evntprov.h File Reference

Go to the source code of this file.

Data Structures
struct	PEVENT_DATA_DESCRIPTOR
struct	PEVENT_DESCRIPTOR
struct	PEVENT_FILTER_DESCRIPTOR
struct	PEVENT_FILTER_HEADER
Defines
#define	_EVNTPROV_
#define	EVNTAPI   DECLSPEC_IMPORT __stdcall
#define	EVENT_MIN_LEVEL   (0)
#define	EVENT_MAX_LEVEL   (0xff)
#define	EVENT_ACTIVITY_CTRL_GET_ID   (1)
#define	EVENT_ACTIVITY_CTRL_SET_ID   (2)
#define	EVENT_ACTIVITY_CTRL_CREATE_ID   (3)
#define	EVENT_ACTIVITY_CTRL_GET_SET_ID   (4)
#define	EVENT_ACTIVITY_CTRL_CREATE_SET_ID   (5)
#define	MAX_EVENT_DATA_DESCRIPTORS   (128)
#define	MAX_EVENT_FILTER_DATA_SIZE   (1024)
#define	EVENT_FILTER_TYPE_SCHEMATIZED   (0x80000000)
Typedefs
typedef ULONGLONG	REGHANDLE
typedef ULONGLONG *	PREGHANDLE
typedef const EVENT_DESCRIPTOR *	PCEVENT_DESCRIPTOR
typedef VOID(NTAPI *	PENABLECALLBACK )(IN LPCGUID SourceId, IN ULONG IsEnabled, IN UCHAR Level, IN ULONGLONG MatchAnyKeyword, IN ULONGLONG MatchAllKeyword, IN PEVENT_FILTER_DESCRIPTOR FilterData OPTIONAL, IN OUT PVOID CallbackContext OPTIONAL)
Functions
ULONG EVNTAPI	EventRegister (IN LPCGUID ProviderId, IN PENABLECALLBACK EnableCallback OPTIONAL, IN PVOID CallbackContext OPTIONAL, OUT PREGHANDLE RegHandle)
ULONG EVNTAPI	EventUnregister (IN REGHANDLE RegHandle)
BOOLEAN EVNTAPI	EventEnabled (IN REGHANDLE RegHandle, IN PCEVENT_DESCRIPTOR EventDescriptor)
BOOLEAN EVNTAPI	EventProviderEnabled (IN REGHANDLE RegHandle, IN UCHAR Level, IN ULONGLONG Keyword)
ULONG EVNTAPI	EventWrite (IN REGHANDLE RegHandle, IN PCEVENT_DESCRIPTOR EventDescriptor, IN ULONG UserDataCount, IN PEVENT_DATA_DESCRIPTOR UserData)
ULONG EVNTAPI	EventWriteTransfer (IN REGHANDLE RegHandle, IN PCEVENT_DESCRIPTOR EventDescriptor, IN LPCGUID ActivityId OPTIONAL, IN LPCGUID RelatedActivityId OPTIONAL, IN ULONG UserDataCount, IN PEVENT_DATA_DESCRIPTOR UserData OPTIONAL)
ULONG EVNTAPI	EventWriteString (IN REGHANDLE RegHandle, IN UCHAR Level, IN ULONGLONG Keyword, IN PCWSTR String)
ULONG EVNTAPI	EventActivityIdControl (IN ULONG ControlCode, IN OUT LPGUID ActivityId)
ULONG EVNTAPI	EventWriteEx (IN REGHANDLE RegHandle, IN PCEVENT_DESCRIPTOR EventDescriptor, IN ULONG64 Filter, IN ULONG Flags, IN LPCGUID ActivityId OPTIONAL, IN LPCGUID RelatedActivityId OPTIONAL, IN ULONG UserDataCount, IN PEVENT_DATA_DESCRIPTOR UserData OPTIONAL)
FORCEINLINE VOID	EventDataDescCreate (OUT PEVENT_DATA_DESCRIPTOR EventDataDescriptor, IN const VOID *DataPtr, IN ULONG DataSize)
FORCEINLINE VOID	EventDescCreate (OUT PEVENT_DESCRIPTOR EventDescriptor, IN USHORT Id, IN UCHAR Version, IN UCHAR Channel, IN UCHAR Level, IN USHORT Task, IN UCHAR Opcode, IN ULONGLONG Keyword)
FORCEINLINE VOID	EventDescZero (OUT PEVENT_DESCRIPTOR EventDescriptor)
FORCEINLINE USHORT	EventDescGetId (IN PCEVENT_DESCRIPTOR EventDescriptor)
FORCEINLINE UCHAR	EventDescGetVersion (IN PCEVENT_DESCRIPTOR EventDescriptor)
FORCEINLINE USHORT	EventDescGetTask (IN PCEVENT_DESCRIPTOR EventDescriptor)
FORCEINLINE UCHAR	EventDescGetOpcode (IN PCEVENT_DESCRIPTOR EventDescriptor)
FORCEINLINE UCHAR	EventDescGetChannel (IN PCEVENT_DESCRIPTOR EventDescriptor)
FORCEINLINE UCHAR	EventDescGetLevel (IN PCEVENT_DESCRIPTOR EventDescriptor)
FORCEINLINE ULONGLONG	EventDescGetKeyword (IN PCEVENT_DESCRIPTOR EventDescriptor)
FORCEINLINE PEVENT_DESCRIPTOR	EventDescSetId (IN PEVENT_DESCRIPTOR EventDescriptor, IN USHORT Id)
FORCEINLINE PEVENT_DESCRIPTOR	EventDescSetVersion (IN PEVENT_DESCRIPTOR EventDescriptor, IN UCHAR Version)
FORCEINLINE PEVENT_DESCRIPTOR	EventDescSetTask (IN PEVENT_DESCRIPTOR EventDescriptor, IN USHORT Task)
FORCEINLINE PEVENT_DESCRIPTOR	EventDescSetOpcode (IN PEVENT_DESCRIPTOR EventDescriptor, IN UCHAR Opcode)
FORCEINLINE PEVENT_DESCRIPTOR	EventDescSetLevel (IN PEVENT_DESCRIPTOR EventDescriptor, IN UCHAR Level)
FORCEINLINE PEVENT_DESCRIPTOR	EventDescSetChannel (IN PEVENT_DESCRIPTOR EventDescriptor, IN UCHAR Channel)
FORCEINLINE PEVENT_DESCRIPTOR	EventDescSetKeyword (IN PEVENT_DESCRIPTOR EventDescriptor, IN ULONGLONG Keyword)
FORCEINLINE PEVENT_DESCRIPTOR	EventDescOrKeyword (IN PEVENT_DESCRIPTOR EventDescriptor, IN ULONGLONG Keyword)