Geoff Chappell, Software Analyst
The table below lists all the functions that are first exported from ADVAPI32 by name in version 5.1, i.e., for Windows XP.
| Function | Remarks |
|---|---|
| A_SHAFinal | forwarded to NTDLL in 6.0 and higher |
| A_SHAInit | forwarded to NTDLL in 6.0 and higher |
| A_SHAUpdate | forwarded to NTDLL in 6.0 and higher |
| CloseCodeAuthzLevel | |
| ComputeAccessTokenFromCodeAuthzLevel | |
| ConvertStringSDToSDDomainA | |
| ConvertStringSDToSDDomainW | |
| CreateCodeAuthzLevel | |
| CreatePrivateObjectSecurityWithMultipleInheritance | implemented as jump to API-MS-Win-Security-Base-L1-1-0 in 6.1 and higher |
| CredDeleteA | |
| CredDeleteW | |
| CredEnumerateA | |
| CredEnumerateW | |
| CredFree | |
| CredGetSessionTypes | |
| CredGetTargetInfoA | |
| CredGetTargetInfoW | |
| CredIsMarshaledCredentialA | |
| CredIsMarshaledCredentialW | |
| CredMarshalCredentialA | |
| CredMarshalCredentialW | |
| CredProfileLoaded | |
| CredReadA | |
| CredReadDomainCredentialsA | |
| CredReadDomainCredentialsW | |
| CredReadW | |
| CredRenameA | |
| CredRenameW | |
| CredUnmarshalCredentialA | |
| CredUnmarshalCredentialW | |
| CredWriteA | |
| CredWriteDomainCredentialsA | |
| CredWriteDomainCredentialsW | |
| CredWriteW | |
| CredpConvertCredential | |
| CredpConvertTargetInfo | |
| CredpDecodeCredential | |
| CredpEncodeCredential | |
| EncryptedFileKeyInfo | |
| EnumerateTraceGuids | forwarded to NTDLL function EtwEnumerateTraceGuids in 5.2 only |
| FlushTraceA | forwarded to NTDLL function EtwFlushTraceA in 5.2 only |
| FlushTraceW | forwarded to NTDLL function EtwFlushTraceW in 5.2 only |
| FreeEncryptedFileKeyInfo | |
| FreeInheritedFromArray | |
| GetInformationCodeAuthzLevelW | |
| GetInformationCodeAuthzPolicyW | |
| GetInheritanceSourceA | |
| GetInheritanceSourceW | |
| GetLocalManagedApplicationData | |
| GetManagedApplicationCategories | |
| I_ScSendTSMessage | forwarded to API-MS-Win-Service-winsvc-L1-1-0 in 6.1 only; forwarded to api-ms-win-service-private-l1-1-0 in 6.2 and higher |
| IdentifyCodeAuthzLevelW | |
| IsTokenUntrusted | |
| LogonUserExA | |
| LogonUserExW | |
| LsaICLookupNamesWithCreds | |
| LsaICLookupSidsWithCreds | |
| LsaLookupNames2 | |
| LsaQueryForestTrustInformation | documented for servers only (thus as requiring at least Windows Server 2003) |
| LsaSetForestTrustInformation | documented for servers only (thus as requiring at least Windows Server 2003) |
| MD4Final | forwarded to NTDLL in 6.0 and higher |
| MD4Init | forwarded to NTDLL in 6.0 and higher |
| MD4Update | forwarded to NTDLL in 6.0 and higher |
| MD5Final | forwarded to NTDLL in 6.0 and higher |
| MD5Init | forwarded to NTDLL in 6.0 and higher |
| MD5Update | forwarded to NTDLL in 6.0 and higher |
| MSChapSrvChangePassword | documented for servers only (thus as requiring at least Windows Server 2003) |
| MSChapSrvChangePassword2 | documented for servers only (thus as requiring at least Windows Server 2003) |
| ProcessIdleTasks | |
| QueryTraceA | forwarded to NTDLL function EtwQueryTraceA in 5.2 only |
| QueryTraceW | forwarded to NTDLL function EtwQueryTraceW in 5.2 only |
| RegDisablePredefinedCacheEx | begins in SP3; not in 5.2; implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher; documented as requiring at least Windows Vista |
| RegSaveKeyExA | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegSaveKeyExW | implemented as jump to API-MS-Win-Core-LocalRegistry-L1-1-0 in 6.1 and higher |
| RegisterIdleTask | |
| SaferCloseLevel | |
| SaferComputeTokenFromLevel | |
| SaferCreateLevel | |
| SaferGetLevelInformation | |
| SaferGetPolicyInformation | |
| SaferIdentifyLevel | |
| SaferRecordEventLogEntry | |
| SaferSetLevelInformation | |
| SaferSetPolicyInformation | |
| SaferiChangeRegistryScope | |
| SaferiCompareTokenLevels | |
| SaferiIsExecutableFileType | |
| SaferiPopulateDefaultsInRegistry | |
| SaferiRecordEventLogEntry | |
| SaferiReplaceProcessThreadTokens | discontinued in 6.1 |
| SaferiSearchMatchingHashRules | |
| SetInformationCodeAuthzLevelW | |
| SetInformationCodeAuthzPolicyW | |
| StopTraceA | forwarded to NTDLL function EtwStopTraceA in 5.2 only; documented as requiring at least Windows 2000 |
| StopTraceW | forwarded to NTDLL function EtwStopTraceW in 5.2 only; documented as requiring at least Windows 2000 |
| SystemFunction036 | forwarded to CRYPTBASE in 6.3 and higher; documented as RtlGenRandom; undocumented until 2004-2006 |
| TraceMessage | forwarded to NTDLL function EtwTraceMessage in 5.2 and higher |
| TraceMessageVa | forwarded to NTDLL function EtwTraceMessageVa in 5.2 and higher |
| TreeResetNamedSecurityInfoA | |
| TreeResetNamedSecurityInfoW | |
| UnregisterIdleTask | |
| UpdateTraceA | forwarded to NTDLL function EtwUpdateTraceA in 5.2 only; documented as requiring at least Windows 2000 |
| UpdateTraceW | forwarded to NTDLL function EtwUpdateTraceW in 5.2 only; documented as requiring at least Windows 2000 |
| WdmWmiServiceMain | discontinued in 6.0 |
| WmiCloseTraceWithCursor | begins from SP1; discontinued in 6.0 |
| WmiConvertTimestamp | begins from SP1; discontinued in 6.0 |
| WmiGetFirstTraceOffset | discontinued in 6.0 |
| WmiGetNextEvent | begins from SP1; discontinued in 6.0 |
| WmiGetTraceHeader | discontinued in 6.0 |
| WmiOpenTraceWithCursor | begins from SP1; discontinued in 6.0 |
| WmiParseTraceEvent | discontinued in 6.0 |
| WmiQueryAllDataMultipleA | |
| WmiQueryAllDataMultipleW | |
| WmiQuerySingleInstanceMultipleA | |
| WmiQuerySingleInstanceMultipleW | |
| WmiReceiveNotificationsA | forwarded to NTDLL function EtwReceiveNotificationsA in 5.2 only |
| WmiReceiveNotificationsW | forwarded to NTDLL function EtwReceiveNotificationsW in 5.2 only |
| Wow64Win32ApiEntry | discontinued in 6.1 |