EventTracingManagement.dll

Description: WMI Provider for ETW

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.3636

Architecture: 64-bit

Operating System: Windows NT

SHA256: bcb2549fe2714833e60caeac180e481f

File Size: 108.0 KB

Uploaded At: Dec. 1, 2025, 7:51 a.m.

Views: 5

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x17d0)
  • DllGetClassObject (Ordinal: 2, Address: 0x1810)
  • DllMain (Ordinal: 3, Address: 0x14c0)
  • DllRegisterServer (Ordinal: 4, Address: 0x1730)
  • DllUnregisterServer (Ordinal: 5, Address: 0x1780)
  • GetProviderClassID (Ordinal: 6, Address: 0x1520)
  • MI_Main (Ordinal: 7, Address: 0x1460)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • StringFromGUID2 (Address: 0x1800153c8)
api-ms-win-core-debug-l1-1-0.dll
  • IsDebuggerPresent (Address: 0x1800153d8)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1800153e8)
  • SetUnhandledExceptionFilter (Address: 0x1800153f0)
  • UnhandledExceptionFilter (Address: 0x1800153f8)
api-ms-win-core-file-l1-1-0.dll
  • DeleteFileW (Address: 0x180015410)
  • GetFileAttributesW (Address: 0x180015408)
api-ms-win-core-file-l2-1-0.dll
  • CopyFileExW (Address: 0x180015420)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x180015438)
  • HeapAlloc (Address: 0x180015430)
  • HeapDestroy (Address: 0x180015458)
  • HeapFree (Address: 0x180015440)
  • HeapReAlloc (Address: 0x180015450)
  • HeapSize (Address: 0x180015448)
api-ms-win-core-heap-l2-1-0.dll
  • LocalFree (Address: 0x180015468)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x180015478)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x180015498)
  • FindResourceExW (Address: 0x1800154b8)
  • FreeLibrary (Address: 0x180015490)
  • GetModuleHandleW (Address: 0x1800154b0)
  • GetProcAddress (Address: 0x1800154a0)
  • LoadLibraryExW (Address: 0x180015488)
  • LoadResource (Address: 0x1800154a8)
  • LockResource (Address: 0x1800154c0)
  • SizeofResource (Address: 0x1800154c8)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1800154d8)
api-ms-win-core-path-l1-1-0.dll
  • PathCchCombineEx (Address: 0x1800154e8)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x180015508)
  • GetCurrentProcessId (Address: 0x1800154f8)
  • GetCurrentThreadId (Address: 0x180015500)
  • TerminateProcess (Address: 0x180015510)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x180015520)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x180015530)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x180015558)
  • RegCreateKeyExW (Address: 0x180015550)
  • RegDeleteTreeW (Address: 0x180015540)
  • RegEnumKeyExW (Address: 0x180015548)
  • RegGetValueW (Address: 0x180015560)
  • RegOpenKeyExW (Address: 0x180015568)
api-ms-win-core-registry-l1-1-1.dll
  • RegSetKeyValueW (Address: 0x180015578)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x180015598)
  • RtlLookupFunctionEntry (Address: 0x180015590)
  • RtlVirtualUnwind (Address: 0x180015588)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemDirectoryW (Address: 0x1800155b0)
  • GetSystemTimeAsFileTime (Address: 0x1800155a8)
api-ms-win-crt-math-l1-1-0.dll
  • ceilf (Address: 0x1800155c0)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x180015660)
  • __CxxFrameHandler4 (Address: 0x1800156a0)
  • _CxxThrowException (Address: 0x180015668)
  • _o___std_exception_copy (Address: 0x180015698)
  • _o___std_exception_destroy (Address: 0x180015690)
  • _o___std_type_info_destroy_list (Address: 0x180015688)
  • _o___stdio_common_vswprintf (Address: 0x180015680)
  • _o___stdio_common_vswprintf_s (Address: 0x180015678)
  • _o___stdio_common_vswscanf (Address: 0x180015670)
  • _o__callnewh (Address: 0x1800155d0)
  • _o__cexit (Address: 0x1800155d8)
  • _o__configure_narrow_argv (Address: 0x1800155e0)
  • _o__crt_atexit (Address: 0x1800155e8)
  • _o__errno (Address: 0x1800155f0)
  • _o__execute_onexit_table (Address: 0x1800155f8)
  • _o__initialize_narrow_environment (Address: 0x180015600)
  • _o__initialize_onexit_table (Address: 0x180015608)
  • _o__invalid_parameter_noinfo (Address: 0x180015610)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x180015618)
  • _o__register_onexit_function (Address: 0x180015620)
  • _o__seh_filter_dll (Address: 0x180015628)
  • _o__wcsicmp (Address: 0x180015638)
  • _o__wtoi (Address: 0x180015640)
  • _o_free (Address: 0x180015648)
  • _o_malloc (Address: 0x180015650)
  • _o_wmemcpy_s (Address: 0x180015658)
  • memcpy (Address: 0x1800156a8)
  • memmove (Address: 0x180015630)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x1800156b8)
  • _initterm_e (Address: 0x1800156c0)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x1800156d0)
  • wcsnlen (Address: 0x1800156d8)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • GetTraceEnableFlags (Address: 0x1800156e8)
  • GetTraceEnableLevel (Address: 0x1800156f8)
  • GetTraceLoggerHandle (Address: 0x1800156f0)
  • RegisterTraceGuidsW (Address: 0x180015710)
  • TraceMessage (Address: 0x180015700)
  • UnregisterTraceGuids (Address: 0x180015708)
api-ms-win-eventing-controller-l1-1-0.dll
  • ControlTraceW (Address: 0x180015730)
  • EnableTraceEx2 (Address: 0x180015740)
  • EnumerateTraceGuidsEx (Address: 0x180015728)
  • QueryAllTracesW (Address: 0x180015720)
  • StartTraceW (Address: 0x180015738)
msvcp_win.dll
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x180015758)
  • ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x180015750)
RPCRT4.dll
  • UuidCreate (Address: 0x1800153b8)