a „oeEã@sTddlZddlZddlZddlZddlZd dd„Zdd„Zdd„Zed krPeƒdS) éNÚ Applicationc CsVt ||¡}t |¡}d}t |tjtjBd¡}|s8�q|D]Ì}t ||¡}|jdur¦z$t   ||j¡\} } } d| | f} Wnt j y˜t |jƒ} Yn0d| f} nd} |r-t : LogType - Use the specified log - default = 'Application')rrrrrÚusage@s rcCsˆt ¡d@rtdƒdSddl}ddl}| |jdd…d¡\}}d}d}}d}d}t|ƒdkrttdƒtƒdS|D]\\} } | dkrŒ| }| d kr˜| }| d vr¬tƒdS| d kr¸d}| d krÄd}| d krx|d}qx|�rnt ¡} t   | t j ¡} t   | t j¡d} tj|dddgd d¡| d�tj|dtjddgd d¡| d�tj|dtjddgd d¡| d�tdƒ|�r„t|||dkƒdS)NlzThis sample only runs on NTréz rwh?c:t:vrz Invalid argsz-tz-c)z-hz-?z-rz-wz-vézThe message text for event 2zAnother insertzRawDataÚascii)ÚstringsÚdataÚsidz A warningzAn even more dire warning)Z eventTyperrrzAn infoz Too much infoz'Successfully wrote 3 records to the log)Úwin32apiZ GetVersionrÚgetoptÚsysÚargvr rZGetCurrentProcessrZOpenProcessTokenÚwin32conZ TOKEN_READZGetTokenInformationZ TokenUserrZ ReportEventÚencoderZEVENTLOG_WARNING_TYPEZEVENTLOG_INFORMATION_TYPEr)rr ZoptsÚargsr Zdo_readZdo_writer ÚverboseÚoptÚvalÚphÚthZmy_sidrrrÚtestIst    ûúúr*Ú__main__)rr) rr"rrrrrr*Ú__name__rrrrÚs 8 D