EventsInstaller.dll

Description: Events Offline Installer

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.1704

Architecture: 32-bit

Operating System: Windows NT

SHA256: ba427fb503b8ca54986e96acd6b47435

File Size: 207.9 KB

Uploaded At: Dec. 1, 2025, 8:33 a.m.

Views: 23

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x5b60)
  • DllCsiGetHandler (Ordinal: 2, Address: 0x5b90)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x10025044)
  • IsDebuggerPresent (Address: 0x10025048)
  • OutputDebugStringW (Address: 0x10025040)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x10025058)
  • SetLastError (Address: 0x1002505c)
  • SetUnhandledExceptionFilter (Address: 0x10025050)
  • UnhandledExceptionFilter (Address: 0x10025054)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x10025064)
  • GetFileAttributesW (Address: 0x10025068)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x10025070)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1002507c)
  • HeapAlloc (Address: 0x10025078)
  • HeapFree (Address: 0x10025080)
api-ms-win-core-heap-obsolete-l1-1-0.dll
  • LocalAlloc (Address: 0x1002508c)
  • LocalFree (Address: 0x10025088)
api-ms-win-core-libraryloader-l1-1-0.dll
  • DisableThreadLibraryCalls (Address: 0x10025098)
  • FindResourceExW (Address: 0x10025094)
  • FreeLibrary (Address: 0x100250a4)
  • FreeResource (Address: 0x100250c0)
  • GetModuleFileNameA (Address: 0x100250a0)
  • GetModuleHandleExW (Address: 0x100250b0)
  • GetModuleHandleW (Address: 0x100250b4)
  • GetProcAddress (Address: 0x100250bc)
  • LoadLibraryExW (Address: 0x100250ac)
  • LoadResource (Address: 0x1002509c)
  • LockResource (Address: 0x100250b8)
  • SizeofResource (Address: 0x100250a8)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x100250c8)
api-ms-win-core-memory-l1-1-0.dll
  • UnmapViewOfFile (Address: 0x100250d0)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x100250d8)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x100250e4)
  • GetCurrentProcessId (Address: 0x100250ec)
  • GetCurrentThreadId (Address: 0x100250e8)
  • TerminateProcess (Address: 0x100250e0)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x100250f4)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x10025120)
  • RegCreateKeyExW (Address: 0x100250fc)
  • RegDeleteKeyExW (Address: 0x10025104)
  • RegDeleteValueW (Address: 0x10025124)
  • RegEnumKeyExW (Address: 0x1002510c)
  • RegGetKeySecurity (Address: 0x10025110)
  • RegGetValueW (Address: 0x1002511c)
  • RegOpenKeyExW (Address: 0x10025118)
  • RegQueryInfoKeyW (Address: 0x10025108)
  • RegQueryValueExW (Address: 0x10025114)
  • RegSetValueExW (Address: 0x10025100)
api-ms-win-core-registry-l2-1-0.dll
  • RegCreateKeyTransactedW (Address: 0x1002512c)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x10025134)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x10025150)
  • AcquireSRWLockShared (Address: 0x10025140)
  • CreateMutexExW (Address: 0x10025164)
  • CreateSemaphoreExW (Address: 0x10025148)
  • DeleteCriticalSection (Address: 0x10025144)
  • EnterCriticalSection (Address: 0x1002516c)
  • InitializeCriticalSection (Address: 0x1002514c)
  • InitializeCriticalSectionEx (Address: 0x10025170)
  • LeaveCriticalSection (Address: 0x1002515c)
  • OpenSemaphoreW (Address: 0x10025178)
  • ReleaseMutex (Address: 0x10025158)
  • ReleaseSemaphore (Address: 0x10025154)
  • ReleaseSRWLockExclusive (Address: 0x1002513c)
  • ReleaseSRWLockShared (Address: 0x10025160)
  • WaitForSingleObject (Address: 0x10025174)
  • WaitForSingleObjectEx (Address: 0x10025168)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x10025188)
  • InitOnceComplete (Address: 0x10025184)
  • Sleep (Address: 0x10025180)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x10025194)
  • GetTickCount (Address: 0x10025190)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x100251a0)
  • CreateThreadpoolTimer (Address: 0x100251a4)
  • SetThreadpoolTimer (Address: 0x1002519c)
  • WaitForThreadpoolTimerCallbacks (Address: 0x100251a8)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x100251b0)
  • EncodePointer (Address: 0x100251b4)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • GetTraceEnableFlags (Address: 0x100251d0)
  • GetTraceEnableLevel (Address: 0x100251cc)
  • GetTraceLoggerHandle (Address: 0x100251bc)
  • RegisterTraceGuidsW (Address: 0x100251c8)
  • TraceMessage (Address: 0x100251c4)
  • UnregisterTraceGuids (Address: 0x100251c0)
api-ms-win-security-base-l1-1-0.dll
  • AddAce (Address: 0x100251f4)
  • GetAce (Address: 0x100251e4)
  • GetAclInformation (Address: 0x100251d8)
  • GetSecurityDescriptorControl (Address: 0x100251ec)
  • GetSecurityDescriptorDacl (Address: 0x100251dc)
  • GetSecurityDescriptorGroup (Address: 0x100251f8)
  • GetSecurityDescriptorLength (Address: 0x10025214)
  • GetSecurityDescriptorOwner (Address: 0x100251fc)
  • InitializeAcl (Address: 0x100251e0)
  • InitializeSecurityDescriptor (Address: 0x10025210)
  • IsValidSecurityDescriptor (Address: 0x100251f0)
  • MakeSelfRelativeSD (Address: 0x10025200)
  • MapGenericMask (Address: 0x100251e8)
  • SetSecurityDescriptorDacl (Address: 0x1002520c)
  • SetSecurityDescriptorGroup (Address: 0x10025204)
  • SetSecurityDescriptorOwner (Address: 0x10025208)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSecurityDescriptorToStringSecurityDescriptorW (Address: 0x10025220)
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1002521c)
bcrypt.dll
  • BCryptCloseAlgorithmProvider (Address: 0x1002522c)
  • BCryptCreateHash (Address: 0x10025234)
  • BCryptDestroyHash (Address: 0x10025240)
  • BCryptFinishHash (Address: 0x10025228)
  • BCryptGetProperty (Address: 0x10025230)
  • BCryptHashData (Address: 0x1002523c)
  • BCryptOpenAlgorithmProvider (Address: 0x10025238)
msvcrt.dll
  • __CxxFrameHandler3 (Address: 0x10025278)
  • __dllonexit (Address: 0x1002528c)
  • _amsg_exit (Address: 0x100252dc)
  • _CxxThrowException (Address: 0x10025260)
  • _errno (Address: 0x1002529c)
  • _except_handler4_common (Address: 0x10025298)
  • _initterm (Address: 0x1002524c)
  • _itow_s (Address: 0x100252c0)
  • _lock (Address: 0x10025250)
  • _onexit (Address: 0x10025290)
  • _purecall (Address: 0x100252d8)
  • _ultow_s (Address: 0x100252bc)
  • _unlock (Address: 0x10025268)
  • _vsnwprintf (Address: 0x100252cc)
  • _wcsicmp (Address: 0x100252a8)
  • _wcsnicmp (Address: 0x100252c4)
  • _wcstoui64 (Address: 0x100252ac)
  • _wtoi (Address: 0x100252b4)
  • _XcptFilter (Address: 0x10025254)
  • ??0exception@@QAE@ABQBD@Z (Address: 0x10025274)
  • ??0exception@@QAE@ABQBDH@Z (Address: 0x10025270)
  • ??0exception@@QAE@ABV0@@Z (Address: 0x1002526c)
  • ??1exception@@UAE@XZ (Address: 0x100252a4)
  • ??1type_info@@UAE@XZ (Address: 0x10025294)
  • ?terminate@@YAXXZ (Address: 0x10025248)
  • ?what@exception@@UBEPBDXZ (Address: 0x10025264)
  • free (Address: 0x10025288)
  • malloc (Address: 0x10025284)
  • memcmp (Address: 0x100252a0)
  • memcpy (Address: 0x1002525c)
  • memcpy_s (Address: 0x100252d0)
  • memmove (Address: 0x10025258)
  • memmove_s (Address: 0x100252d4)
  • memset (Address: 0x100252e0)
  • towupper (Address: 0x100252c8)
  • wcschr (Address: 0x100252b8)
  • wcscpy_s (Address: 0x1002527c)
  • wcsncmp (Address: 0x10025280)
  • wcstoul (Address: 0x100252b0)
ntdll.dll
  • NtCommitTransaction (Address: 0x100252e8)
  • NtCreateTransaction (Address: 0x100252ec)
  • RtlGetVersion (Address: 0x100252f8)
  • RtlInitUnicodeStringEx (Address: 0x100252f0)
  • RtlNtStatusToDosError (Address: 0x100252f4)
RPCRT4.dll
  • UuidCreate (Address: 0x10025000)
WCP.dll
  • ?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YIKPAU_RTL_TRACING_FACILITY@123@@Z (Address: 0x10025010)
  • ?RtlTraceFormat_PCbool@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z (Address: 0x10025028)
  • ?RtlTraceFormat_PCHRESULT@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z (Address: 0x1002502c)
  • ?RtlTraceFormat_PCLONG@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z (Address: 0x10025034)
  • ?RtlTraceFormat_PCSTR_AsLiteralString@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z (Address: 0x10025038)
  • ?RtlTraceFormat_PCULONG_AsWin32Error@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z (Address: 0x10025030)
  • ?RtlTraceFormat_PCULONG@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z (Address: 0x1002500c)
  • ?RtlTraceFormat_PCWSTR_AsLiteralString@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z (Address: 0x10025018)
  • ?RtlTraceVa@Rtl@WCP@Windows@@YIXKKPAU_RTL_TRACING_FACILITY@123@QBDKPAD@Z (Address: 0x1002501c)
  • RtlCalculateUtf16StringLengthFromLUtf8String (Address: 0x10025024)
  • RtlCopyLUtf8StringToLUnicodeString (Address: 0x10025014)
  • RtlCreateMicrodom (Address: 0x10025020)
  • RtlFreeLUtf8String (Address: 0x10025008)