EventsInstaller.dll

v10.0.19041.1940 64-bit Windows NT Analyzed
Download
Description
Events Offline Installer
Authors
© Microsoft Corporation. All rights reserved.
File size
270.3 KB
Uploaded
2025-12-01 08:14
Views
56
SHA-256
7f3901d2a87492f91e1fcf7e39411e2c

Exported functions 2

DllCanUnloadNow #1 · 0x20e0
DllCsiGetHandler #2 · 0x2120

Imported DLLs & functions 168

api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x180029f40
IsDebuggerPresent 0x180029f48
OutputDebugStringW 0x180029f38
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x180029f68
SetLastError 0x180029f60
SetUnhandledExceptionFilter 0x180029f58
UnhandledExceptionFilter 0x180029f70
api-ms-win-core-file-l1-1-0.dll 2
CreateFileW 0x180029f80
GetFileAttributesW 0x180029f88
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x180029f98
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x180029fb0
HeapAlloc 0x180029fa8
HeapFree 0x180029fb8
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x180029fd0
LocalFree 0x180029fc8
api-ms-win-core-libraryloader-l1-1-0.dll 12
DisableThreadLibraryCalls 0x18002a020
FindResourceExW 0x18002a010
FreeLibrary 0x180029ff8
FreeResource 0x180029ff0
GetModuleFileNameA 0x180029fe0
GetModuleHandleExW 0x18002a038
GetModuleHandleW 0x180029fe8
GetProcAddress 0x18002a000
LoadLibraryExW 0x18002a018
LoadResource 0x18002a008
LockResource 0x18002a028
SizeofResource 0x18002a030
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x18002a048
api-ms-win-core-memory-l1-1-0.dll 1
UnmapViewOfFile 0x18002a058
api-ms-win-core-processenvironment-l1-1-0.dll 1
ExpandEnvironmentStringsW 0x18002a068
api-ms-win-core-processthreads-l1-1-0.dll 4
GetCurrentProcess 0x18002a088
GetCurrentProcessId 0x18002a090
GetCurrentThreadId 0x18002a078
TerminateProcess 0x18002a080
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18002a0a0
api-ms-win-core-registry-l1-1-0.dll 11
RegCloseKey 0x18002a0c0
RegCreateKeyExW 0x18002a0c8
RegDeleteKeyExW 0x18002a0d8
RegDeleteValueW 0x18002a0e8
RegEnumKeyExW 0x18002a0d0
RegGetKeySecurity 0x18002a0f8
RegGetValueW 0x18002a0e0
RegOpenKeyExW 0x18002a0b8
RegQueryInfoKeyW 0x18002a0f0
RegQueryValueExW 0x18002a0b0
RegSetValueExW 0x18002a100
api-ms-win-core-registry-l2-1-0.dll 1
RegCreateKeyTransactedW 0x18002a110
api-ms-win-core-rtlsupport-l1-1-0.dll 3
RtlCaptureContext 0x18002a120
RtlLookupFunctionEntry 0x18002a128
RtlVirtualUnwind 0x18002a130
api-ms-win-core-string-l1-1-0.dll 1
CompareStringOrdinal 0x18002a140
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x18002a190
AcquireSRWLockShared 0x18002a198
CreateMutexExW 0x18002a188
CreateSemaphoreExW 0x18002a150
DeleteCriticalSection 0x18002a170
EnterCriticalSection 0x18002a1a8
InitializeCriticalSection 0x18002a168
InitializeCriticalSectionEx 0x18002a1b0
LeaveCriticalSection 0x18002a160
OpenSemaphoreW 0x18002a158
ReleaseMutex 0x18002a180
ReleaseSemaphore 0x18002a178
ReleaseSRWLockExclusive 0x18002a1c0
ReleaseSRWLockShared 0x18002a1c8
WaitForSingleObject 0x18002a1b8
WaitForSingleObjectEx 0x18002a1a0
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x18002a1d8
InitOnceComplete 0x18002a1e0
Sleep 0x18002a1e8
api-ms-win-core-sysinfo-l1-1-0.dll 2
GetSystemTimeAsFileTime 0x18002a200
GetTickCount 0x18002a1f8
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x18002a218
CreateThreadpoolTimer 0x18002a220
SetThreadpoolTimer 0x18002a210
WaitForThreadpoolTimerCallbacks 0x18002a228
api-ms-win-core-util-l1-1-0.dll 2
DecodePointer 0x18002a238
EncodePointer 0x18002a240
api-ms-win-eventing-classicprovider-l1-1-0.dll 6
GetTraceEnableFlags 0x18002a270
GetTraceEnableLevel 0x18002a260
GetTraceLoggerHandle 0x18002a258
RegisterTraceGuidsW 0x18002a268
TraceMessage 0x18002a278
UnregisterTraceGuids 0x18002a250
api-ms-win-security-base-l1-1-0.dll 16
AddAce 0x18002a2c0
GetAce 0x18002a290
GetAclInformation 0x18002a2f8
GetSecurityDescriptorControl 0x18002a2b0
GetSecurityDescriptorDacl 0x18002a298
GetSecurityDescriptorGroup 0x18002a2f0
GetSecurityDescriptorLength 0x18002a2a8
GetSecurityDescriptorOwner 0x18002a2c8
InitializeAcl 0x18002a288
InitializeSecurityDescriptor 0x18002a300
IsValidSecurityDescriptor 0x18002a2b8
MakeSelfRelativeSD 0x18002a2d0
MapGenericMask 0x18002a2a0
SetSecurityDescriptorDacl 0x18002a2e8
SetSecurityDescriptorGroup 0x18002a2d8
SetSecurityDescriptorOwner 0x18002a2e0
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSecurityDescriptorToStringSecurityDescriptorW 0x18002a310
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x18002a318
bcrypt.dll 7
BCryptCloseAlgorithmProvider 0x18002a328
BCryptCreateHash 0x18002a340
BCryptDestroyHash 0x18002a358
BCryptFinishHash 0x18002a350
BCryptGetProperty 0x18002a338
BCryptHashData 0x18002a330
BCryptOpenAlgorithmProvider 0x18002a348
msvcrt.dll 40
__C_specific_handler 0x18002a3d8
__CxxFrameHandler3 0x18002a3c8
__dllonexit 0x18002a410
_amsg_exit 0x18002a3c0
_CxxThrowException 0x18002a378
_errno 0x18002a380
_initterm 0x18002a3f0
_itow_s 0x18002a458
_lock 0x18002a400
_onexit 0x18002a418
_purecall 0x18002a488
_ultow_s 0x18002a450
_unlock 0x18002a408
_vsnwprintf 0x18002a470
_wcsicmp 0x18002a428
_wcsnicmp 0x18002a460
_wcstoui64 0x18002a430
_wtoi 0x18002a440
_XcptFilter 0x18002a3a8
??0exception@@QEAA@AEBQEBD@Z 0x18002a3a0
??0exception@@QEAA@AEBQEBDH@Z 0x18002a398
??0exception@@QEAA@AEBV0@@Z 0x18002a390
??1exception@@UEAA@XZ 0x18002a388
??1type_info@@UEAA@XZ 0x18002a420
?terminate@@YAXXZ 0x18002a3f8
?what@exception@@UEBAPEBDXZ 0x18002a498
free 0x18002a3e8
malloc 0x18002a3e0
memcmp 0x18002a3b8
memcpy 0x18002a370
memcpy_s 0x18002a478
memmove 0x18002a368
memmove_s 0x18002a480
memset 0x18002a490
towupper 0x18002a468
wcschr 0x18002a448
wcscmp 0x18002a4a0
wcscpy_s 0x18002a3b0
wcsncmp 0x18002a3d0
wcstoul 0x18002a438
ntdll.dll 5
NtCommitTransaction 0x18002a4b0
NtCreateTransaction 0x18002a4b8
RtlGetVersion 0x18002a4d0
RtlInitUnicodeStringEx 0x18002a4c0
RtlNtStatusToDosError 0x18002a4c8
RPCRT4.dll 1
UuidCreate 0x180029eb8
WCP.dll 13
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z 0x180029ec8
?RtlTraceFormat_PCbool@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x180029ef0
?RtlTraceFormat_PCHRESULT@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x180029ef8
?RtlTraceFormat_PCLONG@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x180029f28
?RtlTraceFormat_PCSTR_AsLiteralString@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x180029f10
?RtlTraceFormat_PCULONG_AsWin32Error@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x180029f00
?RtlTraceFormat_PCULONG@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x180029f08
?RtlTraceFormat_PCWSTR_AsLiteralString@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z 0x180029f20
?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z 0x180029f18
RtlCalculateUtf16StringLengthFromLUtf8String 0x180029ee8
RtlCopyLUtf8StringToLUnicodeString 0x180029ee0
RtlCreateMicrodom 0x180029ed0
RtlFreeLUtf8String 0x180029ed8