struct _WMI_LOGGER_CONTEXT// Size=0x5a0
{
    unsigned long LoggerId;// Offset=0x0 Size=0x4
    unsigned long BufferSize;// Offset=0x4 Size=0x4
    unsigned long MaximumEventSize;// Offset=0x8 Size=0x4
    unsigned long LoggerMode;// Offset=0xc Size=0x4
    long AcceptNewEvents;// Offset=0x10 Size=0x4
    unsigned long EventMarker[1];// Offset=0x14 Size=0x4
    unsigned long ErrorMarker;// Offset=0x18 Size=0x4
    unsigned long SizeMask;// Offset=0x1c Size=0x4
    long long  ( * GetCpuClock)();// Offset=0x20 Size=0x4
    struct _ETHREAD * LoggerThread;// Offset=0x24 Size=0x4
    long LoggerStatus;// Offset=0x28 Size=0x4
    unsigned long FailureReason;// Offset=0x2c Size=0x4
    struct _ETW_BUFFER_QUEUE BufferQueue;// Offset=0x30 Size=0x8
    struct _ETW_BUFFER_QUEUE OverflowQueue;// Offset=0x38 Size=0x8
    struct _LIST_ENTRY GlobalList;// Offset=0x40 Size=0x8
    struct _LIST_ENTRY DebugIdTrackingList;// Offset=0x48 Size=0x8
    struct _ETW_DECODE_CONTROL_ENTRY * DecodeControlList;// Offset=0x50 Size=0x4
    unsigned long DecodeControlCount;// Offset=0x54 Size=0x4
    struct _WMI_BUFFER_HEADER * BatchedBufferList;// Offset=0x58 Size=0x4
    struct _EX_FAST_REF CurrentBuffer;// Offset=0x58 Size=0x4
    struct _UNICODE_STRING LoggerName;// Offset=0x5c Size=0x8
    struct _UNICODE_STRING LogFileName;// Offset=0x64 Size=0x8
    struct _UNICODE_STRING LogFilePattern;// Offset=0x6c Size=0x8
    struct _UNICODE_STRING NewLogFileName;// Offset=0x74 Size=0x8
    unsigned long ClockType;// Offset=0x7c Size=0x4
    unsigned long LastFlushedBuffer;// Offset=0x80 Size=0x4
    unsigned long FlushTimer;// Offset=0x84 Size=0x4
    unsigned long FlushThreshold;// Offset=0x88 Size=0x4
    union _LARGE_INTEGER ByteOffset;// Offset=0x90 Size=0x8
    unsigned long MinimumBuffers;// Offset=0x98 Size=0x4
    long BuffersAvailable;// Offset=0x9c Size=0x4
    long NumberOfBuffers;// Offset=0xa0 Size=0x4
    unsigned long MaximumBuffers;// Offset=0xa4 Size=0x4
    unsigned long EventsLost;// Offset=0xa8 Size=0x4
    long PeakBuffersCount;// Offset=0xac Size=0x4
    unsigned long BuffersWritten;// Offset=0xb0 Size=0x4
    unsigned long LogBuffersLost;// Offset=0xb4 Size=0x4
    unsigned long RealTimeBuffersDelivered;// Offset=0xb8 Size=0x4
    unsigned long RealTimeBuffersLost;// Offset=0xbc Size=0x4
    long * SequencePtr;// Offset=0xc0 Size=0x4
    unsigned long LocalSequence;// Offset=0xc4 Size=0x4
    struct _GUID InstanceGuid;// Offset=0xc8 Size=0x10
    unsigned long MaximumFileSize;// Offset=0xd8 Size=0x4
    long FileCounter;// Offset=0xdc Size=0x4
    enum _POOL_TYPE PoolType;// Offset=0xe0 Size=0x4
    struct _ETW_REF_CLOCK ReferenceTime;// Offset=0xe8 Size=0x10
    long CollectionOn;// Offset=0xf8 Size=0x4
    unsigned long ProviderInfoSize;// Offset=0xfc Size=0x4
    struct _LIST_ENTRY Consumers;// Offset=0x100 Size=0x8
    unsigned long NumConsumers;// Offset=0x108 Size=0x4
    struct _ETW_REALTIME_CONSUMER * TransitionConsumer;// Offset=0x10c Size=0x4
    void * RealtimeLogfileHandle;// Offset=0x110 Size=0x4
    struct _UNICODE_STRING RealtimeLogfileName;// Offset=0x114 Size=0x8
    union _LARGE_INTEGER RealtimeWriteOffset;// Offset=0x120 Size=0x8
    union _LARGE_INTEGER RealtimeReadOffset;// Offset=0x128 Size=0x8
    union _LARGE_INTEGER RealtimeLogfileSize;// Offset=0x130 Size=0x8
    unsigned long long RealtimeLogfileUsage;// Offset=0x138 Size=0x8
    unsigned long long RealtimeMaximumFileSize;// Offset=0x140 Size=0x8
    unsigned long RealtimeBuffersSaved;// Offset=0x148 Size=0x4
    struct _ETW_REF_CLOCK RealtimeReferenceTime;// Offset=0x150 Size=0x10
    enum _ETW_RT_EVENT_LOSS NewRTEventsLost;// Offset=0x160 Size=0x4
    struct _KEVENT LoggerEvent;// Offset=0x164 Size=0x10
    struct _KEVENT FlushEvent;// Offset=0x174 Size=0x10
    struct _KTIMER FlushTimeOutTimer;// Offset=0x188 Size=0x28
    struct _KDPC LoggerDpc;// Offset=0x1b0 Size=0x20
    struct _KMUTANT LoggerMutex;// Offset=0x1d0 Size=0x20
    struct _EX_PUSH_LOCK LoggerLock;// Offset=0x1f0 Size=0x4
    unsigned long BufferListSpinLock;// Offset=0x1f4 Size=0x4
    struct _EX_PUSH_LOCK BufferListPushLock;// Offset=0x1f4 Size=0x4
    struct _SECURITY_CLIENT_CONTEXT ClientSecurityContext;// Offset=0x1f8 Size=0x3c
    struct _TOKEN_ACCESS_INFORMATION * TokenAccessInformation;// Offset=0x234 Size=0x4
    struct _EX_FAST_REF SecurityDescriptor;// Offset=0x238 Size=0x4
    union _LARGE_INTEGER StartTime;// Offset=0x240 Size=0x8
    void * LogFileHandle;// Offset=0x248 Size=0x4
    long long BufferSequenceNumber;// Offset=0x250 Size=0x8
    unsigned long Flags;// Offset=0x258 Size=0x4
    unsigned long Persistent:1;// Offset=0x258 Size=0x4 BitOffset=0x0 BitSize=0x1
    unsigned long AutoLogger:1;// Offset=0x258 Size=0x4 BitOffset=0x1 BitSize=0x1
    unsigned long FsReady:1;// Offset=0x258 Size=0x4 BitOffset=0x2 BitSize=0x1
    unsigned long RealTime:1;// Offset=0x258 Size=0x4 BitOffset=0x3 BitSize=0x1
    unsigned long Wow:1;// Offset=0x258 Size=0x4 BitOffset=0x4 BitSize=0x1
    unsigned long KernelTrace:1;// Offset=0x258 Size=0x4 BitOffset=0x5 BitSize=0x1
    unsigned long NoMoreEnable:1;// Offset=0x258 Size=0x4 BitOffset=0x6 BitSize=0x1
    unsigned long StackTracing:1;// Offset=0x258 Size=0x4 BitOffset=0x7 BitSize=0x1
    unsigned long ErrorLogged:1;// Offset=0x258 Size=0x4 BitOffset=0x8 BitSize=0x1
    unsigned long RealtimeLoggerContextFreed:1;// Offset=0x258 Size=0x4 BitOffset=0x9 BitSize=0x1
    unsigned long PebsTracing:1;// Offset=0x258 Size=0x4 BitOffset=0xa BitSize=0x1
    unsigned long PmcCounters:1;// Offset=0x258 Size=0x4 BitOffset=0xb BitSize=0x1
    unsigned long PageAlignBuffers:1;// Offset=0x258 Size=0x4 BitOffset=0xc BitSize=0x1
    unsigned long StackLookasideListAllocated:1;// Offset=0x258 Size=0x4 BitOffset=0xd BitSize=0x1
    unsigned long SecurityTrace:1;// Offset=0x258 Size=0x4 BitOffset=0xe BitSize=0x1
    unsigned long LastBranchTracing:1;// Offset=0x258 Size=0x4 BitOffset=0xf BitSize=0x1
    unsigned long SystemLoggerIndex:8;// Offset=0x258 Size=0x4 BitOffset=0x10 BitSize=0x8
    unsigned long StackCaching:1;// Offset=0x258 Size=0x4 BitOffset=0x18 BitSize=0x1
    unsigned long SpareFlags2:7;// Offset=0x258 Size=0x4 BitOffset=0x19 BitSize=0x7
    unsigned long RequestFlag;// Offset=0x25c Size=0x4
    unsigned long DbgRequestNewFile:1;// Offset=0x25c Size=0x4 BitOffset=0x0 BitSize=0x1
    unsigned long DbgRequestUpdateFile:1;// Offset=0x25c Size=0x4 BitOffset=0x1 BitSize=0x1
    unsigned long DbgRequestFlush:1;// Offset=0x25c Size=0x4 BitOffset=0x2 BitSize=0x1
    unsigned long DbgRequestDisableRealtime:1;// Offset=0x25c Size=0x4 BitOffset=0x3 BitSize=0x1
    unsigned long DbgRequestDisconnectConsumer:1;// Offset=0x25c Size=0x4 BitOffset=0x4 BitSize=0x1
    unsigned long DbgRequestConnectConsumer:1;// Offset=0x25c Size=0x4 BitOffset=0x5 BitSize=0x1
    unsigned long DbgRequestNotifyConsumer:1;// Offset=0x25c Size=0x4 BitOffset=0x6 BitSize=0x1
    unsigned long DbgRequestUpdateHeader:1;// Offset=0x25c Size=0x4 BitOffset=0x7 BitSize=0x1
    unsigned long DbgRequestDeferredFlush:1;// Offset=0x25c Size=0x4 BitOffset=0x8 BitSize=0x1
    unsigned long DbgRequestDeferredFlushTimer:1;// Offset=0x25c Size=0x4 BitOffset=0x9 BitSize=0x1
    unsigned long DbgRequestFlushTimer:1;// Offset=0x25c Size=0x4 BitOffset=0xa BitSize=0x1
    unsigned long DbgRequestUpdateDebugger:1;// Offset=0x25c Size=0x4 BitOffset=0xb BitSize=0x1
    unsigned long DbgSpareRequestFlags:20;// Offset=0x25c Size=0x4 BitOffset=0xc BitSize=0x14
    struct _ETW_STACK_TRACE_BLOCK StackTraceBlock;// Offset=0x260 Size=0x288
    struct _RTL_BITMAP HookIdMap;// Offset=0x4e8 Size=0x8
    struct _ETW_STACK_CACHE * StackCache;// Offset=0x4f0 Size=0x4
    struct _ETW_PMC_SUPPORT * PmcData;// Offset=0x4f4 Size=0x4
    struct _ETW_LBR_SUPPORT * LbrData;// Offset=0x4f8 Size=0x4
    struct _LIST_ENTRY BinaryTrackingList;// Offset=0x4fc Size=0x8
    struct _WMI_BUFFER_HEADER ** ScratchArray;// Offset=0x504 Size=0x4
    struct _DISALLOWED_GUIDS DisallowedGuids;// Offset=0x508 Size=0x8
    long long RelativeTimerDueTime;// Offset=0x510 Size=0x8
    struct _PERIODIC_CAPTURE_STATE_GUIDS PeriodicCaptureStateGuids;// Offset=0x518 Size=0x8
    struct _EX_TIMER * PeriodicCaptureStateTimer;// Offset=0x520 Size=0x4
    enum _ETW_PERIODIC_TIMER_STATE PeriodicCaptureStateTimerState;// Offset=0x524 Size=0x4
    struct _ETW_SOFT_RESTART_CONTEXT * SoftRestartContext;// Offset=0x528 Size=0x4
    struct _ETW_SILODRIVERSTATE * SiloState;// Offset=0x52c Size=0x4
    struct _WORK_QUEUE_ITEM CompressionWorkItem;// Offset=0x530 Size=0x10
    long CompressionWorkItemState;// Offset=0x540 Size=0x4
    struct _EX_PUSH_LOCK CompressionLock;// Offset=0x544 Size=0x4
    struct _WMI_BUFFER_HEADER * CompressionTarget;// Offset=0x548 Size=0x4
    void * CompressionWorkspace;// Offset=0x54c Size=0x4
    long CompressionOn;// Offset=0x550 Size=0x4
    unsigned long CompressionRatioGuess;// Offset=0x554 Size=0x4
    unsigned long PartialBufferCompressionLevel;// Offset=0x558 Size=0x4
    enum ETW_COMPRESSION_RESUMPTION_MODE CompressionResumptionMode;// Offset=0x55c Size=0x4
    struct _SINGLE_LIST_ENTRY PlaceholderList;// Offset=0x560 Size=0x4
    struct _KDPC CompressionDpc;// Offset=0x564 Size=0x20
    union _LARGE_INTEGER LastBufferSwitchTime;// Offset=0x588 Size=0x8
    union _LARGE_INTEGER BufferWriteDuration;// Offset=0x590 Size=0x8
    union _LARGE_INTEGER BufferCompressDuration;// Offset=0x598 Size=0x8
};