_WNODE_HEADER

type _WNODE_HEADER = record

  BufferSize: ULONG;

  ProviderId: ULONG;

  U1: record

    case Integer of

      0: (

          HistoricalContext: ULONG64;

        );

      1: (

          Version: ULONG;

          Linkage: ULONG;

        );

  end;

  u2: record

    case Integer of

      0: (

          CountLost: ULONG;

        );

      1: (

          KernelHandle: HANDLE;

        );

      2: (

          TimeStamp: LARGE_INTEGER;

        );

  end;

  Guid: GUID;

  ClientContext: ULONG;

  Flags: ULONG;

end;