[−][src]Module ntapi::ntrtl

Structs

COMPRESSED_DATA_INFO
CONTEXT_CHUNK
CONTEXT_EX
CURDIR
DYNAMIC_FUNCTION_TABLE
GENERATE_NAME_CONTEXT
HEAP_DEBUGGING_INFORMATION
HEAP_EXTENDED_INFORMATION
HEAP_INFORMATION
PARSE_MESSAGE_CONTEXT
PREFIX_TABLE
PREFIX_TABLE_ENTRY
PROCESS_HEAP_INFORMATION
PS_PKG_CLAIM
RTLP_CURDIR_REF
RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION
RTL_AVL_TABLE
RTL_BALANCED_LINKS
RTL_BITMAP
RTL_BITMAP_EX
RTL_BITMAP_RUN
RTL_BSD_ITEM
RTL_DEBUG_INFORMATION
RTL_DRIVE_LETTER_CURDIR
RTL_DYNAMIC_HASH_TABLE
RTL_DYNAMIC_HASH_TABLE_CONTEXT
RTL_DYNAMIC_HASH_TABLE_ENTRY
RTL_DYNAMIC_HASH_TABLE_ENUMERATOR
RTL_ELEVATION_FLAGS
RTL_GENERIC_TABLE
RTL_HANDLE_TABLE
RTL_HEAP_ENTRY
RTL_HEAP_ENTRY_u_s1
RTL_HEAP_ENTRY_u_s2
RTL_HEAP_INFORMATION
RTL_HEAP_PARAMETERS
RTL_HEAP_TAG
RTL_HEAP_TAG_INFO
RTL_HEAP_USAGE
RTL_HEAP_USAGE_ENTRY
RTL_HEAP_WALK_ENTRY
RTL_HEAP_WALK_ENTRY_u_Block
RTL_HEAP_WALK_ENTRY_u_Segment
RTL_IMAGE_MITIGATION_ASLR_POLICY
RTL_IMAGE_MITIGATION_BINARY_SIGNATURE_POLICY
RTL_IMAGE_MITIGATION_CHILD_PROCESS_POLICY
RTL_IMAGE_MITIGATION_CONTROL_FLOW_GUARD_POLICY
RTL_IMAGE_MITIGATION_DEP_POLICY
RTL_IMAGE_MITIGATION_DYNAMIC_CODE_POLICY
RTL_IMAGE_MITIGATION_EXTENSION_POINT_DISABLE_POLICY
RTL_IMAGE_MITIGATION_FONT_DISABLE_POLICY
RTL_IMAGE_MITIGATION_HEAP_POLICY
RTL_IMAGE_MITIGATION_IMAGE_LOAD_POLICY
RTL_IMAGE_MITIGATION_PAYLOAD_RESTRICTION_POLICY
RTL_IMAGE_MITIGATION_SEHOP_POLICY
RTL_IMAGE_MITIGATION_STRICT_HANDLE_CHECK_POLICY
RTL_IMAGE_MITIGATION_SYSTEM_CALL_DISABLE_POLICY
RTL_MEMORY_ZONE
RTL_MEMORY_ZONE_SEGMENT
RTL_PROCESS_HEAPS
RTL_PROCESS_VERIFIER_OPTIONS
RTL_QUERY_REGISTRY_TABLE
RTL_RB_TREE
RTL_RELATIVE_NAME_U
RTL_RESOURCE
RTL_SPLAY_LINKS
RTL_TIME_ZONE_INFORMATION
RTL_UNLOAD_EVENT_TRACE
RTL_UNLOAD_EVENT_TRACE32
RTL_USER_PROCESS_INFORMATION
RTL_USER_PROCESS_PARAMETERS
TIME_FIELDS
UNICODE_PREFIX_TABLE
UNICODE_PREFIX_TABLE_ENTRY

Constants

CONTEXT_EX_LENGTH
ChildAppContainerSidType
DOS_MAX_COMPONENT_LENGTH
DOS_MAX_PATH_LENGTH
DisallowUnassigned
GenericEqual
GenericGreaterThan
GenericLessThan
HASH_STRING_ALGORITHM_DEFAULT
HASH_STRING_ALGORITHM_INVALID
HASH_STRING_ALGORITHM_X65599
HEAP_CLASS_0
HEAP_CLASS_1
HEAP_CLASS_2
HEAP_CLASS_3
HEAP_CLASS_4
HEAP_CLASS_5
HEAP_CLASS_6
HEAP_CLASS_7
HEAP_CLASS_8
HEAP_CLASS_MASK
HEAP_SETTABLE_USER_FLAG1
HEAP_SETTABLE_USER_FLAG2
HEAP_SETTABLE_USER_FLAG3
HEAP_SETTABLE_USER_FLAGS
HEAP_SETTABLE_USER_VALUE
HEAP_USAGE_ALLOCATED_BLOCKS
HEAP_USAGE_FREE_BUFFER
ImageAslrPolicy
ImageChildProcessPolicy
ImageControlFlowGuardPolicy
ImageDepPolicy
ImageDynamicCodePolicy
ImageExtensionPointDisablePolicy
ImageFontDisablePolicy
ImageHeapPolicy
ImageImageLoadPolicy
ImageMitigationOptionsMask
ImagePayloadRestrictionPolicy
ImageSehopPolicy
ImageSignaturePolicy
ImageStrictHandleCheckPolicy
ImageSystemCallDisablePolicy
InvalidAppContainerSidType
LocationTypeFileSystem
LocationTypeMaximum
LocationTypeRegistry
MAX_UNICODE_STACK_BUFFER_LENGTH
MaxAppContainerSidType
MaxImageMitigationPolicy
NormC
NormCDisallowUnassigned
NormD
NormDDisallowUnassigned
NormIdna
NormIdnaDisallowUnassigned
NormKC
NormKCDisallowUnassigned
NormKD
NormKDDisallowUnassigned
NormOther
NotAppContainerSidType
ParentAppContainerSidType
RF_CALLBACK
RF_KERNEL_DYNAMIC
RF_SORTED
RF_UNSORTED
RTL_ACQUIRE_PRIVILEGE_PROCESS
RTL_ACQUIRE_PRIVILEGE_REVERT
RTL_ATOM_INVALID_ATOM
RTL_ATOM_MAXIMUM_INTEGER_ATOM
RTL_ATOM_MAXIMUM_NAME_LENGTH
RTL_ATOM_PINNED
RTL_ATOM_TABLE_DEFAULT_NUMBER_OF_BUCKETS
RTL_BARRIER_FLAGS_BLOCK_ONLY
RTL_BARRIER_FLAGS_NO_DELETE
RTL_BARRIER_FLAGS_SPIN_ONLY
RTL_CLONE_PROCESS_FLAGS_CREATE_SUSPENDED
RTL_CLONE_PROCESS_FLAGS_INHERIT_HANDLES
RTL_CLONE_PROCESS_FLAGS_NO_SYNCHRONIZE
RTL_CREATE_ENVIRONMENT_EMPTY
RTL_CREATE_ENVIRONMENT_TRANSLATE
RTL_CREATE_ENVIRONMENT_TRANSLATE_FROM_OEM
RTL_DOS_SEARCH_PATH_FLAG_APPLY_DEFAULT_EXTENSION_WHEN_NOT_RELATIVE_PATH_EVEN_IF_FILE_HAS_EXTENSION
RTL_DOS_SEARCH_PATH_FLAG_APPLY_ISOLATION_REDIRECTION
RTL_DOS_SEARCH_PATH_FLAG_DISALLOW_DOT_RELATIVE_PATH_SEARCH
RTL_DRIVE_LETTER_VALID
RTL_DUPLICATE_UNICODE_STRING_ALLOCATE_NULL_STRING
RTL_DUPLICATE_UNICODE_STRING_NULL_TERMINATE
RTL_ERRORMODE_FAILCRITICALERRORS
RTL_ERRORMODE_NOGPFAULTERRORBOX
RTL_ERRORMODE_NOOPENFILEERRORBOX
RTL_FIND_CHAR_IN_UNICODE_STRING_CASE_INSENSITIVE
RTL_FIND_CHAR_IN_UNICODE_STRING_COMPLEMENT_CHAR_SET
RTL_FIND_CHAR_IN_UNICODE_STRING_START_AT_END
RTL_HANDLE_ALLOCATED
RTL_HASH_ALLOCATED_HEADER
RTL_HASH_RESERVED_SIGNATURE
RTL_HEAP_BUSY
RTL_HEAP_PROTECTED_ENTRY
RTL_HEAP_SEGMENT
RTL_HEAP_SETTABLE_FLAG1
RTL_HEAP_SETTABLE_FLAG2
RTL_HEAP_SETTABLE_FLAG3
RTL_HEAP_SETTABLE_FLAGS
RTL_HEAP_SETTABLE_VALUE
RTL_HEAP_UNCOMMITTED_RANGE
RTL_IMAGE_MITIGATION_FLAG_AUDIT
RTL_IMAGE_MITIGATION_FLAG_OSDEFAULT
RTL_IMAGE_MITIGATION_FLAG_REMOVE
RTL_IMAGE_MITIGATION_FLAG_RESET
RTL_IMAGE_NT_HEADER_EX_FLAG_NO_RANGE_CHECK
RTL_MAX_DRIVE_LETTERS
RTL_QUERY_PROCESS_BACKTRACES
RTL_QUERY_PROCESS_CS_OWNER
RTL_QUERY_PROCESS_HEAP_ENTRIES
RTL_QUERY_PROCESS_HEAP_ENTRIES_EX
RTL_QUERY_PROCESS_HEAP_SUMMARY
RTL_QUERY_PROCESS_HEAP_TAGS
RTL_QUERY_PROCESS_LOCKS
RTL_QUERY_PROCESS_MODULES
RTL_QUERY_PROCESS_MODULES32
RTL_QUERY_PROCESS_MODULESEX
RTL_QUERY_PROCESS_NONINVASIVE
RTL_QUERY_PROCESS_VERIFIER_OPTIONS
RTL_QUERY_REGISTRY_DELETE
RTL_QUERY_REGISTRY_DIRECT
RTL_QUERY_REGISTRY_NOEXPAND
RTL_QUERY_REGISTRY_NOVALUE
RTL_QUERY_REGISTRY_REQUIRED
RTL_QUERY_REGISTRY_SUBKEY
RTL_QUERY_REGISTRY_TOPKEY
RTL_REGISTRY_ABSOLUTE
RTL_REGISTRY_CONTROL
RTL_REGISTRY_DEVICEMAP
RTL_REGISTRY_HANDLE
RTL_REGISTRY_MAXIMUM
RTL_REGISTRY_OPTIONAL
RTL_REGISTRY_SERVICES
RTL_REGISTRY_USER
RTL_REGISTRY_WINDOWS_NT
RTL_RESOURCE_FLAG_LONG_TERM
RTL_STACK_WALKING_MODE_FRAMES_TO_SKIP_SHIFT
RTL_UNLOAD_EVENT_TRACE_NUMBER
RTL_USER_PROC_APP_MANIFEST_PRESENT
RTL_USER_PROC_CASE_SENSITIVE
RTL_USER_PROC_CURDIR_CLOSE
RTL_USER_PROC_CURDIR_INHERIT
RTL_USER_PROC_DISABLE_HEAP_DECOMMIT
RTL_USER_PROC_DLL_REDIRECTION_LOCAL
RTL_USER_PROC_IMAGE_KEY_MISSING
RTL_USER_PROC_OPTIN_PROCESS
RTL_USER_PROC_PARAMS_NORMALIZED
RTL_USER_PROC_PROFILE_KERNEL
RTL_USER_PROC_PROFILE_SERVER
RTL_USER_PROC_PROFILE_USER
RTL_USER_PROC_RESERVE_1MB
RTL_USER_PROC_RESERVE_16MB
RTL_WALK_USER_MODE_STACK
RTL_WALK_VALID_FLAGS
RtlBsdItemAabEnabled
RtlBsdItemAabTimeout
RtlBsdItemBootAttemptCount
RtlBsdItemBootCheckpoint
RtlBsdItemBootGood
RtlBsdItemBootId
RtlBsdItemBootShutdown
RtlBsdItemChecksum
RtlBsdItemErrorInfo
RtlBsdItemMax
RtlBsdItemPowerButtonPressInfo
RtlBsdItemProductType
RtlBsdItemReportedAbnormalShutdownBootId
RtlBsdItemShutdownBootId
RtlBsdItemVersionNumber
RtlBsdPowerTransition
RtlBsdSleepInProgress
RtlMitigationOptionStateNotConfigured
RtlMitigationOptionStateOff
RtlMitigationOptionStateOn
RtlNtdllName	"ntdll.dll"
RtlPathTypeDriveAbsolute
RtlPathTypeDriveRelative
RtlPathTypeLocalDevice
RtlPathTypeRelative
RtlPathTypeRootLocalDevice
RtlPathTypeRooted
RtlPathTypeUncAbsolute
RtlPathTypeUnknown
TableEmptyTree
TableFoundNode
TableInsertAsLeft
TableInsertAsRight

Statics

RtlAlternateDosPathSeperatorString
RtlDosPathSeperatorsString
RtlNtPathSeperatorString

Functions

AppendTailList ^⚠
CLEAR_PARSE_MESSAGE_CONTEXT_FLAG
HASH_ENTRY_KEY
INIT_PARSE_MESSAGE_CONTEXT
InitializeListHead
InsertHeadList ^⚠
InsertTailList ^⚠
IsListEmpty
LdrInitializeThunk ^⚠
PfxFindPrefix ^⚠
PfxInitialize ^⚠
PfxInsertPrefix ^⚠
PfxRemovePrefix ^⚠
PopEntryList ^⚠
PushEntryList
RemoveEntryList ^⚠
RemoveHeadList ^⚠
RemoveTailList ^⚠
RtlAbsoluteToSelfRelativeSD ^⚠
RtlAcquirePebLock ^⚠
RtlAcquirePrivilege ^⚠
RtlAcquireReleaseSRWLockExclusive ^⚠
RtlAcquireResourceExclusive ^⚠
RtlAcquireResourceShared ^⚠
RtlAcquireSRWLockExclusive ^⚠
RtlAcquireSRWLockShared ^⚠
RtlActiveEnumeratorsHashTable
RtlAddAccessAllowedAce ^⚠
RtlAddAccessAllowedAceEx ^⚠
RtlAddAccessAllowedObjectAce ^⚠
RtlAddAccessDeniedAce ^⚠
RtlAddAccessDeniedAceEx ^⚠
RtlAddAccessDeniedObjectAce ^⚠
RtlAddAce ^⚠
RtlAddAtomToAtomTable ^⚠
RtlAddAuditAccessAce ^⚠
RtlAddAuditAccessAceEx ^⚠
RtlAddAuditAccessObjectAce ^⚠
RtlAddCompoundAce ^⚠
RtlAddIntegrityLabelToBoundaryDescriptor ^⚠
RtlAddMandatoryAce ^⚠
RtlAddSIDToBoundaryDescriptor ^⚠
RtlAddVectoredContinueHandler ^⚠
RtlAddVectoredExceptionHandler ^⚠
RtlAddressInSectionTable ^⚠
RtlAdjustPrivilege ^⚠
RtlAllocateAndInitializeSid ^⚠
RtlAllocateFromPeb ^⚠
RtlAllocateHandle ^⚠
RtlAllocateHeap ^⚠
RtlAllocateMemoryBlockLookaside ^⚠
RtlAllocateMemoryZone ^⚠
RtlAnsiCharToUnicodeChar ^⚠
RtlAnsiStringToUnicodeString ^⚠
RtlAppendAsciizToString ^⚠
RtlAppendStringToString ^⚠
RtlAppendUnicodeStringToString ^⚠
RtlAppendUnicodeToString ^⚠
RtlAppxIsFileOwnedByTrustedInstaller ^⚠
RtlAreAllAccessesGranted ^⚠
RtlAreAnyAccessesGranted ^⚠
RtlAreBitsClear ^⚠
RtlAreBitsSet ^⚠
RtlAreLongPathsEnabled ^⚠
RtlBarrier ^⚠
RtlBarrierForDelete ^⚠
RtlCapabilityCheck ^⚠
RtlCharToInteger ^⚠
RtlCheckBit ^⚠
RtlCheckBootStatusIntegrity ^⚠
RtlCheckForOrphanedCriticalSections ^⚠
RtlCheckPortableOperatingSystem ^⚠
RtlCheckRegistryKey ^⚠
RtlCheckSandboxedToken ^⚠
RtlCheckTokenCapability ^⚠
RtlCheckTokenMembership ^⚠
RtlCheckTokenMembershipEx ^⚠
RtlCleanUpTEBLangLists ^⚠
RtlClearAllBits ^⚠
RtlClearAllBitsEx ^⚠
RtlClearBit ^⚠
RtlClearBitEx ^⚠
RtlClearBits ^⚠
RtlCloneUserProcess ^⚠
RtlCommitDebugInfo ^⚠
RtlCompactHeap ^⚠
RtlCompareAltitudes ^⚠
RtlCompareMemoryUlong ^⚠
RtlCompareString ^⚠
RtlCompareUnicodeString ^⚠
RtlCompareUnicodeStrings ^⚠
RtlCompressBuffer ^⚠
RtlCompressChunks ^⚠
RtlComputeCrc32 ^⚠
RtlComputeImportTableHash ^⚠
RtlComputePrivatizedDllName_U ^⚠
RtlConsoleMultiByteToUnicodeN ^⚠
RtlContractHashTable ^⚠
RtlConvertExclusiveToShared ^⚠
RtlConvertLCIDToString ^⚠
RtlConvertLongToLuid
RtlConvertSharedToExclusive ^⚠
RtlConvertSidToUnicodeString ^⚠
RtlConvertToAutoInheritSecurityObject ^⚠
RtlConvertUlongToLuid
RtlCopyBitMap ^⚠
RtlCopyExtendedContext ^⚠
RtlCopyLuid ^⚠
RtlCopyLuidAndAttributesArray ^⚠
RtlCopySecurityDescriptor ^⚠
RtlCopySid ^⚠
RtlCopySidAndAttributesArray ^⚠
RtlCopyString ^⚠
RtlCopyUnicodeString ^⚠
RtlCreateAcl ^⚠
RtlCreateAtomTable ^⚠
RtlCreateBootStatusDataFile ^⚠
RtlCreateBoundaryDescriptor ^⚠
RtlCreateEnvironment ^⚠
RtlCreateEnvironmentEx ^⚠
RtlCreateHashTable ^⚠
RtlCreateHeap ^⚠
RtlCreateMemoryBlockLookaside ^⚠
RtlCreateMemoryZone ^⚠
RtlCreateProcessParameters ^⚠
RtlCreateProcessParametersEx ^⚠
RtlCreateProcessReflection ^⚠
RtlCreateQueryDebugBuffer ^⚠
RtlCreateRegistryKey ^⚠
RtlCreateSecurityDescriptor ^⚠
RtlCreateServiceSid ^⚠
RtlCreateTagHeap ^⚠
RtlCreateTimer ^⚠
RtlCreateTimerQueue ^⚠
RtlCreateUnicodeString ^⚠
RtlCreateUnicodeStringFromAsciiz ^⚠
RtlCreateUserProcess ^⚠
RtlCreateUserProcessEx ^⚠
RtlCreateUserStack ^⚠
RtlCreateUserThread ^⚠
RtlCreateVirtualAccountSid ^⚠
RtlCultureNameToLCID ^⚠
RtlCustomCPToUnicodeN ^⚠
RtlCutoverTimeToSystemTime ^⚠
RtlDeCommitDebugInfo ^⚠
RtlDeNormalizeProcessParams ^⚠
RtlDecodePointer ^⚠
RtlDecodeRemotePointer ^⚠
RtlDecodeSystemPointer ^⚠
RtlDecompressBuffer ^⚠
RtlDecompressBufferEx ^⚠
RtlDecompressChunks ^⚠
RtlDecompressFragment ^⚠
RtlDefaultNpAcl ^⚠
RtlDelete ^⚠
RtlDeleteAce ^⚠
RtlDeleteAtomFromAtomTable ^⚠
RtlDeleteBarrier ^⚠
RtlDeleteBoundaryDescriptor ^⚠
RtlDeleteCriticalSection ^⚠
RtlDeleteElementGenericTable ^⚠
RtlDeleteElementGenericTableAvl ^⚠
RtlDeleteHashTable ^⚠
RtlDeleteNoSplay ^⚠
RtlDeleteRegistryValue ^⚠
RtlDeleteResource ^⚠
RtlDeleteSecurityObject ^⚠
RtlDeleteTimer ^⚠
RtlDeleteTimerQueue ^⚠
RtlDeleteTimerQueueEx ^⚠
RtlDeregisterSecureMemoryCacheCallback ^⚠
RtlDeregisterWait ^⚠
RtlDeregisterWaitEx ^⚠
RtlDeriveCapabilitySidsFromName ^⚠
RtlDescribeChunk ^⚠
RtlDestroyAtomTable ^⚠
RtlDestroyEnvironment ^⚠
RtlDestroyHandleTable ^⚠
RtlDestroyHeap ^⚠
RtlDestroyMemoryBlockLookaside ^⚠
RtlDestroyMemoryZone ^⚠
RtlDestroyProcessParameters ^⚠
RtlDestroyQueryDebugBuffer ^⚠
RtlDetectHeapLeaks ^⚠
RtlDetermineDosPathNameType_U ^⚠
RtlDetermineDosPathNameType_Ustr ^⚠
RtlDisableThreadProfiling ^⚠
RtlDllShutdownInProgress ^⚠
RtlDnsHostNameToComputerName ^⚠
RtlDoesFileExists_U ^⚠
RtlDosLongPathNameToNtPathName_U_WithStatus ^⚠
RtlDosLongPathNameToRelativeNtPathName_U_WithStatus ^⚠
RtlDosPathNameToNtPathName_U ^⚠
RtlDosPathNameToNtPathName_U_WithStatus ^⚠
RtlDosPathNameToRelativeNtPathName_U ^⚠
RtlDosPathNameToRelativeNtPathName_U_WithStatus ^⚠
RtlDosSearchPath_U ^⚠
RtlDosSearchPath_Ustr ^⚠
RtlDowncaseUnicodeChar ^⚠
RtlDowncaseUnicodeString ^⚠
RtlDuplicateUnicodeString ^⚠
RtlEmptyAtomTable ^⚠
RtlEmptyBucketsHashTable
RtlEnableThreadProfiling ^⚠
RtlEncodePointer ^⚠
RtlEncodeRemotePointer ^⚠
RtlEncodeSystemPointer ^⚠
RtlEndEnumerationHashTable ^⚠
RtlEndStrongEnumerationHashTable ^⚠
RtlEndWeakEnumerationHashTable ^⚠
RtlEnterCriticalSection ^⚠
RtlEnumProcessHeaps ^⚠
RtlEnumerateEntryHashTable ^⚠
RtlEnumerateGenericTable ^⚠
RtlEnumerateGenericTableAvl ^⚠
RtlEnumerateGenericTableLikeADirectory ^⚠
RtlEnumerateGenericTableWithoutSplaying ^⚠
RtlEnumerateGenericTableWithoutSplayingAvl ^⚠
RtlEqualComputerName ^⚠
RtlEqualDomainName ^⚠
RtlEqualPrefixSid ^⚠
RtlEqualSid ^⚠
RtlEqualString ^⚠
RtlEqualUnicodeString ^⚠
RtlEraseUnicodeString ^⚠
RtlExitUserProcess ^⚠
RtlExitUserThread ^⚠
RtlExpandEnvironmentStrings ^⚠
RtlExpandEnvironmentStrings_U ^⚠
RtlExpandHashTable ^⚠
RtlExtendHeap ^⚠
RtlExtendMemoryBlockLookaside ^⚠
RtlExtractBitMap ^⚠
RtlFillMemoryUlong ^⚠
RtlFillMemoryUlonglong ^⚠
RtlFindAceByType ^⚠
RtlFindCharInUnicodeString ^⚠
RtlFindClearBits ^⚠
RtlFindClearBitsAndSet ^⚠
RtlFindClearRuns ^⚠
RtlFindClosestEncodableLength ^⚠
RtlFindExportedRoutineByName ^⚠
RtlFindFirstRunClear ^⚠
RtlFindLastBackwardRunClear ^⚠
RtlFindLeastSignificantBit ^⚠
RtlFindLongestRunClear ^⚠
RtlFindMessage ^⚠
RtlFindMostSignificantBit ^⚠
RtlFindNextForwardRunClear ^⚠
RtlFindSetBits ^⚠
RtlFindSetBitsAndClear ^⚠
RtlFindSetBitsAndClearEx ^⚠
RtlFindSetBitsEx ^⚠
RtlFindUnicodePrefix ^⚠
RtlFindUnicodeSubstring ^⚠
RtlFirstFreeAce ^⚠
RtlFlsAlloc ^⚠
RtlFlsFree ^⚠
RtlFlushHeaps ^⚠
RtlFlushSecureMemoryCache ^⚠
RtlFormatCurrentUserKeyPath ^⚠
RtlFormatMessage ^⚠
RtlFormatMessageEx ^⚠
RtlFreeAnsiString ^⚠
RtlFreeHandle ^⚠
RtlFreeHeap ^⚠
RtlFreeMemoryBlockLookaside ^⚠
RtlFreeOemString ^⚠
RtlFreeSid ^⚠
RtlFreeToPeb ^⚠
RtlFreeUnicodeString ^⚠
RtlFreeUserStack ^⚠
RtlGUIDFromString ^⚠
RtlGenerate8dot3Name ^⚠
RtlGetAce ^⚠
RtlGetActiveConsoleId ^⚠
RtlGetAppContainerNamedObjectPath ^⚠
RtlGetAppContainerParent ^⚠
RtlGetAppContainerSidType ^⚠
RtlGetCallersAddress ^⚠
RtlGetCompressionWorkSpaceSize ^⚠
RtlGetConsoleSessionForegroundProcessId ^⚠
RtlGetControlSecurityDescriptor ^⚠
RtlGetCriticalSectionRecursionCount ^⚠
RtlGetCurrentDirectory_U ^⚠
RtlGetCurrentPeb ^⚠
RtlGetCurrentProcessorNumber ^⚠
RtlGetCurrentProcessorNumberEx ^⚠
RtlGetCurrentServiceSessionId ^⚠
RtlGetCurrentTransaction ^⚠
RtlGetDaclSecurityDescriptor ^⚠
RtlGetElementGenericTable ^⚠
RtlGetElementGenericTableAvl ^⚠
RtlGetEnabledExtendedAndSupervisorFeatures ^⚠
RtlGetEnabledExtendedFeatures ^⚠
RtlGetExePath ^⚠
RtlGetExtendedContextLength ^⚠
RtlGetExtendedFeaturesMask ^⚠
RtlGetFrame ^⚠
RtlGetFullPathName_U ^⚠
RtlGetFullPathName_UEx ^⚠
RtlGetFullPathName_UstrEx ^⚠
RtlGetFunctionTableListHead ^⚠
RtlGetGroupSecurityDescriptor ^⚠
RtlGetIntegerAtom ^⚠
RtlGetLastNtStatus ^⚠
RtlGetLastWin32Error ^⚠
RtlGetLengthWithoutLastFullDosOrNtPathElement ^⚠
RtlGetLengthWithoutTrailingPathSeperators ^⚠
RtlGetLocaleFileMappingAddress ^⚠
RtlGetLongestNtPathLength ^⚠
RtlGetNativeSystemInformation ^⚠
RtlGetNextEntryHashTable ^⚠
RtlGetNtGlobalFlags ^⚠
RtlGetNtProductType ^⚠
RtlGetNtSystemRoot ^⚠
RtlGetNtVersionNumbers ^⚠
RtlGetOwnerSecurityDescriptor ^⚠
RtlGetParentLocaleName ^⚠
RtlGetPersistedStateLocation ^⚠
RtlGetProcessHeaps ^⚠
RtlGetSaclSecurityDescriptor ^⚠
RtlGetSearchPath ^⚠
RtlGetSecurityDescriptorRMControl ^⚠
RtlGetSetBootStatusData ^⚠
RtlGetSuiteMask ^⚠
RtlGetThreadErrorMode ^⚠
RtlGetTokenNamedObjectPath ^⚠
RtlGetUnloadEventTrace ^⚠
RtlGetUnloadEventTraceEx ^⚠
RtlGetUserInfoHeap ^⚠
RtlGetVersion ^⚠
RtlGuardCheckLongJumpTarget ^⚠
RtlHashUnicodeString ^⚠
RtlIdentifierAuthoritySid ^⚠
RtlIdnToAscii ^⚠
RtlIdnToNameprepUnicode ^⚠
RtlIdnToUnicode ^⚠
RtlImageDirectoryEntryToData ^⚠
RtlImageNtHeader ^⚠
RtlImageNtHeaderEx ^⚠
RtlImageRvaToSection ^⚠
RtlImageRvaToVa ^⚠
RtlImpersonateSelf ^⚠
RtlImpersonateSelfEx ^⚠
RtlInitAnsiString ^⚠
RtlInitAnsiStringEx ^⚠
RtlInitBarrier ^⚠
RtlInitCodePageTable ^⚠
RtlInitEmptyUnicodeString
RtlInitEnumerationHashTable ^⚠
RtlInitHashTableContext
RtlInitHashTableContextFromEnumerator
RtlInitNlsTables ^⚠
RtlInitString ^⚠
RtlInitStringEx ^⚠
RtlInitStrongEnumerationHashTable ^⚠
RtlInitUnicodeString ^⚠
RtlInitUnicodeStringEx ^⚠
RtlInitWeakEnumerationHashTable ^⚠
RtlInitializeBitMap ^⚠
RtlInitializeBitMapEx ^⚠
RtlInitializeConditionVariable ^⚠
RtlInitializeContext ^⚠
RtlInitializeCriticalSection ^⚠
RtlInitializeCriticalSectionAndSpinCount ^⚠
RtlInitializeExtendedContext ^⚠
RtlInitializeGenericTable ^⚠
RtlInitializeGenericTableAvl ^⚠
RtlInitializeHandleTable ^⚠
RtlInitializeResource ^⚠
RtlInitializeSRWLock ^⚠
RtlInitializeSid ^⚠
RtlInitializeSidEx ^⚠
RtlInitializeSplayLinks
RtlInitializeUnicodePrefix ^⚠
RtlInsertAsLeftChild
RtlInsertAsRightChild
RtlInsertElementGenericTable ^⚠
RtlInsertElementGenericTableAvl ^⚠
RtlInsertElementGenericTableFull ^⚠
RtlInsertElementGenericTableFullAvl ^⚠
RtlInsertEntryHashTable ^⚠
RtlInsertUnicodePrefix ^⚠
RtlInt64ToUnicodeString ^⚠
RtlIntegerToChar ^⚠
RtlIntegerToUnicodeString ^⚠
RtlInterlockedClearBitRun ^⚠
RtlInterlockedSetBitRun ^⚠
RtlIpv4AddressToStringExW ^⚠
RtlIpv4StringToAddressExW ^⚠
RtlIpv6AddressToStringExW ^⚠
RtlIpv6StringToAddressExW ^⚠
RtlIsCapabilitySid ^⚠
RtlIsCloudFilesPlaceholder ^⚠
RtlIsCriticalSectionLocked ^⚠
RtlIsCriticalSectionLockedByThread ^⚠
RtlIsCurrentProcess ^⚠
RtlIsCurrentThread ^⚠
RtlIsCurrentThreadAttachExempt ^⚠
RtlIsDosDeviceName_U ^⚠
RtlIsDosDeviceName_Ustr ^⚠
RtlIsElevatedRid ^⚠
RtlIsEqualLuid
RtlIsGenericTableEmpty ^⚠
RtlIsGenericTableEmptyAvl ^⚠
RtlIsLeftChild ^⚠
RtlIsMultiSessionSku ^⚠
RtlIsMultiUsersInSessionSku ^⚠
RtlIsNameInExpression ^⚠
RtlIsNameInUnUpcasedExpression ^⚠
RtlIsNonEmptyDirectoryReparsePointAllowed ^⚠
RtlIsNormalizedString ^⚠
RtlIsNullOrEmptyUnicodeString ^⚠
RtlIsPackageSid ^⚠
RtlIsParentOfChildAppContainer ^⚠
RtlIsPartialPlaceholder ^⚠
RtlIsPartialPlaceholderFileHandle ^⚠
RtlIsPartialPlaceholderFileInfo ^⚠
RtlIsProcessorFeaturePresent ^⚠
RtlIsRightChild ^⚠
RtlIsRoot ^⚠
RtlIsStateSeparationEnabled ^⚠
RtlIsTextUnicode ^⚠
RtlIsThreadWithinLoaderCallout ^⚠
RtlIsUntrustedObject ^⚠
RtlIsValidHandle ^⚠
RtlIsValidIndexHandle ^⚠
RtlIsValidLocaleName ^⚠
RtlIsValidProcessTrustLabelSid ^⚠
RtlIsZeroLuid
RtlKnownExceptionFilter ^⚠
RtlLCIDToCultureName ^⚠
RtlLargeIntegerToChar ^⚠
RtlLcidToLocaleName ^⚠
RtlLeaveCriticalSection ^⚠
RtlLeftChild
RtlLengthRequiredSid ^⚠
RtlLengthSecurityDescriptor ^⚠
RtlLengthSid ^⚠
RtlLocalTimeToSystemTime ^⚠
RtlLocaleNameToLcid ^⚠
RtlLocateExtendedFeature ^⚠
RtlLocateLegacyContext ^⚠
RtlLocateSupervisorFeature ^⚠
RtlLockBootStatusData ^⚠
RtlLockCurrentThread ^⚠
RtlLockHeap ^⚠
RtlLockMemoryBlockLookaside ^⚠
RtlLockMemoryZone ^⚠
RtlLockModuleSection ^⚠
RtlLookupAtomInAtomTable ^⚠
RtlLookupElementGenericTable ^⚠
RtlLookupElementGenericTableAvl ^⚠
RtlLookupElementGenericTableFull ^⚠
RtlLookupElementGenericTableFullAvl ^⚠
RtlLookupEntryHashTable ^⚠
RtlLookupFirstMatchingElementGenericTableAvl ^⚠
RtlMakeSelfRelativeSD ^⚠
RtlMapGenericMask ^⚠
RtlMultiByteToUnicodeN ^⚠
RtlMultiByteToUnicodeSize ^⚠
RtlMultipleAllocateHeap ^⚠
RtlMultipleFreeHeap ^⚠
RtlNewInstanceSecurityObject ^⚠
RtlNewSecurityObject ^⚠
RtlNewSecurityObjectEx ^⚠
RtlNewSecurityObjectWithMultipleInheritance ^⚠
RtlNextUnicodePrefix ^⚠
RtlNonEmptyBucketsHashTable
RtlNormalizeProcessParams ^⚠
RtlNormalizeString ^⚠
RtlNtStatusToDosError ^⚠
RtlNtStatusToDosErrorNoTeb ^⚠
RtlNumberGenericTableElements ^⚠
RtlNumberGenericTableElementsAvl ^⚠
RtlNumberOfClearBits ^⚠
RtlNumberOfClearBitsInRange ^⚠
RtlNumberOfSetBits ^⚠
RtlNumberOfSetBitsInRange ^⚠
RtlNumberOfSetBitsUlongPtr ^⚠
RtlOemStringToUnicodeString ^⚠
RtlOemToUnicodeN ^⚠
RtlOpenCurrentUser ^⚠
RtlOsDeploymentState ^⚠
RtlOwnerAcesPresent ^⚠
RtlParent
RtlPinAtomInAtomTable ^⚠
RtlPopFrame ^⚠
RtlPrefixString ^⚠
RtlPrefixUnicodeString ^⚠
RtlProcessHeap ^⚠
RtlProtectHeap ^⚠
RtlPushFrame ^⚠
RtlQueryAtomInAtomTable ^⚠
RtlQueryCriticalSectionOwner ^⚠
RtlQueryElevationFlags ^⚠
RtlQueryEnvironmentVariable ^⚠
RtlQueryEnvironmentVariable_U ^⚠
RtlQueryHeapInformation ^⚠
RtlQueryImageMitigationPolicy ^⚠
RtlQueryInformationAcl ^⚠
RtlQueryPackageClaims ^⚠
RtlQueryPerformanceCounter ^⚠
RtlQueryPerformanceFrequency ^⚠
RtlQueryProcessDebugInformation ^⚠
RtlQueryProtectedPolicy ^⚠
RtlQueryRegistryValues ^⚠
RtlQueryRegistryValuesEx ^⚠
RtlQuerySecurityObject ^⚠
RtlQueryTagHeap ^⚠
RtlQueryThreadProfiling ^⚠
RtlQueryTimeZoneInformation ^⚠
RtlQueryValidationRunlevel ^⚠
RtlQueueApcWow64Thread ^⚠
RtlQueueWorkItem ^⚠
RtlRandom ^⚠
RtlRandomEx ^⚠
RtlRbInsertNodeEx ^⚠
RtlRbRemoveNode ^⚠
RtlReAllocateHeap ^⚠
RtlReadThreadProfilingData ^⚠
RtlRealPredecessor ^⚠
RtlRealSuccessor ^⚠
RtlRegisterSecureMemoryCacheCallback ^⚠
RtlRegisterThreadWithCsrss ^⚠
RtlRegisterWait ^⚠
RtlReleasePebLock ^⚠
RtlReleasePrivilege ^⚠
RtlReleaseRelativeName ^⚠
RtlReleaseResource ^⚠
RtlReleaseSRWLockExclusive ^⚠
RtlReleaseSRWLockShared ^⚠
RtlRemoteCall ^⚠
RtlRemoveEntryHashTable ^⚠
RtlRemovePrivileges ^⚠
RtlRemoveUnicodePrefix ^⚠
RtlRemoveVectoredContinueHandler ^⚠
RtlRemoveVectoredExceptionHandler ^⚠
RtlReplaceSidInSd ^⚠
RtlReportException ^⚠
RtlReportExceptionEx ^⚠
RtlReportSilentProcessExit ^⚠
RtlReserveChunk ^⚠
RtlResetMemoryBlockLookaside ^⚠
RtlResetMemoryZone ^⚠
RtlResetRtlTranslations ^⚠
RtlRestoreLastWin32Error ^⚠
RtlRightChild
RtlRunDecodeUnicodeString ^⚠
RtlRunEncodeUnicodeString ^⚠
RtlSecondsSince1970ToTime ^⚠
RtlSecondsSince1980ToTime ^⚠
RtlSectionTableFromVirtualAddress ^⚠
RtlSelfRelativeToAbsoluteSD ^⚠
RtlSelfRelativeToAbsoluteSD2 ^⚠
RtlSetAllBits ^⚠
RtlSetAttributesSecurityDescriptor ^⚠
RtlSetBit ^⚠
RtlSetBitEx ^⚠
RtlSetBits ^⚠
RtlSetControlSecurityDescriptor ^⚠
RtlSetCriticalSectionSpinCount ^⚠
RtlSetCurrentDirectory_U ^⚠
RtlSetCurrentEnvironment ^⚠
RtlSetCurrentTransaction ^⚠
RtlSetDaclSecurityDescriptor ^⚠
RtlSetEnvironmentStrings ^⚠
RtlSetEnvironmentVar ^⚠
RtlSetEnvironmentVariable ^⚠
RtlSetExtendedFeaturesMask ^⚠
RtlSetGroupSecurityDescriptor ^⚠
RtlSetHeapInformation ^⚠
RtlSetImageMitigationPolicy ^⚠
RtlSetInformationAcl ^⚠
RtlSetIoCompletionCallback ^⚠
RtlSetLastWin32ErrorAndNtStatusFromNtStatus ^⚠
RtlSetLastWin32Error ^⚠
RtlSetOwnerSecurityDescriptor ^⚠
RtlSetPortableOperatingSystem ^⚠
RtlSetProcessIsCritical ^⚠
RtlSetProtectedPolicy ^⚠
RtlSetSaclSecurityDescriptor ^⚠
RtlSetSearchPathMode ^⚠
RtlSetSecurityDescriptorRMControl ^⚠
RtlSetSecurityObject ^⚠
RtlSetSecurityObjectEx ^⚠
RtlSetThreadErrorMode ^⚠
RtlSetThreadIsCritical ^⚠
RtlSetThreadPoolStartFunc ^⚠
RtlSetTimeZoneInformation ^⚠
RtlSetUnhandledExceptionFilter ^⚠
RtlSetUserFlagsHeap ^⚠
RtlSetUserValueHeap ^⚠
RtlSidDominates ^⚠
RtlSidDominatesForTrust ^⚠
RtlSidEqualLevel ^⚠
RtlSidHashInitialize ^⚠
RtlSidHashLookup ^⚠
RtlSidIsHigherLevel ^⚠
RtlSizeHeap ^⚠
RtlSleepConditionVariableCS ^⚠
RtlSleepConditionVariableSRW ^⚠
RtlSplay ^⚠
RtlStringFromGUID ^⚠
RtlStringFromGUIDEx ^⚠
RtlStronglyEnumerateEntryHashTable ^⚠
RtlSubAuthorityCountSid ^⚠
RtlSubAuthoritySid ^⚠
RtlSubtreePredecessor ^⚠
RtlSubtreeSuccessor ^⚠
RtlSuffixUnicodeString ^⚠
RtlSystemTimeToLocalTime ^⚠
RtlTestBit ^⚠
RtlTestBitEx ^⚠
RtlTestProtectedAccess ^⚠
RtlTimeFieldsToTime ^⚠
RtlTimeToElapsedTimeFields ^⚠
RtlTimeToSecondsSince1970 ^⚠
RtlTimeToSecondsSince1980 ^⚠
RtlTimeToTimeFields ^⚠
RtlTotalBucketsHashTable
RtlTotalEntriesHashTable
RtlTryAcquirePebLock ^⚠
RtlTryAcquireSRWLockExclusive ^⚠
RtlTryAcquireSRWLockShared ^⚠
RtlTryEnterCriticalSection ^⚠
RtlUTF8ToUnicodeN ^⚠
RtlUnhandledExceptionFilter ^⚠
RtlUnhandledExceptionFilter2 ^⚠
RtlUnicodeStringToAnsiString ^⚠
RtlUnicodeStringToCountedOemString ^⚠
RtlUnicodeStringToInteger ^⚠
RtlUnicodeStringToOemString ^⚠
RtlUnicodeToCustomCPN ^⚠
RtlUnicodeToMultiByteN ^⚠
RtlUnicodeToMultiByteSize ^⚠
RtlUnicodeToOemN ^⚠
RtlUnicodeToUTF8N ^⚠
RtlUniform ^⚠
RtlUnlockBootStatusData ^⚠
RtlUnlockCurrentThread ^⚠
RtlUnlockHeap ^⚠
RtlUnlockMemoryBlockLookaside ^⚠
RtlUnlockMemoryZone ^⚠
RtlUnlockModuleSection ^⚠
RtlUpcaseUnicodeChar ^⚠
RtlUpcaseUnicodeString ^⚠
RtlUpcaseUnicodeStringToAnsiString ^⚠
RtlUpcaseUnicodeStringToCountedOemString ^⚠
RtlUpcaseUnicodeStringToOemString ^⚠
RtlUpcaseUnicodeToCustomCPN ^⚠
RtlUpcaseUnicodeToMultiByteN ^⚠
RtlUpcaseUnicodeToOemN ^⚠
RtlUpdateClonedCriticalSection ^⚠
RtlUpdateClonedSRWLock ^⚠
RtlUpdateTimer ^⚠
RtlUpperChar ^⚠
RtlUpperString ^⚠
RtlUsageHeap ^⚠
RtlUserThreadStart ^⚠
RtlValidAcl ^⚠
RtlValidProcessProtection ^⚠
RtlValidRelativeSecurityDescriptor ^⚠
RtlValidSecurityDescriptor ^⚠
RtlValidSid ^⚠
RtlValidateHeap ^⚠
RtlValidateProcessHeaps ^⚠
RtlValidateUnicodeString ^⚠
RtlVerifyVersionInfo ^⚠
RtlWaitOnAddress ^⚠
RtlWakeAddressAll ^⚠
RtlWakeAddressSingle ^⚠
RtlWakeAllConditionVariable ^⚠
RtlWakeConditionVariable ^⚠
RtlWalkFrameChain ^⚠
RtlWalkHeap ^⚠
RtlWeaklyEnumerateEntryHashTable ^⚠
RtlWerpReportException ^⚠
RtlWow64GetThreadContext ^⚠
RtlWow64SetThreadContext ^⚠
RtlWow64EnableFsRedirection ^⚠
RtlWow64EnableFsRedirectionEx ^⚠
RtlWriteRegistryValue ^⚠
RtlZeroHeap ^⚠
SET_PARSE_MESSAGE_CONTEXT_FLAG
TEST_PARSE_MESSAGE_CONTEXT_FLAG

Type Definitions

APPCONTAINER_SID_TYPE
FUNCTION_TABLE_TYPE
IMAGE_MITIGATION_POLICY
LdrInitializeThunk
PAPPCONTAINER_SID_TYPE
PCOMPRESSED_DATA_INFO
PCONTEXT_CHUNK
PCONTEXT_EX
PCURDIR
PDYNAMIC_FUNCTION_TABLE
PGENERATE_NAME_CONTEXT
PHEAP_DEBUGGING_INFORMATION
PHEAP_EXTENDED_INFORMATION
PHEAP_INFORMATION
PPARSE_MESSAGE_CONTEXT
PPREFIX_TABLE
PPREFIX_TABLE_ENTRY
PPROCESS_HEAP_INFORMATION
PPS_PKG_CLAIM
PRTLP_CURDIR_REF
PRTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION
PRTLP_UNHANDLED_EXCEPTION_FILTER
PRTL_AVL_ALLOCATE_ROUTINE
PRTL_AVL_COMPARE_ROUTINE
PRTL_AVL_FREE_ROUTINE
PRTL_AVL_MATCH_FUNCTION
PRTL_AVL_TABLE
PRTL_BALANCED_LINKS
PRTL_BITMAP
PRTL_BITMAP_EX
PRTL_BITMAP_RUN
PRTL_BSD_ITEM
PRTL_DEBUG_INFORMATION
PRTL_DRIVE_LETTER_CURDIR
PRTL_DYNAMIC_HASH_TABLE
PRTL_DYNAMIC_HASH_TABLE_CONTEXT
PRTL_DYNAMIC_HASH_TABLE_ENTRY
PRTL_DYNAMIC_HASH_TABLE_ENUMERATOR
PRTL_ELEVATION_FLAGS
PRTL_ENUM_HEAPS_ROUTINE
PRTL_EXIT_POOL_THREAD
PRTL_GENERIC_ALLOCATE_ROUTINE
PRTL_GENERIC_COMPARE_ROUTINE
PRTL_GENERIC_FREE_ROUTINE
PRTL_GENERIC_TABLE
PRTL_HANDLE_TABLE
PRTL_HANDLE_TABLE_ENTRY
PRTL_HEAP_COMMIT_ROUTINE
PRTL_HEAP_ENTRY
PRTL_HEAP_INFORMATION
PRTL_HEAP_LEAK_ENUMERATION_ROUTINE
PRTL_HEAP_PARAMETERS
PRTL_HEAP_TAG
PRTL_HEAP_TAG_INFO
PRTL_HEAP_USAGE
PRTL_HEAP_USAGE_ENTRY
PRTL_HEAP_WALK_ENTRY
PRTL_IMAGE_MITIGATION_ASLR_POLICY
PRTL_IMAGE_MITIGATION_BINARY_SIGNATURE_POLICY
PRTL_IMAGE_MITIGATION_CHILD_PROCESS_POLICY
PRTL_IMAGE_MITIGATION_CONTROL_FLOW_GUARD_POLICY
PRTL_IMAGE_MITIGATION_DEP_POLICY
PRTL_IMAGE_MITIGATION_DYNAMIC_CODE_POLICY
PRTL_IMAGE_MITIGATION_EXTENSION_POINT_DISABLE_POLICY
PRTL_IMAGE_MITIGATION_FONT_DISABLE_POLICY
PRTL_IMAGE_MITIGATION_HEAP_POLICY
PRTL_IMAGE_MITIGATION_IMAGE_LOAD_POLICY
PRTL_IMAGE_MITIGATION_PAYLOAD_RESTRICTION_POLICY
PRTL_IMAGE_MITIGATION_POLICY
PRTL_IMAGE_MITIGATION_SEHOP_POLICY
PRTL_IMAGE_MITIGATION_STRICT_HANDLE_CHECK_POLICY
PRTL_IMAGE_MITIGATION_SYSTEM_CALL_DISABLE_POLICY
PRTL_MEMORY_ZONE
PRTL_MEMORY_ZONE_SEGMENT
PRTL_PROCESS_HEAPS
PRTL_PROCESS_VERIFIER_OPTIONS
PRTL_QUERY_REGISTRY_ROUTINE
PRTL_QUERY_REGISTRY_TABLE
PRTL_RB_TREE
PRTL_RELATIVE_NAME_U
PRTL_RESOURCE
PRTL_SECURE_MEMORY_CACHE_CALLBACK
PRTL_SPLAY_LINKS
PRTL_START_POOL_THREAD
PRTL_TIME_ZONE_INFORMATION
PRTL_UNLOAD_EVENT_TRACE
PRTL_UNLOAD_EVENT_TRACE32
PRTL_USER_PROCESS_INFORMATION
PRTL_USER_PROCESS_PARAMETERS
PTIME_FIELDS
PUNICODE_PREFIX_TABLE
PUNICODE_PREFIX_TABLE_ENTRY
PUSER_THREAD_START_ROUTINE
PfxFindPrefix
PfxInitialize
PfxInsertPrefix
PfxRemovePrefix
RTL_BSD_ITEM_TYPE
RTL_GENERIC_COMPARE_RESULTS
RTL_IMAGE_MITIGATION_OPTION_STATE
RTL_NORM_FORM
RTL_PATH_TYPE
RtlAbsoluteToSelfRelativeSD
RtlAcquirePebLock
RtlAcquirePrivilege
RtlAcquireReleaseSRWLockExclusive
RtlAcquireResourceExclusive
RtlAcquireResourceShared
RtlAcquireSRWLockExclusive
RtlAcquireSRWLockShared
RtlAddAccessAllowedAce
RtlAddAccessAllowedAceEx
RtlAddAccessAllowedObjectAce
RtlAddAccessDeniedAce
RtlAddAccessDeniedAceEx
RtlAddAccessDeniedObjectAce
RtlAddAce
RtlAddAtomToAtomTable
RtlAddAuditAccessAce
RtlAddAuditAccessAceEx
RtlAddAuditAccessObjectAce
RtlAddCompoundAce
RtlAddIntegrityLabelToBoundaryDescriptor
RtlAddMandatoryAce
RtlAddSIDToBoundaryDescriptor
RtlAddVectoredContinueHandler
RtlAddVectoredExceptionHandler
RtlAddressInSectionTable
RtlAdjustPrivilege
RtlAllocateAndInitializeSid
RtlAllocateFromPeb
RtlAllocateHandle
RtlAllocateHeap
RtlAllocateMemoryBlockLookaside
RtlAllocateMemoryZone
RtlAnsiCharToUnicodeChar
RtlAnsiStringToUnicodeString
RtlAppendAsciizToString
RtlAppendStringToString
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
RtlAppxIsFileOwnedByTrustedInstaller
RtlAreAllAccessesGranted
RtlAreAnyAccessesGranted
RtlAreBitsClear
RtlAreBitsSet
RtlAreLongPathsEnabled
RtlBarrier
RtlBarrierForDelete
RtlCapabilityCheck
RtlCharToInteger
RtlCheckBootStatusIntegrity
RtlCheckForOrphanedCriticalSections
RtlCheckPortableOperatingSystem
RtlCheckRegistryKey
RtlCheckSandboxedToken
RtlCheckTokenCapability
RtlCheckTokenMembership
RtlCheckTokenMembershipEx
RtlCleanUpTEBLangLists
RtlClearAllBits
RtlClearAllBitsEx
RtlClearBit
RtlClearBitEx
RtlClearBits
RtlCloneUserProcess
RtlCommitDebugInfo
RtlCompactHeap
RtlCompareAltitudes
RtlCompareMemoryUlong
RtlCompareString
RtlCompareUnicodeString
RtlCompareUnicodeStrings
RtlCompressBuffer
RtlCompressChunks
RtlComputeCrc32
RtlComputeImportTableHash
RtlComputePrivatizedDllName_U
RtlConsoleMultiByteToUnicodeN
RtlContractHashTable
RtlConvertExclusiveToShared
RtlConvertLCIDToString
RtlConvertSharedToExclusive
RtlConvertSidToUnicodeString
RtlConvertToAutoInheritSecurityObject
RtlCopyBitMap
RtlCopyExtendedContext
RtlCopyLuid
RtlCopyLuidAndAttributesArray
RtlCopySecurityDescriptor
RtlCopySid
RtlCopySidAndAttributesArray
RtlCopyString
RtlCopyUnicodeString
RtlCreateAcl
RtlCreateAtomTable
RtlCreateBootStatusDataFile
RtlCreateBoundaryDescriptor
RtlCreateEnvironment
RtlCreateEnvironmentEx
RtlCreateHashTable
RtlCreateHeap
RtlCreateMemoryBlockLookaside
RtlCreateMemoryZone
RtlCreateProcessParameters
RtlCreateProcessParametersEx
RtlCreateProcessReflection
RtlCreateQueryDebugBuffer
RtlCreateRegistryKey
RtlCreateSecurityDescriptor
RtlCreateServiceSid
RtlCreateTagHeap
RtlCreateTimer
RtlCreateTimerQueue
RtlCreateUnicodeString
RtlCreateUnicodeStringFromAsciiz
RtlCreateUserProcess
RtlCreateUserProcessEx
RtlCreateUserStack
RtlCreateUserThread
RtlCreateVirtualAccountSid
RtlCultureNameToLCID
RtlCustomCPToUnicodeN
RtlCutoverTimeToSystemTime
RtlDeCommitDebugInfo
RtlDeNormalizeProcessParams
RtlDecodePointer
RtlDecodeRemotePointer
RtlDecodeSystemPointer
RtlDecompressBuffer
RtlDecompressBufferEx
RtlDecompressChunks
RtlDecompressFragment
RtlDefaultNpAcl
RtlDelete
RtlDeleteAce
RtlDeleteAtomFromAtomTable
RtlDeleteBarrier
RtlDeleteBoundaryDescriptor
RtlDeleteCriticalSection
RtlDeleteElementGenericTable
RtlDeleteElementGenericTableAvl
RtlDeleteHashTable
RtlDeleteNoSplay
RtlDeleteRegistryValue
RtlDeleteResource
RtlDeleteSecurityObject
RtlDeleteTimer
RtlDeleteTimerQueue
RtlDeleteTimerQueueEx
RtlDeregisterSecureMemoryCacheCallback
RtlDeregisterWait
RtlDeregisterWaitEx
RtlDeriveCapabilitySidsFromName
RtlDescribeChunk
RtlDestroyAtomTable
RtlDestroyEnvironment
RtlDestroyHandleTable
RtlDestroyHeap
RtlDestroyMemoryBlockLookaside
RtlDestroyMemoryZone
RtlDestroyProcessParameters
RtlDestroyQueryDebugBuffer
RtlDetectHeapLeaks
RtlDetermineDosPathNameType_U
RtlDetermineDosPathNameType_Ustr
RtlDisableThreadProfiling
RtlDllShutdownInProgress
RtlDnsHostNameToComputerName
RtlDoesFileExists_U
RtlDosLongPathNameToNtPathName_U_WithStatus
RtlDosLongPathNameToRelativeNtPathName_U_WithStatus
RtlDosPathNameToNtPathName_U
RtlDosPathNameToNtPathName_U_WithStatus
RtlDosPathNameToRelativeNtPathName_U
RtlDosPathNameToRelativeNtPathName_U_WithStatus
RtlDosSearchPath_U
RtlDosSearchPath_Ustr
RtlDowncaseUnicodeChar
RtlDowncaseUnicodeString
RtlDuplicateUnicodeString
RtlEmptyAtomTable
RtlEnableThreadProfiling
RtlEncodePointer
RtlEncodeRemotePointer
RtlEncodeSystemPointer
RtlEndEnumerationHashTable
RtlEndStrongEnumerationHashTable
RtlEndWeakEnumerationHashTable
RtlEnterCriticalSection
RtlEnumProcessHeaps
RtlEnumerateEntryHashTable
RtlEnumerateGenericTable
RtlEnumerateGenericTableAvl
RtlEnumerateGenericTableLikeADirectory
RtlEnumerateGenericTableWithoutSplaying
RtlEnumerateGenericTableWithoutSplayingAvl
RtlEqualComputerName
RtlEqualDomainName
RtlEqualPrefixSid
RtlEqualSid
RtlEqualString
RtlEqualUnicodeString
RtlEraseUnicodeString
RtlExitUserProcess
RtlExitUserThread
RtlExpandEnvironmentStrings
RtlExpandEnvironmentStrings_U
RtlExpandHashTable
RtlExtendHeap
RtlExtendMemoryBlockLookaside
RtlExtractBitMap
RtlFillMemoryUlong
RtlFillMemoryUlonglong
RtlFindAceByType
RtlFindCharInUnicodeString
RtlFindClearBits
RtlFindClearBitsAndSet
RtlFindClearRuns
RtlFindClosestEncodableLength
RtlFindExportedRoutineByName
RtlFindFirstRunClear
RtlFindLastBackwardRunClear
RtlFindLeastSignificantBit
RtlFindLongestRunClear
RtlFindMessage
RtlFindMostSignificantBit
RtlFindNextForwardRunClear
RtlFindSetBits
RtlFindSetBitsAndClear
RtlFindSetBitsAndClearEx
RtlFindSetBitsEx
RtlFindUnicodePrefix
RtlFindUnicodeSubstring
RtlFirstFreeAce
RtlFlsAlloc
RtlFlsFree
RtlFlushHeaps
RtlFlushSecureMemoryCache
RtlFormatCurrentUserKeyPath
RtlFormatMessage
RtlFormatMessageEx
RtlFreeAnsiString
RtlFreeHandle
RtlFreeHeap
RtlFreeMemoryBlockLookaside
RtlFreeOemString
RtlFreeSid
RtlFreeToPeb
RtlFreeUnicodeString
RtlFreeUserStack
RtlGUIDFromString
RtlGenerate8dot3Name
RtlGetAce
RtlGetActiveConsoleId
RtlGetAppContainerNamedObjectPath
RtlGetAppContainerParent
RtlGetAppContainerSidType
RtlGetCallersAddress
RtlGetCompressionWorkSpaceSize
RtlGetConsoleSessionForegroundProcessId
RtlGetControlSecurityDescriptor
RtlGetCriticalSectionRecursionCount
RtlGetCurrentDirectory_U
RtlGetCurrentPeb
RtlGetCurrentProcessorNumber
RtlGetCurrentProcessorNumberEx
RtlGetCurrentServiceSessionId
RtlGetCurrentTransaction
RtlGetDaclSecurityDescriptor
RtlGetElementGenericTable
RtlGetElementGenericTableAvl
RtlGetEnabledExtendedAndSupervisorFeatures
RtlGetEnabledExtendedFeatures
RtlGetExePath
RtlGetExtendedContextLength
RtlGetExtendedFeaturesMask
RtlGetFrame
RtlGetFullPathName_U
RtlGetFullPathName_UEx
RtlGetFullPathName_UstrEx
RtlGetFunctionTableListHead
RtlGetGroupSecurityDescriptor
RtlGetIntegerAtom
RtlGetLastNtStatus
RtlGetLastWin32Error
RtlGetLengthWithoutLastFullDosOrNtPathElement
RtlGetLengthWithoutTrailingPathSeperators
RtlGetLocaleFileMappingAddress
RtlGetLongestNtPathLength
RtlGetNativeSystemInformation
RtlGetNextEntryHashTable
RtlGetNtGlobalFlags
RtlGetNtProductType
RtlGetNtSystemRoot
RtlGetNtVersionNumbers
RtlGetOwnerSecurityDescriptor
RtlGetParentLocaleName
RtlGetPersistedStateLocation
RtlGetProcessHeaps
RtlGetSaclSecurityDescriptor
RtlGetSearchPath
RtlGetSecurityDescriptorRMControl
RtlGetSetBootStatusData
RtlGetSuiteMask
RtlGetThreadErrorMode
RtlGetTokenNamedObjectPath
RtlGetUnloadEventTrace
RtlGetUnloadEventTraceEx
RtlGetUserInfoHeap
RtlGetVersion
RtlGuardCheckLongJumpTarget
RtlHashUnicodeString
RtlIdentifierAuthoritySid
RtlIdnToAscii
RtlIdnToNameprepUnicode
RtlIdnToUnicode
RtlImageDirectoryEntryToData
RtlImageNtHeader
RtlImageNtHeaderEx
RtlImageRvaToSection
RtlImageRvaToVa
RtlImpersonateSelf
RtlImpersonateSelfEx
RtlInitAnsiString
RtlInitAnsiStringEx
RtlInitBarrier
RtlInitCodePageTable
RtlInitEnumerationHashTable
RtlInitNlsTables
RtlInitString
RtlInitStringEx
RtlInitStrongEnumerationHashTable
RtlInitUnicodeString
RtlInitUnicodeStringEx
RtlInitWeakEnumerationHashTable
RtlInitializeBitMap
RtlInitializeBitMapEx
RtlInitializeConditionVariable
RtlInitializeContext
RtlInitializeCriticalSection
RtlInitializeCriticalSectionAndSpinCount
RtlInitializeExtendedContext
RtlInitializeGenericTable
RtlInitializeGenericTableAvl
RtlInitializeHandleTable
RtlInitializeResource
RtlInitializeSRWLock
RtlInitializeSid
RtlInitializeSidEx
RtlInitializeUnicodePrefix
RtlInsertElementGenericTable
RtlInsertElementGenericTableAvl
RtlInsertElementGenericTableFull
RtlInsertElementGenericTableFullAvl
RtlInsertEntryHashTable
RtlInsertUnicodePrefix
RtlInt64ToUnicodeString
RtlIntegerToChar
RtlIntegerToUnicodeString
RtlInterlockedClearBitRun
RtlInterlockedSetBitRun
RtlIpv4AddressToStringExW
RtlIpv4StringToAddressExW
RtlIpv6AddressToStringExW
RtlIpv6StringToAddressExW
RtlIsCapabilitySid
RtlIsCloudFilesPlaceholder
RtlIsCriticalSectionLocked
RtlIsCriticalSectionLockedByThread
RtlIsCurrentProcess
RtlIsCurrentThread
RtlIsCurrentThreadAttachExempt
RtlIsDosDeviceName_U
RtlIsDosDeviceName_Ustr
RtlIsElevatedRid
RtlIsGenericTableEmpty
RtlIsGenericTableEmptyAvl
RtlIsMultiSessionSku
RtlIsMultiUsersInSessionSku
RtlIsNameInExpression
RtlIsNameInUnUpcasedExpression
RtlIsNonEmptyDirectoryReparsePointAllowed
RtlIsNormalizedString
RtlIsPackageSid
RtlIsParentOfChildAppContainer
RtlIsPartialPlaceholder
RtlIsPartialPlaceholderFileHandle
RtlIsPartialPlaceholderFileInfo
RtlIsProcessorFeaturePresent
RtlIsStateSeparationEnabled
RtlIsTextUnicode
RtlIsThreadWithinLoaderCallout
RtlIsUntrustedObject
RtlIsValidHandle
RtlIsValidIndexHandle
RtlIsValidLocaleName
RtlIsValidProcessTrustLabelSid
RtlKnownExceptionFilter
RtlLCIDToCultureName
RtlLargeIntegerToChar
RtlLcidToLocaleName
RtlLeaveCriticalSection
RtlLengthRequiredSid
RtlLengthSecurityDescriptor
RtlLengthSid
RtlLocalTimeToSystemTime
RtlLocaleNameToLcid
RtlLocateExtendedFeature
RtlLocateLegacyContext
RtlLocateSupervisorFeature
RtlLockBootStatusData
RtlLockCurrentThread
RtlLockHeap
RtlLockMemoryBlockLookaside
RtlLockMemoryZone
RtlLockModuleSection
RtlLookupAtomInAtomTable
RtlLookupElementGenericTable
RtlLookupElementGenericTableAvl
RtlLookupElementGenericTableFull
RtlLookupElementGenericTableFullAvl
RtlLookupEntryHashTable
RtlLookupFirstMatchingElementGenericTableAvl
RtlMakeSelfRelativeSD
RtlMapGenericMask
RtlMultiByteToUnicodeN
RtlMultiByteToUnicodeSize
RtlMultipleAllocateHeap
RtlMultipleFreeHeap
RtlNewInstanceSecurityObject
RtlNewSecurityObject
RtlNewSecurityObjectEx
RtlNewSecurityObjectWithMultipleInheritance
RtlNextUnicodePrefix
RtlNormalizeProcessParams
RtlNormalizeString
RtlNtStatusToDosError
RtlNtStatusToDosErrorNoTeb
RtlNumberGenericTableElements
RtlNumberGenericTableElementsAvl
RtlNumberOfClearBits
RtlNumberOfClearBitsInRange
RtlNumberOfSetBits
RtlNumberOfSetBitsInRange
RtlNumberOfSetBitsUlongPtr
RtlOemStringToUnicodeString
RtlOemToUnicodeN
RtlOpenCurrentUser
RtlOsDeploymentState
RtlOwnerAcesPresent
RtlPinAtomInAtomTable
RtlPopFrame
RtlPrefixString
RtlPrefixUnicodeString
RtlProtectHeap
RtlPushFrame
RtlQueryAtomInAtomTable
RtlQueryCriticalSectionOwner
RtlQueryElevationFlags
RtlQueryEnvironmentVariable
RtlQueryEnvironmentVariable_U
RtlQueryHeapInformation
RtlQueryImageMitigationPolicy
RtlQueryInformationAcl
RtlQueryPackageClaims
RtlQueryPerformanceCounter
RtlQueryPerformanceFrequency
RtlQueryProcessDebugInformation
RtlQueryProtectedPolicy
RtlQueryRegistryValues
RtlQueryRegistryValuesEx
RtlQuerySecurityObject
RtlQueryTagHeap
RtlQueryThreadProfiling
RtlQueryTimeZoneInformation
RtlQueryValidationRunlevel
RtlQueueApcWow64Thread
RtlQueueWorkItem
RtlRandom
RtlRandomEx
RtlRbInsertNodeEx
RtlRbRemoveNode
RtlReAllocateHeap
RtlReadThreadProfilingData
RtlRealPredecessor
RtlRealSuccessor
RtlRegisterSecureMemoryCacheCallback
RtlRegisterThreadWithCsrss
RtlRegisterWait
RtlReleasePebLock
RtlReleasePrivilege
RtlReleaseRelativeName
RtlReleaseResource
RtlReleaseSRWLockExclusive
RtlReleaseSRWLockShared
RtlRemoteCall
RtlRemoveEntryHashTable
RtlRemovePrivileges
RtlRemoveUnicodePrefix
RtlRemoveVectoredContinueHandler
RtlRemoveVectoredExceptionHandler
RtlReplaceSidInSd
RtlReportException
RtlReportExceptionEx
RtlReportSilentProcessExit
RtlReserveChunk
RtlResetMemoryBlockLookaside
RtlResetMemoryZone
RtlResetRtlTranslations
RtlRestoreLastWin32Error
RtlRunDecodeUnicodeString
RtlRunEncodeUnicodeString
RtlSecondsSince1970ToTime
RtlSecondsSince1980ToTime
RtlSectionTableFromVirtualAddress
RtlSelfRelativeToAbsoluteSD
RtlSelfRelativeToAbsoluteSD2
RtlSetAllBits
RtlSetAttributesSecurityDescriptor
RtlSetBit
RtlSetBitEx
RtlSetBits
RtlSetControlSecurityDescriptor
RtlSetCriticalSectionSpinCount
RtlSetCurrentDirectory_U
RtlSetCurrentEnvironment
RtlSetCurrentTransaction
RtlSetDaclSecurityDescriptor
RtlSetEnvironmentStrings
RtlSetEnvironmentVar
RtlSetEnvironmentVariable
RtlSetExtendedFeaturesMask
RtlSetGroupSecurityDescriptor
RtlSetHeapInformation
RtlSetImageMitigationPolicy
RtlSetInformationAcl
RtlSetIoCompletionCallback
RtlSetLastWin32ErrorAndNtStatusFromNtStatus
RtlSetLastWin32Error
RtlSetOwnerSecurityDescriptor
RtlSetPortableOperatingSystem
RtlSetProcessIsCritical
RtlSetProtectedPolicy
RtlSetSaclSecurityDescriptor
RtlSetSearchPathMode
RtlSetSecurityDescriptorRMControl
RtlSetSecurityObject
RtlSetSecurityObjectEx
RtlSetThreadErrorMode
RtlSetThreadIsCritical
RtlSetThreadPoolStartFunc
RtlSetTimeZoneInformation
RtlSetUnhandledExceptionFilter
RtlSetUserFlagsHeap
RtlSetUserValueHeap
RtlSidDominates
RtlSidDominatesForTrust
RtlSidEqualLevel
RtlSidHashInitialize
RtlSidHashLookup
RtlSidIsHigherLevel
RtlSizeHeap
RtlSleepConditionVariableCS
RtlSleepConditionVariableSRW
RtlSplay
RtlStringFromGUID
RtlStringFromGUIDEx
RtlStronglyEnumerateEntryHashTable
RtlSubAuthorityCountSid
RtlSubAuthoritySid
RtlSubtreePredecessor
RtlSubtreeSuccessor
RtlSuffixUnicodeString
RtlSystemTimeToLocalTime
RtlTestBit
RtlTestBitEx
RtlTestProtectedAccess
RtlTimeFieldsToTime
RtlTimeToElapsedTimeFields
RtlTimeToSecondsSince1970
RtlTimeToSecondsSince1980
RtlTimeToTimeFields
RtlTryAcquirePebLock
RtlTryAcquireSRWLockExclusive
RtlTryAcquireSRWLockShared
RtlTryEnterCriticalSection
RtlUTF8ToUnicodeN
RtlUnhandledExceptionFilter
RtlUnhandledExceptionFilter2
RtlUnicodeStringToAnsiString
RtlUnicodeStringToCountedOemString
RtlUnicodeStringToInteger
RtlUnicodeStringToOemString
RtlUnicodeToCustomCPN
RtlUnicodeToMultiByteN
RtlUnicodeToMultiByteSize
RtlUnicodeToOemN
RtlUnicodeToUTF8N
RtlUniform
RtlUnlockBootStatusData
RtlUnlockCurrentThread
RtlUnlockHeap
RtlUnlockMemoryBlockLookaside
RtlUnlockMemoryZone
RtlUnlockModuleSection
RtlUpcaseUnicodeChar
RtlUpcaseUnicodeString
RtlUpcaseUnicodeStringToAnsiString
RtlUpcaseUnicodeStringToCountedOemString
RtlUpcaseUnicodeStringToOemString
RtlUpcaseUnicodeToCustomCPN
RtlUpcaseUnicodeToMultiByteN
RtlUpcaseUnicodeToOemN
RtlUpdateClonedCriticalSection
RtlUpdateClonedSRWLock
RtlUpdateTimer
RtlUpperChar
RtlUpperString
RtlUsageHeap
RtlUserThreadStart
RtlValidAcl
RtlValidProcessProtection
RtlValidRelativeSecurityDescriptor
RtlValidSecurityDescriptor
RtlValidSid
RtlValidateHeap
RtlValidateProcessHeaps
RtlValidateUnicodeString
RtlVerifyVersionInfo
RtlWaitOnAddress
RtlWakeAddressAll
RtlWakeAddressSingle
RtlWakeAllConditionVariable
RtlWakeConditionVariable
RtlWalkFrameChain
RtlWalkHeap
RtlWeaklyEnumerateEntryHashTable
RtlWerpReportException
RtlWow64GetThreadContext
RtlWow64SetThreadContext
RtlWow64EnableFsRedirection
RtlWow64EnableFsRedirectionEx
RtlWriteRegistryValue
RtlZeroHeap
STATE_LOCATION_TYPE
TABLE_SEARCH_RESULT

Unions

RTL_DEBUG_INFORMATION_u
RTL_HANDLE_TABLE_ENTRY
RTL_HEAP_ENTRY_u
RTL_HEAP_WALK_ENTRY_u
RTL_IMAGE_MITIGATION_POLICY