Techwiki:Win32k/EFSTATE

typedef struct _EFENTRY
{
  HGDIOBJ hPfe;          // 0x0000
  DWORD   dwUnknown04;   // 0x0004
  DWORD   dwUnknown08;   // 0x0008
  DWORD   dwUnknown0c;   // 0x000c
} EFENTRY, *PEFENTRY;

typedef struct _EFSTATE
{
  BASEOBJECT baseobj;      // 0x0000

  DWORD      dwUnknown10; // 0x0010: 0x00000000
  DWORD      dwUnknown14; // 0x0014: 0x00000002
  PEFENTRY   pefeLast;    // 0x0018
  PVOID      pEnd;        // 0x001c
  PEFENTRY   pefeFirst;   // 0x0020
  ULONG      cbDataSize;  // 0x0024: 0x000001e4
  EFENTRY    aefe[32];    // 
} EFSTATE, *PEFSTATE;