struct _WMI_TRACE_PACKET// Size=0x4
{
    unsigned short Size;// Offset=0x0 Size=0x2
    unsigned short HookId;// Offset=0x2 Size=0x2
    unsigned char Type;// Offset=0x2 Size=0x1
    unsigned char Group;// Offset=0x3 Size=0x1
};