struct _WMI_LOGGER_CONTEXT// Size=0x468
{
    unsigned long LoggerId;// Offset=0x0 Size=0x4
    unsigned long BufferSize;// Offset=0x4 Size=0x4
    unsigned long MaximumEventSize;// Offset=0x8 Size=0x4
    unsigned long LoggerMode;// Offset=0xc Size=0x4
    long AcceptNewEvents;// Offset=0x10 Size=0x4
    unsigned long EventMarker[2];// Offset=0x14 Size=0x8
    unsigned long ErrorMarker;// Offset=0x1c Size=0x4
    unsigned long SizeMask;// Offset=0x20 Size=0x4
    long long  ( * GetCpuClock)();// Offset=0x28 Size=0x8
    struct _ETHREAD * LoggerThread;// Offset=0x30 Size=0x8
    long LoggerStatus;// Offset=0x38 Size=0x4
    unsigned long FailureReason;// Offset=0x3c Size=0x4
    struct _ETW_BUFFER_QUEUE BufferQueue;// Offset=0x40 Size=0x10
    struct _ETW_BUFFER_QUEUE OverflowQueue;// Offset=0x50 Size=0x10
    struct _LIST_ENTRY GlobalList;// Offset=0x60 Size=0x10
    struct _LIST_ENTRY ProviderBinaryList;// Offset=0x70 Size=0x10
    struct _WMI_BUFFER_HEADER * BatchedBufferList;// Offset=0x80 Size=0x8
    struct _EX_FAST_REF CurrentBuffer;// Offset=0x80 Size=0x8
    struct _UNICODE_STRING LoggerName;// Offset=0x88 Size=0x10
    struct _UNICODE_STRING LogFileName;// Offset=0x98 Size=0x10
    struct _UNICODE_STRING LogFilePattern;// Offset=0xa8 Size=0x10
    struct _UNICODE_STRING NewLogFileName;// Offset=0xb8 Size=0x10
    unsigned long ClockType;// Offset=0xc8 Size=0x4
    unsigned long LastFlushedBuffer;// Offset=0xcc Size=0x4
    unsigned long FlushTimer;// Offset=0xd0 Size=0x4
    unsigned long FlushThreshold;// Offset=0xd4 Size=0x4
    union _LARGE_INTEGER ByteOffset;// Offset=0xd8 Size=0x8
    unsigned long MinimumBuffers;// Offset=0xe0 Size=0x4
    long BuffersAvailable;// Offset=0xe4 Size=0x4
    long NumberOfBuffers;// Offset=0xe8 Size=0x4
    unsigned long MaximumBuffers;// Offset=0xec Size=0x4
    unsigned long EventsLost;// Offset=0xf0 Size=0x4
    long PeakBuffersCount;// Offset=0xf4 Size=0x4
    unsigned long BuffersWritten;// Offset=0xf8 Size=0x4
    unsigned long LogBuffersLost;// Offset=0xfc Size=0x4
    unsigned long RealTimeBuffersDelivered;// Offset=0x100 Size=0x4
    unsigned long RealTimeBuffersLost;// Offset=0x104 Size=0x4
    long * SequencePtr;// Offset=0x108 Size=0x8
    unsigned long LocalSequence;// Offset=0x110 Size=0x4
    struct _GUID InstanceGuid;// Offset=0x114 Size=0x10
    unsigned long MaximumFileSize;// Offset=0x124 Size=0x4
    long FileCounter;// Offset=0x128 Size=0x4
    enum _POOL_TYPE PoolType;// Offset=0x12c Size=0x4
    struct _ETW_REF_CLOCK ReferenceTime;// Offset=0x130 Size=0x10
    long CollectionOn;// Offset=0x140 Size=0x4
    unsigned long ProviderInfoSize;// Offset=0x144 Size=0x4
    struct _LIST_ENTRY Consumers;// Offset=0x148 Size=0x10
    unsigned long NumConsumers;// Offset=0x158 Size=0x4
    struct _ETW_REALTIME_CONSUMER * TransitionConsumer;// Offset=0x160 Size=0x8
    void * RealtimeLogfileHandle;// Offset=0x168 Size=0x8
    struct _UNICODE_STRING RealtimeLogfileName;// Offset=0x170 Size=0x10
    union _LARGE_INTEGER RealtimeWriteOffset;// Offset=0x180 Size=0x8
    union _LARGE_INTEGER RealtimeReadOffset;// Offset=0x188 Size=0x8
    union _LARGE_INTEGER RealtimeLogfileSize;// Offset=0x190 Size=0x8
    unsigned long long RealtimeLogfileUsage;// Offset=0x198 Size=0x8
    unsigned long long RealtimeMaximumFileSize;// Offset=0x1a0 Size=0x8
    unsigned long RealtimeBuffersSaved;// Offset=0x1a8 Size=0x4
    struct _ETW_REF_CLOCK RealtimeReferenceTime;// Offset=0x1b0 Size=0x10
    enum _ETW_RT_EVENT_LOSS NewRTEventsLost;// Offset=0x1c0 Size=0x4
    struct _KEVENT LoggerEvent;// Offset=0x1c8 Size=0x18
    struct _KEVENT FlushEvent;// Offset=0x1e0 Size=0x18
    struct _KTIMER FlushTimeOutTimer;// Offset=0x1f8 Size=0x40
    struct _KDPC LoggerDpc;// Offset=0x238 Size=0x40
    struct _KMUTANT LoggerMutex;// Offset=0x278 Size=0x38
    struct _EX_PUSH_LOCK LoggerLock;// Offset=0x2b0 Size=0x8
    unsigned long long BufferListSpinLock;// Offset=0x2b8 Size=0x8
    struct _EX_PUSH_LOCK BufferListPushLock;// Offset=0x2b8 Size=0x8
    struct _SECURITY_CLIENT_CONTEXT ClientSecurityContext;// Offset=0x2c0 Size=0x48
    struct _TOKEN_ACCESS_INFORMATION * TokenAccessInformation;// Offset=0x308 Size=0x8
    struct _EX_FAST_REF SecurityDescriptor;// Offset=0x310 Size=0x8
    union _LARGE_INTEGER StartTime;// Offset=0x318 Size=0x8
    void * LogFileHandle;// Offset=0x320 Size=0x8
    long long BufferSequenceNumber;// Offset=0x328 Size=0x8
    unsigned long Flags;// Offset=0x330 Size=0x4
    unsigned long Persistent:1;// Offset=0x330 Size=0x4 BitOffset=0x0 BitSize=0x1
    unsigned long AutoLogger:1;// Offset=0x330 Size=0x4 BitOffset=0x1 BitSize=0x1
    unsigned long FsReady:1;// Offset=0x330 Size=0x4 BitOffset=0x2 BitSize=0x1
    unsigned long RealTime:1;// Offset=0x330 Size=0x4 BitOffset=0x3 BitSize=0x1
    unsigned long Wow:1;// Offset=0x330 Size=0x4 BitOffset=0x4 BitSize=0x1
    unsigned long KernelTrace:1;// Offset=0x330 Size=0x4 BitOffset=0x5 BitSize=0x1
    unsigned long NoMoreEnable:1;// Offset=0x330 Size=0x4 BitOffset=0x6 BitSize=0x1
    unsigned long StackTracing:1;// Offset=0x330 Size=0x4 BitOffset=0x7 BitSize=0x1
    unsigned long ErrorLogged:1;// Offset=0x330 Size=0x4 BitOffset=0x8 BitSize=0x1
    unsigned long RealtimeLoggerContextFreed:1;// Offset=0x330 Size=0x4 BitOffset=0x9 BitSize=0x1
    unsigned long PebsTracing:1;// Offset=0x330 Size=0x4 BitOffset=0xa BitSize=0x1
    unsigned long PmcCounters:1;// Offset=0x330 Size=0x4 BitOffset=0xb BitSize=0x1
    unsigned long PageAlignBuffers:1;// Offset=0x330 Size=0x4 BitOffset=0xc BitSize=0x1
    unsigned long StackLookasideListAllocated:1;// Offset=0x330 Size=0x4 BitOffset=0xd BitSize=0x1
    unsigned long SecurityTrace:1;// Offset=0x330 Size=0x4 BitOffset=0xe BitSize=0x1
    unsigned long SpareFlags1:1;// Offset=0x330 Size=0x4 BitOffset=0xf BitSize=0x1
    unsigned long SystemLoggerIndex:8;// Offset=0x330 Size=0x4 BitOffset=0x10 BitSize=0x8
    unsigned long StackCaching:1;// Offset=0x330 Size=0x4 BitOffset=0x18 BitSize=0x1
    unsigned long SpareFlags2:7;// Offset=0x330 Size=0x4 BitOffset=0x19 BitSize=0x7
    unsigned long RequestFlag;// Offset=0x334 Size=0x4
    unsigned long DbgRequestNewFile:1;// Offset=0x334 Size=0x4 BitOffset=0x0 BitSize=0x1
    unsigned long DbgRequestUpdateFile:1;// Offset=0x334 Size=0x4 BitOffset=0x1 BitSize=0x1
    unsigned long DbgRequestFlush:1;// Offset=0x334 Size=0x4 BitOffset=0x2 BitSize=0x1
    unsigned long DbgRequestDisableRealtime:1;// Offset=0x334 Size=0x4 BitOffset=0x3 BitSize=0x1
    unsigned long DbgRequestDisconnectConsumer:1;// Offset=0x334 Size=0x4 BitOffset=0x4 BitSize=0x1
    unsigned long DbgRequestConnectConsumer:1;// Offset=0x334 Size=0x4 BitOffset=0x5 BitSize=0x1
    unsigned long DbgRequestNotifyConsumer:1;// Offset=0x334 Size=0x4 BitOffset=0x6 BitSize=0x1
    unsigned long DbgRequestUpdateHeader:1;// Offset=0x334 Size=0x4 BitOffset=0x7 BitSize=0x1
    unsigned long DbgRequestDeferredFlush:1;// Offset=0x334 Size=0x4 BitOffset=0x8 BitSize=0x1
    unsigned long DbgRequestDeferredFlushTimer:1;// Offset=0x334 Size=0x4 BitOffset=0x9 BitSize=0x1
    unsigned long DbgRequestFlushTimer:1;// Offset=0x334 Size=0x4 BitOffset=0xa BitSize=0x1
    unsigned long DbgRequestUpdateDebugger:1;// Offset=0x334 Size=0x4 BitOffset=0xb BitSize=0x1
    unsigned long DbgSpareRequestFlags:20;// Offset=0x334 Size=0x4 BitOffset=0xc BitSize=0x14
    struct _RTL_BITMAP HookIdMap;// Offset=0x338 Size=0x10
    struct _ETW_STACK_CACHE * StackCache;// Offset=0x348 Size=0x8
    struct _ETW_PMC_SUPPORT * PmcData;// Offset=0x350 Size=0x8
    struct _LIST_ENTRY WinRtProviderBinaryList;// Offset=0x358 Size=0x10
    struct _WMI_BUFFER_HEADER ** ScratchArray;// Offset=0x368 Size=0x8
    struct _DISALLOWED_GUIDS DisallowedGuids;// Offset=0x370 Size=0x10
    long long RelativeTimerDueTime;// Offset=0x380 Size=0x8
    struct _PERIODIC_CAPTURE_STATE_GUIDS PeriodicCaptureStateGuids;// Offset=0x388 Size=0x10
    struct _EX_TIMER * PeriodicCaptureStateTimer;// Offset=0x398 Size=0x8
    enum _ETW_PERIODIC_TIMER_STATE PeriodicCaptureStateTimerState;// Offset=0x3a0 Size=0x4
    struct _ETW_SOFT_RESTART_CONTEXT * SoftRestartContext;// Offset=0x3a8 Size=0x8
    struct _ETW_SILODRIVERSTATE * SiloState;// Offset=0x3b0 Size=0x8
    struct _WORK_QUEUE_ITEM CompressionWorkItem;// Offset=0x3b8 Size=0x20
    long CompressionWorkItemState;// Offset=0x3d8 Size=0x4
    struct _EX_PUSH_LOCK CompressionLock;// Offset=0x3e0 Size=0x8
    struct _WMI_BUFFER_HEADER * CompressionTarget;// Offset=0x3e8 Size=0x8
    void * CompressionWorkspace;// Offset=0x3f0 Size=0x8
    long CompressionOn;// Offset=0x3f8 Size=0x4
    unsigned long CompressionRatioGuess;// Offset=0x3fc Size=0x4
    unsigned long PartialBufferCompressionLevel;// Offset=0x400 Size=0x4
    enum ETW_COMPRESSION_RESUMPTION_MODE CompressionResumptionMode;// Offset=0x404 Size=0x4
    struct _SINGLE_LIST_ENTRY PlaceholderList;// Offset=0x408 Size=0x8
    struct _KDPC CompressionDpc;// Offset=0x410 Size=0x40
    union _LARGE_INTEGER LastBufferSwitchTime;// Offset=0x450 Size=0x8
    union _LARGE_INTEGER BufferWriteDuration;// Offset=0x458 Size=0x8
    union _LARGE_INTEGER BufferCompressDuration;// Offset=0x460 Size=0x8
};