_WNF_SUBSCRIPTION

Metadatacopy
struct _WNF_SUBSCRIPTION {
    struct _WNF_NODE_HEADER Header;/* 0x0  4 */
    struct _EX_RUNDOWN_REF RunRef;/* 0x4  4 */
    unsigned __int64 SubscriptionId;/* 0x8  8 */
    struct _LIST_ENTRY ProcessSubscriptionListEntry;/* 0x10  8 */
    struct _EPROCESS* Process;/* 0x18  4 */
    struct _WNF_NAME_INSTANCE* NameInstance;/* 0x1c  4 */
    struct _WNF_STATE_NAME_STRUCT StateName;/* 0x20  8 */
    struct _LIST_ENTRY StateSubscriptionListEntry;/* 0x28  8 */
    unsigned long CallbackRoutine;/* 0x30  4 */
    void* CallbackContext;/* 0x34  4 */
    unsigned long CurrentChangeStamp;/* 0x38  4 */
    unsigned long SubscribedEventSet;/* 0x3c  4 */
    /* ── cacheline 1 boundary (64 bytes) ── */
    struct _LIST_ENTRY PendingSubscriptionListEntry;/* 0x40  8 */
    enum _WNF_SUBSCRIPTION_STATE SubscriptionState;/* 0x48  4 */
    unsigned long SignaledEventSet;/* 0x4c  4 */
    unsigned long InDeliveryEventSet;/* 0x50  4 */
};