struct _EVENT_HEADER_EXTENDED_DATA_ITEM {
unsigned short Reserved1;/* 0x0 2 */
unsigned short ExtType;/* 0x2 2 */
unsigned short Linkage : 1;/* 0x4:0 2 */
unsigned short Reserved2 : 15;/* 0x4:1 2 */
unsigned short DataSize;/* 0x6 2 */
unsigned __int64 DataPtr;/* 0x8 8 */
};