Windows 10 DLL File Information - SystemEventsBrokerServer.dll

The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 10, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.

General Information

File Description:	System Events Broker
File Version:	10.0.10130.0 (fbl_impressive.150522-2224)
Company:	Microsoft Corporation
Product Name:	Microsoft® Windows® Operating System
DLL popularity	Very Low - There is no any other DLL in system32 directory that is statically linked to this file.
File Size:	254 KB
Total Number of Exported Functions:	2
Total Number of Exported Functions With Names:	2

Section Headers

Name	Virtual Address	Raw Data Size	% of File	Characteristics	Section Contains...
.text	0x00001000	226,304 Bytes	87.0%	Read, Execute	Code
.data	0x00039000	7,168 Bytes	2.8%	Write, Read	Initialized Data
.idata	0x0003b000	7,168 Bytes	2.8%	Read	Initialized Data
.didat	0x0003d000	512 Bytes	0.2%	Write, Read	Initialized Data
.rsrc	0x0003e000	4,608 Bytes	1.8%	Read	Initialized Data
.reloc	0x00040000	13,312 Bytes	5.1%	Read, Discardable	Initialized Data

Static Linking

SystemEventsBrokerServer.dll is statically linked to the following files:

msvcrt.dll
ntdll.dll
api-ms-win-eventing-classicprovider-l1-1-0.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-service-core-l1-1-1.dll
api-ms-win-eventing-provider-l1-1-0.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-string-l1-1-0.dll
api-ms-win-power-setting-l1-1-0.dll
api-ms-win-security-base-l1-2-0.dll
api-ms-win-core-processthreads-l1-1-2.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-core-threadpool-l1-2-0.dll
api-ms-win-core-heap-l1-2-0.dll
RPCRT4.dll
api-ms-win-security-sddl-l1-1-0.dll
api-ms-win-core-heap-l2-1-0.dll
api-ms-win-core-com-l1-1-1.dll
api-ms-win-core-sysinfo-l1-2-1.dll
api-ms-win-devices-config-l1-1-1.dll
api-ms-win-core-file-l1-2-1.dll
api-ms-win-core-timezone-l1-1-0.dll
api-ms-win-core-file-l2-1-1.dll
api-ms-win-security-lsalookup-l2-1-1.dll
api-ms-win-core-delayload-l1-1-1.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-threadpool-legacy-l1-1-0.dll
POWRPROF.dll
BrokerLib.dll

This means that when SystemEventsBrokerServer.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, SystemEventsBrokerServer.dll won't be loaded.

General Resources Information

Resource Type	Number of Items	Total Size	% of File
Icons	0	0 Bytes	0.0%
Animated Icons	0	0 Bytes	0.0%
Cursors	0	0 Bytes	0.0%
Animated Cursors	0	0 Bytes	0.0%
Bitmaps	0	0 Bytes	0.0%
AVI Files	0	0 Bytes	0.0%
Dialog-Boxes	0	0 Bytes	0.0%
HTML Related Files	0	0 Bytes	0.0%
Menus	0	0 Bytes	0.0%
Strings	2	368 Bytes	0.1%
Type Libraries	0	0 Bytes	0.0%
Manifest	0	0 Bytes	0.0%
All Others	4	6,198 Bytes	2.4%
Total	6	6,566 Bytes	2.5%

Icons in this file

No icons found in this file

Cursors in this file

No cursors found in this file

Dialog-boxes list (up to 1000 dialogs)

No dialog resources in this file.

String resources in this dll (up to 1000 strings)

String ID	String Text
1001	System Events Broker
1002	Coordinates execution of background work for WinRT application. If this service is stopped or disabled, then background work might not be triggered.

COM Classes/Interfaces

There is no type library in this file with COM classes/interfaces information

Exported Functions List

The following functions are exported by this dll:

ServiceMain

SvchostPushServiceGlobals

Imported Functions List

The following functions are imported by this dll:

• msvcrt.dll:
  

  _CxxThrowException

  _XcptFilter

  __CxxFrameHandler

  __dllonexit

  _amsg_exit

  _callnewh

  _except_handler4_common

  _initterm

  _lock

  _onexit

  _purecall

  _unlock

  _vsnwprintf

  free

  malloc

  memcmp

  memcpy

  memmove

  memset

  public: __thiscall exception::exception(char const * const &)

  public: __thiscall exception::exception(class exception const &)

  public: __thiscall exception::exception(void)

  public: virtual __thiscall exception::~exception(void)

  public: virtual __thiscall type_info::~type_info(void)

  public: virtual char const * __thiscall exception::what(void)const

  void __cdecl operator delete(void *)

  void __cdecl operator delete[](void *)

  void __cdecl terminate(void)

• ntdll.dll:
  

  NtCreateWnfStateName	NtDeleteWnfStateName
  NtQueryWnfStateData	NtQueryWnfStateNameInformation
  RtlAbsoluteToSelfRelativeSD	RtlAcquireSRWLockExclusive
  RtlAcquireSRWLockShared	RtlAddAccessAllowedAce
  RtlAllocateAndInitializeSid	RtlAllocateHeap
  RtlAllocateWnfSerializationGroup	RtlCopySid
  RtlCreateAcl	RtlCreateSecurityDescriptor
  RtlEqualSid	RtlFreeHeap
  RtlFreeSid	RtlGUIDFromString
  RtlInitUnicodeString	RtlInitializeConditionVariable
  RtlLengthSecurityDescriptor	RtlLengthSid
  RtlNtStatusToDosError	RtlPublishWnfStateData
  RtlQueryPackageIdentity	RtlQueryWnfMetaNotification
  RtlReleaseSRWLockExclusive	RtlReleaseSRWLockShared
  RtlSetDaclSecurityDescriptor	RtlSetOwnerSecurityDescriptor
  RtlSubscribeWnfStateChangeNotification	RtlTestAndPublishWnfStateData
  RtlUnsubscribeWnfNotificationWaitForCompletion	RtlUnsubscribeWnfStateChangeNotification
  RtlWaitForWnfMetaNotification	RtlWaitOnAddress
  RtlWakeAddressAll

• api-ms-win-eventing-classicprovider-l1-1-0.dll:
  

  ntdll!EtwGetTraceEnableFlags	ntdll!EtwGetTraceEnableLevel	ntdll!EtwGetTraceLoggerHandle	ntdll!EtwRegisterTraceGuidsW
  ntdll!EtwTraceMessage	ntdll!EtwUnregisterTraceGuids

• api-ms-win-core-synch-l1-2-0.dll:
  

  KernelBase!CreateEventW

  KernelBase!SetEvent

  KernelBase!Sleep

• api-ms-win-service-core-l1-1-1.dll:
  

  sechost!RegisterServiceCtrlHandlerExW

  sechost!SetServiceStatus

• api-ms-win-eventing-provider-l1-1-0.dll:
  

  ntdll!EtwEventRegister	ntdll!EtwEventSetInformation	ntdll!EtwEventUnregister	ntdll!EtwEventWrite
  ntdll!EtwEventWriteTransfer

• api-ms-win-core-errorhandling-l1-1-1.dll:
  

  KernelBase!GetLastError

  KernelBase!SetUnhandledExceptionFilter

  KernelBase!UnhandledExceptionFilter

• api-ms-win-core-handle-l1-1-0.dll:
  

  KernelBase!CloseHandle

• api-ms-win-core-string-l1-1-0.dll:
  

  KernelBase!CompareStringEx

  KernelBase!CompareStringW

• api-ms-win-power-setting-l1-1-0.dll:
  

  powrprof!PowerSettingUnregisterNotification

• api-ms-win-security-base-l1-2-0.dll:
  

  KernelBase!AccessCheck	KernelBase!DuplicateToken	KernelBase!EqualSid
  KernelBase!GetLengthSid	KernelBase!GetTokenInformation	KernelBase!IsValidSid
  KernelBase!IsWellKnownSid	KernelBase!MapGenericMask

• api-ms-win-core-processthreads-l1-1-2.dll:
  

  KernelBase!OpenProcessToken	KernelBase!OpenThreadToken	kernel32!GetCurrentProcess	kernel32!GetCurrentProcessId
  kernel32!GetCurrentThread	kernel32!GetCurrentThreadId	kernel32!TerminateProcess

• api-ms-win-core-registry-l1-1-0.dll:
  

  KernelBase!RegCloseKey

  KernelBase!RegOpenKeyExW

  KernelBase!RegQueryValueExW

• api-ms-win-core-threadpool-l1-2-0.dll:
  

  KernelBase!CreateThreadpoolCleanupGroup	KernelBase!CreateThreadpoolTimer	KernelBase!CreateThreadpoolWork
  ntdll!TpPostWork	ntdll!TpReleaseCleanupGroup	ntdll!TpReleaseCleanupGroupMembers
  ntdll!TpReleaseTimer	ntdll!TpReleaseWork	ntdll!TpSetTimer
  ntdll!TpWaitForTimer	ntdll!TpWaitForWork

• api-ms-win-core-heap-l1-2-0.dll:
  

  KernelBase!GetProcessHeap

  ntdll!RtlAllocateHeap

  ntdll!RtlFreeHeap

• RPCRT4.dll:
  

  I_RpcBindingInqLocalClientPID	I_RpcOpenClientProcess	NdrServerCall2	RpcBindingVectorFree
  RpcEpRegisterW	RpcEpUnregister	RpcImpersonateClient	RpcObjectSetType
  RpcRevertToSelf	RpcServerInqBindings	RpcServerRegisterIf3	RpcServerUnregisterIfEx
  RpcServerUseProtseqEpW	RpcServerUseProtseqW

• api-ms-win-security-sddl-l1-1-0.dll:
  

  sechost!ConvertSidToStringSidW

  sechost!ConvertStringSecurityDescriptorToSecurityDescriptorW

  sechost!ConvertStringSidToSidW

• api-ms-win-core-heap-l2-1-0.dll:
  

  KernelBase!LocalFree

• api-ms-win-core-com-l1-1-1.dll:
  

  combase!CoCreateInstance

  combase!CoInitializeEx

  combase!CoTaskMemFree

  combase!CoUninitialize

• api-ms-win-core-sysinfo-l1-2-1.dll:
  

  KernelBase!GetComputerNameExW	KernelBase!GetLocalTime	KernelBase!GetSystemTime
  KernelBase!GetSystemTimeAsFileTime	KernelBase!GetTickCount	KernelBase!GetTickCount64

• api-ms-win-devices-config-l1-1-1.dll:
  

  cfgmgr32!CM_Get_DevNode_PropertyW	cfgmgr32!CM_Get_Device_Interface_ListW
  cfgmgr32!CM_Get_Device_Interface_List_SizeW	cfgmgr32!CM_Get_Device_Interface_PropertyW
  cfgmgr32!CM_Locate_DevNodeW	cfgmgr32!CM_Register_Notification
  cfgmgr32!CM_Unregister_Notification

• api-ms-win-core-file-l1-2-1.dll:
  

  KernelBase!CreateFileW	KernelBase!DeleteFileW	KernelBase!GetTempFileNameW	KernelBase!GetTempPathW
  KernelBase!ReadFile	KernelBase!WriteFile

• api-ms-win-core-timezone-l1-1-0.dll:
  

  KernelBase!FileTimeToSystemTime

  KernelBase!SystemTimeToFileTime

• api-ms-win-core-file-l2-1-1.dll:
  

  KernelBase!MoveFileExW

• api-ms-win-security-lsalookup-l2-1-1.dll:
  

  advapi32!LookupAccountSidW

• api-ms-win-core-delayload-l1-1-1.dll:
  

  KernelBase!DelayLoadFailureHook

  KernelBase!ResolveDelayLoadedAPI

• api-ms-win-core-profile-l1-1-0.dll:
  

  ntdll!RtlQueryPerformanceCounter

• api-ms-win-core-threadpool-legacy-l1-1-0.dll:
  

  KernelBase!UnregisterWaitEx

• POWRPROF.dll:
  

  PowerSettingRegisterNotificationEx

• BrokerLib.dll:
  

  BrCreateBrokerInstance2

  BrDeleteBrokerInstance

  BrInitializeBrokerInstance2

  BrSignalBrokerEvent2