struct _EVENTLOGRECORD { unsigned long Length;/* 0x0 4 */ unsigned long Reserved;/* 0x4 4 */ unsigned long RecordNumber;/* 0x8 4 */ unsigned long TimeGenerated;/* 0xc 4 */ unsigned long TimeWritten;/* 0x10 4 */ unsigned long EventID;/* 0x14 4 */ unsigned short EventType;/* 0x18 2 */ unsigned short NumStrings;/* 0x1a 2 */ unsigned short EventCategory;/* 0x1c 2 */ unsigned short ReservedFlags;/* 0x1e 2 */ unsigned long ClosingRecordNumber;/* 0x20 4 */ unsigned long StringOffset;/* 0x24 4 */ unsigned long UserSidLength;/* 0x28 4 */ unsigned long UserSidOffset;/* 0x2c 4 */ unsigned long DataLength;/* 0x30 4 */ unsigned long DataOffset;/* 0x34 4 */};/* computed from WINNT.H, NT 4.0 SDK */size 56 (0x38)16 members0 holespadding 01 cacheline
Used in (0)