edpauditapi.dll

Description: EDP Audit API

Version: 10.0.19041.4355

Architecture: 64-bit

Operating System: Windows NT

SHA256: e2e233071caa09d498fa3232d1bb28ee

File Size: 137.0 KB

Uploaded At: Dec. 1, 2025, 7:27 a.m.

Views: 8

Exported Functions

EdpFlushTraces (Ordinal: 1, Address: 0x4560)
EdpAuditHarden (Ordinal: 2, Address: 0x3e10)
EdpAuditLogApplicationGenerated (Ordinal: 3, Address: 0x12890)
EdpAuditLogApplicationLearning (Ordinal: 4, Address: 0x12a90)
EdpAuditLogDataCopied (Ordinal: 5, Address: 0x126b0)
EdpAuditLogProtectionRemoved (Ordinal: 6, Address: 0x12ea0)
EdpAuditLogSiteLearning (Ordinal: 7, Address: 0x12d30)
EdpAuditLoggerRegister (Ordinal: 8, Address: 0x13050)
EdpAuditLoggerUnregister (Ordinal: 9, Address: 0x13070)
EdpAuditRead (Ordinal: 10, Address: 0x3eb0)
EdpGetLogFullPathFromRelativePath (Ordinal: 11, Address: 0x3f80)
ReadAuditLogByCount (Ordinal: 12, Address: 0x52e0)
ReadAuditLogByTimeRange (Ordinal: 13, Address: 0x5190)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoTaskMemAlloc (Address: 0x1800181a8)
CoTaskMemFree (Address: 0x1800181b8)
StringFromGUID2 (Address: 0x1800181b0)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1800181c8)
IsDebuggerPresent (Address: 0x1800181d0)
OutputDebugStringW (Address: 0x1800181d8)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1800181e8)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1800181f8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180018208)
SetLastError (Address: 0x180018218)
SetUnhandledExceptionFilter (Address: 0x180018210)
UnhandledExceptionFilter (Address: 0x180018220)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x180018248)
FindClose (Address: 0x180018230)
FindFirstFileW (Address: 0x180018238)
FindNextFileW (Address: 0x180018250)
GetFileAttributesW (Address: 0x180018240)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180018260)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180018288)
HeapAlloc (Address: 0x180018298)
HeapDestroy (Address: 0x180018270)
HeapFree (Address: 0x180018280)
HeapReAlloc (Address: 0x180018278)
HeapSize (Address: 0x180018290)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1800182b0)
LocalFree (Address: 0x1800182a8)

api-ms-win-core-libraryloader-l1-2-0.dll

GetModuleFileNameA (Address: 0x1800182c8)
GetModuleHandleExW (Address: 0x1800182d0)
GetModuleHandleW (Address: 0x1800182c0)
GetProcAddress (Address: 0x1800182d8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1800182e8)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x180018310)
GetCurrentProcessId (Address: 0x1800182f8)
GetCurrentThreadId (Address: 0x180018300)
TerminateProcess (Address: 0x180018308)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180018320)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180018340)
RtlLookupFunctionEntry (Address: 0x180018338)
RtlVirtualUnwind (Address: 0x180018330)

api-ms-win-core-string-l1-1-0.dll

GetStringTypeW (Address: 0x180018360)
MultiByteToWideChar (Address: 0x180018350)
WideCharToMultiByte (Address: 0x180018358)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1800183a8)
CreateMutexExW (Address: 0x1800183c8)
CreateSemaphoreExW (Address: 0x1800183b8)
DeleteCriticalSection (Address: 0x1800183d8)
EnterCriticalSection (Address: 0x1800183d0)
InitializeCriticalSectionEx (Address: 0x180018380)
InitializeSRWLock (Address: 0x1800183c0)
LeaveCriticalSection (Address: 0x1800183a0)
OpenSemaphoreW (Address: 0x180018398)
ReleaseMutex (Address: 0x180018378)
ReleaseSemaphore (Address: 0x1800183b0)
ReleaseSRWLockExclusive (Address: 0x180018388)
WaitForSingleObject (Address: 0x180018390)
WaitForSingleObjectEx (Address: 0x180018370)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x1800183f0)
Sleep (Address: 0x1800183e8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x180018408)
GetTickCount (Address: 0x180018400)
GetWindowsDirectoryW (Address: 0x180018410)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x180018428)
SystemTimeToTzSpecificLocalTime (Address: 0x180018420)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x180018438)
EncodePointer (Address: 0x180018440)

api-ms-win-eventing-consumer-l1-1-0.dll

CloseTrace (Address: 0x180018460)
OpenTraceW (Address: 0x180018450)
ProcessTrace (Address: 0x180018458)

api-ms-win-eventing-controller-l1-1-0.dll

ControlTraceW (Address: 0x180018478)
EventAccessControl (Address: 0x180018470)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x180018490)
EventSetInformation (Address: 0x180018498)
EventUnregister (Address: 0x1800184a0)
EventWriteTransfer (Address: 0x180018488)

api-ms-win-eventing-tdh-l1-1-0.dll

TdhGetEventInformation (Address: 0x1800184c0)
TdhGetProperty (Address: 0x1800184b8)
TdhGetPropertySize (Address: 0x1800184b0)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x1800184d0)

msvcrt.dll

___lc_codepage_func (Address: 0x1800185b8)
___lc_handle_func (Address: 0x1800185c0)
___mb_cur_max_func (Address: 0x180018528)
__C_specific_handler (Address: 0x1800185f8)
__crtLCMapStringW (Address: 0x1800184f8)
__CxxFrameHandler3 (Address: 0x1800186b0)
__dllonexit (Address: 0x1800185e0)
__pctype_func (Address: 0x180018638)
__uncaught_exception (Address: 0x180018648)
_amsg_exit (Address: 0x180018628)
_callnewh (Address: 0x180018510)
_CxxThrowException (Address: 0x180018538)
_errno (Address: 0x180018518)
_initterm (Address: 0x180018600)
_ismbblead (Address: 0x180018520)
_lock (Address: 0x1800185f0)
_onexit (Address: 0x1800185d8)
_purecall (Address: 0x180018578)
_unlock (Address: 0x1800185e8)
_vscwprintf (Address: 0x180018560)
_vsnprintf_s (Address: 0x180018668)
_vsnwprintf (Address: 0x1800186a0)
_wcsdup (Address: 0x1800184f0)
_wsetlocale (Address: 0x180018500)
_XcptFilter (Address: 0x180018660)
??_V@YAXPEAX@Z (Address: 0x180018620)
??0bad_cast@@QEAA@AEBV0@@Z (Address: 0x1800185b0)
??0bad_cast@@QEAA@PEBD@Z (Address: 0x1800185c8)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x180018568)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x180018640)
??0exception@@QEAA@AEBV0@@Z (Address: 0x180018670)
??0exception@@QEAA@XZ (Address: 0x180018678)
??1bad_cast@@UEAA@XZ (Address: 0x180018618)
??1exception@@UEAA@XZ (Address: 0x180018688)
??1type_info@@UEAA@XZ (Address: 0x1800185d0)
??3@YAXPEAX@Z (Address: 0x180018690)
?what@exception@@UEBAPEBDXZ (Address: 0x180018570)
abort (Address: 0x1800184e0)
calloc (Address: 0x1800185a8)
free (Address: 0x180018610)
localeconv (Address: 0x1800186a8)
malloc (Address: 0x180018608)
memcpy (Address: 0x180018658)
memcpy_s (Address: 0x180018698)
memmove (Address: 0x180018650)
memmove_s (Address: 0x180018540)
memset (Address: 0x1800184e8)
setlocale (Address: 0x180018508)
sprintf_s (Address: 0x180018530)
strcspn (Address: 0x180018580)
strncpy_s (Address: 0x1800185a0)
strnlen (Address: 0x180018550)
swprintf_s (Address: 0x180018558)
vswprintf_s (Address: 0x180018588)
wcscat_s (Address: 0x180018590)
wcscpy_s (Address: 0x180018598)
wcsncpy_s (Address: 0x180018680)
wcsnlen (Address: 0x180018630)
wcsrchr (Address: 0x180018548)

ntdll.dll

NtClose (Address: 0x1800186e0)
NtCreateFile (Address: 0x1800186c0)
NtReadFile (Address: 0x180018700)
RtlAllocateHeap (Address: 0x1800186f8)
RtlFreeHeap (Address: 0x1800186d0)
RtlGetNtSystemRoot (Address: 0x1800186d8)
RtlInitUnicodeString (Address: 0x1800186f0)
RtlNtStatusToDosError (Address: 0x1800186c8)
RtlValidSid (Address: 0x1800186e8)

WS2_32.dll

ntohl (Address: 0x180018178)
ntohs (Address: 0x180018190)
WSAAddressToStringW (Address: 0x180018198)
WSACleanup (Address: 0x180018180)
WSAStartup (Address: 0x180018188)