//0x168 bytes (sizeof)
struct _ETW_GUID_ENTRY
{
struct _LIST_ENTRY GuidList; //0x0
volatile LONG RefCount; //0x8
struct _GUID Guid; //0xc
struct _LIST_ENTRY RegListHead; //0x1c
VOID* SecurityDescriptor; //0x24
union
{
struct _ETW_LAST_ENABLE_INFO LastEnable; //0x28
ULONGLONG MatchId; //0x28
};
struct _TRACE_ENABLE_INFO ProviderEnableInfo; //0x38
struct _TRACE_ENABLE_INFO EnableInfo[8]; //0x58
struct _ETW_FILTER_HEADER* FilterData; //0x158
struct _ETW_SILODRIVERSTATE* SiloState; //0x15c
struct _EX_PUSH_LOCK Lock; //0x160
struct _ETHREAD* LockOwner; //0x164
};