auditpolcore.dll

v10.0.19041.4355 32-bit Windows NT Analyzed
Download
Description
Audit Policy Program
Authors
© Microsoft Corporation. All rights reserved.
File size
57.5 KB
Uploaded
2025-12-01 07:53
Views
67
SHA-256
22cfd0f6e0dccaf229cae4c4fe983f48

Exported functions 29

AdtBackupPolicy #1 · 0x4b50
AdtBackupPolicyGeneralized #2 · 0x4b10
AdtClearPolicy #3 · 0x4e50
AdtConstructAllCategoryGuids #4 · 0x6460
AdtConvertGuidStringToGuid #5 · 0x63f0
AdtConvertGuidToString #6 · 0x6360
AdtDisableSinglePrivilege #7 · 0x6230
AdtEnableSinglePrivilege #8 · 0x6210
AdtGetOption #9 · 0x4760
AdtGetPerUserPolicy #10 · 0x46f0
AdtGetSystemPolicy #11 · 0x4680
AdtListCategories #12 · 0x69e0
AdtListSubCategories #13 · 0x6ad0
AdtLoadStringEx #14 · 0x66c0
AdtParseAuditOptionName #15 · 0x6500
AdtParseGuidOrNameArray #16 · 0x66e0
AdtRemoveAllUsers #17 · 0x5280
AdtRemoveBasePolicy #18 · 0x50f0
AdtRestorePolicy #19 · 0x4cb0
AdtRestorePolicyGeneralized #20 · 0x4c70
AdtSetOption #21 · 0x4aa0
AdtSetPerUserPolicy #22 · 0x4a10
AdtSetSystemPolicy #23 · 0x4990
AuditPolicyData_DeleteAuditDataInstance #24 · 0x7880
DisplayMessage #25 · 0x8450
DisplayMessageToSpecificConsoleHandle #26 · 0x8500
GetDisplayPolicy #27 · 0x8080
LoadFormatStringAndPrintToConsole #28 · 0x8480
SetDisplayPolicy #29 · 0x8090

Imported DLLs & functions 128

api-ms-win-core-console-l1-1-0.dll 1
WriteConsoleW 0x1000e000
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x1000e010
IsDebuggerPresent 0x1000e00c
OutputDebugStringW 0x1000e008
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x1000e024
SetLastError 0x1000e020
SetUnhandledExceptionFilter 0x1000e01c
UnhandledExceptionFilter 0x1000e018
api-ms-win-core-file-l1-1-0.dll 3
CreateFileW 0x1000e034
DeleteFileW 0x1000e02c
WriteFile 0x1000e030
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x1000e03c
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x1000e044
HeapAlloc 0x1000e04c
HeapFree 0x1000e048
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x1000e054
LocalFree 0x1000e058
api-ms-win-core-kernel32-legacy-l1-1-0.dll 1
GetComputerNameW 0x1000e060
api-ms-win-core-libraryloader-l1-2-0.dll 5
DisableThreadLibraryCalls 0x1000e070
GetModuleFileNameA 0x1000e078
GetModuleHandleExW 0x1000e068
GetModuleHandleW 0x1000e06c
GetProcAddress 0x1000e074
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x1000e080
api-ms-win-core-memory-l1-1-0.dll 3
VirtualAlloc 0x1000e088
VirtualProtect 0x1000e08c
VirtualQuery 0x1000e090
api-ms-win-core-processenvironment-l1-1-0.dll 1
GetStdHandle 0x1000e098
api-ms-win-core-processthreads-l1-1-0.dll 6
GetCurrentProcess 0x1000e0a0
GetCurrentProcessId 0x1000e0a4
GetCurrentThreadId 0x1000e0a8
OpenProcessToken 0x1000e0b0
SetThreadStackGuarantee 0x1000e0ac
TerminateProcess 0x1000e0b4
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1000e0bc
api-ms-win-core-registry-l1-1-0.dll 4
RegCloseKey 0x1000e0c4
RegOpenKeyExW 0x1000e0c8
RegQueryValueExW 0x1000e0d0
RegSetValueExW 0x1000e0cc
api-ms-win-core-rtlsupport-l1-2-0.dll 1
RtlCompareMemory 0x1000e0d8
api-ms-win-core-string-l1-1-0.dll 1
WideCharToMultiByte 0x1000e0e0
api-ms-win-core-synch-l1-1-0.dll 7
CreateMutexExW 0x1000e100
CreateSemaphoreExW 0x1000e0f0
OpenSemaphoreW 0x1000e0f8
ReleaseMutex 0x1000e0ec
ReleaseSemaphore 0x1000e0f4
WaitForSingleObject 0x1000e0fc
WaitForSingleObjectEx 0x1000e0e8
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x1000e108
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemInfo 0x1000e118
GetSystemTimeAsFileTime 0x1000e114
GetTickCount 0x1000e110
api-ms-win-security-audit-l1-1-0.dll 3
AuditFree 0x1000e128
AuditQuerySystemPolicy 0x1000e124
AuditSetSystemPolicy 0x1000e120
api-ms-win-security-audit-l1-1-1.dll 9
AuditEnumerateCategories 0x1000e134
AuditEnumeratePerUserPolicy 0x1000e144
AuditEnumerateSubCategories 0x1000e138
AuditLookupCategoryNameW 0x1000e14c
AuditLookupSubCategoryNameW 0x1000e140
AuditQueryGlobalSaclW 0x1000e130
AuditQueryPerUserPolicy 0x1000e148
AuditSetGlobalSaclW 0x1000e150
AuditSetPerUserPolicy 0x1000e13c
api-ms-win-security-base-l1-1-0.dll 7
AdjustTokenPrivileges 0x1000e158
EqualSid 0x1000e168
GetSecurityDescriptorSacl 0x1000e170
InitializeSecurityDescriptor 0x1000e164
IsValidSid 0x1000e160
IsWellKnownSid 0x1000e15c
SetSecurityDescriptorSacl 0x1000e16c
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupPrivilegeValueW 0x1000e178
api-ms-win-security-provider-l1-1-0.dll 2
GetExplicitEntriesFromAclW 0x1000e180
SetEntriesInAclW 0x1000e184
api-ms-win-security-sddl-l1-1-0.dll 4
ConvertSecurityDescriptorToStringSecurityDescriptorW 0x1000e198
ConvertSidToStringSidW 0x1000e18c
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x1000e194
ConvertStringSidToSidW 0x1000e190
msvcrt.dll 45
__CxxFrameHandler3 0x1000e1cc
__dllonexit 0x1000e1ac
__iob_func 0x1000e1b4
_amsg_exit 0x1000e1c8
_callnewh 0x1000e22c
_CxxThrowException 0x1000e23c
_except_handler4_common 0x1000e24c
_initterm 0x1000e1a8
_lock 0x1000e1c0
_onexit 0x1000e1a4
_purecall 0x1000e1e8
_unlock 0x1000e1b8
_vsnprintf_s 0x1000e1f8
_vsnwprintf 0x1000e1d0
_vsnwprintf_s 0x1000e21c
_wcsicmp 0x1000e1dc
_wcsnicmp 0x1000e210
_wfopen 0x1000e200
_wtoi 0x1000e228
_XcptFilter 0x1000e1c4
??_V@YAXPAX@Z 0x1000e218
??0exception@@QAE@ABQBD@Z 0x1000e230
??0exception@@QAE@ABQBDH@Z 0x1000e234
??0exception@@QAE@ABV0@@Z 0x1000e1f4
??0exception@@QAE@XZ 0x1000e1f0
??1exception@@UAE@XZ 0x1000e1ec
??1type_info@@UAE@XZ 0x1000e248
??3@YAXPAX@Z 0x1000e1e4
?what@exception@@UBEPBDXZ 0x1000e238
fclose 0x1000e1e0
feof 0x1000e20c
ferror 0x1000e1d4
fgetws 0x1000e208
free 0x1000e1bc
malloc 0x1000e1b0
memcmp 0x1000e1a0
memcpy 0x1000e240
memcpy_s 0x1000e1d8
memmove 0x1000e244
memset 0x1000e250
qsort 0x1000e224
vfwprintf 0x1000e220
wcschr 0x1000e1fc
wprintf 0x1000e214
wscanf 0x1000e204
ntdll.dll 5
RtlAllocateHeap 0x1000e258
RtlFreeHeap 0x1000e268
RtlGUIDFromString 0x1000e260
RtlImageNtHeader 0x1000e264
RtlNtStatusToDosError 0x1000e25c