struct _VF_SUSPECT_DRIVER_ENTRY// Size=0x28
{
    struct _LIST_ENTRY Links;// Offset=0x0 Size=0x10
    unsigned long Loads;// Offset=0x10 Size=0x4
    unsigned long Unloads;// Offset=0x14 Size=0x4
    struct _UNICODE_STRING BaseName;// Offset=0x18 Size=0x10
};