_ETW_SILODRIVERSTATE

Metadatacopy
struct _ETW_SILODRIVERSTATE {
    struct _EJOB* Silo;/* 0x0  8 */
    struct _ESERVERSILO_GLOBALS* SiloGlobals;/* 0x8  8 */
    unsigned long MaxLoggers;/* 0x10  4 */
    /* 4 bytes padding */
    struct _ETW_GUID_ENTRY EtwpSecurityProviderGuidEntry;/* 0x18  424 */
    /* ── cacheline 7 boundary (448 bytes) ── */
    struct _EX_RUNDOWN_REF_CACHE_AWARE** EtwpLoggerRundown;/* 0x1c0  8 */
    struct _WMI_LOGGER_CONTEXT** EtwpLoggerContext;/* 0x1c8  8 */
    struct _ETW_HASH_BUCKET EtwpGuidHashTable[64];/* 0x1d0  3584 */
    /* ── cacheline 63 boundary (4032 bytes) ── */
    unsigned short EtwpSecurityLoggers[8];/* 0xfd0  16 */
    unsigned char EtwpSecurityProviderEnableMask;/* 0xfe0  1 */
    /* 3 bytes padding */
    long EtwpShutdownInProgress;/* 0xfe4  4 */
    unsigned long EtwpSecurityProviderPID;/* 0xfe8  4 */
    /* 4 bytes padding */
    struct _ETW_PRIV_HANDLE_DEMUX_TABLE PrivHandleDemuxTable;/* 0xff0  32 */
    /* ── cacheline 64 boundary (4096 bytes) ── */
    wchar_t* RTBacklogFileRoot;/* 0x1010  8 */
    struct _ETW_COUNTERS EtwpCounters;/* 0x1018  16 */
    union _LARGE_INTEGER LogfileBytesWritten;/* 0x1028  8 */
    struct _ETW_SILO_TRACING_BLOCK* ProcessorBlocks;/* 0x1030  8 */
    struct _EX_WNF_SUBSCRIPTION* ContainerStateWnfSubscription;/* 0x1038  8 */
    /* ── cacheline 65 boundary (4160 bytes) ── */
    unsigned long ContainerStateWnfCallbackCalled;/* 0x1040  4 */
    /* 4 bytes padding */
    struct _WORK_QUEUE_ITEM* UnsubscribeWorkItem;/* 0x1048  8 */
    struct _GUID PartitionId;/* 0x1050  16 */
    struct _GUID ParentId;/* 0x1060  16 */
    union _LARGE_INTEGER QpcOffsetFromRoot;/* 0x1070  8 */
    char* PartitionName;/* 0x1078  8 */
    /* ── cacheline 66 boundary (4224 bytes) ── */
    unsigned short PartitionNameSize;/* 0x1080  2 */
    unsigned short UnusedPadding;/* 0x1082  2 */
    unsigned long PartitionType;/* 0x1084  4 */
    struct _ETW_SYSTEM_LOGGER_SETTINGS SystemLoggerSettings;/* 0x1088  372 */
    /* 4 bytes padding */
    /* ── cacheline 72 boundary (4608 bytes) ── */
    struct _KMUTANT EtwpStartTraceMutex;/* 0x1200  56 */
};