auditpolcore.dll

v10.0.19041.4355 64-bit Windows NT Analyzed
Download
Description
Audit Policy Program
Authors
© Microsoft Corporation. All rights reserved.
File size
78.5 KB
Uploaded
2025-12-01 07:23
Views
143
SHA-256
68cdd62715e783be533d9ac32439e4a0

Exported functions 29

AdtBackupPolicy #1 · 0x3e20
AdtBackupPolicyGeneralized #2 · 0x3de0
AdtClearPolicy #3 · 0x44d0
AdtConstructAllCategoryGuids #4 · 0x62b0
AdtConvertGuidStringToGuid #5 · 0x6230
AdtConvertGuidToString #6 · 0x6120
AdtDisableSinglePrivilege #7 · 0x5f60
AdtEnableSinglePrivilege #8 · 0x5f50
AdtGetOption #9 · 0x3880
AdtGetPerUserPolicy #10 · 0x37e0
AdtGetSystemPolicy #11 · 0x3750
AdtListCategories #12 · 0x6890
AdtListSubCategories #13 · 0x6a00
AdtLoadStringEx #14 · 0x6520
AdtParseAuditOptionName #15 · 0x6380
AdtParseGuidOrNameArray #16 · 0x6540
AdtRemoveAllUsers #17 · 0x4ac0
AdtRemoveBasePolicy #18 · 0x4870
AdtRestorePolicy #19 · 0x4000
AdtRestorePolicyGeneralized #20 · 0x3fc0
AdtSetOption #21 · 0x3d20
AdtSetPerUserPolicy #22 · 0x3c40
AdtSetSystemPolicy #23 · 0x3b60
AuditPolicyData_DeleteAuditDataInstance #24 · 0x7e70
DisplayMessage #25 · 0x9040
DisplayMessageToSpecificConsoleHandle #26 · 0x9160
GetDisplayPolicy #27 · 0x8b90
LoadFormatStringAndPrintToConsole #28 · 0x90a0
SetDisplayPolicy #29 · 0x8ba0

Imported DLLs & functions 132

api-ms-win-core-console-l1-1-0.dll 1
WriteConsoleW 0x18000ed48
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x18000ed68
IsDebuggerPresent 0x18000ed60
OutputDebugStringW 0x18000ed58
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x18000ed80
SetLastError 0x18000ed90
SetUnhandledExceptionFilter 0x18000ed78
UnhandledExceptionFilter 0x18000ed88
api-ms-win-core-file-l1-1-0.dll 3
CreateFileW 0x18000eda8
DeleteFileW 0x18000eda0
WriteFile 0x18000edb0
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x18000edc0
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x18000edd0
HeapAlloc 0x18000ede0
HeapFree 0x18000edd8
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x18000edf8
LocalFree 0x18000edf0
api-ms-win-core-kernel32-legacy-l1-1-0.dll 1
GetComputerNameW 0x18000ee08
api-ms-win-core-libraryloader-l1-2-0.dll 5
DisableThreadLibraryCalls 0x18000ee20
GetModuleFileNameA 0x18000ee30
GetModuleHandleExW 0x18000ee38
GetModuleHandleW 0x18000ee18
GetProcAddress 0x18000ee28
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x18000ee48
api-ms-win-core-memory-l1-1-0.dll 3
VirtualAlloc 0x18000ee68
VirtualProtect 0x18000ee58
VirtualQuery 0x18000ee60
api-ms-win-core-processenvironment-l1-1-0.dll 1
GetStdHandle 0x18000ee78
api-ms-win-core-processthreads-l1-1-0.dll 6
GetCurrentProcess 0x18000eeb0
GetCurrentProcessId 0x18000ee98
GetCurrentThreadId 0x18000ee88
OpenProcessToken 0x18000eea0
SetThreadStackGuarantee 0x18000eea8
TerminateProcess 0x18000ee90
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x18000eec0
api-ms-win-core-registry-l1-1-0.dll 4
RegCloseKey 0x18000eee0
RegOpenKeyExW 0x18000eed8
RegQueryValueExW 0x18000eed0
RegSetValueExW 0x18000eee8
api-ms-win-core-rtlsupport-l1-1-0.dll 4
RtlCaptureContext 0x18000ef10
RtlCompareMemory 0x18000ef00
RtlLookupFunctionEntry 0x18000ef08
RtlVirtualUnwind 0x18000eef8
api-ms-win-core-string-l1-1-0.dll 1
WideCharToMultiByte 0x18000ef20
api-ms-win-core-synch-l1-1-0.dll 7
CreateMutexExW 0x18000ef58
CreateSemaphoreExW 0x18000ef50
OpenSemaphoreW 0x18000ef30
ReleaseMutex 0x18000ef60
ReleaseSemaphore 0x18000ef48
WaitForSingleObject 0x18000ef40
WaitForSingleObjectEx 0x18000ef38
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x18000ef70
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemInfo 0x18000ef90
GetSystemTimeAsFileTime 0x18000ef88
GetTickCount 0x18000ef80
api-ms-win-security-audit-l1-1-0.dll 3
AuditFree 0x18000efa8
AuditQuerySystemPolicy 0x18000efb0
AuditSetSystemPolicy 0x18000efa0
api-ms-win-security-audit-l1-1-1.dll 9
AuditEnumerateCategories 0x18000eff8
AuditEnumeratePerUserPolicy 0x18000efc8
AuditEnumerateSubCategories 0x18000f000
AuditLookupCategoryNameW 0x18000efe0
AuditLookupSubCategoryNameW 0x18000efe8
AuditQueryGlobalSaclW 0x18000efd0
AuditQueryPerUserPolicy 0x18000efd8
AuditSetGlobalSaclW 0x18000eff0
AuditSetPerUserPolicy 0x18000efc0
api-ms-win-security-base-l1-1-0.dll 7
AdjustTokenPrivileges 0x18000f038
EqualSid 0x18000f030
GetSecurityDescriptorSacl 0x18000f040
InitializeSecurityDescriptor 0x18000f020
IsValidSid 0x18000f010
IsWellKnownSid 0x18000f028
SetSecurityDescriptorSacl 0x18000f018
api-ms-win-security-lsalookup-l2-1-0.dll 1
LookupPrivilegeValueW 0x18000f050
api-ms-win-security-provider-l1-1-0.dll 2
GetExplicitEntriesFromAclW 0x18000f068
SetEntriesInAclW 0x18000f060
api-ms-win-security-sddl-l1-1-0.dll 4
ConvertSecurityDescriptorToStringSecurityDescriptorW 0x18000f078
ConvertSidToStringSidW 0x18000f080
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x18000f090
ConvertStringSidToSidW 0x18000f088
msvcrt.dll 46
__C_specific_handler 0x18000f200
__CxxFrameHandler3 0x18000f0f8
__dllonexit 0x18000f0b8
__iob_func 0x18000f0d0
_amsg_exit 0x18000f1f8
_callnewh 0x18000f1b8
_CxxThrowException 0x18000f1d8
_initterm 0x18000f0d8
_lock 0x18000f0a8
_onexit 0x18000f0a0
_purecall 0x18000f130
_unlock 0x18000f0c0
_vsnprintf_s 0x18000f150
_vsnwprintf 0x18000f100
_vsnwprintf_s 0x18000f198
_wcsicmp 0x18000f118
_wcsnicmp 0x18000f180
_wfopen 0x18000f160
_wtoi 0x18000f1b0
_XcptFilter 0x18000f0f0
??_V@YAXPEAX@Z 0x18000f190
??0exception@@QEAA@AEBQEBD@Z 0x18000f1c0
??0exception@@QEAA@AEBQEBDH@Z 0x18000f1c8
??0exception@@QEAA@AEBV0@@Z 0x18000f148
??0exception@@QEAA@XZ 0x18000f140
??1exception@@UEAA@XZ 0x18000f138
??1type_info@@UEAA@XZ 0x18000f1f0
??3@YAXPEAX@Z 0x18000f128
?what@exception@@UEBAPEBDXZ 0x18000f1d0
fclose 0x18000f120
feof 0x18000f178
ferror 0x18000f108
fgetws 0x18000f170
free 0x18000f0e8
malloc 0x18000f0e0
memcmp 0x18000f0c8
memcpy 0x18000f1e0
memcpy_s 0x18000f110
memmove 0x18000f1e8
memset 0x18000f0b0
qsort 0x18000f1a8
vfwprintf 0x18000f1a0
wcschr 0x18000f158
wcscmp 0x18000f208
wprintf 0x18000f188
wscanf 0x18000f168
ntdll.dll 5
RtlAllocateHeap 0x18000f218
RtlFreeHeap 0x18000f238
RtlGUIDFromString 0x18000f228
RtlImageNtHeader 0x18000f230
RtlNtStatusToDosError 0x18000f220