Simon Rozman
ae7211d6b3
LoggerNameOffset represents offset (in bytes) from the start of the prop to the beginning of the null-terminated string that contains the session name. Hence, the prop must be cast from EVENT_TRACE_PROPERTIES* to char* or BYTE* first, to calculate address properly. Reference: https://docs.microsoft.com/en-us/windows/win32/api/evntrace/ns-evntrace-event_trace_properties Fixes: #1 Signed-off-by: Simon Rozman <simon@rozman.si>