{ "Constants":[ { "Name":"EVT_VARIANT_TYPE_MASK" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":127 ,"Attrs":[] } ,{ "Name":"EVT_VARIANT_TYPE_ARRAY" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":128 ,"Attrs":[] } ,{ "Name":"EVT_READ_ACCESS" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":1 ,"Attrs":[] } ,{ "Name":"EVT_WRITE_ACCESS" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":2 ,"Attrs":[] } ,{ "Name":"EVT_CLEAR_ACCESS" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":4 ,"Attrs":[] } ,{ "Name":"EVT_ALL_ACCESS" ,"Type":{"Kind":"Native","Name":"UInt32"} ,"ValueType":"UInt32" ,"Value":7 ,"Attrs":[] } ] ,"Types":[ { "Name":"REPORT_EVENT_TYPE" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EVENTLOG_SUCCESS","Value":0} ,{"Name":"EVENTLOG_AUDIT_FAILURE","Value":16} ,{"Name":"EVENTLOG_AUDIT_SUCCESS","Value":8} ,{"Name":"EVENTLOG_ERROR_TYPE","Value":1} ,{"Name":"EVENTLOG_INFORMATION_TYPE","Value":4} ,{"Name":"EVENTLOG_WARNING_TYPE","Value":2} ] ,"IntegerBase":"UInt16" } ,{ "Name":"READ_EVENT_LOG_READ_FLAGS" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EVENTLOG_SEEK_READ","Value":2} ,{"Name":"EVENTLOG_SEQUENTIAL_READ","Value":1} ] ,"IntegerBase":"UInt32" } ,{ "Name":"EventLogHandle" ,"Architectures":[] ,"Platform":null ,"Kind":"NativeTypedef" ,"AlsoUsableFor":null ,"Def":{"Kind":"Native","Name":"IntPtr"} ,"FreeFunc":"CloseEventLog" ,"InvalidHandleValue":0 } ,{ "Name":"EventSourceHandle" ,"Architectures":[] ,"Platform":null ,"Kind":"NativeTypedef" ,"AlsoUsableFor":null ,"Def":{"Kind":"Native","Name":"IntPtr"} ,"FreeFunc":"DeregisterEventSource" ,"InvalidHandleValue":0 } ,{ "Name":"EVT_VARIANT_TYPE" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EvtVarTypeNull","Value":0} ,{"Name":"EvtVarTypeString","Value":1} ,{"Name":"EvtVarTypeAnsiString","Value":2} ,{"Name":"EvtVarTypeSByte","Value":3} ,{"Name":"EvtVarTypeByte","Value":4} ,{"Name":"EvtVarTypeInt16","Value":5} ,{"Name":"EvtVarTypeUInt16","Value":6} ,{"Name":"EvtVarTypeInt32","Value":7} ,{"Name":"EvtVarTypeUInt32","Value":8} ,{"Name":"EvtVarTypeInt64","Value":9} ,{"Name":"EvtVarTypeUInt64","Value":10} ,{"Name":"EvtVarTypeSingle","Value":11} ,{"Name":"EvtVarTypeDouble","Value":12} ,{"Name":"EvtVarTypeBoolean","Value":13} ,{"Name":"EvtVarTypeBinary","Value":14} ,{"Name":"EvtVarTypeGuid","Value":15} ,{"Name":"EvtVarTypeSizeT","Value":16} ,{"Name":"EvtVarTypeFileTime","Value":17} ,{"Name":"EvtVarTypeSysTime","Value":18} ,{"Name":"EvtVarTypeSid","Value":19} ,{"Name":"EvtVarTypeHexInt32","Value":20} ,{"Name":"EvtVarTypeHexInt64","Value":21} ,{"Name":"EvtVarTypeEvtHandle","Value":32} ,{"Name":"EvtVarTypeEvtXml","Value":35} ] ,"IntegerBase":"Int32" } ,{ "Name":"EVT_VARIANT" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Fields":[ {"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Union","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":[]} ,{"Name":"Count","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Type","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[ { "Name":"_Anonymous_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Fields":[ {"Name":"BooleanVal","Type":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"SByteVal","Type":{"Kind":"Native","Name":"SByte"},"Attrs":[]} ,{"Name":"Int16Val","Type":{"Kind":"Native","Name":"Int16"},"Attrs":[]} ,{"Name":"Int32Val","Type":{"Kind":"Native","Name":"Int32"},"Attrs":[]} ,{"Name":"Int64Val","Type":{"Kind":"Native","Name":"Int64"},"Attrs":[]} ,{"Name":"ByteVal","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]} ,{"Name":"UInt16Val","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"UInt32Val","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"UInt64Val","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ,{"Name":"SingleVal","Type":{"Kind":"Native","Name":"Single"},"Attrs":[]} ,{"Name":"DoubleVal","Type":{"Kind":"Native","Name":"Double"},"Attrs":[]} ,{"Name":"FileTimeVal","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]} ,{"Name":"SysTimeVal","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"SYSTEMTIME","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]} ,{"Name":"GuidVal","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":[]} ,{"Name":"StringVal","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["Const"]} ,{"Name":"AnsiStringVal","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["Const"]} ,{"Name":"BinaryVal","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Byte"}},"Attrs":[]} ,{"Name":"SidVal","Type":{"Kind":"ApiRef","Name":"PSID","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"SizeTVal","Type":{"Kind":"Native","Name":"UIntPtr"},"Attrs":[]} ,{"Name":"BooleanArr","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]} ,{"Name":"SByteArr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"SByte"}},"Attrs":[]} ,{"Name":"Int16Arr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Int16"}},"Attrs":[]} ,{"Name":"Int32Arr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Int32"}},"Attrs":[]} ,{"Name":"Int64Arr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Int64"}},"Attrs":[]} ,{"Name":"ByteArr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Byte"}},"Attrs":[]} ,{"Name":"UInt16Arr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt16"}},"Attrs":[]} ,{"Name":"UInt32Arr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":[]} ,{"Name":"UInt64Arr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt64"}},"Attrs":[]} ,{"Name":"SingleArr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Single"}},"Attrs":[]} ,{"Name":"DoubleArr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Double"}},"Attrs":[]} ,{"Name":"FileTimeArr","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"FILETIME","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]} ,{"Name":"SysTimeArr","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"SYSTEMTIME","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]} ,{"Name":"GuidArr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":[]} ,{"Name":"StringArr","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]} ,{"Name":"AnsiStringArr","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]} ,{"Name":"SidArr","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PSID","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]} ,{"Name":"SizeTArr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UIntPtr"}},"Attrs":[]} ,{"Name":"EvtHandleVal","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":[]} ,{"Name":"XmlVal","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["Const"]} ,{"Name":"XmlValArr","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]} ] ,"NestedTypes":[ ] } ] } ,{ "Name":"EVT_LOGIN_CLASS" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EvtRpcLogin","Value":1} ] ,"IntegerBase":"Int32" } ,{ "Name":"EVT_RPC_LOGIN_FLAGS" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EvtRpcLoginAuthDefault","Value":0} ,{"Name":"EvtRpcLoginAuthNegotiate","Value":1} ,{"Name":"EvtRpcLoginAuthKerberos","Value":2} ,{"Name":"EvtRpcLoginAuthNTLM","Value":3} ] ,"IntegerBase":"Int32" } ,{ "Name":"EVT_RPC_LOGIN" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Fields":[ {"Name":"Server","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"User","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"Domain","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"Password","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[ ] } ,{ "Name":"EVT_QUERY_FLAGS" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EvtQueryChannelPath","Value":1} ,{"Name":"EvtQueryFilePath","Value":2} ,{"Name":"EvtQueryForwardDirection","Value":256} ,{"Name":"EvtQueryReverseDirection","Value":512} ,{"Name":"EvtQueryTolerateQueryErrors","Value":4096} ] ,"IntegerBase":"Int32" } ,{ "Name":"EVT_SEEK_FLAGS" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EvtSeekRelativeToFirst","Value":1} ,{"Name":"EvtSeekRelativeToLast","Value":2} ,{"Name":"EvtSeekRelativeToCurrent","Value":3} ,{"Name":"EvtSeekRelativeToBookmark","Value":4} ,{"Name":"EvtSeekOriginMask","Value":7} ,{"Name":"EvtSeekStrict","Value":65536} ] ,"IntegerBase":"Int32" } ,{ "Name":"EVT_SUBSCRIBE_FLAGS" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EvtSubscribeToFutureEvents","Value":1} ,{"Name":"EvtSubscribeStartAtOldestRecord","Value":2} ,{"Name":"EvtSubscribeStartAfterBookmark","Value":3} ,{"Name":"EvtSubscribeOriginMask","Value":3} ,{"Name":"EvtSubscribeTolerateQueryErrors","Value":4096} ,{"Name":"EvtSubscribeStrict","Value":65536} ] ,"IntegerBase":"Int32" } ,{ "Name":"EVT_SUBSCRIBE_NOTIFY_ACTION" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EvtSubscribeActionError","Value":0} ,{"Name":"EvtSubscribeActionDeliver","Value":1} ] ,"IntegerBase":"Int32" } ,{ "Name":"EVT_SUBSCRIBE_CALLBACK" ,"Architectures":[] ,"Platform":null ,"Kind":"FunctionPointer" ,"SetLastError":false ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Attrs":[] ,"Params":[ {"Name":"Action","Type":{"Kind":"ApiRef","Name":"EVT_SUBSCRIBE_NOTIFY_ACTION","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ,{"Name":"UserContext","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["Optional"]} ,{"Name":"Event","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]} ] } ,{ "Name":"EVT_SYSTEM_PROPERTY_ID" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EvtSystemProviderName","Value":0} ,{"Name":"EvtSystemProviderGuid","Value":1} ,{"Name":"EvtSystemEventID","Value":2} ,{"Name":"EvtSystemQualifiers","Value":3} ,{"Name":"EvtSystemLevel","Value":4} ,{"Name":"EvtSystemTask","Value":5} ,{"Name":"EvtSystemOpcode","Value":6} ,{"Name":"EvtSystemKeywords","Value":7} ,{"Name":"EvtSystemTimeCreated","Value":8} ,{"Name":"EvtSystemEventRecordId","Value":9} ,{"Name":"EvtSystemActivityID","Value":10} ,{"Name":"EvtSystemRelatedActivityID","Value":11} ,{"Name":"EvtSystemProcessID","Value":12} ,{"Name":"EvtSystemThreadID","Value":13} ,{"Name":"EvtSystemChannel","Value":14} ,{"Name":"EvtSystemComputer","Value":15} ,{"Name":"EvtSystemUserID","Value":16} ,{"Name":"EvtSystemVersion","Value":17} ,{"Name":"EvtSystemPropertyIdEND","Value":18} ] ,"IntegerBase":"Int32" } ,{ "Name":"EVT_RENDER_CONTEXT_FLAGS" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EvtRenderContextValues","Value":0} ,{"Name":"EvtRenderContextSystem","Value":1} ,{"Name":"EvtRenderContextUser","Value":2} ] ,"IntegerBase":"Int32" } ,{ "Name":"EVT_RENDER_FLAGS" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EvtRenderEventValues","Value":0} ,{"Name":"EvtRenderEventXml","Value":1} ,{"Name":"EvtRenderBookmark","Value":2} ] ,"IntegerBase":"Int32" } ,{ "Name":"EVT_FORMAT_MESSAGE_FLAGS" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EvtFormatMessageEvent","Value":1} ,{"Name":"EvtFormatMessageLevel","Value":2} ,{"Name":"EvtFormatMessageTask","Value":3} ,{"Name":"EvtFormatMessageOpcode","Value":4} ,{"Name":"EvtFormatMessageKeyword","Value":5} ,{"Name":"EvtFormatMessageChannel","Value":6} ,{"Name":"EvtFormatMessageProvider","Value":7} ,{"Name":"EvtFormatMessageId","Value":8} ,{"Name":"EvtFormatMessageXml","Value":9} ] ,"IntegerBase":"Int32" } ,{ "Name":"EVT_OPEN_LOG_FLAGS" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EvtOpenChannelPath","Value":1} ,{"Name":"EvtOpenFilePath","Value":2} ] ,"IntegerBase":"Int32" } ,{ "Name":"EVT_LOG_PROPERTY_ID" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EvtLogCreationTime","Value":0} ,{"Name":"EvtLogLastAccessTime","Value":1} ,{"Name":"EvtLogLastWriteTime","Value":2} ,{"Name":"EvtLogFileSize","Value":3} ,{"Name":"EvtLogAttributes","Value":4} ,{"Name":"EvtLogNumberOfLogRecords","Value":5} ,{"Name":"EvtLogOldestRecordNumber","Value":6} ,{"Name":"EvtLogFull","Value":7} ] ,"IntegerBase":"Int32" } ,{ "Name":"EVT_EXPORTLOG_FLAGS" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EvtExportLogChannelPath","Value":1} ,{"Name":"EvtExportLogFilePath","Value":2} ,{"Name":"EvtExportLogTolerateQueryErrors","Value":4096} ,{"Name":"EvtExportLogOverwrite","Value":8192} ] ,"IntegerBase":"Int32" } ,{ "Name":"EVT_CHANNEL_CONFIG_PROPERTY_ID" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EvtChannelConfigEnabled","Value":0} ,{"Name":"EvtChannelConfigIsolation","Value":1} ,{"Name":"EvtChannelConfigType","Value":2} ,{"Name":"EvtChannelConfigOwningPublisher","Value":3} ,{"Name":"EvtChannelConfigClassicEventlog","Value":4} ,{"Name":"EvtChannelConfigAccess","Value":5} ,{"Name":"EvtChannelLoggingConfigRetention","Value":6} ,{"Name":"EvtChannelLoggingConfigAutoBackup","Value":7} ,{"Name":"EvtChannelLoggingConfigMaxSize","Value":8} ,{"Name":"EvtChannelLoggingConfigLogFilePath","Value":9} ,{"Name":"EvtChannelPublishingConfigLevel","Value":10} ,{"Name":"EvtChannelPublishingConfigKeywords","Value":11} ,{"Name":"EvtChannelPublishingConfigControlGuid","Value":12} ,{"Name":"EvtChannelPublishingConfigBufferSize","Value":13} ,{"Name":"EvtChannelPublishingConfigMinBuffers","Value":14} ,{"Name":"EvtChannelPublishingConfigMaxBuffers","Value":15} ,{"Name":"EvtChannelPublishingConfigLatency","Value":16} ,{"Name":"EvtChannelPublishingConfigClockType","Value":17} ,{"Name":"EvtChannelPublishingConfigSidType","Value":18} ,{"Name":"EvtChannelPublisherList","Value":19} ,{"Name":"EvtChannelPublishingConfigFileMax","Value":20} ,{"Name":"EvtChannelConfigPropertyIdEND","Value":21} ] ,"IntegerBase":"Int32" } ,{ "Name":"EVT_CHANNEL_TYPE" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EvtChannelTypeAdmin","Value":0} ,{"Name":"EvtChannelTypeOperational","Value":1} ,{"Name":"EvtChannelTypeAnalytic","Value":2} ,{"Name":"EvtChannelTypeDebug","Value":3} ] ,"IntegerBase":"Int32" } ,{ "Name":"EVT_CHANNEL_ISOLATION_TYPE" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EvtChannelIsolationTypeApplication","Value":0} ,{"Name":"EvtChannelIsolationTypeSystem","Value":1} ,{"Name":"EvtChannelIsolationTypeCustom","Value":2} ] ,"IntegerBase":"Int32" } ,{ "Name":"EVT_CHANNEL_CLOCK_TYPE" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EvtChannelClockTypeSystemTime","Value":0} ,{"Name":"EvtChannelClockTypeQPC","Value":1} ] ,"IntegerBase":"Int32" } ,{ "Name":"EVT_CHANNEL_SID_TYPE" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EvtChannelSidTypeNone","Value":0} ,{"Name":"EvtChannelSidTypePublishing","Value":1} ] ,"IntegerBase":"Int32" } ,{ "Name":"EVT_CHANNEL_REFERENCE_FLAGS" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EvtChannelReferenceImported","Value":1} ] ,"IntegerBase":"Int32" } ,{ "Name":"EVT_PUBLISHER_METADATA_PROPERTY_ID" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EvtPublisherMetadataPublisherGuid","Value":0} ,{"Name":"EvtPublisherMetadataResourceFilePath","Value":1} ,{"Name":"EvtPublisherMetadataParameterFilePath","Value":2} ,{"Name":"EvtPublisherMetadataMessageFilePath","Value":3} ,{"Name":"EvtPublisherMetadataHelpLink","Value":4} ,{"Name":"EvtPublisherMetadataPublisherMessageID","Value":5} ,{"Name":"EvtPublisherMetadataChannelReferences","Value":6} ,{"Name":"EvtPublisherMetadataChannelReferencePath","Value":7} ,{"Name":"EvtPublisherMetadataChannelReferenceIndex","Value":8} ,{"Name":"EvtPublisherMetadataChannelReferenceID","Value":9} ,{"Name":"EvtPublisherMetadataChannelReferenceFlags","Value":10} ,{"Name":"EvtPublisherMetadataChannelReferenceMessageID","Value":11} ,{"Name":"EvtPublisherMetadataLevels","Value":12} ,{"Name":"EvtPublisherMetadataLevelName","Value":13} ,{"Name":"EvtPublisherMetadataLevelValue","Value":14} ,{"Name":"EvtPublisherMetadataLevelMessageID","Value":15} ,{"Name":"EvtPublisherMetadataTasks","Value":16} ,{"Name":"EvtPublisherMetadataTaskName","Value":17} ,{"Name":"EvtPublisherMetadataTaskEventGuid","Value":18} ,{"Name":"EvtPublisherMetadataTaskValue","Value":19} ,{"Name":"EvtPublisherMetadataTaskMessageID","Value":20} ,{"Name":"EvtPublisherMetadataOpcodes","Value":21} ,{"Name":"EvtPublisherMetadataOpcodeName","Value":22} ,{"Name":"EvtPublisherMetadataOpcodeValue","Value":23} ,{"Name":"EvtPublisherMetadataOpcodeMessageID","Value":24} ,{"Name":"EvtPublisherMetadataKeywords","Value":25} ,{"Name":"EvtPublisherMetadataKeywordName","Value":26} ,{"Name":"EvtPublisherMetadataKeywordValue","Value":27} ,{"Name":"EvtPublisherMetadataKeywordMessageID","Value":28} ,{"Name":"EvtPublisherMetadataPropertyIdEND","Value":29} ] ,"IntegerBase":"Int32" } ,{ "Name":"EVT_EVENT_METADATA_PROPERTY_ID" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EventMetadataEventID","Value":0} ,{"Name":"EventMetadataEventVersion","Value":1} ,{"Name":"EventMetadataEventChannel","Value":2} ,{"Name":"EventMetadataEventLevel","Value":3} ,{"Name":"EventMetadataEventOpcode","Value":4} ,{"Name":"EventMetadataEventTask","Value":5} ,{"Name":"EventMetadataEventKeyword","Value":6} ,{"Name":"EventMetadataEventMessageID","Value":7} ,{"Name":"EventMetadataEventTemplate","Value":8} ,{"Name":"EvtEventMetadataPropertyIdEND","Value":9} ] ,"IntegerBase":"Int32" } ,{ "Name":"EVT_QUERY_PROPERTY_ID" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EvtQueryNames","Value":0} ,{"Name":"EvtQueryStatuses","Value":1} ,{"Name":"EvtQueryPropertyIdEND","Value":2} ] ,"IntegerBase":"Int32" } ,{ "Name":"EVT_EVENT_PROPERTY_ID" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"EvtEventQueryIDs","Value":0} ,{"Name":"EvtEventPath","Value":1} ,{"Name":"EvtEventPropertyIdEND","Value":2} ] ,"IntegerBase":"Int32" } ,{ "Name":"EVENTLOGRECORD" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Fields":[ {"Name":"Length","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"Reserved","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"RecordNumber","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"TimeGenerated","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"TimeWritten","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"EventID","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"EventType","Type":{"Kind":"ApiRef","Name":"REPORT_EVENT_TYPE","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":[]} ,{"Name":"NumStrings","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"EventCategory","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"ReservedFlags","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]} ,{"Name":"ClosingRecordNumber","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"StringOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"UserSidLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"UserSidOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"DataLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"DataOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[ ] } ,{ "Name":"EVENTSFORLOGFILE" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Fields":[ {"Name":"ulSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"szLogicalLogFile","Type":{"Kind":"Array","Shape":{"Size":256},"Child":{"Kind":"Native","Name":"Char"}},"Attrs":[]} ,{"Name":"ulNumRecords","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"pEventLogRecords","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"ApiRef","Name":"EVENTLOGRECORD","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":[]} ] ,"NestedTypes":[ ] } ,{ "Name":"EVENTLOG_FULL_INFORMATION" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Fields":[ {"Name":"dwFull","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ] ,"NestedTypes":[ ] } ] ,"Functions":[ { "Name":"EvtOpenSession" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"Native","Name":"IntPtr"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"LoginClass","Type":{"Kind":"ApiRef","Name":"EVT_LOGIN_CLASS","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ,{"Name":"Login","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In"]} ,{"Name":"Timeout","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In","Reserved"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In","Reserved"]} ] } ,{ "Name":"EvtClose" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"Object","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]} ] } ,{ "Name":"EvtCancel" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"Object","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]} ] } ,{ "Name":"EvtGetExtendedStatus" ,"SetLastError":false ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"Native","Name":"UInt32"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"Buffer","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":0,"Child":{"Kind":"Native","Name":"Char"}},"Attrs":["Out","Optional"]} ,{"Name":"BufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] } ,{ "Name":"EvtQuery" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"Native","Name":"IntPtr"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]} ,{"Name":"Path","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"Query","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ] } ,{ "Name":"EvtNext" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"ResultSet","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]} ,{"Name":"EventsSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"Events","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"Native","Name":"IntPtr"}},"Attrs":["Out"]} ,{"Name":"Timeout","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"Returned","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]} ] } ,{ "Name":"EvtSeek" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"ResultSet","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]} ,{"Name":"Position","Type":{"Kind":"Native","Name":"Int64"},"Attrs":["In"]} ,{"Name":"Bookmark","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]} ,{"Name":"Timeout","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In","Reserved"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ] } ,{ "Name":"EvtSubscribe" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"Native","Name":"IntPtr"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]} ,{"Name":"SignalEvent","Type":{"Kind":"ApiRef","Name":"HANDLE","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional"]} ,{"Name":"ChannelPath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"Query","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"Bookmark","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]} ,{"Name":"Context","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["Optional"]} ,{"Name":"Callback","Type":{"Kind":"ApiRef","Name":"EVT_SUBSCRIBE_CALLBACK","TargetKind":"FunctionPointer","Api":"System.EventLog","Parents":[]},"Attrs":["Optional"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ] } ,{ "Name":"EvtCreateRenderContext" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"Native","Name":"IntPtr"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"ValuePathsCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"ValuePaths","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":0,"Child":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":["In","Optional"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ] } ,{ "Name":"EvtRender" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"Context","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]} ,{"Name":"Fragment","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"Buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":3},"Optional"]} ,{"Name":"BufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ,{"Name":"PropertyCount","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] } ,{ "Name":"EvtFormatMessage" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"PublisherMetadata","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]} ,{"Name":"Event","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]} ,{"Name":"MessageId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"ValueCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"Values","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":3,"Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["In","Optional"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"Buffer","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":6,"Child":{"Kind":"Native","Name":"Char"}},"Attrs":["Out","Optional"]} ,{"Name":"BufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] } ,{ "Name":"EvtOpenLog" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"Native","Name":"IntPtr"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]} ,{"Name":"Path","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ] } ,{ "Name":"EvtGetLogInfo" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"Log","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]} ,{"Name":"PropertyId","Type":{"Kind":"ApiRef","Name":"EVT_LOG_PROPERTY_ID","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ,{"Name":"PropertyValueBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"PropertyValueBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":2},"Optional"]} ,{"Name":"PropertyValueBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] } ,{ "Name":"EvtClearLog" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]} ,{"Name":"ChannelPath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]} ,{"Name":"TargetFilePath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ] } ,{ "Name":"EvtExportLog" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]} ,{"Name":"Path","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"Query","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"TargetFilePath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ] } ,{ "Name":"EvtArchiveExportedLog" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]} ,{"Name":"LogFilePath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]} ,{"Name":"Locale","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ] } ,{ "Name":"EvtOpenChannelEnum" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"Native","Name":"IntPtr"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ] } ,{ "Name":"EvtNextChannelPath" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"ChannelEnum","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]} ,{"Name":"ChannelPathBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"ChannelPathBuffer","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"Native","Name":"Char"}},"Attrs":["Out","Optional"]} ,{"Name":"ChannelPathBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] } ,{ "Name":"EvtOpenChannelConfig" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"Native","Name":"IntPtr"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]} ,{"Name":"ChannelPath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ] } ,{ "Name":"EvtSaveChannelConfig" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"ChannelConfig","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ] } ,{ "Name":"EvtSetChannelConfigProperty" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"ChannelConfig","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]} ,{"Name":"PropertyId","Type":{"Kind":"ApiRef","Name":"EVT_CHANNEL_CONFIG_PROPERTY_ID","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"PropertyValue","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["In"]} ] } ,{ "Name":"EvtGetChannelConfigProperty" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"ChannelConfig","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]} ,{"Name":"PropertyId","Type":{"Kind":"ApiRef","Name":"EVT_CHANNEL_CONFIG_PROPERTY_ID","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"PropertyValueBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"PropertyValueBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":3},"Optional"]} ,{"Name":"PropertyValueBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] } ,{ "Name":"EvtOpenPublisherEnum" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"Native","Name":"IntPtr"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ] } ,{ "Name":"EvtNextPublisherId" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"PublisherEnum","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]} ,{"Name":"PublisherIdBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"PublisherIdBuffer","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"Native","Name":"Char"}},"Attrs":["Out","Optional"]} ,{"Name":"PublisherIdBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] } ,{ "Name":"EvtOpenPublisherMetadata" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"Native","Name":"IntPtr"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]} ,{"Name":"PublisherId","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]} ,{"Name":"LogFilePath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"Locale","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ] } ,{ "Name":"EvtGetPublisherMetadataProperty" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"PublisherMetadata","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]} ,{"Name":"PropertyId","Type":{"Kind":"ApiRef","Name":"EVT_PUBLISHER_METADATA_PROPERTY_ID","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"PublisherMetadataPropertyBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"PublisherMetadataPropertyBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":3},"Optional"]} ,{"Name":"PublisherMetadataPropertyBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] } ,{ "Name":"EvtOpenEventMetadataEnum" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"Native","Name":"IntPtr"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"PublisherMetadata","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ] } ,{ "Name":"EvtNextEventMetadata" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"Native","Name":"IntPtr"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"EventMetadataEnum","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ] } ,{ "Name":"EvtGetEventMetadataProperty" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"EventMetadata","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]} ,{"Name":"PropertyId","Type":{"Kind":"ApiRef","Name":"EVT_EVENT_METADATA_PROPERTY_ID","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"EventMetadataPropertyBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"EventMetadataPropertyBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":3},"Optional"]} ,{"Name":"EventMetadataPropertyBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] } ,{ "Name":"EvtGetObjectArraySize" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"ObjectArray","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]} ,{"Name":"ObjectArraySize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] } ,{ "Name":"EvtGetObjectArrayProperty" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"ObjectArray","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]} ,{"Name":"PropertyId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"ArrayIndex","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"PropertyValueBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"PropertyValueBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":4},"Optional"]} ,{"Name":"PropertyValueBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] } ,{ "Name":"EvtGetQueryInfo" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"QueryOrSubscription","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]} ,{"Name":"PropertyId","Type":{"Kind":"ApiRef","Name":"EVT_QUERY_PROPERTY_ID","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ,{"Name":"PropertyValueBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"PropertyValueBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":2},"Optional"]} ,{"Name":"PropertyValueBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] } ,{ "Name":"EvtCreateBookmark" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"Native","Name":"IntPtr"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"BookmarkXml","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ] } ,{ "Name":"EvtUpdateBookmark" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"Bookmark","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]} ,{"Name":"Event","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]} ] } ,{ "Name":"EvtGetEventInfo" ,"SetLastError":true ,"DllImport":"wevtapi" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows6.0.6000" ,"Attrs":[] ,"Params":[ {"Name":"Event","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]} ,{"Name":"PropertyId","Type":{"Kind":"ApiRef","Name":"EVT_EVENT_PROPERTY_ID","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ,{"Name":"PropertyValueBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"PropertyValueBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":2},"Optional"]} ,{"Name":"PropertyValueBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] } ,{ "Name":"ClearEventLogA" ,"SetLastError":true ,"DllImport":"ADVAPI32" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ,{"Name":"lpBackupFileName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ] } ,{ "Name":"ClearEventLogW" ,"SetLastError":true ,"DllImport":"ADVAPI32" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ,{"Name":"lpBackupFileName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ] } ,{ "Name":"BackupEventLogA" ,"SetLastError":true ,"DllImport":"ADVAPI32" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ,{"Name":"lpBackupFileName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]} ] } ,{ "Name":"BackupEventLogW" ,"SetLastError":true ,"DllImport":"ADVAPI32" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ,{"Name":"lpBackupFileName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]} ] } ,{ "Name":"CloseEventLog" ,"SetLastError":true ,"DllImport":"ADVAPI32" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ] } ,{ "Name":"DeregisterEventSource" ,"SetLastError":true ,"DllImport":"ADVAPI32" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventSourceHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ] } ,{ "Name":"NotifyChangeEventLog" ,"SetLastError":true ,"DllImport":"ADVAPI32" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ,{"Name":"hEvent","Type":{"Kind":"ApiRef","Name":"HANDLE","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]} ] } ,{ "Name":"GetNumberOfEventLogRecords" ,"SetLastError":true ,"DllImport":"ADVAPI32" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ,{"Name":"NumberOfRecords","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] } ,{ "Name":"GetOldestEventLogRecord" ,"SetLastError":true ,"DllImport":"ADVAPI32" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ,{"Name":"OldestRecord","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] } ,{ "Name":"OpenEventLogA" ,"SetLastError":true ,"DllImport":"ADVAPI32" ,"ReturnType":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"lpUNCServerName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"lpSourceName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]} ] } ,{ "Name":"OpenEventLogW" ,"SetLastError":true ,"DllImport":"ADVAPI32" ,"ReturnType":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"lpUNCServerName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"lpSourceName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]} ] } ,{ "Name":"RegisterEventSourceA" ,"SetLastError":true ,"DllImport":"ADVAPI32" ,"ReturnType":{"Kind":"ApiRef","Name":"EventSourceHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"lpUNCServerName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"lpSourceName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]} ] } ,{ "Name":"RegisterEventSourceW" ,"SetLastError":true ,"DllImport":"ADVAPI32" ,"ReturnType":{"Kind":"ApiRef","Name":"EventSourceHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"lpUNCServerName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"lpSourceName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]} ] } ,{ "Name":"OpenBackupEventLogA" ,"SetLastError":true ,"DllImport":"ADVAPI32" ,"ReturnType":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"lpUNCServerName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"lpFileName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]} ] } ,{ "Name":"OpenBackupEventLogW" ,"SetLastError":true ,"DllImport":"ADVAPI32" ,"ReturnType":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"lpUNCServerName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"lpFileName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]} ] } ,{ "Name":"ReadEventLogA" ,"SetLastError":true ,"DllImport":"ADVAPI32" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ,{"Name":"dwReadFlags","Type":{"Kind":"ApiRef","Name":"READ_EVENT_LOG_READ_FLAGS","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ,{"Name":"dwRecordOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"lpBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":4}]} ,{"Name":"nNumberOfBytesToRead","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"pnBytesRead","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ,{"Name":"pnMinNumberOfBytesNeeded","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] } ,{ "Name":"ReadEventLogW" ,"SetLastError":true ,"DllImport":"ADVAPI32" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ,{"Name":"dwReadFlags","Type":{"Kind":"ApiRef","Name":"READ_EVENT_LOG_READ_FLAGS","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ,{"Name":"dwRecordOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"lpBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":4}]} ,{"Name":"nNumberOfBytesToRead","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"pnBytesRead","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ,{"Name":"pnMinNumberOfBytesNeeded","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] } ,{ "Name":"ReportEventA" ,"SetLastError":true ,"DllImport":"ADVAPI32" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventSourceHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ,{"Name":"wType","Type":{"Kind":"ApiRef","Name":"REPORT_EVENT_TYPE","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ,{"Name":"wCategory","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":["In"]} ,{"Name":"dwEventID","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"lpUserSid","Type":{"Kind":"ApiRef","Name":"PSID","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional"]} ,{"Name":"wNumStrings","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":["In"]} ,{"Name":"dwDataSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"lpStrings","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":5,"Child":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":["In","Optional"]} ,{"Name":"lpRawData","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In",{"Kind":"MemorySize","BytesParamIndex":6},"Optional"]} ] } ,{ "Name":"ReportEventW" ,"SetLastError":true ,"DllImport":"ADVAPI32" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventSourceHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ,{"Name":"wType","Type":{"Kind":"ApiRef","Name":"REPORT_EVENT_TYPE","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ,{"Name":"wCategory","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":["In"]} ,{"Name":"dwEventID","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"lpUserSid","Type":{"Kind":"ApiRef","Name":"PSID","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional"]} ,{"Name":"wNumStrings","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":["In"]} ,{"Name":"dwDataSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"lpStrings","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":5,"Child":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":["In","Optional"]} ,{"Name":"lpRawData","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In",{"Kind":"MemorySize","BytesParamIndex":6},"Optional"]} ] } ,{ "Name":"GetEventLogInformation" ,"SetLastError":true ,"DllImport":"ADVAPI32" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows5.0" ,"Attrs":[] ,"Params":[ {"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]} ,{"Name":"dwInfoLevel","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"lpBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":3}]} ,{"Name":"cbBufSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"pcbBytesNeeded","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] } ] ,"UnicodeAliases":[ "ClearEventLog" ,"BackupEventLog" ,"OpenEventLog" ,"RegisterEventSource" ,"OpenBackupEventLog" ,"ReadEventLog" ,"ReportEvent" ] }