ETW_HEAP_EVENT_FREE - NtDoc

#ifndef _NTWMI_H
#include <pshpack1.h>

typedef struct _ETW_HEAP_EVENT_FREE
{
    SYSTEM_TRACE_HEADER Header;     // Header
    PVOID HeapHandle;               // Handle of Heap
    PVOID Address;                  // Address to free
    ULONG Source;                   // Type ie Lookaside, Lowfrag or main path

} ETW_HEAP_EVENT_FREE, *PETW_HEAP_EVENT_FREE;

#include <poppack.h>
#endif
View code on GitHub