wevtapi.dll

v10.0.19041.6280 64-bit Windows NT Analyzed
Download
Description
Eventing Consumption and Configuration API
Authors
© Microsoft Corporation. All rights reserved.
File size
395.5 KB
Uploaded
2025-12-01 07:42
Views
149
SHA-256
3ea8637a2709c2102280eca38767a531

Exported functions 45

EvtIntSysprepCleanup #1 · 0x2e370
EvtArchiveExportedLog #2 · 0x2c280
EvtCancel #3 · 0x2c4e0
EvtClearLog #4 · 0x2c660
EvtClose #5 · 0x68b0
EvtCreateBookmark #6 · 0xc350
EvtCreateRenderContext #7 · 0x5620
EvtExportLog #8 · 0x2c8d0
EvtFormatMessage #9 · 0xf250
EvtGetChannelConfigProperty #10 · 0xca50
EvtGetEventInfo #11 · 0x2cc80
EvtGetEventMetadataProperty #12 · 0x2cd90
EvtGetExtendedStatus #13 · 0x2cf40
EvtGetLogInfo #14 · 0xfa90
EvtGetObjectArrayProperty #15 · 0x10cb0
EvtGetObjectArraySize #16 · 0x12c40
EvtGetPublisherMetadataProperty #17 · 0xe720
EvtGetQueryInfo #18 · 0x2cf60
EvtIntAssertConfig #19 · 0xd9a0
EvtIntCreateBinXMLFromCustomXML #20 · 0x2ed80
EvtIntCreateLocalLogfile #21 · 0x2edd0
EvtIntGetClassicLogDisplayName #22 · 0x13310
EvtIntRenderResourceEventTemplate #23 · 0x2ef80
EvtIntReportAuthzEventAndSourceAsync #24 · 0x59154
EvtIntReportEventAndSourceAsync #25 · 0x5919f
EvtIntRetractConfig #26 · 0x2130
EvtIntWriteXmlEventToLocalLogfile #27 · 0x2f530
EvtNext #28 · 0x4b90
EvtNextChannelPath #29 · 0x12000
EvtNextEventMetadata #30 · 0x2d520
EvtNextPublisherId #31 · 0x11f30
EvtOpenChannelConfig #32 · 0x65c0
EvtOpenChannelEnum #33 · 0x11740
EvtOpenEventMetadataEnum #34 · 0x2d6f0
EvtOpenLog #35 · 0x107e0
EvtOpenPublisherEnum #36 · 0x118a0
EvtOpenPublisherMetadata #37 · 0xa7c0
EvtOpenSession #38 · 0x1880
EvtQuery #39 · 0xab50
EvtRender #40 · 0x2270
EvtSaveChannelConfig #41 · 0x2d8b0
EvtSeek #42 · 0xc210
EvtSetChannelConfigProperty #43 · 0x2da10
EvtSubscribe #44 · 0xaf40
EvtUpdateBookmark #45 · 0x2840

Imported DLLs & functions 177

api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x18004c460
IsDebuggerPresent 0x18004c458
OutputDebugStringW 0x18004c468
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x18004c478
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x18004c488
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x18004c4b0
SetLastError 0x18004c4a8
SetUnhandledExceptionFilter 0x18004c498
UnhandledExceptionFilter 0x18004c4a0
api-ms-win-core-file-l1-1-0.dll 12
CreateFileW 0x18004c4d8
DeleteFileW 0x18004c510
FlushFileBuffers 0x18004c508
GetDiskFreeSpaceExW 0x18004c4e0
GetFileAttributesW 0x18004c4c0
GetFileInformationByHandle 0x18004c4f8
GetFileSizeEx 0x18004c4f0
GetFullPathNameW 0x18004c4c8
GetTempFileNameW 0x18004c518
ReadFile 0x18004c4d0
SetEndOfFile 0x18004c500
SetFilePointerEx 0x18004c4e8
api-ms-win-core-file-l2-1-0.dll 1
MoveFileExW 0x18004c528
api-ms-win-core-handle-l1-1-0.dll 2
CloseHandle 0x18004c538
DuplicateHandle 0x18004c540
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x18004c560
HeapAlloc 0x18004c558
HeapFree 0x18004c550
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x18004c570
LocalFree 0x18004c578
api-ms-win-core-interlocked-l1-1-0.dll 1
InitializeSListHead 0x18004c588
api-ms-win-core-libraryloader-l1-2-0.dll 5
FreeLibrary 0x18004c5b0
GetModuleFileNameA 0x18004c598
GetModuleHandleExW 0x18004c5a8
GetModuleHandleW 0x18004c5b8
GetProcAddress 0x18004c5a0
api-ms-win-core-localization-l1-2-0.dll 4
FormatMessageW 0x18004c5d8
GetLocaleInfoW 0x18004c5c8
GetThreadLocale 0x18004c5e0
GetThreadUILanguage 0x18004c5d0
api-ms-win-core-processenvironment-l1-1-0.dll 1
ExpandEnvironmentStringsW 0x18004c5f0
api-ms-win-core-processthreads-l1-1-0.dll 8
GetCurrentProcess 0x18004c638
GetCurrentProcessId 0x18004c600
GetCurrentThreadId 0x18004c608
TerminateProcess 0x18004c618
TlsAlloc 0x18004c610
TlsFree 0x18004c620
TlsGetValue 0x18004c630
TlsSetValue 0x18004c628
api-ms-win-core-processthreads-l1-1-1.dll 1
IsProcessorFeaturePresent 0x18004c648
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18004c658
api-ms-win-core-string-l1-1-0.dll 2
MultiByteToWideChar 0x18004c668
WideCharToMultiByte 0x18004c670
api-ms-win-core-synch-l1-1-0.dll 18
AcquireSRWLockExclusive 0x18004c700
AcquireSRWLockShared 0x18004c6f8
CreateEventW 0x18004c698
CreateMutexExW 0x18004c688
CreateSemaphoreExW 0x18004c6b0
DeleteCriticalSection 0x18004c6c0
EnterCriticalSection 0x18004c6d8
InitializeCriticalSectionEx 0x18004c6c8
LeaveCriticalSection 0x18004c6d0
OpenSemaphoreW 0x18004c6e0
ReleaseMutex 0x18004c6a0
ReleaseSemaphore 0x18004c708
ReleaseSRWLockExclusive 0x18004c6a8
ReleaseSRWLockShared 0x18004c690
ResetEvent 0x18004c680
SetEvent 0x18004c6e8
WaitForSingleObject 0x18004c6f0
WaitForSingleObjectEx 0x18004c6b8
api-ms-win-core-synch-l1-2-0.dll 6
InitializeConditionVariable 0x18004c718
InitOnceBeginInitialize 0x18004c728
InitOnceComplete 0x18004c738
Sleep 0x18004c730
SleepConditionVariableCS 0x18004c720
WakeAllConditionVariable 0x18004c740
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemTimeAsFileTime 0x18004c750
GetTickCount 0x18004c758
GetTickCount64 0x18004c760
api-ms-win-core-threadpool-l1-2-0.dll 14
CloseThreadpoolCleanupGroup 0x18004c770
CloseThreadpoolTimer 0x18004c778
CloseThreadpoolWait 0x18004c7b0
CloseThreadpoolWork 0x18004c7d8
CreateThreadpoolCleanupGroup 0x18004c788
CreateThreadpoolTimer 0x18004c7c0
CreateThreadpoolWait 0x18004c7a0
CreateThreadpoolWork 0x18004c790
FreeLibraryWhenCallbackReturns 0x18004c7d0
SetThreadpoolTimer 0x18004c7b8
SetThreadpoolWait 0x18004c798
SubmitThreadpoolWork 0x18004c7c8
WaitForThreadpoolTimerCallbacks 0x18004c780
WaitForThreadpoolWaitCallbacks 0x18004c7a8
api-ms-win-core-timezone-l1-1-0.dll 2
FileTimeToSystemTime 0x18004c7e8
SystemTimeToFileTime 0x18004c7f0
api-ms-win-crt-private-l1-1-0.dll 49
__C_specific_handler 0x18004c900
__CxxFrameHandler4 0x18004c968
__std_terminate 0x18004c960
_CxxThrowException 0x18004c970
_o___std_exception_copy 0x18004c948
_o___std_exception_destroy 0x18004c940
_o___std_type_info_destroy_list 0x18004c938
_o___stdio_common_vsnprintf_s 0x18004c930
_o___stdio_common_vsnwprintf_s 0x18004c928
_o___stdio_common_vsprintf_s 0x18004c920
_o___stdio_common_vswprintf 0x18004c918
_o__cexit 0x18004c910
_o__configure_narrow_argv 0x18004c908
_o__crt_atexit 0x18004c958
_o__errno 0x18004c800
_o__execute_onexit_table 0x18004c808
_o__i64tow_s 0x18004c810
_o__initialize_narrow_environment 0x18004c818
_o__initialize_onexit_table 0x18004c820
_o__invalid_parameter_noinfo 0x18004c828
_o__invalid_parameter_noinfo_noreturn 0x18004c830
_o__itow_s 0x18004c838
_o__purecall 0x18004c840
_o__register_onexit_function 0x18004c848
_o__seh_filter_dll 0x18004c850
_o__ui64tow_s 0x18004c860
_o__ultow_s 0x18004c868
_o__wcsicmp 0x18004c870
_o__wcsnicmp 0x18004c878
_o__wcstoi64 0x18004c880
_o__wcstoui64 0x18004c888
_o__wtof 0x18004c890
_o__wtoi 0x18004c898
_o__wtoi64 0x18004c8a0
_o__wtol 0x18004c8a8
_o_free 0x18004c8b0
_o_iswalnum 0x18004c8b8
_o_iswalpha 0x18004c8c0
_o_iswdigit 0x18004c8c8
_o_iswspace 0x18004c8d0
_o_strncpy_s 0x18004c8d8
_o_terminate 0x18004c8e0
_o_toupper 0x18004c8e8
_o_wcscpy_s 0x18004c8f0
_o_wcsncpy_s 0x18004c8f8
memcmp 0x18004c978
memcpy 0x18004c980
memmove 0x18004c858
wcschr 0x18004c950
api-ms-win-crt-runtime-l1-1-0.dll 2
_initterm 0x18004c990
_initterm_e 0x18004c998
api-ms-win-crt-string-l1-1-0.dll 4
memset 0x18004c9c0
strnlen 0x18004c9b0
wcscmp 0x18004c9a8
wcsnlen 0x18004c9b8
api-ms-win-eventing-classicprovider-l1-1-0.dll 1
TraceMessage 0x18004c9d0
api-ms-win-eventing-provider-l1-1-0.dll 6
EventActivityIdControl 0x18004c9f0
EventProviderEnabled 0x18004ca08
EventRegister 0x18004ca00
EventSetInformation 0x18004c9f8
EventUnregister 0x18004c9e8
EventWriteTransfer 0x18004c9e0
api-ms-win-security-base-l1-1-0.dll 2
GetLengthSid 0x18004ca20
IsValidSid 0x18004ca18
msvcp_win.dll 2
?_Xlength_error@std@@YAXPEBD@Z 0x18004ca30
?_Xout_of_range@std@@YAXPEBD@Z 0x18004ca38
ntdll.dll 16
EtwGetTraceEnableFlags 0x18004cab8
EtwGetTraceEnableLevel 0x18004ca58
EtwGetTraceLoggerHandle 0x18004ca50
EtwRegisterTraceGuidsW 0x18004ca60
EtwTraceMessage 0x18004ca68
EtwUnregisterTraceGuids 0x18004ca48
NtReadFile 0x18004cab0
NtSetInformationFile 0x18004ca90
NtWriteFile 0x18004caa8
RtlCaptureContext 0x18004ca70
RtlComputeCrc32 0x18004caa0
RtlLookupFunctionEntry 0x18004ca78
RtlNtStatusToDosError 0x18004ca88
RtlSetLastWin32Error 0x18004ca80
RtlSetLastWin32ErrorAndNtStatusFromNtStatus 0x18004ca98
RtlVirtualUnwind 0x18004cac0