tdh.dll

v10.0.19041.5915 64-bit Windows NT Analyzed
Download
Description
Event Trace Helper Library
Authors
© Microsoft Corporation. All rights reserved.
File size
1.1 MB
Uploaded
2025-12-01 07:40
Views
123
SHA-256
ff70ee258e974fb7b775c14d6f7b1be7

Exported functions 35

DllCanUnloadNow #1 · 0x12470
DllGetClassObject #2 · 0x12490
TdhAggregatePayloadFilters #3 · 0x12640
TdhApplyPayloadFilter #4 · 0x1a7d0
TdhCleanupPayloadEventFilterDescriptor #5 · 0x12690
TdhCloseDecodingHandle #6 · 0x1ff50
TdhCreatePayloadFilter #7 · 0x12700
TdhDeletePayloadFilter #8 · 0x12740
TdhEnumerateManifestProviderEvents #9 · 0x13070
TdhEnumerateProviderFieldInformation #10 · 0x130a0
TdhEnumerateProviderFilters #11 · 0x127b0
TdhEnumerateProviders #12 · 0xb190
TdhEnumerateRemoteWBEMProviderFieldInformation #13 · 0x1ef60
TdhEnumerateRemoteWBEMProviders #14 · 0x1f060
TdhFormatProperty #15 · 0x131a0
TdhGetAllEventsInformation #16 · 0x12810
TdhGetDecodingParameter #17 · 0x1ff70
TdhGetEventInformation #18 · 0x4ad0
TdhGetEventMapInformation #19 · 0x133a0
TdhGetManifestEventInformation #20 · 0x13430
TdhGetProperty #21 · 0x44c0
TdhGetPropertyOffsetAndSize #22 · 0x128a0
TdhGetPropertySize #23 · 0x3ed0
TdhGetWppMessage #24 · 0x1ffe0
TdhGetWppProperty #25 · 0x20010
TdhLoadManifest #26 · 0x13490
TdhLoadManifestFromBinary #27 · 0x12950
TdhLoadManifestFromMemory #28 · 0x134e0
TdhOpenDecodingHandle #29 · 0x200d0
TdhQueryProviderFieldInformation #30 · 0xb0e0
TdhQueryRemoteWBEMProviderFieldInformation #31 · 0x1f1f0
TdhSetDecodingParameter #32 · 0x20180
TdhUnloadManifest #33 · 0x13500
TdhUnloadManifestFromMemory #34 · 0x13550
TdhValidatePayloadFilter #35 · 0x1b0b0

Imported DLLs & functions 186

api-ms-win-core-datetime-l1-1-0.dll 2
GetDateFormatW 0x180055da0
GetTimeFormatW 0x180055da8
api-ms-win-core-debug-l1-1-0.dll 1
IsDebuggerPresent 0x180055db8
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x180055dc8
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x180055dd8
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x180055e00
RaiseException 0x180055df8
SetLastError 0x180055e08
SetUnhandledExceptionFilter 0x180055de8
UnhandledExceptionFilter 0x180055df0
api-ms-win-core-file-l1-1-0.dll 8
CreateFileW 0x180055e20
FileTimeToLocalFileTime 0x180055e50
FindFirstVolumeW 0x180055e18
FindNextVolumeW 0x180055e30
FindVolumeClose 0x180055e28
GetFileSize 0x180055e40
GetFileTime 0x180055e38
QueryDosDeviceW 0x180055e48
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x180055e60
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x180055e78
HeapAlloc 0x180055e80
HeapFree 0x180055e70
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x180055e98
LocalFree 0x180055e90
api-ms-win-core-interlocked-l1-1-0.dll 4
InitializeSListHead 0x180055ec0
InterlockedFlushSList 0x180055eb0
InterlockedPopEntrySList 0x180055ea8
InterlockedPushEntrySList 0x180055eb8
api-ms-win-core-libraryloader-l1-2-0.dll 11
FindResourceExW 0x180055f18
FreeLibrary 0x180055ed0
FreeResource 0x180055f10
GetModuleFileNameW 0x180055f08
GetModuleHandleW 0x180055ed8
GetProcAddress 0x180055ef0
LoadLibraryExW 0x180055f20
LoadResource 0x180055ef8
LoadStringW 0x180055ee8
LockResource 0x180055f00
SizeofResource 0x180055ee0
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x180055f30
api-ms-win-core-memory-l1-1-0.dll 3
CreateFileMappingW 0x180055f50
MapViewOfFile 0x180055f48
UnmapViewOfFile 0x180055f40
api-ms-win-core-processenvironment-l1-1-0.dll 5
ExpandEnvironmentStringsW 0x180055f60
GetCurrentDirectoryW 0x180055f78
GetEnvironmentVariableA 0x180055f68
GetEnvironmentVariableW 0x180055f80
SearchPathW 0x180055f70
api-ms-win-core-processthreads-l1-1-0.dll 4
GetCurrentProcess 0x180055fa0
GetCurrentProcessId 0x180055f90
GetCurrentThreadId 0x180055f98
TerminateProcess 0x180055fa8
api-ms-win-core-processthreads-l1-1-1.dll 1
IsProcessorFeaturePresent 0x180055fb8
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x180055fc8
api-ms-win-core-registry-l1-1-0.dll 5
RegCloseKey 0x180055ff8
RegEnumKeyExW 0x180055fe8
RegOpenKeyExW 0x180055fe0
RegQueryInfoKeyW 0x180055ff0
RegQueryValueExW 0x180055fd8
api-ms-win-core-string-l1-1-0.dll 3
CompareStringOrdinal 0x180056008
MultiByteToWideChar 0x180056018
WideCharToMultiByte 0x180056010
api-ms-win-core-synch-l1-1-0.dll 14
AcquireSRWLockExclusive 0x180056090
AcquireSRWLockShared 0x180056080
CreateEventW 0x180056038
DeleteCriticalSection 0x180056078
EnterCriticalSection 0x180056040
InitializeCriticalSection 0x180056028
InitializeCriticalSectionAndSpinCount 0x180056060
InitializeCriticalSectionEx 0x180056068
LeaveCriticalSection 0x180056030
ReleaseSRWLockExclusive 0x180056070
ReleaseSRWLockShared 0x180056088
ResetEvent 0x180056050
SetEvent 0x180056058
WaitForSingleObjectEx 0x180056048
api-ms-win-core-synch-l1-2-0.dll 1
InitOnceExecuteOnce 0x1800560a0
api-ms-win-core-sysinfo-l1-1-0.dll 1
GetSystemTimeAsFileTime 0x1800560b0
api-ms-win-core-timezone-l1-1-0.dll 1
FileTimeToSystemTime 0x1800560c0
api-ms-win-crt-math-l1-1-0.dll 1
ceilf 0x1800560d0
api-ms-win-crt-private-l1-1-0.dll 64
__C_specific_handler 0x1800562b8
__CxxFrameHandler3 0x180056278
__CxxFrameHandler4 0x1800562c8
__std_terminate 0x1800562c0
_CxxThrowException 0x180056218
_o___acrt_iob_func 0x1800562a0
_o___std_exception_copy 0x180056268
_o___std_exception_destroy 0x180056260
_o___std_type_info_destroy_list 0x180056258
_o___stdio_common_vfprintf 0x180056250
_o___stdio_common_vsnwprintf_s 0x180056248
_o___stdio_common_vsprintf 0x180056240
_o___stdio_common_vsprintf_s 0x180056238
_o___stdio_common_vswprintf 0x180056230
_o___stdio_common_vswscanf 0x180056228
_o__callnewh 0x180056270
_o__cexit 0x180056220
_o__configure_narrow_argv 0x1800560e0
_o__crt_atexit 0x1800560e8
_o__errno 0x1800560f0
_o__execute_onexit_table 0x1800560f8
_o__initialize_narrow_environment 0x180056100
_o__initialize_onexit_table 0x180056108
_o__invalid_parameter_noinfo_noreturn 0x180056110
_o__purecall 0x180056118
_o__register_onexit_function 0x180056120
_o__resetstkoflw 0x180056128
_o__seh_filter_dll 0x180056130
_o__splitpath_s 0x180056138
_o__wcsicmp 0x180056148
_o__wcsnicmp 0x180056150
_o__wcstoi64 0x180056158
_o__wcstoui64 0x180056160
_o__wfopen 0x180056168
_o__wsplitpath_s 0x180056170
_o__wtoi 0x180056178
_o_fclose 0x180056180
_o_fgets 0x180056188
_o_fgetws 0x180056190
_o_fopen 0x180056198
_o_fputs 0x1800561a0
_o_free 0x1800561a8
_o_isdigit 0x1800561b0
_o_iswspace 0x1800561b8
_o_iswxdigit 0x1800561c0
_o_malloc 0x1800561c8
_o_memcpy_s 0x1800561d0
_o_strcpy_s 0x1800561d8
_o_strncpy_s 0x1800561e0
_o_terminate 0x1800561e8
_o_towlower 0x1800561f0
_o_wcscpy_s 0x1800561f8
_o_wcstok_s 0x180056200
_o_wcstol 0x180056208
_o_wcstoul 0x180056210
memcmp 0x1800562d0
memcpy 0x1800562d8
memmove 0x180056140
strchr 0x180056290
strrchr 0x180056298
strstr 0x180056288
wcschr 0x1800562b0
wcsrchr 0x180056280
wcsstr 0x1800562a8
api-ms-win-crt-runtime-l1-1-0.dll 2
_initterm 0x1800562e8
_initterm_e 0x1800562f0
api-ms-win-crt-string-l1-1-0.dll 8
memset 0x180056308
strcmp 0x180056318
strncmp 0x180056338
strnlen 0x180056300
wcscspn 0x180056330
wcsncmp 0x180056320
wcsnlen 0x180056310
wcsspn 0x180056328
api-ms-win-eventing-classicprovider-l1-1-0.dll 7
GetTraceEnableFlags 0x180056360
GetTraceEnableLevel 0x180056368
GetTraceLoggerHandle 0x180056358
RegisterTraceGuidsW 0x180056370
TraceEvent 0x180056348
TraceMessage 0x180056350
UnregisterTraceGuids 0x180056378
api-ms-win-eventing-consumer-l1-1-0.dll 3
CloseTrace 0x180056398
OpenTraceW 0x180056390
ProcessTrace 0x180056388
api-ms-win-eventing-controller-l1-1-0.dll 2
StartTraceW 0x1800563a8
StopTraceW 0x1800563b0
api-ms-win-security-base-l1-1-0.dll 1
GetLengthSid 0x1800563c0
api-ms-win-security-lsalookup-l1-1-0.dll 1
LookupAccountSidLocalW 0x1800563d0
msvcp_win.dll 2
?_Xlength_error@std@@YAXPEBD@Z 0x1800563e0
?_Xout_of_range@std@@YAXPEBD@Z 0x1800563e8
ntdll.dll 15
RtlAcquireSRWLockExclusive 0x180056408
RtlAcquireSRWLockShared 0x180056410
RtlCaptureContext 0x180056460
RtlEthernetAddressToStringW 0x180056450
RtlGUIDFromString 0x180056420
RtlInitializeSRWLock 0x1800563f8
RtlIpv4AddressToStringExW 0x180056448
RtlIpv6AddressToStringExW 0x180056468
RtlIpv6AddressToStringW 0x180056458
RtlLengthRequiredSid 0x180056430
RtlLookupFunctionEntry 0x180056438
RtlReleaseSRWLockExclusive 0x180056400
RtlReleaseSRWLockShared 0x180056418
RtlSubAuthorityCountSid 0x180056428
RtlVirtualUnwind 0x180056440
SECHOST.dll 1
EtwQueryRealtimeConsumer 0x180055d90