x64x86arm64 / ntdllntoskrnl

_tlgProvider_t

← first 1 build latest →
struct _tlgProvider_t {
unsigned LevelPlus1;/* 0x0 0 */
/* 8 bytes padding */
const unsigned short* ProviderMetadataPtr;/* 0x8 8 */
unsigned __int64 KeywordAny;/* 0x10 8 */
unsigned __int64 KeywordAll;/* 0x18 8 */
unsigned __int64 RegHandle;/* 0x20 8 */
void (*EnableCallback)(const struct _GUID*, unsigned long, unsigned char, unsigned __int64, unsigned __int64, struct _EVENT_FILTER_DESCRIPTOR*, void*);/* 0x28 8 */
void* CallbackContext;/* 0x30 8 */
};
size 56 (0x38)7 members1 hole (8 bytes)padding 01 cacheline
Used in (1)