Geoff Chappell, Software Analyst
The ETW_PROVIDER_TABLE_ENTRY structure is 0x10 and 0x18 bytes in 32-bit and 64-bit Windows, respectively.
| Offset (x86) | Offset (x64) | Definition | Versions |
|---|---|---|---|
| 0x00 | 0x00 |
LONG RefCount; |
6.0 to 6.1 |
| 0x04 | 0x04 |
ETW_PROVIDER_STATE State; |
6.0 to 6.1 |
| 0x08 | 0x08 |
ETW_REG_ENTRY *RegEntry; |
6.0 to 6.1 |
| 0x0C | 0x10 |
PVOID Caller; |
6.0 to 6.1 |