Win32 API 日本語リファレンス
ホームSecurity.DiagnosticDataQuery › DdqIsDiagnosticRecordSampledIn

DdqIsDiagnosticRecordSampledIn

関数
指定イベントが診断データのサンプリング対象か判定する。
DLLDiagnosticDataQuery.dll呼出規約winapi対応OSWindows 10 以降

シグネチャ

// DiagnosticDataQuery.dll
#include <windows.h>

HRESULT DdqIsDiagnosticRecordSampledIn(
    HDIAGNOSTIC_DATA_QUERY_SESSION hSession,
    const GUID* providerGroup,
    const GUID* providerId,   // optional
    LPCWSTR providerName,
    const DWORD* eventId,   // optional
    LPCWSTR eventName,
    const DWORD* eventVersion,   // optional
    const ULONGLONG* eventKeywords,   // optional
    BOOL* isSampledIn
);

パラメーター

名前方向説明
hSessionHDIAGNOSTIC_DATA_QUERY_SESSIONin対象の診断データクエリセッションのハンドル。
providerGroupGUID*inプロバイダーグループGUIDへのポインタ。NULL可。
providerIdGUID*inoptionalプロバイダーIDのGUIDへのポインタ。NULL可。
providerNameLPCWSTRinプロバイダー名の文字列。NULL可。
eventIdDWORD*inoptionalイベントIDへのポインタ。NULL可。
eventNameLPCWSTRinイベント名の文字列。NULL可。
eventVersionDWORD*inoptionalイベントバージョンへのポインタ。NULL可。
eventKeywordsULONGLONG*inoptionalイベントキーワードのビットマスクへのポインタ。NULL可。
isSampledInBOOL*out当該イベントがサンプリング対象かをTRUE/FALSEで受け取るポインタ。

戻り値の型: HRESULT

各言語での呼び出し定義

// DiagnosticDataQuery.dll
#include <windows.h>

HRESULT DdqIsDiagnosticRecordSampledIn(
    HDIAGNOSTIC_DATA_QUERY_SESSION hSession,
    const GUID* providerGroup,
    const GUID* providerId,   // optional
    LPCWSTR providerName,
    const DWORD* eventId,   // optional
    LPCWSTR eventName,
    const DWORD* eventVersion,   // optional
    const ULONGLONG* eventKeywords,   // optional
    BOOL* isSampledIn
);
[DllImport("DiagnosticDataQuery.dll", ExactSpelling = true)]
static extern int DdqIsDiagnosticRecordSampledIn(
    IntPtr hSession,   // HDIAGNOSTIC_DATA_QUERY_SESSION
    ref Guid providerGroup,   // GUID*
    IntPtr providerId,   // GUID* optional
    [MarshalAs(UnmanagedType.LPWStr)] string providerName,   // LPCWSTR
    IntPtr eventId,   // DWORD* optional
    [MarshalAs(UnmanagedType.LPWStr)] string eventName,   // LPCWSTR
    IntPtr eventVersion,   // DWORD* optional
    IntPtr eventKeywords,   // ULONGLONG* optional
    out bool isSampledIn   // BOOL* out
);
<DllImport("DiagnosticDataQuery.dll", ExactSpelling:=True)>
Public Shared Function DdqIsDiagnosticRecordSampledIn(
    hSession As IntPtr,   ' HDIAGNOSTIC_DATA_QUERY_SESSION
    ByRef providerGroup As Guid,   ' GUID*
    providerId As IntPtr,   ' GUID* optional
    <MarshalAs(UnmanagedType.LPWStr)> providerName As String,   ' LPCWSTR
    eventId As IntPtr,   ' DWORD* optional
    <MarshalAs(UnmanagedType.LPWStr)> eventName As String,   ' LPCWSTR
    eventVersion As IntPtr,   ' DWORD* optional
    eventKeywords As IntPtr,   ' ULONGLONG* optional
    <Out> ByRef isSampledIn As Boolean   ' BOOL* out
) As Integer
End Function
' hSession : HDIAGNOSTIC_DATA_QUERY_SESSION
' providerGroup : GUID*
' providerId : GUID* optional
' providerName : LPCWSTR
' eventId : DWORD* optional
' eventName : LPCWSTR
' eventVersion : DWORD* optional
' eventKeywords : ULONGLONG* optional
' isSampledIn : BOOL* out
Declare PtrSafe Function DdqIsDiagnosticRecordSampledIn Lib "diagnosticdataquery" ( _
    ByVal hSession As LongPtr, _
    ByVal providerGroup As LongPtr, _
    ByVal providerId As LongPtr, _
    ByVal providerName As LongPtr, _
    ByVal eventId As LongPtr, _
    ByVal eventName As LongPtr, _
    ByVal eventVersion As LongPtr, _
    ByVal eventKeywords As LongPtr, _
    ByRef isSampledIn As Long) As Long
' VBA7前提(PtrSafe)。32bit Office では LongPtr→Long。Integer=16bit / Long=32bit / LongLong=64bit。
import ctypes
from ctypes import wintypes

DdqIsDiagnosticRecordSampledIn = ctypes.windll.diagnosticdataquery.DdqIsDiagnosticRecordSampledIn
DdqIsDiagnosticRecordSampledIn.restype = ctypes.c_int
DdqIsDiagnosticRecordSampledIn.argtypes = [
    wintypes.HANDLE,  # hSession : HDIAGNOSTIC_DATA_QUERY_SESSION
    ctypes.c_void_p,  # providerGroup : GUID*
    ctypes.c_void_p,  # providerId : GUID* optional
    wintypes.LPCWSTR,  # providerName : LPCWSTR
    ctypes.POINTER(wintypes.DWORD),  # eventId : DWORD* optional
    wintypes.LPCWSTR,  # eventName : LPCWSTR
    ctypes.POINTER(wintypes.DWORD),  # eventVersion : DWORD* optional
    ctypes.POINTER(ctypes.c_ulonglong),  # eventKeywords : ULONGLONG* optional
    ctypes.c_void_p,  # isSampledIn : BOOL* out
]
require 'fiddle'
require 'fiddle/import'

lib = Fiddle.dlopen('DiagnosticDataQuery.dll')
DdqIsDiagnosticRecordSampledIn = Fiddle::Function.new(
  lib['DdqIsDiagnosticRecordSampledIn'],
  [
    Fiddle::TYPE_VOIDP,  # hSession : HDIAGNOSTIC_DATA_QUERY_SESSION
    Fiddle::TYPE_VOIDP,  # providerGroup : GUID*
    Fiddle::TYPE_VOIDP,  # providerId : GUID* optional
    Fiddle::TYPE_VOIDP,  # providerName : LPCWSTR
    Fiddle::TYPE_VOIDP,  # eventId : DWORD* optional
    Fiddle::TYPE_VOIDP,  # eventName : LPCWSTR
    Fiddle::TYPE_VOIDP,  # eventVersion : DWORD* optional
    Fiddle::TYPE_VOIDP,  # eventKeywords : ULONGLONG* optional
    Fiddle::TYPE_VOIDP,  # isSampledIn : BOOL* out
  ],
  Fiddle::TYPE_INT)
#[link(name = "diagnosticdataquery")]
extern "system" {
    fn DdqIsDiagnosticRecordSampledIn(
        hSession: *mut core::ffi::c_void,  // HDIAGNOSTIC_DATA_QUERY_SESSION
        providerGroup: *const GUID,  // GUID*
        providerId: *const GUID,  // GUID* optional
        providerName: *const u16,  // LPCWSTR
        eventId: *const u32,  // DWORD* optional
        eventName: *const u16,  // LPCWSTR
        eventVersion: *const u32,  // DWORD* optional
        eventKeywords: *const u64,  // ULONGLONG* optional
        isSampledIn: *mut i32  // BOOL* out
    ) -> i32;
}
// crates: windows-sys provides ready-made bindings for this API.
$sig = @"
[DllImport("DiagnosticDataQuery.dll")]
public static extern int DdqIsDiagnosticRecordSampledIn(IntPtr hSession, ref Guid providerGroup, IntPtr providerId, [MarshalAs(UnmanagedType.LPWStr)] string providerName, IntPtr eventId, [MarshalAs(UnmanagedType.LPWStr)] string eventName, IntPtr eventVersion, IntPtr eventKeywords, out bool isSampledIn);
"@
$api = Add-Type -MemberDefinition $sig -Name 'DiagnosticDataQuery_DdqIsDiagnosticRecordSampledIn' -Namespace Win32 -PassThru
# $api::DdqIsDiagnosticRecordSampledIn(hSession, providerGroup, providerId, providerName, eventId, eventName, eventVersion, eventKeywords, isSampledIn)
#uselib "DiagnosticDataQuery.dll"
#func global DdqIsDiagnosticRecordSampledIn "DdqIsDiagnosticRecordSampledIn" sptr, sptr, sptr, sptr, sptr, sptr, sptr, sptr, sptr
; DdqIsDiagnosticRecordSampledIn hSession, varptr(providerGroup), varptr(providerId), providerName, varptr(eventId), eventName, varptr(eventVersion), varptr(eventKeywords), varptr(isSampledIn)   ; 戻り値は stat
; hSession : HDIAGNOSTIC_DATA_QUERY_SESSION -> "sptr"
; providerGroup : GUID* -> "sptr"
; providerId : GUID* optional -> "sptr"
; providerName : LPCWSTR -> "sptr"
; eventId : DWORD* optional -> "sptr"
; eventName : LPCWSTR -> "sptr"
; eventVersion : DWORD* optional -> "sptr"
; eventKeywords : ULONGLONG* optional -> "sptr"
; isSampledIn : BOOL* out -> "sptr"
; ※HSP3.7は #func のため戻り値はシステム変数 stat に格納されます。
出力引数:
#uselib "DiagnosticDataQuery.dll"
#cfunc global DdqIsDiagnosticRecordSampledIn "DdqIsDiagnosticRecordSampledIn" sptr, var, var, wstr, var, wstr, var, var, var
; res = DdqIsDiagnosticRecordSampledIn(hSession, providerGroup, providerId, providerName, eventId, eventName, eventVersion, eventKeywords, isSampledIn)
; hSession : HDIAGNOSTIC_DATA_QUERY_SESSION -> "sptr"
; providerGroup : GUID* -> "var"
; providerId : GUID* optional -> "var"
; providerName : LPCWSTR -> "wstr"
; eventId : DWORD* optional -> "var"
; eventName : LPCWSTR -> "wstr"
; eventVersion : DWORD* optional -> "var"
; eventKeywords : ULONGLONG* optional -> "var"
; isSampledIn : BOOL* out -> "var"
; ※出力/バッファ引数は var 方式(変数を直接渡す)。varptr 方式にも切替可。
出力引数:
; HRESULT DdqIsDiagnosticRecordSampledIn(HDIAGNOSTIC_DATA_QUERY_SESSION hSession, GUID* providerGroup, GUID* providerId, LPCWSTR providerName, DWORD* eventId, LPCWSTR eventName, DWORD* eventVersion, ULONGLONG* eventKeywords, BOOL* isSampledIn)
#uselib "DiagnosticDataQuery.dll"
#cfunc global DdqIsDiagnosticRecordSampledIn "DdqIsDiagnosticRecordSampledIn" intptr, var, var, wstr, var, wstr, var, var, var
; res = DdqIsDiagnosticRecordSampledIn(hSession, providerGroup, providerId, providerName, eventId, eventName, eventVersion, eventKeywords, isSampledIn)
; hSession : HDIAGNOSTIC_DATA_QUERY_SESSION -> "intptr"
; providerGroup : GUID* -> "var"
; providerId : GUID* optional -> "var"
; providerName : LPCWSTR -> "wstr"
; eventId : DWORD* optional -> "var"
; eventName : LPCWSTR -> "wstr"
; eventVersion : DWORD* optional -> "var"
; eventKeywords : ULONGLONG* optional -> "var"
; isSampledIn : BOOL* out -> "var"
; ※出力/バッファ引数は var 方式(変数を直接渡す)。varptr 方式にも切替可。
import (
	"golang.org/x/sys/windows"
	"unsafe"
)

var (
	diagnosticdataquery = windows.NewLazySystemDLL("DiagnosticDataQuery.dll")
	procDdqIsDiagnosticRecordSampledIn = diagnosticdataquery.NewProc("DdqIsDiagnosticRecordSampledIn")
)

// hSession (HDIAGNOSTIC_DATA_QUERY_SESSION), providerGroup (GUID*), providerId (GUID* optional), providerName (LPCWSTR), eventId (DWORD* optional), eventName (LPCWSTR), eventVersion (DWORD* optional), eventKeywords (ULONGLONG* optional), isSampledIn (BOOL* out)
r1, _, err := procDdqIsDiagnosticRecordSampledIn.Call(
	uintptr(hSession),
	uintptr(providerGroup),
	uintptr(providerId),
	uintptr(unsafe.Pointer(windows.StringToUTF16Ptr(providerName))),
	uintptr(eventId),
	uintptr(unsafe.Pointer(windows.StringToUTF16Ptr(eventName))),
	uintptr(eventVersion),
	uintptr(eventKeywords),
	uintptr(isSampledIn),
)
_ = err  // syscall.Errno (valid when the call sets last-error)
_ = r1   // HRESULT
function DdqIsDiagnosticRecordSampledIn(
  hSession: THandle;   // HDIAGNOSTIC_DATA_QUERY_SESSION
  providerGroup: PGUID;   // GUID*
  providerId: PGUID;   // GUID* optional
  providerName: PWideChar;   // LPCWSTR
  eventId: Pointer;   // DWORD* optional
  eventName: PWideChar;   // LPCWSTR
  eventVersion: Pointer;   // DWORD* optional
  eventKeywords: Pointer;   // ULONGLONG* optional
  isSampledIn: Pointer   // BOOL* out
): Integer; stdcall;
  external 'DiagnosticDataQuery.dll' name 'DdqIsDiagnosticRecordSampledIn';
result := DllCall("DiagnosticDataQuery\DdqIsDiagnosticRecordSampledIn"
    , "Ptr", hSession   ; HDIAGNOSTIC_DATA_QUERY_SESSION
    , "Ptr", providerGroup   ; GUID*
    , "Ptr", providerId   ; GUID* optional
    , "WStr", providerName   ; LPCWSTR
    , "Ptr", eventId   ; DWORD* optional
    , "WStr", eventName   ; LPCWSTR
    , "Ptr", eventVersion   ; DWORD* optional
    , "Ptr", eventKeywords   ; ULONGLONG* optional
    , "Ptr", isSampledIn   ; BOOL* out
    , "Int")   ; return: HRESULT
●DdqIsDiagnosticRecordSampledIn(hSession, providerGroup, providerId, providerName, eventId, eventName, eventVersion, eventKeywords, isSampledIn) = DLL("DiagnosticDataQuery.dll", "int DdqIsDiagnosticRecordSampledIn(void*, void*, void*, char*, void*, char*, void*, void*, void*)")
# 呼び出し: DdqIsDiagnosticRecordSampledIn(hSession, providerGroup, providerId, providerName, eventId, eventName, eventVersion, eventKeywords, isSampledIn)
# hSession : HDIAGNOSTIC_DATA_QUERY_SESSION -> "void*"
# providerGroup : GUID* -> "void*"
# providerId : GUID* optional -> "void*"
# providerName : LPCWSTR -> "char*"
# eventId : DWORD* optional -> "void*"
# eventName : LPCWSTR -> "char*"
# eventVersion : DWORD* optional -> "void*"
# eventKeywords : ULONGLONG* optional -> "void*"
# isSampledIn : BOOL* out -> "void*"
# なでしこ1は32bit・ANSI(Shift_JIS)。文字列=char*(ANSI)、ポインタ/ハンドル=void*(4byte)。
const std = @import("std");

extern "diagnosticdataquery" fn DdqIsDiagnosticRecordSampledIn(
    hSession: ?*anyopaque, // HDIAGNOSTIC_DATA_QUERY_SESSION
    providerGroup: [*c]GUID, // GUID*
    providerId: [*c]GUID, // GUID* optional
    providerName: [*c]const u16, // LPCWSTR
    eventId: [*c]u32, // DWORD* optional
    eventName: [*c]const u16, // LPCWSTR
    eventVersion: [*c]u32, // DWORD* optional
    eventKeywords: [*c]u64, // ULONGLONG* optional
    isSampledIn: [*c]i32 // BOOL* out
) callconv(std.os.windows.WINAPI) i32;
proc DdqIsDiagnosticRecordSampledIn(
    hSession: pointer,  # HDIAGNOSTIC_DATA_QUERY_SESSION
    providerGroup: ptr GUID,  # GUID*
    providerId: ptr GUID,  # GUID* optional
    providerName: WideCString,  # LPCWSTR
    eventId: ptr uint32,  # DWORD* optional
    eventName: WideCString,  # LPCWSTR
    eventVersion: ptr uint32,  # DWORD* optional
    eventKeywords: ptr uint64,  # ULONGLONG* optional
    isSampledIn: ptr int32  # BOOL* out
): int32 {.importc: "DdqIsDiagnosticRecordSampledIn", stdcall, dynlib: "DiagnosticDataQuery.dll".}
pragma(lib, "diagnosticdataquery");
extern(Windows)
int DdqIsDiagnosticRecordSampledIn(
    void* hSession,   // HDIAGNOSTIC_DATA_QUERY_SESSION
    GUID* providerGroup,   // GUID*
    GUID* providerId,   // GUID* optional
    const(wchar)* providerName,   // LPCWSTR
    uint* eventId,   // DWORD* optional
    const(wchar)* eventName,   // LPCWSTR
    uint* eventVersion,   // DWORD* optional
    ulong* eventKeywords,   // ULONGLONG* optional
    int* isSampledIn   // BOOL* out
);
ccall((:DdqIsDiagnosticRecordSampledIn, "DiagnosticDataQuery.dll"), stdcall, Int32,
      (Ptr{Cvoid}, Ptr{GUID}, Ptr{GUID}, Cwstring, Ptr{UInt32}, Cwstring, Ptr{UInt32}, Ptr{UInt64}, Ptr{Int32}),
      hSession, providerGroup, providerId, providerName, eventId, eventName, eventVersion, eventKeywords, isSampledIn)
# hSession : HDIAGNOSTIC_DATA_QUERY_SESSION -> Ptr{Cvoid}
# providerGroup : GUID* -> Ptr{GUID}
# providerId : GUID* optional -> Ptr{GUID}
# providerName : LPCWSTR -> Cwstring
# eventId : DWORD* optional -> Ptr{UInt32}
# eventName : LPCWSTR -> Cwstring
# eventVersion : DWORD* optional -> Ptr{UInt32}
# eventKeywords : ULONGLONG* optional -> Ptr{UInt64}
# isSampledIn : BOOL* out -> Ptr{Int32}
# stdcall は 32bit のみ意味を持つ(x64 では無視)。
local ffi = require("ffi")
ffi.cdef[[
int32_t DdqIsDiagnosticRecordSampledIn(
    void* hSession,
    void* providerGroup,
    void* providerId,
    const uint16_t* providerName,
    uint32_t* eventId,
    const uint16_t* eventName,
    uint32_t* eventVersion,
    uint64_t* eventKeywords,
    int32_t* isSampledIn);
]]
local diagnosticdataquery = ffi.load("diagnosticdataquery")
-- diagnosticdataquery.DdqIsDiagnosticRecordSampledIn(hSession, providerGroup, providerId, providerName, eventId, eventName, eventVersion, eventKeywords, isSampledIn)
-- hSession : HDIAGNOSTIC_DATA_QUERY_SESSION
-- providerGroup : GUID*
-- providerId : GUID* optional
-- providerName : LPCWSTR
-- eventId : DWORD* optional
-- eventName : LPCWSTR
-- eventVersion : DWORD* optional
-- eventKeywords : ULONGLONG* optional
-- isSampledIn : BOOL* out
-- 構造体/GUIDへのポインタは cdef が通るよう void* で表記(実型は各引数コメント参照)。値渡し構造体・enum は対応する typedef を cdef に追加すること。
const koffi = require('koffi');
const lib = koffi.load('DiagnosticDataQuery.dll');
const DdqIsDiagnosticRecordSampledIn = lib.func('__stdcall', 'DdqIsDiagnosticRecordSampledIn', 'int32_t', ['void *', 'void *', 'void *', 'str16', 'uint32_t *', 'str16', 'uint32_t *', 'uint64_t *', 'int32_t *']);
// DdqIsDiagnosticRecordSampledIn(hSession, providerGroup, providerId, providerName, eventId, eventName, eventVersion, eventKeywords, isSampledIn)
// hSession : HDIAGNOSTIC_DATA_QUERY_SESSION -> 'void *'
// providerGroup : GUID* -> 'void *'
// providerId : GUID* optional -> 'void *'
// providerName : LPCWSTR -> 'str16'
// eventId : DWORD* optional -> 'uint32_t *'
// eventName : LPCWSTR -> 'str16'
// eventVersion : DWORD* optional -> 'uint32_t *'
// eventKeywords : ULONGLONG* optional -> 'uint64_t *'
// isSampledIn : BOOL* out -> 'int32_t *'
// 出力ポインタは koffi.out(...) で包む。構造体は koffi.struct で定義。
const lib = Deno.dlopen("DiagnosticDataQuery.dll", {
  DdqIsDiagnosticRecordSampledIn: { parameters: ["pointer", "pointer", "pointer", "buffer", "pointer", "buffer", "pointer", "pointer", "pointer"], result: "i32" },
});
// lib.symbols.DdqIsDiagnosticRecordSampledIn(hSession, providerGroup, providerId, providerName, eventId, eventName, eventVersion, eventKeywords, isSampledIn)
// hSession : HDIAGNOSTIC_DATA_QUERY_SESSION -> "pointer"
// providerGroup : GUID* -> "pointer"
// providerId : GUID* optional -> "pointer"
// providerName : LPCWSTR -> "buffer"
// eventId : DWORD* optional -> "pointer"
// eventName : LPCWSTR -> "buffer"
// eventVersion : DWORD* optional -> "pointer"
// eventKeywords : ULONGLONG* optional -> "pointer"
// isSampledIn : BOOL* out -> "pointer"
// 文字列引数は "buffer"(NUL 終端のバイト列を Uint8Array で渡す)。
// 値渡し構造体は { struct: [ ...field types... ] } を使用。
<?php
$ffi = FFI::cdef(<<<C
int32_t DdqIsDiagnosticRecordSampledIn(
    void* hSession,
    void* providerGroup,
    void* providerId,
    const uint16_t* providerName,
    uint32_t* eventId,
    const uint16_t* eventName,
    uint32_t* eventVersion,
    uint64_t* eventKeywords,
    int32_t* isSampledIn);
C, "DiagnosticDataQuery.dll");
// $ffi->DdqIsDiagnosticRecordSampledIn(hSession, providerGroup, providerId, providerName, eventId, eventName, eventVersion, eventKeywords, isSampledIn);
// hSession : HDIAGNOSTIC_DATA_QUERY_SESSION
// providerGroup : GUID*
// providerId : GUID* optional
// providerName : LPCWSTR
// eventId : DWORD* optional
// eventName : LPCWSTR
// eventVersion : DWORD* optional
// eventKeywords : ULONGLONG* optional
// isSampledIn : BOOL* out
// 構造体/GUIDへのポインタは cdef が通るよう void* で表記(実型は各引数コメント参照)。値渡し構造体・enum は対応する typedef を cdef に追加すること。
// WINAPI(stdcall): x64 では呼出規約が統一されるため問題なし。x86 では __stdcall 対応のラッパが必要な場合あり。
import com.sun.jna.*;
import com.sun.jna.ptr.*;
import com.sun.jna.win32.StdCallLibrary;
import com.sun.jna.win32.W32APIOptions;

public interface Diagnosticdataquery extends StdCallLibrary {
    Diagnosticdataquery INSTANCE = Native.load("diagnosticdataquery", Diagnosticdataquery.class);
    int DdqIsDiagnosticRecordSampledIn(
        Pointer hSession,   // HDIAGNOSTIC_DATA_QUERY_SESSION
        Pointer providerGroup,   // GUID*
        Pointer providerId,   // GUID* optional
        WString providerName,   // LPCWSTR
        IntByReference eventId,   // DWORD* optional
        WString eventName,   // LPCWSTR
        IntByReference eventVersion,   // DWORD* optional
        LongByReference eventKeywords,   // ULONGLONG* optional
        IntByReference isSampledIn   // BOOL* out
    );
}
@[Link("diagnosticdataquery")]
lib LibDiagnosticDataQuery
  fun DdqIsDiagnosticRecordSampledIn = DdqIsDiagnosticRecordSampledIn(
    hSession : Void*,   # HDIAGNOSTIC_DATA_QUERY_SESSION
    providerGroup : GUID*,   # GUID*
    providerId : GUID*,   # GUID* optional
    providerName : UInt16*,   # LPCWSTR
    eventId : UInt32*,   # DWORD* optional
    eventName : UInt16*,   # LPCWSTR
    eventVersion : UInt32*,   # DWORD* optional
    eventKeywords : UInt64*,   # ULONGLONG* optional
    isSampledIn : Int32*   # BOOL* out
  ) : Int32
end
# 構造体/GUID/enum は lib 内に対応する型定義が必要。
# 呼出規約: x64 は規約統一のため OK。x86(32bit)は WINAPI=stdcall だが Crystal の fun に stdcall 付与構文がなく非対応。
import 'dart:ffi';
import 'package:ffi/ffi.dart';

typedef DdqIsDiagnosticRecordSampledInNative = Int32 Function(Pointer<Void>, Pointer<Void>, Pointer<Void>, Pointer<Utf16>, Pointer<Uint32>, Pointer<Utf16>, Pointer<Uint32>, Pointer<Uint64>, Pointer<Int32>);
typedef DdqIsDiagnosticRecordSampledInDart = int Function(Pointer<Void>, Pointer<Void>, Pointer<Void>, Pointer<Utf16>, Pointer<Uint32>, Pointer<Utf16>, Pointer<Uint32>, Pointer<Uint64>, Pointer<Int32>);
final DdqIsDiagnosticRecordSampledIn = DynamicLibrary.open('DiagnosticDataQuery.dll')
    .lookupFunction<DdqIsDiagnosticRecordSampledInNative, DdqIsDiagnosticRecordSampledInDart>('DdqIsDiagnosticRecordSampledIn');
// hSession : HDIAGNOSTIC_DATA_QUERY_SESSION -> Pointer<Void>
// providerGroup : GUID* -> Pointer<Void>
// providerId : GUID* optional -> Pointer<Void>
// providerName : LPCWSTR -> Pointer<Utf16>
// eventId : DWORD* optional -> Pointer<Uint32>
// eventName : LPCWSTR -> Pointer<Utf16>
// eventVersion : DWORD* optional -> Pointer<Uint32>
// eventKeywords : ULONGLONG* optional -> Pointer<Uint64>
// isSampledIn : BOOL* out -> Pointer<Int32>
// 文字列は package:ffi の "...".toNativeUtf16()/toNativeUtf8() で変換。
{$mode objfpc}{$H+}
function DdqIsDiagnosticRecordSampledIn(
  hSession: THandle;   // HDIAGNOSTIC_DATA_QUERY_SESSION
  providerGroup: PGUID;   // GUID*
  providerId: PGUID;   // GUID* optional
  providerName: PWideChar;   // LPCWSTR
  eventId: Pointer;   // DWORD* optional
  eventName: PWideChar;   // LPCWSTR
  eventVersion: Pointer;   // DWORD* optional
  eventKeywords: Pointer;   // ULONGLONG* optional
  isSampledIn: Pointer   // BOOL* out
): Integer; stdcall;
  external 'DiagnosticDataQuery.dll' name 'DdqIsDiagnosticRecordSampledIn';
import Foreign
import Foreign.C.Types
import Foreign.C.String

foreign import stdcall safe "DdqIsDiagnosticRecordSampledIn"
  c_DdqIsDiagnosticRecordSampledIn :: Ptr () -> Ptr () -> Ptr () -> CWString -> Ptr Word32 -> CWString -> Ptr Word32 -> Ptr Word64 -> Ptr CInt -> IO Int32
-- hSession : HDIAGNOSTIC_DATA_QUERY_SESSION -> Ptr ()
-- providerGroup : GUID* -> Ptr ()
-- providerId : GUID* optional -> Ptr ()
-- providerName : LPCWSTR -> CWString
-- eventId : DWORD* optional -> Ptr Word32
-- eventName : LPCWSTR -> CWString
-- eventVersion : DWORD* optional -> Ptr Word32
-- eventKeywords : ULONGLONG* optional -> Ptr Word64
-- isSampledIn : BOOL* out -> Ptr CInt
-- 要 GHC(Windows)。stdcall は x64 では ccall として扱われる。ブロックする API は safe 呼び出し推奨。
open Ctypes
open Foreign

let ddqisdiagnosticrecordsampledin =
  foreign "DdqIsDiagnosticRecordSampledIn"
    ((ptr void) @-> (ptr void) @-> (ptr void) @-> (ptr uint16_t) @-> (ptr uint32_t) @-> (ptr uint16_t) @-> (ptr uint32_t) @-> (ptr uint64_t) @-> (ptr int32_t) @-> returning int32_t)
(* hSession : HDIAGNOSTIC_DATA_QUERY_SESSION -> (ptr void) *)
(* providerGroup : GUID* -> (ptr void) *)
(* providerId : GUID* optional -> (ptr void) *)
(* providerName : LPCWSTR -> (ptr uint16_t) *)
(* eventId : DWORD* optional -> (ptr uint32_t) *)
(* eventName : LPCWSTR -> (ptr uint16_t) *)
(* eventVersion : DWORD* optional -> (ptr uint32_t) *)
(* eventKeywords : ULONGLONG* optional -> (ptr uint64_t) *)
(* isSampledIn : BOOL* out -> (ptr int32_t) *)
(* foreign は cdecl 前提。x64 Windows では WINAPI と一致。構造体は ctypes structure を定義のこと。 *)
(cffi:define-foreign-library diagnosticdataquery (t "DiagnosticDataQuery.dll"))
(cffi:use-foreign-library diagnosticdataquery)

(cffi:defcfun ("DdqIsDiagnosticRecordSampledIn" ddq-is-diagnostic-record-sampled-in :convention :stdcall) :int32
  (h-session :pointer)   ; HDIAGNOSTIC_DATA_QUERY_SESSION
  (provider-group :pointer)   ; GUID*
  (provider-id :pointer)   ; GUID* optional
  (provider-name (:string :encoding :utf-16le))   ; LPCWSTR
  (event-id :pointer)   ; DWORD* optional
  (event-name (:string :encoding :utf-16le))   ; LPCWSTR
  (event-version :pointer)   ; DWORD* optional
  (event-keywords :pointer)   ; ULONGLONG* optional
  (is-sampled-in :pointer))   ; BOOL* out
; isize/usize(INT_PTR/SIZE_T)は x64 前提で :int64/:uint64。x86 では :int32/:uint32。
use Win32::API;
my $DdqIsDiagnosticRecordSampledIn = Win32::API::More->new('DiagnosticDataQuery',
    'int DdqIsDiagnosticRecordSampledIn(HANDLE hSession, LPVOID providerGroup, LPVOID providerId, LPCWSTR providerName, LPVOID eventId, LPCWSTR eventName, LPVOID eventVersion, LPVOID eventKeywords, LPVOID isSampledIn)');
# my $ret = $DdqIsDiagnosticRecordSampledIn->Call($hSession, $providerGroup, $providerId, $providerName, $eventId, $eventName, $eventVersion, $eventKeywords, $isSampledIn);
# hSession : HDIAGNOSTIC_DATA_QUERY_SESSION -> HANDLE
# providerGroup : GUID* -> LPVOID
# providerId : GUID* optional -> LPVOID
# providerName : LPCWSTR -> LPCWSTR
# eventId : DWORD* optional -> LPVOID
# eventName : LPCWSTR -> LPCWSTR
# eventVersion : DWORD* optional -> LPVOID
# eventKeywords : ULONGLONG* optional -> LPVOID
# isSampledIn : BOOL* out -> LPVOID
# 値渡し構造体は pack() した文字列、または Win32::API::Struct を使用。