PdhReadRawLogRecord

// pdh.dll
#include <windows.h>

DWORD PdhReadRawLogRecord(
    PDH_HLOG hLog,
    FILETIME ftRecord,
    PDH_RAW_LOG_RECORD* pRawLogRecord,   // optional
    DWORD* pdwBufferLength
);

<DllImport("pdh.dll", ExactSpelling:=True)>
Public Shared Function PdhReadRawLogRecord(
    hLog As IntPtr,   ' PDH_HLOG
    ftRecord As FILETIME,   ' FILETIME
    pRawLogRecord As IntPtr,   ' PDH_RAW_LOG_RECORD* optional, out
    ByRef pdwBufferLength As UInteger   ' DWORD* in/out
) As UInteger
End Function

' hLog : PDH_HLOG
' ftRecord : FILETIME
' pRawLogRecord : PDH_RAW_LOG_RECORD* optional, out
' pdwBufferLength : DWORD* in/out
Declare PtrSafe Function PdhReadRawLogRecord Lib "pdh" ( _
    ByVal hLog As LongPtr, _
    ByVal ftRecord As LongPtr, _
    ByVal pRawLogRecord As LongPtr, _
    ByRef pdwBufferLength As Long) As Long
' VBA7前提(PtrSafe)。32bit Office では LongPtr→Long。Integer=16bit / Long=32bit / LongLong=64bit。

import ctypes
from ctypes import wintypes

PdhReadRawLogRecord = ctypes.windll.pdh.PdhReadRawLogRecord
PdhReadRawLogRecord.restype = wintypes.DWORD
PdhReadRawLogRecord.argtypes = [
    wintypes.HANDLE,  # hLog : PDH_HLOG
    FILETIME,  # ftRecord : FILETIME
    ctypes.c_void_p,  # pRawLogRecord : PDH_RAW_LOG_RECORD* optional, out
    ctypes.POINTER(wintypes.DWORD),  # pdwBufferLength : DWORD* in/out
]

require 'fiddle'
require 'fiddle/import'

lib = Fiddle.dlopen('pdh.dll')
PdhReadRawLogRecord = Fiddle::Function.new(
  lib['PdhReadRawLogRecord'],
  [
    Fiddle::TYPE_VOIDP,  # hLog : PDH_HLOG
    Fiddle::TYPE_VOIDP,  # ftRecord : FILETIME
    Fiddle::TYPE_VOIDP,  # pRawLogRecord : PDH_RAW_LOG_RECORD* optional, out
    Fiddle::TYPE_VOIDP,  # pdwBufferLength : DWORD* in/out
  ],
  -Fiddle::TYPE_INT)

#[link(name = "pdh")]
extern "system" {
    fn PdhReadRawLogRecord(
        hLog: *mut core::ffi::c_void,  // PDH_HLOG
        ftRecord: FILETIME,  // FILETIME
        pRawLogRecord: *mut PDH_RAW_LOG_RECORD,  // PDH_RAW_LOG_RECORD* optional, out
        pdwBufferLength: *mut u32  // DWORD* in/out
    ) -> u32;
}
// crates: windows-sys provides ready-made bindings for this API.

$sig = @"
[DllImport("pdh.dll")]
public static extern uint PdhReadRawLogRecord(IntPtr hLog, FILETIME ftRecord, IntPtr pRawLogRecord, ref uint pdwBufferLength);
"@
$api = Add-Type -MemberDefinition $sig -Name 'pdh_PdhReadRawLogRecord' -Namespace Win32 -PassThru
# $api::PdhReadRawLogRecord(hLog, ftRecord, pRawLogRecord, pdwBufferLength)

#uselib "pdh.dll"
#func global PdhReadRawLogRecord "PdhReadRawLogRecord" sptr, sptr, sptr, sptr
; PdhReadRawLogRecord hLog, ftRecord, varptr(pRawLogRecord), varptr(pdwBufferLength)   ; 戻り値は stat
; hLog : PDH_HLOG -> "sptr"
; ftRecord : FILETIME -> "sptr"
; pRawLogRecord : PDH_RAW_LOG_RECORD* optional, out -> "sptr"
; pdwBufferLength : DWORD* in/out -> "sptr"
; ※値渡し構造体は直接渡せません。intにパック、または var で構造体変数を渡してください。
; ※HSP3.7は #func のため戻り値はシステム変数 stat に格納されます。

#uselib "pdh.dll"
#cfunc global PdhReadRawLogRecord "PdhReadRawLogRecord" sptr, int, var, var
; res = PdhReadRawLogRecord(hLog, ftRecord, pRawLogRecord, pdwBufferLength)
; hLog : PDH_HLOG -> "sptr"
; ftRecord : FILETIME -> "int"
; pRawLogRecord : PDH_RAW_LOG_RECORD* optional, out -> "var"
; pdwBufferLength : DWORD* in/out -> "var"
; ※値渡し構造体は直接渡せません。intにパック、または var で構造体変数を渡してください。
; ※出力/バッファ引数は var 方式(変数を直接渡す)。varptr 方式にも切替可。

; DWORD PdhReadRawLogRecord(PDH_HLOG hLog, FILETIME ftRecord, PDH_RAW_LOG_RECORD* pRawLogRecord, DWORD* pdwBufferLength)
#uselib "pdh.dll"
#cfunc global PdhReadRawLogRecord "PdhReadRawLogRecord" intptr, int, var, var
; res = PdhReadRawLogRecord(hLog, ftRecord, pRawLogRecord, pdwBufferLength)
; hLog : PDH_HLOG -> "intptr"
; ftRecord : FILETIME -> "int"
; pRawLogRecord : PDH_RAW_LOG_RECORD* optional, out -> "var"
; pdwBufferLength : DWORD* in/out -> "var"
; ※値渡し構造体は直接渡せません。intにパック、または var で構造体変数を渡してください。
; ※出力/バッファ引数は var 方式(変数を直接渡す)。varptr 方式にも切替可。

import (
	"golang.org/x/sys/windows"
	"unsafe"
)

var (
	pdh = windows.NewLazySystemDLL("pdh.dll")
	procPdhReadRawLogRecord = pdh.NewProc("PdhReadRawLogRecord")
)

// hLog (PDH_HLOG), ftRecord (FILETIME), pRawLogRecord (PDH_RAW_LOG_RECORD* optional, out), pdwBufferLength (DWORD* in/out)
r1, _, err := procPdhReadRawLogRecord.Call(
	uintptr(hLog),
	uintptr(ftRecord),
	uintptr(pRawLogRecord),
	uintptr(pdwBufferLength),
)
_ = err  // syscall.Errno (valid when the call sets last-error)
_ = r1   // DWORD

function PdhReadRawLogRecord(
  hLog: THandle;   // PDH_HLOG
  ftRecord: FILETIME;   // FILETIME
  pRawLogRecord: Pointer;   // PDH_RAW_LOG_RECORD* optional, out
  pdwBufferLength: Pointer   // DWORD* in/out
): DWORD; stdcall;
  external 'pdh.dll' name 'PdhReadRawLogRecord';

result := DllCall("pdh\PdhReadRawLogRecord"
    , "Ptr", hLog   ; PDH_HLOG
    , "Ptr", ftRecord   ; FILETIME
    , "Ptr", pRawLogRecord   ; PDH_RAW_LOG_RECORD* optional, out
    , "Ptr", pdwBufferLength   ; DWORD* in/out
    , "UInt")   ; return: DWORD

●PdhReadRawLogRecord(hLog, ftRecord, pRawLogRecord, pdwBufferLength) = DLL("pdh.dll", "dword PdhReadRawLogRecord(void*, void*, void*, void*)")
# 呼び出し: PdhReadRawLogRecord(hLog, ftRecord, pRawLogRecord, pdwBufferLength)
# hLog : PDH_HLOG -> "void*"
# ftRecord : FILETIME -> "void*"
# pRawLogRecord : PDH_RAW_LOG_RECORD* optional, out -> "void*"
# pdwBufferLength : DWORD* in/out -> "void*"
# なでしこ1は32bit・ANSI(Shift_JIS)。文字列=char*(ANSI)、ポインタ/ハンドル=void*(4byte)。