edpauditapi.dll

v10.0.19041.4355 32-bit Windows NT Analyzed
Description
EDP Audit API
Authors
© Microsoft Corporation. All rights reserved.
File size
102.5 KB
Uploaded
2025-12-01 07:55
Views
91
SHA-256
4b2ad7825e9f0b67a97088f09fcc2d62

Exported functions 13

EdpFlushTraces #1 · 0x63d0
EdpAuditHarden #2 · 0x5dd0
EdpAuditLogApplicationGenerated #3 · 0x10f60
EdpAuditLogApplicationLearning #4 · 0x11050
EdpAuditLogDataCopied #5 · 0x10e30
EdpAuditLogProtectionRemoved #6 · 0x112a0
EdpAuditLogSiteLearning #7 · 0x111c0
EdpAuditLoggerRegister #8 · 0x11390
EdpAuditLoggerUnregister #9 · 0x113b0
EdpAuditRead #10 · 0x5e50
EdpGetLogFullPathFromRelativePath #11 · 0x5f10
ReadAuditLogByCount #12 · 0x6ee0
ReadAuditLogByTimeRange #13 · 0x6de0

Imported DLLs & functions 148

CoTaskMemAlloc 0x1001601c
CoTaskMemFree 0x10016020
StringFromGUID2 0x10016018
DebugBreak 0x10016028
IsDebuggerPresent 0x1001602c
OutputDebugStringW 0x10016030
DelayLoadFailureHook 0x10016038
ResolveDelayLoadedAPI 0x10016040
GetLastError 0x1001604c
SetLastError 0x10016054
SetUnhandledExceptionFilter 0x10016050
UnhandledExceptionFilter 0x10016048
CompareFileTime 0x1001605c
FindClose 0x1001606c
FindFirstFileW 0x10016064
FindNextFileW 0x10016068
GetFileAttributesW 0x10016060
CloseHandle 0x10016074
GetProcessHeap 0x1001608c
HeapAlloc 0x10016090
HeapDestroy 0x1001607c
HeapFree 0x10016084
HeapReAlloc 0x10016088
HeapSize 0x10016080
LocalAlloc 0x1001609c
LocalFree 0x10016098
GetModuleFileNameA 0x100160b0
GetModuleHandleExW 0x100160ac
GetModuleHandleW 0x100160a8
GetProcAddress 0x100160a4
FormatMessageW 0x100160b8
GetCurrentProcess 0x100160c0
GetCurrentProcessId 0x100160cc
GetCurrentThreadId 0x100160c8
TerminateProcess 0x100160c4
QueryPerformanceCounter 0x100160d4
GetStringTypeW 0x100160e4
MultiByteToWideChar 0x100160dc
WideCharToMultiByte 0x100160e0
AcquireSRWLockExclusive 0x10016108
CreateMutexExW 0x10016118
CreateSemaphoreExW 0x10016110
DeleteCriticalSection 0x10016120
EnterCriticalSection 0x1001611c
InitializeCriticalSectionEx 0x100160f4
InitializeSRWLock 0x10016114
LeaveCriticalSection 0x10016104
OpenSemaphoreW 0x10016100
ReleaseMutex 0x100160f0
ReleaseSemaphore 0x1001610c
ReleaseSRWLockExclusive 0x100160f8
WaitForSingleObject 0x100160fc
WaitForSingleObjectEx 0x100160ec
InitOnceExecuteOnce 0x1001612c
Sleep 0x10016128
GetSystemTimeAsFileTime 0x10016134
GetTickCount 0x10016138
GetWindowsDirectoryW 0x1001613c
FileTimeToSystemTime 0x10016148
SystemTimeToTzSpecificLocalTime 0x10016144
DecodePointer 0x10016150
EncodePointer 0x10016154
CloseTrace 0x10016164
OpenTraceW 0x1001615c
ProcessTrace 0x10016160
ControlTraceW 0x10016170
EventAccessControl 0x1001616c
EventRegister 0x1001617c
EventSetInformation 0x10016180
EventUnregister 0x10016184
EventWriteTransfer 0x10016178
TdhGetEventInformation 0x10016194
TdhGetProperty 0x10016190
TdhGetPropertySize 0x1001618c
ConvertSidToStringSidW 0x1001619c
___lc_codepage_func 0x10016210
___lc_handle_func 0x10016214
___mb_cur_max_func 0x100161c8
__crtLCMapStringW 0x100161b0
__CxxFrameHandler3 0x1001628c
__dllonexit 0x10016228
__pctype_func 0x10016250
__uncaught_exception 0x10016258
_amsg_exit 0x10016248
_callnewh 0x100161bc
_CxxThrowException 0x100161d0
_errno 0x100161c0
_except_handler4_common 0x1001621c
_initterm 0x10016234
_ismbblead 0x100161c4
_lock 0x10016230
_onexit 0x10016224
_purecall 0x100161f0
_unlock 0x1001622c
_vscwprintf 0x100161e0
_vsnprintf_s 0x10016268
_vsnwprintf 0x10016284
_wcsdup 0x100161ac
_wsetlocale 0x100161b4
_XcptFilter 0x10016264
??_V@YAXPAX@Z 0x10016244
??0bad_cast@@QAE@ABV0@@Z 0x1001620c
??0bad_cast@@QAE@PBD@Z 0x10016218
??0exception@@QAE@ABQBD@Z 0x100161e8
??0exception@@QAE@ABQBDH@Z 0x10016254
??0exception@@QAE@ABV0@@Z 0x1001626c
??0exception@@QAE@XZ 0x10016270
??1bad_cast@@UAE@XZ 0x10016240
??1exception@@UAE@XZ 0x10016278
??1type_info@@UAE@XZ 0x10016220
??3@YAXPAX@Z 0x1001627c
?what@exception@@UBEPBDXZ 0x100161ec
abort 0x100161a8
calloc 0x10016208
free 0x1001623c
localeconv 0x100161e4
malloc 0x10016238
memcpy 0x10016260
memcpy_s 0x10016280
memmove 0x1001625c
memmove_s 0x100161d4
memset 0x100161a4
setlocale 0x100161b8
sprintf_s 0x100161cc
strcspn 0x100161f4
strncpy_s 0x10016204
strnlen 0x100161dc
swprintf_s 0x10016288
vswprintf_s 0x100161f8
wcscat_s 0x100161fc
wcscpy_s 0x10016200
wcsncpy_s 0x10016274
wcsnlen 0x1001624c
wcsrchr 0x100161d8
NtClose 0x100162a4
NtCreateFile 0x10016294
NtReadFile 0x100162b4
RtlAllocateHeap 0x100162b0
RtlFreeHeap 0x1001629c
RtlGetNtSystemRoot 0x100162a0
RtlInitUnicodeString 0x100162ac
RtlNtStatusToDosError 0x10016298
RtlValidSid 0x100162a8
ntohl 0x10016008
ntohs 0x10016004
WSAAddressToStringW 0x10016000
WSACleanup 0x10016010
WSAStartup 0x1001600c