Hi,
I noticed that Alexandre committed a patch that forwards the api-ms dlls to kernelbase instead of advapi32. When I was working on this patch, I also noticed that these functions in the api-ms dlls are indeed forwarded to kernelbase, but I didn't say anything because all the other functions were also forwarded to advapi32. I'm just wondering if maybe I should have said something about it. Going forward, should I raise questions when I notice discrepancies like these?
Using Windows SDK, this is what the addresses look like:
kernelbase = 00007FFA6535F460
advapi32 = 0000000000000000
api-ms-win-downlevel-advapi32-l1-1-0 = 00007FFA6535F460
api-ms-win-security-base-l1-1-0 = 00007FFA6535F460
api-ms-win-security-base-l1-2-0 = 00007FFA6535F460