_ETW_REG_ENTRY

Metadatacopy
struct _ETW_REG_ENTRY {
    struct _LIST_ENTRY RegList;/* 0x0  16 */
    struct _LIST_ENTRY GroupRegList;/* 0x10  16 */
    struct _ETW_GUID_ENTRY* GuidEntry;/* 0x20  8 */
    struct _ETW_GUID_ENTRY* GroupEntry;/* 0x28  8 */
    union {
        struct _ETW_REPLY_QUEUE* ReplyQueue;/* 0x30  8 */
        struct _ETW_QUEUE_ENTRY* ReplySlot[4];/* 0x30  32 */
        struct {
            void* Caller;/* 0x30  8 */
            unsigned long SessionId;/* 0x38  4 */
        };/* 0x30  12 */
    };/* 0x30  32 */
    /* ── cacheline 1 boundary (64 bytes) ── */
    union {
        struct _EPROCESS* Process;/* 0x50  8 */
        void* CallbackContext;/* 0x50  8 */
    };/* 0x50  8 */
    void* Callback;/* 0x58  8 */
    unsigned short Index;/* 0x60  2 */
    unsigned short Flags;/* 0x62  2 */
    unsigned short EnableMask;/* 0x64  2 */
    unsigned short GroupEnableMask;/* 0x66  2 */
    unsigned short HostEnableMask;/* 0x68  2 */
    unsigned short HostGroupEnableMask;/* 0x6a  2 */
    /* 4 bytes padding */
    struct _ETW_PROVIDER_TRAITS* Traits;/* 0x70  8 */
};