{ "Constants":[{ "Name":"ALPCGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"45d8cccd-539f-4b72-a8b7-5c683142609a" ,"Attrs":[] },{ "Name":"DiskIoGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"3d6fa8d4-fe05-11d0-9dda-00c04fd7ba7c" ,"Attrs":[] },{ "Name":"EventTraceConfigGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"01853a65-418f-4f36-aefc-dc0f1d2fd235" ,"Attrs":[] },{ "Name":"FileIoGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"90cbdc39-4a3e-11d1-84f4-0000f80464e3" ,"Attrs":[] },{ "Name":"ImageLoadGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"2cb15d1d-5fc1-11d2-abe1-00a0c911f518" ,"Attrs":[] },{ "Name":"PageFaultGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"3d6fa8d3-fe05-11d0-9dda-00c04fd7ba7c" ,"Attrs":[] },{ "Name":"PerfInfoGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"ce1dbfb4-137e-4da6-87b0-3f59aa102cbc" ,"Attrs":[] },{ "Name":"ProcessGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"3d6fa8d0-fe05-11d0-9dda-00c04fd7ba7c" ,"Attrs":[] },{ "Name":"RegistryGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"ae53722e-c863-11d2-8659-00c04fa321a1" ,"Attrs":[] },{ "Name":"SplitIoGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"d837ca92-12b9-44a5-ad6a-3a65b3578aa8" ,"Attrs":[] },{ "Name":"TcpIpGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"9a280ac0-c8e0-11d1-84e2-00c04fb998a2" ,"Attrs":[] },{ "Name":"ThreadGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"3d6fa8d1-fe05-11d0-9dda-00c04fd7ba7c" ,"Attrs":[] },{ "Name":"UdpIpGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"bf3a50c5-a9c9-4988-a005-2df0b7c80f80" ,"Attrs":[] },{ "Name":"WNODE_FLAG_ALL_DATA" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1 ,"Attrs":[] },{ "Name":"WNODE_FLAG_SINGLE_INSTANCE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2 ,"Attrs":[] },{ "Name":"WNODE_FLAG_SINGLE_ITEM" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":4 ,"Attrs":[] },{ "Name":"WNODE_FLAG_EVENT_ITEM" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":8 ,"Attrs":[] },{ "Name":"WNODE_FLAG_FIXED_INSTANCE_SIZE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":16 ,"Attrs":[] },{ "Name":"WNODE_FLAG_TOO_SMALL" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":32 ,"Attrs":[] },{ "Name":"WNODE_FLAG_INSTANCES_SAME" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":64 ,"Attrs":[] },{ "Name":"WNODE_FLAG_STATIC_INSTANCE_NAMES" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":128 ,"Attrs":[] },{ "Name":"WNODE_FLAG_INTERNAL" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":256 ,"Attrs":[] },{ "Name":"WNODE_FLAG_USE_TIMESTAMP" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":512 ,"Attrs":[] },{ "Name":"WNODE_FLAG_PERSIST_EVENT" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1024 ,"Attrs":[] },{ "Name":"WNODE_FLAG_EVENT_REFERENCE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":8192 ,"Attrs":[] },{ "Name":"WNODE_FLAG_ANSI_INSTANCENAMES" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":16384 ,"Attrs":[] },{ "Name":"WNODE_FLAG_METHOD_ITEM" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":32768 ,"Attrs":[] },{ "Name":"WNODE_FLAG_PDO_INSTANCE_NAMES" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":65536 ,"Attrs":[] },{ "Name":"WNODE_FLAG_TRACED_GUID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":131072 ,"Attrs":[] },{ "Name":"WNODE_FLAG_LOG_WNODE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":262144 ,"Attrs":[] },{ "Name":"WNODE_FLAG_USE_GUID_PTR" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":524288 ,"Attrs":[] },{ "Name":"WNODE_FLAG_USE_MOF_PTR" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1048576 ,"Attrs":[] },{ "Name":"WNODE_FLAG_NO_HEADER" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2097152 ,"Attrs":[] },{ "Name":"WNODE_FLAG_SEND_DATA_BLOCK" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":4194304 ,"Attrs":[] },{ "Name":"WNODE_FLAG_VERSIONED_PROPERTIES" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":8388608 ,"Attrs":[] },{ "Name":"WNODE_FLAG_SEVERITY_MASK" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":4278190080 ,"Attrs":[] },{ "Name":"WMIREG_FLAG_EXPENSIVE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1 ,"Attrs":[] },{ "Name":"WMIREG_FLAG_INSTANCE_LIST" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":4 ,"Attrs":[] },{ "Name":"WMIREG_FLAG_INSTANCE_BASENAME" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":8 ,"Attrs":[] },{ "Name":"WMIREG_FLAG_INSTANCE_PDO" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":32 ,"Attrs":[] },{ "Name":"WMIREG_FLAG_REMOVE_GUID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":65536 ,"Attrs":[] },{ "Name":"WMIREG_FLAG_RESERVED1" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":131072 ,"Attrs":[] },{ "Name":"WMIREG_FLAG_RESERVED2" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":262144 ,"Attrs":[] },{ "Name":"WMIREG_FLAG_TRACED_GUID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":524288 ,"Attrs":[] },{ "Name":"WMIREG_FLAG_TRACE_CONTROL_GUID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":4096 ,"Attrs":[] },{ "Name":"WMIREG_FLAG_EVENT_ONLY_GUID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":64 ,"Attrs":[] },{ "Name":"WMI_GUIDTYPE_TRACECONTROL" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":0 ,"Attrs":[] },{ "Name":"WMI_GUIDTYPE_TRACE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1 ,"Attrs":[] },{ "Name":"WMI_GUIDTYPE_DATA" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2 ,"Attrs":[] },{ "Name":"WMI_GUIDTYPE_EVENT" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":3 ,"Attrs":[] },{ "Name":"WMIGUID_QUERY" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1 ,"Attrs":[] },{ "Name":"WMIGUID_SET" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2 ,"Attrs":[] },{ "Name":"WMIGUID_NOTIFICATION" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":4 ,"Attrs":[] },{ "Name":"WMIGUID_READ_DESCRIPTION" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":8 ,"Attrs":[] },{ "Name":"WMIGUID_EXECUTE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":16 ,"Attrs":[] },{ "Name":"TRACELOG_CREATE_REALTIME" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":32 ,"Attrs":[] },{ "Name":"TRACELOG_CREATE_ONDISK" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":64 ,"Attrs":[] },{ "Name":"TRACELOG_GUID_ENABLE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":128 ,"Attrs":[] },{ "Name":"TRACELOG_ACCESS_KERNEL_LOGGER" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":256 ,"Attrs":[] },{ "Name":"TRACELOG_LOG_EVENT" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":512 ,"Attrs":[] },{ "Name":"TRACELOG_CREATE_INPROC" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":512 ,"Attrs":[] },{ "Name":"TRACELOG_ACCESS_REALTIME" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1024 ,"Attrs":[] },{ "Name":"TRACELOG_REGISTER_GUIDS" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2048 ,"Attrs":[] },{ "Name":"TRACELOG_JOIN_GROUP" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":4096 ,"Attrs":[] },{ "Name":"WMI_GLOBAL_LOGGER_ID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1 ,"Attrs":[] },{ "Name":"MAX_PAYLOAD_PREDICATES" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":8 ,"Attrs":[] },{ "Name":"EventTraceGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"68fdd900-4a3e-11d1-84f4-0000f80464e3" ,"Attrs":[] },{ "Name":"SystemTraceControlGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"9e814aad-3204-11d2-9a82-006008a86939" ,"Attrs":[] },{ "Name":"DefaultTraceSecurityGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"0811c1af-7a07-4a06-82ed-869455cdf713" ,"Attrs":[] },{ "Name":"PrivateLoggerNotificationGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"3595ab5c-042a-4c8e-b942-2d059bfeb1b1" ,"Attrs":[] },{ "Name":"SystemIoFilterProviderGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"fbd09363-9e22-4661-b8bf-e7a34b535b8c" ,"Attrs":[] },{ "Name":"SystemObjectProviderGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"febd7460-3d1d-47eb-af49-c9eeb1e146f2" ,"Attrs":[] },{ "Name":"SystemPowerProviderGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"c134884a-32d5-4488-80e5-14ed7abb8269" ,"Attrs":[] },{ "Name":"SystemHypervisorProviderGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"bafa072a-918a-4bed-b622-bc152097098f" ,"Attrs":[] },{ "Name":"SystemLockProviderGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"721ddfd3-dacc-4e1e-b26a-a2cb31d4705a" ,"Attrs":[] },{ "Name":"SystemConfigProviderGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"fef3a8b6-318d-4b67-a96a-3b0f6b8f18fe" ,"Attrs":[] },{ "Name":"SystemCpuProviderGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"c6c5265f-eae8-4650-aae4-9d48603d8510" ,"Attrs":[] },{ "Name":"SystemSchedulerProviderGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"599a2a76-4d91-4910-9ac7-7d33f2e97a6c" ,"Attrs":[] },{ "Name":"SystemProfileProviderGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"bfeb0324-1cee-496f-a409-2ac2b48a6322" ,"Attrs":[] },{ "Name":"SystemIoProviderGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"3d5c43e3-0f1c-4202-b817-174c0070dc79" ,"Attrs":[] },{ "Name":"SystemMemoryProviderGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"82958ca9-b6cd-47f8-a3a8-03ae85a4bc24" ,"Attrs":[] },{ "Name":"SystemRegistryProviderGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"16156bd9-fab4-4cfa-a232-89d1099058e3" ,"Attrs":[] },{ "Name":"SystemProcessProviderGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"151f55dc-467d-471f-83b5-5f889d46ff66" ,"Attrs":[] },{ "Name":"SystemAlpcProviderGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"fcb9baaf-e529-4980-92e9-ced1a6aadfdf" ,"Attrs":[] },{ "Name":"SystemSyscallProviderGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"434286f7-6f1b-45bb-b37e-95f623046c7c" ,"Attrs":[] },{ "Name":"SystemInterruptProviderGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"d4bbee17-b545-4888-858b-744169015b25" ,"Attrs":[] },{ "Name":"SystemTimerProviderGuid" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"4f061568-e215-499f-ab2e-eda0ae890a5b" ,"Attrs":[] },{ "Name":"KERNEL_LOGGER_NAMEW" ,"Type":{"Kind":"Native","Name":"String"} ,"ValueType":"String" ,"Value":"NT Kernel Logger" ,"Attrs":[] },{ "Name":"GLOBAL_LOGGER_NAMEW" ,"Type":{"Kind":"Native","Name":"String"} ,"ValueType":"String" ,"Value":"GlobalLogger" ,"Attrs":[] },{ "Name":"EVENT_LOGGER_NAMEW" ,"Type":{"Kind":"Native","Name":"String"} ,"ValueType":"String" ,"Value":"EventLog" ,"Attrs":[] },{ "Name":"DIAG_LOGGER_NAMEW" ,"Type":{"Kind":"Native","Name":"String"} ,"ValueType":"String" ,"Value":"DiagLog" ,"Attrs":[] },{ "Name":"KERNEL_LOGGER_NAMEA" ,"Type":{"Kind":"Native","Name":"String"} ,"ValueType":"String" ,"Value":"NT Kernel Logger" ,"Attrs":[] },{ "Name":"GLOBAL_LOGGER_NAMEA" ,"Type":{"Kind":"Native","Name":"String"} ,"ValueType":"String" ,"Value":"GlobalLogger" ,"Attrs":[] },{ "Name":"EVENT_LOGGER_NAMEA" ,"Type":{"Kind":"Native","Name":"String"} ,"ValueType":"String" ,"Value":"EventLog" ,"Attrs":[] },{ "Name":"DIAG_LOGGER_NAMEA" ,"Type":{"Kind":"Native","Name":"String"} ,"ValueType":"String" ,"Value":"DiagLog" ,"Attrs":[] },{ "Name":"MAX_MOF_FIELDS" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":16 ,"Attrs":[] },{ "Name":"SYSTEM_EVENT_TYPE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_INFO" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":0 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_START" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_END" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_STOP" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_DC_START" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":3 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_DC_END" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":4 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_EXTENSION" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":5 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_REPLY" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":6 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_DEQUEUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":7 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_RESUME" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":7 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CHECKPOINT" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":8 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_SUSPEND" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":8 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_WINEVT_SEND" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":9 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_WINEVT_RECEIVE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":240 ,"Attrs":[] },{ "Name":"TRACE_LEVEL_NONE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":0 ,"Attrs":[] },{ "Name":"TRACE_LEVEL_CRITICAL" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1 ,"Attrs":[] },{ "Name":"TRACE_LEVEL_FATAL" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1 ,"Attrs":[] },{ "Name":"TRACE_LEVEL_ERROR" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2 ,"Attrs":[] },{ "Name":"TRACE_LEVEL_WARNING" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":3 ,"Attrs":[] },{ "Name":"TRACE_LEVEL_INFORMATION" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":4 ,"Attrs":[] },{ "Name":"TRACE_LEVEL_VERBOSE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":5 ,"Attrs":[] },{ "Name":"TRACE_LEVEL_RESERVED6" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":6 ,"Attrs":[] },{ "Name":"TRACE_LEVEL_RESERVED7" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":7 ,"Attrs":[] },{ "Name":"TRACE_LEVEL_RESERVED8" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":8 ,"Attrs":[] },{ "Name":"TRACE_LEVEL_RESERVED9" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":9 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_LOAD" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":10 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_TERMINATE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":11 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_IO_READ" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":10 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_IO_WRITE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":11 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_IO_READ_INIT" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":12 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_IO_WRITE_INIT" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":13 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_IO_FLUSH" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":14 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_IO_FLUSH_INIT" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":15 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_IO_REDIRECTED_INIT" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":16 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_MM_TF" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":10 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_MM_DZF" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":11 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_MM_COW" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":12 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_MM_GPF" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":13 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_MM_HPF" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":14 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_MM_AV" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":15 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_SEND" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":10 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_RECEIVE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":11 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONNECT" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":12 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_DISCONNECT" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":13 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_RETRANSMIT" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":14 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_ACCEPT" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":15 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_RECONNECT" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":16 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONNFAIL" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":17 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_COPY_TCP" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":18 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_COPY_ARP" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":19 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_ACKFULL" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":20 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_ACKPART" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":21 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_ACKDUP" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":22 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_GUIDMAP" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":10 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":11 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_SIDINFO" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":12 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_SECURITY" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":13 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_DBGID_RSDS" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":64 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_REGCREATE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":10 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_REGOPEN" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":11 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_REGDELETE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":12 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_REGQUERY" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":13 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_REGSETVALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":14 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_REGDELETEVALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":15 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_REGQUERYVALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":16 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_REGENUMERATEKEY" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":17 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_REGENUMERATEVALUEKEY" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":18 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_REGQUERYMULTIPLEVALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":19 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_REGSETINFORMATION" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":20 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_REGFLUSH" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":21 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_REGKCBCREATE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":22 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_REGKCBDELETE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":23 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_REGKCBRUNDOWNBEGIN" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":24 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_REGKCBRUNDOWNEND" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":25 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_REGVIRTUALIZE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":26 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_REGCLOSE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":27 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_REGSETSECURITY" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":28 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_REGQUERYSECURITY" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":29 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_REGCOMMIT" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":30 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_REGPREPARE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":31 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_REGROLLBACK" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":32 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_REGMOUNTHIVE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":33 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_CPU" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":10 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_PHYSICALDISK" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":11 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_LOGICALDISK" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":12 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_NIC" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":13 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_VIDEO" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":14 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_SERVICES" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":15 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_POWER" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":16 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_NETINFO" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":17 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_OPTICALMEDIA" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":18 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_IRQ" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":21 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_PNP" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":22 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_IDECHANNEL" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":23 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_NUMANODE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":24 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_PLATFORM" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":25 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_PROCESSORGROUP" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":26 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_PROCESSORNUMBER" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":27 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_DPI" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":28 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_CI_INFO" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":29 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_MACHINEID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":30 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_DEFRAG" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":31 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_MOBILEPLATFORM" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":32 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_DEVICEFAMILY" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":33 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_FLIGHTID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":34 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_PROCESSOR" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":35 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_VIRTUALIZATION" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":36 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_CONFIG_BOOT" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":37 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_OPTICAL_IO_READ" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":55 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_OPTICAL_IO_WRITE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":56 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_OPTICAL_IO_FLUSH" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":57 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_OPTICAL_IO_READ_INIT" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":58 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_OPTICAL_IO_WRITE_INIT" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":59 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_OPTICAL_IO_FLUSH_INIT" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":60 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_FLT_PREOP_INIT" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":96 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_FLT_POSTOP_INIT" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":97 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_FLT_PREOP_COMPLETION" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":98 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_FLT_POSTOP_COMPLETION" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":99 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_FLT_PREOP_FAILURE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":100 ,"Attrs":[] },{ "Name":"EVENT_TRACE_TYPE_FLT_POSTOP_FAILURE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":101 ,"Attrs":[] },{ "Name":"EVENT_TRACE_FLAG_DEBUG_EVENTS" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":4194304 ,"Attrs":[] },{ "Name":"EVENT_TRACE_FLAG_EXTENSION" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2147483648 ,"Attrs":[] },{ "Name":"EVENT_TRACE_FLAG_FORWARD_WMI" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1073741824 ,"Attrs":[] },{ "Name":"EVENT_TRACE_FLAG_ENABLE_RESERVE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":536870912 ,"Attrs":[] },{ "Name":"EVENT_TRACE_FILE_MODE_NONE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":0 ,"Attrs":[] },{ "Name":"EVENT_TRACE_FILE_MODE_SEQUENTIAL" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1 ,"Attrs":[] },{ "Name":"EVENT_TRACE_FILE_MODE_CIRCULAR" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2 ,"Attrs":[] },{ "Name":"EVENT_TRACE_FILE_MODE_APPEND" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":4 ,"Attrs":[] },{ "Name":"EVENT_TRACE_REAL_TIME_MODE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":256 ,"Attrs":[] },{ "Name":"EVENT_TRACE_DELAY_OPEN_FILE_MODE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":512 ,"Attrs":[] },{ "Name":"EVENT_TRACE_BUFFERING_MODE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1024 ,"Attrs":[] },{ "Name":"EVENT_TRACE_PRIVATE_LOGGER_MODE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2048 ,"Attrs":[] },{ "Name":"EVENT_TRACE_ADD_HEADER_MODE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":4096 ,"Attrs":[] },{ "Name":"EVENT_TRACE_USE_GLOBAL_SEQUENCE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":16384 ,"Attrs":[] },{ "Name":"EVENT_TRACE_USE_LOCAL_SEQUENCE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":32768 ,"Attrs":[] },{ "Name":"EVENT_TRACE_RELOG_MODE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":65536 ,"Attrs":[] },{ "Name":"EVENT_TRACE_USE_PAGED_MEMORY" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":16777216 ,"Attrs":[] },{ "Name":"EVENT_TRACE_FILE_MODE_NEWFILE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":8 ,"Attrs":[] },{ "Name":"EVENT_TRACE_FILE_MODE_PREALLOCATE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":32 ,"Attrs":[] },{ "Name":"EVENT_TRACE_NONSTOPPABLE_MODE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":64 ,"Attrs":[] },{ "Name":"EVENT_TRACE_SECURE_MODE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":128 ,"Attrs":[] },{ "Name":"EVENT_TRACE_USE_KBYTES_FOR_SIZE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":8192 ,"Attrs":[] },{ "Name":"EVENT_TRACE_PRIVATE_IN_PROC" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":131072 ,"Attrs":[] },{ "Name":"EVENT_TRACE_MODE_RESERVED" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1048576 ,"Attrs":[] },{ "Name":"EVENT_TRACE_NO_PER_PROCESSOR_BUFFERING" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":268435456 ,"Attrs":[] },{ "Name":"EVENT_TRACE_SYSTEM_LOGGER_MODE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":33554432 ,"Attrs":[] },{ "Name":"EVENT_TRACE_ADDTO_TRIAGE_DUMP" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2147483648 ,"Attrs":[] },{ "Name":"EVENT_TRACE_STOP_ON_HYBRID_SHUTDOWN" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":4194304 ,"Attrs":[] },{ "Name":"EVENT_TRACE_PERSIST_ON_HYBRID_SHUTDOWN" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":8388608 ,"Attrs":[] },{ "Name":"EVENT_TRACE_INDEPENDENT_SESSION_MODE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":134217728 ,"Attrs":[] },{ "Name":"EVENT_TRACE_COMPRESSED_MODE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":67108864 ,"Attrs":[] },{ "Name":"EVENT_TRACE_CONTROL_INCREMENT_FILE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":4 ,"Attrs":[] },{ "Name":"EVENT_TRACE_CONTROL_CONVERT_TO_REALTIME" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":5 ,"Attrs":[] },{ "Name":"TRACE_MESSAGE_PERFORMANCE_TIMESTAMP" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":16 ,"Attrs":[] },{ "Name":"TRACE_MESSAGE_POINTER32" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":64 ,"Attrs":[] },{ "Name":"TRACE_MESSAGE_POINTER64" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":128 ,"Attrs":[] },{ "Name":"TRACE_MESSAGE_FLAG_MASK" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":65535 ,"Attrs":[] },{ "Name":"EVENT_TRACE_USE_PROCTIME" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1 ,"Attrs":[] },{ "Name":"EVENT_TRACE_USE_NOCPUTIME" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2 ,"Attrs":[] },{ "Name":"TRACE_HEADER_FLAG_USE_TIMESTAMP" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":512 ,"Attrs":[] },{ "Name":"TRACE_HEADER_FLAG_TRACED_GUID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":131072 ,"Attrs":[] },{ "Name":"TRACE_HEADER_FLAG_LOG_WNODE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":262144 ,"Attrs":[] },{ "Name":"TRACE_HEADER_FLAG_USE_GUID_PTR" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":524288 ,"Attrs":[] },{ "Name":"TRACE_HEADER_FLAG_USE_MOF_PTR" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1048576 ,"Attrs":[] },{ "Name":"SYSTEM_ALPC_KW_GENERAL" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":1 ,"Attrs":[] },{ "Name":"SYSTEM_CONFIG_KW_SYSTEM" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":1 ,"Attrs":[] },{ "Name":"SYSTEM_CONFIG_KW_GRAPHICS" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":2 ,"Attrs":[] },{ "Name":"SYSTEM_CONFIG_KW_STORAGE" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":4 ,"Attrs":[] },{ "Name":"SYSTEM_CONFIG_KW_NETWORK" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":8 ,"Attrs":[] },{ "Name":"SYSTEM_CONFIG_KW_SERVICES" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":16 ,"Attrs":[] },{ "Name":"SYSTEM_CONFIG_KW_PNP" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":32 ,"Attrs":[] },{ "Name":"SYSTEM_CONFIG_KW_OPTICAL" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":64 ,"Attrs":[] },{ "Name":"SYSTEM_CPU_KW_CONFIG" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":1 ,"Attrs":[] },{ "Name":"SYSTEM_CPU_KW_CACHE_FLUSH" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":2 ,"Attrs":[] },{ "Name":"SYSTEM_CPU_KW_SPEC_CONTROL" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":4 ,"Attrs":[] },{ "Name":"SYSTEM_HYPERVISOR_KW_PROFILE" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":1 ,"Attrs":[] },{ "Name":"SYSTEM_HYPERVISOR_KW_CALLOUTS" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":2 ,"Attrs":[] },{ "Name":"SYSTEM_HYPERVISOR_KW_VTL_CHANGE" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":4 ,"Attrs":[] },{ "Name":"SYSTEM_INTERRUPT_KW_GENERAL" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":1 ,"Attrs":[] },{ "Name":"SYSTEM_INTERRUPT_KW_CLOCK_INTERRUPT" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":2 ,"Attrs":[] },{ "Name":"SYSTEM_INTERRUPT_KW_DPC" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":4 ,"Attrs":[] },{ "Name":"SYSTEM_INTERRUPT_KW_DPC_QUEUE" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":8 ,"Attrs":[] },{ "Name":"SYSTEM_INTERRUPT_KW_WDF_DPC" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":16 ,"Attrs":[] },{ "Name":"SYSTEM_INTERRUPT_KW_WDF_INTERRUPT" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":32 ,"Attrs":[] },{ "Name":"SYSTEM_INTERRUPT_KW_IPI" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":64 ,"Attrs":[] },{ "Name":"SYSTEM_IO_KW_DISK" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":1 ,"Attrs":[] },{ "Name":"SYSTEM_IO_KW_DISK_INIT" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":2 ,"Attrs":[] },{ "Name":"SYSTEM_IO_KW_FILENAME" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":4 ,"Attrs":[] },{ "Name":"SYSTEM_IO_KW_SPLIT" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":8 ,"Attrs":[] },{ "Name":"SYSTEM_IO_KW_FILE" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":16 ,"Attrs":[] },{ "Name":"SYSTEM_IO_KW_OPTICAL" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":32 ,"Attrs":[] },{ "Name":"SYSTEM_IO_KW_OPTICAL_INIT" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":64 ,"Attrs":[] },{ "Name":"SYSTEM_IO_KW_DRIVERS" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":128 ,"Attrs":[] },{ "Name":"SYSTEM_IO_KW_CC" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":256 ,"Attrs":[] },{ "Name":"SYSTEM_IO_KW_NETWORK" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":512 ,"Attrs":[] },{ "Name":"SYSTEM_IOFILTER_KW_GENERAL" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":1 ,"Attrs":[] },{ "Name":"SYSTEM_IOFILTER_KW_INIT" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":2 ,"Attrs":[] },{ "Name":"SYSTEM_IOFILTER_KW_FASTIO" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":4 ,"Attrs":[] },{ "Name":"SYSTEM_IOFILTER_KW_FAILURE" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":8 ,"Attrs":[] },{ "Name":"SYSTEM_LOCK_KW_SPINLOCK" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":1 ,"Attrs":[] },{ "Name":"SYSTEM_LOCK_KW_SPINLOCK_COUNTERS" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":2 ,"Attrs":[] },{ "Name":"SYSTEM_LOCK_KW_SYNC_OBJECTS" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":4 ,"Attrs":[] },{ "Name":"SYSTEM_MEMORY_KW_GENERAL" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":1 ,"Attrs":[] },{ "Name":"SYSTEM_MEMORY_KW_HARD_FAULTS" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":2 ,"Attrs":[] },{ "Name":"SYSTEM_MEMORY_KW_ALL_FAULTS" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":4 ,"Attrs":[] },{ "Name":"SYSTEM_MEMORY_KW_POOL" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":8 ,"Attrs":[] },{ "Name":"SYSTEM_MEMORY_KW_MEMINFO" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":16 ,"Attrs":[] },{ "Name":"SYSTEM_MEMORY_KW_PFSECTION" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":32 ,"Attrs":[] },{ "Name":"SYSTEM_MEMORY_KW_MEMINFO_WS" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":64 ,"Attrs":[] },{ "Name":"SYSTEM_MEMORY_KW_HEAP" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":128 ,"Attrs":[] },{ "Name":"SYSTEM_MEMORY_KW_WS" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":256 ,"Attrs":[] },{ "Name":"SYSTEM_MEMORY_KW_CONTMEM_GEN" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":512 ,"Attrs":[] },{ "Name":"SYSTEM_MEMORY_KW_VIRTUAL_ALLOC" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":1024 ,"Attrs":[] },{ "Name":"SYSTEM_MEMORY_KW_FOOTPRINT" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":2048 ,"Attrs":[] },{ "Name":"SYSTEM_MEMORY_KW_SESSION" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":4096 ,"Attrs":[] },{ "Name":"SYSTEM_MEMORY_KW_REFSET" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":8192 ,"Attrs":[] },{ "Name":"SYSTEM_MEMORY_KW_VAMAP" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":16384 ,"Attrs":[] },{ "Name":"SYSTEM_MEMORY_KW_NONTRADEABLE" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":32768 ,"Attrs":[] },{ "Name":"SYSTEM_OBJECT_KW_GENERAL" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":1 ,"Attrs":[] },{ "Name":"SYSTEM_OBJECT_KW_HANDLE" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":2 ,"Attrs":[] },{ "Name":"SYSTEM_POWER_KW_GENERAL" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":1 ,"Attrs":[] },{ "Name":"SYSTEM_POWER_KW_HIBER_RUNDOWN" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":2 ,"Attrs":[] },{ "Name":"SYSTEM_POWER_KW_PROCESSOR_IDLE" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":4 ,"Attrs":[] },{ "Name":"SYSTEM_POWER_KW_IDLE_SELECTION" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":8 ,"Attrs":[] },{ "Name":"SYSTEM_POWER_KW_PPM_EXIT_LATENCY" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":16 ,"Attrs":[] },{ "Name":"SYSTEM_PROCESS_KW_GENERAL" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":1 ,"Attrs":[] },{ "Name":"SYSTEM_PROCESS_KW_INSWAP" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":2 ,"Attrs":[] },{ "Name":"SYSTEM_PROCESS_KW_FREEZE" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":4 ,"Attrs":[] },{ "Name":"SYSTEM_PROCESS_KW_PERF_COUNTER" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":8 ,"Attrs":[] },{ "Name":"SYSTEM_PROCESS_KW_WAKE_COUNTER" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":16 ,"Attrs":[] },{ "Name":"SYSTEM_PROCESS_KW_WAKE_DROP" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":32 ,"Attrs":[] },{ "Name":"SYSTEM_PROCESS_KW_WAKE_EVENT" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":64 ,"Attrs":[] },{ "Name":"SYSTEM_PROCESS_KW_DEBUG_EVENTS" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":128 ,"Attrs":[] },{ "Name":"SYSTEM_PROCESS_KW_DBGPRINT" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":256 ,"Attrs":[] },{ "Name":"SYSTEM_PROCESS_KW_JOB" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":512 ,"Attrs":[] },{ "Name":"SYSTEM_PROCESS_KW_WORKER_THREAD" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":1024 ,"Attrs":[] },{ "Name":"SYSTEM_PROCESS_KW_THREAD" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":2048 ,"Attrs":[] },{ "Name":"SYSTEM_PROCESS_KW_LOADER" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":4096 ,"Attrs":[] },{ "Name":"SYSTEM_PROFILE_KW_GENERAL" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":1 ,"Attrs":[] },{ "Name":"SYSTEM_PROFILE_KW_PMC_PROFILE" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":2 ,"Attrs":[] },{ "Name":"SYSTEM_REGISTRY_KW_GENERAL" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":1 ,"Attrs":[] },{ "Name":"SYSTEM_REGISTRY_KW_HIVE" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":2 ,"Attrs":[] },{ "Name":"SYSTEM_REGISTRY_KW_NOTIFICATION" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":4 ,"Attrs":[] },{ "Name":"SYSTEM_SCHEDULER_KW_XSCHEDULER" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":1 ,"Attrs":[] },{ "Name":"SYSTEM_SCHEDULER_KW_DISPATCHER" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":2 ,"Attrs":[] },{ "Name":"SYSTEM_SCHEDULER_KW_KERNEL_QUEUE" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":4 ,"Attrs":[] },{ "Name":"SYSTEM_SCHEDULER_KW_SHOULD_YIELD" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":8 ,"Attrs":[] },{ "Name":"SYSTEM_SCHEDULER_KW_ANTI_STARVATION" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":16 ,"Attrs":[] },{ "Name":"SYSTEM_SCHEDULER_KW_LOAD_BALANCER" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":32 ,"Attrs":[] },{ "Name":"SYSTEM_SCHEDULER_KW_AFFINITY" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":64 ,"Attrs":[] },{ "Name":"SYSTEM_SCHEDULER_KW_PRIORITY" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":128 ,"Attrs":[] },{ "Name":"SYSTEM_SCHEDULER_KW_IDEAL_PROCESSOR" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":256 ,"Attrs":[] },{ "Name":"SYSTEM_SCHEDULER_KW_CONTEXT_SWITCH" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":512 ,"Attrs":[] },{ "Name":"SYSTEM_SCHEDULER_KW_COMPACT_CSWITCH" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":1024 ,"Attrs":[] },{ "Name":"SYSTEM_SYSCALL_KW_GENERAL" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":1 ,"Attrs":[] },{ "Name":"SYSTEM_TIMER_KW_GENERAL" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":1 ,"Attrs":[] },{ "Name":"SYSTEM_TIMER_KW_CLOCK_TIMER" ,"Type":{"Kind":"Native","Name":"UInt64"} ,"ValueType":"UInt64" ,"Value":2 ,"Attrs":[] },{ "Name":"SYSTEM_MEMORY_POOL_FILTER_ID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1 ,"Attrs":[] },{ "Name":"ETW_NULL_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":0 ,"Attrs":[] },{ "Name":"ETW_OBJECT_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1 ,"Attrs":[] },{ "Name":"ETW_STRING_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2 ,"Attrs":[] },{ "Name":"ETW_SBYTE_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":3 ,"Attrs":[] },{ "Name":"ETW_BYTE_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":4 ,"Attrs":[] },{ "Name":"ETW_INT16_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":5 ,"Attrs":[] },{ "Name":"ETW_UINT16_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":6 ,"Attrs":[] },{ "Name":"ETW_INT32_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":7 ,"Attrs":[] },{ "Name":"ETW_UINT32_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":8 ,"Attrs":[] },{ "Name":"ETW_INT64_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":9 ,"Attrs":[] },{ "Name":"ETW_UINT64_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":10 ,"Attrs":[] },{ "Name":"ETW_CHAR_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":11 ,"Attrs":[] },{ "Name":"ETW_SINGLE_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":12 ,"Attrs":[] },{ "Name":"ETW_DOUBLE_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":13 ,"Attrs":[] },{ "Name":"ETW_BOOLEAN_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":14 ,"Attrs":[] },{ "Name":"ETW_DECIMAL_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":15 ,"Attrs":[] },{ "Name":"ETW_GUID_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":101 ,"Attrs":[] },{ "Name":"ETW_ASCIICHAR_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":102 ,"Attrs":[] },{ "Name":"ETW_ASCIISTRING_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":103 ,"Attrs":[] },{ "Name":"ETW_COUNTED_STRING_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":104 ,"Attrs":[] },{ "Name":"ETW_POINTER_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":105 ,"Attrs":[] },{ "Name":"ETW_SIZET_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":106 ,"Attrs":[] },{ "Name":"ETW_HIDDEN_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":107 ,"Attrs":[] },{ "Name":"ETW_BOOL_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":108 ,"Attrs":[] },{ "Name":"ETW_COUNTED_ANSISTRING_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":109 ,"Attrs":[] },{ "Name":"ETW_REVERSED_COUNTED_STRING_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":110 ,"Attrs":[] },{ "Name":"ETW_REVERSED_COUNTED_ANSISTRING_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":111 ,"Attrs":[] },{ "Name":"ETW_NON_NULL_TERMINATED_STRING_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":112 ,"Attrs":[] },{ "Name":"ETW_REDUCED_ANSISTRING_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":113 ,"Attrs":[] },{ "Name":"ETW_REDUCED_STRING_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":114 ,"Attrs":[] },{ "Name":"ETW_SID_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":115 ,"Attrs":[] },{ "Name":"ETW_VARIANT_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":116 ,"Attrs":[] },{ "Name":"ETW_PTVECTOR_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":117 ,"Attrs":[] },{ "Name":"ETW_WMITIME_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":118 ,"Attrs":[] },{ "Name":"ETW_DATETIME_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":119 ,"Attrs":[] },{ "Name":"ETW_REFRENCE_TYPE_VALUE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":120 ,"Attrs":[] },{ "Name":"TRACE_PROVIDER_FLAG_LEGACY" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1 ,"Attrs":[] },{ "Name":"TRACE_PROVIDER_FLAG_PRE_ENABLE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2 ,"Attrs":[] },{ "Name":"KERNEL_LOGGER_NAME" ,"Type":{"Kind":"Native","Name":"String"} ,"ValueType":"String" ,"Value":"NT Kernel Logger" ,"Attrs":[] },{ "Name":"GLOBAL_LOGGER_NAME" ,"Type":{"Kind":"Native","Name":"String"} ,"ValueType":"String" ,"Value":"GlobalLogger" ,"Attrs":[] },{ "Name":"EVENT_LOGGER_NAME" ,"Type":{"Kind":"Native","Name":"String"} ,"ValueType":"String" ,"Value":"EventLog" ,"Attrs":[] },{ "Name":"ENABLE_TRACE_PARAMETERS_VERSION" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1 ,"Attrs":[] },{ "Name":"ENABLE_TRACE_PARAMETERS_VERSION_2" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2 ,"Attrs":[] },{ "Name":"EVENT_MIN_LEVEL" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":0 ,"Attrs":[] },{ "Name":"EVENT_MAX_LEVEL" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":255 ,"Attrs":[] },{ "Name":"EVENT_ACTIVITY_CTRL_GET_ID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1 ,"Attrs":[] },{ "Name":"EVENT_ACTIVITY_CTRL_SET_ID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2 ,"Attrs":[] },{ "Name":"EVENT_ACTIVITY_CTRL_CREATE_ID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":3 ,"Attrs":[] },{ "Name":"EVENT_ACTIVITY_CTRL_GET_SET_ID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":4 ,"Attrs":[] },{ "Name":"EVENT_ACTIVITY_CTRL_CREATE_SET_ID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":5 ,"Attrs":[] },{ "Name":"MAX_EVENT_DATA_DESCRIPTORS" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":128 ,"Attrs":[] },{ "Name":"MAX_EVENT_FILTER_DATA_SIZE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1024 ,"Attrs":[] },{ "Name":"MAX_EVENT_FILTER_PAYLOAD_SIZE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":4096 ,"Attrs":[] },{ "Name":"MAX_EVENT_FILTER_EVENT_NAME_SIZE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":4096 ,"Attrs":[] },{ "Name":"MAX_EVENT_FILTERS_COUNT" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":13 ,"Attrs":[] },{ "Name":"MAX_EVENT_FILTER_PID_COUNT" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":8 ,"Attrs":[] },{ "Name":"MAX_EVENT_FILTER_EVENT_ID_COUNT" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":64 ,"Attrs":[] },{ "Name":"EVENT_FILTER_TYPE_NONE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":0 ,"Attrs":[] },{ "Name":"EVENT_FILTER_TYPE_SCHEMATIZED" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2147483648 ,"Attrs":[] },{ "Name":"EVENT_FILTER_TYPE_SYSTEM_FLAGS" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2147483649 ,"Attrs":[] },{ "Name":"EVENT_FILTER_TYPE_TRACEHANDLE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2147483650 ,"Attrs":[] },{ "Name":"EVENT_FILTER_TYPE_PID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2147483652 ,"Attrs":[] },{ "Name":"EVENT_FILTER_TYPE_EXECUTABLE_NAME" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2147483656 ,"Attrs":[] },{ "Name":"EVENT_FILTER_TYPE_PACKAGE_ID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2147483664 ,"Attrs":[] },{ "Name":"EVENT_FILTER_TYPE_PACKAGE_APP_ID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2147483680 ,"Attrs":[] },{ "Name":"EVENT_FILTER_TYPE_PAYLOAD" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2147483904 ,"Attrs":[] },{ "Name":"EVENT_FILTER_TYPE_EVENT_ID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2147484160 ,"Attrs":[] },{ "Name":"EVENT_FILTER_TYPE_EVENT_NAME" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2147484672 ,"Attrs":[] },{ "Name":"EVENT_FILTER_TYPE_STACKWALK" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2147487744 ,"Attrs":[] },{ "Name":"EVENT_FILTER_TYPE_STACKWALK_NAME" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2147491840 ,"Attrs":[] },{ "Name":"EVENT_FILTER_TYPE_STACKWALK_LEVEL_KW" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2147500032 ,"Attrs":[] },{ "Name":"EVENT_FILTER_TYPE_CONTAINER" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2147516416 ,"Attrs":[] },{ "Name":"EVENT_DATA_DESCRIPTOR_TYPE_NONE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":0 ,"Attrs":[] },{ "Name":"EVENT_DATA_DESCRIPTOR_TYPE_EVENT_METADATA" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1 ,"Attrs":[] },{ "Name":"EVENT_DATA_DESCRIPTOR_TYPE_PROVIDER_METADATA" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2 ,"Attrs":[] },{ "Name":"EVENT_DATA_DESCRIPTOR_TYPE_TIMESTAMP_OVERRIDE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":3 ,"Attrs":[] },{ "Name":"EVENT_WRITE_FLAG_NO_FAULTING" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1 ,"Attrs":[] },{ "Name":"EVENT_WRITE_FLAG_INPRIVATE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2 ,"Attrs":[] },{ "Name":"EVENT_HEADER_EXT_TYPE_RELATED_ACTIVITYID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1 ,"Attrs":[] },{ "Name":"EVENT_HEADER_EXT_TYPE_SID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2 ,"Attrs":[] },{ "Name":"EVENT_HEADER_EXT_TYPE_TS_ID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":3 ,"Attrs":[] },{ "Name":"EVENT_HEADER_EXT_TYPE_INSTANCE_INFO" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":4 ,"Attrs":[] },{ "Name":"EVENT_HEADER_EXT_TYPE_STACK_TRACE32" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":5 ,"Attrs":[] },{ "Name":"EVENT_HEADER_EXT_TYPE_STACK_TRACE64" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":6 ,"Attrs":[] },{ "Name":"EVENT_HEADER_EXT_TYPE_PEBS_INDEX" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":7 ,"Attrs":[] },{ "Name":"EVENT_HEADER_EXT_TYPE_PMC_COUNTERS" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":8 ,"Attrs":[] },{ "Name":"EVENT_HEADER_EXT_TYPE_PSM_KEY" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":9 ,"Attrs":[] },{ "Name":"EVENT_HEADER_EXT_TYPE_EVENT_KEY" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":10 ,"Attrs":[] },{ "Name":"EVENT_HEADER_EXT_TYPE_EVENT_SCHEMA_TL" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":11 ,"Attrs":[] },{ "Name":"EVENT_HEADER_EXT_TYPE_PROV_TRAITS" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":12 ,"Attrs":[] },{ "Name":"EVENT_HEADER_EXT_TYPE_PROCESS_START_KEY" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":13 ,"Attrs":[] },{ "Name":"EVENT_HEADER_EXT_TYPE_CONTROL_GUID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":14 ,"Attrs":[] },{ "Name":"EVENT_HEADER_EXT_TYPE_QPC_DELTA" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":15 ,"Attrs":[] },{ "Name":"EVENT_HEADER_EXT_TYPE_CONTAINER_ID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":16 ,"Attrs":[] },{ "Name":"EVENT_HEADER_EXT_TYPE_STACK_KEY32" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":17 ,"Attrs":[] },{ "Name":"EVENT_HEADER_EXT_TYPE_STACK_KEY64" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":18 ,"Attrs":[] },{ "Name":"EVENT_HEADER_EXT_TYPE_MAX" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":19 ,"Attrs":[] },{ "Name":"EVENT_HEADER_PROPERTY_XML" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1 ,"Attrs":[] },{ "Name":"EVENT_HEADER_PROPERTY_FORWARDED_XML" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2 ,"Attrs":[] },{ "Name":"EVENT_HEADER_PROPERTY_LEGACY_EVENTLOG" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":4 ,"Attrs":[] },{ "Name":"EVENT_HEADER_PROPERTY_RELOGGABLE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":8 ,"Attrs":[] },{ "Name":"EVENT_HEADER_FLAG_EXTENDED_INFO" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1 ,"Attrs":[] },{ "Name":"EVENT_HEADER_FLAG_PRIVATE_SESSION" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2 ,"Attrs":[] },{ "Name":"EVENT_HEADER_FLAG_STRING_ONLY" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":4 ,"Attrs":[] },{ "Name":"EVENT_HEADER_FLAG_TRACE_MESSAGE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":8 ,"Attrs":[] },{ "Name":"EVENT_HEADER_FLAG_NO_CPUTIME" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":16 ,"Attrs":[] },{ "Name":"EVENT_HEADER_FLAG_32_BIT_HEADER" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":32 ,"Attrs":[] },{ "Name":"EVENT_HEADER_FLAG_64_BIT_HEADER" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":64 ,"Attrs":[] },{ "Name":"EVENT_HEADER_FLAG_DECODE_GUID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":128 ,"Attrs":[] },{ "Name":"EVENT_HEADER_FLAG_CLASSIC_HEADER" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":256 ,"Attrs":[] },{ "Name":"EVENT_HEADER_FLAG_PROCESSOR_INDEX" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":512 ,"Attrs":[] },{ "Name":"EVENT_ENABLE_PROPERTY_SID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1 ,"Attrs":[] },{ "Name":"EVENT_ENABLE_PROPERTY_TS_ID" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2 ,"Attrs":[] },{ "Name":"EVENT_ENABLE_PROPERTY_STACK_TRACE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":4 ,"Attrs":[] },{ "Name":"EVENT_ENABLE_PROPERTY_PSM_KEY" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":8 ,"Attrs":[] },{ "Name":"EVENT_ENABLE_PROPERTY_IGNORE_KEYWORD_0" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":16 ,"Attrs":[] },{ "Name":"EVENT_ENABLE_PROPERTY_PROVIDER_GROUP" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":32 ,"Attrs":[] },{ "Name":"EVENT_ENABLE_PROPERTY_ENABLE_KEYWORD_0" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":64 ,"Attrs":[] },{ "Name":"EVENT_ENABLE_PROPERTY_PROCESS_START_KEY" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":128 ,"Attrs":[] },{ "Name":"EVENT_ENABLE_PROPERTY_EVENT_KEY" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":256 ,"Attrs":[] },{ "Name":"EVENT_ENABLE_PROPERTY_EXCLUDE_INPRIVATE" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":512 ,"Attrs":[] },{ "Name":"EVENT_ENABLE_PROPERTY_ENABLE_SILOS" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1024 ,"Attrs":[] },{ "Name":"EVENT_ENABLE_PROPERTY_SOURCE_CONTAINER_TRACKING" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2048 ,"Attrs":[] },{ "Name":"PROCESS_TRACE_MODE_REAL_TIME" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":256 ,"Attrs":[] },{ "Name":"PROCESS_TRACE_MODE_RAW_TIMESTAMP" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":4096 ,"Attrs":[] },{ "Name":"PROCESS_TRACE_MODE_EVENT_RECORD" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":268435456 ,"Attrs":[] },{ "Name":"CLSID_TraceRelogger" ,"Type":{"Kind":"Native","Name":"Guid"} ,"ValueType":"String" ,"Value":"7b40792d-05ff-44c4-9058-f440c71f17d4" ,"Attrs":[] }], "Types":[{ "Name":"TRACE_MESSAGE_FLAGS" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":true ,"Scoped":false ,"Values":[ {"Name":"TRACE_MESSAGE_COMPONENTID","Value":4} ,{"Name":"TRACE_MESSAGE_GUID","Value":2} ,{"Name":"TRACE_MESSAGE_SEQUENCE","Value":1} ,{"Name":"TRACE_MESSAGE_SYSTEMINFO","Value":32} ,{"Name":"TRACE_MESSAGE_TIMESTAMP","Value":8} ] ,"IntegerBase":"UInt32" },{ "Name":"ENABLECALLBACK_ENABLED_STATE" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EVENT_CONTROL_CODE_DISABLE_PROVIDER","Value":0} ,{"Name":"EVENT_CONTROL_CODE_ENABLE_PROVIDER","Value":1} ,{"Name":"EVENT_CONTROL_CODE_CAPTURE_STATE","Value":2} ] ,"IntegerBase":"UInt32" },{ "Name":"EVENT_TRACE_CONTROL" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EVENT_TRACE_CONTROL_FLUSH","Value":3} ,{"Name":"EVENT_TRACE_CONTROL_QUERY","Value":0} ,{"Name":"EVENT_TRACE_CONTROL_STOP","Value":1} ,{"Name":"EVENT_TRACE_CONTROL_UPDATE","Value":2} ] ,"IntegerBase":"UInt32" },{ "Name":"EVENT_TRACE_FLAG" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":true ,"Scoped":false ,"Values":[ {"Name":"EVENT_TRACE_FLAG_ALPC","Value":1048576} ,{"Name":"EVENT_TRACE_FLAG_CSWITCH","Value":16} ,{"Name":"EVENT_TRACE_FLAG_DBGPRINT","Value":262144} ,{"Name":"EVENT_TRACE_FLAG_DISK_FILE_IO","Value":512} ,{"Name":"EVENT_TRACE_FLAG_DISK_IO","Value":256} ,{"Name":"EVENT_TRACE_FLAG_DISK_IO_INIT","Value":1024} ,{"Name":"EVENT_TRACE_FLAG_DISPATCHER","Value":2048} ,{"Name":"EVENT_TRACE_FLAG_DPC","Value":32} ,{"Name":"EVENT_TRACE_FLAG_DRIVER","Value":8388608} ,{"Name":"EVENT_TRACE_FLAG_FILE_IO","Value":33554432} ,{"Name":"EVENT_TRACE_FLAG_FILE_IO_INIT","Value":67108864} ,{"Name":"EVENT_TRACE_FLAG_IMAGE_LOAD","Value":4} ,{"Name":"EVENT_TRACE_FLAG_INTERRUPT","Value":64} ,{"Name":"EVENT_TRACE_FLAG_JOB","Value":524288} ,{"Name":"EVENT_TRACE_FLAG_MEMORY_HARD_FAULTS","Value":8192} ,{"Name":"EVENT_TRACE_FLAG_MEMORY_PAGE_FAULTS","Value":4096} ,{"Name":"EVENT_TRACE_FLAG_NETWORK_TCPIP","Value":65536} ,{"Name":"EVENT_TRACE_FLAG_NO_SYSCONFIG","Value":268435456} ,{"Name":"EVENT_TRACE_FLAG_PROCESS","Value":1} ,{"Name":"EVENT_TRACE_FLAG_PROCESS_COUNTERS","Value":8} ,{"Name":"EVENT_TRACE_FLAG_PROFILE","Value":16777216} ,{"Name":"EVENT_TRACE_FLAG_REGISTRY","Value":131072} ,{"Name":"EVENT_TRACE_FLAG_SPLIT_IO","Value":2097152} ,{"Name":"EVENT_TRACE_FLAG_SYSTEMCALL","Value":128} ,{"Name":"EVENT_TRACE_FLAG_THREAD","Value":2} ,{"Name":"EVENT_TRACE_FLAG_VAMAP","Value":32768} ,{"Name":"EVENT_TRACE_FLAG_VIRTUAL_ALLOC","Value":16384} ] ,"IntegerBase":"UInt32" },{ "Name":"TDH_HANDLE" ,"Architectures":[] ,"Platform":null ,"Kind":"NativeTypedef" ,"AlsoUsableFor":null ,"Def":{"Kind":"Native","Name":"IntPtr"} ,"FreeFunc":"TdhCloseDecodingHandle" ,"InvalidHandleValue":0 },{ "Name":"PROCESSTRACE_HANDLE" ,"Architectures":[] ,"Platform":null ,"Kind":"NativeTypedef" ,"AlsoUsableFor":null ,"Def":{"Kind":"Native","Name":"UInt64"} ,"FreeFunc":"CloseTrace" ,"InvalidHandleValue":null },{ "Name":"CONTROLTRACE_HANDLE" ,"Architectures":[] ,"Platform":null ,"Kind":"NativeTypedef" ,"AlsoUsableFor":null ,"Def":{"Kind":"Native","Name":"UInt64"} ,"FreeFunc":null ,"InvalidHandleValue":0 },{ "Name":"RELOGSTREAM_HANDLE" ,"Architectures":[] ,"Platform":null ,"Kind":"NativeTypedef" ,"AlsoUsableFor":null ,"Def":{"Kind":"Native","Name":"UInt64"} ,"FreeFunc":null ,"InvalidHandleValue":0 },{ "Name":"WNODE_HEADER" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"ProviderId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"Guid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]} ,{"Name":"ClientContext","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous2_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"CountLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"KernelHandle","Type":{"Kind":"ApiRef","Name":"HANDLE","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"TimeStamp","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"_Anonymous1_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"HistoricalContext","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous1_e__Union"]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous_e__Struct" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Version","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Linkage","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] }] }] },{ "Name":"OFFSETINSTANCEDATAANDLENGTH" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"OffsetInstanceData","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"LengthInstanceData","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"WNODE_ALL_DATA" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"WnodeHeader","Type":{"Kind":"ApiRef","Name":"WNODE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"DataBlockOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"InstanceCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"OffsetInstanceNameOffsets","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"FixedInstanceSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"OffsetInstanceDataAndLength","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"ApiRef","Name":"OFFSETINSTANCEDATAANDLENGTH","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]} ] ,"NestedTypes":[] }] },{ "Name":"WNODE_SINGLE_INSTANCE" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"WnodeHeader","Type":{"Kind":"ApiRef","Name":"WNODE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"OffsetInstanceName","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"InstanceIndex","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"DataBlockOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"SizeDataBlock","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"VariableData","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"Native","Name":"Byte"}},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"WNODE_SINGLE_ITEM" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"WnodeHeader","Type":{"Kind":"ApiRef","Name":"WNODE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"OffsetInstanceName","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"InstanceIndex","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"ItemId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"DataBlockOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"SizeDataItem","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"VariableData","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"Native","Name":"Byte"}},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"WNODE_METHOD_ITEM" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"WnodeHeader","Type":{"Kind":"ApiRef","Name":"WNODE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"OffsetInstanceName","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"InstanceIndex","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"MethodId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"DataBlockOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"SizeDataBlock","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"VariableData","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"Native","Name":"Byte"}},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"WNODE_EVENT_ITEM" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"WnodeHeader","Type":{"Kind":"ApiRef","Name":"WNODE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"WNODE_EVENT_REFERENCE" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"WnodeHeader","Type":{"Kind":"ApiRef","Name":"WNODE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"TargetGuid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]} ,{"Name":"TargetDataBlockSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"TargetInstanceIndex","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"TargetInstanceName","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"Native","Name":"Char"}},"Attrs":[]} ] ,"NestedTypes":[] }] },{ "Name":"WNODE_TOO_SMALL" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"WnodeHeader","Type":{"Kind":"ApiRef","Name":"WNODE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"SizeNeeded","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"WMIREGGUIDW" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Guid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"InstanceCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"InstanceNameList","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"BaseNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Pdo","Type":{"Kind":"Native","Name":"UIntPtr"},"Attrs":[]} ,{"Name":"InstanceInfo","Type":{"Kind":"Native","Name":"UIntPtr"},"Attrs":[]} ] ,"NestedTypes":[] }] },{ "Name":"WMIREGINFOW" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"NextWmiRegInfo","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"RegistryPath","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"MofResourceName","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"GuidCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"WmiRegGuid","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"ApiRef","Name":"WMIREGGUIDW","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"WMIDPREQUESTCODE" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"WMI_GET_ALL_DATA","Value":0} ,{"Name":"WMI_GET_SINGLE_INSTANCE","Value":1} ,{"Name":"WMI_SET_SINGLE_INSTANCE","Value":2} ,{"Name":"WMI_SET_SINGLE_ITEM","Value":3} ,{"Name":"WMI_ENABLE_EVENTS","Value":4} ,{"Name":"WMI_DISABLE_EVENTS","Value":5} ,{"Name":"WMI_ENABLE_COLLECTION","Value":6} ,{"Name":"WMI_DISABLE_COLLECTION","Value":7} ,{"Name":"WMI_REGINFO","Value":8} ,{"Name":"WMI_EXECUTE_METHOD","Value":9} ,{"Name":"WMI_CAPTURE_STATE","Value":10} ] ,"IntegerBase":"Int32" },{ "Name":"ETW_COMPRESSION_RESUMPTION_MODE" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EtwCompressionModeRestart","Value":0} ,{"Name":"EtwCompressionModeNoDisable","Value":1} ,{"Name":"EtwCompressionModeNoRestart","Value":2} ] ,"IntegerBase":"Int32" },{ "Name":"EVENT_TRACE_HEADER" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Size","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"ThreadId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"ProcessId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"TimeStamp","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"Anonymous3","Type":{"Kind":"ApiRef","Name":"_Anonymous3_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"Anonymous4","Type":{"Kind":"ApiRef","Name":"_Anonymous4_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous4_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous4_e__Union"]},"Attrs":[]} ,{"Name":"ProcessorTime","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous4_e__Union"]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous2_e__Struct" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"ClientContext","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"_Anonymous1_e__Struct" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"KernelTime","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"UserTime","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] }] },{ "Name":"_Anonymous3_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Guid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]} ,{"Name":"GuidPtr","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"_Anonymous2_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Version","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Class","Type":{"Kind":"ApiRef","Name":"_Class_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous2_e__Union"]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Class_e__Struct" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Type","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"Level","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"Version","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ] ,"NestedTypes":[] }] },{ "Name":"_Anonymous1_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"FieldTypeFlags","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous1_e__Union"]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous_e__Struct" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"HeaderType","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"MarkerFlags","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ] ,"NestedTypes":[] }] }] },{ "Name":"EVENT_INSTANCE_HEADER" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Size","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"ThreadId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"ProcessId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"TimeStamp","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"RegHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ,{"Name":"InstanceId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"ParentInstanceId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Anonymous3","Type":{"Kind":"ApiRef","Name":"_Anonymous3_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"ParentRegHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous3_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous3_e__Union"]},"Attrs":[]} ,{"Name":"ProcessorTime","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous3_e__Union"]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous2_e__Struct" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"EventId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"_Anonymous1_e__Struct" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"KernelTime","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"UserTime","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] }] },{ "Name":"_Anonymous2_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Version","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Class","Type":{"Kind":"ApiRef","Name":"_Class_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous2_e__Union"]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Class_e__Struct" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Type","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"Level","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"Version","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ] ,"NestedTypes":[] }] },{ "Name":"_Anonymous1_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"FieldTypeFlags","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous1_e__Union"]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous_e__Struct" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"HeaderType","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"MarkerFlags","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ] ,"NestedTypes":[] }] }] },{ "Name":"MOF_FIELD" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"DataPtr","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ,{"Name":"Length","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"DataType","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"TRACE_LOGFILE_HEADER" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"ProviderVersion","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"NumberOfProcessors","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"EndTime","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"TimerResolution","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"MaximumFileSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"LogFileMode","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"BuffersWritten","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"LoggerName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"LogFileName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"TimeZone","Type":{"Kind":"ApiRef","Name":"TIME_ZONE_INFORMATION","TargetKind":"Default","Api":"System.Time","Parents":[]},"Attrs":[]} ,{"Name":"BootTime","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"PerfFreq","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"StartTime","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"ReservedFlags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"BuffersLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous2_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"LogInstanceGuid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]} ,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous2_e__Union"]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous_e__Struct" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"StartBuffers","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"PointerSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"EventsLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"CpuSpeedInMHz","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] }] },{ "Name":"_Anonymous1_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Version","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"VersionDetail","Type":{"Kind":"ApiRef","Name":"_VersionDetail_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous1_e__Union"]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_VersionDetail_e__Struct" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"MajorVersion","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"MinorVersion","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"SubVersion","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"SubMinorVersion","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ] ,"NestedTypes":[] }] }] },{ "Name":"TRACE_LOGFILE_HEADER32" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"ProviderVersion","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"NumberOfProcessors","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"EndTime","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"TimerResolution","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"MaximumFileSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"LogFileMode","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"BuffersWritten","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"LoggerName","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"LogFileName","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"TimeZone","Type":{"Kind":"ApiRef","Name":"TIME_ZONE_INFORMATION","TargetKind":"Default","Api":"System.Time","Parents":[]},"Attrs":[]} ,{"Name":"BootTime","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"PerfFreq","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"StartTime","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"ReservedFlags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"BuffersLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous2_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"LogInstanceGuid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]} ,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous2_e__Union"]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous_e__Struct" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"StartBuffers","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"PointerSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"EventsLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"CpuSpeedInMHz","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] }] },{ "Name":"_Anonymous1_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Version","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"VersionDetail","Type":{"Kind":"ApiRef","Name":"_VersionDetail_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous1_e__Union"]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_VersionDetail_e__Struct" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"MajorVersion","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"MinorVersion","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"SubVersion","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"SubMinorVersion","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ] ,"NestedTypes":[] }] }] },{ "Name":"TRACE_LOGFILE_HEADER64" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"ProviderVersion","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"NumberOfProcessors","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"EndTime","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"TimerResolution","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"MaximumFileSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"LogFileMode","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"BuffersWritten","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"LoggerName","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ,{"Name":"LogFileName","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ,{"Name":"TimeZone","Type":{"Kind":"ApiRef","Name":"TIME_ZONE_INFORMATION","TargetKind":"Default","Api":"System.Time","Parents":[]},"Attrs":[]} ,{"Name":"BootTime","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"PerfFreq","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"StartTime","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"ReservedFlags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"BuffersLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous2_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"LogInstanceGuid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]} ,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous2_e__Union"]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous_e__Struct" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"StartBuffers","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"PointerSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"EventsLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"CpuSpeedInMHz","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] }] },{ "Name":"_Anonymous1_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Version","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"VersionDetail","Type":{"Kind":"ApiRef","Name":"_VersionDetail_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous1_e__Union"]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_VersionDetail_e__Struct" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"MajorVersion","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"MinorVersion","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"SubVersion","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"SubMinorVersion","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ] ,"NestedTypes":[] }] }] },{ "Name":"EVENT_INSTANCE_INFO" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"RegHandle","Type":{"Kind":"ApiRef","Name":"HANDLE","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"InstanceId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"EVENT_TRACE_PROPERTIES" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Wnode","Type":{"Kind":"ApiRef","Name":"WNODE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"MinimumBuffers","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"MaximumBuffers","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"MaximumFileSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"LogFileMode","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"FlushTimer","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"EnableFlags","Type":{"Kind":"ApiRef","Name":"EVENT_TRACE_FLAG","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"NumberOfBuffers","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"FreeBuffers","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"EventsLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"BuffersWritten","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"LogBuffersLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"RealTimeBuffersLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"LoggerThreadId","Type":{"Kind":"ApiRef","Name":"HANDLE","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"LogFileNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"LoggerNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"AgeLimit","Type":{"Kind":"Native","Name":"Int32"},"Attrs":[]} ,{"Name":"FlushThreshold","Type":{"Kind":"Native","Name":"Int32"},"Attrs":[]} ] ,"NestedTypes":[] }] },{ "Name":"EVENT_TRACE_PROPERTIES_V2" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Wnode","Type":{"Kind":"ApiRef","Name":"WNODE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"MinimumBuffers","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"MaximumBuffers","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"MaximumFileSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"LogFileMode","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"FlushTimer","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"EnableFlags","Type":{"Kind":"ApiRef","Name":"EVENT_TRACE_FLAG","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"NumberOfBuffers","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"FreeBuffers","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"EventsLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"BuffersWritten","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"LogBuffersLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"RealTimeBuffersLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"LoggerThreadId","Type":{"Kind":"ApiRef","Name":"HANDLE","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"LogFileNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"LoggerNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"FilterDescCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"FilterDesc","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_FILTER_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]} ,{"Name":"Anonymous3","Type":{"Kind":"ApiRef","Name":"_Anonymous3_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous3_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous3_e__Union"]},"Attrs":[]} ,{"Name":"V2Options","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous_e__Struct" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"_bitfield","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] }] },{ "Name":"_Anonymous2_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous2_e__Union"]},"Attrs":[]} ,{"Name":"V2Control","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous_e__Struct" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"_bitfield","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] }] },{ "Name":"_Anonymous1_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"AgeLimit","Type":{"Kind":"Native","Name":"Int32"},"Attrs":[]} ,{"Name":"FlushThreshold","Type":{"Kind":"Native","Name":"Int32"},"Attrs":[]} ] ,"NestedTypes":[] }] },{ "Name":"TRACE_GUID_REGISTRATION" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Guid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["Const"]} ,{"Name":"RegHandle","Type":{"Kind":"ApiRef","Name":"HANDLE","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"TRACE_GUID_PROPERTIES" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Guid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]} ,{"Name":"GuidType","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"LoggerId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"EnableLevel","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"EnableFlags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"IsEnable","Type":{"Kind":"ApiRef","Name":"BOOLEAN","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"ETW_BUFFER_CONTEXT" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"LoggerId","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous_e__Union"]},"Attrs":[]} ,{"Name":"ProcessorIndex","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous_e__Struct" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"ProcessorNumber","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"Alignment","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ] ,"NestedTypes":[] }] }] },{ "Name":"TRACE_ENABLE_INFO" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"IsEnabled","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Level","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"Reserved1","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"LoggerId","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"EnableProperty","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Reserved2","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"MatchAnyKeyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ,{"Name":"MatchAllKeyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"TRACE_PROVIDER_INSTANCE_INFO" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"NextOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"EnableCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Pid","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"TRACE_GUID_INFO" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"InstanceCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Reserved","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"PROFILE_SOURCE_INFO" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"NextEntryOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Source","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"MinInterval","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"MaxInterval","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Reserved","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ,{"Name":"Description","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"Native","Name":"Char"}},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"ETW_PMC_COUNTER_OWNER_TYPE" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EtwPmcOwnerFree","Value":0} ,{"Name":"EtwPmcOwnerUntagged","Value":1} ,{"Name":"EtwPmcOwnerTagged","Value":2} ,{"Name":"EtwPmcOwnerTaggedWithSource","Value":3} ] ,"IntegerBase":"Int32" },{ "Name":"ETW_PMC_COUNTER_OWNER" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"OwnerType","Type":{"Kind":"ApiRef","Name":"ETW_PMC_COUNTER_OWNER_TYPE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"ProfileSource","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"OwnerTag","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"ETW_PMC_COUNTER_OWNERSHIP_STATUS" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"ProcessorNumber","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"NumberOfCounters","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"CounterOwners","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"ApiRef","Name":"ETW_PMC_COUNTER_OWNER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"EVENT_TRACE" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Header","Type":{"Kind":"ApiRef","Name":"EVENT_TRACE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"InstanceId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"ParentInstanceId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"ParentGuid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]} ,{"Name":"MofData","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":[]} ,{"Name":"MofLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"ClientContext","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"BufferContext","Type":{"Kind":"ApiRef","Name":"ETW_BUFFER_CONTEXT","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ] ,"NestedTypes":[] }] },{ "Name":"PEVENT_TRACE_BUFFER_CALLBACKW" ,"Architectures":[] ,"Platform":null ,"Kind":"FunctionPointer" ,"SetLastError":false ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Attrs":[] ,"Params":[ {"Name":"Logfile","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_LOGFILEW","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]} ] },{ "Name":"PEVENT_TRACE_BUFFER_CALLBACKA" ,"Architectures":[] ,"Platform":null ,"Kind":"FunctionPointer" ,"SetLastError":false ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Attrs":[] ,"Params":[ {"Name":"Logfile","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_LOGFILEA","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]} ] },{ "Name":"PEVENT_CALLBACK" ,"Architectures":[] ,"Platform":null ,"Kind":"FunctionPointer" ,"SetLastError":false ,"ReturnType":{"Kind":"Native","Name":"Void"} ,"ReturnAttrs":[] ,"Attrs":[] ,"Params":[ {"Name":"pEvent","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]} ] },{ "Name":"PEVENT_RECORD_CALLBACK" ,"Architectures":[] ,"Platform":null ,"Kind":"FunctionPointer" ,"SetLastError":false ,"ReturnType":{"Kind":"Native","Name":"Void"} ,"ReturnAttrs":[] ,"Attrs":[] ,"Params":[ {"Name":"EventRecord","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_RECORD","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]} ] },{ "Name":"WMIDPREQUEST" ,"Architectures":[] ,"Platform":null ,"Kind":"FunctionPointer" ,"SetLastError":false ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Attrs":[] ,"Params":[ {"Name":"RequestCode","Type":{"Kind":"ApiRef","Name":"WMIDPREQUESTCODE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"RequestContext","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In"]} ,{"Name":"BufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]} ,{"Name":"Buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In","Out"]} ] },{ "Name":"EVENT_TRACE_LOGFILEW" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"LogFileName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"LoggerName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"CurrentTime","Type":{"Kind":"Native","Name":"Int64"},"Attrs":[]} ,{"Name":"BuffersRead","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"CurrentEvent","Type":{"Kind":"ApiRef","Name":"EVENT_TRACE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"LogfileHeader","Type":{"Kind":"ApiRef","Name":"TRACE_LOGFILE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"BufferCallback","Type":{"Kind":"ApiRef","Name":"PEVENT_TRACE_BUFFER_CALLBACKW","TargetKind":"FunctionPointer","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Filled","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"EventsLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"IsKernelTrace","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Context","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous2_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"EventCallback","Type":{"Kind":"ApiRef","Name":"PEVENT_CALLBACK","TargetKind":"FunctionPointer","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"EventRecordCallback","Type":{"Kind":"ApiRef","Name":"PEVENT_RECORD_CALLBACK","TargetKind":"FunctionPointer","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"_Anonymous1_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"LogFileMode","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"ProcessTraceMode","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] }] },{ "Name":"EVENT_TRACE_LOGFILEA" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"LogFileName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"LoggerName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"CurrentTime","Type":{"Kind":"Native","Name":"Int64"},"Attrs":[]} ,{"Name":"BuffersRead","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"CurrentEvent","Type":{"Kind":"ApiRef","Name":"EVENT_TRACE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"LogfileHeader","Type":{"Kind":"ApiRef","Name":"TRACE_LOGFILE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"BufferCallback","Type":{"Kind":"ApiRef","Name":"PEVENT_TRACE_BUFFER_CALLBACKA","TargetKind":"FunctionPointer","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Filled","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"EventsLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"IsKernelTrace","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Context","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous2_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"EventCallback","Type":{"Kind":"ApiRef","Name":"PEVENT_CALLBACK","TargetKind":"FunctionPointer","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"EventRecordCallback","Type":{"Kind":"ApiRef","Name":"PEVENT_RECORD_CALLBACK","TargetKind":"FunctionPointer","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"_Anonymous1_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"LogFileMode","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"ProcessTraceMode","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] }] },{ "Name":"ENABLE_TRACE_PARAMETERS_V1" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Version","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"EnableProperty","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"ControlFlags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"SourceId","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]} ,{"Name":"EnableFilterDesc","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_FILTER_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"ENABLE_TRACE_PARAMETERS" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Version","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"EnableProperty","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"ControlFlags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"SourceId","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]} ,{"Name":"EnableFilterDesc","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_FILTER_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]} ,{"Name":"FilterDescCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"TRACE_QUERY_INFO_CLASS" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"TraceGuidQueryList","Value":0} ,{"Name":"TraceGuidQueryInfo","Value":1} ,{"Name":"TraceGuidQueryProcess","Value":2} ,{"Name":"TraceStackTracingInfo","Value":3} ,{"Name":"TraceSystemTraceEnableFlagsInfo","Value":4} ,{"Name":"TraceSampledProfileIntervalInfo","Value":5} ,{"Name":"TraceProfileSourceConfigInfo","Value":6} ,{"Name":"TraceProfileSourceListInfo","Value":7} ,{"Name":"TracePmcEventListInfo","Value":8} ,{"Name":"TracePmcCounterListInfo","Value":9} ,{"Name":"TraceSetDisallowList","Value":10} ,{"Name":"TraceVersionInfo","Value":11} ,{"Name":"TraceGroupQueryList","Value":12} ,{"Name":"TraceGroupQueryInfo","Value":13} ,{"Name":"TraceDisallowListQuery","Value":14} ,{"Name":"TraceInfoReserved15","Value":15} ,{"Name":"TracePeriodicCaptureStateListInfo","Value":16} ,{"Name":"TracePeriodicCaptureStateInfo","Value":17} ,{"Name":"TraceProviderBinaryTracking","Value":18} ,{"Name":"TraceMaxLoggersQuery","Value":19} ,{"Name":"TraceLbrConfigurationInfo","Value":20} ,{"Name":"TraceLbrEventListInfo","Value":21} ,{"Name":"TraceMaxPmcCounterQuery","Value":22} ,{"Name":"TraceStreamCount","Value":23} ,{"Name":"TraceStackCachingInfo","Value":24} ,{"Name":"TracePmcCounterOwners","Value":25} ,{"Name":"TraceUnifiedStackCachingInfo","Value":26} ,{"Name":"MaxTraceSetInfoClass","Value":27} ] ,"IntegerBase":"Int32" },{ "Name":"CLASSIC_EVENT_ID" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"EventGuid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]} ,{"Name":"Type","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"Reserved","Type":{"Kind":"Array","Shape":{"Size":7},"Child":{"Kind":"Native","Name":"Byte"}},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"TRACE_STACK_CACHING_INFO" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Enabled","Type":{"Kind":"ApiRef","Name":"BOOLEAN","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"CacheSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"BucketCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"TRACE_PROFILE_INTERVAL" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Source","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Interval","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"TRACE_VERSION_INFO" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"EtwTraceProcessingVersion","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Reserved","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"TRACE_PERIODIC_CAPTURE_STATE_INFO" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"CaptureStateFrequencyInSeconds","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"ProviderCount","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"Reserved","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"ETW_PROCESS_HANDLE_INFO_TYPE" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EtwQueryPartitionInformation","Value":1} ,{"Name":"EtwQueryPartitionInformationV2","Value":2} ,{"Name":"EtwQueryLastDroppedTimes","Value":3} ,{"Name":"EtwQueryProcessHandleInfoMax","Value":4} ] ,"IntegerBase":"Int32" },{ "Name":"ETW_TRACE_PARTITION_INFORMATION" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"PartitionId","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]} ,{"Name":"ParentId","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]} ,{"Name":"QpcOffsetFromRoot","Type":{"Kind":"Native","Name":"Int64"},"Attrs":[]} ,{"Name":"PartitionType","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"ETW_TRACE_PARTITION_INFORMATION_V2" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"QpcOffsetFromRoot","Type":{"Kind":"Native","Name":"Int64"},"Attrs":[]} ,{"Name":"PartitionType","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"PartitionId","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"ParentId","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"EVENT_DATA_DESCRIPTOR" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Ptr","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ,{"Name":"Size","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Reserved","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous_e__Union"]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous_e__Struct" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Type","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"Reserved1","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"Reserved2","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ] ,"NestedTypes":[] }] }] },{ "Name":"EVENT_DESCRIPTOR" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Id","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"Version","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"Channel","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"Level","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"Opcode","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"Task","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"Keyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"EVENT_FILTER_DESCRIPTOR" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Ptr","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ,{"Name":"Size","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Type","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"EVENT_FILTER_HEADER" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Id","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"Version","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"Reserved","Type":{"Kind":"Array","Shape":{"Size":5},"Child":{"Kind":"Native","Name":"Byte"}},"Attrs":[]} ,{"Name":"InstanceId","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ,{"Name":"Size","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"NextOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"EVENT_FILTER_EVENT_ID" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"FilterIn","Type":{"Kind":"ApiRef","Name":"BOOLEAN","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"Reserved","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"Count","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"Events","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"Native","Name":"UInt16"}},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"EVENT_FILTER_EVENT_NAME" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"MatchAnyKeyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ,{"Name":"MatchAllKeyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ,{"Name":"Level","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"FilterIn","Type":{"Kind":"ApiRef","Name":"BOOLEAN","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"NameCount","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"Names","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"Native","Name":"Byte"}},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"EVENT_FILTER_LEVEL_KW" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"MatchAnyKeyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ,{"Name":"MatchAllKeyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ,{"Name":"Level","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"FilterIn","Type":{"Kind":"ApiRef","Name":"BOOLEAN","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"EVENT_INFO_CLASS" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EventProviderBinaryTrackInfo","Value":0} ,{"Name":"EventProviderSetReserved1","Value":1} ,{"Name":"EventProviderSetTraits","Value":2} ,{"Name":"EventProviderUseDescriptorType","Value":3} ,{"Name":"MaxEventInfo","Value":4} ] ,"IntegerBase":"Int32" },{ "Name":"PENABLECALLBACK" ,"Architectures":[] ,"Platform":null ,"Kind":"FunctionPointer" ,"SetLastError":false ,"ReturnType":{"Kind":"Native","Name":"Void"} ,"ReturnAttrs":[] ,"Attrs":[] ,"Params":[ {"Name":"SourceId","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]} ,{"Name":"IsEnabled","Type":{"Kind":"ApiRef","Name":"ENABLECALLBACK_ENABLED_STATE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"Level","Type":{"Kind":"Native","Name":"Byte"},"Attrs":["In"]} ,{"Name":"MatchAnyKeyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ,{"Name":"MatchAllKeyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ,{"Name":"FilterData","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_FILTER_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]} ,{"Name":"CallbackContext","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In","Out","Optional"]} ] },{ "Name":"EVENT_HEADER_EXTENDED_DATA_ITEM" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Reserved1","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"ExtType","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"DataSize","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"DataPtr","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous_e__Struct" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"_bitfield","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ] ,"NestedTypes":[] }] },{ "Name":"EVENT_EXTENDED_ITEM_INSTANCE" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"InstanceId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"ParentInstanceId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"ParentGuid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"EVENT_EXTENDED_ITEM_RELATED_ACTIVITYID" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"RelatedActivityId","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"EVENT_EXTENDED_ITEM_TS_ID" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"SessionId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"EVENT_EXTENDED_ITEM_STACK_TRACE32" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"MatchId","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ,{"Name":"Address","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"EVENT_EXTENDED_ITEM_STACK_TRACE64" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"MatchId","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ,{"Name":"Address","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"Native","Name":"UInt64"}},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"EVENT_EXTENDED_ITEM_STACK_KEY32" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"MatchId","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ,{"Name":"StackKey","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Padding","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"EVENT_EXTENDED_ITEM_STACK_KEY64" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"MatchId","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ,{"Name":"StackKey","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"EVENT_EXTENDED_ITEM_PEBS_INDEX" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"PebsIndex","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"EVENT_EXTENDED_ITEM_PMC_COUNTERS" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Counter","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"Native","Name":"UInt64"}},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"EVENT_EXTENDED_ITEM_PROCESS_START_KEY" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"ProcessStartKey","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"EVENT_EXTENDED_ITEM_EVENT_KEY" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Key","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"EVENT_HEADER" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Size","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"HeaderType","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"EventProperty","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"ThreadId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"ProcessId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"TimeStamp","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"ProviderId","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]} ,{"Name":"EventDescriptor","Type":{"Kind":"ApiRef","Name":"EVENT_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"ActivityId","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous_e__Union"]},"Attrs":[]} ,{"Name":"ProcessorTime","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous_e__Struct" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"KernelTime","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"UserTime","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] }] }] },{ "Name":"EVENT_RECORD" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"EventHeader","Type":{"Kind":"ApiRef","Name":"EVENT_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"BufferContext","Type":{"Kind":"ApiRef","Name":"ETW_BUFFER_CONTEXT","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"ExtendedDataCount","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"UserDataLength","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"ExtendedData","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_HEADER_EXTENDED_DATA_ITEM","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]} ,{"Name":"UserData","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":[]} ,{"Name":"UserContext","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"ETW_PROVIDER_TRAIT_TYPE" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EtwProviderTraitTypeGroup","Value":1} ,{"Name":"EtwProviderTraitDecodeGuid","Value":2} ,{"Name":"EtwProviderTraitTypeMax","Value":3} ] ,"IntegerBase":"Int32" },{ "Name":"EVENTSECURITYOPERATION" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EventSecuritySetDACL","Value":0} ,{"Name":"EventSecuritySetSACL","Value":1} ,{"Name":"EventSecurityAddDACL","Value":2} ,{"Name":"EventSecurityAddSACL","Value":3} ,{"Name":"EventSecurityMax","Value":4} ] ,"IntegerBase":"Int32" },{ "Name":"EVENT_MAP_ENTRY" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"OutputOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Value","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"InputOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] }] },{ "Name":"MAP_FLAGS" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EVENTMAP_INFO_FLAG_MANIFEST_VALUEMAP","Value":1} ,{"Name":"EVENTMAP_INFO_FLAG_MANIFEST_BITMAP","Value":2} ,{"Name":"EVENTMAP_INFO_FLAG_MANIFEST_PATTERNMAP","Value":4} ,{"Name":"EVENTMAP_INFO_FLAG_WBEM_VALUEMAP","Value":8} ,{"Name":"EVENTMAP_INFO_FLAG_WBEM_BITMAP","Value":16} ,{"Name":"EVENTMAP_INFO_FLAG_WBEM_FLAG","Value":32} ,{"Name":"EVENTMAP_INFO_FLAG_WBEM_NO_MAP","Value":64} ] ,"IntegerBase":"Int32" },{ "Name":"MAP_VALUETYPE" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EVENTMAP_ENTRY_VALUETYPE_ULONG","Value":0} ,{"Name":"EVENTMAP_ENTRY_VALUETYPE_STRING","Value":1} ] ,"IntegerBase":"Int32" },{ "Name":"EVENT_MAP_INFO" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"NameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Flag","Type":{"Kind":"ApiRef","Name":"MAP_FLAGS","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"EntryCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"MapEntryArray","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"ApiRef","Name":"EVENT_MAP_ENTRY","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"MapEntryValueType","Type":{"Kind":"ApiRef","Name":"MAP_VALUETYPE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"FormatStringOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] }] },{ "Name":"_TDH_IN_TYPE" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"TDH_INTYPE_NULL","Value":0} ,{"Name":"TDH_INTYPE_UNICODESTRING","Value":1} ,{"Name":"TDH_INTYPE_ANSISTRING","Value":2} ,{"Name":"TDH_INTYPE_INT8","Value":3} ,{"Name":"TDH_INTYPE_UINT8","Value":4} ,{"Name":"TDH_INTYPE_INT16","Value":5} ,{"Name":"TDH_INTYPE_UINT16","Value":6} ,{"Name":"TDH_INTYPE_INT32","Value":7} ,{"Name":"TDH_INTYPE_UINT32","Value":8} ,{"Name":"TDH_INTYPE_INT64","Value":9} ,{"Name":"TDH_INTYPE_UINT64","Value":10} ,{"Name":"TDH_INTYPE_FLOAT","Value":11} ,{"Name":"TDH_INTYPE_DOUBLE","Value":12} ,{"Name":"TDH_INTYPE_BOOLEAN","Value":13} ,{"Name":"TDH_INTYPE_BINARY","Value":14} ,{"Name":"TDH_INTYPE_GUID","Value":15} ,{"Name":"TDH_INTYPE_POINTER","Value":16} ,{"Name":"TDH_INTYPE_FILETIME","Value":17} ,{"Name":"TDH_INTYPE_SYSTEMTIME","Value":18} ,{"Name":"TDH_INTYPE_SID","Value":19} ,{"Name":"TDH_INTYPE_HEXINT32","Value":20} ,{"Name":"TDH_INTYPE_HEXINT64","Value":21} ,{"Name":"TDH_INTYPE_MANIFEST_COUNTEDSTRING","Value":22} ,{"Name":"TDH_INTYPE_MANIFEST_COUNTEDANSISTRING","Value":23} ,{"Name":"TDH_INTYPE_RESERVED24","Value":24} ,{"Name":"TDH_INTYPE_MANIFEST_COUNTEDBINARY","Value":25} ,{"Name":"TDH_INTYPE_COUNTEDSTRING","Value":300} ,{"Name":"TDH_INTYPE_COUNTEDANSISTRING","Value":301} ,{"Name":"TDH_INTYPE_REVERSEDCOUNTEDSTRING","Value":302} ,{"Name":"TDH_INTYPE_REVERSEDCOUNTEDANSISTRING","Value":303} ,{"Name":"TDH_INTYPE_NONNULLTERMINATEDSTRING","Value":304} ,{"Name":"TDH_INTYPE_NONNULLTERMINATEDANSISTRING","Value":305} ,{"Name":"TDH_INTYPE_UNICODECHAR","Value":306} ,{"Name":"TDH_INTYPE_ANSICHAR","Value":307} ,{"Name":"TDH_INTYPE_SIZET","Value":308} ,{"Name":"TDH_INTYPE_HEXDUMP","Value":309} ,{"Name":"TDH_INTYPE_WBEMSID","Value":310} ] ,"IntegerBase":"Int32" },{ "Name":"_TDH_OUT_TYPE" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"TDH_OUTTYPE_NULL","Value":0} ,{"Name":"TDH_OUTTYPE_STRING","Value":1} ,{"Name":"TDH_OUTTYPE_DATETIME","Value":2} ,{"Name":"TDH_OUTTYPE_BYTE","Value":3} ,{"Name":"TDH_OUTTYPE_UNSIGNEDBYTE","Value":4} ,{"Name":"TDH_OUTTYPE_SHORT","Value":5} ,{"Name":"TDH_OUTTYPE_UNSIGNEDSHORT","Value":6} ,{"Name":"TDH_OUTTYPE_INT","Value":7} ,{"Name":"TDH_OUTTYPE_UNSIGNEDINT","Value":8} ,{"Name":"TDH_OUTTYPE_LONG","Value":9} ,{"Name":"TDH_OUTTYPE_UNSIGNEDLONG","Value":10} ,{"Name":"TDH_OUTTYPE_FLOAT","Value":11} ,{"Name":"TDH_OUTTYPE_DOUBLE","Value":12} ,{"Name":"TDH_OUTTYPE_BOOLEAN","Value":13} ,{"Name":"TDH_OUTTYPE_GUID","Value":14} ,{"Name":"TDH_OUTTYPE_HEXBINARY","Value":15} ,{"Name":"TDH_OUTTYPE_HEXINT8","Value":16} ,{"Name":"TDH_OUTTYPE_HEXINT16","Value":17} ,{"Name":"TDH_OUTTYPE_HEXINT32","Value":18} ,{"Name":"TDH_OUTTYPE_HEXINT64","Value":19} ,{"Name":"TDH_OUTTYPE_PID","Value":20} ,{"Name":"TDH_OUTTYPE_TID","Value":21} ,{"Name":"TDH_OUTTYPE_PORT","Value":22} ,{"Name":"TDH_OUTTYPE_IPV4","Value":23} ,{"Name":"TDH_OUTTYPE_IPV6","Value":24} ,{"Name":"TDH_OUTTYPE_SOCKETADDRESS","Value":25} ,{"Name":"TDH_OUTTYPE_CIMDATETIME","Value":26} ,{"Name":"TDH_OUTTYPE_ETWTIME","Value":27} ,{"Name":"TDH_OUTTYPE_XML","Value":28} ,{"Name":"TDH_OUTTYPE_ERRORCODE","Value":29} ,{"Name":"TDH_OUTTYPE_WIN32ERROR","Value":30} ,{"Name":"TDH_OUTTYPE_NTSTATUS","Value":31} ,{"Name":"TDH_OUTTYPE_HRESULT","Value":32} ,{"Name":"TDH_OUTTYPE_CULTURE_INSENSITIVE_DATETIME","Value":33} ,{"Name":"TDH_OUTTYPE_JSON","Value":34} ,{"Name":"TDH_OUTTYPE_UTF8","Value":35} ,{"Name":"TDH_OUTTYPE_PKCS7_WITH_TYPE_INFO","Value":36} ,{"Name":"TDH_OUTTYPE_CODE_POINTER","Value":37} ,{"Name":"TDH_OUTTYPE_DATETIME_UTC","Value":38} ,{"Name":"TDH_OUTTYPE_REDUCEDSTRING","Value":300} ,{"Name":"TDH_OUTTYPE_NOPRINT","Value":301} ] ,"IntegerBase":"Int32" },{ "Name":"PROPERTY_FLAGS" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"PropertyStruct","Value":1} ,{"Name":"PropertyParamLength","Value":2} ,{"Name":"PropertyParamCount","Value":4} ,{"Name":"PropertyWBEMXmlFragment","Value":8} ,{"Name":"PropertyParamFixedLength","Value":16} ,{"Name":"PropertyParamFixedCount","Value":32} ,{"Name":"PropertyHasTags","Value":64} ,{"Name":"PropertyHasCustomSchema","Value":128} ] ,"IntegerBase":"Int32" },{ "Name":"EVENT_PROPERTY_INFO" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Flags","Type":{"Kind":"ApiRef","Name":"PROPERTY_FLAGS","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"NameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"Anonymous3","Type":{"Kind":"ApiRef","Name":"_Anonymous3_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"Anonymous4","Type":{"Kind":"ApiRef","Name":"_Anonymous4_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous4_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Reserved","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous4_e__Union"]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous_e__Struct" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"_bitfield","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] }] },{ "Name":"_Anonymous3_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"length","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"lengthPropertyIndex","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"_Anonymous2_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"count","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"countPropertyIndex","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"_Anonymous1_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"nonStructType","Type":{"Kind":"ApiRef","Name":"_nonStructType","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous1_e__Union"]},"Attrs":[]} ,{"Name":"structType","Type":{"Kind":"ApiRef","Name":"_structType","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous1_e__Union"]},"Attrs":[]} ,{"Name":"customSchemaType","Type":{"Kind":"ApiRef","Name":"_customSchemaType","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous1_e__Union"]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_customSchemaType" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"InType","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"OutType","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"CustomSchemaOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"_structType" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"StructStartIndex","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"NumOfStructMembers","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"padding","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"_nonStructType" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"InType","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"OutType","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"MapNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] }] }] },{ "Name":"DECODING_SOURCE" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"DecodingSourceXMLFile","Value":0} ,{"Name":"DecodingSourceWbem","Value":1} ,{"Name":"DecodingSourceWPP","Value":2} ,{"Name":"DecodingSourceTlg","Value":3} ,{"Name":"DecodingSourceMax","Value":4} ] ,"IntegerBase":"Int32" },{ "Name":"TEMPLATE_FLAGS" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"TEMPLATE_EVENT_DATA","Value":1} ,{"Name":"TEMPLATE_USER_DATA","Value":2} ,{"Name":"TEMPLATE_CONTROL_GUID","Value":4} ] ,"IntegerBase":"Int32" },{ "Name":"TRACE_EVENT_INFO" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"ProviderGuid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]} ,{"Name":"EventGuid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]} ,{"Name":"EventDescriptor","Type":{"Kind":"ApiRef","Name":"EVENT_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"DecodingSource","Type":{"Kind":"ApiRef","Name":"DECODING_SOURCE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"ProviderNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"LevelNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"ChannelNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"KeywordsNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"TaskNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"OpcodeNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"EventMessageOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"ProviderMessageOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"BinaryXMLOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"BinaryXMLSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"PropertyCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"TopLevelPropertyCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Anonymous3","Type":{"Kind":"ApiRef","Name":"_Anonymous3_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"EventPropertyInfoArray","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"ApiRef","Name":"EVENT_PROPERTY_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous3_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Flags","Type":{"Kind":"ApiRef","Name":"TEMPLATE_FLAGS","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous3_e__Union"]},"Attrs":[]} ] ,"NestedTypes":[{ "Name":"_Anonymous_e__Struct" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"_bitfield","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] }] },{ "Name":"_Anonymous2_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"EventAttributesOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"RelatedActivityIDNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"_Anonymous1_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"EventNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"ActivityIDNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] }] },{ "Name":"PROPERTY_DATA_DESCRIPTOR" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"PropertyName","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ,{"Name":"ArrayIndex","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Reserved","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"PAYLOAD_OPERATOR" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"PAYLOADFIELD_EQ","Value":0} ,{"Name":"PAYLOADFIELD_NE","Value":1} ,{"Name":"PAYLOADFIELD_LE","Value":2} ,{"Name":"PAYLOADFIELD_GT","Value":3} ,{"Name":"PAYLOADFIELD_LT","Value":4} ,{"Name":"PAYLOADFIELD_GE","Value":5} ,{"Name":"PAYLOADFIELD_BETWEEN","Value":6} ,{"Name":"PAYLOADFIELD_NOTBETWEEN","Value":7} ,{"Name":"PAYLOADFIELD_MODULO","Value":8} ,{"Name":"PAYLOADFIELD_CONTAINS","Value":20} ,{"Name":"PAYLOADFIELD_DOESNTCONTAIN","Value":21} ,{"Name":"PAYLOADFIELD_IS","Value":30} ,{"Name":"PAYLOADFIELD_ISNOT","Value":31} ,{"Name":"PAYLOADFIELD_INVALID","Value":32} ] ,"IntegerBase":"Int32" },{ "Name":"PAYLOAD_FILTER_PREDICATE" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"FieldName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"CompareOp","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"Value","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"PROVIDER_FILTER_INFO" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"Id","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"Version","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"MessageOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Reserved","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"PropertyCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"EventPropertyInfoArray","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"ApiRef","Name":"EVENT_PROPERTY_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"EVENT_FIELD_TYPE" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EventKeywordInformation","Value":0} ,{"Name":"EventLevelInformation","Value":1} ,{"Name":"EventChannelInformation","Value":2} ,{"Name":"EventTaskInformation","Value":3} ,{"Name":"EventOpcodeInformation","Value":4} ,{"Name":"EventInformationMax","Value":5} ] ,"IntegerBase":"Int32" },{ "Name":"PROVIDER_FIELD_INFO" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"NameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"DescriptionOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Value","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"PROVIDER_FIELD_INFOARRAY" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"NumberOfElements","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"FieldType","Type":{"Kind":"ApiRef","Name":"EVENT_FIELD_TYPE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"FieldInfoArray","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"ApiRef","Name":"PROVIDER_FIELD_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"TRACE_PROVIDER_INFO" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"ProviderGuid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]} ,{"Name":"SchemaSource","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"ProviderNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"PROVIDER_ENUMERATION_INFO" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"NumberOfProviders","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Reserved","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"TraceProviderInfoArray","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"ApiRef","Name":"TRACE_PROVIDER_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"PROVIDER_EVENT_INFO" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"NumberOfEvents","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Reserved","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"EventDescriptorsArray","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"ApiRef","Name":"EVENT_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"TDH_CONTEXT_TYPE" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"TDH_CONTEXT_WPP_TMFFILE","Value":0} ,{"Name":"TDH_CONTEXT_WPP_TMFSEARCHPATH","Value":1} ,{"Name":"TDH_CONTEXT_WPP_GMT","Value":2} ,{"Name":"TDH_CONTEXT_POINTERSIZE","Value":3} ,{"Name":"TDH_CONTEXT_PDB_PATH","Value":4} ,{"Name":"TDH_CONTEXT_MAXIMUM","Value":5} ] ,"IntegerBase":"Int32" },{ "Name":"TDH_CONTEXT" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Attrs":[] ,"Fields":[ {"Name":"ParameterValue","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ,{"Name":"ParameterType","Type":{"Kind":"ApiRef","Name":"TDH_CONTEXT_TYPE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]} ,{"Name":"ParameterSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[] },{ "Name":"CTraceRelogger" ,"Architectures":[] ,"Platform":null ,"Kind":"ComClassID" ,"Guid":"7b40792d-05ff-44c4-9058-f440c71f17d4" },{ "Name":"ITraceEvent" ,"Architectures":[] ,"Platform":"windows6.1" ,"Kind":"Com" ,"Guid":"8cc97f40-9028-4ff3-9b62-7d1f79ca7bcb" ,"Attrs":[] ,"Interface":{"Kind":"ApiRef","Name":"IUnknown","TargetKind":"Com","Api":"System.Com","Parents":[]} ,"Methods":[{ "Name":"Clone" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"NewEvent","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"ITraceEvent","TargetKind":"Com","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out","RetVal"]} ] },{ "Name":"GetUserContext" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"UserContext","Type":{"Kind":"PointerTo","Child":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}}},"Attrs":["Out","RetVal"]} ] },{ "Name":"GetEventRecord" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"EventRecord","Type":{"Kind":"PointerTo","Child":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_RECORD","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}}},"Attrs":["Out","RetVal"]} ] },{ "Name":"SetPayload" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"Payload","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"Native","Name":"Byte"}},"Attrs":["In"]} ,{"Name":"PayloadSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ] },{ "Name":"SetEventDescriptor" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"EventDescriptor","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Const"]} ] },{ "Name":"SetProcessId" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"ProcessId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ] },{ "Name":"SetProcessorIndex" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"ProcessorIndex","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ] },{ "Name":"SetThreadId" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"ThreadId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ] },{ "Name":"SetThreadTimes" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"KernelTime","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"UserTime","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ] },{ "Name":"SetActivityId" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"ActivityId","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]} ] },{ "Name":"SetTimeStamp" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"TimeStamp","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":["In"]} ] },{ "Name":"SetProviderId" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"ProviderId","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]} ] }] },{ "Name":"ITraceEventCallback" ,"Architectures":[] ,"Platform":"windows6.1" ,"Kind":"Com" ,"Guid":"3ed25501-593f-43e9-8f38-3ab46f5a4a52" ,"Attrs":[] ,"Interface":{"Kind":"ApiRef","Name":"IUnknown","TargetKind":"Com","Api":"System.Com","Parents":[]} ,"Methods":[{ "Name":"OnBeginProcessTrace" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"HeaderEvent","Type":{"Kind":"ApiRef","Name":"ITraceEvent","TargetKind":"Com","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"Relogger","Type":{"Kind":"ApiRef","Name":"ITraceRelogger","TargetKind":"Com","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ] },{ "Name":"OnFinalizeProcessTrace" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"Relogger","Type":{"Kind":"ApiRef","Name":"ITraceRelogger","TargetKind":"Com","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ] },{ "Name":"OnEvent" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"Event","Type":{"Kind":"ApiRef","Name":"ITraceEvent","TargetKind":"Com","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"Relogger","Type":{"Kind":"ApiRef","Name":"ITraceRelogger","TargetKind":"Com","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ] }] },{ "Name":"ITraceRelogger" ,"Architectures":[] ,"Platform":"windows6.1" ,"Kind":"Com" ,"Guid":"f754ad43-3bcc-4286-8009-9c5da214e84e" ,"Attrs":[] ,"Interface":{"Kind":"ApiRef","Name":"IUnknown","TargetKind":"Com","Api":"System.Com","Parents":[]} ,"Methods":[{ "Name":"AddLogfileTraceStream" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"LogfileName","Type":{"Kind":"ApiRef","Name":"BSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]} ,{"Name":"UserContext","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In"]} ,{"Name":"TraceHandle","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"RELOGSTREAM_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out","RetVal"]} ] },{ "Name":"AddRealtimeTraceStream" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"LoggerName","Type":{"Kind":"ApiRef","Name":"BSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]} ,{"Name":"UserContext","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In"]} ,{"Name":"TraceHandle","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"RELOGSTREAM_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out","RetVal"]} ] },{ "Name":"RegisterCallback" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"Callback","Type":{"Kind":"ApiRef","Name":"ITraceEventCallback","TargetKind":"Com","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ] },{ "Name":"Inject" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"Event","Type":{"Kind":"ApiRef","Name":"ITraceEvent","TargetKind":"Com","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ] },{ "Name":"CreateEventInstance" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"RELOGSTREAM_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"Event","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"ITraceEvent","TargetKind":"Com","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out","RetVal"]} ] },{ "Name":"ProcessTrace" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ ] },{ "Name":"SetOutputFilename" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"LogfileName","Type":{"Kind":"ApiRef","Name":"BSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]} ] },{ "Name":"SetCompressionMode" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"CompressionMode","Type":{"Kind":"ApiRef","Name":"BOOLEAN","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]} ] },{ "Name":"Cancel" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ ] }] }], "Functions":[{ "Name":"StartTraceW" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"TraceHandle","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out"]} ,{"Name":"InstanceName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]} ,{"Name":"Properties","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]} ] },{ "Name":"StartTraceA" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"TraceHandle","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out"]} ,{"Name":"InstanceName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]} ,{"Name":"Properties","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]} ] },{ "Name":"StopTraceW" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"InstanceName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"Properties","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]} ] },{ "Name":"StopTraceA" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"InstanceName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"Properties","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]} ] },{ "Name":"QueryTraceW" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"InstanceName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"Properties","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]} ] },{ "Name":"QueryTraceA" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"InstanceName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"Properties","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]} ] },{ "Name":"UpdateTraceW" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"InstanceName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"Properties","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]} ] },{ "Name":"UpdateTraceA" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"InstanceName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"Properties","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]} ] },{ "Name":"FlushTraceW" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.1.2600" ,"Attrs":[] ,"Params":[ {"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"InstanceName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"Properties","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]} ] },{ "Name":"FlushTraceA" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.1.2600" ,"Attrs":[] ,"Params":[ {"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"InstanceName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"Properties","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]} ] },{ "Name":"ControlTraceW" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"InstanceName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"Properties","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]} ,{"Name":"ControlCode","Type":{"Kind":"ApiRef","Name":"EVENT_TRACE_CONTROL","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ] },{ "Name":"ControlTraceA" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"InstanceName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"Properties","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]} ,{"Name":"ControlCode","Type":{"Kind":"ApiRef","Name":"EVENT_TRACE_CONTROL","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ] },{ "Name":"QueryAllTracesW" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"PropertyArray","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}}},"Attrs":["Out"]} ,{"Name":"PropertyArrayCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"LoggerCount","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] },{ "Name":"QueryAllTracesA" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"PropertyArray","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}}},"Attrs":["Out"]} ,{"Name":"PropertyArrayCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"LoggerCount","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] },{ "Name":"EnableTrace" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"Enable","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"EnableFlag","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"EnableLevel","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"ControlGuid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]} ,{"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ] },{ "Name":"EnableTraceEx" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"ProviderId","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]} ,{"Name":"SourceId","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Optional","Const"]} ,{"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"IsEnabled","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"Level","Type":{"Kind":"Native","Name":"Byte"},"Attrs":["In"]} ,{"Name":"MatchAnyKeyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ,{"Name":"MatchAllKeyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ,{"Name":"EnableProperty","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"EnableFilterDesc","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_FILTER_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]} ] },{ "Name":"EnableTraceEx2" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.1" ,"Attrs":[] ,"Params":[ {"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"ProviderId","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]} ,{"Name":"ControlCode","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"Level","Type":{"Kind":"Native","Name":"Byte"},"Attrs":["In"]} ,{"Name":"MatchAnyKeyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ,{"Name":"MatchAllKeyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ,{"Name":"Timeout","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"EnableParameters","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"ENABLE_TRACE_PARAMETERS","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]} ] },{ "Name":"EnumerateTraceGuidsEx" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"TraceQueryInfoClass","Type":{"Kind":"ApiRef","Name":"TRACE_QUERY_INFO_CLASS","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"InBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In",{"Kind":"MemorySize","BytesParamIndex":2},"Optional"]} ,{"Name":"InBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"OutBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":4},"Optional"]} ,{"Name":"OutBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"ReturnLength","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] },{ "Name":"TraceSetInformation" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.1" ,"Attrs":[] ,"Params":[ {"Name":"SessionHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"InformationClass","Type":{"Kind":"ApiRef","Name":"TRACE_QUERY_INFO_CLASS","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"TraceInformation","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In",{"Kind":"MemorySize","BytesParamIndex":3}]} ,{"Name":"InformationLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ] },{ "Name":"TraceQueryInformation" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows8.0" ,"Attrs":[] ,"Params":[ {"Name":"SessionHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"InformationClass","Type":{"Kind":"ApiRef","Name":"TRACE_QUERY_INFO_CLASS","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"TraceInformation","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":3}]} ,{"Name":"InformationLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"ReturnLength","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out","Optional"]} ] },{ "Name":"CreateTraceInstanceId" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"RegHandle","Type":{"Kind":"ApiRef","Name":"HANDLE","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]} ,{"Name":"InstInfo","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_INSTANCE_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]} ] },{ "Name":"TraceEvent" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"TraceHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ,{"Name":"EventTrace","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]} ] },{ "Name":"TraceEventInstance" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"TraceHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ,{"Name":"EventTrace","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_INSTANCE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]} ,{"Name":"InstInfo","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_INSTANCE_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]} ,{"Name":"ParentInstInfo","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_INSTANCE_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]} ] },{ "Name":"RegisterTraceGuidsW" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"RequestAddress","Type":{"Kind":"ApiRef","Name":"WMIDPREQUEST","TargetKind":"FunctionPointer","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"RequestContext","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In","Optional"]} ,{"Name":"ControlGuid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]} ,{"Name":"GuidCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"TraceGuidReg","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":3,"Child":{"Kind":"ApiRef","Name":"TRACE_GUID_REGISTRATION","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]} ,{"Name":"MofImagePath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"MofResourceName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"RegistrationHandle","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt64"}},"Attrs":["Out"]} ] },{ "Name":"RegisterTraceGuidsA" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"RequestAddress","Type":{"Kind":"ApiRef","Name":"WMIDPREQUEST","TargetKind":"FunctionPointer","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"RequestContext","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In","Optional"]} ,{"Name":"ControlGuid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]} ,{"Name":"GuidCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"TraceGuidReg","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":3,"Child":{"Kind":"ApiRef","Name":"TRACE_GUID_REGISTRATION","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]} ,{"Name":"MofImagePath","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"MofResourceName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"RegistrationHandle","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt64"}},"Attrs":["Out"]} ] },{ "Name":"EnumerateTraceGuids" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.1.2600" ,"Attrs":[] ,"Params":[ {"Name":"GuidPropertiesArray","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"TRACE_GUID_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}}},"Attrs":["In","Out"]} ,{"Name":"PropertyArrayCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"GuidCount","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] },{ "Name":"UnregisterTraceGuids" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"RegistrationHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ] },{ "Name":"GetTraceLoggerHandle" ,"SetLastError":true ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt64"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"Buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In"]} ] },{ "Name":"GetTraceEnableLevel" ,"SetLastError":true ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"Native","Name":"Byte"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"TraceHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ] },{ "Name":"GetTraceEnableFlags" ,"SetLastError":true ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"TraceHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ] },{ "Name":"OpenTraceW" ,"SetLastError":true ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"PROCESSTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"Logfile","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_LOGFILEW","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]} ] },{ "Name":"ProcessTrace" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"HandleArray","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"ApiRef","Name":"PROCESSTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]} ,{"Name":"HandleCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"StartTime","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"FILETIME","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":["In","Optional"]} ,{"Name":"EndTime","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"FILETIME","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":["In","Optional"]} ] },{ "Name":"CloseTrace" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"PROCESSTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ] },{ "Name":"QueryTraceProcessingHandle" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows10.0.16299" ,"Attrs":[] ,"Params":[ {"Name":"ProcessingHandle","Type":{"Kind":"ApiRef","Name":"PROCESSTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"InformationClass","Type":{"Kind":"ApiRef","Name":"ETW_PROCESS_HANDLE_INFO_TYPE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"InBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In","Optional"]} ,{"Name":"InBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"OutBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["Out","Optional"]} ,{"Name":"OutBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"ReturnLength","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]} ] },{ "Name":"OpenTraceA" ,"SetLastError":true ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"PROCESSTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"Logfile","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_LOGFILEA","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]} ] },{ "Name":"SetTraceCallback" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"pGuid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]} ,{"Name":"EventCallback","Type":{"Kind":"ApiRef","Name":"PEVENT_CALLBACK","TargetKind":"FunctionPointer","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ] },{ "Name":"RemoveTraceCallback" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"pGuid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]} ] },{ "Name":"TraceMessage" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.1.2600" ,"Attrs":[] ,"Params":[ {"Name":"LoggerHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ,{"Name":"MessageFlags","Type":{"Kind":"ApiRef","Name":"TRACE_MESSAGE_FLAGS","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"MessageGuid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]} ,{"Name":"MessageNumber","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":["In"]} ] },{ "Name":"TraceMessageVa" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.1.2600" ,"Attrs":[] ,"Params":[ {"Name":"LoggerHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ,{"Name":"MessageFlags","Type":{"Kind":"ApiRef","Name":"TRACE_MESSAGE_FLAGS","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"MessageGuid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]} ,{"Name":"MessageNumber","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":["In"]} ,{"Name":"MessageArgList","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"SByte"}},"Attrs":["In"]} ] },{ "Name":"EventRegister" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"ProviderId","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]} ,{"Name":"EnableCallback","Type":{"Kind":"ApiRef","Name":"PENABLECALLBACK","TargetKind":"FunctionPointer","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In","Optional"]} ,{"Name":"CallbackContext","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In","Optional"]} ,{"Name":"RegHandle","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt64"}},"Attrs":["Out"]} ] },{ "Name":"EventUnregister" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"RegHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ] },{ "Name":"EventSetInformation" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows8.0" ,"Attrs":[] ,"Params":[ {"Name":"RegHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ,{"Name":"InformationClass","Type":{"Kind":"ApiRef","Name":"EVENT_INFO_CLASS","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"EventInformation","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In",{"Kind":"MemorySize","BytesParamIndex":3}]} ,{"Name":"InformationLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ] },{ "Name":"EventEnabled" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOLEAN","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"RegHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ,{"Name":"EventDescriptor","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Const"]} ] },{ "Name":"EventProviderEnabled" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOLEAN","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"RegHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ,{"Name":"Level","Type":{"Kind":"Native","Name":"Byte"},"Attrs":["In"]} ,{"Name":"Keyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ] },{ "Name":"EventWrite" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"RegHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ,{"Name":"EventDescriptor","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Const"]} ,{"Name":"UserDataCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"UserData","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":2,"Child":{"Kind":"ApiRef","Name":"EVENT_DATA_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]} ] },{ "Name":"EventWriteTransfer" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"RegHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ,{"Name":"EventDescriptor","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Const"]} ,{"Name":"ActivityId","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Optional","Const"]} ,{"Name":"RelatedActivityId","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Optional","Const"]} ,{"Name":"UserDataCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"UserData","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":4,"Child":{"Kind":"ApiRef","Name":"EVENT_DATA_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]} ] },{ "Name":"EventWriteEx" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.1" ,"Attrs":[] ,"Params":[ {"Name":"RegHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ,{"Name":"EventDescriptor","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Const"]} ,{"Name":"Filter","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"ActivityId","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Optional","Const"]} ,{"Name":"RelatedActivityId","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Optional","Const"]} ,{"Name":"UserDataCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"UserData","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":6,"Child":{"Kind":"ApiRef","Name":"EVENT_DATA_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]} ] },{ "Name":"EventWriteString" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"RegHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ,{"Name":"Level","Type":{"Kind":"Native","Name":"Byte"},"Attrs":["In"]} ,{"Name":"Keyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ,{"Name":"String","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]} ] },{ "Name":"EventActivityIdControl" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"ControlCode","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"ActivityId","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Out"]} ] },{ "Name":"EventAccessControl" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"Guid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In"]} ,{"Name":"Operation","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"Sid","Type":{"Kind":"ApiRef","Name":"PSID","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]} ,{"Name":"Rights","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"AllowOrDeny","Type":{"Kind":"ApiRef","Name":"BOOLEAN","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]} ] },{ "Name":"EventAccessQuery" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"Guid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In"]} ,{"Name":"Buffer","Type":{"Kind":"ApiRef","Name":"PSECURITY_DESCRIPTOR","TargetKind":"Default","Api":"Security","Parents":[]},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":2},"Optional"]} ,{"Name":"BufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]} ] },{ "Name":"EventAccessRemove" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"Guid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In"]} ] },{ "Name":"TdhCreatePayloadFilter" ,"SetLastError":false ,"DllImport":"tdh.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows8.1" ,"Attrs":[] ,"Params":[ {"Name":"ProviderGuid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]} ,{"Name":"EventDescriptor","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Const"]} ,{"Name":"EventMatchANY","Type":{"Kind":"ApiRef","Name":"BOOLEAN","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]} ,{"Name":"PayloadPredicateCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"PayloadPredicates","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":3,"Child":{"Kind":"ApiRef","Name":"PAYLOAD_FILTER_PREDICATE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]} ,{"Name":"PayloadFilter","Type":{"Kind":"PointerTo","Child":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}}},"Attrs":["Out","Optional"]} ] },{ "Name":"TdhDeletePayloadFilter" ,"SetLastError":false ,"DllImport":"tdh.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows8.1" ,"Attrs":[] ,"Params":[ {"Name":"PayloadFilter","Type":{"Kind":"PointerTo","Child":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}}},"Attrs":["In","Out"]} ] },{ "Name":"TdhAggregatePayloadFilters" ,"SetLastError":false ,"DllImport":"tdh.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows8.1" ,"Attrs":[] ,"Params":[ {"Name":"PayloadFilterCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"PayloadFilterPtrs","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":0,"Child":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}}},"Attrs":["In"]} ,{"Name":"EventMatchALLFlags","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":0,"Child":{"Kind":"ApiRef","Name":"BOOLEAN","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":["In","Optional"]} ,{"Name":"EventFilterDescriptor","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_FILTER_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out"]} ] },{ "Name":"TdhCleanupPayloadEventFilterDescriptor" ,"SetLastError":false ,"DllImport":"tdh.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows8.1" ,"Attrs":[] ,"Params":[ {"Name":"EventFilterDescriptor","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_FILTER_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]} ] },{ "Name":"TdhGetEventInformation" ,"SetLastError":false ,"DllImport":"TDH.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"Event","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_RECORD","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]} ,{"Name":"TdhContextCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"TdhContext","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"ApiRef","Name":"TDH_CONTEXT","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]} ,{"Name":"Buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"TRACE_EVENT_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":4},"Optional"]} ,{"Name":"BufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]} ] },{ "Name":"TdhGetEventMapInformation" ,"SetLastError":false ,"DllImport":"TDH.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"pEvent","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_RECORD","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]} ,{"Name":"pMapName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]} ,{"Name":"pBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_MAP_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":3},"Optional"]} ,{"Name":"pBufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]} ] },{ "Name":"TdhGetPropertySize" ,"SetLastError":false ,"DllImport":"TDH.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"pEvent","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_RECORD","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]} ,{"Name":"TdhContextCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"pTdhContext","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"ApiRef","Name":"TDH_CONTEXT","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]} ,{"Name":"PropertyDataCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"pPropertyData","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":3,"Child":{"Kind":"ApiRef","Name":"PROPERTY_DATA_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]} ,{"Name":"pPropertySize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] },{ "Name":"TdhGetProperty" ,"SetLastError":false ,"DllImport":"TDH.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"pEvent","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_RECORD","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]} ,{"Name":"TdhContextCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"pTdhContext","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"ApiRef","Name":"TDH_CONTEXT","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]} ,{"Name":"PropertyDataCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"pPropertyData","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":3,"Child":{"Kind":"ApiRef","Name":"PROPERTY_DATA_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]} ,{"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"pBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Byte"}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":5}]} ] },{ "Name":"TdhEnumerateProviders" ,"SetLastError":false ,"DllImport":"TDH.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"pBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PROVIDER_ENUMERATION_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":1},"Optional"]} ,{"Name":"pBufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]} ] },{ "Name":"TdhEnumerateProvidersForDecodingSource" ,"SetLastError":false ,"DllImport":"tdh.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"filter","Type":{"Kind":"ApiRef","Name":"DECODING_SOURCE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PROVIDER_ENUMERATION_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":2},"Optional"]} ,{"Name":"bufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"bufferRequired","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] },{ "Name":"TdhQueryProviderFieldInformation" ,"SetLastError":false ,"DllImport":"TDH.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"pGuid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In"]} ,{"Name":"EventFieldValue","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ,{"Name":"EventFieldType","Type":{"Kind":"ApiRef","Name":"EVENT_FIELD_TYPE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"pBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PROVIDER_FIELD_INFOARRAY","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":4},"Optional"]} ,{"Name":"pBufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]} ] },{ "Name":"TdhEnumerateProviderFieldInformation" ,"SetLastError":false ,"DllImport":"TDH.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"pGuid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In"]} ,{"Name":"EventFieldType","Type":{"Kind":"ApiRef","Name":"EVENT_FIELD_TYPE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"pBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PROVIDER_FIELD_INFOARRAY","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":3},"Optional"]} ,{"Name":"pBufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]} ] },{ "Name":"TdhEnumerateProviderFilters" ,"SetLastError":false ,"DllImport":"tdh.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.1" ,"Attrs":[] ,"Params":[ {"Name":"Guid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In"]} ,{"Name":"TdhContextCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"TdhContext","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"ApiRef","Name":"TDH_CONTEXT","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]} ,{"Name":"FilterCount","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ,{"Name":"Buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PROVIDER_FILTER_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":5},"Optional"]} ,{"Name":"BufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]} ] },{ "Name":"TdhLoadManifest" ,"SetLastError":false ,"DllImport":"TDH.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.1" ,"Attrs":[] ,"Params":[ {"Name":"Manifest","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]} ] },{ "Name":"TdhLoadManifestFromMemory" ,"SetLastError":false ,"DllImport":"TDH.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"pData","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In",{"Kind":"MemorySize","BytesParamIndex":1},"Const"]} ,{"Name":"cbData","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ] },{ "Name":"TdhUnloadManifest" ,"SetLastError":false ,"DllImport":"TDH.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.1" ,"Attrs":[] ,"Params":[ {"Name":"Manifest","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]} ] },{ "Name":"TdhUnloadManifestFromMemory" ,"SetLastError":false ,"DllImport":"TDH.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"pData","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In",{"Kind":"MemorySize","BytesParamIndex":1},"Const"]} ,{"Name":"cbData","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ] },{ "Name":"TdhFormatProperty" ,"SetLastError":false ,"DllImport":"TDH.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.1" ,"Attrs":[] ,"Params":[ {"Name":"EventInfo","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"TRACE_EVENT_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]} ,{"Name":"MapInfo","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_MAP_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]} ,{"Name":"PointerSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"PropertyInType","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":["In"]} ,{"Name":"PropertyOutType","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":["In"]} ,{"Name":"PropertyLength","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":["In"]} ,{"Name":"UserDataLength","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":["In"]} ,{"Name":"UserData","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Byte"}},"Attrs":["In",{"Kind":"MemorySize","BytesParamIndex":6}]} ,{"Name":"BufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]} ,{"Name":"Buffer","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["Out","NotNullTerminated",{"Kind":"MemorySize","BytesParamIndex":8},"Optional"]} ,{"Name":"UserDataConsumed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt16"}},"Attrs":["Out"]} ] },{ "Name":"TdhOpenDecodingHandle" ,"SetLastError":false ,"DllImport":"tdh.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows8.0" ,"Attrs":[] ,"Params":[ {"Name":"Handle","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"TDH_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out"]} ] },{ "Name":"TdhSetDecodingParameter" ,"SetLastError":false ,"DllImport":"tdh.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows8.0" ,"Attrs":[] ,"Params":[ {"Name":"Handle","Type":{"Kind":"ApiRef","Name":"TDH_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"TdhContext","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"TDH_CONTEXT","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]} ] },{ "Name":"TdhGetDecodingParameter" ,"SetLastError":false ,"DllImport":"tdh.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows8.0" ,"Attrs":[] ,"Params":[ {"Name":"Handle","Type":{"Kind":"ApiRef","Name":"TDH_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"TdhContext","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"TDH_CONTEXT","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]} ] },{ "Name":"TdhGetWppProperty" ,"SetLastError":false ,"DllImport":"tdh.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows8.0" ,"Attrs":[] ,"Params":[ {"Name":"Handle","Type":{"Kind":"ApiRef","Name":"TDH_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"EventRecord","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_RECORD","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]} ,{"Name":"PropertyName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]} ,{"Name":"BufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]} ,{"Name":"Buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Byte"}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":3}]} ] },{ "Name":"TdhGetWppMessage" ,"SetLastError":false ,"DllImport":"tdh.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows8.0" ,"Attrs":[] ,"Params":[ {"Name":"Handle","Type":{"Kind":"ApiRef","Name":"TDH_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ,{"Name":"EventRecord","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_RECORD","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]} ,{"Name":"BufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]} ,{"Name":"Buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Byte"}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":2}]} ] },{ "Name":"TdhCloseDecodingHandle" ,"SetLastError":false ,"DllImport":"tdh.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows8.0" ,"Attrs":[] ,"Params":[ {"Name":"Handle","Type":{"Kind":"ApiRef","Name":"TDH_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]} ] },{ "Name":"TdhLoadManifestFromBinary" ,"SetLastError":false ,"DllImport":"tdh.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows8.0" ,"Attrs":[] ,"Params":[ {"Name":"BinaryPath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]} ] },{ "Name":"TdhEnumerateManifestProviderEvents" ,"SetLastError":false ,"DllImport":"TDH.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows8.1" ,"Attrs":[] ,"Params":[ {"Name":"ProviderGuid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In"]} ,{"Name":"Buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PROVIDER_EVENT_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":2},"Optional"]} ,{"Name":"BufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]} ] },{ "Name":"TdhGetManifestEventInformation" ,"SetLastError":false ,"DllImport":"TDH.dll" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows8.1" ,"Attrs":[] ,"Params":[ {"Name":"ProviderGuid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In"]} ,{"Name":"EventDescriptor","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]} ,{"Name":"Buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"TRACE_EVENT_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":3},"Optional"]} ,{"Name":"BufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]} ] },{ "Name":"CveEventWrite" ,"SetLastError":false ,"DllImport":"ADVAPI32.dll" ,"ReturnType":{"Kind":"Native","Name":"Int32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows10.0.10240" ,"Attrs":[] ,"Params":[ {"Name":"CveId","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]} ,{"Name":"AdditionalDetails","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ] }], "UnicodeAliases":[ "PEVENT_TRACE_BUFFER_CALLBACK" ,"EVENT_TRACE_LOGFILE" ,"StartTrace" ,"StopTrace" ,"QueryTrace" ,"UpdateTrace" ,"FlushTrace" ,"ControlTrace" ,"QueryAllTraces" ,"RegisterTraceGuids" ,"OpenTrace" ] }