https://powerseb.github.io/posts/LSASS-parsing-without-a-cat/