NtOpenThread@16
NtOpenThreadToken@16
NtOpenTimer@12
-NtPlugPlayControl@16
+NtPlugPlayControl@12
NtPrivilegeCheck@12
NtPrivilegedServiceAuditAlarm@20
NtPrivilegeObjectAuditAlarm@24
NtQueryMultipleValueKey@24
NtQueryMutant@20
NtQueryObject@20
-NtQueryOleDirectoryFile@44
NtQueryPerformanceCounter@8
NtQuerySection@20
NtQuerySecurityObject@20
RtlCheckRegistryKey@8
RtlClearAllBits@4
RtlClearBits@12
-;RtlClosePropertySet
RtlCompactHeap@8
RtlCompareMemory@12
RtlCompareMemoryUlong@12
RtlCreateEnvironment@8
RtlCreateHeap@24
RtlCreateProcessParameters@40
-;RtlCreatePropertySet
RtlCreateQueryDebugBuffer@8
RtlCreateRegistryKey@8
RtlCreateSecurityDescriptor@8
RtlDeleteAce@8
RtlDeleteAtomFromAtomTable@8
RtlDeleteCriticalSection@4
-RtlDuplicateUnicodeString@12
-RtlSetCriticalSectionSpinCount@8
;RtlDeleteElementGenericTable
;RtlDeleteNoSplay
RtlDeleteOwnersRanges@8
RtlDowncaseUnicodeChar@4
RtlDowncaseUnicodeString@12
RtlDumpResource@4
+RtlDuplicateUnicodeString@12
RtlEmptyAtomTable@8
RtlEnlargedIntegerMultiply@8
RtlEnlargedUnsignedDivide@16
RtlEnumProcessHeaps@8
;RtlEnumerateGenericTable
;RtlEnumerateGenericTableWithoutSplaying
-;RtlEnumerateProperties
RtlEqualComputerName@8
RtlEqualDomainName@8
RtlEqualLuid@8
RtlFindSetBits@12
RtlFindSetBitsAndClear@12
RtlFirstFreeAce@8
-;RtlFlushPropertySet
RtlFormatCurrentUserKeyPath@4
RtlFormatMessage@32
RtlFreeAnsiString@4
RtlGetFirstRange@12
RtlGetFullPathName_U@16
RtlGetGroupSecurityDescriptor@12
+RtlGetLastNtStatus@0
+RtlGetLastWin32Error@0
RtlGetLongestNtPathLength@0
RtlGetNextRange@12
RtlGetNtGlobalFlags@0
RtlGetOwnerSecurityDescriptor@12
RtlGetProcessHeaps@8
RtlGetSaclSecurityDescriptor@16
+RtlGetSecurityDescriptorRMControl@8
;RtlGetUserInfoHeap
RtlGetVersion@4
-;RtlGuidToPropertySetName
RtlIdentifierAuthoritySid@4
RtlImageDirectoryEntryToData@16
RtlImageNtHeader@4
RtlPinAtomInAtomTable@8
RtlPrefixString@12
RtlPrefixUnicodeString@12
-;RtlPropertySetNameToGuid
;RtlProtectHeap
RtlQueryAtomInAtomTable@24
RtlQueryEnvironmentVariable_U@12
RtlQueryProcessDebugInformation@12
;RtlQueryProcessHeapInformation
;RtlQueryProcessLockInformation
-;RtlQueryProperties
-;RtlQueryPropertyNames
-;RtlQueryPropertySet
RtlQueryRegistryValues@20
-;RtlQuerySecutityObject
+;RtlQuerySecurityObject
;RtlQueryTagHeap
RtlQueryTimeZoneInformation@4
RtlRaiseException@4
RtlReleaseResource@4
;RtlRemoteCall
RtlResetRtlTranslations@4
+RtlRestoreLastWin32Error@4=RtlSetLastWin32Error@4
RtlRunDecodeUnicodeString@8
RtlRunEncodeUnicodeString@8
RtlSecondsSince1970ToTime@8
RtlSetAllBits@4
;RtlSetAttributesSecurityDescriptor
RtlSetBits@12
+RtlSetControlSecurityDescriptor@12
+RtlSetCriticalSectionSpinCount@8
RtlSetCurrentDirectory_U@4
RtlSetCurrentEnvironment@8
RtlSetDaclSecurityDescriptor@16
RtlSetEnvironmentVariable@12
RtlSetGroupSecurityDescriptor@12
RtlSetInformationAcl@16
+RtlSetLastWin32Error@4
+RtlSetLastWin32ErrorAndNtStatusFromNtStatus@4
RtlSetOwnerSecurityDescriptor@12
-;RtlSetProperties
-;RtlSetPropertyNames
-;RtlSetPropertySetClassId
RtlSetSaclSecurityDescriptor@16
+RtlSetSecurityDescriptorRMControl@8
;RtlSetSecurityObject
RtlSetTimeZoneInformation@4
;RtlSetUnicodeCallouts
ZwOpenThread@16
ZwOpenThreadToken@16
ZwOpenTimer@12
-ZwPlugPlayControl@16
+ZwPlugPlayControl@12
ZwPrivilegeCheck@12
ZwPrivilegedServiceAuditAlarm@20
ZwPrivilegeObjectAuditAlarm@24
ZwQueryMultipleValueKey@24
ZwQueryMutant@20
ZwQueryObject@20
-ZwQueryOleDirectoryFile@44
ZwQueryPerformanceCounter@8
ZwQuerySection@20
ZwQuerySecurityObject@20