copy
//0x48 bytes (sizeof)
struct _ETW_FILTER_HEADER
{
    LONG FilterFlags;                                                       //0x0
    struct _ETW_FILTER_PID* PidFilter;                                      //0x8
    struct _ETW_FILTER_STRING_TOKEN* ExeFilter;                             //0x10
    struct _ETW_FILTER_STRING_TOKEN* PkgIdFilter;                           //0x18
    struct _ETW_FILTER_STRING_TOKEN* PkgAppIdFilter;                        //0x20
    struct _ETW_PERFECT_HASH_FUNCTION* StackWalkFilter;                     //0x28
    struct _ETW_PERFECT_HASH_FUNCTION* EventIdFilter;                       //0x30
    struct _ETW_PAYLOAD_FILTER* PayloadFilter;                              //0x38
    struct _EVENT_FILTER_HEADER* ProviderSideFilter;                        //0x40
};