Windows 8 DLL File Information - regsvc.dll

The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 8, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.

General Information

File Description:	Remote Registry Service
File Version:	6.2.9200.16384 (win8_rtm.120725-1247)
Company:	Microsoft Corporation
Product Name:	Microsoft® Windows® Operating System
DLL popularity	Very Low - There is no any other DLL in system32 directory that is statically linked to this file.
File Size:	114 KB
Total Number of Exported Functions:	2
Total Number of Exported Functions With Names:	2

Section Headers

Name	Virtual Address	Raw Data Size	% of File	Characteristics	Section Contains...
.text	0x00001000	98,816 Bytes	84.3%	Read, Execute	Code
.data	0x0001a000	2,048 Bytes	1.7%	Write, Read	Initialized Data
.idata	0x0001c000	8,192 Bytes	7.0%	Read	Initialized Data
.rsrc	0x0001e000	1,536 Bytes	1.3%	Read	Initialized Data
.reloc	0x0001f000	5,632 Bytes	4.8%	Read, Discardable	Initialized Data

Static Linking

regsvc.dll is statically linked to the following files:

msvcrt.dll
ntdll.dll
api-ms-win-core-synch-l1-2-0.dll
RPCRT4.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-service-core-l1-1-1.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-interlocked-l1-2-0.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-1.dll
api-ms-win-core-sysinfo-l1-2-0.dll
api-ms-win-core-threadpool-legacy-l1-1-0.dll
api-ms-win-core-apiquery-l1-1-0.dll
api-ms-win-security-base-l1-2-0.dll
api-ms-win-core-heap-l1-2-0.dll
api-ms-win-core-processenvironment-l1-2-0.dll
api-ms-win-core-file-l1-2-0.dll
api-ms-win-core-memory-l1-1-1.dll
api-ms-win-core-libraryloader-l1-1-1.dll
api-ms-win-core-file-l2-1-0.dll
api-ms-win-core-kernel32-legacy-l1-1-0.dll
api-ms-win-core-string-obsolete-l1-1-0.dll
api-ms-win-core-heap-obsolete-l1-1-0.dll
api-ms-win-core-wow64-l1-1-0.dll
api-ms-win-core-delayload-l1-1-1.dll

This means that when regsvc.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, regsvc.dll won't be loaded.

General Resources Information

Resource Type	Number of Items	Total Size	% of File
Icons	0	0 Bytes	0.0%
Animated Icons	0	0 Bytes	0.0%
Cursors	0	0 Bytes	0.0%
Animated Cursors	0	0 Bytes	0.0%
Bitmaps	0	0 Bytes	0.0%
AVI Files	0	0 Bytes	0.0%
Dialog-Boxes	0	0 Bytes	0.0%
HTML Related Files	0	0 Bytes	0.0%
Menus	0	0 Bytes	0.0%
Strings	2	554 Bytes	0.5%
Type Libraries	0	0 Bytes	0.0%
Manifest	0	0 Bytes	0.0%
All Others	2	1,108 Bytes	0.9%
Total	4	1,662 Bytes	1.4%

Icons in this file

No icons found in this file

Cursors in this file

No cursors found in this file

Dialog-boxes list (up to 200 dialogs)

No dialog resources in this file.

String resources in this dll (up to 200 strings)

String ID	String Text
1	Remote Registry
2	Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start.

COM Classes/Interfaces

There is no type library in this file with COM classes/interfaces information

Exported Functions List

The following functions are exported by this dll:

ServiceMain

SvchostPushServiceGlobals

Imported Functions List

The following functions are imported by this dll:

• msvcrt.dll:
  

  _XcptFilter	_amsg_exit	_except_handler4_common	_ftol2
  _initterm	_ultow	_vsnwprintf	_wcsicmp
  _wcsnicmp	free	iswalpha	malloc
  mbstowcs	memcmp	memcpy	memmove
  memset	wcschr	wcsncmp	wcsrchr
  wcstoul

• ntdll.dll:
  

  DbgPrint	EtwGetTraceEnableFlags	EtwGetTraceEnableLevel
  EtwGetTraceLoggerHandle	EtwRegisterTraceGuidsW	EtwTraceMessage
  EtwUnregisterTraceGuids	NtAccessCheck	NtClose
  NtCreateKey	NtDeleteKey	NtDeleteValueKey
  NtEnumerateKey	NtEnumerateValueKey	NtFlushKey
  NtLoadKey	NtOpenFile	NtOpenKey
  NtOpenKeyEx	NtOpenProcessToken	NtOpenThreadToken
  NtQueryInformationFile	NtQueryInformationProcess	NtQueryInformationThread
  NtQueryInformationToken	NtQueryKey	NtQueryMultipleValueKey
  NtQueryPerformanceCounter	NtQuerySecurityObject	NtQueryValueKey
  NtReadFile	NtReplaceKey	NtRestoreKey
  NtSaveKey	NtSaveKeyEx	NtSetInformationThread
  NtSetSecurityObject	NtUnloadKey	NtWaitForMultipleObjects
  NtWaitForSingleObject	NtWriteFile	RtlAcquireResourceExclusive
  RtlAcquireResourceShared	RtlAcquireSRWLockExclusive	RtlAcquireSRWLockShared
  RtlAddAccessAllowedAce	RtlAddAccessAllowedAceEx	RtlAllocateAndInitializeSid
  RtlAllocateHeap	RtlAppendUnicodeStringToString	RtlCompareUnicodeString
  RtlCopyUnicodeString	RtlCreateAcl	RtlCreateSecurityDescriptor
  RtlCreateUnicodeString	RtlCreateUnicodeStringFromAsciiz	RtlDeleteCriticalSection
  RtlDeleteElementGenericTableAvl	RtlDeleteResource	RtlDllShutdownInProgress
  RtlDosPathNameToRelativeNtPathName_U	RtlEnterCriticalSection	RtlEnumerateGenericTableAvl
  RtlFreeAnsiString	RtlFreeHeap	RtlFreeSid
  RtlGetAce	RtlGetDaclSecurityDescriptor	RtlGetGroupSecurityDescriptor
  RtlGetOwnerSecurityDescriptor	RtlGetThreadPreferredUILanguages	RtlGetVersion
  RtlInitUnicodeString	RtlInitUnicodeStringEx	RtlInitializeCriticalSection
  RtlInitializeGenericTableAvl	RtlInitializeResource	RtlInsertElementGenericTableAvl
  RtlIntegerToUnicodeString	RtlLeaveCriticalSection	RtlLengthRequiredSid
  RtlLengthSecurityDescriptor	RtlLengthSid	RtlLookupElementGenericTableAvl
  RtlMakeSelfRelativeSD	RtlNtStatusToDosError	RtlOpenCurrentUser
  RtlQueryInformationAcl	RtlQueryPerformanceCounter	RtlReAllocateHeap
  RtlReleaseRelativeName	RtlReleaseResource	RtlReleaseSRWLockExclusive
  RtlReleaseSRWLockShared	RtlRunOnceBeginInitialize	RtlRunOnceExecuteOnce
  RtlSetDaclSecurityDescriptor	RtlSetGroupSecurityDescriptor	RtlSetOwnerSecurityDescriptor
  RtlUnicodeToMultiByteN	RtlValidRelativeSecurityDescriptor	RtlValidSecurityDescriptor
  RtlWaitOnAddress	RtlWakeAddressAll	WinSqmAddToStream

• api-ms-win-core-synch-l1-2-0.dll:
  

  KernelBase!CreateEventW	KernelBase!CreateMutexW	KernelBase!ReleaseMutex
  KernelBase!ResetEvent	KernelBase!SetEvent	KernelBase!Sleep
  KernelBase!WaitForSingleObject	ntdll!RtlDeleteCriticalSection	ntdll!RtlEnterCriticalSection
  ntdll!RtlInitializeCriticalSection	ntdll!RtlLeaveCriticalSection

• RPCRT4.dll:
  

  NdrServerCall2	RpcImpersonateClient	RpcRaiseException
  RpcRevertToSelf	RpcServerInqCallAttributesW	RpcServerInterfaceGroupActivate
  RpcServerInterfaceGroupClose	RpcServerInterfaceGroupCreateW	RpcServerInterfaceGroupDeactivate
  RpcServerRegisterAuthInfoW

• api-ms-win-core-registry-l1-1-0.dll:
  

  KernelBase!RegCloseKey

  KernelBase!RegGetValueW

  KernelBase!RegOpenKeyExW

  KernelBase!RegSetValueExW

• api-ms-win-service-core-l1-1-1.dll:
  

  sechost!RegisterServiceCtrlHandlerExW

  sechost!SetServiceStatus

• api-ms-win-core-errorhandling-l1-1-1.dll:
  

  KernelBase!GetLastError	KernelBase!SetErrorMode	KernelBase!SetUnhandledExceptionFilter
  KernelBase!UnhandledExceptionFilter	ntdll!RtlRestoreLastWin32Error

• api-ms-win-core-handle-l1-1-0.dll:
  

  KernelBase!CloseHandle

• api-ms-win-core-interlocked-l1-2-0.dll:
  

  KernelBase!InterlockedCompareExchange	KernelBase!InterlockedDecrement	KernelBase!InterlockedExchange
  KernelBase!InterlockedIncrement

• api-ms-win-core-profile-l1-1-0.dll:
  

  ntdll!RtlQueryPerformanceCounter

• api-ms-win-core-processthreads-l1-1-1.dll:
  

  kernel32!CreateThread	kernel32!GetCurrentProcess	kernel32!GetCurrentProcessId	kernel32!GetCurrentThread
  kernel32!GetCurrentThreadId	kernel32!TerminateProcess

• api-ms-win-core-sysinfo-l1-2-0.dll:
  

  KernelBase!GetSystemDirectoryW	KernelBase!GetSystemTime	KernelBase!GetSystemTimeAsFileTime
  KernelBase!GetSystemWindowsDirectoryW	KernelBase!GetTickCount

• api-ms-win-core-threadpool-legacy-l1-1-0.dll:
  

  KernelBase!UnregisterWaitEx

• api-ms-win-core-apiquery-l1-1-0.dll:
  

  ntdll!ApiSetQueryApiSetPresence

• api-ms-win-security-base-l1-2-0.dll:
  

  KernelBase!InitializeSecurityDescriptor

  KernelBase!SetSecurityDescriptorDacl

• api-ms-win-core-heap-l1-2-0.dll:
  

  KernelBase!GetProcessHeap

  ntdll!RtlAllocateHeap

  ntdll!RtlFreeHeap

  ntdll!RtlReAllocateHeap

• api-ms-win-core-processenvironment-l1-2-0.dll:
  

  KernelBase!ExpandEnvironmentStringsW

  KernelBase!SearchPathW

• api-ms-win-core-file-l1-2-0.dll:
  

  KernelBase!CreateFileW	KernelBase!DeleteFileW	KernelBase!FindClose
  KernelBase!FindFirstFileExW	KernelBase!FindNextFileW	KernelBase!GetFileSize
  KernelBase!GetFileTime	KernelBase!SetFileInformationByHandle

• api-ms-win-core-memory-l1-1-1.dll:
  

  KernelBase!CreateFileMappingW

  KernelBase!MapViewOfFile

  KernelBase!UnmapViewOfFile

• api-ms-win-core-libraryloader-l1-1-1.dll:
  

  KernelBase!FindResourceExW	KernelBase!FreeLibrary	KernelBase!GetModuleFileNameW	KernelBase!GetProcAddress
  KernelBase!LoadLibraryExW	KernelBase!LoadResource	KernelBase!LockResource	KernelBase!SizeofResource

• api-ms-win-core-file-l2-1-0.dll:
  

  KernelBase!CopyFileExW

• api-ms-win-core-kernel32-legacy-l1-1-0.dll:
  

  kernel32!DosDateTimeToFileTime

  kernel32!FileTimeToDosDateTime

  kernel32!GetComputerNameW

• api-ms-win-core-string-obsolete-l1-1-0.dll:
  

  kernel32!lstrcmpiA

  kernel32!lstrcmpiW

  kernel32!lstrlenW

• api-ms-win-core-heap-obsolete-l1-1-0.dll:
  

  kernel32!LocalAlloc

  kernel32!LocalFree

• api-ms-win-core-wow64-l1-1-0.dll:
  

  KernelBase!IsWow64Process	KernelBase!Wow64DisableWow64FsRedirection
  KernelBase!Wow64RevertWow64FsRedirection

• api-ms-win-core-delayload-l1-1-1.dll:
  

  kernel32!DelayLoadFailureHook

  ntdll!LdrResolveDelayLoadedAPI