weretw.dll

v10.0.19041.4355 64-bit Windows NT Analyzed
Download
Description
WERETW.DLL
Authors
© Microsoft Corporation. All rights reserved.
File size
249.2 KB
Uploaded
2025-12-01 07:42
Views
74
SHA-256
72a73f9ec30a21d8cb8979ff418b9aa3

Exported functions 2

WerMergeEtl #1 · 0x1ce0
WerMergeEtlEx #2 · 0x1d60

Imported DLLs & functions 180

api-ms-win-core-com-l1-1-0.dll 5
CoCreateGuid 0x18002bf60
CoCreateInstance 0x18002bf78
CoInitializeEx 0x18002bf68
CoUninitialize 0x18002bf70
StringFromGUID2 0x18002bf80
api-ms-win-core-debug-l1-1-0.dll 4
DebugBreak 0x18002bf98
IsDebuggerPresent 0x18002bfa0
OutputDebugStringA 0x18002bf90
OutputDebugStringW 0x18002bfa8
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x18002bfc8
RaiseException 0x18002bfc0
SetLastError 0x18002bfd0
SetUnhandledExceptionFilter 0x18002bfb8
UnhandledExceptionFilter 0x18002bfd8
api-ms-win-core-file-l1-1-0.dll 17
CreateDirectoryW 0x18002bfe8
CreateFileW 0x18002c000
DeleteFileW 0x18002c018
FindClose 0x18002c048
FindFirstFileW 0x18002c038
FindFirstVolumeW 0x18002c008
FindNextFileW 0x18002c040
FindNextVolumeW 0x18002c020
FindVolumeClose 0x18002c030
GetFileAttributesW 0x18002bff8
GetFileSize 0x18002c068
GetTempFileNameW 0x18002c028
QueryDosDeviceW 0x18002c010
ReadFile 0x18002c050
SetFilePointer 0x18002c060
SetFilePointerEx 0x18002c058
WriteFile 0x18002bff0
api-ms-win-core-file-l1-2-0.dll 2
GetTempPathW 0x18002c080
GetVolumePathNamesForVolumeNameW 0x18002c078
api-ms-win-core-file-l2-1-2.dll 1
CopyFileW 0x18002c090
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x18002c0a0
api-ms-win-core-heap-l1-1-0.dll 6
GetProcessHeap 0x18002c0d8
HeapAlloc 0x18002c0b8
HeapDestroy 0x18002c0b0
HeapFree 0x18002c0c0
HeapReAlloc 0x18002c0c8
HeapSize 0x18002c0d0
api-ms-win-core-libraryloader-l1-2-0.dll 10
FindResourceExW 0x18002c100
FreeLibrary 0x18002c0e8
GetModuleFileNameA 0x18002c130
GetModuleHandleExW 0x18002c0f8
GetModuleHandleW 0x18002c120
GetProcAddress 0x18002c110
LoadLibraryExW 0x18002c0f0
LoadResource 0x18002c128
LockResource 0x18002c118
SizeofResource 0x18002c108
api-ms-win-core-libraryloader-l1-2-1.dll 2
FindResourceW 0x18002c148
LoadLibraryW 0x18002c140
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x18002c158
api-ms-win-core-memory-l1-1-0.dll 3
CreateFileMappingW 0x18002c170
MapViewOfFileEx 0x18002c168
UnmapViewOfFile 0x18002c178
api-ms-win-core-processenvironment-l1-1-0.dll 1
GetEnvironmentVariableW 0x18002c188
api-ms-win-core-processthreads-l1-1-0.dll 7
CreateProcessW 0x18002c1c8
GetCurrentProcess 0x18002c1a0
GetCurrentProcessId 0x18002c1b0
GetCurrentThread 0x18002c1b8
GetCurrentThreadId 0x18002c1a8
GetExitCodeProcess 0x18002c198
TerminateProcess 0x18002c1c0
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18002c1d8
api-ms-win-core-registry-l1-1-0.dll 4
RegCloseKey 0x18002c200
RegEnumKeyExW 0x18002c1f0
RegOpenKeyExW 0x18002c1e8
RegQueryValueExW 0x18002c1f8
api-ms-win-core-rtlsupport-l1-1-0.dll 3
RtlCaptureContext 0x18002c220
RtlLookupFunctionEntry 0x18002c210
RtlVirtualUnwind 0x18002c218
api-ms-win-core-string-l1-1-0.dll 2
MultiByteToWideChar 0x18002c230
WideCharToMultiByte 0x18002c238
api-ms-win-core-synch-l1-1-0.dll 11
CreateMutexExW 0x18002c278
CreateSemaphoreExW 0x18002c270
DeleteCriticalSection 0x18002c250
EnterCriticalSection 0x18002c258
InitializeCriticalSection 0x18002c260
LeaveCriticalSection 0x18002c248
OpenSemaphoreW 0x18002c280
ReleaseMutex 0x18002c290
ReleaseSemaphore 0x18002c298
WaitForSingleObject 0x18002c268
WaitForSingleObjectEx 0x18002c288
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x18002c2a8
api-ms-win-core-sysinfo-l1-1-0.dll 6
GetSystemDirectoryW 0x18002c2d0
GetSystemTimeAsFileTime 0x18002c2e0
GetSystemWindowsDirectoryW 0x18002c2b8
GetTickCount 0x18002c2c0
GetVersionExW 0x18002c2c8
GetWindowsDirectoryW 0x18002c2d8
api-ms-win-core-timezone-l1-1-0.dll 1
SystemTimeToFileTime 0x18002c2f0
api-ms-win-core-version-l1-1-0.dll 3
GetFileVersionInfoExW 0x18002c300
GetFileVersionInfoSizeExW 0x18002c308
VerQueryValueW 0x18002c310
api-ms-win-core-wow64-l1-1-0.dll 3
IsWow64Process 0x18002c320
Wow64DisableWow64FsRedirection 0x18002c330
Wow64RevertWow64FsRedirection 0x18002c328
api-ms-win-eventing-classicprovider-l1-1-0.dll 3
RegisterTraceGuidsW 0x18002c350
TraceEvent 0x18002c348
UnregisterTraceGuids 0x18002c340
api-ms-win-eventing-consumer-l1-1-0.dll 3
CloseTrace 0x18002c360
OpenTraceW 0x18002c370
ProcessTrace 0x18002c368
api-ms-win-eventing-controller-l1-1-0.dll 2
ControlTraceW 0x18002c380
StartTraceW 0x18002c388
api-ms-win-eventing-provider-l1-1-0.dll 1
EventWriteTransfer 0x18002c398
bcrypt.dll 7
BCryptCloseAlgorithmProvider 0x18002c3d0
BCryptCreateHash 0x18002c3c0
BCryptDestroyHash 0x18002c3d8
BCryptFinishHash 0x18002c3b0
BCryptGetProperty 0x18002c3b8
BCryptHashData 0x18002c3c8
BCryptOpenAlgorithmProvider 0x18002c3a8
msvcrt.dll 57
__C_specific_handler 0x18002c3f8
__CxxFrameHandler3 0x18002c3f0
__dllonexit 0x18002c590
_amsg_exit 0x18002c460
_callnewh 0x18002c410
_CxxThrowException 0x18002c3e8
_errno 0x18002c478
_gmtime64 0x18002c4a8
_initterm 0x18002c5a0
_lock 0x18002c480
_memicmp 0x18002c4a0
_onexit 0x18002c580
_purecall 0x18002c420
_stricmp 0x18002c518
_ultow_s 0x18002c4d8
_unlock 0x18002c470
_vscwprintf 0x18002c4e8
_vsnprintf_s 0x18002c578
_vsnwprintf 0x18002c520
_wcsicmp 0x18002c508
_wcslwr_s 0x18002c528
_wcsnicmp 0x18002c530
_XcptFilter 0x18002c448
??0exception@@QEAA@AEBQEBD@Z 0x18002c4b8
??0exception@@QEAA@AEBQEBDH@Z 0x18002c458
??0exception@@QEAA@AEBV0@@Z 0x18002c468
??0exception@@QEAA@XZ 0x18002c500
??1exception@@UEAA@XZ 0x18002c438
??1type_info@@UEAA@XZ 0x18002c588
?terminate@@YAXXZ 0x18002c598
?what@exception@@UEBAPEBDXZ 0x18002c418
calloc 0x18002c428
free 0x18002c440
iswdigit 0x18002c548
ldiv 0x18002c558
malloc 0x18002c450
memchr 0x18002c498
memcpy 0x18002c490
memcpy_s 0x18002c4b0
memmove 0x18002c488
memmove_s 0x18002c4c0
memset 0x18002c400
realloc 0x18002c408
strrchr 0x18002c568
towlower 0x18002c560
vswprintf_s 0x18002c4e0
wcschr 0x18002c4f8
wcscmp 0x18002c5a8
wcscpy_s 0x18002c430
wcscspn 0x18002c540
wcsncmp 0x18002c4f0
wcsncpy_s 0x18002c4d0
wcsnlen 0x18002c4c8
wcsrchr 0x18002c510
wcsspn 0x18002c538
wcsstr 0x18002c570
wcstol 0x18002c550
ntdll.dll 5
RtlAcquireSRWLockExclusive 0x18002c5c8
RtlGetVersion 0x18002c5b8
RtlImageDirectoryEntryToData 0x18002c5d8
RtlImageRvaToVa 0x18002c5d0
RtlReleaseSRWLockExclusive 0x18002c5c0
OLEAUT32.dll 2
SysAllocString 0x18002bf50
SysFreeString 0x18002bf48