| Windows 10 DLL File Information - EventAggregation.dll |
The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 10, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.
General Information
| File Description: | Event Aggregation User Mode Library |
| File Version: | 10.0.10130.0 (fbl_impressive.150522-2224) |
| Company: | Microsoft Corporation |
| Product Name: | Microsoft® Windows® Operating System |
| DLL popularity | Low - 6 other DLL files in system32 directory are statically linked to this file. |
| File Size: | 67 KB |
| Total Number of Exported Functions: | 31 |
| Total Number of Exported Functions With Names: | 31 |
Section Headers
| Name | Virtual Address | Raw Data Size | % of File | Characteristics | Section Contains... |
|---|---|---|---|---|---|
| .text | 0x00001000 | 58,368 Bytes | 84.4% | Read, Execute | Code |
| .data | 0x00010000 | 512 Bytes | 0.7% | Write, Read | Initialized Data |
| .idata | 0x00011000 | 4,096 Bytes | 5.9% | Read | Initialized Data |
| .didat | 0x00012000 | 512 Bytes | 0.7% | Write, Read | Initialized Data |
| .rsrc | 0x00013000 | 1,536 Bytes | 2.2% | Read | Initialized Data |
| .reloc | 0x00014000 | 3,072 Bytes | 4.4% | Read, Discardable | Initialized Data |
Static Linking
EventAggregation.dll is statically linked to the following files:msvcrt.dll
ntdll.dll
api-ms-win-eventing-provider-l1-1-0.dll
api-ms-win-eventing-classicprovider-l1-1-0.dll
RPCRT4.dll
api-ms-win-security-sddl-l1-1-0.dll
api-ms-win-core-heap-l2-1-0.dll
api-ms-win-core-processthreads-l1-1-2.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-sysinfo-l1-2-1.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-core-memory-l1-1-2.dll
api-ms-win-core-libraryloader-l1-2-0.dll
api-ms-win-core-heap-l1-2-0.dll
This means that when EventAggregation.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, EventAggregation.dll won't be loaded.
List of files that are statically linked to EventAggregation.dll
bisrv.dll
dmwappushsvc.dll
TimeBrokerClient.dll
ubpm.dll
wpnprv.dll
WPTaskScheduler.dll
This means that when one of the above files is loaded, EventAggregation.dll will be loaded too. (The opposite of the previous 'Static Linking' section)
General Resources Information
| Resource Type | Number of Items | Total Size | % of File |
|---|---|---|---|
| Icons | 0 | 0 Bytes | 0.0% |
| Animated Icons | 0 | 0 Bytes | 0.0% |
| Cursors | 0 | 0 Bytes | 0.0% |
| Animated Cursors | 0 | 0 Bytes | 0.0% |
| Bitmaps | 0 | 0 Bytes | 0.0% |
| AVI Files | 0 | 0 Bytes | 0.0% |
| Dialog-Boxes | 0 | 0 Bytes | 0.0% |
| HTML Related Files | 0 | 0 Bytes | 0.0% |
| Menus | 0 | 0 Bytes | 0.0% |
| Strings | 0 | 0 Bytes | 0.0% |
| Type Libraries | 0 | 0 Bytes | 0.0% |
| Manifest | 0 | 0 Bytes | 0.0% |
| All Others | 1 | 984 Bytes | 1.4% |
| Total | 1 | 984 Bytes | 1.4% |
Icons in this file
No icons found in this file
Cursors in this file
No cursors found in this file
Dialog-boxes list (up to 1000 dialogs)
No dialog resources in this file.
String resources in this dll (up to 1000 strings)
No string resources in this file.
COM Classes/Interfaces
There is no type library in this file with COM classes/interfaces information
Exported Functions List
The following functions are exported by this dll:| BriAllocateRpcBuffer | BriCleanup | BriCreateBrokeredEvent |
| BriDeleteBrokeredEvent | BriFreeRpcBuffer | BriGetBrokerAvailabilityChangeStamp |
| BriIsBrokerRegistered | BriRegisterToBrokerAvailability | BriResolveBrokerIdByEventId |
| BriSignalBrokeredEvent | BriUnregisterFromBrokerAvailability | EACreateAggregateEvent |
| EADeleteAggregateEvent | EAEnumerateAggregateEvents | EAQueryAggregateEventData |
| EaCreateAggregatedEvent | EaCreateAggregation | EaDecodeBrokeredEvent |
| EaDeleteAggregatedEvent | EaDeleteAggregatedEventParameters | EaDeleteAggregation |
| EaDisableAggregatedEvent | EaEnableAggregatedEvent | EaEncodeBrokeredEvent |
| EaFreeAggregatedEventParameters | EaFreeBuffer | EaQueryAggregateEventConditionState |
| EaQueryAggregatedEvent | EaQueryAggregatedEventParameters | EaSignalAggregatedEvent |
| EaStoreAggregatedEventParameters |
Imported Functions List
The following functions are imported by this dll:- msvcrt.dll:
_XcptFilter _amsg_exit _except_handler4_common _initterm free malloc memcmp memcpy memset wcsnlen - ntdll.dll:
NtClose NtCreateKey NtDeleteKey NtEnumerateKey NtEnumerateValueKey NtOpenKey NtQueryValueKey NtQueryWnfStateData NtSetValueKey RtlAcquireSRWLockExclusive RtlAcquireSRWLockShared RtlAllocateHeap RtlAllocateWnfSerializationGroup RtlCompareMemory RtlCompareUnicodeString RtlComputeCrc32 RtlCreateHashTable RtlDeleteHashTable RtlEndEnumerationHashTable RtlEnumerateEntryHashTable RtlFreeAnsiString RtlFreeHeap RtlGUIDFromString RtlGetLastWin32Error RtlGetNextEntryHashTable RtlInitEnumerationHashTable RtlInitUnicodeString RtlInitUnicodeStringEx RtlInitializeConditionVariable RtlInsertEntryHashTable RtlLengthSid RtlLookupEntryHashTable RtlNtStatusToDosError RtlReleaseSRWLockExclusive RtlReleaseSRWLockShared RtlRemoveEntryHashTable RtlRunOnceExecuteOnce RtlStringFromGUID RtlSubscribeWnfStateChangeNotification RtlUnsubscribeWnfNotificationWaitForCompletion RtlValidSid - api-ms-win-eventing-provider-l1-1-0.dll:
ntdll!EtwEventRegister ntdll!EtwEventSetInformation ntdll!EtwEventUnregister ntdll!EtwEventWriteTransfer - api-ms-win-eventing-classicprovider-l1-1-0.dll:
ntdll!EtwGetTraceEnableFlags ntdll!EtwGetTraceEnableLevel ntdll!EtwGetTraceLoggerHandle ntdll!EtwRegisterTraceGuidsW ntdll!EtwTraceMessage ntdll!EtwUnregisterTraceGuids - RPCRT4.dll:
NdrClientCall4 RpcBindingBind RpcBindingCreateW RpcBindingFree UuidCreate UuidEqual - api-ms-win-security-sddl-l1-1-0.dll:
sechost!ConvertStringSecurityDescriptorToSecurityDescriptorW sechost!ConvertStringSidToSidW - api-ms-win-core-heap-l2-1-0.dll:
KernelBase!LocalFree - api-ms-win-core-processthreads-l1-1-2.dll:
kernel32!GetCurrentProcess kernel32!GetCurrentProcessId kernel32!GetCurrentThreadId kernel32!TerminateProcess - api-ms-win-core-synch-l1-2-0.dll:
KernelBase!Sleep ntdll!RtlAcquireSRWLockExclusive ntdll!RtlReleaseSRWLockExclusive - api-ms-win-core-profile-l1-1-0.dll:
ntdll!RtlQueryPerformanceCounter - api-ms-win-core-sysinfo-l1-2-1.dll:
KernelBase!GetSystemInfo KernelBase!GetSystemTimeAsFileTime KernelBase!GetTickCount - api-ms-win-core-errorhandling-l1-1-1.dll:
KernelBase!GetLastError KernelBase!RaiseException KernelBase!SetUnhandledExceptionFilter KernelBase!UnhandledExceptionFilter - api-ms-win-core-memory-l1-1-2.dll:
KernelBase!VirtualProtect KernelBase!VirtualQuery - api-ms-win-core-libraryloader-l1-2-0.dll:
KernelBase!FreeLibrary KernelBase!GetProcAddress KernelBase!LoadLibraryExA - api-ms-win-core-heap-l1-2-0.dll:
KernelBase!GetProcessHeap ntdll!RtlAllocateHeap