//0x4 bytes (sizeof)
struct _WMI_TRACE_PACKET
{
    USHORT Size;                                                            //0x0
    union
    {
        USHORT HookId;                                                      //0x2
        struct
        {
            UCHAR Type;                                                     //0x2
            UCHAR Group;                                                    //0x3
        };
    };
};