Windows 10 DLL File Information - ReAgent.dll

The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 10, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.

General Information

File Description:	Microsoft Windows Recovery Agent DLL
File Version:	10.0.10130.0 (fbl_impressive.150522-2224)
Company:	Microsoft Corporation
Product Name:	Microsoft® Windows® Operating System
DLL popularity	Low - 6 other DLL files in system32 directory are statically linked to this file.
File Size:	819 KB
Total Number of Exported Functions:	68
Total Number of Exported Functions With Names:	68

Section Headers

Name	Virtual Address	Raw Data Size	% of File	Characteristics	Section Contains...
.text	0x00001000	761,856 Bytes	90.7%	Read, Execute	Code
.data	0x000bb000	12,288 Bytes	1.5%	Write, Read	Initialized Data
.idata	0x000bf000	10,752 Bytes	1.3%	Read	Initialized Data
.didat	0x000c2000	512 Bytes	0.1%	Write, Read	Initialized Data
.rsrc	0x000c3000	14,336 Bytes	1.7%	Read	Initialized Data
.reloc	0x000c7000	30,208 Bytes	3.6%	Read, Discardable	Initialized Data

Static Linking

ReAgent.dll is statically linked to the following files:

msvcrt.dll
bcrypt.dll
ntdll.dll
KERNEL32.dll
ADVAPI32.dll
USER32.dll
imagehlp.dll
ole32.dll
OLEAUT32.dll
SHELL32.dll
WDSCORE.dll
RPCRT4.dll
DismApi.DLL

This means that when ReAgent.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, ReAgent.dll won't be loaded.

List of files that are statically linked to ReAgent.dll

BdeHdCfgLib.dll
BootMenuUX.dll
ReAgentTask.dll
recovery.dll
reseteng.dll
wscapi.dll

This means that when one of the above files is loaded, ReAgent.dll will be loaded too. (The opposite of the previous 'Static Linking' section)

General Resources Information

Resource Type	Number of Items	Total Size	% of File
Icons	0	0 Bytes	0.0%
Animated Icons	0	0 Bytes	0.0%
Cursors	0	0 Bytes	0.0%
Animated Cursors	0	0 Bytes	0.0%
Bitmaps	0	0 Bytes	0.0%
AVI Files	0	0 Bytes	0.0%
Dialog-Boxes	0	0 Bytes	0.0%
HTML Related Files	0	0 Bytes	0.0%
Menus	0	0 Bytes	0.0%
Strings	7	780 Bytes	0.1%
Type Libraries	0	0 Bytes	0.0%
Manifest	1	653 Bytes	0.1%
All Others	4	12,166 Bytes	1.4%
Total	12	13,599 Bytes	1.6%

Icons in this file

No icons found in this file

Cursors in this file

No cursors found in this file

Dialog-boxes list (up to 1000 dialogs)

No dialog resources in this file.

String resources in this dll (up to 1000 strings)

String ID	String Text
501	Microsoft Corporation
502	Recovery
503	Recovery has completed. Do you want to restore your user files?
504	If you created a user file backup before recovering your computer, you can restore those files now.
505	Restore my files
506	Cancel
507	This setting is managed by your system administrator. <a href="mshelp://windows/?id=ca607790-adf6-41a7-abd8-0a1f2feb70b1">Why can't I change these settings?</a>

COM Classes/Interfaces

There is no type library in this file with COM classes/interfaces information

Exported Functions List

The following functions are exported by this dll:

WinRECheckGuid	WinREUseNewPBRImage	WinRE_Generalize
WinRE_Specialize	WinReAddLogFile	WinReClearBootApp
WinReClearError	WinReClearOemImagePath	WinReCompleteRecovery
WinReConfigureTask	WinReCopyLogFilesToRamdisk	WinReCopySetupFiles
WinReCreateLogInstance	WinReCreateLogInstanceEx	WinReDeleteLogFiles
WinReGetConfig	WinReGetCustomization	WinReGetError
WinReGetGroupPolicies	WinReGetLogDirPath	WinReGetLogFile
WinReGetWIMInfo	WinReInitiateOfflineScanning	WinReInstall
WinReInstallOnTargetOS	WinReIsInstallMedia	WinReIsInstalledOnSystemPartition
WinReIsWimBootEnabled	WinReIsWinPE	WinReOobeInstall
WinReOpenLogInstance	WinRePostBCDRepair	WinRePostRecovery
WinReReinstall	WinReRepair	WinReRestoreConfigAfterPBR
WinReRestoreLogFiles	WinReServiceBootUxFiles	WinReServicePbrFiles
WinReSetBootApp	WinReSetConfig	WinReSetCustomization
WinReSetError	WinReSetRecoveryAction	WinReSetRecoveryActionEx
WinReSetTriggerFile	WinReSetupBackupWinRE	WinReSetupCheckWinRE
WinReSetupInstall	WinReSetupMigrateDrivers	WinReSetupRestoreWinRE
WinReSetupRestoreWinREEx	WinReSetupSetImage	WinReUnInstall
WinReUpdateLogInstance	WinReValidateRecoveryWim	winreClearRecoveryBCD
winreCollectAuxiliaryData	winreConvertDirNameToOffset	winreFindInstallMedia
winreFindTargetPartition	winreGetBinaryArch	winreGetDiskList
winreGetRecoveryBCDEntry	winreGetWimPathFromBCDEntry	winreOpenRecoveryBCD
winreRecoveryBCDHasEntry	winreSetRecoveryBCDEntry

Imported Functions List

The following functions are imported by this dll:

• msvcrt.dll:
  

  _CxxThrowException

  _XcptFilter

  __CxxFrameHandler

  __dllonexit

  _amsg_exit

  _atoi64

  _callnewh

  _except_handler4_common

  _initterm

  _lock

  _onexit

  _purecall

  _snwscanf_s

  _ultow_s

  _unlock

  _vscwprintf

  _vsnprintf

  _vsnwprintf

  _wcsicmp

  _wcslwr

  _wcsnicmp

  _wcsrev

  _wcsupr

  atol

  bsearch

  free

  iswspace

  malloc

  memcmp

  memcpy

  memcpy_s

  memmove

  memmove_s

  memset

  public: __thiscall exception::exception(char const * const &)

  public: __thiscall exception::exception(class exception const &)

  public: virtual __thiscall exception::~exception(void)

  public: virtual __thiscall type_info::~type_info(void)

  public: virtual char const * __thiscall exception::what(void)const

  qsort

  strncmp

  swprintf_s

  swscanf_s

  toupper

  towupper

  wcscat_s

  wcschr

  wcscpy_s

  wcsncmp

  wcsnlen

  wcsrchr

  wcsstr

  wcstoul

  wprintf

• bcrypt.dll:
  

  BCryptCloseAlgorithmProvider	BCryptCreateHash	BCryptDestroyHash	BCryptFinishHash
  BCryptGetProperty	BCryptHashData	BCryptOpenAlgorithmProvider

• ntdll.dll:
  

  DbgPrintEx	LdrGetDllHandle	LdrGetProcedureAddress
  NtAdjustPrivilegesToken	NtAllocateUuids	NtClose
  NtClose	NtCreateEvent	NtCreateEvent
  NtCreateFile	NtCreateKey	NtDeleteKey
  NtDeleteValueKey	NtDeviceIoControlFile	NtDeviceIoControlFile
  NtEnumerateBootEntries	NtEnumerateKey	NtLoadKey
  NtOpenDirectoryObject	NtOpenFile	NtOpenFile
  NtOpenKey	NtOpenKey	NtOpenMutant
  NtOpenProcessTokenEx	NtOpenSymbolicLinkObject	NtOpenSymbolicLinkObject
  NtOpenThreadTokenEx	NtQueryAttributesFile	NtQueryBootEntryOrder
  NtQueryDirectoryFile	NtQueryDirectoryObject	NtQueryInformationFile
  NtQueryInformationProcess	NtQueryKey	NtQuerySymbolicLinkObject
  NtQuerySymbolicLinkObject	NtQuerySystemInformation	NtQuerySystemInformation
  NtQueryValueKey	NtQueryValueKey	NtReleaseMutant
  NtResetEvent	NtResetEvent	NtSetInformationFile
  NtSetInformationThread	NtSetSecurityObject	NtSetSecurityObject
  NtSetValueKey	NtTranslateFilePath	NtUnloadKey
  NtWaitForSingleObject	NtWaitForSingleObject	NtYieldExecution
  RtlAcquireResourceExclusive	RtlAcquireResourceShared	RtlAddAccessAllowedAceEx
  RtlAdjustPrivilege	RtlAllocateAndInitializeSid	RtlAllocateHeap
  RtlAppendUnicodeToString	RtlCompareMemory	RtlCreateAcl
  RtlCreateSecurityDescriptor	RtlDeleteCriticalSection	RtlDeleteResource
  RtlDosPathNameToNtPathName_U	RtlDowncaseUnicodeChar	RtlFindAceByType
  RtlFreeAnsiString	RtlFreeHeap	RtlFreeSid
  RtlGUIDFromString	RtlGetVersion	RtlImpersonateSelf
  RtlInitAnsiString	RtlInitUnicodeString	RtlInitializeCriticalSection
  RtlInitializeResource	RtlLengthSecurityDescriptor	RtlLengthSid
  RtlNtStatusToDosError	RtlRaiseStatus	RtlReAllocateHeap
  RtlReleaseResource	RtlSetControlSecurityDescriptor	RtlSetDaclSecurityDescriptor
  RtlSetOwnerSecurityDescriptor	RtlStringFromGUID	WinSqmAddToAverageDWORD
  WinSqmAddToAverageDWORD	WinSqmAddToAverageDWORD

• KERNEL32.dll:
  

  ActivateActCtx	CloseHandle	CompareStringW
  CopyFileExW	CopyFileW	CreateActCtxW
  CreateDirectoryW	CreateEventW	CreateFileMappingW
  CreateFileW	CreateProcessW	CreateSemaphoreExW
  CreateThread	DeactivateActCtx	DelayLoadFailureHook
  DeleteFileW	DeviceIoControl	DuplicateHandle
  ExpandEnvironmentStringsW	FindClose	FindFirstFileW
  FindFirstVolumeW	FindNextFileW	FindNextVolumeW
  FindVolumeClose	FlushFileBuffers	FreeLibrary
  GetCurrentProcess	GetCurrentProcessId	GetCurrentThread
  GetCurrentThreadId	GetDiskFreeSpaceExW	GetDriveTypeW
  GetEnvironmentVariableW	GetExitCodeProcess	GetFileAttributesExW
  GetFileAttributesW	GetFileInformationByHandle	GetFileSize
  GetFileSizeEx	GetFileTime	GetFirmwareEnvironmentVariableW
  GetFullPathNameW	GetHandleInformation	GetLastError
  GetModuleFileNameW	GetModuleHandleExW	GetModuleHandleW
  GetOverlappedResult	GetPrivateProfileSectionW	GetPrivateProfileStringW
  GetProcAddress	GetProcessHeap	GetSystemDirectoryW
  GetSystemInfo	GetSystemTimeAsFileTime	GetSystemWindowsDirectoryW
  GetTempFileNameW	GetTempPathW	GetTickCount
  GetTickCount64	GetVersionExW	GetVolumeInformationByHandleW
  GetVolumeInformationW	GetVolumeNameForVolumeMountPointW	GetVolumePathNameW
  GetVolumePathNamesForVolumeNameW	GetWindowsDirectoryW	HeapFree
  InitializeCriticalSectionAndSpinCount	LoadLibraryExA	LoadLibraryExW
  LoadLibraryW	LocalAlloc	LocalFree
  LockFileEx	MapViewOfFile	MoveFileExW
  MultiByteToWideChar	OpenProcess	QueryPerformanceCounter
  ReadFile	ReleaseActCtx	ReleaseSemaphore
  RemoveDirectoryW	SetEndOfFile	SetErrorMode
  SetEvent	SetFileAttributesW	SetFilePointer
  SetFilePointerEx	SetFileTime	SetFirmwareEnvironmentVariableW
  SetLastError	SetThreadIdealProcessor	SetUnhandledExceptionFilter
  SetVolumeMountPointW	Sleep	TerminateProcess
  TlsAlloc	TlsFree	TlsGetValue
  TlsSetValue	UnhandledExceptionFilter	UnlockFileEx
  UnmapViewOfFile	VirtualAlloc	VirtualFree
  WaitForMultipleObjectsEx	WaitForSingleObject	WriteFile
  ntdll!RtlAllocateHeap	ntdll!RtlDeleteCriticalSection	ntdll!RtlEnterCriticalSection
  ntdll!RtlInitializeCriticalSection	ntdll!RtlLeaveCriticalSection	ntdll!RtlReAllocateHeap

• ADVAPI32.dll:
  

  AddAccessAllowedAceEx	AdjustTokenPrivileges
  AllocateAndInitializeSid	CloseEncryptedFileRaw
  ConvertStringSecurityDescriptorToSecurityDescriptorW	CryptAcquireContextW
  CryptCreateHash	CryptDestroyHash
  CryptGetHashParam	CryptHashData
  CryptReleaseContext	DuplicateTokenEx
  FreeSid	GetAclInformation
  GetLengthSid	GetSecurityDescriptorControl
  GetSecurityDescriptorDacl	GetSecurityDescriptorGroup
  GetSecurityDescriptorLength	GetSecurityDescriptorOwner
  GetSecurityDescriptorSacl	GetSecurityInfo
  InitializeAcl	InitiateSystemShutdownExW
  LookupPrivilegeValueW	OpenEncryptedFileRawW
  OpenProcessToken	OpenThreadToken
  ReadEncryptedFileRaw	RegCloseKey
  RegCopyTreeW	RegCreateKeyExW
  RegDeleteKeyValueW	RegDeleteKeyW
  RegDeleteTreeW	RegDeleteValueW
  RegEnumKeyExW	RegEnumValueW
  RegFlushKey	RegGetValueW
  RegLoadKeyW	RegOpenKeyExW
  RegOpenKeyW	RegQueryInfoKeyW
  RegQueryValueExW	RegSaveKeyW
  RegSetKeyValueW	RegSetValueExW
  RegUnLoadKeyW	RevertToSelf
  SetNamedSecurityInfoW	SetSecurityInfo
  SetThreadToken	WriteEncryptedFileRaw
  ntdll!EtwEventRegister	ntdll!EtwEventUnregister
  ntdll!EtwEventWrite	ntdll!EtwEventWriteTransfer
  ntdll!EtwGetTraceEnableFlags	ntdll!EtwGetTraceEnableLevel
  ntdll!EtwGetTraceLoggerHandle	ntdll!EtwRegisterTraceGuidsW
  ntdll!EtwTraceMessage	ntdll!EtwUnregisterTraceGuids

• USER32.dll:
  

  CharUpperW

  LoadStringW

  SendMessageW

• imagehlp.dll:
  

  ImageNtHeader

• ole32.dll:
  

  CoInitialize	combase!CoCreateGuid	combase!CoCreateInstance	combase!CoInitializeEx
  combase!CoTaskMemFree	combase!CoUninitialize

• OLEAUT32.dll:
  

  SysAllocString

  SysFreeString

  VariantClear

  VariantInit

• SHELL32.dll:
  

  ShellExecuteExW

• WDSCORE.dll:
  

  ConstructPartialMsgVW

  CurrentIP

  WdsSetupLogMessageW

• RPCRT4.dll:
  

  RpcStringFreeW

  UuidCompare

  UuidCreate

  UuidToStringW

• DismApi.DLL:
  

  DismAddDriver	DismCloseSession	DismCommitImage	DismDelete
  DismGetDrivers	DismInitialize	DismMountImage	DismOpenSession
  DismShutdown	DismUnmountImage