kernel32.dll
Description: Windows NT BASE API Client DLL
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.26100.9444
Architecture: 64-bit
Operating System: Windows NT
SHA256: 8f8629741558b5df71def4e1dd8ef964
File Size: 824.7 KB
Uploaded At: Sept. 12, 2026, 3:33 p.m.
Views: 69
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: CreateRemoteThread, WriteProcessMemory, OpenProcess, VirtualAllocEx
Exported Functions
- AcquireSRWLockExclusive (Ordinal: 1, Address: 0xaa887)
- AcquireSRWLockShared (Ordinal: 2, Address: 0xaa8bd)
- ActivateActCtx (Ordinal: 3, Address: 0x36d40)
- ActivateActCtxWorker (Ordinal: 4, Address: 0xe4e0)
- ActivatePackageVirtualizationContext (Ordinal: 5, Address: 0x57f20)
- AddAtomA (Ordinal: 6, Address: 0x45480)
- AddAtomW (Ordinal: 7, Address: 0x370c0)
- AddConsoleAliasA (Ordinal: 8, Address: 0x57c40)
- AddConsoleAliasW (Ordinal: 9, Address: 0x57c50)
- AddDllDirectory (Ordinal: 10, Address: 0xaa968)
- AddIntegrityLabelToBoundaryDescriptor (Ordinal: 11, Address: 0x44dc0)
- AddLocalAlternateComputerNameA (Ordinal: 12, Address: 0x69cc0)
- AddLocalAlternateComputerNameW (Ordinal: 13, Address: 0x69d20)
- AddRefActCtx (Ordinal: 14, Address: 0x5a990)
- AddRefActCtxWorker (Ordinal: 15, Address: 0x3bd90)
- AddResourceAttributeAce (Ordinal: 16, Address: 0x5a9b0)
- AddSIDToBoundaryDescriptor (Ordinal: 17, Address: 0x43370)
- AddScopedPolicyIDAce (Ordinal: 18, Address: 0x5a9d0)
- AddSecureMemoryCacheCallback (Ordinal: 19, Address: 0x590f0)
- AddVectoredContinueHandler (Ordinal: 20, Address: 0xaaaa1)
- AddVectoredExceptionHandler (Ordinal: 21, Address: 0xaaae1)
- AdjustCalendarDate (Ordinal: 22, Address: 0x140c0)
- AllocConsole (Ordinal: 23, Address: 0x57870)
- AllocConsoleWithOptions (Ordinal: 24, Address: 0x57880)
- AllocateUserPhysicalPages (Ordinal: 25, Address: 0x5aa10)
- AllocateUserPhysicalPagesNuma (Ordinal: 26, Address: 0x5a9f0)
- AppPolicyGetClrCompat (Ordinal: 27, Address: 0xaab8c)
- AppPolicyGetCreateFileAccess (Ordinal: 28, Address: 0xaabca)
- AppPolicyGetLifecycleManagement (Ordinal: 29, Address: 0xaac12)
- AppPolicyGetMediaFoundationCodecLoading (Ordinal: 30, Address: 0xaac65)
- AppPolicyGetProcessTerminationMethod (Ordinal: 31, Address: 0xaacbd)
- AppPolicyGetShowDeveloperDiagnostic (Ordinal: 32, Address: 0xaad11)
- AppPolicyGetThreadInitializationType (Ordinal: 33, Address: 0xaad65)
- AppPolicyGetWindowingModel (Ordinal: 34, Address: 0xaadb0)
- AppXGetOSMaxVersionTested (Ordinal: 35, Address: 0xaadf0)
- ApplicationRecoveryFinished (Ordinal: 36, Address: 0x620a0)
- ApplicationRecoveryInProgress (Ordinal: 37, Address: 0x620b0)
- AreFileApisANSI (Ordinal: 38, Address: 0x3e6e0)
- AreShortNamesEnabled (Ordinal: 39, Address: 0x54390)
- AssignProcessToJobObject (Ordinal: 40, Address: 0x3e700)
- AttachConsole (Ordinal: 41, Address: 0x57890)
- BackupRead (Ordinal: 42, Address: 0x40a20)
- BackupReadEx (Ordinal: 43, Address: 0x306f0)
- BackupSeek (Ordinal: 44, Address: 0x553e0)
- BackupWrite (Ordinal: 45, Address: 0x6bfb0)
- BackupWriteEx (Ordinal: 46, Address: 0x6c140)
- BaseCheckAppcompatCache (Ordinal: 47, Address: 0x5aa90)
- BaseCheckAppcompatCacheEx (Ordinal: 48, Address: 0x5aa30)
- BaseCheckAppcompatCacheExWorker (Ordinal: 49, Address: 0x44790)
- BaseCheckAppcompatCacheWorker (Ordinal: 50, Address: 0x44790)
- BaseCheckElevation (Ordinal: 51, Address: 0x1e970)
- BaseCleanupAppcompatCacheSupport (Ordinal: 52, Address: 0x5aab0)
- BaseCleanupAppcompatCacheSupportWorker (Ordinal: 53, Address: 0x58590)
- BaseDestroyVDMEnvironment (Ordinal: 54, Address: 0x5ebd0)
- BaseDllReadWriteIniFile (Ordinal: 55, Address: 0xf180)
- BaseDumpAppcompatCache (Ordinal: 56, Address: 0x5aad0)
- BaseDumpAppcompatCacheWorker (Ordinal: 57, Address: 0x58580)
- BaseElevationPostProcessing (Ordinal: 58, Address: 0x3ae70)
- BaseFlushAppcompatCache (Ordinal: 59, Address: 0x5aaf0)
- BaseFlushAppcompatCacheWorker (Ordinal: 60, Address: 0x78d80)
- BaseFormatObjectAttributes (Ordinal: 61, Address: 0x56d80)
- BaseFormatTimeOut (Ordinal: 62, Address: 0x697f0)
- BaseFreeAppCompatDataForProcessWorker (Ordinal: 63, Address: 0x43750)
- BaseGenerateAppCompatData (Ordinal: 64, Address: 0x2fa10)
- BaseGetNamedObjectDirectory (Ordinal: 65, Address: 0x44c60)
- BaseInitAppcompatCacheSupport (Ordinal: 66, Address: 0x5ab10)
- BaseInitAppcompatCacheSupportWorker (Ordinal: 67, Address: 0x58590)
- BaseIsAppcompatInfrastructureDisabled (Ordinal: 68, Address: 0x44790)
- BaseIsAppcompatInfrastructureDisabledWorker (Ordinal: 69, Address: 0x44790)
- BaseIsDosApplication (Ordinal: 70, Address: 0x6d6b0)
- BaseMarkProcessTokenForInstallers (Ordinal: 71, Address: 0x6cd00)
- BaseQueryModuleData (Ordinal: 72, Address: 0x78f10)
- BaseReadAppCompatDataForProcessWorker (Ordinal: 73, Address: 0x3bf80)
- BaseSetLastNTError (Ordinal: 74, Address: 0xead0)
- BaseThreadInitThunk (Ordinal: 75, Address: 0x2cd70)
- BaseUpdateAppcompatCache (Ordinal: 76, Address: 0x5ab30)
- BaseUpdateAppcompatCacheWorker (Ordinal: 77, Address: 0x78dd0)
- BaseUpdateVDMEntry (Ordinal: 78, Address: 0x54190)
- BaseWriteErrorElevationRequiredEvent (Ordinal: 79, Address: 0x6cf00)
- Basep8BitStringToDynamicUnicodeString (Ordinal: 80, Address: 0xcb40)
- BasepAllocateActivationContextActivationBlock (Ordinal: 81, Address: 0x698a0)
- BasepAnsiStringToDynamicUnicodeString (Ordinal: 82, Address: 0x69820)
- BasepAppContainerEnvironmentExtension (Ordinal: 83, Address: 0x43700)
- BasepAppXExtension (Ordinal: 84, Address: 0x41490)
- BasepBrokerSandboxedCreateProcess (Ordinal: 85, Address: 0x597c0)
- BasepCheckAppCompat (Ordinal: 86, Address: 0x375d0)
- BasepCheckPplSupport (Ordinal: 87, Address: 0x59890)
- BasepCheckWebBladeHashes (Ordinal: 88, Address: 0x388d0)
- BasepCheckWinSaferRestrictions (Ordinal: 89, Address: 0x32200)
- BasepConstructSxsCreateProcessMessage (Ordinal: 90, Address: 0x26070)
- BasepCopyEncryption (Ordinal: 91, Address: 0x55720)
- BasepCreateProcessAsUserInsideSecurityEnvironment (Ordinal: 92, Address: 0x598d0)
- BasepFinishPackageActivation (Ordinal: 93, Address: 0x599c0)
- BasepFinishPackageActivationForSxS (Ordinal: 94, Address: 0x3c540)
- BasepFreeActivationContextActivationBlock (Ordinal: 95, Address: 0x69a30)
- BasepFreeActivationTokenInfo (Ordinal: 96, Address: 0x3fc80)
- BasepFreeAppCompatData (Ordinal: 97, Address: 0x34690)
- BasepGetAppCompatData (Ordinal: 98, Address: 0x2efe0)
- BasepGetComputerNameFromNtPath (Ordinal: 99, Address: 0x42150)
- BasepGetExeArchType (Ordinal: 100, Address: 0x376b0)
- BasepGetPackageActivationTokenForFilePath (Ordinal: 101, Address: 0x599d0)
- BasepGetPackageActivationTokenForFilePath2 (Ordinal: 102, Address: 0x4dfc0)
- BasepGetPackageActivationTokenForSxS (Ordinal: 103, Address: 0x599d0)
- BasepGetPackageActivationTokenForSxS2 (Ordinal: 104, Address: 0x4fc20)
- BasepGetPackageActivationTokenForSxS3 (Ordinal: 105, Address: 0x61510)
- BasepGetPackagedAppInfoForFile (Ordinal: 106, Address: 0x46370)
- BasepInitAppCompatData (Ordinal: 107, Address: 0x78e40)
- BasepIsProcessAllowed (Ordinal: 108, Address: 0x380b0)
- BasepMapModuleHandle (Ordinal: 109, Address: 0xd1a0)
- BasepNotifyLoadStringResource (Ordinal: 110, Address: 0x31b90)
- BasepPostSuccessAppXExtension (Ordinal: 111, Address: 0x43e50)
- BasepProcessInvalidImage (Ordinal: 112, Address: 0x599e0)
- BasepQueryAppCompat (Ordinal: 113, Address: 0x1aa30)
- BasepQueryModuleChpeSettings (Ordinal: 114, Address: 0x52e30)
- BasepReleaseAppXContext (Ordinal: 115, Address: 0x445b0)
- BasepReleasePackagedAppInfo (Ordinal: 116, Address: 0x5a110)
- BasepReleaseSxsCreateProcessUtilityStruct (Ordinal: 117, Address: 0x253d0)
- BasepReportFault (Ordinal: 118, Address: 0x622d0)
- BasepSandboxEngineCreateProcessHooks_IsSandboxedLaunchSignaled (Ordinal: 119, Address: 0x5a160)
- BasepSandboxEngineCreateProcessHooks_SetMsixPackageSignal (Ordinal: 120, Address: 0x5a1c0)
- BasepSetFileEncryptionCompression (Ordinal: 121, Address: 0x34700)
- Beep (Ordinal: 122, Address: 0x4f740)
- BeginUpdateResourceA (Ordinal: 123, Address: 0x63820)
- BeginUpdateResourceW (Ordinal: 124, Address: 0x52bb0)
- BindIoCompletionCallback (Ordinal: 125, Address: 0x43da0)
- BuildCommDCBA (Ordinal: 126, Address: 0x60250)
- BuildCommDCBAndTimeoutsA (Ordinal: 127, Address: 0x602b0)
- BuildCommDCBAndTimeoutsW (Ordinal: 128, Address: 0x602f0)
- BuildCommDCBW (Ordinal: 129, Address: 0x60390)
- BuildIoRingCancelRequest (Ordinal: 130, Address: 0xab86f)
- BuildIoRingFlushFile (Ordinal: 131, Address: 0xab8bb)
- BuildIoRingReadFile (Ordinal: 132, Address: 0xab902)
- BuildIoRingReadFileScatter (Ordinal: 133, Address: 0xab94f)
- BuildIoRingRegisterBuffers (Ordinal: 134, Address: 0xab9a3)
- BuildIoRingRegisterFileHandles (Ordinal: 135, Address: 0xab9fb)
- BuildIoRingWriteFile (Ordinal: 136, Address: 0xaba4d)
- BuildIoRingWriteFileGather (Ordinal: 137, Address: 0xaba9b)
- CallNamedPipeA (Ordinal: 138, Address: 0xb1d0)
- CallNamedPipeW (Ordinal: 139, Address: 0x57600)
- CallbackMayRunLong (Ordinal: 140, Address: 0x41ae0)
- CancelDeviceWakeupRequest (Ordinal: 141, Address: 0x448d0)
- CancelIo (Ordinal: 142, Address: 0x41f20)
- CancelIoEx (Ordinal: 143, Address: 0x3fc60)
- CancelSynchronousIo (Ordinal: 144, Address: 0x5ab50)
- CancelThreadpoolIo (Ordinal: 145, Address: 0xabb5a)
- CancelTimerQueueTimer (Ordinal: 146, Address: 0x62240)
- CancelWaitableTimer (Ordinal: 147, Address: 0x56e40)
- CeipIsOptedIn (Ordinal: 148, Address: 0xabbb1)
- ChangeTimerQueueTimer (Ordinal: 149, Address: 0x45850)
- CheckAllowDecryptedRemoteDestinationPolicy (Ordinal: 150, Address: 0x5ab70)
- CheckElevation (Ordinal: 151, Address: 0x37470)
- CheckElevationEnabled (Ordinal: 152, Address: 0x42b80)
- CheckForReadOnlyResource (Ordinal: 153, Address: 0x6da20)
- CheckForReadOnlyResourceFilter (Ordinal: 154, Address: 0x5c2c0)
- CheckNameLegalDOS8Dot3A (Ordinal: 155, Address: 0x561c0)
- CheckNameLegalDOS8Dot3W (Ordinal: 156, Address: 0x40ad0)
- CheckRemoteDebuggerPresent (Ordinal: 157, Address: 0x44e10)
- CheckTokenCapability (Ordinal: 158, Address: 0x5ab90)
- CheckTokenMembershipEx (Ordinal: 159, Address: 0x5abb0)
- ClearCommBreak (Ordinal: 160, Address: 0x57660)
- ClearCommError (Ordinal: 161, Address: 0x57670)
- CloseConsoleHandle (Ordinal: 162, Address: 0x731d0)
- CloseHandle (Ordinal: 163, Address: 0x56e00)
- CloseIoRing (Ordinal: 164, Address: 0xabd28)
- ClosePackageInfo (Ordinal: 165, Address: 0xabd63)
- ClosePrivateNamespace (Ordinal: 166, Address: 0x44be0)
- CloseProfileUserMapping (Ordinal: 167, Address: 0x58590)
- ClosePseudoConsole (Ordinal: 168, Address: 0x578a0)
- CloseState (Ordinal: 169, Address: 0xabdcb)
- CloseThreadpool (Ordinal: 170, Address: 0xabdf1)
- CloseThreadpoolCleanupGroup (Ordinal: 171, Address: 0xabe21)
- CloseThreadpoolCleanupGroupMembers (Ordinal: 172, Address: 0xabe60)
- CloseThreadpoolIo (Ordinal: 173, Address: 0xabe95)
- CloseThreadpoolTimer (Ordinal: 174, Address: 0xabec6)
- CloseThreadpoolWait (Ordinal: 175, Address: 0xabeef)
- CloseThreadpoolWork (Ordinal: 176, Address: 0xabf17)
- CmdBatNotification (Ordinal: 177, Address: 0x43160)
- CommConfigDialogA (Ordinal: 178, Address: 0x5cc30)
- CommConfigDialogW (Ordinal: 179, Address: 0x549e0)
- CompareCalendarDates (Ordinal: 180, Address: 0x63f30)
- CompareFileTime (Ordinal: 181, Address: 0x57030)
- CompareStringA (Ordinal: 182, Address: 0x40570)
- CompareStringEx (Ordinal: 183, Address: 0x21d30)
- CompareStringOrdinal (Ordinal: 184, Address: 0x315a0)
- CompareStringW (Ordinal: 185, Address: 0x386d0)
- ConnectNamedPipe (Ordinal: 186, Address: 0x40ab0)
- ConsoleMenuControl (Ordinal: 187, Address: 0x732c0)
- ContinueDebugEvent (Ordinal: 188, Address: 0x46f40)
- ConvertCalDateTimeToSystemTime (Ordinal: 189, Address: 0x63fe0)
- ConvertDefaultLocale (Ordinal: 190, Address: 0x44e30)
- ConvertFiberToThread (Ordinal: 191, Address: 0x577c0)
- ConvertNLSDayOfWeekToWin32DayOfWeek (Ordinal: 192, Address: 0x44950)
- ConvertSystemTimeToCalDateTime (Ordinal: 193, Address: 0x36ab0)
- ConvertThreadToFiber (Ordinal: 194, Address: 0x577d0)
- ConvertThreadToFiberEx (Ordinal: 195, Address: 0x577e0)
- CopyContext (Ordinal: 196, Address: 0x5abd0)
- CopyFile2 (Ordinal: 197, Address: 0x5abf0)
- CopyFileA (Ordinal: 198, Address: 0x6dd70)
- CopyFileExA (Ordinal: 199, Address: 0x6de20)
- CopyFileExW (Ordinal: 200, Address: 0x454a0)
- CopyFileTransactedA (Ordinal: 201, Address: 0x6def0)
- CopyFileTransactedW (Ordinal: 202, Address: 0x6dfc0)
- CopyFileW (Ordinal: 203, Address: 0x577b0)
- CopyLZFile (Ordinal: 204, Address: 0x58460)
- CreateActCtxA (Ordinal: 205, Address: 0x405b0)
- CreateActCtxW (Ordinal: 206, Address: 0x44570)
- CreateActCtxWWorker (Ordinal: 207, Address: 0x23120)
- CreateBoundaryDescriptorA (Ordinal: 208, Address: 0x6dc10)
- CreateBoundaryDescriptorW (Ordinal: 209, Address: 0x429a0)
- CreateConsoleScreenBuffer (Ordinal: 210, Address: 0x579d0)
- CreateDirectory2A (Ordinal: 211, Address: 0x57040)
- CreateDirectory2W (Ordinal: 212, Address: 0x57050)
- CreateDirectoryA (Ordinal: 213, Address: 0x57060)
- CreateDirectoryExA (Ordinal: 214, Address: 0x6e2a0)
- CreateDirectoryExW (Ordinal: 215, Address: 0x5ac10)
- CreateDirectoryTransactedA (Ordinal: 216, Address: 0x587c0)
- CreateDirectoryTransactedW (Ordinal: 217, Address: 0x6e340)
- CreateDirectoryW (Ordinal: 218, Address: 0x57070)
- CreateEnclave (Ordinal: 219, Address: 0xac25c)
- CreateEventA (Ordinal: 220, Address: 0x56e50)
- CreateEventExA (Ordinal: 221, Address: 0x56e60)
- CreateEventExW (Ordinal: 222, Address: 0x56e70)
- CreateEventW (Ordinal: 223, Address: 0x56e80)
- CreateFiber (Ordinal: 224, Address: 0x577f0)
- CreateFiberEx (Ordinal: 225, Address: 0x57800)
- CreateFile2 (Ordinal: 226, Address: 0x57080)
- CreateFile3 (Ordinal: 227, Address: 0x57090)
- CreateFileA (Ordinal: 228, Address: 0x570a0)
- CreateFileMappingA (Ordinal: 229, Address: 0xca80)
- CreateFileMappingFromApp (Ordinal: 230, Address: 0xac32b)
- CreateFileMappingNumaA (Ordinal: 231, Address: 0x6e4c0)
- CreateFileMappingNumaW (Ordinal: 232, Address: 0x5ac30)
- CreateFileMappingW (Ordinal: 233, Address: 0x3a840)
- CreateFileTransactedA (Ordinal: 234, Address: 0x6e0a0)
- CreateFileTransactedW (Ordinal: 235, Address: 0x43c00)
- CreateFileW (Ordinal: 236, Address: 0x570b0)
- CreateHardLinkA (Ordinal: 237, Address: 0x5ac50)
- CreateHardLinkTransactedA (Ordinal: 238, Address: 0x61450)
- CreateHardLinkTransactedW (Ordinal: 239, Address: 0x42c10)
- CreateHardLinkW (Ordinal: 240, Address: 0x46580)
- CreateIoCompletionPort (Ordinal: 241, Address: 0x3f1c0)
- CreateIoRing (Ordinal: 242, Address: 0xac453)
- CreateJobObjectA (Ordinal: 243, Address: 0x6b5f0)
- CreateJobObjectW (Ordinal: 244, Address: 0x3bb80)
- CreateJobSet (Ordinal: 245, Address: 0x6b660)
- CreateMailslotA (Ordinal: 246, Address: 0xb150)
- CreateMailslotW (Ordinal: 247, Address: 0xaf90)
- CreateMemoryResourceNotification (Ordinal: 248, Address: 0x44750)
- CreateMutexA (Ordinal: 249, Address: 0x56e90)
- CreateMutexExA (Ordinal: 250, Address: 0x56ea0)
- CreateMutexExW (Ordinal: 251, Address: 0x56eb0)
- CreateMutexW (Ordinal: 252, Address: 0x56ec0)
- CreateNamedPipeA (Ordinal: 253, Address: 0xc9d0)
- CreateNamedPipeW (Ordinal: 254, Address: 0x41f40)
- CreatePackageVirtualizationContext (Ordinal: 255, Address: 0x57fc0)
- CreatePipe (Ordinal: 256, Address: 0x45870)
- CreatePrivateNamespaceA (Ordinal: 257, Address: 0x6dc80)
- CreatePrivateNamespaceW (Ordinal: 258, Address: 0x56280)
- CreateProcessA (Ordinal: 259, Address: 0x44b50)
- CreateProcessAsUserA (Ordinal: 260, Address: 0x5ac70)
- CreateProcessAsUserW (Ordinal: 261, Address: 0x3a780)
- CreateProcessInternalA (Ordinal: 262, Address: 0x5acf0)
- CreateProcessInternalW (Ordinal: 263, Address: 0x5ad70)
- CreateProcessW (Ordinal: 264, Address: 0x3bdd0)
- CreatePseudoConsole (Ordinal: 265, Address: 0x578b0)
- CreateRemoteThread (Ordinal: 266, Address: 0x42950)
- CreateRemoteThreadEx (Ordinal: 267, Address: 0xac658)
- CreateSemaphoreA (Ordinal: 268, Address: 0xb710)
- CreateSemaphoreExA (Ordinal: 269, Address: 0xb880)
- CreateSemaphoreExW (Ordinal: 270, Address: 0x56ed0)
- CreateSemaphoreW (Ordinal: 271, Address: 0x56ee0)
- CreateSymbolicLinkA (Ordinal: 272, Address: 0x6e760)
- CreateSymbolicLinkTransactedA (Ordinal: 273, Address: 0x6e830)
- CreateSymbolicLinkTransactedW (Ordinal: 274, Address: 0x54fa0)
- CreateSymbolicLinkW (Ordinal: 275, Address: 0x4df40)
- CreateTapePartition (Ordinal: 276, Address: 0x61180)
- CreateThread (Ordinal: 277, Address: 0x315c0)
- CreateThreadpool (Ordinal: 278, Address: 0x43670)
- CreateThreadpoolCleanupGroup (Ordinal: 279, Address: 0x427d0)
- CreateThreadpoolIo (Ordinal: 280, Address: 0x542b0)
- CreateThreadpoolTimer (Ordinal: 281, Address: 0x35f30)
- CreateThreadpoolWait (Ordinal: 282, Address: 0x3e010)
- CreateThreadpoolWork (Ordinal: 283, Address: 0x32c20)
- CreateTimerQueue (Ordinal: 284, Address: 0x44770)
- CreateTimerQueueTimer (Ordinal: 285, Address: 0x417f0)
- CreateToolhelp32Snapshot (Ordinal: 286, Address: 0x4ab50)
- CreateUmsCompletionList (Ordinal: 287, Address: 0x601e0)
- CreateUmsThreadContext (Ordinal: 288, Address: 0x601e0)
- CreateWaitableTimerA (Ordinal: 289, Address: 0x32070)
- CreateWaitableTimerExA (Ordinal: 290, Address: 0x30360)
- CreateWaitableTimerExW (Ordinal: 291, Address: 0x56ef0)
- CreateWaitableTimerW (Ordinal: 292, Address: 0x34db0)
- CtrlRoutine (Ordinal: 293, Address: 0xac8b4)
- DeactivateActCtx (Ordinal: 294, Address: 0x3a740)
- DeactivateActCtxWorker (Ordinal: 295, Address: 0xe390)
- DeactivatePackageVirtualizationContext (Ordinal: 296, Address: 0x57fe0)
- DebugActiveProcess (Ordinal: 297, Address: 0x5ae10)
- DebugActiveProcessStop (Ordinal: 298, Address: 0x5adf0)
- DebugBreak (Ordinal: 299, Address: 0x54df0)
- DebugBreakProcess (Ordinal: 300, Address: 0x586b0)
- DebugSetProcessKillOnExit (Ordinal: 301, Address: 0x586e0)
- DecodePointer (Ordinal: 302, Address: 0xac989)
- DecodeSystemPointer (Ordinal: 303, Address: 0xac9b4)
- DefineDosDeviceA (Ordinal: 304, Address: 0x6f520)
- DefineDosDeviceW (Ordinal: 305, Address: 0x570c0)
- DelayLoadFailureHook (Ordinal: 306, Address: 0x5ae30)
- DeleteAtom (Ordinal: 307, Address: 0x39450)
- DeleteBoundaryDescriptor (Ordinal: 308, Address: 0x42e90)
- DeleteCriticalSection (Ordinal: 309, Address: 0xaca42)
- DeleteFiber (Ordinal: 310, Address: 0x57810)
- DeleteFile2A (Ordinal: 311, Address: 0x570d0)
- DeleteFile2W (Ordinal: 312, Address: 0x570e0)
- DeleteFileA (Ordinal: 313, Address: 0x570f0)
- DeleteFileTransactedA (Ordinal: 314, Address: 0x6e900)
- DeleteFileTransactedW (Ordinal: 315, Address: 0x6e960)
- DeleteFileW (Ordinal: 316, Address: 0x57100)
- DeleteProcThreadAttributeList (Ordinal: 317, Address: 0xacae9)
- DeleteSynchronizationBarrier (Ordinal: 318, Address: 0x5ae50)
- DeleteTimerQueue (Ordinal: 319, Address: 0x575b0)
- DeleteTimerQueueEx (Ordinal: 320, Address: 0x44f80)
- DeleteTimerQueueTimer (Ordinal: 321, Address: 0x41470)
- DeleteUmsCompletionList (Ordinal: 322, Address: 0x601e0)
- DeleteUmsThreadContext (Ordinal: 323, Address: 0x601e0)
- DeleteVolumeMountPointA (Ordinal: 324, Address: 0x6f5d0)
- DeleteVolumeMountPointW (Ordinal: 325, Address: 0x57110)
- DequeueUmsCompletionListItems (Ordinal: 326, Address: 0x601e0)
- DeviceIoControl (Ordinal: 327, Address: 0x21a50)
- DisableThreadLibraryCalls (Ordinal: 328, Address: 0x41b20)
- DisableThreadProfiling (Ordinal: 329, Address: 0x62310)
- DisassociateCurrentThreadFromCallback (Ordinal: 330, Address: 0xacc68)
- DiscardVirtualMemory (Ordinal: 331, Address: 0xacc9a)
- DisconnectNamedPipe (Ordinal: 332, Address: 0x43060)
- DnsHostnameToComputerNameA (Ordinal: 333, Address: 0x6aa30)
- DnsHostnameToComputerNameExW (Ordinal: 334, Address: 0x5ae70)
- DnsHostnameToComputerNameW (Ordinal: 335, Address: 0x3f280)
- DosDateTimeToFileTime (Ordinal: 336, Address: 0xe2c0)
- DosPathToSessionPathA (Ordinal: 337, Address: 0x705f0)
- DosPathToSessionPathW (Ordinal: 338, Address: 0x707e0)
- DuplicateConsoleHandle (Ordinal: 339, Address: 0x731f0)
- DuplicateEncryptionInfoFileExt (Ordinal: 340, Address: 0x55e60)
- DuplicateHandle (Ordinal: 341, Address: 0x56e10)
- DuplicatePackageVirtualizationContext (Ordinal: 342, Address: 0x58000)
- EnableProcessOptionalXStateFeatures (Ordinal: 343, Address: 0x5ae90)
- EnableThreadProfiling (Ordinal: 344, Address: 0x62350)
- EncodePointer (Ordinal: 345, Address: 0xace2a)
- EncodeSystemPointer (Ordinal: 346, Address: 0xace55)
- EndUpdateResourceA (Ordinal: 347, Address: 0x63890)
- EndUpdateResourceW (Ordinal: 348, Address: 0x638a0)
- EnterCriticalSection (Ordinal: 349, Address: 0xacead)
- EnterSynchronizationBarrier (Ordinal: 350, Address: 0x5aeb0)
- EnterUmsSchedulingMode (Ordinal: 351, Address: 0x601e0)
- EnumCalendarInfoA (Ordinal: 352, Address: 0x64b50)
- EnumCalendarInfoExA (Ordinal: 353, Address: 0x64bf0)
- EnumCalendarInfoExEx (Ordinal: 354, Address: 0x43d80)
- EnumCalendarInfoExW (Ordinal: 355, Address: 0x5aed0)
- EnumCalendarInfoW (Ordinal: 356, Address: 0x5aef0)
- EnumDateFormatsA (Ordinal: 357, Address: 0x64c90)
- EnumDateFormatsExA (Ordinal: 358, Address: 0x64cf0)
- EnumDateFormatsExEx (Ordinal: 359, Address: 0x47130)
- EnumDateFormatsExW (Ordinal: 360, Address: 0x5af10)
- EnumDateFormatsW (Ordinal: 361, Address: 0x5af30)
- EnumLanguageGroupLocalesA (Ordinal: 362, Address: 0x64d60)
- EnumLanguageGroupLocalesW (Ordinal: 363, Address: 0x5af50)
- EnumResourceLanguagesA (Ordinal: 364, Address: 0x59200)
- EnumResourceLanguagesExA (Ordinal: 365, Address: 0x5af70)
- EnumResourceLanguagesExW (Ordinal: 366, Address: 0x45750)
- EnumResourceLanguagesW (Ordinal: 367, Address: 0x42820)
- EnumResourceNamesA (Ordinal: 368, Address: 0x575d0)
- EnumResourceNamesExA (Ordinal: 369, Address: 0x5af90)
- EnumResourceNamesExW (Ordinal: 370, Address: 0x5afb0)
- EnumResourceNamesW (Ordinal: 371, Address: 0x575e0)
- EnumResourceTypesA (Ordinal: 372, Address: 0x59240)
- EnumResourceTypesExA (Ordinal: 373, Address: 0x5afd0)
- EnumResourceTypesExW (Ordinal: 374, Address: 0x5aff0)
- EnumResourceTypesW (Ordinal: 375, Address: 0x59270)
- EnumSystemCodePagesA (Ordinal: 376, Address: 0x64d90)
- EnumSystemCodePagesW (Ordinal: 377, Address: 0x5b010)
- EnumSystemFirmwareTables (Ordinal: 378, Address: 0x4e040)
- EnumSystemGeoID (Ordinal: 379, Address: 0x39050)
- EnumSystemGeoNames (Ordinal: 380, Address: 0x685b0)
- EnumSystemLanguageGroupsA (Ordinal: 381, Address: 0x56820)
- EnumSystemLanguageGroupsW (Ordinal: 382, Address: 0x5b030)
- EnumSystemLocalesA (Ordinal: 383, Address: 0x4e020)
- EnumSystemLocalesEx (Ordinal: 384, Address: 0x463d0)
- EnumSystemLocalesW (Ordinal: 385, Address: 0x5b050)
- EnumTimeFormatsA (Ordinal: 386, Address: 0x563c0)
- EnumTimeFormatsEx (Ordinal: 387, Address: 0x45770)
- EnumTimeFormatsW (Ordinal: 388, Address: 0x5b070)
- EnumUILanguagesA (Ordinal: 389, Address: 0x64db0)
- EnumUILanguagesW (Ordinal: 390, Address: 0x5b090)
- EnumerateLocalComputerNamesA (Ordinal: 391, Address: 0x6ab30)
- EnumerateLocalComputerNamesW (Ordinal: 392, Address: 0x6ac50)
- EraseTape (Ordinal: 393, Address: 0x611e0)
- EscapeCommFunction (Ordinal: 394, Address: 0x57680)
- ExecuteUmsThread (Ordinal: 395, Address: 0x60210)
- ExitProcess (Ordinal: 396, Address: 0x41410)
- ExitThread (Ordinal: 397, Address: 0xad298)
- ExitVDM (Ordinal: 398, Address: 0x53f50)
- ExpandEnvironmentStringsA (Ordinal: 399, Address: 0x4f4e0)
- ExpandEnvironmentStringsW (Ordinal: 400, Address: 0x3bf20)
- ExpungeConsoleCommandHistoryA (Ordinal: 401, Address: 0x57c60)
- ExpungeConsoleCommandHistoryW (Ordinal: 402, Address: 0x57c70)
- FatalAppExitA (Ordinal: 403, Address: 0x5b0b0)
- FatalAppExitW (Ordinal: 404, Address: 0x5b0d0)
- FatalExit (Ordinal: 405, Address: 0x41410)
- FileTimeToDosDateTime (Ordinal: 406, Address: 0xe860)
- FileTimeToLocalFileTime (Ordinal: 407, Address: 0x57120)
- FileTimeToSystemTime (Ordinal: 408, Address: 0x57620)
- FillConsoleOutputAttribute (Ordinal: 409, Address: 0x579e0)
- FillConsoleOutputCharacterA (Ordinal: 410, Address: 0x579f0)
- FillConsoleOutputCharacterW (Ordinal: 411, Address: 0x57a00)
- FindActCtxSectionGuid (Ordinal: 412, Address: 0x3bb60)
- FindActCtxSectionGuidWorker (Ordinal: 413, Address: 0xe940)
- FindActCtxSectionStringA (Ordinal: 414, Address: 0x70980)
- FindActCtxSectionStringW (Ordinal: 415, Address: 0x44ac0)
- FindActCtxSectionStringWWorker (Ordinal: 416, Address: 0xe6b0)
- FindAtomA (Ordinal: 417, Address: 0x3f3a0)
- FindAtomW (Ordinal: 418, Address: 0x30340)
- FindClose (Ordinal: 419, Address: 0x57130)
- FindCloseChangeNotification (Ordinal: 420, Address: 0x57140)
- FindFirstChangeNotificationA (Ordinal: 421, Address: 0x57150)
- FindFirstChangeNotificationW (Ordinal: 422, Address: 0x57160)
- FindFirstFileA (Ordinal: 423, Address: 0x57170)
- FindFirstFileExA (Ordinal: 424, Address: 0x57180)
- FindFirstFileExW (Ordinal: 425, Address: 0x57190)
- FindFirstFileNameTransactedW (Ordinal: 426, Address: 0x588d0)
- FindFirstFileNameW (Ordinal: 427, Address: 0x571a0)
- FindFirstFileTransactedA (Ordinal: 428, Address: 0x589a0)
- FindFirstFileTransactedW (Ordinal: 429, Address: 0x70a20)
- FindFirstFileW (Ordinal: 430, Address: 0x571b0)
- FindFirstStreamTransactedW (Ordinal: 431, Address: 0x58a80)
- FindFirstStreamW (Ordinal: 432, Address: 0xad5a9)
- FindFirstVolumeA (Ordinal: 433, Address: 0x455e0)
- FindFirstVolumeMountPointA (Ordinal: 434, Address: 0x6f630)
- FindFirstVolumeMountPointW (Ordinal: 435, Address: 0x39970)
- FindFirstVolumeW (Ordinal: 436, Address: 0x571c0)
- FindNLSString (Ordinal: 437, Address: 0x5b0f0)
- FindNLSStringEx (Ordinal: 438, Address: 0x28130)
- FindNextChangeNotification (Ordinal: 439, Address: 0x571d0)
- FindNextFileA (Ordinal: 440, Address: 0x571e0)
- FindNextFileNameW (Ordinal: 441, Address: 0x571f0)
- FindNextFileW (Ordinal: 442, Address: 0x57200)
- FindNextStreamW (Ordinal: 443, Address: 0xad6a5)
- FindNextVolumeA (Ordinal: 444, Address: 0x42eb0)
- FindNextVolumeMountPointA (Ordinal: 445, Address: 0x6f7e0)
- FindNextVolumeMountPointW (Ordinal: 446, Address: 0x6f950)
- FindNextVolumeW (Ordinal: 447, Address: 0x57210)
- FindPackagesByPackageFamily (Ordinal: 448, Address: 0xad741)
- FindResourceA (Ordinal: 449, Address: 0x3daf0)
- FindResourceExA (Ordinal: 450, Address: 0xcfa0)
- FindResourceExW (Ordinal: 451, Address: 0x3dad0)
- FindResourceW (Ordinal: 452, Address: 0x3acc0)
- FindStringOrdinal (Ordinal: 453, Address: 0x417d0)
- FindVolumeClose (Ordinal: 454, Address: 0x57220)
- FindVolumeMountPointClose (Ordinal: 455, Address: 0x6f960)
- FlsAlloc (Ordinal: 456, Address: 0x3f260)
- FlsFree (Ordinal: 457, Address: 0x420b0)
- FlsGetValue (Ordinal: 458, Address: 0x12a00)
- FlsGetValue2 (Ordinal: 459, Address: 0xad80a)
- FlsSetValue (Ordinal: 460, Address: 0x36ce0)
- FlushConsoleInputBuffer (Ordinal: 461, Address: 0x57a10)
- FlushFileBuffers (Ordinal: 462, Address: 0x57230)
- FlushInstructionCache (Ordinal: 463, Address: 0x3aca0)
- FlushProcessWriteBuffers (Ordinal: 464, Address: 0xad886)
- FlushViewOfFile (Ordinal: 465, Address: 0x40a00)
- FoldStringA (Ordinal: 466, Address: 0x518e0)
- FoldStringW (Ordinal: 467, Address: 0x447e0)
- FormatApplicationUserModelId (Ordinal: 468, Address: 0xad8ec)
- FormatMessageA (Ordinal: 469, Address: 0x435e0)
- FormatMessageW (Ordinal: 470, Address: 0x3df40)
- FreeConsole (Ordinal: 471, Address: 0x578c0)
- FreeEnvironmentStringsA (Ordinal: 472, Address: 0x5b110)
- FreeEnvironmentStringsW (Ordinal: 473, Address: 0x420f0)
- FreeLibrary (Ordinal: 474, Address: 0x3bd70)
- FreeLibraryAndExitThread (Ordinal: 475, Address: 0x3e740)
- FreeLibraryWhenCallbackReturns (Ordinal: 476, Address: 0xad9b2)
- FreeMemoryJobObject (Ordinal: 477, Address: 0x6b690)
- FreeResource (Ordinal: 478, Address: 0x448f0)
- FreeUserPhysicalPages (Ordinal: 479, Address: 0x5b130)
- GenerateConsoleCtrlEvent (Ordinal: 480, Address: 0x57a20)
- GetACP (Ordinal: 481, Address: 0x3a720)
- GetActiveProcessorCount (Ordinal: 482, Address: 0x37260)
- GetActiveProcessorGroupCount (Ordinal: 483, Address: 0x371a0)
- GetAppContainerAce (Ordinal: 484, Address: 0x5b150)
- GetAppContainerNamedObjectPath (Ordinal: 485, Address: 0x5b170)
- GetApplicationRecoveryCallback (Ordinal: 486, Address: 0x5b190)
- GetApplicationRecoveryCallbackWorker (Ordinal: 487, Address: 0x620c0)
- GetApplicationRestartSettings (Ordinal: 488, Address: 0x5b1b0)
- GetApplicationRestartSettingsWorker (Ordinal: 489, Address: 0x62180)
- GetApplicationUserModelId (Ordinal: 490, Address: 0xadb36)
- GetAtomNameA (Ordinal: 491, Address: 0x69c40)
- GetAtomNameW (Ordinal: 492, Address: 0xd360)
- GetBinaryType (Ordinal: 493, Address: 0x6d7d0)
- GetBinaryTypeA (Ordinal: 494, Address: 0x6d7d0)
- GetBinaryTypeW (Ordinal: 495, Address: 0x401e0)
- GetCPInfo (Ordinal: 496, Address: 0x41450)
- GetCPInfoExA (Ordinal: 497, Address: 0x552f0)
- GetCPInfoExW (Ordinal: 498, Address: 0x45bc0)
- GetCachedSigningLevel (Ordinal: 499, Address: 0x4e000)
- GetCalendarDateFormat (Ordinal: 500, Address: 0x13360)
- GetCalendarDateFormatEx (Ordinal: 501, Address: 0x14f20)
- GetCalendarDaysInMonth (Ordinal: 502, Address: 0x14640)
- GetCalendarDifferenceInDays (Ordinal: 503, Address: 0x642f0)
- GetCalendarInfoA (Ordinal: 504, Address: 0x51d30)
- GetCalendarInfoEx (Ordinal: 505, Address: 0x57630)
- GetCalendarInfoW (Ordinal: 506, Address: 0x57640)
- GetCalendarMonthsInYear (Ordinal: 507, Address: 0x367a0)
- GetCalendarSupportedDateRange (Ordinal: 508, Address: 0x36890)
- GetCalendarWeekNumber (Ordinal: 509, Address: 0x644c0)
- GetComPlusPackageInstallStatus (Ordinal: 510, Address: 0x555e0)
- GetCommConfig (Ordinal: 511, Address: 0x57690)
- GetCommMask (Ordinal: 512, Address: 0x576a0)
- GetCommModemStatus (Ordinal: 513, Address: 0x576b0)
- GetCommProperties (Ordinal: 514, Address: 0x576c0)
- GetCommState (Ordinal: 515, Address: 0x576d0)
- GetCommTimeouts (Ordinal: 516, Address: 0x576e0)
- GetCommandLineA (Ordinal: 517, Address: 0x3fcd0)
- GetCommandLineW (Ordinal: 518, Address: 0x40930)
- GetCompressedFileSizeA (Ordinal: 519, Address: 0x5b1d0)
- GetCompressedFileSizeTransactedA (Ordinal: 520, Address: 0x6ea00)
- GetCompressedFileSizeTransactedW (Ordinal: 521, Address: 0x6ea70)
- GetCompressedFileSizeW (Ordinal: 522, Address: 0x43bb0)
- GetComputerNameA (Ordinal: 523, Address: 0x3b3b0)
- GetComputerNameExA (Ordinal: 524, Address: 0x562a0)
- GetComputerNameExW (Ordinal: 525, Address: 0x436c0)
- GetComputerNameW (Ordinal: 526, Address: 0x3b5c0)
- GetConsoleAliasA (Ordinal: 527, Address: 0x57c80)
- GetConsoleAliasExesA (Ordinal: 528, Address: 0x57c90)
- GetConsoleAliasExesLengthA (Ordinal: 529, Address: 0x57ca0)
- GetConsoleAliasExesLengthW (Ordinal: 530, Address: 0x57cb0)
- GetConsoleAliasExesW (Ordinal: 531, Address: 0x57cc0)
- GetConsoleAliasW (Ordinal: 532, Address: 0x57cd0)
- GetConsoleAliasesA (Ordinal: 533, Address: 0x57ce0)
- GetConsoleAliasesLengthA (Ordinal: 534, Address: 0x57cf0)
- GetConsoleAliasesLengthW (Ordinal: 535, Address: 0x57d00)
- GetConsoleAliasesW (Ordinal: 536, Address: 0x57d10)
- GetConsoleCP (Ordinal: 537, Address: 0x578d0)
- GetConsoleCharType (Ordinal: 538, Address: 0x739f0)
- GetConsoleCommandHistoryA (Ordinal: 539, Address: 0x57d20)
- GetConsoleCommandHistoryLengthA (Ordinal: 540, Address: 0x57d30)
- GetConsoleCommandHistoryLengthW (Ordinal: 541, Address: 0x57d40)
- GetConsoleCommandHistoryW (Ordinal: 542, Address: 0x57d50)
- GetConsoleCursorInfo (Ordinal: 543, Address: 0x57a30)
- GetConsoleCursorMode (Ordinal: 544, Address: 0x73a90)
- GetConsoleDisplayMode (Ordinal: 545, Address: 0x57d60)
- GetConsoleFontInfo (Ordinal: 546, Address: 0x73f10)
- GetConsoleFontSize (Ordinal: 547, Address: 0x57d70)
- GetConsoleHardwareState (Ordinal: 548, Address: 0x73350)
- GetConsoleHistoryInfo (Ordinal: 549, Address: 0x57d80)
- GetConsoleInputExeNameA (Ordinal: 550, Address: 0xae029)
- GetConsoleInputExeNameW (Ordinal: 551, Address: 0xae064)
- GetConsoleInputWaitHandle (Ordinal: 552, Address: 0x73240)
- GetConsoleKeyboardLayoutNameA (Ordinal: 553, Address: 0x74000)
- GetConsoleKeyboardLayoutNameW (Ordinal: 554, Address: 0x74020)
- GetConsoleMode (Ordinal: 555, Address: 0x578e0)
- GetConsoleNlsMode (Ordinal: 556, Address: 0x73b30)
- GetConsoleOriginalTitleA (Ordinal: 557, Address: 0x57a40)
- GetConsoleOriginalTitleW (Ordinal: 558, Address: 0x57a50)
- GetConsoleOutputCP (Ordinal: 559, Address: 0x578f0)
- GetConsoleProcessList (Ordinal: 560, Address: 0x57d90)
- GetConsoleScreenBufferInfo (Ordinal: 561, Address: 0x57a60)
- GetConsoleScreenBufferInfoEx (Ordinal: 562, Address: 0x57a70)
- GetConsoleSelectionInfo (Ordinal: 563, Address: 0x57da0)
- GetConsoleTitleA (Ordinal: 564, Address: 0x57a80)
- GetConsoleTitleW (Ordinal: 565, Address: 0x57a90)
- GetConsoleWindow (Ordinal: 566, Address: 0x57db0)
- GetCurrencyFormatA (Ordinal: 567, Address: 0x64dd0)
- GetCurrencyFormatEx (Ordinal: 568, Address: 0x5b1f0)
- GetCurrencyFormatW (Ordinal: 569, Address: 0x5b210)
- GetCurrentActCtx (Ordinal: 570, Address: 0x426a0)
- GetCurrentActCtxWorker (Ordinal: 571, Address: 0xdec0)
- GetCurrentApplicationUserModelId (Ordinal: 572, Address: 0xae25f)
- GetCurrentConsoleFont (Ordinal: 573, Address: 0x57dc0)
- GetCurrentConsoleFontEx (Ordinal: 574, Address: 0x57dd0)
- GetCurrentDirectoryA (Ordinal: 575, Address: 0x45a80)
- GetCurrentDirectoryW (Ordinal: 576, Address: 0x3e230)
- GetCurrentPackageFamilyName (Ordinal: 577, Address: 0xae2ff)
- GetCurrentPackageFullName (Ordinal: 578, Address: 0xae340)
- GetCurrentPackageId (Ordinal: 579, Address: 0xae379)
- GetCurrentPackageInfo (Ordinal: 580, Address: 0xae3ae)
- GetCurrentPackagePath (Ordinal: 581, Address: 0xae3e5)
- GetCurrentPackageVirtualizationContext (Ordinal: 582, Address: 0x58020)
- GetCurrentProcess (Ordinal: 583, Address: 0x22e60)
- GetCurrentProcessId (Ordinal: 584, Address: 0x21ef0)
- GetCurrentProcessorNumber (Ordinal: 585, Address: 0xae46d)
- GetCurrentProcessorNumberEx (Ordinal: 586, Address: 0xae4ac)
- GetCurrentThread (Ordinal: 587, Address: 0x21d20)
- GetCurrentThreadId (Ordinal: 588, Address: 0x18620)
- GetCurrentThreadStackLimits (Ordinal: 589, Address: 0xae511)
- GetCurrentUmsThread (Ordinal: 590, Address: 0x601e0)
- GetDateFormatA (Ordinal: 591, Address: 0x54c60)
- GetDateFormatAWorker (Ordinal: 592, Address: 0x38c70)
- GetDateFormatEx (Ordinal: 593, Address: 0x43b20)
- GetDateFormatW (Ordinal: 594, Address: 0x44490)
- GetDateFormatWWorker (Ordinal: 595, Address: 0x16710)
- GetDefaultCommConfigA (Ordinal: 596, Address: 0x5ccd0)
- GetDefaultCommConfigW (Ordinal: 597, Address: 0x52730)
- GetDevicePowerState (Ordinal: 598, Address: 0x43dd0)
- GetDiskFreeSpaceA (Ordinal: 599, Address: 0x57240)
- GetDiskFreeSpaceExA (Ordinal: 600, Address: 0x57250)
- GetDiskFreeSpaceExW (Ordinal: 601, Address: 0x57260)
- GetDiskFreeSpaceW (Ordinal: 602, Address: 0x57270)
- GetDiskSpaceInformationA (Ordinal: 603, Address: 0xae664)
- GetDiskSpaceInformationW (Ordinal: 604, Address: 0xae6b2)
- GetDllDirectoryA (Ordinal: 605, Address: 0x592a0)
- GetDllDirectoryW (Ordinal: 606, Address: 0x3eea0)
- GetDriveTypeA (Ordinal: 607, Address: 0x57280)
- GetDriveTypeW (Ordinal: 608, Address: 0x57290)
- GetDurationFormat (Ordinal: 609, Address: 0x65530)
- GetDurationFormatEx (Ordinal: 610, Address: 0x5b220)
- GetDynamicTimeZoneInformation (Ordinal: 611, Address: 0x437f0)
- GetEnabledXStateFeatures (Ordinal: 612, Address: 0x477c0)
- GetEncryptedFileVersionExt (Ordinal: 613, Address: 0x58ff0)
- GetEnvironmentStrings (Ordinal: 614, Address: 0x5b240)
- GetEnvironmentStringsA (Ordinal: 615, Address: 0x57650)
- GetEnvironmentStringsW (Ordinal: 616, Address: 0x417b0)
- GetEnvironmentVariableA (Ordinal: 617, Address: 0x3f000)
- GetEnvironmentVariableW (Ordinal: 618, Address: 0x3db10)
- GetEraNameCountedString (Ordinal: 619, Address: 0x5b260)
- GetErrorMode (Ordinal: 620, Address: 0x3a760)
- GetExitCodeProcess (Ordinal: 621, Address: 0x27280)
- GetExitCodeThread (Ordinal: 622, Address: 0x36d60)
- GetExpandedNameA (Ordinal: 623, Address: 0x4cc80)
- GetExpandedNameW (Ordinal: 624, Address: 0x5c450)
- GetFileAttributesA (Ordinal: 625, Address: 0x572a0)
- GetFileAttributesExA (Ordinal: 626, Address: 0x572b0)
- GetFileAttributesExW (Ordinal: 627, Address: 0x572c0)
- GetFileAttributesTransactedA (Ordinal: 628, Address: 0x6eb20)
- GetFileAttributesTransactedW (Ordinal: 629, Address: 0x6eb90)
- GetFileAttributesW (Ordinal: 630, Address: 0x572d0)
- GetFileBandwidthReservation (Ordinal: 631, Address: 0x58b50)
- GetFileInformationByHandle (Ordinal: 632, Address: 0x572e0)
- GetFileInformationByHandleEx (Ordinal: 633, Address: 0x37410)
- GetFileInformationByName (Ordinal: 634, Address: 0x5b280)
- GetFileMUIInfo (Ordinal: 635, Address: 0x5b2a0)
- GetFileMUIPath (Ordinal: 636, Address: 0x44cf0)
- GetFileSize (Ordinal: 637, Address: 0x572f0)
- GetFileSizeEx (Ordinal: 638, Address: 0x57300)
- GetFileTime (Ordinal: 639, Address: 0x57310)
- GetFileType (Ordinal: 640, Address: 0x57320)
- GetFinalPathNameByHandleA (Ordinal: 641, Address: 0x57330)
- GetFinalPathNameByHandleW (Ordinal: 642, Address: 0x57340)
- GetFirmwareEnvironmentVariableA (Ordinal: 643, Address: 0x70e20)
- GetFirmwareEnvironmentVariableExA (Ordinal: 644, Address: 0x70e40)
- GetFirmwareEnvironmentVariableExW (Ordinal: 645, Address: 0xd1f0)
- GetFirmwareEnvironmentVariableW (Ordinal: 646, Address: 0xd1d0)
- GetFirmwareType (Ordinal: 647, Address: 0x42860)
- GetFullPathNameA (Ordinal: 648, Address: 0x57350)
- GetFullPathNameTransactedA (Ordinal: 649, Address: 0x585a0)
- GetFullPathNameTransactedW (Ordinal: 650, Address: 0x711f0)
- GetFullPathNameW (Ordinal: 651, Address: 0x57360)
- GetGeoInfoA (Ordinal: 652, Address: 0x13fa0)
- GetGeoInfoEx (Ordinal: 653, Address: 0x686e0)
- GetGeoInfoW (Ordinal: 654, Address: 0x14830)
- GetHandleInformation (Ordinal: 655, Address: 0x56e20)
- GetIoRingInfo (Ordinal: 656, Address: 0xaeb2c)
- GetLargePageMinimum (Ordinal: 657, Address: 0x47ca0)
- GetLargestConsoleWindowSize (Ordinal: 658, Address: 0x57aa0)
- GetLastError (Ordinal: 659, Address: 0x18640)
- GetLocalTime (Ordinal: 660, Address: 0x36fe0)
- GetLocaleInfoA (Ordinal: 661, Address: 0x42130)
- GetLocaleInfoEx (Ordinal: 662, Address: 0x3ceb0)
- GetLocaleInfoW (Ordinal: 663, Address: 0x3bee0)
- GetLogicalDriveStringsA (Ordinal: 664, Address: 0x3ef30)
- GetLogicalDriveStringsW (Ordinal: 665, Address: 0x57370)
- GetLogicalDrives (Ordinal: 666, Address: 0xe250)
- GetLogicalProcessorInformation (Ordinal: 667, Address: 0x43540)
- GetLogicalProcessorInformationEx (Ordinal: 668, Address: 0xaec51)
- GetLongPathNameA (Ordinal: 669, Address: 0xbb90)
- GetLongPathNameTransactedA (Ordinal: 670, Address: 0x5eee0)
- GetLongPathNameTransactedW (Ordinal: 671, Address: 0x6d830)
- GetLongPathNameW (Ordinal: 672, Address: 0xbdf0)
- GetMachineTypeAttributes (Ordinal: 673, Address: 0xaed02)
- GetMailslotInfo (Ordinal: 674, Address: 0xd8b0)
- GetMaximumProcessorCount (Ordinal: 675, Address: 0x370e0)
- GetMaximumProcessorGroupCount (Ordinal: 676, Address: 0x37200)
- GetMemoryErrorHandlingCapabilities (Ordinal: 677, Address: 0x4dfa0)
- GetModuleFileNameA (Ordinal: 678, Address: 0x3f220)
- GetModuleFileNameW (Ordinal: 679, Address: 0x3bcd0)
- GetModuleHandleA (Ordinal: 680, Address: 0x3bd30)
- GetModuleHandleExA (Ordinal: 681, Address: 0x41790)
- GetModuleHandleExW (Ordinal: 682, Address: 0x3db80)
- GetModuleHandleW (Ordinal: 683, Address: 0x3aba0)
- GetNLSVersion (Ordinal: 684, Address: 0x502c0)
- GetNLSVersionEx (Ordinal: 685, Address: 0x50360)
- GetNamedPipeAttribute (Ordinal: 686, Address: 0x5b2c0)
- GetNamedPipeClientComputerNameA (Ordinal: 687, Address: 0x6d8e0)
- GetNamedPipeClientComputerNameW (Ordinal: 688, Address: 0x5b2e0)
- GetNamedPipeClientProcessId (Ordinal: 689, Address: 0x39170)
- GetNamedPipeClientSessionId (Ordinal: 690, Address: 0x458f0)
- GetNamedPipeHandleStateA (Ordinal: 691, Address: 0x429c0)
- GetNamedPipeHandleStateW (Ordinal: 692, Address: 0x4ec60)
- GetNamedPipeInfo (Ordinal: 693, Address: 0xaef08)
- GetNamedPipeServerProcessId (Ordinal: 694, Address: 0x3ed00)
- GetNamedPipeServerSessionId (Ordinal: 695, Address: 0x44f20)
- GetNativeSystemInfo (Ordinal: 696, Address: 0x3f240)
- GetNextUmsListItem (Ordinal: 697, Address: 0x601e0)
- GetNextVDMCommand (Ordinal: 698, Address: 0x5ef90)
- GetNumaAvailableMemoryNode (Ordinal: 699, Address: 0x596f0)
- GetNumaAvailableMemoryNodeEx (Ordinal: 700, Address: 0x71750)
- GetNumaHighestNodeNumber (Ordinal: 701, Address: 0x44990)
- GetNumaNodeNumberFromHandle (Ordinal: 702, Address: 0x59700)
- GetNumaNodeProcessorMask (Ordinal: 703, Address: 0x717f0)
- GetNumaNodeProcessorMask2 (Ordinal: 704, Address: 0xaf04b)
- GetNumaNodeProcessorMaskEx (Ordinal: 705, Address: 0x5b300)
- GetNumaProcessorNode (Ordinal: 706, Address: 0xce50)
- GetNumaProcessorNodeEx (Ordinal: 707, Address: 0xced0)
- GetNumaProximityNode (Ordinal: 708, Address: 0x59770)
- GetNumaProximityNodeEx (Ordinal: 709, Address: 0x5b320)
- GetNumberFormatA (Ordinal: 710, Address: 0x50400)
- GetNumberFormatEx (Ordinal: 711, Address: 0x4fc40)
- GetNumberFormatW (Ordinal: 712, Address: 0x40550)
- GetNumberOfConsoleFonts (Ordinal: 713, Address: 0x74130)
- GetNumberOfConsoleInputEvents (Ordinal: 714, Address: 0x57900)
- GetNumberOfConsoleMouseButtons (Ordinal: 715, Address: 0x57de0)
- GetOEMCP (Ordinal: 716, Address: 0x44590)
- GetOverlappedResult (Ordinal: 717, Address: 0x32170)
- GetOverlappedResultEx (Ordinal: 718, Address: 0xaf1ba)
- GetPackageApplicationIds (Ordinal: 719, Address: 0xaf203)
- GetPackageFamilyName (Ordinal: 720, Address: 0xaf23c)
- GetPackageFullName (Ordinal: 721, Address: 0xaf26f)
- GetPackageId (Ordinal: 722, Address: 0xaf29a)
- GetPackageInfo (Ordinal: 723, Address: 0xaf2c1)
- GetPackagePath (Ordinal: 724, Address: 0xaf2ea)
- GetPackagePathByFullName (Ordinal: 725, Address: 0xaf31d)
- GetPackagesByPackageFamily (Ordinal: 726, Address: 0xaf35c)
- GetPhysicallyInstalledSystemMemory (Ordinal: 727, Address: 0x46ac0)
- GetPriorityClass (Ordinal: 728, Address: 0x3ce90)
- GetPrivateProfileIntA (Ordinal: 729, Address: 0x3f9d0)
- GetPrivateProfileIntW (Ordinal: 730, Address: 0x3a460)
- GetPrivateProfileSectionA (Ordinal: 731, Address: 0x43250)
- GetPrivateProfileSectionNamesA (Ordinal: 732, Address: 0x6d220)
- GetPrivateProfileSectionNamesW (Ordinal: 733, Address: 0x3a430)
- GetPrivateProfileSectionW (Ordinal: 734, Address: 0xf0b0)
- GetPrivateProfileStringA (Ordinal: 735, Address: 0x3fa70)
- GetPrivateProfileStringW (Ordinal: 736, Address: 0x3a560)
- GetPrivateProfileStructA (Ordinal: 737, Address: 0x3f800)
- GetPrivateProfileStructW (Ordinal: 738, Address: 0x6d250)
- GetProcAddress (Ordinal: 739, Address: 0x32130)
- GetProcessAffinityMask (Ordinal: 740, Address: 0xdbd0)
- GetProcessDEPPolicy (Ordinal: 741, Address: 0x5a440)
- GetProcessDefaultCpuSetMasks (Ordinal: 742, Address: 0xaf50f)
- GetProcessDefaultCpuSets (Ordinal: 743, Address: 0xaf56b)
- GetProcessGroupAffinity (Ordinal: 744, Address: 0x4df80)
- GetProcessHandleCount (Ordinal: 745, Address: 0x435c0)
- GetProcessHeap (Ordinal: 746, Address: 0x227a0)
- GetProcessHeaps (Ordinal: 747, Address: 0x5b340)
- GetProcessId (Ordinal: 748, Address: 0x343c0)
- GetProcessIdOfThread (Ordinal: 749, Address: 0x3e820)
- GetProcessInformation (Ordinal: 750, Address: 0x56da0)
- GetProcessIoCounters (Ordinal: 751, Address: 0xda70)
- GetProcessMitigationPolicy (Ordinal: 752, Address: 0xaf65f)
- GetProcessPreferredUILanguages (Ordinal: 753, Address: 0x5b360)
- GetProcessPriorityBoost (Ordinal: 754, Address: 0x5b380)
- GetProcessShutdownParameters (Ordinal: 755, Address: 0x5b3a0)
- GetProcessTimes (Ordinal: 756, Address: 0x37a20)
- GetProcessVersion (Ordinal: 757, Address: 0x50250)
- GetProcessWorkingSetSize (Ordinal: 758, Address: 0x56de0)
- GetProcessWorkingSetSizeEx (Ordinal: 759, Address: 0x47ce0)
- GetProcessesInVirtualizationContext (Ordinal: 760, Address: 0x58040)
- GetProcessorSystemCycleTime (Ordinal: 761, Address: 0xaf78a)
- GetProductInfo (Ordinal: 762, Address: 0x43350)
- GetProfileIntA (Ordinal: 763, Address: 0x46400)
- GetProfileIntW (Ordinal: 764, Address: 0x446f0)
- GetProfileSectionA (Ordinal: 765, Address: 0x6d3f0)
- GetProfileSectionW (Ordinal: 766, Address: 0x463f0)
- GetProfileStringA (Ordinal: 767, Address: 0x3f9a0)
- GetProfileStringW (Ordinal: 768, Address: 0x6d400)
- GetQueuedCompletionStatus (Ordinal: 769, Address: 0x2d460)
- GetQueuedCompletionStatusEx (Ordinal: 770, Address: 0x39550)
- GetShortPathNameA (Ordinal: 771, Address: 0xb930)
- GetShortPathNameW (Ordinal: 772, Address: 0xb270)
- GetStagedPackagePathByFullName (Ordinal: 773, Address: 0xaf8b5)
- GetStartupInfoA (Ordinal: 774, Address: 0x3dba0)
- GetStartupInfoW (Ordinal: 775, Address: 0x3db30)
- GetStateFolder (Ordinal: 776, Address: 0xaf90e)
- GetStdHandle (Ordinal: 777, Address: 0x3f1a0)
- GetStringScripts (Ordinal: 778, Address: 0x5b3c0)
- GetStringTypeA (Ordinal: 779, Address: 0x45a60)
- GetStringTypeExA (Ordinal: 780, Address: 0x45a60)
- GetStringTypeExW (Ordinal: 781, Address: 0x34de0)
- GetStringTypeW (Ordinal: 782, Address: 0x37000)
- GetSystemAppDataKey (Ordinal: 783, Address: 0xaf99a)
- GetSystemCpuSetInformation (Ordinal: 784, Address: 0xaf9d4)
- GetSystemDEPPolicy (Ordinal: 785, Address: 0x5a4a0)
- GetSystemDefaultLCID (Ordinal: 786, Address: 0x3fc40)
- GetSystemDefaultLangID (Ordinal: 787, Address: 0x3f180)
- GetSystemDefaultLocaleName (Ordinal: 788, Address: 0x3e460)
- GetSystemDefaultUILanguage (Ordinal: 789, Address: 0x44c20)
- GetSystemDirectoryA (Ordinal: 790, Address: 0x435b0)
- GetSystemDirectoryW (Ordinal: 791, Address: 0x3ee00)
- GetSystemFileCacheSize (Ordinal: 792, Address: 0x5b3e0)
- GetSystemFirmwareTable (Ordinal: 793, Address: 0x445f0)
- GetSystemInfo (Ordinal: 794, Address: 0x3cde0)
- GetSystemPowerStatus (Ordinal: 795, Address: 0xcc90)
- GetSystemPreferredUILanguages (Ordinal: 796, Address: 0x54c40)
- GetSystemRegistryQuota (Ordinal: 797, Address: 0x5a4e0)
- GetSystemTime (Ordinal: 798, Address: 0x36740)
- GetSystemTimeAdjustment (Ordinal: 799, Address: 0x44bc0)
- GetSystemTimeAsFileTime (Ordinal: 800, Address: 0x2fe60)
- GetSystemTimePreciseAsFileTime (Ordinal: 801, Address: 0x57610)
- GetSystemTimes (Ordinal: 802, Address: 0x3bec0)
- GetSystemWindowsDirectoryA (Ordinal: 803, Address: 0x46b20)
- GetSystemWindowsDirectoryW (Ordinal: 804, Address: 0x44740)
- GetSystemWow64DirectoryA (Ordinal: 805, Address: 0x57780)
- GetSystemWow64DirectoryW (Ordinal: 806, Address: 0x57790)
- GetTapeParameters (Ordinal: 807, Address: 0x71870)
- GetTapePosition (Ordinal: 808, Address: 0x61220)
- GetTapeStatus (Ordinal: 809, Address: 0x612b0)
- GetTempFileNameA (Ordinal: 810, Address: 0x57380)
- GetTempFileNameW (Ordinal: 811, Address: 0x57390)
- GetTempPath2A (Ordinal: 812, Address: 0x573a0)
- GetTempPath2W (Ordinal: 813, Address: 0x573b0)
- GetTempPathA (Ordinal: 814, Address: 0x573c0)
- GetTempPathW (Ordinal: 815, Address: 0x573d0)
- GetThreadContext (Ordinal: 816, Address: 0x3be40)
- GetThreadDescription (Ordinal: 817, Address: 0xafcba)
- GetThreadEnabledXStateFeatures (Ordinal: 818, Address: 0x5b400)
- GetThreadErrorMode (Ordinal: 819, Address: 0x44f00)
- GetThreadGroupAffinity (Ordinal: 820, Address: 0x44c40)
- GetThreadIOPendingFlag (Ordinal: 821, Address: 0x42050)
- GetThreadId (Ordinal: 822, Address: 0x39410)
- GetThreadIdealProcessorEx (Ordinal: 823, Address: 0x2ef60)
- GetThreadInformation (Ordinal: 824, Address: 0x56db0)
- GetThreadLocale (Ordinal: 825, Address: 0x36c50)
- GetThreadPreferredUILanguages (Ordinal: 826, Address: 0x44510)
- GetThreadPriority (Ordinal: 827, Address: 0x36760)
- GetThreadPriorityBoost (Ordinal: 828, Address: 0x3f100)
- GetThreadSelectedCpuSetMasks (Ordinal: 829, Address: 0xafe04)
- GetThreadSelectedCpuSets (Ordinal: 830, Address: 0xafe60)
- GetThreadSelectorEntry (Ordinal: 831, Address: 0x718d0)
- GetThreadTimes (Ordinal: 832, Address: 0x32f70)
- GetThreadUILanguage (Ordinal: 833, Address: 0x47a80)
- GetTickCount (Ordinal: 834, Address: 0x18600)
- GetTickCount64 (Ordinal: 835, Address: 0x12b00)
- GetTimeFormatA (Ordinal: 836, Address: 0x5b420)
- GetTimeFormatAWorker (Ordinal: 837, Address: 0x389f0)
- GetTimeFormatEx (Ordinal: 838, Address: 0x444f0)
- GetTimeFormatW (Ordinal: 839, Address: 0x43080)
- GetTimeFormatWWorker (Ordinal: 840, Address: 0x15990)
- GetTimeZoneInformation (Ordinal: 841, Address: 0x41750)
- GetTimeZoneInformationForYear (Ordinal: 842, Address: 0x5b440)
- GetUILanguageInfo (Ordinal: 843, Address: 0x5b460)
- GetUmsCompletionListEvent (Ordinal: 844, Address: 0x601e0)
- GetUmsSystemThreadInformation (Ordinal: 845, Address: 0x601e0)
- GetUserDefaultGeoName (Ordinal: 846, Address: 0x13ea0)
- GetUserDefaultLCID (Ordinal: 847, Address: 0x39150)
- GetUserDefaultLangID (Ordinal: 848, Address: 0x43040)
- GetUserDefaultLocaleName (Ordinal: 849, Address: 0x3f1e0)
- GetUserDefaultUILanguage (Ordinal: 850, Address: 0x437b0)
- GetUserGeoID (Ordinal: 851, Address: 0x13a70)
- GetUserPreferredUILanguages (Ordinal: 852, Address: 0x45290)
- GetVDMCurrentDirectories (Ordinal: 853, Address: 0x5f900)
- GetVersion (Ordinal: 854, Address: 0x416d0)
- GetVersionExA (Ordinal: 855, Address: 0x420d0)
- GetVersionExW (Ordinal: 856, Address: 0x3f120)
- GetVolumeInformationA (Ordinal: 857, Address: 0x573e0)
- GetVolumeInformationByHandleW (Ordinal: 858, Address: 0x573f0)
- GetVolumeInformationW (Ordinal: 859, Address: 0x57400)
- GetVolumeNameForVolumeMountPointA (Ordinal: 860, Address: 0x6f9e0)
- GetVolumeNameForVolumeMountPointW (Ordinal: 861, Address: 0x56d90)
- GetVolumePathNameA (Ordinal: 862, Address: 0xadf0)
- GetVolumePathNameW (Ordinal: 863, Address: 0x57410)
- GetVolumePathNamesForVolumeNameA (Ordinal: 864, Address: 0xc4a0)
- GetVolumePathNamesForVolumeNameW (Ordinal: 865, Address: 0x57420)
- GetWindowsDirectoryA (Ordinal: 866, Address: 0x447c0)
- GetWindowsDirectoryW (Ordinal: 867, Address: 0x42030)
- GetWriteWatch (Ordinal: 868, Address: 0x3df20)
- GetXStateFeaturesMask (Ordinal: 869, Address: 0x5b480)
- GlobalAddAtomA (Ordinal: 870, Address: 0x42090)
- GlobalAddAtomExA (Ordinal: 871, Address: 0x69c70)
- GlobalAddAtomExW (Ordinal: 872, Address: 0x3bea0)
- GlobalAddAtomW (Ordinal: 873, Address: 0x3bcb0)
- GlobalAlloc (Ordinal: 874, Address: 0x34310)
- GlobalCompact (Ordinal: 875, Address: 0x59120)
- GlobalDeleteAtom (Ordinal: 876, Address: 0x35ed0)
- GlobalFindAtomA (Ordinal: 877, Address: 0x430a0)
- GlobalFindAtomW (Ordinal: 878, Address: 0x36c90)
- GlobalFix (Ordinal: 879, Address: 0x59140)
- GlobalFlags (Ordinal: 880, Address: 0x46390)
- GlobalFree (Ordinal: 881, Address: 0x22750)
- GlobalGetAtomNameA (Ordinal: 882, Address: 0x69c90)
- GlobalGetAtomNameW (Ordinal: 883, Address: 0xd390)
- GlobalHandle (Ordinal: 884, Address: 0x3cbd0)
- GlobalLock (Ordinal: 885, Address: 0x3bf60)
- GlobalMemoryStatus (Ordinal: 886, Address: 0x343e0)
- GlobalMemoryStatusEx (Ordinal: 887, Address: 0x3a700)
- GlobalReAlloc (Ordinal: 888, Address: 0x448b0)
- GlobalSize (Ordinal: 889, Address: 0x42790)
- GlobalUnWire (Ordinal: 890, Address: 0x3d0a0)
- GlobalUnfix (Ordinal: 891, Address: 0x59170)
- GlobalUnlock (Ordinal: 892, Address: 0x3d0a0)
- GlobalWire (Ordinal: 893, Address: 0x3bf60)
- Heap32First (Ordinal: 894, Address: 0x43810)
- Heap32ListFirst (Ordinal: 895, Address: 0x6f420)
- Heap32ListNext (Ordinal: 896, Address: 0x42ce0)
- Heap32Next (Ordinal: 897, Address: 0x3a8c0)
- HeapAlloc (Ordinal: 898, Address: 0xb0385)
- HeapCompact (Ordinal: 899, Address: 0x4f900)
- HeapCreate (Ordinal: 900, Address: 0x42010)
- HeapDestroy (Ordinal: 901, Address: 0x42de0)
- HeapFree (Ordinal: 902, Address: 0x22e70)
- HeapLock (Ordinal: 903, Address: 0x46ae0)
- HeapQueryInformation (Ordinal: 904, Address: 0x47a60)
- HeapReAlloc (Ordinal: 905, Address: 0xb03f1)
- HeapSetInformation (Ordinal: 906, Address: 0x43710)
- HeapSize (Ordinal: 907, Address: 0xb0425)
- HeapSummary (Ordinal: 908, Address: 0x5b4a0)
- HeapUnlock (Ordinal: 909, Address: 0x50c70)
- HeapValidate (Ordinal: 910, Address: 0x41430)
- HeapWalk (Ordinal: 911, Address: 0x37020)
- IdnToAscii (Ordinal: 912, Address: 0x45ba0)
- IdnToNameprepUnicode (Ordinal: 913, Address: 0x5b4c0)
- IdnToUnicode (Ordinal: 914, Address: 0x5b4e0)
- InitAtomTable (Ordinal: 915, Address: 0x567a0)
- InitOnceBeginInitialize (Ordinal: 916, Address: 0xb04b7)
- InitOnceComplete (Ordinal: 917, Address: 0xb04fd)
- InitOnceExecuteOnce (Ordinal: 918, Address: 0xb053f)
- InitOnceInitialize (Ordinal: 919, Address: 0xb0583)
- InitializeConditionVariable (Ordinal: 920, Address: 0xb05ba)
- InitializeContext (Ordinal: 921, Address: 0x475d0)
- InitializeContext2 (Ordinal: 922, Address: 0x53350)
- InitializeCriticalSection (Ordinal: 923, Address: 0xb061e)
- InitializeCriticalSectionAndSpinCount (Ordinal: 924, Address: 0x56f00)
- InitializeCriticalSectionEx (Ordinal: 925, Address: 0x56f10)
- InitializeEnclave (Ordinal: 926, Address: 0xb0695)
- InitializeProcThreadAttributeList (Ordinal: 927, Address: 0xb06e8)
- InitializeSListHead (Ordinal: 928, Address: 0xb0744)
- InitializeSRWLock (Ordinal: 929, Address: 0xb0773)
- InitializeSynchronizationBarrier (Ordinal: 930, Address: 0x5b500)
- InstallELAMCertificateInfo (Ordinal: 931, Address: 0xb07ca)
- InterlockedFlushSList (Ordinal: 932, Address: 0xb081a)
- InterlockedPopEntrySList (Ordinal: 933, Address: 0xb0852)
- InterlockedPushEntrySList (Ordinal: 934, Address: 0xb088e)
- InterlockedPushListSList (Ordinal: 935, Address: 0xb08ca)
- InterlockedPushListSListEx (Ordinal: 936, Address: 0xb0907)
- InvalidateConsoleDIBits (Ordinal: 937, Address: 0x742a0)
- IsBadCodePtr (Ordinal: 938, Address: 0x40560)
- IsBadHugeReadPtr (Ordinal: 939, Address: 0x5a570)
- IsBadHugeWritePtr (Ordinal: 940, Address: 0x5a580)
- IsBadReadPtr (Ordinal: 941, Address: 0x12a70)
- IsBadStringPtrA (Ordinal: 942, Address: 0x2ef80)
- IsBadStringPtrW (Ordinal: 943, Address: 0x35e30)
- IsBadWritePtr (Ordinal: 944, Address: 0x36f50)
- IsCalendarLeapDay (Ordinal: 945, Address: 0x647a0)
- IsCalendarLeapMonth (Ordinal: 946, Address: 0x64930)
- IsCalendarLeapYear (Ordinal: 947, Address: 0x64a50)
- IsDBCSLeadByte (Ordinal: 948, Address: 0x3bd10)
- IsDBCSLeadByteEx (Ordinal: 949, Address: 0x3ee10)
- IsDebuggerPresent (Ordinal: 950, Address: 0x3ce40)
- IsEnclaveTypeSupported (Ordinal: 951, Address: 0xb0a30)
- IsIoRingOpSupported (Ordinal: 952, Address: 0xb0a7a)
- IsNLSDefinedString (Ordinal: 953, Address: 0x4e0a0)
- IsNativeVhdBoot (Ordinal: 954, Address: 0x58340)
- IsNormalizedString (Ordinal: 955, Address: 0x445d0)
- IsProcessCritical (Ordinal: 956, Address: 0xb0af4)
- IsProcessInJob (Ordinal: 957, Address: 0x3f140)
- IsProcessorFeaturePresent (Ordinal: 958, Address: 0x3ce70)
- IsSystemResumeAutomatic (Ordinal: 959, Address: 0x449b0)
- IsThreadAFiber (Ordinal: 960, Address: 0x304a0)
- IsThreadpoolTimerSet (Ordinal: 961, Address: 0xb0b91)
- IsUserCetAvailableInEnvironment (Ordinal: 962, Address: 0xb0bc4)
- IsValidCalDateTime (Ordinal: 963, Address: 0x15500)
- IsValidCodePage (Ordinal: 964, Address: 0x342f0)
- IsValidLanguageGroup (Ordinal: 965, Address: 0x5b520)
- IsValidLocale (Ordinal: 966, Address: 0x437d0)
- IsValidLocaleName (Ordinal: 967, Address: 0x5b540)
- IsValidNLSVersion (Ordinal: 968, Address: 0x5b560)
- IsWow64GuestMachineSupported (Ordinal: 969, Address: 0xb0c8a)
- IsWow64Process (Ordinal: 970, Address: 0x37430)
- IsWow64Process2 (Ordinal: 971, Address: 0xb0ce3)
- K32EmptyWorkingSet (Ordinal: 972, Address: 0x463b0)
- K32EnumDeviceDrivers (Ordinal: 973, Address: 0x5b580)
- K32EnumPageFilesA (Ordinal: 974, Address: 0x5b5a0)
- K32EnumPageFilesW (Ordinal: 975, Address: 0x5b5c0)
- K32EnumProcessModules (Ordinal: 976, Address: 0x430e0)
- K32EnumProcessModulesEx (Ordinal: 977, Address: 0x44530)
- K32EnumProcesses (Ordinal: 978, Address: 0x43b40)
- K32GetDeviceDriverBaseNameA (Ordinal: 979, Address: 0x51cf0)
- K32GetDeviceDriverBaseNameW (Ordinal: 980, Address: 0x46e80)
- K32GetDeviceDriverFileNameA (Ordinal: 981, Address: 0x535c0)
- K32GetDeviceDriverFileNameW (Ordinal: 982, Address: 0x562c0)
- K32GetMappedFileNameA (Ordinal: 983, Address: 0x5b5e0)
- K32GetMappedFileNameW (Ordinal: 984, Address: 0x3ee50)
- K32GetModuleBaseNameA (Ordinal: 985, Address: 0x44c00)
- K32GetModuleBaseNameW (Ordinal: 986, Address: 0x43650)
- K32GetModuleFileNameExA (Ordinal: 987, Address: 0x42e00)
- K32GetModuleFileNameExW (Ordinal: 988, Address: 0x3ecc0)
- K32GetModuleInformation (Ordinal: 989, Address: 0x42910)
- K32GetPerformanceInfo (Ordinal: 990, Address: 0x44fc0)
- K32GetProcessImageFileNameA (Ordinal: 991, Address: 0x43330)
- K32GetProcessImageFileNameW (Ordinal: 992, Address: 0x3f380)
- K32GetProcessMemoryInfo (Ordinal: 993, Address: 0x39510)
- K32GetWsChanges (Ordinal: 994, Address: 0x5b620)
- K32GetWsChangesEx (Ordinal: 995, Address: 0x5b600)
- K32InitializeProcessForWsWatch (Ordinal: 996, Address: 0x5b640)
- K32QueryWorkingSet (Ordinal: 997, Address: 0x41aa0)
- K32QueryWorkingSetEx (Ordinal: 998, Address: 0x42730)
- LCIDToLocaleName (Ordinal: 999, Address: 0x3a8a0)
- LCMapStringA (Ordinal: 1000, Address: 0x446d0)
- LCMapStringEx (Ordinal: 1001, Address: 0x219f0)
- LCMapStringW (Ordinal: 1002, Address: 0x31580)
- LZClose (Ordinal: 1003, Address: 0x566e0)
- LZCloseFile (Ordinal: 1004, Address: 0x5c580)
- LZCopy (Ordinal: 1005, Address: 0x58470)
- LZCreateFileW (Ordinal: 1006, Address: 0x5c660)
- LZDone (Ordinal: 1007, Address: 0x58580)
- LZInit (Ordinal: 1008, Address: 0x5c7b0)
- LZOpenFileA (Ordinal: 1009, Address: 0x5c9a0)
- LZOpenFileW (Ordinal: 1010, Address: 0x5ca90)
- LZRead (Ordinal: 1011, Address: 0x4e680)
- LZSeek (Ordinal: 1012, Address: 0x5cb50)
- LZStart (Ordinal: 1013, Address: 0x58590)
- LeaveCriticalSection (Ordinal: 1014, Address: 0xb102d)
- LeaveCriticalSectionWhenCallbackReturns (Ordinal: 1015, Address: 0xb1073)
- LoadAppInitDlls (Ordinal: 1016, Address: 0x32fc0)
- LoadEnclaveData (Ordinal: 1017, Address: 0xb10c4)
- LoadLibraryA (Ordinal: 1018, Address: 0x428f0)
- LoadLibraryExA (Ordinal: 1019, Address: 0x3f200)
- LoadLibraryExW (Ordinal: 1020, Address: 0x3bd50)
- LoadLibraryW (Ordinal: 1021, Address: 0x3ee30)
- LoadModule (Ordinal: 1022, Address: 0x3fcf0)
- LoadPackagedLibrary (Ordinal: 1023, Address: 0x575f0)
- LoadResource (Ordinal: 1024, Address: 0x3cbf0)
- LoadStringBaseExW (Ordinal: 1025, Address: 0x5b660)
- LoadStringBaseW (Ordinal: 1026, Address: 0x591d0)
- LocalAlloc (Ordinal: 1027, Address: 0x36c30)
- LocalCompact (Ordinal: 1028, Address: 0x59120)
- LocalFileTimeToFileTime (Ordinal: 1029, Address: 0x57430)
- LocalFileTimeToLocalSystemTime (Ordinal: 1030, Address: 0xb11c8)
- LocalFlags (Ordinal: 1031, Address: 0x5b680)
- LocalFree (Ordinal: 1032, Address: 0x32f50)
- LocalHandle (Ordinal: 1033, Address: 0x3f040)
- LocalLock (Ordinal: 1034, Address: 0x5b6a0)
- LocalReAlloc (Ordinal: 1035, Address: 0x44720)
- LocalShrink (Ordinal: 1036, Address: 0x59120)
- LocalSize (Ordinal: 1037, Address: 0x51d10)
- LocalSystemTimeToLocalFileTime (Ordinal: 1038, Address: 0xb1274)
- LocalUnlock (Ordinal: 1039, Address: 0x5b6c0)
- LocaleNameToLCID (Ordinal: 1040, Address: 0x37ef0)
- LocateXStateFeature (Ordinal: 1041, Address: 0x447a0)
- LockFile (Ordinal: 1042, Address: 0x57440)
- LockFileEx (Ordinal: 1043, Address: 0x57450)
- LockResource (Ordinal: 1044, Address: 0x3f020)
- LogUnexpectedCodepath (Ordinal: 1045, Address: 0xb131b)
- MapUserPhysicalPages (Ordinal: 1046, Address: 0x5b6e0)
- MapUserPhysicalPagesScatter (Ordinal: 1047, Address: 0x62210)
- MapViewOfFile (Ordinal: 1048, Address: 0x37a60)
- MapViewOfFileEx (Ordinal: 1049, Address: 0x3fc90)
- MapViewOfFileExNuma (Ordinal: 1050, Address: 0x5b700)
- MapViewOfFileFromApp (Ordinal: 1051, Address: 0xb13b2)
- Module32First (Ordinal: 1052, Address: 0x318c0)
- Module32FirstW (Ordinal: 1053, Address: 0x31a20)
- Module32Next (Ordinal: 1054, Address: 0x22880)
- Module32NextW (Ordinal: 1055, Address: 0x229d0)
- MoveFileA (Ordinal: 1056, Address: 0x6ec60)
- MoveFileExA (Ordinal: 1057, Address: 0xacf0)
- MoveFileExW (Ordinal: 1058, Address: 0x43310)
- MoveFileTransactedA (Ordinal: 1059, Address: 0x6ec90)
- MoveFileTransactedW (Ordinal: 1060, Address: 0x6ed60)
- MoveFileW (Ordinal: 1061, Address: 0x3db50)
- MoveFileWithProgressA (Ordinal: 1062, Address: 0x52700)
- MoveFileWithProgressW (Ordinal: 1063, Address: 0x5b720)
- MulDiv (Ordinal: 1064, Address: 0x575c0)
- MultiByteToWideChar (Ordinal: 1065, Address: 0x30480)
- NeedCurrentDirectoryForExePathA (Ordinal: 1066, Address: 0x5b740)
- NeedCurrentDirectoryForExePathW (Ordinal: 1067, Address: 0x5b760)
- NlsCheckPolicy (Ordinal: 1068, Address: 0x57830)
- NlsGetCacheUpdateCount (Ordinal: 1069, Address: 0x57840)
- NlsUpdateLocale (Ordinal: 1070, Address: 0x57850)
- NlsUpdateSystemLocale (Ordinal: 1071, Address: 0x57860)
- NormalizeString (Ordinal: 1072, Address: 0x3dff0)
- NotifyMountMgr (Ordinal: 1073, Address: 0x5b780)
- NotifyUILanguageChange (Ordinal: 1074, Address: 0x34e00)
- NtVdm64CreateProcessInternalW (Ordinal: 1075, Address: 0x5a590)
- OOBEComplete (Ordinal: 1076, Address: 0x31bc0)
- OfferVirtualMemory (Ordinal: 1077, Address: 0xb15b8)
- OpenConsoleW (Ordinal: 1078, Address: 0x73260)
- OpenConsoleWStub (Ordinal: 1079, Address: 0x5b7a0)
- OpenEventA (Ordinal: 1080, Address: 0x56f20)
- OpenEventW (Ordinal: 1081, Address: 0x56f30)
- OpenFile (Ordinal: 1082, Address: 0x40d60)
- OpenFileById (Ordinal: 1083, Address: 0x427b0)
- OpenFileMappingA (Ordinal: 1084, Address: 0xc950)
- OpenFileMappingW (Ordinal: 1085, Address: 0x3f360)
- OpenJobObjectA (Ordinal: 1086, Address: 0x6b6a0)
- OpenJobObjectW (Ordinal: 1087, Address: 0x454c0)
- OpenMutexA (Ordinal: 1088, Address: 0xcbc0)
- OpenMutexW (Ordinal: 1089, Address: 0x56f40)
- OpenPackageInfoByFullName (Ordinal: 1090, Address: 0xb16a3)
- OpenPrivateNamespaceA (Ordinal: 1091, Address: 0x6dd00)
- OpenPrivateNamespaceW (Ordinal: 1092, Address: 0x42070)
- OpenProcess (Ordinal: 1093, Address: 0x32110)
- OpenProcessToken (Ordinal: 1094, Address: 0xb1711)
- OpenProfileUserMapping (Ordinal: 1095, Address: 0x58590)
- OpenSemaphoreA (Ordinal: 1096, Address: 0xc870)
- OpenSemaphoreW (Ordinal: 1097, Address: 0x56f50)
- OpenState (Ordinal: 1098, Address: 0xb1787)
- OpenStateExplicit (Ordinal: 1099, Address: 0xb17ae)
- OpenThread (Ordinal: 1100, Address: 0x36c10)
- OpenThreadToken (Ordinal: 1101, Address: 0xb17e6)
- OpenWaitableTimerA (Ordinal: 1102, Address: 0x56660)
- OpenWaitableTimerW (Ordinal: 1103, Address: 0x56f60)
- OutputDebugStringA (Ordinal: 1104, Address: 0x41830)
- OutputDebugStringW (Ordinal: 1105, Address: 0x3f3c0)
- PackageFamilyNameFromFullName (Ordinal: 1106, Address: 0xb1886)
- PackageFamilyNameFromId (Ordinal: 1107, Address: 0xb18c7)
- PackageFullNameFromId (Ordinal: 1108, Address: 0xb1900)
- PackageIdFromFullName (Ordinal: 1109, Address: 0xb1937)
- PackageNameAndPublisherIdFromFamilyName (Ordinal: 1110, Address: 0xb1980)
- ParseApplicationUserModelId (Ordinal: 1111, Address: 0xb19cf)
- PeekConsoleInputA (Ordinal: 1112, Address: 0x57910)
- PeekConsoleInputW (Ordinal: 1113, Address: 0x57920)
- PeekNamedPipe (Ordinal: 1114, Address: 0x36d80)
- PopIoRingCompletion (Ordinal: 1115, Address: 0xb1a3c)
- PostQueuedCompletionStatus (Ordinal: 1116, Address: 0x32190)
- PowerClearRequest (Ordinal: 1117, Address: 0x3ed60)
- PowerCreateRequest (Ordinal: 1118, Address: 0x38230)
- PowerSetRequest (Ordinal: 1119, Address: 0x3e780)
- PrefetchVirtualMemory (Ordinal: 1120, Address: 0xb1ad4)
- PrepareTape (Ordinal: 1121, Address: 0x612e0)
- PrivCopyFileExW (Ordinal: 1122, Address: 0x444d0)
- PrivMoveFileIdentityW (Ordinal: 1123, Address: 0x6ee30)
- Process32First (Ordinal: 1124, Address: 0x30090)
- Process32FirstW (Ordinal: 1125, Address: 0x301b0)
- Process32Next (Ordinal: 1126, Address: 0x181e0)
- Process32NextW (Ordinal: 1127, Address: 0x18300)
- ProcessIdToSessionId (Ordinal: 1128, Address: 0x343a0)
- PssCaptureSnapshot (Ordinal: 1129, Address: 0x5b7b0)
- PssDuplicateSnapshot (Ordinal: 1130, Address: 0x5b7d0)
- PssFreeSnapshot (Ordinal: 1131, Address: 0x5b7f0)
- PssQuerySnapshot (Ordinal: 1132, Address: 0x5b810)
- PssWalkMarkerCreate (Ordinal: 1133, Address: 0x5b830)
- PssWalkMarkerFree (Ordinal: 1134, Address: 0x5b850)
- PssWalkMarkerGetPosition (Ordinal: 1135, Address: 0x5b870)
- PssWalkMarkerRewind (Ordinal: 1136, Address: 0x5b890)
- PssWalkMarkerSeek (Ordinal: 1137, Address: 0x5b8b0)
- PssWalkMarkerSeekToBeginning (Ordinal: 1138, Address: 0x5b890)
- PssWalkMarkerSetPosition (Ordinal: 1139, Address: 0x5b8b0)
- PssWalkMarkerTell (Ordinal: 1140, Address: 0x5b870)
- PssWalkSnapshot (Ordinal: 1141, Address: 0x45890)
- PulseEvent (Ordinal: 1142, Address: 0x35eb0)
- PurgeComm (Ordinal: 1143, Address: 0x576f0)
- QueryActCtxSettingsW (Ordinal: 1144, Address: 0x5b8d0)
- QueryActCtxSettingsWWorker (Ordinal: 1145, Address: 0xdf10)
- QueryActCtxW (Ordinal: 1146, Address: 0x444b0)
- QueryActCtxWWorker (Ordinal: 1147, Address: 0x37f10)
- QueryDepthSList (Ordinal: 1148, Address: 0xb1d06)
- QueryDosDeviceA (Ordinal: 1149, Address: 0xc660)
- QueryDosDeviceW (Ordinal: 1150, Address: 0x57460)
- QueryFullProcessImageNameA (Ordinal: 1151, Address: 0x42930)
- QueryFullProcessImageNameW (Ordinal: 1152, Address: 0x3bf40)
- QueryIdleProcessorCycleTime (Ordinal: 1153, Address: 0x561a0)
- QueryIdleProcessorCycleTimeEx (Ordinal: 1154, Address: 0x5b8f0)
- QueryInformationJobObject (Ordinal: 1155, Address: 0xe0f0)
- QueryIoRateControlInformationJobObject (Ordinal: 1156, Address: 0x6b720)
- QueryIoRingCapabilities (Ordinal: 1157, Address: 0xb1e08)
- QueryMemoryResourceNotification (Ordinal: 1158, Address: 0x31ba0)
- QueryPerformanceCounter (Ordinal: 1159, Address: 0x227c0)
- QueryPerformanceFrequency (Ordinal: 1160, Address: 0x316a0)
- QueryProcessAffinityUpdateMode (Ordinal: 1161, Address: 0x5b910)
- QueryProcessCycleTime (Ordinal: 1162, Address: 0x42bd0)
- QueryProtectedPolicy (Ordinal: 1163, Address: 0xb1eda)
- QueryThreadCycleTime (Ordinal: 1164, Address: 0x36c70)
- QueryThreadProfiling (Ordinal: 1165, Address: 0x62390)
- QueryThreadpoolStackInformation (Ordinal: 1166, Address: 0x5b930)
- QueryUmsThreadInformation (Ordinal: 1167, Address: 0x601e0)
- QueryUnbiasedInterruptTime (Ordinal: 1168, Address: 0x31610)
- QueueUserAPC (Ordinal: 1169, Address: 0x3a880)
- QueueUserAPC2 (Ordinal: 1170, Address: 0xb1faf)
- QueueUserWorkItem (Ordinal: 1171, Address: 0x3fcb0)
- QuirkGetData2Worker (Ordinal: 1172, Address: 0x78fb0)
- QuirkGetDataWorker (Ordinal: 1173, Address: 0x79080)
- QuirkIsEnabled2Worker (Ordinal: 1174, Address: 0x79130)
- QuirkIsEnabled3Worker (Ordinal: 1175, Address: 0x18ea0)
- QuirkIsEnabledForPackage2Worker (Ordinal: 1176, Address: 0x18a50)
- QuirkIsEnabledForPackage3Worker (Ordinal: 1177, Address: 0x18db0)
- QuirkIsEnabledForPackage4Worker (Ordinal: 1178, Address: 0x18e00)
- QuirkIsEnabledForPackageWorker (Ordinal: 1179, Address: 0x18c30)
- QuirkIsEnabledForProcessWorker (Ordinal: 1180, Address: 0x18790)
- QuirkIsEnabledWorker (Ordinal: 1181, Address: 0x19610)
- RaiseException (Ordinal: 1182, Address: 0x3a860)
- RaiseFailFastException (Ordinal: 1183, Address: 0xb2121)
- RaiseInvalid16BitExeError (Ordinal: 1184, Address: 0x5a7a0)
- ReOpenFile (Ordinal: 1185, Address: 0x44610)
- ReadConsoleA (Ordinal: 1186, Address: 0x57930)
- ReadConsoleInputA (Ordinal: 1187, Address: 0x57940)
- ReadConsoleInputExA (Ordinal: 1188, Address: 0xb219b)
- ReadConsoleInputExW (Ordinal: 1189, Address: 0xb21ce)
- ReadConsoleInputW (Ordinal: 1190, Address: 0x57950)
- ReadConsoleOutputA (Ordinal: 1191, Address: 0x57ab0)
- ReadConsoleOutputAttribute (Ordinal: 1192, Address: 0x57ac0)
- ReadConsoleOutputCharacterA (Ordinal: 1193, Address: 0x57ad0)
- ReadConsoleOutputCharacterW (Ordinal: 1194, Address: 0x57ae0)
- ReadConsoleOutputW (Ordinal: 1195, Address: 0x57af0)
- ReadConsoleW (Ordinal: 1196, Address: 0x57960)
- ReadDirectoryChangesExW (Ordinal: 1197, Address: 0x455a0)
- ReadDirectoryChangesW (Ordinal: 1198, Address: 0x3f7a0)
- ReadFile (Ordinal: 1199, Address: 0x57470)
- ReadFileEx (Ordinal: 1200, Address: 0x57480)
- ReadFileScatter (Ordinal: 1201, Address: 0x57490)
- ReadProcessMemory (Ordinal: 1202, Address: 0x3af80)
- ReadThreadProfilingData (Ordinal: 1203, Address: 0x623d0)
- ReclaimVirtualMemory (Ordinal: 1204, Address: 0xb2316)
- RegCloseKey (Ordinal: 1205, Address: 0x44930)
- RegCopyTreeW (Ordinal: 1206, Address: 0x5b970)
- RegCreateKeyExA (Ordinal: 1207, Address: 0x5b990)
- RegCreateKeyExW (Ordinal: 1208, Address: 0x46b30)
- RegDeleteKeyExA (Ordinal: 1209, Address: 0x5b9b0)
- RegDeleteKeyExW (Ordinal: 1210, Address: 0x5b9d0)
- RegDeleteTreeA (Ordinal: 1211, Address: 0x5b9f0)
- RegDeleteTreeW (Ordinal: 1212, Address: 0x5ba10)
- RegDeleteValueA (Ordinal: 1213, Address: 0x5ba30)
- RegDeleteValueW (Ordinal: 1214, Address: 0x5ba50)
- RegDisablePredefinedCacheEx (Ordinal: 1215, Address: 0x56840)
- RegEnumKeyExA (Ordinal: 1216, Address: 0x43600)
- RegEnumKeyExW (Ordinal: 1217, Address: 0x44c80)
- RegEnumValueA (Ordinal: 1218, Address: 0x5ba70)
- RegEnumValueW (Ordinal: 1219, Address: 0x5bac0)
- RegFlushKey (Ordinal: 1220, Address: 0x5bb10)
- RegGetKeySecurity (Ordinal: 1221, Address: 0x5bb30)
- RegGetValueA (Ordinal: 1222, Address: 0x5bb50)
- RegGetValueW (Ordinal: 1223, Address: 0x44aa0)
- RegLoadKeyA (Ordinal: 1224, Address: 0x5bb70)
- RegLoadKeyW (Ordinal: 1225, Address: 0x5bb90)
- RegLoadMUIStringA (Ordinal: 1226, Address: 0x5bbb0)
- RegLoadMUIStringW (Ordinal: 1227, Address: 0x52b90)
- RegNotifyChangeKeyValue (Ordinal: 1228, Address: 0x50320)
- RegOpenCurrentUser (Ordinal: 1229, Address: 0x44d60)
- RegOpenKeyExA (Ordinal: 1230, Address: 0x46b00)
- RegOpenKeyExW (Ordinal: 1231, Address: 0x44d10)
- RegOpenUserClassesRoot (Ordinal: 1232, Address: 0x4dfd0)
- RegQueryInfoKeyA (Ordinal: 1233, Address: 0x5bbd0)
- RegQueryInfoKeyW (Ordinal: 1234, Address: 0x479d0)
- RegQueryValueExA (Ordinal: 1235, Address: 0x46aa0)
- RegQueryValueExW (Ordinal: 1236, Address: 0x44da0)
- RegRestoreKeyA (Ordinal: 1237, Address: 0x5bc50)
- RegRestoreKeyW (Ordinal: 1238, Address: 0x5bc70)
- RegSaveKeyExA (Ordinal: 1239, Address: 0x5bc90)
- RegSaveKeyExW (Ordinal: 1240, Address: 0x5bcb0)
- RegSetKeySecurity (Ordinal: 1241, Address: 0x5bcd0)
- RegSetValueExA (Ordinal: 1242, Address: 0x5bcf0)
- RegSetValueExW (Ordinal: 1243, Address: 0x50340)
- RegUnLoadKeyA (Ordinal: 1244, Address: 0x5bd10)
- RegUnLoadKeyW (Ordinal: 1245, Address: 0x5bd30)
- RegisterApplicationRecoveryCallback (Ordinal: 1246, Address: 0x44b20)
- RegisterApplicationRestart (Ordinal: 1247, Address: 0x4df60)
- RegisterBadMemoryNotification (Ordinal: 1248, Address: 0x5bd50)
- RegisterConsoleIME (Ordinal: 1249, Address: 0x73bc0)
- RegisterConsoleOS2 (Ordinal: 1250, Address: 0x73bf0)
- RegisterConsoleVDM (Ordinal: 1251, Address: 0x733f0)
- RegisterWaitForInputIdle (Ordinal: 1252, Address: 0x3ce60)
- RegisterWaitForSingleObject (Ordinal: 1253, Address: 0x273c0)
- RegisterWaitForSingleObjectEx (Ordinal: 1254, Address: 0x562e0)
- RegisterWaitUntilOOBECompleted (Ordinal: 1255, Address: 0x55060)
- RegisterWowBaseHandlers (Ordinal: 1256, Address: 0x591a0)
- RegisterWowExec (Ordinal: 1257, Address: 0x5fea0)
- ReleaseActCtx (Ordinal: 1258, Address: 0x44b00)
- ReleaseActCtxWorker (Ordinal: 1259, Address: 0x3af60)
- ReleaseMutex (Ordinal: 1260, Address: 0x56f70)
- ReleaseMutexWhenCallbackReturns (Ordinal: 1261, Address: 0xb274f)
- ReleasePackageVirtualizationContext (Ordinal: 1262, Address: 0x58060)
- ReleasePseudoConsole (Ordinal: 1263, Address: 0x57970)
- ReleaseSRWLockExclusive (Ordinal: 1264, Address: 0xb27c9)
- ReleaseSRWLockShared (Ordinal: 1265, Address: 0xb27ff)
- ReleaseSemaphore (Ordinal: 1266, Address: 0x56f80)
- ReleaseSemaphoreWhenCallbackReturns (Ordinal: 1267, Address: 0xb2852)
- RemoveDirectory2A (Ordinal: 1268, Address: 0x574a0)
- RemoveDirectory2W (Ordinal: 1269, Address: 0x574b0)
- RemoveDirectoryA (Ordinal: 1270, Address: 0x574c0)
- RemoveDirectoryTransactedA (Ordinal: 1271, Address: 0x58870)
- RemoveDirectoryTransactedW (Ordinal: 1272, Address: 0x6e410)
- RemoveDirectoryW (Ordinal: 1273, Address: 0x574d0)
- RemoveDllDirectory (Ordinal: 1274, Address: 0xb290e)
- RemoveLocalAlternateComputerNameA (Ordinal: 1275, Address: 0x6ae60)
- RemoveLocalAlternateComputerNameW (Ordinal: 1276, Address: 0x6aec0)
- RemoveSecureMemoryCacheCallback (Ordinal: 1277, Address: 0x591b0)
- RemoveVectoredContinueHandler (Ordinal: 1278, Address: 0xb29c8)
- RemoveVectoredExceptionHandler (Ordinal: 1279, Address: 0xb2a0e)
- ReplaceFile (Ordinal: 1280, Address: 0x42750)
- ReplaceFileA (Ordinal: 1281, Address: 0x6e160)
- ReplaceFileW (Ordinal: 1282, Address: 0x42750)
- ReplacePartitionUnit (Ordinal: 1283, Address: 0x5a900)
- RequestDeviceWakeup (Ordinal: 1284, Address: 0x448d0)
- RequestWakeupLatency (Ordinal: 1285, Address: 0x448d0)
- ResetEvent (Ordinal: 1286, Address: 0x56f90)
- ResetWriteWatch (Ordinal: 1287, Address: 0x41770)
- ResizePseudoConsole (Ordinal: 1288, Address: 0x57980)
- ResolveDelayLoadedAPI (Ordinal: 1289, Address: 0xb2adf)
- ResolveDelayLoadsFromDll (Ordinal: 1290, Address: 0xb2b17)
- ResolveLocaleName (Ordinal: 1291, Address: 0x44890)
- RestoreLastError (Ordinal: 1292, Address: 0xb2b5c)
- ResumeThread (Ordinal: 1293, Address: 0x3bc90)
- RtlAddFunctionTable (Ordinal: 1294, Address: 0x455c0)
- RtlCaptureContext (Ordinal: 1295, Address: 0x56bc0)
- RtlCaptureStackBackTrace (Ordinal: 1296, Address: 0xb2bc7)
- RtlCompareMemory (Ordinal: 1297, Address: 0x40d40)
- RtlCopyMemory (Ordinal: 1298, Address: 0x5bd70)
- RtlDeleteFunctionTable (Ordinal: 1299, Address: 0x47cc0)
- RtlFillMemory (Ordinal: 1300, Address: 0x43b90)
- RtlInstallFunctionTableCallback (Ordinal: 1301, Address: 0x4f8e0)
- RtlIsEcCode (Ordinal: 1302, Address: 0xb2c56)
- RtlLookupFunctionEntry (Ordinal: 1303, Address: 0x3bdb0)
- RtlMoveMemory (Ordinal: 1304, Address: 0x56bf0)
- RtlPcToFileHeader (Ordinal: 1305, Address: 0x36d20)
- RtlRaiseException (Ordinal: 1306, Address: 0x5bd80)
- RtlRestoreContext (Ordinal: 1307, Address: 0x4ff80)
- RtlUnwind (Ordinal: 1308, Address: 0x40910)
- RtlUnwindEx (Ordinal: 1309, Address: 0x3f160)
- RtlVirtualUnwind (Ordinal: 1310, Address: 0x27170)
- RtlVirtualUnwind2 (Ordinal: 1311, Address: 0x5bda0)
- RtlZeroMemory (Ordinal: 1312, Address: 0xb2d0a)
- ScrollConsoleScreenBufferA (Ordinal: 1313, Address: 0x57b00)
- ScrollConsoleScreenBufferW (Ordinal: 1314, Address: 0x57b10)
- SearchPathA (Ordinal: 1315, Address: 0x5be30)
- SearchPathW (Ordinal: 1316, Address: 0x44ae0)
- SetCachedSigningLevel (Ordinal: 1317, Address: 0x4e080)
- SetCalendarInfoA (Ordinal: 1318, Address: 0x651d0)
- SetCalendarInfoW (Ordinal: 1319, Address: 0x5be50)
- SetComPlusPackageInstallStatus (Ordinal: 1320, Address: 0x62040)
- SetCommBreak (Ordinal: 1321, Address: 0x57700)
- SetCommConfig (Ordinal: 1322, Address: 0x57710)
- SetCommMask (Ordinal: 1323, Address: 0x57720)
- SetCommState (Ordinal: 1324, Address: 0x57730)
- SetCommTimeouts (Ordinal: 1325, Address: 0x57740)
- SetComputerNameA (Ordinal: 1326, Address: 0x5be70)
- SetComputerNameEx2W (Ordinal: 1327, Address: 0x5be90)
- SetComputerNameExA (Ordinal: 1328, Address: 0x5beb0)
- SetComputerNameExW (Ordinal: 1329, Address: 0x5bed0)
- SetComputerNameW (Ordinal: 1330, Address: 0x5bef0)
- SetConsoleActiveScreenBuffer (Ordinal: 1331, Address: 0x57b20)
- SetConsoleCP (Ordinal: 1332, Address: 0x57b30)
- SetConsoleCtrlHandler (Ordinal: 1333, Address: 0x57990)
- SetConsoleCursor (Ordinal: 1334, Address: 0x734d0)
- SetConsoleCursorInfo (Ordinal: 1335, Address: 0x57b40)
- SetConsoleCursorMode (Ordinal: 1336, Address: 0x73c70)
- SetConsoleCursorPosition (Ordinal: 1337, Address: 0x57b50)
- SetConsoleDisplayMode (Ordinal: 1338, Address: 0x57df0)
- SetConsoleFont (Ordinal: 1339, Address: 0x741a0)
- SetConsoleHardwareState (Ordinal: 1340, Address: 0x73560)
- SetConsoleHistoryInfo (Ordinal: 1341, Address: 0x57e00)
- SetConsoleIcon (Ordinal: 1342, Address: 0x74220)
- SetConsoleInputExeNameA (Ordinal: 1343, Address: 0xb2f71)
- SetConsoleInputExeNameW (Ordinal: 1344, Address: 0xb2fac)
- SetConsoleKeyShortcuts (Ordinal: 1345, Address: 0x735f0)
- SetConsoleLocalEUDC (Ordinal: 1346, Address: 0x73d10)
- SetConsoleMaximumWindowSize (Ordinal: 1347, Address: 0x58590)
- SetConsoleMenuClose (Ordinal: 1348, Address: 0x736d0)
- SetConsoleMode (Ordinal: 1349, Address: 0x579a0)
- SetConsoleNlsMode (Ordinal: 1350, Address: 0x73e10)
- SetConsoleNumberOfCommandsA (Ordinal: 1351, Address: 0x57e10)
- SetConsoleNumberOfCommandsW (Ordinal: 1352, Address: 0x57e20)
- SetConsoleOS2OemFormat (Ordinal: 1353, Address: 0x73e90)
- SetConsoleOutputCP (Ordinal: 1354, Address: 0x57b60)
- SetConsolePalette (Ordinal: 1355, Address: 0x73750)
- SetConsoleScreenBufferInfoEx (Ordinal: 1356, Address: 0x57b70)
- SetConsoleScreenBufferSize (Ordinal: 1357, Address: 0x57b80)
- SetConsoleTextAttribute (Ordinal: 1358, Address: 0x57b90)
- SetConsoleTitleA (Ordinal: 1359, Address: 0x57ba0)
- SetConsoleTitleW (Ordinal: 1360, Address: 0x57bb0)
- SetConsoleWindowInfo (Ordinal: 1361, Address: 0x57bc0)
- SetCriticalSectionSpinCount (Ordinal: 1362, Address: 0xb3162)
- SetCurrentConsoleFontEx (Ordinal: 1363, Address: 0x57e30)
- SetCurrentDirectoryA (Ordinal: 1364, Address: 0x5bf10)
- SetCurrentDirectoryW (Ordinal: 1365, Address: 0x436e0)
- SetDefaultCommConfigA (Ordinal: 1366, Address: 0x5ce00)
- SetDefaultCommConfigW (Ordinal: 1367, Address: 0x5cea0)
- SetDefaultDllDirectories (Ordinal: 1368, Address: 0xb320e)
- SetDllDirectoryA (Ordinal: 1369, Address: 0x70b00)
- SetDllDirectoryW (Ordinal: 1370, Address: 0x3aec0)
- SetDynamicTimeZoneInformation (Ordinal: 1371, Address: 0x5bf30)
- SetEndOfFile (Ordinal: 1372, Address: 0x574e0)
- SetEnvironmentStringsA (Ordinal: 1373, Address: 0x71990)
- SetEnvironmentStringsW (Ordinal: 1374, Address: 0x5bf50)
- SetEnvironmentVariableA (Ordinal: 1375, Address: 0x43100)
- SetEnvironmentVariableW (Ordinal: 1376, Address: 0x43520)
- SetErrorMode (Ordinal: 1377, Address: 0x3bc50)
- SetEvent (Ordinal: 1378, Address: 0x56fa0)
- SetEventWhenCallbackReturns (Ordinal: 1379, Address: 0xb3329)
- SetFileApisToANSI (Ordinal: 1380, Address: 0x5bf70)
- SetFileApisToOEM (Ordinal: 1381, Address: 0x5bf90)
- SetFileAttributesA (Ordinal: 1382, Address: 0x574f0)
- SetFileAttributesTransactedA (Ordinal: 1383, Address: 0x6f310)
- SetFileAttributesTransactedW (Ordinal: 1384, Address: 0x6f370)
- SetFileAttributesW (Ordinal: 1385, Address: 0x57500)
- SetFileBandwidthReservation (Ordinal: 1386, Address: 0x53200)
- SetFileCompletionNotificationModes (Ordinal: 1387, Address: 0x37040)
- SetFileInformationByHandle (Ordinal: 1388, Address: 0x57510)
- SetFileIoOverlappedRange (Ordinal: 1389, Address: 0x5bfb0)
- SetFilePointer (Ordinal: 1390, Address: 0x57520)
- SetFilePointerEx (Ordinal: 1391, Address: 0x57530)
- SetFileShortNameA (Ordinal: 1392, Address: 0x58c20)
- SetFileShortNameW (Ordinal: 1393, Address: 0x58c70)
- SetFileTime (Ordinal: 1394, Address: 0x57540)
- SetFileValidData (Ordinal: 1395, Address: 0x57550)
- SetFirmwareEnvironmentVariableA (Ordinal: 1396, Address: 0x70f80)
- SetFirmwareEnvironmentVariableExA (Ordinal: 1397, Address: 0x70fa0)
- SetFirmwareEnvironmentVariableExW (Ordinal: 1398, Address: 0x710e0)
- SetFirmwareEnvironmentVariableW (Ordinal: 1399, Address: 0x711d0)
- SetHandleCount (Ordinal: 1400, Address: 0x43d70)
- SetHandleInformation (Ordinal: 1401, Address: 0x56e30)
- SetInformationJobObject (Ordinal: 1402, Address: 0x36da0)
- SetIoRateControlInformationJobObject (Ordinal: 1403, Address: 0x6b980)
- SetIoRingCompletionEvent (Ordinal: 1404, Address: 0xb35a3)
- SetLastConsoleEventActive (Ordinal: 1405, Address: 0xb35f4)
- SetLastError (Ordinal: 1406, Address: 0x27260)
- SetLocalPrimaryComputerNameA (Ordinal: 1407, Address: 0x6b010)
- SetLocalPrimaryComputerNameW (Ordinal: 1408, Address: 0x4cfd0)
- SetLocalTime (Ordinal: 1409, Address: 0x5bfd0)
- SetLocaleInfoA (Ordinal: 1410, Address: 0x652c0)
- SetLocaleInfoW (Ordinal: 1411, Address: 0x56880)
- SetMailslotInfo (Ordinal: 1412, Address: 0x41f80)
- SetMessageWaitingIndicator (Ordinal: 1413, Address: 0x448d0)
- SetNamedPipeAttribute (Ordinal: 1414, Address: 0x594d0)
- SetNamedPipeHandleState (Ordinal: 1415, Address: 0x42680)
- SetPriorityClass (Ordinal: 1416, Address: 0x41f00)
- SetProcessAffinityMask (Ordinal: 1417, Address: 0x43560)
- SetProcessAffinityUpdateMode (Ordinal: 1418, Address: 0x5bff0)
- SetProcessDEPPolicy (Ordinal: 1419, Address: 0x5a8c0)
- SetProcessDefaultCpuSetMasks (Ordinal: 1420, Address: 0xb375a)
- SetProcessDefaultCpuSets (Ordinal: 1421, Address: 0xb37b6)
- SetProcessDynamicEHContinuationTargets (Ordinal: 1422, Address: 0xb381c)
- SetProcessDynamicEnforcedCetCompatibleRanges (Ordinal: 1423, Address: 0xb3896)
- SetProcessInformation (Ordinal: 1424, Address: 0x56dc0)
- SetProcessMitigationPolicy (Ordinal: 1425, Address: 0xb391a)
- SetProcessPreferredUILanguages (Ordinal: 1426, Address: 0x5c010)
- SetProcessPriorityBoost (Ordinal: 1427, Address: 0x4e060)
- SetProcessShutdownParameters (Ordinal: 1428, Address: 0x42b60)
- SetProcessWorkingSetSize (Ordinal: 1429, Address: 0x56df0)
- SetProcessWorkingSetSizeEx (Ordinal: 1430, Address: 0x5c030)
- SetProtectedPolicy (Ordinal: 1431, Address: 0xb39f6)
- SetSearchPathMode (Ordinal: 1432, Address: 0x44d30)
- SetStdHandle (Ordinal: 1433, Address: 0x54dd0)
- SetStdHandleEx (Ordinal: 1434, Address: 0x5c050)
- SetSystemFileCacheSize (Ordinal: 1435, Address: 0x5c070)
- SetSystemPowerState (Ordinal: 1436, Address: 0x70dd0)
- SetSystemTime (Ordinal: 1437, Address: 0x5c090)
- SetSystemTimeAdjustment (Ordinal: 1438, Address: 0x58660)
- SetTapeParameters (Ordinal: 1439, Address: 0x61320)
- SetTapePosition (Ordinal: 1440, Address: 0x61370)
- SetTermsrvAppInstallMode (Ordinal: 1441, Address: 0x3e8e0)
- SetThreadAffinityMask (Ordinal: 1442, Address: 0xd9b0)
- SetThreadContext (Ordinal: 1443, Address: 0x44cd0)
- SetThreadDescription (Ordinal: 1444, Address: 0xb3b25)
- SetThreadErrorMode (Ordinal: 1445, Address: 0x3bf00)
- SetThreadExecutionState (Ordinal: 1446, Address: 0xce10)
- SetThreadGroupAffinity (Ordinal: 1447, Address: 0x43aa0)
- SetThreadIdealProcessor (Ordinal: 1448, Address: 0x3ece0)
- SetThreadIdealProcessorEx (Ordinal: 1449, Address: 0x458d0)
- SetThreadInformation (Ordinal: 1450, Address: 0x56dd0)
- SetThreadLocale (Ordinal: 1451, Address: 0x35f80)
- SetThreadPreferredUILanguages (Ordinal: 1452, Address: 0x44d80)
- SetThreadPriority (Ordinal: 1453, Address: 0x36720)
- SetThreadPriorityBoost (Ordinal: 1454, Address: 0x3e250)
- SetThreadSelectedCpuSetMasks (Ordinal: 1455, Address: 0xb3c5d)
- SetThreadSelectedCpuSets (Ordinal: 1456, Address: 0xb3cb9)
- SetThreadStackGuarantee (Ordinal: 1457, Address: 0x41810)
- SetThreadToken (Ordinal: 1458, Address: 0xb3d1f)
- SetThreadUILanguage (Ordinal: 1459, Address: 0x446b0)
- SetThreadpoolStackInformation (Ordinal: 1460, Address: 0x5c0b0)
- SetThreadpoolThreadMaximum (Ordinal: 1461, Address: 0xb3da1)
- SetThreadpoolThreadMinimum (Ordinal: 1462, Address: 0x43390)
- SetThreadpoolTimer (Ordinal: 1463, Address: 0xb3de9)
- SetThreadpoolTimerEx (Ordinal: 1464, Address: 0xb3e0f)
- SetThreadpoolWait (Ordinal: 1465, Address: 0xb3e34)
- SetThreadpoolWaitEx (Ordinal: 1466, Address: 0xb3e58)
- SetTimeZoneInformation (Ordinal: 1467, Address: 0x5c0f0)
- SetTimerQueueTimer (Ordinal: 1468, Address: 0x62270)
- SetUmsThreadInformation (Ordinal: 1469, Address: 0x601e0)
- SetUnhandledExceptionFilter (Ordinal: 1470, Address: 0x43140)
- SetUserGeoID (Ordinal: 1471, Address: 0x68750)
- SetUserGeoName (Ordinal: 1472, Address: 0x68770)
- SetVDMCurrentDirectories (Ordinal: 1473, Address: 0x5ff20)
- SetVolumeLabelA (Ordinal: 1474, Address: 0x712c0)
- SetVolumeLabelW (Ordinal: 1475, Address: 0x71370)
- SetVolumeMountPointA (Ordinal: 1476, Address: 0x6fd90)
- SetVolumeMountPointW (Ordinal: 1477, Address: 0x6fe20)
- SetVolumeMountPointWStub (Ordinal: 1478, Address: 0x5c110)
- SetWaitableTimer (Ordinal: 1479, Address: 0x56fb0)
- SetWaitableTimerEx (Ordinal: 1480, Address: 0xb3f84)
- SetXStateFeaturesMask (Ordinal: 1481, Address: 0x47d00)
- SetupComm (Ordinal: 1482, Address: 0x57750)
- ShowConsoleCursor (Ordinal: 1483, Address: 0x737f0)
- SignalObjectAndWait (Ordinal: 1484, Address: 0x3bc70)
- SizeofResource (Ordinal: 1485, Address: 0x3be80)
- Sleep (Ordinal: 1486, Address: 0x2fe40)
- SleepConditionVariableCS (Ordinal: 1487, Address: 0xb4028)
- SleepConditionVariableSRW (Ordinal: 1488, Address: 0xb4078)
- SleepEx (Ordinal: 1489, Address: 0x56fc0)
- SortCloseHandle (Ordinal: 1490, Address: 0x43b60)
- SortGetHandle (Ordinal: 1491, Address: 0x27460)
- StartThreadpoolIo (Ordinal: 1492, Address: 0xb40e7)
- SubmitIoRing (Ordinal: 1493, Address: 0xb4112)
- SubmitThreadpoolWork (Ordinal: 1494, Address: 0xb4152)
- SuspendThread (Ordinal: 1495, Address: 0x3dee0)
- SwitchToFiber (Ordinal: 1496, Address: 0x57820)
- SwitchToThread (Ordinal: 1497, Address: 0x30070)
- SystemTimeToFileTime (Ordinal: 1498, Address: 0x36d00)
- SystemTimeToTzSpecificLocalTime (Ordinal: 1499, Address: 0x3ed40)
- SystemTimeToTzSpecificLocalTimeEx (Ordinal: 1500, Address: 0xb41e5)
- TerminateJobObject (Ordinal: 1501, Address: 0x40a70)
- TerminateProcess (Ordinal: 1502, Address: 0x42110)
- TerminateThread (Ordinal: 1503, Address: 0x45950)
- TermsrvAppInstallMode (Ordinal: 1504, Address: 0x3dec0)
- TermsrvConvertSysRootToUserDir (Ordinal: 1505, Address: 0x113a0)
- TermsrvCreateRegEntry (Ordinal: 1506, Address: 0x32f90)
- TermsrvDeleteKey (Ordinal: 1507, Address: 0x35e90)
- TermsrvDeleteValue (Ordinal: 1508, Address: 0x34d70)
- TermsrvGetPreSetValue (Ordinal: 1509, Address: 0x30310)
- TermsrvGetWindowsDirectoryA (Ordinal: 1510, Address: 0x430c0)
- TermsrvGetWindowsDirectoryW (Ordinal: 1511, Address: 0x35f10)
- TermsrvOpenRegEntry (Ordinal: 1512, Address: 0x22b40)
- TermsrvOpenUserClasses (Ordinal: 1513, Address: 0x36bf0)
- TermsrvRestoreKey (Ordinal: 1514, Address: 0x72b40)
- TermsrvSetKeySecurity (Ordinal: 1515, Address: 0x39530)
- TermsrvSetValueKey (Ordinal: 1516, Address: 0x31660)
- TermsrvSyncUserIniFileExt (Ordinal: 1517, Address: 0x113c0)
- Thread32First (Ordinal: 1518, Address: 0xdac0)
- Thread32Next (Ordinal: 1519, Address: 0xe3d0)
- TlsAlloc (Ordinal: 1520, Address: 0x3ae50)
- TlsFree (Ordinal: 1521, Address: 0x3e760)
- TlsGetValue (Ordinal: 1522, Address: 0x849f0)
- TlsGetValue2 (Ordinal: 1523, Address: 0xb43dd)
- TlsSetValue (Ordinal: 1524, Address: 0x28110)
- Toolhelp32ReadProcessMemory (Ordinal: 1525, Address: 0x5c320)
- TransactNamedPipe (Ordinal: 1526, Address: 0x42770)
- TransmitCommChar (Ordinal: 1527, Address: 0x57760)
- TryAcquireSRWLockExclusive (Ordinal: 1528, Address: 0xb445b)
- TryAcquireSRWLockShared (Ordinal: 1529, Address: 0xb4497)
- TryEnterCriticalSection (Ordinal: 1530, Address: 0xb44d0)
- TrySubmitThreadpoolCallback (Ordinal: 1531, Address: 0x3ce00)
- TzSpecificLocalTimeToSystemTime (Ordinal: 1532, Address: 0x42bf0)
- TzSpecificLocalTimeToSystemTimeEx (Ordinal: 1533, Address: 0xb454f)
- UTRegister (Ordinal: 1534, Address: 0x59440)
- UTUnRegister (Ordinal: 1535, Address: 0x58580)
- UmsThreadYield (Ordinal: 1536, Address: 0x60210)
- UnhandledExceptionFilter (Ordinal: 1537, Address: 0x5c120)
- UnlockFile (Ordinal: 1538, Address: 0x57560)
- UnlockFileEx (Ordinal: 1539, Address: 0x57570)
- UnmapViewOfFile (Ordinal: 1540, Address: 0x385a0)
- UnmapViewOfFileEx (Ordinal: 1541, Address: 0xb460b)
- UnregisterApplicationRecoveryCallback (Ordinal: 1542, Address: 0x62190)
- UnregisterApplicationRestart (Ordinal: 1543, Address: 0x50300)
- UnregisterBadMemoryNotification (Ordinal: 1544, Address: 0x5c140)
- UnregisterConsoleIME (Ordinal: 1545, Address: 0x73bc0)
- UnregisterWait (Ordinal: 1546, Address: 0xcc40)
- UnregisterWaitEx (Ordinal: 1547, Address: 0x3a1f0)
- UnregisterWaitUntilOOBECompleted (Ordinal: 1548, Address: 0x71920)
- UpdateCalendarDayOfWeek (Ordinal: 1549, Address: 0x15270)
- UpdateProcThreadAttribute (Ordinal: 1550, Address: 0xb4726)
- UpdateResourceA (Ordinal: 1551, Address: 0x63b20)
- UpdateResourceW (Ordinal: 1552, Address: 0x63cb0)
- VDMConsoleOperation (Ordinal: 1553, Address: 0x74330)
- VDMOperationStarted (Ordinal: 1554, Address: 0x601c0)
- VerLanguageNameA (Ordinal: 1555, Address: 0x5c160)
- VerLanguageNameW (Ordinal: 1556, Address: 0x43730)
- VerSetConditionMask (Ordinal: 1557, Address: 0xb47e4)
- VerifyConsoleIoHandle (Ordinal: 1558, Address: 0x44790)
- VerifyScripts (Ordinal: 1559, Address: 0x5c180)
- VerifyVersionInfoA (Ordinal: 1560, Address: 0x34590)
- VerifyVersionInfoW (Ordinal: 1561, Address: 0x2c580)
- VirtualAlloc (Ordinal: 1562, Address: 0x32150)
- VirtualAllocEx (Ordinal: 1563, Address: 0x43020)
- VirtualAllocExNuma (Ordinal: 1564, Address: 0x44f60)
- VirtualFree (Ordinal: 1565, Address: 0x34d90)
- VirtualFreeEx (Ordinal: 1566, Address: 0x44df0)
- VirtualLock (Ordinal: 1567, Address: 0x3f7e0)
- VirtualProtect (Ordinal: 1568, Address: 0x37450)
- VirtualProtectEx (Ordinal: 1569, Address: 0x41f60)
- VirtualQuery (Ordinal: 1570, Address: 0x37a40)
- VirtualQueryEx (Ordinal: 1571, Address: 0x3a210)
- VirtualUnlock (Ordinal: 1572, Address: 0x3bcf0)
- WTSGetActiveConsoleSessionId (Ordinal: 1573, Address: 0x3df00)
- WaitCommEvent (Ordinal: 1574, Address: 0x57770)
- WaitForDebugEvent (Ordinal: 1575, Address: 0x44700)
- WaitForDebugEventEx (Ordinal: 1576, Address: 0xb4938)
- WaitForMultipleObjects (Ordinal: 1577, Address: 0x56fd0)
- WaitForMultipleObjectsEx (Ordinal: 1578, Address: 0x56fe0)
- WaitForSingleObject (Ordinal: 1579, Address: 0x56ff0)
- WaitForSingleObjectEx (Ordinal: 1580, Address: 0x57000)
- WaitForThreadpoolIoCallbacks (Ordinal: 1581, Address: 0xb49e0)
- WaitForThreadpoolTimerCallbacks (Ordinal: 1582, Address: 0xb4a1c)
- WaitForThreadpoolWaitCallbacks (Ordinal: 1583, Address: 0xb4a50)
- WaitForThreadpoolWorkCallbacks (Ordinal: 1584, Address: 0xb4a83)
- WaitNamedPipeA (Ordinal: 1585, Address: 0xc8f0)
- WaitNamedPipeW (Ordinal: 1586, Address: 0x39430)
- WakeAllConditionVariable (Ordinal: 1587, Address: 0xb4ace)
- WakeConditionVariable (Ordinal: 1588, Address: 0xb4b06)
- WerGetFlags (Ordinal: 1589, Address: 0x4dff0)
- WerGetFlagsWorker (Ordinal: 1590, Address: 0x4dff0)
- WerRegisterAdditionalProcess (Ordinal: 1591, Address: 0x5c1a0)
- WerRegisterAppLocalDump (Ordinal: 1592, Address: 0x5c1c0)
- WerRegisterCustomMetadata (Ordinal: 1593, Address: 0x44910)
- WerRegisterExcludedMemoryBlock (Ordinal: 1594, Address: 0x56860)
- WerRegisterFile (Ordinal: 1595, Address: 0x3f7c0)
- WerRegisterFileWorker (Ordinal: 1596, Address: 0x621b0)
- WerRegisterMemoryBlock (Ordinal: 1597, Address: 0x44550)
- WerRegisterMemoryBlockWorker (Ordinal: 1598, Address: 0x621c0)
- WerRegisterRuntimeExceptionModule (Ordinal: 1599, Address: 0x43500)
- WerRegisterRuntimeExceptionModuleWorker (Ordinal: 1600, Address: 0x621d0)
- WerSetFlags (Ordinal: 1601, Address: 0x47a50)
- WerSetFlagsWorker (Ordinal: 1602, Address: 0x47a50)
- WerUnregisterAdditionalProcess (Ordinal: 1603, Address: 0x5c1e0)
- WerUnregisterAppLocalDump (Ordinal: 1604, Address: 0x5c200)
- WerUnregisterCustomMetadata (Ordinal: 1605, Address: 0x5c220)
- WerUnregisterExcludedMemoryBlock (Ordinal: 1606, Address: 0x5c240)
- WerUnregisterFile (Ordinal: 1607, Address: 0x41ac0)
- WerUnregisterFileWorker (Ordinal: 1608, Address: 0x621e0)
- WerUnregisterMemoryBlock (Ordinal: 1609, Address: 0x43e30)
- WerUnregisterMemoryBlockWorker (Ordinal: 1610, Address: 0x621f0)
- WerUnregisterRuntimeExceptionModule (Ordinal: 1611, Address: 0x44fa0)
- WerUnregisterRuntimeExceptionModuleWorker (Ordinal: 1612, Address: 0x62200)
- WerpGetDebugger (Ordinal: 1613, Address: 0x75e90)
- WerpInitiateRemoteRecovery (Ordinal: 1614, Address: 0x4ba10)
- WerpLaunchAeDebug (Ordinal: 1615, Address: 0x769c0)
- WerpNotifyLoadStringResourceWorker (Ordinal: 1616, Address: 0x31b90)
- WerpNotifyUseStringResourceWorker (Ordinal: 1617, Address: 0x31b90)
- WideCharToMultiByte (Ordinal: 1618, Address: 0x31560)
- WinExec (Ordinal: 1619, Address: 0x70bc0)
- Wow64DisableWow64FsRedirection (Ordinal: 1620, Address: 0x43120)
- Wow64EnableWow64FsRedirection (Ordinal: 1621, Address: 0x577a0)
- Wow64GetThreadContext (Ordinal: 1622, Address: 0x502e0)
- Wow64GetThreadSelectorEntry (Ordinal: 1623, Address: 0x58750)
- Wow64RevertWow64FsRedirection (Ordinal: 1624, Address: 0x458b0)
- Wow64SetThreadContext (Ordinal: 1625, Address: 0x5c260)
- Wow64SuspendThread (Ordinal: 1626, Address: 0x5c280)
- WriteConsoleA (Ordinal: 1627, Address: 0x579b0)
- WriteConsoleInputA (Ordinal: 1628, Address: 0x57bd0)
- WriteConsoleInputVDMA (Ordinal: 1629, Address: 0x73850)
- WriteConsoleInputVDMW (Ordinal: 1630, Address: 0x73920)
- WriteConsoleInputW (Ordinal: 1631, Address: 0x57be0)
- WriteConsoleOutputA (Ordinal: 1632, Address: 0x57bf0)
- WriteConsoleOutputAttribute (Ordinal: 1633, Address: 0x57c00)
- WriteConsoleOutputCharacterA (Ordinal: 1634, Address: 0x57c10)
- WriteConsoleOutputCharacterW (Ordinal: 1635, Address: 0x57c20)
- WriteConsoleOutputW (Ordinal: 1636, Address: 0x57c30)
- WriteConsoleW (Ordinal: 1637, Address: 0x579c0)
- WriteFile (Ordinal: 1638, Address: 0x57580)
- WriteFileEx (Ordinal: 1639, Address: 0x57590)
- WriteFileGather (Ordinal: 1640, Address: 0x575a0)
- WritePrivateProfileSectionA (Ordinal: 1641, Address: 0x6d430)
- WritePrivateProfileSectionW (Ordinal: 1642, Address: 0x6d4a0)
- WritePrivateProfileStringA (Ordinal: 1643, Address: 0x42e20)
- WritePrivateProfileStringW (Ordinal: 1644, Address: 0xd2f0)
- WritePrivateProfileStructA (Ordinal: 1645, Address: 0x6d510)
- WritePrivateProfileStructW (Ordinal: 1646, Address: 0x43e70)
- WriteProcessMemory (Ordinal: 1647, Address: 0x40590)
- WriteProfileSectionA (Ordinal: 1648, Address: 0x6d680)
- WriteProfileSectionW (Ordinal: 1649, Address: 0x6d690)
- WriteProfileStringA (Ordinal: 1650, Address: 0x6d6a0)
- WriteProfileStringW (Ordinal: 1651, Address: 0x46490)
- WriteTapemark (Ordinal: 1652, Address: 0x613f0)
- ZombifyActCtx (Ordinal: 1653, Address: 0x5c2a0)
- ZombifyActCtxWorker (Ordinal: 1654, Address: 0x617a0)
- __C_specific_handler (Ordinal: 1655, Address: 0xb514d)
- __chkstk (Ordinal: 1656, Address: 0xb5171)
- __misaligned_access (Ordinal: 1657, Address: 0xb5194)
- _hread (Ordinal: 1658, Address: 0x22350)
- _hwrite (Ordinal: 1659, Address: 0x2a0e0)
- _lclose (Ordinal: 1660, Address: 0x36cb0)
- _lcreat (Ordinal: 1661, Address: 0x730e0)
- _llseek (Ordinal: 1662, Address: 0x30440)
- _local_unwind (Ordinal: 1663, Address: 0xb51e3)
- _lopen (Ordinal: 1664, Address: 0x73150)
- _lread (Ordinal: 1665, Address: 0x22350)
- _lwrite (Ordinal: 1666, Address: 0x2a0e0)
- lstrcat (Ordinal: 1667, Address: 0x2ef30)
- lstrcatA (Ordinal: 1668, Address: 0x2ef30)
- lstrcatW (Ordinal: 1669, Address: 0x342b0)
- lstrcmp (Ordinal: 1670, Address: 0x40a60)
- lstrcmpA (Ordinal: 1671, Address: 0x40a60)
- lstrcmpW (Ordinal: 1672, Address: 0x391b0)
- lstrcmpi (Ordinal: 1673, Address: 0x39200)
- lstrcmpiA (Ordinal: 1674, Address: 0x39200)
- lstrcmpiW (Ordinal: 1675, Address: 0x321b0)
- lstrcpy (Ordinal: 1676, Address: 0x31630)
- lstrcpyA (Ordinal: 1677, Address: 0x31630)
- lstrcpyW (Ordinal: 1678, Address: 0x321d0)
- lstrcpyn (Ordinal: 1679, Address: 0x44870)
- lstrcpynA (Ordinal: 1680, Address: 0x44870)
- lstrcpynW (Ordinal: 1681, Address: 0x43790)
- lstrlen (Ordinal: 1682, Address: 0x36780)
- lstrlenA (Ordinal: 1683, Address: 0x36780)
- lstrlenW (Ordinal: 1684, Address: 0x304c0)
- timeBeginPeriod (Ordinal: 1685, Address: 0x21d90)
- timeEndPeriod (Ordinal: 1686, Address: 0x21bb0)
- timeGetDevCaps (Ordinal: 1687, Address: 0x3ead0)
- timeGetSystemTime (Ordinal: 1688, Address: 0x21950)
- timeGetTime (Ordinal: 1689, Address: 0x21990)
- uaw_lstrcmpW (Ordinal: 1690, Address: 0x391b0)
- uaw_lstrcmpiW (Ordinal: 1691, Address: 0x321b0)
- uaw_lstrlenW (Ordinal: 1692, Address: 0x581d0)
- uaw_wcschr (Ordinal: 1693, Address: 0x58200)
- uaw_wcscpy (Ordinal: 1694, Address: 0x58230)
- uaw_wcsicmp (Ordinal: 1695, Address: 0x58260)
- uaw_wcslen (Ordinal: 1696, Address: 0x58280)
- uaw_wcsrchr (Ordinal: 1697, Address: 0x582b0)
Imported DLLs & Functions
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x18008a878)
api-ms-win-core-appcompat-l1-1-0.dll
- BaseCheckAppcompatCache (Address: 0x18008a8a0)
- BaseCheckAppcompatCacheEx (Address: 0x18008a890)
- BaseCleanupAppcompatCacheSupport (Address: 0x18008a888)
- BaseDumpAppcompatCache (Address: 0x18008a8b0)
- BaseFlushAppcompatCache (Address: 0x18008a8a8)
- BaseInitAppcompatCacheSupport (Address: 0x18008a898)
- BaseUpdateAppcompatCache (Address: 0x18008a8b8)
api-ms-win-core-appcompat-l1-1-1.dll
- BaseFreeAppCompatDataForProcess (Address: 0x18008a8d0)
- BaseReadAppCompatDataForProcess (Address: 0x18008a8c8)
api-ms-win-core-comm-l1-1-0.dll
- ClearCommBreak (Address: 0x18008a900)
- ClearCommError (Address: 0x18008a930)
- EscapeCommFunction (Address: 0x18008a8e0)
- GetCommConfig (Address: 0x18008a960)
- GetCommMask (Address: 0x18008a8f0)
- GetCommModemStatus (Address: 0x18008a8f8)
- GetCommProperties (Address: 0x18008a938)
- GetCommState (Address: 0x18008a908)
- GetCommTimeouts (Address: 0x18008a910)
- PurgeComm (Address: 0x18008a918)
- SetCommBreak (Address: 0x18008a920)
- SetCommConfig (Address: 0x18008a928)
- SetCommMask (Address: 0x18008a968)
- SetCommState (Address: 0x18008a940)
- SetCommTimeouts (Address: 0x18008a8e8)
- SetupComm (Address: 0x18008a948)
- TransmitCommChar (Address: 0x18008a950)
- WaitCommEvent (Address: 0x18008a958)
api-ms-win-core-console-l1-1-0.dll
- AllocConsole (Address: 0x18008a978)
- GetConsoleCP (Address: 0x18008a9d8)
- GetConsoleMode (Address: 0x18008a980)
- GetConsoleOutputCP (Address: 0x18008a988)
- GetNumberOfConsoleInputEvents (Address: 0x18008a990)
- ReadConsoleA (Address: 0x18008a998)
- ReadConsoleInputA (Address: 0x18008a9a0)
- ReadConsoleInputW (Address: 0x18008a9a8)
- ReadConsoleW (Address: 0x18008a9b0)
- SetConsoleCtrlHandler (Address: 0x18008a9b8)
- SetConsoleMode (Address: 0x18008a9c0)
- WriteConsoleA (Address: 0x18008a9c8)
- WriteConsoleW (Address: 0x18008a9d0)
api-ms-win-core-console-l1-2-0.dll
- AttachConsole (Address: 0x18008a9f8)
- FreeConsole (Address: 0x18008a9e8)
- PeekConsoleInputA (Address: 0x18008a9f0)
- PeekConsoleInputW (Address: 0x18008aa00)
api-ms-win-core-console-l1-2-1.dll
- ClosePseudoConsole (Address: 0x18008aa18)
- CreatePseudoConsole (Address: 0x18008aa20)
- ResizePseudoConsole (Address: 0x18008aa10)
api-ms-win-core-console-l1-2-2.dll
- AllocConsoleWithOptions (Address: 0x18008aa38)
- ReleasePseudoConsole (Address: 0x18008aa30)
api-ms-win-core-console-l2-1-0.dll
- CreateConsoleScreenBuffer (Address: 0x18008aaa0)
- FillConsoleOutputAttribute (Address: 0x18008aaf8)
- FillConsoleOutputCharacterA (Address: 0x18008aa90)
- FillConsoleOutputCharacterW (Address: 0x18008aa88)
- FlushConsoleInputBuffer (Address: 0x18008aa60)
- GenerateConsoleCtrlEvent (Address: 0x18008aa58)
- GetConsoleCursorInfo (Address: 0x18008aa98)
- GetConsoleScreenBufferInfo (Address: 0x18008aa50)
- GetConsoleScreenBufferInfoEx (Address: 0x18008aa68)
- GetLargestConsoleWindowSize (Address: 0x18008aab0)
- ReadConsoleOutputA (Address: 0x18008aa80)
- ReadConsoleOutputAttribute (Address: 0x18008aab8)
- ReadConsoleOutputCharacterA (Address: 0x18008aac0)
- ReadConsoleOutputCharacterW (Address: 0x18008aac8)
- ReadConsoleOutputW (Address: 0x18008aad0)
- ScrollConsoleScreenBufferA (Address: 0x18008aad8)
- ScrollConsoleScreenBufferW (Address: 0x18008aae0)
- SetConsoleActiveScreenBuffer (Address: 0x18008aae8)
- SetConsoleCP (Address: 0x18008aaf0)
- SetConsoleCursorInfo (Address: 0x18008ab48)
- SetConsoleCursorPosition (Address: 0x18008aa78)
- SetConsoleOutputCP (Address: 0x18008aa70)
- SetConsoleScreenBufferInfoEx (Address: 0x18008aa48)
- SetConsoleScreenBufferSize (Address: 0x18008aaa8)
- SetConsoleTextAttribute (Address: 0x18008ab00)
- SetConsoleWindowInfo (Address: 0x18008ab08)
- WriteConsoleInputA (Address: 0x18008ab40)
- WriteConsoleInputW (Address: 0x18008ab38)
- WriteConsoleOutputA (Address: 0x18008ab30)
- WriteConsoleOutputAttribute (Address: 0x18008ab28)
- WriteConsoleOutputCharacterA (Address: 0x18008ab20)
- WriteConsoleOutputCharacterW (Address: 0x18008ab18)
- WriteConsoleOutputW (Address: 0x18008ab10)
api-ms-win-core-console-l2-2-0.dll
- GetConsoleOriginalTitleA (Address: 0x18008ab58)
- GetConsoleOriginalTitleW (Address: 0x18008ab68)
- GetConsoleTitleA (Address: 0x18008ab70)
- GetConsoleTitleW (Address: 0x18008ab78)
- SetConsoleTitleA (Address: 0x18008ab80)
- SetConsoleTitleW (Address: 0x18008ab60)
api-ms-win-core-console-l3-2-0.dll
- AddConsoleAliasA (Address: 0x18008abf8)
- AddConsoleAliasW (Address: 0x18008abf0)
- ExpungeConsoleCommandHistoryA (Address: 0x18008abe8)
- ExpungeConsoleCommandHistoryW (Address: 0x18008abe0)
- GetConsoleAliasA (Address: 0x18008abd8)
- GetConsoleAliasesA (Address: 0x18008aba8)
- GetConsoleAliasesLengthA (Address: 0x18008aba0)
- GetConsoleAliasesLengthW (Address: 0x18008ab98)
- GetConsoleAliasesW (Address: 0x18008ab90)
- GetConsoleAliasExesA (Address: 0x18008abd0)
- GetConsoleAliasExesLengthA (Address: 0x18008abc8)
- GetConsoleAliasExesLengthW (Address: 0x18008abc0)
- GetConsoleAliasExesW (Address: 0x18008abb8)
- GetConsoleAliasW (Address: 0x18008abb0)
- GetConsoleCommandHistoryA (Address: 0x18008ac00)
- GetConsoleCommandHistoryLengthA (Address: 0x18008ac08)
- GetConsoleCommandHistoryLengthW (Address: 0x18008ac10)
- GetConsoleCommandHistoryW (Address: 0x18008ac18)
- GetConsoleDisplayMode (Address: 0x18008ac20)
- GetConsoleFontSize (Address: 0x18008ac28)
- GetConsoleHistoryInfo (Address: 0x18008ac30)
- GetConsoleProcessList (Address: 0x18008ac38)
- GetConsoleSelectionInfo (Address: 0x18008ac40)
- GetConsoleWindow (Address: 0x18008ac48)
- GetCurrentConsoleFont (Address: 0x18008ac50)
- GetCurrentConsoleFontEx (Address: 0x18008ac58)
- GetNumberOfConsoleMouseButtons (Address: 0x18008ac60)
- SetConsoleDisplayMode (Address: 0x18008ac68)
- SetConsoleHistoryInfo (Address: 0x18008ac70)
- SetConsoleNumberOfCommandsA (Address: 0x18008ac78)
- SetConsoleNumberOfCommandsW (Address: 0x18008ac80)
- SetCurrentConsoleFontEx (Address: 0x18008ac88)
api-ms-win-core-datetime-l1-1-0.dll
- GetDateFormatA (Address: 0x18008acb0)
- GetDateFormatW (Address: 0x18008aca0)
- GetTimeFormatA (Address: 0x18008ac98)
- GetTimeFormatW (Address: 0x18008aca8)
api-ms-win-core-datetime-l1-1-1.dll
- GetDateFormatEx (Address: 0x18008acc8)
- GetTimeFormatEx (Address: 0x18008acc0)
api-ms-win-core-datetime-l1-1-2.dll
- GetDurationFormatEx (Address: 0x18008acd8)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x18008ace8)
- IsDebuggerPresent (Address: 0x18008acf8)
- OutputDebugStringA (Address: 0x18008ad00)
- OutputDebugStringW (Address: 0x18008acf0)
api-ms-win-core-debug-l1-1-1.dll
- CheckRemoteDebuggerPresent (Address: 0x18008ad18)
- ContinueDebugEvent (Address: 0x18008ad20)
- DebugActiveProcess (Address: 0x18008ad10)
- DebugActiveProcessStop (Address: 0x18008ad28)
- WaitForDebugEvent (Address: 0x18008ad30)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x18008ad40)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x18008ad50)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetErrorMode (Address: 0x18008ad78)
- RaiseException (Address: 0x18008ad88)
- SetErrorMode (Address: 0x18008ad80)
- SetLastError (Address: 0x18008ad68)
- SetUnhandledExceptionFilter (Address: 0x18008ad70)
- UnhandledExceptionFilter (Address: 0x18008ad60)
api-ms-win-core-errorhandling-l1-1-3.dll
- GetThreadErrorMode (Address: 0x18008ad98)
- SetThreadErrorMode (Address: 0x18008ada0)
api-ms-win-core-fibers-l1-1-0.dll
- FlsAlloc (Address: 0x18008adc0)
- FlsFree (Address: 0x18008adb0)
- FlsSetValue (Address: 0x18008adb8)
api-ms-win-core-fibers-l2-1-0.dll
- ConvertFiberToThread (Address: 0x18008add8)
- ConvertThreadToFiber (Address: 0x18008adf0)
- CreateFiber (Address: 0x18008add0)
- DeleteFiber (Address: 0x18008ade0)
- SwitchToFiber (Address: 0x18008ade8)
api-ms-win-core-fibers-l2-1-1.dll
- ConvertThreadToFiberEx (Address: 0x18008ae08)
- CreateFiberEx (Address: 0x18008ae00)
api-ms-win-core-file-l1-1-0.dll
- CompareFileTime (Address: 0x18008af50)
- CreateDirectoryA (Address: 0x18008af48)
- CreateDirectoryW (Address: 0x18008af40)
- CreateFileA (Address: 0x18008af38)
- CreateFileW (Address: 0x18008af30)
- DefineDosDeviceW (Address: 0x18008af28)
- DeleteFileA (Address: 0x18008af20)
- DeleteFileW (Address: 0x18008af18)
- DeleteVolumeMountPointW (Address: 0x18008af10)
- FileTimeToLocalFileTime (Address: 0x18008af08)
- FindClose (Address: 0x18008af00)
- FindCloseChangeNotification (Address: 0x18008aef8)
- FindFirstChangeNotificationA (Address: 0x18008aef0)
- FindFirstChangeNotificationW (Address: 0x18008aee8)
- FindFirstFileA (Address: 0x18008aee0)
- FindFirstFileExA (Address: 0x18008aed8)
- FindFirstFileExW (Address: 0x18008aed0)
- FindFirstFileNameW (Address: 0x18008aec8)
- FindFirstFileW (Address: 0x18008aec0)
- FindFirstVolumeW (Address: 0x18008aeb8)
- FindNextChangeNotification (Address: 0x18008aeb0)
- FindNextFileA (Address: 0x18008aea8)
- FindNextFileNameW (Address: 0x18008aea0)
- FindNextFileW (Address: 0x18008ae98)
- FindNextVolumeW (Address: 0x18008b050)
- FindVolumeClose (Address: 0x18008ae88)
- FlushFileBuffers (Address: 0x18008ae68)
- GetDiskFreeSpaceA (Address: 0x18008ae58)
- GetDiskFreeSpaceExA (Address: 0x18008ae50)
- GetDiskFreeSpaceExW (Address: 0x18008ae48)
- GetDiskFreeSpaceW (Address: 0x18008b058)
- GetDriveTypeA (Address: 0x18008b048)
- GetDriveTypeW (Address: 0x18008b040)
- GetFileAttributesA (Address: 0x18008b038)
- GetFileAttributesExA (Address: 0x18008b028)
- GetFileAttributesExW (Address: 0x18008b020)
- GetFileAttributesW (Address: 0x18008b018)
- GetFileInformationByHandle (Address: 0x18008b008)
- GetFileSize (Address: 0x18008b000)
- GetFileSizeEx (Address: 0x18008aff8)
- GetFileTime (Address: 0x18008ae90)
- GetFileType (Address: 0x18008ae80)
- GetFinalPathNameByHandleA (Address: 0x18008ae78)
- GetFinalPathNameByHandleW (Address: 0x18008ae70)
- GetFullPathNameA (Address: 0x18008ae60)
- GetFullPathNameW (Address: 0x18008ae40)
- GetLogicalDriveStringsW (Address: 0x18008ae38)
- GetTempFileNameW (Address: 0x18008ae30)
- GetVolumeInformationByHandleW (Address: 0x18008ae28)
- GetVolumeInformationW (Address: 0x18008ae20)
- GetVolumePathNameW (Address: 0x18008ae18)
- LocalFileTimeToFileTime (Address: 0x18008b010)
- LockFile (Address: 0x18008b030)
- LockFileEx (Address: 0x18008af58)
- QueryDosDeviceW (Address: 0x18008af60)
- ReadFile (Address: 0x18008af68)
- ReadFileEx (Address: 0x18008af70)
- ReadFileScatter (Address: 0x18008af78)
- RemoveDirectoryA (Address: 0x18008af80)
- RemoveDirectoryW (Address: 0x18008af88)
- SetEndOfFile (Address: 0x18008af90)
- SetFileAttributesA (Address: 0x18008af98)
- SetFileAttributesW (Address: 0x18008afa0)
- SetFileInformationByHandle (Address: 0x18008afa8)
- SetFilePointer (Address: 0x18008afb0)
- SetFilePointerEx (Address: 0x18008afb8)
- SetFileTime (Address: 0x18008afc0)
- SetFileValidData (Address: 0x18008afc8)
- UnlockFile (Address: 0x18008afd0)
- UnlockFileEx (Address: 0x18008afd8)
- WriteFile (Address: 0x18008afe0)
- WriteFileEx (Address: 0x18008afe8)
- WriteFileGather (Address: 0x18008aff0)
api-ms-win-core-file-l1-2-0.dll
- CreateFile2 (Address: 0x18008b078)
- GetTempPathW (Address: 0x18008b070)
- GetVolumePathNamesForVolumeNameW (Address: 0x18008b068)
api-ms-win-core-file-l1-2-1.dll
- GetCompressedFileSizeA (Address: 0x18008b098)
- GetCompressedFileSizeW (Address: 0x18008b088)
- SetFileIoOverlappedRange (Address: 0x18008b090)
api-ms-win-core-file-l1-2-2.dll
- FindFirstStreamW (Address: 0x18008b0c0)
- GetTempFileNameA (Address: 0x18008b0b8)
- GetTempPathA (Address: 0x18008b0a8)
- GetVolumeInformationA (Address: 0x18008b0b0)
api-ms-win-core-file-l1-2-3.dll
- GetTempPath2A (Address: 0x18008b0d8)
- GetTempPath2W (Address: 0x18008b0d0)
api-ms-win-core-file-l1-2-5.dll
- CreateDirectory2A (Address: 0x18008b0f8)
- CreateDirectory2W (Address: 0x18008b100)
- CreateFile3 (Address: 0x18008b0f0)
- DeleteFile2A (Address: 0x18008b0e8)
- DeleteFile2W (Address: 0x18008b118)
- RemoveDirectory2A (Address: 0x18008b108)
- RemoveDirectory2W (Address: 0x18008b110)
api-ms-win-core-file-l2-1-0.dll
- CopyFile2 (Address: 0x18008b168)
- CopyFileExW (Address: 0x18008b150)
- CreateDirectoryExW (Address: 0x18008b128)
- CreateHardLinkW (Address: 0x18008b178)
- CreateSymbolicLinkW (Address: 0x18008b158)
- GetFileInformationByHandleEx (Address: 0x18008b160)
- MoveFileExW (Address: 0x18008b140)
- MoveFileWithProgressW (Address: 0x18008b130)
- ReadDirectoryChangesW (Address: 0x18008b138)
- ReOpenFile (Address: 0x18008b148)
- ReplaceFileW (Address: 0x18008b170)
api-ms-win-core-file-l2-1-1.dll
- OpenFileById (Address: 0x18008b188)
api-ms-win-core-file-l2-1-2.dll
- CopyFileW (Address: 0x18008b198)
- CreateHardLinkA (Address: 0x18008b1a0)
api-ms-win-core-file-l2-1-3.dll
- ReadDirectoryChangesExW (Address: 0x18008b1b0)
api-ms-win-core-file-l2-1-4.dll
- GetFileInformationByName (Address: 0x18008b1c0)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x18008b1d0)
- DuplicateHandle (Address: 0x18008b1e0)
- GetHandleInformation (Address: 0x18008b1e8)
- SetHandleInformation (Address: 0x18008b1d8)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeaps (Address: 0x18008b258)
- HeapAlloc (Address: 0x18008b240)
- HeapCompact (Address: 0x18008b210)
- HeapCreate (Address: 0x18008b238)
- HeapDestroy (Address: 0x18008b218)
- HeapFree (Address: 0x18008b248)
- HeapLock (Address: 0x18008b230)
- HeapQueryInformation (Address: 0x18008b220)
- HeapReAlloc (Address: 0x18008b250)
- HeapSetInformation (Address: 0x18008b208)
- HeapUnlock (Address: 0x18008b228)
- HeapValidate (Address: 0x18008b1f8)
- HeapWalk (Address: 0x18008b200)
api-ms-win-core-heap-l2-1-0.dll
- LocalFree (Address: 0x18008b268)
api-ms-win-core-heap-obsolete-l1-1-0.dll
- GlobalFlags (Address: 0x18008b2a0)
- GlobalHandle (Address: 0x18008b2b0)
- GlobalLock (Address: 0x18008b2a8)
- GlobalReAlloc (Address: 0x18008b278)
- GlobalSize (Address: 0x18008b290)
- GlobalUnlock (Address: 0x18008b298)
- LocalFlags (Address: 0x18008b280)
- LocalSize (Address: 0x18008b288)
api-ms-win-core-io-l1-1-0.dll
- CancelIoEx (Address: 0x18008b2d8)
- CreateIoCompletionPort (Address: 0x18008b2c0)
- DeviceIoControl (Address: 0x18008b2c8)
- GetOverlappedResult (Address: 0x18008b2d0)
- GetQueuedCompletionStatus (Address: 0x18008b2e8)
- GetQueuedCompletionStatusEx (Address: 0x18008b2f0)
- PostQueuedCompletionStatus (Address: 0x18008b2e0)
api-ms-win-core-io-l1-1-1.dll
- CancelIo (Address: 0x18008b308)
- CancelSynchronousIo (Address: 0x18008b300)
api-ms-win-core-job-l1-1-0.dll
- IsProcessInJob (Address: 0x18008b318)
api-ms-win-core-largeinteger-l1-1-0.dll
- MulDiv (Address: 0x18008b328)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x18008b358)
- EnumResourceLanguagesExA (Address: 0x18008b398)
- EnumResourceLanguagesExW (Address: 0x18008b388)
- EnumResourceNamesExA (Address: 0x18008b360)
- EnumResourceNamesExW (Address: 0x18008b348)
- EnumResourceTypesExA (Address: 0x18008b390)
- EnumResourceTypesExW (Address: 0x18008b380)
- FindResourceExW (Address: 0x18008b340)
- FindStringOrdinal (Address: 0x18008b3b0)
- FreeLibrary (Address: 0x18008b370)
- FreeLibraryAndExitThread (Address: 0x18008b3d8)
- FreeResource (Address: 0x18008b3b8)
- GetModuleFileNameA (Address: 0x18008b3a8)
- GetModuleFileNameW (Address: 0x18008b3d0)
- GetModuleHandleA (Address: 0x18008b3c8)
- GetModuleHandleExA (Address: 0x18008b3f0)
- GetModuleHandleExW (Address: 0x18008b3a0)
- GetModuleHandleW (Address: 0x18008b338)
- GetProcAddress (Address: 0x18008b378)
- LoadLibraryExA (Address: 0x18008b3c0)
- LoadLibraryExW (Address: 0x18008b3e8)
- LoadResource (Address: 0x18008b3e0)
- LockResource (Address: 0x18008b350)
- SizeofResource (Address: 0x18008b368)
api-ms-win-core-libraryloader-l1-2-1.dll
- FindResourceW (Address: 0x18008b410)
- LoadLibraryA (Address: 0x18008b408)
- LoadLibraryW (Address: 0x18008b400)
api-ms-win-core-libraryloader-l1-2-2.dll
- EnumResourceNamesW (Address: 0x18008b420)
api-ms-win-core-libraryloader-l1-2-3.dll
- EnumResourceNamesA (Address: 0x18008b430)
api-ms-win-core-libraryloader-l2-1-0.dll
- LoadPackagedLibrary (Address: 0x18008b440)
api-ms-win-core-localization-l1-2-0.dll
- ConvertDefaultLocale (Address: 0x18008b590)
- EnumSystemLocalesA (Address: 0x18008b568)
- EnumSystemLocalesW (Address: 0x18008b5f0)
- FindNLSString (Address: 0x18008b498)
- FindNLSStringEx (Address: 0x18008b5c0)
- FormatMessageA (Address: 0x18008b4d0)
- FormatMessageW (Address: 0x18008b578)
- GetACP (Address: 0x18008b548)
- GetCalendarInfoEx (Address: 0x18008b458)
- GetCalendarInfoW (Address: 0x18008b460)
- GetCPInfo (Address: 0x18008b4a0)
- GetCPInfoExW (Address: 0x18008b468)
- GetFileMUIInfo (Address: 0x18008b508)
- GetFileMUIPath (Address: 0x18008b4e8)
- GetLocaleInfoA (Address: 0x18008b538)
- GetLocaleInfoEx (Address: 0x18008b4d8)
- GetLocaleInfoW (Address: 0x18008b4f8)
- GetNLSVersion (Address: 0x18008b530)
- GetNLSVersionEx (Address: 0x18008b5d0)
- GetOEMCP (Address: 0x18008b478)
- GetProcessPreferredUILanguages (Address: 0x18008b5d8)
- GetSystemDefaultLangID (Address: 0x18008b540)
- GetSystemDefaultLCID (Address: 0x18008b488)
- GetSystemPreferredUILanguages (Address: 0x18008b550)
- GetThreadLocale (Address: 0x18008b4b8)
- GetThreadPreferredUILanguages (Address: 0x18008b4e0)
- GetThreadUILanguage (Address: 0x18008b598)
- GetUILanguageInfo (Address: 0x18008b520)
- GetUserDefaultLangID (Address: 0x18008b4b0)
- GetUserDefaultLCID (Address: 0x18008b5a8)
- GetUserPreferredUILanguages (Address: 0x18008b518)
- IdnToAscii (Address: 0x18008b4f0)
- IdnToUnicode (Address: 0x18008b4c8)
- IsDBCSLeadByte (Address: 0x18008b5c8)
- IsDBCSLeadByteEx (Address: 0x18008b490)
- IsNLSDefinedString (Address: 0x18008b500)
- IsValidCodePage (Address: 0x18008b560)
- IsValidLanguageGroup (Address: 0x18008b528)
- IsValidLocale (Address: 0x18008b5f8)
- IsValidLocaleName (Address: 0x18008b4a8)
- IsValidNLSVersion (Address: 0x18008b470)
- LCMapStringA (Address: 0x18008b558)
- LCMapStringEx (Address: 0x18008b580)
- LCMapStringW (Address: 0x18008b5e8)
- LocaleNameToLCID (Address: 0x18008b510)
- ResolveLocaleName (Address: 0x18008b570)
- SetCalendarInfoW (Address: 0x18008b588)
- SetLocaleInfoW (Address: 0x18008b5e0)
- SetProcessPreferredUILanguages (Address: 0x18008b5b8)
- SetThreadLocale (Address: 0x18008b480)
- SetThreadPreferredUILanguages (Address: 0x18008b450)
- SetThreadUILanguage (Address: 0x18008b4c0)
- VerLanguageNameA (Address: 0x18008b5a0)
- VerLanguageNameW (Address: 0x18008b5b0)
api-ms-win-core-localization-l2-1-0.dll
- EnumCalendarInfoExEx (Address: 0x18008b638)
- EnumCalendarInfoExW (Address: 0x18008b618)
- EnumCalendarInfoW (Address: 0x18008b648)
- EnumDateFormatsExEx (Address: 0x18008b658)
- EnumDateFormatsExW (Address: 0x18008b608)
- EnumDateFormatsW (Address: 0x18008b650)
- EnumSystemCodePagesW (Address: 0x18008b630)
- EnumTimeFormatsEx (Address: 0x18008b620)
- EnumTimeFormatsW (Address: 0x18008b610)
- GetCurrencyFormatEx (Address: 0x18008b640)
- GetNumberFormatEx (Address: 0x18008b628)
api-ms-win-core-localization-private-l1-1-0.dll
- NlsCheckPolicy (Address: 0x18008b678)
- NlsGetCacheUpdateCount (Address: 0x18008b680)
- NlsUpdateLocale (Address: 0x18008b670)
- NlsUpdateSystemLocale (Address: 0x18008b668)
api-ms-win-core-memory-l1-1-0.dll
- CreateFileMappingW (Address: 0x18008b6e8)
- FlushViewOfFile (Address: 0x18008b700)
- MapViewOfFile (Address: 0x18008b6f0)
- MapViewOfFileEx (Address: 0x18008b6f8)
- OpenFileMappingW (Address: 0x18008b6c0)
- ReadProcessMemory (Address: 0x18008b6b0)
- UnmapViewOfFile (Address: 0x18008b6c8)
- VirtualAlloc (Address: 0x18008b6b8)
- VirtualAllocEx (Address: 0x18008b6a0)
- VirtualFree (Address: 0x18008b6a8)
- VirtualFreeEx (Address: 0x18008b6e0)
- VirtualProtect (Address: 0x18008b690)
- VirtualProtectEx (Address: 0x18008b698)
- VirtualQuery (Address: 0x18008b6d8)
- VirtualQueryEx (Address: 0x18008b708)
- WriteProcessMemory (Address: 0x18008b6d0)
api-ms-win-core-memory-l1-1-1.dll
- CreateFileMappingNumaW (Address: 0x18008b738)
- CreateMemoryResourceNotification (Address: 0x18008b778)
- GetLargePageMinimum (Address: 0x18008b770)
- GetProcessWorkingSetSize (Address: 0x18008b780)
- GetProcessWorkingSetSizeEx (Address: 0x18008b758)
- GetSystemFileCacheSize (Address: 0x18008b718)
- GetWriteWatch (Address: 0x18008b750)
- QueryMemoryResourceNotification (Address: 0x18008b730)
- ResetWriteWatch (Address: 0x18008b740)
- SetProcessWorkingSetSize (Address: 0x18008b768)
- SetProcessWorkingSetSizeEx (Address: 0x18008b748)
- SetSystemFileCacheSize (Address: 0x18008b760)
- VirtualLock (Address: 0x18008b720)
- VirtualUnlock (Address: 0x18008b728)
api-ms-win-core-memory-l1-1-2.dll
- AllocateUserPhysicalPages (Address: 0x18008b7b8)
- AllocateUserPhysicalPagesNuma (Address: 0x18008b7c8)
- FreeUserPhysicalPages (Address: 0x18008b7b0)
- GetMemoryErrorHandlingCapabilities (Address: 0x18008b7c0)
- MapUserPhysicalPages (Address: 0x18008b7a0)
- RegisterBadMemoryNotification (Address: 0x18008b7a8)
- UnregisterBadMemoryNotification (Address: 0x18008b790)
- VirtualAllocExNuma (Address: 0x18008b798)
api-ms-win-core-namedpipe-l1-1-0.dll
- ConnectNamedPipe (Address: 0x18008b7f8)
- CreateNamedPipeW (Address: 0x18008b7f0)
- CreatePipe (Address: 0x18008b7e0)
- DisconnectNamedPipe (Address: 0x18008b800)
- GetNamedPipeClientComputerNameW (Address: 0x18008b7d8)
- PeekNamedPipe (Address: 0x18008b7e8)
- SetNamedPipeHandleState (Address: 0x18008b818)
- TransactNamedPipe (Address: 0x18008b810)
- WaitNamedPipeW (Address: 0x18008b808)
api-ms-win-core-namedpipe-l1-2-1.dll
- GetNamedPipeHandleStateW (Address: 0x18008b828)
api-ms-win-core-namedpipe-l1-2-2.dll
- CallNamedPipeW (Address: 0x18008b838)
api-ms-win-core-namespace-l1-1-0.dll
- AddSIDToBoundaryDescriptor (Address: 0x18008b860)
- ClosePrivateNamespace (Address: 0x18008b848)
- CreateBoundaryDescriptorW (Address: 0x18008b870)
- CreatePrivateNamespaceW (Address: 0x18008b868)
- DeleteBoundaryDescriptor (Address: 0x18008b858)
- OpenPrivateNamespaceW (Address: 0x18008b850)
api-ms-win-core-normalization-l1-1-0.dll
- GetStringScripts (Address: 0x18008b888)
- IdnToNameprepUnicode (Address: 0x18008b898)
- IsNormalizedString (Address: 0x18008b880)
- NormalizeString (Address: 0x18008b8a0)
- VerifyScripts (Address: 0x18008b890)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsA (Address: 0x18008b908)
- ExpandEnvironmentStringsW (Address: 0x18008b940)
- FreeEnvironmentStringsA (Address: 0x18008b950)
- FreeEnvironmentStringsW (Address: 0x18008b8f8)
- GetCommandLineA (Address: 0x18008b8d8)
- GetCommandLineW (Address: 0x18008b930)
- GetCurrentDirectoryA (Address: 0x18008b8f0)
- GetCurrentDirectoryW (Address: 0x18008b8c8)
- GetEnvironmentStrings (Address: 0x18008b910)
- GetEnvironmentStringsW (Address: 0x18008b8b0)
- GetEnvironmentVariableA (Address: 0x18008b900)
- GetEnvironmentVariableW (Address: 0x18008b918)
- GetStdHandle (Address: 0x18008b938)
- SearchPathW (Address: 0x18008b920)
- SetCurrentDirectoryA (Address: 0x18008b8e0)
- SetCurrentDirectoryW (Address: 0x18008b8b8)
- SetEnvironmentStringsW (Address: 0x18008b8d0)
- SetEnvironmentVariableA (Address: 0x18008b928)
- SetEnvironmentVariableW (Address: 0x18008b948)
- SetStdHandle (Address: 0x18008b8c0)
- SetStdHandleEx (Address: 0x18008b8e8)
api-ms-win-core-processenvironment-l1-2-0.dll
- NeedCurrentDirectoryForExePathA (Address: 0x18008b968)
- NeedCurrentDirectoryForExePathW (Address: 0x18008b970)
- SearchPathA (Address: 0x18008b960)
api-ms-win-core-processsnapshot-l1-1-0.dll
- PssCaptureSnapshot (Address: 0x18008b9c0)
- PssDuplicateSnapshot (Address: 0x18008b980)
- PssFreeSnapshot (Address: 0x18008b9a0)
- PssQuerySnapshot (Address: 0x18008b9c8)
- PssWalkMarkerCreate (Address: 0x18008b9b0)
- PssWalkMarkerFree (Address: 0x18008b990)
- PssWalkMarkerGetPosition (Address: 0x18008b998)
- PssWalkMarkerSeekToBeginning (Address: 0x18008b9a8)
- PssWalkMarkerSetPosition (Address: 0x18008b988)
- PssWalkSnapshot (Address: 0x18008b9b8)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateProcessA (Address: 0x18008bab0)
- CreateProcessW (Address: 0x18008baa8)
- CreateRemoteThread (Address: 0x18008bad8)
- CreateRemoteThreadEx (Address: 0x18008ba50)
- DeleteProcThreadAttributeList (Address: 0x18008baf0)
- GetExitCodeProcess (Address: 0x18008ba40)
- GetExitCodeThread (Address: 0x18008ba58)
- GetPriorityClass (Address: 0x18008ba98)
- GetProcessId (Address: 0x18008ba10)
- GetProcessIdOfThread (Address: 0x18008ba20)
- GetProcessTimes (Address: 0x18008bac8)
- GetProcessVersion (Address: 0x18008ba08)
- GetStartupInfoW (Address: 0x18008ba60)
- GetThreadId (Address: 0x18008baf8)
- GetThreadPriority (Address: 0x18008ba78)
- GetThreadPriorityBoost (Address: 0x18008ba48)
- InitializeProcThreadAttributeList (Address: 0x18008bae0)
- OpenProcessToken (Address: 0x18008b9d8)
- OpenThread (Address: 0x18008bad0)
- ProcessIdToSessionId (Address: 0x18008b9e8)
- QueryProcessAffinityUpdateMode (Address: 0x18008bac0)
- QueueUserAPC (Address: 0x18008ba80)
- ResumeThread (Address: 0x18008ba68)
- SetPriorityClass (Address: 0x18008ba30)
- SetProcessAffinityUpdateMode (Address: 0x18008ba70)
- SetProcessShutdownParameters (Address: 0x18008ba18)
- SetThreadPriority (Address: 0x18008b9e0)
- SetThreadPriorityBoost (Address: 0x18008ba90)
- SetThreadStackGuarantee (Address: 0x18008baa0)
- SuspendThread (Address: 0x18008ba00)
- SwitchToThread (Address: 0x18008ba88)
- TerminateProcess (Address: 0x18008ba28)
- TerminateThread (Address: 0x18008b9f0)
- TlsAlloc (Address: 0x18008b9f8)
- TlsFree (Address: 0x18008bab8)
- TlsSetValue (Address: 0x18008ba38)
- UpdateProcThreadAttribute (Address: 0x18008bae8)
api-ms-win-core-processthreads-l1-1-1.dll
- FlushInstructionCache (Address: 0x18008bb38)
- GetProcessHandleCount (Address: 0x18008bb50)
- GetProcessMitigationPolicy (Address: 0x18008bb30)
- GetThreadContext (Address: 0x18008bb48)
- GetThreadIdealProcessorEx (Address: 0x18008bb28)
- GetThreadTimes (Address: 0x18008bb58)
- IsProcessorFeaturePresent (Address: 0x18008bb10)
- OpenProcess (Address: 0x18008bb40)
- SetProcessMitigationPolicy (Address: 0x18008bb18)
- SetThreadContext (Address: 0x18008bb20)
- SetThreadIdealProcessorEx (Address: 0x18008bb08)
api-ms-win-core-processthreads-l1-1-2.dll
- GetProcessPriorityBoost (Address: 0x18008bb88)
- GetSystemTimes (Address: 0x18008bb68)
- GetThreadInformation (Address: 0x18008bb90)
- GetThreadIOPendingFlag (Address: 0x18008bb70)
- SetProcessPriorityBoost (Address: 0x18008bb80)
- SetThreadInformation (Address: 0x18008bb78)
api-ms-win-core-processthreads-l1-1-3.dll
- GetProcessInformation (Address: 0x18008bba8)
- GetProcessShutdownParameters (Address: 0x18008bbb8)
- SetProcessInformation (Address: 0x18008bbb0)
- SetThreadIdealProcessor (Address: 0x18008bba0)
api-ms-win-core-processtopology-l1-1-0.dll
- GetProcessGroupAffinity (Address: 0x18008bbc8)
- GetThreadGroupAffinity (Address: 0x18008bbd8)
- SetThreadGroupAffinity (Address: 0x18008bbd0)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x18008bbf0)
- QueryPerformanceFrequency (Address: 0x18008bbe8)
api-ms-win-core-psapi-ansi-l1-1-0.dll
- K32EnumPageFilesA (Address: 0x18008bc30)
- K32GetDeviceDriverBaseNameA (Address: 0x18008bc20)
- K32GetDeviceDriverFileNameA (Address: 0x18008bc08)
- K32GetMappedFileNameA (Address: 0x18008bc10)
- K32GetModuleBaseNameA (Address: 0x18008bc00)
- K32GetModuleFileNameExA (Address: 0x18008bc38)
- K32GetProcessImageFileNameA (Address: 0x18008bc18)
- QueryFullProcessImageNameA (Address: 0x18008bc28)
api-ms-win-core-psapi-l1-1-0.dll
- K32EmptyWorkingSet (Address: 0x18008bcb8)
- K32EnumDeviceDrivers (Address: 0x18008bc88)
- K32EnumPageFilesW (Address: 0x18008bcd0)
- K32EnumProcesses (Address: 0x18008bca8)
- K32EnumProcessModules (Address: 0x18008bce0)
- K32EnumProcessModulesEx (Address: 0x18008bc48)
- K32GetDeviceDriverBaseNameW (Address: 0x18008bc60)
- K32GetDeviceDriverFileNameW (Address: 0x18008bc90)
- K32GetMappedFileNameW (Address: 0x18008bce8)
- K32GetModuleBaseNameW (Address: 0x18008bc80)
- K32GetModuleFileNameExW (Address: 0x18008bc98)
- K32GetModuleInformation (Address: 0x18008bc78)
- K32GetPerformanceInfo (Address: 0x18008bcc8)
- K32GetProcessImageFileNameW (Address: 0x18008bcc0)
- K32GetProcessMemoryInfo (Address: 0x18008bc58)
- K32GetWsChanges (Address: 0x18008bc70)
- K32GetWsChangesEx (Address: 0x18008bca0)
- K32InitializeProcessForWsWatch (Address: 0x18008bc68)
- K32QueryWorkingSet (Address: 0x18008bcb0)
- K32QueryWorkingSetEx (Address: 0x18008bc50)
- QueryFullProcessImageNameW (Address: 0x18008bcd8)
api-ms-win-core-realtime-l1-1-0.dll
- QueryIdleProcessorCycleTime (Address: 0x18008bcf8)
- QueryIdleProcessorCycleTimeEx (Address: 0x18008bd00)
- QueryProcessCycleTime (Address: 0x18008bd08)
- QueryThreadCycleTime (Address: 0x18008bd18)
- QueryUnbiasedInterruptTime (Address: 0x18008bd10)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x18008be50)
- RegCopyTreeW (Address: 0x18008bde0)
- RegCreateKeyExA (Address: 0x18008bd70)
- RegCreateKeyExW (Address: 0x18008bd80)
- RegDeleteKeyExA (Address: 0x18008be60)
- RegDeleteKeyExW (Address: 0x18008bd30)
- RegDeleteTreeA (Address: 0x18008bdb8)
- RegDeleteTreeW (Address: 0x18008bdb0)
- RegDeleteValueA (Address: 0x18008be30)
- RegDeleteValueW (Address: 0x18008be20)
- RegDisablePredefinedCacheEx (Address: 0x18008bd58)
- RegEnumKeyExA (Address: 0x18008be58)
- RegEnumKeyExW (Address: 0x18008bd98)
- RegEnumValueA (Address: 0x18008be18)
- RegEnumValueW (Address: 0x18008be70)
- RegFlushKey (Address: 0x18008bd78)
- RegGetKeySecurity (Address: 0x18008bd38)
- RegGetValueA (Address: 0x18008bd40)
- RegGetValueW (Address: 0x18008be38)
- RegLoadAppKeyW (Address: 0x18008bdc0)
- RegLoadKeyA (Address: 0x18008bde8)
- RegLoadKeyW (Address: 0x18008be00)
- RegLoadMUIStringA (Address: 0x18008bd60)
- RegLoadMUIStringW (Address: 0x18008bdc8)
- RegNotifyChangeKeyValue (Address: 0x18008bd48)
- RegOpenCurrentUser (Address: 0x18008be40)
- RegOpenKeyExA (Address: 0x18008be08)
- RegOpenKeyExW (Address: 0x18008be48)
- RegOpenUserClassesRoot (Address: 0x18008bd90)
- RegQueryInfoKeyA (Address: 0x18008bdf8)
- RegQueryInfoKeyW (Address: 0x18008bd28)
- RegQueryValueExA (Address: 0x18008bd68)
- RegQueryValueExW (Address: 0x18008be68)
- RegRestoreKeyA (Address: 0x18008be28)
- RegRestoreKeyW (Address: 0x18008be10)
- RegSaveKeyExA (Address: 0x18008bd50)
- RegSaveKeyExW (Address: 0x18008bda8)
- RegSetKeySecurity (Address: 0x18008bda0)
- RegSetValueExA (Address: 0x18008bdd8)
- RegSetValueExW (Address: 0x18008bdd0)
- RegUnLoadKeyA (Address: 0x18008bd88)
- RegUnLoadKeyW (Address: 0x18008bdf0)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlAddFunctionTable (Address: 0x18008beb0)
- RtlCaptureContext (Address: 0x18008bea8)
- RtlCompareMemory (Address: 0x18008be80)
- RtlDeleteFunctionTable (Address: 0x18008be90)
- RtlInstallFunctionTableCallback (Address: 0x18008bea0)
- RtlLookupFunctionEntry (Address: 0x18008bed8)
- RtlPcToFileHeader (Address: 0x18008bec0)
- RtlRaiseException (Address: 0x18008be88)
- RtlRestoreContext (Address: 0x18008bed0)
- RtlUnwind (Address: 0x18008bec8)
- RtlUnwindEx (Address: 0x18008be98)
- RtlVirtualUnwind (Address: 0x18008beb8)
api-ms-win-core-rtlsupport-l1-2-2.dll
- RtlVirtualUnwind2 (Address: 0x18008bee8)
api-ms-win-core-sidebyside-l1-1-0.dll
- ActivateActCtx (Address: 0x18008bf20)
- AddRefActCtx (Address: 0x18008bf00)
- CreateActCtxW (Address: 0x18008bf18)
- DeactivateActCtx (Address: 0x18008bf38)
- FindActCtxSectionGuid (Address: 0x18008bf28)
- FindActCtxSectionStringW (Address: 0x18008bf30)
- GetCurrentActCtx (Address: 0x18008bf40)
- QueryActCtxSettingsW (Address: 0x18008bf48)
- QueryActCtxW (Address: 0x18008bef8)
- ReleaseActCtx (Address: 0x18008bf10)
- ZombifyActCtx (Address: 0x18008bf08)
api-ms-win-core-string-l1-1-0.dll
- CompareStringEx (Address: 0x18008bf68)
- CompareStringOrdinal (Address: 0x18008bf80)
- CompareStringW (Address: 0x18008bf88)
- FoldStringW (Address: 0x18008bf78)
- GetStringTypeExW (Address: 0x18008bf90)
- GetStringTypeW (Address: 0x18008bf58)
- MultiByteToWideChar (Address: 0x18008bf70)
- WideCharToMultiByte (Address: 0x18008bf60)
api-ms-win-core-synch-l1-1-0.dll
- CancelWaitableTimer (Address: 0x18008bff8)
- CreateEventA (Address: 0x18008c000)
- CreateEventExA (Address: 0x18008c008)
- CreateEventExW (Address: 0x18008c010)
- CreateEventW (Address: 0x18008c018)
- CreateMutexA (Address: 0x18008c020)
- CreateMutexExA (Address: 0x18008c028)
- CreateMutexExW (Address: 0x18008c030)
- CreateMutexW (Address: 0x18008c038)
- CreateSemaphoreExW (Address: 0x18008c040)
- CreateWaitableTimerExW (Address: 0x18008c050)
- DeleteCriticalSection (Address: 0x18008bfb0)
- EnterCriticalSection (Address: 0x18008bfa0)
- InitializeCriticalSection (Address: 0x18008bfb8)
- InitializeCriticalSectionAndSpinCount (Address: 0x18008c058)
- InitializeCriticalSectionEx (Address: 0x18008c060)
- LeaveCriticalSection (Address: 0x18008bfa8)
- OpenEventA (Address: 0x18008c068)
- OpenEventW (Address: 0x18008c070)
- OpenMutexW (Address: 0x18008c078)
- OpenSemaphoreW (Address: 0x18008c080)
- OpenWaitableTimerW (Address: 0x18008c088)
- ReleaseMutex (Address: 0x18008c090)
- ReleaseSemaphore (Address: 0x18008c048)
- ResetEvent (Address: 0x18008bff0)
- SetEvent (Address: 0x18008bfe8)
- SetWaitableTimer (Address: 0x18008bfe0)
- SleepEx (Address: 0x18008bfd8)
- WaitForMultipleObjectsEx (Address: 0x18008bfd0)
- WaitForSingleObject (Address: 0x18008bfc8)
- WaitForSingleObjectEx (Address: 0x18008bfc0)
api-ms-win-core-synch-l1-2-0.dll
- DeleteSynchronizationBarrier (Address: 0x18008c0b0)
- EnterSynchronizationBarrier (Address: 0x18008c0c0)
- InitializeSynchronizationBarrier (Address: 0x18008c0a8)
- InitOnceExecuteOnce (Address: 0x18008c0a0)
- SignalObjectAndWait (Address: 0x18008c0b8)
api-ms-win-core-synch-l1-2-1.dll
- CreateSemaphoreW (Address: 0x18008c0d8)
- WaitForMultipleObjects (Address: 0x18008c0d0)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetComputerNameExA (Address: 0x18008c138)
- GetComputerNameExW (Address: 0x18008c110)
- GetLocalTime (Address: 0x18008c0f0)
- GetLogicalProcessorInformation (Address: 0x18008c160)
- GetLogicalProcessorInformationEx (Address: 0x18008c148)
- GetSystemInfo (Address: 0x18008c108)
- GetSystemTime (Address: 0x18008c140)
- GetSystemTimeAdjustment (Address: 0x18008c128)
- GetSystemTimeAsFileTime (Address: 0x18008c130)
- GetVersion (Address: 0x18008c100)
- GetVersionExA (Address: 0x18008c118)
- GetVersionExW (Address: 0x18008c120)
- GetWindowsDirectoryA (Address: 0x18008c0e8)
- GetWindowsDirectoryW (Address: 0x18008c0f8)
- GlobalMemoryStatusEx (Address: 0x18008c158)
- SetLocalTime (Address: 0x18008c150)
api-ms-win-core-sysinfo-l1-2-0.dll
- EnumSystemFirmwareTables (Address: 0x18008c190)
- GetNativeSystemInfo (Address: 0x18008c198)
- GetProductInfo (Address: 0x18008c188)
- GetSystemFirmwareTable (Address: 0x18008c178)
- GetSystemTimePreciseAsFileTime (Address: 0x18008c180)
- SetComputerNameExW (Address: 0x18008c1a0)
- SetSystemTime (Address: 0x18008c170)
api-ms-win-core-sysinfo-l1-2-1.dll
- DnsHostnameToComputerNameExW (Address: 0x18008c1c0)
- GetPhysicallyInstalledSystemMemory (Address: 0x18008c1b0)
- SetComputerNameEx2W (Address: 0x18008c1b8)
api-ms-win-core-sysinfo-l1-2-3.dll
- SetComputerNameA (Address: 0x18008c1e0)
- SetComputerNameExA (Address: 0x18008c1d8)
- SetComputerNameW (Address: 0x18008c1d0)
api-ms-win-core-systemtopology-l1-1-0.dll
- GetNumaHighestNodeNumber (Address: 0x18008c1f8)
- GetNumaNodeProcessorMaskEx (Address: 0x18008c1f0)
api-ms-win-core-systemtopology-l1-1-1.dll
- GetNumaProximityNodeEx (Address: 0x18008c208)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
- ChangeTimerQueueTimer (Address: 0x18008c220)
- CreateTimerQueue (Address: 0x18008c248)
- CreateTimerQueueTimer (Address: 0x18008c230)
- DeleteTimerQueue (Address: 0x18008c228)
- DeleteTimerQueueEx (Address: 0x18008c240)
- DeleteTimerQueueTimer (Address: 0x18008c238)
- QueueUserWorkItem (Address: 0x18008c250)
- UnregisterWaitEx (Address: 0x18008c218)
api-ms-win-core-threadpool-private-l1-1-0.dll
- RegisterWaitForSingleObjectEx (Address: 0x18008c260)
api-ms-win-core-timezone-l1-1-0.dll
- FileTimeToSystemTime (Address: 0x18008c2b0)
- GetDynamicTimeZoneInformation (Address: 0x18008c2a0)
- GetTimeZoneInformation (Address: 0x18008c278)
- GetTimeZoneInformationForYear (Address: 0x18008c298)
- SetDynamicTimeZoneInformation (Address: 0x18008c288)
- SetTimeZoneInformation (Address: 0x18008c290)
- SystemTimeToFileTime (Address: 0x18008c270)
- SystemTimeToTzSpecificLocalTime (Address: 0x18008c280)
- TzSpecificLocalTimeToSystemTime (Address: 0x18008c2a8)
api-ms-win-core-util-l1-1-0.dll
- Beep (Address: 0x18008c2c0)
api-ms-win-core-windowserrorreporting-l1-1-0.dll
- GetApplicationRecoveryCallback (Address: 0x18008c308)
- GetApplicationRestartSettings (Address: 0x18008c2d8)
- WerRegisterFile (Address: 0x18008c2e8)
- WerRegisterMemoryBlock (Address: 0x18008c2e0)
- WerRegisterRuntimeExceptionModule (Address: 0x18008c2d0)
- WerUnregisterFile (Address: 0x18008c300)
- WerUnregisterMemoryBlock (Address: 0x18008c2f0)
- WerUnregisterRuntimeExceptionModule (Address: 0x18008c2f8)
api-ms-win-core-windowserrorreporting-l1-1-1.dll
- WerRegisterAdditionalProcess (Address: 0x18008c340)
- WerRegisterCustomMetadata (Address: 0x18008c338)
- WerRegisterExcludedMemoryBlock (Address: 0x18008c328)
- WerUnregisterAdditionalProcess (Address: 0x18008c320)
- WerUnregisterCustomMetadata (Address: 0x18008c330)
- WerUnregisterExcludedMemoryBlock (Address: 0x18008c318)
api-ms-win-core-windowserrorreporting-l1-1-2.dll
- WerRegisterAppLocalDump (Address: 0x18008c358)
- WerUnregisterAppLocalDump (Address: 0x18008c350)
api-ms-win-core-windowserrorreporting-l1-1-3.dll
- RegisterApplicationRestart (Address: 0x18008c370)
- UnregisterApplicationRestart (Address: 0x18008c368)
api-ms-win-core-wow64-l1-1-0.dll
- IsWow64Process (Address: 0x18008c380)
- Wow64DisableWow64FsRedirection (Address: 0x18008c390)
- Wow64EnableWow64FsRedirection (Address: 0x18008c398)
- Wow64RevertWow64FsRedirection (Address: 0x18008c388)
api-ms-win-core-wow64-l1-1-1.dll
- GetSystemWow64Directory2W (Address: 0x18008c3a8)
- GetSystemWow64DirectoryA (Address: 0x18008c3b8)
- GetSystemWow64DirectoryW (Address: 0x18008c3c0)
- IsWow64Process2 (Address: 0x18008c3b0)
api-ms-win-core-wow64-l1-1-3.dll
- Wow64GetThreadContext (Address: 0x18008c3d8)
- Wow64SetThreadContext (Address: 0x18008c3e0)
- Wow64SuspendThread (Address: 0x18008c3d0)
api-ms-win-core-xstate-l2-1-0.dll
- CopyContext (Address: 0x18008c410)
- GetEnabledXStateFeatures (Address: 0x18008c400)
- GetXStateFeaturesMask (Address: 0x18008c418)
- InitializeContext (Address: 0x18008c3f0)
- LocateXStateFeature (Address: 0x18008c408)
- SetXStateFeaturesMask (Address: 0x18008c3f8)
api-ms-win-core-xstate-l2-1-1.dll
- InitializeContext2 (Address: 0x18008c428)
api-ms-win-core-xstate-l2-1-2.dll
- EnableProcessOptionalXStateFeatures (Address: 0x18008c438)
- GetThreadEnabledXStateFeatures (Address: 0x18008c440)
api-ms-win-eventing-provider-l1-1-0.dll
- EventRegister (Address: 0x18008c458)
- EventSetInformation (Address: 0x18008c460)
- EventUnregister (Address: 0x18008c468)
- EventWriteTransfer (Address: 0x18008c450)
api-ms-win-security-appcontainer-l1-1-0.dll
- GetAppContainerNamedObjectPath (Address: 0x18008c478)
api-ms-win-security-base-l1-1-0.dll
- AccessCheck (Address: 0x18008c4d0)
- AllocateAndInitializeSid (Address: 0x18008c4c8)
- CreateWellKnownSid (Address: 0x18008c490)
- DuplicateToken (Address: 0x18008c488)
- EqualSid (Address: 0x18008c4a0)
- FreeSid (Address: 0x18008c498)
- GetSidSubAuthority (Address: 0x18008c4b0)
- GetSidSubAuthorityCount (Address: 0x18008c4a8)
- GetTokenInformation (Address: 0x18008c4c0)
- InitializeSid (Address: 0x18008c4b8)
api-ms-win-security-base-l1-2-0.dll
- AddResourceAttributeAce (Address: 0x18008c508)
- AddScopedPolicyIDAce (Address: 0x18008c510)
- CheckTokenCapability (Address: 0x18008c4f8)
- CheckTokenMembershipEx (Address: 0x18008c4e8)
- GetAppContainerAce (Address: 0x18008c500)
- GetCachedSigningLevel (Address: 0x18008c4f0)
- SetCachedSigningLevel (Address: 0x18008c4e0)
KERNELBASE.dll
- AppContainerFreeMemory (Address: 0x18008a628)
- AppContainerLookupMoniker (Address: 0x18008a620)
- AppXCheckPplSupport (Address: 0x18008a5f0)
- AppXGetOSMaxVersionTested (Address: 0x18008a680)
- AppXPostSuccessExtension (Address: 0x18008a608)
- AppXPreCreationExtension (Address: 0x18008a618)
- AppXReleaseAppXContext (Address: 0x18008a5f8)
- AreFileApisANSI (Address: 0x18008a630)
- BaseDllFreeResourceId (Address: 0x18008a760)
- BaseDllMapResourceIdW (Address: 0x18008a768)
- BaseFormatObjectAttributes (Address: 0x18008a590)
- BaseGetNamedObjectDirectory (Address: 0x18008a788)
- BasepAdjustObjectAttributesForPrivateNamespace (Address: 0x18008a6b0)
- BasepNotifyTrackingService (Address: 0x18008a640)
- CheckAllowDecryptedRemoteDestinationPolicy (Address: 0x18008a7b8)
- CheckGroupPolicyEnabled (Address: 0x18008a6c8)
- CheckIsMSIXPackage (Address: 0x18008a670)
- ClosePackageInfo (Address: 0x18008a678)
- CompareStringA (Address: 0x18008a5d0)
- CreateProcessAsUserA (Address: 0x18008a790)
- CreateProcessAsUserW (Address: 0x18008a850)
- CreateProcessInternalA (Address: 0x18008a7a0)
- CreateProcessInternalW (Address: 0x18008a858)
- EnumLanguageGroupLocalesW (Address: 0x18008a648)
- EnumSystemLanguageGroupsW (Address: 0x18008a7f0)
- EnumSystemLocalesEx (Address: 0x18008a7e8)
- EnumUILanguagesW (Address: 0x18008a840)
- FatalAppExitA (Address: 0x18008a7e0)
- FatalAppExitW (Address: 0x18008a7c0)
- GetCalendar (Address: 0x18008a758)
- GetCurrentPackageFullName (Address: 0x18008a668)
- GetEightBitStringToUnicodeStringRoutine (Address: 0x18008a6b8)
- GetEraNameCountedString (Address: 0x18008a830)
- GetLocaleInfoHelper (Address: 0x18008a750)
- GetNamedLocaleHashNode (Address: 0x18008a740)
- GetNamedPipeAttribute (Address: 0x18008a5e8)
- GetPackagedDataForFile (Address: 0x18008a610)
- GetPackageFullName (Address: 0x18008a660)
- GetPackageTargetPlatformProperty (Address: 0x18008a688)
- GetProcAddressForCaller (Address: 0x18008a808)
- GetPtrCalData (Address: 0x18008a6f8)
- GetPtrCalDataArray (Address: 0x18008a6e8)
- GetRegistryExtensionFlags (Address: 0x18008a5b0)
- GetStringTableEntry (Address: 0x18008a6c0)
- GetStringTypeA (Address: 0x18008a778)
- GetSystemDefaultLocaleName (Address: 0x18008a818)
- GetSystemDefaultUILanguage (Address: 0x18008a868)
- GetTargetPlatformContext (Address: 0x18008a690)
- GetUnicodeStringToEightBitSizeRoutine (Address: 0x18008a5e0)
- GetUnicodeStringToEightBitStringRoutine (Address: 0x18008a5d8)
- GetUserDefaultLocaleName (Address: 0x18008a860)
- GetUserDefaultUILanguage (Address: 0x18008a848)
- GetUserOverrideString (Address: 0x18008a6f0)
- GetUserOverrideWord (Address: 0x18008a748)
- GetVolumeNameForVolumeMountPointW (Address: 0x18008a598)
- GlobalAlloc (Address: 0x18008a7c8)
- GlobalFree (Address: 0x18008a5c0)
- HeapSummary (Address: 0x18008a800)
- Internal_EnumCalendarInfo (Address: 0x18008a700)
- Internal_EnumDateFormats (Address: 0x18008a718)
- Internal_EnumLanguageGroupLocales (Address: 0x18008a708)
- Internal_EnumSystemCodePages (Address: 0x18008a710)
- Internal_EnumSystemLanguageGroups (Address: 0x18008a728)
- Internal_EnumTimeFormats (Address: 0x18008a738)
- Internal_EnumUILanguages (Address: 0x18008a720)
- InternalLcidToName (Address: 0x18008a6d8)
- KernelBaseGetGlobalData (Address: 0x18008a5b8)
- LCIDToLocaleName (Address: 0x18008a810)
- LoadStringBaseExW (Address: 0x18008a5c8)
- LocalAlloc (Address: 0x18008a828)
- LocalLock (Address: 0x18008a650)
- LocalReAlloc (Address: 0x18008a798)
- LocalUnlock (Address: 0x18008a770)
- lstrcmpiW (Address: 0x18008a5a0)
- lstrcmpW (Address: 0x18008a5a8)
- lstrcpynA (Address: 0x18008a7a8)
- lstrcpynW (Address: 0x18008a6d0)
- lstrlenA (Address: 0x18008a838)
- lstrlenW (Address: 0x18008a6a0)
- MapViewOfFileExNuma (Address: 0x18008a820)
- MoveFileWithProgressTransactedW (Address: 0x18008a6a8)
- NlsIsUserDefaultLocale (Address: 0x18008a6e0)
- NlsValidateLocale (Address: 0x18008a730)
- NotifyMountMgr (Address: 0x18008a7d8)
- OpenPackageInfoByFullNameForUser (Address: 0x18008a698)
- OpenRegKey (Address: 0x18008a588)
- PackageIdFromFullName (Address: 0x18008a658)
- PrivCopyFileExW (Address: 0x18008a638)
- PulseEvent (Address: 0x18008a7d0)
- ReleasePackagedDataForFile (Address: 0x18008a600)
- SetFileApisToANSI (Address: 0x18008a780)
- SetFileApisToOEM (Address: 0x18008a7b0)
- Sleep (Address: 0x18008a7f8)
ntdll.dll
- __C_specific_handler (Address: 0x18008d040)
- __chkstk (Address: 0x18008d050)
- _local_unwind (Address: 0x18008d058)
- _memicmp (Address: 0x18008cb10)
- _stricmp (Address: 0x18008ce18)
- _strnicmp (Address: 0x18008c960)
- _vsnwprintf (Address: 0x18008cfe0)
- _wcsicmp (Address: 0x18008d038)
- _wcslwr (Address: 0x18008c5e0)
- _wcsnicmp (Address: 0x18008c950)
- _wtol (Address: 0x18008c5f0)
- atol (Address: 0x18008c768)
- bsearch (Address: 0x18008c670)
- cos (Address: 0x18008d060)
- CsrAllocateCaptureBuffer (Address: 0x18008c788)
- CsrAllocateMessagePointer (Address: 0x18008c7e8)
- CsrCaptureMessageMultiUnicodeStringsInPlace (Address: 0x18008ce58)
- CsrCaptureMessageString (Address: 0x18008cc68)
- CsrClientCallServer (Address: 0x18008ca30)
- CsrFreeCaptureBuffer (Address: 0x18008c7c0)
- DbgPrint (Address: 0x18008cee0)
- DbgPrintEx (Address: 0x18008c730)
- DbgUiGetThreadDebugObject (Address: 0x18008c9f0)
- DbgUiIssueRemoteBreakin (Address: 0x18008ca00)
- EtwEventEnabled (Address: 0x18008c530)
- EtwEventRegister (Address: 0x18008c5d0)
- EtwEventUnregister (Address: 0x18008c5c0)
- EtwEventWrite (Address: 0x18008c5c8)
- EtwEventWriteNoRegistration (Address: 0x18008c840)
- floor (Address: 0x18008d068)
- isdigit (Address: 0x18008ca68)
- LdrAddRefDll (Address: 0x18008c998)
- LdrDisableThreadCalloutsForDll (Address: 0x18008cfc0)
- LdrFindResource_U (Address: 0x18008cd30)
- LdrFindResourceEx_U (Address: 0x18008c630)
- LdrGetDllDirectory (Address: 0x18008c930)
- LdrGetProcedureAddress (Address: 0x18008c8c0)
- LdrLoadDll (Address: 0x18008c868)
- LdrOpenImageFileOptionsKey (Address: 0x18008cbe8)
- LdrQueryImageFileExecutionOptions (Address: 0x18008cfd8)
- LdrQueryImageFileKeyOption (Address: 0x18008cbd8)
- LdrResFindResourceDirectory (Address: 0x18008c6b0)
- LdrResSearchResource (Address: 0x18008cea0)
- LdrSetDllDirectory (Address: 0x18008cd28)
- LdrSetDllManifestProber (Address: 0x18008cfe8)
- LdrUnloadDll (Address: 0x18008c880)
- memcmp (Address: 0x18008d070)
- memcpy (Address: 0x18008d078)
- memmove (Address: 0x18008d048)
- memmove_s (Address: 0x18008c5f8)
- memset (Address: 0x18008d080)
- NlsMbCodePageTag (Address: 0x18008ce78)
- NtAddAtomEx (Address: 0x18008cac8)
- NtAllocateVirtualMemory (Address: 0x18008cc78)
- NtApphelpCacheControl (Address: 0x18008cf00)
- NtAssignProcessToJobObject (Address: 0x18008cb98)
- NtClearEvent (Address: 0x18008ced0)
- NtClose (Address: 0x18008c990)
- NtCreateEvent (Address: 0x18008c918)
- NtCreateFile (Address: 0x18008cb48)
- NtCreateJobObject (Address: 0x18008cb88)
- NtCreateJobSet (Address: 0x18008cb68)
- NtCreateKey (Address: 0x18008cb40)
- NtCreateMailslotFile (Address: 0x18008ccf0)
- NtCreateSection (Address: 0x18008c728)
- NtDeleteAtom (Address: 0x18008cad0)
- NtDeleteValueKey (Address: 0x18008c588)
- NtDeviceIoControlFile (Address: 0x18008cd98)
- NtEnumerateKey (Address: 0x18008c540)
- NtEnumerateValueKey (Address: 0x18008cc20)
- NtFindAtom (Address: 0x18008cab0)
- NtFlushKey (Address: 0x18008cb08)
- NtFreeVirtualMemory (Address: 0x18008cc10)
- NtFsControlFile (Address: 0x18008c988)
- NtGetDevicePowerState (Address: 0x18008cd60)
- NtInitiatePowerAction (Address: 0x18008cd58)
- NtIsSystemResumeAutomatic (Address: 0x18008cd40)
- NtLockFile (Address: 0x18008cc58)
- NtMapUserPhysicalPagesScatter (Address: 0x18008c660)
- NtMapViewOfSection (Address: 0x18008c690)
- NtOpenFile (Address: 0x18008c980)
- NtOpenJobObject (Address: 0x18008cba8)
- NtOpenKey (Address: 0x18008c888)
- NtOpenProcessToken (Address: 0x18008c8d0)
- NtOpenThreadToken (Address: 0x18008c838)
- NtPowerInformation (Address: 0x18008cd50)
- NtProtectVirtualMemory (Address: 0x18008cce0)
- NtQueryAttributesFile (Address: 0x18008cde8)
- NtQueryDirectoryFile (Address: 0x18008cd10)
- NtQueryEaFile (Address: 0x18008cbc8)
- NtQueryEvent (Address: 0x18008c7c8)
- NtQueryFullAttributesFile (Address: 0x18008ce00)
- NtQueryInformationAtom (Address: 0x18008cab8)
- NtQueryInformationFile (Address: 0x18008c9a8)
- NtQueryInformationJobObject (Address: 0x18008cb80)
- NtQueryInformationProcess (Address: 0x18008ca18)
- NtQueryInformationThread (Address: 0x18008ce08)
- NtQueryInformationToken (Address: 0x18008c858)
- NtQueryInstallUILanguage (Address: 0x18008c5b8)
- NtQueryLicenseValue (Address: 0x18008c5e8)
- NtQuerySection (Address: 0x18008cc08)
- NtQuerySecurityObject (Address: 0x18008cbd0)
- NtQuerySystemEnvironmentValueEx (Address: 0x18008cd78)
- NtQuerySystemInformation (Address: 0x18008d020)
- NtQuerySystemInformationEx (Address: 0x18008cd90)
- NtQueryTimerResolution (Address: 0x18008ce28)
- NtQueryValueKey (Address: 0x18008c828)
- NtQueryVirtualMemory (Address: 0x18008ccd0)
- NtQueryVolumeInformationFile (Address: 0x18008c7b0)
- NtQueryWnfStateData (Address: 0x18008cd48)
- NtRaiseHardError (Address: 0x18008c7d8)
- NtReadFile (Address: 0x18008cc50)
- NtReadVirtualMemory (Address: 0x18008ce98)
- NtReplacePartitionUnit (Address: 0x18008c820)
- NtSetEaFile (Address: 0x18008cbb8)
- NtSetInformationDebugObject (Address: 0x18008c9e8)
- NtSetInformationFile (Address: 0x18008c9b8)
- NtSetInformationJobObject (Address: 0x18008cb78)
- NtSetInformationProcess (Address: 0x18008cbf8)
- NtSetInformationThread (Address: 0x18008c870)
- NtSetInformationToken (Address: 0x18008cbe0)
- NtSetSecurityObject (Address: 0x18008cbc0)
- NtSetSystemEnvironmentValueEx (Address: 0x18008cd70)
- NtSetSystemInformation (Address: 0x18008ca08)
- NtSetThreadExecutionState (Address: 0x18008cd68)
- NtSetTimerResolution (Address: 0x18008ce20)
- NtSetValueKey (Address: 0x18008c590)
- NtSetVolumeInformationFile (Address: 0x18008cd88)
- NtTerminateJobObject (Address: 0x18008cba0)
- NtTerminateProcess (Address: 0x18008c568)
- NtUnlockFile (Address: 0x18008cc40)
- NtUnmapViewOfSection (Address: 0x18008c6a0)
- NtWaitForMultipleObjects (Address: 0x18008cec8)
- NtWaitForSingleObject (Address: 0x18008c910)
- NtWriteFile (Address: 0x18008cc18)
- RtlAcquirePrivilege (Address: 0x18008cb90)
- RtlAcquireSRWLockExclusive (Address: 0x18008c860)
- RtlActivateActivationContext (Address: 0x18008c6f8)
- RtlActivateActivationContextUnsafeFast (Address: 0x18008c9d8)
- RtlAddAccessAllowedAce (Address: 0x18008d010)
- RtlAddAtomToAtomTable (Address: 0x18008cac0)
- RtlAddIntegrityLabelToBoundaryDescriptor (Address: 0x18008c818)
- RtlAddRefActivationContext (Address: 0x18008c758)
- RtlAllocateAndInitializeSid (Address: 0x18008cdd8)
- RtlAllocateHeap (Address: 0x18008d028)
- RtlAnsiStringToUnicodeString (Address: 0x18008c8f8)
- RtlAppendUnicodeStringToString (Address: 0x18008c8b8)
- RtlAppendUnicodeToString (Address: 0x18008c890)
- RtlCharToInteger (Address: 0x18008ca80)
- RtlCompactHeap (Address: 0x18008c968)
- RtlCompareUnicodeString (Address: 0x18008c8e0)
- RtlComputeImportTableHash (Address: 0x18008c678)
- RtlConvertSidToUnicodeString (Address: 0x18008ce38)
- RtlCopyUnicodeString (Address: 0x18008cc60)
- RtlCreateAcl (Address: 0x18008d000)
- RtlCreateActivationContext (Address: 0x18008c688)
- RtlCreateAtomTable (Address: 0x18008cad8)
- RtlCreateBoundaryDescriptor (Address: 0x18008ccd8)
- RtlCreateEnvironment (Address: 0x18008c7b8)
- RtlCreateEnvironmentEx (Address: 0x18008c790)
- RtlCreateQueryDebugBuffer (Address: 0x18008cd08)
- RtlCreateSecurityDescriptor (Address: 0x18008cff0)
- RtlCreateUnicodeString (Address: 0x18008c7a0)
- RtlCreateUnicodeStringFromAsciiz (Address: 0x18008cb50)
- RtlDeactivateActivationContext (Address: 0x18008c748)
- RtlDeactivateActivationContextUnsafeFast (Address: 0x18008c9d0)
- RtlDecodeSystemPointer (Address: 0x18008c668)
- RtlDeleteAtomFromAtomTable (Address: 0x18008cae0)
- RtlDeregisterSecureMemoryCacheCallback (Address: 0x18008c970)
- RtlDeregisterWait (Address: 0x18008ccb8)
- RtlDestroyAtomTable (Address: 0x18008caa8)
- RtlDestroyEnvironment (Address: 0x18008c7a8)
- RtlDestroyQueryDebugBuffer (Address: 0x18008ccf8)
- RtlDetermineDosPathNameType_U (Address: 0x18008c6d8)
- RtlDisableThreadProfiling (Address: 0x18008c650)
- RtlDnsHostNameToComputerName (Address: 0x18008caf8)
- RtlDoesFileExists_U (Address: 0x18008c698)
- RtlDosPathNameToNtPathName_U (Address: 0x18008cc48)
- RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x18008c720)
- RtlDosPathNameToRelativeNtPathName_U (Address: 0x18008cca0)
- RtlEnableThreadProfiling (Address: 0x18008c648)
- RtlEncodeSystemPointer (Address: 0x18008ceb8)
- RtlEnterCriticalSection (Address: 0x18008cb20)
- RtlEqualSid (Address: 0x18008c830)
- RtlEqualString (Address: 0x18008cc28)
- RtlEqualUnicodeString (Address: 0x18008c7f8)
- RtlExitUserProcess (Address: 0x18008c8b0)
- RtlExitUserThread (Address: 0x18008c808)
- RtlFindActivationContextSectionGuid (Address: 0x18008c680)
- RtlFindActivationContextSectionString (Address: 0x18008cd20)
- RtlFlsGetValue (Address: 0x18008ca98)
- RtlFormatCurrentUserKeyPath (Address: 0x18008c848)
- RtlFreeAnsiString (Address: 0x18008c7f0)
- RtlFreeHeap (Address: 0x18008d008)
- RtlFreeOemString (Address: 0x18008c7d0)
- RtlFreeSid (Address: 0x18008cdf0)
- RtlFreeUnicodeString (Address: 0x18008c9e0)
- RtlGetActiveActivationContext (Address: 0x18008c718)
- RtlGetActiveConsoleId (Address: 0x18008c9c0)
- RtlGetAppContainerParent (Address: 0x18008ce48)
- RtlGetAppContainerSidType (Address: 0x18008ce30)
- RtlGetCurrentDirectory_U (Address: 0x18008c7e0)
- RtlGetCurrentServiceSessionId (Address: 0x18008cfa8)
- RtlGetCurrentThreadPrimaryGroup (Address: 0x18008c908)
- RtlGetCurrentTransaction (Address: 0x18008ca10)
- RtlGetDeviceFamilyInfoEnum (Address: 0x18008cee8)
- RtlGetFullPathName_U (Address: 0x18008c740)
- RtlGetFullPathName_UEx (Address: 0x18008cf08)
- RtlGetLengthWithoutLastFullDosOrNtPathElement (Address: 0x18008c738)
- RtlGetLongestNtPathLength (Address: 0x18008cc80)
- RtlGetNativeSystemInformation (Address: 0x18008cf68)
- RtlGetNtSystemRoot (Address: 0x18008cec0)
- RtlGetPersistedStateLocation (Address: 0x18008ca78)
- RtlGetSuiteMask (Address: 0x18008cfb0)
- RtlGetThreadErrorMode (Address: 0x18008cce8)
- RtlGetThreadPreferredUILanguages (Address: 0x18008ce90)
- RtlGetUILanguageInfo (Address: 0x18008c528)
- RtlGetUserInfoHeap (Address: 0x18008c948)
- RtlGetVersion (Address: 0x18008cf98)
- RtlGUIDFromString (Address: 0x18008c600)
- RtlHashUnicodeString (Address: 0x18008cef0)
- RtlImageDirectoryEntryToData (Address: 0x18008ccc8)
- RtlImageNtHeader (Address: 0x18008cfb8)
- RtlImageNtHeaderEx (Address: 0x18008c6d0)
- RtlInitAnsiString (Address: 0x18008ca88)
- RtlInitAnsiStringEx (Address: 0x18008c8f0)
- RtlInitializeCriticalSection (Address: 0x18008ce88)
- RtlInitializeSid (Address: 0x18008c8c8)
- RtlInitString (Address: 0x18008cd80)
- RtlInitUnicodeString (Address: 0x18008cfc8)
- RtlInitUnicodeStringEx (Address: 0x18008c850)
- RtlIntegerToUnicodeString (Address: 0x18008c548)
- RtlIsNameLegalDOS8Dot3 (Address: 0x18008c900)
- RtlIsTextUnicode (Address: 0x18008cc70)
- RtlLCIDToCultureName (Address: 0x18008c5a0)
- RtlLeaveCriticalSection (Address: 0x18008cb38)
- RtlLengthSecurityDescriptor (Address: 0x18008cbb0)
- RtlLockHeap (Address: 0x18008c938)
- RtlLookupAtomInAtomTable (Address: 0x18008cae8)
- RtlMultiAppendUnicodeStringBuffer (Address: 0x18008c750)
- RtlMultiByteToUnicodeN (Address: 0x18008cc90)
- RtlMultiByteToUnicodeSize (Address: 0x18008cc98)
- RtlNtPathNameToDosPathName (Address: 0x18008cf58)
- RtlNtStatusToDosError (Address: 0x18008c9c8)
- RtlNtStatusToDosErrorNoTeb (Address: 0x18008c658)
- RtlOemStringToUnicodeString (Address: 0x18008cdc8)
- RtlpApplyLengthFunction (Address: 0x18008c708)
- RtlpConvertCultureNamesToLCIDs (Address: 0x18008c5b0)
- RtlpConvertLCIDsToCultureNames (Address: 0x18008c538)
- RtlpEnsureBufferSize (Address: 0x18008c700)
- RtlPrefixString (Address: 0x18008cb00)
- RtlPrefixUnicodeString (Address: 0x18008cc88)
- RtlPublishWnfStateData (Address: 0x18008c5d8)
- RtlQueryActivationContextApplicationSettings (Address: 0x18008c710)
- RtlQueryAtomInAtomTable (Address: 0x18008caf0)
- RtlQueryElevationFlags (Address: 0x18008cbf0)
- RtlQueryEnvironmentVariable (Address: 0x18008ce50)
- RtlQueryEnvironmentVariable_U (Address: 0x18008cde0)
- RtlQueryInformationActivationContext (Address: 0x18008c6b8)
- RtlQueryPackageClaims (Address: 0x18008c6e0)
- RtlQueryPackageIdentity (Address: 0x18008c8a0)
- RtlQueryProcessDebugInformation (Address: 0x18008cd00)
- RtlQueryProtectedPolicy (Address: 0x18008c810)
- RtlQueryRegistryValuesEx (Address: 0x18008c8d8)
- RtlQueryThreadProfiling (Address: 0x18008c640)
- RtlQueryWnfStateData (Address: 0x18008cdb0)
- RtlRaiseStatus (Address: 0x18008cc00)
- RtlReadThreadProfilingData (Address: 0x18008c638)
- RtlReAllocateHeap (Address: 0x18008cef8)
- RtlRegisterSecureMemoryCacheCallback (Address: 0x18008c978)
- RtlRegisterWait (Address: 0x18008ccc0)
- RtlReleaseActivationContext (Address: 0x18008c6a8)
- RtlReleasePebLock (Address: 0x18008ceb0)
- RtlReleasePrivilege (Address: 0x18008cb70)
- RtlReleaseRelativeName (Address: 0x18008cca8)
- RtlReleaseSRWLockExclusive (Address: 0x18008c878)
- RtlRunOnceExecuteOnce (Address: 0x18008ce80)
- RtlSetCurrentTransaction (Address: 0x18008ca20)
- RtlSetDaclSecurityDescriptor (Address: 0x18008d018)
- RtlSetEnvironmentStrings (Address: 0x18008cdc0)
- RtlSetEnvironmentVariable (Address: 0x18008ce40)
- RtlSetGroupSecurityDescriptor (Address: 0x18008cff8)
- RtlSetIoCompletionCallback (Address: 0x18008ccb0)
- RtlSetLastWin32Error (Address: 0x18008ca28)
- RtlSetLastWin32ErrorAndNtStatusFromNtStatus (Address: 0x18008ca70)
- RtlSetOwnerSecurityDescriptor (Address: 0x18008d030)
- RtlSetProtectedPolicy (Address: 0x18008ca38)
- RtlSetSearchPathMode (Address: 0x18008c928)
- RtlSetThreadPoolStartFunc (Address: 0x18008cfd0)
- RtlSetThreadPreferredUILanguages (Address: 0x18008c6c0)
- RtlSizeHeap (Address: 0x18008c5a8)
- RtlSubAuthorityCountSid (Address: 0x18008c6f0)
- RtlSubAuthoritySid (Address: 0x18008c898)
- RtlSubscribeWnfStateChangeNotification (Address: 0x18008cda8)
- RtlSwitchedVVI (Address: 0x18008cd38)
- RtlTimeFieldsToTime (Address: 0x18008c558)
- RtlTimeToTimeFields (Address: 0x18008c550)
- RtlTryAcquirePebLock (Address: 0x18008cea8)
- RtlUnhandledExceptionFilter (Address: 0x18008c560)
- RtlUnicodeStringToAnsiString (Address: 0x18008c800)
- RtlUnicodeStringToInteger (Address: 0x18008c520)
- RtlUnicodeStringToOemString (Address: 0x18008c780)
- RtlUnicodeToMultiByteN (Address: 0x18008cc30)
- RtlUnicodeToMultiByteSize (Address: 0x18008caa0)
- RtlUnlockHeap (Address: 0x18008c940)
- RtlUnsubscribeWnfStateChangeNotification (Address: 0x18008cda0)
- RtlUpcaseUnicodeChar (Address: 0x18008ca90)
- RtlUpcaseUnicodeString (Address: 0x18008cf60)
- RtlVerifyVersionInfo (Address: 0x18008cf90)
- RtlWerpReportException (Address: 0x18008ced8)
- RtlWow64GetThreadSelectorEntry (Address: 0x18008c9f8)
- RtlWow64LogMessageInEventLogger (Address: 0x18008c8a8)
- RtlxAnsiStringToUnicodeSize (Address: 0x18008c8e8)
- RtlxUnicodeStringToAnsiSize (Address: 0x18008cb18)
- RtlZombifyActivationContext (Address: 0x18008c6e8)
- sin (Address: 0x18008c608)
- strcat_s (Address: 0x18008ce68)
- strchr (Address: 0x18008cdb8)
- strcpy_s (Address: 0x18008cd18)
- strlen (Address: 0x18008c920)
- strncmp (Address: 0x18008c958)
- strncpy_s (Address: 0x18008cc38)
- strnlen (Address: 0x18008ce70)
- strrchr (Address: 0x18008cdf8)
- swprintf_s (Address: 0x18008c6c8)
- tolower (Address: 0x18008c770)
- toupper (Address: 0x18008c778)
- towlower (Address: 0x18008c598)
- TpAllocCleanupGroup (Address: 0x18008ca40)
- TpAllocIoCompletion (Address: 0x18008c618)
- TpAllocPool (Address: 0x18008ca60)
- TpAllocTimer (Address: 0x18008c610)
- TpAllocWait (Address: 0x18008c580)
- TpAllocWork (Address: 0x18008c620)
- TpCallbackMayRunLong (Address: 0x18008c760)
- TpCaptureCaller (Address: 0x18008ce10)
- TpQueryPoolStackInformation (Address: 0x18008ca50)
- TpSetPoolMinThreads (Address: 0x18008ca58)
- TpSetPoolStackInformation (Address: 0x18008c578)
- TpSimpleTryPost (Address: 0x18008ca48)
- VerSetConditionMask (Address: 0x18008cf88)
- wcscat_s (Address: 0x18008cdd0)
- wcschr (Address: 0x18008cb28)
- wcscmp (Address: 0x18008d088)
- wcscpy_s (Address: 0x18008c9b0)
- wcscspn (Address: 0x18008cb60)
- wcslen (Address: 0x18008c9a0)
- wcsncmp (Address: 0x18008c570)
- wcsncpy (Address: 0x18008c628)
- wcsncpy_s (Address: 0x18008cb58)
- wcsnlen (Address: 0x18008ce60)
- wcsrchr (Address: 0x18008c798)
- wcsstr (Address: 0x18008cb30)
- ZwClose (Address: 0x18008cf10)
- ZwCreateFile (Address: 0x18008cf38)
- ZwCreateSection (Address: 0x18008cf48)
- ZwEnumerateKey (Address: 0x18008cf28)
- ZwEnumerateValueKey (Address: 0x18008cfa0)
- ZwMapViewOfSection (Address: 0x18008cf80)
- ZwOpenFile (Address: 0x18008cf18)
- ZwOpenKey (Address: 0x18008cf20)
- ZwQueryDirectoryFile (Address: 0x18008cf50)
- ZwQueryInformationFile (Address: 0x18008cf40)
- ZwQuerySystemInformation (Address: 0x18008cf70)
- ZwQueryValueKey (Address: 0x18008cf30)
- ZwUnmapViewOfSection (Address: 0x18008cf78)