copy
//0x1238 bytes (sizeof)
struct _ETW_SILODRIVERSTATE
{
    struct _EJOB* Silo;                                                     //0x0
    struct _ESERVERSILO_GLOBALS* SiloGlobals;                               //0x8
    ULONG MaxLoggers;                                                       //0x10
    struct _ETW_GUID_ENTRY EtwpSecurityProviderGuidEntry;                   //0x18
    struct _EX_RUNDOWN_REF_CACHE_AWARE** EtwpLoggerRundown;                 //0x1c0
    struct _WMI_LOGGER_CONTEXT** EtwpLoggerContext;                         //0x1c8
    struct _ETW_HASH_BUCKET EtwpGuidHashTable[64];                          //0x1d0
    USHORT EtwpSecurityLoggers[8];                                          //0xfd0
    UCHAR EtwpSecurityProviderEnableMask;                                   //0xfe0
    LONG EtwpShutdownInProgress;                                            //0xfe4
    ULONG EtwpSecurityProviderPID;                                          //0xfe8
    struct _ETW_PRIV_HANDLE_DEMUX_TABLE PrivHandleDemuxTable;               //0xff0
    WCHAR* RTBacklogFileRoot;                                               //0x1010
    struct _ETW_COUNTERS EtwpCounters;                                      //0x1018
    union _LARGE_INTEGER LogfileBytesWritten;                               //0x1028
    struct _ETW_SILO_TRACING_BLOCK* ProcessorBlocks;                        //0x1030
    struct _EX_WNF_SUBSCRIPTION* ContainerStateWnfSubscription;             //0x1038
    ULONG ContainerStateWnfCallbackCalled;                                  //0x1040
    struct _WORK_QUEUE_ITEM* UnsubscribeWorkItem;                           //0x1048
    struct _GUID PartitionId;                                               //0x1050
    struct _GUID ParentId;                                                  //0x1060
    union _LARGE_INTEGER QpcOffsetFromRoot;                                 //0x1070
    CHAR* PartitionName;                                                    //0x1078
    USHORT PartitionNameSize;                                               //0x1080
    USHORT UnusedPadding;                                                   //0x1082
    ULONG PartitionType;                                                    //0x1084
    struct _ETW_SYSTEM_LOGGER_SETTINGS SystemLoggerSettings;                //0x1088
    struct _KMUTANT EtwpStartTraceMutex;                                    //0x1200
};