#ifndef _NTPFAPI_H
// begin_private

// rev
typedef struct _PF_RETRIEVE_TRACE
{
    ULONG Version; // PF_RETRIEVE_TRACE_VERSION
    ULONG Magic; // PF_RETRIEVE_TRACE_MAGIC
    ULONG Size; // Total buffer size, including the variable payload that follows this header.
    ULONG Spare0; // Opaque trace state copied from the completed trace.
    UCHAR OpaqueHeader[0x40]; // Opaque fixed fields copied from the completed trace.
    ULONG PageEntriesOffset; // Offset from the start of this structure to PF_RETRIEVE_TRACE_PAGE_ENTRY[PageEntriesCount].
    ULONG PageEntriesCount; // Count of 16-byte PF_RETRIEVE_TRACE_PAGE_ENTRY records.
    ULONG TraceLimitsMaxNumPages;
    ULONG TraceLimitsMaxNumSections;
    ULONG SectionEntriesOffset; // Offset from the start of this structure to PF_RETRIEVE_TRACE_SECTION_ENTRY[SectionEntriesCount].
    ULONG SectionEntriesCount; // Count of 24-byte PF_RETRIEVE_TRACE_SECTION_ENTRY records.
    UCHAR OpaqueTail[0x30]; // Opaque fixed fields copied from the completed trace.
} PF_RETRIEVE_TRACE, *PPF_RETRIEVE_TRACE;

// end_private
#endif
View code on GitHub