kernel32.dll
Description: Windows NT BASE API Client DLL
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.10586.0
Architecture: 64-bit
Operating System: Windows NT
SHA256: 86e7e3e20333fbce72bd233ee31d0332
File Size: 689.0 KB
Uploaded At: May 11, 2026, 7:13 p.m.
Views: 35
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess, CreateRemoteThread, WriteProcessMemory, VirtualAllocEx
Exported Functions
- AcquireSRWLockExclusive (Ordinal: 1, Address: 0x8feb3)
- AcquireSRWLockShared (Ordinal: 2, Address: 0x8fee9)
- ActivateActCtx (Ordinal: 3, Address: 0x27640)
- ActivateActCtxWorker (Ordinal: 4, Address: 0x20fb0)
- AddAtomA (Ordinal: 5, Address: 0x2abe0)
- AddAtomW (Ordinal: 6, Address: 0xd3f0)
- AddConsoleAliasA (Ordinal: 7, Address: 0x655e0)
- AddConsoleAliasW (Ordinal: 8, Address: 0x65740)
- AddDllDirectory (Ordinal: 9, Address: 0x8ff6f)
- AddIntegrityLabelToBoundaryDescriptor (Ordinal: 10, Address: 0x46af0)
- AddLocalAlternateComputerNameA (Ordinal: 11, Address: 0x3d170)
- AddLocalAlternateComputerNameW (Ordinal: 12, Address: 0x3d1d0)
- AddRefActCtx (Ordinal: 13, Address: 0x2aa30)
- AddRefActCtxWorker (Ordinal: 14, Address: 0x24890)
- AddResourceAttributeAce (Ordinal: 15, Address: 0x45800)
- AddSIDToBoundaryDescriptor (Ordinal: 16, Address: 0x26e50)
- AddScopedPolicyIDAce (Ordinal: 17, Address: 0x45810)
- AddSecureMemoryCacheCallback (Ordinal: 18, Address: 0x42be0)
- AddVectoredContinueHandler (Ordinal: 19, Address: 0x900a8)
- AddVectoredExceptionHandler (Ordinal: 20, Address: 0x900e8)
- AdjustCalendarDate (Ordinal: 21, Address: 0x19ef0)
- AllocConsole (Ordinal: 22, Address: 0x2df80)
- AllocateUserPhysicalPages (Ordinal: 23, Address: 0x45830)
- AllocateUserPhysicalPagesNuma (Ordinal: 24, Address: 0x45820)
- AppXGetOSMaxVersionTested (Ordinal: 25, Address: 0x9017f)
- ApplicationRecoveryFinished (Ordinal: 26, Address: 0x50d70)
- ApplicationRecoveryInProgress (Ordinal: 27, Address: 0x50d80)
- AreFileApisANSI (Ordinal: 28, Address: 0x24820)
- AssignProcessToJobObject (Ordinal: 29, Address: 0xafb0)
- AttachConsole (Ordinal: 30, Address: 0x2e060)
- BackupRead (Ordinal: 31, Address: 0x3ae70)
- BackupSeek (Ordinal: 32, Address: 0x3bd30)
- BackupWrite (Ordinal: 33, Address: 0x3c000)
- BaseCheckAppcompatCache (Ordinal: 34, Address: 0x458a0)
- BaseCheckAppcompatCacheEx (Ordinal: 35, Address: 0x45840)
- BaseCheckAppcompatCacheExWorker (Ordinal: 36, Address: 0x28e90)
- BaseCheckAppcompatCacheWorker (Ordinal: 37, Address: 0x28e90)
- BaseCheckElevation (Ordinal: 38, Address: 0x1f090)
- BaseCleanupAppcompatCacheSupport (Ordinal: 39, Address: 0x458b0)
- BaseCleanupAppcompatCacheSupportWorker (Ordinal: 40, Address: 0x2a3b0)
- BaseDestroyVDMEnvironment (Ordinal: 41, Address: 0x4bc60)
- BaseDllReadWriteIniFile (Ordinal: 42, Address: 0xffe0)
- BaseDumpAppcompatCache (Ordinal: 43, Address: 0x458c0)
- BaseDumpAppcompatCacheWorker (Ordinal: 44, Address: 0x2d0a0)
- BaseElevationPostProcessing (Ordinal: 45, Address: 0x23d60)
- BaseFlushAppcompatCache (Ordinal: 46, Address: 0x458d0)
- BaseFlushAppcompatCacheWorker (Ordinal: 47, Address: 0x6c1d0)
- BaseFormatObjectAttributes (Ordinal: 48, Address: 0x23960)
- BaseFormatTimeOut (Ordinal: 49, Address: 0x63ce0)
- BaseFreeAppCompatDataForProcessWorker (Ordinal: 50, Address: 0x27480)
- BaseGenerateAppCompatData (Ordinal: 51, Address: 0x25910)
- BaseGetNamedObjectDirectory (Ordinal: 52, Address: 0x458e0)
- BaseInitAppcompatCacheSupport (Ordinal: 53, Address: 0x458f0)
- BaseInitAppcompatCacheSupportWorker (Ordinal: 54, Address: 0x2a3b0)
- BaseIsAppcompatInfrastructureDisabled (Ordinal: 55, Address: 0x28e90)
- BaseIsAppcompatInfrastructureDisabledWorker (Ordinal: 56, Address: 0x28e90)
- BaseIsDosApplication (Ordinal: 57, Address: 0x28820)
- BaseQueryModuleData (Ordinal: 58, Address: 0x6c260)
- BaseReadAppCompatDataForProcessWorker (Ordinal: 59, Address: 0x248a0)
- BaseSetLastNTError (Ordinal: 60, Address: 0xdb30)
- BaseThreadInitThunk (Ordinal: 61, Address: 0x180e0)
- BaseUpdateAppcompatCache (Ordinal: 62, Address: 0x45900)
- BaseUpdateAppcompatCacheWorker (Ordinal: 63, Address: 0x6c230)
- BaseUpdateVDMEntry (Ordinal: 64, Address: 0x4bf70)
- BaseVerifyUnicodeString (Ordinal: 65, Address: 0x63d70)
- BaseWriteErrorElevationRequiredEvent (Ordinal: 66, Address: 0x405d0)
- Basep8BitStringToDynamicUnicodeString (Ordinal: 67, Address: 0x21ad0)
- BasepAllocateActivationContextActivationBlock (Ordinal: 68, Address: 0x63dd0)
- BasepAnsiStringToDynamicUnicodeString (Ordinal: 69, Address: 0x63d10)
- BasepAppContainerEnvironmentExtension (Ordinal: 70, Address: 0x1e380)
- BasepAppXExtension (Ordinal: 71, Address: 0x27520)
- BasepCheckAppCompat (Ordinal: 72, Address: 0x1ff30)
- BasepCheckWebBladeHashes (Ordinal: 73, Address: 0x23e90)
- BasepCheckWinSaferRestrictions (Ordinal: 74, Address: 0x205a0)
- BasepConstructSxsCreateProcessMessage (Ordinal: 75, Address: 0x13380)
- BasepCopyEncryption (Ordinal: 76, Address: 0x41ac0)
- BasepFreeActivationContextActivationBlock (Ordinal: 77, Address: 0x63f40)
- BasepFreeAppCompatData (Ordinal: 78, Address: 0x23200)
- BasepGetAppCompatData (Ordinal: 79, Address: 0x11e70)
- BasepGetComputerNameFromNtPath (Ordinal: 80, Address: 0x21f40)
- BasepGetExeArchType (Ordinal: 81, Address: 0x20010)
- BasepIsProcessAllowed (Ordinal: 82, Address: 0x23460)
- BasepMapModuleHandle (Ordinal: 83, Address: 0xb890)
- BasepNotifyLoadStringResource (Ordinal: 84, Address: 0x18630)
- BasepPostSuccessAppXExtension (Ordinal: 85, Address: 0x28d80)
- BasepProcessInvalidImage (Ordinal: 86, Address: 0x286a0)
- BasepQueryAppCompat (Ordinal: 87, Address: 0x128c0)
- BasepReleaseAppXContext (Ordinal: 88, Address: 0x28d70)
- BasepReleaseSxsCreateProcessUtilityStruct (Ordinal: 89, Address: 0x161e0)
- BasepReportFault (Ordinal: 90, Address: 0x2220)
- BasepSetFileEncryptionCompression (Ordinal: 91, Address: 0x252b0)
- Beep (Ordinal: 92, Address: 0x3cf70)
- BeginUpdateResourceA (Ordinal: 93, Address: 0x569f0)
- BeginUpdateResourceW (Ordinal: 94, Address: 0x56a50)
- BindIoCompletionCallback (Ordinal: 95, Address: 0x2c7e0)
- BuildCommDCBA (Ordinal: 96, Address: 0x4e940)
- BuildCommDCBAndTimeoutsA (Ordinal: 97, Address: 0x4e970)
- BuildCommDCBAndTimeoutsW (Ordinal: 98, Address: 0x4e9a0)
- BuildCommDCBW (Ordinal: 99, Address: 0x4ea10)
- CallNamedPipeA (Ordinal: 100, Address: 0x434c0)
- CallNamedPipeW (Ordinal: 101, Address: 0x2dd10)
- CallbackMayRunLong (Ordinal: 102, Address: 0x29170)
- CancelDeviceWakeupRequest (Ordinal: 103, Address: 0x44500)
- CancelIo (Ordinal: 104, Address: 0x28ec0)
- CancelIoEx (Ordinal: 105, Address: 0x276a0)
- CancelSynchronousIo (Ordinal: 106, Address: 0x2ba0)
- CancelThreadpoolIo (Ordinal: 107, Address: 0x909bd)
- CancelTimerQueueTimer (Ordinal: 108, Address: 0x51000)
- CancelWaitableTimer (Ordinal: 109, Address: 0x2d690)
- CeipIsOptedIn (Ordinal: 110, Address: 0x90a14)
- ChangeTimerQueueTimer (Ordinal: 111, Address: 0x29160)
- CheckAllowDecryptedRemoteDestinationPolicy (Ordinal: 112, Address: 0x45910)
- CheckElevation (Ordinal: 113, Address: 0x1ee40)
- CheckElevationEnabled (Ordinal: 114, Address: 0x12be0)
- CheckForReadOnlyResource (Ordinal: 115, Address: 0x46b20)
- CheckForReadOnlyResourceFilter (Ordinal: 116, Address: 0x2b80)
- CheckNameLegalDOS8Dot3A (Ordinal: 117, Address: 0x43e80)
- CheckNameLegalDOS8Dot3W (Ordinal: 118, Address: 0x43f20)
- CheckRemoteDebuggerPresent (Ordinal: 119, Address: 0x2aa60)
- CheckTokenCapability (Ordinal: 120, Address: 0x45920)
- CheckTokenMembershipEx (Ordinal: 121, Address: 0x45930)
- ClearCommBreak (Ordinal: 122, Address: 0x2dd70)
- ClearCommError (Ordinal: 123, Address: 0x2dd80)
- CloseConsoleHandle (Ordinal: 124, Address: 0x66010)
- CloseHandle (Ordinal: 125, Address: 0x2d650)
- ClosePackageInfo (Ordinal: 126, Address: 0x90b90)
- ClosePrivateNamespace (Ordinal: 127, Address: 0x2af60)
- CloseProfileUserMapping (Ordinal: 128, Address: 0x2a3b0)
- CloseState (Ordinal: 129, Address: 0x90be5)
- CloseThreadpool (Ordinal: 130, Address: 0x90c0b)
- CloseThreadpoolCleanupGroup (Ordinal: 131, Address: 0x90c3b)
- CloseThreadpoolCleanupGroupMembers (Ordinal: 132, Address: 0x90c7a)
- CloseThreadpoolIo (Ordinal: 133, Address: 0x90caf)
- CloseThreadpoolTimer (Ordinal: 134, Address: 0x90ce0)
- CloseThreadpoolWait (Ordinal: 135, Address: 0x90d09)
- CloseThreadpoolWork (Ordinal: 136, Address: 0x90d31)
- CmdBatNotification (Ordinal: 137, Address: 0x26ed0)
- CommConfigDialogA (Ordinal: 138, Address: 0x49410)
- CommConfigDialogW (Ordinal: 139, Address: 0x494a0)
- CompareCalendarDates (Ordinal: 140, Address: 0x57300)
- CompareFileTime (Ordinal: 141, Address: 0x2d860)
- CompareStringA (Ordinal: 142, Address: 0x26740)
- CompareStringEx (Ordinal: 143, Address: 0x1dd30)
- CompareStringOrdinal (Ordinal: 144, Address: 0x20590)
- CompareStringW (Ordinal: 145, Address: 0x22ce0)
- ConnectNamedPipe (Ordinal: 146, Address: 0x28de0)
- ConsoleMenuControl (Ordinal: 147, Address: 0x660e0)
- ContinueDebugEvent (Ordinal: 148, Address: 0x45940)
- ConvertCalDateTimeToSystemTime (Ordinal: 149, Address: 0x573b0)
- ConvertDefaultLocale (Ordinal: 150, Address: 0x2a210)
- ConvertFiberToThread (Ordinal: 151, Address: 0x2dec0)
- ConvertNLSDayOfWeekToWin32DayOfWeek (Ordinal: 152, Address: 0x574a0)
- ConvertSystemTimeToCalDateTime (Ordinal: 153, Address: 0x19c70)
- ConvertThreadToFiber (Ordinal: 154, Address: 0x2ded0)
- ConvertThreadToFiberEx (Ordinal: 155, Address: 0x2dee0)
- CopyContext (Ordinal: 156, Address: 0x45950)
- CopyFile2 (Ordinal: 157, Address: 0x45960)
- CopyFileA (Ordinal: 158, Address: 0x41bf0)
- CopyFileExA (Ordinal: 159, Address: 0x41c80)
- CopyFileExW (Ordinal: 160, Address: 0x28940)
- CopyFileTransactedA (Ordinal: 161, Address: 0x41d30)
- CopyFileTransactedW (Ordinal: 162, Address: 0x2c3d0)
- CopyFileW (Ordinal: 163, Address: 0x2deb0)
- CopyLZFile (Ordinal: 164, Address: 0x3e7e0)
- CreateActCtxA (Ordinal: 165, Address: 0x2a6d0)
- CreateActCtxW (Ordinal: 166, Address: 0x28ea0)
- CreateActCtxWWorker (Ordinal: 167, Address: 0x18bd0)
- CreateBoundaryDescriptorA (Ordinal: 168, Address: 0x46c90)
- CreateBoundaryDescriptorW (Ordinal: 169, Address: 0x26e80)
- CreateConsoleScreenBuffer (Ordinal: 170, Address: 0x2e070)
- CreateDirectoryA (Ordinal: 171, Address: 0x2d870)
- CreateDirectoryExA (Ordinal: 172, Address: 0x3ebe0)
- CreateDirectoryExW (Ordinal: 173, Address: 0x45970)
- CreateDirectoryTransactedA (Ordinal: 174, Address: 0x3ec60)
- CreateDirectoryTransactedW (Ordinal: 175, Address: 0x2c740)
- CreateDirectoryW (Ordinal: 176, Address: 0x2d880)
- CreateEnclave (Ordinal: 177, Address: 0x2d610)
- CreateEventA (Ordinal: 178, Address: 0x2d6a0)
- CreateEventExA (Ordinal: 179, Address: 0x2d6b0)
- CreateEventExW (Ordinal: 180, Address: 0x2d6c0)
- CreateEventW (Ordinal: 181, Address: 0x2d6d0)
- CreateFiber (Ordinal: 182, Address: 0x2def0)
- CreateFiberEx (Ordinal: 183, Address: 0x2df00)
- CreateFile2 (Ordinal: 184, Address: 0x2d890)
- CreateFileA (Ordinal: 185, Address: 0x2d8a0)
- CreateFileMappingA (Ordinal: 186, Address: 0x21810)
- CreateFileMappingFromApp (Ordinal: 187, Address: 0x910e8)
- CreateFileMappingNumaA (Ordinal: 188, Address: 0x40c70)
- CreateFileMappingNumaW (Ordinal: 189, Address: 0x45980)
- CreateFileMappingW (Ordinal: 190, Address: 0x23af0)
- CreateFileTransactedA (Ordinal: 191, Address: 0x42020)
- CreateFileTransactedW (Ordinal: 192, Address: 0x2c640)
- CreateFileW (Ordinal: 193, Address: 0x2d8b0)
- CreateHardLinkA (Ordinal: 194, Address: 0x45990)
- CreateHardLinkTransactedA (Ordinal: 195, Address: 0x50660)
- CreateHardLinkTransactedW (Ordinal: 196, Address: 0x50700)
- CreateHardLinkW (Ordinal: 197, Address: 0x2c860)
- CreateIoCompletionPort (Ordinal: 198, Address: 0x24440)
- CreateJobObjectA (Ordinal: 199, Address: 0x50100)
- CreateJobObjectW (Ordinal: 200, Address: 0x23740)
- CreateJobSet (Ordinal: 201, Address: 0x50170)
- CreateMailslotA (Ordinal: 202, Address: 0x218d0)
- CreateMailslotW (Ordinal: 203, Address: 0x21940)
- CreateMemoryResourceNotification (Ordinal: 204, Address: 0x28c00)
- CreateMutexA (Ordinal: 205, Address: 0x2d6e0)
- CreateMutexExA (Ordinal: 206, Address: 0x2d6f0)
- CreateMutexExW (Ordinal: 207, Address: 0x2d700)
- CreateMutexW (Ordinal: 208, Address: 0x2d710)
- CreateNamedPipeA (Ordinal: 209, Address: 0x43550)
- CreateNamedPipeW (Ordinal: 210, Address: 0x27470)
- CreatePipe (Ordinal: 211, Address: 0x28db0)
- CreatePrivateNamespaceA (Ordinal: 212, Address: 0x46cf0)
- CreatePrivateNamespaceW (Ordinal: 213, Address: 0x28ca0)
- CreateProcessA (Ordinal: 214, Address: 0x23600)
- CreateProcessAsUserA (Ordinal: 215, Address: 0x459a0)
- CreateProcessAsUserW (Ordinal: 216, Address: 0x24c20)
- CreateProcessInternalA (Ordinal: 217, Address: 0x45a10)
- CreateProcessInternalW (Ordinal: 218, Address: 0x45a90)
- CreateProcessW (Ordinal: 219, Address: 0x23b00)
- CreateRemoteThread (Ordinal: 220, Address: 0x45b10)
- CreateRemoteThreadEx (Ordinal: 221, Address: 0x913a6)
- CreateSemaphoreA (Ordinal: 222, Address: 0x21740)
- CreateSemaphoreExA (Ordinal: 223, Address: 0x21770)
- CreateSemaphoreExW (Ordinal: 224, Address: 0x2d720)
- CreateSemaphoreW (Ordinal: 225, Address: 0x2d730)
- CreateSymbolicLinkA (Ordinal: 226, Address: 0x40ef0)
- CreateSymbolicLinkTransactedA (Ordinal: 227, Address: 0x40f90)
- CreateSymbolicLinkTransactedW (Ordinal: 228, Address: 0x41040)
- CreateSymbolicLinkW (Ordinal: 229, Address: 0x45b60)
- CreateTapePartition (Ordinal: 230, Address: 0x4f890)
- CreateThread (Ordinal: 231, Address: 0x216f0)
- CreateThreadpool (Ordinal: 232, Address: 0x28e50)
- CreateThreadpoolCleanupGroup (Ordinal: 233, Address: 0x29100)
- CreateThreadpoolIo (Ordinal: 234, Address: 0x2acb0)
- CreateThreadpoolTimer (Ordinal: 235, Address: 0x24d00)
- CreateThreadpoolWait (Ordinal: 236, Address: 0x28c50)
- CreateThreadpoolWork (Ordinal: 237, Address: 0x272c0)
- CreateTimerQueue (Ordinal: 238, Address: 0x2a1f0)
- CreateTimerQueueTimer (Ordinal: 239, Address: 0x235e0)
- CreateToolhelp32Snapshot (Ordinal: 240, Address: 0x2e800)
- CreateUmsCompletionList (Ordinal: 241, Address: 0x4e610)
- CreateUmsThreadContext (Ordinal: 242, Address: 0x4e640)
- CreateWaitableTimerA (Ordinal: 243, Address: 0x28600)
- CreateWaitableTimerExA (Ordinal: 244, Address: 0x28630)
- CreateWaitableTimerExW (Ordinal: 245, Address: 0x2d740)
- CreateWaitableTimerW (Ordinal: 246, Address: 0x290d0)
- CtrlRoutine (Ordinal: 247, Address: 0x91602)
- DeactivateActCtx (Ordinal: 248, Address: 0x27650)
- DeactivateActCtxWorker (Ordinal: 249, Address: 0x21000)
- DebugActiveProcess (Ordinal: 250, Address: 0x45b80)
- DebugActiveProcessStop (Ordinal: 251, Address: 0x45b70)
- DebugBreak (Ordinal: 252, Address: 0x45b90)
- DebugBreakProcess (Ordinal: 253, Address: 0x3eab0)
- DebugSetProcessKillOnExit (Ordinal: 254, Address: 0x3eae0)
- DecodePointer (Ordinal: 255, Address: 0x916b0)
- DecodeSystemPointer (Ordinal: 256, Address: 0x916db)
- DefineDosDeviceA (Ordinal: 257, Address: 0x402b0)
- DefineDosDeviceW (Ordinal: 258, Address: 0x2d8c0)
- DelayLoadFailureHook (Ordinal: 259, Address: 0x45ba0)
- DeleteAtom (Ordinal: 260, Address: 0xd170)
- DeleteBoundaryDescriptor (Ordinal: 261, Address: 0x26e70)
- DeleteCriticalSection (Ordinal: 262, Address: 0x91769)
- DeleteFiber (Ordinal: 263, Address: 0x2df10)
- DeleteFileA (Ordinal: 264, Address: 0x2d8d0)
- DeleteFileTransactedA (Ordinal: 265, Address: 0x410f0)
- DeleteFileTransactedW (Ordinal: 266, Address: 0x2c480)
- DeleteFileW (Ordinal: 267, Address: 0x2d8e0)
- DeleteProcThreadAttributeList (Ordinal: 268, Address: 0x917f6)
- DeleteSynchronizationBarrier (Ordinal: 269, Address: 0x45bb0)
- DeleteTimerQueue (Ordinal: 270, Address: 0x2a1c0)
- DeleteTimerQueueEx (Ordinal: 271, Address: 0x2a240)
- DeleteTimerQueueTimer (Ordinal: 272, Address: 0x24e50)
- DeleteUmsCompletionList (Ordinal: 273, Address: 0x4e670)
- DeleteUmsThreadContext (Ordinal: 274, Address: 0x4e6a0)
- DeleteVolumeMountPointA (Ordinal: 275, Address: 0x4d8f0)
- DeleteVolumeMountPointW (Ordinal: 276, Address: 0x63f90)
- DequeueUmsCompletionListItems (Ordinal: 277, Address: 0x4e6d0)
- DeviceIoControl (Ordinal: 278, Address: 0x1b2d0)
- DisableThreadLibraryCalls (Ordinal: 279, Address: 0x27440)
- DisableThreadProfiling (Ordinal: 280, Address: 0x51080)
- DisassociateCurrentThreadFromCallback (Ordinal: 281, Address: 0x91975)
- DiscardVirtualMemory (Ordinal: 282, Address: 0x919a7)
- DisconnectNamedPipe (Ordinal: 283, Address: 0x2aa80)
- DnsHostnameToComputerNameA (Ordinal: 284, Address: 0x3def0)
- DnsHostnameToComputerNameExW (Ordinal: 285, Address: 0x45bc0)
- DnsHostnameToComputerNameW (Ordinal: 286, Address: 0x23c60)
- DosDateTimeToFileTime (Ordinal: 287, Address: 0xd6f0)
- DosPathToSessionPathA (Ordinal: 288, Address: 0x454b0)
- DosPathToSessionPathW (Ordinal: 289, Address: 0x45680)
- DuplicateConsoleHandle (Ordinal: 290, Address: 0x66020)
- DuplicateEncryptionInfoFileExt (Ordinal: 291, Address: 0x420e0)
- DuplicateHandle (Ordinal: 292, Address: 0x2d660)
- EnableThreadProfiling (Ordinal: 293, Address: 0x510b0)
- EncodePointer (Ordinal: 294, Address: 0x91aed)
- EncodeSystemPointer (Ordinal: 295, Address: 0x91b18)
- EndUpdateResourceA (Ordinal: 296, Address: 0x56c60)
- EndUpdateResourceW (Ordinal: 297, Address: 0x56c70)
- EnterCriticalSection (Ordinal: 298, Address: 0x91b70)
- EnterSynchronizationBarrier (Ordinal: 299, Address: 0x45bd0)
- EnterUmsSchedulingMode (Ordinal: 300, Address: 0x4e720)
- EnumCalendarInfoA (Ordinal: 301, Address: 0x57f10)
- EnumCalendarInfoExA (Ordinal: 302, Address: 0x57fa0)
- EnumCalendarInfoExEx (Ordinal: 303, Address: 0x26700)
- EnumCalendarInfoExW (Ordinal: 304, Address: 0x45be0)
- EnumCalendarInfoW (Ordinal: 305, Address: 0x45bf0)
- EnumDateFormatsA (Ordinal: 306, Address: 0x58030)
- EnumDateFormatsExA (Ordinal: 307, Address: 0x58090)
- EnumDateFormatsExEx (Ordinal: 308, Address: 0x45c00)
- EnumDateFormatsExW (Ordinal: 309, Address: 0x45c10)
- EnumDateFormatsW (Ordinal: 310, Address: 0x45c20)
- EnumLanguageGroupLocalesA (Ordinal: 311, Address: 0x580f0)
- EnumLanguageGroupLocalesW (Ordinal: 312, Address: 0x45c30)
- EnumResourceLanguagesA (Ordinal: 313, Address: 0x43110)
- EnumResourceLanguagesExA (Ordinal: 314, Address: 0x45c40)
- EnumResourceLanguagesExW (Ordinal: 315, Address: 0x45c60)
- EnumResourceLanguagesW (Ordinal: 316, Address: 0x43140)
- EnumResourceNamesA (Ordinal: 317, Address: 0x43170)
- EnumResourceNamesExA (Ordinal: 318, Address: 0x45c80)
- EnumResourceNamesExW (Ordinal: 319, Address: 0x45ca0)
- EnumResourceNamesW (Ordinal: 320, Address: 0x2c810)
- EnumResourceTypesA (Ordinal: 321, Address: 0x431a0)
- EnumResourceTypesExA (Ordinal: 322, Address: 0x45cc0)
- EnumResourceTypesExW (Ordinal: 323, Address: 0x45ce0)
- EnumResourceTypesW (Ordinal: 324, Address: 0x431c0)
- EnumSystemCodePagesA (Ordinal: 325, Address: 0x58110)
- EnumSystemCodePagesW (Ordinal: 326, Address: 0x45d00)
- EnumSystemFirmwareTables (Ordinal: 327, Address: 0x42c10)
- EnumSystemGeoID (Ordinal: 328, Address: 0x610f0)
- EnumSystemLanguageGroupsA (Ordinal: 329, Address: 0x58120)
- EnumSystemLanguageGroupsW (Ordinal: 330, Address: 0x2b180)
- EnumSystemLocalesA (Ordinal: 331, Address: 0x45d10)
- EnumSystemLocalesEx (Ordinal: 332, Address: 0x45d20)
- EnumSystemLocalesW (Ordinal: 333, Address: 0x45d30)
- EnumTimeFormatsA (Ordinal: 334, Address: 0x58130)
- EnumTimeFormatsEx (Ordinal: 335, Address: 0x28df0)
- EnumTimeFormatsW (Ordinal: 336, Address: 0x45d40)
- EnumUILanguagesA (Ordinal: 337, Address: 0x581a0)
- EnumUILanguagesW (Ordinal: 338, Address: 0x2b170)
- EnumerateLocalComputerNamesA (Ordinal: 339, Address: 0x3dfd0)
- EnumerateLocalComputerNamesW (Ordinal: 340, Address: 0x3e0e0)
- EraseTape (Ordinal: 341, Address: 0x4f8f0)
- EscapeCommFunction (Ordinal: 342, Address: 0x2dd90)
- ExecuteUmsThread (Ordinal: 343, Address: 0x4e750)
- ExitProcess (Ordinal: 344, Address: 0x24d80)
- ExitThread (Ordinal: 345, Address: 0x91f48)
- ExitVDM (Ordinal: 346, Address: 0x4c070)
- ExpandEnvironmentStringsA (Ordinal: 347, Address: 0x2b150)
- ExpandEnvironmentStringsW (Ordinal: 348, Address: 0x23530)
- ExpungeConsoleCommandHistoryA (Ordinal: 349, Address: 0x657b0)
- ExpungeConsoleCommandHistoryW (Ordinal: 350, Address: 0x65830)
- FatalAppExitA (Ordinal: 351, Address: 0x45d50)
- FatalAppExitW (Ordinal: 352, Address: 0x45d60)
- FatalExit (Ordinal: 353, Address: 0x24d80)
- FileTimeToDosDateTime (Ordinal: 354, Address: 0xd940)
- FileTimeToLocalFileTime (Ordinal: 355, Address: 0x2d8f0)
- FileTimeToSystemTime (Ordinal: 356, Address: 0x2dd30)
- FillConsoleOutputAttribute (Ordinal: 357, Address: 0x2e080)
- FillConsoleOutputCharacterA (Ordinal: 358, Address: 0x2e090)
- FillConsoleOutputCharacterW (Ordinal: 359, Address: 0x2e0a0)
- FindActCtxSectionGuid (Ordinal: 360, Address: 0x216e0)
- FindActCtxSectionGuidWorker (Ordinal: 361, Address: 0xda00)
- FindActCtxSectionStringA (Ordinal: 362, Address: 0x50c30)
- FindActCtxSectionStringW (Ordinal: 363, Address: 0x28d40)
- FindActCtxSectionStringWWorker (Ordinal: 364, Address: 0xd220)
- FindAtomA (Ordinal: 365, Address: 0xd200)
- FindAtomW (Ordinal: 366, Address: 0xd7c0)
- FindClose (Ordinal: 367, Address: 0x2d900)
- FindCloseChangeNotification (Ordinal: 368, Address: 0x2d910)
- FindFirstChangeNotificationA (Ordinal: 369, Address: 0x2d920)
- FindFirstChangeNotificationW (Ordinal: 370, Address: 0x2d930)
- FindFirstFileA (Ordinal: 371, Address: 0x2d940)
- FindFirstFileExA (Ordinal: 372, Address: 0x2d950)
- FindFirstFileExW (Ordinal: 373, Address: 0x2d960)
- FindFirstFileNameTransactedW (Ordinal: 374, Address: 0x40620)
- FindFirstFileNameW (Ordinal: 375, Address: 0x2d970)
- FindFirstFileTransactedA (Ordinal: 376, Address: 0x406e0)
- FindFirstFileTransactedW (Ordinal: 377, Address: 0x407b0)
- FindFirstFileW (Ordinal: 378, Address: 0x2d980)
- FindFirstStreamTransactedW (Ordinal: 379, Address: 0x40880)
- FindFirstStreamW (Ordinal: 380, Address: 0x92259)
- FindFirstVolumeA (Ordinal: 381, Address: 0x4d930)
- FindFirstVolumeMountPointA (Ordinal: 382, Address: 0x4dab0)
- FindFirstVolumeMountPointW (Ordinal: 383, Address: 0x4dc80)
- FindFirstVolumeW (Ordinal: 384, Address: 0x21180)
- FindNLSString (Ordinal: 385, Address: 0x45d70)
- FindNLSStringEx (Ordinal: 386, Address: 0x1b740)
- FindNextChangeNotification (Ordinal: 387, Address: 0x2d990)
- FindNextFileA (Ordinal: 388, Address: 0x2d9a0)
- FindNextFileNameW (Ordinal: 389, Address: 0x2d9b0)
- FindNextFileW (Ordinal: 390, Address: 0x2d9c0)
- FindNextStreamW (Ordinal: 391, Address: 0x92355)
- FindNextVolumeA (Ordinal: 392, Address: 0x4dea0)
- FindNextVolumeMountPointA (Ordinal: 393, Address: 0x4e010)
- FindNextVolumeMountPointW (Ordinal: 394, Address: 0x4e190)
- FindNextVolumeW (Ordinal: 395, Address: 0x21320)
- FindPackagesByPackageFamily (Ordinal: 396, Address: 0x923f1)
- FindResourceA (Ordinal: 397, Address: 0xb6b0)
- FindResourceExA (Ordinal: 398, Address: 0xb6d0)
- FindResourceExW (Ordinal: 399, Address: 0x24580)
- FindResourceW (Ordinal: 400, Address: 0x269f0)
- FindStringOrdinal (Ordinal: 401, Address: 0x45d80)
- FindVolumeClose (Ordinal: 402, Address: 0x28c20)
- FindVolumeMountPointClose (Ordinal: 403, Address: 0x4e1a0)
- FlsAlloc (Ordinal: 404, Address: 0x26cd0)
- FlsFree (Ordinal: 405, Address: 0x27660)
- FlsGetValue (Ordinal: 406, Address: 0x1d6e0)
- FlsSetValue (Ordinal: 407, Address: 0x23ae0)
- FlushConsoleInputBuffer (Ordinal: 408, Address: 0x2e0b0)
- FlushFileBuffers (Ordinal: 409, Address: 0x2d9d0)
- FlushInstructionCache (Ordinal: 410, Address: 0x20c70)
- FlushProcessWriteBuffers (Ordinal: 411, Address: 0x92511)
- FlushViewOfFile (Ordinal: 412, Address: 0x29150)
- FoldStringA (Ordinal: 413, Address: 0x581b0)
- FoldStringW (Ordinal: 414, Address: 0x45d90)
- FormatApplicationUserModelId (Ordinal: 415, Address: 0x92577)
- FormatMessageA (Ordinal: 416, Address: 0x2a9c0)
- FormatMessageW (Ordinal: 417, Address: 0x245c0)
- FreeConsole (Ordinal: 418, Address: 0x2e0c0)
- FreeEnvironmentStringsA (Ordinal: 419, Address: 0x26cf0)
- FreeEnvironmentStringsW (Ordinal: 420, Address: 0x267a0)
- FreeLibrary (Ordinal: 421, Address: 0x24810)
- FreeLibraryAndExitThread (Ordinal: 422, Address: 0x27220)
- FreeLibraryWhenCallbackReturns (Ordinal: 423, Address: 0x9263d)
- FreeMemoryJobObject (Ordinal: 424, Address: 0x501a0)
- FreeResource (Ordinal: 425, Address: 0x28ee0)
- FreeUserPhysicalPages (Ordinal: 426, Address: 0x45da0)
- GenerateConsoleCtrlEvent (Ordinal: 427, Address: 0x2e0d0)
- GetACP (Ordinal: 428, Address: 0x1d720)
- GetActiveProcessorCount (Ordinal: 429, Address: 0x26000)
- GetActiveProcessorGroupCount (Ordinal: 430, Address: 0x25fa0)
- GetAppContainerAce (Ordinal: 431, Address: 0x45db0)
- GetAppContainerNamedObjectPath (Ordinal: 432, Address: 0x12c0)
- GetApplicationRecoveryCallback (Ordinal: 433, Address: 0x45dc0)
- GetApplicationRecoveryCallbackWorker (Ordinal: 434, Address: 0x26200)
- GetApplicationRestartSettings (Ordinal: 435, Address: 0x45dd0)
- GetApplicationRestartSettingsWorker (Ordinal: 436, Address: 0x26150)
- GetApplicationUserModelId (Ordinal: 437, Address: 0x927c1)
- GetAtomNameA (Ordinal: 438, Address: 0x3edf0)
- GetAtomNameW (Ordinal: 439, Address: 0xce30)
- GetBinaryType (Ordinal: 440, Address: 0x4c100)
- GetBinaryTypeA (Ordinal: 441, Address: 0x4c100)
- GetBinaryTypeW (Ordinal: 442, Address: 0x4c150)
- GetCPInfo (Ordinal: 443, Address: 0x231e0)
- GetCPInfoExA (Ordinal: 444, Address: 0x58420)
- GetCPInfoExW (Ordinal: 445, Address: 0x45de0)
- GetCachedSigningLevel (Ordinal: 446, Address: 0x45df0)
- GetCalendarDateFormat (Ordinal: 447, Address: 0x574d0)
- GetCalendarDateFormatEx (Ordinal: 448, Address: 0x194a0)
- GetCalendarDaysInMonth (Ordinal: 449, Address: 0x19d80)
- GetCalendarDifferenceInDays (Ordinal: 450, Address: 0x57780)
- GetCalendarInfoA (Ordinal: 451, Address: 0x584f0)
- GetCalendarInfoEx (Ordinal: 452, Address: 0x2dd40)
- GetCalendarInfoW (Ordinal: 453, Address: 0x2dd50)
- GetCalendarMonthsInYear (Ordinal: 454, Address: 0x578c0)
- GetCalendarSupportedDateRange (Ordinal: 455, Address: 0x19f80)
- GetCalendarWeekNumber (Ordinal: 456, Address: 0x57990)
- GetComPlusPackageInstallStatus (Ordinal: 457, Address: 0x50cd0)
- GetCommConfig (Ordinal: 458, Address: 0x2dda0)
- GetCommMask (Ordinal: 459, Address: 0x2ddb0)
- GetCommModemStatus (Ordinal: 460, Address: 0x2ddc0)
- GetCommProperties (Ordinal: 461, Address: 0x2ddd0)
- GetCommState (Ordinal: 462, Address: 0x2dde0)
- GetCommTimeouts (Ordinal: 463, Address: 0x2ddf0)
- GetCommandLineA (Ordinal: 464, Address: 0x26d00)
- GetCommandLineW (Ordinal: 465, Address: 0x26a00)
- GetCompressedFileSizeA (Ordinal: 466, Address: 0x45e00)
- GetCompressedFileSizeTransactedA (Ordinal: 467, Address: 0x41140)
- GetCompressedFileSizeTransactedW (Ordinal: 468, Address: 0x411a0)
- GetCompressedFileSizeW (Ordinal: 469, Address: 0x45e10)
- GetComputerNameA (Ordinal: 470, Address: 0x220c0)
- GetComputerNameExA (Ordinal: 471, Address: 0x2c8a0)
- GetComputerNameExW (Ordinal: 472, Address: 0x28970)
- GetComputerNameW (Ordinal: 473, Address: 0x22230)
- GetConsoleAliasA (Ordinal: 474, Address: 0x65840)
- GetConsoleAliasExesA (Ordinal: 475, Address: 0x65880)
- GetConsoleAliasExesLengthA (Ordinal: 476, Address: 0x65910)
- GetConsoleAliasExesLengthW (Ordinal: 477, Address: 0x65970)
- GetConsoleAliasExesW (Ordinal: 478, Address: 0x65980)
- GetConsoleAliasW (Ordinal: 479, Address: 0x65a80)
- GetConsoleAliasesA (Ordinal: 480, Address: 0x65ad0)
- GetConsoleAliasesLengthA (Ordinal: 481, Address: 0x65b80)
- GetConsoleAliasesLengthW (Ordinal: 482, Address: 0x65c20)
- GetConsoleAliasesW (Ordinal: 483, Address: 0x65c30)
- GetConsoleCP (Ordinal: 484, Address: 0x2df90)
- GetConsoleCharType (Ordinal: 485, Address: 0x665e0)
- GetConsoleCommandHistoryA (Ordinal: 486, Address: 0x65c40)
- GetConsoleCommandHistoryLengthA (Ordinal: 487, Address: 0x65d00)
- GetConsoleCommandHistoryLengthW (Ordinal: 488, Address: 0x65da0)
- GetConsoleCommandHistoryW (Ordinal: 489, Address: 0x65db0)
- GetConsoleCursorInfo (Ordinal: 490, Address: 0x2e0e0)
- GetConsoleCursorMode (Ordinal: 491, Address: 0x66640)
- GetConsoleDisplayMode (Ordinal: 492, Address: 0x66140)
- GetConsoleFontInfo (Ordinal: 493, Address: 0x66950)
- GetConsoleFontSize (Ordinal: 494, Address: 0x669f0)
- GetConsoleHardwareState (Ordinal: 495, Address: 0x66190)
- GetConsoleHistoryInfo (Ordinal: 496, Address: 0x66a40)
- GetConsoleInputExeNameA (Ordinal: 497, Address: 0x92cb4)
- GetConsoleInputExeNameW (Ordinal: 498, Address: 0x92cef)
- GetConsoleInputWaitHandle (Ordinal: 499, Address: 0x66070)
- GetConsoleKeyboardLayoutNameA (Ordinal: 500, Address: 0x66ac0)
- GetConsoleKeyboardLayoutNameW (Ordinal: 501, Address: 0x66ae0)
- GetConsoleMode (Ordinal: 502, Address: 0x2dfa0)
- GetConsoleNlsMode (Ordinal: 503, Address: 0x666b0)
- GetConsoleOriginalTitleA (Ordinal: 504, Address: 0x65dc0)
- GetConsoleOriginalTitleW (Ordinal: 505, Address: 0x65de0)
- GetConsoleOutputCP (Ordinal: 506, Address: 0x2dfb0)
- GetConsoleProcessList (Ordinal: 507, Address: 0x66b90)
- GetConsoleScreenBufferInfo (Ordinal: 508, Address: 0x2e0f0)
- GetConsoleScreenBufferInfoEx (Ordinal: 509, Address: 0x2e100)
- GetConsoleSelectionInfo (Ordinal: 510, Address: 0x66c20)
- GetConsoleTitleA (Ordinal: 511, Address: 0x65e00)
- GetConsoleTitleW (Ordinal: 512, Address: 0x2e110)
- GetConsoleWindow (Ordinal: 513, Address: 0x26840)
- GetCurrencyFormatA (Ordinal: 514, Address: 0x58720)
- GetCurrencyFormatEx (Ordinal: 515, Address: 0x45e20)
- GetCurrencyFormatW (Ordinal: 516, Address: 0x45e30)
- GetCurrentActCtx (Ordinal: 517, Address: 0x2a9b0)
- GetCurrentActCtxWorker (Ordinal: 518, Address: 0x232b0)
- GetCurrentApplicationUserModelId (Ordinal: 519, Address: 0x92eea)
- GetCurrentConsoleFont (Ordinal: 520, Address: 0x66c80)
- GetCurrentConsoleFontEx (Ordinal: 521, Address: 0x267c0)
- GetCurrentDirectoryA (Ordinal: 522, Address: 0x28eb0)
- GetCurrentDirectoryW (Ordinal: 523, Address: 0x26e90)
- GetCurrentPackageFamilyName (Ordinal: 524, Address: 0x92f8a)
- GetCurrentPackageFullName (Ordinal: 525, Address: 0x92fcb)
- GetCurrentPackageId (Ordinal: 526, Address: 0x93004)
- GetCurrentPackageInfo (Ordinal: 527, Address: 0x93039)
- GetCurrentPackagePath (Ordinal: 528, Address: 0x93070)
- GetCurrentProcess (Ordinal: 529, Address: 0x1b7c0)
- GetCurrentProcessId (Ordinal: 530, Address: 0x1b4a0)
- GetCurrentProcessorNumber (Ordinal: 531, Address: 0x930d1)
- GetCurrentProcessorNumberEx (Ordinal: 532, Address: 0x93110)
- GetCurrentThread (Ordinal: 533, Address: 0x1b7a0)
- GetCurrentThreadId (Ordinal: 534, Address: 0x1b460)
- GetCurrentThreadStackLimits (Ordinal: 535, Address: 0x93175)
- GetCurrentUmsThread (Ordinal: 536, Address: 0x4e780)
- GetDateFormatA (Ordinal: 537, Address: 0x2a460)
- GetDateFormatAWorker (Ordinal: 538, Address: 0x2aaa0)
- GetDateFormatEx (Ordinal: 539, Address: 0x45e40)
- GetDateFormatW (Ordinal: 540, Address: 0x27180)
- GetDateFormatWWorker (Ordinal: 541, Address: 0x16600)
- GetDefaultCommConfigA (Ordinal: 542, Address: 0x496d0)
- GetDefaultCommConfigW (Ordinal: 543, Address: 0x49760)
- GetDevicePowerState (Ordinal: 544, Address: 0x44490)
- GetDiskFreeSpaceA (Ordinal: 545, Address: 0x2d9e0)
- GetDiskFreeSpaceExA (Ordinal: 546, Address: 0x2d9f0)
- GetDiskFreeSpaceExW (Ordinal: 547, Address: 0x2da00)
- GetDiskFreeSpaceW (Ordinal: 548, Address: 0x2da10)
- GetDllDirectoryA (Ordinal: 549, Address: 0x431e0)
- GetDllDirectoryW (Ordinal: 550, Address: 0x2a900)
- GetDriveTypeA (Ordinal: 551, Address: 0x2da20)
- GetDriveTypeW (Ordinal: 552, Address: 0x2da30)
- GetDurationFormat (Ordinal: 553, Address: 0x592e0)
- GetDurationFormatEx (Ordinal: 554, Address: 0x45e50)
- GetDynamicTimeZoneInformation (Ordinal: 555, Address: 0x2a020)
- GetEnabledXStateFeatures (Ordinal: 556, Address: 0x2a340)
- GetEncryptedFileVersionExt (Ordinal: 557, Address: 0x421c0)
- GetEnvironmentStrings (Ordinal: 558, Address: 0x26ce0)
- GetEnvironmentStringsA (Ordinal: 559, Address: 0x2dd60)
- GetEnvironmentStringsW (Ordinal: 560, Address: 0x26790)
- GetEnvironmentVariableA (Ordinal: 561, Address: 0x24880)
- GetEnvironmentVariableW (Ordinal: 562, Address: 0x235f0)
- GetEraNameCountedString (Ordinal: 563, Address: 0x45e60)
- GetErrorMode (Ordinal: 564, Address: 0x2a3e0)
- GetExitCodeProcess (Ordinal: 565, Address: 0x23c20)
- GetExitCodeThread (Ordinal: 566, Address: 0x267b0)
- GetExpandedNameA (Ordinal: 567, Address: 0x488c0)
- GetExpandedNameW (Ordinal: 568, Address: 0x489c0)
- GetFileAttributesA (Ordinal: 569, Address: 0x2da40)
- GetFileAttributesExA (Ordinal: 570, Address: 0x2da50)
- GetFileAttributesExW (Ordinal: 571, Address: 0x2da60)
- GetFileAttributesTransactedA (Ordinal: 572, Address: 0x41240)
- GetFileAttributesTransactedW (Ordinal: 573, Address: 0x412a0)
- GetFileAttributesW (Ordinal: 574, Address: 0x2da70)
- GetFileBandwidthReservation (Ordinal: 575, Address: 0x40940)
- GetFileInformationByHandle (Ordinal: 576, Address: 0x2da80)
- GetFileInformationByHandleEx (Ordinal: 577, Address: 0x2a030)
- GetFileMUIInfo (Ordinal: 578, Address: 0x45e70)
- GetFileMUIPath (Ordinal: 579, Address: 0x27560)
- GetFileSize (Ordinal: 580, Address: 0x2da90)
- GetFileSizeEx (Ordinal: 581, Address: 0x2daa0)
- GetFileTime (Ordinal: 582, Address: 0x2dab0)
- GetFileType (Ordinal: 583, Address: 0x2dac0)
- GetFinalPathNameByHandleA (Ordinal: 584, Address: 0x2dad0)
- GetFinalPathNameByHandleW (Ordinal: 585, Address: 0x2dae0)
- GetFirmwareEnvironmentVariableA (Ordinal: 586, Address: 0x428d0)
- GetFirmwareEnvironmentVariableExA (Ordinal: 587, Address: 0x428f0)
- GetFirmwareEnvironmentVariableExW (Ordinal: 588, Address: 0x2ae90)
- GetFirmwareEnvironmentVariableW (Ordinal: 589, Address: 0x2ae70)
- GetFirmwareType (Ordinal: 590, Address: 0x3d000)
- GetFullPathNameA (Ordinal: 591, Address: 0x2daf0)
- GetFullPathNameTransactedA (Ordinal: 592, Address: 0x3e8f0)
- GetFullPathNameTransactedW (Ordinal: 593, Address: 0x3e9b0)
- GetFullPathNameW (Ordinal: 594, Address: 0x2db00)
- GetGeoInfoA (Ordinal: 595, Address: 0x58ad0)
- GetGeoInfoW (Ordinal: 596, Address: 0x1a490)
- GetHandleInformation (Ordinal: 597, Address: 0x2d670)
- GetLargePageMinimum (Ordinal: 598, Address: 0x45e80)
- GetLargestConsoleWindowSize (Ordinal: 599, Address: 0x2e120)
- GetLastError (Ordinal: 600, Address: 0x1b710)
- GetLocalTime (Ordinal: 601, Address: 0x24830)
- GetLocaleInfoA (Ordinal: 602, Address: 0x23700)
- GetLocaleInfoEx (Ordinal: 603, Address: 0x24e60)
- GetLocaleInfoW (Ordinal: 604, Address: 0x272a0)
- GetLogicalDriveStringsA (Ordinal: 605, Address: 0x1dbb0)
- GetLogicalDriveStringsW (Ordinal: 606, Address: 0x2db10)
- GetLogicalDrives (Ordinal: 607, Address: 0x1dc70)
- GetLogicalProcessorInformation (Ordinal: 608, Address: 0x27240)
- GetLogicalProcessorInformationEx (Ordinal: 609, Address: 0x937b9)
- GetLongPathNameA (Ordinal: 610, Address: 0x64c80)
- GetLongPathNameTransactedA (Ordinal: 611, Address: 0x4c480)
- GetLongPathNameTransactedW (Ordinal: 612, Address: 0x4c530)
- GetLongPathNameW (Ordinal: 613, Address: 0x1aac0)
- GetMailslotInfo (Ordinal: 614, Address: 0x43010)
- GetMaximumProcessorCount (Ordinal: 615, Address: 0x44740)
- GetMaximumProcessorGroupCount (Ordinal: 616, Address: 0x2afa0)
- GetMemoryErrorHandlingCapabilities (Ordinal: 617, Address: 0x45e90)
- GetModuleFileNameA (Ordinal: 618, Address: 0x26e30)
- GetModuleFileNameW (Ordinal: 619, Address: 0x24840)
- GetModuleHandleA (Ordinal: 620, Address: 0x24c90)
- GetModuleHandleExA (Ordinal: 621, Address: 0x27210)
- GetModuleHandleExW (Ordinal: 622, Address: 0x26b90)
- GetModuleHandleW (Ordinal: 623, Address: 0x23d40)
- GetNLSVersion (Ordinal: 624, Address: 0x2b160)
- GetNLSVersionEx (Ordinal: 625, Address: 0x45ea0)
- GetNamedPipeAttribute (Ordinal: 626, Address: 0x45eb0)
- GetNamedPipeClientComputerNameA (Ordinal: 627, Address: 0x435f0)
- GetNamedPipeClientComputerNameW (Ordinal: 628, Address: 0x45ec0)
- GetNamedPipeClientProcessId (Ordinal: 629, Address: 0x2bb0)
- GetNamedPipeClientSessionId (Ordinal: 630, Address: 0x43720)
- GetNamedPipeHandleStateA (Ordinal: 631, Address: 0x43760)
- GetNamedPipeHandleStateW (Ordinal: 632, Address: 0x45ed0)
- GetNamedPipeInfo (Ordinal: 633, Address: 0x93a18)
- GetNamedPipeServerProcessId (Ordinal: 634, Address: 0x438c0)
- GetNamedPipeServerSessionId (Ordinal: 635, Address: 0x43900)
- GetNativeSystemInfo (Ordinal: 636, Address: 0x28a00)
- GetNextUmsListItem (Ordinal: 637, Address: 0x4e7b0)
- GetNextVDMCommand (Ordinal: 638, Address: 0x4c5e0)
- GetNumaAvailableMemoryNode (Ordinal: 639, Address: 0x43b60)
- GetNumaAvailableMemoryNodeEx (Ordinal: 640, Address: 0x2c520)
- GetNumaHighestNodeNumber (Ordinal: 641, Address: 0x28cc0)
- GetNumaNodeNumberFromHandle (Ordinal: 642, Address: 0x43b70)
- GetNumaNodeProcessorMask (Ordinal: 643, Address: 0x43bc0)
- GetNumaNodeProcessorMaskEx (Ordinal: 644, Address: 0x2c850)
- GetNumaProcessorNode (Ordinal: 645, Address: 0x2b460)
- GetNumaProcessorNodeEx (Ordinal: 646, Address: 0x2b4b0)
- GetNumaProximityNode (Ordinal: 647, Address: 0x43c40)
- GetNumaProximityNodeEx (Ordinal: 648, Address: 0x43c70)
- GetNumberFormatA (Ordinal: 649, Address: 0x228d0)
- GetNumberFormatEx (Ordinal: 650, Address: 0x45ee0)
- GetNumberFormatW (Ordinal: 651, Address: 0x1010)
- GetNumberOfConsoleFonts (Ordinal: 652, Address: 0x66cf0)
- GetNumberOfConsoleInputEvents (Ordinal: 653, Address: 0x2dfc0)
- GetNumberOfConsoleMouseButtons (Ordinal: 654, Address: 0x66d40)
- GetOEMCP (Ordinal: 655, Address: 0x2c840)
- GetOverlappedResult (Ordinal: 656, Address: 0x23290)
- GetOverlappedResultEx (Ordinal: 657, Address: 0x93c70)
- GetPackageApplicationIds (Ordinal: 658, Address: 0x93cb9)
- GetPackageFamilyName (Ordinal: 659, Address: 0x93cf2)
- GetPackageFullName (Ordinal: 660, Address: 0x93d25)
- GetPackageId (Ordinal: 661, Address: 0x93d50)
- GetPackageInfo (Ordinal: 662, Address: 0x93d77)
- GetPackagePath (Ordinal: 663, Address: 0x93da0)
- GetPackagePathByFullName (Ordinal: 664, Address: 0x93dd3)
- GetPackagesByPackageFamily (Ordinal: 665, Address: 0x93e12)
- GetPhysicallyInstalledSystemMemory (Ordinal: 666, Address: 0x2a320)
- GetPriorityClass (Ordinal: 667, Address: 0x28d10)
- GetPrivateProfileIntA (Ordinal: 668, Address: 0xb220)
- GetPrivateProfileIntW (Ordinal: 669, Address: 0xc120)
- GetPrivateProfileSectionA (Ordinal: 670, Address: 0x2b1b0)
- GetPrivateProfileSectionNamesA (Ordinal: 671, Address: 0x3faf0)
- GetPrivateProfileSectionNamesW (Ordinal: 672, Address: 0x3fb20)
- GetPrivateProfileSectionW (Ordinal: 673, Address: 0xb000)
- GetPrivateProfileStringA (Ordinal: 674, Address: 0xb2e0)
- GetPrivateProfileStringW (Ordinal: 675, Address: 0xe1d0)
- GetPrivateProfileStructA (Ordinal: 676, Address: 0x3fb50)
- GetPrivateProfileStructW (Ordinal: 677, Address: 0x3fcd0)
- GetProcAddress (Ordinal: 678, Address: 0x20b80)
- GetProcessAffinityMask (Ordinal: 679, Address: 0x21660)
- GetProcessDEPPolicy (Ordinal: 680, Address: 0x447f0)
- GetProcessDefaultCpuSets (Ordinal: 681, Address: 0x93fc1)
- GetProcessGroupAffinity (Ordinal: 682, Address: 0x2a6c0)
- GetProcessHandleCount (Ordinal: 683, Address: 0x45ef0)
- GetProcessHeap (Ordinal: 684, Address: 0x1d4f0)
- GetProcessHeaps (Ordinal: 685, Address: 0x45f00)
- GetProcessId (Ordinal: 686, Address: 0x23d50)
- GetProcessIdOfThread (Ordinal: 687, Address: 0x2a230)
- GetProcessInformation (Ordinal: 688, Address: 0x2d5d0)
- GetProcessIoCounters (Ordinal: 689, Address: 0x27570)
- GetProcessMitigationPolicy (Ordinal: 690, Address: 0x940b5)
- GetProcessPreferredUILanguages (Ordinal: 691, Address: 0x45f10)
- GetProcessPriorityBoost (Ordinal: 692, Address: 0x45f20)
- GetProcessShutdownParameters (Ordinal: 693, Address: 0x45f30)
- GetProcessTimes (Ordinal: 694, Address: 0x1d7a0)
- GetProcessVersion (Ordinal: 695, Address: 0x2a360)
- GetProcessWorkingSetSize (Ordinal: 696, Address: 0x50fb0)
- GetProcessWorkingSetSizeEx (Ordinal: 697, Address: 0x45f40)
- GetProcessorSystemCycleTime (Ordinal: 698, Address: 0x941bc)
- GetProductInfo (Ordinal: 699, Address: 0x27670)
- GetProfileIntA (Ordinal: 700, Address: 0xb210)
- GetProfileIntW (Ordinal: 701, Address: 0xb960)
- GetProfileSectionA (Ordinal: 702, Address: 0x3fe80)
- GetProfileSectionW (Ordinal: 703, Address: 0xafe0)
- GetProfileStringA (Ordinal: 704, Address: 0x3fe90)
- GetProfileStringW (Ordinal: 705, Address: 0x3fec0)
- GetQueuedCompletionStatus (Ordinal: 706, Address: 0x1d5c0)
- GetQueuedCompletionStatusEx (Ordinal: 707, Address: 0x1020)
- GetShortPathNameA (Ordinal: 708, Address: 0x4cf40)
- GetShortPathNameW (Ordinal: 709, Address: 0x1a630)
- GetStagedPackagePathByFullName (Ordinal: 710, Address: 0x942e7)
- GetStartupInfoA (Ordinal: 711, Address: 0x25d70)
- GetStartupInfoW (Ordinal: 712, Address: 0x24c00)
- GetStateFolder (Ordinal: 713, Address: 0x94340)
- GetStdHandle (Ordinal: 714, Address: 0x23e80)
- GetStringScripts (Ordinal: 715, Address: 0x45f50)
- GetStringTypeA (Ordinal: 716, Address: 0x27200)
- GetStringTypeExA (Ordinal: 717, Address: 0x27200)
- GetStringTypeExW (Ordinal: 718, Address: 0x2ac00)
- GetStringTypeW (Ordinal: 719, Address: 0x24bf0)
- GetSystemAppDataKey (Ordinal: 720, Address: 0x943cc)
- GetSystemCpuSetInformation (Ordinal: 721, Address: 0x94406)
- GetSystemDEPPolicy (Ordinal: 722, Address: 0x44840)
- GetSystemDefaultLCID (Ordinal: 723, Address: 0x23aa0)
- GetSystemDefaultLangID (Ordinal: 724, Address: 0x28d90)
- GetSystemDefaultLocaleName (Ordinal: 725, Address: 0x45f60)
- GetSystemDefaultUILanguage (Ordinal: 726, Address: 0x27690)
- GetSystemDirectoryA (Ordinal: 727, Address: 0x23540)
- GetSystemDirectoryW (Ordinal: 728, Address: 0x203c0)
- GetSystemFileCacheSize (Ordinal: 729, Address: 0x45f70)
- GetSystemFirmwareTable (Ordinal: 730, Address: 0x29130)
- GetSystemInfo (Ordinal: 731, Address: 0x26720)
- GetSystemPowerStatus (Ordinal: 732, Address: 0x20ce0)
- GetSystemPreferredUILanguages (Ordinal: 733, Address: 0x45f80)
- GetSystemRegistryQuota (Ordinal: 734, Address: 0x44880)
- GetSystemTime (Ordinal: 735, Address: 0x20580)
- GetSystemTimeAdjustment (Ordinal: 736, Address: 0x274c0)
- GetSystemTimeAsFileTime (Ordinal: 737, Address: 0x1df70)
- GetSystemTimePreciseAsFileTime (Ordinal: 738, Address: 0x2dd20)
- GetSystemTimes (Ordinal: 739, Address: 0x2c240)
- GetSystemWindowsDirectoryA (Ordinal: 740, Address: 0x45f90)
- GetSystemWindowsDirectoryW (Ordinal: 741, Address: 0x19490)
- GetSystemWow64DirectoryA (Ordinal: 742, Address: 0x2de90)
- GetSystemWow64DirectoryW (Ordinal: 743, Address: 0x2dea0)
- GetTapeParameters (Ordinal: 744, Address: 0x4f930)
- GetTapePosition (Ordinal: 745, Address: 0x4f990)
- GetTapeStatus (Ordinal: 746, Address: 0x4fa20)
- GetTempFileNameA (Ordinal: 747, Address: 0x2db20)
- GetTempFileNameW (Ordinal: 748, Address: 0x2db30)
- GetTempPathA (Ordinal: 749, Address: 0x2db40)
- GetTempPathW (Ordinal: 750, Address: 0x2db50)
- GetThreadContext (Ordinal: 751, Address: 0x26780)
- GetThreadErrorMode (Ordinal: 752, Address: 0x45fa0)
- GetThreadGroupAffinity (Ordinal: 753, Address: 0x45fb0)
- GetThreadIOPendingFlag (Ordinal: 754, Address: 0x45fc0)
- GetThreadId (Ordinal: 755, Address: 0x28ef0)
- GetThreadIdealProcessorEx (Ordinal: 756, Address: 0x45fd0)
- GetThreadInformation (Ordinal: 757, Address: 0x2d5e0)
- GetThreadLocale (Ordinal: 758, Address: 0x20db0)
- GetThreadPreferredUILanguages (Ordinal: 759, Address: 0x23e70)
- GetThreadPriority (Ordinal: 760, Address: 0x245b0)
- GetThreadPriorityBoost (Ordinal: 761, Address: 0x45fe0)
- GetThreadSelectedCpuSets (Ordinal: 762, Address: 0x947a7)
- GetThreadSelectorEntry (Ordinal: 763, Address: 0x3eb50)
- GetThreadTimes (Ordinal: 764, Address: 0x1eb70)
- GetThreadUILanguage (Ordinal: 765, Address: 0x2c10)
- GetTickCount (Ordinal: 766, Address: 0x1b4c0)
- GetTickCount64 (Ordinal: 767, Address: 0x1d6f0)
- GetTimeFormatA (Ordinal: 768, Address: 0x45ff0)
- GetTimeFormatAWorker (Ordinal: 769, Address: 0x2bf00)
- GetTimeFormatEx (Ordinal: 770, Address: 0x46000)
- GetTimeFormatW (Ordinal: 771, Address: 0x271a0)
- GetTimeFormatWWorker (Ordinal: 772, Address: 0x19200)
- GetTimeZoneInformation (Ordinal: 773, Address: 0x23ab0)
- GetTimeZoneInformationForYear (Ordinal: 774, Address: 0x2aa20)
- GetUILanguageInfo (Ordinal: 775, Address: 0x46010)
- GetUmsCompletionListEvent (Ordinal: 776, Address: 0x4e7e0)
- GetUmsSystemThreadInformation (Ordinal: 777, Address: 0x4e810)
- GetUserDefaultLCID (Ordinal: 778, Address: 0x23a70)
- GetUserDefaultLangID (Ordinal: 779, Address: 0x2c00)
- GetUserDefaultLocaleName (Ordinal: 780, Address: 0x27510)
- GetUserDefaultUILanguage (Ordinal: 781, Address: 0x28d20)
- GetUserGeoID (Ordinal: 782, Address: 0x1a1e0)
- GetUserPreferredUILanguages (Ordinal: 783, Address: 0x28950)
- GetVDMCurrentDirectories (Ordinal: 784, Address: 0x4d1a0)
- GetVersion (Ordinal: 785, Address: 0x27550)
- GetVersionExA (Ordinal: 786, Address: 0x27450)
- GetVersionExW (Ordinal: 787, Address: 0x26be0)
- GetVolumeInformationA (Ordinal: 788, Address: 0x2db60)
- GetVolumeInformationByHandleW (Ordinal: 789, Address: 0x2db70)
- GetVolumeInformationW (Ordinal: 790, Address: 0x2db80)
- GetVolumeNameForVolumeMountPointA (Ordinal: 791, Address: 0x2c250)
- GetVolumeNameForVolumeMountPointW (Ordinal: 792, Address: 0x11880)
- GetVolumePathNameA (Ordinal: 793, Address: 0x4e200)
- GetVolumePathNameW (Ordinal: 794, Address: 0x14430)
- GetVolumePathNamesForVolumeNameA (Ordinal: 795, Address: 0x4e3c0)
- GetVolumePathNamesForVolumeNameW (Ordinal: 796, Address: 0x22dd0)
- GetWindowsDirectoryA (Ordinal: 797, Address: 0x2b190)
- GetWindowsDirectoryW (Ordinal: 798, Address: 0x28ed0)
- GetWriteWatch (Ordinal: 799, Address: 0x1d7b0)
- GetXStateFeaturesMask (Ordinal: 800, Address: 0x28e40)
- GlobalAddAtomA (Ordinal: 801, Address: 0xb940)
- GlobalAddAtomExA (Ordinal: 802, Address: 0x3ee20)
- GlobalAddAtomExW (Ordinal: 803, Address: 0xd150)
- GlobalAddAtomW (Ordinal: 804, Address: 0xd410)
- GlobalAlloc (Ordinal: 805, Address: 0x20de0)
- GlobalCompact (Ordinal: 806, Address: 0x42c20)
- GlobalDeleteAtom (Ordinal: 807, Address: 0xd180)
- GlobalFindAtomA (Ordinal: 808, Address: 0x2d050)
- GlobalFindAtomW (Ordinal: 809, Address: 0xd7e0)
- GlobalFix (Ordinal: 810, Address: 0x42c40)
- GlobalFlags (Ordinal: 811, Address: 0x27300)
- GlobalFree (Ordinal: 812, Address: 0x1dcc0)
- GlobalGetAtomNameA (Ordinal: 813, Address: 0x3ee40)
- GlobalGetAtomNameW (Ordinal: 814, Address: 0xce60)
- GlobalHandle (Ordinal: 815, Address: 0x26d60)
- GlobalLock (Ordinal: 816, Address: 0x1b590)
- GlobalMemoryStatus (Ordinal: 817, Address: 0x24340)
- GlobalMemoryStatusEx (Ordinal: 818, Address: 0x27680)
- GlobalReAlloc (Ordinal: 819, Address: 0x1d7c0)
- GlobalSize (Ordinal: 820, Address: 0x202a0)
- GlobalUnWire (Ordinal: 821, Address: 0x42c60)
- GlobalUnfix (Ordinal: 822, Address: 0x42c70)
- GlobalUnlock (Ordinal: 823, Address: 0x1b4e0)
- GlobalWire (Ordinal: 824, Address: 0x42c90)
- Heap32First (Ordinal: 825, Address: 0x47f70)
- Heap32ListFirst (Ordinal: 826, Address: 0x481c0)
- Heap32ListNext (Ordinal: 827, Address: 0x482b0)
- Heap32Next (Ordinal: 828, Address: 0x2c8c0)
- HeapAlloc (Ordinal: 829, Address: 0x94cb6)
- HeapCompact (Ordinal: 830, Address: 0x46020)
- HeapCreate (Ordinal: 831, Address: 0x272b0)
- HeapDestroy (Ordinal: 832, Address: 0x290c0)
- HeapFree (Ordinal: 833, Address: 0x1b480)
- HeapLock (Ordinal: 834, Address: 0x2aa50)
- HeapQueryInformation (Ordinal: 835, Address: 0x46030)
- HeapReAlloc (Ordinal: 836, Address: 0x94d22)
- HeapSetInformation (Ordinal: 837, Address: 0x27430)
- HeapSize (Ordinal: 838, Address: 0x94d56)
- HeapSummary (Ordinal: 839, Address: 0x46040)
- HeapUnlock (Ordinal: 840, Address: 0x2aa40)
- HeapValidate (Ordinal: 841, Address: 0x23730)
- HeapWalk (Ordinal: 842, Address: 0x46050)
- IdnToAscii (Ordinal: 843, Address: 0x2c870)
- IdnToNameprepUnicode (Ordinal: 844, Address: 0x46060)
- IdnToUnicode (Ordinal: 845, Address: 0x46070)
- InitAtomTable (Ordinal: 846, Address: 0x2b000)
- InitOnceBeginInitialize (Ordinal: 847, Address: 0x94de8)
- InitOnceComplete (Ordinal: 848, Address: 0x94e2e)
- InitOnceExecuteOnce (Ordinal: 849, Address: 0x94e70)
- InitOnceInitialize (Ordinal: 850, Address: 0x94eb4)
- InitializeConditionVariable (Ordinal: 851, Address: 0x94eeb)
- InitializeContext (Ordinal: 852, Address: 0x29140)
- InitializeCriticalSection (Ordinal: 853, Address: 0x94f3c)
- InitializeCriticalSectionAndSpinCount (Ordinal: 854, Address: 0x2d750)
- InitializeCriticalSectionEx (Ordinal: 855, Address: 0x2d760)
- InitializeEnclave (Ordinal: 856, Address: 0x2d620)
- InitializeProcThreadAttributeList (Ordinal: 857, Address: 0x94fd5)
- InitializeSListHead (Ordinal: 858, Address: 0x95031)
- InitializeSRWLock (Ordinal: 859, Address: 0x95060)
- InitializeSynchronizationBarrier (Ordinal: 860, Address: 0x46080)
- InstallELAMCertificateInfo (Ordinal: 861, Address: 0x950b7)
- InterlockedFlushSList (Ordinal: 862, Address: 0x95107)
- InterlockedPopEntrySList (Ordinal: 863, Address: 0x9513f)
- InterlockedPushEntrySList (Ordinal: 864, Address: 0x9517b)
- InterlockedPushListSList (Ordinal: 865, Address: 0x951b7)
- InterlockedPushListSListEx (Ordinal: 866, Address: 0x951f4)
- InvalidateConsoleDIBits (Ordinal: 867, Address: 0x66f50)
- IsBadCodePtr (Ordinal: 868, Address: 0x44900)
- IsBadHugeReadPtr (Ordinal: 869, Address: 0x44910)
- IsBadHugeWritePtr (Ordinal: 870, Address: 0x44920)
- IsBadReadPtr (Ordinal: 871, Address: 0x1b680)
- IsBadStringPtrA (Ordinal: 872, Address: 0x44930)
- IsBadStringPtrW (Ordinal: 873, Address: 0x2cff0)
- IsBadWritePtr (Ordinal: 874, Address: 0x44980)
- IsCalendarLeapDay (Ordinal: 875, Address: 0x57c90)
- IsCalendarLeapMonth (Ordinal: 876, Address: 0x57d70)
- IsCalendarLeapYear (Ordinal: 877, Address: 0x57e50)
- IsDBCSLeadByte (Ordinal: 878, Address: 0x26d20)
- IsDBCSLeadByteEx (Ordinal: 879, Address: 0x46090)
- IsDebuggerPresent (Ordinal: 880, Address: 0x27460)
- IsEnclaveTypeSupported (Ordinal: 881, Address: 0x2d630)
- IsNLSDefinedString (Ordinal: 882, Address: 0x460a0)
- IsNativeVhdBoot (Ordinal: 883, Address: 0x3d080)
- IsNormalizedString (Ordinal: 884, Address: 0x460b0)
- IsProcessCritical (Ordinal: 885, Address: 0x95365)
- IsProcessInJob (Ordinal: 886, Address: 0x460c0)
- IsProcessorFeaturePresent (Ordinal: 887, Address: 0x23d30)
- IsSystemResumeAutomatic (Ordinal: 888, Address: 0x444e0)
- IsThreadAFiber (Ordinal: 889, Address: 0x460d0)
- IsThreadpoolTimerSet (Ordinal: 890, Address: 0x95402)
- IsValidCalDateTime (Ordinal: 891, Address: 0x196e0)
- IsValidCodePage (Ordinal: 892, Address: 0x231d0)
- IsValidLanguageGroup (Ordinal: 893, Address: 0x460f0)
- IsValidLocale (Ordinal: 894, Address: 0x23a80)
- IsValidLocaleName (Ordinal: 895, Address: 0x46100)
- IsValidNLSVersion (Ordinal: 896, Address: 0x46110)
- IsWow64Process (Ordinal: 897, Address: 0x24850)
- K32EmptyWorkingSet (Ordinal: 898, Address: 0x46120)
- K32EnumDeviceDrivers (Ordinal: 899, Address: 0x46130)
- K32EnumPageFilesA (Ordinal: 900, Address: 0x46140)
- K32EnumPageFilesW (Ordinal: 901, Address: 0x46150)
- K32EnumProcessModules (Ordinal: 902, Address: 0x28d60)
- K32EnumProcessModulesEx (Ordinal: 903, Address: 0x46160)
- K32EnumProcesses (Ordinal: 904, Address: 0x2b70)
- K32GetDeviceDriverBaseNameA (Ordinal: 905, Address: 0x46170)
- K32GetDeviceDriverBaseNameW (Ordinal: 906, Address: 0x46180)
- K32GetDeviceDriverFileNameA (Ordinal: 907, Address: 0x46190)
- K32GetDeviceDriverFileNameW (Ordinal: 908, Address: 0x461a0)
- K32GetMappedFileNameA (Ordinal: 909, Address: 0x461b0)
- K32GetMappedFileNameW (Ordinal: 910, Address: 0x461c0)
- K32GetModuleBaseNameA (Ordinal: 911, Address: 0x461d0)
- K32GetModuleBaseNameW (Ordinal: 912, Address: 0x461e0)
- K32GetModuleFileNameExA (Ordinal: 913, Address: 0x461f0)
- K32GetModuleFileNameExW (Ordinal: 914, Address: 0x2c880)
- K32GetModuleInformation (Ordinal: 915, Address: 0x28da0)
- K32GetPerformanceInfo (Ordinal: 916, Address: 0x46200)
- K32GetProcessImageFileNameA (Ordinal: 917, Address: 0x46210)
- K32GetProcessImageFileNameW (Ordinal: 918, Address: 0x20290)
- K32GetProcessMemoryInfo (Ordinal: 919, Address: 0x46220)
- K32GetWsChanges (Ordinal: 920, Address: 0x46240)
- K32GetWsChangesEx (Ordinal: 921, Address: 0x46230)
- K32InitializeProcessForWsWatch (Ordinal: 922, Address: 0x46250)
- K32QueryWorkingSet (Ordinal: 923, Address: 0x46260)
- K32QueryWorkingSetEx (Ordinal: 924, Address: 0x28960)
- LCIDToLocaleName (Ordinal: 925, Address: 0x28ce0)
- LCMapStringA (Ordinal: 926, Address: 0x46270)
- LCMapStringEx (Ordinal: 927, Address: 0x1d560)
- LCMapStringW (Ordinal: 928, Address: 0x1dd00)
- LZClose (Ordinal: 929, Address: 0x48ad0)
- LZCloseFile (Ordinal: 930, Address: 0x48b80)
- LZCopy (Ordinal: 931, Address: 0x3e7f0)
- LZCreateFileW (Ordinal: 932, Address: 0x48c30)
- LZDone (Ordinal: 933, Address: 0x2d0a0)
- LZInit (Ordinal: 934, Address: 0x48d60)
- LZOpenFileA (Ordinal: 935, Address: 0x48ef0)
- LZOpenFileW (Ordinal: 936, Address: 0x48fe0)
- LZRead (Ordinal: 937, Address: 0x49080)
- LZSeek (Ordinal: 938, Address: 0x492e0)
- LZStart (Ordinal: 939, Address: 0x2a3b0)
- LeaveCriticalSection (Ordinal: 940, Address: 0x957ab)
- LeaveCriticalSectionWhenCallbackReturns (Ordinal: 941, Address: 0x957f1)
- LoadAppInitDlls (Ordinal: 942, Address: 0x1df80)
- LoadEnclaveData (Ordinal: 943, Address: 0x2d640)
- LoadLibraryA (Ordinal: 944, Address: 0x274d0)
- LoadLibraryExA (Ordinal: 945, Address: 0x26b80)
- LoadLibraryExW (Ordinal: 946, Address: 0x20dd0)
- LoadLibraryW (Ordinal: 947, Address: 0x250f0)
- LoadModule (Ordinal: 948, Address: 0x44a10)
- LoadPackagedLibrary (Ordinal: 949, Address: 0x2dd00)
- LoadResource (Ordinal: 950, Address: 0x23e60)
- LoadStringBaseExW (Ordinal: 951, Address: 0x46280)
- LoadStringBaseW (Ordinal: 952, Address: 0x430f0)
- LocalAlloc (Ordinal: 953, Address: 0x1dd20)
- LocalCompact (Ordinal: 954, Address: 0x42c20)
- LocalFileTimeToFileTime (Ordinal: 955, Address: 0x2db90)
- LocalFlags (Ordinal: 956, Address: 0x42df0)
- LocalFree (Ordinal: 957, Address: 0x1dd10)
- LocalHandle (Ordinal: 958, Address: 0x42f30)
- LocalLock (Ordinal: 959, Address: 0x271e0)
- LocalReAlloc (Ordinal: 960, Address: 0x28dc0)
- LocalShrink (Ordinal: 961, Address: 0x42c20)
- LocalSize (Ordinal: 962, Address: 0x20e90)
- LocalUnlock (Ordinal: 963, Address: 0x271d0)
- LocaleNameToLCID (Ordinal: 964, Address: 0x26e20)
- LocateXStateFeature (Ordinal: 965, Address: 0x2a200)
- LockFile (Ordinal: 966, Address: 0x2dba0)
- LockFileEx (Ordinal: 967, Address: 0x2dbb0)
- LockResource (Ordinal: 968, Address: 0x24450)
- MapUserPhysicalPages (Ordinal: 969, Address: 0x462a0)
- MapUserPhysicalPagesScatter (Ordinal: 970, Address: 0x50fd0)
- MapViewOfFile (Ordinal: 971, Address: 0x24860)
- MapViewOfFileEx (Ordinal: 972, Address: 0x21f30)
- MapViewOfFileExNuma (Ordinal: 973, Address: 0x462b0)
- MapViewOfFileFromApp (Ordinal: 974, Address: 0x95a10)
- Module32First (Ordinal: 975, Address: 0x48390)
- Module32FirstW (Ordinal: 976, Address: 0x25180)
- Module32Next (Ordinal: 977, Address: 0x484b0)
- Module32NextW (Ordinal: 978, Address: 0x20440)
- MoveFileA (Ordinal: 979, Address: 0x41360)
- MoveFileExA (Ordinal: 980, Address: 0x41390)
- MoveFileExW (Ordinal: 981, Address: 0x2a040)
- MoveFileTransactedA (Ordinal: 982, Address: 0x413c0)
- MoveFileTransactedW (Ordinal: 983, Address: 0x2c040)
- MoveFileW (Ordinal: 984, Address: 0x27260)
- MoveFileWithProgressA (Ordinal: 985, Address: 0x41490)
- MoveFileWithProgressW (Ordinal: 986, Address: 0x462c0)
- MulDiv (Ordinal: 987, Address: 0x2dcf0)
- MultiByteToWideChar (Ordinal: 988, Address: 0x1d500)
- NeedCurrentDirectoryForExePathA (Ordinal: 989, Address: 0x462d0)
- NeedCurrentDirectoryForExePathW (Ordinal: 990, Address: 0x462e0)
- NlsCheckPolicy (Ordinal: 991, Address: 0x2df30)
- NlsEventDataDescCreate (Ordinal: 992, Address: 0x462f0)
- NlsGetCacheUpdateCount (Ordinal: 993, Address: 0x2df40)
- NlsUpdateLocale (Ordinal: 994, Address: 0x2df50)
- NlsUpdateSystemLocale (Ordinal: 995, Address: 0x2df60)
- NlsWriteEtwEvent (Ordinal: 996, Address: 0x46300)
- NormalizeString (Ordinal: 997, Address: 0x46310)
- NotifyMountMgr (Ordinal: 998, Address: 0x46320)
- NotifyUILanguageChange (Ordinal: 999, Address: 0x5aec0)
- NtVdm64CreateProcessInternalW (Ordinal: 1000, Address: 0x44ec0)
- OOBEComplete (Ordinal: 1001, Address: 0x26f90)
- OfferVirtualMemory (Ordinal: 1002, Address: 0x95c3e)
- OpenConsoleW (Ordinal: 1003, Address: 0x66090)
- OpenConsoleWStub (Ordinal: 1004, Address: 0x46330)
- OpenEventA (Ordinal: 1005, Address: 0x2d770)
- OpenEventW (Ordinal: 1006, Address: 0x2d780)
- OpenFile (Ordinal: 1007, Address: 0x422b0)
- OpenFileById (Ordinal: 1008, Address: 0x46340)
- OpenFileMappingA (Ordinal: 1009, Address: 0x2ac40)
- OpenFileMappingW (Ordinal: 1010, Address: 0x26a30)
- OpenJobObjectA (Ordinal: 1011, Address: 0x501b0)
- OpenJobObjectW (Ordinal: 1012, Address: 0x50230)
- OpenMutexA (Ordinal: 1013, Address: 0x21a70)
- OpenMutexW (Ordinal: 1014, Address: 0x2d790)
- OpenPackageInfoByFullName (Ordinal: 1015, Address: 0x95d29)
- OpenPrivateNamespaceA (Ordinal: 1016, Address: 0x46d60)
- OpenPrivateNamespaceW (Ordinal: 1017, Address: 0x27170)
- OpenProcess (Ordinal: 1018, Address: 0x1eb80)
- OpenProcessToken (Ordinal: 1019, Address: 0x95d97)
- OpenProfileUserMapping (Ordinal: 1020, Address: 0x2a3b0)
- OpenSemaphoreA (Ordinal: 1021, Address: 0x46dc0)
- OpenSemaphoreW (Ordinal: 1022, Address: 0x2d7a0)
- OpenState (Ordinal: 1023, Address: 0x95e0d)
- OpenStateExplicit (Ordinal: 1024, Address: 0x95e34)
- OpenThread (Ordinal: 1025, Address: 0x23710)
- OpenThreadToken (Ordinal: 1026, Address: 0x95e6c)
- OpenWaitableTimerA (Ordinal: 1027, Address: 0x46e30)
- OpenWaitableTimerW (Ordinal: 1028, Address: 0x2d7b0)
- OutputDebugStringA (Ordinal: 1029, Address: 0x2a300)
- OutputDebugStringW (Ordinal: 1030, Address: 0x20da0)
- PackageFamilyNameFromFullName (Ordinal: 1031, Address: 0x95f0c)
- PackageFamilyNameFromId (Ordinal: 1032, Address: 0x95f4d)
- PackageFullNameFromId (Ordinal: 1033, Address: 0x95f86)
- PackageIdFromFullName (Ordinal: 1034, Address: 0x95fbd)
- PackageNameAndPublisherIdFromFamilyName (Ordinal: 1035, Address: 0x96006)
- ParseApplicationUserModelId (Ordinal: 1036, Address: 0x96055)
- PeekConsoleInputA (Ordinal: 1037, Address: 0x2dfd0)
- PeekConsoleInputW (Ordinal: 1038, Address: 0x2e130)
- PeekNamedPipe (Ordinal: 1039, Address: 0x46350)
- PostQueuedCompletionStatus (Ordinal: 1040, Address: 0x231f0)
- PowerClearRequest (Ordinal: 1041, Address: 0x24e80)
- PowerCreateRequest (Ordinal: 1042, Address: 0x24060)
- PowerSetRequest (Ordinal: 1043, Address: 0xb8c0)
- PrefetchVirtualMemory (Ordinal: 1044, Address: 0x96114)
- PrepareTape (Ordinal: 1045, Address: 0x4fa50)
- PrivCopyFileExW (Ordinal: 1046, Address: 0x2bea0)
- PrivMoveFileIdentityW (Ordinal: 1047, Address: 0x41580)
- Process32First (Ordinal: 1048, Address: 0x485d0)
- Process32FirstW (Ordinal: 1049, Address: 0x26a40)
- Process32Next (Ordinal: 1050, Address: 0x486c0)
- Process32NextW (Ordinal: 1051, Address: 0x21040)
- ProcessIdToSessionId (Ordinal: 1052, Address: 0x23720)
- PssCaptureSnapshot (Ordinal: 1053, Address: 0x46360)
- PssDuplicateSnapshot (Ordinal: 1054, Address: 0x46370)
- PssFreeSnapshot (Ordinal: 1055, Address: 0x46380)
- PssQuerySnapshot (Ordinal: 1056, Address: 0x46390)
- PssWalkMarkerCreate (Ordinal: 1057, Address: 0x463a0)
- PssWalkMarkerFree (Ordinal: 1058, Address: 0x463b0)
- PssWalkMarkerGetPosition (Ordinal: 1059, Address: 0x463c0)
- PssWalkMarkerRewind (Ordinal: 1060, Address: 0x463d0)
- PssWalkMarkerSeek (Ordinal: 1061, Address: 0x463e0)
- PssWalkMarkerSeekToBeginning (Ordinal: 1062, Address: 0x463d0)
- PssWalkMarkerSetPosition (Ordinal: 1063, Address: 0x463e0)
- PssWalkMarkerTell (Ordinal: 1064, Address: 0x463c0)
- PssWalkSnapshot (Ordinal: 1065, Address: 0x463f0)
- PulseEvent (Ordinal: 1066, Address: 0x23280)
- PurgeComm (Ordinal: 1067, Address: 0x2de00)
- QueryActCtxSettingsW (Ordinal: 1068, Address: 0x46400)
- QueryActCtxSettingsWWorker (Ordinal: 1069, Address: 0xd570)
- QueryActCtxW (Ordinal: 1070, Address: 0x24cf0)
- QueryActCtxWWorker (Ordinal: 1071, Address: 0xd010)
- QueryDepthSList (Ordinal: 1072, Address: 0x96346)
- QueryDosDeviceA (Ordinal: 1073, Address: 0x40340)
- QueryDosDeviceW (Ordinal: 1074, Address: 0x2dbc0)
- QueryFullProcessImageNameA (Ordinal: 1075, Address: 0x46410)
- QueryFullProcessImageNameW (Ordinal: 1076, Address: 0x26ec0)
- QueryIdleProcessorCycleTime (Ordinal: 1077, Address: 0x2af50)
- QueryIdleProcessorCycleTimeEx (Ordinal: 1078, Address: 0x46420)
- QueryInformationJobObject (Ordinal: 1079, Address: 0x28a20)
- QueryIoRateControlInformationJobObject (Ordinal: 1080, Address: 0x502e0)
- QueryMemoryResourceNotification (Ordinal: 1081, Address: 0x2d090)
- QueryPerformanceCounter (Ordinal: 1082, Address: 0x1b720)
- QueryPerformanceFrequency (Ordinal: 1083, Address: 0x1ee30)
- QueryProcessAffinityUpdateMode (Ordinal: 1084, Address: 0x46430)
- QueryProcessCycleTime (Ordinal: 1085, Address: 0x2a970)
- QueryProtectedPolicy (Ordinal: 1086, Address: 0x964cc)
- QueryThreadCycleTime (Ordinal: 1087, Address: 0x2a9d0)
- QueryThreadProfiling (Ordinal: 1088, Address: 0x510e0)
- QueryThreadpoolStackInformation (Ordinal: 1089, Address: 0x46440)
- QueryUmsThreadInformation (Ordinal: 1090, Address: 0x4e880)
- QueryUnbiasedInterruptTime (Ordinal: 1091, Address: 0x26e10)
- QueueUserAPC (Ordinal: 1092, Address: 0x271f0)
- QueueUserWorkItem (Ordinal: 1093, Address: 0x26eb0)
- QuirkGetData2Worker (Ordinal: 1094, Address: 0x6c320)
- QuirkGetDataWorker (Ordinal: 1095, Address: 0x6c3f0)
- QuirkIsEnabled2Worker (Ordinal: 1096, Address: 0x6c4b0)
- QuirkIsEnabled3Worker (Ordinal: 1097, Address: 0x1d730)
- QuirkIsEnabledForPackage2Worker (Ordinal: 1098, Address: 0x2ac10)
- QuirkIsEnabledForPackage3Worker (Ordinal: 1099, Address: 0xe410)
- QuirkIsEnabledForPackage4Worker (Ordinal: 1100, Address: 0xf1d0)
- QuirkIsEnabledForPackageWorker (Ordinal: 1101, Address: 0xdf30)
- QuirkIsEnabledForProcessWorker (Ordinal: 1102, Address: 0x24f00)
- QuirkIsEnabledWorker (Ordinal: 1103, Address: 0xc9a0)
- RaiseException (Ordinal: 1104, Address: 0x24d70)
- RaiseFailFastException (Ordinal: 1105, Address: 0x966d1)
- RaiseInvalid16BitExeError (Ordinal: 1106, Address: 0x450c0)
- ReOpenFile (Ordinal: 1107, Address: 0x46470)
- ReadConsoleA (Ordinal: 1108, Address: 0x2dfe0)
- ReadConsoleInputA (Ordinal: 1109, Address: 0x2dff0)
- ReadConsoleInputExA (Ordinal: 1110, Address: 0x9674b)
- ReadConsoleInputExW (Ordinal: 1111, Address: 0x9677e)
- ReadConsoleInputW (Ordinal: 1112, Address: 0x2e000)
- ReadConsoleOutputA (Ordinal: 1113, Address: 0x2e140)
- ReadConsoleOutputAttribute (Ordinal: 1114, Address: 0x2e150)
- ReadConsoleOutputCharacterA (Ordinal: 1115, Address: 0x2e160)
- ReadConsoleOutputCharacterW (Ordinal: 1116, Address: 0x2e170)
- ReadConsoleOutputW (Ordinal: 1117, Address: 0x2e180)
- ReadConsoleW (Ordinal: 1118, Address: 0x2e010)
- ReadDirectoryChangesW (Ordinal: 1119, Address: 0x2b670)
- ReadFile (Ordinal: 1120, Address: 0x2dbd0)
- ReadFileEx (Ordinal: 1121, Address: 0x2dbe0)
- ReadFileScatter (Ordinal: 1122, Address: 0x2dbf0)
- ReadProcessMemory (Ordinal: 1123, Address: 0x23680)
- ReadThreadProfilingData (Ordinal: 1124, Address: 0x51110)
- ReclaimVirtualMemory (Ordinal: 1125, Address: 0x968ae)
- RegCloseKey (Ordinal: 1126, Address: 0x2bf0)
- RegCopyTreeW (Ordinal: 1127, Address: 0x46480)
- RegCreateKeyExA (Ordinal: 1128, Address: 0x46490)
- RegCreateKeyExW (Ordinal: 1129, Address: 0x2b0f0)
- RegDeleteKeyExA (Ordinal: 1130, Address: 0x464a0)
- RegDeleteKeyExW (Ordinal: 1131, Address: 0x464b0)
- RegDeleteTreeA (Ordinal: 1132, Address: 0x464c0)
- RegDeleteTreeW (Ordinal: 1133, Address: 0x464d0)
- RegDeleteValueA (Ordinal: 1134, Address: 0x464e0)
- RegDeleteValueW (Ordinal: 1135, Address: 0x2b100)
- RegDisablePredefinedCacheEx (Ordinal: 1136, Address: 0x464f0)
- RegEnumKeyExA (Ordinal: 1137, Address: 0x46500)
- RegEnumKeyExW (Ordinal: 1138, Address: 0x46550)
- RegEnumValueA (Ordinal: 1139, Address: 0x465a0)
- RegEnumValueW (Ordinal: 1140, Address: 0x289b0)
- RegFlushKey (Ordinal: 1141, Address: 0x465f0)
- RegGetKeySecurity (Ordinal: 1142, Address: 0x46600)
- RegGetValueA (Ordinal: 1143, Address: 0x46610)
- RegGetValueW (Ordinal: 1144, Address: 0x2c620)
- RegLoadKeyA (Ordinal: 1145, Address: 0x46620)
- RegLoadKeyW (Ordinal: 1146, Address: 0x46630)
- RegLoadMUIStringA (Ordinal: 1147, Address: 0x46640)
- RegLoadMUIStringW (Ordinal: 1148, Address: 0x46650)
- RegNotifyChangeKeyValue (Ordinal: 1149, Address: 0x28a10)
- RegOpenCurrentUser (Ordinal: 1150, Address: 0x2aa90)
- RegOpenKeyExA (Ordinal: 1151, Address: 0x46660)
- RegOpenKeyExW (Ordinal: 1152, Address: 0x24870)
- RegOpenUserClassesRoot (Ordinal: 1153, Address: 0x46670)
- RegQueryInfoKeyA (Ordinal: 1154, Address: 0x46680)
- RegQueryInfoKeyW (Ordinal: 1155, Address: 0x23db0)
- RegQueryValueExA (Ordinal: 1156, Address: 0x46700)
- RegQueryValueExW (Ordinal: 1157, Address: 0x24590)
- RegRestoreKeyA (Ordinal: 1158, Address: 0x46710)
- RegRestoreKeyW (Ordinal: 1159, Address: 0x46720)
- RegSaveKeyExA (Ordinal: 1160, Address: 0x46730)
- RegSaveKeyExW (Ordinal: 1161, Address: 0x46740)
- RegSetKeySecurity (Ordinal: 1162, Address: 0x46750)
- RegSetValueExA (Ordinal: 1163, Address: 0x46760)
- RegSetValueExW (Ordinal: 1164, Address: 0x28d30)
- RegUnLoadKeyA (Ordinal: 1165, Address: 0x46770)
- RegUnLoadKeyW (Ordinal: 1166, Address: 0x46780)
- RegisterApplicationRecoveryCallback (Ordinal: 1167, Address: 0x2a4d0)
- RegisterApplicationRestart (Ordinal: 1168, Address: 0xb400)
- RegisterBadMemoryNotification (Ordinal: 1169, Address: 0x46790)
- RegisterConsoleIME (Ordinal: 1170, Address: 0x66930)
- RegisterConsoleOS2 (Ordinal: 1171, Address: 0x66710)
- RegisterConsoleVDM (Ordinal: 1172, Address: 0x66200)
- RegisterWaitForInputIdle (Ordinal: 1173, Address: 0x26d10)
- RegisterWaitForSingleObject (Ordinal: 1174, Address: 0xaf50)
- RegisterWaitForSingleObjectEx (Ordinal: 1175, Address: 0x467a0)
- RegisterWaitUntilOOBECompleted (Ordinal: 1176, Address: 0x43cf0)
- RegisterWowBaseHandlers (Ordinal: 1177, Address: 0x42ca0)
- RegisterWowExec (Ordinal: 1178, Address: 0x4d5c0)
- ReleaseActCtx (Ordinal: 1179, Address: 0x28d50)
- ReleaseActCtxWorker (Ordinal: 1180, Address: 0x23e30)
- ReleaseMutex (Ordinal: 1181, Address: 0x2d7c0)
- ReleaseMutexWhenCallbackReturns (Ordinal: 1182, Address: 0x96ce7)
- ReleaseSRWLockExclusive (Ordinal: 1183, Address: 0x96d28)
- ReleaseSRWLockShared (Ordinal: 1184, Address: 0x96d5e)
- ReleaseSemaphore (Ordinal: 1185, Address: 0x2d7d0)
- ReleaseSemaphoreWhenCallbackReturns (Ordinal: 1186, Address: 0x96db1)
- RemoveDirectoryA (Ordinal: 1187, Address: 0x2dc00)
- RemoveDirectoryTransactedA (Ordinal: 1188, Address: 0x3ed00)
- RemoveDirectoryTransactedW (Ordinal: 1189, Address: 0x3ed50)
- RemoveDirectoryW (Ordinal: 1190, Address: 0x2dc10)
- RemoveDllDirectory (Ordinal: 1191, Address: 0x96e49)
- RemoveLocalAlternateComputerNameA (Ordinal: 1192, Address: 0x3e2d0)
- RemoveLocalAlternateComputerNameW (Ordinal: 1193, Address: 0x3e330)
- RemoveSecureMemoryCacheCallback (Ordinal: 1194, Address: 0x42cb0)
- RemoveVectoredContinueHandler (Ordinal: 1195, Address: 0x96f03)
- RemoveVectoredExceptionHandler (Ordinal: 1196, Address: 0x96f49)
- ReplaceFile (Ordinal: 1197, Address: 0x467b0)
- ReplaceFileA (Ordinal: 1198, Address: 0x427b0)
- ReplaceFileW (Ordinal: 1199, Address: 0x467b0)
- ReplacePartitionUnit (Ordinal: 1200, Address: 0x45440)
- RequestDeviceWakeup (Ordinal: 1201, Address: 0x44500)
- RequestWakeupLatency (Ordinal: 1202, Address: 0x44500)
- ResetEvent (Ordinal: 1203, Address: 0x2d7e0)
- ResetWriteWatch (Ordinal: 1204, Address: 0x21650)
- ResolveDelayLoadedAPI (Ordinal: 1205, Address: 0x97006)
- ResolveDelayLoadsFromDll (Ordinal: 1206, Address: 0x9703e)
- ResolveLocaleName (Ordinal: 1207, Address: 0x28dd0)
- RestoreLastError (Ordinal: 1208, Address: 0x97083)
- ResumeThread (Ordinal: 1209, Address: 0x24e70)
- RtlAddFunctionTable (Ordinal: 1210, Address: 0x26a10)
- RtlCaptureContext (Ordinal: 1211, Address: 0x2d410)
- RtlCaptureStackBackTrace (Ordinal: 1212, Address: 0x24be0)
- RtlCompareMemory (Ordinal: 1213, Address: 0x467c0)
- RtlCopyMemory (Ordinal: 1214, Address: 0x467d0)
- RtlDeleteFunctionTable (Ordinal: 1215, Address: 0x26a20)
- RtlFillMemory (Ordinal: 1216, Address: 0x467f0)
- RtlInstallFunctionTableCallback (Ordinal: 1217, Address: 0x46820)
- RtlLookupFunctionEntry (Ordinal: 1218, Address: 0x26e60)
- RtlMoveMemory (Ordinal: 1219, Address: 0x2d440)
- RtlPcToFileHeader (Ordinal: 1220, Address: 0x25170)
- RtlRaiseException (Ordinal: 1221, Address: 0x46830)
- RtlRestoreContext (Ordinal: 1222, Address: 0x46840)
- RtlUnwind (Ordinal: 1223, Address: 0x46850)
- RtlUnwindEx (Ordinal: 1224, Address: 0x26ba0)
- RtlVirtualUnwind (Ordinal: 1225, Address: 0x2a410)
- RtlZeroMemory (Ordinal: 1226, Address: 0x971e2)
- ScrollConsoleScreenBufferA (Ordinal: 1227, Address: 0x2e190)
- ScrollConsoleScreenBufferW (Ordinal: 1228, Address: 0x2e1a0)
- SearchPathA (Ordinal: 1229, Address: 0x46860)
- SearchPathW (Ordinal: 1230, Address: 0x2a220)
- SetCachedSigningLevel (Ordinal: 1231, Address: 0x2a3c0)
- SetCalendarInfoA (Ordinal: 1232, Address: 0x58ba0)
- SetCalendarInfoW (Ordinal: 1233, Address: 0x46870)
- SetComPlusPackageInstallStatus (Ordinal: 1234, Address: 0x50d20)
- SetCommBreak (Ordinal: 1235, Address: 0x2de10)
- SetCommConfig (Ordinal: 1236, Address: 0x2de20)
- SetCommMask (Ordinal: 1237, Address: 0x2de30)
- SetCommState (Ordinal: 1238, Address: 0x2de40)
- SetCommTimeouts (Ordinal: 1239, Address: 0x2de50)
- SetComputerNameA (Ordinal: 1240, Address: 0x46880)
- SetComputerNameEx2W (Ordinal: 1241, Address: 0x46890)
- SetComputerNameExA (Ordinal: 1242, Address: 0x468a0)
- SetComputerNameExW (Ordinal: 1243, Address: 0x468b0)
- SetComputerNameW (Ordinal: 1244, Address: 0x468c0)
- SetConsoleActiveScreenBuffer (Ordinal: 1245, Address: 0x2e1b0)
- SetConsoleCP (Ordinal: 1246, Address: 0x2e1c0)
- SetConsoleCtrlHandler (Ordinal: 1247, Address: 0x2e020)
- SetConsoleCursor (Ordinal: 1248, Address: 0x662a0)
- SetConsoleCursorInfo (Ordinal: 1249, Address: 0x2e1d0)
- SetConsoleCursorMode (Ordinal: 1250, Address: 0x66770)
- SetConsoleCursorPosition (Ordinal: 1251, Address: 0x2e1e0)
- SetConsoleDisplayMode (Ordinal: 1252, Address: 0x66930)
- SetConsoleFont (Ordinal: 1253, Address: 0x66da0)
- SetConsoleHardwareState (Ordinal: 1254, Address: 0x662f0)
- SetConsoleHistoryInfo (Ordinal: 1255, Address: 0x66df0)
- SetConsoleIcon (Ordinal: 1256, Address: 0x66e60)
- SetConsoleInputExeNameA (Ordinal: 1257, Address: 0x97449)
- SetConsoleInputExeNameW (Ordinal: 1258, Address: 0x97484)
- SetConsoleKeyShortcuts (Ordinal: 1259, Address: 0x66350)
- SetConsoleLocalEUDC (Ordinal: 1260, Address: 0x667d0)
- SetConsoleMaximumWindowSize (Ordinal: 1261, Address: 0x2a3b0)
- SetConsoleMenuClose (Ordinal: 1262, Address: 0x663e0)
- SetConsoleMode (Ordinal: 1263, Address: 0x2e030)
- SetConsoleNlsMode (Ordinal: 1264, Address: 0x66880)
- SetConsoleNumberOfCommandsA (Ordinal: 1265, Address: 0x65ec0)
- SetConsoleNumberOfCommandsW (Ordinal: 1266, Address: 0x65f70)
- SetConsoleOS2OemFormat (Ordinal: 1267, Address: 0x668d0)
- SetConsoleOutputCP (Ordinal: 1268, Address: 0x2e1f0)
- SetConsolePalette (Ordinal: 1269, Address: 0x66440)
- SetConsoleScreenBufferInfoEx (Ordinal: 1270, Address: 0x2e200)
- SetConsoleScreenBufferSize (Ordinal: 1271, Address: 0x2e210)
- SetConsoleTextAttribute (Ordinal: 1272, Address: 0x2e220)
- SetConsoleTitleA (Ordinal: 1273, Address: 0x65f80)
- SetConsoleTitleW (Ordinal: 1274, Address: 0x2e230)
- SetConsoleWindowInfo (Ordinal: 1275, Address: 0x2e240)
- SetCriticalSectionSpinCount (Ordinal: 1276, Address: 0x9763a)
- SetCurrentConsoleFontEx (Ordinal: 1277, Address: 0x66eb0)
- SetCurrentDirectoryA (Ordinal: 1278, Address: 0x468d0)
- SetCurrentDirectoryW (Ordinal: 1279, Address: 0x2a310)
- SetDefaultCommConfigA (Ordinal: 1280, Address: 0x49db0)
- SetDefaultCommConfigW (Ordinal: 1281, Address: 0x49e40)
- SetDefaultDllDirectories (Ordinal: 1282, Address: 0x976e6)
- SetDllDirectoryA (Ordinal: 1283, Address: 0x43360)
- SetDllDirectoryW (Ordinal: 1284, Address: 0x275b0)
- SetDynamicTimeZoneInformation (Ordinal: 1285, Address: 0x468e0)
- SetEndOfFile (Ordinal: 1286, Address: 0x2dc20)
- SetEnvironmentStringsA (Ordinal: 1287, Address: 0x50ee0)
- SetEnvironmentStringsW (Ordinal: 1288, Address: 0x468f0)
- SetEnvironmentVariableA (Ordinal: 1289, Address: 0x23e50)
- SetEnvironmentVariableW (Ordinal: 1290, Address: 0x27500)
- SetErrorMode (Ordinal: 1291, Address: 0x23ac0)
- SetEvent (Ordinal: 1292, Address: 0x2d7f0)
- SetEventWhenCallbackReturns (Ordinal: 1293, Address: 0x97801)
- SetFileApisToANSI (Ordinal: 1294, Address: 0x46900)
- SetFileApisToOEM (Ordinal: 1295, Address: 0x46910)
- SetFileAttributesA (Ordinal: 1296, Address: 0x2dc30)
- SetFileAttributesTransactedA (Ordinal: 1297, Address: 0x419d0)
- SetFileAttributesTransactedW (Ordinal: 1298, Address: 0x41a20)
- SetFileAttributesW (Ordinal: 1299, Address: 0x2dc40)
- SetFileBandwidthReservation (Ordinal: 1300, Address: 0x409f0)
- SetFileCompletionNotificationModes (Ordinal: 1301, Address: 0x24da0)
- SetFileInformationByHandle (Ordinal: 1302, Address: 0x2dc50)
- SetFileIoOverlappedRange (Ordinal: 1303, Address: 0x46920)
- SetFilePointer (Ordinal: 1304, Address: 0x2dc60)
- SetFilePointerEx (Ordinal: 1305, Address: 0x2dc70)
- SetFileShortNameA (Ordinal: 1306, Address: 0x40b10)
- SetFileShortNameW (Ordinal: 1307, Address: 0x40b50)
- SetFileTime (Ordinal: 1308, Address: 0x2dc80)
- SetFileValidData (Ordinal: 1309, Address: 0x2dc90)
- SetFirmwareEnvironmentVariableA (Ordinal: 1310, Address: 0x429f0)
- SetFirmwareEnvironmentVariableExA (Ordinal: 1311, Address: 0x42a10)
- SetFirmwareEnvironmentVariableExW (Ordinal: 1312, Address: 0x42b00)
- SetFirmwareEnvironmentVariableW (Ordinal: 1313, Address: 0x42bc0)
- SetHandleCount (Ordinal: 1314, Address: 0x28e00)
- SetHandleInformation (Ordinal: 1315, Address: 0x2d680)
- SetInformationJobObject (Ordinal: 1316, Address: 0x26bf0)
- SetIoRateControlInformationJobObject (Ordinal: 1317, Address: 0x50590)
- SetLastConsoleEventActive (Ordinal: 1318, Address: 0x97a7c)
- SetLastError (Ordinal: 1319, Address: 0x1b730)
- SetLocalPrimaryComputerNameA (Ordinal: 1320, Address: 0x3e470)
- SetLocalPrimaryComputerNameW (Ordinal: 1321, Address: 0x3e4d0)
- SetLocalTime (Ordinal: 1322, Address: 0x46930)
- SetLocaleInfoA (Ordinal: 1323, Address: 0x58c80)
- SetLocaleInfoW (Ordinal: 1324, Address: 0x46940)
- SetMailslotInfo (Ordinal: 1325, Address: 0x25100)
- SetMessageWaitingIndicator (Ordinal: 1326, Address: 0x44500)
- SetNamedPipeAttribute (Ordinal: 1327, Address: 0x43940)
- SetNamedPipeHandleState (Ordinal: 1328, Address: 0x2aa70)
- SetPriorityClass (Ordinal: 1329, Address: 0x28b20)
- SetProcessAffinityMask (Ordinal: 1330, Address: 0x45250)
- SetProcessAffinityUpdateMode (Ordinal: 1331, Address: 0x2c630)
- SetProcessDEPPolicy (Ordinal: 1332, Address: 0x2a9e0)
- SetProcessDefaultCpuSets (Ordinal: 1333, Address: 0x97bde)
- SetProcessInformation (Ordinal: 1334, Address: 0x2d5f0)
- SetProcessMitigationPolicy (Ordinal: 1335, Address: 0x97c4e)
- SetProcessPreferredUILanguages (Ordinal: 1336, Address: 0x46950)
- SetProcessPriorityBoost (Ordinal: 1337, Address: 0x2a3a0)
- SetProcessShutdownParameters (Ordinal: 1338, Address: 0x28d00)
- SetProcessWorkingSetSize (Ordinal: 1339, Address: 0x2a290)
- SetProcessWorkingSetSizeEx (Ordinal: 1340, Address: 0x46960)
- SetProtectedPolicy (Ordinal: 1341, Address: 0x97d2a)
- SetSearchPathMode (Ordinal: 1342, Address: 0x43410)
- SetStdHandle (Ordinal: 1343, Address: 0x27190)
- SetStdHandleEx (Ordinal: 1344, Address: 0x46970)
- SetSystemFileCacheSize (Ordinal: 1345, Address: 0x46980)
- SetSystemPowerState (Ordinal: 1346, Address: 0x44520)
- SetSystemTime (Ordinal: 1347, Address: 0x46990)
- SetSystemTimeAdjustment (Ordinal: 1348, Address: 0x3ea70)
- SetTapeParameters (Ordinal: 1349, Address: 0x4fa90)
- SetTapePosition (Ordinal: 1350, Address: 0x4fae0)
- SetTermsrvAppInstallMode (Ordinal: 1351, Address: 0x46ea0)
- SetThreadAffinityMask (Ordinal: 1352, Address: 0x20df0)
- SetThreadContext (Ordinal: 1353, Address: 0x2c890)
- SetThreadErrorMode (Ordinal: 1354, Address: 0x20ff0)
- SetThreadExecutionState (Ordinal: 1355, Address: 0x2a980)
- SetThreadGroupAffinity (Ordinal: 1356, Address: 0x469a0)
- SetThreadIdealProcessor (Ordinal: 1357, Address: 0x26710)
- SetThreadIdealProcessorEx (Ordinal: 1358, Address: 0x469b0)
- SetThreadInformation (Ordinal: 1359, Address: 0x2d600)
- SetThreadLocale (Ordinal: 1360, Address: 0x20dc0)
- SetThreadPreferredUILanguages (Ordinal: 1361, Address: 0x24c10)
- SetThreadPriority (Ordinal: 1362, Address: 0x245a0)
- SetThreadPriorityBoost (Ordinal: 1363, Address: 0x2a3d0)
- SetThreadSelectedCpuSets (Ordinal: 1364, Address: 0x97f3d)
- SetThreadStackGuarantee (Ordinal: 1365, Address: 0x271c0)
- SetThreadToken (Ordinal: 1366, Address: 0x97fa3)
- SetThreadUILanguage (Ordinal: 1367, Address: 0x23270)
- SetThreadpoolStackInformation (Ordinal: 1368, Address: 0x469c0)
- SetThreadpoolThreadMaximum (Ordinal: 1369, Address: 0x98025)
- SetThreadpoolThreadMinimum (Ordinal: 1370, Address: 0x2af70)
- SetThreadpoolTimer (Ordinal: 1371, Address: 0x9806d)
- SetThreadpoolTimerEx (Ordinal: 1372, Address: 0x98093)
- SetThreadpoolWait (Ordinal: 1373, Address: 0x980b8)
- SetThreadpoolWaitEx (Ordinal: 1374, Address: 0x980dc)
- SetTimeZoneInformation (Ordinal: 1375, Address: 0x469f0)
- SetTimerQueueTimer (Ordinal: 1376, Address: 0x51030)
- SetUmsThreadInformation (Ordinal: 1377, Address: 0x4e8c0)
- SetUnhandledExceptionFilter (Ordinal: 1378, Address: 0x26ea0)
- SetUserGeoID (Ordinal: 1379, Address: 0x614c0)
- SetVDMCurrentDirectories (Ordinal: 1380, Address: 0x4d620)
- SetVolumeLabelA (Ordinal: 1381, Address: 0x44060)
- SetVolumeLabelW (Ordinal: 1382, Address: 0x44100)
- SetVolumeMountPointA (Ordinal: 1383, Address: 0x4e5a0)
- SetVolumeMountPointW (Ordinal: 1384, Address: 0x2b8a0)
- SetVolumeMountPointWStub (Ordinal: 1385, Address: 0x46a00)
- SetWaitableTimer (Ordinal: 1386, Address: 0x2d800)
- SetWaitableTimerEx (Ordinal: 1387, Address: 0x981f9)
- SetXStateFeaturesMask (Ordinal: 1388, Address: 0x2a350)
- SetupComm (Ordinal: 1389, Address: 0x2de60)
- ShowConsoleCursor (Ordinal: 1390, Address: 0x664a0)
- SignalObjectAndWait (Ordinal: 1391, Address: 0x2d070)
- SizeofResource (Ordinal: 1392, Address: 0x24460)
- Sleep (Ordinal: 1393, Address: 0x1b7b0)
- SleepConditionVariableCS (Ordinal: 1394, Address: 0x9829d)
- SleepConditionVariableSRW (Ordinal: 1395, Address: 0x982ed)
- SleepEx (Ordinal: 1396, Address: 0x2d810)
- SortCloseHandle (Ordinal: 1397, Address: 0x27480)
- SortGetHandle (Ordinal: 1398, Address: 0x16a30)
- StartThreadpoolIo (Ordinal: 1399, Address: 0x9835c)
- SubmitThreadpoolWork (Ordinal: 1400, Address: 0x9838f)
- SuspendThread (Ordinal: 1401, Address: 0x26730)
- SwitchToFiber (Ordinal: 1402, Address: 0x2df20)
- SwitchToThread (Ordinal: 1403, Address: 0x1e370)
- SystemTimeToFileTime (Ordinal: 1404, Address: 0x27290)
- SystemTimeToTzSpecificLocalTime (Ordinal: 1405, Address: 0x28c10)
- SystemTimeToTzSpecificLocalTimeEx (Ordinal: 1406, Address: 0x98422)
- TerminateJobObject (Ordinal: 1407, Address: 0x28e10)
- TerminateProcess (Ordinal: 1408, Address: 0x28cf0)
- TerminateThread (Ordinal: 1409, Address: 0x27250)
- TermsrvAppInstallMode (Ordinal: 1410, Address: 0xc100)
- TermsrvConvertSysRootToUserDir (Ordinal: 1411, Address: 0xf920)
- TermsrvCreateRegEntry (Ordinal: 1412, Address: 0x23a10)
- TermsrvDeleteKey (Ordinal: 1413, Address: 0x24d40)
- TermsrvDeleteValue (Ordinal: 1414, Address: 0x24ca0)
- TermsrvGetPreSetValue (Ordinal: 1415, Address: 0x20ba0)
- TermsrvGetWindowsDirectoryA (Ordinal: 1416, Address: 0x2b110)
- TermsrvGetWindowsDirectoryW (Ordinal: 1417, Address: 0x10830)
- TermsrvOpenRegEntry (Ordinal: 1418, Address: 0x1d510)
- TermsrvOpenUserClasses (Ordinal: 1419, Address: 0x23b60)
- TermsrvRestoreKey (Ordinal: 1420, Address: 0x47e40)
- TermsrvSetKeySecurity (Ordinal: 1421, Address: 0x21600)
- TermsrvSetValueKey (Ordinal: 1422, Address: 0x20c00)
- TermsrvSyncUserIniFileExt (Ordinal: 1423, Address: 0xdfd0)
- Thread32First (Ordinal: 1424, Address: 0x28b30)
- Thread32Next (Ordinal: 1425, Address: 0x20aa0)
- TlsAlloc (Ordinal: 1426, Address: 0x23ad0)
- TlsFree (Ordinal: 1427, Address: 0x23e40)
- TlsGetValue (Ordinal: 1428, Address: 0x1b450)
- TlsSetValue (Ordinal: 1429, Address: 0x1b7d0)
- Toolhelp32ReadProcessMemory (Ordinal: 1430, Address: 0x487b0)
- TransactNamedPipe (Ordinal: 1431, Address: 0x46a10)
- TransmitCommChar (Ordinal: 1432, Address: 0x2de70)
- TryAcquireSRWLockExclusive (Ordinal: 1433, Address: 0x98673)
- TryAcquireSRWLockShared (Ordinal: 1434, Address: 0x986af)
- TryEnterCriticalSection (Ordinal: 1435, Address: 0x986e8)
- TrySubmitThreadpoolCallback (Ordinal: 1436, Address: 0x28980)
- TzSpecificLocalTimeToSystemTime (Ordinal: 1437, Address: 0x2c8b0)
- TzSpecificLocalTimeToSystemTimeEx (Ordinal: 1438, Address: 0x98767)
- UTRegister (Ordinal: 1439, Address: 0x43440)
- UTUnRegister (Ordinal: 1440, Address: 0x2d0a0)
- UmsThreadYield (Ordinal: 1441, Address: 0x4e8f0)
- UnhandledExceptionFilter (Ordinal: 1442, Address: 0x46a20)
- UnlockFile (Ordinal: 1443, Address: 0x2dca0)
- UnlockFileEx (Ordinal: 1444, Address: 0x2dcb0)
- UnmapViewOfFile (Ordinal: 1445, Address: 0x24ce0)
- UnmapViewOfFileEx (Ordinal: 1446, Address: 0x98823)
- UnregisterApplicationRecoveryCallback (Ordinal: 1447, Address: 0x2a4b0)
- UnregisterApplicationRestart (Ordinal: 1448, Address: 0xaff0)
- UnregisterBadMemoryNotification (Ordinal: 1449, Address: 0x46a30)
- UnregisterConsoleIME (Ordinal: 1450, Address: 0x66930)
- UnregisterWait (Ordinal: 1451, Address: 0xb290)
- UnregisterWaitEx (Ordinal: 1452, Address: 0x28c90)
- UnregisterWaitUntilOOBECompleted (Ordinal: 1453, Address: 0x43e40)
- UpdateCalendarDayOfWeek (Ordinal: 1454, Address: 0x19740)
- UpdateProcThreadAttribute (Ordinal: 1455, Address: 0x9893e)
- UpdateResourceA (Ordinal: 1456, Address: 0x56f60)
- UpdateResourceW (Ordinal: 1457, Address: 0x570e0)
- VDMConsoleOperation (Ordinal: 1458, Address: 0x66fa0)
- VDMOperationStarted (Ordinal: 1459, Address: 0x4d8d0)
- VerLanguageNameA (Ordinal: 1460, Address: 0x2a330)
- VerLanguageNameW (Ordinal: 1461, Address: 0x28cd0)
- VerSetConditionMask (Ordinal: 1462, Address: 0x989fc)
- VerifyConsoleIoHandle (Ordinal: 1463, Address: 0x28e90)
- VerifyScripts (Ordinal: 1464, Address: 0x46a40)
- VerifyVersionInfoA (Ordinal: 1465, Address: 0x22cf0)
- VerifyVersionInfoW (Ordinal: 1466, Address: 0x22d90)
- VirtualAlloc (Ordinal: 1467, Address: 0x228c0)
- VirtualAllocEx (Ordinal: 1468, Address: 0x2a400)
- VirtualAllocExNuma (Ordinal: 1469, Address: 0x2b1a0)
- VirtualFree (Ordinal: 1470, Address: 0x232a0)
- VirtualFreeEx (Ordinal: 1471, Address: 0x2a470)
- VirtualLock (Ordinal: 1472, Address: 0x46a50)
- VirtualProtect (Ordinal: 1473, Address: 0x23a90)
- VirtualProtectEx (Ordinal: 1474, Address: 0x46a60)
- VirtualQuery (Ordinal: 1475, Address: 0x23c10)
- VirtualQueryEx (Ordinal: 1476, Address: 0x274b0)
- VirtualUnlock (Ordinal: 1477, Address: 0x24330)
- WTSGetActiveConsoleSessionId (Ordinal: 1478, Address: 0x26e40)
- WaitCommEvent (Ordinal: 1479, Address: 0x2de80)
- WaitForDebugEvent (Ordinal: 1480, Address: 0x46a70)
- WaitForDebugEventEx (Ordinal: 1481, Address: 0x98b50)
- WaitForMultipleObjects (Ordinal: 1482, Address: 0x2d820)
- WaitForMultipleObjectsEx (Ordinal: 1483, Address: 0x2d830)
- WaitForSingleObject (Ordinal: 1484, Address: 0x2d840)
- WaitForSingleObjectEx (Ordinal: 1485, Address: 0x2d850)
- WaitForThreadpoolIoCallbacks (Ordinal: 1486, Address: 0x98bf8)
- WaitForThreadpoolTimerCallbacks (Ordinal: 1487, Address: 0x98c34)
- WaitForThreadpoolWaitCallbacks (Ordinal: 1488, Address: 0x98c68)
- WaitForThreadpoolWorkCallbacks (Ordinal: 1489, Address: 0x98c9b)
- WaitNamedPipeA (Ordinal: 1490, Address: 0x43b10)
- WaitNamedPipeW (Ordinal: 1491, Address: 0x2d080)
- WakeAllConditionVariable (Ordinal: 1492, Address: 0x98ce6)
- WakeConditionVariable (Ordinal: 1493, Address: 0x98d1e)
- WerGetFlags (Ordinal: 1494, Address: 0x26390)
- WerGetFlagsWorker (Ordinal: 1495, Address: 0x26390)
- WerRegisterFile (Ordinal: 1496, Address: 0x274f0)
- WerRegisterFileWorker (Ordinal: 1497, Address: 0xf270)
- WerRegisterMemoryBlock (Ordinal: 1498, Address: 0x26e00)
- WerRegisterMemoryBlockWorker (Ordinal: 1499, Address: 0x10fb0)
- WerRegisterRuntimeExceptionModule (Ordinal: 1500, Address: 0x28cb0)
- WerRegisterRuntimeExceptionModuleWorker (Ordinal: 1501, Address: 0xdc30)
- WerSetFlags (Ordinal: 1502, Address: 0x25860)
- WerSetFlagsWorker (Ordinal: 1503, Address: 0x25860)
- WerUnregisterFile (Ordinal: 1504, Address: 0x274e0)
- WerUnregisterFileWorker (Ordinal: 1505, Address: 0xf260)
- WerUnregisterMemoryBlock (Ordinal: 1506, Address: 0x271b0)
- WerUnregisterMemoryBlockWorker (Ordinal: 1507, Address: 0x10d40)
- WerUnregisterRuntimeExceptionModule (Ordinal: 1508, Address: 0x46a80)
- WerUnregisterRuntimeExceptionModuleWorker (Ordinal: 1509, Address: 0x50d90)
- WerpCleanupMessageMapping (Ordinal: 1510, Address: 0x50e00)
- WerpGetDebugger (Ordinal: 1511, Address: 0x68940)
- WerpInitiateRemoteRecovery (Ordinal: 1512, Address: 0x50da0)
- WerpLaunchAeDebug (Ordinal: 1513, Address: 0x68f20)
- WerpNotifyLoadStringResource (Ordinal: 1514, Address: 0x46a90)
- WerpNotifyLoadStringResourceEx (Ordinal: 1515, Address: 0x50e50)
- WerpNotifyLoadStringResourceWorker (Ordinal: 1516, Address: 0x50e60)
- WerpNotifyUseStringResource (Ordinal: 1517, Address: 0x46aa0)
- WerpNotifyUseStringResourceWorker (Ordinal: 1518, Address: 0x2c590)
- WerpStringLookup (Ordinal: 1519, Address: 0x50e70)
- WideCharToMultiByte (Ordinal: 1520, Address: 0x1b490)
- WinExec (Ordinal: 1521, Address: 0x45290)
- Wow64DisableWow64FsRedirection (Ordinal: 1522, Address: 0x46ab0)
- Wow64EnableWow64FsRedirection (Ordinal: 1523, Address: 0x2a480)
- Wow64GetThreadContext (Ordinal: 1524, Address: 0x47ea0)
- Wow64GetThreadSelectorEntry (Ordinal: 1525, Address: 0x3eb70)
- Wow64RevertWow64FsRedirection (Ordinal: 1526, Address: 0x46ac0)
- Wow64SetThreadContext (Ordinal: 1527, Address: 0x47ed0)
- Wow64SuspendThread (Ordinal: 1528, Address: 0x47f00)
- WriteConsoleA (Ordinal: 1529, Address: 0x2e040)
- WriteConsoleInputA (Ordinal: 1530, Address: 0x2e250)
- WriteConsoleInputVDMA (Ordinal: 1531, Address: 0x664e0)
- WriteConsoleInputVDMW (Ordinal: 1532, Address: 0x66560)
- WriteConsoleInputW (Ordinal: 1533, Address: 0x2e260)
- WriteConsoleOutputA (Ordinal: 1534, Address: 0x2e270)
- WriteConsoleOutputAttribute (Ordinal: 1535, Address: 0x2e280)
- WriteConsoleOutputCharacterA (Ordinal: 1536, Address: 0x2e290)
- WriteConsoleOutputCharacterW (Ordinal: 1537, Address: 0x2e2a0)
- WriteConsoleOutputW (Ordinal: 1538, Address: 0x2e2b0)
- WriteConsoleW (Ordinal: 1539, Address: 0x2e050)
- WriteFile (Ordinal: 1540, Address: 0x2dcc0)
- WriteFileEx (Ordinal: 1541, Address: 0x2dcd0)
- WriteFileGather (Ordinal: 1542, Address: 0x2dce0)
- WritePrivateProfileSectionA (Ordinal: 1543, Address: 0x3fef0)
- WritePrivateProfileSectionW (Ordinal: 1544, Address: 0x2beb0)
- WritePrivateProfileStringA (Ordinal: 1545, Address: 0x3ff50)
- WritePrivateProfileStringW (Ordinal: 1546, Address: 0x1a430)
- WritePrivateProfileStructA (Ordinal: 1547, Address: 0x3ffc0)
- WritePrivateProfileStructW (Ordinal: 1548, Address: 0x40110)
- WriteProcessMemory (Ordinal: 1549, Address: 0x2a3f0)
- WriteProfileSectionA (Ordinal: 1550, Address: 0x40270)
- WriteProfileSectionW (Ordinal: 1551, Address: 0x40280)
- WriteProfileStringA (Ordinal: 1552, Address: 0x40290)
- WriteProfileStringW (Ordinal: 1553, Address: 0x402a0)
- WriteTapemark (Ordinal: 1554, Address: 0x4fb50)
- ZombifyActCtx (Ordinal: 1555, Address: 0x46ad0)
- ZombifyActCtxWorker (Ordinal: 1556, Address: 0x50c00)
- __C_specific_handler (Ordinal: 1557, Address: 0x99304)
- __chkstk (Ordinal: 1558, Address: 0x99328)
- __misaligned_access (Ordinal: 1559, Address: 0x9934b)
- _hread (Ordinal: 1560, Address: 0x1df40)
- _hwrite (Ordinal: 1561, Address: 0x42da0)
- _lclose (Ordinal: 1562, Address: 0x23660)
- _lcreat (Ordinal: 1563, Address: 0x42cd0)
- _llseek (Ordinal: 1564, Address: 0x1df10)
- _local_unwind (Ordinal: 1565, Address: 0x9939a)
- _lopen (Ordinal: 1566, Address: 0x42d30)
- _lread (Ordinal: 1567, Address: 0x1df40)
- _lwrite (Ordinal: 1568, Address: 0x42da0)
- lstrcat (Ordinal: 1569, Address: 0x26bb0)
- lstrcatA (Ordinal: 1570, Address: 0x26bb0)
- lstrcatW (Ordinal: 1571, Address: 0x2a250)
- lstrcmp (Ordinal: 1572, Address: 0x23690)
- lstrcmpA (Ordinal: 1573, Address: 0x23690)
- lstrcmpW (Ordinal: 1574, Address: 0x21b30)
- lstrcmpi (Ordinal: 1575, Address: 0x20c80)
- lstrcmpiA (Ordinal: 1576, Address: 0x20c80)
- lstrcmpiW (Ordinal: 1577, Address: 0x1d6c0)
- lstrcpy (Ordinal: 1578, Address: 0x245d0)
- lstrcpyA (Ordinal: 1579, Address: 0x245d0)
- lstrcpyW (Ordinal: 1580, Address: 0x26d30)
- lstrcpyn (Ordinal: 1581, Address: 0x46ae0)
- lstrcpynA (Ordinal: 1582, Address: 0x46ae0)
- lstrcpynW (Ordinal: 1583, Address: 0x291a0)
- lstrlen (Ordinal: 1584, Address: 0x20c60)
- lstrlenA (Ordinal: 1585, Address: 0x20c60)
- lstrlenW (Ordinal: 1586, Address: 0x1d6d0)
- timeBeginPeriod (Ordinal: 1587, Address: 0x25c50)
- timeEndPeriod (Ordinal: 1588, Address: 0x24470)
- timeGetDevCaps (Ordinal: 1589, Address: 0x2a2a0)
- timeGetSystemTime (Ordinal: 1590, Address: 0x47f30)
- timeGetTime (Ordinal: 1591, Address: 0x23fc0)
- uaw_lstrcmpW (Ordinal: 1592, Address: 0x21b30)
- uaw_lstrcmpiW (Ordinal: 1593, Address: 0x1d6c0)
- uaw_lstrlenW (Ordinal: 1594, Address: 0x3aac0)
- uaw_wcschr (Ordinal: 1595, Address: 0x3ab10)
- uaw_wcscpy (Ordinal: 1596, Address: 0x3ab30)
- uaw_wcsicmp (Ordinal: 1597, Address: 0x3ab60)
- uaw_wcslen (Ordinal: 1598, Address: 0x3ab70)
- uaw_wcsrchr (Ordinal: 1599, Address: 0x3ab90)
Imported DLLs & Functions
api-ms-win-core-appcompat-l1-1-1.dll
- BaseCheckAppcompatCache (Address: 0x180075318)
- BaseCheckAppcompatCacheEx (Address: 0x1800752e0)
- BaseCleanupAppcompatCacheSupport (Address: 0x1800752e8)
- BaseDumpAppcompatCache (Address: 0x1800752f8)
- BaseFlushAppcompatCache (Address: 0x180075300)
- BaseFreeAppCompatDataForProcess (Address: 0x180075310)
- BaseInitAppcompatCacheSupport (Address: 0x1800752f0)
- BaseReadAppCompatDataForProcess (Address: 0x1800752d8)
- BaseUpdateAppcompatCache (Address: 0x180075308)
api-ms-win-core-comm-l1-1-0.dll
- ClearCommBreak (Address: 0x1800753b0)
- ClearCommError (Address: 0x180075368)
- EscapeCommFunction (Address: 0x180075360)
- GetCommConfig (Address: 0x180075358)
- GetCommMask (Address: 0x180075350)
- GetCommModemStatus (Address: 0x180075348)
- GetCommProperties (Address: 0x1800753a8)
- GetCommState (Address: 0x180075338)
- GetCommTimeouts (Address: 0x180075330)
- PurgeComm (Address: 0x180075328)
- SetCommBreak (Address: 0x180075340)
- SetCommConfig (Address: 0x180075370)
- SetCommMask (Address: 0x180075378)
- SetCommState (Address: 0x180075380)
- SetCommTimeouts (Address: 0x180075388)
- SetupComm (Address: 0x180075390)
- TransmitCommChar (Address: 0x180075398)
- WaitCommEvent (Address: 0x1800753a0)
api-ms-win-core-console-l1-1-0.dll
- AllocConsole (Address: 0x1800753c0)
- GetConsoleCP (Address: 0x180075428)
- GetConsoleMode (Address: 0x180075420)
- GetConsoleOutputCP (Address: 0x180075418)
- GetNumberOfConsoleInputEvents (Address: 0x180075410)
- PeekConsoleInputA (Address: 0x180075408)
- ReadConsoleA (Address: 0x180075400)
- ReadConsoleInputA (Address: 0x1800753f8)
- ReadConsoleInputW (Address: 0x1800753f0)
- ReadConsoleW (Address: 0x1800753e8)
- SetConsoleCtrlHandler (Address: 0x1800753e0)
- SetConsoleMode (Address: 0x1800753d8)
- WriteConsoleA (Address: 0x1800753d0)
- WriteConsoleW (Address: 0x1800753c8)
api-ms-win-core-console-l2-1-0.dll
- AttachConsole (Address: 0x1800754d0)
- CreateConsoleScreenBuffer (Address: 0x1800754d8)
- FillConsoleOutputAttribute (Address: 0x1800754e0)
- FillConsoleOutputCharacterA (Address: 0x180075560)
- FillConsoleOutputCharacterW (Address: 0x180075558)
- FlushConsoleInputBuffer (Address: 0x180075450)
- FreeConsole (Address: 0x1800754a8)
- GenerateConsoleCtrlEvent (Address: 0x180075458)
- GetConsoleCursorInfo (Address: 0x1800754c0)
- GetConsoleScreenBufferInfo (Address: 0x1800754b8)
- GetConsoleScreenBufferInfoEx (Address: 0x1800754b0)
- GetConsoleTitleW (Address: 0x1800754e8)
- GetLargestConsoleWindowSize (Address: 0x1800754a0)
- PeekConsoleInputW (Address: 0x180075498)
- ReadConsoleOutputA (Address: 0x180075490)
- ReadConsoleOutputAttribute (Address: 0x180075488)
- ReadConsoleOutputCharacterA (Address: 0x180075480)
- ReadConsoleOutputCharacterW (Address: 0x180075478)
- ReadConsoleOutputW (Address: 0x180075470)
- ScrollConsoleScreenBufferA (Address: 0x180075468)
- ScrollConsoleScreenBufferW (Address: 0x180075460)
- SetConsoleActiveScreenBuffer (Address: 0x180075448)
- SetConsoleCP (Address: 0x180075438)
- SetConsoleCursorInfo (Address: 0x180075440)
- SetConsoleCursorPosition (Address: 0x1800754c8)
- SetConsoleOutputCP (Address: 0x1800754f0)
- SetConsoleScreenBufferInfoEx (Address: 0x1800754f8)
- SetConsoleScreenBufferSize (Address: 0x180075500)
- SetConsoleTextAttribute (Address: 0x180075508)
- SetConsoleTitleW (Address: 0x180075510)
- SetConsoleWindowInfo (Address: 0x180075518)
- WriteConsoleInputA (Address: 0x180075520)
- WriteConsoleInputW (Address: 0x180075528)
- WriteConsoleOutputA (Address: 0x180075530)
- WriteConsoleOutputAttribute (Address: 0x180075538)
- WriteConsoleOutputCharacterA (Address: 0x180075540)
- WriteConsoleOutputCharacterW (Address: 0x180075548)
- WriteConsoleOutputW (Address: 0x180075550)
api-ms-win-core-datetime-l1-1-1.dll
- GetDateFormatA (Address: 0x180075570)
- GetDateFormatEx (Address: 0x180075590)
- GetDateFormatW (Address: 0x180075588)
- GetTimeFormatA (Address: 0x180075578)
- GetTimeFormatEx (Address: 0x180075598)
- GetTimeFormatW (Address: 0x180075580)
api-ms-win-core-datetime-l1-1-2.dll
- GetDurationFormatEx (Address: 0x1800755a8)
api-ms-win-core-debug-l1-1-1.dll
- CheckRemoteDebuggerPresent (Address: 0x1800755f8)
- ContinueDebugEvent (Address: 0x1800755f0)
- DebugActiveProcess (Address: 0x1800755e8)
- DebugActiveProcessStop (Address: 0x1800755e0)
- DebugBreak (Address: 0x1800755d8)
- IsDebuggerPresent (Address: 0x1800755d0)
- OutputDebugStringA (Address: 0x1800755b8)
- OutputDebugStringW (Address: 0x1800755c0)
- WaitForDebugEvent (Address: 0x1800755c8)
api-ms-win-core-delayload-l1-1-1.dll
- DelayLoadFailureHook (Address: 0x180075608)
api-ms-win-core-enclave-l1-1-0.dll
- CreateEnclave (Address: 0x180075630)
- InitializeEnclave (Address: 0x180075628)
- IsEnclaveTypeSupported (Address: 0x180075620)
- LoadEnclaveData (Address: 0x180075618)
api-ms-win-core-errorhandling-l1-1-1.dll
- GetErrorMode (Address: 0x180075660)
- GetLastError (Address: 0x180075668)
- RaiseException (Address: 0x180075650)
- SetErrorMode (Address: 0x180075640)
- SetLastError (Address: 0x180075648)
- SetUnhandledExceptionFilter (Address: 0x180075670)
- UnhandledExceptionFilter (Address: 0x180075658)
api-ms-win-core-errorhandling-l1-1-3.dll
- GetThreadErrorMode (Address: 0x180075688)
- SetThreadErrorMode (Address: 0x180075680)
api-ms-win-core-fibers-l1-1-1.dll
- FlsAlloc (Address: 0x1800756b0)
- FlsFree (Address: 0x1800756a8)
- FlsGetValue (Address: 0x180075698)
- FlsSetValue (Address: 0x1800756a0)
api-ms-win-core-fibers-l2-1-1.dll
- ConvertFiberToThread (Address: 0x1800756d0)
- ConvertThreadToFiber (Address: 0x1800756d8)
- ConvertThreadToFiberEx (Address: 0x1800756e0)
- CreateFiber (Address: 0x1800756e8)
- CreateFiberEx (Address: 0x1800756f0)
- DeleteFiber (Address: 0x1800756c8)
- SwitchToFiber (Address: 0x1800756c0)
api-ms-win-core-file-l1-2-1.dll
- CompareFileTime (Address: 0x180075928)
- CreateDirectoryA (Address: 0x180075920)
- CreateDirectoryW (Address: 0x180075788)
- CreateFile2 (Address: 0x180075780)
- CreateFileA (Address: 0x180075930)
- CreateFileW (Address: 0x180075778)
- DefineDosDeviceW (Address: 0x180075770)
- DeleteFileA (Address: 0x180075768)
- DeleteFileW (Address: 0x180075760)
- FileTimeToLocalFileTime (Address: 0x180075758)
- FindClose (Address: 0x180075750)
- FindCloseChangeNotification (Address: 0x180075738)
- FindFirstChangeNotificationA (Address: 0x180075730)
- FindFirstChangeNotificationW (Address: 0x180075728)
- FindFirstFileA (Address: 0x180075720)
- FindFirstFileExA (Address: 0x180075880)
- FindFirstFileExW (Address: 0x180075718)
- FindFirstFileW (Address: 0x180075710)
- FindNextChangeNotification (Address: 0x180075708)
- FindNextFileA (Address: 0x180075700)
- FindNextFileW (Address: 0x180075740)
- FlushFileBuffers (Address: 0x180075748)
- GetCompressedFileSizeA (Address: 0x180075918)
- GetCompressedFileSizeW (Address: 0x180075908)
- GetDiskFreeSpaceA (Address: 0x180075790)
- GetDiskFreeSpaceExA (Address: 0x180075798)
- GetDiskFreeSpaceExW (Address: 0x1800757a0)
- GetDiskFreeSpaceW (Address: 0x1800757a8)
- GetDriveTypeA (Address: 0x1800757b0)
- GetDriveTypeW (Address: 0x1800757b8)
- GetFileAttributesA (Address: 0x1800757c0)
- GetFileAttributesExA (Address: 0x1800757c8)
- GetFileAttributesExW (Address: 0x1800757d0)
- GetFileAttributesW (Address: 0x1800757d8)
- GetFileInformationByHandle (Address: 0x1800757e0)
- GetFileSize (Address: 0x1800757e8)
- GetFileSizeEx (Address: 0x1800757f0)
- GetFileTime (Address: 0x1800757f8)
- GetFileType (Address: 0x180075800)
- GetFinalPathNameByHandleA (Address: 0x180075808)
- GetFinalPathNameByHandleW (Address: 0x180075810)
- GetFullPathNameA (Address: 0x180075818)
- GetFullPathNameW (Address: 0x180075820)
- GetLogicalDriveStringsW (Address: 0x180075828)
- GetTempFileNameW (Address: 0x180075830)
- GetTempPathW (Address: 0x180075838)
- GetVolumeInformationByHandleW (Address: 0x180075840)
- GetVolumeInformationW (Address: 0x180075848)
- LocalFileTimeToFileTime (Address: 0x180075850)
- LockFile (Address: 0x180075858)
- LockFileEx (Address: 0x180075860)
- QueryDosDeviceW (Address: 0x180075868)
- ReadFile (Address: 0x180075870)
- ReadFileEx (Address: 0x180075878)
- ReadFileScatter (Address: 0x180075888)
- RemoveDirectoryA (Address: 0x180075890)
- RemoveDirectoryW (Address: 0x180075898)
- SetEndOfFile (Address: 0x1800758a0)
- SetFileAttributesA (Address: 0x1800758a8)
- SetFileAttributesW (Address: 0x1800758b0)
- SetFileInformationByHandle (Address: 0x1800758b8)
- SetFileIoOverlappedRange (Address: 0x180075910)
- SetFilePointer (Address: 0x1800758c0)
- SetFilePointerEx (Address: 0x1800758c8)
- SetFileTime (Address: 0x1800758d0)
- SetFileValidData (Address: 0x1800758d8)
- UnlockFile (Address: 0x1800758e0)
- UnlockFileEx (Address: 0x1800758e8)
- WriteFile (Address: 0x1800758f0)
- WriteFileEx (Address: 0x1800758f8)
- WriteFileGather (Address: 0x180075900)
api-ms-win-core-file-l1-2-2.dll
- FindFirstFileNameW (Address: 0x180075968)
- FindFirstStreamW (Address: 0x180075940)
- FindNextFileNameW (Address: 0x180075960)
- GetTempFileNameA (Address: 0x180075958)
- GetTempPathA (Address: 0x180075950)
- GetVolumeInformationA (Address: 0x180075948)
api-ms-win-core-file-l2-1-1.dll
- CopyFile2 (Address: 0x1800759a8)
- CopyFileExW (Address: 0x1800759b8)
- CreateDirectoryExW (Address: 0x1800759d0)
- CreateHardLinkW (Address: 0x180075990)
- CreateSymbolicLinkW (Address: 0x1800759c0)
- GetFileInformationByHandleEx (Address: 0x180075998)
- MoveFileExW (Address: 0x1800759a0)
- MoveFileWithProgressW (Address: 0x1800759c8)
- OpenFileById (Address: 0x180075978)
- ReadDirectoryChangesW (Address: 0x180075980)
- ReOpenFile (Address: 0x180075988)
- ReplaceFileW (Address: 0x1800759b0)
api-ms-win-core-file-l2-1-2.dll
- CopyFileW (Address: 0x1800759e8)
- CreateHardLinkA (Address: 0x1800759e0)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x180075a10)
- DuplicateHandle (Address: 0x180075a08)
- GetHandleInformation (Address: 0x180075a00)
- SetHandleInformation (Address: 0x1800759f8)
api-ms-win-core-heap-l1-2-0.dll
- GetProcessHeap (Address: 0x180075a88)
- GetProcessHeaps (Address: 0x180075a70)
- HeapAlloc (Address: 0x180075a78)
- HeapCompact (Address: 0x180075a68)
- HeapCreate (Address: 0x180075a60)
- HeapDestroy (Address: 0x180075a58)
- HeapFree (Address: 0x180075a50)
- HeapLock (Address: 0x180075a40)
- HeapQueryInformation (Address: 0x180075a20)
- HeapReAlloc (Address: 0x180075a80)
- HeapSetInformation (Address: 0x180075a28)
- HeapUnlock (Address: 0x180075a30)
- HeapValidate (Address: 0x180075a38)
- HeapWalk (Address: 0x180075a48)
api-ms-win-core-heap-l2-1-0.dll
- LocalFree (Address: 0x180075a98)
api-ms-win-core-io-l1-1-1.dll
- CancelIo (Address: 0x180075ac8)
- CancelIoEx (Address: 0x180075ab8)
- CancelSynchronousIo (Address: 0x180075aa8)
- CreateIoCompletionPort (Address: 0x180075ab0)
- DeviceIoControl (Address: 0x180075ac0)
- GetOverlappedResult (Address: 0x180075ae8)
- GetQueuedCompletionStatus (Address: 0x180075ae0)
- GetQueuedCompletionStatusEx (Address: 0x180075ad8)
- PostQueuedCompletionStatus (Address: 0x180075ad0)
api-ms-win-core-job-l1-1-0.dll
- IsProcessInJob (Address: 0x180075af8)
api-ms-win-core-largeinteger-l1-1-0.dll
- MulDiv (Address: 0x180075b08)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x180075b70)
- EnumResourceLanguagesExA (Address: 0x180075b78)
- EnumResourceLanguagesExW (Address: 0x180075b80)
- EnumResourceNamesExA (Address: 0x180075b88)
- EnumResourceNamesExW (Address: 0x180075b90)
- EnumResourceTypesExA (Address: 0x180075bc8)
- EnumResourceTypesExW (Address: 0x180075bd0)
- FindResourceExW (Address: 0x180075b68)
- FindStringOrdinal (Address: 0x180075b60)
- FreeLibrary (Address: 0x180075bc0)
- FreeLibraryAndExitThread (Address: 0x180075b30)
- FreeResource (Address: 0x180075b58)
- GetModuleFileNameA (Address: 0x180075ba0)
- GetModuleFileNameW (Address: 0x180075b48)
- GetModuleHandleA (Address: 0x180075b40)
- GetModuleHandleExA (Address: 0x180075ba8)
- GetModuleHandleExW (Address: 0x180075b28)
- GetModuleHandleW (Address: 0x180075b38)
- GetProcAddress (Address: 0x180075bb8)
- LoadLibraryExA (Address: 0x180075b20)
- LoadLibraryExW (Address: 0x180075bb0)
- LoadResource (Address: 0x180075b18)
- LockResource (Address: 0x180075b50)
- SizeofResource (Address: 0x180075b98)
api-ms-win-core-libraryloader-l1-2-1.dll
- FindResourceW (Address: 0x180075be0)
- LoadLibraryA (Address: 0x180075be8)
- LoadLibraryW (Address: 0x180075bf0)
api-ms-win-core-libraryloader-l2-1-0.dll
- LoadPackagedLibrary (Address: 0x180075c00)
api-ms-win-core-localization-l1-2-1.dll
- ConvertDefaultLocale (Address: 0x180075c40)
- EnumSystemLocalesA (Address: 0x180075ce8)
- EnumSystemLocalesW (Address: 0x180075cf0)
- FindNLSString (Address: 0x180075d08)
- FindNLSStringEx (Address: 0x180075cf8)
- FormatMessageA (Address: 0x180075d10)
- FormatMessageW (Address: 0x180075d18)
- GetACP (Address: 0x180075d20)
- GetCalendarInfoEx (Address: 0x180075cd0)
- GetCalendarInfoW (Address: 0x180075cd8)
- GetCPInfo (Address: 0x180075d28)
- GetCPInfoExW (Address: 0x180075d30)
- GetFileMUIInfo (Address: 0x180075c28)
- GetFileMUIPath (Address: 0x180075c18)
- GetLocaleInfoA (Address: 0x180075d58)
- GetLocaleInfoEx (Address: 0x180075c10)
- GetLocaleInfoW (Address: 0x180075d60)
- GetNLSVersion (Address: 0x180075d38)
- GetNLSVersionEx (Address: 0x180075c20)
- GetOEMCP (Address: 0x180075d68)
- GetProcessPreferredUILanguages (Address: 0x180075d70)
- GetSystemDefaultLangID (Address: 0x180075d78)
- GetSystemDefaultLCID (Address: 0x180075d80)
- GetSystemPreferredUILanguages (Address: 0x180075c30)
- GetThreadLocale (Address: 0x180075d88)
- GetThreadPreferredUILanguages (Address: 0x180075db0)
- GetThreadUILanguage (Address: 0x180075c80)
- GetUILanguageInfo (Address: 0x180075c78)
- GetUserDefaultLangID (Address: 0x180075d90)
- GetUserDefaultLCID (Address: 0x180075d98)
- GetUserPreferredUILanguages (Address: 0x180075c70)
- IdnToAscii (Address: 0x180075c68)
- IdnToUnicode (Address: 0x180075c58)
- IsDBCSLeadByte (Address: 0x180075ce0)
- IsDBCSLeadByteEx (Address: 0x180075da0)
- IsNLSDefinedString (Address: 0x180075da8)
- IsValidCodePage (Address: 0x180075db8)
- IsValidLanguageGroup (Address: 0x180075cc8)
- IsValidLocale (Address: 0x180075cc0)
- IsValidLocaleName (Address: 0x180075c50)
- IsValidNLSVersion (Address: 0x180075d40)
- LCMapStringA (Address: 0x180075cb8)
- LCMapStringEx (Address: 0x180075c48)
- LCMapStringW (Address: 0x180075cb0)
- LocaleNameToLCID (Address: 0x180075ca0)
- ResolveLocaleName (Address: 0x180075c38)
- SetCalendarInfoW (Address: 0x180075ca8)
- SetLocaleInfoW (Address: 0x180075c98)
- SetProcessPreferredUILanguages (Address: 0x180075c88)
- SetThreadLocale (Address: 0x180075d00)
- SetThreadPreferredUILanguages (Address: 0x180075d48)
- SetThreadUILanguage (Address: 0x180075d50)
- VerLanguageNameA (Address: 0x180075c90)
- VerLanguageNameW (Address: 0x180075c60)
api-ms-win-core-localization-l2-1-0.dll
- EnumCalendarInfoExEx (Address: 0x180075df8)
- EnumCalendarInfoExW (Address: 0x180075dd0)
- EnumCalendarInfoW (Address: 0x180075e08)
- EnumDateFormatsExEx (Address: 0x180075e18)
- EnumDateFormatsExW (Address: 0x180075dd8)
- EnumDateFormatsW (Address: 0x180075de0)
- EnumSystemCodePagesW (Address: 0x180075de8)
- EnumTimeFormatsEx (Address: 0x180075e10)
- EnumTimeFormatsW (Address: 0x180075df0)
- GetCurrencyFormatEx (Address: 0x180075dc8)
- GetNumberFormatEx (Address: 0x180075e00)
api-ms-win-core-localization-private-l1-1-0.dll
- NlsCheckPolicy (Address: 0x180075e50)
- NlsEventDataDescCreate (Address: 0x180075e40)
- NlsGetCacheUpdateCount (Address: 0x180075e28)
- NlsUpdateLocale (Address: 0x180075e30)
- NlsUpdateSystemLocale (Address: 0x180075e38)
- NlsWriteEtwEvent (Address: 0x180075e48)
api-ms-win-core-memory-l1-1-2.dll
- AllocateUserPhysicalPages (Address: 0x180075ef0)
- AllocateUserPhysicalPagesNuma (Address: 0x180075ee8)
- CreateFileMappingNumaW (Address: 0x180075f48)
- CreateFileMappingW (Address: 0x180075f68)
- CreateMemoryResourceNotification (Address: 0x180075f40)
- FlushViewOfFile (Address: 0x180075f38)
- FreeUserPhysicalPages (Address: 0x180075ee0)
- GetLargePageMinimum (Address: 0x180075f30)
- GetMemoryErrorHandlingCapabilities (Address: 0x180075f58)
- GetProcessWorkingSetSizeEx (Address: 0x180075f20)
- GetSystemFileCacheSize (Address: 0x180075ea8)
- GetWriteWatch (Address: 0x180075f00)
- MapUserPhysicalPages (Address: 0x180075ed8)
- MapViewOfFile (Address: 0x180075ea0)
- MapViewOfFileEx (Address: 0x180075e98)
- OpenFileMappingW (Address: 0x180075f50)
- QueryMemoryResourceNotification (Address: 0x180075e90)
- ReadProcessMemory (Address: 0x180075e88)
- RegisterBadMemoryNotification (Address: 0x180075ed0)
- ResetWriteWatch (Address: 0x180075ef8)
- SetProcessWorkingSetSizeEx (Address: 0x180075e80)
- SetSystemFileCacheSize (Address: 0x180075e78)
- UnmapViewOfFile (Address: 0x180075e70)
- UnregisterBadMemoryNotification (Address: 0x180075ec8)
- VirtualAlloc (Address: 0x180075e68)
- VirtualAllocEx (Address: 0x180075e60)
- VirtualAllocExNuma (Address: 0x180075eb0)
- VirtualFree (Address: 0x180075eb8)
- VirtualFreeEx (Address: 0x180075ec0)
- VirtualLock (Address: 0x180075f60)
- VirtualProtect (Address: 0x180075f70)
- VirtualProtectEx (Address: 0x180075f78)
- VirtualQuery (Address: 0x180075f28)
- VirtualQueryEx (Address: 0x180075f18)
- VirtualUnlock (Address: 0x180075f10)
- WriteProcessMemory (Address: 0x180075f08)
api-ms-win-core-namedpipe-l1-2-0.dll
- ConnectNamedPipe (Address: 0x180075fa0)
- CreateNamedPipeW (Address: 0x180075f88)
- CreatePipe (Address: 0x180075fa8)
- DisconnectNamedPipe (Address: 0x180075fb0)
- GetNamedPipeClientComputerNameW (Address: 0x180075f98)
- PeekNamedPipe (Address: 0x180075fc8)
- SetNamedPipeHandleState (Address: 0x180075fb8)
- TransactNamedPipe (Address: 0x180075fc0)
- WaitNamedPipeW (Address: 0x180075f90)
api-ms-win-core-namedpipe-l1-2-2.dll
- CallNamedPipeW (Address: 0x180075fe0)
- GetNamedPipeHandleStateW (Address: 0x180075fd8)
api-ms-win-core-namespace-l1-1-0.dll
- AddSIDToBoundaryDescriptor (Address: 0x180075ff0)
- ClosePrivateNamespace (Address: 0x180076010)
- CreateBoundaryDescriptorW (Address: 0x180076000)
- CreatePrivateNamespaceW (Address: 0x180075ff8)
- DeleteBoundaryDescriptor (Address: 0x180076018)
- OpenPrivateNamespaceW (Address: 0x180076008)
api-ms-win-core-normalization-l1-1-0.dll
- GetStringScripts (Address: 0x180076040)
- IdnToNameprepUnicode (Address: 0x180076028)
- IsNormalizedString (Address: 0x180076030)
- NormalizeString (Address: 0x180076038)
- VerifyScripts (Address: 0x180076048)
api-ms-win-core-processenvironment-l1-2-0.dll
- ExpandEnvironmentStringsA (Address: 0x1800760e8)
- ExpandEnvironmentStringsW (Address: 0x180076080)
- FreeEnvironmentStringsA (Address: 0x180076110)
- FreeEnvironmentStringsW (Address: 0x180076058)
- GetCommandLineA (Address: 0x180076060)
- GetCommandLineW (Address: 0x180076068)
- GetCurrentDirectoryA (Address: 0x180076070)
- GetCurrentDirectoryW (Address: 0x180076108)
- GetEnvironmentStrings (Address: 0x180076100)
- GetEnvironmentStringsW (Address: 0x180076078)
- GetEnvironmentVariableA (Address: 0x1800760d8)
- GetEnvironmentVariableW (Address: 0x1800760f8)
- GetStdHandle (Address: 0x1800760d0)
- NeedCurrentDirectoryForExePathA (Address: 0x1800760c8)
- NeedCurrentDirectoryForExePathW (Address: 0x1800760c0)
- SearchPathA (Address: 0x1800760f0)
- SearchPathW (Address: 0x1800760b8)
- SetCurrentDirectoryA (Address: 0x1800760b0)
- SetCurrentDirectoryW (Address: 0x1800760a8)
- SetEnvironmentStringsW (Address: 0x1800760e0)
- SetEnvironmentVariableA (Address: 0x1800760a0)
- SetEnvironmentVariableW (Address: 0x180076098)
- SetStdHandle (Address: 0x180076090)
- SetStdHandleEx (Address: 0x180076088)
api-ms-win-core-processsnapshot-l1-1-0.dll
- PssCaptureSnapshot (Address: 0x180076140)
- PssDuplicateSnapshot (Address: 0x180076160)
- PssFreeSnapshot (Address: 0x180076148)
- PssQuerySnapshot (Address: 0x180076150)
- PssWalkMarkerCreate (Address: 0x180076138)
- PssWalkMarkerFree (Address: 0x180076168)
- PssWalkMarkerGetPosition (Address: 0x180076128)
- PssWalkMarkerSeekToBeginning (Address: 0x180076130)
- PssWalkMarkerSetPosition (Address: 0x180076120)
- PssWalkSnapshot (Address: 0x180076158)
api-ms-win-core-processthreads-l1-1-2.dll
- CreateProcessA (Address: 0x180076198)
- CreateProcessW (Address: 0x180076180)
- CreateRemoteThread (Address: 0x1800761c0)
- CreateRemoteThreadEx (Address: 0x1800761a0)
- DeleteProcThreadAttributeList (Address: 0x180076190)
- FlushInstructionCache (Address: 0x180076218)
- GetExitCodeProcess (Address: 0x180076188)
- GetExitCodeThread (Address: 0x180076310)
- GetPriorityClass (Address: 0x180076308)
- GetProcessHandleCount (Address: 0x180076300)
- GetProcessId (Address: 0x1800762f0)
- GetProcessIdOfThread (Address: 0x1800762f8)
- GetProcessMitigationPolicy (Address: 0x180076220)
- GetProcessPriorityBoost (Address: 0x1800761d8)
- GetProcessTimes (Address: 0x1800762e8)
- GetProcessVersion (Address: 0x1800761e0)
- GetStartupInfoW (Address: 0x1800762e0)
- GetSystemTimes (Address: 0x1800762d8)
- GetThreadContext (Address: 0x1800762d0)
- GetThreadId (Address: 0x1800762c8)
- GetThreadIdealProcessorEx (Address: 0x1800762c0)
- GetThreadInformation (Address: 0x180076250)
- GetThreadIOPendingFlag (Address: 0x1800761c8)
- GetThreadPriority (Address: 0x1800762b0)
- GetThreadPriorityBoost (Address: 0x1800762a8)
- GetThreadTimes (Address: 0x1800762b8)
- InitializeProcThreadAttributeList (Address: 0x1800761b0)
- IsProcessorFeaturePresent (Address: 0x1800762a0)
- OpenProcess (Address: 0x180076298)
- OpenProcessToken (Address: 0x1800761b8)
- OpenThread (Address: 0x180076290)
- ProcessIdToSessionId (Address: 0x180076288)
- QueryProcessAffinityUpdateMode (Address: 0x1800761e8)
- QueueUserAPC (Address: 0x180076280)
- ResumeThread (Address: 0x180076278)
- SetPriorityClass (Address: 0x180076270)
- SetProcessAffinityUpdateMode (Address: 0x1800761f0)
- SetProcessMitigationPolicy (Address: 0x180076178)
- SetProcessPriorityBoost (Address: 0x1800761d0)
- SetProcessShutdownParameters (Address: 0x180076268)
- SetThreadContext (Address: 0x180076260)
- SetThreadIdealProcessorEx (Address: 0x180076318)
- SetThreadInformation (Address: 0x180076248)
- SetThreadPriority (Address: 0x180076258)
- SetThreadPriorityBoost (Address: 0x180076240)
- SetThreadStackGuarantee (Address: 0x180076238)
- SuspendThread (Address: 0x180076230)
- SwitchToThread (Address: 0x180076228)
- TerminateProcess (Address: 0x180076320)
- TerminateThread (Address: 0x180076210)
- TlsAlloc (Address: 0x180076208)
- TlsFree (Address: 0x180076200)
- TlsSetValue (Address: 0x1800761f8)
- UpdateProcThreadAttribute (Address: 0x1800761a8)
api-ms-win-core-processthreads-l1-1-3.dll
- GetProcessInformation (Address: 0x180076330)
- GetProcessShutdownParameters (Address: 0x180076338)
- SetProcessInformation (Address: 0x180076348)
- SetThreadIdealProcessor (Address: 0x180076340)
api-ms-win-core-processtopology-l1-2-0.dll
- GetProcessGroupAffinity (Address: 0x180076360)
- GetThreadGroupAffinity (Address: 0x180076368)
- SetThreadGroupAffinity (Address: 0x180076358)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x180076378)
- QueryPerformanceFrequency (Address: 0x180076380)
api-ms-win-core-psapi-ansi-l1-1-0.dll
- K32EnumPageFilesA (Address: 0x1800763a0)
- K32GetDeviceDriverBaseNameA (Address: 0x1800763b0)
- K32GetDeviceDriverFileNameA (Address: 0x1800763a8)
- K32GetMappedFileNameA (Address: 0x1800763b8)
- K32GetModuleBaseNameA (Address: 0x1800763c8)
- K32GetModuleFileNameExA (Address: 0x1800763c0)
- K32GetProcessImageFileNameA (Address: 0x180076390)
- QueryFullProcessImageNameA (Address: 0x180076398)
api-ms-win-core-psapi-l1-1-0.dll
- K32EmptyWorkingSet (Address: 0x180076448)
- K32EnumDeviceDrivers (Address: 0x180076410)
- K32EnumPageFilesW (Address: 0x1800763e8)
- K32EnumProcesses (Address: 0x180076478)
- K32EnumProcessModules (Address: 0x180076470)
- K32EnumProcessModulesEx (Address: 0x180076468)
- K32GetDeviceDriverBaseNameW (Address: 0x180076408)
- K32GetDeviceDriverFileNameW (Address: 0x180076400)
- K32GetMappedFileNameW (Address: 0x180076418)
- K32GetModuleBaseNameW (Address: 0x180076460)
- K32GetModuleFileNameExW (Address: 0x180076458)
- K32GetModuleInformation (Address: 0x180076450)
- K32GetPerformanceInfo (Address: 0x1800763f0)
- K32GetProcessImageFileNameW (Address: 0x1800763e0)
- K32GetProcessMemoryInfo (Address: 0x1800763f8)
- K32GetWsChanges (Address: 0x180076428)
- K32GetWsChangesEx (Address: 0x180076420)
- K32InitializeProcessForWsWatch (Address: 0x180076430)
- K32QueryWorkingSet (Address: 0x180076440)
- K32QueryWorkingSetEx (Address: 0x180076438)
- QueryFullProcessImageNameW (Address: 0x1800763d8)
api-ms-win-core-realtime-l1-1-0.dll
- QueryIdleProcessorCycleTime (Address: 0x180076488)
- QueryIdleProcessorCycleTimeEx (Address: 0x180076490)
- QueryProcessCycleTime (Address: 0x1800764a0)
- QueryThreadCycleTime (Address: 0x1800764a8)
- QueryUnbiasedInterruptTime (Address: 0x180076498)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x1800765c8)
- RegCopyTreeW (Address: 0x1800765d8)
- RegCreateKeyExA (Address: 0x1800765e8)
- RegCreateKeyExW (Address: 0x1800765f0)
- RegDeleteKeyExA (Address: 0x1800765e0)
- RegDeleteKeyExW (Address: 0x1800765a0)
- RegDeleteTreeA (Address: 0x1800765a8)
- RegDeleteTreeW (Address: 0x180076510)
- RegDeleteValueA (Address: 0x180076500)
- RegDeleteValueW (Address: 0x180076598)
- RegDisablePredefinedCacheEx (Address: 0x1800765b0)
- RegEnumKeyExA (Address: 0x180076590)
- RegEnumKeyExW (Address: 0x180076588)
- RegEnumValueA (Address: 0x180076520)
- RegEnumValueW (Address: 0x180076508)
- RegFlushKey (Address: 0x1800764b8)
- RegGetKeySecurity (Address: 0x1800764c0)
- RegGetValueA (Address: 0x1800765f8)
- RegGetValueW (Address: 0x1800765c0)
- RegLoadKeyA (Address: 0x1800764c8)
- RegLoadKeyW (Address: 0x1800764d0)
- RegLoadMUIStringA (Address: 0x1800764d8)
- RegLoadMUIStringW (Address: 0x1800764e0)
- RegNotifyChangeKeyValue (Address: 0x1800764e8)
- RegOpenCurrentUser (Address: 0x1800764f0)
- RegOpenKeyExA (Address: 0x1800764f8)
- RegOpenKeyExW (Address: 0x1800765b8)
- RegOpenUserClassesRoot (Address: 0x180076518)
- RegQueryInfoKeyA (Address: 0x180076528)
- RegQueryInfoKeyW (Address: 0x180076530)
- RegQueryValueExA (Address: 0x180076538)
- RegQueryValueExW (Address: 0x1800765d0)
- RegRestoreKeyA (Address: 0x180076540)
- RegRestoreKeyW (Address: 0x180076548)
- RegSaveKeyExA (Address: 0x180076550)
- RegSaveKeyExW (Address: 0x180076558)
- RegSetKeySecurity (Address: 0x180076560)
- RegSetValueExA (Address: 0x180076568)
- RegSetValueExW (Address: 0x180076570)
- RegUnLoadKeyA (Address: 0x180076578)
- RegUnLoadKeyW (Address: 0x180076580)
api-ms-win-core-rtlsupport-l1-2-0.dll
- RtlAddFunctionTable (Address: 0x180076668)
- RtlCaptureContext (Address: 0x180076660)
- RtlCaptureStackBackTrace (Address: 0x180076620)
- RtlCompareMemory (Address: 0x180076628)
- RtlDeleteFunctionTable (Address: 0x180076610)
- RtlInstallFunctionTableCallback (Address: 0x180076630)
- RtlLookupFunctionEntry (Address: 0x180076638)
- RtlPcToFileHeader (Address: 0x180076608)
- RtlRaiseException (Address: 0x180076658)
- RtlRestoreContext (Address: 0x180076640)
- RtlUnwind (Address: 0x180076618)
- RtlUnwindEx (Address: 0x180076648)
- RtlVirtualUnwind (Address: 0x180076650)
api-ms-win-core-sidebyside-l1-1-0.dll
- ActivateActCtx (Address: 0x180076680)
- AddRefActCtx (Address: 0x1800766b8)
- CreateActCtxW (Address: 0x180076690)
- DeactivateActCtx (Address: 0x1800766c0)
- FindActCtxSectionGuid (Address: 0x180076678)
- FindActCtxSectionStringW (Address: 0x1800766b0)
- GetCurrentActCtx (Address: 0x1800766a8)
- QueryActCtxSettingsW (Address: 0x1800766a0)
- QueryActCtxW (Address: 0x180076688)
- ReleaseActCtx (Address: 0x180076698)
- ZombifyActCtx (Address: 0x1800766c8)
api-ms-win-core-string-l1-1-0.dll
- CompareStringEx (Address: 0x1800766e0)
- CompareStringOrdinal (Address: 0x1800766d8)
- CompareStringW (Address: 0x180076700)
- FoldStringW (Address: 0x1800766f8)
- GetStringTypeExW (Address: 0x180076708)
- GetStringTypeW (Address: 0x1800766e8)
- MultiByteToWideChar (Address: 0x1800766f0)
- WideCharToMultiByte (Address: 0x180076710)
api-ms-win-core-synch-l1-2-0.dll
- CancelWaitableTimer (Address: 0x1800767e0)
- CreateEventA (Address: 0x1800767d8)
- CreateEventExA (Address: 0x1800767d0)
- CreateEventExW (Address: 0x1800767c8)
- CreateEventW (Address: 0x1800767c0)
- CreateMutexA (Address: 0x1800767b8)
- CreateMutexExA (Address: 0x1800767b0)
- CreateMutexExW (Address: 0x1800767a8)
- CreateMutexW (Address: 0x1800767a0)
- CreateSemaphoreExW (Address: 0x180076798)
- CreateWaitableTimerExW (Address: 0x180076788)
- DeleteCriticalSection (Address: 0x180076820)
- DeleteSynchronizationBarrier (Address: 0x180076808)
- EnterCriticalSection (Address: 0x180076828)
- EnterSynchronizationBarrier (Address: 0x1800767f8)
- InitializeCriticalSection (Address: 0x180076818)
- InitializeCriticalSectionAndSpinCount (Address: 0x180076780)
- InitializeCriticalSectionEx (Address: 0x180076778)
- InitializeSynchronizationBarrier (Address: 0x180076800)
- InitOnceExecuteOnce (Address: 0x180076810)
- LeaveCriticalSection (Address: 0x180076838)
- OpenEventA (Address: 0x180076770)
- OpenEventW (Address: 0x180076768)
- OpenMutexW (Address: 0x180076760)
- OpenSemaphoreW (Address: 0x180076830)
- OpenWaitableTimerW (Address: 0x180076750)
- ReleaseMutex (Address: 0x180076748)
- ReleaseSemaphore (Address: 0x180076740)
- ResetEvent (Address: 0x180076738)
- SetEvent (Address: 0x180076730)
- SetWaitableTimer (Address: 0x180076728)
- SignalObjectAndWait (Address: 0x1800767f0)
- SleepEx (Address: 0x180076720)
- WaitForMultipleObjectsEx (Address: 0x180076758)
- WaitForSingleObject (Address: 0x180076790)
- WaitForSingleObjectEx (Address: 0x1800767e8)
api-ms-win-core-synch-l1-2-1.dll
- CreateSemaphoreW (Address: 0x180076850)
- WaitForMultipleObjects (Address: 0x180076848)
api-ms-win-core-sysinfo-l1-2-1.dll
- DnsHostnameToComputerNameExW (Address: 0x180076870)
- EnumSystemFirmwareTables (Address: 0x1800768b0)
- GetComputerNameExA (Address: 0x1800768c8)
- GetComputerNameExW (Address: 0x180076890)
- GetLocalTime (Address: 0x1800768d0)
- GetLogicalProcessorInformation (Address: 0x180076908)
- GetLogicalProcessorInformationEx (Address: 0x1800768c0)
- GetNativeSystemInfo (Address: 0x1800768d8)
- GetPhysicallyInstalledSystemMemory (Address: 0x180076878)
- GetProductInfo (Address: 0x1800768e0)
- GetSystemFirmwareTable (Address: 0x1800768b8)
- GetSystemInfo (Address: 0x1800768a0)
- GetSystemTime (Address: 0x1800768e8)
- GetSystemTimeAdjustment (Address: 0x1800768f0)
- GetSystemTimeAsFileTime (Address: 0x1800768f8)
- GetSystemTimePreciseAsFileTime (Address: 0x180076888)
- GetTickCount (Address: 0x180076938)
- GetVersion (Address: 0x180076900)
- GetVersionExA (Address: 0x180076860)
- GetVersionExW (Address: 0x180076910)
- GetWindowsDirectoryA (Address: 0x180076918)
- GetWindowsDirectoryW (Address: 0x180076920)
- GlobalMemoryStatusEx (Address: 0x1800768a8)
- SetComputerNameEx2W (Address: 0x180076868)
- SetComputerNameExW (Address: 0x180076898)
- SetLocalTime (Address: 0x180076930)
- SetSystemTime (Address: 0x180076928)
- VerSetConditionMask (Address: 0x180076880)
api-ms-win-core-sysinfo-l1-2-3.dll
- SetComputerNameA (Address: 0x180076948)
- SetComputerNameExA (Address: 0x180076958)
- SetComputerNameW (Address: 0x180076950)
api-ms-win-core-systemtopology-l1-1-0.dll
- GetNumaHighestNodeNumber (Address: 0x180076968)
- GetNumaNodeProcessorMaskEx (Address: 0x180076970)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
- ChangeTimerQueueTimer (Address: 0x1800769a8)
- CreateTimerQueue (Address: 0x180076990)
- CreateTimerQueueTimer (Address: 0x1800769a0)
- DeleteTimerQueueEx (Address: 0x180076998)
- DeleteTimerQueueTimer (Address: 0x180076988)
- QueueUserWorkItem (Address: 0x180076980)
- UnregisterWaitEx (Address: 0x1800769b0)
api-ms-win-core-threadpool-private-l1-1-0.dll
- RegisterWaitForSingleObjectEx (Address: 0x1800769c0)
api-ms-win-core-timezone-l1-1-0.dll
- FileTimeToSystemTime (Address: 0x180076a10)
- GetDynamicTimeZoneInformation (Address: 0x1800769e0)
- GetTimeZoneInformation (Address: 0x1800769f8)
- GetTimeZoneInformationForYear (Address: 0x1800769f0)
- SetDynamicTimeZoneInformation (Address: 0x1800769d0)
- SetTimeZoneInformation (Address: 0x1800769d8)
- SystemTimeToFileTime (Address: 0x1800769e8)
- SystemTimeToTzSpecificLocalTime (Address: 0x180076a08)
- TzSpecificLocalTimeToSystemTime (Address: 0x180076a00)
api-ms-win-core-util-l1-1-0.dll
- Beep (Address: 0x180076a20)
api-ms-win-core-windowserrorreporting-l1-1-0.dll
- GetApplicationRecoveryCallback (Address: 0x180076a30)
- GetApplicationRestartSettings (Address: 0x180076a68)
- WerpNotifyLoadStringResource (Address: 0x180076a38)
- WerpNotifyUseStringResource (Address: 0x180076a50)
- WerRegisterFile (Address: 0x180076a60)
- WerRegisterMemoryBlock (Address: 0x180076a58)
- WerRegisterRuntimeExceptionModule (Address: 0x180076a48)
- WerUnregisterFile (Address: 0x180076a40)
- WerUnregisterMemoryBlock (Address: 0x180076a78)
- WerUnregisterRuntimeExceptionModule (Address: 0x180076a70)
api-ms-win-core-wow64-l1-1-0.dll
- IsWow64Process (Address: 0x180076a88)
- Wow64DisableWow64FsRedirection (Address: 0x180076a90)
- Wow64RevertWow64FsRedirection (Address: 0x180076a98)
api-ms-win-core-wow64-l1-1-1.dll
- GetSystemWow64DirectoryA (Address: 0x180076ab0)
- GetSystemWow64DirectoryW (Address: 0x180076aa8)
api-ms-win-core-xstate-l2-1-0.dll
- CopyContext (Address: 0x180076ae8)
- GetEnabledXStateFeatures (Address: 0x180076ad0)
- GetXStateFeaturesMask (Address: 0x180076ac0)
- InitializeContext (Address: 0x180076ad8)
- LocateXStateFeature (Address: 0x180076ac8)
- SetXStateFeaturesMask (Address: 0x180076ae0)
api-ms-win-security-appcontainer-l1-1-0.dll
- GetAppContainerNamedObjectPath (Address: 0x180076af8)
api-ms-win-security-base-l1-2-0.dll
- AccessCheck (Address: 0x180076b48)
- AddResourceAttributeAce (Address: 0x180076b18)
- AddScopedPolicyIDAce (Address: 0x180076b10)
- AllocateAndInitializeSid (Address: 0x180076b50)
- CheckTokenCapability (Address: 0x180076b40)
- CheckTokenMembershipEx (Address: 0x180076b38)
- DuplicateToken (Address: 0x180076b60)
- EqualSid (Address: 0x180076b08)
- FreeSid (Address: 0x180076b58)
- GetAppContainerAce (Address: 0x180076b30)
- GetCachedSigningLevel (Address: 0x180076b28)
- SetCachedSigningLevel (Address: 0x180076b20)
KERNELBASE.dll
- AppContainerFreeMemory (Address: 0x180075220)
- AppContainerLookupMoniker (Address: 0x180075228)
- AppXGetOSMaxVersionTested (Address: 0x1800750a8)
- AppXPostSuccessExtension (Address: 0x180075108)
- AppXPreCreationExtension (Address: 0x180075000)
- AppXReleaseAppXContext (Address: 0x180075110)
- AreFileApisANSI (Address: 0x180075120)
- BaseDllFreeResourceId (Address: 0x1800750f8)
- BaseDllMapResourceIdW (Address: 0x180075230)
- BaseGetNamedObjectDirectory (Address: 0x180075168)
- BasepAdjustObjectAttributesForPrivateNamespace (Address: 0x180075240)
- BasepNotifyTrackingService (Address: 0x1800750d0)
- CheckAllowDecryptedRemoteDestinationPolicy (Address: 0x180075248)
- CheckGroupPolicyEnabled (Address: 0x180075208)
- ClosePackageInfo (Address: 0x1800750a0)
- CompareStringA (Address: 0x1800750e0)
- CreateProcessAsUserA (Address: 0x180075140)
- CreateProcessAsUserW (Address: 0x180075138)
- CreateProcessInternalA (Address: 0x180075128)
- CreateProcessInternalW (Address: 0x180075130)
- EnumLanguageGroupLocalesW (Address: 0x180075148)
- EnumSystemLanguageGroupsW (Address: 0x180075150)
- EnumSystemLocalesEx (Address: 0x180075158)
- EnumUILanguagesW (Address: 0x180075160)
- FatalAppExitA (Address: 0x180075280)
- FatalAppExitW (Address: 0x180075278)
- GetAdjustObjectAttributesForPrivateNamespaceRoutine (Address: 0x180075218)
- GetCalendar (Address: 0x180075018)
- GetCPHashNode (Address: 0x1800751d0)
- GetCurrentPackageFullName (Address: 0x180075098)
- GetCurrentPackageId (Address: 0x180075238)
- GetEightBitStringToUnicodeStringRoutine (Address: 0x180075068)
- GetEraNameCountedString (Address: 0x180075270)
- GetLocaleInfoHelper (Address: 0x180075008)
- GetNamedLocaleHashNode (Address: 0x1800752c8)
- GetNamedPipeAttribute (Address: 0x180075100)
- GetPackageFullName (Address: 0x180075090)
- GetPackageTargetPlatformProperty (Address: 0x1800750b0)
- GetProcAddressForCaller (Address: 0x180075170)
- GetPtrCalData (Address: 0x1800751d8)
- GetPtrCalDataArray (Address: 0x1800751e8)
- GetRegistryExtensionFlags (Address: 0x180075060)
- GetStringTableEntry (Address: 0x180075210)
- GetStringTypeA (Address: 0x180075178)
- GetSystemDefaultLocaleName (Address: 0x180075268)
- GetSystemDefaultUILanguage (Address: 0x180075180)
- GetTargetPlatformContext (Address: 0x1800750b8)
- GetUnicodeStringToEightBitSizeRoutine (Address: 0x1800750f0)
- GetUnicodeStringToEightBitStringRoutine (Address: 0x180075080)
- GetUserDefaultLocaleName (Address: 0x180075260)
- GetUserDefaultUILanguage (Address: 0x180075188)
- GetUserOverrideString (Address: 0x1800751f0)
- GetUserOverrideWord (Address: 0x180075010)
- GlobalAlloc (Address: 0x180075190)
- GlobalFree (Address: 0x1800750d8)
- HeapSummary (Address: 0x180075198)
- Internal_EnumCalendarInfo (Address: 0x180075028)
- Internal_EnumDateFormats (Address: 0x180075040)
- Internal_EnumLanguageGroupLocales (Address: 0x1800751c8)
- Internal_EnumSystemCodePages (Address: 0x180075030)
- Internal_EnumSystemLanguageGroups (Address: 0x180075078)
- Internal_EnumTimeFormats (Address: 0x180075020)
- Internal_EnumUILanguages (Address: 0x180075070)
- InternalLcidToName (Address: 0x1800751f8)
- KernelBaseGetGlobalData (Address: 0x180075058)
- LCIDToLocaleName (Address: 0x180075258)
- LoadStringBaseExW (Address: 0x1800750e8)
- LocalAlloc (Address: 0x180075118)
- LocalLock (Address: 0x1800751a0)
- LocalReAlloc (Address: 0x1800751a8)
- LocalUnlock (Address: 0x1800751b0)
- lstrcmpiW (Address: 0x180075050)
- lstrcmpW (Address: 0x180075048)
- lstrcpynA (Address: 0x1800752a0)
- lstrcpynW (Address: 0x180075298)
- lstrlenA (Address: 0x180075290)
- lstrlenW (Address: 0x180075288)
- MapViewOfFileExNuma (Address: 0x1800751b8)
- MoveFileWithProgressTransactedW (Address: 0x1800750c8)
- NlsIsUserDefaultLocale (Address: 0x1800751e0)
- NlsValidateLocale (Address: 0x180075038)
- OpenPackageInfoByFullNameForUser (Address: 0x1800750c0)
- OpenRegKey (Address: 0x180075200)
- PackageIdFromFullName (Address: 0x180075088)
- PrivCopyFileExW (Address: 0x180075250)
- PulseEvent (Address: 0x1800752c0)
- SetFileApisToANSI (Address: 0x1800752b8)
- SetFileApisToOEM (Address: 0x1800752b0)
- Sleep (Address: 0x1800752a8)
- SpecialMBToWC (Address: 0x1800751c0)
ntdll.dll
- __C_specific_handler (Address: 0x180077720)
- _local_unwind (Address: 0x180077728)
- _memicmp (Address: 0x180077460)
- _stricmp (Address: 0x180077010)
- _strnicmp (Address: 0x180077580)
- _vsnprintf (Address: 0x1800775e0)
- _vsnwprintf (Address: 0x180077518)
- _wcsicmp (Address: 0x1800776f0)
- _wcslwr (Address: 0x180077288)
- _wcsnicmp (Address: 0x1800774d8)
- _wtol (Address: 0x180076ca0)
- atol (Address: 0x180076bc0)
- bsearch (Address: 0x180076f58)
- cos (Address: 0x180077730)
- CsrAllocateCaptureBuffer (Address: 0x180077310)
- CsrAllocateMessagePointer (Address: 0x180076cf8)
- CsrCaptureMessageMultiUnicodeStringsInPlace (Address: 0x180076f48)
- CsrCaptureMessageString (Address: 0x180077308)
- CsrClientCallServer (Address: 0x180077498)
- CsrFreeCaptureBuffer (Address: 0x180077300)
- CsrVerifyRegion (Address: 0x180077190)
- DbgPrint (Address: 0x180077618)
- DbgPrintEx (Address: 0x180076b70)
- DbgUiGetThreadDebugObject (Address: 0x1800773a0)
- DbgUiIssueRemoteBreakin (Address: 0x1800773a8)
- EtwEventEnabled (Address: 0x180077280)
- EtwEventRegister (Address: 0x180077168)
- EtwEventUnregister (Address: 0x180077158)
- EtwEventWrite (Address: 0x180077160)
- EtwEventWriteNoRegistration (Address: 0x180076eb0)
- floor (Address: 0x180077738)
- isdigit (Address: 0x180076bc8)
- LdrAddRefDll (Address: 0x1800770e8)
- LdrDisableThreadCalloutsForDll (Address: 0x180077500)
- LdrFindResource_U (Address: 0x1800776d8)
- LdrFindResourceEx_U (Address: 0x180077248)
- LdrGetDllDirectory (Address: 0x180076ff0)
- LdrGetProcedureAddress (Address: 0x180076ec8)
- LdrLoadDll (Address: 0x180076ed0)
- LdrLockLoaderLock (Address: 0x1800775e8)
- LdrOpenImageFileOptionsKey (Address: 0x180077140)
- LdrQueryImageFileExecutionOptions (Address: 0x180077508)
- LdrQueryImageFileKeyOption (Address: 0x180077138)
- LdrResFindResourceDirectory (Address: 0x180076e68)
- LdrResSearchResource (Address: 0x180077578)
- LdrSetDllDirectory (Address: 0x180077000)
- LdrSetDllManifestProber (Address: 0x180077520)
- LdrUnloadDll (Address: 0x180076ec0)
- LdrUnlockLoaderLock (Address: 0x1800775f0)
- memcmp (Address: 0x180077740)
- memcpy (Address: 0x180077748)
- memmove (Address: 0x1800776f8)
- memmove_s (Address: 0x180076e60)
- memset (Address: 0x180077750)
- NlsMbCodePageTag (Address: 0x180077420)
- NtAccessCheck (Address: 0x180077608)
- NtAddAtomEx (Address: 0x180077360)
- NtAllocateVirtualMemory (Address: 0x180077220)
- NtApphelpCacheControl (Address: 0x180077630)
- NtAssignProcessToJobObject (Address: 0x180076b90)
- NtClearEvent (Address: 0x1800775b0)
- NtClose (Address: 0x180077480)
- NtCreateEvent (Address: 0x180076fd0)
- NtCreateFile (Address: 0x1800774b8)
- NtCreateJobObject (Address: 0x180076ba0)
- NtCreateJobSet (Address: 0x180076b78)
- NtCreateKey (Address: 0x180077478)
- NtCreateMailslotFile (Address: 0x180077008)
- NtCreateSection (Address: 0x180077150)
- NtDeleteAtom (Address: 0x180077340)
- NtDeleteValueKey (Address: 0x180077298)
- NtDeviceIoControlFile (Address: 0x180076bb0)
- NtDuplicateToken (Address: 0x1800775b8)
- NtEnumerateKey (Address: 0x1800772a8)
- NtEnumerateValueKey (Address: 0x1800772a0)
- NtFindAtom (Address: 0x180077350)
- NtFlushKey (Address: 0x180077468)
- NtFreeVirtualMemory (Address: 0x180077200)
- NtFsControlFile (Address: 0x1800774f0)
- NtGetDevicePowerState (Address: 0x180076f20)
- NtInitiatePowerAction (Address: 0x180076f30)
- NtIsSystemResumeAutomatic (Address: 0x180076f18)
- NtLockFile (Address: 0x180077230)
- NtMapUserPhysicalPagesScatter (Address: 0x180076f78)
- NtMapViewOfSection (Address: 0x180076d10)
- NtOpenFile (Address: 0x1800774e0)
- NtOpenJobObject (Address: 0x180076b98)
- NtOpenKey (Address: 0x180077490)
- NtOpenProcessToken (Address: 0x180077180)
- NtOpenThreadToken (Address: 0x180077130)
- NtPowerInformation (Address: 0x180076f90)
- NtProtectVirtualMemory (Address: 0x180076dd0)
- NtQueryAttributesFile (Address: 0x180076d90)
- NtQueryDirectoryFile (Address: 0x180076c50)
- NtQueryEaFile (Address: 0x1800774d0)
- NtQueryEvent (Address: 0x180076c70)
- NtQueryFullAttributesFile (Address: 0x180076d98)
- NtQueryInformationAtom (Address: 0x180077330)
- NtQueryInformationFile (Address: 0x1800774e8)
- NtQueryInformationJobObject (Address: 0x180076ba8)
- NtQueryInformationProcess (Address: 0x1800773c8)
- NtQueryInformationThread (Address: 0x180076d40)
- NtQueryInformationToken (Address: 0x1800776e8)
- NtQueryInstallUILanguage (Address: 0x1800771f0)
- NtQueryLicenseValue (Address: 0x1800771f8)
- NtQuerySection (Address: 0x180077148)
- NtQuerySecurityObject (Address: 0x1800774c8)
- NtQuerySystemEnvironmentValueEx (Address: 0x1800770b8)
- NtQuerySystemInformation (Address: 0x180077688)
- NtQueryTimerResolution (Address: 0x180076d30)
- NtQueryValueKey (Address: 0x180077488)
- NtQueryVirtualMemory (Address: 0x180076e70)
- NtQueryVolumeInformationFile (Address: 0x1800770d0)
- NtQueryWnfStateData (Address: 0x180076f88)
- NtRaiseHardError (Address: 0x1800770d8)
- NtReadFile (Address: 0x180077218)
- NtReadVirtualMemory (Address: 0x180077570)
- NtReplacePartitionUnit (Address: 0x180076e88)
- NtSetEaFile (Address: 0x1800774b0)
- NtSetInformationDebugObject (Address: 0x180077398)
- NtSetInformationFile (Address: 0x1800774a0)
- NtSetInformationJobObject (Address: 0x180076b80)
- NtSetInformationProcess (Address: 0x180077178)
- NtSetInformationThread (Address: 0x180077128)
- NtSetSecurityObject (Address: 0x1800774a8)
- NtSetSystemEnvironmentValueEx (Address: 0x1800770b0)
- NtSetSystemInformation (Address: 0x1800773b0)
- NtSetThreadExecutionState (Address: 0x180076f28)
- NtSetTimerResolution (Address: 0x180076d28)
- NtSetValueKey (Address: 0x180077470)
- NtSetVolumeInformationFile (Address: 0x180076fa0)
- NtTerminateJobObject (Address: 0x180076b88)
- NtTerminateProcess (Address: 0x180077258)
- NtUnlockFile (Address: 0x180077228)
- NtUnmapViewOfSection (Address: 0x180076d20)
- NtWaitForMultipleObjects (Address: 0x1800775a8)
- NtWaitForSingleObject (Address: 0x180076fc8)
- NtWriteFile (Address: 0x180077208)
- PssNtCaptureSnapshot (Address: 0x1800775c8)
- PssNtFreeSnapshot (Address: 0x1800775d8)
- qsort (Address: 0x1800776d0)
- RtlAcquirePrivilege (Address: 0x180076c48)
- RtlAcquireSRWLockExclusive (Address: 0x180076f08)
- RtlActivateActivationContext (Address: 0x180076e20)
- RtlActivateActivationContextUnsafeFast (Address: 0x180077110)
- RtlAddAccessAllowedAce (Address: 0x1800776b8)
- RtlAddAtomToAtomTable (Address: 0x180077368)
- RtlAddIntegrityLabelToBoundaryDescriptor (Address: 0x180076db0)
- RtlAddRefActivationContext (Address: 0x180076e08)
- RtlAllocateAndInitializeSid (Address: 0x180076da8)
- RtlAllocateHandle (Address: 0x180077048)
- RtlAllocateHeap (Address: 0x1800776c8)
- RtlAnsiStringToUnicodeString (Address: 0x180077370)
- RtlAppendUnicodeStringToString (Address: 0x1800772b8)
- RtlAppendUnicodeToString (Address: 0x1800772b0)
- RtlCharToInteger (Address: 0x180077328)
- RtlCompactHeap (Address: 0x180077028)
- RtlCompareUnicodeString (Address: 0x180076e90)
- RtlComputeImportTableHash (Address: 0x180076f50)
- RtlConvertSidToUnicodeString (Address: 0x180077088)
- RtlCopyUnicodeString (Address: 0x180077290)
- RtlCreateAcl (Address: 0x1800776c0)
- RtlCreateActivationContext (Address: 0x180076e00)
- RtlCreateAtomTable (Address: 0x180077388)
- RtlCreateBoundaryDescriptor (Address: 0x180076dc8)
- RtlCreateEnvironment (Address: 0x180076c68)
- RtlCreateEnvironmentEx (Address: 0x180076c60)
- RtlCreateQueryDebugBuffer (Address: 0x180076d08)
- RtlCreateSecurityDescriptor (Address: 0x1800776b0)
- RtlCreateUmsCompletionList (Address: 0x180076c30)
- RtlCreateUmsThreadContext (Address: 0x180076bd8)
- RtlCreateUnicodeString (Address: 0x180076c78)
- RtlCreateUnicodeStringFromAsciiz (Address: 0x180077400)
- RtlDeactivateActivationContext (Address: 0x180076e28)
- RtlDeactivateActivationContextUnsafeFast (Address: 0x180077108)
- RtlDecodeSystemPointer (Address: 0x180076f60)
- RtlDeleteAtomFromAtomTable (Address: 0x180077348)
- RtlDeleteCriticalSection (Address: 0x180077558)
- RtlDeleteUmsCompletionList (Address: 0x180076c08)
- RtlDeleteUmsThreadContext (Address: 0x180076be0)
- RtlDequeueUmsCompletionListItems (Address: 0x180076c28)
- RtlDeregisterSecureMemoryCacheCallback (Address: 0x180077018)
- RtlDeregisterWait (Address: 0x180076fd8)
- RtlDestroyAtomTable (Address: 0x180077380)
- RtlDestroyEnvironment (Address: 0x180076c58)
- RtlDestroyQueryDebugBuffer (Address: 0x180076d18)
- RtlDetermineDosPathNameType_U (Address: 0x180076ea0)
- RtlDisableThreadProfiling (Address: 0x180077070)
- RtlDnsHostNameToComputerName (Address: 0x180077408)
- RtlDoesFileExists_U (Address: 0x180076de0)
- RtlDosPathNameToNtPathName_U (Address: 0x180077238)
- RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x180076e38)
- RtlDosPathNameToRelativeNtPathName_U (Address: 0x1800770f8)
- RtlEnableThreadProfiling (Address: 0x180077068)
- RtlEncodeSystemPointer (Address: 0x1800775a0)
- RtlEnterCriticalSection (Address: 0x180077438)
- RtlEnterUmsSchedulingMode (Address: 0x180076bd0)
- RtlEqualSid (Address: 0x180076ed8)
- RtlEqualString (Address: 0x180077198)
- RtlEqualUnicodeString (Address: 0x1800772c8)
- RtlExecuteUmsThread (Address: 0x180076c18)
- RtlExitUserProcess (Address: 0x180076e98)
- RtlExitUserThread (Address: 0x180076d60)
- RtlExpandEnvironmentStrings_U (Address: 0x180077270)
- RtlFindActivationContextSectionGuid (Address: 0x180076f40)
- RtlFindActivationContextSectionString (Address: 0x180076f38)
- RtlFormatCurrentUserKeyPath (Address: 0x1800772c0)
- RtlFreeAnsiString (Address: 0x180077318)
- RtlFreeHandle (Address: 0x180077038)
- RtlFreeHeap (Address: 0x180077690)
- RtlFreeOemString (Address: 0x180076ce0)
- RtlFreeSid (Address: 0x180076da0)
- RtlFreeUnicodeString (Address: 0x1800773f8)
- RtlGetActiveActivationContext (Address: 0x180076e30)
- RtlGetAppContainerParent (Address: 0x1800771d0)
- RtlGetAppContainerSidType (Address: 0x180077090)
- RtlGetCurrentDirectory_U (Address: 0x180076ce8)
- RtlGetCurrentProcessorNumberEx (Address: 0x180076fc0)
- RtlGetCurrentTransaction (Address: 0x1800773d8)
- RtlGetCurrentUmsThread (Address: 0x180076c00)
- RtlGetDeviceFamilyInfoEnum (Address: 0x180077620)
- RtlGetFullPathName_U (Address: 0x180076de8)
- RtlGetFullPathName_UEx (Address: 0x180077638)
- RtlGetLengthWithoutLastFullDosOrNtPathElement (Address: 0x180076df8)
- RtlGetLongestNtPathLength (Address: 0x1800772f8)
- RtlGetNextUmsListItem (Address: 0x180076bf8)
- RtlGetThreadErrorMode (Address: 0x1800770e0)
- RtlGetThreadPreferredUILanguages (Address: 0x180077568)
- RtlGetUILanguageInfo (Address: 0x1800771e8)
- RtlGetUmsCompletionListEvent (Address: 0x180076c20)
- RtlGetUserInfoHeap (Address: 0x180077050)
- RtlGetVersion (Address: 0x180077678)
- RtlGUIDFromString (Address: 0x1800770c0)
- RtlHashUnicodeString (Address: 0x180077628)
- RtlImageDirectoryEntryToData (Address: 0x180076dd8)
- RtlImageNtHeader (Address: 0x180077530)
- RtlImageNtHeaderEx (Address: 0x180076e40)
- RtlInitAnsiString (Address: 0x180077378)
- RtlInitAnsiStringEx (Address: 0x180076ff8)
- RtlInitializeCriticalSection (Address: 0x180077550)
- RtlInitializeSid (Address: 0x180076ee8)
- RtlInitString (Address: 0x1800770c8)
- RtlInitUnicodeString (Address: 0x180077510)
- RtlInitUnicodeStringEx (Address: 0x180077428)
- RtlIntegerToUnicodeString (Address: 0x180077268)
- RtlIsNameLegalDOS8Dot3 (Address: 0x180076f98)
- RtlIsTextUnicode (Address: 0x180077210)
- RtlIsValidHandle (Address: 0x1800770a0)
- RtlLCIDToCultureName (Address: 0x180077278)
- RtlLeaveCriticalSection (Address: 0x180077430)
- RtlLengthSecurityDescriptor (Address: 0x1800774c0)
- RtlLengthSid (Address: 0x180077600)
- RtlLockHeap (Address: 0x1800770a8)
- RtlLookupAtomInAtomTable (Address: 0x180077358)
- RtlMultiAppendUnicodeStringBuffer (Address: 0x180076e48)
- RtlMultiByteToUnicodeN (Address: 0x1800772e8)
- RtlMultiByteToUnicodeSize (Address: 0x1800772e0)
- RtlNtStatusToDosError (Address: 0x180077450)
- RtlNtStatusToDosErrorNoTeb (Address: 0x180077188)
- RtlOemStringToUnicodeString (Address: 0x180076f68)
- RtlpApplyLengthFunction (Address: 0x180076df0)
- RtlpConvertCultureNamesToLCIDs (Address: 0x1800771e0)
- RtlpConvertLCIDsToCultureNames (Address: 0x180077538)
- RtlpEnsureBufferSize (Address: 0x180076ca8)
- RtlPrefixString (Address: 0x1800773f0)
- RtlPrefixUnicodeString (Address: 0x1800772d0)
- RtlPublishWnfStateData (Address: 0x1800776e0)
- RtlQueryActivationContextApplicationSettings (Address: 0x180076dc0)
- RtlQueryAtomInAtomTable (Address: 0x180077338)
- RtlQueryElevationFlags (Address: 0x180077170)
- RtlQueryEnvironmentVariable (Address: 0x1800771c8)
- RtlQueryEnvironmentVariable_U (Address: 0x180076d70)
- RtlQueryInformationActivationContext (Address: 0x180076e50)
- RtlQueryPackageIdentity (Address: 0x180076ea8)
- RtlQueryProcessDebugInformation (Address: 0x180076d00)
- RtlQueryRegistryValuesEx (Address: 0x180076f00)
- RtlQueryResourcePolicy (Address: 0x1800775c0)
- RtlQueryThreadProfiling (Address: 0x180077078)
- RtlQueryUmsThreadInformation (Address: 0x180076bf0)
- RtlQueryWnfStateData (Address: 0x180076fb8)
- RtlRaiseStatus (Address: 0x180077120)
- RtlReadThreadProfilingData (Address: 0x180077080)
- RtlReAllocateHeap (Address: 0x180077058)
- RtlRegisterSecureMemoryCacheCallback (Address: 0x180077020)
- RtlRegisterWait (Address: 0x180076f80)
- RtlReleaseActivationContext (Address: 0x180076e10)
- RtlReleasePebLock (Address: 0x180077598)
- RtlReleasePrivilege (Address: 0x180076c40)
- RtlReleaseRelativeName (Address: 0x1800770f0)
- RtlReleaseSRWLockExclusive (Address: 0x180076ef8)
- RtlSetCurrentTransaction (Address: 0x1800773d0)
- RtlSetDaclSecurityDescriptor (Address: 0x180077698)
- RtlSetEnvironmentStrings (Address: 0x180076f70)
- RtlSetEnvironmentVariable (Address: 0x1800771d8)
- RtlSetGroupSecurityDescriptor (Address: 0x1800776a0)
- RtlSetIoCompletionCallback (Address: 0x180077060)
- RtlSetLastWin32Error (Address: 0x1800774f8)
- RtlSetLastWin32ErrorAndNtStatusFromNtStatus (Address: 0x180077118)
- RtlSetOwnerSecurityDescriptor (Address: 0x1800776a8)
- RtlSetSearchPathMode (Address: 0x180076fe8)
- RtlSetThreadPoolStartFunc (Address: 0x180077528)
- RtlSetThreadPreferredUILanguages (Address: 0x180076e58)
- RtlSetUmsThreadInformation (Address: 0x180076be8)
- RtlSetUserValueHeap (Address: 0x180077098)
- RtlSizeHeap (Address: 0x180077040)
- RtlSubAuthorityCountSid (Address: 0x180076db8)
- RtlSubAuthoritySid (Address: 0x180076ee0)
- RtlSubscribeWnfStateChangeNotification (Address: 0x180076fb0)
- RtlSwitchedVVI (Address: 0x180076fe0)
- RtlTimeFieldsToTime (Address: 0x1800773b8)
- RtlTimeToTimeFields (Address: 0x1800773c0)
- RtlTryAcquirePebLock (Address: 0x180077590)
- RtlUmsThreadYield (Address: 0x180076c10)
- RtlUnhandledExceptionFilter (Address: 0x180077260)
- RtlUnicodeStringToAnsiString (Address: 0x180077410)
- RtlUnicodeStringToInteger (Address: 0x180077540)
- RtlUnicodeStringToOemString (Address: 0x180076cf0)
- RtlUnicodeToMultiByteN (Address: 0x1800772f0)
- RtlUnicodeToMultiByteSize (Address: 0x1800772d8)
- RtlUnlockHeap (Address: 0x180077030)
- RtlUnsubscribeWnfStateChangeNotification (Address: 0x180076fa8)
- RtlUpcaseUnicodeChar (Address: 0x180077548)
- RtlWerpReportException (Address: 0x1800775d0)
- RtlWow64EnableFsRedirection (Address: 0x180077100)
- RtlWow64GetThreadContext (Address: 0x180076d58)
- RtlWow64GetThreadSelectorEntry (Address: 0x180077390)
- RtlWow64LogMessageInEventLogger (Address: 0x180076eb8)
- RtlWow64SetThreadContext (Address: 0x180076d50)
- RtlWow64SuspendThread (Address: 0x180076d48)
- RtlxAnsiStringToUnicodeSize (Address: 0x180076f10)
- RtlxUnicodeStringToAnsiSize (Address: 0x180077418)
- RtlZombifyActivationContext (Address: 0x180076e18)
- sin (Address: 0x180077758)
- strcat_s (Address: 0x180077560)
- strchr (Address: 0x180076d78)
- strcpy_s (Address: 0x180076e80)
- strncmp (Address: 0x180077588)
- strncpy_s (Address: 0x180077320)
- strrchr (Address: 0x180076d80)
- swprintf_s (Address: 0x180076e78)
- tolower (Address: 0x180076bb8)
- toupper (Address: 0x180076c38)
- TpAllocCleanupGroup (Address: 0x180076cb0)
- TpAllocIoCompletion (Address: 0x1800771b8)
- TpAllocPool (Address: 0x180076cd0)
- TpAllocTimer (Address: 0x1800771c0)
- TpAllocWait (Address: 0x180076cc8)
- TpAllocWork (Address: 0x1800771b0)
- TpCallbackMayRunLong (Address: 0x180076ef0)
- TpCaptureCaller (Address: 0x180076d38)
- TpQueryPoolStackInformation (Address: 0x180076cb8)
- TpSetPoolMinThreads (Address: 0x1800771a8)
- TpSetPoolStackInformation (Address: 0x180076cc0)
- TpSimpleTryPost (Address: 0x1800771a0)
- wcscat_s (Address: 0x180076d68)
- wcschr (Address: 0x1800773e0)
- wcscmp (Address: 0x180077760)
- wcscpy_s (Address: 0x180077458)
- wcscspn (Address: 0x180077448)
- wcsncmp (Address: 0x180077250)
- wcsncpy (Address: 0x180077240)
- wcsncpy_s (Address: 0x180077440)
- wcsrchr (Address: 0x180076d88)
- wcsstr (Address: 0x1800773e8)
- wcstok_s (Address: 0x180076c98)
- WerReportSQMEvent (Address: 0x1800775f8)
- WinSqmEndSession (Address: 0x180076c80)
- WinSqmIsOptedIn (Address: 0x180077610)
- WinSqmSetDWORD (Address: 0x180076c88)
- WinSqmSetString (Address: 0x180076c90)
- WinSqmStartSession (Address: 0x180076cd8)
- ZwClose (Address: 0x180077640)
- ZwCreateFile (Address: 0x180077658)
- ZwCreateSection (Address: 0x180077668)
- ZwMapViewOfSection (Address: 0x180077708)
- ZwOpenKey (Address: 0x180077648)
- ZwQueryInformationFile (Address: 0x180077660)
- ZwQueryInformationProcess (Address: 0x180077670)
- ZwQuerySystemInformation (Address: 0x180077680)
- ZwQueryValueKey (Address: 0x180077650)
- ZwReadFile (Address: 0x180077718)
- ZwSetInformationFile (Address: 0x180077710)
- ZwUnmapViewOfSection (Address: 0x180077700)