_WNODE_HEADER

Metadatacopy
struct _WNODE_HEADER {
    unsigned long BufferSize;/* 0x0  4 */
    unsigned long ProviderId;/* 0x4  4 */
    union {
        unsigned __int64 HistoricalContext;/* 0x8  8 */
        struct {
            unsigned long Version;/* 0x8  4 */
            unsigned long Linkage;/* 0xc  4 */
        };/* 0x8  8 */
    };/* 0x8  8 */
    union {
        unsigned long CountLost;/* 0x10  4 */
        void* KernelHandle;/* 0x10  8 */
        union _LARGE_INTEGER TimeStamp;/* 0x10  8 */
    };/* 0x10  8 */
    struct _GUID Guid;/* 0x18  16 */
    unsigned long ClientContext;/* 0x28  4 */
    unsigned long Flags;/* 0x2c  4 */
};