NtClearEvent
wcstombs
NtEnumerateValueKey
RtlSubAuthoritySid
RtlRandom
NtQueryVirtualMemory
RtlUnicodeToMultiByteSize
RtlAddAccessAllowedObjectAce
RtlDeleteSecurityObject
NtPrivilegeCheck
RtlCreateHeap
NtRestoreKey
NtFlushBuffersFile
NtImpersonateAnonymousToken
NtAccessCheckByTypeResultListAndAuditAlarm
NlsMbCodePageTag
_wcsicmp
RtlOpenCurrentUser
NtSaveKey
wcscmp
RtlConvertToAutoInheritSecurityObject
NtDeleteValueKey
RtlAddAccessAllowedAceEx
NtAccessCheckAndAuditAlarm
NtFilterToken
RtlNewSecurityObject
RtlInitializeCriticalSection
tolower
NtAdjustGroupsToken
RtlExpandEnvironmentStrings_U
RtlDuplicateUnicodeString
RtlMultiByteToUnicodeN
NtSetInformationObject
RtlEqualPrefixSid
NtReadFile
RtlAddAce
_snwprintf
NtSetInformationThread
RtlFreeAnsiString
NtTerminateProcess
RtlMakeSelfRelativeSD
RtlUnicodeStringToInteger
RtlSelfRelativeToAbsoluteSD2
RtlInitString
RtlSubAuthorityCountSid
NtQueryValueKey
RtlNewSecurityObjectEx
RtlDosPathNameToNtPathName_U
RtlSetSecurityObject
RtlGetGroupSecurityDescriptor
RtlQueryProcessDebugInformation
RtlDestroyHeap
RtlEnterCriticalSection
NtAccessCheckByTypeResultListAndAuditAlarmByHandle
RtlxUnicodeStringToAnsiSize
RtlDeleteCriticalSection
NtOpenProcessToken
swprintf
RtlNumberGenericTableElements
NtCreateFile
RtlInitUnicodeStringEx
NtQueryMultipleValueKey
RtlGetSecurityDescriptorRMControl
_ftol
NtDuplicateToken
NtOpenFile
RtlCreateAcl
RtlLookupElementGenericTable
RtlFreeHeap
sprintf
NtSetSecurityObject
_ultow
RtlSetInformationAcl
RtlSetOwnerSecurityDescriptor
RtlInitAnsiString
RtlQuerySecurityObject
_chkstk
RtlUnwind
RtlQueryRegistryValues
RtlSetControlSecurityDescriptor
NtOpenThreadToken
NtCreateKey
atol
NtPrivilegeObjectAuditAlarm
RtlCreateSecurityDescriptor
RtlSetSecurityObjectEx
NtPowerInformation
RtlGetSaclSecurityDescriptor
RtlGetOwnerSecurityDescriptor
NtQueryKey
wcstoul
RtlUpcaseUnicodeStringToOemString
RtlInitUnicodeString
RtlInitializeGenericTable
RtlDestroyQueryDebugBuffer
RtlNewSecurityObjectWithMultipleInheritance
wcsncpy
memmove
strstr
NtAccessCheckByTypeResultList
NtAccessCheck
RtlSetGroupSecurityDescriptor
NtQuerySystemInformation
RtlGetFullPathName_U
NtFreeVirtualMemory
RtlGUIDFromString
NtPrivilegedServiceAuditAlarm
RtlGetControlSecurityDescriptor
RtlAddAuditAccessObjectAce
RtlAllocateHeap
RtlValidSid
RtlDeleteAce
NtWaitForMultipleObjects
RtlAddAccessDeniedAceEx
RtlIdentifierAuthoritySid
RtlNtStatusToDosError
RtlDestroyHandleTable
NtFsControlFile
RtlAdjustPrivilege
NtNotifyChangeMultipleKeys
RtlSetSecurityDescriptorRMControl
NtQuerySecurityObject
RtlEqualSid
RtlFreeHandle
RtlInsertElementGenericTable
RtlGetDaclSecurityDescriptor
strchr
RtlValidRelativeSecurityDescriptor
wcsncmp
RtlAllocateHandle
NtWriteFile
RtlOemStringToUnicodeString
NtCloseObjectAuditAlarm
RtlGetAce
RtlTimeToSecondsSince1970
RtlIsGenericTableEmpty
RtlAppendUnicodeStringToString
NtFlushKey
RtlFreeUnicodeString
NtCreateSemaphore
NtSetValueKey
RtlInitializeSid
wcschr
RtlUnicodeToMultiByteN
RtlEnumerateGenericTableWithoutSplaying
_vsnwprintf
RtlStringFromGUID
NtSaveKeyEx
NtSetInformationFile
wcscat
RtlCopyUnicodeString
RtlGetNtProductType
NtQueryPerformanceCounter
RtlAllocateAndInitializeSid
NtQuerySystemTime
RtlSetDaclSecurityDescriptor
RtlDeleteElementGenericTable
NtAllocateLocallyUniqueId
RtlLengthRequiredSid
wcstol
_wcsnicmp
NtAccessCheckByType
RtlEqualUnicodeString
NtUnloadKey
NtOpenKey
_stricmp
NtAccessCheckByTypeAndAuditAlarm
RtlFreeSid
NtOpenObjectAuditAlarm
RtlAddAccessAllowedAce
NtDeleteKey
wcsrchr
RtlAddAccessDeniedAce
LdrLoadDll
NtAdjustPrivilegesToken
NtReleaseSemaphore
RtlUpcaseUnicodeChar
RtlSetSaclSecurityDescriptor
NtLoadKey
RtlAbsoluteToSelfRelativeSD
NtQueryInformationProcess
RtlInitializeHandleTable
RtlSelfRelativeToAbsoluteSD
NtAllocateVirtualMemory
RtlLengthSecurityDescriptor
_itow
_strnicmp
NtQueryVolumeInformationFile
RtlIntegerToUnicodeString
RtlGetVersion
NtQuerySymbolicLinkObject
wcslen
NtDuplicateObject
RtlValidAcl
RtlLeaveCriticalSection
NtQueryInformationThread
NtSaveMergedKeys
NtSetInformationToken
RtlAppendUnicodeToString
RtlCreateQueryDebugBuffer
RtlDetermineDosPathNameType_U
RtlIsValidIndexHandle
NtDeviceIoControlFile
NtWaitForSingleObject
RtlIsTextUnicode
RtlFlushSecureMemoryCache
iswctype
wcscpy
NtTraceEvent
RtlMapGenericMask
RtlxAnsiStringToUnicodeSize
NtClose
RtlConvertSidToUnicodeString
wcsstr
RtlQueryInformationAcl
RtlFormatCurrentUserKeyPath
RtlUnicodeStringToAnsiString
NtCompareTokens
RtlPrefixUnicodeString
RtlFirstFreeAce
RtlAddAccessDeniedObjectAce
mbstowcs
RtlImpersonateSelf
RtlAddAuditAccessAceEx
NtOpenSymbolicLinkObject
RtlCompareMemory
RtlAreAnyAccessesGranted
NtSetInformationProcess
NtReplaceKey
RtlImageNtHeader
strncpy
NtSetEvent
NtQueryInformationToken
_alloca_probe
_wcslwr
NtNotifyChangeKey
NtDeleteObjectAuditAlarm
RtlAddAuditAccessAce
RtlAnsiStringToUnicodeString
NtOpenProcess
NtQueryInformationFile
RtlCopyLuid
RtlCreateUnicodeString
RtlAreAllAccessesGranted
RtlCompareUnicodeString
DbgPrint
NtEnumerateKey
NtCreateEvent
RtlLengthSid
RtlCreateUnicodeStringFromAsciiz
RtlReAllocateHeap
RtlValidSecurityDescriptor
RtlCopySid
