EventsInstaller.dll

v10.0.19041.6271 32-bit Windows NT Analyzed
Download
Description
Events Offline Installer
Authors
© Microsoft Corporation. All rights reserved.
File size
209.4 KB
Uploaded
2025-12-01 08:36
Views
39
SHA-256
552352d03006515222aa5cb506cd743e

Exported functions 2

DllCanUnloadNow #1 · 0x5bc0
DllCsiGetHandler #2 · 0x5bf0

Imported DLLs & functions 166

api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x10025040
IsDebuggerPresent 0x10025044
OutputDebugStringW 0x10025048
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x1002505c
SetLastError 0x10025050
SetUnhandledExceptionFilter 0x10025058
UnhandledExceptionFilter 0x10025054
api-ms-win-core-file-l1-1-0.dll 2
CreateFileW 0x10025064
GetFileAttributesW 0x10025068
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x10025070
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x1002507c
HeapAlloc 0x10025080
HeapFree 0x10025078
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x1002508c
LocalFree 0x10025088
api-ms-win-core-libraryloader-l1-1-0.dll 12
DisableThreadLibraryCalls 0x100250c0
FindResourceExW 0x100250a4
FreeLibrary 0x100250ac
FreeResource 0x100250b4
GetModuleFileNameA 0x100250a8
GetModuleHandleExW 0x10025094
GetModuleHandleW 0x100250bc
GetProcAddress 0x1002509c
LoadLibraryExW 0x10025098
LoadResource 0x100250a0
LockResource 0x100250b0
SizeofResource 0x100250b8
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x100250c8
api-ms-win-core-memory-l1-1-0.dll 1
UnmapViewOfFile 0x100250d0
api-ms-win-core-processenvironment-l1-1-0.dll 1
ExpandEnvironmentStringsW 0x100250d8
api-ms-win-core-processthreads-l1-1-0.dll 4
GetCurrentProcess 0x100250e8
GetCurrentProcessId 0x100250ec
GetCurrentThreadId 0x100250e0
TerminateProcess 0x100250e4
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x100250f4
api-ms-win-core-registry-l1-1-0.dll 11
RegCloseKey 0x10025118
RegCreateKeyExW 0x1002510c
RegDeleteKeyExW 0x10025100
RegDeleteValueW 0x10025110
RegEnumKeyExW 0x10025104
RegGetKeySecurity 0x10025120
RegGetValueW 0x1002511c
RegOpenKeyExW 0x10025124
RegQueryInfoKeyW 0x100250fc
RegQueryValueExW 0x10025114
RegSetValueExW 0x10025108
api-ms-win-core-registry-l2-1-0.dll 1
RegCreateKeyTransactedW 0x1002512c
api-ms-win-core-string-l1-1-0.dll 1
CompareStringOrdinal 0x10025134
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x1002515c
AcquireSRWLockShared 0x1002513c
CreateMutexExW 0x10025178
CreateSemaphoreExW 0x10025164
DeleteCriticalSection 0x10025160
EnterCriticalSection 0x10025154
InitializeCriticalSection 0x1002514c
InitializeCriticalSectionEx 0x1002516c
LeaveCriticalSection 0x10025148
OpenSemaphoreW 0x10025170
ReleaseMutex 0x10025168
ReleaseSemaphore 0x10025150
ReleaseSRWLockExclusive 0x10025140
ReleaseSRWLockShared 0x10025144
WaitForSingleObject 0x10025158
WaitForSingleObjectEx 0x10025174
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x10025180
InitOnceComplete 0x10025184
Sleep 0x10025188
api-ms-win-core-sysinfo-l1-1-0.dll 2
GetSystemTimeAsFileTime 0x10025194
GetTickCount 0x10025190
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x100251a8
CreateThreadpoolTimer 0x100251a4
SetThreadpoolTimer 0x1002519c
WaitForThreadpoolTimerCallbacks 0x100251a0
api-ms-win-core-util-l1-1-0.dll 2
DecodePointer 0x100251b0
EncodePointer 0x100251b4
api-ms-win-eventing-classicprovider-l1-1-0.dll 6
GetTraceEnableFlags 0x100251bc
GetTraceEnableLevel 0x100251c0
GetTraceLoggerHandle 0x100251c4
RegisterTraceGuidsW 0x100251cc
TraceMessage 0x100251d0
UnregisterTraceGuids 0x100251c8
api-ms-win-security-base-l1-1-0.dll 16
AddAce 0x100251dc
GetAce 0x10025214
GetAclInformation 0x100251e4
GetSecurityDescriptorControl 0x100251fc
GetSecurityDescriptorDacl 0x100251ec
GetSecurityDescriptorGroup 0x100251f4
GetSecurityDescriptorLength 0x100251f0
GetSecurityDescriptorOwner 0x100251e0
InitializeAcl 0x100251e8
InitializeSecurityDescriptor 0x10025210
IsValidSecurityDescriptor 0x1002520c
MakeSelfRelativeSD 0x100251f8
MapGenericMask 0x100251d8
SetSecurityDescriptorDacl 0x10025208
SetSecurityDescriptorGroup 0x10025200
SetSecurityDescriptorOwner 0x10025204
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSecurityDescriptorToStringSecurityDescriptorW 0x1002521c
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x10025220
bcrypt.dll 7
BCryptCloseAlgorithmProvider 0x10025234
BCryptCreateHash 0x10025228
BCryptDestroyHash 0x10025230
BCryptFinishHash 0x1002522c
BCryptGetProperty 0x1002523c
BCryptHashData 0x10025238
BCryptOpenAlgorithmProvider 0x10025240
msvcrt.dll 41
__CxxFrameHandler3 0x100252a8
__dllonexit 0x10025294
_amsg_exit 0x10025254
_CxxThrowException 0x10025264
_errno 0x100252a0
_except_handler4_common 0x100252e4
_initterm 0x10025250
_itow_s 0x100252d4
_lock 0x10025248
_onexit 0x10025298
_purecall 0x100252e0
_ultow_s 0x100252d0
_unlock 0x10025290
_vsnprintf_s 0x100252ac
_vsnwprintf 0x100252b0
_wcsicmp 0x100252bc
_wcsnicmp 0x100252d8
_wcstoui64 0x100252c0
_wtoi 0x100252c8
_XcptFilter 0x10025258
??0exception@@QAE@ABQBD@Z 0x10025278
??0exception@@QAE@ABQBDH@Z 0x10025274
??0exception@@QAE@ABV0@@Z 0x10025270
??0exception@@QAE@XZ 0x1002527c
??1exception@@UAE@XZ 0x1002526c
??1type_info@@UAE@XZ 0x1002529c
?terminate@@YAXXZ 0x1002524c
?what@exception@@UBEPBDXZ 0x10025268
free 0x1002528c
malloc 0x10025288
memcmp 0x100252a4
memcpy 0x10025260
memcpy_s 0x100252b4
memmove 0x1002525c
memmove_s 0x100252b8
memset 0x100252e8
towupper 0x100252dc
wcschr 0x100252cc
wcscpy_s 0x10025280
wcsncmp 0x10025284
wcstoul 0x100252c4
ntdll.dll 5
NtCommitTransaction 0x100252f0
NtCreateTransaction 0x100252f4
RtlGetVersion 0x10025300
RtlInitUnicodeStringEx 0x100252f8
RtlNtStatusToDosError 0x100252fc
RPCRT4.dll 1
UuidCreate 0x10025000
WCP.dll 13
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YIKPAU_RTL_TRACING_FACILITY@123@@Z 0x10025020
?RtlTraceFormat_PCbool@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x1002502c
?RtlTraceFormat_PCHRESULT@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10025030
?RtlTraceFormat_PCLONG@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10025018
?RtlTraceFormat_PCSTR_AsLiteralString@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10025038
?RtlTraceFormat_PCULONG_AsWin32Error@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10025034
?RtlTraceFormat_PCULONG@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10025008
?RtlTraceFormat_PCWSTR_AsLiteralString@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x1002501c
?RtlTraceVa@Rtl@WCP@Windows@@YIXKKPAU_RTL_TRACING_FACILITY@123@QBDKPAD@Z 0x10025010
RtlCalculateUtf16StringLengthFromLUtf8String 0x10025028
RtlCopyLUtf8StringToLUnicodeString 0x10025024
RtlCreateMicrodom 0x1002500c
RtlFreeLUtf8String 0x10025014