WER_REPORT_METADATA_V3

using System;
using System.Runtime.InteropServices;

[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct WER_REPORT_PARAMETER
{
    [MarshalAs(UnmanagedType.ByValTStr, SizeConst = 129)] public string Name;
    [MarshalAs(UnmanagedType.ByValTStr, SizeConst = 260)] public string Value;
}

[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct WER_REPORT_SIGNATURE
{
    [MarshalAs(UnmanagedType.ByValTStr, SizeConst = 65)] public string EventName;
    [MarshalAs(UnmanagedType.ByValArray, SizeConst = 10)] public WER_REPORT_PARAMETER[] Parameters;
}

[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct FILETIME
{
    public uint dwLowDateTime;
    public uint dwHighDateTime;
}

[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct WER_REPORT_METADATA_V3
{
    public WER_REPORT_SIGNATURE Signature;
    public Guid BucketId;
    public Guid ReportId;
    public FILETIME CreationTime;
    public ulong SizeInBytes;
    [MarshalAs(UnmanagedType.ByValTStr, SizeConst = 260)] public string CabId;
    public uint ReportStatus;
    public Guid ReportIntegratorId;
    public uint NumberOfFiles;
    public uint SizeOfFileNames;
    public IntPtr FileNames;
    [MarshalAs(UnmanagedType.ByValTStr, SizeConst = 128)] public string FriendlyEventName;
    [MarshalAs(UnmanagedType.ByValTStr, SizeConst = 128)] public string ApplicationName;
    [MarshalAs(UnmanagedType.ByValTStr, SizeConst = 260)] public string ApplicationPath;
    [MarshalAs(UnmanagedType.ByValTStr, SizeConst = 512)] public string Description;
    [MarshalAs(UnmanagedType.ByValTStr, SizeConst = 260)] public string BucketIdString;
    public ulong LegacyBucketId;
}

Imports System.Runtime.InteropServices

<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure WER_REPORT_PARAMETER
    <MarshalAs(UnmanagedType.ByValTStr, SizeConst:=129)> Public Name As String
    <MarshalAs(UnmanagedType.ByValTStr, SizeConst:=260)> Public Value As String
End Structure

<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure WER_REPORT_SIGNATURE
    <MarshalAs(UnmanagedType.ByValTStr, SizeConst:=65)> Public EventName As String
    <MarshalAs(UnmanagedType.ByValArray, SizeConst:=10)> Public Parameters() As WER_REPORT_PARAMETER
End Structure

<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure FILETIME
    Public dwLowDateTime As UInteger
    Public dwHighDateTime As UInteger
End Structure

<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure WER_REPORT_METADATA_V3
    Public Signature As WER_REPORT_SIGNATURE
    Public BucketId As Guid
    Public ReportId As Guid
    Public CreationTime As FILETIME
    Public SizeInBytes As ULong
    <MarshalAs(UnmanagedType.ByValTStr, SizeConst:=260)> Public CabId As String
    Public ReportStatus As UInteger
    Public ReportIntegratorId As Guid
    Public NumberOfFiles As UInteger
    Public SizeOfFileNames As UInteger
    Public FileNames As IntPtr
    <MarshalAs(UnmanagedType.ByValTStr, SizeConst:=128)> Public FriendlyEventName As String
    <MarshalAs(UnmanagedType.ByValTStr, SizeConst:=128)> Public ApplicationName As String
    <MarshalAs(UnmanagedType.ByValTStr, SizeConst:=260)> Public ApplicationPath As String
    <MarshalAs(UnmanagedType.ByValTStr, SizeConst:=512)> Public Description As String
    <MarshalAs(UnmanagedType.ByValTStr, SizeConst:=260)> Public BucketIdString As String
    Public LegacyBucketId As ULong
End Structure

import ctypes
from ctypes import wintypes

class WER_REPORT_PARAMETER(ctypes.Structure):
    _fields_ = [
        ("Name", ctypes.c_wchar * 129),
        ("Value", ctypes.c_wchar * 260),
    ]

class WER_REPORT_SIGNATURE(ctypes.Structure):
    _fields_ = [
        ("EventName", ctypes.c_wchar * 65),
        ("Parameters", WER_REPORT_PARAMETER * 10),
    ]

class FILETIME(ctypes.Structure):
    _fields_ = [
        ("dwLowDateTime", wintypes.DWORD),
        ("dwHighDateTime", wintypes.DWORD),
    ]

class WER_REPORT_METADATA_V3(ctypes.Structure):
    _fields_ = [
        ("Signature", WER_REPORT_SIGNATURE),
        ("BucketId", GUID),
        ("ReportId", GUID),
        ("CreationTime", FILETIME),
        ("SizeInBytes", ctypes.c_ulonglong),
        ("CabId", ctypes.c_wchar * 260),
        ("ReportStatus", wintypes.DWORD),
        ("ReportIntegratorId", GUID),
        ("NumberOfFiles", wintypes.DWORD),
        ("SizeOfFileNames", wintypes.DWORD),
        ("FileNames", ctypes.c_void_p),
        ("FriendlyEventName", ctypes.c_wchar * 128),
        ("ApplicationName", ctypes.c_wchar * 128),
        ("ApplicationPath", ctypes.c_wchar * 260),
        ("Description", ctypes.c_wchar * 512),
        ("BucketIdString", ctypes.c_wchar * 260),
        ("LegacyBucketId", ctypes.c_ulonglong),
    ]

#[repr(C)]
pub struct WER_REPORT_PARAMETER {
    pub Name: [u16; 129],
    pub Value: [u16; 260],
}

#[repr(C)]
pub struct WER_REPORT_SIGNATURE {
    pub EventName: [u16; 65],
    pub Parameters: [WER_REPORT_PARAMETER; 10],
}

#[repr(C)]
pub struct FILETIME {
    pub dwLowDateTime: u32,
    pub dwHighDateTime: u32,
}

#[repr(C)]
pub struct WER_REPORT_METADATA_V3 {
    pub Signature: WER_REPORT_SIGNATURE,
    pub BucketId: GUID,
    pub ReportId: GUID,
    pub CreationTime: FILETIME,
    pub SizeInBytes: u64,
    pub CabId: [u16; 260],
    pub ReportStatus: u32,
    pub ReportIntegratorId: GUID,
    pub NumberOfFiles: u32,
    pub SizeOfFileNames: u32,
    pub FileNames: *mut core::ffi::c_void,
    pub FriendlyEventName: [u16; 128],
    pub ApplicationName: [u16; 128],
    pub ApplicationPath: [u16; 260],
    pub Description: [u16; 512],
    pub BucketIdString: [u16; 260],
    pub LegacyBucketId: u64,
}

import "golang.org/x/sys/windows"

type WER_REPORT_PARAMETER struct {
	Name [129]uint16
	Value [260]uint16
}

type WER_REPORT_SIGNATURE struct {
	EventName [65]uint16
	Parameters [10]WER_REPORT_PARAMETER
}

type FILETIME struct {
	dwLowDateTime uint32
	dwHighDateTime uint32
}

type WER_REPORT_METADATA_V3 struct {
	Signature WER_REPORT_SIGNATURE
	BucketId windows.GUID
	ReportId windows.GUID
	CreationTime FILETIME
	SizeInBytes uint64
	CabId [260]uint16
	ReportStatus uint32
	ReportIntegratorId windows.GUID
	NumberOfFiles uint32
	SizeOfFileNames uint32
	FileNames uintptr
	FriendlyEventName [128]uint16
	ApplicationName [128]uint16
	ApplicationPath [260]uint16
	Description [512]uint16
	BucketIdString [260]uint16
	LegacyBucketId uint64
}

type
  WER_REPORT_PARAMETER = record
    Name: array[0..128] of WideChar;
    Value: array[0..259] of WideChar;
  end;

  WER_REPORT_SIGNATURE = record
    EventName: array[0..64] of WideChar;
    Parameters: array[0..9] of WER_REPORT_PARAMETER;
  end;

  FILETIME = record
    dwLowDateTime: DWORD;
    dwHighDateTime: DWORD;
  end;

  WER_REPORT_METADATA_V3 = record
    Signature: WER_REPORT_SIGNATURE;
    BucketId: TGUID;
    ReportId: TGUID;
    CreationTime: FILETIME;
    SizeInBytes: UInt64;
    CabId: array[0..259] of WideChar;
    ReportStatus: DWORD;
    ReportIntegratorId: TGUID;
    NumberOfFiles: DWORD;
    SizeOfFileNames: DWORD;
    FileNames: Pointer;
    FriendlyEventName: array[0..127] of WideChar;
    ApplicationName: array[0..127] of WideChar;
    ApplicationPath: array[0..259] of WideChar;
    Description: array[0..511] of WideChar;
    BucketIdString: array[0..259] of WideChar;
    LegacyBucketId: UInt64;
  end;

const WER_REPORT_PARAMETER = extern struct {
    Name: [129]u16,
    Value: [260]u16,
};

const WER_REPORT_SIGNATURE = extern struct {
    EventName: [65]u16,
    Parameters: [10]WER_REPORT_PARAMETER,
};

const FILETIME = extern struct {
    dwLowDateTime: u32,
    dwHighDateTime: u32,
};

const WER_REPORT_METADATA_V3 = extern struct {
    Signature: WER_REPORT_SIGNATURE,
    BucketId: GUID,
    ReportId: GUID,
    CreationTime: FILETIME,
    SizeInBytes: u64,
    CabId: [260]u16,
    ReportStatus: u32,
    ReportIntegratorId: GUID,
    NumberOfFiles: u32,
    SizeOfFileNames: u32,
    FileNames: ?*anyopaque,
    FriendlyEventName: [128]u16,
    ApplicationName: [128]u16,
    ApplicationPath: [260]u16,
    Description: [512]u16,
    BucketIdString: [260]u16,
    LegacyBucketId: u64,
};

type
  WER_REPORT_PARAMETER {.bycopy.} = object
    Name: array[129, uint16]
    Value: array[260, uint16]

  WER_REPORT_SIGNATURE {.bycopy.} = object
    EventName: array[65, uint16]
    Parameters: array[10, WER_REPORT_PARAMETER]

  FILETIME {.bycopy.} = object
    dwLowDateTime: uint32
    dwHighDateTime: uint32

  WER_REPORT_METADATA_V3 {.bycopy.} = object
    Signature: WER_REPORT_SIGNATURE
    BucketId: GUID
    ReportId: GUID
    CreationTime: FILETIME
    SizeInBytes: uint64
    CabId: array[260, uint16]
    ReportStatus: uint32
    ReportIntegratorId: GUID
    NumberOfFiles: uint32
    SizeOfFileNames: uint32
    FileNames: pointer
    FriendlyEventName: array[128, uint16]
    ApplicationName: array[128, uint16]
    ApplicationPath: array[260, uint16]
    Description: array[512, uint16]
    BucketIdString: array[260, uint16]
    LegacyBucketId: uint64

struct WER_REPORT_PARAMETER
{
    wchar[129] Name;
    wchar[260] Value;
}

struct WER_REPORT_SIGNATURE
{
    wchar[65] EventName;
    WER_REPORT_PARAMETER[10] Parameters;
}

struct FILETIME
{
    uint dwLowDateTime;
    uint dwHighDateTime;
}

struct WER_REPORT_METADATA_V3
{
    WER_REPORT_SIGNATURE Signature;
    GUID BucketId;
    GUID ReportId;
    FILETIME CreationTime;
    ulong SizeInBytes;
    wchar[260] CabId;
    uint ReportStatus;
    GUID ReportIntegratorId;
    uint NumberOfFiles;
    uint SizeOfFileNames;
    void* FileNames;
    wchar[128] FriendlyEventName;
    wchar[128] ApplicationName;
    wchar[260] ApplicationPath;
    wchar[512] Description;
    wchar[260] BucketIdString;
    ulong LegacyBucketId;
}