CryptDecryptAndVerifyMessageSignature

// CRYPT32.dll
#include <windows.h>

BOOL CryptDecryptAndVerifyMessageSignature(
    CRYPT_DECRYPT_MESSAGE_PARA* pDecryptPara,
    CRYPT_VERIFY_MESSAGE_PARA* pVerifyPara,
    DWORD dwSignerIndex,
    const BYTE* pbEncryptedBlob,
    DWORD cbEncryptedBlob,
    BYTE* pbDecrypted,   // optional
    DWORD* pcbDecrypted,   // optional
    CERT_CONTEXT** ppXchgCert,   // optional
    CERT_CONTEXT** ppSignerCert   // optional
);

<DllImport("CRYPT32.dll", SetLastError:=True, ExactSpelling:=True)>
Public Shared Function CryptDecryptAndVerifyMessageSignature(
    pDecryptPara As IntPtr,   ' CRYPT_DECRYPT_MESSAGE_PARA*
    pVerifyPara As IntPtr,   ' CRYPT_VERIFY_MESSAGE_PARA*
    dwSignerIndex As UInteger,   ' DWORD
    pbEncryptedBlob As IntPtr,   ' BYTE*
    cbEncryptedBlob As UInteger,   ' DWORD
    pbDecrypted As IntPtr,   ' BYTE* optional, out
    pcbDecrypted As IntPtr,   ' DWORD* optional, in/out
    ppXchgCert As IntPtr,   ' CERT_CONTEXT** optional, out
    ppSignerCert As IntPtr   ' CERT_CONTEXT** optional, out
) As <MarshalAs(UnmanagedType.Bool)> Boolean
End Function

' pDecryptPara : CRYPT_DECRYPT_MESSAGE_PARA*
' pVerifyPara : CRYPT_VERIFY_MESSAGE_PARA*
' dwSignerIndex : DWORD
' pbEncryptedBlob : BYTE*
' cbEncryptedBlob : DWORD
' pbDecrypted : BYTE* optional, out
' pcbDecrypted : DWORD* optional, in/out
' ppXchgCert : CERT_CONTEXT** optional, out
' ppSignerCert : CERT_CONTEXT** optional, out
Declare PtrSafe Function CryptDecryptAndVerifyMessageSignature Lib "crypt32" ( _
    ByVal pDecryptPara As LongPtr, _
    ByVal pVerifyPara As LongPtr, _
    ByVal dwSignerIndex As Long, _
    ByVal pbEncryptedBlob As LongPtr, _
    ByVal cbEncryptedBlob As Long, _
    ByVal pbDecrypted As LongPtr, _
    ByVal pcbDecrypted As LongPtr, _
    ByVal ppXchgCert As LongPtr, _
    ByVal ppSignerCert As LongPtr) As Long
' VBA7前提(PtrSafe)。32bit Office では LongPtr→Long。Integer=16bit / Long=32bit / LongLong=64bit。

import ctypes
from ctypes import wintypes

CryptDecryptAndVerifyMessageSignature = ctypes.windll.crypt32.CryptDecryptAndVerifyMessageSignature
CryptDecryptAndVerifyMessageSignature.restype = wintypes.BOOL
CryptDecryptAndVerifyMessageSignature.argtypes = [
    ctypes.c_void_p,  # pDecryptPara : CRYPT_DECRYPT_MESSAGE_PARA*
    ctypes.c_void_p,  # pVerifyPara : CRYPT_VERIFY_MESSAGE_PARA*
    wintypes.DWORD,  # dwSignerIndex : DWORD
    ctypes.POINTER(ctypes.c_ubyte),  # pbEncryptedBlob : BYTE*
    wintypes.DWORD,  # cbEncryptedBlob : DWORD
    ctypes.POINTER(ctypes.c_ubyte),  # pbDecrypted : BYTE* optional, out
    ctypes.POINTER(wintypes.DWORD),  # pcbDecrypted : DWORD* optional, in/out
    ctypes.c_void_p,  # ppXchgCert : CERT_CONTEXT** optional, out
    ctypes.c_void_p,  # ppSignerCert : CERT_CONTEXT** optional, out
]
# GetLastError: use ctypes.GetLastError() (or ctypes.WinDLL(use_last_error=True))

require 'fiddle'
require 'fiddle/import'

lib = Fiddle.dlopen('CRYPT32.dll')
CryptDecryptAndVerifyMessageSignature = Fiddle::Function.new(
  lib['CryptDecryptAndVerifyMessageSignature'],
  [
    Fiddle::TYPE_VOIDP,  # pDecryptPara : CRYPT_DECRYPT_MESSAGE_PARA*
    Fiddle::TYPE_VOIDP,  # pVerifyPara : CRYPT_VERIFY_MESSAGE_PARA*
    -Fiddle::TYPE_INT,  # dwSignerIndex : DWORD
    Fiddle::TYPE_VOIDP,  # pbEncryptedBlob : BYTE*
    -Fiddle::TYPE_INT,  # cbEncryptedBlob : DWORD
    Fiddle::TYPE_VOIDP,  # pbDecrypted : BYTE* optional, out
    Fiddle::TYPE_VOIDP,  # pcbDecrypted : DWORD* optional, in/out
    Fiddle::TYPE_VOIDP,  # ppXchgCert : CERT_CONTEXT** optional, out
    Fiddle::TYPE_VOIDP,  # ppSignerCert : CERT_CONTEXT** optional, out
  ],
  Fiddle::TYPE_INT)

#[link(name = "crypt32")]
extern "system" {
    fn CryptDecryptAndVerifyMessageSignature(
        pDecryptPara: *mut CRYPT_DECRYPT_MESSAGE_PARA,  // CRYPT_DECRYPT_MESSAGE_PARA*
        pVerifyPara: *mut CRYPT_VERIFY_MESSAGE_PARA,  // CRYPT_VERIFY_MESSAGE_PARA*
        dwSignerIndex: u32,  // DWORD
        pbEncryptedBlob: *const u8,  // BYTE*
        cbEncryptedBlob: u32,  // DWORD
        pbDecrypted: *mut u8,  // BYTE* optional, out
        pcbDecrypted: *mut u32,  // DWORD* optional, in/out
        ppXchgCert: *mut *mut CERT_CONTEXT,  // CERT_CONTEXT** optional, out
        ppSignerCert: *mut *mut CERT_CONTEXT  // CERT_CONTEXT** optional, out
    ) -> i32;
}
// crates: windows-sys provides ready-made bindings for this API.

$sig = @"
[return: MarshalAs(UnmanagedType.Bool)]
[DllImport("CRYPT32.dll", SetLastError = true)]
public static extern bool CryptDecryptAndVerifyMessageSignature(IntPtr pDecryptPara, IntPtr pVerifyPara, uint dwSignerIndex, IntPtr pbEncryptedBlob, uint cbEncryptedBlob, IntPtr pbDecrypted, IntPtr pcbDecrypted, IntPtr ppXchgCert, IntPtr ppSignerCert);
"@
$api = Add-Type -MemberDefinition $sig -Name 'CRYPT32_CryptDecryptAndVerifyMessageSignature' -Namespace Win32 -PassThru
# $api::CryptDecryptAndVerifyMessageSignature(pDecryptPara, pVerifyPara, dwSignerIndex, pbEncryptedBlob, cbEncryptedBlob, pbDecrypted, pcbDecrypted, ppXchgCert, ppSignerCert)

#uselib "CRYPT32.dll"
#func global CryptDecryptAndVerifyMessageSignature "CryptDecryptAndVerifyMessageSignature" sptr, sptr, sptr, sptr, sptr, sptr, sptr, sptr, sptr
; CryptDecryptAndVerifyMessageSignature varptr(pDecryptPara), varptr(pVerifyPara), dwSignerIndex, varptr(pbEncryptedBlob), cbEncryptedBlob, varptr(pbDecrypted), varptr(pcbDecrypted), varptr(ppXchgCert), varptr(ppSignerCert)   ; 戻り値は stat
; pDecryptPara : CRYPT_DECRYPT_MESSAGE_PARA* -> "sptr"
; pVerifyPara : CRYPT_VERIFY_MESSAGE_PARA* -> "sptr"
; dwSignerIndex : DWORD -> "sptr"
; pbEncryptedBlob : BYTE* -> "sptr"
; cbEncryptedBlob : DWORD -> "sptr"
; pbDecrypted : BYTE* optional, out -> "sptr"
; pcbDecrypted : DWORD* optional, in/out -> "sptr"
; ppXchgCert : CERT_CONTEXT** optional, out -> "sptr"
; ppSignerCert : CERT_CONTEXT** optional, out -> "sptr"
; ※HSP3.7は #func のため戻り値はシステム変数 stat に格納されます。

import (
	"golang.org/x/sys/windows"
	"unsafe"
)

var (
	crypt32 = windows.NewLazySystemDLL("CRYPT32.dll")
	procCryptDecryptAndVerifyMessageSignature = crypt32.NewProc("CryptDecryptAndVerifyMessageSignature")
)

// pDecryptPara (CRYPT_DECRYPT_MESSAGE_PARA*), pVerifyPara (CRYPT_VERIFY_MESSAGE_PARA*), dwSignerIndex (DWORD), pbEncryptedBlob (BYTE*), cbEncryptedBlob (DWORD), pbDecrypted (BYTE* optional, out), pcbDecrypted (DWORD* optional, in/out), ppXchgCert (CERT_CONTEXT** optional, out), ppSignerCert (CERT_CONTEXT** optional, out)
r1, _, err := procCryptDecryptAndVerifyMessageSignature.Call(
	uintptr(pDecryptPara),
	uintptr(pVerifyPara),
	uintptr(dwSignerIndex),
	uintptr(pbEncryptedBlob),
	uintptr(cbEncryptedBlob),
	uintptr(pbDecrypted),
	uintptr(pcbDecrypted),
	uintptr(ppXchgCert),
	uintptr(ppSignerCert),
)
_ = err  // syscall.Errno (valid when the call sets last-error)
_ = r1   // BOOL

function CryptDecryptAndVerifyMessageSignature(
  pDecryptPara: Pointer;   // CRYPT_DECRYPT_MESSAGE_PARA*
  pVerifyPara: Pointer;   // CRYPT_VERIFY_MESSAGE_PARA*
  dwSignerIndex: DWORD;   // DWORD
  pbEncryptedBlob: Pointer;   // BYTE*
  cbEncryptedBlob: DWORD;   // DWORD
  pbDecrypted: Pointer;   // BYTE* optional, out
  pcbDecrypted: Pointer;   // DWORD* optional, in/out
  ppXchgCert: Pointer;   // CERT_CONTEXT** optional, out
  ppSignerCert: Pointer   // CERT_CONTEXT** optional, out
): BOOL; stdcall;
  external 'CRYPT32.dll' name 'CryptDecryptAndVerifyMessageSignature';

result := DllCall("CRYPT32\CryptDecryptAndVerifyMessageSignature"
    , "Ptr", pDecryptPara   ; CRYPT_DECRYPT_MESSAGE_PARA*
    , "Ptr", pVerifyPara   ; CRYPT_VERIFY_MESSAGE_PARA*
    , "UInt", dwSignerIndex   ; DWORD
    , "Ptr", pbEncryptedBlob   ; BYTE*
    , "UInt", cbEncryptedBlob   ; DWORD
    , "Ptr", pbDecrypted   ; BYTE* optional, out
    , "Ptr", pcbDecrypted   ; DWORD* optional, in/out
    , "Ptr", ppXchgCert   ; CERT_CONTEXT** optional, out
    , "Ptr", ppSignerCert   ; CERT_CONTEXT** optional, out
    , "Int")   ; return: BOOL

●CryptDecryptAndVerifyMessageSignature(pDecryptPara, pVerifyPara, dwSignerIndex, pbEncryptedBlob, cbEncryptedBlob, pbDecrypted, pcbDecrypted, ppXchgCert, ppSignerCert) = DLL("CRYPT32.dll", "bool CryptDecryptAndVerifyMessageSignature(void*, void*, dword, void*, dword, void*, void*, void*, void*)")
# 呼び出し: CryptDecryptAndVerifyMessageSignature(pDecryptPara, pVerifyPara, dwSignerIndex, pbEncryptedBlob, cbEncryptedBlob, pbDecrypted, pcbDecrypted, ppXchgCert, ppSignerCert)
# pDecryptPara : CRYPT_DECRYPT_MESSAGE_PARA* -> "void*"
# pVerifyPara : CRYPT_VERIFY_MESSAGE_PARA* -> "void*"
# dwSignerIndex : DWORD -> "dword"
# pbEncryptedBlob : BYTE* -> "void*"
# cbEncryptedBlob : DWORD -> "dword"
# pbDecrypted : BYTE* optional, out -> "void*"
# pcbDecrypted : DWORD* optional, in/out -> "void*"
# ppXchgCert : CERT_CONTEXT** optional, out -> "void*"
# ppSignerCert : CERT_CONTEXT** optional, out -> "void*"
# なでしこ1は32bit・ANSI(Shift_JIS)。文字列=char*(ANSI)、ポインタ/ハンドル=void*(4byte)。

const std = @import("std");

extern "crypt32" fn CryptDecryptAndVerifyMessageSignature(
    pDecryptPara: [*c]CRYPT_DECRYPT_MESSAGE_PARA, // CRYPT_DECRYPT_MESSAGE_PARA*
    pVerifyPara: [*c]CRYPT_VERIFY_MESSAGE_PARA, // CRYPT_VERIFY_MESSAGE_PARA*
    dwSignerIndex: u32, // DWORD
    pbEncryptedBlob: [*c]u8, // BYTE*
    cbEncryptedBlob: u32, // DWORD
    pbDecrypted: [*c]u8, // BYTE* optional, out
    pcbDecrypted: [*c]u32, // DWORD* optional, in/out
    ppXchgCert: [*c][*c]CERT_CONTEXT, // CERT_CONTEXT** optional, out
    ppSignerCert: [*c][*c]CERT_CONTEXT // CERT_CONTEXT** optional, out
) callconv(std.os.windows.WINAPI) i32;

proc CryptDecryptAndVerifyMessageSignature(
    pDecryptPara: ptr CRYPT_DECRYPT_MESSAGE_PARA,  # CRYPT_DECRYPT_MESSAGE_PARA*
    pVerifyPara: ptr CRYPT_VERIFY_MESSAGE_PARA,  # CRYPT_VERIFY_MESSAGE_PARA*
    dwSignerIndex: uint32,  # DWORD
    pbEncryptedBlob: ptr uint8,  # BYTE*
    cbEncryptedBlob: uint32,  # DWORD
    pbDecrypted: ptr uint8,  # BYTE* optional, out
    pcbDecrypted: ptr uint32,  # DWORD* optional, in/out
    ppXchgCert: ptr CERT_CONTEXT,  # CERT_CONTEXT** optional, out
    ppSignerCert: ptr CERT_CONTEXT  # CERT_CONTEXT** optional, out
): int32 {.importc: "CryptDecryptAndVerifyMessageSignature", stdcall, dynlib: "CRYPT32.dll".}

pragma(lib, "crypt32");
extern(Windows)
int CryptDecryptAndVerifyMessageSignature(
    CRYPT_DECRYPT_MESSAGE_PARA* pDecryptPara,   // CRYPT_DECRYPT_MESSAGE_PARA*
    CRYPT_VERIFY_MESSAGE_PARA* pVerifyPara,   // CRYPT_VERIFY_MESSAGE_PARA*
    uint dwSignerIndex,   // DWORD
    ubyte* pbEncryptedBlob,   // BYTE*
    uint cbEncryptedBlob,   // DWORD
    ubyte* pbDecrypted,   // BYTE* optional, out
    uint* pcbDecrypted,   // DWORD* optional, in/out
    CERT_CONTEXT** ppXchgCert,   // CERT_CONTEXT** optional, out
    CERT_CONTEXT** ppSignerCert   // CERT_CONTEXT** optional, out
);

ccall((:CryptDecryptAndVerifyMessageSignature, "CRYPT32.dll"), stdcall, Int32,
      (Ptr{CRYPT_DECRYPT_MESSAGE_PARA}, Ptr{CRYPT_VERIFY_MESSAGE_PARA}, UInt32, Ptr{UInt8}, UInt32, Ptr{UInt8}, Ptr{UInt32}, Ptr{CERT_CONTEXT}, Ptr{CERT_CONTEXT}),
      pDecryptPara, pVerifyPara, dwSignerIndex, pbEncryptedBlob, cbEncryptedBlob, pbDecrypted, pcbDecrypted, ppXchgCert, ppSignerCert)
# pDecryptPara : CRYPT_DECRYPT_MESSAGE_PARA* -> Ptr{CRYPT_DECRYPT_MESSAGE_PARA}
# pVerifyPara : CRYPT_VERIFY_MESSAGE_PARA* -> Ptr{CRYPT_VERIFY_MESSAGE_PARA}
# dwSignerIndex : DWORD -> UInt32
# pbEncryptedBlob : BYTE* -> Ptr{UInt8}
# cbEncryptedBlob : DWORD -> UInt32
# pbDecrypted : BYTE* optional, out -> Ptr{UInt8}
# pcbDecrypted : DWORD* optional, in/out -> Ptr{UInt32}
# ppXchgCert : CERT_CONTEXT** optional, out -> Ptr{CERT_CONTEXT}
# ppSignerCert : CERT_CONTEXT** optional, out -> Ptr{CERT_CONTEXT}
# stdcall は 32bit のみ意味を持つ(x64 では無視)。

local ffi = require("ffi")
ffi.cdef[[
int32_t CryptDecryptAndVerifyMessageSignature(
    void* pDecryptPara,
    void* pVerifyPara,
    uint32_t dwSignerIndex,
    uint8_t* pbEncryptedBlob,
    uint32_t cbEncryptedBlob,
    uint8_t* pbDecrypted,
    uint32_t* pcbDecrypted,
    void* ppXchgCert,
    void* ppSignerCert);
]]
local crypt32 = ffi.load("crypt32")
-- crypt32.CryptDecryptAndVerifyMessageSignature(pDecryptPara, pVerifyPara, dwSignerIndex, pbEncryptedBlob, cbEncryptedBlob, pbDecrypted, pcbDecrypted, ppXchgCert, ppSignerCert)
-- pDecryptPara : CRYPT_DECRYPT_MESSAGE_PARA*
-- pVerifyPara : CRYPT_VERIFY_MESSAGE_PARA*
-- dwSignerIndex : DWORD
-- pbEncryptedBlob : BYTE*
-- cbEncryptedBlob : DWORD
-- pbDecrypted : BYTE* optional, out
-- pcbDecrypted : DWORD* optional, in/out
-- ppXchgCert : CERT_CONTEXT** optional, out
-- ppSignerCert : CERT_CONTEXT** optional, out
-- 構造体/GUIDへのポインタは cdef が通るよう void* で表記(実型は各引数コメント参照)。値渡し構造体・enum は対応する typedef を cdef に追加すること。

const koffi = require('koffi');
const lib = koffi.load('CRYPT32.dll');
const CryptDecryptAndVerifyMessageSignature = lib.func('__stdcall', 'CryptDecryptAndVerifyMessageSignature', 'int32_t', ['void *', 'void *', 'uint32_t', 'uint8_t *', 'uint32_t', 'uint8_t *', 'uint32_t *', 'void *', 'void *']);
// CryptDecryptAndVerifyMessageSignature(pDecryptPara, pVerifyPara, dwSignerIndex, pbEncryptedBlob, cbEncryptedBlob, pbDecrypted, pcbDecrypted, ppXchgCert, ppSignerCert)
// pDecryptPara : CRYPT_DECRYPT_MESSAGE_PARA* -> 'void *'
// pVerifyPara : CRYPT_VERIFY_MESSAGE_PARA* -> 'void *'
// dwSignerIndex : DWORD -> 'uint32_t'
// pbEncryptedBlob : BYTE* -> 'uint8_t *'
// cbEncryptedBlob : DWORD -> 'uint32_t'
// pbDecrypted : BYTE* optional, out -> 'uint8_t *'
// pcbDecrypted : DWORD* optional, in/out -> 'uint32_t *'
// ppXchgCert : CERT_CONTEXT** optional, out -> 'void *'
// ppSignerCert : CERT_CONTEXT** optional, out -> 'void *'
// 出力ポインタは koffi.out(...) で包む。構造体は koffi.struct で定義。

const lib = Deno.dlopen("CRYPT32.dll", {
  CryptDecryptAndVerifyMessageSignature: { parameters: ["pointer", "pointer", "u32", "pointer", "u32", "pointer", "pointer", "pointer", "pointer"], result: "i32" },
});
// lib.symbols.CryptDecryptAndVerifyMessageSignature(pDecryptPara, pVerifyPara, dwSignerIndex, pbEncryptedBlob, cbEncryptedBlob, pbDecrypted, pcbDecrypted, ppXchgCert, ppSignerCert)
// pDecryptPara : CRYPT_DECRYPT_MESSAGE_PARA* -> "pointer"
// pVerifyPara : CRYPT_VERIFY_MESSAGE_PARA* -> "pointer"
// dwSignerIndex : DWORD -> "u32"
// pbEncryptedBlob : BYTE* -> "pointer"
// cbEncryptedBlob : DWORD -> "u32"
// pbDecrypted : BYTE* optional, out -> "pointer"
// pcbDecrypted : DWORD* optional, in/out -> "pointer"
// ppXchgCert : CERT_CONTEXT** optional, out -> "pointer"
// ppSignerCert : CERT_CONTEXT** optional, out -> "pointer"
// 文字列引数は "buffer"(NUL 終端のバイト列を Uint8Array で渡す)。
// 値渡し構造体は { struct: [ ...field types... ] } を使用。

<?php
$ffi = FFI::cdef(<<<C
int32_t CryptDecryptAndVerifyMessageSignature(
    void* pDecryptPara,
    void* pVerifyPara,
    uint32_t dwSignerIndex,
    uint8_t* pbEncryptedBlob,
    uint32_t cbEncryptedBlob,
    uint8_t* pbDecrypted,
    uint32_t* pcbDecrypted,
    void* ppXchgCert,
    void* ppSignerCert);
C, "CRYPT32.dll");
// $ffi->CryptDecryptAndVerifyMessageSignature(pDecryptPara, pVerifyPara, dwSignerIndex, pbEncryptedBlob, cbEncryptedBlob, pbDecrypted, pcbDecrypted, ppXchgCert, ppSignerCert);
// pDecryptPara : CRYPT_DECRYPT_MESSAGE_PARA*
// pVerifyPara : CRYPT_VERIFY_MESSAGE_PARA*
// dwSignerIndex : DWORD
// pbEncryptedBlob : BYTE*
// cbEncryptedBlob : DWORD
// pbDecrypted : BYTE* optional, out
// pcbDecrypted : DWORD* optional, in/out
// ppXchgCert : CERT_CONTEXT** optional, out
// ppSignerCert : CERT_CONTEXT** optional, out
// 構造体/GUIDへのポインタは cdef が通るよう void* で表記(実型は各引数コメント参照)。値渡し構造体・enum は対応する typedef を cdef に追加すること。
// WINAPI(stdcall): x64 では呼出規約が統一されるため問題なし。x86 では __stdcall 対応のラッパが必要な場合あり。

import com.sun.jna.*;
import com.sun.jna.ptr.*;
import com.sun.jna.win32.StdCallLibrary;
import com.sun.jna.win32.W32APIOptions;

public interface Crypt32 extends StdCallLibrary {
    Crypt32 INSTANCE = Native.load("crypt32", Crypt32.class);
    boolean CryptDecryptAndVerifyMessageSignature(
        Pointer pDecryptPara,   // CRYPT_DECRYPT_MESSAGE_PARA*
        Pointer pVerifyPara,   // CRYPT_VERIFY_MESSAGE_PARA*
        int dwSignerIndex,   // DWORD
        byte[] pbEncryptedBlob,   // BYTE*
        int cbEncryptedBlob,   // DWORD
        byte[] pbDecrypted,   // BYTE* optional, out
        IntByReference pcbDecrypted,   // DWORD* optional, in/out
        Pointer ppXchgCert,   // CERT_CONTEXT** optional, out
        Pointer ppSignerCert   // CERT_CONTEXT** optional, out
    );
}

@[Link("crypt32")]
lib LibCRYPT32
  fun CryptDecryptAndVerifyMessageSignature = CryptDecryptAndVerifyMessageSignature(
    pDecryptPara : CRYPT_DECRYPT_MESSAGE_PARA*,   # CRYPT_DECRYPT_MESSAGE_PARA*
    pVerifyPara : CRYPT_VERIFY_MESSAGE_PARA*,   # CRYPT_VERIFY_MESSAGE_PARA*
    dwSignerIndex : UInt32,   # DWORD
    pbEncryptedBlob : UInt8*,   # BYTE*
    cbEncryptedBlob : UInt32,   # DWORD
    pbDecrypted : UInt8*,   # BYTE* optional, out
    pcbDecrypted : UInt32*,   # DWORD* optional, in/out
    ppXchgCert : CERT_CONTEXT**,   # CERT_CONTEXT** optional, out
    ppSignerCert : CERT_CONTEXT**   # CERT_CONTEXT** optional, out
  ) : Int32
end
# 構造体/GUID/enum は lib 内に対応する型定義が必要。
# 呼出規約: x64 は規約統一のため OK。x86(32bit)は WINAPI=stdcall だが Crystal の fun に stdcall 付与構文がなく非対応。

import 'dart:ffi';
import 'package:ffi/ffi.dart';

typedef CryptDecryptAndVerifyMessageSignatureNative = Int32 Function(Pointer<Void>, Pointer<Void>, Uint32, Pointer<Uint8>, Uint32, Pointer<Uint8>, Pointer<Uint32>, Pointer<Void>, Pointer<Void>);
typedef CryptDecryptAndVerifyMessageSignatureDart = int Function(Pointer<Void>, Pointer<Void>, int, Pointer<Uint8>, int, Pointer<Uint8>, Pointer<Uint32>, Pointer<Void>, Pointer<Void>);
final CryptDecryptAndVerifyMessageSignature = DynamicLibrary.open('CRYPT32.dll')
    .lookupFunction<CryptDecryptAndVerifyMessageSignatureNative, CryptDecryptAndVerifyMessageSignatureDart>('CryptDecryptAndVerifyMessageSignature');
// pDecryptPara : CRYPT_DECRYPT_MESSAGE_PARA* -> Pointer<Void>
// pVerifyPara : CRYPT_VERIFY_MESSAGE_PARA* -> Pointer<Void>
// dwSignerIndex : DWORD -> Uint32
// pbEncryptedBlob : BYTE* -> Pointer<Uint8>
// cbEncryptedBlob : DWORD -> Uint32
// pbDecrypted : BYTE* optional, out -> Pointer<Uint8>
// pcbDecrypted : DWORD* optional, in/out -> Pointer<Uint32>
// ppXchgCert : CERT_CONTEXT** optional, out -> Pointer<Void>
// ppSignerCert : CERT_CONTEXT** optional, out -> Pointer<Void>
// 文字列は package:ffi の "...".toNativeUtf16()/toNativeUtf8() で変換。

{$mode objfpc}{$H+}
function CryptDecryptAndVerifyMessageSignature(
  pDecryptPara: Pointer;   // CRYPT_DECRYPT_MESSAGE_PARA*
  pVerifyPara: Pointer;   // CRYPT_VERIFY_MESSAGE_PARA*
  dwSignerIndex: DWORD;   // DWORD
  pbEncryptedBlob: Pointer;   // BYTE*
  cbEncryptedBlob: DWORD;   // DWORD
  pbDecrypted: Pointer;   // BYTE* optional, out
  pcbDecrypted: Pointer;   // DWORD* optional, in/out
  ppXchgCert: Pointer;   // CERT_CONTEXT** optional, out
  ppSignerCert: Pointer   // CERT_CONTEXT** optional, out
): BOOL; stdcall;
  external 'CRYPT32.dll' name 'CryptDecryptAndVerifyMessageSignature';

import Foreign
import Foreign.C.Types
import Foreign.C.String

foreign import stdcall safe "CryptDecryptAndVerifyMessageSignature"
  c_CryptDecryptAndVerifyMessageSignature :: Ptr () -> Ptr () -> Word32 -> Ptr Word8 -> Word32 -> Ptr Word8 -> Ptr Word32 -> Ptr () -> Ptr () -> IO CInt
-- pDecryptPara : CRYPT_DECRYPT_MESSAGE_PARA* -> Ptr ()
-- pVerifyPara : CRYPT_VERIFY_MESSAGE_PARA* -> Ptr ()
-- dwSignerIndex : DWORD -> Word32
-- pbEncryptedBlob : BYTE* -> Ptr Word8
-- cbEncryptedBlob : DWORD -> Word32
-- pbDecrypted : BYTE* optional, out -> Ptr Word8
-- pcbDecrypted : DWORD* optional, in/out -> Ptr Word32
-- ppXchgCert : CERT_CONTEXT** optional, out -> Ptr ()
-- ppSignerCert : CERT_CONTEXT** optional, out -> Ptr ()
-- 要 GHC(Windows)。stdcall は x64 では ccall として扱われる。ブロックする API は safe 呼び出し推奨。

open Ctypes
open Foreign

let cryptdecryptandverifymessagesignature =
  foreign "CryptDecryptAndVerifyMessageSignature"
    ((ptr void) @-> (ptr void) @-> uint32_t @-> (ptr uint8_t) @-> uint32_t @-> (ptr uint8_t) @-> (ptr uint32_t) @-> (ptr void) @-> (ptr void) @-> returning int32_t)
(* pDecryptPara : CRYPT_DECRYPT_MESSAGE_PARA* -> (ptr void) *)
(* pVerifyPara : CRYPT_VERIFY_MESSAGE_PARA* -> (ptr void) *)
(* dwSignerIndex : DWORD -> uint32_t *)
(* pbEncryptedBlob : BYTE* -> (ptr uint8_t) *)
(* cbEncryptedBlob : DWORD -> uint32_t *)
(* pbDecrypted : BYTE* optional, out -> (ptr uint8_t) *)
(* pcbDecrypted : DWORD* optional, in/out -> (ptr uint32_t) *)
(* ppXchgCert : CERT_CONTEXT** optional, out -> (ptr void) *)
(* ppSignerCert : CERT_CONTEXT** optional, out -> (ptr void) *)
(* foreign は cdecl 前提。x64 Windows では WINAPI と一致。構造体は ctypes structure を定義のこと。 *)

(cffi:define-foreign-library crypt32 (t "CRYPT32.dll"))
(cffi:use-foreign-library crypt32)

(cffi:defcfun ("CryptDecryptAndVerifyMessageSignature" crypt-decrypt-and-verify-message-signature :convention :stdcall) :int32
  (p-decrypt-para :pointer)   ; CRYPT_DECRYPT_MESSAGE_PARA*
  (p-verify-para :pointer)   ; CRYPT_VERIFY_MESSAGE_PARA*
  (dw-signer-index :uint32)   ; DWORD
  (pb-encrypted-blob :pointer)   ; BYTE*
  (cb-encrypted-blob :uint32)   ; DWORD
  (pb-decrypted :pointer)   ; BYTE* optional, out
  (pcb-decrypted :pointer)   ; DWORD* optional, in/out
  (pp-xchg-cert :pointer)   ; CERT_CONTEXT** optional, out
  (pp-signer-cert :pointer))   ; CERT_CONTEXT** optional, out
; isize/usize(INT_PTR/SIZE_T)は x64 前提で :int64/:uint64。x86 では :int32/:uint32。

use Win32::API;
my $CryptDecryptAndVerifyMessageSignature = Win32::API::More->new('CRYPT32',
    'BOOL CryptDecryptAndVerifyMessageSignature(LPVOID pDecryptPara, LPVOID pVerifyPara, DWORD dwSignerIndex, LPVOID pbEncryptedBlob, DWORD cbEncryptedBlob, LPVOID pbDecrypted, LPVOID pcbDecrypted, LPVOID ppXchgCert, LPVOID ppSignerCert)');
# my $ret = $CryptDecryptAndVerifyMessageSignature->Call($pDecryptPara, $pVerifyPara, $dwSignerIndex, $pbEncryptedBlob, $cbEncryptedBlob, $pbDecrypted, $pcbDecrypted, $ppXchgCert, $ppSignerCert);
# pDecryptPara : CRYPT_DECRYPT_MESSAGE_PARA* -> LPVOID
# pVerifyPara : CRYPT_VERIFY_MESSAGE_PARA* -> LPVOID
# dwSignerIndex : DWORD -> DWORD
# pbEncryptedBlob : BYTE* -> LPVOID
# cbEncryptedBlob : DWORD -> DWORD
# pbDecrypted : BYTE* optional, out -> LPVOID
# pcbDecrypted : DWORD* optional, in/out -> LPVOID
# ppXchgCert : CERT_CONTEXT** optional, out -> LPVOID
# ppSignerCert : CERT_CONTEXT** optional, out -> LPVOID
# 値渡し構造体は pack() した文字列、または Win32::API::Struct を使用。