mirror of
https://github.com/marlersoft/win32json
synced 2026-06-21 13:57:33 +00:00
Jonathan Marler
1477 lines
62 KiB
JSON
1477 lines
62 KiB
JSON
{
|
|
"Constants":[{
|
|
"Name":"EVT_VARIANT_TYPE_MASK"
|
|
,"Type":{"Kind":"Native","Name":"UInt32"}
|
|
,"ValueType":"UInt32"
|
|
,"Value":127
|
|
,"Attrs":[]
|
|
},{
|
|
"Name":"EVT_VARIANT_TYPE_ARRAY"
|
|
,"Type":{"Kind":"Native","Name":"UInt32"}
|
|
,"ValueType":"UInt32"
|
|
,"Value":128
|
|
,"Attrs":[]
|
|
},{
|
|
"Name":"EVT_READ_ACCESS"
|
|
,"Type":{"Kind":"Native","Name":"UInt32"}
|
|
,"ValueType":"UInt32"
|
|
,"Value":1
|
|
,"Attrs":[]
|
|
},{
|
|
"Name":"EVT_WRITE_ACCESS"
|
|
,"Type":{"Kind":"Native","Name":"UInt32"}
|
|
,"ValueType":"UInt32"
|
|
,"Value":2
|
|
,"Attrs":[]
|
|
},{
|
|
"Name":"EVT_CLEAR_ACCESS"
|
|
,"Type":{"Kind":"Native","Name":"UInt32"}
|
|
,"ValueType":"UInt32"
|
|
,"Value":4
|
|
,"Attrs":[]
|
|
},{
|
|
"Name":"EVT_ALL_ACCESS"
|
|
,"Type":{"Kind":"Native","Name":"UInt32"}
|
|
,"ValueType":"UInt32"
|
|
,"Value":7
|
|
,"Attrs":[]
|
|
}],
|
|
|
|
"Types":[{
|
|
"Name":"REPORT_EVENT_TYPE"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EVENTLOG_SUCCESS","Value":0}
|
|
,{"Name":"EVENTLOG_AUDIT_FAILURE","Value":16}
|
|
,{"Name":"EVENTLOG_AUDIT_SUCCESS","Value":8}
|
|
,{"Name":"EVENTLOG_ERROR_TYPE","Value":1}
|
|
,{"Name":"EVENTLOG_INFORMATION_TYPE","Value":4}
|
|
,{"Name":"EVENTLOG_WARNING_TYPE","Value":2}
|
|
]
|
|
,"IntegerBase":"UInt16"
|
|
},{
|
|
"Name":"READ_EVENT_LOG_READ_FLAGS"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EVENTLOG_SEEK_READ","Value":2}
|
|
,{"Name":"EVENTLOG_SEQUENTIAL_READ","Value":1}
|
|
]
|
|
,"IntegerBase":"UInt32"
|
|
},{
|
|
"Name":"EventLogHandle"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"NativeTypedef"
|
|
,"AlsoUsableFor":null
|
|
,"Def":{"Kind":"Native","Name":"IntPtr"}
|
|
,"FreeFunc":"CloseEventLog"
|
|
,"InvalidHandleValue":0
|
|
},{
|
|
"Name":"EventSourceHandle"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"NativeTypedef"
|
|
,"AlsoUsableFor":null
|
|
,"Def":{"Kind":"Native","Name":"IntPtr"}
|
|
,"FreeFunc":"DeregisterEventSource"
|
|
,"InvalidHandleValue":0
|
|
},{
|
|
"Name":"EVT_VARIANT_TYPE"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EvtVarTypeNull","Value":0}
|
|
,{"Name":"EvtVarTypeString","Value":1}
|
|
,{"Name":"EvtVarTypeAnsiString","Value":2}
|
|
,{"Name":"EvtVarTypeSByte","Value":3}
|
|
,{"Name":"EvtVarTypeByte","Value":4}
|
|
,{"Name":"EvtVarTypeInt16","Value":5}
|
|
,{"Name":"EvtVarTypeUInt16","Value":6}
|
|
,{"Name":"EvtVarTypeInt32","Value":7}
|
|
,{"Name":"EvtVarTypeUInt32","Value":8}
|
|
,{"Name":"EvtVarTypeInt64","Value":9}
|
|
,{"Name":"EvtVarTypeUInt64","Value":10}
|
|
,{"Name":"EvtVarTypeSingle","Value":11}
|
|
,{"Name":"EvtVarTypeDouble","Value":12}
|
|
,{"Name":"EvtVarTypeBoolean","Value":13}
|
|
,{"Name":"EvtVarTypeBinary","Value":14}
|
|
,{"Name":"EvtVarTypeGuid","Value":15}
|
|
,{"Name":"EvtVarTypeSizeT","Value":16}
|
|
,{"Name":"EvtVarTypeFileTime","Value":17}
|
|
,{"Name":"EvtVarTypeSysTime","Value":18}
|
|
,{"Name":"EvtVarTypeSid","Value":19}
|
|
,{"Name":"EvtVarTypeHexInt32","Value":20}
|
|
,{"Name":"EvtVarTypeHexInt64","Value":21}
|
|
,{"Name":"EvtVarTypeEvtHandle","Value":32}
|
|
,{"Name":"EvtVarTypeEvtXml","Value":35}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"EVT_VARIANT"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Struct"
|
|
,"Size":0
|
|
,"PackingSize":0
|
|
,"Attrs":[]
|
|
,"Fields":[
|
|
{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Union","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":[]}
|
|
,{"Name":"Count","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
,{"Name":"Type","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
]
|
|
,"NestedTypes":[{
|
|
"Name":"_Anonymous_e__Union"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Union"
|
|
,"Size":0
|
|
,"PackingSize":0
|
|
,"Attrs":[]
|
|
,"Fields":[
|
|
{"Name":"BooleanVal","Type":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
|
|
,{"Name":"SByteVal","Type":{"Kind":"Native","Name":"SByte"},"Attrs":[]}
|
|
,{"Name":"Int16Val","Type":{"Kind":"Native","Name":"Int16"},"Attrs":[]}
|
|
,{"Name":"Int32Val","Type":{"Kind":"Native","Name":"Int32"},"Attrs":[]}
|
|
,{"Name":"Int64Val","Type":{"Kind":"Native","Name":"Int64"},"Attrs":[]}
|
|
,{"Name":"ByteVal","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
|
|
,{"Name":"UInt16Val","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
|
|
,{"Name":"UInt32Val","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
,{"Name":"UInt64Val","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
|
|
,{"Name":"SingleVal","Type":{"Kind":"Native","Name":"Single"},"Attrs":[]}
|
|
,{"Name":"DoubleVal","Type":{"Kind":"Native","Name":"Double"},"Attrs":[]}
|
|
,{"Name":"FileTimeVal","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
|
|
,{"Name":"SysTimeVal","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"SYSTEMTIME","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]}
|
|
,{"Name":"GuidVal","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":[]}
|
|
,{"Name":"StringVal","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["Const"]}
|
|
,{"Name":"AnsiStringVal","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["Const"]}
|
|
,{"Name":"BinaryVal","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Byte"}},"Attrs":[]}
|
|
,{"Name":"SidVal","Type":{"Kind":"ApiRef","Name":"PSID","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
|
|
,{"Name":"SizeTVal","Type":{"Kind":"Native","Name":"UIntPtr"},"Attrs":[]}
|
|
,{"Name":"BooleanArr","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]}
|
|
,{"Name":"SByteArr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"SByte"}},"Attrs":[]}
|
|
,{"Name":"Int16Arr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Int16"}},"Attrs":[]}
|
|
,{"Name":"Int32Arr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Int32"}},"Attrs":[]}
|
|
,{"Name":"Int64Arr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Int64"}},"Attrs":[]}
|
|
,{"Name":"ByteArr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Byte"}},"Attrs":[]}
|
|
,{"Name":"UInt16Arr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt16"}},"Attrs":[]}
|
|
,{"Name":"UInt32Arr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":[]}
|
|
,{"Name":"UInt64Arr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt64"}},"Attrs":[]}
|
|
,{"Name":"SingleArr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Single"}},"Attrs":[]}
|
|
,{"Name":"DoubleArr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Double"}},"Attrs":[]}
|
|
,{"Name":"FileTimeArr","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"FILETIME","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]}
|
|
,{"Name":"SysTimeArr","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"SYSTEMTIME","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]}
|
|
,{"Name":"GuidArr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":[]}
|
|
,{"Name":"StringArr","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]}
|
|
,{"Name":"AnsiStringArr","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]}
|
|
,{"Name":"SidArr","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PSID","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]}
|
|
,{"Name":"SizeTArr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UIntPtr"}},"Attrs":[]}
|
|
,{"Name":"EvtHandleVal","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":[]}
|
|
,{"Name":"XmlVal","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["Const"]}
|
|
,{"Name":"XmlValArr","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]}
|
|
]
|
|
,"NestedTypes":[]
|
|
}]
|
|
},{
|
|
"Name":"EVT_LOGIN_CLASS"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EvtRpcLogin","Value":1}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"EVT_RPC_LOGIN_FLAGS"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EvtRpcLoginAuthDefault","Value":0}
|
|
,{"Name":"EvtRpcLoginAuthNegotiate","Value":1}
|
|
,{"Name":"EvtRpcLoginAuthKerberos","Value":2}
|
|
,{"Name":"EvtRpcLoginAuthNTLM","Value":3}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"EVT_RPC_LOGIN"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Struct"
|
|
,"Size":0
|
|
,"PackingSize":0
|
|
,"Attrs":[]
|
|
,"Fields":[
|
|
{"Name":"Server","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
|
|
,{"Name":"User","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
|
|
,{"Name":"Domain","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
|
|
,{"Name":"Password","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
|
|
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
]
|
|
,"NestedTypes":[]
|
|
},{
|
|
"Name":"EVT_QUERY_FLAGS"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EvtQueryChannelPath","Value":1}
|
|
,{"Name":"EvtQueryFilePath","Value":2}
|
|
,{"Name":"EvtQueryForwardDirection","Value":256}
|
|
,{"Name":"EvtQueryReverseDirection","Value":512}
|
|
,{"Name":"EvtQueryTolerateQueryErrors","Value":4096}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"EVT_SEEK_FLAGS"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EvtSeekRelativeToFirst","Value":1}
|
|
,{"Name":"EvtSeekRelativeToLast","Value":2}
|
|
,{"Name":"EvtSeekRelativeToCurrent","Value":3}
|
|
,{"Name":"EvtSeekRelativeToBookmark","Value":4}
|
|
,{"Name":"EvtSeekOriginMask","Value":7}
|
|
,{"Name":"EvtSeekStrict","Value":65536}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"EVT_SUBSCRIBE_FLAGS"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EvtSubscribeToFutureEvents","Value":1}
|
|
,{"Name":"EvtSubscribeStartAtOldestRecord","Value":2}
|
|
,{"Name":"EvtSubscribeStartAfterBookmark","Value":3}
|
|
,{"Name":"EvtSubscribeOriginMask","Value":3}
|
|
,{"Name":"EvtSubscribeTolerateQueryErrors","Value":4096}
|
|
,{"Name":"EvtSubscribeStrict","Value":65536}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"EVT_SUBSCRIBE_NOTIFY_ACTION"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EvtSubscribeActionError","Value":0}
|
|
,{"Name":"EvtSubscribeActionDeliver","Value":1}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"EVT_SUBSCRIBE_CALLBACK"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"FunctionPointer"
|
|
,"SetLastError":false
|
|
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
|
|
,"ReturnAttrs":[]
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"Action","Type":{"Kind":"ApiRef","Name":"EVT_SUBSCRIBE_NOTIFY_ACTION","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"UserContext","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["Optional"]}
|
|
,{"Name":"Event","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
|
|
]
|
|
},{
|
|
"Name":"EVT_SYSTEM_PROPERTY_ID"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EvtSystemProviderName","Value":0}
|
|
,{"Name":"EvtSystemProviderGuid","Value":1}
|
|
,{"Name":"EvtSystemEventID","Value":2}
|
|
,{"Name":"EvtSystemQualifiers","Value":3}
|
|
,{"Name":"EvtSystemLevel","Value":4}
|
|
,{"Name":"EvtSystemTask","Value":5}
|
|
,{"Name":"EvtSystemOpcode","Value":6}
|
|
,{"Name":"EvtSystemKeywords","Value":7}
|
|
,{"Name":"EvtSystemTimeCreated","Value":8}
|
|
,{"Name":"EvtSystemEventRecordId","Value":9}
|
|
,{"Name":"EvtSystemActivityID","Value":10}
|
|
,{"Name":"EvtSystemRelatedActivityID","Value":11}
|
|
,{"Name":"EvtSystemProcessID","Value":12}
|
|
,{"Name":"EvtSystemThreadID","Value":13}
|
|
,{"Name":"EvtSystemChannel","Value":14}
|
|
,{"Name":"EvtSystemComputer","Value":15}
|
|
,{"Name":"EvtSystemUserID","Value":16}
|
|
,{"Name":"EvtSystemVersion","Value":17}
|
|
,{"Name":"EvtSystemPropertyIdEND","Value":18}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"EVT_RENDER_CONTEXT_FLAGS"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EvtRenderContextValues","Value":0}
|
|
,{"Name":"EvtRenderContextSystem","Value":1}
|
|
,{"Name":"EvtRenderContextUser","Value":2}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"EVT_RENDER_FLAGS"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EvtRenderEventValues","Value":0}
|
|
,{"Name":"EvtRenderEventXml","Value":1}
|
|
,{"Name":"EvtRenderBookmark","Value":2}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"EVT_FORMAT_MESSAGE_FLAGS"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EvtFormatMessageEvent","Value":1}
|
|
,{"Name":"EvtFormatMessageLevel","Value":2}
|
|
,{"Name":"EvtFormatMessageTask","Value":3}
|
|
,{"Name":"EvtFormatMessageOpcode","Value":4}
|
|
,{"Name":"EvtFormatMessageKeyword","Value":5}
|
|
,{"Name":"EvtFormatMessageChannel","Value":6}
|
|
,{"Name":"EvtFormatMessageProvider","Value":7}
|
|
,{"Name":"EvtFormatMessageId","Value":8}
|
|
,{"Name":"EvtFormatMessageXml","Value":9}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"EVT_OPEN_LOG_FLAGS"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EvtOpenChannelPath","Value":1}
|
|
,{"Name":"EvtOpenFilePath","Value":2}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"EVT_LOG_PROPERTY_ID"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EvtLogCreationTime","Value":0}
|
|
,{"Name":"EvtLogLastAccessTime","Value":1}
|
|
,{"Name":"EvtLogLastWriteTime","Value":2}
|
|
,{"Name":"EvtLogFileSize","Value":3}
|
|
,{"Name":"EvtLogAttributes","Value":4}
|
|
,{"Name":"EvtLogNumberOfLogRecords","Value":5}
|
|
,{"Name":"EvtLogOldestRecordNumber","Value":6}
|
|
,{"Name":"EvtLogFull","Value":7}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"EVT_EXPORTLOG_FLAGS"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EvtExportLogChannelPath","Value":1}
|
|
,{"Name":"EvtExportLogFilePath","Value":2}
|
|
,{"Name":"EvtExportLogTolerateQueryErrors","Value":4096}
|
|
,{"Name":"EvtExportLogOverwrite","Value":8192}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"EVT_CHANNEL_CONFIG_PROPERTY_ID"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EvtChannelConfigEnabled","Value":0}
|
|
,{"Name":"EvtChannelConfigIsolation","Value":1}
|
|
,{"Name":"EvtChannelConfigType","Value":2}
|
|
,{"Name":"EvtChannelConfigOwningPublisher","Value":3}
|
|
,{"Name":"EvtChannelConfigClassicEventlog","Value":4}
|
|
,{"Name":"EvtChannelConfigAccess","Value":5}
|
|
,{"Name":"EvtChannelLoggingConfigRetention","Value":6}
|
|
,{"Name":"EvtChannelLoggingConfigAutoBackup","Value":7}
|
|
,{"Name":"EvtChannelLoggingConfigMaxSize","Value":8}
|
|
,{"Name":"EvtChannelLoggingConfigLogFilePath","Value":9}
|
|
,{"Name":"EvtChannelPublishingConfigLevel","Value":10}
|
|
,{"Name":"EvtChannelPublishingConfigKeywords","Value":11}
|
|
,{"Name":"EvtChannelPublishingConfigControlGuid","Value":12}
|
|
,{"Name":"EvtChannelPublishingConfigBufferSize","Value":13}
|
|
,{"Name":"EvtChannelPublishingConfigMinBuffers","Value":14}
|
|
,{"Name":"EvtChannelPublishingConfigMaxBuffers","Value":15}
|
|
,{"Name":"EvtChannelPublishingConfigLatency","Value":16}
|
|
,{"Name":"EvtChannelPublishingConfigClockType","Value":17}
|
|
,{"Name":"EvtChannelPublishingConfigSidType","Value":18}
|
|
,{"Name":"EvtChannelPublisherList","Value":19}
|
|
,{"Name":"EvtChannelPublishingConfigFileMax","Value":20}
|
|
,{"Name":"EvtChannelConfigPropertyIdEND","Value":21}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"EVT_CHANNEL_TYPE"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EvtChannelTypeAdmin","Value":0}
|
|
,{"Name":"EvtChannelTypeOperational","Value":1}
|
|
,{"Name":"EvtChannelTypeAnalytic","Value":2}
|
|
,{"Name":"EvtChannelTypeDebug","Value":3}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"EVT_CHANNEL_ISOLATION_TYPE"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EvtChannelIsolationTypeApplication","Value":0}
|
|
,{"Name":"EvtChannelIsolationTypeSystem","Value":1}
|
|
,{"Name":"EvtChannelIsolationTypeCustom","Value":2}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"EVT_CHANNEL_CLOCK_TYPE"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EvtChannelClockTypeSystemTime","Value":0}
|
|
,{"Name":"EvtChannelClockTypeQPC","Value":1}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"EVT_CHANNEL_SID_TYPE"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EvtChannelSidTypeNone","Value":0}
|
|
,{"Name":"EvtChannelSidTypePublishing","Value":1}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"EVT_CHANNEL_REFERENCE_FLAGS"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EvtChannelReferenceImported","Value":1}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"EVT_PUBLISHER_METADATA_PROPERTY_ID"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EvtPublisherMetadataPublisherGuid","Value":0}
|
|
,{"Name":"EvtPublisherMetadataResourceFilePath","Value":1}
|
|
,{"Name":"EvtPublisherMetadataParameterFilePath","Value":2}
|
|
,{"Name":"EvtPublisherMetadataMessageFilePath","Value":3}
|
|
,{"Name":"EvtPublisherMetadataHelpLink","Value":4}
|
|
,{"Name":"EvtPublisherMetadataPublisherMessageID","Value":5}
|
|
,{"Name":"EvtPublisherMetadataChannelReferences","Value":6}
|
|
,{"Name":"EvtPublisherMetadataChannelReferencePath","Value":7}
|
|
,{"Name":"EvtPublisherMetadataChannelReferenceIndex","Value":8}
|
|
,{"Name":"EvtPublisherMetadataChannelReferenceID","Value":9}
|
|
,{"Name":"EvtPublisherMetadataChannelReferenceFlags","Value":10}
|
|
,{"Name":"EvtPublisherMetadataChannelReferenceMessageID","Value":11}
|
|
,{"Name":"EvtPublisherMetadataLevels","Value":12}
|
|
,{"Name":"EvtPublisherMetadataLevelName","Value":13}
|
|
,{"Name":"EvtPublisherMetadataLevelValue","Value":14}
|
|
,{"Name":"EvtPublisherMetadataLevelMessageID","Value":15}
|
|
,{"Name":"EvtPublisherMetadataTasks","Value":16}
|
|
,{"Name":"EvtPublisherMetadataTaskName","Value":17}
|
|
,{"Name":"EvtPublisherMetadataTaskEventGuid","Value":18}
|
|
,{"Name":"EvtPublisherMetadataTaskValue","Value":19}
|
|
,{"Name":"EvtPublisherMetadataTaskMessageID","Value":20}
|
|
,{"Name":"EvtPublisherMetadataOpcodes","Value":21}
|
|
,{"Name":"EvtPublisherMetadataOpcodeName","Value":22}
|
|
,{"Name":"EvtPublisherMetadataOpcodeValue","Value":23}
|
|
,{"Name":"EvtPublisherMetadataOpcodeMessageID","Value":24}
|
|
,{"Name":"EvtPublisherMetadataKeywords","Value":25}
|
|
,{"Name":"EvtPublisherMetadataKeywordName","Value":26}
|
|
,{"Name":"EvtPublisherMetadataKeywordValue","Value":27}
|
|
,{"Name":"EvtPublisherMetadataKeywordMessageID","Value":28}
|
|
,{"Name":"EvtPublisherMetadataPropertyIdEND","Value":29}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"EVT_EVENT_METADATA_PROPERTY_ID"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EventMetadataEventID","Value":0}
|
|
,{"Name":"EventMetadataEventVersion","Value":1}
|
|
,{"Name":"EventMetadataEventChannel","Value":2}
|
|
,{"Name":"EventMetadataEventLevel","Value":3}
|
|
,{"Name":"EventMetadataEventOpcode","Value":4}
|
|
,{"Name":"EventMetadataEventTask","Value":5}
|
|
,{"Name":"EventMetadataEventKeyword","Value":6}
|
|
,{"Name":"EventMetadataEventMessageID","Value":7}
|
|
,{"Name":"EventMetadataEventTemplate","Value":8}
|
|
,{"Name":"EvtEventMetadataPropertyIdEND","Value":9}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"EVT_QUERY_PROPERTY_ID"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EvtQueryNames","Value":0}
|
|
,{"Name":"EvtQueryStatuses","Value":1}
|
|
,{"Name":"EvtQueryPropertyIdEND","Value":2}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"EVT_EVENT_PROPERTY_ID"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"EvtEventQueryIDs","Value":0}
|
|
,{"Name":"EvtEventPath","Value":1}
|
|
,{"Name":"EvtEventPropertyIdEND","Value":2}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"EVENTLOGRECORD"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Struct"
|
|
,"Size":0
|
|
,"PackingSize":0
|
|
,"Attrs":[]
|
|
,"Fields":[
|
|
{"Name":"Length","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
,{"Name":"Reserved","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
,{"Name":"RecordNumber","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
,{"Name":"TimeGenerated","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
,{"Name":"TimeWritten","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
,{"Name":"EventID","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
,{"Name":"EventType","Type":{"Kind":"ApiRef","Name":"REPORT_EVENT_TYPE","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":[]}
|
|
,{"Name":"NumStrings","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
|
|
,{"Name":"EventCategory","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
|
|
,{"Name":"ReservedFlags","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
|
|
,{"Name":"ClosingRecordNumber","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
,{"Name":"StringOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
,{"Name":"UserSidLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
,{"Name":"UserSidOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
,{"Name":"DataLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
,{"Name":"DataOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
]
|
|
,"NestedTypes":[]
|
|
},{
|
|
"Name":"EVENTSFORLOGFILE"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Struct"
|
|
,"Size":0
|
|
,"PackingSize":0
|
|
,"Attrs":[]
|
|
,"Fields":[
|
|
{"Name":"ulSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
,{"Name":"szLogicalLogFile","Type":{"Kind":"Array","Shape":{"Size":256},"Child":{"Kind":"Native","Name":"Char"}},"Attrs":[]}
|
|
,{"Name":"ulNumRecords","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
,{"Name":"pEventLogRecords","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"ApiRef","Name":"EVENTLOGRECORD","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":[]}
|
|
]
|
|
,"NestedTypes":[]
|
|
},{
|
|
"Name":"EVENTLOG_FULL_INFORMATION"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Struct"
|
|
,"Size":0
|
|
,"PackingSize":0
|
|
,"Attrs":[]
|
|
,"Fields":[
|
|
{"Name":"dwFull","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
]
|
|
,"NestedTypes":[]
|
|
}],
|
|
|
|
"Functions":[{
|
|
"Name":"EvtOpenSession"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"Native","Name":"IntPtr"}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"LoginClass","Type":{"Kind":"ApiRef","Name":"EVT_LOGIN_CLASS","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"Login","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In"]}
|
|
,{"Name":"Timeout","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In","Reserved"]}
|
|
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In","Reserved"]}
|
|
]
|
|
},{
|
|
"Name":"EvtClose"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"Object","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
|
|
]
|
|
},{
|
|
"Name":"EvtCancel"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"Object","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
|
|
]
|
|
},{
|
|
"Name":"EvtGetExtendedStatus"
|
|
,"SetLastError":false
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"Buffer","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":0,"Child":{"Kind":"Native","Name":"Char"}},"Attrs":["Out","Optional"]}
|
|
,{"Name":"BufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"EvtQuery"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"Native","Name":"IntPtr"}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
|
|
,{"Name":"Path","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
|
|
,{"Name":"Query","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
|
|
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
]
|
|
},{
|
|
"Name":"EvtNext"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"ResultSet","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
|
|
,{"Name":"EventsSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"Events","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"Native","Name":"IntPtr"}},"Attrs":["Out"]}
|
|
,{"Name":"Timeout","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"Returned","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]}
|
|
]
|
|
},{
|
|
"Name":"EvtSeek"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"ResultSet","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
|
|
,{"Name":"Position","Type":{"Kind":"Native","Name":"Int64"},"Attrs":["In"]}
|
|
,{"Name":"Bookmark","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
|
|
,{"Name":"Timeout","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In","Reserved"]}
|
|
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
]
|
|
},{
|
|
"Name":"EvtSubscribe"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"Native","Name":"IntPtr"}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
|
|
,{"Name":"SignalEvent","Type":{"Kind":"ApiRef","Name":"HANDLE","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional"]}
|
|
,{"Name":"ChannelPath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
|
|
,{"Name":"Query","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
|
|
,{"Name":"Bookmark","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
|
|
,{"Name":"Context","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["Optional"]}
|
|
,{"Name":"Callback","Type":{"Kind":"ApiRef","Name":"EVT_SUBSCRIBE_CALLBACK","TargetKind":"FunctionPointer","Api":"System.EventLog","Parents":[]},"Attrs":["Optional"]}
|
|
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
]
|
|
},{
|
|
"Name":"EvtCreateRenderContext"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"Native","Name":"IntPtr"}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"ValuePathsCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"ValuePaths","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":0,"Child":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":["In","Optional"]}
|
|
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
]
|
|
},{
|
|
"Name":"EvtRender"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"Context","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
|
|
,{"Name":"Fragment","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
|
|
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"Buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":3},"Optional"]}
|
|
,{"Name":"BufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
|
|
,{"Name":"PropertyCount","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"EvtFormatMessage"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"PublisherMetadata","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
|
|
,{"Name":"Event","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
|
|
,{"Name":"MessageId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"ValueCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"Values","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":3,"Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["In","Optional"]}
|
|
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"Buffer","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":6,"Child":{"Kind":"Native","Name":"Char"}},"Attrs":["Out","Optional"]}
|
|
,{"Name":"BufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"EvtOpenLog"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"Native","Name":"IntPtr"}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
|
|
,{"Name":"Path","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
|
|
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
]
|
|
},{
|
|
"Name":"EvtGetLogInfo"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"Log","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
|
|
,{"Name":"PropertyId","Type":{"Kind":"ApiRef","Name":"EVT_LOG_PROPERTY_ID","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"PropertyValueBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"PropertyValueBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":2},"Optional"]}
|
|
,{"Name":"PropertyValueBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"EvtClearLog"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
|
|
,{"Name":"ChannelPath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
|
|
,{"Name":"TargetFilePath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
|
|
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
]
|
|
},{
|
|
"Name":"EvtExportLog"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
|
|
,{"Name":"Path","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
|
|
,{"Name":"Query","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
|
|
,{"Name":"TargetFilePath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
|
|
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
]
|
|
},{
|
|
"Name":"EvtArchiveExportedLog"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
|
|
,{"Name":"LogFilePath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
|
|
,{"Name":"Locale","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
]
|
|
},{
|
|
"Name":"EvtOpenChannelEnum"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"Native","Name":"IntPtr"}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
|
|
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
]
|
|
},{
|
|
"Name":"EvtNextChannelPath"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"ChannelEnum","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
|
|
,{"Name":"ChannelPathBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"ChannelPathBuffer","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"Native","Name":"Char"}},"Attrs":["Out","Optional"]}
|
|
,{"Name":"ChannelPathBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"EvtOpenChannelConfig"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"Native","Name":"IntPtr"}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
|
|
,{"Name":"ChannelPath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
|
|
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
]
|
|
},{
|
|
"Name":"EvtSaveChannelConfig"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"ChannelConfig","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
|
|
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
]
|
|
},{
|
|
"Name":"EvtSetChannelConfigProperty"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"ChannelConfig","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
|
|
,{"Name":"PropertyId","Type":{"Kind":"ApiRef","Name":"EVT_CHANNEL_CONFIG_PROPERTY_ID","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"PropertyValue","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["In"]}
|
|
]
|
|
},{
|
|
"Name":"EvtGetChannelConfigProperty"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"ChannelConfig","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
|
|
,{"Name":"PropertyId","Type":{"Kind":"ApiRef","Name":"EVT_CHANNEL_CONFIG_PROPERTY_ID","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"PropertyValueBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"PropertyValueBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":3},"Optional"]}
|
|
,{"Name":"PropertyValueBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"EvtOpenPublisherEnum"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"Native","Name":"IntPtr"}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
|
|
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
]
|
|
},{
|
|
"Name":"EvtNextPublisherId"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"PublisherEnum","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
|
|
,{"Name":"PublisherIdBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"PublisherIdBuffer","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"Native","Name":"Char"}},"Attrs":["Out","Optional"]}
|
|
,{"Name":"PublisherIdBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"EvtOpenPublisherMetadata"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"Native","Name":"IntPtr"}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
|
|
,{"Name":"PublisherId","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
|
|
,{"Name":"LogFilePath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
|
|
,{"Name":"Locale","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
]
|
|
},{
|
|
"Name":"EvtGetPublisherMetadataProperty"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"PublisherMetadata","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
|
|
,{"Name":"PropertyId","Type":{"Kind":"ApiRef","Name":"EVT_PUBLISHER_METADATA_PROPERTY_ID","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"PublisherMetadataPropertyBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"PublisherMetadataPropertyBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":3},"Optional"]}
|
|
,{"Name":"PublisherMetadataPropertyBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"EvtOpenEventMetadataEnum"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"Native","Name":"IntPtr"}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"PublisherMetadata","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
|
|
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
]
|
|
},{
|
|
"Name":"EvtNextEventMetadata"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"Native","Name":"IntPtr"}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"EventMetadataEnum","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
|
|
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
]
|
|
},{
|
|
"Name":"EvtGetEventMetadataProperty"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"EventMetadata","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
|
|
,{"Name":"PropertyId","Type":{"Kind":"ApiRef","Name":"EVT_EVENT_METADATA_PROPERTY_ID","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"EventMetadataPropertyBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"EventMetadataPropertyBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":3},"Optional"]}
|
|
,{"Name":"EventMetadataPropertyBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"EvtGetObjectArraySize"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"ObjectArray","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
|
|
,{"Name":"ObjectArraySize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"EvtGetObjectArrayProperty"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"ObjectArray","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
|
|
,{"Name":"PropertyId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"ArrayIndex","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"PropertyValueBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"PropertyValueBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":4},"Optional"]}
|
|
,{"Name":"PropertyValueBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"EvtGetQueryInfo"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"QueryOrSubscription","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
|
|
,{"Name":"PropertyId","Type":{"Kind":"ApiRef","Name":"EVT_QUERY_PROPERTY_ID","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"PropertyValueBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"PropertyValueBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":2},"Optional"]}
|
|
,{"Name":"PropertyValueBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"EvtCreateBookmark"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"Native","Name":"IntPtr"}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"BookmarkXml","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
|
|
]
|
|
},{
|
|
"Name":"EvtUpdateBookmark"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"Bookmark","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
|
|
,{"Name":"Event","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
|
|
]
|
|
},{
|
|
"Name":"EvtGetEventInfo"
|
|
,"SetLastError":true
|
|
,"DllImport":"wevtapi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows6.0.6000"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"Event","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
|
|
,{"Name":"PropertyId","Type":{"Kind":"ApiRef","Name":"EVT_EVENT_PROPERTY_ID","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"PropertyValueBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"PropertyValueBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":2},"Optional"]}
|
|
,{"Name":"PropertyValueBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"ClearEventLogA"
|
|
,"SetLastError":true
|
|
,"DllImport":"ADVAPI32.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows5.0"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"lpBackupFileName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
|
|
]
|
|
},{
|
|
"Name":"ClearEventLogW"
|
|
,"SetLastError":true
|
|
,"DllImport":"ADVAPI32.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows5.0"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"lpBackupFileName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
|
|
]
|
|
},{
|
|
"Name":"BackupEventLogA"
|
|
,"SetLastError":true
|
|
,"DllImport":"ADVAPI32.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows5.0"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"lpBackupFileName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
|
|
]
|
|
},{
|
|
"Name":"BackupEventLogW"
|
|
,"SetLastError":true
|
|
,"DllImport":"ADVAPI32.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows5.0"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"lpBackupFileName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
|
|
]
|
|
},{
|
|
"Name":"CloseEventLog"
|
|
,"SetLastError":true
|
|
,"DllImport":"ADVAPI32.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows5.0"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
]
|
|
},{
|
|
"Name":"DeregisterEventSource"
|
|
,"SetLastError":true
|
|
,"DllImport":"ADVAPI32.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows5.0"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventSourceHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
]
|
|
},{
|
|
"Name":"NotifyChangeEventLog"
|
|
,"SetLastError":true
|
|
,"DllImport":"ADVAPI32.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows5.0"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"hEvent","Type":{"Kind":"ApiRef","Name":"HANDLE","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]}
|
|
]
|
|
},{
|
|
"Name":"GetNumberOfEventLogRecords"
|
|
,"SetLastError":true
|
|
,"DllImport":"ADVAPI32.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows5.0"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"NumberOfRecords","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"GetOldestEventLogRecord"
|
|
,"SetLastError":true
|
|
,"DllImport":"ADVAPI32.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows5.0"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"OldestRecord","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"OpenEventLogA"
|
|
,"SetLastError":true
|
|
,"DllImport":"ADVAPI32.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows5.0"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"lpUNCServerName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
|
|
,{"Name":"lpSourceName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
|
|
]
|
|
},{
|
|
"Name":"OpenEventLogW"
|
|
,"SetLastError":true
|
|
,"DllImport":"ADVAPI32.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows5.0"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"lpUNCServerName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
|
|
,{"Name":"lpSourceName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
|
|
]
|
|
},{
|
|
"Name":"RegisterEventSourceA"
|
|
,"SetLastError":true
|
|
,"DllImport":"ADVAPI32.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"EventSourceHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows5.0"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"lpUNCServerName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
|
|
,{"Name":"lpSourceName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
|
|
]
|
|
},{
|
|
"Name":"RegisterEventSourceW"
|
|
,"SetLastError":true
|
|
,"DllImport":"ADVAPI32.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"EventSourceHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows5.0"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"lpUNCServerName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
|
|
,{"Name":"lpSourceName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
|
|
]
|
|
},{
|
|
"Name":"OpenBackupEventLogA"
|
|
,"SetLastError":true
|
|
,"DllImport":"ADVAPI32.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows5.0"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"lpUNCServerName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
|
|
,{"Name":"lpFileName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
|
|
]
|
|
},{
|
|
"Name":"OpenBackupEventLogW"
|
|
,"SetLastError":true
|
|
,"DllImport":"ADVAPI32.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows5.0"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"lpUNCServerName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
|
|
,{"Name":"lpFileName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
|
|
]
|
|
},{
|
|
"Name":"ReadEventLogA"
|
|
,"SetLastError":true
|
|
,"DllImport":"ADVAPI32.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows5.0"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"dwReadFlags","Type":{"Kind":"ApiRef","Name":"READ_EVENT_LOG_READ_FLAGS","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"dwRecordOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"lpBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":4}]}
|
|
,{"Name":"nNumberOfBytesToRead","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"pnBytesRead","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
|
|
,{"Name":"pnMinNumberOfBytesNeeded","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"ReadEventLogW"
|
|
,"SetLastError":true
|
|
,"DllImport":"ADVAPI32.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows5.0"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"dwReadFlags","Type":{"Kind":"ApiRef","Name":"READ_EVENT_LOG_READ_FLAGS","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"dwRecordOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"lpBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":4}]}
|
|
,{"Name":"nNumberOfBytesToRead","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"pnBytesRead","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
|
|
,{"Name":"pnMinNumberOfBytesNeeded","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"ReportEventA"
|
|
,"SetLastError":true
|
|
,"DllImport":"ADVAPI32.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows5.0"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventSourceHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"wType","Type":{"Kind":"ApiRef","Name":"REPORT_EVENT_TYPE","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"wCategory","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":["In"]}
|
|
,{"Name":"dwEventID","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"lpUserSid","Type":{"Kind":"ApiRef","Name":"PSID","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional"]}
|
|
,{"Name":"wNumStrings","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":["In"]}
|
|
,{"Name":"dwDataSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"lpStrings","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":5,"Child":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":["In","Optional"]}
|
|
,{"Name":"lpRawData","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In",{"Kind":"MemorySize","BytesParamIndex":6},"Optional"]}
|
|
]
|
|
},{
|
|
"Name":"ReportEventW"
|
|
,"SetLastError":true
|
|
,"DllImport":"ADVAPI32.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows5.0"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventSourceHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"wType","Type":{"Kind":"ApiRef","Name":"REPORT_EVENT_TYPE","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"wCategory","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":["In"]}
|
|
,{"Name":"dwEventID","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"lpUserSid","Type":{"Kind":"ApiRef","Name":"PSID","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional"]}
|
|
,{"Name":"wNumStrings","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":["In"]}
|
|
,{"Name":"dwDataSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"lpStrings","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":5,"Child":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":["In","Optional"]}
|
|
,{"Name":"lpRawData","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In",{"Kind":"MemorySize","BytesParamIndex":6},"Optional"]}
|
|
]
|
|
},{
|
|
"Name":"GetEventLogInformation"
|
|
,"SetLastError":true
|
|
,"DllImport":"ADVAPI32.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows5.0"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"dwInfoLevel","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"lpBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":3}]}
|
|
,{"Name":"cbBufSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"pcbBytesNeeded","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
|
|
]
|
|
}],
|
|
|
|
"UnicodeAliases":[
|
|
"ClearEventLog"
|
|
,"BackupEventLog"
|
|
,"OpenEventLog"
|
|
,"RegisterEventSource"
|
|
,"OpenBackupEventLog"
|
|
,"ReadEventLog"
|
|
,"ReportEvent"
|
|
]
|
|
}
|