FWPM_NET_EVENT1

using System;
using System.Runtime.InteropServices;

[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct FILETIME
{
    public uint dwLowDateTime;
    public uint dwHighDateTime;
}

[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct FWP_BYTE_BLOB
{
    public uint size;
    public IntPtr data;
}

[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct FWPM_NET_EVENT_HEADER1
{
    public FILETIME timeStamp;
    public uint flags;
    public int ipVersion;
    public byte ipProtocol;
    public _Anonymous1_e__Union Anonymous1;
    public _Anonymous2_e__Union Anonymous2;
    public ushort localPort;
    public ushort remotePort;
    public uint scopeId;
    public FWP_BYTE_BLOB appId;
    public IntPtr userId;
    public _Anonymous3_e__Union Anonymous3;
}

[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct FWPM_NET_EVENT1
{
    public FWPM_NET_EVENT_HEADER1 header;
    public int type;
    public _Anonymous_e__Union Anonymous;
}

Imports System.Runtime.InteropServices

<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure FILETIME
    Public dwLowDateTime As UInteger
    Public dwHighDateTime As UInteger
End Structure

<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure FWP_BYTE_BLOB
    Public size As UInteger
    Public data As IntPtr
End Structure

<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure FWPM_NET_EVENT_HEADER1
    Public timeStamp As FILETIME
    Public flags As UInteger
    Public ipVersion As Integer
    Public ipProtocol As Byte
    Public Anonymous1 As _Anonymous1_e__Union
    Public Anonymous2 As _Anonymous2_e__Union
    Public localPort As UShort
    Public remotePort As UShort
    Public scopeId As UInteger
    Public appId As FWP_BYTE_BLOB
    Public userId As IntPtr
    Public Anonymous3 As _Anonymous3_e__Union
End Structure

<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure FWPM_NET_EVENT1
    Public header As FWPM_NET_EVENT_HEADER1
    Public type As Integer
    Public Anonymous As _Anonymous_e__Union
End Structure

import ctypes
from ctypes import wintypes

class FILETIME(ctypes.Structure):
    _fields_ = [
        ("dwLowDateTime", wintypes.DWORD),
        ("dwHighDateTime", wintypes.DWORD),
    ]

class FWP_BYTE_BLOB(ctypes.Structure):
    _fields_ = [
        ("size", wintypes.DWORD),
        ("data", ctypes.c_void_p),
    ]

class FWPM_NET_EVENT_HEADER1(ctypes.Structure):
    _fields_ = [
        ("timeStamp", FILETIME),
        ("flags", wintypes.DWORD),
        ("ipVersion", ctypes.c_int),
        ("ipProtocol", ctypes.c_ubyte),
        ("Anonymous1", _Anonymous1_e__Union),
        ("Anonymous2", _Anonymous2_e__Union),
        ("localPort", ctypes.c_ushort),
        ("remotePort", ctypes.c_ushort),
        ("scopeId", wintypes.DWORD),
        ("appId", FWP_BYTE_BLOB),
        ("userId", ctypes.c_void_p),
        ("Anonymous3", _Anonymous3_e__Union),
    ]

class FWPM_NET_EVENT1(ctypes.Structure):
    _fields_ = [
        ("header", FWPM_NET_EVENT_HEADER1),
        ("type", ctypes.c_int),
        ("Anonymous", _Anonymous_e__Union),
    ]

#[repr(C)]
pub struct FILETIME {
    pub dwLowDateTime: u32,
    pub dwHighDateTime: u32,
}

#[repr(C)]
pub struct FWP_BYTE_BLOB {
    pub size: u32,
    pub data: *mut core::ffi::c_void,
}

#[repr(C)]
pub struct FWPM_NET_EVENT_HEADER1 {
    pub timeStamp: FILETIME,
    pub flags: u32,
    pub ipVersion: i32,
    pub ipProtocol: u8,
    pub Anonymous1: _Anonymous1_e__Union,
    pub Anonymous2: _Anonymous2_e__Union,
    pub localPort: u16,
    pub remotePort: u16,
    pub scopeId: u32,
    pub appId: FWP_BYTE_BLOB,
    pub userId: *mut core::ffi::c_void,
    pub Anonymous3: _Anonymous3_e__Union,
}

#[repr(C)]
pub struct FWPM_NET_EVENT1 {
    pub header: FWPM_NET_EVENT_HEADER1,
    pub type: i32,
    pub Anonymous: _Anonymous_e__Union,
}

import "golang.org/x/sys/windows"

type FILETIME struct {
	dwLowDateTime uint32
	dwHighDateTime uint32
}

type FWP_BYTE_BLOB struct {
	size uint32
	data uintptr
}

type FWPM_NET_EVENT_HEADER1 struct {
	timeStamp FILETIME
	flags uint32
	ipVersion int32
	ipProtocol byte
	Anonymous1 _Anonymous1_e__Union
	Anonymous2 _Anonymous2_e__Union
	localPort uint16
	remotePort uint16
	scopeId uint32
	appId FWP_BYTE_BLOB
	userId uintptr
	Anonymous3 _Anonymous3_e__Union
}

type FWPM_NET_EVENT1 struct {
	header FWPM_NET_EVENT_HEADER1
	type int32
	Anonymous _Anonymous_e__Union
}

type
  FILETIME = record
    dwLowDateTime: DWORD;
    dwHighDateTime: DWORD;
  end;

  FWP_BYTE_BLOB = record
    size: DWORD;
    data: Pointer;
  end;

  FWPM_NET_EVENT_HEADER1 = record
    timeStamp: FILETIME;
    flags: DWORD;
    ipVersion: Integer;
    ipProtocol: Byte;
    Anonymous1: _Anonymous1_e__Union;
    Anonymous2: _Anonymous2_e__Union;
    localPort: Word;
    remotePort: Word;
    scopeId: DWORD;
    appId: FWP_BYTE_BLOB;
    userId: Pointer;
    Anonymous3: _Anonymous3_e__Union;
  end;

  FWPM_NET_EVENT1 = record
    header: FWPM_NET_EVENT_HEADER1;
    type: Integer;
    Anonymous: _Anonymous_e__Union;
  end;

const FILETIME = extern struct {
    dwLowDateTime: u32,
    dwHighDateTime: u32,
};

const FWP_BYTE_BLOB = extern struct {
    size: u32,
    data: ?*anyopaque,
};

const FWPM_NET_EVENT_HEADER1 = extern struct {
    timeStamp: FILETIME,
    flags: u32,
    ipVersion: i32,
    ipProtocol: u8,
    Anonymous1: _Anonymous1_e__Union,
    Anonymous2: _Anonymous2_e__Union,
    localPort: u16,
    remotePort: u16,
    scopeId: u32,
    appId: FWP_BYTE_BLOB,
    userId: ?*anyopaque,
    Anonymous3: _Anonymous3_e__Union,
};

const FWPM_NET_EVENT1 = extern struct {
    header: FWPM_NET_EVENT_HEADER1,
    type: i32,
    Anonymous: _Anonymous_e__Union,
};

type
  FILETIME {.bycopy.} = object
    dwLowDateTime: uint32
    dwHighDateTime: uint32

  FWP_BYTE_BLOB {.bycopy.} = object
    size: uint32
    data: pointer

  FWPM_NET_EVENT_HEADER1 {.bycopy.} = object
    timeStamp: FILETIME
    flags: uint32
    ipVersion: int32
    ipProtocol: uint8
    Anonymous1: _Anonymous1_e__Union
    Anonymous2: _Anonymous2_e__Union
    localPort: uint16
    remotePort: uint16
    scopeId: uint32
    appId: FWP_BYTE_BLOB
    userId: pointer
    Anonymous3: _Anonymous3_e__Union

  FWPM_NET_EVENT1 {.bycopy.} = object
    header: FWPM_NET_EVENT_HEADER1
    type: int32
    Anonymous: _Anonymous_e__Union

struct FILETIME
{
    uint dwLowDateTime;
    uint dwHighDateTime;
}

struct FWP_BYTE_BLOB
{
    uint size;
    void* data;
}

struct FWPM_NET_EVENT_HEADER1
{
    FILETIME timeStamp;
    uint flags;
    int ipVersion;
    ubyte ipProtocol;
    _Anonymous1_e__Union Anonymous1;
    _Anonymous2_e__Union Anonymous2;
    ushort localPort;
    ushort remotePort;
    uint scopeId;
    FWP_BYTE_BLOB appId;
    void* userId;
    _Anonymous3_e__Union Anonymous3;
}

struct FWPM_NET_EVENT1
{
    FWPM_NET_EVENT_HEADER1 header;
    int type;
    _Anonymous_e__Union Anonymous;
}