Min versionXP SP2
Max version10 TH2
x86 offset
offset:bitpos
Field Name
0x0000unsigned long
Magic
0x0004struct _RTL_TRACE_DATABASE *
Database
0x0008struct _RTL_TRACE_SEGMENT *
NextSegment
0x000Cunsigned long
TotalSize
0x0010char *
SegmentStart
0x0014char *
SegmentEnd
0x0018char *
SegmentFree