#ifndef _NTWMI_H

// rev
typedef struct _ETW_REALTIME_CONNECT_INFORMATION
{
    ULONG LoggerId;
    ULONG BufferSize;
    PVOID ReservedBufferSpace;
    PVOID ReservedBufferSpaceBitMap;
    HANDLE DisconnectEvent;
    HANDLE DataAvailableEvent;
    PSINGLE_LIST_ENTRY UserBufferListHead;
    PULONG UserBufferCount;
    PULONG EventsLostCount;
    PULONG BuffersLostCount;
    HANDLE ConnectionHandle;
    ULONG Reserved[4];
} ETW_REALTIME_CONNECT_INFORMATION, *PETW_REALTIME_CONNECT_INFORMATION;

#endif
View code on GitHub