Main Page Windows 7 DLLs NirSoft Utilities
Windows 10 DLL File Information - ntdll.dll

The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 10, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.

 

General Information

File Description: NT Layer DLL  
File Version: 10.0.10130.0 (fbl_impressive.150522-2224)  
Company: Microsoft Corporation  
Product Name: Microsoft® Windows® Operating System  
DLL popularity Very High - 1378 other DLL files in system32 directory are statically linked to this file.
File Size: 1,498 KB
Total Number of Exported Functions: 2,231
Total Number of Exported Functions With Names: 2,230
 

Section Headers

Name Virtual Address Raw Data Size % of File Characteristics Section Contains...
.text 0x00001000 1,065,472 Bytes 69.5% Read, Execute Code
RT 0x00106000 512 Bytes 0.0% Read, Execute Code
.data 0x00107000 2,560 Bytes 0.2% Write, Read Initialized Data
.mrdata 0x0010b000 8,704 Bytes 0.6% Write, Read Initialized Data
.rsrc 0x0010e000 415,232 Bytes 27.1% Read Initialized Data
.reloc 0x00174000 18,432 Bytes 1.2% Read, Discardable Initialized Data
 

Static Linking

No static linking in this file.

 

General Resources Information

Resource Type Number of Items Total Size % of File
Icons 0 0 Bytes 0.0%
Animated Icons 0 0 Bytes 0.0%
Cursors 0 0 Bytes 0.0%
Animated Cursors 0 0 Bytes 0.0%
Bitmaps 0 0 Bytes 0.0%
AVI Files 0 0 Bytes 0.0%
Dialog-Boxes 0 0 Bytes 0.0%
HTML Related Files 0 0 Bytes 0.0%
Menus 0 0 Bytes 0.0%
Strings 0 0 Bytes 0.0%
Type Libraries 0 0 Bytes 0.0%
Manifest 0 0 Bytes 0.0%
All Others 3 414,768 Bytes 27.0%
Total 3 414,768 Bytes 27.0%
 

Icons in this file

No icons found in this file

 

Cursors in this file

No cursors found in this file

 

Dialog-boxes list (up to 1000 dialogs)

No dialog resources in this file.

 

String resources in this dll (up to 1000 strings)

No string resources in this file.

 

COM Classes/Interfaces

There is no type library in this file with COM classes/interfaces information

 

Exported Functions List

The following functions are exported by this dll:
A_SHAFinal A_SHAInit
A_SHAUpdate AlpcAdjustCompletionListConcurrencyCount
AlpcFreeCompletionListMessage AlpcGetCompletionListLastMessageInformation
AlpcGetCompletionListMessageAttributes AlpcGetHeaderSize
AlpcGetMessageAttribute AlpcGetMessageFromCompletionList
AlpcGetOutstandingCompletionListMessageCount AlpcInitializeMessageAttribute
AlpcMaxAllowedMessageLength AlpcRegisterCompletionList
AlpcRegisterCompletionListWorkerThread AlpcRundownCompletionList
AlpcUnregisterCompletionList AlpcUnregisterCompletionListWorkerThread
ApiSetQueryApiSetPresence CsrAllocateCaptureBuffer
CsrAllocateMessagePointer CsrCaptureMessageBuffer
CsrCaptureMessageMultiUnicodeStringsInPlace CsrCaptureMessageString
CsrCaptureTimeout CsrClientCallServer
CsrClientConnectToServer CsrFreeCaptureBuffer
CsrGetProcessId CsrIdentifyAlertableThread
CsrSetPriorityClass CsrVerifyRegion
DbgBreakPoint DbgPrint
DbgPrintEx DbgPrintReturnControlC
DbgPrompt DbgQueryDebugFilterState
DbgSetDebugFilterState DbgUiConnectToDbg
DbgUiContinue DbgUiConvertStateChangeStructure
DbgUiConvertStateChangeStructureEx DbgUiDebugActiveProcess
DbgUiGetThreadDebugObject DbgUiIssueRemoteBreakin
DbgUiRemoteBreakin DbgUiSetThreadDebugObject
DbgUiStopDebugging DbgUiWaitStateChange
DbgUserBreakPoint EtwCreateTraceInstanceId
EtwDeliverDataBlock EtwEnumerateProcessRegGuids
EtwEventActivityIdControl EtwEventEnabled
EtwEventProviderEnabled EtwEventRegister
EtwEventSetInformation EtwEventUnregister
EtwEventWrite EtwEventWriteEndScenario
EtwEventWriteEx EtwEventWriteFull
EtwEventWriteNoRegistration EtwEventWriteStartScenario
EtwEventWriteString EtwEventWriteTransfer
EtwGetTraceEnableFlags EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle EtwLogTraceEvent
EtwNotificationRegister EtwNotificationUnregister
EtwProcessPrivateLoggerRequest EtwRegisterSecurityProvider
EtwRegisterTraceGuidsA EtwRegisterTraceGuidsW
EtwReplyNotification EtwSendNotification
EtwSetMark EtwTraceEventInstance
EtwTraceMessage EtwTraceMessageVa
EtwUnregisterTraceGuids EtwWriteUMSecurityEvent
EtwpCreateEtwThread EtwpGetCpuSpeed
EvtIntReportAuthzEventAndSourceAsync EvtIntReportEventAndSourceAsync
ExpInterlockedPopEntrySListEnd ExpInterlockedPopEntrySListFault
ExpInterlockedPopEntrySListResume KiFastSystemCall
KiFastSystemCallRet KiIntSystemCall
KiRaiseUserExceptionDispatcher KiUserApcDispatcher
KiUserCallbackDispatcher KiUserExceptionDispatcher
LdrAccessResource LdrAddDllDirectory
LdrAddLoadAsDataTable LdrAddRefDll
LdrAppxHandleIntegrityFailure LdrDisableThreadCalloutsForDll
LdrEnumResources LdrEnumerateLoadedModules
LdrFastFailInLoaderCallout LdrFindEntryForAddress
LdrFindResourceDirectory_U LdrFindResourceEx_U
LdrFindResource_U LdrFlushAlternateResourceModules
LdrGetDllDirectory LdrGetDllFullName
LdrGetDllHandle LdrGetDllHandleByMapping
LdrGetDllHandleByName LdrGetDllHandleEx
LdrGetDllPath LdrGetFailureData
LdrGetFileNameFromLoadAsDataTable LdrGetProcedureAddress
LdrGetProcedureAddressEx LdrGetProcedureAddressForCaller
LdrInitShimEngineDynamic LdrInitializeThunk
LdrLoadAlternateResourceModule LdrLoadAlternateResourceModuleEx
LdrLoadDll LdrLockLoaderLock
LdrOpenImageFileOptionsKey LdrProcessRelocationBlock
LdrProcessRelocationBlockEx LdrQueryImageFileExecutionOptions
LdrQueryImageFileExecutionOptionsEx LdrQueryImageFileKeyOption
LdrQueryModuleServiceTags LdrQueryOptionalDelayLoadedAPI
LdrQueryProcessModuleInformation LdrRegisterDllNotification
LdrRemoveDllDirectory LdrRemoveLoadAsDataTable
LdrResFindResource LdrResFindResourceDirectory
LdrResGetRCConfig LdrResRelease
LdrResSearchResource LdrResolveDelayLoadedAPI
LdrResolveDelayLoadsFromDll LdrRscIsTypeExist
LdrSetAppCompatDllRedirectionCallback LdrSetDefaultDllDirectories
LdrSetDllDirectory LdrSetDllManifestProber
LdrSetImplicitPathOptions LdrSetMUICacheType
LdrShutdownProcess LdrShutdownThread
LdrStandardizeSystemPath LdrSystemDllInitBlock
LdrUnloadAlternateResourceModule LdrUnloadAlternateResourceModuleEx
LdrUnloadDll LdrUnlockLoaderLock
LdrUnregisterDllNotification LdrVerifyImageMatchesChecksum
LdrVerifyImageMatchesChecksumEx LdrpResGetMappingSize
LdrpResGetResourceDirectory MD4Final
MD4Init MD4Update
MD5Final MD5Init
MD5Update NlsAnsiCodePage
NlsMbCodePageTag NlsMbOemCodePageTag
NtAcceptConnectPort NtAccessCheck
NtAccessCheckAndAuditAlarm NtAccessCheckByType
NtAccessCheckByTypeAndAuditAlarm NtAccessCheckByTypeResultList
NtAccessCheckByTypeResultListAndAuditAlarm NtAccessCheckByTypeResultListAndAuditAlarmByHandle
NtAddAtom NtAddAtomEx
NtAddBootEntry NtAddDriverEntry
NtAdjustGroupsToken NtAdjustPrivilegesToken
NtAdjustTokenClaimsAndDeviceGroups NtAlertResumeThread
NtAlertThread NtAlertThreadByThreadId
NtAllocateLocallyUniqueId NtAllocateReserveObject
NtAllocateUserPhysicalPages NtAllocateUuids
NtAllocateVirtualMemory NtAlpcAcceptConnectPort
NtAlpcCancelMessage NtAlpcConnectPort
NtAlpcConnectPortEx NtAlpcCreatePort
NtAlpcCreatePortSection NtAlpcCreateResourceReserve
NtAlpcCreateSectionView NtAlpcCreateSecurityContext
NtAlpcDeletePortSection NtAlpcDeleteResourceReserve
NtAlpcDeleteSectionView NtAlpcDeleteSecurityContext
NtAlpcDisconnectPort NtAlpcImpersonateClientContainerOfPort
NtAlpcImpersonateClientOfPort NtAlpcOpenSenderProcess
NtAlpcOpenSenderThread NtAlpcQueryInformation
NtAlpcQueryInformationMessage NtAlpcRevokeSecurityContext
NtAlpcSendWaitReceivePort NtAlpcSetInformation
NtApphelpCacheControl NtAreMappedFilesTheSame
NtAssignProcessToJobObject NtAssignProcessToSiloObject
NtAssociateWaitCompletionPacket NtCallbackReturn
NtCancelIoFile NtCancelIoFileEx
NtCancelSynchronousIoFile NtCancelTimer
NtCancelTimer2 NtCancelWaitCompletionPacket
NtClearEvent NtClose
NtCloseObjectAuditAlarm NtCommitComplete
NtCommitEnlistment NtCommitTransaction
NtCompactKeys NtCompareObjects
NtCompareTokens NtCompleteConnectPort
NtCompressKey NtConnectPort
NtContinue NtCreateDebugObject
NtCreateDirectoryObject NtCreateDirectoryObjectEx
NtCreateEnlistment NtCreateEvent
NtCreateEventPair NtCreateFile
NtCreateIRTimer NtCreateIoCompletion
NtCreateJobObject NtCreateJobSet
NtCreateKey NtCreateKeyTransacted
NtCreateKeyedEvent NtCreateLowBoxToken
NtCreateMailslotFile NtCreateMutant
NtCreateNamedPipeFile NtCreatePagingFile
NtCreatePartition NtCreatePort
NtCreatePrivateNamespace NtCreateProcess
NtCreateProcessEx NtCreateProfile
NtCreateProfileEx NtCreateResourceManager
NtCreateSection NtCreateSemaphore
NtCreateSiloObject NtCreateSymbolicLinkObject
NtCreateThread NtCreateThreadEx
NtCreateTimer NtCreateTimer2
NtCreateToken NtCreateTokenEx
NtCreateTransaction NtCreateTransactionManager
NtCreateUserProcess NtCreateWaitCompletionPacket
NtCreateWaitablePort NtCreateWnfStateName
NtCreateWorkerFactory NtCurrentTeb
NtDebugActiveProcess NtDebugContinue
NtDelayExecution NtDeleteAtom
NtDeleteBootEntry NtDeleteDriverEntry
NtDeleteFile NtDeleteKey
NtDeleteObjectAuditAlarm NtDeletePrivateNamespace
NtDeleteValueKey NtDeleteWnfStateData
NtDeleteWnfStateName NtDeviceIoControlFile
NtDisableLastKnownGood NtDisplayString
NtDrawText NtDuplicateObject
NtDuplicateToken NtEnableLastKnownGood
NtEnumerateBootEntries NtEnumerateDriverEntries
NtEnumerateKey NtEnumerateSystemEnvironmentValuesEx
NtEnumerateTransactionObject NtEnumerateValueKey
NtExtendSection NtFilterBootOption
NtFilterToken NtFilterTokenEx
NtFindAtom NtFlushBuffersFile
NtFlushBuffersFileEx NtFlushInstallUILanguage
NtFlushInstructionCache NtFlushKey
NtFlushProcessWriteBuffers NtFlushVirtualMemory
NtFlushWriteBuffer NtFreeUserPhysicalPages
NtFreeVirtualMemory NtFreezeRegistry
NtFreezeTransactions NtFsControlFile
NtGetCachedSigningLevel NtGetCompleteWnfStateSubscription
NtGetContextThread NtGetCurrentProcessorNumber
NtGetCurrentProcessorNumberEx NtGetDevicePowerState
NtGetMUIRegistryInfo NtGetNextProcess
NtGetNextThread NtGetNlsSectionPtr
NtGetNotificationResourceManager NtGetTickCount
NtGetWriteWatch NtImpersonateAnonymousToken
NtImpersonateClientOfPort NtImpersonateThread
NtInitializeNlsFiles NtInitializeRegistry
NtInitiatePowerAction NtIsProcessInJob
NtIsSystemResumeAutomatic NtIsUILanguageComitted
NtListenPort NtLoadDriver
NtLoadKey NtLoadKey2
NtLoadKeyEx NtLockFile
NtLockProductActivationKeys NtLockRegistryKey
NtLockVirtualMemory NtMakePermanentObject
NtMakeTemporaryObject NtManagePartition
NtMapCMFModule NtMapUserPhysicalPages
NtMapUserPhysicalPagesScatter NtMapViewOfSection
NtModifyBootEntry NtModifyDriverEntry
NtNotifyChangeDirectoryFile NtNotifyChangeKey
NtNotifyChangeMultipleKeys NtNotifyChangeSession
NtOpenDirectoryObject NtOpenEnlistment
NtOpenEvent NtOpenEventPair
NtOpenFile NtOpenIoCompletion
NtOpenJobObject NtOpenKey
NtOpenKeyEx NtOpenKeyTransacted
NtOpenKeyTransactedEx NtOpenKeyedEvent
NtOpenMutant NtOpenObjectAuditAlarm
NtOpenPartition NtOpenPrivateNamespace
NtOpenProcess NtOpenProcessToken
NtOpenProcessTokenEx NtOpenResourceManager
NtOpenSection NtOpenSemaphore
NtOpenSession NtOpenSiloObject
NtOpenSymbolicLinkObject NtOpenThread
NtOpenThreadToken NtOpenThreadTokenEx
NtOpenTimer NtOpenTransaction
NtOpenTransactionManager NtPlugPlayControl
NtPowerInformation NtPrePrepareComplete
NtPrePrepareEnlistment NtPrepareComplete
NtPrepareEnlistment NtPrivilegeCheck
NtPrivilegeObjectAuditAlarm NtPrivilegedServiceAuditAlarm
NtPropagationComplete NtPropagationFailed
NtProtectVirtualMemory NtPulseEvent
NtQueryAttributesFile NtQueryBootEntryOrder
NtQueryBootOptions NtQueryDebugFilterState
NtQueryDefaultLocale NtQueryDefaultUILanguage
NtQueryDirectoryFile NtQueryDirectoryObject
NtQueryDriverEntryOrder NtQueryEaFile
NtQueryEvent NtQueryFullAttributesFile
NtQueryInformationAtom NtQueryInformationEnlistment
NtQueryInformationFile NtQueryInformationJobObject
NtQueryInformationPort NtQueryInformationProcess
NtQueryInformationResourceManager NtQueryInformationSiloObject
NtQueryInformationThread NtQueryInformationToken
NtQueryInformationTransaction NtQueryInformationTransactionManager
NtQueryInformationWorkerFactory NtQueryInstallUILanguage
NtQueryIntervalProfile NtQueryIoCompletion
NtQueryKey NtQueryLicenseValue
NtQueryMultipleValueKey NtQueryMutant
NtQueryObject NtQueryOpenSubKeys
NtQueryOpenSubKeysEx NtQueryPerformanceCounter
NtQueryPortInformationProcess NtQueryQuotaInformationFile
NtQuerySection NtQuerySecurityAttributesToken
NtQuerySecurityObject NtQuerySemaphore
NtQuerySymbolicLinkObject NtQuerySystemEnvironmentValue
NtQuerySystemEnvironmentValueEx NtQuerySystemInformation
NtQuerySystemInformationEx NtQuerySystemTime
NtQueryTimer NtQueryTimerResolution
NtQueryValueKey NtQueryVirtualMemory
NtQueryVolumeInformationFile NtQueryWnfStateData
NtQueryWnfStateNameInformation NtQueueApcThread
NtQueueApcThreadEx NtRaiseException
NtRaiseHardError NtReadFile
NtReadFileScatter NtReadOnlyEnlistment
NtReadRequestData NtReadVirtualMemory
NtRecoverEnlistment NtRecoverResourceManager
NtRecoverTransactionManager NtRegisterProtocolAddressInformation
NtRegisterThreadTerminatePort NtReleaseKeyedEvent
NtReleaseMutant NtReleaseSemaphore
NtReleaseWorkerFactoryWorker NtRemoveIoCompletion
NtRemoveIoCompletionEx NtRemoveProcessDebug
NtRenameKey NtRenameTransactionManager
NtReplaceKey NtReplacePartitionUnit
NtReplyPort NtReplyWaitReceivePort
NtReplyWaitReceivePortEx NtReplyWaitReplyPort
NtRequestPort NtRequestWaitReplyPort
NtResetEvent NtResetWriteWatch
NtRestoreKey NtResumeProcess
NtResumeThread NtRevertContainerImpersonation
NtRollbackComplete NtRollbackEnlistment
NtRollbackTransaction NtRollforwardTransactionManager
NtSaveKey NtSaveKeyEx
NtSaveMergedKeys NtSecureConnectPort
NtSerializeBoot NtSetBootEntryOrder
NtSetBootOptions NtSetCachedSigningLevel
NtSetContextThread NtSetDebugFilterState
NtSetDefaultHardErrorPort NtSetDefaultLocale
NtSetDefaultUILanguage NtSetDriverEntryOrder
NtSetEaFile NtSetEvent
NtSetEventBoostPriority NtSetHighEventPair
NtSetHighWaitLowEventPair NtSetIRTimer
NtSetInformationDebugObject NtSetInformationEnlistment
NtSetInformationFile NtSetInformationJobObject
NtSetInformationKey NtSetInformationObject
NtSetInformationProcess NtSetInformationResourceManager
NtSetInformationSiloObject NtSetInformationSymbolicLink
NtSetInformationThread NtSetInformationToken
NtSetInformationTransaction NtSetInformationTransactionManager
NtSetInformationVirtualMemory NtSetInformationWorkerFactory
NtSetIntervalProfile NtSetIoCompletion
NtSetIoCompletionEx NtSetLdtEntries
NtSetLowEventPair NtSetLowWaitHighEventPair
NtSetQuotaInformationFile NtSetSecurityObject
NtSetSystemEnvironmentValue NtSetSystemEnvironmentValueEx
NtSetSystemInformation NtSetSystemPowerState
NtSetSystemTime NtSetThreadExecutionState
NtSetTimer NtSetTimer2
NtSetTimerEx NtSetTimerResolution
NtSetUuidSeed NtSetValueKey
NtSetVolumeInformationFile NtSetWnfProcessNotificationEvent
NtShutdownSystem NtShutdownWorkerFactory
NtSignalAndWaitForSingleObject NtSinglePhaseReject
NtStartProfile NtStopProfile
NtSubscribeWnfStateChange NtSuspendProcess
NtSuspendThread NtSystemDebugControl
NtTerminateJobObject NtTerminateProcess
NtTerminateSiloObject NtTerminateThread
NtTestAlert NtThawRegistry
NtThawTransactions NtTraceControl
NtTraceEvent NtTranslateFilePath
NtUmsThreadYield NtUnloadDriver
NtUnloadKey NtUnloadKey2
NtUnloadKeyEx NtUnlockFile
NtUnlockVirtualMemory NtUnmapViewOfSection
NtUnmapViewOfSectionEx NtUnsubscribeWnfStateChange
NtUpdateWnfStateData NtVdmControl
NtWaitForAlertByThreadId NtWaitForDebugEvent
NtWaitForKeyedEvent NtWaitForMultipleObjects
NtWaitForMultipleObjects32 NtWaitForSingleObject
NtWaitForWorkViaWorkerFactory NtWaitHighEventPair
NtWaitLowEventPair NtWorkerFactoryWorkerReady
NtWriteFile NtWriteFileGather
NtWriteRequestData NtWriteVirtualMemory
NtYieldExecution NtdllDefWindowProc_A
NtdllDefWindowProc_W NtdllDialogWndProc_A
NtdllDialogWndProc_W PfxFindPrefix
PfxInitialize PfxInsertPrefix
PfxRemovePrefix PssNtCaptureSnapshot
PssNtDuplicateSnapshot PssNtFreeRemoteSnapshot
PssNtFreeSnapshot PssNtFreeWalkMarker
PssNtQuerySnapshot PssNtValidateDescriptor
PssNtWalkSnapshot RtlAbortRXact
RtlAbsoluteToSelfRelativeSD RtlAcquirePebLock
RtlAcquirePrivilege RtlAcquireReleaseSRWLockExclusive
RtlAcquireResourceExclusive RtlAcquireResourceShared
RtlAcquireSRWLockExclusive RtlAcquireSRWLockShared
RtlActivateActivationContext RtlActivateActivationContextEx
RtlActivateActivationContextUnsafeFast RtlAddAccessAllowedAce
RtlAddAccessAllowedAceEx RtlAddAccessAllowedObjectAce
RtlAddAccessDeniedAce RtlAddAccessDeniedAceEx
RtlAddAccessDeniedObjectAce RtlAddAce
RtlAddActionToRXact RtlAddAtomToAtomTable
RtlAddAttributeActionToRXact RtlAddAuditAccessAce
RtlAddAuditAccessAceEx RtlAddAuditAccessObjectAce
RtlAddCompoundAce RtlAddIntegrityLabelToBoundaryDescriptor
RtlAddMandatoryAce RtlAddProcessTrustLabelAce
RtlAddRefActivationContext RtlAddRefMemoryStream
RtlAddResourceAttributeAce RtlAddSIDToBoundaryDescriptor
RtlAddScopedPolicyIDAce RtlAddVectoredContinueHandler
RtlAddVectoredExceptionHandler RtlAddressInSectionTable
RtlAdjustPrivilege RtlAllocateActivationContextStack
RtlAllocateAndInitializeSid RtlAllocateAndInitializeSidEx
RtlAllocateHandle RtlAllocateHeap
RtlAllocateMemoryBlockLookaside RtlAllocateMemoryZone
RtlAllocateWnfSerializationGroup RtlAnsiCharToUnicodeChar
RtlAnsiStringToUnicodeSize RtlAnsiStringToUnicodeString
RtlAppendAsciizToString RtlAppendPathElement
RtlAppendStringToString RtlAppendUnicodeStringToString
RtlAppendUnicodeToString RtlApplicationVerifierStop
RtlApplyRXact RtlApplyRXactNoFlush
RtlAppxIsFileOwnedByTrustedInstaller RtlAreAllAccessesGranted
RtlAreAnyAccessesGranted RtlAreBitsClear
RtlAreBitsSet RtlAssert
RtlAvlInsertNodeEx RtlAvlRemoveNode
RtlBarrier RtlBarrierForDelete
RtlCancelTimer RtlCanonicalizeDomainName
RtlCapabilityCheck RtlCaptureContext
RtlCaptureStackBackTrace RtlCaptureStackContext
RtlCharToInteger RtlCheckForOrphanedCriticalSections
RtlCheckPortableOperatingSystem RtlCheckRegistryKey
RtlCheckTokenCapability RtlCheckTokenMembership
RtlCheckTokenMembershipEx RtlCleanUpTEBLangLists
RtlClearAllBits RtlClearBit
RtlClearBits RtlCloneMemoryStream
RtlCloneUserProcess RtlCmDecodeMemIoResource
RtlCmEncodeMemIoResource RtlCommitDebugInfo
RtlCommitMemoryStream RtlCompactHeap
RtlCompareAltitudes RtlCompareMemory
RtlCompareMemoryUlong RtlCompareString
RtlCompareUnicodeString RtlCompareUnicodeStrings
RtlCompressBuffer RtlComputeCrc32
RtlComputeImportTableHash RtlComputePrivatizedDllName_U
RtlConnectToSm RtlConsoleMultiByteToUnicodeN
RtlContractHashTable RtlConvertDeviceFamilyInfoToString
RtlConvertExclusiveToShared RtlConvertLCIDToString
RtlConvertLongToLargeInteger RtlConvertSRWLockExclusiveToShared
RtlConvertSharedToExclusive RtlConvertSidToUnicodeString
RtlConvertToAutoInheritSecurityObject RtlConvertUlongToLargeInteger
RtlCopyBitMap RtlCopyContext
RtlCopyExtendedContext RtlCopyLuid
RtlCopyLuidAndAttributesArray RtlCopyMappedMemory
RtlCopyMemoryStreamTo RtlCopyOutOfProcessMemoryStreamTo
RtlCopySecurityDescriptor RtlCopySid
RtlCopySidAndAttributesArray RtlCopyString
RtlCopyUnicodeString RtlCrc32
RtlCrc64 RtlCreateAcl
RtlCreateActivationContext RtlCreateAndSetSD
RtlCreateAtomTable RtlCreateBootStatusDataFile
RtlCreateBoundaryDescriptor RtlCreateEnvironment
RtlCreateEnvironmentEx RtlCreateHashTable
RtlCreateHashTableEx RtlCreateHeap
RtlCreateMemoryBlockLookaside RtlCreateMemoryZone
RtlCreateProcessParameters RtlCreateProcessParametersEx
RtlCreateProcessReflection RtlCreateQueryDebugBuffer
RtlCreateRegistryKey RtlCreateSecurityDescriptor
RtlCreateServiceSid RtlCreateSystemVolumeInformationFolder
RtlCreateTagHeap RtlCreateTimer
RtlCreateTimerQueue RtlCreateUnicodeString
RtlCreateUnicodeStringFromAsciiz RtlCreateUserProcess
RtlCreateUserSecurityObject RtlCreateUserStack
RtlCreateUserThread RtlCreateVirtualAccountSid
RtlCultureNameToLCID RtlCustomCPToUnicodeN
RtlCutoverTimeToSystemTime RtlDeCommitDebugInfo
RtlDeNormalizeProcessParams RtlDeactivateActivationContext
RtlDeactivateActivationContextUnsafeFast RtlDebugPrintTimes
RtlDecodePointer RtlDecodeRemotePointer
RtlDecodeSystemPointer RtlDecompressBuffer
RtlDecompressBufferEx RtlDecompressFragment
RtlDefaultNpAcl RtlDelete
RtlDeleteAce RtlDeleteAtomFromAtomTable
RtlDeleteBarrier RtlDeleteBoundaryDescriptor
RtlDeleteCriticalSection RtlDeleteElementGenericTable
RtlDeleteElementGenericTableAvl RtlDeleteElementGenericTableAvlEx
RtlDeleteHashTable RtlDeleteNoSplay
RtlDeleteRegistryValue RtlDeleteResource
RtlDeleteSecurityObject RtlDeleteTimer
RtlDeleteTimerQueue RtlDeleteTimerQueueEx
RtlDeregisterSecureMemoryCacheCallback RtlDeregisterWait
RtlDeregisterWaitEx RtlDeriveCapabilitySidsFromName
RtlDestroyAtomTable RtlDestroyEnvironment
RtlDestroyHandleTable RtlDestroyHeap
RtlDestroyMemoryBlockLookaside RtlDestroyMemoryZone
RtlDestroyProcessParameters RtlDestroyQueryDebugBuffer
RtlDetectHeapLeaks RtlDetermineDosPathNameType_U
RtlDisableThreadProfiling RtlDllShutdownInProgress
RtlDnsHostNameToComputerName RtlDoesFileExists_U
RtlDosApplyFileIsolationRedirection_Ustr RtlDosPathNameToNtPathName_U
RtlDosPathNameToNtPathName_U_WithStatus RtlDosPathNameToRelativeNtPathName_U
RtlDosPathNameToRelativeNtPathName_U_WithStatus RtlDosSearchPath_U
RtlDosSearchPath_Ustr RtlDowncaseUnicodeChar
RtlDowncaseUnicodeString RtlDumpResource
RtlDuplicateUnicodeString RtlEmptyAtomTable
RtlEnableEarlyCriticalSectionEventCreation RtlEnableThreadProfiling
RtlEncodePointer RtlEncodeRemotePointer
RtlEncodeSystemPointer RtlEndEnumerationHashTable
RtlEndStrongEnumerationHashTable RtlEndWeakEnumerationHashTable
RtlEnlargedIntegerMultiply RtlEnlargedUnsignedMultiply
RtlEnterCriticalSection RtlEnumProcessHeaps
RtlEnumerateEntryHashTable RtlEnumerateGenericTable
RtlEnumerateGenericTableAvl RtlEnumerateGenericTableLikeADirectory
RtlEnumerateGenericTableWithoutSplaying RtlEnumerateGenericTableWithoutSplayingAvl
RtlEqualComputerName RtlEqualDomainName
RtlEqualLuid RtlEqualPrefixSid
RtlEqualSid RtlEqualString
RtlEqualUnicodeString RtlEqualWnfChangeStamps
RtlEraseUnicodeString RtlEthernetAddressToStringA
RtlEthernetAddressToStringW RtlEthernetStringToAddressA
RtlEthernetStringToAddressW RtlExitUserProcess
RtlExitUserThread RtlExpandEnvironmentStrings
RtlExpandEnvironmentStrings_U RtlExpandHashTable
RtlExtendMemoryBlockLookaside RtlExtendMemoryZone
RtlExtendedIntegerMultiply RtlExtendedLargeIntegerDivide
RtlExtendedMagicDivide RtlExtractBitMap
RtlFillMemory RtlFillMemoryUlong
RtlFillMemoryUlonglong RtlFinalReleaseOutOfProcessMemoryStream
RtlFindAceByType RtlFindActivationContextSectionGuid
RtlFindActivationContextSectionString RtlFindCharInUnicodeString
RtlFindClearBits RtlFindClearBitsAndSet
RtlFindClearRuns RtlFindClosestEncodableLength
RtlFindLastBackwardRunClear RtlFindLeastSignificantBit
RtlFindLongestRunClear RtlFindMessage
RtlFindMostSignificantBit RtlFindNextForwardRunClear
RtlFindSetBits RtlFindSetBitsAndClear
RtlFindUnicodeSubstring RtlFirstEntrySList
RtlFirstFreeAce RtlFlsAlloc
RtlFlsFree RtlFlushHeaps
RtlFlushSecureMemoryCache RtlFormatCurrentUserKeyPath
RtlFormatMessage RtlFormatMessageEx
RtlFreeActivationContextStack RtlFreeAnsiString
RtlFreeHandle RtlFreeHeap
RtlFreeMemoryBlockLookaside RtlFreeOemString
RtlFreeSid RtlFreeThreadActivationContextStack
RtlFreeUnicodeString RtlFreeUserStack
RtlGUIDFromString RtlGenerate8dot3Name
RtlGetAce RtlGetActiveActivationContext
RtlGetAppContainerNamedObjectPath RtlGetAppContainerParent
RtlGetAppContainerSidType RtlGetCallersAddress
RtlGetCompressionWorkSpaceSize RtlGetControlSecurityDescriptor
RtlGetCriticalSectionRecursionCount RtlGetCurrentDirectory_U
RtlGetCurrentPeb RtlGetCurrentProcessorNumber
RtlGetCurrentProcessorNumberEx RtlGetCurrentTransaction
RtlGetDaclSecurityDescriptor RtlGetDeviceFamilyInfoEnum
RtlGetElementGenericTable RtlGetElementGenericTableAvl
RtlGetEnabledExtendedFeatures RtlGetExePath
RtlGetExtendedContextLength RtlGetExtendedFeaturesMask
RtlGetFileMUIPath RtlGetFrame
RtlGetFullPathName_U RtlGetFullPathName_UEx
RtlGetFullPathName_UstrEx RtlGetGroupSecurityDescriptor
RtlGetIntegerAtom RtlGetInterruptTimePrecise
RtlGetLastNtStatus RtlGetLastWin32Error
RtlGetLengthWithoutLastFullDosOrNtPathElement RtlGetLengthWithoutTrailingPathSeperators
RtlGetLocaleFileMappingAddress RtlGetLongestNtPathLength
RtlGetNativeSystemInformation RtlGetNextEntryHashTable
RtlGetNtGlobalFlags RtlGetNtProductType
RtlGetNtVersionNumbers RtlGetOwnerSecurityDescriptor
RtlGetParentLocaleName RtlGetProcessHeaps
RtlGetProcessPreferredUILanguages RtlGetProductInfo
RtlGetSaclSecurityDescriptor RtlGetSearchPath
RtlGetSecurityDescriptorRMControl RtlGetSetBootStatusData
RtlGetSystemPreferredUILanguages RtlGetSystemTimePrecise
RtlGetThreadErrorMode RtlGetThreadLangIdByIndex
RtlGetThreadPreferredUILanguages RtlGetUILanguageInfo
RtlGetUnloadEventTrace RtlGetUnloadEventTraceEx
RtlGetUserInfoHeap RtlGetUserPreferredUILanguages
RtlGetVersion RtlHashUnicodeString
RtlHeapTrkInitialize RtlIdentifierAuthoritySid
RtlIdnToAscii RtlIdnToNameprepUnicode
RtlIdnToUnicode RtlImageDirectoryEntryToData
RtlImageNtHeader RtlImageNtHeaderEx
RtlImageRvaToSection RtlImageRvaToVa
RtlImpersonateSelf RtlImpersonateSelfEx
RtlInitAnsiString RtlInitAnsiStringEx
RtlInitBarrier RtlInitCodePageTable
RtlInitEnumerationHashTable RtlInitMemoryStream
RtlInitNlsTables RtlInitOutOfProcessMemoryStream
RtlInitString RtlInitStringEx
RtlInitStrongEnumerationHashTable RtlInitUnicodeString
RtlInitUnicodeStringEx RtlInitWeakEnumerationHashTable
RtlInitializeAtomPackage RtlInitializeBitMap
RtlInitializeConditionVariable RtlInitializeContext
RtlInitializeCriticalSection RtlInitializeCriticalSectionAndSpinCount
RtlInitializeCriticalSectionEx RtlInitializeExceptionChain
RtlInitializeExtendedContext RtlInitializeGenericTable
RtlInitializeGenericTableAvl RtlInitializeHandleTable
RtlInitializeNtUserPfn RtlInitializeRXact
RtlInitializeResource RtlInitializeSListHead
RtlInitializeSRWLock RtlInitializeSid
RtlInitializeSidEx RtlInsertElementGenericTable
RtlInsertElementGenericTableAvl RtlInsertElementGenericTableFull
RtlInsertElementGenericTableFullAvl RtlInsertEntryHashTable
RtlInt64ToUnicodeString RtlIntegerToChar
RtlIntegerToUnicodeString RtlInterlockedClearBitRun
RtlInterlockedCompareExchange64 RtlInterlockedFlushSList
RtlInterlockedPopEntrySList RtlInterlockedPushEntrySList
RtlInterlockedPushListSList RtlInterlockedPushListSListEx
RtlInterlockedSetBitRun RtlIoDecodeMemIoResource
RtlIoEncodeMemIoResource RtlIpv4AddressToStringA
RtlIpv4AddressToStringExA RtlIpv4AddressToStringExW
RtlIpv4AddressToStringW RtlIpv4StringToAddressA
RtlIpv4StringToAddressExA RtlIpv4StringToAddressExW
RtlIpv4StringToAddressW RtlIpv6AddressToStringA
RtlIpv6AddressToStringExA RtlIpv6AddressToStringExW
RtlIpv6AddressToStringW RtlIpv6StringToAddressA
RtlIpv6StringToAddressExA RtlIpv6StringToAddressExW
RtlIpv6StringToAddressW RtlIsActivationContextActive
RtlIsCapabilitySid RtlIsCriticalSectionLocked
RtlIsCriticalSectionLockedByThread RtlIsCurrentThreadAttachExempt
RtlIsDosDeviceName_U RtlIsGenericTableEmpty
RtlIsGenericTableEmptyAvl RtlIsMultiSessionSku
RtlIsNameInExpression RtlIsNameLegalDOS8Dot3
RtlIsNormalizedString RtlIsPackageSid
RtlIsParentOfChildAppContainer RtlIsProcessorFeaturePresent
RtlIsTextUnicode RtlIsThreadWithinLoaderCallout
RtlIsUntrustedObject RtlIsValidHandle
RtlIsValidIndexHandle RtlIsValidLocaleName
RtlIsValidProcessTrustLabelSid RtlKnownExceptionFilter
RtlLCIDToCultureName RtlLargeIntegerAdd
RtlLargeIntegerArithmeticShift RtlLargeIntegerDivide
RtlLargeIntegerNegate RtlLargeIntegerShiftLeft
RtlLargeIntegerShiftRight RtlLargeIntegerSubtract
RtlLargeIntegerToChar RtlLcidToLocaleName
RtlLeaveCriticalSection RtlLengthRequiredSid
RtlLengthSecurityDescriptor RtlLengthSid
RtlLengthSidAsUnicodeString RtlLoadString
RtlLocalTimeToSystemTime RtlLocaleNameToLcid
RtlLocateExtendedFeature RtlLocateLegacyContext
RtlLockBootStatusData RtlLockCurrentThread
RtlLockHeap RtlLockMemoryBlockLookaside
RtlLockMemoryStreamRegion RtlLockMemoryZone
RtlLockModuleSection RtlLogStackBackTrace
RtlLookupAtomInAtomTable RtlLookupElementGenericTable
RtlLookupElementGenericTableAvl RtlLookupElementGenericTableFull
RtlLookupElementGenericTableFullAvl RtlLookupEntryHashTable
RtlMakeSelfRelativeSD RtlMapGenericMask
RtlMapSecurityErrorToNtStatus RtlMoveMemory
RtlMultiAppendUnicodeStringBuffer RtlMultiByteToUnicodeN
RtlMultiByteToUnicodeSize RtlMultipleAllocateHeap
RtlMultipleFreeHeap RtlNewInstanceSecurityObject
RtlNewSecurityGrantedAccess RtlNewSecurityObject
RtlNewSecurityObjectEx RtlNewSecurityObjectWithMultipleInheritance
RtlNormalizeProcessParams RtlNormalizeString
RtlNtPathNameToDosPathName RtlNtStatusToDosError
RtlNtStatusToDosErrorNoTeb RtlNumberGenericTableElements
RtlNumberGenericTableElementsAvl RtlNumberOfClearBits
RtlNumberOfClearBitsInRange RtlNumberOfSetBits
RtlNumberOfSetBitsInRange RtlNumberOfSetBitsUlongPtr
RtlOemStringToUnicodeSize RtlOemStringToUnicodeString
RtlOemToUnicodeN RtlOpenCurrentUser
RtlOsDeploymentState RtlOwnerAcesPresent
RtlPcToFileHeader RtlPinAtomInAtomTable
RtlPopFrame RtlPrefixString
RtlPrefixUnicodeString RtlProcessFlsData
RtlProtectHeap RtlPublishWnfStateData
RtlPushFrame RtlQueryActivationContextApplicationSettings
RtlQueryAtomInAtomTable RtlQueryCriticalSectionOwner
RtlQueryDepthSList RtlQueryDynamicTimeZoneInformation
RtlQueryElevationFlags RtlQueryEnvironmentVariable
RtlQueryEnvironmentVariable_U RtlQueryHeapInformation
RtlQueryInformationAcl RtlQueryInformationActivationContext
RtlQueryInformationActiveActivationContext RtlQueryInterfaceMemoryStream
RtlQueryModuleInformation RtlQueryPackageClaims
RtlQueryPackageIdentity RtlQueryPackageIdentityEx
RtlQueryPerformanceCounter RtlQueryPerformanceFrequency
RtlQueryProcessBackTraceInformation RtlQueryProcessDebugInformation
RtlQueryProcessHeapInformation RtlQueryProcessLockInformation
RtlQueryProtectedPolicy RtlQueryRegistryValues
RtlQueryRegistryValuesEx RtlQueryResourcePolicy
RtlQuerySecurityObject RtlQueryTagHeap
RtlQueryThreadProfiling RtlQueryTimeZoneInformation
RtlQueryUnbiasedInterruptTime RtlQueryValidationRunlevel
RtlQueryWnfMetaNotification RtlQueryWnfStateData
RtlQueryWnfStateDataWithExplicitScope RtlQueueApcWow64Thread
RtlQueueWorkItem RtlRaiseException
RtlRaiseStatus RtlRandom
RtlRandomEx RtlRbInsertNodeEx
RtlRbRemoveNode RtlReAllocateHeap
RtlReadMemoryStream RtlReadOutOfProcessMemoryStream
RtlReadThreadProfilingData RtlRealPredecessor
RtlRealSuccessor RtlRegisterForWnfMetaNotification
RtlRegisterSecureMemoryCacheCallback RtlRegisterThreadWithCsrss
RtlRegisterWait RtlReleaseActivationContext
RtlReleaseMemoryStream RtlReleasePath
RtlReleasePebLock RtlReleasePrivilege
RtlReleaseRelativeName RtlReleaseResource
RtlReleaseSRWLockExclusive RtlReleaseSRWLockShared
RtlRemoteCall RtlRemoveEntryHashTable
RtlRemovePrivileges RtlRemoveVectoredContinueHandler
RtlRemoveVectoredExceptionHandler RtlReplaceSidInSd
RtlReportException RtlReportSilentProcessExit
RtlReportSqmEscalation RtlResetMemoryBlockLookaside
RtlResetMemoryZone RtlResetNtUserPfn
RtlResetRtlTranslations RtlRestoreLastWin32Error
RtlRetrieveNtUserPfn RtlRevertMemoryStream
RtlRunDecodeUnicodeString RtlRunEncodeUnicodeString
RtlRunOnceBeginInitialize RtlRunOnceComplete
RtlRunOnceExecuteOnce RtlRunOnceInitialize
RtlSecondsSince1970ToTime RtlSecondsSince1980ToTime
RtlSeekMemoryStream RtlSelfRelativeToAbsoluteSD
RtlSelfRelativeToAbsoluteSD2 RtlSendMsgToSm
RtlSetAllBits RtlSetAttributesSecurityDescriptor
RtlSetBit RtlSetBits
RtlSetControlSecurityDescriptor RtlSetCriticalSectionSpinCount
RtlSetCurrentDirectory_U RtlSetCurrentEnvironment
RtlSetCurrentTransaction RtlSetDaclSecurityDescriptor
RtlSetDynamicTimeZoneInformation RtlSetEnvironmentStrings
RtlSetEnvironmentVar RtlSetEnvironmentVariable
RtlSetExtendedFeaturesMask RtlSetGroupSecurityDescriptor
RtlSetHeapInformation RtlSetInformationAcl
RtlSetIoCompletionCallback RtlSetLastWin32Error
RtlSetLastWin32ErrorAndNtStatusFromNtStatus RtlSetMemoryStreamSize
RtlSetOwnerSecurityDescriptor RtlSetPortableOperatingSystem
RtlSetProcessDebugInformation RtlSetProcessIsCritical
RtlSetProcessPreferredUILanguages RtlSetProtectedPolicy
RtlSetSaclSecurityDescriptor RtlSetSearchPathMode
RtlSetSecurityDescriptorRMControl RtlSetSecurityObject
RtlSetSecurityObjectEx RtlSetThreadErrorMode
RtlSetThreadIsCritical RtlSetThreadPoolStartFunc
RtlSetThreadPreferredUILanguages RtlSetThreadSubProcessTag
RtlSetTimeZoneInformation RtlSetTimer
RtlSetUnhandledExceptionFilter RtlSetUserFlagsHeap
RtlSetUserValueHeap RtlSidDominates
RtlSidDominatesForTrust RtlSidEqualLevel
RtlSidHashInitialize RtlSidHashLookup
RtlSidIsHigherLevel RtlSizeHeap
RtlSleepConditionVariableCS RtlSleepConditionVariableSRW
RtlSplay RtlStartRXact
RtlStatMemoryStream RtlStringFromGUID
RtlStringFromGUIDEx RtlStronglyEnumerateEntryHashTable
RtlSubAuthorityCountSid RtlSubAuthoritySid
RtlSubscribeWnfStateChangeNotification RtlSubtreePredecessor
RtlSubtreeSuccessor RtlSwitchedVVI
RtlSystemTimeToLocalTime RtlTestAndPublishWnfStateData
RtlTestBit RtlTestProtectedAccess
RtlTimeFieldsToTime RtlTimeToElapsedTimeFields
RtlTimeToSecondsSince1970 RtlTimeToSecondsSince1980
RtlTimeToTimeFields RtlTraceDatabaseAdd
RtlTraceDatabaseCreate RtlTraceDatabaseDestroy
RtlTraceDatabaseEnumerate RtlTraceDatabaseFind
RtlTraceDatabaseLock RtlTraceDatabaseUnlock
RtlTraceDatabaseValidate RtlTryAcquirePebLock
RtlTryAcquireSRWLockExclusive RtlTryAcquireSRWLockShared
RtlTryConvertSRWLockSharedToExclusiveOrRelease RtlTryEnterCriticalSection
RtlUTF8ToUnicodeN RtlUlongByteSwap
RtlUlonglongByteSwap RtlUnhandledExceptionFilter
RtlUnhandledExceptionFilter2 RtlUnicodeStringToAnsiSize
RtlUnicodeStringToAnsiString RtlUnicodeStringToCountedOemString
RtlUnicodeStringToInteger RtlUnicodeStringToOemSize
RtlUnicodeStringToOemString RtlUnicodeToCustomCPN
RtlUnicodeToMultiByteN RtlUnicodeToMultiByteSize
RtlUnicodeToOemN RtlUnicodeToUTF8N
RtlUniform RtlUnlockBootStatusData
RtlUnlockCurrentThread RtlUnlockHeap
RtlUnlockMemoryBlockLookaside RtlUnlockMemoryStreamRegion
RtlUnlockMemoryZone RtlUnlockModuleSection
RtlUnsubscribeWnfNotificationWaitForCompletion RtlUnsubscribeWnfNotificationWithCompletionCallback
RtlUnsubscribeWnfStateChangeNotification RtlUnwind
RtlUpcaseUnicodeChar RtlUpcaseUnicodeString
RtlUpcaseUnicodeStringToAnsiString RtlUpcaseUnicodeStringToCountedOemString
RtlUpcaseUnicodeStringToOemString RtlUpcaseUnicodeToCustomCPN
RtlUpcaseUnicodeToMultiByteN RtlUpcaseUnicodeToOemN
RtlUpdateClonedCriticalSection RtlUpdateClonedSRWLock
RtlUpdateTimer RtlUpperChar
RtlUpperString RtlUserThreadStart
RtlUshortByteSwap RtlValidAcl
RtlValidProcessProtection RtlValidRelativeSecurityDescriptor
RtlValidSecurityDescriptor RtlValidSid
RtlValidateHeap RtlValidateProcessHeaps
RtlValidateUnicodeString RtlVerifyVersionInfo
RtlWaitForWnfMetaNotification RtlWaitOnAddress
RtlWakeAddressAll RtlWakeAddressAllNoFence
RtlWakeAddressSingle RtlWakeAddressSingleNoFence
RtlWakeAllConditionVariable RtlWakeConditionVariable
RtlWalkFrameChain RtlWalkHeap
RtlWeaklyEnumerateEntryHashTable RtlWerpReportException
RtlWnfCompareChangeStamp RtlWnfDllUnloadCallback
RtlWow64CallFunction64 RtlWow64EnableFsRedirection
RtlWow64EnableFsRedirectionEx RtlWriteMemoryStream
RtlWriteRegistryValue RtlZeroHeap
RtlZeroMemory RtlZombifyActivationContext
RtlpApplyLengthFunction RtlpCheckDynamicTimeZoneInformation
RtlpCleanupRegistryKeys RtlpConvertAbsoluteToRelativeSecurityAttribute
RtlpConvertCultureNamesToLCIDs RtlpConvertLCIDsToCultureNames
RtlpConvertRelativeToAbsoluteSecurityAttribute RtlpCreateProcessRegistryInfo
RtlpEnsureBufferSize RtlpFreezeTimeBias
RtlpGetDeviceFamilyInfoEnum RtlpGetLCIDFromLangInfoNode
RtlpGetNameFromLangInfoNode RtlpGetSystemDefaultUILanguage
RtlpGetUserOrMachineUILanguage4NLS RtlpInitializeLangRegistryInfo
RtlpIsQualifiedLanguage RtlpLoadMachineUIByPolicy
RtlpLoadUserUIByPolicy RtlpMergeSecurityAttributeInformation
RtlpMuiFreeLangRegistryInfo RtlpMuiRegCreateRegistryInfo
RtlpMuiRegFreeRegistryInfo RtlpMuiRegLoadRegistryInfo
RtlpNotOwnerCriticalSection RtlpNtCreateKey
RtlpNtEnumerateSubKey RtlpNtMakeTemporaryKey
RtlpNtOpenKey RtlpNtQueryValueKey
RtlpNtSetValueKey RtlpQueryDefaultUILanguage
RtlpRefreshCachedUILanguage RtlpSetInstallLanguage
RtlpSetPreferredUILanguages RtlpSetUserPreferredUILanguages
RtlpUnWaitCriticalSection RtlpVerifyAndCommitUILanguageSettings
RtlpWaitForCriticalSection RtlxAnsiStringToUnicodeSize
RtlxOemStringToUnicodeSize RtlxUnicodeStringToAnsiSize
RtlxUnicodeStringToOemSize SbExecuteProcedure
SbSelectProcedure ShipAssert
ShipAssertGetBufferInfo ShipAssertMsgA
ShipAssertMsgW TpAllocAlpcCompletion
TpAllocAlpcCompletionEx TpAllocCleanupGroup
TpAllocIoCompletion TpAllocJobNotification
TpAllocPool TpAllocTimer
TpAllocWait TpAllocWork
TpAlpcRegisterCompletionList TpAlpcUnregisterCompletionList
TpCallbackDetectedUnrecoverableError TpCallbackIndependent
TpCallbackLeaveCriticalSectionOnCompletion TpCallbackMayRunLong
TpCallbackReleaseMutexOnCompletion TpCallbackReleaseSemaphoreOnCompletion
TpCallbackSendAlpcMessageOnCompletion TpCallbackSendPendingAlpcMessage
TpCallbackSetEventOnCompletion TpCallbackUnloadDllOnCompletion
TpCancelAsyncIoOperation TpCaptureCaller
TpCheckTerminateWorker TpDbgDumpHeapUsage
TpDbgSetLogRoutine TpDisablePoolCallbackChecks
TpDisassociateCallback TpIsTimerSet
TpPostWork TpQueryPoolStackInformation
TpReleaseAlpcCompletion TpReleaseCleanupGroup
TpReleaseCleanupGroupMembers TpReleaseIoCompletion
TpReleaseJobNotification TpReleasePool
TpReleaseTimer TpReleaseWait
TpReleaseWork TpSetDefaultPoolMaxThreads
TpSetDefaultPoolStackInformation TpSetPoolMaxThreads
TpSetPoolMaxThreadsSoftLimit TpSetPoolMinThreads
TpSetPoolStackInformation TpSetPoolThreadBasePriority
TpSetPoolWorkerThreadIdleTimeout TpSetTimer
TpSetTimerEx TpSetWait
TpSetWaitEx TpSimpleTryPost
TpStartAsyncIoOperation TpTimerOutstandingCallbackCount
TpTrimPools TpWaitForAlpcCompletion
TpWaitForIoCompletion TpWaitForJobNotification
TpWaitForTimer TpWaitForWait
TpWaitForWork VerSetConditionMask
WerReportSQMEvent WinSqmAddToAverageDWORD
WinSqmAddToStream WinSqmAddToStreamEx
WinSqmCheckEscalationAddToStreamEx WinSqmCheckEscalationSetDWORD
WinSqmCheckEscalationSetDWORD64 WinSqmCheckEscalationSetString
WinSqmCommonDatapointDelete WinSqmCommonDatapointSetDWORD
WinSqmCommonDatapointSetDWORD64 WinSqmCommonDatapointSetStreamEx
WinSqmCommonDatapointSetString WinSqmEndSession
WinSqmEventEnabled WinSqmEventWrite
WinSqmGetEscalationRuleStatus WinSqmGetInstrumentationProperty
WinSqmIncrementDWORD WinSqmIsOptedIn
WinSqmIsOptedInEx WinSqmIsSessionDisabled
WinSqmSetDWORD WinSqmSetDWORD64
WinSqmSetEscalationInfo WinSqmSetIfMaxDWORD
WinSqmSetIfMinDWORD WinSqmSetString
WinSqmStartSession WinSqmStartSessionForPartner
WinSqmStartSqmOptinListener ZwAcceptConnectPort
ZwAccessCheck ZwAccessCheckAndAuditAlarm
ZwAccessCheckByType ZwAccessCheckByTypeAndAuditAlarm
ZwAccessCheckByTypeResultList ZwAccessCheckByTypeResultListAndAuditAlarm
ZwAccessCheckByTypeResultListAndAuditAlarmByHandle ZwAddAtom
ZwAddAtomEx ZwAddBootEntry
ZwAddDriverEntry ZwAdjustGroupsToken
ZwAdjustPrivilegesToken ZwAdjustTokenClaimsAndDeviceGroups
ZwAlertResumeThread ZwAlertThread
ZwAlertThreadByThreadId ZwAllocateLocallyUniqueId
ZwAllocateReserveObject ZwAllocateUserPhysicalPages
ZwAllocateUuids ZwAllocateVirtualMemory
ZwAlpcAcceptConnectPort ZwAlpcCancelMessage
ZwAlpcConnectPort ZwAlpcConnectPortEx
ZwAlpcCreatePort ZwAlpcCreatePortSection
ZwAlpcCreateResourceReserve ZwAlpcCreateSectionView
ZwAlpcCreateSecurityContext ZwAlpcDeletePortSection
ZwAlpcDeleteResourceReserve ZwAlpcDeleteSectionView
ZwAlpcDeleteSecurityContext ZwAlpcDisconnectPort
ZwAlpcImpersonateClientContainerOfPort ZwAlpcImpersonateClientOfPort
ZwAlpcOpenSenderProcess ZwAlpcOpenSenderThread
ZwAlpcQueryInformation ZwAlpcQueryInformationMessage
ZwAlpcRevokeSecurityContext ZwAlpcSendWaitReceivePort
ZwAlpcSetInformation ZwApphelpCacheControl
ZwAreMappedFilesTheSame ZwAssignProcessToJobObject
ZwAssignProcessToSiloObject ZwAssociateWaitCompletionPacket
ZwCallbackReturn ZwCancelIoFile
ZwCancelIoFileEx ZwCancelSynchronousIoFile
ZwCancelTimer ZwCancelTimer2
ZwCancelWaitCompletionPacket ZwClearEvent
ZwClose ZwCloseObjectAuditAlarm
ZwCommitComplete ZwCommitEnlistment
ZwCommitTransaction ZwCompactKeys
ZwCompareObjects ZwCompareTokens
ZwCompleteConnectPort ZwCompressKey
ZwConnectPort ZwContinue
ZwCreateDebugObject ZwCreateDirectoryObject
ZwCreateDirectoryObjectEx ZwCreateEnlistment
ZwCreateEvent ZwCreateEventPair
ZwCreateFile ZwCreateIRTimer
ZwCreateIoCompletion ZwCreateJobObject
ZwCreateJobSet ZwCreateKey
ZwCreateKeyTransacted ZwCreateKeyedEvent
ZwCreateLowBoxToken ZwCreateMailslotFile
ZwCreateMutant ZwCreateNamedPipeFile
ZwCreatePagingFile ZwCreatePartition
ZwCreatePort ZwCreatePrivateNamespace
ZwCreateProcess ZwCreateProcessEx
ZwCreateProfile ZwCreateProfileEx
ZwCreateResourceManager ZwCreateSection
ZwCreateSemaphore ZwCreateSiloObject
ZwCreateSymbolicLinkObject ZwCreateThread
ZwCreateThreadEx ZwCreateTimer
ZwCreateTimer2 ZwCreateToken
ZwCreateTokenEx ZwCreateTransaction
ZwCreateTransactionManager ZwCreateUserProcess
ZwCreateWaitCompletionPacket ZwCreateWaitablePort
ZwCreateWnfStateName ZwCreateWorkerFactory
ZwDebugActiveProcess ZwDebugContinue
ZwDelayExecution ZwDeleteAtom
ZwDeleteBootEntry ZwDeleteDriverEntry
ZwDeleteFile ZwDeleteKey
ZwDeleteObjectAuditAlarm ZwDeletePrivateNamespace
ZwDeleteValueKey ZwDeleteWnfStateData
ZwDeleteWnfStateName ZwDeviceIoControlFile
ZwDisableLastKnownGood ZwDisplayString
ZwDrawText ZwDuplicateObject
ZwDuplicateToken ZwEnableLastKnownGood
ZwEnumerateBootEntries ZwEnumerateDriverEntries
ZwEnumerateKey ZwEnumerateSystemEnvironmentValuesEx
ZwEnumerateTransactionObject ZwEnumerateValueKey
ZwExtendSection ZwFilterBootOption
ZwFilterToken ZwFilterTokenEx
ZwFindAtom ZwFlushBuffersFile
ZwFlushBuffersFileEx ZwFlushInstallUILanguage
ZwFlushInstructionCache ZwFlushKey
ZwFlushProcessWriteBuffers ZwFlushVirtualMemory
ZwFlushWriteBuffer ZwFreeUserPhysicalPages
ZwFreeVirtualMemory ZwFreezeRegistry
ZwFreezeTransactions ZwFsControlFile
ZwGetCachedSigningLevel ZwGetCompleteWnfStateSubscription
ZwGetContextThread ZwGetCurrentProcessorNumber
ZwGetCurrentProcessorNumberEx ZwGetDevicePowerState
ZwGetMUIRegistryInfo ZwGetNextProcess
ZwGetNextThread ZwGetNlsSectionPtr
ZwGetNotificationResourceManager ZwGetWriteWatch
ZwImpersonateAnonymousToken ZwImpersonateClientOfPort
ZwImpersonateThread ZwInitializeNlsFiles
ZwInitializeRegistry ZwInitiatePowerAction
ZwIsProcessInJob ZwIsSystemResumeAutomatic
ZwIsUILanguageComitted ZwListenPort
ZwLoadDriver ZwLoadKey
ZwLoadKey2 ZwLoadKeyEx
ZwLockFile ZwLockProductActivationKeys
ZwLockRegistryKey ZwLockVirtualMemory
ZwMakePermanentObject ZwMakeTemporaryObject
ZwManagePartition ZwMapCMFModule
ZwMapUserPhysicalPages ZwMapUserPhysicalPagesScatter
ZwMapViewOfSection ZwModifyBootEntry
ZwModifyDriverEntry ZwNotifyChangeDirectoryFile
ZwNotifyChangeKey ZwNotifyChangeMultipleKeys
ZwNotifyChangeSession ZwOpenDirectoryObject
ZwOpenEnlistment ZwOpenEvent
ZwOpenEventPair ZwOpenFile
ZwOpenIoCompletion ZwOpenJobObject
ZwOpenKey ZwOpenKeyEx
ZwOpenKeyTransacted ZwOpenKeyTransactedEx
ZwOpenKeyedEvent ZwOpenMutant
ZwOpenObjectAuditAlarm ZwOpenPartition
ZwOpenPrivateNamespace ZwOpenProcess
ZwOpenProcessToken ZwOpenProcessTokenEx
ZwOpenResourceManager ZwOpenSection
ZwOpenSemaphore ZwOpenSession
ZwOpenSiloObject ZwOpenSymbolicLinkObject
ZwOpenThread ZwOpenThreadToken
ZwOpenThreadTokenEx ZwOpenTimer
ZwOpenTransaction ZwOpenTransactionManager
ZwPlugPlayControl ZwPowerInformation
ZwPrePrepareComplete ZwPrePrepareEnlistment
ZwPrepareComplete ZwPrepareEnlistment
ZwPrivilegeCheck ZwPrivilegeObjectAuditAlarm
ZwPrivilegedServiceAuditAlarm ZwPropagationComplete
ZwPropagationFailed ZwProtectVirtualMemory
ZwPulseEvent ZwQueryAttributesFile
ZwQueryBootEntryOrder ZwQueryBootOptions
ZwQueryDebugFilterState ZwQueryDefaultLocale
ZwQueryDefaultUILanguage ZwQueryDirectoryFile
ZwQueryDirectoryObject ZwQueryDriverEntryOrder
ZwQueryEaFile ZwQueryEvent
ZwQueryFullAttributesFile ZwQueryInformationAtom
ZwQueryInformationEnlistment ZwQueryInformationFile
ZwQueryInformationJobObject ZwQueryInformationPort
ZwQueryInformationProcess ZwQueryInformationResourceManager
ZwQueryInformationSiloObject ZwQueryInformationThread
ZwQueryInformationToken ZwQueryInformationTransaction
ZwQueryInformationTransactionManager ZwQueryInformationWorkerFactory
ZwQueryInstallUILanguage ZwQueryIntervalProfile
ZwQueryIoCompletion ZwQueryKey
ZwQueryLicenseValue ZwQueryMultipleValueKey
ZwQueryMutant ZwQueryObject
ZwQueryOpenSubKeys ZwQueryOpenSubKeysEx
ZwQueryPerformanceCounter ZwQueryPortInformationProcess
ZwQueryQuotaInformationFile ZwQuerySection
ZwQuerySecurityAttributesToken ZwQuerySecurityObject
ZwQuerySemaphore ZwQuerySymbolicLinkObject
ZwQuerySystemEnvironmentValue ZwQuerySystemEnvironmentValueEx
ZwQuerySystemInformation ZwQuerySystemInformationEx
ZwQuerySystemTime ZwQueryTimer
ZwQueryTimerResolution ZwQueryValueKey
ZwQueryVirtualMemory ZwQueryVolumeInformationFile
ZwQueryWnfStateData ZwQueryWnfStateNameInformation
ZwQueueApcThread ZwQueueApcThreadEx
ZwRaiseException ZwRaiseHardError
ZwReadFile ZwReadFileScatter
ZwReadOnlyEnlistment ZwReadRequestData
ZwReadVirtualMemory ZwRecoverEnlistment
ZwRecoverResourceManager ZwRecoverTransactionManager
ZwRegisterProtocolAddressInformation ZwRegisterThreadTerminatePort
ZwReleaseKeyedEvent ZwReleaseMutant
ZwReleaseSemaphore ZwReleaseWorkerFactoryWorker
ZwRemoveIoCompletion ZwRemoveIoCompletionEx
ZwRemoveProcessDebug ZwRenameKey
ZwRenameTransactionManager ZwReplaceKey
ZwReplacePartitionUnit ZwReplyPort
ZwReplyWaitReceivePort ZwReplyWaitReceivePortEx
ZwReplyWaitReplyPort ZwRequestPort
ZwRequestWaitReplyPort ZwResetEvent
ZwResetWriteWatch ZwRestoreKey
ZwResumeProcess ZwResumeThread
ZwRevertContainerImpersonation ZwRollbackComplete
ZwRollbackEnlistment ZwRollbackTransaction
ZwRollforwardTransactionManager ZwSaveKey
ZwSaveKeyEx ZwSaveMergedKeys
ZwSecureConnectPort ZwSerializeBoot
ZwSetBootEntryOrder ZwSetBootOptions
ZwSetCachedSigningLevel ZwSetContextThread
ZwSetDebugFilterState ZwSetDefaultHardErrorPort
ZwSetDefaultLocale ZwSetDefaultUILanguage
ZwSetDriverEntryOrder ZwSetEaFile
ZwSetEvent ZwSetEventBoostPriority
ZwSetHighEventPair ZwSetHighWaitLowEventPair
ZwSetIRTimer ZwSetInformationDebugObject
ZwSetInformationEnlistment ZwSetInformationFile
ZwSetInformationJobObject ZwSetInformationKey
ZwSetInformationObject ZwSetInformationProcess
ZwSetInformationResourceManager ZwSetInformationSiloObject
ZwSetInformationSymbolicLink ZwSetInformationThread
ZwSetInformationToken ZwSetInformationTransaction
ZwSetInformationTransactionManager ZwSetInformationVirtualMemory
ZwSetInformationWorkerFactory ZwSetIntervalProfile
ZwSetIoCompletion ZwSetIoCompletionEx
ZwSetLdtEntries ZwSetLowEventPair
ZwSetLowWaitHighEventPair ZwSetQuotaInformationFile
ZwSetSecurityObject ZwSetSystemEnvironmentValue
ZwSetSystemEnvironmentValueEx ZwSetSystemInformation
ZwSetSystemPowerState ZwSetSystemTime
ZwSetThreadExecutionState ZwSetTimer
ZwSetTimer2 ZwSetTimerEx
ZwSetTimerResolution ZwSetUuidSeed
ZwSetValueKey ZwSetVolumeInformationFile
ZwSetWnfProcessNotificationEvent ZwShutdownSystem
ZwShutdownWorkerFactory ZwSignalAndWaitForSingleObject
ZwSinglePhaseReject ZwStartProfile
ZwStopProfile ZwSubscribeWnfStateChange
ZwSuspendProcess ZwSuspendThread
ZwSystemDebugControl ZwTerminateJobObject
ZwTerminateProcess ZwTerminateSiloObject
ZwTerminateThread ZwTestAlert
ZwThawRegistry ZwThawTransactions
ZwTraceControl ZwTraceEvent
ZwTranslateFilePath ZwUmsThreadYield
ZwUnloadDriver ZwUnloadKey
ZwUnloadKey2 ZwUnloadKeyEx
ZwUnlockFile ZwUnlockVirtualMemory
ZwUnmapViewOfSection ZwUnmapViewOfSectionEx
ZwUnsubscribeWnfStateChange ZwUpdateWnfStateData
ZwVdmControl ZwWaitForAlertByThreadId
ZwWaitForDebugEvent ZwWaitForKeyedEvent
ZwWaitForMultipleObjects ZwWaitForMultipleObjects32
ZwWaitForSingleObject ZwWaitForWorkViaWorkerFactory
ZwWaitHighEventPair ZwWaitLowEventPair
ZwWorkerFactoryWorkerReady ZwWriteFile
ZwWriteFileGather ZwWriteRequestData
ZwWriteVirtualMemory ZwYieldExecution
_CIcos _CIlog
_CIpow _CIsin
_CIsqrt __isascii
__iscsym __iscsymf
__toascii _alldiv
_alldvrm _allmul
_alloca_probe _alloca_probe_16
_alloca_probe_8 _allrem
_allshl _allshr
_atoi64 _aulldiv
_aulldvrm _aullrem
_aullshr _chkstk
_errno _except_handler4_common
_fltused _ftol
_ftol2 _ftol2_sse
_i64toa _i64toa_s
_i64tow _i64tow_s
_itoa _itoa_s
_itow _itow_s
_lfind _local_unwind4
_ltoa _ltoa_s
_ltow _ltow_s
_makepath_s _memccpy
_memicmp _snprintf
_snprintf_s _snscanf_s
_snwprintf _snwprintf_s
_snwscanf_s _splitpath
_splitpath_s _strcmpi
_stricmp _strlwr
_strlwr_s _strnicmp
_strnset_s _strset_s
_strupr _strupr_s
_swprintf _ui64toa
_ui64toa_s _ui64tow
_ui64tow_s _ultoa
_ultoa_s _ultow
_ultow_s _vscwprintf
_vsnprintf _vsnprintf_s
_vsnwprintf _vsnwprintf_s
_vswprintf _wcsicmp
_wcslwr _wcslwr_s
_wcsnicmp _wcsnset_s
_wcsset_s _wcstoi64
_wcstoui64 _wcsupr
_wcsupr_s _wmakepath_s
_wsplitpath_s _wtoi
_wtoi64 _wtol
abs atan
atan2 atoi
atol bsearch
ceil cos
fabs floor
isalnum isalpha
iscntrl isdigit
isgraph islower
isprint ispunct
isspace isupper
iswalnum iswalpha
iswascii iswctype
iswdigit iswgraph
iswlower iswprint
iswspace iswxdigit
isxdigit labs
log mbstowcs
memchr memcmp
memcpy memcpy_s
memmove memmove_s
memset pow
qsort qsort_s
sin sprintf
sprintf_s sqrt
sscanf sscanf_s
strcat strcat_s
strchr strcmp
strcpy strcpy_s
strcspn strlen
strncat strncat_s
strncmp strncpy
strncpy_s strnlen
strpbrk strrchr
strspn strstr
strtok_s strtol
strtoul swprintf
swprintf_s swscanf_s
tan tolower
toupper towlower
towupper vDbgPrintEx
vDbgPrintExWithPrefix vsprintf
vsprintf_s vswprintf_s
wcscat wcscat_s
wcschr wcscmp
wcscpy wcscpy_s
wcscspn wcslen
wcsncat wcsncat_s
wcsncmp wcsncpy
wcsncpy_s wcsnlen
wcspbrk wcsrchr
wcsspn wcsstr
wcstok_s wcstol
wcstombs wcstoul

 

Imported Functions List

The following functions are imported by this dll:

No imported functions in this file.