11 stdcall I_ScGetCurrentGroupStateW(ptr wstr ptr) 22 stdcall A_SHAFinal(ptr ptr) 33 stdcall A_SHAInit(ptr) 44 stdcall A_SHAUpdate(ptr ptr long) 55 stdcall AbortSystemShutdownA(ptr) 66 stdcall AbortSystemShutdownW(ptr) 77 stdcall AccessCheck(ptr long long ptr ptr ptr ptr ptr) 88 stdcall AccessCheckAndAuditAlarmA(str ptr str str ptr long ptr long ptr ptr ptr) 99 stdcall AccessCheckAndAuditAlarmW(wstr ptr wstr wstr ptr long ptr long ptr ptr ptr) 1010 stdcall AccessCheckByType(ptr ptr long long ptr long ptr ptr ptr ptr ptr) 1111 stdcall AccessCheckByTypeAndAuditAlarmA(str ptr str str ptr ptr long long long ptr long ptr long ptr ptr ptr) 1212 stdcall AccessCheckByTypeAndAuditAlarmW(wstr ptr wstr wstr ptr ptr long long long ptr long ptr long ptr ptr ptr) 1313 stub AccessCheckByTypeResultList 1414 stdcall AccessCheckByTypeResultListAndAuditAlarmA(str ptr str str ptr long long long long ptr long ptr long ptr ptr ptr) 1515 stdcall AccessCheckByTypeResultListAndAuditAlarmByHandleA(str ptr ptr str str ptr long long long long ptr long ptr long ptr ptr ptr) 1616 stdcall AccessCheckByTypeResultListAndAuditAlarmByHandleW(wstr ptr ptr wstr wstr ptr long long long long ptr long ptr long ptr ptr ptr) 1717 stdcall AccessCheckByTypeResultListAndAuditAlarmW(wstr ptr wstr wstr ptr long long long long ptr long ptr long ptr ptr ptr) 1818 stdcall AddAccessAllowedAce(ptr long long ptr) 1919 stdcall AddAccessAllowedAceEx(ptr long long long ptr) 2020 stdcall AddAccessAllowedObjectAce(ptr long long long ptr ptr ptr) 2121 stdcall AddAccessDeniedAce(ptr long long ptr) 2222 stdcall AddAccessDeniedAceEx(ptr long long long ptr) 2323 stdcall AddAccessDeniedObjectAce(ptr long long long ptr ptr ptr) 2424 stdcall AddAce(ptr long long ptr long) 2525 stdcall AddAuditAccessAce(ptr long long ptr long long) 2626 stdcall AddAuditAccessAceEx(ptr long long long ptr long long) 2727 stdcall AddAuditAccessObjectAce(ptr long long long ptr ptr ptr long long) 2828 stdcall AddUsersToEncryptedFile(wstr ptr) 2929 stdcall AdjustTokenGroups(long long ptr long ptr ptr) 3030 stdcall AdjustTokenPrivileges(long long ptr long ptr ptr) 3131 stdcall AllocateAndInitializeSid(ptr long long long long long long long long long ptr) 3232 stdcall AllocateLocallyUniqueId(ptr) 3333 stdcall AreAllAccessesGranted(long long) 3434 stdcall AreAnyAccessesGranted(long long) 3535 stdcall BackupEventLogA(long str) 3636 stdcall BackupEventLogW(long wstr) 3737 stdcall BuildExplicitAccessWithNameA(ptr str long long long) 3838 stdcall BuildExplicitAccessWithNameW(ptr wstr long long long) 3939 stdcall BuildImpersonateExplicitAccessWithNameA(ptr str ptr long long long) 4040 stdcall BuildImpersonateExplicitAccessWithNameW(ptr wstr ptr long long long) 4141 stdcall BuildImpersonateTrusteeA(ptr ptr) 4242 stdcall BuildImpersonateTrusteeW(ptr ptr) 4343 stdcall BuildSecurityDescriptorA(ptr ptr long ptr long ptr ptr ptr ptr) 4444 stdcall BuildSecurityDescriptorW(ptr ptr long ptr long ptr ptr ptr ptr) 4545 stdcall BuildTrusteeWithNameA(ptr str) 4646 stdcall BuildTrusteeWithNameW(ptr wstr) 4747 stdcall BuildTrusteeWithObjectsAndNameA(ptr ptr long str str str) 4848 stdcall BuildTrusteeWithObjectsAndNameW(ptr ptr long wstr wstr wstr) 4949 stdcall BuildTrusteeWithObjectsAndSidA(ptr ptr ptr ptr ptr) 5050 stdcall BuildTrusteeWithObjectsAndSidW(ptr ptr ptr ptr ptr) 5151 stdcall BuildTrusteeWithSidA(ptr ptr) 5252 stdcall BuildTrusteeWithSidW(ptr ptr) 5353 stub CancelOverlappedAccess 5454 stdcall ChangeServiceConfig2A(long long ptr) 5555 stdcall ChangeServiceConfig2W(long long ptr) 5656 stdcall ChangeServiceConfigA(long long long long wstr str ptr str str str str) 5757 stdcall ChangeServiceConfigW(long long long long wstr wstr ptr wstr wstr wstr wstr) 5858 stdcall CheckTokenMembership(long ptr ptr) 5959 stdcall ClearEventLogA(long str) 6060 stdcall ClearEventLogW(long wstr) 6161 stub CloseCodeAuthzLevel 6262 stdcall CloseEncryptedFileRaw(ptr) 6363 stdcall CloseEventLog(long) 6464 stdcall CloseServiceHandle(long) 6565 stub CloseTrace 6666 stdcall CommandLineFromMsiDescriptor(wstr ptr ptr) 6767 stub ComputeAccessTokenFromCodeAuthzLevel 6868 stdcall ControlService(long long ptr) 6969 stdcall ControlTraceA(double str ptr long) ntdll.EtwControlTraceA 7070 stdcall ControlTraceW(double wstr ptr long) ntdll.EtwControlTraceW 7171 stub ConvertAccessToSecurityDescriptorA 7272 stub ConvertAccessToSecurityDescriptorW 7373 stub ConvertSDToStringSDRootDomainA 7474 stub ConvertSDToStringSDRootDomainW 7575 stub ConvertSecurityDescriptorToAccessA 7676 stub ConvertSecurityDescriptorToAccessNamedA #ConvertSecurityDescriptorToAccessA 7777 stub ConvertSecurityDescriptorToAccessNamedW #ConvertSecurityDescriptorToAccessW 7878 stub ConvertSecurityDescriptorToAccessW 7979 stdcall ConvertSecurityDescriptorToStringSecurityDescriptorA(ptr long long ptr ptr) 8080 stdcall ConvertSecurityDescriptorToStringSecurityDescriptorW(ptr long long ptr ptr) 8181 stdcall ConvertSidToStringSidA(ptr ptr) 8282 stdcall ConvertSidToStringSidW(ptr ptr) 8383 stub ConvertStringSDToSDDomainA 8484 stub ConvertStringSDToSDDomainW 8585 stub ConvertStringSDToSDRootDomainA 8686 stub ConvertStringSDToSDRootDomainW 8787 stdcall ConvertStringSecurityDescriptorToSecurityDescriptorA(str long ptr ptr) 8888 stdcall ConvertStringSecurityDescriptorToSecurityDescriptorW(wstr long ptr ptr) 8989 stdcall ConvertStringSidToSidA(ptr ptr) 9090 stdcall ConvertStringSidToSidW(ptr ptr) 9191 stdcall ConvertToAutoInheritPrivateObjectSecurity(ptr ptr ptr ptr long ptr) 9292 stdcall CopySid(long ptr ptr) 9393 stub CreateCodeAuthzLevel 9494 stdcall CreatePrivateObjectSecurity(ptr ptr ptr long long ptr) 9595 stdcall CreatePrivateObjectSecurityEx(ptr ptr ptr ptr long long ptr ptr) 9696 stdcall CreatePrivateObjectSecurityWithMultipleInheritance(ptr ptr ptr ptr long long long ptr ptr) 9797 stdcall CreateProcessAsUserA(long str str ptr ptr long long ptr str ptr ptr) 9898 stdcall CreateProcessAsUserW(long str str ptr ptr long long ptr str ptr ptr) 9999 stdcall CreateProcessWithLogonW(wstr wstr wstr long wstr wstr long ptr wstr ptr ptr) 100100 stdcall CreateProcessWithTokenW(ptr long wstr wstr long ptr wstr ptr ptr) 101101 stdcall CreateRestrictedToken(long long long ptr long ptr long ptr ptr) 102102 stdcall CreateServiceA(long str str long long long long str str ptr str str str) 103103 stdcall CreateServiceW(long wstr wstr long long long long wstr wstr ptr wstr wstr wstr) 104104 stdcall CreateTraceInstanceId(ptr ptr) ntdll.EtwCreateTraceInstanceId 105105 stdcall CreateWellKnownSid(long ptr ptr ptr) 106106 stdcall CredDeleteA(str long long) 107107 stdcall CredDeleteW(wstr long long) 108108 stdcall CredEnumerateA(str long ptr ptr) 109109 stdcall CredEnumerateW(wstr long ptr ptr) 110110 stdcall CredFree(ptr) 111111 stdcall CredGetSessionTypes(long ptr) 112112 stub CredGetTargetInfoA 113113 stub CredGetTargetInfoW 114114 stdcall CredIsMarshaledCredentialA(str) 115115 stdcall CredIsMarshaledCredentialW(wstr) 116116 stdcall CredMarshalCredentialA(long ptr str) 117117 stdcall CredMarshalCredentialW(long ptr wstr) 118118 stub CredProfileLoaded 119119 stdcall CredReadA(str long long ptr) 120120 stdcall CredReadDomainCredentialsA(ptr long ptr ptr) 121121 stdcall CredReadDomainCredentialsW(ptr long ptr ptr) 122122 stdcall CredReadW(wstr long long ptr) 123123 stub CredRenameA 124124 stub CredRenameW 125125 stdcall CredUnmarshalCredentialA(str ptr ptr) 126126 stdcall CredUnmarshalCredentialW(wstr ptr ptr) 127127 stdcall CredWriteA(ptr long) 128# CredWriteDomainCredentialsA 129129 stub CredWriteDomainCredentialsW 130130 stdcall CredWriteW(ptr long) 131131 stub CredpConvertCredential 132132 stub CredpConvertTargetInfo 133133 stub CredpDecodeCredential 134134 stub CredpEncodeCredential 135135 stdcall CryptAcquireContextA(ptr str str long long) 136136 stdcall CryptAcquireContextW(ptr wstr wstr long long) 137137 stdcall CryptContextAddRef(long ptr long) 138138 stdcall CryptCreateHash(long long long long ptr) 139139 stdcall CryptDecrypt(long long long long ptr ptr) 140140 stdcall CryptDeriveKey(long long long long ptr) 141141 stdcall CryptDestroyHash(long) 142142 stdcall CryptDestroyKey(long) 143143 stdcall CryptDuplicateHash(long ptr long ptr) 144144 stdcall CryptDuplicateKey(long ptr long ptr) 145145 stdcall CryptEncrypt(long long long long ptr ptr long) 146146 stdcall CryptEnumProviderTypesA(long ptr long ptr ptr ptr) 147147 stdcall CryptEnumProviderTypesW(long ptr long ptr ptr ptr) 148148 stdcall CryptEnumProvidersA(long ptr long ptr ptr ptr) 149149 stdcall CryptEnumProvidersW(long ptr long ptr ptr ptr) 150150 stdcall CryptExportKey(long long long long ptr ptr) 151151 stdcall CryptGenKey(long long long ptr) 152152 stdcall CryptGenRandom(long long ptr) 153153 stdcall CryptGetDefaultProviderA(long ptr long ptr ptr) 154154 stdcall CryptGetDefaultProviderW(long ptr long ptr ptr) 155155 stdcall CryptGetHashParam(long long ptr ptr long) 156156 stdcall CryptGetKeyParam(long long ptr ptr long) 157157 stdcall CryptGetProvParam(long long ptr ptr long) 158158 stdcall CryptGetUserKey(long long ptr) 159159 stdcall CryptHashData(long ptr long long) 160160 stdcall CryptHashSessionKey(long long long) 161161 stdcall CryptImportKey(long ptr long long long ptr) 162162 stdcall CryptReleaseContext(long long) 163163 stdcall CryptSetHashParam(long long ptr long) 164164 stdcall CryptSetKeyParam(long long ptr long) 165165 stdcall CryptSetProvParam(long long ptr long) 166166 stdcall CryptSetProviderA(str long) 167167 stdcall CryptSetProviderExA(str long ptr long) 168168 stdcall CryptSetProviderExW(wstr long ptr long) 169169 stdcall CryptSetProviderW(wstr long) 170170 stdcall CryptSignHashA(long long ptr long ptr ptr) 171171 stdcall CryptSignHashW(long long ptr long ptr ptr) 172172 stdcall CryptVerifySignatureA(long ptr long long ptr long) 173173 stdcall CryptVerifySignatureW(long ptr long long ptr long) 174174 stdcall DecryptFileA(str long) 175175 stdcall DecryptFileW(wstr long) 176176 stdcall DeleteAce(ptr long) 177177 stdcall DeleteService(long) 178178 stdcall DeregisterEventSource(long) 179179 stdcall DestroyPrivateObjectSecurity(ptr) 180180 stub DuplicateEncryptionInfoFile 181181 stdcall DuplicateToken(long long ptr) 182182 stdcall DuplicateTokenEx(long long ptr long long ptr) 183183 stdcall ElfBackupEventLogFileA(long ptr) 184184 stdcall ElfBackupEventLogFileW(long ptr) 185185 stdcall ElfChangeNotify(long long) 186186 stdcall ElfClearEventLogFileA(long ptr) 187187 stdcall ElfClearEventLogFileW(long ptr) 188188 stdcall ElfCloseEventLog(long) 189189 stdcall ElfDeregisterEventSource(long) 190190 stdcall ElfFlushEventLog(long) 191191 stdcall ElfNumberOfRecords(long ptr) 192192 stdcall ElfOldestRecord(long ptr) 193193 stdcall ElfOpenBackupEventLogA(ptr ptr ptr) 194194 stdcall ElfOpenBackupEventLogW(ptr ptr ptr) 195195 stdcall ElfOpenEventLogA(ptr ptr ptr) 196196 stdcall ElfOpenEventLogW(ptr ptr ptr) 197197 stdcall ElfReadEventLogA(long long long ptr long ptr ptr) 198198 stdcall ElfReadEventLogW(long long long ptr long ptr ptr) 199199 stdcall ElfRegisterEventSourceA(ptr ptr ptr) 200200 stdcall ElfRegisterEventSourceW(ptr ptr ptr) 201201 stdcall ElfReportEventA(long long long long ptr long long ptr ptr long ptr ptr) 202202 stdcall ElfReportEventAndSourceW(long long ptr long long long ptr ptr long long ptr ptr long ptr ptr) 203203 stdcall ElfReportEventW(long long long long ptr long long ptr ptr long ptr ptr) 204204 stdcall EnableTrace(long long long ptr double) ntdll.EtwEnableTrace 205205 stdcall EncryptFileA(str) 206206 stdcall EncryptFileW(wstr) 207207 stub EncryptedFileKeyInfo 208208 stdcall EncryptionDisable(wstr long) 209209 stdcall EnumDependentServicesA(long long ptr long ptr ptr) 210210 stdcall EnumDependentServicesW(long long ptr long ptr ptr) 211211 stdcall EnumServiceGroupW(ptr long long ptr long ptr ptr ptr wstr) 212212 stdcall EnumServicesStatusA(long long long ptr long ptr ptr ptr) 213213 stdcall EnumServicesStatusExA(long long long long ptr long ptr ptr ptr str) 214214 stdcall EnumServicesStatusExW(long long long long ptr long ptr ptr ptr wstr) 215215 stdcall EnumServicesStatusW(long long long ptr long ptr ptr ptr) 216216 stdcall EnumerateTraceGuids(ptr long ptr) ntdll.EtwEnumerateTraceGuids 217217 stdcall EqualDomainSid(ptr ptr ptr) 218218 stdcall EqualPrefixSid(ptr ptr) 219219 stdcall EqualSid(ptr ptr) 220220 stdcall FileEncryptionStatusA(str ptr) 221221 stdcall FileEncryptionStatusW(wstr ptr) 222222 stdcall FindFirstFreeAce(ptr ptr) 223223 stdcall FlushTraceA(double str ptr) ntdll.EtwFlushTraceA 224224 stdcall FlushTraceW(double wstr ptr) ntdll.EtwFlushTraceW 225225 stub FreeEncryptedFileKeyInfo 226226 stdcall FreeEncryptionCertificateHashList(ptr) 227227 stdcall FreeInheritedFromArray(ptr long ptr) 228228 stdcall FreeSid(ptr) 229229 stub GetAccessPermissionsForObjectA 230230 stub GetAccessPermissionsForObjectW 231231 stdcall GetAce(ptr long ptr) 232232 stdcall GetAclInformation(ptr ptr long long) 233233 stdcall GetAuditedPermissionsFromAclA(ptr ptr ptr ptr) 234234 stdcall GetAuditedPermissionsFromAclW(ptr ptr ptr ptr) 235235 stdcall GetCurrentHwProfileA(ptr) 236236 stdcall GetCurrentHwProfileW(ptr) 237237 stdcall GetEffectiveRightsFromAclA(ptr ptr ptr) 238238 stdcall GetEffectiveRightsFromAclW(ptr ptr ptr) 239239 stdcall GetEventLogInformation(long long ptr long ptr) 240240 stdcall GetExplicitEntriesFromAclA(ptr ptr ptr) advapi32.GetExplicitEntriesFromAclW 241241 stdcall GetExplicitEntriesFromAclW(ptr ptr ptr) 242242 stdcall GetFileSecurityA(str long ptr long ptr) 243243 stdcall GetFileSecurityW(wstr long ptr long ptr) 244244 stub GetInformationCodeAuthzLevelW 245245 stub GetInformationCodeAuthzPolicyW 246246 stdcall GetInheritanceSourceA(str long long long ptr long ptr ptr ptr ptr) 247247 stdcall GetInheritanceSourceW(wstr long long long ptr long ptr ptr ptr ptr) 248248 stdcall GetKernelObjectSecurity(long long ptr long ptr) 249249 stdcall GetLengthSid(ptr) 250250 stub GetLocalManagedApplicationData 251251 stub GetLocalManagedApplications 252252 stub GetManagedApplicationCategories 253253 stub GetManagedApplications 254254 stdcall GetMultipleTrusteeA(ptr) 255255 stdcall GetMultipleTrusteeOperationA(ptr) 256256 stdcall GetMultipleTrusteeOperationW(ptr) 257257 stdcall GetMultipleTrusteeW(ptr) 258258 stdcall GetNamedSecurityInfoA(str long long ptr ptr ptr ptr ptr) 259259 stub GetNamedSecurityInfoExA 260260 stub GetNamedSecurityInfoExW 261261 stdcall GetNamedSecurityInfoW(wstr long long ptr ptr ptr ptr ptr) 262262 stdcall GetNumberOfEventLogRecords(long ptr) 263263 stdcall GetOldestEventLogRecord(long ptr) 264264 stub GetOverlappedAccessResults 265265 stdcall GetPrivateObjectSecurity(ptr long ptr long ptr) 266266 stdcall GetSecurityDescriptorControl(ptr ptr ptr) 267267 stdcall GetSecurityDescriptorDacl(ptr ptr ptr ptr) 268268 stdcall GetSecurityDescriptorGroup(ptr ptr ptr) 269269 stdcall GetSecurityDescriptorLength(ptr) ntdll.RtlLengthSecurityDescriptor 270270 stdcall GetSecurityDescriptorOwner(ptr ptr ptr) 271271 stdcall GetSecurityDescriptorRMControl(ptr ptr) 272272 stdcall GetSecurityDescriptorSacl(ptr ptr ptr ptr) 273273 stdcall GetSecurityInfo(long long long ptr ptr ptr ptr ptr) 274274 stdcall GetSecurityInfoExA(long long long str str ptr ptr ptr ptr) 275275 stdcall GetSecurityInfoExW(long long long wstr wstr ptr ptr ptr ptr) 276276 stdcall GetServiceDisplayNameA(ptr str ptr ptr) 277277 stdcall GetServiceDisplayNameW(ptr wstr ptr ptr) 278278 stdcall GetServiceKeyNameA(long str ptr ptr) 279279 stdcall GetServiceKeyNameW(long wstr ptr ptr) 280280 stdcall GetSidIdentifierAuthority(ptr) 281281 stdcall GetSidLengthRequired(long) 282282 stdcall GetSidSubAuthority(ptr long) 283283 stdcall GetSidSubAuthorityCount(ptr) 284284 stdcall GetTokenInformation(long long ptr long ptr) 285285 stdcall GetTraceEnableFlags(double) ntdll.EtwGetTraceEnableFlags 286286 stdcall GetTraceEnableLevel(double) ntdll.EtwGetTraceEnableLevel 287287 stdcall GetTraceLoggerHandle(ptr) ntdll.EtwGetTraceLoggerHandle 288288 stdcall GetTrusteeFormA(ptr) 289289 stdcall GetTrusteeFormW(ptr) 290290 stdcall GetTrusteeNameA(ptr) 291291 stdcall GetTrusteeNameW(ptr) 292292 stdcall GetTrusteeTypeA(ptr) 293293 stdcall GetTrusteeTypeW(ptr) 294294 stdcall GetUserNameA(ptr ptr) 295295 stdcall GetUserNameW(ptr ptr) 296296 stdcall GetWindowsAccountDomainSid(ptr ptr ptr) 297297 stub I_QueryTagInformation 298298 stdcall I_ScIsSecurityProcess() 299299 stdcall I_ScPnPGetServiceName(ptr wstr long) 300300 stub I_ScSendTSMessage 301301 stdcall I_ScSetServiceBitsA(ptr long long long str) 302302 stdcall I_ScSetServiceBitsW(ptr long long long wstr) 303303 stub IdentifyCodeAuthzLevelW 304304 stdcall ImpersonateAnonymousToken(ptr) 305305 stdcall ImpersonateLoggedOnUser(long) 306306 stdcall ImpersonateNamedPipeClient(long) 307307 stdcall ImpersonateSelf(long) 308308 stdcall InitializeAcl(ptr long long) 309309 stdcall InitializeSecurityDescriptor(ptr long) 310310 stdcall InitializeSid(ptr ptr long) 311311 stdcall InitiateSystemShutdownA(str str long long long) 312312 stdcall InitiateSystemShutdownExA(str str long long long long) 313313 stdcall InitiateSystemShutdownExW(wstr wstr long long long long) 314314 stdcall InitiateSystemShutdownW(str str long long long) 315315 stub InstallApplication 316316 stdcall IsTextUnicode(ptr long ptr) 317317 stdcall IsTokenRestricted(long) 318318 stub IsTokenUntrusted 319319 stdcall IsValidAcl(ptr) 320320 stdcall IsValidSecurityDescriptor(ptr) 321321 stdcall IsValidSid(ptr) 322322 stdcall IsWellKnownSid(ptr long) 323323 stdcall LockServiceDatabase(ptr) 324324 stdcall LogonUserA(str str str long long ptr) 325325 stdcall LogonUserExA(str str str long long ptr ptr ptr ptr ptr) 326326 stdcall LogonUserExW(wstr wstr wstr long long ptr ptr ptr ptr ptr) 327327 stdcall LogonUserW(wstr wstr wstr long long ptr) 328328 stdcall LookupAccountNameA(str str ptr ptr ptr ptr ptr) 329329 stdcall LookupAccountNameW(wstr wstr ptr ptr ptr ptr ptr) 330330 stdcall LookupAccountSidA(ptr ptr ptr ptr ptr ptr ptr) 331331 stdcall LookupAccountSidW(ptr ptr ptr ptr ptr ptr ptr) 332332 stdcall LookupPrivilegeDisplayNameA(str str str ptr ptr) 333333 stdcall LookupPrivilegeDisplayNameW(wstr wstr wstr ptr ptr) 334334 stdcall LookupPrivilegeNameA(str ptr ptr long) 335335 stdcall LookupPrivilegeNameW(wstr ptr ptr long) 336336 stdcall LookupPrivilegeValueA(ptr ptr ptr) 337337 stdcall LookupPrivilegeValueW(ptr ptr ptr) 338338 stub LookupSecurityDescriptorPartsA 339339 stub LookupSecurityDescriptorPartsW 340340 stdcall LsaAddAccountRights(ptr ptr ptr long) 341341 stdcall LsaAddPrivilegesToAccount(ptr ptr) 342342 stdcall LsaClearAuditLog(ptr) 343343 stdcall LsaClose(ptr) 344344 stdcall LsaCreateAccount(ptr ptr long ptr) 345345 stdcall LsaCreateSecret(ptr ptr long ptr) 346346 stdcall LsaCreateTrustedDomain(ptr ptr long ptr) 347347 stdcall LsaCreateTrustedDomainEx(ptr ptr ptr long ptr) 348348 stdcall LsaDelete(ptr) 349349 stdcall LsaDeleteTrustedDomain(ptr ptr) 350350 stdcall LsaEnumerateAccountRights(ptr ptr ptr ptr) 351351 stdcall LsaEnumerateAccounts(ptr ptr ptr long ptr) 352352 stdcall LsaEnumerateAccountsWithUserRight(ptr ptr ptr ptr) 353353 stdcall LsaEnumeratePrivileges(ptr ptr ptr long ptr) 354354 stdcall LsaEnumeratePrivilegesOfAccount(ptr ptr) 355355 stdcall LsaEnumerateTrustedDomains(ptr ptr ptr long ptr) 356356 stdcall LsaEnumerateTrustedDomainsEx(ptr ptr ptr long ptr) 357357 stdcall LsaFreeMemory(ptr) 358358 stdcall LsaGetQuotasForAccount(ptr ptr) 359359 stdcall LsaGetRemoteUserName(ptr ptr ptr) 360360 stdcall LsaGetSystemAccessAccount(ptr ptr) 361361 stdcall LsaGetUserName(ptr ptr) 362362 stub LsaICLookupNames 363363 stub LsaICLookupNamesWithCreds 364364 stub LsaICLookupSids 365365 stub LsaICLookupSidsWithCreds 366366 stdcall LsaLookupNames2(ptr long long ptr ptr ptr) 367367 stdcall LsaLookupNames(ptr long ptr ptr ptr) 368368 stdcall LsaLookupPrivilegeDisplayName(ptr ptr ptr ptr) 369369 stdcall LsaLookupPrivilegeName(ptr ptr ptr) 370370 stdcall LsaLookupPrivilegeValue(ptr ptr ptr) 371371 stdcall LsaLookupSids(ptr long ptr ptr ptr) 372372 stdcall LsaNtStatusToWinError(long) 373373 stdcall LsaOpenAccount(ptr ptr long ptr) 374374 stdcall LsaOpenPolicy(ptr ptr long ptr) 375375 stdcall LsaOpenPolicySce(ptr ptr long ptr) 376376 stdcall LsaOpenSecret(ptr ptr long ptr) 377377 stdcall LsaOpenTrustedDomain(ptr ptr long ptr) 378378 stdcall LsaOpenTrustedDomainByName(ptr ptr long ptr) 379379 stdcall LsaQueryDomainInformationPolicy(ptr long ptr) 380380 stdcall LsaQueryForestTrustInformation(ptr ptr ptr) 381381 stdcall LsaQueryInfoTrustedDomain(ptr long ptr) 382382 stdcall LsaQueryInformationPolicy(ptr long ptr) 383383 stdcall LsaQuerySecret(ptr ptr ptr ptr ptr) 384384 stdcall LsaQuerySecurityObject(ptr long ptr) 385385 stdcall LsaQueryTrustedDomainInfo(ptr ptr long ptr) 386386 stdcall LsaQueryTrustedDomainInfoByName(ptr ptr long ptr) 387387 stdcall LsaRemoveAccountRights(ptr ptr long ptr long) 388388 stdcall LsaRemovePrivilegesFromAccount(ptr long ptr) 389389 stdcall LsaRetrievePrivateData(ptr ptr ptr) 390390 stdcall LsaSetDomainInformationPolicy(ptr long ptr) 391391 stdcall LsaSetForestTrustInformation(ptr ptr ptr long ptr) 392392 stdcall LsaSetInformationPolicy(ptr long ptr) 393393 stdcall LsaSetInformationTrustedDomain(ptr long ptr) 394394 stdcall LsaSetQuotasForAccount(ptr ptr) 395395 stdcall LsaSetSecret(ptr ptr ptr) 396396 stdcall LsaSetSecurityObject(ptr long ptr) 397397 stdcall LsaSetSystemAccessAccount(ptr long) 398398 stdcall LsaSetTrustedDomainInfoByName(ptr ptr long ptr) 399399 stdcall LsaSetTrustedDomainInformation(ptr ptr long ptr) 400400 stdcall LsaStorePrivateData(ptr ptr ptr) 401401 stdcall MD4Final(ptr) 402402 stdcall MD4Init(ptr) 403403 stdcall MD4Update(ptr ptr long) 404404 stdcall MD5Final(ptr) 405405 stdcall MD5Init(ptr) 406406 stdcall MD5Update(ptr ptr long) 407407 stub MSChapSrvChangePassword2 408408 stub MSChapSrvChangePassword 409409 stdcall MakeAbsoluteSD2(ptr ptr) 410410 stdcall MakeAbsoluteSD(ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr) 411411 stdcall MakeSelfRelativeSD(ptr ptr ptr) 412412 stdcall MapGenericMask(ptr ptr) ntdll.RtlMapGenericMask 413413 stdcall NotifyBootConfigStatus(long) 414414 stdcall NotifyChangeEventLog(long long) 415415 stdcall ObjectCloseAuditAlarmA(str ptr long) 416416 stdcall ObjectCloseAuditAlarmW(wstr ptr long) 417417 stdcall ObjectDeleteAuditAlarmA(str ptr long) 418418 stdcall ObjectDeleteAuditAlarmW(wstr ptr long) 419419 stdcall ObjectOpenAuditAlarmA(str ptr str str ptr long long long ptr long long ptr) 420420 stdcall ObjectOpenAuditAlarmW(wstr ptr wstr wstr ptr long long long ptr long long ptr) 421421 stdcall ObjectPrivilegeAuditAlarmA(str ptr long long ptr long) 422422 stdcall ObjectPrivilegeAuditAlarmW(wstr ptr long long ptr long) 423423 stdcall OpenBackupEventLogA(str str) 424424 stdcall OpenBackupEventLogW(wstr wstr) 425425 stdcall OpenEncryptedFileRawA(str long ptr) 426426 stdcall OpenEncryptedFileRawW(wstr long ptr) 427427 stdcall OpenEventLogA(str str) 428428 stdcall OpenEventLogW(wstr wstr) 429429 stdcall OpenProcessToken(long long ptr) 430430 stdcall OpenSCManagerA(str str long) 431431 stdcall OpenSCManagerW(wstr wstr long) 432432 stdcall OpenServiceA(long str long) 433433 stdcall OpenServiceW(long wstr long) 434434 stdcall OpenThreadToken(long long long ptr) 435435 stdcall -ret64 OpenTraceA(ptr) 436436 stdcall -ret64 OpenTraceW(ptr) 437437 stdcall PrivilegeCheck(ptr ptr ptr) 438438 stdcall PrivilegedServiceAuditAlarmA(str str long ptr long) 439439 stdcall PrivilegedServiceAuditAlarmW(wstr wstr long ptr long) 440440 stub ProcessIdleTasks 441441 stdcall ProcessTrace(ptr long ptr ptr) 442442 stdcall QueryAllTracesA(ptr long ptr) ntdll.EtwQueryAllTracesA 443443 stdcall QueryAllTracesW(ptr long ptr) ntdll.EtwQueryAllTracesW 444444 stdcall QueryRecoveryAgentsOnEncryptedFile(wstr ptr) 445445 stdcall QueryServiceConfig2A(long long ptr long ptr) 446446 stdcall QueryServiceConfig2W(long long ptr long ptr) 447447 stdcall QueryServiceConfigA(long ptr long ptr) 448448 stdcall QueryServiceConfigW(long ptr long ptr) 449449 stdcall QueryServiceLockStatusA(long ptr long ptr) 450450 stdcall QueryServiceLockStatusW(long ptr long ptr) 451451 stdcall QueryServiceObjectSecurity(long long ptr long ptr) 452452 stdcall QueryServiceStatus(long ptr) 453453 stdcall QueryServiceStatusEx(long long ptr long ptr) 454454 stdcall QueryTraceA(double str ptr) ntdll.EtwQueryTraceA 455455 stdcall QueryTraceW(double str ptr) ntdll.EtwQueryTraceA 456456 stdcall QueryUsersOnEncryptedFile(wstr ptr) 457457 stdcall ReadEncryptedFileRaw(ptr ptr ptr) 458458 stdcall ReadEventLogA(long long long ptr long ptr ptr) 459459 stdcall ReadEventLogW(long long long ptr long ptr ptr) 460460 stdcall RegCloseKey(long) 461461 stdcall RegConnectRegistryA(str long ptr) 462462 stub RegConnectRegistryExA 463463 stub RegConnectRegistryExW 464464 stdcall RegConnectRegistryW(wstr long ptr) 465465 stdcall RegCreateKeyA(long str ptr) 466466 stdcall RegCreateKeyExA(long str long ptr long long ptr ptr ptr) 467467 stdcall RegCreateKeyExW(long wstr long ptr long long ptr ptr ptr) 468468 stdcall RegCreateKeyW(long wstr ptr) 469469 stdcall RegDeleteKeyA(long str) 470470 stdcall RegDeleteKeyExA(long str long long) 471471 stdcall RegDeleteKeyExW(long wstr long long) 472472 stdcall RegDeleteKeyW(long wstr) 473473 stdcall RegDeleteValueA(long str) 474474 stdcall RegDeleteValueW(long wstr) 475475 stdcall RegDisablePredefinedCache() 476476 stdcall RegDisableReflectionKey(ptr) 477477 stdcall RegEnableReflectionKey(ptr) 478478 stdcall RegEnumKeyA(long long ptr long) 479479 stdcall RegEnumKeyExA(long long ptr ptr ptr ptr ptr ptr) 480480 stdcall RegEnumKeyExW(long long ptr ptr ptr ptr ptr ptr) 481481 stdcall RegEnumKeyW(long long ptr long) 482482 stdcall RegEnumValueA(long long ptr ptr ptr ptr ptr ptr) 483483 stdcall RegEnumValueW(long long ptr ptr ptr ptr ptr ptr) 484484 stdcall RegFlushKey(long) 485485 stdcall RegGetKeySecurity(long long ptr ptr) 486486 stdcall RegGetValueA(long str str long ptr ptr ptr) 487487 stdcall RegGetValueW(long wstr wstr long ptr ptr ptr) 488488 stdcall RegLoadKeyA(long str str) 489489 stdcall RegLoadKeyW(long wstr wstr) 490490 stdcall RegNotifyChangeKeyValue(long long long long long) 491491 stdcall RegOpenCurrentUser(long ptr) 492492 stdcall RegOpenKeyA(long str ptr) 493493 stdcall RegOpenKeyExA(long str long long ptr) 494494 stdcall RegOpenKeyExW(long wstr long long ptr) 495495 stdcall RegOpenKeyW(long wstr ptr) 496496 stdcall RegOpenUserClassesRoot(ptr long long ptr) 497497 stdcall RegOverridePredefKey(long long) 498498 stdcall RegQueryInfoKeyA(long ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr) 499499 stdcall RegQueryInfoKeyW(long ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr) 500500 stdcall RegQueryMultipleValuesA(long ptr long ptr ptr) 501501 stdcall RegQueryMultipleValuesW(long ptr long ptr ptr) 502502 stdcall RegQueryReflectionKey(ptr ptr) 503503 stdcall RegQueryValueA(long str ptr ptr) 504504 stdcall RegQueryValueExA(long str ptr ptr ptr ptr) 505505 stdcall RegQueryValueExW(long wstr ptr ptr ptr ptr) 506506 stdcall RegQueryValueW(long wstr ptr ptr) 507507 stdcall RegReplaceKeyA(long str str str) 508508 stdcall RegReplaceKeyW(long wstr wstr wstr) 509509 stdcall RegRestoreKeyA(long str long) 510510 stdcall RegRestoreKeyW(long wstr long) 511511 stdcall RegSaveKeyA(long ptr ptr) 512512 stdcall RegSaveKeyExA(long str ptr long) 513513 stdcall RegSaveKeyExW(long str ptr long) 514514 stdcall RegSaveKeyW(long ptr ptr) 515515 stdcall RegSetKeySecurity(long long ptr) 516516 stdcall RegSetValueA(long str long ptr long) 517517 stdcall RegSetValueExA(long str long long ptr long) 518518 stdcall RegSetValueExW(long wstr long long ptr long) 519519 stdcall RegSetValueW(long wstr long ptr long) 520520 stdcall RegUnLoadKeyA(long str) 521521 stdcall RegUnLoadKeyW(long wstr) 522522 stdcall RegisterEventSourceA(ptr ptr) 523523 stdcall RegisterEventSourceW(ptr ptr) 524524 stub RegisterIdleTask 525525 stdcall RegisterServiceCtrlHandlerA(str ptr) 526526 stdcall RegisterServiceCtrlHandlerExA(str ptr ptr) 527527 stdcall RegisterServiceCtrlHandlerExW(wstr ptr ptr) 528528 stdcall RegisterServiceCtrlHandlerW(wstr ptr) 529529 stdcall RegisterTraceGuidsA(ptr ptr ptr long ptr str str ptr) ntdll.EtwRegisterTraceGuidsA 530530 stdcall RegisterTraceGuidsW(ptr ptr ptr long ptr wstr wstr ptr) ntdll.EtwRegisterTraceGuidsW 531531 stub RemoveTraceCallback 532532 stdcall RemoveUsersFromEncryptedFile(wstr ptr) 533533 stdcall ReportEventA(long long long long ptr long long str ptr) 534534 stdcall ReportEventW(long long long long ptr long long wstr ptr) 535535 stdcall RevertToSelf() 536536 stdcall SaferCloseLevel(ptr) 537537 stdcall SaferComputeTokenFromLevel(ptr ptr ptr long ptr) 538538 stdcall SaferCreateLevel(long long long ptr ptr) 539539 stub SaferGetLevelInformation 540540 stdcall SaferGetPolicyInformation(long long long ptr ptr ptr) 541541 stdcall SaferIdentifyLevel(long ptr ptr ptr) 542542 stdcall SaferRecordEventLogEntry(ptr wstr ptr) 543543 stub SaferSetLevelInformation 544544 stub SaferSetPolicyInformation 545545 stub SaferiChangeRegistryScope 546546 stub SaferiCompareTokenLevels 547547 stub SaferiIsExecutableFileType 548548 stub SaferiPopulateDefaultsInRegistry 549549 stub SaferiRecordEventLogEntry 550550 stub SaferiReplaceProcessThreadTokens 551551 stub SaferiSearchMatchingHashRules 552552 stdcall SetAclInformation(ptr ptr long long) 553553 stub SetEntriesInAccessListA 554554 stub SetEntriesInAccessListW 555555 stdcall SetEntriesInAclA(long ptr ptr ptr) 556556 stdcall SetEntriesInAclW(long ptr ptr ptr) 557557 stub SetEntriesInAuditListA 558558 stub SetEntriesInAuditListW 559559 stdcall SetFileSecurityA(str long ptr) 560560 stdcall SetFileSecurityW(wstr long ptr) 561561 stub SetInformationCodeAuthzLevelW 562562 stub SetInformationCodeAuthzPolicyW 563563 stdcall SetKernelObjectSecurity(long long ptr) 564564 stdcall SetNamedSecurityInfoA(str long ptr ptr ptr ptr ptr) 565565 stub SetNamedSecurityInfoExA 566566 stub SetNamedSecurityInfoExW 567567 stdcall SetNamedSecurityInfoW(wstr long ptr ptr ptr ptr ptr) 568568 stdcall SetPrivateObjectSecurity(long ptr ptr ptr long) 569569 stub SetPrivateObjectSecurityEx 570570 stdcall SetSecurityDescriptorControl(ptr long long) 571571 stdcall SetSecurityDescriptorDacl(ptr long ptr long) 572572 stdcall SetSecurityDescriptorGroup(ptr ptr long) 573573 stdcall SetSecurityDescriptorOwner(ptr ptr long) 574574 stdcall SetSecurityDescriptorRMControl(ptr ptr) 575575 stdcall SetSecurityDescriptorSacl(ptr long ptr long) 576576 stdcall SetSecurityInfo(long long long ptr ptr ptr ptr) 577577 stub SetSecurityInfoExA 578578 stub SetSecurityInfoExW 579579 stdcall SetServiceBits(long long long long) 580580 stdcall SetServiceObjectSecurity(long long ptr) 581581 stdcall SetServiceStatus(long long) 582582 stdcall SetThreadToken(ptr ptr) 583583 stdcall SetTokenInformation(long long ptr long) 584584 stub SetTraceCallback 585585 stub SetUserFileEncryptionKey 586586 stdcall StartServiceA(long long ptr) 587587 stdcall StartServiceCtrlDispatcherA(ptr) 588588 stdcall StartServiceCtrlDispatcherW(ptr) 589589 stdcall StartServiceW(long long ptr) 590590 stdcall StartTraceA(ptr str ptr) ntdll.EtwStartTraceA 591591 stdcall StartTraceW(ptr wstr ptr) ntdll.EtwStartTraceW 592592 stdcall StopTraceA(double str ptr) ntdll.EtwStopTraceA 593593 stdcall StopTraceW(double wstr ptr) ntdll.EtwStopTraceA 594594 stdcall SystemFunction001(ptr ptr ptr) 595595 stdcall SystemFunction002(ptr ptr ptr) 596596 stdcall SystemFunction003(ptr ptr) 597597 stdcall SystemFunction004(ptr ptr ptr) 598598 stdcall SystemFunction005(ptr ptr ptr) 599599 stdcall SystemFunction006(ptr ptr) 600600 stdcall SystemFunction007(ptr ptr) 601601 stdcall SystemFunction008(ptr ptr ptr) 602602 stdcall SystemFunction009(ptr ptr ptr) 603603 stdcall SystemFunction010(ptr ptr ptr) 604604 stdcall SystemFunction011(ptr ptr ptr) SystemFunction010 605605 stdcall SystemFunction012(ptr ptr ptr) 606606 stdcall SystemFunction013(ptr ptr ptr) 607607 stdcall SystemFunction014(ptr ptr ptr) SystemFunction012 608608 stdcall SystemFunction015(ptr ptr ptr) SystemFunction013 609609 stdcall SystemFunction016(ptr ptr ptr) SystemFunction012 610610 stdcall SystemFunction017(ptr ptr ptr) SystemFunction013 611611 stdcall SystemFunction018(ptr ptr ptr) SystemFunction012 612612 stdcall SystemFunction019(ptr ptr ptr) SystemFunction013 613613 stdcall SystemFunction020(ptr ptr ptr) SystemFunction012 614614 stdcall SystemFunction021(ptr ptr ptr) SystemFunction013 615615 stdcall SystemFunction022(ptr ptr ptr) SystemFunction012 616616 stdcall SystemFunction023(ptr ptr ptr) SystemFunction013 617617 stdcall SystemFunction024(ptr ptr ptr) 618618 stdcall SystemFunction025(ptr ptr ptr) 619619 stdcall SystemFunction026(ptr ptr ptr) SystemFunction024 620620 stdcall SystemFunction027(ptr ptr ptr) SystemFunction025 621621 stdcall SystemFunction028(long long) 622622 stdcall SystemFunction029(long long) 623623 stdcall SystemFunction030(ptr ptr) 624624 stdcall SystemFunction031(ptr ptr) SystemFunction030 625625 stdcall SystemFunction032(ptr ptr) 626626 stdcall SystemFunction033(long long) 627627 stdcall SystemFunction034(long long) 628628 stdcall SystemFunction035(str) 629629 stdcall SystemFunction036(ptr long) # RtlGenRandom 630630 stdcall SystemFunction040(ptr long long) # RtlEncryptMemory 631631 stdcall SystemFunction041(ptr long long) # RtlDecryptMemory 632632 stdcall TraceEvent(double ptr) ntdll.EtwTraceEvent 633633 stdcall TraceEventInstance(double ptr ptr ptr) ntdll.EtwTraceEventInstance 634634 varargs TraceMessage(ptr long ptr long) ntdll.EtwTraceMessage 635635 stdcall TraceMessageVa(double long ptr long ptr) ntdll.EtwTraceMessageVa 636636 stdcall TreeResetNamedSecurityInfoA(str ptr ptr ptr ptr ptr ptr long ptr ptr ptr) 637637 stdcall TreeResetNamedSecurityInfoW(wstr long long ptr ptr ptr ptr long ptr long ptr) 638638 stub TrusteeAccessToObjectA 639639 stub TrusteeAccessToObjectW 640640 stub UninstallApplication 641641 stdcall UnlockServiceDatabase(ptr) 642642 stub UnregisterIdleTask 643643 stdcall UnregisterTraceGuids(double) ntdll.EtwUnregisterTraceGuids 644644 stdcall UpdateTraceA(double str ptr) ntdll.EtwUpdateTraceA 645645 stdcall UpdateTraceW(double wstr ptr) ntdll.EtwUpdateTraceW 646646 stub WdmWmiServiceMain 647647 stub WmiCloseBlock 648648 stub WmiCloseTraceWithCursor 649649 stub WmiConvertTimestamp 650650 stub WmiDevInstToInstanceNameA 651651 stub WmiDevInstToInstanceNameW 652652 stub WmiEnumerateGuids 653653 stub WmiExecuteMethodA 654654 stub WmiExecuteMethodW 655655 stub WmiFileHandleToInstanceNameA 656656 stub WmiFileHandleToInstanceNameW 657657 stub WmiFreeBuffer 658658 stub WmiGetFirstTraceOffset 659659 stub WmiGetNextEvent 660660 stub WmiGetTraceHeader 661661 stub WmiMofEnumerateResourcesA 662662 stub WmiMofEnumerateResourcesW 663663 stdcall WmiNotificationRegistrationA(ptr long ptr long long) ntdll.EtwNotificationRegistrationA 664664 stdcall WmiNotificationRegistrationW(ptr long ptr long long) ntdll.EtwNotificationRegistrationW 665665 stub WmiOpenBlock 666666 stub WmiOpenTraceWithCursor 667667 stub WmiParseTraceEvent 668668 stub WmiQueryAllDataA 669669 stub WmiQueryAllDataMultipleA 670670 stub WmiQueryAllDataMultipleW 671671 stub WmiQueryAllDataW 672672 stub WmiQueryGuidInformation 673673 stub WmiQuerySingleInstanceA 674674 stub WmiQuerySingleInstanceMultipleA 675675 stub WmiQuerySingleInstanceMultipleW 676676 stub WmiQuerySingleInstanceW 677677 stdcall WmiReceiveNotificationsA(long long long long) ntdll.EtwReceiveNotificationsA 678678 stdcall WmiReceiveNotificationsW(long long long long) ntdll.EtwReceiveNotificationsW 679679 stub WmiSetSingleInstanceA 680680 stub WmiSetSingleInstanceW 681681 stub WmiSetSingleItemA 682682 stub WmiSetSingleItemW 683683 stub Wow64Win32ApiEntry 684684 stdcall WriteEncryptedFileRaw(ptr ptr ptr) 685685 stdcall -version=0x600+ RegLoadMUIStringW(ptr wstr wstr long ptr long wstr) advapi32_vista.RegLoadMUIStringW 686686 stdcall -version=0x600+ RegLoadMUIStringA(ptr str str long ptr long str) advapi32_vista.RegLoadMUIStringA 687