tdh.dll
v10.0.19041.5915
32-bit
Windows NT
Analyzed
Exported functions 35
DllCanUnloadNow
#1 · 0x75e40
DllGetClassObject
#2 · 0x75e60
TdhAggregatePayloadFilters
#3 · 0xa1950
TdhApplyPayloadFilter
#4 · 0xa2520
TdhCleanupPayloadEventFilterDescriptor
#5 · 0xa19a0
TdhCloseDecodingHandle
#6 · 0xa3aa0
TdhCreatePayloadFilter
#7 · 0xa1a00
TdhDeletePayloadFilter
#8 · 0xa1a40
TdhEnumerateManifestProviderEvents
#9 · 0x76ad0
TdhEnumerateProviderFieldInformation
#10 · 0x76b10
TdhEnumerateProviderFilters
#11 · 0xa1a90
TdhEnumerateProviders
#12 · 0x76be0
TdhEnumerateRemoteWBEMProviderFieldInformation
#13 · 0xa3160
TdhEnumerateRemoteWBEMProviders
#14 · 0xa3220
TdhFormatProperty
#15 · 0x76d20
TdhGetAllEventsInformation
#16 · 0xa1af0
TdhGetDecodingParameter
#17 · 0xa3ac0
TdhGetEventInformation
#18 · 0x76ea0
TdhGetEventMapInformation
#19 · 0x76fd0
TdhGetManifestEventInformation
#20 · 0x77040
TdhGetProperty
#21 · 0x77090
TdhGetPropertyOffsetAndSize
#22 · 0xa1b50
TdhGetPropertySize
#23 · 0x77200
TdhGetWppMessage
#24 · 0xa3b30
TdhGetWppProperty
#25 · 0xa3b60
TdhLoadManifest
#26 · 0x77360
TdhLoadManifestFromBinary
#27 · 0xa1bc0
TdhLoadManifestFromMemory
#28 · 0x773a0
TdhOpenDecodingHandle
#29 · 0xa3be0
TdhQueryProviderFieldInformation
#30 · 0x773d0
TdhQueryRemoteWBEMProviderFieldInformation
#31 · 0xa3360
TdhSetDecodingParameter
#32 · 0xa3c60
TdhUnloadManifest
#33 · 0x774c0
TdhUnloadManifestFromMemory
#34 · 0x77500
TdhValidatePayloadFilter
#35 · 0xa2cf0
No function matches your filter.
Imported DLLs & functions 184
IsDebuggerPresent
0x100d1014
DelayLoadFailureHook
0x100d101c
ResolveDelayLoadedAPI
0x100d1024
GetLastError
0x100d1030
RaiseException
0x100d103c
SetLastError
0x100d102c
SetUnhandledExceptionFilter
0x100d1038
UnhandledExceptionFilter
0x100d1034
CreateFileW
0x100d104c
FileTimeToLocalFileTime
0x100d1058
FindFirstVolumeW
0x100d1044
FindNextVolumeW
0x100d1060
FindVolumeClose
0x100d1054
GetFileSize
0x100d105c
GetFileTime
0x100d1048
QueryDosDeviceW
0x100d1050
CloseHandle
0x100d1068
GetProcessHeap
0x100d1078
HeapAlloc
0x100d1074
HeapFree
0x100d1070
InitializeSListHead
0x100d1094
InterlockedFlushSList
0x100d1090
InterlockedPopEntrySList
0x100d1098
InterlockedPushEntrySList
0x100d108c
FindResourceExW
0x100d10c8
FreeLibrary
0x100d10b4
FreeResource
0x100d10c0
GetModuleFileNameW
0x100d10ac
GetModuleHandleW
0x100d10a4
GetProcAddress
0x100d10b0
LoadLibraryExW
0x100d10b8
LoadResource
0x100d10a8
LoadStringW
0x100d10a0
LockResource
0x100d10c4
SizeofResource
0x100d10bc
FormatMessageW
0x100d10d0
CreateFileMappingW
0x100d10dc
MapViewOfFile
0x100d10e0
UnmapViewOfFile
0x100d10d8
ExpandEnvironmentStringsW
0x100d10f8
GetCurrentDirectoryW
0x100d10ec
GetEnvironmentVariableA
0x100d10f4
GetEnvironmentVariableW
0x100d10e8
SearchPathW
0x100d10f0
GetCurrentProcess
0x100d1100
GetCurrentProcessId
0x100d110c
GetCurrentThreadId
0x100d1108
TerminateProcess
0x100d1104
IsProcessorFeaturePresent
0x100d1114
QueryPerformanceCounter
0x100d111c
RegCloseKey
0x100d1134
RegEnumKeyExW
0x100d1128
RegOpenKeyExW
0x100d1130
RegQueryInfoKeyW
0x100d1124
RegQueryValueExW
0x100d112c
CompareStringOrdinal
0x100d1140
MultiByteToWideChar
0x100d1144
WideCharToMultiByte
0x100d113c
AcquireSRWLockExclusive
0x100d117c
AcquireSRWLockShared
0x100d1174
CreateEventW
0x100d1170
DeleteCriticalSection
0x100d114c
EnterCriticalSection
0x100d1158
InitializeCriticalSection
0x100d1150
InitializeCriticalSectionAndSpinCount
0x100d1168
InitializeCriticalSectionEx
0x100d116c
LeaveCriticalSection
0x100d1154
ReleaseSRWLockExclusive
0x100d1180
ReleaseSRWLockShared
0x100d1178
ResetEvent
0x100d1160
SetEvent
0x100d1164
WaitForSingleObjectEx
0x100d115c
InitOnceExecuteOnce
0x100d1188
GetSystemTimeAsFileTime
0x100d1190
FileTimeToSystemTime
0x100d1198
IsWow64Process
0x100d11a8
Wow64DisableWow64FsRedirection
0x100d11a4
Wow64RevertWow64FsRedirection
0x100d11a0
__CxxFrameHandler3
0x100d12a0
__std_terminate
0x100d129c
_CxxThrowException
0x100d125c
_except_handler4_common
0x100d1258
_o___acrt_iob_func
0x100d1290
_o___std_exception_copy
0x100d127c
_o___std_exception_destroy
0x100d1278
_o___std_type_info_destroy_list
0x100d1274
_o___stdio_common_vfprintf
0x100d1270
_o___stdio_common_vsnwprintf_s
0x100d126c
_o___stdio_common_vsprintf
0x100d1268
_o___stdio_common_vsprintf_s
0x100d1264
_o___stdio_common_vswprintf
0x100d1260
_o___stdio_common_vswscanf
0x100d12a4
_o__callnewh
0x100d11b0
_o__cexit
0x100d11b4
_o__configure_narrow_argv
0x100d11b8
_o__crt_atexit
0x100d11bc
_o__errno
0x100d11c0
_o__execute_onexit_table
0x100d11c4
_o__initialize_narrow_environment
0x100d11c8
_o__initialize_onexit_table
0x100d11cc
_o__invalid_parameter_noinfo_noreturn
0x100d11d0
_o__purecall
0x100d11d4
_o__register_onexit_function
0x100d11d8
_o__resetstkoflw
0x100d11dc
_o__seh_filter_dll
0x100d11e0
_o__splitpath_s
0x100d11e4
_o__wcsicmp
0x100d11ec
_o__wcsnicmp
0x100d11f0
_o__wcstoi64
0x100d11f4
_o__wcstoui64
0x100d11f8
_o__wfopen
0x100d11fc
_o__wsplitpath_s
0x100d1200
_o__wtoi
0x100d1204
_o_ceil
0x100d1208
_o_fclose
0x100d120c
_o_fgets
0x100d1210
_o_fgetws
0x100d1214
_o_fopen
0x100d1218
_o_fputs
0x100d121c
_o_free
0x100d1220
_o_isdigit
0x100d1224
_o_iswspace
0x100d1228
_o_iswxdigit
0x100d122c
_o_malloc
0x100d1230
_o_memcpy_s
0x100d1234
_o_strcpy_s
0x100d1238
_o_strncpy_s
0x100d123c
_o_terminate
0x100d1240
_o_towlower
0x100d1244
_o_wcscpy_s
0x100d1248
_o_wcstok_s
0x100d124c
_o_wcstol
0x100d1250
_o_wcstoul
0x100d1254
memcmp
0x100d12a8
memcpy
0x100d12ac
memmove
0x100d11e8
strchr
0x100d1288
strrchr
0x100d128c
strstr
0x100d1284
wcschr
0x100d1298
wcsrchr
0x100d1280
wcsstr
0x100d1294
memset
0x100d12d4
strncmp
0x100d12c0
strnlen
0x100d12cc
wcscspn
0x100d12d8
wcsncmp
0x100d12d0
wcsnlen
0x100d12c4
wcsspn
0x100d12c8
GetTraceEnableFlags
0x100d12f0
GetTraceEnableLevel
0x100d12f4
GetTraceLoggerHandle
0x100d12ec
RegisterTraceGuidsW
0x100d12f8
TraceEvent
0x100d12e0
TraceMessage
0x100d12e8
UnregisterTraceGuids
0x100d12e4
CloseTrace
0x100d1304
OpenTraceW
0x100d1308
ProcessTrace
0x100d1300
GetLengthSid
0x100d131c
LookupAccountSidLocalW
0x100d1324
ntdll.dll
12
RtlAcquireSRWLockExclusive
0x100d1340
RtlAcquireSRWLockShared
0x100d1344
RtlEthernetAddressToStringW
0x100d1358
RtlGUIDFromString
0x100d134c
RtlInitializeSRWLock
0x100d1338
RtlIpv4AddressToStringExW
0x100d1354
RtlIpv6AddressToStringExW
0x100d1364
RtlIpv6AddressToStringW
0x100d135c
RtlLengthRequiredSid
0x100d1360
RtlReleaseSRWLockExclusive
0x100d133c
RtlReleaseSRWLockShared
0x100d1348
RtlSubAuthorityCountSid
0x100d1350
EtwQueryRealtimeConsumer
0x100d1000
No function matches your filter.