EventsInstaller.dll

v10.0.19041.3562 32-bit Windows NT Analyzed
Download
Description
Events Offline Installer
Authors
© Microsoft Corporation. All rights reserved.
File size
187.9 KB
Uploaded
2025-12-01 08:35
Views
43
SHA-256
1698722510e4a87489620c512c965f65

Exported functions 2

DllCanUnloadNow #1 · 0x55a0
DllCsiGetHandler #2 · 0x55d0

Imported DLLs & functions 142

api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x1002004c
SetLastError 0x10020044
SetUnhandledExceptionFilter 0x10020040
UnhandledExceptionFilter 0x10020048
api-ms-win-core-file-l1-1-0.dll 2
CreateFileW 0x10020054
GetFileAttributesW 0x10020058
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x10020060
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x10020070
HeapAlloc 0x10020068
HeapFree 0x1002006c
api-ms-win-core-heap-obsolete-l1-1-0.dll 2
LocalAlloc 0x10020078
LocalFree 0x1002007c
api-ms-win-core-libraryloader-l1-1-0.dll 10
DisableThreadLibraryCalls 0x10020084
FindResourceExW 0x100200a0
FreeLibrary 0x100200a4
FreeResource 0x10020094
GetModuleHandleW 0x1002009c
GetProcAddress 0x10020088
LoadLibraryExW 0x100200a8
LoadResource 0x1002008c
LockResource 0x10020098
SizeofResource 0x10020090
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x100200b0
api-ms-win-core-memory-l1-1-0.dll 1
UnmapViewOfFile 0x100200b8
api-ms-win-core-processenvironment-l1-1-0.dll 1
ExpandEnvironmentStringsW 0x100200c0
api-ms-win-core-processthreads-l1-1-0.dll 4
GetCurrentProcess 0x100200d4
GetCurrentProcessId 0x100200cc
GetCurrentThreadId 0x100200d0
TerminateProcess 0x100200c8
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x100200dc
api-ms-win-core-registry-l1-1-0.dll 11
RegCloseKey 0x100200f4
RegCreateKeyExW 0x100200f8
RegDeleteKeyExW 0x10020100
RegDeleteValueW 0x100200ec
RegEnumKeyExW 0x10020104
RegGetKeySecurity 0x1002010c
RegGetValueW 0x100200e4
RegOpenKeyExW 0x10020108
RegQueryInfoKeyW 0x100200f0
RegQueryValueExW 0x100200e8
RegSetValueExW 0x100200fc
api-ms-win-core-registry-l2-1-0.dll 1
RegCreateKeyTransactedW 0x10020114
api-ms-win-core-string-l1-1-0.dll 1
CompareStringOrdinal 0x1002011c
api-ms-win-core-synch-l1-1-0.dll 6
AcquireSRWLockShared 0x10020124
DeleteCriticalSection 0x10020128
EnterCriticalSection 0x10020130
InitializeCriticalSection 0x1002012c
LeaveCriticalSection 0x10020134
ReleaseSRWLockShared 0x10020138
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x10020148
InitOnceComplete 0x10020140
Sleep 0x10020144
api-ms-win-core-sysinfo-l1-1-0.dll 2
GetSystemTimeAsFileTime 0x10020150
GetTickCount 0x10020154
api-ms-win-core-util-l1-1-0.dll 2
DecodePointer 0x10020160
EncodePointer 0x1002015c
api-ms-win-eventing-classicprovider-l1-1-0.dll 6
GetTraceEnableFlags 0x10020174
GetTraceEnableLevel 0x10020178
GetTraceLoggerHandle 0x10020168
RegisterTraceGuidsW 0x1002016c
TraceMessage 0x1002017c
UnregisterTraceGuids 0x10020170
api-ms-win-security-base-l1-1-0.dll 16
AddAce 0x100201a0
GetAce 0x100201bc
GetAclInformation 0x100201a4
GetSecurityDescriptorControl 0x10020184
GetSecurityDescriptorDacl 0x10020190
GetSecurityDescriptorGroup 0x1002018c
GetSecurityDescriptorLength 0x10020188
GetSecurityDescriptorOwner 0x10020194
InitializeAcl 0x100201b4
InitializeSecurityDescriptor 0x10020198
IsValidSecurityDescriptor 0x100201b8
MakeSelfRelativeSD 0x100201ac
MapGenericMask 0x100201a8
SetSecurityDescriptorDacl 0x1002019c
SetSecurityDescriptorGroup 0x100201b0
SetSecurityDescriptorOwner 0x100201c0
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSecurityDescriptorToStringSecurityDescriptorW 0x100201cc
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x100201c8
bcrypt.dll 7
BCryptCloseAlgorithmProvider 0x100201d4
BCryptCreateHash 0x100201dc
BCryptDestroyHash 0x100201ec
BCryptFinishHash 0x100201e4
BCryptGetProperty 0x100201d8
BCryptHashData 0x100201e8
BCryptOpenAlgorithmProvider 0x100201e0
msvcrt.dll 36
__CxxFrameHandler3 0x10020220
__dllonexit 0x1002022c
_amsg_exit 0x100201f8
_CxxThrowException 0x10020208
_errno 0x1002023c
_except_handler4_common 0x10020238
_initterm 0x100201f4
_itow_s 0x10020260
_lock 0x1002021c
_onexit 0x10020230
_purecall 0x10020278
_ultow_s 0x1002025c
_unlock 0x1002027c
_wcsicmp 0x10020248
_wcsnicmp 0x10020264
_wcstoui64 0x1002024c
_wtoi 0x10020254
_XcptFilter 0x100201fc
??0exception@@QAE@ABQBD@Z 0x10020224
??0exception@@QAE@ABQBDH@Z 0x10020218
??0exception@@QAE@ABV0@@Z 0x10020214
??1exception@@UAE@XZ 0x10020244
??1type_info@@UAE@XZ 0x10020234
?terminate@@YAXXZ 0x10020210
?what@exception@@UBEPBDXZ 0x1002020c
free 0x10020274
malloc 0x10020270
memcmp 0x10020240
memcpy 0x10020204
memmove 0x10020200
memset 0x10020280
towupper 0x10020268
wcschr 0x10020258
wcscpy_s 0x10020228
wcsncmp 0x1002026c
wcstoul 0x10020250
ntdll.dll 5
NtCommitTransaction 0x10020288
NtCreateTransaction 0x1002028c
RtlGetVersion 0x10020298
RtlInitUnicodeStringEx 0x10020290
RtlNtStatusToDosError 0x10020294
RPCRT4.dll 1
UuidCreate 0x10020000
WCP.dll 13
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YIKPAU_RTL_TRACING_FACILITY@123@@Z 0x10020020
?RtlTraceFormat_PCbool@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10020030
?RtlTraceFormat_PCHRESULT@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10020034
?RtlTraceFormat_PCLONG@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10020024
?RtlTraceFormat_PCSTR_AsLiteralString@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10020014
?RtlTraceFormat_PCULONG_AsWin32Error@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10020038
?RtlTraceFormat_PCULONG@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x10020008
?RtlTraceFormat_PCWSTR_AsLiteralString@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z 0x1002000c
?RtlTraceVa@Rtl@WCP@Windows@@YIXKKPAU_RTL_TRACING_FACILITY@123@QBDKPAD@Z 0x10020010
RtlCalculateUtf16StringLengthFromLUtf8String 0x1002002c
RtlCopyLUtf8StringToLUnicodeString 0x10020028
RtlCreateMicrodom 0x10020018
RtlFreeLUtf8String 0x1002001c