Metadatacopystruct _KAB_UM_PROCESS_TREE { struct _RTL_RB_TREE Tree;/* 0x0 16 */ unsigned __int64 TreeLock;/* 0x10 8 */};