NtOpenSymbolicLinkObject
RtlOemStringToUnicodeString
NtDeleteValueKey
strncpy
NtPrivilegeCheck
NlsMbCodePageTag
RtlSetSecurityObject
NtOpenFile
NtTerminateProcess
RtlNtStatusToDosError
NtQueryInformationThread
RtlUpcaseUnicodeChar
NtQuerySymbolicLinkObject
NtPowerInformation
RtlFormatCurrentUserKeyPath
RtlAbsoluteToSelfRelativeSD
NtQueryInformationFile
RtlGetDaclSecurityDescriptor
NtReadFile
NtFsControlFile
RtlDestroyHeap
NtSetInformationProcess
RtlCreateUnicodeString
wcsncpy
RtlCompareUnicodeString
atol
RtlAllocateHeap
NtAllocateVirtualMemory
wcscmp
RtlIdentifierAuthoritySid
RtlConvertSidToUnicodeString
NtCreateKey
NtSetInformationFile
RtlInitUnicodeStringEx
NtReplaceKey
wcscpy
NtAccessCheck
RtlFreeHeap
NtFlushBuffersFile
RtlQueryInformationAcl
NtQueryValueKey
RtlDeleteAce
RtlInitializeCriticalSection
RtlIntegerToUnicodeString
NtAllocateLocallyUniqueId
strstr
RtlInitializeSid
RtlLengthSecurityDescriptor
RtlGetAce
NtPrivilegedServiceAuditAlarm
_itow
_wcsnicmp
RtlInsertElementGenericTable
RtlDeleteSecurityObject
RtlRandom
RtlDeleteElementGenericTable
NtQueryVolumeInformationFile
RtlNewSecurityObjectEx
RtlSubAuthorityCountSid
NtOpenThreadToken
RtlNumberGenericTableElements
RtlAllocateHandle
RtlStringFromGUID
RtlDeleteCriticalSection
DbgPrint
_ultow
RtlUnicodeStringToAnsiString
NtNotifyChangeKey
RtlInitAnsiString
RtlxUnicodeStringToAnsiSize
NtSetEvent
RtlOpenCurrentUser
NtClose
NtCreateFile
RtlImageNtHeader
RtlGetNtProductType
NtCloseObjectAuditAlarm
NtNotifyChangeMultipleKeys
RtlMakeSelfRelativeSD
RtlEnumerateGenericTableWithoutSplaying
wcsncmp
memmove
NtClearEvent
NtReleaseSemaphore
NtFreeVirtualMemory
RtlEnterCriticalSection
RtlSetGroupSecurityDescriptor
RtlMapGenericMask
NtCompareTokens
RtlUnwind
swprintf
NtCreateEvent
NtQuerySystemTime
NtWaitForSingleObject
wcstoul
_strnicmp
RtlAddAccessAllowedAce
wcstol
NtWriteFile
NtOpenProcessToken
NtDeviceIoControlFile
RtlExpandEnvironmentStrings_U
RtlUnicodeToMultiByteN
RtlInitializeHandleTable
wcsstr
_snwprintf
tolower
RtlUnicodeStringToInteger
NtTraceEvent
NtAccessCheckByTypeResultListAndAuditAlarm
RtlGetSecurityDescriptorRMControl
NtOpenKey
_stricmp
RtlFlushSecureMemoryCache
RtlDuplicateUnicodeString
RtlAddAccessDeniedAce
RtlLeaveCriticalSection
NtLoadKey
RtlInitializeGenericTable
RtlValidAcl
RtlAddAccessDeniedObjectAce
RtlLengthRequiredSid
RtlCreateUnicodeStringFromAsciiz
RtlValidSecurityDescriptor
NtSaveMergedKeys
RtlSetSecurityDescriptorRMControl
RtlInitUnicodeString
NtQueryInformationProcess
NtSetInformationThread
RtlAddAce
RtlQuerySecurityObject
RtlInitString
RtlxAnsiStringToUnicodeSize
RtlGetFullPathName_U
NtCreateDirectoryObject
_wcsicmp
wcschr
NtDuplicateToken
RtlSetSaclSecurityDescriptor
RtlAppendUnicodeStringToString
RtlUpcaseUnicodeStringToOemString
RtlGetControlSecurityDescriptor
RtlIsValidIndexHandle
RtlUnicodeToMultiByteSize
RtlQueryRegistryValues
_wcslwr
RtlAreAllAccessesGranted
RtlValidSid
_alloca_probe
NtSetValueKey
NtUnloadKey
RtlCreateHeap
RtlSetControlSecurityDescriptor
RtlCreateQueryDebugBuffer
RtlLengthSid
NtDeleteKey
RtlGetVersion
NtImpersonateAnonymousToken
NtAccessCheckByTypeAndAuditAlarm
NtFilterToken
NtOpenObjectAuditAlarm
NtSetInformationObject
NtQueryMultipleValueKey
RtlGetSaclSecurityDescriptor
RtlSelfRelativeToAbsoluteSD2
NtSetSecurityObject
NtAdjustGroupsToken
NtAdjustPrivilegesToken
NtQueryVirtualMemory
RtlCompareMemory
RtlGUIDFromString
RtlAddAuditAccessAce
RtlDestroyHandleTable
RtlAppendUnicodeToString
NtQuerySystemInformation
NtWaitForMultipleObjects
RtlFreeAnsiString
RtlConvertToAutoInheritSecurityObject
NtAccessCheckByTypeResultListAndAuditAlarmByHandle
RtlIsGenericTableEmpty
RtlCreateAcl
RtlAddAuditAccessObjectAce
RtlFirstFreeAce
_vsnwprintf
RtlAddAccessAllowedAceEx
_chkstk
wcsrchr
NtDeleteObjectAuditAlarm
NtRestoreKey
NtCreateSemaphore
RtlAdjustPrivilege
RtlNewSecurityObject
NtAccessCheckByType
NtQueryKey
RtlAnsiStringToUnicodeString
RtlFreeSid
_ftol
RtlAllocateAndInitializeSid
RtlReAllocateHeap
RtlCopyUnicodeString
mbstowcs
strchr
RtlSubAuthoritySid
RtlImpersonateSelf
RtlGetGroupSecurityDescriptor
RtlIsTextUnicode
RtlFreeUnicodeString
RtlFreeHandle
RtlAddAccessAllowedObjectAce
RtlDetermineDosPathNameType_U
RtlTimeToSecondsSince1970
wcslen
RtlAddAuditAccessAceEx
NtQuerySecurityObject
NtOpenProcess
NtAccessCheckByTypeResultList
RtlEqualSid
RtlAreAnyAccessesGranted
RtlSetSecurityObjectEx
RtlSetInformationAcl
NtFlushKey
NtEnumerateValueKey
RtlLookupElementGenericTable
RtlQueryProcessDebugInformation
NtQueryPerformanceCounter
RtlCreateSecurityDescriptor
RtlNewSecurityObjectWithMultipleInheritance
RtlValidRelativeSecurityDescriptor
NtAccessCheckAndAuditAlarm
iswctype
NtSetInformationToken
RtlCopySid
RtlPrefixUnicodeString
NtEnumerateKey
NtSaveKeyEx
sprintf
RtlEqualUnicodeString
RtlGetOwnerSecurityDescriptor
NtQueryInformationToken
RtlMultiByteToUnicodeN
RtlEqualPrefixSid
RtlSetDaclSecurityDescriptor
RtlAddAccessDeniedAceEx
RtlCopyLuid
wcscat
RtlDosPathNameToNtPathName_U
RtlSetOwnerSecurityDescriptor
NtPrivilegeObjectAuditAlarm
RtlDestroyQueryDebugBuffer
NtDuplicateObject
RtlSelfRelativeToAbsoluteSD
wcstombs
NtSaveKey
