Structs§
- COMPRESSED_
DATA_ INFO - CONTEXT_
CHUNK - CONTEXT_
EX - CURDIR
- DYNAMIC_
FUNCTION_ TABLE - GENERATE_
NAME_ CONTEXT - HEAP_
DEBUGGING_ INFORMATION - HEAP_
EXTENDED_ INFORMATION - HEAP_
INFORMATION - PARSE_
MESSAGE_ CONTEXT - PREFIX_
TABLE - PREFIX_
TABLE_ ENTRY - PROCESS_
HEAP_ INFORMATION - PS_
PKG_ CLAIM - RTLP_
CURDIR_ REF - RTLP_
PROCESS_ REFLECTION_ REFLECTION_ INFORMATION - RTL_
AVL_ TABLE - RTL_
BALANCED_ LINKS - RTL_
BITMAP - RTL_
BITMAP_ EX - RTL_
BITMAP_ RUN - RTL_
BSD_ ITEM - RTL_
DEBUG_ INFORMATION - RTL_
DRIVE_ LETTER_ CURDIR - RTL_
DYNAMIC_ HASH_ TABLE - RTL_
DYNAMIC_ HASH_ TABLE_ CONTEXT - RTL_
DYNAMIC_ HASH_ TABLE_ ENTRY - RTL_
DYNAMIC_ HASH_ TABLE_ ENUMERATOR - RTL_
ELEVATION_ FLAGS - RTL_
GENERIC_ TABLE - RTL_
HANDLE_ TABLE - RTL_
HEAP_ ENTRY - RTL_
HEAP_ ENTRY_ u_ s1 - RTL_
HEAP_ ENTRY_ u_ s2 - RTL_
HEAP_ INFORMATION - RTL_
HEAP_ PARAMETERS - RTL_
HEAP_ TAG - RTL_
HEAP_ TAG_ INFO - RTL_
HEAP_ USAGE - RTL_
HEAP_ USAGE_ ENTRY - RTL_
HEAP_ WALK_ ENTRY - RTL_
HEAP_ WALK_ ENTRY_ u_ Block - RTL_
HEAP_ WALK_ ENTRY_ u_ Segment - RTL_
IMAGE_ MITIGATION_ ASLR_ POLICY - RTL_
IMAGE_ MITIGATION_ BINARY_ SIGNATURE_ POLICY - RTL_
IMAGE_ MITIGATION_ CHILD_ PROCESS_ POLICY - RTL_
IMAGE_ MITIGATION_ CONTROL_ FLOW_ GUARD_ POLICY - RTL_
IMAGE_ MITIGATION_ DEP_ POLICY - RTL_
IMAGE_ MITIGATION_ DYNAMIC_ CODE_ POLICY - RTL_
IMAGE_ MITIGATION_ EXTENSION_ POINT_ DISABLE_ POLICY - RTL_
IMAGE_ MITIGATION_ FONT_ DISABLE_ POLICY - RTL_
IMAGE_ MITIGATION_ HEAP_ POLICY - RTL_
IMAGE_ MITIGATION_ IMAGE_ LOAD_ POLICY - RTL_
IMAGE_ MITIGATION_ PAYLOAD_ RESTRICTION_ POLICY - RTL_
IMAGE_ MITIGATION_ SEHOP_ POLICY - RTL_
IMAGE_ MITIGATION_ STRICT_ HANDLE_ CHECK_ POLICY - RTL_
IMAGE_ MITIGATION_ SYSTEM_ CALL_ DISABLE_ POLICY - RTL_
MEMORY_ ZONE - RTL_
MEMORY_ ZONE_ SEGMENT - RTL_
PROCESS_ HEAPS - RTL_
PROCESS_ VERIFIER_ OPTIONS - RTL_
QUERY_ REGISTRY_ TABLE - RTL_
RB_ TREE - RTL_
RELATIVE_ NAME_ U - RTL_
RESOURCE - RTL_
SPLAY_ LINKS - RTL_
TIME_ ZONE_ INFORMATION - RTL_
UNLOAD_ EVENT_ TRACE - RTL_
UNLOAD_ EVENT_ TRAC E32 - RTL_
USER_ PROCESS_ INFORMATION - RTL_
USER_ PROCESS_ PARAMETERS - TIME_
FIELDS - UNICODE_
PREFIX_ TABLE - UNICODE_
PREFIX_ TABLE_ ENTRY
Constants§
- CONTEXT_
EX_ LENGTH - Child
AppContainer SidType - DOS_
MAX_ COMPONENT_ LENGTH - DOS_
MAX_ PATH_ LENGTH - Disallow
Unassigned - Generic
Equal - Generic
Greater Than - Generic
Less Than - HASH_
STRING_ ALGORITHM_ DEFAULT - HASH_
STRING_ ALGORITHM_ INVALID - HASH_
STRING_ ALGORITHM_ X65599 - HEAP_
CLASS_ 0 - HEAP_
CLASS_ 1 - HEAP_
CLASS_ 2 - HEAP_
CLASS_ 3 - HEAP_
CLASS_ 4 - HEAP_
CLASS_ 5 - HEAP_
CLASS_ 6 - HEAP_
CLASS_ 7 - HEAP_
CLASS_ 8 - HEAP_
CLASS_ MASK - HEAP_
COMPATIBILITY_ LAL - HEAP_
COMPATIBILITY_ LFH - HEAP_
COMPATIBILITY_ STANDARD - HEAP_
SETTABLE_ USER_ FLAG1 - HEAP_
SETTABLE_ USER_ FLAG2 - HEAP_
SETTABLE_ USER_ FLAG3 - HEAP_
SETTABLE_ USER_ FLAGS - HEAP_
SETTABLE_ USER_ VALUE - HEAP_
USAGE_ ALLOCATED_ BLOCKS - HEAP_
USAGE_ FREE_ BUFFER - Heap
Detailed Failure Information - Heap
SetDebugging Information - Image
Aslr Policy - Image
Child Process Policy - Image
Control Flow Guard Policy - Image
DepPolicy - Image
Dynamic Code Policy - Image
Extension Point Disable Policy - Image
Font Disable Policy - Image
Heap Policy - Image
Image Load Policy - Image
Mitigation Options Mask - Image
Payload Restriction Policy - Image
Sehop Policy - Image
Signature Policy - Image
Strict Handle Check Policy - Image
System Call Disable Policy - Invalid
AppContainer SidType - Location
Type File System - Location
Type Maximum - Location
Type Registry - MAX_
UNICODE_ STACK_ BUFFER_ LENGTH - MaxApp
Container SidType - MaxImage
Mitigation Policy - NormC
- NormC
Disallow Unassigned - NormD
- NormD
Disallow Unassigned - Norm
Idna - Norm
Idna Disallow Unassigned - NormKC
- NormKC
Disallow Unassigned - NormKD
- NormKD
Disallow Unassigned - Norm
Other - NotApp
Container SidType - Parent
AppContainer SidType - RF_
CALLBACK - RF_
KERNEL_ DYNAMIC - RF_
SORTED - RF_
UNSORTED - RTL_
ACQUIRE_ PRIVILEGE_ PROCESS - RTL_
ACQUIRE_ PRIVILEGE_ REVERT - RTL_
ATOM_ INVALID_ ATOM - RTL_
ATOM_ MAXIMUM_ INTEGER_ ATOM - RTL_
ATOM_ MAXIMUM_ NAME_ LENGTH - RTL_
ATOM_ PINNED - RTL_
ATOM_ TABLE_ DEFAULT_ NUMBER_ OF_ BUCKETS - RTL_
BARRIER_ FLAGS_ BLOCK_ ONLY - RTL_
BARRIER_ FLAGS_ NO_ DELETE - RTL_
BARRIER_ FLAGS_ SPIN_ ONLY - RTL_
CLONE_ PROCESS_ FLAGS_ CREATE_ SUSPENDED - RTL_
CLONE_ PROCESS_ FLAGS_ INHERIT_ HANDLES - RTL_
CLONE_ PROCESS_ FLAGS_ NO_ SYNCHRONIZE - RTL_
CREATE_ ENVIRONMENT_ EMPTY - RTL_
CREATE_ ENVIRONMENT_ TRANSLATE - RTL_
CREATE_ ENVIRONMENT_ TRANSLATE_ FROM_ OEM - RTL_
DOS_ SEARCH_ PATH_ FLAG_ APPLY_ DEFAULT_ EXTENSION_ WHEN_ NOT_ RELATIVE_ PATH_ EVEN_ IF_ FILE_ HAS_ EXTENSION - RTL_
DOS_ SEARCH_ PATH_ FLAG_ APPLY_ ISOLATION_ REDIRECTION - RTL_
DOS_ SEARCH_ PATH_ FLAG_ DISALLOW_ DOT_ RELATIVE_ PATH_ SEARCH - RTL_
DRIVE_ LETTER_ VALID - RTL_
DUPLICATE_ UNICODE_ STRING_ ALLOCATE_ NULL_ STRING - RTL_
DUPLICATE_ UNICODE_ STRING_ NULL_ TERMINATE - RTL_
ERRORMODE_ FAILCRITICALERRORS - RTL_
ERRORMODE_ NOGPFAULTERRORBOX - RTL_
ERRORMODE_ NOOPENFILEERRORBOX - RTL_
FIND_ CHAR_ IN_ UNICODE_ STRING_ CASE_ INSENSITIVE - RTL_
FIND_ CHAR_ IN_ UNICODE_ STRING_ COMPLEMENT_ CHAR_ SET - RTL_
FIND_ CHAR_ IN_ UNICODE_ STRING_ START_ AT_ END - RTL_
HANDLE_ ALLOCATED - RTL_
HASH_ ALLOCATED_ HEADER - RTL_
HASH_ RESERVED_ SIGNATURE - RTL_
HEAP_ BUSY - RTL_
HEAP_ PROTECTED_ ENTRY - RTL_
HEAP_ SEGMENT - RTL_
HEAP_ SETTABLE_ FLAG1 - RTL_
HEAP_ SETTABLE_ FLAG2 - RTL_
HEAP_ SETTABLE_ FLAG3 - RTL_
HEAP_ SETTABLE_ FLAGS - RTL_
HEAP_ SETTABLE_ VALUE - RTL_
HEAP_ UNCOMMITTED_ RANGE - RTL_
IMAGE_ MITIGATION_ FLAG_ AUDIT - RTL_
IMAGE_ MITIGATION_ FLAG_ OSDEFAULT - RTL_
IMAGE_ MITIGATION_ FLAG_ REMOVE - RTL_
IMAGE_ MITIGATION_ FLAG_ RESET - RTL_
IMAGE_ NT_ HEADER_ EX_ FLAG_ NO_ RANGE_ CHECK - RTL_
MAX_ DRIVE_ LETTERS - RTL_
QUERY_ PROCESS_ BACKTRACES - RTL_
QUERY_ PROCESS_ CS_ OWNER - RTL_
QUERY_ PROCESS_ HEAP_ ENTRIES - RTL_
QUERY_ PROCESS_ HEAP_ ENTRIES_ EX - RTL_
QUERY_ PROCESS_ HEAP_ SUMMARY - RTL_
QUERY_ PROCESS_ HEAP_ TAGS - RTL_
QUERY_ PROCESS_ LOCKS - RTL_
QUERY_ PROCESS_ MODULES - RTL_
QUERY_ PROCESS_ MODULE S32 - RTL_
QUERY_ PROCESS_ MODULESEX - RTL_
QUERY_ PROCESS_ NONINVASIVE - RTL_
QUERY_ PROCESS_ VERIFIER_ OPTIONS - RTL_
QUERY_ REGISTRY_ DELETE - RTL_
QUERY_ REGISTRY_ DIRECT - RTL_
QUERY_ REGISTRY_ NOEXPAND - RTL_
QUERY_ REGISTRY_ NOVALUE - RTL_
QUERY_ REGISTRY_ REQUIRED - RTL_
QUERY_ REGISTRY_ SUBKEY - RTL_
QUERY_ REGISTRY_ TOPKEY - RTL_
REGISTRY_ ABSOLUTE - RTL_
REGISTRY_ CONTROL - RTL_
REGISTRY_ DEVICEMAP - RTL_
REGISTRY_ HANDLE - RTL_
REGISTRY_ MAXIMUM - RTL_
REGISTRY_ OPTIONAL - RTL_
REGISTRY_ SERVICES - RTL_
REGISTRY_ USER - RTL_
REGISTRY_ WINDOWS_ NT - RTL_
RESOURCE_ FLAG_ LONG_ TERM - RTL_
STACK_ WALKING_ MODE_ FRAMES_ TO_ SKIP_ SHIFT - RTL_
UNLOAD_ EVENT_ TRACE_ NUMBER - RTL_
USER_ PROC_ APP_ MANIFEST_ PRESENT - RTL_
USER_ PROC_ CASE_ SENSITIVE - RTL_
USER_ PROC_ CURDIR_ CLOSE - RTL_
USER_ PROC_ CURDIR_ INHERIT - RTL_
USER_ PROC_ DISABLE_ HEAP_ DECOMMIT - RTL_
USER_ PROC_ DLL_ REDIRECTION_ LOCAL - RTL_
USER_ PROC_ IMAGE_ KEY_ MISSING - RTL_
USER_ PROC_ OPTIN_ PROCESS - RTL_
USER_ PROC_ PARAMS_ NORMALIZED - RTL_
USER_ PROC_ PROFILE_ KERNEL - RTL_
USER_ PROC_ PROFILE_ SERVER - RTL_
USER_ PROC_ PROFILE_ USER - RTL_
USER_ PROC_ RESERVE_ 1MB - RTL_
USER_ PROC_ RESERVE_ 16MB - RTL_
WALK_ USER_ MODE_ STACK - RTL_
WALK_ VALID_ FLAGS - RtlBsd
Item AabEnabled - RtlBsd
Item AabTimeout - RtlBsd
Item Boot Attempt Count - RtlBsd
Item Boot Checkpoint - RtlBsd
Item Boot Good - RtlBsd
Item Boot Id - RtlBsd
Item Boot Shutdown - RtlBsd
Item Checksum - RtlBsd
Item Error Info - RtlBsd
Item Max - RtlBsd
Item Power Button Press Info - RtlBsd
Item Product Type - RtlBsd
Item Reported Abnormal Shutdown Boot Id - RtlBsd
Item Shutdown Boot Id - RtlBsd
Item Version Number - RtlBsd
Power Transition - RtlBsd
Sleep InProgress - RtlMitigation
Option State NotConfigured - RtlMitigation
Option State Off - RtlMitigation
Option State On - RtlNtdll
Name - “ntdll.dll”
- RtlPath
Type Drive Absolute - RtlPath
Type Drive Relative - RtlPath
Type Local Device - RtlPath
Type Relative - RtlPath
Type Root Local Device - RtlPath
Type Rooted - RtlPath
Type UncAbsolute - RtlPath
Type Unknown - Table
Empty Tree - Table
Found Node - Table
Insert AsLeft - Table
Insert AsRight
Statics§
Functions§
- Append
Tail ⚠List - CLEAR_
PARSE_ MESSAGE_ CONTEXT_ FLAG - HASH_
ENTRY_ KEY - INIT_
PARSE_ MESSAGE_ CONTEXT - Initialize
List Head - Insert
Head ⚠List - Insert
Tail ⚠List - IsList
Empty - LdrInitialize
Thunk ⚠ - PfxFind
Prefix ⚠ - PfxInitialize⚠
- PfxInsert
Prefix ⚠ - PfxRemove
Prefix ⚠ - PopEntry
List ⚠ - Push
Entry List - Remove
Entry ⚠List - Remove
Head ⚠List - Remove
Tail ⚠List - RtlAbsolute
ToSelf ⚠RelativeSD - RtlAcquire
PebLock ⚠ - RtlAcquire
Privilege ⚠ - RtlAcquire
ReleaseSRW ⚠Lock Exclusive - RtlAcquire
Resource ⚠Exclusive - RtlAcquire
Resource ⚠Shared - RtlAcquireSRW
Lock ⚠Exclusive - RtlAcquireSRW
Lock ⚠Shared - RtlActive
Enumerators Hash Table - RtlAdd
Access ⚠Allowed Ace - RtlAdd
Access ⚠Allowed AceEx - RtlAdd
Access ⚠Allowed Object Ace - RtlAdd
Access ⚠Denied Ace - RtlAdd
Access ⚠Denied AceEx - RtlAdd
Access ⚠Denied Object Ace - RtlAdd
Ace ⚠ - RtlAdd
Atom ⚠ToAtom Table - RtlAdd
Audit ⚠Access Ace - RtlAdd
Audit ⚠Access AceEx - RtlAdd
Audit ⚠Access Object Ace - RtlAdd
Compound ⚠Ace - RtlAdd
Integrity ⚠Label ToBoundary Descriptor - RtlAdd
Mandatory ⚠Ace - RtlAddSID
ToBoundary ⚠Descriptor - RtlAdd
Vectored ⚠Continue Handler - RtlAdd
Vectored ⚠Exception Handler - RtlAddress
InSection ⚠Table - RtlAdjust
Privilege ⚠ - RtlAllocate
AndInitialize ⚠Sid - RtlAllocate
From ⚠Peb - RtlAllocate
Handle ⚠ - RtlAllocate
Heap ⚠ - RtlAllocate
Memory ⚠Block Lookaside - RtlAllocate
Memory ⚠Zone - RtlAnsi
Char ⚠ToUnicode Char - RtlAnsi
String ⚠ToUnicode String - RtlAppend
Asciiz ⚠ToString - RtlAppend
String ⚠ToString - RtlAppend
Unicode ⚠String ToString - RtlAppend
Unicode ⚠ToString - RtlAppx
IsFile ⚠Owned ByTrusted Installer - RtlAre
AllAccesses ⚠Granted - RtlAre
AnyAccesses ⚠Granted - RtlAre
Bits ⚠Clear - RtlAre
Bits ⚠Set - RtlAre
Long ⚠Paths Enabled - RtlBarrier⚠
- RtlBarrier
ForDelete ⚠ - RtlCapability
Check ⚠ - RtlChar
ToInteger ⚠ - RtlCheck
Bit ⚠ - RtlCheck
Boot ⚠Status Integrity - RtlCheck
ForOrphaned ⚠Critical Sections - RtlCheck
Portable ⚠Operating System - RtlCheck
Registry ⚠Key - RtlCheck
Sandboxed ⚠Token - RtlCheck
Token ⚠Capability - RtlCheck
Token ⚠Membership - RtlCheck
Token ⚠Membership Ex - RtlClean
UpTEB ⚠Lang Lists - RtlClear
AllBits ⚠ - RtlClear
AllBits ⚠Ex - RtlClear
Bit ⚠ - RtlClear
BitEx ⚠ - RtlClear
Bits ⚠ - RtlClone
User ⚠Process - RtlCommit
Debug ⚠Info - RtlCompact
Heap ⚠ - RtlCompare
Altitudes ⚠ - RtlCompare
Memory ⚠Ulong - RtlCompare
String ⚠ - RtlCompare
Unicode ⚠String - RtlCompare
Unicode ⚠Strings - RtlCompress
Buffer ⚠ - RtlCompress
Chunks ⚠ - RtlCompute
Crc32 ⚠ - RtlCompute
Import ⚠Table Hash - RtlCompute
Privatized ⚠DllName_ U - RtlConsole
Multi ⚠Byte ToUnicodeN - RtlContract
Hash ⚠Table - RtlConvert
Exclusive ⚠ToShared - RtlConvertLCID
ToString ⚠ - RtlConvert
Long ToLuid - RtlConvert
Shared ⚠ToExclusive - RtlConvert
SidTo ⚠Unicode String - RtlConvert
ToAuto ⚠Inherit Security Object - RtlConvert
Ulong ToLuid - RtlCopy
BitMap ⚠ - RtlCopy
Extended ⚠Context - RtlCopy
Luid ⚠ - RtlCopy
Luid ⚠AndAttributes Array - RtlCopy
Security ⚠Descriptor - RtlCopy
Sid ⚠ - RtlCopy
SidAnd ⚠Attributes Array - RtlCopy
String ⚠ - RtlCopy
Unicode ⚠String - RtlCreate
Acl ⚠ - RtlCreate
Atom ⚠Table - RtlCreate
Boot ⚠Status Data File - RtlCreate
Boundary ⚠Descriptor - RtlCreate
Environment ⚠ - RtlCreate
Environment ⚠Ex - RtlCreate
Hash ⚠Table - RtlCreate
Heap ⚠ - RtlCreate
Memory ⚠Block Lookaside - RtlCreate
Memory ⚠Zone - RtlCreate
Process ⚠Parameters - RtlCreate
Process ⚠Parameters Ex - RtlCreate
Process ⚠Reflection - RtlCreate
Query ⚠Debug Buffer - RtlCreate
Registry ⚠Key - RtlCreate
Security ⚠Descriptor - RtlCreate
Service ⚠Sid - RtlCreate
TagHeap ⚠ - RtlCreate
Timer ⚠ - RtlCreate
Timer ⚠Queue - RtlCreate
Unicode ⚠String - RtlCreate
Unicode ⚠String From Asciiz - RtlCreate
User ⚠Process - RtlCreate
User ⚠Process Ex - RtlCreate
User ⚠Stack - RtlCreate
User ⚠Thread - RtlCreate
Virtual ⚠Account Sid - RtlCulture
Name ⚠ToLCID - RtlCustomCP
ToUnicodeN ⚠ - RtlCutover
Time ⚠ToSystem Time - RtlDe
Commit ⚠Debug Info - RtlDe
Normalize ⚠Process Params - RtlDecode
Pointer ⚠ - RtlDecode
Remote ⚠Pointer - RtlDecode
System ⚠Pointer - RtlDecompress
Buffer ⚠ - RtlDecompress
Buffer ⚠Ex - RtlDecompress
Chunks ⚠ - RtlDecompress
Fragment ⚠ - RtlDefault
NpAcl ⚠ - RtlDelete⚠
- RtlDelete
Ace ⚠ - RtlDelete
Atom ⚠From Atom Table - RtlDelete
Barrier ⚠ - RtlDelete
Boundary ⚠Descriptor - RtlDelete
Critical ⚠Section - RtlDelete
Element ⚠Generic Table - RtlDelete
Element ⚠Generic Table Avl - RtlDelete
Hash ⚠Table - RtlDelete
NoSplay ⚠ - RtlDelete
Registry ⚠Value - RtlDelete
Resource ⚠ - RtlDelete
Security ⚠Object - RtlDelete
Timer ⚠ - RtlDelete
Timer ⚠Queue - RtlDelete
Timer ⚠Queue Ex - RtlDeregister
Secure ⚠Memory Cache Callback - RtlDeregister
Wait ⚠ - RtlDeregister
Wait ⚠Ex - RtlDerive
Capability ⚠Sids From Name - RtlDescribe
Chunk ⚠ - RtlDestroy
Atom ⚠Table - RtlDestroy
Environment ⚠ - RtlDestroy
Handle ⚠Table - RtlDestroy
Heap ⚠ - RtlDestroy
Memory ⚠Block Lookaside - RtlDestroy
Memory ⚠Zone - RtlDestroy
Process ⚠Parameters - RtlDestroy
Query ⚠Debug Buffer - RtlDetect
Heap ⚠Leaks - RtlDetermine
DosPath ⚠Name Type_ U - RtlDetermine
DosPath ⚠Name Type_ Ustr - RtlDisable
Thread ⚠Profiling - RtlDll
Shutdown ⚠InProgress - RtlDns
Host ⚠Name ToComputer Name - RtlDoes
File ⚠Exists_ U - RtlDos
Long ⚠Path Name ToNt Path Name_ U_ With Status - RtlDos
Long ⚠Path Name ToRelative NtPath Name_ U_ With Status - RtlDos
Path ⚠Name ToNt Path Name_ U - RtlDos
Path ⚠Name ToNt Path Name_ U_ With Status - RtlDos
Path ⚠Name ToRelative NtPath Name_ U - RtlDos
Path ⚠Name ToRelative NtPath Name_ U_ With Status - RtlDos
Search ⚠Path_ U - RtlDos
Search ⚠Path_ Ustr - RtlDowncase
Unicode ⚠Char - RtlDowncase
Unicode ⚠String - RtlDuplicate
Unicode ⚠String - RtlEmpty
Atom ⚠Table - RtlEmpty
Buckets Hash Table - RtlEnable
Thread ⚠Profiling - RtlEncode
Pointer ⚠ - RtlEncode
Remote ⚠Pointer - RtlEncode
System ⚠Pointer - RtlEnd
Enumeration ⚠Hash Table - RtlEnd
Strong ⚠Enumeration Hash Table - RtlEnd
Weak ⚠Enumeration Hash Table - RtlEnter
Critical ⚠Section - RtlEnum
Process ⚠Heaps - RtlEnumerate
Entry ⚠Hash Table - RtlEnumerate
Generic ⚠Table - RtlEnumerate
Generic ⚠Table Avl - RtlEnumerate
Generic ⚠Table LikeA Directory - RtlEnumerate
Generic ⚠Table Without Splaying - RtlEnumerate
Generic ⚠Table Without Splaying Avl - RtlEqual
Computer ⚠Name - RtlEqual
Domain ⚠Name - RtlEqual
Prefix ⚠Sid - RtlEqual
Sid ⚠ - RtlEqual
String ⚠ - RtlEqual
Unicode ⚠String - RtlErase
Unicode ⚠String - RtlExit
User ⚠Process - RtlExit
User ⚠Thread - RtlExpand
Environment ⚠Strings - RtlExpand
Environment ⚠Strings_ U - RtlExpand
Hash ⚠Table - RtlExtend
Heap ⚠ - RtlExtend
Memory ⚠Block Lookaside - RtlExtract
BitMap ⚠ - RtlFill
Memory ⚠Ulong - RtlFill
Memory ⚠Ulonglong - RtlFind
AceBy ⚠Type - RtlFind
Char ⚠InUnicode String - RtlFind
Clear ⚠Bits - RtlFind
Clear ⚠Bits AndSet - RtlFind
Clear ⚠Runs - RtlFind
Closest ⚠Encodable Length - RtlFind
Exported ⚠Routine ByName - RtlFind
First ⚠RunClear - RtlFind
Last ⚠Backward RunClear - RtlFind
Least ⚠Significant Bit - RtlFind
Longest ⚠RunClear - RtlFind
Message ⚠ - RtlFind
Most ⚠Significant Bit - RtlFind
Next ⚠Forward RunClear - RtlFind
SetBits ⚠ - RtlFind
SetBits ⚠AndClear - RtlFind
SetBits ⚠AndClear Ex - RtlFind
SetBits ⚠Ex - RtlFind
Unicode ⚠Prefix - RtlFind
Unicode ⚠Substring - RtlFirst
Free ⚠Ace - RtlFls
Alloc ⚠ - RtlFls
Free ⚠ - RtlFlush
Heaps ⚠ - RtlFlush
Secure ⚠Memory Cache - RtlFormat
Current ⚠User KeyPath - RtlFormat
Message ⚠ - RtlFormat
Message ⚠Ex - RtlFree
Ansi ⚠String - RtlFree
Handle ⚠ - RtlFree
Heap ⚠ - RtlFree
Memory ⚠Block Lookaside - RtlFree
OemString ⚠ - RtlFree
Sid ⚠ - RtlFree
ToPeb ⚠ - RtlFree
Unicode ⚠String - RtlFree
User ⚠Stack - RtlGUID
From ⚠String - RtlGenerate8dot3
Name ⚠ - RtlGet
Ace ⚠ - RtlGet
Active ⚠Console Id - RtlGet
AppContainer ⚠Named Object Path - RtlGet
AppContainer ⚠Parent - RtlGet
AppContainer ⚠SidType - RtlGet
Callers ⚠Address - RtlGet
Compression ⚠Work Space Size - RtlGet
Console ⚠Session Foreground Process Id - RtlGet
Control ⚠Security Descriptor - RtlGet
Critical ⚠Section Recursion Count - RtlGet
Current ⚠Directory_ U - RtlGet
Current ⚠Peb - RtlGet
Current ⚠Processor Number - RtlGet
Current ⚠Processor Number Ex - RtlGet
Current ⚠Service Session Id - RtlGet
Current ⚠Transaction - RtlGet
Dacl ⚠Security Descriptor - RtlGet
Element ⚠Generic Table - RtlGet
Element ⚠Generic Table Avl - RtlGet
Enabled ⚠Extended AndSupervisor Features - RtlGet
Enabled ⚠Extended Features - RtlGet
ExePath ⚠ - RtlGet
Extended ⚠Context Length - RtlGet
Extended ⚠Features Mask - RtlGet
Frame ⚠ - RtlGet
Full ⚠Path Name_ U - RtlGet
Full ⚠Path Name_ UEx - RtlGet
Full ⚠Path Name_ Ustr Ex - RtlGet
Function ⚠Table List Head - RtlGet
Group ⚠Security Descriptor - RtlGet
Integer ⚠Atom - RtlGet
Last ⚠NtStatus - RtlGet
Last ⚠Win32 Error - RtlGet
Length ⚠Without Last Full DosOr NtPath Element - RtlGet
Length ⚠Without Trailing Path Seperators - RtlGet
Locale ⚠File Mapping Address - RtlGet
Longest ⚠NtPath Length - RtlGet
Native ⚠System Information - RtlGet
Next ⚠Entry Hash Table - RtlGet
NtGlobal ⚠Flags - RtlGet
NtProduct ⚠Type - RtlGet
NtSystem ⚠Root - RtlGet
NtVersion ⚠Numbers - RtlGet
Owner ⚠Security Descriptor - RtlGet
Parent ⚠Locale Name - RtlGet
Persisted ⚠State Location - RtlGet
Process ⚠Heaps - RtlGet
Sacl ⚠Security Descriptor - RtlGet
Search ⚠Path - RtlGet
Security ⚠DescriptorRM Control - RtlGet
SetBoot ⚠Status Data - RtlGet
Suite ⚠Mask - RtlGet
Thread ⚠Error Mode - RtlGet
Token ⚠Named Object Path - RtlGet
Unload ⚠Event Trace - RtlGet
Unload ⚠Event Trace Ex - RtlGet
User ⚠Info Heap - RtlGet
Version ⚠ - RtlGuard
Check ⚠Long Jump Target - RtlHash
Unicode ⚠String - RtlIdentifier
Authority ⚠Sid - RtlIdn
ToAscii ⚠ - RtlIdn
ToNameprep ⚠Unicode - RtlIdn
ToUnicode ⚠ - RtlImage
Directory ⚠Entry ToData - RtlImage
NtHeader ⚠ - RtlImage
NtHeader ⚠Ex - RtlImage
RvaTo ⚠Section - RtlImage
RvaTo ⚠Va - RtlImpersonate
Self ⚠ - RtlImpersonate
Self ⚠Ex - RtlInit
Ansi ⚠String - RtlInit
Ansi ⚠String Ex - RtlInit
Barrier ⚠ - RtlInit
Code ⚠Page Table - RtlInit
Empty Unicode String - RtlInit
Enumeration ⚠Hash Table - RtlInit
Hash Table Context - RtlInit
Hash Table Context From Enumerator - RtlInit
NlsTables ⚠ - RtlInit
String ⚠ - RtlInit
String ⚠Ex - RtlInit
Strong ⚠Enumeration Hash Table - RtlInit
Unicode ⚠String - RtlInit
Unicode ⚠String Ex - RtlInit
Weak ⚠Enumeration Hash Table - RtlInitialize
BitMap ⚠ - RtlInitialize
BitMap ⚠Ex - RtlInitialize
Condition ⚠Variable - RtlInitialize
Context ⚠ - RtlInitialize
Critical ⚠Section - RtlInitialize
Critical ⚠Section AndSpin Count - RtlInitialize
Extended ⚠Context - RtlInitialize
Generic ⚠Table - RtlInitialize
Generic ⚠Table Avl - RtlInitialize
Handle ⚠Table - RtlInitialize
Resource ⚠ - RtlInitializeSRW
Lock ⚠ - RtlInitialize
Sid ⚠ - RtlInitialize
SidEx ⚠ - RtlInitialize
Splay Links - RtlInitialize
Unicode ⚠Prefix - RtlInsert
AsLeft Child - RtlInsert
AsRight Child - RtlInsert
Element ⚠Generic Table - RtlInsert
Element ⚠Generic Table Avl - RtlInsert
Element ⚠Generic Table Full - RtlInsert
Element ⚠Generic Table Full Avl - RtlInsert
Entry ⚠Hash Table - RtlInsert
Unicode ⚠Prefix - RtlInt64
ToUnicode ⚠String - RtlInteger
ToChar ⚠ - RtlInteger
ToUnicode ⚠String - RtlInterlocked
Clear ⚠BitRun - RtlInterlocked
SetBit ⚠Run - RtlIpv4
Address ⚠ToString ExW - RtlIpv4
String ⚠ToAddress ExW - RtlIpv6
Address ⚠ToString ExW - RtlIpv6
String ⚠ToAddress ExW - RtlIs
Capability ⚠Sid - RtlIs
Cloud ⚠Files Placeholder - RtlIs
Critical ⚠Section Locked - RtlIs
Critical ⚠Section Locked ByThread - RtlIs
Current ⚠Process - RtlIs
Current ⚠Thread - RtlIs
Current ⚠Thread Attach Exempt - RtlIs
DosDevice ⚠Name_ U - RtlIs
DosDevice ⚠Name_ Ustr - RtlIs
Elevated ⚠Rid - RtlIs
Equal Luid - RtlIs
Generic ⚠Table Empty - RtlIs
Generic ⚠Table Empty Avl - RtlIs
Left ⚠Child - RtlIs
Multi ⚠Session Sku - RtlIs
Multi ⚠Users InSession Sku - RtlIs
Name ⚠InExpression - RtlIs
Name ⚠InUn Upcased Expression - RtlIs
NonEmpty ⚠Directory Reparse Point Allowed - RtlIs
Normalized ⚠String - RtlIs
Null ⚠OrEmpty Unicode String - RtlIs
Package ⚠Sid - RtlIs
Parent ⚠OfChild AppContainer - RtlIs
Partial ⚠Placeholder - RtlIs
Partial ⚠Placeholder File Handle - RtlIs
Partial ⚠Placeholder File Info - RtlIs
Processor ⚠Feature Present - RtlIs
Right ⚠Child - RtlIs
Root ⚠ - RtlIs
State ⚠Separation Enabled - RtlIs
Text ⚠Unicode - RtlIs
Thread ⚠Within Loader Callout - RtlIs
Untrusted ⚠Object - RtlIs
Valid ⚠Handle - RtlIs
Valid ⚠Index Handle - RtlIs
Valid ⚠Locale Name - RtlIs
Valid ⚠Process Trust Label Sid - RtlIs
Zero Luid - RtlKnown
Exception ⚠Filter - RtlLCID
ToCulture ⚠Name - RtlLarge
Integer ⚠ToChar - RtlLcid
ToLocale ⚠Name - RtlLeave
Critical ⚠Section - RtlLeft
Child - RtlLength
Required ⚠Sid - RtlLength
Security ⚠Descriptor - RtlLength
Sid ⚠ - RtlLocal
Time ⚠ToSystem Time - RtlLocale
Name ⚠ToLcid - RtlLocate
Extended ⚠Feature - RtlLocate
Legacy ⚠Context - RtlLocate
Supervisor ⚠Feature - RtlLock
Boot ⚠Status Data - RtlLock
Current ⚠Thread - RtlLock
Heap ⚠ - RtlLock
Memory ⚠Block Lookaside - RtlLock
Memory ⚠Zone - RtlLock
Module ⚠Section - RtlLookup
Atom ⚠InAtom Table - RtlLookup
Element ⚠Generic Table - RtlLookup
Element ⚠Generic Table Avl - RtlLookup
Element ⚠Generic Table Full - RtlLookup
Element ⚠Generic Table Full Avl - RtlLookup
Entry ⚠Hash Table - RtlLookup
First ⚠Matching Element Generic Table Avl - RtlMake
Self ⚠RelativeSD - RtlMap
Generic ⚠Mask - RtlMulti
Byte ⚠ToUnicodeN - RtlMulti
Byte ⚠ToUnicode Size - RtlMultiple
Allocate ⚠Heap - RtlMultiple
Free ⚠Heap - RtlNew
Instance ⚠Security Object - RtlNew
Security ⚠Object - RtlNew
Security ⚠Object Ex - RtlNew
Security ⚠Object With Multiple Inheritance - RtlNext
Unicode ⚠Prefix - RtlNon
Empty Buckets Hash Table - RtlNormalize
Process ⚠Params - RtlNormalize
String ⚠ - RtlNt
Status ⚠ToDos Error - RtlNt
Status ⚠ToDos Error NoTeb - RtlNumber
Generic ⚠Table Elements - RtlNumber
Generic ⚠Table Elements Avl - RtlNumber
OfClear ⚠Bits - RtlNumber
OfClear ⚠Bits InRange - RtlNumber
OfSet ⚠Bits - RtlNumber
OfSet ⚠Bits InRange - RtlNumber
OfSet ⚠Bits Ulong Ptr - RtlOem
String ⚠ToUnicode String - RtlOem
ToUnicodeN ⚠ - RtlOpen
Current ⚠User - RtlOs
Deployment ⚠State - RtlOwner
Aces ⚠Present - RtlParent
- RtlPin
Atom ⚠InAtom Table - RtlPop
Frame ⚠ - RtlPrefix
String ⚠ - RtlPrefix
Unicode ⚠String - RtlProtect
Heap ⚠ - RtlPush
Frame ⚠ - RtlQuery
Atom ⚠InAtom Table - RtlQuery
Critical ⚠Section Owner - RtlQuery
Elevation ⚠Flags - RtlQuery
Environment ⚠Variable - RtlQuery
Environment ⚠Variable_ U - RtlQuery
Heap ⚠Information - RtlQuery
Image ⚠Mitigation Policy - RtlQuery
Information ⚠Acl - RtlQuery
Package ⚠Claims - RtlQuery
Performance ⚠Counter - RtlQuery
Performance ⚠Frequency - RtlQuery
Process ⚠Debug Information - RtlQuery
Protected ⚠Policy - RtlQuery
Registry ⚠Values - RtlQuery
Registry ⚠Values Ex - RtlQuery
Security ⚠Object - RtlQuery
TagHeap ⚠ - RtlQuery
Thread ⚠Profiling - RtlQuery
Time ⚠Zone Information - RtlQuery
Validation ⚠Runlevel - RtlQueue
ApcWow64 ⚠Thread - RtlQueue
Work ⚠Item - RtlRandom⚠
- RtlRandom
Ex ⚠ - RtlRb
Insert ⚠Node Ex - RtlRb
Remove ⚠Node - RtlRe
Allocate ⚠Heap - RtlRead
Thread ⚠Profiling Data - RtlReal
Predecessor ⚠ - RtlReal
Successor ⚠ - RtlRegister
Secure ⚠Memory Cache Callback - RtlRegister
Thread ⚠With Csrss - RtlRegister
Wait ⚠ - RtlRelease
PebLock ⚠ - RtlRelease
Privilege ⚠ - RtlRelease
Relative ⚠Name - RtlRelease
Resource ⚠ - RtlReleaseSRW
Lock ⚠Exclusive - RtlReleaseSRW
Lock ⚠Shared - RtlRemote
Call ⚠ - RtlRemove
Entry ⚠Hash Table - RtlRemove
Privileges ⚠ - RtlRemove
Unicode ⚠Prefix - RtlRemove
Vectored ⚠Continue Handler - RtlRemove
Vectored ⚠Exception Handler - RtlReplace
SidIn ⚠Sd - RtlReport
Exception ⚠ - RtlReport
Exception ⚠Ex - RtlReport
Silent ⚠Process Exit - RtlReserve
Chunk ⚠ - RtlReset
Memory ⚠Block Lookaside - RtlReset
Memory ⚠Zone - RtlReset
RtlTranslations ⚠ - RtlRestore
Last ⚠Win32 Error - RtlRight
Child - RtlRun
Decode ⚠Unicode String - RtlRun
Encode ⚠Unicode String - RtlSeconds
Since1970 ⚠ToTime - RtlSeconds
Since1980 ⚠ToTime - RtlSection
Table ⚠From Virtual Address - RtlSelf
Relative ⚠ToAbsoluteSD - RtlSelf
Relative ⚠ToAbsoluteS D2 - RtlSet
AllBits ⚠ - RtlSet
Attributes ⚠Security Descriptor - RtlSet
Bit ⚠ - RtlSet
BitEx ⚠ - RtlSet
Bits ⚠ - RtlSet
Control ⚠Security Descriptor - RtlSet
Critical ⚠Section Spin Count - RtlSet
Current ⚠Directory_ U - RtlSet
Current ⚠Environment - RtlSet
Current ⚠Transaction - RtlSet
Dacl ⚠Security Descriptor - RtlSet
Environment ⚠Strings - RtlSet
Environment ⚠Var - RtlSet
Environment ⚠Variable - RtlSet
Extended ⚠Features Mask - RtlSet
Group ⚠Security Descriptor - RtlSet
Heap ⚠Information - RtlSet
Image ⚠Mitigation Policy - RtlSet
Information ⚠Acl - RtlSet
IoCompletion ⚠Callback - RtlSet
Last ⚠Win32 Error - RtlSet
Last ⚠Win32 Error AndNt Status From NtStatus - RtlSet
Owner ⚠Security Descriptor - RtlSet
Portable ⚠Operating System - RtlSet
Process ⚠IsCritical - RtlSet
Protected ⚠Policy - RtlSet
Sacl ⚠Security Descriptor - RtlSet
Search ⚠Path Mode - RtlSet
Security ⚠DescriptorRM Control - RtlSet
Security ⚠Object - RtlSet
Security ⚠Object Ex - RtlSet
Thread ⚠Error Mode - RtlSet
Thread ⚠IsCritical - RtlSet
Thread ⚠Pool Start Func - RtlSet
Time ⚠Zone Information - RtlSet
Unhandled ⚠Exception Filter - RtlSet
User ⚠Flags Heap - RtlSet
User ⚠Value Heap - RtlSid
Dominates ⚠ - RtlSid
Dominates ⚠ForTrust - RtlSid
Equal ⚠Level - RtlSid
Hash ⚠Initialize - RtlSid
Hash ⚠Lookup - RtlSid
IsHigher ⚠Level - RtlSize
Heap ⚠ - RtlSleep
Condition ⚠VariableCS - RtlSleep
Condition ⚠VariableSRW - RtlSplay⚠
- RtlString
FromGUID ⚠ - RtlString
FromGUID ⚠Ex - RtlStrongly
Enumerate ⚠Entry Hash Table - RtlSub
Authority ⚠Count Sid - RtlSub
Authority ⚠Sid - RtlSubtree
Predecessor ⚠ - RtlSubtree
Successor ⚠ - RtlSuffix
Unicode ⚠String - RtlSystem
Time ⚠ToLocal Time - RtlTest
Bit ⚠ - RtlTest
BitEx ⚠ - RtlTest
Protected ⚠Access - RtlTime
Fields ⚠ToTime - RtlTime
ToElapsed ⚠Time Fields - RtlTime
ToSeconds ⚠Since1970 - RtlTime
ToSeconds ⚠Since1980 - RtlTime
ToTime ⚠Fields - RtlTotal
Buckets Hash Table - RtlTotal
Entries Hash Table - RtlTry
Acquire ⚠PebLock - RtlTry
AcquireSRW ⚠Lock Exclusive - RtlTry
AcquireSRW ⚠Lock Shared - RtlTry
Enter ⚠Critical Section - RtlUT
F8To ⚠UnicodeN - RtlUnhandled
Exception ⚠Filter - RtlUnhandled
Exception ⚠Filter2 - RtlUnicode
String ⚠ToAnsi String - RtlUnicode
String ⚠ToCounted OemString - RtlUnicode
String ⚠ToInteger - RtlUnicode
String ⚠ToOem String - RtlUnicode
ToCustomCPN ⚠ - RtlUnicode
ToMulti ⚠ByteN - RtlUnicode
ToMulti ⚠Byte Size - RtlUnicode
ToOemN ⚠ - RtlUnicode
ToUT ⚠F8N - RtlUniform⚠
- RtlUnlock
Boot ⚠Status Data - RtlUnlock
Current ⚠Thread - RtlUnlock
Heap ⚠ - RtlUnlock
Memory ⚠Block Lookaside - RtlUnlock
Memory ⚠Zone - RtlUnlock
Module ⚠Section - RtlUpcase
Unicode ⚠Char - RtlUpcase
Unicode ⚠String - RtlUpcase
Unicode ⚠String ToAnsi String - RtlUpcase
Unicode ⚠String ToCounted OemString - RtlUpcase
Unicode ⚠String ToOem String - RtlUpcase
Unicode ⚠ToCustomCPN - RtlUpcase
Unicode ⚠ToMulti ByteN - RtlUpcase
Unicode ⚠ToOemN - RtlUpdate
Cloned ⚠Critical Section - RtlUpdate
ClonedSRW ⚠Lock - RtlUpdate
Timer ⚠ - RtlUpper
Char ⚠ - RtlUpper
String ⚠ - RtlUsage
Heap ⚠ - RtlUser
Thread ⚠Start - RtlValid
Acl ⚠ - RtlValid
Process ⚠Protection - RtlValid
Relative ⚠Security Descriptor - RtlValid
Security ⚠Descriptor - RtlValid
Sid ⚠ - RtlValidate
Heap ⚠ - RtlValidate
Process ⚠Heaps - RtlValidate
Unicode ⚠String - RtlVerify
Version ⚠Info - RtlWait
OnAddress ⚠ - RtlWake
Address ⚠All - RtlWake
Address ⚠Single - RtlWake
AllCondition ⚠Variable - RtlWake
Condition ⚠Variable - RtlWalk
Frame ⚠Chain - RtlWalk
Heap ⚠ - RtlWeakly
Enumerate ⚠Entry Hash Table - RtlWerp
Report ⚠Exception - RtlWow64
Enable ⚠FsRedirection - RtlWow64
Enable ⚠FsRedirection Ex - RtlWow64
GetThread ⚠Context - RtlWow64
SetThread ⚠Context - RtlWrite
Registry ⚠Value - RtlZero
Heap ⚠ - SET_
PARSE_ MESSAGE_ CONTEXT_ FLAG - TEST_
PARSE_ MESSAGE_ CONTEXT_ FLAG
Type Aliases§
- APPCONTAINER_
SID_ TYPE - FUNCTION_
TABLE_ TYPE - HEAP_
COMPATIBILITY_ MODE - IMAGE_
MITIGATION_ POLICY - PAPPCONTAINER_
SID_ TYPE - PCOMPRESSED_
DATA_ INFO - PCONTEXT_
CHUNK - PCONTEXT_
EX - PCURDIR
- PDYNAMIC_
FUNCTION_ TABLE - PGENERATE_
NAME_ CONTEXT - PHEAP_
DEBUGGING_ INFORMATION - PHEAP_
EXTENDED_ INFORMATION - PHEAP_
INFORMATION - PPARSE_
MESSAGE_ CONTEXT - PPREFIX_
TABLE - PPREFIX_
TABLE_ ENTRY - PPROCESS_
HEAP_ INFORMATION - PPS_
PKG_ CLAIM - PRTLP_
CURDIR_ REF - PRTLP_
PROCESS_ REFLECTION_ REFLECTION_ INFORMATION - PRTLP_
UNHANDLED_ EXCEPTION_ FILTER - PRTL_
AVL_ ALLOCATE_ ROUTINE - PRTL_
AVL_ COMPARE_ ROUTINE - PRTL_
AVL_ FREE_ ROUTINE - PRTL_
AVL_ MATCH_ FUNCTION - PRTL_
AVL_ TABLE - PRTL_
BALANCED_ LINKS - PRTL_
BITMAP - PRTL_
BITMAP_ EX - PRTL_
BITMAP_ RUN - PRTL_
BSD_ ITEM - PRTL_
DEBUG_ INFORMATION - PRTL_
DRIVE_ LETTER_ CURDIR - PRTL_
DYNAMIC_ HASH_ TABLE - PRTL_
DYNAMIC_ HASH_ TABLE_ CONTEXT - PRTL_
DYNAMIC_ HASH_ TABLE_ ENTRY - PRTL_
DYNAMIC_ HASH_ TABLE_ ENUMERATOR - PRTL_
ELEVATION_ FLAGS - PRTL_
ENUM_ HEAPS_ ROUTINE - PRTL_
EXIT_ POOL_ THREAD - PRTL_
GENERIC_ ALLOCATE_ ROUTINE - PRTL_
GENERIC_ COMPARE_ ROUTINE - PRTL_
GENERIC_ FREE_ ROUTINE - PRTL_
GENERIC_ TABLE - PRTL_
HANDLE_ TABLE - PRTL_
HANDLE_ TABLE_ ENTRY - PRTL_
HEAP_ COMMIT_ ROUTINE - PRTL_
HEAP_ ENTRY - PRTL_
HEAP_ INFORMATION - PRTL_
HEAP_ LEAK_ ENUMERATION_ ROUTINE - PRTL_
HEAP_ PARAMETERS - PRTL_
HEAP_ TAG - PRTL_
HEAP_ TAG_ INFO - PRTL_
HEAP_ USAGE - PRTL_
HEAP_ USAGE_ ENTRY - PRTL_
HEAP_ WALK_ ENTRY - PRTL_
IMAGE_ MITIGATION_ ASLR_ POLICY - PRTL_
IMAGE_ MITIGATION_ BINARY_ SIGNATURE_ POLICY - PRTL_
IMAGE_ MITIGATION_ CHILD_ PROCESS_ POLICY - PRTL_
IMAGE_ MITIGATION_ CONTROL_ FLOW_ GUARD_ POLICY - PRTL_
IMAGE_ MITIGATION_ DEP_ POLICY - PRTL_
IMAGE_ MITIGATION_ DYNAMIC_ CODE_ POLICY - PRTL_
IMAGE_ MITIGATION_ EXTENSION_ POINT_ DISABLE_ POLICY - PRTL_
IMAGE_ MITIGATION_ FONT_ DISABLE_ POLICY - PRTL_
IMAGE_ MITIGATION_ HEAP_ POLICY - PRTL_
IMAGE_ MITIGATION_ IMAGE_ LOAD_ POLICY - PRTL_
IMAGE_ MITIGATION_ PAYLOAD_ RESTRICTION_ POLICY - PRTL_
IMAGE_ MITIGATION_ POLICY - PRTL_
IMAGE_ MITIGATION_ SEHOP_ POLICY - PRTL_
IMAGE_ MITIGATION_ STRICT_ HANDLE_ CHECK_ POLICY - PRTL_
IMAGE_ MITIGATION_ SYSTEM_ CALL_ DISABLE_ POLICY - PRTL_
MEMORY_ ZONE - PRTL_
MEMORY_ ZONE_ SEGMENT - PRTL_
PROCESS_ HEAPS - PRTL_
PROCESS_ VERIFIER_ OPTIONS - PRTL_
QUERY_ REGISTRY_ ROUTINE - PRTL_
QUERY_ REGISTRY_ TABLE - PRTL_
RB_ TREE - PRTL_
RELATIVE_ NAME_ U - PRTL_
RESOURCE - PRTL_
SECURE_ MEMORY_ CACHE_ CALLBACK - PRTL_
SPLAY_ LINKS - PRTL_
START_ POOL_ THREAD - PRTL_
TIME_ ZONE_ INFORMATION - PRTL_
UNLOAD_ EVENT_ TRACE - PRTL_
UNLOAD_ EVENT_ TRAC E32 - PRTL_
USER_ PROCESS_ INFORMATION - PRTL_
USER_ PROCESS_ PARAMETERS - PTIME_
FIELDS - PUNICODE_
PREFIX_ TABLE - PUNICODE_
PREFIX_ TABLE_ ENTRY - PUSER_
THREAD_ START_ ROUTINE - RTL_
BSD_ ITEM_ TYPE - RTL_
GENERIC_ COMPARE_ RESULTS - RTL_
IMAGE_ MITIGATION_ OPTION_ STATE - RTL_
NORM_ FORM - RTL_
PATH_ TYPE - STATE_
LOCATION_ TYPE - TABLE_
SEARCH_ RESULT