NtTraceEvent
wcstombs
RtlEqualPrefixSid
RtlGetFullPathName_U
_wcslwr
RtlInitUnicodeString
wcstoul
RtlImageNtHeader
NtOpenObjectAuditAlarm
NtAccessCheckAndAuditAlarm
RtlCreateSecurityDescriptor
NtClose
wcsstr
RtlGetDaclSecurityDescriptor
NtDeleteKey
NtRestoreKey
RtlAddAccessDeniedObjectAce
RtlUnicodeStringToInteger
RtlSubAuthoritySid
strncpy
RtlFreeAnsiString
RtlCreateAcl
RtlGetGroupSecurityDescriptor
NtSetSecurityObject
NtNotifyChangeMultipleKeys
RtlSetSecurityObjectEx
RtlDestroyHandleTable
NtQueryVirtualMemory
RtlUnicodeToMultiByteN
RtlImpersonateSelf
RtlNewSecurityObjectWithMultipleInheritance
NtReplaceKey
RtlSetOwnerSecurityDescriptor
RtlCopySid
_chkstk
RtlGetOwnerSecurityDescriptor
RtlSetControlSecurityDescriptor
RtlEqualUnicodeString
NtReleaseSemaphore
RtlIsTextUnicode
RtlUpcaseUnicodeStringToOemString
RtlInitializeGenericTable
RtlAllocateHandle
NtDuplicateToken
RtlOemStringToUnicodeString
wcstol
RtlAddAccessAllowedObjectAce
memmove
RtlAnsiStringToUnicodeString
NtAllocateLocallyUniqueId
wcslen
NtAllocateVirtualMemory
RtlCreateQueryDebugBuffer
RtlReAllocateHeap
RtlCreateHeap
NtWaitForSingleObject
NtPrivilegedServiceAuditAlarm
NtOpenFile
RtlxAnsiStringToUnicodeSize
RtlSetInformationAcl
wcscat
NtAccessCheck
NtSaveKey
_vsnwprintf
_itow
RtlGetSecurityDescriptorRMControl
RtlAllocateHeap
RtlFirstFreeAce
RtlAddAccessAllowedAceEx
mbstowcs
_ftol
NtAdjustGroupsToken
RtlDeleteAce
NtSetInformationProcess
NtAccessCheckByType
RtlMultiByteToUnicodeN
NtDuplicateObject
NtSetInformationThread
NtQueryPerformanceCounter
RtlPrefixUnicodeString
_strnicmp
RtlDeleteSecurityObject
DbgPrint
RtlFlushSecureMemoryCache
NtQuerySecurityObject
wcschr
RtlLengthSid
RtlValidSecurityDescriptor
RtlSetSecurityObject
RtlAddAccessDeniedAce
RtlLeaveCriticalSection
RtlRandom
NtCreateSemaphore
RtlAbsoluteToSelfRelativeSD
RtlNtStatusToDosError
RtlValidRelativeSecurityDescriptor
NtQuerySymbolicLinkObject
RtlDeleteCriticalSection
NtSaveMergedKeys
swprintf
RtlUnwind
RtlOpenCurrentUser
RtlSelfRelativeToAbsoluteSD2
NtOpenKey
RtlStringFromGUID
NtDeleteValueKey
RtlQueryRegistryValues
RtlNewSecurityObjectEx
RtlFreeSid
RtlIntegerToUnicodeString
NtPrivilegeCheck
_snwprintf
RtlInsertElementGenericTable
RtlFormatCurrentUserKeyPath
RtlAddAccessAllowedAce
_wcsicmp
RtlDestroyQueryDebugBuffer
NtQueryKey
_alloca_probe
NtOpenProcess
RtlAppendUnicodeToString
wcscmp
RtlGUIDFromString
RtlxUnicodeStringToAnsiSize
NtTerminateProcess
NtPrivilegeObjectAuditAlarm
RtlInitString
NtEnumerateKey
NtCreateDirectoryObject
NtFreeVirtualMemory
RtlIsValidIndexHandle
NtQueryInformationToken
NtAccessCheckByTypeResultListAndAuditAlarm
RtlConvertSidToUnicodeString
RtlFreeUnicodeString
RtlEqualSid
RtlAreAnyAccessesGranted
NtQueryInformationProcess
_stricmp
RtlInitUnicodeStringEx
wcsrchr
NtOpenProcessToken
NtEnumerateValueKey
RtlQueryInformationAcl
RtlIsGenericTableEmpty
RtlConvertToAutoInheritSecurityObject
NtSetValueKey
RtlMapGenericMask
NtSetEvent
RtlUpcaseUnicodeChar
RtlGetNtProductType
RtlSetDaclSecurityDescriptor
NtUnloadKey
wcsncmp
RtlLookupElementGenericTable
NtFsControlFile
strstr
RtlDetermineDosPathNameType_U
NtAccessCheckByTypeResultListAndAuditAlarmByHandle
RtlCreateUnicodeString
RtlDosPathNameToNtPathName_U
RtlEnumerateGenericTableWithoutSplaying
RtlFreeHeap
NtFlushKey
NtQueryValueKey
NtDeleteObjectAuditAlarm
RtlGetControlSecurityDescriptor
NtSetInformationObject
atol
RtlAddAccessDeniedAceEx
RtlGetAce
RtlInitializeSid
NtQueryMultipleValueKey
NtNotifyChangeKey
RtlCompareUnicodeString
RtlCopyLuid
RtlSubAuthorityCountSid
RtlInitializeCriticalSection
RtlUnicodeStringToAnsiString
NtSetInformationFile
NtOpenSymbolicLinkObject
NtLoadKey
wcscpy
NtQueryInformationThread
NtAccessCheckByTypeResultList
RtlTimeToSecondsSince1970
NtImpersonateAnonymousToken
NtAdjustPrivilegesToken
RtlCompareMemory
NtWriteFile
NtWaitForMultipleObjects
RtlInitializeHandleTable
RtlAllocateAndInitializeSid
RtlValidSid
RtlUnicodeToMultiByteSize
NtCreateEvent
RtlAdjustPrivilege
RtlCopyUnicodeString
RtlLengthSecurityDescriptor
RtlQueryProcessDebugInformation
RtlLengthRequiredSid
_wcsnicmp
RtlNewSecurityObject
RtlExpandEnvironmentStrings_U
RtlGetSaclSecurityDescriptor
NtPowerInformation
_ultow
RtlCreateUnicodeStringFromAsciiz
NtFlushBuffersFile
RtlSelfRelativeToAbsoluteSD
NtFilterToken
RtlAddAuditAccessObjectAce
NtQuerySystemTime
RtlInitAnsiString
NlsMbCodePageTag
RtlNumberGenericTableElements
NtClearEvent
wcsncpy
sprintf
NtSetInformationToken
RtlAddAce
NtAccessCheckByTypeAndAuditAlarm
NtQuerySystemInformation
RtlSetGroupSecurityDescriptor
RtlDeleteElementGenericTable
NtCreateKey
RtlMakeSelfRelativeSD
RtlQuerySecurityObject
NtQueryInformationFile
RtlAreAllAccessesGranted
NtCloseObjectAuditAlarm
RtlSetSecurityDescriptorRMControl
RtlIdentifierAuthoritySid
RtlFreeHandle
RtlEnterCriticalSection
NtSaveKeyEx
tolower
NtOpenThreadToken
NtCompareTokens
NtDeviceIoControlFile
RtlDestroyHeap
strchr
NtQueryVolumeInformationFile
RtlSetSaclSecurityDescriptor
RtlAppendUnicodeStringToString
RtlAddAuditAccessAceEx
NtReadFile
iswctype
RtlAddAuditAccessAce
RtlGetVersion
RtlDuplicateUnicodeString
RtlValidAcl
NtCreateFile
