werdiagcontroller.dll

v10.0.19041.3996 32-bit Windows NT Analyzed
Download
Description
WER Diagnostic Controller
Authors
© Microsoft Corporation. All rights reserved.
File size
38.0 KB
Uploaded
2025-12-01 08:06
Views
82
SHA-256
6f0846a09b5dbbc9ce6bb47a2cda0d53

Exported functions 3

QueryOriginalBucket #1 · 0x4c40
StartAppRecorder #2 · 0x4e90
StartFDR #3 · 0x5850

Imported DLLs & functions 90

api-ms-win-core-errorhandling-l1-1-0.dll 3
GetLastError 0x1000a004
SetUnhandledExceptionFilter 0x1000a000
UnhandledExceptionFilter 0x1000a008
api-ms-win-core-file-l1-1-0.dll 3
CreateFileW 0x1000a018
DeleteFileW 0x1000a014
GetTempFileNameW 0x1000a010
api-ms-win-core-file-l1-2-0.dll 1
GetTempPathW 0x1000a020
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x1000a028
api-ms-win-core-heap-l2-1-0.dll 1
LocalAlloc 0x1000a030
api-ms-win-core-libraryloader-l1-2-0.dll 2
GetModuleFileNameA 0x1000a038
GetModuleFileNameW 0x1000a03c
api-ms-win-core-memory-l1-1-0.dll 1
ReadProcessMemory 0x1000a044
api-ms-win-core-processthreads-l1-1-0.dll 6
CreateProcessW 0x1000a050
GetCurrentProcess 0x1000a054
GetCurrentProcessId 0x1000a060
GetCurrentThreadId 0x1000a058
GetProcessId 0x1000a05c
TerminateProcess 0x1000a04c
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1000a068
api-ms-win-core-synch-l1-1-0.dll 6
AcquireSRWLockExclusive 0x1000a078
CreateEventW 0x1000a084
OpenEventW 0x1000a070
ReleaseSRWLockExclusive 0x1000a074
SetEvent 0x1000a07c
WaitForSingleObject 0x1000a080
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x1000a08c
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemDirectoryW 0x1000a09c
GetSystemTimeAsFileTime 0x1000a094
GetTickCount 0x1000a098
api-ms-win-core-windowserrorreporting-l1-1-0.dll 1
WerRegisterFile 0x1000a0a4
api-ms-win-eventing-classicprovider-l1-1-0.dll 5
GetTraceEnableFlags 0x1000a0b8
GetTraceEnableLevel 0x1000a0ac
GetTraceLoggerHandle 0x1000a0bc
RegisterTraceGuidsW 0x1000a0b4
TraceEvent 0x1000a0b0
api-ms-win-eventing-controller-l1-1-0.dll 1
StartTraceW 0x1000a0c4
api-ms-win-eventing-legacy-l1-1-0.dll 1
EnableTrace 0x1000a0cc
api-ms-win-eventing-provider-l1-1-0.dll 5
EventProviderEnabled 0x1000a0d4
EventRegister 0x1000a0dc
EventSetInformation 0x1000a0d8
EventUnregister 0x1000a0e4
EventWriteTransfer 0x1000a0e0
msvcrt.dll 16
_amsg_exit 0x1000a118
_except_handler4_common 0x1000a104
_initterm 0x1000a0f0
_vsnwprintf 0x1000a0ec
_wcsicmp 0x1000a10c
_wcsnicmp 0x1000a0f4
_wtoi 0x1000a110
_XcptFilter 0x1000a100
free 0x1000a0fc
isspace 0x1000a11c
malloc 0x1000a0f8
memcpy 0x1000a114
memmove 0x1000a120
memset 0x1000a128
toupper 0x1000a124
wcschr 0x1000a108
ntdll.dll 32
DbgPrintEx 0x1000a1a4
EtwEventWriteNoRegistration 0x1000a18c
LdrDisableThreadCalloutsForDll 0x1000a1a8
LdrGetDllHandle 0x1000a148
LdrGetProcedureAddress 0x1000a150
NtAlpcConnectPort 0x1000a164
NtAlpcSendWaitReceivePort 0x1000a130
NtClose 0x1000a19c
NtDelayExecution 0x1000a144
NtDeleteFile 0x1000a1a0
NtDeleteKey 0x1000a140
NtDeleteValueKey 0x1000a154
NtOpenEvent 0x1000a178
NtOpenKey 0x1000a168
NtQueryInformationProcess 0x1000a174
NtQuerySystemInformation 0x1000a180
NtQueryValueKey 0x1000a16c
NtSetValueKey 0x1000a170
NtWaitForSingleObject 0x1000a17c
RtlAllocateAndInitializeSid 0x1000a1ac
RtlAllocateHeap 0x1000a158
RtlCreateUserThread 0x1000a13c
RtlDosPathNameToNtPathName_U 0x1000a160
RtlFormatCurrentUserKeyPath 0x1000a198
RtlFreeHeap 0x1000a134
RtlFreeSid 0x1000a138
RtlFreeUnicodeString 0x1000a194
RtlGUIDFromString 0x1000a15c
RtlInitAnsiString 0x1000a14c
RtlInitUnicodeString 0x1000a190
ZwQueryWnfStateNameInformation 0x1000a184
ZwUpdateWnfStateData 0x1000a188