| Min version | 8 Pre RTM | ||
|---|---|---|---|
| Max version | 10 TH2 | ||
| Architecture | x86 | x64 | |
| x86 offset offset:bitpos | Field Name | x64 offset offset:bitpos | |
| 0x0000 | struct _EVENT_HEADER EventHeader | 0x0000 | |
| 0x0050 | struct _ETW_BUFFER_CONTEXT BufferContext | 0x0050 | |
| 0x0054 | uint16_t ExtendedDataCount | 0x0054 | |
| 0x0056 | uint16_t UserDataLength | 0x0056 | |
| 0x0058 | struct _EVENT_HEADER_EXTENDED_DATA_ITEM * ExtendedData | 0x0058 | |
| 0x005C | void * UserData | 0x0060 | |
| 0x0060 | void * UserContext | 0x0068 | |