x64x86arm64 / ntdllntoskrnl

_tlgProvider_t

← 10.0.18362.1016 8 builds latest →
struct _tlgProvider_t {
unsigned LevelPlus1;/* 0x0 0 */
/* 4 bytes padding */
const unsigned short* ProviderMetadataPtr;/* 0x4 4 */
unsigned __int64 KeywordAny;/* 0x8 8 */
unsigned __int64 KeywordAll;/* 0x10 8 */
unsigned __int64 RegHandle;/* 0x18 8 */
void (*EnableCallback)(const struct _GUID*, unsigned long, unsigned char, unsigned __int64, unsigned __int64, struct _EVENT_FILTER_DESCRIPTOR*, void*);/* 0x20 4 */
void* CallbackContext;/* 0x24 4 */
};
size 40 (0x28)7 members1 hole (4 bytes)padding 01 cacheline
Used in (1)