weretw.dll

v10.0.19041.4355 32-bit Windows NT Analyzed
Download
Description
WERETW.DLL
Authors
© Microsoft Corporation. All rights reserved.
File size
192.1 KB
Uploaded
2025-12-01 08:06
Views
53
SHA-256
0e898bfa65bc2b2c5c3a61678b9e31f9

Exported functions 2

WerMergeEtl #1 · 0x4710
WerMergeEtlEx #2 · 0x4760

Imported DLLs & functions 175

api-ms-win-core-com-l1-1-0.dll 5
CoCreateGuid 0x1002c00c
CoCreateInstance 0x1002c018
CoInitializeEx 0x1002c010
CoUninitialize 0x1002c014
StringFromGUID2 0x1002c01c
api-ms-win-core-debug-l1-1-0.dll 4
DebugBreak 0x1002c028
IsDebuggerPresent 0x1002c02c
OutputDebugStringA 0x1002c024
OutputDebugStringW 0x1002c030
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x1002c040
RaiseException 0x1002c03c
SetLastError 0x1002c044
SetUnhandledExceptionFilter 0x1002c038
UnhandledExceptionFilter 0x1002c048
api-ms-win-core-file-l1-1-0.dll 17
CreateDirectoryW 0x1002c050
CreateFileW 0x1002c05c
DeleteFileW 0x1002c068
FindClose 0x1002c080
FindFirstFileW 0x1002c078
FindFirstVolumeW 0x1002c060
FindNextFileW 0x1002c07c
FindNextVolumeW 0x1002c06c
FindVolumeClose 0x1002c074
GetFileAttributesW 0x1002c058
GetFileSize 0x1002c090
GetTempFileNameW 0x1002c070
QueryDosDeviceW 0x1002c064
ReadFile 0x1002c084
SetFilePointer 0x1002c08c
SetFilePointerEx 0x1002c088
WriteFile 0x1002c054
api-ms-win-core-file-l1-2-0.dll 2
GetTempPathW 0x1002c098
GetVolumePathNamesForVolumeNameW 0x1002c09c
api-ms-win-core-file-l2-1-2.dll 1
CopyFileW 0x1002c0a4
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x1002c0ac
api-ms-win-core-heap-l1-1-0.dll 6
GetProcessHeap 0x1002c0c0
HeapAlloc 0x1002c0b8
HeapDestroy 0x1002c0b4
HeapFree 0x1002c0bc
HeapReAlloc 0x1002c0c8
HeapSize 0x1002c0c4
api-ms-win-core-libraryloader-l1-2-0.dll 10
FindResourceExW 0x1002c0e4
FreeLibrary 0x1002c0e0
GetModuleFileNameA 0x1002c0d0
GetModuleHandleExW 0x1002c0ec
GetModuleHandleW 0x1002c0f4
GetProcAddress 0x1002c0f0
LoadLibraryExW 0x1002c0d4
LoadResource 0x1002c0e8
LockResource 0x1002c0dc
SizeofResource 0x1002c0d8
api-ms-win-core-libraryloader-l1-2-1.dll 2
FindResourceW 0x1002c0fc
LoadLibraryW 0x1002c100
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x1002c108
api-ms-win-core-memory-l1-1-0.dll 3
CreateFileMappingW 0x1002c118
MapViewOfFileEx 0x1002c110
UnmapViewOfFile 0x1002c114
api-ms-win-core-processenvironment-l1-1-0.dll 1
GetEnvironmentVariableW 0x1002c120
api-ms-win-core-processthreads-l1-1-0.dll 7
CreateProcessW 0x1002c138
GetCurrentProcess 0x1002c134
GetCurrentProcessId 0x1002c13c
GetCurrentThread 0x1002c12c
GetCurrentThreadId 0x1002c128
GetExitCodeProcess 0x1002c140
TerminateProcess 0x1002c130
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1002c148
api-ms-win-core-registry-l1-1-0.dll 4
RegCloseKey 0x1002c15c
RegEnumKeyExW 0x1002c154
RegOpenKeyExW 0x1002c158
RegQueryValueExW 0x1002c150
api-ms-win-core-string-l1-1-0.dll 2
MultiByteToWideChar 0x1002c164
WideCharToMultiByte 0x1002c168
api-ms-win-core-synch-l1-1-0.dll 11
CreateMutexExW 0x1002c188
CreateSemaphoreExW 0x1002c184
DeleteCriticalSection 0x1002c180
EnterCriticalSection 0x1002c178
InitializeCriticalSection 0x1002c174
LeaveCriticalSection 0x1002c17c
OpenSemaphoreW 0x1002c18c
ReleaseMutex 0x1002c194
ReleaseSemaphore 0x1002c198
WaitForSingleObject 0x1002c170
WaitForSingleObjectEx 0x1002c190
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x1002c1a0
api-ms-win-core-sysinfo-l1-1-0.dll 6
GetSystemDirectoryW 0x1002c1b4
GetSystemTimeAsFileTime 0x1002c1bc
GetSystemWindowsDirectoryW 0x1002c1ac
GetTickCount 0x1002c1b8
GetVersionExW 0x1002c1a8
GetWindowsDirectoryW 0x1002c1b0
api-ms-win-core-timezone-l1-1-0.dll 1
SystemTimeToFileTime 0x1002c1c4
api-ms-win-core-version-l1-1-0.dll 3
GetFileVersionInfoExW 0x1002c1cc
GetFileVersionInfoSizeExW 0x1002c1d4
VerQueryValueW 0x1002c1d0
api-ms-win-core-wow64-l1-1-0.dll 3
IsWow64Process 0x1002c1e0
Wow64DisableWow64FsRedirection 0x1002c1dc
Wow64RevertWow64FsRedirection 0x1002c1e4
api-ms-win-eventing-classicprovider-l1-1-0.dll 3
RegisterTraceGuidsW 0x1002c1f0
TraceEvent 0x1002c1ec
UnregisterTraceGuids 0x1002c1f4
api-ms-win-eventing-consumer-l1-1-0.dll 3
CloseTrace 0x1002c204
OpenTraceW 0x1002c200
ProcessTrace 0x1002c1fc
api-ms-win-eventing-controller-l1-1-0.dll 2
ControlTraceW 0x1002c210
StartTraceW 0x1002c20c
api-ms-win-eventing-provider-l1-1-0.dll 1
EventWriteTransfer 0x1002c218
bcrypt.dll 7
BCryptCloseAlgorithmProvider 0x1002c22c
BCryptCreateHash 0x1002c228
BCryptDestroyHash 0x1002c230
BCryptFinishHash 0x1002c234
BCryptGetProperty 0x1002c238
BCryptHashData 0x1002c224
BCryptOpenAlgorithmProvider 0x1002c220
msvcrt.dll 55
__CxxFrameHandler3 0x1002c250
__dllonexit 0x1002c268
_amsg_exit 0x1002c25c
_callnewh 0x1002c264
_CxxThrowException 0x1002c254
_errno 0x1002c29c
_except_handler4_common 0x1002c310
_gmtime64 0x1002c2a0
_initterm 0x1002c274
_lock 0x1002c28c
_memicmp 0x1002c298
_onexit 0x1002c308
_purecall 0x1002c244
_stricmp 0x1002c2d4
_ultow_s 0x1002c2b8
_unlock 0x1002c284
_vscwprintf 0x1002c2c0
_vsnprintf_s 0x1002c304
_vsnwprintf 0x1002c2d8
_wcsicmp 0x1002c2cc
_wcslwr_s 0x1002c2dc
_wcsnicmp 0x1002c2e0
_XcptFilter 0x1002c240
??0exception@@QAE@ABQBD@Z 0x1002c2a8
??0exception@@QAE@ABV0@@Z 0x1002c280
??0exception@@QAE@XZ 0x1002c27c
??1exception@@UAE@XZ 0x1002c288
??1type_info@@UAE@XZ 0x1002c30c
?terminate@@YAXXZ 0x1002c314
?what@exception@@UBEPBDXZ 0x1002c270
calloc 0x1002c258
free 0x1002c26c
iswdigit 0x1002c2ec
ldiv 0x1002c2f4
malloc 0x1002c278
memchr 0x1002c294
memcpy 0x1002c290
memcpy_s 0x1002c2a4
memmove 0x1002c248
memmove_s 0x1002c2ac
memset 0x1002c318
realloc 0x1002c24c
strrchr 0x1002c2fc
towlower 0x1002c2f8
vswprintf_s 0x1002c2bc
wcschr 0x1002c2c8
wcscpy_s 0x1002c260
wcscspn 0x1002c2e8
wcsncmp 0x1002c2c4
wcsncpy_s 0x1002c2b4
wcsnlen 0x1002c2b0
wcsrchr 0x1002c2d0
wcsspn 0x1002c2e4
wcsstr 0x1002c300
wcstol 0x1002c2f0
ntdll.dll 5
RtlAcquireSRWLockExclusive 0x1002c328
RtlGetVersion 0x1002c320
RtlImageDirectoryEntryToData 0x1002c330
RtlImageRvaToVa 0x1002c32c
RtlReleaseSRWLockExclusive 0x1002c324
OLEAUT32.dll 2
SysAllocString 0x1002c004
SysFreeString 0x1002c000