| AuditComputeEffectivePolicyBySid | | 3 | 3 | 1005 |
| AuditEnumerateCategories | | 4 | 4 | 1006 |
| AuditEnumeratePerUserPolicy | | 5 | 5 | 1007 |
| AuditEnumerateSubCategories | | 6 | 6 | 1008 |
| AuditFree | | 7 | 7 | 1009 |
| AuditLookupCategoryNameW | | 8 | 8 | 1010 |
| AuditLookupSubCategoryNameW | | 9 | 9 | 1011 |
| AuditQueryGlobalSaclW | | 10 | 10 | 1012 |
| AuditQueryPerUserPolicy | | 11 | 11 | 1013 |
| AuditQuerySecurity | | 12 | 12 | 1014 |
| AuditQuerySystemPolicy | | 13 | 13 | 1015 |
| AuditSetGlobalSaclW | | 14 | 14 | 1016 |
| AuditSetPerUserPolicy | | 15 | 15 | 1017 |
| AuditSetSecurity | | 16 | 16 | 1018 |
| AuditSetSystemPolicy | | 17 | 17 | 1019 |
| BuildSecurityDescriptorForSharingAccess | | | 18 | 1020 |
| BuildSecurityDescriptorForSharingAccessEx | | | 19 | 1021 |
| CapabilityCheck | | | 20 | 1022 |
| CapabilityCheckForSingleSessionSku | | | 21 | 1023 |
| ChangeServiceConfig2A | 1 | 18 | 22 | 1024 |
| ChangeServiceConfig2W | 2 | 19 | 23 | 1025 |
| ChangeServiceConfigA | 3 | 20 | 24 | 1026 |
| ChangeServiceConfigW | 4 | 21 | 25 | 1027 |
| CloseServiceHandle | 5 | 22 | 26 | 1028 |
| CloseTrace | | 23 | 27 | 1029 |
| ControlService | 6 | 24 | 28 | 1030 |
| ControlServiceExA | 7 | 25 | 29 | 1031 |
| ControlServiceExW | 8 | 26 | 30 | 1032 |
| ControlTraceA | | 27 | 31 | 1033 |
| ControlTraceW | | 28 | 32 | 1034 |
| ConvertSDToStringSDRootDomainW | | | 33 | 1035 |
| ConvertSecurityDescriptorToStringSecurityDescriptorW | 9 | 29 | 34 | 1036 |
| ConvertSidToStringSidW | 10 | 30 | 35 | 1037 |
| ConvertStringSDToSDDomainA | | | 36 | 1038 |
| ConvertStringSDToSDDomainW | | | 37 | 1039 |
| ConvertStringSDToSDRootDomainW | | | 38 | 1040 |
| ConvertStringSecurityDescriptorToSecurityDescriptorW | 11 | 31 | 39 | 1041 |
| ConvertStringSidToSidW | 12 | 32 | 40 | 1042 |
| CreateIsolatedProcess | | | 41 | 1043 |
| CreateIsolationContainer | | | 42 | 1044 |
| CreateServiceA | 13 | 33 | 43 | 1045 |
| CreateServiceEx | | | 44 | 1046 |
| CreateServiceW | 14 | 34 | 45 | 1047 |
| CredBackupCredentials | | 35 | 46 | 1048 |
| CredDeleteA | | 36 | 47 | 1049 |
| CredDeleteW | | 37 | 48 | 1050 |
| CredEncryptAndMarshalBinaryBlob | | 38 | 49 | 1051 |
| CredEnumerateA | | 39 | 50 | 1052 |
| CredEnumerateW | | 40 | 51 | 1053 |
| CredFindBestCredentialA | | 41 | 52 | 1054 |
| CredFindBestCredentialW | | 42 | 53 | 1055 |
| CredFree | | 43 | 54 | 1056 |
| CredGetSessionTypes | | 44 | 55 | 1057 |
| CredGetTargetInfoA | | 45 | 56 | 1058 |
| CredGetTargetInfoW | | 46 | 57 | 1059 |
| CredIsMarshaledCredentialW | | 47 | 58 | 1060 |
| CredIsProtectedA | | 48 | 59 | 1061 |
| CredIsProtectedW | | 49 | 60 | 1062 |
| CredMarshalCredentialA | | 50 | 61 | 1063 |
| CredMarshalCredentialW | | 51 | 62 | 1064 |
| CredParseUserNameWithType | | 52 | 63 | 1065 |
| CredpConvertCredential | | 72 | 85 | 1087 |
| CredpConvertOneCredentialSize | | 73 | 86 | 1088 |
| CredpConvertTargetInfo | | 74 | 87 | 1089 |
| CredpDecodeCredential | | 75 | 88 | 1090 |
| CredpEncodeCredential | | 76 | 89 | 1091 |
| CredpEncodeSecret | | 77 | 90 | 1092 |
| CredProfileLoaded | | 53 | 64 | 1066 |
| CredProfileLoadedEx | | 54 | 65 | 1067 |
| CredProfileUnloaded | | 55 | 66 | 1068 |
| CredProtectA | | 56 | 67 | 1069 |
| CredProtectEx | | | 68 | 1070 |
| CredProtectW | | 57 | 69 | 1071 |
| CredReadA | | 58 | 70 | 1072 |
| CredReadByTokenHandle | | 59 | 71 | 1073 |
| CredReadDomainCredentialsA | | 60 | 72 | 1074 |
| CredReadDomainCredentialsW | | 61 | 73 | 1075 |
| CredReadW | | 62 | 74 | 1076 |
| CredRestoreCredentials | | 63 | 75 | 1077 |
| CredUnmarshalCredentialA | | 64 | 76 | 1078 |
| CredUnmarshalCredentialW | | 65 | 77 | 1079 |
| CredUnprotectA | | 66 | 78 | 1080 |
| CredUnprotectEx | | | 79 | 1081 |
| CredUnprotectW | | 67 | 80 | 1082 |
| CredWriteA | | 68 | 81 | 1083 |
| CredWriteDomainCredentialsA | | 69 | 82 | 1084 |
| CredWriteDomainCredentialsW | | 70 | 83 | 1085 |
| CredWriteW | | 71 | 84 | 1086 |
| DecodeAttributeName | | | | 1093 |
| DeleteIsolationContainer | | | 91 | 1094 |
| DeleteService | 15 | 78 | 92 | 1095 |
| EnableTraceEx2 | | 79 | 93 | 1096 |
| EncodeAttributeName | | | | 1097 |
| EnumDependentServicesW | | 80 | 94 | 1098 |
| EnumerateIdentityProviders | | 82 | 96 | 1100 |
| EnumerateTraceGuidsEx | | 83 | 97 | 1101 |
| EnumServicesStatusExW | | 81 | 95 | 1099 |
| EtwQueryRealtimeConsumer | | 84 | 98 | |
| EventAccessControl | | 85 | 99 | 1102 |
| EventAccessQuery | | 86 | 100 | 1103 |
| EventAccessRemove | | 87 | 101 | 1104 |
| FreeContainer | | | 102 | 1105 |
| FreeOperandValue | | | | 1106 |
| FreeTransientObjectSecurityDescriptor | | | 103 | 1107 |
| GetCharFromDigit | | | | 1108 |
| GetDefaultIdentityProvider | | 88 | 104 | 1109 |
| GetDigitFromChar | | | | 1110 |
| GetEmbeddedContainerIsolationPolicy | | | 105 | 1111 |
| GetEmbeddedImageMitigationPolicy | | | 106 | 1112 |
| GetIdentityProviderInfoByGUID | | 89 | 107 | 1113 |
| GetIdentityProviderInfoByName | | 90 | 108 | 1114 |
| GetOperandValue | | | | 1115 |
| GetOperatorCodeAtIndex | | | | 1116 |
| GetOperatorIndexByToken | | | | 1117 |
| GetOperatorUnaryAtIndex | | | | 1118 |
| GetPrintableOperandValue | | | | 1119 |
| GetServiceDirectory | | | 109 | 1120 |
| GetServiceDisplayNameW | | | 110 | 1121 |
| GetServiceKeyNameW | | | 111 | 1122 |
| GetServiceProcessToken | | | 112 | 1123 |
| GetServiceRegistryStateKey | | | 113 | 1124 |
| GetSharedServiceDirectory | | | | 1125 |
| GetSharedServiceRegistryStateKey | | | | 1126 |
| I_QueryTagInformation | 16 | 91 | 114 | 1127 |
| I_RegisterSvchostNotificationCallback | | | 115 | 1128 |
| I_ScBroadcastServiceControlMessage | 17 | 92 | 116 | 1129 |
| I_ScIsSecurityProcess | 18 | 93 | 117 | 1130 |
| I_ScPnPGetServiceName | 19 | 94 | 118 | 1131 |
| I_ScQueryServiceConfig | 20 | 95 | 119 | 1132 |
| I_ScRegisterDeviceNotification | | 96 | 120 | 1133 |
| I_ScRegisterPreshutdownRestart | | 97 | 121 | 1134 |
| I_ScReparseServiceDatabase | | | 122 | 1135 |
| I_ScRpcBindA | 21 | 98 | 123 | 1136 |
| I_ScRpcBindW | 22 | 99 | 124 | 1137 |
| I_ScSendPnPMessage | 23 | 100 | 125 | 1138 |
| I_ScSendTSMessage | 24 | 101 | 126 | 1139 |
| I_ScSetServiceBitsA | | 1 | 1 | 1003 |
| I_ScSetServiceBitsW | | 2 | 2 | 1004 |
| I_ScUnregisterDeviceNotification | | 102 | 127 | 1140 |
| I_ScValidatePnPService | 25 | 103 | 128 | 1141 |
| IsArrayType | | | | 1142 |
| IsValueSizeFixed | | | | 1143 |
| LocalGetConditionForString | | 104 | 129 | 1144 |
| LocalGetReferencedTokenTypesForCondition | | 105 | 130 | 1145 |
| LocalGetSidForString | | | | 1146 |
| LocalGetStringForCondition | | 106 | 131 | 1147 |
| LocalGetStringForRelativeAttribute | | | | 1148 |
| LocalRpcBindingCreateWithSecurity | | | 132 | 1149 |
| LocalRpcBindingSetAuthInfoEx | | | 133 | 1150 |
| LookupAccountNameLocalA | 26 | 107 | 134 | 1151 |
| LookupAccountNameLocalW | 27 | 108 | 135 | 1152 |
| LookupAccountSidLocalA | 28 | 109 | 136 | 1153 |
| LookupAccountSidLocalW | 29 | 110 | 137 | 1154 |
| LsaAddAccountRights | | 111 | 138 | 1155 |
| LsaClose | | 112 | 139 | 1156 |
| LsaCreateSecret | | 113 | 140 | 1157 |
| LsaDelete | | | 141 | 1158 |
| LsaEnumerateAccountRights | | 114 | 142 | 1159 |
| LsaEnumerateAccountsWithUserRight | | 115 | 143 | 1160 |
| LsaFreeMemory | | 116 | 144 | 1161 |
| LsaICLookupNames | | 117 | 145 | 1162 |
| LsaICLookupNamesWithCreds | | 118 | 146 | 1163 |
| LsaICLookupSids | | 119 | 147 | 1164 |
| LsaICLookupSidsWithCreds | | 120 | 148 | 1165 |
| LsaIOpenPolicyWithCreds | | | | 1166 |
| LsaLookupClose | 30 | 121 | 149 | 1167 |
| LsaLookupFreeMemory | 31 | 122 | 150 | 1168 |
| LsaLookupGetDomainInfo | 32 | 123 | 151 | 1169 |
| LsaLookupManageSidNameMapping | 33 | 124 | 152 | 1170 |
| LsaLookupNames2 | | 125 | 153 | 1171 |
| LsaLookupOpenLocalPolicy | 34 | 126 | 154 | 1172 |
| LsaLookupSids | | 128 | 155 | 1173 |
| LsaLookupSids2 | | 127 | 156 | 1174 |
| LsaLookupTranslateNames | 35 | 129 | 157 | 1175 |
| LsaLookupTranslateSids | 36 | 130 | 158 | 1176 |
| LsaLookupUserAccountType | | | 159 | 1177 |
| LsaOpenPolicy | | 131 | 160 | 1178 |
| LsaOpenSecret | | 132 | 161 | 1179 |
| LsaQueryInformationPolicy | | 133 | 162 | 1180 |
| LsaQuerySecret | | 134 | 163 | 1181 |
| LsaRemoveAccountRights | | 135 | 164 | 1182 |
| LsaRetrievePrivateData | | 136 | 165 | 1183 |
| LsaSetInformationPolicy | | 137 | 166 | 1184 |
| LsaSetSecret | | 138 | 167 | 1185 |
| LsaStorePrivateData | | 139 | 168 | 1186 |
| NotifyServiceStatusChange | 37 | 140 | 169 | 1187 |
| NotifyServiceStatusChangeA | 38 | 141 | 170 | 1188 |
| NotifyServiceStatusChangeW | 39 | 142 | 171 | 1189 |
| OpenSCManagerA | 40 | 143 | 172 | 1190 |
| OpenSCManagerW | 41 | 144 | 173 | 1191 |
| OpenServiceA | 42 | 145 | 174 | 1192 |
| OpenServiceW | 43 | 146 | 175 | 1193 |
| OpenTraceFromBufferStream | | | | 1194 |
| OpenTraceFromFile | | | | 1195 |
| OpenTraceFromRealTimeLogger | | | | 1196 |
| OpenTraceFromRealTimeLoggerWithAllocationOptions | | | | 1197 |
| OpenTraceW | | 147 | 176 | 1198 |
| ProcessTrace | | 148 | 177 | 1199 |
| ProcessTraceAddBufferToBufferStream | | | | 1200 |
| ProcessTraceBufferDecrementReference | | | | 1201 |
| ProcessTraceBufferIncrementReference | | | | 1202 |
| QueryAllTracesA | | 149 | 178 | 1203 |
| QueryAllTracesW | | 150 | 179 | 1204 |
| QueryLocalUserServiceName | | | 180 | 1205 |
| QueryServiceConfig2A | 44 | 151 | 181 | 1206 |
| QueryServiceConfig2W | 45 | 152 | 182 | 1207 |
| QueryServiceConfigA | 46 | 153 | 183 | 1208 |
| QueryServiceConfigW | 47 | 154 | 184 | 1209 |
| QueryServiceDynamicInformation | | 155 | 185 | 1210 |
| QueryServiceObjectSecurity | 48 | 156 | 186 | 1211 |
| QueryServiceStatus | 49 | 157 | 187 | 1212 |
| QueryServiceStatusEx | 50 | 158 | 188 | 1213 |
| QueryTraceProcessingHandle | | | 189 | 1214 |
| QueryTransientObjectSecurityDescriptor | | | 190 | 1215 |
| QueryUserServiceName | | | 191 | 1216 |
| QueryUserServiceNameForContext | | | 192 | 1217 |
| RegisterServiceCtrlHandlerA | 51 | 159 | 193 | 1218 |
| RegisterServiceCtrlHandlerExA | 52 | 160 | 194 | 1219 |
| RegisterServiceCtrlHandlerExW | 53 | 161 | 195 | 1220 |
| RegisterServiceCtrlHandlerW | 54 | 162 | 196 | 1221 |
| RegisterTraceGuidsA | | → 163 | → 197 | → 1222 |
| ReleaseIdentityProviderEnumContext | | 164 | 198 | 1223 |
| RemoveTraceCallback | | 165 | 199 | 1224 |
| ReparseServiceConfig | | | | 1225 |
| RpcClientCapabilityCheck | | | 200 | 1226 |
| ScSendSynchronousPowerMessage | | | | 1227 |
| SetLocalRpcServerInterfaceSecurity | | | 201 | 1228 |
| SetLocalRpcServerProtseqSecurity | | | 202 | 1229 |
| SetServiceObjectSecurity | 55 | 166 | 203 | 1230 |
| SetServiceStatus | 56 | 167 | 204 | 1231 |
| SetTraceCallback | | 168 | 205 | 1232 |
| StartServiceA | 57 | 169 | 206 | 1233 |
| StartServiceCtrlDispatcherA | 58 | 170 | 207 | 1234 |
| StartServiceCtrlDispatcherW | 59 | 171 | 208 | 1235 |
| StartServiceW | 60 | 172 | 209 | 1236 |
| StartTraceA | | 173 | 210 | 1237 |
| StartTraceW | | 174 | 211 | 1238 |
| StopTraceW | | 175 | 212 | 1239 |
| SubscribeServiceChangeNotifications | | 176 | 213 | 1240 |
| TraceConfigureLastBranchRecord | | | | 1241 |
| TraceQueryInformation | | 177 | 214 | 1242 |
| TraceSetInformation | | 178 | 215 | 1243 |
| UnsubscribeServiceChangeNotifications | | 179 | 216 | 1244 |
| WaitServiceState | | 180 | 217 | 1245 |