x64 / ntdllntoskrnl /

_tlgProvider_t

← 10.0.28000.3231 16 builds latest →
struct _tlgProvider_t {
unsigned LevelPlus1;/* 0x0 0 */
/* 8 bytes padding */
const unsigned short* ProviderMetadataPtr;/* 0x8 8 */
unsigned __int64 KeywordAny;/* 0x10 8 */
unsigned __int64 KeywordAll;/* 0x18 8 */
unsigned __int64 RegHandle;/* 0x20 8 */
void (*EnableCallback)(const struct _GUID*, unsigned long, unsigned char, unsigned __int64, unsigned __int64, struct _EVENT_FILTER_DESCRIPTOR*, void*);/* 0x28 8 */
void* CallbackContext;/* 0x30 8 */
};
size 56 (0x38)7 members1 hole (8 bytes)padding 01 cacheline