Geoff Chappell, Software Analyst
The public symbol file NTKRPAMP.PDB for the original release of Windows 10 tells that the kernel is built with the ETWUMKM.H header at
d:\th.public.fre\internal\minwin\priv_sdk\inc
and draws from it the following type definitions:
| Line Number | Type |
|---|---|
| 119 | struct _ETW_WMITRACE_WORK |
| 208 | struct _ETW_SYSTEMTIME |
| 414 | struct _ETWP_NOTIFICATION_HEADER |
| 538 | struct _NB10 |
| 550 | struct _RSDS |
| 561 | union _CVDD |
| 567 | struct _PROVIDER_BINARY_ENTRY |
The header ETWUMKM.H is not known in any Device Driver Kit (DDK) or Windows Driver Kit (WDK).