C / C++ / MFC

HRESULT hResult;		
	WORD          wKey = 0; 	
	LARGE_INTEGER liZero = { 0 }; 
	LPSTREAM      pTNEFStream = NULL; 
	LPITNEF       pTNEFObj = NULL; 	
	CLSID clsid;
	LPMSGSESS pMsgSession =  NULL;
	IMalloc *m_pMalloc;
	IStorage *pStorage = NULL;

	MAPIINIT_0 MInit;	
	MInit.ulVersion = MAPI_INIT_VERSION;
	MInit.ulFlags = 0;

	hResult = MAPIInitialize(NULL);	

	if (hResult !=S_OK){ 			
		throw(HResultException("MapiInit ResolveMsg",0));						
	 }  


	IMessage* imessage;
	HRESULT hr = S_OK;
	
	hResult = ::OpenIMsgOnIStg(pMsgSession,MAPIAllocateBuffer,MAPIAllocateMore,MAPIFreeBuffer,m_pMalloc,0,
							pStorage,0, 0, 0, &imessage);  
	if (hResult !=S_OK){ 			 		
		throw(HResultException("OpenIMsgOnIStg ResolveMsg",0));
	 }

	IConverterSession* pConverterSession;
	hResult = CoCreateInstance(clsid, NULL, CLSCTX_INPROC_SERVER, IID_IConverterSession, (void **) &pConverterSession);
	if (hResult !=S_OK){ 			 		
		throw(HResultException("Cancel ResolveMsg",0));
	 }
	
	pConverterSession->SetEncoding(IET_QP);
	pConverterSession->SetSaveFormat(SAVE_RFC822);
	hResult = pConverterSession->MAPIToMIMEStm(LPMESSAGE(msgName.c_str()), LPSTREAM(imessage), CCSF_SMTP);
	if (hResult !=S_OK){ 			 		
		throw(HResultException("MAPIToMIMEStm ResolveMsg",0));
	 }

	}

	::MAPIUninitialize();  

oid DisplayEntries( )
{
    HANDLE h;
    EVENTLOGRECORD *pevlr; 
    BYTE bBuffer[BUFFER_SIZE]; 
	DWORD dwRead, dwNeeded, cRecords, dwThisRecord;
	int counter=0;
 
    // Open the Application event log. 
 
    h = OpenEventLog( NULL,    // use local computer
             "System");   // source name
	if (h == NULL)
	{
		Form1->msg = Form1->msg.sprintf("Could not open the Application event log.");
		Form1->Memo2->Lines->Add(Form1->msg);
    }
 
    pevlr = (EVENTLOGRECORD *) &bBuffer; 
 
    GetOldestEventLogRecord(h, &dwThisRecord);

    while (ReadEventLog(h,                // event log handle 
                EVENTLOG_FORWARDS_READ |  // reads forward 
                EVENTLOG_SEQUENTIAL_READ, // sequential read 
                0,            // ignored for sequential reads 
                pevlr,        // pointer to buffer 
                BUFFER_SIZE,  // size of buffer 
                &dwRead,      // number of bytes read 
                &dwNeeded))   // bytes in next record 
    {
        while (dwRead > 0) 
        { 
			printf("%02d  Event ID: 0x%08X ",
				dwThisRecord++, pevlr->EventID);
			printf("EventType: %d Source: %s\n",
				pevlr->EventType, (LPSTR) ((LPBYTE) pevlr +
				sizeof(EVENTLOGRECORD)));
			if ((LPSTR)((LPBYTE) pevlr + sizeof(EVENTLOGRECORD))=="Windows Agent")
			{
				MessageBox(NULL, "FOUND", "INFO",MB_OK);
			}
 
            dwRead -= pevlr->Length; 
            pevlr = (EVENTLOGRECORD *) 
				((LPBYTE) pevlr + pevlr->Length);
        } 
 
        pevlr = (EVENTLOGRECORD *) &bBuffer; 
    } 
 
    CloseEventLog(h); 
}

---

The only programmers that are better that C programmers are those who code in 1's and 0's

Programm3r
My Blog: ^_^