Windows 7 DLL File Information - Advapi32

Windows 7 DLL File Information - advapi32.dll

file:///C|/Users/System Administrator/Desktop/Assorted/NirSoft/Windows 7 DLL File Information - advapi32_dll.htm[5/27/2011 1:40:45 PM]

Main Page Feedback NirSoft Utilities


The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory ofWindows 7, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL,go to the main page of this Web site.

General Information

File Description: Advanced Windows 32 Base API

File Version: 6.1.7100.0 (winmain_win7rc.090421-1700)

Company: Microsoft Corporation

Product Name: Microsoft Windows Operating System

DLL popularity Very High - 848 other DLL files in system32 directory are statically linked tothis file.

File Size: 625 KB

Total Number of Exported Functions: 806

Total Number of Exported Functions WithNames: 805

Section Headers

Name Virtual Address Raw Data Size % of File Characteristics Section Contains...

.text 0x00001000 465,920 Bytes 72.8% Read, Execute Code

.data 0x00073000 11,776 Bytes 1.8% Write, Read Initialized Data

.rsrc 0x00077000 143,872 Bytes 22.5% Read Initialized Data

.reloc 0x0009b000 16,896 Bytes 2.6% Read, Discardable Initialized Data

Static Linking

advapi32.dll is statically linked to the following files:

msvcrt.dllntdll.dllKERNELBASE.dllAPI-MS-WIN-Service-Core-L1-1-0.dll

http://www.win7dll.info/


http://www.win7dll.info/feedback.html

http://www.nirsoft.net/


http://www.win7dll.info/msvcrt_dll.html

http://www.win7dll.info/ntdll_dll.html

http://www.win7dll.info/kernelbase_dll.html

http://www.win7dll.info/api-ms-win-service-core-l1-1-0_dll.html



API-MS-WIN-Service-winsvc-L1-1-0.dllAPI-MS-WIN-Service-Management-L1-1-0.dllAPI-MS-WIN-Service-Management-L2-1-0.dllAPI-MS-Win-Core-LocalRegistry-L1-1-0.dllAPI-MS-Win-Core-NamedPipe-L1-1-0.dllAPI-MS-Win-Core-ProcessThreads-L1-1-0.dllAPI-MS-Win-Security-Base-L1-1-0.dllKERNEL32.dllRPCRT4.dll

This means that when advapi32.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted ormissing, advapi32.dll won't be loaded.

General Resources Information

Resource Type Number of Items Total Size % of File

Icons 0 0 Bytes 0.0%

Animated Icons 0 0 Bytes 0.0%

Cursors 0 0 Bytes 0.0%

Animated Cursors 0 0 Bytes 0.0%

Bitmaps 0 0 Bytes 0.0%

AVI Files 0 0 Bytes 0.0%

Dialog-Boxes 0 0 Bytes 0.0%

HTML Related Files 0 0 Bytes 0.0%

Menus 0 0 Bytes 0.0%

Strings 241 40,268 Bytes 6.3%

Type Libraries 0 0 Bytes 0.0%

Manifest 0 0 Bytes 0.0%

All Others 6 432,372 Bytes 67.6%

Total 247 472,640 Bytes 73.8%

Icons in this file

No icons found in this file

Cursors in this file

No cursors found in this file

http://www.win7dll.info/api-ms-win-service-winsvc-l1-1-0_dll.html

http://www.win7dll.info/api-ms-win-service-management-l1-1-0_dll.html


http://www.win7dll.info/api-ms-win-core-localregistry-l1-1-0_dll.html

http://www.win7dll.info/api-ms-win-core-namedpipe-l1-1-0_dll.html

http://www.win7dll.info/api-ms-win-core-processthreads-l1-1-0_dll.html

http://www.win7dll.info/api-ms-win-security-base-l1-1-0_dll.html

http://www.win7dll.info/kernel32_dll.html

http://www.win7dll.info/rpcrt4_dll.html



Dialog-boxes list (up to 200 dialogs)

No dialog resources in this file.

String resources in this dll (up to 200 strings)

StringID String Text

1 Processor Information

2 Processor Information

3

The Processor Information performance counter set consists of counters that measure aspects of processor activity. Theprocessor is the part of the computer that performs arithmetic and logical computations, initiates operations on peripherals,and runs the threads of processes. A computer can have multiple processors. The Processor Information counter setrepresents each processor as an instance of the counter set.

5 % Processor Time

6 % Processor Time

7

% Processor Time is the percentage of elapsed time that the processor spends to execute a non-Idle thread. It is calculatedby measuring the percentage of time that the processor spends executing the idle thread and then subtracting that valuefrom 100%. (Each processor has an idle thread to which time is accumulated when no other threads are ready to run). Thiscounter is the primary indicator of processor activity, and displays the average percentage of busy time observed duringthe sample interval. It should be noted that the accounting calculation of whether the processor is idle is performed at aninternal sampling interval of the system clock tick. On todays fast processors, % Processor Time can thereforeunderestimate the processor utilization as the processor may be spending a lot of time servicing threads between thesystem clock sampling interval. Workload based timer applications are one example of applications which are more likelyto be measured inaccurately as timers are signaled just after the sample is taken.

9 % User Time

10 % User Time

11

% User Time is the percentage of elapsed time the processor spends in the user mode. User mode is a restrictedprocessing mode designed for applications, environment subsystems, and integral subsystems. The alternative, privilegedmode, is designed for operating system components and allows direct access to hardware and all memory. The operatingsystem switches application threads to privileged mode to access operating system services. This counter displays theaverage busy time as a percentage of the sample time.

13 % Privileged Time

14 % Privileged Time

15

% Privileged Time is the percentage of elapsed time that the process threads spent executing code in privileged mode.When a Windows system service in called, the service will often run in privileged mode to gain access to system-privatedata. Such data is protected from access by threads executing in user mode. Calls to the system can be explicit or implicit,such as page faults or interrupts. Unlike some early operating systems, Windows uses process boundaries for subsystemprotection in addition to the traditional protection of user and privileged modes. Some work done by Windows on behalfof the application might appear in other subsystem processes in addition to the privileged time in the process.

17 Interrupts/sec

18 Interrupts/sec

19

Interrupts/sec is the average rate, in incidents per second, at which the processor received and serviced hardwareinterrupts. It does not include deferred procedure calls (DPCs), which are counted separately. This value is an indirectindicator of the activity of devices that generate interrupts, such as the system clock, the mouse, disk drivers, datacommunication lines, network interface cards, and other peripheral devices. These devices normally interrupt the



processor when they have completed a task or require attention. Normal thread execution is suspended. The system clocktypically interrupts the processor every 10 milliseconds, creating a background of interrupt activity. This counter displaysthe difference between the values observed in the last two samples, divided by the duration of the sample interval.

21 % DPC Time

22 % DPC Time

23

% DPC Time is the percentage of time that the processor spent receiving and servicing deferred procedure calls (DPCs)during the sample interval. DPCs are interrupts that run at a lower priority than standard interrupts. % DPC Time is acomponent of % Privileged Time because DPCs are executed in privileged mode. They are counted separately and are nota component of the interrupt counters. This counter displays the average busy time as a percentage of the sample time.

25 % Interrupt Time

26 % Interrupt Time

27

% Interrupt Time is the time the processor spends receiving and servicing hardware interrupts during sample intervals.This value is an indirect indicator of the activity of devices that generate interrupts, such as the system clock, the mouse,disk drivers, data communication lines, network interface cards and other peripheral devices. These devices normallyinterrupt the processor when they have completed a task or require attention. Normal thread execution is suspended duringinterrupts. Most system clocks interrupt the processor every 10 milliseconds, creating a background of interrupt activity.suspends normal thread execution during interrupts. This counter displays the average busy time as a percentage of thesample time.

29 DPCs Queued/sec

30 DPCs Queued/sec

31

DPCs Queued/sec is the average rate, in incidents per second, at which deferred procedure calls (DPCs) were added to theprocessor's DPC queue. DPCs are interrupts that run at a lower priority than standard interrupts. Each processor has itsown DPC queue. This counter measures the rate that DPCs are added to the queue, not the number of DPCs in the queue.This counter displays the difference between the values observed in the last two samples, divided by the duration of thesample interval.

33 DPC Rate

34 DPC Rate

35

DPC Rate is the rate at which deferred procedure calls (DPCs) were added to the processors DPC queues between thetimer ticks of the processor clock. DPCs are interrupts that run at alower priority than standard interrupts. Each processorhas its own DPC queue. This counter measures the rate that DPCs were added to the queue, not the number of DPCs inthe queue. This counter displays the last observed value only; it is not an average.

37 % Idle Time

38 % Idle Time

39 % Idle Time is the percentage of time the processor is idle during the sample interval

41 % C1 Time

42 % C1 Time

43% C1 Time is the percentage of time the processor spends in the C1 low-power idle state. % C1 Time is a subset of thetotal processor idle time. C1 low-power idle state enables the processor to maintain its entire context and quickly return tothe running state. Not all systems support the % C1 state.

45 % C2 Time

46 % C2 Time

47% C2 Time is the percentage of time the processor spends in the C2 low-power idle state. % C2 Time is a subset of thetotal processor idle time. C2 low-power idle state enables the processor to maintain the context of the system caches. TheC2 power state is a lower power and higher exit latency state than C1. Not all systems support the C2 state.



49 % C3 Time

50 % C3 Time

51% C3 Time is the percentage of time the processor spends in the C3 low-power idle state. % C3 Time is a subset of thetotal processor idle time. When the processor is in the C3 low-power idle state it is unable to maintain the coherency of itscaches. The C3 power state is a lower power and higher exit latency state than C2. Not all systems support the C3 state.

53 C1 Transitions/sec


55C1 Transitions/sec is the rate that the CPU enters the C1 low-power idle state. The CPU enters the C1 state when it issufficiently idle and exits this state on any interrupt. This counter displays the difference between the values observed inthe last two samples, divided by the duration of the sample interval.







65 % Priority Time

66 % Priority Time

67

% Priority Time is the percentage of elapsed time that the processor spends executing threads that are not low priority. Itis calculated by measuring the percentage of time that the processor spends executing low priority threads or the idlethread and then subtracting that value from 100%. (Each processor has an idle thread to which time is accumulated whenno other threads are ready to run). This counter displays the average percentage of busy time observed during the sampleinterval excluding low priority background work. It should be noted that the accounting calculation of whether theprocessor is idle is performed at an internal sampling interval of the system clock tick. % Priority Time can thereforeunderestimate the processor utilization as the processor may be spending a lot of time servicing threads between thesystem clock sampling interval. Workload based timer applications are one example of applications which are more likelyto be measured inaccurately as timers are signaled just after the sample is taken.

69 Parking Status

70 Parking Status

71 Parking Status represents whether a processor is parked or not.

73 Processor Frequency

74 Processor Frequency

75 Processor Frequency is the frequency of the current processor in megahertz.

77 % of Maximum Frequency

78 % of Maximum Frequency

79 % of Maximum Frequency is the percentage of the current processor's maximum frequency.

81 Processor State Flags





85 Synchronization

86 Synchronization

87 The Synchronization performance object consists of counters for kernel synchronization. The synchronization objectrepresents each processor as an instance of the object.

89 Spinlock Acquires/sec

90 Spinlock Acquires/sec

91 Spinlock acquires/sec is the rate of spinlock acquisitions. It includes the basic spinlocks, queued spinlocks, in-stackqueued spinlocks, and shared spinlocks acquisitions.

93 Spinlock Contentions/sec

94 Spinlock Contentions/sec

95 Spinlock contentions/sec is the rate of spinlock contentions. It includes the basic spinlocks, queued spinlocks, in-stackqueued spinlocks, and shared spinlocks contentions.

97 Spinlock Spins/sec

98 Spinlock Spins/sec

99 Spinlock spins/sec is the rate of spinlock spins. It includes the spins to acquire basic spinlocks, queued spinlocks, in-stackqueued spinlocks, and shared spinlocks.

101 IPI Send Broadcast Requests/sec

102 IPI Send Broadcast Requests/sec

103 IPI Send Broadcast Requests/sec is the rate of IPI broadcast requests.

105 IPI Send Routine Requests/sec

106 IPI Send Routine Requests/sec

107 IPI Send Routine Requests/sec is the rate of IPI routine requests.

109 IPI Send Software Interrupts/sec

110 IPI Send Software Interrupts/sec

111 IPI Send Software Interrrupts/sec is the rate of software interrupts.

113 Exec. Resource Total Initialize/sec

114 Exec. Resource Total Initialize/sec

115 Frequency of initialization operations on Executive Resources.

117 Exec. Resource Total Re-Initialize/sec

118 Exec. Resource Total Re-Initialize/sec

119 Frequency of re-initialization operations on Executive Resources.

121 Exec. Resource Total Delete/sec

122 Exec. Resource Total Delete/sec

123 Frequency of delete operations on Executive Resources.

125 Exec. Resource Total Acquires/sec

126 Exec. Resource Total Acquires/sec



127 Frequency of acquire operations on Executive Resources.

129 Exec. Resource Total Contentions/sec

130 Exec. Resource Total Contentions/sec

131 Contention rate on Executive Resources.

133 Exec. Resource Total Exclusive Releases/sec

134 Exec. Resource Total Exclusive Releases/sec

135 Frequency of Exclusive releases on Executive Resources.

137 Exec. Resource Total Shared Releases/sec

138 Exec. Resource Total Shared Releases/sec

139 Frequency of Shared releases on Executive Resources.

141 Exec. Resource Total Conv. Exclusive To Shared/sec

142 Exec. Resource Total Conv. Exclusive To Shared/sec

143 Frequency of convert to shared operations on Executive Resources.

145 Exec. Resource Attempts AcqExclLite/sec

146 Exec. Resource Attempts AcqExclLite/sec

147 Frequency of acquire exclusive attempts on Executive Resources from ExAcquireResourceExclusiveLite.

149 Exec. Resource Acquires AcqExclLite/sec

150 Exec. Resource Acquires AcqExclLite/sec

151 Frequency of first exclusive acquires from ExAcquireResourceExclusiveLite.

153 Exec. Resource Recursive Excl. Acquires AcqExclLite/sec

154 Exec. Resource Recursive Excl. Acquires AcqExclLite/sec

155 Frequency of recursive exclusive acquires from ExAcquireResourceExclusiveLite.

157 Exec. Resource Contention AcqExclLite/sec

158 Exec. Resource Contention AcqExclLite/sec

159 Frequency of waits during exclusive acquire attempts from ExAcquireResourceExclusiveLite.

161 Exec. Resource no-Waits AcqExclLite/sec

162 Exec. Resource no-Waits AcqExclLite/sec

163 Frequency of no-waits during exclusive acquire attempts from ExAcquireResourceExclusiveLite.

165 Exec. Resource Attempts AcqShrdLite/sec

166 Exec. Resource Attempts AcqShrdLite/sec

167 Frequency of acquire shared attempts on Executive Resources from ExAcquireResourceSharedLite.

169 Exec. Resource Recursive Excl. Acquires AcqShrdLite/sec

170 Exec. Resource Recursive Excl. Acquires AcqShrdLite/sec

171 Frequency of recursive exclusive acquires from ExAcquireResourceSharedLite.

173 Exec. Resource Acquires AcqShrdLite/sec



174 Exec. Resource Acquires AcqShrdLite/sec

175 Frequency of first shared acquires from ExAcquireResourceSharedLite.

177 Exec. Resource Recursive Sh. Acquires AcqShrdLite/sec

178 Exec. Resource Recursive Sh. Acquires AcqShrdLite/sec

179 Frequency of recursive shared acquires from ExAcquireResourceSharedLite.

181 Exec. Resource Contention AcqShrdLite/sec

182 Exec. Resource Contention AcqShrdLite/sec

183 Frequency of waits during acquire attempts from ExAcquireResourceSharedLite.

185 Exec. Resource no-Waits AcqShrdLite/sec

186 Exec. Resource no-Waits AcqShrdLite/sec

187 Frequency of no-waits during acquire attempts from ExAcquireResourceSharedLite.

189 Exec. Resource Attempts AcqShrdStarveExcl/sec

190 Exec. Resource Attempts AcqShrdStarveExcl/sec

191 Frequency of acquire shared attempts on Executive Resources from ExAcquireSharedStarveExclusive.

193 Exec. Resource Recursive Excl. Acquires AcqShrdStarveExcl/sec

194 Exec. Resource Recursive Excl. Acquires AcqShrdStarveExcl/sec

195 Frequency of recursive exclusive acquires from ExAcquireSharedStarveExclusive.

197 Exec. Resource Acquires AcqShrdStarveExcl/sec

198 Exec. Resource Acquires AcqShrdStarveExcl/sec

199 Frequency of first shared acquires from ExAcquireSharedStarveExclusive.

201 Exec. Resource Recursive Sh. Acquires AcqShrdStarveExcl/sec

202 Exec. Resource Recursive Sh. Acquires AcqShrdStarveExcl/sec

203 Frequency of recursive shared acquires from ExAcquireSharedStarveExclusive.

205 Exec. Resource Contention AcqShrdStarveExcl/sec

206 Exec. Resource Contention AcqShrdStarveExcl/sec

207 Frequency of waits during shared acquire attempts from ExAcquireSharedStarveExclusive.

209 Exec. Resource no-Waits AcqShrdStarveExcl/sec

210 Exec. Resource no-Waits AcqShrdStarveExcl/sec

211 Frequency of no-waits during shared acquire attempts from ExAcquireSharedStarveExclusive.

213 Exec. Resource Attempts AcqShrdWaitForExcl/sec

214 Exec. Resource Attempts AcqShrdWaitForExcl/sec

215 Frequency of acquire shared attempts on Executive Resources from ExAcquireSharedWaitForExclusive.

217 Exec. Resource Recursive Excl. Acquires AcqShrdWaitForExcl/sec

218 Exec. Resource Recursive Excl. Acquires AcqShrdWaitForExcl/sec

219 Frequency of recursive exclusive acquires from ExAcquireSharedWaitForExclusive.



221 Exec. Resource Acquires AcqShrdWaitForExcl/sec

222 Exec. Resource Acquires AcqShrdWaitForExcl/sec

223 Frequency of first shared acquires from ExAcquireSharedWaitForExclusive.

225 Exec. Resource Recursive Sh. Acquires AcqShrdWaitForExcl/sec

226 Exec. Resource Recursive Sh. Acquires AcqShrdWaitForExcl/sec

227 Frequency of recursive shared acquires from ExAcquireSharedWaitForExclusive.

229 Exec. Resource Contention AcqShrdWaitForExcl/sec

230 Exec. Resource Contention AcqShrdWaitForExcl/sec

231 Frequency of waits during shared acquire attempts from ExAcquireSharedWaitForExclusive.

233 Exec. Resource no-Waits AcqShrdWaitForExcl/sec

234 Exec. Resource no-Waits AcqShrdWaitForExcl/sec

235 Frequency of no-waits during exclusive acquire attempts from ExAcquireSharedWaitForExclusive.

237 Exec. Resource Set Owner Pointer Exclusive/sec

238 Exec. Resource Set Owner Pointer Exclusive/sec

239 Frequency of ExSetResourceOwnerPointer to an exclusive owner.

241 Exec. Resource Set Owner Pointer Shared (New Owner)/sec

242 Exec. Resource Set Owner Pointer Shared (New Owner)/sec

243 Frequency of ExSetResourceOwnerPointer to a new shared owner.

245 Exec. Resource Set Owner Pointer Shared (Existing Owner)/sec

246 Exec. Resource Set Owner Pointer Shared (Existing Owner)/sec

247 Frequency of ExSetResourceOwnerPointer to an existing shared owner.

249 Exec. Resource Boost Excl. Owner/sec

250 Exec. Resource Boost Excl. Owner/sec

251 Frequency of boosting exclusive ownwer when waiting for this Executive Resource.

253 Exec. Resource Boost Shared Owners/sec

254 Exec. Resource Boost Shared Owners/sec

255 Frequency of boosting shared ownwer(s) when waiting for this Executive Resource.

257 Event Tracing for Windows

258 Event Tracing for Windows

259 The counters in this collection refer to system-wide metrics about the performance of the Event Tracing for Windowssubsystem.

261 Total Number of Distinct Enabled Providers

262 Total Number of Distinct Enabled Providers

263 Number of distinct event providers that are enabled to ETW sessions; multiple instances of a provider are counted onlyonce.

265 Total Number of Distinct Pre-Enabled Providers



266 Total Number of Distinct Pre-Enabled Providers

COM Classes/Interfaces

There is no type library in this file with COM classes/interfaces information

Exported Functions List

The following functions are exported by this dll:A_SHAFinal A_SHAInitA_SHAUpdate AbortSystemShutdownAAbortSystemShutdownW AccessCheckAccessCheckAndAuditAlarmA AccessCheckAndAuditAlarmWAccessCheckByType AccessCheckByTypeAndAuditAlarmAAccessCheckByTypeAndAuditAlarmW AccessCheckByTypeResultListAccessCheckByTypeResultListAndAuditAlarmA AccessCheckByTypeResultListAndAuditAlarmByHandleAAccessCheckByTypeResultListAndAuditAlarmByHandleW AccessCheckByTypeResultListAndAuditAlarmWAddAccessAllowedAce AddAccessAllowedAceExAddAccessAllowedObjectAce AddAccessDeniedAceAddAccessDeniedAceEx AddAccessDeniedObjectAceAddAce AddAuditAccessAceAddAuditAccessAceEx AddAuditAccessObjectAceAddConditionalAce AddMandatoryAceAddUsersToEncryptedFile AddUsersToEncryptedFileExAdjustTokenGroups AdjustTokenPrivilegesAllocateAndInitializeSid AllocateLocallyUniqueIdAreAllAccessesGranted AreAnyAccessesGrantedAuditComputeEffectivePolicyBySid AuditComputeEffectivePolicyByTokenAuditEnumerateCategories AuditEnumeratePerUserPolicyAuditEnumerateSubCategories AuditFreeAuditLookupCategoryGuidFromCategoryId AuditLookupCategoryIdFromCategoryGuidAuditLookupCategoryNameA AuditLookupCategoryNameWAuditLookupSubCategoryNameA AuditLookupSubCategoryNameWAuditQueryGlobalSaclA AuditQueryGlobalSaclWAuditQueryPerUserPolicy AuditQuerySecurityAuditQuerySystemPolicy AuditSetGlobalSaclAAuditSetGlobalSaclW AuditSetPerUserPolicyAuditSetSecurity AuditSetSystemPolicyBackupEventLogA BackupEventLogWBuildExplicitAccessWithNameA BuildExplicitAccessWithNameWBuildImpersonateExplicitAccessWithNameA BuildImpersonateExplicitAccessWithNameWBuildImpersonateTrusteeA BuildImpersonateTrusteeWBuildSecurityDescriptorA BuildSecurityDescriptorWBuildTrusteeWithNameA BuildTrusteeWithNameWBuildTrusteeWithObjectsAndNameA BuildTrusteeWithObjectsAndNameWBuildTrusteeWithObjectsAndSidA BuildTrusteeWithObjectsAndSidW



BuildTrusteeWithSidA BuildTrusteeWithSidWCancelOverlappedAccess ChangeServiceConfig2AChangeServiceConfig2W ChangeServiceConfigAChangeServiceConfigW CheckTokenMembershipClearEventLogA ClearEventLogWCloseCodeAuthzLevel CloseEncryptedFileRawCloseEventLog CloseServiceHandleCloseThreadWaitChainSession CloseTraceCommandLineFromMsiDescriptor ComputeAccessTokenFromCodeAuthzLevelControlService ControlServiceExAControlServiceExW ControlTraceAControlTraceW ConvertAccessToSecurityDescriptorAConvertAccessToSecurityDescriptorW ConvertSDToStringSDRootDomainAConvertSDToStringSDRootDomainW ConvertSecurityDescriptorToAccessAConvertSecurityDescriptorToAccessNamedA ConvertSecurityDescriptorToAccessNamedWConvertSecurityDescriptorToAccessW ConvertSecurityDescriptorToStringSecurityDescriptorAConvertSecurityDescriptorToStringSecurityDescriptorW ConvertSidToStringSidAConvertSidToStringSidW ConvertStringSDToSDDomainAConvertStringSDToSDDomainW ConvertStringSDToSDRootDomainAConvertStringSDToSDRootDomainW ConvertStringSecurityDescriptorToSecurityDescriptorAConvertStringSecurityDescriptorToSecurityDescriptorW ConvertStringSidToSidAConvertStringSidToSidW ConvertToAutoInheritPrivateObjectSecurityCopySid CreateCodeAuthzLevelCreatePrivateObjectSecurity CreatePrivateObjectSecurityExCreatePrivateObjectSecurityWithMultipleInheritance CreateProcessAsUserACreateProcessAsUserW CreateProcessWithLogonWCreateProcessWithTokenW CreateRestrictedTokenCreateServiceA CreateServiceWCreateTraceInstanceId CreateWellKnownSidCredBackupCredentials CredDeleteACredDeleteW CredEncryptAndMarshalBinaryBlobCredEnumerateA CredEnumerateWCredFindBestCredentialA CredFindBestCredentialWCredFree CredGetSessionTypesCredGetTargetInfoA CredGetTargetInfoWCredIsMarshaledCredentialA CredIsMarshaledCredentialWCredIsProtectedA CredIsProtectedWCredMarshalCredentialA CredMarshalCredentialWCredProfileLoaded CredProfileUnloadedCredProtectA CredProtectWCredReadA CredReadByTokenHandleCredReadDomainCredentialsA CredReadDomainCredentialsWCredReadW CredRenameACredRenameW CredRestoreCredentialsCredUnmarshalCredentialA CredUnmarshalCredentialWCredUnprotectA CredUnprotectWCredWriteA CredWriteDomainCredentialsACredWriteDomainCredentialsW CredWriteWCredpConvertCredential CredpConvertOneCredentialSize



CredpConvertTargetInfo CredpDecodeCredentialCredpEncodeCredential CredpEncodeSecretCryptAcquireContextA CryptAcquireContextWCryptContextAddRef CryptCreateHashCryptDecrypt CryptDeriveKeyCryptDestroyHash CryptDestroyKeyCryptDuplicateHash CryptDuplicateKeyCryptEncrypt CryptEnumProviderTypesACryptEnumProviderTypesW CryptEnumProvidersACryptEnumProvidersW CryptExportKeyCryptGenKey CryptGenRandomCryptGetDefaultProviderA CryptGetDefaultProviderWCryptGetHashParam CryptGetKeyParamCryptGetProvParam CryptGetUserKeyCryptHashData CryptHashSessionKeyCryptImportKey CryptReleaseContextCryptSetHashParam CryptSetKeyParamCryptSetProvParam CryptSetProviderACryptSetProviderExA CryptSetProviderExWCryptSetProviderW CryptSignHashACryptSignHashW CryptVerifySignatureACryptVerifySignatureW DecryptFileADecryptFileW DeleteAceDeleteService DeregisterEventSourceDestroyPrivateObjectSecurity DuplicateEncryptionInfoFileDuplicateToken DuplicateTokenExElfBackupEventLogFileA ElfBackupEventLogFileWElfChangeNotify ElfClearEventLogFileAElfClearEventLogFileW ElfCloseEventLogElfDeregisterEventSource ElfFlushEventLogElfNumberOfRecords ElfOldestRecordElfOpenBackupEventLogA ElfOpenBackupEventLogWElfOpenEventLogA ElfOpenEventLogWElfReadEventLogA ElfReadEventLogWElfRegisterEventSourceA ElfRegisterEventSourceWElfReportEventA ElfReportEventAndSourceWElfReportEventW EnableTraceEnableTraceEx EnableTraceEx2EncryptFileA EncryptFileWEncryptedFileKeyInfo EncryptionDisableEnumDependentServicesA EnumDependentServicesWEnumServiceGroupW EnumServicesStatusAEnumServicesStatusExA EnumServicesStatusExWEnumServicesStatusW EnumerateTraceGuidsEnumerateTraceGuidsEx EqualDomainSidEqualPrefixSid EqualSidEventAccessControl EventAccessQueryEventAccessRemove EventActivityIdControlEventEnabled EventProviderEnabled



EventRegister EventUnregisterEventWrite EventWriteEndScenarioEventWriteEx EventWriteStartScenarioEventWriteString EventWriteTransferFileEncryptionStatusA FileEncryptionStatusWFindFirstFreeAce FlushEfsCacheFlushTraceA FlushTraceWFreeEncryptedFileKeyInfo FreeEncryptedFileMetadataFreeEncryptionCertificateHashList FreeInheritedFromArrayFreeSid GetAccessPermissionsForObjectAGetAccessPermissionsForObjectW GetAceGetAclInformation GetAuditedPermissionsFromAclAGetAuditedPermissionsFromAclW GetCurrentHwProfileAGetCurrentHwProfileW GetEffectiveRightsFromAclAGetEffectiveRightsFromAclW GetEncryptedFileMetadataGetEventLogInformation GetExplicitEntriesFromAclAGetExplicitEntriesFromAclW GetFileSecurityAGetFileSecurityW GetInformationCodeAuthzLevelWGetInformationCodeAuthzPolicyW GetInheritanceSourceAGetInheritanceSourceW GetKernelObjectSecurityGetLengthSid GetLocalManagedApplicationDataGetLocalManagedApplications GetManagedApplicationCategoriesGetManagedApplications GetMultipleTrusteeAGetMultipleTrusteeOperationA GetMultipleTrusteeOperationWGetMultipleTrusteeW GetNamedSecurityInfoAGetNamedSecurityInfoExA GetNamedSecurityInfoExWGetNamedSecurityInfoW GetNumberOfEventLogRecordsGetOldestEventLogRecord GetOverlappedAccessResultsGetPrivateObjectSecurity GetSecurityDescriptorControlGetSecurityDescriptorDacl GetSecurityDescriptorGroupGetSecurityDescriptorLength GetSecurityDescriptorOwnerGetSecurityDescriptorRMControl GetSecurityDescriptorSaclGetSecurityInfo GetSecurityInfoExAGetSecurityInfoExW GetServiceDisplayNameAGetServiceDisplayNameW GetServiceKeyNameAGetServiceKeyNameW GetSidIdentifierAuthorityGetSidLengthRequired GetSidSubAuthorityGetSidSubAuthorityCount GetThreadWaitChainGetTokenInformation GetTraceEnableFlagsGetTraceEnableLevel GetTraceLoggerHandleGetTrusteeFormA GetTrusteeFormWGetTrusteeNameA GetTrusteeNameWGetTrusteeTypeA GetTrusteeTypeWGetUserNameA GetUserNameWGetWindowsAccountDomainSid I_QueryTagInformationI_ScGetCurrentGroupStateW I_ScIsSecurityProcessI_ScPnPGetServiceName I_ScQueryServiceConfigI_ScSendPnPMessage I_ScSendTSMessageI_ScSetServiceBitsA I_ScSetServiceBitsW



I_ScValidatePnPService IdentifyCodeAuthzLevelWImpersonateAnonymousToken ImpersonateLoggedOnUserImpersonateNamedPipeClient ImpersonateSelfInitializeAcl InitializeSecurityDescriptorInitializeSid InitiateShutdownAInitiateShutdownW InitiateSystemShutdownAInitiateSystemShutdownExA InitiateSystemShutdownExWInitiateSystemShutdownW InstallApplicationIsTextUnicode IsTokenRestrictedIsTokenUntrusted IsValidAclIsValidRelativeSecurityDescriptor IsValidSecurityDescriptorIsValidSid IsWellKnownSidLockServiceDatabase LogonUserALogonUserExA LogonUserExExWLogonUserExW LogonUserWLookupAccountNameA LookupAccountNameWLookupAccountSidA LookupAccountSidWLookupPrivilegeDisplayNameA LookupPrivilegeDisplayNameWLookupPrivilegeNameA LookupPrivilegeNameWLookupPrivilegeValueA LookupPrivilegeValueWLookupSecurityDescriptorPartsA LookupSecurityDescriptorPartsWLsaAddAccountRights LsaAddPrivilegesToAccountLsaClearAuditLog LsaCloseLsaCreateAccount LsaCreateSecretLsaCreateTrustedDomain LsaCreateTrustedDomainExLsaDelete LsaDeleteTrustedDomainLsaEnumerateAccountRights LsaEnumerateAccountsLsaEnumerateAccountsWithUserRight LsaEnumeratePrivilegesLsaEnumeratePrivilegesOfAccount LsaEnumerateTrustedDomainsLsaEnumerateTrustedDomainsEx LsaFreeMemoryLsaGetQuotasForAccount LsaGetRemoteUserNameLsaGetSystemAccessAccount LsaGetUserNameLsaICLookupNames LsaICLookupNamesWithCredsLsaICLookupSids LsaICLookupSidsWithCredsLsaLookupNames LsaLookupNames2LsaLookupPrivilegeDisplayName LsaLookupPrivilegeNameLsaLookupPrivilegeValue LsaLookupSidsLsaManageSidNameMapping LsaNtStatusToWinErrorLsaOpenAccount LsaOpenPolicyLsaOpenPolicySce LsaOpenSecretLsaOpenTrustedDomain LsaOpenTrustedDomainByNameLsaQueryDomainInformationPolicy LsaQueryForestTrustInformationLsaQueryInfoTrustedDomain LsaQueryInformationPolicyLsaQuerySecret LsaQuerySecurityObjectLsaQueryTrustedDomainInfo LsaQueryTrustedDomainInfoByNameLsaRemoveAccountRights LsaRemovePrivilegesFromAccountLsaRetrievePrivateData LsaSetDomainInformationPolicyLsaSetForestTrustInformation LsaSetInformationPolicyLsaSetInformationTrustedDomain LsaSetQuotasForAccount



LsaSetSecret LsaSetSecurityObjectLsaSetSystemAccessAccount LsaSetTrustedDomainInfoByNameLsaSetTrustedDomainInformation LsaStorePrivateDataMD4Final MD4InitMD4Update MD5FinalMD5Init MD5UpdateMSChapSrvChangePassword MSChapSrvChangePassword2MakeAbsoluteSD MakeAbsoluteSD2MakeSelfRelativeSD MapGenericMaskNotifyBootConfigStatus NotifyChangeEventLogNotifyServiceStatusChange NotifyServiceStatusChangeANotifyServiceStatusChangeW ObjectCloseAuditAlarmAObjectCloseAuditAlarmW ObjectDeleteAuditAlarmAObjectDeleteAuditAlarmW ObjectOpenAuditAlarmAObjectOpenAuditAlarmW ObjectPrivilegeAuditAlarmAObjectPrivilegeAuditAlarmW OpenBackupEventLogAOpenBackupEventLogW OpenEncryptedFileRawAOpenEncryptedFileRawW OpenEventLogAOpenEventLogW OpenProcessTokenOpenSCManagerA OpenSCManagerWOpenServiceA OpenServiceWOpenThreadToken OpenThreadWaitChainSessionOpenTraceA OpenTraceWPerfAddCounters PerfCloseQueryHandlePerfCreateInstance PerfDecrementULongCounterValuePerfDecrementULongLongCounterValue PerfDeleteCountersPerfDeleteInstance PerfEnumerateCounterSetPerfEnumerateCounterSetInstances PerfIncrementULongCounterValuePerfIncrementULongLongCounterValue PerfOpenQueryHandlePerfQueryCounterData PerfQueryCounterInfoPerfQueryCounterSetRegistrationInfo PerfQueryInstancePerfSetCounterRefValue PerfSetCounterSetInfoPerfSetULongCounterValue PerfSetULongLongCounterValuePerfStartProvider PerfStartProviderExPerfStopProvider PrivilegeCheckPrivilegedServiceAuditAlarmA PrivilegedServiceAuditAlarmWProcessIdleTasks ProcessIdleTasksWProcessTrace QueryAllTracesAQueryAllTracesW QueryRecoveryAgentsOnEncryptedFileQuerySecurityAccessMask QueryServiceConfig2AQueryServiceConfig2W QueryServiceConfigAQueryServiceConfigW QueryServiceLockStatusAQueryServiceLockStatusW QueryServiceObjectSecurityQueryServiceStatus QueryServiceStatusExQueryTraceA QueryTraceWQueryUsersOnEncryptedFile ReadEncryptedFileRawReadEventLogA ReadEventLogWRegCloseKey RegConnectRegistryARegConnectRegistryExA RegConnectRegistryExW



RegConnectRegistryW RegCopyTreeARegCopyTreeW RegCreateKeyARegCreateKeyExA RegCreateKeyExWRegCreateKeyTransactedA RegCreateKeyTransactedWRegCreateKeyW RegDeleteKeyARegDeleteKeyExA RegDeleteKeyExWRegDeleteKeyTransactedA RegDeleteKeyTransactedWRegDeleteKeyValueA RegDeleteKeyValueWRegDeleteKeyW RegDeleteTreeARegDeleteTreeW RegDeleteValueARegDeleteValueW RegDisablePredefinedCacheRegDisablePredefinedCacheEx RegDisableReflectionKeyRegEnableReflectionKey RegEnumKeyARegEnumKeyExA RegEnumKeyExWRegEnumKeyW RegEnumValueARegEnumValueW RegFlushKeyRegGetKeySecurity RegGetValueARegGetValueW RegLoadAppKeyARegLoadAppKeyW RegLoadKeyARegLoadKeyW RegLoadMUIStringARegLoadMUIStringW RegNotifyChangeKeyValueRegOpenCurrentUser RegOpenKeyARegOpenKeyExA RegOpenKeyExWRegOpenKeyTransactedA RegOpenKeyTransactedWRegOpenKeyW RegOpenUserClassesRootRegOverridePredefKey RegQueryInfoKeyARegQueryInfoKeyW RegQueryMultipleValuesARegQueryMultipleValuesW RegQueryReflectionKeyRegQueryValueA RegQueryValueExARegQueryValueExW RegQueryValueWRegRenameKey RegReplaceKeyARegReplaceKeyW RegRestoreKeyARegRestoreKeyW RegSaveKeyARegSaveKeyExA RegSaveKeyExWRegSaveKeyW RegSetKeySecurityRegSetKeyValueA RegSetKeyValueWRegSetValueA RegSetValueExARegSetValueExW RegSetValueWRegUnLoadKeyA RegUnLoadKeyWRegisterEventSourceA RegisterEventSourceWRegisterIdleTask RegisterServiceCtrlHandlerARegisterServiceCtrlHandlerExA RegisterServiceCtrlHandlerExWRegisterServiceCtrlHandlerW RegisterTraceGuidsARegisterTraceGuidsW RegisterWaitChainCOMCallbackRemoveTraceCallback RemoveUsersFromEncryptedFileReportEventA ReportEventWRevertToSelf SaferCloseLevelSaferComputeTokenFromLevel SaferCreateLevelSaferGetLevelInformation SaferGetPolicyInformation



SaferIdentifyLevel SaferRecordEventLogEntrySaferSetLevelInformation SaferSetPolicyInformationSaferiChangeRegistryScope SaferiCompareTokenLevelsSaferiIsDllAllowed SaferiIsExecutableFileTypeSaferiPopulateDefaultsInRegistry SaferiRecordEventLogEntrySaferiSearchMatchingHashRules SetAclInformationSetEncryptedFileMetadata SetEntriesInAccessListASetEntriesInAccessListW SetEntriesInAclASetEntriesInAclW SetEntriesInAuditListASetEntriesInAuditListW SetFileSecurityASetFileSecurityW SetInformationCodeAuthzLevelWSetInformationCodeAuthzPolicyW SetKernelObjectSecuritySetNamedSecurityInfoA SetNamedSecurityInfoExASetNamedSecurityInfoExW SetNamedSecurityInfoWSetPrivateObjectSecurity SetPrivateObjectSecurityExSetSecurityAccessMask SetSecurityDescriptorControlSetSecurityDescriptorDacl SetSecurityDescriptorGroupSetSecurityDescriptorOwner SetSecurityDescriptorRMControlSetSecurityDescriptorSacl SetSecurityInfoSetSecurityInfoExA SetSecurityInfoExWSetServiceBits SetServiceObjectSecuritySetServiceStatus SetThreadTokenSetTokenInformation SetTraceCallbackSetUserFileEncryptionKey SetUserFileEncryptionKeyExStartServiceA StartServiceCtrlDispatcherAStartServiceCtrlDispatcherW StartServiceWStartTraceA StartTraceWStopTraceA StopTraceWSystemFunction001 SystemFunction002SystemFunction003 SystemFunction004SystemFunction005 SystemFunction006SystemFunction007 SystemFunction008SystemFunction009 SystemFunction010SystemFunction011 SystemFunction012SystemFunction013 SystemFunction014SystemFunction015 SystemFunction016SystemFunction017 SystemFunction018SystemFunction019 SystemFunction020SystemFunction021 SystemFunction022SystemFunction023 SystemFunction024SystemFunction025 SystemFunction026SystemFunction027 SystemFunction028SystemFunction029 SystemFunction030SystemFunction031 SystemFunction032SystemFunction033 SystemFunction034SystemFunction035 SystemFunction036SystemFunction040 SystemFunction041TraceEvent TraceEventInstanceTraceMessage TraceMessageVa



TraceSetInformation TreeResetNamedSecurityInfoATreeResetNamedSecurityInfoW TreeSetNamedSecurityInfoATreeSetNamedSecurityInfoW TrusteeAccessToObjectATrusteeAccessToObjectW UninstallApplicationUnlockServiceDatabase UnregisterIdleTaskUnregisterTraceGuids UpdateTraceAUpdateTraceW UsePinForEncryptedFilesAUsePinForEncryptedFilesW WmiCloseBlockWmiDevInstToInstanceNameA WmiDevInstToInstanceNameWWmiEnumerateGuids WmiExecuteMethodAWmiExecuteMethodW WmiFileHandleToInstanceNameAWmiFileHandleToInstanceNameW WmiFreeBufferWmiMofEnumerateResourcesA WmiMofEnumerateResourcesWWmiNotificationRegistrationA WmiNotificationRegistrationWWmiOpenBlock WmiQueryAllDataAWmiQueryAllDataMultipleA WmiQueryAllDataMultipleWWmiQueryAllDataW WmiQueryGuidInformationWmiQuerySingleInstanceA WmiQuerySingleInstanceMultipleAWmiQuerySingleInstanceMultipleW WmiQuerySingleInstanceWWmiReceiveNotificationsA WmiReceiveNotificationsWWmiSetSingleInstanceA WmiSetSingleInstanceWWmiSetSingleItemA WmiSetSingleItemWWriteEncryptedFileRaw

Imported Functions List

The following functions are imported by this dll:

msvcrt.dll:_errno _except_handler4_common _ftol2 _strcmpi_ultow _vsnprintf _vsnwprintf _wcsicmp_wcsnicmp _wcstoui64 isalnum isspaceiswctype mbstowcs memcpy memmovememset strchr strrchr strstrswprintf_s swscanf_s tolower wcscat_swcschr wcscpy_s wcsncmp wcsncpy_swcsrchr wcsstr wcstok wcstombswcstoul

ntdll.dll:DbgPrint EtwDeliverDataBlock EtwEnumerateProcessRegGuidsEtwEventRegister EtwEventUnregister EtwEventWriteEtwEventWriteEx EtwLogTraceEvent EtwProcessPrivateLoggerRequestEtwSendNotification EtwpGetCpuSpeed LdrGetProcedureAddressLdrLoadDll LdrUnloadDll NlsMbCodePageTagNtAlpcQueryInformation NtCancelIoFile NtClearEventNtClose NtCompareTokens NtCreateEventNtCreateFile NtCreateKey NtCreateKeyTransacted

http://www.win7dll.info/msvcrt_dll.html

http://www.win7dll.info/ntdll_dll.html



NtDelayExecution NtDeleteKey NtDeviceIoControlFileNtDuplicateObject NtDuplicateToken NtEnumerateKeyNtLoadKeyEx NtOpenFile NtOpenKeyNtOpenKeyEx NtOpenKeyTransacted NtOpenKeyTransactedExNtOpenProcessToken NtOpenSymbolicLinkObject NtOpenThreadTokenNtPowerInformation NtQueryInformationFile NtQueryInformationProcessNtQueryInformationThread NtQueryInformationToken NtQueryKeyNtQueryMultipleValueKey NtQueryMutant NtQueryObjectNtQueryPerformanceCounter NtQuerySecurityObject NtQuerySymbolicLinkObjectNtQuerySystemInformation NtQuerySystemInformation NtQuerySystemTimeNtQueryValueKey NtQueryVolumeInformationFile NtReadFileNtRenameKey NtReplaceKey NtSaveKeyNtSaveMergedKeys NtSetEvent NtSetInformationThreadNtSetInformationToken NtSetSystemInformation NtSetValueKeyNtTerminateThread NtTraceControl NtTraceEventNtWaitForMultipleObjects NtWaitForSingleObject NtWriteFileRtlAbsoluteToSelfRelativeSD RtlAcquireSRWLockExclusive RtlAcquireSRWLockSharedRtlAddAccessAllowedAce RtlAddAccessAllowedAceEx RtlAddAccessAllowedObjectAceRtlAddAccessDeniedAceEx RtlAddAccessDeniedObjectAce RtlAddAceRtlAddAuditAccessAceEx RtlAddAuditAccessObjectAce RtlAdjustPrivilegeRtlAllocateAndInitializeSid RtlAllocateHandle RtlAllocateHeapRtlAnsiCharToUnicodeChar RtlAnsiStringToUnicodeSize RtlAnsiStringToUnicodeStringRtlAppendUnicodeStringToString RtlAppendUnicodeToString RtlCompareMemoryRtlCompareUnicodeString RtlConvertSidToUnicodeString RtlCopySidRtlCopyString RtlCopyUnicodeString RtlCreateAclRtlCreateQueryDebugBuffer RtlCreateSecurityDescriptor RtlCreateUnicodeStringRtlCreateUnicodeStringFromAsciiz RtlDeleteCriticalSection RtlDeleteElementGenericTableRtlDestroyHandleTable RtlDestroyQueryDebugBuffer RtlDetermineDosPathNameType_URtlDllShutdownInProgress RtlDosPathNameToNtPathName_U RtlDosPathNameToRelativeNtPathName_URtlDuplicateUnicodeString RtlEnterCriticalSection RtlEnumerateGenericTableWithoutSplayingRtlEqualSid RtlEqualUnicodeString RtlExitUserThreadRtlExpandEnvironmentStrings_U RtlFirstFreeAce RtlFormatCurrentUserKeyPathRtlFreeAnsiString RtlFreeAnsiString RtlFreeHandleRtlFreeHeap RtlFreeSid RtlGUIDFromStringRtlGetControlSecurityDescriptor RtlGetCurrentTransaction RtlGetDaclSecurityDescriptorRtlGetFullPathName_U RtlGetGroupSecurityDescriptor RtlGetLastNtStatusRtlGetNtProductType RtlGetOwnerSecurityDescriptor RtlGetSaclSecurityDescriptorRtlGetThreadPreferredUILanguages RtlGetVersion RtlImageNtHeaderRtlImpersonateSelf RtlInitAnsiString RtlInitAnsiStringExRtlInitUnicodeString RtlInitUnicodeStringEx RtlInitializeBitMapRtlInitializeConditionVariable RtlInitializeCriticalSection RtlInitializeGenericTableRtlInitializeHandleTable RtlInitializeSid RtlInsertElementGenericTableRtlIntegerToUnicodeString RtlInterlockedClearBitRun RtlIpv4AddressToStringWRtlIpv6AddressToStringW RtlIsGenericTableEmpty RtlIsTextUnicodeRtlIsValidIndexHandle RtlLeaveCriticalSection RtlLengthSecurityDescriptorRtlLengthSid RtlLookupElementGenericTable RtlMakeSelfRelativeSDRtlMultiByteToUnicodeN RtlNtStatusToDosError RtlNtStatusToDosErrorNoTebRtlNumberGenericTableElements RtlOemStringToUnicodeString RtlOpenCurrentUserRtlPrefixUnicodeString RtlQueryHeapInformation RtlQueryPerformanceFrequency



RtlQueryProcessDebugInformation RtlQueryRegistryValues RtlQueryTimeZoneInformationRtlRandom RtlReAllocateHeap RtlRegisterThreadWithCsrssRtlReleaseRelativeName RtlReleaseSRWLockExclusive RtlReleaseSRWLockSharedRtlRestoreLastWin32Error RtlRunOnceBeginInitialize RtlRunOnceExecuteOnceRtlSetDaclSecurityDescriptor RtlSetGroupSecurityDescriptor RtlSetOwnerSecurityDescriptorRtlSetSaclSecurityDescriptor RtlStringFromGUID RtlSubAuthorityCountSidRtlSubAuthoritySid RtlTimeToSecondsSince1970 RtlUnicodeStringToAnsiSizeRtlUnicodeStringToAnsiString RtlUnicodeStringToInteger RtlUnicodeToMultiByteNRtlUnicodeToMultiByteSize RtlUpcaseUnicodeChar RtlValidAclRtlValidRelativeSecurityDescriptor RtlValidSecurityDescriptor RtlValidSid

KERNELBASE.dll:AreFileApisANSI EnumUILanguagesW GetSystemDefaultUILanguage GetUserDefaultUILanguage

API-MS-WIN-Service-Core-L1-1-0.dll:sechost!RegisterServiceCtrlHandlerExW sechost!SetServiceStatus sechost!StartServiceCtrlDispatcherW

API-MS-WIN-Service-winsvc-L1-1-0.dll:sechost!ChangeServiceConfig2A sechost!ChangeServiceConfigA sechost!ControlServicesechost!ControlServiceExA sechost!CreateServiceA sechost!I_ScRpcBindAsechost!I_ScRpcBindW sechost!NotifyServiceStatusChangeA sechost!OpenSCManagerAsechost!OpenServiceA sechost!QueryServiceConfig2A sechost!QueryServiceConfigAsechost!QueryServiceStatus sechost!RegisterServiceCtrlHandlerA sechost!RegisterServiceCtrlHandlerExAsechost!RegisterServiceCtrlHandlerW sechost!StartServiceA sechost!StartServiceCtrlDispatcherA

API-MS-WIN-Service-Management-L1-1-0.dll:sechost!CloseServiceHandle sechost!ControlServiceExW sechost!CreateServiceW sechost!DeleteServicesechost!OpenSCManagerW sechost!OpenServiceW sechost!StartServiceW

API-MS-WIN-Service-Management-L2-1-0.dll:sechost!ChangeServiceConfig2W sechost!ChangeServiceConfigW sechost!NotifyServiceStatusChangesechost!QueryServiceConfig2W sechost!QueryServiceConfigW sechost!QueryServiceObjectSecuritysechost!QueryServiceStatusEx sechost!SetServiceObjectSecurity

API-MS-Win-Core-LocalRegistry-L1-1-0.dll:kernel32!RegCloseKey kernel32!RegCreateKeyExA kernel32!RegCreateKeyExWkernel32!RegDeleteKeyExA kernel32!RegDeleteKeyExW kernel32!RegDeleteTreeAkernel32!RegDeleteTreeW kernel32!RegDeleteValueA kernel32!RegDeleteValueWkernel32!RegDisablePredefinedCacheEx kernel32!RegEnumKeyExA kernel32!RegEnumKeyExWkernel32!RegEnumValueA kernel32!RegEnumValueW kernel32!RegFlushKeykernel32!RegGetKeySecurity kernel32!RegGetValueA kernel32!RegGetValueWkernel32!RegLoadKeyA kernel32!RegLoadKeyW kernel32!RegLoadMUIStringAkernel32!RegLoadMUIStringW kernel32!RegNotifyChangeKeyValue kernel32!RegOpenCurrentUserkernel32!RegOpenKeyExA kernel32!RegOpenKeyExW kernel32!RegOpenUserClassesRootkernel32!RegQueryInfoKeyA kernel32!RegQueryInfoKeyW kernel32!RegQueryValueExAkernel32!RegQueryValueExW kernel32!RegRestoreKeyA kernel32!RegRestoreKeyWkernel32!RegSaveKeyExA kernel32!RegSaveKeyExW kernel32!RegSetKeySecuritykernel32!RegSetValueExA kernel32!RegSetValueExW kernel32!RegUnLoadKeyAkernel32!RegUnLoadKeyW

API-MS-Win-Core-NamedPipe-L1-1-0.dll:KernelBase!ImpersonateNamedPipeClient

http://www.win7dll.info/kernelbase_dll.html

http://www.win7dll.info/api-ms-win-service-core-l1-1-0_dll.html

http://www.win7dll.info/api-ms-win-service-winsvc-l1-1-0_dll.html



http://www.win7dll.info/api-ms-win-core-localregistry-l1-1-0_dll.html

http://www.win7dll.info/api-ms-win-core-namedpipe-l1-1-0_dll.html



API-MS-Win-Core-ProcessThreads-L1-1-0.dll:KernelBase!OpenProcessToken KernelBase!OpenThreadToken KernelBase!SetThreadToken kernel32!CreateProcessAsUserWkernel32!CreateThread kernel32!GetCurrentProcess kernel32!GetCurrentProcessId kernel32!GetCurrentThreadkernel32!GetCurrentThreadId kernel32!GetPriorityClass kernel32!GetProcessId kernel32!OpenThreadkernel32!TerminateProcess

API-MS-Win-Security-Base-L1-1-0.dll:KernelBase!AccessCheckKernelBase!AccessCheckAndAuditAlarmWKernelBase!AccessCheckByTypeKernelBase!AccessCheckByTypeAndAuditAlarmWKernelBase!AccessCheckByTypeResultListKernelBase!AccessCheckByTypeResultListAndAuditAlarmByHandleWKernelBase!AccessCheckByTypeResultListAndAuditAlarmWKernelBase!AddAccessAllowedAceKernelBase!AddAccessAllowedAceExKernelBase!AddAccessAllowedObjectAceKernelBase!AddAccessDeniedAceKernelBase!AddAccessDeniedAceExKernelBase!AddAccessDeniedObjectAceKernelBase!AddAceKernelBase!AddAuditAccessAceKernelBase!AddAuditAccessAceExKernelBase!AddAuditAccessObjectAceKernelBase!AdjustTokenGroupsKernelBase!AdjustTokenPrivilegesKernelBase!AllocateAndInitializeSidKernelBase!AllocateLocallyUniqueIdKernelBase!AreAllAccessesGrantedKernelBase!AreAnyAccessesGrantedKernelBase!CheckTokenMembershipKernelBase!ConvertToAutoInheritPrivateObjectSecurityKernelBase!CopySidKernelBase!CreatePrivateObjectSecurityKernelBase!CreatePrivateObjectSecurityExKernelBase!CreatePrivateObjectSecurityWithMultipleInheritanceKernelBase!CreateRestrictedTokenKernelBase!CreateWellKnownSidKernelBase!DeleteAceKernelBase!DestroyPrivateObjectSecurityKernelBase!DuplicateTokenKernelBase!DuplicateTokenExKernelBase!EqualDomainSidKernelBase!EqualPrefixSidKernelBase!EqualSidKernelBase!FindFirstFreeAceKernelBase!FreeSidKernelBase!GetAceKernelBase!GetAclInformation

http://www.win7dll.info/api-ms-win-core-processthreads-l1-1-0_dll.html

http://www.win7dll.info/api-ms-win-security-base-l1-1-0_dll.html



KernelBase!GetFileSecurityWKernelBase!GetKernelObjectSecurityKernelBase!GetLengthSidKernelBase!GetPrivateObjectSecurityKernelBase!GetSecurityDescriptorControlKernelBase!GetSecurityDescriptorDaclKernelBase!GetSecurityDescriptorGroupKernelBase!GetSecurityDescriptorLengthKernelBase!GetSecurityDescriptorOwnerKernelBase!GetSecurityDescriptorRMControlKernelBase!GetSecurityDescriptorSaclKernelBase!GetSidIdentifierAuthorityKernelBase!GetSidLengthRequiredKernelBase!GetSidSubAuthorityKernelBase!GetSidSubAuthorityCountKernelBase!GetTokenInformationKernelBase!GetWindowsAccountDomainSidKernelBase!ImpersonateAnonymousTokenKernelBase!ImpersonateLoggedOnUserKernelBase!ImpersonateSelfKernelBase!InitializeAclKernelBase!InitializeSecurityDescriptorKernelBase!InitializeSidKernelBase!IsTokenRestrictedKernelBase!IsValidAclKernelBase!IsValidRelativeSecurityDescriptorKernelBase!IsValidSecurityDescriptorKernelBase!IsValidSidKernelBase!IsWellKnownSidKernelBase!MakeAbsoluteSDKernelBase!MakeAbsoluteSD2KernelBase!MakeSelfRelativeSDKernelBase!MapGenericMaskKernelBase!ObjectCloseAuditAlarmWKernelBase!ObjectDeleteAuditAlarmWKernelBase!ObjectOpenAuditAlarmWKernelBase!ObjectPrivilegeAuditAlarmWKernelBase!PrivilegeCheckKernelBase!PrivilegedServiceAuditAlarmWKernelBase!QuerySecurityAccessMaskKernelBase!RevertToSelfKernelBase!SetAclInformationKernelBase!SetFileSecurityWKernelBase!SetKernelObjectSecurityKernelBase!SetPrivateObjectSecurityKernelBase!SetPrivateObjectSecurityExKernelBase!SetSecurityAccessMaskKernelBase!SetSecurityDescriptorControlKernelBase!SetSecurityDescriptorDacl



KernelBase!SetSecurityDescriptorGroupKernelBase!SetSecurityDescriptorOwnerKernelBase!SetSecurityDescriptorRMControlKernelBase!SetSecurityDescriptorSaclKernelBase!SetTokenInformation

KERNEL32.dll:CloseHandle CompareFileTime CopyFileWCreateEventW CreateFileMappingW CreateFileWCreateMutexA CreateMutexW CreateProcessInternalADelayLoadFailureHook DeleteFileW DeviceIoControlDosDateTimeToFileTime DuplicateHandle ExpandEnvironmentStringsAExpandEnvironmentStringsW FileTimeToDosDateTime FindCloseFindFirstFileExW FindNextFileW FindResourceExWFormatMessageW FreeLibrary FreeLibraryAndExitThreadGetActiveProcessorCount GetCommandLineW GetComputerNameAGetComputerNameExW GetComputerNameW GetDiskFreeSpaceExWGetDriveTypeW GetFileAttributesExW GetFileAttributesWGetFileMUIPath GetFileSize GetFileSizeExGetFileTime GetFullPathNameA GetFullPathNameWGetLastError GetLocalTime GetLogicalDriveStringsWGetLongPathNameW GetModuleFileNameW GetModuleHandleExWGetModuleHandleW GetOverlappedResult GetPrivateProfileIntWGetProcAddress GetProcessHeap GetSystemDirectoryWGetSystemInfo GetSystemTime GetSystemTimeAsFileTimeGetSystemWindowsDirectoryW GetThreadUILanguage GetTickCountGetVolumeInformationW GetVolumePathNameW GlobalMemoryStatusExHeapFree InterlockedCompareExchange InterlockedDecrementInterlockedExchange InterlockedIncrement IsWow64ProcessLoadLibraryA LoadLibraryExA LoadLibraryExWLoadLibraryW LoadResource LocalAllocLocalFree LocalLock LocalReAllocLocalUnlock LockResource MapViewOfFileMoveFileW MultiByteToWideChar OpenProcessOutputDebugStringW QueryPerformanceCounter ReadFileReadProcessMemory RegKrnGetGlobalState RegKrnInitializeReleaseMutex ResetEvent SearchPathWSetErrorMode SetEvent SetFileInformationByHandleSetFilePointer SetLastError SetUnhandledExceptionFilterSizeofResource Sleep SleepExUnhandledExceptionFilter UnmapViewOfFile VirtualAllocExVirtualFree VirtualFreeEx WaitForSingleObjectWideCharToMultiByte Wow64DisableWow64FsRedirection Wow64RevertWow64FsRedirectionWriteFile lstrcmpW lstrcmpilstrcmpiW lstrlenW ntdll!RtlAllocateHeapntdll!RtlDecodePointer ntdll!RtlDeleteCriticalSection ntdll!RtlEncodePointerntdll!RtlEnterCriticalSection ntdll!RtlInitializeCriticalSection ntdll!RtlLeaveCriticalSectionntdll!RtlReAllocateHeap ntdll!RtlSizeHeap

RPCRT4.dll:

http://www.win7dll.info/kernel32_dll.html

http://www.win7dll.info/rpcrt4_dll.html



I_RpcExceptionFilter I_RpcMapWin32Status I_RpcSNCHOption NdrClientCall2RpcBindingBind RpcBindingCreateW RpcBindingFree RpcBindingFromStringBindingWRpcBindingSetAuthInfoA RpcBindingSetAuthInfoExA RpcBindingSetAuthInfoExW RpcBindingSetAuthInfoWRpcEpResolveBinding RpcExceptionFilter RpcRaiseException RpcSsDestroyClientContextRpcStringBindingComposeW RpcStringFreeW UuidCreate UuidFromStringWUuidToStringW

XP DLL Information Flash Drive Speed Extension Information Windows Password Recovery

http://xpdll.nirsoft.net/

http://usbspeed.nirsoft.net/

http://extension.nirsoft.net/

http://www.nirsoft.net/password_recovery_tools.html

Documents

Windows 7 DLL File Information - Advapi32