typedef struct _ETW_REALTIME_CONSUMER              // 20 elements, 0x50 bytes (sizeof)
          {
/*0x000*/     struct _LIST_ENTRY Links;                      // 2 elements, 0x8 bytes (sizeof)
/*0x008*/     VOID*        ProcessHandle;
/*0x00C*/     struct _EPROCESS* ProcessObject;
/*0x010*/     VOID*        NextNotDelivered;
/*0x014*/     VOID*        RealtimeConnectContext;
/*0x018*/     struct _KEVENT* DisconnectEvent;
/*0x01C*/     struct _KEVENT* DataAvailableEvent;
/*0x020*/     ULONG32*     UserBufferCount;
/*0x024*/     struct _SINGLE_LIST_ENTRY* UserBufferListHead;
/*0x028*/     ULONG32      BuffersLost;
/*0x02C*/     ULONG32      EmptyBuffersCount;
/*0x030*/     ULONG32      LoggerId;
/*0x034*/     UINT8        ShutDownRequested;
/*0x035*/     UINT8        NewBuffersLost;
/*0x036*/     UINT8        Disconnected;
/*0x037*/     UINT8        _PADDING0_[0x1];
/*0x038*/     struct _RTL_BITMAP ReservedBufferSpaceBitMap;  // 2 elements, 0x8 bytes (sizeof)
/*0x040*/     UINT8*       ReservedBufferSpace;
/*0x044*/     ULONG32      ReservedBufferSpaceSize;
/*0x048*/     ULONG32      UserPagesAllocated;
/*0x04C*/     ULONG32      UserPagesReused;
          }ETW_REALTIME_CONSUMER, *PETW_REALTIME_CONSUMER;
Return to structures/enums list.
Return to O.S. version list.

(c) MoonSols 2010.