dmenterprisediagnostics.dll

Description: ETW for MDM Enterprise Diagnostics

Version: 10.0.19041.5915

Architecture: 64-bit

Operating System: Windows NT

SHA256: d87a44fdc8b537eb297269ea0a076b94

File Size: 366.5 KB

Uploaded At: Dec. 1, 2025, 7:26 a.m.

Views: 11

Exported Functions

CollectDiagnosticsAutoLog (Ordinal: 1, Address: 0x4de0)
GatherAutoLogEventsFromMobile (Ordinal: 2, Address: 0x4d40)
RecordDiagnosticsError (Ordinal: 3, Address: 0x4db0)
SetupAutoLog (Ordinal: 4, Address: 0x4700)
SetupAutoLogWithTraceLevel (Ordinal: 5, Address: 0x4750)
StartAutoLog (Ordinal: 6, Address: 0x4960)
StopAutoLog (Ordinal: 7, Address: 0x4990)
TearDownAutoLog (Ordinal: 8, Address: 0x49a0)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateGuid (Address: 0x18002eec0)
CoCreateInstance (Address: 0x18002eec8)
CoInitializeEx (Address: 0x18002eeb0)
CoTaskMemAlloc (Address: 0x18002eeb8)
CoTaskMemFree (Address: 0x18002eea8)
CoUninitialize (Address: 0x18002eea0)
StringFromGUID2 (Address: 0x18002eed0)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18002eef0)
IsDebuggerPresent (Address: 0x18002eef8)
OutputDebugStringA (Address: 0x18002eee8)
OutputDebugStringW (Address: 0x18002eee0)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18002ef08)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18002ef18)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18002ef28)
RaiseException (Address: 0x18002ef48)
SetLastError (Address: 0x18002ef30)
SetUnhandledExceptionFilter (Address: 0x18002ef38)
UnhandledExceptionFilter (Address: 0x18002ef40)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x18002efa8)
CreateFileW (Address: 0x18002ef80)
DeleteFileW (Address: 0x18002ef78)
FindClose (Address: 0x18002ef60)
FindFirstFileW (Address: 0x18002efd0)
FindFirstVolumeW (Address: 0x18002efc8)
FindNextFileW (Address: 0x18002ef58)
FindNextVolumeW (Address: 0x18002efb0)
FindVolumeClose (Address: 0x18002efd8)
GetFileAttributesW (Address: 0x18002ef88)
GetFileSize (Address: 0x18002ef68)
GetTempFileNameW (Address: 0x18002ef70)
QueryDosDeviceW (Address: 0x18002efc0)
ReadFile (Address: 0x18002efb8)
SetFilePointer (Address: 0x18002ef98)
SetFilePointerEx (Address: 0x18002efa0)
WriteFile (Address: 0x18002ef90)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x18002efe8)
GetVolumePathNamesForVolumeNameW (Address: 0x18002eff0)

api-ms-win-core-file-l2-1-0.dll

MoveFileExW (Address: 0x18002f000)

api-ms-win-core-file-l2-1-2.dll

CopyFileW (Address: 0x18002f010)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18002f020)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18002f058)
HeapAlloc (Address: 0x18002f030)
HeapDestroy (Address: 0x18002f048)
HeapFree (Address: 0x18002f050)
HeapReAlloc (Address: 0x18002f038)
HeapSize (Address: 0x18002f040)

api-ms-win-core-libraryloader-l1-2-0.dll

FindResourceExW (Address: 0x18002f078)
FreeLibrary (Address: 0x18002f0a0)
GetModuleFileNameA (Address: 0x18002f0b0)
GetModuleHandleExW (Address: 0x18002f068)
GetModuleHandleW (Address: 0x18002f080)
GetProcAddress (Address: 0x18002f098)
LoadLibraryExW (Address: 0x18002f070)
LoadResource (Address: 0x18002f090)
LockResource (Address: 0x18002f088)
SizeofResource (Address: 0x18002f0a8)

api-ms-win-core-libraryloader-l1-2-1.dll

FindResourceW (Address: 0x18002f0c0)
LoadLibraryW (Address: 0x18002f0c8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18002f0d8)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x18002f0e8)
MapViewOfFileEx (Address: 0x18002f0f0)
UnmapViewOfFile (Address: 0x18002f0f8)

api-ms-win-core-processenvironment-l1-1-0.dll

GetEnvironmentVariableW (Address: 0x18002f108)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessW (Address: 0x18002f130)
GetCurrentProcess (Address: 0x18002f140)
GetCurrentProcessId (Address: 0x18002f138)
GetCurrentThread (Address: 0x18002f128)
GetCurrentThreadId (Address: 0x18002f120)
GetExitCodeProcess (Address: 0x18002f148)
TerminateProcess (Address: 0x18002f118)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18002f158)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18002f198)
RegCreateKeyExW (Address: 0x18002f190)
RegEnumKeyExW (Address: 0x18002f180)
RegEnumValueW (Address: 0x18002f170)
RegOpenKeyExW (Address: 0x18002f1a0)
RegQueryInfoKeyW (Address: 0x18002f168)
RegQueryValueExW (Address: 0x18002f188)
RegSetValueExW (Address: 0x18002f178)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18002f1c0)
RtlLookupFunctionEntry (Address: 0x18002f1b8)
RtlVirtualUnwind (Address: 0x18002f1b0)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x18002f1d8)
WideCharToMultiByte (Address: 0x18002f1d0)

api-ms-win-core-synch-l1-1-0.dll

CreateMutexExW (Address: 0x18002f228)
CreateSemaphoreExW (Address: 0x18002f208)
DeleteCriticalSection (Address: 0x18002f210)
EnterCriticalSection (Address: 0x18002f230)
InitializeCriticalSection (Address: 0x18002f218)
LeaveCriticalSection (Address: 0x18002f220)
OpenSemaphoreW (Address: 0x18002f238)
ReleaseMutex (Address: 0x18002f1f8)
ReleaseSemaphore (Address: 0x18002f200)
WaitForSingleObject (Address: 0x18002f1e8)
WaitForSingleObjectEx (Address: 0x18002f1f0)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x18002f248)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemDirectoryW (Address: 0x18002f278)
GetSystemTime (Address: 0x18002f258)
GetSystemTimeAsFileTime (Address: 0x18002f270)
GetSystemWindowsDirectoryW (Address: 0x18002f260)
GetTickCount (Address: 0x18002f268)
GetVersionExW (Address: 0x18002f280)
GetWindowsDirectoryW (Address: 0x18002f288)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x18002f298)

api-ms-win-core-version-l1-1-0.dll

GetFileVersionInfoExW (Address: 0x18002f2b0)
GetFileVersionInfoSizeExW (Address: 0x18002f2b8)
VerQueryValueW (Address: 0x18002f2a8)

api-ms-win-core-wow64-l1-1-0.dll

IsWow64Process (Address: 0x18002f2c8)
Wow64DisableWow64FsRedirection (Address: 0x18002f2d0)
Wow64RevertWow64FsRedirection (Address: 0x18002f2d8)

api-ms-win-eventing-classicprovider-l1-1-0.dll

RegisterTraceGuidsW (Address: 0x18002f2f0)
TraceEvent (Address: 0x18002f2f8)
UnregisterTraceGuids (Address: 0x18002f2e8)

api-ms-win-eventing-consumer-l1-1-0.dll

CloseTrace (Address: 0x18002f308)
OpenTraceW (Address: 0x18002f318)
ProcessTrace (Address: 0x18002f310)

api-ms-win-eventing-controller-l1-1-0.dll

ControlTraceW (Address: 0x18002f328)
StartTraceW (Address: 0x18002f330)

api-ms-win-eventing-provider-l1-1-0.dll

EventWriteTransfer (Address: 0x18002f340)

msvcrt.dll

__C_specific_handler (Address: 0x18002f468)
__CxxFrameHandler3 (Address: 0x18002f490)
__dllonexit (Address: 0x18002f370)
_amsg_exit (Address: 0x18002f478)
_callnewh (Address: 0x18002f4a0)
_CxxThrowException (Address: 0x18002f498)
_errno (Address: 0x18002f390)
_gmtime64 (Address: 0x18002f398)
_initterm (Address: 0x18002f470)
_lock (Address: 0x18002f458)
_memicmp (Address: 0x18002f450)
_onexit (Address: 0x18002f358)
_purecall (Address: 0x18002f388)
_stricmp (Address: 0x18002f3e8)
_ultow_s (Address: 0x18002f3b0)
_unlock (Address: 0x18002f378)
_vscwprintf (Address: 0x18002f3c0)
_vsnprintf_s (Address: 0x18002f4c8)
_vsnwprintf (Address: 0x18002f500)
_wcsicmp (Address: 0x18002f3d8)
_wcslwr_s (Address: 0x18002f3f0)
_wcsnicmp (Address: 0x18002f3f8)
_XcptFilter (Address: 0x18002f480)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x18002f4d8)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x18002f4a8)
??0exception@@QEAA@AEBV0@@Z (Address: 0x18002f4d0)
??0exception@@QEAA@XZ (Address: 0x18002f4e0)
??1exception@@UEAA@XZ (Address: 0x18002f4e8)
??1type_info@@UEAA@XZ (Address: 0x18002f368)
?terminate@@YAXXZ (Address: 0x18002f460)
?what@exception@@UEBAPEBDXZ (Address: 0x18002f4f0)
calloc (Address: 0x18002f420)
free (Address: 0x18002f4b8)
iswdigit (Address: 0x18002f410)
ldiv (Address: 0x18002f428)
malloc (Address: 0x18002f4b0)
memchr (Address: 0x18002f488)
memcpy (Address: 0x18002f380)
memcpy_s (Address: 0x18002f4f8)
memmove (Address: 0x18002f360)
memmove_s (Address: 0x18002f4c0)
memset (Address: 0x18002f350)
realloc (Address: 0x18002f448)
strrchr (Address: 0x18002f438)
towlower (Address: 0x18002f430)
vswprintf_s (Address: 0x18002f3b8)
wcschr (Address: 0x18002f3d0)
wcscmp (Address: 0x18002f510)
wcscpy_s (Address: 0x18002f508)
wcscspn (Address: 0x18002f408)
wcsncmp (Address: 0x18002f3c8)
wcsncpy_s (Address: 0x18002f3a8)
wcsnlen (Address: 0x18002f3a0)
wcsrchr (Address: 0x18002f3e0)
wcsspn (Address: 0x18002f400)
wcsstr (Address: 0x18002f440)
wcstol (Address: 0x18002f418)

ntdll.dll

RtlAcquireSRWLockExclusive (Address: 0x18002f530)
RtlGetVersion (Address: 0x18002f520)
RtlImageDirectoryEntryToData (Address: 0x18002f540)
RtlImageRvaToVa (Address: 0x18002f548)
RtlIsStateSeparationEnabled (Address: 0x18002f538)
RtlReleaseSRWLockExclusive (Address: 0x18002f528)

OLEAUT32.dll

SysAllocString (Address: 0x18002ee78)
SysFreeString (Address: 0x18002ee88)
VariantClear (Address: 0x18002ee90)
VariantInit (Address: 0x18002ee80)