;Function BuildExplicitAccessWithNameW has the same entry point as BuildExplicitAccessWithNameA
;Function BuildImpersonateExplicitAccessWithNameW has the same entry point as BuildImpersonateExplicitAccessWithNameA
;Function BuildImpersonateTrusteeW has the same entry point as BuildImpersonateTrusteeA
;Function BuildTrusteeWithNameW has the same entry point as BuildTrusteeWithNameA
;Function BuildTrusteeWithObjectsAndNameW has the same entry point as BuildTrusteeWithObjectsAndNameA
;Function BuildTrusteeWithObjectsAndSidW has the same entry point as BuildTrusteeWithObjectsAndSidA
;Function BuildTrusteeWithSidW has the same entry point as BuildTrusteeWithSidA
;Function ConvertSecurityDescriptorToAccessNamedA has the same entry point as ConvertSecurityDescriptorToAccessA
;Function ConvertSecurityDescriptorToAccessW has the same entry point as ConvertSecurityDescriptorToAccessNamedW
;Function GetExplicitEntriesFromAclA can't be hooked: It's size is less than 5 bytes.If you try to hook it, call to function GetAuditedPermissionsFromAclW will make your process crash
;Function GetMultipleTrusteeOperationW has the same entry point as GetMultipleTrusteeOperationA
;Function GetMultipleTrusteeW has the same entry point as GetMultipleTrusteeA
;Function GetTrusteeFormW has the same entry point as GetTrusteeFormA
;Function GetTrusteeNameW has the same entry point as GetTrusteeNameA
;Function GetTrusteeTypeW has the same entry point as GetTrusteeTypeA


advapi32.dll|A_SHAFinal(UNKNOWN,UNKNOWN)
advapi32.dll|A_SHAInit(UNKNOWN)
advapi32.dll|A_SHAUpdate(UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|BOOL AbortSystemShutdownA( LPSTR  lpMachineName, LPSTR  lpMessage, DWORD dwTimeout, BOOL bForceAppsClosed, BOOL bRebootAfterShutdown)|Out|FailureIfNullRet
advapi32.dll|BOOL AbortSystemShutdownW( LPWSTR lpMachineName, LPWSTR lpMessage, DWORD dwTimeout, BOOL bForceAppsClosed, BOOL bRebootAfterShutdown)|Out|FailureIfNullRet
advapi32.dll|BOOL AccessCheck( PSECURITY_DESCRIPTOR pSecurityDescriptor, HANDLE ClientToken, DWORD DesiredAccess, PGENERIC_MAPPING GenericMapping, PPRIVILEGE_SET PrivilegeSet, LPDWORD PrivilegeSetLength, LPDWORD GrantedAccess, LPBOOL AccessStatus)|Out|FailureIfNullRet
advapi32.dll|BOOL AccessCheckAndAuditAlarmA( LPCSTR  SubsystemName, LPVOID HandleId, LPSTR  ObjectTypeName, LPSTR  ObjectName, PSECURITY_DESCRIPTOR SecurityDescriptor, DWORD DesiredAccess, PGENERIC_MAPPING GenericMapping, BOOL ObjectCreation, LPDWORD GrantedAccess, LPBOOL AccessStatus, LPBOOL pfGenerateOnClose)|Out|FailureIfNullRet
advapi32.dll|BOOL AccessCheckAndAuditAlarmW( LPCWSTR SubsystemName, LPVOID HandleId, LPWSTR ObjectTypeName, LPWSTR ObjectName, PSECURITY_DESCRIPTOR SecurityDescriptor, DWORD DesiredAccess, PGENERIC_MAPPING GenericMapping, BOOL ObjectCreation, LPDWORD GrantedAccess, LPBOOL AccessStatus, LPBOOL pfGenerateOnClose)|Out|FailureIfNullRet
advapi32.dll|BOOL AccessCheckByType( PSECURITY_DESCRIPTOR pSecurityDescriptor, PSID PrincipalSelfSid, HANDLE ClientToken, DWORD DesiredAccess, POBJECT_TYPE_LIST ObjectTypeList, DWORD ObjectTypeListLength, PGENERIC_MAPPING GenericMapping, PPRIVILEGE_SET PrivilegeSet, LPDWORD PrivilegeSetLength, LPDWORD GrantedAccess, LPBOOL AccessStatus)|Out|FailureIfNullRet
advapi32.dll|BOOL AccessCheckByTypeAndAuditAlarmA( LPCSTR  SubsystemName, LPVOID HandleId, LPCSTR  ObjectTypeName, LPCSTR  ObjectName, PSECURITY_DESCRIPTOR pSecurityDescriptor, PSID PrincipalSelfSid, DWORD DesiredAccess, AUDIT_EVENT_TYPE AuditType, DWORD Flags, POBJECT_TYPE_LIST ObjectTypeList, DWORD ObjectTypeListLength, PGENERIC_MAPPING GenericMapping, BOOL ObjectCreation, LPDWORD GrantedAccess, LPBOOL AccessStatus, LPBOOL pfGenerateOnClose)|Out|FailureIfNullRet
advapi32.dll|BOOL AccessCheckByTypeAndAuditAlarmW( LPCWSTR SubsystemName, LPVOID HandleId, LPCWSTR ObjectTypeName, LPCWSTR ObjectName, PSECURITY_DESCRIPTOR pSecurityDescriptor, PSID PrincipalSelfSid, DWORD DesiredAccess, AUDIT_EVENT_TYPE AuditType, DWORD Flags, POBJECT_TYPE_LIST ObjectTypeList, DWORD ObjectTypeListLength, PGENERIC_MAPPING GenericMapping, BOOL ObjectCreation, LPDWORD GrantedAccess, LPBOOL AccessStatus, LPBOOL pfGenerateOnClose)|Out|FailureIfNullRet
advapi32.dll|BOOL AccessCheckByTypeResultList( PSECURITY_DESCRIPTOR pSecurityDescriptor, PSID PrincipalSelfSid, HANDLE ClientToken, DWORD DesiredAccess, POBJECT_TYPE_LIST ObjectTypeList, DWORD ObjectTypeListLength, PGENERIC_MAPPING GenericMapping, PPRIVILEGE_SET PrivilegeSet, LPDWORD PrivilegeSetLength, LPDWORD GrantedAccessList, LPDWORD AccessStatusList)|Out|FailureIfNullRet
advapi32.dll|BOOL AccessCheckByTypeResultListAndAuditAlarmA( LPCSTR  SubsystemName, LPVOID HandleId, LPCSTR  ObjectTypeName, LPCSTR  ObjectName, PSECURITY_DESCRIPTOR pSecurityDescriptor, PSID PrincipalSelfSid, DWORD DesiredAccess, AUDIT_EVENT_TYPE AuditType, DWORD Flags, POBJECT_TYPE_LIST ObjectTypeList, DWORD ObjectTypeListLength, PGENERIC_MAPPING GenericMapping, BOOL ObjectCreation, LPDWORD GrantedAccess, LPDWORD AccessStatusList, LPBOOL pfGenerateOnClose)|Out|FailureIfNullRet
advapi32.dll|BOOL AccessCheckByTypeResultListAndAuditAlarmByHandleA( LPCSTR  SubsystemName, LPVOID HandleId, HANDLE ClientToken, LPCSTR  ObjectTypeName, LPCSTR  ObjectName, PSECURITY_DESCRIPTOR pSecurityDescriptor, PSID PrincipalSelfSid, DWORD DesiredAccess, AUDIT_EVENT_TYPE AuditType, DWORD Flags, POBJECT_TYPE_LIST ObjectTypeList, DWORD ObjectTypeListLength, PGENERIC_MAPPING GenericMapping, BOOL ObjectCreation, LPDWORD GrantedAccess, LPDWORD AccessStatusList, LPBOOL pfGenerateOnClose)|Out|FailureIfNullRet
advapi32.dll|BOOL AccessCheckByTypeResultListAndAuditAlarmByHandleW( LPCWSTR SubsystemName, LPVOID HandleId, HANDLE ClientToken, LPCWSTR ObjectTypeName, LPCWSTR ObjectName, PSECURITY_DESCRIPTOR pSecurityDescriptor, PSID PrincipalSelfSid, DWORD DesiredAccess, AUDIT_EVENT_TYPE AuditType, DWORD Flags, POBJECT_TYPE_LIST ObjectTypeList, DWORD ObjectTypeListLength, PGENERIC_MAPPING GenericMapping, BOOL ObjectCreation, LPDWORD GrantedAccess, LPDWORD AccessStatusList, LPBOOL pfGenerateOnClose)|Out|FailureIfNullRet
advapi32.dll|BOOL AccessCheckByTypeResultListAndAuditAlarmW( LPCWSTR SubsystemName, LPVOID HandleId, LPCWSTR ObjectTypeName, LPCWSTR ObjectName, PSECURITY_DESCRIPTOR pSecurityDescriptor, PSID PrincipalSelfSid, DWORD DesiredAccess, AUDIT_EVENT_TYPE AuditType, DWORD Flags, POBJECT_TYPE_LIST ObjectTypeList, DWORD ObjectTypeListLength, PGENERIC_MAPPING GenericMapping, BOOL ObjectCreation, LPDWORD GrantedAccess, LPDWORD AccessStatusList, LPBOOL pfGenerateOnClose)|Out|FailureIfNullRet
advapi32.dll|BOOL AddAccessAllowedAce( PACL pAcl, DWORD dwAceRevision, DWORD AccessMask, PSID pSid)|Out|FailureIfNullRet
advapi32.dll|BOOL AddAccessAllowedAceEx( PACL pAcl, DWORD dwAceRevision, DWORD AceFlags, DWORD AccessMask, PSID pSid)|Out|FailureIfNullRet
advapi32.dll|BOOL AddAccessAllowedObjectAce( PACL pAcl, DWORD dwAceRevision, DWORD AceFlags, DWORD AccessMask, GUID* ObjectTypeGuid, GUID* InheritedObjectTypeGuid, PSID pSid)|Out|FailureIfNullRet
advapi32.dll|BOOL AddAccessDeniedAce( PACL pAcl, DWORD dwAceRevision, DWORD AccessMask, PSID pSid)|Out|FailureIfNullRet
advapi32.dll|BOOL AddAccessDeniedAceEx( PACL pAcl, DWORD dwAceRevision, DWORD AceFlags, DWORD AccessMask, PSID pSid)|Out|FailureIfNullRet
advapi32.dll|BOOL AddAccessDeniedObjectAce( PACL pAcl, DWORD dwAceRevision, DWORD AceFlags, DWORD AccessMask, GUID* ObjectTypeGuid, GUID* InheritedObjectTypeGuid, PSID pSid)|Out|FailureIfNullRet
advapi32.dll|BOOL AddAce( PACL pAcl, DWORD dwAceRevision, DWORD dwStartingAceIndex, LPVOID pAceList, DWORD nAceListLength)|Out|FailureIfNullRet
advapi32.dll|BOOL AddAuditAccessAce( PACL pAcl, DWORD dwAceRevision, DWORD dwAccessMask, PSID pSid, BOOL bAuditSuccess, BOOL bAuditFailure)|Out|FailureIfNullRet
advapi32.dll|BOOL AddAuditAccessAceEx( PACL pAcl, DWORD dwAceRevision, DWORD AceFlags, DWORD dwAccessMask, PSID pSid, BOOL bAuditSuccess, BOOL bAuditFailure)|Out|FailureIfNullRet
advapi32.dll|BOOL AddAuditAccessObjectAce( PACL pAcl, DWORD dwAceRevision, DWORD AceFlags, DWORD AccessMask, GUID* ObjectTypeGuid, GUID* InheritedObjectTypeGuid, PSID pSid, BOOL bAuditSuccess, BOOL bAuditFailure)|Out|FailureIfNullRet
advapi32.dll|DWORD AddUsersToEncryptedFile( LPCWSTR lpFileName, PENCRYPTION_CERTIFICATE_LIST pUsers)|Out
advapi32.dll|BOOL AdjustTokenGroups( HANDLE TokenHandle, BOOL ResetToDefault, PTOKEN_GROUPS NewState, DWORD BufferLength, PTOKEN_GROUPS PreviousState, PDWORD ReturnLength)|Out|FailureIfNullRet
advapi32.dll|BOOL AdjustTokenPrivileges( HANDLE TokenHandle, BOOL DisableAllPrivileges, PTOKEN_PRIVILEGES NewState, DWORD BufferLength, PTOKEN_PRIVILEGES PreviousState, PDWORD ReturnLength)|Out|FailureIfNullRet
advapi32.dll|BOOL AllocateAndInitializeSid( PSID_IDENTIFIER_AUTHORITY pIdentifierAuthority, BYTE nSubAuthorityCount, DWORD dwSubAuthority0, DWORD dwSubAuthority1, DWORD dwSubAuthority2, DWORD dwSubAuthority3, DWORD dwSubAuthority4, DWORD dwSubAuthority5, DWORD dwSubAuthority6, DWORD dwSubAuthority7, PSID* pSid)|Out|FailureIfNullRet
advapi32.dll|BOOL AllocateLocallyUniqueId( PLUID Luid)|Out|FailureIfNullRet
advapi32.dll|BOOL AreAllAccessesGranted( DWORD GrantedAccess, DWORD DesiredAccess)|FailureIfNullRet
advapi32.dll|BOOL AreAnyAccessesGranted( DWORD GrantedAccess, DWORD DesiredAccess)|FailureIfNullRet
advapi32.dll|BOOL BackupEventLogA( HANDLE hEventLog, LPCSTR  lpBackupFileName)|FailureIfNullRet
advapi32.dll|BOOL BackupEventLogW( HANDLE hEventLog, LPCWSTR lpBackupFileName)|FailureIfNullRet
advapi32.dll|VOID BuildExplicitAccessWithNameA( PEXPLICIT_ACCESS pExplicitAccess, LPSTR  pTrusteeName, DWORD AccessPermissions, ACCESS_MODE AccessMode, DWORD Inheritance)|Out
!advapi32.dll|VOID BuildExplicitAccessWithNameW( PEXPLICIT_ACCESS pExplicitAccess, LPWSTR pTrusteeName, DWORD AccessPermissions, ACCESS_MODE AccessMode, DWORD Inheritance)|Out
advapi32.dll|BuildImpersonateExplicitAccessWithNameA(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
!advapi32.dll| BuildImpersonateExplicitAccessWithNameW(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|BuildImpersonateTrusteeA(UNKNOWN,UNKNOWN)
!advapi32.dll| BuildImpersonateTrusteeW(UNKNOWN,UNKNOWN)
advapi32.dll|DWORD BuildSecurityDescriptorA( PTRUSTEE pOwner, PTRUSTEE pGroup, ULONG cCountOfAccessEntries, PEXPLICIT_ACCESS pListOfAccessEntries, ULONG cCountOfAuditEntries, PEXPLICIT_ACCESS pListOfAuditEntries, PSECURITY_DESCRIPTOR pOldSD, PULONG pSizeNewSD, PSECURITY_DESCRIPTOR* pNewSD)|Out
advapi32.dll|DWORD BuildSecurityDescriptorW( PTRUSTEE pOwner, PTRUSTEE pGroup, ULONG cCountOfAccessEntries, PEXPLICIT_ACCESS pListOfAccessEntries, ULONG cCountOfAuditEntries, PEXPLICIT_ACCESS pListOfAuditEntries, PSECURITY_DESCRIPTOR pOldSD, PULONG pSizeNewSD, PSECURITY_DESCRIPTOR* pNewSD)|Out
advapi32.dll|void BuildTrusteeWithNameA( PTRUSTEE pTrustee, LPSTR  pName)|Out
!advapi32.dll|void BuildTrusteeWithNameW( PTRUSTEE pTrustee, LPWSTR pName)|Out
advapi32.dll|void BuildTrusteeWithObjectsAndNameA( PTRUSTEE pTrustee, POBJECTS_AND_NAME pObjName, SE_OBJECT_TYPE ObjectType, LPSTR ObjectTypeName, LPSTR InheritedObjectTypeName, LPSTR Name)|Out
!advapi32.dll|void BuildTrusteeWithObjectsAndNameW( PTRUSTEE pTrustee, POBJECTS_AND_NAME pObjName, SE_OBJECT_TYPE ObjectType, LPSTR ObjectTypeName, LPSTR InheritedObjectTypeName, LPSTR Name)|Out
advapi32.dll|void BuildTrusteeWithObjectsAndSidA( PTRUSTEE pTrustee, POBJECTS_AND_SID pObjSid, GUID* pObjectGuid, GUID* pInheritedObjectGuid, PSID pSid)|Out
!advapi32.dll|void BuildTrusteeWithObjectsAndSidW( PTRUSTEE pTrustee, POBJECTS_AND_SID pObjSid, GUID* pObjectGuid, GUID* pInheritedObjectGuid, PSID pSid)|Out
advapi32.dll|VOID BuildTrusteeWithSidA( PTRUSTEE pTrustee, PSID pSid)|Out
!advapi32.dll|VOID BuildTrusteeWithSidW( PTRUSTEE pTrustee, PSID pSid)|Out
advapi32.dll|CancelOverlappedAccess(UNKNOWN)
advapi32.dll|ChangeServiceConfig2A(UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|ChangeServiceConfig2W(UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|BOOL ChangeServiceConfigA( SC_HANDLE hService, DWORD dwServiceType, DWORD dwStartType, DWORD dwErrorControl, LPCSTR  lpBinaryPathName, LPCSTR  lpLoadOrderGroup, LPDWORD lpdwTagId, LPCSTR  lpDependencies, LPCSTR  lpServiceStartName, LPCSTR  lpPassword, LPCSTR  lpDisplayName)|Out|FailureIfNullRet
advapi32.dll|BOOL ChangeServiceConfigW( SC_HANDLE hService, DWORD dwServiceType, DWORD dwStartType, DWORD dwErrorControl, LPCWSTR lpBinaryPathName, LPCWSTR lpLoadOrderGroup, LPDWORD lpdwTagId, LPCWSTR lpDependencies, LPCWSTR lpServiceStartName, LPCWSTR lpPassword, LPCWSTR lpDisplayName)|Out|FailureIfNullRet
advapi32.dll|BOOL CheckTokenMembership( HANDLE TokenHandle, PSID SidToCheck, PBOOL IsMember)|Out|FailureIfNullRet
advapi32.dll|BOOL ClearEventLogA( HANDLE hEventLog, LPCSTR  lpBackupFileName)|FailureIfNullRet
advapi32.dll|BOOL ClearEventLogW( HANDLE hEventLog, LPCWSTR lpBackupFileName)|FailureIfNullRet
advapi32.dll|void CloseEncryptedFileRaw( PVOID pvContext)|Out
advapi32.dll|BOOL CloseEventLog( HANDLE hEventLog)|FailureIfNullRet
advapi32.dll|BOOL CloseServiceHandle( SC_HANDLE hSCObject)|FailureIfNullRet
advapi32.dll|ULONG CloseTrace( TRACEHANDLE TraceHandle)
advapi32.dll|CommandLineFromMsiDescriptor(UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|BOOL ControlService( SC_HANDLE hService, DWORD dwControl, LPSERVICE_STATUS lpServiceStatus)|Out|FailureIfNullRet
advapi32.dll|ULONG ControlTraceA( TRACEHANDLE SessionHandle, LPCSTR  SessionName, PEVENT_TRACE_PROPERTIES Properties, ULONG ControlCode)|Out
advapi32.dll|ULONG ControlTraceW( TRACEHANDLE SessionHandle, LPCWSTR SessionName, PEVENT_TRACE_PROPERTIES Properties, ULONG ControlCode)|Out
advapi32.dll|ConvertAccessToSecurityDescriptorA(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll| ConvertAccessToSecurityDescriptorW(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|ConvertSDToStringSDRootDomainA(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll| ConvertSDToStringSDRootDomainW(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|ConvertSecurityDescriptorToAccessA(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
!advapi32.dll|ConvertSecurityDescriptorToAccessNamedA()
advapi32.dll|ConvertSecurityDescriptorToAccessW(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
!advapi32.dll| ConvertSecurityDescriptorToAccessNamedW()
advapi32.dll|BOOL ConvertSecurityDescriptorToStringSecurityDescriptorA( PSECURITY_DESCRIPTOR SecurityDescriptor, DWORD RequestedStringSDRevision, SECURITY_INFORMATION SecurityInformation, LPTSTR* StringSecurityDescriptor, PULONG StringSecurityDescriptorLen)|Out|FailureIfNullRet
advapi32.dll|BOOL ConvertSecurityDescriptorToStringSecurityDescriptorW( PSECURITY_DESCRIPTOR SecurityDescriptor, DWORD RequestedStringSDRevision, SECURITY_INFORMATION SecurityInformation, LPTSTR* StringSecurityDescriptor, PULONG StringSecurityDescriptorLen)|Out|FailureIfNullRet
advapi32.dll|BOOL ConvertSidToStringSidA( PSID Sid, LPTSTR* StringSid)|Out|FailureIfNullRet
advapi32.dll|BOOL ConvertSidToStringSidW( PSID Sid, LPTSTR* StringSid)|Out|FailureIfNullRet
advapi32.dll|BOOL ConvertStringSDToSDDomainA( PSID DomainSid, PSID RootDomainSid, LPCSTR  StringSecurityDescriptor, DWORD StringSDRevision, PSECURITY_DESCRIPTOR* SecurityDescriptor, PULONG SecurityDescriptorSize)|Out|FailureIfNullRet
advapi32.dll|BOOL ConvertStringSDToSDDomainW( PSID DomainSid, PSID RootDomainSid, LPCWSTR StringSecurityDescriptor, DWORD StringSDRevision, PSECURITY_DESCRIPTOR* SecurityDescriptor, PULONG SecurityDescriptorSize)|Out|FailureIfNullRet
advapi32.dll|ConvertStringSDToSDRootDomainA(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll| ConvertStringSDToSDRootDomainW(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|BOOL ConvertStringSecurityDescriptorToSecurityDescriptorA( LPCSTR  StringSecurityDescriptor, DWORD StringSDRevision, PSECURITY_DESCRIPTOR* SecurityDescriptor, PULONG SecurityDescriptorSize)|Out|FailureIfNullRet
advapi32.dll|BOOL ConvertStringSecurityDescriptorToSecurityDescriptorW( LPCWSTR StringSecurityDescriptor, DWORD StringSDRevision, PSECURITY_DESCRIPTOR* SecurityDescriptor, PULONG SecurityDescriptorSize)|Out|FailureIfNullRet
advapi32.dll|BOOL ConvertStringSidToSidA( LPCSTR  StringSid, PSID* Sid)|Out|FailureIfNullRet
advapi32.dll|BOOL ConvertStringSidToSidW( LPCWSTR StringSid, PSID* Sid)|Out|FailureIfNullRet
advapi32.dll|BOOL ConvertToAutoInheritPrivateObjectSecurity( PSECURITY_DESCRIPTOR ParentDescriptor, PSECURITY_DESCRIPTOR CurrentSecurityDescriptor, PSECURITY_DESCRIPTOR* NewSecurityDescriptor, GUID* ObjectType, BOOLEAN IsDirectoryObject, PGENERIC_MAPPING GenericMapping)|Out|FailureIfNullRet
advapi32.dll|BOOL CopySid( DWORD nDestinationSidLength, PSID pDestinationSid, PSID pSourceSid)|Out|FailureIfNullRet
advapi32.dll|BOOL CreatePrivateObjectSecurity( PSECURITY_DESCRIPTOR ParentDescriptor, PSECURITY_DESCRIPTOR CreatorDescriptor, PSECURITY_DESCRIPTOR* NewDescriptor, BOOL IsDirectoryObject, HANDLE Token, PGENERIC_MAPPING GenericMapping)|Out|FailureIfNullRet
advapi32.dll|BOOL CreatePrivateObjectSecurityEx( PSECURITY_DESCRIPTOR ParentDescriptor, PSECURITY_DESCRIPTOR CreatorDescriptor, PSECURITY_DESCRIPTOR* NewDescriptor, GUID* ObjectType, BOOL IsContainerObject, ULONG AutoInheritFlags, HANDLE Token, PGENERIC_MAPPING GenericMapping)|Out|FailureIfNullRet
advapi32.dll|BOOL CreatePrivateObjectSecurityWithMultipleInheritance( PSECURITY_DESCRIPTOR ParentDescriptor, PSECURITY_DESCRIPTOR CreatorDescriptor, PSECURITY_DESCRIPTOR* NewDescriptor, GUID** ObjectTypes, ULONG GuidCount, BOOL IsContainerObject, ULONG AutoInheritFlags, HANDLE Token, PGENERIC_MAPPING GenericMapping)|Out|FailureIfNullRet
advapi32.dll|BOOL CreateProcessAsUserA( HANDLE hToken, LPCSTR  lpApplicationName, LPSTR  lpCommandLine, LPSECURITY_ATTRIBUTES lpProcessAttributes, LPSECURITY_ATTRIBUTES lpThreadAttributes, BOOL bInheritHandles, DWORD dwCreationFlags, LPVOID lpEnvironment, LPCSTR  lpCurrentDirectory, LPSTARTUPINFO lpStartupInfo, LPPROCESS_INFORMATION lpProcessInformation)|Out|FailureIfNullRet
advapi32.dll|BOOL CreateProcessAsUserW( HANDLE hToken, LPCWSTR lpApplicationName, LPWSTR lpCommandLine, LPSECURITY_ATTRIBUTES lpProcessAttributes, LPSECURITY_ATTRIBUTES lpThreadAttributes, BOOL bInheritHandles, DWORD dwCreationFlags, LPVOID lpEnvironment, LPCWSTR lpCurrentDirectory, LPSTARTUPINFO lpStartupInfo, LPPROCESS_INFORMATION lpProcessInformation)|Out|FailureIfNullRet
advapi32.dll|CreateProcessWithLogonW(LPCWSTR UserName,LPCWSTR Domain,LPCWSTR Password,LONG LogonFlags,LPCWSTR AppName,LPCWSTR CmdLine,LONG CreationFlags,LONG Environnement,LPCWSTR CurrentDir,PSTARTUP_INFO,PPROCESS_INFORMATION)
advapi32.dll|BOOL CreateRestrictedToken( HANDLE ExistingTokenHandle, DWORD Flags, DWORD DisableSidCount, PSID_AND_ATTRIBUTES SidsToDisable, DWORD DeletePrivilegeCount, PLUID_AND_ATTRIBUTES PrivilegesToDelete, DWORD RestrictedSidCount, PSID_AND_ATTRIBUTES SidsToRestrict, PHANDLE NewTokenHandle)|Out|FailureIfNullRet
advapi32.dll|SC_HANDLE CreateServiceA( SC_HANDLE hSCManager, LPCSTR  lpServiceName, LPCSTR  lpDisplayName, DWORD dwDesiredAccess, DWORD dwServiceType, DWORD dwStartType, DWORD dwErrorControl, LPCSTR  lpBinaryPathName, LPCSTR  lpLoadOrderGroup, LPDWORD lpdwTagId, LPCSTR  lpDependencies, LPCSTR  lpServiceStartName, LPCSTR  lpPassword)|Out
advapi32.dll|SC_HANDLE CreateServiceW( SC_HANDLE hSCManager, LPCWSTR lpServiceName, LPCWSTR lpDisplayName, DWORD dwDesiredAccess, DWORD dwServiceType, DWORD dwStartType, DWORD dwErrorControl, LPCWSTR lpBinaryPathName, LPCWSTR lpLoadOrderGroup, LPDWORD lpdwTagId, LPCWSTR lpDependencies, LPCWSTR lpServiceStartName, LPCWSTR lpPassword)|Out
advapi32.dll|ULONG CreateTraceInstanceId( HANDLE RegHandle, PEVENT_INSTANCE_INFO pInstInfo)|Out
advapi32.dll|BOOL CreateWellKnownSid( WELL_KNOWN_SID_TYPE WellKnownSidType, PSID DomainSid, PSID pSid, DWORD* cbSid)|Out|FailureIfNullRet
advapi32.dll|BOOL CredDeleteA( LPCSTR  TargetName, DWORD Type, DWORD Flags)|FailureIfNullRet
advapi32.dll|BOOL CredDeleteW( LPCWSTR TargetName, DWORD Type, DWORD Flags)|FailureIfNullRet
advapi32.dll|BOOL CredEnumerateA( LPCSTR  Filter, DWORD Flags, DWORD* Count, PCREDENTIAL** Credentials)|Out|FailureIfNullRet
advapi32.dll|BOOL CredEnumerateW( LPCWSTR Filter, DWORD Flags, DWORD* Count, PCREDENTIAL** Credentials)|Out|FailureIfNullRet
advapi32.dll|VOID CredFree( PVOID Buffer)|Out
advapi32.dll|BOOL CredGetSessionTypes( DWORD MaximumPersistCount, LPDWORD MaximumPersist)|Out|FailureIfNullRet
advapi32.dll|BOOL CredGetTargetInfoA( LPCSTR  TargetName, DWORD Flags, PCREDENTIAL_TARGET_INFORMATION* TargetInfo)|Out|FailureIfNullRet
advapi32.dll|BOOL CredGetTargetInfoW( LPCWSTR TargetName, DWORD Flags, PCREDENTIAL_TARGET_INFORMATION* TargetInfo)|Out|FailureIfNullRet
advapi32.dll|BOOL CredIsMarshaledCredentialA( LPCSTR  MarshaledCredential)|FailureIfNullRet
advapi32.dll|BOOL CredIsMarshaledCredentialW( LPCWSTR MarshaledCredential)|FailureIfNullRet
advapi32.dll|BOOL CredMarshalCredentialA( CRED_MARSHAL_TYPE CredType, PVOID Credential, LPTSTR* MarshaledCredential)|Out|FailureIfNullRet
advapi32.dll|BOOL CredMarshalCredentialW( CRED_MARSHAL_TYPE CredType, PVOID Credential, LPTSTR* MarshaledCredential)|Out|FailureIfNullRet
advapi32.dll|CredProfileLoaded()
advapi32.dll|BOOL CredReadA( LPCSTR  TargetName, DWORD Type, DWORD Flags, PCREDENTIAL* Credential)|Out|FailureIfNullRet
advapi32.dll|BOOL CredReadDomainCredentialsA( PCREDENTIAL_TARGET_INFORMATION TargetInfo, DWORD Flags, DWORD* Count, PCREDENTIAL** Credentials)|Out|FailureIfNullRet
advapi32.dll|BOOL CredReadDomainCredentialsW( PCREDENTIAL_TARGET_INFORMATION TargetInfo, DWORD Flags, DWORD* Count, PCREDENTIAL** Credentials)|Out|FailureIfNullRet
advapi32.dll|BOOL CredReadW( LPCWSTR TargetName, DWORD Type, DWORD Flags, PCREDENTIAL* Credential)|Out|FailureIfNullRet
advapi32.dll|BOOL CredRenameA( LPCSTR  OldTargetName, LPCSTR  NewTargetName, DWORD Type, DWORD Flags)|FailureIfNullRet
advapi32.dll|BOOL CredRenameW( LPCWSTR OldTargetName, LPCWSTR NewTargetName, DWORD Type, DWORD Flags)|FailureIfNullRet
advapi32.dll|BOOL CredUnmarshalCredentialA( LPCSTR  MarshaledCredential, PCRED_MARSHAL_TYPE CredType, PVOID* Credential)|Out|FailureIfNullRet
advapi32.dll|BOOL CredUnmarshalCredentialW( LPCWSTR MarshaledCredential, PCRED_MARSHAL_TYPE CredType, PVOID* Credential)|Out|FailureIfNullRet
advapi32.dll|BOOL CredWriteA( PCREDENTIAL Credential, DWORD Flags)|FailureIfNullRet
advapi32.dll|BOOL CredWriteDomainCredentialsA( PCREDENTIAL_TARGET_INFORMATION TargetInfo, PCREDENTIAL Credential, DWORD Flags)|FailureIfNullRet
advapi32.dll|BOOL CredWriteDomainCredentialsW( PCREDENTIAL_TARGET_INFORMATION TargetInfo, PCREDENTIAL Credential, DWORD Flags)|FailureIfNullRet
advapi32.dll|BOOL CredWriteW( PCREDENTIAL Credential, DWORD Flags)|FailureIfNullRet
advapi32.dll|CredpConvertCredential(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|CredpDecodeCredential(UNKNOWN)
advapi32.dll|CredpEncodeCredential(UNKNOWN)
advapi32.dll|BOOL CryptAcquireContextA( HCRYPTPROV* phProv, LPCSTR  pszContainer, LPCSTR  pszProvider, DWORD dwProvType, DWORD dwFlags)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptAcquireContextW( HCRYPTPROV* phProv, LPCWSTR pszContainer, LPCWSTR pszProvider, DWORD dwProvType, DWORD dwFlags)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptContextAddRef( HCRYPTPROV hProv, DWORD* pdwReserved, DWORD dwFlags)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptCreateHash( HCRYPTPROV hProv, ALG_ID Algid, HCRYPTKEY hKey, DWORD dwFlags, HCRYPTHASH* phHash)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptDecrypt( HCRYPTKEY hKey, HCRYPTHASH hHash, BOOL Final, DWORD dwFlags, BYTE* pbData, DWORD* pdwDataLen)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptDeriveKey( HCRYPTPROV hProv, ALG_ID Algid, HCRYPTHASH hBaseData, DWORD dwFlags, HCRYPTKEY* phKey)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptDestroyHash( HCRYPTHASH hHash)|FailureIfNullRet
advapi32.dll|BOOL CryptDestroyKey( HCRYPTKEY hKey)|FailureIfNullRet
advapi32.dll|BOOL CryptDuplicateHash( HCRYPTHASH hHash, DWORD* pdwReserved, DWORD dwFlags, HCRYPTHASH* phHash)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptDuplicateKey( HCRYPTKEY hKey, DWORD* pdwReserved, DWORD dwFlags, HCRYPTKEY* phKey)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptEncrypt( HCRYPTKEY hKey, HCRYPTHASH hHash, BOOL Final, DWORD dwFlags, BYTE* pbData, DWORD* pdwDataLen, DWORD dwBufLen)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptEnumProviderTypesA( DWORD dwIndex, DWORD* pdwReserved, DWORD dwFlags, DWORD* pdwProvType, LPSTR  pszTypeName, DWORD* pcbTypeName)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptEnumProviderTypesW( DWORD dwIndex, DWORD* pdwReserved, DWORD dwFlags, DWORD* pdwProvType, LPWSTR pszTypeName, DWORD* pcbTypeName)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptEnumProvidersA( DWORD dwIndex, DWORD* pdwReserved, DWORD dwFlags, DWORD* pdwProvType, LPSTR  pszProvName, DWORD* pcbProvName)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptEnumProvidersW( DWORD dwIndex, DWORD* pdwReserved, DWORD dwFlags, DWORD* pdwProvType, LPWSTR pszProvName, DWORD* pcbProvName)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptExportKey( HCRYPTKEY hKey, HCRYPTKEY hExpKey, DWORD dwBlobType, DWORD dwFlags, BYTE* pbData, DWORD* pdwDataLen)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptGenKey( HCRYPTPROV hProv, ALG_ID Algid, DWORD dwFlags, HCRYPTKEY* phKey)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptGenRandom( HCRYPTPROV hProv, DWORD dwLen, BYTE* pbBuffer)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptGetDefaultProviderA( DWORD dwProvType, DWORD* pdwReserved, DWORD dwFlags, LPSTR  pszProvName, DWORD* pcbProvName)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptGetDefaultProviderW( DWORD dwProvType, DWORD* pdwReserved, DWORD dwFlags, LPWSTR pszProvName, DWORD* pcbProvName)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptGetHashParam( HCRYPTHASH hHash, DWORD dwParam, BYTE* pbData, DWORD* pdwDataLen, DWORD dwFlags)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptGetKeyParam( HCRYPTKEY hKey, DWORD dwParam, BYTE* pbData, DWORD* pdwDataLen, DWORD dwFlags)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptGetProvParam( HCRYPTPROV hProv, DWORD dwParam, BYTE* pbData, DWORD* pdwDataLen, DWORD dwFlags)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptGetUserKey( HCRYPTPROV hProv, DWORD dwKeySpec, HCRYPTKEY* phUserKey)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptHashData( HCRYPTHASH hHash, BYTE* pbData, DWORD dwDataLen, DWORD dwFlags)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptHashSessionKey( HCRYPTHASH hHash, HCRYPTKEY hKey, DWORD dwFlags)|FailureIfNullRet
advapi32.dll|BOOL CryptImportKey( HCRYPTPROV hProv, BYTE* pbData, DWORD dwDataLen, HCRYPTKEY hPubKey, DWORD dwFlags, HCRYPTKEY* phKey)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptReleaseContext( HCRYPTPROV hProv, DWORD dwFlags)|FailureIfNullRet
advapi32.dll|BOOL CryptSetHashParam( HCRYPTHASH hHash, DWORD dwParam, const BYTE* pbData, DWORD dwFlags)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptSetKeyParam( HCRYPTKEY hKey, DWORD dwParam, const BYTE* pbData, DWORD dwFlags)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptSetProvParam( HCRYPTPROV hProv, DWORD dwParam, const BYTE* pbData, DWORD dwFlags)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptSetProviderA( LPCSTR  pszProvName, DWORD dwProvType)|FailureIfNullRet
advapi32.dll|BOOL CryptSetProviderExA( LPCSTR  pszProvName, DWORD dwProvType, DWORD* pdwReserved, DWORD dwFlags)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptSetProviderExW( LPCWSTR pszProvName, DWORD dwProvType, DWORD* pdwReserved, DWORD dwFlags)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptSetProviderW( LPCWSTR pszProvName, DWORD dwProvType)|FailureIfNullRet
advapi32.dll|BOOL CryptSignHashA( HCRYPTHASH hHash, DWORD dwKeySpec, LPCSTR  sDescription, DWORD dwFlags, BYTE* pbSignature, DWORD* pdwSigLen)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptSignHashW( HCRYPTHASH hHash, DWORD dwKeySpec, LPCWSTR sDescription, DWORD dwFlags, BYTE* pbSignature, DWORD* pdwSigLen)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptVerifySignatureA( HCRYPTHASH hHash, BYTE* pbSignature, DWORD dwSigLen, HCRYPTKEY hPubKey, LPCSTR  sDescription, DWORD dwFlags)|Out|FailureIfNullRet
advapi32.dll|BOOL CryptVerifySignatureW( HCRYPTHASH hHash, BYTE* pbSignature, DWORD dwSigLen, HCRYPTKEY hPubKey, LPCWSTR sDescription, DWORD dwFlags)|Out|FailureIfNullRet
advapi32.dll|BOOL DecryptFileA( LPCSTR  lpFileName, DWORD dwReserved)|FailureIfNullRet
advapi32.dll|BOOL DecryptFileW( LPCWSTR lpFileName, DWORD dwReserved)|FailureIfNullRet
advapi32.dll|BOOL DeleteAce( PACL pAcl, DWORD dwAceIndex)|Out|FailureIfNullRet
advapi32.dll|BOOL DeleteService( SC_HANDLE hService)|FailureIfNullRet
advapi32.dll|BOOL DeregisterEventSource( HANDLE hEventLog)|FailureIfNullRet
advapi32.dll|BOOL DestroyPrivateObjectSecurity( PSECURITY_DESCRIPTOR* ObjectDescriptor)|Out|FailureIfNullRet
advapi32.dll|DWORD DuplicateEncryptionInfoFile( LPCSTR  SrcFileName, LPCSTR  DstFileName, DWORD dwCreationDistribution, DWORD dwAttributes, const LPSECURITY_ATTRIBUTES lpSecurityAttributes)|Out
advapi32.dll|BOOL DuplicateToken( HANDLE ExistingTokenHandle, SECURITY_IMPERSONATION_LEVEL ImpersonationLevel, PHANDLE DuplicateTokenHandle)|Out
advapi32.dll|BOOL DuplicateTokenEx( HANDLE hExistingToken, DWORD dwDesiredAccess, LPSECURITY_ATTRIBUTES lpTokenAttributes, SECURITY_IMPERSONATION_LEVEL ImpersonationLevel, TOKEN_TYPE TokenType, PHANDLE phNewToken)|Out
advapi32.dll|ElfBackupEventLogFileA(UNKNOWN,UNKNOWN)
advapi32.dll| ElfBackupEventLogFileW(UNKNOWN,UNKNOWN)
advapi32.dll|ElfChangeNotify(UNKNOWN,UNKNOWN)
advapi32.dll|ElfClearEventLogFileA(UNKNOWN,UNKNOWN)
advapi32.dll| ElfClearEventLogFileW(UNKNOWN,UNKNOWN)
advapi32.dll|ElfCloseEventLog(UNKNOWN)
advapi32.dll|ElfDeregisterEventSource(UNKNOWN)
advapi32.dll|ElfNumberOfRecords(UNKNOWN,UNKNOWN)
advapi32.dll|ElfOldestRecord(UNKNOWN,UNKNOWN)
advapi32.dll|ElfOpenBackupEventLogA(UNKNOWN,UNKNOWN,UNKNWON)
advapi32.dll| ElfOpenBackupEventLogW(UNKNOWN,UNKNOWN,UNKNWON)
advapi32.dll|ElfOpenEventLogA(UNKNOWN,UNKNOWN,UNKNWON)
advapi32.dll| ElfOpenEventLogW(UNKNOWN,UNKNOWN,UNKNWON)
advapi32.dll|ElfReadEventLogA(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll| ElfReadEventLogW(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|ElfRegisterEventSourceA(UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll| ElfRegisterEventSourceW(UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|ElfReportEventA(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll| ElfReportEventW(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|ULONG EnableTrace( ULONG Enable, ULONG EnableFlag, ULONG EnableLevel, LPCGUID ControlGuid, TRACEHANDLE SessionHandle)
advapi32.dll|BOOL EncryptFileA( LPCSTR  lpFileName)|FailureIfNullRet
advapi32.dll|BOOL EncryptFileW( LPCWSTR lpFileName)|FailureIfNullRet
advapi32.dll|EncryptedFileKeyInfo(UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|BOOL EncryptionDisable( LPCWSTR DirPath, BOOL Disable)|FailureIfNullRet
advapi32.dll|BOOL EnumDependentServicesA( SC_HANDLE hService, DWORD dwServiceState, LPENUM_SERVICE_STATUS lpServices, DWORD cbBufSize, LPDWORD pcbBytesNeeded, LPDWORD lpServicesReturned)|Out|FailureIfNullRet
advapi32.dll|BOOL EnumDependentServicesW( SC_HANDLE hService, DWORD dwServiceState, LPENUM_SERVICE_STATUS lpServices, DWORD cbBufSize, LPDWORD pcbBytesNeeded, LPDWORD lpServicesReturned)|Out|FailureIfNullRet
advapi32.dll|EnumServiceGroupW(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)|FailureIfNullRet
advapi32.dll|BOOL EnumServicesStatusA( SC_HANDLE hSCManager, DWORD dwServiceType, DWORD dwServiceState, LPENUM_SERVICE_STATUS lpServices, DWORD cbBufSize, LPDWORD pcbBytesNeeded, LPDWORD lpServicesReturned, LPDWORD lpResumeHandle)|Out|FailureIfNullRet
advapi32.dll|BOOL EnumServicesStatusExA( SC_HANDLE hSCManager, SC_ENUM_TYPE InfoLevel, DWORD dwServiceType, DWORD dwServiceState, LPBYTE lpServices, DWORD cbBufSize, LPDWORD pcbBytesNeeded, LPDWORD lpServicesReturned, LPDWORD lpResumeHandle, LPCSTR  pszGroupName)|Out|FailureIfNullRet
advapi32.dll|BOOL EnumServicesStatusExW( SC_HANDLE hSCManager, SC_ENUM_TYPE InfoLevel, DWORD dwServiceType, DWORD dwServiceState, LPBYTE lpServices, DWORD cbBufSize, LPDWORD pcbBytesNeeded, LPDWORD lpServicesReturned, LPDWORD lpResumeHandle, LPCWSTR pszGroupName)|Out|FailureIfNullRet
advapi32.dll|BOOL EnumServicesStatusW( SC_HANDLE hSCManager, DWORD dwServiceType, DWORD dwServiceState, LPENUM_SERVICE_STATUS lpServices, DWORD cbBufSize, LPDWORD pcbBytesNeeded, LPDWORD lpServicesReturned, LPDWORD lpResumeHandle)|Out|FailureIfNullRet
advapi32.dll|ULONG EnumerateTraceGuids( PTRACE_GUID_PROPERTIES* GuidPropertiesArray, ULONG PropertyArrayCount, PULONG GuidCount)|Out
advapi32.dll|BOOL EqualDomainSid( PSID pSid1, PSID pSid2, BOOL* pfEqual)|Out|FailureIfNullRet
advapi32.dll|BOOL EqualPrefixSid( PSID pSid1, PSID pSid2)|Out|FailureIfNullRet
advapi32.dll|BOOL EqualSid( PSID pSid1, PSID pSid2)|Out|FailureIfNullRet
advapi32.dll|BOOL FileEncryptionStatusA( LPCSTR  lpFileName, LPDWORD lpStatus)|Out|FailureIfNullRet
advapi32.dll|BOOL FileEncryptionStatusW( LPCWSTR lpFileName, LPDWORD lpStatus)|Out|FailureIfNullRet
advapi32.dll|BOOL FindFirstFreeAce( PACL pAcl, LPVOID* pAce)|Out|FailureIfNullRet
advapi32.dll|ULONG FlushTraceA( TRACEHANDLE SessionHandle, LPCSTR  SessionName, PEVENT_TRACE_PROPERTIES Properties)|Out
advapi32.dll|ULONG FlushTraceW( TRACEHANDLE SessionHandle, LPCWSTR SessionName, PEVENT_TRACE_PROPERTIES Properties)|Out
advapi32.dll|FreeEncryptedFileKeyInfo(UNKNOWN)
advapi32.dll|VOID FreeEncryptionCertificateHashList( PENCRYPTION_CERTIFICATE_HASH_LIST pHashes)|Out
advapi32.dll|DWORD FreeInheritedFromArray( PINHERITED_FROM pInheritArray, USHORT AceCnt, PFN_OBJECT_MGR_FUNCTS pfnArray)|Out
advapi32.dll|PVOID FreeSid( PSID pSid)|Out
advapi32.dll|GetAccessPermissionsForObjectA(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|GetAccessPermissionsForObjectW(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|BOOL GetAce( PACL pAcl, DWORD dwAceIndex, LPVOID* pAce)|Out|FailureIfNullRet
advapi32.dll|BOOL GetAclInformation( PACL pAcl, LPVOID pAclInformation, DWORD nAclInformationLength, ACL_INFORMATION_CLASS dwAclInformationClass)|Out|FailureIfNullRet
advapi32.dll|DWORD GetAuditedPermissionsFromAclA( PACL pacl, PTRUSTEE pTrustee, PACCESS_MASK pSuccessfulAuditedRights, PACCESS_MASK pFailedAuditRights)|Out
advapi32.dll|DWORD GetAuditedPermissionsFromAclW( PACL pacl, PTRUSTEE pTrustee, PACCESS_MASK pSuccessfulAuditedRights, PACCESS_MASK pFailedAuditRights)|Out
advapi32.dll|BOOL GetCurrentHwProfileA( LPHW_PROFILE_INFO lpHwProfileInfo)|Out|FailureIfNullRet
advapi32.dll|BOOL GetCurrentHwProfileW( LPHW_PROFILE_INFO lpHwProfileInfo)|Out|FailureIfNullRet
advapi32.dll|DWORD GetEffectiveRightsFromAclA( PACL pacl, PTRUSTEE pTrustee, PACCESS_MASK pAccessRights)|Out
advapi32.dll|DWORD GetEffectiveRightsFromAclW( PACL pacl, PTRUSTEE pTrustee, PACCESS_MASK pAccessRights)|Out
advapi32.dll|BOOL GetEventLogInformation( HANDLE hEventLog, DWORD dwInfoLevel, LPVOID lpBuffer, DWORD cbBufSize, LPDWORD pcbBytesNeeded)|Out|FailureIfNullRet
;advapi32.dll|DWORD GetExplicitEntriesFromAclA( PACL pacl, PULONG pcCountOfExplicitEntries, PEXPLICIT_ACCESS* pListOfExplicitEntries)|Out
advapi32.dll|DWORD GetExplicitEntriesFromAclW( PACL pacl, PULONG pcCountOfExplicitEntries, PEXPLICIT_ACCESS* pListOfExplicitEntries)|Out
advapi32.dll|BOOL GetFileSecurityA( LPCSTR  lpFileName, SECURITY_INFORMATION RequestedInformation, PSECURITY_DESCRIPTOR pSecurityDescriptor, DWORD nLength, LPDWORD lpnLengthNeeded)|Out|FailureIfNullRet
advapi32.dll|BOOL GetFileSecurityW( LPCWSTR lpFileName, SECURITY_INFORMATION RequestedInformation, PSECURITY_DESCRIPTOR pSecurityDescriptor, DWORD nLength, LPDWORD lpnLengthNeeded)|Out|FailureIfNullRet
advapi32.dll|DWORD GetInheritanceSourceA( LPSTR  pObjectName, SE_OBJECT_TYPE ObjectType, SECURITY_INFORMATION SecurityInfo, BOOL Container, GUID** pObjectClassGuids, DWORD GuidCount, PACL pAcl, PFN_OBJECT_MGR_FUNCTS pfnArray, PGENERIC_MAPPING pGenericMapping, PINHERITED_FROM pInheritArray)|Out
advapi32.dll|DWORD GetInheritanceSourceW( LPWSTR pObjectName, SE_OBJECT_TYPE ObjectType, SECURITY_INFORMATION SecurityInfo, BOOL Container, GUID** pObjectClassGuids, DWORD GuidCount, PACL pAcl, PFN_OBJECT_MGR_FUNCTS pfnArray, PGENERIC_MAPPING pGenericMapping, PINHERITED_FROM pInheritArray)|Out
advapi32.dll|BOOL GetKernelObjectSecurity( HANDLE Handle, SECURITY_INFORMATION RequestedInformation, PSECURITY_DESCRIPTOR pSecurityDescriptor:PointedDataSize=Arg4, DWORD nLength, LPDWORD lpnLengthNeeded)|Out
advapi32.dll|DWORD GetLengthSid( PSID pSid)|Out
advapi32.dll|GetLocalManagedApplicationData(UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|DWORD GetLocalManagedApplications( BOOL bUserApps, LPDWORD pdwApps, PLOCALMANAGEDAPPLICATION* prgLocalApps)|Out
advapi32.dll|DWORD GetManagedApplicationCategories( DWORD dwReserved, APPCATEGORYINFOLIST* pAppCategory)|Out
advapi32.dll|DWORD GetManagedApplications( GUID* pCategory, DWORD dwQueryFlags, DWORD dwInfoLevel, LPDWORD pdwApps, PMANAGEDAPPLICATION* prgManagedApps)|Out
advapi32.dll|GetMultipleTrusteeA(UNKNOWN)
!advapi32.dll|GetMultipleTrusteeW(UNKNOWN)
advapi32.dll|GetMultipleTrusteeOperationA(UNKNOWN)
!advapi32.dll| GetMultipleTrusteeOperationW(UNKNOWN)
advapi32.dll|DWORD GetNamedSecurityInfoA( LPSTR  pObjectName, SE_OBJECT_TYPE ObjectType, SECURITY_INFORMATION SecurityInfo, PSID* ppsidOwner, PSID* ppsidGroup, PACL* ppDacl, PACL* ppSacl, PSECURITY_DESCRIPTOR* ppSecurityDescriptor)|Out
advapi32.dll|GetNamedSecurityInfoExA(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll| GetNamedSecurityInfoExW(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|DWORD GetNamedSecurityInfoW( LPWSTR pObjectName, SE_OBJECT_TYPE ObjectType, SECURITY_INFORMATION SecurityInfo, PSID* ppsidOwner, PSID* ppsidGroup, PACL* ppDacl, PACL* ppSacl, PSECURITY_DESCRIPTOR* ppSecurityDescriptor)|Out
advapi32.dll|BOOL GetNumberOfEventLogRecords( HANDLE hEventLog, PDWORD NumberOfRecords)|Out|FailureIfNullRet
advapi32.dll|BOOL GetOldestEventLogRecord( HANDLE hEventLog, PDWORD OldestRecord)|Out|FailureIfNullRet
advapi32.dll|GetOverlappedAccessResults(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|BOOL GetPrivateObjectSecurity( PSECURITY_DESCRIPTOR ObjectDescriptor, SECURITY_INFORMATION SecurityInformation, PSECURITY_DESCRIPTOR ResultantDescriptor, DWORD DescriptorLength, PDWORD ReturnLength)|Out|FailureIfNullRet
advapi32.dll|BOOL GetSecurityDescriptorControl( PSECURITY_DESCRIPTOR pSecurityDescriptor, PSECURITY_DESCRIPTOR_CONTROL pControl, LPDWORD lpdwRevision)|Out|FailureIfNullRet
advapi32.dll|BOOL GetSecurityDescriptorDacl( PSECURITY_DESCRIPTOR pSecurityDescriptor, LPBOOL lpbDaclPresent, PACL* pDacl, LPBOOL lpbDaclDefaulted)|Out|FailureIfNullRet
advapi32.dll|BOOL GetSecurityDescriptorGroup( PSECURITY_DESCRIPTOR pSecurityDescriptor, PSID* pGroup, LPBOOL lpbGroupDefaulted)|Out|FailureIfNullRet
advapi32.dll|DWORD GetSecurityDescriptorLength( PSECURITY_DESCRIPTOR pSecurityDescriptor)|Out
advapi32.dll|BOOL GetSecurityDescriptorOwner( PSECURITY_DESCRIPTOR pSecurityDescriptor, PSID* pOwner, LPBOOL lpbOwnerDefaulted)|Out|FailureIfNullRet
advapi32.dll|DWORD GetSecurityDescriptorRMControl( PSECURITY_DESCRIPTOR SecurityDescriptor, PUCHAR RMControl)|Out
advapi32.dll|BOOL GetSecurityDescriptorSacl( PSECURITY_DESCRIPTOR pSecurityDescriptor, LPBOOL lpbSaclPresent, PACL* pSacl, LPBOOL lpbSaclDefaulted)|Out|FailureIfNullRet
advapi32.dll|DWORD GetSecurityInfo( HANDLE handle, SE_OBJECT_TYPE ObjectType, SECURITY_INFORMATION SecurityInfo, PSID* ppsidOwner, PSID* ppsidGroup, PACL* ppDacl, PACL* ppSacl, PSECURITY_DESCRIPTOR* ppSecurityDescriptor)|Out
advapi32.dll|GetSecurityInfoExA(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll| GetSecurityInfoExW(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|BOOL GetServiceDisplayNameA( SC_HANDLE hSCManager, LPCSTR  lpServiceName, LPSTR  lpDisplayName, LPDWORD lpcchBuffer)|Out|FailureIfNullRet
advapi32.dll|BOOL GetServiceDisplayNameW( SC_HANDLE hSCManager, LPCWSTR lpServiceName, LPWSTR lpDisplayName, LPDWORD lpcchBuffer)|Out|FailureIfNullRet
advapi32.dll|BOOL GetServiceKeyNameA( SC_HANDLE hSCManager, LPCSTR  lpDisplayName, LPSTR  lpServiceName, LPDWORD lpcchBuffer)|Out|FailureIfNullRet
advapi32.dll|BOOL GetServiceKeyNameW( SC_HANDLE hSCManager, LPCWSTR lpDisplayName, LPWSTR lpServiceName, LPDWORD lpcchBuffer)|Out|FailureIfNullRet
advapi32.dll|PSID_IDENTIFIER_AUTHORITY GetSidIdentifierAuthority( PSID pSid)|Out
advapi32.dll|DWORD GetSidLengthRequired( UCHAR nSubAuthorityCount)
advapi32.dll|PDWORD GetSidSubAuthority( PSID pSid, DWORD nSubAuthority)|Out
advapi32.dll|PUCHAR GetSidSubAuthorityCount( PSID pSid)|Out
advapi32.dll|BOOL GetTokenInformation( HANDLE TokenHandle, TOKEN_INFORMATION_CLASS TokenInformationClass, LPVOID TokenInformation, DWORD TokenInformationLength, PDWORD ReturnLength)|Out|FailureIfNullRet
advapi32.dll|ULONG GetTraceEnableFlags( TRACEHANDLE SessionHandle)
advapi32.dll|UCHAR GetTraceEnableLevel( TRACEHANDLE SessionHandle)
advapi32.dll|TRACEHANDLE GetTraceLoggerHandle( PVOID Buffer)|Out
advapi32.dll|TRUSTEE_FORM GetTrusteeFormA( PTRUSTEE pTrustee)|Out
!advapi32.dll|TRUSTEE_FORM GetTrusteeFormW( PTRUSTEE pTrustee)|Out
advapi32.dll|LPSTR  GetTrusteeNameA( PTRUSTEE pTrustee)|Out
!advapi32.dll|LPWSTR GetTrusteeNameW( PTRUSTEE pTrustee)|Out
advapi32.dll|TRUSTEE_TYPE GetTrusteeTypeA( PTRUSTEE pTrustee)|Out
!advapi32.dll|TRUSTEE_TYPE GetTrusteeTypeW( PTRUSTEE pTrustee)|Out
advapi32.dll|BOOL GetUserNameA( LPSTR  lpBuffer, LPDWORD lpnSize)|Out|FailureIfNullRet
advapi32.dll|BOOL GetUserNameW( LPWSTR lpBuffer, LPDWORD lpnSize)|Out|FailureIfNullRet
advapi32.dll|BOOL GetWindowsAccountDomainSid( PSID pSid, PSID ppDomainSid, DWORD* cbSid)|Out|FailureIfNullRet
advapi32.dll|BOOL ImpersonateAnonymousToken( HANDLE ThreadHandle)|FailureIfNullRet
advapi32.dll|BOOL ImpersonateLoggedOnUser( HANDLE hToken)|FailureIfNullRet
advapi32.dll|BOOL ImpersonateNamedPipeClient( HANDLE hNamedPipe)|FailureIfNullRet
advapi32.dll|BOOL ImpersonateSelf( SECURITY_IMPERSONATION_LEVEL ImpersonationLevel)|FailureIfNullRet
advapi32.dll|BOOL InitializeAcl( PACL pAcl, DWORD nAclLength, DWORD dwAclRevision)|Out|FailureIfNullRet
advapi32.dll|BOOL InitializeSecurityDescriptor( PSECURITY_DESCRIPTOR pSecurityDescriptor, DWORD dwRevision)|Out|FailureIfNullRet
advapi32.dll|BOOL InitializeSid( PSID Sid, PSID_IDENTIFIER_AUTHORITY pIdentifierAuthority, BYTE nSubAuthorityCount)|Out|FailureIfNullRet
advapi32.dll|BOOL InitiateSystemShutdownA( LPSTR  lpMachineName, LPSTR  lpMessage, DWORD dwTimeout, BOOL bForceAppsClosed, BOOL bRebootAfterShutdown)|Out|FailureIfNullRet
advapi32.dll|BOOL InitiateSystemShutdownExA( LPSTR  lpMachineName, LPSTR  lpMessage, DWORD dwTimeout, BOOL bForceAppsClosed, BOOL bRebootAfterShutdown, DWORD dwReason)|Out|FailureIfNullRet
advapi32.dll|BOOL InitiateSystemShutdownExW( LPWSTR lpMachineName, LPWSTR lpMessage, DWORD dwTimeout, BOOL bForceAppsClosed, BOOL bRebootAfterShutdown, DWORD dwReason)|Out|FailureIfNullRet
advapi32.dll|BOOL InitiateSystemShutdownW( LPWSTR lpMachineName, LPWSTR lpMessage, DWORD dwTimeout, BOOL bForceAppsClosed, BOOL bRebootAfterShutdown)|Out|FailureIfNullRet
advapi32.dll|DWORD InstallApplication( PINSTALLDATA* pInstallInfo)|Out
advapi32.dll|BOOL IsTextUnicode( CONST VOID* pBuffer, int cb, LPINT lpi )|Out
advapi32.dll|BOOL IsTokenRestricted( HANDLE TokenHandle)|FailureIfNullRet
advapi32.dll|IsTokenUntrusted(UNKNOWN)
advapi32.dll|BOOL IsValidAcl( PACL pAcl)|Out|FailureIfNullRet
advapi32.dll|BOOL IsValidSecurityDescriptor( PSECURITY_DESCRIPTOR pSecurityDescriptor)|Out|FailureIfNullRet
advapi32.dll|BOOL IsValidSid( PSID pSid)|Out|FailureIfNullRet
advapi32.dll|BOOL IsWellKnownSid( PSID pSid, WELL_KNOWN_SID_TYPE WellKnownSidType)|Out
advapi32.dll|SC_LOCK LockServiceDatabase( SC_HANDLE hSCManager)|FailureIfNullRet
advapi32.dll|BOOL LogonUserA( LPSTR  lpszUsername, LPSTR  lpszDomain, LPSTR  lpszPassword, DWORD dwLogonType, DWORD dwLogonProvider, PHANDLE phToken)|Out|FailureIfNullRet
advapi32.dll|BOOL LogonUserExA( LPSTR  lpszUsername, LPSTR  lpszDomain, LPSTR  lpszPassword, DWORD dwLogonType, DWORD dwLogonProvider, PHANDLE phToken, PSID* ppLogonSid, PVOID* ppProfileBuffer, LPDWORD pdwProfileLength, PQUOTA_LIMITS pQuotaLimits)|Out|FailureIfNullRet
advapi32.dll|BOOL LogonUserExW( LPWSTR lpszUsername, LPWSTR lpszDomain, LPWSTR lpszPassword, DWORD dwLogonType, DWORD dwLogonProvider, PHANDLE phToken, PSID* ppLogonSid, PVOID* ppProfileBuffer, LPDWORD pdwProfileLength, PQUOTA_LIMITS pQuotaLimits)|Out|FailureIfNullRet
advapi32.dll|BOOL LogonUserW( LPWSTR lpszUsername, LPWSTR lpszDomain, LPWSTR lpszPassword, DWORD dwLogonType, DWORD dwLogonProvider, PHANDLE phToken)|Out|FailureIfNullRet
advapi32.dll|BOOL LookupAccountNameA( LPCSTR  lpSystemName, LPCSTR  lpAccountName, PSID Sid, LPDWORD cbSid, LPSTR  ReferencedDomainName, LPDWORD cchReferencedDomainName, PSID_NAME_USE peUse)|Out|FailureIfNullRet
advapi32.dll|BOOL LookupAccountNameW( LPCWSTR lpSystemName, LPCWSTR lpAccountName, PSID Sid, LPDWORD cbSid, LPWSTR ReferencedDomainName, LPDWORD cchReferencedDomainName, PSID_NAME_USE peUse)|Out|FailureIfNullRet
advapi32.dll|BOOL LookupAccountSidA( LPCSTR  lpSystemName, PSID lpSid, LPSTR  lpName, LPDWORD cchName, LPSTR  lpReferencedDomainName, LPDWORD cchReferencedDomainName, PSID_NAME_USE peUse)|Out|FailureIfNullRet
advapi32.dll|BOOL LookupAccountSidW( LPCWSTR lpSystemName, PSID lpSid, LPWSTR lpName, LPDWORD cchName, LPWSTR lpReferencedDomainName, LPDWORD cchReferencedDomainName, PSID_NAME_USE peUse)|Out|FailureIfNullRet
advapi32.dll|BOOL LookupPrivilegeDisplayNameA( LPCSTR  lpSystemName, LPCSTR  lpName, LPSTR  lpDisplayName, LPDWORD cchDisplayName, LPDWORD lpLanguageId)|Out|FailureIfNullRet
advapi32.dll|BOOL LookupPrivilegeDisplayNameW( LPCWSTR lpSystemName, LPCWSTR lpName, LPWSTR lpDisplayName, LPDWORD cchDisplayName, LPDWORD lpLanguageId)|Out|FailureIfNullRet
advapi32.dll|BOOL LookupPrivilegeNameA( LPCSTR  lpSystemName, PLUID lpLuid, LPSTR  lpName, LPDWORD cchName)|Out|FailureIfNullRet
advapi32.dll|BOOL LookupPrivilegeNameW( LPCWSTR lpSystemName, PLUID lpLuid, LPWSTR lpName, LPDWORD cchName)|Out|FailureIfNullRet
advapi32.dll|BOOL LookupPrivilegeValueA( LPCSTR  lpSystemName, LPCSTR  lpName, PLUID lpLuid)|Out|FailureIfNullRet
advapi32.dll|BOOL LookupPrivilegeValueW( LPCWSTR lpSystemName, LPCWSTR lpName, PLUID lpLuid)|Out|FailureIfNullRet
advapi32.dll|DWORD LookupSecurityDescriptorPartsA( PTRUSTEE* pOwner, PTRUSTEE* pGroup, PULONG cCountOfAccessEntries, PEXPLICIT_ACCESS* pListOfAccessEntries, PULONG cCountOfAuditEntries, PEXPLICIT_ACCESS* pListOfAuditEntries, PSECURITY_DESCRIPTOR pSD)|Out|FailureIfNotNullRet
advapi32.dll|DWORD LookupSecurityDescriptorPartsW( PTRUSTEE* pOwner, PTRUSTEE* pGroup, PULONG cCountOfAccessEntries, PEXPLICIT_ACCESS* pListOfAccessEntries, PULONG cCountOfAuditEntries, PEXPLICIT_ACCESS* pListOfAuditEntries, PSECURITY_DESCRIPTOR pSD)|Out|FailureIfNotNullRet
advapi32.dll|NTSTATUS LsaAddAccountRights( LSA_HANDLE PolicyHandle, PSID AccountSid, PLSA_UNICODE_STRING UserRights, ULONG CountOfRights)|Out|FailureIfNotNullRet
advapi32.dll|LsaAddPrivilegesToAccount(UNKNOWN,UNKNOWN)|FailureIfNotNullRet
advapi32.dll|LsaClearAuditLog(UNKNOWN)|FailureIfNotNullRet
advapi32.dll|NTSTATUS LsaClose( LSA_HANDLE ObjectHandle)|FailureIfNotNullRet
advapi32.dll|LsaCreateAccount(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)|FailureIfNotNullRet
advapi32.dll|LsaCreateSecret(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)|FailureIfNotNullRet
advapi32.dll|LsaCreateTrustedDomain(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)|FailureIfNotNullRet
advapi32.dll|NTSTATUS LsaCreateTrustedDomainEx( LSA_HANDLE PolicyHandle, PTRUSTED_DOMAIN_INFORMATION_EX TrustedDomainInformation, PTRUSTED_DOMAIN_AUTH_INFORMATION AuthenticationInformation, ACCESS_MASK DesiredAccess, PLSA_HANDLE TrustedDomainHandle)|Out|FailureIfNotNullRet
advapi32.dll|LsaDelete(UNKNOWN)|FailureIfNotNullRet
advapi32.dll|NTSTATUS LsaDeleteTrustedDomain( LSA_HANDLE PolicyHandle, PSID TrustedDomainSid)|Out|FailureIfNotNullRet
advapi32.dll|NTSTATUS LsaEnumerateAccountRights( LSA_HANDLE PolicyHandle, PSID AccountSid, PLSA_UNICODE_STRING* UserRights, PULONG CountOfRights)|Out|FailureIfNotNullRet
advapi32.dll|LsaEnumerateAccounts(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)|FailureIfNotNullRet
advapi32.dll|NTSTATUS LsaEnumerateAccountsWithUserRight( LSA_HANDLE PolicyHandle, PLSA_UNICODE_STRING UserRights, PVOID* EnumerationBuffer, PULONG CountReturned)|Out|FailureIfNotNullRet
advapi32.dll|LsaEnumeratePrivileges(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)|FailureIfNotNullRet
advapi32.dll|LsaEnumeratePrivilegesOfAccount(UNKNOWN,UNKNOWN)|FailureIfNotNullRet
advapi32.dll|NTSTATUS LsaEnumerateTrustedDomains( LSA_HANDLE PolicyHandle, PLSA_ENUMERATION_HANDLE EnumerationContext, PVOID* Buffer, ULONG PreferedMaximumLength, PULONG CountReturned)|Out|FailureIfNotNullRet
advapi32.dll|NTSTATUS LsaEnumerateTrustedDomainsEx( LSA_HANDLE PolicyHandle, PLSA_ENUMERATION_HANDLE EnumerationContext, PVOID* Buffer, ULONG PreferredMaximumLength, PULONG CountReturned)|Out|FailureIfNotNullRet
advapi32.dll|NTSTATUS LsaFreeMemory( PVOID Buffer)|Out|FailureIfNotNullRet
advapi32.dll|LsaGetQuotasForAccount(UNKNOWN,UNKNOWN)|FailureIfNotNullRet
advapi32.dll|LsaGetRemoteUserName(UNKNOWN,UNKNOWN,UNKNOWN)|FailureIfNotNullRet
advapi32.dll|LsaGetSystemAccessAccount(UNKNOWN,UNKNOWN)|FailureIfNotNullRet
advapi32.dll|LsaGetUserName(UNKNOWN,UNKNOWN)|FailureIfNotNullRet
advapi32.dll|LsaICLookupNames(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)|FailureIfNotNullRet
advapi32.dll|LsaICLookupNamesWithCreds(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)|FailureIfNotNullRet
advapi32.dll|LsaICLookupSids(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)|FailureIfNotNullRet
advapi32.dll|LsaICLookupSidsWithCreds(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)|FailureIfNotNullRet
advapi32.dll|NTSTATUS LsaLookupNames( LSA_HANDLE PolicyHandle, ULONG Count, PLSA_UNICODE_STRING Names, PLSA_REFERENCED_DOMAIN_LIST* ReferencedDomains, PLSA_TRANSLATED_SID* Sids)|Out|FailureIfNotNullRet
advapi32.dll|NTSTATUS LsaLookupNames2( LSA_HANDLE PolicyHandle, ULONG Flags, ULONG Count, PLSA_UNICODE_STRING Names, PLSA_REFERENCED_DOMAIN_LIST* ReferencedDomains, PLSA_TRANSLATED_SID2* Sids)|Out|FailureIfNotNullRet
advapi32.dll|LsaLookupPrivilegeDisplayName(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)|FailureIfNotNullRet
advapi32.dll|LsaLookupPrivilegeName(UNKNOWN,UNKNOWN,UNKNOWN)|FailureIfNotNullRet
advapi32.dll|LsaLookupPrivilegeValue(UNKNOWN,UNKNOWN,UNKNOWN)|FailureIfNotNullRet
advapi32.dll|NTSTATUS LsaLookupSids( LSA_HANDLE PolicyHandle, ULONG Count, PSID* Sids, PLSA_REFERENCED_DOMAIN_LIST* ReferencedDomains, PLSA_TRANSLATED_NAME* Names)|Out|FailureIfNotNullRet
advapi32.dll|ULONG LsaNtStatusToWinError( NTSTATUS Status)
advapi32.dll|LsaOpenAccount(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)|FailureIfNotNullRet
advapi32.dll|NTSTATUS LsaOpenPolicy( PLSA_UNICODE_STRING SystemName, PLSA_OBJECT_ATTRIBUTES ObjectAttributes, ACCESS_MASK DesiredAccess, PLSA_HANDLE PolicyHandle)|Out|FailureIfNotNullRet
advapi32.dll|LsaOpenSecret(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)|FailureIfNotNullRet
advapi32.dll|LsaOpenTrustedDomain(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)|FailureIfNotNullRet
advapi32.dll|NTSTATUS LsaOpenTrustedDomainByName( LSA_HANDLE PolicyHandle, PLSA_UNICODE_STRING TrustedDomainName, ACCESS_MASK DesiredAccess, PLSA_HANDLE TrustedDomainHandle)|Out|FailureIfNotNullRet
advapi32.dll|NTSTATUS NTAPI LsaQueryDomainInformationPolicy( LSA_HANDLE PolicyHandle, POLICY_DOMAIN_INFORMATION_CLASS InformationClass, PVOID* Buffer)|Out|FailureIfNotNullRet
advapi32.dll|NTSTATUS NTAPI LsaQueryForestTrustInformation( LSA_HANDLE PolicyHandle, PLSA_UNICODE_STRING TrustedDomainName, PLSA_FOREST_TRUST_INFORMATION* ForestTrustInfo)|Out|FailureIfNotNullRet
advapi32.dll|LsaQueryInfoTrustedDomain(UNKNOWN,UNKNOWN,UNKNOWN)|FailureIfNotNullRet
advapi32.dll|NTSTATUS LsaQueryInformationPolicy( LSA_HANDLE PolicyHandle, POLICY_INFORMATION_CLASS InformationClass, PVOID* Buffer)|Out|FailureIfNotNullRet
advapi32.dll|LsaQuerySecret(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)|FailureIfNotNullRet
advapi32.dll|LsaQuerySecurityObject(UNKNOWN,UNKNOWN,UNKNOWN)|FailureIfNotNullRet
advapi32.dll|NTSTATUS LsaQueryTrustedDomainInfo( LSA_HANDLE PolicyHandle, PSID TrustedDomainSid, TRUSTED_INFORMATION_CLASS InformationClass, PVOID* Buffer)|Out|FailureIfNotNullRet
advapi32.dll|NTSTATUS LsaQueryTrustedDomainInfoByName( LSA_HANDLE PolicyHandle, PLSA_UNICODE_STRING TrustedDomainName, TRUSTED_INFORMATION_CLASS InformationClass, PVOID* Buffer)|Out|FailureIfNotNullRet
advapi32.dll|NTSTATUS LsaRemoveAccountRights( LSA_HANDLE PolicyHandle, PSID AccountSid, BOOLEAN AllRights, PLSA_UNICODE_STRING UserRights, ULONG CountOfRights)|Out|FailureIfNotNullRet
advapi32.dll|LsaRemovePrivilegesFromAccount(UNKNOWN,UNKNOWN,UNKNOWN)|FailureIfNotNullRet
advapi32.dll|NTSTATUS LsaRetrievePrivateData( LSA_HANDLE PolicyHandle, PLSA_UNICODE_STRING KeyName, PLSA_UNICODE_STRING* PrivateData)|Out|FailureIfNotNullRet
advapi32.dll|NTSTATUS NTAPI LsaSetDomainInformationPolicy( LSA_HANDLE PolicyHandle, POLICY_DOMAIN_INFORMATION_CLASS InformationClass, PVOID Buffer)|Out|FailureIfNotNullRet
advapi32.dll|NTSTATUS NTAPI LsaSetForestTrustInformation( LSA_HANDLE PolicyHandle, PLSA_UNICODE_STRING TrustedDomainName, PLSA_FOREST_TRUST_INFORMATION ForestTrustInfo, BOOLEAN CheckOnly, PLSA_FOREST_TRUST_COLLISION_INFORMATION* CollisionInfo)|Out|FailureIfNotNullRet
advapi32.dll|NTSTATUS LsaSetInformationPolicy( LSA_HANDLE PolicyHandle, POLICY_INFORMATION_CLASS InformationClass, PVOID Buffer)|Out|FailureIfNotNullRet
advapi32.dll|LsaSetInformationTrustedDomain(UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|LsaSetQuotasForAccount(UNKNOWN,UNKNOWN)
advapi32.dll|LsaSetSecret(UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|LsaSetSecurityObject(UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|LsaSetSystemAccessAccount(UNKNOWN,UNKNOWN)
advapi32.dll|NTSTATUS LsaSetTrustedDomainInfoByName( LSA_HANDLE PolicyHandle, PLSA_UNICODE_STRING TrustedDomainName, TRUSTED_INFORMATION_CLASS InformationClass, PVOID Buffer)|Out
advapi32.dll|NTSTATUS LsaSetTrustedDomainInformation( LSA_HANDLE PolicyHandle, PSID TrustedDomainSid, TRUSTED_INFORMATION_CLASS InformationClass, PVOID Buffer)|Out
advapi32.dll|NTSTATUS LsaStorePrivateData( LSA_HANDLE PolicyHandle, PLSA_UNICODE_STRING KeyName, PLSA_UNICODE_STRING PrivateData)|Out
advapi32.dll|MD4Final(UNKNOWN)
advapi32.dll|MD4Init(UNKNOWN)
advapi32.dll|MD4Update(UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|void MD5Final( MD5_CTX* context)|Out
advapi32.dll|void MD5Init( MD5_CTX* context)|Out
advapi32.dll|void MD5Update( MD5_CTX* context, const unsigned char* input, unsigned int inlen)|Out
advapi32.dll|DWORD MSChapSrvChangePassword( LPWSTR ServerName, LPWSTR UserName, BOOLEAN LmOldPresent, PLM_OWF_PASSWORD LmOldOwfPassword, PLM_OWF_PASSWORD LmNewOwfPassword, PNT_OWF_PASSWORD NtOldOwfPassword, PNT_OWF_PASSWORD NtNewOwfPassword)|Out
advapi32.dll|DWORD MSChapSrvChangePassword2( LPWSTR ServerName, LPWSTR UserName, PSAMPR_ENCRYPTED_USER_PASSWORD NewPasswordEncryptedWithOldNt, PENCRYPTED_NT_OWF_PASSWORD OldNtOwfPasswordEncryptedWithNewNt, BOOLEAN LmPresent, PSAMPR_ENCRYPTED_USER_PASSWORD NewPasswordEncryptedWithOldLm, PENCRYPTED_LM_OWF_PASSWORD OldLmOwfPasswordEncryptedWithNewLmOrNt)|Out
advapi32.dll|BOOL MakeAbsoluteSD( PSECURITY_DESCRIPTOR pSelfRelativeSD, PSECURITY_DESCRIPTOR pAbsoluteSD, LPDWORD lpdwAbsoluteSDSize, PACL pDacl, LPDWORD lpdwDaclSize, PACL pSacl, LPDWORD lpdwSaclSize, PSID pOwner, LPDWORD lpdwOwnerSize, PSID pPrimaryGroup, LPDWORD lpdwPrimaryGroupSize)|Out
advapi32.dll|MakeAbsoluteSD2(UNKNOWN,UNKNOWN)
advapi32.dll|BOOL MakeSelfRelativeSD( PSECURITY_DESCRIPTOR pAbsoluteSD, PSECURITY_DESCRIPTOR pSelfRelativeSD, LPDWORD lpdwBufferLength)|Out
advapi32.dll|VOID MapGenericMask( PDWORD AccessMask, PGENERIC_MAPPING GenericMapping)|Out
advapi32.dll|BOOL NotifyBootConfigStatus( BOOL BootAcceptable)|FailureIfNullRet
advapi32.dll|BOOL NotifyChangeEventLog( HANDLE hEventLog, HANDLE hEvent)|FailureIfNullRet
advapi32.dll|BOOL ObjectCloseAuditAlarmA( LPCSTR  SubsystemName, LPVOID HandleId, BOOL GenerateOnClose)|Out|FailureIfNullRet
advapi32.dll|BOOL ObjectCloseAuditAlarmW( LPCWSTR SubsystemName, LPVOID HandleId, BOOL GenerateOnClose)|Out|FailureIfNullRet
advapi32.dll|BOOL ObjectDeleteAuditAlarmA( LPCSTR  SubsystemName, LPVOID HandleId, BOOL GenerateOnClose)|Out|FailureIfNullRet
advapi32.dll|BOOL ObjectDeleteAuditAlarmW( LPCWSTR SubsystemName, LPVOID HandleId, BOOL GenerateOnClose)|Out|FailureIfNullRet
advapi32.dll|BOOL ObjectOpenAuditAlarmA( LPCSTR  SubsystemName, LPVOID HandleId, LPSTR  ObjectTypeName, LPSTR  ObjectName, PSECURITY_DESCRIPTOR pSecurityDescriptor, HANDLE ClientToken, DWORD DesiredAccess, DWORD GrantedAccess, PPRIVILEGE_SET Privileges, BOOL ObjectCreation, BOOL AccessGranted, LPBOOL GenerateOnClose)|Out|FailureIfNullRet
advapi32.dll|BOOL ObjectOpenAuditAlarmW( LPCWSTR SubsystemName, LPVOID HandleId, LPWSTR ObjectTypeName, LPWSTR ObjectName, PSECURITY_DESCRIPTOR pSecurityDescriptor, HANDLE ClientToken, DWORD DesiredAccess, DWORD GrantedAccess, PPRIVILEGE_SET Privileges, BOOL ObjectCreation, BOOL AccessGranted, LPBOOL GenerateOnClose)|Out|FailureIfNullRet
advapi32.dll|BOOL ObjectPrivilegeAuditAlarmA( LPCSTR  SubsystemName, LPVOID HandleId, HANDLE ClientToken, DWORD DesiredAccess, PPRIVILEGE_SET Privileges, BOOL AccessGranted)|Out|FailureIfNullRet
advapi32.dll|BOOL ObjectPrivilegeAuditAlarmW( LPCWSTR SubsystemName, LPVOID HandleId, HANDLE ClientToken, DWORD DesiredAccess, PPRIVILEGE_SET Privileges, BOOL AccessGranted)|Out|FailureIfNullRet
advapi32.dll|HANDLE OpenBackupEventLogA( LPCSTR  lpUNCServerName, LPCSTR  lpFileName)|FailureIfNullRet
advapi32.dll|HANDLE OpenBackupEventLogW( LPCWSTR lpUNCServerName, LPCWSTR lpFileName)|FailureIfNullRet
advapi32.dll|DWORD OpenEncryptedFileRawA( LPCSTR  lpFileName, ULONG ulFlags, PVOID* pvContext)|Out
advapi32.dll|DWORD OpenEncryptedFileRawW( LPCWSTR lpFileName, ULONG ulFlags, PVOID* pvContext)|Out
advapi32.dll|HANDLE OpenEventLogA( LPCSTR  lpUNCServerName, LPCSTR  lpSourceName)|FailureIfNullRet
advapi32.dll|HANDLE OpenEventLogW( LPCWSTR lpUNCServerName, LPCWSTR lpSourceName)|FailureIfNullRet
advapi32.dll|BOOL OpenProcessToken( HANDLE ProcessHandle, DWORD DesiredAccess, PHANDLE TokenHandle)|Out|FailureIfNullRet
advapi32.dll|SC_HANDLE OpenSCManagerA( LPCSTR  lpMachineName, LPCSTR  lpDatabaseName, DWORD dwDesiredAccess)|FailureIfNullRet
advapi32.dll|SC_HANDLE OpenSCManagerW( LPCWSTR lpMachineName, LPCWSTR lpDatabaseName, DWORD dwDesiredAccess)|FailureIfNullRet
advapi32.dll|SC_HANDLE OpenServiceA( SC_HANDLE hSCManager, LPCSTR  lpServiceName, DWORD dwDesiredAccess)|FailureIfNullRet
advapi32.dll|SC_HANDLE OpenServiceW( SC_HANDLE hSCManager, LPCWSTR lpServiceName, DWORD dwDesiredAccess)|FailureIfNullRet
advapi32.dll|BOOL OpenThreadToken( HANDLE ThreadHandle, DWORD DesiredAccess, BOOL OpenAsSelf, PHANDLE TokenHandle)|Out|FailureIfNullRet
advapi32.dll|TRACEHANDLE OpenTraceA( PEVENT_TRACE_LOGFILE Logfile)|Out|FailureIfRetValue=0xFFFFFFFF
advapi32.dll|TRACEHANDLE OpenTraceW( PEVENT_TRACE_LOGFILE Logfile)|Out|FailureIfRetValue=0xFFFFFFFF
advapi32.dll|BOOL PrivilegeCheck( HANDLE ClientToken, PPRIVILEGE_SET RequiredPrivileges, LPBOOL pfResult)|Out|FailureIfNullRet
advapi32.dll|BOOL PrivilegedServiceAuditAlarmA( LPCSTR  SubsystemName, LPCSTR  ServiceName, HANDLE ClientToken, PPRIVILEGE_SET Privileges, BOOL AccessGranted)|Out|FailureIfNullRet
advapi32.dll|BOOL PrivilegedServiceAuditAlarmW( LPCWSTR SubsystemName, LPCWSTR ServiceName, HANDLE ClientToken, PPRIVILEGE_SET Privileges, BOOL AccessGranted)|Out|FailureIfNullRet
advapi32.dll|ProcessIdleTasks()
advapi32.dll|ProcessTrace(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|ULONG QueryAllTracesA( PEVENT_TRACE_PROPERTIES* PropertyArray, ULONG PropertyArrayCount, PULONG SessionCount)|Out
advapi32.dll|ULONG QueryAllTracesW( PEVENT_TRACE_PROPERTIES* PropertyArray, ULONG PropertyArrayCount, PULONG SessionCount)|Out
advapi32.dll|DWORD QueryRecoveryAgentsOnEncryptedFile( LPCWSTR lpFileName, PENCRYPTION_CERTIFICATE_HASH_LIST* pRecoveryAgents)|Out
advapi32.dll|QueryServiceConfig2A( SC_HANDLE hService, DWORD dwInfoLevel, LPBYTE lpBuffer, DWORD cbBufSize, LPDWORD pcbBytesNeeded)|Out
advapi32.dll|QueryServiceConfig2W( SC_HANDLE hService, DWORD dwInfoLevel, LPBYTE lpBuffer, DWORD cbBufSize, LPDWORD pcbBytesNeeded)|Out
advapi32.dll|BOOL QueryServiceConfigA( SC_HANDLE hService, LPQUERY_SERVICE_CONFIG lpServiceConfig, DWORD cbBufSize, LPDWORD pcbBytesNeeded)|Out|FailureIfNullRet
advapi32.dll|BOOL QueryServiceConfigW( SC_HANDLE hService, LPQUERY_SERVICE_CONFIG lpServiceConfig, DWORD cbBufSize, LPDWORD pcbBytesNeeded)|Out|FailureIfNullRet
advapi32.dll|BOOL QueryServiceLockStatusA( SC_HANDLE hSCManager, LPQUERY_SERVICE_LOCK_STATUS lpLockStatus, DWORD cbBufSize, LPDWORD pcbBytesNeeded)|Out|FailureIfNullRet
advapi32.dll|BOOL QueryServiceLockStatusW( SC_HANDLE hSCManager, LPQUERY_SERVICE_LOCK_STATUS lpLockStatus, DWORD cbBufSize, LPDWORD pcbBytesNeeded)|Out|FailureIfNullRet
advapi32.dll|BOOL QueryServiceObjectSecurity( SC_HANDLE hService, SECURITY_INFORMATION dwSecurityInformation, PSECURITY_DESCRIPTOR lpSecurityDescriptor, DWORD cbBufSize, LPDWORD pcbBytesNeeded)|Out|FailureIfNullRet
advapi32.dll|BOOL QueryServiceStatus( SC_HANDLE hService, LPSERVICE_STATUS lpServiceStatus)|Out|FailureIfNullRet
advapi32.dll|BOOL QueryServiceStatusEx( SC_HANDLE hService, SC_STATUS_TYPE InfoLevel, LPBYTE lpBuffer, DWORD cbBufSize, LPDWORD pcbBytesNeeded)|Out|FailureIfNullRet
advapi32.dll|ULONG QueryTraceA( TRACEHANDLE SessionHandle, LPCSTR  SessionName, PEVENT_TRACE_PROPERTIES Properties)|Out
advapi32.dll|ULONG QueryTraceW( TRACEHANDLE SessionHandle, LPCWSTR SessionName, PEVENT_TRACE_PROPERTIES Properties)|Out
advapi32.dll|DWORD QueryUsersOnEncryptedFile( LPCWSTR lpFileName, PENCRYPTION_CERTIFICATE_HASH_LIST* pUsers)|Out
advapi32.dll|QueryWindows31FilesMigration(UNKNOWN)
advapi32.dll|DWORD ReadEncryptedFileRaw( PFE_EXPORT_FUNC pfExportCallback, PVOID pvCallbackContext, PVOID pvContext)|Out
advapi32.dll|BOOL ReadEventLogA( HANDLE hEventLog, DWORD dwReadFlags, DWORD dwRecordOffset, LPVOID lpBuffer, DWORD nNumberOfBytesToRead, DWORD* pnBytesRead, DWORD* pnMinNumberOfBytesNeeded)|Out|FailureIfNullRet
advapi32.dll|BOOL ReadEventLogW( HANDLE hEventLog, DWORD dwReadFlags, DWORD dwRecordOffset, LPVOID lpBuffer, DWORD nNumberOfBytesToRead, DWORD* pnBytesRead, DWORD* pnMinNumberOfBytesNeeded)|Out|FailureIfNullRet
advapi32.dll|LONG RegCloseKey( HKEY hKey)|FailureIfNotNullRet
advapi32.dll|LONG RegConnectRegistryA( LPCSTR  lpMachineName, HKEY hKey, PHKEY phkResult)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegConnectRegistryW( LPCWSTR lpMachineName, HKEY hKey, PHKEY phkResult)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegCreateKeyA( HKEY hKey, LPCSTR  lpSubKey, PHKEY phkResult)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegCreateKeyExA( HKEY hKey, LPCSTR  lpSubKey, DWORD Reserved, LPSTR  lpClass, DWORD dwOptions, REGSAM samDesired, LPSECURITY_ATTRIBUTES lpSecurityAttributes, PHKEY phkResult, LPDWORD lpdwDisposition)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegCreateKeyExW( HKEY hKey, LPCWSTR lpSubKey, DWORD Reserved, LPWSTR lpClass, DWORD dwOptions, REGSAM samDesired, LPSECURITY_ATTRIBUTES lpSecurityAttributes, PHKEY phkResult, LPDWORD lpdwDisposition)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegCreateKeyW( HKEY hKey, LPCWSTR lpSubKey, PHKEY phkResult)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegDeleteKeyA( HKEY hKey, LPCSTR  lpSubKey)|FailureIfNotNullRet
advapi32.dll|LONG RegDeleteKeyW( HKEY hKey, LPCWSTR lpSubKey)|FailureIfNotNullRet
advapi32.dll|LONG RegDeleteValueA( HKEY hKey, LPCSTR  lpValueName)|FailureIfNotNullRet
advapi32.dll|LONG RegDeleteValueW( HKEY hKey, LPCWSTR lpValueName)|FailureIfNotNullRet
advapi32.dll|LONG RegDisablePredefinedCache()|FailureIfNotNullRet
advapi32.dll|LONG RegEnumKeyA( HKEY hKey, DWORD dwIndex, LPSTR  lpName, DWORD cchName)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegEnumKeyExA( HKEY hKey, DWORD dwIndex, LPSTR  lpName, LPDWORD lpcName, LPDWORD lpReserved, LPSTR  lpClass, LPDWORD lpcClass, PFILETIME lpftLastWriteTime)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegEnumKeyExW( HKEY hKey, DWORD dwIndex, LPWSTR lpName, LPDWORD lpcName, LPDWORD lpReserved, LPWSTR lpClass, LPDWORD lpcClass, PFILETIME lpftLastWriteTime)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegEnumKeyW( HKEY hKey, DWORD dwIndex, LPWSTR lpName, DWORD cchName)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegEnumValueA( HKEY hKey, DWORD dwIndex, LPSTR  lpValueName, LPDWORD lpcValueName, LPDWORD lpReserved, LPDWORD lpType, LPBYTE lpData, LPDWORD lpcbData)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegEnumValueW( HKEY hKey, DWORD dwIndex, LPWSTR lpValueName, LPDWORD lpcValueName, LPDWORD lpReserved, LPDWORD lpType, LPBYTE lpData, LPDWORD lpcbData)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegFlushKey( HKEY hKey)|FailureIfNotNullRet
advapi32.dll|LONG RegGetKeySecurity( HKEY hKey, SECURITY_INFORMATION SecurityInformation, PSECURITY_DESCRIPTOR pSecurityDescriptor, LPDWORD lpcbSecurityDescriptor)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegLoadKeyA( HKEY hKey, LPCSTR  lpSubKey, LPCSTR  lpFile)|FailureIfNotNullRet
advapi32.dll|LONG RegLoadKeyW( HKEY hKey, LPCWSTR lpSubKey, LPCWSTR lpFile)|FailureIfNotNullRet
advapi32.dll|LONG RegNotifyChangeKeyValue( HKEY hKey, BOOL bWatchSubtree, DWORD dwNotifyFilter, HANDLE hEvent, BOOL fAsynchronous)|FailureIfNotNullRet
advapi32.dll|LONG RegOpenCurrentUser( REGSAM samDesired, PHKEY phkResult)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegOpenKeyA( HKEY hKey, LPCSTR  lpSubKey, PHKEY phkResult)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegOpenKeyExA( HKEY hKey, LPCSTR  lpSubKey, DWORD ulOptions, REGSAM samDesired, PHKEY phkResult)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegOpenKeyExW( HKEY hKey, LPCWSTR lpSubKey, DWORD ulOptions, REGSAM samDesired, PHKEY phkResult)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegOpenKeyW( HKEY hKey, LPCWSTR lpSubKey, PHKEY phkResult)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegOpenUserClassesRoot( HANDLE hToken, DWORD dwOptions, REGSAM samDesired, PHKEY phkResult)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegOverridePredefKey( HKEY hKey, HKEY hNewHKey)|FailureIfNotNullRet
advapi32.dll|LONG RegQueryInfoKeyA( HKEY hKey, LPSTR  lpClass, LPDWORD lpcClass, LPDWORD lpReserved, LPDWORD lpcSubKeys, LPDWORD lpcMaxSubKeyLen, LPDWORD lpcMaxClassLen, LPDWORD lpcValues, LPDWORD lpcMaxValueNameLen, LPDWORD lpcMaxValueLen, LPDWORD lpcbSecurityDescriptor, PFILETIME lpftLastWriteTime)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegQueryInfoKeyW( HKEY hKey, LPWSTR lpClass, LPDWORD lpcClass, LPDWORD lpReserved, LPDWORD lpcSubKeys, LPDWORD lpcMaxSubKeyLen, LPDWORD lpcMaxClassLen, LPDWORD lpcValues, LPDWORD lpcMaxValueNameLen, LPDWORD lpcMaxValueLen, LPDWORD lpcbSecurityDescriptor, PFILETIME lpftLastWriteTime)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegQueryMultipleValuesA( HKEY hKey, PVALENT val_list, DWORD num_vals, LPSTR  lpValueBuf, LPDWORD ldwTotsize)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegQueryMultipleValuesW( HKEY hKey, PVALENT val_list, DWORD num_vals, LPWSTR lpValueBuf, LPDWORD ldwTotsize)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegQueryValueA( HKEY hKey, LPCSTR  lpSubKey, LPSTR  lpValue, PLONG lpcbValue)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegQueryValueExA( HKEY hKey, LPCSTR  lpValueName, LPDWORD lpReserved, LPDWORD lpType, LPBYTE lpData, LPDWORD lpcbData)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegQueryValueExW( HKEY hKey, LPCWSTR lpValueName, LPDWORD lpReserved, LPDWORD lpType, LPBYTE lpData, LPDWORD lpcbData)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegQueryValueW( HKEY hKey, LPCWSTR lpSubKey, LPWSTR lpValue, PLONG lpcbValue)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegReplaceKeyA( HKEY hKey, LPCSTR  lpSubKey, LPCSTR  lpNewFile, LPCSTR  lpOldFile)|FailureIfNotNullRet
advapi32.dll|LONG RegReplaceKeyW( HKEY hKey, LPCWSTR lpSubKey, LPCWSTR lpNewFile, LPCWSTR lpOldFile)|FailureIfNotNullRet
advapi32.dll|LONG RegRestoreKeyA( HKEY hKey, LPCSTR  lpFile, DWORD dwFlags)|FailureIfNotNullRet
advapi32.dll|LONG RegRestoreKeyW( HKEY hKey, LPCWSTR lpFile, DWORD dwFlags)|FailureIfNotNullRet
advapi32.dll|LONG RegSaveKeyA( HKEY hKey, LPCSTR  lpFile, LPSECURITY_ATTRIBUTES lpSecurityAttributes)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegSaveKeyExA( HKEY hKey, LPCSTR  lpFile, LPSECURITY_ATTRIBUTES lpSecurityAttributes, DWORD Flags)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegSaveKeyExW( HKEY hKey, LPCWSTR lpFile, LPSECURITY_ATTRIBUTES lpSecurityAttributes, DWORD Flags)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegSaveKeyW( HKEY hKey, LPCWSTR lpFile, LPSECURITY_ATTRIBUTES lpSecurityAttributes)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegSetKeySecurity( HKEY hKey, SECURITY_INFORMATION SecurityInformation, PSECURITY_DESCRIPTOR pSecurityDescriptor)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegSetValueA( HKEY hKey, LPCSTR  lpSubKey, DWORD dwType, LPCSTR  lpData, DWORD cbData)|FailureIfNotNullRet
advapi32.dll|LONG RegSetValueExA( HKEY hKey, LPCSTR  lpValueName, DWORD Reserved, DWORD dwType, const BYTE* lpData, DWORD cbData)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegSetValueExW( HKEY hKey, LPCWSTR lpValueName, DWORD Reserved, DWORD dwType, const BYTE* lpData, DWORD cbData)|Out|FailureIfNotNullRet
advapi32.dll|LONG RegSetValueW( HKEY hKey, LPCWSTR lpSubKey, DWORD dwType, LPCWSTR lpData, DWORD cbData)|FailureIfNotNullRet
advapi32.dll|LONG RegUnLoadKeyA( HKEY hKey, LPCSTR  lpSubKey)|FailureIfNotNullRet
advapi32.dll|LONG RegUnLoadKeyW( HKEY hKey, LPCWSTR lpSubKey)|FailureIfNotNullRet
advapi32.dll|HANDLE RegisterEventSourceA( LPCSTR  lpUNCServerName, LPCSTR  lpSourceName)|FailureIfNullRet
advapi32.dll|HANDLE RegisterEventSourceW( LPCWSTR lpUNCServerName, LPCWSTR lpSourceName)|FailureIfNullRet
advapi32.dll|RegisterIdleTask(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|SERVICE_STATUS_HANDLE RegisterServiceCtrlHandlerA( LPCSTR  lpServiceName, LPHANDLER_FUNCTION lpHandlerProc)|Out|FailureIfNullRet
advapi32.dll|SERVICE_STATUS_HANDLE RegisterServiceCtrlHandlerExA( LPCSTR  lpServiceName, LPHANDLER_FUNCTION_EX lpHandlerProc, LPVOID lpContext)|Out|FailureIfNullRet
advapi32.dll|SERVICE_STATUS_HANDLE RegisterServiceCtrlHandlerExW( LPCWSTR lpServiceName, LPHANDLER_FUNCTION_EX lpHandlerProc, LPVOID lpContext)|Out|FailureIfNullRet
advapi32.dll|SERVICE_STATUS_HANDLE RegisterServiceCtrlHandlerW( LPCWSTR lpServiceName, LPHANDLER_FUNCTION lpHandlerProc)|Out|FailureIfNullRet
advapi32.dll|RegisterTraceGuidsA(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|RegisterTraceGuidsW(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|ULONG RemoveTraceCallback( LPCGUID pGuid)
advapi32.dll|DWORD RemoveUsersFromEncryptedFile( LPCWSTR lpFileName, PENCRYPTION_CERTIFICATE_HASH_LIST pHashes)|Out
advapi32.dll|BOOL ReportEventA( HANDLE hEventLog, WORD wType, WORD wCategory, DWORD dwEventID, PSID lpUserSid, WORD wNumStrings, DWORD dwDataSize, LPCTSTR* lpStrings, LPVOID lpRawData)|Out|FailureIfNullRet
advapi32.dll|BOOL ReportEventW( HANDLE hEventLog, WORD wType, WORD wCategory, DWORD dwEventID, PSID lpUserSid, WORD wNumStrings, DWORD dwDataSize, LPCTSTR* lpStrings, LPVOID lpRawData)|Out|FailureIfNullRet
advapi32.dll|BOOL RevertToSelf()|FailureIfNullRet
advapi32.dll|BOOL SaferCloseLevel( SAFER_LEVEL_HANDLE hLevelHandle)|FailureIfNullRet
advapi32.dll|BOOL SaferComputeTokenFromLevel( SAFER_LEVEL_HANDLE LevelHandle, HANDLE InAccessToken, PHANDLE OutAccessToken, DWORD dwFlags, LPVOID lpReserved)|Out|FailureIfNullRet
advapi32.dll|BOOL SaferCreateLevel( DWORD dwScopeId, DWORD dwLevelId, DWORD OpenFlags, SAFER_LEVEL_HANDLE* pLevelHandle, LPVOID lpReserved)|Out|FailureIfNullRet
advapi32.dll|BOOL SaferGetLevelInformation( SAFER_LEVEL_HANDLE LevelHandle, SAFER_OBJECT_INFO_CLASS dwInfoType, LPVOID lpQueryBuffer, DWORD dwInBufferSize, LPDWORD lpdwOutBufferSize)|Out|FailureIfNullRet
advapi32.dll|BOOL SaferGetPolicyInformation( DWORD dwScopeId, SAFER_POLICY_INFO_CLASS SaferPolicyInfoClass, DWORD InfoBufferSize, PVOID InfoBuffer, PDWORD InfoBufferRetSize, LPVOID lpReserved)|Out|FailureIfNullRet
advapi32.dll|BOOL SaferIdentifyLevel( DWORD dwNumProperties, PSAFER_CODE_PROPERTIES pCodeProperties, SAFER_LEVEL_HANDLE* pLevelHandle, LPVOID lpReserved)|Out|FailureIfNullRet
advapi32.dll|BOOL SaferRecordEventLogEntry( SAFER_LEVEL_HANDLE hLevel, LPCWSTR szTargetPath, LPVOID lpReserved)|Out|FailureIfNullRet
advapi32.dll|SaferSetLevelInformation(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|SaferSetPolicyInformation(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|SaferiChangeRegistryScope(UNKNOWN,UNKNOWN)
advapi32.dll|SaferiCompareTokenLevels(UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|BOOL SaferiIsExecutableFileType( LPCWSTR szFullPathname, BOOLEAN bFromShellExecute)|FailureIfNullRet
advapi32.dll|SaferiPopulateDefaultsInRegistry(UNKNOWN,UNKNOWN)
advapi32.dll|SaferiReplaceProcessThreadTokens(UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|SaferiSearchMatchingHashRules(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|BOOL SetAclInformation( PACL pAcl, LPVOID pAclInformation, DWORD nAclInformationLength, ACL_INFORMATION_CLASS dwAclInformationClass)|Out|FailureIfNullRet
advapi32.dll|SetEntriesInAccessListA(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|SetEntriesInAccessListW(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|DWORD SetEntriesInAclA( ULONG cCountOfExplicitEntries, PEXPLICIT_ACCESS pListOfExplicitEntries, PACL OldAcl, PACL* NewAcl)|Out
advapi32.dll|DWORD SetEntriesInAclW( ULONG cCountOfExplicitEntries, PEXPLICIT_ACCESS pListOfExplicitEntries, PACL OldAcl, PACL* NewAcl)|Out
advapi32.dll|SetEntriesInAuditListA(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|SetEntriesInAuditListW(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|BOOL SetFileSecurityA( LPCSTR  lpFileName, SECURITY_INFORMATION SecurityInformation, PSECURITY_DESCRIPTOR pSecurityDescriptor)|Out|FailureIfNullRet
advapi32.dll|BOOL SetFileSecurityW( LPCWSTR lpFileName, SECURITY_INFORMATION SecurityInformation, PSECURITY_DESCRIPTOR pSecurityDescriptor)|Out|FailureIfNullRet
advapi32.dll|BOOL SetKernelObjectSecurity( HANDLE Handle, SECURITY_INFORMATION SecurityInformation, PSECURITY_DESCRIPTOR SecurityDescriptor)|Out|FailureIfNullRet
advapi32.dll|DWORD SetNamedSecurityInfoA( LPSTR  pObjectName, SE_OBJECT_TYPE ObjectType, SECURITY_INFORMATION SecurityInfo, PSID psidOwner, PSID psidGroup, PACL pDacl, PACL pSacl)|Out
advapi32.dll|SetNamedSecurityInfoExA(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|SetNamedSecurityInfoExW(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|DWORD SetNamedSecurityInfoW( LPWSTR pObjectName, SE_OBJECT_TYPE ObjectType, SECURITY_INFORMATION SecurityInfo, PSID psidOwner, PSID psidGroup, PACL pDacl, PACL pSacl)|Out
advapi32.dll|BOOL SetPrivateObjectSecurity( SECURITY_INFORMATION SecurityInformation, PSECURITY_DESCRIPTOR ModificationDescriptor, PSECURITY_DESCRIPTOR* ObjectsSecurityDescriptor, PGENERIC_MAPPING GenericMapping, HANDLE Token)|Out|FailureIfNullRet
advapi32.dll|BOOL SetPrivateObjectSecurityEx( SECURITY_INFORMATION SecurityInformation, PSECURITY_DESCRIPTOR ModificationDescriptor, PSECURITY_DESCRIPTOR* SecurityDescriptor, ULONG AutoInheritFlags, PGENERIC_MAPPING GenericMapping, HANDLE Token)|Out|FailureIfNullRet
advapi32.dll|BOOL SetSecurityDescriptorControl( PSECURITY_DESCRIPTOR pSecurityDescriptor, SECURITY_DESCRIPTOR_CONTROL ControlBitsOfInterest, SECURITY_DESCRIPTOR_CONTROL ControlBitsToSet)|Out|FailureIfNullRet
advapi32.dll|BOOL SetSecurityDescriptorDacl( PSECURITY_DESCRIPTOR pSecurityDescriptor, BOOL bDaclPresent, PACL pDacl, BOOL bDaclDefaulted)|Out|FailureIfNullRet
advapi32.dll|BOOL SetSecurityDescriptorGroup( PSECURITY_DESCRIPTOR pSecurityDescriptor, PSID pGroup, BOOL bGroupDefaulted)|Out|FailureIfNullRet
advapi32.dll|BOOL SetSecurityDescriptorOwner( PSECURITY_DESCRIPTOR pSecurityDescriptor, PSID pOwner, BOOL bOwnerDefaulted)|Out|FailureIfNullRet
advapi32.dll|DWORD SetSecurityDescriptorRMControl( PSECURITY DESCRIPTOR SecurityDescriptor, PUCHAR RMControl)|Out
advapi32.dll|BOOL SetSecurityDescriptorSacl( PSECURITY_DESCRIPTOR pSecurityDescriptor, BOOL bSaclPresent, PACL pSacl, BOOL bSaclDefaulted)|Out
advapi32.dll|DWORD SetSecurityInfo( HANDLE handle, SE_OBJECT_TYPE ObjectType, SECURITY_INFORMATION SecurityInfo, PSID psidOwner, PSID psidGroup, PACL pDacl, PACL pSacl)|Out
advapi32.dll|SetSecurityInfoExA(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|SetSecurityInfoExW(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|BOOL SetServiceBits( SERVICE_STATUS_HANDLE hServiceStatus, DWORD dwServiceBits, BOOL bSetBitsOn, BOOL bUpdateImmediately)|FailureIfNullRet
advapi32.dll|BOOL SetServiceObjectSecurity( SC_HANDLE hService, SECURITY_INFORMATION dwSecurityInformation, PSECURITY_DESCRIPTOR lpSecurityDescriptor)|Out|FailureIfNullRet
advapi32.dll|BOOL SetServiceStatus( SERVICE_STATUS_HANDLE hServiceStatus, LPSERVICE_STATUS lpServiceStatus)|Out|FailureIfNullRet
advapi32.dll|BOOL SetThreadToken( PHANDLE Thread, HANDLE Token)|Out|FailureIfNullRet
advapi32.dll|BOOL SetTokenInformation( HANDLE TokenHandle, TOKEN_INFORMATION_CLASS TokenInformationClass, LPVOID TokenInformation, DWORD TokenInformationLength)|Out|FailureIfNullRet
advapi32.dll|ULONG SetTraceCallback( LPCGUID pGuid, PEVENT_CALLBACK EventCallback)|Out
advapi32.dll|DWORD SetUserFileEncryptionKey( PENCRYPTION_CERTIFICATE pEncryptionCertificate)|Out
advapi32.dll|BOOL StartServiceA( SC_HANDLE hService, DWORD dwNumServiceArgs, LPCTSTR* lpServiceArgVectors)|Out|FailureIfNullRet
advapi32.dll|BOOL StartServiceCtrlDispatcherA( const SERVICE_TABLE_ENTRY* lpServiceTable)|Out|FailureIfNullRet
advapi32.dll|BOOL StartServiceCtrlDispatcherW( const SERVICE_TABLE_ENTRY* lpServiceTable)|Out|FailureIfNullRet
advapi32.dll|BOOL StartServiceW( SC_HANDLE hService, DWORD dwNumServiceArgs, LPCTSTR* lpServiceArgVectors)|Out|FailureIfNullRet
advapi32.dll|ULONG StartTraceA( PTRACEHANDLE SessionHandle, LPCSTR  SessionName, PEVENT_TRACE_PROPERTIES Properties)|Out
advapi32.dll|ULONG StartTraceW( PTRACEHANDLE SessionHandle, LPCWSTR SessionName, PEVENT_TRACE_PROPERTIES Properties)|Out
advapi32.dll|ULONG StopTraceA( TRACEHANDLE SessionHandle, LPCSTR  SessionName, PEVENT_TRACE_PROPERTIES Properties)|Out
advapi32.dll|ULONG StopTraceW( TRACEHANDLE SessionHandle, LPCWSTR SessionName, PEVENT_TRACE_PROPERTIES Properties)|Out
advapi32.dll|SynchronizeWindows31FilesAndWindowsNTRegistry(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|ULONG TraceEvent(TRACEHANDLE SessionHandle, PEVENT_TRACE_HEADER EventTrace)|FailureIfNotNullRet
advapi32.dll|ULONG TraceEventInstance( TRACEHANDLE SessionHandle, PEVENT_INSTANCE_HEADER EventTrace, PEVENT_INSTANCE_INFO pInstInfo, PEVENT_INSTANCE_INFO pParentInstInfo)|Out|FailureIfNotNullRet
advapi32.dll|ULONG TraceMessage( TRACEHANDLE SessionHandle, ULONG MessageFlags, LPGUID MessageGuid, USHORT MessageNumber)|Out|FailureIfNotNullRet
advapi32.dll|ULONG TraceMessageVa( TRACEHANDLE SessionHandle, ULONG MessageFlags, LPGUID MessageGuid, USHORT MessageNumber, va_list MessageArgList)|Out|FailureIfNotNullRet
advapi32.dll|DWORD TreeResetNamedSecurityInfoA( LPSTR  pObjectName, SE_OBJECT_TYPE ObjectType, SECURITY_INFORMATION SecurityInfo, PSID pOwner, PSID pGroup, PACL pDacl, PACL pSacl, BOOL KeepExplicit, FN_PROGRESS fnProgress, PROG_INVOKE_SETTING ProgressInvokeSetting, PVOID Args)|Out
advapi32.dll|DWORD TreeResetNamedSecurityInfoW( LPWSTR pObjectName, SE_OBJECT_TYPE ObjectType, SECURITY_INFORMATION SecurityInfo, PSID pOwner, PSID pGroup, PACL pDacl, PACL pSacl, BOOL KeepExplicit, FN_PROGRESS fnProgress, PROG_INVOKE_SETTING ProgressInvokeSetting, PVOID Args)|Out
advapi32.dll|TrusteeAccessToObjectA(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|TrusteeAccessToObjectW(UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|DWORD UninstallApplication( WCHAR* ProductCode, DWORD dwStatus)|Out
advapi32.dll|BOOL UnlockServiceDatabase( SC_LOCK ScLock)|FailureIfNullRet
advapi32.dll|UnregisterIdleTask(UNKNOWN,UNKNOWN,UNKNOWN)
advapi32.dll|ULONG UnregisterTraceGuids( TRACEHANDLE RegistrationHandle)
advapi32.dll|ULONG UpdateTraceA( TRACEHANDLE SessionHandle, LPCSTR  SessionName, PEVENT_TRACE_PROPERTIES Properties)|Out
advapi32.dll|ULONG UpdateTraceW( TRACEHANDLE SessionHandle, LPCWSTR SessionName, PEVENT_TRACE_PROPERTIES Properties)|Out
advapi32.dll|DWORD WriteEncryptedFileRaw( PFE_IMPORT_FUNC pfImportCallback, PVOID pvCallbackContext, PVOID pvContext)|Out
