RtlComputeCrc32
RtlInitUnicodeString
NtOpenFile
NtDeviceIoControlFile
NtClose
NtQuerySystemInformation
RtlUpcaseUnicodeChar
RtlGetNtSystemRoot
NtOpenKey
RtlGetVersion
TpAllocTimer
TpSetTimer
RtlAllocateHeap
RtlFreeHeap
NtSetValueKey
RtlFreeUnicodeString
NtQueryValueKey
RtlPrefixUnicodeString
NtQueryVolumeInformationFile
NtQueryInformationProcess
RtlInitUnicodeStringEx
_vsnwprintf_s
NtCreatePagingFile
NtQueryLicenseValue
NtSetSystemInformation
RtlAppendUnicodeToString
RtlSecondsSince1970ToTime
qsort
NtSetInformationFile
NtQueryInformationFile
NtFsControlFile
RtlCompareUnicodeString
RtlAppendUnicodeStringToString
RtlCompareMemory
NtDeleteValueKey
NtFlushKey
NtUpdateWnfStateData
NtInitializeRegistry
RtlUnicodeStringToInteger
NtManagePartition
RtlSubscribeWnfStateChangeNotification
RtlAllocateAndInitializeSid
RtlCreateSecurityDescriptor
RtlCreateAcl
RtlAddAccessAllowedAce
RtlSetDaclSecurityDescriptor
RtlSetOwnerSecurityDescriptor
NtSetSecurityObject
RtlExpandEnvironmentStrings_U
RtlDosPathNameToNtPathName_U
NtCreateFile
NtReadFile
NtCreateKey
NtAllocateVirtualMemory
NtWriteFile
EtwEventWriteTransfer
NtFreeVirtualMemory
RtlCreateUnicodeString
EtwEventWrite
EtwEventEnabled
_vsnwprintf
RtlCopyUnicodeString
RtlAddMandatoryAce
RtlSetSaclSecurityDescriptor
RtlAdjustPrivilege
RtlFreeSid
RtlLengthSid
NtCreateMutant
RtlCreateTagHeap
NtSetInformationProcess
NtAlpcCreatePort
RtlInitializeBitMap
RtlClearAllBits
RtlSetBits
NtOpenEvent
RtlCreateEnvironment
RtlSetCurrentEnvironment
RtlQueryRegistryValuesEx
NtCreateDirectoryObject
RtlEqualUnicodeString
NtSerializeBoot
NtSetEvent
RtlQueryPerformanceFrequency
RtlQueryPerformanceCounter
NtResumeThread
NtWaitForSingleObject
NtTerminateProcess
RtlIsStateSeparationEnabled
TpAllocWork
TpPostWork
TpWaitForWork
TpReleaseWork
_wcsupr_s
NtOpenDirectoryObject
NtCreateSymbolicLinkObject
NtMakeTemporaryObject
_stricmp
RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlDosPathNameToNtPathName_U_WithStatus
RtlWow64IsWowGuestMachineSupported
NtCreateEvent
RtlRandomEx
qsort_s
NtQueryObject
NtSystemDebugControl
LdrVerifyImageMatchesChecksumEx
RtlAppxIsFileOwnedByTrustedInstaller
NtQueryAttributesFile
NtQueryDirectoryFile
RtlDeleteRegistryValue
RtlWriteRegistryValue
_wcsicmp
RtlSetEnvironmentVariable
NtCreateSection
NtMapViewOfSection
NtUnmapViewOfSection
NtDuplicateObject
iswctype
RtlQueryEnvironmentVariable_U
RtlDosSearchPath_U
RtlTestBit
RtlInterlockedSetBitRun
RtlFindSetBits
RtlCreateProcessParametersEx
RtlCreateUserProcessEx
RtlDestroyProcessParameters
NtDisplayString
RtlAddProcessTrustLabelAce
RtlGetAce
NtQueryDirectoryObject
NtOpenSymbolicLinkObject
NtQuerySymbolicLinkObject
RtlGetSystemTimeAndBias
RtlTimeToTimeFields
NtDeleteFile
__C_specific_handler
RtlAcquireSRWLockExclusive
NtAlpcDisconnectPort
RtlReleaseSRWLockExclusive
RtlAcquireSRWLockShared
RtlReleaseSRWLockShared
NtAlpcImpersonateClientOfPort
NtOpenThreadToken
NtQueryInformationToken
NtSetInformationThread
TpSetPoolMinThreads
RtlSetThreadIsCritical
AlpcInitializeMessageAttribute
NtAlpcSendWaitReceivePort
AlpcGetMessageAttribute
NtAlpcCancelMessage
NtAlpcOpenSenderProcess
RtlInitializeSRWLock
NtAlpcAcceptConnectPort
NtConnectPort
NtRequestWaitReplyPort
RtlDeleteNoSplay
RtlSleepConditionVariableSRW
RtlWakeAllConditionVariable
NtQueryInformationJobObject
NtAssignProcessToJobObject
EtwGetTraceLoggerHandle
EtwGetTraceEnableLevel
EtwGetTraceEnableFlags
EtwRegisterTraceGuidsW
RtlGetCurrentServiceSessionId
NtDelayExecution
RtlSetHeapInformation
EtwEventSetInformation
EtwEventRegister
TpAllocPool
TpAllocAlpcCompletion
NtWaitForMultipleObjects
NtRaiseHardError
RtlInitializeConditionVariable
NtClearEvent
RtlUnicodeStringToAnsiString
NtQueryEvent
wcstoul
LdrQueryImageFileExecutionOptions
RtlAcquirePrivilege
RtlReleasePrivilege
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlUnhandledExceptionFilter
RtlCompareUnicodeStrings
memcpy
RtlNormalizeProcessParams
iswspace
RtlConnectToSm
RtlSendMsgToSm
NtQueryKey
NtDeleteKey
NtQuerySystemInformationEx
__chkstk
memset
