Windows 7 DLL File Information - advapi32.

dll

Main Page

Feedback

NirSoft Utilities

Windows 7 DLL File Information - advapi32.dll

The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 7, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.

General Information
File Description: File Version: Company: Product Name: DLL popularity File Size: Total Number of Exported Functions: Total Number of Exported Functions With Names: Advanced Windows 32 Base API 6.1.7100.0 (winmain_win7rc.090421-1700) Microsoft Corporation Microsoft Windows Operating System Very High - 848 other DLL files in system32 directory are statically linked to this file. 625 KB 806 805

Section Headers
Name Virtual Address Raw Data Size % of File .text .data .rsrc .reloc 0x00001000 0x00073000 0x00077000 0x0009b000 465,920 Bytes 11,776 Bytes 143,872 Bytes 16,896 Bytes 72.8% 1.8% 22.5% 2.6% Characteristics Read, Execute Write, Read Read Section Contains... Code Initialized Data Initialized Data

Read, Discardable Initialized Data

Static Linking
advapi32.dll is statically linked to the following files: msvcrt.dll ntdll.dll KERNELBASE.dll API-MS-WIN-Service-Core-L1-1-0.dll

file:///C|/Users/System Administrator/Desktop/Assorted/NirSoft/Windows 7 DLL File Information - advapi32_dll.htm[5/27/2011 1:40:45 PM]

Windows 7 DLL File Information - advapi32.dll

API-MS-WIN-Service-winsvc-L1-1-0.dll API-MS-WIN-Service-Management-L1-1-0.dll API-MS-WIN-Service-Management-L2-1-0.dll API-MS-Win-Core-LocalRegistry-L1-1-0.dll API-MS-Win-Core-NamedPipe-L1-1-0.dll API-MS-Win-Core-ProcessThreads-L1-1-0.dll API-MS-Win-Security-Base-L1-1-0.dll KERNEL32.dll RPCRT4.dll This means that when advapi32.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, advapi32.dll won't be loaded.

General Resources Information

Resource Type Icons Animated Icons Cursors Animated Cursors Bitmaps AVI Files Dialog-Boxes Number of Items 0 0 0 0 0 0 0 Total Size 0 Bytes 0 Bytes 0 Bytes 0 Bytes 0 Bytes 0 Bytes 0 Bytes 0 Bytes 0 Bytes 40,268 Bytes 0 Bytes 0 Bytes % of File 0.0% 0.0% 0.0% 0.0% 0.0% 0.0% 0.0% 0.0% 0.0% 6.3% 0.0% 0.0%

HTML Related Files 0 Menus Strings Type Libraries Manifest All Others Total 0 241 0 0 6 247

432,372 Bytes 67.6% 472,640 Bytes 73.8%

Icons in this file

No icons found in this file

Cursors in this file

No cursors found in this file

file:///C|/Users/System Administrator/Desktop/Assorted/NirSoft/Windows 7 DLL File Information - advapi32_dll.htm[5/27/2011 1:40:45 PM]

Windows 7 DLL File Information - advapi32.dll

Dialog-boxes list (up to 200 dialogs)

No dialog resources in this file.

String resources in this dll (up to 200 strings)

String ID 1 2 Processor Information Processor Information The Processor Information performance counter set consists of counters that measure aspects of processor activity. The processor is the part of the computer that performs arithmetic and logical computations, initiates operations on peripherals, and runs the threads of processes. A computer can have multiple processors. The Processor Information counter set represents each processor as an instance of the counter set. % Processor Time % Processor Time % Processor Time is the percentage of elapsed time that the processor spends to execute a non-Idle thread. It is calculated by measuring the percentage of time that the processor spends executing the idle thread and then subtracting that value from 100%. (Each processor has an idle thread to which time is accumulated when no other threads are ready to run). This counter is the primary indicator of processor activity, and displays the average percentage of busy time observed during the sample interval. It should be noted that the accounting calculation of whether the processor is idle is performed at an internal sampling interval of the system clock tick. On todays fast processors, % Processor Time can therefore underestimate the processor utilization as the processor may be spending a lot of time servicing threads between the system clock sampling interval. Workload based timer applications are one example of applications which are more likely to be measured inaccurately as timers are signaled just after the sample is taken. % User Time % User Time % User Time is the percentage of elapsed time the processor spends in the user mode. User mode is a restricted processing mode designed for applications, environment subsystems, and integral subsystems. The alternative, privileged mode, is designed for operating system components and allows direct access to hardware and all memory. The operating system switches application threads to privileged mode to access operating system services. This counter displays the average busy time as a percentage of the sample time. % Privileged Time % Privileged Time % Privileged Time is the percentage of elapsed time that the process threads spent executing code in privileged mode. When a Windows system service in called, the service will often run in privileged mode to gain access to system-private data. Such data is protected from access by threads executing in user mode. Calls to the system can be explicit or implicit, such as page faults or interrupts. Unlike some early operating systems, Windows uses process boundaries for subsystem protection in addition to the traditional protection of user and privileged modes. Some work done by Windows on behalf of the application might appear in other subsystem processes in addition to the privileged time in the process. Interrupts/sec Interrupts/sec Interrupts/sec is the average rate, in incidents per second, at which the processor received and serviced hardware interrupts. It does not include deferred procedure calls (DPCs), which are counted separately. This value is an indirect indicator of the activity of devices that generate interrupts, such as the system clock, the mouse, disk drivers, data communication lines, network interface cards, and other peripheral devices. These devices normally interrupt the

String Text

5 6

9 10

11

13 14

15

17 18

19

file:///C|/Users/System Administrator/Desktop/Assorted/NirSoft/Windows 7 DLL File Information - advapi32_dll.htm[5/27/2011 1:40:45 PM]

Windows 7 DLL File Information - advapi32.dll

processor when they have completed a task or require attention. Normal thread execution is suspended. The system clock typically interrupts the processor every 10 milliseconds, creating a background of interrupt activity. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. 21 22 % DPC Time % DPC Time % DPC Time is the percentage of time that the processor spent receiving and servicing deferred procedure calls (DPCs) during the sample interval. DPCs are interrupts that run at a lower priority than standard interrupts. % DPC Time is a component of % Privileged Time because DPCs are executed in privileged mode. They are counted separately and are not a component of the interrupt counters. This counter displays the average busy time as a percentage of the sample time. % Interrupt Time % Interrupt Time % Interrupt Time is the time the processor spends receiving and servicing hardware interrupts during sample intervals. This value is an indirect indicator of the activity of devices that generate interrupts, such as the system clock, the mouse, disk drivers, data communication lines, network interface cards and other peripheral devices. These devices normally interrupt the processor when they have completed a task or require attention. Normal thread execution is suspended during interrupts. Most system clocks interrupt the processor every 10 milliseconds, creating a background of interrupt activity. suspends normal thread execution during interrupts. This counter displays the average busy time as a percentage of the sample time. DPCs Queued/sec DPCs Queued/sec DPCs Queued/sec is the average rate, in incidents per second, at which deferred procedure calls (DPCs) were added to the processor's DPC queue. DPCs are interrupts that run at a lower priority than standard interrupts. Each processor has its own DPC queue. This counter measures the rate that DPCs are added to the queue, not the number of DPCs in the queue. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. DPC Rate DPC Rate DPC Rate is the rate at which deferred procedure calls (DPCs) were added to the processors DPC queues between the timer ticks of the processor clock. DPCs are interrupts that run at alower priority than standard interrupts. Each processor has its own DPC queue. This counter measures the rate that DPCs were added to the queue, not the number of DPCs in the queue. This counter displays the last observed value only; it is not an average. % Idle Time % Idle Time % Idle Time is the percentage of time the processor is idle during the sample interval % C1 Time % C1 Time % C1 Time is the percentage of time the processor spends in the C1 low-power idle state. % C1 Time is a subset of the total processor idle time. C1 low-power idle state enables the processor to maintain its entire context and quickly return to the running state. Not all systems support the % C1 state. % C2 Time % C2 Time % C2 Time is the percentage of time the processor spends in the C2 low-power idle state. % C2 Time is a subset of the total processor idle time. C2 low-power idle state enables the processor to maintain the context of the system caches. The C2 power state is a lower power and higher exit latency state than C1. Not all systems support the C2 state.

23

25 26

27

29 30

31

33 34

35

37 38 39 41 42 43 45 46 47

file:///C|/Users/System Administrator/Desktop/Assorted/NirSoft/Windows 7 DLL File Information - advapi32_dll.htm[5/27/2011 1:40:45 PM]

Windows 7 DLL File Information - advapi32.dll

49 50 51 53 54 55 57 58 59 61 62 63 65 66

% C3 Time % C3 Time % C3 Time is the percentage of time the processor spends in the C3 low-power idle state. % C3 Time is a subset of the total processor idle time. When the processor is in the C3 low-power idle state it is unable to maintain the coherency of its caches. The C3 power state is a lower power and higher exit latency state than C2. Not all systems support the C3 state. C1 Transitions/sec C1 Transitions/sec C1 Transitions/sec is the rate that the CPU enters the C1 low-power idle state. The CPU enters the C1 state when it is sufficiently idle and exits this state on any interrupt. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. C2 Transitions/sec C2 Transitions/sec C2 Transitions/sec is the rate that the CPU enters the C2 low-power idle state. The CPU enters the C2 state when it is sufficiently idle and exits this state on any interrupt. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. C3 Transitions/sec C3 Transitions/sec C3 Transitions/sec is the rate that the CPU enters the C3 low-power idle state. The CPU enters the C3 state when it is sufficiently idle and exits this state on any interrupt. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. % Priority Time % Priority Time % Priority Time is the percentage of elapsed time that the processor spends executing threads that are not low priority. It is calculated by measuring the percentage of time that the processor spends executing low priority threads or the idle thread and then subtracting that value from 100%. (Each processor has an idle thread to which time is accumulated when no other threads are ready to run). This counter displays the average percentage of busy time observed during the sample interval excluding low priority background work. It should be noted that the accounting calculation of whether the processor is idle is performed at an internal sampling interval of the system clock tick. % Priority Time can therefore underestimate the processor utilization as the processor may be spending a lot of time servicing threads between the system clock sampling interval. Workload based timer applications are one example of applications which are more likely to be measured inaccurately as timers are signaled just after the sample is taken. Parking Status Parking Status Parking Status represents whether a processor is parked or not. Processor Frequency Processor Frequency Processor Frequency is the frequency of the current processor in megahertz. % of Maximum Frequency % of Maximum Frequency % of Maximum Frequency is the percentage of the current processor's maximum frequency. Processor State Flags Processor State Flags

67

69 70 71 73 74 75 77 78 79 81 82

file:///C|/Users/System Administrator/Desktop/Assorted/NirSoft/Windows 7 DLL File Information - advapi32_dll.htm[5/27/2011 1:40:45 PM]

Windows 7 DLL File Information - advapi32.dll

83 85 86 87 89 90 91 93 94 95 97 98 99 101 102 103 105 106 107 109 110 111 113 114 115 117 118 119 121 122 123 125 126

Processor State Flags Synchronization Synchronization The Synchronization performance object consists of counters for kernel synchronization. The synchronization object represents each processor as an instance of the object. Spinlock Acquires/sec Spinlock Acquires/sec Spinlock acquires/sec is the rate of spinlock acquisitions. It includes the basic spinlocks, queued spinlocks, in-stack queued spinlocks, and shared spinlocks acquisitions. Spinlock Contentions/sec Spinlock Contentions/sec Spinlock contentions/sec is the rate of spinlock contentions. It includes the basic spinlocks, queued spinlocks, in-stack queued spinlocks, and shared spinlocks contentions. Spinlock Spins/sec Spinlock Spins/sec Spinlock spins/sec is the rate of spinlock spins. It includes the spins to acquire basic spinlocks, queued spinlocks, in-stack queued spinlocks, and shared spinlocks. IPI Send Broadcast Requests/sec IPI Send Broadcast Requests/sec IPI Send Broadcast Requests/sec is the rate of IPI broadcast requests. IPI Send Routine Requests/sec IPI Send Routine Requests/sec IPI Send Routine Requests/sec is the rate of IPI routine requests. IPI Send Software Interrupts/sec IPI Send Software Interrupts/sec IPI Send Software Interrrupts/sec is the rate of software interrupts. Exec. Resource Total Initialize/sec Exec. Resource Total Initialize/sec Frequency of initialization operations on Executive Resources. Exec. Resource Total Re-Initialize/sec Exec. Resource Total Re-Initialize/sec Frequency of re-initialization operations on Executive Resources. Exec. Resource Total Delete/sec Exec. Resource Total Delete/sec Frequency of delete operations on Executive Resources. Exec. Resource Total Acquires/sec Exec. Resource Total Acquires/sec

file:///C|/Users/System Administrator/Desktop/Assorted/NirSoft/Windows 7 DLL File Information - advapi32_dll.htm[5/27/2011 1:40:45 PM]

Windows 7 DLL File Information - advapi32.dll

127 129 130 131 133 134 135 137 138 139 141 142 143 145 146 147 149 150 151 153 154 155 157 158 159 161 162 163 165 166 167 169 170 171 173

Frequency of acquire operations on Executive Resources. Exec. Resource Total Contentions/sec Exec. Resource Total Contentions/sec Contention rate on Executive Resources. Exec. Resource Total Exclusive Releases/sec Exec. Resource Total Exclusive Releases/sec Frequency of Exclusive releases on Executive Resources. Exec. Resource Total Shared Releases/sec Exec. Resource Total Shared Releases/sec Frequency of Shared releases on Executive Resources. Exec. Resource Total Conv. Exclusive To Shared/sec Exec. Resource Total Conv. Exclusive To Shared/sec Frequency of convert to shared operations on Executive Resources. Exec. Resource Attempts AcqExclLite/sec Exec. Resource Attempts AcqExclLite/sec Frequency of acquire exclusive attempts on Executive Resources from ExAcquireResourceExclusiveLite. Exec. Resource Acquires AcqExclLite/sec Exec. Resource Acquires AcqExclLite/sec Frequency of first exclusive acquires from ExAcquireResourceExclusiveLite. Exec. Resource Recursive Excl. Acquires AcqExclLite/sec Exec. Resource Recursive Excl. Acquires AcqExclLite/sec Frequency of recursive exclusive acquires from ExAcquireResourceExclusiveLite. Exec. Resource Contention AcqExclLite/sec Exec. Resource Contention AcqExclLite/sec Frequency of waits during exclusive acquire attempts from ExAcquireResourceExclusiveLite. Exec. Resource no-Waits AcqExclLite/sec Exec. Resource no-Waits AcqExclLite/sec Frequency of no-waits during exclusive acquire attempts from ExAcquireResourceExclusiveLite. Exec. Resource Attempts AcqShrdLite/sec Exec. Resource Attempts AcqShrdLite/sec Frequency of acquire shared attempts on Executive Resources from ExAcquireResourceSharedLite. Exec. Resource Recursive Excl. Acquires AcqShrdLite/sec Exec. Resource Recursive Excl. Acquires AcqShrdLite/sec Frequency of recursive exclusive acquires from ExAcquireResourceSharedLite. Exec. Resource Acquires AcqShrdLite/sec

file:///C|/Users/System Administrator/Desktop/Assorted/NirSoft/Windows 7 DLL File Information - advapi32_dll.htm[5/27/2011 1:40:45 PM]

Windows 7 DLL File Information - advapi32.dll

174 175 177 178 179 181 182 183 185 186 187 189 190 191 193 194 195 197 198 199 201 202 203 205 206 207 209 210 211 213 214 215 217 218 219

Exec. Resource Acquires AcqShrdLite/sec Frequency of first shared acquires from ExAcquireResourceSharedLite. Exec. Resource Recursive Sh. Acquires AcqShrdLite/sec Exec. Resource Recursive Sh. Acquires AcqShrdLite/sec Frequency of recursive shared acquires from ExAcquireResourceSharedLite. Exec. Resource Contention AcqShrdLite/sec Exec. Resource Contention AcqShrdLite/sec Frequency of waits during acquire attempts from ExAcquireResourceSharedLite. Exec. Resource no-Waits AcqShrdLite/sec Exec. Resource no-Waits AcqShrdLite/sec Frequency of no-waits during acquire attempts from ExAcquireResourceSharedLite. Exec. Resource Attempts AcqShrdStarveExcl/sec Exec. Resource Attempts AcqShrdStarveExcl/sec Frequency of acquire shared attempts on Executive Resources from ExAcquireSharedStarveExclusive. Exec. Resource Recursive Excl. Acquires AcqShrdStarveExcl/sec Exec. Resource Recursive Excl. Acquires AcqShrdStarveExcl/sec Frequency of recursive exclusive acquires from ExAcquireSharedStarveExclusive. Exec. Resource Acquires AcqShrdStarveExcl/sec Exec. Resource Acquires AcqShrdStarveExcl/sec Frequency of first shared acquires from ExAcquireSharedStarveExclusive. Exec. Resource Recursive Sh. Acquires AcqShrdStarveExcl/sec Exec. Resource Recursive Sh. Acquires AcqShrdStarveExcl/sec Frequency of recursive shared acquires from ExAcquireSharedStarveExclusive. Exec. Resource Contention AcqShrdStarveExcl/sec Exec. Resource Contention AcqShrdStarveExcl/sec Frequency of waits during shared acquire attempts from ExAcquireSharedStarveExclusive. Exec. Resource no-Waits AcqShrdStarveExcl/sec Exec. Resource no-Waits AcqShrdStarveExcl/sec Frequency of no-waits during shared acquire attempts from ExAcquireSharedStarveExclusive. Exec. Resource Attempts AcqShrdWaitForExcl/sec Exec. Resource Attempts AcqShrdWaitForExcl/sec Frequency of acquire shared attempts on Executive Resources from ExAcquireSharedWaitForExclusive. Exec. Resource Recursive Excl. Acquires AcqShrdWaitForExcl/sec Exec. Resource Recursive Excl. Acquires AcqShrdWaitForExcl/sec Frequency of recursive exclusive acquires from ExAcquireSharedWaitForExclusive.

file:///C|/Users/System Administrator/Desktop/Assorted/NirSoft/Windows 7 DLL File Information - advapi32_dll.htm[5/27/2011 1:40:45 PM]

Windows 7 DLL File Information - advapi32.dll

221 222 223 225 226 227 229 230 231 233 234 235 237 238 239 241 242 243 245 246 247 249 250 251 253 254 255 257 258 259 261 262 263 265

Exec. Resource Acquires AcqShrdWaitForExcl/sec Exec. Resource Acquires AcqShrdWaitForExcl/sec Frequency of first shared acquires from ExAcquireSharedWaitForExclusive. Exec. Resource Recursive Sh. Acquires AcqShrdWaitForExcl/sec Exec. Resource Recursive Sh. Acquires AcqShrdWaitForExcl/sec Frequency of recursive shared acquires from ExAcquireSharedWaitForExclusive. Exec. Resource Contention AcqShrdWaitForExcl/sec Exec. Resource Contention AcqShrdWaitForExcl/sec Frequency of waits during shared acquire attempts from ExAcquireSharedWaitForExclusive. Exec. Resource no-Waits AcqShrdWaitForExcl/sec Exec. Resource no-Waits AcqShrdWaitForExcl/sec Frequency of no-waits during exclusive acquire attempts from ExAcquireSharedWaitForExclusive. Exec. Resource Set Owner Pointer Exclusive/sec Exec. Resource Set Owner Pointer Exclusive/sec Frequency of ExSetResourceOwnerPointer to an exclusive owner. Exec. Resource Set Owner Pointer Shared (New Owner)/sec Exec. Resource Set Owner Pointer Shared (New Owner)/sec Frequency of ExSetResourceOwnerPointer to a new shared owner. Exec. Resource Set Owner Pointer Shared (Existing Owner)/sec Exec. Resource Set Owner Pointer Shared (Existing Owner)/sec Frequency of ExSetResourceOwnerPointer to an existing shared owner. Exec. Resource Boost Excl. Owner/sec Exec. Resource Boost Excl. Owner/sec Frequency of boosting exclusive ownwer when waiting for this Executive Resource. Exec. Resource Boost Shared Owners/sec Exec. Resource Boost Shared Owners/sec Frequency of boosting shared ownwer(s) when waiting for this Executive Resource. Event Tracing for Windows Event Tracing for Windows The counters in this collection refer to system-wide metrics about the performance of the Event Tracing for Windows subsystem. Total Number of Distinct Enabled Providers Total Number of Distinct Enabled Providers Number of distinct event providers that are enabled to ETW sessions; multiple instances of a provider are counted only once. Total Number of Distinct Pre-Enabled Providers

file:///C|/Users/System Administrator/Desktop/Assorted/NirSoft/Windows 7 DLL File Information - advapi32_dll.htm[5/27/2011 1:40:45 PM]

Windows 7 DLL File Information - advapi32.dll

266

Total Number of Distinct Pre-Enabled Providers

COM Classes/Interfaces
There is no type library in this file with COM classes/interfaces information

Exported Functions List

The following functions are exported by this dll: A_SHAFinal A_SHAInit A_SHAUpdate AbortSystemShutdownA AbortSystemShutdownW AccessCheck AccessCheckAndAuditAlarmA AccessCheckAndAuditAlarmW AccessCheckByType AccessCheckByTypeAndAuditAlarmA AccessCheckByTypeAndAuditAlarmW AccessCheckByTypeResultList AccessCheckByTypeResultListAndAuditAlarmA AccessCheckByTypeResultListAndAuditAlarmByHandleA AccessCheckByTypeResultListAndAuditAlarmByHandleW AccessCheckByTypeResultListAndAuditAlarmW AddAccessAllowedAce AddAccessAllowedAceEx AddAccessAllowedObjectAce AddAccessDeniedAce AddAccessDeniedAceEx AddAccessDeniedObjectAce AddAce AddAuditAccessAce AddAuditAccessAceEx AddAuditAccessObjectAce AddConditionalAce AddMandatoryAce AddUsersToEncryptedFile AddUsersToEncryptedFileEx AdjustTokenGroups AdjustTokenPrivileges AllocateAndInitializeSid AllocateLocallyUniqueId AreAllAccessesGranted AreAnyAccessesGranted AuditComputeEffectivePolicyBySid AuditComputeEffectivePolicyByToken AuditEnumerateCategories AuditEnumeratePerUserPolicy AuditEnumerateSubCategories AuditFree AuditLookupCategoryGuidFromCategoryId AuditLookupCategoryIdFromCategoryGuid AuditLookupCategoryNameA AuditLookupCategoryNameW AuditLookupSubCategoryNameA AuditLookupSubCategoryNameW AuditQueryGlobalSaclA AuditQueryGlobalSaclW AuditQueryPerUserPolicy AuditQuerySecurity AuditQuerySystemPolicy AuditSetGlobalSaclA AuditSetGlobalSaclW AuditSetPerUserPolicy AuditSetSecurity AuditSetSystemPolicy BackupEventLogA BackupEventLogW BuildExplicitAccessWithNameA BuildExplicitAccessWithNameW BuildImpersonateExplicitAccessWithNameA BuildImpersonateExplicitAccessWithNameW BuildImpersonateTrusteeA BuildImpersonateTrusteeW BuildSecurityDescriptorA BuildSecurityDescriptorW BuildTrusteeWithNameA BuildTrusteeWithNameW BuildTrusteeWithObjectsAndNameA BuildTrusteeWithObjectsAndNameW BuildTrusteeWithObjectsAndSidA BuildTrusteeWithObjectsAndSidW

file:///C|/Users/System Administrator/Desktop/Assorted/NirSoft/Windows 7 DLL File Information - advapi32_dll.htm[5/27/2011 1:40:45 PM]

Windows 7 DLL File Information - advapi32.dll

BuildTrusteeWithSidA CancelOverlappedAccess ChangeServiceConfig2W ChangeServiceConfigW ClearEventLogA CloseCodeAuthzLevel CloseEventLog CloseThreadWaitChainSession CommandLineFromMsiDescriptor ControlService ControlServiceExW ControlTraceW ConvertAccessToSecurityDescriptorW ConvertSDToStringSDRootDomainW ConvertSecurityDescriptorToAccessNamedA ConvertSecurityDescriptorToAccessW ConvertSecurityDescriptorToStringSecurityDescriptorW ConvertSidToStringSidW ConvertStringSDToSDDomainW ConvertStringSDToSDRootDomainW ConvertStringSecurityDescriptorToSecurityDescriptorW ConvertStringSidToSidW CopySid CreatePrivateObjectSecurity CreatePrivateObjectSecurityWithMultipleInheritance CreateProcessAsUserW CreateProcessWithTokenW CreateServiceA CreateTraceInstanceId CredBackupCredentials CredDeleteW CredEnumerateA CredFindBestCredentialA CredFree CredGetTargetInfoA CredIsMarshaledCredentialA CredIsProtectedA CredMarshalCredentialA CredProfileLoaded CredProtectA CredReadA CredReadDomainCredentialsA CredReadW CredRenameW CredUnmarshalCredentialA CredUnprotectA CredWriteA CredWriteDomainCredentialsW CredpConvertCredential

BuildTrusteeWithSidW ChangeServiceConfig2A ChangeServiceConfigA CheckTokenMembership ClearEventLogW CloseEncryptedFileRaw CloseServiceHandle CloseTrace ComputeAccessTokenFromCodeAuthzLevel ControlServiceExA ControlTraceA ConvertAccessToSecurityDescriptorA ConvertSDToStringSDRootDomainA ConvertSecurityDescriptorToAccessA ConvertSecurityDescriptorToAccessNamedW ConvertSecurityDescriptorToStringSecurityDescriptorA ConvertSidToStringSidA ConvertStringSDToSDDomainA ConvertStringSDToSDRootDomainA ConvertStringSecurityDescriptorToSecurityDescriptorA ConvertStringSidToSidA ConvertToAutoInheritPrivateObjectSecurity CreateCodeAuthzLevel CreatePrivateObjectSecurityEx CreateProcessAsUserA CreateProcessWithLogonW CreateRestrictedToken CreateServiceW CreateWellKnownSid CredDeleteA CredEncryptAndMarshalBinaryBlob CredEnumerateW CredFindBestCredentialW CredGetSessionTypes CredGetTargetInfoW CredIsMarshaledCredentialW CredIsProtectedW CredMarshalCredentialW CredProfileUnloaded CredProtectW CredReadByTokenHandle CredReadDomainCredentialsW CredRenameA CredRestoreCredentials CredUnmarshalCredentialW CredUnprotectW CredWriteDomainCredentialsA CredWriteW CredpConvertOneCredentialSize

file:///C|/Users/System Administrator/Desktop/Assorted/NirSoft/Windows 7 DLL File Information - advapi32_dll.htm[5/27/2011 1:40:45 PM]

Windows 7 DLL File Information - advapi32.dll

CredpConvertTargetInfo CredpEncodeCredential CryptAcquireContextA CryptContextAddRef CryptDecrypt CryptDestroyHash CryptDuplicateHash CryptEncrypt CryptEnumProviderTypesW CryptEnumProvidersW CryptGenKey CryptGetDefaultProviderA CryptGetHashParam CryptGetProvParam CryptHashData CryptImportKey CryptSetHashParam CryptSetProvParam CryptSetProviderExA CryptSetProviderW CryptSignHashW CryptVerifySignatureW DecryptFileW DeleteService DestroyPrivateObjectSecurity DuplicateToken ElfBackupEventLogFileA ElfChangeNotify ElfClearEventLogFileW ElfDeregisterEventSource ElfNumberOfRecords ElfOpenBackupEventLogA ElfOpenEventLogA ElfReadEventLogA ElfRegisterEventSourceA ElfReportEventA ElfReportEventW EnableTraceEx EncryptFileA EncryptedFileKeyInfo EnumDependentServicesA EnumServiceGroupW EnumServicesStatusExA EnumServicesStatusW EnumerateTraceGuidsEx EqualPrefixSid EventAccessControl EventAccessRemove EventEnabled

CredpDecodeCredential CredpEncodeSecret CryptAcquireContextW CryptCreateHash CryptDeriveKey CryptDestroyKey CryptDuplicateKey CryptEnumProviderTypesA CryptEnumProvidersA CryptExportKey CryptGenRandom CryptGetDefaultProviderW CryptGetKeyParam CryptGetUserKey CryptHashSessionKey CryptReleaseContext CryptSetKeyParam CryptSetProviderA CryptSetProviderExW CryptSignHashA CryptVerifySignatureA DecryptFileA DeleteAce DeregisterEventSource DuplicateEncryptionInfoFile DuplicateTokenEx ElfBackupEventLogFileW ElfClearEventLogFileA ElfCloseEventLog ElfFlushEventLog ElfOldestRecord ElfOpenBackupEventLogW ElfOpenEventLogW ElfReadEventLogW ElfRegisterEventSourceW ElfReportEventAndSourceW EnableTrace EnableTraceEx2 EncryptFileW EncryptionDisable EnumDependentServicesW EnumServicesStatusA EnumServicesStatusExW EnumerateTraceGuids EqualDomainSid EqualSid EventAccessQuery EventActivityIdControl EventProviderEnabled

file:///C|/Users/System Administrator/Desktop/Assorted/NirSoft/Windows 7 DLL File Information - advapi32_dll.htm[5/27/2011 1:40:45 PM]

Windows 7 DLL File Information - advapi32.dll

EventRegister EventWrite EventWriteEx EventWriteString FileEncryptionStatusA FindFirstFreeAce FlushTraceA FreeEncryptedFileKeyInfo FreeEncryptionCertificateHashList FreeSid GetAccessPermissionsForObjectW GetAclInformation GetAuditedPermissionsFromAclW GetCurrentHwProfileW GetEffectiveRightsFromAclW GetEventLogInformation GetExplicitEntriesFromAclW GetFileSecurityW GetInformationCodeAuthzPolicyW GetInheritanceSourceW GetLengthSid GetLocalManagedApplications GetManagedApplications GetMultipleTrusteeOperationA GetMultipleTrusteeW GetNamedSecurityInfoExA GetNamedSecurityInfoW GetOldestEventLogRecord GetPrivateObjectSecurity GetSecurityDescriptorDacl GetSecurityDescriptorLength GetSecurityDescriptorRMControl GetSecurityInfo GetSecurityInfoExW GetServiceDisplayNameW GetServiceKeyNameW GetSidLengthRequired GetSidSubAuthorityCount GetTokenInformation GetTraceEnableLevel GetTrusteeFormA GetTrusteeNameA GetTrusteeTypeA GetUserNameA GetWindowsAccountDomainSid I_ScGetCurrentGroupStateW I_ScPnPGetServiceName I_ScSendPnPMessage I_ScSetServiceBitsA

EventUnregister EventWriteEndScenario EventWriteStartScenario EventWriteTransfer FileEncryptionStatusW FlushEfsCache FlushTraceW FreeEncryptedFileMetadata FreeInheritedFromArray GetAccessPermissionsForObjectA GetAce GetAuditedPermissionsFromAclA GetCurrentHwProfileA GetEffectiveRightsFromAclA GetEncryptedFileMetadata GetExplicitEntriesFromAclA GetFileSecurityA GetInformationCodeAuthzLevelW GetInheritanceSourceA GetKernelObjectSecurity GetLocalManagedApplicationData GetManagedApplicationCategories GetMultipleTrusteeA GetMultipleTrusteeOperationW GetNamedSecurityInfoA GetNamedSecurityInfoExW GetNumberOfEventLogRecords GetOverlappedAccessResults GetSecurityDescriptorControl GetSecurityDescriptorGroup GetSecurityDescriptorOwner GetSecurityDescriptorSacl GetSecurityInfoExA GetServiceDisplayNameA GetServiceKeyNameA GetSidIdentifierAuthority GetSidSubAuthority GetThreadWaitChain GetTraceEnableFlags GetTraceLoggerHandle GetTrusteeFormW GetTrusteeNameW GetTrusteeTypeW GetUserNameW I_QueryTagInformation I_ScIsSecurityProcess I_ScQueryServiceConfig I_ScSendTSMessage I_ScSetServiceBitsW

file:///C|/Users/System Administrator/Desktop/Assorted/NirSoft/Windows 7 DLL File Information - advapi32_dll.htm[5/27/2011 1:40:45 PM]

Windows 7 DLL File Information - advapi32.dll

I_ScValidatePnPService ImpersonateAnonymousToken ImpersonateNamedPipeClient InitializeAcl InitializeSid InitiateShutdownW InitiateSystemShutdownExA InitiateSystemShutdownW IsTextUnicode IsTokenUntrusted IsValidRelativeSecurityDescriptor IsValidSid LockServiceDatabase LogonUserExA LogonUserExW LookupAccountNameA LookupAccountSidA LookupPrivilegeDisplayNameA LookupPrivilegeNameA LookupPrivilegeValueA LookupSecurityDescriptorPartsA LsaAddAccountRights LsaClearAuditLog LsaCreateAccount LsaCreateTrustedDomain LsaDelete LsaEnumerateAccountRights LsaEnumerateAccountsWithUserRight LsaEnumeratePrivilegesOfAccount LsaEnumerateTrustedDomainsEx LsaGetQuotasForAccount LsaGetSystemAccessAccount LsaICLookupNames LsaICLookupSids LsaLookupNames LsaLookupPrivilegeDisplayName LsaLookupPrivilegeValue LsaManageSidNameMapping LsaOpenAccount LsaOpenPolicySce LsaOpenTrustedDomain LsaQueryDomainInformationPolicy LsaQueryInfoTrustedDomain LsaQuerySecret LsaQueryTrustedDomainInfo LsaRemoveAccountRights LsaRetrievePrivateData LsaSetForestTrustInformation LsaSetInformationTrustedDomain

IdentifyCodeAuthzLevelW ImpersonateLoggedOnUser ImpersonateSelf InitializeSecurityDescriptor InitiateShutdownA InitiateSystemShutdownA InitiateSystemShutdownExW InstallApplication IsTokenRestricted IsValidAcl IsValidSecurityDescriptor IsWellKnownSid LogonUserA LogonUserExExW LogonUserW LookupAccountNameW LookupAccountSidW LookupPrivilegeDisplayNameW LookupPrivilegeNameW LookupPrivilegeValueW LookupSecurityDescriptorPartsW LsaAddPrivilegesToAccount LsaClose LsaCreateSecret LsaCreateTrustedDomainEx LsaDeleteTrustedDomain LsaEnumerateAccounts LsaEnumeratePrivileges LsaEnumerateTrustedDomains LsaFreeMemory LsaGetRemoteUserName LsaGetUserName LsaICLookupNamesWithCreds LsaICLookupSidsWithCreds LsaLookupNames2 LsaLookupPrivilegeName LsaLookupSids LsaNtStatusToWinError LsaOpenPolicy LsaOpenSecret LsaOpenTrustedDomainByName LsaQueryForestTrustInformation LsaQueryInformationPolicy LsaQuerySecurityObject LsaQueryTrustedDomainInfoByName LsaRemovePrivilegesFromAccount LsaSetDomainInformationPolicy LsaSetInformationPolicy LsaSetQuotasForAccount

file:///C|/Users/System Administrator/Desktop/Assorted/NirSoft/Windows 7 DLL File Information - advapi32_dll.htm[5/27/2011 1:40:45 PM]

Windows 7 DLL File Information - advapi32.dll

LsaSetSecret LsaSetSystemAccessAccount LsaSetTrustedDomainInformation MD4Final MD4Update MD5Init MSChapSrvChangePassword MakeAbsoluteSD MakeSelfRelativeSD NotifyBootConfigStatus NotifyServiceStatusChange NotifyServiceStatusChangeW ObjectCloseAuditAlarmW ObjectDeleteAuditAlarmW ObjectOpenAuditAlarmW ObjectPrivilegeAuditAlarmW OpenBackupEventLogW OpenEncryptedFileRawW OpenEventLogW OpenSCManagerA OpenServiceA OpenThreadToken OpenTraceA PerfAddCounters PerfCreateInstance PerfDecrementULongLongCounterValue PerfDeleteInstance PerfEnumerateCounterSetInstances PerfIncrementULongLongCounterValue PerfQueryCounterData PerfQueryCounterSetRegistrationInfo PerfSetCounterRefValue PerfSetULongCounterValue PerfStartProvider PerfStopProvider PrivilegedServiceAuditAlarmA ProcessIdleTasks ProcessTrace QueryAllTracesW QuerySecurityAccessMask QueryServiceConfig2W QueryServiceConfigW QueryServiceLockStatusW QueryServiceStatus QueryTraceA QueryUsersOnEncryptedFile ReadEventLogA RegCloseKey RegConnectRegistryExA

LsaSetSecurityObject LsaSetTrustedDomainInfoByName LsaStorePrivateData MD4Init MD5Final MD5Update MSChapSrvChangePassword2 MakeAbsoluteSD2 MapGenericMask NotifyChangeEventLog NotifyServiceStatusChangeA ObjectCloseAuditAlarmA ObjectDeleteAuditAlarmA ObjectOpenAuditAlarmA ObjectPrivilegeAuditAlarmA OpenBackupEventLogA OpenEncryptedFileRawA OpenEventLogA OpenProcessToken OpenSCManagerW OpenServiceW OpenThreadWaitChainSession OpenTraceW PerfCloseQueryHandle PerfDecrementULongCounterValue PerfDeleteCounters PerfEnumerateCounterSet PerfIncrementULongCounterValue PerfOpenQueryHandle PerfQueryCounterInfo PerfQueryInstance PerfSetCounterSetInfo PerfSetULongLongCounterValue PerfStartProviderEx PrivilegeCheck PrivilegedServiceAuditAlarmW ProcessIdleTasksW QueryAllTracesA QueryRecoveryAgentsOnEncryptedFile QueryServiceConfig2A QueryServiceConfigA QueryServiceLockStatusA QueryServiceObjectSecurity QueryServiceStatusEx QueryTraceW ReadEncryptedFileRaw ReadEventLogW RegConnectRegistryA RegConnectRegistryExW

file:///C|/Users/System Administrator/Desktop/Assorted/NirSoft/Windows 7 DLL File Information - advapi32_dll.htm[5/27/2011 1:40:45 PM]

Windows 7 DLL File Information - advapi32.dll

RegConnectRegistryW RegCopyTreeW RegCreateKeyExA RegCreateKeyTransactedA RegCreateKeyW RegDeleteKeyExA RegDeleteKeyTransactedA RegDeleteKeyValueA RegDeleteKeyW RegDeleteTreeW RegDeleteValueW RegDisablePredefinedCacheEx RegEnableReflectionKey RegEnumKeyExA RegEnumKeyW RegEnumValueW RegGetKeySecurity RegGetValueW RegLoadAppKeyW RegLoadKeyW RegLoadMUIStringW RegOpenCurrentUser RegOpenKeyExA RegOpenKeyTransactedA RegOpenKeyW RegOverridePredefKey RegQueryInfoKeyW RegQueryMultipleValuesW RegQueryValueA RegQueryValueExW RegRenameKey RegReplaceKeyW RegRestoreKeyW RegSaveKeyExA RegSaveKeyW RegSetKeyValueA RegSetValueA RegSetValueExW RegUnLoadKeyA RegisterEventSourceA RegisterIdleTask RegisterServiceCtrlHandlerExA RegisterServiceCtrlHandlerW RegisterTraceGuidsW RemoveTraceCallback ReportEventA RevertToSelf SaferComputeTokenFromLevel SaferGetLevelInformation

RegCopyTreeA RegCreateKeyA RegCreateKeyExW RegCreateKeyTransactedW RegDeleteKeyA RegDeleteKeyExW RegDeleteKeyTransactedW RegDeleteKeyValueW RegDeleteTreeA RegDeleteValueA RegDisablePredefinedCache RegDisableReflectionKey RegEnumKeyA RegEnumKeyExW RegEnumValueA RegFlushKey RegGetValueA RegLoadAppKeyA RegLoadKeyA RegLoadMUIStringA RegNotifyChangeKeyValue RegOpenKeyA RegOpenKeyExW RegOpenKeyTransactedW RegOpenUserClassesRoot RegQueryInfoKeyA RegQueryMultipleValuesA RegQueryReflectionKey RegQueryValueExA RegQueryValueW RegReplaceKeyA RegRestoreKeyA RegSaveKeyA RegSaveKeyExW RegSetKeySecurity RegSetKeyValueW RegSetValueExA RegSetValueW RegUnLoadKeyW RegisterEventSourceW RegisterServiceCtrlHandlerA RegisterServiceCtrlHandlerExW RegisterTraceGuidsA RegisterWaitChainCOMCallback RemoveUsersFromEncryptedFile ReportEventW SaferCloseLevel SaferCreateLevel SaferGetPolicyInformation

file:///C|/Users/System Administrator/Desktop/Assorted/NirSoft/Windows 7 DLL File Information - advapi32_dll.htm[5/27/2011 1:40:45 PM]

Windows 7 DLL File Information - advapi32.dll

SaferIdentifyLevel SaferSetLevelInformation SaferiChangeRegistryScope SaferiIsDllAllowed SaferiPopulateDefaultsInRegistry SaferiSearchMatchingHashRules SetEncryptedFileMetadata SetEntriesInAccessListW SetEntriesInAclW SetEntriesInAuditListW SetFileSecurityW SetInformationCodeAuthzPolicyW SetNamedSecurityInfoA SetNamedSecurityInfoExW SetPrivateObjectSecurity SetSecurityAccessMask SetSecurityDescriptorDacl SetSecurityDescriptorOwner SetSecurityDescriptorSacl SetSecurityInfoExA SetServiceBits SetServiceStatus SetTokenInformation SetUserFileEncryptionKey StartServiceA StartServiceCtrlDispatcherW StartTraceA StopTraceA SystemFunction001 SystemFunction003 SystemFunction005 SystemFunction007 SystemFunction009 SystemFunction011 SystemFunction013 SystemFunction015 SystemFunction017 SystemFunction019 SystemFunction021 SystemFunction023 SystemFunction025 SystemFunction027 SystemFunction029 SystemFunction031 SystemFunction033 SystemFunction035 SystemFunction040 TraceEvent TraceMessage

SaferRecordEventLogEntry SaferSetPolicyInformation SaferiCompareTokenLevels SaferiIsExecutableFileType SaferiRecordEventLogEntry SetAclInformation SetEntriesInAccessListA SetEntriesInAclA SetEntriesInAuditListA SetFileSecurityA SetInformationCodeAuthzLevelW SetKernelObjectSecurity SetNamedSecurityInfoExA SetNamedSecurityInfoW SetPrivateObjectSecurityEx SetSecurityDescriptorControl SetSecurityDescriptorGroup SetSecurityDescriptorRMControl SetSecurityInfo SetSecurityInfoExW SetServiceObjectSecurity SetThreadToken SetTraceCallback SetUserFileEncryptionKeyEx StartServiceCtrlDispatcherA StartServiceW StartTraceW StopTraceW SystemFunction002 SystemFunction004 SystemFunction006 SystemFunction008 SystemFunction010 SystemFunction012 SystemFunction014 SystemFunction016 SystemFunction018 SystemFunction020 SystemFunction022 SystemFunction024 SystemFunction026 SystemFunction028 SystemFunction030 SystemFunction032 SystemFunction034 SystemFunction036 SystemFunction041 TraceEventInstance TraceMessageVa

file:///C|/Users/System Administrator/Desktop/Assorted/NirSoft/Windows 7 DLL File Information - advapi32_dll.htm[5/27/2011 1:40:45 PM]

Windows 7 DLL File Information - advapi32.dll

TraceSetInformation TreeResetNamedSecurityInfoW TreeSetNamedSecurityInfoW TrusteeAccessToObjectW UnlockServiceDatabase UnregisterTraceGuids UpdateTraceW UsePinForEncryptedFilesW WmiDevInstToInstanceNameA WmiEnumerateGuids WmiExecuteMethodW WmiFileHandleToInstanceNameW WmiMofEnumerateResourcesA WmiNotificationRegistrationA WmiOpenBlock WmiQueryAllDataMultipleA WmiQueryAllDataW WmiQuerySingleInstanceA WmiQuerySingleInstanceMultipleW WmiReceiveNotificationsA WmiSetSingleInstanceA WmiSetSingleItemA WriteEncryptedFileRaw

TreeResetNamedSecurityInfoA TreeSetNamedSecurityInfoA TrusteeAccessToObjectA UninstallApplication UnregisterIdleTask UpdateTraceA UsePinForEncryptedFilesA WmiCloseBlock WmiDevInstToInstanceNameW WmiExecuteMethodA WmiFileHandleToInstanceNameA WmiFreeBuffer WmiMofEnumerateResourcesW WmiNotificationRegistrationW WmiQueryAllDataA WmiQueryAllDataMultipleW WmiQueryGuidInformation WmiQuerySingleInstanceMultipleA WmiQuerySingleInstanceW WmiReceiveNotificationsW WmiSetSingleInstanceW WmiSetSingleItemW

Imported Functions List

The following functions are imported by this dll: msvcrt.dll: _errno _except_handler4_common _ftol2 _strcmpi _ultow _vsnprintf _vsnwprintf _wcsicmp _wcsnicmp _wcstoui64 isalnum isspace iswctype mbstowcs memcpy memmove memset strchr strrchr strstr swprintf_s swscanf_s tolower wcscat_s wcschr wcscpy_s wcsncmp wcsncpy_s wcsrchr wcsstr wcstok wcstombs wcstoul ntdll.dll: DbgPrint EtwEventRegister EtwEventWriteEx EtwSendNotification LdrLoadDll NtAlpcQueryInformation NtClose NtCreateFile

EtwDeliverDataBlock EtwEventUnregister EtwLogTraceEvent EtwpGetCpuSpeed LdrUnloadDll NtCancelIoFile NtCompareTokens NtCreateKey

EtwEnumerateProcessRegGuids EtwEventWrite EtwProcessPrivateLoggerRequest LdrGetProcedureAddress NlsMbCodePageTag NtClearEvent NtCreateEvent NtCreateKeyTransacted

file:///C|/Users/System Administrator/Desktop/Assorted/NirSoft/Windows 7 DLL File Information - advapi32_dll.htm[5/27/2011 1:40:45 PM]

Windows 7 DLL File Information - advapi32.dll

NtDelayExecution NtDeleteKey NtDeviceIoControlFile NtDuplicateObject NtDuplicateToken NtEnumerateKey NtLoadKeyEx NtOpenFile NtOpenKey NtOpenKeyEx NtOpenKeyTransacted NtOpenKeyTransactedEx NtOpenProcessToken NtOpenSymbolicLinkObject NtOpenThreadToken NtPowerInformation NtQueryInformationFile NtQueryInformationProcess NtQueryInformationThread NtQueryInformationToken NtQueryKey NtQueryMultipleValueKey NtQueryMutant NtQueryObject NtQueryPerformanceCounter NtQuerySecurityObject NtQuerySymbolicLinkObject NtQuerySystemInformation NtQuerySystemInformation NtQuerySystemTime NtQueryValueKey NtQueryVolumeInformationFile NtReadFile NtRenameKey NtReplaceKey NtSaveKey NtSaveMergedKeys NtSetEvent NtSetInformationThread NtSetInformationToken NtSetSystemInformation NtSetValueKey NtTerminateThread NtTraceControl NtTraceEvent NtWaitForMultipleObjects NtWaitForSingleObject NtWriteFile RtlAbsoluteToSelfRelativeSD RtlAcquireSRWLockExclusive RtlAcquireSRWLockShared RtlAddAccessAllowedAce RtlAddAccessAllowedAceEx RtlAddAccessAllowedObjectAce RtlAddAccessDeniedAceEx RtlAddAccessDeniedObjectAce RtlAddAce RtlAddAuditAccessAceEx RtlAddAuditAccessObjectAce RtlAdjustPrivilege RtlAllocateAndInitializeSid RtlAllocateHandle RtlAllocateHeap RtlAnsiCharToUnicodeChar RtlAnsiStringToUnicodeSize RtlAnsiStringToUnicodeString RtlAppendUnicodeStringToString RtlAppendUnicodeToString RtlCompareMemory RtlCompareUnicodeString RtlConvertSidToUnicodeString RtlCopySid RtlCopyString RtlCopyUnicodeString RtlCreateAcl RtlCreateQueryDebugBuffer RtlCreateSecurityDescriptor RtlCreateUnicodeString RtlCreateUnicodeStringFromAsciiz RtlDeleteCriticalSection RtlDeleteElementGenericTable RtlDestroyHandleTable RtlDestroyQueryDebugBuffer RtlDetermineDosPathNameType_U RtlDllShutdownInProgress RtlDosPathNameToNtPathName_U RtlDosPathNameToRelativeNtPathName_U RtlDuplicateUnicodeString RtlEnterCriticalSection RtlEnumerateGenericTableWithoutSplaying RtlEqualSid RtlEqualUnicodeString RtlExitUserThread RtlExpandEnvironmentStrings_U RtlFirstFreeAce RtlFormatCurrentUserKeyPath RtlFreeAnsiString RtlFreeAnsiString RtlFreeHandle RtlFreeHeap RtlFreeSid RtlGUIDFromString RtlGetControlSecurityDescriptor RtlGetCurrentTransaction RtlGetDaclSecurityDescriptor RtlGetFullPathName_U RtlGetGroupSecurityDescriptor RtlGetLastNtStatus RtlGetNtProductType RtlGetOwnerSecurityDescriptor RtlGetSaclSecurityDescriptor RtlGetThreadPreferredUILanguages RtlGetVersion RtlImageNtHeader RtlImpersonateSelf RtlInitAnsiString RtlInitAnsiStringEx RtlInitUnicodeString RtlInitUnicodeStringEx RtlInitializeBitMap RtlInitializeConditionVariable RtlInitializeCriticalSection RtlInitializeGenericTable RtlInitializeHandleTable RtlInitializeSid RtlInsertElementGenericTable RtlIntegerToUnicodeString RtlInterlockedClearBitRun RtlIpv4AddressToStringW RtlIpv6AddressToStringW RtlIsGenericTableEmpty RtlIsTextUnicode RtlIsValidIndexHandle RtlLeaveCriticalSection RtlLengthSecurityDescriptor RtlLengthSid RtlLookupElementGenericTable RtlMakeSelfRelativeSD RtlMultiByteToUnicodeN RtlNtStatusToDosError RtlNtStatusToDosErrorNoTeb RtlNumberGenericTableElements RtlOemStringToUnicodeString RtlOpenCurrentUser RtlPrefixUnicodeString RtlQueryHeapInformation RtlQueryPerformanceFrequency

file:///C|/Users/System Administrator/Desktop/Assorted/NirSoft/Windows 7 DLL File Information - advapi32_dll.htm[5/27/2011 1:40:45 PM]

Windows 7 DLL File Information - advapi32.dll

RtlQueryProcessDebugInformation RtlRandom RtlReleaseRelativeName RtlRestoreLastWin32Error RtlSetDaclSecurityDescriptor RtlSetSaclSecurityDescriptor RtlSubAuthoritySid RtlUnicodeStringToAnsiString RtlUnicodeToMultiByteSize RtlValidRelativeSecurityDescriptor

RtlQueryRegistryValues RtlReAllocateHeap RtlReleaseSRWLockExclusive RtlRunOnceBeginInitialize RtlSetGroupSecurityDescriptor RtlStringFromGUID RtlTimeToSecondsSince1970 RtlUnicodeStringToInteger RtlUpcaseUnicodeChar RtlValidSecurityDescriptor

RtlQueryTimeZoneInformation RtlRegisterThreadWithCsrss RtlReleaseSRWLockShared RtlRunOnceExecuteOnce RtlSetOwnerSecurityDescriptor RtlSubAuthorityCountSid RtlUnicodeStringToAnsiSize RtlUnicodeToMultiByteN RtlValidAcl RtlValidSid

KERNELBASE.dll: AreFileApisANSI EnumUILanguagesW GetSystemDefaultUILanguage GetUserDefaultUILanguage API-MS-WIN-Service-Core-L1-1-0.dll: sechost!RegisterServiceCtrlHandlerExW sechost!SetServiceStatus sechost!StartServiceCtrlDispatcherW API-MS-WIN-Service-winsvc-L1-1-0.dll: sechost!ChangeServiceConfig2A sechost!ChangeServiceConfigA sechost!ControlService sechost!ControlServiceExA sechost!CreateServiceA sechost!I_ScRpcBindA sechost!I_ScRpcBindW sechost!NotifyServiceStatusChangeA sechost!OpenSCManagerA sechost!OpenServiceA sechost!QueryServiceConfig2A sechost!QueryServiceConfigA sechost!QueryServiceStatus sechost!RegisterServiceCtrlHandlerA sechost!RegisterServiceCtrlHandlerExA sechost!RegisterServiceCtrlHandlerW sechost!StartServiceA sechost!StartServiceCtrlDispatcherA API-MS-WIN-Service-Management-L1-1-0.dll: sechost!CloseServiceHandle sechost!ControlServiceExW sechost!CreateServiceW sechost!DeleteService sechost!OpenSCManagerW sechost!OpenServiceW sechost!StartServiceW API-MS-WIN-Service-Management-L2-1-0.dll: sechost!ChangeServiceConfig2W sechost!ChangeServiceConfigW sechost!NotifyServiceStatusChange sechost!QueryServiceConfig2W sechost!QueryServiceConfigW sechost!QueryServiceObjectSecurity sechost!QueryServiceStatusEx sechost!SetServiceObjectSecurity API-MS-Win-Core-LocalRegistry-L1-1-0.dll: kernel32!RegCloseKey kernel32!RegCreateKeyExA kernel32!RegCreateKeyExW kernel32!RegDeleteKeyExA kernel32!RegDeleteKeyExW kernel32!RegDeleteTreeA kernel32!RegDeleteTreeW kernel32!RegDeleteValueA kernel32!RegDeleteValueW kernel32!RegDisablePredefinedCacheEx kernel32!RegEnumKeyExA kernel32!RegEnumKeyExW kernel32!RegEnumValueA kernel32!RegEnumValueW kernel32!RegFlushKey kernel32!RegGetKeySecurity kernel32!RegGetValueA kernel32!RegGetValueW kernel32!RegLoadKeyA kernel32!RegLoadKeyW kernel32!RegLoadMUIStringA kernel32!RegLoadMUIStringW kernel32!RegNotifyChangeKeyValue kernel32!RegOpenCurrentUser kernel32!RegOpenKeyExA kernel32!RegOpenKeyExW kernel32!RegOpenUserClassesRoot kernel32!RegQueryInfoKeyA kernel32!RegQueryInfoKeyW kernel32!RegQueryValueExA kernel32!RegQueryValueExW kernel32!RegRestoreKeyA kernel32!RegRestoreKeyW kernel32!RegSaveKeyExA kernel32!RegSaveKeyExW kernel32!RegSetKeySecurity kernel32!RegSetValueExA kernel32!RegSetValueExW kernel32!RegUnLoadKeyA kernel32!RegUnLoadKeyW API-MS-Win-Core-NamedPipe-L1-1-0.dll: KernelBase!ImpersonateNamedPipeClient

file:///C|/Users/System Administrator/Desktop/Assorted/NirSoft/Windows 7 DLL File Information - advapi32_dll.htm[5/27/2011 1:40:45 PM]

Windows 7 DLL File Information - advapi32.dll

API-MS-Win-Core-ProcessThreads-L1-1-0.dll: KernelBase!OpenProcessToken KernelBase!OpenThreadToken KernelBase!SetThreadToken kernel32!CreateProcessAsUserW kernel32!CreateThread kernel32!GetCurrentProcess kernel32!GetCurrentProcessId kernel32!GetCurrentThread kernel32!GetCurrentThreadId kernel32!GetPriorityClass kernel32!GetProcessId kernel32!OpenThread kernel32!TerminateProcess API-MS-Win-Security-Base-L1-1-0.dll: KernelBase!AccessCheck KernelBase!AccessCheckAndAuditAlarmW KernelBase!AccessCheckByType KernelBase!AccessCheckByTypeAndAuditAlarmW KernelBase!AccessCheckByTypeResultList KernelBase!AccessCheckByTypeResultListAndAuditAlarmByHandleW KernelBase!AccessCheckByTypeResultListAndAuditAlarmW KernelBase!AddAccessAllowedAce KernelBase!AddAccessAllowedAceEx KernelBase!AddAccessAllowedObjectAce KernelBase!AddAccessDeniedAce KernelBase!AddAccessDeniedAceEx KernelBase!AddAccessDeniedObjectAce KernelBase!AddAce KernelBase!AddAuditAccessAce KernelBase!AddAuditAccessAceEx KernelBase!AddAuditAccessObjectAce KernelBase!AdjustTokenGroups KernelBase!AdjustTokenPrivileges KernelBase!AllocateAndInitializeSid KernelBase!AllocateLocallyUniqueId KernelBase!AreAllAccessesGranted KernelBase!AreAnyAccessesGranted KernelBase!CheckTokenMembership KernelBase!ConvertToAutoInheritPrivateObjectSecurity KernelBase!CopySid KernelBase!CreatePrivateObjectSecurity KernelBase!CreatePrivateObjectSecurityEx KernelBase!CreatePrivateObjectSecurityWithMultipleInheritance KernelBase!CreateRestrictedToken KernelBase!CreateWellKnownSid KernelBase!DeleteAce KernelBase!DestroyPrivateObjectSecurity KernelBase!DuplicateToken KernelBase!DuplicateTokenEx KernelBase!EqualDomainSid KernelBase!EqualPrefixSid KernelBase!EqualSid KernelBase!FindFirstFreeAce KernelBase!FreeSid KernelBase!GetAce KernelBase!GetAclInformation

file:///C|/Users/System Administrator/Desktop/Assorted/NirSoft/Windows 7 DLL File Information - advapi32_dll.htm[5/27/2011 1:40:45 PM]

Windows 7 DLL File Information - advapi32.dll

KernelBase!GetFileSecurityW KernelBase!GetKernelObjectSecurity KernelBase!GetLengthSid KernelBase!GetPrivateObjectSecurity KernelBase!GetSecurityDescriptorControl KernelBase!GetSecurityDescriptorDacl KernelBase!GetSecurityDescriptorGroup KernelBase!GetSecurityDescriptorLength KernelBase!GetSecurityDescriptorOwner KernelBase!GetSecurityDescriptorRMControl KernelBase!GetSecurityDescriptorSacl KernelBase!GetSidIdentifierAuthority KernelBase!GetSidLengthRequired KernelBase!GetSidSubAuthority KernelBase!GetSidSubAuthorityCount KernelBase!GetTokenInformation KernelBase!GetWindowsAccountDomainSid KernelBase!ImpersonateAnonymousToken KernelBase!ImpersonateLoggedOnUser KernelBase!ImpersonateSelf KernelBase!InitializeAcl KernelBase!InitializeSecurityDescriptor KernelBase!InitializeSid KernelBase!IsTokenRestricted KernelBase!IsValidAcl KernelBase!IsValidRelativeSecurityDescriptor KernelBase!IsValidSecurityDescriptor KernelBase!IsValidSid KernelBase!IsWellKnownSid KernelBase!MakeAbsoluteSD KernelBase!MakeAbsoluteSD2 KernelBase!MakeSelfRelativeSD KernelBase!MapGenericMask KernelBase!ObjectCloseAuditAlarmW KernelBase!ObjectDeleteAuditAlarmW KernelBase!ObjectOpenAuditAlarmW KernelBase!ObjectPrivilegeAuditAlarmW KernelBase!PrivilegeCheck KernelBase!PrivilegedServiceAuditAlarmW KernelBase!QuerySecurityAccessMask KernelBase!RevertToSelf KernelBase!SetAclInformation KernelBase!SetFileSecurityW KernelBase!SetKernelObjectSecurity KernelBase!SetPrivateObjectSecurity KernelBase!SetPrivateObjectSecurityEx KernelBase!SetSecurityAccessMask KernelBase!SetSecurityDescriptorControl KernelBase!SetSecurityDescriptorDacl

file:///C|/Users/System Administrator/Desktop/Assorted/NirSoft/Windows 7 DLL File Information - advapi32_dll.htm[5/27/2011 1:40:45 PM]

Windows 7 DLL File Information - advapi32.dll

KernelBase!SetSecurityDescriptorGroup KernelBase!SetSecurityDescriptorOwner KernelBase!SetSecurityDescriptorRMControl KernelBase!SetSecurityDescriptorSacl KernelBase!SetTokenInformation KERNEL32.dll: CloseHandle CompareFileTime CopyFileW CreateEventW CreateFileMappingW CreateFileW CreateMutexA CreateMutexW CreateProcessInternalA DelayLoadFailureHook DeleteFileW DeviceIoControl DosDateTimeToFileTime DuplicateHandle ExpandEnvironmentStringsA ExpandEnvironmentStringsW FileTimeToDosDateTime FindClose FindFirstFileExW FindNextFileW FindResourceExW FormatMessageW FreeLibrary FreeLibraryAndExitThread GetActiveProcessorCount GetCommandLineW GetComputerNameA GetComputerNameExW GetComputerNameW GetDiskFreeSpaceExW GetDriveTypeW GetFileAttributesExW GetFileAttributesW GetFileMUIPath GetFileSize GetFileSizeEx GetFileTime GetFullPathNameA GetFullPathNameW GetLastError GetLocalTime GetLogicalDriveStringsW GetLongPathNameW GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOverlappedResult GetPrivateProfileIntW GetProcAddress GetProcessHeap GetSystemDirectoryW GetSystemInfo GetSystemTime GetSystemTimeAsFileTime GetSystemWindowsDirectoryW GetThreadUILanguage GetTickCount GetVolumeInformationW GetVolumePathNameW GlobalMemoryStatusEx HeapFree InterlockedCompareExchange InterlockedDecrement InterlockedExchange InterlockedIncrement IsWow64Process LoadLibraryA LoadLibraryExA LoadLibraryExW LoadLibraryW LoadResource LocalAlloc LocalFree LocalLock LocalReAlloc LocalUnlock LockResource MapViewOfFile MoveFileW MultiByteToWideChar OpenProcess OutputDebugStringW QueryPerformanceCounter ReadFile ReadProcessMemory RegKrnGetGlobalState RegKrnInitialize ReleaseMutex ResetEvent SearchPathW SetErrorMode SetEvent SetFileInformationByHandle SetFilePointer SetLastError SetUnhandledExceptionFilter SizeofResource Sleep SleepEx UnhandledExceptionFilter UnmapViewOfFile VirtualAllocEx VirtualFree VirtualFreeEx WaitForSingleObject WideCharToMultiByte Wow64DisableWow64FsRedirection Wow64RevertWow64FsRedirection WriteFile lstrcmpW lstrcmpi lstrcmpiW lstrlenW ntdll!RtlAllocateHeap ntdll!RtlDecodePointer ntdll!RtlDeleteCriticalSection ntdll!RtlEncodePointer ntdll!RtlEnterCriticalSection ntdll!RtlInitializeCriticalSection ntdll!RtlLeaveCriticalSection ntdll!RtlReAllocateHeap ntdll!RtlSizeHeap RPCRT4.dll:

file:///C|/Users/System Administrator/Desktop/Assorted/NirSoft/Windows 7 DLL File Information - advapi32_dll.htm[5/27/2011 1:40:45 PM]

Windows 7 DLL File Information - advapi32.dll

I_RpcExceptionFilter I_RpcMapWin32Status I_RpcSNCHOption NdrClientCall2 RpcBindingBind RpcBindingCreateW RpcBindingFree RpcBindingFromStringBindingW RpcBindingSetAuthInfoA RpcBindingSetAuthInfoExA RpcBindingSetAuthInfoExW RpcBindingSetAuthInfoW RpcEpResolveBinding RpcExceptionFilter RpcRaiseException RpcSsDestroyClientContext RpcStringBindingComposeW RpcStringFreeW UuidCreate UuidFromStringW UuidToStringW

XP DLL Information

Flash Drive Speed

Extension Information

Windows Password Recovery

file:///C|/Users/System Administrator/Desktop/Assorted/NirSoft/Windows 7 DLL File Information - advapi32_dll.htm[5/27/2011 1:40:45 PM]