WinExports

generated on Apr 7, 2026

advapi32.dll

advapi32.dll — PE metadata by version
NT 5.1 x86NT 5.2 x86NT 6.0 x86NT 6.1 x64NT 6.3 x86NT 10.0 x64NT 10.0 x64
FileVersion5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)5.2.3790.3959 (srv03_sp2_rtm.070216-1710)6.0.6002.18005 (lh_sp2rtm.090410-1830)6.1.7600.16385 (win7_rtm.090713-1255)6.3.9600.16384 (winblue_rtm.130821-1623)10.0.19041.3693 (WinBuild.160101.0800)10.0.26100.7920 (WinBuild.160101.0800)
FileDescriptionAdvanced Windows 32 Base APIAdvanced Windows 32 Base APIAdvanced Windows 32 Base APIAdvanced Windows 32 Base APIAdvanced Windows 32 Base APIAdvanced Windows 32 Base APIAdvanced Windows 32 Base API

Export nameNT 5.1 x86NT 5.2 x86NT 6.0 x86NT 6.1 x64NT 6.3 x86NT 10.0 x64NT 10.0 x64
A_SHAFinal22→ 2→ 1002→ 1002→ 1002→ 1002
A_SHAInit33→ 3→ 1003→ 1003→ 1003→ 1003
A_SHAUpdate44→ 4→ 1004→ 1004→ 1004→ 1004
AbortSystemShutdownA5551005100510051005
AbortSystemShutdownW6661006100610061006
AccessCheck7771007100710071007
AccessCheckAndAuditAlarmA8881008100810081008
AccessCheckAndAuditAlarmW9991009100910091009
AccessCheckByType1010101010101010101010
AccessCheckByTypeAndAuditAlarmA1111111011101110111011
AccessCheckByTypeAndAuditAlarmW1212121012101210121012
AccessCheckByTypeResultList1313131013101310131013
AccessCheckByTypeResultListAndAuditAlarmA1414141014101410141014
AccessCheckByTypeResultListAndAuditAlarmByHandleA1515151015101510151015
AccessCheckByTypeResultListAndAuditAlarmByHandleW1616161016101610161016
AccessCheckByTypeResultListAndAuditAlarmW1717171017101710171017
AddAccessAllowedAce1818181018101810181018
AddAccessAllowedAceEx1919191019101910191019
AddAccessAllowedObjectAce2020201020102010201020
AddAccessDeniedAce2121211021102110211021
AddAccessDeniedAceEx2222221022102210221022
AddAccessDeniedObjectAce2323231023102310231023
AddAce2424241024102410241024
AddAuditAccessAce2525251025102510251025
AddAuditAccessAceEx2626261026102610261026
AddAuditAccessObjectAce2727271027102710271027
AddConditionalAce1028102810281028
AddMandatoryAce28→ 1029→ 1029→ 1029→ 1029
AddUsersToEncryptedFile2828291030103010301030
AddUsersToEncryptedFileEx301031103110311031
AdjustTokenGroups2929311032103210321032
AdjustTokenPrivileges3030321033103310331033
AllocateAndInitializeSid3131331034103410341034
AllocateLocallyUniqueId3232341035103510351035
AreAllAccessesGranted3333351036103610361036
AreAnyAccessesGranted3434361037103710371037
AuditComputeEffectivePolicyBySid371038103810381038
AuditComputeEffectivePolicyByToken381039103910391039
AuditEnumerateCategories391040104010401040
AuditEnumeratePerUserPolicy401041104110411041
AuditEnumerateSubCategories411042104210421042
AuditFree421043104310431043
AuditLookupCategoryGuidFromCategoryId431044104410441044
AuditLookupCategoryIdFromCategoryGuid441045104510451045
AuditLookupCategoryNameA451046104610461046
AuditLookupCategoryNameW461047104710471047
AuditLookupSubCategoryNameA471048104810481048
AuditLookupSubCategoryNameW481049104910491049
AuditQueryGlobalSaclA1050105010501050
AuditQueryGlobalSaclW1051105110511051
AuditQueryPerUserPolicy491052105210521052
AuditQuerySecurity501053105310531053
AuditQuerySystemPolicy511054105410541054
AuditSetGlobalSaclA1055105510551055
AuditSetGlobalSaclW1056105610561056
AuditSetPerUserPolicy521057105710571057
AuditSetSecurity531058105810581058
AuditSetSystemPolicy541059105910591059
BackupEventLogA3535551060106010601060
BackupEventLogW3636561061106110611061
BaseRegCloseKey106210621062
BaseRegCreateKey106310631063
BaseRegDeleteKeyEx106410641064
BaseRegDeleteValue106510651065
BaseRegFlushKey106610661066
BaseRegGetVersion106710671067
BaseRegLoadKey106810681068
BaseRegOpenKey106910691069
BaseRegRestoreKey107010701070
BaseRegSaveKeyEx107110711071
BaseRegSetKeySecurity107210721072
BaseRegSetValue107310731073
BaseRegUnLoadKey107410741074
BuildExplicitAccessWithNameA3737571062107510751075
BuildExplicitAccessWithNameW3838581063107610761076
BuildImpersonateExplicitAccessWithNameA3939591064107710771077
BuildImpersonateExplicitAccessWithNameW4040601065107810781078
BuildImpersonateTrusteeA4141611066107910791079
BuildImpersonateTrusteeW4242621067108010801080
BuildSecurityDescriptorA4343631068108110811081
BuildSecurityDescriptorW4444641069108210821082
BuildTrusteeWithNameA4545651070108310831083
BuildTrusteeWithNameW4646661071108410841084
BuildTrusteeWithObjectsAndNameA4747671072108510851085
BuildTrusteeWithObjectsAndNameW4848681073108610861086
BuildTrusteeWithObjectsAndSidA4949691074108710871087
BuildTrusteeWithObjectsAndSidW5050701075108810881088
BuildTrusteeWithSidA5151711076108910891089
BuildTrusteeWithSidW5252721077109010901090
CancelOverlappedAccess5353731078109110911091
ChangeServiceConfig2A5454741079109210921092
ChangeServiceConfig2W5555751080109310931093
ChangeServiceConfigA5656761081109410941094
ChangeServiceConfigW5757771082109510951095
CheckAppInitBlockedServiceIdentity78
CheckForHiberboot109610961096
CheckTokenMembership5858791083109710971097
ClearEventLogA5959801084109810981098
ClearEventLogW6060811085109910991099
CloseCodeAuthzLevel6161821086110011001100
CloseEncryptedFileRaw6262831087110111011101
CloseEventLog6363841088110211021102
CloseServiceHandle6464851089110311031103
CloseThreadWaitChainSession861090110411041104
CloseTrace6565871091110511051105
CommandLineFromMsiDescriptor6666881092110611061106
ComputeAccessTokenFromCodeAuthzLevel6767891093110711071107
ControlService6868901094110811081108
ControlServiceExA911095110911091109
ControlServiceExW921096111011101110
ControlTraceA69→ 69931097111111111111
ControlTraceW70→ 70941098111211121112
ConvertAccessToSecurityDescriptorA7171951099111311131113
ConvertAccessToSecurityDescriptorW7272961100111411141114
ConvertSDToStringSDDomainW111511151115
ConvertSDToStringSDRootDomainA7373971101111611161116
ConvertSDToStringSDRootDomainW7474981102111711171117
ConvertSecurityDescriptorToAccessA7575991103111811181118
ConvertSecurityDescriptorToAccessNamedA76761001104111911191119
ConvertSecurityDescriptorToAccessNamedW77771011105112011201120
ConvertSecurityDescriptorToAccessW78781021106112111211121
ConvertSecurityDescriptorToStringSecurityDescriptorA79791031107112211221122
ConvertSecurityDescriptorToStringSecurityDescriptorW80801041108112311231123
ConvertSidToStringSidA81811051109112411241124
ConvertSidToStringSidW82821061110112511251125
ConvertStringSDToSDDomainA83831071111112611261126
ConvertStringSDToSDDomainW84841081112112711271127
ConvertStringSDToSDRootDomainA85851091113112811281128
ConvertStringSDToSDRootDomainW86861101114112911291129
ConvertStringSecurityDescriptorToSecurityDescriptorA87871111115113011301130
ConvertStringSecurityDescriptorToSecurityDescriptorW88881121116113111311131
ConvertStringSidToSidA89891131117113211321132
ConvertStringSidToSidW90901141118113311331133
ConvertToAutoInheritPrivateObjectSecurity91911151119113411341134
CopySid92921161120113511351135
CreateCodeAuthzLevel93931171121113611361136
CreatePrivateObjectSecurity94941181122113711371137
CreatePrivateObjectSecurityEx95951191123113811381138
CreatePrivateObjectSecurityWithMultipleInheritance96961201124113911391139
CreateProcessAsUserA97971211125114011401140
CreateProcessAsUserSecure98
CreateProcessAsUserW99981221126114111411141
CreateProcessWithLogonW100991231127114211421142
CreateProcessWithTokenW1001241128114311431143
CreateRestrictedToken1011011251129114411441144
CreateServiceA1021021261130114511451145
CreateServiceEx11461146
CreateServiceW1031031271131114611471147
CreateTraceInstanceId104→ 104→ 128→ 1132→ 1147→ 1148→ 1148
CreateWellKnownSid1051051291133114811491149
CredBackupCredentials1301134114911501150
CredDeleteA1061061311135115011511151
CredDeleteW1071071321136115111521152
CredEncryptAndMarshalBinaryBlob1331137115211531153
CredEnumerateA1081081341138115311541154
CredEnumerateW1091091351139115411551155
CredFindBestCredentialA1361140115511561156
CredFindBestCredentialW1371141115611571157
CredFree1101101381142115711581158
CredGetSessionTypes1111111391143115811591159
CredGetTargetInfoA1121121401144115911601160
CredGetTargetInfoW1131131411145116011611161
CredIsMarshaledCredentialA1141141421146116111621162
CredIsMarshaledCredentialW1151151431147116211631163
CredIsProtectedA1441148116311641164
CredIsProtectedW1451149116411651165
CredMarshalCredentialA1161161461150116511661166
CredMarshalCredentialW1171171471151116611671167
CredpConvertCredential1311311681172118811891189
CredpConvertOneCredentialSize1691173118911901190
CredpConvertTargetInfo1321321701174119011911191
CredpDecodeCredential1331331711175119111921192
CredpEncodeCredential1341341721176119211931193
CredpEncodeSecret1731177119311941194
CredProfileLoaded1181181481152116711681168
CredProfileLoadedEx116811691169
CredProfileUnloaded1491153116911701170
CredProtectA1501154117011711171
CredProtectW1511155117111721172
CredReadA1191191521156117211731173
CredReadByTokenHandle1531157117311741174
CredReadDomainCredentialsA1201201541158117411751175
CredReadDomainCredentialsW1211211551159117511761176
CredReadW1221221561160117611771177
CredRenameA1231231571161117711781178
CredRenameW1241241581162117811791179
CredRestoreCredentials1591163117911801180
CredUnmarshalCredentialA1251251601164118011811181
CredUnmarshalCredentialW1261261611165118111821182
CredUnprotectA1621166118211831183
CredUnprotectW1631167118311841184
CredWriteA1271271641168118411851185
CredWriteDomainCredentialsA1281281651169118511861186
CredWriteDomainCredentialsW1291291661170118611871187
CredWriteW1301301671171118711881188
CryptAcquireContextA1351351741178119411951195
CryptAcquireContextW1361361751179119511961196
CryptContextAddRef1371371761180119611971197
CryptCreateHash1381381771181119711981198
CryptDecrypt1391391781182119811991199
CryptDeriveKey1401401791183119912001200
CryptDestroyHash1411411801184120012011201
CryptDestroyKey1421421811185120112021202
CryptDuplicateHash1431431821186120212031203
CryptDuplicateKey1441441831187120312041204
CryptEncrypt1451451841188120412051205
CryptEnumProvidersA1481481871191120712081208
CryptEnumProvidersW1491491881192120812091209
CryptEnumProviderTypesA1461461851189120512061206
CryptEnumProviderTypesW1471471861190120612071207
CryptExportKey1501501891193120912101210
CryptGenKey1511511901194121012111211
CryptGenRandom1521521911195121112121212
CryptGetDefaultProviderA1531531921196121212131213
CryptGetDefaultProviderW1541541931197121312141214
CryptGetHashParam1551551941198121412151215
CryptGetKeyParam1561561951199121512161216
CryptGetProvParam1571571961200121612171217
CryptGetUserKey1581581971201121712181218
CryptHashData1591591981202121812191219
CryptHashSessionKey1601601991203121912201220
CryptImportKey1611612001204122012211221
CryptReleaseContext1621622011205122112221222
CryptSetHashParam1631632021206122212231223
CryptSetKeyParam1641642031207122312241224
CryptSetProviderA1661662051209122512261226
CryptSetProviderExA1671672061210122612271227
CryptSetProviderExW1681682071211122712281228
CryptSetProviderW1691692081212122812291229
CryptSetProvParam1651652041208122412251225
CryptSignHashA1701702091213122912301230
CryptSignHashW1711712101214123012311231
CryptVerifySignatureA1721722111215123112321232
CryptVerifySignatureW1731732121216123212331233
CveEventWrite→ 1234→ 1234
DecryptFileA1741742131217123312351235
DecryptFileW1751752141218123412361236
DeleteAce1761762151219123512371237
DeleteService1771772161220123612381238
DeregisterEventSource1781782171221123712391239
DestroyPrivateObjectSecurity1791792181222123812401240
DuplicateEncryptionInfoFile1801802191223123912411241
DuplicateToken1811812201224124012421242
DuplicateTokenEx1821822211225124112431243
ElfBackupEventLogFileA183183222122612421244
ElfBackupEventLogFileW184184223122712431245
ElfChangeNotify185185224122812441246
ElfClearEventLogFileA186186225122912451247
ElfClearEventLogFileW187187226123012461248
ElfCloseEventLog188188227123112471249
ElfDeregisterEventSource189189228123212481250
ElfFlushEventLog190190229123312491251
ElfNumberOfRecords191191230123412501252
ElfOldestRecord192192231123512511253
ElfOpenBackupEventLogA193193232123612521254
ElfOpenBackupEventLogW194194233123712531255
ElfOpenEventLogA195195234123812541256
ElfOpenEventLogW196196235123912551257
ElfReadEventLogA197197236124012561258
ElfReadEventLogW198198237124112571259
ElfRegisterEventSourceA199199238124212581260
ElfRegisterEventSourceW200200239124312591261
ElfReportEventA201201240124412601262
ElfReportEventAndSourceW202241124512611263
ElfReportEventW202203242124612621264
EnableTrace203→ 2042431247126312651244
EnableTraceEx2441248126512661245
EnableTraceEx21249126412671246
EncryptedFileKeyInfo2062072471252126812701249
EncryptFileA2042052451250126612681247
EncryptFileW2052062461251126712691248
EncryptionDisable2072082481253126912711250
EnumDependentServicesA2082092491254127012721251
EnumDependentServicesW2092102501255127112731252
EnumDynamicTimeZoneInformation127212741253
EnumerateTraceGuids215→ 2162561261127812801259
EnumerateTraceGuidsEx2571262127912811260
EnumServiceGroupW2102112511256127312751254
EnumServicesStatusA2112122521257127412761255
EnumServicesStatusExA2122132531258127512771256
EnumServicesStatusExW2132142541259127612781257
EnumServicesStatusW2142152551260127712791258
EqualDomainSid2162172581263128012821261
EqualPrefixSid2172182591264128112831262
EqualSid2182192601265128212841263
EtwLogSysConfigExtension1283
EventAccessControl2611266128412851264
EventAccessQuery2621267128512861265
EventAccessRemove2631268128612871266
EventActivityIdControl→ 264→ 1269→ 1287→ 1288→ 1267
EventEnabled→ 265→ 1270→ 1288→ 1289→ 1268
EventProviderEnabled→ 266→ 1271→ 1289→ 1290→ 1269
EventRegister→ 267→ 1272→ 1290→ 1291→ 1270
EventSetInformation→ 1291→ 1292→ 1271
EventUnregister→ 268→ 1273→ 1292→ 1293→ 1272
EventWrite→ 269→ 1274→ 1293→ 1294→ 1273
EventWriteEndScenario→ 270→ 1275→ 1294→ 1295→ 1274
EventWriteEx1276→ 1295→ 1296→ 1275
EventWriteStartScenario→ 271→ 1277→ 1296→ 1297→ 1276
EventWriteString→ 272→ 1278→ 1297→ 1298→ 1277
EventWriteTransfer→ 273→ 1279→ 1298→ 1299→ 1278
FileEncryptionStatusA2192202741280129913001279
FileEncryptionStatusW2202212751281130013011280
FindFirstFreeAce2212222761282130113021281
FlushEfsCache2771283130213031282
FlushTraceA222→ 2232781284130313041283
FlushTraceW223→ 2242791285130413051284
FreeEncryptedFileKeyInfo2242252801286130513061285
FreeEncryptedFileMetadata2811287130613071286
FreeEncryptionCertificateHashList2252262821288130713081287
FreeInheritedFromArray2262272831289130813091288
FreeSid2272282841290130913101289
GetAccessPermissionsForObjectA2282292851291131013111290
GetAccessPermissionsForObjectW2292302861292131113121291
GetAce2302312871293131213131292
GetAclInformation2312322881294131313141293
GetAuditedPermissionsFromAclA2322332891295131413151294
GetAuditedPermissionsFromAclW2332342901296131513161295
GetCurrentHwProfileA2342352911297131613171296
GetCurrentHwProfileW2352362921298131713181297
GetDynamicTimeZoneInformationEffectiveYears131813191298
GetEffectiveRightsFromAclA2362372931299131913201299
GetEffectiveRightsFromAclW2372382941300132013211300
GetEncryptedFileMetadata2951301132113221301
GetEventLogInformation2382392961302132213231302
GetExplicitEntriesFromAclA2392402971303132313241303
GetExplicitEntriesFromAclW2402412981304132413251304
GetFileSecurityA2412422991305132513261305
GetFileSecurityW2422433001306132613271306
GetInformationCodeAuthzLevelW2432443011307132713281307
GetInformationCodeAuthzPolicyW2442453021308132813291308
GetInheritanceSourceA2452463031309132913301309
GetInheritanceSourceW2462473041310133013311310
GetKernelObjectSecurity2472483051311133113321311
GetLengthSid2482493061312133213331312
GetLocalManagedApplicationData2492503071313133313341313
GetLocalManagedApplications2502513081314133413351314
GetManagedApplicationCategories2512523091315133513361315
GetManagedApplications2522533101316133613371316
GetMultipleTrusteeA2532543111317133713381317
GetMultipleTrusteeOperationA2542553121318133813391318
GetMultipleTrusteeOperationW2552563131319133913401319
GetMultipleTrusteeW2562573141320134013411320
GetNamedSecurityInfoA2572583151321134113421321
GetNamedSecurityInfoExA2582593161322134213431322
GetNamedSecurityInfoExW2592603171323134313441323
GetNamedSecurityInfoW2602613181324134413451324
GetNumberOfEventLogRecords2612623191325134513461325
GetOldestEventLogRecord2622633201326134613471326
GetOverlappedAccessResults2632643211327134713481327
GetPrivateObjectSecurity2642653221328134813491328
GetSecurityDescriptorControl2652663231329134913501329
GetSecurityDescriptorDacl2662673241330135013511330
GetSecurityDescriptorGroup2672683251331135113521331
GetSecurityDescriptorLength2682693261332135213531332
GetSecurityDescriptorOwner2692703271333135313541333
GetSecurityDescriptorRMControl2702713281334135413551334
GetSecurityDescriptorSacl2712723291335135513561335
GetSecurityInfo2722733301336135613571336
GetSecurityInfoExA2732743311337135713581337
GetSecurityInfoExW2742753321338135813591338
GetServiceDisplayNameA2752763331339135913601339
GetServiceDisplayNameW2762773341340136013611340
GetServiceKeyNameA2772783351341136113621341
GetServiceKeyNameW2782793361342136213631342
GetSidIdentifierAuthority2792803371343136313641343
GetSidLengthRequired2802813381344136413651344
GetSidSubAuthority2812823391345136513661345
GetSidSubAuthorityCount2822833401346136613671346
GetStringConditionFromBinary136713681347
GetThreadWaitChain3411347136813691348
GetTokenInformation2832843421348136913701349
GetTraceEnableFlags284→ 285→ 343→ 1349→ 1370→ 1371→ 1350
GetTraceEnableLevel285→ 286→ 344→ 1350→ 1371→ 1372→ 1351
GetTraceLoggerHandle286→ 287→ 345→ 1351→ 1372→ 1373→ 1352
GetTrusteeFormA2872883461352137313741353
GetTrusteeFormW2882893471353137413751354
GetTrusteeNameA2892903481354137513761355
GetTrusteeNameW2902913491355137613771356
GetTrusteeTypeA2912923501356137713781357
GetTrusteeTypeW2922933511357137813791358
GetUserNameA2932943521358137913801359
GetUserNameW2942953531359138013811360
GetWindowsAccountDomainSid2952963541360138113821361
I_QueryTagInformation297355→ 1361→ 1382→ 1383→ 1362
I_ScGetCurrentGroupStateW1111001100110011001
I_ScIsSecurityProcess296298356→ 1362→ 1383→ 1384→ 1363
I_ScPnPGetServiceName297299357→ 1363→ 1384→ 1385→ 1364
I_ScQueryServiceConfig358→ 1364→ 1385→ 1386→ 1365
I_ScRegisterPreshutdownRestart1386→ 1387→ 1366
I_ScReparseServiceDatabase13881367
I_ScSendPnPMessage359→ 1365→ 1387→ 1389→ 1368
I_ScSendTSMessage298300360→ 1366→ 1388→ 1390→ 1369
I_ScSetServiceBitsA2993013611367138913911370
I_ScSetServiceBitsW3003023621368139013921371
I_ScValidatePnPService363→ 1369→ 1391→ 1393→ 1372
IdentifyCodeAuthzLevelW3013033641370139213941373
ImpersonateAnonymousToken3023043651371139313951374
ImpersonateLoggedOnUser3033053661372139413961375
ImpersonateNamedPipeClient3043063671373139513971376
ImpersonateSelf3053073681374139613981377
InitializeAcl3063083691375139713991378
InitializeSecurityDescriptor3073093701376139814001379
InitializeSid3083103711377139914011380
InitiateShutdownA3721378140014021381
InitiateShutdownW3731379140114031382
InitiateSystemShutdownA3093113741380140214041383
InitiateSystemShutdownExA3103123751381140314051384
InitiateSystemShutdownExW3113133761382140414061385
InitiateSystemShutdownW3123143771383140514071386
InstallApplication3133153781384140614081387
IsTextUnicode3143163791385140714091388
IsTokenRestricted3153173801386140814101389
IsTokenUntrusted3163183811387140914111390
IsValidAcl3173193821388141014121391
IsValidRelativeSecurityDescriptor383→ 1389→ 1411→ 1413→ 1392
IsValidSecurityDescriptor3183203841390141214141393
IsValidSid3193213851391141314151394
IsWellKnownSid3203223861392141414161395
LockServiceDatabase3213233871393141514171396
LogonSecondaryUserIntoSessionW1397
LogonUserA3223243881394141614181398
LogonUserExA3233253891395141714191399
LogonUserExExW3901396141814201400
LogonUserExW3243263911397141914211401
LogonUserW3253273921398142014221402
LookupAccountNameA3263283931399142114231403
LookupAccountNameW3273293941400142214241404
LookupAccountSidA3283303951401142314251405
LookupAccountSidW3293313961402142414261406
LookupPrivilegeDisplayNameA3303323971403142514271407
LookupPrivilegeDisplayNameW3313333981404142614281408
LookupPrivilegeNameA3323343991405142714291409
LookupPrivilegeNameW3333354001406142814301410
LookupPrivilegeValueA3343364011407142914311411
LookupPrivilegeValueW3353374021408143014321412
LookupSecurityDescriptorPartsA3363384031409143114331413
LookupSecurityDescriptorPartsW3373394041410143214341414
LsaAddAccountRights3383404051411143314351415
LsaAddPrivilegesToAccount3393414061412143414361416
LsaClearAuditLog3403424071413143514371417
LsaClose3413434081414143614381418
LsaConfigureAutoLogonCredentials1419
LsaCreateAccount3423444091415143714391420
LsaCreateSecret3433454101416143814401421
LsaCreateTrustedDomain3443464111417143914411422
LsaCreateTrustedDomainEx3453474121418144014421423
LsaDelete3463484131419144114431424
LsaDeleteTrustedDomain3473494141420144214441425
LsaDisableUserArso1426
LsaEnableUserArso1427
LsaEnumerateAccountRights3483504151421144314451428
LsaEnumerateAccounts3493514161422144414461429
LsaEnumerateAccountsWithUserRight3503524171423144514471430
LsaEnumeratePrivileges3513534181424144614481431
LsaEnumeratePrivilegesOfAccount3523544191425144714491432
LsaEnumerateTrustedDomains3533554201426144814501433
LsaEnumerateTrustedDomainsEx3543564211427144914511434
LsaFreeMemory3553574221428145014521435
LsaGetAppliedCAPIDs145114531436
LsaGetDeviceRegistrationInfo1437
LsaGetQuotasForAccount3563584231429145214541438
LsaGetRemoteUserName3573594241430145314551439
LsaGetSystemAccessAccount3583604251431145414561440
LsaGetUserName3593614261432145514571441
LsaICLookupNames3603624271433145614581442
LsaICLookupNamesWithCreds3613634281434145714591443
LsaICLookupSids3623644291435145814601444
LsaICLookupSidsWithCreds3633654301436145914611445
LsaInvokeTrustScanner14621446
LsaIsUserArsoAllowed1447
LsaIsUserArsoEnabled1448
LsaLookupNames3653674321437146114631449
LsaLookupNames23643664311438146014641450
LsaLookupPrivilegeDisplayName3663684331439146214651451
LsaLookupPrivilegeName3673694341440146314661452
LsaLookupPrivilegeValue3683704351441146414671453
LsaLookupSids3693714361442146614681454
LsaLookupSids2146514691455
LsaManageSidNameMapping4371443146714701456
LsaNtStatusToWinError3703724381444146814711457
LsaOpenAccount3713734391445146914721458
LsaOpenPolicy3723744401446147014731459
LsaOpenPolicySce3733754411447147114741460
LsaOpenSecret3743764421448147214751461
LsaOpenTrustedDomain3753774431449147314761462
LsaOpenTrustedDomainByName3763784441450147414771463
LsaProfileDeleted1464
LsaPurgeLocalSystemAccessTable1465
LsaQueryCAPs147514781466
LsaQueryDomainInformationPolicy3773794451451147614791467
LsaQueryForestTrustInformation3783804461452147714801468
LsaQueryForestTrustInformation214811469
LsaQueryInformationPolicy3803824481454147914831471
LsaQueryInfoTrustedDomain3793814471453147814821470
LsaQueryLocalSystemAccess1472
LsaQueryLocalSystemAccessAll1473
LsaQuerySecret3813834491455148014841474
LsaQuerySecurityObject3823844501456148114851475
LsaQueryTrustedDomainInfo3833854511457148214861476
LsaQueryTrustedDomainInfoByName3843864521458148314871477
LsaRemoveAccountRights3853874531459148414881478
LsaRemovePrivilegesFromAccount3863884541460148514891479
LsaRetrievePrivateData3873894551461148614901480
LsaSetCAPs148714911481
LsaSetDomainInformationPolicy3883904561462148814921482
LsaSetForestTrustInformation3893914571463148914931483
LsaSetForestTrustInformation214941484
LsaSetInformationPolicy3903924581464149014951485
LsaSetInformationTrustedDomain3913934591465149114961486
LsaSetLocalSystemAccess1487
LsaSetQuotasForAccount3923944601466149214971488
LsaSetSecret3933954611467149314981489
LsaSetSecurityObject3943964621468149414991490
LsaSetSystemAccessAccount3953974631469149515001491
LsaSetTrustedDomainInfoByName3963984641470149615011492
LsaSetTrustedDomainInformation3973994651471149715021493
LsaStorePrivateData3984004661472149815031494
LsaValidateProcUniqueLuid1495
MakeAbsoluteSD4084104761481150915131505
MakeAbsoluteSD24074094751482150815141506
MakeSelfRelativeSD4094114771483151015151507
MapGenericMask4104124781484151115161508
MD4Final399401→ 467→ 1473→ 1499→ 1504→ 1496
MD4Init400402→ 468→ 1474→ 1500→ 1505→ 1497
MD4Update401403→ 469→ 1475→ 1501→ 1506→ 1498
MD5Final402404→ 470→ 1476→ 1502→ 1507→ 1499
MD5Init403405→ 471→ 1477→ 1503→ 1508→ 1500
MD5Update404406→ 472→ 1478→ 1504→ 1509→ 1501
MIDL_user_free_Ext150515101502
MSChapSrvChangePassword4064084741479150715111503
MSChapSrvChangePassword24054074731480150615121504
NotifyBootConfigStatus4114134791485151215171509
NotifyChangeEventLog4124144801486151315181510
NotifyServiceStatusChange4811487151415191511
NotifyServiceStatusChangeA4821488151515201512
NotifyServiceStatusChangeW4831489151615211513
NpGetUserName15221514
ObjectCloseAuditAlarmA4134154841490151715231515
ObjectCloseAuditAlarmW4144164851491151815241516
ObjectDeleteAuditAlarmA4154174861492151915251517
ObjectDeleteAuditAlarmW4164184871493152015261518
ObjectOpenAuditAlarmA4174194881494152115271519
ObjectOpenAuditAlarmW4184204891495152215281520
ObjectPrivilegeAuditAlarmA4194214901496152315291521
ObjectPrivilegeAuditAlarmW4204224911497152415301522
OpenBackupEventLogA4214234921498152515311523
OpenBackupEventLogW4224244931499152615321524
OpenEncryptedFileRawA4234254941500152715331525
OpenEncryptedFileRawW4244264951501152815341526
OpenEventLogA4254274961502152915351527
OpenEventLogW4264284971503153015361528
OpenProcessToken4274294981504153115371529
OpenSCManagerA4284304991505153215381530
OpenSCManagerW4294315001506153315391531
OpenServiceA4304325011507153415401532
OpenServiceW4314335021508153515411533
OpenThreadToken4324345031509153615421534
OpenThreadWaitChainSession5041510153715431535
OpenTraceA4334355051511153815441536
OpenTraceW4344365061512153915451537
OperationEnd154015461538
OperationStart154115471539
PerfAddCounters5071513154215481540
PerfCloseQueryHandle5081514154315491541
PerfCreateInstance509→ 1515→ 1544→ 1550→ 1542
PerfDecrementULongCounterValue510→ 1516→ 1545→ 1551→ 1543
PerfDecrementULongLongCounterValue511→ 1517→ 1546→ 1552→ 1544
PerfDeleteCounters5121518154715531545
PerfDeleteInstance513→ 1519→ 1548→ 1554→ 1546
PerfEnumerateCounterSet5141520154915551547
PerfEnumerateCounterSetInstances5151521155015561548
PerfIncrementULongCounterValue516→ 1522→ 1551→ 1557→ 1549
PerfIncrementULongLongCounterValue517→ 1523→ 1552→ 1558→ 1550
PerfOpenQueryHandle5181524155315591551
PerfQueryCounterData5191525155415601552
PerfQueryCounterInfo5201526155515611553
PerfQueryCounterSetRegistrationInfo5211527155615621554
PerfQueryInstance522→ 1528→ 1557→ 1563→ 1555
PerfRegCloseKey155815641556
PerfRegEnumKey155915651557
PerfRegEnumValue156015661558
PerfRegQueryInfoKey156115671559
PerfRegQueryValue156215681560
PerfRegSetValue156315691561
PerfSetCounterRefValue523→ 1529→ 1564→ 1570→ 1562
PerfSetCounterSetInfo524→ 1530→ 1565→ 1571→ 1563
PerfSetULongCounterValue525→ 1531→ 1566→ 1572→ 1564
PerfSetULongLongCounterValue526→ 1532→ 1567→ 1573→ 1565
PerfStartProvider527→ 1533→ 1568→ 1574→ 1566
PerfStartProviderEx528→ 1534→ 1569→ 1575→ 1567
PerfStopProvider529→ 1535→ 1570→ 1576→ 1568
PrivilegeCheck4354375301536157115771569
PrivilegedServiceAuditAlarmA4364385311537157215781570
PrivilegedServiceAuditAlarmW4374395321538157315791571
ProcessIdleTasks4384405331539157415801572
ProcessIdleTasksW5341540157515811573
ProcessTrace4394415351541157615821574
QueryAllTracesA440→ 4425361542157715831575
QueryAllTracesW441→ 4435371543157815841576
QueryLocalUserServiceName15851577
QueryRecoveryAgentsOnEncryptedFile4424445381544157915861578
QuerySecurityAccessMask5391545158015871579
QueryServiceConfig2A4434455401546158115881580
QueryServiceConfig2W4444465411547158215891581
QueryServiceConfigA4454475421548158315901582
QueryServiceConfigW4464485431549158415911583
QueryServiceDynamicInformation158515921584
QueryServiceLockStatusA4474495441550158615931585
QueryServiceLockStatusW4484505451551158715941586
QueryServiceObjectSecurity4494515461552158815951587
QueryServiceStatus4504525471553158915961588
QueryServiceStatusEx4514535481554159015971589
QueryTraceA452→ 4545491555159115981590
QueryTraceProcessingHandle15991591
QueryTraceW453→ 4555501556159216001592
QueryUserServiceName16011593
QueryUserServiceNameForContext16021594
QueryUsersOnEncryptedFile4544565511557159316031595
QueryWindows31FilesMigration455
ReadEncryptedFileRaw4564575521558159416041596
ReadEventLogA4574585531559159516051597
ReadEventLogW4584595541560159616061598
RegCloseKey4594605551561159716071599
RegConnectRegistryA4604615561562159816081600
RegConnectRegistryExA4625571563159916091601
RegConnectRegistryExW4635581564160016101602
RegConnectRegistryW4614645591565160116111603
RegCopyTreeA5601566160216121604
RegCopyTreeW5611567160316131605
RegCreateKeyA4624655621568160416141606
RegCreateKeyExA4634665631569160516151607
RegCreateKeyExW4644675641570160616161608
RegCreateKeyTransactedA5651571160716171609
RegCreateKeyTransactedW5661572160816181610
RegCreateKeyW4654685671573160916191611
RegDeleteKeyA4664695681574161016201612
RegDeleteKeyExA4705691575161116211613
RegDeleteKeyExW4715701576161216221614
RegDeleteKeyTransactedA5711577161316231615
RegDeleteKeyTransactedW5721578161416241616
RegDeleteKeyValueA5731579161516251617
RegDeleteKeyValueW5741580161616261618
RegDeleteKeyW4674725751581161716271619
RegDeleteTreeA5761582161816281620
RegDeleteTreeW5771583161916291621
RegDeleteValueA4684735781584162016301622
RegDeleteValueW4694745791585162116311623
RegDisablePredefinedCache4704755801586162216321624
RegDisablePredefinedCacheEx5811587162316331625
RegDisableReflectionKey4765821588162416341626
RegEnableReflectionKey4775831589162516351627
RegEnumKeyA4714785841590162616361628
RegEnumKeyExA4724795851591162716371629
RegEnumKeyExW4734805861592162816381630
RegEnumKeyW4744815871593162916391631
RegEnumValueA4754825881594163016401632
RegEnumValueW4764835891595163116411633
RegFlushKey4774845901596163216421634
RegGetKeySecurity4784855911597163316431635
RegGetValueA4865921598163416441636
RegGetValueW4875931599163516451637
RegisterEventSourceA5125226371643167916891681
RegisterEventSourceW5135236381644168016901682
RegisterIdleTask5145246391645168116911683
RegisterServiceCtrlHandlerA5155256401646168216921684
RegisterServiceCtrlHandlerExA5165266411647168316931685
RegisterServiceCtrlHandlerExW5175276421648168416941686
RegisterServiceCtrlHandlerW5185286431649168516951687
RegisterTraceGuidsA519→ 529→ 644→ 1650→ 1686→ 1696→ 1688
RegisterTraceGuidsW520→ 530→ 645→ 1651→ 1687→ 1697→ 1689
RegisterWaitChainCOMCallback6461652168816981690
RegLoadAppKeyA5941600163616461638
RegLoadAppKeyW5951601163716471639
RegLoadKeyA4794885961602163816481640
RegLoadKeyW4804895971603163916491641
RegLoadMUIStringA5981604164016501642
RegLoadMUIStringW5991605164116511643
RegNotifyChangeKeyValue4814906001606164216521644
RegOpenCurrentUser4824916011607164316531645
RegOpenKeyA4834926021608164416541646
RegOpenKeyExA4844936031609164516551647
RegOpenKeyExW4854946041610164616561648
RegOpenKeyTransactedA6051611164716571649
RegOpenKeyTransactedW6061612164816581650
RegOpenKeyW4864956071613164916591651
RegOpenUserClassesRoot4874966081614165016601652
RegOverridePredefKey4884976091615165116611653
RegQueryInfoKeyA4894986101616165216621654
RegQueryInfoKeyW4904996111617165316631655
RegQueryMultipleValuesA4915006121618165416641656
RegQueryMultipleValuesW4925016131619165516651657
RegQueryReflectionKey5026141620165616661658
RegQueryValueA4935036151621165716671659
RegQueryValueExA4945046161622165816681660
RegQueryValueExW4955056171623165916691661
RegQueryValueW4965066181624166016701662
RegRenameKey6191625166116711663
RegReplaceKeyA4975076201626166216721664
RegReplaceKeyW4985086211627166316731665
RegRestoreKeyA4995096221628166416741666
RegRestoreKeyW5005106231629166516751667
RegSaveKeyA5015116241630166616761668
RegSaveKeyExA5025126251631166716771669
RegSaveKeyExW5035136261632166816781670
RegSaveKeyW5045146271633166916791671
RegSetKeySecurity5055156281634167016801672
RegSetKeyValueA6291635167116811673
RegSetKeyValueW6301636167216821674
RegSetValueA5065166311637167316831675
RegSetValueExA5075176321638167416841676
RegSetValueExW5085186331639167516851677
RegSetValueW5095196341640167616861678
RegUnLoadKeyA5105206351641167716871679
RegUnLoadKeyW5115216361642167816881680
RemoteRegEnumKeyWrapper168916991691
RemoteRegEnumValueWrapper169017001692
RemoteRegQueryInfoKeyWrapper169117011693
RemoteRegQueryMultipleValues2Wrapper17021694
RemoteRegQueryMultipleValuesWrapper17031695
RemoteRegQueryValueWrapper169217041696
RemoveTraceCallback5215316471653→ 1693→ 1705→ 1697
RemoveUsersFromEncryptedFile5225326481654169417061698
ReportEventA5235336491655169517071699
ReportEventW5245346501656169617081700
RevertToSelf5255356511657169717091701
SafeBaseRegGetKeySecurity169817101702
SaferCloseLevel5265366521658169917111703
SaferComputeTokenFromLevel5275376531659170017121704
SaferCreateLevel5285386541660170117131705
SaferGetLevelInformation5295396551661170217141706
SaferGetPolicyInformation5305406561662170317151707
SaferiChangeRegistryScope5355456611667170817201712
SaferiCompareTokenLevels5365466621668170917211713
SaferIdentifyLevel5315416571663170417161708
SaferiIsDllAllowed1669171017221714
SaferiIsExecutableFileType5375476631670171117231715
SaferiPopulateDefaultsInRegistry5385486641671171217241716
SaferiRecordEventLogEntry5395496651672171317251717
SaferiReplaceProcessThreadTokens540550666
SaferiSearchMatchingHashRules5415516671673171417261718
SaferRecordEventLogEntry5325426581664170517171709
SaferSetLevelInformation5335436591665170617181710
SaferSetPolicyInformation5345446601666170717191711
SetAclInformation5425526681674171517271719
SetEncryptedFileMetadata6691675171617281720
SetEntriesInAccessListA5435536701676171717291721
SetEntriesInAccessListW5445546711677171817301722
SetEntriesInAclA5455556721678171917311723
SetEntriesInAclW5465566731679172017321724
SetEntriesInAuditListA5475576741680172117331725
SetEntriesInAuditListW5485586751681172217341726
SetFileSecurityA5495596761682172317351727
SetFileSecurityW5505606771683172417361728
SetInformationCodeAuthzLevelW5515616781684172517371729
SetInformationCodeAuthzPolicyW5525626791685172617381730
SetKernelObjectSecurity5535636801686172717391731
SetNamedSecurityInfoA5545646811687172817401732
SetNamedSecurityInfoExA5555656821688172917411733
SetNamedSecurityInfoExW5565666831689173017421734
SetNamedSecurityInfoW5575676841690173117431735
SetPrivateObjectSecurity5585686851691173217441736
SetPrivateObjectSecurityEx5595696861692173317451737
SetSecurityAccessMask6871693173417461738
SetSecurityDescriptorControl5605706881694173517471739
SetSecurityDescriptorDacl5615716891695173617481740
SetSecurityDescriptorGroup5625726901696173717491741
SetSecurityDescriptorOwner5635736911697173817501742
SetSecurityDescriptorRMControl5645746921698173917511743
SetSecurityDescriptorSacl5655756931699174017521744
SetSecurityInfo5665766941700174117531745
SetSecurityInfoExA5675776951701174217541746
SetSecurityInfoExW5685786961702174317551747
SetServiceBits5695796971703174417561748
SetServiceObjectSecurity5705806981704174517571749
SetServiceStatus5715816991705174617581750
SetThreadToken5725827001706174717591751
SetTokenInformation5735837011707174817601752
SetTraceCallback5745847021708→ 1749→ 1761→ 1753
SetUserFileEncryptionKey5755857031709175017621754
SetUserFileEncryptionKeyEx7041710175117631755
StartServiceA5765867051711175217641756
StartServiceCtrlDispatcherA5775877061712175317651757
StartServiceCtrlDispatcherW5785887071713175417661758
StartServiceW5795897081714175517671759
StartTraceA580→ 5907091715175617681760
StartTraceW581→ 5917101716175717691761
StopTraceA582→ 5927111717175817701762
StopTraceW583→ 5937121718175917711763
SynchronizeWindows31FilesAndWindowsNTRegistry584
SystemFunction0015855947131719→ 1760→ 1772→ 1764
SystemFunction0025865957141720→ 1761→ 1773→ 1765
SystemFunction0035875967151721→ 1762→ 1774→ 1766
SystemFunction0045885977161722→ 1763→ 1775→ 1767
SystemFunction0055895987171723→ 1764→ 1776→ 1768
SystemFunction0065905997181724→ 1765→ 1777→ 1769
SystemFunction0075916007191725→ 1766→ 1778→ 1770
SystemFunction0085926017201726→ 1767→ 1779→ 1771
SystemFunction0095936027211727→ 1768→ 1780→ 1772
SystemFunction0105946037221728→ 1769→ 1781→ 1773
SystemFunction0115956047231729→ 1770→ 1782→ 1774
SystemFunction0125966057241730→ 1771→ 1783→ 1775
SystemFunction0135976067251731→ 1772→ 1784→ 1776
SystemFunction0145986077261732→ 1773→ 1785→ 1777
SystemFunction0155996087271733→ 1774→ 1786→ 1778
SystemFunction0166006097281734→ 1775→ 1787→ 1779
SystemFunction0176016107291735177617881780
SystemFunction0186026117301736→ 1777→ 1789→ 1781
SystemFunction0196036127311737177817901782
SystemFunction0206046137321738→ 1779→ 1791→ 1783
SystemFunction0216056147331739→ 1780→ 1792→ 1784
SystemFunction0226066157341740→ 1781→ 1793→ 1785
SystemFunction0236076167351741→ 1782→ 1794→ 1786
SystemFunction0246086177361742→ 1783→ 1795→ 1787
SystemFunction0256096187371743→ 1784→ 1796→ 1788
SystemFunction0266106197381744→ 1785→ 1797→ 1789
SystemFunction0276116207391745→ 1786→ 1798→ 1790
SystemFunction0286126217401746→ 1787→ 1799→ 1791
SystemFunction0296136227411747→ 1788→ 1800→ 1792
SystemFunction0306146237421748→ 1789→ 1801→ 1793
SystemFunction0316156247431749→ 1790→ 1802→ 1794
SystemFunction0326166257441750→ 1791→ 1803→ 1795
SystemFunction0336176267451751→ 1792→ 1804→ 1796
SystemFunction0346186277461752→ 1793→ 1805→ 1797
SystemFunction035619628747→ 1753→ 1794→ 1806→ 1798
SystemFunction0366206297481754→ 1795→ 1807→ 1799
SystemFunction0406216307491755→ 1796→ 1808→ 1800
SystemFunction0416226317501756→ 1797→ 1809→ 1801
TraceEvent623→ 632→ 751→ 1757→ 1798→ 1810→ 1802
TraceEventInstance624→ 633→ 752→ 1758→ 1799→ 1811→ 1803
TraceMessage625→ 634→ 753→ 1759→ 1800→ 1812→ 1804
TraceMessageVa626→ 635→ 754→ 1760→ 1801→ 1813→ 1805
TraceQueryInformation→ 1802→ 1814→ 1806
TraceSetInformation1761180318151807
TreeResetNamedSecurityInfoA6276367551762180418161808
TreeResetNamedSecurityInfoW6286377561763180518171809
TreeSetNamedSecurityInfoA7571764180618181810
TreeSetNamedSecurityInfoW7581765180718191811
TrusteeAccessToObjectA6296387591766180818201812
TrusteeAccessToObjectW6306397601767180918211813
UninstallApplication6316407611768181018221814
UnlockServiceDatabase6326417621769181118231815
UnregisterIdleTask6336427631770181218241816
UnregisterTraceGuids634→ 643→ 764→ 1771→ 1813→ 1825→ 1817
UpdateTraceA635→ 6447651772181418261818
UpdateTraceW636→ 6457661773181518271819
UsePinForEncryptedFilesA7671774181618281820
UsePinForEncryptedFilesW7681775181718291821
WaitServiceState181818301822
WdmWmiServiceMain637646
WmiCloseBlock6386477691776181918311823
WmiCloseTraceWithCursor639648
WmiConvertTimestamp640649
WmiDevInstToInstanceNameA6416507701777182018321824
WmiDevInstToInstanceNameW6426517711778182118331825
WmiEnumerateGuids6436527721779182218341826
WmiExecuteMethodA6446537731780182318351827
WmiExecuteMethodW6456547741781182418361828
WmiFileHandleToInstanceNameA6466557751782182518371829
WmiFileHandleToInstanceNameW6476567761783182618381830
WmiFreeBuffer6486577771784182718391831
WmiGetFirstTraceOffset649658
WmiGetNextEvent650659
WmiGetTraceHeader651660
WmiMofEnumerateResourcesA6526617781785182818401832
WmiMofEnumerateResourcesW6536627791786182918411833
WmiNotificationRegistrationA654→ 6637801787183018421834
WmiNotificationRegistrationW655→ 6647811788183118431835
WmiOpenBlock6566657821789183218441836
WmiOpenTraceWithCursor657666
WmiParseTraceEvent658667
WmiQueryAllDataA6596687831790183318451837
WmiQueryAllDataMultipleA6606697841791183418461838
WmiQueryAllDataMultipleW6616707851792183518471839
WmiQueryAllDataW6626717861793183618481840
WmiQueryGuidInformation6636727871794183718491841
WmiQuerySingleInstanceA6646737881795183818501842
WmiQuerySingleInstanceMultipleA6656747891796183918511843
WmiQuerySingleInstanceMultipleW6666757901797184018521844
WmiQuerySingleInstanceW6676767911798184118531845
WmiReceiveNotificationsA668→ 6777921799184218541846
WmiReceiveNotificationsW669→ 6787931800184318551847
WmiSetSingleInstanceA6706797941801184418561848
WmiSetSingleInstanceW6716807951802184518571849
WmiSetSingleItemA6726817961803184618581850
WmiSetSingleItemW6736827971804184718591851
Wow64Win32ApiEntry674683798
WriteEncryptedFileRaw6756847991805184818601852

Ordinal numbers are shown per version. → indicates a forwarder export (hover for target). Functions absent from a version are shown as blank.