typedef struct _ETW_REALTIME_CONSUMER              // 21 elements, 0x88 bytes (sizeof)
          {
/*0x000*/     struct _LIST_ENTRY Links;                      // 2 elements, 0x10 bytes (sizeof)
/*0x010*/     VOID*        ProcessHandle;
/*0x018*/     struct _EPROCESS* ProcessObject;
/*0x020*/     VOID*        NextNotDelivered;
/*0x028*/     VOID*        RealtimeConnectContext;
/*0x030*/     struct _KEVENT* DisconnectEvent;
/*0x038*/     struct _KEVENT* DataAvailableEvent;
/*0x040*/     ULONG32*     UserBufferCount;
/*0x048*/     struct _SINGLE_LIST_ENTRY* UserBufferListHead;
/*0x050*/     ULONG32      BuffersLost;
/*0x054*/     ULONG32      EmptyBuffersCount;
/*0x058*/     ULONG32      LoggerId;
/*0x05C*/     UINT8        ShutDownRequested;
/*0x05D*/     UINT8        NewBuffersLost;
/*0x05E*/     UINT8        Disconnected;
/*0x05F*/     UINT8        _PADDING0_[0x1];
/*0x060*/     struct _RTL_BITMAP ReservedBufferSpaceBitMap;  // 2 elements, 0x10 bytes (sizeof)
/*0x070*/     UINT8*       ReservedBufferSpace;
/*0x078*/     ULONG32      ReservedBufferSpaceSize;
/*0x07C*/     ULONG32      UserPagesAllocated;
/*0x080*/     ULONG32      UserPagesReused;
/*0x084*/     UINT8        Wow;
/*0x085*/     UINT8        _PADDING1_[0x3];
          }ETW_REALTIME_CONSUMER, *PETW_REALTIME_CONSUMER;
Return to structures/enums list.
Return to O.S. version list.

(c) MoonSols 2010.