weretw.dll

Description: WERETW.DLL

Version: 10.0.19041.4355

Architecture: 32-bit

Operating System: Windows NT

SHA256: 0e898bfa65bc2b2c5c3a61678b9e31f9

File Size: 192.1 KB

Uploaded At: Dec. 1, 2025, 8:06 a.m.

Views: 7

Exported Functions

WerMergeEtl (Ordinal: 1, Address: 0x4710)
WerMergeEtlEx (Ordinal: 2, Address: 0x4760)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateGuid (Address: 0x1002c00c)
CoCreateInstance (Address: 0x1002c018)
CoInitializeEx (Address: 0x1002c010)
CoUninitialize (Address: 0x1002c014)
StringFromGUID2 (Address: 0x1002c01c)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1002c028)
IsDebuggerPresent (Address: 0x1002c02c)
OutputDebugStringA (Address: 0x1002c024)
OutputDebugStringW (Address: 0x1002c030)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1002c040)
RaiseException (Address: 0x1002c03c)
SetLastError (Address: 0x1002c044)
SetUnhandledExceptionFilter (Address: 0x1002c038)
UnhandledExceptionFilter (Address: 0x1002c048)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x1002c050)
CreateFileW (Address: 0x1002c05c)
DeleteFileW (Address: 0x1002c068)
FindClose (Address: 0x1002c080)
FindFirstFileW (Address: 0x1002c078)
FindFirstVolumeW (Address: 0x1002c060)
FindNextFileW (Address: 0x1002c07c)
FindNextVolumeW (Address: 0x1002c06c)
FindVolumeClose (Address: 0x1002c074)
GetFileAttributesW (Address: 0x1002c058)
GetFileSize (Address: 0x1002c090)
GetTempFileNameW (Address: 0x1002c070)
QueryDosDeviceW (Address: 0x1002c064)
ReadFile (Address: 0x1002c084)
SetFilePointer (Address: 0x1002c08c)
SetFilePointerEx (Address: 0x1002c088)
WriteFile (Address: 0x1002c054)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x1002c098)
GetVolumePathNamesForVolumeNameW (Address: 0x1002c09c)

api-ms-win-core-file-l2-1-2.dll

CopyFileW (Address: 0x1002c0a4)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1002c0ac)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1002c0c0)
HeapAlloc (Address: 0x1002c0b8)
HeapDestroy (Address: 0x1002c0b4)
HeapFree (Address: 0x1002c0bc)
HeapReAlloc (Address: 0x1002c0c8)
HeapSize (Address: 0x1002c0c4)

api-ms-win-core-libraryloader-l1-2-0.dll

FindResourceExW (Address: 0x1002c0e4)
FreeLibrary (Address: 0x1002c0e0)
GetModuleFileNameA (Address: 0x1002c0d0)
GetModuleHandleExW (Address: 0x1002c0ec)
GetModuleHandleW (Address: 0x1002c0f4)
GetProcAddress (Address: 0x1002c0f0)
LoadLibraryExW (Address: 0x1002c0d4)
LoadResource (Address: 0x1002c0e8)
LockResource (Address: 0x1002c0dc)
SizeofResource (Address: 0x1002c0d8)

api-ms-win-core-libraryloader-l1-2-1.dll

FindResourceW (Address: 0x1002c0fc)
LoadLibraryW (Address: 0x1002c100)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1002c108)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x1002c118)
MapViewOfFileEx (Address: 0x1002c110)
UnmapViewOfFile (Address: 0x1002c114)

api-ms-win-core-processenvironment-l1-1-0.dll

GetEnvironmentVariableW (Address: 0x1002c120)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessW (Address: 0x1002c138)
GetCurrentProcess (Address: 0x1002c134)
GetCurrentProcessId (Address: 0x1002c13c)
GetCurrentThread (Address: 0x1002c12c)
GetCurrentThreadId (Address: 0x1002c128)
GetExitCodeProcess (Address: 0x1002c140)
TerminateProcess (Address: 0x1002c130)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1002c148)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1002c15c)
RegEnumKeyExW (Address: 0x1002c154)
RegOpenKeyExW (Address: 0x1002c158)
RegQueryValueExW (Address: 0x1002c150)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x1002c164)
WideCharToMultiByte (Address: 0x1002c168)

api-ms-win-core-synch-l1-1-0.dll

CreateMutexExW (Address: 0x1002c188)
CreateSemaphoreExW (Address: 0x1002c184)
DeleteCriticalSection (Address: 0x1002c180)
EnterCriticalSection (Address: 0x1002c178)
InitializeCriticalSection (Address: 0x1002c174)
LeaveCriticalSection (Address: 0x1002c17c)
OpenSemaphoreW (Address: 0x1002c18c)
ReleaseMutex (Address: 0x1002c194)
ReleaseSemaphore (Address: 0x1002c198)
WaitForSingleObject (Address: 0x1002c170)
WaitForSingleObjectEx (Address: 0x1002c190)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x1002c1a0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemDirectoryW (Address: 0x1002c1b4)
GetSystemTimeAsFileTime (Address: 0x1002c1bc)
GetSystemWindowsDirectoryW (Address: 0x1002c1ac)
GetTickCount (Address: 0x1002c1b8)
GetVersionExW (Address: 0x1002c1a8)
GetWindowsDirectoryW (Address: 0x1002c1b0)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x1002c1c4)

api-ms-win-core-version-l1-1-0.dll

GetFileVersionInfoExW (Address: 0x1002c1cc)
GetFileVersionInfoSizeExW (Address: 0x1002c1d4)
VerQueryValueW (Address: 0x1002c1d0)

api-ms-win-core-wow64-l1-1-0.dll

IsWow64Process (Address: 0x1002c1e0)
Wow64DisableWow64FsRedirection (Address: 0x1002c1dc)
Wow64RevertWow64FsRedirection (Address: 0x1002c1e4)

api-ms-win-eventing-classicprovider-l1-1-0.dll

RegisterTraceGuidsW (Address: 0x1002c1f0)
TraceEvent (Address: 0x1002c1ec)
UnregisterTraceGuids (Address: 0x1002c1f4)

api-ms-win-eventing-consumer-l1-1-0.dll

CloseTrace (Address: 0x1002c204)
OpenTraceW (Address: 0x1002c200)
ProcessTrace (Address: 0x1002c1fc)

api-ms-win-eventing-controller-l1-1-0.dll

ControlTraceW (Address: 0x1002c210)
StartTraceW (Address: 0x1002c20c)

api-ms-win-eventing-provider-l1-1-0.dll

EventWriteTransfer (Address: 0x1002c218)

bcrypt.dll

BCryptCloseAlgorithmProvider (Address: 0x1002c22c)
BCryptCreateHash (Address: 0x1002c228)
BCryptDestroyHash (Address: 0x1002c230)
BCryptFinishHash (Address: 0x1002c234)
BCryptGetProperty (Address: 0x1002c238)
BCryptHashData (Address: 0x1002c224)
BCryptOpenAlgorithmProvider (Address: 0x1002c220)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x1002c250)
__dllonexit (Address: 0x1002c268)
_amsg_exit (Address: 0x1002c25c)
_callnewh (Address: 0x1002c264)
_CxxThrowException (Address: 0x1002c254)
_errno (Address: 0x1002c29c)
_except_handler4_common (Address: 0x1002c310)
_gmtime64 (Address: 0x1002c2a0)
_initterm (Address: 0x1002c274)
_lock (Address: 0x1002c28c)
_memicmp (Address: 0x1002c298)
_onexit (Address: 0x1002c308)
_purecall (Address: 0x1002c244)
_stricmp (Address: 0x1002c2d4)
_ultow_s (Address: 0x1002c2b8)
_unlock (Address: 0x1002c284)
_vscwprintf (Address: 0x1002c2c0)
_vsnprintf_s (Address: 0x1002c304)
_vsnwprintf (Address: 0x1002c2d8)
_wcsicmp (Address: 0x1002c2cc)
_wcslwr_s (Address: 0x1002c2dc)
_wcsnicmp (Address: 0x1002c2e0)
_XcptFilter (Address: 0x1002c240)
??0exception@@QAE@ABQBD@Z (Address: 0x1002c2a8)
??0exception@@QAE@ABV0@@Z (Address: 0x1002c280)
??0exception@@QAE@XZ (Address: 0x1002c27c)
??1exception@@UAE@XZ (Address: 0x1002c288)
??1type_info@@UAE@XZ (Address: 0x1002c30c)
?terminate@@YAXXZ (Address: 0x1002c314)
?what@exception@@UBEPBDXZ (Address: 0x1002c270)
calloc (Address: 0x1002c258)
free (Address: 0x1002c26c)
iswdigit (Address: 0x1002c2ec)
ldiv (Address: 0x1002c2f4)
malloc (Address: 0x1002c278)
memchr (Address: 0x1002c294)
memcpy (Address: 0x1002c290)
memcpy_s (Address: 0x1002c2a4)
memmove (Address: 0x1002c248)
memmove_s (Address: 0x1002c2ac)
memset (Address: 0x1002c318)
realloc (Address: 0x1002c24c)
strrchr (Address: 0x1002c2fc)
towlower (Address: 0x1002c2f8)
vswprintf_s (Address: 0x1002c2bc)
wcschr (Address: 0x1002c2c8)
wcscpy_s (Address: 0x1002c260)
wcscspn (Address: 0x1002c2e8)
wcsncmp (Address: 0x1002c2c4)
wcsncpy_s (Address: 0x1002c2b4)
wcsnlen (Address: 0x1002c2b0)
wcsrchr (Address: 0x1002c2d0)
wcsspn (Address: 0x1002c2e4)
wcsstr (Address: 0x1002c300)
wcstol (Address: 0x1002c2f0)

ntdll.dll

RtlAcquireSRWLockExclusive (Address: 0x1002c328)
RtlGetVersion (Address: 0x1002c320)
RtlImageDirectoryEntryToData (Address: 0x1002c330)
RtlImageRvaToVa (Address: 0x1002c32c)
RtlReleaseSRWLockExclusive (Address: 0x1002c324)

OLEAUT32.dll

SysAllocString (Address: 0x1002c004)
SysFreeString (Address: 0x1002c000)