wersvc.dll

v10.0.19041.5794 64-bit Windows NT Analyzed
Description
Windows Error Reporting Service
Authors
© Microsoft Corporation. All rights reserved.
File size
248.5 KB
Uploaded
2025-12-01 07:42
Views
81
SHA-256
a74e4215f534d6d07838862cdbc46ade

Exported functions 2

ServiceMain #1 · 0x17e70
SvchostPushServiceGlobals #2 · 0x17fb0

Imported DLLs & functions 260

api-ms-win-core-apiquery-l1-1-0.dll 1
ApiSetQueryApiSetPresence 0x18002fc80
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x18002fc90
IsDebuggerPresent 0x18002fca0
OutputDebugStringW 0x18002fc98
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x18002fcb0
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x18002fcc0
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x18002fcd8
SetLastError 0x18002fce8
SetUnhandledExceptionFilter 0x18002fcd0
UnhandledExceptionFilter 0x18002fce0
api-ms-win-core-file-l1-1-0.dll 14
CreateDirectoryW 0x18002fd48
CreateFileW 0x18002fd00
FindClose 0x18002fd60
FindFirstFileW 0x18002fd40
FindNextFileW 0x18002fd18
GetFileAttributesW 0x18002fcf8
GetFileSizeEx 0x18002fd10
GetFinalPathNameByHandleW 0x18002fd58
GetLongPathNameW 0x18002fd38
GetTempFileNameW 0x18002fd30
ReadFile 0x18002fd20
SetFileInformationByHandle 0x18002fd50
SetFilePointerEx 0x18002fd08
WriteFile 0x18002fd28
api-ms-win-core-file-l1-2-0.dll 1
GetTempPathW 0x18002fd70
api-ms-win-core-file-l2-1-0.dll 1
CopyFileExW 0x18002fd80
api-ms-win-core-handle-l1-1-0.dll 2
CloseHandle 0x18002fd98
DuplicateHandle 0x18002fd90
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x18002fdb0
HeapAlloc 0x18002fdb8
HeapFree 0x18002fda8
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x18002fdd0
LocalFree 0x18002fdc8
api-ms-win-core-kernel32-legacy-l1-1-0.dll 1
MoveFileW 0x18002fde0
api-ms-win-core-libraryloader-l1-2-0.dll 8
DisableThreadLibraryCalls 0x18002fdf8
FreeLibrary 0x18002fdf0
GetModuleFileNameA 0x18002fe10
GetModuleFileNameW 0x18002fe08
GetModuleHandleExW 0x18002fe18
GetModuleHandleW 0x18002fe00
GetProcAddress 0x18002fe20
LoadLibraryExW 0x18002fe28
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x18002fe38
api-ms-win-core-localization-obsolete-l1-2-0.dll 1
GetUserDefaultUILanguage 0x18002fe48
api-ms-win-core-memory-l1-1-0.dll 4
CreateFileMappingW 0x18002fe68
MapViewOfFile 0x18002fe58
ReadProcessMemory 0x18002fe70
UnmapViewOfFile 0x18002fe60
api-ms-win-core-namespace-l1-1-0.dll 3
ClosePrivateNamespace 0x18002fe88
CreatePrivateNamespaceW 0x18002fe80
OpenPrivateNamespaceW 0x18002fe90
api-ms-win-core-path-l1-1-0.dll 2
PathCchRemoveBackslash 0x18002fea0
PathCchRemoveFileSpec 0x18002fea8
api-ms-win-core-processsnapshot-l1-1-0.dll 2
PssCaptureSnapshot 0x18002fec0
PssDuplicateSnapshot 0x18002feb8
api-ms-win-core-processthreads-l1-1-0.dll 19
CreateProcessAsUserW 0x18002ff38
CreateProcessW 0x18002ff60
CreateThread 0x18002ff20
DeleteProcThreadAttributeList 0x18002ff28
GetCurrentProcess 0x18002ff10
GetCurrentProcessId 0x18002ff40
GetCurrentThreadId 0x18002fee0
GetExitCodeProcess 0x18002ff00
GetProcessId 0x18002fed0
GetProcessTimes 0x18002fed8
GetThreadId 0x18002ff30
InitializeProcThreadAttributeList 0x18002ff18
OpenProcessToken 0x18002ff48
OpenThread 0x18002fef0
OpenThreadToken 0x18002fef8
ProcessIdToSessionId 0x18002fee8
ResumeThread 0x18002ff58
TerminateProcess 0x18002ff08
UpdateProcThreadAttribute 0x18002ff50
api-ms-win-core-processthreads-l1-1-1.dll 2
OpenProcess 0x18002ff70
SetProcessMitigationPolicy 0x18002ff78
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18002ff88
api-ms-win-core-psapi-l1-1-0.dll 2
K32GetModuleFileNameExW 0x18002ff98
QueryFullProcessImageNameW 0x18002ffa0
api-ms-win-core-registry-l1-1-0.dll 7
RegCloseKey 0x18002ffd8
RegCreateKeyExW 0x18002ffb8
RegEnumKeyExW 0x18002ffd0
RegGetValueW 0x18002ffc8
RegOpenKeyExW 0x18002ffc0
RegQueryInfoKeyW 0x18002ffe0
RegSetValueExW 0x18002ffb0
api-ms-win-core-rtlsupport-l1-1-0.dll 3
RtlCaptureContext 0x180030000
RtlLookupFunctionEntry 0x18002fff8
RtlVirtualUnwind 0x18002fff0
api-ms-win-core-synch-l1-1-0.dll 22
AcquireSRWLockExclusive 0x1800300b8
AcquireSRWLockShared 0x180030060
CreateEventW 0x180030038
CreateMutexExW 0x1800300a0
CreateMutexW 0x180030088
CreateSemaphoreExW 0x1800300a8
DeleteCriticalSection 0x180030010
EnterCriticalSection 0x180030070
InitializeCriticalSection 0x180030018
InitializeCriticalSectionEx 0x180030020
LeaveCriticalSection 0x180030028
OpenEventW 0x180030048
OpenSemaphoreW 0x180030098
ReleaseMutex 0x180030068
ReleaseSemaphore 0x180030040
ReleaseSRWLockExclusive 0x180030078
ReleaseSRWLockShared 0x180030050
ResetEvent 0x1800300b0
SetEvent 0x180030030
WaitForMultipleObjectsEx 0x180030058
WaitForSingleObject 0x180030080
WaitForSingleObjectEx 0x180030090
api-ms-win-core-synch-l1-2-0.dll 3
InitOnceBeginInitialize 0x1800300d8
InitOnceComplete 0x1800300c8
Sleep 0x1800300d0
api-ms-win-core-synch-l1-2-1.dll 1
WaitForMultipleObjects 0x1800300e8
api-ms-win-core-sysinfo-l1-1-0.dll 5
GetLocalTime 0x180030100
GetSystemDirectoryW 0x180030118
GetSystemInfo 0x1800300f8
GetSystemTimeAsFileTime 0x180030110
GetTickCount 0x180030108
api-ms-win-core-sysinfo-l1-2-0.dll 1
GetNativeSystemInfo 0x180030128
api-ms-win-core-threadpool-l1-2-0.dll 13
CloseThreadpoolCleanupGroup 0x180030178
CloseThreadpoolCleanupGroupMembers 0x180030180
CloseThreadpoolTimer 0x180030138
CloseThreadpoolWait 0x180030188
CreateThreadpoolCleanupGroup 0x180030168
CreateThreadpoolTimer 0x180030150
CreateThreadpoolWait 0x180030148
LeaveCriticalSectionWhenCallbackReturns 0x180030190
SetThreadpoolTimer 0x180030170
SetThreadpoolWait 0x180030140
TrySubmitThreadpoolCallback 0x180030158
WaitForThreadpoolTimerCallbacks 0x180030198
WaitForThreadpoolWaitCallbacks 0x180030160
api-ms-win-core-threadpool-legacy-l1-1-0.dll 1
UnregisterWaitEx 0x1800301a8
api-ms-win-core-timezone-l1-1-0.dll 1
FileTimeToSystemTime 0x1800301b8
api-ms-win-core-util-l1-1-0.dll 2
DecodePointer 0x1800301d0
EncodePointer 0x1800301c8
api-ms-win-core-version-l1-1-0.dll 3
GetFileVersionInfoExW 0x1800301e8
GetFileVersionInfoSizeExW 0x1800301f0
VerQueryValueW 0x1800301e0
api-ms-win-core-wow64-l1-1-0.dll 1
IsWow64Process 0x180030200
api-ms-win-core-wow64-l1-1-1.dll 3
GetSystemWow64Directory2W 0x180030220
GetSystemWow64DirectoryW 0x180030210
IsWow64Process2 0x180030218
api-ms-win-eventing-provider-l1-1-0.dll 5
EventProviderEnabled 0x180030230
EventRegister 0x180030240
EventSetInformation 0x180030248
EventUnregister 0x180030238
EventWriteTransfer 0x180030250
api-ms-win-security-base-l1-1-0.dll 15
AllocateAndInitializeSid 0x1800302d0
CheckTokenMembership 0x180030270
CreateRestrictedToken 0x1800302a0
CreateWellKnownSid 0x180030278
DuplicateToken 0x180030260
DuplicateTokenEx 0x1800302b8
FreeSid 0x180030268
GetSidSubAuthority 0x180030288
GetSidSubAuthorityCount 0x180030280
GetTokenInformation 0x1800302a8
ImpersonateLoggedOnUser 0x180030298
InitializeSecurityDescriptor 0x1800302b0
RevertToSelf 0x180030290
SetSecurityDescriptorDacl 0x1800302c8
SetTokenInformation 0x1800302c0
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertSidToStringSidW 0x1800302e8
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x1800302e0
msvcrt.dll 29
__C_specific_handler 0x180030328
__CxxFrameHandler3 0x180030378
__dllonexit 0x180030308
_amsg_exit 0x180030350
_callnewh 0x1800303d0
_CxxThrowException 0x180030390
_initterm 0x180030340
_lock 0x180030320
_onexit 0x180030300
_purecall 0x180030368
_scwprintf 0x180030310
_unlock 0x180030318
_vsnprintf 0x180030338
_vsnprintf_s 0x180030398
_vsnwprintf 0x1800303c0
_XcptFilter 0x180030358
??0exception@@QEAA@AEBV0@@Z 0x1800303a0
??0exception@@QEAA@XZ 0x1800303a8
??1exception@@UEAA@XZ 0x1800303b0
??1type_info@@UEAA@XZ 0x180030330
?terminate@@YAXXZ 0x1800302f8
free 0x180030360
malloc 0x180030348
memcmp 0x180030370
memcpy 0x1800303c8
memcpy_s 0x1800303b8
memmove 0x180030388
memmove_s 0x180030380
memset 0x1800303d8
ntdll.dll 58
_vscwprintf 0x1800304d8
_wcsicmp 0x1800304c8
_wcsnicmp 0x1800304d0
AlpcGetMessageAttribute 0x180030418
AlpcInitializeMessageAttribute 0x180030420
EtwCheckCoverage 0x1800303f0
EtwGetTraceEnableFlags 0x180030590
EtwGetTraceEnableLevel 0x180030598
EtwGetTraceLoggerHandle 0x1800305a0
EtwRegisterTraceGuidsW 0x180030560
EtwTraceMessage 0x1800305a8
EtwUnregisterTraceGuids 0x180030558
iswspace 0x1800304c0
NtAlpcAcceptConnectPort 0x180030430
NtAlpcCancelMessage 0x1800304e0
NtAlpcConnectPort 0x180030440
NtAlpcCreatePort 0x180030448
NtAlpcOpenSenderProcess 0x180030478
NtAlpcOpenSenderThread 0x180030470
NtAlpcSendWaitReceivePort 0x180030438
NtClose 0x1800304f8
NtCreateFile 0x1800304e8
NtDuplicateToken 0x180030548
NtOpenEvent 0x180030500
NtQueryInformationProcess 0x180030520
NtQueryInformationToken 0x180030550
NtQuerySystemInformation 0x1800304f0
NtSetInformationProcess 0x180030408
NtSetSystemInformation 0x180030410
NtTerminateProcess 0x180030428
RtlAddSIDToBoundaryDescriptor 0x180030458
RtlAllocateHeap 0x180030538
RtlCompareUnicodeString 0x180030528
RtlCreateBoundaryDescriptor 0x180030468
RtlCreateServiceSid 0x180030460
RtlDeleteBoundaryDescriptor 0x180030450
RtlFreeHeap 0x180030540
RtlGUIDFromString 0x180030510
RtlIdentifierAuthoritySid 0x1800303e8
RtlInitUnicodeString 0x180030518
RtlNtStatusToDosError 0x180030508
RtlNtStatusToDosErrorNoTeb 0x180030530
RtlQueryResourcePolicy 0x1800305b0
RtlSecondsSince1970ToTime 0x180030568
RtlSetThreadErrorMode 0x1800303f8
RtlSubAuthorityCountSid 0x180030490
swprintf_s 0x180030570
toupper 0x180030480
towlower 0x180030498
vDbgPrintExWithPrefix 0x180030488
wcscat_s 0x180030580
wcschr 0x1800304b8
wcscpy_s 0x180030578
wcsncpy_s 0x180030588
wcsrchr 0x1800304b0
wcsspn 0x1800304a0
wcstol 0x180030400
wcstoul 0x1800304a8
RPCRT4.dll 2
UuidCreate 0x18002fc38
UuidFromStringW 0x18002fc40
WerEtw.dll 1
WerMergeEtlEx 0x18002fc50
WindowsPerformanceRecorderControl.dll 3
WPRCCreateInstanceUnderInstanceName 0x18002fc60
WPRCDisableBuiltinProfiles 0x18002fc70
WPRCReleaseInstanceByName 0x18002fc68