RtlVirtualUnwind

// KERNEL32.dll
#include <windows.h>

EXCEPTION_ROUTINE RtlVirtualUnwind(
    RTL_VIRTUAL_UNWIND_HANDLER_TYPE HandlerType,
    ULONGLONG ImageBase,
    ULONGLONG ControlPc,
    IMAGE_RUNTIME_FUNCTION_ENTRY* FunctionEntry,
    CONTEXT* ContextRecord,
    void** HandlerData,
    ULONGLONG* EstablisherFrame,
    KNONVOLATILE_CONTEXT_POINTERS* ContextPointers   // optional
);

<DllImport("KERNEL32.dll", ExactSpelling:=True)>
Public Shared Function RtlVirtualUnwind(
    HandlerType As UInteger,   ' RTL_VIRTUAL_UNWIND_HANDLER_TYPE
    ImageBase As ULong,   ' ULONGLONG
    ControlPc As ULong,   ' ULONGLONG
    FunctionEntry As IntPtr,   ' IMAGE_RUNTIME_FUNCTION_ENTRY*
    ContextRecord As IntPtr,   ' CONTEXT* in/out
    HandlerData As IntPtr,   ' void** out
    <Out> ByRef EstablisherFrame As ULong,   ' ULONGLONG* out
    ContextPointers As IntPtr   ' KNONVOLATILE_CONTEXT_POINTERS* optional, in/out
) As IntPtr
End Function

' HandlerType : RTL_VIRTUAL_UNWIND_HANDLER_TYPE
' ImageBase : ULONGLONG
' ControlPc : ULONGLONG
' FunctionEntry : IMAGE_RUNTIME_FUNCTION_ENTRY*
' ContextRecord : CONTEXT* in/out
' HandlerData : void** out
' EstablisherFrame : ULONGLONG* out
' ContextPointers : KNONVOLATILE_CONTEXT_POINTERS* optional, in/out
Declare PtrSafe Function RtlVirtualUnwind Lib "kernel32" ( _
    ByVal HandlerType As Long, _
    ByVal ImageBase As LongLong, _
    ByVal ControlPc As LongLong, _
    ByVal FunctionEntry As LongPtr, _
    ByVal ContextRecord As LongPtr, _
    ByVal HandlerData As LongPtr, _
    ByRef EstablisherFrame As LongLong, _
    ByVal ContextPointers As LongPtr) As LongPtr
' VBA7前提(PtrSafe)。32bit Office では LongPtr→Long。Integer=16bit / Long=32bit / LongLong=64bit。

import ctypes
from ctypes import wintypes

RtlVirtualUnwind = ctypes.windll.kernel32.RtlVirtualUnwind
RtlVirtualUnwind.restype = ctypes.c_void_p
RtlVirtualUnwind.argtypes = [
    wintypes.DWORD,  # HandlerType : RTL_VIRTUAL_UNWIND_HANDLER_TYPE
    ctypes.c_ulonglong,  # ImageBase : ULONGLONG
    ctypes.c_ulonglong,  # ControlPc : ULONGLONG
    ctypes.c_void_p,  # FunctionEntry : IMAGE_RUNTIME_FUNCTION_ENTRY*
    ctypes.c_void_p,  # ContextRecord : CONTEXT* in/out
    ctypes.c_void_p,  # HandlerData : void** out
    ctypes.POINTER(ctypes.c_ulonglong),  # EstablisherFrame : ULONGLONG* out
    ctypes.c_void_p,  # ContextPointers : KNONVOLATILE_CONTEXT_POINTERS* optional, in/out
]

require 'fiddle'
require 'fiddle/import'

lib = Fiddle.dlopen('KERNEL32.dll')
RtlVirtualUnwind = Fiddle::Function.new(
  lib['RtlVirtualUnwind'],
  [
    -Fiddle::TYPE_INT,  # HandlerType : RTL_VIRTUAL_UNWIND_HANDLER_TYPE
    -Fiddle::TYPE_LONG_LONG,  # ImageBase : ULONGLONG
    -Fiddle::TYPE_LONG_LONG,  # ControlPc : ULONGLONG
    Fiddle::TYPE_VOIDP,  # FunctionEntry : IMAGE_RUNTIME_FUNCTION_ENTRY*
    Fiddle::TYPE_VOIDP,  # ContextRecord : CONTEXT* in/out
    Fiddle::TYPE_VOIDP,  # HandlerData : void** out
    Fiddle::TYPE_VOIDP,  # EstablisherFrame : ULONGLONG* out
    Fiddle::TYPE_VOIDP,  # ContextPointers : KNONVOLATILE_CONTEXT_POINTERS* optional, in/out
  ],
  Fiddle::TYPE_VOIDP)

#[link(name = "kernel32")]
extern "system" {
    fn RtlVirtualUnwind(
        HandlerType: u32,  // RTL_VIRTUAL_UNWIND_HANDLER_TYPE
        ImageBase: u64,  // ULONGLONG
        ControlPc: u64,  // ULONGLONG
        FunctionEntry: *mut IMAGE_RUNTIME_FUNCTION_ENTRY,  // IMAGE_RUNTIME_FUNCTION_ENTRY*
        ContextRecord: *mut CONTEXT,  // CONTEXT* in/out
        HandlerData: *mut *mut (),  // void** out
        EstablisherFrame: *mut u64,  // ULONGLONG* out
        ContextPointers: *mut KNONVOLATILE_CONTEXT_POINTERS  // KNONVOLATILE_CONTEXT_POINTERS* optional, in/out
    ) -> *const core::ffi::c_void;
}
// crates: windows-sys provides ready-made bindings for this API.

$sig = @"
[DllImport("KERNEL32.dll")]
public static extern IntPtr RtlVirtualUnwind(uint HandlerType, ulong ImageBase, ulong ControlPc, IntPtr FunctionEntry, IntPtr ContextRecord, IntPtr HandlerData, out ulong EstablisherFrame, IntPtr ContextPointers);
"@
$api = Add-Type -MemberDefinition $sig -Name 'KERNEL32_RtlVirtualUnwind' -Namespace Win32 -PassThru
# $api::RtlVirtualUnwind(HandlerType, ImageBase, ControlPc, FunctionEntry, ContextRecord, HandlerData, EstablisherFrame, ContextPointers)

#uselib "KERNEL32.dll"
#func global RtlVirtualUnwind "RtlVirtualUnwind" sptr, sptr, sptr, sptr, sptr, sptr, sptr, sptr
; RtlVirtualUnwind HandlerType, ImageBase, ControlPc, varptr(FunctionEntry), varptr(ContextRecord), HandlerData, varptr(EstablisherFrame), varptr(ContextPointers)   ; 戻り値は stat
; HandlerType : RTL_VIRTUAL_UNWIND_HANDLER_TYPE -> "sptr"
; ImageBase : ULONGLONG -> "sptr"
; ControlPc : ULONGLONG -> "sptr"
; FunctionEntry : IMAGE_RUNTIME_FUNCTION_ENTRY* -> "sptr"
; ContextRecord : CONTEXT* in/out -> "sptr"
; HandlerData : void** out -> "sptr"
; EstablisherFrame : ULONGLONG* out -> "sptr"
; ContextPointers : KNONVOLATILE_CONTEXT_POINTERS* optional, in/out -> "sptr"
; ※HSP3.7は int64 引数(64bit値渡し)に非対応です。
; ※HSP3.7は #func のため戻り値はシステム変数 stat に格納されます。

import (
	"golang.org/x/sys/windows"
	"unsafe"
)

var (
	kernel32 = windows.NewLazySystemDLL("KERNEL32.dll")
	procRtlVirtualUnwind = kernel32.NewProc("RtlVirtualUnwind")
)

// HandlerType (RTL_VIRTUAL_UNWIND_HANDLER_TYPE), ImageBase (ULONGLONG), ControlPc (ULONGLONG), FunctionEntry (IMAGE_RUNTIME_FUNCTION_ENTRY*), ContextRecord (CONTEXT* in/out), HandlerData (void** out), EstablisherFrame (ULONGLONG* out), ContextPointers (KNONVOLATILE_CONTEXT_POINTERS* optional, in/out)
r1, _, err := procRtlVirtualUnwind.Call(
	uintptr(HandlerType),
	uintptr(ImageBase),
	uintptr(ControlPc),
	uintptr(FunctionEntry),
	uintptr(ContextRecord),
	uintptr(HandlerData),
	uintptr(EstablisherFrame),
	uintptr(ContextPointers),
)
_ = err  // syscall.Errno (valid when the call sets last-error)
_ = r1   // EXCEPTION_ROUTINE

function RtlVirtualUnwind(
  HandlerType: DWORD;   // RTL_VIRTUAL_UNWIND_HANDLER_TYPE
  ImageBase: UInt64;   // ULONGLONG
  ControlPc: UInt64;   // ULONGLONG
  FunctionEntry: Pointer;   // IMAGE_RUNTIME_FUNCTION_ENTRY*
  ContextRecord: Pointer;   // CONTEXT* in/out
  HandlerData: Pointer;   // void** out
  EstablisherFrame: Pointer;   // ULONGLONG* out
  ContextPointers: Pointer   // KNONVOLATILE_CONTEXT_POINTERS* optional, in/out
): Pointer; stdcall;
  external 'KERNEL32.dll' name 'RtlVirtualUnwind';

result := DllCall("KERNEL32\RtlVirtualUnwind"
    , "UInt", HandlerType   ; RTL_VIRTUAL_UNWIND_HANDLER_TYPE
    , "Int64", ImageBase   ; ULONGLONG
    , "Int64", ControlPc   ; ULONGLONG
    , "Ptr", FunctionEntry   ; IMAGE_RUNTIME_FUNCTION_ENTRY*
    , "Ptr", ContextRecord   ; CONTEXT* in/out
    , "Ptr", HandlerData   ; void** out
    , "Ptr", EstablisherFrame   ; ULONGLONG* out
    , "Ptr", ContextPointers   ; KNONVOLATILE_CONTEXT_POINTERS* optional, in/out
    , "Ptr")   ; return: EXCEPTION_ROUTINE

●RtlVirtualUnwind(HandlerType, ImageBase, ControlPc, FunctionEntry, ContextRecord, HandlerData, EstablisherFrame, ContextPointers) = DLL("KERNEL32.dll", "void* RtlVirtualUnwind(dword, qword, qword, void*, void*, void*, void*, void*)")
# 呼び出し: RtlVirtualUnwind(HandlerType, ImageBase, ControlPc, FunctionEntry, ContextRecord, HandlerData, EstablisherFrame, ContextPointers)
# HandlerType : RTL_VIRTUAL_UNWIND_HANDLER_TYPE -> "dword"
# ImageBase : ULONGLONG -> "qword"
# ControlPc : ULONGLONG -> "qword"
# FunctionEntry : IMAGE_RUNTIME_FUNCTION_ENTRY* -> "void*"
# ContextRecord : CONTEXT* in/out -> "void*"
# HandlerData : void** out -> "void*"
# EstablisherFrame : ULONGLONG* out -> "void*"
# ContextPointers : KNONVOLATILE_CONTEXT_POINTERS* optional, in/out -> "void*"
# なでしこ1は32bit・ANSI(Shift_JIS)。文字列=char*(ANSI)、ポインタ/ハンドル=void*(4byte)。

const std = @import("std");

extern "kernel32" fn RtlVirtualUnwind(
    HandlerType: u32, // RTL_VIRTUAL_UNWIND_HANDLER_TYPE
    ImageBase: u64, // ULONGLONG
    ControlPc: u64, // ULONGLONG
    FunctionEntry: [*c]IMAGE_RUNTIME_FUNCTION_ENTRY, // IMAGE_RUNTIME_FUNCTION_ENTRY*
    ContextRecord: [*c]CONTEXT, // CONTEXT* in/out
    HandlerData: ?*anyopaque, // void** out
    EstablisherFrame: [*c]u64, // ULONGLONG* out
    ContextPointers: [*c]KNONVOLATILE_CONTEXT_POINTERS // KNONVOLATILE_CONTEXT_POINTERS* optional, in/out
) callconv(std.os.windows.WINAPI) ?*anyopaque;

proc RtlVirtualUnwind(
    HandlerType: uint32,  # RTL_VIRTUAL_UNWIND_HANDLER_TYPE
    ImageBase: uint64,  # ULONGLONG
    ControlPc: uint64,  # ULONGLONG
    FunctionEntry: ptr IMAGE_RUNTIME_FUNCTION_ENTRY,  # IMAGE_RUNTIME_FUNCTION_ENTRY*
    ContextRecord: ptr CONTEXT,  # CONTEXT* in/out
    HandlerData: pointer,  # void** out
    EstablisherFrame: ptr uint64,  # ULONGLONG* out
    ContextPointers: ptr KNONVOLATILE_CONTEXT_POINTERS  # KNONVOLATILE_CONTEXT_POINTERS* optional, in/out
): pointer {.importc: "RtlVirtualUnwind", stdcall, dynlib: "KERNEL32.dll".}

pragma(lib, "kernel32");
extern(Windows)
void* RtlVirtualUnwind(
    uint HandlerType,   // RTL_VIRTUAL_UNWIND_HANDLER_TYPE
    ulong ImageBase,   // ULONGLONG
    ulong ControlPc,   // ULONGLONG
    IMAGE_RUNTIME_FUNCTION_ENTRY* FunctionEntry,   // IMAGE_RUNTIME_FUNCTION_ENTRY*
    CONTEXT* ContextRecord,   // CONTEXT* in/out
    void** HandlerData,   // void** out
    ulong* EstablisherFrame,   // ULONGLONG* out
    KNONVOLATILE_CONTEXT_POINTERS* ContextPointers   // KNONVOLATILE_CONTEXT_POINTERS* optional, in/out
);

ccall((:RtlVirtualUnwind, "KERNEL32.dll"), stdcall, Ptr{Cvoid},
      (UInt32, UInt64, UInt64, Ptr{IMAGE_RUNTIME_FUNCTION_ENTRY}, Ptr{CONTEXT}, Ptr{Cvoid}, Ptr{UInt64}, Ptr{KNONVOLATILE_CONTEXT_POINTERS}),
      HandlerType, ImageBase, ControlPc, FunctionEntry, ContextRecord, HandlerData, EstablisherFrame, ContextPointers)
# HandlerType : RTL_VIRTUAL_UNWIND_HANDLER_TYPE -> UInt32
# ImageBase : ULONGLONG -> UInt64
# ControlPc : ULONGLONG -> UInt64
# FunctionEntry : IMAGE_RUNTIME_FUNCTION_ENTRY* -> Ptr{IMAGE_RUNTIME_FUNCTION_ENTRY}
# ContextRecord : CONTEXT* in/out -> Ptr{CONTEXT}
# HandlerData : void** out -> Ptr{Cvoid}
# EstablisherFrame : ULONGLONG* out -> Ptr{UInt64}
# ContextPointers : KNONVOLATILE_CONTEXT_POINTERS* optional, in/out -> Ptr{KNONVOLATILE_CONTEXT_POINTERS}
# stdcall は 32bit のみ意味を持つ(x64 では無視)。

local ffi = require("ffi")
ffi.cdef[[
void* RtlVirtualUnwind(
    uint32_t HandlerType,
    uint64_t ImageBase,
    uint64_t ControlPc,
    void* FunctionEntry,
    void* ContextRecord,
    void** HandlerData,
    uint64_t* EstablisherFrame,
    void* ContextPointers);
]]
local kernel32 = ffi.load("kernel32")
-- kernel32.RtlVirtualUnwind(HandlerType, ImageBase, ControlPc, FunctionEntry, ContextRecord, HandlerData, EstablisherFrame, ContextPointers)
-- HandlerType : RTL_VIRTUAL_UNWIND_HANDLER_TYPE
-- ImageBase : ULONGLONG
-- ControlPc : ULONGLONG
-- FunctionEntry : IMAGE_RUNTIME_FUNCTION_ENTRY*
-- ContextRecord : CONTEXT* in/out
-- HandlerData : void** out
-- EstablisherFrame : ULONGLONG* out
-- ContextPointers : KNONVOLATILE_CONTEXT_POINTERS* optional, in/out
-- 構造体/GUIDへのポインタは cdef が通るよう void* で表記(実型は各引数コメント参照)。値渡し構造体・enum は対応する typedef を cdef に追加すること。

const koffi = require('koffi');
const lib = koffi.load('KERNEL32.dll');
const RtlVirtualUnwind = lib.func('__stdcall', 'RtlVirtualUnwind', 'void *', ['uint32_t', 'uint64_t', 'uint64_t', 'void *', 'void *', 'void *', 'uint64_t *', 'void *']);
// RtlVirtualUnwind(HandlerType, ImageBase, ControlPc, FunctionEntry, ContextRecord, HandlerData, EstablisherFrame, ContextPointers)
// HandlerType : RTL_VIRTUAL_UNWIND_HANDLER_TYPE -> 'uint32_t'
// ImageBase : ULONGLONG -> 'uint64_t'
// ControlPc : ULONGLONG -> 'uint64_t'
// FunctionEntry : IMAGE_RUNTIME_FUNCTION_ENTRY* -> 'void *'
// ContextRecord : CONTEXT* in/out -> 'void *'
// HandlerData : void** out -> 'void *'
// EstablisherFrame : ULONGLONG* out -> 'uint64_t *'
// ContextPointers : KNONVOLATILE_CONTEXT_POINTERS* optional, in/out -> 'void *'
// 出力ポインタは koffi.out(...) で包む。構造体は koffi.struct で定義。

const lib = Deno.dlopen("KERNEL32.dll", {
  RtlVirtualUnwind: { parameters: ["u32", "u64", "u64", "pointer", "pointer", "pointer", "pointer", "pointer"], result: "pointer" },
});
// lib.symbols.RtlVirtualUnwind(HandlerType, ImageBase, ControlPc, FunctionEntry, ContextRecord, HandlerData, EstablisherFrame, ContextPointers)
// HandlerType : RTL_VIRTUAL_UNWIND_HANDLER_TYPE -> "u32"
// ImageBase : ULONGLONG -> "u64"
// ControlPc : ULONGLONG -> "u64"
// FunctionEntry : IMAGE_RUNTIME_FUNCTION_ENTRY* -> "pointer"
// ContextRecord : CONTEXT* in/out -> "pointer"
// HandlerData : void** out -> "pointer"
// EstablisherFrame : ULONGLONG* out -> "pointer"
// ContextPointers : KNONVOLATILE_CONTEXT_POINTERS* optional, in/out -> "pointer"
// 文字列引数は "buffer"(NUL 終端のバイト列を Uint8Array で渡す)。
// 値渡し構造体は { struct: [ ...field types... ] } を使用。

<?php
$ffi = FFI::cdef(<<<C
void* RtlVirtualUnwind(
    uint32_t HandlerType,
    uint64_t ImageBase,
    uint64_t ControlPc,
    void* FunctionEntry,
    void* ContextRecord,
    void** HandlerData,
    uint64_t* EstablisherFrame,
    void* ContextPointers);
C, "KERNEL32.dll");
// $ffi->RtlVirtualUnwind(HandlerType, ImageBase, ControlPc, FunctionEntry, ContextRecord, HandlerData, EstablisherFrame, ContextPointers);
// HandlerType : RTL_VIRTUAL_UNWIND_HANDLER_TYPE
// ImageBase : ULONGLONG
// ControlPc : ULONGLONG
// FunctionEntry : IMAGE_RUNTIME_FUNCTION_ENTRY*
// ContextRecord : CONTEXT* in/out
// HandlerData : void** out
// EstablisherFrame : ULONGLONG* out
// ContextPointers : KNONVOLATILE_CONTEXT_POINTERS* optional, in/out
// 構造体/GUIDへのポインタは cdef が通るよう void* で表記(実型は各引数コメント参照)。値渡し構造体・enum は対応する typedef を cdef に追加すること。
// WINAPI(stdcall): x64 では呼出規約が統一されるため問題なし。x86 では __stdcall 対応のラッパが必要な場合あり。

import com.sun.jna.*;
import com.sun.jna.ptr.*;
import com.sun.jna.win32.StdCallLibrary;
import com.sun.jna.win32.W32APIOptions;

public interface Kernel32 extends StdCallLibrary {
    Kernel32 INSTANCE = Native.load("kernel32", Kernel32.class);
    Pointer RtlVirtualUnwind(
        int HandlerType,   // RTL_VIRTUAL_UNWIND_HANDLER_TYPE
        long ImageBase,   // ULONGLONG
        long ControlPc,   // ULONGLONG
        Pointer FunctionEntry,   // IMAGE_RUNTIME_FUNCTION_ENTRY*
        Pointer ContextRecord,   // CONTEXT* in/out
        Pointer HandlerData,   // void** out
        LongByReference EstablisherFrame,   // ULONGLONG* out
        Pointer ContextPointers   // KNONVOLATILE_CONTEXT_POINTERS* optional, in/out
    );
}

@[Link("kernel32")]
lib LibKERNEL32
  fun RtlVirtualUnwind = RtlVirtualUnwind(
    HandlerType : UInt32,   # RTL_VIRTUAL_UNWIND_HANDLER_TYPE
    ImageBase : UInt64,   # ULONGLONG
    ControlPc : UInt64,   # ULONGLONG
    FunctionEntry : IMAGE_RUNTIME_FUNCTION_ENTRY*,   # IMAGE_RUNTIME_FUNCTION_ENTRY*
    ContextRecord : CONTEXT*,   # CONTEXT* in/out
    HandlerData : Void**,   # void** out
    EstablisherFrame : UInt64*,   # ULONGLONG* out
    ContextPointers : KNONVOLATILE_CONTEXT_POINTERS*   # KNONVOLATILE_CONTEXT_POINTERS* optional, in/out
  ) : Void*
end
# 構造体/GUID/enum は lib 内に対応する型定義が必要。
# 呼出規約: x64 は規約統一のため OK。x86(32bit)は WINAPI=stdcall だが Crystal の fun に stdcall 付与構文がなく非対応。

import 'dart:ffi';
import 'package:ffi/ffi.dart';

typedef RtlVirtualUnwindNative = Pointer<Void> Function(Uint32, Uint64, Uint64, Pointer<Void>, Pointer<Void>, Pointer<Void>, Pointer<Uint64>, Pointer<Void>);
typedef RtlVirtualUnwindDart = Pointer<Void> Function(int, int, int, Pointer<Void>, Pointer<Void>, Pointer<Void>, Pointer<Uint64>, Pointer<Void>);
final RtlVirtualUnwind = DynamicLibrary.open('KERNEL32.dll')
    .lookupFunction<RtlVirtualUnwindNative, RtlVirtualUnwindDart>('RtlVirtualUnwind');
// HandlerType : RTL_VIRTUAL_UNWIND_HANDLER_TYPE -> Uint32
// ImageBase : ULONGLONG -> Uint64
// ControlPc : ULONGLONG -> Uint64
// FunctionEntry : IMAGE_RUNTIME_FUNCTION_ENTRY* -> Pointer<Void>
// ContextRecord : CONTEXT* in/out -> Pointer<Void>
// HandlerData : void** out -> Pointer<Void>
// EstablisherFrame : ULONGLONG* out -> Pointer<Uint64>
// ContextPointers : KNONVOLATILE_CONTEXT_POINTERS* optional, in/out -> Pointer<Void>
// 文字列は package:ffi の "...".toNativeUtf16()/toNativeUtf8() で変換。

{$mode objfpc}{$H+}
function RtlVirtualUnwind(
  HandlerType: DWORD;   // RTL_VIRTUAL_UNWIND_HANDLER_TYPE
  ImageBase: UInt64;   // ULONGLONG
  ControlPc: UInt64;   // ULONGLONG
  FunctionEntry: Pointer;   // IMAGE_RUNTIME_FUNCTION_ENTRY*
  ContextRecord: Pointer;   // CONTEXT* in/out
  HandlerData: Pointer;   // void** out
  EstablisherFrame: Pointer;   // ULONGLONG* out
  ContextPointers: Pointer   // KNONVOLATILE_CONTEXT_POINTERS* optional, in/out
): Pointer; stdcall;
  external 'KERNEL32.dll' name 'RtlVirtualUnwind';

import Foreign
import Foreign.C.Types
import Foreign.C.String

foreign import stdcall safe "RtlVirtualUnwind"
  c_RtlVirtualUnwind :: Word32 -> Word64 -> Word64 -> Ptr () -> Ptr () -> Ptr () -> Ptr Word64 -> Ptr () -> IO (Ptr ())
-- HandlerType : RTL_VIRTUAL_UNWIND_HANDLER_TYPE -> Word32
-- ImageBase : ULONGLONG -> Word64
-- ControlPc : ULONGLONG -> Word64
-- FunctionEntry : IMAGE_RUNTIME_FUNCTION_ENTRY* -> Ptr ()
-- ContextRecord : CONTEXT* in/out -> Ptr ()
-- HandlerData : void** out -> Ptr ()
-- EstablisherFrame : ULONGLONG* out -> Ptr Word64
-- ContextPointers : KNONVOLATILE_CONTEXT_POINTERS* optional, in/out -> Ptr ()
-- 要 GHC(Windows)。stdcall は x64 では ccall として扱われる。ブロックする API は safe 呼び出し推奨。

open Ctypes
open Foreign

let rtlvirtualunwind =
  foreign "RtlVirtualUnwind"
    (uint32_t @-> uint64_t @-> uint64_t @-> (ptr void) @-> (ptr void) @-> (ptr void) @-> (ptr uint64_t) @-> (ptr void) @-> returning (ptr void))
(* HandlerType : RTL_VIRTUAL_UNWIND_HANDLER_TYPE -> uint32_t *)
(* ImageBase : ULONGLONG -> uint64_t *)
(* ControlPc : ULONGLONG -> uint64_t *)
(* FunctionEntry : IMAGE_RUNTIME_FUNCTION_ENTRY* -> (ptr void) *)
(* ContextRecord : CONTEXT* in/out -> (ptr void) *)
(* HandlerData : void** out -> (ptr void) *)
(* EstablisherFrame : ULONGLONG* out -> (ptr uint64_t) *)
(* ContextPointers : KNONVOLATILE_CONTEXT_POINTERS* optional, in/out -> (ptr void) *)
(* foreign は cdecl 前提。x64 Windows では WINAPI と一致。構造体は ctypes structure を定義のこと。 *)

(cffi:define-foreign-library kernel32 (t "KERNEL32.dll"))
(cffi:use-foreign-library kernel32)

(cffi:defcfun ("RtlVirtualUnwind" rtl-virtual-unwind :convention :stdcall) :pointer
  (handler-type :uint32)   ; RTL_VIRTUAL_UNWIND_HANDLER_TYPE
  (image-base :uint64)   ; ULONGLONG
  (control-pc :uint64)   ; ULONGLONG
  (function-entry :pointer)   ; IMAGE_RUNTIME_FUNCTION_ENTRY*
  (context-record :pointer)   ; CONTEXT* in/out
  (handler-data :pointer)   ; void** out
  (establisher-frame :pointer)   ; ULONGLONG* out
  (context-pointers :pointer))   ; KNONVOLATILE_CONTEXT_POINTERS* optional, in/out
; isize/usize(INT_PTR/SIZE_T)は x64 前提で :int64/:uint64。x86 では :int32/:uint32。

use Win32::API;
my $RtlVirtualUnwind = Win32::API::More->new('KERNEL32',
    'LPVOID RtlVirtualUnwind(DWORD HandlerType, UINT64 ImageBase, UINT64 ControlPc, LPVOID FunctionEntry, LPVOID ContextRecord, LPVOID HandlerData, LPVOID EstablisherFrame, LPVOID ContextPointers)');
# my $ret = $RtlVirtualUnwind->Call($HandlerType, $ImageBase, $ControlPc, $FunctionEntry, $ContextRecord, $HandlerData, $EstablisherFrame, $ContextPointers);
# HandlerType : RTL_VIRTUAL_UNWIND_HANDLER_TYPE -> DWORD
# ImageBase : ULONGLONG -> UINT64
# ControlPc : ULONGLONG -> UINT64
# FunctionEntry : IMAGE_RUNTIME_FUNCTION_ENTRY* -> LPVOID
# ContextRecord : CONTEXT* in/out -> LPVOID
# HandlerData : void** out -> LPVOID
# EstablisherFrame : ULONGLONG* out -> LPVOID
# ContextPointers : KNONVOLATILE_CONTEXT_POINTERS* optional, in/out -> LPVOID
# 値渡し構造体は pack() した文字列、または Win32::API::Struct を使用。