定数

496

Windows.Win32.System.Diagnostics.Etw

名前	型	値
ALPCGuid	GUID	{45D8CCCD-539F-4B72-A8B7-5C683142609A}
DiskIoGuid	GUID	{3D6FA8D4-FE05-11D0-9DDA-00C04FD7BA7C}
EventTraceConfigGuid	GUID	{01853A65-418F-4F36-AEFC-DC0F1D2FD235}
FileIoGuid	GUID	{90CBDC39-4A3E-11D1-84F4-0000F80464E3}
ImageLoadGuid	GUID	{2CB15D1D-5FC1-11D2-ABE1-00A0C911F518}
PageFaultGuid	GUID	{3D6FA8D3-FE05-11D0-9DDA-00C04FD7BA7C}
PerfInfoGuid	GUID	{CE1DBFB4-137E-4DA6-87B0-3F59AA102CBC}
ProcessGuid	GUID	{3D6FA8D0-FE05-11D0-9DDA-00C04FD7BA7C}
RegistryGuid	GUID	{AE53722E-C863-11D2-8659-00C04FA321A1}
SplitIoGuid	GUID	{D837CA92-12B9-44A5-AD6A-3A65B3578AA8}
TcpIpGuid	GUID	{9A280AC0-C8E0-11D1-84E2-00C04FB998A2}
ThreadGuid	GUID	{3D6FA8D1-FE05-11D0-9DDA-00C04FD7BA7C}
UdpIpGuid	GUID	{BF3A50C5-A9C9-4988-A005-2DF0B7C80F80}
WNODE_FLAG_ALL_DATA	DWORD	1
WNODE_FLAG_SINGLE_INSTANCE	DWORD	2
WNODE_FLAG_SINGLE_ITEM	DWORD	4
WNODE_FLAG_EVENT_ITEM	DWORD	8
WNODE_FLAG_FIXED_INSTANCE_SIZE	DWORD	16
WNODE_FLAG_TOO_SMALL	DWORD	32
WNODE_FLAG_INSTANCES_SAME	DWORD	64
WNODE_FLAG_STATIC_INSTANCE_NAMES	DWORD	128
WNODE_FLAG_INTERNAL	DWORD	256
WNODE_FLAG_USE_TIMESTAMP	DWORD	512
WNODE_FLAG_PERSIST_EVENT	DWORD	1024
WNODE_FLAG_EVENT_REFERENCE	DWORD	8192
WNODE_FLAG_ANSI_INSTANCENAMES	DWORD	16384
WNODE_FLAG_METHOD_ITEM	DWORD	32768
WNODE_FLAG_PDO_INSTANCE_NAMES	DWORD	65536
WNODE_FLAG_TRACED_GUID	DWORD	131072
WNODE_FLAG_LOG_WNODE	DWORD	262144
WNODE_FLAG_USE_GUID_PTR	DWORD	524288
WNODE_FLAG_USE_MOF_PTR	DWORD	1048576
WNODE_FLAG_NO_HEADER	DWORD	2097152
WNODE_FLAG_SEND_DATA_BLOCK	DWORD	4194304
WNODE_FLAG_VERSIONED_PROPERTIES	DWORD	8388608
WNODE_FLAG_SEVERITY_MASK	DWORD	4278190080
WMIREG_FLAG_EXPENSIVE	DWORD	1
WMIREG_FLAG_INSTANCE_LIST	DWORD	4
WMIREG_FLAG_INSTANCE_BASENAME	DWORD	8
WMIREG_FLAG_INSTANCE_PDO	DWORD	32
WMIREG_FLAG_REMOVE_GUID	DWORD	65536
WMIREG_FLAG_RESERVED1	DWORD	131072
WMIREG_FLAG_RESERVED2	DWORD	262144
WMIREG_FLAG_TRACED_GUID	DWORD	524288
WMIREG_FLAG_TRACE_CONTROL_GUID	DWORD	4096
WMIREG_FLAG_EVENT_ONLY_GUID	DWORD	64
WMI_GUIDTYPE_TRACECONTROL	DWORD	0
WMI_GUIDTYPE_TRACE	DWORD	1
WMI_GUIDTYPE_DATA	DWORD	2
WMI_GUIDTYPE_EVENT	DWORD	3
WMIGUID_QUERY	DWORD	1
WMIGUID_SET	DWORD	2
WMIGUID_NOTIFICATION	DWORD	4
WMIGUID_READ_DESCRIPTION	DWORD	8
WMIGUID_EXECUTE	DWORD	16
TRACELOG_CREATE_REALTIME	DWORD	32
TRACELOG_CREATE_ONDISK	DWORD	64
TRACELOG_GUID_ENABLE	DWORD	128
TRACELOG_ACCESS_KERNEL_LOGGER	DWORD	256
TRACELOG_LOG_EVENT	DWORD	512
TRACELOG_CREATE_INPROC	DWORD	512
TRACELOG_ACCESS_REALTIME	DWORD	1024
TRACELOG_REGISTER_GUIDS	DWORD	2048
TRACELOG_JOIN_GROUP	DWORD	4096
WMI_GLOBAL_LOGGER_ID	DWORD	1
MAX_PAYLOAD_PREDICATES	DWORD	8
EventTraceGuid	GUID	{68FDD900-4A3E-11D1-84F4-0000F80464E3}
SystemTraceControlGuid	GUID	{9E814AAD-3204-11D2-9A82-006008A86939}
DefaultTraceSecurityGuid	GUID	{0811C1AF-7A07-4A06-82ED-869455CDF713}
PrivateLoggerNotificationGuid	GUID	{3595AB5C-042A-4C8E-B942-2D059BFEB1B1}
SystemIoFilterProviderGuid	GUID	{FBD09363-9E22-4661-B8BF-E7A34B535B8C}
SystemObjectProviderGuid	GUID	{FEBD7460-3D1D-47EB-AF49-C9EEB1E146F2}
SystemPowerProviderGuid	GUID	{C134884A-32D5-4488-80E5-14ED7ABB8269}
SystemHypervisorProviderGuid	GUID	{BAFA072A-918A-4BED-B622-BC152097098F}
SystemLockProviderGuid	GUID	{721DDFD3-DACC-4E1E-B26A-A2CB31D4705A}
SystemConfigProviderGuid	GUID	{FEF3A8B6-318D-4B67-A96A-3B0F6B8F18FE}
SystemCpuProviderGuid	GUID	{C6C5265F-EAE8-4650-AAE4-9D48603D8510}
SystemSchedulerProviderGuid	GUID	{599A2A76-4D91-4910-9AC7-7D33F2E97A6C}
SystemProfileProviderGuid	GUID	{BFEB0324-1CEE-496F-A409-2AC2B48A6322}
SystemIoProviderGuid	GUID	{3D5C43E3-0F1C-4202-B817-174C0070DC79}
SystemMemoryProviderGuid	GUID	{82958CA9-B6CD-47F8-A3A8-03AE85A4BC24}
SystemRegistryProviderGuid	GUID	{16156BD9-FAB4-4CFA-A232-89D1099058E3}
SystemProcessProviderGuid	GUID	{151F55DC-467D-471F-83B5-5F889D46FF66}
SystemAlpcProviderGuid	GUID	{FCB9BAAF-E529-4980-92E9-CED1A6AADFDF}
SystemSyscallProviderGuid	GUID	{434286F7-6F1B-45BB-B37E-95F623046C7C}
SystemInterruptProviderGuid	GUID	{D4BBEE17-B545-4888-858B-744169015B25}
SystemTimerProviderGuid	GUID	{4F061568-E215-499F-AB2E-EDA0AE890A5B}
LastBranchRecordProviderGuid	GUID	{99134383-5248-43FC-834B-529454E75DF3}
KERNEL_LOGGER_NAMEW	unknown	NT Kernel Logger
GLOBAL_LOGGER_NAMEW	unknown	GlobalLogger
EVENT_LOGGER_NAMEW	unknown	EventLog
DIAG_LOGGER_NAMEW	unknown	DiagLog
KERNEL_LOGGER_NAMEA	unknown	NT Kernel Logger
GLOBAL_LOGGER_NAMEA	unknown	GlobalLogger
EVENT_LOGGER_NAMEA	unknown	EventLog
DIAG_LOGGER_NAMEA	unknown	DiagLog
MAX_MOF_FIELDS	DWORD	16
SYSTEM_EVENT_TYPE	DWORD	1
EVENT_TRACE_TYPE_INFO	DWORD	0
EVENT_TRACE_TYPE_START	DWORD	1
EVENT_TRACE_TYPE_END	DWORD	2
EVENT_TRACE_TYPE_STOP	DWORD	2
EVENT_TRACE_TYPE_DC_START	DWORD	3
EVENT_TRACE_TYPE_DC_END	DWORD	4
EVENT_TRACE_TYPE_EXTENSION	DWORD	5
EVENT_TRACE_TYPE_REPLY	DWORD	6
EVENT_TRACE_TYPE_DEQUEUE	DWORD	7
EVENT_TRACE_TYPE_RESUME	DWORD	7
EVENT_TRACE_TYPE_CHECKPOINT	DWORD	8
EVENT_TRACE_TYPE_SUSPEND	DWORD	8
EVENT_TRACE_TYPE_WINEVT_SEND	DWORD	9
EVENT_TRACE_TYPE_WINEVT_RECEIVE	DWORD	240
TRACE_LEVEL_NONE	DWORD	0
TRACE_LEVEL_CRITICAL	DWORD	1
TRACE_LEVEL_FATAL	DWORD	1
TRACE_LEVEL_ERROR	DWORD	2
TRACE_LEVEL_WARNING	DWORD	3
TRACE_LEVEL_INFORMATION	DWORD	4
TRACE_LEVEL_VERBOSE	DWORD	5
TRACE_LEVEL_RESERVED6	DWORD	6
TRACE_LEVEL_RESERVED7	DWORD	7
TRACE_LEVEL_RESERVED8	DWORD	8
TRACE_LEVEL_RESERVED9	DWORD	9
EVENT_TRACE_TYPE_LOAD	DWORD	10
EVENT_TRACE_TYPE_TERMINATE	DWORD	11
EVENT_TRACE_TYPE_IO_READ	DWORD	10
EVENT_TRACE_TYPE_IO_WRITE	DWORD	11
EVENT_TRACE_TYPE_IO_READ_INIT	DWORD	12
EVENT_TRACE_TYPE_IO_WRITE_INIT	DWORD	13
EVENT_TRACE_TYPE_IO_FLUSH	DWORD	14
EVENT_TRACE_TYPE_IO_FLUSH_INIT	DWORD	15
EVENT_TRACE_TYPE_IO_REDIRECTED_INIT	DWORD	16
EVENT_TRACE_TYPE_MM_TF	DWORD	10
EVENT_TRACE_TYPE_MM_DZF	DWORD	11
EVENT_TRACE_TYPE_MM_COW	DWORD	12
EVENT_TRACE_TYPE_MM_GPF	DWORD	13
EVENT_TRACE_TYPE_MM_HPF	DWORD	14
EVENT_TRACE_TYPE_MM_AV	DWORD	15
EVENT_TRACE_TYPE_SEND	DWORD	10
EVENT_TRACE_TYPE_RECEIVE	DWORD	11
EVENT_TRACE_TYPE_CONNECT	DWORD	12
EVENT_TRACE_TYPE_DISCONNECT	DWORD	13
EVENT_TRACE_TYPE_RETRANSMIT	DWORD	14
EVENT_TRACE_TYPE_ACCEPT	DWORD	15
EVENT_TRACE_TYPE_RECONNECT	DWORD	16
EVENT_TRACE_TYPE_CONNFAIL	DWORD	17
EVENT_TRACE_TYPE_COPY_TCP	DWORD	18
EVENT_TRACE_TYPE_COPY_ARP	DWORD	19
EVENT_TRACE_TYPE_ACKFULL	DWORD	20
EVENT_TRACE_TYPE_ACKPART	DWORD	21
EVENT_TRACE_TYPE_ACKDUP	DWORD	22
EVENT_TRACE_TYPE_GUIDMAP	DWORD	10
EVENT_TRACE_TYPE_CONFIG	DWORD	11
EVENT_TRACE_TYPE_SIDINFO	DWORD	12
EVENT_TRACE_TYPE_SECURITY	DWORD	13
EVENT_TRACE_TYPE_DBGID_RSDS	DWORD	64
EVENT_TRACE_TYPE_REGCREATE	DWORD	10
EVENT_TRACE_TYPE_REGOPEN	DWORD	11
EVENT_TRACE_TYPE_REGDELETE	DWORD	12
EVENT_TRACE_TYPE_REGQUERY	DWORD	13
EVENT_TRACE_TYPE_REGSETVALUE	DWORD	14
EVENT_TRACE_TYPE_REGDELETEVALUE	DWORD	15
EVENT_TRACE_TYPE_REGQUERYVALUE	DWORD	16
EVENT_TRACE_TYPE_REGENUMERATEKEY	DWORD	17
EVENT_TRACE_TYPE_REGENUMERATEVALUEKEY	DWORD	18
EVENT_TRACE_TYPE_REGQUERYMULTIPLEVALUE	DWORD	19
EVENT_TRACE_TYPE_REGSETINFORMATION	DWORD	20
EVENT_TRACE_TYPE_REGFLUSH	DWORD	21
EVENT_TRACE_TYPE_REGKCBCREATE	DWORD	22
EVENT_TRACE_TYPE_REGKCBDELETE	DWORD	23
EVENT_TRACE_TYPE_REGKCBRUNDOWNBEGIN	DWORD	24
EVENT_TRACE_TYPE_REGKCBRUNDOWNEND	DWORD	25
EVENT_TRACE_TYPE_REGVIRTUALIZE	DWORD	26
EVENT_TRACE_TYPE_REGCLOSE	DWORD	27
EVENT_TRACE_TYPE_REGSETSECURITY	DWORD	28
EVENT_TRACE_TYPE_REGQUERYSECURITY	DWORD	29
EVENT_TRACE_TYPE_REGCOMMIT	DWORD	30
EVENT_TRACE_TYPE_REGPREPARE	DWORD	31
EVENT_TRACE_TYPE_REGROLLBACK	DWORD	32
EVENT_TRACE_TYPE_REGMOUNTHIVE	DWORD	33
EVENT_TRACE_TYPE_CONFIG_CPU	DWORD	10
EVENT_TRACE_TYPE_CONFIG_PHYSICALDISK	DWORD	11
EVENT_TRACE_TYPE_CONFIG_LOGICALDISK	DWORD	12
EVENT_TRACE_TYPE_CONFIG_NIC	DWORD	13
EVENT_TRACE_TYPE_CONFIG_VIDEO	DWORD	14
EVENT_TRACE_TYPE_CONFIG_SERVICES	DWORD	15
EVENT_TRACE_TYPE_CONFIG_POWER	DWORD	16
EVENT_TRACE_TYPE_CONFIG_NETINFO	DWORD	17
EVENT_TRACE_TYPE_CONFIG_OPTICALMEDIA	DWORD	18
EVENT_TRACE_TYPE_CONFIG_PHYSICALDISK_EX	DWORD	19
EVENT_TRACE_TYPE_CONFIG_IRQ	DWORD	21
EVENT_TRACE_TYPE_CONFIG_PNP	DWORD	22
EVENT_TRACE_TYPE_CONFIG_IDECHANNEL	DWORD	23
EVENT_TRACE_TYPE_CONFIG_NUMANODE	DWORD	24
EVENT_TRACE_TYPE_CONFIG_PLATFORM	DWORD	25
EVENT_TRACE_TYPE_CONFIG_PROCESSORGROUP	DWORD	26
EVENT_TRACE_TYPE_CONFIG_PROCESSORNUMBER	DWORD	27
EVENT_TRACE_TYPE_CONFIG_DPI	DWORD	28
EVENT_TRACE_TYPE_CONFIG_CI_INFO	DWORD	29
EVENT_TRACE_TYPE_CONFIG_MACHINEID	DWORD	30
EVENT_TRACE_TYPE_CONFIG_DEFRAG	DWORD	31
EVENT_TRACE_TYPE_CONFIG_MOBILEPLATFORM	DWORD	32
EVENT_TRACE_TYPE_CONFIG_DEVICEFAMILY	DWORD	33
EVENT_TRACE_TYPE_CONFIG_FLIGHTID	DWORD	34
EVENT_TRACE_TYPE_CONFIG_PROCESSOR	DWORD	35
EVENT_TRACE_TYPE_CONFIG_VIRTUALIZATION	DWORD	36
EVENT_TRACE_TYPE_CONFIG_BOOT	DWORD	37
EVENT_TRACE_TYPE_OPTICAL_IO_READ	DWORD	55
EVENT_TRACE_TYPE_OPTICAL_IO_WRITE	DWORD	56
EVENT_TRACE_TYPE_OPTICAL_IO_FLUSH	DWORD	57
EVENT_TRACE_TYPE_OPTICAL_IO_READ_INIT	DWORD	58
EVENT_TRACE_TYPE_OPTICAL_IO_WRITE_INIT	DWORD	59
EVENT_TRACE_TYPE_OPTICAL_IO_FLUSH_INIT	DWORD	60
EVENT_TRACE_TYPE_FLT_PREOP_INIT	DWORD	96
EVENT_TRACE_TYPE_FLT_POSTOP_INIT	DWORD	97
EVENT_TRACE_TYPE_FLT_PREOP_COMPLETION	DWORD	98
EVENT_TRACE_TYPE_FLT_POSTOP_COMPLETION	DWORD	99
EVENT_TRACE_TYPE_FLT_PREOP_FAILURE	DWORD	100
EVENT_TRACE_TYPE_FLT_POSTOP_FAILURE	DWORD	101
EVENT_TRACE_FLAG_DEBUG_EVENTS	DWORD	4194304
EVENT_TRACE_FLAG_EXTENSION	DWORD	2147483648
EVENT_TRACE_FLAG_FORWARD_WMI	DWORD	1073741824
EVENT_TRACE_FLAG_ENABLE_RESERVE	DWORD	536870912
EVENT_TRACE_FILE_MODE_NONE	DWORD	0
EVENT_TRACE_FILE_MODE_SEQUENTIAL	DWORD	1
EVENT_TRACE_FILE_MODE_CIRCULAR	DWORD	2
EVENT_TRACE_FILE_MODE_APPEND	DWORD	4
EVENT_TRACE_REAL_TIME_MODE	DWORD	256
EVENT_TRACE_DELAY_OPEN_FILE_MODE	DWORD	512
EVENT_TRACE_BUFFERING_MODE	DWORD	1024
EVENT_TRACE_PRIVATE_LOGGER_MODE	DWORD	2048
EVENT_TRACE_ADD_HEADER_MODE	DWORD	4096
EVENT_TRACE_USE_GLOBAL_SEQUENCE	DWORD	16384
EVENT_TRACE_USE_LOCAL_SEQUENCE	DWORD	32768
EVENT_TRACE_RELOG_MODE	DWORD	65536
EVENT_TRACE_USE_PAGED_MEMORY	DWORD	16777216
EVENT_TRACE_FILE_MODE_NEWFILE	DWORD	8
EVENT_TRACE_FILE_MODE_PREALLOCATE	DWORD	32
EVENT_TRACE_NONSTOPPABLE_MODE	DWORD	64
EVENT_TRACE_SECURE_MODE	DWORD	128
EVENT_TRACE_USE_KBYTES_FOR_SIZE	DWORD	8192
EVENT_TRACE_PRIVATE_IN_PROC	DWORD	131072
EVENT_TRACE_MODE_RESERVED	DWORD	1048576
EVENT_TRACE_NO_PER_PROCESSOR_BUFFERING	DWORD	268435456
EVENT_TRACE_SYSTEM_LOGGER_MODE	DWORD	33554432
EVENT_TRACE_ADDTO_TRIAGE_DUMP	DWORD	2147483648
EVENT_TRACE_STOP_ON_HYBRID_SHUTDOWN	DWORD	4194304
EVENT_TRACE_PERSIST_ON_HYBRID_SHUTDOWN	DWORD	8388608
EVENT_TRACE_INDEPENDENT_SESSION_MODE	DWORD	134217728
EVENT_TRACE_COMPRESSED_MODE	DWORD	67108864
EVENT_TRACE_CONTROL_INCREMENT_FILE	DWORD	4
EVENT_TRACE_CONTROL_CONVERT_TO_REALTIME	DWORD	5
TRACE_MESSAGE_PERFORMANCE_TIMESTAMP	DWORD	16
TRACE_MESSAGE_POINTER32	DWORD	64
TRACE_MESSAGE_POINTER64	DWORD	128
TRACE_MESSAGE_FLAG_MASK	DWORD	65535
EVENT_TRACE_USE_PROCTIME	DWORD	1
EVENT_TRACE_USE_NOCPUTIME	DWORD	2
TRACE_HEADER_FLAG_USE_TIMESTAMP	DWORD	512
TRACE_HEADER_FLAG_TRACED_GUID	DWORD	131072
TRACE_HEADER_FLAG_LOG_WNODE	DWORD	262144
TRACE_HEADER_FLAG_USE_GUID_PTR	DWORD	524288
TRACE_HEADER_FLAG_USE_MOF_PTR	DWORD	1048576
SYSTEM_ALPC_KW_GENERAL	ULONGLONG	1
SYSTEM_CONFIG_KW_SYSTEM	ULONGLONG	1
SYSTEM_CONFIG_KW_GRAPHICS	ULONGLONG	2
SYSTEM_CONFIG_KW_STORAGE	ULONGLONG	4
SYSTEM_CONFIG_KW_NETWORK	ULONGLONG	8
SYSTEM_CONFIG_KW_SERVICES	ULONGLONG	16
SYSTEM_CONFIG_KW_PNP	ULONGLONG	32
SYSTEM_CONFIG_KW_OPTICAL	ULONGLONG	64
SYSTEM_CPU_KW_CONFIG	ULONGLONG	1
SYSTEM_CPU_KW_CACHE_FLUSH	ULONGLONG	2
SYSTEM_CPU_KW_SPEC_CONTROL	ULONGLONG	4
SYSTEM_CPU_KW_DOMAIN_CHANGE	ULONGLONG	8
SYSTEM_HYPERVISOR_KW_PROFILE	ULONGLONG	1
SYSTEM_HYPERVISOR_KW_CALLOUTS	ULONGLONG	2
SYSTEM_HYPERVISOR_KW_VTL_CHANGE	ULONGLONG	4
SYSTEM_INTERRUPT_KW_GENERAL	ULONGLONG	1
SYSTEM_INTERRUPT_KW_CLOCK_INTERRUPT	ULONGLONG	2
SYSTEM_INTERRUPT_KW_DPC	ULONGLONG	4
SYSTEM_INTERRUPT_KW_DPC_QUEUE	ULONGLONG	8
SYSTEM_INTERRUPT_KW_WDF_DPC	ULONGLONG	16
SYSTEM_INTERRUPT_KW_WDF_INTERRUPT	ULONGLONG	32
SYSTEM_INTERRUPT_KW_IPI	ULONGLONG	64
SYSTEM_IO_KW_DISK	ULONGLONG	1
SYSTEM_IO_KW_DISK_INIT	ULONGLONG	2
SYSTEM_IO_KW_FILENAME	ULONGLONG	4
SYSTEM_IO_KW_SPLIT	ULONGLONG	8
SYSTEM_IO_KW_FILE	ULONGLONG	16
SYSTEM_IO_KW_OPTICAL	ULONGLONG	32
SYSTEM_IO_KW_OPTICAL_INIT	ULONGLONG	64
SYSTEM_IO_KW_DRIVERS	ULONGLONG	128
SYSTEM_IO_KW_CC	ULONGLONG	256
SYSTEM_IO_KW_NETWORK	ULONGLONG	512
SYSTEM_IO_KW_FILE_INIT	ULONGLONG	1024
SYSTEM_IO_KW_TIMER	ULONGLONG	2048
SYSTEM_IOFILTER_KW_GENERAL	ULONGLONG	1
SYSTEM_IOFILTER_KW_INIT	ULONGLONG	2
SYSTEM_IOFILTER_KW_FASTIO	ULONGLONG	4
SYSTEM_IOFILTER_KW_FAILURE	ULONGLONG	8
SYSTEM_LOCK_KW_SPINLOCK	ULONGLONG	1
SYSTEM_LOCK_KW_SPINLOCK_COUNTERS	ULONGLONG	2
SYSTEM_LOCK_KW_SYNC_OBJECTS	ULONGLONG	4
SYSTEM_MEMORY_KW_GENERAL	ULONGLONG	1
SYSTEM_MEMORY_KW_HARD_FAULTS	ULONGLONG	2
SYSTEM_MEMORY_KW_ALL_FAULTS	ULONGLONG	4
SYSTEM_MEMORY_KW_POOL	ULONGLONG	8
SYSTEM_MEMORY_KW_MEMINFO	ULONGLONG	16
SYSTEM_MEMORY_KW_PFSECTION	ULONGLONG	32
SYSTEM_MEMORY_KW_MEMINFO_WS	ULONGLONG	64
SYSTEM_MEMORY_KW_HEAP	ULONGLONG	128
SYSTEM_MEMORY_KW_WS	ULONGLONG	256
SYSTEM_MEMORY_KW_CONTMEM_GEN	ULONGLONG	512
SYSTEM_MEMORY_KW_VIRTUAL_ALLOC	ULONGLONG	1024
SYSTEM_MEMORY_KW_FOOTPRINT	ULONGLONG	2048
SYSTEM_MEMORY_KW_SESSION	ULONGLONG	4096
SYSTEM_MEMORY_KW_REFSET	ULONGLONG	8192
SYSTEM_MEMORY_KW_VAMAP	ULONGLONG	16384
SYSTEM_MEMORY_KW_NONTRADEABLE	ULONGLONG	32768
SYSTEM_OBJECT_KW_GENERAL	ULONGLONG	1
SYSTEM_OBJECT_KW_HANDLE	ULONGLONG	2
SYSTEM_POWER_KW_GENERAL	ULONGLONG	1
SYSTEM_POWER_KW_HIBER_RUNDOWN	ULONGLONG	2
SYSTEM_POWER_KW_PROCESSOR_IDLE	ULONGLONG	4
SYSTEM_POWER_KW_IDLE_SELECTION	ULONGLONG	8
SYSTEM_POWER_KW_PPM_EXIT_LATENCY	ULONGLONG	16
SYSTEM_PROCESS_KW_GENERAL	ULONGLONG	1
SYSTEM_PROCESS_KW_INSWAP	ULONGLONG	2
SYSTEM_PROCESS_KW_FREEZE	ULONGLONG	4
SYSTEM_PROCESS_KW_PERF_COUNTER	ULONGLONG	8
SYSTEM_PROCESS_KW_WAKE_COUNTER	ULONGLONG	16
SYSTEM_PROCESS_KW_WAKE_DROP	ULONGLONG	32
SYSTEM_PROCESS_KW_WAKE_EVENT	ULONGLONG	64
SYSTEM_PROCESS_KW_DEBUG_EVENTS	ULONGLONG	128
SYSTEM_PROCESS_KW_DBGPRINT	ULONGLONG	256
SYSTEM_PROCESS_KW_JOB	ULONGLONG	512
SYSTEM_PROCESS_KW_WORKER_THREAD	ULONGLONG	1024
SYSTEM_PROCESS_KW_THREAD	ULONGLONG	2048
SYSTEM_PROCESS_KW_LOADER	ULONGLONG	4096
SYSTEM_PROFILE_KW_GENERAL	ULONGLONG	1
SYSTEM_PROFILE_KW_PMC_PROFILE	ULONGLONG	2
SYSTEM_REGISTRY_KW_GENERAL	ULONGLONG	1
SYSTEM_REGISTRY_KW_HIVE	ULONGLONG	2
SYSTEM_REGISTRY_KW_NOTIFICATION	ULONGLONG	4
SYSTEM_SCHEDULER_KW_XSCHEDULER	ULONGLONG	1
SYSTEM_SCHEDULER_KW_DISPATCHER	ULONGLONG	2
SYSTEM_SCHEDULER_KW_KERNEL_QUEUE	ULONGLONG	4
SYSTEM_SCHEDULER_KW_SHOULD_YIELD	ULONGLONG	8
SYSTEM_SCHEDULER_KW_ANTI_STARVATION	ULONGLONG	16
SYSTEM_SCHEDULER_KW_LOAD_BALANCER	ULONGLONG	32
SYSTEM_SCHEDULER_KW_AFFINITY	ULONGLONG	64
SYSTEM_SCHEDULER_KW_PRIORITY	ULONGLONG	128
SYSTEM_SCHEDULER_KW_IDEAL_PROCESSOR	ULONGLONG	256
SYSTEM_SCHEDULER_KW_CONTEXT_SWITCH	ULONGLONG	512
SYSTEM_SCHEDULER_KW_COMPACT_CSWITCH	ULONGLONG	1024
SYSTEM_SCHEDULER_KW_SCHEDULE_THREAD	ULONGLONG	2048
SYSTEM_SCHEDULER_KW_READY_QUEUE	ULONGLONG	4096
SYSTEM_SCHEDULER_KW_CPU_PARTITION	ULONGLONG	8192
SYSTEM_SCHEDULER_KW_THREAD_FEEDBACK_READ	ULONGLONG	16384
SYSTEM_SCHEDULER_KW_WORKLOAD_CLASS_UPDATE	ULONGLONG	32768
SYSTEM_SCHEDULER_KW_AUTOBOOST	ULONGLONG	65536
SYSTEM_SYSCALL_KW_GENERAL	ULONGLONG	1
SYSTEM_TIMER_KW_GENERAL	ULONGLONG	1
SYSTEM_TIMER_KW_CLOCK_TIMER	ULONGLONG	2
SYSTEM_MEMORY_POOL_FILTER_ID	DWORD	1
_typedef_TRACELOGGER_HANDLE	DWORD	1
ETW_NULL_TYPE_VALUE	DWORD	0
ETW_OBJECT_TYPE_VALUE	DWORD	1
ETW_STRING_TYPE_VALUE	DWORD	2
ETW_SBYTE_TYPE_VALUE	DWORD	3
ETW_BYTE_TYPE_VALUE	DWORD	4
ETW_INT16_TYPE_VALUE	DWORD	5
ETW_UINT16_TYPE_VALUE	DWORD	6
ETW_INT32_TYPE_VALUE	DWORD	7
ETW_UINT32_TYPE_VALUE	DWORD	8
ETW_INT64_TYPE_VALUE	DWORD	9
ETW_UINT64_TYPE_VALUE	DWORD	10
ETW_CHAR_TYPE_VALUE	DWORD	11
ETW_SINGLE_TYPE_VALUE	DWORD	12
ETW_DOUBLE_TYPE_VALUE	DWORD	13
ETW_BOOLEAN_TYPE_VALUE	DWORD	14
ETW_DECIMAL_TYPE_VALUE	DWORD	15
ETW_GUID_TYPE_VALUE	DWORD	101
ETW_ASCIICHAR_TYPE_VALUE	DWORD	102
ETW_ASCIISTRING_TYPE_VALUE	DWORD	103
ETW_COUNTED_STRING_TYPE_VALUE	DWORD	104
ETW_POINTER_TYPE_VALUE	DWORD	105
ETW_SIZET_TYPE_VALUE	DWORD	106
ETW_HIDDEN_TYPE_VALUE	DWORD	107
ETW_BOOL_TYPE_VALUE	DWORD	108
ETW_COUNTED_ANSISTRING_TYPE_VALUE	DWORD	109
ETW_REVERSED_COUNTED_STRING_TYPE_VALUE	DWORD	110
ETW_REVERSED_COUNTED_ANSISTRING_TYPE_VALUE	DWORD	111
ETW_NON_NULL_TERMINATED_STRING_TYPE_VALUE	DWORD	112
ETW_REDUCED_ANSISTRING_TYPE_VALUE	DWORD	113
ETW_REDUCED_STRING_TYPE_VALUE	DWORD	114
ETW_SID_TYPE_VALUE	DWORD	115
ETW_VARIANT_TYPE_VALUE	DWORD	116
ETW_PTVECTOR_TYPE_VALUE	DWORD	117
ETW_WMITIME_TYPE_VALUE	DWORD	118
ETW_DATETIME_TYPE_VALUE	DWORD	119
ETW_REFRENCE_TYPE_VALUE	DWORD	120
TRACE_PROVIDER_FLAG_LEGACY	DWORD	1
TRACE_PROVIDER_FLAG_PRE_ENABLE	DWORD	2
TRACE_LBR_EVENT_OPCODE	DWORD	32
TRACE_LBR_MAXIMUM_EVENTS	DWORD	4
KERNEL_LOGGER_NAME	unknown	NT Kernel Logger
GLOBAL_LOGGER_NAME	unknown	GlobalLogger
EVENT_LOGGER_NAME	unknown	EventLog
ENABLE_TRACE_PARAMETERS_VERSION	DWORD	1
ENABLE_TRACE_PARAMETERS_VERSION_2	DWORD	2
EVENT_MIN_LEVEL	DWORD	0
EVENT_MAX_LEVEL	DWORD	255
EVENT_ACTIVITY_CTRL_GET_ID	DWORD	1
EVENT_ACTIVITY_CTRL_SET_ID	DWORD	2
EVENT_ACTIVITY_CTRL_CREATE_ID	DWORD	3
EVENT_ACTIVITY_CTRL_GET_SET_ID	DWORD	4
EVENT_ACTIVITY_CTRL_CREATE_SET_ID	DWORD	5
MAX_EVENT_DATA_DESCRIPTORS	DWORD	128
MAX_EVENT_FILTER_DATA_SIZE	DWORD	1024
MAX_EVENT_FILTER_PAYLOAD_SIZE	DWORD	4096
MAX_EVENT_FILTER_EVENT_NAME_SIZE	DWORD	4096
MAX_EVENT_FILTERS_COUNT	DWORD	13
MAX_EVENT_FILTER_PID_COUNT	DWORD	8
MAX_EVENT_FILTER_EVENT_ID_COUNT	DWORD	64
EVENT_FILTER_TYPE_NONE	DWORD	0
EVENT_FILTER_TYPE_SCHEMATIZED	DWORD	2147483648
EVENT_FILTER_TYPE_SYSTEM_FLAGS	DWORD	2147483649
EVENT_FILTER_TYPE_TRACEHANDLE	DWORD	2147483650
EVENT_FILTER_TYPE_PID	DWORD	2147483652
EVENT_FILTER_TYPE_EXECUTABLE_NAME	DWORD	2147483656
EVENT_FILTER_TYPE_PACKAGE_ID	DWORD	2147483664
EVENT_FILTER_TYPE_PACKAGE_APP_ID	DWORD	2147483680
EVENT_FILTER_TYPE_PAYLOAD	DWORD	2147483904
EVENT_FILTER_TYPE_EVENT_ID	DWORD	2147484160
EVENT_FILTER_TYPE_EVENT_NAME	DWORD	2147484672
EVENT_FILTER_TYPE_STACKWALK	DWORD	2147487744
EVENT_FILTER_TYPE_STACKWALK_NAME	DWORD	2147491840
EVENT_FILTER_TYPE_STACKWALK_LEVEL_KW	DWORD	2147500032
EVENT_FILTER_TYPE_CONTAINER	DWORD	2147516416
EVENT_DATA_DESCRIPTOR_TYPE_NONE	DWORD	0
EVENT_DATA_DESCRIPTOR_TYPE_EVENT_METADATA	DWORD	1
EVENT_DATA_DESCRIPTOR_TYPE_PROVIDER_METADATA	DWORD	2
EVENT_DATA_DESCRIPTOR_TYPE_TIMESTAMP_OVERRIDE	DWORD	3
EVENT_WRITE_FLAG_NO_FAULTING	DWORD	1
EVENT_WRITE_FLAG_INPRIVATE	DWORD	2
EVENT_HEADER_EXT_TYPE_RELATED_ACTIVITYID	DWORD	1
EVENT_HEADER_EXT_TYPE_SID	DWORD	2
EVENT_HEADER_EXT_TYPE_TS_ID	DWORD	3
EVENT_HEADER_EXT_TYPE_INSTANCE_INFO	DWORD	4
EVENT_HEADER_EXT_TYPE_STACK_TRACE32	DWORD	5
EVENT_HEADER_EXT_TYPE_STACK_TRACE64	DWORD	6
EVENT_HEADER_EXT_TYPE_PEBS_INDEX	DWORD	7
EVENT_HEADER_EXT_TYPE_PMC_COUNTERS	DWORD	8
EVENT_HEADER_EXT_TYPE_PSM_KEY	DWORD	9
EVENT_HEADER_EXT_TYPE_EVENT_KEY	DWORD	10
EVENT_HEADER_EXT_TYPE_EVENT_SCHEMA_TL	DWORD	11
EVENT_HEADER_EXT_TYPE_PROV_TRAITS	DWORD	12
EVENT_HEADER_EXT_TYPE_PROCESS_START_KEY	DWORD	13
EVENT_HEADER_EXT_TYPE_CONTROL_GUID	DWORD	14
EVENT_HEADER_EXT_TYPE_QPC_DELTA	DWORD	15
EVENT_HEADER_EXT_TYPE_CONTAINER_ID	DWORD	16
EVENT_HEADER_EXT_TYPE_STACK_KEY32	DWORD	17
EVENT_HEADER_EXT_TYPE_STACK_KEY64	DWORD	18
EVENT_HEADER_EXT_TYPE_MAX	DWORD	19
EVENT_HEADER_PROPERTY_XML	DWORD	1
EVENT_HEADER_PROPERTY_FORWARDED_XML	DWORD	2
EVENT_HEADER_PROPERTY_LEGACY_EVENTLOG	DWORD	4
EVENT_HEADER_PROPERTY_RELOGGABLE	DWORD	8
EVENT_HEADER_FLAG_EXTENDED_INFO	DWORD	1
EVENT_HEADER_FLAG_PRIVATE_SESSION	DWORD	2
EVENT_HEADER_FLAG_STRING_ONLY	DWORD	4
EVENT_HEADER_FLAG_TRACE_MESSAGE	DWORD	8
EVENT_HEADER_FLAG_NO_CPUTIME	DWORD	16
EVENT_HEADER_FLAG_32_BIT_HEADER	DWORD	32
EVENT_HEADER_FLAG_64_BIT_HEADER	DWORD	64
EVENT_HEADER_FLAG_DECODE_GUID	DWORD	128
EVENT_HEADER_FLAG_CLASSIC_HEADER	DWORD	256
EVENT_HEADER_FLAG_PROCESSOR_INDEX	DWORD	512
EVENT_ENABLE_PROPERTY_SID	DWORD	1
EVENT_ENABLE_PROPERTY_TS_ID	DWORD	2
EVENT_ENABLE_PROPERTY_STACK_TRACE	DWORD	4
EVENT_ENABLE_PROPERTY_PSM_KEY	DWORD	8
EVENT_ENABLE_PROPERTY_IGNORE_KEYWORD_0	DWORD	16
EVENT_ENABLE_PROPERTY_PROVIDER_GROUP	DWORD	32
EVENT_ENABLE_PROPERTY_ENABLE_KEYWORD_0	DWORD	64
EVENT_ENABLE_PROPERTY_PROCESS_START_KEY	DWORD	128
EVENT_ENABLE_PROPERTY_EVENT_KEY	DWORD	256
EVENT_ENABLE_PROPERTY_EXCLUDE_INPRIVATE	DWORD	512
EVENT_ENABLE_PROPERTY_ENABLE_SILOS	DWORD	1024
EVENT_ENABLE_PROPERTY_SOURCE_CONTAINER_TRACKING	DWORD	2048
PROCESS_TRACE_MODE_REAL_TIME	DWORD	256
PROCESS_TRACE_MODE_RAW_TIMESTAMP	DWORD	4096
PROCESS_TRACE_MODE_EVENT_RECORD	DWORD	268435456
CLSID_TraceRelogger	GUID	{7B40792D-05FF-44C4-9058-F440C71F17D4}

各言語での定義

定数の定義。C/C++〜Go タブは数値定数のみ(GUID・文字列定数は上の表 / HSP タブを参照)。HSP は #define global。

#define WNODE_FLAG_ALL_DATA 1
#define WNODE_FLAG_SINGLE_INSTANCE 2
#define WNODE_FLAG_SINGLE_ITEM 4
#define WNODE_FLAG_EVENT_ITEM 8
#define WNODE_FLAG_FIXED_INSTANCE_SIZE 16
#define WNODE_FLAG_TOO_SMALL 32
#define WNODE_FLAG_INSTANCES_SAME 64
#define WNODE_FLAG_STATIC_INSTANCE_NAMES 128
#define WNODE_FLAG_INTERNAL 256
#define WNODE_FLAG_USE_TIMESTAMP 512
#define WNODE_FLAG_PERSIST_EVENT 1024
#define WNODE_FLAG_EVENT_REFERENCE 8192
#define WNODE_FLAG_ANSI_INSTANCENAMES 16384
#define WNODE_FLAG_METHOD_ITEM 32768
#define WNODE_FLAG_PDO_INSTANCE_NAMES 65536
#define WNODE_FLAG_TRACED_GUID 131072
#define WNODE_FLAG_LOG_WNODE 262144
#define WNODE_FLAG_USE_GUID_PTR 524288
#define WNODE_FLAG_USE_MOF_PTR 1048576
#define WNODE_FLAG_NO_HEADER 2097152
#define WNODE_FLAG_SEND_DATA_BLOCK 4194304
#define WNODE_FLAG_VERSIONED_PROPERTIES 8388608
#define WNODE_FLAG_SEVERITY_MASK 4278190080
#define WMIREG_FLAG_EXPENSIVE 1
#define WMIREG_FLAG_INSTANCE_LIST 4
#define WMIREG_FLAG_INSTANCE_BASENAME 8
#define WMIREG_FLAG_INSTANCE_PDO 32
#define WMIREG_FLAG_REMOVE_GUID 65536
#define WMIREG_FLAG_RESERVED1 131072
#define WMIREG_FLAG_RESERVED2 262144
#define WMIREG_FLAG_TRACED_GUID 524288
#define WMIREG_FLAG_TRACE_CONTROL_GUID 4096
#define WMIREG_FLAG_EVENT_ONLY_GUID 64
#define WMI_GUIDTYPE_TRACECONTROL 0
#define WMI_GUIDTYPE_TRACE 1
#define WMI_GUIDTYPE_DATA 2
#define WMI_GUIDTYPE_EVENT 3
#define WMIGUID_QUERY 1
#define WMIGUID_SET 2
#define WMIGUID_NOTIFICATION 4
#define WMIGUID_READ_DESCRIPTION 8
#define WMIGUID_EXECUTE 16
#define TRACELOG_CREATE_REALTIME 32
#define TRACELOG_CREATE_ONDISK 64
#define TRACELOG_GUID_ENABLE 128
#define TRACELOG_ACCESS_KERNEL_LOGGER 256
#define TRACELOG_LOG_EVENT 512
#define TRACELOG_CREATE_INPROC 512
#define TRACELOG_ACCESS_REALTIME 1024
#define TRACELOG_REGISTER_GUIDS 2048
#define TRACELOG_JOIN_GROUP 4096
#define WMI_GLOBAL_LOGGER_ID 1
#define MAX_PAYLOAD_PREDICATES 8
#define MAX_MOF_FIELDS 16
#define SYSTEM_EVENT_TYPE 1
#define EVENT_TRACE_TYPE_INFO 0
#define EVENT_TRACE_TYPE_START 1
#define EVENT_TRACE_TYPE_END 2
#define EVENT_TRACE_TYPE_STOP 2
#define EVENT_TRACE_TYPE_DC_START 3
#define EVENT_TRACE_TYPE_DC_END 4
#define EVENT_TRACE_TYPE_EXTENSION 5
#define EVENT_TRACE_TYPE_REPLY 6
#define EVENT_TRACE_TYPE_DEQUEUE 7
#define EVENT_TRACE_TYPE_RESUME 7
#define EVENT_TRACE_TYPE_CHECKPOINT 8
#define EVENT_TRACE_TYPE_SUSPEND 8
#define EVENT_TRACE_TYPE_WINEVT_SEND 9
#define EVENT_TRACE_TYPE_WINEVT_RECEIVE 240
#define TRACE_LEVEL_NONE 0
#define TRACE_LEVEL_CRITICAL 1
#define TRACE_LEVEL_FATAL 1
#define TRACE_LEVEL_ERROR 2
#define TRACE_LEVEL_WARNING 3
#define TRACE_LEVEL_INFORMATION 4
#define TRACE_LEVEL_VERBOSE 5
#define TRACE_LEVEL_RESERVED6 6
#define TRACE_LEVEL_RESERVED7 7
#define TRACE_LEVEL_RESERVED8 8
#define TRACE_LEVEL_RESERVED9 9
#define EVENT_TRACE_TYPE_LOAD 10
#define EVENT_TRACE_TYPE_TERMINATE 11
#define EVENT_TRACE_TYPE_IO_READ 10
#define EVENT_TRACE_TYPE_IO_WRITE 11
#define EVENT_TRACE_TYPE_IO_READ_INIT 12
#define EVENT_TRACE_TYPE_IO_WRITE_INIT 13
#define EVENT_TRACE_TYPE_IO_FLUSH 14
#define EVENT_TRACE_TYPE_IO_FLUSH_INIT 15
#define EVENT_TRACE_TYPE_IO_REDIRECTED_INIT 16
#define EVENT_TRACE_TYPE_MM_TF 10
#define EVENT_TRACE_TYPE_MM_DZF 11
#define EVENT_TRACE_TYPE_MM_COW 12
#define EVENT_TRACE_TYPE_MM_GPF 13
#define EVENT_TRACE_TYPE_MM_HPF 14
#define EVENT_TRACE_TYPE_MM_AV 15
#define EVENT_TRACE_TYPE_SEND 10
#define EVENT_TRACE_TYPE_RECEIVE 11
#define EVENT_TRACE_TYPE_CONNECT 12
#define EVENT_TRACE_TYPE_DISCONNECT 13
#define EVENT_TRACE_TYPE_RETRANSMIT 14
#define EVENT_TRACE_TYPE_ACCEPT 15
#define EVENT_TRACE_TYPE_RECONNECT 16
#define EVENT_TRACE_TYPE_CONNFAIL 17
#define EVENT_TRACE_TYPE_COPY_TCP 18
#define EVENT_TRACE_TYPE_COPY_ARP 19
#define EVENT_TRACE_TYPE_ACKFULL 20
#define EVENT_TRACE_TYPE_ACKPART 21
#define EVENT_TRACE_TYPE_ACKDUP 22
#define EVENT_TRACE_TYPE_GUIDMAP 10
#define EVENT_TRACE_TYPE_CONFIG 11
#define EVENT_TRACE_TYPE_SIDINFO 12
#define EVENT_TRACE_TYPE_SECURITY 13
#define EVENT_TRACE_TYPE_DBGID_RSDS 64
#define EVENT_TRACE_TYPE_REGCREATE 10
#define EVENT_TRACE_TYPE_REGOPEN 11
#define EVENT_TRACE_TYPE_REGDELETE 12
#define EVENT_TRACE_TYPE_REGQUERY 13
#define EVENT_TRACE_TYPE_REGSETVALUE 14
#define EVENT_TRACE_TYPE_REGDELETEVALUE 15
#define EVENT_TRACE_TYPE_REGQUERYVALUE 16
#define EVENT_TRACE_TYPE_REGENUMERATEKEY 17
#define EVENT_TRACE_TYPE_REGENUMERATEVALUEKEY 18
#define EVENT_TRACE_TYPE_REGQUERYMULTIPLEVALUE 19
#define EVENT_TRACE_TYPE_REGSETINFORMATION 20
#define EVENT_TRACE_TYPE_REGFLUSH 21
#define EVENT_TRACE_TYPE_REGKCBCREATE 22
#define EVENT_TRACE_TYPE_REGKCBDELETE 23
#define EVENT_TRACE_TYPE_REGKCBRUNDOWNBEGIN 24
#define EVENT_TRACE_TYPE_REGKCBRUNDOWNEND 25
#define EVENT_TRACE_TYPE_REGVIRTUALIZE 26
#define EVENT_TRACE_TYPE_REGCLOSE 27
#define EVENT_TRACE_TYPE_REGSETSECURITY 28
#define EVENT_TRACE_TYPE_REGQUERYSECURITY 29
#define EVENT_TRACE_TYPE_REGCOMMIT 30
#define EVENT_TRACE_TYPE_REGPREPARE 31
#define EVENT_TRACE_TYPE_REGROLLBACK 32
#define EVENT_TRACE_TYPE_REGMOUNTHIVE 33
#define EVENT_TRACE_TYPE_CONFIG_CPU 10
#define EVENT_TRACE_TYPE_CONFIG_PHYSICALDISK 11
#define EVENT_TRACE_TYPE_CONFIG_LOGICALDISK 12
#define EVENT_TRACE_TYPE_CONFIG_NIC 13
#define EVENT_TRACE_TYPE_CONFIG_VIDEO 14
#define EVENT_TRACE_TYPE_CONFIG_SERVICES 15
#define EVENT_TRACE_TYPE_CONFIG_POWER 16
#define EVENT_TRACE_TYPE_CONFIG_NETINFO 17
#define EVENT_TRACE_TYPE_CONFIG_OPTICALMEDIA 18
#define EVENT_TRACE_TYPE_CONFIG_PHYSICALDISK_EX 19
#define EVENT_TRACE_TYPE_CONFIG_IRQ 21
#define EVENT_TRACE_TYPE_CONFIG_PNP 22
#define EVENT_TRACE_TYPE_CONFIG_IDECHANNEL 23
#define EVENT_TRACE_TYPE_CONFIG_NUMANODE 24
#define EVENT_TRACE_TYPE_CONFIG_PLATFORM 25
#define EVENT_TRACE_TYPE_CONFIG_PROCESSORGROUP 26
#define EVENT_TRACE_TYPE_CONFIG_PROCESSORNUMBER 27
#define EVENT_TRACE_TYPE_CONFIG_DPI 28
#define EVENT_TRACE_TYPE_CONFIG_CI_INFO 29
#define EVENT_TRACE_TYPE_CONFIG_MACHINEID 30
#define EVENT_TRACE_TYPE_CONFIG_DEFRAG 31
#define EVENT_TRACE_TYPE_CONFIG_MOBILEPLATFORM 32
#define EVENT_TRACE_TYPE_CONFIG_DEVICEFAMILY 33
#define EVENT_TRACE_TYPE_CONFIG_FLIGHTID 34
#define EVENT_TRACE_TYPE_CONFIG_PROCESSOR 35
#define EVENT_TRACE_TYPE_CONFIG_VIRTUALIZATION 36
#define EVENT_TRACE_TYPE_CONFIG_BOOT 37
#define EVENT_TRACE_TYPE_OPTICAL_IO_READ 55
#define EVENT_TRACE_TYPE_OPTICAL_IO_WRITE 56
#define EVENT_TRACE_TYPE_OPTICAL_IO_FLUSH 57
#define EVENT_TRACE_TYPE_OPTICAL_IO_READ_INIT 58
#define EVENT_TRACE_TYPE_OPTICAL_IO_WRITE_INIT 59
#define EVENT_TRACE_TYPE_OPTICAL_IO_FLUSH_INIT 60
#define EVENT_TRACE_TYPE_FLT_PREOP_INIT 96
#define EVENT_TRACE_TYPE_FLT_POSTOP_INIT 97
#define EVENT_TRACE_TYPE_FLT_PREOP_COMPLETION 98
#define EVENT_TRACE_TYPE_FLT_POSTOP_COMPLETION 99
#define EVENT_TRACE_TYPE_FLT_PREOP_FAILURE 100
#define EVENT_TRACE_TYPE_FLT_POSTOP_FAILURE 101
#define EVENT_TRACE_FLAG_DEBUG_EVENTS 4194304
#define EVENT_TRACE_FLAG_EXTENSION 2147483648
#define EVENT_TRACE_FLAG_FORWARD_WMI 1073741824
#define EVENT_TRACE_FLAG_ENABLE_RESERVE 536870912
#define EVENT_TRACE_FILE_MODE_NONE 0
#define EVENT_TRACE_FILE_MODE_SEQUENTIAL 1
#define EVENT_TRACE_FILE_MODE_CIRCULAR 2
#define EVENT_TRACE_FILE_MODE_APPEND 4
#define EVENT_TRACE_REAL_TIME_MODE 256
#define EVENT_TRACE_DELAY_OPEN_FILE_MODE 512
#define EVENT_TRACE_BUFFERING_MODE 1024
#define EVENT_TRACE_PRIVATE_LOGGER_MODE 2048
#define EVENT_TRACE_ADD_HEADER_MODE 4096
#define EVENT_TRACE_USE_GLOBAL_SEQUENCE 16384
#define EVENT_TRACE_USE_LOCAL_SEQUENCE 32768
#define EVENT_TRACE_RELOG_MODE 65536
#define EVENT_TRACE_USE_PAGED_MEMORY 16777216
#define EVENT_TRACE_FILE_MODE_NEWFILE 8
#define EVENT_TRACE_FILE_MODE_PREALLOCATE 32
#define EVENT_TRACE_NONSTOPPABLE_MODE 64
#define EVENT_TRACE_SECURE_MODE 128
#define EVENT_TRACE_USE_KBYTES_FOR_SIZE 8192
#define EVENT_TRACE_PRIVATE_IN_PROC 131072
#define EVENT_TRACE_MODE_RESERVED 1048576
#define EVENT_TRACE_NO_PER_PROCESSOR_BUFFERING 268435456
#define EVENT_TRACE_SYSTEM_LOGGER_MODE 33554432
#define EVENT_TRACE_ADDTO_TRIAGE_DUMP 2147483648
#define EVENT_TRACE_STOP_ON_HYBRID_SHUTDOWN 4194304
#define EVENT_TRACE_PERSIST_ON_HYBRID_SHUTDOWN 8388608
#define EVENT_TRACE_INDEPENDENT_SESSION_MODE 134217728
#define EVENT_TRACE_COMPRESSED_MODE 67108864
#define EVENT_TRACE_CONTROL_INCREMENT_FILE 4
#define EVENT_TRACE_CONTROL_CONVERT_TO_REALTIME 5
#define TRACE_MESSAGE_PERFORMANCE_TIMESTAMP 16
#define TRACE_MESSAGE_POINTER32 64
#define TRACE_MESSAGE_POINTER64 128
#define TRACE_MESSAGE_FLAG_MASK 65535
#define EVENT_TRACE_USE_PROCTIME 1
#define EVENT_TRACE_USE_NOCPUTIME 2
#define TRACE_HEADER_FLAG_USE_TIMESTAMP 512
#define TRACE_HEADER_FLAG_TRACED_GUID 131072
#define TRACE_HEADER_FLAG_LOG_WNODE 262144
#define TRACE_HEADER_FLAG_USE_GUID_PTR 524288
#define TRACE_HEADER_FLAG_USE_MOF_PTR 1048576
#define SYSTEM_ALPC_KW_GENERAL 1
#define SYSTEM_CONFIG_KW_SYSTEM 1
#define SYSTEM_CONFIG_KW_GRAPHICS 2
#define SYSTEM_CONFIG_KW_STORAGE 4
#define SYSTEM_CONFIG_KW_NETWORK 8
#define SYSTEM_CONFIG_KW_SERVICES 16
#define SYSTEM_CONFIG_KW_PNP 32
#define SYSTEM_CONFIG_KW_OPTICAL 64
#define SYSTEM_CPU_KW_CONFIG 1
#define SYSTEM_CPU_KW_CACHE_FLUSH 2
#define SYSTEM_CPU_KW_SPEC_CONTROL 4
#define SYSTEM_CPU_KW_DOMAIN_CHANGE 8
#define SYSTEM_HYPERVISOR_KW_PROFILE 1
#define SYSTEM_HYPERVISOR_KW_CALLOUTS 2
#define SYSTEM_HYPERVISOR_KW_VTL_CHANGE 4
#define SYSTEM_INTERRUPT_KW_GENERAL 1
#define SYSTEM_INTERRUPT_KW_CLOCK_INTERRUPT 2
#define SYSTEM_INTERRUPT_KW_DPC 4
#define SYSTEM_INTERRUPT_KW_DPC_QUEUE 8
#define SYSTEM_INTERRUPT_KW_WDF_DPC 16
#define SYSTEM_INTERRUPT_KW_WDF_INTERRUPT 32
#define SYSTEM_INTERRUPT_KW_IPI 64
#define SYSTEM_IO_KW_DISK 1
#define SYSTEM_IO_KW_DISK_INIT 2
#define SYSTEM_IO_KW_FILENAME 4
#define SYSTEM_IO_KW_SPLIT 8
#define SYSTEM_IO_KW_FILE 16
#define SYSTEM_IO_KW_OPTICAL 32
#define SYSTEM_IO_KW_OPTICAL_INIT 64
#define SYSTEM_IO_KW_DRIVERS 128
#define SYSTEM_IO_KW_CC 256
#define SYSTEM_IO_KW_NETWORK 512
#define SYSTEM_IO_KW_FILE_INIT 1024
#define SYSTEM_IO_KW_TIMER 2048
#define SYSTEM_IOFILTER_KW_GENERAL 1
#define SYSTEM_IOFILTER_KW_INIT 2
#define SYSTEM_IOFILTER_KW_FASTIO 4
#define SYSTEM_IOFILTER_KW_FAILURE 8
#define SYSTEM_LOCK_KW_SPINLOCK 1
#define SYSTEM_LOCK_KW_SPINLOCK_COUNTERS 2
#define SYSTEM_LOCK_KW_SYNC_OBJECTS 4
#define SYSTEM_MEMORY_KW_GENERAL 1
#define SYSTEM_MEMORY_KW_HARD_FAULTS 2
#define SYSTEM_MEMORY_KW_ALL_FAULTS 4
#define SYSTEM_MEMORY_KW_POOL 8
#define SYSTEM_MEMORY_KW_MEMINFO 16
#define SYSTEM_MEMORY_KW_PFSECTION 32
#define SYSTEM_MEMORY_KW_MEMINFO_WS 64
#define SYSTEM_MEMORY_KW_HEAP 128
#define SYSTEM_MEMORY_KW_WS 256
#define SYSTEM_MEMORY_KW_CONTMEM_GEN 512
#define SYSTEM_MEMORY_KW_VIRTUAL_ALLOC 1024
#define SYSTEM_MEMORY_KW_FOOTPRINT 2048
#define SYSTEM_MEMORY_KW_SESSION 4096
#define SYSTEM_MEMORY_KW_REFSET 8192
#define SYSTEM_MEMORY_KW_VAMAP 16384
#define SYSTEM_MEMORY_KW_NONTRADEABLE 32768
#define SYSTEM_OBJECT_KW_GENERAL 1
#define SYSTEM_OBJECT_KW_HANDLE 2
#define SYSTEM_POWER_KW_GENERAL 1
#define SYSTEM_POWER_KW_HIBER_RUNDOWN 2
#define SYSTEM_POWER_KW_PROCESSOR_IDLE 4
#define SYSTEM_POWER_KW_IDLE_SELECTION 8
#define SYSTEM_POWER_KW_PPM_EXIT_LATENCY 16
#define SYSTEM_PROCESS_KW_GENERAL 1
#define SYSTEM_PROCESS_KW_INSWAP 2
#define SYSTEM_PROCESS_KW_FREEZE 4
#define SYSTEM_PROCESS_KW_PERF_COUNTER 8
#define SYSTEM_PROCESS_KW_WAKE_COUNTER 16
#define SYSTEM_PROCESS_KW_WAKE_DROP 32
#define SYSTEM_PROCESS_KW_WAKE_EVENT 64
#define SYSTEM_PROCESS_KW_DEBUG_EVENTS 128
#define SYSTEM_PROCESS_KW_DBGPRINT 256
#define SYSTEM_PROCESS_KW_JOB 512
#define SYSTEM_PROCESS_KW_WORKER_THREAD 1024
#define SYSTEM_PROCESS_KW_THREAD 2048
#define SYSTEM_PROCESS_KW_LOADER 4096
#define SYSTEM_PROFILE_KW_GENERAL 1
#define SYSTEM_PROFILE_KW_PMC_PROFILE 2
#define SYSTEM_REGISTRY_KW_GENERAL 1
#define SYSTEM_REGISTRY_KW_HIVE 2
#define SYSTEM_REGISTRY_KW_NOTIFICATION 4
#define SYSTEM_SCHEDULER_KW_XSCHEDULER 1
#define SYSTEM_SCHEDULER_KW_DISPATCHER 2
#define SYSTEM_SCHEDULER_KW_KERNEL_QUEUE 4
#define SYSTEM_SCHEDULER_KW_SHOULD_YIELD 8
#define SYSTEM_SCHEDULER_KW_ANTI_STARVATION 16
#define SYSTEM_SCHEDULER_KW_LOAD_BALANCER 32
#define SYSTEM_SCHEDULER_KW_AFFINITY 64
#define SYSTEM_SCHEDULER_KW_PRIORITY 128
#define SYSTEM_SCHEDULER_KW_IDEAL_PROCESSOR 256
#define SYSTEM_SCHEDULER_KW_CONTEXT_SWITCH 512
#define SYSTEM_SCHEDULER_KW_COMPACT_CSWITCH 1024
#define SYSTEM_SCHEDULER_KW_SCHEDULE_THREAD 2048
#define SYSTEM_SCHEDULER_KW_READY_QUEUE 4096
#define SYSTEM_SCHEDULER_KW_CPU_PARTITION 8192
#define SYSTEM_SCHEDULER_KW_THREAD_FEEDBACK_READ 16384
#define SYSTEM_SCHEDULER_KW_WORKLOAD_CLASS_UPDATE 32768
#define SYSTEM_SCHEDULER_KW_AUTOBOOST 65536
#define SYSTEM_SYSCALL_KW_GENERAL 1
#define SYSTEM_TIMER_KW_GENERAL 1
#define SYSTEM_TIMER_KW_CLOCK_TIMER 2
#define SYSTEM_MEMORY_POOL_FILTER_ID 1
#define _typedef_TRACELOGGER_HANDLE 1
#define ETW_NULL_TYPE_VALUE 0
#define ETW_OBJECT_TYPE_VALUE 1
#define ETW_STRING_TYPE_VALUE 2
#define ETW_SBYTE_TYPE_VALUE 3
#define ETW_BYTE_TYPE_VALUE 4
#define ETW_INT16_TYPE_VALUE 5
#define ETW_UINT16_TYPE_VALUE 6
#define ETW_INT32_TYPE_VALUE 7
#define ETW_UINT32_TYPE_VALUE 8
#define ETW_INT64_TYPE_VALUE 9
#define ETW_UINT64_TYPE_VALUE 10
#define ETW_CHAR_TYPE_VALUE 11
#define ETW_SINGLE_TYPE_VALUE 12
#define ETW_DOUBLE_TYPE_VALUE 13
#define ETW_BOOLEAN_TYPE_VALUE 14
#define ETW_DECIMAL_TYPE_VALUE 15
#define ETW_GUID_TYPE_VALUE 101
#define ETW_ASCIICHAR_TYPE_VALUE 102
#define ETW_ASCIISTRING_TYPE_VALUE 103
#define ETW_COUNTED_STRING_TYPE_VALUE 104
#define ETW_POINTER_TYPE_VALUE 105
#define ETW_SIZET_TYPE_VALUE 106
#define ETW_HIDDEN_TYPE_VALUE 107
#define ETW_BOOL_TYPE_VALUE 108
#define ETW_COUNTED_ANSISTRING_TYPE_VALUE 109
#define ETW_REVERSED_COUNTED_STRING_TYPE_VALUE 110
#define ETW_REVERSED_COUNTED_ANSISTRING_TYPE_VALUE 111
#define ETW_NON_NULL_TERMINATED_STRING_TYPE_VALUE 112
#define ETW_REDUCED_ANSISTRING_TYPE_VALUE 113
#define ETW_REDUCED_STRING_TYPE_VALUE 114
#define ETW_SID_TYPE_VALUE 115
#define ETW_VARIANT_TYPE_VALUE 116
#define ETW_PTVECTOR_TYPE_VALUE 117
#define ETW_WMITIME_TYPE_VALUE 118
#define ETW_DATETIME_TYPE_VALUE 119
#define ETW_REFRENCE_TYPE_VALUE 120
#define TRACE_PROVIDER_FLAG_LEGACY 1
#define TRACE_PROVIDER_FLAG_PRE_ENABLE 2
#define TRACE_LBR_EVENT_OPCODE 32
#define TRACE_LBR_MAXIMUM_EVENTS 4
#define ENABLE_TRACE_PARAMETERS_VERSION 1
#define ENABLE_TRACE_PARAMETERS_VERSION_2 2
#define EVENT_MIN_LEVEL 0
#define EVENT_MAX_LEVEL 255
#define EVENT_ACTIVITY_CTRL_GET_ID 1
#define EVENT_ACTIVITY_CTRL_SET_ID 2
#define EVENT_ACTIVITY_CTRL_CREATE_ID 3
#define EVENT_ACTIVITY_CTRL_GET_SET_ID 4
#define EVENT_ACTIVITY_CTRL_CREATE_SET_ID 5
#define MAX_EVENT_DATA_DESCRIPTORS 128
#define MAX_EVENT_FILTER_DATA_SIZE 1024
#define MAX_EVENT_FILTER_PAYLOAD_SIZE 4096
#define MAX_EVENT_FILTER_EVENT_NAME_SIZE 4096
#define MAX_EVENT_FILTERS_COUNT 13
#define MAX_EVENT_FILTER_PID_COUNT 8
#define MAX_EVENT_FILTER_EVENT_ID_COUNT 64
#define EVENT_FILTER_TYPE_NONE 0
#define EVENT_FILTER_TYPE_SCHEMATIZED 2147483648
#define EVENT_FILTER_TYPE_SYSTEM_FLAGS 2147483649
#define EVENT_FILTER_TYPE_TRACEHANDLE 2147483650
#define EVENT_FILTER_TYPE_PID 2147483652
#define EVENT_FILTER_TYPE_EXECUTABLE_NAME 2147483656
#define EVENT_FILTER_TYPE_PACKAGE_ID 2147483664
#define EVENT_FILTER_TYPE_PACKAGE_APP_ID 2147483680
#define EVENT_FILTER_TYPE_PAYLOAD 2147483904
#define EVENT_FILTER_TYPE_EVENT_ID 2147484160
#define EVENT_FILTER_TYPE_EVENT_NAME 2147484672
#define EVENT_FILTER_TYPE_STACKWALK 2147487744
#define EVENT_FILTER_TYPE_STACKWALK_NAME 2147491840
#define EVENT_FILTER_TYPE_STACKWALK_LEVEL_KW 2147500032
#define EVENT_FILTER_TYPE_CONTAINER 2147516416
#define EVENT_DATA_DESCRIPTOR_TYPE_NONE 0
#define EVENT_DATA_DESCRIPTOR_TYPE_EVENT_METADATA 1
#define EVENT_DATA_DESCRIPTOR_TYPE_PROVIDER_METADATA 2
#define EVENT_DATA_DESCRIPTOR_TYPE_TIMESTAMP_OVERRIDE 3
#define EVENT_WRITE_FLAG_NO_FAULTING 1
#define EVENT_WRITE_FLAG_INPRIVATE 2
#define EVENT_HEADER_EXT_TYPE_RELATED_ACTIVITYID 1
#define EVENT_HEADER_EXT_TYPE_SID 2
#define EVENT_HEADER_EXT_TYPE_TS_ID 3
#define EVENT_HEADER_EXT_TYPE_INSTANCE_INFO 4
#define EVENT_HEADER_EXT_TYPE_STACK_TRACE32 5
#define EVENT_HEADER_EXT_TYPE_STACK_TRACE64 6
#define EVENT_HEADER_EXT_TYPE_PEBS_INDEX 7
#define EVENT_HEADER_EXT_TYPE_PMC_COUNTERS 8
#define EVENT_HEADER_EXT_TYPE_PSM_KEY 9
#define EVENT_HEADER_EXT_TYPE_EVENT_KEY 10
#define EVENT_HEADER_EXT_TYPE_EVENT_SCHEMA_TL 11
#define EVENT_HEADER_EXT_TYPE_PROV_TRAITS 12
#define EVENT_HEADER_EXT_TYPE_PROCESS_START_KEY 13
#define EVENT_HEADER_EXT_TYPE_CONTROL_GUID 14
#define EVENT_HEADER_EXT_TYPE_QPC_DELTA 15
#define EVENT_HEADER_EXT_TYPE_CONTAINER_ID 16
#define EVENT_HEADER_EXT_TYPE_STACK_KEY32 17
#define EVENT_HEADER_EXT_TYPE_STACK_KEY64 18
#define EVENT_HEADER_EXT_TYPE_MAX 19
#define EVENT_HEADER_PROPERTY_XML 1
#define EVENT_HEADER_PROPERTY_FORWARDED_XML 2
#define EVENT_HEADER_PROPERTY_LEGACY_EVENTLOG 4
#define EVENT_HEADER_PROPERTY_RELOGGABLE 8
#define EVENT_HEADER_FLAG_EXTENDED_INFO 1
#define EVENT_HEADER_FLAG_PRIVATE_SESSION 2
#define EVENT_HEADER_FLAG_STRING_ONLY 4
#define EVENT_HEADER_FLAG_TRACE_MESSAGE 8
#define EVENT_HEADER_FLAG_NO_CPUTIME 16
#define EVENT_HEADER_FLAG_32_BIT_HEADER 32
#define EVENT_HEADER_FLAG_64_BIT_HEADER 64
#define EVENT_HEADER_FLAG_DECODE_GUID 128
#define EVENT_HEADER_FLAG_CLASSIC_HEADER 256
#define EVENT_HEADER_FLAG_PROCESSOR_INDEX 512
#define EVENT_ENABLE_PROPERTY_SID 1
#define EVENT_ENABLE_PROPERTY_TS_ID 2
#define EVENT_ENABLE_PROPERTY_STACK_TRACE 4
#define EVENT_ENABLE_PROPERTY_PSM_KEY 8
#define EVENT_ENABLE_PROPERTY_IGNORE_KEYWORD_0 16
#define EVENT_ENABLE_PROPERTY_PROVIDER_GROUP 32
#define EVENT_ENABLE_PROPERTY_ENABLE_KEYWORD_0 64
#define EVENT_ENABLE_PROPERTY_PROCESS_START_KEY 128
#define EVENT_ENABLE_PROPERTY_EVENT_KEY 256
#define EVENT_ENABLE_PROPERTY_EXCLUDE_INPRIVATE 512
#define EVENT_ENABLE_PROPERTY_ENABLE_SILOS 1024
#define EVENT_ENABLE_PROPERTY_SOURCE_CONTAINER_TRACKING 2048
#define PROCESS_TRACE_MODE_REAL_TIME 256
#define PROCESS_TRACE_MODE_RAW_TIMESTAMP 4096
#define PROCESS_TRACE_MODE_EVENT_RECORD 268435456

public const uint WNODE_FLAG_ALL_DATA = 1;
public const uint WNODE_FLAG_SINGLE_INSTANCE = 2;
public const uint WNODE_FLAG_SINGLE_ITEM = 4;
public const uint WNODE_FLAG_EVENT_ITEM = 8;
public const uint WNODE_FLAG_FIXED_INSTANCE_SIZE = 16;
public const uint WNODE_FLAG_TOO_SMALL = 32;
public const uint WNODE_FLAG_INSTANCES_SAME = 64;
public const uint WNODE_FLAG_STATIC_INSTANCE_NAMES = 128;
public const uint WNODE_FLAG_INTERNAL = 256;
public const uint WNODE_FLAG_USE_TIMESTAMP = 512;
public const uint WNODE_FLAG_PERSIST_EVENT = 1024;
public const uint WNODE_FLAG_EVENT_REFERENCE = 8192;
public const uint WNODE_FLAG_ANSI_INSTANCENAMES = 16384;
public const uint WNODE_FLAG_METHOD_ITEM = 32768;
public const uint WNODE_FLAG_PDO_INSTANCE_NAMES = 65536;
public const uint WNODE_FLAG_TRACED_GUID = 131072;
public const uint WNODE_FLAG_LOG_WNODE = 262144;
public const uint WNODE_FLAG_USE_GUID_PTR = 524288;
public const uint WNODE_FLAG_USE_MOF_PTR = 1048576;
public const uint WNODE_FLAG_NO_HEADER = 2097152;
public const uint WNODE_FLAG_SEND_DATA_BLOCK = 4194304;
public const uint WNODE_FLAG_VERSIONED_PROPERTIES = 8388608;
public const uint WNODE_FLAG_SEVERITY_MASK = 4278190080;
public const uint WMIREG_FLAG_EXPENSIVE = 1;
public const uint WMIREG_FLAG_INSTANCE_LIST = 4;
public const uint WMIREG_FLAG_INSTANCE_BASENAME = 8;
public const uint WMIREG_FLAG_INSTANCE_PDO = 32;
public const uint WMIREG_FLAG_REMOVE_GUID = 65536;
public const uint WMIREG_FLAG_RESERVED1 = 131072;
public const uint WMIREG_FLAG_RESERVED2 = 262144;
public const uint WMIREG_FLAG_TRACED_GUID = 524288;
public const uint WMIREG_FLAG_TRACE_CONTROL_GUID = 4096;
public const uint WMIREG_FLAG_EVENT_ONLY_GUID = 64;
public const uint WMI_GUIDTYPE_TRACECONTROL = 0;
public const uint WMI_GUIDTYPE_TRACE = 1;
public const uint WMI_GUIDTYPE_DATA = 2;
public const uint WMI_GUIDTYPE_EVENT = 3;
public const uint WMIGUID_QUERY = 1;
public const uint WMIGUID_SET = 2;
public const uint WMIGUID_NOTIFICATION = 4;
public const uint WMIGUID_READ_DESCRIPTION = 8;
public const uint WMIGUID_EXECUTE = 16;
public const uint TRACELOG_CREATE_REALTIME = 32;
public const uint TRACELOG_CREATE_ONDISK = 64;
public const uint TRACELOG_GUID_ENABLE = 128;
public const uint TRACELOG_ACCESS_KERNEL_LOGGER = 256;
public const uint TRACELOG_LOG_EVENT = 512;
public const uint TRACELOG_CREATE_INPROC = 512;
public const uint TRACELOG_ACCESS_REALTIME = 1024;
public const uint TRACELOG_REGISTER_GUIDS = 2048;
public const uint TRACELOG_JOIN_GROUP = 4096;
public const uint WMI_GLOBAL_LOGGER_ID = 1;
public const uint MAX_PAYLOAD_PREDICATES = 8;
public const uint MAX_MOF_FIELDS = 16;
public const uint SYSTEM_EVENT_TYPE = 1;
public const uint EVENT_TRACE_TYPE_INFO = 0;
public const uint EVENT_TRACE_TYPE_START = 1;
public const uint EVENT_TRACE_TYPE_END = 2;
public const uint EVENT_TRACE_TYPE_STOP = 2;
public const uint EVENT_TRACE_TYPE_DC_START = 3;
public const uint EVENT_TRACE_TYPE_DC_END = 4;
public const uint EVENT_TRACE_TYPE_EXTENSION = 5;
public const uint EVENT_TRACE_TYPE_REPLY = 6;
public const uint EVENT_TRACE_TYPE_DEQUEUE = 7;
public const uint EVENT_TRACE_TYPE_RESUME = 7;
public const uint EVENT_TRACE_TYPE_CHECKPOINT = 8;
public const uint EVENT_TRACE_TYPE_SUSPEND = 8;
public const uint EVENT_TRACE_TYPE_WINEVT_SEND = 9;
public const uint EVENT_TRACE_TYPE_WINEVT_RECEIVE = 240;
public const uint TRACE_LEVEL_NONE = 0;
public const uint TRACE_LEVEL_CRITICAL = 1;
public const uint TRACE_LEVEL_FATAL = 1;
public const uint TRACE_LEVEL_ERROR = 2;
public const uint TRACE_LEVEL_WARNING = 3;
public const uint TRACE_LEVEL_INFORMATION = 4;
public const uint TRACE_LEVEL_VERBOSE = 5;
public const uint TRACE_LEVEL_RESERVED6 = 6;
public const uint TRACE_LEVEL_RESERVED7 = 7;
public const uint TRACE_LEVEL_RESERVED8 = 8;
public const uint TRACE_LEVEL_RESERVED9 = 9;
public const uint EVENT_TRACE_TYPE_LOAD = 10;
public const uint EVENT_TRACE_TYPE_TERMINATE = 11;
public const uint EVENT_TRACE_TYPE_IO_READ = 10;
public const uint EVENT_TRACE_TYPE_IO_WRITE = 11;
public const uint EVENT_TRACE_TYPE_IO_READ_INIT = 12;
public const uint EVENT_TRACE_TYPE_IO_WRITE_INIT = 13;
public const uint EVENT_TRACE_TYPE_IO_FLUSH = 14;
public const uint EVENT_TRACE_TYPE_IO_FLUSH_INIT = 15;
public const uint EVENT_TRACE_TYPE_IO_REDIRECTED_INIT = 16;
public const uint EVENT_TRACE_TYPE_MM_TF = 10;
public const uint EVENT_TRACE_TYPE_MM_DZF = 11;
public const uint EVENT_TRACE_TYPE_MM_COW = 12;
public const uint EVENT_TRACE_TYPE_MM_GPF = 13;
public const uint EVENT_TRACE_TYPE_MM_HPF = 14;
public const uint EVENT_TRACE_TYPE_MM_AV = 15;
public const uint EVENT_TRACE_TYPE_SEND = 10;
public const uint EVENT_TRACE_TYPE_RECEIVE = 11;
public const uint EVENT_TRACE_TYPE_CONNECT = 12;
public const uint EVENT_TRACE_TYPE_DISCONNECT = 13;
public const uint EVENT_TRACE_TYPE_RETRANSMIT = 14;
public const uint EVENT_TRACE_TYPE_ACCEPT = 15;
public const uint EVENT_TRACE_TYPE_RECONNECT = 16;
public const uint EVENT_TRACE_TYPE_CONNFAIL = 17;
public const uint EVENT_TRACE_TYPE_COPY_TCP = 18;
public const uint EVENT_TRACE_TYPE_COPY_ARP = 19;
public const uint EVENT_TRACE_TYPE_ACKFULL = 20;
public const uint EVENT_TRACE_TYPE_ACKPART = 21;
public const uint EVENT_TRACE_TYPE_ACKDUP = 22;
public const uint EVENT_TRACE_TYPE_GUIDMAP = 10;
public const uint EVENT_TRACE_TYPE_CONFIG = 11;
public const uint EVENT_TRACE_TYPE_SIDINFO = 12;
public const uint EVENT_TRACE_TYPE_SECURITY = 13;
public const uint EVENT_TRACE_TYPE_DBGID_RSDS = 64;
public const uint EVENT_TRACE_TYPE_REGCREATE = 10;
public const uint EVENT_TRACE_TYPE_REGOPEN = 11;
public const uint EVENT_TRACE_TYPE_REGDELETE = 12;
public const uint EVENT_TRACE_TYPE_REGQUERY = 13;
public const uint EVENT_TRACE_TYPE_REGSETVALUE = 14;
public const uint EVENT_TRACE_TYPE_REGDELETEVALUE = 15;
public const uint EVENT_TRACE_TYPE_REGQUERYVALUE = 16;
public const uint EVENT_TRACE_TYPE_REGENUMERATEKEY = 17;
public const uint EVENT_TRACE_TYPE_REGENUMERATEVALUEKEY = 18;
public const uint EVENT_TRACE_TYPE_REGQUERYMULTIPLEVALUE = 19;
public const uint EVENT_TRACE_TYPE_REGSETINFORMATION = 20;
public const uint EVENT_TRACE_TYPE_REGFLUSH = 21;
public const uint EVENT_TRACE_TYPE_REGKCBCREATE = 22;
public const uint EVENT_TRACE_TYPE_REGKCBDELETE = 23;
public const uint EVENT_TRACE_TYPE_REGKCBRUNDOWNBEGIN = 24;
public const uint EVENT_TRACE_TYPE_REGKCBRUNDOWNEND = 25;
public const uint EVENT_TRACE_TYPE_REGVIRTUALIZE = 26;
public const uint EVENT_TRACE_TYPE_REGCLOSE = 27;
public const uint EVENT_TRACE_TYPE_REGSETSECURITY = 28;
public const uint EVENT_TRACE_TYPE_REGQUERYSECURITY = 29;
public const uint EVENT_TRACE_TYPE_REGCOMMIT = 30;
public const uint EVENT_TRACE_TYPE_REGPREPARE = 31;
public const uint EVENT_TRACE_TYPE_REGROLLBACK = 32;
public const uint EVENT_TRACE_TYPE_REGMOUNTHIVE = 33;
public const uint EVENT_TRACE_TYPE_CONFIG_CPU = 10;
public const uint EVENT_TRACE_TYPE_CONFIG_PHYSICALDISK = 11;
public const uint EVENT_TRACE_TYPE_CONFIG_LOGICALDISK = 12;
public const uint EVENT_TRACE_TYPE_CONFIG_NIC = 13;
public const uint EVENT_TRACE_TYPE_CONFIG_VIDEO = 14;
public const uint EVENT_TRACE_TYPE_CONFIG_SERVICES = 15;
public const uint EVENT_TRACE_TYPE_CONFIG_POWER = 16;
public const uint EVENT_TRACE_TYPE_CONFIG_NETINFO = 17;
public const uint EVENT_TRACE_TYPE_CONFIG_OPTICALMEDIA = 18;
public const uint EVENT_TRACE_TYPE_CONFIG_PHYSICALDISK_EX = 19;
public const uint EVENT_TRACE_TYPE_CONFIG_IRQ = 21;
public const uint EVENT_TRACE_TYPE_CONFIG_PNP = 22;
public const uint EVENT_TRACE_TYPE_CONFIG_IDECHANNEL = 23;
public const uint EVENT_TRACE_TYPE_CONFIG_NUMANODE = 24;
public const uint EVENT_TRACE_TYPE_CONFIG_PLATFORM = 25;
public const uint EVENT_TRACE_TYPE_CONFIG_PROCESSORGROUP = 26;
public const uint EVENT_TRACE_TYPE_CONFIG_PROCESSORNUMBER = 27;
public const uint EVENT_TRACE_TYPE_CONFIG_DPI = 28;
public const uint EVENT_TRACE_TYPE_CONFIG_CI_INFO = 29;
public const uint EVENT_TRACE_TYPE_CONFIG_MACHINEID = 30;
public const uint EVENT_TRACE_TYPE_CONFIG_DEFRAG = 31;
public const uint EVENT_TRACE_TYPE_CONFIG_MOBILEPLATFORM = 32;
public const uint EVENT_TRACE_TYPE_CONFIG_DEVICEFAMILY = 33;
public const uint EVENT_TRACE_TYPE_CONFIG_FLIGHTID = 34;
public const uint EVENT_TRACE_TYPE_CONFIG_PROCESSOR = 35;
public const uint EVENT_TRACE_TYPE_CONFIG_VIRTUALIZATION = 36;
public const uint EVENT_TRACE_TYPE_CONFIG_BOOT = 37;
public const uint EVENT_TRACE_TYPE_OPTICAL_IO_READ = 55;
public const uint EVENT_TRACE_TYPE_OPTICAL_IO_WRITE = 56;
public const uint EVENT_TRACE_TYPE_OPTICAL_IO_FLUSH = 57;
public const uint EVENT_TRACE_TYPE_OPTICAL_IO_READ_INIT = 58;
public const uint EVENT_TRACE_TYPE_OPTICAL_IO_WRITE_INIT = 59;
public const uint EVENT_TRACE_TYPE_OPTICAL_IO_FLUSH_INIT = 60;
public const uint EVENT_TRACE_TYPE_FLT_PREOP_INIT = 96;
public const uint EVENT_TRACE_TYPE_FLT_POSTOP_INIT = 97;
public const uint EVENT_TRACE_TYPE_FLT_PREOP_COMPLETION = 98;
public const uint EVENT_TRACE_TYPE_FLT_POSTOP_COMPLETION = 99;
public const uint EVENT_TRACE_TYPE_FLT_PREOP_FAILURE = 100;
public const uint EVENT_TRACE_TYPE_FLT_POSTOP_FAILURE = 101;
public const uint EVENT_TRACE_FLAG_DEBUG_EVENTS = 4194304;
public const uint EVENT_TRACE_FLAG_EXTENSION = 2147483648;
public const uint EVENT_TRACE_FLAG_FORWARD_WMI = 1073741824;
public const uint EVENT_TRACE_FLAG_ENABLE_RESERVE = 536870912;
public const uint EVENT_TRACE_FILE_MODE_NONE = 0;
public const uint EVENT_TRACE_FILE_MODE_SEQUENTIAL = 1;
public const uint EVENT_TRACE_FILE_MODE_CIRCULAR = 2;
public const uint EVENT_TRACE_FILE_MODE_APPEND = 4;
public const uint EVENT_TRACE_REAL_TIME_MODE = 256;
public const uint EVENT_TRACE_DELAY_OPEN_FILE_MODE = 512;
public const uint EVENT_TRACE_BUFFERING_MODE = 1024;
public const uint EVENT_TRACE_PRIVATE_LOGGER_MODE = 2048;
public const uint EVENT_TRACE_ADD_HEADER_MODE = 4096;
public const uint EVENT_TRACE_USE_GLOBAL_SEQUENCE = 16384;
public const uint EVENT_TRACE_USE_LOCAL_SEQUENCE = 32768;
public const uint EVENT_TRACE_RELOG_MODE = 65536;
public const uint EVENT_TRACE_USE_PAGED_MEMORY = 16777216;
public const uint EVENT_TRACE_FILE_MODE_NEWFILE = 8;
public const uint EVENT_TRACE_FILE_MODE_PREALLOCATE = 32;
public const uint EVENT_TRACE_NONSTOPPABLE_MODE = 64;
public const uint EVENT_TRACE_SECURE_MODE = 128;
public const uint EVENT_TRACE_USE_KBYTES_FOR_SIZE = 8192;
public const uint EVENT_TRACE_PRIVATE_IN_PROC = 131072;
public const uint EVENT_TRACE_MODE_RESERVED = 1048576;
public const uint EVENT_TRACE_NO_PER_PROCESSOR_BUFFERING = 268435456;
public const uint EVENT_TRACE_SYSTEM_LOGGER_MODE = 33554432;
public const uint EVENT_TRACE_ADDTO_TRIAGE_DUMP = 2147483648;
public const uint EVENT_TRACE_STOP_ON_HYBRID_SHUTDOWN = 4194304;
public const uint EVENT_TRACE_PERSIST_ON_HYBRID_SHUTDOWN = 8388608;
public const uint EVENT_TRACE_INDEPENDENT_SESSION_MODE = 134217728;
public const uint EVENT_TRACE_COMPRESSED_MODE = 67108864;
public const uint EVENT_TRACE_CONTROL_INCREMENT_FILE = 4;
public const uint EVENT_TRACE_CONTROL_CONVERT_TO_REALTIME = 5;
public const uint TRACE_MESSAGE_PERFORMANCE_TIMESTAMP = 16;
public const uint TRACE_MESSAGE_POINTER32 = 64;
public const uint TRACE_MESSAGE_POINTER64 = 128;
public const uint TRACE_MESSAGE_FLAG_MASK = 65535;
public const uint EVENT_TRACE_USE_PROCTIME = 1;
public const uint EVENT_TRACE_USE_NOCPUTIME = 2;
public const uint TRACE_HEADER_FLAG_USE_TIMESTAMP = 512;
public const uint TRACE_HEADER_FLAG_TRACED_GUID = 131072;
public const uint TRACE_HEADER_FLAG_LOG_WNODE = 262144;
public const uint TRACE_HEADER_FLAG_USE_GUID_PTR = 524288;
public const uint TRACE_HEADER_FLAG_USE_MOF_PTR = 1048576;
public const ulong SYSTEM_ALPC_KW_GENERAL = 1;
public const ulong SYSTEM_CONFIG_KW_SYSTEM = 1;
public const ulong SYSTEM_CONFIG_KW_GRAPHICS = 2;
public const ulong SYSTEM_CONFIG_KW_STORAGE = 4;
public const ulong SYSTEM_CONFIG_KW_NETWORK = 8;
public const ulong SYSTEM_CONFIG_KW_SERVICES = 16;
public const ulong SYSTEM_CONFIG_KW_PNP = 32;
public const ulong SYSTEM_CONFIG_KW_OPTICAL = 64;
public const ulong SYSTEM_CPU_KW_CONFIG = 1;
public const ulong SYSTEM_CPU_KW_CACHE_FLUSH = 2;
public const ulong SYSTEM_CPU_KW_SPEC_CONTROL = 4;
public const ulong SYSTEM_CPU_KW_DOMAIN_CHANGE = 8;
public const ulong SYSTEM_HYPERVISOR_KW_PROFILE = 1;
public const ulong SYSTEM_HYPERVISOR_KW_CALLOUTS = 2;
public const ulong SYSTEM_HYPERVISOR_KW_VTL_CHANGE = 4;
public const ulong SYSTEM_INTERRUPT_KW_GENERAL = 1;
public const ulong SYSTEM_INTERRUPT_KW_CLOCK_INTERRUPT = 2;
public const ulong SYSTEM_INTERRUPT_KW_DPC = 4;
public const ulong SYSTEM_INTERRUPT_KW_DPC_QUEUE = 8;
public const ulong SYSTEM_INTERRUPT_KW_WDF_DPC = 16;
public const ulong SYSTEM_INTERRUPT_KW_WDF_INTERRUPT = 32;
public const ulong SYSTEM_INTERRUPT_KW_IPI = 64;
public const ulong SYSTEM_IO_KW_DISK = 1;
public const ulong SYSTEM_IO_KW_DISK_INIT = 2;
public const ulong SYSTEM_IO_KW_FILENAME = 4;
public const ulong SYSTEM_IO_KW_SPLIT = 8;
public const ulong SYSTEM_IO_KW_FILE = 16;
public const ulong SYSTEM_IO_KW_OPTICAL = 32;
public const ulong SYSTEM_IO_KW_OPTICAL_INIT = 64;
public const ulong SYSTEM_IO_KW_DRIVERS = 128;
public const ulong SYSTEM_IO_KW_CC = 256;
public const ulong SYSTEM_IO_KW_NETWORK = 512;
public const ulong SYSTEM_IO_KW_FILE_INIT = 1024;
public const ulong SYSTEM_IO_KW_TIMER = 2048;
public const ulong SYSTEM_IOFILTER_KW_GENERAL = 1;
public const ulong SYSTEM_IOFILTER_KW_INIT = 2;
public const ulong SYSTEM_IOFILTER_KW_FASTIO = 4;
public const ulong SYSTEM_IOFILTER_KW_FAILURE = 8;
public const ulong SYSTEM_LOCK_KW_SPINLOCK = 1;
public const ulong SYSTEM_LOCK_KW_SPINLOCK_COUNTERS = 2;
public const ulong SYSTEM_LOCK_KW_SYNC_OBJECTS = 4;
public const ulong SYSTEM_MEMORY_KW_GENERAL = 1;
public const ulong SYSTEM_MEMORY_KW_HARD_FAULTS = 2;
public const ulong SYSTEM_MEMORY_KW_ALL_FAULTS = 4;
public const ulong SYSTEM_MEMORY_KW_POOL = 8;
public const ulong SYSTEM_MEMORY_KW_MEMINFO = 16;
public const ulong SYSTEM_MEMORY_KW_PFSECTION = 32;
public const ulong SYSTEM_MEMORY_KW_MEMINFO_WS = 64;
public const ulong SYSTEM_MEMORY_KW_HEAP = 128;
public const ulong SYSTEM_MEMORY_KW_WS = 256;
public const ulong SYSTEM_MEMORY_KW_CONTMEM_GEN = 512;
public const ulong SYSTEM_MEMORY_KW_VIRTUAL_ALLOC = 1024;
public const ulong SYSTEM_MEMORY_KW_FOOTPRINT = 2048;
public const ulong SYSTEM_MEMORY_KW_SESSION = 4096;
public const ulong SYSTEM_MEMORY_KW_REFSET = 8192;
public const ulong SYSTEM_MEMORY_KW_VAMAP = 16384;
public const ulong SYSTEM_MEMORY_KW_NONTRADEABLE = 32768;
public const ulong SYSTEM_OBJECT_KW_GENERAL = 1;
public const ulong SYSTEM_OBJECT_KW_HANDLE = 2;
public const ulong SYSTEM_POWER_KW_GENERAL = 1;
public const ulong SYSTEM_POWER_KW_HIBER_RUNDOWN = 2;
public const ulong SYSTEM_POWER_KW_PROCESSOR_IDLE = 4;
public const ulong SYSTEM_POWER_KW_IDLE_SELECTION = 8;
public const ulong SYSTEM_POWER_KW_PPM_EXIT_LATENCY = 16;
public const ulong SYSTEM_PROCESS_KW_GENERAL = 1;
public const ulong SYSTEM_PROCESS_KW_INSWAP = 2;
public const ulong SYSTEM_PROCESS_KW_FREEZE = 4;
public const ulong SYSTEM_PROCESS_KW_PERF_COUNTER = 8;
public const ulong SYSTEM_PROCESS_KW_WAKE_COUNTER = 16;
public const ulong SYSTEM_PROCESS_KW_WAKE_DROP = 32;
public const ulong SYSTEM_PROCESS_KW_WAKE_EVENT = 64;
public const ulong SYSTEM_PROCESS_KW_DEBUG_EVENTS = 128;
public const ulong SYSTEM_PROCESS_KW_DBGPRINT = 256;
public const ulong SYSTEM_PROCESS_KW_JOB = 512;
public const ulong SYSTEM_PROCESS_KW_WORKER_THREAD = 1024;
public const ulong SYSTEM_PROCESS_KW_THREAD = 2048;
public const ulong SYSTEM_PROCESS_KW_LOADER = 4096;
public const ulong SYSTEM_PROFILE_KW_GENERAL = 1;
public const ulong SYSTEM_PROFILE_KW_PMC_PROFILE = 2;
public const ulong SYSTEM_REGISTRY_KW_GENERAL = 1;
public const ulong SYSTEM_REGISTRY_KW_HIVE = 2;
public const ulong SYSTEM_REGISTRY_KW_NOTIFICATION = 4;
public const ulong SYSTEM_SCHEDULER_KW_XSCHEDULER = 1;
public const ulong SYSTEM_SCHEDULER_KW_DISPATCHER = 2;
public const ulong SYSTEM_SCHEDULER_KW_KERNEL_QUEUE = 4;
public const ulong SYSTEM_SCHEDULER_KW_SHOULD_YIELD = 8;
public const ulong SYSTEM_SCHEDULER_KW_ANTI_STARVATION = 16;
public const ulong SYSTEM_SCHEDULER_KW_LOAD_BALANCER = 32;
public const ulong SYSTEM_SCHEDULER_KW_AFFINITY = 64;
public const ulong SYSTEM_SCHEDULER_KW_PRIORITY = 128;
public const ulong SYSTEM_SCHEDULER_KW_IDEAL_PROCESSOR = 256;
public const ulong SYSTEM_SCHEDULER_KW_CONTEXT_SWITCH = 512;
public const ulong SYSTEM_SCHEDULER_KW_COMPACT_CSWITCH = 1024;
public const ulong SYSTEM_SCHEDULER_KW_SCHEDULE_THREAD = 2048;
public const ulong SYSTEM_SCHEDULER_KW_READY_QUEUE = 4096;
public const ulong SYSTEM_SCHEDULER_KW_CPU_PARTITION = 8192;
public const ulong SYSTEM_SCHEDULER_KW_THREAD_FEEDBACK_READ = 16384;
public const ulong SYSTEM_SCHEDULER_KW_WORKLOAD_CLASS_UPDATE = 32768;
public const ulong SYSTEM_SCHEDULER_KW_AUTOBOOST = 65536;
public const ulong SYSTEM_SYSCALL_KW_GENERAL = 1;
public const ulong SYSTEM_TIMER_KW_GENERAL = 1;
public const ulong SYSTEM_TIMER_KW_CLOCK_TIMER = 2;
public const uint SYSTEM_MEMORY_POOL_FILTER_ID = 1;
public const uint _typedef_TRACELOGGER_HANDLE = 1;
public const uint ETW_NULL_TYPE_VALUE = 0;
public const uint ETW_OBJECT_TYPE_VALUE = 1;
public const uint ETW_STRING_TYPE_VALUE = 2;
public const uint ETW_SBYTE_TYPE_VALUE = 3;
public const uint ETW_BYTE_TYPE_VALUE = 4;
public const uint ETW_INT16_TYPE_VALUE = 5;
public const uint ETW_UINT16_TYPE_VALUE = 6;
public const uint ETW_INT32_TYPE_VALUE = 7;
public const uint ETW_UINT32_TYPE_VALUE = 8;
public const uint ETW_INT64_TYPE_VALUE = 9;
public const uint ETW_UINT64_TYPE_VALUE = 10;
public const uint ETW_CHAR_TYPE_VALUE = 11;
public const uint ETW_SINGLE_TYPE_VALUE = 12;
public const uint ETW_DOUBLE_TYPE_VALUE = 13;
public const uint ETW_BOOLEAN_TYPE_VALUE = 14;
public const uint ETW_DECIMAL_TYPE_VALUE = 15;
public const uint ETW_GUID_TYPE_VALUE = 101;
public const uint ETW_ASCIICHAR_TYPE_VALUE = 102;
public const uint ETW_ASCIISTRING_TYPE_VALUE = 103;
public const uint ETW_COUNTED_STRING_TYPE_VALUE = 104;
public const uint ETW_POINTER_TYPE_VALUE = 105;
public const uint ETW_SIZET_TYPE_VALUE = 106;
public const uint ETW_HIDDEN_TYPE_VALUE = 107;
public const uint ETW_BOOL_TYPE_VALUE = 108;
public const uint ETW_COUNTED_ANSISTRING_TYPE_VALUE = 109;
public const uint ETW_REVERSED_COUNTED_STRING_TYPE_VALUE = 110;
public const uint ETW_REVERSED_COUNTED_ANSISTRING_TYPE_VALUE = 111;
public const uint ETW_NON_NULL_TERMINATED_STRING_TYPE_VALUE = 112;
public const uint ETW_REDUCED_ANSISTRING_TYPE_VALUE = 113;
public const uint ETW_REDUCED_STRING_TYPE_VALUE = 114;
public const uint ETW_SID_TYPE_VALUE = 115;
public const uint ETW_VARIANT_TYPE_VALUE = 116;
public const uint ETW_PTVECTOR_TYPE_VALUE = 117;
public const uint ETW_WMITIME_TYPE_VALUE = 118;
public const uint ETW_DATETIME_TYPE_VALUE = 119;
public const uint ETW_REFRENCE_TYPE_VALUE = 120;
public const uint TRACE_PROVIDER_FLAG_LEGACY = 1;
public const uint TRACE_PROVIDER_FLAG_PRE_ENABLE = 2;
public const uint TRACE_LBR_EVENT_OPCODE = 32;
public const uint TRACE_LBR_MAXIMUM_EVENTS = 4;
public const uint ENABLE_TRACE_PARAMETERS_VERSION = 1;
public const uint ENABLE_TRACE_PARAMETERS_VERSION_2 = 2;
public const uint EVENT_MIN_LEVEL = 0;
public const uint EVENT_MAX_LEVEL = 255;
public const uint EVENT_ACTIVITY_CTRL_GET_ID = 1;
public const uint EVENT_ACTIVITY_CTRL_SET_ID = 2;
public const uint EVENT_ACTIVITY_CTRL_CREATE_ID = 3;
public const uint EVENT_ACTIVITY_CTRL_GET_SET_ID = 4;
public const uint EVENT_ACTIVITY_CTRL_CREATE_SET_ID = 5;
public const uint MAX_EVENT_DATA_DESCRIPTORS = 128;
public const uint MAX_EVENT_FILTER_DATA_SIZE = 1024;
public const uint MAX_EVENT_FILTER_PAYLOAD_SIZE = 4096;
public const uint MAX_EVENT_FILTER_EVENT_NAME_SIZE = 4096;
public const uint MAX_EVENT_FILTERS_COUNT = 13;
public const uint MAX_EVENT_FILTER_PID_COUNT = 8;
public const uint MAX_EVENT_FILTER_EVENT_ID_COUNT = 64;
public const uint EVENT_FILTER_TYPE_NONE = 0;
public const uint EVENT_FILTER_TYPE_SCHEMATIZED = 2147483648;
public const uint EVENT_FILTER_TYPE_SYSTEM_FLAGS = 2147483649;
public const uint EVENT_FILTER_TYPE_TRACEHANDLE = 2147483650;
public const uint EVENT_FILTER_TYPE_PID = 2147483652;
public const uint EVENT_FILTER_TYPE_EXECUTABLE_NAME = 2147483656;
public const uint EVENT_FILTER_TYPE_PACKAGE_ID = 2147483664;
public const uint EVENT_FILTER_TYPE_PACKAGE_APP_ID = 2147483680;
public const uint EVENT_FILTER_TYPE_PAYLOAD = 2147483904;
public const uint EVENT_FILTER_TYPE_EVENT_ID = 2147484160;
public const uint EVENT_FILTER_TYPE_EVENT_NAME = 2147484672;
public const uint EVENT_FILTER_TYPE_STACKWALK = 2147487744;
public const uint EVENT_FILTER_TYPE_STACKWALK_NAME = 2147491840;
public const uint EVENT_FILTER_TYPE_STACKWALK_LEVEL_KW = 2147500032;
public const uint EVENT_FILTER_TYPE_CONTAINER = 2147516416;
public const uint EVENT_DATA_DESCRIPTOR_TYPE_NONE = 0;
public const uint EVENT_DATA_DESCRIPTOR_TYPE_EVENT_METADATA = 1;
public const uint EVENT_DATA_DESCRIPTOR_TYPE_PROVIDER_METADATA = 2;
public const uint EVENT_DATA_DESCRIPTOR_TYPE_TIMESTAMP_OVERRIDE = 3;
public const uint EVENT_WRITE_FLAG_NO_FAULTING = 1;
public const uint EVENT_WRITE_FLAG_INPRIVATE = 2;
public const uint EVENT_HEADER_EXT_TYPE_RELATED_ACTIVITYID = 1;
public const uint EVENT_HEADER_EXT_TYPE_SID = 2;
public const uint EVENT_HEADER_EXT_TYPE_TS_ID = 3;
public const uint EVENT_HEADER_EXT_TYPE_INSTANCE_INFO = 4;
public const uint EVENT_HEADER_EXT_TYPE_STACK_TRACE32 = 5;
public const uint EVENT_HEADER_EXT_TYPE_STACK_TRACE64 = 6;
public const uint EVENT_HEADER_EXT_TYPE_PEBS_INDEX = 7;
public const uint EVENT_HEADER_EXT_TYPE_PMC_COUNTERS = 8;
public const uint EVENT_HEADER_EXT_TYPE_PSM_KEY = 9;
public const uint EVENT_HEADER_EXT_TYPE_EVENT_KEY = 10;
public const uint EVENT_HEADER_EXT_TYPE_EVENT_SCHEMA_TL = 11;
public const uint EVENT_HEADER_EXT_TYPE_PROV_TRAITS = 12;
public const uint EVENT_HEADER_EXT_TYPE_PROCESS_START_KEY = 13;
public const uint EVENT_HEADER_EXT_TYPE_CONTROL_GUID = 14;
public const uint EVENT_HEADER_EXT_TYPE_QPC_DELTA = 15;
public const uint EVENT_HEADER_EXT_TYPE_CONTAINER_ID = 16;
public const uint EVENT_HEADER_EXT_TYPE_STACK_KEY32 = 17;
public const uint EVENT_HEADER_EXT_TYPE_STACK_KEY64 = 18;
public const uint EVENT_HEADER_EXT_TYPE_MAX = 19;
public const uint EVENT_HEADER_PROPERTY_XML = 1;
public const uint EVENT_HEADER_PROPERTY_FORWARDED_XML = 2;
public const uint EVENT_HEADER_PROPERTY_LEGACY_EVENTLOG = 4;
public const uint EVENT_HEADER_PROPERTY_RELOGGABLE = 8;
public const uint EVENT_HEADER_FLAG_EXTENDED_INFO = 1;
public const uint EVENT_HEADER_FLAG_PRIVATE_SESSION = 2;
public const uint EVENT_HEADER_FLAG_STRING_ONLY = 4;
public const uint EVENT_HEADER_FLAG_TRACE_MESSAGE = 8;
public const uint EVENT_HEADER_FLAG_NO_CPUTIME = 16;
public const uint EVENT_HEADER_FLAG_32_BIT_HEADER = 32;
public const uint EVENT_HEADER_FLAG_64_BIT_HEADER = 64;
public const uint EVENT_HEADER_FLAG_DECODE_GUID = 128;
public const uint EVENT_HEADER_FLAG_CLASSIC_HEADER = 256;
public const uint EVENT_HEADER_FLAG_PROCESSOR_INDEX = 512;
public const uint EVENT_ENABLE_PROPERTY_SID = 1;
public const uint EVENT_ENABLE_PROPERTY_TS_ID = 2;
public const uint EVENT_ENABLE_PROPERTY_STACK_TRACE = 4;
public const uint EVENT_ENABLE_PROPERTY_PSM_KEY = 8;
public const uint EVENT_ENABLE_PROPERTY_IGNORE_KEYWORD_0 = 16;
public const uint EVENT_ENABLE_PROPERTY_PROVIDER_GROUP = 32;
public const uint EVENT_ENABLE_PROPERTY_ENABLE_KEYWORD_0 = 64;
public const uint EVENT_ENABLE_PROPERTY_PROCESS_START_KEY = 128;
public const uint EVENT_ENABLE_PROPERTY_EVENT_KEY = 256;
public const uint EVENT_ENABLE_PROPERTY_EXCLUDE_INPRIVATE = 512;
public const uint EVENT_ENABLE_PROPERTY_ENABLE_SILOS = 1024;
public const uint EVENT_ENABLE_PROPERTY_SOURCE_CONTAINER_TRACKING = 2048;
public const uint PROCESS_TRACE_MODE_REAL_TIME = 256;
public const uint PROCESS_TRACE_MODE_RAW_TIMESTAMP = 4096;
public const uint PROCESS_TRACE_MODE_EVENT_RECORD = 268435456;

WNODE_FLAG_ALL_DATA = 1
WNODE_FLAG_SINGLE_INSTANCE = 2
WNODE_FLAG_SINGLE_ITEM = 4
WNODE_FLAG_EVENT_ITEM = 8
WNODE_FLAG_FIXED_INSTANCE_SIZE = 16
WNODE_FLAG_TOO_SMALL = 32
WNODE_FLAG_INSTANCES_SAME = 64
WNODE_FLAG_STATIC_INSTANCE_NAMES = 128
WNODE_FLAG_INTERNAL = 256
WNODE_FLAG_USE_TIMESTAMP = 512
WNODE_FLAG_PERSIST_EVENT = 1024
WNODE_FLAG_EVENT_REFERENCE = 8192
WNODE_FLAG_ANSI_INSTANCENAMES = 16384
WNODE_FLAG_METHOD_ITEM = 32768
WNODE_FLAG_PDO_INSTANCE_NAMES = 65536
WNODE_FLAG_TRACED_GUID = 131072
WNODE_FLAG_LOG_WNODE = 262144
WNODE_FLAG_USE_GUID_PTR = 524288
WNODE_FLAG_USE_MOF_PTR = 1048576
WNODE_FLAG_NO_HEADER = 2097152
WNODE_FLAG_SEND_DATA_BLOCK = 4194304
WNODE_FLAG_VERSIONED_PROPERTIES = 8388608
WNODE_FLAG_SEVERITY_MASK = 4278190080
WMIREG_FLAG_EXPENSIVE = 1
WMIREG_FLAG_INSTANCE_LIST = 4
WMIREG_FLAG_INSTANCE_BASENAME = 8
WMIREG_FLAG_INSTANCE_PDO = 32
WMIREG_FLAG_REMOVE_GUID = 65536
WMIREG_FLAG_RESERVED1 = 131072
WMIREG_FLAG_RESERVED2 = 262144
WMIREG_FLAG_TRACED_GUID = 524288
WMIREG_FLAG_TRACE_CONTROL_GUID = 4096
WMIREG_FLAG_EVENT_ONLY_GUID = 64
WMI_GUIDTYPE_TRACECONTROL = 0
WMI_GUIDTYPE_TRACE = 1
WMI_GUIDTYPE_DATA = 2
WMI_GUIDTYPE_EVENT = 3
WMIGUID_QUERY = 1
WMIGUID_SET = 2
WMIGUID_NOTIFICATION = 4
WMIGUID_READ_DESCRIPTION = 8
WMIGUID_EXECUTE = 16
TRACELOG_CREATE_REALTIME = 32
TRACELOG_CREATE_ONDISK = 64
TRACELOG_GUID_ENABLE = 128
TRACELOG_ACCESS_KERNEL_LOGGER = 256
TRACELOG_LOG_EVENT = 512
TRACELOG_CREATE_INPROC = 512
TRACELOG_ACCESS_REALTIME = 1024
TRACELOG_REGISTER_GUIDS = 2048
TRACELOG_JOIN_GROUP = 4096
WMI_GLOBAL_LOGGER_ID = 1
MAX_PAYLOAD_PREDICATES = 8
MAX_MOF_FIELDS = 16
SYSTEM_EVENT_TYPE = 1
EVENT_TRACE_TYPE_INFO = 0
EVENT_TRACE_TYPE_START = 1
EVENT_TRACE_TYPE_END = 2
EVENT_TRACE_TYPE_STOP = 2
EVENT_TRACE_TYPE_DC_START = 3
EVENT_TRACE_TYPE_DC_END = 4
EVENT_TRACE_TYPE_EXTENSION = 5
EVENT_TRACE_TYPE_REPLY = 6
EVENT_TRACE_TYPE_DEQUEUE = 7
EVENT_TRACE_TYPE_RESUME = 7
EVENT_TRACE_TYPE_CHECKPOINT = 8
EVENT_TRACE_TYPE_SUSPEND = 8
EVENT_TRACE_TYPE_WINEVT_SEND = 9
EVENT_TRACE_TYPE_WINEVT_RECEIVE = 240
TRACE_LEVEL_NONE = 0
TRACE_LEVEL_CRITICAL = 1
TRACE_LEVEL_FATAL = 1
TRACE_LEVEL_ERROR = 2
TRACE_LEVEL_WARNING = 3
TRACE_LEVEL_INFORMATION = 4
TRACE_LEVEL_VERBOSE = 5
TRACE_LEVEL_RESERVED6 = 6
TRACE_LEVEL_RESERVED7 = 7
TRACE_LEVEL_RESERVED8 = 8
TRACE_LEVEL_RESERVED9 = 9
EVENT_TRACE_TYPE_LOAD = 10
EVENT_TRACE_TYPE_TERMINATE = 11
EVENT_TRACE_TYPE_IO_READ = 10
EVENT_TRACE_TYPE_IO_WRITE = 11
EVENT_TRACE_TYPE_IO_READ_INIT = 12
EVENT_TRACE_TYPE_IO_WRITE_INIT = 13
EVENT_TRACE_TYPE_IO_FLUSH = 14
EVENT_TRACE_TYPE_IO_FLUSH_INIT = 15
EVENT_TRACE_TYPE_IO_REDIRECTED_INIT = 16
EVENT_TRACE_TYPE_MM_TF = 10
EVENT_TRACE_TYPE_MM_DZF = 11
EVENT_TRACE_TYPE_MM_COW = 12
EVENT_TRACE_TYPE_MM_GPF = 13
EVENT_TRACE_TYPE_MM_HPF = 14
EVENT_TRACE_TYPE_MM_AV = 15
EVENT_TRACE_TYPE_SEND = 10
EVENT_TRACE_TYPE_RECEIVE = 11
EVENT_TRACE_TYPE_CONNECT = 12
EVENT_TRACE_TYPE_DISCONNECT = 13
EVENT_TRACE_TYPE_RETRANSMIT = 14
EVENT_TRACE_TYPE_ACCEPT = 15
EVENT_TRACE_TYPE_RECONNECT = 16
EVENT_TRACE_TYPE_CONNFAIL = 17
EVENT_TRACE_TYPE_COPY_TCP = 18
EVENT_TRACE_TYPE_COPY_ARP = 19
EVENT_TRACE_TYPE_ACKFULL = 20
EVENT_TRACE_TYPE_ACKPART = 21
EVENT_TRACE_TYPE_ACKDUP = 22
EVENT_TRACE_TYPE_GUIDMAP = 10
EVENT_TRACE_TYPE_CONFIG = 11
EVENT_TRACE_TYPE_SIDINFO = 12
EVENT_TRACE_TYPE_SECURITY = 13
EVENT_TRACE_TYPE_DBGID_RSDS = 64
EVENT_TRACE_TYPE_REGCREATE = 10
EVENT_TRACE_TYPE_REGOPEN = 11
EVENT_TRACE_TYPE_REGDELETE = 12
EVENT_TRACE_TYPE_REGQUERY = 13
EVENT_TRACE_TYPE_REGSETVALUE = 14
EVENT_TRACE_TYPE_REGDELETEVALUE = 15
EVENT_TRACE_TYPE_REGQUERYVALUE = 16
EVENT_TRACE_TYPE_REGENUMERATEKEY = 17
EVENT_TRACE_TYPE_REGENUMERATEVALUEKEY = 18
EVENT_TRACE_TYPE_REGQUERYMULTIPLEVALUE = 19
EVENT_TRACE_TYPE_REGSETINFORMATION = 20
EVENT_TRACE_TYPE_REGFLUSH = 21
EVENT_TRACE_TYPE_REGKCBCREATE = 22
EVENT_TRACE_TYPE_REGKCBDELETE = 23
EVENT_TRACE_TYPE_REGKCBRUNDOWNBEGIN = 24
EVENT_TRACE_TYPE_REGKCBRUNDOWNEND = 25
EVENT_TRACE_TYPE_REGVIRTUALIZE = 26
EVENT_TRACE_TYPE_REGCLOSE = 27
EVENT_TRACE_TYPE_REGSETSECURITY = 28
EVENT_TRACE_TYPE_REGQUERYSECURITY = 29
EVENT_TRACE_TYPE_REGCOMMIT = 30
EVENT_TRACE_TYPE_REGPREPARE = 31
EVENT_TRACE_TYPE_REGROLLBACK = 32
EVENT_TRACE_TYPE_REGMOUNTHIVE = 33
EVENT_TRACE_TYPE_CONFIG_CPU = 10
EVENT_TRACE_TYPE_CONFIG_PHYSICALDISK = 11
EVENT_TRACE_TYPE_CONFIG_LOGICALDISK = 12
EVENT_TRACE_TYPE_CONFIG_NIC = 13
EVENT_TRACE_TYPE_CONFIG_VIDEO = 14
EVENT_TRACE_TYPE_CONFIG_SERVICES = 15
EVENT_TRACE_TYPE_CONFIG_POWER = 16
EVENT_TRACE_TYPE_CONFIG_NETINFO = 17
EVENT_TRACE_TYPE_CONFIG_OPTICALMEDIA = 18
EVENT_TRACE_TYPE_CONFIG_PHYSICALDISK_EX = 19
EVENT_TRACE_TYPE_CONFIG_IRQ = 21
EVENT_TRACE_TYPE_CONFIG_PNP = 22
EVENT_TRACE_TYPE_CONFIG_IDECHANNEL = 23
EVENT_TRACE_TYPE_CONFIG_NUMANODE = 24
EVENT_TRACE_TYPE_CONFIG_PLATFORM = 25
EVENT_TRACE_TYPE_CONFIG_PROCESSORGROUP = 26
EVENT_TRACE_TYPE_CONFIG_PROCESSORNUMBER = 27
EVENT_TRACE_TYPE_CONFIG_DPI = 28
EVENT_TRACE_TYPE_CONFIG_CI_INFO = 29
EVENT_TRACE_TYPE_CONFIG_MACHINEID = 30
EVENT_TRACE_TYPE_CONFIG_DEFRAG = 31
EVENT_TRACE_TYPE_CONFIG_MOBILEPLATFORM = 32
EVENT_TRACE_TYPE_CONFIG_DEVICEFAMILY = 33
EVENT_TRACE_TYPE_CONFIG_FLIGHTID = 34
EVENT_TRACE_TYPE_CONFIG_PROCESSOR = 35
EVENT_TRACE_TYPE_CONFIG_VIRTUALIZATION = 36
EVENT_TRACE_TYPE_CONFIG_BOOT = 37
EVENT_TRACE_TYPE_OPTICAL_IO_READ = 55
EVENT_TRACE_TYPE_OPTICAL_IO_WRITE = 56
EVENT_TRACE_TYPE_OPTICAL_IO_FLUSH = 57
EVENT_TRACE_TYPE_OPTICAL_IO_READ_INIT = 58
EVENT_TRACE_TYPE_OPTICAL_IO_WRITE_INIT = 59
EVENT_TRACE_TYPE_OPTICAL_IO_FLUSH_INIT = 60
EVENT_TRACE_TYPE_FLT_PREOP_INIT = 96
EVENT_TRACE_TYPE_FLT_POSTOP_INIT = 97
EVENT_TRACE_TYPE_FLT_PREOP_COMPLETION = 98
EVENT_TRACE_TYPE_FLT_POSTOP_COMPLETION = 99
EVENT_TRACE_TYPE_FLT_PREOP_FAILURE = 100
EVENT_TRACE_TYPE_FLT_POSTOP_FAILURE = 101
EVENT_TRACE_FLAG_DEBUG_EVENTS = 4194304
EVENT_TRACE_FLAG_EXTENSION = 2147483648
EVENT_TRACE_FLAG_FORWARD_WMI = 1073741824
EVENT_TRACE_FLAG_ENABLE_RESERVE = 536870912
EVENT_TRACE_FILE_MODE_NONE = 0
EVENT_TRACE_FILE_MODE_SEQUENTIAL = 1
EVENT_TRACE_FILE_MODE_CIRCULAR = 2
EVENT_TRACE_FILE_MODE_APPEND = 4
EVENT_TRACE_REAL_TIME_MODE = 256
EVENT_TRACE_DELAY_OPEN_FILE_MODE = 512
EVENT_TRACE_BUFFERING_MODE = 1024
EVENT_TRACE_PRIVATE_LOGGER_MODE = 2048
EVENT_TRACE_ADD_HEADER_MODE = 4096
EVENT_TRACE_USE_GLOBAL_SEQUENCE = 16384
EVENT_TRACE_USE_LOCAL_SEQUENCE = 32768
EVENT_TRACE_RELOG_MODE = 65536
EVENT_TRACE_USE_PAGED_MEMORY = 16777216
EVENT_TRACE_FILE_MODE_NEWFILE = 8
EVENT_TRACE_FILE_MODE_PREALLOCATE = 32
EVENT_TRACE_NONSTOPPABLE_MODE = 64
EVENT_TRACE_SECURE_MODE = 128
EVENT_TRACE_USE_KBYTES_FOR_SIZE = 8192
EVENT_TRACE_PRIVATE_IN_PROC = 131072
EVENT_TRACE_MODE_RESERVED = 1048576
EVENT_TRACE_NO_PER_PROCESSOR_BUFFERING = 268435456
EVENT_TRACE_SYSTEM_LOGGER_MODE = 33554432
EVENT_TRACE_ADDTO_TRIAGE_DUMP = 2147483648
EVENT_TRACE_STOP_ON_HYBRID_SHUTDOWN = 4194304
EVENT_TRACE_PERSIST_ON_HYBRID_SHUTDOWN = 8388608
EVENT_TRACE_INDEPENDENT_SESSION_MODE = 134217728
EVENT_TRACE_COMPRESSED_MODE = 67108864
EVENT_TRACE_CONTROL_INCREMENT_FILE = 4
EVENT_TRACE_CONTROL_CONVERT_TO_REALTIME = 5
TRACE_MESSAGE_PERFORMANCE_TIMESTAMP = 16
TRACE_MESSAGE_POINTER32 = 64
TRACE_MESSAGE_POINTER64 = 128
TRACE_MESSAGE_FLAG_MASK = 65535
EVENT_TRACE_USE_PROCTIME = 1
EVENT_TRACE_USE_NOCPUTIME = 2
TRACE_HEADER_FLAG_USE_TIMESTAMP = 512
TRACE_HEADER_FLAG_TRACED_GUID = 131072
TRACE_HEADER_FLAG_LOG_WNODE = 262144
TRACE_HEADER_FLAG_USE_GUID_PTR = 524288
TRACE_HEADER_FLAG_USE_MOF_PTR = 1048576
SYSTEM_ALPC_KW_GENERAL = 1
SYSTEM_CONFIG_KW_SYSTEM = 1
SYSTEM_CONFIG_KW_GRAPHICS = 2
SYSTEM_CONFIG_KW_STORAGE = 4
SYSTEM_CONFIG_KW_NETWORK = 8
SYSTEM_CONFIG_KW_SERVICES = 16
SYSTEM_CONFIG_KW_PNP = 32
SYSTEM_CONFIG_KW_OPTICAL = 64
SYSTEM_CPU_KW_CONFIG = 1
SYSTEM_CPU_KW_CACHE_FLUSH = 2
SYSTEM_CPU_KW_SPEC_CONTROL = 4
SYSTEM_CPU_KW_DOMAIN_CHANGE = 8
SYSTEM_HYPERVISOR_KW_PROFILE = 1
SYSTEM_HYPERVISOR_KW_CALLOUTS = 2
SYSTEM_HYPERVISOR_KW_VTL_CHANGE = 4
SYSTEM_INTERRUPT_KW_GENERAL = 1
SYSTEM_INTERRUPT_KW_CLOCK_INTERRUPT = 2
SYSTEM_INTERRUPT_KW_DPC = 4
SYSTEM_INTERRUPT_KW_DPC_QUEUE = 8
SYSTEM_INTERRUPT_KW_WDF_DPC = 16
SYSTEM_INTERRUPT_KW_WDF_INTERRUPT = 32
SYSTEM_INTERRUPT_KW_IPI = 64
SYSTEM_IO_KW_DISK = 1
SYSTEM_IO_KW_DISK_INIT = 2
SYSTEM_IO_KW_FILENAME = 4
SYSTEM_IO_KW_SPLIT = 8
SYSTEM_IO_KW_FILE = 16
SYSTEM_IO_KW_OPTICAL = 32
SYSTEM_IO_KW_OPTICAL_INIT = 64
SYSTEM_IO_KW_DRIVERS = 128
SYSTEM_IO_KW_CC = 256
SYSTEM_IO_KW_NETWORK = 512
SYSTEM_IO_KW_FILE_INIT = 1024
SYSTEM_IO_KW_TIMER = 2048
SYSTEM_IOFILTER_KW_GENERAL = 1
SYSTEM_IOFILTER_KW_INIT = 2
SYSTEM_IOFILTER_KW_FASTIO = 4
SYSTEM_IOFILTER_KW_FAILURE = 8
SYSTEM_LOCK_KW_SPINLOCK = 1
SYSTEM_LOCK_KW_SPINLOCK_COUNTERS = 2
SYSTEM_LOCK_KW_SYNC_OBJECTS = 4
SYSTEM_MEMORY_KW_GENERAL = 1
SYSTEM_MEMORY_KW_HARD_FAULTS = 2
SYSTEM_MEMORY_KW_ALL_FAULTS = 4
SYSTEM_MEMORY_KW_POOL = 8
SYSTEM_MEMORY_KW_MEMINFO = 16
SYSTEM_MEMORY_KW_PFSECTION = 32
SYSTEM_MEMORY_KW_MEMINFO_WS = 64
SYSTEM_MEMORY_KW_HEAP = 128
SYSTEM_MEMORY_KW_WS = 256
SYSTEM_MEMORY_KW_CONTMEM_GEN = 512
SYSTEM_MEMORY_KW_VIRTUAL_ALLOC = 1024
SYSTEM_MEMORY_KW_FOOTPRINT = 2048
SYSTEM_MEMORY_KW_SESSION = 4096
SYSTEM_MEMORY_KW_REFSET = 8192
SYSTEM_MEMORY_KW_VAMAP = 16384
SYSTEM_MEMORY_KW_NONTRADEABLE = 32768
SYSTEM_OBJECT_KW_GENERAL = 1
SYSTEM_OBJECT_KW_HANDLE = 2
SYSTEM_POWER_KW_GENERAL = 1
SYSTEM_POWER_KW_HIBER_RUNDOWN = 2
SYSTEM_POWER_KW_PROCESSOR_IDLE = 4
SYSTEM_POWER_KW_IDLE_SELECTION = 8
SYSTEM_POWER_KW_PPM_EXIT_LATENCY = 16
SYSTEM_PROCESS_KW_GENERAL = 1
SYSTEM_PROCESS_KW_INSWAP = 2
SYSTEM_PROCESS_KW_FREEZE = 4
SYSTEM_PROCESS_KW_PERF_COUNTER = 8
SYSTEM_PROCESS_KW_WAKE_COUNTER = 16
SYSTEM_PROCESS_KW_WAKE_DROP = 32
SYSTEM_PROCESS_KW_WAKE_EVENT = 64
SYSTEM_PROCESS_KW_DEBUG_EVENTS = 128
SYSTEM_PROCESS_KW_DBGPRINT = 256
SYSTEM_PROCESS_KW_JOB = 512
SYSTEM_PROCESS_KW_WORKER_THREAD = 1024
SYSTEM_PROCESS_KW_THREAD = 2048
SYSTEM_PROCESS_KW_LOADER = 4096
SYSTEM_PROFILE_KW_GENERAL = 1
SYSTEM_PROFILE_KW_PMC_PROFILE = 2
SYSTEM_REGISTRY_KW_GENERAL = 1
SYSTEM_REGISTRY_KW_HIVE = 2
SYSTEM_REGISTRY_KW_NOTIFICATION = 4
SYSTEM_SCHEDULER_KW_XSCHEDULER = 1
SYSTEM_SCHEDULER_KW_DISPATCHER = 2
SYSTEM_SCHEDULER_KW_KERNEL_QUEUE = 4
SYSTEM_SCHEDULER_KW_SHOULD_YIELD = 8
SYSTEM_SCHEDULER_KW_ANTI_STARVATION = 16
SYSTEM_SCHEDULER_KW_LOAD_BALANCER = 32
SYSTEM_SCHEDULER_KW_AFFINITY = 64
SYSTEM_SCHEDULER_KW_PRIORITY = 128
SYSTEM_SCHEDULER_KW_IDEAL_PROCESSOR = 256
SYSTEM_SCHEDULER_KW_CONTEXT_SWITCH = 512
SYSTEM_SCHEDULER_KW_COMPACT_CSWITCH = 1024
SYSTEM_SCHEDULER_KW_SCHEDULE_THREAD = 2048
SYSTEM_SCHEDULER_KW_READY_QUEUE = 4096
SYSTEM_SCHEDULER_KW_CPU_PARTITION = 8192
SYSTEM_SCHEDULER_KW_THREAD_FEEDBACK_READ = 16384
SYSTEM_SCHEDULER_KW_WORKLOAD_CLASS_UPDATE = 32768
SYSTEM_SCHEDULER_KW_AUTOBOOST = 65536
SYSTEM_SYSCALL_KW_GENERAL = 1
SYSTEM_TIMER_KW_GENERAL = 1
SYSTEM_TIMER_KW_CLOCK_TIMER = 2
SYSTEM_MEMORY_POOL_FILTER_ID = 1
_typedef_TRACELOGGER_HANDLE = 1
ETW_NULL_TYPE_VALUE = 0
ETW_OBJECT_TYPE_VALUE = 1
ETW_STRING_TYPE_VALUE = 2
ETW_SBYTE_TYPE_VALUE = 3
ETW_BYTE_TYPE_VALUE = 4
ETW_INT16_TYPE_VALUE = 5
ETW_UINT16_TYPE_VALUE = 6
ETW_INT32_TYPE_VALUE = 7
ETW_UINT32_TYPE_VALUE = 8
ETW_INT64_TYPE_VALUE = 9
ETW_UINT64_TYPE_VALUE = 10
ETW_CHAR_TYPE_VALUE = 11
ETW_SINGLE_TYPE_VALUE = 12
ETW_DOUBLE_TYPE_VALUE = 13
ETW_BOOLEAN_TYPE_VALUE = 14
ETW_DECIMAL_TYPE_VALUE = 15
ETW_GUID_TYPE_VALUE = 101
ETW_ASCIICHAR_TYPE_VALUE = 102
ETW_ASCIISTRING_TYPE_VALUE = 103
ETW_COUNTED_STRING_TYPE_VALUE = 104
ETW_POINTER_TYPE_VALUE = 105
ETW_SIZET_TYPE_VALUE = 106
ETW_HIDDEN_TYPE_VALUE = 107
ETW_BOOL_TYPE_VALUE = 108
ETW_COUNTED_ANSISTRING_TYPE_VALUE = 109
ETW_REVERSED_COUNTED_STRING_TYPE_VALUE = 110
ETW_REVERSED_COUNTED_ANSISTRING_TYPE_VALUE = 111
ETW_NON_NULL_TERMINATED_STRING_TYPE_VALUE = 112
ETW_REDUCED_ANSISTRING_TYPE_VALUE = 113
ETW_REDUCED_STRING_TYPE_VALUE = 114
ETW_SID_TYPE_VALUE = 115
ETW_VARIANT_TYPE_VALUE = 116
ETW_PTVECTOR_TYPE_VALUE = 117
ETW_WMITIME_TYPE_VALUE = 118
ETW_DATETIME_TYPE_VALUE = 119
ETW_REFRENCE_TYPE_VALUE = 120
TRACE_PROVIDER_FLAG_LEGACY = 1
TRACE_PROVIDER_FLAG_PRE_ENABLE = 2
TRACE_LBR_EVENT_OPCODE = 32
TRACE_LBR_MAXIMUM_EVENTS = 4
ENABLE_TRACE_PARAMETERS_VERSION = 1
ENABLE_TRACE_PARAMETERS_VERSION_2 = 2
EVENT_MIN_LEVEL = 0
EVENT_MAX_LEVEL = 255
EVENT_ACTIVITY_CTRL_GET_ID = 1
EVENT_ACTIVITY_CTRL_SET_ID = 2
EVENT_ACTIVITY_CTRL_CREATE_ID = 3
EVENT_ACTIVITY_CTRL_GET_SET_ID = 4
EVENT_ACTIVITY_CTRL_CREATE_SET_ID = 5
MAX_EVENT_DATA_DESCRIPTORS = 128
MAX_EVENT_FILTER_DATA_SIZE = 1024
MAX_EVENT_FILTER_PAYLOAD_SIZE = 4096
MAX_EVENT_FILTER_EVENT_NAME_SIZE = 4096
MAX_EVENT_FILTERS_COUNT = 13
MAX_EVENT_FILTER_PID_COUNT = 8
MAX_EVENT_FILTER_EVENT_ID_COUNT = 64
EVENT_FILTER_TYPE_NONE = 0
EVENT_FILTER_TYPE_SCHEMATIZED = 2147483648
EVENT_FILTER_TYPE_SYSTEM_FLAGS = 2147483649
EVENT_FILTER_TYPE_TRACEHANDLE = 2147483650
EVENT_FILTER_TYPE_PID = 2147483652
EVENT_FILTER_TYPE_EXECUTABLE_NAME = 2147483656
EVENT_FILTER_TYPE_PACKAGE_ID = 2147483664
EVENT_FILTER_TYPE_PACKAGE_APP_ID = 2147483680
EVENT_FILTER_TYPE_PAYLOAD = 2147483904
EVENT_FILTER_TYPE_EVENT_ID = 2147484160
EVENT_FILTER_TYPE_EVENT_NAME = 2147484672
EVENT_FILTER_TYPE_STACKWALK = 2147487744
EVENT_FILTER_TYPE_STACKWALK_NAME = 2147491840
EVENT_FILTER_TYPE_STACKWALK_LEVEL_KW = 2147500032
EVENT_FILTER_TYPE_CONTAINER = 2147516416
EVENT_DATA_DESCRIPTOR_TYPE_NONE = 0
EVENT_DATA_DESCRIPTOR_TYPE_EVENT_METADATA = 1
EVENT_DATA_DESCRIPTOR_TYPE_PROVIDER_METADATA = 2
EVENT_DATA_DESCRIPTOR_TYPE_TIMESTAMP_OVERRIDE = 3
EVENT_WRITE_FLAG_NO_FAULTING = 1
EVENT_WRITE_FLAG_INPRIVATE = 2
EVENT_HEADER_EXT_TYPE_RELATED_ACTIVITYID = 1
EVENT_HEADER_EXT_TYPE_SID = 2
EVENT_HEADER_EXT_TYPE_TS_ID = 3
EVENT_HEADER_EXT_TYPE_INSTANCE_INFO = 4
EVENT_HEADER_EXT_TYPE_STACK_TRACE32 = 5
EVENT_HEADER_EXT_TYPE_STACK_TRACE64 = 6
EVENT_HEADER_EXT_TYPE_PEBS_INDEX = 7
EVENT_HEADER_EXT_TYPE_PMC_COUNTERS = 8
EVENT_HEADER_EXT_TYPE_PSM_KEY = 9
EVENT_HEADER_EXT_TYPE_EVENT_KEY = 10
EVENT_HEADER_EXT_TYPE_EVENT_SCHEMA_TL = 11
EVENT_HEADER_EXT_TYPE_PROV_TRAITS = 12
EVENT_HEADER_EXT_TYPE_PROCESS_START_KEY = 13
EVENT_HEADER_EXT_TYPE_CONTROL_GUID = 14
EVENT_HEADER_EXT_TYPE_QPC_DELTA = 15
EVENT_HEADER_EXT_TYPE_CONTAINER_ID = 16
EVENT_HEADER_EXT_TYPE_STACK_KEY32 = 17
EVENT_HEADER_EXT_TYPE_STACK_KEY64 = 18
EVENT_HEADER_EXT_TYPE_MAX = 19
EVENT_HEADER_PROPERTY_XML = 1
EVENT_HEADER_PROPERTY_FORWARDED_XML = 2
EVENT_HEADER_PROPERTY_LEGACY_EVENTLOG = 4
EVENT_HEADER_PROPERTY_RELOGGABLE = 8
EVENT_HEADER_FLAG_EXTENDED_INFO = 1
EVENT_HEADER_FLAG_PRIVATE_SESSION = 2
EVENT_HEADER_FLAG_STRING_ONLY = 4
EVENT_HEADER_FLAG_TRACE_MESSAGE = 8
EVENT_HEADER_FLAG_NO_CPUTIME = 16
EVENT_HEADER_FLAG_32_BIT_HEADER = 32
EVENT_HEADER_FLAG_64_BIT_HEADER = 64
EVENT_HEADER_FLAG_DECODE_GUID = 128
EVENT_HEADER_FLAG_CLASSIC_HEADER = 256
EVENT_HEADER_FLAG_PROCESSOR_INDEX = 512
EVENT_ENABLE_PROPERTY_SID = 1
EVENT_ENABLE_PROPERTY_TS_ID = 2
EVENT_ENABLE_PROPERTY_STACK_TRACE = 4
EVENT_ENABLE_PROPERTY_PSM_KEY = 8
EVENT_ENABLE_PROPERTY_IGNORE_KEYWORD_0 = 16
EVENT_ENABLE_PROPERTY_PROVIDER_GROUP = 32
EVENT_ENABLE_PROPERTY_ENABLE_KEYWORD_0 = 64
EVENT_ENABLE_PROPERTY_PROCESS_START_KEY = 128
EVENT_ENABLE_PROPERTY_EVENT_KEY = 256
EVENT_ENABLE_PROPERTY_EXCLUDE_INPRIVATE = 512
EVENT_ENABLE_PROPERTY_ENABLE_SILOS = 1024
EVENT_ENABLE_PROPERTY_SOURCE_CONTAINER_TRACKING = 2048
PROCESS_TRACE_MODE_REAL_TIME = 256
PROCESS_TRACE_MODE_RAW_TIMESTAMP = 4096
PROCESS_TRACE_MODE_EVENT_RECORD = 268435456

pub const WNODE_FLAG_ALL_DATA: u32 = 1;
pub const WNODE_FLAG_SINGLE_INSTANCE: u32 = 2;
pub const WNODE_FLAG_SINGLE_ITEM: u32 = 4;
pub const WNODE_FLAG_EVENT_ITEM: u32 = 8;
pub const WNODE_FLAG_FIXED_INSTANCE_SIZE: u32 = 16;
pub const WNODE_FLAG_TOO_SMALL: u32 = 32;
pub const WNODE_FLAG_INSTANCES_SAME: u32 = 64;
pub const WNODE_FLAG_STATIC_INSTANCE_NAMES: u32 = 128;
pub const WNODE_FLAG_INTERNAL: u32 = 256;
pub const WNODE_FLAG_USE_TIMESTAMP: u32 = 512;
pub const WNODE_FLAG_PERSIST_EVENT: u32 = 1024;
pub const WNODE_FLAG_EVENT_REFERENCE: u32 = 8192;
pub const WNODE_FLAG_ANSI_INSTANCENAMES: u32 = 16384;
pub const WNODE_FLAG_METHOD_ITEM: u32 = 32768;
pub const WNODE_FLAG_PDO_INSTANCE_NAMES: u32 = 65536;
pub const WNODE_FLAG_TRACED_GUID: u32 = 131072;
pub const WNODE_FLAG_LOG_WNODE: u32 = 262144;
pub const WNODE_FLAG_USE_GUID_PTR: u32 = 524288;
pub const WNODE_FLAG_USE_MOF_PTR: u32 = 1048576;
pub const WNODE_FLAG_NO_HEADER: u32 = 2097152;
pub const WNODE_FLAG_SEND_DATA_BLOCK: u32 = 4194304;
pub const WNODE_FLAG_VERSIONED_PROPERTIES: u32 = 8388608;
pub const WNODE_FLAG_SEVERITY_MASK: u32 = 4278190080;
pub const WMIREG_FLAG_EXPENSIVE: u32 = 1;
pub const WMIREG_FLAG_INSTANCE_LIST: u32 = 4;
pub const WMIREG_FLAG_INSTANCE_BASENAME: u32 = 8;
pub const WMIREG_FLAG_INSTANCE_PDO: u32 = 32;
pub const WMIREG_FLAG_REMOVE_GUID: u32 = 65536;
pub const WMIREG_FLAG_RESERVED1: u32 = 131072;
pub const WMIREG_FLAG_RESERVED2: u32 = 262144;
pub const WMIREG_FLAG_TRACED_GUID: u32 = 524288;
pub const WMIREG_FLAG_TRACE_CONTROL_GUID: u32 = 4096;
pub const WMIREG_FLAG_EVENT_ONLY_GUID: u32 = 64;
pub const WMI_GUIDTYPE_TRACECONTROL: u32 = 0;
pub const WMI_GUIDTYPE_TRACE: u32 = 1;
pub const WMI_GUIDTYPE_DATA: u32 = 2;
pub const WMI_GUIDTYPE_EVENT: u32 = 3;
pub const WMIGUID_QUERY: u32 = 1;
pub const WMIGUID_SET: u32 = 2;
pub const WMIGUID_NOTIFICATION: u32 = 4;
pub const WMIGUID_READ_DESCRIPTION: u32 = 8;
pub const WMIGUID_EXECUTE: u32 = 16;
pub const TRACELOG_CREATE_REALTIME: u32 = 32;
pub const TRACELOG_CREATE_ONDISK: u32 = 64;
pub const TRACELOG_GUID_ENABLE: u32 = 128;
pub const TRACELOG_ACCESS_KERNEL_LOGGER: u32 = 256;
pub const TRACELOG_LOG_EVENT: u32 = 512;
pub const TRACELOG_CREATE_INPROC: u32 = 512;
pub const TRACELOG_ACCESS_REALTIME: u32 = 1024;
pub const TRACELOG_REGISTER_GUIDS: u32 = 2048;
pub const TRACELOG_JOIN_GROUP: u32 = 4096;
pub const WMI_GLOBAL_LOGGER_ID: u32 = 1;
pub const MAX_PAYLOAD_PREDICATES: u32 = 8;
pub const MAX_MOF_FIELDS: u32 = 16;
pub const SYSTEM_EVENT_TYPE: u32 = 1;
pub const EVENT_TRACE_TYPE_INFO: u32 = 0;
pub const EVENT_TRACE_TYPE_START: u32 = 1;
pub const EVENT_TRACE_TYPE_END: u32 = 2;
pub const EVENT_TRACE_TYPE_STOP: u32 = 2;
pub const EVENT_TRACE_TYPE_DC_START: u32 = 3;
pub const EVENT_TRACE_TYPE_DC_END: u32 = 4;
pub const EVENT_TRACE_TYPE_EXTENSION: u32 = 5;
pub const EVENT_TRACE_TYPE_REPLY: u32 = 6;
pub const EVENT_TRACE_TYPE_DEQUEUE: u32 = 7;
pub const EVENT_TRACE_TYPE_RESUME: u32 = 7;
pub const EVENT_TRACE_TYPE_CHECKPOINT: u32 = 8;
pub const EVENT_TRACE_TYPE_SUSPEND: u32 = 8;
pub const EVENT_TRACE_TYPE_WINEVT_SEND: u32 = 9;
pub const EVENT_TRACE_TYPE_WINEVT_RECEIVE: u32 = 240;
pub const TRACE_LEVEL_NONE: u32 = 0;
pub const TRACE_LEVEL_CRITICAL: u32 = 1;
pub const TRACE_LEVEL_FATAL: u32 = 1;
pub const TRACE_LEVEL_ERROR: u32 = 2;
pub const TRACE_LEVEL_WARNING: u32 = 3;
pub const TRACE_LEVEL_INFORMATION: u32 = 4;
pub const TRACE_LEVEL_VERBOSE: u32 = 5;
pub const TRACE_LEVEL_RESERVED6: u32 = 6;
pub const TRACE_LEVEL_RESERVED7: u32 = 7;
pub const TRACE_LEVEL_RESERVED8: u32 = 8;
pub const TRACE_LEVEL_RESERVED9: u32 = 9;
pub const EVENT_TRACE_TYPE_LOAD: u32 = 10;
pub const EVENT_TRACE_TYPE_TERMINATE: u32 = 11;
pub const EVENT_TRACE_TYPE_IO_READ: u32 = 10;
pub const EVENT_TRACE_TYPE_IO_WRITE: u32 = 11;
pub const EVENT_TRACE_TYPE_IO_READ_INIT: u32 = 12;
pub const EVENT_TRACE_TYPE_IO_WRITE_INIT: u32 = 13;
pub const EVENT_TRACE_TYPE_IO_FLUSH: u32 = 14;
pub const EVENT_TRACE_TYPE_IO_FLUSH_INIT: u32 = 15;
pub const EVENT_TRACE_TYPE_IO_REDIRECTED_INIT: u32 = 16;
pub const EVENT_TRACE_TYPE_MM_TF: u32 = 10;
pub const EVENT_TRACE_TYPE_MM_DZF: u32 = 11;
pub const EVENT_TRACE_TYPE_MM_COW: u32 = 12;
pub const EVENT_TRACE_TYPE_MM_GPF: u32 = 13;
pub const EVENT_TRACE_TYPE_MM_HPF: u32 = 14;
pub const EVENT_TRACE_TYPE_MM_AV: u32 = 15;
pub const EVENT_TRACE_TYPE_SEND: u32 = 10;
pub const EVENT_TRACE_TYPE_RECEIVE: u32 = 11;
pub const EVENT_TRACE_TYPE_CONNECT: u32 = 12;
pub const EVENT_TRACE_TYPE_DISCONNECT: u32 = 13;
pub const EVENT_TRACE_TYPE_RETRANSMIT: u32 = 14;
pub const EVENT_TRACE_TYPE_ACCEPT: u32 = 15;
pub const EVENT_TRACE_TYPE_RECONNECT: u32 = 16;
pub const EVENT_TRACE_TYPE_CONNFAIL: u32 = 17;
pub const EVENT_TRACE_TYPE_COPY_TCP: u32 = 18;
pub const EVENT_TRACE_TYPE_COPY_ARP: u32 = 19;
pub const EVENT_TRACE_TYPE_ACKFULL: u32 = 20;
pub const EVENT_TRACE_TYPE_ACKPART: u32 = 21;
pub const EVENT_TRACE_TYPE_ACKDUP: u32 = 22;
pub const EVENT_TRACE_TYPE_GUIDMAP: u32 = 10;
pub const EVENT_TRACE_TYPE_CONFIG: u32 = 11;
pub const EVENT_TRACE_TYPE_SIDINFO: u32 = 12;
pub const EVENT_TRACE_TYPE_SECURITY: u32 = 13;
pub const EVENT_TRACE_TYPE_DBGID_RSDS: u32 = 64;
pub const EVENT_TRACE_TYPE_REGCREATE: u32 = 10;
pub const EVENT_TRACE_TYPE_REGOPEN: u32 = 11;
pub const EVENT_TRACE_TYPE_REGDELETE: u32 = 12;
pub const EVENT_TRACE_TYPE_REGQUERY: u32 = 13;
pub const EVENT_TRACE_TYPE_REGSETVALUE: u32 = 14;
pub const EVENT_TRACE_TYPE_REGDELETEVALUE: u32 = 15;
pub const EVENT_TRACE_TYPE_REGQUERYVALUE: u32 = 16;
pub const EVENT_TRACE_TYPE_REGENUMERATEKEY: u32 = 17;
pub const EVENT_TRACE_TYPE_REGENUMERATEVALUEKEY: u32 = 18;
pub const EVENT_TRACE_TYPE_REGQUERYMULTIPLEVALUE: u32 = 19;
pub const EVENT_TRACE_TYPE_REGSETINFORMATION: u32 = 20;
pub const EVENT_TRACE_TYPE_REGFLUSH: u32 = 21;
pub const EVENT_TRACE_TYPE_REGKCBCREATE: u32 = 22;
pub const EVENT_TRACE_TYPE_REGKCBDELETE: u32 = 23;
pub const EVENT_TRACE_TYPE_REGKCBRUNDOWNBEGIN: u32 = 24;
pub const EVENT_TRACE_TYPE_REGKCBRUNDOWNEND: u32 = 25;
pub const EVENT_TRACE_TYPE_REGVIRTUALIZE: u32 = 26;
pub const EVENT_TRACE_TYPE_REGCLOSE: u32 = 27;
pub const EVENT_TRACE_TYPE_REGSETSECURITY: u32 = 28;
pub const EVENT_TRACE_TYPE_REGQUERYSECURITY: u32 = 29;
pub const EVENT_TRACE_TYPE_REGCOMMIT: u32 = 30;
pub const EVENT_TRACE_TYPE_REGPREPARE: u32 = 31;
pub const EVENT_TRACE_TYPE_REGROLLBACK: u32 = 32;
pub const EVENT_TRACE_TYPE_REGMOUNTHIVE: u32 = 33;
pub const EVENT_TRACE_TYPE_CONFIG_CPU: u32 = 10;
pub const EVENT_TRACE_TYPE_CONFIG_PHYSICALDISK: u32 = 11;
pub const EVENT_TRACE_TYPE_CONFIG_LOGICALDISK: u32 = 12;
pub const EVENT_TRACE_TYPE_CONFIG_NIC: u32 = 13;
pub const EVENT_TRACE_TYPE_CONFIG_VIDEO: u32 = 14;
pub const EVENT_TRACE_TYPE_CONFIG_SERVICES: u32 = 15;
pub const EVENT_TRACE_TYPE_CONFIG_POWER: u32 = 16;
pub const EVENT_TRACE_TYPE_CONFIG_NETINFO: u32 = 17;
pub const EVENT_TRACE_TYPE_CONFIG_OPTICALMEDIA: u32 = 18;
pub const EVENT_TRACE_TYPE_CONFIG_PHYSICALDISK_EX: u32 = 19;
pub const EVENT_TRACE_TYPE_CONFIG_IRQ: u32 = 21;
pub const EVENT_TRACE_TYPE_CONFIG_PNP: u32 = 22;
pub const EVENT_TRACE_TYPE_CONFIG_IDECHANNEL: u32 = 23;
pub const EVENT_TRACE_TYPE_CONFIG_NUMANODE: u32 = 24;
pub const EVENT_TRACE_TYPE_CONFIG_PLATFORM: u32 = 25;
pub const EVENT_TRACE_TYPE_CONFIG_PROCESSORGROUP: u32 = 26;
pub const EVENT_TRACE_TYPE_CONFIG_PROCESSORNUMBER: u32 = 27;
pub const EVENT_TRACE_TYPE_CONFIG_DPI: u32 = 28;
pub const EVENT_TRACE_TYPE_CONFIG_CI_INFO: u32 = 29;
pub const EVENT_TRACE_TYPE_CONFIG_MACHINEID: u32 = 30;
pub const EVENT_TRACE_TYPE_CONFIG_DEFRAG: u32 = 31;
pub const EVENT_TRACE_TYPE_CONFIG_MOBILEPLATFORM: u32 = 32;
pub const EVENT_TRACE_TYPE_CONFIG_DEVICEFAMILY: u32 = 33;
pub const EVENT_TRACE_TYPE_CONFIG_FLIGHTID: u32 = 34;
pub const EVENT_TRACE_TYPE_CONFIG_PROCESSOR: u32 = 35;
pub const EVENT_TRACE_TYPE_CONFIG_VIRTUALIZATION: u32 = 36;
pub const EVENT_TRACE_TYPE_CONFIG_BOOT: u32 = 37;
pub const EVENT_TRACE_TYPE_OPTICAL_IO_READ: u32 = 55;
pub const EVENT_TRACE_TYPE_OPTICAL_IO_WRITE: u32 = 56;
pub const EVENT_TRACE_TYPE_OPTICAL_IO_FLUSH: u32 = 57;
pub const EVENT_TRACE_TYPE_OPTICAL_IO_READ_INIT: u32 = 58;
pub const EVENT_TRACE_TYPE_OPTICAL_IO_WRITE_INIT: u32 = 59;
pub const EVENT_TRACE_TYPE_OPTICAL_IO_FLUSH_INIT: u32 = 60;
pub const EVENT_TRACE_TYPE_FLT_PREOP_INIT: u32 = 96;
pub const EVENT_TRACE_TYPE_FLT_POSTOP_INIT: u32 = 97;
pub const EVENT_TRACE_TYPE_FLT_PREOP_COMPLETION: u32 = 98;
pub const EVENT_TRACE_TYPE_FLT_POSTOP_COMPLETION: u32 = 99;
pub const EVENT_TRACE_TYPE_FLT_PREOP_FAILURE: u32 = 100;
pub const EVENT_TRACE_TYPE_FLT_POSTOP_FAILURE: u32 = 101;
pub const EVENT_TRACE_FLAG_DEBUG_EVENTS: u32 = 4194304;
pub const EVENT_TRACE_FLAG_EXTENSION: u32 = 2147483648;
pub const EVENT_TRACE_FLAG_FORWARD_WMI: u32 = 1073741824;
pub const EVENT_TRACE_FLAG_ENABLE_RESERVE: u32 = 536870912;
pub const EVENT_TRACE_FILE_MODE_NONE: u32 = 0;
pub const EVENT_TRACE_FILE_MODE_SEQUENTIAL: u32 = 1;
pub const EVENT_TRACE_FILE_MODE_CIRCULAR: u32 = 2;
pub const EVENT_TRACE_FILE_MODE_APPEND: u32 = 4;
pub const EVENT_TRACE_REAL_TIME_MODE: u32 = 256;
pub const EVENT_TRACE_DELAY_OPEN_FILE_MODE: u32 = 512;
pub const EVENT_TRACE_BUFFERING_MODE: u32 = 1024;
pub const EVENT_TRACE_PRIVATE_LOGGER_MODE: u32 = 2048;
pub const EVENT_TRACE_ADD_HEADER_MODE: u32 = 4096;
pub const EVENT_TRACE_USE_GLOBAL_SEQUENCE: u32 = 16384;
pub const EVENT_TRACE_USE_LOCAL_SEQUENCE: u32 = 32768;
pub const EVENT_TRACE_RELOG_MODE: u32 = 65536;
pub const EVENT_TRACE_USE_PAGED_MEMORY: u32 = 16777216;
pub const EVENT_TRACE_FILE_MODE_NEWFILE: u32 = 8;
pub const EVENT_TRACE_FILE_MODE_PREALLOCATE: u32 = 32;
pub const EVENT_TRACE_NONSTOPPABLE_MODE: u32 = 64;
pub const EVENT_TRACE_SECURE_MODE: u32 = 128;
pub const EVENT_TRACE_USE_KBYTES_FOR_SIZE: u32 = 8192;
pub const EVENT_TRACE_PRIVATE_IN_PROC: u32 = 131072;
pub const EVENT_TRACE_MODE_RESERVED: u32 = 1048576;
pub const EVENT_TRACE_NO_PER_PROCESSOR_BUFFERING: u32 = 268435456;
pub const EVENT_TRACE_SYSTEM_LOGGER_MODE: u32 = 33554432;
pub const EVENT_TRACE_ADDTO_TRIAGE_DUMP: u32 = 2147483648;
pub const EVENT_TRACE_STOP_ON_HYBRID_SHUTDOWN: u32 = 4194304;
pub const EVENT_TRACE_PERSIST_ON_HYBRID_SHUTDOWN: u32 = 8388608;
pub const EVENT_TRACE_INDEPENDENT_SESSION_MODE: u32 = 134217728;
pub const EVENT_TRACE_COMPRESSED_MODE: u32 = 67108864;
pub const EVENT_TRACE_CONTROL_INCREMENT_FILE: u32 = 4;
pub const EVENT_TRACE_CONTROL_CONVERT_TO_REALTIME: u32 = 5;
pub const TRACE_MESSAGE_PERFORMANCE_TIMESTAMP: u32 = 16;
pub const TRACE_MESSAGE_POINTER32: u32 = 64;
pub const TRACE_MESSAGE_POINTER64: u32 = 128;
pub const TRACE_MESSAGE_FLAG_MASK: u32 = 65535;
pub const EVENT_TRACE_USE_PROCTIME: u32 = 1;
pub const EVENT_TRACE_USE_NOCPUTIME: u32 = 2;
pub const TRACE_HEADER_FLAG_USE_TIMESTAMP: u32 = 512;
pub const TRACE_HEADER_FLAG_TRACED_GUID: u32 = 131072;
pub const TRACE_HEADER_FLAG_LOG_WNODE: u32 = 262144;
pub const TRACE_HEADER_FLAG_USE_GUID_PTR: u32 = 524288;
pub const TRACE_HEADER_FLAG_USE_MOF_PTR: u32 = 1048576;
pub const SYSTEM_ALPC_KW_GENERAL: u64 = 1;
pub const SYSTEM_CONFIG_KW_SYSTEM: u64 = 1;
pub const SYSTEM_CONFIG_KW_GRAPHICS: u64 = 2;
pub const SYSTEM_CONFIG_KW_STORAGE: u64 = 4;
pub const SYSTEM_CONFIG_KW_NETWORK: u64 = 8;
pub const SYSTEM_CONFIG_KW_SERVICES: u64 = 16;
pub const SYSTEM_CONFIG_KW_PNP: u64 = 32;
pub const SYSTEM_CONFIG_KW_OPTICAL: u64 = 64;
pub const SYSTEM_CPU_KW_CONFIG: u64 = 1;
pub const SYSTEM_CPU_KW_CACHE_FLUSH: u64 = 2;
pub const SYSTEM_CPU_KW_SPEC_CONTROL: u64 = 4;
pub const SYSTEM_CPU_KW_DOMAIN_CHANGE: u64 = 8;
pub const SYSTEM_HYPERVISOR_KW_PROFILE: u64 = 1;
pub const SYSTEM_HYPERVISOR_KW_CALLOUTS: u64 = 2;
pub const SYSTEM_HYPERVISOR_KW_VTL_CHANGE: u64 = 4;
pub const SYSTEM_INTERRUPT_KW_GENERAL: u64 = 1;
pub const SYSTEM_INTERRUPT_KW_CLOCK_INTERRUPT: u64 = 2;
pub const SYSTEM_INTERRUPT_KW_DPC: u64 = 4;
pub const SYSTEM_INTERRUPT_KW_DPC_QUEUE: u64 = 8;
pub const SYSTEM_INTERRUPT_KW_WDF_DPC: u64 = 16;
pub const SYSTEM_INTERRUPT_KW_WDF_INTERRUPT: u64 = 32;
pub const SYSTEM_INTERRUPT_KW_IPI: u64 = 64;
pub const SYSTEM_IO_KW_DISK: u64 = 1;
pub const SYSTEM_IO_KW_DISK_INIT: u64 = 2;
pub const SYSTEM_IO_KW_FILENAME: u64 = 4;
pub const SYSTEM_IO_KW_SPLIT: u64 = 8;
pub const SYSTEM_IO_KW_FILE: u64 = 16;
pub const SYSTEM_IO_KW_OPTICAL: u64 = 32;
pub const SYSTEM_IO_KW_OPTICAL_INIT: u64 = 64;
pub const SYSTEM_IO_KW_DRIVERS: u64 = 128;
pub const SYSTEM_IO_KW_CC: u64 = 256;
pub const SYSTEM_IO_KW_NETWORK: u64 = 512;
pub const SYSTEM_IO_KW_FILE_INIT: u64 = 1024;
pub const SYSTEM_IO_KW_TIMER: u64 = 2048;
pub const SYSTEM_IOFILTER_KW_GENERAL: u64 = 1;
pub const SYSTEM_IOFILTER_KW_INIT: u64 = 2;
pub const SYSTEM_IOFILTER_KW_FASTIO: u64 = 4;
pub const SYSTEM_IOFILTER_KW_FAILURE: u64 = 8;
pub const SYSTEM_LOCK_KW_SPINLOCK: u64 = 1;
pub const SYSTEM_LOCK_KW_SPINLOCK_COUNTERS: u64 = 2;
pub const SYSTEM_LOCK_KW_SYNC_OBJECTS: u64 = 4;
pub const SYSTEM_MEMORY_KW_GENERAL: u64 = 1;
pub const SYSTEM_MEMORY_KW_HARD_FAULTS: u64 = 2;
pub const SYSTEM_MEMORY_KW_ALL_FAULTS: u64 = 4;
pub const SYSTEM_MEMORY_KW_POOL: u64 = 8;
pub const SYSTEM_MEMORY_KW_MEMINFO: u64 = 16;
pub const SYSTEM_MEMORY_KW_PFSECTION: u64 = 32;
pub const SYSTEM_MEMORY_KW_MEMINFO_WS: u64 = 64;
pub const SYSTEM_MEMORY_KW_HEAP: u64 = 128;
pub const SYSTEM_MEMORY_KW_WS: u64 = 256;
pub const SYSTEM_MEMORY_KW_CONTMEM_GEN: u64 = 512;
pub const SYSTEM_MEMORY_KW_VIRTUAL_ALLOC: u64 = 1024;
pub const SYSTEM_MEMORY_KW_FOOTPRINT: u64 = 2048;
pub const SYSTEM_MEMORY_KW_SESSION: u64 = 4096;
pub const SYSTEM_MEMORY_KW_REFSET: u64 = 8192;
pub const SYSTEM_MEMORY_KW_VAMAP: u64 = 16384;
pub const SYSTEM_MEMORY_KW_NONTRADEABLE: u64 = 32768;
pub const SYSTEM_OBJECT_KW_GENERAL: u64 = 1;
pub const SYSTEM_OBJECT_KW_HANDLE: u64 = 2;
pub const SYSTEM_POWER_KW_GENERAL: u64 = 1;
pub const SYSTEM_POWER_KW_HIBER_RUNDOWN: u64 = 2;
pub const SYSTEM_POWER_KW_PROCESSOR_IDLE: u64 = 4;
pub const SYSTEM_POWER_KW_IDLE_SELECTION: u64 = 8;
pub const SYSTEM_POWER_KW_PPM_EXIT_LATENCY: u64 = 16;
pub const SYSTEM_PROCESS_KW_GENERAL: u64 = 1;
pub const SYSTEM_PROCESS_KW_INSWAP: u64 = 2;
pub const SYSTEM_PROCESS_KW_FREEZE: u64 = 4;
pub const SYSTEM_PROCESS_KW_PERF_COUNTER: u64 = 8;
pub const SYSTEM_PROCESS_KW_WAKE_COUNTER: u64 = 16;
pub const SYSTEM_PROCESS_KW_WAKE_DROP: u64 = 32;
pub const SYSTEM_PROCESS_KW_WAKE_EVENT: u64 = 64;
pub const SYSTEM_PROCESS_KW_DEBUG_EVENTS: u64 = 128;
pub const SYSTEM_PROCESS_KW_DBGPRINT: u64 = 256;
pub const SYSTEM_PROCESS_KW_JOB: u64 = 512;
pub const SYSTEM_PROCESS_KW_WORKER_THREAD: u64 = 1024;
pub const SYSTEM_PROCESS_KW_THREAD: u64 = 2048;
pub const SYSTEM_PROCESS_KW_LOADER: u64 = 4096;
pub const SYSTEM_PROFILE_KW_GENERAL: u64 = 1;
pub const SYSTEM_PROFILE_KW_PMC_PROFILE: u64 = 2;
pub const SYSTEM_REGISTRY_KW_GENERAL: u64 = 1;
pub const SYSTEM_REGISTRY_KW_HIVE: u64 = 2;
pub const SYSTEM_REGISTRY_KW_NOTIFICATION: u64 = 4;
pub const SYSTEM_SCHEDULER_KW_XSCHEDULER: u64 = 1;
pub const SYSTEM_SCHEDULER_KW_DISPATCHER: u64 = 2;
pub const SYSTEM_SCHEDULER_KW_KERNEL_QUEUE: u64 = 4;
pub const SYSTEM_SCHEDULER_KW_SHOULD_YIELD: u64 = 8;
pub const SYSTEM_SCHEDULER_KW_ANTI_STARVATION: u64 = 16;
pub const SYSTEM_SCHEDULER_KW_LOAD_BALANCER: u64 = 32;
pub const SYSTEM_SCHEDULER_KW_AFFINITY: u64 = 64;
pub const SYSTEM_SCHEDULER_KW_PRIORITY: u64 = 128;
pub const SYSTEM_SCHEDULER_KW_IDEAL_PROCESSOR: u64 = 256;
pub const SYSTEM_SCHEDULER_KW_CONTEXT_SWITCH: u64 = 512;
pub const SYSTEM_SCHEDULER_KW_COMPACT_CSWITCH: u64 = 1024;
pub const SYSTEM_SCHEDULER_KW_SCHEDULE_THREAD: u64 = 2048;
pub const SYSTEM_SCHEDULER_KW_READY_QUEUE: u64 = 4096;
pub const SYSTEM_SCHEDULER_KW_CPU_PARTITION: u64 = 8192;
pub const SYSTEM_SCHEDULER_KW_THREAD_FEEDBACK_READ: u64 = 16384;
pub const SYSTEM_SCHEDULER_KW_WORKLOAD_CLASS_UPDATE: u64 = 32768;
pub const SYSTEM_SCHEDULER_KW_AUTOBOOST: u64 = 65536;
pub const SYSTEM_SYSCALL_KW_GENERAL: u64 = 1;
pub const SYSTEM_TIMER_KW_GENERAL: u64 = 1;
pub const SYSTEM_TIMER_KW_CLOCK_TIMER: u64 = 2;
pub const SYSTEM_MEMORY_POOL_FILTER_ID: u32 = 1;
pub const _typedef_TRACELOGGER_HANDLE: u32 = 1;
pub const ETW_NULL_TYPE_VALUE: u32 = 0;
pub const ETW_OBJECT_TYPE_VALUE: u32 = 1;
pub const ETW_STRING_TYPE_VALUE: u32 = 2;
pub const ETW_SBYTE_TYPE_VALUE: u32 = 3;
pub const ETW_BYTE_TYPE_VALUE: u32 = 4;
pub const ETW_INT16_TYPE_VALUE: u32 = 5;
pub const ETW_UINT16_TYPE_VALUE: u32 = 6;
pub const ETW_INT32_TYPE_VALUE: u32 = 7;
pub const ETW_UINT32_TYPE_VALUE: u32 = 8;
pub const ETW_INT64_TYPE_VALUE: u32 = 9;
pub const ETW_UINT64_TYPE_VALUE: u32 = 10;
pub const ETW_CHAR_TYPE_VALUE: u32 = 11;
pub const ETW_SINGLE_TYPE_VALUE: u32 = 12;
pub const ETW_DOUBLE_TYPE_VALUE: u32 = 13;
pub const ETW_BOOLEAN_TYPE_VALUE: u32 = 14;
pub const ETW_DECIMAL_TYPE_VALUE: u32 = 15;
pub const ETW_GUID_TYPE_VALUE: u32 = 101;
pub const ETW_ASCIICHAR_TYPE_VALUE: u32 = 102;
pub const ETW_ASCIISTRING_TYPE_VALUE: u32 = 103;
pub const ETW_COUNTED_STRING_TYPE_VALUE: u32 = 104;
pub const ETW_POINTER_TYPE_VALUE: u32 = 105;
pub const ETW_SIZET_TYPE_VALUE: u32 = 106;
pub const ETW_HIDDEN_TYPE_VALUE: u32 = 107;
pub const ETW_BOOL_TYPE_VALUE: u32 = 108;
pub const ETW_COUNTED_ANSISTRING_TYPE_VALUE: u32 = 109;
pub const ETW_REVERSED_COUNTED_STRING_TYPE_VALUE: u32 = 110;
pub const ETW_REVERSED_COUNTED_ANSISTRING_TYPE_VALUE: u32 = 111;
pub const ETW_NON_NULL_TERMINATED_STRING_TYPE_VALUE: u32 = 112;
pub const ETW_REDUCED_ANSISTRING_TYPE_VALUE: u32 = 113;
pub const ETW_REDUCED_STRING_TYPE_VALUE: u32 = 114;
pub const ETW_SID_TYPE_VALUE: u32 = 115;
pub const ETW_VARIANT_TYPE_VALUE: u32 = 116;
pub const ETW_PTVECTOR_TYPE_VALUE: u32 = 117;
pub const ETW_WMITIME_TYPE_VALUE: u32 = 118;
pub const ETW_DATETIME_TYPE_VALUE: u32 = 119;
pub const ETW_REFRENCE_TYPE_VALUE: u32 = 120;
pub const TRACE_PROVIDER_FLAG_LEGACY: u32 = 1;
pub const TRACE_PROVIDER_FLAG_PRE_ENABLE: u32 = 2;
pub const TRACE_LBR_EVENT_OPCODE: u32 = 32;
pub const TRACE_LBR_MAXIMUM_EVENTS: u32 = 4;
pub const ENABLE_TRACE_PARAMETERS_VERSION: u32 = 1;
pub const ENABLE_TRACE_PARAMETERS_VERSION_2: u32 = 2;
pub const EVENT_MIN_LEVEL: u32 = 0;
pub const EVENT_MAX_LEVEL: u32 = 255;
pub const EVENT_ACTIVITY_CTRL_GET_ID: u32 = 1;
pub const EVENT_ACTIVITY_CTRL_SET_ID: u32 = 2;
pub const EVENT_ACTIVITY_CTRL_CREATE_ID: u32 = 3;
pub const EVENT_ACTIVITY_CTRL_GET_SET_ID: u32 = 4;
pub const EVENT_ACTIVITY_CTRL_CREATE_SET_ID: u32 = 5;
pub const MAX_EVENT_DATA_DESCRIPTORS: u32 = 128;
pub const MAX_EVENT_FILTER_DATA_SIZE: u32 = 1024;
pub const MAX_EVENT_FILTER_PAYLOAD_SIZE: u32 = 4096;
pub const MAX_EVENT_FILTER_EVENT_NAME_SIZE: u32 = 4096;
pub const MAX_EVENT_FILTERS_COUNT: u32 = 13;
pub const MAX_EVENT_FILTER_PID_COUNT: u32 = 8;
pub const MAX_EVENT_FILTER_EVENT_ID_COUNT: u32 = 64;
pub const EVENT_FILTER_TYPE_NONE: u32 = 0;
pub const EVENT_FILTER_TYPE_SCHEMATIZED: u32 = 2147483648;
pub const EVENT_FILTER_TYPE_SYSTEM_FLAGS: u32 = 2147483649;
pub const EVENT_FILTER_TYPE_TRACEHANDLE: u32 = 2147483650;
pub const EVENT_FILTER_TYPE_PID: u32 = 2147483652;
pub const EVENT_FILTER_TYPE_EXECUTABLE_NAME: u32 = 2147483656;
pub const EVENT_FILTER_TYPE_PACKAGE_ID: u32 = 2147483664;
pub const EVENT_FILTER_TYPE_PACKAGE_APP_ID: u32 = 2147483680;
pub const EVENT_FILTER_TYPE_PAYLOAD: u32 = 2147483904;
pub const EVENT_FILTER_TYPE_EVENT_ID: u32 = 2147484160;
pub const EVENT_FILTER_TYPE_EVENT_NAME: u32 = 2147484672;
pub const EVENT_FILTER_TYPE_STACKWALK: u32 = 2147487744;
pub const EVENT_FILTER_TYPE_STACKWALK_NAME: u32 = 2147491840;
pub const EVENT_FILTER_TYPE_STACKWALK_LEVEL_KW: u32 = 2147500032;
pub const EVENT_FILTER_TYPE_CONTAINER: u32 = 2147516416;
pub const EVENT_DATA_DESCRIPTOR_TYPE_NONE: u32 = 0;
pub const EVENT_DATA_DESCRIPTOR_TYPE_EVENT_METADATA: u32 = 1;
pub const EVENT_DATA_DESCRIPTOR_TYPE_PROVIDER_METADATA: u32 = 2;
pub const EVENT_DATA_DESCRIPTOR_TYPE_TIMESTAMP_OVERRIDE: u32 = 3;
pub const EVENT_WRITE_FLAG_NO_FAULTING: u32 = 1;
pub const EVENT_WRITE_FLAG_INPRIVATE: u32 = 2;
pub const EVENT_HEADER_EXT_TYPE_RELATED_ACTIVITYID: u32 = 1;
pub const EVENT_HEADER_EXT_TYPE_SID: u32 = 2;
pub const EVENT_HEADER_EXT_TYPE_TS_ID: u32 = 3;
pub const EVENT_HEADER_EXT_TYPE_INSTANCE_INFO: u32 = 4;
pub const EVENT_HEADER_EXT_TYPE_STACK_TRACE32: u32 = 5;
pub const EVENT_HEADER_EXT_TYPE_STACK_TRACE64: u32 = 6;
pub const EVENT_HEADER_EXT_TYPE_PEBS_INDEX: u32 = 7;
pub const EVENT_HEADER_EXT_TYPE_PMC_COUNTERS: u32 = 8;
pub const EVENT_HEADER_EXT_TYPE_PSM_KEY: u32 = 9;
pub const EVENT_HEADER_EXT_TYPE_EVENT_KEY: u32 = 10;
pub const EVENT_HEADER_EXT_TYPE_EVENT_SCHEMA_TL: u32 = 11;
pub const EVENT_HEADER_EXT_TYPE_PROV_TRAITS: u32 = 12;
pub const EVENT_HEADER_EXT_TYPE_PROCESS_START_KEY: u32 = 13;
pub const EVENT_HEADER_EXT_TYPE_CONTROL_GUID: u32 = 14;
pub const EVENT_HEADER_EXT_TYPE_QPC_DELTA: u32 = 15;
pub const EVENT_HEADER_EXT_TYPE_CONTAINER_ID: u32 = 16;
pub const EVENT_HEADER_EXT_TYPE_STACK_KEY32: u32 = 17;
pub const EVENT_HEADER_EXT_TYPE_STACK_KEY64: u32 = 18;
pub const EVENT_HEADER_EXT_TYPE_MAX: u32 = 19;
pub const EVENT_HEADER_PROPERTY_XML: u32 = 1;
pub const EVENT_HEADER_PROPERTY_FORWARDED_XML: u32 = 2;
pub const EVENT_HEADER_PROPERTY_LEGACY_EVENTLOG: u32 = 4;
pub const EVENT_HEADER_PROPERTY_RELOGGABLE: u32 = 8;
pub const EVENT_HEADER_FLAG_EXTENDED_INFO: u32 = 1;
pub const EVENT_HEADER_FLAG_PRIVATE_SESSION: u32 = 2;
pub const EVENT_HEADER_FLAG_STRING_ONLY: u32 = 4;
pub const EVENT_HEADER_FLAG_TRACE_MESSAGE: u32 = 8;
pub const EVENT_HEADER_FLAG_NO_CPUTIME: u32 = 16;
pub const EVENT_HEADER_FLAG_32_BIT_HEADER: u32 = 32;
pub const EVENT_HEADER_FLAG_64_BIT_HEADER: u32 = 64;
pub const EVENT_HEADER_FLAG_DECODE_GUID: u32 = 128;
pub const EVENT_HEADER_FLAG_CLASSIC_HEADER: u32 = 256;
pub const EVENT_HEADER_FLAG_PROCESSOR_INDEX: u32 = 512;
pub const EVENT_ENABLE_PROPERTY_SID: u32 = 1;
pub const EVENT_ENABLE_PROPERTY_TS_ID: u32 = 2;
pub const EVENT_ENABLE_PROPERTY_STACK_TRACE: u32 = 4;
pub const EVENT_ENABLE_PROPERTY_PSM_KEY: u32 = 8;
pub const EVENT_ENABLE_PROPERTY_IGNORE_KEYWORD_0: u32 = 16;
pub const EVENT_ENABLE_PROPERTY_PROVIDER_GROUP: u32 = 32;
pub const EVENT_ENABLE_PROPERTY_ENABLE_KEYWORD_0: u32 = 64;
pub const EVENT_ENABLE_PROPERTY_PROCESS_START_KEY: u32 = 128;
pub const EVENT_ENABLE_PROPERTY_EVENT_KEY: u32 = 256;
pub const EVENT_ENABLE_PROPERTY_EXCLUDE_INPRIVATE: u32 = 512;
pub const EVENT_ENABLE_PROPERTY_ENABLE_SILOS: u32 = 1024;
pub const EVENT_ENABLE_PROPERTY_SOURCE_CONTAINER_TRACKING: u32 = 2048;
pub const PROCESS_TRACE_MODE_REAL_TIME: u32 = 256;
pub const PROCESS_TRACE_MODE_RAW_TIMESTAMP: u32 = 4096;
pub const PROCESS_TRACE_MODE_EVENT_RECORD: u32 = 268435456;

const (
	WNODE_FLAG_ALL_DATA uint32 = 1
	WNODE_FLAG_SINGLE_INSTANCE uint32 = 2
	WNODE_FLAG_SINGLE_ITEM uint32 = 4
	WNODE_FLAG_EVENT_ITEM uint32 = 8
	WNODE_FLAG_FIXED_INSTANCE_SIZE uint32 = 16
	WNODE_FLAG_TOO_SMALL uint32 = 32
	WNODE_FLAG_INSTANCES_SAME uint32 = 64
	WNODE_FLAG_STATIC_INSTANCE_NAMES uint32 = 128
	WNODE_FLAG_INTERNAL uint32 = 256
	WNODE_FLAG_USE_TIMESTAMP uint32 = 512
	WNODE_FLAG_PERSIST_EVENT uint32 = 1024
	WNODE_FLAG_EVENT_REFERENCE uint32 = 8192
	WNODE_FLAG_ANSI_INSTANCENAMES uint32 = 16384
	WNODE_FLAG_METHOD_ITEM uint32 = 32768
	WNODE_FLAG_PDO_INSTANCE_NAMES uint32 = 65536
	WNODE_FLAG_TRACED_GUID uint32 = 131072
	WNODE_FLAG_LOG_WNODE uint32 = 262144
	WNODE_FLAG_USE_GUID_PTR uint32 = 524288
	WNODE_FLAG_USE_MOF_PTR uint32 = 1048576
	WNODE_FLAG_NO_HEADER uint32 = 2097152
	WNODE_FLAG_SEND_DATA_BLOCK uint32 = 4194304
	WNODE_FLAG_VERSIONED_PROPERTIES uint32 = 8388608
	WNODE_FLAG_SEVERITY_MASK uint32 = 4278190080
	WMIREG_FLAG_EXPENSIVE uint32 = 1
	WMIREG_FLAG_INSTANCE_LIST uint32 = 4
	WMIREG_FLAG_INSTANCE_BASENAME uint32 = 8
	WMIREG_FLAG_INSTANCE_PDO uint32 = 32
	WMIREG_FLAG_REMOVE_GUID uint32 = 65536
	WMIREG_FLAG_RESERVED1 uint32 = 131072
	WMIREG_FLAG_RESERVED2 uint32 = 262144
	WMIREG_FLAG_TRACED_GUID uint32 = 524288
	WMIREG_FLAG_TRACE_CONTROL_GUID uint32 = 4096
	WMIREG_FLAG_EVENT_ONLY_GUID uint32 = 64
	WMI_GUIDTYPE_TRACECONTROL uint32 = 0
	WMI_GUIDTYPE_TRACE uint32 = 1
	WMI_GUIDTYPE_DATA uint32 = 2
	WMI_GUIDTYPE_EVENT uint32 = 3
	WMIGUID_QUERY uint32 = 1
	WMIGUID_SET uint32 = 2
	WMIGUID_NOTIFICATION uint32 = 4
	WMIGUID_READ_DESCRIPTION uint32 = 8
	WMIGUID_EXECUTE uint32 = 16
	TRACELOG_CREATE_REALTIME uint32 = 32
	TRACELOG_CREATE_ONDISK uint32 = 64
	TRACELOG_GUID_ENABLE uint32 = 128
	TRACELOG_ACCESS_KERNEL_LOGGER uint32 = 256
	TRACELOG_LOG_EVENT uint32 = 512
	TRACELOG_CREATE_INPROC uint32 = 512
	TRACELOG_ACCESS_REALTIME uint32 = 1024
	TRACELOG_REGISTER_GUIDS uint32 = 2048
	TRACELOG_JOIN_GROUP uint32 = 4096
	WMI_GLOBAL_LOGGER_ID uint32 = 1
	MAX_PAYLOAD_PREDICATES uint32 = 8
	MAX_MOF_FIELDS uint32 = 16
	SYSTEM_EVENT_TYPE uint32 = 1
	EVENT_TRACE_TYPE_INFO uint32 = 0
	EVENT_TRACE_TYPE_START uint32 = 1
	EVENT_TRACE_TYPE_END uint32 = 2
	EVENT_TRACE_TYPE_STOP uint32 = 2
	EVENT_TRACE_TYPE_DC_START uint32 = 3
	EVENT_TRACE_TYPE_DC_END uint32 = 4
	EVENT_TRACE_TYPE_EXTENSION uint32 = 5
	EVENT_TRACE_TYPE_REPLY uint32 = 6
	EVENT_TRACE_TYPE_DEQUEUE uint32 = 7
	EVENT_TRACE_TYPE_RESUME uint32 = 7
	EVENT_TRACE_TYPE_CHECKPOINT uint32 = 8
	EVENT_TRACE_TYPE_SUSPEND uint32 = 8
	EVENT_TRACE_TYPE_WINEVT_SEND uint32 = 9
	EVENT_TRACE_TYPE_WINEVT_RECEIVE uint32 = 240
	TRACE_LEVEL_NONE uint32 = 0
	TRACE_LEVEL_CRITICAL uint32 = 1
	TRACE_LEVEL_FATAL uint32 = 1
	TRACE_LEVEL_ERROR uint32 = 2
	TRACE_LEVEL_WARNING uint32 = 3
	TRACE_LEVEL_INFORMATION uint32 = 4
	TRACE_LEVEL_VERBOSE uint32 = 5
	TRACE_LEVEL_RESERVED6 uint32 = 6
	TRACE_LEVEL_RESERVED7 uint32 = 7
	TRACE_LEVEL_RESERVED8 uint32 = 8
	TRACE_LEVEL_RESERVED9 uint32 = 9
	EVENT_TRACE_TYPE_LOAD uint32 = 10
	EVENT_TRACE_TYPE_TERMINATE uint32 = 11
	EVENT_TRACE_TYPE_IO_READ uint32 = 10
	EVENT_TRACE_TYPE_IO_WRITE uint32 = 11
	EVENT_TRACE_TYPE_IO_READ_INIT uint32 = 12
	EVENT_TRACE_TYPE_IO_WRITE_INIT uint32 = 13
	EVENT_TRACE_TYPE_IO_FLUSH uint32 = 14
	EVENT_TRACE_TYPE_IO_FLUSH_INIT uint32 = 15
	EVENT_TRACE_TYPE_IO_REDIRECTED_INIT uint32 = 16
	EVENT_TRACE_TYPE_MM_TF uint32 = 10
	EVENT_TRACE_TYPE_MM_DZF uint32 = 11
	EVENT_TRACE_TYPE_MM_COW uint32 = 12
	EVENT_TRACE_TYPE_MM_GPF uint32 = 13
	EVENT_TRACE_TYPE_MM_HPF uint32 = 14
	EVENT_TRACE_TYPE_MM_AV uint32 = 15
	EVENT_TRACE_TYPE_SEND uint32 = 10
	EVENT_TRACE_TYPE_RECEIVE uint32 = 11
	EVENT_TRACE_TYPE_CONNECT uint32 = 12
	EVENT_TRACE_TYPE_DISCONNECT uint32 = 13
	EVENT_TRACE_TYPE_RETRANSMIT uint32 = 14
	EVENT_TRACE_TYPE_ACCEPT uint32 = 15
	EVENT_TRACE_TYPE_RECONNECT uint32 = 16
	EVENT_TRACE_TYPE_CONNFAIL uint32 = 17
	EVENT_TRACE_TYPE_COPY_TCP uint32 = 18
	EVENT_TRACE_TYPE_COPY_ARP uint32 = 19
	EVENT_TRACE_TYPE_ACKFULL uint32 = 20
	EVENT_TRACE_TYPE_ACKPART uint32 = 21
	EVENT_TRACE_TYPE_ACKDUP uint32 = 22
	EVENT_TRACE_TYPE_GUIDMAP uint32 = 10
	EVENT_TRACE_TYPE_CONFIG uint32 = 11
	EVENT_TRACE_TYPE_SIDINFO uint32 = 12
	EVENT_TRACE_TYPE_SECURITY uint32 = 13
	EVENT_TRACE_TYPE_DBGID_RSDS uint32 = 64
	EVENT_TRACE_TYPE_REGCREATE uint32 = 10
	EVENT_TRACE_TYPE_REGOPEN uint32 = 11
	EVENT_TRACE_TYPE_REGDELETE uint32 = 12
	EVENT_TRACE_TYPE_REGQUERY uint32 = 13
	EVENT_TRACE_TYPE_REGSETVALUE uint32 = 14
	EVENT_TRACE_TYPE_REGDELETEVALUE uint32 = 15
	EVENT_TRACE_TYPE_REGQUERYVALUE uint32 = 16
	EVENT_TRACE_TYPE_REGENUMERATEKEY uint32 = 17
	EVENT_TRACE_TYPE_REGENUMERATEVALUEKEY uint32 = 18
	EVENT_TRACE_TYPE_REGQUERYMULTIPLEVALUE uint32 = 19
	EVENT_TRACE_TYPE_REGSETINFORMATION uint32 = 20
	EVENT_TRACE_TYPE_REGFLUSH uint32 = 21
	EVENT_TRACE_TYPE_REGKCBCREATE uint32 = 22
	EVENT_TRACE_TYPE_REGKCBDELETE uint32 = 23
	EVENT_TRACE_TYPE_REGKCBRUNDOWNBEGIN uint32 = 24
	EVENT_TRACE_TYPE_REGKCBRUNDOWNEND uint32 = 25
	EVENT_TRACE_TYPE_REGVIRTUALIZE uint32 = 26
	EVENT_TRACE_TYPE_REGCLOSE uint32 = 27
	EVENT_TRACE_TYPE_REGSETSECURITY uint32 = 28
	EVENT_TRACE_TYPE_REGQUERYSECURITY uint32 = 29
	EVENT_TRACE_TYPE_REGCOMMIT uint32 = 30
	EVENT_TRACE_TYPE_REGPREPARE uint32 = 31
	EVENT_TRACE_TYPE_REGROLLBACK uint32 = 32
	EVENT_TRACE_TYPE_REGMOUNTHIVE uint32 = 33
	EVENT_TRACE_TYPE_CONFIG_CPU uint32 = 10
	EVENT_TRACE_TYPE_CONFIG_PHYSICALDISK uint32 = 11
	EVENT_TRACE_TYPE_CONFIG_LOGICALDISK uint32 = 12
	EVENT_TRACE_TYPE_CONFIG_NIC uint32 = 13
	EVENT_TRACE_TYPE_CONFIG_VIDEO uint32 = 14
	EVENT_TRACE_TYPE_CONFIG_SERVICES uint32 = 15
	EVENT_TRACE_TYPE_CONFIG_POWER uint32 = 16
	EVENT_TRACE_TYPE_CONFIG_NETINFO uint32 = 17
	EVENT_TRACE_TYPE_CONFIG_OPTICALMEDIA uint32 = 18
	EVENT_TRACE_TYPE_CONFIG_PHYSICALDISK_EX uint32 = 19
	EVENT_TRACE_TYPE_CONFIG_IRQ uint32 = 21
	EVENT_TRACE_TYPE_CONFIG_PNP uint32 = 22
	EVENT_TRACE_TYPE_CONFIG_IDECHANNEL uint32 = 23
	EVENT_TRACE_TYPE_CONFIG_NUMANODE uint32 = 24
	EVENT_TRACE_TYPE_CONFIG_PLATFORM uint32 = 25
	EVENT_TRACE_TYPE_CONFIG_PROCESSORGROUP uint32 = 26
	EVENT_TRACE_TYPE_CONFIG_PROCESSORNUMBER uint32 = 27
	EVENT_TRACE_TYPE_CONFIG_DPI uint32 = 28
	EVENT_TRACE_TYPE_CONFIG_CI_INFO uint32 = 29
	EVENT_TRACE_TYPE_CONFIG_MACHINEID uint32 = 30
	EVENT_TRACE_TYPE_CONFIG_DEFRAG uint32 = 31
	EVENT_TRACE_TYPE_CONFIG_MOBILEPLATFORM uint32 = 32
	EVENT_TRACE_TYPE_CONFIG_DEVICEFAMILY uint32 = 33
	EVENT_TRACE_TYPE_CONFIG_FLIGHTID uint32 = 34
	EVENT_TRACE_TYPE_CONFIG_PROCESSOR uint32 = 35
	EVENT_TRACE_TYPE_CONFIG_VIRTUALIZATION uint32 = 36
	EVENT_TRACE_TYPE_CONFIG_BOOT uint32 = 37
	EVENT_TRACE_TYPE_OPTICAL_IO_READ uint32 = 55
	EVENT_TRACE_TYPE_OPTICAL_IO_WRITE uint32 = 56
	EVENT_TRACE_TYPE_OPTICAL_IO_FLUSH uint32 = 57
	EVENT_TRACE_TYPE_OPTICAL_IO_READ_INIT uint32 = 58
	EVENT_TRACE_TYPE_OPTICAL_IO_WRITE_INIT uint32 = 59
	EVENT_TRACE_TYPE_OPTICAL_IO_FLUSH_INIT uint32 = 60
	EVENT_TRACE_TYPE_FLT_PREOP_INIT uint32 = 96
	EVENT_TRACE_TYPE_FLT_POSTOP_INIT uint32 = 97
	EVENT_TRACE_TYPE_FLT_PREOP_COMPLETION uint32 = 98
	EVENT_TRACE_TYPE_FLT_POSTOP_COMPLETION uint32 = 99
	EVENT_TRACE_TYPE_FLT_PREOP_FAILURE uint32 = 100
	EVENT_TRACE_TYPE_FLT_POSTOP_FAILURE uint32 = 101
	EVENT_TRACE_FLAG_DEBUG_EVENTS uint32 = 4194304
	EVENT_TRACE_FLAG_EXTENSION uint32 = 2147483648
	EVENT_TRACE_FLAG_FORWARD_WMI uint32 = 1073741824
	EVENT_TRACE_FLAG_ENABLE_RESERVE uint32 = 536870912
	EVENT_TRACE_FILE_MODE_NONE uint32 = 0
	EVENT_TRACE_FILE_MODE_SEQUENTIAL uint32 = 1
	EVENT_TRACE_FILE_MODE_CIRCULAR uint32 = 2
	EVENT_TRACE_FILE_MODE_APPEND uint32 = 4
	EVENT_TRACE_REAL_TIME_MODE uint32 = 256
	EVENT_TRACE_DELAY_OPEN_FILE_MODE uint32 = 512
	EVENT_TRACE_BUFFERING_MODE uint32 = 1024
	EVENT_TRACE_PRIVATE_LOGGER_MODE uint32 = 2048
	EVENT_TRACE_ADD_HEADER_MODE uint32 = 4096
	EVENT_TRACE_USE_GLOBAL_SEQUENCE uint32 = 16384
	EVENT_TRACE_USE_LOCAL_SEQUENCE uint32 = 32768
	EVENT_TRACE_RELOG_MODE uint32 = 65536
	EVENT_TRACE_USE_PAGED_MEMORY uint32 = 16777216
	EVENT_TRACE_FILE_MODE_NEWFILE uint32 = 8
	EVENT_TRACE_FILE_MODE_PREALLOCATE uint32 = 32
	EVENT_TRACE_NONSTOPPABLE_MODE uint32 = 64
	EVENT_TRACE_SECURE_MODE uint32 = 128
	EVENT_TRACE_USE_KBYTES_FOR_SIZE uint32 = 8192
	EVENT_TRACE_PRIVATE_IN_PROC uint32 = 131072
	EVENT_TRACE_MODE_RESERVED uint32 = 1048576
	EVENT_TRACE_NO_PER_PROCESSOR_BUFFERING uint32 = 268435456
	EVENT_TRACE_SYSTEM_LOGGER_MODE uint32 = 33554432
	EVENT_TRACE_ADDTO_TRIAGE_DUMP uint32 = 2147483648
	EVENT_TRACE_STOP_ON_HYBRID_SHUTDOWN uint32 = 4194304
	EVENT_TRACE_PERSIST_ON_HYBRID_SHUTDOWN uint32 = 8388608
	EVENT_TRACE_INDEPENDENT_SESSION_MODE uint32 = 134217728
	EVENT_TRACE_COMPRESSED_MODE uint32 = 67108864
	EVENT_TRACE_CONTROL_INCREMENT_FILE uint32 = 4
	EVENT_TRACE_CONTROL_CONVERT_TO_REALTIME uint32 = 5
	TRACE_MESSAGE_PERFORMANCE_TIMESTAMP uint32 = 16
	TRACE_MESSAGE_POINTER32 uint32 = 64
	TRACE_MESSAGE_POINTER64 uint32 = 128
	TRACE_MESSAGE_FLAG_MASK uint32 = 65535
	EVENT_TRACE_USE_PROCTIME uint32 = 1
	EVENT_TRACE_USE_NOCPUTIME uint32 = 2
	TRACE_HEADER_FLAG_USE_TIMESTAMP uint32 = 512
	TRACE_HEADER_FLAG_TRACED_GUID uint32 = 131072
	TRACE_HEADER_FLAG_LOG_WNODE uint32 = 262144
	TRACE_HEADER_FLAG_USE_GUID_PTR uint32 = 524288
	TRACE_HEADER_FLAG_USE_MOF_PTR uint32 = 1048576
	SYSTEM_ALPC_KW_GENERAL uint64 = 1
	SYSTEM_CONFIG_KW_SYSTEM uint64 = 1
	SYSTEM_CONFIG_KW_GRAPHICS uint64 = 2
	SYSTEM_CONFIG_KW_STORAGE uint64 = 4
	SYSTEM_CONFIG_KW_NETWORK uint64 = 8
	SYSTEM_CONFIG_KW_SERVICES uint64 = 16
	SYSTEM_CONFIG_KW_PNP uint64 = 32
	SYSTEM_CONFIG_KW_OPTICAL uint64 = 64
	SYSTEM_CPU_KW_CONFIG uint64 = 1
	SYSTEM_CPU_KW_CACHE_FLUSH uint64 = 2
	SYSTEM_CPU_KW_SPEC_CONTROL uint64 = 4
	SYSTEM_CPU_KW_DOMAIN_CHANGE uint64 = 8
	SYSTEM_HYPERVISOR_KW_PROFILE uint64 = 1
	SYSTEM_HYPERVISOR_KW_CALLOUTS uint64 = 2
	SYSTEM_HYPERVISOR_KW_VTL_CHANGE uint64 = 4
	SYSTEM_INTERRUPT_KW_GENERAL uint64 = 1
	SYSTEM_INTERRUPT_KW_CLOCK_INTERRUPT uint64 = 2
	SYSTEM_INTERRUPT_KW_DPC uint64 = 4
	SYSTEM_INTERRUPT_KW_DPC_QUEUE uint64 = 8
	SYSTEM_INTERRUPT_KW_WDF_DPC uint64 = 16
	SYSTEM_INTERRUPT_KW_WDF_INTERRUPT uint64 = 32
	SYSTEM_INTERRUPT_KW_IPI uint64 = 64
	SYSTEM_IO_KW_DISK uint64 = 1
	SYSTEM_IO_KW_DISK_INIT uint64 = 2
	SYSTEM_IO_KW_FILENAME uint64 = 4
	SYSTEM_IO_KW_SPLIT uint64 = 8
	SYSTEM_IO_KW_FILE uint64 = 16
	SYSTEM_IO_KW_OPTICAL uint64 = 32
	SYSTEM_IO_KW_OPTICAL_INIT uint64 = 64
	SYSTEM_IO_KW_DRIVERS uint64 = 128
	SYSTEM_IO_KW_CC uint64 = 256
	SYSTEM_IO_KW_NETWORK uint64 = 512
	SYSTEM_IO_KW_FILE_INIT uint64 = 1024
	SYSTEM_IO_KW_TIMER uint64 = 2048
	SYSTEM_IOFILTER_KW_GENERAL uint64 = 1
	SYSTEM_IOFILTER_KW_INIT uint64 = 2
	SYSTEM_IOFILTER_KW_FASTIO uint64 = 4
	SYSTEM_IOFILTER_KW_FAILURE uint64 = 8
	SYSTEM_LOCK_KW_SPINLOCK uint64 = 1
	SYSTEM_LOCK_KW_SPINLOCK_COUNTERS uint64 = 2
	SYSTEM_LOCK_KW_SYNC_OBJECTS uint64 = 4
	SYSTEM_MEMORY_KW_GENERAL uint64 = 1
	SYSTEM_MEMORY_KW_HARD_FAULTS uint64 = 2
	SYSTEM_MEMORY_KW_ALL_FAULTS uint64 = 4
	SYSTEM_MEMORY_KW_POOL uint64 = 8
	SYSTEM_MEMORY_KW_MEMINFO uint64 = 16
	SYSTEM_MEMORY_KW_PFSECTION uint64 = 32
	SYSTEM_MEMORY_KW_MEMINFO_WS uint64 = 64
	SYSTEM_MEMORY_KW_HEAP uint64 = 128
	SYSTEM_MEMORY_KW_WS uint64 = 256
	SYSTEM_MEMORY_KW_CONTMEM_GEN uint64 = 512
	SYSTEM_MEMORY_KW_VIRTUAL_ALLOC uint64 = 1024
	SYSTEM_MEMORY_KW_FOOTPRINT uint64 = 2048
	SYSTEM_MEMORY_KW_SESSION uint64 = 4096
	SYSTEM_MEMORY_KW_REFSET uint64 = 8192
	SYSTEM_MEMORY_KW_VAMAP uint64 = 16384
	SYSTEM_MEMORY_KW_NONTRADEABLE uint64 = 32768
	SYSTEM_OBJECT_KW_GENERAL uint64 = 1
	SYSTEM_OBJECT_KW_HANDLE uint64 = 2
	SYSTEM_POWER_KW_GENERAL uint64 = 1
	SYSTEM_POWER_KW_HIBER_RUNDOWN uint64 = 2
	SYSTEM_POWER_KW_PROCESSOR_IDLE uint64 = 4
	SYSTEM_POWER_KW_IDLE_SELECTION uint64 = 8
	SYSTEM_POWER_KW_PPM_EXIT_LATENCY uint64 = 16
	SYSTEM_PROCESS_KW_GENERAL uint64 = 1
	SYSTEM_PROCESS_KW_INSWAP uint64 = 2
	SYSTEM_PROCESS_KW_FREEZE uint64 = 4
	SYSTEM_PROCESS_KW_PERF_COUNTER uint64 = 8
	SYSTEM_PROCESS_KW_WAKE_COUNTER uint64 = 16
	SYSTEM_PROCESS_KW_WAKE_DROP uint64 = 32
	SYSTEM_PROCESS_KW_WAKE_EVENT uint64 = 64
	SYSTEM_PROCESS_KW_DEBUG_EVENTS uint64 = 128
	SYSTEM_PROCESS_KW_DBGPRINT uint64 = 256
	SYSTEM_PROCESS_KW_JOB uint64 = 512
	SYSTEM_PROCESS_KW_WORKER_THREAD uint64 = 1024
	SYSTEM_PROCESS_KW_THREAD uint64 = 2048
	SYSTEM_PROCESS_KW_LOADER uint64 = 4096
	SYSTEM_PROFILE_KW_GENERAL uint64 = 1
	SYSTEM_PROFILE_KW_PMC_PROFILE uint64 = 2
	SYSTEM_REGISTRY_KW_GENERAL uint64 = 1
	SYSTEM_REGISTRY_KW_HIVE uint64 = 2
	SYSTEM_REGISTRY_KW_NOTIFICATION uint64 = 4
	SYSTEM_SCHEDULER_KW_XSCHEDULER uint64 = 1
	SYSTEM_SCHEDULER_KW_DISPATCHER uint64 = 2
	SYSTEM_SCHEDULER_KW_KERNEL_QUEUE uint64 = 4
	SYSTEM_SCHEDULER_KW_SHOULD_YIELD uint64 = 8
	SYSTEM_SCHEDULER_KW_ANTI_STARVATION uint64 = 16
	SYSTEM_SCHEDULER_KW_LOAD_BALANCER uint64 = 32
	SYSTEM_SCHEDULER_KW_AFFINITY uint64 = 64
	SYSTEM_SCHEDULER_KW_PRIORITY uint64 = 128
	SYSTEM_SCHEDULER_KW_IDEAL_PROCESSOR uint64 = 256
	SYSTEM_SCHEDULER_KW_CONTEXT_SWITCH uint64 = 512
	SYSTEM_SCHEDULER_KW_COMPACT_CSWITCH uint64 = 1024
	SYSTEM_SCHEDULER_KW_SCHEDULE_THREAD uint64 = 2048
	SYSTEM_SCHEDULER_KW_READY_QUEUE uint64 = 4096
	SYSTEM_SCHEDULER_KW_CPU_PARTITION uint64 = 8192
	SYSTEM_SCHEDULER_KW_THREAD_FEEDBACK_READ uint64 = 16384
	SYSTEM_SCHEDULER_KW_WORKLOAD_CLASS_UPDATE uint64 = 32768
	SYSTEM_SCHEDULER_KW_AUTOBOOST uint64 = 65536
	SYSTEM_SYSCALL_KW_GENERAL uint64 = 1
	SYSTEM_TIMER_KW_GENERAL uint64 = 1
	SYSTEM_TIMER_KW_CLOCK_TIMER uint64 = 2
	SYSTEM_MEMORY_POOL_FILTER_ID uint32 = 1
	_typedef_TRACELOGGER_HANDLE uint32 = 1
	ETW_NULL_TYPE_VALUE uint32 = 0
	ETW_OBJECT_TYPE_VALUE uint32 = 1
	ETW_STRING_TYPE_VALUE uint32 = 2
	ETW_SBYTE_TYPE_VALUE uint32 = 3
	ETW_BYTE_TYPE_VALUE uint32 = 4
	ETW_INT16_TYPE_VALUE uint32 = 5
	ETW_UINT16_TYPE_VALUE uint32 = 6
	ETW_INT32_TYPE_VALUE uint32 = 7
	ETW_UINT32_TYPE_VALUE uint32 = 8
	ETW_INT64_TYPE_VALUE uint32 = 9
	ETW_UINT64_TYPE_VALUE uint32 = 10
	ETW_CHAR_TYPE_VALUE uint32 = 11
	ETW_SINGLE_TYPE_VALUE uint32 = 12
	ETW_DOUBLE_TYPE_VALUE uint32 = 13
	ETW_BOOLEAN_TYPE_VALUE uint32 = 14
	ETW_DECIMAL_TYPE_VALUE uint32 = 15
	ETW_GUID_TYPE_VALUE uint32 = 101
	ETW_ASCIICHAR_TYPE_VALUE uint32 = 102
	ETW_ASCIISTRING_TYPE_VALUE uint32 = 103
	ETW_COUNTED_STRING_TYPE_VALUE uint32 = 104
	ETW_POINTER_TYPE_VALUE uint32 = 105
	ETW_SIZET_TYPE_VALUE uint32 = 106
	ETW_HIDDEN_TYPE_VALUE uint32 = 107
	ETW_BOOL_TYPE_VALUE uint32 = 108
	ETW_COUNTED_ANSISTRING_TYPE_VALUE uint32 = 109
	ETW_REVERSED_COUNTED_STRING_TYPE_VALUE uint32 = 110
	ETW_REVERSED_COUNTED_ANSISTRING_TYPE_VALUE uint32 = 111
	ETW_NON_NULL_TERMINATED_STRING_TYPE_VALUE uint32 = 112
	ETW_REDUCED_ANSISTRING_TYPE_VALUE uint32 = 113
	ETW_REDUCED_STRING_TYPE_VALUE uint32 = 114
	ETW_SID_TYPE_VALUE uint32 = 115
	ETW_VARIANT_TYPE_VALUE uint32 = 116
	ETW_PTVECTOR_TYPE_VALUE uint32 = 117
	ETW_WMITIME_TYPE_VALUE uint32 = 118
	ETW_DATETIME_TYPE_VALUE uint32 = 119
	ETW_REFRENCE_TYPE_VALUE uint32 = 120
	TRACE_PROVIDER_FLAG_LEGACY uint32 = 1
	TRACE_PROVIDER_FLAG_PRE_ENABLE uint32 = 2
	TRACE_LBR_EVENT_OPCODE uint32 = 32
	TRACE_LBR_MAXIMUM_EVENTS uint32 = 4
	ENABLE_TRACE_PARAMETERS_VERSION uint32 = 1
	ENABLE_TRACE_PARAMETERS_VERSION_2 uint32 = 2
	EVENT_MIN_LEVEL uint32 = 0
	EVENT_MAX_LEVEL uint32 = 255
	EVENT_ACTIVITY_CTRL_GET_ID uint32 = 1
	EVENT_ACTIVITY_CTRL_SET_ID uint32 = 2
	EVENT_ACTIVITY_CTRL_CREATE_ID uint32 = 3
	EVENT_ACTIVITY_CTRL_GET_SET_ID uint32 = 4
	EVENT_ACTIVITY_CTRL_CREATE_SET_ID uint32 = 5
	MAX_EVENT_DATA_DESCRIPTORS uint32 = 128
	MAX_EVENT_FILTER_DATA_SIZE uint32 = 1024
	MAX_EVENT_FILTER_PAYLOAD_SIZE uint32 = 4096
	MAX_EVENT_FILTER_EVENT_NAME_SIZE uint32 = 4096
	MAX_EVENT_FILTERS_COUNT uint32 = 13
	MAX_EVENT_FILTER_PID_COUNT uint32 = 8
	MAX_EVENT_FILTER_EVENT_ID_COUNT uint32 = 64
	EVENT_FILTER_TYPE_NONE uint32 = 0
	EVENT_FILTER_TYPE_SCHEMATIZED uint32 = 2147483648
	EVENT_FILTER_TYPE_SYSTEM_FLAGS uint32 = 2147483649
	EVENT_FILTER_TYPE_TRACEHANDLE uint32 = 2147483650
	EVENT_FILTER_TYPE_PID uint32 = 2147483652
	EVENT_FILTER_TYPE_EXECUTABLE_NAME uint32 = 2147483656
	EVENT_FILTER_TYPE_PACKAGE_ID uint32 = 2147483664
	EVENT_FILTER_TYPE_PACKAGE_APP_ID uint32 = 2147483680
	EVENT_FILTER_TYPE_PAYLOAD uint32 = 2147483904
	EVENT_FILTER_TYPE_EVENT_ID uint32 = 2147484160
	EVENT_FILTER_TYPE_EVENT_NAME uint32 = 2147484672
	EVENT_FILTER_TYPE_STACKWALK uint32 = 2147487744
	EVENT_FILTER_TYPE_STACKWALK_NAME uint32 = 2147491840
	EVENT_FILTER_TYPE_STACKWALK_LEVEL_KW uint32 = 2147500032
	EVENT_FILTER_TYPE_CONTAINER uint32 = 2147516416
	EVENT_DATA_DESCRIPTOR_TYPE_NONE uint32 = 0
	EVENT_DATA_DESCRIPTOR_TYPE_EVENT_METADATA uint32 = 1
	EVENT_DATA_DESCRIPTOR_TYPE_PROVIDER_METADATA uint32 = 2
	EVENT_DATA_DESCRIPTOR_TYPE_TIMESTAMP_OVERRIDE uint32 = 3
	EVENT_WRITE_FLAG_NO_FAULTING uint32 = 1
	EVENT_WRITE_FLAG_INPRIVATE uint32 = 2
	EVENT_HEADER_EXT_TYPE_RELATED_ACTIVITYID uint32 = 1
	EVENT_HEADER_EXT_TYPE_SID uint32 = 2
	EVENT_HEADER_EXT_TYPE_TS_ID uint32 = 3
	EVENT_HEADER_EXT_TYPE_INSTANCE_INFO uint32 = 4
	EVENT_HEADER_EXT_TYPE_STACK_TRACE32 uint32 = 5
	EVENT_HEADER_EXT_TYPE_STACK_TRACE64 uint32 = 6
	EVENT_HEADER_EXT_TYPE_PEBS_INDEX uint32 = 7
	EVENT_HEADER_EXT_TYPE_PMC_COUNTERS uint32 = 8
	EVENT_HEADER_EXT_TYPE_PSM_KEY uint32 = 9
	EVENT_HEADER_EXT_TYPE_EVENT_KEY uint32 = 10
	EVENT_HEADER_EXT_TYPE_EVENT_SCHEMA_TL uint32 = 11
	EVENT_HEADER_EXT_TYPE_PROV_TRAITS uint32 = 12
	EVENT_HEADER_EXT_TYPE_PROCESS_START_KEY uint32 = 13
	EVENT_HEADER_EXT_TYPE_CONTROL_GUID uint32 = 14
	EVENT_HEADER_EXT_TYPE_QPC_DELTA uint32 = 15
	EVENT_HEADER_EXT_TYPE_CONTAINER_ID uint32 = 16
	EVENT_HEADER_EXT_TYPE_STACK_KEY32 uint32 = 17
	EVENT_HEADER_EXT_TYPE_STACK_KEY64 uint32 = 18
	EVENT_HEADER_EXT_TYPE_MAX uint32 = 19
	EVENT_HEADER_PROPERTY_XML uint32 = 1
	EVENT_HEADER_PROPERTY_FORWARDED_XML uint32 = 2
	EVENT_HEADER_PROPERTY_LEGACY_EVENTLOG uint32 = 4
	EVENT_HEADER_PROPERTY_RELOGGABLE uint32 = 8
	EVENT_HEADER_FLAG_EXTENDED_INFO uint32 = 1
	EVENT_HEADER_FLAG_PRIVATE_SESSION uint32 = 2
	EVENT_HEADER_FLAG_STRING_ONLY uint32 = 4
	EVENT_HEADER_FLAG_TRACE_MESSAGE uint32 = 8
	EVENT_HEADER_FLAG_NO_CPUTIME uint32 = 16
	EVENT_HEADER_FLAG_32_BIT_HEADER uint32 = 32
	EVENT_HEADER_FLAG_64_BIT_HEADER uint32 = 64
	EVENT_HEADER_FLAG_DECODE_GUID uint32 = 128
	EVENT_HEADER_FLAG_CLASSIC_HEADER uint32 = 256
	EVENT_HEADER_FLAG_PROCESSOR_INDEX uint32 = 512
	EVENT_ENABLE_PROPERTY_SID uint32 = 1
	EVENT_ENABLE_PROPERTY_TS_ID uint32 = 2
	EVENT_ENABLE_PROPERTY_STACK_TRACE uint32 = 4
	EVENT_ENABLE_PROPERTY_PSM_KEY uint32 = 8
	EVENT_ENABLE_PROPERTY_IGNORE_KEYWORD_0 uint32 = 16
	EVENT_ENABLE_PROPERTY_PROVIDER_GROUP uint32 = 32
	EVENT_ENABLE_PROPERTY_ENABLE_KEYWORD_0 uint32 = 64
	EVENT_ENABLE_PROPERTY_PROCESS_START_KEY uint32 = 128
	EVENT_ENABLE_PROPERTY_EVENT_KEY uint32 = 256
	EVENT_ENABLE_PROPERTY_EXCLUDE_INPRIVATE uint32 = 512
	EVENT_ENABLE_PROPERTY_ENABLE_SILOS uint32 = 1024
	EVENT_ENABLE_PROPERTY_SOURCE_CONTAINER_TRACKING uint32 = 2048
	PROCESS_TRACE_MODE_REAL_TIME uint32 = 256
	PROCESS_TRACE_MODE_RAW_TIMESTAMP uint32 = 4096
	PROCESS_TRACE_MODE_EVENT_RECORD uint32 = 268435456
)

#define global ALPCGuid                                        "{45D8CCCD-539F-4B72-A8B7-5C683142609A}"
#define global DiskIoGuid                                      "{3D6FA8D4-FE05-11D0-9DDA-00C04FD7BA7C}"
#define global EventTraceConfigGuid                            "{01853A65-418F-4F36-AEFC-DC0F1D2FD235}"
#define global FileIoGuid                                      "{90CBDC39-4A3E-11D1-84F4-0000F80464E3}"
#define global ImageLoadGuid                                   "{2CB15D1D-5FC1-11D2-ABE1-00A0C911F518}"
#define global PageFaultGuid                                   "{3D6FA8D3-FE05-11D0-9DDA-00C04FD7BA7C}"
#define global PerfInfoGuid                                    "{CE1DBFB4-137E-4DA6-87B0-3F59AA102CBC}"
#define global ProcessGuid                                     "{3D6FA8D0-FE05-11D0-9DDA-00C04FD7BA7C}"
#define global RegistryGuid                                    "{AE53722E-C863-11D2-8659-00C04FA321A1}"
#define global SplitIoGuid                                     "{D837CA92-12B9-44A5-AD6A-3A65B3578AA8}"
#define global TcpIpGuid                                       "{9A280AC0-C8E0-11D1-84E2-00C04FB998A2}"
#define global ThreadGuid                                      "{3D6FA8D1-FE05-11D0-9DDA-00C04FD7BA7C}"
#define global UdpIpGuid                                       "{BF3A50C5-A9C9-4988-A005-2DF0B7C80F80}"
#define global WNODE_FLAG_ALL_DATA                             1
#define global WNODE_FLAG_SINGLE_INSTANCE                      2
#define global WNODE_FLAG_SINGLE_ITEM                          4
#define global WNODE_FLAG_EVENT_ITEM                           8
#define global WNODE_FLAG_FIXED_INSTANCE_SIZE                  16
#define global WNODE_FLAG_TOO_SMALL                            32
#define global WNODE_FLAG_INSTANCES_SAME                       64
#define global WNODE_FLAG_STATIC_INSTANCE_NAMES                128
#define global WNODE_FLAG_INTERNAL                             256
#define global WNODE_FLAG_USE_TIMESTAMP                        512
#define global WNODE_FLAG_PERSIST_EVENT                        1024
#define global WNODE_FLAG_EVENT_REFERENCE                      8192
#define global WNODE_FLAG_ANSI_INSTANCENAMES                   16384
#define global WNODE_FLAG_METHOD_ITEM                          32768
#define global WNODE_FLAG_PDO_INSTANCE_NAMES                   65536
#define global WNODE_FLAG_TRACED_GUID                          131072
#define global WNODE_FLAG_LOG_WNODE                            262144
#define global WNODE_FLAG_USE_GUID_PTR                         524288
#define global WNODE_FLAG_USE_MOF_PTR                          1048576
#define global WNODE_FLAG_NO_HEADER                            2097152
#define global WNODE_FLAG_SEND_DATA_BLOCK                      4194304
#define global WNODE_FLAG_VERSIONED_PROPERTIES                 8388608
#define global WNODE_FLAG_SEVERITY_MASK                        4278190080
#define global WMIREG_FLAG_EXPENSIVE                           1
#define global WMIREG_FLAG_INSTANCE_LIST                       4
#define global WMIREG_FLAG_INSTANCE_BASENAME                   8
#define global WMIREG_FLAG_INSTANCE_PDO                        32
#define global WMIREG_FLAG_REMOVE_GUID                         65536
#define global WMIREG_FLAG_RESERVED1                           131072
#define global WMIREG_FLAG_RESERVED2                           262144
#define global WMIREG_FLAG_TRACED_GUID                         524288
#define global WMIREG_FLAG_TRACE_CONTROL_GUID                  4096
#define global WMIREG_FLAG_EVENT_ONLY_GUID                     64
#define global WMI_GUIDTYPE_TRACECONTROL                       0
#define global WMI_GUIDTYPE_TRACE                              1
#define global WMI_GUIDTYPE_DATA                               2
#define global WMI_GUIDTYPE_EVENT                              3
#define global WMIGUID_QUERY                                   1
#define global WMIGUID_SET                                     2
#define global WMIGUID_NOTIFICATION                            4
#define global WMIGUID_READ_DESCRIPTION                        8
#define global WMIGUID_EXECUTE                                 16
#define global TRACELOG_CREATE_REALTIME                        32
#define global TRACELOG_CREATE_ONDISK                          64
#define global TRACELOG_GUID_ENABLE                            128
#define global TRACELOG_ACCESS_KERNEL_LOGGER                   256
#define global TRACELOG_LOG_EVENT                              512
#define global TRACELOG_CREATE_INPROC                          512
#define global TRACELOG_ACCESS_REALTIME                        1024
#define global TRACELOG_REGISTER_GUIDS                         2048
#define global TRACELOG_JOIN_GROUP                             4096
#define global WMI_GLOBAL_LOGGER_ID                            1
#define global MAX_PAYLOAD_PREDICATES                          8
#define global EventTraceGuid                                  "{68FDD900-4A3E-11D1-84F4-0000F80464E3}"
#define global SystemTraceControlGuid                          "{9E814AAD-3204-11D2-9A82-006008A86939}"
#define global DefaultTraceSecurityGuid                        "{0811C1AF-7A07-4A06-82ED-869455CDF713}"
#define global PrivateLoggerNotificationGuid                   "{3595AB5C-042A-4C8E-B942-2D059BFEB1B1}"
#define global SystemIoFilterProviderGuid                      "{FBD09363-9E22-4661-B8BF-E7A34B535B8C}"
#define global SystemObjectProviderGuid                        "{FEBD7460-3D1D-47EB-AF49-C9EEB1E146F2}"
#define global SystemPowerProviderGuid                         "{C134884A-32D5-4488-80E5-14ED7ABB8269}"
#define global SystemHypervisorProviderGuid                    "{BAFA072A-918A-4BED-B622-BC152097098F}"
#define global SystemLockProviderGuid                          "{721DDFD3-DACC-4E1E-B26A-A2CB31D4705A}"
#define global SystemConfigProviderGuid                        "{FEF3A8B6-318D-4B67-A96A-3B0F6B8F18FE}"
#define global SystemCpuProviderGuid                           "{C6C5265F-EAE8-4650-AAE4-9D48603D8510}"
#define global SystemSchedulerProviderGuid                     "{599A2A76-4D91-4910-9AC7-7D33F2E97A6C}"
#define global SystemProfileProviderGuid                       "{BFEB0324-1CEE-496F-A409-2AC2B48A6322}"
#define global SystemIoProviderGuid                            "{3D5C43E3-0F1C-4202-B817-174C0070DC79}"
#define global SystemMemoryProviderGuid                        "{82958CA9-B6CD-47F8-A3A8-03AE85A4BC24}"
#define global SystemRegistryProviderGuid                      "{16156BD9-FAB4-4CFA-A232-89D1099058E3}"
#define global SystemProcessProviderGuid                       "{151F55DC-467D-471F-83B5-5F889D46FF66}"
#define global SystemAlpcProviderGuid                          "{FCB9BAAF-E529-4980-92E9-CED1A6AADFDF}"
#define global SystemSyscallProviderGuid                       "{434286F7-6F1B-45BB-B37E-95F623046C7C}"
#define global SystemInterruptProviderGuid                     "{D4BBEE17-B545-4888-858B-744169015B25}"
#define global SystemTimerProviderGuid                         "{4F061568-E215-499F-AB2E-EDA0AE890A5B}"
#define global LastBranchRecordProviderGuid                    "{99134383-5248-43FC-834B-529454E75DF3}"
#define global KERNEL_LOGGER_NAMEW                             "NT Kernel Logger"
#define global GLOBAL_LOGGER_NAMEW                             "GlobalLogger"
#define global EVENT_LOGGER_NAMEW                              "EventLog"
#define global DIAG_LOGGER_NAMEW                               "DiagLog"
#define global KERNEL_LOGGER_NAMEA                             "NT Kernel Logger"
#define global GLOBAL_LOGGER_NAMEA                             "GlobalLogger"
#define global EVENT_LOGGER_NAMEA                              "EventLog"
#define global DIAG_LOGGER_NAMEA                               "DiagLog"
#define global MAX_MOF_FIELDS                                  16
#define global SYSTEM_EVENT_TYPE                               1
#define global EVENT_TRACE_TYPE_INFO                           0
#define global EVENT_TRACE_TYPE_START                          1
#define global EVENT_TRACE_TYPE_END                            2
#define global EVENT_TRACE_TYPE_STOP                           2
#define global EVENT_TRACE_TYPE_DC_START                       3
#define global EVENT_TRACE_TYPE_DC_END                         4
#define global EVENT_TRACE_TYPE_EXTENSION                      5
#define global EVENT_TRACE_TYPE_REPLY                          6
#define global EVENT_TRACE_TYPE_DEQUEUE                        7
#define global EVENT_TRACE_TYPE_RESUME                         7
#define global EVENT_TRACE_TYPE_CHECKPOINT                     8
#define global EVENT_TRACE_TYPE_SUSPEND                        8
#define global EVENT_TRACE_TYPE_WINEVT_SEND                    9
#define global EVENT_TRACE_TYPE_WINEVT_RECEIVE                 240
#define global TRACE_LEVEL_NONE                                0
#define global TRACE_LEVEL_CRITICAL                            1
#define global TRACE_LEVEL_FATAL                               1
#define global TRACE_LEVEL_ERROR                               2
#define global TRACE_LEVEL_WARNING                             3
#define global TRACE_LEVEL_INFORMATION                         4
#define global TRACE_LEVEL_VERBOSE                             5
#define global TRACE_LEVEL_RESERVED6                           6
#define global TRACE_LEVEL_RESERVED7                           7
#define global TRACE_LEVEL_RESERVED8                           8
#define global TRACE_LEVEL_RESERVED9                           9
#define global EVENT_TRACE_TYPE_LOAD                           10
#define global EVENT_TRACE_TYPE_TERMINATE                      11
#define global EVENT_TRACE_TYPE_IO_READ                        10
#define global EVENT_TRACE_TYPE_IO_WRITE                       11
#define global EVENT_TRACE_TYPE_IO_READ_INIT                   12
#define global EVENT_TRACE_TYPE_IO_WRITE_INIT                  13
#define global EVENT_TRACE_TYPE_IO_FLUSH                       14
#define global EVENT_TRACE_TYPE_IO_FLUSH_INIT                  15
#define global EVENT_TRACE_TYPE_IO_REDIRECTED_INIT             16
#define global EVENT_TRACE_TYPE_MM_TF                          10
#define global EVENT_TRACE_TYPE_MM_DZF                         11
#define global EVENT_TRACE_TYPE_MM_COW                         12
#define global EVENT_TRACE_TYPE_MM_GPF                         13
#define global EVENT_TRACE_TYPE_MM_HPF                         14
#define global EVENT_TRACE_TYPE_MM_AV                          15
#define global EVENT_TRACE_TYPE_SEND                           10
#define global EVENT_TRACE_TYPE_RECEIVE                        11
#define global EVENT_TRACE_TYPE_CONNECT                        12
#define global EVENT_TRACE_TYPE_DISCONNECT                     13
#define global EVENT_TRACE_TYPE_RETRANSMIT                     14
#define global EVENT_TRACE_TYPE_ACCEPT                         15
#define global EVENT_TRACE_TYPE_RECONNECT                      16
#define global EVENT_TRACE_TYPE_CONNFAIL                       17
#define global EVENT_TRACE_TYPE_COPY_TCP                       18
#define global EVENT_TRACE_TYPE_COPY_ARP                       19
#define global EVENT_TRACE_TYPE_ACKFULL                        20
#define global EVENT_TRACE_TYPE_ACKPART                        21
#define global EVENT_TRACE_TYPE_ACKDUP                         22
#define global EVENT_TRACE_TYPE_GUIDMAP                        10
#define global EVENT_TRACE_TYPE_CONFIG                         11
#define global EVENT_TRACE_TYPE_SIDINFO                        12
#define global EVENT_TRACE_TYPE_SECURITY                       13
#define global EVENT_TRACE_TYPE_DBGID_RSDS                     64
#define global EVENT_TRACE_TYPE_REGCREATE                      10
#define global EVENT_TRACE_TYPE_REGOPEN                        11
#define global EVENT_TRACE_TYPE_REGDELETE                      12
#define global EVENT_TRACE_TYPE_REGQUERY                       13
#define global EVENT_TRACE_TYPE_REGSETVALUE                    14
#define global EVENT_TRACE_TYPE_REGDELETEVALUE                 15
#define global EVENT_TRACE_TYPE_REGQUERYVALUE                  16
#define global EVENT_TRACE_TYPE_REGENUMERATEKEY                17
#define global EVENT_TRACE_TYPE_REGENUMERATEVALUEKEY           18
#define global EVENT_TRACE_TYPE_REGQUERYMULTIPLEVALUE          19
#define global EVENT_TRACE_TYPE_REGSETINFORMATION              20
#define global EVENT_TRACE_TYPE_REGFLUSH                       21
#define global EVENT_TRACE_TYPE_REGKCBCREATE                   22
#define global EVENT_TRACE_TYPE_REGKCBDELETE                   23
#define global EVENT_TRACE_TYPE_REGKCBRUNDOWNBEGIN             24
#define global EVENT_TRACE_TYPE_REGKCBRUNDOWNEND               25
#define global EVENT_TRACE_TYPE_REGVIRTUALIZE                  26
#define global EVENT_TRACE_TYPE_REGCLOSE                       27
#define global EVENT_TRACE_TYPE_REGSETSECURITY                 28
#define global EVENT_TRACE_TYPE_REGQUERYSECURITY               29
#define global EVENT_TRACE_TYPE_REGCOMMIT                      30
#define global EVENT_TRACE_TYPE_REGPREPARE                     31
#define global EVENT_TRACE_TYPE_REGROLLBACK                    32
#define global EVENT_TRACE_TYPE_REGMOUNTHIVE                   33
#define global EVENT_TRACE_TYPE_CONFIG_CPU                     10
#define global EVENT_TRACE_TYPE_CONFIG_PHYSICALDISK            11
#define global EVENT_TRACE_TYPE_CONFIG_LOGICALDISK             12
#define global EVENT_TRACE_TYPE_CONFIG_NIC                     13
#define global EVENT_TRACE_TYPE_CONFIG_VIDEO                   14
#define global EVENT_TRACE_TYPE_CONFIG_SERVICES                15
#define global EVENT_TRACE_TYPE_CONFIG_POWER                   16
#define global EVENT_TRACE_TYPE_CONFIG_NETINFO                 17
#define global EVENT_TRACE_TYPE_CONFIG_OPTICALMEDIA            18
#define global EVENT_TRACE_TYPE_CONFIG_PHYSICALDISK_EX         19
#define global EVENT_TRACE_TYPE_CONFIG_IRQ                     21
#define global EVENT_TRACE_TYPE_CONFIG_PNP                     22
#define global EVENT_TRACE_TYPE_CONFIG_IDECHANNEL              23
#define global EVENT_TRACE_TYPE_CONFIG_NUMANODE                24
#define global EVENT_TRACE_TYPE_CONFIG_PLATFORM                25
#define global EVENT_TRACE_TYPE_CONFIG_PROCESSORGROUP          26
#define global EVENT_TRACE_TYPE_CONFIG_PROCESSORNUMBER         27
#define global EVENT_TRACE_TYPE_CONFIG_DPI                     28
#define global EVENT_TRACE_TYPE_CONFIG_CI_INFO                 29
#define global EVENT_TRACE_TYPE_CONFIG_MACHINEID               30
#define global EVENT_TRACE_TYPE_CONFIG_DEFRAG                  31
#define global EVENT_TRACE_TYPE_CONFIG_MOBILEPLATFORM          32
#define global EVENT_TRACE_TYPE_CONFIG_DEVICEFAMILY            33
#define global EVENT_TRACE_TYPE_CONFIG_FLIGHTID                34
#define global EVENT_TRACE_TYPE_CONFIG_PROCESSOR               35
#define global EVENT_TRACE_TYPE_CONFIG_VIRTUALIZATION          36
#define global EVENT_TRACE_TYPE_CONFIG_BOOT                    37
#define global EVENT_TRACE_TYPE_OPTICAL_IO_READ                55
#define global EVENT_TRACE_TYPE_OPTICAL_IO_WRITE               56
#define global EVENT_TRACE_TYPE_OPTICAL_IO_FLUSH               57
#define global EVENT_TRACE_TYPE_OPTICAL_IO_READ_INIT           58
#define global EVENT_TRACE_TYPE_OPTICAL_IO_WRITE_INIT          59
#define global EVENT_TRACE_TYPE_OPTICAL_IO_FLUSH_INIT          60
#define global EVENT_TRACE_TYPE_FLT_PREOP_INIT                 96
#define global EVENT_TRACE_TYPE_FLT_POSTOP_INIT                97
#define global EVENT_TRACE_TYPE_FLT_PREOP_COMPLETION           98
#define global EVENT_TRACE_TYPE_FLT_POSTOP_COMPLETION          99
#define global EVENT_TRACE_TYPE_FLT_PREOP_FAILURE              100
#define global EVENT_TRACE_TYPE_FLT_POSTOP_FAILURE             101
#define global EVENT_TRACE_FLAG_DEBUG_EVENTS                   4194304
#define global EVENT_TRACE_FLAG_EXTENSION                      2147483648
#define global EVENT_TRACE_FLAG_FORWARD_WMI                    1073741824
#define global EVENT_TRACE_FLAG_ENABLE_RESERVE                 536870912
#define global EVENT_TRACE_FILE_MODE_NONE                      0
#define global EVENT_TRACE_FILE_MODE_SEQUENTIAL                1
#define global EVENT_TRACE_FILE_MODE_CIRCULAR                  2
#define global EVENT_TRACE_FILE_MODE_APPEND                    4
#define global EVENT_TRACE_REAL_TIME_MODE                      256
#define global EVENT_TRACE_DELAY_OPEN_FILE_MODE                512
#define global EVENT_TRACE_BUFFERING_MODE                      1024
#define global EVENT_TRACE_PRIVATE_LOGGER_MODE                 2048
#define global EVENT_TRACE_ADD_HEADER_MODE                     4096
#define global EVENT_TRACE_USE_GLOBAL_SEQUENCE                 16384
#define global EVENT_TRACE_USE_LOCAL_SEQUENCE                  32768
#define global EVENT_TRACE_RELOG_MODE                          65536
#define global EVENT_TRACE_USE_PAGED_MEMORY                    16777216
#define global EVENT_TRACE_FILE_MODE_NEWFILE                   8
#define global EVENT_TRACE_FILE_MODE_PREALLOCATE               32
#define global EVENT_TRACE_NONSTOPPABLE_MODE                   64
#define global EVENT_TRACE_SECURE_MODE                         128
#define global EVENT_TRACE_USE_KBYTES_FOR_SIZE                 8192
#define global EVENT_TRACE_PRIVATE_IN_PROC                     131072
#define global EVENT_TRACE_MODE_RESERVED                       1048576
#define global EVENT_TRACE_NO_PER_PROCESSOR_BUFFERING          268435456
#define global EVENT_TRACE_SYSTEM_LOGGER_MODE                  33554432
#define global EVENT_TRACE_ADDTO_TRIAGE_DUMP                   2147483648
#define global EVENT_TRACE_STOP_ON_HYBRID_SHUTDOWN             4194304
#define global EVENT_TRACE_PERSIST_ON_HYBRID_SHUTDOWN          8388608
#define global EVENT_TRACE_INDEPENDENT_SESSION_MODE            134217728
#define global EVENT_TRACE_COMPRESSED_MODE                     67108864
#define global EVENT_TRACE_CONTROL_INCREMENT_FILE              4
#define global EVENT_TRACE_CONTROL_CONVERT_TO_REALTIME         5
#define global TRACE_MESSAGE_PERFORMANCE_TIMESTAMP             16
#define global TRACE_MESSAGE_POINTER32                         64
#define global TRACE_MESSAGE_POINTER64                         128
#define global TRACE_MESSAGE_FLAG_MASK                         65535
#define global EVENT_TRACE_USE_PROCTIME                        1
#define global EVENT_TRACE_USE_NOCPUTIME                       2
#define global TRACE_HEADER_FLAG_USE_TIMESTAMP                 512
#define global TRACE_HEADER_FLAG_TRACED_GUID                   131072
#define global TRACE_HEADER_FLAG_LOG_WNODE                     262144
#define global TRACE_HEADER_FLAG_USE_GUID_PTR                  524288
#define global TRACE_HEADER_FLAG_USE_MOF_PTR                   1048576
#define global SYSTEM_ALPC_KW_GENERAL                          1
#define global SYSTEM_CONFIG_KW_SYSTEM                         1
#define global SYSTEM_CONFIG_KW_GRAPHICS                       2
#define global SYSTEM_CONFIG_KW_STORAGE                        4
#define global SYSTEM_CONFIG_KW_NETWORK                        8
#define global SYSTEM_CONFIG_KW_SERVICES                       16
#define global SYSTEM_CONFIG_KW_PNP                            32
#define global SYSTEM_CONFIG_KW_OPTICAL                        64
#define global SYSTEM_CPU_KW_CONFIG                            1
#define global SYSTEM_CPU_KW_CACHE_FLUSH                       2
#define global SYSTEM_CPU_KW_SPEC_CONTROL                      4
#define global SYSTEM_CPU_KW_DOMAIN_CHANGE                     8
#define global SYSTEM_HYPERVISOR_KW_PROFILE                    1
#define global SYSTEM_HYPERVISOR_KW_CALLOUTS                   2
#define global SYSTEM_HYPERVISOR_KW_VTL_CHANGE                 4
#define global SYSTEM_INTERRUPT_KW_GENERAL                     1
#define global SYSTEM_INTERRUPT_KW_CLOCK_INTERRUPT             2
#define global SYSTEM_INTERRUPT_KW_DPC                         4
#define global SYSTEM_INTERRUPT_KW_DPC_QUEUE                   8
#define global SYSTEM_INTERRUPT_KW_WDF_DPC                     16
#define global SYSTEM_INTERRUPT_KW_WDF_INTERRUPT               32
#define global SYSTEM_INTERRUPT_KW_IPI                         64
#define global SYSTEM_IO_KW_DISK                               1
#define global SYSTEM_IO_KW_DISK_INIT                          2
#define global SYSTEM_IO_KW_FILENAME                           4
#define global SYSTEM_IO_KW_SPLIT                              8
#define global SYSTEM_IO_KW_FILE                               16
#define global SYSTEM_IO_KW_OPTICAL                            32
#define global SYSTEM_IO_KW_OPTICAL_INIT                       64
#define global SYSTEM_IO_KW_DRIVERS                            128
#define global SYSTEM_IO_KW_CC                                 256
#define global SYSTEM_IO_KW_NETWORK                            512
#define global SYSTEM_IO_KW_FILE_INIT                          1024
#define global SYSTEM_IO_KW_TIMER                              2048
#define global SYSTEM_IOFILTER_KW_GENERAL                      1
#define global SYSTEM_IOFILTER_KW_INIT                         2
#define global SYSTEM_IOFILTER_KW_FASTIO                       4
#define global SYSTEM_IOFILTER_KW_FAILURE                      8
#define global SYSTEM_LOCK_KW_SPINLOCK                         1
#define global SYSTEM_LOCK_KW_SPINLOCK_COUNTERS                2
#define global SYSTEM_LOCK_KW_SYNC_OBJECTS                     4
#define global SYSTEM_MEMORY_KW_GENERAL                        1
#define global SYSTEM_MEMORY_KW_HARD_FAULTS                    2
#define global SYSTEM_MEMORY_KW_ALL_FAULTS                     4
#define global SYSTEM_MEMORY_KW_POOL                           8
#define global SYSTEM_MEMORY_KW_MEMINFO                        16
#define global SYSTEM_MEMORY_KW_PFSECTION                      32
#define global SYSTEM_MEMORY_KW_MEMINFO_WS                     64
#define global SYSTEM_MEMORY_KW_HEAP                           128
#define global SYSTEM_MEMORY_KW_WS                             256
#define global SYSTEM_MEMORY_KW_CONTMEM_GEN                    512
#define global SYSTEM_MEMORY_KW_VIRTUAL_ALLOC                  1024
#define global SYSTEM_MEMORY_KW_FOOTPRINT                      2048
#define global SYSTEM_MEMORY_KW_SESSION                        4096
#define global SYSTEM_MEMORY_KW_REFSET                         8192
#define global SYSTEM_MEMORY_KW_VAMAP                          16384
#define global SYSTEM_MEMORY_KW_NONTRADEABLE                   32768
#define global SYSTEM_OBJECT_KW_GENERAL                        1
#define global SYSTEM_OBJECT_KW_HANDLE                         2
#define global SYSTEM_POWER_KW_GENERAL                         1
#define global SYSTEM_POWER_KW_HIBER_RUNDOWN                   2
#define global SYSTEM_POWER_KW_PROCESSOR_IDLE                  4
#define global SYSTEM_POWER_KW_IDLE_SELECTION                  8
#define global SYSTEM_POWER_KW_PPM_EXIT_LATENCY                16
#define global SYSTEM_PROCESS_KW_GENERAL                       1
#define global SYSTEM_PROCESS_KW_INSWAP                        2
#define global SYSTEM_PROCESS_KW_FREEZE                        4
#define global SYSTEM_PROCESS_KW_PERF_COUNTER                  8
#define global SYSTEM_PROCESS_KW_WAKE_COUNTER                  16
#define global SYSTEM_PROCESS_KW_WAKE_DROP                     32
#define global SYSTEM_PROCESS_KW_WAKE_EVENT                    64
#define global SYSTEM_PROCESS_KW_DEBUG_EVENTS                  128
#define global SYSTEM_PROCESS_KW_DBGPRINT                      256
#define global SYSTEM_PROCESS_KW_JOB                           512
#define global SYSTEM_PROCESS_KW_WORKER_THREAD                 1024
#define global SYSTEM_PROCESS_KW_THREAD                        2048
#define global SYSTEM_PROCESS_KW_LOADER                        4096
#define global SYSTEM_PROFILE_KW_GENERAL                       1
#define global SYSTEM_PROFILE_KW_PMC_PROFILE                   2
#define global SYSTEM_REGISTRY_KW_GENERAL                      1
#define global SYSTEM_REGISTRY_KW_HIVE                         2
#define global SYSTEM_REGISTRY_KW_NOTIFICATION                 4
#define global SYSTEM_SCHEDULER_KW_XSCHEDULER                  1
#define global SYSTEM_SCHEDULER_KW_DISPATCHER                  2
#define global SYSTEM_SCHEDULER_KW_KERNEL_QUEUE                4
#define global SYSTEM_SCHEDULER_KW_SHOULD_YIELD                8
#define global SYSTEM_SCHEDULER_KW_ANTI_STARVATION             16
#define global SYSTEM_SCHEDULER_KW_LOAD_BALANCER               32
#define global SYSTEM_SCHEDULER_KW_AFFINITY                    64
#define global SYSTEM_SCHEDULER_KW_PRIORITY                    128
#define global SYSTEM_SCHEDULER_KW_IDEAL_PROCESSOR             256
#define global SYSTEM_SCHEDULER_KW_CONTEXT_SWITCH              512
#define global SYSTEM_SCHEDULER_KW_COMPACT_CSWITCH             1024
#define global SYSTEM_SCHEDULER_KW_SCHEDULE_THREAD             2048
#define global SYSTEM_SCHEDULER_KW_READY_QUEUE                 4096
#define global SYSTEM_SCHEDULER_KW_CPU_PARTITION               8192
#define global SYSTEM_SCHEDULER_KW_THREAD_FEEDBACK_READ        16384
#define global SYSTEM_SCHEDULER_KW_WORKLOAD_CLASS_UPDATE       32768
#define global SYSTEM_SCHEDULER_KW_AUTOBOOST                   65536
#define global SYSTEM_SYSCALL_KW_GENERAL                       1
#define global SYSTEM_TIMER_KW_GENERAL                         1
#define global SYSTEM_TIMER_KW_CLOCK_TIMER                     2
#define global SYSTEM_MEMORY_POOL_FILTER_ID                    1
#define global _typedef_TRACELOGGER_HANDLE                     1
#define global ETW_NULL_TYPE_VALUE                             0
#define global ETW_OBJECT_TYPE_VALUE                           1
#define global ETW_STRING_TYPE_VALUE                           2
#define global ETW_SBYTE_TYPE_VALUE                            3
#define global ETW_BYTE_TYPE_VALUE                             4
#define global ETW_INT16_TYPE_VALUE                            5
#define global ETW_UINT16_TYPE_VALUE                           6
#define global ETW_INT32_TYPE_VALUE                            7
#define global ETW_UINT32_TYPE_VALUE                           8
#define global ETW_INT64_TYPE_VALUE                            9
#define global ETW_UINT64_TYPE_VALUE                           10
#define global ETW_CHAR_TYPE_VALUE                             11
#define global ETW_SINGLE_TYPE_VALUE                           12
#define global ETW_DOUBLE_TYPE_VALUE                           13
#define global ETW_BOOLEAN_TYPE_VALUE                          14
#define global ETW_DECIMAL_TYPE_VALUE                          15
#define global ETW_GUID_TYPE_VALUE                             101
#define global ETW_ASCIICHAR_TYPE_VALUE                        102
#define global ETW_ASCIISTRING_TYPE_VALUE                      103
#define global ETW_COUNTED_STRING_TYPE_VALUE                   104
#define global ETW_POINTER_TYPE_VALUE                          105
#define global ETW_SIZET_TYPE_VALUE                            106
#define global ETW_HIDDEN_TYPE_VALUE                           107
#define global ETW_BOOL_TYPE_VALUE                             108
#define global ETW_COUNTED_ANSISTRING_TYPE_VALUE               109
#define global ETW_REVERSED_COUNTED_STRING_TYPE_VALUE          110
#define global ETW_REVERSED_COUNTED_ANSISTRING_TYPE_VALUE      111
#define global ETW_NON_NULL_TERMINATED_STRING_TYPE_VALUE       112
#define global ETW_REDUCED_ANSISTRING_TYPE_VALUE               113
#define global ETW_REDUCED_STRING_TYPE_VALUE                   114
#define global ETW_SID_TYPE_VALUE                              115
#define global ETW_VARIANT_TYPE_VALUE                          116
#define global ETW_PTVECTOR_TYPE_VALUE                         117
#define global ETW_WMITIME_TYPE_VALUE                          118
#define global ETW_DATETIME_TYPE_VALUE                         119
#define global ETW_REFRENCE_TYPE_VALUE                         120
#define global TRACE_PROVIDER_FLAG_LEGACY                      1
#define global TRACE_PROVIDER_FLAG_PRE_ENABLE                  2
#define global TRACE_LBR_EVENT_OPCODE                          32
#define global TRACE_LBR_MAXIMUM_EVENTS                        4
#define global KERNEL_LOGGER_NAME                              "NT Kernel Logger"
#define global GLOBAL_LOGGER_NAME                              "GlobalLogger"
#define global EVENT_LOGGER_NAME                               "EventLog"
#define global ENABLE_TRACE_PARAMETERS_VERSION                 1
#define global ENABLE_TRACE_PARAMETERS_VERSION_2               2
#define global EVENT_MIN_LEVEL                                 0
#define global EVENT_MAX_LEVEL                                 255
#define global EVENT_ACTIVITY_CTRL_GET_ID                      1
#define global EVENT_ACTIVITY_CTRL_SET_ID                      2
#define global EVENT_ACTIVITY_CTRL_CREATE_ID                   3
#define global EVENT_ACTIVITY_CTRL_GET_SET_ID                  4
#define global EVENT_ACTIVITY_CTRL_CREATE_SET_ID               5
#define global MAX_EVENT_DATA_DESCRIPTORS                      128
#define global MAX_EVENT_FILTER_DATA_SIZE                      1024
#define global MAX_EVENT_FILTER_PAYLOAD_SIZE                   4096
#define global MAX_EVENT_FILTER_EVENT_NAME_SIZE                4096
#define global MAX_EVENT_FILTERS_COUNT                         13
#define global MAX_EVENT_FILTER_PID_COUNT                      8
#define global MAX_EVENT_FILTER_EVENT_ID_COUNT                 64
#define global EVENT_FILTER_TYPE_NONE                          0
#define global EVENT_FILTER_TYPE_SCHEMATIZED                   2147483648
#define global EVENT_FILTER_TYPE_SYSTEM_FLAGS                  2147483649
#define global EVENT_FILTER_TYPE_TRACEHANDLE                   2147483650
#define global EVENT_FILTER_TYPE_PID                           2147483652
#define global EVENT_FILTER_TYPE_EXECUTABLE_NAME               2147483656
#define global EVENT_FILTER_TYPE_PACKAGE_ID                    2147483664
#define global EVENT_FILTER_TYPE_PACKAGE_APP_ID                2147483680
#define global EVENT_FILTER_TYPE_PAYLOAD                       2147483904
#define global EVENT_FILTER_TYPE_EVENT_ID                      2147484160
#define global EVENT_FILTER_TYPE_EVENT_NAME                    2147484672
#define global EVENT_FILTER_TYPE_STACKWALK                     2147487744
#define global EVENT_FILTER_TYPE_STACKWALK_NAME                2147491840
#define global EVENT_FILTER_TYPE_STACKWALK_LEVEL_KW            2147500032
#define global EVENT_FILTER_TYPE_CONTAINER                     2147516416
#define global EVENT_DATA_DESCRIPTOR_TYPE_NONE                 0
#define global EVENT_DATA_DESCRIPTOR_TYPE_EVENT_METADATA       1
#define global EVENT_DATA_DESCRIPTOR_TYPE_PROVIDER_METADATA    2
#define global EVENT_DATA_DESCRIPTOR_TYPE_TIMESTAMP_OVERRIDE   3
#define global EVENT_WRITE_FLAG_NO_FAULTING                    1
#define global EVENT_WRITE_FLAG_INPRIVATE                      2
#define global EVENT_HEADER_EXT_TYPE_RELATED_ACTIVITYID        1
#define global EVENT_HEADER_EXT_TYPE_SID                       2
#define global EVENT_HEADER_EXT_TYPE_TS_ID                     3
#define global EVENT_HEADER_EXT_TYPE_INSTANCE_INFO             4
#define global EVENT_HEADER_EXT_TYPE_STACK_TRACE32             5
#define global EVENT_HEADER_EXT_TYPE_STACK_TRACE64             6
#define global EVENT_HEADER_EXT_TYPE_PEBS_INDEX                7
#define global EVENT_HEADER_EXT_TYPE_PMC_COUNTERS              8
#define global EVENT_HEADER_EXT_TYPE_PSM_KEY                   9
#define global EVENT_HEADER_EXT_TYPE_EVENT_KEY                 10
#define global EVENT_HEADER_EXT_TYPE_EVENT_SCHEMA_TL           11
#define global EVENT_HEADER_EXT_TYPE_PROV_TRAITS               12
#define global EVENT_HEADER_EXT_TYPE_PROCESS_START_KEY         13
#define global EVENT_HEADER_EXT_TYPE_CONTROL_GUID              14
#define global EVENT_HEADER_EXT_TYPE_QPC_DELTA                 15
#define global EVENT_HEADER_EXT_TYPE_CONTAINER_ID              16
#define global EVENT_HEADER_EXT_TYPE_STACK_KEY32               17
#define global EVENT_HEADER_EXT_TYPE_STACK_KEY64               18
#define global EVENT_HEADER_EXT_TYPE_MAX                       19
#define global EVENT_HEADER_PROPERTY_XML                       1
#define global EVENT_HEADER_PROPERTY_FORWARDED_XML             2
#define global EVENT_HEADER_PROPERTY_LEGACY_EVENTLOG           4
#define global EVENT_HEADER_PROPERTY_RELOGGABLE                8
#define global EVENT_HEADER_FLAG_EXTENDED_INFO                 1
#define global EVENT_HEADER_FLAG_PRIVATE_SESSION               2
#define global EVENT_HEADER_FLAG_STRING_ONLY                   4
#define global EVENT_HEADER_FLAG_TRACE_MESSAGE                 8
#define global EVENT_HEADER_FLAG_NO_CPUTIME                    16
#define global EVENT_HEADER_FLAG_32_BIT_HEADER                 32
#define global EVENT_HEADER_FLAG_64_BIT_HEADER                 64
#define global EVENT_HEADER_FLAG_DECODE_GUID                   128
#define global EVENT_HEADER_FLAG_CLASSIC_HEADER                256
#define global EVENT_HEADER_FLAG_PROCESSOR_INDEX               512
#define global EVENT_ENABLE_PROPERTY_SID                       1
#define global EVENT_ENABLE_PROPERTY_TS_ID                     2
#define global EVENT_ENABLE_PROPERTY_STACK_TRACE               4
#define global EVENT_ENABLE_PROPERTY_PSM_KEY                   8
#define global EVENT_ENABLE_PROPERTY_IGNORE_KEYWORD_0          16
#define global EVENT_ENABLE_PROPERTY_PROVIDER_GROUP            32
#define global EVENT_ENABLE_PROPERTY_ENABLE_KEYWORD_0          64
#define global EVENT_ENABLE_PROPERTY_PROCESS_START_KEY         128
#define global EVENT_ENABLE_PROPERTY_EVENT_KEY                 256
#define global EVENT_ENABLE_PROPERTY_EXCLUDE_INPRIVATE         512
#define global EVENT_ENABLE_PROPERTY_ENABLE_SILOS              1024
#define global EVENT_ENABLE_PROPERTY_SOURCE_CONTAINER_TRACKING 2048
#define global PROCESS_TRACE_MODE_REAL_TIME                    256
#define global PROCESS_TRACE_MODE_RAW_TIMESTAMP                4096
#define global PROCESS_TRACE_MODE_EVENT_RECORD                 268435456
#define global CLSID_TraceRelogger                             "{7B40792D-05FF-44C4-9058-F440C71F17D4}"