wevtfwd.dll

v10.0.19041.5794 32-bit Windows NT Analyzed
Download
Description
WS-Management Event Forwarding Plug-in
Authors
© Microsoft Corporation. All rights reserved.
File size
96.0 KB
Uploaded
2025-12-01 08:06
Views
49
SHA-256
e660838ff5b6aefee78404b8cebaac35

Exported functions 5

WSManPluginShutdown #1 · 0x46d0
WSManPluginStartup #2 · 0x4560
WSManProvPullEvents #3 · 0x4950
WSManProvSubscribe #4 · 0x4720
WSManProvUnsubscribe #5 · 0x48a0

Imported DLLs & functions 138

ADVAPI32.dll 18
EventRegister 0x10016030
EventUnregister 0x10016034
EventWrite 0x1001602c
GetTraceEnableFlags 0x10016018
GetTraceEnableLevel 0x1001603c
GetTraceLoggerHandle 0x10016040
OpenThreadToken 0x1001600c
RegCloseKey 0x10016004
RegEnumKeyExW 0x10016024
RegEnumValueW 0x10016038
RegisterTraceGuidsW 0x10016014
RegNotifyChangeKeyValue 0x1001601c
RegOpenKeyExW 0x10016000
RegQueryInfoKeyW 0x10016020
RegQueryValueExW 0x10016028
SetThreadToken 0x10016008
TraceMessage 0x10016044
UnregisterTraceGuids 0x10016010
KERNEL32.dll 58
AcquireSRWLockExclusive 0x100160cc
AcquireSRWLockShared 0x10016124
CloseHandle 0x10016068
CloseThreadpoolTimer 0x100160c4
CreateEventW 0x10016088
CreateMutexExW 0x10016128
CreateSemaphoreExW 0x10016130
CreateThread 0x10016054
CreateThreadpoolTimer 0x100160e0
DebugBreak 0x10016118
DeleteCriticalSection 0x10016070
DisableThreadLibraryCalls 0x100160e4
EnterCriticalSection 0x10016074
FormatMessageW 0x100160f4
GetComputerNameExW 0x10016050
GetComputerNameW 0x1001604c
GetCurrentProcess 0x100160bc
GetCurrentProcessId 0x100160a8
GetCurrentThread 0x10016064
GetCurrentThreadId 0x100160ac
GetLastError 0x1001607c
GetModuleFileNameA 0x1001612c
GetModuleHandleExW 0x10016108
GetModuleHandleW 0x10016120
GetProcAddress 0x100160b8
GetProcessHeap 0x1001605c
GetSystemTime 0x1001611c
GetSystemTimeAsFileTime 0x100160b0
GetThreadLocale 0x10016104
GetThreadPriority 0x1001608c
GetTickCount 0x10016080
HeapAlloc 0x10016058
HeapFree 0x10016060
InitializeCriticalSectionEx 0x1001606c
IsDebuggerPresent 0x10016114
LeaveCriticalSection 0x10016078
LocaleNameToLCID 0x100160c8
OpenSemaphoreW 0x100160d4
OutputDebugStringW 0x100160ec
QueryPerformanceCounter 0x100160a4
RegisterWaitForSingleObject 0x10016098
ReleaseMutex 0x100160f8
ReleaseSemaphore 0x1001610c
ReleaseSRWLockExclusive 0x100160f0
ReleaseSRWLockShared 0x100160dc
SetEvent 0x1001609c
SetLastError 0x10016110
SetThreadpoolTimer 0x100160d8
SetThreadPriority 0x10016090
SetUnhandledExceptionFilter 0x100160e8
Sleep 0x10016084
TerminateProcess 0x100160c0
UnhandledExceptionFilter 0x100160b4
UnregisterWaitEx 0x100160a0
WaitForMultipleObjects 0x10016094
WaitForSingleObject 0x100160fc
WaitForSingleObjectEx 0x100160d0
WaitForThreadpoolTimerCallbacks 0x10016100
msvcrt.dll 35
__CxxFrameHandler3 0x10016194
__dllonexit 0x100161ac
_amsg_exit 0x100161bc
_CxxThrowException 0x100161cc
_except_handler4_common 0x1001619c
_initterm 0x100161b8
_lock 0x100161b4
_onexit 0x100161a8
_purecall 0x10016200
_unlock 0x100161b0
_vsnprintf_s 0x10016188
_vsnwprintf 0x10016190
_wcsicmp 0x100161f4
_wcsnicmp 0x100161ec
_wcstoui64 0x10016180
_XcptFilter 0x100161c0
??0exception@@QAE@ABQBD@Z 0x100161e0
??0exception@@QAE@ABQBDH@Z 0x100161dc
??0exception@@QAE@ABV0@@Z 0x100161d8
??0exception@@QAE@XZ 0x100161e4
??1exception@@UAE@XZ 0x100161d4
??1type_info@@UAE@XZ 0x100161a0
?terminate@@YAXXZ 0x100161a4
?what@exception@@UBEPBDXZ 0x100161d0
free 0x100161fc
iswspace 0x100161f0
malloc 0x100161f8
memcmp 0x10016198
memcpy 0x100161c8
memcpy_s 0x1001618c
memmove 0x100161c4
memmove_s 0x10016184
memset 0x10016208
swprintf_s 0x10016204
wcsncpy_s 0x100161e8
RPCRT4.dll 3
RpcStringFreeW 0x10016140
UuidCreate 0x10016138
UuidToStringW 0x1001613c
USERENV.dll 2
RegisterGPNotification 0x1001614c
UnregisterGPNotification 0x10016148
wevtapi.dll 12
EvtClose 0x10016230
EvtCreateBookmark 0x1001621c
EvtCreateRenderContext 0x10016234
EvtFormatMessage 0x1001622c
EvtGetQueryInfo 0x10016228
EvtNext 0x10016218
EvtOpenPublisherMetadata 0x10016214
EvtQuery 0x10016210
EvtRender 0x10016224
EvtSeek 0x1001623c
EvtSubscribe 0x10016238
EvtUpdateBookmark 0x10016220
WsmSvc.DLL 10
WSManAddSubscriptionManagerInternal 0x10016154
WSManCloseObjectHandle 0x10016168
WSManClosePublisherHandle 0x10016158
WSManConstructError 0x10016164
WSManDecodeObject 0x10016174
WSManDeliverEndSubscriptionNotification 0x10016170
WSManDeliverEvent 0x10016178
WSManEncodeObject 0x1001616c
WSManEnumeratorAddEvent 0x1001615c
WSManRemoveSubscriptionManagerInternal 0x10016160