wevtfwd.dll

v10.0.19041.5794 64-bit Windows NT Analyzed
Download
Description
WS-Management Event Forwarding Plug-in
Authors
© Microsoft Corporation. All rights reserved.
File size
134.0 KB
Uploaded
2025-12-01 07:42
Views
62
SHA-256
80c9c5696a50a70e52a6f047791f677b

Exported functions 5

WSManPluginShutdown #1 · 0x2240
WSManPluginStartup #2 · 0x1ff0
WSManProvPullEvents #3 · 0x2660
WSManProvSubscribe #4 · 0x22d0
WSManProvUnsubscribe #5 · 0x24b0

Imported DLLs & functions 142

ADVAPI32.dll 18
EventRegister 0x180017e38
EventUnregister 0x180017e40
EventWrite 0x180017e30
GetTraceEnableFlags 0x180017e68
GetTraceEnableLevel 0x180017e70
GetTraceLoggerHandle 0x180017e78
OpenThreadToken 0x180017e50
RegCloseKey 0x180017e00
RegEnumKeyExW 0x180017e20
RegEnumValueW 0x180017e48
RegisterTraceGuidsW 0x180017e60
RegNotifyChangeKeyValue 0x180017e10
RegOpenKeyExW 0x180017df8
RegQueryInfoKeyW 0x180017e18
RegQueryValueExW 0x180017e28
SetThreadToken 0x180017e08
TraceMessage 0x180017e80
UnregisterTraceGuids 0x180017e58
KERNEL32.dll 58
AcquireSRWLockExclusive 0x180018010
AcquireSRWLockShared 0x180017eb8
CloseHandle 0x180017ee8
CloseThreadpoolTimer 0x180018018
CreateEventW 0x180017f30
CreateMutexExW 0x180017ec0
CreateSemaphoreExW 0x180018058
CreateThread 0x180017e90
CreateThreadpoolTimer 0x180017fe8
DebugBreak 0x180017ea0
DeleteCriticalSection 0x180017f00
DisableThreadLibraryCalls 0x180017ef0
EnterCriticalSection 0x180017f08
FormatMessageW 0x180018030
GetComputerNameExW 0x180017ee0
GetComputerNameW 0x180017fb0
GetCurrentProcess 0x180017f98
GetCurrentProcessId 0x180017f70
GetCurrentThread 0x180017fd0
GetCurrentThreadId 0x180017f78
GetLastError 0x180017f18
GetModuleFileNameA 0x180017fc8
GetModuleHandleExW 0x180017fd8
GetModuleHandleW 0x180017eb0
GetProcAddress 0x180017fe0
GetProcessHeap 0x180017ed0
GetSystemTime 0x180017ea8
GetSystemTimeAsFileTime 0x180017f80
GetThreadLocale 0x180018050
GetThreadPriority 0x180017f38
GetTickCount 0x180017f20
HeapAlloc 0x180017ec8
HeapFree 0x180017ed8
InitializeCriticalSectionEx 0x180017ef8
IsDebuggerPresent 0x180017e98
LeaveCriticalSection 0x180017f10
LocaleNameToLCID 0x180017fb8
OpenSemaphoreW 0x180018000
OutputDebugStringW 0x180018020
QueryPerformanceCounter 0x180017f68
RegisterWaitForSingleObject 0x180017f50
ReleaseMutex 0x180018038
ReleaseSemaphore 0x180017fa8
ReleaseSRWLockExclusive 0x180018028
ReleaseSRWLockShared 0x180017ff0
SetEvent 0x180017f58
SetLastError 0x180017fc0
SetThreadpoolTimer 0x180017ff8
SetThreadPriority 0x180017f40
SetUnhandledExceptionFilter 0x180017f90
Sleep 0x180017f28
TerminateProcess 0x180017fa0
UnhandledExceptionFilter 0x180017f88
UnregisterWaitEx 0x180017f60
WaitForMultipleObjects 0x180017f48
WaitForSingleObject 0x180018040
WaitForSingleObjectEx 0x180018008
WaitForThreadpoolTimerCallbacks 0x180018048
msvcrt.dll 36
__C_specific_handler 0x180018160
__CxxFrameHandler3 0x1800180f8
__dllonexit 0x180018148
_amsg_exit 0x180018170
_CxxThrowException 0x180018190
_initterm 0x180018168
_lock 0x180018158
_onexit 0x180018140
_purecall 0x180018200
_unlock 0x180018150
_vsnprintf_s 0x180018110
_vsnwprintf 0x180018100
_wcsicmp 0x1800181e0
_wcsnicmp 0x1800181d0
_wcstoui64 0x180018120
_XcptFilter 0x180018178
??0exception@@QEAA@AEBQEBD@Z 0x1800181b8
??0exception@@QEAA@AEBQEBDH@Z 0x1800181b0
??0exception@@QEAA@AEBV0@@Z 0x1800181a8
??0exception@@QEAA@XZ 0x1800181c0
??1exception@@UEAA@XZ 0x1800181a0
??1type_info@@UEAA@XZ 0x180018138
?terminate@@YAXXZ 0x1800181f0
?what@exception@@UEBAPEBDXZ 0x180018198
free 0x1800181f8
iswspace 0x1800181d8
malloc 0x1800181e8
memcmp 0x180018128
memcpy 0x180018188
memcpy_s 0x180018108
memmove 0x180018180
memmove_s 0x180018118
memset 0x180018130
swprintf_s 0x180018208
wcscmp 0x180018210
wcsncpy_s 0x1800181c8
ntdll.dll 3
RtlCaptureContext 0x180018220
RtlLookupFunctionEntry 0x180018230
RtlVirtualUnwind 0x180018228
RPCRT4.dll 3
RpcStringFreeW 0x180018068
UuidCreate 0x180018070
UuidToStringW 0x180018078
USERENV.dll 2
RegisterGPNotification 0x180018090
UnregisterGPNotification 0x180018088
wevtapi.dll 12
EvtClose 0x180018260
EvtCreateBookmark 0x180018258
EvtCreateRenderContext 0x180018268
EvtFormatMessage 0x180018288
EvtGetQueryInfo 0x180018298
EvtNext 0x180018278
EvtOpenPublisherMetadata 0x180018248
EvtQuery 0x180018240
EvtRender 0x180018250
EvtSeek 0x180018280
EvtSubscribe 0x180018270
EvtUpdateBookmark 0x180018290
WsmSvc.DLL 10
WSManAddSubscriptionManagerInternal 0x1800180c0
WSManCloseObjectHandle 0x1800180b8
WSManClosePublisherHandle 0x1800180d0
WSManConstructError 0x1800180a8
WSManDecodeObject 0x1800180b0
WSManDeliverEndSubscriptionNotification 0x1800180c8
WSManDeliverEvent 0x1800180a0
WSManEncodeObject 0x1800180e0
WSManEnumeratorAddEvent 0x1800180d8
WSManRemoveSubscriptionManagerInternal 0x1800180e8