_EVENT_HEADER

Metadatacopy
struct _EVENT_HEADER {
    unsigned short Size;/* 0x0  2 */
    unsigned short HeaderType;/* 0x2  2 */
    unsigned short Flags;/* 0x4  2 */
    unsigned short EventProperty;/* 0x6  2 */
    unsigned long ThreadId;/* 0x8  4 */
    unsigned long ProcessId;/* 0xc  4 */
    union _LARGE_INTEGER TimeStamp;/* 0x10  8 */
    struct _GUID ProviderId;/* 0x18  16 */
    struct _EVENT_DESCRIPTOR EventDescriptor;/* 0x28  16 */
    union {
        struct {
            unsigned long KernelTime;/* 0x38  4 */
            unsigned long UserTime;/* 0x3c  4 */
        };/* 0x38  8 */
        unsigned __int64 ProcessorTime;/* 0x38  8 */
    };/* 0x38  8 */
    /* ── cacheline 1 boundary (64 bytes) ── */
    struct _GUID ActivityId;/* 0x40  16 */
};