Windows 10 DLL File Information - wersvc.dll

The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 10, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.

General Information

File Description:	Windows Error Reporting Service
File Version:	10.0.10130.0 (fbl_impressive.150522-2224)
Company:	Microsoft Corporation
Product Name:	Microsoft® Windows® Operating System
DLL popularity	Very Low - There is no any other DLL in system32 directory that is statically linked to this file.
File Size:	102 KB
Total Number of Exported Functions:	2
Total Number of Exported Functions With Names:	2

Section Headers

Name	Virtual Address	Raw Data Size	% of File	Characteristics	Section Contains...
.text	0x00001000	84,992 Bytes	81.0%	Read, Execute	Code
.data	0x00016000	512 Bytes	0.5%	Write, Read	Initialized Data
.idata	0x00017000	9,216 Bytes	8.8%	Read	Initialized Data
.didat	0x0001a000	512 Bytes	0.5%	Write, Read	Initialized Data
.rsrc	0x0001b000	2,560 Bytes	2.4%	Read	Initialized Data
.reloc	0x0001c000	6,144 Bytes	5.9%	Read, Discardable	Initialized Data

Static Linking

wersvc.dll is statically linked to the following files:

msvcrt.dll
api-ms-win-core-libraryloader-l1-2-0.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-2.dll
api-ms-win-core-sysinfo-l1-2-1.dll
api-ms-win-core-errorhandling-l1-1-1.dll
ntdll.dll
profapi.dll
CRYPTSP.dll
api-ms-win-security-base-l1-2-0.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-threadpool-l1-2-0.dll
api-ms-win-service-management-l1-1-0.dll
api-ms-win-service-management-l2-1-0.dll
api-ms-win-core-heap-l1-2-0.dll
api-ms-win-service-core-l1-1-1.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-security-sddl-l1-1-0.dll
api-ms-win-core-namespace-l1-1-0.dll
api-ms-win-core-heap-l2-1-0.dll
api-ms-win-core-util-l1-1-0.dll
api-ms-win-core-memory-l1-1-2.dll
api-ms-win-core-synch-l1-2-1.dll
api-ms-win-core-psapi-l1-1-0.dll
api-ms-win-eventing-provider-l1-1-0.dll
api-ms-win-core-wow64-l1-1-0.dll
RPCRT4.dll
api-ms-win-core-version-l1-1-0.dll
api-ms-win-core-processsnapshot-l1-1-0.dll
api-ms-win-core-file-l1-2-1.dll
api-ms-win-core-com-l1-1-1.dll
api-ms-win-core-threadpool-legacy-l1-1-0.dll
api-ms-win-security-provider-l1-1-0.dll
api-ms-win-eventlog-legacy-l1-1-0.dll
api-ms-win-core-string-obsolete-l1-1-0.dll
api-ms-win-core-psapi-obsolete-l1-1-0.dll
wer.dll
api-ms-win-core-apiquery-l1-1-0.dll
api-ms-win-core-delayload-l1-1-1.dll
api-ms-win-eventing-controller-l1-1-0.dll
api-ms-win-core-file-l2-1-1.dll
api-ms-win-eventing-legacy-l1-1-0.dll
api-ms-win-core-kernel32-legacy-l1-1-1.dll
WerEtw.dll

This means that when wersvc.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, wersvc.dll won't be loaded.

General Resources Information

Resource Type	Number of Items	Total Size	% of File
Icons	0	0 Bytes	0.0%
Animated Icons	0	0 Bytes	0.0%
Cursors	0	0 Bytes	0.0%
Animated Cursors	0	0 Bytes	0.0%
Bitmaps	0	0 Bytes	0.0%
AVI Files	0	0 Bytes	0.0%
Dialog-Boxes	0	0 Bytes	0.0%
HTML Related Files	0	0 Bytes	0.0%
Menus	0	0 Bytes	0.0%
Strings	2	744 Bytes	0.7%
Type Libraries	0	0 Bytes	0.0%
Manifest	0	0 Bytes	0.0%
All Others	4	3,014 Bytes	2.9%
Total	6	3,758 Bytes	3.6%

Icons in this file

No icons found in this file

Cursors in this file

No cursors found in this file

Dialog-boxes list (up to 1000 dialogs)

No dialog resources in this file.

String resources in this dll (up to 1000 strings)

String ID	String Text
100	Windows Error Reporting Service
101	Allows errors to be reported when programs stop working or responding and allows existing solutions to be delivered. Also allows logs to be generated for diagnostic and repair services. If this service is stopped, error reporting might not work correctly and results of diagnostic services and repairs might not be displayed.

COM Classes/Interfaces

There is no type library in this file with COM classes/interfaces information

Exported Functions List

The following functions are exported by this dll:

ServiceMain

SvchostPushServiceGlobals

Imported Functions List

The following functions are imported by this dll:

• msvcrt.dll:
  

  _XcptFilter	__CxxFrameHandler	__dllonexit	_amsg_exit
  _callnewh	_except_handler4_common	_initterm	_lock
  _onexit	_unlock	free	malloc
  memcpy	memset	void __cdecl terminate(void)

• api-ms-win-core-libraryloader-l1-2-0.dll:
  

  KernelBase!DisableThreadLibraryCalls	KernelBase!FreeLibrary	KernelBase!GetProcAddress
  KernelBase!LoadLibraryExW

• api-ms-win-core-synch-l1-2-0.dll:
  

  KernelBase!CreateEventW	KernelBase!CreateMutexW	KernelBase!OpenEventW
  KernelBase!ResetEvent	KernelBase!SetEvent	KernelBase!Sleep
  KernelBase!WaitForMultipleObjectsEx	KernelBase!WaitForSingleObject	ntdll!RtlDeleteCriticalSection
  ntdll!RtlEnterCriticalSection	ntdll!RtlInitializeCriticalSection	ntdll!RtlLeaveCriticalSection

• api-ms-win-core-profile-l1-1-0.dll:
  

  ntdll!RtlQueryPerformanceCounter

• api-ms-win-core-processthreads-l1-1-2.dll:
  

  KernelBase!DeleteProcThreadAttributeList	KernelBase!InitializeProcThreadAttributeList
  KernelBase!OpenProcessToken	KernelBase!OpenThreadToken
  KernelBase!UpdateProcThreadAttribute	kernel32!CreateProcessAsUserW
  kernel32!CreateProcessW	kernel32!CreateThread
  kernel32!GetCurrentProcess	kernel32!GetCurrentProcessId
  kernel32!GetCurrentThreadId	kernel32!GetExitCodeProcess
  kernel32!GetProcessId	kernel32!GetProcessTimes
  kernel32!GetThreadId	kernel32!OpenProcess
  kernel32!OpenThread	kernel32!ProcessIdToSessionId
  kernel32!ResumeThread	kernel32!TerminateProcess

• api-ms-win-core-sysinfo-l1-2-1.dll:
  

  KernelBase!GetNativeSystemInfo	KernelBase!GetSystemDirectoryW	KernelBase!GetSystemTimeAsFileTime
  KernelBase!GetTickCount

• api-ms-win-core-errorhandling-l1-1-1.dll:
  

  KernelBase!GetLastError

  KernelBase!SetUnhandledExceptionFilter

  KernelBase!UnhandledExceptionFilter

• ntdll.dll:
  

  AlpcGetMessageAttribute	AlpcInitializeMessageAttribute	EtwGetTraceEnableFlags
  EtwGetTraceEnableLevel	EtwGetTraceLoggerHandle	EtwRegisterTraceGuidsW
  EtwTraceMessage	EtwUnregisterTraceGuids	NtAlpcAcceptConnectPort
  NtAlpcConnectPort	NtAlpcCreatePort	NtAlpcOpenSenderProcess
  NtAlpcOpenSenderThread	NtAlpcSendWaitReceivePort	NtClose
  NtDuplicateToken	NtOpenEvent	NtQueryInformationProcess
  NtQueryInformationToken	NtSetInformationProcess	NtSetSystemInformation
  NtTerminateProcess	RtlAddSIDToBoundaryDescriptor	RtlAllocateHeap
  RtlCompareUnicodeString	RtlCreateBoundaryDescriptor	RtlCreateServiceSid
  RtlDeleteBoundaryDescriptor	RtlFreeHeap	RtlInitUnicodeString
  RtlNtStatusToDosError	RtlNtStatusToDosErrorNoTeb	RtlQueryResourcePolicy
  RtlSetThreadErrorMode	ShipAssert	_vscwprintf
  _vsnwprintf	_wcsicmp	_wcsnicmp
  iswspace	memmove	towlower
  wcschr	wcsrchr	wcsspn

• profapi.dll:
  

• CRYPTSP.dll:
  

  CryptAcquireContextW

  CryptGenRandom

  CryptReleaseContext

• api-ms-win-security-base-l1-2-0.dll:
  

  KernelBase!AllocateAndInitializeSid	KernelBase!CheckTokenMembership	KernelBase!CreateWellKnownSid
  KernelBase!DuplicateToken	KernelBase!DuplicateTokenEx	KernelBase!FreeSid
  KernelBase!GetSidSubAuthority	KernelBase!GetSidSubAuthorityCount	KernelBase!GetTokenInformation
  KernelBase!ImpersonateLoggedOnUser	KernelBase!InitializeSecurityDescriptor	KernelBase!RevertToSelf
  KernelBase!SetSecurityDescriptorDacl	KernelBase!SetTokenInformation

• api-ms-win-core-handle-l1-1-0.dll:
  

  KernelBase!CloseHandle

  KernelBase!DuplicateHandle

• api-ms-win-core-threadpool-l1-2-0.dll:
  

  KernelBase!CreateThreadpoolCleanupGroup	KernelBase!CreateThreadpoolWait
  KernelBase!TrySubmitThreadpoolCallback	ntdll!TpCallbackLeaveCriticalSectionOnCompletion
  ntdll!TpReleaseCleanupGroup	ntdll!TpReleaseCleanupGroupMembers
  ntdll!TpReleaseWait	ntdll!TpSetWait
  ntdll!TpWaitForWait

• api-ms-win-service-management-l1-1-0.dll:
  

  sechost!CloseServiceHandle

  sechost!OpenSCManagerW

  sechost!OpenServiceW

• api-ms-win-service-management-l2-1-0.dll:
  

  sechost!QueryServiceConfigW

• api-ms-win-core-heap-l1-2-0.dll:
  

  KernelBase!GetProcessHeap

  ntdll!RtlAllocateHeap

  ntdll!RtlFreeHeap

• api-ms-win-service-core-l1-1-1.dll:
  

  sechost!RegisterServiceCtrlHandlerExW

  sechost!SetServiceStatus

• api-ms-win-core-registry-l1-1-0.dll:
  

  KernelBase!RegCloseKey	KernelBase!RegCreateKeyExW	KernelBase!RegEnumKeyExW	KernelBase!RegGetValueW
  KernelBase!RegOpenKeyExW	KernelBase!RegSetValueExW

• api-ms-win-security-sddl-l1-1-0.dll:
  

  sechost!ConvertSidToStringSidW

  sechost!ConvertStringSecurityDescriptorToSecurityDescriptorW

• api-ms-win-core-namespace-l1-1-0.dll:
  

  KernelBase!ClosePrivateNamespace

  KernelBase!CreatePrivateNamespaceW

  KernelBase!OpenPrivateNamespaceW

• api-ms-win-core-heap-l2-1-0.dll:
  

  KernelBase!LocalFree

• api-ms-win-core-util-l1-1-0.dll:
  

  ntdll!RtlDecodePointer

  ntdll!RtlEncodePointer

• api-ms-win-core-memory-l1-1-2.dll:
  

  KernelBase!CreateFileMappingW

  KernelBase!MapViewOfFile

  KernelBase!ReadProcessMemory

  KernelBase!UnmapViewOfFile

• api-ms-win-core-synch-l1-2-1.dll:
  

  KernelBase!WaitForMultipleObjects

• api-ms-win-core-psapi-l1-1-0.dll:
  

  KernelBase!QueryFullProcessImageNameW

• api-ms-win-eventing-provider-l1-1-0.dll:
  

  ntdll!EtwEventRegister

  ntdll!EtwEventSetInformation

  ntdll!EtwEventUnregister

  ntdll!EtwEventWriteTransfer

• api-ms-win-core-wow64-l1-1-0.dll:
  

  KernelBase!IsWow64Process

• RPCRT4.dll:
  

  UuidCreate

• api-ms-win-core-version-l1-1-0.dll:
  

  KernelBase!GetFileVersionInfoExW

  KernelBase!GetFileVersionInfoSizeExW

  KernelBase!VerQueryValueW

• api-ms-win-core-processsnapshot-l1-1-0.dll:
  

  KernelBase!PssCaptureSnapshot

  KernelBase!PssDuplicateSnapshot

• api-ms-win-core-file-l1-2-1.dll:
  

  KernelBase!CreateDirectoryW	KernelBase!CreateFileW	KernelBase!DeleteFileW	KernelBase!FindClose
  KernelBase!FindFirstFileW	KernelBase!FindNextFileW	KernelBase!GetFileAttributesW	KernelBase!GetLongPathNameW
  KernelBase!GetTempFileNameW	KernelBase!GetTempPathW	KernelBase!SetFileAttributesW

• api-ms-win-core-com-l1-1-1.dll:
  

  combase!CLSIDFromString	combase!CoCreateGuid	combase!CoGetMalloc	combase!CoInitializeEx
  combase!CoTaskMemAlloc	combase!CoTaskMemFree	combase!CoUninitialize	combase!StringFromGUID2

• api-ms-win-core-threadpool-legacy-l1-1-0.dll:
  

  KernelBase!UnregisterWaitEx

• api-ms-win-security-provider-l1-1-0.dll:
  

  ntmarta!SetEntriesInAclW

• api-ms-win-eventlog-legacy-l1-1-0.dll:
  

  advapi32!DeregisterEventSource

  advapi32!RegisterEventSourceW

  advapi32!ReportEventW

• api-ms-win-core-string-obsolete-l1-1-0.dll:
  

  kernel32!lstrlenW

• api-ms-win-core-psapi-obsolete-l1-1-0.dll:
  

  KernelBase!GetModuleFileNameExW

• wer.dll:
  

  WerpCloseStore

  WerpOpenMachineArchive

  WerpOpenMachineQueue

  WerpPruneStore

• api-ms-win-core-apiquery-l1-1-0.dll:
  

  ntdll!ApiSetQueryApiSetPresence

• api-ms-win-core-delayload-l1-1-1.dll:
  

  KernelBase!DelayLoadFailureHook

  KernelBase!ResolveDelayLoadedAPI

• api-ms-win-eventing-controller-l1-1-0.dll:
  

  sechost!ControlTraceW

  sechost!EnableTraceEx2

  sechost!StartTraceW

• api-ms-win-core-file-l2-1-1.dll:
  

  KernelBase!CopyFileExW

• api-ms-win-eventing-legacy-l1-1-0.dll:
  

  advapi32!EnableTraceEx

  advapi32!QueryTraceW

• api-ms-win-core-kernel32-legacy-l1-1-1.dll:
  

  kernel32!MoveFileW

• WerEtw.dll:
  

  WerMergeEtl