prefetch

type BitStream struct {
	// contains filtered or unexported fields
}

type Enumeration struct {
	Value uint64
	Name  string
}

type FileInformationVista struct {
	Reader  io.ReaderAt
	Offset  int64
	Profile *PrefetchProfile
}

type FileInformationWin10 struct {
	Reader  io.ReaderAt
	Offset  int64
	Profile *PrefetchProfile
}

type FileInformationXP struct {
	Reader  io.ReaderAt
	Offset  int64
	Profile *PrefetchProfile
}

type FileMetricsEntryV17 struct {
	Reader  io.ReaderAt
	Offset  int64
	Profile *PrefetchProfile
}

type FileMetricsEntryV30 struct {
	Reader  io.ReaderAt
	Offset  int64
	Profile *PrefetchProfile
}

type MAMHeader struct {
	Reader  io.ReaderAt
	Offset  int64
	Profile *PrefetchProfile
}

type PREFIX_CODE_NODE struct {
	// contains filtered or unexported fields
}

type PREFIX_CODE_SYMBOL struct {
	// contains filtered or unexported fields
}

type PrefetchInfo struct {
	Executable    string      `json:"Executable"`
	FileSize      uint32      `json:"FileSize"`
	Hash          string      `json:"Hash"`
	Version       string      `json:"Version"`
	LastRunTimes  []time.Time `json:"LastRunTimes"`
	FilesAccessed []string    `json:"FilesAccessed"`
	RunCount      uint32      `json:"RunCount"`
}

type PrefetchProfile struct {
	Off_FileInformationVista_FileMetricsOffset        int64
	Off_FileInformationVista_FilenameOffset           int64
	Off_FileInformationVista_FilenameSize             int64
	Off_FileInformationVista_LastRunTime              int64
	Off_FileInformationVista_NumberOfFileMetrics      int64
	Off_FileInformationVista_NumberOfTraceChains      int64
	Off_FileInformationVista_NumberOfVolumes          int64
	Off_FileInformationVista_RunCount                 int64
	Off_FileInformationVista_TraceChainsArrayOffset   int64
	Off_FileInformationVista_VolumesInformationOffset int64
	Off_FileInformationVista_VolumesInformationSize   int64
	Off_FileInformationWin10_FileMetricsOffset        int64
	Off_FileInformationWin10_FilenameOffset           int64
	Off_FileInformationWin10_FilenameSize             int64
	Off_FileInformationWin10_LastRunTimes             int64
	Off_FileInformationWin10_NumberOfFileMetrics      int64
	Off_FileInformationWin10_NumberOfTraceChains      int64
	Off_FileInformationWin10_NumberOfVolumes          int64
	Off_FileInformationWin10_RunCount1                int64
	Off_FileInformationWin10_RunCount2                int64
	Off_FileInformationWin10_TraceChainsArrayOffset   int64
	Off_FileInformationWin10_VolumesInformationOffset int64
	Off_FileInformationWin10_VolumesInformationSize   int64
	Off_FileInformationXP_FileMetricsOffset           int64
	Off_FileInformationXP_FilenameOffset              int64
	Off_FileInformationXP_FilenameSize                int64
	Off_FileInformationXP_LastRunTime                 int64
	Off_FileInformationXP_NumberOfFileMetrics         int64
	Off_FileInformationXP_NumberOfTraceChains         int64
	Off_FileInformationXP_NumberOfVolumes             int64
	Off_FileInformationXP_RunCount                    int64
	Off_FileInformationXP_TraceChainsArrayOffset      int64
	Off_FileInformationXP_VolumesInformationOffset    int64
	Off_FileInformationXP_VolumesInformationSize      int64
	Off_FileMetricsEntryV17_FilenameLength            int64
	Off_FileMetricsEntryV17_FilenameOffset            int64
	Off_FileMetricsEntryV30_FilenameLength            int64
	Off_FileMetricsEntryV30_FilenameOffset            int64
	Off_FileMetricsEntryV30_MFTFileReference          int64
	Off_MAMHeader_Signature                           int64
	Off_MAMHeader_UncompressedSize                    int64
	Off_SCCAHeader_Executable                         int64
	Off_SCCAHeader_FileSize                           int64
	Off_SCCAHeader_Hash                               int64
	Off_SCCAHeader_Signature                          int64
	Off_SCCAHeader_Version                            int64
}

type SCCAHeader struct {
	Reader  io.ReaderAt
	Offset  int64
	Profile *PrefetchProfile
}

type WinFileTime struct {
	time.Time
}