x86 / ntdllntoskrnl /

_ETW_IPT_SUPPORT

← 10.0.18362.1016 4 builds latest →
struct _ETW_IPT_SUPPORT {
void* IptHandle;/* 0x0 4 */
/* 4 bytes padding */
unsigned __int64 IptOption;/* 0x8 8 */
volatile unsigned long HookIdCount;/* 0x14 4 */
unsigned short HookId[4];/* 0x18 8 */
};
size 32 (0x20)5 members1 hole (4 bytes)padding 01 cacheline
Used in (1)