diff --git a/mingw-w64-crt/libarm32/ntdll.def b/mingw-w64-crt/lib-common/ntdll.def.in
similarity index 90%
rename from mingw-w64-crt/libarm32/ntdll.def
rename to mingw-w64-crt/lib-common/ntdll.def.in
index dddc1cc..0ad5922 100644
--- a/mingw-w64-crt/libarm32/ntdll.def
+++ b/mingw-w64-crt/lib-common/ntdll.def.in
@@ -1,10 +1,12 @@
-;
-; Definition file of ntdll.dll
-; Automatic generated by gendef
-; written by Kai Tietz 2008-2014
-;
+#include "func.def.in"
+
 LIBRARY "ntdll.dll"
 EXPORTS
+#ifdef DEF_X64
+PropertyLengthAsVariant
+RtlConvertPropertyToVariant
+RtlConvertVariantToProperty
+#endif
 A_SHAFinal
 A_SHAInit
 A_SHAUpdate
@@ -36,6 +38,11 @@
 CsrFreeCaptureBuffer
 CsrGetProcessId
 CsrIdentifyAlertableThread
+#if defined(DEF_I386) || defined(DEF_X64)
+CsrNewThread
+CsrProbeForRead
+CsrProbeForWrite
+#endif
 CsrSetPriorityClass
 CsrVerifyRegion
 DbgBreakPoint
@@ -58,7 +65,17 @@
 DbgUiWaitStateChange
 DbgUserBreakPoint
 EtwCheckCoverage
+#ifdef DEF_X64
+EtwControlTraceA
+EtwControlTraceW
+#endif
 EtwCreateTraceInstanceId
+#ifdef DEF_X64
+EtwEnableTrace
+EtwEnumerateTraceGuids
+EtwFlushTraceA
+EtwFlushTraceW
+#endif
 EtwDeliverDataBlock
 EtwEnumerateProcessRegGuids
 EtwEventActivityIdControl
@@ -78,6 +95,16 @@
 EtwGetTraceEnableFlags
 EtwGetTraceEnableLevel
 EtwGetTraceLoggerHandle
+#ifdef DEF_X64
+EtwNotificationRegistrationA
+EtwNotificationRegistrationW
+EtwQueryAllTracesA
+EtwQueryAllTracesW
+EtwQueryTraceA
+EtwQueryTraceW
+EtwReceiveNotificationsA
+EtwReceiveNotificationsW
+#endif
 EtwLogTraceEvent
 EtwNotificationRegister
 EtwNotificationUnregister
@@ -85,6 +112,13 @@
 EtwRegisterSecurityProvider
 EtwRegisterTraceGuidsA
 EtwRegisterTraceGuidsW
+#ifdef DEF_X64
+EtwStartTraceA
+EtwStartTraceW
+EtwStopTraceA
+EtwStopTraceW
+EtwTraceEvent
+#endif
 EtwReplyNotification
 EtwSendNotification
 EtwSetMark
@@ -92,30 +126,50 @@
 EtwTraceMessage
 EtwTraceMessageVa
 EtwUnregisterTraceGuids
+#ifdef DEF_X64
+EtwUpdateTraceA
+EtwUpdateTraceW
+EtwpGetTraceBuffer
+EtwpSetHWConfigFunction
+#endif
 EtwWriteUMSecurityEvent
 EtwpCreateEtwThread
 EtwpGetCpuSpeed
+F_X64(EtwpNotificationThread)
 EvtIntReportAuthzEventAndSourceAsync
 EvtIntReportEventAndSourceAsync
+#ifndef DEF_ARM32
+ExpInterlockedPopEntrySListEnd
+F_X64(ExpInterlockedPopEntrySListEnd16)
+ExpInterlockedPopEntrySListFault
+F_X64(ExpInterlockedPopEntrySListFault16)
+ExpInterlockedPopEntrySListResume
+F_X64(ExpInterlockedPopEntrySListResume16)
+#endif
 KiRaiseUserExceptionDispatcher
 KiUserApcDispatcher
 KiUserCallbackDispatcher
-KiUserCallbackDispatcherReturn
+F_ARM_ANY(KiUserCallbackDispatcherReturn)
 KiUserExceptionDispatcher
-KiUserInvertedFunctionTable DATA
+KiUserInvertedFunctionTable F_ARM_ANY(DATA)
+F_X64(LdrAccessOutOfProcessResource)
 LdrAccessResource
 LdrAddDllDirectory
 LdrAddLoadAsDataTable
 LdrAddRefDll
+F_X86_ANY(LdrAlternateResourcesEnabled)
 LdrAppxHandleIntegrityFailure
 LdrCallEnclave
 LdrControlFlowGuardEnforced
 LdrCreateEnclave
+F_X64(LdrCreateOutOfProcessImage)
 LdrDeleteEnclave
+F_X64(LdrDestroyOutOfProcessImage)
 LdrDisableThreadCalloutsForDll
 LdrEnumResources
 LdrEnumerateLoadedModules
 LdrFastFailInLoaderCallout
+F_X64(LdrFindCreateProcessManifest)
 LdrFindEntryForAddress
 LdrFindResourceDirectory_U
 LdrFindResourceEx_U
@@ -130,9 +184,11 @@
 LdrGetDllPath
 LdrGetFailureData
 LdrGetFileNameFromLoadAsDataTable
+F64(LdrGetKnownDllSectionHandle)
 LdrGetProcedureAddress
 LdrGetProcedureAddressEx
 LdrGetProcedureAddressForCaller
+F_X86_ANY(LdrHotPatchRoutine)
 LdrInitShimEngineDynamic
 LdrInitializeEnclave
 LdrInitializeThunk
@@ -143,6 +199,7 @@
 LdrLoadEnclaveModule
 LdrLockLoaderLock
 LdrOpenImageFileOptionsKey
+F64(LdrProcessInitializationComplete)
 LdrProcessRelocationBlock
 LdrProcessRelocationBlockEx
 LdrQueryImageFileExecutionOptions
@@ -171,7 +228,7 @@
 LdrShutdownProcess
 LdrShutdownThread
 LdrStandardizeSystemPath
-LdrSystemDllInitBlock DATA
+LdrSystemDllInitBlock F_ARM_ANY(DATA)
 LdrUnloadAlternateResourceModule
 LdrUnloadAlternateResourceModuleEx
 LdrUnloadDll
@@ -213,6 +270,7 @@
 NtAllocateLocallyUniqueId
 NtAllocateReserveObject
 NtAllocateUserPhysicalPages
+F_X86_ANY(NtAllocateUserPhysicalPagesEx)
 NtAllocateUuids
 NtAllocateVirtualMemory
 NtAllocateVirtualMemoryEx
@@ -245,6 +303,7 @@
 NtAssociateWaitCompletionPacket
 NtCallEnclave
 NtCallbackReturn
+F_X86_ANY(NtCancelDeviceWakeupRequest)
 NtCancelIoFile
 NtCancelIoFileEx
 NtCancelSynchronousIoFile
@@ -369,6 +428,7 @@
 NtGetNextThread
 NtGetNlsSectionPtr
 NtGetNotificationResourceManager
+F_X86_ANY(NtGetPlugPlayEvent)
 NtGetTickCount
 NtGetWriteWatch
 NtImpersonateAnonymousToken
@@ -386,7 +446,7 @@
 NtLoadEnclaveData
 NtLoadKey
 NtLoadKey2
-NtLoadKey3
+F_ARM_ANY(NtLoadKey3)
 NtLoadKeyEx
 NtLockFile
 NtLockProductActivationKeys
@@ -451,6 +511,7 @@
 NtPropagationComplete
 NtPropagationFailed
 NtProtectVirtualMemory
+F_X86_ANY(NtPssCaptureVaSpaceBulk)
 NtPulseEvent
 NtQueryAttributesFile
 NtQueryAuxiliaryCounterFrequency
@@ -539,8 +600,10 @@
 NtReplyWaitReceivePort
 NtReplyWaitReceivePortEx
 NtReplyWaitReplyPort
+F_X86_ANY(NtRequestDeviceWakeup)
 NtRequestPort
 NtRequestWaitReplyPort
+F_X86_ANY(NtRequestWakeupLatency)
 NtResetEvent
 NtResetWriteWatch
 NtRestoreKey
@@ -652,6 +715,7 @@
 NtWaitHighEventPair
 NtWaitLowEventPair
 NtWorkerFactoryWorkerReady
+#ifdef DEF_ARM32
 NtWow64AllocateVirtualMemory64
 NtWow64CallFunction64
 NtWow64CsrAllocateCaptureBuffer
@@ -671,6 +735,7 @@
 NtWow64QueryInformationProcess64
 NtWow64ReadVirtualMemory64
 NtWow64WriteVirtualMemory64
+#endif
 NtWriteFile
 NtWriteFileGather
 NtWriteRequestData
@@ -692,7 +757,7 @@
 PssNtQuerySnapshot
 PssNtValidateDescriptor
 PssNtWalkSnapshot
-ReadTimeStampCounter
+F_ARM32(ReadTimeStampCounter)
 RtlAbortRXact
 RtlAbsoluteToSelfRelativeSD
 RtlAcquirePebLock
@@ -757,6 +822,7 @@
 RtlAreAllAccessesGranted
 RtlAreAnyAccessesGranted
 RtlAreBitsClear
+F_X64(RtlAreBitsClearEx)
 RtlAreBitsSet
 RtlAreLongPathsEnabled
 RtlAssert
@@ -764,6 +830,7 @@
 RtlAvlRemoveNode
 RtlBarrier
 RtlBarrierForDelete
+F_X64(RtlCallEnclaveReturn)
 RtlCancelTimer
 RtlCanonicalizeDomainName
 RtlCapabilityCheck
@@ -774,6 +841,7 @@
 RtlCheckBootStatusIntegrity
 RtlCheckForOrphanedCriticalSections
 RtlCheckPortableOperatingSystem
+F_X64(RtlCheckProcessParameters)
 RtlCheckRegistryKey
 RtlCheckSandboxedToken
 RtlCheckSystemBootStatusIntegrity
@@ -782,8 +850,11 @@
 RtlCheckTokenMembershipEx
 RtlCleanUpTEBLangLists
 RtlClearAllBits
+F_X64(RtlClearAllBitsEx)
 RtlClearBit
+F_X64(RtlClearBitEx)
 RtlClearBits
+F_X64(RtlClearBitsEx)
 RtlClearThreadWorkOnBehalfTicket
 RtlCloneMemoryStream
 RtlCloneUserProcess
@@ -798,6 +869,7 @@
 RtlCompareString
 RtlCompareUnicodeString
 RtlCompareUnicodeStrings
+F64(RtlCompleteProcessCloning)
 RtlCompressBuffer
 RtlComputeCrc32
 RtlComputeImportTableHash
@@ -813,6 +885,7 @@
 RtlConvertSharedToExclusive
 RtlConvertSidToUnicodeString
 RtlConvertToAutoInheritSecurityObject
+F_X86_ANY(RtlConvertUiListToApiList)
 RtlCopyBitMap
 RtlCopyContext
 RtlCopyExtendedContext
@@ -820,6 +893,7 @@
 RtlCopyLuidAndAttributesArray
 RtlCopyMappedMemory
 RtlCopyMemory
+F_X64(RtlCopyMemoryNonTemporal)
 RtlCopyMemoryStreamTo
 RtlCopyOutOfProcessMemoryStreamTo
 RtlCopySecurityDescriptor
@@ -854,8 +928,14 @@
 RtlCreateTagHeap
 RtlCreateTimer
 RtlCreateTimerQueue
+#ifdef DEF_X64
+RtlCreateUmsCompletionList
+RtlCreateUmsThread
+RtlCreateUmsThreadContext
+#endif
 RtlCreateUnicodeString
 RtlCreateUnicodeStringFromAsciiz
+F_X64(RtlCreateUserFiberShadowStack)
 RtlCreateUserProcess
 RtlCreateUserProcessEx
 RtlCreateUserSecurityObject
@@ -896,6 +976,11 @@
 RtlDeleteTimer
 RtlDeleteTimerQueue
 RtlDeleteTimerQueueEx
+#ifdef DEF_X64
+RtlDeleteUmsCompletionList
+RtlDeleteUmsThreadContext
+RtlDequeueUmsCompletionListItems
+#endif
 RtlDeregisterSecureMemoryCacheCallback
 RtlDeregisterWait
 RtlDeregisterWaitEx
@@ -926,11 +1011,14 @@
 RtlDosSearchPath_Ustr
 RtlDowncaseUnicodeChar
 RtlDowncaseUnicodeString
+F64(RtlDrainNonVolatileFlush)
 RtlDumpResource
 RtlDuplicateUnicodeString
 RtlEmptyAtomTable
 RtlEnableEarlyCriticalSectionEventCreation
 RtlEnableThreadProfiling
+F_X64(RtlEnclaveCallDispatch)
+F_X64(RtlEnclaveCallDispatchReturn)
 RtlEncodePointer
 RtlEncodeRemotePointer
 RtlEncodeSystemPointer
@@ -938,6 +1026,7 @@
 RtlEndStrongEnumerationHashTable
 RtlEndWeakEnumerationHashTable
 RtlEnterCriticalSection
+F_X64(RtlEnterUmsSchedulingMode)
 RtlEnumProcessHeaps
 RtlEnumerateEntryHashTable
 RtlEnumerateGenericTable
@@ -958,19 +1047,23 @@
 RtlEthernetAddressToStringW
 RtlEthernetStringToAddressA
 RtlEthernetStringToAddressW
+F_X64(RtlExecuteUmsThread)
 RtlExitUserProcess
 RtlExitUserThread
 RtlExpandEnvironmentStrings
 RtlExpandEnvironmentStrings_U
+F_X86_ANY(RtlExtendHeap)
 RtlExpandHashTable
 RtlExtendCorrelationVector
 RtlExtendMemoryBlockLookaside
 RtlExtendMemoryZone
-RtlExtendedMagicDivide
+F_ARM32(RtlExtendedMagicDivide)
 RtlExtractBitMap
 RtlFillMemory
-RtlFillMemoryUlong
-RtlFillMemoryUlonglong
+F_X64(RtlFillMemoryNonTemporal)
+F_ARM_ANY(RtlFillMemoryUlong)
+F_ARM_ANY(RtlFillMemoryUlonglong)
+F64(RtlFillNonVolatileMemory)
 RtlFinalReleaseOutOfProcessMemoryStream
 RtlFindAceByType
 RtlFindActivationContextSectionGuid
@@ -978,6 +1071,7 @@
 RtlFindCharInUnicodeString
 RtlFindClearBits
 RtlFindClearBitsAndSet
+F_X64(RtlFindClearBitsEx)
 RtlFindClearRuns
 RtlFindClosestEncodableLength
 RtlFindExportedRoutineByName
@@ -989,6 +1083,8 @@
 RtlFindNextForwardRunClear
 RtlFindSetBits
 RtlFindSetBitsAndClear
+F_X64(RtlFindSetBitsAndClearEx)
+F_X64(RtlFindSetBitsEx)
 RtlFindUnicodeSubstring
 RtlFirstEntrySList
 RtlFirstFreeAce
@@ -997,6 +1093,8 @@
 RtlFlsGetValue
 RtlFlsSetValue
 RtlFlushHeaps
+F64(RtlFlushNonVolatileMemory)
+F64(RtlFlushNonVolatileMemoryRanges)
 RtlFlushSecureMemoryCache
 RtlFormatCurrentUserKeyPath
 RtlFormatMessage
@@ -1006,10 +1104,14 @@
 RtlFreeHandle
 RtlFreeHeap
 RtlFreeMemoryBlockLookaside
+F64(RtlFreeNonVolatileToken)
 RtlFreeOemString
 RtlFreeSid
 RtlFreeThreadActivationContextStack
+F_X86_ANY(RtlFreeUTF8String)
 RtlFreeUnicodeString
+F_X64(RtlFreeUserFiberShadowStack)
+F_X86_ANY(RtlFreeUserThreadStack)
 RtlFreeUserStack
 RtlGUIDFromString
 RtlGenerate8dot3Name
@@ -1030,6 +1132,7 @@
 RtlGetCurrentProcessorNumberEx
 RtlGetCurrentServiceSessionId
 RtlGetCurrentTransaction
+F_X64(RtlGetCurrentUmsThread)
 RtlGetDaclSecurityDescriptor
 RtlGetDeviceFamilyInfoEnum
 RtlGetElementGenericTable
@@ -1057,6 +1160,8 @@
 RtlGetMultiTimePrecise
 RtlGetNativeSystemInformation
 RtlGetNextEntryHashTable
+F_X64(RtlGetNextUmsListItem)
+F64(RtlGetNonVolatileToken)
 RtlGetNtGlobalFlags
 RtlGetNtProductType
 RtlGetNtSystemRoot
@@ -1083,6 +1188,7 @@
 RtlGetThreadWorkOnBehalfTicket
 RtlGetTokenNamedObjectPath
 RtlGetUILanguageInfo
+F_X64(RtlGetUmsCompletionListEvent)
 RtlGetUnloadEventTrace
 RtlGetUnloadEventTraceEx
 RtlGetUserInfoHeap
@@ -1115,11 +1221,14 @@
 RtlInitString
 RtlInitStringEx
 RtlInitStrongEnumerationHashTable
+F_X86_ANY(RtlInitUTF8String)
+F_X86_ANY(RtlInitUTF8StringEx)
 RtlInitUnicodeString
 RtlInitUnicodeStringEx
 RtlInitWeakEnumerationHashTable
 RtlInitializeAtomPackage
 RtlInitializeBitMap
+F64(RtlInitializeBitMapEx)
 RtlInitializeConditionVariable
 RtlInitializeContext
 RtlInitializeCorrelationVector
@@ -1205,6 +1314,7 @@
 RtlIsValidIndexHandle
 RtlIsValidLocaleName
 RtlIsValidProcessTrustLabelSid
+F_X86_ANY(RtlIsZeroMemory)
 RtlKnownExceptionFilter
 RtlLCIDToCultureName
 RtlLargeIntegerToChar
@@ -1252,15 +1362,19 @@
 RtlNewSecurityObjectEx
 RtlNewSecurityObjectWithMultipleInheritance
 RtlNormalizeProcessParams
+F_X86_ANY(RtlNormalizeSecurityDescriptor)
 RtlNormalizeString
 RtlNtPathNameToDosPathName
 RtlNtStatusToDosError
 RtlNtStatusToDosErrorNoTeb
+F64(RtlNtdllName DATA)
 RtlNumberGenericTableElements
 RtlNumberGenericTableElementsAvl
 RtlNumberOfClearBits
+F_X64(RtlNumberOfClearBitsEx)
 RtlNumberOfClearBitsInRange
 RtlNumberOfSetBits
+F_X64(RtlNumberOfSetBitsEx)
 RtlNumberOfSetBitsInRange
 RtlNumberOfSetBitsUlongPtr
 RtlOemStringToUnicodeSize
@@ -1274,6 +1388,7 @@
 RtlPopFrame
 RtlPrefixString
 RtlPrefixUnicodeString
+F64(RtlPrepareForProcessCloning)
 RtlProcessFlsData
 RtlProtectHeap
 RtlPublishWnfStateData
@@ -1314,6 +1429,7 @@
 RtlQueryThreadProfiling
 RtlQueryTimeZoneInformation
 RtlQueryTokenHostIdAsUlong64
+F_X64(RtlQueryUmsThreadInformation)
 RtlQueryUnbiasedInterruptTime
 RtlQueryValidationRunlevel
 RtlQueryWnfMetaNotification
@@ -1366,6 +1482,7 @@
 RtlRestoreContext
 RtlRestoreLastWin32Error
 RtlRestoreSystemBootStatusDefaults
+F_X86_ANY(RtlRestoreThreadPreferredUILanguages)
 RtlRetrieveNtUserPfn
 RtlRevertMemoryStream
 RtlRunDecodeUnicodeString
@@ -1381,9 +1498,12 @@
 RtlSelfRelativeToAbsoluteSD2
 RtlSendMsgToSm
 RtlSetAllBits
+F_X64(RtlSetAllBitsEx)
 RtlSetAttributesSecurityDescriptor
 RtlSetBit
+F_X64(RtlSetBitEx)
 RtlSetBits
+F_X64(RtlSetBitsEx)
 RtlSetControlSecurityDescriptor
 RtlSetCriticalSectionSpinCount
 RtlSetCurrentDirectory_U
@@ -1423,12 +1543,15 @@
 RtlSetThreadPlaceholderCompatibilityMode
 RtlSetThreadPoolStartFunc
 RtlSetThreadPreferredUILanguages
+F_X86_ANY(RtlSetThreadPreferredUILanguages2)
 RtlSetThreadSubProcessTag
 RtlSetThreadWorkOnBehalfTicket
 RtlSetTimeZoneInformation
 RtlSetTimer
+F_X64(RtlSetUmsThreadInformation)
 RtlSetUnhandledExceptionFilter
-RtlSetUserCallbackExceptionFilter
+F_X64(RtlSetUnicodeCallouts)
+F32(RtlSetUserCallbackExceptionFilter)
 RtlSetUserFlagsHeap
 RtlSetUserValueHeap
 RtlSidDominates
@@ -1455,6 +1578,7 @@
 RtlSystemTimeToLocalTime
 RtlTestAndPublishWnfStateData
 RtlTestBit
+F64(RtlTestBitEx)
 RtlTestProtectedAccess
 RtlTimeFieldsToTime
 RtlTimeToElapsedTimeFields
@@ -1474,10 +1598,12 @@
 RtlTryAcquireSRWLockShared
 RtlTryConvertSRWLockSharedToExclusiveOrRelease
 RtlTryEnterCriticalSection
+F_X86_ANY(RtlUTF8StringToUnicodeString)
 RtlUTF8ToUnicodeN
 RtlUdiv128
-RtlUlongByteSwap
-RtlUlonglongByteSwap
+F_X64(RtlUmsThreadYield)
+F_ARM_ANY(RtlUlongByteSwap)
+F_ARM_ANY(RtlUlonglongByteSwap)
 RtlUnhandledExceptionFilter
 RtlUnhandledExceptionFilter2
 RtlUnicodeStringToAnsiSize
@@ -1486,6 +1612,7 @@
 RtlUnicodeStringToInteger
 RtlUnicodeStringToOemSize
 RtlUnicodeStringToOemString
+F_X86_ANY(RtlUnicodeStringToUTF8String)
 RtlUnicodeToCustomCPN
 RtlUnicodeToMultiByteN
 RtlUnicodeToMultiByteSize
@@ -1517,9 +1644,10 @@
 RtlUpdateTimer
 RtlUpperChar
 RtlUpperString
+F_X86_ANY(RtlUsageHeap)
 RtlUserFiberStart
 RtlUserThreadStart
-RtlUshortByteSwap
+F_ARM_ANY(RtlUshortByteSwap)
 RtlValidAcl
 RtlValidProcessProtection
 RtlValidRelativeSecurityDescriptor
@@ -1548,13 +1676,28 @@
 RtlWow64CallFunction64
 RtlWow64EnableFsRedirection
 RtlWow64EnableFsRedirectionEx
+F64(RtlWow64GetCpuAreaInfo)
+F64(RtlWow64GetCurrentCpuArea)
 RtlWow64GetCurrentMachine
 RtlWow64GetEquivalentMachineCHPE
 RtlWow64GetProcessMachines
 RtlWow64GetSharedInfoProcess
+F64(RtlWow64GetThreadContext)
+F64(RtlWow64GetThreadSelectorEntry)
 RtlWow64IsWowGuestMachineSupported
 RtlWow64LogMessageInEventLogger
+#if defined(DEF_X64) || defined(DEF_ARM64)
+RtlWow64PopAllCrossProcessWorkFromWorkList
+RtlWow64PopCrossProcessWorkFromFreeList
+RtlWow64PushCrossProcessWorkOntoFreeList
+RtlWow64PushCrossProcessWorkOntoWorkList
+RtlWow64RequestCrossProcessHeavyFlush
+RtlWow64SetThreadContext
+RtlWow64SuspendProcess
+RtlWow64SuspendThread
+#endif
 RtlWriteMemoryStream
+F64(RtlWriteNonVolatileMemory)
 RtlWriteRegistryValue
 RtlZeroHeap
 RtlZeroMemory
@@ -1568,7 +1711,8 @@
 RtlpConvertRelativeToAbsoluteSecurityAttribute
 RtlpCreateProcessRegistryInfo
 RtlpEnsureBufferSize
-RtlpFreezeTimeBias DATA
+F_X64(RtlpExecuteUmsThread)
+RtlpFreezeTimeBias F_ARM_ANY(DATA)
 RtlpGetDeviceFamilyInfoEnum
 RtlpGetLCIDFromLangInfoNode
 RtlpGetNameFromLangInfoNode
@@ -1591,6 +1735,7 @@
 RtlpNtQueryValueKey
 RtlpNtSetValueKey
 RtlpQueryDefaultUILanguage
+F64(RtlpQueryProcessDebugInformationFromWow64)
 RtlpQueryProcessDebugInformationRemote
 RtlpRefreshCachedUILanguage
 RtlpSetInstallLanguage
@@ -1598,9 +1743,17 @@
 RtlpSetUserPreferredUILanguages
 RtlpTimeFieldsToTime
 RtlpTimeToTimeFields
+F_X64(RtlpUmsExecuteYieldThreadEnd)
+F_X64(RtlpUmsThreadYield)
 RtlpUnWaitCriticalSection
 RtlpVerifyAndCommitUILanguageSettings
 RtlpWaitForCriticalSection
+#ifdef DEF_X64
+RtlpWow64CtxFromAmd64
+RtlpWow64GetContextOnAmd64
+RtlpWow64SetContextOnAmd64
+#endif
+F_ARM64(RtlpWow64CtxFromArm64)
 RtlxAnsiStringToUnicodeSize
 RtlxOemStringToUnicodeSize
 RtlxUnicodeStringToAnsiSize
@@ -1636,10 +1789,12 @@
 TpCaptureCaller
 TpCheckTerminateWorker
 TpDbgDumpHeapUsage
+F_X86_ANY(TpDbgGetFreeInfo)
 TpDbgSetLogRoutine
 TpDisablePoolCallbackChecks
 TpDisassociateCallback
 TpIsTimerSet
+F_X86_ANY(TpPoolFreeUnusedNodes)
 TpPostWork
 TpQueryPoolStackInformation
 TpReleaseAlpcCompletion
@@ -1729,6 +1884,7 @@
 ZwAllocateLocallyUniqueId
 ZwAllocateReserveObject
 ZwAllocateUserPhysicalPages
+F_X86_ANY(ZwAllocateUserPhysicalPagesEx)
 ZwAllocateUuids
 ZwAllocateVirtualMemory
 ZwAllocateVirtualMemoryEx
@@ -1761,6 +1917,7 @@
 ZwAssociateWaitCompletionPacket
 ZwCallEnclave
 ZwCallbackReturn
+F_X86_ANY(ZwCancelDeviceWakeupRequest)
 ZwCancelIoFile
 ZwCancelIoFileEx
 ZwCancelSynchronousIoFile
@@ -1885,6 +2042,7 @@
 ZwGetNextThread
 ZwGetNlsSectionPtr
 ZwGetNotificationResourceManager
+F_X86_ANY(ZwGetPlugPlayEvent)
 ZwGetWriteWatch
 ZwImpersonateAnonymousToken
 ZwImpersonateClientOfPort
@@ -1901,7 +2059,7 @@
 ZwLoadEnclaveData
 ZwLoadKey
 ZwLoadKey2
-ZwLoadKey3
+F_ARM_ANY(ZwLoadKey3)
 ZwLoadKeyEx
 ZwLockFile
 ZwLockProductActivationKeys
@@ -1966,6 +2124,7 @@
 ZwPropagationComplete
 ZwPropagationFailed
 ZwProtectVirtualMemory
+F_X86_ANY(ZwPssCaptureVaSpaceBulk)
 ZwPulseEvent
 ZwQueryAttributesFile
 ZwQueryAuxiliaryCounterFrequency
@@ -2054,8 +2213,10 @@
 ZwReplyWaitReceivePort
 ZwReplyWaitReceivePortEx
 ZwReplyWaitReplyPort
+F_X86_ANY(ZwRequestDeviceWakeup)
 ZwRequestPort
 ZwRequestWaitReplyPort
+F_X86_ANY(ZwRequestWakeupLatency)
 ZwResetEvent
 ZwResetWriteWatch
 ZwRestoreKey
@@ -2167,6 +2328,7 @@
 ZwWaitHighEventPair
 ZwWaitLowEventPair
 ZwWorkerFactoryWorkerReady
+#ifdef DEF_ARM32
 ZwWow64AllocateVirtualMemory64
 ZwWow64CallFunction64
 ZwWow64CsrAllocateCaptureBuffer
@@ -2186,6 +2348,7 @@
 ZwWow64QueryInformationProcess64
 ZwWow64ReadVirtualMemory64
 ZwWow64WriteVirtualMemory64
+#endif
 ZwWriteFile
 ZwWriteFileGather
 ZwWriteRequestData
diff --git a/mingw-w64-crt/lib64/ntdll.def b/mingw-w64-crt/lib64/ntdll.def
deleted file mode 100644
index f9347b8..0000000
--- a/mingw-w64-crt/lib64/ntdll.def
+++ /dev/null
@@ -1,2283 +0,0 @@
-;
-; Definition file of ntdll.dll
-; Automatic generated by gendef
-; written by Kai Tietz 2008
-;
-LIBRARY "ntdll.dll"
-EXPORTS
-PropertyLengthAsVariant
-RtlConvertPropertyToVariant
-RtlConvertVariantToProperty
-A_SHAFinal
-A_SHAInit
-A_SHAUpdate
-AlpcAdjustCompletionListConcurrencyCount
-AlpcFreeCompletionListMessage
-AlpcGetCompletionListLastMessageInformation
-AlpcGetCompletionListMessageAttributes
-AlpcGetHeaderSize
-AlpcGetMessageAttribute
-AlpcGetMessageFromCompletionList
-AlpcGetOutstandingCompletionListMessageCount
-AlpcInitializeMessageAttribute
-AlpcMaxAllowedMessageLength
-AlpcRegisterCompletionList
-AlpcRegisterCompletionListWorkerThread
-AlpcRundownCompletionList
-AlpcUnregisterCompletionList
-AlpcUnregisterCompletionListWorkerThread
-ApiSetQueryApiSetPresence
-ApiSetQueryApiSetPresenceEx
-CsrAllocateCaptureBuffer
-CsrAllocateMessagePointer
-CsrCaptureMessageBuffer
-CsrCaptureMessageMultiUnicodeStringsInPlace
-CsrCaptureMessageString
-CsrCaptureTimeout
-CsrClientCallServer
-CsrClientConnectToServer
-CsrFreeCaptureBuffer
-CsrGetProcessId
-CsrIdentifyAlertableThread
-CsrNewThread
-CsrProbeForRead
-CsrProbeForWrite
-CsrSetPriorityClass
-CsrVerifyRegion
-DbgBreakPoint
-DbgPrint
-DbgPrintEx
-DbgPrintReturnControlC
-DbgPrompt
-DbgQueryDebugFilterState
-DbgSetDebugFilterState
-DbgUiConnectToDbg
-DbgUiContinue
-DbgUiConvertStateChangeStructure
-DbgUiConvertStateChangeStructureEx
-DbgUiDebugActiveProcess
-DbgUiGetThreadDebugObject
-DbgUiIssueRemoteBreakin
-DbgUiRemoteBreakin
-DbgUiSetThreadDebugObject
-DbgUiStopDebugging
-DbgUiWaitStateChange
-DbgUserBreakPoint
-EtwCheckCoverage
-EtwControlTraceA
-EtwControlTraceW
-EtwCreateTraceInstanceId
-EtwEnableTrace
-EtwEnumerateTraceGuids
-EtwFlushTraceA
-EtwFlushTraceW
-EtwDeliverDataBlock
-EtwEnumerateProcessRegGuids
-EtwEventActivityIdControl
-EtwEventEnabled
-EtwEventProviderEnabled
-EtwEventRegister
-EtwEventSetInformation
-EtwEventUnregister
-EtwEventWrite
-EtwEventWriteEndScenario
-EtwEventWriteEx
-EtwEventWriteFull
-EtwEventWriteNoRegistration
-EtwEventWriteStartScenario
-EtwEventWriteString
-EtwEventWriteTransfer
-EtwGetTraceEnableFlags
-EtwGetTraceEnableLevel
-EtwGetTraceLoggerHandle
-EtwNotificationRegistrationA
-EtwNotificationRegistrationW
-EtwQueryAllTracesA
-EtwQueryAllTracesW
-EtwQueryTraceA
-EtwQueryTraceW
-EtwReceiveNotificationsA
-EtwReceiveNotificationsW
-EtwLogTraceEvent
-EtwNotificationRegister
-EtwNotificationUnregister
-EtwProcessPrivateLoggerRequest
-EtwRegisterSecurityProvider
-EtwRegisterTraceGuidsA
-EtwRegisterTraceGuidsW
-EtwStartTraceA
-EtwStartTraceW
-EtwStopTraceA
-EtwStopTraceW
-EtwTraceEvent
-EtwReplyNotification
-EtwSendNotification
-EtwSetMark
-EtwTraceEventInstance
-EtwTraceMessage
-EtwTraceMessageVa
-EtwUnregisterTraceGuids
-EtwUpdateTraceA
-EtwUpdateTraceW
-EtwpGetTraceBuffer
-EtwpSetHWConfigFunction
-EtwWriteUMSecurityEvent
-EtwpCreateEtwThread
-EtwpGetCpuSpeed
-EtwpNotificationThread
-EvtIntReportAuthzEventAndSourceAsync
-EvtIntReportEventAndSourceAsync
-ExpInterlockedPopEntrySListEnd
-ExpInterlockedPopEntrySListEnd16
-ExpInterlockedPopEntrySListFault
-ExpInterlockedPopEntrySListFault16
-ExpInterlockedPopEntrySListResume
-ExpInterlockedPopEntrySListResume16
-KiRaiseUserExceptionDispatcher
-KiUserApcDispatcher
-KiUserCallbackDispatcher
-KiUserExceptionDispatcher
-KiUserInvertedFunctionTable
-LdrAccessOutOfProcessResource
-LdrAccessResource
-LdrAddDllDirectory
-LdrAddLoadAsDataTable
-LdrAddRefDll
-LdrAlternateResourcesEnabled
-LdrAppxHandleIntegrityFailure
-LdrCallEnclave
-LdrControlFlowGuardEnforced
-LdrCreateEnclave
-LdrCreateOutOfProcessImage
-LdrDeleteEnclave
-LdrDestroyOutOfProcessImage
-LdrDisableThreadCalloutsForDll
-LdrEnumResources
-LdrEnumerateLoadedModules
-LdrFastFailInLoaderCallout
-LdrFindCreateProcessManifest
-LdrFindEntryForAddress
-LdrFindResourceDirectory_U
-LdrFindResourceEx_U
-LdrFindResource_U
-LdrFlushAlternateResourceModules
-LdrGetDllDirectory
-LdrGetDllFullName
-LdrGetDllHandle
-LdrGetDllHandleByMapping
-LdrGetDllHandleByName
-LdrGetDllHandleEx
-LdrGetDllPath
-LdrGetFailureData
-LdrGetFileNameFromLoadAsDataTable
-LdrGetKnownDllSectionHandle
-LdrGetProcedureAddress
-LdrGetProcedureAddressEx
-LdrGetProcedureAddressForCaller
-LdrHotPatchRoutine
-LdrInitShimEngineDynamic
-LdrInitializeEnclave
-LdrInitializeThunk
-LdrIsModuleSxsRedirected
-LdrLoadAlternateResourceModule
-LdrLoadAlternateResourceModuleEx
-LdrLoadDll
-LdrLoadEnclaveModule
-LdrLockLoaderLock
-LdrOpenImageFileOptionsKey
-LdrProcessInitializationComplete
-LdrProcessRelocationBlock
-LdrProcessRelocationBlockEx
-LdrQueryImageFileExecutionOptions
-LdrQueryImageFileExecutionOptionsEx
-LdrQueryImageFileKeyOption
-LdrQueryModuleServiceTags
-LdrQueryOptionalDelayLoadedAPI
-LdrQueryProcessModuleInformation
-LdrRegisterDllNotification
-LdrRemoveDllDirectory
-LdrRemoveLoadAsDataTable
-LdrResFindResource
-LdrResFindResourceDirectory
-LdrResGetRCConfig
-LdrResRelease
-LdrResSearchResource
-LdrResolveDelayLoadedAPI
-LdrResolveDelayLoadsFromDll
-LdrRscIsTypeExist
-LdrSetAppCompatDllRedirectionCallback
-LdrSetDefaultDllDirectories
-LdrSetDllDirectory
-LdrSetDllManifestProber
-LdrSetImplicitPathOptions
-LdrSetMUICacheType
-LdrShutdownProcess
-LdrShutdownThread
-LdrStandardizeSystemPath
-LdrSystemDllInitBlock
-LdrUnloadAlternateResourceModule
-LdrUnloadAlternateResourceModuleEx
-LdrUnloadDll
-LdrUnlockLoaderLock
-LdrUnregisterDllNotification
-LdrUpdatePackageSearchPath
-LdrVerifyImageMatchesChecksum
-LdrVerifyImageMatchesChecksumEx
-LdrpResGetMappingSize
-LdrpResGetResourceDirectory
-MD4Final
-MD4Init
-MD4Update
-MD5Final
-MD5Init
-MD5Update
-NlsAnsiCodePage DATA
-NlsMbCodePageTag DATA
-NlsMbOemCodePageTag DATA
-NtAcceptConnectPort
-NtAccessCheck
-NtAccessCheckAndAuditAlarm
-NtAccessCheckByType
-NtAccessCheckByTypeAndAuditAlarm
-NtAccessCheckByTypeResultList
-NtAccessCheckByTypeResultListAndAuditAlarm
-NtAccessCheckByTypeResultListAndAuditAlarmByHandle
-NtAcquireProcessActivityReference
-NtAddAtom
-NtAddAtomEx
-NtAddBootEntry
-NtAddDriverEntry
-NtAdjustGroupsToken
-NtAdjustPrivilegesToken
-NtAdjustTokenClaimsAndDeviceGroups
-NtAlertResumeThread
-NtAlertThread
-NtAlertThreadByThreadId
-NtAllocateLocallyUniqueId
-NtAllocateReserveObject
-NtAllocateUserPhysicalPages
-NtAllocateUserPhysicalPagesEx
-NtAllocateUuids
-NtAllocateVirtualMemory
-NtAllocateVirtualMemoryEx
-NtAlpcAcceptConnectPort
-NtAlpcCancelMessage
-NtAlpcConnectPort
-NtAlpcConnectPortEx
-NtAlpcCreatePort
-NtAlpcCreatePortSection
-NtAlpcCreateResourceReserve
-NtAlpcCreateSectionView
-NtAlpcCreateSecurityContext
-NtAlpcDeletePortSection
-NtAlpcDeleteResourceReserve
-NtAlpcDeleteSectionView
-NtAlpcDeleteSecurityContext
-NtAlpcDisconnectPort
-NtAlpcImpersonateClientContainerOfPort
-NtAlpcImpersonateClientOfPort
-NtAlpcOpenSenderProcess
-NtAlpcOpenSenderThread
-NtAlpcQueryInformation
-NtAlpcQueryInformationMessage
-NtAlpcRevokeSecurityContext
-NtAlpcSendWaitReceivePort
-NtAlpcSetInformation
-NtApphelpCacheControl
-NtAreMappedFilesTheSame
-NtAssignProcessToJobObject
-NtAssociateWaitCompletionPacket
-NtCallEnclave
-NtCallbackReturn
-NtCancelDeviceWakeupRequest
-NtCancelIoFile
-NtCancelIoFileEx
-NtCancelSynchronousIoFile
-NtCancelTimer
-NtCancelTimer2
-NtCancelWaitCompletionPacket
-NtClearEvent
-NtClose
-NtCloseObjectAuditAlarm
-NtCommitComplete
-NtCommitEnlistment
-NtCommitRegistryTransaction
-NtCommitTransaction
-NtCompactKeys
-NtCompareObjects
-NtCompareSigningLevels
-NtCompareTokens
-NtCompleteConnectPort
-NtCompressKey
-NtConnectPort
-NtContinue
-NtConvertBetweenAuxiliaryCounterAndPerformanceCounter
-NtCreateCrossVmEvent
-NtCreateDebugObject
-NtCreateDirectoryObject
-NtCreateDirectoryObjectEx
-NtCreateEnclave
-NtCreateEnlistment
-NtCreateEvent
-NtCreateEventPair
-NtCreateFile
-NtCreateIRTimer
-NtCreateIoCompletion
-NtCreateJobObject
-NtCreateJobSet
-NtCreateKey
-NtCreateKeyTransacted
-NtCreateKeyedEvent
-NtCreateLowBoxToken
-NtCreateMailslotFile
-NtCreateMutant
-NtCreateNamedPipeFile
-NtCreatePagingFile
-NtCreatePartition
-NtCreatePort
-NtCreatePrivateNamespace
-NtCreateProcess
-NtCreateProcessEx
-NtCreateProfile
-NtCreateProfileEx
-NtCreateRegistryTransaction
-NtCreateResourceManager
-NtCreateSection
-NtCreateSectionEx
-NtCreateSemaphore
-NtCreateSymbolicLinkObject
-NtCreateThread
-NtCreateThreadEx
-NtCreateTimer
-NtCreateTimer2
-NtCreateToken
-NtCreateTokenEx
-NtCreateTransaction
-NtCreateTransactionManager
-NtCreateUserProcess
-NtCreateWaitCompletionPacket
-NtCreateWaitablePort
-NtCreateWnfStateName
-NtCreateWorkerFactory
-NtDebugActiveProcess
-NtDebugContinue
-NtDelayExecution
-NtDeleteAtom
-NtDeleteBootEntry
-NtDeleteDriverEntry
-NtDeleteFile
-NtDeleteKey
-NtDeleteObjectAuditAlarm
-NtDeletePrivateNamespace
-NtDeleteValueKey
-NtDeleteWnfStateData
-NtDeleteWnfStateName
-NtDeviceIoControlFile
-NtDisableLastKnownGood
-NtDisplayString
-NtDrawText
-NtDuplicateObject
-NtDuplicateToken
-NtEnableLastKnownGood
-NtEnumerateBootEntries
-NtEnumerateDriverEntries
-NtEnumerateKey
-NtEnumerateSystemEnvironmentValuesEx
-NtEnumerateTransactionObject
-NtEnumerateValueKey
-NtExtendSection
-NtFilterBootOption
-NtFilterToken
-NtFilterTokenEx
-NtFindAtom
-NtFlushBuffersFile
-NtFlushBuffersFileEx
-NtFlushInstallUILanguage
-NtFlushInstructionCache
-NtFlushKey
-NtFlushProcessWriteBuffers
-NtFlushVirtualMemory
-NtFlushWriteBuffer
-NtFreeUserPhysicalPages
-NtFreeVirtualMemory
-NtFreezeRegistry
-NtFreezeTransactions
-NtFsControlFile
-NtGetCachedSigningLevel
-NtGetCompleteWnfStateSubscription
-NtGetContextThread
-NtGetCurrentProcessorNumber
-NtGetCurrentProcessorNumberEx
-NtGetDevicePowerState
-NtGetMUIRegistryInfo
-NtGetNextProcess
-NtGetNextThread
-NtGetNlsSectionPtr
-NtGetNotificationResourceManager
-NtGetPlugPlayEvent
-NtGetTickCount
-NtGetWriteWatch
-NtImpersonateAnonymousToken
-NtImpersonateClientOfPort
-NtImpersonateThread
-NtInitializeEnclave
-NtInitializeNlsFiles
-NtInitializeRegistry
-NtInitiatePowerAction
-NtIsProcessInJob
-NtIsSystemResumeAutomatic
-NtIsUILanguageComitted
-NtListenPort
-NtLoadDriver
-NtLoadEnclaveData
-NtLoadKey
-NtLoadKey2
-NtLoadKeyEx
-NtLockFile
-NtLockProductActivationKeys
-NtLockRegistryKey
-NtLockVirtualMemory
-NtMakePermanentObject
-NtMakeTemporaryObject
-NtManageHotPatch
-NtManagePartition
-NtMapCMFModule
-NtMapUserPhysicalPages
-NtMapUserPhysicalPagesScatter
-NtMapViewOfSection
-NtMapViewOfSectionEx
-NtModifyBootEntry
-NtModifyDriverEntry
-NtNotifyChangeDirectoryFile
-NtNotifyChangeDirectoryFileEx
-NtNotifyChangeKey
-NtNotifyChangeMultipleKeys
-NtNotifyChangeSession
-NtOpenDirectoryObject
-NtOpenEnlistment
-NtOpenEvent
-NtOpenEventPair
-NtOpenFile
-NtOpenIoCompletion
-NtOpenJobObject
-NtOpenKey
-NtOpenKeyEx
-NtOpenKeyTransacted
-NtOpenKeyTransactedEx
-NtOpenKeyedEvent
-NtOpenMutant
-NtOpenObjectAuditAlarm
-NtOpenPartition
-NtOpenPrivateNamespace
-NtOpenProcess
-NtOpenProcessToken
-NtOpenProcessTokenEx
-NtOpenRegistryTransaction
-NtOpenResourceManager
-NtOpenSection
-NtOpenSemaphore
-NtOpenSession
-NtOpenSymbolicLinkObject
-NtOpenThread
-NtOpenThreadToken
-NtOpenThreadTokenEx
-NtOpenTimer
-NtOpenTransaction
-NtOpenTransactionManager
-NtPlugPlayControl
-NtPowerInformation
-NtPrePrepareComplete
-NtPrePrepareEnlistment
-NtPrepareComplete
-NtPrepareEnlistment
-NtPrivilegeCheck
-NtPrivilegeObjectAuditAlarm
-NtPrivilegedServiceAuditAlarm
-NtPropagationComplete
-NtPropagationFailed
-NtProtectVirtualMemory
-NtPssCaptureVaSpaceBulk
-NtPulseEvent
-NtQueryAttributesFile
-NtQueryAuxiliaryCounterFrequency
-NtQueryBootEntryOrder
-NtQueryBootOptions
-NtQueryDebugFilterState
-NtQueryDefaultLocale
-NtQueryDefaultUILanguage
-NtQueryDirectoryFile
-NtQueryDirectoryFileEx
-NtQueryDirectoryObject
-NtQueryDriverEntryOrder
-NtQueryEaFile
-NtQueryEvent
-NtQueryFullAttributesFile
-NtQueryInformationAtom
-NtQueryInformationByName
-NtQueryInformationEnlistment
-NtQueryInformationFile
-NtQueryInformationJobObject
-NtQueryInformationPort
-NtQueryInformationProcess
-NtQueryInformationResourceManager
-NtQueryInformationThread
-NtQueryInformationToken
-NtQueryInformationTransaction
-NtQueryInformationTransactionManager
-NtQueryInformationWorkerFactory
-NtQueryInstallUILanguage
-NtQueryIntervalProfile
-NtQueryIoCompletion
-NtQueryKey
-NtQueryLicenseValue
-NtQueryMultipleValueKey
-NtQueryMutant
-NtQueryObject
-NtQueryOpenSubKeys
-NtQueryOpenSubKeysEx
-NtQueryPerformanceCounter
-NtQueryPortInformationProcess
-NtQueryQuotaInformationFile
-NtQuerySection
-NtQuerySecurityAttributesToken
-NtQuerySecurityObject
-NtQuerySecurityPolicy
-NtQuerySemaphore
-NtQuerySymbolicLinkObject
-NtQuerySystemEnvironmentValue
-NtQuerySystemEnvironmentValueEx
-NtQuerySystemInformation
-NtQuerySystemInformationEx
-NtQuerySystemTime
-NtQueryTimer
-NtQueryTimerResolution
-NtQueryValueKey
-NtQueryVirtualMemory
-NtQueryVolumeInformationFile
-NtQueryWnfStateData
-NtQueryWnfStateNameInformation
-NtQueueApcThread
-NtQueueApcThreadEx
-NtRaiseException
-NtRaiseHardError
-NtReadFile
-NtReadFileScatter
-NtReadOnlyEnlistment
-NtReadRequestData
-NtReadVirtualMemory
-NtRecoverEnlistment
-NtRecoverResourceManager
-NtRecoverTransactionManager
-NtRegisterProtocolAddressInformation
-NtRegisterThreadTerminatePort
-NtReleaseKeyedEvent
-NtReleaseMutant
-NtReleaseSemaphore
-NtReleaseWorkerFactoryWorker
-NtRemoveIoCompletion
-NtRemoveIoCompletionEx
-NtRemoveProcessDebug
-NtRenameKey
-NtRenameTransactionManager
-NtReplaceKey
-NtReplacePartitionUnit
-NtReplyPort
-NtReplyWaitReceivePort
-NtReplyWaitReceivePortEx
-NtReplyWaitReplyPort
-NtRequestDeviceWakeup
-NtRequestPort
-NtRequestWaitReplyPort
-NtRequestWakeupLatency
-NtResetEvent
-NtResetWriteWatch
-NtRestoreKey
-NtResumeProcess
-NtResumeThread
-NtRevertContainerImpersonation
-NtRollbackComplete
-NtRollbackEnlistment
-NtRollbackRegistryTransaction
-NtRollbackTransaction
-NtRollforwardTransactionManager
-NtSaveKey
-NtSaveKeyEx
-NtSaveMergedKeys
-NtSecureConnectPort
-NtSerializeBoot
-NtSetBootEntryOrder
-NtSetBootOptions
-NtSetCachedSigningLevel
-NtSetCachedSigningLevel2
-NtSetContextThread
-NtSetDebugFilterState
-NtSetDefaultHardErrorPort
-NtSetDefaultLocale
-NtSetDefaultUILanguage
-NtSetDriverEntryOrder
-NtSetEaFile
-NtSetEvent
-NtSetEventBoostPriority
-NtSetHighEventPair
-NtSetHighWaitLowEventPair
-NtSetIRTimer
-NtSetInformationDebugObject
-NtSetInformationEnlistment
-NtSetInformationFile
-NtSetInformationJobObject
-NtSetInformationKey
-NtSetInformationObject
-NtSetInformationProcess
-NtSetInformationResourceManager
-NtSetInformationSymbolicLink
-NtSetInformationThread
-NtSetInformationToken
-NtSetInformationTransaction
-NtSetInformationTransactionManager
-NtSetInformationVirtualMemory
-NtSetInformationWorkerFactory
-NtSetIntervalProfile
-NtSetIoCompletion
-NtSetIoCompletionEx
-NtSetLdtEntries
-NtSetLowEventPair
-NtSetLowWaitHighEventPair
-NtSetQuotaInformationFile
-NtSetSecurityObject
-NtSetSystemEnvironmentValue
-NtSetSystemEnvironmentValueEx
-NtSetSystemInformation
-NtSetSystemPowerState
-NtSetSystemTime
-NtSetThreadExecutionState
-NtSetTimer
-NtSetTimer2
-NtSetTimerEx
-NtSetTimerResolution
-NtSetUuidSeed
-NtSetValueKey
-NtSetVolumeInformationFile
-NtSetWnfProcessNotificationEvent
-NtShutdownSystem
-NtShutdownWorkerFactory
-NtSignalAndWaitForSingleObject
-NtSinglePhaseReject
-NtStartProfile
-NtStopProfile
-NtSubscribeWnfStateChange
-NtSuspendProcess
-NtSuspendThread
-NtSystemDebugControl
-NtTerminateEnclave
-NtTerminateJobObject
-NtTerminateProcess
-NtTerminateThread
-NtTestAlert
-NtThawRegistry
-NtThawTransactions
-NtTraceControl
-NtTraceEvent
-NtTranslateFilePath
-NtUmsThreadYield
-NtUnloadDriver
-NtUnloadKey
-NtUnloadKey2
-NtUnloadKeyEx
-NtUnlockFile
-NtUnlockVirtualMemory
-NtUnmapViewOfSection
-NtUnmapViewOfSectionEx
-NtUnsubscribeWnfStateChange
-NtUpdateWnfStateData
-NtVdmControl
-NtWaitForAlertByThreadId
-NtWaitForDebugEvent
-NtWaitForKeyedEvent
-NtWaitForMultipleObjects
-NtWaitForMultipleObjects32
-NtWaitForSingleObject
-NtWaitForWorkViaWorkerFactory
-NtWaitHighEventPair
-NtWaitLowEventPair
-NtWorkerFactoryWorkerReady
-NtWriteFile
-NtWriteFileGather
-NtWriteRequestData
-NtWriteVirtualMemory
-NtYieldExecution
-NtdllDefWindowProc_A
-NtdllDefWindowProc_W
-NtdllDialogWndProc_A
-NtdllDialogWndProc_W
-PfxFindPrefix
-PfxInitialize
-PfxInsertPrefix
-PfxRemovePrefix
-PssNtCaptureSnapshot
-PssNtDuplicateSnapshot
-PssNtFreeRemoteSnapshot
-PssNtFreeSnapshot
-PssNtFreeWalkMarker
-PssNtQuerySnapshot
-PssNtValidateDescriptor
-PssNtWalkSnapshot
-RtlAbortRXact
-RtlAbsoluteToSelfRelativeSD
-RtlAcquirePebLock
-RtlAcquirePrivilege
-RtlAcquireReleaseSRWLockExclusive
-RtlAcquireResourceExclusive
-RtlAcquireResourceShared
-RtlAcquireSRWLockExclusive
-RtlAcquireSRWLockShared
-RtlActivateActivationContext
-RtlActivateActivationContextEx
-RtlActivateActivationContextUnsafeFast
-RtlAddAccessAllowedAce
-RtlAddAccessAllowedAceEx
-RtlAddAccessAllowedObjectAce
-RtlAddAccessDeniedAce
-RtlAddAccessDeniedAceEx
-RtlAddAccessDeniedObjectAce
-RtlAddAccessFilterAce
-RtlAddAce
-RtlAddActionToRXact
-RtlAddAtomToAtomTable
-RtlAddAttributeActionToRXact
-RtlAddAuditAccessAce
-RtlAddAuditAccessAceEx
-RtlAddAuditAccessObjectAce
-RtlAddCompoundAce
-RtlAddFunctionTable
-RtlAddGrowableFunctionTable
-RtlAddIntegrityLabelToBoundaryDescriptor
-RtlAddMandatoryAce
-RtlAddProcessTrustLabelAce
-RtlAddRefActivationContext
-RtlAddRefMemoryStream
-RtlAddResourceAttributeAce
-RtlAddSIDToBoundaryDescriptor
-RtlAddScopedPolicyIDAce
-RtlAddVectoredContinueHandler
-RtlAddVectoredExceptionHandler
-RtlAddressInSectionTable
-RtlAdjustPrivilege
-RtlAllocateActivationContextStack
-RtlAllocateAndInitializeSid
-RtlAllocateAndInitializeSidEx
-RtlAllocateHandle
-RtlAllocateHeap
-RtlAllocateMemoryBlockLookaside
-RtlAllocateMemoryZone
-RtlAllocateWnfSerializationGroup
-RtlAnsiCharToUnicodeChar
-RtlAnsiStringToUnicodeSize
-RtlAnsiStringToUnicodeString
-RtlAppendAsciizToString
-RtlAppendPathElement
-RtlAppendStringToString
-RtlAppendUnicodeStringToString
-RtlAppendUnicodeToString
-RtlApplicationVerifierStop
-RtlApplyRXact
-RtlApplyRXactNoFlush
-RtlAppxIsFileOwnedByTrustedInstaller
-RtlAreAllAccessesGranted
-RtlAreAnyAccessesGranted
-RtlAreBitsClear
-RtlAreBitsClearEx
-RtlAreBitsSet
-RtlAreLongPathsEnabled
-RtlAssert
-RtlAvlInsertNodeEx
-RtlAvlRemoveNode
-RtlBarrier
-RtlBarrierForDelete
-RtlCallEnclaveReturn
-RtlCancelTimer
-RtlCanonicalizeDomainName
-RtlCapabilityCheck
-RtlCapabilityCheckForSingleSessionSku
-RtlCaptureContext
-RtlCaptureStackBackTrace
-RtlCharToInteger
-RtlCheckBootStatusIntegrity
-RtlCheckForOrphanedCriticalSections
-RtlCheckPortableOperatingSystem
-RtlCheckProcessParameters
-RtlCheckRegistryKey
-RtlCheckSandboxedToken
-RtlCheckSystemBootStatusIntegrity
-RtlCheckTokenCapability
-RtlCheckTokenMembership
-RtlCheckTokenMembershipEx
-RtlCleanUpTEBLangLists
-RtlClearAllBits
-RtlClearAllBitsEx
-RtlClearBit
-RtlClearBitEx
-RtlClearBits
-RtlClearBitsEx
-RtlClearThreadWorkOnBehalfTicket
-RtlCloneMemoryStream
-RtlCloneUserProcess
-RtlCmDecodeMemIoResource
-RtlCmEncodeMemIoResource
-RtlCommitDebugInfo
-RtlCommitMemoryStream
-RtlCompactHeap
-RtlCompareAltitudes
-RtlCompareMemory
-RtlCompareMemoryUlong
-RtlCompareString
-RtlCompareUnicodeString
-RtlCompareUnicodeStrings
-RtlCompleteProcessCloning
-RtlCompressBuffer
-RtlComputeCrc32
-RtlComputeImportTableHash
-RtlComputePrivatizedDllName_U
-RtlConnectToSm
-RtlConsoleMultiByteToUnicodeN
-RtlConstructCrossVmEventPath
-RtlContractHashTable
-RtlConvertDeviceFamilyInfoToString
-RtlConvertExclusiveToShared
-RtlConvertLCIDToString
-RtlConvertSRWLockExclusiveToShared
-RtlConvertSharedToExclusive
-RtlConvertSidToUnicodeString
-RtlConvertToAutoInheritSecurityObject
-RtlConvertUiListToApiList
-RtlCopyBitMap
-RtlCopyContext
-RtlCopyExtendedContext
-RtlCopyLuid
-RtlCopyLuidAndAttributesArray
-RtlCopyMappedMemory
-RtlCopyMemory
-RtlCopyMemoryNonTemporal
-RtlCopyMemoryStreamTo
-RtlCopyOutOfProcessMemoryStreamTo
-RtlCopySecurityDescriptor
-RtlCopySid
-RtlCopySidAndAttributesArray
-RtlCopyString
-RtlCopyUnicodeString
-RtlCrc32
-RtlCrc64
-RtlCreateAcl
-RtlCreateActivationContext
-RtlCreateAndSetSD
-RtlCreateAtomTable
-RtlCreateBootStatusDataFile
-RtlCreateBoundaryDescriptor
-RtlCreateEnvironment
-RtlCreateEnvironmentEx
-RtlCreateHashTable
-RtlCreateHashTableEx
-RtlCreateHeap
-RtlCreateMemoryBlockLookaside
-RtlCreateMemoryZone
-RtlCreateProcessParameters
-RtlCreateProcessParametersEx
-RtlCreateProcessParametersWithTemplate
-RtlCreateProcessReflection
-RtlCreateQueryDebugBuffer
-RtlCreateRegistryKey
-RtlCreateSecurityDescriptor
-RtlCreateServiceSid
-RtlCreateSystemVolumeInformationFolder
-RtlCreateTagHeap
-RtlCreateTimer
-RtlCreateTimerQueue
-RtlCreateUmsCompletionList
-RtlCreateUmsThread
-RtlCreateUmsThreadContext
-RtlCreateUnicodeString
-RtlCreateUnicodeStringFromAsciiz
-RtlCreateUserFiberShadowStack
-RtlCreateUserProcess
-RtlCreateUserProcessEx
-RtlCreateUserSecurityObject
-RtlCreateUserStack
-RtlCreateUserThread
-RtlCreateVirtualAccountSid
-RtlCultureNameToLCID
-RtlCustomCPToUnicodeN
-RtlCutoverTimeToSystemTime
-RtlDeCommitDebugInfo
-RtlDeNormalizeProcessParams
-RtlDeactivateActivationContext
-RtlDeactivateActivationContextUnsafeFast
-RtlDebugPrintTimes
-RtlDecodePointer
-RtlDecodeRemotePointer
-RtlDecodeSystemPointer
-RtlDecompressBuffer
-RtlDecompressBufferEx
-RtlDecompressFragment
-RtlDefaultNpAcl
-RtlDelete
-RtlDeleteAce
-RtlDeleteAtomFromAtomTable
-RtlDeleteBarrier
-RtlDeleteBoundaryDescriptor
-RtlDeleteCriticalSection
-RtlDeleteElementGenericTable
-RtlDeleteElementGenericTableAvl
-RtlDeleteElementGenericTableAvlEx
-RtlDeleteFunctionTable
-RtlDeleteGrowableFunctionTable
-RtlDeleteHashTable
-RtlDeleteNoSplay
-RtlDeleteRegistryValue
-RtlDeleteResource
-RtlDeleteSecurityObject
-RtlDeleteTimer
-RtlDeleteTimerQueue
-RtlDeleteTimerQueueEx
-RtlDeleteUmsCompletionList
-RtlDeleteUmsThreadContext
-RtlDequeueUmsCompletionListItems
-RtlDeregisterSecureMemoryCacheCallback
-RtlDeregisterWait
-RtlDeregisterWaitEx
-RtlDeriveCapabilitySidsFromName
-RtlDestroyAtomTable
-RtlDestroyEnvironment
-RtlDestroyHandleTable
-RtlDestroyHeap
-RtlDestroyMemoryBlockLookaside
-RtlDestroyMemoryZone
-RtlDestroyProcessParameters
-RtlDestroyQueryDebugBuffer
-RtlDetectHeapLeaks
-RtlDetermineDosPathNameType_U
-RtlDisableThreadProfiling
-RtlDllShutdownInProgress
-RtlDnsHostNameToComputerName
-RtlDoesFileExists_U
-RtlDoesNameContainWildCards
-RtlDosApplyFileIsolationRedirection_Ustr
-RtlDosLongPathNameToNtPathName_U_WithStatus
-RtlDosLongPathNameToRelativeNtPathName_U_WithStatus
-RtlDosPathNameToNtPathName_U
-RtlDosPathNameToNtPathName_U_WithStatus
-RtlDosPathNameToRelativeNtPathName_U
-RtlDosPathNameToRelativeNtPathName_U_WithStatus
-RtlDosSearchPath_U
-RtlDosSearchPath_Ustr
-RtlDowncaseUnicodeChar
-RtlDowncaseUnicodeString
-RtlDrainNonVolatileFlush
-RtlDumpResource
-RtlDuplicateUnicodeString
-RtlEmptyAtomTable
-RtlEnableEarlyCriticalSectionEventCreation
-RtlEnableThreadProfiling
-RtlEnclaveCallDispatch
-RtlEnclaveCallDispatchReturn
-RtlEncodePointer
-RtlEncodeRemotePointer
-RtlEncodeSystemPointer
-RtlEndEnumerationHashTable
-RtlEndStrongEnumerationHashTable
-RtlEndWeakEnumerationHashTable
-RtlEnterCriticalSection
-RtlEnterUmsSchedulingMode
-RtlEnumProcessHeaps
-RtlEnumerateEntryHashTable
-RtlEnumerateGenericTable
-RtlEnumerateGenericTableAvl
-RtlEnumerateGenericTableLikeADirectory
-RtlEnumerateGenericTableWithoutSplaying
-RtlEnumerateGenericTableWithoutSplayingAvl
-RtlEqualComputerName
-RtlEqualDomainName
-RtlEqualLuid
-RtlEqualPrefixSid
-RtlEqualSid
-RtlEqualString
-RtlEqualUnicodeString
-RtlEqualWnfChangeStamps
-RtlEraseUnicodeString
-RtlEthernetAddressToStringA
-RtlEthernetAddressToStringW
-RtlEthernetStringToAddressA
-RtlEthernetStringToAddressW
-RtlExecuteUmsThread
-RtlExitUserProcess
-RtlExitUserThread
-RtlExpandEnvironmentStrings
-RtlExpandEnvironmentStrings_U
-RtlExtendHeap
-RtlExpandHashTable
-RtlExtendCorrelationVector
-RtlExtendMemoryBlockLookaside
-RtlExtendMemoryZone
-RtlExtractBitMap
-RtlFillMemory
-RtlFillMemoryNonTemporal
-RtlFillNonVolatileMemory
-RtlFinalReleaseOutOfProcessMemoryStream
-RtlFindAceByType
-RtlFindActivationContextSectionGuid
-RtlFindActivationContextSectionString
-RtlFindCharInUnicodeString
-RtlFindClearBits
-RtlFindClearBitsAndSet
-RtlFindClearBitsEx
-RtlFindClearRuns
-RtlFindClosestEncodableLength
-RtlFindExportedRoutineByName
-RtlFindLastBackwardRunClear
-RtlFindLeastSignificantBit
-RtlFindLongestRunClear
-RtlFindMessage
-RtlFindMostSignificantBit
-RtlFindNextForwardRunClear
-RtlFindSetBits
-RtlFindSetBitsAndClear
-RtlFindSetBitsAndClearEx
-RtlFindSetBitsEx
-RtlFindUnicodeSubstring
-RtlFirstEntrySList
-RtlFirstFreeAce
-RtlFlsAlloc
-RtlFlsFree
-RtlFlsGetValue
-RtlFlsSetValue
-RtlFlushHeaps
-RtlFlushNonVolatileMemory
-RtlFlushNonVolatileMemoryRanges
-RtlFlushSecureMemoryCache
-RtlFormatCurrentUserKeyPath
-RtlFormatMessage
-RtlFormatMessageEx
-RtlFreeActivationContextStack
-RtlFreeAnsiString
-RtlFreeHandle
-RtlFreeHeap
-RtlFreeMemoryBlockLookaside
-RtlFreeNonVolatileToken
-RtlFreeOemString
-RtlFreeSid
-RtlFreeThreadActivationContextStack
-RtlFreeUTF8String
-RtlFreeUnicodeString
-RtlFreeUserFiberShadowStack
-RtlFreeUserThreadStack
-RtlFreeUserStack
-RtlGUIDFromString
-RtlGenerate8dot3Name
-RtlGetAce
-RtlGetActiveActivationContext
-RtlGetActiveConsoleId
-RtlGetAppContainerNamedObjectPath
-RtlGetAppContainerParent
-RtlGetAppContainerSidType
-RtlGetCallersAddress
-RtlGetCompressionWorkSpaceSize
-RtlGetConsoleSessionForegroundProcessId
-RtlGetControlSecurityDescriptor
-RtlGetCriticalSectionRecursionCount
-RtlGetCurrentDirectory_U
-RtlGetCurrentPeb
-RtlGetCurrentProcessorNumber
-RtlGetCurrentProcessorNumberEx
-RtlGetCurrentServiceSessionId
-RtlGetCurrentTransaction
-RtlGetCurrentUmsThread
-RtlGetDaclSecurityDescriptor
-RtlGetDeviceFamilyInfoEnum
-RtlGetElementGenericTable
-RtlGetElementGenericTableAvl
-RtlGetEnabledExtendedFeatures
-RtlGetExePath
-RtlGetExtendedContextLength
-RtlGetExtendedContextLength2
-RtlGetExtendedFeaturesMask
-RtlGetFileMUIPath
-RtlGetFrame
-RtlGetFullPathName_U
-RtlGetFullPathName_UEx
-RtlGetFullPathName_UstrEx
-RtlGetFunctionTableListHead
-RtlGetGroupSecurityDescriptor
-RtlGetIntegerAtom
-RtlGetInterruptTimePrecise
-RtlGetLastNtStatus
-RtlGetLastWin32Error
-RtlGetLengthWithoutLastFullDosOrNtPathElement
-RtlGetLengthWithoutTrailingPathSeperators
-RtlGetLocaleFileMappingAddress
-RtlGetLongestNtPathLength
-RtlGetMultiTimePrecise
-RtlGetNativeSystemInformation
-RtlGetNextEntryHashTable
-RtlGetNextUmsListItem
-RtlGetNonVolatileToken
-RtlGetNtGlobalFlags
-RtlGetNtProductType
-RtlGetNtSystemRoot
-RtlGetNtVersionNumbers
-RtlGetOwnerSecurityDescriptor
-RtlGetParentLocaleName
-RtlGetPersistedStateLocation
-RtlGetProcessHeaps
-RtlGetProcessPreferredUILanguages
-RtlGetProductInfo
-RtlGetSaclSecurityDescriptor
-RtlGetSearchPath
-RtlGetSecurityDescriptorRMControl
-RtlGetSessionProperties
-RtlGetSetBootStatusData
-RtlGetSuiteMask
-RtlGetSystemBootStatus
-RtlGetSystemBootStatusEx
-RtlGetSystemPreferredUILanguages
-RtlGetSystemTimePrecise
-RtlGetThreadErrorMode
-RtlGetThreadLangIdByIndex
-RtlGetThreadPreferredUILanguages
-RtlGetThreadWorkOnBehalfTicket
-RtlGetTokenNamedObjectPath
-RtlGetUILanguageInfo
-RtlGetUmsCompletionListEvent
-RtlGetUnloadEventTrace
-RtlGetUnloadEventTraceEx
-RtlGetUserInfoHeap
-RtlGetUserPreferredUILanguages
-RtlGetVersion
-RtlGrowFunctionTable
-RtlGuardCheckLongJumpTarget
-RtlHashUnicodeString
-RtlHeapTrkInitialize
-RtlIdentifierAuthoritySid
-RtlIdnToAscii
-RtlIdnToNameprepUnicode
-RtlIdnToUnicode
-RtlImageDirectoryEntryToData
-RtlImageNtHeader
-RtlImageNtHeaderEx
-RtlImageRvaToSection
-RtlImageRvaToVa
-RtlImpersonateSelf
-RtlImpersonateSelfEx
-RtlIncrementCorrelationVector
-RtlInitAnsiString
-RtlInitAnsiStringEx
-RtlInitBarrier
-RtlInitCodePageTable
-RtlInitEnumerationHashTable
-RtlInitMemoryStream
-RtlInitNlsTables
-RtlInitOutOfProcessMemoryStream
-RtlInitString
-RtlInitStringEx
-RtlInitStrongEnumerationHashTable
-RtlInitUTF8String
-RtlInitUTF8StringEx
-RtlInitUnicodeString
-RtlInitUnicodeStringEx
-RtlInitWeakEnumerationHashTable
-RtlInitializeAtomPackage
-RtlInitializeBitMap
-RtlInitializeBitMapEx
-RtlInitializeConditionVariable
-RtlInitializeContext
-RtlInitializeCorrelationVector
-RtlInitializeCriticalSection
-RtlInitializeCriticalSectionAndSpinCount
-RtlInitializeCriticalSectionEx
-RtlInitializeExtendedContext
-RtlInitializeExtendedContext2
-RtlInitializeGenericTable
-RtlInitializeGenericTableAvl
-RtlInitializeHandleTable
-RtlInitializeNtUserPfn
-RtlInitializeRXact
-RtlInitializeResource
-RtlInitializeSListHead
-RtlInitializeSRWLock
-RtlInitializeSid
-RtlInitializeSidEx
-RtlInsertElementGenericTable
-RtlInsertElementGenericTableAvl
-RtlInsertElementGenericTableFull
-RtlInsertElementGenericTableFullAvl
-RtlInsertEntryHashTable
-RtlInstallFunctionTableCallback
-RtlInt64ToUnicodeString
-RtlIntegerToChar
-RtlIntegerToUnicodeString
-RtlInterlockedClearBitRun
-RtlInterlockedFlushSList
-RtlInterlockedPopEntrySList
-RtlInterlockedPushEntrySList
-RtlInterlockedPushListSList
-RtlInterlockedPushListSListEx
-RtlInterlockedSetBitRun
-RtlIoDecodeMemIoResource
-RtlIoEncodeMemIoResource
-RtlIpv4AddressToStringA
-RtlIpv4AddressToStringExA
-RtlIpv4AddressToStringExW
-RtlIpv4AddressToStringW
-RtlIpv4StringToAddressA
-RtlIpv4StringToAddressExA
-RtlIpv4StringToAddressExW
-RtlIpv4StringToAddressW
-RtlIpv6AddressToStringA
-RtlIpv6AddressToStringExA
-RtlIpv6AddressToStringExW
-RtlIpv6AddressToStringW
-RtlIpv6StringToAddressA
-RtlIpv6StringToAddressExA
-RtlIpv6StringToAddressExW
-RtlIpv6StringToAddressW
-RtlIsActivationContextActive
-RtlIsCapabilitySid
-RtlIsCloudFilesPlaceholder
-RtlIsCriticalSectionLocked
-RtlIsCriticalSectionLockedByThread
-RtlIsCurrentProcess
-RtlIsCurrentThread
-RtlIsCurrentThreadAttachExempt
-RtlIsDosDeviceName_U
-RtlIsElevatedRid
-RtlIsGenericTableEmpty
-RtlIsGenericTableEmptyAvl
-RtlIsMultiSessionSku
-RtlIsMultiUsersInSessionSku
-RtlIsNameInExpression
-RtlIsNameInUnUpcasedExpression
-RtlIsNameLegalDOS8Dot3
-RtlIsNonEmptyDirectoryReparsePointAllowed
-RtlIsNormalizedString
-RtlIsPackageSid
-RtlIsParentOfChildAppContainer
-RtlIsPartialPlaceholder
-RtlIsPartialPlaceholderFileHandle
-RtlIsPartialPlaceholderFileInfo
-RtlIsProcessorFeaturePresent
-RtlIsStateSeparationEnabled
-RtlIsTextUnicode
-RtlIsThreadWithinLoaderCallout
-RtlIsUntrustedObject
-RtlIsValidHandle
-RtlIsValidIndexHandle
-RtlIsValidLocaleName
-RtlIsValidProcessTrustLabelSid
-RtlIsZeroMemory
-RtlKnownExceptionFilter
-RtlLCIDToCultureName
-RtlLargeIntegerToChar
-RtlLcidToLocaleName
-RtlLeaveCriticalSection
-RtlLengthRequiredSid
-RtlLengthSecurityDescriptor
-RtlLengthSid
-RtlLengthSidAsUnicodeString
-RtlLoadString
-RtlLocalTimeToSystemTime
-RtlLocaleNameToLcid
-RtlLocateExtendedFeature
-RtlLocateExtendedFeature2
-RtlLocateLegacyContext
-RtlLockBootStatusData
-RtlLockCurrentThread
-RtlLockHeap
-RtlLockMemoryBlockLookaside
-RtlLockMemoryStreamRegion
-RtlLockMemoryZone
-RtlLockModuleSection
-RtlLogStackBackTrace
-RtlLookupAtomInAtomTable
-RtlLookupElementGenericTable
-RtlLookupElementGenericTableAvl
-RtlLookupElementGenericTableFull
-RtlLookupElementGenericTableFullAvl
-RtlLookupEntryHashTable
-RtlLookupFirstMatchingElementGenericTableAvl
-RtlLookupFunctionEntry
-RtlLookupFunctionTable
-RtlMakeSelfRelativeSD
-RtlMapGenericMask
-RtlMapSecurityErrorToNtStatus
-RtlMoveMemory
-RtlMultiAppendUnicodeStringBuffer
-RtlMultiByteToUnicodeN
-RtlMultiByteToUnicodeSize
-RtlMultipleAllocateHeap
-RtlMultipleFreeHeap
-RtlNewInstanceSecurityObject
-RtlNewSecurityGrantedAccess
-RtlNewSecurityObject
-RtlNewSecurityObjectEx
-RtlNewSecurityObjectWithMultipleInheritance
-RtlNormalizeProcessParams
-RtlNormalizeSecurityDescriptor
-RtlNormalizeString
-RtlNtPathNameToDosPathName
-RtlNtStatusToDosError
-RtlNtStatusToDosErrorNoTeb
-RtlNtdllName DATA
-RtlNumberGenericTableElements
-RtlNumberGenericTableElementsAvl
-RtlNumberOfClearBits
-RtlNumberOfClearBitsEx
-RtlNumberOfClearBitsInRange
-RtlNumberOfSetBits
-RtlNumberOfSetBitsEx
-RtlNumberOfSetBitsInRange
-RtlNumberOfSetBitsUlongPtr
-RtlOemStringToUnicodeSize
-RtlOemStringToUnicodeString
-RtlOemToUnicodeN
-RtlOpenCurrentUser
-RtlOsDeploymentState
-RtlOwnerAcesPresent
-RtlPcToFileHeader
-RtlPinAtomInAtomTable
-RtlPopFrame
-RtlPrefixString
-RtlPrefixUnicodeString
-RtlPrepareForProcessCloning
-RtlProcessFlsData
-RtlProtectHeap
-RtlPublishWnfStateData
-RtlPushFrame
-RtlQueryActivationContextApplicationSettings
-RtlQueryAtomInAtomTable
-RtlQueryCriticalSectionOwner
-RtlQueryDepthSList
-RtlQueryDynamicTimeZoneInformation
-RtlQueryElevationFlags
-RtlQueryEnvironmentVariable
-RtlQueryEnvironmentVariable_U
-RtlQueryHeapInformation
-RtlQueryImageMitigationPolicy
-RtlQueryInformationAcl
-RtlQueryInformationActivationContext
-RtlQueryInformationActiveActivationContext
-RtlQueryInterfaceMemoryStream
-RtlQueryModuleInformation
-RtlQueryPackageClaims
-RtlQueryPackageIdentity
-RtlQueryPackageIdentityEx
-RtlQueryPerformanceCounter
-RtlQueryPerformanceFrequency
-RtlQueryProcessBackTraceInformation
-RtlQueryProcessDebugInformation
-RtlQueryProcessHeapInformation
-RtlQueryProcessLockInformation
-RtlQueryProcessPlaceholderCompatibilityMode
-RtlQueryProtectedPolicy
-RtlQueryRegistryValueWithFallback
-RtlQueryRegistryValues
-RtlQueryRegistryValuesEx
-RtlQueryResourcePolicy
-RtlQuerySecurityObject
-RtlQueryTagHeap
-RtlQueryThreadPlaceholderCompatibilityMode
-RtlQueryThreadProfiling
-RtlQueryTimeZoneInformation
-RtlQueryTokenHostIdAsUlong64
-RtlQueryUmsThreadInformation
-RtlQueryUnbiasedInterruptTime
-RtlQueryValidationRunlevel
-RtlQueryWnfMetaNotification
-RtlQueryWnfStateData
-RtlQueryWnfStateDataWithExplicitScope
-RtlQueueApcWow64Thread
-RtlQueueWorkItem
-RtlRaiseCustomSystemEventTrigger
-RtlRaiseException
-RtlRaiseStatus
-RtlRandom
-RtlRandomEx
-RtlRbInsertNodeEx
-RtlRbRemoveNode
-RtlReAllocateHeap
-RtlReadMemoryStream
-RtlReadOutOfProcessMemoryStream
-RtlReadThreadProfilingData
-RtlRealPredecessor
-RtlRealSuccessor
-RtlRegisterForWnfMetaNotification
-RtlRegisterSecureMemoryCacheCallback
-RtlRegisterThreadWithCsrss
-RtlRegisterWait
-RtlReleaseActivationContext
-RtlReleaseMemoryStream
-RtlReleasePath
-RtlReleasePebLock
-RtlReleasePrivilege
-RtlReleaseRelativeName
-RtlReleaseResource
-RtlReleaseSRWLockExclusive
-RtlReleaseSRWLockShared
-RtlRemoteCall
-RtlRemoveEntryHashTable
-RtlRemovePrivileges
-RtlRemoveVectoredContinueHandler
-RtlRemoveVectoredExceptionHandler
-RtlReplaceSidInSd
-RtlReplaceSystemDirectoryInPath
-RtlReportException
-RtlReportExceptionEx
-RtlReportSilentProcessExit
-RtlReportSqmEscalation
-RtlResetMemoryBlockLookaside
-RtlResetMemoryZone
-RtlResetNtUserPfn
-RtlResetRtlTranslations
-RtlRestoreBootStatusDefaults
-RtlRestoreContext
-RtlRestoreLastWin32Error
-RtlRestoreSystemBootStatusDefaults
-RtlRestoreThreadPreferredUILanguages
-RtlRetrieveNtUserPfn
-RtlRevertMemoryStream
-RtlRunDecodeUnicodeString
-RtlRunEncodeUnicodeString
-RtlRunOnceBeginInitialize
-RtlRunOnceComplete
-RtlRunOnceExecuteOnce
-RtlRunOnceInitialize
-RtlSecondsSince1970ToTime
-RtlSecondsSince1980ToTime
-RtlSeekMemoryStream
-RtlSelfRelativeToAbsoluteSD
-RtlSelfRelativeToAbsoluteSD2
-RtlSendMsgToSm
-RtlSetAllBits
-RtlSetAllBitsEx
-RtlSetAttributesSecurityDescriptor
-RtlSetBit
-RtlSetBitEx
-RtlSetBits
-RtlSetBitsEx
-RtlSetControlSecurityDescriptor
-RtlSetCriticalSectionSpinCount
-RtlSetCurrentDirectory_U
-RtlSetCurrentEnvironment
-RtlSetCurrentTransaction
-RtlSetDaclSecurityDescriptor
-RtlSetDynamicTimeZoneInformation
-RtlSetEnvironmentStrings
-RtlSetEnvironmentVar
-RtlSetEnvironmentVariable
-RtlSetExtendedFeaturesMask
-RtlSetGroupSecurityDescriptor
-RtlSetHeapInformation
-RtlSetImageMitigationPolicy
-RtlSetInformationAcl
-RtlSetIoCompletionCallback
-RtlSetLastWin32Error
-RtlSetLastWin32ErrorAndNtStatusFromNtStatus
-RtlSetMemoryStreamSize
-RtlSetOwnerSecurityDescriptor
-RtlSetPortableOperatingSystem
-RtlSetProcessDebugInformation
-RtlSetProcessIsCritical
-RtlSetProcessPlaceholderCompatibilityMode
-RtlSetProcessPreferredUILanguages
-RtlSetProtectedPolicy
-RtlSetProxiedProcessId
-RtlSetSaclSecurityDescriptor
-RtlSetSearchPathMode
-RtlSetSecurityDescriptorRMControl
-RtlSetSecurityObject
-RtlSetSecurityObjectEx
-RtlSetSystemBootStatus
-RtlSetSystemBootStatusEx
-RtlSetThreadErrorMode
-RtlSetThreadIsCritical
-RtlSetThreadPlaceholderCompatibilityMode
-RtlSetThreadPoolStartFunc
-RtlSetThreadPreferredUILanguages
-RtlSetThreadPreferredUILanguages2
-RtlSetThreadSubProcessTag
-RtlSetThreadWorkOnBehalfTicket
-RtlSetTimeZoneInformation
-RtlSetTimer
-RtlSetUmsThreadInformation
-RtlSetUnhandledExceptionFilter
-RtlSetUnicodeCallouts
-RtlSetUserFlagsHeap
-RtlSetUserValueHeap
-RtlSidDominates
-RtlSidDominatesForTrust
-RtlSidEqualLevel
-RtlSidHashInitialize
-RtlSidHashLookup
-RtlSidIsHigherLevel
-RtlSizeHeap
-RtlSleepConditionVariableCS
-RtlSleepConditionVariableSRW
-RtlSplay
-RtlStartRXact
-RtlStatMemoryStream
-RtlStringFromGUID
-RtlStringFromGUIDEx
-RtlStronglyEnumerateEntryHashTable
-RtlSubAuthorityCountSid
-RtlSubAuthoritySid
-RtlSubscribeWnfStateChangeNotification
-RtlSubtreePredecessor
-RtlSubtreeSuccessor
-RtlSwitchedVVI
-RtlSystemTimeToLocalTime
-RtlTestAndPublishWnfStateData
-RtlTestBit
-RtlTestBitEx
-RtlTestProtectedAccess
-RtlTimeFieldsToTime
-RtlTimeToElapsedTimeFields
-RtlTimeToSecondsSince1970
-RtlTimeToSecondsSince1980
-RtlTimeToTimeFields
-RtlTraceDatabaseAdd
-RtlTraceDatabaseCreate
-RtlTraceDatabaseDestroy
-RtlTraceDatabaseEnumerate
-RtlTraceDatabaseFind
-RtlTraceDatabaseLock
-RtlTraceDatabaseUnlock
-RtlTraceDatabaseValidate
-RtlTryAcquirePebLock
-RtlTryAcquireSRWLockExclusive
-RtlTryAcquireSRWLockShared
-RtlTryConvertSRWLockSharedToExclusiveOrRelease
-RtlTryEnterCriticalSection
-RtlUTF8StringToUnicodeString
-RtlUTF8ToUnicodeN
-RtlUdiv128
-RtlUmsThreadYield
-RtlUnhandledExceptionFilter
-RtlUnhandledExceptionFilter2
-RtlUnicodeStringToAnsiSize
-RtlUnicodeStringToAnsiString
-RtlUnicodeStringToCountedOemString
-RtlUnicodeStringToInteger
-RtlUnicodeStringToOemSize
-RtlUnicodeStringToOemString
-RtlUnicodeStringToUTF8String
-RtlUnicodeToCustomCPN
-RtlUnicodeToMultiByteN
-RtlUnicodeToMultiByteSize
-RtlUnicodeToOemN
-RtlUnicodeToUTF8N
-RtlUniform
-RtlUnlockBootStatusData
-RtlUnlockCurrentThread
-RtlUnlockHeap
-RtlUnlockMemoryBlockLookaside
-RtlUnlockMemoryStreamRegion
-RtlUnlockMemoryZone
-RtlUnlockModuleSection
-RtlUnsubscribeWnfNotificationWaitForCompletion
-RtlUnsubscribeWnfNotificationWithCompletionCallback
-RtlUnsubscribeWnfStateChangeNotification
-RtlUnwind
-RtlUnwindEx
-RtlUpcaseUnicodeChar
-RtlUpcaseUnicodeString
-RtlUpcaseUnicodeStringToAnsiString
-RtlUpcaseUnicodeStringToCountedOemString
-RtlUpcaseUnicodeStringToOemString
-RtlUpcaseUnicodeToCustomCPN
-RtlUpcaseUnicodeToMultiByteN
-RtlUpcaseUnicodeToOemN
-RtlUpdateClonedCriticalSection
-RtlUpdateClonedSRWLock
-RtlUpdateTimer
-RtlUpperChar
-RtlUpperString
-RtlUsageHeap
-RtlUserFiberStart
-RtlUserThreadStart
-RtlValidAcl
-RtlValidProcessProtection
-RtlValidRelativeSecurityDescriptor
-RtlValidSecurityDescriptor
-RtlValidSid
-RtlValidateCorrelationVector
-RtlValidateHeap
-RtlValidateProcessHeaps
-RtlValidateUnicodeString
-RtlVerifyVersionInfo
-RtlVirtualUnwind
-RtlWaitForWnfMetaNotification
-RtlWaitOnAddress
-RtlWakeAddressAll
-RtlWakeAddressAllNoFence
-RtlWakeAddressSingle
-RtlWakeAddressSingleNoFence
-RtlWakeAllConditionVariable
-RtlWakeConditionVariable
-RtlWalkFrameChain
-RtlWalkHeap
-RtlWeaklyEnumerateEntryHashTable
-RtlWerpReportException
-RtlWnfCompareChangeStamp
-RtlWnfDllUnloadCallback
-RtlWow64CallFunction64
-RtlWow64EnableFsRedirection
-RtlWow64EnableFsRedirectionEx
-RtlWow64GetCpuAreaInfo
-RtlWow64GetCurrentCpuArea
-RtlWow64GetCurrentMachine
-RtlWow64GetEquivalentMachineCHPE
-RtlWow64GetProcessMachines
-RtlWow64GetSharedInfoProcess
-RtlWow64GetThreadContext
-RtlWow64GetThreadSelectorEntry
-RtlWow64IsWowGuestMachineSupported
-RtlWow64LogMessageInEventLogger
-RtlWow64PopAllCrossProcessWorkFromWorkList
-RtlWow64PopCrossProcessWorkFromFreeList
-RtlWow64PushCrossProcessWorkOntoFreeList
-RtlWow64PushCrossProcessWorkOntoWorkList
-RtlWow64RequestCrossProcessHeavyFlush
-RtlWow64SetThreadContext
-RtlWow64SuspendProcess
-RtlWow64SuspendThread
-RtlWriteMemoryStream
-RtlWriteNonVolatileMemory
-RtlWriteRegistryValue
-RtlZeroHeap
-RtlZeroMemory
-RtlZombifyActivationContext
-RtlpApplyLengthFunction
-RtlpCheckDynamicTimeZoneInformation
-RtlpCleanupRegistryKeys
-RtlpConvertAbsoluteToRelativeSecurityAttribute
-RtlpConvertCultureNamesToLCIDs
-RtlpConvertLCIDsToCultureNames
-RtlpConvertRelativeToAbsoluteSecurityAttribute
-RtlpCreateProcessRegistryInfo
-RtlpEnsureBufferSize
-RtlpExecuteUmsThread
-RtlpFreezeTimeBias
-RtlpGetDeviceFamilyInfoEnum
-RtlpGetLCIDFromLangInfoNode
-RtlpGetNameFromLangInfoNode
-RtlpGetSystemDefaultUILanguage
-RtlpGetUserOrMachineUILanguage4NLS
-RtlpInitializeLangRegistryInfo
-RtlpIsQualifiedLanguage
-RtlpLoadMachineUIByPolicy
-RtlpLoadUserUIByPolicy
-RtlpMergeSecurityAttributeInformation
-RtlpMuiFreeLangRegistryInfo
-RtlpMuiRegCreateRegistryInfo
-RtlpMuiRegFreeRegistryInfo
-RtlpMuiRegLoadRegistryInfo
-RtlpNotOwnerCriticalSection
-RtlpNtCreateKey
-RtlpNtEnumerateSubKey
-RtlpNtMakeTemporaryKey
-RtlpNtOpenKey
-RtlpNtQueryValueKey
-RtlpNtSetValueKey
-RtlpQueryDefaultUILanguage
-RtlpQueryProcessDebugInformationFromWow64
-RtlpQueryProcessDebugInformationRemote
-RtlpRefreshCachedUILanguage
-RtlpSetInstallLanguage
-RtlpSetPreferredUILanguages
-RtlpSetUserPreferredUILanguages
-RtlpTimeFieldsToTime
-RtlpTimeToTimeFields
-RtlpUmsExecuteYieldThreadEnd
-RtlpUmsThreadYield
-RtlpUnWaitCriticalSection
-RtlpVerifyAndCommitUILanguageSettings
-RtlpWaitForCriticalSection
-RtlpWow64CtxFromAmd64
-RtlpWow64GetContextOnAmd64
-RtlpWow64SetContextOnAmd64
-RtlxAnsiStringToUnicodeSize
-RtlxOemStringToUnicodeSize
-RtlxUnicodeStringToAnsiSize
-RtlxUnicodeStringToOemSize
-SbExecuteProcedure
-SbSelectProcedure
-ShipAssert
-ShipAssertGetBufferInfo
-ShipAssertMsgA
-ShipAssertMsgW
-TpAllocAlpcCompletion
-TpAllocAlpcCompletionEx
-TpAllocCleanupGroup
-TpAllocIoCompletion
-TpAllocJobNotification
-TpAllocPool
-TpAllocTimer
-TpAllocWait
-TpAllocWork
-TpAlpcRegisterCompletionList
-TpAlpcUnregisterCompletionList
-TpCallbackDetectedUnrecoverableError
-TpCallbackIndependent
-TpCallbackLeaveCriticalSectionOnCompletion
-TpCallbackMayRunLong
-TpCallbackReleaseMutexOnCompletion
-TpCallbackReleaseSemaphoreOnCompletion
-TpCallbackSendAlpcMessageOnCompletion
-TpCallbackSendPendingAlpcMessage
-TpCallbackSetEventOnCompletion
-TpCallbackUnloadDllOnCompletion
-TpCancelAsyncIoOperation
-TpCaptureCaller
-TpCheckTerminateWorker
-TpDbgDumpHeapUsage
-TpDbgGetFreeInfo
-TpDbgSetLogRoutine
-TpDisablePoolCallbackChecks
-TpDisassociateCallback
-TpIsTimerSet
-TpPoolFreeUnusedNodes
-TpPostWork
-TpQueryPoolStackInformation
-TpReleaseAlpcCompletion
-TpReleaseCleanupGroup
-TpReleaseCleanupGroupMembers
-TpReleaseIoCompletion
-TpReleaseJobNotification
-TpReleasePool
-TpReleaseTimer
-TpReleaseWait
-TpReleaseWork
-TpSetDefaultPoolMaxThreads
-TpSetDefaultPoolStackInformation
-TpSetPoolMaxThreads
-TpSetPoolMaxThreadsSoftLimit
-TpSetPoolMinThreads
-TpSetPoolStackInformation
-TpSetPoolThreadBasePriority
-TpSetPoolThreadCpuSets
-TpSetPoolWorkerThreadIdleTimeout
-TpSetTimer
-TpSetTimerEx
-TpSetWait
-TpSetWaitEx
-TpSimpleTryPost
-TpStartAsyncIoOperation
-TpTimerOutstandingCallbackCount
-TpTrimPools
-TpWaitForAlpcCompletion
-TpWaitForIoCompletion
-TpWaitForJobNotification
-TpWaitForTimer
-TpWaitForWait
-TpWaitForWork
-VerSetConditionMask
-WerReportExceptionWorker
-WerReportSQMEvent
-WinSqmAddToAverageDWORD
-WinSqmAddToStream
-WinSqmAddToStreamEx
-WinSqmCheckEscalationAddToStreamEx
-WinSqmCheckEscalationSetDWORD
-WinSqmCheckEscalationSetDWORD64
-WinSqmCheckEscalationSetString
-WinSqmCommonDatapointDelete
-WinSqmCommonDatapointSetDWORD
-WinSqmCommonDatapointSetDWORD64
-WinSqmCommonDatapointSetStreamEx
-WinSqmCommonDatapointSetString
-WinSqmEndSession
-WinSqmEventEnabled
-WinSqmEventWrite
-WinSqmGetEscalationRuleStatus
-WinSqmGetInstrumentationProperty
-WinSqmIncrementDWORD
-WinSqmIsOptedIn
-WinSqmIsOptedInEx
-WinSqmIsSessionDisabled
-WinSqmSetDWORD
-WinSqmSetDWORD64
-WinSqmSetEscalationInfo
-WinSqmSetIfMaxDWORD
-WinSqmSetIfMinDWORD
-WinSqmSetString
-WinSqmStartSession
-WinSqmStartSessionForPartner
-WinSqmStartSqmOptinListener
-ZwAcceptConnectPort
-ZwAccessCheck
-ZwAccessCheckAndAuditAlarm
-ZwAccessCheckByType
-ZwAccessCheckByTypeAndAuditAlarm
-ZwAccessCheckByTypeResultList
-ZwAccessCheckByTypeResultListAndAuditAlarm
-ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
-ZwAcquireProcessActivityReference
-ZwAddAtom
-ZwAddAtomEx
-ZwAddBootEntry
-ZwAddDriverEntry
-ZwAdjustGroupsToken
-ZwAdjustPrivilegesToken
-ZwAdjustTokenClaimsAndDeviceGroups
-ZwAlertResumeThread
-ZwAlertThread
-ZwAlertThreadByThreadId
-ZwAllocateLocallyUniqueId
-ZwAllocateReserveObject
-ZwAllocateUserPhysicalPages
-ZwAllocateUserPhysicalPagesEx
-ZwAllocateUuids
-ZwAllocateVirtualMemory
-ZwAllocateVirtualMemoryEx
-ZwAlpcAcceptConnectPort
-ZwAlpcCancelMessage
-ZwAlpcConnectPort
-ZwAlpcConnectPortEx
-ZwAlpcCreatePort
-ZwAlpcCreatePortSection
-ZwAlpcCreateResourceReserve
-ZwAlpcCreateSectionView
-ZwAlpcCreateSecurityContext
-ZwAlpcDeletePortSection
-ZwAlpcDeleteResourceReserve
-ZwAlpcDeleteSectionView
-ZwAlpcDeleteSecurityContext
-ZwAlpcDisconnectPort
-ZwAlpcImpersonateClientContainerOfPort
-ZwAlpcImpersonateClientOfPort
-ZwAlpcOpenSenderProcess
-ZwAlpcOpenSenderThread
-ZwAlpcQueryInformation
-ZwAlpcQueryInformationMessage
-ZwAlpcRevokeSecurityContext
-ZwAlpcSendWaitReceivePort
-ZwAlpcSetInformation
-ZwApphelpCacheControl
-ZwAreMappedFilesTheSame
-ZwAssignProcessToJobObject
-ZwAssociateWaitCompletionPacket
-ZwCallEnclave
-ZwCallbackReturn
-ZwCancelDeviceWakeupRequest
-ZwCancelIoFile
-ZwCancelIoFileEx
-ZwCancelSynchronousIoFile
-ZwCancelTimer
-ZwCancelTimer2
-ZwCancelWaitCompletionPacket
-ZwClearEvent
-ZwClose
-ZwCloseObjectAuditAlarm
-ZwCommitComplete
-ZwCommitEnlistment
-ZwCommitRegistryTransaction
-ZwCommitTransaction
-ZwCompactKeys
-ZwCompareObjects
-ZwCompareSigningLevels
-ZwCompareTokens
-ZwCompleteConnectPort
-ZwCompressKey
-ZwConnectPort
-ZwContinue
-ZwConvertBetweenAuxiliaryCounterAndPerformanceCounter
-ZwCreateCrossVmEvent
-ZwCreateDebugObject
-ZwCreateDirectoryObject
-ZwCreateDirectoryObjectEx
-ZwCreateEnclave
-ZwCreateEnlistment
-ZwCreateEvent
-ZwCreateEventPair
-ZwCreateFile
-ZwCreateIRTimer
-ZwCreateIoCompletion
-ZwCreateJobObject
-ZwCreateJobSet
-ZwCreateKey
-ZwCreateKeyTransacted
-ZwCreateKeyedEvent
-ZwCreateLowBoxToken
-ZwCreateMailslotFile
-ZwCreateMutant
-ZwCreateNamedPipeFile
-ZwCreatePagingFile
-ZwCreatePartition
-ZwCreatePort
-ZwCreatePrivateNamespace
-ZwCreateProcess
-ZwCreateProcessEx
-ZwCreateProfile
-ZwCreateProfileEx
-ZwCreateRegistryTransaction
-ZwCreateResourceManager
-ZwCreateSection
-ZwCreateSectionEx
-ZwCreateSemaphore
-ZwCreateSymbolicLinkObject
-ZwCreateThread
-ZwCreateThreadEx
-ZwCreateTimer
-ZwCreateTimer2
-ZwCreateToken
-ZwCreateTokenEx
-ZwCreateTransaction
-ZwCreateTransactionManager
-ZwCreateUserProcess
-ZwCreateWaitCompletionPacket
-ZwCreateWaitablePort
-ZwCreateWnfStateName
-ZwCreateWorkerFactory
-ZwDebugActiveProcess
-ZwDebugContinue
-ZwDelayExecution
-ZwDeleteAtom
-ZwDeleteBootEntry
-ZwDeleteDriverEntry
-ZwDeleteFile
-ZwDeleteKey
-ZwDeleteObjectAuditAlarm
-ZwDeletePrivateNamespace
-ZwDeleteValueKey
-ZwDeleteWnfStateData
-ZwDeleteWnfStateName
-ZwDeviceIoControlFile
-ZwDisableLastKnownGood
-ZwDisplayString
-ZwDrawText
-ZwDuplicateObject
-ZwDuplicateToken
-ZwEnableLastKnownGood
-ZwEnumerateBootEntries
-ZwEnumerateDriverEntries
-ZwEnumerateKey
-ZwEnumerateSystemEnvironmentValuesEx
-ZwEnumerateTransactionObject
-ZwEnumerateValueKey
-ZwExtendSection
-ZwFilterBootOption
-ZwFilterToken
-ZwFilterTokenEx
-ZwFindAtom
-ZwFlushBuffersFile
-ZwFlushBuffersFileEx
-ZwFlushInstallUILanguage
-ZwFlushInstructionCache
-ZwFlushKey
-ZwFlushProcessWriteBuffers
-ZwFlushVirtualMemory
-ZwFlushWriteBuffer
-ZwFreeUserPhysicalPages
-ZwFreeVirtualMemory
-ZwFreezeRegistry
-ZwFreezeTransactions
-ZwFsControlFile
-ZwGetCachedSigningLevel
-ZwGetCompleteWnfStateSubscription
-ZwGetContextThread
-ZwGetCurrentProcessorNumber
-ZwGetCurrentProcessorNumberEx
-ZwGetDevicePowerState
-ZwGetMUIRegistryInfo
-ZwGetNextProcess
-ZwGetNextThread
-ZwGetNlsSectionPtr
-ZwGetNotificationResourceManager
-ZwGetPlugPlayEvent
-ZwGetWriteWatch
-ZwImpersonateAnonymousToken
-ZwImpersonateClientOfPort
-ZwImpersonateThread
-ZwInitializeEnclave
-ZwInitializeNlsFiles
-ZwInitializeRegistry
-ZwInitiatePowerAction
-ZwIsProcessInJob
-ZwIsSystemResumeAutomatic
-ZwIsUILanguageComitted
-ZwListenPort
-ZwLoadDriver
-ZwLoadEnclaveData
-ZwLoadKey
-ZwLoadKey2
-ZwLoadKeyEx
-ZwLockFile
-ZwLockProductActivationKeys
-ZwLockRegistryKey
-ZwLockVirtualMemory
-ZwMakePermanentObject
-ZwMakeTemporaryObject
-ZwManageHotPatch
-ZwManagePartition
-ZwMapCMFModule
-ZwMapUserPhysicalPages
-ZwMapUserPhysicalPagesScatter
-ZwMapViewOfSection
-ZwMapViewOfSectionEx
-ZwModifyBootEntry
-ZwModifyDriverEntry
-ZwNotifyChangeDirectoryFile
-ZwNotifyChangeDirectoryFileEx
-ZwNotifyChangeKey
-ZwNotifyChangeMultipleKeys
-ZwNotifyChangeSession
-ZwOpenDirectoryObject
-ZwOpenEnlistment
-ZwOpenEvent
-ZwOpenEventPair
-ZwOpenFile
-ZwOpenIoCompletion
-ZwOpenJobObject
-ZwOpenKey
-ZwOpenKeyEx
-ZwOpenKeyTransacted
-ZwOpenKeyTransactedEx
-ZwOpenKeyedEvent
-ZwOpenMutant
-ZwOpenObjectAuditAlarm
-ZwOpenPartition
-ZwOpenPrivateNamespace
-ZwOpenProcess
-ZwOpenProcessToken
-ZwOpenProcessTokenEx
-ZwOpenRegistryTransaction
-ZwOpenResourceManager
-ZwOpenSection
-ZwOpenSemaphore
-ZwOpenSession
-ZwOpenSymbolicLinkObject
-ZwOpenThread
-ZwOpenThreadToken
-ZwOpenThreadTokenEx
-ZwOpenTimer
-ZwOpenTransaction
-ZwOpenTransactionManager
-ZwPlugPlayControl
-ZwPowerInformation
-ZwPrePrepareComplete
-ZwPrePrepareEnlistment
-ZwPrepareComplete
-ZwPrepareEnlistment
-ZwPrivilegeCheck
-ZwPrivilegeObjectAuditAlarm
-ZwPrivilegedServiceAuditAlarm
-ZwPropagationComplete
-ZwPropagationFailed
-ZwProtectVirtualMemory
-ZwPssCaptureVaSpaceBulk
-ZwPulseEvent
-ZwQueryAttributesFile
-ZwQueryAuxiliaryCounterFrequency
-ZwQueryBootEntryOrder
-ZwQueryBootOptions
-ZwQueryDebugFilterState
-ZwQueryDefaultLocale
-ZwQueryDefaultUILanguage
-ZwQueryDirectoryFile
-ZwQueryDirectoryFileEx
-ZwQueryDirectoryObject
-ZwQueryDriverEntryOrder
-ZwQueryEaFile
-ZwQueryEvent
-ZwQueryFullAttributesFile
-ZwQueryInformationAtom
-ZwQueryInformationByName
-ZwQueryInformationEnlistment
-ZwQueryInformationFile
-ZwQueryInformationJobObject
-ZwQueryInformationPort
-ZwQueryInformationProcess
-ZwQueryInformationResourceManager
-ZwQueryInformationThread
-ZwQueryInformationToken
-ZwQueryInformationTransaction
-ZwQueryInformationTransactionManager
-ZwQueryInformationWorkerFactory
-ZwQueryInstallUILanguage
-ZwQueryIntervalProfile
-ZwQueryIoCompletion
-ZwQueryKey
-ZwQueryLicenseValue
-ZwQueryMultipleValueKey
-ZwQueryMutant
-ZwQueryObject
-ZwQueryOpenSubKeys
-ZwQueryOpenSubKeysEx
-ZwQueryPerformanceCounter
-ZwQueryPortInformationProcess
-ZwQueryQuotaInformationFile
-ZwQuerySection
-ZwQuerySecurityAttributesToken
-ZwQuerySecurityObject
-ZwQuerySecurityPolicy
-ZwQuerySemaphore
-ZwQuerySymbolicLinkObject
-ZwQuerySystemEnvironmentValue
-ZwQuerySystemEnvironmentValueEx
-ZwQuerySystemInformation
-ZwQuerySystemInformationEx
-ZwQuerySystemTime
-ZwQueryTimer
-ZwQueryTimerResolution
-ZwQueryValueKey
-ZwQueryVirtualMemory
-ZwQueryVolumeInformationFile
-ZwQueryWnfStateData
-ZwQueryWnfStateNameInformation
-ZwQueueApcThread
-ZwQueueApcThreadEx
-ZwRaiseException
-ZwRaiseHardError
-ZwReadFile
-ZwReadFileScatter
-ZwReadOnlyEnlistment
-ZwReadRequestData
-ZwReadVirtualMemory
-ZwRecoverEnlistment
-ZwRecoverResourceManager
-ZwRecoverTransactionManager
-ZwRegisterProtocolAddressInformation
-ZwRegisterThreadTerminatePort
-ZwReleaseKeyedEvent
-ZwReleaseMutant
-ZwReleaseSemaphore
-ZwReleaseWorkerFactoryWorker
-ZwRemoveIoCompletion
-ZwRemoveIoCompletionEx
-ZwRemoveProcessDebug
-ZwRenameKey
-ZwRenameTransactionManager
-ZwReplaceKey
-ZwReplacePartitionUnit
-ZwReplyPort
-ZwReplyWaitReceivePort
-ZwReplyWaitReceivePortEx
-ZwReplyWaitReplyPort
-ZwRequestDeviceWakeup
-ZwRequestPort
-ZwRequestWaitReplyPort
-ZwRequestWakeupLatency
-ZwResetEvent
-ZwResetWriteWatch
-ZwRestoreKey
-ZwResumeProcess
-ZwResumeThread
-ZwRevertContainerImpersonation
-ZwRollbackComplete
-ZwRollbackEnlistment
-ZwRollbackRegistryTransaction
-ZwRollbackTransaction
-ZwRollforwardTransactionManager
-ZwSaveKey
-ZwSaveKeyEx
-ZwSaveMergedKeys
-ZwSecureConnectPort
-ZwSerializeBoot
-ZwSetBootEntryOrder
-ZwSetBootOptions
-ZwSetCachedSigningLevel
-ZwSetCachedSigningLevel2
-ZwSetContextThread
-ZwSetDebugFilterState
-ZwSetDefaultHardErrorPort
-ZwSetDefaultLocale
-ZwSetDefaultUILanguage
-ZwSetDriverEntryOrder
-ZwSetEaFile
-ZwSetEvent
-ZwSetEventBoostPriority
-ZwSetHighEventPair
-ZwSetHighWaitLowEventPair
-ZwSetIRTimer
-ZwSetInformationDebugObject
-ZwSetInformationEnlistment
-ZwSetInformationFile
-ZwSetInformationJobObject
-ZwSetInformationKey
-ZwSetInformationObject
-ZwSetInformationProcess
-ZwSetInformationResourceManager
-ZwSetInformationSymbolicLink
-ZwSetInformationThread
-ZwSetInformationToken
-ZwSetInformationTransaction
-ZwSetInformationTransactionManager
-ZwSetInformationVirtualMemory
-ZwSetInformationWorkerFactory
-ZwSetIntervalProfile
-ZwSetIoCompletion
-ZwSetIoCompletionEx
-ZwSetLdtEntries
-ZwSetLowEventPair
-ZwSetLowWaitHighEventPair
-ZwSetQuotaInformationFile
-ZwSetSecurityObject
-ZwSetSystemEnvironmentValue
-ZwSetSystemEnvironmentValueEx
-ZwSetSystemInformation
-ZwSetSystemPowerState
-ZwSetSystemTime
-ZwSetThreadExecutionState
-ZwSetTimer
-ZwSetTimer2
-ZwSetTimerEx
-ZwSetTimerResolution
-ZwSetUuidSeed
-ZwSetValueKey
-ZwSetVolumeInformationFile
-ZwSetWnfProcessNotificationEvent
-ZwShutdownSystem
-ZwShutdownWorkerFactory
-ZwSignalAndWaitForSingleObject
-ZwSinglePhaseReject
-ZwStartProfile
-ZwStopProfile
-ZwSubscribeWnfStateChange
-ZwSuspendProcess
-ZwSuspendThread
-ZwSystemDebugControl
-ZwTerminateEnclave
-ZwTerminateJobObject
-ZwTerminateProcess
-ZwTerminateThread
-ZwTestAlert
-ZwThawRegistry
-ZwThawTransactions
-ZwTraceControl
-ZwTraceEvent
-ZwTranslateFilePath
-ZwUmsThreadYield
-ZwUnloadDriver
-ZwUnloadKey
-ZwUnloadKey2
-ZwUnloadKeyEx
-ZwUnlockFile
-ZwUnlockVirtualMemory
-ZwUnmapViewOfSection
-ZwUnmapViewOfSectionEx
-ZwUnsubscribeWnfStateChange
-ZwUpdateWnfStateData
-ZwVdmControl
-ZwWaitForAlertByThreadId
-ZwWaitForDebugEvent
-ZwWaitForKeyedEvent
-ZwWaitForMultipleObjects
-ZwWaitForMultipleObjects32
-ZwWaitForSingleObject
-ZwWaitForWorkViaWorkerFactory
-ZwWaitHighEventPair
-ZwWaitLowEventPair
-ZwWorkerFactoryWorkerReady
-ZwWriteFile
-ZwWriteFileGather
-ZwWriteRequestData
-ZwWriteVirtualMemory
-ZwYieldExecution
-vDbgPrintEx
-vDbgPrintExWithPrefix
diff --git a/mingw-w64-crt/libarm64/Makefile.am b/mingw-w64-crt/libarm64/Makefile.am
index 26f2861..dcffd2f 100644
--- a/mingw-w64-crt/libarm64/Makefile.am
+++ b/mingw-w64-crt/libarm64/Makefile.am
@@ -190,6 +190,7 @@
 libarm64_DATA += %reldir%/libnetutils.a
 libarm64_DATA += %reldir%/libnormaliz.a
 libarm64_DATA += %reldir%/libntdsapi.a
+libarm64_DATA += %reldir%/libntdll.a
 libarm64_DATA += %reldir%/libntdllcrt.a
 libarm64_DATA += %reldir%/liboccache.a
 libarm64_DATA += %reldir%/libodbc32.a