_ETW_SILODRIVERSTATE

//0x1220 bytes (sizeof) struct _ETW_SILODRIVERSTATE { struct _EJOB* Silo; //0x0 struct _ESERVERSILO_GLOBALS* SiloGlobals; //0x8 ULONG MaxLoggers; //0x10 struct _ETW_GUID_ENTRY EtwpSecurityProviderGuidEntry; //0x18 struct _EX_RUNDOWN_REF_CACHE_AWARE** EtwpLoggerRundown; //0x1c0 struct _WMI_LOGGER_CONTEXT** EtwpLoggerContext; //0x1c8 struct _ETW_HASH_BUCKET EtwpGuidHashTable[64]; //0x1d0 USHORT EtwpSecurityLoggers[8]; //0xfd0 UCHAR EtwpSecurityProviderEnableMask; //0xfe0 LONG EtwpShutdownInProgress; //0xfe4 ULONG EtwpSecurityProviderPID; //0xfe8 struct _ETW_PRIV_HANDLE_DEMUX_TABLE PrivHandleDemuxTable; //0xff0 struct _ETW_COUNTERS EtwpCounters; //0x1010 union _LARGE_INTEGER LogfileBytesWritten; //0x1020 struct _ETW_SILO_TRACING_BLOCK* ProcessorBlocks; //0x1028 struct _EX_WNF_SUBSCRIPTION* ContainerRestoreWnfSubscription; //0x1030 struct _GUID PartitionId; //0x1038 struct _GUID ParentId; //0x1048 union _LARGE_INTEGER QpcOffsetFromRoot; //0x1058 CHAR* PartitionName; //0x1060 USHORT PartitionNameSize; //0x1068 USHORT UnusedPadding; //0x106a ULONG PartitionType; //0x106c struct _ETW_SYSTEM_LOGGER_SETTINGS SystemLoggerSettings; //0x1070 struct _KMUTANT EtwpStartTraceMutex; //0x11e8 };