wevtapi.dll

v10.0.19041.6280 32-bit Windows NT Analyzed
Download
Description
Eventing Consumption and Configuration API
Authors
© Microsoft Corporation. All rights reserved.
File size
288.0 KB
Uploaded
2025-12-01 08:06
Views
109
SHA-256
5e3c5129ad4f80ae32f71189a196a6c1

Exported functions 45

EvtIntSysprepCleanup #1 · 0x2b210
EvtArchiveExportedLog #2 · 0x29400
EvtCancel #3 · 0x29550
EvtClearLog #4 · 0x29660
EvtClose #5 · 0xedd0
EvtCreateBookmark #6 · 0x102c0
EvtCreateRenderContext #7 · 0xef10
EvtExportLog #8 · 0x297f0
EvtFormatMessage #9 · 0x10b30
EvtGetChannelConfigProperty #10 · 0x13df0
EvtGetEventInfo #11 · 0x29a40
EvtGetEventMetadataProperty #12 · 0x29af0
EvtGetExtendedStatus #13 · 0x29bf0
EvtGetLogInfo #14 · 0x29c10
EvtGetObjectArrayProperty #15 · 0x29cc0
EvtGetObjectArraySize #16 · 0x29db0
EvtGetPublisherMetadataProperty #17 · 0x29e50
EvtGetQueryInfo #18 · 0x29f50
EvtIntAssertConfig #19 · 0x10320
EvtIntCreateBinXMLFromCustomXML #20 · 0x2ba40
EvtIntCreateLocalLogfile #21 · 0x2ba70
EvtIntGetClassicLogDisplayName #22 · 0x2bb80
EvtIntRenderResourceEventTemplate #23 · 0x2bf10
EvtIntReportAuthzEventAndSourceAsync #24 · 0x3ebe4
EvtIntReportEventAndSourceAsync #25 · 0x3ec2f
EvtIntRetractConfig #26 · 0x2c440
EvtIntWriteXmlEventToLocalLogfile #27 · 0x2c590
EvtNext #28 · 0xa630
EvtNextChannelPath #29 · 0x2a320
EvtNextEventMetadata #30 · 0x2a3d0
EvtNextPublisherId #31 · 0x2a4f0
EvtOpenChannelConfig #32 · 0x13880
EvtOpenChannelEnum #33 · 0x2a5a0
EvtOpenEventMetadataEnum #34 · 0x2a710
EvtOpenLog #35 · 0x2a820
EvtOpenPublisherEnum #36 · 0x2a9b0
EvtOpenPublisherMetadata #37 · 0x10580
EvtOpenSession #38 · 0x13c00
EvtQuery #39 · 0x8c30
EvtRender #40 · 0xabc0
EvtSaveChannelConfig #41 · 0x2ab20
EvtSeek #42 · 0x8020
EvtSetChannelConfigProperty #43 · 0x2ac00
EvtSubscribe #44 · 0x9740
EvtUpdateBookmark #45 · 0x8810

Imported DLLs & functions 173

api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x10040008
IsDebuggerPresent 0x10040004
OutputDebugStringW 0x10040000
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x10040010
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x10040018
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x1004002c
SetLastError 0x10040028
SetUnhandledExceptionFilter 0x10040020
UnhandledExceptionFilter 0x10040024
api-ms-win-core-file-l1-1-0.dll 12
CreateFileW 0x10040048
DeleteFileW 0x10040058
FlushFileBuffers 0x10040038
GetDiskFreeSpaceExW 0x10040060
GetFileAttributesW 0x1004004c
GetFileInformationByHandle 0x10040040
GetFileSizeEx 0x10040034
GetFullPathNameW 0x10040050
GetTempFileNameW 0x1004005c
ReadFile 0x10040044
SetEndOfFile 0x1004003c
SetFilePointerEx 0x10040054
api-ms-win-core-file-l2-1-0.dll 1
MoveFileExW 0x10040068
api-ms-win-core-handle-l1-1-0.dll 2
CloseHandle 0x10040074
DuplicateHandle 0x10040070
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x10040084
HeapAlloc 0x10040080
HeapFree 0x1004007c
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x1004008c
LocalFree 0x10040090
api-ms-win-core-interlocked-l1-1-0.dll 1
InitializeSListHead 0x10040098
api-ms-win-core-libraryloader-l1-2-0.dll 5
FreeLibrary 0x100400a8
GetModuleFileNameA 0x100400a4
GetModuleHandleExW 0x100400a0
GetModuleHandleW 0x100400b0
GetProcAddress 0x100400ac
api-ms-win-core-localization-l1-2-0.dll 4
FormatMessageW 0x100400c0
GetLocaleInfoW 0x100400bc
GetThreadLocale 0x100400b8
GetThreadUILanguage 0x100400c4
api-ms-win-core-processenvironment-l1-1-0.dll 1
ExpandEnvironmentStringsW 0x100400cc
api-ms-win-core-processthreads-l1-1-0.dll 8
GetCurrentProcess 0x100400f0
GetCurrentProcessId 0x100400d8
GetCurrentThreadId 0x100400dc
TerminateProcess 0x100400d4
TlsAlloc 0x100400e0
TlsFree 0x100400e4
TlsGetValue 0x100400ec
TlsSetValue 0x100400e8
api-ms-win-core-processthreads-l1-1-1.dll 1
IsProcessorFeaturePresent 0x100400f8
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x10040100
api-ms-win-core-string-l1-1-0.dll 2
MultiByteToWideChar 0x1004010c
WideCharToMultiByte 0x10040108
api-ms-win-core-synch-l1-1-0.dll 18
AcquireSRWLockExclusive 0x10040114
AcquireSRWLockShared 0x10040120
CreateEventW 0x10040134
CreateMutexExW 0x1004012c
CreateSemaphoreExW 0x10040130
DeleteCriticalSection 0x10040140
EnterCriticalSection 0x1004014c
InitializeCriticalSectionEx 0x10040144
LeaveCriticalSection 0x10040148
OpenSemaphoreW 0x10040128
ReleaseMutex 0x10040124
ReleaseSemaphore 0x1004013c
ReleaseSRWLockExclusive 0x1004011c
ReleaseSRWLockShared 0x10040154
ResetEvent 0x10040118
SetEvent 0x10040150
WaitForSingleObject 0x10040138
WaitForSingleObjectEx 0x10040158
api-ms-win-core-synch-l1-2-0.dll 6
InitializeConditionVariable 0x10040174
InitOnceBeginInitialize 0x1004016c
InitOnceComplete 0x10040164
Sleep 0x10040160
SleepConditionVariableCS 0x10040170
WakeAllConditionVariable 0x10040168
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemTimeAsFileTime 0x1004017c
GetTickCount 0x10040180
GetTickCount64 0x10040184
api-ms-win-core-threadpool-l1-2-0.dll 14
CloseThreadpoolCleanupGroup 0x1004018c
CloseThreadpoolTimer 0x10040190
CloseThreadpoolWait 0x100401b0
CloseThreadpoolWork 0x100401c0
CreateThreadpoolCleanupGroup 0x10040198
CreateThreadpoolTimer 0x100401b4
CreateThreadpoolWait 0x100401a8
CreateThreadpoolWork 0x100401a0
FreeLibraryWhenCallbackReturns 0x100401bc
SetThreadpoolTimer 0x1004019c
SetThreadpoolWait 0x100401a4
SubmitThreadpoolWork 0x100401b8
WaitForThreadpoolTimerCallbacks 0x10040194
WaitForThreadpoolWaitCallbacks 0x100401ac
api-ms-win-core-timezone-l1-1-0.dll 2
FileTimeToSystemTime 0x100401c8
SystemTimeToFileTime 0x100401cc
api-ms-win-crt-private-l1-1-0.dll 49
__CxxFrameHandler3 0x10040288
__std_terminate 0x10040284
_CxxThrowException 0x1004028c
_except_handler4_common 0x1004025c
_o___std_exception_copy 0x10040278
_o___std_exception_destroy 0x10040274
_o___std_type_info_destroy_list 0x10040270
_o___stdio_common_vsnprintf_s 0x1004026c
_o___stdio_common_vsnwprintf_s 0x10040268
_o___stdio_common_vsprintf_s 0x10040264
_o___stdio_common_vswprintf 0x10040260
_o__cexit 0x10040280
_o__configure_narrow_argv 0x100401d4
_o__crt_atexit 0x100401d8
_o__errno 0x100401dc
_o__execute_onexit_table 0x100401e0
_o__i64tow_s 0x100401e4
_o__initialize_narrow_environment 0x100401e8
_o__initialize_onexit_table 0x100401ec
_o__invalid_parameter_noinfo 0x100401f0
_o__invalid_parameter_noinfo_noreturn 0x100401f4
_o__itow_s 0x100401f8
_o__purecall 0x100401fc
_o__register_onexit_function 0x10040200
_o__seh_filter_dll 0x10040204
_o__ui64tow_s 0x1004020c
_o__ultow_s 0x10040210
_o__wcsicmp 0x10040214
_o__wcsnicmp 0x10040218
_o__wcstoi64 0x1004021c
_o__wcstoui64 0x10040220
_o__wtof 0x10040224
_o__wtoi 0x10040228
_o__wtoi64 0x1004022c
_o__wtol 0x10040230
_o_free 0x10040234
_o_iswalnum 0x10040238
_o_iswalpha 0x1004023c
_o_iswdigit 0x10040240
_o_iswspace 0x10040244
_o_strncpy_s 0x10040248
_o_terminate 0x1004024c
_o_toupper 0x10040250
_o_wcscpy_s 0x10040254
_o_wcsncpy_s 0x10040258
memcmp 0x10040290
memcpy 0x10040294
memmove 0x10040208
wcschr 0x1004027c
api-ms-win-crt-runtime-l1-1-0.dll 2
_initterm 0x1004029c
_initterm_e 0x100402a0
api-ms-win-crt-string-l1-1-0.dll 3
memset 0x100402b0
strnlen 0x100402ac
wcsnlen 0x100402a8
api-ms-win-eventing-classicprovider-l1-1-0.dll 1
TraceMessage 0x100402b8
api-ms-win-eventing-provider-l1-1-0.dll 6
EventActivityIdControl 0x100402cc
EventProviderEnabled 0x100402d4
EventRegister 0x100402d0
EventSetInformation 0x100402c8
EventUnregister 0x100402c0
EventWriteTransfer 0x100402c4
api-ms-win-security-base-l1-1-0.dll 2
GetLengthSid 0x100402e0
IsValidSid 0x100402dc
msvcp_win.dll 2
?_Xlength_error@std@@YAXPBD@Z 0x100402e8
?_Xout_of_range@std@@YAXPBD@Z 0x100402ec
ntdll.dll 13
EtwGetTraceEnableFlags 0x10040304
EtwGetTraceEnableLevel 0x100402f4
EtwGetTraceLoggerHandle 0x10040300
EtwRegisterTraceGuidsW 0x100402f8
EtwTraceMessage 0x100402fc
EtwUnregisterTraceGuids 0x10040324
NtReadFile 0x10040318
NtSetInformationFile 0x10040308
NtWriteFile 0x10040314
RtlComputeCrc32 0x10040310
RtlNtStatusToDosError 0x10040320
RtlSetLastWin32Error 0x1004031c
RtlSetLastWin32ErrorAndNtStatusFromNtStatus 0x1004030c