WinREAgent.dll

v10.0.19041.6033 64-bit Windows NT Analyzed
Download
Description
Windows Recovery Environment Agent
Authors
© Microsoft Corporation. All rights reserved.
File size
529.9 KB
Uploaded
2025-12-01 07:44
Views
77
SHA-256
26156f3cf7131bb76207193f94253de8

Exported functions 8

BackupWinRE #1 · 0x11000
CreateWinREServicingManager #2 · 0x10570
GetWinREAgentVersion #3 · 0x10ac0
GetWinREPartitionFreeSpace #4 · 0x11020
GetWinREVersion #5 · 0x10af0
LoadWinREServicingManager #6 · 0x10930
RestoreWinRE #7 · 0x11010
SaveWinREServicingManager #8 · 0x10770

Imported DLLs & functions 237

ADVAPI32.dll 34
AddAccessAllowedAce 0x180050b40
AdjustTokenPrivileges 0x180050bb8
AllocateAndInitializeSid 0x180050bd8
ConvertSecurityDescriptorToStringSecurityDescriptorW 0x180050b08
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x180050bb0
CopySid 0x180050b50
EventRegister 0x180050bc8
EventSetInformation 0x180050b70
EventUnregister 0x180050bd0
EventWriteTransfer 0x180050bc0
GetAce 0x180050b38
GetFileSecurityW 0x180050b00
GetLengthSid 0x180050b58
GetTokenInformation 0x180050b60
InitializeAcl 0x180050b48
InitializeSecurityDescriptor 0x180050b30
OpenProcessToken 0x180050be0
OpenThreadToken 0x180050b68
RegCreateKeyExW 0x180050b80
RegDeleteKeyExW 0x180050b78
RegDeleteKeyW 0x180050ae8
RegDeleteTreeW 0x180050b98
RegDeleteValueW 0x180050ba8
RegEnumKeyExW 0x180050b88
RegGetKeySecurity 0x180050af0
RegGetValueW 0x180050ae0
RegLoadKeyW 0x180050ad8
RegSetKeySecurity 0x180050b90
RegSetValueExW 0x180050ba0
SetFileSecurityW 0x180050af8
SetSecurityDescriptorControl 0x180050b10
SetSecurityDescriptorDacl 0x180050b18
SetSecurityDescriptorGroup 0x180050b20
SetSecurityDescriptorOwner 0x180050b28
api-ms-win-core-file-l1-1-0.dll 6
CreateFileW 0x180051048
FindClose 0x180051060
FindFirstFileW 0x180051070
FindNextFileW 0x180051050
GetFileAttributesW 0x180051058
QueryDosDeviceW 0x180051068
api-ms-win-core-file-l2-1-0.dll 1
MoveFileExW 0x180051080
api-ms-win-core-libraryloader-l1-2-0.dll 1
LoadLibraryExW 0x180051090
api-ms-win-core-registry-l1-1-0.dll 4
RegCloseKey 0x1800510b0
RegEnumValueW 0x1800510b8
RegOpenKeyExW 0x1800510a0
RegUnLoadKeyW 0x1800510a8
api-ms-win-core-sysinfo-l1-1-0.dll 1
GetWindowsDirectoryW 0x1800510c8
api-ms-win-core-version-l1-1-0.dll 3
GetFileVersionInfoExW 0x1800510e8
GetFileVersionInfoSizeExW 0x1800510e0
VerQueryValueW 0x1800510d8
bcrypt.dll 1
BCryptCloseAlgorithmProvider 0x1800510f8
CRYPT32.dll 1
CertVerifyCertificateChainPolicy 0x180050bf0
DismApi.DLL 10
_DismCleanImage 0x180050c48
DismAddPackage 0x180050c38
DismCloseSession 0x180050c40
DismDelete 0x180050c30
DismGetImageInfo 0x180050c28
DismInitialize 0x180050c10
DismMountImage 0x180050c20
DismOpenSession 0x180050c00
DismShutdown 0x180050c08
DismUnmountImage 0x180050c18
KERNEL32.dll 91
AcquireSRWLockExclusive 0x180050f18
AcquireSRWLockShared 0x180050f08
CloseHandle 0x180050ef0
CloseThreadpoolTimer 0x180050ec8
CompareStringW 0x180050c80
CopyFile2 0x180050d30
CreateDirectoryW 0x180050e80
CreateEventW 0x180050d58
CreateMutexExW 0x180050d88
CreateSemaphoreExW 0x180050d40
CreateThreadpoolTimer 0x180050e88
DebugBreak 0x180050e28
DeleteCriticalSection 0x180050ea0
DeleteFileW 0x180050dd0
DeviceIoControl 0x180050de0
EnterCriticalSection 0x180050eb0
FindResourceExW 0x180050cf0
FlushFileBuffers 0x180050d98
FormatMessageW 0x180050e60
FreeLibrary 0x180050db8
GetCurrentDirectoryW 0x180050df0
GetCurrentProcess 0x180050cb8
GetCurrentProcessId 0x180050db0
GetCurrentThread 0x180050d38
GetCurrentThreadId 0x180050e58
GetDiskFreeSpaceExW 0x180050dc0
GetFileInformationByHandle 0x180050da8
GetFileInformationByHandleEx 0x180050dc8
GetFinalPathNameByHandleW 0x180050e08
GetFullPathNameW 0x180050e78
GetLastError 0x180050e10
GetLongPathNameW 0x180050e70
GetModuleFileNameA 0x180050e30
GetModuleHandleExW 0x180050e38
GetModuleHandleW 0x180050e20
GetPrivateProfileSectionNamesW 0x180050d28
GetPrivateProfileSectionW 0x180050d80
GetProcAddress 0x180050e18
GetProcessHeap 0x180050e48
GetSystemDirectoryW 0x180050de8
GetSystemTimeAsFileTime 0x180050cd0
GetSystemWindowsDirectoryW 0x180050ce8
GetTickCount 0x180050cd8
GetVersionExW 0x180050e68
GetVolumeNameForVolumeMountPointW 0x180050df8
GetVolumePathNamesForVolumeNameW 0x180050d48
GetVolumePathNameW 0x180050e00
HeapAlloc 0x180050e50
HeapDestroy 0x180050c68
HeapFree 0x180050e40
HeapReAlloc 0x180050c60
HeapSize 0x180050c58
InitializeCriticalSection 0x180050c70
InitializeCriticalSectionEx 0x180050ea8
IsDebuggerPresent 0x180050f28
LeaveCriticalSection 0x180050d60
LoadResource 0x180050cf8
LocalFree 0x180050d68
LockResource 0x180050d00
MoveFileTransactedW 0x180050d50
MultiByteToWideChar 0x180050eb8
OpenSemaphoreW 0x180050e90
OutputDebugStringW 0x180050f20
QueryPerformanceCounter 0x180050cc8
RaiseException 0x180050c78
ReleaseMutex 0x180050ee0
ReleaseSemaphore 0x180050ee8
ReleaseSRWLockExclusive 0x180050f10
ReleaseSRWLockShared 0x180050f00
RtlCaptureContext 0x180050c90
RtlLookupFunctionEntry 0x180050c98
RtlVirtualUnwind 0x180050ca0
SetEnvironmentVariableW 0x180050d78
SetEvent 0x180050d70
SetFileAttributesW 0x180050dd8
SetFileInformationByHandle 0x180050da0
SetLastError 0x180050ef8
SetThreadpoolTimer 0x180050ed8
SetUnhandledExceptionFilter 0x180050cb0
SizeofResource 0x180050d08
Sleep 0x180050c88
TerminateProcess 0x180050cc0
TlsAlloc 0x180050d20
TlsGetValue 0x180050d18
TlsSetValue 0x180050d10
UnhandledExceptionFilter 0x180050ca8
WaitForSingleObject 0x180050e98
WaitForSingleObjectEx 0x180050ec0
WaitForThreadpoolTimerCallbacks 0x180050ed0
WideCharToMultiByte 0x180050ce0
WritePrivateProfileStringW 0x180050d90
ktmw32.dll 2
CommitTransaction 0x180051110
CreateTransaction 0x180051108
msvcrt.dll 47
__C_specific_handler 0x180051188
__CxxFrameHandler3 0x1800511d0
__dllonexit 0x180051200
__RTDynamicCast 0x180051120
_amsg_exit 0x1800511c8
_callnewh 0x1800511b0
_CxxThrowException 0x1800511b8
_errno 0x180051210
_initterm 0x1800511d8
_lock 0x1800511f0
_onexit 0x180051208
_purecall 0x180051180
_set_errno 0x180051248
_unlock 0x1800511f8
_vscwprintf 0x180051170
_vsnprintf_s 0x180051148
_vsnwprintf 0x180051270
_wcsicmp 0x180051160
_wcsnicmp 0x180051278
_wtoi 0x180051230
_wtoi64 0x180051228
_wtol 0x180051220
_XcptFilter 0x1800511c0
??0exception@@QEAA@AEBQEBDH@Z 0x1800511a0
??0exception@@QEAA@AEBV0@@Z 0x180051138
??0exception@@QEAA@XZ 0x180051150
??1exception@@UEAA@XZ 0x180051268
??1type_info@@UEAA@XZ 0x1800511e8
?terminate@@YAXXZ 0x1800511e0
?what@exception@@UEBAPEBDXZ 0x1800511a8
calloc 0x180051178
free 0x180051168
malloc 0x180051198
memcmp 0x180051128
memcpy 0x180051130
memcpy_s 0x180051140
memmove_s 0x180051158
memset 0x180051218
sprintf_s 0x180051238
strchr 0x180051240
strncpy_s 0x180051258
strtol 0x180051250
vswprintf_s 0x180051288
wcschr 0x180051260
wcscmp 0x180051290
wcscpy_s 0x180051190
wcsrchr 0x180051280
ntdll.dll 5
NtSetInformationFile 0x1800512a8
RtlAllocateHeap 0x1800512b8
RtlFreeHeap 0x1800512b0
RtlNtStatusToDosError 0x1800512c0
RtlSetThreadErrorMode 0x1800512a0
ole32.dll 3
CoCreateInstance 0x1800512d0
CoTaskMemFree 0x1800512e0
StringFromGUID2 0x1800512d8
OLEAUT32.dll 2
SysAllocString 0x180050f38
SysFreeString 0x180050f40
ReAgent.dll 4
WinReGetConfig 0x180050f68
WinReHashWimFile 0x180050f70
WinReInstallOnTargetOS 0x180050f60
WinReSetupBackupWinRE 0x180050f78
RPCRT4.dll 1
UuidCreate 0x180050f50
USER32.dll 1
UnregisterClassA 0x180050f88
WDSCORE.dll 5
ConstructPartialMsgVW 0x180050fb0
CurrentIP 0x180050fb8
WdsInitialize 0x180050f98
WdsSetupLogMessageW 0x180050fa8
WdsTerminate 0x180050fa0
WIMGAPI.DLL 11
WIMCloseHandle 0x180050fd0
WIMCreateFile 0x180051008
WIMExportImage 0x180050fe8
WIMGetAttributes 0x180051000
WIMLoadImage 0x180050ff0
WIMRegisterLogFile 0x180050fe0
WIMRegisterMessageCallback 0x180050fc8
WIMSetTemporaryPath 0x180050ff8
WIMUnmountImage 0x180050fd8
WIMUnregisterLogFile 0x180051018
WIMUnregisterMessageCallback 0x180051010
WINTRUST.dll 3
WinVerifyTrust 0x180051038
WTHelperGetProvSignerFromChain 0x180051028
WTHelperProvDataFromStateData 0x180051030