RtlxUnicodeStringToAnsiSize
memmove
NtOpenThreadToken
RtlDestroyHeap
RtlInitUnicodeString
NtRestoreKey
RtlIdentifierAuthoritySid
RtlDestroyQueryDebugBuffer
NtSetInformationThread
swprintf
RtlInitString
RtlFreeHeap
RtlAllocateHeap
RtlDeleteCriticalSection
RtlGetSaclSecurityDescriptor
NtOpenFile
RtlGetAce
NtSetSecurityObject
RtlFreeHandle
NtCreateSemaphore
NtCreateEvent
NtWriteFile
RtlCreateQueryDebugBuffer
RtlSelfRelativeToAbsoluteSD
RtlSetSecurityObject
NtQueryVolumeInformationFile
NtWaitForMultipleObjects
NtImpersonateAnonymousToken
RtlGetOwnerSecurityDescriptor
NtUnloadKey
NtDuplicateObject
atol
NtFilterToken
NtAccessCheckByTypeAndAuditAlarm
RtlCopySid
wcscpy
NtLoadKey
RtlNumberGenericTableElements
NtOpenProcess
NtAccessCheckByTypeResultListAndAuditAlarmByHandle
RtlAreAnyAccessesGranted
NtCreateDirectoryObject
NtSaveKeyEx
RtlQueryRegistryValues
_chkstk
NtAllocateVirtualMemory
NtQueryValueKey
wcslen
RtlAbsoluteToSelfRelativeSD
NtQuerySecurityObject
RtlUnwind
_vsnwprintf
RtlDetermineDosPathNameType_U
NtQuerySystemTime
NtAccessCheckAndAuditAlarm
NtClose
NtDeviceIoControlFile
wcscat
_wcsnicmp
RtlLengthSecurityDescriptor
_stricmp
NtQueryPerformanceCounter
RtlAddAuditAccessObjectAce
NtWaitForSingleObject
NtAccessCheckByTypeResultList
RtlExpandEnvironmentStrings_U
strncpy
NtPowerInformation
RtlGetFullPathName_U
NtAllocateLocallyUniqueId
iswctype
RtlSubAuthorityCountSid
RtlLengthSid
RtlIsTextUnicode
RtlSetOwnerSecurityDescriptor
NtAdjustGroupsToken
RtlGetControlSecurityDescriptor
NtAccessCheck
RtlEnumerateGenericTableWithoutSplaying
RtlConvertToAutoInheritSecurityObject
_ftol
RtlOpenCurrentUser
NtFreeVirtualMemory
RtlFirstFreeAce
RtlAllocateAndInitializeSid
wcstol
RtlSelfRelativeToAbsoluteSD2
NtCompareTokens
RtlEnterCriticalSection
RtlDestroyHandleTable
NtFlushBuffersFile
NtSetValueKey
NtQuerySymbolicLinkObject
RtlAddAccessDeniedAceEx
_alloca_probe
RtlAddAce
_wcslwr
RtlConvertSidToUnicodeString
wcsncpy
NtPrivilegedServiceAuditAlarm
RtlUnicodeStringToInteger
RtlInsertElementGenericTable
RtlCreateHeap
wcsstr
RtlCreateAcl
DbgPrint
NtClearEvent
RtlSetDaclSecurityDescriptor
RtlSetGroupSecurityDescriptor
NtTraceEvent
RtlGUIDFromString
wcstoul
NtOpenSymbolicLinkObject
RtlMakeSelfRelativeSD
NtSetEvent
RtlAddAccessDeniedAce
RtlGetGroupSecurityDescriptor
RtlAreAllAccessesGranted
NtQueryMultipleValueKey
RtlIsGenericTableEmpty
RtlMultiByteToUnicodeN
RtlDosPathNameToNtPathName_U
RtlDeleteElementGenericTable
RtlLeaveCriticalSection
RtlPrefixUnicodeString
RtlUpcaseUnicodeStringToOemString
NtSetInformationObject
RtlAddAccessDeniedObjectAce
RtlCompareUnicodeString
RtlUpcaseUnicodeChar
RtlAnsiStringToUnicodeString
RtlValidSid
RtlUnicodeToMultiByteN
NtPrivilegeObjectAuditAlarm
RtlUnicodeToMultiByteSize
RtlMapGenericMask
RtlCompareMemory
RtlOemStringToUnicodeString
RtlGetNtProductType
RtlQueryProcessDebugInformation
NtEnumerateKey
sprintf
RtlSetSaclSecurityDescriptor
NtSaveMergedKeys
RtlEqualPrefixSid
NtEnumerateValueKey
NtQueryInformationFile
NtCloseObjectAuditAlarm
RtlAddAuditAccessAceEx
NtAccessCheckByTypeResultListAndAuditAlarm
RtlLengthRequiredSid
RtlCopyUnicodeString
wcscmp
RtlGetVersion
wcschr
RtlIntegerToUnicodeString
RtlInitAnsiString
wcsncmp
RtlFreeSid
RtlIsValidIndexHandle
RtlNtStatusToDosError
NtDeleteObjectAuditAlarm
NtQueryInformationThread
NtNotifyChangeKey
RtlAdjustPrivilege
NtReplaceKey
RtlEqualUnicodeString
RtlxAnsiStringToUnicodeSize
NlsMbCodePageTag
RtlCopyLuid
wcstombs
NtTerminateProcess
RtlGetSecurityDescriptorRMControl
tolower
RtlInitializeHandleTable
NtQueryVirtualMemory
RtlAddAccessAllowedObjectAce
RtlAddAccessAllowedAceEx
NtCreateFile
RtlAppendUnicodeToString
RtlInitializeCriticalSection
NtQueryKey
RtlValidAcl
RtlAppendUnicodeStringToString
NtAdjustPrivilegesToken
RtlQueryInformationAcl
RtlValidSecurityDescriptor
_wcsicmp
RtlFormatCurrentUserKeyPath
NtOpenProcessToken
RtlDeleteSecurityObject
RtlNewSecurityObject
RtlImpersonateSelf
RtlStringFromGUID
RtlNewSecurityObjectEx
RtlGetDaclSecurityDescriptor
NtDeleteKey
RtlSetSecurityDescriptorRMControl
RtlInitializeGenericTable
RtlFlushSecureMemoryCache
RtlCreateUnicodeString
_strnicmp
_itow
RtlDuplicateUnicodeString
RtlAddAccessAllowedAce
RtlUnicodeStringToAnsiString
RtlDeleteAce
RtlCreateUnicodeStringFromAsciiz
RtlAddAuditAccessAce
NtDeleteValueKey
NtNotifyChangeMultipleKeys
_snwprintf
NtOpenKey
NtOpenObjectAuditAlarm
NtQueryInformationToken
NtPrivilegeCheck
strchr
RtlTimeToSecondsSince1970
NtFsControlFile
RtlEqualSid
NtFlushKey
NtSetInformationFile
mbstowcs
RtlSetControlSecurityDescriptor
RtlSetInformationAcl
RtlFreeUnicodeString
NtDuplicateToken
RtlSetSecurityObjectEx
RtlQuerySecurityObject
NtQueryInformationProcess
_ultow
NtSetInformationToken
RtlNewSecurityObjectWithMultipleInheritance
NtSetInformationProcess
wcsrchr
NtReadFile
RtlInitUnicodeStringEx
NtCreateKey
NtSaveKey
RtlInitializeSid
RtlValidRelativeSecurityDescriptor
NtAccessCheckByType
RtlRandom
strstr
RtlCreateSecurityDescriptor
RtlSubAuthoritySid
RtlFreeAnsiString
NtQuerySystemInformation
RtlReAllocateHeap
RtlAllocateHandle
RtlLookupElementGenericTable
RtlImageNtHeader
NtReleaseSemaphore
