NtAccessCheckByTypeResultListAndAuditAlarmByHandle
strstr
NtSetValueKey
NtLoadKey
NtOpenObjectAuditAlarm
NtReadFile
RtlAddAccessAllowedAceEx
NtPrivilegedServiceAuditAlarm
RtlSetSecurityObjectEx
RtlCreateUnicodeString
RtlUnicodeStringToAnsiString
RtlInitUnicodeString
RtlSetOwnerSecurityDescriptor
RtlSubAuthorityCountSid
RtlDuplicateUnicodeString
NtQueryInformationFile
NtQuerySystemInformation
NtCreateKey
NtUnloadKey
RtlNtStatusToDosError
_ultow
NtRestoreKey
RtlEqualPrefixSid
RtlUnicodeToMultiByteN
RtlAppendUnicodeToString
NtAccessCheckByTypeResultListAndAuditAlarm
NtEnumerateValueKey
RtlAreAnyAccessesGranted
NtFlushBuffersFile
RtlIsTextUnicode
RtlGetControlSecurityDescriptor
RtlxAnsiStringToUnicodeSize
NtCloseObjectAuditAlarm
NtTerminateProcess
RtlDestroyHandleTable
NtOpenProcessToken
RtlSetDaclSecurityDescriptor
NtQueryPerformanceCounter
NtDuplicateObject
NtDuplicateToken
memmove
wcstol
NtOpenSymbolicLinkObject
NtAllocateVirtualMemory
NtQuerySecurityObject
NtSaveKeyEx
RtlUnwind
NtSetSecurityObject
RtlMapGenericMask
RtlValidAcl
wcscat
_vsnwprintf
NtNotifyChangeKey
NtOpenThreadToken
wcscpy
wcstoul
RtlDeleteSecurityObject
NtFreeVirtualMemory
RtlIdentifierAuthoritySid
RtlCopyUnicodeString
RtlUnicodeStringToInteger
RtlTimeToSecondsSince1970
RtlSelfRelativeToAbsoluteSD
RtlNewSecurityObject
RtlGetFullPathName_U
NtQueryVirtualMemory
RtlNumberGenericTableElements
swprintf
NtOpenProcess
RtlAreAllAccessesGranted
RtlCopyLuid
NtPowerInformation
NtSetInformationProcess
RtlCopySid
NtQueryKey
RtlReAllocateHeap
NtAccessCheckByType
RtlEnterCriticalSection
RtlLengthRequiredSid
atol
RtlAddAccessDeniedAce
RtlGetDaclSecurityDescriptor
RtlDeleteElementGenericTable
RtlRandom
NtWaitForMultipleObjects
NtSaveMergedKeys
RtlCreateQueryDebugBuffer
RtlAddAuditAccessAce
RtlFreeHandle
wcslen
RtlConvertSidToUnicodeString
RtlNewSecurityObjectWithMultipleInheritance
RtlSetSecurityDescriptorRMControl
wcsncpy
RtlIsGenericTableEmpty
RtlDosPathNameToNtPathName_U
RtlCreateUnicodeStringFromAsciiz
_snwprintf
NtAccessCheckByTypeResultList
NtFlushKey
RtlxUnicodeStringToAnsiSize
RtlAllocateAndInitializeSid
RtlAddAccessAllowedAce
_itow
_strnicmp
NtCreateDirectoryObject
RtlGetOwnerSecurityDescriptor
RtlImpersonateSelf
RtlConvertToAutoInheritSecurityObject
RtlAnsiStringToUnicodeString
NtAccessCheck
NtAdjustPrivilegesToken
_wcsicmp
RtlDestroyQueryDebugBuffer
RtlEnumerateGenericTableWithoutSplaying
RtlInitializeHandleTable
RtlPrefixUnicodeString
RtlMultiByteToUnicodeN
RtlFirstFreeAce
RtlInitString
NtQueryInformationToken
NtClearEvent
NtFsControlFile
NtDeleteValueKey
RtlFlushSecureMemoryCache
wcsncmp
strchr
RtlCreateSecurityDescriptor
NtSetInformationThread
RtlUpcaseUnicodeStringToOemString
RtlGetVersion
RtlStringFromGUID
NtQueryInformationProcess
RtlCreateAcl
iswctype
RtlEqualSid
RtlAppendUnicodeStringToString
NtReleaseSemaphore
NtWaitForSingleObject
NtSaveKey
NtAccessCheckAndAuditAlarm
RtlGetAce
RtlValidRelativeSecurityDescriptor
RtlAddAccessDeniedAceEx
RtlSelfRelativeToAbsoluteSD2
strncpy
RtlImageNtHeader
wcsrchr
RtlQueryProcessDebugInformation
NtAdjustGroupsToken
NtSetInformationObject
wcschr
NtWriteFile
RtlQueryRegistryValues
RtlInitializeGenericTable
wcscmp
NtQueryMultipleValueKey
RtlIsValidIndexHandle
NtQuerySystemTime
tolower
NtPrivilegeObjectAuditAlarm
RtlAdjustPrivilege
NtDeleteKey
RtlAddAccessAllowedObjectAce
NtDeleteObjectAuditAlarm
wcstombs
RtlSetInformationAcl
RtlFreeAnsiString
RtlDestroyHeap
RtlAddAce
RtlLeaveCriticalSection
RtlAbsoluteToSelfRelativeSD
RtlSubAuthoritySid
NtTraceEvent
DbgPrint
RtlDetermineDosPathNameType_U
RtlLookupElementGenericTable
NtCreateSemaphore
RtlUpcaseUnicodeChar
RtlLengthSid
sprintf
RtlOemStringToUnicodeString
RtlQuerySecurityObject
NtPrivilegeCheck
NtImpersonateAnonymousToken
_chkstk
NtCreateFile
NtAccessCheckByTypeAndAuditAlarm
RtlInsertElementGenericTable
RtlOpenCurrentUser
RtlInitAnsiString
RtlFreeSid
RtlGetSecurityDescriptorRMControl
mbstowcs
_ftol
RtlSetSecurityObject
RtlInitUnicodeStringEx
RtlAddAccessDeniedObjectAce
_wcsnicmp
RtlGUIDFromString
RtlNewSecurityObjectEx
RtlAddAuditAccessAceEx
RtlGetNtProductType
NtOpenKey
RtlUnicodeToMultiByteSize
NtCreateEvent
_alloca_probe
RtlIntegerToUnicodeString
RtlDeleteCriticalSection
RtlLengthSecurityDescriptor
RtlQueryInformationAcl
NtOpenFile
NtFilterToken
RtlFreeUnicodeString
_wcslwr
NtQueryVolumeInformationFile
RtlGetSaclSecurityDescriptor
RtlCompareUnicodeString
RtlEqualUnicodeString
RtlGetGroupSecurityDescriptor
RtlSetControlSecurityDescriptor
NtQueryValueKey
RtlFreeHeap
NtCompareTokens
NtNotifyChangeMultipleKeys
NtReplaceKey
RtlCreateHeap
RtlCompareMemory
NlsMbCodePageTag
RtlValidSid
NtEnumerateKey
RtlInitializeCriticalSection
NtQuerySymbolicLinkObject
RtlDeleteAce
NtClose
NtSetInformationFile
RtlInitializeSid
RtlMakeSelfRelativeSD
_stricmp
RtlAllocateHeap
RtlFormatCurrentUserKeyPath
wcsstr
RtlSetSaclSecurityDescriptor
RtlValidSecurityDescriptor
NtSetEvent
NtDeviceIoControlFile
NtQueryInformationThread
RtlAllocateHandle
RtlAddAuditAccessObjectAce
NtAllocateLocallyUniqueId
NtSetInformationToken
RtlExpandEnvironmentStrings_U
RtlSetGroupSecurityDescriptor
