//0x70 bytes (sizeof)
struct _EVENT_RECORD
{
struct _EVENT_HEADER EventHeader; //0x0
struct _ETW_BUFFER_CONTEXT BufferContext; //0x50
USHORT ExtendedDataCount; //0x54
USHORT UserDataLength; //0x56
struct _EVENT_HEADER_EXTENDED_DATA_ITEM* ExtendedData; //0x58
VOID* UserData; //0x60
VOID* UserContext; //0x68
};