C / C++ / MFC

oid DisplayEntries( )
{
    HANDLE h;
    EVENTLOGRECORD *pevlr; 
    BYTE bBuffer[BUFFER_SIZE]; 
	DWORD dwRead, dwNeeded, cRecords, dwThisRecord;
	int counter=0;
 
    // Open the Application event log. 
 
    h = OpenEventLog( NULL,    // use local computer
             "System");   // source name
	if (h == NULL)
	{
		Form1->msg = Form1->msg.sprintf("Could not open the Application event log.");
		Form1->Memo2->Lines->Add(Form1->msg);
    }
 
    pevlr = (EVENTLOGRECORD *) &bBuffer; 
 
    GetOldestEventLogRecord(h, &dwThisRecord);

    while (ReadEventLog(h,                // event log handle 
                EVENTLOG_FORWARDS_READ |  // reads forward 
                EVENTLOG_SEQUENTIAL_READ, // sequential read 
                0,            // ignored for sequential reads 
                pevlr,        // pointer to buffer 
                BUFFER_SIZE,  // size of buffer 
                &dwRead,      // number of bytes read 
                &dwNeeded))   // bytes in next record 
    {
        while (dwRead > 0) 
        { 
			printf("%02d  Event ID: 0x%08X ",
				dwThisRecord++, pevlr->EventID);
			printf("EventType: %d Source: %s\n",
				pevlr->EventType, (LPSTR) ((LPBYTE) pevlr +
				sizeof(EVENTLOGRECORD)));
			if ((LPSTR)((LPBYTE) pevlr + sizeof(EVENTLOGRECORD))=="Windows Agent")
			{
				MessageBox(NULL, "FOUND", "INFO",MB_OK);
			}
 
            dwRead -= pevlr->Length; 
            pevlr = (EVENTLOGRECORD *) 
				((LPBYTE) pevlr + pevlr->Length);
        } 
 
        pevlr = (EVENTLOGRECORD *) &bBuffer; 
    } 
 
    CloseEventLog(h); 
}

---

The only programmers that are better that C programmers are those who code in 1's and 0's

Programm3r
My Blog: ^_^