struct _EVENT_PAYLOAD_PREDICATE// Size=0x18
{
    unsigned short FieldIndex;// Offset=0x0 Size=0x2
    unsigned short CompareOp;// Offset=0x2 Size=0x2
    unsigned long long Value[2];// Offset=0x8 Size=0x10
};