10 #define __EVENTLOG_H__ 15 #define WIN32_NO_STATUS 19 #define NTOS_MODE_USER 23 #define ROUND_DOWN(n, align) (((ULONG)n) & ~((align) - 1l)) 24 #define ROUND_UP(n, align) ROUND_DOWN(((ULONG)n) + (align) - 1, (align)) 28 #include <eventlogrpc_s.h> 53 #define LOG_HANDLE_BACKUP_FILE 1 struct _EVENTSOURCE * PEVENTSOURCE
NTSTATUS ProcessPortMessage(VOID)
VOID InitEventSourceList(VOID)
struct _LOGFILE * PLOGFILE
VOID LogfClose(PLOGFILE LogFile, BOOLEAN ForceClose)
NTSTATUS WINAPI PortThreadRoutine(PVOID Param)
NTSTATUS LogfClearFile(PLOGFILE LogFile, PUNICODE_STRING BackupFileName)
BOOLEAN NTAPI RtlFreeHeap(IN PVOID HeapHandle, IN ULONG Flags, IN PVOID HeapBase)
static __inline void LogfFreeRecord(PEVENTLOGRECORD Record)
LIST_ENTRY LogHandleListEntry
NTSTATUS LogfReadEvents(PLOGFILE LogFile, ULONG Flags, PULONG RecordNumber, ULONG BufSize, PBYTE Buffer, PULONG BytesRead, PULONG BytesNeeded, BOOLEAN Ansi)
DWORD LogfListItemCount(VOID)
struct _LOGHANDLE * PLOGHANDLE
_Must_inspect_result_ _In_ WDFIOTARGET _In_opt_ WDFREQUEST _In_opt_ PWDF_MEMORY_DESCRIPTOR _In_opt_ PLONGLONG _In_opt_ PWDF_REQUEST_SEND_OPTIONS _Out_opt_ PULONG_PTR BytesRead
_In_ struct _KBUGCHECK_REASON_CALLBACK_RECORD * Record
VOID LogfListInitialize(VOID)
VOID LogfReportEvent(USHORT wType, USHORT wCategory, ULONG dwEventId, USHORT wNumStrings, PWSTR pStrings, ULONG dwDataSize, PVOID pRawData)
LIST_ENTRY EventSourceListEntry
BOOL LoadEventSources(HKEY hKey, PLOGFILE pLogFile)
NTSTATUS LogfBackupFile(PLOGFILE LogFile, PUNICODE_STRING BackupFileName)
DWORD WINAPI RpcThreadRoutine(LPVOID lpParameter)
PEVENTSOURCE GetEventSourceByName(LPCWSTR Name)
VOID PRINT_RECORD(PEVENTLOGRECORD pRec)
PLOGFILE LogfListItemByIndex(DWORD Index)
_Must_inspect_result_ _In_ ULONG Flags
_In_ WDFCOLLECTION _In_ ULONG Index
struct _LOGHANDLE LOGHANDLE
PEVENTLOGRECORD LogfAllocAndBuildNewRecord(PSIZE_T pRecSize, ULONG Time, USHORT wType, USHORT wCategory, ULONG dwEventId, PUNICODE_STRING SourceName, PUNICODE_STRING ComputerName, ULONG dwSidLength, PSID pUserSid, USHORT wNumStrings, PWSTR pStrings, ULONG dwDataSize, PVOID pRawData)
struct _EVENTSOURCE EVENTSOURCE
PEVENTSOURCE EventLogSource
NTSTATUS LogfWriteRecord(PLOGFILE LogFile, PEVENTLOGRECORD Record, SIZE_T BufSize)
NTSTATUS InitLogPort(VOID)
NTSTATUS LogfCreate(PLOGFILE *LogFile, PCWSTR LogName, PUNICODE_STRING FileName, ULONG MaxSize, ULONG Retention, BOOLEAN Permanent, BOOLEAN Backup)
PLOGFILE LogfListItemByName(LPCWSTR Name)
static PLARGE_INTEGER Time