struct _ETW_REG_ENTRY { struct _LIST_ENTRY RegList;/* 0x0 8 */ struct _LIST_ENTRY GroupRegList;/* 0x8 8 */ struct _ETW_GUID_ENTRY* GuidEntry;/* 0x10 4 */ struct _ETW_GUID_ENTRY* GroupEntry;/* 0x14 4 */ union { struct _ETW_REPLY_QUEUE* ReplyQueue;/* 0x18 4 */ struct _ETW_QUEUE_ENTRY* ReplySlot[4];/* 0x18 16 */ struct { void* Caller;/* 0x18 4 */ unsigned long SessionId;/* 0x1c 4 */ };/* 0x18 8 */ };/* 0x18 16 */ union { struct _EPROCESS* Process;/* 0x28 4 */ void* CallbackContext;/* 0x28 4 */ };/* 0x28 4 */ void* Callback;/* 0x2c 4 */ unsigned short Index;/* 0x30 2 */ union { unsigned short Flags;/* 0x32 2 */ struct { unsigned short DbgKernelRegistration : 1;/* 0x32:0 2 */ unsigned short DbgUserRegistration : 1;/* 0x32:1 2 */ unsigned short DbgReplyRegistration : 1;/* 0x32:2 2 */ unsigned short DbgClassicRegistration : 1;/* 0x32:3 2 */ unsigned short DbgSessionSpaceRegistration : 1;/* 0x32:4 2 */ unsigned short DbgModernRegistration : 1;/* 0x32:5 2 */ unsigned short DbgClosed : 1;/* 0x32:6 2 */ unsigned short DbgInserted : 1;/* 0x32:7 2 */ unsigned short DbgWow64 : 1;/* 0x32:8 2 */ unsigned short DbgUseDescriptorType : 1;/* 0x32:9 2 */ unsigned short DbgDropProviderTraits : 1;/* 0x32:10 2 */ };/* 0x32 2 */ };/* 0x32 2 */ unsigned char EnableMask;/* 0x34 1 */ unsigned char GroupEnableMask;/* 0x35 1 */ unsigned char HostEnableMask;/* 0x36 1 */ unsigned char HostGroupEnableMask;/* 0x37 1 */ struct _ETW_PROVIDER_TRAITS* Traits;/* 0x38 4 */};size 60 (0x3c)29 members0 holespadding 01 cacheline
Used in (1)