EventsInstaller.dll

Description: Events Offline Installer

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5676

Architecture: 64-bit

Operating System: Windows NT

SHA256: 88f9134540f3bca3e4a57aa714eeda94

File Size: 278.9 KB

Uploaded At: Dec. 1, 2025, 8:16 a.m.

Views: 13

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x2170)
  • DllCsiGetHandler (Ordinal: 2, Address: 0x21b0)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x18002bf58)
  • IsDebuggerPresent (Address: 0x18002bf48)
  • OutputDebugStringW (Address: 0x18002bf50)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x18002bf68)
  • SetLastError (Address: 0x18002bf80)
  • SetUnhandledExceptionFilter (Address: 0x18002bf70)
  • UnhandledExceptionFilter (Address: 0x18002bf78)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x18002bf90)
  • GetFileAttributesW (Address: 0x18002bf98)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x18002bfa8)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x18002bfb8)
  • HeapAlloc (Address: 0x18002bfc0)
  • HeapFree (Address: 0x18002bfc8)
api-ms-win-core-heap-obsolete-l1-1-0.dll
  • LocalAlloc (Address: 0x18002bfe0)
  • LocalFree (Address: 0x18002bfd8)
api-ms-win-core-libraryloader-l1-1-0.dll
  • DisableThreadLibraryCalls (Address: 0x18002bff0)
  • FindResourceExW (Address: 0x18002c030)
  • FreeLibrary (Address: 0x18002c020)
  • FreeResource (Address: 0x18002c000)
  • GetModuleFileNameA (Address: 0x18002c048)
  • GetModuleHandleExW (Address: 0x18002bff8)
  • GetModuleHandleW (Address: 0x18002c010)
  • GetProcAddress (Address: 0x18002c018)
  • LoadLibraryExW (Address: 0x18002c008)
  • LoadResource (Address: 0x18002c028)
  • LockResource (Address: 0x18002c038)
  • SizeofResource (Address: 0x18002c040)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x18002c058)
api-ms-win-core-memory-l1-1-0.dll
  • UnmapViewOfFile (Address: 0x18002c068)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x18002c078)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x18002c098)
  • GetCurrentProcessId (Address: 0x18002c088)
  • GetCurrentThreadId (Address: 0x18002c090)
  • TerminateProcess (Address: 0x18002c0a0)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x18002c0b0)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x18002c0c0)
  • RegCreateKeyExW (Address: 0x18002c0e8)
  • RegDeleteKeyExW (Address: 0x18002c0d0)
  • RegDeleteValueW (Address: 0x18002c100)
  • RegEnumKeyExW (Address: 0x18002c0f8)
  • RegGetKeySecurity (Address: 0x18002c110)
  • RegGetValueW (Address: 0x18002c108)
  • RegOpenKeyExW (Address: 0x18002c0d8)
  • RegQueryInfoKeyW (Address: 0x18002c0e0)
  • RegQueryValueExW (Address: 0x18002c0f0)
  • RegSetValueExW (Address: 0x18002c0c8)
api-ms-win-core-registry-l2-1-0.dll
  • RegCreateKeyTransactedW (Address: 0x18002c120)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x18002c130)
  • RtlLookupFunctionEntry (Address: 0x18002c140)
  • RtlVirtualUnwind (Address: 0x18002c138)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x18002c150)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x18002c1a0)
  • AcquireSRWLockShared (Address: 0x18002c178)
  • CreateMutexExW (Address: 0x18002c198)
  • CreateSemaphoreExW (Address: 0x18002c1a8)
  • DeleteCriticalSection (Address: 0x18002c188)
  • EnterCriticalSection (Address: 0x18002c168)
  • InitializeCriticalSection (Address: 0x18002c170)
  • InitializeCriticalSectionEx (Address: 0x18002c1b0)
  • LeaveCriticalSection (Address: 0x18002c1d8)
  • OpenSemaphoreW (Address: 0x18002c1c0)
  • ReleaseMutex (Address: 0x18002c1d0)
  • ReleaseSemaphore (Address: 0x18002c1b8)
  • ReleaseSRWLockExclusive (Address: 0x18002c180)
  • ReleaseSRWLockShared (Address: 0x18002c190)
  • WaitForSingleObject (Address: 0x18002c160)
  • WaitForSingleObjectEx (Address: 0x18002c1c8)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x18002c1e8)
  • InitOnceComplete (Address: 0x18002c1f0)
  • Sleep (Address: 0x18002c1f8)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x18002c210)
  • GetTickCount (Address: 0x18002c208)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x18002c220)
  • CreateThreadpoolTimer (Address: 0x18002c230)
  • SetThreadpoolTimer (Address: 0x18002c238)
  • WaitForThreadpoolTimerCallbacks (Address: 0x18002c228)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x18002c248)
  • EncodePointer (Address: 0x18002c250)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • GetTraceEnableFlags (Address: 0x18002c280)
  • GetTraceEnableLevel (Address: 0x18002c268)
  • GetTraceLoggerHandle (Address: 0x18002c270)
  • RegisterTraceGuidsW (Address: 0x18002c260)
  • TraceMessage (Address: 0x18002c288)
  • UnregisterTraceGuids (Address: 0x18002c278)
api-ms-win-security-base-l1-1-0.dll
  • AddAce (Address: 0x18002c2c8)
  • GetAce (Address: 0x18002c298)
  • GetAclInformation (Address: 0x18002c2b8)
  • GetSecurityDescriptorControl (Address: 0x18002c2e0)
  • GetSecurityDescriptorDacl (Address: 0x18002c2c0)
  • GetSecurityDescriptorGroup (Address: 0x18002c2b0)
  • GetSecurityDescriptorLength (Address: 0x18002c2d8)
  • GetSecurityDescriptorOwner (Address: 0x18002c2a8)
  • InitializeAcl (Address: 0x18002c2a0)
  • InitializeSecurityDescriptor (Address: 0x18002c2d0)
  • IsValidSecurityDescriptor (Address: 0x18002c300)
  • MakeSelfRelativeSD (Address: 0x18002c2e8)
  • MapGenericMask (Address: 0x18002c310)
  • SetSecurityDescriptorDacl (Address: 0x18002c308)
  • SetSecurityDescriptorGroup (Address: 0x18002c2f0)
  • SetSecurityDescriptorOwner (Address: 0x18002c2f8)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSecurityDescriptorToStringSecurityDescriptorW (Address: 0x18002c320)
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x18002c328)
bcrypt.dll
  • BCryptCloseAlgorithmProvider (Address: 0x18002c350)
  • BCryptCreateHash (Address: 0x18002c338)
  • BCryptDestroyHash (Address: 0x18002c348)
  • BCryptFinishHash (Address: 0x18002c340)
  • BCryptGetProperty (Address: 0x18002c360)
  • BCryptHashData (Address: 0x18002c358)
  • BCryptOpenAlgorithmProvider (Address: 0x18002c368)
msvcrt.dll
  • __C_specific_handler (Address: 0x18002c3f8)
  • __CxxFrameHandler3 (Address: 0x18002c438)
  • __dllonexit (Address: 0x18002c418)
  • _amsg_exit (Address: 0x18002c388)
  • _CxxThrowException (Address: 0x18002c3a8)
  • _errno (Address: 0x18002c428)
  • _initterm (Address: 0x18002c380)
  • _itow_s (Address: 0x18002c490)
  • _lock (Address: 0x18002c408)
  • _onexit (Address: 0x18002c420)
  • _purecall (Address: 0x18002c4b0)
  • _ultow_s (Address: 0x18002c488)
  • _unlock (Address: 0x18002c410)
  • _vsnprintf_s (Address: 0x18002c440)
  • _vsnwprintf (Address: 0x18002c448)
  • _wcsicmp (Address: 0x18002c460)
  • _wcsnicmp (Address: 0x18002c498)
  • _wcstoui64 (Address: 0x18002c468)
  • _wtoi (Address: 0x18002c478)
  • _XcptFilter (Address: 0x18002c390)
  • ??0exception@@QEAA@AEBQEBD@Z (Address: 0x18002c3d0)
  • ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x18002c3c8)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x18002c3c0)
  • ??0exception@@QEAA@XZ (Address: 0x18002c3e0)
  • ??1exception@@UEAA@XZ (Address: 0x18002c3b8)
  • ??1type_info@@UEAA@XZ (Address: 0x18002c4b8)
  • ?terminate@@YAXXZ (Address: 0x18002c378)
  • ?what@exception@@UEBAPEBDXZ (Address: 0x18002c3b0)
  • free (Address: 0x18002c4a8)
  • malloc (Address: 0x18002c400)
  • memcmp (Address: 0x18002c3d8)
  • memcpy (Address: 0x18002c3a0)
  • memcpy_s (Address: 0x18002c450)
  • memmove (Address: 0x18002c398)
  • memmove_s (Address: 0x18002c458)
  • memset (Address: 0x18002c430)
  • towupper (Address: 0x18002c4a0)
  • wcschr (Address: 0x18002c480)
  • wcscmp (Address: 0x18002c4c0)
  • wcscpy_s (Address: 0x18002c3e8)
  • wcsncmp (Address: 0x18002c3f0)
  • wcstoul (Address: 0x18002c470)
ntdll.dll
  • NtCommitTransaction (Address: 0x18002c4d0)
  • NtCreateTransaction (Address: 0x18002c4d8)
  • RtlGetVersion (Address: 0x18002c4f0)
  • RtlInitUnicodeStringEx (Address: 0x18002c4e0)
  • RtlNtStatusToDosError (Address: 0x18002c4e8)
RPCRT4.dll
  • UuidCreate (Address: 0x18002bec8)
WCP.dll
  • ?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z (Address: 0x18002bee8)
  • ?RtlTraceFormat_PCbool@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x18002bf20)
  • ?RtlTraceFormat_PCHRESULT@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x18002bf28)
  • ?RtlTraceFormat_PCLONG@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x18002bf00)
  • ?RtlTraceFormat_PCSTR_AsLiteralString@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x18002bf38)
  • ?RtlTraceFormat_PCULONG_AsWin32Error@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x18002bf30)
  • ?RtlTraceFormat_PCULONG@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x18002bef8)
  • ?RtlTraceFormat_PCWSTR_AsLiteralString@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z (Address: 0x18002bed8)
  • ?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z (Address: 0x18002bee0)
  • RtlCalculateUtf16StringLengthFromLUtf8String (Address: 0x18002bf18)
  • RtlCopyLUtf8StringToLUnicodeString (Address: 0x18002bf10)
  • RtlCreateMicrodom (Address: 0x18002bef0)
  • RtlFreeLUtf8String (Address: 0x18002bf08)