ntdll.dll (x64)

File description
NT Layer DLL
File version
10.0.17763.1 (WinBuild.160101.0800)
Product name
Microsoft® Windows® Operating System
Product version
10.0.17763.1
Legal copyright
© Microsoft Corporation. All rights reserved.
Company name
Microsoft Corporation
File size
1.91 MB
File modified date
2020-03-03T11:41:34.000Z
Original filename
ntdll.dll
Internal name
ntdll.dll

Links

Checksums

sha256
a76076869fb9c11f1609fa6166586cde622913cf5a04803f4936f8865c31dd1d
sha1
934917a4cd49f40675d30ba1bb08542a9cebd035
md5
0df30a16e313e6e1145987429e8c41ce

Digital signature

Signer name
Microsoft Windows
Signature is valid
Yes

Dependencies and installation

Registration required
No
Original location
Windows 10:::%windir%\WinSxS\amd64_microsoft-windows-ntdll_31bf3856ad364e35_10.0.17763.1_none_499cc82754571812
OS family
Windows 10
Exported functions
(No name), ,__C_specific_handler, ,__chkstk, ,__isascii, ,__iscsym, ,__iscsymf, ,__misaligned_access, ,__toascii, ,_atoi64, ,_errno, ,_fltused, ,_i64toa, ,_i64toa_s, ,_i64tow, ,_i64tow_s, ,_itoa, ,_itoa_s, ,_itow, ,_itow_s, ,_lfind, ,_local_unwind, ,_ltoa, ,_ltoa_s, ,_ltow, ,_ltow_s, ,_makepath_s, ,_memccpy, ,_memicmp, ,_setjmp, ,_setjmpex, ,_snprintf, ,_snprintf_s, ,_snscanf_s, ,_snwprintf, ,_snwprintf_s, ,_snwscanf_s, ,_splitpath, ,_splitpath_s, ,_strcmpi, ,_stricmp, ,_strlwr, ,_strlwr_s, ,_strnicmp, ,_strnset_s, ,_strset_s, ,_strupr, ,_strupr_s, ,_swprintf, ,_ui64toa, ,_ui64toa_s, ,_ui64tow, ,_ui64tow_s, ,_ultoa, ,_ultoa_s, ,_ultow, ,_ultow_s, ,_vscprintf, ,_vscwprintf, ,_vsnprintf, ,_vsnprintf_s, ,_vsnwprintf, ,_vsnwprintf_s, ,_vswprintf, ,_wcsicmp, ,_wcslwr, ,_wcslwr_s, ,_wcsnicmp, ,_wcsnset_s, ,_wcsset_s, ,_wcstoi64, ,_wcstoui64, ,_wcsupr, ,_wcsupr_s, ,_wmakepath_s, ,_wsplitpath_s, ,_wtoi, ,_wtoi64, ,_wtol, ,A_SHAFinal, ,A_SHAInit, ,A_SHAUpdate, ,abs, ,AlpcAdjustCompletionListConcurrencyCount, ,AlpcFreeCompletionListMessage, ,AlpcGetCompletionListLastMessageInformation, ,AlpcGetCompletionListMessageAttributes, ,AlpcGetHeaderSize, ,AlpcGetMessageAttribute, ,AlpcGetMessageFromCompletionList, ,AlpcGetOutstandingCompletionListMessageCount, ,AlpcInitializeMessageAttribute, ,AlpcMaxAllowedMessageLength, ,AlpcRegisterCompletionList, ,AlpcRegisterCompletionListWorkerThread, ,AlpcRundownCompletionList, ,AlpcUnregisterCompletionList, ,AlpcUnregisterCompletionListWorkerThread, ,ApiSetQueryApiSetPresence, ,ApiSetQueryApiSetPresenceEx, ,atan, ,atan2, ,atoi, ,atol, ,bsearch, ,bsearch_s, ,ceil, ,cos, ,CsrAllocateCaptureBuffer, ,CsrAllocateMessagePointer, ,CsrCaptureMessageBuffer, ,CsrCaptureMessageMultiUnicodeStringsInPlace, ,CsrCaptureMessageString, ,CsrCaptureTimeout, ,CsrClientCallServer, ,CsrClientConnectToServer, ,CsrFreeCaptureBuffer, ,CsrGetProcessId, ,CsrIdentifyAlertableThread, ,CsrSetPriorityClass, ,CsrVerifyRegion, ,DbgBreakPoint, ,DbgPrint, ,DbgPrintEx, ,DbgPrintReturnControlC, ,DbgPrompt, ,DbgQueryDebugFilterState, ,DbgSetDebugFilterState, ,DbgUiConnectToDbg, ,DbgUiContinue, ,DbgUiConvertStateChangeStructure, ,DbgUiConvertStateChangeStructureEx, ,DbgUiDebugActiveProcess, ,DbgUiGetThreadDebugObject, ,DbgUiIssueRemoteBreakin, ,DbgUiRemoteBreakin, ,DbgUiSetThreadDebugObject, ,DbgUiStopDebugging, ,DbgUiWaitStateChange, ,DbgUserBreakPoint, ,EtwCheckCoverage, ,EtwCreateTraceInstanceId, ,EtwDeliverDataBlock, ,EtwEnumerateProcessRegGuids, ,EtwEventActivityIdControl, ,EtwEventEnabled, ,EtwEventProviderEnabled, ,EtwEventRegister, ,EtwEventSetInformation, ,EtwEventUnregister, ,EtwEventWrite, ,EtwEventWriteEndScenario, ,EtwEventWriteEx, ,EtwEventWriteFull, ,EtwEventWriteNoRegistration, ,EtwEventWriteStartScenario, ,EtwEventWriteString, ,EtwEventWriteTransfer, ,EtwGetTraceEnableFlags, ,EtwGetTraceEnableLevel, ,EtwGetTraceLoggerHandle, ,EtwLogTraceEvent, ,EtwNotificationRegister, ,EtwNotificationUnregister, ,EtwpCreateEtwThread, ,EtwpGetCpuSpeed, ,EtwProcessPrivateLoggerRequest, ,EtwRegisterSecurityProvider, ,EtwRegisterTraceGuidsA, ,EtwRegisterTraceGuidsW, ,EtwReplyNotification, ,EtwSendNotification, ,EtwSetMark, ,EtwTraceEventInstance, ,EtwTraceMessage, ,EtwTraceMessageVa, ,EtwUnregisterTraceGuids, ,EtwWriteUMSecurityEvent, ,EvtIntReportAuthzEventAndSourceAsync, ,EvtIntReportEventAndSourceAsync, ,ExpInterlockedPopEntrySListEnd, ,ExpInterlockedPopEntrySListFault, ,ExpInterlockedPopEntrySListResume, ,fabs, ,floor, ,isalnum, ,isalpha, ,iscntrl, ,isdigit, ,isgraph, ,islower, ,isprint, ,ispunct, ,isspace, ,isupper, ,iswalnum, ,iswalpha, ,iswascii, ,iswctype, ,iswdigit, ,iswgraph, ,iswlower, ,iswprint, ,iswspace, ,iswxdigit, ,isxdigit, ,KiRaiseUserExceptionDispatcher, ,KiUserApcDispatcher, ,KiUserCallbackDispatcher, ,KiUserExceptionDispatcher, ,KiUserInvertedFunctionTable, ,labs, ,LdrAccessResource, ,LdrAddDllDirectory, ,LdrAddLoadAsDataTable, ,LdrAddRefDll, ,LdrAppxHandleIntegrityFailure, ,LdrCallEnclave, ,LdrControlFlowGuardEnforced, ,LdrCreateEnclave, ,LdrDeleteEnclave, ,LdrDisableThreadCalloutsForDll, ,LdrEnumerateLoadedModules, ,LdrEnumResources, ,LdrFastFailInLoaderCallout, ,LdrFindEntryForAddress, ,LdrFindResource_U, ,LdrFindResourceDirectory_U, ,LdrFindResourceEx_U, ,LdrFlushAlternateResourceModules, ,LdrGetDllDirectory, ,LdrGetDllFullName, ,LdrGetDllHandle, ,LdrGetDllHandleByMapping, ,LdrGetDllHandleByName, ,LdrGetDllHandleEx, ,LdrGetDllPath, ,LdrGetFailureData, ,LdrGetFileNameFromLoadAsDataTable, ,LdrGetKnownDllSectionHandle, ,LdrGetProcedureAddress, ,LdrGetProcedureAddressEx, ,LdrGetProcedureAddressForCaller, ,LdrInitializeEnclave, ,LdrInitializeThunk, ,LdrInitShimEngineDynamic, ,LdrIsModuleSxsRedirected, ,LdrLoadAlternateResourceModule, ,LdrLoadAlternateResourceModuleEx, ,LdrLoadDll, ,LdrLoadEnclaveModule, ,LdrLockLoaderLock, ,LdrOpenImageFileOptionsKey, ,LdrpResGetMappingSize, ,LdrpResGetResourceDirectory, ,LdrProcessInitializationComplete, ,LdrProcessRelocationBlock, ,LdrProcessRelocationBlockEx, ,LdrQueryImageFileExecutionOptions, ,LdrQueryImageFileExecutionOptionsEx, ,LdrQueryImageFileKeyOption, ,LdrQueryModuleServiceTags, ,LdrQueryOptionalDelayLoadedAPI, ,LdrQueryProcessModuleInformation, ,LdrRegisterDllNotification, ,LdrRemoveDllDirectory, ,LdrRemoveLoadAsDataTable, ,LdrResFindResource, ,LdrResFindResourceDirectory, ,LdrResGetRCConfig, ,LdrResolveDelayLoadedAPI, ,LdrResolveDelayLoadsFromDll, ,LdrResRelease, ,LdrResSearchResource, ,LdrRscIsTypeExist, ,LdrSetAppCompatDllRedirectionCallback, ,LdrSetDefaultDllDirectories, ,LdrSetDllDirectory, ,LdrSetDllManifestProber, ,LdrSetImplicitPathOptions, ,LdrSetMUICacheType, ,LdrShutdownProcess, ,LdrShutdownThread, ,LdrStandardizeSystemPath, ,LdrSystemDllInitBlock, ,LdrUnloadAlternateResourceModule, ,LdrUnloadAlternateResourceModuleEx, ,LdrUnloadDll, ,LdrUnlockLoaderLock, ,LdrUnregisterDllNotification, ,LdrUpdatePackageSearchPath, ,LdrVerifyImageMatchesChecksum, ,LdrVerifyImageMatchesChecksumEx, ,log, ,longjmp, ,mbstowcs, ,MD4Final, ,MD4Init, ,MD4Update, ,MD5Final, ,MD5Init, ,MD5Update, ,memchr, ,memcmp, ,memcpy, ,memcpy_s, ,memmove, ,memmove_s, ,memset, ,NlsAnsiCodePage, ,NlsMbCodePageTag, ,NlsMbOemCodePageTag, ,NtAcceptConnectPort, ,NtAccessCheck, ,NtAccessCheckAndAuditAlarm, ,NtAccessCheckByType, ,NtAccessCheckByTypeAndAuditAlarm, ,NtAccessCheckByTypeResultList, ,NtAccessCheckByTypeResultListAndAuditAlarm, ,NtAccessCheckByTypeResultListAndAuditAlarmByHandle, ,NtAcquireProcessActivityReference, ,NtAddAtom, ,NtAddAtomEx, ,NtAddBootEntry, ,NtAddDriverEntry, ,NtAdjustGroupsToken, ,NtAdjustPrivilegesToken, ,NtAdjustTokenClaimsAndDeviceGroups, ,NtAlertResumeThread, ,NtAlertThread, ,NtAlertThreadByThreadId, ,NtAllocateLocallyUniqueId, ,NtAllocateReserveObject, ,NtAllocateUserPhysicalPages, ,NtAllocateUuids, ,NtAllocateVirtualMemory, ,NtAllocateVirtualMemoryEx, ,NtAlpcAcceptConnectPort, ,NtAlpcCancelMessage, ,NtAlpcConnectPort, ,NtAlpcConnectPortEx, ,NtAlpcCreatePort, ,NtAlpcCreatePortSection, ,NtAlpcCreateResourceReserve, ,NtAlpcCreateSectionView, ,NtAlpcCreateSecurityContext, ,NtAlpcDeletePortSection, ,NtAlpcDeleteResourceReserve, ,NtAlpcDeleteSectionView, ,NtAlpcDeleteSecurityContext, ,NtAlpcDisconnectPort, ,NtAlpcImpersonateClientContainerOfPort, ,NtAlpcImpersonateClientOfPort, ,NtAlpcOpenSenderProcess, ,NtAlpcOpenSenderThread, ,NtAlpcQueryInformation, ,NtAlpcQueryInformationMessage, ,NtAlpcRevokeSecurityContext, ,NtAlpcSendWaitReceivePort, ,NtAlpcSetInformation, ,NtApphelpCacheControl, ,NtAreMappedFilesTheSame, ,NtAssignProcessToJobObject, ,NtAssociateWaitCompletionPacket, ,NtCallbackReturn, ,NtCallEnclave, ,NtCancelIoFile, ,NtCancelIoFileEx, ,NtCancelSynchronousIoFile, ,NtCancelTimer, ,NtCancelTimer2, ,NtCancelWaitCompletionPacket, ,NtClearEvent, ,NtClose, ,NtCloseObjectAuditAlarm, ,NtCommitComplete, ,NtCommitEnlistment, ,NtCommitRegistryTransaction, ,NtCommitTransaction, ,NtCompactKeys, ,NtCompareObjects, ,NtCompareSigningLevels, ,NtCompareTokens, ,NtCompleteConnectPort, ,NtCompressKey, ,NtConnectPort, ,NtContinue, ,NtConvertBetweenAuxiliaryCounterAndPerformanceCounter, ,NtCreateDebugObject, ,NtCreateDirectoryObject, ,NtCreateDirectoryObjectEx, ,NtCreateEnclave, ,NtCreateEnlistment, ,NtCreateEvent, ,NtCreateEventPair, ,NtCreateFile, ,NtCreateIoCompletion, ,NtCreateIRTimer, ,NtCreateJobObject, ,NtCreateJobSet, ,NtCreateKey, ,NtCreateKeyedEvent, ,NtCreateKeyTransacted, ,NtCreateLowBoxToken, ,NtCreateMailslotFile, ,NtCreateMutant, ,NtCreateNamedPipeFile, ,NtCreatePagingFile, ,NtCreatePartition, ,NtCreatePort, ,NtCreatePrivateNamespace, ,NtCreateProcess, ,NtCreateProcessEx, ,NtCreateProfile, ,NtCreateProfileEx, ,NtCreateRegistryTransaction, ,NtCreateResourceManager, ,NtCreateSection, ,NtCreateSectionEx, ,NtCreateSemaphore, ,NtCreateSymbolicLinkObject, ,NtCreateThread, ,NtCreateThreadEx, ,NtCreateTimer, ,NtCreateTimer2, ,NtCreateToken, ,NtCreateTokenEx, ,NtCreateTransaction, ,NtCreateTransactionManager, ,NtCreateUserProcess, ,NtCreateWaitablePort, ,NtCreateWaitCompletionPacket, ,NtCreateWnfStateName, ,NtCreateWorkerFactory, ,NtDebugActiveProcess, ,NtDebugContinue, ,NtDelayExecution, ,NtDeleteAtom, ,NtDeleteBootEntry, ,NtDeleteDriverEntry, ,NtDeleteFile, ,NtDeleteKey, ,NtDeleteObjectAuditAlarm, ,NtDeletePrivateNamespace, ,NtDeleteValueKey, ,NtDeleteWnfStateData, ,NtDeleteWnfStateName, ,NtDeviceIoControlFile, ,NtDisableLastKnownGood, ,NtDisplayString, ,NtdllDefWindowProc_A, ,NtdllDefWindowProc_W, ,NtdllDialogWndProc_A, ,NtdllDialogWndProc_W, ,NtDrawText, ,NtDuplicateObject, ,NtDuplicateToken, ,NtEnableLastKnownGood, ,NtEnumerateBootEntries, ,NtEnumerateDriverEntries, ,NtEnumerateKey, ,NtEnumerateSystemEnvironmentValuesEx, ,NtEnumerateTransactionObject, ,NtEnumerateValueKey, ,NtExtendSection, ,NtFilterBootOption, ,NtFilterToken, ,NtFilterTokenEx, ,NtFindAtom, ,NtFlushBuffersFile, ,NtFlushBuffersFileEx, ,NtFlushInstallUILanguage, ,NtFlushInstructionCache, ,NtFlushKey, ,NtFlushProcessWriteBuffers, ,NtFlushVirtualMemory, ,NtFlushWriteBuffer, ,NtFreeUserPhysicalPages, ,NtFreeVirtualMemory, ,NtFreezeRegistry, ,NtFreezeTransactions, ,NtFsControlFile, ,NtGetCachedSigningLevel, ,NtGetCompleteWnfStateSubscription, ,NtGetContextThread, ,NtGetCurrentProcessorNumber, ,NtGetCurrentProcessorNumberEx, ,NtGetDevicePowerState, ,NtGetMUIRegistryInfo, ,NtGetNextProcess, ,NtGetNextThread, ,NtGetNlsSectionPtr, ,NtGetNotificationResourceManager, ,NtGetTickCount, ,NtGetWriteWatch, ,NtImpersonateAnonymousToken, ,NtImpersonateClientOfPort, ,NtImpersonateThread, ,NtInitializeEnclave, ,NtInitializeNlsFiles, ,NtInitializeRegistry, ,NtInitiatePowerAction, ,NtIsProcessInJob, ,NtIsSystemResumeAutomatic, ,NtIsUILanguageComitted, ,NtListenPort, ,NtLoadDriver, ,NtLoadEnclaveData, ,NtLoadKey, ,NtLoadKey2, ,NtLoadKeyEx, ,NtLockFile, ,NtLockProductActivationKeys, ,NtLockRegistryKey, ,NtLockVirtualMemory, ,NtMakePermanentObject, ,NtMakeTemporaryObject, ,NtManageHotPatch, ,NtManagePartition, ,NtMapCMFModule, ,NtMapUserPhysicalPages, ,NtMapUserPhysicalPagesScatter, ,NtMapViewOfSection, ,NtMapViewOfSectionEx, ,NtModifyBootEntry, ,NtModifyDriverEntry, ,NtNotifyChangeDirectoryFile, ,NtNotifyChangeDirectoryFileEx, ,NtNotifyChangeKey, ,NtNotifyChangeMultipleKeys, ,NtNotifyChangeSession, ,NtOpenDirectoryObject, ,NtOpenEnlistment, ,NtOpenEvent, ,NtOpenEventPair, ,NtOpenFile, ,NtOpenIoCompletion, ,NtOpenJobObject, ,NtOpenKey, ,NtOpenKeyedEvent, ,NtOpenKeyEx, ,NtOpenKeyTransacted, ,NtOpenKeyTransactedEx, ,NtOpenMutant, ,NtOpenObjectAuditAlarm, ,NtOpenPartition, ,NtOpenPrivateNamespace, ,NtOpenProcess, ,NtOpenProcessToken, ,NtOpenProcessTokenEx, ,NtOpenRegistryTransaction, ,NtOpenResourceManager, ,NtOpenSection, ,NtOpenSemaphore, ,NtOpenSession, ,NtOpenSymbolicLinkObject, ,NtOpenThread, ,NtOpenThreadToken, ,NtOpenThreadTokenEx, ,NtOpenTimer, ,NtOpenTransaction, ,NtOpenTransactionManager, ,NtPlugPlayControl, ,NtPowerInformation, ,NtPrepareComplete, ,NtPrepareEnlistment, ,NtPrePrepareComplete, ,NtPrePrepareEnlistment, ,NtPrivilegeCheck, ,NtPrivilegedServiceAuditAlarm, ,NtPrivilegeObjectAuditAlarm, ,NtPropagationComplete, ,NtPropagationFailed, ,NtProtectVirtualMemory, ,NtPulseEvent, ,NtQueryAttributesFile, ,NtQueryAuxiliaryCounterFrequency, ,NtQueryBootEntryOrder, ,NtQueryBootOptions, ,NtQueryDebugFilterState, ,NtQueryDefaultLocale, ,NtQueryDefaultUILanguage, ,NtQueryDirectoryFile, ,NtQueryDirectoryFileEx, ,NtQueryDirectoryObject, ,NtQueryDriverEntryOrder, ,NtQueryEaFile, ,NtQueryEvent, ,NtQueryFullAttributesFile, ,NtQueryInformationAtom, ,NtQueryInformationByName, ,NtQueryInformationEnlistment, ,NtQueryInformationFile, ,NtQueryInformationJobObject, ,NtQueryInformationPort, ,NtQueryInformationProcess, ,NtQueryInformationResourceManager, ,NtQueryInformationThread, ,NtQueryInformationToken, ,NtQueryInformationTransaction, ,NtQueryInformationTransactionManager, ,NtQueryInformationWorkerFactory, ,NtQueryInstallUILanguage, ,NtQueryIntervalProfile, ,NtQueryIoCompletion, ,NtQueryKey, ,NtQueryLicenseValue, ,NtQueryMultipleValueKey, ,NtQueryMutant, ,NtQueryObject, ,NtQueryOpenSubKeys, ,NtQueryOpenSubKeysEx, ,NtQueryPerformanceCounter, ,NtQueryPortInformationProcess, ,NtQueryQuotaInformationFile, ,NtQuerySection, ,NtQuerySecurityAttributesToken, ,NtQuerySecurityObject, ,NtQuerySecurityPolicy, ,NtQuerySemaphore, ,NtQuerySymbolicLinkObject, ,NtQuerySystemEnvironmentValue, ,NtQuerySystemEnvironmentValueEx, ,NtQuerySystemInformation, ,NtQuerySystemInformationEx, ,NtQuerySystemTime, ,NtQueryTimer, ,NtQueryTimerResolution, ,NtQueryValueKey, ,NtQueryVirtualMemory, ,NtQueryVolumeInformationFile, ,NtQueryWnfStateData, ,NtQueryWnfStateNameInformation, ,NtQueueApcThread, ,NtQueueApcThreadEx, ,NtRaiseException, ,NtRaiseHardError, ,NtReadFile, ,NtReadFileScatter, ,NtReadOnlyEnlistment, ,NtReadRequestData, ,NtReadVirtualMemory, ,NtRecoverEnlistment, ,NtRecoverResourceManager, ,NtRecoverTransactionManager, ,NtRegisterProtocolAddressInformation, ,NtRegisterThreadTerminatePort, ,NtReleaseKeyedEvent, ,NtReleaseMutant, ,NtReleaseSemaphore, ,NtReleaseWorkerFactoryWorker, ,NtRemoveIoCompletion, ,NtRemoveIoCompletionEx, ,NtRemoveProcessDebug, ,NtRenameKey, ,NtRenameTransactionManager, ,NtReplaceKey, ,NtReplacePartitionUnit, ,NtReplyPort, ,NtReplyWaitReceivePort, ,NtReplyWaitReceivePortEx, ,NtReplyWaitReplyPort, ,NtRequestPort, ,NtRequestWaitReplyPort, ,NtResetEvent, ,NtResetWriteWatch, ,NtRestoreKey, ,NtResumeProcess, ,NtResumeThread, ,NtRevertContainerImpersonation, ,NtRollbackComplete, ,NtRollbackEnlistment, ,NtRollbackRegistryTransaction, ,NtRollbackTransaction, ,NtRollforwardTransactionManager, ,NtSaveKey, ,NtSaveKeyEx, ,NtSaveMergedKeys, ,NtSecureConnectPort, ,NtSerializeBoot, ,NtSetBootEntryOrder, ,NtSetBootOptions, ,NtSetCachedSigningLevel, ,NtSetCachedSigningLevel2, ,NtSetContextThread, ,NtSetDebugFilterState, ,NtSetDefaultHardErrorPort, ,NtSetDefaultLocale, ,NtSetDefaultUILanguage, ,NtSetDriverEntryOrder, ,NtSetEaFile, ,NtSetEvent, ,NtSetEventBoostPriority, ,NtSetHighEventPair, ,NtSetHighWaitLowEventPair, ,NtSetInformationDebugObject, ,NtSetInformationEnlistment, ,NtSetInformationFile, ,NtSetInformationJobObject, ,NtSetInformationKey, ,NtSetInformationObject, ,NtSetInformationProcess, ,NtSetInformationResourceManager, ,NtSetInformationSymbolicLink, ,NtSetInformationThread, ,NtSetInformationToken, ,NtSetInformationTransaction, ,NtSetInformationTransactionManager, ,NtSetInformationVirtualMemory, ,NtSetInformationWorkerFactory, ,NtSetIntervalProfile, ,NtSetIoCompletion, ,NtSetIoCompletionEx, ,NtSetIRTimer, ,NtSetLdtEntries, ,NtSetLowEventPair, ,NtSetLowWaitHighEventPair, ,NtSetQuotaInformationFile, ,NtSetSecurityObject, ,NtSetSystemEnvironmentValue, ,NtSetSystemEnvironmentValueEx, ,NtSetSystemInformation, ,NtSetSystemPowerState, ,NtSetSystemTime, ,NtSetThreadExecutionState, ,NtSetTimer, ,NtSetTimer2, ,NtSetTimerEx, ,NtSetTimerResolution, ,NtSetUuidSeed, ,NtSetValueKey, ,NtSetVolumeInformationFile, ,NtSetWnfProcessNotificationEvent, ,NtShutdownSystem, ,NtShutdownWorkerFactory, ,NtSignalAndWaitForSingleObject, ,NtSinglePhaseReject, ,NtStartProfile, ,NtStopProfile, ,NtSubscribeWnfStateChange, ,NtSuspendProcess, ,NtSuspendThread, ,NtSystemDebugControl, ,NtTerminateEnclave, ,NtTerminateJobObject, ,NtTerminateProcess, ,NtTerminateThread, ,NtTestAlert, ,NtThawRegistry, ,NtThawTransactions, ,NtTraceControl, ,NtTraceEvent, ,NtTranslateFilePath, ,NtUmsThreadYield, ,NtUnloadDriver, ,NtUnloadKey, ,NtUnloadKey2, ,NtUnloadKeyEx, ,NtUnlockFile, ,NtUnlockVirtualMemory, ,NtUnmapViewOfSection, ,NtUnmapViewOfSectionEx, ,NtUnsubscribeWnfStateChange, ,NtUpdateWnfStateData, ,NtVdmControl, ,NtWaitForAlertByThreadId, ,NtWaitForDebugEvent, ,NtWaitForKeyedEvent, ,NtWaitForMultipleObjects, ,NtWaitForMultipleObjects32, ,NtWaitForSingleObject, ,NtWaitForWorkViaWorkerFactory, ,NtWaitHighEventPair, ,NtWaitLowEventPair, ,NtWorkerFactoryWorkerReady, ,NtWriteFile, ,NtWriteFileGather, ,NtWriteRequestData, ,NtWriteVirtualMemory, ,NtYieldExecution, ,PfxFindPrefix, ,PfxInitialize, ,PfxInsertPrefix, ,PfxRemovePrefix, ,pow, ,PssNtCaptureSnapshot, ,PssNtDuplicateSnapshot, ,PssNtFreeRemoteSnapshot, ,PssNtFreeSnapshot, ,PssNtFreeWalkMarker, ,PssNtQuerySnapshot, ,PssNtValidateDescriptor, ,PssNtWalkSnapshot, ,qsort, ,qsort_s, ,RtlAbortRXact, ,RtlAbsoluteToSelfRelativeSD, ,RtlAcquirePebLock, ,RtlAcquirePrivilege, ,RtlAcquireReleaseSRWLockExclusive, ,RtlAcquireResourceExclusive, ,RtlAcquireResourceShared, ,RtlAcquireSRWLockExclusive, ,RtlAcquireSRWLockShared, ,RtlActivateActivationContext, ,RtlActivateActivationContextEx, ,RtlActivateActivationContextUnsafeFast, ,RtlAddAccessAllowedAce, ,RtlAddAccessAllowedAceEx, ,RtlAddAccessAllowedObjectAce, ,RtlAddAccessDeniedAce, ,RtlAddAccessDeniedAceEx, ,RtlAddAccessDeniedObjectAce, ,RtlAddAccessFilterAce, ,RtlAddAce, ,RtlAddActionToRXact, ,RtlAddAtomToAtomTable, ,RtlAddAttributeActionToRXact, ,RtlAddAuditAccessAce, ,RtlAddAuditAccessAceEx, ,RtlAddAuditAccessObjectAce, ,RtlAddCompoundAce, ,RtlAddFunctionTable, ,RtlAddGrowableFunctionTable, ,RtlAddIntegrityLabelToBoundaryDescriptor, ,RtlAddMandatoryAce, ,RtlAddProcessTrustLabelAce, ,RtlAddRefActivationContext, ,RtlAddRefMemoryStream, ,RtlAddResourceAttributeAce, ,RtlAddressInSectionTable, ,RtlAddScopedPolicyIDAce, ,RtlAddSIDToBoundaryDescriptor, ,RtlAddVectoredContinueHandler, ,RtlAddVectoredExceptionHandler, ,RtlAdjustPrivilege, ,RtlAllocateActivationContextStack, ,RtlAllocateAndInitializeSid, ,RtlAllocateAndInitializeSidEx, ,RtlAllocateHandle, ,RtlAllocateHeap, ,RtlAllocateMemoryBlockLookaside, ,RtlAllocateMemoryZone, ,RtlAllocateWnfSerializationGroup, ,RtlAnsiCharToUnicodeChar, ,RtlAnsiStringToUnicodeSize, ,RtlAnsiStringToUnicodeString, ,RtlAppendAsciizToString, ,RtlAppendPathElement, ,RtlAppendStringToString, ,RtlAppendUnicodeStringToString, ,RtlAppendUnicodeToString, ,RtlApplicationVerifierStop, ,RtlApplyRXact, ,RtlApplyRXactNoFlush, ,RtlAppxIsFileOwnedByTrustedInstaller, ,RtlAreAllAccessesGranted, ,RtlAreAnyAccessesGranted, ,RtlAreBitsClear, ,RtlAreBitsSet, ,RtlAreLongPathsEnabled, ,RtlAssert, ,RtlAvlInsertNodeEx, ,RtlAvlRemoveNode, ,RtlBarrier, ,RtlBarrierForDelete, ,RtlCallEnclaveReturn, ,RtlCancelTimer, ,RtlCanonicalizeDomainName, ,RtlCapabilityCheck, ,RtlCapabilityCheckForSingleSessionSku, ,RtlCaptureContext, ,RtlCaptureStackBackTrace, ,RtlCharToInteger, ,RtlCheckBootStatusIntegrity, ,RtlCheckForOrphanedCriticalSections, ,RtlCheckPortableOperatingSystem, ,RtlCheckRegistryKey, ,RtlCheckSandboxedToken, ,RtlCheckSystemBootStatusIntegrity, ,RtlCheckTokenCapability, ,RtlCheckTokenMembership, ,RtlCheckTokenMembershipEx, ,RtlCleanUpTEBLangLists, ,RtlClearAllBits, ,RtlClearBit, ,RtlClearBits, ,RtlClearThreadWorkOnBehalfTicket, ,RtlCloneMemoryStream, ,RtlCloneUserProcess, ,RtlCmDecodeMemIoResource, ,RtlCmEncodeMemIoResource, ,RtlCommitDebugInfo, ,RtlCommitMemoryStream, ,RtlCompactHeap, ,RtlCompareAltitudes, ,RtlCompareMemory, ,RtlCompareMemoryUlong, ,RtlCompareString, ,RtlCompareUnicodeString, ,RtlCompareUnicodeStrings, ,RtlCompleteProcessCloning, ,RtlCompressBuffer, ,RtlComputeCrc32, ,RtlComputeImportTableHash, ,RtlComputePrivatizedDllName_U, ,RtlConnectToSm, ,RtlConsoleMultiByteToUnicodeN, ,RtlContractHashTable, ,RtlConvertDeviceFamilyInfoToString, ,RtlConvertExclusiveToShared, ,RtlConvertLCIDToString, ,RtlConvertSharedToExclusive, ,RtlConvertSidToUnicodeString, ,RtlConvertSRWLockExclusiveToShared, ,RtlConvertToAutoInheritSecurityObject, ,RtlCopyBitMap, ,RtlCopyContext, ,RtlCopyExtendedContext, ,RtlCopyLuid, ,RtlCopyLuidAndAttributesArray, ,RtlCopyMappedMemory, ,RtlCopyMemory, ,RtlCopyMemoryNonTemporal, ,RtlCopyMemoryStreamTo, ,RtlCopyOutOfProcessMemoryStreamTo, ,RtlCopySecurityDescriptor, ,RtlCopySid, ,RtlCopySidAndAttributesArray, ,RtlCopyString, ,RtlCopyUnicodeString, ,RtlCrc32, ,RtlCrc64, ,RtlCreateAcl, ,RtlCreateActivationContext, ,RtlCreateAndSetSD, ,RtlCreateAtomTable, ,RtlCreateBootStatusDataFile, ,RtlCreateBoundaryDescriptor, ,RtlCreateEnvironment, ,RtlCreateEnvironmentEx, ,RtlCreateHashTable, ,RtlCreateHashTableEx, ,RtlCreateHeap, ,RtlCreateMemoryBlockLookaside, ,RtlCreateMemoryZone, ,RtlCreateProcessParameters, ,RtlCreateProcessParametersEx, ,RtlCreateProcessParametersWithTemplate, ,RtlCreateProcessReflection, ,RtlCreateQueryDebugBuffer, ,RtlCreateRegistryKey, ,RtlCreateSecurityDescriptor, ,RtlCreateServiceSid, ,RtlCreateSystemVolumeInformationFolder, ,RtlCreateTagHeap, ,RtlCreateTimer, ,RtlCreateTimerQueue, ,RtlCreateUmsCompletionList, ,RtlCreateUmsThreadContext, ,RtlCreateUnicodeString, ,RtlCreateUnicodeStringFromAsciiz, ,RtlCreateUserProcess, ,RtlCreateUserProcessEx, ,RtlCreateUserSecurityObject, ,RtlCreateUserStack, ,RtlCreateUserThread, ,RtlCreateVirtualAccountSid, ,RtlCultureNameToLCID, ,RtlCustomCPToUnicodeN, ,RtlCutoverTimeToSystemTime, ,RtlDeactivateActivationContext, ,RtlDeactivateActivationContextUnsafeFast, ,RtlDebugPrintTimes, ,RtlDecodePointer, ,RtlDecodeRemotePointer, ,RtlDecodeSystemPointer, ,RtlDeCommitDebugInfo, ,RtlDecompressBuffer, ,RtlDecompressBufferEx, ,RtlDecompressFragment, ,RtlDefaultNpAcl, ,RtlDelete, ,RtlDeleteAce, ,RtlDeleteAtomFromAtomTable, ,RtlDeleteBarrier, ,RtlDeleteBoundaryDescriptor, ,RtlDeleteCriticalSection, ,RtlDeleteElementGenericTable, ,RtlDeleteElementGenericTableAvl, ,RtlDeleteElementGenericTableAvlEx, ,RtlDeleteFunctionTable, ,RtlDeleteGrowableFunctionTable, ,RtlDeleteHashTable, ,RtlDeleteNoSplay, ,RtlDeleteRegistryValue, ,RtlDeleteResource, ,RtlDeleteSecurityObject, ,RtlDeleteTimer, ,RtlDeleteTimerQueue, ,RtlDeleteTimerQueueEx, ,RtlDeleteUmsCompletionList, ,RtlDeleteUmsThreadContext, ,RtlDeNormalizeProcessParams, ,RtlDequeueUmsCompletionListItems, ,RtlDeregisterSecureMemoryCacheCallback, ,RtlDeregisterWait, ,RtlDeregisterWaitEx, ,RtlDeriveCapabilitySidsFromName, ,RtlDestroyAtomTable, ,RtlDestroyEnvironment, ,RtlDestroyHandleTable, ,RtlDestroyHeap, ,RtlDestroyMemoryBlockLookaside, ,RtlDestroyMemoryZone, ,RtlDestroyProcessParameters, ,RtlDestroyQueryDebugBuffer, ,RtlDetectHeapLeaks, ,RtlDetermineDosPathNameType_U, ,RtlDisableThreadProfiling, ,RtlDllShutdownInProgress, ,RtlDnsHostNameToComputerName, ,RtlDoesFileExists_U, ,RtlDosApplyFileIsolationRedirection_Ustr, ,RtlDosLongPathNameToNtPathName_U_WithStatus, ,RtlDosLongPathNameToRelativeNtPathName_U_WithStatus, ,RtlDosPathNameToNtPathName_U, ,RtlDosPathNameToNtPathName_U_WithStatus, ,RtlDosPathNameToRelativeNtPathName_U, ,RtlDosPathNameToRelativeNtPathName_U_WithStatus, ,RtlDosSearchPath_U, ,RtlDosSearchPath_Ustr, ,RtlDowncaseUnicodeChar, ,RtlDowncaseUnicodeString, ,RtlDrainNonVolatileFlush, ,RtlDumpResource, ,RtlDuplicateUnicodeString, ,RtlEmptyAtomTable, ,RtlEnableEarlyCriticalSectionEventCreation, ,RtlEnableThreadProfiling, ,RtlEnclaveCallDispatch, ,RtlEnclaveCallDispatchReturn, ,RtlEncodePointer, ,RtlEncodeRemotePointer, ,RtlEncodeSystemPointer, ,RtlEndEnumerationHashTable, ,RtlEndStrongEnumerationHashTable, ,RtlEndWeakEnumerationHashTable, ,RtlEnterCriticalSection, ,RtlEnterUmsSchedulingMode, ,RtlEnumerateEntryHashTable, ,RtlEnumerateGenericTable, ,RtlEnumerateGenericTableAvl, ,RtlEnumerateGenericTableLikeADirectory, ,RtlEnumerateGenericTableWithoutSplaying, ,RtlEnumerateGenericTableWithoutSplayingAvl, ,RtlEnumProcessHeaps, ,RtlEqualComputerName, ,RtlEqualDomainName, ,RtlEqualLuid, ,RtlEqualPrefixSid, ,RtlEqualSid, ,RtlEqualString, ,RtlEqualUnicodeString, ,RtlEqualWnfChangeStamps, ,RtlEraseUnicodeString, ,RtlEthernetAddressToStringA, ,RtlEthernetAddressToStringW, ,RtlEthernetStringToAddressA, ,RtlEthernetStringToAddressW, ,RtlExecuteUmsThread, ,RtlExitUserProcess, ,RtlExitUserThread, ,RtlExpandEnvironmentStrings, ,RtlExpandEnvironmentStrings_U, ,RtlExpandHashTable, ,RtlExtendCorrelationVector, ,RtlExtendMemoryBlockLookaside, ,RtlExtendMemoryZone, ,RtlExtractBitMap, ,RtlFillMemory, ,RtlFinalReleaseOutOfProcessMemoryStream, ,RtlFindAceByType, ,RtlFindActivationContextSectionGuid, ,RtlFindActivationContextSectionString, ,RtlFindCharInUnicodeString, ,RtlFindClearBits, ,RtlFindClearBitsAndSet, ,RtlFindClearRuns, ,RtlFindClosestEncodableLength, ,RtlFindExportedRoutineByName, ,RtlFindLastBackwardRunClear, ,RtlFindLeastSignificantBit, ,RtlFindLongestRunClear, ,RtlFindMessage, ,RtlFindMostSignificantBit, ,RtlFindNextForwardRunClear, ,RtlFindSetBits, ,RtlFindSetBitsAndClear, ,RtlFindUnicodeSubstring, ,RtlFirstEntrySList, ,RtlFirstFreeAce, ,RtlFlsAlloc, ,RtlFlsFree, ,RtlFlushHeaps, ,RtlFlushNonVolatileMemory, ,RtlFlushNonVolatileMemoryRanges, ,RtlFlushSecureMemoryCache, ,RtlFormatCurrentUserKeyPath, ,RtlFormatMessage, ,RtlFormatMessageEx, ,RtlFreeActivationContextStack, ,RtlFreeAnsiString, ,RtlFreeHandle, ,RtlFreeHeap, ,RtlFreeMemoryBlockLookaside, ,RtlFreeNonVolatileToken, ,RtlFreeOemString, ,RtlFreeSid, ,RtlFreeThreadActivationContextStack, ,RtlFreeUnicodeString, ,RtlFreeUserStack, ,RtlGenerate8dot3Name, ,RtlGetAce, ,RtlGetActiveActivationContext, ,RtlGetActiveConsoleId, ,RtlGetAppContainerNamedObjectPath, ,RtlGetAppContainerParent, ,RtlGetAppContainerSidType, ,RtlGetCallersAddress, ,RtlGetCompressionWorkSpaceSize, ,RtlGetConsoleSessionForegroundProcessId, ,RtlGetControlSecurityDescriptor, ,RtlGetCriticalSectionRecursionCount, ,RtlGetCurrentDirectory_U, ,RtlGetCurrentPeb, ,RtlGetCurrentProcessorNumber, ,RtlGetCurrentProcessorNumberEx, ,RtlGetCurrentServiceSessionId, ,RtlGetCurrentTransaction, ,RtlGetCurrentUmsThread, ,RtlGetDaclSecurityDescriptor, ,RtlGetDeviceFamilyInfoEnum, ,RtlGetElementGenericTable, ,RtlGetElementGenericTableAvl, ,RtlGetEnabledExtendedFeatures, ,RtlGetExePath, ,RtlGetExtendedContextLength, ,RtlGetExtendedContextLength2, ,RtlGetExtendedFeaturesMask, ,RtlGetFileMUIPath, ,RtlGetFrame, ,RtlGetFullPathName_U, ,RtlGetFullPathName_UEx, ,RtlGetFullPathName_UstrEx, ,RtlGetFunctionTableListHead, ,RtlGetGroupSecurityDescriptor, ,RtlGetIntegerAtom, ,RtlGetInterruptTimePrecise, ,RtlGetLastNtStatus, ,RtlGetLastWin32Error, ,RtlGetLengthWithoutLastFullDosOrNtPathElement, ,RtlGetLengthWithoutTrailingPathSeperators, ,RtlGetLocaleFileMappingAddress, ,RtlGetLongestNtPathLength, ,RtlGetMultiTimePrecise, ,RtlGetNativeSystemInformation, ,RtlGetNextEntryHashTable, ,RtlGetNextUmsListItem, ,RtlGetNonVolatileToken, ,RtlGetNtGlobalFlags, ,RtlGetNtProductType, ,RtlGetNtSystemRoot, ,RtlGetNtVersionNumbers, ,RtlGetOwnerSecurityDescriptor, ,RtlGetParentLocaleName, ,RtlGetPersistedStateLocation, ,RtlGetProcessHeaps, ,RtlGetProcessPreferredUILanguages, ,RtlGetProductInfo, ,RtlGetSaclSecurityDescriptor, ,RtlGetSearchPath, ,RtlGetSecurityDescriptorRMControl, ,RtlGetSessionProperties, ,RtlGetSetBootStatusData, ,RtlGetSuiteMask, ,RtlGetSystemBootStatus, ,RtlGetSystemBootStatusEx, ,RtlGetSystemPreferredUILanguages, ,RtlGetSystemTimePrecise, ,RtlGetThreadErrorMode, ,RtlGetThreadLangIdByIndex, ,RtlGetThreadPreferredUILanguages, ,RtlGetThreadWorkOnBehalfTicket, ,RtlGetTokenNamedObjectPath, ,RtlGetUILanguageInfo, ,RtlGetUmsCompletionListEvent, ,RtlGetUnloadEventTrace, ,RtlGetUnloadEventTraceEx, ,RtlGetUserInfoHeap, ,RtlGetUserPreferredUILanguages, ,RtlGetVersion, ,RtlGrowFunctionTable, ,RtlGuardCheckLongJumpTarget, ,RtlGUIDFromString, ,RtlHashUnicodeString, ,RtlHeapTrkInitialize, ,RtlIdentifierAuthoritySid, ,RtlIdnToAscii, ,RtlIdnToNameprepUnicode, ,RtlIdnToUnicode, ,RtlImageDirectoryEntryToData, ,RtlImageNtHeader, ,RtlImageNtHeaderEx, ,RtlImageRvaToSection, ,RtlImageRvaToVa, ,RtlImpersonateSelf, ,RtlImpersonateSelfEx, ,RtlIncrementCorrelationVector, ,RtlInitAnsiString, ,RtlInitAnsiStringEx, ,RtlInitBarrier, ,RtlInitCodePageTable, ,RtlInitEnumerationHashTable, ,RtlInitializeAtomPackage, ,RtlInitializeBitMap, ,RtlInitializeBitMapEx, ,RtlInitializeConditionVariable, ,RtlInitializeContext, ,RtlInitializeCorrelationVector, ,RtlInitializeCriticalSection, ,RtlInitializeCriticalSectionAndSpinCount, ,RtlInitializeCriticalSectionEx, ,RtlInitializeExtendedContext, ,RtlInitializeExtendedContext2, ,RtlInitializeGenericTable, ,RtlInitializeGenericTableAvl, ,RtlInitializeHandleTable, ,RtlInitializeNtUserPfn, ,RtlInitializeResource, ,RtlInitializeRXact, ,RtlInitializeSid, ,RtlInitializeSidEx, ,RtlInitializeSListHead, ,RtlInitializeSRWLock, ,RtlInitMemoryStream, ,RtlInitNlsTables, ,RtlInitOutOfProcessMemoryStream, ,RtlInitString, ,RtlInitStringEx, ,RtlInitStrongEnumerationHashTable, ,RtlInitUnicodeString, ,RtlInitUnicodeStringEx, ,RtlInitWeakEnumerationHashTable, ,RtlInsertElementGenericTable, ,RtlInsertElementGenericTableAvl, ,RtlInsertElementGenericTableFull, ,RtlInsertElementGenericTableFullAvl, ,RtlInsertEntryHashTable, ,RtlInstallFunctionTableCallback, ,RtlInt64ToUnicodeString, ,RtlIntegerToChar, ,RtlIntegerToUnicodeString, ,RtlInterlockedClearBitRun, ,RtlInterlockedFlushSList, ,RtlInterlockedPopEntrySList, ,RtlInterlockedPushEntrySList, ,RtlInterlockedPushListSList, ,RtlInterlockedPushListSListEx, ,RtlInterlockedSetBitRun, ,RtlIoDecodeMemIoResource, ,RtlIoEncodeMemIoResource, ,RtlIpv4AddressToStringA, ,RtlIpv4AddressToStringExA, ,RtlIpv4AddressToStringExW, ,RtlIpv4AddressToStringW, ,RtlIpv4StringToAddressA, ,RtlIpv4StringToAddressExA, ,RtlIpv4StringToAddressExW, ,RtlIpv4StringToAddressW, ,RtlIpv6AddressToStringA, ,RtlIpv6AddressToStringExA, ,RtlIpv6AddressToStringExW, ,RtlIpv6AddressToStringW, ,RtlIpv6StringToAddressA, ,RtlIpv6StringToAddressExA, ,RtlIpv6StringToAddressExW, ,RtlIpv6StringToAddressW, ,RtlIsActivationContextActive, ,RtlIsCapabilitySid, ,RtlIsCloudFilesPlaceholder, ,RtlIsCriticalSectionLocked, ,RtlIsCriticalSectionLockedByThread, ,RtlIsCurrentProcess, ,RtlIsCurrentThread, ,RtlIsCurrentThreadAttachExempt, ,RtlIsDosDeviceName_U, ,RtlIsElevatedRid, ,RtlIsGenericTableEmpty, ,RtlIsGenericTableEmptyAvl, ,RtlIsMultiSessionSku, ,RtlIsMultiUsersInSessionSku, ,RtlIsNameInExpression, ,RtlIsNameInUnUpcasedExpression, ,RtlIsNameLegalDOS8Dot3, ,RtlIsNonEmptyDirectoryReparsePointAllowed, ,RtlIsNormalizedString, ,RtlIsPackageSid, ,RtlIsParentOfChildAppContainer, ,RtlIsPartialPlaceholder, ,RtlIsPartialPlaceholderFileHandle, ,RtlIsPartialPlaceholderFileInfo, ,RtlIsProcessorFeaturePresent, ,RtlIsStateSeparationEnabled, ,RtlIsTextUnicode, ,RtlIsThreadWithinLoaderCallout, ,RtlIsUntrustedObject, ,RtlIsValidHandle, ,RtlIsValidIndexHandle, ,RtlIsValidLocaleName, ,RtlIsValidProcessTrustLabelSid, ,RtlKnownExceptionFilter, ,RtlLargeIntegerToChar, ,RtlLCIDToCultureName, ,RtlLcidToLocaleName, ,RtlLeaveCriticalSection, ,RtlLengthRequiredSid, ,RtlLengthSecurityDescriptor, ,RtlLengthSid, ,RtlLengthSidAsUnicodeString, ,RtlLoadString, ,RtlLocaleNameToLcid, ,RtlLocalTimeToSystemTime, ,RtlLocateExtendedFeature, ,RtlLocateExtendedFeature2, ,RtlLocateLegacyContext, ,RtlLockBootStatusData, ,RtlLockCurrentThread, ,RtlLockHeap, ,RtlLockMemoryBlockLookaside, ,RtlLockMemoryStreamRegion, ,RtlLockMemoryZone, ,RtlLockModuleSection, ,RtlLogStackBackTrace, ,RtlLookupAtomInAtomTable, ,RtlLookupElementGenericTable, ,RtlLookupElementGenericTableAvl, ,RtlLookupElementGenericTableFull, ,RtlLookupElementGenericTableFullAvl, ,RtlLookupEntryHashTable, ,RtlLookupFirstMatchingElementGenericTableAvl, ,RtlLookupFunctionEntry, ,RtlLookupFunctionTable, ,RtlMakeSelfRelativeSD, ,RtlMapGenericMask, ,RtlMapSecurityErrorToNtStatus, ,RtlMoveMemory, ,RtlMultiAppendUnicodeStringBuffer, ,RtlMultiByteToUnicodeN, ,RtlMultiByteToUnicodeSize, ,RtlMultipleAllocateHeap, ,RtlMultipleFreeHeap, ,RtlNewInstanceSecurityObject, ,RtlNewSecurityGrantedAccess, ,RtlNewSecurityObject, ,RtlNewSecurityObjectEx, ,RtlNewSecurityObjectWithMultipleInheritance, ,RtlNormalizeProcessParams, ,RtlNormalizeString, ,RtlNtdllName, ,RtlNtPathNameToDosPathName, ,RtlNtStatusToDosError, ,RtlNtStatusToDosErrorNoTeb, ,RtlNumberGenericTableElements, ,RtlNumberGenericTableElementsAvl, ,RtlNumberOfClearBits, ,RtlNumberOfClearBitsInRange, ,RtlNumberOfSetBits, ,RtlNumberOfSetBitsInRange, ,RtlNumberOfSetBitsUlongPtr, ,RtlOemStringToUnicodeSize, ,RtlOemStringToUnicodeString, ,RtlOemToUnicodeN, ,RtlOpenCurrentUser, ,RtlOsDeploymentState, ,RtlOwnerAcesPresent, ,RtlpApplyLengthFunction, ,RtlpCheckDynamicTimeZoneInformation, ,RtlpCleanupRegistryKeys, ,RtlpConvertAbsoluteToRelativeSecurityAttribute, ,RtlpConvertCultureNamesToLCIDs, ,RtlpConvertLCIDsToCultureNames, ,RtlpConvertRelativeToAbsoluteSecurityAttribute, ,RtlpCreateProcessRegistryInfo, ,RtlPcToFileHeader, ,RtlpEnsureBufferSize, ,RtlpExecuteUmsThread, ,RtlpFreezeTimeBias, ,RtlpGetDeviceFamilyInfoEnum, ,RtlpGetLCIDFromLangInfoNode, ,RtlpGetNameFromLangInfoNode, ,RtlpGetSystemDefaultUILanguage, ,RtlpGetUserOrMachineUILanguage4NLS, ,RtlPinAtomInAtomTable, ,RtlpInitializeLangRegistryInfo, ,RtlpIsQualifiedLanguage, ,RtlpLoadMachineUIByPolicy, ,RtlpLoadUserUIByPolicy, ,RtlpMergeSecurityAttributeInformation, ,RtlpMuiFreeLangRegistryInfo, ,RtlpMuiRegCreateRegistryInfo, ,RtlpMuiRegFreeRegistryInfo, ,RtlpMuiRegLoadRegistryInfo, ,RtlpNotOwnerCriticalSection, ,RtlpNtCreateKey, ,RtlpNtEnumerateSubKey, ,RtlpNtMakeTemporaryKey, ,RtlpNtOpenKey, ,RtlpNtQueryValueKey, ,RtlpNtSetValueKey, ,RtlPopFrame, ,RtlpQueryDefaultUILanguage, ,RtlpQueryProcessDebugInformationFromWow64, ,RtlpQueryProcessDebugInformationRemote, ,RtlPrefixString, ,RtlPrefixUnicodeString, ,RtlpRefreshCachedUILanguage, ,RtlPrepareForProcessCloning, ,RtlProcessFlsData, ,RtlProtectHeap, ,RtlpSetInstallLanguage, ,RtlpSetPreferredUILanguages, ,RtlpSetUserPreferredUILanguages, ,RtlpTimeFieldsToTime, ,RtlpTimeToTimeFields, ,RtlPublishWnfStateData, ,RtlpUmsExecuteYieldThreadEnd, ,RtlpUmsThreadYield, ,RtlpUnWaitCriticalSection, ,RtlPushFrame, ,RtlpVerifyAndCommitUILanguageSettings, ,RtlpWaitForCriticalSection, ,RtlpWow64CtxFromAmd64, ,RtlpWow64GetContextOnAmd64, ,RtlpWow64SetContextOnAmd64, ,RtlQueryActivationContextApplicationSettings, ,RtlQueryAtomInAtomTable, ,RtlQueryCriticalSectionOwner, ,RtlQueryDepthSList, ,RtlQueryDynamicTimeZoneInformation, ,RtlQueryElevationFlags, ,RtlQueryEnvironmentVariable, ,RtlQueryEnvironmentVariable_U, ,RtlQueryHeapInformation, ,RtlQueryImageMitigationPolicy, ,RtlQueryInformationAcl, ,RtlQueryInformationActivationContext, ,RtlQueryInformationActiveActivationContext, ,RtlQueryInterfaceMemoryStream, ,RtlQueryModuleInformation, ,RtlQueryPackageClaims, ,RtlQueryPackageIdentity, ,RtlQueryPackageIdentityEx, ,RtlQueryPerformanceCounter, ,RtlQueryPerformanceFrequency, ,RtlQueryProcessBackTraceInformation, ,RtlQueryProcessDebugInformation, ,RtlQueryProcessHeapInformation, ,RtlQueryProcessLockInformation, ,RtlQueryProcessPlaceholderCompatibilityMode, ,RtlQueryProtectedPolicy, ,RtlQueryRegistryValues, ,RtlQueryRegistryValuesEx, ,RtlQueryRegistryValueWithFallback, ,RtlQueryResourcePolicy, ,RtlQuerySecurityObject, ,RtlQueryTagHeap, ,RtlQueryThreadPlaceholderCompatibilityMode, ,RtlQueryThreadProfiling, ,RtlQueryTimeZoneInformation, ,RtlQueryTokenHostIdAsUlong64, ,RtlQueryUmsThreadInformation, ,RtlQueryUnbiasedInterruptTime, ,RtlQueryValidationRunlevel, ,RtlQueryWnfMetaNotification, ,RtlQueryWnfStateData, ,RtlQueryWnfStateDataWithExplicitScope, ,RtlQueueApcWow64Thread, ,RtlQueueWorkItem, ,RtlRaiseCustomSystemEventTrigger, ,RtlRaiseException, ,RtlRaiseStatus, ,RtlRandom, ,RtlRandomEx, ,RtlRbInsertNodeEx, ,RtlRbRemoveNode, ,RtlReadMemoryStream, ,RtlReadOutOfProcessMemoryStream, ,RtlReadThreadProfilingData, ,RtlReAllocateHeap, ,RtlRealPredecessor, ,RtlRealSuccessor, ,RtlRegisterForWnfMetaNotification, ,RtlRegisterSecureMemoryCacheCallback, ,RtlRegisterThreadWithCsrss, ,RtlRegisterWait, ,RtlReleaseActivationContext, ,RtlReleaseMemoryStream, ,RtlReleasePath, ,RtlReleasePebLock, ,RtlReleasePrivilege, ,RtlReleaseRelativeName, ,RtlReleaseResource, ,RtlReleaseSRWLockExclusive, ,RtlReleaseSRWLockShared, ,RtlRemoteCall, ,RtlRemoveEntryHashTable, ,RtlRemovePrivileges, ,RtlRemoveVectoredContinueHandler, ,RtlRemoveVectoredExceptionHandler, ,RtlReplaceSidInSd, ,RtlReplaceSystemDirectoryInPath, ,RtlReportException, ,RtlReportExceptionEx, ,RtlReportSilentProcessExit, ,RtlReportSqmEscalation, ,RtlResetMemoryBlockLookaside, ,RtlResetMemoryZone, ,RtlResetNtUserPfn, ,RtlResetRtlTranslations, ,RtlRestoreBootStatusDefaults, ,RtlRestoreContext, ,RtlRestoreLastWin32Error, ,RtlRestoreSystemBootStatusDefaults, ,RtlRetrieveNtUserPfn, ,RtlRevertMemoryStream, ,RtlRunDecodeUnicodeString, ,RtlRunEncodeUnicodeString, ,RtlRunOnceBeginInitialize, ,RtlRunOnceComplete, ,RtlRunOnceExecuteOnce, ,RtlRunOnceInitialize, ,RtlSecondsSince1970ToTime, ,RtlSecondsSince1980ToTime, ,RtlSeekMemoryStream, ,RtlSelfRelativeToAbsoluteSD, ,RtlSelfRelativeToAbsoluteSD2, ,RtlSendMsgToSm, ,RtlSetAllBits, ,RtlSetAttributesSecurityDescriptor, ,RtlSetBit, ,RtlSetBits, ,RtlSetControlSecurityDescriptor, ,RtlSetCriticalSectionSpinCount, ,RtlSetCurrentDirectory_U, ,RtlSetCurrentEnvironment, ,RtlSetCurrentTransaction, ,RtlSetDaclSecurityDescriptor, ,RtlSetDynamicTimeZoneInformation, ,RtlSetEnvironmentStrings, ,RtlSetEnvironmentVar, ,RtlSetEnvironmentVariable, ,RtlSetExtendedFeaturesMask, ,RtlSetGroupSecurityDescriptor, ,RtlSetHeapInformation, ,RtlSetImageMitigationPolicy, ,RtlSetInformationAcl, ,RtlSetIoCompletionCallback, ,RtlSetLastWin32Error, ,RtlSetLastWin32ErrorAndNtStatusFromNtStatus, ,RtlSetMemoryStreamSize, ,RtlSetOwnerSecurityDescriptor, ,RtlSetPortableOperatingSystem, ,RtlSetProcessDebugInformation, ,RtlSetProcessIsCritical, ,RtlSetProcessPlaceholderCompatibilityMode, ,RtlSetProcessPreferredUILanguages, ,RtlSetProtectedPolicy, ,RtlSetProxiedProcessId, ,RtlSetSaclSecurityDescriptor, ,RtlSetSearchPathMode, ,RtlSetSecurityDescriptorRMControl, ,RtlSetSecurityObject, ,RtlSetSecurityObjectEx, ,RtlSetSystemBootStatus, ,RtlSetSystemBootStatusEx, ,RtlSetThreadErrorMode, ,RtlSetThreadIsCritical, ,RtlSetThreadPlaceholderCompatibilityMode, ,RtlSetThreadPoolStartFunc, ,RtlSetThreadPreferredUILanguages, ,RtlSetThreadSubProcessTag, ,RtlSetThreadWorkOnBehalfTicket, ,RtlSetTimer, ,RtlSetTimeZoneInformation, ,RtlSetUmsThreadInformation, ,RtlSetUnhandledExceptionFilter, ,RtlSetUserFlagsHeap, ,RtlSetUserValueHeap, ,RtlSidDominates, ,RtlSidDominatesForTrust, ,RtlSidEqualLevel, ,RtlSidHashInitialize, ,RtlSidHashLookup, ,RtlSidIsHigherLevel, ,RtlSizeHeap, ,RtlSleepConditionVariableCS, ,RtlSleepConditionVariableSRW, ,RtlSplay, ,RtlStartRXact, ,RtlStatMemoryStream, ,RtlStringFromGUID, ,RtlStringFromGUIDEx, ,RtlStronglyEnumerateEntryHashTable, ,RtlSubAuthorityCountSid, ,RtlSubAuthoritySid, ,RtlSubscribeWnfStateChangeNotification, ,RtlSubtreePredecessor, ,RtlSubtreeSuccessor, ,RtlSwitchedVVI, ,RtlSystemTimeToLocalTime, ,RtlTestAndPublishWnfStateData, ,RtlTestBit, ,RtlTestBitEx, ,RtlTestProtectedAccess, ,RtlTimeFieldsToTime, ,RtlTimeToElapsedTimeFields, ,RtlTimeToSecondsSince1970, ,RtlTimeToSecondsSince1980, ,RtlTimeToTimeFields, ,RtlTraceDatabaseAdd, ,RtlTraceDatabaseCreate, ,RtlTraceDatabaseDestroy, ,RtlTraceDatabaseEnumerate, ,RtlTraceDatabaseFind, ,RtlTraceDatabaseLock, ,RtlTraceDatabaseUnlock, ,RtlTraceDatabaseValidate, ,RtlTryAcquirePebLock, ,RtlTryAcquireSRWLockExclusive, ,RtlTryAcquireSRWLockShared, ,RtlTryConvertSRWLockSharedToExclusiveOrRelease, ,RtlTryEnterCriticalSection, ,RtlUmsThreadYield, ,RtlUnhandledExceptionFilter, ,RtlUnhandledExceptionFilter2, ,RtlUnicodeStringToAnsiSize, ,RtlUnicodeStringToAnsiString, ,RtlUnicodeStringToCountedOemString, ,RtlUnicodeStringToInteger, ,RtlUnicodeStringToOemSize, ,RtlUnicodeStringToOemString, ,RtlUnicodeToCustomCPN, ,RtlUnicodeToMultiByteN, ,RtlUnicodeToMultiByteSize, ,RtlUnicodeToOemN, ,RtlUnicodeToUTF8N, ,RtlUniform, ,RtlUnlockBootStatusData, ,RtlUnlockCurrentThread, ,RtlUnlockHeap, ,RtlUnlockMemoryBlockLookaside, ,RtlUnlockMemoryStreamRegion, ,RtlUnlockMemoryZone, ,RtlUnlockModuleSection, ,RtlUnsubscribeWnfNotificationWaitForCompletion, ,RtlUnsubscribeWnfNotificationWithCompletionCallback, ,RtlUnsubscribeWnfStateChangeNotification, ,RtlUnwind, ,RtlUnwindEx, ,RtlUpcaseUnicodeChar, ,RtlUpcaseUnicodeString, ,RtlUpcaseUnicodeStringToAnsiString, ,RtlUpcaseUnicodeStringToCountedOemString, ,RtlUpcaseUnicodeStringToOemString, ,RtlUpcaseUnicodeToCustomCPN, ,RtlUpcaseUnicodeToMultiByteN, ,RtlUpcaseUnicodeToOemN, ,RtlUpdateClonedCriticalSection, ,RtlUpdateClonedSRWLock, ,RtlUpdateTimer, ,RtlUpperChar, ,RtlUpperString, ,RtlUserFiberStart, ,RtlUserThreadStart, ,RtlUTF8ToUnicodeN, ,RtlValidAcl, ,RtlValidateCorrelationVector, ,RtlValidateHeap, ,RtlValidateProcessHeaps, ,RtlValidateUnicodeString, ,RtlValidProcessProtection, ,RtlValidRelativeSecurityDescriptor, ,RtlValidSecurityDescriptor, ,RtlValidSid, ,RtlVerifyVersionInfo, ,RtlVirtualUnwind, ,RtlWaitForWnfMetaNotification, ,RtlWaitOnAddress, ,RtlWakeAddressAll, ,RtlWakeAddressAllNoFence, ,RtlWakeAddressSingle, ,RtlWakeAddressSingleNoFence, ,RtlWakeAllConditionVariable, ,RtlWakeConditionVariable, ,RtlWalkFrameChain, ,RtlWalkHeap, ,RtlWeaklyEnumerateEntryHashTable, ,RtlWerpReportException, ,RtlWnfCompareChangeStamp, ,RtlWnfDllUnloadCallback, ,RtlWow64CallFunction64, ,RtlWow64EnableFsRedirection, ,RtlWow64EnableFsRedirectionEx, ,RtlWow64GetCpuAreaInfo, ,RtlWow64GetCurrentCpuArea, ,RtlWow64GetCurrentMachine, ,RtlWow64GetEquivalentMachineCHPE, ,RtlWow64GetProcessMachines, ,RtlWow64GetSharedInfoProcess, ,RtlWow64GetThreadContext, ,RtlWow64GetThreadSelectorEntry, ,RtlWow64IsWowGuestMachineSupported, ,RtlWow64LogMessageInEventLogger, ,RtlWow64PopAllCrossProcessWork, ,RtlWow64PopCrossProcessWork, ,RtlWow64PushCrossProcessWork, ,RtlWow64SetThreadContext, ,RtlWow64SuspendThread, ,RtlWriteMemoryStream, ,RtlWriteNonVolatileMemory, ,RtlWriteRegistryValue, ,RtlxAnsiStringToUnicodeSize, ,RtlxOemStringToUnicodeSize, ,RtlxUnicodeStringToAnsiSize, ,RtlxUnicodeStringToOemSize, ,RtlZeroHeap, ,RtlZeroMemory, ,RtlZombifyActivationContext, ,SbExecuteProcedure, ,SbSelectProcedure, ,ShipAssert, ,ShipAssertGetBufferInfo, ,ShipAssertMsgA, ,ShipAssertMsgW, ,sin, ,sprintf, ,sprintf_s, ,sqrt, ,sscanf, ,sscanf_s, ,strcat, ,strcat_s, ,strchr, ,strcmp, ,strcpy, ,strcpy_s, ,strcspn, ,strlen, ,strncat, ,strncat_s, ,strncmp, ,strncpy, ,strncpy_s, ,strnlen, ,strpbrk, ,strrchr, ,strspn, ,strstr, ,strtok_s, ,strtol, ,strtoul, ,swprintf, ,swprintf_s, ,swscanf_s, ,tan, ,tolower, ,toupper, ,towlower, ,towupper, ,TpAllocAlpcCompletion, ,TpAllocAlpcCompletionEx, ,TpAllocCleanupGroup, ,TpAllocIoCompletion, ,TpAllocJobNotification, ,TpAllocPool, ,TpAllocTimer, ,TpAllocWait, ,TpAllocWork, ,TpAlpcRegisterCompletionList, ,TpAlpcUnregisterCompletionList, ,TpCallbackDetectedUnrecoverableError, ,TpCallbackIndependent, ,TpCallbackLeaveCriticalSectionOnCompletion, ,TpCallbackMayRunLong, ,TpCallbackReleaseMutexOnCompletion, ,TpCallbackReleaseSemaphoreOnCompletion, ,TpCallbackSendAlpcMessageOnCompletion, ,TpCallbackSendPendingAlpcMessage, ,TpCallbackSetEventOnCompletion, ,TpCallbackUnloadDllOnCompletion, ,TpCancelAsyncIoOperation, ,TpCaptureCaller, ,TpCheckTerminateWorker, ,TpDbgDumpHeapUsage, ,TpDbgSetLogRoutine, ,TpDisablePoolCallbackChecks, ,TpDisassociateCallback, ,TpIsTimerSet, ,TpPostWork, ,TpQueryPoolStackInformation, ,TpReleaseAlpcCompletion, ,TpReleaseCleanupGroup, ,TpReleaseCleanupGroupMembers, ,TpReleaseIoCompletion, ,TpReleaseJobNotification, ,TpReleasePool, ,TpReleaseTimer, ,TpReleaseWait, ,TpReleaseWork, ,TpSetDefaultPoolMaxThreads, ,TpSetDefaultPoolStackInformation, ,TpSetPoolMaxThreads, ,TpSetPoolMaxThreadsSoftLimit, ,TpSetPoolMinThreads, ,TpSetPoolStackInformation, ,TpSetPoolThreadBasePriority, ,TpSetPoolWorkerThreadIdleTimeout, ,TpSetTimer, ,TpSetTimerEx, ,TpSetWait, ,TpSetWaitEx, ,TpSimpleTryPost, ,TpStartAsyncIoOperation, ,TpTimerOutstandingCallbackCount, ,TpTrimPools, ,TpWaitForAlpcCompletion, ,TpWaitForIoCompletion, ,TpWaitForJobNotification, ,TpWaitForTimer, ,TpWaitForWait, ,TpWaitForWork, ,vDbgPrintEx, ,vDbgPrintExWithPrefix, ,VerSetConditionMask, ,vsprintf, ,vsprintf_s, ,vswprintf_s, ,wcscat, ,wcscat_s, ,wcschr, ,wcscmp, ,wcscpy, ,wcscpy_s, ,wcscspn, ,wcslen, ,wcsncat, ,wcsncat_s, ,wcsncmp, ,wcsncpy, ,wcsncpy_s, ,wcsnlen, ,wcspbrk, ,wcsrchr, ,wcsspn, ,wcsstr, ,wcstok_s, ,wcstol, ,wcstombs, ,wcstoul, ,WerReportExceptionWorker, ,WerReportSQMEvent, ,WinSqmAddToAverageDWORD, ,WinSqmAddToStream, ,WinSqmAddToStreamEx, ,WinSqmCheckEscalationAddToStreamEx, ,WinSqmCheckEscalationSetDWORD, ,WinSqmCheckEscalationSetDWORD64, ,WinSqmCheckEscalationSetString, ,WinSqmCommonDatapointDelete, ,WinSqmCommonDatapointSetDWORD, ,WinSqmCommonDatapointSetDWORD64, ,WinSqmCommonDatapointSetStreamEx, ,WinSqmCommonDatapointSetString, ,WinSqmEndSession, ,WinSqmEventEnabled, ,WinSqmEventWrite, ,WinSqmGetEscalationRuleStatus, ,WinSqmGetInstrumentationProperty, ,WinSqmIncrementDWORD, ,WinSqmIsOptedIn, ,WinSqmIsOptedInEx, ,WinSqmIsSessionDisabled, ,WinSqmSetDWORD, ,WinSqmSetDWORD64, ,WinSqmSetEscalationInfo, ,WinSqmSetIfMaxDWORD, ,WinSqmSetIfMinDWORD, ,WinSqmSetString, ,WinSqmStartSession, ,WinSqmStartSessionForPartner, ,WinSqmStartSqmOptinListener, ,ZwAcceptConnectPort, ,ZwAccessCheck, ,ZwAccessCheckAndAuditAlarm, ,ZwAccessCheckByType, ,ZwAccessCheckByTypeAndAuditAlarm, ,ZwAccessCheckByTypeResultList, ,ZwAccessCheckByTypeResultListAndAuditAlarm, ,ZwAccessCheckByTypeResultListAndAuditAlarmByHandle, ,ZwAcquireProcessActivityReference, ,ZwAddAtom, ,ZwAddAtomEx, ,ZwAddBootEntry, ,ZwAddDriverEntry, ,ZwAdjustGroupsToken, ,ZwAdjustPrivilegesToken, ,ZwAdjustTokenClaimsAndDeviceGroups, ,ZwAlertResumeThread, ,ZwAlertThread, ,ZwAlertThreadByThreadId, ,ZwAllocateLocallyUniqueId, ,ZwAllocateReserveObject, ,ZwAllocateUserPhysicalPages, ,ZwAllocateUuids, ,ZwAllocateVirtualMemory, ,ZwAllocateVirtualMemoryEx, ,ZwAlpcAcceptConnectPort, ,ZwAlpcCancelMessage, ,ZwAlpcConnectPort, ,ZwAlpcConnectPortEx, ,ZwAlpcCreatePort, ,ZwAlpcCreatePortSection, ,ZwAlpcCreateResourceReserve, ,ZwAlpcCreateSectionView, ,ZwAlpcCreateSecurityContext, ,ZwAlpcDeletePortSection, ,ZwAlpcDeleteResourceReserve, ,ZwAlpcDeleteSectionView, ,ZwAlpcDeleteSecurityContext, ,ZwAlpcDisconnectPort, ,ZwAlpcImpersonateClientContainerOfPort, ,ZwAlpcImpersonateClientOfPort, ,ZwAlpcOpenSenderProcess, ,ZwAlpcOpenSenderThread, ,ZwAlpcQueryInformation, ,ZwAlpcQueryInformationMessage, ,ZwAlpcRevokeSecurityContext, ,ZwAlpcSendWaitReceivePort, ,ZwAlpcSetInformation, ,ZwApphelpCacheControl, ,ZwAreMappedFilesTheSame, ,ZwAssignProcessToJobObject, ,ZwAssociateWaitCompletionPacket, ,ZwCallbackReturn, ,ZwCallEnclave, ,ZwCancelIoFile, ,ZwCancelIoFileEx, ,ZwCancelSynchronousIoFile, ,ZwCancelTimer, ,ZwCancelTimer2, ,ZwCancelWaitCompletionPacket, ,ZwClearEvent, ,ZwClose, ,ZwCloseObjectAuditAlarm, ,ZwCommitComplete, ,ZwCommitEnlistment, ,ZwCommitRegistryTransaction, ,ZwCommitTransaction, ,ZwCompactKeys, ,ZwCompareObjects, ,ZwCompareSigningLevels, ,ZwCompareTokens, ,ZwCompleteConnectPort, ,ZwCompressKey, ,ZwConnectPort, ,ZwContinue, ,ZwConvertBetweenAuxiliaryCounterAndPerformanceCounter, ,ZwCreateDebugObject, ,ZwCreateDirectoryObject, ,ZwCreateDirectoryObjectEx, ,ZwCreateEnclave, ,ZwCreateEnlistment, ,ZwCreateEvent, ,ZwCreateEventPair, ,ZwCreateFile, ,ZwCreateIoCompletion, ,ZwCreateIRTimer, ,ZwCreateJobObject, ,ZwCreateJobSet, ,ZwCreateKey, ,ZwCreateKeyedEvent, ,ZwCreateKeyTransacted, ,ZwCreateLowBoxToken, ,ZwCreateMailslotFile, ,ZwCreateMutant, ,ZwCreateNamedPipeFile, ,ZwCreatePagingFile, ,ZwCreatePartition, ,ZwCreatePort, ,ZwCreatePrivateNamespace, ,ZwCreateProcess, ,ZwCreateProcessEx, ,ZwCreateProfile, ,ZwCreateProfileEx, ,ZwCreateRegistryTransaction, ,ZwCreateResourceManager, ,ZwCreateSection, ,ZwCreateSectionEx, ,ZwCreateSemaphore, ,ZwCreateSymbolicLinkObject, ,ZwCreateThread, ,ZwCreateThreadEx, ,ZwCreateTimer, ,ZwCreateTimer2, ,ZwCreateToken, ,ZwCreateTokenEx, ,ZwCreateTransaction, ,ZwCreateTransactionManager, ,ZwCreateUserProcess, ,ZwCreateWaitablePort, ,ZwCreateWaitCompletionPacket, ,ZwCreateWnfStateName, ,ZwCreateWorkerFactory, ,ZwDebugActiveProcess, ,ZwDebugContinue, ,ZwDelayExecution, ,ZwDeleteAtom, ,ZwDeleteBootEntry, ,ZwDeleteDriverEntry, ,ZwDeleteFile, ,ZwDeleteKey, ,ZwDeleteObjectAuditAlarm, ,ZwDeletePrivateNamespace, ,ZwDeleteValueKey, ,ZwDeleteWnfStateData, ,ZwDeleteWnfStateName, ,ZwDeviceIoControlFile, ,ZwDisableLastKnownGood, ,ZwDisplayString, ,ZwDrawText, ,ZwDuplicateObject, ,ZwDuplicateToken, ,ZwEnableLastKnownGood, ,ZwEnumerateBootEntries, ,ZwEnumerateDriverEntries, ,ZwEnumerateKey, ,ZwEnumerateSystemEnvironmentValuesEx, ,ZwEnumerateTransactionObject, ,ZwEnumerateValueKey, ,ZwExtendSection, ,ZwFilterBootOption, ,ZwFilterToken, ,ZwFilterTokenEx, ,ZwFindAtom, ,ZwFlushBuffersFile, ,ZwFlushBuffersFileEx, ,ZwFlushInstallUILanguage, ,ZwFlushInstructionCache, ,ZwFlushKey, ,ZwFlushProcessWriteBuffers, ,ZwFlushVirtualMemory, ,ZwFlushWriteBuffer, ,ZwFreeUserPhysicalPages, ,ZwFreeVirtualMemory, ,ZwFreezeRegistry, ,ZwFreezeTransactions, ,ZwFsControlFile, ,ZwGetCachedSigningLevel, ,ZwGetCompleteWnfStateSubscription, ,ZwGetContextThread, ,ZwGetCurrentProcessorNumber, ,ZwGetCurrentProcessorNumberEx, ,ZwGetDevicePowerState, ,ZwGetMUIRegistryInfo, ,ZwGetNextProcess, ,ZwGetNextThread, ,ZwGetNlsSectionPtr, ,ZwGetNotificationResourceManager, ,ZwGetWriteWatch, ,ZwImpersonateAnonymousToken, ,ZwImpersonateClientOfPort, ,ZwImpersonateThread, ,ZwInitializeEnclave, ,ZwInitializeNlsFiles, ,ZwInitializeRegistry, ,ZwInitiatePowerAction, ,ZwIsProcessInJob, ,ZwIsSystemResumeAutomatic, ,ZwIsUILanguageComitted, ,ZwListenPort, ,ZwLoadDriver, ,ZwLoadEnclaveData, ,ZwLoadKey, ,ZwLoadKey2, ,ZwLoadKeyEx, ,ZwLockFile, ,ZwLockProductActivationKeys, ,ZwLockRegistryKey, ,ZwLockVirtualMemory, ,ZwMakePermanentObject, ,ZwMakeTemporaryObject, ,ZwManageHotPatch, ,ZwManagePartition, ,ZwMapCMFModule, ,ZwMapUserPhysicalPages, ,ZwMapUserPhysicalPagesScatter, ,ZwMapViewOfSection, ,ZwMapViewOfSectionEx, ,ZwModifyBootEntry, ,ZwModifyDriverEntry, ,ZwNotifyChangeDirectoryFile, ,ZwNotifyChangeDirectoryFileEx, ,ZwNotifyChangeKey, ,ZwNotifyChangeMultipleKeys, ,ZwNotifyChangeSession, ,ZwOpenDirectoryObject, ,ZwOpenEnlistment, ,ZwOpenEvent, ,ZwOpenEventPair, ,ZwOpenFile, ,ZwOpenIoCompletion, ,ZwOpenJobObject, ,ZwOpenKey, ,ZwOpenKeyedEvent, ,ZwOpenKeyEx, ,ZwOpenKeyTransacted, ,ZwOpenKeyTransactedEx, ,ZwOpenMutant, ,ZwOpenObjectAuditAlarm, ,ZwOpenPartition, ,ZwOpenPrivateNamespace, ,ZwOpenProcess, ,ZwOpenProcessToken, ,ZwOpenProcessTokenEx, ,ZwOpenRegistryTransaction, ,ZwOpenResourceManager, ,ZwOpenSection, ,ZwOpenSemaphore, ,ZwOpenSession, ,ZwOpenSymbolicLinkObject, ,ZwOpenThread, ,ZwOpenThreadToken, ,ZwOpenThreadTokenEx, ,ZwOpenTimer, ,ZwOpenTransaction, ,ZwOpenTransactionManager, ,ZwPlugPlayControl, ,ZwPowerInformation, ,ZwPrepareComplete, ,ZwPrepareEnlistment, ,ZwPrePrepareComplete, ,ZwPrePrepareEnlistment, ,ZwPrivilegeCheck, ,ZwPrivilegedServiceAuditAlarm, ,ZwPrivilegeObjectAuditAlarm, ,ZwPropagationComplete, ,ZwPropagationFailed, ,ZwProtectVirtualMemory, ,ZwPulseEvent, ,ZwQueryAttributesFile, ,ZwQueryAuxiliaryCounterFrequency, ,ZwQueryBootEntryOrder, ,ZwQueryBootOptions, ,ZwQueryDebugFilterState, ,ZwQueryDefaultLocale, ,ZwQueryDefaultUILanguage, ,ZwQueryDirectoryFile, ,ZwQueryDirectoryFileEx, ,ZwQueryDirectoryObject, ,ZwQueryDriverEntryOrder, ,ZwQueryEaFile, ,ZwQueryEvent, ,ZwQueryFullAttributesFile, ,ZwQueryInformationAtom, ,ZwQueryInformationByName, ,ZwQueryInformationEnlistment, ,ZwQueryInformationFile, ,ZwQueryInformationJobObject, ,ZwQueryInformationPort, ,ZwQueryInformationProcess, ,ZwQueryInformationResourceManager, ,ZwQueryInformationThread, ,ZwQueryInformationToken, ,ZwQueryInformationTransaction, ,ZwQueryInformationTransactionManager, ,ZwQueryInformationWorkerFactory, ,ZwQueryInstallUILanguage, ,ZwQueryIntervalProfile, ,ZwQueryIoCompletion, ,ZwQueryKey, ,ZwQueryLicenseValue, ,ZwQueryMultipleValueKey, ,ZwQueryMutant, ,ZwQueryObject, ,ZwQueryOpenSubKeys, ,ZwQueryOpenSubKeysEx, ,ZwQueryPerformanceCounter, ,ZwQueryPortInformationProcess, ,ZwQueryQuotaInformationFile, ,ZwQuerySection, ,ZwQuerySecurityAttributesToken, ,ZwQuerySecurityObject, ,ZwQuerySecurityPolicy, ,ZwQuerySemaphore, ,ZwQuerySymbolicLinkObject, ,ZwQuerySystemEnvironmentValue, ,ZwQuerySystemEnvironmentValueEx, ,ZwQuerySystemInformation, ,ZwQuerySystemInformationEx, ,ZwQuerySystemTime, ,ZwQueryTimer, ,ZwQueryTimerResolution, ,ZwQueryValueKey, ,ZwQueryVirtualMemory, ,ZwQueryVolumeInformationFile, ,ZwQueryWnfStateData, ,ZwQueryWnfStateNameInformation, ,ZwQueueApcThread, ,ZwQueueApcThreadEx, ,ZwRaiseException, ,ZwRaiseHardError, ,ZwReadFile, ,ZwReadFileScatter, ,ZwReadOnlyEnlistment, ,ZwReadRequestData, ,ZwReadVirtualMemory, ,ZwRecoverEnlistment, ,ZwRecoverResourceManager, ,ZwRecoverTransactionManager, ,ZwRegisterProtocolAddressInformation, ,ZwRegisterThreadTerminatePort, ,ZwReleaseKeyedEvent, ,ZwReleaseMutant, ,ZwReleaseSemaphore, ,ZwReleaseWorkerFactoryWorker, ,ZwRemoveIoCompletion, ,ZwRemoveIoCompletionEx, ,ZwRemoveProcessDebug, ,ZwRenameKey, ,ZwRenameTransactionManager, ,ZwReplaceKey, ,ZwReplacePartitionUnit, ,ZwReplyPort, ,ZwReplyWaitReceivePort, ,ZwReplyWaitReceivePortEx, ,ZwReplyWaitReplyPort, ,ZwRequestPort, ,ZwRequestWaitReplyPort, ,ZwResetEvent, ,ZwResetWriteWatch, ,ZwRestoreKey, ,ZwResumeProcess, ,ZwResumeThread, ,ZwRevertContainerImpersonation, ,ZwRollbackComplete, ,ZwRollbackEnlistment, ,ZwRollbackRegistryTransaction, ,ZwRollbackTransaction, ,ZwRollforwardTransactionManager, ,ZwSaveKey, ,ZwSaveKeyEx, ,ZwSaveMergedKeys, ,ZwSecureConnectPort, ,ZwSerializeBoot, ,ZwSetBootEntryOrder, ,ZwSetBootOptions, ,ZwSetCachedSigningLevel, ,ZwSetCachedSigningLevel2, ,ZwSetContextThread, ,ZwSetDebugFilterState, ,ZwSetDefaultHardErrorPort, ,ZwSetDefaultLocale, ,ZwSetDefaultUILanguage, ,ZwSetDriverEntryOrder, ,ZwSetEaFile, ,ZwSetEvent, ,ZwSetEventBoostPriority, ,ZwSetHighEventPair, ,ZwSetHighWaitLowEventPair, ,ZwSetInformationDebugObject, ,ZwSetInformationEnlistment, ,ZwSetInformationFile, ,ZwSetInformationJobObject, ,ZwSetInformationKey, ,ZwSetInformationObject, ,ZwSetInformationProcess, ,ZwSetInformationResourceManager, ,ZwSetInformationSymbolicLink, ,ZwSetInformationThread, ,ZwSetInformationToken, ,ZwSetInformationTransaction, ,ZwSetInformationTransactionManager, ,ZwSetInformationVirtualMemory, ,ZwSetInformationWorkerFactory, ,ZwSetIntervalProfile, ,ZwSetIoCompletion, ,ZwSetIoCompletionEx, ,ZwSetIRTimer, ,ZwSetLdtEntries, ,ZwSetLowEventPair, ,ZwSetLowWaitHighEventPair, ,ZwSetQuotaInformationFile, ,ZwSetSecurityObject, ,ZwSetSystemEnvironmentValue, ,ZwSetSystemEnvironmentValueEx, ,ZwSetSystemInformation, ,ZwSetSystemPowerState, ,ZwSetSystemTime, ,ZwSetThreadExecutionState, ,ZwSetTimer, ,ZwSetTimer2, ,ZwSetTimerEx, ,ZwSetTimerResolution, ,ZwSetUuidSeed, ,ZwSetValueKey, ,ZwSetVolumeInformationFile, ,ZwSetWnfProcessNotificationEvent, ,ZwShutdownSystem, ,ZwShutdownWorkerFactory, ,ZwSignalAndWaitForSingleObject, ,ZwSinglePhaseReject, ,ZwStartProfile, ,ZwStopProfile, ,ZwSubscribeWnfStateChange, ,ZwSuspendProcess, ,ZwSuspendThread, ,ZwSystemDebugControl, ,ZwTerminateEnclave, ,ZwTerminateJobObject, ,ZwTerminateProcess, ,ZwTerminateThread, ,ZwTestAlert, ,ZwThawRegistry, ,ZwThawTransactions, ,ZwTraceControl, ,ZwTraceEvent, ,ZwTranslateFilePath, ,ZwUmsThreadYield, ,ZwUnloadDriver, ,ZwUnloadKey, ,ZwUnloadKey2, ,ZwUnloadKeyEx, ,ZwUnlockFile, ,ZwUnlockVirtualMemory, ,ZwUnmapViewOfSection, ,ZwUnmapViewOfSectionEx, ,ZwUnsubscribeWnfStateChange, ,ZwUpdateWnfStateData, ,ZwVdmControl, ,ZwWaitForAlertByThreadId, ,ZwWaitForDebugEvent, ,ZwWaitForKeyedEvent, ,ZwWaitForMultipleObjects, ,ZwWaitForMultipleObjects32, ,ZwWaitForSingleObject, ,ZwWaitForWorkViaWorkerFactory, ,ZwWaitHighEventPair, ,ZwWaitLowEventPair, ,ZwWorkerFactoryWorkerReady, ,ZwWriteFile, ,ZwWriteFileGather, ,ZwWriteRequestData, ,ZwWriteVirtualMemory, ,ZwYieldExecution.

Statistics

Added
2020-4-16 15:24:12
Last database entry update
2020-4-16 15:24:12