NtSetInformationProcess
RtlAddAccessAllowedAce
RtlIdentifierAuthoritySid
sprintf
NtPrivilegeCheck
NtQueryPerformanceCounter
RtlOemStringToUnicodeString
RtlInitializeGenericTable
wcsstr
NtFlushBuffersFile
RtlEnterCriticalSection
RtlDestroyHandleTable
RtlAreAnyAccessesGranted
tolower
NtSetSecurityObject
wcsncpy
NtEnumerateKey
RtlIsGenericTableEmpty
NtCreateFile
RtlFreeSid
RtlEnumerateGenericTableWithoutSplaying
NtOpenProcess
RtlInitializeHandleTable
RtlGetAce
RtlSetSecurityDescriptorRMControl
NtCreateSemaphore
NtCompareTokens
RtlLookupElementGenericTable
RtlGetGroupSecurityDescriptor
RtlFreeAnsiString
RtlSetInformationAcl
RtlInitString
wcsrchr
RtlAddAccessAllowedObjectAce
RtlInitUnicodeStringEx
RtlCreateHeap
NtAdjustGroupsToken
RtlDeleteCriticalSection
RtlSetDaclSecurityDescriptor
NtQueryKey
RtlAddAccessAllowedAceEx
NtSetEvent
RtlCompareUnicodeString
NtAccessCheckByTypeResultListAndAuditAlarm
wcslen
NtNotifyChangeKey
wcstombs
NtUnloadKey
RtlGetDaclSecurityDescriptor
NtFreeVirtualMemory
NtPrivilegedServiceAuditAlarm
RtlValidSecurityDescriptor
RtlConvertToAutoInheritSecurityObject
NtReplaceKey
RtlCopyUnicodeString
NtAdjustPrivilegesToken
RtlDeleteSecurityObject
memmove
NtQueryVirtualMemory
RtlNewSecurityObjectWithMultipleInheritance
RtlFreeUnicodeString
_snwprintf
RtlNtStatusToDosError
NtQuerySystemInformation
NtDeleteValueKey
NtFsControlFile
RtlGetOwnerSecurityDescriptor
RtlQueryProcessDebugInformation
RtlAllocateAndInitializeSid
RtlFormatCurrentUserKeyPath
NtWaitForMultipleObjects
NtWaitForSingleObject
RtlCreateUnicodeString
RtlAppendUnicodeToString
RtlAdjustPrivilege
RtlGUIDFromString
wcscmp
NtDuplicateObject
RtlCompareMemory
RtlAddAuditAccessAceEx
RtlCreateUnicodeStringFromAsciiz
RtlImpersonateSelf
RtlSetSecurityObject
RtlSubAuthorityCountSid
NtCreateEvent
RtlxAnsiStringToUnicodeSize
NtCloseObjectAuditAlarm
NtLoadKey
RtlUpcaseUnicodeStringToOemString
NtAccessCheckByTypeResultList
wcsncmp
NtWriteFile
RtlDosPathNameToNtPathName_U
RtlGetSecurityDescriptorRMControl
NtQueryInformationProcess
NtAccessCheckAndAuditAlarm
RtlSelfRelativeToAbsoluteSD
RtlEqualUnicodeString
RtlFreeHandle
RtlQuerySecurityObject
RtlSetGroupSecurityDescriptor
NtQuerySystemTime
_alloca_probe
RtlMapGenericMask
RtlAreAllAccessesGranted
RtlAddAccessDeniedAce
RtlAddAccessDeniedAceEx
RtlAppendUnicodeStringToString
NtDuplicateToken
NtOpenSymbolicLinkObject
RtlInitializeCriticalSection
NtSetValueKey
NtQueryMultipleValueKey
RtlGetControlSecurityDescriptor
NtReleaseSemaphore
RtlAnsiStringToUnicodeString
RtlDeleteAce
RtlSetSaclSecurityDescriptor
RtlAddAccessDeniedObjectAce
wcschr
_ftol
RtlUnicodeStringToInteger
RtlFlushSecureMemoryCache
RtlUnicodeStringToAnsiString
NtSaveMergedKeys
NtDeviceIoControlFile
RtlStringFromGUID
NtClose
RtlInitAnsiString
RtlSubAuthoritySid
RtlValidAcl
RtlAbsoluteToSelfRelativeSD
RtlFreeHeap
RtlSetSecurityObjectEx
RtlCopySid
RtlAddAuditAccessAce
RtlLengthSecurityDescriptor
_chkstk
RtlCreateQueryDebugBuffer
_ultow
RtlDestroyQueryDebugBuffer
RtlSetOwnerSecurityDescriptor
RtlGetNtProductType
NtEnumerateValueKey
iswctype
RtlIsValidIndexHandle
NtQueryValueKey
wcscat
RtlInitializeSid
swprintf
RtlInitUnicodeString
RtlOpenCurrentUser
NtFlushKey
NtOpenProcessToken
strstr
NtClearEvent
NtQueryInformationFile
NtSetInformationObject
NtQueryVolumeInformationFile
RtlLengthRequiredSid
RtlQueryRegistryValues
NtOpenObjectAuditAlarm
RtlConvertSidToUnicodeString
NtOpenKey
RtlGetFullPathName_U
NtOpenThreadToken
RtlEqualSid
RtlNumberGenericTableElements
RtlUnicodeToMultiByteN
RtlValidRelativeSecurityDescriptor
RtlLeaveCriticalSection
RtlIntegerToUnicodeString
NtDeleteObjectAuditAlarm
NtSaveKey
wcstoul
RtlGetSaclSecurityDescriptor
_itow
RtlEqualPrefixSid
RtlFirstFreeAce
NtRestoreKey
RtlMakeSelfRelativeSD
RtlDestroyHeap
RtlUpcaseUnicodeChar
_vsnwprintf
NtSetInformationFile
NtReadFile
NtQuerySecurityObject
RtlMultiByteToUnicodeN
RtlDetermineDosPathNameType_U
NtSetInformationToken
strncpy
NtTerminateProcess
RtlUnicodeToMultiByteSize
_strnicmp
NtNotifyChangeMultipleKeys
RtlxUnicodeStringToAnsiSize
RtlNewSecurityObjectEx
RtlValidSid
_stricmp
NtPrivilegeObjectAuditAlarm
RtlSelfRelativeToAbsoluteSD2
strchr
mbstowcs
NtDeleteKey
NtSaveKeyEx
atol
NtAllocateVirtualMemory
RtlExpandEnvironmentStrings_U
RtlRandom
RtlGetVersion
RtlSetControlSecurityDescriptor
_wcsnicmp
_wcslwr
NtTraceEvent
RtlDeleteElementGenericTable
RtlAllocateHeap
RtlCreateAcl
NtQuerySymbolicLinkObject
RtlAddAce
RtlQueryInformationAcl
RtlDuplicateUnicodeString
NtAccessCheck
RtlImageNtHeader
NtFilterToken
RtlInsertElementGenericTable
NtAccessCheckByTypeAndAuditAlarm
RtlAllocateHandle
RtlPrefixUnicodeString
NtImpersonateAnonymousToken
NtPowerInformation
NtAccessCheckByType
RtlLengthSid
NtQueryInformationThread
_wcsicmp
RtlIsTextUnicode
DbgPrint
NtCreateKey
RtlAddAuditAccessObjectAce
NtOpenFile
NtAllocateLocallyUniqueId
NlsMbCodePageTag
RtlTimeToSecondsSince1970
RtlUnwind
NtAccessCheckByTypeResultListAndAuditAlarmByHandle
RtlNewSecurityObject
RtlCreateSecurityDescriptor
NtSetInformationThread
wcscpy
RtlCopyLuid
RtlReAllocateHeap
wcstol
NtQueryInformationToken
