11 stdcall I_ScGetCurrentGroupStateW(ptr wstr ptr) 2@ stdcall -version=0x502 A_SHAFinal(ptr ptr) 3@ stdcall -version=0x600+ A_SHAFinal(ptr ptr) ntdll.A_SHAFinal 4@ stdcall -version=0x502 A_SHAInit(ptr) 5@ stdcall -version=0x600+ A_SHAInit(ptr) ntdll.A_SHAInit 6@ stdcall -version=0x502 A_SHAUpdate(ptr ptr long) 7@ stdcall -version=0x600+ A_SHAUpdate(ptr ptr long) ntdll.A_SHAUpdate 8@ stdcall AbortSystemShutdownA(ptr) 9@ stdcall AbortSystemShutdownW(ptr) 10@ stdcall AccessCheck(ptr long long ptr ptr ptr ptr ptr) 11@ stdcall AccessCheckAndAuditAlarmA(str ptr str str ptr long ptr long ptr ptr ptr) 12@ stdcall AccessCheckAndAuditAlarmW(wstr ptr wstr wstr ptr long ptr long ptr ptr ptr) 13@ stdcall AccessCheckByType(ptr ptr long long ptr long ptr ptr ptr ptr ptr) 14@ stdcall AccessCheckByTypeAndAuditAlarmA(str ptr str str ptr ptr long long long ptr long ptr long ptr ptr ptr) 15@ stdcall AccessCheckByTypeAndAuditAlarmW(wstr ptr wstr wstr ptr ptr long long long ptr long ptr long ptr ptr ptr) 16@ stdcall AccessCheckByTypeResultList(ptr ptr long long ptr long ptr ptr ptr ptr ptr) 17@ stdcall AccessCheckByTypeResultListAndAuditAlarmA(str ptr str str ptr long long long long ptr long ptr long ptr ptr ptr) 18@ stdcall AccessCheckByTypeResultListAndAuditAlarmByHandleA(str ptr ptr str str ptr long long long long ptr long ptr long ptr ptr ptr) 19@ stdcall AccessCheckByTypeResultListAndAuditAlarmByHandleW(wstr ptr ptr wstr wstr ptr long long long long ptr long ptr long ptr ptr ptr) 20@ stdcall AccessCheckByTypeResultListAndAuditAlarmW(wstr ptr wstr wstr ptr long long long long ptr long ptr long ptr ptr ptr) 21@ stdcall AddAccessAllowedAce(ptr long long ptr) 22@ stdcall AddAccessAllowedAceEx(ptr long long long ptr) 23@ stdcall AddAccessAllowedObjectAce(ptr long long long ptr ptr ptr) 24@ stdcall AddAccessDeniedAce(ptr long long ptr) 25@ stdcall AddAccessDeniedAceEx(ptr long long long ptr) 26@ stdcall AddAccessDeniedObjectAce(ptr long long long ptr ptr ptr) 27@ stdcall AddAce(ptr long long ptr long) 28@ stdcall AddAuditAccessAce(ptr long long ptr long long) 29@ stdcall AddAuditAccessAceEx(ptr long long long ptr long long) 30@ stdcall AddAuditAccessObjectAce(ptr long long long ptr ptr ptr long long) 31@ stdcall AddUsersToEncryptedFile(wstr ptr) 32@ stdcall AdjustTokenGroups(long long ptr long ptr ptr) 33@ stdcall AdjustTokenPrivileges(long long ptr long ptr ptr) 34@ stdcall AllocateAndInitializeSid(ptr long long long long long long long long long ptr) 35@ stdcall AllocateLocallyUniqueId(ptr) 36@ stdcall AreAllAccessesGranted(long long) 37@ stdcall AreAnyAccessesGranted(long long) 38@ stdcall BackupEventLogA(long str) 39@ stdcall BackupEventLogW(long wstr) 40@ stdcall BuildExplicitAccessWithNameA(ptr str long long long) 41@ stdcall BuildExplicitAccessWithNameW(ptr wstr long long long) 42@ stdcall BuildImpersonateExplicitAccessWithNameA(ptr str ptr long long long) 43@ stdcall BuildImpersonateExplicitAccessWithNameW(ptr wstr ptr long long long) 44@ stdcall BuildImpersonateTrusteeA(ptr ptr) 45@ stdcall BuildImpersonateTrusteeW(ptr ptr) 46@ stdcall BuildSecurityDescriptorA(ptr ptr long ptr long ptr ptr ptr ptr) 47@ stdcall BuildSecurityDescriptorW(ptr ptr long ptr long ptr ptr ptr ptr) 48@ stdcall BuildTrusteeWithNameA(ptr str) 49@ stdcall BuildTrusteeWithNameW(ptr wstr) 50@ stdcall BuildTrusteeWithObjectsAndNameA(ptr ptr long str str str) 51@ stdcall BuildTrusteeWithObjectsAndNameW(ptr ptr long wstr wstr wstr) 52@ stdcall BuildTrusteeWithObjectsAndSidA(ptr ptr ptr ptr ptr) 53@ stdcall BuildTrusteeWithObjectsAndSidW(ptr ptr ptr ptr ptr) 54@ stdcall BuildTrusteeWithSidA(ptr ptr) 55@ stdcall BuildTrusteeWithSidW(ptr ptr) 56@ stub CancelOverlappedAccess 57@ stdcall ChangeServiceConfig2A(long long ptr) 58@ stdcall ChangeServiceConfig2W(long long ptr) 59@ stdcall ChangeServiceConfigA(long long long long wstr str ptr str str str str) 60@ stdcall ChangeServiceConfigW(long long long long wstr wstr ptr wstr wstr wstr wstr) 61@ stdcall CheckTokenMembership(long ptr ptr) 62@ stdcall ClearEventLogA(long str) 63@ stdcall ClearEventLogW(long wstr) 64@ stub CloseCodeAuthzLevel 65@ stdcall CloseEncryptedFileRaw(ptr) 66@ stdcall CloseEventLog(long) 67@ stdcall CloseServiceHandle(long) 68@ stub CloseTrace 69@ stdcall CommandLineFromMsiDescriptor(wstr ptr ptr) 70@ stub ComputeAccessTokenFromCodeAuthzLevel 71@ stdcall ControlService(long long ptr) 72@ stdcall -version=0x502 ControlTraceA(double str ptr long) ntdll.EtwControlTraceA 73@ stdcall -version=0x600+ ControlTraceA(double str ptr long) EtwControlTraceA 74@ stdcall -version=0x502 ControlTraceW(double wstr ptr long) ntdll.EtwControlTraceW 75@ stdcall -version=0x600+ ControlTraceW(double wstr ptr long) EtwControlTraceW 76@ stub ConvertAccessToSecurityDescriptorA 77@ stub ConvertAccessToSecurityDescriptorW 78@ stub ConvertSDToStringSDRootDomainA 79@ stub ConvertSDToStringSDRootDomainW 80@ stub ConvertSecurityDescriptorToAccessA 81@ stub ConvertSecurityDescriptorToAccessNamedA #ConvertSecurityDescriptorToAccessA 82@ stub ConvertSecurityDescriptorToAccessNamedW #ConvertSecurityDescriptorToAccessW 83@ stub ConvertSecurityDescriptorToAccessW 84@ stdcall ConvertSecurityDescriptorToStringSecurityDescriptorA(ptr long long ptr ptr) 85@ stdcall ConvertSecurityDescriptorToStringSecurityDescriptorW(ptr long long ptr ptr) 86@ stdcall ConvertSidToStringSidA(ptr ptr) 87@ stdcall ConvertSidToStringSidW(ptr ptr) 88@ stub ConvertStringSDToSDDomainA 89@ stub ConvertStringSDToSDDomainW 90@ stub ConvertStringSDToSDRootDomainA 91@ stub ConvertStringSDToSDRootDomainW 92@ stdcall ConvertStringSecurityDescriptorToSecurityDescriptorA(str long ptr ptr) 93@ stdcall ConvertStringSecurityDescriptorToSecurityDescriptorW(wstr long ptr ptr) 94@ stdcall ConvertStringSidToSidA(ptr ptr) 95@ stdcall ConvertStringSidToSidW(ptr ptr) 96@ stdcall ConvertToAutoInheritPrivateObjectSecurity(ptr ptr ptr ptr long ptr) 97@ stdcall CopySid(long ptr ptr) 98@ stub CreateCodeAuthzLevel 99@ stdcall CreatePrivateObjectSecurity(ptr ptr ptr long long ptr) 100@ stdcall CreatePrivateObjectSecurityEx(ptr ptr ptr ptr long long ptr ptr) 101@ stdcall CreatePrivateObjectSecurityWithMultipleInheritance(ptr ptr ptr ptr long long long ptr ptr) 102@ stdcall CreateProcessAsUserA(long str str ptr ptr long long ptr str ptr ptr) 103@ stdcall CreateProcessAsUserW(long str str ptr ptr long long ptr str ptr ptr) 104@ stdcall CreateProcessWithLogonW(wstr wstr wstr long wstr wstr long ptr wstr ptr ptr) 105@ stdcall CreateProcessWithTokenW(ptr long wstr wstr long ptr wstr ptr ptr) 106@ stdcall CreateRestrictedToken(long long long ptr long ptr long ptr ptr) 107@ stdcall CreateServiceA(long str str long long long long str str ptr str str str) 108@ stdcall CreateServiceW(long wstr wstr long long long long wstr wstr ptr wstr wstr wstr) 109@ stdcall CreateTraceInstanceId(ptr ptr) ntdll.EtwCreateTraceInstanceId 110@ stdcall CreateWellKnownSid(long ptr ptr ptr) 111@ stdcall CredDeleteA(str long long) 112@ stdcall CredDeleteW(wstr long long) 113@ stdcall CredEnumerateA(str long ptr ptr) 114@ stdcall CredEnumerateW(wstr long ptr ptr) 115@ stdcall CredFree(ptr) 116@ stdcall CredGetSessionTypes(long ptr) 117@ stub CredGetTargetInfoA 118@ stub CredGetTargetInfoW 119@ stdcall CredIsMarshaledCredentialA(str) 120@ stdcall CredIsMarshaledCredentialW(wstr) 121@ stdcall CredMarshalCredentialA(long ptr str) 122@ stdcall CredMarshalCredentialW(long ptr wstr) 123@ stub CredProfileLoaded 124@ stdcall CredReadA(str long long ptr) 125@ stdcall CredReadDomainCredentialsA(ptr long ptr ptr) 126@ stdcall CredReadDomainCredentialsW(ptr long ptr ptr) 127@ stdcall CredReadW(wstr long long ptr) 128@ stub CredRenameA 129@ stub CredRenameW 130@ stdcall CredUnmarshalCredentialA(str ptr ptr) 131@ stdcall CredUnmarshalCredentialW(wstr ptr ptr) 132@ stdcall CredWriteA(ptr long) 133@ stub CredWriteDomainCredentialsA 134@ stub CredWriteDomainCredentialsW 135@ stdcall CredWriteW(ptr long) 136@ stub CredpConvertCredential 137@ stub CredpConvertTargetInfo 138@ stub CredpDecodeCredential 139@ stub CredpEncodeCredential 140@ stdcall CryptAcquireContextA(ptr str str long long) 141@ stdcall CryptAcquireContextW(ptr wstr wstr long long) 142@ stdcall CryptContextAddRef(long ptr long) 143@ stdcall CryptCreateHash(long long long long ptr) 144@ stdcall CryptDecrypt(long long long long ptr ptr) 145@ stdcall CryptDeriveKey(long long long long ptr) 146@ stdcall CryptDestroyHash(long) 147@ stdcall CryptDestroyKey(long) 148@ stdcall CryptDuplicateHash(long ptr long ptr) 149@ stdcall CryptDuplicateKey(long ptr long ptr) 150@ stdcall CryptEncrypt(long long long long ptr ptr long) 151@ stdcall CryptEnumProviderTypesA(long ptr long ptr ptr ptr) 152@ stdcall CryptEnumProviderTypesW(long ptr long ptr ptr ptr) 153@ stdcall CryptEnumProvidersA(long ptr long ptr ptr ptr) 154@ stdcall CryptEnumProvidersW(long ptr long ptr ptr ptr) 155@ stdcall CryptExportKey(long long long long ptr ptr) 156@ stdcall CryptGenKey(long long long ptr) 157@ stdcall CryptGenRandom(long long ptr) 158@ stdcall CryptGetDefaultProviderA(long ptr long ptr ptr) 159@ stdcall CryptGetDefaultProviderW(long ptr long ptr ptr) 160@ stdcall CryptGetHashParam(long long ptr ptr long) 161@ stdcall CryptGetKeyParam(long long ptr ptr long) 162@ stdcall CryptGetProvParam(long long ptr ptr long) 163@ stdcall CryptGetUserKey(long long ptr) 164@ stdcall CryptHashData(long ptr long long) 165@ stdcall CryptHashSessionKey(long long long) 166@ stdcall CryptImportKey(long ptr long long long ptr) 167@ stdcall CryptReleaseContext(long long) 168@ stdcall CryptSetHashParam(long long ptr long) 169@ stdcall CryptSetKeyParam(long long ptr long) 170@ stdcall CryptSetProvParam(long long ptr long) 171@ stdcall CryptSetProviderA(str long) 172@ stdcall CryptSetProviderExA(str long ptr long) 173@ stdcall CryptSetProviderExW(wstr long ptr long) 174@ stdcall CryptSetProviderW(wstr long) 175@ stdcall CryptSignHashA(long long ptr long ptr ptr) 176@ stdcall CryptSignHashW(long long ptr long ptr ptr) 177@ stdcall CryptVerifySignatureA(long ptr long long ptr long) 178@ stdcall CryptVerifySignatureW(long ptr long long ptr long) 179@ stdcall DecryptFileA(str long) 180@ stdcall DecryptFileW(wstr long) 181@ stdcall DeleteAce(ptr long) 182@ stdcall DeleteService(long) 183@ stdcall DeregisterEventSource(long) 184@ stdcall DestroyPrivateObjectSecurity(ptr) 185@ stub DuplicateEncryptionInfoFile 186@ stdcall DuplicateToken(long long ptr) 187@ stdcall DuplicateTokenEx(long long ptr long long ptr) 188@ stdcall ElfBackupEventLogFileA(long ptr) 189@ stdcall ElfBackupEventLogFileW(long ptr) 190@ stdcall ElfChangeNotify(long long) 191@ stdcall ElfClearEventLogFileA(long ptr) 192@ stdcall ElfClearEventLogFileW(long ptr) 193@ stdcall ElfCloseEventLog(long) 194@ stdcall ElfDeregisterEventSource(long) 195@ stdcall ElfFlushEventLog(long) 196@ stdcall ElfNumberOfRecords(long ptr) 197@ stdcall ElfOldestRecord(long ptr) 198@ stdcall ElfOpenBackupEventLogA(ptr ptr ptr) 199@ stdcall ElfOpenBackupEventLogW(ptr ptr ptr) 200@ stdcall ElfOpenEventLogA(ptr ptr ptr) 201@ stdcall ElfOpenEventLogW(ptr ptr ptr) 202@ stdcall ElfReadEventLogA(long long long ptr long ptr ptr) 203@ stdcall ElfReadEventLogW(long long long ptr long ptr ptr) 204@ stdcall ElfRegisterEventSourceA(ptr ptr ptr) 205@ stdcall ElfRegisterEventSourceW(ptr ptr ptr) 206@ stdcall ElfReportEventA(long long long long ptr long long ptr ptr long ptr ptr) 207@ stdcall ElfReportEventAndSourceW(long long ptr long long long ptr ptr long long ptr ptr long ptr ptr) 208@ stdcall ElfReportEventW(long long long long ptr long long ptr ptr long ptr ptr) 209@ stdcall -version=0x502 EnableTrace(long long long ptr double) ntdll.EtwEnableTrace 210@ stdcall -version=0x600+ EnableTrace(long long long ptr double) EtwEnableTrace 211@ stdcall EncryptFileA(str) 212@ stdcall EncryptFileW(wstr) 213@ stub EncryptedFileKeyInfo 214@ stdcall EncryptionDisable(wstr long) 215@ stdcall EnumDependentServicesA(long long ptr long ptr ptr) 216@ stdcall EnumDependentServicesW(long long ptr long ptr ptr) 217@ stdcall EnumServiceGroupW(ptr long long ptr long ptr ptr ptr wstr) 218@ stdcall EnumServicesStatusA(long long long ptr long ptr ptr ptr) 219@ stdcall EnumServicesStatusExA(long long long long ptr long ptr ptr ptr str) 220@ stdcall EnumServicesStatusExW(long long long long ptr long ptr ptr ptr wstr) 221@ stdcall EnumServicesStatusW(long long long ptr long ptr ptr ptr) 222@ stdcall -version=0x502 EnumerateTraceGuids(ptr long ptr) ntdll.EtwEnumerateTraceGuids 223@ stdcall -stub -version=0x600+ EnumerateTraceGuids(ptr long ptr) # EtwEnumerateTraceGuids 224@ stdcall EqualDomainSid(ptr ptr ptr) 225@ stdcall EqualPrefixSid(ptr ptr) 226@ stdcall EqualSid(ptr ptr) 227@ stdcall FileEncryptionStatusA(str ptr) 228@ stdcall FileEncryptionStatusW(wstr ptr) 229@ stdcall FindFirstFreeAce(ptr ptr) 230@ stdcall -version=0x502 FlushTraceA(double str ptr) ntdll.EtwFlushTraceA 231@ stdcall -version=0x600+ FlushTraceA(double str ptr) EtwFlushTraceA 232@ stdcall -version=0x502 FlushTraceW(double wstr ptr) ntdll.EtwFlushTraceW 233@ stdcall -version=0x600+ FlushTraceW(double wstr ptr) EtwFlushTraceW 234@ stub FreeEncryptedFileKeyInfo 235@ stdcall FreeEncryptionCertificateHashList(ptr) 236@ stdcall FreeInheritedFromArray(ptr long ptr) 237@ stdcall FreeSid(ptr) 238@ stub GetAccessPermissionsForObjectA 239@ stub GetAccessPermissionsForObjectW 240@ stdcall GetAce(ptr long ptr) 241@ stdcall GetAclInformation(ptr ptr long long) 242@ stdcall GetAuditedPermissionsFromAclA(ptr ptr ptr ptr) 243@ stdcall GetAuditedPermissionsFromAclW(ptr ptr ptr ptr) 244@ stdcall GetCurrentHwProfileA(ptr) 245@ stdcall GetCurrentHwProfileW(ptr) 246@ stdcall GetEffectiveRightsFromAclA(ptr ptr ptr) 247@ stdcall GetEffectiveRightsFromAclW(ptr ptr ptr) 248@ stdcall GetEventLogInformation(long long ptr long ptr) 249@ stdcall GetExplicitEntriesFromAclA(ptr ptr ptr) advapi32.GetExplicitEntriesFromAclW 250@ stdcall GetExplicitEntriesFromAclW(ptr ptr ptr) 251@ stdcall GetFileSecurityA(str long ptr long ptr) 252@ stdcall GetFileSecurityW(wstr long ptr long ptr) 253@ stub GetInformationCodeAuthzLevelW 254@ stub GetInformationCodeAuthzPolicyW 255@ stdcall GetInheritanceSourceA(str long long long ptr long ptr ptr ptr ptr) 256@ stdcall GetInheritanceSourceW(wstr long long long ptr long ptr ptr ptr ptr) 257@ stdcall GetKernelObjectSecurity(long long ptr long ptr) 258@ stdcall GetLengthSid(ptr) 259@ stub GetLocalManagedApplicationData 260@ stub GetLocalManagedApplications 261@ stub GetManagedApplicationCategories 262@ stub GetManagedApplications 263@ stdcall GetMultipleTrusteeA(ptr) 264@ stdcall GetMultipleTrusteeOperationA(ptr) 265@ stdcall GetMultipleTrusteeOperationW(ptr) 266@ stdcall GetMultipleTrusteeW(ptr) 267@ stdcall GetNamedSecurityInfoA(str long long ptr ptr ptr ptr ptr) 268@ stub GetNamedSecurityInfoExA 269@ stub GetNamedSecurityInfoExW 270@ stdcall GetNamedSecurityInfoW(wstr long long ptr ptr ptr ptr ptr) 271@ stdcall GetNumberOfEventLogRecords(long ptr) 272@ stdcall GetOldestEventLogRecord(long ptr) 273@ stub GetOverlappedAccessResults 274@ stdcall GetPrivateObjectSecurity(ptr long ptr long ptr) 275@ stdcall GetSecurityDescriptorControl(ptr ptr ptr) 276@ stdcall GetSecurityDescriptorDacl(ptr ptr ptr ptr) 277@ stdcall GetSecurityDescriptorGroup(ptr ptr ptr) 278@ stdcall GetSecurityDescriptorLength(ptr) ntdll.RtlLengthSecurityDescriptor 279@ stdcall GetSecurityDescriptorOwner(ptr ptr ptr) 280@ stdcall GetSecurityDescriptorRMControl(ptr ptr) 281@ stdcall GetSecurityDescriptorSacl(ptr ptr ptr ptr) 282@ stdcall GetSecurityInfo(long long long ptr ptr ptr ptr ptr) 283@ stdcall GetSecurityInfoExA(long long long str str ptr ptr ptr ptr) 284@ stdcall GetSecurityInfoExW(long long long wstr wstr ptr ptr ptr ptr) 285@ stdcall GetServiceDisplayNameA(ptr str ptr ptr) 286@ stdcall GetServiceDisplayNameW(ptr wstr ptr ptr) 287@ stdcall GetServiceKeyNameA(long str ptr ptr) 288@ stdcall GetServiceKeyNameW(long wstr ptr ptr) 289@ stdcall GetSidIdentifierAuthority(ptr) 290@ stdcall GetSidLengthRequired(long) 291@ stdcall GetSidSubAuthority(ptr long) 292@ stdcall GetSidSubAuthorityCount(ptr) 293@ stdcall GetTokenInformation(long long ptr long ptr) 294@ stdcall GetTraceEnableFlags(double) ntdll.EtwGetTraceEnableFlags 295@ stdcall GetTraceEnableLevel(double) ntdll.EtwGetTraceEnableLevel 296@ stdcall GetTraceLoggerHandle(ptr) ntdll.EtwGetTraceLoggerHandle 297@ stdcall GetTrusteeFormA(ptr) 298@ stdcall GetTrusteeFormW(ptr) 299@ stdcall GetTrusteeNameA(ptr) 300@ stdcall GetTrusteeNameW(ptr) 301@ stdcall GetTrusteeTypeA(ptr) 302@ stdcall GetTrusteeTypeW(ptr) 303@ stdcall GetUserNameA(ptr ptr) 304@ stdcall GetUserNameW(ptr ptr) 305@ stdcall GetWindowsAccountDomainSid(ptr ptr ptr) 306@ stdcall I_QueryTagInformation(ptr long ptr) 307@ stdcall I_ScIsSecurityProcess() 308@ stdcall I_ScPnPGetServiceName(ptr wstr long) 309@ stub I_ScSendTSMessage 310@ stdcall I_ScSetServiceBitsA(ptr long long long str) 311@ stdcall I_ScSetServiceBitsW(ptr long long long wstr) 312@ stdcall I_ScValidatePnpService(wstr wstr ptr) 313@ stub IdentifyCodeAuthzLevelW 314@ stdcall ImpersonateAnonymousToken(ptr) 315@ stdcall ImpersonateLoggedOnUser(long) 316@ stdcall ImpersonateNamedPipeClient(long) 317@ stdcall ImpersonateSelf(long) 318@ stdcall InitializeAcl(ptr long long) 319@ stdcall InitializeSecurityDescriptor(ptr long) 320@ stdcall InitializeSid(ptr ptr long) 321@ stdcall InitiateSystemShutdownA(str str long long long) 322@ stdcall InitiateSystemShutdownExA(str str long long long long) 323@ stdcall InitiateSystemShutdownExW(wstr wstr long long long long) 324@ stdcall InitiateSystemShutdownW(str str long long long) 325@ stub InstallApplication 326@ stdcall IsTextUnicode(ptr long ptr) 327@ stdcall IsTokenRestricted(long) 328@ stub IsTokenUntrusted 329@ stdcall IsValidAcl(ptr) 330@ stdcall IsValidSecurityDescriptor(ptr) 331@ stdcall IsValidSid(ptr) 332@ stdcall IsWellKnownSid(ptr long) 333@ stdcall LockServiceDatabase(ptr) 334@ stdcall LogonUserA(str str str long long ptr) 335@ stdcall LogonUserExA(str str str long long ptr ptr ptr ptr ptr) 336@ stdcall LogonUserExW(wstr wstr wstr long long ptr ptr ptr ptr ptr) 337@ stdcall LogonUserW(wstr wstr wstr long long ptr) 338@ stdcall LookupAccountNameA(str str ptr ptr ptr ptr ptr) 339@ stdcall LookupAccountNameW(wstr wstr ptr ptr ptr ptr ptr) 340@ stdcall LookupAccountSidA(ptr ptr ptr ptr ptr ptr ptr) 341@ stdcall LookupAccountSidW(ptr ptr ptr ptr ptr ptr ptr) 342@ stdcall LookupPrivilegeDisplayNameA(str str str ptr ptr) 343@ stdcall LookupPrivilegeDisplayNameW(wstr wstr wstr ptr ptr) 344@ stdcall LookupPrivilegeNameA(str ptr ptr long) 345@ stdcall LookupPrivilegeNameW(wstr ptr ptr long) 346@ stdcall LookupPrivilegeValueA(ptr ptr ptr) 347@ stdcall LookupPrivilegeValueW(ptr ptr ptr) 348@ stub LookupSecurityDescriptorPartsA 349@ stub LookupSecurityDescriptorPartsW 350@ stdcall LsaAddAccountRights(ptr ptr ptr long) 351@ stdcall LsaAddPrivilegesToAccount(ptr ptr) 352@ stdcall LsaClearAuditLog(ptr) 353@ stdcall LsaClose(ptr) 354@ stdcall LsaCreateAccount(ptr ptr long ptr) 355@ stdcall LsaCreateSecret(ptr ptr long ptr) 356@ stdcall LsaCreateTrustedDomain(ptr ptr long ptr) 357@ stdcall LsaCreateTrustedDomainEx(ptr ptr ptr long ptr) 358@ stdcall LsaDelete(ptr) 359@ stdcall LsaDeleteTrustedDomain(ptr ptr) 360@ stdcall LsaEnumerateAccountRights(ptr ptr ptr ptr) 361@ stdcall LsaEnumerateAccounts(ptr ptr ptr long ptr) 362@ stdcall LsaEnumerateAccountsWithUserRight(ptr ptr ptr ptr) 363@ stdcall LsaEnumeratePrivileges(ptr ptr ptr long ptr) 364@ stdcall LsaEnumeratePrivilegesOfAccount(ptr ptr) 365@ stdcall LsaEnumerateTrustedDomains(ptr ptr ptr long ptr) 366@ stdcall LsaEnumerateTrustedDomainsEx(ptr ptr ptr long ptr) 367@ stdcall LsaFreeMemory(ptr) 368@ stdcall LsaGetQuotasForAccount(ptr ptr) 369@ stdcall LsaGetRemoteUserName(ptr ptr ptr) 370@ stdcall LsaGetSystemAccessAccount(ptr ptr) 371@ stdcall LsaGetUserName(ptr ptr) 372@ stub LsaICLookupNames 373@ stub LsaICLookupNamesWithCreds 374@ stub LsaICLookupSids 375@ stub LsaICLookupSidsWithCreds 376@ stdcall LsaLookupNames2(ptr long long ptr ptr ptr) 377@ stdcall LsaLookupNames(ptr long ptr ptr ptr) 378@ stdcall LsaLookupPrivilegeDisplayName(ptr ptr ptr ptr) 379@ stdcall LsaLookupPrivilegeName(ptr ptr ptr) 380@ stdcall LsaLookupPrivilegeValue(ptr ptr ptr) 381@ stdcall LsaLookupSids(ptr long ptr ptr ptr) 382@ stdcall LsaNtStatusToWinError(long) 383@ stdcall LsaOpenAccount(ptr ptr long ptr) 384@ stdcall LsaOpenPolicy(ptr ptr long ptr) 385@ stdcall LsaOpenPolicySce(ptr ptr long ptr) 386@ stdcall LsaOpenSecret(ptr ptr long ptr) 387@ stdcall LsaOpenTrustedDomain(ptr ptr long ptr) 388@ stdcall LsaOpenTrustedDomainByName(ptr ptr long ptr) 389@ stdcall LsaQueryDomainInformationPolicy(ptr long ptr) 390@ stdcall LsaQueryForestTrustInformation(ptr ptr ptr) 391@ stdcall LsaQueryInfoTrustedDomain(ptr long ptr) 392@ stdcall LsaQueryInformationPolicy(ptr long ptr) 393@ stdcall LsaQuerySecret(ptr ptr ptr ptr ptr) 394@ stdcall LsaQuerySecurityObject(ptr long ptr) 395@ stdcall LsaQueryTrustedDomainInfo(ptr ptr long ptr) 396@ stdcall LsaQueryTrustedDomainInfoByName(ptr ptr long ptr) 397@ stdcall LsaRemoveAccountRights(ptr ptr long ptr long) 398@ stdcall LsaRemovePrivilegesFromAccount(ptr long ptr) 399@ stdcall LsaRetrievePrivateData(ptr ptr ptr) 400@ stdcall LsaSetDomainInformationPolicy(ptr long ptr) 401@ stdcall LsaSetForestTrustInformation(ptr ptr ptr long ptr) 402@ stdcall LsaSetInformationPolicy(ptr long ptr) 403@ stdcall LsaSetInformationTrustedDomain(ptr long ptr) 404@ stdcall LsaSetQuotasForAccount(ptr ptr) 405@ stdcall LsaSetSecret(ptr ptr ptr) 406@ stdcall LsaSetSecurityObject(ptr long ptr) 407@ stdcall LsaSetSystemAccessAccount(ptr long) 408@ stdcall LsaSetTrustedDomainInfoByName(ptr ptr long ptr) 409@ stdcall LsaSetTrustedDomainInformation(ptr ptr long ptr) 410@ stdcall LsaStorePrivateData(ptr ptr ptr) 411@ stdcall -version=0x502 MD4Final(ptr) 412@ stdcall -version=0x600+ MD4Final(ptr) ntdll.MD4Final 413@ stdcall -version=0x502 MD4Init(ptr) 414@ stdcall -version=0x600+ MD4Init(ptr) ntdll.MD4Init 415@ stdcall -version=0x502 MD4Update(ptr ptr long) 416@ stdcall -version=0x600+ MD4Update(ptr ptr long) ntdll.MD4Update 417@ stdcall -version=0x502 MD5Final(ptr) 418@ stdcall -version=0x600+ MD5Final(ptr) ntdll.MD5Final 419@ stdcall -version=0x502 MD5Init(ptr) 420@ stdcall -version=0x600+ MD5Init(ptr) ntdll.MD5Init 421@ stdcall -version=0x502 MD5Update(ptr ptr long) 422@ stdcall -version=0x600+ MD5Update(ptr ptr long) ntdll.MD5Update 423@ stub MSChapSrvChangePassword2 424@ stub MSChapSrvChangePassword 425@ stdcall MakeAbsoluteSD2(ptr ptr) 426@ stdcall MakeAbsoluteSD(ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr) 427@ stdcall MakeSelfRelativeSD(ptr ptr ptr) 428@ stdcall MapGenericMask(ptr ptr) ntdll.RtlMapGenericMask 429@ stdcall NotifyBootConfigStatus(long) 430@ stdcall NotifyChangeEventLog(long long) 431@ stdcall ObjectCloseAuditAlarmA(str ptr long) 432@ stdcall ObjectCloseAuditAlarmW(wstr ptr long) 433@ stdcall ObjectDeleteAuditAlarmA(str ptr long) 434@ stdcall ObjectDeleteAuditAlarmW(wstr ptr long) 435@ stdcall ObjectOpenAuditAlarmA(str ptr str str ptr long long long ptr long long ptr) 436@ stdcall ObjectOpenAuditAlarmW(wstr ptr wstr wstr ptr long long long ptr long long ptr) 437@ stdcall ObjectPrivilegeAuditAlarmA(str ptr long long ptr long) 438@ stdcall ObjectPrivilegeAuditAlarmW(wstr ptr long long ptr long) 439@ stdcall OpenBackupEventLogA(str str) 440@ stdcall OpenBackupEventLogW(wstr wstr) 441@ stdcall OpenEncryptedFileRawA(str long ptr) 442@ stdcall OpenEncryptedFileRawW(wstr long ptr) 443@ stdcall OpenEventLogA(str str) 444@ stdcall OpenEventLogW(wstr wstr) 445@ stdcall OpenProcessToken(long long ptr) 446@ stdcall OpenSCManagerA(str str long) 447@ stdcall OpenSCManagerW(wstr wstr long) 448@ stdcall OpenServiceA(long str long) 449@ stdcall OpenServiceW(long wstr long) 450@ stdcall OpenThreadToken(long long long ptr) 451@ stdcall -ret64 OpenTraceA(ptr) 452@ stdcall -ret64 OpenTraceW(ptr) 453@ stdcall PrivilegeCheck(ptr ptr ptr) 454@ stdcall PrivilegedServiceAuditAlarmA(str str long ptr long) 455@ stdcall PrivilegedServiceAuditAlarmW(wstr wstr long ptr long) 456@ stub ProcessIdleTasks 457@ stdcall ProcessTrace(ptr long ptr ptr) 458@ stdcall -version=0x502 QueryAllTracesA(ptr long ptr) ntdll.EtwQueryAllTracesA 459@ stdcall -version=0x600+ QueryAllTracesA(ptr long ptr) EtwQueryAllTracesA 460@ stdcall -version=0x502 QueryAllTracesW(ptr long ptr) ntdll.EtwQueryAllTracesW 461@ stdcall -version=0x600+ QueryAllTracesW(ptr long ptr) EtwQueryAllTracesW 462@ stdcall QueryRecoveryAgentsOnEncryptedFile(wstr ptr) 463@ stdcall QueryServiceConfig2A(long long ptr long ptr) 464@ stdcall QueryServiceConfig2W(long long ptr long ptr) 465@ stdcall QueryServiceConfigA(long ptr long ptr) 466@ stdcall QueryServiceConfigW(long ptr long ptr) 467@ stdcall QueryServiceLockStatusA(long ptr long ptr) 468@ stdcall QueryServiceLockStatusW(long ptr long ptr) 469@ stdcall QueryServiceObjectSecurity(long long ptr long ptr) 470@ stdcall QueryServiceStatus(long ptr) 471@ stdcall QueryServiceStatusEx(long long ptr long ptr) 472@ stdcall -version=0x502 QueryTraceA(double str ptr) ntdll.EtwQueryTraceA 473@ stdcall -version=0x600+ QueryTraceA(double str ptr) EtwQueryTraceA 474@ stdcall -version=0x502 QueryTraceW(double str ptr) ntdll.EtwQueryTraceW 475@ stdcall -version=0x600+ QueryTraceW(double str ptr) EtwQueryTraceW 476@ stdcall QueryUsersOnEncryptedFile(wstr ptr) 477@ stdcall ReadEncryptedFileRaw(ptr ptr ptr) 478@ stdcall ReadEventLogA(long long long ptr long ptr ptr) 479@ stdcall ReadEventLogW(long long long ptr long ptr ptr) 480@ stdcall RegCloseKey(long) 481@ stdcall RegConnectRegistryA(str long ptr) 482@ stub RegConnectRegistryExA 483@ stub RegConnectRegistryExW 484@ stdcall RegConnectRegistryW(wstr long ptr) 485@ stdcall -version=0x600+ RegCopyTreeA(ptr str ptr) 486@ stdcall -version=0x600+ RegCopyTreeW(ptr wstr ptr) 487@ stdcall RegCreateKeyA(long str ptr) 488@ stdcall RegCreateKeyExA(long str long ptr long long ptr ptr ptr) 489@ stdcall RegCreateKeyExW(long wstr long ptr long long ptr ptr ptr) 490@ stdcall RegCreateKeyW(long wstr ptr) 491@ stdcall RegDeleteKeyA(long str) 492@ stdcall RegDeleteKeyExA(long str long long) 493@ stdcall RegDeleteKeyExW(long wstr long long) 494@ stdcall RegDeleteKeyW(long wstr) 495@ stdcall -version=0x600+ RegDeleteTreeA(long str) 496@ stdcall -version=0x600+ RegDeleteTreeW(long wstr) 497@ stdcall RegDeleteValueA(long str) 498@ stdcall RegDeleteValueW(long wstr) 499@ stdcall RegDisablePredefinedCache() 500@ stdcall RegDisableReflectionKey(ptr) 501@ stdcall RegEnableReflectionKey(ptr) 502@ stdcall RegEnumKeyA(long long ptr long) 503@ stdcall RegEnumKeyExA(long long ptr ptr ptr ptr ptr ptr) 504@ stdcall RegEnumKeyExW(long long ptr ptr ptr ptr ptr ptr) 505@ stdcall RegEnumKeyW(long long ptr long) 506@ stdcall RegEnumValueA(long long ptr ptr ptr ptr ptr ptr) 507@ stdcall RegEnumValueW(long long ptr ptr ptr ptr ptr ptr) 508@ stdcall RegFlushKey(long) 509@ stdcall RegGetKeySecurity(long long ptr ptr) 510@ stdcall RegGetValueA(long str str long ptr ptr ptr) 511@ stdcall RegGetValueW(long wstr wstr long ptr ptr ptr) 512@ stdcall RegLoadKeyA(long str str) 513@ stdcall RegLoadKeyW(long wstr wstr) 514@ stdcall RegNotifyChangeKeyValue(long long long long long) 515@ stdcall RegOpenCurrentUser(long ptr) 516@ stdcall RegOpenKeyA(long str ptr) 517@ stdcall RegOpenKeyExA(long str long long ptr) 518@ stdcall RegOpenKeyExW(long wstr long long ptr) 519@ stdcall RegOpenKeyW(long wstr ptr) 520@ stdcall RegOpenUserClassesRoot(ptr long long ptr) 521@ stdcall RegOverridePredefKey(long long) 522@ stdcall RegQueryInfoKeyA(long ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr) 523@ stdcall RegQueryInfoKeyW(long ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr) 524@ stdcall RegQueryMultipleValuesA(long ptr long ptr ptr) 525@ stdcall RegQueryMultipleValuesW(long ptr long ptr ptr) 526@ stdcall RegQueryReflectionKey(ptr ptr) 527@ stdcall RegQueryValueA(long str ptr ptr) 528@ stdcall RegQueryValueExA(long str ptr ptr ptr ptr) 529@ stdcall RegQueryValueExW(long wstr ptr ptr ptr ptr) 530@ stdcall RegQueryValueW(long wstr ptr ptr) 531@ stdcall RegReplaceKeyA(long str str str) 532@ stdcall RegReplaceKeyW(long wstr wstr wstr) 533@ stdcall RegRestoreKeyA(long str long) 534@ stdcall RegRestoreKeyW(long wstr long) 535@ stdcall RegSaveKeyA(long ptr ptr) 536@ stdcall RegSaveKeyExA(long str ptr long) 537@ stdcall RegSaveKeyExW(long str ptr long) 538@ stdcall RegSaveKeyW(long ptr ptr) 539@ stdcall RegSetKeySecurity(long long ptr) 540@ stdcall -version=0x600+ RegSetKeyValueA(long str str long ptr long) 541@ stdcall -version=0x600+ RegSetKeyValueW(long wstr wstr long ptr long) 542@ stdcall RegSetValueA(long str long ptr long) 543@ stdcall RegSetValueExA(long str long long ptr long) 544@ stdcall RegSetValueExW(long wstr long long ptr long) 545@ stdcall RegSetValueW(long wstr long ptr long) 546@ stdcall RegUnLoadKeyA(long str) 547@ stdcall RegUnLoadKeyW(long wstr) 548@ stdcall RegisterEventSourceA(ptr ptr) 549@ stdcall RegisterEventSourceW(ptr ptr) 550@ stub RegisterIdleTask 551@ stdcall RegisterServiceCtrlHandlerA(str ptr) 552@ stdcall RegisterServiceCtrlHandlerExA(str ptr ptr) 553@ stdcall RegisterServiceCtrlHandlerExW(wstr ptr ptr) 554@ stdcall RegisterServiceCtrlHandlerW(wstr ptr) 555@ stdcall RegisterTraceGuidsA(ptr ptr ptr long ptr str str ptr) ntdll.EtwRegisterTraceGuidsA 556@ stdcall RegisterTraceGuidsW(ptr ptr ptr long ptr wstr wstr ptr) ntdll.EtwRegisterTraceGuidsW 557@ stub RemoveTraceCallback 558@ stdcall RemoveUsersFromEncryptedFile(wstr ptr) 559@ stdcall ReportEventA(long long long long ptr long long str ptr) 560@ stdcall ReportEventW(long long long long ptr long long wstr ptr) 561@ stdcall RevertToSelf() 562@ stdcall SaferCloseLevel(ptr) 563@ stdcall SaferComputeTokenFromLevel(ptr ptr ptr long ptr) 564@ stdcall SaferCreateLevel(long long long ptr ptr) 565@ stub SaferGetLevelInformation 566@ stdcall SaferGetPolicyInformation(long long long ptr ptr ptr) 567@ stdcall SaferIdentifyLevel(long ptr ptr ptr) 568@ stdcall SaferRecordEventLogEntry(ptr wstr ptr) 569@ stub SaferSetLevelInformation 570@ stub SaferSetPolicyInformation 571@ stub SaferiChangeRegistryScope 572@ stub SaferiCompareTokenLevels 573@ stub SaferiIsExecutableFileType 574@ stub SaferiPopulateDefaultsInRegistry 575@ stub SaferiRecordEventLogEntry 576@ stub SaferiReplaceProcessThreadTokens 577@ stub SaferiSearchMatchingHashRules 578@ stdcall SetAclInformation(ptr ptr long long) 579@ stub SetEntriesInAccessListA 580@ stub SetEntriesInAccessListW 581@ stdcall SetEntriesInAclA(long ptr ptr ptr) 582@ stdcall SetEntriesInAclW(long ptr ptr ptr) 583@ stub SetEntriesInAuditListA 584@ stub SetEntriesInAuditListW 585@ stdcall SetFileSecurityA(str long ptr) 586@ stdcall SetFileSecurityW(wstr long ptr) 587@ stub SetInformationCodeAuthzLevelW 588@ stub SetInformationCodeAuthzPolicyW 589@ stdcall SetKernelObjectSecurity(long long ptr) 590@ stdcall SetNamedSecurityInfoA(str long ptr ptr ptr ptr ptr) 591@ stub SetNamedSecurityInfoExA 592@ stub SetNamedSecurityInfoExW 593@ stdcall SetNamedSecurityInfoW(wstr long ptr ptr ptr ptr ptr) 594@ stdcall SetPrivateObjectSecurity(long ptr ptr ptr long) 595@ stub SetPrivateObjectSecurityEx 596@ stdcall SetSecurityDescriptorControl(ptr long long) 597@ stdcall SetSecurityDescriptorDacl(ptr long ptr long) 598@ stdcall SetSecurityDescriptorGroup(ptr ptr long) 599@ stdcall SetSecurityDescriptorOwner(ptr ptr long) 600@ stdcall SetSecurityDescriptorRMControl(ptr ptr) 601@ stdcall SetSecurityDescriptorSacl(ptr long ptr long) 602@ stdcall SetSecurityInfo(long long long ptr ptr ptr ptr) 603@ stub SetSecurityInfoExA 604@ stub SetSecurityInfoExW 605@ stdcall SetServiceBits(long long long long) 606@ stdcall SetServiceObjectSecurity(long long ptr) 607@ stdcall SetServiceStatus(long long) 608@ stdcall SetThreadToken(ptr ptr) 609@ stdcall SetTokenInformation(long long ptr long) 610@ stub SetTraceCallback 611@ stub SetUserFileEncryptionKey 612@ stdcall StartServiceA(long long ptr) 613@ stdcall StartServiceCtrlDispatcherA(ptr) 614@ stdcall StartServiceCtrlDispatcherW(ptr) 615@ stdcall StartServiceW(long long ptr) 616@ stdcall -version=0x502 StartTraceA(ptr str ptr) ntdll.EtwStartTraceA 617@ stdcall -version=0x600+ StartTraceA(ptr str ptr) EtwStartTraceA 618@ stdcall -version=0x502 StartTraceW(ptr wstr ptr) ntdll.EtwStartTraceW 619@ stdcall -version=0x600+ StartTraceW(ptr wstr ptr) EtwStartTraceW 620@ stdcall -version=0x502 StopTraceA(double str ptr) ntdll.EtwStopTraceA 621@ stdcall -version=0x600+ StopTraceA(double str ptr) EtwStopTraceA 622@ stdcall -version=0x502 StopTraceW(double wstr ptr) ntdll.EtwStopTraceW 623@ stdcall -version=0x600+ StopTraceW(double wstr ptr) EtwStopTraceW 624@ stdcall SystemFunction001(ptr ptr ptr) 625@ stdcall SystemFunction002(ptr ptr ptr) 626@ stdcall SystemFunction003(ptr ptr) 627@ stdcall SystemFunction004(ptr ptr ptr) 628@ stdcall SystemFunction005(ptr ptr ptr) 629@ stdcall SystemFunction006(ptr ptr) 630@ stdcall SystemFunction007(ptr ptr) 631@ stdcall SystemFunction008(ptr ptr ptr) 632@ stdcall SystemFunction009(ptr ptr ptr) 633@ stdcall SystemFunction010(ptr ptr ptr) 634@ stdcall SystemFunction011(ptr ptr ptr) SystemFunction010 635@ stdcall SystemFunction012(ptr ptr ptr) 636@ stdcall SystemFunction013(ptr ptr ptr) 637@ stdcall SystemFunction014(ptr ptr ptr) SystemFunction012 638@ stdcall SystemFunction015(ptr ptr ptr) SystemFunction013 639@ stdcall SystemFunction016(ptr ptr ptr) SystemFunction012 640@ stdcall SystemFunction017(ptr ptr ptr) SystemFunction013 641@ stdcall SystemFunction018(ptr ptr ptr) SystemFunction012 642@ stdcall SystemFunction019(ptr ptr ptr) SystemFunction013 643@ stdcall SystemFunction020(ptr ptr ptr) SystemFunction012 644@ stdcall SystemFunction021(ptr ptr ptr) SystemFunction013 645@ stdcall SystemFunction022(ptr ptr ptr) SystemFunction012 646@ stdcall SystemFunction023(ptr ptr ptr) SystemFunction013 647@ stdcall SystemFunction024(ptr ptr ptr) 648@ stdcall SystemFunction025(ptr ptr ptr) 649@ stdcall SystemFunction026(ptr ptr ptr) SystemFunction024 650@ stdcall SystemFunction027(ptr ptr ptr) SystemFunction025 651@ stdcall SystemFunction028(long long) 652@ stdcall SystemFunction029(long long) 653@ stdcall SystemFunction030(ptr ptr) 654@ stdcall SystemFunction031(ptr ptr) SystemFunction030 655@ stdcall SystemFunction032(ptr ptr) 656@ stdcall SystemFunction033(long long) 657@ stdcall SystemFunction034(long long) 658@ stdcall SystemFunction035(str) 659@ stdcall SystemFunction036(ptr long) # RtlGenRandom 660@ stdcall SystemFunction040(ptr long long) # RtlEncryptMemory 661@ stdcall SystemFunction041(ptr long long) # RtlDecryptMemory 662@ stdcall -version=0x502 TraceEvent(double ptr) ntdll.EtwTraceEvent 663@ stdcall -version=0x600+ TraceEvent(double ptr) EtwTraceEvent 664@ stdcall TraceEventInstance(double ptr ptr ptr) ntdll.EtwTraceEventInstance 665@ varargs TraceMessage() ntdll.EtwTraceMessage 666@ stdcall TraceMessageVa() ntdll.EtwTraceMessageVa 667@ stdcall TreeResetNamedSecurityInfoA(str ptr ptr ptr ptr ptr ptr long ptr ptr ptr) 668@ stdcall TreeResetNamedSecurityInfoW(wstr long long ptr ptr ptr ptr long ptr long ptr) 669@ stub TrusteeAccessToObjectA 670@ stub TrusteeAccessToObjectW 671@ stub UninstallApplication 672@ stdcall UnlockServiceDatabase(ptr) 673@ stub UnregisterIdleTask 674@ stdcall UnregisterTraceGuids(double) ntdll.EtwUnregisterTraceGuids 675@ stdcall -version=0x502 UpdateTraceA(double str ptr) ntdll.EtwUpdateTraceA 676@ stdcall -version=0x600+ UpdateTraceA(double str ptr) EtwUpdateTraceA 677@ stdcall -version=0x502 UpdateTraceW(double wstr ptr) ntdll.EtwUpdateTraceW 678@ stdcall -version=0x600+ UpdateTraceW(double wstr ptr) EtwUpdateTraceW 679@ stub WdmWmiServiceMain 680@ stub WmiCloseBlock 681@ stub WmiCloseTraceWithCursor 682@ stub WmiConvertTimestamp 683@ stub WmiDevInstToInstanceNameA 684@ stub WmiDevInstToInstanceNameW 685@ stub WmiEnumerateGuids 686@ stub WmiExecuteMethodA 687@ stub WmiExecuteMethodW 688@ stub WmiFileHandleToInstanceNameA 689@ stub WmiFileHandleToInstanceNameW 690@ stub WmiFreeBuffer 691@ stub WmiGetFirstTraceOffset 692@ stub WmiGetNextEvent 693@ stub WmiGetTraceHeader 694@ stub WmiMofEnumerateResourcesA 695@ stub WmiMofEnumerateResourcesW 696@ stdcall -version=0x502 WmiNotificationRegistrationA(ptr long ptr long long) ntdll.EtwNotificationRegistrationA 697@ stdcall -stub -version=0x600+ WmiNotificationRegistrationA(ptr long ptr long long) # EtwNotificationRegistrationA 698@ stdcall -version=0x502 WmiNotificationRegistrationW(ptr long ptr long long) ntdll.EtwNotificationRegistrationW 699@ stdcall -stub -version=0x600+ WmiNotificationRegistrationW(ptr long ptr long long) # EtwNotificationRegistrationW 700@ stub WmiOpenBlock 701@ stub WmiOpenTraceWithCursor 702@ stub WmiParseTraceEvent 703@ stub WmiQueryAllDataA 704@ stub WmiQueryAllDataMultipleA 705@ stub WmiQueryAllDataMultipleW 706@ stub WmiQueryAllDataW 707@ stub WmiQueryGuidInformation 708@ stub WmiQuerySingleInstanceA 709@ stub WmiQuerySingleInstanceMultipleA 710@ stub WmiQuerySingleInstanceMultipleW 711@ stub WmiQuerySingleInstanceW 712@ stdcall -version=0x502 WmiReceiveNotificationsA(long long long long) ntdll.EtwReceiveNotificationsA 713@ stdcall -stub -version=0x600+ WmiReceiveNotificationsA(long long long long) # EtwReceiveNotificationsA 714@ stdcall -version=0x502 WmiReceiveNotificationsW(long long long long) ntdll.EtwReceiveNotificationsW 715@ stdcall -stub -version=0x600+ WmiReceiveNotificationsW(long long long long) # EtwReceiveNotificationsW 716@ stub WmiSetSingleInstanceA 717@ stub WmiSetSingleInstanceW 718@ stub WmiSetSingleItemA 719@ stub WmiSetSingleItemW 720@ stub Wow64Win32ApiEntry 721@ stdcall WriteEncryptedFileRaw(ptr ptr ptr) 722@ stdcall -version=0x600+ RegLoadMUIStringW(ptr wstr wstr long ptr long wstr) advapi32_vista.RegLoadMUIStringW 723@ stdcall -version=0x600+ RegLoadMUIStringA(ptr str str long ptr long str) advapi32_vista.RegLoadMUIStringA 724