Geoff Chappell, Software Analyst
The table below lists all the functions that are exported from ADVAPI32 version 3.51. For the purpose of this study, without having found an earlier (32-bit) Windows NT for inspection, these functions are treated as original. All exports are by name. Almost all are still exported as of version 6.2, though many are now implemented elsewhere.
| Function | Remarks |
|---|---|
| AbortSystemShutdownA | |
| AbortSystemShutdownW | |
| AccessCheck | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| AccessCheckAndAuditAlarmA | |
| AccessCheckAndAuditAlarmW | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| AddAccessAllowedAce | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| AddAccessDeniedAce | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| AddAce | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| AddAuditAccessAce | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| AdjustTokenGroups | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| AdjustTokenPrivileges | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| AllocateAndInitializeSid | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| AllocateLocallyUniqueId | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| AreAllAccessesGranted | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| AreAnyAccessesGranted | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| BackupEventLogA | |
| BackupEventLogW | |
| ChangeServiceConfigA | implemented as jump to API-MS-WIN-Service-winsvc-L1-1-0 in 6.1 and higher |
| ChangeServiceConfigW | implemented as jump to API-MS-WIN-Service-Management-L2-1-0 in 6.1 and higher |
| ClearEventLogA | |
| ClearEventLogW | |
| CloseEventLog | |
| CloseServiceHandle | implemented as jump to API-MS-WIN-Service-Management-L1-1-0 in 6.1 and higher |
| ControlService | implemented as jump to API-MS-WIN-Service-winsvc-L1-1-0 in 6.1 and higher |
| CopySid | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| CreatePrivateObjectSecurity | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| CreateProcessAsUserA | |
| CreateProcessAsUserW | implemented as jump to API-MS-Win-Core-ProcessThreads-L1-1-0 in 6.1 and higher |
| CreateServiceA | implemented as jump to API-MS-WIN-Service-winsvc-L1-1-0 in 6.1 and higher |
| CreateServiceW | implemented as jump to API-MS-WIN-Service-Management-L1-1-0 in 6.1 and higher |
| DeleteAce | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| DeleteService | implemented as jump to API-MS-WIN-Service-Management-L1-1-0 in 6.1 and higher |
| DeregisterEventSource | |
| DestroyPrivateObjectSecurity | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| DuplicateToken | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| ElfBackupEventLogFileA | NT only |
| ElfBackupEventLogFileW | NT only |
| ElfChangeNotify | NT only |
| ElfClearEventLogFileA | NT only |
| ElfClearEventLogFileW | NT only |
| ElfCloseEventLog | NT only |
| ElfDeregisterEventSource | NT only |
| ElfNumberOfRecords | NT only |
| ElfOldestRecord | NT only |
| ElfOpenBackupEventLogA | NT only |
| ElfOpenBackupEventLogW | NT only |
| ElfOpenEventLogA | NT only |
| ElfOpenEventLogW | NT only |
| ElfReadEventLogA | NT only |
| ElfReadEventLogW | NT only |
| ElfRegisterEventSourceA | NT only |
| ElfRegisterEventSourceW | NT only |
| ElfReportEventA | NT only |
| ElfReportEventW | NT only |
| EnumDependentServicesA | |
| EnumDependentServicesW | |
| EnumServicesStatusA | |
| EnumServicesStatusW | |
| EqualPrefixSid | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| EqualSid | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| FindFirstFreeAce | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| FreeSid | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| GetAce | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| GetAclInformation | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| GetFileSecurityA | |
| GetFileSecurityW | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| GetKernelObjectSecurity | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| GetLengthSid | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| GetNumberOfEventLogRecords | |
| GetOldestEventLogRecord | |
| GetPrivateObjectSecurity | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| GetSecurityDescriptorControl | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| GetSecurityDescriptorDacl | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| GetSecurityDescriptorGroup | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| GetSecurityDescriptorLength | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| GetSecurityDescriptorOwner | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| GetSecurityDescriptorSacl | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| GetServiceDisplayNameA | |
| GetServiceDisplayNameW | |
| GetServiceKeyNameA | |
| GetServiceKeyNameW | |
| GetSidIdentifierAuthority | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| GetSidLengthRequired | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| GetSidSubAuthority | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| GetSidSubAuthorityCount | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| GetTokenInformation | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| GetUserNameA | |
| GetUserNameW | |
| I_ScSetServiceBitsA | NT only |
| I_ScSetServiceBitsW | NT only |
| ImpersonateLoggedOnUser | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| ImpersonateNamedPipeClient | implemented as jump to API-MS-Win-Core-NamedPipe-L1-1-0 in 6.1 and higher |
| ImpersonateSelf | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| InitializeAcl | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| InitializeSecurityDescriptor | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| InitializeSid | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| InitiateSystemShutdownA | |
| InitiateSystemShutdownW | |
| IsTextUnicode | |
| IsValidAcl | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| IsValidSecurityDescriptor | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| IsValidSid | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| LockServiceDatabase | |
| LogonUserA | |
| LogonUserW | |
| LookupAccountNameA | |
| LookupAccountNameW | |
| LookupAccountSidA | |
| LookupAccountSidW | |
| LookupPrivilegeDisplayNameA | |
| LookupPrivilegeDisplayNameW | |
| LookupPrivilegeNameA | |
| LookupPrivilegeNameW | |
| LookupPrivilegeValueA | |
| LookupPrivilegeValueW | |
| LsaAddAccountRights | NT only |
| LsaAddPrivilegesToAccount | NT only |
| LsaClearAuditLog | NT only |
| LsaClose | NT only |
| LsaCreateAccount | NT only |
| LsaCreateSecret | NT only |
| LsaCreateTrustedDomain | NT only |
| LsaDelete | NT only |
| LsaDeleteTrustedDomain | NT only |
| LsaEnumerateAccountRights | NT only |
| LsaEnumerateAccounts | NT only |
| LsaEnumerateAccountsWithUserRight | NT only |
| LsaEnumeratePrivileges | NT only |
| LsaEnumeratePrivilegesOfAccount | NT only |
| LsaEnumerateTrustedDomains | NT only |
| LsaFreeMemory | NT only |
| LsaGetQuotasForAccount | NT only |
| LsaGetSystemAccessAccount | NT only |
| LsaICLookupNames | NT only |
| LsaICLookupSids | NT only |
| LsaLookupNames | NT only |
| LsaLookupPrivilegeDisplayName | NT only |
| LsaLookupPrivilegeName | NT only |
| LsaLookupPrivilegeValue | NT only |
| LsaLookupSids | NT only |
| LsaNtStatusToWinError | NT only |
| LsaOpenAccount | NT only |
| LsaOpenPolicy | NT only |
| LsaOpenSecret | NT only |
| LsaOpenTrustedDomain | NT only |
| LsaQueryInformationPolicy | NT only |
| LsaQueryInfoTrustedDomain | NT only |
| LsaQuerySecret | NT only |
| LsaQuerySecurityObject | NT only |
| LsaQueryTrustedDomainInfo | NT only |
| LsaRemoveAccountRights | NT only |
| LsaRemovePrivilegesFromAccount | NT only |
| LsaRetrievePrivateData | NT only |
| LsaSetInformationPolicy | NT only |
| LsaSetInformationTrustedDomain | NT only |
| LsaSetQuotasForAccount | NT only |
| LsaSetSecret | NT only |
| LsaSetSecurityObject | NT only |
| LsaSetSystemAccessAccount | NT only |
| LsaSetTrustedDomainInformation | NT only |
| LsaStorePrivateData | NT only |
| MakeAbsoluteSD | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| MakeSelfRelativeSD | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| MapGenericMask | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| NotifyBootConfigStatus | |
| NotifyChangeEventLog | |
| ObjectCloseAuditAlarmA | |
| ObjectCloseAuditAlarmW | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| ObjectOpenAuditAlarmA | |
| ObjectOpenAuditAlarmW | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| ObjectPrivilegeAuditAlarmA | |
| ObjectPrivilegeAuditAlarmW | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| OpenBackupEventLogA | |
| OpenBackupEventLogW | |
| OpenEventLogA | |
| OpenEventLogW | |
| OpenProcessToken | implemented as jump to API-MS-Win-Core-ProcessThreads-L1-1-0 in 6.1 and higher |
| OpenSCManagerA | implemented as jump to API-MS-WIN-Service-winsvc-L1-1-0 in 6.1 and higher |
| OpenSCManagerW | implemented as jump to API-MS-WIN-Service-Management-L1-1-0 in 6.1 and higher |
| OpenServiceA | implemented as jump to API-MS-WIN-Service-winsvc-L1-1-0 in 6.1 and higher |
| OpenServiceW | implemented as jump to API-MS-WIN-Service-Management-L1-1-0 in 6.1 and higher |
| OpenThreadToken | implemented as jump to API-MS-Win-Core-ProcessThreads-L1-1-0 in 6.1 and higher |
| PrivilegeCheck | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| PrivilegedServiceAuditAlarmA | |
| PrivilegedServiceAuditAlarmW | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| QueryServiceConfigA | implemented as jump to API-MS-WIN-Service-winsvc-L1-1-0 in 6.1 and higher |
| QueryServiceConfigW | implemented as jump to API-MS-WIN-Service-Management-L2-1-0 in 6.1 and higher |
| QueryServiceLockStatusA | |
| QueryServiceLockStatusW | |
| QueryServiceObjectSecurity | implemented as jump to API-MS-WIN-Service-Management-L2-1-0 in 6.1 and higher |
| QueryServiceStatus | implemented as jump to API-MS-WIN-Service-winsvc-L1-1-0 in 6.1 and higher |
| QueryWindows31FilesMigration | NT only; discontinued in 5.2 |
| ReadEventLogA | |
| ReadEventLogW | |
| RegCloseKey | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegConnectRegistryA | |
| RegConnectRegistryW | |
| RegCreateKeyA | |
| RegCreateKeyExA | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegCreateKeyExW | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegCreateKeyW | |
| RegDeleteKeyA | |
| RegDeleteKeyW | |
| RegDeleteValueA | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegDeleteValueW | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegEnumKeyA | |
| RegEnumKeyExA | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegEnumKeyExW | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegEnumKeyW | |
| RegEnumValueA | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegEnumValueW | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegFlushKey | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegGetKeySecurity | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegLoadKeyA | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegLoadKeyW | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegNotifyChangeKeyValue | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegOpenKeyA | |
| RegOpenKeyExA | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegOpenKeyExW | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegOpenKeyW | |
| RegQueryInfoKeyA | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegQueryInfoKeyW | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegQueryMultipleValuesA | |
| RegQueryMultipleValuesW | |
| RegQueryValueA | |
| RegQueryValueExA | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegQueryValueExW | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegQueryValueW | |
| RegReplaceKeyA | |
| RegReplaceKeyW | |
| RegRestoreKeyA | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegRestoreKeyW | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegSaveKeyA | |
| RegSaveKeyW | |
| RegSetKeySecurity | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegSetValueA | |
| RegSetValueExA | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegSetValueExW | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegSetValueW | |
| RegUnLoadKeyA | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegUnLoadKeyW | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegisterEventSourceA | |
| RegisterEventSourceW | |
| RegisterServiceCtrlHandlerA | implemented as jump to API-MS-WIN-Service-winsvc-L1-1-0 in 6.1 and higher |
| RegisterServiceCtrlHandlerW | implemented as jump to API-MS-WIN-Service-winsvc-L1-1-0 in 6.1 and higher |
| ReportEventA | |
| ReportEventW | |
| RevertToSelf | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| SetAclInformation | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| SetFileSecurityA | |
| SetFileSecurityW | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| SetKernelObjectSecurity | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| SetPrivateObjectSecurity | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| SetSecurityDescriptorDacl | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| SetSecurityDescriptorGroup | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| SetSecurityDescriptorOwner | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| SetSecurityDescriptorSacl | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| SetServiceBits | |
| SetServiceObjectSecurity | implemented as jump to API-MS-WIN-Service-Management-L2-1-0 in 6.1 and higher |
| SetServiceStatus | implemented as jump to API-MS-WIN-Service-Core-L1-1-0 in 6.1 and higher |
| SetThreadToken | implemented as jump to API-MS-Win-Core-ProcessThreads-L1-1-0 in 6.1 and higher |
| SetTokenInformation | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| StartServiceA | implemented as jump to API-MS-WIN-Service-winsvc-L1-1-0 in 6.1 and higher |
| StartServiceCtrlDispatcherA | implemented as jump to API-MS-WIN-Service-winsvc-L1-1-0 in 6.1 and higher |
| StartServiceCtrlDispatcherW | implemented as jump to API-MS-WIN-Service-Core-L1-1-0 in 6.1 and higher |
| StartServiceW | implemented as jump to API-MS-WIN-Service-Management-L1-1-0 in 6.1 and higher |
| SynchronizeWindows31FilesAndWindowsNTRegistry | NT only; discontinued in 5.2 |
| SystemFunction001 | NT only; forwarded to CRYPTBASE in 6.3 and higher |
| SystemFunction002 | NT only; forwarded to CRYPTBASE in 6.3 and higher |
| SystemFunction003 | NT only; forwarded to CRYPTBASE in 6.3 and higher |
| SystemFunction004 | NT only; forwarded to CRYPTBASE in 6.3 and higher |
| SystemFunction005 | NT only; forwarded to CRYPTBASE in 6.3 and higher |
| SystemFunction006 | NT only; forwarded to CRYPTSP in 6.2 and higher |
| SystemFunction007 | NT only; forwarded to CRYPTSP in 6.2 and higher |
| SystemFunction008 | NT only; forwarded to CRYPTSP in 6.2 and higher |
| SystemFunction009 | NT only; forwarded to CRYPTSP in 6.2 and higher |
| SystemFunction010 | NT only; forwarded to CRYPTSP in 6.2 and higher |
| SystemFunction011 | NT only; forwarded to CRYPTSP in 6.2 and higher |
| SystemFunction012 | NT only; forwarded to CRYPTSP in 6.2 and higher |
| SystemFunction013 | NT only; forwarded to CRYPTSP in 6.2 and higher |
| SystemFunction014 | NT only; forwarded to CRYPTSP in 6.2 and higher |
| SystemFunction015 | NT only; forwarded to CRYPTSP in 6.2 and higher |
| SystemFunction016 | NT only; forwarded to CRYPTSP in 6.3 and higher |
| SystemFunction017 | NT only |
| SystemFunction018 | NT only; forwarded to CRYPTSP in 6.3 and higher |
| SystemFunction019 | NT only |
| SystemFunction020 | NT only; forwarded to CRYPTSP in 6.2 and higher |
| SystemFunction021 | NT only; forwarded to CRYPTSP in 6.2 and higher |
| SystemFunction022 | NT only; forwarded to CRYPTSP in 6.2 and higher |
| SystemFunction023 | NT only; forwarded to CRYPTSP in 6.2 and higher |
| SystemFunction024 | NT only; forwarded to CRYPTSP in 6.2 and higher |
| SystemFunction025 | NT only; forwarded to CRYPTSP in 6.2 and higher |
| SystemFunction026 | NT only; forwarded to CRYPTSP in 6.2 and higher |
| SystemFunction027 | NT only; forwarded to CRYPTSP in 6.2 and higher |
| SystemFunction028 | NT only; forwarded to CRYPTBASE in 6.3 and higher |
| SystemFunction029 | NT only; forwarded to CRYPTBASE in 6.3 and higher |
| SystemFunction030 | NT only; forwarded to CRYPTSP in 6.2 and higher |
| SystemFunction031 | NT only; forwarded to CRYPTSP in 6.2 and higher |
| SystemFunction032 | NT only; forwarded to CRYPTSP in 6.2 and higher |
| SystemFunction033 | NT only; forwarded to CRYPTSP in 6.2 and higher |
| UnlockServiceDatabase |