struct _ETW_SILODRIVERSTATE { struct _EJOB* Silo;/* 0x0 8 */ struct _ESERVERSILO_GLOBALS* SiloGlobals;/* 0x8 8 */ unsigned long MaxLoggers;/* 0x10 4 */ /* 4 bytes padding */ struct _ETW_GUID_ENTRY EtwpSecurityProviderGuidEntry;/* 0x18 680 */ /* ── cacheline 11 boundary (704 bytes) ── */ struct _EX_RUNDOWN_REF_CACHE_AWARE** EtwpLoggerRundown;/* 0x2c0 8 */ struct _WMI_LOGGER_CONTEXT** EtwpLoggerContext;/* 0x2c8 8 */ struct _ETW_HASH_BUCKET EtwpGuidHashTable[64];/* 0x2d0 3584 */ /* ── cacheline 67 boundary (4288 bytes) ── */ unsigned short EtwpSecurityLoggers[16];/* 0x10d0 32 */ unsigned short EtwpSecurityProviderEnableMask;/* 0x10f0 2 */ /* 2 bytes padding */ long EtwpShutdownInProgress;/* 0x10f4 4 */ unsigned long EtwpSecurityProviderPID;/* 0x10f8 4 */ /* 4 bytes padding */ /* ── cacheline 68 boundary (4352 bytes) ── */ struct _ETW_PRIV_HANDLE_DEMUX_TABLE PrivHandleDemuxTable;/* 0x1100 32 */ wchar_t* RTBacklogFileRoot;/* 0x1120 8 */ struct _ETW_COUNTERS EtwpCounters;/* 0x1128 16 */ union _LARGE_INTEGER LogfileBytesWritten;/* 0x1138 8 */ /* ── cacheline 69 boundary (4416 bytes) ── */ struct _ETW_SILO_TRACING_BLOCK* ProcessorBlocks;/* 0x1140 8 */ struct _EX_WNF_SUBSCRIPTION* ContainerStateWnfSubscription;/* 0x1148 8 */ unsigned long ContainerStateWnfCallbackCalled;/* 0x1150 4 */ /* 4 bytes padding */ struct _WORK_QUEUE_ITEM* UnsubscribeWorkItem;/* 0x1158 8 */ struct _GUID PartitionId;/* 0x1160 16 */ struct _GUID ParentId;/* 0x1170 16 */ /* ── cacheline 70 boundary (4480 bytes) ── */ union _LARGE_INTEGER QpcOffsetFromRoot;/* 0x1180 8 */ char* PartitionName;/* 0x1188 8 */ unsigned short PartitionNameSize;/* 0x1190 2 */ unsigned short UnusedPadding;/* 0x1192 2 */ unsigned long PartitionType;/* 0x1194 4 */ struct _ETW_SYSTEM_LOGGER_SETTINGS SystemLoggerSettings;/* 0x1198 372 */ /* 4 bytes padding */ /* ── cacheline 76 boundary (4864 bytes) ── */ struct _KMUTANT EtwpStartTraceMutex;/* 0x1310 56 */};size 4936 (0x1348)28 members5 holes (18 bytes)padding 078 cachelines
Used in (4)