Windows 8 DLL File Information - wersvc.dll

The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 8, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.

General Information

File Description:	Windows Error Reporting Service
File Version:	6.2.9200.16384 (win8_rtm.120725-1247)
Company:	Microsoft Corporation
Product Name:	Microsoft® Windows® Operating System
DLL popularity	Very Low - There is no any other DLL in system32 directory that is statically linked to this file.
File Size:	74 KB
Total Number of Exported Functions:	2
Total Number of Exported Functions With Names:	2

Section Headers

Name	Virtual Address	Raw Data Size	% of File	Characteristics	Section Contains...
.text	0x00001000	60,416 Bytes	79.7%	Read, Execute	Code
.data	0x00010000	512 Bytes	0.7%	Write, Read	Initialized Data
.idata	0x00011000	6,656 Bytes	8.8%	Read	Initialized Data
.rsrc	0x00013000	2,560 Bytes	3.4%	Read	Initialized Data
.reloc	0x00014000	4,608 Bytes	6.1%	Read, Discardable	Initialized Data

Static Linking

wersvc.dll is statically linked to the following files:

msvcrt.dll
ntdll.dll
api-ms-win-core-libraryloader-l1-1-1.dll
api-ms-win-core-processthreads-l1-1-1.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-security-base-l1-2-0.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-threadpool-l1-2-0.dll
api-ms-win-service-management-l1-1-0.dll
api-ms-win-service-management-l2-1-0.dll
api-ms-win-core-heap-l1-2-0.dll
api-ms-win-service-core-l1-1-1.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-core-namespace-l1-1-0.dll
api-ms-win-core-interlocked-l1-2-0.dll
api-ms-win-core-util-l1-1-0.dll
api-ms-win-core-memory-l1-1-1.dll
api-ms-win-core-sysinfo-l1-2-0.dll
api-ms-win-core-psapi-l1-1-0.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-threadpool-legacy-l1-1-0.dll
api-ms-win-core-kernel32-legacy-l1-1-0.dll
api-ms-win-core-heap-obsolete-l1-1-0.dll
api-ms-win-core-timezone-l1-1-0.dll
api-ms-win-core-version-l1-1-0.dll
api-ms-win-eventing-classicprovider-l1-1-0.dll
api-ms-win-core-delayload-l1-1-1.dll
api-ms-win-appmodel-runtime-l1-1-0.dll
api-ms-win-core-string-obsolete-l1-1-0.dll
api-ms-win-core-psapi-obsolete-l1-1-0.dll

This means that when wersvc.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, wersvc.dll won't be loaded.

General Resources Information

Resource Type	Number of Items	Total Size	% of File
Icons	0	0 Bytes	0.0%
Animated Icons	0	0 Bytes	0.0%
Cursors	0	0 Bytes	0.0%
Animated Cursors	0	0 Bytes	0.0%
Bitmaps	0	0 Bytes	0.0%
AVI Files	0	0 Bytes	0.0%
Dialog-Boxes	0	0 Bytes	0.0%
HTML Related Files	0	0 Bytes	0.0%
Menus	0	0 Bytes	0.0%
Strings	2	744 Bytes	1.0%
Type Libraries	0	0 Bytes	0.0%
Manifest	0	0 Bytes	0.0%
All Others	4	2,990 Bytes	3.9%
Total	6	3,734 Bytes	4.9%

Icons in this file

No icons found in this file

Cursors in this file

No cursors found in this file

Dialog-boxes list (up to 200 dialogs)

No dialog resources in this file.

String resources in this dll (up to 200 strings)

String ID	String Text
100	Windows Error Reporting Service
101	Allows errors to be reported when programs stop working or responding and allows existing solutions to be delivered. Also allows logs to be generated for diagnostic and repair services. If this service is stopped, error reporting might not work correctly and results of diagnostic services and repairs might not be displayed.

COM Classes/Interfaces

There is no type library in this file with COM classes/interfaces information

Exported Functions List

The following functions are exported by this dll:

ServiceMain

SvchostPushServiceGlobals

Imported Functions List

The following functions are imported by this dll:

• msvcrt.dll:
  

  _XcptFilter	__dllonexit
  _amsg_exit	_except_handler4_common
  _initterm	_lock
  _onexit	_unlock
  _vsnwprintf	free
  malloc	memset
  void * __cdecl operator new(unsigned int)	void __cdecl operator delete(void *)
  wcschr	wcsrchr

• ntdll.dll:
  

  AlpcGetMessageAttribute	AlpcInitializeMessageAttribute	EtwGetTraceEnableFlags
  EtwGetTraceEnableLevel	EtwGetTraceLoggerHandle	EtwRegisterTraceGuidsW
  EtwTraceMessage	EtwUnregisterTraceGuids	NtAlpcAcceptConnectPort
  NtAlpcConnectPort	NtAlpcCreatePort	NtAlpcOpenSenderProcess
  NtAlpcOpenSenderThread	NtAlpcSendWaitReceivePort	NtClose
  NtDuplicateToken	NtOpenEvent	NtQueryInformationProcess
  NtQueryInformationToken	NtSetSystemInformation	NtTerminateProcess
  RtlAddSIDToBoundaryDescriptor	RtlCreateBoundaryDescriptor	RtlCreateServiceSid
  RtlDeleteBoundaryDescriptor	RtlInitUnicodeString	RtlUpcaseUnicodeChar
  ShipAssert	WinSqmAddToStream

• api-ms-win-core-libraryloader-l1-1-1.dll:
  

  KernelBase!DisableThreadLibraryCalls	KernelBase!FreeLibrary	KernelBase!GetProcAddress
  KernelBase!LoadLibraryExW

• api-ms-win-core-processthreads-l1-1-1.dll:
  

  KernelBase!DeleteProcThreadAttributeList	KernelBase!InitializeProcThreadAttributeList
  KernelBase!OpenProcessToken	KernelBase!OpenThreadToken
  KernelBase!UpdateProcThreadAttribute	kernel32!CreateProcessAsUserW
  kernel32!CreateProcessW	kernel32!CreateThread
  kernel32!GetCurrentProcess	kernel32!GetCurrentProcessId
  kernel32!GetCurrentThreadId	kernel32!GetExitCodeProcess
  kernel32!GetProcessId	kernel32!GetProcessTimes
  kernel32!GetThreadId	kernel32!OpenProcess
  kernel32!OpenThread	kernel32!ProcessIdToSessionId
  kernel32!ResumeThread	kernel32!TerminateProcess

• api-ms-win-core-errorhandling-l1-1-1.dll:
  

  KernelBase!GetLastError

  KernelBase!SetUnhandledExceptionFilter

  KernelBase!UnhandledExceptionFilter

• api-ms-win-security-base-l1-2-0.dll:
  

  KernelBase!AllocateAndInitializeSid	KernelBase!CheckTokenMembership	KernelBase!CreateWellKnownSid
  KernelBase!DuplicateToken	KernelBase!DuplicateTokenEx	KernelBase!FreeSid
  KernelBase!GetSidSubAuthority	KernelBase!GetSidSubAuthorityCount	KernelBase!GetTokenInformation
  KernelBase!ImpersonateLoggedOnUser	KernelBase!InitializeSecurityDescriptor	KernelBase!RevertToSelf
  KernelBase!SetSecurityDescriptorDacl	KernelBase!SetTokenInformation

• api-ms-win-core-synch-l1-2-0.dll:
  

  KernelBase!CreateEventW	KernelBase!CreateMutexW	KernelBase!OpenEventW
  KernelBase!ResetEvent	KernelBase!SetEvent	KernelBase!Sleep
  KernelBase!WaitForMultipleObjectsEx	KernelBase!WaitForSingleObject	ntdll!RtlDeleteCriticalSection
  ntdll!RtlEnterCriticalSection	ntdll!RtlInitializeCriticalSection	ntdll!RtlLeaveCriticalSection

• api-ms-win-core-handle-l1-1-0.dll:
  

  KernelBase!CloseHandle

  KernelBase!DuplicateHandle

• api-ms-win-core-threadpool-l1-2-0.dll:
  

  KernelBase!CreateThreadpoolCleanupGroup	KernelBase!CreateThreadpoolWait
  KernelBase!TrySubmitThreadpoolCallback	ntdll!TpCallbackLeaveCriticalSectionOnCompletion
  ntdll!TpReleaseCleanupGroup	ntdll!TpReleaseCleanupGroupMembers
  ntdll!TpReleaseWait	ntdll!TpSetWait
  ntdll!TpWaitForWait

• api-ms-win-service-management-l1-1-0.dll:
  

  sechost!CloseServiceHandle

  sechost!OpenSCManagerW

  sechost!OpenServiceW

• api-ms-win-service-management-l2-1-0.dll:
  

  sechost!QueryServiceConfigW

• api-ms-win-core-heap-l1-2-0.dll:
  

  KernelBase!GetProcessHeap

  ntdll!RtlAllocateHeap

  ntdll!RtlFreeHeap

• api-ms-win-service-core-l1-1-1.dll:
  

  sechost!RegisterServiceCtrlHandlerExW

  sechost!SetServiceStatus

• api-ms-win-core-registry-l1-1-0.dll:
  

  KernelBase!RegCloseKey	KernelBase!RegCreateKeyExW	KernelBase!RegGetValueW	KernelBase!RegOpenKeyExW
  KernelBase!RegSetValueExW

• api-ms-win-core-namespace-l1-1-0.dll:
  

  KernelBase!ClosePrivateNamespace

  KernelBase!CreatePrivateNamespaceW

  KernelBase!OpenPrivateNamespaceW

• api-ms-win-core-interlocked-l1-2-0.dll:
  

  KernelBase!InterlockedCompareExchange	KernelBase!InterlockedDecrement	KernelBase!InterlockedExchange
  KernelBase!InterlockedIncrement

• api-ms-win-core-util-l1-1-0.dll:
  

  ntdll!RtlDecodePointer

  ntdll!RtlEncodePointer

• api-ms-win-core-memory-l1-1-1.dll:
  

  KernelBase!CreateFileMappingW

  KernelBase!MapViewOfFile

  KernelBase!ReadProcessMemory

  KernelBase!UnmapViewOfFile

• api-ms-win-core-sysinfo-l1-2-0.dll:
  

  KernelBase!GetSystemDirectoryW	KernelBase!GetSystemTime	KernelBase!GetSystemTimeAsFileTime
  KernelBase!GetTickCount

• api-ms-win-core-psapi-l1-1-0.dll:
  

  KernelBase!QueryFullProcessImageNameW

• api-ms-win-core-profile-l1-1-0.dll:
  

  ntdll!RtlQueryPerformanceCounter

• api-ms-win-core-threadpool-legacy-l1-1-0.dll:
  

  KernelBase!UnregisterWaitEx

• api-ms-win-core-kernel32-legacy-l1-1-0.dll:
  

  kernel32!LoadLibraryW

  kernel32!WTSGetActiveConsoleSessionId

• api-ms-win-core-heap-obsolete-l1-1-0.dll:
  

  kernel32!LocalFree

• api-ms-win-core-timezone-l1-1-0.dll:
  

  KernelBase!SystemTimeToFileTime

• api-ms-win-core-version-l1-1-0.dll:
  

  KernelBase!GetFileVersionInfoExW

  KernelBase!GetFileVersionInfoSizeExW

  KernelBase!VerQueryValueW

• api-ms-win-eventing-classicprovider-l1-1-0.dll:
  

  ntdll!EtwTraceMessage

• api-ms-win-core-delayload-l1-1-1.dll:
  

  kernel32!DelayLoadFailureHook

  ntdll!LdrResolveDelayLoadedAPI

• api-ms-win-appmodel-runtime-l1-1-0.dll:
  

  kernel32!GetApplicationUserModelId

  kernel32!GetPackageFullName

• api-ms-win-core-string-obsolete-l1-1-0.dll:
  

  kernel32!lstrlenW

• api-ms-win-core-psapi-obsolete-l1-1-0.dll:
  

  KernelBase!GetModuleFileNameExW