struct _EVENT_HEADER_EXTENDED_DATA_ITEM// Size=0x10
{
    unsigned short Reserved1;// Offset=0x0 Size=0x2
    unsigned short ExtType;// Offset=0x2 Size=0x2
    unsigned short Linkage:1;// Offset=0x4 Size=0x2 BitOffset=0x0 BitSize=0x1
    unsigned short Reserved2:15;// Offset=0x4 Size=0x2 BitOffset=0x1 BitSize=0xf
    unsigned short DataSize;// Offset=0x6 Size=0x2
    unsigned long long DataPtr;// Offset=0x8 Size=0x8
};