Windows 10 DLL File Information - wer.dll

The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 10, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.

General Information

File Description:	Windows Error Reporting DLL
File Version:	10.0.10130.0 (fbl_impressive.150522-2224)
Company:	Microsoft Corporation
Product Name:	Microsoft® Windows® Operating System
DLL popularity	Medium - 17 other DLL files in system32 directory are statically linked to this file.
File Size:	516 KB
Total Number of Exported Functions:	128
Total Number of Exported Functions With Names:	128

Section Headers

Name	Virtual Address	Raw Data Size	% of File	Characteristics	Section Contains...
.text	0x00001000	471,040 Bytes	89.0%	Read, Execute	Code
.data	0x00074000	2,048 Bytes	0.4%	Write, Read	Initialized Data
.idata	0x00077000	13,824 Bytes	2.6%	Read	Initialized Data
.didat	0x0007b000	512 Bytes	0.1%	Write, Read	Initialized Data
.rsrc	0x0007c000	1,536 Bytes	0.3%	Read	Initialized Data
.reloc	0x0007d000	25,600 Bytes	4.8%	Read, Discardable	Initialized Data

Static Linking

wer.dll is statically linked to the following files:

msvcrt.dll
api-ms-win-core-heap-l1-2-0.dll
api-ms-win-core-libraryloader-l1-2-0.dll
api-ms-win-eventing-provider-l1-1-0.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-2.dll
api-ms-win-core-sysinfo-l1-2-1.dll
api-ms-win-core-errorhandling-l1-1-1.dll
ntdll.dll
api-ms-win-core-windowserrorreporting-l1-1-0.dll
api-ms-win-core-apiquery-l1-1-0.dll
api-ms-win-core-delayload-l1-1-1.dll
api-ms-win-core-util-l1-1-0.dll
api-ms-win-service-management-l1-1-0.dll
api-ms-win-core-libraryloader-l1-2-1.dll
api-ms-win-core-memory-l1-1-2.dll
api-ms-win-service-management-l2-1-0.dll
api-ms-win-core-io-l1-1-1.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-core-com-l1-1-1.dll
api-ms-win-core-file-l1-2-1.dll
api-ms-win-security-base-l1-2-0.dll
api-ms-win-core-processsnapshot-l1-1-0.dll
api-ms-win-core-wow64-l1-1-0.dll
api-ms-win-core-file-l2-1-1.dll
api-ms-win-core-file-l2-1-2.dll
api-ms-win-core-localization-l1-2-1.dll
RPCRT4.dll
api-ms-win-core-psapi-l1-1-0.dll
api-ms-win-core-realtime-l1-1-0.dll
api-ms-win-core-timezone-l1-1-0.dll
api-ms-win-core-heap-l2-1-0.dll
api-ms-win-core-winrt-l1-1-0.dll
api-ms-win-core-winrt-string-l1-1-0.dll
api-ms-win-core-debug-l1-1-1.dll
api-ms-win-core-processenvironment-l1-2-0.dll
api-ms-win-core-string-l1-1-0.dll
api-ms-win-core-wow64-l1-1-1.dll
api-ms-win-core-string-l2-1-0.dll
api-ms-win-core-version-l1-1-0.dll
api-ms-win-core-registry-l2-2-0.dll
api-ms-win-core-kernel32-legacy-l1-1-1.dll
api-ms-win-eventlog-legacy-l1-1-0.dll
api-ms-win-core-processtopology-obsolete-l1-1-0.dll
api-ms-win-core-toolhelp-l1-1-0.dll
api-ms-win-core-psapi-obsolete-l1-1-0.dll
api-ms-win-core-string-obsolete-l1-1-0.dll
api-ms-win-core-localization-obsolete-l1-3-0.dll
api-ms-win-core-synch-l1-2-1.dll
api-ms-win-eventing-controller-l1-1-0.dll
api-ms-win-eventing-legacy-l1-1-0.dll

This means that when wer.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, wer.dll won't be loaded.

General Resources Information

Resource Type	Number of Items	Total Size	% of File
Icons	0	0 Bytes	0.0%
Animated Icons	0	0 Bytes	0.0%
Cursors	0	0 Bytes	0.0%
Animated Cursors	0	0 Bytes	0.0%
Bitmaps	0	0 Bytes	0.0%
AVI Files	0	0 Bytes	0.0%
Dialog-Boxes	0	0 Bytes	0.0%
HTML Related Files	0	0 Bytes	0.0%
Menus	0	0 Bytes	0.0%
Strings	17	1,318 Bytes	0.2%
Type Libraries	0	0 Bytes	0.0%
Manifest	0	0 Bytes	0.0%
All Others	3	5,576 Bytes	1.1%
Total	20	6,894 Bytes	1.3%

Icons in this file

No icons found in this file

Cursors in this file

No cursors found in this file

Dialog-boxes list (up to 1000 dialogs)

No dialog resources in this file.

String resources in this dll (up to 1000 strings)

String ID	String Text
231	Problem Signature %02d
235	Report Id
263	Stopped working
276	Locale ID
277	OS Version
292	Microsoft Windows Error Reporting
293	Microsoft Corporation
294	Windows Error Reporting task to process queued reports.
295	Per user queued Windows Error Reporting Files
296	Files used for error reporting and solution checking.
297	Per user archived Windows Error Reporting Files
298	Files used for error reporting and solution checking.
299	System queued Windows Error Reporting Files
300	Files used for error reporting and solution checking.
301	System archived Windows Error Reporting Files
302	Files used for error reporting and solution checking.
3014	Not available

COM Classes/Interfaces

There is no type library in this file with COM classes/interfaces information

Exported Functions List

The following functions are exported by this dll:

CloseThreadWaitChainSession	GetThreadWaitChain	OpenThreadWaitChainSession
RegisterWaitChainCOMCallback	WerAddExcludedApplication	WerRemoveExcludedApplication
WerReportAddDump	WerReportAddFile	WerReportCloseHandle
WerReportCreate	WerReportSetParameter	WerReportSetUIOption
WerReportSubmit	WerSysprepCleanup	WerSysprepGeneralize
WerSysprepSpecialize	WerUnattendedSetup	WerpAddAppCompatData
WerpAddFile	WerpAddFileBuffer	WerpAddFileCallback
WerpAddMemoryBlock	WerpAddRegisteredDataToReport	WerpArchiveReport
WerpAuxmdDumpProcessImages	WerpAuxmdDumpRegisteredBlocks	WerpAuxmdFree
WerpAuxmdFreeCopyBuffer	WerpAuxmdHashVaRanges	WerpAuxmdInitialize
WerpAuxmdMapFile	WerpCancelResponseDownload	WerpCancelUpload
WerpCloseStore	WerpCreateIntegratorReportId	WerpCreateMachineStore
WerpCreateUserStore	WerpDeleteReport	WerpDestroyWerString
WerpDownloadResponse	WerpDownloadResponseOnly	WerpDownloadResponseTemplate
WerpEnumerateStoreNext	WerpEnumerateStoreStart	WerpExtractReportFiles
WerpFlushImageCache	WerpForceDeferredCollection	WerpFreeString
WerpFreeUnmappedVaRanges	WerpGetBucketId	WerpGetDynamicParameter
WerpGetEventType	WerpGetExtendedDiagData	WerpGetFileByIndex
WerpGetFilePathByIndex	WerpGetIntegratorReportId	WerpGetLegacyBucketId
WerpGetLoadedModuleByIndex	WerpGetNumFiles	WerpGetNumLoadedModules
WerpGetNumSigParams	WerpGetReportConsent	WerpGetReportCount
WerpGetReportFinalConsent	WerpGetReportFlags	WerpGetReportInformation
WerpGetReportSettings	WerpGetReportTime	WerpGetReportType
WerpGetResponseId	WerpGetResponseUrl	WerpGetSigParamByIndex
WerpGetStoreLocation	WerpGetStorePath	WerpGetStoreType
WerpGetTextFromReport	WerpGetUIParamByIndex	WerpGetUploadTime
WerpGetWerStringData	WerpGetWow64Process	WerpHashApplicationParameters
WerpInitializeImageCache	WerpIsDisabled	WerpIsOnBattery
WerpIsTransportAvailable	WerpLaunchResponse	WerpLoadReport
WerpLoadReportFromBuffer	WerpOpenMachineArchive	WerpOpenMachineQueue
WerpOpenUserArchive	WerpOpenUserQueue	WerpPromptUser
WerpPruneStore	WerpReportCancel	WerpReportSprintfParameter
WerpReserveMachineQueueReportDir	WerpResetTransientImageCacheStatistics	WerpRestartApplication
WerpSetAuxiliaryArchivePath	WerpSetCallBack	WerpSetDefaultUserConsent
WerpSetDynamicParameter	WerpSetEventName	WerpSetIntegratorReportId
WerpSetReportApplicationIdentity	WerpSetReportFlags	WerpSetReportInformation
WerpSetReportNamespaceParameter	WerpSetReportTime	WerpSetReportUploadContextToken
WerpSetTimedTask	WerpShowUpsellUI	WerpStitchedMinidumpVmPostReadCallback
WerpStitchedMinidumpVmPreReadCallback	WerpStitchedMinidumpVmQueryCallback	WerpSubmitReportFromStore
WerpSvcReportFromMachineQueue	WerpTraceAuxMemDumpStatistics	WerpTraceDuration
WerpTraceImageCacheStatistics	WerpTraceSnapshotStatistics	WerpTraceStitchedDumpWriterStatistics
WerpTraceUnmappedVaRangesStatistics	WerpUnmapProcessViews	WerpUpdateReportResponse
WerpValidateReportKey	WerpWalkGatherBlocks

Imported Functions List

The following functions are imported by this dll:

• msvcrt.dll:
  

  _CxxThrowException	_XcptFilter
  __CxxFrameHandler	_amsg_exit
  _except_handler4_common	_ftol2
  _initterm	_purecall
  _wcsdup	_wfopen
  fclose	fread
  free	fseek
  fwprintf	fwrite
  malloc	memcmp
  memcpy	memset
  public: virtual __thiscall type_info::~type_info(void)	rand
  realloc	srand
  void __cdecl terminate(void)

• api-ms-win-core-heap-l1-2-0.dll:
  

  KernelBase!GetProcessHeap	KernelBase!HeapCreate	KernelBase!HeapDestroy	ntdll!RtlAllocateHeap
  ntdll!RtlFreeHeap

• api-ms-win-core-libraryloader-l1-2-0.dll:
  

  KernelBase!DisableThreadLibraryCalls	KernelBase!FreeLibrary	KernelBase!FreeLibraryAndExitThread
  KernelBase!GetModuleFileNameW	KernelBase!GetModuleHandleA	KernelBase!GetModuleHandleExW
  KernelBase!GetModuleHandleW	KernelBase!GetProcAddress	KernelBase!LoadLibraryExW
  KernelBase!LoadStringW

• api-ms-win-eventing-provider-l1-1-0.dll:
  

  ntdll!EtwEventRegister

  ntdll!EtwEventSetInformation

  ntdll!EtwEventUnregister

  ntdll!EtwEventWriteTransfer

• api-ms-win-core-synch-l1-2-0.dll:
  

  KernelBase!CreateEventExW	KernelBase!CreateEventW
  KernelBase!CreateMutexW	KernelBase!InitializeCriticalSectionAndSpinCount
  KernelBase!OpenMutexW	KernelBase!ReleaseMutex
  KernelBase!ResetEvent	KernelBase!SetEvent
  KernelBase!Sleep	KernelBase!WaitForMultipleObjectsEx
  KernelBase!WaitForSingleObject	KernelBase!WaitForSingleObjectEx
  ntdll!RtlAcquireSRWLockExclusive	ntdll!RtlAcquireSRWLockShared
  ntdll!RtlDeleteCriticalSection	ntdll!RtlEnterCriticalSection
  ntdll!RtlInitializeConditionVariable	ntdll!RtlInitializeCriticalSection
  ntdll!RtlLeaveCriticalSection	ntdll!RtlReleaseSRWLockExclusive
  ntdll!RtlReleaseSRWLockShared

• api-ms-win-core-profile-l1-1-0.dll:
  

  ntdll!RtlQueryPerformanceCounter

  ntdll!RtlQueryPerformanceFrequency

• api-ms-win-core-processthreads-l1-1-2.dll:
  

  KernelBase!OpenProcessToken	KernelBase!OpenThreadToken	kernel32!CreateProcessAsUserW	kernel32!CreateProcessW
  kernel32!CreateRemoteThread	kernel32!CreateThread	kernel32!GetCurrentProcess	kernel32!GetCurrentProcessId
  kernel32!GetCurrentThread	kernel32!GetCurrentThreadId	kernel32!GetExitCodeProcess	kernel32!GetExitCodeThread
  kernel32!GetProcessId	kernel32!GetProcessTimes	kernel32!GetThreadId	kernel32!GetThreadPriority
  kernel32!OpenProcess	kernel32!OpenThread	kernel32!SetThreadPriority	kernel32!TerminateProcess

• api-ms-win-core-sysinfo-l1-2-1.dll:
  

  KernelBase!GetComputerNameExW	KernelBase!GetLocalTime	KernelBase!GetNativeSystemInfo
  KernelBase!GetProductInfo	KernelBase!GetSystemDirectoryW	KernelBase!GetSystemInfo
  KernelBase!GetSystemTime	KernelBase!GetSystemTimeAsFileTime	KernelBase!GetTickCount
  KernelBase!GetTickCount64	KernelBase!GetVersionExW	KernelBase!GlobalMemoryStatusEx

• api-ms-win-core-errorhandling-l1-1-1.dll:
  

  KernelBase!GetLastError	KernelBase!RaiseException	KernelBase!SetErrorMode
  KernelBase!SetUnhandledExceptionFilter	KernelBase!UnhandledExceptionFilter	ntdll!RtlRestoreLastWin32Error

• ntdll.dll:
  

  AlpcGetMessageAttribute	AlpcInitializeMessageAttribute	DbgPrintEx
  EtwEventWriteNoRegistration	EtwGetTraceEnableFlags	EtwGetTraceEnableLevel
  EtwGetTraceLoggerHandle	EtwRegisterTraceGuidsW	EtwTraceMessage
  EtwUnregisterTraceGuids	NtAlpcCancelMessage	NtAlpcConnectPort
  NtAlpcConnectPort	NtAlpcDisconnectPort	NtAlpcQueryInformation
  NtAlpcQueryInformation	NtAlpcSendWaitReceivePort	NtAlpcSendWaitReceivePort
  NtClose	NtClose	NtCreateFile
  NtDuplicateToken	NtOpenEvent	NtQueryEvent
  NtQueryInformationFile	NtQueryInformationProcess	NtQueryInformationThread
  NtQueryInformationToken	NtQueryLicenseValue	NtQueryMutant
  NtQueryObject	NtQuerySystemInformation	NtQueryVirtualMemory
  NtQueryWnfStateNameInformation	NtReadVirtualMemory	NtSetInformationFile
  NtSetInformationThread	NtUnmapViewOfSection	NtUpdateWnfStateData
  NtWaitForSingleObject	RtlAcquireSRWLockExclusive	RtlAcquireSRWLockShared
  RtlAllocateAndInitializeSid	RtlAllocateHeap	RtlCompareUnicodeString
  RtlCreateQueryDebugBuffer	RtlDestroyQueryDebugBuffer	RtlDisableThreadProfiling
  RtlEnableThreadProfiling	RtlEqualUnicodeString	RtlFreeAnsiString
  RtlFreeHeap	RtlFreeSid	RtlGetVersion
  RtlInitUnicodeString	RtlInitializeConditionVariable	RtlNtStatusToDosError
  RtlNtStatusToDosErrorNoTeb	RtlPublishWnfStateData	RtlQueryHeapInformation
  RtlQueryProcessDebugInformation	RtlQueryResourcePolicy	RtlReadThreadProfilingData
  RtlReleaseSRWLockExclusive	RtlReleaseSRWLockShared	RtlStringFromGUID
  RtlWaitOnAddress	RtlWakeAddressAll	TpAllocAlpcCompletion
  TpReleaseAlpcCompletion	TpWaitForAlpcCompletion	WinSqmAddToStreamEx
  _atoi64	_snwprintf_s	_vscwprintf
  _vsnprintf	_vsnwprintf	_wcsicmp
  _wcsnicmp	_wtoi	_wtoi64
  atoi	iswspace	memmove
  qsort	qsort_s	strncmp
  strpbrk	strrchr	strstr
  swscanf_s	vDbgPrintEx	wcscat_s
  wcschr	wcscpy_s	wcsncmp
  wcsncpy_s	wcspbrk	wcsrchr
  wcstok_s	wcstoul

• api-ms-win-core-windowserrorreporting-l1-1-0.dll:
  

  KernelBase!GetApplicationRecoveryCallback	KernelBase!GetApplicationRestartSettings
  KernelBase!WerGetFlags

• api-ms-win-core-apiquery-l1-1-0.dll:
  

  ntdll!ApiSetQueryApiSetPresence

• api-ms-win-core-delayload-l1-1-1.dll:
  

  KernelBase!DelayLoadFailureHook

  KernelBase!ResolveDelayLoadedAPI

• api-ms-win-core-util-l1-1-0.dll:
  

  ntdll!RtlDecodePointer

  ntdll!RtlEncodePointer

• api-ms-win-service-management-l1-1-0.dll:
  

  sechost!CloseServiceHandle

  sechost!OpenSCManagerW

  sechost!OpenServiceW

• api-ms-win-core-libraryloader-l1-2-1.dll:
  

  KernelBase!LoadLibraryW

• api-ms-win-core-memory-l1-1-2.dll:
  

  KernelBase!CreateFileMappingW	KernelBase!MapViewOfFile	KernelBase!ReadProcessMemory	KernelBase!UnmapViewOfFile
  KernelBase!VirtualAlloc	KernelBase!VirtualFree	KernelBase!VirtualQueryEx

• api-ms-win-service-management-l2-1-0.dll:
  

  sechost!QueryServiceStatusEx

• api-ms-win-core-io-l1-1-1.dll:
  

  kernel32!DeviceIoControl

• api-ms-win-core-handle-l1-1-0.dll:
  

  KernelBase!CloseHandle

  KernelBase!DuplicateHandle

• api-ms-win-core-registry-l1-1-0.dll:
  

  KernelBase!RegCloseKey	KernelBase!RegCreateKeyExW	KernelBase!RegDeleteKeyExW	KernelBase!RegDeleteTreeW
  KernelBase!RegDeleteValueW	KernelBase!RegEnumKeyExW	KernelBase!RegEnumValueW	KernelBase!RegGetValueW
  KernelBase!RegLoadAppKeyW	KernelBase!RegOpenKeyExW	KernelBase!RegQueryInfoKeyW	KernelBase!RegQueryValueExW
  KernelBase!RegSetValueExW

• api-ms-win-core-com-l1-1-1.dll:
  

  combase!CoCreateInstance	combase!CoGetMalloc	combase!CoInitializeEx
  combase!CoSetProxyBlanket	combase!CoTaskMemAlloc	combase!CoTaskMemFree
  combase!CoUninitialize	combase!CoWaitForMultipleHandles

• api-ms-win-core-file-l1-2-1.dll:
  

  KernelBase!CompareFileTime	KernelBase!CreateDirectoryW
  KernelBase!CreateFileA	KernelBase!CreateFileW
  KernelBase!DeleteFileW	KernelBase!FindClose
  KernelBase!FindFirstFileExW	KernelBase!FindFirstFileW
  KernelBase!FindNextFileW	KernelBase!GetDiskFreeSpaceExW
  KernelBase!GetDriveTypeW	KernelBase!GetFileAttributesW
  KernelBase!GetFileInformationByHandle	KernelBase!GetFileSizeEx
  KernelBase!GetFileTime	KernelBase!GetLongPathNameW
  KernelBase!GetShortPathNameW	KernelBase!GetTempFileNameW
  KernelBase!GetTempPathW	KernelBase!GetVolumeNameForVolumeMountPointW
  KernelBase!GetVolumePathNameW	KernelBase!ReadFile
  KernelBase!RemoveDirectoryW	KernelBase!SetFileAttributesW
  KernelBase!SetFilePointer	KernelBase!SetFilePointerEx
  KernelBase!SetFileTime	KernelBase!WriteFile

• api-ms-win-security-base-l1-2-0.dll:
  

  KernelBase!AddAccessAllowedAceEx	KernelBase!AddMandatoryAce	KernelBase!AllocateAndInitializeSid
  KernelBase!CheckTokenMembership	KernelBase!CopySid	KernelBase!CreateWellKnownSid
  KernelBase!DuplicateToken	KernelBase!FreeSid	KernelBase!GetAce
  KernelBase!GetFileSecurityW	KernelBase!GetKernelObjectSecurity	KernelBase!GetLengthSid
  KernelBase!GetSecurityDescriptorDacl	KernelBase!GetSecurityDescriptorSacl	KernelBase!GetSidSubAuthority
  KernelBase!GetSidSubAuthorityCount	KernelBase!GetTokenInformation	KernelBase!ImpersonateLoggedOnUser
  KernelBase!InitializeAcl	KernelBase!InitializeSecurityDescriptor	KernelBase!IsValidSid
  KernelBase!RevertToSelf	KernelBase!SetFileSecurityW	KernelBase!SetSecurityDescriptorDacl
  KernelBase!SetSecurityDescriptorSacl

• api-ms-win-core-processsnapshot-l1-1-0.dll:
  

  KernelBase!PssDuplicateSnapshot	KernelBase!PssFreeSnapshot	KernelBase!PssQuerySnapshot
  KernelBase!PssWalkMarkerSeekToBeginning	KernelBase!PssWalkSnapshot

• api-ms-win-core-wow64-l1-1-0.dll:
  

  KernelBase!IsWow64Process	KernelBase!Wow64DisableWow64FsRedirection
  KernelBase!Wow64RevertWow64FsRedirection

• api-ms-win-core-file-l2-1-1.dll:
  

  KernelBase!CopyFileExW

  KernelBase!GetFileInformationByHandleEx

  KernelBase!MoveFileExW

• api-ms-win-core-file-l2-1-2.dll:
  

  KernelBase!CopyFileW

• api-ms-win-core-localization-l1-2-1.dll:
  

  KernelBase!GetSystemDefaultLCID	KernelBase!GetThreadLocale
  KernelBase!GetThreadPreferredUILanguages	KernelBase!GetThreadUILanguage
  KernelBase!GetUserDefaultLCID	KernelBase!GetUserGeoID
  KernelBase!IsDBCSLeadByte

• RPCRT4.dll:
  

  RpcStringFreeW

  UuidCreateSequential

  UuidToStringW

• api-ms-win-core-psapi-l1-1-0.dll:
  

  KernelBase!GetMappedFileNameW

  KernelBase!GetProcessMemoryInfo

  KernelBase!QueryFullProcessImageNameW

• api-ms-win-core-realtime-l1-1-0.dll:
  

  KernelBase!QueryThreadCycleTime

• api-ms-win-core-timezone-l1-1-0.dll:
  

  KernelBase!FileTimeToSystemTime

  KernelBase!GetTimeZoneInformation

  KernelBase!SystemTimeToFileTime

• api-ms-win-core-heap-l2-1-0.dll:
  

  KernelBase!GlobalFree

  KernelBase!LocalFree

• api-ms-win-core-winrt-l1-1-0.dll:
  

  combase!RoActivateInstance

  combase!RoGetActivationFactory

• api-ms-win-core-winrt-string-l1-1-0.dll:
  

  combase!WindowsCreateString	combase!WindowsCreateStringReference	combase!WindowsDeleteString
  combase!WindowsGetStringRawBuffer

• api-ms-win-core-debug-l1-1-1.dll:
  

  KernelBase!DebugBreak

  KernelBase!IsDebuggerPresent

  KernelBase!OutputDebugStringA

• api-ms-win-core-processenvironment-l1-2-0.dll:
  

  KernelBase!ExpandEnvironmentStringsW

  KernelBase!GetCurrentDirectoryW

  KernelBase!GetEnvironmentVariableW

• api-ms-win-core-string-l1-1-0.dll:
  

  KernelBase!MultiByteToWideChar

  KernelBase!WideCharToMultiByte

• api-ms-win-core-wow64-l1-1-1.dll:
  

  KernelBase!GetSystemWow64DirectoryA

• api-ms-win-core-string-l2-1-0.dll:
  

  KernelBase!CharUpperW

• api-ms-win-core-version-l1-1-0.dll:
  

  KernelBase!GetFileVersionInfoExW

  KernelBase!GetFileVersionInfoSizeExW

  KernelBase!VerQueryValueW

• api-ms-win-core-registry-l2-2-0.dll:
  

  advapi32!RegDeleteKeyW

• api-ms-win-core-kernel32-legacy-l1-1-1.dll:
  

  kernel32!GetSystemPowerStatus

• api-ms-win-eventlog-legacy-l1-1-0.dll:
  

  advapi32!DeregisterEventSource

  advapi32!RegisterEventSourceW

  advapi32!ReportEventW

• api-ms-win-core-processtopology-obsolete-l1-1-0.dll:
  

  kernel32!GetProcessIoCounters

• api-ms-win-core-toolhelp-l1-1-0.dll:
  

  kernel32!CreateToolhelp32Snapshot

  kernel32!Module32FirstW

  kernel32!Module32NextW

• api-ms-win-core-psapi-obsolete-l1-1-0.dll:
  

  KernelBase!GetModuleFileNameExW

• api-ms-win-core-string-obsolete-l1-1-0.dll:
  

  kernel32!lstrcmpiW

  kernel32!lstrlenW

• api-ms-win-core-localization-obsolete-l1-3-0.dll:
  

  KernelBase!GetUserDefaultUILanguage

• api-ms-win-core-synch-l1-2-1.dll:
  

  KernelBase!WaitForMultipleObjects

• api-ms-win-eventing-controller-l1-1-0.dll:
  

  sechost!StopTraceW

• api-ms-win-eventing-legacy-l1-1-0.dll:
  

  advapi32!QueryTraceW