WerFault Internals Part I: Why WerFault.exe Is Late Crash Telemetry

A reverse-engineering walk through normal user-mode crash reporting, from kernel exception dispatch through in-process WER state, service coordination, and crash-vertical worker creation.