# wersvc-09.dll-wersvc-10.dll Diff

# TOC

* [Visual Chart Diff](#visual-chart-diff)
* [Metadata](#metadata)
	* [Ghidra Diff Engine](#ghidra-diff-engine)
		* [Command Line](#command-line)
	* [Binary Metadata Diff](#binary-metadata-diff)
	* [Program Options](#program-options)
	* [Diff Stats](#diff-stats)
	* [Strings](#strings)
* [Deleted](#deleted)
* [Added](#added)
	* [wil::details::FeatureImpl<__WilFeatureTraits_Feature_1201448248>::GetCachedFeatureEnabledState](#wildetailsfeatureimpl__wilfeaturetraits_feature_1201448248getcachedfeatureenabledstate)
	* [wil::details::FeatureImpl<__WilFeatureTraits_Feature_1201448248>::__private_IsEnabled](#wildetailsfeatureimpl__wilfeaturetraits_feature_1201448248__private_isenabled)
* [Modified](#modified)
* [Modified (No Code Changes)](#modified-no-code-changes)
	* [SubscribeFeatureStateCacheToConfigurationChanges](#subscribefeaturestatecachetoconfigurationchanges)
	* [ReportUsageToService](#reportusagetoservice)
	* [EnsureSubscribedToFeatureConfigurationChanges](#ensuresubscribedtofeatureconfigurationchanges)

# Visual Chart Diff



```mermaid

flowchart LR



subgraph wersvc-10.dll
    
    subgraph Added
direction LR
wil-details-FeatureImpl__WilFeatureTraits_Feature_1201448248-GetCachedFeatureEnabledState
    wil-details-FeatureImpl__WilFeatureTraits_Feature_1201448248-__private_IsEnabled
end
end

subgraph wersvc-09.dll
    
    
end

```


```mermaid
pie showData
    title Function Matches - 99.9138%
"unmatched_funcs_len" : 2
"matched_funcs_len" : 2318
```



```mermaid
pie showData
    title Matched Function Similarity - 99.7843%
"matched_funcs_with_code_changes_len" : 0
"matched_funcs_with_non_code_changes_len" : 5
"matched_funcs_no_changes_len" : 2313
```

# Metadata

## Ghidra Diff Engine

### Command Line

#### Captured Command Line


```
ghidriff --project-location ghidra_projects --project-name ghidriff --symbols-path symbols --gzfs-path gzfs --threaded --log-level INFO --file-log-level INFO --log-path ghidriff.log --min-func-len 10 --gdt [] --max-ram-percent 60.0 --max-section-funcs 200 wersvc-09.dll wersvc-10.dll
```


#### Verbose Args


<details>

```
--old ['wersvc-09.dll'] --new [['wersvc-10.dll']] --engine VersionTrackingDiff --output-path out --summary False --project-location ghidra_projects --project-name ghidriff --symbols-path symbols --gzfs-path gzfs --base-address None --program-options None --threaded True --force-analysis False --force-diff False --no-symbols False --log-level INFO --file-log-level INFO --log-path ghidriff.log --va False --min-func-len 10 --use-calling-counts False --gdt [] --bsim False --bsim-full False --max-ram-percent 60.0 --print-flags False --jvm-args None --side-by-side False --max-section-funcs 200 --md-title None
```


</details>

#### Download Original PEs


```
wget https://msdl.microsoft.com/download/symbols/wersvc/FA9163CE51000/wersvc -O wersvc.x64.10.0.26100.5074
wget https://msdl.microsoft.com/download/symbols/wersvc/C2D39A6852000/wersvc -O wersvc.x64.10.0.26100.6899
```


## Binary Metadata Diff


```diff
--- wersvc-09.dll Meta
+++ wersvc-10.dll Meta
@@ -1,44 +1,44 @@
-Program Name: wersvc-09.dll
+Program Name: wersvc-10.dll
 Language ID: x86:LE:64:default (4.7)
 Compiler ID: windows
 Processor: x86
 Endian: Little
 Address Size: 64
 Minimum Address: 180000000
 Maximum Address: ff0000184f
-# of Bytes: 337264
+# of Bytes: 341360
 # of Memory Blocks: 10
-# of Instructions: 54447
-# of Defined Data: 4185
-# of Functions: 1159
-# of Symbols: 11353
-# of Data Types: 1041
+# of Instructions: 54632
+# of Defined Data: 4188
+# of Functions: 1161
+# of Symbols: 11373
+# of Data Types: 1043
 # of Data Type Categories: 143
 Analyzed: true
 Compiler: visualstudio:unknown
 Created With Ghidra Version: 12.1.2
-Date Created: Fri Aug 28 10:25:57 SGT 2026
+Date Created: Fri Aug 28 10:26:03 SGT 2026
 Executable Format: Portable Executable (PE)
-Executable Location: /C:/Users/Jacob/Downloads/pdbs/wersvc-09.dll
-Executable MD5: 242f96ff2c74a7bb7fa327dbd6bc53b3
-Executable SHA256: 11d1e27532b9af49c80894d246ddb874b4d10480aa264843919c22f80b0100f5
-FSRL: file:///C:/Users/Jacob/Downloads/pdbs/wersvc-09.dll?MD5=242f96ff2c74a7bb7fa327dbd6bc53b3
+Executable Location: /C:/Users/Jacob/Downloads/pdbs/wersvc-10.dll
+Executable MD5: 5e167bc27936c34bd189381f34b55eec
+Executable SHA256: 25605f85f49c6d0c791e76fe5b5c4fe33997202f735bddb7c837800e93ebb6cc
+FSRL: file:///C:/Users/Jacob/Downloads/pdbs/wersvc-10.dll?MD5=5e167bc27936c34bd189381f34b55eec
 PDB Age: 1
 PDB File: WerSvc.pdb
-PDB GUID: 4fb5dc8b-9c9b-5e85-1be1-9cf6878d1ecb
+PDB GUID: 7032a208-bf47-6088-49c3-9e00b871a343
 PDB Loaded: true
 PDB Version: RSDS
 PE Property[CompanyName]: Microsoft Corporation
 PE Property[FileDescription]: Windows Error Reporting Service
-PE Property[FileVersion]: 10.0.26100.5074 (WinBuild.160101.0800)
+PE Property[FileVersion]: 10.0.26100.6899 (WinBuild.160101.0800)
 PE Property[InternalName]: wersvc
 PE Property[LegalCopyright]: © Microsoft Corporation. All rights reserved.
 PE Property[OriginalFilename]: wersvc
 PE Property[ProductName]: Microsoft® Windows® Operating System
-PE Property[ProductVersion]: 10.0.26100.5074
+PE Property[ProductVersion]: 10.0.26100.6899
 PE Property[Translation]: 4b00409
 Preferred Root Namespace Category: 
 RTTI Found: true
 Relocatable: true
 SectionAlignment: 4096
 Should Ask To Analyze: false

```


## Program Options


<details>
<summary>Ghidra wersvc-09.dll Decompiler Options</summary>


|Decompiler Option|Value|
| :---: | :---: |
|Prototype Evaluation|__fastcall|

</details>


<details>
<summary>Ghidra wersvc-09.dll Specification extensions Options</summary>


|Specification extensions Option|Value|
| :---: | :---: |
|FormatVersion|0|
|VersionCounter|0|

</details>


<details>
<summary>Ghidra wersvc-09.dll Analyzers Options</summary>


|Analyzers Option|Value|
| :---: | :---: |
|ASCII Strings|true|
|ASCII Strings.Create Strings Containing Existing Strings|true|
|ASCII Strings.Create Strings Containing References|true|
|ASCII Strings.Force Model Reload|false|
|ASCII Strings.Minimum String Length|LEN_5|
|ASCII Strings.Model File|StringModel.sng|
|ASCII Strings.Require Null Termination for String|true|
|ASCII Strings.Search Only in Accessible Memory Blocks|true|
|ASCII Strings.String Start Alignment|ALIGN_1|
|ASCII Strings.String end alignment|4|
|Aggressive Instruction Finder|false|
|Aggressive Instruction Finder.Create Analysis Bookmarks|true|
|Apply Data Archives|true|
|Apply Data Archives.Archive Chooser|[Auto-Detect]|
|Apply Data Archives.Create Analysis Bookmarks|true|
|Apply Data Archives.GDT User File Archive Path|None|
|Apply Data Archives.User Project Archive Path|None|
|Call Convention ID|true|
|Call Convention ID.Analysis Decompiler Timeout (sec)|60|
|Call-Fixup Installer|true|
|Condense Filler Bytes|false|
|Condense Filler Bytes.Filler Value|Auto|
|Condense Filler Bytes.Minimum number of sequential bytes|1|
|Create Address Tables|true|
|Create Address Tables.Allow Offcut References|false|
|Create Address Tables.Auto Label Table|false|
|Create Address Tables.Create Analysis Bookmarks|true|
|Create Address Tables.Maxmimum Pointer Distance|16777215|
|Create Address Tables.Minimum Pointer Address|4132|
|Create Address Tables.Minimum Table Size|2|
|Create Address Tables.Pointer Alignment|1|
|Create Address Tables.Relocation Table Guide|true|
|Create Address Tables.Table Alignment|4|
|Data Reference|true|
|Data Reference.Address Table Alignment|1|
|Data Reference.Address Table Minimum Size|2|
|Data Reference.Align End of Strings|false|
|Data Reference.Ascii String References|true|
|Data Reference.Create Address Tables|true|
|Data Reference.Minimum String Length|5|
|Data Reference.References to Pointers|true|
|Data Reference.Relocation Table Guide|true|
|Data Reference.Respect Execute Flag|true|
|Data Reference.Subroutine References|true|
|Data Reference.Switch Table References|false|
|Data Reference.Unicode String References|true|
|Decompiler Parameter ID|true|
|Decompiler Parameter ID.Analysis Clear Level|ANALYSIS|
|Decompiler Parameter ID.Analysis Decompiler Timeout (sec)|60|
|Decompiler Parameter ID.Commit Data Types|true|
|Decompiler Parameter ID.Commit Void Return Values|false|
|Decompiler Parameter ID.Prototype Evaluation|__fastcall|
|Decompiler Switch Analysis|true|
|Decompiler Switch Analysis.Analysis Decompiler Timeout (sec)|60|
|Demangler Microsoft|true|
|Demangler Microsoft.msdApplyOptions|{
	interpretation: FUNCTION_IF_EXISTS,
	applyCallingConvention: true,
	applySignature: true,
	demangleOnlyKnownPatterns: true,
	doDisassembly: true
}|
|Demangler Microsoft.msdOutputOptions|ghidra.app.util.demangler.microsoft.options.MsdOutputOption@9e5b|
|Disassemble Entry Points|true|
|Disassemble Entry Points.Respect Execute Flag|true|
|Embedded Media|true|
|Embedded Media.Create Analysis Bookmarks|true|
|External Entry References|true|
|Function ID|true|
|Function ID.Always Apply FID Labels|false|
|Function ID.Create Analysis Bookmarks|true|
|Function ID.Instruction Count Threshold|14.6|
|Function ID.Multiple Match Threshold|30.0|
|Function Start Search|true|
|Function Start Search.Bookmark Functions|false|
|Function Start Search.Search Data Blocks|false|
|Non-Returning Functions - Discovered|true|
|Non-Returning Functions - Discovered.Create Analysis Bookmarks|true|
|Non-Returning Functions - Discovered.Function Non-return Threshold|3|
|Non-Returning Functions - Discovered.Repair Flow Damage|true|
|Non-Returning Functions - Known|true|
|Non-Returning Functions - Known.Create Analysis Bookmarks|true|
|PDB MSDIA|false|
|PDB MSDIA.Search untrusted symbol servers|false|
|PDB Universal|true|
|PDB Universal.Import Source Line Info|true|
|PDB Universal.Search untrusted symbol servers|false|
|Reference|true|
|Reference.Address Table Alignment|1|
|Reference.Address Table Minimum Size|2|
|Reference.Align End of Strings|false|
|Reference.Ascii String References|true|
|Reference.Create Address Tables|true|
|Reference.Minimum String Length|5|
|Reference.References to Pointers|true|
|Reference.Relocation Table Guide|true|
|Reference.Respect Execute Flag|true|
|Reference.Subroutine References|true|
|Reference.Switch Table References|false|
|Reference.Unicode String References|true|
|Scalar Operand References|true|
|Scalar Operand References.Relocation Table Guide|true|
|Shared Return Calls|true|
|Shared Return Calls.Allow Conditional Jumps|false|
|Shared Return Calls.Assume Contiguous Functions Only|true|
|Stack|true|
|Stack.Create Local Variables|true|
|Stack.Create Param Variables|false|
|Stack.Max Threads|2|
|Subroutine References|true|
|Subroutine References.Create Thunks Early|true|
|Variadic Function Signature Override|false|
|Variadic Function Signature Override.Create Analysis Bookmarks|false|
|Windows x86 PE Exception Handling|true|
|Windows x86 PE RTTI Analyzer|true|
|Windows x86 Thread Environment Block (TEB) Analyzer|true|
|Windows x86 Thread Environment Block (TEB) Analyzer.Starting Address of the TEB||
|Windows x86 Thread Environment Block (TEB) Analyzer.Windows OS Version|Windows 7|
|WindowsPE x86 Propagate External Parameters|false|
|WindowsResourceReference|true|
|WindowsResourceReference.Create Analysis Bookmarks|true|
|x86 Constant Reference Analyzer|true|
|x86 Constant Reference Analyzer.Create Data from pointer|false|
|x86 Constant Reference Analyzer.Function parameter/return Pointer analysis|true|
|x86 Constant Reference Analyzer.Max Threads|2|
|x86 Constant Reference Analyzer.Min absolute reference|4|
|x86 Constant Reference Analyzer.Require pointer param data type|false|
|x86 Constant Reference Analyzer.Speculative reference max|256|
|x86 Constant Reference Analyzer.Speculative reference min|1024|
|x86 Constant Reference Analyzer.Stored Value Pointer analysis|true|
|x86 Constant Reference Analyzer.Trust values read from writable memory|true|

</details>


<details>
<summary>Ghidra wersvc-10.dll Decompiler Options</summary>


|Decompiler Option|Value|
| :---: | :---: |
|Prototype Evaluation|__fastcall|

</details>


<details>
<summary>Ghidra wersvc-10.dll Specification extensions Options</summary>


|Specification extensions Option|Value|
| :---: | :---: |
|FormatVersion|0|
|VersionCounter|0|

</details>


<details>
<summary>Ghidra wersvc-10.dll Analyzers Options</summary>


|Analyzers Option|Value|
| :---: | :---: |
|ASCII Strings|true|
|ASCII Strings.Create Strings Containing Existing Strings|true|
|ASCII Strings.Create Strings Containing References|true|
|ASCII Strings.Force Model Reload|false|
|ASCII Strings.Minimum String Length|LEN_5|
|ASCII Strings.Model File|StringModel.sng|
|ASCII Strings.Require Null Termination for String|true|
|ASCII Strings.Search Only in Accessible Memory Blocks|true|
|ASCII Strings.String Start Alignment|ALIGN_1|
|ASCII Strings.String end alignment|4|
|Aggressive Instruction Finder|false|
|Aggressive Instruction Finder.Create Analysis Bookmarks|true|
|Apply Data Archives|true|
|Apply Data Archives.Archive Chooser|[Auto-Detect]|
|Apply Data Archives.Create Analysis Bookmarks|true|
|Apply Data Archives.GDT User File Archive Path|None|
|Apply Data Archives.User Project Archive Path|None|
|Call Convention ID|true|
|Call Convention ID.Analysis Decompiler Timeout (sec)|60|
|Call-Fixup Installer|true|
|Condense Filler Bytes|false|
|Condense Filler Bytes.Filler Value|Auto|
|Condense Filler Bytes.Minimum number of sequential bytes|1|
|Create Address Tables|true|
|Create Address Tables.Allow Offcut References|false|
|Create Address Tables.Auto Label Table|false|
|Create Address Tables.Create Analysis Bookmarks|true|
|Create Address Tables.Maxmimum Pointer Distance|16777215|
|Create Address Tables.Minimum Pointer Address|4132|
|Create Address Tables.Minimum Table Size|2|
|Create Address Tables.Pointer Alignment|1|
|Create Address Tables.Relocation Table Guide|true|
|Create Address Tables.Table Alignment|4|
|Data Reference|true|
|Data Reference.Address Table Alignment|1|
|Data Reference.Address Table Minimum Size|2|
|Data Reference.Align End of Strings|false|
|Data Reference.Ascii String References|true|
|Data Reference.Create Address Tables|true|
|Data Reference.Minimum String Length|5|
|Data Reference.References to Pointers|true|
|Data Reference.Relocation Table Guide|true|
|Data Reference.Respect Execute Flag|true|
|Data Reference.Subroutine References|true|
|Data Reference.Switch Table References|false|
|Data Reference.Unicode String References|true|
|Decompiler Parameter ID|true|
|Decompiler Parameter ID.Analysis Clear Level|ANALYSIS|
|Decompiler Parameter ID.Analysis Decompiler Timeout (sec)|60|
|Decompiler Parameter ID.Commit Data Types|true|
|Decompiler Parameter ID.Commit Void Return Values|false|
|Decompiler Parameter ID.Prototype Evaluation|__fastcall|
|Decompiler Switch Analysis|true|
|Decompiler Switch Analysis.Analysis Decompiler Timeout (sec)|60|
|Demangler Microsoft|true|
|Demangler Microsoft.msdApplyOptions|{
	interpretation: FUNCTION_IF_EXISTS,
	applyCallingConvention: true,
	applySignature: true,
	demangleOnlyKnownPatterns: true,
	doDisassembly: true
}|
|Demangler Microsoft.msdOutputOptions|ghidra.app.util.demangler.microsoft.options.MsdOutputOption@9e5b|
|Disassemble Entry Points|true|
|Disassemble Entry Points.Respect Execute Flag|true|
|Embedded Media|true|
|Embedded Media.Create Analysis Bookmarks|true|
|External Entry References|true|
|Function ID|true|
|Function ID.Always Apply FID Labels|false|
|Function ID.Create Analysis Bookmarks|true|
|Function ID.Instruction Count Threshold|14.6|
|Function ID.Multiple Match Threshold|30.0|
|Function Start Search|true|
|Function Start Search.Bookmark Functions|false|
|Function Start Search.Search Data Blocks|false|
|Non-Returning Functions - Discovered|true|
|Non-Returning Functions - Discovered.Create Analysis Bookmarks|true|
|Non-Returning Functions - Discovered.Function Non-return Threshold|3|
|Non-Returning Functions - Discovered.Repair Flow Damage|true|
|Non-Returning Functions - Known|true|
|Non-Returning Functions - Known.Create Analysis Bookmarks|true|
|PDB MSDIA|false|
|PDB MSDIA.Search untrusted symbol servers|false|
|PDB Universal|true|
|PDB Universal.Import Source Line Info|true|
|PDB Universal.Search untrusted symbol servers|false|
|Reference|true|
|Reference.Address Table Alignment|1|
|Reference.Address Table Minimum Size|2|
|Reference.Align End of Strings|false|
|Reference.Ascii String References|true|
|Reference.Create Address Tables|true|
|Reference.Minimum String Length|5|
|Reference.References to Pointers|true|
|Reference.Relocation Table Guide|true|
|Reference.Respect Execute Flag|true|
|Reference.Subroutine References|true|
|Reference.Switch Table References|false|
|Reference.Unicode String References|true|
|Scalar Operand References|true|
|Scalar Operand References.Relocation Table Guide|true|
|Shared Return Calls|true|
|Shared Return Calls.Allow Conditional Jumps|false|
|Shared Return Calls.Assume Contiguous Functions Only|true|
|Stack|true|
|Stack.Create Local Variables|true|
|Stack.Create Param Variables|false|
|Stack.Max Threads|2|
|Subroutine References|true|
|Subroutine References.Create Thunks Early|true|
|Variadic Function Signature Override|false|
|Variadic Function Signature Override.Create Analysis Bookmarks|false|
|Windows x86 PE Exception Handling|true|
|Windows x86 PE RTTI Analyzer|true|
|Windows x86 Thread Environment Block (TEB) Analyzer|true|
|Windows x86 Thread Environment Block (TEB) Analyzer.Starting Address of the TEB||
|Windows x86 Thread Environment Block (TEB) Analyzer.Windows OS Version|Windows 7|
|WindowsPE x86 Propagate External Parameters|false|
|WindowsResourceReference|true|
|WindowsResourceReference.Create Analysis Bookmarks|true|
|x86 Constant Reference Analyzer|true|
|x86 Constant Reference Analyzer.Create Data from pointer|false|
|x86 Constant Reference Analyzer.Function parameter/return Pointer analysis|true|
|x86 Constant Reference Analyzer.Max Threads|2|
|x86 Constant Reference Analyzer.Min absolute reference|4|
|x86 Constant Reference Analyzer.Require pointer param data type|false|
|x86 Constant Reference Analyzer.Speculative reference max|256|
|x86 Constant Reference Analyzer.Speculative reference min|1024|
|x86 Constant Reference Analyzer.Stored Value Pointer analysis|true|
|x86 Constant Reference Analyzer.Trust values read from writable memory|true|

</details>

## Diff Stats



|Stat|Value|
| :---: | :---: |
|added_funcs_len|2|
|deleted_funcs_len|0|
|modified_funcs_len|5|
|added_symbols_len|1|
|deleted_symbols_len|1|
|diff_time|18.90653967857361|
|deleted_strings_len|0|
|added_strings_len|0|
|match_types|Counter({'SymbolsHash': 1154, 'ExternalsName': 322, 'StructuralGraphHash': 2, 'SigCallingCalledHasher': 1})|
|items_to_process|9|
|diff_types|Counter({'refcount': 4, 'calling': 4, 'address': 2, 'length': 1, 'called': 1})|
|unmatched_funcs_len|2|
|total_funcs_len|2320|
|matched_funcs_len|2318|
|matched_funcs_with_code_changes_len|0|
|matched_funcs_with_non_code_changes_len|5|
|matched_funcs_no_changes_len|2313|
|match_func_similarity_percent|99.7843%|
|func_match_overall_percent|99.9138%|
|first_matches|Counter({'SymbolsHash': 1154, 'StructuralGraphHash': 2, 'SigCallingCalledHasher': 1})|



```mermaid
pie showData
    title All Matches
"SymbolsHash" : 1154
"ExternalsName" : 322
"SigCallingCalledHasher" : 1
"StructuralGraphHash" : 2
```



```mermaid
pie showData
    title First Matches
"SymbolsHash" : 1154
"SigCallingCalledHasher" : 1
"StructuralGraphHash" : 2
```



```mermaid
pie showData
    title Diff Stats
"added_funcs_len" : 2
"deleted_funcs_len" : 0
"modified_funcs_len" : 5
```



```mermaid
pie showData
    title Symbols
"added_symbols_len" : 1
"deleted_symbols_len" : 1
```

## Strings


*No string differences found*

# Deleted

# Added

## wil::details::FeatureImpl<__WilFeatureTraits_Feature_1201448248>::GetCachedFeatureEnabledState

### Function Meta



|Key|wersvc-10.dll|
| :---: | :---: |
|name|GetCachedFeatureEnabledState|
|fullname|wil::details::FeatureImpl<__WilFeatureTraits_Feature_1201448248>::GetCachedFeatureEnabledState|
|refcount|3|
|length|408|
|called|_guard_dispatch_icall$thunk$10345483385596137414<br>wil::details::EnsureSubscribedToFeatureConfigurationChanges<br>wil::details::SubscribeFeatureStateCacheToConfigurationChanges|
|calling|wil::details::FeatureImpl<__WilFeatureTraits_Feature_1201448248>::__private_IsEnabled|
|paramcount|1|
|address|180029aac|
|sig|wil_details_FeatureStateCache __thiscall GetCachedFeatureEnabledState(FeatureImpl<__WilFeatureTraits_Feature_1201448248> * this)|
|sym_type|Function|
|sym_source|ANALYSIS|
|external|False|


```diff
--- wil::details::FeatureImpl<__WilFeatureTraits_Feature_1201448248>::GetCachedFeatureEnabledState
+++ wil::details::FeatureImpl<__WilFeatureTraits_Feature_1201448248>::GetCachedFeatureEnabledState
@@ -0,0 +1,100 @@
+

+/* WARNING: Function: _guard_dispatch_icall$thunk$10345483385596137414 replaced with injection:

+   guard_dispatch_icall */

+/* private: union wil_details_FeatureStateCache __cdecl wil::details::FeatureImpl<struct

+   __WilFeatureTraits_Feature_1201448248>::GetCachedFeatureEnabledState(void) __ptr64 */

+

+void __thiscall

+wil::details::FeatureImpl<__WilFeatureTraits_Feature_1201448248>::GetCachedFeatureEnabledState

+          (FeatureImpl<__WilFeatureTraits_Feature_1201448248> *this)

+

+{

+  uint uVar1;

+  uint uVar2;

+  code *pcVar3;

+  uint uVar4;

+  uint uVar5;

+  uint *in_RDX;

+  uint uVar6;

+  bool bVar7;

+  int local_res8 [2];

+  

+  in_RDX[0] = 0;

+  in_RDX[1] = 0;

+  uVar1 = *(uint *)this;

+  *in_RDX = uVar1;

+  if (((byte)uVar1 & 6) == 6) {

+    return;

+  }

+  uVar1 = EnsureSubscribedToFeatureConfigurationChanges();

+  local_res8[0] = 0;

+  pcVar3 = g_wil_details_internalGetFeatureEnabledState;

+  if ((g_wil_details_internalGetFeatureEnabledState == (code *)0x0) &&

+     (pcVar3 = g_wil_details_apiGetFeatureEnabledState,

+     g_wil_details_apiGetFeatureEnabledState == (code *)0x0)) {

+    uVar2 = 0;

+  }

+  else {

+    uVar2 = (*pcVar3)(0x375b94f,3,local_res8);

+  }

+  uVar6 = (((uVar2 & 3) << 2 | uVar2 & 0x40) << 2 | uVar2 & 0x80) * 8;

+  if ((uVar2 & 0xffffff3f) == 0) {

+    uVar6 = uVar6 | 0x40;

+  }

+  else {

+    uVar4 = 0;

+    if ((uVar2 & 0xffffff3f) == 2) {

+      uVar4 = 0x40;

+    }

+    uVar6 = uVar6 | uVar4;

+  }

+  bVar7 = false;

+  if ((uVar6 & 0xc00) == 0xc00) {

+    bVar7 = true;

+LAB_180029b75:

+    if (((uVar6 & 0x40) == 0) || (!bVar7)) {

+      uVar2 = 0;

+      goto LAB_180029b87;

+    }

+  }

+  else if ((uVar6 & 0x40) == 0) goto LAB_180029b75;

+  uVar2 = 1;

+LAB_180029b87:

+  uVar6 = uVar6 | uVar2;

+  uVar2 = *in_RDX;

+  do {

+    uVar5 = uVar2;

+    *in_RDX = uVar5;

+    uVar4 = uVar5;

+    if ((local_res8[0] != 0) && ((uVar5 & 2) == 0)) {

+      uVar2 = (uVar6 ^ uVar5) & 0x180 ^ uVar5;

+      uVar2 = (uVar2 ^ uVar6) & 0x40 ^ uVar2;

+      uVar2 = (uVar2 ^ uVar6) & 1 ^ uVar2;

+      uVar4 = (uVar2 ^ uVar6) & 0x800 ^ uVar2 | 2;

+      *in_RDX = uVar4;

+    }

+    if ((uVar5 & 4) == 0) {

+      uVar4 = uVar4 ^ (uVar6 ^ uVar4) & 0x400 | 4;

+      *in_RDX = uVar4;

+    }

+    LOCK();

+    uVar2 = *(uint *)this;

+    bVar7 = uVar5 == uVar2;

+    if (bVar7) {

+      *(uint *)this = uVar4;

+      uVar2 = uVar5;

+    }

+    UNLOCK();

+  } while (!bVar7);

+  if ((uVar5 & 4) == 0) {

+    SubscribeFeatureStateCacheToConfigurationChanges((wil_details_FeatureStateCache *)this,3,uVar1);

+  }

+  if ((*in_RDX & 2) == 0) {

+    uVar1 = (uVar6 ^ *in_RDX) & 0x180 ^ *in_RDX;

+    uVar1 = (uVar6 ^ uVar1) & 0x40 ^ uVar1;

+    uVar1 = (uVar1 ^ uVar6) & 1 ^ uVar1;

+    *in_RDX = (uVar1 ^ uVar6) & 0x800 ^ uVar1;

+  }

+  return;

+}

+


```


## wil::details::FeatureImpl<__WilFeatureTraits_Feature_1201448248>::__private_IsEnabled

### Function Meta



|Key|wersvc-10.dll|
| :---: | :---: |
|name|__private_IsEnabled|
|fullname|wil::details::FeatureImpl<__WilFeatureTraits_Feature_1201448248>::__private_IsEnabled|
|refcount|2|
|length|151|
|called|wil::details::FeatureImpl<__WilFeatureTraits_Feature_1201448248>::GetCachedFeatureEnabledState<br>wil::details::ReportUsageToService|
|calling|CHungApp::Report|
|paramcount|1|
|address|18002efe0|
|sig|bool __thiscall __private_IsEnabled(FeatureImpl<__WilFeatureTraits_Feature_1201448248> * this)|
|sym_type|Function|
|sym_source|ANALYSIS|
|external|False|


```diff
--- wil::details::FeatureImpl<__WilFeatureTraits_Feature_1201448248>::__private_IsEnabled
+++ wil::details::FeatureImpl<__WilFeatureTraits_Feature_1201448248>::__private_IsEnabled
@@ -0,0 +1,34 @@
+

+/* public: bool __cdecl wil::details::FeatureImpl<struct

+   __WilFeatureTraits_Feature_1201448248>::__private_IsEnabled(void) __ptr64 */

+

+bool __thiscall

+wil::details::FeatureImpl<__WilFeatureTraits_Feature_1201448248>::__private_IsEnabled

+          (FeatureImpl<__WilFeatureTraits_Feature_1201448248> *this)

+

+{

+  undefined8 *puVar1;

+  uint uVar2;

+  bool bVar3;

+  undefined4 local_res8;

+  undefined2 local_resc;

+  undefined8 local_res10;

+  __uint64 in_stack_fffffffffffffff0;

+  

+  GetCachedFeatureEnabledState(this);

+  uVar2 = *(uint *)this;

+  bVar3 = (bool)((byte)local_res10 & 1);

+  if ((uVar2 & 4) == 0) {

+    puVar1 = (undefined8 *)GetCachedFeatureEnabledState(this);

+    local_res10 = *puVar1;

+    uVar2 = (uint)local_res10;

+  }

+  local_res8 = 0;

+  local_resc = 2;

+  ReportUsageToService

+            ((wil_details_FeatureReportingCache *)(this + 8),0x375b94f,uVar2 >> 10 & 1,

+             uVar2 >> 0xb & 1,(FEATURE_LOGGED_TRAITS *)&local_res8,(uint)bVar3,3,

+             in_stack_fffffffffffffff0);

+  return bVar3;

+}

+


```


# Modified


*Modified functions contain code changes*
# Modified (No Code Changes)


*Slightly modified functions have no code changes, rather differnces in:*
- refcount
- length
- called
- calling
- name
- fullname

## SubscribeFeatureStateCacheToConfigurationChanges

### Match Info



|Key|wersvc-09.dll - wersvc-10.dll|
| :---: | :---: |
|diff_type|refcount,calling|
|ratio|1.0|
|i_ratio|0.82|
|m_ratio|1.0|
|b_ratio|1.0|
|match_types|SymbolsHash|

### Function Meta Diff



|Key|wersvc-09.dll|wersvc-10.dll|
| :---: | :---: | :---: |
|name|SubscribeFeatureStateCacheToConfigurationChanges|SubscribeFeatureStateCacheToConfigurationChanges|
|fullname|wil::details::SubscribeFeatureStateCacheToConfigurationChanges|wil::details::SubscribeFeatureStateCacheToConfigurationChanges|
|`refcount`|4|5|
|length|158|158|
|called|API-MS-WIN-CORE-SYNCH-L1-1-0.DLL::AcquireSRWLockExclusive<br>API-MS-WIN-CORE-SYNCH-L1-1-0.DLL::ReleaseSRWLockExclusive<br>wil::details_abi::heap_buffer::push_back|API-MS-WIN-CORE-SYNCH-L1-1-0.DLL::AcquireSRWLockExclusive<br>API-MS-WIN-CORE-SYNCH-L1-1-0.DLL::ReleaseSRWLockExclusive<br>wil::details_abi::heap_buffer::push_back|
|`calling`|wil::details::FeatureImpl<__WilFeatureTraits_Feature_Servicing_WerAllowNetworkUser>::GetCachedFeatureEnabledState<br>wil::details::FeatureImpl<__WilFeatureTraits_Feature_Standalone_Future>::GetCachedFeatureEnabledState<br>wil::details::IsFeatureConfigured|wil::details::FeatureImpl<__WilFeatureTraits_Feature_1201448248>::GetCachedFeatureEnabledState<br>wil::details::FeatureImpl<__WilFeatureTraits_Feature_Servicing_WerAllowNetworkUser>::GetCachedFeatureEnabledState<br>wil::details::FeatureImpl<__WilFeatureTraits_Feature_Standalone_Future>::GetCachedFeatureEnabledState<br>wil::details::IsFeatureConfigured|
|paramcount|3|3|
|address|18000d368|18000d368|
|sig|void __cdecl SubscribeFeatureStateCacheToConfigurationChanges(wil_details_FeatureStateCache * param_1, wil_FeatureChangeTime param_2, uint param_3)|void __cdecl SubscribeFeatureStateCacheToConfigurationChanges(wil_details_FeatureStateCache * param_1, wil_FeatureChangeTime param_2, uint param_3)|
|sym_type|Function|Function|
|sym_source|ANALYSIS|ANALYSIS|
|external|False|False|

### SubscribeFeatureStateCacheToConfigurationChanges Calling Diff


```diff
--- wil::details::SubscribeFeatureStateCacheToConfigurationChanges calling
+++ wil::details::SubscribeFeatureStateCacheToConfigurationChanges calling
@@ -0,0 +1 @@
+wil::details::FeatureImpl<__WilFeatureTraits_Feature_1201448248>::GetCachedFeatureEnabledState
```


## ReportUsageToService

### Match Info



|Key|wersvc-09.dll - wersvc-10.dll|
| :---: | :---: |
|diff_type|refcount,calling|
|ratio|1.0|
|i_ratio|0.95|
|m_ratio|1.0|
|b_ratio|1.0|
|match_types|SymbolsHash|

### Function Meta Diff



|Key|wersvc-09.dll|wersvc-10.dll|
| :---: | :---: | :---: |
|name|ReportUsageToService|ReportUsageToService|
|fullname|wil::details::ReportUsageToService|wil::details::ReportUsageToService|
|`refcount`|3|4|
|length|154|154|
|called|_guard_dispatch_icall$thunk$10345483385596137414<br>wil::details::ReportUsageToServiceDirect<br>wil_details_MapReportingKind|_guard_dispatch_icall$thunk$10345483385596137414<br>wil::details::ReportUsageToServiceDirect<br>wil_details_MapReportingKind|
|`calling`|wil::details::FeatureImpl<__WilFeatureTraits_Feature_Servicing_WerAllowNetworkUser>::__private_IsEnabled<br>wil::details::FeatureImpl<__WilFeatureTraits_Feature_Standalone_Future>::__private_IsEnabled|wil::details::FeatureImpl<__WilFeatureTraits_Feature_1201448248>::__private_IsEnabled<br>wil::details::FeatureImpl<__WilFeatureTraits_Feature_Servicing_WerAllowNetworkUser>::__private_IsEnabled<br>wil::details::FeatureImpl<__WilFeatureTraits_Feature_Standalone_Future>::__private_IsEnabled|
|paramcount|8|8|
|address|18000cb50|18000cb50|
|sig|void __cdecl ReportUsageToService(wil_details_FeatureReportingCache * param_1, uint param_2, int param_3, int param_4, FEATURE_LOGGED_TRAITS * param_5, int param_6, wil_ReportingKind param_7, __uint64 param_8)|void __cdecl ReportUsageToService(wil_details_FeatureReportingCache * param_1, uint param_2, int param_3, int param_4, FEATURE_LOGGED_TRAITS * param_5, int param_6, wil_ReportingKind param_7, __uint64 param_8)|
|sym_type|Function|Function|
|sym_source|ANALYSIS|ANALYSIS|
|external|False|False|

### ReportUsageToService Calling Diff


```diff
--- wil::details::ReportUsageToService calling
+++ wil::details::ReportUsageToService calling
@@ -0,0 +1 @@
+wil::details::FeatureImpl<__WilFeatureTraits_Feature_1201448248>::__private_IsEnabled
```


## EnsureSubscribedToFeatureConfigurationChanges

### Match Info



|Key|wersvc-09.dll - wersvc-10.dll|
| :---: | :---: |
|diff_type|refcount,calling|
|ratio|1.0|
|i_ratio|0.59|
|m_ratio|1.0|
|b_ratio|1.0|
|match_types|SymbolsHash|

### Function Meta Diff



|Key|wersvc-09.dll|wersvc-10.dll|
| :---: | :---: | :---: |
|name|EnsureSubscribedToFeatureConfigurationChanges|EnsureSubscribedToFeatureConfigurationChanges|
|fullname|wil::details::EnsureSubscribedToFeatureConfigurationChanges|wil::details::EnsureSubscribedToFeatureConfigurationChanges|
|`refcount`|4|5|
|length|201|201|
|called|API-MS-WIN-CORE-SYNCH-L1-1-0.DLL::AcquireSRWLockExclusive<br>API-MS-WIN-CORE-SYNCH-L1-1-0.DLL::ReleaseSRWLockExclusive<br>_guard_dispatch_icall$thunk$10345483385596137414|API-MS-WIN-CORE-SYNCH-L1-1-0.DLL::AcquireSRWLockExclusive<br>API-MS-WIN-CORE-SYNCH-L1-1-0.DLL::ReleaseSRWLockExclusive<br>_guard_dispatch_icall$thunk$10345483385596137414|
|`calling`|wil::details::FeatureImpl<__WilFeatureTraits_Feature_Servicing_WerAllowNetworkUser>::GetCachedFeatureEnabledState<br>wil::details::FeatureImpl<__WilFeatureTraits_Feature_Standalone_Future>::GetCachedFeatureEnabledState<br>wil::details::IsFeatureConfigured|wil::details::FeatureImpl<__WilFeatureTraits_Feature_1201448248>::GetCachedFeatureEnabledState<br>wil::details::FeatureImpl<__WilFeatureTraits_Feature_Servicing_WerAllowNetworkUser>::GetCachedFeatureEnabledState<br>wil::details::FeatureImpl<__WilFeatureTraits_Feature_Standalone_Future>::GetCachedFeatureEnabledState<br>wil::details::IsFeatureConfigured|
|paramcount|0|0|
|address|180009e04|180009e04|
|sig|uint __cdecl EnsureSubscribedToFeatureConfigurationChanges(void)|uint __cdecl EnsureSubscribedToFeatureConfigurationChanges(void)|
|sym_type|Function|Function|
|sym_source|ANALYSIS|ANALYSIS|
|external|False|False|

### EnsureSubscribedToFeatureConfigurationChanges Calling Diff


```diff
--- wil::details::EnsureSubscribedToFeatureConfigurationChanges calling
+++ wil::details::EnsureSubscribedToFeatureConfigurationChanges calling
@@ -0,0 +1 @@
+wil::details::FeatureImpl<__WilFeatureTraits_Feature_1201448248>::GetCachedFeatureEnabledState
```




<sub>Generated with `ghidriff` version: 1.0.0 on 2026-08-28T10:27:03</sub>