_ETW_REG_ENTRY

Metadatacopy
struct _ETW_REG_ENTRY {
    struct _LIST_ENTRY RegList;/* 0x0  16 */
    struct _LIST_ENTRY GroupRegList;/* 0x10  16 */
    struct _ETW_GUID_ENTRY* GuidEntry;/* 0x20  8 */
    struct _ETW_GUID_ENTRY* GroupEntry;/* 0x28  8 */
    union {
        struct _ETW_REPLY_QUEUE* ReplyQueue;/* 0x30  8 */
        struct _ETW_QUEUE_ENTRY* ReplySlot[4];/* 0x30  32 */
        struct {
            void* Caller;/* 0x30  8 */
            unsigned long SessionId;/* 0x38  4 */
        };/* 0x30  12 */
    };/* 0x30  32 */
    /* ── cacheline 1 boundary (64 bytes) ── */
    union {
        struct _EPROCESS* Process;/* 0x50  8 */
        void* CallbackContext;/* 0x50  8 */
    };/* 0x50  8 */
    void* Callback;/* 0x58  8 */
    unsigned short Index;/* 0x60  2 */
    union {
        unsigned short Flags;/* 0x62  2 */
        struct {
            unsigned short DbgKernelRegistration : 1;/* 0x62:0  2 */
            unsigned short DbgUserRegistration : 1;/* 0x62:1  2 */
            unsigned short DbgReplyRegistration : 1;/* 0x62:2  2 */
            unsigned short DbgClassicRegistration : 1;/* 0x62:3  2 */
            unsigned short DbgSessionSpaceRegistration : 1;/* 0x62:4  2 */
            unsigned short DbgModernRegistration : 1;/* 0x62:5  2 */
            unsigned short DbgClosed : 1;/* 0x62:6  2 */
            unsigned short DbgInserted : 1;/* 0x62:7  2 */
            unsigned short DbgWow64 : 1;/* 0x62:8  2 */
            unsigned short DbgUseDescriptorType : 1;/* 0x62:9  2 */
            unsigned short DbgDropProviderTraits : 1;/* 0x62:10  2 */
        };/* 0x62  2 */
    };/* 0x62  2 */
    unsigned char EnableMask;/* 0x64  1 */
    unsigned char GroupEnableMask;/* 0x65  1 */
    unsigned char HostEnableMask;/* 0x66  1 */
    unsigned char HostGroupEnableMask;/* 0x67  1 */
    struct _ETW_PROVIDER_TRAITS* Traits;/* 0x68  8 */
};