| Windows 10 DLL File Information - ntdll.dll |
The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 10, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.
General Information
| File Description: | NT Layer DLL |
| File Version: | 10.0.10130.0 (fbl_impressive.150522-2224) |
| Company: | Microsoft Corporation |
| Product Name: | Microsoft® Windows® Operating System |
| DLL popularity | Very High - 1378 other DLL files in system32 directory are statically linked to this file. |
| File Size: | 1,498 KB |
| Total Number of Exported Functions: | 2,231 |
| Total Number of Exported Functions With Names: | 2,230 |
Section Headers
| Name | Virtual Address | Raw Data Size | % of File | Characteristics | Section Contains... |
|---|---|---|---|---|---|
| .text | 0x00001000 | 1,065,472 Bytes | 69.5% | Read, Execute | Code |
| RT | 0x00106000 | 512 Bytes | 0.0% | Read, Execute | Code |
| .data | 0x00107000 | 2,560 Bytes | 0.2% | Write, Read | Initialized Data |
| .mrdata | 0x0010b000 | 8,704 Bytes | 0.6% | Write, Read | Initialized Data |
| .rsrc | 0x0010e000 | 415,232 Bytes | 27.1% | Read | Initialized Data |
| .reloc | 0x00174000 | 18,432 Bytes | 1.2% | Read, Discardable | Initialized Data |
Static Linking
No static linking in this file.
General Resources Information
| Resource Type | Number of Items | Total Size | % of File |
|---|---|---|---|
| Icons | 0 | 0 Bytes | 0.0% |
| Animated Icons | 0 | 0 Bytes | 0.0% |
| Cursors | 0 | 0 Bytes | 0.0% |
| Animated Cursors | 0 | 0 Bytes | 0.0% |
| Bitmaps | 0 | 0 Bytes | 0.0% |
| AVI Files | 0 | 0 Bytes | 0.0% |
| Dialog-Boxes | 0 | 0 Bytes | 0.0% |
| HTML Related Files | 0 | 0 Bytes | 0.0% |
| Menus | 0 | 0 Bytes | 0.0% |
| Strings | 0 | 0 Bytes | 0.0% |
| Type Libraries | 0 | 0 Bytes | 0.0% |
| Manifest | 0 | 0 Bytes | 0.0% |
| All Others | 3 | 414,768 Bytes | 27.0% |
| Total | 3 | 414,768 Bytes | 27.0% |
Icons in this file
No icons found in this file
Cursors in this file
No cursors found in this file
Dialog-boxes list (up to 1000 dialogs)
No dialog resources in this file.
String resources in this dll (up to 1000 strings)
No string resources in this file.
COM Classes/Interfaces
There is no type library in this file with COM classes/interfaces information
Exported Functions List
The following functions are exported by this dll:| A_SHAFinal | A_SHAInit |
| A_SHAUpdate | AlpcAdjustCompletionListConcurrencyCount |
| AlpcFreeCompletionListMessage | AlpcGetCompletionListLastMessageInformation |
| AlpcGetCompletionListMessageAttributes | AlpcGetHeaderSize |
| AlpcGetMessageAttribute | AlpcGetMessageFromCompletionList |
| AlpcGetOutstandingCompletionListMessageCount | AlpcInitializeMessageAttribute |
| AlpcMaxAllowedMessageLength | AlpcRegisterCompletionList |
| AlpcRegisterCompletionListWorkerThread | AlpcRundownCompletionList |
| AlpcUnregisterCompletionList | AlpcUnregisterCompletionListWorkerThread |
| ApiSetQueryApiSetPresence | CsrAllocateCaptureBuffer |
| CsrAllocateMessagePointer | CsrCaptureMessageBuffer |
| CsrCaptureMessageMultiUnicodeStringsInPlace | CsrCaptureMessageString |
| CsrCaptureTimeout | CsrClientCallServer |
| CsrClientConnectToServer | CsrFreeCaptureBuffer |
| CsrGetProcessId | CsrIdentifyAlertableThread |
| CsrSetPriorityClass | CsrVerifyRegion |
| DbgBreakPoint | DbgPrint |
| DbgPrintEx | DbgPrintReturnControlC |
| DbgPrompt | DbgQueryDebugFilterState |
| DbgSetDebugFilterState | DbgUiConnectToDbg |
| DbgUiContinue | DbgUiConvertStateChangeStructure |
| DbgUiConvertStateChangeStructureEx | DbgUiDebugActiveProcess |
| DbgUiGetThreadDebugObject | DbgUiIssueRemoteBreakin |
| DbgUiRemoteBreakin | DbgUiSetThreadDebugObject |
| DbgUiStopDebugging | DbgUiWaitStateChange |
| DbgUserBreakPoint | EtwCreateTraceInstanceId |
| EtwDeliverDataBlock | EtwEnumerateProcessRegGuids |
| EtwEventActivityIdControl | EtwEventEnabled |
| EtwEventProviderEnabled | EtwEventRegister |
| EtwEventSetInformation | EtwEventUnregister |
| EtwEventWrite | EtwEventWriteEndScenario |
| EtwEventWriteEx | EtwEventWriteFull |
| EtwEventWriteNoRegistration | EtwEventWriteStartScenario |
| EtwEventWriteString | EtwEventWriteTransfer |
| EtwGetTraceEnableFlags | EtwGetTraceEnableLevel |
| EtwGetTraceLoggerHandle | EtwLogTraceEvent |
| EtwNotificationRegister | EtwNotificationUnregister |
| EtwProcessPrivateLoggerRequest | EtwRegisterSecurityProvider |
| EtwRegisterTraceGuidsA | EtwRegisterTraceGuidsW |
| EtwReplyNotification | EtwSendNotification |
| EtwSetMark | EtwTraceEventInstance |
| EtwTraceMessage | EtwTraceMessageVa |
| EtwUnregisterTraceGuids | EtwWriteUMSecurityEvent |
| EtwpCreateEtwThread | EtwpGetCpuSpeed |
| EvtIntReportAuthzEventAndSourceAsync | EvtIntReportEventAndSourceAsync |
| ExpInterlockedPopEntrySListEnd | ExpInterlockedPopEntrySListFault |
| ExpInterlockedPopEntrySListResume | KiFastSystemCall |
| KiFastSystemCallRet | KiIntSystemCall |
| KiRaiseUserExceptionDispatcher | KiUserApcDispatcher |
| KiUserCallbackDispatcher | KiUserExceptionDispatcher |
| LdrAccessResource | LdrAddDllDirectory |
| LdrAddLoadAsDataTable | LdrAddRefDll |
| LdrAppxHandleIntegrityFailure | LdrDisableThreadCalloutsForDll |
| LdrEnumResources | LdrEnumerateLoadedModules |
| LdrFastFailInLoaderCallout | LdrFindEntryForAddress |
| LdrFindResourceDirectory_U | LdrFindResourceEx_U |
| LdrFindResource_U | LdrFlushAlternateResourceModules |
| LdrGetDllDirectory | LdrGetDllFullName |
| LdrGetDllHandle | LdrGetDllHandleByMapping |
| LdrGetDllHandleByName | LdrGetDllHandleEx |
| LdrGetDllPath | LdrGetFailureData |
| LdrGetFileNameFromLoadAsDataTable | LdrGetProcedureAddress |
| LdrGetProcedureAddressEx | LdrGetProcedureAddressForCaller |
| LdrInitShimEngineDynamic | LdrInitializeThunk |
| LdrLoadAlternateResourceModule | LdrLoadAlternateResourceModuleEx |
| LdrLoadDll | LdrLockLoaderLock |
| LdrOpenImageFileOptionsKey | LdrProcessRelocationBlock |
| LdrProcessRelocationBlockEx | LdrQueryImageFileExecutionOptions |
| LdrQueryImageFileExecutionOptionsEx | LdrQueryImageFileKeyOption |
| LdrQueryModuleServiceTags | LdrQueryOptionalDelayLoadedAPI |
| LdrQueryProcessModuleInformation | LdrRegisterDllNotification |
| LdrRemoveDllDirectory | LdrRemoveLoadAsDataTable |
| LdrResFindResource | LdrResFindResourceDirectory |
| LdrResGetRCConfig | LdrResRelease |
| LdrResSearchResource | LdrResolveDelayLoadedAPI |
| LdrResolveDelayLoadsFromDll | LdrRscIsTypeExist |
| LdrSetAppCompatDllRedirectionCallback | LdrSetDefaultDllDirectories |
| LdrSetDllDirectory | LdrSetDllManifestProber |
| LdrSetImplicitPathOptions | LdrSetMUICacheType |
| LdrShutdownProcess | LdrShutdownThread |
| LdrStandardizeSystemPath | LdrSystemDllInitBlock |
| LdrUnloadAlternateResourceModule | LdrUnloadAlternateResourceModuleEx |
| LdrUnloadDll | LdrUnlockLoaderLock |
| LdrUnregisterDllNotification | LdrVerifyImageMatchesChecksum |
| LdrVerifyImageMatchesChecksumEx | LdrpResGetMappingSize |
| LdrpResGetResourceDirectory | MD4Final |
| MD4Init | MD4Update |
| MD5Final | MD5Init |
| MD5Update | NlsAnsiCodePage |
| NlsMbCodePageTag | NlsMbOemCodePageTag |
| NtAcceptConnectPort | NtAccessCheck |
| NtAccessCheckAndAuditAlarm | NtAccessCheckByType |
| NtAccessCheckByTypeAndAuditAlarm | NtAccessCheckByTypeResultList |
| NtAccessCheckByTypeResultListAndAuditAlarm | NtAccessCheckByTypeResultListAndAuditAlarmByHandle |
| NtAddAtom | NtAddAtomEx |
| NtAddBootEntry | NtAddDriverEntry |
| NtAdjustGroupsToken | NtAdjustPrivilegesToken |
| NtAdjustTokenClaimsAndDeviceGroups | NtAlertResumeThread |
| NtAlertThread | NtAlertThreadByThreadId |
| NtAllocateLocallyUniqueId | NtAllocateReserveObject |
| NtAllocateUserPhysicalPages | NtAllocateUuids |
| NtAllocateVirtualMemory | NtAlpcAcceptConnectPort |
| NtAlpcCancelMessage | NtAlpcConnectPort |
| NtAlpcConnectPortEx | NtAlpcCreatePort |
| NtAlpcCreatePortSection | NtAlpcCreateResourceReserve |
| NtAlpcCreateSectionView | NtAlpcCreateSecurityContext |
| NtAlpcDeletePortSection | NtAlpcDeleteResourceReserve |
| NtAlpcDeleteSectionView | NtAlpcDeleteSecurityContext |
| NtAlpcDisconnectPort | NtAlpcImpersonateClientContainerOfPort |
| NtAlpcImpersonateClientOfPort | NtAlpcOpenSenderProcess |
| NtAlpcOpenSenderThread | NtAlpcQueryInformation |
| NtAlpcQueryInformationMessage | NtAlpcRevokeSecurityContext |
| NtAlpcSendWaitReceivePort | NtAlpcSetInformation |
| NtApphelpCacheControl | NtAreMappedFilesTheSame |
| NtAssignProcessToJobObject | NtAssignProcessToSiloObject |
| NtAssociateWaitCompletionPacket | NtCallbackReturn |
| NtCancelIoFile | NtCancelIoFileEx |
| NtCancelSynchronousIoFile | NtCancelTimer |
| NtCancelTimer2 | NtCancelWaitCompletionPacket |
| NtClearEvent | NtClose |
| NtCloseObjectAuditAlarm | NtCommitComplete |
| NtCommitEnlistment | NtCommitTransaction |
| NtCompactKeys | NtCompareObjects |
| NtCompareTokens | NtCompleteConnectPort |
| NtCompressKey | NtConnectPort |
| NtContinue | NtCreateDebugObject |
| NtCreateDirectoryObject | NtCreateDirectoryObjectEx |
| NtCreateEnlistment | NtCreateEvent |
| NtCreateEventPair | NtCreateFile |
| NtCreateIRTimer | NtCreateIoCompletion |
| NtCreateJobObject | NtCreateJobSet |
| NtCreateKey | NtCreateKeyTransacted |
| NtCreateKeyedEvent | NtCreateLowBoxToken |
| NtCreateMailslotFile | NtCreateMutant |
| NtCreateNamedPipeFile | NtCreatePagingFile |
| NtCreatePartition | NtCreatePort |
| NtCreatePrivateNamespace | NtCreateProcess |
| NtCreateProcessEx | NtCreateProfile |
| NtCreateProfileEx | NtCreateResourceManager |
| NtCreateSection | NtCreateSemaphore |
| NtCreateSiloObject | NtCreateSymbolicLinkObject |
| NtCreateThread | NtCreateThreadEx |
| NtCreateTimer | NtCreateTimer2 |
| NtCreateToken | NtCreateTokenEx |
| NtCreateTransaction | NtCreateTransactionManager |
| NtCreateUserProcess | NtCreateWaitCompletionPacket |
| NtCreateWaitablePort | NtCreateWnfStateName |
| NtCreateWorkerFactory | NtCurrentTeb |
| NtDebugActiveProcess | NtDebugContinue |
| NtDelayExecution | NtDeleteAtom |
| NtDeleteBootEntry | NtDeleteDriverEntry |
| NtDeleteFile | NtDeleteKey |
| NtDeleteObjectAuditAlarm | NtDeletePrivateNamespace |
| NtDeleteValueKey | NtDeleteWnfStateData |
| NtDeleteWnfStateName | NtDeviceIoControlFile |
| NtDisableLastKnownGood | NtDisplayString |
| NtDrawText | NtDuplicateObject |
| NtDuplicateToken | NtEnableLastKnownGood |
| NtEnumerateBootEntries | NtEnumerateDriverEntries |
| NtEnumerateKey | NtEnumerateSystemEnvironmentValuesEx |
| NtEnumerateTransactionObject | NtEnumerateValueKey |
| NtExtendSection | NtFilterBootOption |
| NtFilterToken | NtFilterTokenEx |
| NtFindAtom | NtFlushBuffersFile |
| NtFlushBuffersFileEx | NtFlushInstallUILanguage |
| NtFlushInstructionCache | NtFlushKey |
| NtFlushProcessWriteBuffers | NtFlushVirtualMemory |
| NtFlushWriteBuffer | NtFreeUserPhysicalPages |
| NtFreeVirtualMemory | NtFreezeRegistry |
| NtFreezeTransactions | NtFsControlFile |
| NtGetCachedSigningLevel | NtGetCompleteWnfStateSubscription |
| NtGetContextThread | NtGetCurrentProcessorNumber |
| NtGetCurrentProcessorNumberEx | NtGetDevicePowerState |
| NtGetMUIRegistryInfo | NtGetNextProcess |
| NtGetNextThread | NtGetNlsSectionPtr |
| NtGetNotificationResourceManager | NtGetTickCount |
| NtGetWriteWatch | NtImpersonateAnonymousToken |
| NtImpersonateClientOfPort | NtImpersonateThread |
| NtInitializeNlsFiles | NtInitializeRegistry |
| NtInitiatePowerAction | NtIsProcessInJob |
| NtIsSystemResumeAutomatic | NtIsUILanguageComitted |
| NtListenPort | NtLoadDriver |
| NtLoadKey | NtLoadKey2 |
| NtLoadKeyEx | NtLockFile |
| NtLockProductActivationKeys | NtLockRegistryKey |
| NtLockVirtualMemory | NtMakePermanentObject |
| NtMakeTemporaryObject | NtManagePartition |
| NtMapCMFModule | NtMapUserPhysicalPages |
| NtMapUserPhysicalPagesScatter | NtMapViewOfSection |
| NtModifyBootEntry | NtModifyDriverEntry |
| NtNotifyChangeDirectoryFile | NtNotifyChangeKey |
| NtNotifyChangeMultipleKeys | NtNotifyChangeSession |
| NtOpenDirectoryObject | NtOpenEnlistment |
| NtOpenEvent | NtOpenEventPair |
| NtOpenFile | NtOpenIoCompletion |
| NtOpenJobObject | NtOpenKey |
| NtOpenKeyEx | NtOpenKeyTransacted |
| NtOpenKeyTransactedEx | NtOpenKeyedEvent |
| NtOpenMutant | NtOpenObjectAuditAlarm |
| NtOpenPartition | NtOpenPrivateNamespace |
| NtOpenProcess | NtOpenProcessToken |
| NtOpenProcessTokenEx | NtOpenResourceManager |
| NtOpenSection | NtOpenSemaphore |
| NtOpenSession | NtOpenSiloObject |
| NtOpenSymbolicLinkObject | NtOpenThread |
| NtOpenThreadToken | NtOpenThreadTokenEx |
| NtOpenTimer | NtOpenTransaction |
| NtOpenTransactionManager | NtPlugPlayControl |
| NtPowerInformation | NtPrePrepareComplete |
| NtPrePrepareEnlistment | NtPrepareComplete |
| NtPrepareEnlistment | NtPrivilegeCheck |
| NtPrivilegeObjectAuditAlarm | NtPrivilegedServiceAuditAlarm |
| NtPropagationComplete | NtPropagationFailed |
| NtProtectVirtualMemory | NtPulseEvent |
| NtQueryAttributesFile | NtQueryBootEntryOrder |
| NtQueryBootOptions | NtQueryDebugFilterState |
| NtQueryDefaultLocale | NtQueryDefaultUILanguage |
| NtQueryDirectoryFile | NtQueryDirectoryObject |
| NtQueryDriverEntryOrder | NtQueryEaFile |
| NtQueryEvent | NtQueryFullAttributesFile |
| NtQueryInformationAtom | NtQueryInformationEnlistment |
| NtQueryInformationFile | NtQueryInformationJobObject |
| NtQueryInformationPort | NtQueryInformationProcess |
| NtQueryInformationResourceManager | NtQueryInformationSiloObject |
| NtQueryInformationThread | NtQueryInformationToken |
| NtQueryInformationTransaction | NtQueryInformationTransactionManager |
| NtQueryInformationWorkerFactory | NtQueryInstallUILanguage |
| NtQueryIntervalProfile | NtQueryIoCompletion |
| NtQueryKey | NtQueryLicenseValue |
| NtQueryMultipleValueKey | NtQueryMutant |
| NtQueryObject | NtQueryOpenSubKeys |
| NtQueryOpenSubKeysEx | NtQueryPerformanceCounter |
| NtQueryPortInformationProcess | NtQueryQuotaInformationFile |
| NtQuerySection | NtQuerySecurityAttributesToken |
| NtQuerySecurityObject | NtQuerySemaphore |
| NtQuerySymbolicLinkObject | NtQuerySystemEnvironmentValue |
| NtQuerySystemEnvironmentValueEx | NtQuerySystemInformation |
| NtQuerySystemInformationEx | NtQuerySystemTime |
| NtQueryTimer | NtQueryTimerResolution |
| NtQueryValueKey | NtQueryVirtualMemory |
| NtQueryVolumeInformationFile | NtQueryWnfStateData |
| NtQueryWnfStateNameInformation | NtQueueApcThread |
| NtQueueApcThreadEx | NtRaiseException |
| NtRaiseHardError | NtReadFile |
| NtReadFileScatter | NtReadOnlyEnlistment |
| NtReadRequestData | NtReadVirtualMemory |
| NtRecoverEnlistment | NtRecoverResourceManager |
| NtRecoverTransactionManager | NtRegisterProtocolAddressInformation |
| NtRegisterThreadTerminatePort | NtReleaseKeyedEvent |
| NtReleaseMutant | NtReleaseSemaphore |
| NtReleaseWorkerFactoryWorker | NtRemoveIoCompletion |
| NtRemoveIoCompletionEx | NtRemoveProcessDebug |
| NtRenameKey | NtRenameTransactionManager |
| NtReplaceKey | NtReplacePartitionUnit |
| NtReplyPort | NtReplyWaitReceivePort |
| NtReplyWaitReceivePortEx | NtReplyWaitReplyPort |
| NtRequestPort | NtRequestWaitReplyPort |
| NtResetEvent | NtResetWriteWatch |
| NtRestoreKey | NtResumeProcess |
| NtResumeThread | NtRevertContainerImpersonation |
| NtRollbackComplete | NtRollbackEnlistment |
| NtRollbackTransaction | NtRollforwardTransactionManager |
| NtSaveKey | NtSaveKeyEx |
| NtSaveMergedKeys | NtSecureConnectPort |
| NtSerializeBoot | NtSetBootEntryOrder |
| NtSetBootOptions | NtSetCachedSigningLevel |
| NtSetContextThread | NtSetDebugFilterState |
| NtSetDefaultHardErrorPort | NtSetDefaultLocale |
| NtSetDefaultUILanguage | NtSetDriverEntryOrder |
| NtSetEaFile | NtSetEvent |
| NtSetEventBoostPriority | NtSetHighEventPair |
| NtSetHighWaitLowEventPair | NtSetIRTimer |
| NtSetInformationDebugObject | NtSetInformationEnlistment |
| NtSetInformationFile | NtSetInformationJobObject |
| NtSetInformationKey | NtSetInformationObject |
| NtSetInformationProcess | NtSetInformationResourceManager |
| NtSetInformationSiloObject | NtSetInformationSymbolicLink |
| NtSetInformationThread | NtSetInformationToken |
| NtSetInformationTransaction | NtSetInformationTransactionManager |
| NtSetInformationVirtualMemory | NtSetInformationWorkerFactory |
| NtSetIntervalProfile | NtSetIoCompletion |
| NtSetIoCompletionEx | NtSetLdtEntries |
| NtSetLowEventPair | NtSetLowWaitHighEventPair |
| NtSetQuotaInformationFile | NtSetSecurityObject |
| NtSetSystemEnvironmentValue | NtSetSystemEnvironmentValueEx |
| NtSetSystemInformation | NtSetSystemPowerState |
| NtSetSystemTime | NtSetThreadExecutionState |
| NtSetTimer | NtSetTimer2 |
| NtSetTimerEx | NtSetTimerResolution |
| NtSetUuidSeed | NtSetValueKey |
| NtSetVolumeInformationFile | NtSetWnfProcessNotificationEvent |
| NtShutdownSystem | NtShutdownWorkerFactory |
| NtSignalAndWaitForSingleObject | NtSinglePhaseReject |
| NtStartProfile | NtStopProfile |
| NtSubscribeWnfStateChange | NtSuspendProcess |
| NtSuspendThread | NtSystemDebugControl |
| NtTerminateJobObject | NtTerminateProcess |
| NtTerminateSiloObject | NtTerminateThread |
| NtTestAlert | NtThawRegistry |
| NtThawTransactions | NtTraceControl |
| NtTraceEvent | NtTranslateFilePath |
| NtUmsThreadYield | NtUnloadDriver |
| NtUnloadKey | NtUnloadKey2 |
| NtUnloadKeyEx | NtUnlockFile |
| NtUnlockVirtualMemory | NtUnmapViewOfSection |
| NtUnmapViewOfSectionEx | NtUnsubscribeWnfStateChange |
| NtUpdateWnfStateData | NtVdmControl |
| NtWaitForAlertByThreadId | NtWaitForDebugEvent |
| NtWaitForKeyedEvent | NtWaitForMultipleObjects |
| NtWaitForMultipleObjects32 | NtWaitForSingleObject |
| NtWaitForWorkViaWorkerFactory | NtWaitHighEventPair |
| NtWaitLowEventPair | NtWorkerFactoryWorkerReady |
| NtWriteFile | NtWriteFileGather |
| NtWriteRequestData | NtWriteVirtualMemory |
| NtYieldExecution | NtdllDefWindowProc_A |
| NtdllDefWindowProc_W | NtdllDialogWndProc_A |
| NtdllDialogWndProc_W | PfxFindPrefix |
| PfxInitialize | PfxInsertPrefix |
| PfxRemovePrefix | PssNtCaptureSnapshot |
| PssNtDuplicateSnapshot | PssNtFreeRemoteSnapshot |
| PssNtFreeSnapshot | PssNtFreeWalkMarker |
| PssNtQuerySnapshot | PssNtValidateDescriptor |
| PssNtWalkSnapshot | RtlAbortRXact |
| RtlAbsoluteToSelfRelativeSD | RtlAcquirePebLock |
| RtlAcquirePrivilege | RtlAcquireReleaseSRWLockExclusive |
| RtlAcquireResourceExclusive | RtlAcquireResourceShared |
| RtlAcquireSRWLockExclusive | RtlAcquireSRWLockShared |
| RtlActivateActivationContext | RtlActivateActivationContextEx |
| RtlActivateActivationContextUnsafeFast | RtlAddAccessAllowedAce |
| RtlAddAccessAllowedAceEx | RtlAddAccessAllowedObjectAce |
| RtlAddAccessDeniedAce | RtlAddAccessDeniedAceEx |
| RtlAddAccessDeniedObjectAce | RtlAddAce |
| RtlAddActionToRXact | RtlAddAtomToAtomTable |
| RtlAddAttributeActionToRXact | RtlAddAuditAccessAce |
| RtlAddAuditAccessAceEx | RtlAddAuditAccessObjectAce |
| RtlAddCompoundAce | RtlAddIntegrityLabelToBoundaryDescriptor |
| RtlAddMandatoryAce | RtlAddProcessTrustLabelAce |
| RtlAddRefActivationContext | RtlAddRefMemoryStream |
| RtlAddResourceAttributeAce | RtlAddSIDToBoundaryDescriptor |
| RtlAddScopedPolicyIDAce | RtlAddVectoredContinueHandler |
| RtlAddVectoredExceptionHandler | RtlAddressInSectionTable |
| RtlAdjustPrivilege | RtlAllocateActivationContextStack |
| RtlAllocateAndInitializeSid | RtlAllocateAndInitializeSidEx |
| RtlAllocateHandle | RtlAllocateHeap |
| RtlAllocateMemoryBlockLookaside | RtlAllocateMemoryZone |
| RtlAllocateWnfSerializationGroup | RtlAnsiCharToUnicodeChar |
| RtlAnsiStringToUnicodeSize | RtlAnsiStringToUnicodeString |
| RtlAppendAsciizToString | RtlAppendPathElement |
| RtlAppendStringToString | RtlAppendUnicodeStringToString |
| RtlAppendUnicodeToString | RtlApplicationVerifierStop |
| RtlApplyRXact | RtlApplyRXactNoFlush |
| RtlAppxIsFileOwnedByTrustedInstaller | RtlAreAllAccessesGranted |
| RtlAreAnyAccessesGranted | RtlAreBitsClear |
| RtlAreBitsSet | RtlAssert |
| RtlAvlInsertNodeEx | RtlAvlRemoveNode |
| RtlBarrier | RtlBarrierForDelete |
| RtlCancelTimer | RtlCanonicalizeDomainName |
| RtlCapabilityCheck | RtlCaptureContext |
| RtlCaptureStackBackTrace | RtlCaptureStackContext |
| RtlCharToInteger | RtlCheckForOrphanedCriticalSections |
| RtlCheckPortableOperatingSystem | RtlCheckRegistryKey |
| RtlCheckTokenCapability | RtlCheckTokenMembership |
| RtlCheckTokenMembershipEx | RtlCleanUpTEBLangLists |
| RtlClearAllBits | RtlClearBit |
| RtlClearBits | RtlCloneMemoryStream |
| RtlCloneUserProcess | RtlCmDecodeMemIoResource |
| RtlCmEncodeMemIoResource | RtlCommitDebugInfo |
| RtlCommitMemoryStream | RtlCompactHeap |
| RtlCompareAltitudes | RtlCompareMemory |
| RtlCompareMemoryUlong | RtlCompareString |
| RtlCompareUnicodeString | RtlCompareUnicodeStrings |
| RtlCompressBuffer | RtlComputeCrc32 |
| RtlComputeImportTableHash | RtlComputePrivatizedDllName_U |
| RtlConnectToSm | RtlConsoleMultiByteToUnicodeN |
| RtlContractHashTable | RtlConvertDeviceFamilyInfoToString |
| RtlConvertExclusiveToShared | RtlConvertLCIDToString |
| RtlConvertLongToLargeInteger | RtlConvertSRWLockExclusiveToShared |
| RtlConvertSharedToExclusive | RtlConvertSidToUnicodeString |
| RtlConvertToAutoInheritSecurityObject | RtlConvertUlongToLargeInteger |
| RtlCopyBitMap | RtlCopyContext |
| RtlCopyExtendedContext | RtlCopyLuid |
| RtlCopyLuidAndAttributesArray | RtlCopyMappedMemory |
| RtlCopyMemoryStreamTo | RtlCopyOutOfProcessMemoryStreamTo |
| RtlCopySecurityDescriptor | RtlCopySid |
| RtlCopySidAndAttributesArray | RtlCopyString |
| RtlCopyUnicodeString | RtlCrc32 |
| RtlCrc64 | RtlCreateAcl |
| RtlCreateActivationContext | RtlCreateAndSetSD |
| RtlCreateAtomTable | RtlCreateBootStatusDataFile |
| RtlCreateBoundaryDescriptor | RtlCreateEnvironment |
| RtlCreateEnvironmentEx | RtlCreateHashTable |
| RtlCreateHashTableEx | RtlCreateHeap |
| RtlCreateMemoryBlockLookaside | RtlCreateMemoryZone |
| RtlCreateProcessParameters | RtlCreateProcessParametersEx |
| RtlCreateProcessReflection | RtlCreateQueryDebugBuffer |
| RtlCreateRegistryKey | RtlCreateSecurityDescriptor |
| RtlCreateServiceSid | RtlCreateSystemVolumeInformationFolder |
| RtlCreateTagHeap | RtlCreateTimer |
| RtlCreateTimerQueue | RtlCreateUnicodeString |
| RtlCreateUnicodeStringFromAsciiz | RtlCreateUserProcess |
| RtlCreateUserSecurityObject | RtlCreateUserStack |
| RtlCreateUserThread | RtlCreateVirtualAccountSid |
| RtlCultureNameToLCID | RtlCustomCPToUnicodeN |
| RtlCutoverTimeToSystemTime | RtlDeCommitDebugInfo |
| RtlDeNormalizeProcessParams | RtlDeactivateActivationContext |
| RtlDeactivateActivationContextUnsafeFast | RtlDebugPrintTimes |
| RtlDecodePointer | RtlDecodeRemotePointer |
| RtlDecodeSystemPointer | RtlDecompressBuffer |
| RtlDecompressBufferEx | RtlDecompressFragment |
| RtlDefaultNpAcl | RtlDelete |
| RtlDeleteAce | RtlDeleteAtomFromAtomTable |
| RtlDeleteBarrier | RtlDeleteBoundaryDescriptor |
| RtlDeleteCriticalSection | RtlDeleteElementGenericTable |
| RtlDeleteElementGenericTableAvl | RtlDeleteElementGenericTableAvlEx |
| RtlDeleteHashTable | RtlDeleteNoSplay |
| RtlDeleteRegistryValue | RtlDeleteResource |
| RtlDeleteSecurityObject | RtlDeleteTimer |
| RtlDeleteTimerQueue | RtlDeleteTimerQueueEx |
| RtlDeregisterSecureMemoryCacheCallback | RtlDeregisterWait |
| RtlDeregisterWaitEx | RtlDeriveCapabilitySidsFromName |
| RtlDestroyAtomTable | RtlDestroyEnvironment |
| RtlDestroyHandleTable | RtlDestroyHeap |
| RtlDestroyMemoryBlockLookaside | RtlDestroyMemoryZone |
| RtlDestroyProcessParameters | RtlDestroyQueryDebugBuffer |
| RtlDetectHeapLeaks | RtlDetermineDosPathNameType_U |
| RtlDisableThreadProfiling | RtlDllShutdownInProgress |
| RtlDnsHostNameToComputerName | RtlDoesFileExists_U |
| RtlDosApplyFileIsolationRedirection_Ustr | RtlDosPathNameToNtPathName_U |
| RtlDosPathNameToNtPathName_U_WithStatus | RtlDosPathNameToRelativeNtPathName_U |
| RtlDosPathNameToRelativeNtPathName_U_WithStatus | RtlDosSearchPath_U |
| RtlDosSearchPath_Ustr | RtlDowncaseUnicodeChar |
| RtlDowncaseUnicodeString | RtlDumpResource |
| RtlDuplicateUnicodeString | RtlEmptyAtomTable |
| RtlEnableEarlyCriticalSectionEventCreation | RtlEnableThreadProfiling |
| RtlEncodePointer | RtlEncodeRemotePointer |
| RtlEncodeSystemPointer | RtlEndEnumerationHashTable |
| RtlEndStrongEnumerationHashTable | RtlEndWeakEnumerationHashTable |
| RtlEnlargedIntegerMultiply | RtlEnlargedUnsignedMultiply |
| RtlEnterCriticalSection | RtlEnumProcessHeaps |
| RtlEnumerateEntryHashTable | RtlEnumerateGenericTable |
| RtlEnumerateGenericTableAvl | RtlEnumerateGenericTableLikeADirectory |
| RtlEnumerateGenericTableWithoutSplaying | RtlEnumerateGenericTableWithoutSplayingAvl |
| RtlEqualComputerName | RtlEqualDomainName |
| RtlEqualLuid | RtlEqualPrefixSid |
| RtlEqualSid | RtlEqualString |
| RtlEqualUnicodeString | RtlEqualWnfChangeStamps |
| RtlEraseUnicodeString | RtlEthernetAddressToStringA |
| RtlEthernetAddressToStringW | RtlEthernetStringToAddressA |
| RtlEthernetStringToAddressW | RtlExitUserProcess |
| RtlExitUserThread | RtlExpandEnvironmentStrings |
| RtlExpandEnvironmentStrings_U | RtlExpandHashTable |
| RtlExtendMemoryBlockLookaside | RtlExtendMemoryZone |
| RtlExtendedIntegerMultiply | RtlExtendedLargeIntegerDivide |
| RtlExtendedMagicDivide | RtlExtractBitMap |
| RtlFillMemory | RtlFillMemoryUlong |
| RtlFillMemoryUlonglong | RtlFinalReleaseOutOfProcessMemoryStream |
| RtlFindAceByType | RtlFindActivationContextSectionGuid |
| RtlFindActivationContextSectionString | RtlFindCharInUnicodeString |
| RtlFindClearBits | RtlFindClearBitsAndSet |
| RtlFindClearRuns | RtlFindClosestEncodableLength |
| RtlFindLastBackwardRunClear | RtlFindLeastSignificantBit |
| RtlFindLongestRunClear | RtlFindMessage |
| RtlFindMostSignificantBit | RtlFindNextForwardRunClear |
| RtlFindSetBits | RtlFindSetBitsAndClear |
| RtlFindUnicodeSubstring | RtlFirstEntrySList |
| RtlFirstFreeAce | RtlFlsAlloc |
| RtlFlsFree | RtlFlushHeaps |
| RtlFlushSecureMemoryCache | RtlFormatCurrentUserKeyPath |
| RtlFormatMessage | RtlFormatMessageEx |
| RtlFreeActivationContextStack | RtlFreeAnsiString |
| RtlFreeHandle | RtlFreeHeap |
| RtlFreeMemoryBlockLookaside | RtlFreeOemString |
| RtlFreeSid | RtlFreeThreadActivationContextStack |
| RtlFreeUnicodeString | RtlFreeUserStack |
| RtlGUIDFromString | RtlGenerate8dot3Name |
| RtlGetAce | RtlGetActiveActivationContext |
| RtlGetAppContainerNamedObjectPath | RtlGetAppContainerParent |
| RtlGetAppContainerSidType | RtlGetCallersAddress |
| RtlGetCompressionWorkSpaceSize | RtlGetControlSecurityDescriptor |
| RtlGetCriticalSectionRecursionCount | RtlGetCurrentDirectory_U |
| RtlGetCurrentPeb | RtlGetCurrentProcessorNumber |
| RtlGetCurrentProcessorNumberEx | RtlGetCurrentTransaction |
| RtlGetDaclSecurityDescriptor | RtlGetDeviceFamilyInfoEnum |
| RtlGetElementGenericTable | RtlGetElementGenericTableAvl |
| RtlGetEnabledExtendedFeatures | RtlGetExePath |
| RtlGetExtendedContextLength | RtlGetExtendedFeaturesMask |
| RtlGetFileMUIPath | RtlGetFrame |
| RtlGetFullPathName_U | RtlGetFullPathName_UEx |
| RtlGetFullPathName_UstrEx | RtlGetGroupSecurityDescriptor |
| RtlGetIntegerAtom | RtlGetInterruptTimePrecise |
| RtlGetLastNtStatus | RtlGetLastWin32Error |
| RtlGetLengthWithoutLastFullDosOrNtPathElement | RtlGetLengthWithoutTrailingPathSeperators |
| RtlGetLocaleFileMappingAddress | RtlGetLongestNtPathLength |
| RtlGetNativeSystemInformation | RtlGetNextEntryHashTable |
| RtlGetNtGlobalFlags | RtlGetNtProductType |
| RtlGetNtVersionNumbers | RtlGetOwnerSecurityDescriptor |
| RtlGetParentLocaleName | RtlGetProcessHeaps |
| RtlGetProcessPreferredUILanguages | RtlGetProductInfo |
| RtlGetSaclSecurityDescriptor | RtlGetSearchPath |
| RtlGetSecurityDescriptorRMControl | RtlGetSetBootStatusData |
| RtlGetSystemPreferredUILanguages | RtlGetSystemTimePrecise |
| RtlGetThreadErrorMode | RtlGetThreadLangIdByIndex |
| RtlGetThreadPreferredUILanguages | RtlGetUILanguageInfo |
| RtlGetUnloadEventTrace | RtlGetUnloadEventTraceEx |
| RtlGetUserInfoHeap | RtlGetUserPreferredUILanguages |
| RtlGetVersion | RtlHashUnicodeString |
| RtlHeapTrkInitialize | RtlIdentifierAuthoritySid |
| RtlIdnToAscii | RtlIdnToNameprepUnicode |
| RtlIdnToUnicode | RtlImageDirectoryEntryToData |
| RtlImageNtHeader | RtlImageNtHeaderEx |
| RtlImageRvaToSection | RtlImageRvaToVa |
| RtlImpersonateSelf | RtlImpersonateSelfEx |
| RtlInitAnsiString | RtlInitAnsiStringEx |
| RtlInitBarrier | RtlInitCodePageTable |
| RtlInitEnumerationHashTable | RtlInitMemoryStream |
| RtlInitNlsTables | RtlInitOutOfProcessMemoryStream |
| RtlInitString | RtlInitStringEx |
| RtlInitStrongEnumerationHashTable | RtlInitUnicodeString |
| RtlInitUnicodeStringEx | RtlInitWeakEnumerationHashTable |
| RtlInitializeAtomPackage | RtlInitializeBitMap |
| RtlInitializeConditionVariable | RtlInitializeContext |
| RtlInitializeCriticalSection | RtlInitializeCriticalSectionAndSpinCount |
| RtlInitializeCriticalSectionEx | RtlInitializeExceptionChain |
| RtlInitializeExtendedContext | RtlInitializeGenericTable |
| RtlInitializeGenericTableAvl | RtlInitializeHandleTable |
| RtlInitializeNtUserPfn | RtlInitializeRXact |
| RtlInitializeResource | RtlInitializeSListHead |
| RtlInitializeSRWLock | RtlInitializeSid |
| RtlInitializeSidEx | RtlInsertElementGenericTable |
| RtlInsertElementGenericTableAvl | RtlInsertElementGenericTableFull |
| RtlInsertElementGenericTableFullAvl | RtlInsertEntryHashTable |
| RtlInt64ToUnicodeString | RtlIntegerToChar |
| RtlIntegerToUnicodeString | RtlInterlockedClearBitRun |
| RtlInterlockedCompareExchange64 | RtlInterlockedFlushSList |
| RtlInterlockedPopEntrySList | RtlInterlockedPushEntrySList |
| RtlInterlockedPushListSList | RtlInterlockedPushListSListEx |
| RtlInterlockedSetBitRun | RtlIoDecodeMemIoResource |
| RtlIoEncodeMemIoResource | RtlIpv4AddressToStringA |
| RtlIpv4AddressToStringExA | RtlIpv4AddressToStringExW |
| RtlIpv4AddressToStringW | RtlIpv4StringToAddressA |
| RtlIpv4StringToAddressExA | RtlIpv4StringToAddressExW |
| RtlIpv4StringToAddressW | RtlIpv6AddressToStringA |
| RtlIpv6AddressToStringExA | RtlIpv6AddressToStringExW |
| RtlIpv6AddressToStringW | RtlIpv6StringToAddressA |
| RtlIpv6StringToAddressExA | RtlIpv6StringToAddressExW |
| RtlIpv6StringToAddressW | RtlIsActivationContextActive |
| RtlIsCapabilitySid | RtlIsCriticalSectionLocked |
| RtlIsCriticalSectionLockedByThread | RtlIsCurrentThreadAttachExempt |
| RtlIsDosDeviceName_U | RtlIsGenericTableEmpty |
| RtlIsGenericTableEmptyAvl | RtlIsMultiSessionSku |
| RtlIsNameInExpression | RtlIsNameLegalDOS8Dot3 |
| RtlIsNormalizedString | RtlIsPackageSid |
| RtlIsParentOfChildAppContainer | RtlIsProcessorFeaturePresent |
| RtlIsTextUnicode | RtlIsThreadWithinLoaderCallout |
| RtlIsUntrustedObject | RtlIsValidHandle |
| RtlIsValidIndexHandle | RtlIsValidLocaleName |
| RtlIsValidProcessTrustLabelSid | RtlKnownExceptionFilter |
| RtlLCIDToCultureName | RtlLargeIntegerAdd |
| RtlLargeIntegerArithmeticShift | RtlLargeIntegerDivide |
| RtlLargeIntegerNegate | RtlLargeIntegerShiftLeft |
| RtlLargeIntegerShiftRight | RtlLargeIntegerSubtract |
| RtlLargeIntegerToChar | RtlLcidToLocaleName |
| RtlLeaveCriticalSection | RtlLengthRequiredSid |
| RtlLengthSecurityDescriptor | RtlLengthSid |
| RtlLengthSidAsUnicodeString | RtlLoadString |
| RtlLocalTimeToSystemTime | RtlLocaleNameToLcid |
| RtlLocateExtendedFeature | RtlLocateLegacyContext |
| RtlLockBootStatusData | RtlLockCurrentThread |
| RtlLockHeap | RtlLockMemoryBlockLookaside |
| RtlLockMemoryStreamRegion | RtlLockMemoryZone |
| RtlLockModuleSection | RtlLogStackBackTrace |
| RtlLookupAtomInAtomTable | RtlLookupElementGenericTable |
| RtlLookupElementGenericTableAvl | RtlLookupElementGenericTableFull |
| RtlLookupElementGenericTableFullAvl | RtlLookupEntryHashTable |
| RtlMakeSelfRelativeSD | RtlMapGenericMask |
| RtlMapSecurityErrorToNtStatus | RtlMoveMemory |
| RtlMultiAppendUnicodeStringBuffer | RtlMultiByteToUnicodeN |
| RtlMultiByteToUnicodeSize | RtlMultipleAllocateHeap |
| RtlMultipleFreeHeap | RtlNewInstanceSecurityObject |
| RtlNewSecurityGrantedAccess | RtlNewSecurityObject |
| RtlNewSecurityObjectEx | RtlNewSecurityObjectWithMultipleInheritance |
| RtlNormalizeProcessParams | RtlNormalizeString |
| RtlNtPathNameToDosPathName | RtlNtStatusToDosError |
| RtlNtStatusToDosErrorNoTeb | RtlNumberGenericTableElements |
| RtlNumberGenericTableElementsAvl | RtlNumberOfClearBits |
| RtlNumberOfClearBitsInRange | RtlNumberOfSetBits |
| RtlNumberOfSetBitsInRange | RtlNumberOfSetBitsUlongPtr |
| RtlOemStringToUnicodeSize | RtlOemStringToUnicodeString |
| RtlOemToUnicodeN | RtlOpenCurrentUser |
| RtlOsDeploymentState | RtlOwnerAcesPresent |
| RtlPcToFileHeader | RtlPinAtomInAtomTable |
| RtlPopFrame | RtlPrefixString |
| RtlPrefixUnicodeString | RtlProcessFlsData |
| RtlProtectHeap | RtlPublishWnfStateData |
| RtlPushFrame | RtlQueryActivationContextApplicationSettings |
| RtlQueryAtomInAtomTable | RtlQueryCriticalSectionOwner |
| RtlQueryDepthSList | RtlQueryDynamicTimeZoneInformation |
| RtlQueryElevationFlags | RtlQueryEnvironmentVariable |
| RtlQueryEnvironmentVariable_U | RtlQueryHeapInformation |
| RtlQueryInformationAcl | RtlQueryInformationActivationContext |
| RtlQueryInformationActiveActivationContext | RtlQueryInterfaceMemoryStream |
| RtlQueryModuleInformation | RtlQueryPackageClaims |
| RtlQueryPackageIdentity | RtlQueryPackageIdentityEx |
| RtlQueryPerformanceCounter | RtlQueryPerformanceFrequency |
| RtlQueryProcessBackTraceInformation | RtlQueryProcessDebugInformation |
| RtlQueryProcessHeapInformation | RtlQueryProcessLockInformation |
| RtlQueryProtectedPolicy | RtlQueryRegistryValues |
| RtlQueryRegistryValuesEx | RtlQueryResourcePolicy |
| RtlQuerySecurityObject | RtlQueryTagHeap |
| RtlQueryThreadProfiling | RtlQueryTimeZoneInformation |
| RtlQueryUnbiasedInterruptTime | RtlQueryValidationRunlevel |
| RtlQueryWnfMetaNotification | RtlQueryWnfStateData |
| RtlQueryWnfStateDataWithExplicitScope | RtlQueueApcWow64Thread |
| RtlQueueWorkItem | RtlRaiseException |
| RtlRaiseStatus | RtlRandom |
| RtlRandomEx | RtlRbInsertNodeEx |
| RtlRbRemoveNode | RtlReAllocateHeap |
| RtlReadMemoryStream | RtlReadOutOfProcessMemoryStream |
| RtlReadThreadProfilingData | RtlRealPredecessor |
| RtlRealSuccessor | RtlRegisterForWnfMetaNotification |
| RtlRegisterSecureMemoryCacheCallback | RtlRegisterThreadWithCsrss |
| RtlRegisterWait | RtlReleaseActivationContext |
| RtlReleaseMemoryStream | RtlReleasePath |
| RtlReleasePebLock | RtlReleasePrivilege |
| RtlReleaseRelativeName | RtlReleaseResource |
| RtlReleaseSRWLockExclusive | RtlReleaseSRWLockShared |
| RtlRemoteCall | RtlRemoveEntryHashTable |
| RtlRemovePrivileges | RtlRemoveVectoredContinueHandler |
| RtlRemoveVectoredExceptionHandler | RtlReplaceSidInSd |
| RtlReportException | RtlReportSilentProcessExit |
| RtlReportSqmEscalation | RtlResetMemoryBlockLookaside |
| RtlResetMemoryZone | RtlResetNtUserPfn |
| RtlResetRtlTranslations | RtlRestoreLastWin32Error |
| RtlRetrieveNtUserPfn | RtlRevertMemoryStream |
| RtlRunDecodeUnicodeString | RtlRunEncodeUnicodeString |
| RtlRunOnceBeginInitialize | RtlRunOnceComplete |
| RtlRunOnceExecuteOnce | RtlRunOnceInitialize |
| RtlSecondsSince1970ToTime | RtlSecondsSince1980ToTime |
| RtlSeekMemoryStream | RtlSelfRelativeToAbsoluteSD |
| RtlSelfRelativeToAbsoluteSD2 | RtlSendMsgToSm |
| RtlSetAllBits | RtlSetAttributesSecurityDescriptor |
| RtlSetBit | RtlSetBits |
| RtlSetControlSecurityDescriptor | RtlSetCriticalSectionSpinCount |
| RtlSetCurrentDirectory_U | RtlSetCurrentEnvironment |
| RtlSetCurrentTransaction | RtlSetDaclSecurityDescriptor |
| RtlSetDynamicTimeZoneInformation | RtlSetEnvironmentStrings |
| RtlSetEnvironmentVar | RtlSetEnvironmentVariable |
| RtlSetExtendedFeaturesMask | RtlSetGroupSecurityDescriptor |
| RtlSetHeapInformation | RtlSetInformationAcl |
| RtlSetIoCompletionCallback | RtlSetLastWin32Error |
| RtlSetLastWin32ErrorAndNtStatusFromNtStatus | RtlSetMemoryStreamSize |
| RtlSetOwnerSecurityDescriptor | RtlSetPortableOperatingSystem |
| RtlSetProcessDebugInformation | RtlSetProcessIsCritical |
| RtlSetProcessPreferredUILanguages | RtlSetProtectedPolicy |
| RtlSetSaclSecurityDescriptor | RtlSetSearchPathMode |
| RtlSetSecurityDescriptorRMControl | RtlSetSecurityObject |
| RtlSetSecurityObjectEx | RtlSetThreadErrorMode |
| RtlSetThreadIsCritical | RtlSetThreadPoolStartFunc |
| RtlSetThreadPreferredUILanguages | RtlSetThreadSubProcessTag |
| RtlSetTimeZoneInformation | RtlSetTimer |
| RtlSetUnhandledExceptionFilter | RtlSetUserFlagsHeap |
| RtlSetUserValueHeap | RtlSidDominates |
| RtlSidDominatesForTrust | RtlSidEqualLevel |
| RtlSidHashInitialize | RtlSidHashLookup |
| RtlSidIsHigherLevel | RtlSizeHeap |
| RtlSleepConditionVariableCS | RtlSleepConditionVariableSRW |
| RtlSplay | RtlStartRXact |
| RtlStatMemoryStream | RtlStringFromGUID |
| RtlStringFromGUIDEx | RtlStronglyEnumerateEntryHashTable |
| RtlSubAuthorityCountSid | RtlSubAuthoritySid |
| RtlSubscribeWnfStateChangeNotification | RtlSubtreePredecessor |
| RtlSubtreeSuccessor | RtlSwitchedVVI |
| RtlSystemTimeToLocalTime | RtlTestAndPublishWnfStateData |
| RtlTestBit | RtlTestProtectedAccess |
| RtlTimeFieldsToTime | RtlTimeToElapsedTimeFields |
| RtlTimeToSecondsSince1970 | RtlTimeToSecondsSince1980 |
| RtlTimeToTimeFields | RtlTraceDatabaseAdd |
| RtlTraceDatabaseCreate | RtlTraceDatabaseDestroy |
| RtlTraceDatabaseEnumerate | RtlTraceDatabaseFind |
| RtlTraceDatabaseLock | RtlTraceDatabaseUnlock |
| RtlTraceDatabaseValidate | RtlTryAcquirePebLock |
| RtlTryAcquireSRWLockExclusive | RtlTryAcquireSRWLockShared |
| RtlTryConvertSRWLockSharedToExclusiveOrRelease | RtlTryEnterCriticalSection |
| RtlUTF8ToUnicodeN | RtlUlongByteSwap |
| RtlUlonglongByteSwap | RtlUnhandledExceptionFilter |
| RtlUnhandledExceptionFilter2 | RtlUnicodeStringToAnsiSize |
| RtlUnicodeStringToAnsiString | RtlUnicodeStringToCountedOemString |
| RtlUnicodeStringToInteger | RtlUnicodeStringToOemSize |
| RtlUnicodeStringToOemString | RtlUnicodeToCustomCPN |
| RtlUnicodeToMultiByteN | RtlUnicodeToMultiByteSize |
| RtlUnicodeToOemN | RtlUnicodeToUTF8N |
| RtlUniform | RtlUnlockBootStatusData |
| RtlUnlockCurrentThread | RtlUnlockHeap |
| RtlUnlockMemoryBlockLookaside | RtlUnlockMemoryStreamRegion |
| RtlUnlockMemoryZone | RtlUnlockModuleSection |
| RtlUnsubscribeWnfNotificationWaitForCompletion | RtlUnsubscribeWnfNotificationWithCompletionCallback |
| RtlUnsubscribeWnfStateChangeNotification | RtlUnwind |
| RtlUpcaseUnicodeChar | RtlUpcaseUnicodeString |
| RtlUpcaseUnicodeStringToAnsiString | RtlUpcaseUnicodeStringToCountedOemString |
| RtlUpcaseUnicodeStringToOemString | RtlUpcaseUnicodeToCustomCPN |
| RtlUpcaseUnicodeToMultiByteN | RtlUpcaseUnicodeToOemN |
| RtlUpdateClonedCriticalSection | RtlUpdateClonedSRWLock |
| RtlUpdateTimer | RtlUpperChar |
| RtlUpperString | RtlUserThreadStart |
| RtlUshortByteSwap | RtlValidAcl |
| RtlValidProcessProtection | RtlValidRelativeSecurityDescriptor |
| RtlValidSecurityDescriptor | RtlValidSid |
| RtlValidateHeap | RtlValidateProcessHeaps |
| RtlValidateUnicodeString | RtlVerifyVersionInfo |
| RtlWaitForWnfMetaNotification | RtlWaitOnAddress |
| RtlWakeAddressAll | RtlWakeAddressAllNoFence |
| RtlWakeAddressSingle | RtlWakeAddressSingleNoFence |
| RtlWakeAllConditionVariable | RtlWakeConditionVariable |
| RtlWalkFrameChain | RtlWalkHeap |
| RtlWeaklyEnumerateEntryHashTable | RtlWerpReportException |
| RtlWnfCompareChangeStamp | RtlWnfDllUnloadCallback |
| RtlWow64CallFunction64 | RtlWow64EnableFsRedirection |
| RtlWow64EnableFsRedirectionEx | RtlWriteMemoryStream |
| RtlWriteRegistryValue | RtlZeroHeap |
| RtlZeroMemory | RtlZombifyActivationContext |
| RtlpApplyLengthFunction | RtlpCheckDynamicTimeZoneInformation |
| RtlpCleanupRegistryKeys | RtlpConvertAbsoluteToRelativeSecurityAttribute |
| RtlpConvertCultureNamesToLCIDs | RtlpConvertLCIDsToCultureNames |
| RtlpConvertRelativeToAbsoluteSecurityAttribute | RtlpCreateProcessRegistryInfo |
| RtlpEnsureBufferSize | RtlpFreezeTimeBias |
| RtlpGetDeviceFamilyInfoEnum | RtlpGetLCIDFromLangInfoNode |
| RtlpGetNameFromLangInfoNode | RtlpGetSystemDefaultUILanguage |
| RtlpGetUserOrMachineUILanguage4NLS | RtlpInitializeLangRegistryInfo |
| RtlpIsQualifiedLanguage | RtlpLoadMachineUIByPolicy |
| RtlpLoadUserUIByPolicy | RtlpMergeSecurityAttributeInformation |
| RtlpMuiFreeLangRegistryInfo | RtlpMuiRegCreateRegistryInfo |
| RtlpMuiRegFreeRegistryInfo | RtlpMuiRegLoadRegistryInfo |
| RtlpNotOwnerCriticalSection | RtlpNtCreateKey |
| RtlpNtEnumerateSubKey | RtlpNtMakeTemporaryKey |
| RtlpNtOpenKey | RtlpNtQueryValueKey |
| RtlpNtSetValueKey | RtlpQueryDefaultUILanguage |
| RtlpRefreshCachedUILanguage | RtlpSetInstallLanguage |
| RtlpSetPreferredUILanguages | RtlpSetUserPreferredUILanguages |
| RtlpUnWaitCriticalSection | RtlpVerifyAndCommitUILanguageSettings |
| RtlpWaitForCriticalSection | RtlxAnsiStringToUnicodeSize |
| RtlxOemStringToUnicodeSize | RtlxUnicodeStringToAnsiSize |
| RtlxUnicodeStringToOemSize | SbExecuteProcedure |
| SbSelectProcedure | ShipAssert |
| ShipAssertGetBufferInfo | ShipAssertMsgA |
| ShipAssertMsgW | TpAllocAlpcCompletion |
| TpAllocAlpcCompletionEx | TpAllocCleanupGroup |
| TpAllocIoCompletion | TpAllocJobNotification |
| TpAllocPool | TpAllocTimer |
| TpAllocWait | TpAllocWork |
| TpAlpcRegisterCompletionList | TpAlpcUnregisterCompletionList |
| TpCallbackDetectedUnrecoverableError | TpCallbackIndependent |
| TpCallbackLeaveCriticalSectionOnCompletion | TpCallbackMayRunLong |
| TpCallbackReleaseMutexOnCompletion | TpCallbackReleaseSemaphoreOnCompletion |
| TpCallbackSendAlpcMessageOnCompletion | TpCallbackSendPendingAlpcMessage |
| TpCallbackSetEventOnCompletion | TpCallbackUnloadDllOnCompletion |
| TpCancelAsyncIoOperation | TpCaptureCaller |
| TpCheckTerminateWorker | TpDbgDumpHeapUsage |
| TpDbgSetLogRoutine | TpDisablePoolCallbackChecks |
| TpDisassociateCallback | TpIsTimerSet |
| TpPostWork | TpQueryPoolStackInformation |
| TpReleaseAlpcCompletion | TpReleaseCleanupGroup |
| TpReleaseCleanupGroupMembers | TpReleaseIoCompletion |
| TpReleaseJobNotification | TpReleasePool |
| TpReleaseTimer | TpReleaseWait |
| TpReleaseWork | TpSetDefaultPoolMaxThreads |
| TpSetDefaultPoolStackInformation | TpSetPoolMaxThreads |
| TpSetPoolMaxThreadsSoftLimit | TpSetPoolMinThreads |
| TpSetPoolStackInformation | TpSetPoolThreadBasePriority |
| TpSetPoolWorkerThreadIdleTimeout | TpSetTimer |
| TpSetTimerEx | TpSetWait |
| TpSetWaitEx | TpSimpleTryPost |
| TpStartAsyncIoOperation | TpTimerOutstandingCallbackCount |
| TpTrimPools | TpWaitForAlpcCompletion |
| TpWaitForIoCompletion | TpWaitForJobNotification |
| TpWaitForTimer | TpWaitForWait |
| TpWaitForWork | VerSetConditionMask |
| WerReportSQMEvent | WinSqmAddToAverageDWORD |
| WinSqmAddToStream | WinSqmAddToStreamEx |
| WinSqmCheckEscalationAddToStreamEx | WinSqmCheckEscalationSetDWORD |
| WinSqmCheckEscalationSetDWORD64 | WinSqmCheckEscalationSetString |
| WinSqmCommonDatapointDelete | WinSqmCommonDatapointSetDWORD |
| WinSqmCommonDatapointSetDWORD64 | WinSqmCommonDatapointSetStreamEx |
| WinSqmCommonDatapointSetString | WinSqmEndSession |
| WinSqmEventEnabled | WinSqmEventWrite |
| WinSqmGetEscalationRuleStatus | WinSqmGetInstrumentationProperty |
| WinSqmIncrementDWORD | WinSqmIsOptedIn |
| WinSqmIsOptedInEx | WinSqmIsSessionDisabled |
| WinSqmSetDWORD | WinSqmSetDWORD64 |
| WinSqmSetEscalationInfo | WinSqmSetIfMaxDWORD |
| WinSqmSetIfMinDWORD | WinSqmSetString |
| WinSqmStartSession | WinSqmStartSessionForPartner |
| WinSqmStartSqmOptinListener | ZwAcceptConnectPort |
| ZwAccessCheck | ZwAccessCheckAndAuditAlarm |
| ZwAccessCheckByType | ZwAccessCheckByTypeAndAuditAlarm |
| ZwAccessCheckByTypeResultList | ZwAccessCheckByTypeResultListAndAuditAlarm |
| ZwAccessCheckByTypeResultListAndAuditAlarmByHandle | ZwAddAtom |
| ZwAddAtomEx | ZwAddBootEntry |
| ZwAddDriverEntry | ZwAdjustGroupsToken |
| ZwAdjustPrivilegesToken | ZwAdjustTokenClaimsAndDeviceGroups |
| ZwAlertResumeThread | ZwAlertThread |
| ZwAlertThreadByThreadId | ZwAllocateLocallyUniqueId |
| ZwAllocateReserveObject | ZwAllocateUserPhysicalPages |
| ZwAllocateUuids | ZwAllocateVirtualMemory |
| ZwAlpcAcceptConnectPort | ZwAlpcCancelMessage |
| ZwAlpcConnectPort | ZwAlpcConnectPortEx |
| ZwAlpcCreatePort | ZwAlpcCreatePortSection |
| ZwAlpcCreateResourceReserve | ZwAlpcCreateSectionView |
| ZwAlpcCreateSecurityContext | ZwAlpcDeletePortSection |
| ZwAlpcDeleteResourceReserve | ZwAlpcDeleteSectionView |
| ZwAlpcDeleteSecurityContext | ZwAlpcDisconnectPort |
| ZwAlpcImpersonateClientContainerOfPort | ZwAlpcImpersonateClientOfPort |
| ZwAlpcOpenSenderProcess | ZwAlpcOpenSenderThread |
| ZwAlpcQueryInformation | ZwAlpcQueryInformationMessage |
| ZwAlpcRevokeSecurityContext | ZwAlpcSendWaitReceivePort |
| ZwAlpcSetInformation | ZwApphelpCacheControl |
| ZwAreMappedFilesTheSame | ZwAssignProcessToJobObject |
| ZwAssignProcessToSiloObject | ZwAssociateWaitCompletionPacket |
| ZwCallbackReturn | ZwCancelIoFile |
| ZwCancelIoFileEx | ZwCancelSynchronousIoFile |
| ZwCancelTimer | ZwCancelTimer2 |
| ZwCancelWaitCompletionPacket | ZwClearEvent |
| ZwClose | ZwCloseObjectAuditAlarm |
| ZwCommitComplete | ZwCommitEnlistment |
| ZwCommitTransaction | ZwCompactKeys |
| ZwCompareObjects | ZwCompareTokens |
| ZwCompleteConnectPort | ZwCompressKey |
| ZwConnectPort | ZwContinue |
| ZwCreateDebugObject | ZwCreateDirectoryObject |
| ZwCreateDirectoryObjectEx | ZwCreateEnlistment |
| ZwCreateEvent | ZwCreateEventPair |
| ZwCreateFile | ZwCreateIRTimer |
| ZwCreateIoCompletion | ZwCreateJobObject |
| ZwCreateJobSet | ZwCreateKey |
| ZwCreateKeyTransacted | ZwCreateKeyedEvent |
| ZwCreateLowBoxToken | ZwCreateMailslotFile |
| ZwCreateMutant | ZwCreateNamedPipeFile |
| ZwCreatePagingFile | ZwCreatePartition |
| ZwCreatePort | ZwCreatePrivateNamespace |
| ZwCreateProcess | ZwCreateProcessEx |
| ZwCreateProfile | ZwCreateProfileEx |
| ZwCreateResourceManager | ZwCreateSection |
| ZwCreateSemaphore | ZwCreateSiloObject |
| ZwCreateSymbolicLinkObject | ZwCreateThread |
| ZwCreateThreadEx | ZwCreateTimer |
| ZwCreateTimer2 | ZwCreateToken |
| ZwCreateTokenEx | ZwCreateTransaction |
| ZwCreateTransactionManager | ZwCreateUserProcess |
| ZwCreateWaitCompletionPacket | ZwCreateWaitablePort |
| ZwCreateWnfStateName | ZwCreateWorkerFactory |
| ZwDebugActiveProcess | ZwDebugContinue |
| ZwDelayExecution | ZwDeleteAtom |
| ZwDeleteBootEntry | ZwDeleteDriverEntry |
| ZwDeleteFile | ZwDeleteKey |
| ZwDeleteObjectAuditAlarm | ZwDeletePrivateNamespace |
| ZwDeleteValueKey | ZwDeleteWnfStateData |
| ZwDeleteWnfStateName | ZwDeviceIoControlFile |
| ZwDisableLastKnownGood | ZwDisplayString |
| ZwDrawText | ZwDuplicateObject |
| ZwDuplicateToken | ZwEnableLastKnownGood |
| ZwEnumerateBootEntries | ZwEnumerateDriverEntries |
| ZwEnumerateKey | ZwEnumerateSystemEnvironmentValuesEx |
| ZwEnumerateTransactionObject | ZwEnumerateValueKey |
| ZwExtendSection | ZwFilterBootOption |
| ZwFilterToken | ZwFilterTokenEx |
| ZwFindAtom | ZwFlushBuffersFile |
| ZwFlushBuffersFileEx | ZwFlushInstallUILanguage |
| ZwFlushInstructionCache | ZwFlushKey |
| ZwFlushProcessWriteBuffers | ZwFlushVirtualMemory |
| ZwFlushWriteBuffer | ZwFreeUserPhysicalPages |
| ZwFreeVirtualMemory | ZwFreezeRegistry |
| ZwFreezeTransactions | ZwFsControlFile |
| ZwGetCachedSigningLevel | ZwGetCompleteWnfStateSubscription |
| ZwGetContextThread | ZwGetCurrentProcessorNumber |
| ZwGetCurrentProcessorNumberEx | ZwGetDevicePowerState |
| ZwGetMUIRegistryInfo | ZwGetNextProcess |
| ZwGetNextThread | ZwGetNlsSectionPtr |
| ZwGetNotificationResourceManager | ZwGetWriteWatch |
| ZwImpersonateAnonymousToken | ZwImpersonateClientOfPort |
| ZwImpersonateThread | ZwInitializeNlsFiles |
| ZwInitializeRegistry | ZwInitiatePowerAction |
| ZwIsProcessInJob | ZwIsSystemResumeAutomatic |
| ZwIsUILanguageComitted | ZwListenPort |
| ZwLoadDriver | ZwLoadKey |
| ZwLoadKey2 | ZwLoadKeyEx |
| ZwLockFile | ZwLockProductActivationKeys |
| ZwLockRegistryKey | ZwLockVirtualMemory |
| ZwMakePermanentObject | ZwMakeTemporaryObject |
| ZwManagePartition | ZwMapCMFModule |
| ZwMapUserPhysicalPages | ZwMapUserPhysicalPagesScatter |
| ZwMapViewOfSection | ZwModifyBootEntry |
| ZwModifyDriverEntry | ZwNotifyChangeDirectoryFile |
| ZwNotifyChangeKey | ZwNotifyChangeMultipleKeys |
| ZwNotifyChangeSession | ZwOpenDirectoryObject |
| ZwOpenEnlistment | ZwOpenEvent |
| ZwOpenEventPair | ZwOpenFile |
| ZwOpenIoCompletion | ZwOpenJobObject |
| ZwOpenKey | ZwOpenKeyEx |
| ZwOpenKeyTransacted | ZwOpenKeyTransactedEx |
| ZwOpenKeyedEvent | ZwOpenMutant |
| ZwOpenObjectAuditAlarm | ZwOpenPartition |
| ZwOpenPrivateNamespace | ZwOpenProcess |
| ZwOpenProcessToken | ZwOpenProcessTokenEx |
| ZwOpenResourceManager | ZwOpenSection |
| ZwOpenSemaphore | ZwOpenSession |
| ZwOpenSiloObject | ZwOpenSymbolicLinkObject |
| ZwOpenThread | ZwOpenThreadToken |
| ZwOpenThreadTokenEx | ZwOpenTimer |
| ZwOpenTransaction | ZwOpenTransactionManager |
| ZwPlugPlayControl | ZwPowerInformation |
| ZwPrePrepareComplete | ZwPrePrepareEnlistment |
| ZwPrepareComplete | ZwPrepareEnlistment |
| ZwPrivilegeCheck | ZwPrivilegeObjectAuditAlarm |
| ZwPrivilegedServiceAuditAlarm | ZwPropagationComplete |
| ZwPropagationFailed | ZwProtectVirtualMemory |
| ZwPulseEvent | ZwQueryAttributesFile |
| ZwQueryBootEntryOrder | ZwQueryBootOptions |
| ZwQueryDebugFilterState | ZwQueryDefaultLocale |
| ZwQueryDefaultUILanguage | ZwQueryDirectoryFile |
| ZwQueryDirectoryObject | ZwQueryDriverEntryOrder |
| ZwQueryEaFile | ZwQueryEvent |
| ZwQueryFullAttributesFile | ZwQueryInformationAtom |
| ZwQueryInformationEnlistment | ZwQueryInformationFile |
| ZwQueryInformationJobObject | ZwQueryInformationPort |
| ZwQueryInformationProcess | ZwQueryInformationResourceManager |
| ZwQueryInformationSiloObject | ZwQueryInformationThread |
| ZwQueryInformationToken | ZwQueryInformationTransaction |
| ZwQueryInformationTransactionManager | ZwQueryInformationWorkerFactory |
| ZwQueryInstallUILanguage | ZwQueryIntervalProfile |
| ZwQueryIoCompletion | ZwQueryKey |
| ZwQueryLicenseValue | ZwQueryMultipleValueKey |
| ZwQueryMutant | ZwQueryObject |
| ZwQueryOpenSubKeys | ZwQueryOpenSubKeysEx |
| ZwQueryPerformanceCounter | ZwQueryPortInformationProcess |
| ZwQueryQuotaInformationFile | ZwQuerySection |
| ZwQuerySecurityAttributesToken | ZwQuerySecurityObject |
| ZwQuerySemaphore | ZwQuerySymbolicLinkObject |
| ZwQuerySystemEnvironmentValue | ZwQuerySystemEnvironmentValueEx |
| ZwQuerySystemInformation | ZwQuerySystemInformationEx |
| ZwQuerySystemTime | ZwQueryTimer |
| ZwQueryTimerResolution | ZwQueryValueKey |
| ZwQueryVirtualMemory | ZwQueryVolumeInformationFile |
| ZwQueryWnfStateData | ZwQueryWnfStateNameInformation |
| ZwQueueApcThread | ZwQueueApcThreadEx |
| ZwRaiseException | ZwRaiseHardError |
| ZwReadFile | ZwReadFileScatter |
| ZwReadOnlyEnlistment | ZwReadRequestData |
| ZwReadVirtualMemory | ZwRecoverEnlistment |
| ZwRecoverResourceManager | ZwRecoverTransactionManager |
| ZwRegisterProtocolAddressInformation | ZwRegisterThreadTerminatePort |
| ZwReleaseKeyedEvent | ZwReleaseMutant |
| ZwReleaseSemaphore | ZwReleaseWorkerFactoryWorker |
| ZwRemoveIoCompletion | ZwRemoveIoCompletionEx |
| ZwRemoveProcessDebug | ZwRenameKey |
| ZwRenameTransactionManager | ZwReplaceKey |
| ZwReplacePartitionUnit | ZwReplyPort |
| ZwReplyWaitReceivePort | ZwReplyWaitReceivePortEx |
| ZwReplyWaitReplyPort | ZwRequestPort |
| ZwRequestWaitReplyPort | ZwResetEvent |
| ZwResetWriteWatch | ZwRestoreKey |
| ZwResumeProcess | ZwResumeThread |
| ZwRevertContainerImpersonation | ZwRollbackComplete |
| ZwRollbackEnlistment | ZwRollbackTransaction |
| ZwRollforwardTransactionManager | ZwSaveKey |
| ZwSaveKeyEx | ZwSaveMergedKeys |
| ZwSecureConnectPort | ZwSerializeBoot |
| ZwSetBootEntryOrder | ZwSetBootOptions |
| ZwSetCachedSigningLevel | ZwSetContextThread |
| ZwSetDebugFilterState | ZwSetDefaultHardErrorPort |
| ZwSetDefaultLocale | ZwSetDefaultUILanguage |
| ZwSetDriverEntryOrder | ZwSetEaFile |
| ZwSetEvent | ZwSetEventBoostPriority |
| ZwSetHighEventPair | ZwSetHighWaitLowEventPair |
| ZwSetIRTimer | ZwSetInformationDebugObject |
| ZwSetInformationEnlistment | ZwSetInformationFile |
| ZwSetInformationJobObject | ZwSetInformationKey |
| ZwSetInformationObject | ZwSetInformationProcess |
| ZwSetInformationResourceManager | ZwSetInformationSiloObject |
| ZwSetInformationSymbolicLink | ZwSetInformationThread |
| ZwSetInformationToken | ZwSetInformationTransaction |
| ZwSetInformationTransactionManager | ZwSetInformationVirtualMemory |
| ZwSetInformationWorkerFactory | ZwSetIntervalProfile |
| ZwSetIoCompletion | ZwSetIoCompletionEx |
| ZwSetLdtEntries | ZwSetLowEventPair |
| ZwSetLowWaitHighEventPair | ZwSetQuotaInformationFile |
| ZwSetSecurityObject | ZwSetSystemEnvironmentValue |
| ZwSetSystemEnvironmentValueEx | ZwSetSystemInformation |
| ZwSetSystemPowerState | ZwSetSystemTime |
| ZwSetThreadExecutionState | ZwSetTimer |
| ZwSetTimer2 | ZwSetTimerEx |
| ZwSetTimerResolution | ZwSetUuidSeed |
| ZwSetValueKey | ZwSetVolumeInformationFile |
| ZwSetWnfProcessNotificationEvent | ZwShutdownSystem |
| ZwShutdownWorkerFactory | ZwSignalAndWaitForSingleObject |
| ZwSinglePhaseReject | ZwStartProfile |
| ZwStopProfile | ZwSubscribeWnfStateChange |
| ZwSuspendProcess | ZwSuspendThread |
| ZwSystemDebugControl | ZwTerminateJobObject |
| ZwTerminateProcess | ZwTerminateSiloObject |
| ZwTerminateThread | ZwTestAlert |
| ZwThawRegistry | ZwThawTransactions |
| ZwTraceControl | ZwTraceEvent |
| ZwTranslateFilePath | ZwUmsThreadYield |
| ZwUnloadDriver | ZwUnloadKey |
| ZwUnloadKey2 | ZwUnloadKeyEx |
| ZwUnlockFile | ZwUnlockVirtualMemory |
| ZwUnmapViewOfSection | ZwUnmapViewOfSectionEx |
| ZwUnsubscribeWnfStateChange | ZwUpdateWnfStateData |
| ZwVdmControl | ZwWaitForAlertByThreadId |
| ZwWaitForDebugEvent | ZwWaitForKeyedEvent |
| ZwWaitForMultipleObjects | ZwWaitForMultipleObjects32 |
| ZwWaitForSingleObject | ZwWaitForWorkViaWorkerFactory |
| ZwWaitHighEventPair | ZwWaitLowEventPair |
| ZwWorkerFactoryWorkerReady | ZwWriteFile |
| ZwWriteFileGather | ZwWriteRequestData |
| ZwWriteVirtualMemory | ZwYieldExecution |
| _CIcos | _CIlog |
| _CIpow | _CIsin |
| _CIsqrt | __isascii |
| __iscsym | __iscsymf |
| __toascii | _alldiv |
| _alldvrm | _allmul |
| _alloca_probe | _alloca_probe_16 |
| _alloca_probe_8 | _allrem |
| _allshl | _allshr |
| _atoi64 | _aulldiv |
| _aulldvrm | _aullrem |
| _aullshr | _chkstk |
| _errno | _except_handler4_common |
| _fltused | _ftol |
| _ftol2 | _ftol2_sse |
| _i64toa | _i64toa_s |
| _i64tow | _i64tow_s |
| _itoa | _itoa_s |
| _itow | _itow_s |
| _lfind | _local_unwind4 |
| _ltoa | _ltoa_s |
| _ltow | _ltow_s |
| _makepath_s | _memccpy |
| _memicmp | _snprintf |
| _snprintf_s | _snscanf_s |
| _snwprintf | _snwprintf_s |
| _snwscanf_s | _splitpath |
| _splitpath_s | _strcmpi |
| _stricmp | _strlwr |
| _strlwr_s | _strnicmp |
| _strnset_s | _strset_s |
| _strupr | _strupr_s |
| _swprintf | _ui64toa |
| _ui64toa_s | _ui64tow |
| _ui64tow_s | _ultoa |
| _ultoa_s | _ultow |
| _ultow_s | _vscwprintf |
| _vsnprintf | _vsnprintf_s |
| _vsnwprintf | _vsnwprintf_s |
| _vswprintf | _wcsicmp |
| _wcslwr | _wcslwr_s |
| _wcsnicmp | _wcsnset_s |
| _wcsset_s | _wcstoi64 |
| _wcstoui64 | _wcsupr |
| _wcsupr_s | _wmakepath_s |
| _wsplitpath_s | _wtoi |
| _wtoi64 | _wtol |
| abs | atan |
| atan2 | atoi |
| atol | bsearch |
| ceil | cos |
| fabs | floor |
| isalnum | isalpha |
| iscntrl | isdigit |
| isgraph | islower |
| isprint | ispunct |
| isspace | isupper |
| iswalnum | iswalpha |
| iswascii | iswctype |
| iswdigit | iswgraph |
| iswlower | iswprint |
| iswspace | iswxdigit |
| isxdigit | labs |
| log | mbstowcs |
| memchr | memcmp |
| memcpy | memcpy_s |
| memmove | memmove_s |
| memset | pow |
| qsort | qsort_s |
| sin | sprintf |
| sprintf_s | sqrt |
| sscanf | sscanf_s |
| strcat | strcat_s |
| strchr | strcmp |
| strcpy | strcpy_s |
| strcspn | strlen |
| strncat | strncat_s |
| strncmp | strncpy |
| strncpy_s | strnlen |
| strpbrk | strrchr |
| strspn | strstr |
| strtok_s | strtol |
| strtoul | swprintf |
| swprintf_s | swscanf_s |
| tan | tolower |
| toupper | towlower |
| towupper | vDbgPrintEx |
| vDbgPrintExWithPrefix | vsprintf |
| vsprintf_s | vswprintf_s |
| wcscat | wcscat_s |
| wcschr | wcscmp |
| wcscpy | wcscpy_s |
| wcscspn | wcslen |
| wcsncat | wcsncat_s |
| wcsncmp | wcsncpy |
| wcsncpy_s | wcsnlen |
| wcspbrk | wcsrchr |
| wcsspn | wcsstr |
| wcstok_s | wcstol |
| wcstombs | wcstoul |
Imported Functions List
The following functions are imported by this dll:No imported functions in this file.