undocelfapi.h File Reference

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Functions
NTSTATUS NTAPI	ElfBackupEventLogFileA (IN HANDLE hEventLog, IN PANSI_STRING BackupFileNameA)
NTSTATUS NTAPI	ElfBackupEventLogFileW (IN HANDLE hEventLog, IN PUNICODE_STRING BackupFileNameU)
NTSTATUS NTAPI	ElfClearEventLogFileA (IN HANDLE hEventLog, IN PANSI_STRING BackupFileNameA)
NTSTATUS NTAPI	ElfClearEventLogFileW (IN HANDLE hEventLog, IN PUNICODE_STRING BackupFileNameU)
NTSTATUS NTAPI	ElfCloseEventLog (IN HANDLE hEventLog)
NTSTATUS NTAPI	ElfDeregisterEventSource (IN HANDLE hEventLog)
NTSTATUS NTAPI	ElfNumberOfRecords (IN HANDLE hEventLog, OUT PULONG NumberOfRecords)
NTSTATUS NTAPI	ElfOldestRecord (IN HANDLE hEventLog, OUT PULONG OldestRecordNumber)
NTSTATUS NTAPI	ElfChangeNotify (IN HANDLE hEventLog, IN HANDLE hEvent)
NTSTATUS NTAPI	ElfOpenBackupEventLogA (IN PANSI_STRING UNCServerNameA, IN PANSI_STRING BackupFileNameA, OUT PHANDLE phEventLog)
NTSTATUS NTAPI	ElfOpenBackupEventLogW (IN PUNICODE_STRING UNCServerNameU, IN PUNICODE_STRING BackupFileNameU, OUT PHANDLE phEventLog)
NTSTATUS NTAPI	ElfOpenEventLogA (IN PANSI_STRING UNCServerNameA, IN PANSI_STRING SourceNameA, OUT PHANDLE phEventLog)
NTSTATUS NTAPI	ElfOpenEventLogW (IN PUNICODE_STRING UNCServerNameU, IN PUNICODE_STRING SourceNameU, OUT PHANDLE phEventLog)
NTSTATUS NTAPI	ElfReadEventLogA (IN HANDLE hEventLog, IN ULONG ReadFlags, IN ULONG RecordOffset, OUT LPVOID Buffer, IN ULONG NumberOfBytesToRead, OUT PULONG NumberOfBytesRead, OUT PULONG MinNumberOfBytesNeeded)
NTSTATUS NTAPI	ElfReadEventLogW (IN HANDLE hEventLog, IN ULONG ReadFlags, IN ULONG RecordOffset, OUT LPVOID Buffer, IN ULONG NumberOfBytesToRead, OUT PULONG NumberOfBytesRead, OUT PULONG MinNumberOfBytesNeeded)
NTSTATUS NTAPI	ElfRegisterEventSourceA (IN PANSI_STRING UNCServerNameA, IN PANSI_STRING SourceNameA, OUT PHANDLE phEventLog)
NTSTATUS NTAPI	ElfRegisterEventSourceW (IN PUNICODE_STRING UNCServerNameU, IN PUNICODE_STRING SourceNameU, OUT PHANDLE phEventLog)
NTSTATUS NTAPI	ElfReportEventA (IN HANDLE hEventLog, IN USHORT EventType, IN USHORT EventCategory, IN ULONG EventID, IN PSID UserSID, IN USHORT NumStrings, IN ULONG DataSize, IN PANSI_STRING *Strings, IN PVOID Data, IN USHORT Flags, IN OUT PULONG RecordNumber, IN OUT PULONG TimeWritten)
NTSTATUS NTAPI	ElfReportEventW (IN HANDLE hEventLog, IN USHORT EventType, IN USHORT EventCategory, IN ULONG EventID, IN PSID UserSID, IN USHORT NumStrings, IN ULONG DataSize, IN PUNICODE_STRING *Strings, IN PVOID Data, IN USHORT Flags, IN OUT PULONG RecordNumber, IN OUT PULONG TimeWritten)
NTSTATUS NTAPI	ElfReportEventAndSourceW (IN HANDLE hEventLog, IN ULONG Time, IN PUNICODE_STRING ComputerName, IN USHORT EventType, IN USHORT EventCategory, IN ULONG EventID, IN PSID UserSID, IN PUNICODE_STRING SourceName, IN USHORT NumStrings, IN ULONG DataSize, IN PUNICODE_STRING *Strings, IN PVOID Data, IN USHORT Flags, IN OUT PULONG RecordNumber, IN OUT PULONG TimeWritten)
NTSTATUS NTAPI	ElfFlushEventLog (IN HANDLE hEventLog)

Function Documentation

ElfBackupEventLogFileA()

NTSTATUS NTAPI ElfBackupEventLogFileA	(	IN HANDLE	hEventLog,
		IN PANSI_STRING	BackupFileNameA
	)

Definition at line 154 of file eventlog.c.

{
    NTSTATUS Status;
 
    if (!BackupFileNameA || (BackupFileNameA->Length == 0))
        return STATUS_INVALID_PARAMETER;
 
    RpcTryExcept
    {
        Status = ElfrBackupELFA(hEventLog,
                                (PRPC_STRING)BackupFileNameA);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

ElfBackupEventLogFileW()

NTSTATUS NTAPI ElfBackupEventLogFileW	(	IN HANDLE	hEventLog,
		IN PUNICODE_STRING	BackupFileNameU
	)

Definition at line 222 of file eventlog.c.

{
    NTSTATUS Status;
 
    if (!BackupFileNameU || (BackupFileNameU->Length == 0))
        return STATUS_INVALID_PARAMETER;
 
    RpcTryExcept
    {
        Status = ElfrBackupELFW(hEventLog,
                                (PRPC_UNICODE_STRING)BackupFileNameU);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by BackupEventLogW().

ElfChangeNotify()

NTSTATUS NTAPI ElfChangeNotify	(	IN HANDLE	hEventLog,
		IN HANDLE	hEvent
	)

Definition at line 646 of file eventlog.c.

{
    NTSTATUS Status;
    CLIENT_ID ClientId = NtCurrentTeb()->ClientId;
    RPC_CLIENT_ID RpcClientId;
 
    RpcClientId.UniqueProcess = HandleToUlong(ClientId.UniqueProcess);
    RpcClientId.UniqueThread  = HandleToUlong(ClientId.UniqueThread);
 
    RpcTryExcept
    {
        Status = ElfrChangeNotify(hEventLog, RpcClientId, HandleToUlong(hEvent));
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by NotifyChangeEventLog().

ElfClearEventLogFileA()

NTSTATUS NTAPI ElfClearEventLogFileA	(	IN HANDLE	hEventLog,
		IN PANSI_STRING	BackupFileNameA
	)

Definition at line 285 of file eventlog.c.

{
    NTSTATUS Status;
 
    RpcTryExcept
    {
        Status = ElfrClearELFA(hEventLog,
                               (PRPC_STRING)BackupFileNameA);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

ElfClearEventLogFileW()

NTSTATUS NTAPI ElfClearEventLogFileW	(	IN HANDLE	hEventLog,
		IN PUNICODE_STRING	BackupFileNameU
	)

Definition at line 347 of file eventlog.c.

{
    NTSTATUS Status;
 
    RpcTryExcept
    {
        Status = ElfrClearELFW(hEventLog,
                               (PRPC_UNICODE_STRING)BackupFileNameU);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by ClearEventLogW().

ElfCloseEventLog()

NTSTATUS NTAPI ElfCloseEventLog

(

IN HANDLE

hEventLog

)

Definition at line 409 of file eventlog.c.

{
    NTSTATUS Status;
 
    RpcTryExcept
    {
        Status = ElfrCloseEL(&hEventLog);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by CloseEventLog().

ElfDeregisterEventSource()

NTSTATUS NTAPI ElfDeregisterEventSource

(

IN HANDLE

hEventLog

)

Definition at line 455 of file eventlog.c.

{
    NTSTATUS Status;
 
    RpcTryExcept
    {
        Status = ElfrDeregisterEventSource(&hEventLog);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by DeregisterEventSource(), and UserpLogHardError().

ElfFlushEventLog()

NTSTATUS NTAPI ElfFlushEventLog

(

IN HANDLE

hEventLog

)

Definition at line 1633 of file eventlog.c.

{
    NTSTATUS Status;
 
    RpcTryExcept
    {
        Status = ElfrFlushEL(hEventLog);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

ElfNumberOfRecords()

NTSTATUS NTAPI ElfNumberOfRecords	(	IN HANDLE	hEventLog,
		OUT PULONG	NumberOfRecords
	)

Definition at line 548 of file eventlog.c.

{
    NTSTATUS Status;
 
    if (!NumberOfRecords)
        return STATUS_INVALID_PARAMETER;
 
    RpcTryExcept
    {
        Status = ElfrNumberOfRecords(hEventLog, NumberOfRecords);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by GetNumberOfEventLogRecords().

ElfOldestRecord()

NTSTATUS NTAPI ElfOldestRecord	(	IN HANDLE	hEventLog,
		OUT PULONG	OldestRecordNumber
	)

Definition at line 597 of file eventlog.c.

{
    NTSTATUS Status;
 
    if (!OldestRecordNumber)
        return STATUS_INVALID_PARAMETER;
 
    RpcTryExcept
    {
        Status = ElfrOldestRecord(hEventLog, OldestRecordNumber);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by GetOldestEventLogRecord().

ElfOpenBackupEventLogA()

NTSTATUS NTAPI ElfOpenBackupEventLogA	(	IN PANSI_STRING	UNCServerNameA,
		IN PANSI_STRING	BackupFileNameA,
		OUT PHANDLE	phEventLog
	)

Definition at line 693 of file eventlog.c.

{
    NTSTATUS Status;
    PSTR pUNCServerName = NULL;
 
    if (!phEventLog || !BackupFileNameA || (BackupFileNameA->Length == 0))
        return STATUS_INVALID_PARAMETER;
 
    if (UNCServerNameA && (UNCServerNameA->Length != 0))
        pUNCServerName = UNCServerNameA->Buffer;
 
    *phEventLog = NULL;
 
    RpcTryExcept
    {
        Status = ElfrOpenBELA(pUNCServerName,
                              (PRPC_STRING)BackupFileNameA,
                              1, 1,
                              (IELF_HANDLE*)phEventLog);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

ElfOpenBackupEventLogW()

NTSTATUS NTAPI ElfOpenBackupEventLogW	(	IN PUNICODE_STRING	UNCServerNameU,
		IN PUNICODE_STRING	BackupFileNameU,
		OUT PHANDLE	phEventLog
	)

Definition at line 797 of file eventlog.c.

{
    NTSTATUS Status;
    PWSTR pUNCServerName = NULL;
 
    if (!phEventLog || !BackupFileNameU || (BackupFileNameU->Length == 0))
        return STATUS_INVALID_PARAMETER;
 
    if (UNCServerNameU && (UNCServerNameU->Length != 0))
        pUNCServerName = UNCServerNameU->Buffer;
 
    *phEventLog = NULL;
 
    RpcTryExcept
    {
        Status = ElfrOpenBELW(pUNCServerName,
                              (PRPC_UNICODE_STRING)BackupFileNameU,
                              1,
                              1,
                              (IELF_HANDLE*)phEventLog);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by OpenBackupEventLogW().

ElfOpenEventLogA()

NTSTATUS NTAPI ElfOpenEventLogA	(	IN PANSI_STRING	UNCServerNameA,
		IN PANSI_STRING	SourceNameA,
		OUT PHANDLE	phEventLog
	)

Definition at line 885 of file eventlog.c.

{
    NTSTATUS Status;
    PSTR pUNCServerName = NULL;
 
    if (!phEventLog || !SourceNameA || (SourceNameA->Length == 0))
        return STATUS_INVALID_PARAMETER;
 
    if (UNCServerNameA && (UNCServerNameA->Length != 0))
        pUNCServerName = UNCServerNameA->Buffer;
 
    *phEventLog = NULL;
 
    RpcTryExcept
    {
        Status = ElfrOpenELA(pUNCServerName,
                             (PRPC_STRING)SourceNameA,
                             &EmptyStringA,
                             1,
                             1,
                             (IELF_HANDLE*)phEventLog);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by OpenEventLogA().

ElfOpenEventLogW()

NTSTATUS NTAPI ElfOpenEventLogW	(	IN PUNICODE_STRING	UNCServerNameU,
		IN PUNICODE_STRING	SourceNameU,
		OUT PHANDLE	phEventLog
	)

Definition at line 951 of file eventlog.c.

{
    NTSTATUS Status;
    PWSTR pUNCServerName = NULL;
 
    if (!phEventLog || !SourceNameU || (SourceNameU->Length == 0))
        return STATUS_INVALID_PARAMETER;
 
    if (UNCServerNameU && (UNCServerNameU->Length != 0))
        pUNCServerName = UNCServerNameU->Buffer;
 
    *phEventLog = NULL;
 
    RpcTryExcept
    {
        Status = ElfrOpenELW(pUNCServerName,
                             (PRPC_UNICODE_STRING)SourceNameU,
                             &EmptyStringU,
                             1,
                             1,
                             (IELF_HANDLE*)phEventLog);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by OpenEventLogW().

ElfReadEventLogA()

NTSTATUS NTAPI ElfReadEventLogA	(	IN HANDLE	hEventLog,
		IN ULONG	ReadFlags,
		IN ULONG	RecordOffset,
		OUT LPVOID	Buffer,
		IN ULONG	NumberOfBytesToRead,
		OUT PULONG	NumberOfBytesRead,
		OUT PULONG	MinNumberOfBytesNeeded
	)

Definition at line 1013 of file eventlog.c.

{
    NTSTATUS Status;
    ULONG Flags;
 
    if (!Buffer || !NumberOfBytesRead || !MinNumberOfBytesNeeded)
    {
        return STATUS_INVALID_PARAMETER;
    }
 
    Flags = ReadFlags & (EVENTLOG_SEQUENTIAL_READ | EVENTLOG_SEEK_READ);
    if (Flags == (EVENTLOG_SEQUENTIAL_READ | EVENTLOG_SEEK_READ))
    {
        return STATUS_INVALID_PARAMETER;
    }
 
    Flags = ReadFlags & (EVENTLOG_FORWARDS_READ | EVENTLOG_BACKWARDS_READ);
    if (Flags == (EVENTLOG_FORWARDS_READ | EVENTLOG_BACKWARDS_READ))
    {
        return STATUS_INVALID_PARAMETER;
    }
 
    RpcTryExcept
    {
        Status = ElfrReadELA(hEventLog,
                             ReadFlags,
                             RecordOffset,
                             NumberOfBytesToRead,
                             Buffer,
                             NumberOfBytesRead,
                             MinNumberOfBytesNeeded);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by ReadEventLogA().

ElfReadEventLogW()

NTSTATUS NTAPI ElfReadEventLogW	(	IN HANDLE	hEventLog,
		IN ULONG	ReadFlags,
		IN ULONG	RecordOffset,
		OUT LPVOID	Buffer,
		IN ULONG	NumberOfBytesToRead,
		OUT PULONG	NumberOfBytesRead,
		OUT PULONG	MinNumberOfBytesNeeded
	)

Definition at line 1106 of file eventlog.c.

{
    NTSTATUS Status;
    ULONG Flags;
 
    if (!Buffer || !NumberOfBytesRead || !MinNumberOfBytesNeeded)
    {
        return STATUS_INVALID_PARAMETER;
    }
 
    Flags = ReadFlags & (EVENTLOG_SEQUENTIAL_READ | EVENTLOG_SEEK_READ);
    if (Flags == (EVENTLOG_SEQUENTIAL_READ | EVENTLOG_SEEK_READ))
    {
        return STATUS_INVALID_PARAMETER;
    }
 
    Flags = ReadFlags & (EVENTLOG_FORWARDS_READ | EVENTLOG_BACKWARDS_READ);
    if (Flags == (EVENTLOG_FORWARDS_READ | EVENTLOG_BACKWARDS_READ))
    {
        return STATUS_INVALID_PARAMETER;
    }
 
    RpcTryExcept
    {
        Status = ElfrReadELW(hEventLog,
                             ReadFlags,
                             RecordOffset,
                             NumberOfBytesToRead,
                             Buffer,
                             NumberOfBytesRead,
                             MinNumberOfBytesNeeded);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by ReadEventLogW().

ElfRegisterEventSourceA()

NTSTATUS NTAPI ElfRegisterEventSourceA	(	IN PANSI_STRING	UNCServerNameA,
		IN PANSI_STRING	SourceNameA,
		OUT PHANDLE	phEventLog
	)

Definition at line 1190 of file eventlog.c.

{
    NTSTATUS Status;
    PSTR pUNCServerName = NULL;
 
    if (!phEventLog || !SourceNameA || (SourceNameA->Length == 0))
        return STATUS_INVALID_PARAMETER;
 
    if (UNCServerNameA && (UNCServerNameA->Length != 0))
        pUNCServerName = UNCServerNameA->Buffer;
 
    *phEventLog = NULL;
 
    RpcTryExcept
    {
        Status = ElfrRegisterEventSourceA(pUNCServerName,
                                          (PRPC_STRING)SourceNameA,
                                          &EmptyStringA,
                                          1,
                                          1,
                                          (IELF_HANDLE*)phEventLog);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by RegisterEventSourceA().

ElfRegisterEventSourceW()

NTSTATUS NTAPI ElfRegisterEventSourceW	(	IN PUNICODE_STRING	UNCServerNameU,
		IN PUNICODE_STRING	SourceNameU,
		OUT PHANDLE	phEventLog
	)

Definition at line 1261 of file eventlog.c.

{
    NTSTATUS Status;
    PWSTR pUNCServerName = NULL;
 
    if (!phEventLog || !SourceNameU || (SourceNameU->Length == 0))
        return STATUS_INVALID_PARAMETER;
 
    if (UNCServerNameU && (UNCServerNameU->Length != 0))
        pUNCServerName = UNCServerNameU->Buffer;
 
    *phEventLog = NULL;
 
    RpcTryExcept
    {
        Status = ElfrRegisterEventSourceW(pUNCServerName,
                                          (PRPC_UNICODE_STRING)SourceNameU,
                                          &EmptyStringU,
                                          1,
                                          1,
                                          (IELF_HANDLE*)phEventLog);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by RegisterEventSourceW(), and UserpLogHardError().

ElfReportEventA()

NTSTATUS NTAPI ElfReportEventA	(	IN HANDLE	hEventLog,
		IN USHORT	EventType,
		IN USHORT	EventCategory,
		IN ULONG	EventID,
		IN PSID	UserSID,
		IN USHORT	NumStrings,
		IN ULONG	DataSize,
		IN PANSI_STRING *	Strings,
		IN PVOID	Data,
		IN USHORT	Flags,
		IN OUT PULONG	RecordNumber,
		IN OUT PULONG	TimeWritten
	)

Definition at line 1323 of file eventlog.c.

{
    NTSTATUS Status;
    LARGE_INTEGER SystemTime;
    ULONG Time;
    ULONG dwSize;
    ANSI_STRING ComputerName;
    CHAR szComputerName[MAX_COMPUTERNAME_LENGTH + 1];
 
    dwSize = ARRAYSIZE(szComputerName);
    GetComputerNameA(szComputerName, &dwSize);
    RtlInitAnsiString(&ComputerName, szComputerName);
 
    NtQuerySystemTime(&SystemTime);
    RtlTimeToSecondsSince1970(&SystemTime, &Time);
 
    RpcTryExcept
    {
        Status = ElfrReportEventA(hEventLog,
                                  Time,
                                  EventType,
                                  EventCategory,
                                  EventID,
                                  NumStrings,
                                  DataSize,
                                  (PRPC_STRING)&ComputerName,
                                  (PRPC_SID)UserSID,
                                  (PRPC_STRING*)Strings,
                                  Data,
                                  Flags,
                                  RecordNumber,
                                  TimeWritten);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by ReportEventA().

ElfReportEventAndSourceW()

NTSTATUS NTAPI ElfReportEventAndSourceW	(	IN HANDLE	hEventLog,
		IN ULONG	Time,
		IN PUNICODE_STRING	ComputerName,
		IN USHORT	EventType,
		IN USHORT	EventCategory,
		IN ULONG	EventID,
		IN PSID	UserSID,
		IN PUNICODE_STRING	SourceName,
		IN USHORT	NumStrings,
		IN ULONG	DataSize,
		IN PUNICODE_STRING *	Strings,
		IN PVOID	Data,
		IN USHORT	Flags,
		IN OUT PULONG	RecordNumber,
		IN OUT PULONG	TimeWritten
	)

Definition at line 1586 of file eventlog.c.

{
    NTSTATUS Status;
 
    RpcTryExcept
    {
        Status = ElfrReportEventAndSourceW(hEventLog,
                                           Time,
                                           EventType,
                                           EventCategory,
                                           EventID,
                                           (PRPC_UNICODE_STRING)SourceName,
                                           NumStrings,
                                           DataSize,
                                           (PRPC_UNICODE_STRING)ComputerName,
                                           (PRPC_SID)UserSID,
                                           (PRPC_UNICODE_STRING*)Strings,
                                           (PBYTE)Data,
                                           Flags,
                                           RecordNumber,
                                           TimeWritten);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

ElfReportEventW()

NTSTATUS NTAPI ElfReportEventW	(	IN HANDLE	hEventLog,
		IN USHORT	EventType,
		IN USHORT	EventCategory,
		IN ULONG	EventID,
		IN PSID	UserSID,
		IN USHORT	NumStrings,
		IN ULONG	DataSize,
		IN PUNICODE_STRING *	Strings,
		IN PVOID	Data,
		IN USHORT	Flags,
		IN OUT PULONG	RecordNumber,
		IN OUT PULONG	TimeWritten
	)

Definition at line 1462 of file eventlog.c.

{
    NTSTATUS Status;
    LARGE_INTEGER SystemTime;
    ULONG Time;
    ULONG dwSize;
    UNICODE_STRING ComputerName;
    WCHAR szComputerName[MAX_COMPUTERNAME_LENGTH + 1];
 
    dwSize = ARRAYSIZE(szComputerName);
    GetComputerNameW(szComputerName, &dwSize);
    RtlInitUnicodeString(&ComputerName, szComputerName);
 
    NtQuerySystemTime(&SystemTime);
    RtlTimeToSecondsSince1970(&SystemTime, &Time);
 
    RpcTryExcept
    {
        Status = ElfrReportEventW(hEventLog,
                                  Time,
                                  EventType,
                                  EventCategory,
                                  EventID,
                                  NumStrings,
                                  DataSize,
                                  (PRPC_UNICODE_STRING)&ComputerName,
                                  (PRPC_SID)UserSID,
                                  (PRPC_UNICODE_STRING*)Strings,
                                  Data,
                                  Flags,
                                  RecordNumber,
                                  TimeWritten);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by ReportEventW(), and UserpLogHardError().