struct _ETW_SILODRIVERSTATE { struct _EJOB* Silo;/* 0x0 4 */ struct _ESERVERSILO_GLOBALS* SiloGlobals;/* 0x4 4 */ unsigned long MaxLoggers;/* 0x8 4 */ /* 4 bytes padding */ struct _ETW_GUID_ENTRY EtwpSecurityProviderGuidEntry;/* 0x10 376 */ /* ── cacheline 6 boundary (384 bytes) ── */ struct _EX_RUNDOWN_REF_CACHE_AWARE** EtwpLoggerRundown;/* 0x188 4 */ struct _WMI_LOGGER_CONTEXT** EtwpLoggerContext;/* 0x18c 4 */ struct _ETW_HASH_BUCKET EtwpGuidHashTable[64];/* 0x190 1792 */ /* ── cacheline 34 boundary (2176 bytes) ── */ unsigned short EtwpSecurityLoggers[8];/* 0x890 16 */ unsigned char EtwpSecurityProviderEnableMask;/* 0x8a0 1 */ /* 3 bytes padding */ long EtwpShutdownInProgress;/* 0x8a4 4 */ unsigned long EtwpSecurityProviderPID;/* 0x8a8 4 */ struct _ETW_PRIV_HANDLE_DEMUX_TABLE PrivHandleDemuxTable;/* 0x8ac 16 */ struct _ETW_COUNTERS EtwpCounters;/* 0x8bc 16 */ /* 4 bytes padding */ /* ── cacheline 35 boundary (2240 bytes) ── */ union _LARGE_INTEGER LogfileBytesWritten;/* 0x8d0 8 */ struct _ETW_SILO_TRACING_BLOCK* ProcessorBlocks;/* 0x8d8 4 */ struct _EX_WNF_SUBSCRIPTION* ContainerRestoreWnfSubscription;/* 0x8dc 4 */ struct _GUID PartitionId;/* 0x8e0 16 */ struct _GUID ParentId;/* 0x8f0 16 */ /* ── cacheline 36 boundary (2304 bytes) ── */ union _LARGE_INTEGER QpcOffsetFromRoot;/* 0x900 8 */ char* PartitionName;/* 0x908 4 */ unsigned short PartitionNameSize;/* 0x90c 2 */ unsigned short UnusedPadding;/* 0x90e 2 */ unsigned long PartitionType;/* 0x910 4 */ struct _ETW_SYSTEM_LOGGER_SETTINGS SystemLoggerSettings;/* 0x914 372 */ /* ── cacheline 42 boundary (2688 bytes) ── */ struct _KMUTANT EtwpStartTraceMutex;/* 0xa88 32 */};size 2728 (0xaa8)25 members3 holes (11 bytes)padding 043 cachelines
Used in (4)