wecapi.dll
Description: Event Collector Configuration API
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.3636
Architecture: 32-bit
Operating System: Windows NT
SHA256: ab64ff787de7295a4d676d63634c5781
File Size: 56.0 KB
Uploaded At: Dec. 1, 2025, 8:06 a.m.
Views: 14
Exported Functions
- EcIsConfigRequired (Ordinal: 1, Address: 0x4a10)
- EcQuickConfig (Ordinal: 2, Address: 0x49b0)
- EcClose (Ordinal: 3, Address: 0x4950)
- EcDeleteSubscription (Ordinal: 4, Address: 0x3ff0)
- EcEnumNextSubscription (Ordinal: 5, Address: 0x3900)
- EcGetObjectArrayProperty (Ordinal: 6, Address: 0x4360)
- EcGetObjectArraySize (Ordinal: 7, Address: 0x4120)
- EcGetSubscriptionProperty (Ordinal: 8, Address: 0x3d90)
- EcGetSubscriptionRunTimeStatus (Ordinal: 9, Address: 0x45f0)
- EcInsertObjectArrayElement (Ordinal: 10, Address: 0x44f0)
- EcOpenSubscription (Ordinal: 11, Address: 0x3a40)
- EcOpenSubscriptionEnum (Ordinal: 12, Address: 0x3720)
- EcRemoveObjectArrayElement (Ordinal: 13, Address: 0x4570)
- EcRetrySubscription (Ordinal: 14, Address: 0x4820)
- EcSaveSubscription (Ordinal: 15, Address: 0x3f20)
- EcSetObjectArrayProperty (Ordinal: 16, Address: 0x4230)
- EcSetSubscriptionProperty (Ordinal: 17, Address: 0x3c60)
Imported DLLs & Functions
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x1000e024)
- SetLastError (Address: 0x1000e028)
- SetUnhandledExceptionFilter (Address: 0x1000e01c)
- UnhandledExceptionFilter (Address: 0x1000e020)
api-ms-win-core-file-l1-1-0.dll
- CompareFileTime (Address: 0x1000e030)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x1000e038)
- HeapAlloc (Address: 0x1000e040)
- HeapFree (Address: 0x1000e03c)
api-ms-win-core-localization-l1-2-0.dll
- LocaleNameToLCID (Address: 0x1000e048)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x1000e058)
- GetCurrentProcessId (Address: 0x1000e054)
- GetCurrentThreadId (Address: 0x1000e050)
- TerminateProcess (Address: 0x1000e05c)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x1000e064)
api-ms-win-core-synch-l1-1-0.dll
- DeleteCriticalSection (Address: 0x1000e070)
- EnterCriticalSection (Address: 0x1000e078)
- InitializeCriticalSectionEx (Address: 0x1000e06c)
- LeaveCriticalSection (Address: 0x1000e074)
api-ms-win-core-synch-l1-2-0.dll
- Sleep (Address: 0x1000e080)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemTimeAsFileTime (Address: 0x1000e08c)
- GetTickCount (Address: 0x1000e088)
api-ms-win-eventing-classicprovider-l1-1-0.dll
- TraceMessage (Address: 0x1000e094)
api-ms-win-service-management-l1-1-0.dll
- CloseServiceHandle (Address: 0x1000e0a8)
- OpenSCManagerW (Address: 0x1000e0a4)
- OpenServiceW (Address: 0x1000e0a0)
- StartServiceW (Address: 0x1000e09c)
api-ms-win-service-management-l2-1-0.dll
- ChangeServiceConfig2W (Address: 0x1000e0b4)
- ChangeServiceConfigW (Address: 0x1000e0b0)
- QueryServiceConfigW (Address: 0x1000e0b8)
api-ms-win-service-winsvc-l1-1-0.dll
- QueryServiceStatus (Address: 0x1000e0c0)
msvcrt.dll
- __CxxFrameHandler3 (Address: 0x1000e0fc)
- __dllonexit (Address: 0x1000e0e4)
- _amsg_exit (Address: 0x1000e0f4)
- _CxxThrowException (Address: 0x1000e0c8)
- _except_handler4_common (Address: 0x1000e104)
- _initterm (Address: 0x1000e0e8)
- _lock (Address: 0x1000e10c)
- _onexit (Address: 0x1000e0e0)
- _purecall (Address: 0x1000e114)
- _unlock (Address: 0x1000e0f8)
- _XcptFilter (Address: 0x1000e108)
- ??0exception@@QAE@ABQBD@Z (Address: 0x1000e118)
- ??0exception@@QAE@ABQBDH@Z (Address: 0x1000e110)
- ??0exception@@QAE@ABV0@@Z (Address: 0x1000e100)
- ??1exception@@UAE@XZ (Address: 0x1000e0d0)
- ??1type_info@@UAE@XZ (Address: 0x1000e0d8)
- ?what@exception@@UBEPBDXZ (Address: 0x1000e0cc)
- free (Address: 0x1000e0f0)
- iswalnum (Address: 0x1000e0dc)
- iswspace (Address: 0x1000e120)
- malloc (Address: 0x1000e0ec)
- memcpy (Address: 0x1000e0d4)
- memmove (Address: 0x1000e11c)
- memset (Address: 0x1000e124)
RPCRT4.dll
- NdrClientCall4 (Address: 0x1000e004)
- RpcBindingFree (Address: 0x1000e00c)
- RpcBindingFromStringBindingW (Address: 0x1000e008)
- RpcBindingSetAuthInfoW (Address: 0x1000e014)
- RpcStringBindingComposeW (Address: 0x1000e000)
- RpcStringFreeW (Address: 0x1000e010)
wevtapi.dll
- EvtClose (Address: 0x1000e12c)
- EvtGetChannelConfigProperty (Address: 0x1000e134)
- EvtOpenChannelConfig (Address: 0x1000e130)
- EvtSaveChannelConfig (Address: 0x1000e13c)
- EvtSetChannelConfigProperty (Address: 0x1000e138)