werdiagcontroller.dll

v10.0.19041.3996 64-bit Windows NT Analyzed
Download
Description
WER Diagnostic Controller
Authors
© Microsoft Corporation. All rights reserved.
File size
46.0 KB
Uploaded
2025-12-01 07:42
Views
95
SHA-256
f33592546395f2f56b1677b0c3168d5b

Exported functions 3

QueryOriginalBucket #1 · 0x2110
StartAppRecorder #2 · 0x2270
StartFDR #3 · 0x3060

Imported DLLs & functions 93

api-ms-win-core-errorhandling-l1-1-0.dll 3
GetLastError 0x180007130
SetUnhandledExceptionFilter 0x180007128
UnhandledExceptionFilter 0x180007138
api-ms-win-core-file-l1-1-0.dll 3
CreateFileW 0x180007150
DeleteFileW 0x180007158
GetTempFileNameW 0x180007148
api-ms-win-core-file-l1-2-0.dll 1
GetTempPathW 0x180007168
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x180007178
api-ms-win-core-heap-l2-1-0.dll 1
LocalAlloc 0x180007188
api-ms-win-core-libraryloader-l1-2-0.dll 2
GetModuleFileNameA 0x1800071a0
GetModuleFileNameW 0x180007198
api-ms-win-core-memory-l1-1-0.dll 1
ReadProcessMemory 0x1800071b0
api-ms-win-core-processthreads-l1-1-0.dll 6
CreateProcessW 0x1800071e0
GetCurrentProcess 0x1800071d0
GetCurrentProcessId 0x1800071e8
GetCurrentThreadId 0x1800071c0
GetProcessId 0x1800071c8
TerminateProcess 0x1800071d8
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1800071f8
api-ms-win-core-rtlsupport-l1-1-0.dll 3
RtlCaptureContext 0x180007208
RtlLookupFunctionEntry 0x180007210
RtlVirtualUnwind 0x180007218
api-ms-win-core-synch-l1-1-0.dll 6
AcquireSRWLockExclusive 0x180007228
CreateEventW 0x180007250
OpenEventW 0x180007240
ReleaseSRWLockExclusive 0x180007248
SetEvent 0x180007230
WaitForSingleObject 0x180007238
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x180007260
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemDirectoryW 0x180007280
GetSystemTimeAsFileTime 0x180007270
GetTickCount 0x180007278
api-ms-win-core-windowserrorreporting-l1-1-0.dll 1
WerRegisterFile 0x180007290
api-ms-win-eventing-classicprovider-l1-1-0.dll 5
GetTraceEnableFlags 0x1800072b0
GetTraceEnableLevel 0x1800072b8
GetTraceLoggerHandle 0x1800072c0
RegisterTraceGuidsW 0x1800072a0
TraceEvent 0x1800072a8
api-ms-win-eventing-controller-l1-1-0.dll 1
StartTraceW 0x1800072d0
api-ms-win-eventing-legacy-l1-1-0.dll 1
EnableTrace 0x1800072e0
api-ms-win-eventing-provider-l1-1-0.dll 5
EventProviderEnabled 0x1800072f8
EventRegister 0x1800072f0
EventSetInformation 0x180007300
EventUnregister 0x180007308
EventWriteTransfer 0x180007310
msvcrt.dll 16
__C_specific_handler 0x180007388
_amsg_exit 0x180007380
_initterm 0x180007328
_vsnwprintf 0x180007370
_wcsicmp 0x180007338
_wcsnicmp 0x180007358
_wtoi 0x180007320
_XcptFilter 0x180007348
free 0x180007368
isspace 0x180007350
malloc 0x180007360
memcpy 0x180007378
memmove 0x180007330
memset 0x180007398
toupper 0x180007390
wcschr 0x180007340
ntdll.dll 32
DbgPrintEx 0x180007490
EtwEventWriteNoRegistration 0x180007460
LdrDisableThreadCalloutsForDll 0x180007498
LdrGetDllHandle 0x1800073d8
LdrGetProcedureAddress 0x1800073e8
NtAlpcConnectPort 0x180007410
NtAlpcSendWaitReceivePort 0x1800073a8
NtClose 0x180007480
NtDelayExecution 0x1800073d0
NtDeleteFile 0x180007488
NtDeleteKey 0x1800073c8
NtDeleteValueKey 0x1800073f0
NtOpenEvent 0x180007438
NtOpenKey 0x180007418
NtQueryInformationProcess 0x180007430
NtQuerySystemInformation 0x180007448
NtQueryValueKey 0x180007420
NtSetValueKey 0x180007428
NtWaitForSingleObject 0x180007440
RtlAllocateAndInitializeSid 0x1800074a0
RtlAllocateHeap 0x1800073f8
RtlCreateUserThread 0x1800073c0
RtlDosPathNameToNtPathName_U 0x180007408
RtlFormatCurrentUserKeyPath 0x180007478
RtlFreeHeap 0x1800073b0
RtlFreeSid 0x1800073b8
RtlFreeUnicodeString 0x180007470
RtlGUIDFromString 0x180007400
RtlInitAnsiString 0x1800073e0
RtlInitUnicodeString 0x180007468
ZwQueryWnfStateNameInformation 0x180007450
ZwUpdateWnfStateData 0x180007458