copy
//0x11f8 bytes (sizeof)
struct _ETW_SILODRIVERSTATE
{
    struct _EJOB* Silo;                                                     //0x0
    struct _ESERVERSILO_GLOBALS* SiloGlobals;                               //0x8
    ULONG MaxLoggers;                                                       //0x10
    struct _ETW_GUID_ENTRY EtwpSecurityProviderGuidEntry;                   //0x18
    struct _EX_RUNDOWN_REF_CACHE_AWARE** EtwpLoggerRundown;                 //0x1a8
    struct _WMI_LOGGER_CONTEXT** EtwpLoggerContext;                         //0x1b0
    struct _ETW_HASH_BUCKET EtwpGuidHashTable[64];                          //0x1b8
    USHORT EtwpSecurityLoggers[8];                                          //0xfb8
    UCHAR EtwpSecurityProviderEnableMask;                                   //0xfc8
    LONG EtwpShutdownInProgress;                                            //0xfcc
    ULONG EtwpSecurityProviderPID;                                          //0xfd0
    struct _ETW_PRIV_HANDLE_DEMUX_TABLE PrivHandleDemuxTable;               //0xfd8
    struct _ETW_COUNTERS EtwpCounters;                                      //0xff8
    union _LARGE_INTEGER LogfileBytesWritten;                               //0x1008
    struct _ETW_SILO_TRACING_BLOCK* ProcessorBlocks;                        //0x1010
    struct _EX_WNF_SUBSCRIPTION* ContainerRestoreWnfSubscription;           //0x1018
    struct _GUID PartitionId;                                               //0x1020
    struct _GUID ParentId;                                                  //0x1030
    union _LARGE_INTEGER QpcOffsetFromRoot;                                 //0x1040
    ULONG PartitionType;                                                    //0x1048
    struct _ETW_SYSTEM_LOGGER_SETTINGS SystemLoggerSettings;                //0x104c
    struct _KMUTANT EtwpStartTraceMutex;                                    //0x11c0
};