admin/marlersoft-win32json
1
0
Fork 0
mirror of https://github.com/marlersoft/win32json synced 2026-06-21 13:57:33 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
main
marlersoft-win32json/api/System.Diagnostics.Etw.json
T
Jonathan Marler ca9dd560f5 upgrade from 30.0.12-preview to 31.0.4-preview
2026-02-15 20:47:45 -07:00

7047 lines
233 KiB
JSON
Raw Permalink Blame History

{
"Constants":[{
"Name":"ALPCGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"45d8cccd-539f-4b72-a8b7-5c683142609a"
,"Attrs":[]
},{
"Name":"DiskIoGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"3d6fa8d4-fe05-11d0-9dda-00c04fd7ba7c"
,"Attrs":[]
},{
"Name":"EventTraceConfigGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"01853a65-418f-4f36-aefc-dc0f1d2fd235"
,"Attrs":[]
},{
"Name":"FileIoGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"90cbdc39-4a3e-11d1-84f4-0000f80464e3"
,"Attrs":[]
},{
"Name":"ImageLoadGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"2cb15d1d-5fc1-11d2-abe1-00a0c911f518"
,"Attrs":[]
},{
"Name":"PageFaultGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"3d6fa8d3-fe05-11d0-9dda-00c04fd7ba7c"
,"Attrs":[]
},{
"Name":"PerfInfoGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"ce1dbfb4-137e-4da6-87b0-3f59aa102cbc"
,"Attrs":[]
},{
"Name":"ProcessGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"3d6fa8d0-fe05-11d0-9dda-00c04fd7ba7c"
,"Attrs":[]
},{
"Name":"RegistryGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"ae53722e-c863-11d2-8659-00c04fa321a1"
,"Attrs":[]
},{
"Name":"SplitIoGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"d837ca92-12b9-44a5-ad6a-3a65b3578aa8"
,"Attrs":[]
},{
"Name":"TcpIpGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"9a280ac0-c8e0-11d1-84e2-00c04fb998a2"
,"Attrs":[]
},{
"Name":"ThreadGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"3d6fa8d1-fe05-11d0-9dda-00c04fd7ba7c"
,"Attrs":[]
},{
"Name":"UdpIpGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"bf3a50c5-a9c9-4988-a005-2df0b7c80f80"
,"Attrs":[]
},{
"Name":"WNODE_FLAG_ALL_DATA"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1
,"Attrs":[]
},{
"Name":"WNODE_FLAG_SINGLE_INSTANCE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2
,"Attrs":[]
},{
"Name":"WNODE_FLAG_SINGLE_ITEM"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":4
,"Attrs":[]
},{
"Name":"WNODE_FLAG_EVENT_ITEM"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":8
,"Attrs":[]
},{
"Name":"WNODE_FLAG_FIXED_INSTANCE_SIZE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":16
,"Attrs":[]
},{
"Name":"WNODE_FLAG_TOO_SMALL"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":32
,"Attrs":[]
},{
"Name":"WNODE_FLAG_INSTANCES_SAME"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":64
,"Attrs":[]
},{
"Name":"WNODE_FLAG_STATIC_INSTANCE_NAMES"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":128
,"Attrs":[]
},{
"Name":"WNODE_FLAG_INTERNAL"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":256
,"Attrs":[]
},{
"Name":"WNODE_FLAG_USE_TIMESTAMP"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":512
,"Attrs":[]
},{
"Name":"WNODE_FLAG_PERSIST_EVENT"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1024
,"Attrs":[]
},{
"Name":"WNODE_FLAG_EVENT_REFERENCE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":8192
,"Attrs":[]
},{
"Name":"WNODE_FLAG_ANSI_INSTANCENAMES"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":16384
,"Attrs":[]
},{
"Name":"WNODE_FLAG_METHOD_ITEM"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":32768
,"Attrs":[]
},{
"Name":"WNODE_FLAG_PDO_INSTANCE_NAMES"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":65536
,"Attrs":[]
},{
"Name":"WNODE_FLAG_TRACED_GUID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":131072
,"Attrs":[]
},{
"Name":"WNODE_FLAG_LOG_WNODE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":262144
,"Attrs":[]
},{
"Name":"WNODE_FLAG_USE_GUID_PTR"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":524288
,"Attrs":[]
},{
"Name":"WNODE_FLAG_USE_MOF_PTR"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1048576
,"Attrs":[]
},{
"Name":"WNODE_FLAG_NO_HEADER"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2097152
,"Attrs":[]
},{
"Name":"WNODE_FLAG_SEND_DATA_BLOCK"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":4194304
,"Attrs":[]
},{
"Name":"WNODE_FLAG_VERSIONED_PROPERTIES"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":8388608
,"Attrs":[]
},{
"Name":"WNODE_FLAG_SEVERITY_MASK"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":4278190080
,"Attrs":[]
},{
"Name":"WMIREG_FLAG_EXPENSIVE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1
,"Attrs":[]
},{
"Name":"WMIREG_FLAG_INSTANCE_LIST"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":4
,"Attrs":[]
},{
"Name":"WMIREG_FLAG_INSTANCE_BASENAME"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":8
,"Attrs":[]
},{
"Name":"WMIREG_FLAG_INSTANCE_PDO"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":32
,"Attrs":[]
},{
"Name":"WMIREG_FLAG_REMOVE_GUID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":65536
,"Attrs":[]
},{
"Name":"WMIREG_FLAG_RESERVED1"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":131072
,"Attrs":[]
},{
"Name":"WMIREG_FLAG_RESERVED2"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":262144
,"Attrs":[]
},{
"Name":"WMIREG_FLAG_TRACED_GUID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":524288
,"Attrs":[]
},{
"Name":"WMIREG_FLAG_TRACE_CONTROL_GUID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":4096
,"Attrs":[]
},{
"Name":"WMIREG_FLAG_EVENT_ONLY_GUID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":64
,"Attrs":[]
},{
"Name":"WMI_GUIDTYPE_TRACECONTROL"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":0
,"Attrs":[]
},{
"Name":"WMI_GUIDTYPE_TRACE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1
,"Attrs":[]
},{
"Name":"WMI_GUIDTYPE_DATA"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2
,"Attrs":[]
},{
"Name":"WMI_GUIDTYPE_EVENT"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":3
,"Attrs":[]
},{
"Name":"WMIGUID_QUERY"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1
,"Attrs":[]
},{
"Name":"WMIGUID_SET"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2
,"Attrs":[]
},{
"Name":"WMIGUID_NOTIFICATION"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":4
,"Attrs":[]
},{
"Name":"WMIGUID_READ_DESCRIPTION"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":8
,"Attrs":[]
},{
"Name":"WMIGUID_EXECUTE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":16
,"Attrs":[]
},{
"Name":"TRACELOG_CREATE_REALTIME"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":32
,"Attrs":[]
},{
"Name":"TRACELOG_CREATE_ONDISK"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":64
,"Attrs":[]
},{
"Name":"TRACELOG_GUID_ENABLE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":128
,"Attrs":[]
},{
"Name":"TRACELOG_ACCESS_KERNEL_LOGGER"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":256
,"Attrs":[]
},{
"Name":"TRACELOG_LOG_EVENT"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":512
,"Attrs":[]
},{
"Name":"TRACELOG_CREATE_INPROC"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":512
,"Attrs":[]
},{
"Name":"TRACELOG_ACCESS_REALTIME"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1024
,"Attrs":[]
},{
"Name":"TRACELOG_REGISTER_GUIDS"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2048
,"Attrs":[]
},{
"Name":"TRACELOG_JOIN_GROUP"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":4096
,"Attrs":[]
},{
"Name":"WMI_GLOBAL_LOGGER_ID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1
,"Attrs":[]
},{
"Name":"MAX_PAYLOAD_PREDICATES"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":8
,"Attrs":[]
},{
"Name":"EventTraceGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"68fdd900-4a3e-11d1-84f4-0000f80464e3"
,"Attrs":[]
},{
"Name":"SystemTraceControlGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"9e814aad-3204-11d2-9a82-006008a86939"
,"Attrs":[]
},{
"Name":"DefaultTraceSecurityGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"0811c1af-7a07-4a06-82ed-869455cdf713"
,"Attrs":[]
},{
"Name":"PrivateLoggerNotificationGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"3595ab5c-042a-4c8e-b942-2d059bfeb1b1"
,"Attrs":[]
},{
"Name":"SystemIoFilterProviderGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"fbd09363-9e22-4661-b8bf-e7a34b535b8c"
,"Attrs":[]
},{
"Name":"SystemObjectProviderGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"febd7460-3d1d-47eb-af49-c9eeb1e146f2"
,"Attrs":[]
},{
"Name":"SystemPowerProviderGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"c134884a-32d5-4488-80e5-14ed7abb8269"
,"Attrs":[]
},{
"Name":"SystemHypervisorProviderGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"bafa072a-918a-4bed-b622-bc152097098f"
,"Attrs":[]
},{
"Name":"SystemLockProviderGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"721ddfd3-dacc-4e1e-b26a-a2cb31d4705a"
,"Attrs":[]
},{
"Name":"SystemConfigProviderGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"fef3a8b6-318d-4b67-a96a-3b0f6b8f18fe"
,"Attrs":[]
},{
"Name":"SystemCpuProviderGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"c6c5265f-eae8-4650-aae4-9d48603d8510"
,"Attrs":[]
},{
"Name":"SystemSchedulerProviderGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"599a2a76-4d91-4910-9ac7-7d33f2e97a6c"
,"Attrs":[]
},{
"Name":"SystemProfileProviderGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"bfeb0324-1cee-496f-a409-2ac2b48a6322"
,"Attrs":[]
},{
"Name":"SystemIoProviderGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"3d5c43e3-0f1c-4202-b817-174c0070dc79"
,"Attrs":[]
},{
"Name":"SystemMemoryProviderGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"82958ca9-b6cd-47f8-a3a8-03ae85a4bc24"
,"Attrs":[]
},{
"Name":"SystemRegistryProviderGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"16156bd9-fab4-4cfa-a232-89d1099058e3"
,"Attrs":[]
},{
"Name":"SystemProcessProviderGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"151f55dc-467d-471f-83b5-5f889d46ff66"
,"Attrs":[]
},{
"Name":"SystemAlpcProviderGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"fcb9baaf-e529-4980-92e9-ced1a6aadfdf"
,"Attrs":[]
},{
"Name":"SystemSyscallProviderGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"434286f7-6f1b-45bb-b37e-95f623046c7c"
,"Attrs":[]
},{
"Name":"SystemInterruptProviderGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"d4bbee17-b545-4888-858b-744169015b25"
,"Attrs":[]
},{
"Name":"SystemTimerProviderGuid"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"4f061568-e215-499f-ab2e-eda0ae890a5b"
,"Attrs":[]
},{
"Name":"KERNEL_LOGGER_NAMEW"
,"Type":{"Kind":"Native","Name":"String"}
,"ValueType":"String"
,"Value":"NT Kernel Logger"
,"Attrs":[]
},{
"Name":"GLOBAL_LOGGER_NAMEW"
,"Type":{"Kind":"Native","Name":"String"}
,"ValueType":"String"
,"Value":"GlobalLogger"
,"Attrs":[]
},{
"Name":"EVENT_LOGGER_NAMEW"
,"Type":{"Kind":"Native","Name":"String"}
,"ValueType":"String"
,"Value":"EventLog"
,"Attrs":[]
},{
"Name":"DIAG_LOGGER_NAMEW"
,"Type":{"Kind":"Native","Name":"String"}
,"ValueType":"String"
,"Value":"DiagLog"
,"Attrs":[]
},{
"Name":"KERNEL_LOGGER_NAMEA"
,"Type":{"Kind":"Native","Name":"String"}
,"ValueType":"String"
,"Value":"NT Kernel Logger"
,"Attrs":[]
},{
"Name":"GLOBAL_LOGGER_NAMEA"
,"Type":{"Kind":"Native","Name":"String"}
,"ValueType":"String"
,"Value":"GlobalLogger"
,"Attrs":[]
},{
"Name":"EVENT_LOGGER_NAMEA"
,"Type":{"Kind":"Native","Name":"String"}
,"ValueType":"String"
,"Value":"EventLog"
,"Attrs":[]
},{
"Name":"DIAG_LOGGER_NAMEA"
,"Type":{"Kind":"Native","Name":"String"}
,"ValueType":"String"
,"Value":"DiagLog"
,"Attrs":[]
},{
"Name":"MAX_MOF_FIELDS"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":16
,"Attrs":[]
},{
"Name":"SYSTEM_EVENT_TYPE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_INFO"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":0
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_START"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_END"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_STOP"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_DC_START"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":3
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_DC_END"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":4
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_EXTENSION"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":5
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_REPLY"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":6
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_DEQUEUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":7
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_RESUME"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":7
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CHECKPOINT"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":8
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_SUSPEND"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":8
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_WINEVT_SEND"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":9
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_WINEVT_RECEIVE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":240
,"Attrs":[]
},{
"Name":"TRACE_LEVEL_NONE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":0
,"Attrs":[]
},{
"Name":"TRACE_LEVEL_CRITICAL"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1
,"Attrs":[]
},{
"Name":"TRACE_LEVEL_FATAL"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1
,"Attrs":[]
},{
"Name":"TRACE_LEVEL_ERROR"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2
,"Attrs":[]
},{
"Name":"TRACE_LEVEL_WARNING"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":3
,"Attrs":[]
},{
"Name":"TRACE_LEVEL_INFORMATION"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":4
,"Attrs":[]
},{
"Name":"TRACE_LEVEL_VERBOSE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":5
,"Attrs":[]
},{
"Name":"TRACE_LEVEL_RESERVED6"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":6
,"Attrs":[]
},{
"Name":"TRACE_LEVEL_RESERVED7"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":7
,"Attrs":[]
},{
"Name":"TRACE_LEVEL_RESERVED8"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":8
,"Attrs":[]
},{
"Name":"TRACE_LEVEL_RESERVED9"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":9
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_LOAD"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":10
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_TERMINATE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":11
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_IO_READ"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":10
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_IO_WRITE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":11
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_IO_READ_INIT"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":12
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_IO_WRITE_INIT"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":13
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_IO_FLUSH"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":14
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_IO_FLUSH_INIT"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":15
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_IO_REDIRECTED_INIT"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":16
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_MM_TF"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":10
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_MM_DZF"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":11
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_MM_COW"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":12
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_MM_GPF"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":13
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_MM_HPF"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":14
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_MM_AV"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":15
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_SEND"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":10
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_RECEIVE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":11
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONNECT"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":12
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_DISCONNECT"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":13
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_RETRANSMIT"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":14
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_ACCEPT"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":15
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_RECONNECT"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":16
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONNFAIL"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":17
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_COPY_TCP"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":18
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_COPY_ARP"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":19
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_ACKFULL"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":20
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_ACKPART"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":21
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_ACKDUP"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":22
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_GUIDMAP"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":10
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":11
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_SIDINFO"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":12
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_SECURITY"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":13
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_DBGID_RSDS"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":64
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_REGCREATE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":10
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_REGOPEN"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":11
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_REGDELETE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":12
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_REGQUERY"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":13
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_REGSETVALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":14
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_REGDELETEVALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":15
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_REGQUERYVALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":16
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_REGENUMERATEKEY"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":17
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_REGENUMERATEVALUEKEY"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":18
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_REGQUERYMULTIPLEVALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":19
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_REGSETINFORMATION"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":20
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_REGFLUSH"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":21
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_REGKCBCREATE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":22
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_REGKCBDELETE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":23
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_REGKCBRUNDOWNBEGIN"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":24
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_REGKCBRUNDOWNEND"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":25
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_REGVIRTUALIZE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":26
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_REGCLOSE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":27
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_REGSETSECURITY"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":28
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_REGQUERYSECURITY"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":29
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_REGCOMMIT"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":30
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_REGPREPARE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":31
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_REGROLLBACK"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":32
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_REGMOUNTHIVE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":33
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_CPU"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":10
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_PHYSICALDISK"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":11
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_LOGICALDISK"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":12
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_NIC"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":13
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_VIDEO"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":14
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_SERVICES"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":15
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_POWER"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":16
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_NETINFO"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":17
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_OPTICALMEDIA"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":18
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_IRQ"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":21
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_PNP"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":22
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_IDECHANNEL"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":23
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_NUMANODE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":24
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_PLATFORM"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":25
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_PROCESSORGROUP"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":26
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_PROCESSORNUMBER"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":27
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_DPI"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":28
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_CI_INFO"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":29
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_MACHINEID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":30
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_DEFRAG"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":31
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_MOBILEPLATFORM"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":32
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_DEVICEFAMILY"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":33
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_FLIGHTID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":34
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_PROCESSOR"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":35
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_VIRTUALIZATION"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":36
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_CONFIG_BOOT"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":37
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_OPTICAL_IO_READ"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":55
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_OPTICAL_IO_WRITE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":56
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_OPTICAL_IO_FLUSH"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":57
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_OPTICAL_IO_READ_INIT"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":58
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_OPTICAL_IO_WRITE_INIT"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":59
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_OPTICAL_IO_FLUSH_INIT"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":60
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_FLT_PREOP_INIT"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":96
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_FLT_POSTOP_INIT"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":97
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_FLT_PREOP_COMPLETION"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":98
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_FLT_POSTOP_COMPLETION"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":99
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_FLT_PREOP_FAILURE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":100
,"Attrs":[]
},{
"Name":"EVENT_TRACE_TYPE_FLT_POSTOP_FAILURE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":101
,"Attrs":[]
},{
"Name":"EVENT_TRACE_FLAG_DEBUG_EVENTS"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":4194304
,"Attrs":[]
},{
"Name":"EVENT_TRACE_FLAG_EXTENSION"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2147483648
,"Attrs":[]
},{
"Name":"EVENT_TRACE_FLAG_FORWARD_WMI"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1073741824
,"Attrs":[]
},{
"Name":"EVENT_TRACE_FLAG_ENABLE_RESERVE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":536870912
,"Attrs":[]
},{
"Name":"EVENT_TRACE_FILE_MODE_NONE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":0
,"Attrs":[]
},{
"Name":"EVENT_TRACE_FILE_MODE_SEQUENTIAL"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1
,"Attrs":[]
},{
"Name":"EVENT_TRACE_FILE_MODE_CIRCULAR"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2
,"Attrs":[]
},{
"Name":"EVENT_TRACE_FILE_MODE_APPEND"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":4
,"Attrs":[]
},{
"Name":"EVENT_TRACE_REAL_TIME_MODE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":256
,"Attrs":[]
},{
"Name":"EVENT_TRACE_DELAY_OPEN_FILE_MODE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":512
,"Attrs":[]
},{
"Name":"EVENT_TRACE_BUFFERING_MODE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1024
,"Attrs":[]
},{
"Name":"EVENT_TRACE_PRIVATE_LOGGER_MODE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2048
,"Attrs":[]
},{
"Name":"EVENT_TRACE_ADD_HEADER_MODE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":4096
,"Attrs":[]
},{
"Name":"EVENT_TRACE_USE_GLOBAL_SEQUENCE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":16384
,"Attrs":[]
},{
"Name":"EVENT_TRACE_USE_LOCAL_SEQUENCE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":32768
,"Attrs":[]
},{
"Name":"EVENT_TRACE_RELOG_MODE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":65536
,"Attrs":[]
},{
"Name":"EVENT_TRACE_USE_PAGED_MEMORY"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":16777216
,"Attrs":[]
},{
"Name":"EVENT_TRACE_FILE_MODE_NEWFILE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":8
,"Attrs":[]
},{
"Name":"EVENT_TRACE_FILE_MODE_PREALLOCATE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":32
,"Attrs":[]
},{
"Name":"EVENT_TRACE_NONSTOPPABLE_MODE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":64
,"Attrs":[]
},{
"Name":"EVENT_TRACE_SECURE_MODE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":128
,"Attrs":[]
},{
"Name":"EVENT_TRACE_USE_KBYTES_FOR_SIZE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":8192
,"Attrs":[]
},{
"Name":"EVENT_TRACE_PRIVATE_IN_PROC"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":131072
,"Attrs":[]
},{
"Name":"EVENT_TRACE_MODE_RESERVED"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1048576
,"Attrs":[]
},{
"Name":"EVENT_TRACE_NO_PER_PROCESSOR_BUFFERING"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":268435456
,"Attrs":[]
},{
"Name":"EVENT_TRACE_SYSTEM_LOGGER_MODE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":33554432
,"Attrs":[]
},{
"Name":"EVENT_TRACE_ADDTO_TRIAGE_DUMP"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2147483648
,"Attrs":[]
},{
"Name":"EVENT_TRACE_STOP_ON_HYBRID_SHUTDOWN"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":4194304
,"Attrs":[]
},{
"Name":"EVENT_TRACE_PERSIST_ON_HYBRID_SHUTDOWN"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":8388608
,"Attrs":[]
},{
"Name":"EVENT_TRACE_INDEPENDENT_SESSION_MODE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":134217728
,"Attrs":[]
},{
"Name":"EVENT_TRACE_COMPRESSED_MODE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":67108864
,"Attrs":[]
},{
"Name":"EVENT_TRACE_CONTROL_INCREMENT_FILE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":4
,"Attrs":[]
},{
"Name":"EVENT_TRACE_CONTROL_CONVERT_TO_REALTIME"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":5
,"Attrs":[]
},{
"Name":"TRACE_MESSAGE_PERFORMANCE_TIMESTAMP"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":16
,"Attrs":[]
},{
"Name":"TRACE_MESSAGE_POINTER32"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":64
,"Attrs":[]
},{
"Name":"TRACE_MESSAGE_POINTER64"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":128
,"Attrs":[]
},{
"Name":"TRACE_MESSAGE_FLAG_MASK"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":65535
,"Attrs":[]
},{
"Name":"EVENT_TRACE_USE_PROCTIME"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1
,"Attrs":[]
},{
"Name":"EVENT_TRACE_USE_NOCPUTIME"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2
,"Attrs":[]
},{
"Name":"TRACE_HEADER_FLAG_USE_TIMESTAMP"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":512
,"Attrs":[]
},{
"Name":"TRACE_HEADER_FLAG_TRACED_GUID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":131072
,"Attrs":[]
},{
"Name":"TRACE_HEADER_FLAG_LOG_WNODE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":262144
,"Attrs":[]
},{
"Name":"TRACE_HEADER_FLAG_USE_GUID_PTR"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":524288
,"Attrs":[]
},{
"Name":"TRACE_HEADER_FLAG_USE_MOF_PTR"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1048576
,"Attrs":[]
},{
"Name":"SYSTEM_ALPC_KW_GENERAL"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":1
,"Attrs":[]
},{
"Name":"SYSTEM_CONFIG_KW_SYSTEM"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":1
,"Attrs":[]
},{
"Name":"SYSTEM_CONFIG_KW_GRAPHICS"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":2
,"Attrs":[]
},{
"Name":"SYSTEM_CONFIG_KW_STORAGE"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":4
,"Attrs":[]
},{
"Name":"SYSTEM_CONFIG_KW_NETWORK"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":8
,"Attrs":[]
},{
"Name":"SYSTEM_CONFIG_KW_SERVICES"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":16
,"Attrs":[]
},{
"Name":"SYSTEM_CONFIG_KW_PNP"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":32
,"Attrs":[]
},{
"Name":"SYSTEM_CONFIG_KW_OPTICAL"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":64
,"Attrs":[]
},{
"Name":"SYSTEM_CPU_KW_CONFIG"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":1
,"Attrs":[]
},{
"Name":"SYSTEM_CPU_KW_CACHE_FLUSH"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":2
,"Attrs":[]
},{
"Name":"SYSTEM_CPU_KW_SPEC_CONTROL"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":4
,"Attrs":[]
},{
"Name":"SYSTEM_HYPERVISOR_KW_PROFILE"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":1
,"Attrs":[]
},{
"Name":"SYSTEM_HYPERVISOR_KW_CALLOUTS"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":2
,"Attrs":[]
},{
"Name":"SYSTEM_HYPERVISOR_KW_VTL_CHANGE"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":4
,"Attrs":[]
},{
"Name":"SYSTEM_INTERRUPT_KW_GENERAL"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":1
,"Attrs":[]
},{
"Name":"SYSTEM_INTERRUPT_KW_CLOCK_INTERRUPT"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":2
,"Attrs":[]
},{
"Name":"SYSTEM_INTERRUPT_KW_DPC"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":4
,"Attrs":[]
},{
"Name":"SYSTEM_INTERRUPT_KW_DPC_QUEUE"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":8
,"Attrs":[]
},{
"Name":"SYSTEM_INTERRUPT_KW_WDF_DPC"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":16
,"Attrs":[]
},{
"Name":"SYSTEM_INTERRUPT_KW_WDF_INTERRUPT"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":32
,"Attrs":[]
},{
"Name":"SYSTEM_INTERRUPT_KW_IPI"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":64
,"Attrs":[]
},{
"Name":"SYSTEM_IO_KW_DISK"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":1
,"Attrs":[]
},{
"Name":"SYSTEM_IO_KW_DISK_INIT"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":2
,"Attrs":[]
},{
"Name":"SYSTEM_IO_KW_FILENAME"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":4
,"Attrs":[]
},{
"Name":"SYSTEM_IO_KW_SPLIT"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":8
,"Attrs":[]
},{
"Name":"SYSTEM_IO_KW_FILE"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":16
,"Attrs":[]
},{
"Name":"SYSTEM_IO_KW_OPTICAL"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":32
,"Attrs":[]
},{
"Name":"SYSTEM_IO_KW_OPTICAL_INIT"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":64
,"Attrs":[]
},{
"Name":"SYSTEM_IO_KW_DRIVERS"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":128
,"Attrs":[]
},{
"Name":"SYSTEM_IO_KW_CC"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":256
,"Attrs":[]
},{
"Name":"SYSTEM_IO_KW_NETWORK"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":512
,"Attrs":[]
},{
"Name":"SYSTEM_IOFILTER_KW_GENERAL"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":1
,"Attrs":[]
},{
"Name":"SYSTEM_IOFILTER_KW_INIT"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":2
,"Attrs":[]
},{
"Name":"SYSTEM_IOFILTER_KW_FASTIO"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":4
,"Attrs":[]
},{
"Name":"SYSTEM_IOFILTER_KW_FAILURE"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":8
,"Attrs":[]
},{
"Name":"SYSTEM_LOCK_KW_SPINLOCK"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":1
,"Attrs":[]
},{
"Name":"SYSTEM_LOCK_KW_SPINLOCK_COUNTERS"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":2
,"Attrs":[]
},{
"Name":"SYSTEM_LOCK_KW_SYNC_OBJECTS"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":4
,"Attrs":[]
},{
"Name":"SYSTEM_MEMORY_KW_GENERAL"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":1
,"Attrs":[]
},{
"Name":"SYSTEM_MEMORY_KW_HARD_FAULTS"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":2
,"Attrs":[]
},{
"Name":"SYSTEM_MEMORY_KW_ALL_FAULTS"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":4
,"Attrs":[]
},{
"Name":"SYSTEM_MEMORY_KW_POOL"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":8
,"Attrs":[]
},{
"Name":"SYSTEM_MEMORY_KW_MEMINFO"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":16
,"Attrs":[]
},{
"Name":"SYSTEM_MEMORY_KW_PFSECTION"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":32
,"Attrs":[]
},{
"Name":"SYSTEM_MEMORY_KW_MEMINFO_WS"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":64
,"Attrs":[]
},{
"Name":"SYSTEM_MEMORY_KW_HEAP"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":128
,"Attrs":[]
},{
"Name":"SYSTEM_MEMORY_KW_WS"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":256
,"Attrs":[]
},{
"Name":"SYSTEM_MEMORY_KW_CONTMEM_GEN"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":512
,"Attrs":[]
},{
"Name":"SYSTEM_MEMORY_KW_VIRTUAL_ALLOC"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":1024
,"Attrs":[]
},{
"Name":"SYSTEM_MEMORY_KW_FOOTPRINT"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":2048
,"Attrs":[]
},{
"Name":"SYSTEM_MEMORY_KW_SESSION"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":4096
,"Attrs":[]
},{
"Name":"SYSTEM_MEMORY_KW_REFSET"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":8192
,"Attrs":[]
},{
"Name":"SYSTEM_MEMORY_KW_VAMAP"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":16384
,"Attrs":[]
},{
"Name":"SYSTEM_MEMORY_KW_NONTRADEABLE"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":32768
,"Attrs":[]
},{
"Name":"SYSTEM_OBJECT_KW_GENERAL"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":1
,"Attrs":[]
},{
"Name":"SYSTEM_OBJECT_KW_HANDLE"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":2
,"Attrs":[]
},{
"Name":"SYSTEM_POWER_KW_GENERAL"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":1
,"Attrs":[]
},{
"Name":"SYSTEM_POWER_KW_HIBER_RUNDOWN"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":2
,"Attrs":[]
},{
"Name":"SYSTEM_POWER_KW_PROCESSOR_IDLE"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":4
,"Attrs":[]
},{
"Name":"SYSTEM_POWER_KW_IDLE_SELECTION"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":8
,"Attrs":[]
},{
"Name":"SYSTEM_POWER_KW_PPM_EXIT_LATENCY"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":16
,"Attrs":[]
},{
"Name":"SYSTEM_PROCESS_KW_GENERAL"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":1
,"Attrs":[]
},{
"Name":"SYSTEM_PROCESS_KW_INSWAP"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":2
,"Attrs":[]
},{
"Name":"SYSTEM_PROCESS_KW_FREEZE"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":4
,"Attrs":[]
},{
"Name":"SYSTEM_PROCESS_KW_PERF_COUNTER"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":8
,"Attrs":[]
},{
"Name":"SYSTEM_PROCESS_KW_WAKE_COUNTER"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":16
,"Attrs":[]
},{
"Name":"SYSTEM_PROCESS_KW_WAKE_DROP"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":32
,"Attrs":[]
},{
"Name":"SYSTEM_PROCESS_KW_WAKE_EVENT"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":64
,"Attrs":[]
},{
"Name":"SYSTEM_PROCESS_KW_DEBUG_EVENTS"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":128
,"Attrs":[]
},{
"Name":"SYSTEM_PROCESS_KW_DBGPRINT"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":256
,"Attrs":[]
},{
"Name":"SYSTEM_PROCESS_KW_JOB"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":512
,"Attrs":[]
},{
"Name":"SYSTEM_PROCESS_KW_WORKER_THREAD"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":1024
,"Attrs":[]
},{
"Name":"SYSTEM_PROCESS_KW_THREAD"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":2048
,"Attrs":[]
},{
"Name":"SYSTEM_PROCESS_KW_LOADER"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":4096
,"Attrs":[]
},{
"Name":"SYSTEM_PROFILE_KW_GENERAL"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":1
,"Attrs":[]
},{
"Name":"SYSTEM_PROFILE_KW_PMC_PROFILE"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":2
,"Attrs":[]
},{
"Name":"SYSTEM_REGISTRY_KW_GENERAL"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":1
,"Attrs":[]
},{
"Name":"SYSTEM_REGISTRY_KW_HIVE"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":2
,"Attrs":[]
},{
"Name":"SYSTEM_REGISTRY_KW_NOTIFICATION"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":4
,"Attrs":[]
},{
"Name":"SYSTEM_SCHEDULER_KW_XSCHEDULER"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":1
,"Attrs":[]
},{
"Name":"SYSTEM_SCHEDULER_KW_DISPATCHER"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":2
,"Attrs":[]
},{
"Name":"SYSTEM_SCHEDULER_KW_KERNEL_QUEUE"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":4
,"Attrs":[]
},{
"Name":"SYSTEM_SCHEDULER_KW_SHOULD_YIELD"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":8
,"Attrs":[]
},{
"Name":"SYSTEM_SCHEDULER_KW_ANTI_STARVATION"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":16
,"Attrs":[]
},{
"Name":"SYSTEM_SCHEDULER_KW_LOAD_BALANCER"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":32
,"Attrs":[]
},{
"Name":"SYSTEM_SCHEDULER_KW_AFFINITY"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":64
,"Attrs":[]
},{
"Name":"SYSTEM_SCHEDULER_KW_PRIORITY"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":128
,"Attrs":[]
},{
"Name":"SYSTEM_SCHEDULER_KW_IDEAL_PROCESSOR"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":256
,"Attrs":[]
},{
"Name":"SYSTEM_SCHEDULER_KW_CONTEXT_SWITCH"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":512
,"Attrs":[]
},{
"Name":"SYSTEM_SCHEDULER_KW_COMPACT_CSWITCH"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":1024
,"Attrs":[]
},{
"Name":"SYSTEM_SYSCALL_KW_GENERAL"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":1
,"Attrs":[]
},{
"Name":"SYSTEM_TIMER_KW_GENERAL"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":1
,"Attrs":[]
},{
"Name":"SYSTEM_TIMER_KW_CLOCK_TIMER"
,"Type":{"Kind":"Native","Name":"UInt64"}
,"ValueType":"UInt64"
,"Value":2
,"Attrs":[]
},{
"Name":"SYSTEM_MEMORY_POOL_FILTER_ID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1
,"Attrs":[]
},{
"Name":"ETW_NULL_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":0
,"Attrs":[]
},{
"Name":"ETW_OBJECT_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1
,"Attrs":[]
},{
"Name":"ETW_STRING_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2
,"Attrs":[]
},{
"Name":"ETW_SBYTE_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":3
,"Attrs":[]
},{
"Name":"ETW_BYTE_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":4
,"Attrs":[]
},{
"Name":"ETW_INT16_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":5
,"Attrs":[]
},{
"Name":"ETW_UINT16_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":6
,"Attrs":[]
},{
"Name":"ETW_INT32_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":7
,"Attrs":[]
},{
"Name":"ETW_UINT32_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":8
,"Attrs":[]
},{
"Name":"ETW_INT64_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":9
,"Attrs":[]
},{
"Name":"ETW_UINT64_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":10
,"Attrs":[]
},{
"Name":"ETW_CHAR_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":11
,"Attrs":[]
},{
"Name":"ETW_SINGLE_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":12
,"Attrs":[]
},{
"Name":"ETW_DOUBLE_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":13
,"Attrs":[]
},{
"Name":"ETW_BOOLEAN_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":14
,"Attrs":[]
},{
"Name":"ETW_DECIMAL_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":15
,"Attrs":[]
},{
"Name":"ETW_GUID_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":101
,"Attrs":[]
},{
"Name":"ETW_ASCIICHAR_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":102
,"Attrs":[]
},{
"Name":"ETW_ASCIISTRING_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":103
,"Attrs":[]
},{
"Name":"ETW_COUNTED_STRING_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":104
,"Attrs":[]
},{
"Name":"ETW_POINTER_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":105
,"Attrs":[]
},{
"Name":"ETW_SIZET_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":106
,"Attrs":[]
},{
"Name":"ETW_HIDDEN_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":107
,"Attrs":[]
},{
"Name":"ETW_BOOL_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":108
,"Attrs":[]
},{
"Name":"ETW_COUNTED_ANSISTRING_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":109
,"Attrs":[]
},{
"Name":"ETW_REVERSED_COUNTED_STRING_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":110
,"Attrs":[]
},{
"Name":"ETW_REVERSED_COUNTED_ANSISTRING_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":111
,"Attrs":[]
},{
"Name":"ETW_NON_NULL_TERMINATED_STRING_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":112
,"Attrs":[]
},{
"Name":"ETW_REDUCED_ANSISTRING_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":113
,"Attrs":[]
},{
"Name":"ETW_REDUCED_STRING_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":114
,"Attrs":[]
},{
"Name":"ETW_SID_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":115
,"Attrs":[]
},{
"Name":"ETW_VARIANT_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":116
,"Attrs":[]
},{
"Name":"ETW_PTVECTOR_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":117
,"Attrs":[]
},{
"Name":"ETW_WMITIME_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":118
,"Attrs":[]
},{
"Name":"ETW_DATETIME_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":119
,"Attrs":[]
},{
"Name":"ETW_REFRENCE_TYPE_VALUE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":120
,"Attrs":[]
},{
"Name":"TRACE_PROVIDER_FLAG_LEGACY"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1
,"Attrs":[]
},{
"Name":"TRACE_PROVIDER_FLAG_PRE_ENABLE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2
,"Attrs":[]
},{
"Name":"KERNEL_LOGGER_NAME"
,"Type":{"Kind":"Native","Name":"String"}
,"ValueType":"String"
,"Value":"NT Kernel Logger"
,"Attrs":[]
},{
"Name":"GLOBAL_LOGGER_NAME"
,"Type":{"Kind":"Native","Name":"String"}
,"ValueType":"String"
,"Value":"GlobalLogger"
,"Attrs":[]
},{
"Name":"EVENT_LOGGER_NAME"
,"Type":{"Kind":"Native","Name":"String"}
,"ValueType":"String"
,"Value":"EventLog"
,"Attrs":[]
},{
"Name":"ENABLE_TRACE_PARAMETERS_VERSION"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1
,"Attrs":[]
},{
"Name":"ENABLE_TRACE_PARAMETERS_VERSION_2"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2
,"Attrs":[]
},{
"Name":"EVENT_MIN_LEVEL"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":0
,"Attrs":[]
},{
"Name":"EVENT_MAX_LEVEL"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":255
,"Attrs":[]
},{
"Name":"EVENT_ACTIVITY_CTRL_GET_ID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1
,"Attrs":[]
},{
"Name":"EVENT_ACTIVITY_CTRL_SET_ID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2
,"Attrs":[]
},{
"Name":"EVENT_ACTIVITY_CTRL_CREATE_ID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":3
,"Attrs":[]
},{
"Name":"EVENT_ACTIVITY_CTRL_GET_SET_ID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":4
,"Attrs":[]
},{
"Name":"EVENT_ACTIVITY_CTRL_CREATE_SET_ID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":5
,"Attrs":[]
},{
"Name":"MAX_EVENT_DATA_DESCRIPTORS"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":128
,"Attrs":[]
},{
"Name":"MAX_EVENT_FILTER_DATA_SIZE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1024
,"Attrs":[]
},{
"Name":"MAX_EVENT_FILTER_PAYLOAD_SIZE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":4096
,"Attrs":[]
},{
"Name":"MAX_EVENT_FILTER_EVENT_NAME_SIZE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":4096
,"Attrs":[]
},{
"Name":"MAX_EVENT_FILTERS_COUNT"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":13
,"Attrs":[]
},{
"Name":"MAX_EVENT_FILTER_PID_COUNT"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":8
,"Attrs":[]
},{
"Name":"MAX_EVENT_FILTER_EVENT_ID_COUNT"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":64
,"Attrs":[]
},{
"Name":"EVENT_FILTER_TYPE_NONE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":0
,"Attrs":[]
},{
"Name":"EVENT_FILTER_TYPE_SCHEMATIZED"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2147483648
,"Attrs":[]
},{
"Name":"EVENT_FILTER_TYPE_SYSTEM_FLAGS"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2147483649
,"Attrs":[]
},{
"Name":"EVENT_FILTER_TYPE_TRACEHANDLE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2147483650
,"Attrs":[]
},{
"Name":"EVENT_FILTER_TYPE_PID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2147483652
,"Attrs":[]
},{
"Name":"EVENT_FILTER_TYPE_EXECUTABLE_NAME"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2147483656
,"Attrs":[]
},{
"Name":"EVENT_FILTER_TYPE_PACKAGE_ID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2147483664
,"Attrs":[]
},{
"Name":"EVENT_FILTER_TYPE_PACKAGE_APP_ID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2147483680
,"Attrs":[]
},{
"Name":"EVENT_FILTER_TYPE_PAYLOAD"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2147483904
,"Attrs":[]
},{
"Name":"EVENT_FILTER_TYPE_EVENT_ID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2147484160
,"Attrs":[]
},{
"Name":"EVENT_FILTER_TYPE_EVENT_NAME"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2147484672
,"Attrs":[]
},{
"Name":"EVENT_FILTER_TYPE_STACKWALK"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2147487744
,"Attrs":[]
},{
"Name":"EVENT_FILTER_TYPE_STACKWALK_NAME"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2147491840
,"Attrs":[]
},{
"Name":"EVENT_FILTER_TYPE_STACKWALK_LEVEL_KW"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2147500032
,"Attrs":[]
},{
"Name":"EVENT_FILTER_TYPE_CONTAINER"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2147516416
,"Attrs":[]
},{
"Name":"EVENT_DATA_DESCRIPTOR_TYPE_NONE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":0
,"Attrs":[]
},{
"Name":"EVENT_DATA_DESCRIPTOR_TYPE_EVENT_METADATA"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1
,"Attrs":[]
},{
"Name":"EVENT_DATA_DESCRIPTOR_TYPE_PROVIDER_METADATA"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2
,"Attrs":[]
},{
"Name":"EVENT_DATA_DESCRIPTOR_TYPE_TIMESTAMP_OVERRIDE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":3
,"Attrs":[]
},{
"Name":"EVENT_WRITE_FLAG_NO_FAULTING"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1
,"Attrs":[]
},{
"Name":"EVENT_WRITE_FLAG_INPRIVATE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2
,"Attrs":[]
},{
"Name":"EVENT_HEADER_EXT_TYPE_RELATED_ACTIVITYID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1
,"Attrs":[]
},{
"Name":"EVENT_HEADER_EXT_TYPE_SID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2
,"Attrs":[]
},{
"Name":"EVENT_HEADER_EXT_TYPE_TS_ID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":3
,"Attrs":[]
},{
"Name":"EVENT_HEADER_EXT_TYPE_INSTANCE_INFO"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":4
,"Attrs":[]
},{
"Name":"EVENT_HEADER_EXT_TYPE_STACK_TRACE32"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":5
,"Attrs":[]
},{
"Name":"EVENT_HEADER_EXT_TYPE_STACK_TRACE64"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":6
,"Attrs":[]
},{
"Name":"EVENT_HEADER_EXT_TYPE_PEBS_INDEX"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":7
,"Attrs":[]
},{
"Name":"EVENT_HEADER_EXT_TYPE_PMC_COUNTERS"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":8
,"Attrs":[]
},{
"Name":"EVENT_HEADER_EXT_TYPE_PSM_KEY"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":9
,"Attrs":[]
},{
"Name":"EVENT_HEADER_EXT_TYPE_EVENT_KEY"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":10
,"Attrs":[]
},{
"Name":"EVENT_HEADER_EXT_TYPE_EVENT_SCHEMA_TL"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":11
,"Attrs":[]
},{
"Name":"EVENT_HEADER_EXT_TYPE_PROV_TRAITS"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":12
,"Attrs":[]
},{
"Name":"EVENT_HEADER_EXT_TYPE_PROCESS_START_KEY"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":13
,"Attrs":[]
},{
"Name":"EVENT_HEADER_EXT_TYPE_CONTROL_GUID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":14
,"Attrs":[]
},{
"Name":"EVENT_HEADER_EXT_TYPE_QPC_DELTA"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":15
,"Attrs":[]
},{
"Name":"EVENT_HEADER_EXT_TYPE_CONTAINER_ID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":16
,"Attrs":[]
},{
"Name":"EVENT_HEADER_EXT_TYPE_STACK_KEY32"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":17
,"Attrs":[]
},{
"Name":"EVENT_HEADER_EXT_TYPE_STACK_KEY64"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":18
,"Attrs":[]
},{
"Name":"EVENT_HEADER_EXT_TYPE_MAX"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":19
,"Attrs":[]
},{
"Name":"EVENT_HEADER_PROPERTY_XML"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1
,"Attrs":[]
},{
"Name":"EVENT_HEADER_PROPERTY_FORWARDED_XML"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2
,"Attrs":[]
},{
"Name":"EVENT_HEADER_PROPERTY_LEGACY_EVENTLOG"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":4
,"Attrs":[]
},{
"Name":"EVENT_HEADER_PROPERTY_RELOGGABLE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":8
,"Attrs":[]
},{
"Name":"EVENT_HEADER_FLAG_EXTENDED_INFO"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1
,"Attrs":[]
},{
"Name":"EVENT_HEADER_FLAG_PRIVATE_SESSION"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2
,"Attrs":[]
},{
"Name":"EVENT_HEADER_FLAG_STRING_ONLY"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":4
,"Attrs":[]
},{
"Name":"EVENT_HEADER_FLAG_TRACE_MESSAGE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":8
,"Attrs":[]
},{
"Name":"EVENT_HEADER_FLAG_NO_CPUTIME"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":16
,"Attrs":[]
},{
"Name":"EVENT_HEADER_FLAG_32_BIT_HEADER"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":32
,"Attrs":[]
},{
"Name":"EVENT_HEADER_FLAG_64_BIT_HEADER"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":64
,"Attrs":[]
},{
"Name":"EVENT_HEADER_FLAG_DECODE_GUID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":128
,"Attrs":[]
},{
"Name":"EVENT_HEADER_FLAG_CLASSIC_HEADER"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":256
,"Attrs":[]
},{
"Name":"EVENT_HEADER_FLAG_PROCESSOR_INDEX"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":512
,"Attrs":[]
},{
"Name":"EVENT_ENABLE_PROPERTY_SID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1
,"Attrs":[]
},{
"Name":"EVENT_ENABLE_PROPERTY_TS_ID"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2
,"Attrs":[]
},{
"Name":"EVENT_ENABLE_PROPERTY_STACK_TRACE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":4
,"Attrs":[]
},{
"Name":"EVENT_ENABLE_PROPERTY_PSM_KEY"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":8
,"Attrs":[]
},{
"Name":"EVENT_ENABLE_PROPERTY_IGNORE_KEYWORD_0"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":16
,"Attrs":[]
},{
"Name":"EVENT_ENABLE_PROPERTY_PROVIDER_GROUP"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":32
,"Attrs":[]
},{
"Name":"EVENT_ENABLE_PROPERTY_ENABLE_KEYWORD_0"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":64
,"Attrs":[]
},{
"Name":"EVENT_ENABLE_PROPERTY_PROCESS_START_KEY"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":128
,"Attrs":[]
},{
"Name":"EVENT_ENABLE_PROPERTY_EVENT_KEY"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":256
,"Attrs":[]
},{
"Name":"EVENT_ENABLE_PROPERTY_EXCLUDE_INPRIVATE"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":512
,"Attrs":[]
},{
"Name":"EVENT_ENABLE_PROPERTY_ENABLE_SILOS"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1024
,"Attrs":[]
},{
"Name":"EVENT_ENABLE_PROPERTY_SOURCE_CONTAINER_TRACKING"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2048
,"Attrs":[]
},{
"Name":"PROCESS_TRACE_MODE_REAL_TIME"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":256
,"Attrs":[]
},{
"Name":"PROCESS_TRACE_MODE_RAW_TIMESTAMP"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":4096
,"Attrs":[]
},{
"Name":"PROCESS_TRACE_MODE_EVENT_RECORD"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":268435456
,"Attrs":[]
},{
"Name":"CLSID_TraceRelogger"
,"Type":{"Kind":"Native","Name":"Guid"}
,"ValueType":"String"
,"Value":"7b40792d-05ff-44c4-9058-f440c71f17d4"
,"Attrs":[]
}],
"Types":[{
"Name":"TRACE_MESSAGE_FLAGS"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":true
,"Scoped":false
,"Values":[
{"Name":"TRACE_MESSAGE_COMPONENTID","Value":4}
,{"Name":"TRACE_MESSAGE_GUID","Value":2}
,{"Name":"TRACE_MESSAGE_SEQUENCE","Value":1}
,{"Name":"TRACE_MESSAGE_SYSTEMINFO","Value":32}
,{"Name":"TRACE_MESSAGE_TIMESTAMP","Value":8}
]
,"IntegerBase":"UInt32"
},{
"Name":"ENABLECALLBACK_ENABLED_STATE"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EVENT_CONTROL_CODE_DISABLE_PROVIDER","Value":0}
,{"Name":"EVENT_CONTROL_CODE_ENABLE_PROVIDER","Value":1}
,{"Name":"EVENT_CONTROL_CODE_CAPTURE_STATE","Value":2}
]
,"IntegerBase":"UInt32"
},{
"Name":"EVENT_TRACE_CONTROL"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EVENT_TRACE_CONTROL_FLUSH","Value":3}
,{"Name":"EVENT_TRACE_CONTROL_QUERY","Value":0}
,{"Name":"EVENT_TRACE_CONTROL_STOP","Value":1}
,{"Name":"EVENT_TRACE_CONTROL_UPDATE","Value":2}
]
,"IntegerBase":"UInt32"
},{
"Name":"EVENT_TRACE_FLAG"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":true
,"Scoped":false
,"Values":[
{"Name":"EVENT_TRACE_FLAG_ALPC","Value":1048576}
,{"Name":"EVENT_TRACE_FLAG_CSWITCH","Value":16}
,{"Name":"EVENT_TRACE_FLAG_DBGPRINT","Value":262144}
,{"Name":"EVENT_TRACE_FLAG_DISK_FILE_IO","Value":512}
,{"Name":"EVENT_TRACE_FLAG_DISK_IO","Value":256}
,{"Name":"EVENT_TRACE_FLAG_DISK_IO_INIT","Value":1024}
,{"Name":"EVENT_TRACE_FLAG_DISPATCHER","Value":2048}
,{"Name":"EVENT_TRACE_FLAG_DPC","Value":32}
,{"Name":"EVENT_TRACE_FLAG_DRIVER","Value":8388608}
,{"Name":"EVENT_TRACE_FLAG_FILE_IO","Value":33554432}
,{"Name":"EVENT_TRACE_FLAG_FILE_IO_INIT","Value":67108864}
,{"Name":"EVENT_TRACE_FLAG_IMAGE_LOAD","Value":4}
,{"Name":"EVENT_TRACE_FLAG_INTERRUPT","Value":64}
,{"Name":"EVENT_TRACE_FLAG_JOB","Value":524288}
,{"Name":"EVENT_TRACE_FLAG_MEMORY_HARD_FAULTS","Value":8192}
,{"Name":"EVENT_TRACE_FLAG_MEMORY_PAGE_FAULTS","Value":4096}
,{"Name":"EVENT_TRACE_FLAG_NETWORK_TCPIP","Value":65536}
,{"Name":"EVENT_TRACE_FLAG_NO_SYSCONFIG","Value":268435456}
,{"Name":"EVENT_TRACE_FLAG_PROCESS","Value":1}
,{"Name":"EVENT_TRACE_FLAG_PROCESS_COUNTERS","Value":8}
,{"Name":"EVENT_TRACE_FLAG_PROFILE","Value":16777216}
,{"Name":"EVENT_TRACE_FLAG_REGISTRY","Value":131072}
,{"Name":"EVENT_TRACE_FLAG_SPLIT_IO","Value":2097152}
,{"Name":"EVENT_TRACE_FLAG_SYSTEMCALL","Value":128}
,{"Name":"EVENT_TRACE_FLAG_THREAD","Value":2}
,{"Name":"EVENT_TRACE_FLAG_VAMAP","Value":32768}
,{"Name":"EVENT_TRACE_FLAG_VIRTUAL_ALLOC","Value":16384}
]
,"IntegerBase":"UInt32"
},{
"Name":"TDH_HANDLE"
,"Architectures":[]
,"Platform":null
,"Kind":"NativeTypedef"
,"AlsoUsableFor":null
,"Def":{"Kind":"Native","Name":"IntPtr"}
,"FreeFunc":"TdhCloseDecodingHandle"
,"InvalidHandleValue":0
},{
"Name":"PROCESSTRACE_HANDLE"
,"Architectures":[]
,"Platform":null
,"Kind":"NativeTypedef"
,"AlsoUsableFor":null
,"Def":{"Kind":"Native","Name":"UInt64"}
,"FreeFunc":"CloseTrace"
,"InvalidHandleValue":null
},{
"Name":"CONTROLTRACE_HANDLE"
,"Architectures":[]
,"Platform":null
,"Kind":"NativeTypedef"
,"AlsoUsableFor":null
,"Def":{"Kind":"Native","Name":"UInt64"}
,"FreeFunc":null
,"InvalidHandleValue":0
},{
"Name":"RELOGSTREAM_HANDLE"
,"Architectures":[]
,"Platform":null
,"Kind":"NativeTypedef"
,"AlsoUsableFor":null
,"Def":{"Kind":"Native","Name":"UInt64"}
,"FreeFunc":null
,"InvalidHandleValue":0
},{
"Name":"WNODE_HEADER"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"ProviderId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"Guid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]}
,{"Name":"ClientContext","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous2_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"CountLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"KernelHandle","Type":{"Kind":"ApiRef","Name":"HANDLE","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"TimeStamp","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"_Anonymous1_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"HistoricalContext","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous1_e__Union"]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous_e__Struct"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Version","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Linkage","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
}]
}]
},{
"Name":"OFFSETINSTANCEDATAANDLENGTH"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"OffsetInstanceData","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"LengthInstanceData","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"WNODE_ALL_DATA"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"WnodeHeader","Type":{"Kind":"ApiRef","Name":"WNODE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"DataBlockOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"InstanceCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"OffsetInstanceNameOffsets","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"FixedInstanceSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"OffsetInstanceDataAndLength","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"ApiRef","Name":"OFFSETINSTANCEDATAANDLENGTH","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]}
]
,"NestedTypes":[]
}]
},{
"Name":"WNODE_SINGLE_INSTANCE"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"WnodeHeader","Type":{"Kind":"ApiRef","Name":"WNODE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"OffsetInstanceName","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"InstanceIndex","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"DataBlockOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"SizeDataBlock","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"VariableData","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"Native","Name":"Byte"}},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"WNODE_SINGLE_ITEM"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"WnodeHeader","Type":{"Kind":"ApiRef","Name":"WNODE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"OffsetInstanceName","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"InstanceIndex","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"ItemId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"DataBlockOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"SizeDataItem","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"VariableData","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"Native","Name":"Byte"}},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"WNODE_METHOD_ITEM"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"WnodeHeader","Type":{"Kind":"ApiRef","Name":"WNODE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"OffsetInstanceName","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"InstanceIndex","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"MethodId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"DataBlockOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"SizeDataBlock","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"VariableData","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"Native","Name":"Byte"}},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"WNODE_EVENT_ITEM"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"WnodeHeader","Type":{"Kind":"ApiRef","Name":"WNODE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"WNODE_EVENT_REFERENCE"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"WnodeHeader","Type":{"Kind":"ApiRef","Name":"WNODE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"TargetGuid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]}
,{"Name":"TargetDataBlockSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"TargetInstanceIndex","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"TargetInstanceName","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"Native","Name":"Char"}},"Attrs":[]}
]
,"NestedTypes":[]
}]
},{
"Name":"WNODE_TOO_SMALL"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"WnodeHeader","Type":{"Kind":"ApiRef","Name":"WNODE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"SizeNeeded","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"WMIREGGUIDW"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Guid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"InstanceCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"InstanceNameList","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"BaseNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Pdo","Type":{"Kind":"Native","Name":"UIntPtr"},"Attrs":[]}
,{"Name":"InstanceInfo","Type":{"Kind":"Native","Name":"UIntPtr"},"Attrs":[]}
]
,"NestedTypes":[]
}]
},{
"Name":"WMIREGINFOW"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"NextWmiRegInfo","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"RegistryPath","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"MofResourceName","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"GuidCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"WmiRegGuid","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"ApiRef","Name":"WMIREGGUIDW","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"WMIDPREQUESTCODE"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"WMI_GET_ALL_DATA","Value":0}
,{"Name":"WMI_GET_SINGLE_INSTANCE","Value":1}
,{"Name":"WMI_SET_SINGLE_INSTANCE","Value":2}
,{"Name":"WMI_SET_SINGLE_ITEM","Value":3}
,{"Name":"WMI_ENABLE_EVENTS","Value":4}
,{"Name":"WMI_DISABLE_EVENTS","Value":5}
,{"Name":"WMI_ENABLE_COLLECTION","Value":6}
,{"Name":"WMI_DISABLE_COLLECTION","Value":7}
,{"Name":"WMI_REGINFO","Value":8}
,{"Name":"WMI_EXECUTE_METHOD","Value":9}
,{"Name":"WMI_CAPTURE_STATE","Value":10}
]
,"IntegerBase":"Int32"
},{
"Name":"ETW_COMPRESSION_RESUMPTION_MODE"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EtwCompressionModeRestart","Value":0}
,{"Name":"EtwCompressionModeNoDisable","Value":1}
,{"Name":"EtwCompressionModeNoRestart","Value":2}
]
,"IntegerBase":"Int32"
},{
"Name":"EVENT_TRACE_HEADER"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Size","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"ThreadId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"ProcessId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"TimeStamp","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"Anonymous3","Type":{"Kind":"ApiRef","Name":"_Anonymous3_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"Anonymous4","Type":{"Kind":"ApiRef","Name":"_Anonymous4_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous4_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous4_e__Union"]},"Attrs":[]}
,{"Name":"ProcessorTime","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous4_e__Union"]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous2_e__Struct"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"ClientContext","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"_Anonymous1_e__Struct"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"KernelTime","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"UserTime","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
}]
},{
"Name":"_Anonymous3_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Guid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]}
,{"Name":"GuidPtr","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"_Anonymous2_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Version","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Class","Type":{"Kind":"ApiRef","Name":"_Class_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous2_e__Union"]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Class_e__Struct"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Type","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"Level","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"Version","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
]
,"NestedTypes":[]
}]
},{
"Name":"_Anonymous1_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"FieldTypeFlags","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous1_e__Union"]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous_e__Struct"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"HeaderType","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"MarkerFlags","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
]
,"NestedTypes":[]
}]
}]
},{
"Name":"EVENT_INSTANCE_HEADER"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Size","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"ThreadId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"ProcessId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"TimeStamp","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"RegHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
,{"Name":"InstanceId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"ParentInstanceId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Anonymous3","Type":{"Kind":"ApiRef","Name":"_Anonymous3_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"ParentRegHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous3_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous3_e__Union"]},"Attrs":[]}
,{"Name":"ProcessorTime","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous3_e__Union"]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous2_e__Struct"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"EventId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"_Anonymous1_e__Struct"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"KernelTime","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"UserTime","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
}]
},{
"Name":"_Anonymous2_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Version","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Class","Type":{"Kind":"ApiRef","Name":"_Class_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous2_e__Union"]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Class_e__Struct"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Type","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"Level","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"Version","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
]
,"NestedTypes":[]
}]
},{
"Name":"_Anonymous1_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"FieldTypeFlags","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous1_e__Union"]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous_e__Struct"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"HeaderType","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"MarkerFlags","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
]
,"NestedTypes":[]
}]
}]
},{
"Name":"MOF_FIELD"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"DataPtr","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
,{"Name":"Length","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"DataType","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"TRACE_LOGFILE_HEADER"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"ProviderVersion","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"NumberOfProcessors","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"EndTime","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"TimerResolution","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"MaximumFileSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"LogFileMode","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"BuffersWritten","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"LoggerName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"LogFileName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"TimeZone","Type":{"Kind":"ApiRef","Name":"TIME_ZONE_INFORMATION","TargetKind":"Default","Api":"System.Time","Parents":[]},"Attrs":[]}
,{"Name":"BootTime","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"PerfFreq","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"StartTime","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"ReservedFlags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"BuffersLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous2_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"LogInstanceGuid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]}
,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous2_e__Union"]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous_e__Struct"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"StartBuffers","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"PointerSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"EventsLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"CpuSpeedInMHz","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
}]
},{
"Name":"_Anonymous1_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Version","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"VersionDetail","Type":{"Kind":"ApiRef","Name":"_VersionDetail_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous1_e__Union"]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_VersionDetail_e__Struct"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"MajorVersion","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"MinorVersion","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"SubVersion","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"SubMinorVersion","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
]
,"NestedTypes":[]
}]
}]
},{
"Name":"TRACE_LOGFILE_HEADER32"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"ProviderVersion","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"NumberOfProcessors","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"EndTime","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"TimerResolution","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"MaximumFileSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"LogFileMode","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"BuffersWritten","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"LoggerName","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"LogFileName","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"TimeZone","Type":{"Kind":"ApiRef","Name":"TIME_ZONE_INFORMATION","TargetKind":"Default","Api":"System.Time","Parents":[]},"Attrs":[]}
,{"Name":"BootTime","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"PerfFreq","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"StartTime","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"ReservedFlags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"BuffersLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous2_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"LogInstanceGuid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]}
,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous2_e__Union"]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous_e__Struct"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"StartBuffers","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"PointerSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"EventsLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"CpuSpeedInMHz","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
}]
},{
"Name":"_Anonymous1_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Version","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"VersionDetail","Type":{"Kind":"ApiRef","Name":"_VersionDetail_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous1_e__Union"]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_VersionDetail_e__Struct"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"MajorVersion","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"MinorVersion","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"SubVersion","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"SubMinorVersion","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
]
,"NestedTypes":[]
}]
}]
},{
"Name":"TRACE_LOGFILE_HEADER64"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"ProviderVersion","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"NumberOfProcessors","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"EndTime","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"TimerResolution","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"MaximumFileSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"LogFileMode","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"BuffersWritten","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"LoggerName","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
,{"Name":"LogFileName","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
,{"Name":"TimeZone","Type":{"Kind":"ApiRef","Name":"TIME_ZONE_INFORMATION","TargetKind":"Default","Api":"System.Time","Parents":[]},"Attrs":[]}
,{"Name":"BootTime","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"PerfFreq","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"StartTime","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"ReservedFlags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"BuffersLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous2_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"LogInstanceGuid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]}
,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous2_e__Union"]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous_e__Struct"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"StartBuffers","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"PointerSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"EventsLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"CpuSpeedInMHz","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
}]
},{
"Name":"_Anonymous1_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Version","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"VersionDetail","Type":{"Kind":"ApiRef","Name":"_VersionDetail_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous1_e__Union"]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_VersionDetail_e__Struct"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"MajorVersion","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"MinorVersion","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"SubVersion","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"SubMinorVersion","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
]
,"NestedTypes":[]
}]
}]
},{
"Name":"EVENT_INSTANCE_INFO"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"RegHandle","Type":{"Kind":"ApiRef","Name":"HANDLE","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"InstanceId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"EVENT_TRACE_PROPERTIES"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Wnode","Type":{"Kind":"ApiRef","Name":"WNODE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"MinimumBuffers","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"MaximumBuffers","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"MaximumFileSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"LogFileMode","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"FlushTimer","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"EnableFlags","Type":{"Kind":"ApiRef","Name":"EVENT_TRACE_FLAG","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"NumberOfBuffers","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"FreeBuffers","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"EventsLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"BuffersWritten","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"LogBuffersLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"RealTimeBuffersLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"LoggerThreadId","Type":{"Kind":"ApiRef","Name":"HANDLE","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"LogFileNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"LoggerNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"AgeLimit","Type":{"Kind":"Native","Name":"Int32"},"Attrs":[]}
,{"Name":"FlushThreshold","Type":{"Kind":"Native","Name":"Int32"},"Attrs":[]}
]
,"NestedTypes":[]
}]
},{
"Name":"EVENT_TRACE_PROPERTIES_V2"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Wnode","Type":{"Kind":"ApiRef","Name":"WNODE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"MinimumBuffers","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"MaximumBuffers","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"MaximumFileSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"LogFileMode","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"FlushTimer","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"EnableFlags","Type":{"Kind":"ApiRef","Name":"EVENT_TRACE_FLAG","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"NumberOfBuffers","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"FreeBuffers","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"EventsLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"BuffersWritten","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"LogBuffersLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"RealTimeBuffersLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"LoggerThreadId","Type":{"Kind":"ApiRef","Name":"HANDLE","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"LogFileNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"LoggerNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"FilterDescCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"FilterDesc","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_FILTER_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]}
,{"Name":"Anonymous3","Type":{"Kind":"ApiRef","Name":"_Anonymous3_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous3_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous3_e__Union"]},"Attrs":[]}
,{"Name":"V2Options","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous_e__Struct"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"_bitfield","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
}]
},{
"Name":"_Anonymous2_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous2_e__Union"]},"Attrs":[]}
,{"Name":"V2Control","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous_e__Struct"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"_bitfield","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
}]
},{
"Name":"_Anonymous1_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"AgeLimit","Type":{"Kind":"Native","Name":"Int32"},"Attrs":[]}
,{"Name":"FlushThreshold","Type":{"Kind":"Native","Name":"Int32"},"Attrs":[]}
]
,"NestedTypes":[]
}]
},{
"Name":"TRACE_GUID_REGISTRATION"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Guid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["Const"]}
,{"Name":"RegHandle","Type":{"Kind":"ApiRef","Name":"HANDLE","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"TRACE_GUID_PROPERTIES"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Guid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]}
,{"Name":"GuidType","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"LoggerId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"EnableLevel","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"EnableFlags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"IsEnable","Type":{"Kind":"ApiRef","Name":"BOOLEAN","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"ETW_BUFFER_CONTEXT"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"LoggerId","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous_e__Union"]},"Attrs":[]}
,{"Name":"ProcessorIndex","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous_e__Struct"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"ProcessorNumber","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"Alignment","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
]
,"NestedTypes":[]
}]
}]
},{
"Name":"TRACE_ENABLE_INFO"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"IsEnabled","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Level","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"Reserved1","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"LoggerId","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"EnableProperty","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Reserved2","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"MatchAnyKeyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
,{"Name":"MatchAllKeyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"TRACE_PROVIDER_INSTANCE_INFO"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"NextOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"EnableCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Pid","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"TRACE_GUID_INFO"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"InstanceCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Reserved","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"PROFILE_SOURCE_INFO"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"NextEntryOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Source","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"MinInterval","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"MaxInterval","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Reserved","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
,{"Name":"Description","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"Native","Name":"Char"}},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"ETW_PMC_COUNTER_OWNER_TYPE"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EtwPmcOwnerFree","Value":0}
,{"Name":"EtwPmcOwnerUntagged","Value":1}
,{"Name":"EtwPmcOwnerTagged","Value":2}
,{"Name":"EtwPmcOwnerTaggedWithSource","Value":3}
]
,"IntegerBase":"Int32"
},{
"Name":"ETW_PMC_COUNTER_OWNER"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"OwnerType","Type":{"Kind":"ApiRef","Name":"ETW_PMC_COUNTER_OWNER_TYPE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"ProfileSource","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"OwnerTag","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"ETW_PMC_COUNTER_OWNERSHIP_STATUS"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"ProcessorNumber","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"NumberOfCounters","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"CounterOwners","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"ApiRef","Name":"ETW_PMC_COUNTER_OWNER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"EVENT_TRACE"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Header","Type":{"Kind":"ApiRef","Name":"EVENT_TRACE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"InstanceId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"ParentInstanceId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"ParentGuid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]}
,{"Name":"MofData","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":[]}
,{"Name":"MofLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"ClientContext","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"BufferContext","Type":{"Kind":"ApiRef","Name":"ETW_BUFFER_CONTEXT","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
]
,"NestedTypes":[]
}]
},{
"Name":"PEVENT_TRACE_BUFFER_CALLBACKW"
,"Architectures":[]
,"Platform":null
,"Kind":"FunctionPointer"
,"SetLastError":false
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Attrs":[]
,"Params":[
{"Name":"Logfile","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_LOGFILEW","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]}
]
},{
"Name":"PEVENT_TRACE_BUFFER_CALLBACKA"
,"Architectures":[]
,"Platform":null
,"Kind":"FunctionPointer"
,"SetLastError":false
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Attrs":[]
,"Params":[
{"Name":"Logfile","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_LOGFILEA","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]}
]
},{
"Name":"PEVENT_CALLBACK"
,"Architectures":[]
,"Platform":null
,"Kind":"FunctionPointer"
,"SetLastError":false
,"ReturnType":{"Kind":"Native","Name":"Void"}
,"ReturnAttrs":[]
,"Attrs":[]
,"Params":[
{"Name":"pEvent","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]}
]
},{
"Name":"PEVENT_RECORD_CALLBACK"
,"Architectures":[]
,"Platform":null
,"Kind":"FunctionPointer"
,"SetLastError":false
,"ReturnType":{"Kind":"Native","Name":"Void"}
,"ReturnAttrs":[]
,"Attrs":[]
,"Params":[
{"Name":"EventRecord","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_RECORD","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]}
]
},{
"Name":"WMIDPREQUEST"
,"Architectures":[]
,"Platform":null
,"Kind":"FunctionPointer"
,"SetLastError":false
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Attrs":[]
,"Params":[
{"Name":"RequestCode","Type":{"Kind":"ApiRef","Name":"WMIDPREQUESTCODE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"RequestContext","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In"]}
,{"Name":"BufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]}
,{"Name":"Buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In","Out"]}
]
},{
"Name":"EVENT_TRACE_LOGFILEW"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"LogFileName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"LoggerName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"CurrentTime","Type":{"Kind":"Native","Name":"Int64"},"Attrs":[]}
,{"Name":"BuffersRead","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"CurrentEvent","Type":{"Kind":"ApiRef","Name":"EVENT_TRACE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"LogfileHeader","Type":{"Kind":"ApiRef","Name":"TRACE_LOGFILE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"BufferCallback","Type":{"Kind":"ApiRef","Name":"PEVENT_TRACE_BUFFER_CALLBACKW","TargetKind":"FunctionPointer","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Filled","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"EventsLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"IsKernelTrace","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Context","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous2_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"EventCallback","Type":{"Kind":"ApiRef","Name":"PEVENT_CALLBACK","TargetKind":"FunctionPointer","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"EventRecordCallback","Type":{"Kind":"ApiRef","Name":"PEVENT_RECORD_CALLBACK","TargetKind":"FunctionPointer","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"_Anonymous1_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"LogFileMode","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"ProcessTraceMode","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
}]
},{
"Name":"EVENT_TRACE_LOGFILEA"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"LogFileName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"LoggerName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"CurrentTime","Type":{"Kind":"Native","Name":"Int64"},"Attrs":[]}
,{"Name":"BuffersRead","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"CurrentEvent","Type":{"Kind":"ApiRef","Name":"EVENT_TRACE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"LogfileHeader","Type":{"Kind":"ApiRef","Name":"TRACE_LOGFILE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"BufferCallback","Type":{"Kind":"ApiRef","Name":"PEVENT_TRACE_BUFFER_CALLBACKA","TargetKind":"FunctionPointer","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Filled","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"EventsLost","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"IsKernelTrace","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Context","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous2_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"EventCallback","Type":{"Kind":"ApiRef","Name":"PEVENT_CALLBACK","TargetKind":"FunctionPointer","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"EventRecordCallback","Type":{"Kind":"ApiRef","Name":"PEVENT_RECORD_CALLBACK","TargetKind":"FunctionPointer","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"_Anonymous1_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"LogFileMode","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"ProcessTraceMode","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
}]
},{
"Name":"ENABLE_TRACE_PARAMETERS_V1"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Version","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"EnableProperty","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"ControlFlags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"SourceId","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]}
,{"Name":"EnableFilterDesc","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_FILTER_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"ENABLE_TRACE_PARAMETERS"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Version","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"EnableProperty","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"ControlFlags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"SourceId","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]}
,{"Name":"EnableFilterDesc","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_FILTER_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]}
,{"Name":"FilterDescCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"TRACE_QUERY_INFO_CLASS"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"TraceGuidQueryList","Value":0}
,{"Name":"TraceGuidQueryInfo","Value":1}
,{"Name":"TraceGuidQueryProcess","Value":2}
,{"Name":"TraceStackTracingInfo","Value":3}
,{"Name":"TraceSystemTraceEnableFlagsInfo","Value":4}
,{"Name":"TraceSampledProfileIntervalInfo","Value":5}
,{"Name":"TraceProfileSourceConfigInfo","Value":6}
,{"Name":"TraceProfileSourceListInfo","Value":7}
,{"Name":"TracePmcEventListInfo","Value":8}
,{"Name":"TracePmcCounterListInfo","Value":9}
,{"Name":"TraceSetDisallowList","Value":10}
,{"Name":"TraceVersionInfo","Value":11}
,{"Name":"TraceGroupQueryList","Value":12}
,{"Name":"TraceGroupQueryInfo","Value":13}
,{"Name":"TraceDisallowListQuery","Value":14}
,{"Name":"TraceInfoReserved15","Value":15}
,{"Name":"TracePeriodicCaptureStateListInfo","Value":16}
,{"Name":"TracePeriodicCaptureStateInfo","Value":17}
,{"Name":"TraceProviderBinaryTracking","Value":18}
,{"Name":"TraceMaxLoggersQuery","Value":19}
,{"Name":"TraceLbrConfigurationInfo","Value":20}
,{"Name":"TraceLbrEventListInfo","Value":21}
,{"Name":"TraceMaxPmcCounterQuery","Value":22}
,{"Name":"TraceStreamCount","Value":23}
,{"Name":"TraceStackCachingInfo","Value":24}
,{"Name":"TracePmcCounterOwners","Value":25}
,{"Name":"TraceUnifiedStackCachingInfo","Value":26}
,{"Name":"MaxTraceSetInfoClass","Value":27}
]
,"IntegerBase":"Int32"
},{
"Name":"CLASSIC_EVENT_ID"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"EventGuid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]}
,{"Name":"Type","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"Reserved","Type":{"Kind":"Array","Shape":{"Size":7},"Child":{"Kind":"Native","Name":"Byte"}},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"TRACE_STACK_CACHING_INFO"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Enabled","Type":{"Kind":"ApiRef","Name":"BOOLEAN","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"CacheSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"BucketCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"TRACE_PROFILE_INTERVAL"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Source","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Interval","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"TRACE_VERSION_INFO"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"EtwTraceProcessingVersion","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Reserved","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"TRACE_PERIODIC_CAPTURE_STATE_INFO"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"CaptureStateFrequencyInSeconds","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"ProviderCount","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"Reserved","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"ETW_PROCESS_HANDLE_INFO_TYPE"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EtwQueryPartitionInformation","Value":1}
,{"Name":"EtwQueryPartitionInformationV2","Value":2}
,{"Name":"EtwQueryLastDroppedTimes","Value":3}
,{"Name":"EtwQueryProcessHandleInfoMax","Value":4}
]
,"IntegerBase":"Int32"
},{
"Name":"ETW_TRACE_PARTITION_INFORMATION"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"PartitionId","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]}
,{"Name":"ParentId","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]}
,{"Name":"QpcOffsetFromRoot","Type":{"Kind":"Native","Name":"Int64"},"Attrs":[]}
,{"Name":"PartitionType","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"ETW_TRACE_PARTITION_INFORMATION_V2"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"QpcOffsetFromRoot","Type":{"Kind":"Native","Name":"Int64"},"Attrs":[]}
,{"Name":"PartitionType","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"PartitionId","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"ParentId","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"EVENT_DATA_DESCRIPTOR"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Ptr","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
,{"Name":"Size","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Reserved","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous_e__Union"]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous_e__Struct"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Type","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"Reserved1","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"Reserved2","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
]
,"NestedTypes":[]
}]
}]
},{
"Name":"EVENT_DESCRIPTOR"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Id","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"Version","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"Channel","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"Level","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"Opcode","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"Task","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"Keyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"EVENT_FILTER_DESCRIPTOR"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Ptr","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
,{"Name":"Size","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Type","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"EVENT_FILTER_HEADER"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Id","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"Version","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"Reserved","Type":{"Kind":"Array","Shape":{"Size":5},"Child":{"Kind":"Native","Name":"Byte"}},"Attrs":[]}
,{"Name":"InstanceId","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
,{"Name":"Size","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"NextOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"EVENT_FILTER_EVENT_ID"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"FilterIn","Type":{"Kind":"ApiRef","Name":"BOOLEAN","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"Reserved","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"Count","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"Events","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"Native","Name":"UInt16"}},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"EVENT_FILTER_EVENT_NAME"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"MatchAnyKeyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
,{"Name":"MatchAllKeyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
,{"Name":"Level","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"FilterIn","Type":{"Kind":"ApiRef","Name":"BOOLEAN","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"NameCount","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"Names","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"Native","Name":"Byte"}},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"EVENT_FILTER_LEVEL_KW"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"MatchAnyKeyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
,{"Name":"MatchAllKeyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
,{"Name":"Level","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"FilterIn","Type":{"Kind":"ApiRef","Name":"BOOLEAN","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"EVENT_INFO_CLASS"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EventProviderBinaryTrackInfo","Value":0}
,{"Name":"EventProviderSetReserved1","Value":1}
,{"Name":"EventProviderSetTraits","Value":2}
,{"Name":"EventProviderUseDescriptorType","Value":3}
,{"Name":"MaxEventInfo","Value":4}
]
,"IntegerBase":"Int32"
},{
"Name":"PENABLECALLBACK"
,"Architectures":[]
,"Platform":null
,"Kind":"FunctionPointer"
,"SetLastError":false
,"ReturnType":{"Kind":"Native","Name":"Void"}
,"ReturnAttrs":[]
,"Attrs":[]
,"Params":[
{"Name":"SourceId","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]}
,{"Name":"IsEnabled","Type":{"Kind":"ApiRef","Name":"ENABLECALLBACK_ENABLED_STATE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"Level","Type":{"Kind":"Native","Name":"Byte"},"Attrs":["In"]}
,{"Name":"MatchAnyKeyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
,{"Name":"MatchAllKeyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
,{"Name":"FilterData","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_FILTER_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]}
,{"Name":"CallbackContext","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In","Out","Optional"]}
]
},{
"Name":"EVENT_HEADER_EXTENDED_DATA_ITEM"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Reserved1","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"ExtType","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"DataSize","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"DataPtr","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous_e__Struct"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"_bitfield","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
]
,"NestedTypes":[]
}]
},{
"Name":"EVENT_EXTENDED_ITEM_INSTANCE"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"InstanceId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"ParentInstanceId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"ParentGuid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"EVENT_EXTENDED_ITEM_RELATED_ACTIVITYID"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"RelatedActivityId","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"EVENT_EXTENDED_ITEM_TS_ID"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"SessionId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"EVENT_EXTENDED_ITEM_STACK_TRACE32"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"MatchId","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
,{"Name":"Address","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"EVENT_EXTENDED_ITEM_STACK_TRACE64"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"MatchId","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
,{"Name":"Address","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"Native","Name":"UInt64"}},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"EVENT_EXTENDED_ITEM_STACK_KEY32"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"MatchId","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
,{"Name":"StackKey","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Padding","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"EVENT_EXTENDED_ITEM_STACK_KEY64"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"MatchId","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
,{"Name":"StackKey","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"EVENT_EXTENDED_ITEM_PEBS_INDEX"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"PebsIndex","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"EVENT_EXTENDED_ITEM_PMC_COUNTERS"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Counter","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"Native","Name":"UInt64"}},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"EVENT_EXTENDED_ITEM_PROCESS_START_KEY"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"ProcessStartKey","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"EVENT_EXTENDED_ITEM_EVENT_KEY"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Key","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"EVENT_HEADER"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Size","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"HeaderType","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"EventProperty","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"ThreadId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"ProcessId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"TimeStamp","Type":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"ProviderId","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]}
,{"Name":"EventDescriptor","Type":{"Kind":"ApiRef","Name":"EVENT_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"ActivityId","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous_e__Union"]},"Attrs":[]}
,{"Name":"ProcessorTime","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous_e__Struct"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"KernelTime","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"UserTime","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
}]
}]
},{
"Name":"EVENT_RECORD"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"EventHeader","Type":{"Kind":"ApiRef","Name":"EVENT_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"BufferContext","Type":{"Kind":"ApiRef","Name":"ETW_BUFFER_CONTEXT","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"ExtendedDataCount","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"UserDataLength","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"ExtendedData","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_HEADER_EXTENDED_DATA_ITEM","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]}
,{"Name":"UserData","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":[]}
,{"Name":"UserContext","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"ETW_PROVIDER_TRAIT_TYPE"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EtwProviderTraitTypeGroup","Value":1}
,{"Name":"EtwProviderTraitDecodeGuid","Value":2}
,{"Name":"EtwProviderTraitTypeMax","Value":3}
]
,"IntegerBase":"Int32"
},{
"Name":"EVENTSECURITYOPERATION"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EventSecuritySetDACL","Value":0}
,{"Name":"EventSecuritySetSACL","Value":1}
,{"Name":"EventSecurityAddDACL","Value":2}
,{"Name":"EventSecurityAddSACL","Value":3}
,{"Name":"EventSecurityMax","Value":4}
]
,"IntegerBase":"Int32"
},{
"Name":"EVENT_MAP_ENTRY"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"OutputOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Value","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"InputOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
}]
},{
"Name":"MAP_FLAGS"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EVENTMAP_INFO_FLAG_MANIFEST_VALUEMAP","Value":1}
,{"Name":"EVENTMAP_INFO_FLAG_MANIFEST_BITMAP","Value":2}
,{"Name":"EVENTMAP_INFO_FLAG_MANIFEST_PATTERNMAP","Value":4}
,{"Name":"EVENTMAP_INFO_FLAG_WBEM_VALUEMAP","Value":8}
,{"Name":"EVENTMAP_INFO_FLAG_WBEM_BITMAP","Value":16}
,{"Name":"EVENTMAP_INFO_FLAG_WBEM_FLAG","Value":32}
,{"Name":"EVENTMAP_INFO_FLAG_WBEM_NO_MAP","Value":64}
]
,"IntegerBase":"Int32"
},{
"Name":"MAP_VALUETYPE"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EVENTMAP_ENTRY_VALUETYPE_ULONG","Value":0}
,{"Name":"EVENTMAP_ENTRY_VALUETYPE_STRING","Value":1}
]
,"IntegerBase":"Int32"
},{
"Name":"EVENT_MAP_INFO"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"NameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Flag","Type":{"Kind":"ApiRef","Name":"MAP_FLAGS","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"EntryCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"MapEntryArray","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"ApiRef","Name":"EVENT_MAP_ENTRY","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"MapEntryValueType","Type":{"Kind":"ApiRef","Name":"MAP_VALUETYPE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"FormatStringOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
}]
},{
"Name":"_TDH_IN_TYPE"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"TDH_INTYPE_NULL","Value":0}
,{"Name":"TDH_INTYPE_UNICODESTRING","Value":1}
,{"Name":"TDH_INTYPE_ANSISTRING","Value":2}
,{"Name":"TDH_INTYPE_INT8","Value":3}
,{"Name":"TDH_INTYPE_UINT8","Value":4}
,{"Name":"TDH_INTYPE_INT16","Value":5}
,{"Name":"TDH_INTYPE_UINT16","Value":6}
,{"Name":"TDH_INTYPE_INT32","Value":7}
,{"Name":"TDH_INTYPE_UINT32","Value":8}
,{"Name":"TDH_INTYPE_INT64","Value":9}
,{"Name":"TDH_INTYPE_UINT64","Value":10}
,{"Name":"TDH_INTYPE_FLOAT","Value":11}
,{"Name":"TDH_INTYPE_DOUBLE","Value":12}
,{"Name":"TDH_INTYPE_BOOLEAN","Value":13}
,{"Name":"TDH_INTYPE_BINARY","Value":14}
,{"Name":"TDH_INTYPE_GUID","Value":15}
,{"Name":"TDH_INTYPE_POINTER","Value":16}
,{"Name":"TDH_INTYPE_FILETIME","Value":17}
,{"Name":"TDH_INTYPE_SYSTEMTIME","Value":18}
,{"Name":"TDH_INTYPE_SID","Value":19}
,{"Name":"TDH_INTYPE_HEXINT32","Value":20}
,{"Name":"TDH_INTYPE_HEXINT64","Value":21}
,{"Name":"TDH_INTYPE_MANIFEST_COUNTEDSTRING","Value":22}
,{"Name":"TDH_INTYPE_MANIFEST_COUNTEDANSISTRING","Value":23}
,{"Name":"TDH_INTYPE_RESERVED24","Value":24}
,{"Name":"TDH_INTYPE_MANIFEST_COUNTEDBINARY","Value":25}
,{"Name":"TDH_INTYPE_COUNTEDSTRING","Value":300}
,{"Name":"TDH_INTYPE_COUNTEDANSISTRING","Value":301}
,{"Name":"TDH_INTYPE_REVERSEDCOUNTEDSTRING","Value":302}
,{"Name":"TDH_INTYPE_REVERSEDCOUNTEDANSISTRING","Value":303}
,{"Name":"TDH_INTYPE_NONNULLTERMINATEDSTRING","Value":304}
,{"Name":"TDH_INTYPE_NONNULLTERMINATEDANSISTRING","Value":305}
,{"Name":"TDH_INTYPE_UNICODECHAR","Value":306}
,{"Name":"TDH_INTYPE_ANSICHAR","Value":307}
,{"Name":"TDH_INTYPE_SIZET","Value":308}
,{"Name":"TDH_INTYPE_HEXDUMP","Value":309}
,{"Name":"TDH_INTYPE_WBEMSID","Value":310}
]
,"IntegerBase":"Int32"
},{
"Name":"_TDH_OUT_TYPE"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"TDH_OUTTYPE_NULL","Value":0}
,{"Name":"TDH_OUTTYPE_STRING","Value":1}
,{"Name":"TDH_OUTTYPE_DATETIME","Value":2}
,{"Name":"TDH_OUTTYPE_BYTE","Value":3}
,{"Name":"TDH_OUTTYPE_UNSIGNEDBYTE","Value":4}
,{"Name":"TDH_OUTTYPE_SHORT","Value":5}
,{"Name":"TDH_OUTTYPE_UNSIGNEDSHORT","Value":6}
,{"Name":"TDH_OUTTYPE_INT","Value":7}
,{"Name":"TDH_OUTTYPE_UNSIGNEDINT","Value":8}
,{"Name":"TDH_OUTTYPE_LONG","Value":9}
,{"Name":"TDH_OUTTYPE_UNSIGNEDLONG","Value":10}
,{"Name":"TDH_OUTTYPE_FLOAT","Value":11}
,{"Name":"TDH_OUTTYPE_DOUBLE","Value":12}
,{"Name":"TDH_OUTTYPE_BOOLEAN","Value":13}
,{"Name":"TDH_OUTTYPE_GUID","Value":14}
,{"Name":"TDH_OUTTYPE_HEXBINARY","Value":15}
,{"Name":"TDH_OUTTYPE_HEXINT8","Value":16}
,{"Name":"TDH_OUTTYPE_HEXINT16","Value":17}
,{"Name":"TDH_OUTTYPE_HEXINT32","Value":18}
,{"Name":"TDH_OUTTYPE_HEXINT64","Value":19}
,{"Name":"TDH_OUTTYPE_PID","Value":20}
,{"Name":"TDH_OUTTYPE_TID","Value":21}
,{"Name":"TDH_OUTTYPE_PORT","Value":22}
,{"Name":"TDH_OUTTYPE_IPV4","Value":23}
,{"Name":"TDH_OUTTYPE_IPV6","Value":24}
,{"Name":"TDH_OUTTYPE_SOCKETADDRESS","Value":25}
,{"Name":"TDH_OUTTYPE_CIMDATETIME","Value":26}
,{"Name":"TDH_OUTTYPE_ETWTIME","Value":27}
,{"Name":"TDH_OUTTYPE_XML","Value":28}
,{"Name":"TDH_OUTTYPE_ERRORCODE","Value":29}
,{"Name":"TDH_OUTTYPE_WIN32ERROR","Value":30}
,{"Name":"TDH_OUTTYPE_NTSTATUS","Value":31}
,{"Name":"TDH_OUTTYPE_HRESULT","Value":32}
,{"Name":"TDH_OUTTYPE_CULTURE_INSENSITIVE_DATETIME","Value":33}
,{"Name":"TDH_OUTTYPE_JSON","Value":34}
,{"Name":"TDH_OUTTYPE_UTF8","Value":35}
,{"Name":"TDH_OUTTYPE_PKCS7_WITH_TYPE_INFO","Value":36}
,{"Name":"TDH_OUTTYPE_CODE_POINTER","Value":37}
,{"Name":"TDH_OUTTYPE_DATETIME_UTC","Value":38}
,{"Name":"TDH_OUTTYPE_REDUCEDSTRING","Value":300}
,{"Name":"TDH_OUTTYPE_NOPRINT","Value":301}
]
,"IntegerBase":"Int32"
},{
"Name":"PROPERTY_FLAGS"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"PropertyStruct","Value":1}
,{"Name":"PropertyParamLength","Value":2}
,{"Name":"PropertyParamCount","Value":4}
,{"Name":"PropertyWBEMXmlFragment","Value":8}
,{"Name":"PropertyParamFixedLength","Value":16}
,{"Name":"PropertyParamFixedCount","Value":32}
,{"Name":"PropertyHasTags","Value":64}
,{"Name":"PropertyHasCustomSchema","Value":128}
]
,"IntegerBase":"Int32"
},{
"Name":"EVENT_PROPERTY_INFO"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Flags","Type":{"Kind":"ApiRef","Name":"PROPERTY_FLAGS","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"NameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"Anonymous3","Type":{"Kind":"ApiRef","Name":"_Anonymous3_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"Anonymous4","Type":{"Kind":"ApiRef","Name":"_Anonymous4_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous4_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Reserved","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous4_e__Union"]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous_e__Struct"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"_bitfield","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
}]
},{
"Name":"_Anonymous3_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"length","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"lengthPropertyIndex","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"_Anonymous2_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"count","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"countPropertyIndex","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"_Anonymous1_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"nonStructType","Type":{"Kind":"ApiRef","Name":"_nonStructType","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous1_e__Union"]},"Attrs":[]}
,{"Name":"structType","Type":{"Kind":"ApiRef","Name":"_structType","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous1_e__Union"]},"Attrs":[]}
,{"Name":"customSchemaType","Type":{"Kind":"ApiRef","Name":"_customSchemaType","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous1_e__Union"]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_customSchemaType"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"InType","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"OutType","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"CustomSchemaOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"_structType"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"StructStartIndex","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"NumOfStructMembers","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"padding","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"_nonStructType"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"InType","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"OutType","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"MapNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
}]
}]
},{
"Name":"DECODING_SOURCE"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"DecodingSourceXMLFile","Value":0}
,{"Name":"DecodingSourceWbem","Value":1}
,{"Name":"DecodingSourceWPP","Value":2}
,{"Name":"DecodingSourceTlg","Value":3}
,{"Name":"DecodingSourceMax","Value":4}
]
,"IntegerBase":"Int32"
},{
"Name":"TEMPLATE_FLAGS"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"TEMPLATE_EVENT_DATA","Value":1}
,{"Name":"TEMPLATE_USER_DATA","Value":2}
,{"Name":"TEMPLATE_CONTROL_GUID","Value":4}
]
,"IntegerBase":"Int32"
},{
"Name":"TRACE_EVENT_INFO"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"ProviderGuid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]}
,{"Name":"EventGuid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]}
,{"Name":"EventDescriptor","Type":{"Kind":"ApiRef","Name":"EVENT_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"DecodingSource","Type":{"Kind":"ApiRef","Name":"DECODING_SOURCE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"ProviderNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"LevelNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"ChannelNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"KeywordsNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"TaskNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"OpcodeNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"EventMessageOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"ProviderMessageOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"BinaryXMLOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"BinaryXMLSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Anonymous1","Type":{"Kind":"ApiRef","Name":"_Anonymous1_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"Anonymous2","Type":{"Kind":"ApiRef","Name":"_Anonymous2_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"PropertyCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"TopLevelPropertyCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Anonymous3","Type":{"Kind":"ApiRef","Name":"_Anonymous3_e__Union","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"EventPropertyInfoArray","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"ApiRef","Name":"EVENT_PROPERTY_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous3_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Flags","Type":{"Kind":"ApiRef","Name":"TEMPLATE_FLAGS","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Struct","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":["_Anonymous3_e__Union"]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous_e__Struct"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"_bitfield","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
}]
},{
"Name":"_Anonymous2_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"EventAttributesOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"RelatedActivityIDNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"_Anonymous1_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"EventNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"ActivityIDNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
}]
},{
"Name":"PROPERTY_DATA_DESCRIPTOR"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"PropertyName","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
,{"Name":"ArrayIndex","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Reserved","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"PAYLOAD_OPERATOR"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"PAYLOADFIELD_EQ","Value":0}
,{"Name":"PAYLOADFIELD_NE","Value":1}
,{"Name":"PAYLOADFIELD_LE","Value":2}
,{"Name":"PAYLOADFIELD_GT","Value":3}
,{"Name":"PAYLOADFIELD_LT","Value":4}
,{"Name":"PAYLOADFIELD_GE","Value":5}
,{"Name":"PAYLOADFIELD_BETWEEN","Value":6}
,{"Name":"PAYLOADFIELD_NOTBETWEEN","Value":7}
,{"Name":"PAYLOADFIELD_MODULO","Value":8}
,{"Name":"PAYLOADFIELD_CONTAINS","Value":20}
,{"Name":"PAYLOADFIELD_DOESNTCONTAIN","Value":21}
,{"Name":"PAYLOADFIELD_IS","Value":30}
,{"Name":"PAYLOADFIELD_ISNOT","Value":31}
,{"Name":"PAYLOADFIELD_INVALID","Value":32}
]
,"IntegerBase":"Int32"
},{
"Name":"PAYLOAD_FILTER_PREDICATE"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"FieldName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"CompareOp","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"Value","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"PROVIDER_FILTER_INFO"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"Id","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"Version","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"MessageOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Reserved","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"PropertyCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"EventPropertyInfoArray","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"ApiRef","Name":"EVENT_PROPERTY_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"EVENT_FIELD_TYPE"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EventKeywordInformation","Value":0}
,{"Name":"EventLevelInformation","Value":1}
,{"Name":"EventChannelInformation","Value":2}
,{"Name":"EventTaskInformation","Value":3}
,{"Name":"EventOpcodeInformation","Value":4}
,{"Name":"EventInformationMax","Value":5}
]
,"IntegerBase":"Int32"
},{
"Name":"PROVIDER_FIELD_INFO"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"NameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"DescriptionOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Value","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"PROVIDER_FIELD_INFOARRAY"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"NumberOfElements","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"FieldType","Type":{"Kind":"ApiRef","Name":"EVENT_FIELD_TYPE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"FieldInfoArray","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"ApiRef","Name":"PROVIDER_FIELD_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"TRACE_PROVIDER_INFO"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"ProviderGuid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]}
,{"Name":"SchemaSource","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"ProviderNameOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"PROVIDER_ENUMERATION_INFO"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"NumberOfProviders","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Reserved","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"TraceProviderInfoArray","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"ApiRef","Name":"TRACE_PROVIDER_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"PROVIDER_EVENT_INFO"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"NumberOfEvents","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Reserved","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"EventDescriptorsArray","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"ApiRef","Name":"EVENT_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"TDH_CONTEXT_TYPE"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"TDH_CONTEXT_WPP_TMFFILE","Value":0}
,{"Name":"TDH_CONTEXT_WPP_TMFSEARCHPATH","Value":1}
,{"Name":"TDH_CONTEXT_WPP_GMT","Value":2}
,{"Name":"TDH_CONTEXT_POINTERSIZE","Value":3}
,{"Name":"TDH_CONTEXT_PDB_PATH","Value":4}
,{"Name":"TDH_CONTEXT_MAXIMUM","Value":5}
]
,"IntegerBase":"Int32"
},{
"Name":"TDH_CONTEXT"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"ParameterValue","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
,{"Name":"ParameterType","Type":{"Kind":"ApiRef","Name":"TDH_CONTEXT_TYPE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":[]}
,{"Name":"ParameterSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"CTraceRelogger"
,"Architectures":[]
,"Platform":null
,"Kind":"ComClassID"
,"Guid":"7b40792d-05ff-44c4-9058-f440c71f17d4"
},{
"Name":"ITraceEvent"
,"Architectures":[]
,"Platform":"windows6.1"
,"Kind":"Com"
,"Guid":"8cc97f40-9028-4ff3-9b62-7d1f79ca7bcb"
,"Attrs":[]
,"Interface":{"Kind":"ApiRef","Name":"IUnknown","TargetKind":"Com","Api":"System.Com","Parents":[]}
,"Methods":[{
"Name":"Clone"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"NewEvent","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"ITraceEvent","TargetKind":"Com","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out","RetVal"]}
]
},{
"Name":"GetUserContext"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"UserContext","Type":{"Kind":"PointerTo","Child":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}}},"Attrs":["Out","RetVal"]}
]
},{
"Name":"GetEventRecord"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"EventRecord","Type":{"Kind":"PointerTo","Child":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_RECORD","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}}},"Attrs":["Out","RetVal"]}
]
},{
"Name":"SetPayload"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"Payload","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"Native","Name":"Byte"}},"Attrs":["In"]}
,{"Name":"PayloadSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
]
},{
"Name":"SetEventDescriptor"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"EventDescriptor","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Const"]}
]
},{
"Name":"SetProcessId"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"ProcessId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
]
},{
"Name":"SetProcessorIndex"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"ProcessorIndex","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
]
},{
"Name":"SetThreadId"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"ThreadId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
]
},{
"Name":"SetThreadTimes"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"KernelTime","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"UserTime","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
]
},{
"Name":"SetActivityId"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"ActivityId","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]}
]
},{
"Name":"SetTimeStamp"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"TimeStamp","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"LARGE_INTEGER","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":["In"]}
]
},{
"Name":"SetProviderId"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"ProviderId","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]}
]
}]
},{
"Name":"ITraceEventCallback"
,"Architectures":[]
,"Platform":"windows6.1"
,"Kind":"Com"
,"Guid":"3ed25501-593f-43e9-8f38-3ab46f5a4a52"
,"Attrs":[]
,"Interface":{"Kind":"ApiRef","Name":"IUnknown","TargetKind":"Com","Api":"System.Com","Parents":[]}
,"Methods":[{
"Name":"OnBeginProcessTrace"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"HeaderEvent","Type":{"Kind":"ApiRef","Name":"ITraceEvent","TargetKind":"Com","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"Relogger","Type":{"Kind":"ApiRef","Name":"ITraceRelogger","TargetKind":"Com","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
]
},{
"Name":"OnFinalizeProcessTrace"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"Relogger","Type":{"Kind":"ApiRef","Name":"ITraceRelogger","TargetKind":"Com","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
]
},{
"Name":"OnEvent"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"Event","Type":{"Kind":"ApiRef","Name":"ITraceEvent","TargetKind":"Com","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"Relogger","Type":{"Kind":"ApiRef","Name":"ITraceRelogger","TargetKind":"Com","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
]
}]
},{
"Name":"ITraceRelogger"
,"Architectures":[]
,"Platform":"windows6.1"
,"Kind":"Com"
,"Guid":"f754ad43-3bcc-4286-8009-9c5da214e84e"
,"Attrs":[]
,"Interface":{"Kind":"ApiRef","Name":"IUnknown","TargetKind":"Com","Api":"System.Com","Parents":[]}
,"Methods":[{
"Name":"AddLogfileTraceStream"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"LogfileName","Type":{"Kind":"ApiRef","Name":"BSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]}
,{"Name":"UserContext","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In"]}
,{"Name":"TraceHandle","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"RELOGSTREAM_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out","RetVal"]}
]
},{
"Name":"AddRealtimeTraceStream"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"LoggerName","Type":{"Kind":"ApiRef","Name":"BSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]}
,{"Name":"UserContext","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In"]}
,{"Name":"TraceHandle","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"RELOGSTREAM_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out","RetVal"]}
]
},{
"Name":"RegisterCallback"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"Callback","Type":{"Kind":"ApiRef","Name":"ITraceEventCallback","TargetKind":"Com","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
]
},{
"Name":"Inject"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"Event","Type":{"Kind":"ApiRef","Name":"ITraceEvent","TargetKind":"Com","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
]
},{
"Name":"CreateEventInstance"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"RELOGSTREAM_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"Event","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"ITraceEvent","TargetKind":"Com","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out","RetVal"]}
]
},{
"Name":"ProcessTrace"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
]
},{
"Name":"SetOutputFilename"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"LogfileName","Type":{"Kind":"ApiRef","Name":"BSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]}
]
},{
"Name":"SetCompressionMode"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"CompressionMode","Type":{"Kind":"ApiRef","Name":"BOOLEAN","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]}
]
},{
"Name":"Cancel"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
]
}]
}],
"Functions":[{
"Name":"StartTraceW"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"TraceHandle","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out"]}
,{"Name":"InstanceName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
,{"Name":"Properties","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]}
]
},{
"Name":"StartTraceA"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"TraceHandle","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out"]}
,{"Name":"InstanceName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
,{"Name":"Properties","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]}
]
},{
"Name":"StopTraceW"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"InstanceName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"Properties","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]}
]
},{
"Name":"StopTraceA"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"InstanceName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"Properties","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]}
]
},{
"Name":"QueryTraceW"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"InstanceName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"Properties","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]}
]
},{
"Name":"QueryTraceA"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"InstanceName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"Properties","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]}
]
},{
"Name":"UpdateTraceW"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"InstanceName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"Properties","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]}
]
},{
"Name":"UpdateTraceA"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"InstanceName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"Properties","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]}
]
},{
"Name":"FlushTraceW"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.1.2600"
,"Attrs":[]
,"Params":[
{"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"InstanceName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"Properties","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]}
]
},{
"Name":"FlushTraceA"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.1.2600"
,"Attrs":[]
,"Params":[
{"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"InstanceName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"Properties","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]}
]
},{
"Name":"ControlTraceW"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"InstanceName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"Properties","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]}
,{"Name":"ControlCode","Type":{"Kind":"ApiRef","Name":"EVENT_TRACE_CONTROL","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
]
},{
"Name":"ControlTraceA"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"InstanceName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"Properties","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]}
,{"Name":"ControlCode","Type":{"Kind":"ApiRef","Name":"EVENT_TRACE_CONTROL","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
]
},{
"Name":"QueryAllTracesW"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"PropertyArray","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}}},"Attrs":["Out"]}
,{"Name":"PropertyArrayCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"LoggerCount","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
},{
"Name":"QueryAllTracesA"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"PropertyArray","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}}},"Attrs":["Out"]}
,{"Name":"PropertyArrayCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"LoggerCount","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
},{
"Name":"EnableTrace"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"Enable","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"EnableFlag","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"EnableLevel","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"ControlGuid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]}
,{"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
]
},{
"Name":"EnableTraceEx"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"ProviderId","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]}
,{"Name":"SourceId","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Optional","Const"]}
,{"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"IsEnabled","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"Level","Type":{"Kind":"Native","Name":"Byte"},"Attrs":["In"]}
,{"Name":"MatchAnyKeyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
,{"Name":"MatchAllKeyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
,{"Name":"EnableProperty","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"EnableFilterDesc","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_FILTER_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]}
]
},{
"Name":"EnableTraceEx2"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.1"
,"Attrs":[]
,"Params":[
{"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"ProviderId","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]}
,{"Name":"ControlCode","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"Level","Type":{"Kind":"Native","Name":"Byte"},"Attrs":["In"]}
,{"Name":"MatchAnyKeyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
,{"Name":"MatchAllKeyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
,{"Name":"Timeout","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"EnableParameters","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"ENABLE_TRACE_PARAMETERS","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]}
]
},{
"Name":"EnumerateTraceGuidsEx"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"TraceQueryInfoClass","Type":{"Kind":"ApiRef","Name":"TRACE_QUERY_INFO_CLASS","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"InBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In",{"Kind":"MemorySize","BytesParamIndex":2},"Optional"]}
,{"Name":"InBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"OutBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":4},"Optional"]}
,{"Name":"OutBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"ReturnLength","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
},{
"Name":"TraceSetInformation"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.1"
,"Attrs":[]
,"Params":[
{"Name":"SessionHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"InformationClass","Type":{"Kind":"ApiRef","Name":"TRACE_QUERY_INFO_CLASS","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"TraceInformation","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In",{"Kind":"MemorySize","BytesParamIndex":3}]}
,{"Name":"InformationLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
]
},{
"Name":"TraceQueryInformation"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows8.0"
,"Attrs":[]
,"Params":[
{"Name":"SessionHandle","Type":{"Kind":"ApiRef","Name":"CONTROLTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"InformationClass","Type":{"Kind":"ApiRef","Name":"TRACE_QUERY_INFO_CLASS","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"TraceInformation","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":3}]}
,{"Name":"InformationLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"ReturnLength","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out","Optional"]}
]
},{
"Name":"CreateTraceInstanceId"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"RegHandle","Type":{"Kind":"ApiRef","Name":"HANDLE","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]}
,{"Name":"InstInfo","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_INSTANCE_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]}
]
},{
"Name":"TraceEvent"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"TraceHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
,{"Name":"EventTrace","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]}
]
},{
"Name":"TraceEventInstance"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"TraceHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
,{"Name":"EventTrace","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_INSTANCE_HEADER","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]}
,{"Name":"InstInfo","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_INSTANCE_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]}
,{"Name":"ParentInstInfo","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_INSTANCE_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]}
]
},{
"Name":"RegisterTraceGuidsW"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"RequestAddress","Type":{"Kind":"ApiRef","Name":"WMIDPREQUEST","TargetKind":"FunctionPointer","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"RequestContext","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In","Optional"]}
,{"Name":"ControlGuid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]}
,{"Name":"GuidCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"TraceGuidReg","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":3,"Child":{"Kind":"ApiRef","Name":"TRACE_GUID_REGISTRATION","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]}
,{"Name":"MofImagePath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"MofResourceName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"RegistrationHandle","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt64"}},"Attrs":["Out"]}
]
},{
"Name":"RegisterTraceGuidsA"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"RequestAddress","Type":{"Kind":"ApiRef","Name":"WMIDPREQUEST","TargetKind":"FunctionPointer","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"RequestContext","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In","Optional"]}
,{"Name":"ControlGuid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]}
,{"Name":"GuidCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"TraceGuidReg","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":3,"Child":{"Kind":"ApiRef","Name":"TRACE_GUID_REGISTRATION","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]}
,{"Name":"MofImagePath","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"MofResourceName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"RegistrationHandle","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt64"}},"Attrs":["Out"]}
]
},{
"Name":"EnumerateTraceGuids"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.1.2600"
,"Attrs":[]
,"Params":[
{"Name":"GuidPropertiesArray","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"TRACE_GUID_PROPERTIES","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}}},"Attrs":["In","Out"]}
,{"Name":"PropertyArrayCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"GuidCount","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
},{
"Name":"UnregisterTraceGuids"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"RegistrationHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
]
},{
"Name":"GetTraceLoggerHandle"
,"SetLastError":true
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt64"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"Buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In"]}
]
},{
"Name":"GetTraceEnableLevel"
,"SetLastError":true
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"Native","Name":"Byte"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"TraceHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
]
},{
"Name":"GetTraceEnableFlags"
,"SetLastError":true
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"TraceHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
]
},{
"Name":"OpenTraceW"
,"SetLastError":true
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"PROCESSTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"Logfile","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_LOGFILEW","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]}
]
},{
"Name":"ProcessTrace"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"HandleArray","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"ApiRef","Name":"PROCESSTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]}
,{"Name":"HandleCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"StartTime","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"FILETIME","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":["In","Optional"]}
,{"Name":"EndTime","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"FILETIME","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":["In","Optional"]}
]
},{
"Name":"CloseTrace"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"TraceHandle","Type":{"Kind":"ApiRef","Name":"PROCESSTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
]
},{
"Name":"QueryTraceProcessingHandle"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows10.0.16299"
,"Attrs":[]
,"Params":[
{"Name":"ProcessingHandle","Type":{"Kind":"ApiRef","Name":"PROCESSTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"InformationClass","Type":{"Kind":"ApiRef","Name":"ETW_PROCESS_HANDLE_INFO_TYPE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"InBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In","Optional"]}
,{"Name":"InBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"OutBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["Out","Optional"]}
,{"Name":"OutBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"ReturnLength","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]}
]
},{
"Name":"OpenTraceA"
,"SetLastError":true
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"PROCESSTRACE_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"Logfile","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_TRACE_LOGFILEA","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]}
]
},{
"Name":"SetTraceCallback"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"pGuid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]}
,{"Name":"EventCallback","Type":{"Kind":"ApiRef","Name":"PEVENT_CALLBACK","TargetKind":"FunctionPointer","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
]
},{
"Name":"RemoveTraceCallback"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"pGuid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]}
]
},{
"Name":"TraceMessage"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.1.2600"
,"Attrs":[]
,"Params":[
{"Name":"LoggerHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
,{"Name":"MessageFlags","Type":{"Kind":"ApiRef","Name":"TRACE_MESSAGE_FLAGS","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"MessageGuid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]}
,{"Name":"MessageNumber","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":["In"]}
]
},{
"Name":"TraceMessageVa"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"WIN32_ERROR","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.1.2600"
,"Attrs":[]
,"Params":[
{"Name":"LoggerHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
,{"Name":"MessageFlags","Type":{"Kind":"ApiRef","Name":"TRACE_MESSAGE_FLAGS","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"MessageGuid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]}
,{"Name":"MessageNumber","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":["In"]}
,{"Name":"MessageArgList","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"SByte"}},"Attrs":["In"]}
]
},{
"Name":"EventRegister"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"ProviderId","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]}
,{"Name":"EnableCallback","Type":{"Kind":"ApiRef","Name":"PENABLECALLBACK","TargetKind":"FunctionPointer","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In","Optional"]}
,{"Name":"CallbackContext","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In","Optional"]}
,{"Name":"RegHandle","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt64"}},"Attrs":["Out"]}
]
},{
"Name":"EventUnregister"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"RegHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
]
},{
"Name":"EventSetInformation"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows8.0"
,"Attrs":[]
,"Params":[
{"Name":"RegHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
,{"Name":"InformationClass","Type":{"Kind":"ApiRef","Name":"EVENT_INFO_CLASS","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"EventInformation","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In",{"Kind":"MemorySize","BytesParamIndex":3}]}
,{"Name":"InformationLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
]
},{
"Name":"EventEnabled"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOLEAN","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"RegHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
,{"Name":"EventDescriptor","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Const"]}
]
},{
"Name":"EventProviderEnabled"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOLEAN","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"RegHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
,{"Name":"Level","Type":{"Kind":"Native","Name":"Byte"},"Attrs":["In"]}
,{"Name":"Keyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
]
},{
"Name":"EventWrite"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"RegHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
,{"Name":"EventDescriptor","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Const"]}
,{"Name":"UserDataCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"UserData","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":2,"Child":{"Kind":"ApiRef","Name":"EVENT_DATA_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]}
]
},{
"Name":"EventWriteTransfer"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"RegHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
,{"Name":"EventDescriptor","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Const"]}
,{"Name":"ActivityId","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Optional","Const"]}
,{"Name":"RelatedActivityId","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Optional","Const"]}
,{"Name":"UserDataCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"UserData","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":4,"Child":{"Kind":"ApiRef","Name":"EVENT_DATA_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]}
]
},{
"Name":"EventWriteEx"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.1"
,"Attrs":[]
,"Params":[
{"Name":"RegHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
,{"Name":"EventDescriptor","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Const"]}
,{"Name":"Filter","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"ActivityId","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Optional","Const"]}
,{"Name":"RelatedActivityId","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Optional","Const"]}
,{"Name":"UserDataCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"UserData","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":6,"Child":{"Kind":"ApiRef","Name":"EVENT_DATA_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]}
]
},{
"Name":"EventWriteString"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"RegHandle","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
,{"Name":"Level","Type":{"Kind":"Native","Name":"Byte"},"Attrs":["In"]}
,{"Name":"Keyword","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
,{"Name":"String","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
]
},{
"Name":"EventActivityIdControl"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"ControlCode","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"ActivityId","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Out"]}
]
},{
"Name":"EventAccessControl"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"Guid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In"]}
,{"Name":"Operation","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"Sid","Type":{"Kind":"ApiRef","Name":"PSID","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]}
,{"Name":"Rights","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"AllowOrDeny","Type":{"Kind":"ApiRef","Name":"BOOLEAN","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]}
]
},{
"Name":"EventAccessQuery"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"Guid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In"]}
,{"Name":"Buffer","Type":{"Kind":"ApiRef","Name":"PSECURITY_DESCRIPTOR","TargetKind":"Default","Api":"Security","Parents":[]},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":2},"Optional"]}
,{"Name":"BufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]}
]
},{
"Name":"EventAccessRemove"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"Guid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In"]}
]
},{
"Name":"TdhCreatePayloadFilter"
,"SetLastError":false
,"DllImport":"tdh.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows8.1"
,"Attrs":[]
,"Params":[
{"Name":"ProviderGuid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In","Const"]}
,{"Name":"EventDescriptor","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Const"]}
,{"Name":"EventMatchANY","Type":{"Kind":"ApiRef","Name":"BOOLEAN","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]}
,{"Name":"PayloadPredicateCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"PayloadPredicates","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":3,"Child":{"Kind":"ApiRef","Name":"PAYLOAD_FILTER_PREDICATE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]}
,{"Name":"PayloadFilter","Type":{"Kind":"PointerTo","Child":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}}},"Attrs":["Out","Optional"]}
]
},{
"Name":"TdhDeletePayloadFilter"
,"SetLastError":false
,"DllImport":"tdh.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows8.1"
,"Attrs":[]
,"Params":[
{"Name":"PayloadFilter","Type":{"Kind":"PointerTo","Child":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}}},"Attrs":["In","Out"]}
]
},{
"Name":"TdhAggregatePayloadFilters"
,"SetLastError":false
,"DllImport":"tdh.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows8.1"
,"Attrs":[]
,"Params":[
{"Name":"PayloadFilterCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"PayloadFilterPtrs","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":0,"Child":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}}},"Attrs":["In"]}
,{"Name":"EventMatchALLFlags","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":0,"Child":{"Kind":"ApiRef","Name":"BOOLEAN","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":["In","Optional"]}
,{"Name":"EventFilterDescriptor","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_FILTER_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out"]}
]
},{
"Name":"TdhCleanupPayloadEventFilterDescriptor"
,"SetLastError":false
,"DllImport":"tdh.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows8.1"
,"Attrs":[]
,"Params":[
{"Name":"EventFilterDescriptor","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_FILTER_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]}
]
},{
"Name":"TdhGetEventInformation"
,"SetLastError":false
,"DllImport":"TDH.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"Event","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_RECORD","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]}
,{"Name":"TdhContextCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"TdhContext","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"ApiRef","Name":"TDH_CONTEXT","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]}
,{"Name":"Buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"TRACE_EVENT_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":4},"Optional"]}
,{"Name":"BufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]}
]
},{
"Name":"TdhGetEventMapInformation"
,"SetLastError":false
,"DllImport":"TDH.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"pEvent","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_RECORD","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]}
,{"Name":"pMapName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]}
,{"Name":"pBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_MAP_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":3},"Optional"]}
,{"Name":"pBufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]}
]
},{
"Name":"TdhGetPropertySize"
,"SetLastError":false
,"DllImport":"TDH.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"pEvent","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_RECORD","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]}
,{"Name":"TdhContextCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"pTdhContext","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"ApiRef","Name":"TDH_CONTEXT","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]}
,{"Name":"PropertyDataCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"pPropertyData","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":3,"Child":{"Kind":"ApiRef","Name":"PROPERTY_DATA_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]}
,{"Name":"pPropertySize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
},{
"Name":"TdhGetProperty"
,"SetLastError":false
,"DllImport":"TDH.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"pEvent","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_RECORD","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]}
,{"Name":"TdhContextCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"pTdhContext","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"ApiRef","Name":"TDH_CONTEXT","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]}
,{"Name":"PropertyDataCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"pPropertyData","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":3,"Child":{"Kind":"ApiRef","Name":"PROPERTY_DATA_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]}
,{"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"pBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Byte"}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":5}]}
]
},{
"Name":"TdhEnumerateProviders"
,"SetLastError":false
,"DllImport":"TDH.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"pBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PROVIDER_ENUMERATION_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":1},"Optional"]}
,{"Name":"pBufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]}
]
},{
"Name":"TdhEnumerateProvidersForDecodingSource"
,"SetLastError":false
,"DllImport":"tdh.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"filter","Type":{"Kind":"ApiRef","Name":"DECODING_SOURCE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PROVIDER_ENUMERATION_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":2},"Optional"]}
,{"Name":"bufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"bufferRequired","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
},{
"Name":"TdhQueryProviderFieldInformation"
,"SetLastError":false
,"DllImport":"TDH.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"pGuid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In"]}
,{"Name":"EventFieldValue","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
,{"Name":"EventFieldType","Type":{"Kind":"ApiRef","Name":"EVENT_FIELD_TYPE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"pBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PROVIDER_FIELD_INFOARRAY","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":4},"Optional"]}
,{"Name":"pBufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]}
]
},{
"Name":"TdhEnumerateProviderFieldInformation"
,"SetLastError":false
,"DllImport":"TDH.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"pGuid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In"]}
,{"Name":"EventFieldType","Type":{"Kind":"ApiRef","Name":"EVENT_FIELD_TYPE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"pBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PROVIDER_FIELD_INFOARRAY","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":3},"Optional"]}
,{"Name":"pBufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]}
]
},{
"Name":"TdhEnumerateProviderFilters"
,"SetLastError":false
,"DllImport":"tdh.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.1"
,"Attrs":[]
,"Params":[
{"Name":"Guid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In"]}
,{"Name":"TdhContextCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"TdhContext","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"ApiRef","Name":"TDH_CONTEXT","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]}
,{"Name":"FilterCount","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
,{"Name":"Buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PROVIDER_FILTER_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":5},"Optional"]}
,{"Name":"BufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]}
]
},{
"Name":"TdhLoadManifest"
,"SetLastError":false
,"DllImport":"TDH.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.1"
,"Attrs":[]
,"Params":[
{"Name":"Manifest","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]}
]
},{
"Name":"TdhLoadManifestFromMemory"
,"SetLastError":false
,"DllImport":"TDH.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"pData","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In",{"Kind":"MemorySize","BytesParamIndex":1},"Const"]}
,{"Name":"cbData","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
]
},{
"Name":"TdhUnloadManifest"
,"SetLastError":false
,"DllImport":"TDH.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.1"
,"Attrs":[]
,"Params":[
{"Name":"Manifest","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]}
]
},{
"Name":"TdhUnloadManifestFromMemory"
,"SetLastError":false
,"DllImport":"TDH.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"pData","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In",{"Kind":"MemorySize","BytesParamIndex":1},"Const"]}
,{"Name":"cbData","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
]
},{
"Name":"TdhFormatProperty"
,"SetLastError":false
,"DllImport":"TDH.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.1"
,"Attrs":[]
,"Params":[
{"Name":"EventInfo","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"TRACE_EVENT_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]}
,{"Name":"MapInfo","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_MAP_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Optional"]}
,{"Name":"PointerSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"PropertyInType","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":["In"]}
,{"Name":"PropertyOutType","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":["In"]}
,{"Name":"PropertyLength","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":["In"]}
,{"Name":"UserDataLength","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":["In"]}
,{"Name":"UserData","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Byte"}},"Attrs":["In",{"Kind":"MemorySize","BytesParamIndex":6}]}
,{"Name":"BufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]}
,{"Name":"Buffer","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["Out","NotNullTerminated",{"Kind":"MemorySize","BytesParamIndex":8},"Optional"]}
,{"Name":"UserDataConsumed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt16"}},"Attrs":["Out"]}
]
},{
"Name":"TdhOpenDecodingHandle"
,"SetLastError":false
,"DllImport":"tdh.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows8.0"
,"Attrs":[]
,"Params":[
{"Name":"Handle","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"TDH_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out"]}
]
},{
"Name":"TdhSetDecodingParameter"
,"SetLastError":false
,"DllImport":"tdh.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows8.0"
,"Attrs":[]
,"Params":[
{"Name":"Handle","Type":{"Kind":"ApiRef","Name":"TDH_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"TdhContext","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"TDH_CONTEXT","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]}
]
},{
"Name":"TdhGetDecodingParameter"
,"SetLastError":false
,"DllImport":"tdh.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows8.0"
,"Attrs":[]
,"Params":[
{"Name":"Handle","Type":{"Kind":"ApiRef","Name":"TDH_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"TdhContext","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"TDH_CONTEXT","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In","Out"]}
]
},{
"Name":"TdhGetWppProperty"
,"SetLastError":false
,"DllImport":"tdh.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows8.0"
,"Attrs":[]
,"Params":[
{"Name":"Handle","Type":{"Kind":"ApiRef","Name":"TDH_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"EventRecord","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_RECORD","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]}
,{"Name":"PropertyName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]}
,{"Name":"BufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]}
,{"Name":"Buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Byte"}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":3}]}
]
},{
"Name":"TdhGetWppMessage"
,"SetLastError":false
,"DllImport":"tdh.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows8.0"
,"Attrs":[]
,"Params":[
{"Name":"Handle","Type":{"Kind":"ApiRef","Name":"TDH_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
,{"Name":"EventRecord","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_RECORD","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]}
,{"Name":"BufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]}
,{"Name":"Buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Byte"}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":2}]}
]
},{
"Name":"TdhCloseDecodingHandle"
,"SetLastError":false
,"DllImport":"tdh.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows8.0"
,"Attrs":[]
,"Params":[
{"Name":"Handle","Type":{"Kind":"ApiRef","Name":"TDH_HANDLE","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]},"Attrs":["In"]}
]
},{
"Name":"TdhLoadManifestFromBinary"
,"SetLastError":false
,"DllImport":"tdh.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows8.0"
,"Attrs":[]
,"Params":[
{"Name":"BinaryPath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]}
]
},{
"Name":"TdhEnumerateManifestProviderEvents"
,"SetLastError":false
,"DllImport":"TDH.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows8.1"
,"Attrs":[]
,"Params":[
{"Name":"ProviderGuid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In"]}
,{"Name":"Buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PROVIDER_EVENT_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":2},"Optional"]}
,{"Name":"BufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]}
]
},{
"Name":"TdhGetManifestEventInformation"
,"SetLastError":false
,"DllImport":"TDH.dll"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows8.1"
,"Attrs":[]
,"Params":[
{"Name":"ProviderGuid","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":["In"]}
,{"Name":"EventDescriptor","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVENT_DESCRIPTOR","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["In"]}
,{"Name":"Buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"TRACE_EVENT_INFO","TargetKind":"Default","Api":"System.Diagnostics.Etw","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":3},"Optional"]}
,{"Name":"BufferSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]}
]
},{
"Name":"CveEventWrite"
,"SetLastError":false
,"DllImport":"ADVAPI32.dll"
,"ReturnType":{"Kind":"Native","Name":"Int32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows10.0.10240"
,"Attrs":[]
,"Params":[
{"Name":"CveId","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
,{"Name":"AdditionalDetails","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
]
}],
"UnicodeAliases":[
"PEVENT_TRACE_BUFFER_CALLBACK"
,"EVENT_TRACE_LOGFILE"
,"StartTrace"
,"StopTrace"
,"QueryTrace"
,"UpdateTrace"
,"FlushTrace"
,"ControlTrace"
,"QueryAllTraces"
,"RegisterTraceGuids"
,"OpenTrace"
]
}
Reference in New Issue View Git Blame Copy Permalink