EventsInstaller.dll

v10.0.19041.1704 32-bit Windows NT Analyzed
Download
Description
Events Offline Installer
Authors
© Microsoft Corporation. All rights reserved.
File size
207.9 KB
Uploaded
2025-12-01 08:33
Views
44
SHA-256
ba427fb503b8ca54986e96acd6b47435

Exported functions 2

DllCanUnloadNow #1 · 0x5b60
DllCsiGetHandler #2 · 0x5b90

Imported DLLs & functions 164

api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x10025044
IsDebuggerPresent 0x10025048
OutputDebugStringW 0x10025040
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x10025058
SetLastError 0x1002505c
SetUnhandledExceptionFilter 0x10025050
UnhandledExceptionFilter 0x10025054
api-ms-win-core-file-l1-1-0.dll 2
CreateFileW 0x10025064
GetFileAttributesW 0x10025068
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x10025070
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x1002507c
HeapAlloc 0x10025078
HeapFree 0x10025080
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x1002508c
LocalFree 0x10025088
api-ms-win-core-libraryloader-l1-1-0.dll 12
DisableThreadLibraryCalls 0x10025098
FindResourceExW 0x10025094
FreeLibrary 0x100250a4
FreeResource 0x100250c0
GetModuleFileNameA 0x100250a0
GetModuleHandleExW 0x100250b0
GetModuleHandleW 0x100250b4
GetProcAddress 0x100250bc
LoadLibraryExW 0x100250ac
LoadResource 0x1002509c
LockResource 0x100250b8
SizeofResource 0x100250a8
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x100250c8
api-ms-win-core-memory-l1-1-0.dll 1
UnmapViewOfFile 0x100250d0
api-ms-win-core-processenvironment-l1-1-0.dll 1
ExpandEnvironmentStringsW 0x100250d8
api-ms-win-core-processthreads-l1-1-0.dll 4
GetCurrentProcess 0x100250e4
GetCurrentProcessId 0x100250ec
GetCurrentThreadId 0x100250e8
TerminateProcess 0x100250e0
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x100250f4
api-ms-win-core-registry-l1-1-0.dll 11
RegCloseKey 0x10025120
RegCreateKeyExW 0x100250fc
RegDeleteKeyExW 0x10025104
RegDeleteValueW 0x10025124
RegEnumKeyExW 0x1002510c
RegGetKeySecurity 0x10025110
RegGetValueW 0x1002511c
RegOpenKeyExW 0x10025118
RegQueryInfoKeyW 0x10025108
RegQueryValueExW 0x10025114
RegSetValueExW 0x10025100
api-ms-win-core-registry-l2-1-0.dll 1
RegCreateKeyTransactedW 0x1002512c
api-ms-win-core-string-l1-1-0.dll 1
CompareStringOrdinal 0x10025134
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x10025150
AcquireSRWLockShared 0x10025140
CreateMutexExW 0x10025164
CreateSemaphoreExW 0x10025148
DeleteCriticalSection 0x10025144
EnterCriticalSection 0x1002516c
InitializeCriticalSection 0x1002514c
InitializeCriticalSectionEx 0x10025170
LeaveCriticalSection 0x1002515c
OpenSemaphoreW 0x10025178
ReleaseMutex 0x10025158
ReleaseSemaphore 0x10025154
ReleaseSRWLockExclusive 0x1002513c
ReleaseSRWLockShared 0x10025160
WaitForSingleObject 0x10025174
WaitForSingleObjectEx 0x10025168
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x10025188
InitOnceComplete 0x10025184
Sleep 0x10025180
api-ms-win-core-sysinfo-l1-1-0.dll 2
GetSystemTimeAsFileTime 0x10025194
GetTickCount 0x10025190
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x100251a0
CreateThreadpoolTimer 0x100251a4
SetThreadpoolTimer 0x1002519c
WaitForThreadpoolTimerCallbacks 0x100251a8
api-ms-win-core-util-l1-1-0.dll 2
DecodePointer 0x100251b0
EncodePointer 0x100251b4
api-ms-win-eventing-classicprovider-l1-1-0.dll 6
GetTraceEnableFlags 0x100251d0
GetTraceEnableLevel 0x100251cc
GetTraceLoggerHandle 0x100251bc
RegisterTraceGuidsW 0x100251c8
TraceMessage 0x100251c4
UnregisterTraceGuids 0x100251c0
api-ms-win-security-base-l1-1-0.dll 16
AddAce 0x100251f4
GetAce 0x100251e4
GetAclInformation 0x100251d8
GetSecurityDescriptorControl 0x100251ec
GetSecurityDescriptorDacl 0x100251dc
GetSecurityDescriptorGroup 0x100251f8
GetSecurityDescriptorLength 0x10025214
GetSecurityDescriptorOwner 0x100251fc
InitializeAcl 0x100251e0
InitializeSecurityDescriptor 0x10025210
IsValidSecurityDescriptor 0x100251f0
MakeSelfRelativeSD 0x10025200
MapGenericMask 0x100251e8
SetSecurityDescriptorDacl 0x1002520c
SetSecurityDescriptorGroup 0x10025204
SetSecurityDescriptorOwner 0x10025208
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSecurityDescriptorToStringSecurityDescriptorW 0x10025220
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x1002521c
bcrypt.dll 7
BCryptCloseAlgorithmProvider 0x1002522c
BCryptCreateHash 0x10025234
BCryptDestroyHash 0x10025240
BCryptFinishHash 0x10025228
BCryptGetProperty 0x10025230
BCryptHashData 0x1002523c
BCryptOpenAlgorithmProvider 0x10025238
msvcrt.dll 39
__CxxFrameHandler3 0x10025278
__dllonexit 0x1002528c
_amsg_exit 0x100252dc
_CxxThrowException 0x10025260
_errno 0x1002529c
_except_handler4_common 0x10025298
_initterm 0x1002524c
_itow_s 0x100252c0
_lock 0x10025250
_onexit 0x10025290
_purecall 0x100252d8
_ultow_s 0x100252bc
_unlock 0x10025268
_vsnwprintf 0x100252cc
_wcsicmp 0x100252a8
_wcsnicmp 0x100252c4
_wcstoui64 0x100252ac
_wtoi 0x100252b4
_XcptFilter 0x10025254
??0exception@@QAE@ABQBD@Z 0x10025274
??0exception@@QAE@ABQBDH@Z 0x10025270
??0exception@@QAE@ABV0@@Z 0x1002526c
??1exception@@UAE@XZ 0x100252a4
??1type_info@@UAE@XZ 0x10025294
?terminate@@YAXXZ 0x10025248
?what@exception@@UBEPBDXZ 0x10025264
free 0x10025288
malloc 0x10025284
memcmp 0x100252a0
memcpy 0x1002525c
memcpy_s 0x100252d0
memmove 0x10025258
memmove_s 0x100252d4
memset 0x100252e0
towupper 0x100252c8
wcschr 0x100252b8
wcscpy_s 0x1002527c
wcsncmp 0x10025280
wcstoul 0x100252b0
ntdll.dll 5
NtCommitTransaction 0x100252e8
NtCreateTransaction 0x100252ec
RtlGetVersion 0x100252f8
RtlInitUnicodeStringEx 0x100252f0
RtlNtStatusToDosError 0x100252f4
RPCRT4.dll 1
UuidCreate 0x10025000
WCP.dll 13
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YIKPAU_RTL_TRACING_FACILITY@123@@Z 0x10025010
?RtlTraceFormat_PCbool@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10025028
?RtlTraceFormat_PCHRESULT@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x1002502c
?RtlTraceFormat_PCLONG@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10025034
?RtlTraceFormat_PCSTR_AsLiteralString@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10025038
?RtlTraceFormat_PCULONG_AsWin32Error@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10025030
?RtlTraceFormat_PCULONG@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x1002500c
?RtlTraceFormat_PCWSTR_AsLiteralString@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10025018
?RtlTraceVa@Rtl@WCP@Windows@@YIXKKPAU_RTL_TRACING_FACILITY@123@QBDKPAD@Z 0x1002501c
RtlCalculateUtf16StringLengthFromLUtf8String 0x10025024
RtlCopyLUtf8StringToLUnicodeString 0x10025014
RtlCreateMicrodom 0x10025020
RtlFreeLUtf8String 0x10025008