WMI_BUFFER_STATE

The WMI_BUFFER_STATE structure (formally _WMI_BUFFER_STATE) is thought to have existed only as a structure of bit fields in union with the Flags at offset 0x2C in the WMI_BUFFER_HEADER. Even for this purpose it is known only in versions 5.1 and 5.2. It was replaced by an enumeration, the ETW_BUFFER_STATE, in Windows Vista.

The WMI_BUFFER_STATE is four bytes in both 32-bit and 64-bit Windows. Names and types are known from public symbol files for the kernel from Windows XP SP3 and Windows Server 2003 SP2, and no earlier.

ULONG Free : 1;

ULONG InUse : 1;

ULONG Flush : 1;

ULONG Unused : 29;