EVENT_INSTANCE_HEADER

using System;
using System.Runtime.InteropServices;

[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct EVENT_INSTANCE_HEADER
{
    public ushort Size;
    public _Anonymous1_e__Union Anonymous1;
    public _Anonymous2_e__Union Anonymous2;
    public uint ThreadId;
    public uint ProcessId;
    public long TimeStamp;
    public ulong RegHandle;
    public uint InstanceId;
    public uint ParentInstanceId;
    public _Anonymous3_e__Union Anonymous3;
    public ulong ParentRegHandle;
}

Imports System.Runtime.InteropServices

<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure EVENT_INSTANCE_HEADER
    Public Size As UShort
    Public Anonymous1 As _Anonymous1_e__Union
    Public Anonymous2 As _Anonymous2_e__Union
    Public ThreadId As UInteger
    Public ProcessId As UInteger
    Public TimeStamp As Long
    Public RegHandle As ULong
    Public InstanceId As UInteger
    Public ParentInstanceId As UInteger
    Public Anonymous3 As _Anonymous3_e__Union
    Public ParentRegHandle As ULong
End Structure

import ctypes
from ctypes import wintypes

class EVENT_INSTANCE_HEADER(ctypes.Structure):
    _fields_ = [
        ("Size", ctypes.c_ushort),
        ("Anonymous1", _Anonymous1_e__Union),
        ("Anonymous2", _Anonymous2_e__Union),
        ("ThreadId", wintypes.DWORD),
        ("ProcessId", wintypes.DWORD),
        ("TimeStamp", ctypes.c_longlong),
        ("RegHandle", ctypes.c_ulonglong),
        ("InstanceId", wintypes.DWORD),
        ("ParentInstanceId", wintypes.DWORD),
        ("Anonymous3", _Anonymous3_e__Union),
        ("ParentRegHandle", ctypes.c_ulonglong),
    ]

#[repr(C)]
pub struct EVENT_INSTANCE_HEADER {
    pub Size: u16,
    pub Anonymous1: _Anonymous1_e__Union,
    pub Anonymous2: _Anonymous2_e__Union,
    pub ThreadId: u32,
    pub ProcessId: u32,
    pub TimeStamp: i64,
    pub RegHandle: u64,
    pub InstanceId: u32,
    pub ParentInstanceId: u32,
    pub Anonymous3: _Anonymous3_e__Union,
    pub ParentRegHandle: u64,
}

import "golang.org/x/sys/windows"

type EVENT_INSTANCE_HEADER struct {
	Size uint16
	Anonymous1 _Anonymous1_e__Union
	Anonymous2 _Anonymous2_e__Union
	ThreadId uint32
	ProcessId uint32
	TimeStamp int64
	RegHandle uint64
	InstanceId uint32
	ParentInstanceId uint32
	Anonymous3 _Anonymous3_e__Union
	ParentRegHandle uint64
}

type
  EVENT_INSTANCE_HEADER = record
    Size: Word;
    Anonymous1: _Anonymous1_e__Union;
    Anonymous2: _Anonymous2_e__Union;
    ThreadId: DWORD;
    ProcessId: DWORD;
    TimeStamp: Int64;
    RegHandle: UInt64;
    InstanceId: DWORD;
    ParentInstanceId: DWORD;
    Anonymous3: _Anonymous3_e__Union;
    ParentRegHandle: UInt64;
  end;

const EVENT_INSTANCE_HEADER = extern struct {
    Size: u16,
    Anonymous1: _Anonymous1_e__Union,
    Anonymous2: _Anonymous2_e__Union,
    ThreadId: u32,
    ProcessId: u32,
    TimeStamp: i64,
    RegHandle: u64,
    InstanceId: u32,
    ParentInstanceId: u32,
    Anonymous3: _Anonymous3_e__Union,
    ParentRegHandle: u64,
};

type
  EVENT_INSTANCE_HEADER {.bycopy.} = object
    Size: uint16
    Anonymous1: _Anonymous1_e__Union
    Anonymous2: _Anonymous2_e__Union
    ThreadId: uint32
    ProcessId: uint32
    TimeStamp: int64
    RegHandle: uint64
    InstanceId: uint32
    ParentInstanceId: uint32
    Anonymous3: _Anonymous3_e__Union
    ParentRegHandle: uint64

struct EVENT_INSTANCE_HEADER
{
    ushort Size;
    _Anonymous1_e__Union Anonymous1;
    _Anonymous2_e__Union Anonymous2;
    uint ThreadId;
    uint ProcessId;
    long TimeStamp;
    ulong RegHandle;
    uint InstanceId;
    uint ParentInstanceId;
    _Anonymous3_e__Union Anonymous3;
    ulong ParentRegHandle;
}