arm64 / ntdllntoskrnl /

_AGGREGATED_PAYLOAD_FILTER

← first 1 build latest →
struct _AGGREGATED_PAYLOAD_FILTER {
unsigned short MagicValue : 12;/* 0x0:0 2 */
unsigned short DescriptorVersion : 4;/* 0x0:12 2 */
unsigned short Size;/* 0x2 2 */
unsigned short PredicateCount;/* 0x4 2 */
unsigned short Reserved;/* 0x6 2 */
unsigned __int64 HashedEventIdBitmap;/* 0x8 8 */
unsigned short EachEventTableOffset;/* 0x20 2 */
unsigned short EachEventTableLength;/* 0x22 2 */
unsigned short PayloadDecoderTableOffset;/* 0x24 2 */
unsigned short PayloadDecoderTableLength;/* 0x26 2 */
unsigned short EventFilterTableOffset;/* 0x28 2 */
unsigned short EventFilterTableLength;/* 0x2a 2 */
unsigned short UNICODEStringTableOffset;/* 0x2c 2 */
unsigned short UNICODEStringTableLength;/* 0x2e 2 */
unsigned short ANSIStringTableOffset;/* 0x30 2 */
unsigned short ANSIStringTableLength;/* 0x32 2 */
/* 4 bytes padding */
};
size 80 (0x50)18 members1 hole (4 bytes)padding 02 cachelines
Used in (1)