Exported Functions

• CcCanIWrite (Ordinal: 1, Address: 0x353b0)
• CcCopyRead (Ordinal: 2, Address: 0x2c6d90)
• CcCopyWrite (Ordinal: 3, Address: 0x35a80)
• CcDeferWrite (Ordinal: 4, Address: 0xc8a80)
• CcFastCopyRead (Ordinal: 5, Address: 0x2e1090)
• CcFastCopyWrite (Ordinal: 6, Address: 0x21100)
• CcFastMdlReadWait (Ordinal: 7, Address: 0x1a4e40)
• CcFastReadNotPossible (Ordinal: 8, Address: 0x1a4e48)
• CcFastReadWait (Ordinal: 9, Address: 0x1a4e50)
• CcFlushCache (Ordinal: 10, Address: 0x48da0)
• CcGetDirtyPages (Ordinal: 11, Address: 0x2d7f0)
• CcGetFileObjectFromBcb (Ordinal: 12, Address: 0xc9ae0)
• CcGetFileObjectFromSectionPtrs (Ordinal: 13, Address: 0xc9ab0)
• CcGetFlushedValidData (Ordinal: 14, Address: 0x2b060)
• CcGetLsnForFileObject (Ordinal: 15, Address: 0xc99c0)
• CcInitializeCacheMap (Ordinal: 16, Address: 0x54030)
• CcIsThereDirtyData (Ordinal: 17, Address: 0xc98d0)
• CcMapData (Ordinal: 18, Address: 0x2bbc90)
• CcMdlRead (Ordinal: 19, Address: 0x33b440)
• CcMdlReadComplete (Ordinal: 20, Address: 0x33b920)
• CcMdlWriteAbort (Ordinal: 21, Address: 0xca320)
• CcMdlWriteComplete (Ordinal: 22, Address: 0x33b9a0)
• CcPinMappedData (Ordinal: 23, Address: 0x2ad620)
• CcPinRead (Ordinal: 24, Address: 0x2a9a00)
• CcPrepareMdlWrite (Ordinal: 25, Address: 0xc9b50)
• CcPreparePinWrite (Ordinal: 26, Address: 0x2adcb0)
• CcPurgeCacheSection (Ordinal: 27, Address: 0x5b420)
• CcRemapBcb (Ordinal: 28, Address: 0x49430)
• CcRepinBcb (Ordinal: 29, Address: 0xc9060)
• CcScheduleReadAhead (Ordinal: 30, Address: 0x25950)
• CcSetAdditionalCacheAttributes (Ordinal: 31, Address: 0x22e70)
• CcSetBcbOwnerPointer (Ordinal: 32, Address: 0x33b250)
• CcSetDirtyPageThreshold (Ordinal: 33, Address: 0xc9a80)
• CcSetDirtyPinnedData (Ordinal: 34, Address: 0x2ad00)
• CcSetFileSizes (Ordinal: 35, Address: 0x54460)
• CcSetLogHandleForFile (Ordinal: 36, Address: 0x2ce5f0)
• CcSetReadAheadGranularity (Ordinal: 37, Address: 0x54da0)
• CcUninitializeCacheMap (Ordinal: 38, Address: 0x53bb0)
• CcUnpinData (Ordinal: 39, Address: 0x2bbc50)
• CcUnpinDataForThread (Ordinal: 40, Address: 0x33b2c0)
• CcUnpinRepinnedBcb (Ordinal: 41, Address: 0xc9080)
• CcWaitForCurrentLazyWriterActivity (Ordinal: 42, Address: 0xca4b0)
• CcZeroData (Ordinal: 43, Address: 0x2928f0)
• CmRegisterCallback (Ordinal: 44, Address: 0x33c480)
• CmUnRegisterCallback (Ordinal: 45, Address: 0x33c5a0)
• DbgBreakPoint (Ordinal: 46, Address: 0x39e80)
• DbgBreakPointWithStatus (Ordinal: 47, Address: 0x39ea0)
• DbgCommandString (Ordinal: 48, Address: 0xf8410)
• DbgLoadImageSymbols (Ordinal: 49, Address: 0x17700)
• DbgPrint (Ordinal: 50, Address: 0x595f0)
• DbgPrintEx (Ordinal: 51, Address: 0xf8310)
• DbgPrintReturnControlC (Ordinal: 52, Address: 0xf82c0)
• DbgPrompt (Ordinal: 53, Address: 0xf83b0)
• DbgQueryDebugFilterState (Ordinal: 54, Address: 0x1f520)
• DbgSetDebugFilterState (Ordinal: 55, Address: 0x1da0)
• ExAcquireFastMutex (Ordinal: 56, Address: 0x484a0)
• ExAcquireFastMutexUnsafe (Ordinal: 57, Address: 0x4f700)
• ExAcquireResourceExclusiveLite (Ordinal: 58, Address: 0x38a50)
• ExAcquireResourceSharedLite (Ordinal: 59, Address: 0x3bc90)
• ExAcquireRundownProtection (Ordinal: 60, Address: 0x620a0)
• ExAcquireRundownProtectionCacheAware (Ordinal: 61, Address: 0x347a0)
• ExAcquireRundownProtectionCacheAwareEx (Ordinal: 62, Address: 0x101e80)
• ExAcquireRundownProtectionEx (Ordinal: 63, Address: 0x101d90)
• ExAcquireSharedStarveExclusive (Ordinal: 64, Address: 0x2d5b0)
• ExAcquireSharedWaitForExclusive (Ordinal: 65, Address: 0x52bf0)
• ExAllocateCacheAwareRundownProtection (Ordinal: 66, Address: 0x3a2230)
• ExAllocateFromPagedLookasideList (Ordinal: 67, Address: 0xcac90)
• ExAllocatePool (Ordinal: 68, Address: 0x7490)
• ExAllocatePoolWithQuota (Ordinal: 69, Address: 0x101fb0)
• ExAllocatePoolWithQuotaTag (Ordinal: 70, Address: 0x46980)
• ExAllocatePoolWithTag (Ordinal: 71, Address: 0x1702c0)
• ExAllocatePoolWithTagPriority (Ordinal: 72, Address: 0x45e90)
• ExConvertExclusiveToSharedLite (Ordinal: 73, Address: 0x629a0)
• ExCreateCallback (Ordinal: 74, Address: 0x239170)
• ExDeleteNPagedLookasideList (Ordinal: 75, Address: 0x102a30)
• ExDeletePagedLookasideList (Ordinal: 76, Address: 0x102a30)
• ExDeleteResourceLite (Ordinal: 77, Address: 0x53d70)
• ExDesktopObjectType (Ordinal: 78, Address: 0x194af0)
• ExDisableResourceBoostLite (Ordinal: 79, Address: 0x101bf0)
• ExEnterCriticalRegionAndAcquireFastMutexUnsafe (Ordinal: 80, Address: 0x61780)
• ExEnterCriticalRegionAndAcquireResourceExclusive (Ordinal: 81, Address: 0x464c0)
• ExEnterCriticalRegionAndAcquireResourceShared (Ordinal: 82, Address: 0x46df0)
• ExEnterCriticalRegionAndAcquireSharedWaitForExclusive (Ordinal: 83, Address: 0x101c00)
• ExEnumHandleTable (Ordinal: 84, Address: 0x26a1e0)
• ExEventObjectType (Ordinal: 85, Address: 0x194a80)
• ExExtendZone (Ordinal: 86, Address: 0x100b0)
• ExFreeCacheAwareRundownProtection (Ordinal: 87, Address: 0x3a2350)
• ExFreePool (Ordinal: 88, Address: 0x170390)
• ExFreePoolWithTag (Ordinal: 89, Address: 0x1703a0)
• ExFreeToPagedLookasideList (Ordinal: 90, Address: 0xcacd0)
• ExGetCurrentProcessorCounts (Ordinal: 91, Address: 0x102e20)
• ExGetCurrentProcessorCpuUsage (Ordinal: 92, Address: 0x102de0)
• ExGetExclusiveWaiterCount (Ordinal: 93, Address: 0x101c40)
• ExGetPreviousMode (Ordinal: 94, Address: 0x30050)
• ExGetSharedWaiterCount (Ordinal: 95, Address: 0x101c50)
• ExInitializeNPagedLookasideList (Ordinal: 96, Address: 0xae40)
• ExInitializePagedLookasideList (Ordinal: 97, Address: 0x254030)
• ExInitializeResourceLite (Ordinal: 98, Address: 0x50a20)
• ExInitializeRundownProtection (Ordinal: 99, Address: 0x247660)
• ExInitializeRundownProtectionCacheAware (Ordinal: 100, Address: 0x240380)
• ExInitializeZone (Ordinal: 101, Address: 0xa810)
• ExInterlockedAddLargeInteger (Ordinal: 102, Address: 0x39f40)
• ExInterlockedAddUlong (Ordinal: 103, Address: 0x39f60)
• ExInterlockedExtendZone (Ordinal: 104, Address: 0x102c10)
• ExInterlockedInsertHeadList (Ordinal: 105, Address: 0x39f80)
• ExInterlockedInsertTailList (Ordinal: 106, Address: 0x39fc0)
• ExInterlockedPopEntryList (Ordinal: 107, Address: 0x3a030)
• ExInterlockedPushEntryList (Ordinal: 108, Address: 0x3a060)
• ExInterlockedRemoveHeadList (Ordinal: 109, Address: 0x3a000)
• ExIsProcessorFeaturePresent (Ordinal: 110, Address: 0x102db0)
• ExIsResourceAcquiredExclusiveLite (Ordinal: 111, Address: 0x485f0)
• ExIsResourceAcquiredSharedLite (Ordinal: 112, Address: 0x47c50)
• ExLocalTimeToSystemTime (Ordinal: 113, Address: 0x5b330)
• ExNotifyCallback (Ordinal: 114, Address: 0x30db0)
• ExQueryDepthSList (Ordinal: 115, Address: 0x38020)
• ExQueryPoolBlockSize (Ordinal: 116, Address: 0x1025c0)
• ExQueueWorkItem (Ordinal: 117, Address: 0x3ca50)
• ExRaiseAccessViolation (Ordinal: 118, Address: 0x3a6120)
• ExRaiseDatatypeMisalignment (Ordinal: 119, Address: 0x3a6140)
• ExRaiseException (Ordinal: 120, Address: 0xf8480)
• ExRaiseHardError (Ordinal: 121, Address: 0x268fc0)
• ExRaiseStatus (Ordinal: 122, Address: 0x30920)
• ExReInitializeRundownProtection (Ordinal: 123, Address: 0x3a2170)
• ExReInitializeRundownProtectionCacheAware (Ordinal: 124, Address: 0x2050)
• ExRegisterCallback (Ordinal: 125, Address: 0x4b90)
• ExReinitializeResourceLite (Ordinal: 126, Address: 0x5a770)
• ExReleaseFastMutex (Ordinal: 127, Address: 0x48500)
• ExReleaseFastMutexUnsafe (Ordinal: 128, Address: 0x4f740)
• ExReleaseFastMutexUnsafeAndLeaveCriticalRegion (Ordinal: 129, Address: 0x617d0)
• ExReleaseResourceAndLeaveCriticalRegion (Ordinal: 130, Address: 0x46540)
• ExReleaseResourceForThreadLite (Ordinal: 131, Address: 0x29510)
• ExReleaseResourceLite (Ordinal: 132, Address: 0x3a310)
• ExReleaseRundownProtection (Ordinal: 133, Address: 0x101dd0)
• ExReleaseRundownProtectionCacheAware (Ordinal: 134, Address: 0x34750)
• ExReleaseRundownProtectionCacheAwareEx (Ordinal: 135, Address: 0x101ee0)
• ExReleaseRundownProtectionEx (Ordinal: 136, Address: 0x101e20)
• ExRundownCompleted (Ordinal: 137, Address: 0x3a2180)
• ExRundownCompletedCacheAware (Ordinal: 138, Address: 0x101f60)
• ExSemaphoreObjectType (Ordinal: 139, Address: 0x194398)
• ExSetResourceOwnerPointer (Ordinal: 140, Address: 0x29570)
• ExSetTimerResolution (Ordinal: 141, Address: 0x28c350)
• ExSizeOfRundownProtectionCacheAware (Ordinal: 142, Address: 0x240350)
• ExSystemExceptionFilter (Ordinal: 143, Address: 0x3a4f10)
• ExSystemTimeToLocalTime (Ordinal: 144, Address: 0x2a670)
• ExTryToAcquireFastMutex (Ordinal: 145, Address: 0x101bb0)
• ExUnregisterCallback (Ordinal: 146, Address: 0x1028f0)
• ExUuidCreate (Ordinal: 147, Address: 0x29d7d0)
• ExVerifySuite (Ordinal: 148, Address: 0x5290)
• ExWaitForRundownProtectionRelease (Ordinal: 149, Address: 0x3a2190)
• ExWaitForRundownProtectionReleaseCacheAware (Ordinal: 150, Address: 0x1fd0)
• ExWindowStationObjectType (Ordinal: 151, Address: 0x194af8)
• ExfAcquirePushLockExclusive (Ordinal: 152, Address: 0x2cb50)
• ExfAcquirePushLockShared (Ordinal: 153, Address: 0x2bf60)
• ExfReleasePushLock (Ordinal: 154, Address: 0x2cc50)
• ExfReleasePushLockExclusive (Ordinal: 155, Address: 0x2090)
• ExfReleasePushLockShared (Ordinal: 156, Address: 0x10370)
• ExfTryToWakePushLock (Ordinal: 157, Address: 0x1040d0)
• ExfUnblockPushLock (Ordinal: 158, Address: 0x1041c0)
• ExpInterlockedFlushSList (Ordinal: 159, Address: 0x43400)
• ExpInterlockedPopEntrySList (Ordinal: 160, Address: 0x43360)
• ExpInterlockedPushEntrySList (Ordinal: 161, Address: 0x433b0)
• FsRtlAcquireFileExclusive (Ordinal: 162, Address: 0x358050)
• FsRtlAddBaseMcbEntry (Ordinal: 163, Address: 0x275f0)
• FsRtlAddLargeMcbEntry (Ordinal: 164, Address: 0x277d0)
• FsRtlAddMcbEntry (Ordinal: 165, Address: 0xcafd0)
• FsRtlAddToTunnelCache (Ordinal: 166, Address: 0x29e2f0)
• FsRtlAllocateFileLock (Ordinal: 167, Address: 0x20670)
• FsRtlAllocatePool (Ordinal: 168, Address: 0xcc420)
• FsRtlAllocatePoolWithQuota (Ordinal: 169, Address: 0xcc450)
• FsRtlAllocatePoolWithQuotaTag (Ordinal: 170, Address: 0xcc4b0)
• FsRtlAllocatePoolWithTag (Ordinal: 171, Address: 0xcc480)
• FsRtlAllocateResource (Ordinal: 172, Address: 0x358090)
• FsRtlAreNamesEqual (Ordinal: 173, Address: 0x2c1190)
• FsRtlBalanceReads (Ordinal: 174, Address: 0x240230)
• FsRtlCheckLockForReadAccess (Ordinal: 175, Address: 0x215f0)
• FsRtlCheckLockForWriteAccess (Ordinal: 176, Address: 0x623d0)
• FsRtlCheckOplock (Ordinal: 177, Address: 0x51770)
• FsRtlCopyRead (Ordinal: 178, Address: 0x356810)
• FsRtlCopyWrite (Ordinal: 179, Address: 0x356be0)
• FsRtlCreateSectionForDataScan (Ordinal: 180, Address: 0xcd660)
• FsRtlCurrentBatchOplock (Ordinal: 181, Address: 0x2c7f10)
• FsRtlDeleteKeyFromTunnelCache (Ordinal: 182, Address: 0x271860)
• FsRtlDeleteTunnelCache (Ordinal: 183, Address: 0x264680)
• FsRtlDeregisterUncProvider (Ordinal: 184, Address: 0x3585f0)
• FsRtlDissectDbcs (Ordinal: 185, Address: 0x3589a0)
• FsRtlDissectName (Ordinal: 186, Address: 0x2c4b50)
• FsRtlDoesDbcsContainWildCards (Ordinal: 187, Address: 0x358a80)
• FsRtlDoesNameContainWildCards (Ordinal: 188, Address: 0x2cb240)
• FsRtlFastCheckLockForRead (Ordinal: 189, Address: 0x24cb0)
• FsRtlFastCheckLockForWrite (Ordinal: 190, Address: 0x240b0)
• FsRtlFastUnlockAll (Ordinal: 191, Address: 0x56140)
• FsRtlFastUnlockAllByKey (Ordinal: 192, Address: 0xcbfe0)
• FsRtlFastUnlockSingle (Ordinal: 193, Address: 0x21800)
• FsRtlFindInTunnelCache (Ordinal: 194, Address: 0x295e60)
• FsRtlFreeFileLock (Ordinal: 195, Address: 0x7e490)
• FsRtlGetFileSize (Ordinal: 196, Address: 0x2c4cb0)
• FsRtlGetNextBaseMcbEntry (Ordinal: 197, Address: 0xcb830)
• FsRtlGetNextFileLock (Ordinal: 198, Address: 0x12e20)
• FsRtlGetNextLargeMcbEntry (Ordinal: 199, Address: 0x278c0)
• FsRtlGetNextMcbEntry (Ordinal: 200, Address: 0xcb100)
• FsRtlIncrementCcFastReadNoWait (Ordinal: 201, Address: 0xcafa0)
• FsRtlIncrementCcFastReadNotPossible (Ordinal: 202, Address: 0x358060)
• FsRtlIncrementCcFastReadResourceMiss (Ordinal: 203, Address: 0xcafb0)
• FsRtlIncrementCcFastReadWait (Ordinal: 204, Address: 0x2e1060)
• FsRtlInitializeBaseMcb (Ordinal: 205, Address: 0x25490)
• FsRtlInitializeFileLock (Ordinal: 206, Address: 0x62ab0)
• FsRtlInitializeLargeMcb (Ordinal: 207, Address: 0x253e0)
• FsRtlInitializeMcb (Ordinal: 208, Address: 0x358070)
• FsRtlInitializeOplock (Ordinal: 209, Address: 0x2aece0)
• FsRtlInitializeTunnelCache (Ordinal: 210, Address: 0x264640)
• FsRtlInsertPerFileObjectContext (Ordinal: 211, Address: 0xcd9c0)
• FsRtlInsertPerStreamContext (Ordinal: 212, Address: 0x27df0)
• FsRtlIsDbcsInExpression (Ordinal: 213, Address: 0x358af0)
• FsRtlIsFatDbcsLegal (Ordinal: 214, Address: 0x296650)
• FsRtlIsHpfsDbcsLegal (Ordinal: 215, Address: 0x3586c0)
• FsRtlIsNameInExpression (Ordinal: 216, Address: 0x2cb6e0)
• FsRtlIsNtstatusExpected (Ordinal: 217, Address: 0xcc3f0)
• FsRtlIsPagingFile (Ordinal: 218, Address: 0xcdf30)
• FsRtlIsTotalDeviceFailure (Ordinal: 219, Address: 0x1e530)
• FsRtlLegalAnsiCharacterArray (Ordinal: 220, Address: 0x76b10)
• FsRtlLookupBaseMcbEntry (Ordinal: 221, Address: 0x345f0)
• FsRtlLookupLargeMcbEntry (Ordinal: 222, Address: 0x344e0)
• FsRtlLookupLastBaseMcbEntry (Ordinal: 223, Address: 0x279f0)
• FsRtlLookupLastBaseMcbEntryAndIndex (Ordinal: 224, Address: 0xcb540)
• FsRtlLookupLastLargeMcbEntry (Ordinal: 225, Address: 0x27a80)
• FsRtlLookupLastLargeMcbEntryAndIndex (Ordinal: 226, Address: 0xcb5f0)
• FsRtlLookupLastMcbEntry (Ordinal: 227, Address: 0xcb090)
• FsRtlLookupMcbEntry (Ordinal: 228, Address: 0xcb000)
• FsRtlLookupPerFileObjectContext (Ordinal: 229, Address: 0xcdbb0)
• FsRtlLookupPerStreamContextInternal (Ordinal: 230, Address: 0x29430)
• FsRtlMdlRead (Ordinal: 231, Address: 0x357850)
• FsRtlMdlReadComplete (Ordinal: 232, Address: 0xcad00)
• FsRtlMdlReadCompleteDev (Ordinal: 233, Address: 0xcaed0)
• FsRtlMdlReadDev (Ordinal: 234, Address: 0x357590)
• FsRtlMdlWriteComplete (Ordinal: 235, Address: 0x357f50)
• FsRtlMdlWriteCompleteDev (Ordinal: 236, Address: 0x358020)
• FsRtlNormalizeNtstatus (Ordinal: 237, Address: 0xf490)
• FsRtlNotifyChangeDirectory (Ordinal: 238, Address: 0x3592a0)
• FsRtlNotifyCleanup (Ordinal: 239, Address: 0x290730)
• FsRtlNotifyFilterChangeDirectory (Ordinal: 240, Address: 0x2a1540)
• FsRtlNotifyFilterReportChange (Ordinal: 241, Address: 0x2abaf0)
• FsRtlNotifyFullChangeDirectory (Ordinal: 242, Address: 0x359300)
• FsRtlNotifyFullReportChange (Ordinal: 243, Address: 0x359470)
• FsRtlNotifyInitializeSync (Ordinal: 244, Address: 0x2af9b0)
• FsRtlNotifyReportChange (Ordinal: 245, Address: 0x359420)
• FsRtlNotifyUninitializeSync (Ordinal: 246, Address: 0x2b0a60)
• FsRtlNotifyVolumeEvent (Ordinal: 247, Address: 0x271070)
• FsRtlNumberOfRunsInBaseMcb (Ordinal: 248, Address: 0x33220)
• FsRtlNumberOfRunsInLargeMcb (Ordinal: 249, Address: 0x27b60)
• FsRtlNumberOfRunsInMcb (Ordinal: 250, Address: 0xcb0f0)
• FsRtlOplockFsctrl (Ordinal: 251, Address: 0x268de0)
• FsRtlOplockIsFastIoPossible (Ordinal: 252, Address: 0x2c4540)
• FsRtlPostPagingFileStackOverflow (Ordinal: 253, Address: 0x1310)
• FsRtlPostStackOverflow (Ordinal: 254, Address: 0x3410)
• FsRtlPrepareMdlWrite (Ordinal: 255, Address: 0x357e40)
• FsRtlPrepareMdlWriteDev (Ordinal: 256, Address: 0x357960)
• FsRtlPrivateLock (Ordinal: 257, Address: 0x213c0)
• FsRtlProcessFileLock (Ordinal: 258, Address: 0x63310)
• FsRtlRegisterFileSystemFilterCallbacks (Ordinal: 259, Address: 0x31e0)
• FsRtlRegisterUncProvider (Ordinal: 260, Address: 0x253920)
• FsRtlReleaseFile (Ordinal: 261, Address: 0x2bc1c0)
• FsRtlRemoveBaseMcbEntry (Ordinal: 262, Address: 0x28580)
• FsRtlRemoveLargeMcbEntry (Ordinal: 263, Address: 0x28730)
• FsRtlRemoveMcbEntry (Ordinal: 264, Address: 0xcaff0)
• FsRtlRemovePerFileObjectContext (Ordinal: 265, Address: 0xcdd60)
• FsRtlRemovePerStreamContext (Ordinal: 266, Address: 0x235b0)
• FsRtlResetBaseMcb (Ordinal: 267, Address: 0x33020)
• FsRtlResetLargeMcb (Ordinal: 268, Address: 0x7d540)
• FsRtlSplitBaseMcb (Ordinal: 269, Address: 0xcb8b0)
• FsRtlSplitLargeMcb (Ordinal: 270, Address: 0xcba90)
• FsRtlSyncVolumes (Ordinal: 271, Address: 0x235de0)
• FsRtlTeardownPerStreamContexts (Ordinal: 272, Address: 0x2ce3b0)
• FsRtlTruncateBaseMcb (Ordinal: 273, Address: 0x27ca0)
• FsRtlTruncateLargeMcb (Ordinal: 274, Address: 0x27d10)
• FsRtlTruncateMcb (Ordinal: 275, Address: 0xcafc0)
• FsRtlUninitializeBaseMcb (Ordinal: 276, Address: 0xcb1e0)
• FsRtlUninitializeFileLock (Ordinal: 277, Address: 0x62ad0)
• FsRtlUninitializeLargeMcb (Ordinal: 278, Address: 0x2be20)
• FsRtlUninitializeMcb (Ordinal: 279, Address: 0x358080)
• FsRtlUninitializeOplock (Ordinal: 280, Address: 0x2bec0)
• HalDispatchTable (Ordinal: 281, Address: 0x176710)
• HalExamineMBR (Ordinal: 282, Address: 0x54a0)
• HalPrivateDispatchTable (Ordinal: 283, Address: 0x1767c0)
• HeadlessDispatch (Ordinal: 284, Address: 0x20f0)
• InbvAcquireDisplayOwnership (Ordinal: 285, Address: 0xceac0)
• InbvCheckDisplayOwnership (Ordinal: 286, Address: 0x4de0)
• InbvDisplayString (Ordinal: 287, Address: 0x5680)
• InbvEnableBootDriver (Ordinal: 288, Address: 0x4d50)
• InbvEnableDisplayString (Ordinal: 289, Address: 0xce780)
• InbvInstallDisplayStringFilter (Ordinal: 290, Address: 0xcea30)
• InbvIsBootDriverInstalled (Ordinal: 291, Address: 0xce7a0)
• InbvNotifyDisplayOwnershipLost (Ordinal: 292, Address: 0x70d0)
• InbvResetDisplay (Ordinal: 293, Address: 0xce7b0)
• InbvSetScrollRegion (Ordinal: 294, Address: 0xceb20)
• InbvSetTextColor (Ordinal: 295, Address: 0xce950)
• InbvSolidColorFill (Ordinal: 296, Address: 0xce860)
• InitSafeBootMode (Ordinal: 297, Address: 0x1a44f0)
• InitializeSListHead (Ordinal: 298, Address: 0x2ff40)
• IoAcquireCancelSpinLock (Ordinal: 299, Address: 0x338d0)
• IoAcquireRemoveLockEx (Ordinal: 300, Address: 0x338f0)
• IoAcquireVpbSpinLock (Ordinal: 301, Address: 0x338d0)
• IoAdapterObjectType (Ordinal: 302, Address: 0x1a3f80)
• IoAllocateAdapterChannel (Ordinal: 303, Address: 0xcecb0)
• IoAllocateController (Ordinal: 304, Address: 0x91e0)
• IoAllocateDriverObjectExtension (Ordinal: 305, Address: 0xa470)
• IoAllocateErrorLogEntry (Ordinal: 306, Address: 0xa550)
• IoAllocateIrp (Ordinal: 307, Address: 0x4ae40)
• IoAllocateMdl (Ordinal: 308, Address: 0x44ba0)
• IoAllocateWorkItem (Ordinal: 309, Address: 0x2d600)
• IoAssignDriveLetters (Ordinal: 310, Address: 0x23d710)
• IoAssignResources (Ordinal: 311, Address: 0x364460)
• IoAttachDevice (Ordinal: 312, Address: 0x35c610)
• IoAttachDeviceByPointer (Ordinal: 313, Address: 0xcef10)
• IoAttachDeviceToDeviceStack (Ordinal: 314, Address: 0x17650)
• IoAttachDeviceToDeviceStackSafe (Ordinal: 315, Address: 0x13600)
• IoBuildAsynchronousFsdRequest (Ordinal: 316, Address: 0x20e90)
• IoBuildDeviceIoControlRequest (Ordinal: 317, Address: 0x2cde0)
• IoBuildPartialMdl (Ordinal: 318, Address: 0x7fd90)
• IoBuildSynchronousFsdRequest (Ordinal: 319, Address: 0x22a50)
• IoCallDriver (Ordinal: 320, Address: 0x38030)
• IoCancelFileOpen (Ordinal: 321, Address: 0x35de20)
• IoCancelIrp (Ordinal: 322, Address: 0x272d0)
• IoCheckDesiredAccess (Ordinal: 323, Address: 0x35c700)
• IoCheckEaBufferValidity (Ordinal: 324, Address: 0x28a900)
• IoCheckFunctionAccess (Ordinal: 325, Address: 0x2b3d60)
• IoCheckQuerySetFileInformation (Ordinal: 326, Address: 0x2b3ec0)
• IoCheckQuerySetVolumeInformation (Ordinal: 327, Address: 0x35c780)
• IoCheckQuotaBufferValidity (Ordinal: 328, Address: 0x35c7c0)
• IoCheckShareAccess (Ordinal: 329, Address: 0x2c87e0)
• IoCompleteRequest (Ordinal: 330, Address: 0x44310)
• IoConnectInterrupt (Ordinal: 331, Address: 0x262ff0)
• IoCreateController (Ordinal: 332, Address: 0x235060)
• IoCreateDevice (Ordinal: 333, Address: 0x276c80)
• IoCreateDisk (Ordinal: 334, Address: 0x35a230)
• IoCreateDriver (Ordinal: 335, Address: 0x2498f0)
• IoCreateFile (Ordinal: 336, Address: 0x2c4280)
• IoCreateFileSpecifyDeviceObjectHint (Ordinal: 337, Address: 0x2a85d0)
• IoCreateNotificationEvent (Ordinal: 338, Address: 0x35c880)
• IoCreateStreamFileObject (Ordinal: 339, Address: 0x35c940)
• IoCreateStreamFileObjectEx (Ordinal: 340, Address: 0x35c950)
• IoCreateStreamFileObjectLite (Ordinal: 341, Address: 0x2ce480)
• IoCreateSymbolicLink (Ordinal: 342, Address: 0x253d00)
• IoCreateSynchronizationEvent (Ordinal: 343, Address: 0x246ce0)
• IoCreateUnprotectedSymbolicLink (Ordinal: 344, Address: 0x238fa0)
• IoCsqInitialize (Ordinal: 345, Address: 0xa430)
• IoCsqInitializeEx (Ordinal: 346, Address: 0xcfdc0)
• IoCsqInsertIrp (Ordinal: 347, Address: 0x1cda0)
• IoCsqInsertIrpEx (Ordinal: 348, Address: 0x1cdb0)
• IoCsqRemoveIrp (Ordinal: 349, Address: 0x1d270)
• IoCsqRemoveNextIrp (Ordinal: 350, Address: 0x45f10)
• IoDeleteController (Ordinal: 351, Address: 0x288110)
• IoDeleteDevice (Ordinal: 352, Address: 0x195b0)
• IoDeleteDriver (Ordinal: 353, Address: 0x288110)
• IoDeleteSymbolicLink (Ordinal: 354, Address: 0x256f10)
• IoDetachDevice (Ordinal: 355, Address: 0x19910)
• IoDeviceHandlerObjectSize (Ordinal: 356, Address: 0x1a3f4c)
• IoDeviceHandlerObjectType (Ordinal: 357, Address: 0x1a3f58)
• IoDeviceObjectType (Ordinal: 358, Address: 0x1a3f68)
• IoDisconnectInterrupt (Ordinal: 359, Address: 0x265ee0)
• IoDriverObjectType (Ordinal: 360, Address: 0x1a3f60)
• IoEnqueueIrp (Ordinal: 361, Address: 0x35cf40)
• IoEnumerateDeviceObjectList (Ordinal: 362, Address: 0xaf80)
• IoEnumerateRegisteredFiltersList (Ordinal: 363, Address: 0x35e2f0)
• IoFastQueryNetworkAttributes (Ordinal: 364, Address: 0x35cfa0)
• IoFileObjectType (Ordinal: 365, Address: 0x1a3f50)
• IoForwardAndCatchIrp (Ordinal: 366, Address: 0x267b30)
• IoForwardIrpSynchronously (Ordinal: 367, Address: 0x267b30)
• IoFreeController (Ordinal: 368, Address: 0x9290)
• IoFreeErrorLogEntry (Ordinal: 369, Address: 0xcedc0)
• IoFreeIrp (Ordinal: 370, Address: 0x4ae50)
• IoFreeMdl (Ordinal: 371, Address: 0x44660)
• IoFreeWorkItem (Ordinal: 372, Address: 0x2d650)
• IoGetAttachedDevice (Ordinal: 373, Address: 0x4f5e0)
• IoGetAttachedDeviceReference (Ordinal: 374, Address: 0x1e570)
• IoGetBaseFileSystemDeviceObject (Ordinal: 375, Address: 0x47a00)
• IoGetBootDiskInformation (Ordinal: 376, Address: 0x22f520)
• IoGetConfigurationInformation (Ordinal: 377, Address: 0x23fd70)
• IoGetCurrentProcess (Ordinal: 378, Address: 0x46c70)
• IoGetDeviceAttachmentBaseRef (Ordinal: 379, Address: 0x13650)
• IoGetDeviceInterfaceAlias (Ordinal: 380, Address: 0x255850)
• IoGetDeviceInterfaces (Ordinal: 381, Address: 0x28be00)
• IoGetDeviceObjectPointer (Ordinal: 382, Address: 0x2add80)
• IoGetDeviceProperty (Ordinal: 383, Address: 0x29c620)
• IoGetDeviceToVerify (Ordinal: 384, Address: 0xf4d0)
• IoGetDiskDeviceObject (Ordinal: 385, Address: 0xb0b0)
• IoGetDmaAdapter (Ordinal: 386, Address: 0x28b8b0)
• IoGetDriverObjectExtension (Ordinal: 387, Address: 0x15330)
• IoGetFileObjectGenericMapping (Ordinal: 388, Address: 0x2bd540)
• IoGetInitialStack (Ordinal: 389, Address: 0x35d110)
• IoGetLowerDeviceObject (Ordinal: 390, Address: 0xaf30)
• IoGetPagingIoPriority (Ordinal: 391, Address: 0x34730)
• IoGetRelatedDeviceObject (Ordinal: 392, Address: 0x94010)
• IoGetRequestorProcess (Ordinal: 393, Address: 0x55de0)
• IoGetRequestorProcessId (Ordinal: 394, Address: 0x629c0)
• IoGetRequestorSessionId (Ordinal: 395, Address: 0x1f8e0)
• IoGetStackLimits (Ordinal: 396, Address: 0x46d20)
• IoGetTopLevelIrp (Ordinal: 397, Address: 0x48660)
• IoInitializeIrp (Ordinal: 398, Address: 0x2d680)
• IoInitializeRemoveLockEx (Ordinal: 399, Address: 0x246920)
• IoInitializeTimer (Ordinal: 400, Address: 0x23fb30)
• IoInvalidateDeviceRelations (Ordinal: 401, Address: 0x16110)
• IoInvalidateDeviceState (Ordinal: 402, Address: 0x6260)
• IoIs32bitProcess (Ordinal: 403, Address: 0x31070)
• IoIsFileOriginRemote (Ordinal: 404, Address: 0xcfd10)
• IoIsOperationSynchronous (Ordinal: 405, Address: 0x48630)
• IoIsSystemThread (Ordinal: 406, Address: 0x20280)
• IoIsValidNameGraftingBuffer (Ordinal: 407, Address: 0x35d130)
• IoIsWdmVersionAvailable (Ordinal: 408, Address: 0x28bde0)
• IoMakeAssociatedIrp (Ordinal: 409, Address: 0x2e5d0)
• IoOpenDeviceInterfaceRegistryKey (Ordinal: 410, Address: 0x26fee0)
• IoOpenDeviceRegistryKey (Ordinal: 411, Address: 0x28b790)
• IoPageRead (Ordinal: 412, Address: 0x34df0)
• IoPnPDeliverServicePowerNotification (Ordinal: 413, Address: 0x366210)
• IoQueryDeviceDescription (Ordinal: 414, Address: 0x249c60)
• IoQueryFileDosDeviceName (Ordinal: 415, Address: 0x35dfc0)
• IoQueryFileInformation (Ordinal: 416, Address: 0x2de9c0)
• IoQueryVolumeInformation (Ordinal: 417, Address: 0x35d710)
• IoQueueThreadIrp (Ordinal: 418, Address: 0x36710)
• IoQueueWorkItem (Ordinal: 419, Address: 0x34080)
• IoRaiseHardError (Ordinal: 420, Address: 0xf4e0)
• IoRaiseInformationalHardError (Ordinal: 421, Address: 0xcef70)
• IoReadDiskSignature (Ordinal: 422, Address: 0x2275a0)
• IoReadOperationCount (Ordinal: 423, Address: 0x1a3f48)
• IoReadPartitionTable (Ordinal: 424, Address: 0x22da10)
• IoReadPartitionTableEx (Ordinal: 425, Address: 0x2631e0)
• IoReadTransferCount (Ordinal: 426, Address: 0x1a3f38)
• IoRegisterBootDriverReinitialization (Ordinal: 427, Address: 0x227880)
• IoRegisterDeviceInterface (Ordinal: 428, Address: 0x254bf0)
• IoRegisterDriverReinitialization (Ordinal: 429, Address: 0x2340a0)
• IoRegisterFileSystem (Ordinal: 430, Address: 0x259370)
• IoRegisterFsRegistrationChange (Ordinal: 431, Address: 0x22f1e0)
• IoRegisterLastChanceShutdownNotification (Ordinal: 432, Address: 0x2278f0)
• IoRegisterPlugPlayNotification (Ordinal: 433, Address: 0x28ba90)
• IoRegisterShutdownNotification (Ordinal: 434, Address: 0x241880)
• IoReleaseCancelSpinLock (Ordinal: 435, Address: 0x38080)
• IoReleaseRemoveLockAndWaitEx (Ordinal: 436, Address: 0x3643f0)
• IoReleaseRemoveLockEx (Ordinal: 437, Address: 0x33950)
• IoReleaseVpbSpinLock (Ordinal: 438, Address: 0x38080)
• IoRemoveShareAccess (Ordinal: 439, Address: 0x2c6260)
• IoReportDetectedDevice (Ordinal: 440, Address: 0x230710)
• IoReportHalResourceUsage (Ordinal: 441, Address: 0x403a10)
• IoReportResourceForDetection (Ordinal: 442, Address: 0x23e3e0)
• IoReportResourceUsage (Ordinal: 443, Address: 0x23cc40)
• IoReportTargetDeviceChange (Ordinal: 444, Address: 0x3656c0)
• IoReportTargetDeviceChangeAsynchronous (Ordinal: 445, Address: 0x18020)
• IoRequestDeviceEject (Ordinal: 446, Address: 0xd52f0)
• IoReuseIrp (Ordinal: 447, Address: 0x32dd0)
• IoSetCompletionRoutineEx (Ordinal: 448, Address: 0x2d720)
• IoSetDeviceInterfaceState (Ordinal: 449, Address: 0x255f50)
• IoSetDeviceToVerify (Ordinal: 450, Address: 0xf660)
• IoSetFileOrigin (Ordinal: 451, Address: 0x36790)
• IoSetHardErrorOrVerifyDevice (Ordinal: 452, Address: 0xf740)
• IoSetInformation (Ordinal: 453, Address: 0x35d740)
• IoSetIoCompletion (Ordinal: 454, Address: 0x2aeb60)
• IoSetPartitionInformation (Ordinal: 455, Address: 0x3598e0)
• IoSetPartitionInformationEx (Ordinal: 456, Address: 0x35a4c0)
• IoSetShareAccess (Ordinal: 457, Address: 0x2c4450)
• IoSetStartIoAttributes (Ordinal: 458, Address: 0x58a0)
• IoSetSystemPartition (Ordinal: 459, Address: 0x35e090)
• IoSetThreadHardErrorMode (Ordinal: 460, Address: 0x55910)
• IoSetTopLevelIrp (Ordinal: 461, Address: 0x48610)
• IoStartNextPacket (Ordinal: 462, Address: 0x331e0)
• IoStartNextPacketByKey (Ordinal: 463, Address: 0xcfc00)
• IoStartPacket (Ordinal: 464, Address: 0x32f40)
• IoStartTimer (Ordinal: 465, Address: 0xc000)
• IoStatisticsLock (Ordinal: 466, Address: 0x192630)
• IoStopTimer (Ordinal: 467, Address: 0xce50)
• IoSynchronousInvalidateDeviceRelations (Ordinal: 468, Address: 0x2470e0)
• IoSynchronousPageWrite (Ordinal: 469, Address: 0x367c0)
• IoThreadToProcess (Ordinal: 470, Address: 0x61820)
• IoTranslateBusAddress (Ordinal: 471, Address: 0xd5460)
• IoUnregisterFileSystem (Ordinal: 472, Address: 0x25d840)
• IoUnregisterFsRegistrationChange (Ordinal: 473, Address: 0x35db50)
• IoUnregisterPlugPlayNotification (Ordinal: 474, Address: 0x28c2a0)
• IoUnregisterShutdownNotification (Ordinal: 475, Address: 0x3b8230)
• IoUpdateShareAccess (Ordinal: 476, Address: 0x2dbf80)
• IoValidateDeviceIoControlAccess (Ordinal: 477, Address: 0xcfd70)
• IoVerifyPartitionTable (Ordinal: 478, Address: 0x35a620)
• IoVerifyVolume (Ordinal: 479, Address: 0x35dbe0)
• IoVolumeDeviceToDosName (Ordinal: 480, Address: 0x35e8f0)
• IoWMIAllocateInstanceIds (Ordinal: 481, Address: 0x3970a0)
• IoWMIDeviceObjectToInstanceName (Ordinal: 482, Address: 0x397c60)
• IoWMIDeviceObjectToProviderId (Ordinal: 483, Address: 0x8da0)
• IoWMIExecuteMethod (Ordinal: 484, Address: 0x397aa0)
• IoWMIHandleToInstanceName (Ordinal: 485, Address: 0x249eb0)
• IoWMIOpenBlock (Ordinal: 486, Address: 0x2eaf70)
• IoWMIQueryAllData (Ordinal: 487, Address: 0x254500)
• IoWMIQueryAllDataMultiple (Ordinal: 488, Address: 0x397630)
• IoWMIQuerySingleInstance (Ordinal: 489, Address: 0x24a2a0)
• IoWMIQuerySingleInstanceMultiple (Ordinal: 490, Address: 0x397720)
• IoWMIRegistrationControl (Ordinal: 491, Address: 0x279c70)
• IoWMISetNotificationCallback (Ordinal: 492, Address: 0x2548e0)
• IoWMISetSingleInstance (Ordinal: 493, Address: 0x397820)
• IoWMISetSingleItem (Ordinal: 494, Address: 0x397950)
• IoWMISuggestInstanceName (Ordinal: 495, Address: 0x397220)
• IoWMIWriteEvent (Ordinal: 496, Address: 0x8bf0)
• IoWriteErrorLogEntry (Ordinal: 497, Address: 0xa690)
• IoWriteOperationCount (Ordinal: 498, Address: 0x1a3f44)
• IoWritePartitionTable (Ordinal: 499, Address: 0x359c40)
• IoWritePartitionTableEx (Ordinal: 500, Address: 0x35a270)
• IoWriteTransferCount (Ordinal: 501, Address: 0x1a3f30)
• IofCallDriver (Ordinal: 502, Address: 0x38030)
• IofCompleteRequest (Ordinal: 503, Address: 0x44310)
• KdChangeOption (Ordinal: 504, Address: 0xd6fb0)
• KdDebuggerEnabled (Ordinal: 505, Address: 0x1a28c8)
• KdDebuggerNotPresent (Ordinal: 506, Address: 0x1796e7)
• KdDisableDebugger (Ordinal: 507, Address: 0xd7190)
• KdEnableDebugger (Ordinal: 508, Address: 0xd72f0)
• KdEnteredDebugger (Ordinal: 509, Address: 0x1a28c0)
• KdPollBreakIn (Ordinal: 510, Address: 0xd7510)
• KdPowerTransition (Ordinal: 511, Address: 0xd74d0)
• KdRefreshDebuggerNotPresent (Ordinal: 512, Address: 0x7ff10)
• KdSystemDebugControl (Ordinal: 513, Address: 0x3726f0)
• KeAcquireGuardedMutex (Ordinal: 514, Address: 0x468a0)
• KeAcquireGuardedMutexUnsafe (Ordinal: 515, Address: 0x4f700)
• KeAcquireInStackQueuedSpinLock (Ordinal: 516, Address: 0x2cdc0)
• KeAcquireInStackQueuedSpinLockAtDpcLevel (Ordinal: 517, Address: 0x396b0)
• KeAcquireInStackQueuedSpinLockForDpc (Ordinal: 518, Address: 0xd82d0)
• KeAcquireInStackQueuedSpinLockRaiseToSynch (Ordinal: 519, Address: 0x2cdc0)
• KeAcquireInterruptSpinLock (Ordinal: 520, Address: 0xd8330)
• KeAcquireQueuedSpinLock (Ordinal: 521, Address: 0x50ac0)
• KeAcquireQueuedSpinLockRaiseToSynch (Ordinal: 522, Address: 0x50ac0)
• KeAcquireSpinLockAtDpcLevel (Ordinal: 523, Address: 0x396b0)
• KeAcquireSpinLockForDpc (Ordinal: 524, Address: 0xd8270)
• KeAcquireSpinLockRaiseToDpc (Ordinal: 525, Address: 0x38000)
• KeAcquireSpinLockRaiseToSynch (Ordinal: 526, Address: 0x38000)
• KeAddSystemServiceTable (Ordinal: 527, Address: 0x2471c0)
• KeAreAllApcsDisabled (Ordinal: 528, Address: 0xdefb0)
• KeAreApcsDisabled (Ordinal: 529, Address: 0xceb50)
• KeAttachProcess (Ordinal: 530, Address: 0x593c0)
• KeBugCheck (Ordinal: 531, Address: 0x41640)
• KeBugCheckEx (Ordinal: 532, Address: 0x41690)
• KeCancelTimer (Ordinal: 533, Address: 0x2cf60)
• KeCapturePersistentThreadState (Ordinal: 534, Address: 0xd3fc0)
• KeClearEvent (Ordinal: 535, Address: 0x33020)
• KeConnectInterrupt (Ordinal: 536, Address: 0xbda0)
• KeDelayExecutionThread (Ordinal: 537, Address: 0x3bdb0)
• KeDeregisterBugCheckCallback (Ordinal: 538, Address: 0xda770)
• KeDeregisterBugCheckReasonCallback (Ordinal: 539, Address: 0xdaa80)
• KeDeregisterNmiCallback (Ordinal: 540, Address: 0xd8470)
• KeDetachProcess (Ordinal: 541, Address: 0x59390)
• KeDisconnectInterrupt (Ordinal: 542, Address: 0x7ff40)
• KeEnterCriticalRegion (Ordinal: 543, Address: 0x442f0)
• KeEnterGuardedRegion (Ordinal: 544, Address: 0xceb30)
• KeEnterKernelDebugger (Ordinal: 545, Address: 0xda720)
• KeExpandKernelStackAndCallout (Ordinal: 546, Address: 0xdaef0)
• KeFindConfigurationEntry (Ordinal: 547, Address: 0x459ca0)
• KeFindConfigurationNextEntry (Ordinal: 548, Address: 0x40e430)
• KeFlushEntireTb (Ordinal: 549, Address: 0x1c8a0)
• KeFlushQueuedDpcs (Ordinal: 550, Address: 0x16180)
• KeGenericCallDpc (Ordinal: 551, Address: 0xdb100)
• KeGetCurrentIrql (Ordinal: 552, Address: 0xc8d70)
• KeGetCurrentThread (Ordinal: 553, Address: 0xc8d80)
• KeGetRecommendedSharedDataAlignment (Ordinal: 554, Address: 0xaae0)
• KeInitializeApc (Ordinal: 555, Address: 0x443a0)
• KeInitializeCrashDumpHeader (Ordinal: 556, Address: 0xd0d70)
• KeInitializeDeviceQueue (Ordinal: 557, Address: 0x1c020)
• KeInitializeDpc (Ordinal: 558, Address: 0x331b0)
• KeInitializeEvent (Ordinal: 559, Address: 0x380f0)
• KeInitializeGuardedMutex (Ordinal: 560, Address: 0x6a90)
• KeInitializeInterrupt (Ordinal: 561, Address: 0xbcf0)
• KeInitializeMutant (Ordinal: 562, Address: 0x5bb20)
• KeInitializeMutex (Ordinal: 563, Address: 0x1c200)
• KeInitializeQueue (Ordinal: 564, Address: 0x1f4d0)
• KeInitializeSemaphore (Ordinal: 565, Address: 0x38360)
• KeInitializeThreadedDpc (Ordinal: 566, Address: 0xdb0d0)
• KeInitializeTimer (Ordinal: 567, Address: 0x380c0)
• KeInitializeTimerEx (Ordinal: 568, Address: 0x1f4a0)
• KeInsertByKeyDeviceQueue (Ordinal: 569, Address: 0x33040)
• KeInsertDeviceQueue (Ordinal: 570, Address: 0xc260)
• KeInsertHeadQueue (Ordinal: 571, Address: 0x27460)
• KeInsertQueue (Ordinal: 572, Address: 0x3caa0)
• KeInsertQueueApc (Ordinal: 573, Address: 0x63770)
• KeInsertQueueDpc (Ordinal: 574, Address: 0x3c280)
• KeInvalidateAllCaches (Ordinal: 575, Address: 0x1c890)
• KeIpiGenericCall (Ordinal: 576, Address: 0x4850)
• KeIsAttachedProcess (Ordinal: 577, Address: 0x99d0)
• KeIsWaitListEmpty (Ordinal: 578, Address: 0x3731f0)
• KeLastBranchMSR (Ordinal: 579, Address: 0x192748)
• KeLeaveCriticalRegion (Ordinal: 580, Address: 0x446d0)
• KeLeaveGuardedRegion (Ordinal: 581, Address: 0xca9a0)
• KeLoaderBlock (Ordinal: 582, Address: 0x192750)
• KeLowerIrql (Ordinal: 583, Address: 0x38080)
• KeNumberProcessors (Ordinal: 584, Address: 0x192764)
• KeProfileInterruptWithSource (Ordinal: 585, Address: 0x396d0)
• KePulseEvent (Ordinal: 586, Address: 0xb360)
• KeQueryActiveProcessors (Ordinal: 587, Address: 0x235c50)
• KeQueryMultiThreadProcessorSet (Ordinal: 588, Address: 0x3731c0)
• KeQueryPrcbAddress (Ordinal: 589, Address: 0x1d900)
• KeQueryPriorityThread (Ordinal: 590, Address: 0x53d60)
• KeQueryRuntimeThread (Ordinal: 591, Address: 0x12860)
• KeQueryTimeIncrement (Ordinal: 592, Address: 0x380b0)
• KeRaiseIrqlToDpcLevel (Ordinal: 593, Address: 0x38000)
• KeRaiseUserException (Ordinal: 594, Address: 0xdb7e0)
• KeReadStateEvent (Ordinal: 595, Address: 0x33220)
• KeReadStateMutant (Ordinal: 596, Address: 0x33220)
• KeReadStateMutex (Ordinal: 597, Address: 0x33220)
• KeReadStateQueue (Ordinal: 598, Address: 0x33220)
• KeReadStateSemaphore (Ordinal: 599, Address: 0x33220)
• KeReadStateTimer (Ordinal: 600, Address: 0x61870)
• KeRegisterBugCheckCallback (Ordinal: 601, Address: 0x47d0)
• KeRegisterBugCheckReasonCallback (Ordinal: 602, Address: 0x38e0)
• KeRegisterNmiCallback (Ordinal: 603, Address: 0xd83e0)
• KeReleaseGuardedMutex (Ordinal: 604, Address: 0x467f0)
• KeReleaseGuardedMutexUnsafe (Ordinal: 605, Address: 0x4f740)
• KeReleaseInStackQueuedSpinLock (Ordinal: 606, Address: 0x2cdb0)
• KeReleaseInStackQueuedSpinLockForDpc (Ordinal: 607, Address: 0xd8300)
• KeReleaseInStackQueuedSpinLockFromDpcLevel (Ordinal: 608, Address: 0x396b0)
• KeReleaseInterruptSpinLock (Ordinal: 609, Address: 0x380a0)
• KeReleaseMutant (Ordinal: 610, Address: 0x38240)
• KeReleaseMutex (Ordinal: 611, Address: 0x44380)
• KeReleaseQueuedSpinLock (Ordinal: 612, Address: 0x380a0)
• KeReleaseSemaphore (Ordinal: 613, Address: 0x445d0)
• KeReleaseSpinLock (Ordinal: 614, Address: 0x380a0)
• KeReleaseSpinLockForDpc (Ordinal: 615, Address: 0xd82a0)
• KeReleaseSpinLockFromDpcLevel (Ordinal: 616, Address: 0x396b0)
• KeRemoveByKeyDeviceQueue (Ordinal: 617, Address: 0x33140)
• KeRemoveByKeyDeviceQueueIfBusy (Ordinal: 618, Address: 0xf6e0)
• KeRemoveDeviceQueue (Ordinal: 619, Address: 0xce80)
• KeRemoveEntryDeviceQueue (Ordinal: 620, Address: 0xdb170)
• KeRemoveQueue (Ordinal: 621, Address: 0x3c6d0)
• KeRemoveQueueDpc (Ordinal: 622, Address: 0x1d190)
• KeRemoveSystemServiceTable (Ordinal: 623, Address: 0x372fe0)
• KeResetEvent (Ordinal: 624, Address: 0x38110)
• KeRestoreFloatingPointState (Ordinal: 625, Address: 0xf4ed0)
• KeRevertToUserAffinityThread (Ordinal: 626, Address: 0x1e6a0)
• KeRundownQueue (Ordinal: 627, Address: 0x24910)
• KeSaveFloatingPointState (Ordinal: 628, Address: 0xf4ed0)
• KeSaveStateForHibernate (Ordinal: 629, Address: 0xdb260)
• KeSetAffinityThread (Ordinal: 630, Address: 0x1d8b0)
• KeSetBasePriorityThread (Ordinal: 631, Address: 0x30d30)
• KeSetDmaIoCoherency (Ordinal: 632, Address: 0xd8350)
• KeSetEvent (Ordinal: 633, Address: 0x3aa20)
• KeSetEventBoostPriority (Ordinal: 634, Address: 0x49020)
• KeSetIdealProcessorThread (Ordinal: 635, Address: 0xa390)
• KeSetImportanceDpc (Ordinal: 636, Address: 0x2e570)
• KeSetKernelStackSwapEnable (Ordinal: 637, Address: 0x20320)
• KeSetPriorityThread (Ordinal: 638, Address: 0x1f5b0)
• KeSetProfileIrql (Ordinal: 639, Address: 0x404250)
• KeSetSystemAffinityThread (Ordinal: 640, Address: 0x1e650)
• KeSetTargetProcessorDpc (Ordinal: 641, Address: 0x4f30)
• KeSetTimeIncrement (Ordinal: 642, Address: 0x1500)
• KeSetTimer (Ordinal: 643, Address: 0x3c510)
• KeSetTimerEx (Ordinal: 644, Address: 0x3c520)
• KeSignalCallDpcDone (Ordinal: 645, Address: 0x283a0)
• KeSignalCallDpcSynchronize (Ordinal: 646, Address: 0xdb160)
• KeStackAttachProcess (Ordinal: 647, Address: 0x51d90)
• KeSynchronizeExecution (Ordinal: 648, Address: 0x421f0)
• KeTerminateThread (Ordinal: 649, Address: 0x80030)
• KeTestSpinLock (Ordinal: 650, Address: 0xce760)
• KeTryToAcquireGuardedMutex (Ordinal: 651, Address: 0x372c0)
• KeTryToAcquireQueuedSpinLock (Ordinal: 652, Address: 0xd8240)
• KeTryToAcquireQueuedSpinLockRaiseToSynch (Ordinal: 653, Address: 0xd8240)
• KeTryToAcquireSpinLockAtDpcLevel (Ordinal: 654, Address: 0x38090)
• KeUnstackDetachProcess (Ordinal: 655, Address: 0x51c90)
• KeUpdateRunTime (Ordinal: 656, Address: 0x3cbf0)
• KeUpdateSystemTime (Ordinal: 657, Address: 0x434b0)
• KeUserModeCallback (Ordinal: 658, Address: 0x2bbea0)
• KeWaitForMultipleObjects (Ordinal: 659, Address: 0x3a640)
• KeWaitForMutexObject (Ordinal: 660, Address: 0x3ac90)
• KeWaitForSingleObject (Ordinal: 661, Address: 0x3ac90)
• KfRaiseIrql (Ordinal: 662, Address: 0x63d20)
• KiBugCheckData (Ordinal: 663, Address: 0x1a2880)
• KiCheckForKernelApcDelivery (Ordinal: 664, Address: 0x242f0)
• KiCpuId (Ordinal: 665, Address: 0x397c0)
• LdrAccessResource (Ordinal: 666, Address: 0x247530)
• LdrEnumResources (Ordinal: 667, Address: 0x3851a0)
• LdrFindResourceDirectory_U (Ordinal: 668, Address: 0x248a70)
• LdrFindResource_U (Ordinal: 669, Address: 0x247600)
• LpcPortObjectType (Ordinal: 670, Address: 0x1a2608)
• LpcRequestPort (Ordinal: 671, Address: 0x2dcd50)
• LpcRequestWaitReplyPort (Ordinal: 672, Address: 0x2b18b0)
• LsaCallAuthenticationPackage (Ordinal: 673, Address: 0x3a9b40)
• LsaDeregisterLogonProcess (Ordinal: 674, Address: 0x3a9c30)
• LsaFreeReturnBuffer (Ordinal: 675, Address: 0x260000)
• LsaLogonUser (Ordinal: 676, Address: 0x3a9930)
• LsaLookupAuthenticationPackage (Ordinal: 677, Address: 0x3a9860)
• LsaRegisterLogonProcess (Ordinal: 678, Address: 0x3a9660)
• Mm64BitPhysicalAddress (Ordinal: 679, Address: 0x1a17a0)
• MmAddPhysicalMemory (Ordinal: 680, Address: 0x3bd7d0)
• MmAddVerifierThunks (Ordinal: 681, Address: 0x374a80)
• MmAdjustWorkingSetSize (Ordinal: 682, Address: 0x3bf310)
• MmAdvanceMdl (Ordinal: 683, Address: 0xdd720)
• MmAllocateContiguousMemory (Ordinal: 684, Address: 0xdeaa0)
• MmAllocateContiguousMemorySpecifyCache (Ordinal: 685, Address: 0x2d1c0)
• MmAllocateMappingAddress (Ordinal: 686, Address: 0x264560)
• MmAllocateNonCachedMemory (Ordinal: 687, Address: 0x373c30)
• MmAllocatePagesForMdl (Ordinal: 688, Address: 0x28bdb0)
• MmAllocatePagesForMdlEx (Ordinal: 689, Address: 0x373bd0)
• MmBuildMdlForNonPagedPool (Ordinal: 690, Address: 0x33320)
• MmCanFileBeTruncated (Ordinal: 691, Address: 0x29280)
• MmCommitSessionMappedView (Ordinal: 692, Address: 0x26c940)
• MmCreateMdl (Ordinal: 693, Address: 0x271a0)
• MmCreateMirror (Ordinal: 694, Address: 0x3bf5f0)
• MmCreateSection (Ordinal: 695, Address: 0x44740)
• MmDisableModifiedWriteOfSection (Ordinal: 696, Address: 0x5a860)
• MmDoesFileHaveUserWritableReferences (Ordinal: 697, Address: 0xe0600)
• MmFlushImageSection (Ordinal: 698, Address: 0x2a570)
• MmForceSectionClosed (Ordinal: 699, Address: 0x32ac0)
• MmFreeContiguousMemory (Ordinal: 700, Address: 0x2da30)
• MmFreeContiguousMemorySpecifyCache (Ordinal: 701, Address: 0x1d300)
• MmFreeMappingAddress (Ordinal: 702, Address: 0x2646d0)
• MmFreeNonCachedMemory (Ordinal: 703, Address: 0x373db0)
• MmFreePagesFromMdl (Ordinal: 704, Address: 0x3ba210)
• MmGetPhysicalAddress (Ordinal: 705, Address: 0x2cfe0)
• MmGetPhysicalMemoryRanges (Ordinal: 706, Address: 0x3bedd0)
• MmGetSystemRoutineAddress (Ordinal: 707, Address: 0x2ea8a0)
• MmGetVirtualForPhysical (Ordinal: 708, Address: 0xdeae0)
• MmGrowKernelStack (Ordinal: 709, Address: 0x61e80)
• MmHighestUserAddress (Ordinal: 710, Address: 0x179678)
• MmIsAddressValid (Ordinal: 711, Address: 0xe37e0)
• MmIsDriverVerifying (Ordinal: 712, Address: 0x39f0)
• MmIsIoSpaceActive (Ordinal: 713, Address: 0xdc780)
• MmIsNonPagedSystemAddressValid (Ordinal: 714, Address: 0xe41a0)
• MmIsRecursiveIoFault (Ordinal: 715, Address: 0xdeb20)
• MmIsThisAnNtAsSystem (Ordinal: 716, Address: 0xaad0)
• MmIsVerifierEnabled (Ordinal: 717, Address: 0x246da0)
• MmLockPagableDataSection (Ordinal: 718, Address: 0x26c210)
• MmLockPagableImageSection (Ordinal: 719, Address: 0x26c210)
• MmLockPagableSectionByHandle (Ordinal: 720, Address: 0x28b350)
• MmMapIoSpace (Ordinal: 721, Address: 0x1bfe0)
• MmMapLockedPages (Ordinal: 722, Address: 0x63fd0)
• MmMapLockedPagesSpecifyCache (Ordinal: 723, Address: 0x51270)
• MmMapLockedPagesWithReservedMapping (Ordinal: 724, Address: 0xdd140)
• MmMapMemoryDumpMdl (Ordinal: 725, Address: 0xdeb40)
• MmMapUserAddressesToPage (Ordinal: 726, Address: 0x3bd360)
• MmMapVideoDisplay (Ordinal: 727, Address: 0x235c80)
• MmMapViewInSessionSpace (Ordinal: 728, Address: 0x292520)
• MmMapViewInSystemSpace (Ordinal: 729, Address: 0x3762a0)
• MmMapViewOfSection (Ordinal: 730, Address: 0x2c46a0)
• MmMarkPhysicalMemoryAsBad (Ordinal: 731, Address: 0x374300)
• MmMarkPhysicalMemoryAsGood (Ordinal: 732, Address: 0x3beb40)
• MmPageEntireDriver (Ordinal: 733, Address: 0x2662f0)
• MmPrefetchPages (Ordinal: 734, Address: 0x2a6a70)
• MmProbeAndLockPages (Ordinal: 735, Address: 0x522f0)
• MmProbeAndLockProcessPages (Ordinal: 736, Address: 0x2e9030)
• MmProbeAndLockSelectedPages (Ordinal: 737, Address: 0xd650)
• MmProtectMdlSystemAddress (Ordinal: 738, Address: 0x7a50)
• MmQuerySystemSize (Ordinal: 739, Address: 0xaee0)
• MmRemovePhysicalMemory (Ordinal: 740, Address: 0x3742f0)
• MmResetDriverPaging (Ordinal: 741, Address: 0x2663f0)
• MmSectionObjectType (Ordinal: 742, Address: 0x1a1c58)
• MmSecureVirtualMemory (Ordinal: 743, Address: 0x2c1020)
• MmSetAddressRangeModified (Ordinal: 744, Address: 0x36af0)
• MmSetBankedSection (Ordinal: 745, Address: 0x373f80)
• MmSizeOfMdl (Ordinal: 746, Address: 0x1e700)
• MmSystemRangeStart (Ordinal: 747, Address: 0x179680)
• MmTrimAllSystemPagableMemory (Ordinal: 748, Address: 0xe6430)
• MmUnlockPagableImageSection (Ordinal: 749, Address: 0x1bb20)
• MmUnlockPages (Ordinal: 750, Address: 0x80170)
• MmUnmapIoSpace (Ordinal: 751, Address: 0x1c060)
• MmUnmapLockedPages (Ordinal: 752, Address: 0x515d0)
• MmUnmapReservedMapping (Ordinal: 753, Address: 0xdd530)
• MmUnmapVideoDisplay (Ordinal: 754, Address: 0x26ddf0)
• MmUnmapViewInSessionSpace (Ordinal: 755, Address: 0x2933a0)
• MmUnmapViewInSystemSpace (Ordinal: 756, Address: 0x3765c0)
• MmUnmapViewOfSection (Ordinal: 757, Address: 0x2e05c0)
• MmUnsecureVirtualMemory (Ordinal: 758, Address: 0x2c1030)
• MmUserProbeAddress (Ordinal: 759, Address: 0x179688)
• NlsAnsiCodePage (Ordinal: 760, Address: 0x3f9e70)
• NlsLeadByteInfo (Ordinal: 761, Address: 0x2e6850)
• NlsMbCodePageTag (Ordinal: 762, Address: 0x3f9e98)
• NlsMbOemCodePageTag (Ordinal: 763, Address: 0x3fa0c0)
• NlsOemCodePage (Ordinal: 764, Address: 0x3f9e74)
• NlsOemLeadByteInfo (Ordinal: 765, Address: 0x2e6858)
• NtAddAtom (Ordinal: 766, Address: 0x2ad8d0)
• NtAdjustPrivilegesToken (Ordinal: 767, Address: 0x2b0470)
• NtAllocateLocallyUniqueId (Ordinal: 768, Address: 0x296dd0)
• NtAllocateUuids (Ordinal: 769, Address: 0x3a6760)
• NtAllocateVirtualMemory (Ordinal: 770, Address: 0x4c620)
• NtBuildNumber (Ordinal: 771, Address: 0x1765d0)
• NtClose (Ordinal: 772, Address: 0x2b6360)
• NtConnectPort (Ordinal: 773, Address: 0x2d8ba0)
• NtCreateEvent (Ordinal: 774, Address: 0x2cde30)
• NtCreateFile (Ordinal: 775, Address: 0x2c6ab0)
• NtCreateSection (Ordinal: 776, Address: 0x2b6a40)
• NtDeleteAtom (Ordinal: 777, Address: 0x2ad5f0)
• NtDeleteFile (Ordinal: 778, Address: 0x25bae0)
• NtDeviceIoControlFile (Ordinal: 779, Address: 0x2e0fb0)
• NtDuplicateObject (Ordinal: 780, Address: 0x2d6440)
• NtDuplicateToken (Ordinal: 781, Address: 0x2b18c0)
• NtFindAtom (Ordinal: 782, Address: 0x2a29e0)
• NtFreeVirtualMemory (Ordinal: 783, Address: 0x4cd00)
• NtFsControlFile (Ordinal: 784, Address: 0x2d1780)
• NtGlobalFlag (Ordinal: 785, Address: 0x1a4414)
• NtLockFile (Ordinal: 786, Address: 0x296040)
• NtMakePermanentObject (Ordinal: 787, Address: 0x25f840)
• NtMapViewOfSection (Ordinal: 788, Address: 0x2c4820)
• NtNotifyChangeDirectoryFile (Ordinal: 789, Address: 0x2a1710)
• NtOpenFile (Ordinal: 790, Address: 0x2c43e0)
• NtOpenProcess (Ordinal: 791, Address: 0x2d6eb0)
• NtOpenProcessToken (Ordinal: 792, Address: 0x2c8a80)
• NtOpenProcessTokenEx (Ordinal: 793, Address: 0x2c8930)
• NtOpenThread (Ordinal: 794, Address: 0x2dd5c0)
• NtOpenThreadToken (Ordinal: 795, Address: 0x2cb9f0)
• NtOpenThreadTokenEx (Ordinal: 796, Address: 0x2ca570)
• NtQueryDirectoryFile (Ordinal: 797, Address: 0x2cacb0)
• NtQueryEaFile (Ordinal: 798, Address: 0x35f190)
• NtQueryInformationAtom (Ordinal: 799, Address: 0x26d590)
• NtQueryInformationFile (Ordinal: 800, Address: 0x2bd280)
• NtQueryInformationProcess (Ordinal: 801, Address: 0x2c1700)
• NtQueryInformationThread (Ordinal: 802, Address: 0x2ca110)
• NtQueryInformationToken (Ordinal: 803, Address: 0x2c8aa0)
• NtQueryQuotaInformationFile (Ordinal: 804, Address: 0x35ff00)
• NtQuerySecurityObject (Ordinal: 805, Address: 0x28f460)
• NtQuerySystemInformation (Ordinal: 806, Address: 0x2c21f0)
• NtQueryVolumeInformationFile (Ordinal: 807, Address: 0x2c6b40)
• NtReadFile (Ordinal: 808, Address: 0x2c7960)
• NtRequestPort (Ordinal: 809, Address: 0x289790)
• NtRequestWaitReplyPort (Ordinal: 810, Address: 0x2d7a80)
• NtSetEaFile (Ordinal: 811, Address: 0x35f9c0)
• NtSetEvent (Ordinal: 812, Address: 0x2d8ae0)
• NtSetInformationFile (Ordinal: 813, Address: 0x2c9b90)
• NtSetInformationProcess (Ordinal: 814, Address: 0x2c3280)
• NtSetInformationThread (Ordinal: 815, Address: 0x2d80e0)
• NtSetQuotaInformationFile (Ordinal: 816, Address: 0x360820)
• NtSetSecurityObject (Ordinal: 817, Address: 0x275be0)
• NtSetVolumeInformationFile (Ordinal: 818, Address: 0x360900)
• NtShutdownSystem (Ordinal: 819, Address: 0x3a4ed0)
• NtTraceEvent (Ordinal: 820, Address: 0x100450)
• NtUnlockFile (Ordinal: 821, Address: 0x296300)
• NtVdmControl (Ordinal: 822, Address: 0x3969c0)
• NtWaitForSingleObject (Ordinal: 823, Address: 0x2bb020)
• NtWriteFile (Ordinal: 824, Address: 0x2c82c0)
• ObAssignSecurity (Ordinal: 825, Address: 0x2b73a0)
• ObCheckCreateObjectAccess (Ordinal: 826, Address: 0x294170)
• ObCheckObjectAccess (Ordinal: 827, Address: 0x2b9bd0)
• ObCloseHandle (Ordinal: 828, Address: 0x2e0730)
• ObCreateObject (Ordinal: 829, Address: 0x2b49e0)
• ObCreateObjectType (Ordinal: 830, Address: 0x22e150)
• ObDeleteCapturedInsertInfo (Ordinal: 831, Address: 0x2bfe60)
• ObDereferenceObject (Ordinal: 832, Address: 0x3a360)
• ObDereferenceSecurityDescriptor (Ordinal: 833, Address: 0x2b9540)
• ObFindHandleForObject (Ordinal: 834, Address: 0x26a2e0)
• ObGetObjectSecurity (Ordinal: 835, Address: 0x2b49d0)
• ObInsertObject (Ordinal: 836, Address: 0x2b6c10)
• ObLogSecurityDescriptor (Ordinal: 837, Address: 0x2b85e0)
• ObMakeTemporaryObject (Ordinal: 838, Address: 0x27db50)
• ObOpenObjectByName (Ordinal: 839, Address: 0x2bc360)
• ObOpenObjectByPointer (Ordinal: 840, Address: 0x2c7320)
• ObQueryNameString (Ordinal: 841, Address: 0x272760)
• ObQueryObjectAuditingByHandle (Ordinal: 842, Address: 0x2eaac0)
• ObReferenceObjectByHandle (Ordinal: 843, Address: 0x2b5480)
• ObReferenceObjectByName (Ordinal: 844, Address: 0x2d0b30)
• ObReferenceObjectByPointer (Ordinal: 845, Address: 0x50f40)
• ObReferenceSecurityDescriptor (Ordinal: 846, Address: 0x37b7d0)
• ObReleaseObjectSecurity (Ordinal: 847, Address: 0x250ac0)
• ObSetHandleAttributes (Ordinal: 848, Address: 0x2d61d0)
• ObSetSecurityDescriptorInfo (Ordinal: 849, Address: 0x26ad20)
• ObSetSecurityObjectByPointer (Ordinal: 850, Address: 0x23fec0)
• ObfDereferenceObject (Ordinal: 851, Address: 0x3a360)
• ObfReferenceObject (Ordinal: 852, Address: 0x38a00)
• PfxFindPrefix (Ordinal: 853, Address: 0x386680)
• PfxInitialize (Ordinal: 854, Address: 0x3863c0)
• PfxInsertPrefix (Ordinal: 855, Address: 0x3863e0)
• PfxRemovePrefix (Ordinal: 856, Address: 0x3865b0)
• PoCallDriver (Ordinal: 857, Address: 0x10f00)
• PoCancelDeviceNotify (Ordinal: 858, Address: 0xf5060)
• PoQueueShutdownWorkItem (Ordinal: 859, Address: 0x235530)
• PoRegisterDeviceForIdleDetection (Ordinal: 860, Address: 0xcc30)
• PoRegisterDeviceNotify (Ordinal: 861, Address: 0xf4ef0)
• PoRegisterSystemState (Ordinal: 862, Address: 0x80910)
• PoRequestPowerIrp (Ordinal: 863, Address: 0x104f0)
• PoRequestShutdownEvent (Ordinal: 864, Address: 0x249e60)
• PoSetHiberRange (Ordinal: 865, Address: 0x3c3c90)
• PoSetPowerState (Ordinal: 866, Address: 0x6950)
• PoSetSystemState (Ordinal: 867, Address: 0x7f080)
• PoShutdownBugCheck (Ordinal: 868, Address: 0x37df40)
• PoStartNextPowerIrp (Ordinal: 869, Address: 0x103f0)
• PoUnregisterSystemState (Ordinal: 870, Address: 0x1d320)
• ProbeForRead (Ordinal: 871, Address: 0x290a20)
• ProbeForWrite (Ordinal: 872, Address: 0x2bb250)
• PsAssignImpersonationToken (Ordinal: 873, Address: 0x2da550)
• PsChargePoolQuota (Ordinal: 874, Address: 0x243b0)
• PsChargeProcessNonPagedPoolQuota (Ordinal: 875, Address: 0x4d510)
• PsChargeProcessPagedPoolQuota (Ordinal: 876, Address: 0x1a220)
• PsChargeProcessPoolQuota (Ordinal: 877, Address: 0x46c00)
• PsCreateSystemProcess (Ordinal: 878, Address: 0x381880)
• PsCreateSystemThread (Ordinal: 879, Address: 0x2b8f00)
• PsDereferenceImpersonationToken (Ordinal: 880, Address: 0x2e9cb0)
• PsDereferencePrimaryToken (Ordinal: 881, Address: 0x288110)
• PsDisableImpersonation (Ordinal: 882, Address: 0x2db460)
• PsEstablishWin32Callouts (Ordinal: 883, Address: 0x247470)
• PsGetContextThread (Ordinal: 884, Address: 0x2debe0)
• PsGetCurrentProcess (Ordinal: 885, Address: 0x46c70)
• PsGetCurrentProcessId (Ordinal: 886, Address: 0x46da0)
• PsGetCurrentProcessSessionId (Ordinal: 887, Address: 0x4d1c0)
• PsGetCurrentProcessWin32Process (Ordinal: 888, Address: 0x465a0)
• PsGetCurrentProcessWow64Process (Ordinal: 889, Address: 0x34700)
• PsGetCurrentThread (Ordinal: 890, Address: 0xc8d80)
• PsGetCurrentThreadId (Ordinal: 891, Address: 0x63720)
• PsGetCurrentThreadPreviousMode (Ordinal: 892, Address: 0x30050)
• PsGetCurrentThreadProcess (Ordinal: 893, Address: 0xf80e0)
• PsGetCurrentThreadProcessId (Ordinal: 894, Address: 0x46da0)
• PsGetCurrentThreadStackBase (Ordinal: 895, Address: 0xf8060)
• PsGetCurrentThreadStackLimit (Ordinal: 896, Address: 0xf8080)
• PsGetCurrentThreadTeb (Ordinal: 897, Address: 0x1f790)
• PsGetCurrentThreadWin32Thread (Ordinal: 898, Address: 0x46580)
• PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion (Ordinal: 899, Address: 0x46dc0)
• PsGetJobLock (Ordinal: 900, Address: 0xf80a0)
• PsGetJobSessionId (Ordinal: 901, Address: 0xf80b0)
• PsGetJobUIRestrictionsClass (Ordinal: 902, Address: 0x89c0)
• PsGetProcessCreateTimeQuadPart (Ordinal: 903, Address: 0x14d80)
• PsGetProcessDebugPort (Ordinal: 904, Address: 0x1f480)
• PsGetProcessExitProcessCalled (Ordinal: 905, Address: 0x2e9cd0)
• PsGetProcessExitStatus (Ordinal: 906, Address: 0xf80c0)
• PsGetProcessExitTime (Ordinal: 907, Address: 0x28a9a0)
• PsGetProcessId (Ordinal: 908, Address: 0x621b0)
• PsGetProcessImageFileName (Ordinal: 909, Address: 0x123a0)
• PsGetProcessInheritedFromUniqueProcessId (Ordinal: 910, Address: 0x61be0)
• PsGetProcessJob (Ordinal: 911, Address: 0x61bc0)
• PsGetProcessPeb (Ordinal: 912, Address: 0x61840)
• PsGetProcessPriorityClass (Ordinal: 913, Address: 0xf80d0)
• PsGetProcessSectionBaseAddress (Ordinal: 914, Address: 0x61ca0)
• PsGetProcessSecurityPort (Ordinal: 915, Address: 0x2b1f00)
• PsGetProcessSessionId (Ordinal: 916, Address: 0x58e80)
• PsGetProcessSessionIdEx (Ordinal: 917, Address: 0xb660)
• PsGetProcessWin32Process (Ordinal: 918, Address: 0x61770)
• PsGetProcessWin32WindowStation (Ordinal: 919, Address: 0x62110)
• PsGetProcessWow64Process (Ordinal: 920, Address: 0x61bd0)
• PsGetThreadFreezeCount (Ordinal: 921, Address: 0x7dc70)
• PsGetThreadHardErrorsAreDisabled (Ordinal: 922, Address: 0x77b0)
• PsGetThreadId (Ordinal: 923, Address: 0x491e0)
• PsGetThreadProcess (Ordinal: 924, Address: 0x61820)
• PsGetThreadProcessId (Ordinal: 925, Address: 0x47c40)
• PsGetThreadSessionId (Ordinal: 926, Address: 0x2d8ac0)
• PsGetThreadTeb (Ordinal: 927, Address: 0x61c90)
• PsGetThreadWin32Thread (Ordinal: 928, Address: 0x61830)
• PsGetVersion (Ordinal: 929, Address: 0xa340)
• PsImpersonateClient (Ordinal: 930, Address: 0x2da6d0)
• PsInitialSystemProcess (Ordinal: 931, Address: 0x197990)
• PsIsProcessBeingDebugged (Ordinal: 932, Address: 0x382430)
• PsIsSystemProcess (Ordinal: 933, Address: 0x2dbf30)
• PsIsSystemThread (Ordinal: 934, Address: 0x20280)
• PsIsThreadImpersonating (Ordinal: 935, Address: 0x382470)
• PsIsThreadTerminating (Ordinal: 936, Address: 0x61cd0)
• PsJobType (Ordinal: 937, Address: 0x1978d8)
• PsLookupProcessByProcessId (Ordinal: 938, Address: 0x2d77a0)
• PsLookupProcessThreadByCid (Ordinal: 939, Address: 0x2d7300)
• PsLookupThreadByThreadId (Ordinal: 940, Address: 0x2d89f0)
• PsProcessType (Ordinal: 941, Address: 0x197998)
• PsReferenceImpersonationToken (Ordinal: 942, Address: 0x2d6ad0)
• PsReferencePrimaryToken (Ordinal: 943, Address: 0x2eab50)
• PsRemoveCreateThreadNotifyRoutine (Ordinal: 944, Address: 0x381cb0)
• PsRemoveLoadImageNotifyRoutine (Ordinal: 945, Address: 0x3820a0)
• PsRestoreImpersonation (Ordinal: 946, Address: 0x2db550)
• PsReturnPoolQuota (Ordinal: 947, Address: 0x46a80)
• PsReturnProcessNonPagedPoolQuota (Ordinal: 948, Address: 0x4df20)
• PsReturnProcessPagedPoolQuota (Ordinal: 949, Address: 0x58350)
• PsRevertThreadToSelf (Ordinal: 950, Address: 0x2da690)
• PsRevertToSelf (Ordinal: 951, Address: 0x381710)
• PsSetContextThread (Ordinal: 952, Address: 0x2df390)
• PsSetCreateProcessNotifyRoutine (Ordinal: 953, Address: 0x3818c0)
• PsSetCreateThreadNotifyRoutine (Ordinal: 954, Address: 0x381bf0)
• PsSetJobUIRestrictionsClass (Ordinal: 955, Address: 0x382450)
• PsSetLegoNotifyRoutine (Ordinal: 956, Address: 0x382490)
• PsSetLoadImageNotifyRoutine (Ordinal: 957, Address: 0x381fd0)
• PsSetProcessPriorityByClass (Ordinal: 958, Address: 0x2d8960)
• PsSetProcessPriorityClass (Ordinal: 959, Address: 0x382460)
• PsSetProcessSecurityPort (Ordinal: 960, Address: 0x26b0f0)
• PsSetProcessWin32Process (Ordinal: 961, Address: 0x2d7880)
• PsSetProcessWindowStation (Ordinal: 962, Address: 0x2dbf20)
• PsSetThreadHardErrorsAreDisabled (Ordinal: 963, Address: 0x77d0)
• PsSetThreadWin32Thread (Ordinal: 964, Address: 0x2d6980)
• PsTerminateSystemThread (Ordinal: 965, Address: 0x2d6030)
• PsThreadType (Ordinal: 966, Address: 0x1979a0)
• PsWrapApcWow64Thread (Ordinal: 967, Address: 0xf8010)
• RtlAbsoluteToSelfRelativeSD (Ordinal: 968, Address: 0x23b260)
• RtlAddAccessAllowedAce (Ordinal: 969, Address: 0x270a80)
• RtlAddAccessAllowedAceEx (Ordinal: 970, Address: 0x2546a0)
• RtlAddAce (Ordinal: 971, Address: 0x24c450)
• RtlAddAtomToAtomTable (Ordinal: 972, Address: 0x2930e0)
• RtlAddRange (Ordinal: 973, Address: 0x2372f0)
• RtlAllocateHeap (Ordinal: 974, Address: 0x2d6b30)
• RtlAnsiCharToUnicodeChar (Ordinal: 975, Address: 0x2cd7d0)
• RtlAnsiStringToUnicodeSize (Ordinal: 976, Address: 0x389a00)
• RtlAnsiStringToUnicodeString (Ordinal: 977, Address: 0x26bbe0)
• RtlAppendAsciizToString (Ordinal: 978, Address: 0x38a140)
• RtlAppendStringToString (Ordinal: 979, Address: 0x24cb30)
• RtlAppendUnicodeStringToString (Ordinal: 980, Address: 0x56aa0)
• RtlAppendUnicodeToString (Ordinal: 981, Address: 0x57110)
• RtlAreAllAccessesGranted (Ordinal: 982, Address: 0x2bc000)
• RtlAreAnyAccessesGranted (Ordinal: 983, Address: 0x2a21a0)
• RtlAreBitsClear (Ordinal: 984, Address: 0x27580)
• RtlAreBitsSet (Ordinal: 985, Address: 0x28280)
• RtlAssert (Ordinal: 986, Address: 0xf8c80)
• RtlCaptureContext (Ordinal: 987, Address: 0x41ca0)
• RtlCaptureStackBackTrace (Ordinal: 988, Address: 0xf90b0)
• RtlCharToInteger (Ordinal: 989, Address: 0x38ab10)
• RtlCheckRegistryKey (Ordinal: 990, Address: 0x247040)
• RtlClearAllBits (Ordinal: 991, Address: 0x29260)
• RtlClearBit (Ordinal: 992, Address: 0xf8650)
• RtlClearBits (Ordinal: 993, Address: 0x4a890)
• RtlCompareMemory (Ordinal: 994, Address: 0x43cf0)
• RtlCompareMemoryUlong (Ordinal: 995, Address: 0x43da0)
• RtlCompareString (Ordinal: 996, Address: 0x389df0)
• RtlCompareUnicodeString (Ordinal: 997, Address: 0x2c5890)
• RtlCompressBuffer (Ordinal: 998, Address: 0x3c9420)
• RtlCompressChunks (Ordinal: 999, Address: 0x38bb20)
• RtlConvertSidToUnicodeString (Ordinal: 1000, Address: 0x2d4d70)
• RtlCopyLuid (Ordinal: 1001, Address: 0x229bf0)
• RtlCopyMemory (Ordinal: 1002, Address: 0x38b60)
• RtlCopyMemoryNonTemporal (Ordinal: 1003, Address: 0x43de0)
• RtlCopyRangeList (Ordinal: 1004, Address: 0x2369c0)
• RtlCopySid (Ordinal: 1005, Address: 0x2ce240)
• RtlCopyString (Ordinal: 1006, Address: 0xf8610)
• RtlCopyUnicodeString (Ordinal: 1007, Address: 0x4f6d0)
• RtlCreateAcl (Ordinal: 1008, Address: 0x272110)
• RtlCreateAtomTable (Ordinal: 1009, Address: 0x250c30)
• RtlCreateHeap (Ordinal: 1010, Address: 0x258570)
• RtlCreateRegistryKey (Ordinal: 1011, Address: 0x229c20)
• RtlCreateSecurityDescriptor (Ordinal: 1012, Address: 0x270a50)
• RtlCreateSystemVolumeInformationFolder (Ordinal: 1013, Address: 0x38c340)
• RtlCreateUnicodeString (Ordinal: 1014, Address: 0x389a60)
• RtlCustomCPToUnicodeN (Ordinal: 1015, Address: 0x3856a0)
• RtlDecompressBuffer (Ordinal: 1016, Address: 0x38b540)
• RtlDecompressChunks (Ordinal: 1017, Address: 0x38b890)
• RtlDecompressFragment (Ordinal: 1018, Address: 0x38b5e0)
• RtlDelete (Ordinal: 1019, Address: 0x556e0)
• RtlDeleteAce (Ordinal: 1020, Address: 0x2355e0)
• RtlDeleteAtomFromAtomTable (Ordinal: 1021, Address: 0x2a2280)
• RtlDeleteElementGenericTable (Ordinal: 1022, Address: 0xf9d90)
• RtlDeleteElementGenericTableAvl (Ordinal: 1023, Address: 0x5a620)
• RtlDeleteNoSplay (Ordinal: 1024, Address: 0xf9a10)
• RtlDeleteOwnersRanges (Ordinal: 1025, Address: 0x2375c0)
• RtlDeleteRange (Ordinal: 1026, Address: 0x3870e0)
• RtlDeleteRegistryValue (Ordinal: 1027, Address: 0x239ca0)
• RtlDescribeChunk (Ordinal: 1028, Address: 0x38b6f0)
• RtlDestroyAtomTable (Ordinal: 1029, Address: 0x386ca0)
• RtlDestroyHeap (Ordinal: 1030, Address: 0x387940)
• RtlDowncaseUnicodeString (Ordinal: 1031, Address: 0x389890)
• RtlEmptyAtomTable (Ordinal: 1032, Address: 0x386e60)
• RtlEnumerateGenericTable (Ordinal: 1033, Address: 0xfa050)
• RtlEnumerateGenericTableAvl (Ordinal: 1034, Address: 0x62a00)
• RtlEnumerateGenericTableLikeADirectory (Ordinal: 1035, Address: 0xfa4f0)
• RtlEnumerateGenericTableWithoutSplaying (Ordinal: 1036, Address: 0xfa1f0)
• RtlEnumerateGenericTableWithoutSplayingAvl (Ordinal: 1037, Address: 0xc2c0)
• RtlEqualLuid (Ordinal: 1038, Address: 0x38a1e0)
• RtlEqualSid (Ordinal: 1039, Address: 0x2d0af0)
• RtlEqualString (Ordinal: 1040, Address: 0x1b4b0)
• RtlEqualUnicodeString (Ordinal: 1041, Address: 0x2b4ea0)
• RtlFillMemory (Ordinal: 1042, Address: 0x43f20)
• RtlFindClearBits (Ordinal: 1043, Address: 0x4b190)
• RtlFindClearBitsAndSet (Ordinal: 1044, Address: 0x4b0f0)
• RtlFindClearRuns (Ordinal: 1045, Address: 0x1fad0)
• RtlFindFirstRunClear (Ordinal: 1046, Address: 0xf8c70)
• RtlFindLastBackwardRunClear (Ordinal: 1047, Address: 0x1b600)
• RtlFindLeastSignificantBit (Ordinal: 1048, Address: 0x1e90)
• RtlFindLongestRunClear (Ordinal: 1049, Address: 0xf8c20)
• RtlFindMessage (Ordinal: 1050, Address: 0x2738c0)
• RtlFindMostSignificantBit (Ordinal: 1051, Address: 0x56280)
• RtlFindNextForwardRunClear (Ordinal: 1052, Address: 0x18840)
• RtlFindRange (Ordinal: 1053, Address: 0x236a60)
• RtlFindSetBits (Ordinal: 1054, Address: 0xf8680)
• RtlFindSetBitsAndClear (Ordinal: 1055, Address: 0xf8b20)
• RtlFindUnicodePrefix (Ordinal: 1056, Address: 0x2b2fe0)
• RtlFormatCurrentUserKeyPath (Ordinal: 1057, Address: 0x2d4a70)
• RtlFreeAnsiString (Ordinal: 1058, Address: 0x273840)
• RtlFreeHeap (Ordinal: 1059, Address: 0x2e0770)
• RtlFreeOemString (Ordinal: 1060, Address: 0x2b2680)
• RtlFreeRangeList (Ordinal: 1061, Address: 0x236de0)
• RtlFreeUnicodeString (Ordinal: 1062, Address: 0x273840)
• RtlGUIDFromString (Ordinal: 1063, Address: 0x2356e0)
• RtlGenerate8dot3Name (Ordinal: 1064, Address: 0x29eb20)
• RtlGetAce (Ordinal: 1065, Address: 0x257010)
• RtlGetCallersAddress (Ordinal: 1066, Address: 0xf91a0)
• RtlGetCompressionWorkSpaceSize (Ordinal: 1067, Address: 0x3c9390)
• RtlGetDaclSecurityDescriptor (Ordinal: 1068, Address: 0x253fd0)
• RtlGetDefaultCodePage (Ordinal: 1069, Address: 0x28c9a0)
• RtlGetElementGenericTable (Ordinal: 1070, Address: 0xfa110)
• RtlGetElementGenericTableAvl (Ordinal: 1071, Address: 0xfa280)
• RtlGetFirstRange (Ordinal: 1072, Address: 0x2788d0)
• RtlGetGroupSecurityDescriptor (Ordinal: 1073, Address: 0x239080)
• RtlGetNextRange (Ordinal: 1074, Address: 0x278910)
• RtlGetNtGlobalFlags (Ordinal: 1075, Address: 0x38b1d0)
• RtlGetOwnerSecurityDescriptor (Ordinal: 1076, Address: 0x239040)
• RtlGetSaclSecurityDescriptor (Ordinal: 1077, Address: 0x239010)
• RtlGetSetBootStatusData (Ordinal: 1078, Address: 0x38cce0)
• RtlGetVersion (Ordinal: 1079, Address: 0x2644c0)
• RtlHashUnicodeString (Ordinal: 1080, Address: 0x2a1ca0)
• RtlImageDirectoryEntryToData (Ordinal: 1081, Address: 0x58440)
• RtlImageNtHeader (Ordinal: 1082, Address: 0x567c0)
• RtlInitAnsiString (Ordinal: 1083, Address: 0x1b450)
• RtlInitAnsiStringEx (Ordinal: 1084, Address: 0x1e30)
• RtlInitCodePageTable (Ordinal: 1085, Address: 0x386300)
• RtlInitString (Ordinal: 1086, Address: 0x1b450)
• RtlInitUnicodeString (Ordinal: 1087, Address: 0x56740)
• RtlInitUnicodeStringEx (Ordinal: 1088, Address: 0xf85b0)
• RtlInitializeBitMap (Ordinal: 1089, Address: 0x2c6b30)
• RtlInitializeGenericTable (Ordinal: 1090, Address: 0x9ab0)
• RtlInitializeGenericTableAvl (Ordinal: 1091, Address: 0x5b370)
• RtlInitializeRangeList (Ordinal: 1092, Address: 0x229ac0)
• RtlInitializeSid (Ordinal: 1093, Address: 0x25b7c0)
• RtlInitializeUnicodePrefix (Ordinal: 1094, Address: 0x239aa0)
• RtlInsertElementGenericTable (Ordinal: 1095, Address: 0xf9ba0)
• RtlInsertElementGenericTableAvl (Ordinal: 1096, Address: 0x16840)
• RtlInsertElementGenericTableFull (Ordinal: 1097, Address: 0xf9c60)
• RtlInsertElementGenericTableFullAvl (Ordinal: 1098, Address: 0x50ba0)
• RtlInsertUnicodePrefix (Ordinal: 1099, Address: 0x2b4890)
• RtlInt64ToUnicodeString (Ordinal: 1100, Address: 0x38aec0)
• RtlIntegerToChar (Ordinal: 1101, Address: 0x2b34d0)
• RtlIntegerToUnicode (Ordinal: 1102, Address: 0x2d4950)
• RtlIntegerToUnicodeString (Ordinal: 1103, Address: 0x2b35e0)
• RtlInvertRangeList (Ordinal: 1104, Address: 0x3877d0)
• RtlIpv4AddressToStringA (Ordinal: 1105, Address: 0xfac30)
• RtlIpv4AddressToStringExA (Ordinal: 1106, Address: 0xfac80)
• RtlIpv4AddressToStringExW (Ordinal: 1107, Address: 0xfb280)
• RtlIpv4AddressToStringW (Ordinal: 1108, Address: 0xfb230)
• RtlIpv4StringToAddressA (Ordinal: 1109, Address: 0xfbc60)
• RtlIpv4StringToAddressExA (Ordinal: 1110, Address: 0xfbf00)
• RtlIpv4StringToAddressExW (Ordinal: 1111, Address: 0xfc8a0)
• RtlIpv4StringToAddressW (Ordinal: 1112, Address: 0x4f90)
• RtlIpv6AddressToStringA (Ordinal: 1113, Address: 0xfa7d0)
• RtlIpv6AddressToStringExA (Ordinal: 1114, Address: 0xfaad0)
• RtlIpv6AddressToStringExW (Ordinal: 1115, Address: 0xfb0c0)
• RtlIpv6AddressToStringW (Ordinal: 1116, Address: 0xfad90)
• RtlIpv6StringToAddressA (Ordinal: 1117, Address: 0xfb3a0)
• RtlIpv6StringToAddressExA (Ordinal: 1118, Address: 0xfb980)
• RtlIpv6StringToAddressExW (Ordinal: 1119, Address: 0xfc5e0)
• RtlIpv6StringToAddressW (Ordinal: 1120, Address: 0xfc100)
• RtlIsGenericTableEmpty (Ordinal: 1121, Address: 0xfa100)
• RtlIsGenericTableEmptyAvl (Ordinal: 1122, Address: 0x15460)
• RtlIsNameLegalDOS8Dot3 (Ordinal: 1123, Address: 0x38c950)
• RtlIsRangeAvailable (Ordinal: 1124, Address: 0x387320)
• RtlIsValidOemCharacter (Ordinal: 1125, Address: 0x38c800)
• RtlLengthRequiredSid (Ordinal: 1126, Address: 0x25b7b0)
• RtlLengthSecurityDescriptor (Ordinal: 1127, Address: 0x295360)
• RtlLengthSid (Ordinal: 1128, Address: 0x2709d0)
• RtlLockBootStatusData (Ordinal: 1129, Address: 0x38cb20)
• RtlLookupAtomInAtomTable (Ordinal: 1130, Address: 0x296500)
• RtlLookupElementGenericTable (Ordinal: 1131, Address: 0xf9ee0)
• RtlLookupElementGenericTableAvl (Ordinal: 1132, Address: 0x57300)
• RtlLookupElementGenericTableFull (Ordinal: 1133, Address: 0xf9f70)
• RtlLookupElementGenericTableFullAvl (Ordinal: 1134, Address: 0x50af0)
• RtlLookupFunctionEntry (Ordinal: 1135, Address: 0x59d20)
• RtlMapGenericMask (Ordinal: 1136, Address: 0x2c5fc0)
• RtlMapSecurityErrorToNtStatus (Ordinal: 1137, Address: 0x329c0)
• RtlMergeRangeLists (Ordinal: 1138, Address: 0x3874c0)
• RtlMoveMemory (Ordinal: 1139, Address: 0x38b60)
• RtlMultiByteToUnicodeN (Ordinal: 1140, Address: 0x2bc700)
• RtlMultiByteToUnicodeSize (Ordinal: 1141, Address: 0x2e8180)
• RtlNextUnicodePrefix (Ordinal: 1142, Address: 0x386980)
• RtlNtStatusToDosError (Ordinal: 1143, Address: 0x296da0)
• RtlNtStatusToDosErrorNoTeb (Ordinal: 1144, Address: 0x21c80)
• RtlNumberGenericTableElements (Ordinal: 1145, Address: 0xfa1e0)
• RtlNumberGenericTableElementsAvl (Ordinal: 1146, Address: 0x1e5c0)
• RtlNumberOfClearBits (Ordinal: 1147, Address: 0x1b6b0)
• RtlNumberOfSetBits (Ordinal: 1148, Address: 0x28e70)
• RtlOemStringToCountedUnicodeString (Ordinal: 1149, Address: 0x389560)
• RtlOemStringToUnicodeSize (Ordinal: 1150, Address: 0x389a00)
• RtlOemStringToUnicodeString (Ordinal: 1151, Address: 0x2b0120)
• RtlOemToUnicodeN (Ordinal: 1152, Address: 0x2b01e0)
• RtlPcToFileHeader (Ordinal: 1153, Address: 0x1eb0)
• RtlPinAtomInAtomTable (Ordinal: 1154, Address: 0x250b40)
• RtlPrefetchMemoryNonTemporal (Ordinal: 1155, Address: 0x43f30)
• RtlPrefixString (Ordinal: 1156, Address: 0x389ee0)
• RtlPrefixUnicodeString (Ordinal: 1157, Address: 0x26def0)
• RtlQueryAtomInAtomTable (Ordinal: 1158, Address: 0x2a1b00)
• RtlQueryRegistryValues (Ordinal: 1159, Address: 0x298540)
• RtlQueryTimeZoneInformation (Ordinal: 1160, Address: 0x233670)
• RtlRaiseException (Ordinal: 1161, Address: 0xf8480)
• RtlRandom (Ordinal: 1162, Address: 0x2e8e70)
• RtlRandomEx (Ordinal: 1163, Address: 0xfcbc0)
• RtlRealPredecessor (Ordinal: 1164, Address: 0xf9b40)
• RtlRealSuccessor (Ordinal: 1165, Address: 0x13c90)
• RtlRemoveUnicodePrefix (Ordinal: 1166, Address: 0x2e1890)
• RtlReserveChunk (Ordinal: 1167, Address: 0x38b7c0)
• RtlRestoreContext (Ordinal: 1168, Address: 0x41df0)
• RtlSecondsSince1970ToTime (Ordinal: 1169, Address: 0x62b10)
• RtlSecondsSince1980ToTime (Ordinal: 1170, Address: 0xfcce0)
• RtlSelfRelativeToAbsoluteSD (Ordinal: 1171, Address: 0x2eace0)
• RtlSelfRelativeToAbsoluteSD2 (Ordinal: 1172, Address: 0x386a40)
• RtlSetAllBits (Ordinal: 1173, Address: 0x62c0)
• RtlSetBit (Ordinal: 1174, Address: 0x31190)
• RtlSetBits (Ordinal: 1175, Address: 0x4b230)
• RtlSetDaclSecurityDescriptor (Ordinal: 1176, Address: 0x2709f0)
• RtlSetGroupSecurityDescriptor (Ordinal: 1177, Address: 0x24c400)
• RtlSetOwnerSecurityDescriptor (Ordinal: 1178, Address: 0x270ab0)
• RtlSetSaclSecurityDescriptor (Ordinal: 1179, Address: 0x24c5d0)
• RtlSetTimeZoneInformation (Ordinal: 1180, Address: 0x38b1e0)
• RtlSizeHeap (Ordinal: 1181, Address: 0x3890e0)
• RtlSplay (Ordinal: 1182, Address: 0x51250)
• RtlStringFromGUID (Ordinal: 1183, Address: 0x288590)
• RtlSubAuthorityCountSid (Ordinal: 1184, Address: 0x38a1d0)
• RtlSubAuthoritySid (Ordinal: 1185, Address: 0x25b7f0)
• RtlSubtreePredecessor (Ordinal: 1186, Address: 0xf9b10)
• RtlSubtreeSuccessor (Ordinal: 1187, Address: 0xf9ae0)
• RtlTestBit (Ordinal: 1188, Address: 0xf8660)
• RtlTimeFieldsToTime (Ordinal: 1189, Address: 0xa140)
• RtlTimeToElapsedTimeFields (Ordinal: 1190, Address: 0x38ceb0)
• RtlTimeToSecondsSince1970 (Ordinal: 1191, Address: 0xfcd10)
• RtlTimeToSecondsSince1980 (Ordinal: 1192, Address: 0xfcc90)
• RtlTimeToTimeFields (Ordinal: 1193, Address: 0x9ef0)
• RtlTraceDatabaseAdd (Ordinal: 1194, Address: 0xfd1a0)
• RtlTraceDatabaseCreate (Ordinal: 1195, Address: 0xfcd60)
• RtlTraceDatabaseDestroy (Ordinal: 1196, Address: 0xfced0)
• RtlTraceDatabaseEnumerate (Ordinal: 1197, Address: 0xfd950)
• RtlTraceDatabaseFind (Ordinal: 1198, Address: 0xfd310)
• RtlTraceDatabaseLock (Ordinal: 1199, Address: 0xfd7e0)
• RtlTraceDatabaseUnlock (Ordinal: 1200, Address: 0xfd8d0)
• RtlTraceDatabaseValidate (Ordinal: 1201, Address: 0xfcf30)
• RtlUnicodeStringToAnsiSize (Ordinal: 1202, Address: 0x3899a0)
• RtlUnicodeStringToAnsiString (Ordinal: 1203, Address: 0x291fa0)
• RtlUnicodeStringToCountedOemString (Ordinal: 1204, Address: 0x296790)
• RtlUnicodeStringToInteger (Ordinal: 1205, Address: 0x288ee0)
• RtlUnicodeStringToOemSize (Ordinal: 1206, Address: 0x3899a0)
• RtlUnicodeStringToOemString (Ordinal: 1207, Address: 0x268280)
• RtlUnicodeToCustomCPN (Ordinal: 1208, Address: 0x3858f0)
• RtlUnicodeToMultiByteN (Ordinal: 1209, Address: 0x2e0be0)
• RtlUnicodeToMultiByteSize (Ordinal: 1210, Address: 0x2e7b10)
• RtlUnicodeToOemN (Ordinal: 1211, Address: 0x295c30)
• RtlUnlockBootStatusData (Ordinal: 1212, Address: 0x38cc70)
• RtlUnwind (Ordinal: 1213, Address: 0xfca90)
• RtlUnwindEx (Ordinal: 1214, Address: 0x30260)
• RtlUpcaseUnicodeChar (Ordinal: 1215, Address: 0x2ce210)
• RtlUpcaseUnicodeString (Ordinal: 1216, Address: 0x2bc660)
• RtlUpcaseUnicodeStringToAnsiString (Ordinal: 1217, Address: 0x3893f0)
• RtlUpcaseUnicodeStringToCountedOemString (Ordinal: 1218, Address: 0x3896f0)
• RtlUpcaseUnicodeStringToOemString (Ordinal: 1219, Address: 0x2b25a0)
• RtlUpcaseUnicodeToCustomCPN (Ordinal: 1220, Address: 0x385b10)
• RtlUpcaseUnicodeToMultiByteN (Ordinal: 1221, Address: 0x26d2d0)
• RtlUpcaseUnicodeToOemN (Ordinal: 1222, Address: 0x2afc70)
• RtlUpperChar (Ordinal: 1223, Address: 0x264af0)
• RtlUpperString (Ordinal: 1224, Address: 0x389fa0)
• RtlValidRelativeSecurityDescriptor (Ordinal: 1225, Address: 0x2547c0)
• RtlValidSecurityDescriptor (Ordinal: 1226, Address: 0x2546d0)
• RtlValidSid (Ordinal: 1227, Address: 0x2cdca0)
• RtlVerifyVersionInfo (Ordinal: 1228, Address: 0xab30)
• RtlVirtualUnwind (Ordinal: 1229, Address: 0x5a020)
• RtlVolumeDeviceToDosName (Ordinal: 1230, Address: 0x35e8f0)
• RtlWalkFrameChain (Ordinal: 1231, Address: 0xf9640)
• RtlWriteRegistryValue (Ordinal: 1232, Address: 0x276a50)
• RtlZeroHeap (Ordinal: 1233, Address: 0x389120)
• RtlZeroMemory (Ordinal: 1234, Address: 0x43f50)
• RtlxAnsiStringToUnicodeSize (Ordinal: 1235, Address: 0x389a00)
• RtlxOemStringToUnicodeSize (Ordinal: 1236, Address: 0x389a00)
• RtlxUnicodeStringToAnsiSize (Ordinal: 1237, Address: 0x3899a0)
• RtlxUnicodeStringToOemSize (Ordinal: 1238, Address: 0x3899a0)
• SeAccessCheck (Ordinal: 1239, Address: 0x2b4f30)
• SeAppendPrivileges (Ordinal: 1240, Address: 0x2a83d0)
• SeAssignSecurity (Ordinal: 1241, Address: 0x2b4430)
• SeAssignSecurityEx (Ordinal: 1242, Address: 0x3903c0)
• SeAuditHardLinkCreation (Ordinal: 1243, Address: 0x392e10)
• SeAuditingFileEvents (Ordinal: 1244, Address: 0x394990)
• SeAuditingFileEventsWithContext (Ordinal: 1245, Address: 0x2c12b0)
• SeAuditingFileOrGlobalEvents (Ordinal: 1246, Address: 0x3947e0)
• SeAuditingHardLinkEvents (Ordinal: 1247, Address: 0x3949e0)
• SeAuditingHardLinkEventsWithContext (Ordinal: 1248, Address: 0x394a40)
• SeCaptureSecurityDescriptor (Ordinal: 1249, Address: 0x2c5250)
• SeCaptureSubjectContext (Ordinal: 1250, Address: 0x2b2e70)
• SeCloseObjectAuditAlarm (Ordinal: 1251, Address: 0x393a20)
• SeCreateAccessState (Ordinal: 1252, Address: 0x29f800)
• SeCreateClientSecurity (Ordinal: 1253, Address: 0x2e16b0)
• SeCreateClientSecurityFromSubjectContext (Ordinal: 1254, Address: 0x2696e0)
• SeDeassignSecurity (Ordinal: 1255, Address: 0x293ea0)
• SeDeleteAccessState (Ordinal: 1256, Address: 0x2b70c0)
• SeDeleteObjectAuditAlarm (Ordinal: 1257, Address: 0x393af0)
• SeExports (Ordinal: 1258, Address: 0x3f9630)
• SeFilterToken (Ordinal: 1259, Address: 0x38fa20)
• SeFreePrivileges (Ordinal: 1260, Address: 0x28c710)
• SeImpersonateClient (Ordinal: 1261, Address: 0x2a11f0)
• SeImpersonateClientEx (Ordinal: 1262, Address: 0x2a11f0)
• SeLockSubjectContext (Ordinal: 1263, Address: 0x2bd240)
• SeMarkLogonSessionForTerminationNotification (Ordinal: 1264, Address: 0x395a70)
• SeOpenObjectAuditAlarm (Ordinal: 1265, Address: 0x2b9d60)
• SeOpenObjectForDeleteAuditAlarm (Ordinal: 1266, Address: 0x3932d0)
• SePrivilegeCheck (Ordinal: 1267, Address: 0x2c4500)
• SePrivilegeObjectAuditAlarm (Ordinal: 1268, Address: 0x27dc10)
• SePublicDefaultDacl (Ordinal: 1269, Address: 0x3f9548)
• SeQueryAuthenticationIdToken (Ordinal: 1270, Address: 0x2d6ac0)
• SeQueryInformationToken (Ordinal: 1271, Address: 0x2d9ad0)
• SeQuerySecurityDescriptorInfo (Ordinal: 1272, Address: 0x2bef90)
• SeQuerySessionIdToken (Ordinal: 1273, Address: 0x2de270)
• SeRegisterLogonSessionTerminatedRoutine (Ordinal: 1274, Address: 0x253860)
• SeReleaseSecurityDescriptor (Ordinal: 1275, Address: 0x2548b0)
• SeReleaseSubjectContext (Ordinal: 1276, Address: 0x2b2ea0)
• SeReportSecurityEvent (Ordinal: 1277, Address: 0xfed50)
• SeSetAccessStateGenericMapping (Ordinal: 1278, Address: 0x390390)
• SeSetAuditParameter (Ordinal: 1279, Address: 0xfeb20)
• SeSetSecurityDescriptorInfo (Ordinal: 1280, Address: 0x275a60)
• SeSetSecurityDescriptorInfoEx (Ordinal: 1281, Address: 0x395c50)
• SeSinglePrivilegeCheck (Ordinal: 1282, Address: 0x2cd560)
• SeSystemDefaultDacl (Ordinal: 1283, Address: 0x3f9568)
• SeTokenImpersonationLevel (Ordinal: 1284, Address: 0x2b3d30)
• SeTokenIsAdmin (Ordinal: 1285, Address: 0x395ca0)
• SeTokenIsRestricted (Ordinal: 1286, Address: 0x2de2e0)
• SeTokenObjectType (Ordinal: 1287, Address: 0x3f92b8)
• SeTokenType (Ordinal: 1288, Address: 0x2e1750)
• SeUnlockSubjectContext (Ordinal: 1289, Address: 0x2bd1f0)
• SeUnregisterLogonSessionTerminatedRoutine (Ordinal: 1290, Address: 0x3958e0)
• SeValidSecurityDescriptor (Ordinal: 1291, Address: 0x2a9820)
• VerSetConditionMask (Ordinal: 1292, Address: 0xaaf0)
• VfFailDeviceNode (Ordinal: 1293, Address: 0xfef40)
• VfFailDriver (Ordinal: 1294, Address: 0xff200)
• VfFailSystemBIOS (Ordinal: 1295, Address: 0xff0b0)
• VfIsVerificationEnabled (Ordinal: 1296, Address: 0x1fb0)
• WmiFlushTrace (Ordinal: 1297, Address: 0x398980)
• WmiGetClock (Ordinal: 1298, Address: 0x100290)
• WmiQueryTrace (Ordinal: 1299, Address: 0x397fe0)
• WmiQueryTraceInformation (Ordinal: 1300, Address: 0x398a90)
• WmiStartTrace (Ordinal: 1301, Address: 0x397e50)
• WmiStopTrace (Ordinal: 1302, Address: 0x398000)
• WmiTraceFastEvent (Ordinal: 1303, Address: 0x100bf0)
• WmiTraceMessage (Ordinal: 1304, Address: 0x100d20)
• WmiTraceMessageVa (Ordinal: 1305, Address: 0x1c370)
• WmiUpdateTrace (Ordinal: 1306, Address: 0x3981a0)
• XIPDispatch (Ordinal: 1307, Address: 0x104510)
• ZwAccessCheckAndAuditAlarm (Ordinal: 1308, Address: 0x3d190)
• ZwAddBootEntry (Ordinal: 1309, Address: 0x3d990)
• ZwAddDriverEntry (Ordinal: 1310, Address: 0x3d9b0)
• ZwAdjustPrivilegesToken (Ordinal: 1311, Address: 0x3d490)
• ZwAlertThread (Ordinal: 1312, Address: 0x3da10)
• ZwAllocateVirtualMemory (Ordinal: 1313, Address: 0x3cf70)
• ZwAssignProcessToJobObject (Ordinal: 1314, Address: 0x3dab0)
• ZwCancelIoFile (Ordinal: 1315, Address: 0x3d810)
• ZwCancelTimer (Ordinal: 1316, Address: 0x3d890)
• ZwClearEvent (Ordinal: 1317, Address: 0x3d430)
• ZwClose (Ordinal: 1318, Address: 0x3ce50)
• ZwCloseObjectAuditAlarm (Ordinal: 1319, Address: 0x3d3d0)
• ZwConnectPort (Ordinal: 1320, Address: 0x3db70)
• ZwCreateDirectoryObject (Ordinal: 1321, Address: 0x3dbb0)
• ZwCreateEvent (Ordinal: 1322, Address: 0x3d570)
• ZwCreateFile (Ordinal: 1323, Address: 0x3d710)
• ZwCreateJobObject (Ordinal: 1324, Address: 0x3dc10)
• ZwCreateKey (Ordinal: 1325, Address: 0x3d010)
• ZwCreateSection (Ordinal: 1326, Address: 0x3d5b0)
• ZwCreateSymbolicLinkObject (Ordinal: 1327, Address: 0x3dd70)
• ZwCreateTimer (Ordinal: 1328, Address: 0x3dd90)
• ZwDeleteBootEntry (Ordinal: 1329, Address: 0x3de50)
• ZwDeleteDriverEntry (Ordinal: 1330, Address: 0x3de70)
• ZwDeleteFile (Ordinal: 1331, Address: 0x3de90)
• ZwDeleteKey (Ordinal: 1332, Address: 0x3deb0)
• ZwDeleteValueKey (Ordinal: 1333, Address: 0x3def0)
• ZwDeviceIoControlFile (Ordinal: 1334, Address: 0x3cd50)
• ZwDisplayString (Ordinal: 1335, Address: 0x3df10)
• ZwDuplicateObject (Ordinal: 1336, Address: 0x3d3f0)
• ZwDuplicateToken (Ordinal: 1337, Address: 0x3d4b0)
• ZwEnumerateBootEntries (Ordinal: 1338, Address: 0x3df30)
• ZwEnumerateDriverEntries (Ordinal: 1339, Address: 0x3df50)
• ZwEnumerateKey (Ordinal: 1340, Address: 0x3d2b0)
• ZwEnumerateValueKey (Ordinal: 1341, Address: 0x3ced0)
• ZwFlushInstructionCache (Ordinal: 1342, Address: 0x3dfd0)
• ZwFlushKey (Ordinal: 1343, Address: 0x3dff0)
• ZwFlushVirtualMemory (Ordinal: 1344, Address: 0x3e010)
• ZwFreeVirtualMemory (Ordinal: 1345, Address: 0x3d030)
• ZwFsControlFile (Ordinal: 1346, Address: 0x3d390)
• ZwInitiatePowerAction (Ordinal: 1347, Address: 0x3e170)
• ZwIsProcessInJob (Ordinal: 1348, Address: 0x3d650)
• ZwLoadDriver (Ordinal: 1349, Address: 0x3e1d0)
• ZwLoadKey (Ordinal: 1350, Address: 0x3e1f0)
• ZwMakeTemporaryObject (Ordinal: 1351, Address: 0x3e2f0)
• ZwMapViewOfSection (Ordinal: 1352, Address: 0x3d170)
• ZwModifyBootEntry (Ordinal: 1353, Address: 0x3e330)
• ZwModifyDriverEntry (Ordinal: 1354, Address: 0x3e350)
• ZwNotifyChangeKey (Ordinal: 1355, Address: 0x3e390)
• ZwOpenDirectoryObject (Ordinal: 1356, Address: 0x3d770)
• ZwOpenEvent (Ordinal: 1357, Address: 0x3d470)
• ZwOpenFile (Ordinal: 1358, Address: 0x3d2d0)
• ZwOpenJobObject (Ordinal: 1359, Address: 0x3e410)
• ZwOpenKey (Ordinal: 1360, Address: 0x3ceb0)
• ZwOpenProcess (Ordinal: 1361, Address: 0x3d130)
• ZwOpenProcessToken (Ordinal: 1362, Address: 0x3e490)
• ZwOpenProcessTokenEx (Ordinal: 1363, Address: 0x3d270)
• ZwOpenSection (Ordinal: 1364, Address: 0x3d350)
• ZwOpenSymbolicLinkObject (Ordinal: 1365, Address: 0x3e4d0)
• ZwOpenThread (Ordinal: 1366, Address: 0x3e4f0)
• ZwOpenThreadToken (Ordinal: 1367, Address: 0x3d0f0)
• ZwOpenThreadTokenEx (Ordinal: 1368, Address: 0x3d250)
• ZwOpenTimer (Ordinal: 1369, Address: 0x3e510)
• ZwPowerInformation (Ordinal: 1370, Address: 0x3d850)
• ZwPulseEvent (Ordinal: 1371, Address: 0x3e5b0)
• ZwQueryBootEntryOrder (Ordinal: 1372, Address: 0x3e5d0)
• ZwQueryBootOptions (Ordinal: 1373, Address: 0x3e5f0)
• ZwQueryDefaultLocale (Ordinal: 1374, Address: 0x3cf10)
• ZwQueryDefaultUILanguage (Ordinal: 1375, Address: 0x3d4f0)
• ZwQueryDirectoryFile (Ordinal: 1376, Address: 0x3d310)
• ZwQueryDirectoryObject (Ordinal: 1377, Address: 0x3e630)
• ZwQueryDriverEntryOrder (Ordinal: 1378, Address: 0x3e650)
• ZwQueryEaFile (Ordinal: 1379, Address: 0x3e670)
• ZwQueryFullAttributesFile (Ordinal: 1380, Address: 0x3e690)
• ZwQueryInformationFile (Ordinal: 1381, Address: 0x3ce90)
• ZwQueryInformationJobObject (Ordinal: 1382, Address: 0x3e6d0)
• ZwQueryInformationProcess (Ordinal: 1383, Address: 0x3cf90)
• ZwQueryInformationThread (Ordinal: 1384, Address: 0x3d110)
• ZwQueryInformationToken (Ordinal: 1385, Address: 0x3d090)
• ZwQueryInstallUILanguage (Ordinal: 1386, Address: 0x3e710)
• ZwQueryKey (Ordinal: 1387, Address: 0x3cf30)
• ZwQueryObject (Ordinal: 1388, Address: 0x3ce70)
• ZwQuerySection (Ordinal: 1389, Address: 0x3d690)
• ZwQuerySecurityObject (Ordinal: 1390, Address: 0x3e830)
• ZwQuerySymbolicLinkObject (Ordinal: 1391, Address: 0x3e870)
• ZwQuerySystemInformation (Ordinal: 1392, Address: 0x3d330)
• ZwQueryValueKey (Ordinal: 1393, Address: 0x3cf50)
• ZwQueryVolumeInformationFile (Ordinal: 1394, Address: 0x3d590)
• ZwReadFile (Ordinal: 1395, Address: 0x3cd30)
• ZwReplaceKey (Ordinal: 1396, Address: 0x3e9b0)
• ZwRequestWaitReplyPort (Ordinal: 1397, Address: 0x3d0b0)
• ZwResetEvent (Ordinal: 1398, Address: 0x3ea50)
• ZwRestoreKey (Ordinal: 1399, Address: 0x3ea90)
• ZwSaveKey (Ordinal: 1400, Address: 0x3ead0)
• ZwSaveKeyEx (Ordinal: 1401, Address: 0x3eaf0)
• ZwSecureConnectPort (Ordinal: 1402, Address: 0x3eb30)
• ZwSetBootEntryOrder (Ordinal: 1403, Address: 0x3eb50)
• ZwSetBootOptions (Ordinal: 1404, Address: 0x3eb70)
• ZwSetDefaultLocale (Ordinal: 1405, Address: 0x3ebf0)
• ZwSetDefaultUILanguage (Ordinal: 1406, Address: 0x3ec10)
• ZwSetDriverEntryOrder (Ordinal: 1407, Address: 0x3ec30)
• ZwSetEaFile (Ordinal: 1408, Address: 0x3ec50)
• ZwSetEvent (Ordinal: 1409, Address: 0x3ce30)
• ZwSetInformationFile (Ordinal: 1410, Address: 0x3d150)
• ZwSetInformationJobObject (Ordinal: 1411, Address: 0x3ecd0)
• ZwSetInformationObject (Ordinal: 1412, Address: 0x3d7f0)
• ZwSetInformationProcess (Ordinal: 1413, Address: 0x3cff0)
• ZwSetInformationThread (Ordinal: 1414, Address: 0x3ce10)
• ZwSetSecurityObject (Ordinal: 1415, Address: 0x3edf0)
• ZwSetSystemInformation (Ordinal: 1416, Address: 0x3ee50)
• ZwSetSystemTime (Ordinal: 1417, Address: 0x3ee90)
• ZwSetTimer (Ordinal: 1418, Address: 0x3d8b0)
• ZwSetValueKey (Ordinal: 1419, Address: 0x3d870)
• ZwSetVolumeInformationFile (Ordinal: 1420, Address: 0x3ef10)
• ZwTerminateJobObject (Ordinal: 1421, Address: 0x3f010)
• ZwTerminateProcess (Ordinal: 1422, Address: 0x3d1f0)
• ZwTranslateFilePath (Ordinal: 1423, Address: 0x3f050)
• ZwUnloadDriver (Ordinal: 1424, Address: 0x3f070)
• ZwUnloadKey (Ordinal: 1425, Address: 0x3f090)
• ZwUnmapViewOfSection (Ordinal: 1426, Address: 0x3d1b0)
• ZwWaitForMultipleObjects (Ordinal: 1427, Address: 0x3d7d0)
• ZwWaitForSingleObject (Ordinal: 1428, Address: 0x3ccf0)
• ZwWriteFile (Ordinal: 1429, Address: 0x3cd70)
• ZwYieldExecution (Ordinal: 1430, Address: 0x3d530)
• __C_specific_handler (Ordinal: 1431, Address: 0x30510)
• __chkstk (Ordinal: 1432, Address: 0x39f20)
• __misaligned_access (Ordinal: 1433, Address: 0x396b0)
• _itoa (Ordinal: 1434, Address: 0x105410)
• _itow (Ordinal: 1435, Address: 0x1054d0)
• _local_unwind (Ordinal: 1436, Address: 0x38eb0)
• _purecall (Ordinal: 1437, Address: 0x1040b0)
• _setjmp (Ordinal: 1438, Address: 0x3a090)
• _setjmpex (Ordinal: 1439, Address: 0x3a140)
• _snprintf (Ordinal: 1440, Address: 0x9da0)
• _snwprintf (Ordinal: 1441, Address: 0x1f860)
• _stricmp (Ordinal: 1442, Address: 0x30d60)
• _strlwr (Ordinal: 1443, Address: 0x1055b0)
• _strnicmp (Ordinal: 1444, Address: 0x15f00)
• _strnset (Ordinal: 1445, Address: 0x1055e0)
• _strrev (Ordinal: 1446, Address: 0x105610)
• _strset (Ordinal: 1447, Address: 0x105660)
• _strupr (Ordinal: 1448, Address: 0x4c90)
• _vsnprintf (Ordinal: 1449, Address: 0x59430)
• _vsnwprintf (Ordinal: 1450, Address: 0x1baa0)
• _wcsicmp (Ordinal: 1451, Address: 0x2a890)
• _wcslwr (Ordinal: 1452, Address: 0x105680)
• _wcsnicmp (Ordinal: 1453, Address: 0x22c20)
• _wcsnset (Ordinal: 1454, Address: 0x1056c0)
• _wcsrev (Ordinal: 1455, Address: 0x1056f0)
• _wcsupr (Ordinal: 1456, Address: 0x7800)
• atoi (Ordinal: 1457, Address: 0x26b0)
• atol (Ordinal: 1458, Address: 0x105750)
• isdigit (Ordinal: 1459, Address: 0x105990)
• islower (Ordinal: 1460, Address: 0x105950)
• isprint (Ordinal: 1461, Address: 0x105a10)
• isspace (Ordinal: 1462, Address: 0x2160)
• isupper (Ordinal: 1463, Address: 0x105910)
• isxdigit (Ordinal: 1464, Address: 0x1059d0)
• longjmp (Ordinal: 1465, Address: 0x3a1e0)
• mbstowcs (Ordinal: 1466, Address: 0x105a70)
• mbtowc (Ordinal: 1467, Address: 0x571d0)
• memchr (Ordinal: 1468, Address: 0xb2b0)
• memcmp (Ordinal: 1469, Address: 0x38ef0)
• memcpy (Ordinal: 1470, Address: 0x38b60)
• memmove (Ordinal: 1471, Address: 0x38b60)
• memset (Ordinal: 1472, Address: 0x43f70)
• qsort (Ordinal: 1473, Address: 0x7e60)
• rand (Ordinal: 1474, Address: 0x105bb0)
• sprintf (Ordinal: 1475, Address: 0x15e60)
• srand (Ordinal: 1476, Address: 0x105ba0)
• strcat (Ordinal: 1477, Address: 0x38fd0)
• strchr (Ordinal: 1478, Address: 0xc2f0)
• strcmp (Ordinal: 1479, Address: 0x39140)
• strcpy (Ordinal: 1480, Address: 0x39070)
• strlen (Ordinal: 1481, Address: 0x39200)
• strncat (Ordinal: 1482, Address: 0x392c0)
• strncmp (Ordinal: 1483, Address: 0x39470)
• strncpy (Ordinal: 1484, Address: 0x39540)
• strrchr (Ordinal: 1485, Address: 0x8e50)
• strspn (Ordinal: 1486, Address: 0x105be0)
• strstr (Ordinal: 1487, Address: 0x4ad0)
• swprintf (Ordinal: 1488, Address: 0x57260)
• tolower (Ordinal: 1489, Address: 0x105cc0)
• toupper (Ordinal: 1490, Address: 0x11720)
• towlower (Ordinal: 1491, Address: 0x105d10)
• towupper (Ordinal: 1492, Address: 0x7830)
• vDbgPrintEx (Ordinal: 1493, Address: 0xf8350)
• vDbgPrintExWithPrefix (Ordinal: 1494, Address: 0xf8380)
• vsprintf (Ordinal: 1495, Address: 0xd020)
• wcscat (Ordinal: 1496, Address: 0x105d40)
• wcschr (Ordinal: 1497, Address: 0x573d0)
• wcscmp (Ordinal: 1498, Address: 0x105db0)
• wcscpy (Ordinal: 1499, Address: 0x105d80)
• wcscspn (Ordinal: 1500, Address: 0x105e00)
• wcslen (Ordinal: 1501, Address: 0x105e50)
• wcsncat (Ordinal: 1502, Address: 0x98d0)
• wcsncmp (Ordinal: 1503, Address: 0x255d0)
• wcsncpy (Ordinal: 1504, Address: 0x22cc0)
• wcsrchr (Ordinal: 1505, Address: 0x168f0)
• wcsspn (Ordinal: 1506, Address: 0x105e70)
• wcsstr (Ordinal: 1507, Address: 0x5bef0)
• wcstombs (Ordinal: 1508, Address: 0x105ed0)
• wctomb (Ordinal: 1509, Address: 0x16a00)

Imported DLLs & Functions