EVENT_TRACE_LOGFILEA

using System;
using System.Runtime.InteropServices;

[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct EVENT_TRACE_HEADER
{
    public ushort Size;
    public _Anonymous1_e__Union Anonymous1;
    public _Anonymous2_e__Union Anonymous2;
    public uint ThreadId;
    public uint ProcessId;
    public long TimeStamp;
    public _Anonymous3_e__Union Anonymous3;
    public _Anonymous4_e__Union Anonymous4;
}

[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct EVENT_TRACE
{
    public EVENT_TRACE_HEADER Header;
    public uint InstanceId;
    public uint ParentInstanceId;
    public Guid ParentGuid;
    public IntPtr MofData;
    public uint MofLength;
    public _Anonymous_e__Union Anonymous;
}

[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct SYSTEMTIME
{
    public ushort wYear;
    public ushort wMonth;
    public ushort wDayOfWeek;
    public ushort wDay;
    public ushort wHour;
    public ushort wMinute;
    public ushort wSecond;
    public ushort wMilliseconds;
}

[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct TIME_ZONE_INFORMATION
{
    public int Bias;
    [MarshalAs(UnmanagedType.ByValTStr, SizeConst = 32)] public string StandardName;
    public SYSTEMTIME StandardDate;
    public int StandardBias;
    [MarshalAs(UnmanagedType.ByValTStr, SizeConst = 32)] public string DaylightName;
    public SYSTEMTIME DaylightDate;
    public int DaylightBias;
}

[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct TRACE_LOGFILE_HEADER
{
    public uint BufferSize;
    public _Anonymous1_e__Union Anonymous1;
    public uint ProviderVersion;
    public uint NumberOfProcessors;
    public long EndTime;
    public uint TimerResolution;
    public uint MaximumFileSize;
    public uint LogFileMode;
    public uint BuffersWritten;
    public _Anonymous2_e__Union Anonymous2;
    public IntPtr LoggerName;
    public IntPtr LogFileName;
    public TIME_ZONE_INFORMATION TimeZone;
    public long BootTime;
    public long PerfFreq;
    public long StartTime;
    public uint ReservedFlags;
    public uint BuffersLost;
}

[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct EVENT_TRACE_LOGFILEA
{
    public IntPtr LogFileName;
    public IntPtr LoggerName;
    public long CurrentTime;
    public uint BuffersRead;
    public _Anonymous1_e__Union Anonymous1;
    public EVENT_TRACE CurrentEvent;
    public TRACE_LOGFILE_HEADER LogfileHeader;
    public IntPtr BufferCallback;
    public uint BufferSize;
    public uint Filled;
    public uint EventsLost;
    public _Anonymous2_e__Union Anonymous2;
    public uint IsKernelTrace;
    public IntPtr Context;
}

Imports System.Runtime.InteropServices

<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure EVENT_TRACE_HEADER
    Public Size As UShort
    Public Anonymous1 As _Anonymous1_e__Union
    Public Anonymous2 As _Anonymous2_e__Union
    Public ThreadId As UInteger
    Public ProcessId As UInteger
    Public TimeStamp As Long
    Public Anonymous3 As _Anonymous3_e__Union
    Public Anonymous4 As _Anonymous4_e__Union
End Structure

<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure EVENT_TRACE
    Public Header As EVENT_TRACE_HEADER
    Public InstanceId As UInteger
    Public ParentInstanceId As UInteger
    Public ParentGuid As Guid
    Public MofData As IntPtr
    Public MofLength As UInteger
    Public Anonymous As _Anonymous_e__Union
End Structure

<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure SYSTEMTIME
    Public wYear As UShort
    Public wMonth As UShort
    Public wDayOfWeek As UShort
    Public wDay As UShort
    Public wHour As UShort
    Public wMinute As UShort
    Public wSecond As UShort
    Public wMilliseconds As UShort
End Structure

<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure TIME_ZONE_INFORMATION
    Public Bias As Integer
    <MarshalAs(UnmanagedType.ByValTStr, SizeConst:=32)> Public StandardName As String
    Public StandardDate As SYSTEMTIME
    Public StandardBias As Integer
    <MarshalAs(UnmanagedType.ByValTStr, SizeConst:=32)> Public DaylightName As String
    Public DaylightDate As SYSTEMTIME
    Public DaylightBias As Integer
End Structure

<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure TRACE_LOGFILE_HEADER
    Public BufferSize As UInteger
    Public Anonymous1 As _Anonymous1_e__Union
    Public ProviderVersion As UInteger
    Public NumberOfProcessors As UInteger
    Public EndTime As Long
    Public TimerResolution As UInteger
    Public MaximumFileSize As UInteger
    Public LogFileMode As UInteger
    Public BuffersWritten As UInteger
    Public Anonymous2 As _Anonymous2_e__Union
    Public LoggerName As IntPtr
    Public LogFileName As IntPtr
    Public TimeZone As TIME_ZONE_INFORMATION
    Public BootTime As Long
    Public PerfFreq As Long
    Public StartTime As Long
    Public ReservedFlags As UInteger
    Public BuffersLost As UInteger
End Structure

<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure EVENT_TRACE_LOGFILEA
    Public LogFileName As IntPtr
    Public LoggerName As IntPtr
    Public CurrentTime As Long
    Public BuffersRead As UInteger
    Public Anonymous1 As _Anonymous1_e__Union
    Public CurrentEvent As EVENT_TRACE
    Public LogfileHeader As TRACE_LOGFILE_HEADER
    Public BufferCallback As IntPtr
    Public BufferSize As UInteger
    Public Filled As UInteger
    Public EventsLost As UInteger
    Public Anonymous2 As _Anonymous2_e__Union
    Public IsKernelTrace As UInteger
    Public Context As IntPtr
End Structure

import ctypes
from ctypes import wintypes

class EVENT_TRACE_HEADER(ctypes.Structure):
    _fields_ = [
        ("Size", ctypes.c_ushort),
        ("Anonymous1", _Anonymous1_e__Union),
        ("Anonymous2", _Anonymous2_e__Union),
        ("ThreadId", wintypes.DWORD),
        ("ProcessId", wintypes.DWORD),
        ("TimeStamp", ctypes.c_longlong),
        ("Anonymous3", _Anonymous3_e__Union),
        ("Anonymous4", _Anonymous4_e__Union),
    ]

class EVENT_TRACE(ctypes.Structure):
    _fields_ = [
        ("Header", EVENT_TRACE_HEADER),
        ("InstanceId", wintypes.DWORD),
        ("ParentInstanceId", wintypes.DWORD),
        ("ParentGuid", GUID),
        ("MofData", ctypes.c_void_p),
        ("MofLength", wintypes.DWORD),
        ("Anonymous", _Anonymous_e__Union),
    ]

class SYSTEMTIME(ctypes.Structure):
    _fields_ = [
        ("wYear", ctypes.c_ushort),
        ("wMonth", ctypes.c_ushort),
        ("wDayOfWeek", ctypes.c_ushort),
        ("wDay", ctypes.c_ushort),
        ("wHour", ctypes.c_ushort),
        ("wMinute", ctypes.c_ushort),
        ("wSecond", ctypes.c_ushort),
        ("wMilliseconds", ctypes.c_ushort),
    ]

class TIME_ZONE_INFORMATION(ctypes.Structure):
    _fields_ = [
        ("Bias", ctypes.c_int),
        ("StandardName", ctypes.c_wchar * 32),
        ("StandardDate", SYSTEMTIME),
        ("StandardBias", ctypes.c_int),
        ("DaylightName", ctypes.c_wchar * 32),
        ("DaylightDate", SYSTEMTIME),
        ("DaylightBias", ctypes.c_int),
    ]

class TRACE_LOGFILE_HEADER(ctypes.Structure):
    _fields_ = [
        ("BufferSize", wintypes.DWORD),
        ("Anonymous1", _Anonymous1_e__Union),
        ("ProviderVersion", wintypes.DWORD),
        ("NumberOfProcessors", wintypes.DWORD),
        ("EndTime", ctypes.c_longlong),
        ("TimerResolution", wintypes.DWORD),
        ("MaximumFileSize", wintypes.DWORD),
        ("LogFileMode", wintypes.DWORD),
        ("BuffersWritten", wintypes.DWORD),
        ("Anonymous2", _Anonymous2_e__Union),
        ("LoggerName", ctypes.c_void_p),
        ("LogFileName", ctypes.c_void_p),
        ("TimeZone", TIME_ZONE_INFORMATION),
        ("BootTime", ctypes.c_longlong),
        ("PerfFreq", ctypes.c_longlong),
        ("StartTime", ctypes.c_longlong),
        ("ReservedFlags", wintypes.DWORD),
        ("BuffersLost", wintypes.DWORD),
    ]

class EVENT_TRACE_LOGFILEA(ctypes.Structure):
    _fields_ = [
        ("LogFileName", ctypes.c_void_p),
        ("LoggerName", ctypes.c_void_p),
        ("CurrentTime", ctypes.c_longlong),
        ("BuffersRead", wintypes.DWORD),
        ("Anonymous1", _Anonymous1_e__Union),
        ("CurrentEvent", EVENT_TRACE),
        ("LogfileHeader", TRACE_LOGFILE_HEADER),
        ("BufferCallback", ctypes.c_void_p),
        ("BufferSize", wintypes.DWORD),
        ("Filled", wintypes.DWORD),
        ("EventsLost", wintypes.DWORD),
        ("Anonymous2", _Anonymous2_e__Union),
        ("IsKernelTrace", wintypes.DWORD),
        ("Context", ctypes.c_void_p),
    ]

#[repr(C)]
pub struct EVENT_TRACE_HEADER {
    pub Size: u16,
    pub Anonymous1: _Anonymous1_e__Union,
    pub Anonymous2: _Anonymous2_e__Union,
    pub ThreadId: u32,
    pub ProcessId: u32,
    pub TimeStamp: i64,
    pub Anonymous3: _Anonymous3_e__Union,
    pub Anonymous4: _Anonymous4_e__Union,
}

#[repr(C)]
pub struct EVENT_TRACE {
    pub Header: EVENT_TRACE_HEADER,
    pub InstanceId: u32,
    pub ParentInstanceId: u32,
    pub ParentGuid: GUID,
    pub MofData: *mut core::ffi::c_void,
    pub MofLength: u32,
    pub Anonymous: _Anonymous_e__Union,
}

#[repr(C)]
pub struct SYSTEMTIME {
    pub wYear: u16,
    pub wMonth: u16,
    pub wDayOfWeek: u16,
    pub wDay: u16,
    pub wHour: u16,
    pub wMinute: u16,
    pub wSecond: u16,
    pub wMilliseconds: u16,
}

#[repr(C)]
pub struct TIME_ZONE_INFORMATION {
    pub Bias: i32,
    pub StandardName: [u16; 32],
    pub StandardDate: SYSTEMTIME,
    pub StandardBias: i32,
    pub DaylightName: [u16; 32],
    pub DaylightDate: SYSTEMTIME,
    pub DaylightBias: i32,
}

#[repr(C)]
pub struct TRACE_LOGFILE_HEADER {
    pub BufferSize: u32,
    pub Anonymous1: _Anonymous1_e__Union,
    pub ProviderVersion: u32,
    pub NumberOfProcessors: u32,
    pub EndTime: i64,
    pub TimerResolution: u32,
    pub MaximumFileSize: u32,
    pub LogFileMode: u32,
    pub BuffersWritten: u32,
    pub Anonymous2: _Anonymous2_e__Union,
    pub LoggerName: *mut core::ffi::c_void,
    pub LogFileName: *mut core::ffi::c_void,
    pub TimeZone: TIME_ZONE_INFORMATION,
    pub BootTime: i64,
    pub PerfFreq: i64,
    pub StartTime: i64,
    pub ReservedFlags: u32,
    pub BuffersLost: u32,
}

#[repr(C)]
pub struct EVENT_TRACE_LOGFILEA {
    pub LogFileName: *mut core::ffi::c_void,
    pub LoggerName: *mut core::ffi::c_void,
    pub CurrentTime: i64,
    pub BuffersRead: u32,
    pub Anonymous1: _Anonymous1_e__Union,
    pub CurrentEvent: EVENT_TRACE,
    pub LogfileHeader: TRACE_LOGFILE_HEADER,
    pub BufferCallback: *mut core::ffi::c_void,
    pub BufferSize: u32,
    pub Filled: u32,
    pub EventsLost: u32,
    pub Anonymous2: _Anonymous2_e__Union,
    pub IsKernelTrace: u32,
    pub Context: *mut core::ffi::c_void,
}

import "golang.org/x/sys/windows"

type EVENT_TRACE_HEADER struct {
	Size uint16
	Anonymous1 _Anonymous1_e__Union
	Anonymous2 _Anonymous2_e__Union
	ThreadId uint32
	ProcessId uint32
	TimeStamp int64
	Anonymous3 _Anonymous3_e__Union
	Anonymous4 _Anonymous4_e__Union
}

type EVENT_TRACE struct {
	Header EVENT_TRACE_HEADER
	InstanceId uint32
	ParentInstanceId uint32
	ParentGuid windows.GUID
	MofData uintptr
	MofLength uint32
	Anonymous _Anonymous_e__Union
}

type SYSTEMTIME struct {
	wYear uint16
	wMonth uint16
	wDayOfWeek uint16
	wDay uint16
	wHour uint16
	wMinute uint16
	wSecond uint16
	wMilliseconds uint16
}

type TIME_ZONE_INFORMATION struct {
	Bias int32
	StandardName [32]uint16
	StandardDate SYSTEMTIME
	StandardBias int32
	DaylightName [32]uint16
	DaylightDate SYSTEMTIME
	DaylightBias int32
}

type TRACE_LOGFILE_HEADER struct {
	BufferSize uint32
	Anonymous1 _Anonymous1_e__Union
	ProviderVersion uint32
	NumberOfProcessors uint32
	EndTime int64
	TimerResolution uint32
	MaximumFileSize uint32
	LogFileMode uint32
	BuffersWritten uint32
	Anonymous2 _Anonymous2_e__Union
	LoggerName uintptr
	LogFileName uintptr
	TimeZone TIME_ZONE_INFORMATION
	BootTime int64
	PerfFreq int64
	StartTime int64
	ReservedFlags uint32
	BuffersLost uint32
}

type EVENT_TRACE_LOGFILEA struct {
	LogFileName uintptr
	LoggerName uintptr
	CurrentTime int64
	BuffersRead uint32
	Anonymous1 _Anonymous1_e__Union
	CurrentEvent EVENT_TRACE
	LogfileHeader TRACE_LOGFILE_HEADER
	BufferCallback uintptr
	BufferSize uint32
	Filled uint32
	EventsLost uint32
	Anonymous2 _Anonymous2_e__Union
	IsKernelTrace uint32
	Context uintptr
}

type
  EVENT_TRACE_HEADER = record
    Size: Word;
    Anonymous1: _Anonymous1_e__Union;
    Anonymous2: _Anonymous2_e__Union;
    ThreadId: DWORD;
    ProcessId: DWORD;
    TimeStamp: Int64;
    Anonymous3: _Anonymous3_e__Union;
    Anonymous4: _Anonymous4_e__Union;
  end;

  EVENT_TRACE = record
    Header: EVENT_TRACE_HEADER;
    InstanceId: DWORD;
    ParentInstanceId: DWORD;
    ParentGuid: TGUID;
    MofData: Pointer;
    MofLength: DWORD;
    Anonymous: _Anonymous_e__Union;
  end;

  SYSTEMTIME = record
    wYear: Word;
    wMonth: Word;
    wDayOfWeek: Word;
    wDay: Word;
    wHour: Word;
    wMinute: Word;
    wSecond: Word;
    wMilliseconds: Word;
  end;

  TIME_ZONE_INFORMATION = record
    Bias: Integer;
    StandardName: array[0..31] of WideChar;
    StandardDate: SYSTEMTIME;
    StandardBias: Integer;
    DaylightName: array[0..31] of WideChar;
    DaylightDate: SYSTEMTIME;
    DaylightBias: Integer;
  end;

  TRACE_LOGFILE_HEADER = record
    BufferSize: DWORD;
    Anonymous1: _Anonymous1_e__Union;
    ProviderVersion: DWORD;
    NumberOfProcessors: DWORD;
    EndTime: Int64;
    TimerResolution: DWORD;
    MaximumFileSize: DWORD;
    LogFileMode: DWORD;
    BuffersWritten: DWORD;
    Anonymous2: _Anonymous2_e__Union;
    LoggerName: Pointer;
    LogFileName: Pointer;
    TimeZone: TIME_ZONE_INFORMATION;
    BootTime: Int64;
    PerfFreq: Int64;
    StartTime: Int64;
    ReservedFlags: DWORD;
    BuffersLost: DWORD;
  end;

  EVENT_TRACE_LOGFILEA = record
    LogFileName: Pointer;
    LoggerName: Pointer;
    CurrentTime: Int64;
    BuffersRead: DWORD;
    Anonymous1: _Anonymous1_e__Union;
    CurrentEvent: EVENT_TRACE;
    LogfileHeader: TRACE_LOGFILE_HEADER;
    BufferCallback: Pointer;
    BufferSize: DWORD;
    Filled: DWORD;
    EventsLost: DWORD;
    Anonymous2: _Anonymous2_e__Union;
    IsKernelTrace: DWORD;
    Context: Pointer;
  end;

const EVENT_TRACE_HEADER = extern struct {
    Size: u16,
    Anonymous1: _Anonymous1_e__Union,
    Anonymous2: _Anonymous2_e__Union,
    ThreadId: u32,
    ProcessId: u32,
    TimeStamp: i64,
    Anonymous3: _Anonymous3_e__Union,
    Anonymous4: _Anonymous4_e__Union,
};

const EVENT_TRACE = extern struct {
    Header: EVENT_TRACE_HEADER,
    InstanceId: u32,
    ParentInstanceId: u32,
    ParentGuid: GUID,
    MofData: ?*anyopaque,
    MofLength: u32,
    Anonymous: _Anonymous_e__Union,
};

const SYSTEMTIME = extern struct {
    wYear: u16,
    wMonth: u16,
    wDayOfWeek: u16,
    wDay: u16,
    wHour: u16,
    wMinute: u16,
    wSecond: u16,
    wMilliseconds: u16,
};

const TIME_ZONE_INFORMATION = extern struct {
    Bias: i32,
    StandardName: [32]u16,
    StandardDate: SYSTEMTIME,
    StandardBias: i32,
    DaylightName: [32]u16,
    DaylightDate: SYSTEMTIME,
    DaylightBias: i32,
};

const TRACE_LOGFILE_HEADER = extern struct {
    BufferSize: u32,
    Anonymous1: _Anonymous1_e__Union,
    ProviderVersion: u32,
    NumberOfProcessors: u32,
    EndTime: i64,
    TimerResolution: u32,
    MaximumFileSize: u32,
    LogFileMode: u32,
    BuffersWritten: u32,
    Anonymous2: _Anonymous2_e__Union,
    LoggerName: ?*anyopaque,
    LogFileName: ?*anyopaque,
    TimeZone: TIME_ZONE_INFORMATION,
    BootTime: i64,
    PerfFreq: i64,
    StartTime: i64,
    ReservedFlags: u32,
    BuffersLost: u32,
};

const EVENT_TRACE_LOGFILEA = extern struct {
    LogFileName: ?*anyopaque,
    LoggerName: ?*anyopaque,
    CurrentTime: i64,
    BuffersRead: u32,
    Anonymous1: _Anonymous1_e__Union,
    CurrentEvent: EVENT_TRACE,
    LogfileHeader: TRACE_LOGFILE_HEADER,
    BufferCallback: ?*anyopaque,
    BufferSize: u32,
    Filled: u32,
    EventsLost: u32,
    Anonymous2: _Anonymous2_e__Union,
    IsKernelTrace: u32,
    Context: ?*anyopaque,
};

type
  EVENT_TRACE_HEADER {.bycopy.} = object
    Size: uint16
    Anonymous1: _Anonymous1_e__Union
    Anonymous2: _Anonymous2_e__Union
    ThreadId: uint32
    ProcessId: uint32
    TimeStamp: int64
    Anonymous3: _Anonymous3_e__Union
    Anonymous4: _Anonymous4_e__Union

  EVENT_TRACE {.bycopy.} = object
    Header: EVENT_TRACE_HEADER
    InstanceId: uint32
    ParentInstanceId: uint32
    ParentGuid: GUID
    MofData: pointer
    MofLength: uint32
    Anonymous: _Anonymous_e__Union

  SYSTEMTIME {.bycopy.} = object
    wYear: uint16
    wMonth: uint16
    wDayOfWeek: uint16
    wDay: uint16
    wHour: uint16
    wMinute: uint16
    wSecond: uint16
    wMilliseconds: uint16

  TIME_ZONE_INFORMATION {.bycopy.} = object
    Bias: int32
    StandardName: array[32, uint16]
    StandardDate: SYSTEMTIME
    StandardBias: int32
    DaylightName: array[32, uint16]
    DaylightDate: SYSTEMTIME
    DaylightBias: int32

  TRACE_LOGFILE_HEADER {.bycopy.} = object
    BufferSize: uint32
    Anonymous1: _Anonymous1_e__Union
    ProviderVersion: uint32
    NumberOfProcessors: uint32
    EndTime: int64
    TimerResolution: uint32
    MaximumFileSize: uint32
    LogFileMode: uint32
    BuffersWritten: uint32
    Anonymous2: _Anonymous2_e__Union
    LoggerName: pointer
    LogFileName: pointer
    TimeZone: TIME_ZONE_INFORMATION
    BootTime: int64
    PerfFreq: int64
    StartTime: int64
    ReservedFlags: uint32
    BuffersLost: uint32

  EVENT_TRACE_LOGFILEA {.bycopy.} = object
    LogFileName: pointer
    LoggerName: pointer
    CurrentTime: int64
    BuffersRead: uint32
    Anonymous1: _Anonymous1_e__Union
    CurrentEvent: EVENT_TRACE
    LogfileHeader: TRACE_LOGFILE_HEADER
    BufferCallback: pointer
    BufferSize: uint32
    Filled: uint32
    EventsLost: uint32
    Anonymous2: _Anonymous2_e__Union
    IsKernelTrace: uint32
    Context: pointer

struct EVENT_TRACE_HEADER
{
    ushort Size;
    _Anonymous1_e__Union Anonymous1;
    _Anonymous2_e__Union Anonymous2;
    uint ThreadId;
    uint ProcessId;
    long TimeStamp;
    _Anonymous3_e__Union Anonymous3;
    _Anonymous4_e__Union Anonymous4;
}

struct EVENT_TRACE
{
    EVENT_TRACE_HEADER Header;
    uint InstanceId;
    uint ParentInstanceId;
    GUID ParentGuid;
    void* MofData;
    uint MofLength;
    _Anonymous_e__Union Anonymous;
}

struct SYSTEMTIME
{
    ushort wYear;
    ushort wMonth;
    ushort wDayOfWeek;
    ushort wDay;
    ushort wHour;
    ushort wMinute;
    ushort wSecond;
    ushort wMilliseconds;
}

struct TIME_ZONE_INFORMATION
{
    int Bias;
    wchar[32] StandardName;
    SYSTEMTIME StandardDate;
    int StandardBias;
    wchar[32] DaylightName;
    SYSTEMTIME DaylightDate;
    int DaylightBias;
}

struct TRACE_LOGFILE_HEADER
{
    uint BufferSize;
    _Anonymous1_e__Union Anonymous1;
    uint ProviderVersion;
    uint NumberOfProcessors;
    long EndTime;
    uint TimerResolution;
    uint MaximumFileSize;
    uint LogFileMode;
    uint BuffersWritten;
    _Anonymous2_e__Union Anonymous2;
    void* LoggerName;
    void* LogFileName;
    TIME_ZONE_INFORMATION TimeZone;
    long BootTime;
    long PerfFreq;
    long StartTime;
    uint ReservedFlags;
    uint BuffersLost;
}

struct EVENT_TRACE_LOGFILEA
{
    void* LogFileName;
    void* LoggerName;
    long CurrentTime;
    uint BuffersRead;
    _Anonymous1_e__Union Anonymous1;
    EVENT_TRACE CurrentEvent;
    TRACE_LOGFILE_HEADER LogfileHeader;
    void* BufferCallback;
    uint BufferSize;
    uint Filled;
    uint EventsLost;
    _Anonymous2_e__Union Anonymous2;
    uint IsKernelTrace;
    void* Context;
}