Google Git
Sign in
mingw/mingw-w64/2edb94e9160e7b1488b3471e14f3086520055eaa^!/.
commit
2edb94e9160e7b1488b3471e14f3086520055eaa
[log]
author
Pali Rohár <pali.rohar@gmail.com>
Sun Jan 25 19:09:29 2026 +0100
committer
LIU Hao <lh_mouse@126.com>
Sat Feb 28 11:06:44 2026 +0800
tree
04bf8f4e9a5e1ead7207e549fc9690e98d5cf099
parent
5ec0740c3e88116a26c245c5a11970ee28fec99c [diff]
crt: Document all 32-bit x86 advapi32.dll symbols

Reorder symbols in mingw-w64-crt/lib32/advapi32.def file and document in
which Windows version was each symbol introduced.

This is just documentation change and does not add or remove any symbol in
32-bit x86 libadvapi32.a import library.

Newly documented symbols which were missing in the def file were added as
comments.

The fact that this does not change list of symbols can be verified by
comparing lines of advapi32.def file before and after this change that are
same when trimming comments and skipping empty lines. E.g. by command:

    sed 's/\s*;.*//;/^$/d' mingw-w64-crt/lib32/advapi32.def | LC_ALL=C sort

Co-authored-by: LIU Hao <lh_mouse@126.com>
Signed-off-by: LIU Hao <lh_mouse@126.com>

diff --git a/mingw-w64-crt/lib32/advapi32.def b/mingw-w64-crt/lib32/advapi32.def
index fbf40ad..9576b84 100644
--- a/mingw-w64-crt/lib32/advapi32.def
+++ b/mingw-w64-crt/lib32/advapi32.def

@@ -1,369 +1,80 @@
-;
-; Definition file of ADVAPI32.dll
-; Automatic generated by gendef
-; written by Kai Tietz 2008
-;
 LIBRARY "ADVAPI32.dll"
 EXPORTS
-SaferiRegisterExtensionDll@8 @1000 NONAME
-I_ScGetCurrentGroupStateW@12
-A_SHAFinal@8
-A_SHAInit@4
-A_SHAUpdate@12
+
+; This file is a comprehensive documentation for 32-bit x86 advapi32.dll symbols.
+; It covers all 3 platforms (Win32s, Win9x and WinNT) and contains information
+; from native advapi32.dll libraries on 32-bit Windows systems and also from
+; 32-bit WoW64 advapi32.dll libraries on 64-bit Windows systems. Symbols in this
+; file are ordered by increasing Windows version in which they were introduced.
+; First are Win32s versions, then followed by Win9x versions and then WinNT
+; because logically Win32s symbols are a subset of Win9x symbols which are a
+; subset of WinNT symbols. Comments contains additional information with exceptions.
+;
+; BEWARE that this file contains only information about symbol availability and
+; whether it is possible to load an application or library which references these
+; symbols. It does not contain information if the particular Windows version
+; supports or implements corresponding API functions. Lots of -W functions are
+; unimplemented on Win32s and Win9x platforms and simply signal
+; ERROR_CALL_NOT_IMPLEMENTED.
+
+; This is list of symbols available in all Windows versions (Win32s since Win32s 1.1;
+; Win9x since Windows 95; WinNT since Windows NT 3.1)
 AbortSystemShutdownA@4
 AbortSystemShutdownW@4
 AccessCheck@32
 AccessCheckAndAuditAlarmA@44
 AccessCheckAndAuditAlarmW@44
-AccessCheckByType@44
-AccessCheckByTypeAndAuditAlarmA@64
-AccessCheckByTypeAndAuditAlarmW@64
-AccessCheckByTypeResultList@44
-AccessCheckByTypeResultListAndAuditAlarmA@64
-AccessCheckByTypeResultListAndAuditAlarmByHandleA@68
-AccessCheckByTypeResultListAndAuditAlarmByHandleW@68
-AccessCheckByTypeResultListAndAuditAlarmW@64
 AddAccessAllowedAce@16
-AddAccessAllowedAceEx@20
-AddAccessAllowedObjectAce@28
 AddAccessDeniedAce@16
-AddAccessDeniedAceEx@20
-AddAccessDeniedObjectAce@28
 AddAce@20
 AddAuditAccessAce@24
-AddAuditAccessAceEx@28
-AddAuditAccessObjectAce@36
-AddConditionalAce@32
-AddMandatoryAce@20
-AddUsersToEncryptedFile@8
-AddUsersToEncryptedFileEx@16
 AdjustTokenGroups@24
 AdjustTokenPrivileges@24
 AllocateAndInitializeSid@44
 AllocateLocallyUniqueId@4
 AreAllAccessesGranted@8
 AreAnyAccessesGranted@8
-AuditComputeEffectivePolicyBySid@16
-AuditComputeEffectivePolicyByToken@16
-AuditEnumerateCategories@8
-AuditEnumeratePerUserPolicy@4
-AuditEnumerateSubCategories@16
-AuditFree@4
-AuditLookupCategoryGuidFromCategoryId@8
-AuditLookupCategoryIdFromCategoryGuid@8
-AuditLookupCategoryNameA@8
-AuditLookupCategoryNameW@8
-AuditLookupSubCategoryNameA@8
-AuditLookupSubCategoryNameW@8
-AuditQueryGlobalSaclA@8
-AuditQueryGlobalSaclW@8
-AuditQueryPerUserPolicy@16
-AuditQuerySecurity@8
-AuditQuerySystemPolicy@12
-AuditSetGlobalSaclA@8
-AuditSetGlobalSaclW@8
-AuditSetPerUserPolicy@12
-AuditSetSecurity@8
-AuditSetSystemPolicy@8
 BackupEventLogA@8
 BackupEventLogW@8
-BaseRegCloseKey@4
-BaseRegCreateKey@32
-BaseRegDeleteKeyEx@16
-BaseRegDeleteValue@8
-BaseRegFlushKey@4
-BaseRegGetVersion@8
-BaseRegLoadKey@12
-BaseRegOpenKey@20
-BaseRegRestoreKey@12
-BaseRegSaveKeyEx@16
-BaseRegSetKeySecurity@12
-BaseRegSetValue@20
-BaseRegUnLoadKey@8
-BuildExplicitAccessWithNameA@20
-BuildExplicitAccessWithNameW@20
-BuildImpersonateExplicitAccessWithNameA@24
-BuildImpersonateExplicitAccessWithNameW@24
-BuildImpersonateTrusteeA@8
-BuildImpersonateTrusteeW@8
-BuildSecurityDescriptorA@36
-BuildSecurityDescriptorW@36
-BuildTrusteeWithNameA@8
-BuildTrusteeWithNameW@8
-BuildTrusteeWithObjectsAndNameA@24
-BuildTrusteeWithObjectsAndNameW@24
-BuildTrusteeWithObjectsAndSidA@20
-BuildTrusteeWithObjectsAndSidW@20
-BuildTrusteeWithSidA@8
-BuildTrusteeWithSidW@8
-CancelOverlappedAccess@4
-ChangeServiceConfig2A@12
-ChangeServiceConfig2W@12
 ChangeServiceConfigA@44
 ChangeServiceConfigW@44
-CheckForHiberboot@8
-CheckTokenMembership@12
 ClearEventLogA@8
 ClearEventLogW@8
-CloseCodeAuthzLevel@4
-CloseEncryptedFileRaw@4
 CloseEventLog@4
 CloseServiceHandle@4
-CloseThreadWaitChainSession@4
-CloseTrace@8
-CommandLineFromMsiDescriptor@12
-ComputeAccessTokenFromCodeAuthzLevel@20
 ControlService@12
-ControlServiceExA@16
-ControlServiceExW@16
-ControlTraceA@20
-ControlTraceW@20
-ConvertAccessToSecurityDescriptorA@20
-ConvertAccessToSecurityDescriptorW@20
-ConvertSDToStringSDDomainW@28
-ConvertSDToStringSDRootDomainA@24
-ConvertSDToStringSDRootDomainW@24
-ConvertSecurityDescriptorToAccessA@28
-ConvertSecurityDescriptorToAccessNamedA@28
-ConvertSecurityDescriptorToAccessNamedW@28
-ConvertSecurityDescriptorToAccessW@28
-ConvertSecurityDescriptorToStringSecurityDescriptorA@20
-ConvertSecurityDescriptorToStringSecurityDescriptorW@20
-ConvertSidToStringSidA@8
-ConvertSidToStringSidW@8
-ConvertStringSDToSDDomainA@24
-ConvertStringSDToSDDomainW@24
-ConvertStringSDToSDRootDomainA@20
-ConvertStringSDToSDRootDomainW@20
-ConvertStringSecurityDescriptorToSecurityDescriptorA@16
-ConvertStringSecurityDescriptorToSecurityDescriptorW@16
-ConvertStringSidToSidA@8
-ConvertStringSidToSidW@8
-ConvertToAutoInheritPrivateObjectSecurity@24
 CopySid@12
-CreateCodeAuthzLevel@20
 CreatePrivateObjectSecurity@24
-CreatePrivateObjectSecurityEx@32
-CreatePrivateObjectSecurityWithMultipleInheritance@36
-CreateProcessAsUserA@44
-CreateProcessAsUserW@44
-CreateProcessWithLogonW@44
-CreateProcessWithTokenW@36
-CreateRestrictedToken@36
 CreateServiceA@52
 CreateServiceW@52
-CreateTraceInstanceId@8
-CreateWellKnownSid@16
-CredBackupCredentials@20
-CredDeleteA@12
-CredDeleteW@12
-CredEncryptAndMarshalBinaryBlob@12
-CredEnumerateA@16
-CredEnumerateW@16
-CredFindBestCredentialA@16
-CredFindBestCredentialW@16
-CredFree@4
-CredGetSessionTypes@8
-CredGetTargetInfoA@12
-CredGetTargetInfoW@12
-CredIsMarshaledCredentialA@4
-CredIsMarshaledCredentialW@4
-CredIsProtectedA@8
-CredIsProtectedW@8
-CredMarshalCredentialA@12
-CredMarshalCredentialW@12
-CredProfileLoaded@0
-CredProfileUnloaded@0
-CredProtectA@24
-CredProtectW@24
-CredReadA@16
-CredReadByTokenHandle@20
-CredReadDomainCredentialsA@16
-CredReadDomainCredentialsW@16
-CredReadW@16
-CredRenameA@16
-CredRenameW@16
-CredRestoreCredentials@16
-CredUnmarshalCredentialA@12
-CredUnmarshalCredentialW@12
-CredUnprotectA@20
-CredUnprotectW@20
-CredWriteA@8
-CredWriteDomainCredentialsA@12
-CredWriteDomainCredentialsW@12
-CredWriteW@8
-CredpConvertCredential@16
-CredpConvertOneCredentialSize@8
-CredpConvertTargetInfo@16
-CredpDecodeCredential@4
-CredpEncodeCredential@4
-CredpEncodeSecret@20
-CryptAcquireContextA@20
-CryptAcquireContextW@20
-CryptContextAddRef@12
-CryptCreateHash@20
-CryptDecrypt@24
-CryptDeriveKey@20
-CryptDestroyHash@4
-CryptDestroyKey@4
-CryptDuplicateHash@16
-CryptDuplicateKey@16
-CryptEncrypt@28
-CryptEnumProviderTypesA@24
-CryptEnumProviderTypesW@24
-CryptEnumProvidersA@24
-CryptEnumProvidersW@24
-CryptExportKey@24
-CryptGenKey@16
-CryptGenRandom@12
-CryptGetDefaultProviderA@20
-CryptGetDefaultProviderW@20
-CryptGetHashParam@20
-CryptGetKeyParam@20
-CryptGetProvParam@20
-CryptGetUserKey@12
-CryptHashData@16
-CryptHashSessionKey@12
-CryptImportKey@24
-CryptReleaseContext@8
-CryptSetHashParam@16
-CryptSetKeyParam@16
-CryptSetProvParam@16
-CryptSetProviderA@8
-CryptSetProviderExA@16
-CryptSetProviderExW@16
-CryptSetProviderW@8
-CryptSignHashA@24
-CryptSignHashW@24
-CryptVerifySignatureA@24
-CryptVerifySignatureW@24
-CveEventWrite@8
-DecryptFileA@8
-DecryptFileW@8
 DeleteAce@8
 DeleteService@4
 DeregisterEventSource@4
 DestroyPrivateObjectSecurity@4
-DuplicateEncryptionInfoFile@20
 DuplicateToken@12
-DuplicateTokenEx@24
-ElfBackupEventLogFileA@8
-ElfBackupEventLogFileW@8
-ElfChangeNotify@8
-ElfClearEventLogFileA@8
-ElfClearEventLogFileW@8
-ElfCloseEventLog@4
-ElfDeregisterEventSource@4
-ElfFlushEventLog@4
-ElfNumberOfRecords@8
-ElfOldestRecord@8
-ElfOpenBackupEventLogA@12
-ElfOpenBackupEventLogW@12
-ElfOpenEventLogA@12
-ElfOpenEventLogW@12
-ElfReadEventLogA@28
-ElfReadEventLogW@28
-ElfRegisterEventSourceA@12
-ElfRegisterEventSourceW@12
-ElfReportEventA@48
-ElfReportEventAndSourceW@60
-ElfReportEventW@48
-EnableTrace@24
-EnableTraceEx2@44
-EnableTraceEx@48
-EncryptFileA@4
-EncryptFileW@4
-EncryptedFileKeyInfo@12
-EncryptionDisable@8
 EnumDependentServicesA@24
 EnumDependentServicesW@24
-EnumDynamicTimeZoneInformation@8
-EnumServiceGroupW@36
 EnumServicesStatusA@32
-EnumServicesStatusExA@40
-EnumServicesStatusExW@40
 EnumServicesStatusW@32
-EnumerateTraceGuids@12
-EnumerateTraceGuidsEx@24
-EqualDomainSid@12
 EqualPrefixSid@8
 EqualSid@8
-EventAccessControl@20
-EventAccessQuery@12
-EventAccessRemove@4
-EventActivityIdControl@8
-EventEnabled@12
-EventProviderEnabled@20
-EventRegister@16
-EventSetInformation@20
-EventUnregister@8
-EventWrite@20
-EventWriteEndScenario@20
-EventWriteEx@40
-EventWriteStartScenario@20
-EventWriteString@24
-EventWriteTransfer@28
-FileEncryptionStatusA@8
-FileEncryptionStatusW@8
 FindFirstFreeAce@8
-FlushEfsCache@4
-FlushTraceA@16
-FlushTraceW@16
-FreeEncryptedFileKeyInfo@4
-FreeEncryptedFileMetadata@4
-FreeEncryptionCertificateHashList@4
-FreeInheritedFromArray@12
 FreeSid@4
-GetAccessPermissionsForObjectA@36
-GetAccessPermissionsForObjectW@36
 GetAce@12
 GetAclInformation@16
-GetAuditedPermissionsFromAclA@16
-GetAuditedPermissionsFromAclW@16
-GetCurrentHwProfileA@4
-GetCurrentHwProfileW@4
-GetDynamicTimeZoneInformationEffectiveYears@12
-GetEffectiveRightsFromAclA@12
-GetEffectiveRightsFromAclW@12
-GetEncryptedFileMetadata@12
-GetEventLogInformation@20
-GetExplicitEntriesFromAclA@12
-GetExplicitEntriesFromAclW@12
 GetFileSecurityA@20
 GetFileSecurityW@20
-GetInformationCodeAuthzLevelW@20
-GetInformationCodeAuthzPolicyW@24
-GetInheritanceSourceA@40
-GetInheritanceSourceW@40
 GetKernelObjectSecurity@20
 GetLengthSid@4
-GetLocalManagedApplicationData@12
-GetLocalManagedApplications@12
-GetManagedApplicationCategories@8
-GetManagedApplications@20
-GetMangledSiteSid@12
-GetMultipleTrusteeA@4
-GetMultipleTrusteeOperationA@4
-GetMultipleTrusteeOperationW@4
-GetMultipleTrusteeW@4
-GetNamedSecurityInfoA@32
-GetNamedSecurityInfoExA@36
-GetNamedSecurityInfoExW@36
-GetNamedSecurityInfoW@32
 GetNumberOfEventLogRecords@8
 GetOldestEventLogRecord@8
-GetOverlappedAccessResults@16
 GetPrivateObjectSecurity@20
 GetSecurityDescriptorControl@12
 GetSecurityDescriptorDacl@16
 GetSecurityDescriptorGroup@12
 GetSecurityDescriptorLength@4
 GetSecurityDescriptorOwner@12
-GetSecurityDescriptorRMControl@8
 GetSecurityDescriptorSacl@16
-GetSecurityInfo@32
-GetSecurityInfoExA@36
-GetSecurityInfoExW@36
 GetServiceDisplayNameA@16
 GetServiceDisplayNameW@16
 GetServiceKeyNameA@16
@@ -372,65 +83,20 @@
 GetSidLengthRequired@4
 GetSidSubAuthority@8
 GetSidSubAuthorityCount@4
-GetStringConditionFromBinary@16
-GetSiteDirectoryA@12
-GetSiteDirectoryW@12
-GetSiteNameFromSid@8
-GetSiteSidFromToken@4
-GetSiteSidFromUrl@4
-GetThreadWaitChain@28
 GetTokenInformation@20
-GetTraceEnableFlags@8
-GetTraceEnableLevel@8
-GetTraceLoggerHandle@4
-GetTrusteeFormA@4
-GetTrusteeFormW@4
-GetTrusteeNameA@4
-GetTrusteeNameW@4
-GetTrusteeTypeA@4
-GetTrusteeTypeW@4
 GetUserNameA@8
 GetUserNameW@8
-GetWindowsAccountDomainSid@12
-I_QueryTagInformation@12
-I_ScIsSecurityProcess@0
-I_ScPnPGetServiceName@12
-I_ScQueryServiceConfig@12
-I_ScSendPnPMessage@24
-I_ScSendTSMessage@16
-I_ScSetServiceBitsA@20
-I_ScSetServiceBitsW@20
-I_ScValidatePnPService@12
-IdentifyCodeAuthzLevelW@16
-ImpersonateAnonymousToken@4
-ImpersonateLoggedOnUser@4
 ImpersonateNamedPipeClient@4
 ImpersonateSelf@4
 InitializeAcl@12
 InitializeSecurityDescriptor@8
 InitializeSid@12
-InitiateShutdownA@20
-InitiateShutdownW@20
 InitiateSystemShutdownA@20
-InitiateSystemShutdownExA@24
-InitiateSystemShutdownExW@24
 InitiateSystemShutdownW@20
-InstallApplication@4
-IsProcessRestricted@0
-IsTextUnicode@12
-IsTokenRestricted@4
-IsTokenUntrusted@4
 IsValidAcl@4
-IsValidRelativeSecurityDescriptor@12
 IsValidSecurityDescriptor@4
 IsValidSid@4
-IsWellKnownSid@8
 LockServiceDatabase@4
-LogonUserA@24
-LogonUserExA@40
-LogonUserExExW@44
-LogonUserExW@40
-LogonUserW@24
 LookupAccountNameA@28
 LookupAccountNameW@28
 LookupAccountSidA@28
@@ -441,115 +107,18 @@
 LookupPrivilegeNameW@16
 LookupPrivilegeValueA@12
 LookupPrivilegeValueW@12
-LookupSecurityDescriptorPartsA@28
-LookupSecurityDescriptorPartsW@28
-LsaAddAccountRights@16
-LsaAddPrivilegesToAccount@8
-LsaClearAuditLog@4
-LsaClose@4
-LsaConfigureAutoLogonCredentials@0
-LsaCreateAccount@16
-LsaCreateSecret@16
-LsaCreateTrustedDomain@16
-LsaCreateTrustedDomainEx@20
-LsaDelete@4
-LsaDeleteTrustedDomain@8
-LsaDisableUserArso@4
-LsaEnableUserArso@4
-LsaEnumerateAccountRights@16
-LsaEnumerateAccounts@20
-LsaEnumerateAccountsWithUserRight@16
-LsaEnumeratePrivileges@20
-LsaEnumeratePrivilegesOfAccount@8
-LsaEnumerateTrustedDomains@20
-LsaEnumerateTrustedDomainsEx@20
-LsaFreeMemory@4
-LsaGetAppliedCAPIDs@12
-LsaGetDeviceRegistrationInfo@4
-LsaGetQuotasForAccount@8
-LsaGetRemoteUserName@12
-LsaGetSystemAccessAccount@8
-LsaGetUserName@8
-LsaICLookupNames@40
-LsaICLookupNamesWithCreds@48
-LsaICLookupSids@36
-LsaICLookupSidsWithCreds@48
-LsaInvokeTrustScanner@16
-LsaIsUserArsoAllowed@4
-LsaIsUserArsoEnabled@8
-LsaLookupNames2@24
-LsaLookupNames@20
-LsaLookupPrivilegeDisplayName@16
-LsaLookupPrivilegeName@12
-LsaLookupPrivilegeValue@12
-LsaLookupSids2@24
-LsaLookupSids@20
-LsaManageSidNameMapping@12
-LsaNtStatusToWinError@4
-LsaOpenAccount@16
-LsaOpenPolicy@16
-LsaOpenPolicySce@16
-LsaOpenSecret@16
-LsaOpenTrustedDomain@16
-LsaOpenTrustedDomainByName@16
-LsaProfileDeleted@4
-LsaQueryCAPs@16
-LsaQueryDomainInformationPolicy@12
-LsaQueryForestTrustInformation2@16
-LsaQueryForestTrustInformation@12
-LsaQueryInfoTrustedDomain@12
-LsaQueryInformationPolicy@12
-LsaQuerySecret@20
-LsaQuerySecurityObject@12
-LsaQueryTrustedDomainInfo@16
-LsaQueryTrustedDomainInfoByName@16
-LsaRemoveAccountRights@20
-LsaRemovePrivilegesFromAccount@12
-LsaRetrievePrivateData@12
-LsaSetCAPs@12
-LsaSetDomainInformationPolicy@12
-LsaSetForestTrustInformation2@24
-LsaSetForestTrustInformation@20
-LsaSetInformationPolicy@12
-LsaSetInformationTrustedDomain@12
-LsaSetQuotasForAccount@8
-LsaSetSecret@12
-LsaSetSecurityObject@12
-LsaSetSystemAccessAccount@8
-LsaSetTrustedDomainInfoByName@16
-LsaSetTrustedDomainInformation@16
-LsaStorePrivateData@12
-LsaValidateProcUniqueLuid@4
-MD4Final@4
-MD4Init@4
-MD4Update@12
-MD5Final@4
-MD5Init@4
-MD5Update@12
-MSChapSrvChangePassword2@28
-MSChapSrvChangePassword@28
-MakeAbsoluteSD2@8
 MakeAbsoluteSD@44
 MakeSelfRelativeSD@12
 MapGenericMask@8
 NotifyBootConfigStatus@4
-NotifyChangeEventLog@8
-NotifyServiceStatusChange@12
-NotifyServiceStatusChangeA@12
-NotifyServiceStatusChangeW@12
-NpGetUserName@12
 ObjectCloseAuditAlarmA@12
 ObjectCloseAuditAlarmW@12
-ObjectDeleteAuditAlarmA@12
-ObjectDeleteAuditAlarmW@12
 ObjectOpenAuditAlarmA@48
 ObjectOpenAuditAlarmW@48
 ObjectPrivilegeAuditAlarmA@24
 ObjectPrivilegeAuditAlarmW@24
 OpenBackupEventLogA@8
 OpenBackupEventLogW@8
-OpenEncryptedFileRawA@12
-OpenEncryptedFileRawW@12
 OpenEventLogA@8
 OpenEventLogW@8
 OpenProcessToken@12
@@ -558,97 +127,28 @@
 OpenServiceA@12
 OpenServiceW@12
 OpenThreadToken@16
-OpenThreadWaitChainSession@8
-OpenTraceA@4
-OpenTraceW@4
-OperationEnd@4
-OperationStart@4
-PerfAddCounters@12
-PerfCloseQueryHandle@4
-PerfCreateInstance@16
-PerfDecrementULongCounterValue@16
-PerfDecrementULongLongCounterValue@20
-PerfDeleteCounters@12
-PerfDeleteInstance@8
-PerfEnumerateCounterSet@16
-PerfEnumerateCounterSetInstances@20
-PerfIncrementULongCounterValue@16
-PerfIncrementULongLongCounterValue@20
-PerfOpenQueryHandle@8
-PerfQueryCounterData@16
-PerfQueryCounterInfo@16
-PerfQueryCounterSetRegistrationInfo@28
-PerfQueryInstance@16
-PerfRegCloseKey@4
-PerfRegEnumKey@24
-PerfRegEnumValue@32
-PerfRegQueryInfoKey@44
-PerfRegQueryValue@28
-PerfRegSetValue@24
-PerfSetCounterRefValue@16
-PerfSetCounterSetInfo@12
-PerfSetULongCounterValue@16
-PerfSetULongLongCounterValue@20
-PerfStartProvider@12
-PerfStartProviderEx@12
-PerfStopProvider@4
 PrivilegeCheck@12
 PrivilegedServiceAuditAlarmA@20
 PrivilegedServiceAuditAlarmW@20
-ProcessIdleTasks@0
-ProcessIdleTasksW@16
-ProcessTrace@16
-QueryAllTracesA@12
-QueryAllTracesW@12
-QueryRecoveryAgentsOnEncryptedFile@8
-QuerySecurityAccessMask@8
-QueryServiceConfig2A@20
-QueryServiceConfig2W@20
 QueryServiceConfigA@16
 QueryServiceConfigW@16
-QueryServiceDynamicInformation@12
 QueryServiceLockStatusA@16
 QueryServiceLockStatusW@16
 QueryServiceObjectSecurity@20
 QueryServiceStatus@8
-QueryServiceStatusEx@20
-QueryTraceA@16
-QueryTraceProcessingHandle@32
-QueryTraceW@16
-QueryUsersOnEncryptedFile@8
-QueryWindows31FilesMigration@4
-ReadEncryptedFileRaw@12
 ReadEventLogA@28
 ReadEventLogW@28
 RegCloseKey@4
 RegConnectRegistryA@12
-RegConnectRegistryExA@16
-RegConnectRegistryExW@16
 RegConnectRegistryW@12
-RegCopyTreeA@12
-RegCopyTreeW@12
 RegCreateKeyA@12
 RegCreateKeyExA@36
 RegCreateKeyExW@36
-RegCreateKeyTransactedA@44
-RegCreateKeyTransactedW@44
 RegCreateKeyW@12
 RegDeleteKeyA@8
 RegDeleteKeyW@8
-RegDeleteKeyExA@16
-RegDeleteKeyExW@16
-RegDeleteKeyTransactedA@24
-RegDeleteKeyTransactedW@24
-RegDeleteKeyValueA@12
-RegDeleteKeyValueW@12
-RegDeleteTreeA@8
-RegDeleteTreeW@8
 RegDeleteValueA@8
 RegDeleteValueW@8
-RegDisablePredefinedCache@0
-RegDisablePredefinedCacheEx@0
-RegDisableReflectionKey@4
-RegEnableReflectionKey@4
 RegEnumKeyA@16
 RegEnumKeyExA@32
 RegEnumKeyExW@32
@@ -657,45 +157,26 @@
 RegEnumValueW@32
 RegFlushKey@4
 RegGetKeySecurity@16
-RegGetValueA@28
-RegGetValueW@28
-RegLoadAppKeyA@20
-RegLoadAppKeyW@20
 RegLoadKeyA@12
 RegLoadKeyW@12
-RegLoadMUIStringA@28
-RegLoadMUIStringW@28
 RegNotifyChangeKeyValue@20
-RegOpenCurrentUser@8
 RegOpenKeyA@12
 RegOpenKeyExA@20
 RegOpenKeyExW@20
-RegOpenKeyTransactedA@28
-RegOpenKeyTransactedW@28
 RegOpenKeyW@12
-RegOpenUserClassesRoot@16
-RegOverridePredefKey@8
 RegQueryInfoKeyA@48
 RegQueryInfoKeyW@48
-RegQueryMultipleValuesA@20
-RegQueryMultipleValuesW@20
-RegQueryReflectionKey@8
 RegQueryValueA@16
 RegQueryValueExA@24
 RegQueryValueExW@24
 RegQueryValueW@16
-RegRenameKey@12
 RegReplaceKeyA@16
 RegReplaceKeyW@16
 RegRestoreKeyA@12
 RegRestoreKeyW@12
 RegSaveKeyA@12
-RegSaveKeyExA@16
-RegSaveKeyExW@16
 RegSaveKeyW@12
 RegSetKeySecurity@12
-RegSetKeyValueA@24
-RegSetKeyValueW@24
 RegSetValueA@20
 RegSetValueExA@24
 RegSetValueExW@24
@@ -704,88 +185,92 @@
 RegUnLoadKeyW@8
 RegisterEventSourceA@8
 RegisterEventSourceW@8
-RegisterIdleTask@16
 RegisterServiceCtrlHandlerA@8
-RegisterServiceCtrlHandlerExA@12
-RegisterServiceCtrlHandlerExW@12
 RegisterServiceCtrlHandlerW@8
-RegisterTraceGuidsA@32
-RegisterTraceGuidsW@32
-RegisterWaitChainCOMCallback@8
-RemoteRegEnumKeyWrapper@20
-RemoteRegEnumValueWrapper@28
-RemoteRegQueryInfoKeyWrapper@40
-RemoteRegQueryMultipleValues2Wrapper@24
-RemoteRegQueryMultipleValuesWrapper@20
-RemoteRegQueryValueWrapper@24
-RemoveTraceCallback@4
-RemoveUsersFromEncryptedFile@8
 ReportEventA@36
 ReportEventW@36
 RevertToSelf@0
-SafeBaseRegGetKeySecurity@16
-SaferCloseLevel@4
-SaferComputeTokenFromLevel@20
-SaferCreateLevel@20
-SaferGetLevelInformation@20
-SaferGetPolicyInformation@24
-SaferIdentifyLevel@16
-SaferRecordEventLogEntry@12
-SaferSetLevelInformation@16
-SaferSetPolicyInformation@20
-SaferiChangeRegistryScope@8
-SaferiCompareTokenLevels@12
-SaferiIsDllAllowed@8
-SaferiIsExecutableFileType@8
-SaferiPopulateDefaultsInRegistry@8
-SaferiRecordEventLogEntry@12
-SaferiSearchMatchingHashRules@24
 SetAclInformation@16
-SetEncryptedFileMetadata@24
-SetEntriesInAccessListA@24
-SetEntriesInAccessListW@24
-SetEntriesInAclA@16
-SetEntriesInAclW@16
-SetEntriesInAuditListA@24
-SetEntriesInAuditListW@24
 SetFileSecurityA@12
 SetFileSecurityW@12
-SetInformationCodeAuthzLevelW@16
-SetInformationCodeAuthzPolicyW@20
 SetKernelObjectSecurity@12
-SetNamedSecurityInfoA@28
-SetNamedSecurityInfoExA@36
-SetNamedSecurityInfoExW@36
-SetNamedSecurityInfoW@28
 SetPrivateObjectSecurity@20
-SetPrivateObjectSecurityEx@24
-SetSecurityAccessMask@8
-SetSecurityDescriptorControl@12
 SetSecurityDescriptorDacl@16
 SetSecurityDescriptorGroup@12
 SetSecurityDescriptorOwner@12
-SetSecurityDescriptorRMControl@8
 SetSecurityDescriptorSacl@16
-SetSecurityInfo@28
-SetSecurityInfoExA@36
-SetSecurityInfoExW@36
-SetServiceBits@16
 SetServiceObjectSecurity@12
 SetServiceStatus@8
-SetThreadToken@8
 SetTokenInformation@16
-SetTraceCallback@8
-SetUserFileEncryptionKey@4
-SetUserFileEncryptionKeyEx@16
 StartServiceA@12
 StartServiceCtrlDispatcherA@4
 StartServiceCtrlDispatcherW@4
 StartServiceW@12
-StartTraceA@12
-StartTraceW@12
-SynchronizeWindows31FilesAndWindowsNTRegistry@16
-StopTraceA@16
-StopTraceW@16
+UnlockServiceDatabase@4
+
+; This is list of symbols added in Win32s 1.20 and available in all Win9x and WinNT versions
+SetThreadToken@8
+
+; This is list of symbols added in Win32s 1.20 and available in all WinNT versions, but not in Win9x
+ElfBackupEventLogFileA@8 ; removed in Windows 11 2022 Update (Sun Valley 2 / 22H2)
+ElfBackupEventLogFileW@8 ; removed in Windows 11 2022 Update (Sun Valley 2 / 22H2)
+ElfChangeNotify@8 ; removed in Windows 11 2022 Update (Sun Valley 2 / 22H2)
+ElfClearEventLogFileA@8 ; removed in Windows 11 2022 Update (Sun Valley 2 / 22H2)
+ElfClearEventLogFileW@8 ; removed in Windows 11 2022 Update (Sun Valley 2 / 22H2)
+ElfCloseEventLog@4 ; removed in Windows 11 2022 Update (Sun Valley 2 / 22H2)
+ElfDeregisterEventSource@4 ; removed in Windows 11 2022 Update (Sun Valley 2 / 22H2)
+ElfNumberOfRecords@8 ; removed in Windows 11 2022 Update (Sun Valley 2 / 22H2)
+ElfOldestRecord@8 ; removed in Windows 11 2022 Update (Sun Valley 2 / 22H2)
+ElfOpenBackupEventLogA@12 ; removed in Windows 11 2022 Update (Sun Valley 2 / 22H2)
+ElfOpenBackupEventLogW@12 ; removed in Windows 11 2022 Update (Sun Valley 2 / 22H2)
+ElfOpenEventLogA@12 ; removed in Windows 11 2022 Update (Sun Valley 2 / 22H2)
+ElfOpenEventLogW@12 ; removed in Windows 11 2022 Update (Sun Valley 2 / 22H2)
+ElfReadEventLogA@28 ; removed in Windows 11 2022 Update (Sun Valley 2 / 22H2)
+ElfReadEventLogW@28 ; removed in Windows 11 2022 Update (Sun Valley 2 / 22H2)
+ElfRegisterEventSourceA@12 ; removed in Windows 11 2022 Update (Sun Valley 2 / 22H2)
+ElfRegisterEventSourceW@12 ; removed in Windows 11 2022 Update (Sun Valley 2 / 22H2)
+ElfReportEventA@48 ; removed in Windows 11 2022 Update (Sun Valley 2 / 22H2)
+ElfReportEventW@48 ; removed in Windows 11 2022 Update (Sun Valley 2 / 22H2)
+I_ScSetServiceBitsA@20
+I_ScSetServiceBitsW@20
+LsaAddPrivilegesToAccount@8
+LsaClearAuditLog@4
+LsaClose@4
+LsaCreateAccount@16
+LsaCreateSecret@16
+LsaCreateTrustedDomain@16
+LsaDelete@4
+LsaEnumerateAccounts@20
+LsaEnumeratePrivileges@20
+LsaEnumeratePrivilegesOfAccount@8
+LsaEnumerateTrustedDomains@20
+LsaFreeMemory@4
+LsaGetQuotasForAccount@8
+LsaGetSystemAccessAccount@8
+LsaICLookupNames@40 ; Win32s has ABI "LsaICLookupNames@40", Windows NT 3.1-4.0 has ABI "LsaICLookupNames@28", Windows 2000 has ABI "LsaICLookupNames@32", Windows XP and new has ABI "LsaICLookupNames@40"
+LsaICLookupSids@36 ; Win32s has ABI "LsaICLookupSids@36", Windows NT 3.1-4.0 has ABI "LsaICLookupSids@28", Windows 2000 has ABI "LsaICLookupSids@32", Windows XP and new has ABI "LsaICLookupSids@36"
+LsaLookupNames@20
+LsaLookupPrivilegeDisplayName@16
+LsaLookupPrivilegeName@12
+LsaLookupPrivilegeValue@12
+LsaLookupSids@20
+LsaOpenAccount@16
+LsaOpenPolicy@16
+LsaOpenSecret@16
+LsaOpenTrustedDomain@16
+LsaQueryInfoTrustedDomain@12
+LsaQueryInformationPolicy@12
+LsaQuerySecret@20
+LsaQuerySecurityObject@12
+LsaRemovePrivilegesFromAccount@12
+LsaSetInformationPolicy@12
+LsaSetInformationTrustedDomain@12
+LsaSetQuotasForAccount@8
+LsaSetSecret@12
+LsaSetSecurityObject@12
+LsaSetSystemAccessAccount@8
+QueryWindows31FilesMigration@4 ; removed in Windows Server 2003
+SynchronizeWindows31FilesAndWindowsNTRegistry@16 ; removed in Windows Server 2003
 SystemFunction001@12
 SystemFunction002@12
 SystemFunction003@8
@@ -817,34 +302,320 @@
 SystemFunction029@8
 SystemFunction030@8
 SystemFunction031@8
+
+; This is list of symbols added in Win32s 1.20, available in all Win9x versions and since Windows NT 3.5
+IsTextUnicode@12
+NotifyChangeEventLog@8
+SetServiceBits@16
+
+; This is list of symbols added in Win32s 1.20, available since Windows NT 3.5, but not available in Win9x
 SystemFunction032@8
 SystemFunction033@8
-SystemFunction034@12
-SystemFunction035@4
-SystemFunction036@8
-SystemFunction040@12
-SystemFunction041@12
-TraceEvent@12
-TraceEventInstance@20
-TraceMessage
-TraceMessageVa@24
-TraceQueryInformation@24
-TraceSetInformation@20
-TreeResetNamedSecurityInfoA@44
-TreeResetNamedSecurityInfoW@44
-TreeSetNamedSecurityInfoA@44
-TreeSetNamedSecurityInfoW@44
+
+; This is list of symbols added in Win32s 1.25, available in all Win9x versions and since Windows NT 3.51
+CreateProcessAsUserA@44
+CreateProcessAsUserW@44
+ImpersonateLoggedOnUser@4
+LogonUserA@24
+LogonUserW@24
+
+; This is list of symbols added in Win32s 1.25, available since Windows NT 3.51, but not available in Win9x
+LsaAddAccountRights@16
+LsaDeleteTrustedDomain@8
+LsaEnumerateAccountRights@16
+LsaEnumerateAccountsWithUserRight@16
+LsaQueryTrustedDomainInfo@16
+LsaRemoveAccountRights@20
+LsaRetrievePrivateData@12
+LsaSetTrustedDomainInformation@16
+LsaStorePrivateData@12
+
+; This is list of symbols added in Win32s 1.30, available in all Win9x versions and since Windows NT 3.51
+RegQueryMultipleValuesA@20
+RegQueryMultipleValuesW@20
+
+; This is list of symbols added in Win32s 1.30, available since Windows NT 3.51, but not available in Win9x
+LsaNtStatusToWinError@4
+
+;; This is end of Win32s symbols ;;
+
+; This is list of symbols available in all Win9x versions, but not available in Win32s and WinNT
+; RegRemapPreDefKey@8
+
+; This is list of symbols added in Windows 95 OSR2 and also since Windows NT 4.0, but not available in Win32s
+CryptAcquireContextA@20
+CryptCreateHash@20
+CryptDecrypt@24
+CryptDeriveKey@20
+CryptDestroyHash@4
+CryptDestroyKey@4
+CryptEncrypt@28
+CryptExportKey@24
+CryptGenKey@16
+CryptGenRandom@12
+CryptGetHashParam@20
+CryptGetKeyParam@20
+CryptGetProvParam@20
+CryptGetUserKey@12
+CryptHashData@16
+CryptHashSessionKey@12
+CryptImportKey@24
+CryptReleaseContext@8
+CryptSetHashParam@16
+CryptSetKeyParam@16
+CryptSetProvParam@16
+CryptSetProviderA@8
+CryptSignHashA@24
+CryptVerifySignatureA@24
+
+; This is list of symbols added in Windows 98 and also since Windows NT 4.0, but not available in Win32s
+BuildExplicitAccessWithNameA@20
+BuildExplicitAccessWithNameW@20
+BuildImpersonateExplicitAccessWithNameA@24
+BuildImpersonateExplicitAccessWithNameW@24
+BuildImpersonateTrusteeA@8
+BuildImpersonateTrusteeW@8
+BuildSecurityDescriptorA@36
+BuildSecurityDescriptorW@36
+BuildTrusteeWithNameA@8
+BuildTrusteeWithNameW@8
+BuildTrusteeWithSidA@8
+BuildTrusteeWithSidW@8
+CryptAcquireContextW@20
+CryptSetProviderW@8
+CryptSignHashW@24
+CryptVerifySignatureW@24
+DuplicateTokenEx@24
+GetAuditedPermissionsFromAclA@16
+GetAuditedPermissionsFromAclW@16
+GetCurrentHwProfileA@4
+GetCurrentHwProfileW@4
+GetEffectiveRightsFromAclA@12
+GetEffectiveRightsFromAclW@12
+GetExplicitEntriesFromAclA@12
+GetExplicitEntriesFromAclW@12
+GetMultipleTrusteeA@4
+GetMultipleTrusteeOperationA@4
+GetMultipleTrusteeOperationW@4
+GetMultipleTrusteeW@4
+GetNamedSecurityInfoA@32
+GetNamedSecurityInfoW@32
+GetSecurityInfo@32
+GetTrusteeNameA@4
+GetTrusteeNameW@4
+GetTrusteeTypeA@4
+GetTrusteeTypeW@4
+LookupSecurityDescriptorPartsA@28
+LookupSecurityDescriptorPartsW@28
+ObjectDeleteAuditAlarmA@12
+ObjectDeleteAuditAlarmW@12
+SetEntriesInAclA@16
+SetEntriesInAclW@16
+SetNamedSecurityInfoA@28
+SetNamedSecurityInfoW@28
+SetSecurityInfo@28
+
+; This is list of symbols added in Windows 98 and also since Windows NT 4.0 SP4, but not available in Win32s
+CancelOverlappedAccess@4
+ConvertAccessToSecurityDescriptorA@20
+ConvertAccessToSecurityDescriptorW@20
+ConvertSecurityDescriptorToAccessA@28
+ConvertSecurityDescriptorToAccessNamedA@28
+ConvertSecurityDescriptorToAccessNamedW@28
+ConvertSecurityDescriptorToAccessW@28
+GetAccessPermissionsForObjectA@36
+GetAccessPermissionsForObjectW@36
+GetNamedSecurityInfoExA@36
+GetNamedSecurityInfoExW@36
+GetOverlappedAccessResults@16
+GetSecurityInfoExA@36
+GetSecurityInfoExW@36
+SetEntriesInAccessListA@24
+SetEntriesInAccessListW@24
+SetEntriesInAuditListA@24
+SetEntriesInAuditListW@24
+SetNamedSecurityInfoExA@36
+SetNamedSecurityInfoExW@36
+SetSecurityInfoExA@36
+SetSecurityInfoExW@36
 TrusteeAccessToObjectA@24
 TrusteeAccessToObjectW@24
-UninstallApplication@8
-UnlockServiceDatabase@4
-UnregisterIdleTask@12
+
+; This is list of symbols added in Windows 98 and also since Windows 2000, but not available in Win32s
+CryptContextAddRef@12
+CryptDuplicateHash@16
+CryptDuplicateKey@16
+CryptEnumProviderTypesA@24
+CryptEnumProviderTypesW@24
+CryptEnumProvidersA@24
+CryptEnumProvidersW@24
+CryptGetDefaultProviderA@20
+CryptGetDefaultProviderW@20
+CryptSetProviderExA@16
+CryptSetProviderExW@16
+
+; This is list of symbols added in Windows ME, but not available in Win32s and WinNT
+; CryptGetLocalKeyLimits@16
+
+;; This is end of Win9x symbols ;;
+
+; This is list of symbols (not mentioned in previous sections) added in Windows NT 4.0, but not available in Win32s and Win9x
+; BuildAccessRequestA@12 ; removed in Windows NT 4.0 SP4
+; BuildAccessRequestW@12 ; removed in Windows NT 4.0 SP4
+; DenyAccessRightsA@16 ; removed in Windows NT 4.0 SP4
+; DenyAccessRightsW@16 ; removed in Windows NT 4.0 SP4
+EnumServiceGroupW@36
+; GetAuditedPermissionsFromSDA@16 ; removed in Windows NT 4.0 SP4
+; GetAuditedPermissionsFromSDW@16 ; removed in Windows NT 4.0 SP4
+; GetEffectiveAccessRightsA@16 ; removed in Windows NT 4.0 SP4
+; GetEffectiveAccessRightsW@16 ; removed in Windows NT 4.0 SP4
+; GetEffectiveRightsFromSDA@12 ; removed in Windows NT 4.0 SP4
+; GetEffectiveRightsFromSDW@12 ; removed in Windows NT 4.0 SP4
+; GetExplicitAccessRightsA@16 ; removed in Windows NT 4.0 SP4
+; GetExplicitAccessRightsW@16 ; removed in Windows NT 4.0 SP4
+; GrantAccessRightsA@16 ; removed in Windows NT 4.0 SP4
+; GrantAccessRightsW@16 ; removed in Windows NT 4.0 SP4
+I_ScGetCurrentGroupStateW@12
+; IsAccessPermittedA@20 ; removed in Windows NT 4.0 SP4
+; IsAccessPermittedW@20 ; removed in Windows NT 4.0 SP4
+LsaGetUserName@8
+; NTAccessMaskToProvAccessRights@12 ; removed in Windows NT 4.0 SP4
+; ProvAccessRightsToNTAccessMask@8 ; removed in Windows NT 4.0 SP4
+; ReplaceAllAccessRightsA@16 ; removed in Windows NT 4.0 SP4
+; ReplaceAllAccessRightsW@16 ; removed in Windows NT 4.0 SP4
+; RevokeExplicitAccessRightsA@16 ; removed in Windows NT 4.0 SP4
+; RevokeExplicitAccessRightsW@16 ; removed in Windows NT 4.0 SP4
+; SetAccessRightsA@16 ; removed in Windows NT 4.0 SP4
+; SetAccessRightsW@16 ; removed in Windows NT 4.0 SP4
+
+; This is list of symbols (not mentioned in previous sections) added in Windows NT 4.0 SP4, but not available in Win32s and Win9x
+EnumServicesStatusExA@40
+EnumServicesStatusExW@40
+LsaGetRemoteUserName@12
+QueryServiceStatusEx@20
+
+; This is list of symbols added in Windows 2000
+AccessCheckByType@44
+AccessCheckByTypeAndAuditAlarmA@64
+AccessCheckByTypeAndAuditAlarmW@64
+AccessCheckByTypeResultList@44
+AccessCheckByTypeResultListAndAuditAlarmA@64
+AccessCheckByTypeResultListAndAuditAlarmByHandleA@68
+AccessCheckByTypeResultListAndAuditAlarmByHandleW@68
+AccessCheckByTypeResultListAndAuditAlarmW@64
+AddAccessAllowedAceEx@20
+AddAccessAllowedObjectAce@28
+AddAccessDeniedAceEx@20
+AddAccessDeniedObjectAce@28
+AddAuditAccessAceEx@28
+AddAuditAccessObjectAce@36
+AddUsersToEncryptedFile@8
+BuildTrusteeWithObjectsAndNameA@24
+BuildTrusteeWithObjectsAndNameW@24
+BuildTrusteeWithObjectsAndSidA@20
+BuildTrusteeWithObjectsAndSidW@20
+ChangeServiceConfig2A@12
+ChangeServiceConfig2W@12
+CheckTokenMembership@12
+CloseEncryptedFileRaw@4
+CloseTrace@8
+CommandLineFromMsiDescriptor@12
+ControlTraceA@20
+ControlTraceW@20
+ConvertSDToStringSDRootDomainA@24
+ConvertSDToStringSDRootDomainW@24
+ConvertSecurityDescriptorToStringSecurityDescriptorA@20
+ConvertSecurityDescriptorToStringSecurityDescriptorW@20
+ConvertSidToStringSidA@8
+ConvertSidToStringSidW@8
+ConvertStringSDToSDRootDomainA@20
+ConvertStringSDToSDRootDomainW@20
+ConvertStringSecurityDescriptorToSecurityDescriptorA@16
+ConvertStringSecurityDescriptorToSecurityDescriptorW@16
+ConvertStringSidToSidA@8
+ConvertStringSidToSidW@8
+ConvertToAutoInheritPrivateObjectSecurity@24
+CreatePrivateObjectSecurityEx@32
+CreateProcessWithLogonW@44
+CreateRestrictedToken@36
+CreateTraceInstanceId@8
+DecryptFileA@8
+DecryptFileW@8
+DuplicateEncryptionInfoFile@20 ; Windows 2000 has ABI "DuplicateEncryptionInfoFile@8", Windows XP and new has ABI "DuplicateEncryptionInfoFile@20"
+EnableTrace@24
+EncryptFileA@4
+EncryptFileW@4
+EncryptionDisable@8
+FileEncryptionStatusA@8
+FileEncryptionStatusW@8
+FreeEncryptionCertificateHashList@4
+GetEventLogInformation@20
+GetLocalManagedApplications@12
+GetManagedApplications@20
+GetMangledSiteSid@12 ; removed in Windows XP
+GetSecurityDescriptorRMControl@8
+GetSiteDirectoryA@12 ; removed in Windows XP
+GetSiteDirectoryW@12 ; removed in Windows XP
+GetSiteNameFromSid@8 ; removed in Windows XP
+GetSiteSidFromToken@4 ; removed in Windows XP
+GetSiteSidFromUrl@4 ; removed in Windows XP
+GetTraceEnableFlags@8
+GetTraceEnableLevel@8
+GetTraceLoggerHandle@4
+GetTrusteeFormA@4
+GetTrusteeFormW@4
+I_ScIsSecurityProcess@0
+I_ScPnPGetServiceName@12
+ImpersonateAnonymousToken@4
+InitiateSystemShutdownExA@24
+InitiateSystemShutdownExW@24
+InstallApplication@4
+; IsInSandbox@0 ; removed in Windows XP
+IsProcessRestricted@0 ; removed in Windows XP
+IsTokenRestricted@4
+LsaCreateTrustedDomainEx@20
+LsaEnumerateTrustedDomainsEx@20
+LsaOpenTrustedDomainByName@16
+LsaQueryDomainInformationPolicy@12
+LsaQueryTrustedDomainInfoByName@16
+LsaSetDomainInformationPolicy@12
+LsaSetTrustedDomainInfoByName@16
+MakeAbsoluteSD2@8
+OpenEncryptedFileRawA@12
+OpenEncryptedFileRawW@12
+OpenTraceA@4
+OpenTraceW@4
+ProcessTrace@16
+QueryAllTracesA@12
+QueryAllTracesW@12
+QueryRecoveryAgentsOnEncryptedFile@8
+QueryServiceConfig2A@20
+QueryServiceConfig2W@20
+QueryUsersOnEncryptedFile@8
+ReadEncryptedFileRaw@12
+RegDisablePredefinedCache@0
+RegOpenCurrentUser@8
+RegOpenUserClassesRoot@16
+RegOverridePredefKey@8
+RegisterServiceCtrlHandlerExA@12
+RegisterServiceCtrlHandlerExW@12
+RegisterTraceGuidsA@32
+RegisterTraceGuidsW@32
+RemoveTraceCallback@4
+RemoveUsersFromEncryptedFile@8
+SetPrivateObjectSecurityEx@24
+SetSecurityDescriptorControl@12
+SetSecurityDescriptorRMControl@8
+SetTraceCallback@8
+SetUserFileEncryptionKey@4
+StartTraceA@12
+StartTraceW@12
+SystemFunction034@12
+SystemFunction035@4
+TraceEvent@12
+TraceEventInstance@20
+UninstallApplication@8 ; Windows 2000 has ABI "UninstallApplication@4", Windows XP and new has ABI "UninstallApplication@8"
 UnregisterTraceGuids@8
-UpdateTraceA@16
-UpdateTraceW@16
-UsePinForEncryptedFilesA@12
-UsePinForEncryptedFilesW@12
-WaitServiceState@16
 WmiCloseBlock@4
 WmiDevInstToInstanceNameA@16
 WmiDevInstToInstanceNameW@16
@@ -860,18 +631,430 @@
 WmiNotificationRegistrationW@20
 WmiOpenBlock@12
 WmiQueryAllDataA@12
-WmiQueryAllDataMultipleA@16
-WmiQueryAllDataMultipleW@16
 WmiQueryAllDataW@12
 WmiQueryGuidInformation@8
 WmiQuerySingleInstanceA@16
-WmiQuerySingleInstanceMultipleA@20
-WmiQuerySingleInstanceMultipleW@20
 WmiQuerySingleInstanceW@16
-WmiReceiveNotificationsA@16
-WmiReceiveNotificationsW@16
 WmiSetSingleInstanceA@20
 WmiSetSingleInstanceW@20
 WmiSetSingleItemA@24
 WmiSetSingleItemW@24
 WriteEncryptedFileRaw@12
+
+; In Windows 2000 SP1 there was no new symbol
+
+; This is list of symbols added in Windows 2000 SP2
+EqualDomainSid@12
+
+; This is list of symbols added in Windows 2000 SP3
+CreateWellKnownSid@16
+GetWindowsAccountDomainSid@12
+IsWellKnownSid@8
+LsaOpenPolicySce@16
+SystemFunction040@12
+SystemFunction041@12
+
+; This is list of symbols added in Windows 2000 SP4 and Windows XP SP2 (not available in Windows XP and Windows XP SP1)
+; CreateProcessAsUserSecure@0 ; removed in Windows Server 2003
+ElfFlushEventLog@4 ; removed in Windows 11 2022 Update (Sun Valley 2 / 22H2)
+
+; This is list of symbols added in Windows XP
+A_SHAFinal@8
+A_SHAInit@4
+A_SHAUpdate@12
+CloseCodeAuthzLevel@4
+ComputeAccessTokenFromCodeAuthzLevel@20
+ConvertStringSDToSDDomainA@24
+ConvertStringSDToSDDomainW@24
+CreateCodeAuthzLevel@20
+CreatePrivateObjectSecurityWithMultipleInheritance@36
+CredDeleteA@12
+CredDeleteW@12
+CredEnumerateA@16
+CredEnumerateW@16
+CredFree@4
+CredGetSessionTypes@8
+CredGetTargetInfoA@12
+CredGetTargetInfoW@12
+CredIsMarshaledCredentialA@4
+CredIsMarshaledCredentialW@4
+CredMarshalCredentialA@12
+CredMarshalCredentialW@12
+CredProfileLoaded@0
+CredReadA@16
+CredReadDomainCredentialsA@16
+CredReadDomainCredentialsW@16
+CredReadW@16
+CredRenameA@16
+CredRenameW@16
+CredUnmarshalCredentialA@12
+CredUnmarshalCredentialW@12
+CredWriteA@8
+CredWriteDomainCredentialsA@12
+CredWriteDomainCredentialsW@12
+CredWriteW@8
+CredpConvertCredential@16
+CredpConvertTargetInfo@16
+CredpDecodeCredential@4
+CredpEncodeCredential@4
+EncryptedFileKeyInfo@12
+EnumerateTraceGuids@12
+FlushTraceA@16
+FlushTraceW@16
+FreeEncryptedFileKeyInfo@4
+FreeInheritedFromArray@12
+GetInformationCodeAuthzLevelW@20
+GetInformationCodeAuthzPolicyW@24
+GetInheritanceSourceA@40
+GetInheritanceSourceW@40
+GetLocalManagedApplicationData@12
+GetManagedApplicationCategories@8
+I_ScSendTSMessage@16
+IdentifyCodeAuthzLevelW@16
+IsTokenUntrusted@4
+LogonUserExA@40
+LogonUserExW@40
+LsaICLookupNamesWithCreds@48
+LsaICLookupSidsWithCreds@48
+LsaLookupNames2@24
+LsaQueryForestTrustInformation@12
+LsaSetForestTrustInformation@20
+MD4Final@4
+MD4Init@4
+MD4Update@12
+MD5Final@4
+MD5Init@4
+MD5Update@12
+MSChapSrvChangePassword2@28
+MSChapSrvChangePassword@28
+ProcessIdleTasks@0
+QueryTraceA@16
+QueryTraceW@16
+RegSaveKeyExA@16
+RegSaveKeyExW@16
+RegisterIdleTask@16
+SaferCloseLevel@4
+SaferComputeTokenFromLevel@20
+SaferCreateLevel@20
+SaferGetLevelInformation@20
+SaferGetPolicyInformation@24
+SaferIdentifyLevel@16
+SaferRecordEventLogEntry@12
+SaferSetLevelInformation@16
+SaferSetPolicyInformation@20
+SaferiChangeRegistryScope@8
+SaferiCompareTokenLevels@12
+SaferiIsExecutableFileType@8
+SaferiPopulateDefaultsInRegistry@8
+SaferiRecordEventLogEntry@12
+; SaferiReplaceProcessThreadTokens@12 ; removed in Windows 7
+SaferiSearchMatchingHashRules@24
+SetInformationCodeAuthzLevelW@16
+SetInformationCodeAuthzPolicyW@20
+StopTraceA@16
+StopTraceW@16
+SystemFunction036@8
+TraceMessage ; cdecl
+TraceMessageVa@24
+TreeResetNamedSecurityInfoA@44
+TreeResetNamedSecurityInfoW@44
+UnregisterIdleTask@12
+UpdateTraceA@16
+UpdateTraceW@16
+; WdmWmiServiceMain@8 ; removed in Windows Vista
+; WmiGetFirstTraceOffset@4 ; removed in Windows Vista
+; WmiGetTraceHeader@12 ; removed in Windows Vista
+; WmiParseTraceEvent@20 ; removed in Windows Vista
+WmiQueryAllDataMultipleA@16
+WmiQueryAllDataMultipleW@16
+WmiQuerySingleInstanceMultipleA@20
+WmiQuerySingleInstanceMultipleW@20
+WmiReceiveNotificationsA@16
+WmiReceiveNotificationsW@16
+; Wow64Win32ApiEntry@12 ; removed in Windows 7
+
+; This is list of symbols added in Windows XP SP1
+; WmiCloseTraceWithCursor@4 ; removed in Windows Vista
+; WmiConvertTimestamp@12 ; removed in Windows Vista
+; WmiGetNextEvent@4 ; removed in Windows Vista
+; WmiOpenTraceWithCursor@4 ; removed in Windows Vista
+
+; In Windows XP SP2 there was no new symbol
+
+; This is list of symbols added in Windows XP SP3 and Windows Vista (not available in any version of Windows Server 2003)
+RegDisablePredefinedCacheEx@0
+
+; This is list of symbols added in Windows Server 2003
+CreateProcessWithTokenW@36
+
+; This is list of symbols added in Windows Server 2003 SP1 and Windows XP x64 SP1 (WoW64 version)
+ElfReportEventAndSourceW@60 ; removed in Windows 11 2022 Update (Sun Valley 2 / 22H2)
+I_QueryTagInformation@12
+RegConnectRegistryExA@16
+RegConnectRegistryExW@16
+RegDeleteKeyExA@16
+RegDeleteKeyExW@16
+RegDisableReflectionKey@4
+RegEnableReflectionKey@4
+RegGetValueA@28
+RegGetValueW@28
+RegQueryReflectionKey@8
+
+; In Windows Server 2003 SP2 and Windows XP x64 SP2 (WoW64 version) there was no new symbol
+
+; This is list of symbols added in Windows Vista
+AddMandatoryAce@20
+AddUsersToEncryptedFileEx@16
+AuditComputeEffectivePolicyBySid@16
+AuditComputeEffectivePolicyByToken@16
+AuditEnumerateCategories@8
+AuditEnumeratePerUserPolicy@4
+AuditEnumerateSubCategories@16
+AuditFree@4
+AuditLookupCategoryGuidFromCategoryId@8
+AuditLookupCategoryIdFromCategoryGuid@8
+AuditLookupCategoryNameA@8
+AuditLookupCategoryNameW@8
+AuditLookupSubCategoryNameA@8
+AuditLookupSubCategoryNameW@8
+AuditQueryPerUserPolicy@16
+AuditQuerySecurity@8
+AuditQuerySystemPolicy@12
+AuditSetPerUserPolicy@12
+AuditSetSecurity@8
+AuditSetSystemPolicy@8
+; CheckAppInitBlockedServiceIdentity@4 ; removed in Windows 7
+CloseThreadWaitChainSession@4
+ControlServiceExA@16
+ControlServiceExW@16
+CredBackupCredentials@20
+CredEncryptAndMarshalBinaryBlob@12
+CredFindBestCredentialA@16
+CredFindBestCredentialW@16
+CredIsProtectedA@8
+CredIsProtectedW@8
+CredProfileUnloaded@0
+CredProtectA@24
+CredProtectW@24
+CredReadByTokenHandle@20
+CredRestoreCredentials@16
+CredUnprotectA@20
+CredUnprotectW@20
+CredpConvertOneCredentialSize@8
+CredpEncodeSecret@20
+EnableTraceEx@48
+EnumerateTraceGuidsEx@24
+EventAccessControl@20
+EventAccessQuery@12
+EventAccessRemove@4
+EventActivityIdControl@8
+EventEnabled@12
+EventProviderEnabled@20
+EventRegister@16
+EventUnregister@8
+EventWrite@20
+EventWriteEndScenario@20
+EventWriteStartScenario@20
+EventWriteString@24
+EventWriteTransfer@28
+FlushEfsCache@4
+FreeEncryptedFileMetadata@4
+GetEncryptedFileMetadata@12
+GetThreadWaitChain@28
+I_ScQueryServiceConfig@12
+I_ScSendPnPMessage@24
+I_ScValidatePnPService@12
+InitiateShutdownA@20
+InitiateShutdownW@20
+IsValidRelativeSecurityDescriptor@12
+LogonUserExExW@44
+LsaManageSidNameMapping@12
+NotifyServiceStatusChange@12
+NotifyServiceStatusChangeA@12
+NotifyServiceStatusChangeW@12
+OpenThreadWaitChainSession@8
+PerfAddCounters@12
+PerfCloseQueryHandle@4
+PerfCreateInstance@16
+PerfDecrementULongCounterValue@16
+PerfDecrementULongLongCounterValue@20
+PerfDeleteCounters@12
+PerfDeleteInstance@8
+PerfEnumerateCounterSet@16
+PerfEnumerateCounterSetInstances@20
+PerfIncrementULongCounterValue@16
+PerfIncrementULongLongCounterValue@20
+PerfOpenQueryHandle@8
+PerfQueryCounterData@16
+PerfQueryCounterInfo@16
+PerfQueryCounterSetRegistrationInfo@28
+PerfQueryInstance@16
+PerfSetCounterRefValue@16
+PerfSetCounterSetInfo@12
+PerfSetULongCounterValue@16
+PerfSetULongLongCounterValue@20
+PerfStartProvider@12
+PerfStartProviderEx@12
+PerfStopProvider@4
+ProcessIdleTasksW@16
+QuerySecurityAccessMask@8
+RegCopyTreeA@12
+RegCopyTreeW@12
+RegCreateKeyTransactedA@44
+RegCreateKeyTransactedW@44
+RegDeleteKeyTransactedA@24
+RegDeleteKeyTransactedW@24
+RegDeleteKeyValueA@12
+RegDeleteKeyValueW@12
+RegDeleteTreeA@8
+RegDeleteTreeW@8
+RegLoadAppKeyA@20
+RegLoadAppKeyW@20
+RegLoadMUIStringA@28
+RegLoadMUIStringW@28
+RegOpenKeyTransactedA@28
+RegOpenKeyTransactedW@28
+RegRenameKey@12
+RegSetKeyValueA@24
+RegSetKeyValueW@24
+RegisterWaitChainCOMCallback@8
+SetEncryptedFileMetadata@24
+SetSecurityAccessMask@8
+SetUserFileEncryptionKeyEx@16
+TreeSetNamedSecurityInfoA@44
+TreeSetNamedSecurityInfoW@44
+UsePinForEncryptedFilesA@12
+UsePinForEncryptedFilesW@12
+
+; In Windows Vista SP1 there was no new symbol
+
+; In Windows Vista SP2 there was no new symbol
+
+; This is list of symbols added in Windows 7
+AddConditionalAce@32
+AuditQueryGlobalSaclA@8
+AuditQueryGlobalSaclW@8
+AuditSetGlobalSaclA@8
+AuditSetGlobalSaclW@8
+EnableTraceEx2@44
+EventWriteEx@40
+SaferiIsDllAllowed@8 ; Windows 7 has ABI "SaferiIsDllAllowed@12", Windows 8 and new has ABI "SaferiIsDllAllowed@8"
+TraceSetInformation@20
+
+; This is list of ordinal-only symbols added in Windows 7
+; Symbol names are taken from:
+; https://www.geoffchappell.com/studies/windows/win32/advapi32/history/ords61.htm
+SaferiRegisterExtensionDll@8 @1000 NONAME
+
+; In Windows 7 SP1 there was no new symbol
+
+; This is list of symbols added in Windows 8
+BaseRegCloseKey@4
+BaseRegCreateKey@32
+BaseRegDeleteKeyEx@16
+BaseRegDeleteValue@8
+BaseRegFlushKey@4
+BaseRegGetVersion@8
+BaseRegLoadKey@12
+BaseRegOpenKey@20
+BaseRegRestoreKey@12
+BaseRegSaveKeyEx@16
+BaseRegSetKeySecurity@12
+BaseRegSetValue@20
+BaseRegUnLoadKey@8
+CheckForHiberboot@8
+ConvertSDToStringSDDomainW@28
+; CredProfileLoadedEx@4
+EnumDynamicTimeZoneInformation@8
+; EtwLogSysConfigExtension@8 ; removed in Windows 10 Anniversary Update (Redstone / 1607)
+EventSetInformation@20
+GetDynamicTimeZoneInformationEffectiveYears@12
+GetStringConditionFromBinary@16
+; I_ScRegisterPreshutdownRestart@8
+LsaGetAppliedCAPIDs@12
+LsaLookupSids2@24
+LsaQueryCAPs@16
+LsaSetCAPs@12
+; MIDL_user_free_Ext@4
+OperationEnd@4
+OperationStart@4
+PerfRegCloseKey@4
+PerfRegEnumKey@24
+PerfRegEnumValue@32
+PerfRegQueryInfoKey@44
+PerfRegQueryValue@28
+PerfRegSetValue@24
+; PsmActivateApplication@12 ; removed in Windows 8.1
+; PsmAdjustActivationToken@24 ; removed in Windows 8.1
+; PsmQueryBackgroundActivationType@8 ; removed in Windows 8.1
+; PsmRegisterApplicationProcess@8 ; removed in Windows 8.1
+QueryServiceDynamicInformation@12
+RemoteRegEnumKeyWrapper@20
+RemoteRegEnumValueWrapper@28
+RemoteRegQueryInfoKeyWrapper@40
+RemoteRegQueryValueWrapper@24
+SafeBaseRegGetKeySecurity@16
+TraceQueryInformation@24
+WaitServiceState@16
+
+; In Windows 8.1 there was no new symbol
+
+; This is list of symbols added in Windows 10 (Threshold / 1507)
+NpGetUserName@12
+
+; This is list of symbols added in Windows 10 November Update (Threshold 2 / 1511)
+; I_ScReparseServiceDatabase@4
+; QueryLocalUserServiceName@12
+; QueryUserServiceName@20
+
+; This is list of symbols added in Windows 10 Anniversary Update (Redstone / 1607)
+CveEventWrite@8
+
+; This is list of symbols added in Windows 10 Creators Update (Redstone 2 / 1703)
+; QueryUserServiceNameForContext@20
+
+; This is list of symbols added in Windows 10 Fall Creators Update (Redstone 3 / 1709)
+; CreateServiceEx@56
+QueryTraceProcessingHandle@32
+RemoteRegQueryMultipleValues2Wrapper@24
+RemoteRegQueryMultipleValuesWrapper@20
+
+; In Windows 10 April 2018 Update (Redstone 4 / 1803) there was no new symbol
+
+; In Windows 10 October 2018 Update (Redstone 5 / 1809) there was no new symbl
+
+; In Windows 10 May 2019 Update (19H1 / 1903) there was no new symbol
+
+; In Windows 10 November 2019 Update (19H2 /1909) there was no new symbol
+
+; In Windows 10 May 2020 Update (20H1 / 2004) there was no new symbol
+
+; In Windows 10 October 2020 Update (20H2) there was no new symbol
+
+; In Windows 10 May 2021 Update (21H1) there was no new symbol
+
+; In Windows 10 November 2021 Update (21H2) there was no new symbol
+
+; This is list of symbols added in Windows 10 2022 Update (22H2) and Windows 11 2022 Update (Sun Valley 2 / 22H2) (WoW64 version) (not available in Windows 11 (Sun Valley / 21H2))
+LsaInvokeTrustScanner@16
+LsaQueryForestTrustInformation2@16
+LsaSetForestTrustInformation2@24
+
+; This is list of symbols added in Windows 11 (Sun Valley / 21H2) (WoW64 version)
+LsaConfigureAutoLogonCredentials@0
+; LsaDisablePasswordLessCurrentUser@0 ; removed in Windows 11 2022 Update (Sun Valley 2 / 22H2)
+LsaDisableUserArso@4
+; LsaEnablePasswordLessCurrentUser@0 ; removed in Windows 11 2022 Update (Sun Valley 2 / 22H2)
+LsaEnableUserArso@4
+LsaGetDeviceRegistrationInfo@4
+LsaIsUserArsoAllowed@4
+LsaIsUserArsoEnabled@8
+LsaProfileDeleted@4
+LsaValidateProcUniqueLuid@4
+
+; In Windows 11 2022 Update (Sun Valley 2 / 22H2) (WoW64 version) there was no new symbol
+
+; In Windows 11 2023 Update (Sun Valley 3 / 23H2) (WoW64 version) there was no new symbol
+
+; This is list of symbols added in Windows 11 2024 Update (Hudson Valley / 24H2) (WoW64 version)
+; LsaIOpenPolicyWithCreds@24