Metadatacopystruct _ETW_KERNEL_TRACE_TIMESTAMP { union _LARGE_INTEGER KernelTraceTimeStamp[2];/* 0x0 16 */};