EventsInstaller.dll

v10.0.19041.5676 32-bit Windows NT Analyzed
Download
Description
Events Offline Installer
Authors
© Microsoft Corporation. All rights reserved.
File size
213.9 KB
Uploaded
2025-12-01 08:36
Views
42
SHA-256
e7296a9efc6564f02e69eea351fdd4a4

Exported functions 2

DllCanUnloadNow #1 · 0x5c40
DllCsiGetHandler #2 · 0x5c70

Imported DLLs & functions 166

api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x10026040
IsDebuggerPresent 0x10026044
OutputDebugStringW 0x10026048
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x1002605c
SetLastError 0x10026050
SetUnhandledExceptionFilter 0x10026058
UnhandledExceptionFilter 0x10026054
api-ms-win-core-file-l1-1-0.dll 2
CreateFileW 0x10026064
GetFileAttributesW 0x10026068
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x10026070
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x1002607c
HeapAlloc 0x10026080
HeapFree 0x10026078
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x1002608c
LocalFree 0x10026088
api-ms-win-core-libraryloader-l1-1-0.dll 12
DisableThreadLibraryCalls 0x100260c0
FindResourceExW 0x100260a4
FreeLibrary 0x100260ac
FreeResource 0x100260b4
GetModuleFileNameA 0x100260a8
GetModuleHandleExW 0x10026094
GetModuleHandleW 0x100260bc
GetProcAddress 0x1002609c
LoadLibraryExW 0x10026098
LoadResource 0x100260a0
LockResource 0x100260b0
SizeofResource 0x100260b8
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x100260c8
api-ms-win-core-memory-l1-1-0.dll 1
UnmapViewOfFile 0x100260d0
api-ms-win-core-processenvironment-l1-1-0.dll 1
ExpandEnvironmentStringsW 0x100260d8
api-ms-win-core-processthreads-l1-1-0.dll 4
GetCurrentProcess 0x100260e8
GetCurrentProcessId 0x100260ec
GetCurrentThreadId 0x100260e0
TerminateProcess 0x100260e4
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x100260f4
api-ms-win-core-registry-l1-1-0.dll 11
RegCloseKey 0x10026118
RegCreateKeyExW 0x1002610c
RegDeleteKeyExW 0x10026100
RegDeleteValueW 0x10026110
RegEnumKeyExW 0x10026104
RegGetKeySecurity 0x10026120
RegGetValueW 0x1002611c
RegOpenKeyExW 0x10026124
RegQueryInfoKeyW 0x100260fc
RegQueryValueExW 0x10026114
RegSetValueExW 0x10026108
api-ms-win-core-registry-l2-1-0.dll 1
RegCreateKeyTransactedW 0x1002612c
api-ms-win-core-string-l1-1-0.dll 1
CompareStringOrdinal 0x10026134
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x1002615c
AcquireSRWLockShared 0x1002613c
CreateMutexExW 0x10026178
CreateSemaphoreExW 0x10026164
DeleteCriticalSection 0x10026160
EnterCriticalSection 0x10026154
InitializeCriticalSection 0x1002614c
InitializeCriticalSectionEx 0x1002616c
LeaveCriticalSection 0x10026148
OpenSemaphoreW 0x10026170
ReleaseMutex 0x10026168
ReleaseSemaphore 0x10026150
ReleaseSRWLockExclusive 0x10026140
ReleaseSRWLockShared 0x10026144
WaitForSingleObject 0x10026158
WaitForSingleObjectEx 0x10026174
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x10026180
InitOnceComplete 0x10026184
Sleep 0x10026188
api-ms-win-core-sysinfo-l1-1-0.dll 2
GetSystemTimeAsFileTime 0x10026194
GetTickCount 0x10026190
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x100261a8
CreateThreadpoolTimer 0x100261a4
SetThreadpoolTimer 0x1002619c
WaitForThreadpoolTimerCallbacks 0x100261a0
api-ms-win-core-util-l1-1-0.dll 2
DecodePointer 0x100261b0
EncodePointer 0x100261b4
api-ms-win-eventing-classicprovider-l1-1-0.dll 6
GetTraceEnableFlags 0x100261bc
GetTraceEnableLevel 0x100261c0
GetTraceLoggerHandle 0x100261c4
RegisterTraceGuidsW 0x100261cc
TraceMessage 0x100261d0
UnregisterTraceGuids 0x100261c8
api-ms-win-security-base-l1-1-0.dll 16
AddAce 0x100261dc
GetAce 0x10026214
GetAclInformation 0x100261e4
GetSecurityDescriptorControl 0x100261fc
GetSecurityDescriptorDacl 0x100261ec
GetSecurityDescriptorGroup 0x100261f4
GetSecurityDescriptorLength 0x100261f0
GetSecurityDescriptorOwner 0x100261e0
InitializeAcl 0x100261e8
InitializeSecurityDescriptor 0x10026210
IsValidSecurityDescriptor 0x1002620c
MakeSelfRelativeSD 0x100261f8
MapGenericMask 0x100261d8
SetSecurityDescriptorDacl 0x10026208
SetSecurityDescriptorGroup 0x10026200
SetSecurityDescriptorOwner 0x10026204
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSecurityDescriptorToStringSecurityDescriptorW 0x1002621c
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x10026220
bcrypt.dll 7
BCryptCloseAlgorithmProvider 0x10026234
BCryptCreateHash 0x10026228
BCryptDestroyHash 0x10026230
BCryptFinishHash 0x1002622c
BCryptGetProperty 0x1002623c
BCryptHashData 0x10026238
BCryptOpenAlgorithmProvider 0x10026240
msvcrt.dll 41
__CxxFrameHandler3 0x100262a8
__dllonexit 0x10026294
_amsg_exit 0x10026254
_CxxThrowException 0x10026264
_errno 0x100262a0
_except_handler4_common 0x100262e4
_initterm 0x10026250
_itow_s 0x100262d4
_lock 0x10026248
_onexit 0x10026298
_purecall 0x100262e0
_ultow_s 0x100262d0
_unlock 0x10026290
_vsnprintf_s 0x100262ac
_vsnwprintf 0x100262b0
_wcsicmp 0x100262bc
_wcsnicmp 0x100262d8
_wcstoui64 0x100262c0
_wtoi 0x100262c8
_XcptFilter 0x10026258
??0exception@@QAE@ABQBD@Z 0x10026278
??0exception@@QAE@ABQBDH@Z 0x10026274
??0exception@@QAE@ABV0@@Z 0x10026270
??0exception@@QAE@XZ 0x1002627c
??1exception@@UAE@XZ 0x1002626c
??1type_info@@UAE@XZ 0x1002629c
?terminate@@YAXXZ 0x1002624c
?what@exception@@UBEPBDXZ 0x10026268
free 0x1002628c
malloc 0x10026288
memcmp 0x100262a4
memcpy 0x10026260
memcpy_s 0x100262b4
memmove 0x1002625c
memmove_s 0x100262b8
memset 0x100262e8
towupper 0x100262dc
wcschr 0x100262cc
wcscpy_s 0x10026280
wcsncmp 0x10026284
wcstoul 0x100262c4
ntdll.dll 5
NtCommitTransaction 0x100262f0
NtCreateTransaction 0x100262f4
RtlGetVersion 0x10026300
RtlInitUnicodeStringEx 0x100262f8
RtlNtStatusToDosError 0x100262fc
RPCRT4.dll 1
UuidCreate 0x10026000
WCP.dll 13
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YIKPAU_RTL_TRACING_FACILITY@123@@Z 0x10026020
?RtlTraceFormat_PCbool@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x1002602c
?RtlTraceFormat_PCHRESULT@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10026030
?RtlTraceFormat_PCLONG@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10026018
?RtlTraceFormat_PCSTR_AsLiteralString@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10026038
?RtlTraceFormat_PCULONG_AsWin32Error@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10026034
?RtlTraceFormat_PCULONG@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10026008
?RtlTraceFormat_PCWSTR_AsLiteralString@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x1002601c
?RtlTraceVa@Rtl@WCP@Windows@@YIXKKPAU_RTL_TRACING_FACILITY@123@QBDKPAD@Z 0x10026010
RtlCalculateUtf16StringLengthFromLUtf8String 0x10026028
RtlCopyLUtf8StringToLUnicodeString 0x10026024
RtlCreateMicrodom 0x1002600c
RtlFreeLUtf8String 0x10026014