': [0x8, ['unsigned long']],
1988     'TimeStamp': [0xc, ['_LARGE_INTEGER']],   2173     'TimeStamp': [0xc, ['_LARGE_INTEGER']],
1989     'Major': [0x14, ['unsigned long']],   2174     'Major': [0x14, ['unsigned long']],
1990     'Minor': [0x18, ['unsigned long']],   2175     'Minor': [0x18, ['unsigned long']],
1991     'Type': [0x1c, ['unsigned long']],   2176     'Type': [0x1c, ['unsigned long']],
1992     'Format': [0x20, ['unsigned long']],   2177     'Format': [0x20, ['unsigned long']],
1993     'RootCell': [0x24, ['unsigned long']],   2178     'RootCell': [0x24, ['unsigned long']],
1994     'Length': [0x28, ['unsigned long']],   2179     'Length': [0x28, ['unsigned long']],
1995     'Cluster': [0x2c, ['unsigned long']],   2180     'Cluster': [0x2c, ['unsigned long']],
1996     'FileName': [0x30, ['array', 64, ['unsigned char']]],   2181     'FileName': [0x30, ['array', 64, ['unsigned char']]],
1997     'RmId': [0x70, ['_GUID']],   2182     'RmId': [0x70, ['_GUID']],
1998     'LogId': [0x80, ['_GUID']],   2183     'LogId': [0x80, ['_GUID']],
1999     'Flags': [0x90, ['unsigned long']],   2184     'Flags': [0x90, ['unsigned long']],
2000     'TmId': [0x94, ['_GUID']],   2185     'TmId': [0x94, ['_GUID']],
2001     'GuidSignature': [0xa4, ['unsigned long']],   2186     'GuidSignature': [0xa4, ['unsigned long']],
2002     'Reserved1': [0xa8, ['array', 85, ['unsigned long']]],   2187     'Reserved1': [0xa8, ['array', 85, ['unsigned long']]],
2003     'CheckSum': [0x1fc, ['unsigned long']],   2188     'CheckSum': [0x1fc, ['unsigned long']],
2004     'Reserved2': [0x200, ['array', 882, ['unsigned long']]],   2189     'Reserved2': [0x200, ['array', 882, ['unsigned long']]],
2005     'ThawTmId': [0xfc8, ['_GUID']],   2190     'ThawTmId': [0xfc8, ['_GUID']],
2006     'ThawRmId': [0xfd8, ['_GUID']],   2191     'ThawRmId': [0xfd8, ['_GUID']],
2007     'ThawLogId': [0xfe8, ['_GUID']],   2192     'ThawLogId': [0xfe8, ['_GUID']],
2008     'BootType': [0xff8, ['unsigned long']],   2193     'BootType': [0xff8, ['unsigned long']],
2009     'BootRecover': [0xffc, ['unsigned long']],   2194     'BootRecover': [0xffc, ['unsigned long']],
2010 }],   2195 }],
      2196   '_HBIN': [ 0x20, {
      2197     'Signature': [0x0, ['unsigned long']],
      2198     'FileOffset': [0x4, ['unsigned long']],
      2199     'Size': [0x8, ['unsigned long']],
      2200     'Reserved1': [0xc, ['array', 2, ['unsigned long']]],
      2201     'TimeStamp': [0x14, ['_LARGE_INTEGER']],
      2202     'Spare': [0x1c, ['unsigned long']],
      2203 }],
      2204   '_HCELL': [ 0xc, {
      2205     'Size': [0x0, ['long']],
      2206     'u': [0x4, ['unnamed_5d7063d64e306ac97d5edd07f1bdb502']],
      2207 }],
2011   '_HEADLESS_LOADER_BLOCK': [ 0x34, {   2208   '_HEADLESS_LOADER_BLOCK': [ 0x34, {
2012     'UsedBiosSettings': [0x0, ['unsigned char']],   2209     'UsedBiosSettings': [0x0, ['unsigned char']],
2013     'DataBits': [0x1, ['unsigned char']],   2210     'DataBits': [0x1, ['unsigned char']],
2014     'StopBits': [0x2, ['unsigned char']],   2211     'StopBits': [0x2, ['unsigned char']],
2015     'Parity': [0x3, ['unsigned char']],   2212     'Parity': [0x3, ['unsigned char']],
2016     'BaudRate': [0x4, ['unsigned long']],   2213     'BaudRate': [0x4, ['unsigned long']],
2017     'PortNumber': [0x8, ['unsigned long']],   2214     'PortNumber': [0x8, ['unsigned long']],
2018     'PortAddress': [0xc, ['pointer', ['unsigned char']]],   2215     'PortAddress': [0xc, ['pointer', ['unsigned char']]],
2019     'PciDeviceId': [0x10, ['unsigned short']],   2216     'PciDeviceId': [0x10, ['unsigned short']],
2020     'PciVendorId': [0x12, ['unsigned short']],   2217     'PciVendorId': [0x12, ['unsigned short']],
2021     'PciBusNumber': [0x14, ['unsigned char']],   2218     'PciBusNumber': [0x14, ['unsigned char']],
2022     'PciBusSegment': [0x16, ['unsigned short']],   2219     'PciBusSegment': [0x16, ['unsigned short']],
2023     'PciSlotNumber': [0x18, ['unsigned char']],   2220     'PciSlotNumber': [0x18, ['unsigned char']],
2024     'PciFunctionNumber': [0x19, ['unsigned char']],   2221     'PciFunctionNumber': [0x19, ['unsigned char']],
2025     'PciFlags': [0x1c, ['unsigned long']],   2222     'PciFlags': [0x1c, ['unsigned long']],
2026     'SystemGUID': [0x20, ['_GUID']],   2223     'SystemGUID': [0x20, ['_GUID']],
2027     'IsMMIODevice': [0x30, ['unsigned char']],   2224     'IsMMIODevice': [0x30, ['unsigned char']],
2028     'TerminalType': [0x31, ['unsigned char']],   2225     'TerminalType': [0x31, ['unsigned char']],
2029 }],   2226 }],
2030   '_HEAP': [ 0x130, {   2227   '_HEAP': [ 0x138, {
2031     'Entry': [0x0, ['_HEAP_ENTRY']],   2228     'Entry': [0x0, ['_HEAP_ENTRY']],
2032     'SegmentSignature': [0x8, ['unsigned long']],   2229     'SegmentSignature': [0x8, ['unsigned long']],
2033     'SegmentFlags': [0xc, ['unsigned long']],   2230     'SegmentFlags': [0xc, ['unsigned long']],
2034     'SegmentListEntry': [0x10, ['_LIST_ENTRY']],   2231     'SegmentListEntry': [0x10, ['_LIST_ENTRY']],
2035     'Heap': [0x18, ['pointer', ['_HEAP']]],   2232     'Heap': [0x18, ['pointer', ['_HEAP']]],
2036     'BaseAddress': [0x1c, ['pointer', ['void']]],   2233     'BaseAddress': [0x1c, ['pointer', ['void']]],
2037     'NumberOfPages': [0x20, ['unsigned long']],   2234     'NumberOfPages': [0x20, ['unsigned long']],
2038     'FirstEntry': [0x24, ['pointer', ['_HEAP_ENTRY']]],   2235     'FirstEntry': [0x24, ['pointer', ['_HEAP_ENTRY']]],
2039     'LastValidEntry': [0x28, ['pointer', ['_HEAP_ENTRY']]],   2236     'LastValidEntry': [0x28, ['pointer', ['_HEAP_ENTRY']]],
2040     'NumberOfUnCommittedPages': [0x2c, ['unsigned long']],   2237     'NumberOfUnCommittedPages': [0x2c, ['unsigned long']],
2041     'NumberOfUnCommittedRanges': [0x30, ['unsigned long']],   2238     'NumberOfUnCommittedRanges': [0x30, ['unsigned long']],
2042     'SegmentAllocatorBackTraceIndex': [0x34, ['unsigned short']],   2239     'SegmentAllocatorBackTraceIndex': [0x34, ['unsigned short']],
2043     'Reserved': [0x36, ['unsigned short']],   2240     'Reserved': [0x36, ['unsigned short']],
2044     'UCRSegmentList': [0x38, ['_LIST_ENTRY']],   2241     'UCRSegmentList': [0x38, ['_LIST_ENTRY']],
2045     'Flags': [0x40, ['unsigned long']],   2242     'Flags': [0x40, ['unsigned long']],
2046     'ForceFlags': [0x44, ['unsigned long']],   2243     'ForceFlags': [0x44, ['unsigned long']],
2047     'CompatibilityFlags': [0x48, ['unsigned long']],   2244     'CompatibilityFlags': [0x48, ['unsigned long']],
2048     'EncodeFlagMask': [0x4c, ['unsigned long']],   2245     'EncodeFlagMask': [0x4c, ['unsigned long']],
2049     'Encoding': [0x50, ['_HEAP_ENTRY']],   2246     'Encoding': [0x50, ['_HEAP_ENTRY']],
2050     'PointerKey': [0x58, ['unsigned long']],   2247     'PointerKey': [0x58, ['unsigned long']],
2051     'Interceptor': [0x5c, ['unsigned long']],   2248     'Interceptor': [0x5c, ['unsigned long']],
2052     'VirtualMemoryThreshold': [0x60, ['unsigned long']],   2249     'VirtualMemoryThreshold': [0x60, ['unsigned long']],
2053     'Signature': [0x64, ['unsigned long']],   2250     'Signature': [0x64, ['unsigned long']],
2054     'SegmentReserve': [0x68, ['unsigned long']],   2251     'SegmentReserve': [0x68, ['unsigned long']],
2055     'SegmentCommit': [0x6c, ['unsigned long']],   2252     'SegmentCommit': [0x6c, ['unsigned long']],
2056     'DeCommitFreeBlockThreshold': [0x70, ['unsigned long']],   2253     'DeCommitFreeBlockThreshold': [0x70, ['unsigned long']],
2057     'DeCommitTotalFreeThreshold': [0x74, ['unsigned long']],   2254     'DeCommitTotalFreeThreshold': [0x74, ['unsigned long']],
2058     'TotalFreeSize': [0x78, ['unsigned long']],   2255     'TotalFreeSize': [0x78, ['unsigned long']],
2059     'MaximumAllocationSize': [0x7c, ['unsigned long']],   2256     'MaximumAllocationSize': [0x7c, ['unsigned long']],
2060     'ProcessHeapsListIndex': [0x80, ['unsigned short']],   2257     'ProcessHeapsListIndex': [0x80, ['unsigned short']],
2061     'HeaderValidateLength': [0x82, ['unsigned short']],   2258     'HeaderValidateLength': [0x82, ['unsigned short']],
2062     'HeaderValidateCopy': [0x84, ['pointer', ['void']]],   2259     'HeaderValidateCopy': [0x84, ['pointer', ['void']]],
2063     'NextAvailableTagIndex': [0x88, ['unsigned short']],   2260     'NextAvailableTagIndex': [0x88, ['unsigned short']],
2064     'MaximumTagIndex': [0x8a, ['unsigned short']],   2261     'MaximumTagIndex': [0x8a, ['unsigned short']],
2065     'TagEntries': [0x8c, ['pointer', ['_HEAP_TAG_ENTRY']]],   2262     'TagEntries': [0x8c, ['pointer', ['_HEAP_TAG_ENTRY']]],
2066     'UCRList': [0x90, ['_LIST_ENTRY']],   2263     'UCRList': [0x90, ['_LIST_ENTRY']],
2067     'AlignRound': [0x98, ['unsigned long']],   2264     'AlignRound': [0x98, ['unsigned long']],
2068     'AlignMask': [0x9c, ['unsigned long']],   2265     'AlignMask': [0x9c, ['unsigned long']],
2069     'VirtualAllocdBlocks': [0xa0, ['_LIST_ENTRY']],   2266     'VirtualAllocdBlocks': [0xa0, ['_LIST_ENTRY']],
2070     'SegmentList': [0xa8, ['_LIST_ENTRY']],   2267     'SegmentList': [0xa8, ['_LIST_ENTRY']],
2071     'AllocatorBackTraceIndex': [0xb0, ['unsigned short']],   2268     'AllocatorBackTraceIndex': [0xb0, ['unsigned short']],
2072     'NonDedicatedListLength': [0xb4, ['unsigned long']],   2269     'NonDedicatedListLength': [0xb4, ['unsigned long']],
2073     'BlocksIndex': [0xb8, ['pointer', ['void']]],   2270     'BlocksIndex': [0xb8, ['pointer', ['void']]],
2074     'UCRIndex': [0xbc, ['pointer', ['void']]],   2271     'UCRIndex': [0xbc, ['pointer', ['void']]],
2075     'PseudoTagEntries': [0xc0, ['pointer', ['_HEAP_PSEUDO_TAG_ENTRY']]],   2272     'PseudoTagEntries': [0xc0, ['pointer', ['_HEAP_PSEUDO_TAG_ENTRY']]],
2076     'FreeLists': [0xc4, ['_LIST_ENTRY']],   2273     'FreeLists': [0xc4, ['_LIST_ENTRY']],
2077     'LockVariable': [0xcc, ['pointer', ['_HEAP_LOCK']]],   2274     'LockVariable': [0xcc, ['pointer', ['_HEAP_LOCK']]],
2078     'CommitRoutine': [0xd0, ['pointer', ['void']]],   2275     'CommitRoutine': [0xd0, ['pointer', ['void']]],
2079     'FrontEndHeap': [0xd4, ['pointer', ['void']]],   2276     'FrontEndHeap': [0xd4, ['pointer', ['void']]],
2080     'FrontHeapLockCount': [0xd8, ['unsigned short']],   2277     'FrontHeapLockCount': [0xd8, ['unsigned short']],
2081     'FrontEndHeapType': [0xda, ['unsigned char']],   2278     'FrontEndHeapType': [0xda, ['unsigned char']],
2082     'Counters': [0xdc, ['_HEAP_COUNTERS']],   2279     'Counters': [0xdc, ['_HEAP_COUNTERS']],
2083     'TuningParameters': [0x124, ['_HEAP_TUNING_PARAMETERS']],   2280     'TuningParameters': [0x130, ['_HEAP_TUNING_PARAMETERS']],
2084 }],   2281 }],
2085   '_HEAP_COUNTERS': [ 0x48, {   2282   '_HEAP_COUNTERS': [ 0x54, {
2086     'TotalMemoryReserved': [0x0, ['unsigned long']],   2283     'TotalMemoryReserved': [0x0, ['unsigned long']],
2087     'TotalMemoryCommitted': [0x4, ['unsigned long']],   2284     'TotalMemoryCommitted': [0x4, ['unsigned long']],
2088     'TotalMemoryLargeUCR': [0x8, ['unsigned long']],   2285     'TotalMemoryLargeUCR': [0x8, ['unsigned long']],
2089     'TotalSizeInVirtualBlocks': [0xc, ['unsigned long']],   2286     'TotalSizeInVirtualBlocks': [0xc, ['unsigned long']],
2090     'TotalSegments': [0x10, ['unsigned long']],   2287     'TotalSegments': [0x10, ['unsigned long']],
2091     'TotalUCRs': [0x14, ['unsigned long']],   2288     'TotalUCRs': [0x14, ['unsigned long']],
2092     'CommittOps': [0x18, ['unsigned long']],   2289     'CommittOps': [0x18, ['unsigned long']],
2093     'DeCommitOps': [0x1c, ['unsigned long']],   2290     'DeCommitOps': [0x1c, ['unsigned long']],
2094     'LockAcquires': [0x20, ['unsigned long']],   2291     'LockAcquires': [0x20, ['unsigned long']],
2095     'LockCollisions': [0x24, ['unsigned long']],   2292     'LockCollisions': [0x24, ['unsigned long']],
2096     'CommitRate': [0x28, ['unsigned long']],   2293     'CommitRate': [0x28, ['unsigned long']],
2097     'DecommittRate': [0x2c, ['unsigned long']],   2294     'DecommittRate': [0x2c, ['unsigned long']],
2098     'CommitFailures': [0x30, ['unsigned long']],   2295     'CommitFailures': [0x30, ['unsigned long']],
2099     'InBlockCommitFailures': [0x34, ['unsigned long']],   2296     'InBlockCommitFailures': [0x34, ['unsigned long']],
2100     'CompactHeapCalls': [0x38, ['unsigned long']],   2297     'CompactHeapCalls': [0x38, ['unsigned long']],
2101     'CompactedUCRs': [0x3c, ['unsigned long']],   2298     'CompactedUCRs': [0x3c, ['unsigned long']],
2102     'InBlockDeccommits': [0x40, ['unsigned long']],   2299     'AllocAndFreeOps': [0x40, ['unsigned long']],
2103     'InBlockDeccomitSize': [0x44, ['unsigned long']],   2300     'InBlockDeccommits': [0x44, ['unsigned long']],
      2301     'InBlockDeccomitSize': [0x48, ['unsigned long']],
      2302     'HighWatermarkSize': [0x4c, ['unsigned long']],
      2303     'LastPolledSize': [0x50, ['unsigned long']],
2104 }],   2304 }],
2105   '_HEAP_DEBUGGING_INFORMATION': [ 0x1c, {   2305   '_HEAP_DEBUGGING_INFORMATION': [ 0x1c, {
2106     'InterceptorFunction': [0x0, ['pointer', ['void']]],   2306     'InterceptorFunction': [0x0, ['pointer', ['void']]],
2107     'InterceptorValue': [0x4, ['unsigned short']],   2307     'InterceptorValue': [0x4, ['unsigned short']],
2108     'ExtendedOptions': [0x8, ['unsigned long']],   2308     'ExtendedOptions': [0x8, ['unsigned long']],
2109     'StackTraceDepth': [0xc, ['unsigned long']],   2309     'StackTraceDepth': [0xc, ['unsigned long']],
2110     'MinTotalBlockSize': [0x10, ['unsigned long']],   2310     'MinTotalBlockSize': [0x10, ['unsigned long']],
2111     'MaxTotalBlockSize': [0x14, ['unsigned long']],   2311     'MaxTotalBlockSize': [0x14, ['unsigned long']],
2112     'HeapLeakEnumerationRoutine': [0x18, ['pointer', ['void']]],   2312     'HeapLeakEnumerationRoutine': [0x18, ['pointer', ['void']]],
2113 }],   2313 }],
2114   '_HEAP_ENTRY': [ 0x8, {   2314   '_HEAP_ENTRY': [ 0x8, {
2115     'SubSegmentCode': [0x0, ['pointer', ['void']]],   2315     'SubSegmentCode': [0x0, ['pointer', ['void']]],
2116     'FunctionIndex': [0x0, ['unsigned short']],   2316     'FunctionIndex': [0x0, ['unsigned short']],
2117     'InterceptorValue': [0x0, ['unsigned long']],   2317     'InterceptorValue': [0x0, ['unsigned long']],
2118     'AgregateCode': [0x0, ['unsigned long long']],   2318     'AgregateCode': [0x0, ['unsigned long long']],
2119     'Code1': [0x0, ['unsigned long']],   2319     'Code1': [0x0, ['unsigned long']],
2120     'Size': [0x0, ['unsigned short']],   2320     'Size': [0x0, ['unsigned short']],
2121     'Flags': [0x2, ['unsigned char']],   2321     'Flags': [0x2, ['unsigned char']],
2122     'ContextValue': [0x2, ['unsigned short']],   2322     'ContextValue': [0x2, ['unsigned short']],
2123     'SmallTagIndex': [0x3, ['unsigned char']],   2323     'SmallTagIndex': [0x3, ['unsigned char']],
2124     'Code2': [0x4, ['unsigned short']],   2324     'Code2': [0x4, ['unsigned short']],
2125     'UnusedBytesLength': [0x4, ['unsigned short']],   2325     'UnusedBytesLength': [0x4, ['unsigned short']],
2126     'PreviousSize': [0x4, ['unsigned short']],   2326     'PreviousSize': [0x4, ['unsigned short']],
2127     'SegmentOffset': [0x6, ['unsigned char']],   2327     'SegmentOffset': [0x6, ['unsigned char']],
2128     'Code3': [0x6, ['unsigned char']],   2328     'Code3': [0x6, ['unsigned char']],
2129     'LFHFlags': [0x6, ['unsigned char']],   2329     'LFHFlags': [0x6, ['unsigned char']],
2130     'EntryOffset': [0x6, ['unsigned char']],   2330     'EntryOffset': [0x6, ['unsigned char']],
2131     'ExtendedBlockSignature': [0x7, ['unsigned char']],   2331     'ExtendedBlockSignature': [0x7, ['unsigned char']],
2132     'Code4': [0x7, ['unsigned char']],   2332     'Code4': [0x7, ['unsigned char']],
2133     'UnusedBytes': [0x7, ['unsigned char']],   2333     'UnusedBytes': [0x7, ['unsigned char']],
2134 }],   2334 }],
2135   '_HEAP_ENTRY_EXTRA': [ 0x8, {   2335   '_HEAP_ENTRY_EXTRA': [ 0x8, {
2136     'AllocatorBackTraceIndex': [0x0, ['unsigned short']],   2336     'AllocatorBackTraceIndex': [0x0, ['unsigned short']],
2137     'ZeroInit': [0x0, ['unsigned long long']],   2337     'ZeroInit': [0x0, ['unsigned long long']],
2138     'TagIndex': [0x2, ['unsigned short']],   2338     'TagIndex': [0x2, ['unsigned short']],
2139     'Settable': [0x4, ['unsigned long']],   2339     'Settable': [0x4, ['unsigned long']],
2140 }],   2340 }],
2141   '_HEAP_FREE_ENTRY': [ 0x10, {   2341   '_HEAP_FREE_ENTRY': [ 0x10, {
2142     'SubSegmentCode': [0x0, ['pointer', ['void']]],   2342     'SubSegmentCode': [0x0, ['pointer', ['void']]],
2143     'FunctionIndex': [0x0, ['unsigned short']],   2343     'FunctionIndex': [0x0, ['unsigned short']],
2144     'InterceptorValue': [0x0, ['unsigned long']],   2344     'InterceptorValue': [0x0, ['unsigned long']],
2145     'AgregateCode': [0x0, ['unsigned long long']],   2345     'AgregateCode': [0x0, ['unsigned long long']],
2146     'Code1': [0x0, ['unsigned long']],   2346     'Code1': [0x0, ['unsigned long']],
2147     'Size': [0x0, ['unsigned short']],   2347     'Size': [0x0, ['unsigned short']],
2148     'Flags': [0x2, ['unsigned char']],   2348     'Flags': [0x2, ['unsigned char']],
2149     'ContextValue': [0x2, ['unsigned short']],   2349     'ContextValue': [0x2, ['unsigned short']],
2150     'SmallTagIndex': [0x3, ['unsigned char']],   2350     'SmallTagIndex': [0x3, ['unsigned char']],
2151     'Code2': [0x4, ['unsigned short']],   2351     'Code2': [0x4, ['unsigned short']],
2152     'UnusedBytesLength': [0x4, ['unsigned short']],   2352     'UnusedBytesLength': [0x4, ['unsigned short']],
2153     'PreviousSize': [0x4, ['unsigned short']],   2353     'PreviousSize': [0x4, ['unsigned short']],
2154     'SegmentOffset': [0x6, ['unsigned char']],   2354     'SegmentOffset': [0x6, ['unsigned char']],
2155     'Code3': [0x6, ['unsigned char']],   2355     'Code3': [0x6, ['unsigned char']],
2156     'LFHFlags': [0x6, ['unsigned char']],   2356     'LFHFlags': [0x6, ['unsigned char']],
2157     'EntryOffset': [0x6, ['unsigned char']],   2357     'EntryOffset': [0x6, ['unsigned char']],
2158     'ExtendedBlockSignature': [0x7, ['unsigned char']],   2358     'ExtendedBlockSignature': [0x7, ['unsigned char']],
2159     'Code4': [0x7, ['unsigned char']],   2359     'Code4': [0x7, ['unsigned char']],
2160     'UnusedBytes': [0x7, ['unsigned char']],   2360     'UnusedBytes': [0x7, ['unsigned char']],
2161     'FreeList': [0x8, ['_LIST_ENTRY']],   2361     'FreeList': [0x8, ['_LIST_ENTRY']],
2162 }],   2362 }],
2163   '_HEAP_FREE_ENTRY_EXTRA': [ 0x4, {   2363   '_HEAP_FREE_ENTRY_EXTRA': [ 0x4, {
2164     'TagIndex': [0x0, ['unsigned short']],   2364     'TagIndex': [0x0, ['unsigned short']],
2165     'FreeBackTraceIndex': [0x2, ['unsigned short']],   2365     'FreeBackTraceIndex': [0x2, ['unsigned short']],
2166 }],   2366 }],
2167   '_HEAP_LIST_LOOKUP': [ 0x24, {   2367   '_HEAP_LIST_LOOKUP': [ 0x24, {
2168     'ExtendedLookup': [0x0, ['pointer', ['_HEAP_LIST_LOOKUP']]],   2368     'ExtendedLookup': [0x0, ['pointer', ['_HEAP_LIST_LOOKUP']]],
2169     'ArraySize': [0x4, ['unsigned long']],   2369     'ArraySize': [0x4, ['unsigned long']],
2170     'ExtraItem': [0x8, ['unsigned long']],   2370     'ExtraItem': [0x8, ['unsigned long']],
2171     'ItemCount': [0xc, ['unsigned long']],   2371     'ItemCount': [0xc, ['unsigned long']],
2172     'OutOfRangeItems': [0x10, ['unsigned long']],   2372     'OutOfRangeItems': [0x10, ['unsigned long']],
2173     'BaseIndex': [0x14, ['unsigned long']],   2373     'BaseIndex': [0x14, ['unsigned long']],
2174     'ListHead': [0x18, ['pointer', ['_LIST_ENTRY']]],   2374     'ListHead': [0x18, ['pointer', ['_LIST_ENTRY']]],
2175     'ListsInUseUlong': [0x1c, ['pointer', ['unsigned long']]],   2375     'ListsInUseUlong': [0x1c, ['pointer', ['unsigned long']]],
2176     'ListHints': [0x20, ['pointer', ['pointer', ['_LIST_ENTRY']]]],   2376     'ListHints': [0x20, ['pointer', ['pointer', ['_LIST_ENTRY']]]],
2177 }],   2377 }],
2178   '_HEAP_LOCK': [ 0x18, {   2378   '_HEAP_LOCK': [ 0x18, {
2179     'Lock': [0x0, ['unnamed_dfe96322baac623cbb995609f9f9629d']],   2379     'Lock': [0x0, ['unnamed_dfe96322baac623cbb995609f9f9629d']],
2180 }],   2380 }],
2181   '_HEAP_LOOKASIDE': [ 0x30, {   2381   '_HEAP_LOOKASIDE': [ 0x30, {
2182     'ListHead': [0x0, ['_SLIST_HEADER']],   2382     'ListHead': [0x0, ['_SLIST_HEADER']],
2183     'Depth': [0x8, ['unsigned short']],   2383     'Depth': [0x8, ['unsigned short']],
2184     'MaximumDepth': [0xa, ['unsigned short']],   2384     'MaximumDepth': [0xa, ['unsigned short']],
2185     'TotalAllocates': [0xc, ['unsigned long']],   2385     'TotalAllocates': [0xc, ['unsigned long']],
2186     'AllocateMisses': [0x10, ['unsigned long']],   2386     'AllocateMisses': [0x10, ['unsigned long']],
2187     'TotalFrees': [0x14, ['unsigned long']],   2387     'TotalFrees': [0x14, ['unsigned long']],
2188     'FreeMisses': [0x18, ['unsigned long']],   2388     'FreeMisses': [0x18, ['unsigned long']],
2189     'LastTotalAllocates': [0x1c, ['unsigned long']],   2389     'LastTotalAllocates': [0x1c, ['unsigned long']],
2190     'LastAllocateMisses': [0x20, ['unsigned long']],   2390     'LastAllocateMisses': [0x20, ['unsigned long']],
2191     'Counters': [0x24, ['array', 2, ['unsigned long']]],   2391     'Counters': [0x24, ['array', 2, ['unsigned long']]],
2192 }],   2392 }],
2193   '_HEAP_PSEUDO_TAG_ENTRY': [ 0xc, {   2393   '_HEAP_PSEUDO_TAG_ENTRY': [ 0xc, {
2194     'Allocs': [0x0, ['unsigned long']],   2394     'Allocs': [0x0, ['unsigned long']],
2195     'Frees': [0x4, ['unsigned long']],   2395     'Frees': [0x4, ['unsigned long']],
2196     'Size': [0x8, ['unsigned long']],   2396     'Size': [0x8, ['unsigned long']],
2197 }],   2397 }],
2198   '_HEAP_SEGMENT': [ 0x40, {   2398   '_HEAP_SEGMENT': [ 0x40, {
2199     'Entry': [0x0, ['_HEAP_ENTRY']],   2399     'Entry': [0x0, ['_HEAP_ENTRY']],
2200     'SegmentSignature': [0x8, ['unsigned long']],   2400     'SegmentSignature': [0x8, ['unsigned long']],
2201     'SegmentFlags': [0xc, ['unsigned long']],   2401     'SegmentFlags': [0xc, ['unsigned long']],
2202     'SegmentListEntry': [0x10, ['_LIST_ENTRY']],   2402     'SegmentListEntry': [0x10, ['_LIST_ENTRY']],
2203     'Heap': [0x18, ['pointer', ['_HEAP']]],   2403     'Heap': [0x18, ['pointer', ['_HEAP']]],
2204     'BaseAddress': [0x1c, ['pointer', ['void']]],   2404     'BaseAddress': [0x1c, ['pointer', ['void']]],
2205     'NumberOfPages': [0x20, ['unsigned long']],   2405     'NumberOfPages': [0x20, ['unsigned long']],
2206     'FirstEntry': [0x24, ['pointer', ['_HEAP_ENTRY']]],   2406     'FirstEntry': [0x24, ['pointer', ['_HEAP_ENTRY']]],
2207     'LastValidEntry': [0x28, ['pointer', ['_HEAP_ENTRY']]],   2407     'LastValidEntry': [0x28, ['pointer', ['_HEAP_ENTRY']]],
2208     'NumberOfUnCommittedPages': [0x2c, ['unsigned long']],   2408     'NumberOfUnCommittedPages': [0x2c, ['unsigned long']],
2209     'NumberOfUnCommittedRanges': [0x30, ['unsigned long']],   2409     'NumberOfUnCommittedRanges': [0x30, ['unsigned long']],
2210     'SegmentAllocatorBackTraceIndex': [0x34, ['unsigned short']],   2410     'SegmentAllocatorBackTraceIndex': [0x34, ['unsigned short']],
2211     'Reserved': [0x36, ['unsigned short']],   2411     'Reserved': [0x36, ['unsigned short']],
2212     'UCRSegmentList': [0x38, ['_LIST_ENTRY']],   2412     'UCRSegmentList': [0x38, ['_LIST_ENTRY']],
2213 }],   2413 }],
2214   '_HEAP_STOP_ON_TAG': [ 0x4, {   2414   '_HEAP_STOP_ON_TAG': [ 0x4, {
2215     'TagIndex': [0x0, ['unsigned short']],   2415     'TagIndex': [0x0, ['unsigned short']],
2216     'HeapAndTagIndex': [0x0, ['unsigned long']],   2416     'HeapAndTagIndex': [0x0, ['unsigned long']],
2217     'HeapIndex': [0x2, ['unsigned short']],   2417     'HeapIndex': [0x2, ['unsigned short']],
2218 }],   2418 }],
2219   '_HEAP_STOP_ON_VALUES': [ 0x18, {   2419   '_HEAP_STOP_ON_VALUES': [ 0x18, {
2220     'AllocAddress': [0x0, ['unsigned long']],   2420     'AllocAddress': [0x0, ['unsigned long']],
2221     'AllocTag': [0x4, ['_HEAP_STOP_ON_TAG']],   2421     'AllocTag': [0x4, ['_HEAP_STOP_ON_TAG']],
2222     'ReAllocAddress': [0x8, ['unsigned long']],   2422     'ReAllocAddress': [0x8, ['unsigned long']],
2223     'ReAllocTag': [0xc, ['_HEAP_STOP_ON_TAG']],   2423     'ReAllocTag': [0xc, ['_HEAP_STOP_ON_TAG']],
2224     'FreeAddress': [0x10, ['unsigned long']],   2424     'FreeAddress': [0x10, ['unsigned long']],
2225     'FreeTag': [0x14, ['_HEAP_STOP_ON_TAG']],   2425     'FreeTag': [0x14, ['_HEAP_STOP_ON_TAG']],
2226 }],   2426 }],
2227   '_HEAP_SUBSEGMENT': [ 0x20, {   2427   '_HEAP_SUBSEGMENT': [ 0x20, {
2228     'LocalInfo': [0x0, ['pointer', ['_HEAP_LOCAL_SEGMENT_INFO']]],   2428     'LocalInfo': [0x0, ['pointer', ['_HEAP_LOCAL_SEGMENT_INFO']]],
2229     'UserBlocks': [0x4, ['pointer', ['_HEAP_USERDATA_HEADER']]],   2429     'UserBlocks': [0x4, ['pointer', ['_HEAP_USERDATA_HEADER']]],
2230     'AggregateExchg': [0x8, ['_INTERLOCK_SEQ']],   2430     'AggregateExchg': [0x8, ['_INTERLOCK_SEQ']],
2231     'BlockSize': [0x10, ['unsigned short']],   2431     'BlockSize': [0x10, ['unsigned short']],
2232     'Alignment': [0x10, ['array', 2, ['unsigned long']]],   2432     'Alignment': [0x10, ['array', 2, ['unsigned long']]],
2233     'Flags': [0x12, ['unsigned short']],   2433     'Flags': [0x12, ['unsigned short']],
2234     'BlockCount': [0x14, ['unsigned short']],   2434     'BlockCount': [0x14, ['unsigned short']],
2235     'SizeIndex': [0x16, ['unsigned char']],   2435     'SizeIndex': [0x16, ['unsigned char']],
2236     'AffinityIndex': [0x17, ['unsigned char']],   2436     'AffinityIndex': [0x17, ['unsigned char']],
2237     'SFreeListEntry': [0x18, ['_SINGLE_LIST_ENTRY']],   2437     'SFreeListEntry': [0x18, ['_SINGLE_LIST_ENTRY']],
2238     'Lock': [0x1c, ['unsigned long']],   2438     'Lock': [0x1c, ['unsigned long']],
2239 }],   2439 }],
2240   '_HEAP_TAG_ENTRY': [ 0x40, {   2440   '_HEAP_TAG_ENTRY': [ 0x40, {
2241     'Allocs': [0x0, ['unsigned long']],   2441     'Allocs': [0x0, ['unsigned long']],
2242     'Frees': [0x4, ['unsigned long']],   2442     'Frees': [0x4, ['unsigned long']],
2243     'Size': [0x8, ['unsigned long']],   2443     'Size': [0x8, ['unsigned long']],
2244     'TagIndex': [0xc, ['unsigned short']],   2444     'TagIndex': [0xc, ['unsigned short']],
2245     'CreatorBackTraceIndex': [0xe, ['unsigned short']],   2445     'CreatorBackTraceIndex': [0xe, ['unsigned short']],
2246     'TagName': [0x10, ['array', 24, ['wchar']]],   2446     'TagName': [0x10, ['array', 24, ['wchar']]],
2247 }],   2447 }],
2248   '_HEAP_TUNING_PARAMETERS': [ 0x8, {   2448   '_HEAP_TUNING_PARAMETERS': [ 0x8, {
2249     'CommittThresholdShift': [0x0, ['unsigned long']],   2449     'CommittThresholdShift': [0x0, ['unsigned long']],
2250     'MaxPreCommittThreshold': [0x4, ['unsigned long']],   2450     'MaxPreCommittThreshold': [0x4, ['unsigned long']],
2251 }],   2451 }],
2252   '_HEAP_UCR_DESCRIPTOR': [ 0x18, {   2452   '_HEAP_UCR_DESCRIPTOR': [ 0x18, {
2253     'ListEntry': [0x0, ['_LIST_ENTRY']],   2453     'ListEntry': [0x0, ['_LIST_ENTRY']],
2254     'SegmentEntry': [0x8, ['_LIST_ENTRY']],   2454     'SegmentEntry': [0x8, ['_LIST_ENTRY']],
2255     'Address': [0x10, ['pointer', ['void']]],   2455     'Address': [0x10, ['pointer', ['void']]],
2256     'Size': [0x14, ['unsigned long']],   2456     'Size': [0x14, ['unsigned long']],
2257 }],   2457 }],
2258   '_HEAP_USERDATA_HEADER': [ 0x10, {   2458   '_HEAP_USERDATA_HEADER': [ 0x10, {
2259     'SubSegment': [0x0, ['pointer', ['_HEAP_SUBSEGMENT']]],   2459     'SubSegment': [0x0, ['pointer', ['_HEAP_SUBSEGMENT']]],
2260     'SFreeListEntry': [0x0, ['_SINGLE_LIST_ENTRY']],   2460     'SFreeListEntry': [0x0, ['_SINGLE_LIST_ENTRY']],
2261     'Reserved': [0x4, ['pointer', ['void']]],   2461     'Reserved': [0x4, ['pointer', ['void']]],
2262     'SizeIndex': [0x8, ['unsigned long']],   2462     'SizeIndex': [0x8, ['unsigned long']],
2263     'Signature': [0xc, ['unsigned long']],   2463     'Signature': [0xc, ['unsigned long']],
2264 }],   2464 }],
2265   '_HEAP_VIRTUAL_ALLOC_ENTRY': [ 0x20, {   2465   '_HEAP_VIRTUAL_ALLOC_ENTRY': [ 0x20, {
2266     'Entry': [0x0, ['_LIST_ENTRY']],   2466     'Entry': [0x0, ['_LIST_ENTRY']],
2267     'ExtraStuff': [0x8, ['_HEAP_ENTRY_EXTRA']],   2467     'ExtraStuff': [0x8, ['_HEAP_ENTRY_EXTRA']],
2268     'CommitSize': [0x10, ['unsigned long']],   2468     'CommitSize': [0x10, ['unsigned long']],
2269     'ReserveSize': [0x14, ['unsigned long']],   2469     'ReserveSize': [0x14, ['unsigned long']],
2270     'BusyBlock': [0x18, ['_HEAP_ENTRY']],   2470     'BusyBlock': [0x18, ['_HEAP_ENTRY']],
2271 }],   2471 }],
2272   '_HHIVE': [ 0x2e8, {   2472   '_HHIVE': [ 0x2ec, {
2273     'Signature': [0x0, ['unsigned long']],   2473     'Signature': [0x0, ['unsigned long']],
2274     'GetCellRoutine': [0x4, ['pointer', ['void']]],   2474     'GetCellRoutine': [0x4, ['pointer', ['void']]],
2275     'ReleaseCellRoutine': [0x8, ['pointer', ['void']]],   2475     'ReleaseCellRoutine': [0x8, ['pointer', ['void']]],
2276     'Allocate': [0xc, ['pointer', ['void']]],   2476     'Allocate': [0xc, ['pointer', ['void']]],
2277     'Free': [0x10, ['pointer', ['void']]],   2477     'Free': [0x10, ['pointer', ['void']]],
2278     'FileSetSize': [0x14, ['pointer', ['void']]],   2478     'FileSetSize': [0x14, ['pointer', ['void']]],
2279     'FileWrite': [0x18, ['pointer', ['void']]],   2479     'FileWrite': [0x18, ['pointer', ['void']]],
2280     'FileRead': [0x1c, ['pointer', ['void']]],   2480     'FileRead': [0x1c, ['pointer', ['void']]],
2281     'FileFlush': [0x20, ['pointer', ['void']]],   2481     'FileFlush': [0x20, ['pointer', ['void']]],
2282     'BaseBlock': [0x24, ['pointer', ['_HBASE_BLOCK']]],   2482     'HiveLoadFailure': [0x24, ['pointer', ['void']]],
2283     'DirtyVector': [0x28, ['_RTL_BITMAP']],   2483     'BaseBlock': [0x28, ['pointer', ['_HBASE_BLOCK']]],
2284     'DirtyCount': [0x30, ['unsigned long']],   2484     'DirtyVector': [0x2c, ['_RTL_BITMAP']],
2285     'DirtyAlloc': [0x34, ['unsigned long']],   2485     'DirtyCount': [0x34, ['unsigned long']],
2286     'BaseBlockAlloc': [0x38, ['unsigned long']],   2486     'DirtyAlloc': [0x38, ['unsigned long']],
2287     'Cluster': [0x3c, ['unsigned long']],   2487     'BaseBlockAlloc': [0x3c, ['unsigned long']],
2288     'Flat': [0x40, ['unsigned char']],   2488     'Cluster': [0x40, ['unsigned long']],
2289     'ReadOnly': [0x41, ['unsigned char']],   2489     'Flat': [0x44, ['unsigned char']],
2290     'DirtyFlag': [0x42, ['unsigned char']],   2490     'ReadOnly': [0x45, ['unsigned char']],
2291     'HvBinHeadersUse': [0x44, ['unsigned long']],   2491     'DirtyFlag': [0x46, ['unsigned char']],
2292     'HvFreeCellsUse': [0x48, ['unsigned long']],   2492     'HvBinHeadersUse': [0x48, ['unsigned long']],
2293     'HvUsedCellsUse': [0x4c, ['unsigned long']],   2493     'HvFreeCellsUse': [0x4c, ['unsigned long']],
2294     'CmUsedCellsUse': [0x50, ['unsigned long']],   2494     'HvUsedCellsUse': [0x50, ['unsigned long']],
2295     'HiveFlags': [0x54, ['unsigned long']],   2495     'CmUsedCellsUse': [0x54, ['unsigned long']],
2296     'CurrentLog': [0x58, ['unsigned long']],   2496     'HiveFlags': [0x58, ['unsigned long']],
2297     'LogSize': [0x5c, ['array', 2, ['unsigned long']]],   2497     'CurrentLog': [0x5c, ['unsigned long']],
2298     'RefreshCount': [0x64, ['unsigned long']],   2498     'LogSize': [0x60, ['array', 2, ['unsigned long']]],
2299     'StorageTypeCount': [0x68, ['unsigned long']],   2499     'RefreshCount': [0x68, ['unsigned long']],
2300     'Version': [0x6c, ['unsigned long']],   2500     'StorageTypeCount': [0x6c, ['unsigned long']],
2301     'Storage': [0x70, ['array', 2, ['_DUAL']]],   2501     'Version': [0x70, ['unsigned long']],
      2502     'Storage': [0x74, ['array', 2, ['_DUAL']]],
2302 }],   2503 }],
2303   '_HIVE_LIST_ENTRY': [ 0x20, {   2504   '_HIVE_LIST_ENTRY': [ 0x58, {
2304     'FileName': [0x0, ['pointer', ['unsigned short']]],   2505     'FileName': [0x0, ['pointer', ['unsigned short']]],
2305     'BaseName': [0x4, ['pointer', ['unsigned short']]],   2506     'BaseName': [0x4, ['pointer', ['unsigned short']]],
2306     'RegRootName': [0x8, ['pointer', ['unsigned short']]],   2507     'RegRootName': [0x8, ['pointer', ['unsigned short']]],
2307     'CmHive': [0xc, ['pointer', ['_CMHIVE']]],   2508     'CmHive': [0xc, ['pointer', ['_CMHIVE']]],
2308     'HHiveFlags': [0x10, ['unsigned long']],   2509     'HHiveFlags': [0x10, ['unsigned long']],
2309     'CmHiveFlags': [0x14, ['unsigned long']],   2510     'CmHiveFlags': [0x14, ['unsigned long']],
2310     'CmHive2': [0x18, ['pointer', ['_CMHIVE']]],   2511     'CmKcbCacheSize': [0x18, ['unsigned long']],
2311     'ThreadFinished': [0x1c, ['unsigned char']],   2512     'CmHive2': [0x1c, ['pointer', ['_CMHIVE']]],
2312     'ThreadStarted': [0x1d, ['unsigned char']],   2513     'HiveMounted': [0x20, ['unsigned char']],
2313     'Allocate': [0x1e, ['unsigned char']],   2514     'ThreadFinished': [0x21, ['unsigned char']],
2314     'WinPERequired': [0x1f, ['unsigned char']],   2515     'ThreadStarted': [0x22, ['unsigned char']],
      2516     'Allocate': [0x23, ['unsigned char']],
      2517     'WinPERequired': [0x24, ['unsigned char']],
      2518     'StartEvent': [0x28, ['_KEVENT']],
      2519     'FinishedEvent': [0x38, ['_KEVENT']],
      2520     'MountLock': [0x48, ['_KEVENT']],
      2521 }],
      2522   '_HIVE_LOAD_FAILURE': [ 0x120, {
      2523     'Hive': [0x0, ['pointer', ['_HHIVE']]],
      2524     'Index': [0x4, ['unsigned long']],
      2525     'RecoverableIndex': [0x8, ['unsigned long']],
      2526     'Locations': [0xc, ['array', 8, ['unnamed_fec7b566398fd396d9efb6c62e1c2433']]],
      2527     'RecoverableLocations': [0x6c, ['array', 8, ['unnamed_fec7b566398fd396d9efb6c62e1c2433']]],
      2528     'RegistryIO': [0xcc, ['unnamed_845270909dae354ca1d191e2fe83ad73']],
      2529     'CheckRegistry2': [0xd8, ['unnamed_4bfbbe6a77ff385a2bd4051f87869938']],
      2530     'CheckKey': [0xdc, ['unnamed_a4fe29be69c43d4b6598ba360de73606']],
      2531     'CheckValueList': [0xec, ['unnamed_0699b043b9f21eb13608c95e19443f9c']],
      2532     'CheckHive': [0xfc, ['unnamed_a2894d29b4af61111c10024c15aa425d']],
      2533     'CheckHive1': [0x108, ['unnamed_a2894d29b4af61111c10024c15aa425d']],
      2534     'CheckBin': [0x114, ['unnamed_4084872f370f0f38825b352ad2e7fa3e']],
      2535     'RecoverData': [0x11c, ['unnamed_64325cb21292bde9de12b5794130fb26']],
2315 }],   2536 }],
2316   '_HMAP_DIRECTORY': [ 0x1000, {   2537   '_HMAP_DIRECTORY': [ 0x1000, {
2317     'Directory': [0x0, ['array', 1024, ['pointer', ['_HMAP_TABLE']]]],   2538     'Directory': [0x0, ['array', 1024, ['pointer', ['_HMAP_TABLE']]]],
2318 }],   2539 }],
2319   '_HMAP_ENTRY': [ 0x10, {   2540   '_HMAP_ENTRY': [ 0x10, {
2320     'BlockAddress': [0x0, ['unsigned long']],   2541     'BlockAddress': [0x0, ['unsigned long']],
2321     'BinAddress': [0x4, ['unsigned long']],   2542     'BinAddress': [0x4, ['unsigned long']],
2322     'CmView': [0x8, ['pointer', ['_CM_VIEW_OF_FILE']]],   2543     'CmView': [0x8, ['pointer', ['_CM_VIEW_OF_FILE']]],
2323     'MemAlloc': [0xc, ['unsigned long']],   2544     'MemAlloc': [0xc, ['unsigned long']],
2324 }],   2545 }],
2325   '_HMAP_TABLE': [ 0x2000, {   2546   '_HMAP_TABLE': [ 0x2000, {
2326     'Table': [0x0, ['array', 512, ['_HMAP_ENTRY']]],   2547     'Table': [0x0, ['array', 512, ['_HMAP_ENTRY']]],
2327 }],   2548 }],
2328   '_I386_LOADER_BLOCK': [ 0xc, {   2549   '_I386_LOADER_BLOCK': [ 0xc, {
2329     'CommonDataArea': [0x0, ['pointer', ['void']]],   2550     'CommonDataArea': [0x0, ['pointer', ['void']]],
2330     'MachineType': [0x4, ['unsigned long']],   2551     'MachineType': [0x4, ['unsigned long']],
2331     'VirtualBias': [0x8, ['unsigned long']],   2552     'VirtualBias': [0x8, ['unsigned long']],
2332 }],   2553 }],
2333   '_IA64_DBGKD_CONTROL_SET': [ 0x14, {   2554   '_IA64_DBGKD_CONTROL_SET': [ 0x14, {
2334     'Continue': [0x0, ['unsigned long']],   2555     'Continue': [0x0, ['unsigned long']],
2335     'CurrentSymbolStart': [0x4, ['unsigned long long']],   2556     'CurrentSymbolStart': [0x4, ['unsigned long long']],
2336     'CurrentSymbolEnd': [0xc, ['unsigned long long']],   2557     'CurrentSymbolEnd': [0xc, ['unsigned long long']],
2337 }],   2558 }],
2338   '_IA64_LOADER_BLOCK': [ 0x4, {   2559   '_IA64_LOADER_BLOCK': [ 0x4, {
2339     'PlaceHolder': [0x0, ['unsigned long']],   2560     'PlaceHolder': [0x0, ['unsigned long']],
2340 }],   2561 }],
2341   '_IMAGE_DATA_DIRECTORY': [ 0x8, {   2562   '_IMAGE_DATA_DIRECTORY': [ 0x8, {
2342     'VirtualAddress': [0x0, ['unsigned long']],   2563     'VirtualAddress': [0x0, ['unsigned long']],
2343     'Size': [0x4, ['unsigned long']],   2564     'Size': [0x4, ['unsigned long']],
2344 }],   2565 }],
2345   '_IMAGE_DEBUG_DIRECTORY': [ 0x1c, {   2566   '_IMAGE_DEBUG_DIRECTORY': [ 0x1c, {
2346     'Characteristics': [0x0, ['unsigned long']],   2567     'Characteristics': [0x0, ['unsigned long']],
2347     'TimeDateStamp': [0x4, ['unsigned long']],   2568     'TimeDateStamp': [0x4, ['unsigned long']],
2348     'MajorVersion': [0x8, ['unsigned short']],   2569     'MajorVersion': [0x8, ['unsigned short']],
2349     'MinorVersion': [0xa, ['unsigned short']],   2570     'MinorVersion': [0xa, ['unsigned short']],
2350     'Type': [0xc, ['unsigned long']],   2571     'Type': [0xc, ['unsigned long']],
2351     'SizeOfData': [0x10, ['unsigned long']],   2572     'SizeOfData': [0x10, ['unsigned long']],
2352     'AddressOfRawData': [0x14, ['unsigned long']],   2573     'AddressOfRawData': [0x14, ['unsigned long']],
2353     'PointerToRawData': [0x18, ['unsigned long']],   2574     'PointerToRawData': [0x18, ['unsigned long']],
2354 }],   2575 }],
2355   '_IMAGE_DOS_HEADER': [ 0x40, {   2576   '_IMAGE_DOS_HEADER': [ 0x40, {
2356     'e_magic': [0x0, ['unsigned short']],   2577     'e_magic': [0x0, ['unsigned short']],
2357     'e_cblp': [0x2, ['unsigned short']],   2578     'e_cblp': [0x2, ['unsigned short']],
2358     'e_cp': [0x4, ['unsigned short']],   2579     'e_cp': [0x4, ['unsigned short']],
2359     'e_crlc': [0x6, ['unsigned short']],   2580     'e_crlc': [0x6, ['unsigned short']],
2360     'e_cparhdr': [0x8, ['unsigned short']],   2581     'e_cparhdr': [0x8, ['unsigned short']],
2361     'e_minalloc': [0xa, ['unsigned short']],   2582     'e_minalloc': [0xa, ['unsigned short']],
2362     'e_maxalloc': [0xc, ['unsigned short']],   2583     'e_maxalloc': [0xc, ['unsigned short']],
2363     'e_ss': [0xe, ['unsigned short']],   2584     'e_ss': [0xe, ['unsigned short']],
2364     'e_sp': [0x10, ['unsigned short']],   2585     'e_sp': [0x10, ['unsigned short']],
2365     'e_csum': [0x12, ['unsigned short']],   2586     'e_csum': [0x12, ['unsigned short']],
2366     'e_ip': [0x14, ['unsigned short']],   2587     'e_ip': [0x14, ['unsigned short']],
2367     'e_cs': [0x16, ['unsigned short']],   2588     'e_cs': [0x16, ['unsigned short']],
2368     'e_lfarlc': [0x18, ['unsigned short']],   2589     'e_lfarlc': [0x18, ['unsigned short']],
2369     'e_ovno': [0x1a, ['unsigned short']],   2590     'e_ovno': [0x1a, ['unsigned short']],
2370     'e_res': [0x1c, ['array', 4, ['unsigned short']]],   2591     'e_res': [0x1c, ['array', 4, ['unsigned short']]],
2371     'e_oemid': [0x24, ['unsigned short']],   2592     'e_oemid': [0x24, ['unsigned short']],
2372     'e_oeminfo': [0x26, ['unsigned short']],   2593     'e_oeminfo': [0x26, ['unsigned short']],
2373     'e_res2': [0x28, ['array', 10, ['unsigned short']]],   2594     'e_res2': [0x28, ['array', 10, ['unsigned short']]],
2374     'e_lfanew': [0x3c, ['long']],   2595     'e_lfanew': [0x3c, ['long']],
2375 }],   2596 }],
2376   '_IMAGE_FILE_HEADER': [ 0x14, {   2597   '_IMAGE_FILE_HEADER': [ 0x14, {
2377     'Machine': [0x0, ['unsigned short']],   2598     'Machine': [0x0, ['unsigned short']],
2378     'NumberOfSections': [0x2, ['unsigned short']],   2599     'NumberOfSections': [0x2, ['unsigned short']],
2379     'TimeDateStamp': [0x4, ['unsigned long']],   2600     'TimeDateStamp': [0x4, ['unsigned long']],
2380     'PointerToSymbolTable': [0x8, ['unsigned long']],   2601     'PointerToSymbolTable': [0x8, ['unsigned long']],
2381     'NumberOfSymbols': [0xc, ['unsigned long']],   2602     'NumberOfSymbols': [0xc, ['unsigned long']],
2382     'SizeOfOptionalHeader': [0x10, ['unsigned short']],   2603     'SizeOfOptionalHeader': [0x10, ['unsigned short']],
2383     'Characteristics': [0x12, ['unsigned short']],   2604     'Characteristics': [0x12, ['unsigned short']],
2384 }],   2605 }],
2385   '_IMAGE_NT_HEADERS': [ 0xf8, {   2606   '_IMAGE_NT_HEADERS': [ 0xf8, {
2386     'Signature': [0x0, ['unsigned long']],   2607     'Signature': [0x0, ['unsigned long']],
2387     'FileHeader': [0x4, ['_IMAGE_FILE_HEADER']],   2608     'FileHeader': [0x4, ['_IMAGE_FILE_HEADER']],
2388     'OptionalHeader': [0x18, ['_IMAGE_OPTIONAL_HEADER']],   2609     'OptionalHeader': [0x18, ['_IMAGE_OPTIONAL_HEADER']],
2389 }],   2610 }],
2390   '_IMAGE_OPTIONAL_HEADER': [ 0xe0, {   2611   '_IMAGE_OPTIONAL_HEADER': [ 0xe0, {
2391     'Magic': [0x0, ['unsigned short']],   2612     'Magic': [0x0, ['unsigned short']],
2392     'MajorLinkerVersion': [0x2, ['unsigned char']],   2613     'MajorLinkerVersion': [0x2, ['unsigned char']],
2393     'MinorLinkerVersion': [0x3, ['unsigned char']],   2614     'MinorLinkerVersion': [0x3, ['unsigned char']],
2394     'SizeOfCode': [0x4, ['unsigned long']],   2615     'SizeOfCode': [0x4, ['unsigned long']],
2395     'SizeOfInitializedData': [0x8, ['unsigned long']],   2616     'SizeOfInitializedData': [0x8, ['unsigned long']],
2396     'SizeOfUninitializedData': [0xc, ['unsigned long']],   2617     'SizeOfUninitializedData': [0xc, ['unsigned long']],
2397     'AddressOfEntryPoint': [0x10, ['unsigned long']],   2618     'AddressOfEntryPoint': [0x10, ['unsigned long']],
2398     'BaseOfCode': [0x14, ['unsigned long']],   2619     'BaseOfCode': [0x14, ['unsigned long']],
2399     'BaseOfData': [0x18, ['unsigned long']],   2620     'BaseOfData': [0x18, ['unsigned long']],
2400     'ImageBase': [0x1c, ['unsigned long']],   2621     'ImageBase': [0x1c, ['unsigned long']],
2401     'SectionAlignment': [0x20, ['unsigned long']],   2622     'SectionAlignment': [0x20, ['unsigned long']],
2402     'FileAlignment': [0x24, ['unsigned long']],   2623     'FileAlignment': [0x24, ['unsigned long']],
2403     'MajorOperatingSystemVersion': [0x28, ['unsigned short']],   2624     'MajorOperatingSystemVersion': [0x28, ['unsigned short']],
2404     'MinorOperatingSystemVersion': [0x2a, ['unsigned short']],   2625     'MinorOperatingSystemVersion': [0x2a, ['unsigned short']],
2405     'MajorImageVersion': [0x2c, ['unsigned short']],   2626     'MajorImageVersion': [0x2c, ['unsigned short']],
2406     'MinorImageVersion': [0x2e, ['unsigned short']],   2627     'MinorImageVersion': [0x2e, ['unsigned short']],
2407     'MajorSubsystemVersion': [0x30, ['unsigned short']],   2628     'MajorSubsystemVersion': [0x30, ['unsigned short']],
2408     'MinorSubsystemVersion': [0x32, ['unsigned short']],   2629     'MinorSubsystemVersion': [0x32, ['unsigned short']],
2409     'Win32VersionValue': [0x34, ['unsigned long']],   2630     'Win32VersionValue': [0x34, ['unsigned long']],
2410     'SizeOfImage': [0x38, ['unsigned long']],   2631     'SizeOfImage': [0x38, ['unsigned long']],
2411     'SizeOfHeaders': [0x3c, ['unsigned long']],   2632     'SizeOfHeaders': [0x3c, ['unsigned long']],
2412     'CheckSum': [0x40, ['unsigned long']],   2633     'CheckSum': [0x40, ['unsigned long']],
2413     'Subsystem': [0x44, ['unsigned short']],   2634     'Subsystem': [0x44, ['unsigned short']],
2414     'DllCharacteristics': [0x46, ['unsigned short']],   2635     'DllCharacteristics': [0x46, ['unsigned short']],
2415     'SizeOfStackReserve': [0x48, ['unsigned long']],   2636     'SizeOfStackReserve': [0x48, ['unsigned long']],
2416     'SizeOfStackCommit': [0x4c, ['unsigned long']],   2637     'SizeOfStackCommit': [0x4c, ['unsigned long']],
2417     'SizeOfHeapReserve': [0x50, ['unsigned long']],   2638     'SizeOfHeapReserve': [0x50, ['unsigned long']],
2418     'SizeOfHeapCommit': [0x54, ['unsigned long']],   2639     'SizeOfHeapCommit': [0x54, ['unsigned long']],
2419     'LoaderFlags': [0x58, ['unsigned long']],   2640     'LoaderFlags': [0x58, ['unsigned long']],
2420     'NumberOfRvaAndSizes': [0x5c, ['unsigned long']],   2641     'NumberOfRvaAndSizes': [0x5c, ['unsigned long']],
2421     'DataDirectory': [0x60, ['array', 16, ['_IMAGE_DATA_DIRECTORY']]],   2642     'DataDirectory': [0x60, ['array', 16, ['_IMAGE_DATA_DIRECTORY']]],
2422 }],   2643 }],
2423   '_IMAGE_ROM_OPTIONAL_HEADER': [ 0x38, {   2644   '_IMAGE_ROM_OPTIONAL_HEADER': [ 0x38, {
2424     'Magic': [0x0, ['unsigned short']],   2645     'Magic': [0x0, ['unsigned short']],
2425     'MajorLinkerVersion': [0x2, ['unsigned char']],   2646     'MajorLinkerVersion': [0x2, ['unsigned char']],
2426     'MinorLinkerVersion': [0x3, ['unsigned char']],   2647     'MinorLinkerVersion': [0x3, ['unsigned char']],
2427     'SizeOfCode': [0x4, ['unsigned long']],   2648     'SizeOfCode': [0x4, ['unsigned long']],
2428     'SizeOfInitializedData': [0x8, ['unsigned long']],   2649     'SizeOfInitializedData': [0x8, ['unsigned long']],
2429     'SizeOfUninitializedData': [0xc, ['unsigned long']],   2650     'SizeOfUninitializedData': [0xc, ['unsigned long']],
2430     'AddressOfEntryPoint': [0x10, ['unsigned long']],   2651     'AddressOfEntryPoint': [0x10, ['unsigned long']],
2431     'BaseOfCode': [0x14, ['unsigned long']],   2652     'BaseOfCode': [0x14, ['unsigned long']],
2432     'BaseOfData': [0x18, ['unsigned long']],   2653     'BaseOfData': [0x18, ['unsigned long']],
2433     'BaseOfBss': [0x1c, ['unsigned long']],   2654     'BaseOfBss': [0x1c, ['unsigned long']],
2434     'GprMask': [0x20, ['unsigned long']],   2655     'GprMask': [0x20, ['unsigned long']],
2435     'CprMask': [0x24, ['array', 4, ['unsigned long']]],   2656     'CprMask': [0x24, ['array', 4, ['unsigned long']]],
2436     'GpValue': [0x34, ['unsigned long']],   2657     'GpValue': [0x34, ['unsigned long']],
2437 }],   2658 }],
2438   '_IMAGE_SECTION_HEADER': [ 0x28, {   2659   '_IMAGE_SECTION_HEADER': [ 0x28, {
2439     'Name': [0x0, ['array', 8, ['unsigned char']]],   2660     'Name': [0x0, ['array', 8, ['unsigned char']]],
2440     'Misc': [0x8, ['unnamed_15af9f610becfab90c55ee3fd86c2900']],   2661     'Misc': [0x8, ['unnamed_15af9f610becfab90c55ee3fd86c2900']],
2441     'VirtualAddress': [0xc, ['unsigned long']],   2662     'VirtualAddress': [0xc, ['unsigned long']],
2442     'SizeOfRawData': [0x10, ['unsigned long']],   2663     'SizeOfRawData': [0x10, ['unsigned long']],
2443     'PointerToRawData': [0x14, ['unsigned long']],   2664     'PointerToRawData': [0x14, ['unsigned long']],
2444     'PointerToRelocations': [0x18, ['unsigned long']],   2665     'PointerToRelocations': [0x18, ['unsigned long']],
2445     'PointerToLinenumbers': [0x1c, ['unsigned long']],   2666     'PointerToLinenumbers': [0x1c, ['unsigned long']],
2446     'NumberOfRelocations': [0x20, ['unsigned short']],   2667     'NumberOfRelocations': [0x20, ['unsigned short']],
2447     'NumberOfLinenumbers': [0x22, ['unsigned short']],   2668     'NumberOfLinenumbers': [0x22, ['unsigned short']],
2448     'Characteristics': [0x24, ['unsigned long']],   2669     'Characteristics': [0x24, ['unsigned long']],
2449 }],   2670 }],
2450   '_IMAGE_SECURITY_CONTEXT': [ 0x4, {   2671   '_IMAGE_SECURITY_CONTEXT': [ 0x4, {
2451     'PageHashes': [0x0, ['pointer', ['void']]],   2672     'PageHashes': [0x0, ['pointer', ['void']]],
2452     'Value': [0x0, ['unsigned long']],   2673     'Value': [0x0, ['unsigned long']],
2453 }],   2674 }],
2454   '_INITIAL_PRIVILEGE_SET': [ 0x2c, {   2675   '_INITIAL_PRIVILEGE_SET': [ 0x2c, {
2455     'PrivilegeCount': [0x0, ['unsigned long']],   2676     'PrivilegeCount': [0x0, ['unsigned long']],
2456     'Control': [0x4, ['unsigned long']],   2677     'Control': [0x4, ['unsigned long']],
2457     'Privilege': [0x8, ['array', 3, ['_LUID_AND_ATTRIBUTES']]],   2678     'Privilege': [0x8, ['array', 3, ['_LUID_AND_ATTRIBUTES']]],
2458 }],   2679 }],
2459   '_INTERFACE': [ 0x10, {   2680   '_INTERFACE': [ 0x10, {
2460     'Size': [0x0, ['unsigned short']],   2681     'Size': [0x0, ['unsigned short']],
2461     'Version': [0x2, ['unsigned short']],   2682     'Version': [0x2, ['unsigned short']],
2462     'Context': [0x4, ['pointer', ['void']]],   2683     'Context': [0x4, ['pointer', ['void']]],
2463     'InterfaceReference': [0x8, ['pointer', ['void']]],   2684     'InterfaceReference': [0x8, ['pointer', ['void']]],
2464     'InterfaceDereference': [0xc, ['pointer', ['void']]],   2685     'InterfaceDereference': [0xc, ['pointer', ['void']]],
2465 }],   2686 }],
2466   '_INTERLOCK_SEQ': [ 0x8, {   2687   '_INTERLOCK_SEQ': [ 0x8, {
2467     'Exchg': [0x0, ['long long']],   2688     'Exchg': [0x0, ['long long']],
2468     'Depth': [0x0, ['unsigned short']],   2689     'Depth': [0x0, ['unsigned short']],
2469     'OffsetAndDepth': [0x0, ['unsigned long']],   2690     'OffsetAndDepth': [0x0, ['unsigned long']],
2470     'FreeEntryOffset': [0x2, ['unsigned short']],   2691     'FreeEntryOffset': [0x2, ['unsigned short']],
2471     'Sequence': [0x4, ['unsigned long']],   2692     'Sequence': [0x4, ['unsigned long']],
2472 }],   2693 }],
      2694   '_IOP_FILE_OBJECT_EXTENSION': [ 0x24, {
      2695     'FoExtFlags': [0x0, ['unsigned long']],
      2696     'FoExtPerTypeExtension': [0x4, ['array', 7, ['pointer', ['void']]]],
      2697 }],
2473   '_IOV_FORCED_PENDING_TRACE': [ 0x100, {   2698   '_IOV_FORCED_PENDING_TRACE': [ 0x100, {
2474     'Irp': [0x0, ['pointer', ['_IRP']]],   2699     'Irp': [0x0, ['pointer', ['_IRP']]],
2475     'StackTrace': [0x4, ['array', 63, ['pointer', ['void']]]],   2700     'Thread': [0x4, ['pointer', ['_ETHREAD']]],
      2701     'StackTrace': [0x8, ['array', 62, ['pointer', ['void']]]],
2476 }],   2702 }],
2477   '_IO_CLIENT_EXTENSION': [ 0x8, {   2703   '_IO_CLIENT_EXTENSION': [ 0x8, {
2478     'NextExtension': [0x0, ['pointer', ['_IO_CLIENT_EXTENSION']]],   2704     'NextExtension': [0x0, ['pointer', ['_IO_CLIENT_EXTENSION']]],
2479     'ClientIdentificationAddress': [0x4, ['pointer', ['void']]],   2705     'ClientIdentificationAddress': [0x4, ['pointer', ['void']]],
2480 }],   2706 }],
2481   '_IO_COMPLETION_CONTEXT': [ 0x8, {   2707   '_IO_COMPLETION_CONTEXT': [ 0x8, {
2482     'Port': [0x0, ['pointer', ['void']]],   2708     'Port': [0x0, ['pointer', ['void']]],
2483     'Key': [0x4, ['pointer', ['void']]],   2709     'Key': [0x4, ['pointer', ['void']]],
2484 }],   2710 }],
2485   '_IO_DRIVER_CREATE_CONTEXT': [ 0x10, {   2711   '_IO_DRIVER_CREATE_CONTEXT': [ 0x10, {
2486     'Size': [0x0, ['short']],   2712     'Size': [0x0, ['short']],
2487     'ExtraCreateParameter': [0x4, ['pointer', ['_ECP_LIST']]],   2713     'ExtraCreateParameter': [0x4, ['pointer', ['_ECP_LIST']]],
2488     'DeviceObjectHint': [0x8, ['pointer', ['void']]],   2714     'DeviceObjectHint': [0x8, ['pointer', ['void']]],
2489     'TxnParameters': [0xc, ['pointer', ['_TXN_PARAMETER_BLOCK']]],   2715     'TxnParameters': [0xc, ['pointer', ['_TXN_PARAMETER_BLOCK']]],
2490 }],   2716 }],
      2717   '_IO_MINI_COMPLETION_PACKET_USER': [ 0x28, {
      2718     'ListEntry': [0x0, ['_LIST_ENTRY']],
      2719     'PacketType': [0x8, ['unsigned long']],
      2720     'KeyContext': [0xc, ['pointer', ['void']]],
      2721     'ApcContext': [0x10, ['pointer', ['void']]],
      2722     'IoStatus': [0x14, ['long']],
      2723     'IoStatusInformation': [0x18, ['unsigned long']],
      2724     'MiniPacketCallback': [0x1c, ['pointer', ['void']]],
      2725     'Context': [0x20, ['pointer', ['void']]],
      2726     'Allocated': [0x24, ['unsigned char']],
      2727 }],
2491   '_IO_PRIORITY_INFO': [ 0x10, {   2728   '_IO_PRIORITY_INFO': [ 0x10, {
2492     'Size': [0x0, ['unsigned long']],   2729     'Size': [0x0, ['unsigned long']],
2493     'ThreadPriority': [0x4, ['unsigned long']],   2730     'ThreadPriority': [0x4, ['unsigned long']],
2494     'PagePriority': [0x8, ['unsigned long']],   2731     'PagePriority': [0x8, ['unsigned long']],
2495 }],   2732 }],
2496   '_IO_RESOURCE_DESCRIPTOR': [ 0x20, {   2733   '_IO_RESOURCE_DESCRIPTOR': [ 0x20, {
2497     'Option': [0x0, ['unsigned char']],   2734     'Option': [0x0, ['unsigned char']],
2498     'Type': [0x1, ['unsigned char']],   2735     'Type': [0x1, ['unsigned char']],
2499     'ShareDisposition': [0x2, ['unsigned char']],   2736     'ShareDisposition': [0x2, ['unsigned char']],
2500     'Spare1': [0x3, ['unsigned char']],   2737     'Spare1': [0x3, ['unsigned char']],
2501     'Flags': [0x4, ['unsigned short']],   2738     'Flags': [0x4, ['unsigned short']],
2502     'Spare2': [0x6, ['unsigned short']],   2739     'Spare2': [0x6, ['unsigned short']],
2503     'u': [0x8, ['unnamed_16c869216ec4959b4159288778610e55']],   2740     'u': [0x8, ['unnamed_796f2a885fa45d918f3446a15b66beeb']],
2504 }],   2741 }],
2505   '_IO_RESOURCE_LIST': [ 0x28, {   2742   '_IO_RESOURCE_LIST': [ 0x28, {
2506     'Version': [0x0, ['unsigned short']],   2743     'Version': [0x0, ['unsigned short']],
2507     'Revision': [0x2, ['unsigned short']],   2744     'Revision': [0x2, ['unsigned short']],
2508     'Count': [0x4, ['unsigned long']],   2745     'Count': [0x4, ['unsigned long']],
2509     'Descriptors': [0x8, ['array', 1, ['_IO_RESOURCE_DESCRIPTOR']]],   2746     'Descriptors': [0x8, ['array', 1, ['_IO_RESOURCE_DESCRIPTOR']]],
2510 }],   2747 }],
2511   '_IO_RESOURCE_REQUIREMENTS_LIST': [ 0x48, {   2748   '_IO_RESOURCE_REQUIREMENTS_LIST': [ 0x48, {
2512     'ListSize': [0x0, ['unsigned long']],   2749     'ListSize': [0x0, ['unsigned long']],
2513     'BusNumber': [0x8, ['unsigned long']],   2750     'BusNumber': [0x8, ['unsigned long']],
2514     'SlotNumber': [0xc, ['unsigned long']],   2751     'SlotNumber': [0xc, ['unsigned long']],
2515     'Reserved': [0x10, ['array', 3, ['unsigned long']]],   2752     'Reserved': [0x10, ['array', 3, ['unsigned long']]],
2516     'AlternativeLists': [0x1c, ['unsigned long']],   2753     'AlternativeLists': [0x1c, ['unsigned long']],
2517     'List': [0x20, ['array', 1, ['_IO_RESOURCE_LIST']]],   2754     'List': [0x20, ['array', 1, ['_IO_RESOURCE_LIST']]],
2518 }],   2755 }],
2519   '_IO_SECURITY_CONTEXT': [ 0x10, {   2756   '_IO_SECURITY_CONTEXT': [ 0x10, {
2520     'SecurityQos': [0x0, ['pointer', ['_SECURITY_QUALITY_OF_SERVICE']]],   2757     'SecurityQos': [0x0, ['pointer', ['_SECURITY_QUALITY_OF_SERVICE']]],
2521     'AccessState': [0x4, ['pointer', ['_ACCESS_STATE']]],   2758     'AccessState': [0x4, ['pointer', ['_ACCESS_STATE']]],
2522     'DesiredAccess': [0x8, ['unsigned long']],   2759     'DesiredAccess': [0x8, ['unsigned long']],
2523     'FullCreateOptions': [0xc, ['unsigned long']],   2760     'FullCreateOptions': [0xc, ['unsigned long']],
2524 }],   2761 }],
2525   '_IO_STACK_LOCATION': [ 0x24, {   2762   '_IO_STACK_LOCATION': [ 0x24, {
2526     'MajorFunction': [0x0, ['unsigned char']],   2763     'MajorFunction': [0x0, ['unsigned char']],
2527     'MinorFunction': [0x1, ['unsigned char']],   2764     'MinorFunction': [0x1, ['unsigned char']],
2528     'Flags': [0x2, ['unsigned char']],   2765     'Flags': [0x2, ['unsigned char']],
2529     'Control': [0x3, ['unsigned char']],   2766     'Control': [0x3, ['unsigned char']],
2530     'Parameters': [0x4, ['unnamed_9e621d10b07fa60fc1d62243e63ba508']],   2767     'Parameters': [0x4, ['unnamed_9e621d10b07fa60fc1d62243e63ba508']],
2531     'DeviceObject': [0x14, ['pointer', ['_DEVICE_OBJECT']]],   2768     'DeviceObject': [0x14, ['pointer', ['_DEVICE_OBJECT']]],
2532     'FileObject': [0x18, ['pointer', ['_FILE_OBJECT']]],   2769     'FileObject': [0x18, ['pointer', ['_FILE_OBJECT']]],
2533     'CompletionRoutine': [0x1c, ['pointer', ['void']]],   2770     'CompletionRoutine': [0x1c, ['pointer', ['void']]],
2534     'Context': [0x20, ['pointer', ['void']]],   2771     'Context': [0x20, ['pointer', ['void']]],
2535 }],   2772 }],
2536   '_IO_STATUS_BLOCK': [ 0x8, {   2773   '_IO_STATUS_BLOCK': [ 0x8, {
2537     'Status': [0x0, ['long']],   2774     'Status': [0x0, ['long']],
2538     'Pointer': [0x0, ['pointer', ['void']]],   2775     'Pointer': [0x0, ['pointer', ['void']]],
2539     'Information': [0x4, ['unsigned long']],   2776     'Information': [0x4, ['unsigned long']],
2540 }],   2777 }],
2541   '_IO_TIMER': [ 0x18, {   2778   '_IO_TIMER': [ 0x18, {
2542     'Type': [0x0, ['short']],   2779     'Type': [0x0, ['short']],
2543     'TimerFlag': [0x2, ['short']],   2780     'TimerFlag': [0x2, ['short']],
2544     'TimerList': [0x4, ['_LIST_ENTRY']],   2781     'TimerList': [0x4, ['_LIST_ENTRY']],
2545     'TimerRoutine': [0xc, ['pointer', ['void']]],   2782     'TimerRoutine': [0xc, ['pointer', ['void']]],
2546     'Context': [0x10, ['pointer', ['void']]],   2783     'Context': [0x10, ['pointer', ['void']]],
2547     'DeviceObject': [0x14, ['pointer', ['_DEVICE_OBJECT']]],   2784     'DeviceObject': [0x14, ['pointer', ['_DEVICE_OBJECT']]],
2548 }],   2785 }],
      2786   '_IO_WORKITEM': [ 0x20, {
      2787     'WorkItem': [0x0, ['_WORK_QUEUE_ITEM']],
      2788     'Routine': [0x10, ['pointer', ['void']]],
      2789     'IoObject': [0x14, ['pointer', ['void']]],
      2790     'Context': [0x18, ['pointer', ['void']]],
      2791     'Type': [0x1c, ['unsigned long']],
      2792 }],
2549   '_IRP': [ 0x70, {   2793   '_IRP': [ 0x70, {
2550     'Type': [0x0, ['short']],   2794     'Type': [0x0, ['short']],
2551     'Size': [0x2, ['unsigned short']],   2795     'Size': [0x2, ['unsigned short']],
2552     'MdlAddress': [0x4, ['pointer', ['_MDL']]],   2796     'MdlAddress': [0x4, ['pointer', ['_MDL']]],
2553     'Flags': [0x8, ['unsigned long']],   2797     'Flags': [0x8, ['unsigned long']],
2554     'AssociatedIrp': [0xc, ['unnamed_80d04ccdc80d7d0618362a492911ad72']],   2798     'AssociatedIrp': [0xc, ['unnamed_80d04ccdc80d7d0618362a492911ad72']],
2555     'ThreadListEntry': [0x10, ['_LIST_ENTRY']],   2799     'ThreadListEntry': [0x10, ['_LIST_ENTRY']],
2556     'IoStatus': [0x18, ['_IO_STATUS_BLOCK']],   2800     'IoStatus': [0x18, ['_IO_STATUS_BLOCK']],
2557     'RequestorMode': [0x20, ['unsigned char']],   2801     'RequestorMode': [0x20, ['unsigned char']],
2558     'PendingReturned': [0x21, ['unsigned char']],   2802     'PendingReturned': [0x21, ['unsigned char']],
2559     'StackCount': [0x22, ['unsigned char']],   2803     'StackCount': [0x22, ['unsigned char']],
2560     'CurrentLocation': [0x23, ['unsigned char']],   2804     'CurrentLocation': [0x23, ['unsigned char']],
2561     'Cancel': [0x24, ['unsigned char']],   2805     'Cancel': [0x24, ['unsigned char']],
2562     'CancelIrql': [0x25, ['unsigned char']],   2806     'CancelIrql': [0x25, ['unsigned char']],
2563     'ApcEnvironment': [0x26, ['unsigned char']],   2807     'ApcEnvironment': [0x26, ['unsigned char']],
2564     'AllocationFlags': [0x27, ['unsigned char']],   2808     'AllocationFlags': [0x27, ['unsigned char']],
2565     'UserIosb': [0x28, ['pointer', ['_IO_STATUS_BLOCK']]],   2809     'UserIosb': [0x28, ['pointer', ['_IO_STATUS_BLOCK']]],
2566     'UserEvent': [0x2c, ['pointer', ['_KEVENT']]],   2810     'UserEvent': [0x2c, ['pointer', ['_KEVENT']]],
2567     'Overlay': [0x30, ['unnamed_424af7529455348a2cc0dbe477f0cdcd']],   2811     'Overlay': [0x30, ['unnamed_424af7529455348a2cc0dbe477f0cdcd']],
2568     'CancelRoutine': [0x38, ['pointer', ['void']]],   2812     'CancelRoutine': [0x38, ['pointer', ['void']]],
2569     'UserBuffer': [0x3c, ['pointer', ['void']]],   2813     'UserBuffer': [0x3c, ['pointer', ['void']]],
2570     'Tail': [0x40, ['unnamed_87a1fb7aaf6dc5668aee8fc0c28c859e']],   2814     'Tail': [0x40, ['unnamed_87a1fb7aaf6dc5668aee8fc0c28c859e']],
2571 }],   2815 }],
      2816   '_KAFFINITY_ENUMERATION_CONTEXT': [ 0xc, {
      2817     'Affinity': [0x0, ['pointer', ['_KAFFINITY_EX']]],
      2818     'CurrentMask': [0x4, ['unsigned long']],
      2819     'CurrentIndex': [0x8, ['unsigned short']],
      2820 }],
      2821   '_KAFFINITY_EX': [ 0xc, {
      2822     'Count': [0x0, ['unsigned short']],
      2823     'Size': [0x2, ['unsigned short']],
      2824     'Reserved': [0x4, ['unsigned long']],
      2825     'Bitmap': [0x8, ['array', 1, ['unsigned long']]],
      2826 }],
2572   '_KALPC_HANDLE_DATA': [ 0xc, {   2827   '_KALPC_HANDLE_DATA': [ 0xc, {
2573     'Flags': [0x0, ['unsigned long']],   2828     'Flags': [0x0, ['unsigned long']],
2574     'ObjectType': [0x4, ['unsigned long']],   2829     'ObjectType': [0x4, ['unsigned long']],
2575     'DuplicateContext': [0x8, ['pointer', ['_OB_DUPLICATE_OBJECT_STATE']]],   2830     'DuplicateContext': [0x8, ['pointer', ['_OB_DUPLICATE_OBJECT_STATE']]],
2576 }],   2831 }],
2577   '_KALPC_MESSAGE': [ 0x90, {   2832   '_KALPC_MESSAGE': [ 0x88, {
2578     'Entry': [0x0, ['_LIST_ENTRY']],   2833     'Entry': [0x0, ['_LIST_ENTRY']],
2579     'ExtensionBuffer': [0x8, ['pointer', ['void']]],   2834     'ExtensionBuffer': [0x8, ['pointer', ['void']]],
2580     'ExtensionBufferSize': [0xc, ['unsigned long']],   2835     'ExtensionBufferSize': [0xc, ['unsigned long']],
2581     'QuotaBlock': [0x10, ['pointer', ['void']]],   2836     'QuotaBlock': [0x10, ['pointer', ['void']]],
2582     'QuotaProcess': [0x10, ['pointer', ['_EPROCESS']]],   2837     'QuotaProcess': [0x10, ['pointer', ['_EPROCESS']]],
2583     'SequenceNo': [0x14, ['long']],   2838     'SequenceNo': [0x14, ['long']],
2584     'u1': [0x18, ['unnamed_f6d4a4b58495f329c56ef8ec0c40ae56']],   2839     'u1': [0x18, ['unnamed_f6d4a4b58495f329c56ef8ec0c40ae56']],
2585     'CancelSequencePort': [0x1c, ['pointer', ['_ALPC_PORT']]],   2840     'CancelSequencePort': [0x1c, ['pointer', ['_ALPC_PORT']]],
2586     'CancelQueuePort': [0x20, ['pointer', ['_ALPC_PORT']]],   2841     'CancelQueuePort': [0x20, ['pointer', ['_ALPC_PORT']]],
2587     'CancelSequenceNo': [0x24, ['long']],   2842     'CancelSequenceNo': [0x24, ['long']],
2588     'CancelListEntry': [0x28, ['_LIST_ENTRY']],   2843     'CancelListEntry': [0x28, ['_LIST_ENTRY']],
2589     'WaitingThread': [0x30, ['pointer', ['_ETHREAD']]],   2844     'WaitingThread': [0x30, ['pointer', ['_ETHREAD']]],
2590     'Reserve': [0x34, ['pointer', ['_KALPC_RESERVE']]],   2845     'Reserve': [0x34, ['pointer', ['_KALPC_RESERVE']]],
2591     'PortQueue': [0x38, ['pointer', ['_ALPC_PORT']]],   2846     'PortQueue': [0x38, ['pointer', ['_ALPC_PORT']]],
2592     'OwnerPort': [0x3c, ['pointer', ['_ALPC_PORT']]],   2847     'OwnerPort': [0x3c, ['pointer', ['_ALPC_PORT']]],
2593     'UniqueTableEntry': [0x40, ['pointer', ['_HANDLE_TABLE_ENTRY']]],   2848     'MessageAttributes': [0x40, ['_KALPC_MESSAGE_ATTRIBUTES']],
2594     'MessageAttributes': [0x44, ['_KALPC_MESSAGE_ATTRIBUTES']],   2849     'DataUserVa': [0x5c, ['pointer', ['void']]],
2595     'DataUserVa': [0x60, ['pointer', ['void']]],   2850     'DataSystemVa': [0x60, ['pointer', ['void']]],
2596     'DataSystemVa': [0x64, ['pointer', ['void']]],   2851     'CommunicationInfo': [0x64, ['pointer', ['_ALPC_COMMUNICATION_INFO']]],
2597     'CommunicationInfo': [0x68, ['pointer', ['_ALPC_COMMUNICATION_INFO']]],   2852     'ConnectionPort': [0x68, ['pointer', ['_ALPC_PORT']]],
2598     'ConnectionPort': [0x6c, ['pointer', ['_ALPC_PORT']]],   2853     'ServerThread': [0x6c, ['pointer', ['_ETHREAD']]],
2599     'ServerThread': [0x70, ['pointer', ['_ETHREAD']]],   2854     'PortMessage': [0x70, ['_PORT_MESSAGE']],
2600     'PortMessage': [0x78, ['_PORT_MESSAGE']],      
2601 }],   2855 }],
2602   '_KALPC_MESSAGE_ATTRIBUTES': [ 0x1c, {   2856   '_KALPC_MESSAGE_ATTRIBUTES': [ 0x1c, {
2603     'ClientContext': [0x0, ['pointer', ['void']]],   2857     'ClientContext': [0x0, ['pointer', ['void']]],
2604     'ServerContext': [0x4, ['pointer', ['void']]],   2858     'ServerContext': [0x4, ['pointer', ['void']]],
2605     'PortContext': [0x8, ['pointer', ['void']]],   2859     'PortContext': [0x8, ['pointer', ['void']]],
2606     'CancelPortContext': [0xc, ['pointer', ['void']]],   2860     'CancelPortContext': [0xc, ['pointer', ['void']]],
2607     'SecurityData': [0x10, ['pointer', ['_KALPC_SECURITY_DATA']]],   2861     'SecurityData': [0x10, ['pointer', ['_KALPC_SECURITY_DATA']]],
2608     'View': [0x14, ['pointer', ['_KALPC_VIEW']]],   2862     'View': [0x14, ['pointer', ['_KALPC_VIEW']]],
2609     'HandleData': [0x18, ['pointer', ['_KALPC_HANDLE_DATA']]],   2863     'HandleData': [0x18, ['pointer', ['_KALPC_HANDLE_DATA']]],
2610 }],   2864 }],
2611   '_KALPC_REGION': [ 0x30, {   2865   '_KALPC_REGION': [ 0x30, {
2612     'u1': [0x0, ['unnamed_2f9d898d820d50dc78bbe411644a37dd']],   2866     'RegionListEntry': [0x0, ['_LIST_ENTRY']],
2613     'RegionListEntry': [0x4, ['_LIST_ENTRY']],   2867     'Section': [0x8, ['pointer', ['_KALPC_SECTION']]],
2614     'Section': [0xc, ['pointer', ['_KALPC_SECTION']]],   2868     'Offset': [0xc, ['unsigned long']],
2615     'Offset': [0x10, ['unsigned long']],   2869     'Size': [0x10, ['unsigned long']],
2616     'Size': [0x14, ['unsigned long']],   2870     'ViewSize': [0x14, ['unsigned long']],
2617     'ViewSize': [0x18, ['unsigned long']],   2871     'u1': [0x18, ['unnamed_2f9d898d820d50dc78bbe411644a37dd']],
2618     'ReadOnlyView': [0x1c, ['pointer', ['_KALPC_VIEW']]],   2872     'NumberOfViews': [0x1c, ['unsigned long']],
2619     'ReadWriteView': [0x20, ['pointer', ['_KALPC_VIEW']]],   2873     'ViewListHead': [0x20, ['_LIST_ENTRY']],
2620     'NumberOfViews': [0x24, ['unsigned long']],   2874     'ReadOnlyView': [0x28, ['pointer', ['_KALPC_VIEW']]],
2621     'ViewListHead': [0x28, ['_LIST_ENTRY']],   2875     'ReadWriteView': [0x2c, ['pointer', ['_KALPC_VIEW']]],
2622 }],   2876 }],
2623   '_KALPC_RESERVE': [ 0x14, {   2877   '_KALPC_RESERVE': [ 0x14, {
2624     'OwnerPort': [0x0, ['pointer', ['_ALPC_PORT']]],   2878     'OwnerPort': [0x0, ['pointer', ['_ALPC_PORT']]],
2625     'HandleTable': [0x4, ['pointer', ['_ALPC_HANDLE_TABLE']]],   2879     'HandleTable': [0x4, ['pointer', ['_ALPC_HANDLE_TABLE']]],
2626     'Handle': [0x8, ['pointer', ['void']]],   2880     'Handle': [0x8, ['pointer', ['void']]],
2627     'Message': [0xc, ['pointer', ['_KALPC_MESSAGE']]],   2881     'Message': [0xc, ['pointer', ['_KALPC_MESSAGE']]],
2628     'Active': [0x10, ['long']],   2882     'Active': [0x10, ['long']],
2629 }],   2883 }],
2630   '_KALPC_SECTION': [ 0x28, {   2884   '_KALPC_SECTION': [ 0x28, {
2631     'u1': [0x0, ['unnamed_2f9d898d820d50dc78bbe411644a37dd']],   2885     'SectionObject': [0x0, ['pointer', ['void']]],
2632     'SectionObject': [0x4, ['pointer', ['void']]],   2886     'Size': [0x4, ['unsigned long']],
2633     'Size': [0x8, ['unsigned long']],   2887     'HandleTable': [0x8, ['pointer', ['_ALPC_HANDLE_TABLE']]],
2634     'HandleTable': [0xc, ['pointer', ['_ALPC_HANDLE_TABLE']]],   2888     'SectionHandle': [0xc, ['pointer', ['void']]],
2635     'SectionHandle': [0x10, ['pointer', ['void']]],   2889     'OwnerProcess': [0x10, ['pointer', ['_EPROCESS']]],
2636     'OwnerProcess': [0x14, ['pointer', ['_EPROCESS']]],   2890     'OwnerPort': [0x14, ['pointer', ['_ALPC_PORT']]],
2637     'OwnerPort': [0x18, ['pointer', ['_ALPC_PORT']]],   2891     'u1': [0x18, ['unnamed_2f9d898d820d50dc78bbe411644a37dd']],
2638     'NumberOfRegions': [0x1c, ['unsigned long']],   2892     'NumberOfRegions': [0x1c, ['unsigned long']],
2639     'RegionListHead': [0x20, ['_LIST_ENTRY']],   2893     'RegionListHead': [0x20, ['_LIST_ENTRY']],
2640 }],   2894 }],
2641   '_KALPC_SECURITY_DATA': [ 0x50, {   2895   '_KALPC_SECURITY_DATA': [ 0x50, {
2642     'HandleTable': [0x0, ['pointer', ['_ALPC_HANDLE_TABLE']]],   2896     'HandleTable': [0x0, ['pointer', ['_ALPC_HANDLE_TABLE']]],
2643     'ContextHandle': [0x4, ['pointer', ['void']]],   2897     'ContextHandle': [0x4, ['pointer', ['void']]],
2644     'OwningProcess': [0x8, ['pointer', ['_EPROCESS']]],   2898     'OwningProcess': [0x8, ['pointer', ['_EPROCESS']]],
2645     'OwnerPort': [0xc, ['pointer', ['_ALPC_PORT']]],   2899     'OwnerPort': [0xc, ['pointer', ['_ALPC_PORT']]],
2646     'DynamicSecurity': [0x10, ['_SECURITY_CLIENT_CONTEXT']],   2900     'DynamicSecurity': [0x10, ['_SECURITY_CLIENT_CONTEXT']],
2647     'u1': [0x4c, ['unnamed_2f9d898d820d50dc78bbe411644a37dd']],   2901     'u1': [0x4c, ['unnamed_2f9d898d820d50dc78bbe411644a37dd']],
2648 }],   2902 }],
2649   '_KALPC_VIEW': [ 0x34, {   2903   '_KALPC_VIEW': [ 0x34, {
2650     'ViewListEntry': [0x0, ['_LIST_ENTRY']],   2904     'ViewListEntry': [0x0, ['_LIST_ENTRY']],
2651     'u1': [0x8, ['unnamed_2f9d898d820d50dc78bbe411644a37dd']],   2905     'Region': [0x8, ['pointer', ['_KALPC_REGION']]],
2652     'Region': [0xc, ['pointer', ['_KALPC_REGION']]],   2906     'OwnerPort': [0xc, ['pointer', ['_ALPC_PORT']]],
2653     'OwnerPort': [0x10, ['pointer', ['_ALPC_PORT']]],   2907     'OwnerProcess': [0x10, ['pointer', ['_EPROCESS']]],
2654     'OwnerProcess': [0x14, ['pointer', ['_EPROCESS']]],   2908     'Address': [0x14, ['pointer', ['void']]],
2655     'Address': [0x18, ['pointer', ['void']]],   2909     'Size': [0x18, ['unsigned long']],
2656     'Size': [0x1c, ['unsigned long']],   2910     'SecureViewHandle': [0x1c, ['pointer', ['void']]],
2657     'SecureViewHandle': [0x20, ['pointer', ['void']]],   2911     'WriteAccessHandle': [0x20, ['pointer', ['void']]],
2658     'WriteAccessHandle': [0x24, ['pointer', ['void']]],   2912     'u1': [0x24, ['unnamed_2f9d898d820d50dc78bbe411644a37dd']],
2659     'NumberOfOwnerMessages': [0x28, ['unsigned long']],   2913     'NumberOfOwnerMessages': [0x28, ['unsigned long']],
2660     'ProcessViewListEntry': [0x2c, ['_LIST_ENTRY']],   2914     'ProcessViewListEntry': [0x2c, ['_LIST_ENTRY']],
2661 }],   2915 }],
2662   '_KAPC': [ 0x30, {   2916   '_KAPC': [ 0x30, {
2663     'Type': [0x0, ['unsigned char']],   2917     'Type': [0x0, ['unsigned char']],
2664     'SpareByte0': [0x1, ['unsigned char']],   2918     'SpareByte0': [0x1, ['unsigned char']],
2665     'Size': [0x2, ['unsigned char']],   2919     'Size': [0x2, ['unsigned char']],
2666     'SpareByte1': [0x3, ['unsigned char']],   2920     'SpareByte1': [0x3, ['unsigned char']],
2667     'SpareLong0': [0x4, ['unsigned long']],   2921     'SpareLong0': [0x4, ['unsigned long']],
2668     'Thread': [0x8, ['pointer', ['_KTHREAD']]],   2922     'Thread': [0x8, ['pointer', ['_KTHREAD']]],
2669     'ApcListEntry': [0xc, ['_LIST_ENTRY']],   2923     'ApcListEntry': [0xc, ['_LIST_ENTRY']],
2670     'KernelRoutine': [0x14, ['pointer', ['void']]],   2924     'KernelRoutine': [0x14, ['pointer', ['void']]],
2671     'RundownRoutine': [0x18, ['pointer', ['void']]],   2925     'RundownRoutine': [0x18, ['pointer', ['void']]],
2672     'NormalRoutine': [0x1c, ['pointer', ['void']]],   2926     'NormalRoutine': [0x1c, ['pointer', ['void']]],
2673     'NormalContext': [0x20, ['pointer', ['void']]],   2927     'NormalContext': [0x20, ['pointer', ['void']]],
2674     'SystemArgument1': [0x24, ['pointer', ['void']]],   2928     'SystemArgument1': [0x24, ['pointer', ['void']]],
2675     'SystemArgument2': [0x28, ['pointer', ['void']]],   2929     'SystemArgument2': [0x28, ['pointer', ['void']]],
2676     'ApcStateIndex': [0x2c, ['unsigned char']],   2930     'ApcStateIndex': [0x2c, ['unsigned char']],
2677     'ApcMode': [0x2d, ['unsigned char']],   2931     'ApcMode': [0x2d, ['unsigned char']],
2678     'Inserted': [0x2e, ['unsigned char']],   2932     'Inserted': [0x2e, ['unsigned char']],
2679 }],   2933 }],
2680   '_KAPC_STATE': [ 0x18, {   2934   '_KAPC_STATE': [ 0x18, {
2681     'ApcListHead': [0x0, ['array', 2, ['_LIST_ENTRY']]],   2935     'ApcListHead': [0x0, ['array', 2, ['_LIST_ENTRY']]],
2682     'Process': [0x10, ['pointer', ['_KPROCESS']]],   2936     'Process': [0x10, ['pointer', ['_KPROCESS']]],
2683     'KernelApcInProgress': [0x14, ['unsigned char']],   2937     'KernelApcInProgress': [0x14, ['unsigned char']],
2684     'KernelApcPending': [0x15, ['unsigned char']],   2938     'KernelApcPending': [0x15, ['unsigned char']],
2685     'UserApcPending': [0x16, ['unsigned char']],   2939     'UserApcPending': [0x16, ['unsigned char']],
2686 }],   2940 }],
2687   '_KDEVICE_QUEUE': [ 0x14, {   2941   '_KDEVICE_QUEUE': [ 0x14, {
2688     'Type': [0x0, ['short']],   2942     'Type': [0x0, ['short']],
2689     'Size': [0x2, ['short']],   2943     'Size': [0x2, ['short']],
2690     'DeviceListHead': [0x4, ['_LIST_ENTRY']],   2944     'DeviceListHead': [0x4, ['_LIST_ENTRY']],
2691     'Lock': [0xc, ['unsigned long']],   2945     'Lock': [0xc, ['unsigned long']],
2692     'Busy': [0x10, ['unsigned char']],   2946     'Busy': [0x10, ['unsigned char']],
2693 }],   2947 }],
2694   '_KDEVICE_QUEUE_ENTRY': [ 0x10, {   2948   '_KDEVICE_QUEUE_ENTRY': [ 0x10, {
2695     'DeviceListEntry': [0x0, ['_LIST_ENTRY']],   2949     'DeviceListEntry': [0x0, ['_LIST_ENTRY']],
2696     'SortKey': [0x8, ['unsigned long']],   2950     'SortKey': [0x8, ['unsigned long']],
2697     'Inserted': [0xc, ['unsigned char']],   2951     'Inserted': [0xc, ['unsigned char']],
2698 }],   2952 }],
2699   '_KDPC': [ 0x20, {   2953   '_KDPC': [ 0x20, {
2700     'Type': [0x0, ['unsigned char']],   2954     'Type': [0x0, ['unsigned char']],
2701     'Importance': [0x1, ['unsigned char']],   2955     'Importance': [0x1, ['unsigned char']],
2702     'Number': [0x2, ['unsigned short']],   2956     'Number': [0x2, ['unsigned short']],
2703     'DpcListEntry': [0x4, ['_LIST_ENTRY']],   2957     'DpcListEntry': [0x4, ['_LIST_ENTRY']],
2704     'DeferredRoutine': [0xc, ['pointer', ['void']]],   2958     'DeferredRoutine': [0xc, ['pointer', ['void']]],
2705     'DeferredContext': [0x10, ['pointer', ['void']]],   2959     'DeferredContext': [0x10, ['pointer', ['void']]],
2706     'SystemArgument1': [0x14, ['pointer', ['void']]],   2960     'SystemArgument1': [0x14, ['pointer', ['void']]],
2707     'SystemArgument2': [0x18, ['pointer', ['void']]],   2961     'SystemArgument2': [0x18, ['pointer', ['void']]],
2708     'DpcData': [0x1c, ['pointer', ['void']]],   2962     'DpcData': [0x1c, ['pointer', ['void']]],
2709 }],   2963 }],
2710   '_KDPC_DATA': [ 0x14, {   2964   '_KDPC_DATA': [ 0x14, {
2711     'DpcListHead': [0x0, ['_LIST_ENTRY']],   2965     'DpcListHead': [0x0, ['_LIST_ENTRY']],
2712     'DpcLock': [0x8, ['unsigned long']],   2966     'DpcLock': [0x8, ['unsigned long']],
2713     'DpcQueueDepth': [0xc, ['long']],   2967     'DpcQueueDepth': [0xc, ['long']],
2714     'DpcCount': [0x10, ['unsigned long']],   2968     'DpcCount': [0x10, ['unsigned long']],
2715 }],   2969 }],
2716   '_KENLISTMENT': [ 0x168, {   2970   '_KENLISTMENT': [ 0x168, {
2717     'cookie': [0x0, ['unsigned long']],   2971     'cookie': [0x0, ['unsigned long']],
2718     'NamespaceLink': [0x4, ['_KTMOBJECT_NAMESPACE_LINK']],   2972     'NamespaceLink': [0x4, ['_KTMOBJECT_NAMESPACE_LINK']],
2719     'EnlistmentId': [0x18, ['_GUID']],   2973     'EnlistmentId': [0x18, ['_GUID']],
2720     'Mutex': [0x28, ['_KMUTANT']],   2974     'Mutex': [0x28, ['_KMUTANT']],
2721     'NextSameTx': [0x48, ['_LIST_ENTRY']],   2975     'NextSameTx': [0x48, ['_LIST_ENTRY']],
2722     'NextSameRm': [0x50, ['_LIST_ENTRY']],   2976     'NextSameRm': [0x50, ['_LIST_ENTRY']],
2723     'ResourceManager': [0x58, ['pointer', ['_KRESOURCEMANAGER']]],   2977     'ResourceManager': [0x58, ['pointer', ['_KRESOURCEMANAGER']]],
2724     'Transaction': [0x5c, ['pointer', ['_KTRANSACTION']]],   2978     'Transaction': [0x5c, ['pointer', ['_KTRANSACTION']]],
2725     'Flags': [0x64, ['unsigned long']],   2979     'Flags': [0x64, ['unsigned long']],
2726     'NotificationMask': [0x68, ['unsigned long']],   2980     'NotificationMask': [0x68, ['unsigned long']],
2727     'Key': [0x6c, ['pointer', ['void']]],   2981     'Key': [0x6c, ['pointer', ['void']]],
2728     'KeyRefCount': [0x70, ['unsigned long']],   2982     'KeyRefCount': [0x70, ['unsigned long']],
2729     'RecoveryInformation': [0x74, ['pointer', ['void']]],   2983     'RecoveryInformation': [0x74, ['pointer', ['void']]],
2730     'RecoveryInformationLength': [0x78, ['unsigned long']],   2984     'RecoveryInformationLength': [0x78, ['unsigned long']],
2731     'DynamicNameInformation': [0x7c, ['pointer', ['void']]],   2985     'DynamicNameInformation': [0x7c, ['pointer', ['void']]],
2732     'DynamicNameInformationLength': [0x80, ['unsigned long']],   2986     'DynamicNameInformationLength': [0x80, ['unsigned long']],
2733     'FinalNotification': [0x84, ['pointer', ['_KTMNOTIFICATION_PACKET']]],   2987     'FinalNotification': [0x84, ['pointer', ['_KTMNOTIFICATION_PACKET']]],
2734     'SupSubEnlistment': [0x88, ['pointer', ['_KENLISTMENT']]],   2988     'SupSubEnlistment': [0x88, ['pointer', ['_KENLISTMENT']]],
2735     'SupSubEnlHandle': [0x8c, ['pointer', ['void']]],   2989     'SupSubEnlHandle': [0x8c, ['pointer', ['void']]],
2736     'SubordinateTxHandle': [0x90, ['pointer', ['void']]],   2990     'SubordinateTxHandle': [0x90, ['pointer', ['void']]],
2737     'CrmEnlistmentEnId': [0x94, ['_GUID']],   2991     'CrmEnlistmentEnId': [0x94, ['_GUID']],
2738     'CrmEnlistmentTmId': [0xa4, ['_GUID']],   2992     'CrmEnlistmentTmId': [0xa4, ['_GUID']],
2739     'CrmEnlistmentRmId': [0xb4, ['_GUID']],   2993     'CrmEnlistmentRmId': [0xb4, ['_GUID']],
2740     'NextHistory': [0xc4, ['unsigned long']],   2994     'NextHistory': [0xc4, ['unsigned long']],
2741     'History': [0xc8, ['array', 20, ['_KENLISTMENT_HISTORY']]],   2995     'History': [0xc8, ['array', 20, ['_KENLISTMENT_HISTORY']]],
2742 }],   2996 }],
2743   '_KENLISTMENT_HISTORY': [ 0x8, {   2997   '_KENLISTMENT_HISTORY': [ 0x8, {
2744     'Notification': [0x0, ['unsigned long']],   2998     'Notification': [0x0, ['unsigned long']],
2745 }],   2999 }],
2746   '_KERNEL_STACK_CONTROL': [ 0x1c, {   3000   '_KERNEL_STACK_CONTROL': [ 0x1c, {
2747     'PreviousTrapFrame': [0x0, ['pointer', ['_KTRAP_FRAME']]],   3001     'PreviousTrapFrame': [0x0, ['pointer', ['_KTRAP_FRAME']]],
2748     'PreviousExceptionList': [0x0, ['pointer', ['void']]],   3002     'PreviousExceptionList': [0x0, ['pointer', ['void']]],
2749     'StackControlFlags': [0x4, ['unsigned long']],   3003     'StackControlFlags': [0x4, ['unsigned long']],