Faultrep.dll - Online Dependency Analysis & Download

Description

Windows User Mode Crash Reporting DLL

Authors

File size

408.1 KB

Uploaded

2025-12-01 07:56

Views

111

SHA-256

b64dc51ae7deae051a122a1fa00729ea

Security warning

This file has been flagged as potentially dangerous, and downloads are disabled.

Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess, CreateRemoteThread, VirtualAllocEx

Exported functions 18

#1 · 0x12fa0

#2 · 0x12fd0

BasepReportFault #3 · 0x13550

CheckForReadOnlyResourceFilter #4 · 0x13580

CheckPerUserCrossProcessThrottle #5 · 0x12ba0

UpdatePerUserLastCrossProcessCollectionTime #6 · 0x12c00

AddERExcludedApplicationA #7 · 0x14220

AddERExcludedApplicationW #8 · 0x141f0

CancelHangReporting #9 · 0x13080

DllCanUnloadNow #10 · 0xe080

DllGetClassObject #11 · 0xe0b0

ReportCoreHang #12 · 0x13000

ReportFault #13 · 0x141b0

ReportHang #14 · 0x12f80

WerReportHang #15 · 0x13030

WerpGetDebugger #16 · 0x1d7b0

WerpInitiateCrashReporting #17 · 0x13d80

WerpLaunchAeDebug #18 · 0x1daf0

Imported DLLs & functions 395

api-ms-win-core-apiquery-l1-1-0.dll 1

ApiSetQueryApiSetPresence 0x10049060

api-ms-win-core-com-l1-1-0.dll 10

CoCreateInstance 0x10049084

CoGetMalloc 0x10049080

CoImpersonateClient 0x1004908c

CoInitializeEx 0x1004907c

CoRevertToSelf 0x1004906c

CoSetProxyBlanket 0x10049078

CoTaskMemAlloc 0x10049070

CoTaskMemFree 0x10049068

CoUninitialize 0x10049088

CoUnmarshalInterface 0x10049074

api-ms-win-core-com-midlproxystub-l1-1-0.dll 4

ObjectStublessClient3 0x10049098

ObjectStublessClient4 0x1004909c

ObjectStublessClient5 0x100490a0

ObjectStublessClient6 0x10049094

api-ms-win-core-debug-l1-1-0.dll 3

DebugBreak 0x100490ac

IsDebuggerPresent 0x100490b0

OutputDebugStringW 0x100490a8

api-ms-win-core-debug-l1-1-1.dll 1

CheckRemoteDebuggerPresent 0x100490b8

api-ms-win-core-delayload-l1-1-0.dll 1

DelayLoadFailureHook 0x100490c0

api-ms-win-core-delayload-l1-1-1.dll 1

ResolveDelayLoadedAPI 0x100490c8

api-ms-win-core-errorhandling-l1-1-0.dll 6

GetLastError 0x100490d4

RaiseException 0x100490e0

SetErrorMode 0x100490dc

SetLastError 0x100490d0

SetUnhandledExceptionFilter 0x100490e4

UnhandledExceptionFilter 0x100490d8

api-ms-win-core-errorhandling-l1-1-3.dll 1

SetThreadErrorMode 0x100490ec

api-ms-win-core-file-l1-1-0.dll 21

CompareFileTime 0x10049108

CreateDirectoryW 0x1004913c

CreateFileW 0x1004912c

DeleteFileW 0x10049144

FindClose 0x1004911c

FindFirstFileW 0x10049118

FindNextFileW 0x10049104

FlushFileBuffers 0x10049130

GetDriveTypeW 0x10049110

GetFileAttributesW 0x10049140

GetFinalPathNameByHandleW 0x100490f4

GetLogicalDriveStringsW 0x100490f8

GetLongPathNameW 0x10049138

GetTempFileNameW 0x10049128

QueryDosDeviceW 0x1004910c

ReadFile 0x10049100

SetEndOfFile 0x100490fc

SetFileAttributesW 0x10049120

SetFileInformationByHandle 0x10049124

SetFilePointerEx 0x10049134

WriteFile 0x10049114

api-ms-win-core-file-l1-2-0.dll 1

GetTempPathW 0x1004914c

api-ms-win-core-file-l2-1-0.dll 1

MoveFileExW 0x10049154

api-ms-win-core-handle-l1-1-0.dll 2

CloseHandle 0x10049160

DuplicateHandle 0x1004915c

api-ms-win-core-heap-l1-1-0.dll 3

GetProcessHeap 0x1004916c

HeapAlloc 0x10049170

HeapFree 0x10049168

api-ms-win-core-heap-l2-1-0.dll 1

LocalFree 0x10049178

api-ms-win-core-libraryloader-l1-2-0.dll 10

DisableThreadLibraryCalls 0x10049184

FreeLibrary 0x100491a0

FreeLibraryAndExitThread 0x100491a4

GetModuleFileNameA 0x10049198

GetModuleFileNameW 0x1004919c

GetModuleHandleExW 0x1004918c

GetModuleHandleW 0x10049180

GetProcAddress 0x10049188

LoadLibraryExW 0x10049190

LoadStringW 0x10049194

api-ms-win-core-libraryloader-l1-2-1.dll 1

LoadLibraryW 0x100491ac

api-ms-win-core-localization-l1-2-0.dll 2

FormatMessageW 0x100491b4

LCMapStringW 0x100491b8

api-ms-win-core-localization-obsolete-l1-2-0.dll 1

GetUserDefaultUILanguage 0x100491c0

api-ms-win-core-memory-l1-1-0.dll 11

CreateFileMappingW 0x100491ec

MapViewOfFile 0x100491dc

ReadProcessMemory 0x100491e4

UnmapViewOfFile 0x100491e0

VirtualAlloc 0x100491e8

VirtualAllocEx 0x100491d8

VirtualFree 0x100491c8

VirtualFreeEx 0x100491f0

VirtualQuery 0x100491d0

VirtualQueryEx 0x100491d4

WriteProcessMemory 0x100491cc

api-ms-win-core-processenvironment-l1-1-0.dll 3

ExpandEnvironmentStringsW 0x100491f8

SearchPathW 0x10049200

SetEnvironmentVariableW 0x100491fc

api-ms-win-core-processsnapshot-l1-1-0.dll 5

PssDuplicateSnapshot 0x1004920c

PssFreeSnapshot 0x10049218

PssQuerySnapshot 0x10049214

PssWalkMarkerCreate 0x10049210

PssWalkMarkerFree 0x10049208

api-ms-win-core-processthreads-l1-1-0.dll 20

CreateProcessW 0x10049248

CreateRemoteThread 0x10049268

CreateThread 0x10049240

DeleteProcThreadAttributeList 0x10049228

GetCurrentProcess 0x1004924c

GetCurrentProcessId 0x1004922c

GetCurrentThread 0x10049258

GetCurrentThreadId 0x10049224

GetExitCodeProcess 0x10049260

GetExitCodeThread 0x10049238

GetProcessId 0x10049234

GetProcessTimes 0x10049230

GetThreadId 0x1004925c

GetThreadPriority 0x1004923c

InitializeProcThreadAttributeList 0x1004926c

OpenProcessToken 0x10049244

OpenThread 0x10049250

SetThreadPriority 0x10049220

TerminateProcess 0x10049254

UpdateProcThreadAttribute 0x10049264

api-ms-win-core-processthreads-l1-1-1.dll 2

GetThreadContext 0x10049278

OpenProcess 0x10049274

api-ms-win-core-profile-l1-1-0.dll 2

QueryPerformanceCounter 0x10049280

QueryPerformanceFrequency 0x10049284

api-ms-win-core-psapi-l1-1-0.dll 6

K32EnumProcesses 0x10049298

K32EnumProcessModules 0x10049294

K32GetMappedFileNameW 0x10049290

K32GetModuleFileNameExW 0x1004929c

K32GetProcessImageFileNameW 0x1004928c

QueryFullProcessImageNameW 0x100492a0

api-ms-win-core-registry-l1-1-0.dll 11

RegCloseKey 0x100492d0

RegCreateKeyExW 0x100492b4

RegDeleteValueW 0x100492a8

RegEnumKeyExW 0x100492ac

RegGetKeySecurity 0x100492b0

RegGetValueW 0x100492b8

RegOpenKeyExW 0x100492c8

RegQueryInfoKeyW 0x100492cc

RegQueryValueExW 0x100492c4

RegSetKeySecurity 0x100492bc

RegSetValueExW 0x100492c0

api-ms-win-core-registry-l1-1-1.dll 1

RegSetKeyValueW 0x100492d8

api-ms-win-core-registry-l2-1-0.dll 2

RegDeleteKeyA 0x100492e0

RegDeleteKeyW 0x100492e4

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll 1

StrStrIW 0x100492ec

api-ms-win-core-string-l1-1-0.dll 3

CompareStringW 0x100492f8

MultiByteToWideChar 0x100492fc

WideCharToMultiByte 0x100492f4

api-ms-win-core-synch-l1-1-0.dll 23

AcquireSRWLockExclusive 0x10049330

AcquireSRWLockShared 0x10049308

CreateEventW 0x1004935c

CreateMutexExW 0x1004932c

CreateMutexW 0x10049320

CreateSemaphoreExW 0x10049358

DeleteCriticalSection 0x10049338

EnterCriticalSection 0x1004933c

InitializeCriticalSection 0x10049334

InitializeCriticalSectionEx 0x10049350

InitializeSRWLock 0x10049328

LeaveCriticalSection 0x10049340

OpenEventW 0x10049344

OpenMutexW 0x1004931c

OpenSemaphoreW 0x10049314

ReleaseMutex 0x10049304

ReleaseSemaphore 0x10049354

ReleaseSRWLockExclusive 0x10049324

ReleaseSRWLockShared 0x10049348

ResetEvent 0x10049318

SetEvent 0x1004934c

WaitForSingleObject 0x1004930c

WaitForSingleObjectEx 0x10049310

api-ms-win-core-synch-l1-2-0.dll 3

InitOnceBeginInitialize 0x10049368

InitOnceComplete 0x1004936c

Sleep 0x10049364

api-ms-win-core-synch-l1-2-1.dll 1

WaitForMultipleObjects 0x10049374

api-ms-win-core-sysinfo-l1-1-0.dll 9

GetSystemDirectoryW 0x10049384

GetSystemInfo 0x1004939c

GetSystemTime 0x1004938c

GetSystemTimeAsFileTime 0x10049398

GetTickCount 0x10049394

GetTickCount64 0x10049390

GetVersionExW 0x10049388

GetWindowsDirectoryW 0x10049380

GlobalMemoryStatusEx 0x1004937c

api-ms-win-core-threadpool-l1-2-0.dll 8

CloseThreadpoolTimer 0x100493ac

CloseThreadpoolWait 0x100493b0

CreateThreadpoolTimer 0x100493a4

CreateThreadpoolWait 0x100493b4

SetThreadpoolTimer 0x100493bc

SetThreadpoolWait 0x100493a8

WaitForThreadpoolTimerCallbacks 0x100493c0

WaitForThreadpoolWaitCallbacks 0x100493b8

api-ms-win-core-timezone-l1-1-0.dll 2

FileTimeToSystemTime 0x100493cc

SystemTimeToFileTime 0x100493c8

api-ms-win-core-toolhelp-l1-1-0.dll 7

CreateToolhelp32Snapshot 0x100493e0

Module32FirstW 0x100493dc

Module32NextW 0x100493d4

Process32FirstW 0x100493ec

Process32NextW 0x100493d8

Thread32First 0x100493e8

Thread32Next 0x100493e4

api-ms-win-core-version-l1-1-0.dll 3

GetFileVersionInfoExW 0x100493f4

GetFileVersionInfoSizeExW 0x100493fc

VerQueryValueW 0x100493f8

api-ms-win-core-windowserrorreporting-l1-1-0.dll 2

GetApplicationRecoveryCallback 0x10049408

WerGetFlags 0x10049404

api-ms-win-core-winrt-l1-1-0.dll 3

RoGetActivationFactory 0x10049418

RoInitialize 0x10049414

RoUninitialize 0x10049410

api-ms-win-core-winrt-string-l1-1-0.dll 1

WindowsCreateStringReference 0x10049420

api-ms-win-core-wow64-l1-1-0.dll 1

IsWow64Process 0x10049428

api-ms-win-core-wow64-l1-1-1.dll 3

GetSystemWow64Directory2W 0x10049434

GetSystemWow64DirectoryW 0x10049438

IsWow64Process2 0x10049430

api-ms-win-eventing-provider-l1-1-0.dll 6

EventProviderEnabled 0x10049448

EventRegister 0x10049450

EventSetInformation 0x10049440

EventUnregister 0x10049444

EventWrite 0x10049454

EventWriteTransfer 0x1004944c

api-ms-win-eventlog-legacy-l1-1-0.dll 3

DeregisterEventSource 0x1004945c

RegisterEventSourceW 0x10049464

ReportEventW 0x10049460

api-ms-win-security-base-l1-1-0.dll 15

AdjustTokenGroups 0x10049490

AdjustTokenPrivileges 0x10049498

AllocateAndInitializeSid 0x10049488

CheckTokenMembership 0x10049494

CopySid 0x1004946c

CreateWellKnownSid 0x10049470

DuplicateToken 0x10049478

FreeSid 0x1004949c

GetLengthSid 0x10049474

GetSidSubAuthority 0x10049480

GetSidSubAuthorityCount 0x10049484

GetTokenInformation 0x1004947c

ImpersonateLoggedOnUser 0x1004948c

IsValidSid 0x100494a4

RevertToSelf 0x100494a0

api-ms-win-security-lsalookup-l2-1-0.dll 2

LookupAccountSidW 0x100494ac

LookupPrivilegeValueW 0x100494b0

api-ms-win-security-sddl-l1-1-0.dll 2

ConvertSidToStringSidW 0x100494b8

ConvertStringSecurityDescriptorToSecurityDescriptorW 0x100494bc

api-ms-win-security-trustee-l1-1-0.dll 1

BuildSecurityDescriptorW 0x100494c4

api-ms-win-service-management-l1-1-0.dll 4

CloseServiceHandle 0x100494d0

OpenSCManagerW 0x100494d8

OpenServiceW 0x100494cc

StartServiceW 0x100494d4

api-ms-win-service-private-l1-1-0.dll 1

I_QueryTagInformation 0x100494e0

api-ms-win-shcore-obsolete-l1-1-0.dll 1

CommandLineToArgvW 0x100494e8

dbghelp.dll 7

MiniDumpWriteDump 0x10049508

StackWalk64 0x100494fc

SymCleanup 0x100494f4

SymFunctionTableAccess64 0x100494f8

SymGetModuleBase64 0x100494f0

SymGetModuleInfoW64 0x10049504

SymInitialize 0x10049500

KERNELBASE.dll 2

CreateProcessAsUserW 0x10049000

LocalAlloc 0x10049004

msvcrt.dll 31

__CxxFrameHandler3 0x1004955c

__dllonexit 0x10049538

_amsg_exit 0x10049560

_callnewh 0x10049554

_CxxThrowException 0x10049514

_except_handler4_common 0x10049528

_initterm 0x10049544

_local_unwind4 0x10049558

_lock 0x10049540

_onexit 0x10049534

_purecall 0x10049550

_unlock 0x1004953c

_vsnprintf_s 0x1004956c

_vsnwprintf 0x10049580

_XcptFilter 0x10049564

??0exception@@QAE@ABV0@@Z 0x10049570

??0exception@@QAE@XZ 0x10049574

??1exception@@UAE@XZ 0x10049578

??1type_info@@UAE@XZ 0x1004952c

?terminate@@YAXXZ 0x10049530

free 0x10049568

malloc 0x10049548

memcmp 0x1004951c

memcpy 0x10049520

memcpy_s 0x1004957c

memmove 0x10049524

memset 0x10049588

rand 0x10049518

realloc 0x10049510

srand 0x10049584

time 0x1004954c

ntdll.dll 96

_errno 0x100496cc

_vscwprintf 0x100496ec

_wcsicmp 0x100496e4

_wcsnicmp 0x100496e8

_wcstoui64 0x100495b4

_wtoi 0x100496d8

DbgPrint 0x100495b8

DbgPrintEx 0x100496f0

EtwCheckCoverage 0x1004961c

EtwEventWriteNoRegistration 0x10049654

EtwGetTraceEnableFlags 0x100496fc

EtwGetTraceEnableLevel 0x10049700

EtwGetTraceLoggerHandle 0x10049704

EtwRegisterTraceGuidsW 0x100496f8

EtwTraceMessage 0x10049708

EtwUnregisterTraceGuids 0x100496f4

isspace 0x100495bc

iswspace 0x100496e0

memmove_s 0x100495d4

NtAllocateVirtualMemory 0x100495a4

NtAlpcConnectPort 0x1004966c

NtAlpcSendWaitReceivePort 0x10049670

NtClearEvent 0x100495e4

NtClose 0x100496a0

NtCreateFile 0x1004959c

NtDeviceIoControlFile 0x100495a0

NtFreeVirtualMemory 0x100495a8

NtOpenEvent 0x1004965c

NtOpenKey 0x10049604

NtOpenProcess 0x10049698

NtQueryEvent 0x10049690

NtQueryInformationProcess 0x100496c4

NtQueryInformationThread 0x100495b0

NtQueryInformationToken 0x10049684

NtQueryLicenseValue 0x10049688

NtQuerySystemInformation 0x10049658

NtQueryValueKey 0x100495fc

NtResumeProcess 0x10049628

NtResumeThread 0x10049630

NtSetInformationFile 0x10049694

NtSetInformationProcess 0x10049620

NtSetSystemInformation 0x10049640

NtSuspendProcess 0x10049634

NtSuspendThread 0x1004962c

NtSystemDebugControl 0x100496b8

NtWaitForMultipleObjects 0x100495e8

NtWaitForSingleObject 0x10049660

PssNtCaptureSnapshot 0x1004969c

PssNtFreeSnapshot 0x10049648

RtlAcquireSRWLockExclusive 0x10049590

RtlAdjustPrivilege 0x100495ac

RtlAllocateAndInitializeSid 0x10049664

RtlAllocateHeap 0x100495c8

RtlCompareMemory 0x100496b4

RtlCompareUnicodeString 0x1004967c

RtlCreateProcessReflection 0x100496c0

RtlDecodeSystemPointer 0x100495e0

RtlDetermineDosPathNameType_U 0x100495f8

RtlFreeHeap 0x100495c4

RtlFreeSid 0x10049674

RtlGetCurrentTransaction 0x100495f0

RtlGetNtSystemRoot 0x100495f4

RtlGetUnloadEventTraceEx 0x10049618

RtlIdentifierAuthoritySid 0x1004963c

RtlImageNtHeaderEx 0x1004968c

RtlInitUnicodeString 0x10049668

RtlInitUnicodeStringEx 0x10049600

RtlNtStatusToDosError 0x100495dc

RtlNtStatusToDosErrorNoTeb 0x10049680

RtlQueryResourcePolicy 0x10049678

RtlQueryWnfStateData 0x100495d0

RtlReleasePebLock 0x1004960c

RtlReleaseSRWLockExclusive 0x10049594

RtlSecondsSince1970ToTime 0x100496a4

RtlSetCurrentTransaction 0x100495ec

RtlSetThreadErrorMode 0x100495c0

RtlSleepConditionVariableSRW 0x1004970c

RtlSubAuthorityCountSid 0x10049638

RtlTryAcquirePebLock 0x10049614

RtlWakeAllConditionVariable 0x10049644

RtlWerpReportException 0x100496bc

swprintf_s 0x100496a8

tolower 0x100495cc

toupper 0x100496d4

towlower 0x10049624

wcscat_s 0x100496ac

wcschr 0x100496dc

wcscpy_s 0x10049598

wcsncmp 0x10049610

wcsncpy_s 0x100496b0

wcsrchr 0x100496d0

wcsstr 0x10049608

wcstoul 0x100496c8

ZwQueryInformationThread 0x100495d8

ZwQueryWnfStateNameInformation 0x1004964c

ZwUpdateWnfStateData 0x10049650

RPCRT4.dll 20

CStdStubBuffer_AddRef 0x10049048

CStdStubBuffer_Connect 0x10049054

CStdStubBuffer_CountRefs 0x1004900c

CStdStubBuffer_DebugServerQueryInterface 0x10049040

CStdStubBuffer_DebugServerRelease 0x10049018

CStdStubBuffer_Disconnect 0x10049024

CStdStubBuffer_Invoke 0x10049038

CStdStubBuffer_IsIIDSupported 0x1004903c

CStdStubBuffer_QueryInterface 0x10049010

IUnknown_AddRef_Proxy 0x10049044

IUnknown_QueryInterface_Proxy 0x1004902c

IUnknown_Release_Proxy 0x10049030

NdrCStdStubBuffer_Release 0x10049058

NdrDllCanUnloadNow 0x10049050

NdrDllGetClassObject 0x1004904c

NdrOleAllocate 0x10049034

NdrOleFree 0x10049014

RpcStringFreeW 0x10049028

UuidCreate 0x10049020

UuidToStringW 0x1004901c