//0x38 bytes (sizeof)
struct _DIAGNOSTIC_CONTEXT
{
enum _REQUESTER_TYPE CallerType; //0x0
union
{
struct
{
struct _EPROCESS* Process; //0x8
struct _UNICODE_STRING ProcessImageName; //0x10
ULONG ProcessId; //0x20
ULONG SessionId; //0x24
ULONG ServiceTag; //0x28
};
struct _DEVICE_OBJECT* DeviceObject; //0x8
};
ULONGLONG ReasonSize; //0x30
};