TRACE_EVENT_INFO

using System;
using System.Runtime.InteropServices;

[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct EVENT_DESCRIPTOR
{
    public ushort Id;
    public byte Version;
    public byte Channel;
    public byte Level;
    public byte Opcode;
    public ushort Task;
    public ulong Keyword;
}

[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct EVENT_PROPERTY_INFO
{
    public int Flags;
    public uint NameOffset;
    public _Anonymous1_e__Union Anonymous1;
    public _Anonymous2_e__Union Anonymous2;
    public _Anonymous3_e__Union Anonymous3;
    public _Anonymous4_e__Union Anonymous4;
}

[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct TRACE_EVENT_INFO
{
    public Guid ProviderGuid;
    public Guid EventGuid;
    public EVENT_DESCRIPTOR EventDescriptor;
    public int DecodingSource;
    public uint ProviderNameOffset;
    public uint LevelNameOffset;
    public uint ChannelNameOffset;
    public uint KeywordsNameOffset;
    public uint TaskNameOffset;
    public uint OpcodeNameOffset;
    public uint EventMessageOffset;
    public uint ProviderMessageOffset;
    public uint BinaryXMLOffset;
    public uint BinaryXMLSize;
    public _Anonymous1_e__Union Anonymous1;
    public _Anonymous2_e__Union Anonymous2;
    public uint PropertyCount;
    public uint TopLevelPropertyCount;
    public _Anonymous3_e__Union Anonymous3;
    [MarshalAs(UnmanagedType.ByValArray, SizeConst = 1)] public EVENT_PROPERTY_INFO[] EventPropertyInfoArray;
}

Imports System.Runtime.InteropServices

<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure EVENT_DESCRIPTOR
    Public Id As UShort
    Public Version As Byte
    Public Channel As Byte
    Public Level As Byte
    Public Opcode As Byte
    Public Task As UShort
    Public Keyword As ULong
End Structure

<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure EVENT_PROPERTY_INFO
    Public Flags As Integer
    Public NameOffset As UInteger
    Public Anonymous1 As _Anonymous1_e__Union
    Public Anonymous2 As _Anonymous2_e__Union
    Public Anonymous3 As _Anonymous3_e__Union
    Public Anonymous4 As _Anonymous4_e__Union
End Structure

<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure TRACE_EVENT_INFO
    Public ProviderGuid As Guid
    Public EventGuid As Guid
    Public EventDescriptor As EVENT_DESCRIPTOR
    Public DecodingSource As Integer
    Public ProviderNameOffset As UInteger
    Public LevelNameOffset As UInteger
    Public ChannelNameOffset As UInteger
    Public KeywordsNameOffset As UInteger
    Public TaskNameOffset As UInteger
    Public OpcodeNameOffset As UInteger
    Public EventMessageOffset As UInteger
    Public ProviderMessageOffset As UInteger
    Public BinaryXMLOffset As UInteger
    Public BinaryXMLSize As UInteger
    Public Anonymous1 As _Anonymous1_e__Union
    Public Anonymous2 As _Anonymous2_e__Union
    Public PropertyCount As UInteger
    Public TopLevelPropertyCount As UInteger
    Public Anonymous3 As _Anonymous3_e__Union
    <MarshalAs(UnmanagedType.ByValArray, SizeConst:=1)> Public EventPropertyInfoArray() As EVENT_PROPERTY_INFO
End Structure

import ctypes
from ctypes import wintypes

class EVENT_DESCRIPTOR(ctypes.Structure):
    _fields_ = [
        ("Id", ctypes.c_ushort),
        ("Version", ctypes.c_ubyte),
        ("Channel", ctypes.c_ubyte),
        ("Level", ctypes.c_ubyte),
        ("Opcode", ctypes.c_ubyte),
        ("Task", ctypes.c_ushort),
        ("Keyword", ctypes.c_ulonglong),
    ]

class EVENT_PROPERTY_INFO(ctypes.Structure):
    _fields_ = [
        ("Flags", ctypes.c_int),
        ("NameOffset", wintypes.DWORD),
        ("Anonymous1", _Anonymous1_e__Union),
        ("Anonymous2", _Anonymous2_e__Union),
        ("Anonymous3", _Anonymous3_e__Union),
        ("Anonymous4", _Anonymous4_e__Union),
    ]

class TRACE_EVENT_INFO(ctypes.Structure):
    _fields_ = [
        ("ProviderGuid", GUID),
        ("EventGuid", GUID),
        ("EventDescriptor", EVENT_DESCRIPTOR),
        ("DecodingSource", ctypes.c_int),
        ("ProviderNameOffset", wintypes.DWORD),
        ("LevelNameOffset", wintypes.DWORD),
        ("ChannelNameOffset", wintypes.DWORD),
        ("KeywordsNameOffset", wintypes.DWORD),
        ("TaskNameOffset", wintypes.DWORD),
        ("OpcodeNameOffset", wintypes.DWORD),
        ("EventMessageOffset", wintypes.DWORD),
        ("ProviderMessageOffset", wintypes.DWORD),
        ("BinaryXMLOffset", wintypes.DWORD),
        ("BinaryXMLSize", wintypes.DWORD),
        ("Anonymous1", _Anonymous1_e__Union),
        ("Anonymous2", _Anonymous2_e__Union),
        ("PropertyCount", wintypes.DWORD),
        ("TopLevelPropertyCount", wintypes.DWORD),
        ("Anonymous3", _Anonymous3_e__Union),
        ("EventPropertyInfoArray", EVENT_PROPERTY_INFO * 1),
    ]

#[repr(C)]
pub struct EVENT_DESCRIPTOR {
    pub Id: u16,
    pub Version: u8,
    pub Channel: u8,
    pub Level: u8,
    pub Opcode: u8,
    pub Task: u16,
    pub Keyword: u64,
}

#[repr(C)]
pub struct EVENT_PROPERTY_INFO {
    pub Flags: i32,
    pub NameOffset: u32,
    pub Anonymous1: _Anonymous1_e__Union,
    pub Anonymous2: _Anonymous2_e__Union,
    pub Anonymous3: _Anonymous3_e__Union,
    pub Anonymous4: _Anonymous4_e__Union,
}

#[repr(C)]
pub struct TRACE_EVENT_INFO {
    pub ProviderGuid: GUID,
    pub EventGuid: GUID,
    pub EventDescriptor: EVENT_DESCRIPTOR,
    pub DecodingSource: i32,
    pub ProviderNameOffset: u32,
    pub LevelNameOffset: u32,
    pub ChannelNameOffset: u32,
    pub KeywordsNameOffset: u32,
    pub TaskNameOffset: u32,
    pub OpcodeNameOffset: u32,
    pub EventMessageOffset: u32,
    pub ProviderMessageOffset: u32,
    pub BinaryXMLOffset: u32,
    pub BinaryXMLSize: u32,
    pub Anonymous1: _Anonymous1_e__Union,
    pub Anonymous2: _Anonymous2_e__Union,
    pub PropertyCount: u32,
    pub TopLevelPropertyCount: u32,
    pub Anonymous3: _Anonymous3_e__Union,
    pub EventPropertyInfoArray: [EVENT_PROPERTY_INFO; 1],
}

import "golang.org/x/sys/windows"

type EVENT_DESCRIPTOR struct {
	Id uint16
	Version byte
	Channel byte
	Level byte
	Opcode byte
	Task uint16
	Keyword uint64
}

type EVENT_PROPERTY_INFO struct {
	Flags int32
	NameOffset uint32
	Anonymous1 _Anonymous1_e__Union
	Anonymous2 _Anonymous2_e__Union
	Anonymous3 _Anonymous3_e__Union
	Anonymous4 _Anonymous4_e__Union
}

type TRACE_EVENT_INFO struct {
	ProviderGuid windows.GUID
	EventGuid windows.GUID
	EventDescriptor EVENT_DESCRIPTOR
	DecodingSource int32
	ProviderNameOffset uint32
	LevelNameOffset uint32
	ChannelNameOffset uint32
	KeywordsNameOffset uint32
	TaskNameOffset uint32
	OpcodeNameOffset uint32
	EventMessageOffset uint32
	ProviderMessageOffset uint32
	BinaryXMLOffset uint32
	BinaryXMLSize uint32
	Anonymous1 _Anonymous1_e__Union
	Anonymous2 _Anonymous2_e__Union
	PropertyCount uint32
	TopLevelPropertyCount uint32
	Anonymous3 _Anonymous3_e__Union
	EventPropertyInfoArray [1]EVENT_PROPERTY_INFO
}

type
  EVENT_DESCRIPTOR = record
    Id: Word;
    Version: Byte;
    Channel: Byte;
    Level: Byte;
    Opcode: Byte;
    Task: Word;
    Keyword: UInt64;
  end;

  EVENT_PROPERTY_INFO = record
    Flags: Integer;
    NameOffset: DWORD;
    Anonymous1: _Anonymous1_e__Union;
    Anonymous2: _Anonymous2_e__Union;
    Anonymous3: _Anonymous3_e__Union;
    Anonymous4: _Anonymous4_e__Union;
  end;

  TRACE_EVENT_INFO = record
    ProviderGuid: TGUID;
    EventGuid: TGUID;
    EventDescriptor: EVENT_DESCRIPTOR;
    DecodingSource: Integer;
    ProviderNameOffset: DWORD;
    LevelNameOffset: DWORD;
    ChannelNameOffset: DWORD;
    KeywordsNameOffset: DWORD;
    TaskNameOffset: DWORD;
    OpcodeNameOffset: DWORD;
    EventMessageOffset: DWORD;
    ProviderMessageOffset: DWORD;
    BinaryXMLOffset: DWORD;
    BinaryXMLSize: DWORD;
    Anonymous1: _Anonymous1_e__Union;
    Anonymous2: _Anonymous2_e__Union;
    PropertyCount: DWORD;
    TopLevelPropertyCount: DWORD;
    Anonymous3: _Anonymous3_e__Union;
    EventPropertyInfoArray: array[0..0] of EVENT_PROPERTY_INFO;
  end;

const EVENT_DESCRIPTOR = extern struct {
    Id: u16,
    Version: u8,
    Channel: u8,
    Level: u8,
    Opcode: u8,
    Task: u16,
    Keyword: u64,
};

const EVENT_PROPERTY_INFO = extern struct {
    Flags: i32,
    NameOffset: u32,
    Anonymous1: _Anonymous1_e__Union,
    Anonymous2: _Anonymous2_e__Union,
    Anonymous3: _Anonymous3_e__Union,
    Anonymous4: _Anonymous4_e__Union,
};

const TRACE_EVENT_INFO = extern struct {
    ProviderGuid: GUID,
    EventGuid: GUID,
    EventDescriptor: EVENT_DESCRIPTOR,
    DecodingSource: i32,
    ProviderNameOffset: u32,
    LevelNameOffset: u32,
    ChannelNameOffset: u32,
    KeywordsNameOffset: u32,
    TaskNameOffset: u32,
    OpcodeNameOffset: u32,
    EventMessageOffset: u32,
    ProviderMessageOffset: u32,
    BinaryXMLOffset: u32,
    BinaryXMLSize: u32,
    Anonymous1: _Anonymous1_e__Union,
    Anonymous2: _Anonymous2_e__Union,
    PropertyCount: u32,
    TopLevelPropertyCount: u32,
    Anonymous3: _Anonymous3_e__Union,
    EventPropertyInfoArray: [1]EVENT_PROPERTY_INFO,
};

type
  EVENT_DESCRIPTOR {.bycopy.} = object
    Id: uint16
    Version: uint8
    Channel: uint8
    Level: uint8
    Opcode: uint8
    Task: uint16
    Keyword: uint64

  EVENT_PROPERTY_INFO {.bycopy.} = object
    Flags: int32
    NameOffset: uint32
    Anonymous1: _Anonymous1_e__Union
    Anonymous2: _Anonymous2_e__Union
    Anonymous3: _Anonymous3_e__Union
    Anonymous4: _Anonymous4_e__Union

  TRACE_EVENT_INFO {.bycopy.} = object
    ProviderGuid: GUID
    EventGuid: GUID
    EventDescriptor: EVENT_DESCRIPTOR
    DecodingSource: int32
    ProviderNameOffset: uint32
    LevelNameOffset: uint32
    ChannelNameOffset: uint32
    KeywordsNameOffset: uint32
    TaskNameOffset: uint32
    OpcodeNameOffset: uint32
    EventMessageOffset: uint32
    ProviderMessageOffset: uint32
    BinaryXMLOffset: uint32
    BinaryXMLSize: uint32
    Anonymous1: _Anonymous1_e__Union
    Anonymous2: _Anonymous2_e__Union
    PropertyCount: uint32
    TopLevelPropertyCount: uint32
    Anonymous3: _Anonymous3_e__Union
    EventPropertyInfoArray: array[1, EVENT_PROPERTY_INFO]

struct EVENT_DESCRIPTOR
{
    ushort Id;
    ubyte Version;
    ubyte Channel;
    ubyte Level;
    ubyte Opcode;
    ushort Task;
    ulong Keyword;
}

struct EVENT_PROPERTY_INFO
{
    int Flags;
    uint NameOffset;
    _Anonymous1_e__Union Anonymous1;
    _Anonymous2_e__Union Anonymous2;
    _Anonymous3_e__Union Anonymous3;
    _Anonymous4_e__Union Anonymous4;
}

struct TRACE_EVENT_INFO
{
    GUID ProviderGuid;
    GUID EventGuid;
    EVENT_DESCRIPTOR EventDescriptor;
    int DecodingSource;
    uint ProviderNameOffset;
    uint LevelNameOffset;
    uint ChannelNameOffset;
    uint KeywordsNameOffset;
    uint TaskNameOffset;
    uint OpcodeNameOffset;
    uint EventMessageOffset;
    uint ProviderMessageOffset;
    uint BinaryXMLOffset;
    uint BinaryXMLSize;
    _Anonymous1_e__Union Anonymous1;
    _Anonymous2_e__Union Anonymous2;
    uint PropertyCount;
    uint TopLevelPropertyCount;
    _Anonymous3_e__Union Anonymous3;
    EVENT_PROPERTY_INFO[1] EventPropertyInfoArray;
}