kernel32.dll

Description: Windows NT BASE API Client DLL

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.26100.9444

Architecture: 64-bit

Operating System: Windows NT

SHA256: 8f8629741558b5df71def4e1dd8ef964

File Size: 824.7 KB

Uploaded At: Sept. 12, 2026, 3:33 p.m.

Views: 69

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: CreateRemoteThread, WriteProcessMemory, OpenProcess, VirtualAllocEx

Exported Functions

  • AcquireSRWLockExclusive (Ordinal: 1, Address: 0xaa887)
  • AcquireSRWLockShared (Ordinal: 2, Address: 0xaa8bd)
  • ActivateActCtx (Ordinal: 3, Address: 0x36d40)
  • ActivateActCtxWorker (Ordinal: 4, Address: 0xe4e0)
  • ActivatePackageVirtualizationContext (Ordinal: 5, Address: 0x57f20)
  • AddAtomA (Ordinal: 6, Address: 0x45480)
  • AddAtomW (Ordinal: 7, Address: 0x370c0)
  • AddConsoleAliasA (Ordinal: 8, Address: 0x57c40)
  • AddConsoleAliasW (Ordinal: 9, Address: 0x57c50)
  • AddDllDirectory (Ordinal: 10, Address: 0xaa968)
  • AddIntegrityLabelToBoundaryDescriptor (Ordinal: 11, Address: 0x44dc0)
  • AddLocalAlternateComputerNameA (Ordinal: 12, Address: 0x69cc0)
  • AddLocalAlternateComputerNameW (Ordinal: 13, Address: 0x69d20)
  • AddRefActCtx (Ordinal: 14, Address: 0x5a990)
  • AddRefActCtxWorker (Ordinal: 15, Address: 0x3bd90)
  • AddResourceAttributeAce (Ordinal: 16, Address: 0x5a9b0)
  • AddSIDToBoundaryDescriptor (Ordinal: 17, Address: 0x43370)
  • AddScopedPolicyIDAce (Ordinal: 18, Address: 0x5a9d0)
  • AddSecureMemoryCacheCallback (Ordinal: 19, Address: 0x590f0)
  • AddVectoredContinueHandler (Ordinal: 20, Address: 0xaaaa1)
  • AddVectoredExceptionHandler (Ordinal: 21, Address: 0xaaae1)
  • AdjustCalendarDate (Ordinal: 22, Address: 0x140c0)
  • AllocConsole (Ordinal: 23, Address: 0x57870)
  • AllocConsoleWithOptions (Ordinal: 24, Address: 0x57880)
  • AllocateUserPhysicalPages (Ordinal: 25, Address: 0x5aa10)
  • AllocateUserPhysicalPagesNuma (Ordinal: 26, Address: 0x5a9f0)
  • AppPolicyGetClrCompat (Ordinal: 27, Address: 0xaab8c)
  • AppPolicyGetCreateFileAccess (Ordinal: 28, Address: 0xaabca)
  • AppPolicyGetLifecycleManagement (Ordinal: 29, Address: 0xaac12)
  • AppPolicyGetMediaFoundationCodecLoading (Ordinal: 30, Address: 0xaac65)
  • AppPolicyGetProcessTerminationMethod (Ordinal: 31, Address: 0xaacbd)
  • AppPolicyGetShowDeveloperDiagnostic (Ordinal: 32, Address: 0xaad11)
  • AppPolicyGetThreadInitializationType (Ordinal: 33, Address: 0xaad65)
  • AppPolicyGetWindowingModel (Ordinal: 34, Address: 0xaadb0)
  • AppXGetOSMaxVersionTested (Ordinal: 35, Address: 0xaadf0)
  • ApplicationRecoveryFinished (Ordinal: 36, Address: 0x620a0)
  • ApplicationRecoveryInProgress (Ordinal: 37, Address: 0x620b0)
  • AreFileApisANSI (Ordinal: 38, Address: 0x3e6e0)
  • AreShortNamesEnabled (Ordinal: 39, Address: 0x54390)
  • AssignProcessToJobObject (Ordinal: 40, Address: 0x3e700)
  • AttachConsole (Ordinal: 41, Address: 0x57890)
  • BackupRead (Ordinal: 42, Address: 0x40a20)
  • BackupReadEx (Ordinal: 43, Address: 0x306f0)
  • BackupSeek (Ordinal: 44, Address: 0x553e0)
  • BackupWrite (Ordinal: 45, Address: 0x6bfb0)
  • BackupWriteEx (Ordinal: 46, Address: 0x6c140)
  • BaseCheckAppcompatCache (Ordinal: 47, Address: 0x5aa90)
  • BaseCheckAppcompatCacheEx (Ordinal: 48, Address: 0x5aa30)
  • BaseCheckAppcompatCacheExWorker (Ordinal: 49, Address: 0x44790)
  • BaseCheckAppcompatCacheWorker (Ordinal: 50, Address: 0x44790)
  • BaseCheckElevation (Ordinal: 51, Address: 0x1e970)
  • BaseCleanupAppcompatCacheSupport (Ordinal: 52, Address: 0x5aab0)
  • BaseCleanupAppcompatCacheSupportWorker (Ordinal: 53, Address: 0x58590)
  • BaseDestroyVDMEnvironment (Ordinal: 54, Address: 0x5ebd0)
  • BaseDllReadWriteIniFile (Ordinal: 55, Address: 0xf180)
  • BaseDumpAppcompatCache (Ordinal: 56, Address: 0x5aad0)
  • BaseDumpAppcompatCacheWorker (Ordinal: 57, Address: 0x58580)
  • BaseElevationPostProcessing (Ordinal: 58, Address: 0x3ae70)
  • BaseFlushAppcompatCache (Ordinal: 59, Address: 0x5aaf0)
  • BaseFlushAppcompatCacheWorker (Ordinal: 60, Address: 0x78d80)
  • BaseFormatObjectAttributes (Ordinal: 61, Address: 0x56d80)
  • BaseFormatTimeOut (Ordinal: 62, Address: 0x697f0)
  • BaseFreeAppCompatDataForProcessWorker (Ordinal: 63, Address: 0x43750)
  • BaseGenerateAppCompatData (Ordinal: 64, Address: 0x2fa10)
  • BaseGetNamedObjectDirectory (Ordinal: 65, Address: 0x44c60)
  • BaseInitAppcompatCacheSupport (Ordinal: 66, Address: 0x5ab10)
  • BaseInitAppcompatCacheSupportWorker (Ordinal: 67, Address: 0x58590)
  • BaseIsAppcompatInfrastructureDisabled (Ordinal: 68, Address: 0x44790)
  • BaseIsAppcompatInfrastructureDisabledWorker (Ordinal: 69, Address: 0x44790)
  • BaseIsDosApplication (Ordinal: 70, Address: 0x6d6b0)
  • BaseMarkProcessTokenForInstallers (Ordinal: 71, Address: 0x6cd00)
  • BaseQueryModuleData (Ordinal: 72, Address: 0x78f10)
  • BaseReadAppCompatDataForProcessWorker (Ordinal: 73, Address: 0x3bf80)
  • BaseSetLastNTError (Ordinal: 74, Address: 0xead0)
  • BaseThreadInitThunk (Ordinal: 75, Address: 0x2cd70)
  • BaseUpdateAppcompatCache (Ordinal: 76, Address: 0x5ab30)
  • BaseUpdateAppcompatCacheWorker (Ordinal: 77, Address: 0x78dd0)
  • BaseUpdateVDMEntry (Ordinal: 78, Address: 0x54190)
  • BaseWriteErrorElevationRequiredEvent (Ordinal: 79, Address: 0x6cf00)
  • Basep8BitStringToDynamicUnicodeString (Ordinal: 80, Address: 0xcb40)
  • BasepAllocateActivationContextActivationBlock (Ordinal: 81, Address: 0x698a0)
  • BasepAnsiStringToDynamicUnicodeString (Ordinal: 82, Address: 0x69820)
  • BasepAppContainerEnvironmentExtension (Ordinal: 83, Address: 0x43700)
  • BasepAppXExtension (Ordinal: 84, Address: 0x41490)
  • BasepBrokerSandboxedCreateProcess (Ordinal: 85, Address: 0x597c0)
  • BasepCheckAppCompat (Ordinal: 86, Address: 0x375d0)
  • BasepCheckPplSupport (Ordinal: 87, Address: 0x59890)
  • BasepCheckWebBladeHashes (Ordinal: 88, Address: 0x388d0)
  • BasepCheckWinSaferRestrictions (Ordinal: 89, Address: 0x32200)
  • BasepConstructSxsCreateProcessMessage (Ordinal: 90, Address: 0x26070)
  • BasepCopyEncryption (Ordinal: 91, Address: 0x55720)
  • BasepCreateProcessAsUserInsideSecurityEnvironment (Ordinal: 92, Address: 0x598d0)
  • BasepFinishPackageActivation (Ordinal: 93, Address: 0x599c0)
  • BasepFinishPackageActivationForSxS (Ordinal: 94, Address: 0x3c540)
  • BasepFreeActivationContextActivationBlock (Ordinal: 95, Address: 0x69a30)
  • BasepFreeActivationTokenInfo (Ordinal: 96, Address: 0x3fc80)
  • BasepFreeAppCompatData (Ordinal: 97, Address: 0x34690)
  • BasepGetAppCompatData (Ordinal: 98, Address: 0x2efe0)
  • BasepGetComputerNameFromNtPath (Ordinal: 99, Address: 0x42150)
  • BasepGetExeArchType (Ordinal: 100, Address: 0x376b0)
  • BasepGetPackageActivationTokenForFilePath (Ordinal: 101, Address: 0x599d0)
  • BasepGetPackageActivationTokenForFilePath2 (Ordinal: 102, Address: 0x4dfc0)
  • BasepGetPackageActivationTokenForSxS (Ordinal: 103, Address: 0x599d0)
  • BasepGetPackageActivationTokenForSxS2 (Ordinal: 104, Address: 0x4fc20)
  • BasepGetPackageActivationTokenForSxS3 (Ordinal: 105, Address: 0x61510)
  • BasepGetPackagedAppInfoForFile (Ordinal: 106, Address: 0x46370)
  • BasepInitAppCompatData (Ordinal: 107, Address: 0x78e40)
  • BasepIsProcessAllowed (Ordinal: 108, Address: 0x380b0)
  • BasepMapModuleHandle (Ordinal: 109, Address: 0xd1a0)
  • BasepNotifyLoadStringResource (Ordinal: 110, Address: 0x31b90)
  • BasepPostSuccessAppXExtension (Ordinal: 111, Address: 0x43e50)
  • BasepProcessInvalidImage (Ordinal: 112, Address: 0x599e0)
  • BasepQueryAppCompat (Ordinal: 113, Address: 0x1aa30)
  • BasepQueryModuleChpeSettings (Ordinal: 114, Address: 0x52e30)
  • BasepReleaseAppXContext (Ordinal: 115, Address: 0x445b0)
  • BasepReleasePackagedAppInfo (Ordinal: 116, Address: 0x5a110)
  • BasepReleaseSxsCreateProcessUtilityStruct (Ordinal: 117, Address: 0x253d0)
  • BasepReportFault (Ordinal: 118, Address: 0x622d0)
  • BasepSandboxEngineCreateProcessHooks_IsSandboxedLaunchSignaled (Ordinal: 119, Address: 0x5a160)
  • BasepSandboxEngineCreateProcessHooks_SetMsixPackageSignal (Ordinal: 120, Address: 0x5a1c0)
  • BasepSetFileEncryptionCompression (Ordinal: 121, Address: 0x34700)
  • Beep (Ordinal: 122, Address: 0x4f740)
  • BeginUpdateResourceA (Ordinal: 123, Address: 0x63820)
  • BeginUpdateResourceW (Ordinal: 124, Address: 0x52bb0)
  • BindIoCompletionCallback (Ordinal: 125, Address: 0x43da0)
  • BuildCommDCBA (Ordinal: 126, Address: 0x60250)
  • BuildCommDCBAndTimeoutsA (Ordinal: 127, Address: 0x602b0)
  • BuildCommDCBAndTimeoutsW (Ordinal: 128, Address: 0x602f0)
  • BuildCommDCBW (Ordinal: 129, Address: 0x60390)
  • BuildIoRingCancelRequest (Ordinal: 130, Address: 0xab86f)
  • BuildIoRingFlushFile (Ordinal: 131, Address: 0xab8bb)
  • BuildIoRingReadFile (Ordinal: 132, Address: 0xab902)
  • BuildIoRingReadFileScatter (Ordinal: 133, Address: 0xab94f)
  • BuildIoRingRegisterBuffers (Ordinal: 134, Address: 0xab9a3)
  • BuildIoRingRegisterFileHandles (Ordinal: 135, Address: 0xab9fb)
  • BuildIoRingWriteFile (Ordinal: 136, Address: 0xaba4d)
  • BuildIoRingWriteFileGather (Ordinal: 137, Address: 0xaba9b)
  • CallNamedPipeA (Ordinal: 138, Address: 0xb1d0)
  • CallNamedPipeW (Ordinal: 139, Address: 0x57600)
  • CallbackMayRunLong (Ordinal: 140, Address: 0x41ae0)
  • CancelDeviceWakeupRequest (Ordinal: 141, Address: 0x448d0)
  • CancelIo (Ordinal: 142, Address: 0x41f20)
  • CancelIoEx (Ordinal: 143, Address: 0x3fc60)
  • CancelSynchronousIo (Ordinal: 144, Address: 0x5ab50)
  • CancelThreadpoolIo (Ordinal: 145, Address: 0xabb5a)
  • CancelTimerQueueTimer (Ordinal: 146, Address: 0x62240)
  • CancelWaitableTimer (Ordinal: 147, Address: 0x56e40)
  • CeipIsOptedIn (Ordinal: 148, Address: 0xabbb1)
  • ChangeTimerQueueTimer (Ordinal: 149, Address: 0x45850)
  • CheckAllowDecryptedRemoteDestinationPolicy (Ordinal: 150, Address: 0x5ab70)
  • CheckElevation (Ordinal: 151, Address: 0x37470)
  • CheckElevationEnabled (Ordinal: 152, Address: 0x42b80)
  • CheckForReadOnlyResource (Ordinal: 153, Address: 0x6da20)
  • CheckForReadOnlyResourceFilter (Ordinal: 154, Address: 0x5c2c0)
  • CheckNameLegalDOS8Dot3A (Ordinal: 155, Address: 0x561c0)
  • CheckNameLegalDOS8Dot3W (Ordinal: 156, Address: 0x40ad0)
  • CheckRemoteDebuggerPresent (Ordinal: 157, Address: 0x44e10)
  • CheckTokenCapability (Ordinal: 158, Address: 0x5ab90)
  • CheckTokenMembershipEx (Ordinal: 159, Address: 0x5abb0)
  • ClearCommBreak (Ordinal: 160, Address: 0x57660)
  • ClearCommError (Ordinal: 161, Address: 0x57670)
  • CloseConsoleHandle (Ordinal: 162, Address: 0x731d0)
  • CloseHandle (Ordinal: 163, Address: 0x56e00)
  • CloseIoRing (Ordinal: 164, Address: 0xabd28)
  • ClosePackageInfo (Ordinal: 165, Address: 0xabd63)
  • ClosePrivateNamespace (Ordinal: 166, Address: 0x44be0)
  • CloseProfileUserMapping (Ordinal: 167, Address: 0x58590)
  • ClosePseudoConsole (Ordinal: 168, Address: 0x578a0)
  • CloseState (Ordinal: 169, Address: 0xabdcb)
  • CloseThreadpool (Ordinal: 170, Address: 0xabdf1)
  • CloseThreadpoolCleanupGroup (Ordinal: 171, Address: 0xabe21)
  • CloseThreadpoolCleanupGroupMembers (Ordinal: 172, Address: 0xabe60)
  • CloseThreadpoolIo (Ordinal: 173, Address: 0xabe95)
  • CloseThreadpoolTimer (Ordinal: 174, Address: 0xabec6)
  • CloseThreadpoolWait (Ordinal: 175, Address: 0xabeef)
  • CloseThreadpoolWork (Ordinal: 176, Address: 0xabf17)
  • CmdBatNotification (Ordinal: 177, Address: 0x43160)
  • CommConfigDialogA (Ordinal: 178, Address: 0x5cc30)
  • CommConfigDialogW (Ordinal: 179, Address: 0x549e0)
  • CompareCalendarDates (Ordinal: 180, Address: 0x63f30)
  • CompareFileTime (Ordinal: 181, Address: 0x57030)
  • CompareStringA (Ordinal: 182, Address: 0x40570)
  • CompareStringEx (Ordinal: 183, Address: 0x21d30)
  • CompareStringOrdinal (Ordinal: 184, Address: 0x315a0)
  • CompareStringW (Ordinal: 185, Address: 0x386d0)
  • ConnectNamedPipe (Ordinal: 186, Address: 0x40ab0)
  • ConsoleMenuControl (Ordinal: 187, Address: 0x732c0)
  • ContinueDebugEvent (Ordinal: 188, Address: 0x46f40)
  • ConvertCalDateTimeToSystemTime (Ordinal: 189, Address: 0x63fe0)
  • ConvertDefaultLocale (Ordinal: 190, Address: 0x44e30)
  • ConvertFiberToThread (Ordinal: 191, Address: 0x577c0)
  • ConvertNLSDayOfWeekToWin32DayOfWeek (Ordinal: 192, Address: 0x44950)
  • ConvertSystemTimeToCalDateTime (Ordinal: 193, Address: 0x36ab0)
  • ConvertThreadToFiber (Ordinal: 194, Address: 0x577d0)
  • ConvertThreadToFiberEx (Ordinal: 195, Address: 0x577e0)
  • CopyContext (Ordinal: 196, Address: 0x5abd0)
  • CopyFile2 (Ordinal: 197, Address: 0x5abf0)
  • CopyFileA (Ordinal: 198, Address: 0x6dd70)
  • CopyFileExA (Ordinal: 199, Address: 0x6de20)
  • CopyFileExW (Ordinal: 200, Address: 0x454a0)
  • CopyFileTransactedA (Ordinal: 201, Address: 0x6def0)
  • CopyFileTransactedW (Ordinal: 202, Address: 0x6dfc0)
  • CopyFileW (Ordinal: 203, Address: 0x577b0)
  • CopyLZFile (Ordinal: 204, Address: 0x58460)
  • CreateActCtxA (Ordinal: 205, Address: 0x405b0)
  • CreateActCtxW (Ordinal: 206, Address: 0x44570)
  • CreateActCtxWWorker (Ordinal: 207, Address: 0x23120)
  • CreateBoundaryDescriptorA (Ordinal: 208, Address: 0x6dc10)
  • CreateBoundaryDescriptorW (Ordinal: 209, Address: 0x429a0)
  • CreateConsoleScreenBuffer (Ordinal: 210, Address: 0x579d0)
  • CreateDirectory2A (Ordinal: 211, Address: 0x57040)
  • CreateDirectory2W (Ordinal: 212, Address: 0x57050)
  • CreateDirectoryA (Ordinal: 213, Address: 0x57060)
  • CreateDirectoryExA (Ordinal: 214, Address: 0x6e2a0)
  • CreateDirectoryExW (Ordinal: 215, Address: 0x5ac10)
  • CreateDirectoryTransactedA (Ordinal: 216, Address: 0x587c0)
  • CreateDirectoryTransactedW (Ordinal: 217, Address: 0x6e340)
  • CreateDirectoryW (Ordinal: 218, Address: 0x57070)
  • CreateEnclave (Ordinal: 219, Address: 0xac25c)
  • CreateEventA (Ordinal: 220, Address: 0x56e50)
  • CreateEventExA (Ordinal: 221, Address: 0x56e60)
  • CreateEventExW (Ordinal: 222, Address: 0x56e70)
  • CreateEventW (Ordinal: 223, Address: 0x56e80)
  • CreateFiber (Ordinal: 224, Address: 0x577f0)
  • CreateFiberEx (Ordinal: 225, Address: 0x57800)
  • CreateFile2 (Ordinal: 226, Address: 0x57080)
  • CreateFile3 (Ordinal: 227, Address: 0x57090)
  • CreateFileA (Ordinal: 228, Address: 0x570a0)
  • CreateFileMappingA (Ordinal: 229, Address: 0xca80)
  • CreateFileMappingFromApp (Ordinal: 230, Address: 0xac32b)
  • CreateFileMappingNumaA (Ordinal: 231, Address: 0x6e4c0)
  • CreateFileMappingNumaW (Ordinal: 232, Address: 0x5ac30)
  • CreateFileMappingW (Ordinal: 233, Address: 0x3a840)
  • CreateFileTransactedA (Ordinal: 234, Address: 0x6e0a0)
  • CreateFileTransactedW (Ordinal: 235, Address: 0x43c00)
  • CreateFileW (Ordinal: 236, Address: 0x570b0)
  • CreateHardLinkA (Ordinal: 237, Address: 0x5ac50)
  • CreateHardLinkTransactedA (Ordinal: 238, Address: 0x61450)
  • CreateHardLinkTransactedW (Ordinal: 239, Address: 0x42c10)
  • CreateHardLinkW (Ordinal: 240, Address: 0x46580)
  • CreateIoCompletionPort (Ordinal: 241, Address: 0x3f1c0)
  • CreateIoRing (Ordinal: 242, Address: 0xac453)
  • CreateJobObjectA (Ordinal: 243, Address: 0x6b5f0)
  • CreateJobObjectW (Ordinal: 244, Address: 0x3bb80)
  • CreateJobSet (Ordinal: 245, Address: 0x6b660)
  • CreateMailslotA (Ordinal: 246, Address: 0xb150)
  • CreateMailslotW (Ordinal: 247, Address: 0xaf90)
  • CreateMemoryResourceNotification (Ordinal: 248, Address: 0x44750)
  • CreateMutexA (Ordinal: 249, Address: 0x56e90)
  • CreateMutexExA (Ordinal: 250, Address: 0x56ea0)
  • CreateMutexExW (Ordinal: 251, Address: 0x56eb0)
  • CreateMutexW (Ordinal: 252, Address: 0x56ec0)
  • CreateNamedPipeA (Ordinal: 253, Address: 0xc9d0)
  • CreateNamedPipeW (Ordinal: 254, Address: 0x41f40)
  • CreatePackageVirtualizationContext (Ordinal: 255, Address: 0x57fc0)
  • CreatePipe (Ordinal: 256, Address: 0x45870)
  • CreatePrivateNamespaceA (Ordinal: 257, Address: 0x6dc80)
  • CreatePrivateNamespaceW (Ordinal: 258, Address: 0x56280)
  • CreateProcessA (Ordinal: 259, Address: 0x44b50)
  • CreateProcessAsUserA (Ordinal: 260, Address: 0x5ac70)
  • CreateProcessAsUserW (Ordinal: 261, Address: 0x3a780)
  • CreateProcessInternalA (Ordinal: 262, Address: 0x5acf0)
  • CreateProcessInternalW (Ordinal: 263, Address: 0x5ad70)
  • CreateProcessW (Ordinal: 264, Address: 0x3bdd0)
  • CreatePseudoConsole (Ordinal: 265, Address: 0x578b0)
  • CreateRemoteThread (Ordinal: 266, Address: 0x42950)
  • CreateRemoteThreadEx (Ordinal: 267, Address: 0xac658)
  • CreateSemaphoreA (Ordinal: 268, Address: 0xb710)
  • CreateSemaphoreExA (Ordinal: 269, Address: 0xb880)
  • CreateSemaphoreExW (Ordinal: 270, Address: 0x56ed0)
  • CreateSemaphoreW (Ordinal: 271, Address: 0x56ee0)
  • CreateSymbolicLinkA (Ordinal: 272, Address: 0x6e760)
  • CreateSymbolicLinkTransactedA (Ordinal: 273, Address: 0x6e830)
  • CreateSymbolicLinkTransactedW (Ordinal: 274, Address: 0x54fa0)
  • CreateSymbolicLinkW (Ordinal: 275, Address: 0x4df40)
  • CreateTapePartition (Ordinal: 276, Address: 0x61180)
  • CreateThread (Ordinal: 277, Address: 0x315c0)
  • CreateThreadpool (Ordinal: 278, Address: 0x43670)
  • CreateThreadpoolCleanupGroup (Ordinal: 279, Address: 0x427d0)
  • CreateThreadpoolIo (Ordinal: 280, Address: 0x542b0)
  • CreateThreadpoolTimer (Ordinal: 281, Address: 0x35f30)
  • CreateThreadpoolWait (Ordinal: 282, Address: 0x3e010)
  • CreateThreadpoolWork (Ordinal: 283, Address: 0x32c20)
  • CreateTimerQueue (Ordinal: 284, Address: 0x44770)
  • CreateTimerQueueTimer (Ordinal: 285, Address: 0x417f0)
  • CreateToolhelp32Snapshot (Ordinal: 286, Address: 0x4ab50)
  • CreateUmsCompletionList (Ordinal: 287, Address: 0x601e0)
  • CreateUmsThreadContext (Ordinal: 288, Address: 0x601e0)
  • CreateWaitableTimerA (Ordinal: 289, Address: 0x32070)
  • CreateWaitableTimerExA (Ordinal: 290, Address: 0x30360)
  • CreateWaitableTimerExW (Ordinal: 291, Address: 0x56ef0)
  • CreateWaitableTimerW (Ordinal: 292, Address: 0x34db0)
  • CtrlRoutine (Ordinal: 293, Address: 0xac8b4)
  • DeactivateActCtx (Ordinal: 294, Address: 0x3a740)
  • DeactivateActCtxWorker (Ordinal: 295, Address: 0xe390)
  • DeactivatePackageVirtualizationContext (Ordinal: 296, Address: 0x57fe0)
  • DebugActiveProcess (Ordinal: 297, Address: 0x5ae10)
  • DebugActiveProcessStop (Ordinal: 298, Address: 0x5adf0)
  • DebugBreak (Ordinal: 299, Address: 0x54df0)
  • DebugBreakProcess (Ordinal: 300, Address: 0x586b0)
  • DebugSetProcessKillOnExit (Ordinal: 301, Address: 0x586e0)
  • DecodePointer (Ordinal: 302, Address: 0xac989)
  • DecodeSystemPointer (Ordinal: 303, Address: 0xac9b4)
  • DefineDosDeviceA (Ordinal: 304, Address: 0x6f520)
  • DefineDosDeviceW (Ordinal: 305, Address: 0x570c0)
  • DelayLoadFailureHook (Ordinal: 306, Address: 0x5ae30)
  • DeleteAtom (Ordinal: 307, Address: 0x39450)
  • DeleteBoundaryDescriptor (Ordinal: 308, Address: 0x42e90)
  • DeleteCriticalSection (Ordinal: 309, Address: 0xaca42)
  • DeleteFiber (Ordinal: 310, Address: 0x57810)
  • DeleteFile2A (Ordinal: 311, Address: 0x570d0)
  • DeleteFile2W (Ordinal: 312, Address: 0x570e0)
  • DeleteFileA (Ordinal: 313, Address: 0x570f0)
  • DeleteFileTransactedA (Ordinal: 314, Address: 0x6e900)
  • DeleteFileTransactedW (Ordinal: 315, Address: 0x6e960)
  • DeleteFileW (Ordinal: 316, Address: 0x57100)
  • DeleteProcThreadAttributeList (Ordinal: 317, Address: 0xacae9)
  • DeleteSynchronizationBarrier (Ordinal: 318, Address: 0x5ae50)
  • DeleteTimerQueue (Ordinal: 319, Address: 0x575b0)
  • DeleteTimerQueueEx (Ordinal: 320, Address: 0x44f80)
  • DeleteTimerQueueTimer (Ordinal: 321, Address: 0x41470)
  • DeleteUmsCompletionList (Ordinal: 322, Address: 0x601e0)
  • DeleteUmsThreadContext (Ordinal: 323, Address: 0x601e0)
  • DeleteVolumeMountPointA (Ordinal: 324, Address: 0x6f5d0)
  • DeleteVolumeMountPointW (Ordinal: 325, Address: 0x57110)
  • DequeueUmsCompletionListItems (Ordinal: 326, Address: 0x601e0)
  • DeviceIoControl (Ordinal: 327, Address: 0x21a50)
  • DisableThreadLibraryCalls (Ordinal: 328, Address: 0x41b20)
  • DisableThreadProfiling (Ordinal: 329, Address: 0x62310)
  • DisassociateCurrentThreadFromCallback (Ordinal: 330, Address: 0xacc68)
  • DiscardVirtualMemory (Ordinal: 331, Address: 0xacc9a)
  • DisconnectNamedPipe (Ordinal: 332, Address: 0x43060)
  • DnsHostnameToComputerNameA (Ordinal: 333, Address: 0x6aa30)
  • DnsHostnameToComputerNameExW (Ordinal: 334, Address: 0x5ae70)
  • DnsHostnameToComputerNameW (Ordinal: 335, Address: 0x3f280)
  • DosDateTimeToFileTime (Ordinal: 336, Address: 0xe2c0)
  • DosPathToSessionPathA (Ordinal: 337, Address: 0x705f0)
  • DosPathToSessionPathW (Ordinal: 338, Address: 0x707e0)
  • DuplicateConsoleHandle (Ordinal: 339, Address: 0x731f0)
  • DuplicateEncryptionInfoFileExt (Ordinal: 340, Address: 0x55e60)
  • DuplicateHandle (Ordinal: 341, Address: 0x56e10)
  • DuplicatePackageVirtualizationContext (Ordinal: 342, Address: 0x58000)
  • EnableProcessOptionalXStateFeatures (Ordinal: 343, Address: 0x5ae90)
  • EnableThreadProfiling (Ordinal: 344, Address: 0x62350)
  • EncodePointer (Ordinal: 345, Address: 0xace2a)
  • EncodeSystemPointer (Ordinal: 346, Address: 0xace55)
  • EndUpdateResourceA (Ordinal: 347, Address: 0x63890)
  • EndUpdateResourceW (Ordinal: 348, Address: 0x638a0)
  • EnterCriticalSection (Ordinal: 349, Address: 0xacead)
  • EnterSynchronizationBarrier (Ordinal: 350, Address: 0x5aeb0)
  • EnterUmsSchedulingMode (Ordinal: 351, Address: 0x601e0)
  • EnumCalendarInfoA (Ordinal: 352, Address: 0x64b50)
  • EnumCalendarInfoExA (Ordinal: 353, Address: 0x64bf0)
  • EnumCalendarInfoExEx (Ordinal: 354, Address: 0x43d80)
  • EnumCalendarInfoExW (Ordinal: 355, Address: 0x5aed0)
  • EnumCalendarInfoW (Ordinal: 356, Address: 0x5aef0)
  • EnumDateFormatsA (Ordinal: 357, Address: 0x64c90)
  • EnumDateFormatsExA (Ordinal: 358, Address: 0x64cf0)
  • EnumDateFormatsExEx (Ordinal: 359, Address: 0x47130)
  • EnumDateFormatsExW (Ordinal: 360, Address: 0x5af10)
  • EnumDateFormatsW (Ordinal: 361, Address: 0x5af30)
  • EnumLanguageGroupLocalesA (Ordinal: 362, Address: 0x64d60)
  • EnumLanguageGroupLocalesW (Ordinal: 363, Address: 0x5af50)
  • EnumResourceLanguagesA (Ordinal: 364, Address: 0x59200)
  • EnumResourceLanguagesExA (Ordinal: 365, Address: 0x5af70)
  • EnumResourceLanguagesExW (Ordinal: 366, Address: 0x45750)
  • EnumResourceLanguagesW (Ordinal: 367, Address: 0x42820)
  • EnumResourceNamesA (Ordinal: 368, Address: 0x575d0)
  • EnumResourceNamesExA (Ordinal: 369, Address: 0x5af90)
  • EnumResourceNamesExW (Ordinal: 370, Address: 0x5afb0)
  • EnumResourceNamesW (Ordinal: 371, Address: 0x575e0)
  • EnumResourceTypesA (Ordinal: 372, Address: 0x59240)
  • EnumResourceTypesExA (Ordinal: 373, Address: 0x5afd0)
  • EnumResourceTypesExW (Ordinal: 374, Address: 0x5aff0)
  • EnumResourceTypesW (Ordinal: 375, Address: 0x59270)
  • EnumSystemCodePagesA (Ordinal: 376, Address: 0x64d90)
  • EnumSystemCodePagesW (Ordinal: 377, Address: 0x5b010)
  • EnumSystemFirmwareTables (Ordinal: 378, Address: 0x4e040)
  • EnumSystemGeoID (Ordinal: 379, Address: 0x39050)
  • EnumSystemGeoNames (Ordinal: 380, Address: 0x685b0)
  • EnumSystemLanguageGroupsA (Ordinal: 381, Address: 0x56820)
  • EnumSystemLanguageGroupsW (Ordinal: 382, Address: 0x5b030)
  • EnumSystemLocalesA (Ordinal: 383, Address: 0x4e020)
  • EnumSystemLocalesEx (Ordinal: 384, Address: 0x463d0)
  • EnumSystemLocalesW (Ordinal: 385, Address: 0x5b050)
  • EnumTimeFormatsA (Ordinal: 386, Address: 0x563c0)
  • EnumTimeFormatsEx (Ordinal: 387, Address: 0x45770)
  • EnumTimeFormatsW (Ordinal: 388, Address: 0x5b070)
  • EnumUILanguagesA (Ordinal: 389, Address: 0x64db0)
  • EnumUILanguagesW (Ordinal: 390, Address: 0x5b090)
  • EnumerateLocalComputerNamesA (Ordinal: 391, Address: 0x6ab30)
  • EnumerateLocalComputerNamesW (Ordinal: 392, Address: 0x6ac50)
  • EraseTape (Ordinal: 393, Address: 0x611e0)
  • EscapeCommFunction (Ordinal: 394, Address: 0x57680)
  • ExecuteUmsThread (Ordinal: 395, Address: 0x60210)
  • ExitProcess (Ordinal: 396, Address: 0x41410)
  • ExitThread (Ordinal: 397, Address: 0xad298)
  • ExitVDM (Ordinal: 398, Address: 0x53f50)
  • ExpandEnvironmentStringsA (Ordinal: 399, Address: 0x4f4e0)
  • ExpandEnvironmentStringsW (Ordinal: 400, Address: 0x3bf20)
  • ExpungeConsoleCommandHistoryA (Ordinal: 401, Address: 0x57c60)
  • ExpungeConsoleCommandHistoryW (Ordinal: 402, Address: 0x57c70)
  • FatalAppExitA (Ordinal: 403, Address: 0x5b0b0)
  • FatalAppExitW (Ordinal: 404, Address: 0x5b0d0)
  • FatalExit (Ordinal: 405, Address: 0x41410)
  • FileTimeToDosDateTime (Ordinal: 406, Address: 0xe860)
  • FileTimeToLocalFileTime (Ordinal: 407, Address: 0x57120)
  • FileTimeToSystemTime (Ordinal: 408, Address: 0x57620)
  • FillConsoleOutputAttribute (Ordinal: 409, Address: 0x579e0)
  • FillConsoleOutputCharacterA (Ordinal: 410, Address: 0x579f0)
  • FillConsoleOutputCharacterW (Ordinal: 411, Address: 0x57a00)
  • FindActCtxSectionGuid (Ordinal: 412, Address: 0x3bb60)
  • FindActCtxSectionGuidWorker (Ordinal: 413, Address: 0xe940)
  • FindActCtxSectionStringA (Ordinal: 414, Address: 0x70980)
  • FindActCtxSectionStringW (Ordinal: 415, Address: 0x44ac0)
  • FindActCtxSectionStringWWorker (Ordinal: 416, Address: 0xe6b0)
  • FindAtomA (Ordinal: 417, Address: 0x3f3a0)
  • FindAtomW (Ordinal: 418, Address: 0x30340)
  • FindClose (Ordinal: 419, Address: 0x57130)
  • FindCloseChangeNotification (Ordinal: 420, Address: 0x57140)
  • FindFirstChangeNotificationA (Ordinal: 421, Address: 0x57150)
  • FindFirstChangeNotificationW (Ordinal: 422, Address: 0x57160)
  • FindFirstFileA (Ordinal: 423, Address: 0x57170)
  • FindFirstFileExA (Ordinal: 424, Address: 0x57180)
  • FindFirstFileExW (Ordinal: 425, Address: 0x57190)
  • FindFirstFileNameTransactedW (Ordinal: 426, Address: 0x588d0)
  • FindFirstFileNameW (Ordinal: 427, Address: 0x571a0)
  • FindFirstFileTransactedA (Ordinal: 428, Address: 0x589a0)
  • FindFirstFileTransactedW (Ordinal: 429, Address: 0x70a20)
  • FindFirstFileW (Ordinal: 430, Address: 0x571b0)
  • FindFirstStreamTransactedW (Ordinal: 431, Address: 0x58a80)
  • FindFirstStreamW (Ordinal: 432, Address: 0xad5a9)
  • FindFirstVolumeA (Ordinal: 433, Address: 0x455e0)
  • FindFirstVolumeMountPointA (Ordinal: 434, Address: 0x6f630)
  • FindFirstVolumeMountPointW (Ordinal: 435, Address: 0x39970)
  • FindFirstVolumeW (Ordinal: 436, Address: 0x571c0)
  • FindNLSString (Ordinal: 437, Address: 0x5b0f0)
  • FindNLSStringEx (Ordinal: 438, Address: 0x28130)
  • FindNextChangeNotification (Ordinal: 439, Address: 0x571d0)
  • FindNextFileA (Ordinal: 440, Address: 0x571e0)
  • FindNextFileNameW (Ordinal: 441, Address: 0x571f0)
  • FindNextFileW (Ordinal: 442, Address: 0x57200)
  • FindNextStreamW (Ordinal: 443, Address: 0xad6a5)
  • FindNextVolumeA (Ordinal: 444, Address: 0x42eb0)
  • FindNextVolumeMountPointA (Ordinal: 445, Address: 0x6f7e0)
  • FindNextVolumeMountPointW (Ordinal: 446, Address: 0x6f950)
  • FindNextVolumeW (Ordinal: 447, Address: 0x57210)
  • FindPackagesByPackageFamily (Ordinal: 448, Address: 0xad741)
  • FindResourceA (Ordinal: 449, Address: 0x3daf0)
  • FindResourceExA (Ordinal: 450, Address: 0xcfa0)
  • FindResourceExW (Ordinal: 451, Address: 0x3dad0)
  • FindResourceW (Ordinal: 452, Address: 0x3acc0)
  • FindStringOrdinal (Ordinal: 453, Address: 0x417d0)
  • FindVolumeClose (Ordinal: 454, Address: 0x57220)
  • FindVolumeMountPointClose (Ordinal: 455, Address: 0x6f960)
  • FlsAlloc (Ordinal: 456, Address: 0x3f260)
  • FlsFree (Ordinal: 457, Address: 0x420b0)
  • FlsGetValue (Ordinal: 458, Address: 0x12a00)
  • FlsGetValue2 (Ordinal: 459, Address: 0xad80a)
  • FlsSetValue (Ordinal: 460, Address: 0x36ce0)
  • FlushConsoleInputBuffer (Ordinal: 461, Address: 0x57a10)
  • FlushFileBuffers (Ordinal: 462, Address: 0x57230)
  • FlushInstructionCache (Ordinal: 463, Address: 0x3aca0)
  • FlushProcessWriteBuffers (Ordinal: 464, Address: 0xad886)
  • FlushViewOfFile (Ordinal: 465, Address: 0x40a00)
  • FoldStringA (Ordinal: 466, Address: 0x518e0)
  • FoldStringW (Ordinal: 467, Address: 0x447e0)
  • FormatApplicationUserModelId (Ordinal: 468, Address: 0xad8ec)
  • FormatMessageA (Ordinal: 469, Address: 0x435e0)
  • FormatMessageW (Ordinal: 470, Address: 0x3df40)
  • FreeConsole (Ordinal: 471, Address: 0x578c0)
  • FreeEnvironmentStringsA (Ordinal: 472, Address: 0x5b110)
  • FreeEnvironmentStringsW (Ordinal: 473, Address: 0x420f0)
  • FreeLibrary (Ordinal: 474, Address: 0x3bd70)
  • FreeLibraryAndExitThread (Ordinal: 475, Address: 0x3e740)
  • FreeLibraryWhenCallbackReturns (Ordinal: 476, Address: 0xad9b2)
  • FreeMemoryJobObject (Ordinal: 477, Address: 0x6b690)
  • FreeResource (Ordinal: 478, Address: 0x448f0)
  • FreeUserPhysicalPages (Ordinal: 479, Address: 0x5b130)
  • GenerateConsoleCtrlEvent (Ordinal: 480, Address: 0x57a20)
  • GetACP (Ordinal: 481, Address: 0x3a720)
  • GetActiveProcessorCount (Ordinal: 482, Address: 0x37260)
  • GetActiveProcessorGroupCount (Ordinal: 483, Address: 0x371a0)
  • GetAppContainerAce (Ordinal: 484, Address: 0x5b150)
  • GetAppContainerNamedObjectPath (Ordinal: 485, Address: 0x5b170)
  • GetApplicationRecoveryCallback (Ordinal: 486, Address: 0x5b190)
  • GetApplicationRecoveryCallbackWorker (Ordinal: 487, Address: 0x620c0)
  • GetApplicationRestartSettings (Ordinal: 488, Address: 0x5b1b0)
  • GetApplicationRestartSettingsWorker (Ordinal: 489, Address: 0x62180)
  • GetApplicationUserModelId (Ordinal: 490, Address: 0xadb36)
  • GetAtomNameA (Ordinal: 491, Address: 0x69c40)
  • GetAtomNameW (Ordinal: 492, Address: 0xd360)
  • GetBinaryType (Ordinal: 493, Address: 0x6d7d0)
  • GetBinaryTypeA (Ordinal: 494, Address: 0x6d7d0)
  • GetBinaryTypeW (Ordinal: 495, Address: 0x401e0)
  • GetCPInfo (Ordinal: 496, Address: 0x41450)
  • GetCPInfoExA (Ordinal: 497, Address: 0x552f0)
  • GetCPInfoExW (Ordinal: 498, Address: 0x45bc0)
  • GetCachedSigningLevel (Ordinal: 499, Address: 0x4e000)
  • GetCalendarDateFormat (Ordinal: 500, Address: 0x13360)
  • GetCalendarDateFormatEx (Ordinal: 501, Address: 0x14f20)
  • GetCalendarDaysInMonth (Ordinal: 502, Address: 0x14640)
  • GetCalendarDifferenceInDays (Ordinal: 503, Address: 0x642f0)
  • GetCalendarInfoA (Ordinal: 504, Address: 0x51d30)
  • GetCalendarInfoEx (Ordinal: 505, Address: 0x57630)
  • GetCalendarInfoW (Ordinal: 506, Address: 0x57640)
  • GetCalendarMonthsInYear (Ordinal: 507, Address: 0x367a0)
  • GetCalendarSupportedDateRange (Ordinal: 508, Address: 0x36890)
  • GetCalendarWeekNumber (Ordinal: 509, Address: 0x644c0)
  • GetComPlusPackageInstallStatus (Ordinal: 510, Address: 0x555e0)
  • GetCommConfig (Ordinal: 511, Address: 0x57690)
  • GetCommMask (Ordinal: 512, Address: 0x576a0)
  • GetCommModemStatus (Ordinal: 513, Address: 0x576b0)
  • GetCommProperties (Ordinal: 514, Address: 0x576c0)
  • GetCommState (Ordinal: 515, Address: 0x576d0)
  • GetCommTimeouts (Ordinal: 516, Address: 0x576e0)
  • GetCommandLineA (Ordinal: 517, Address: 0x3fcd0)
  • GetCommandLineW (Ordinal: 518, Address: 0x40930)
  • GetCompressedFileSizeA (Ordinal: 519, Address: 0x5b1d0)
  • GetCompressedFileSizeTransactedA (Ordinal: 520, Address: 0x6ea00)
  • GetCompressedFileSizeTransactedW (Ordinal: 521, Address: 0x6ea70)
  • GetCompressedFileSizeW (Ordinal: 522, Address: 0x43bb0)
  • GetComputerNameA (Ordinal: 523, Address: 0x3b3b0)
  • GetComputerNameExA (Ordinal: 524, Address: 0x562a0)
  • GetComputerNameExW (Ordinal: 525, Address: 0x436c0)
  • GetComputerNameW (Ordinal: 526, Address: 0x3b5c0)
  • GetConsoleAliasA (Ordinal: 527, Address: 0x57c80)
  • GetConsoleAliasExesA (Ordinal: 528, Address: 0x57c90)
  • GetConsoleAliasExesLengthA (Ordinal: 529, Address: 0x57ca0)
  • GetConsoleAliasExesLengthW (Ordinal: 530, Address: 0x57cb0)
  • GetConsoleAliasExesW (Ordinal: 531, Address: 0x57cc0)
  • GetConsoleAliasW (Ordinal: 532, Address: 0x57cd0)
  • GetConsoleAliasesA (Ordinal: 533, Address: 0x57ce0)
  • GetConsoleAliasesLengthA (Ordinal: 534, Address: 0x57cf0)
  • GetConsoleAliasesLengthW (Ordinal: 535, Address: 0x57d00)
  • GetConsoleAliasesW (Ordinal: 536, Address: 0x57d10)
  • GetConsoleCP (Ordinal: 537, Address: 0x578d0)
  • GetConsoleCharType (Ordinal: 538, Address: 0x739f0)
  • GetConsoleCommandHistoryA (Ordinal: 539, Address: 0x57d20)
  • GetConsoleCommandHistoryLengthA (Ordinal: 540, Address: 0x57d30)
  • GetConsoleCommandHistoryLengthW (Ordinal: 541, Address: 0x57d40)
  • GetConsoleCommandHistoryW (Ordinal: 542, Address: 0x57d50)
  • GetConsoleCursorInfo (Ordinal: 543, Address: 0x57a30)
  • GetConsoleCursorMode (Ordinal: 544, Address: 0x73a90)
  • GetConsoleDisplayMode (Ordinal: 545, Address: 0x57d60)
  • GetConsoleFontInfo (Ordinal: 546, Address: 0x73f10)
  • GetConsoleFontSize (Ordinal: 547, Address: 0x57d70)
  • GetConsoleHardwareState (Ordinal: 548, Address: 0x73350)
  • GetConsoleHistoryInfo (Ordinal: 549, Address: 0x57d80)
  • GetConsoleInputExeNameA (Ordinal: 550, Address: 0xae029)
  • GetConsoleInputExeNameW (Ordinal: 551, Address: 0xae064)
  • GetConsoleInputWaitHandle (Ordinal: 552, Address: 0x73240)
  • GetConsoleKeyboardLayoutNameA (Ordinal: 553, Address: 0x74000)
  • GetConsoleKeyboardLayoutNameW (Ordinal: 554, Address: 0x74020)
  • GetConsoleMode (Ordinal: 555, Address: 0x578e0)
  • GetConsoleNlsMode (Ordinal: 556, Address: 0x73b30)
  • GetConsoleOriginalTitleA (Ordinal: 557, Address: 0x57a40)
  • GetConsoleOriginalTitleW (Ordinal: 558, Address: 0x57a50)
  • GetConsoleOutputCP (Ordinal: 559, Address: 0x578f0)
  • GetConsoleProcessList (Ordinal: 560, Address: 0x57d90)
  • GetConsoleScreenBufferInfo (Ordinal: 561, Address: 0x57a60)
  • GetConsoleScreenBufferInfoEx (Ordinal: 562, Address: 0x57a70)
  • GetConsoleSelectionInfo (Ordinal: 563, Address: 0x57da0)
  • GetConsoleTitleA (Ordinal: 564, Address: 0x57a80)
  • GetConsoleTitleW (Ordinal: 565, Address: 0x57a90)
  • GetConsoleWindow (Ordinal: 566, Address: 0x57db0)
  • GetCurrencyFormatA (Ordinal: 567, Address: 0x64dd0)
  • GetCurrencyFormatEx (Ordinal: 568, Address: 0x5b1f0)
  • GetCurrencyFormatW (Ordinal: 569, Address: 0x5b210)
  • GetCurrentActCtx (Ordinal: 570, Address: 0x426a0)
  • GetCurrentActCtxWorker (Ordinal: 571, Address: 0xdec0)
  • GetCurrentApplicationUserModelId (Ordinal: 572, Address: 0xae25f)
  • GetCurrentConsoleFont (Ordinal: 573, Address: 0x57dc0)
  • GetCurrentConsoleFontEx (Ordinal: 574, Address: 0x57dd0)
  • GetCurrentDirectoryA (Ordinal: 575, Address: 0x45a80)
  • GetCurrentDirectoryW (Ordinal: 576, Address: 0x3e230)
  • GetCurrentPackageFamilyName (Ordinal: 577, Address: 0xae2ff)
  • GetCurrentPackageFullName (Ordinal: 578, Address: 0xae340)
  • GetCurrentPackageId (Ordinal: 579, Address: 0xae379)
  • GetCurrentPackageInfo (Ordinal: 580, Address: 0xae3ae)
  • GetCurrentPackagePath (Ordinal: 581, Address: 0xae3e5)
  • GetCurrentPackageVirtualizationContext (Ordinal: 582, Address: 0x58020)
  • GetCurrentProcess (Ordinal: 583, Address: 0x22e60)
  • GetCurrentProcessId (Ordinal: 584, Address: 0x21ef0)
  • GetCurrentProcessorNumber (Ordinal: 585, Address: 0xae46d)
  • GetCurrentProcessorNumberEx (Ordinal: 586, Address: 0xae4ac)
  • GetCurrentThread (Ordinal: 587, Address: 0x21d20)
  • GetCurrentThreadId (Ordinal: 588, Address: 0x18620)
  • GetCurrentThreadStackLimits (Ordinal: 589, Address: 0xae511)
  • GetCurrentUmsThread (Ordinal: 590, Address: 0x601e0)
  • GetDateFormatA (Ordinal: 591, Address: 0x54c60)
  • GetDateFormatAWorker (Ordinal: 592, Address: 0x38c70)
  • GetDateFormatEx (Ordinal: 593, Address: 0x43b20)
  • GetDateFormatW (Ordinal: 594, Address: 0x44490)
  • GetDateFormatWWorker (Ordinal: 595, Address: 0x16710)
  • GetDefaultCommConfigA (Ordinal: 596, Address: 0x5ccd0)
  • GetDefaultCommConfigW (Ordinal: 597, Address: 0x52730)
  • GetDevicePowerState (Ordinal: 598, Address: 0x43dd0)
  • GetDiskFreeSpaceA (Ordinal: 599, Address: 0x57240)
  • GetDiskFreeSpaceExA (Ordinal: 600, Address: 0x57250)
  • GetDiskFreeSpaceExW (Ordinal: 601, Address: 0x57260)
  • GetDiskFreeSpaceW (Ordinal: 602, Address: 0x57270)
  • GetDiskSpaceInformationA (Ordinal: 603, Address: 0xae664)
  • GetDiskSpaceInformationW (Ordinal: 604, Address: 0xae6b2)
  • GetDllDirectoryA (Ordinal: 605, Address: 0x592a0)
  • GetDllDirectoryW (Ordinal: 606, Address: 0x3eea0)
  • GetDriveTypeA (Ordinal: 607, Address: 0x57280)
  • GetDriveTypeW (Ordinal: 608, Address: 0x57290)
  • GetDurationFormat (Ordinal: 609, Address: 0x65530)
  • GetDurationFormatEx (Ordinal: 610, Address: 0x5b220)
  • GetDynamicTimeZoneInformation (Ordinal: 611, Address: 0x437f0)
  • GetEnabledXStateFeatures (Ordinal: 612, Address: 0x477c0)
  • GetEncryptedFileVersionExt (Ordinal: 613, Address: 0x58ff0)
  • GetEnvironmentStrings (Ordinal: 614, Address: 0x5b240)
  • GetEnvironmentStringsA (Ordinal: 615, Address: 0x57650)
  • GetEnvironmentStringsW (Ordinal: 616, Address: 0x417b0)
  • GetEnvironmentVariableA (Ordinal: 617, Address: 0x3f000)
  • GetEnvironmentVariableW (Ordinal: 618, Address: 0x3db10)
  • GetEraNameCountedString (Ordinal: 619, Address: 0x5b260)
  • GetErrorMode (Ordinal: 620, Address: 0x3a760)
  • GetExitCodeProcess (Ordinal: 621, Address: 0x27280)
  • GetExitCodeThread (Ordinal: 622, Address: 0x36d60)
  • GetExpandedNameA (Ordinal: 623, Address: 0x4cc80)
  • GetExpandedNameW (Ordinal: 624, Address: 0x5c450)
  • GetFileAttributesA (Ordinal: 625, Address: 0x572a0)
  • GetFileAttributesExA (Ordinal: 626, Address: 0x572b0)
  • GetFileAttributesExW (Ordinal: 627, Address: 0x572c0)
  • GetFileAttributesTransactedA (Ordinal: 628, Address: 0x6eb20)
  • GetFileAttributesTransactedW (Ordinal: 629, Address: 0x6eb90)
  • GetFileAttributesW (Ordinal: 630, Address: 0x572d0)
  • GetFileBandwidthReservation (Ordinal: 631, Address: 0x58b50)
  • GetFileInformationByHandle (Ordinal: 632, Address: 0x572e0)
  • GetFileInformationByHandleEx (Ordinal: 633, Address: 0x37410)
  • GetFileInformationByName (Ordinal: 634, Address: 0x5b280)
  • GetFileMUIInfo (Ordinal: 635, Address: 0x5b2a0)
  • GetFileMUIPath (Ordinal: 636, Address: 0x44cf0)
  • GetFileSize (Ordinal: 637, Address: 0x572f0)
  • GetFileSizeEx (Ordinal: 638, Address: 0x57300)
  • GetFileTime (Ordinal: 639, Address: 0x57310)
  • GetFileType (Ordinal: 640, Address: 0x57320)
  • GetFinalPathNameByHandleA (Ordinal: 641, Address: 0x57330)
  • GetFinalPathNameByHandleW (Ordinal: 642, Address: 0x57340)
  • GetFirmwareEnvironmentVariableA (Ordinal: 643, Address: 0x70e20)
  • GetFirmwareEnvironmentVariableExA (Ordinal: 644, Address: 0x70e40)
  • GetFirmwareEnvironmentVariableExW (Ordinal: 645, Address: 0xd1f0)
  • GetFirmwareEnvironmentVariableW (Ordinal: 646, Address: 0xd1d0)
  • GetFirmwareType (Ordinal: 647, Address: 0x42860)
  • GetFullPathNameA (Ordinal: 648, Address: 0x57350)
  • GetFullPathNameTransactedA (Ordinal: 649, Address: 0x585a0)
  • GetFullPathNameTransactedW (Ordinal: 650, Address: 0x711f0)
  • GetFullPathNameW (Ordinal: 651, Address: 0x57360)
  • GetGeoInfoA (Ordinal: 652, Address: 0x13fa0)
  • GetGeoInfoEx (Ordinal: 653, Address: 0x686e0)
  • GetGeoInfoW (Ordinal: 654, Address: 0x14830)
  • GetHandleInformation (Ordinal: 655, Address: 0x56e20)
  • GetIoRingInfo (Ordinal: 656, Address: 0xaeb2c)
  • GetLargePageMinimum (Ordinal: 657, Address: 0x47ca0)
  • GetLargestConsoleWindowSize (Ordinal: 658, Address: 0x57aa0)
  • GetLastError (Ordinal: 659, Address: 0x18640)
  • GetLocalTime (Ordinal: 660, Address: 0x36fe0)
  • GetLocaleInfoA (Ordinal: 661, Address: 0x42130)
  • GetLocaleInfoEx (Ordinal: 662, Address: 0x3ceb0)
  • GetLocaleInfoW (Ordinal: 663, Address: 0x3bee0)
  • GetLogicalDriveStringsA (Ordinal: 664, Address: 0x3ef30)
  • GetLogicalDriveStringsW (Ordinal: 665, Address: 0x57370)
  • GetLogicalDrives (Ordinal: 666, Address: 0xe250)
  • GetLogicalProcessorInformation (Ordinal: 667, Address: 0x43540)
  • GetLogicalProcessorInformationEx (Ordinal: 668, Address: 0xaec51)
  • GetLongPathNameA (Ordinal: 669, Address: 0xbb90)
  • GetLongPathNameTransactedA (Ordinal: 670, Address: 0x5eee0)
  • GetLongPathNameTransactedW (Ordinal: 671, Address: 0x6d830)
  • GetLongPathNameW (Ordinal: 672, Address: 0xbdf0)
  • GetMachineTypeAttributes (Ordinal: 673, Address: 0xaed02)
  • GetMailslotInfo (Ordinal: 674, Address: 0xd8b0)
  • GetMaximumProcessorCount (Ordinal: 675, Address: 0x370e0)
  • GetMaximumProcessorGroupCount (Ordinal: 676, Address: 0x37200)
  • GetMemoryErrorHandlingCapabilities (Ordinal: 677, Address: 0x4dfa0)
  • GetModuleFileNameA (Ordinal: 678, Address: 0x3f220)
  • GetModuleFileNameW (Ordinal: 679, Address: 0x3bcd0)
  • GetModuleHandleA (Ordinal: 680, Address: 0x3bd30)
  • GetModuleHandleExA (Ordinal: 681, Address: 0x41790)
  • GetModuleHandleExW (Ordinal: 682, Address: 0x3db80)
  • GetModuleHandleW (Ordinal: 683, Address: 0x3aba0)
  • GetNLSVersion (Ordinal: 684, Address: 0x502c0)
  • GetNLSVersionEx (Ordinal: 685, Address: 0x50360)
  • GetNamedPipeAttribute (Ordinal: 686, Address: 0x5b2c0)
  • GetNamedPipeClientComputerNameA (Ordinal: 687, Address: 0x6d8e0)
  • GetNamedPipeClientComputerNameW (Ordinal: 688, Address: 0x5b2e0)
  • GetNamedPipeClientProcessId (Ordinal: 689, Address: 0x39170)
  • GetNamedPipeClientSessionId (Ordinal: 690, Address: 0x458f0)
  • GetNamedPipeHandleStateA (Ordinal: 691, Address: 0x429c0)
  • GetNamedPipeHandleStateW (Ordinal: 692, Address: 0x4ec60)
  • GetNamedPipeInfo (Ordinal: 693, Address: 0xaef08)
  • GetNamedPipeServerProcessId (Ordinal: 694, Address: 0x3ed00)
  • GetNamedPipeServerSessionId (Ordinal: 695, Address: 0x44f20)
  • GetNativeSystemInfo (Ordinal: 696, Address: 0x3f240)
  • GetNextUmsListItem (Ordinal: 697, Address: 0x601e0)
  • GetNextVDMCommand (Ordinal: 698, Address: 0x5ef90)
  • GetNumaAvailableMemoryNode (Ordinal: 699, Address: 0x596f0)
  • GetNumaAvailableMemoryNodeEx (Ordinal: 700, Address: 0x71750)
  • GetNumaHighestNodeNumber (Ordinal: 701, Address: 0x44990)
  • GetNumaNodeNumberFromHandle (Ordinal: 702, Address: 0x59700)
  • GetNumaNodeProcessorMask (Ordinal: 703, Address: 0x717f0)
  • GetNumaNodeProcessorMask2 (Ordinal: 704, Address: 0xaf04b)
  • GetNumaNodeProcessorMaskEx (Ordinal: 705, Address: 0x5b300)
  • GetNumaProcessorNode (Ordinal: 706, Address: 0xce50)
  • GetNumaProcessorNodeEx (Ordinal: 707, Address: 0xced0)
  • GetNumaProximityNode (Ordinal: 708, Address: 0x59770)
  • GetNumaProximityNodeEx (Ordinal: 709, Address: 0x5b320)
  • GetNumberFormatA (Ordinal: 710, Address: 0x50400)
  • GetNumberFormatEx (Ordinal: 711, Address: 0x4fc40)
  • GetNumberFormatW (Ordinal: 712, Address: 0x40550)
  • GetNumberOfConsoleFonts (Ordinal: 713, Address: 0x74130)
  • GetNumberOfConsoleInputEvents (Ordinal: 714, Address: 0x57900)
  • GetNumberOfConsoleMouseButtons (Ordinal: 715, Address: 0x57de0)
  • GetOEMCP (Ordinal: 716, Address: 0x44590)
  • GetOverlappedResult (Ordinal: 717, Address: 0x32170)
  • GetOverlappedResultEx (Ordinal: 718, Address: 0xaf1ba)
  • GetPackageApplicationIds (Ordinal: 719, Address: 0xaf203)
  • GetPackageFamilyName (Ordinal: 720, Address: 0xaf23c)
  • GetPackageFullName (Ordinal: 721, Address: 0xaf26f)
  • GetPackageId (Ordinal: 722, Address: 0xaf29a)
  • GetPackageInfo (Ordinal: 723, Address: 0xaf2c1)
  • GetPackagePath (Ordinal: 724, Address: 0xaf2ea)
  • GetPackagePathByFullName (Ordinal: 725, Address: 0xaf31d)
  • GetPackagesByPackageFamily (Ordinal: 726, Address: 0xaf35c)
  • GetPhysicallyInstalledSystemMemory (Ordinal: 727, Address: 0x46ac0)
  • GetPriorityClass (Ordinal: 728, Address: 0x3ce90)
  • GetPrivateProfileIntA (Ordinal: 729, Address: 0x3f9d0)
  • GetPrivateProfileIntW (Ordinal: 730, Address: 0x3a460)
  • GetPrivateProfileSectionA (Ordinal: 731, Address: 0x43250)
  • GetPrivateProfileSectionNamesA (Ordinal: 732, Address: 0x6d220)
  • GetPrivateProfileSectionNamesW (Ordinal: 733, Address: 0x3a430)
  • GetPrivateProfileSectionW (Ordinal: 734, Address: 0xf0b0)
  • GetPrivateProfileStringA (Ordinal: 735, Address: 0x3fa70)
  • GetPrivateProfileStringW (Ordinal: 736, Address: 0x3a560)
  • GetPrivateProfileStructA (Ordinal: 737, Address: 0x3f800)
  • GetPrivateProfileStructW (Ordinal: 738, Address: 0x6d250)
  • GetProcAddress (Ordinal: 739, Address: 0x32130)
  • GetProcessAffinityMask (Ordinal: 740, Address: 0xdbd0)
  • GetProcessDEPPolicy (Ordinal: 741, Address: 0x5a440)
  • GetProcessDefaultCpuSetMasks (Ordinal: 742, Address: 0xaf50f)
  • GetProcessDefaultCpuSets (Ordinal: 743, Address: 0xaf56b)
  • GetProcessGroupAffinity (Ordinal: 744, Address: 0x4df80)
  • GetProcessHandleCount (Ordinal: 745, Address: 0x435c0)
  • GetProcessHeap (Ordinal: 746, Address: 0x227a0)
  • GetProcessHeaps (Ordinal: 747, Address: 0x5b340)
  • GetProcessId (Ordinal: 748, Address: 0x343c0)
  • GetProcessIdOfThread (Ordinal: 749, Address: 0x3e820)
  • GetProcessInformation (Ordinal: 750, Address: 0x56da0)
  • GetProcessIoCounters (Ordinal: 751, Address: 0xda70)
  • GetProcessMitigationPolicy (Ordinal: 752, Address: 0xaf65f)
  • GetProcessPreferredUILanguages (Ordinal: 753, Address: 0x5b360)
  • GetProcessPriorityBoost (Ordinal: 754, Address: 0x5b380)
  • GetProcessShutdownParameters (Ordinal: 755, Address: 0x5b3a0)
  • GetProcessTimes (Ordinal: 756, Address: 0x37a20)
  • GetProcessVersion (Ordinal: 757, Address: 0x50250)
  • GetProcessWorkingSetSize (Ordinal: 758, Address: 0x56de0)
  • GetProcessWorkingSetSizeEx (Ordinal: 759, Address: 0x47ce0)
  • GetProcessesInVirtualizationContext (Ordinal: 760, Address: 0x58040)
  • GetProcessorSystemCycleTime (Ordinal: 761, Address: 0xaf78a)
  • GetProductInfo (Ordinal: 762, Address: 0x43350)
  • GetProfileIntA (Ordinal: 763, Address: 0x46400)
  • GetProfileIntW (Ordinal: 764, Address: 0x446f0)
  • GetProfileSectionA (Ordinal: 765, Address: 0x6d3f0)
  • GetProfileSectionW (Ordinal: 766, Address: 0x463f0)
  • GetProfileStringA (Ordinal: 767, Address: 0x3f9a0)
  • GetProfileStringW (Ordinal: 768, Address: 0x6d400)
  • GetQueuedCompletionStatus (Ordinal: 769, Address: 0x2d460)
  • GetQueuedCompletionStatusEx (Ordinal: 770, Address: 0x39550)
  • GetShortPathNameA (Ordinal: 771, Address: 0xb930)
  • GetShortPathNameW (Ordinal: 772, Address: 0xb270)
  • GetStagedPackagePathByFullName (Ordinal: 773, Address: 0xaf8b5)
  • GetStartupInfoA (Ordinal: 774, Address: 0x3dba0)
  • GetStartupInfoW (Ordinal: 775, Address: 0x3db30)
  • GetStateFolder (Ordinal: 776, Address: 0xaf90e)
  • GetStdHandle (Ordinal: 777, Address: 0x3f1a0)
  • GetStringScripts (Ordinal: 778, Address: 0x5b3c0)
  • GetStringTypeA (Ordinal: 779, Address: 0x45a60)
  • GetStringTypeExA (Ordinal: 780, Address: 0x45a60)
  • GetStringTypeExW (Ordinal: 781, Address: 0x34de0)
  • GetStringTypeW (Ordinal: 782, Address: 0x37000)
  • GetSystemAppDataKey (Ordinal: 783, Address: 0xaf99a)
  • GetSystemCpuSetInformation (Ordinal: 784, Address: 0xaf9d4)
  • GetSystemDEPPolicy (Ordinal: 785, Address: 0x5a4a0)
  • GetSystemDefaultLCID (Ordinal: 786, Address: 0x3fc40)
  • GetSystemDefaultLangID (Ordinal: 787, Address: 0x3f180)
  • GetSystemDefaultLocaleName (Ordinal: 788, Address: 0x3e460)
  • GetSystemDefaultUILanguage (Ordinal: 789, Address: 0x44c20)
  • GetSystemDirectoryA (Ordinal: 790, Address: 0x435b0)
  • GetSystemDirectoryW (Ordinal: 791, Address: 0x3ee00)
  • GetSystemFileCacheSize (Ordinal: 792, Address: 0x5b3e0)
  • GetSystemFirmwareTable (Ordinal: 793, Address: 0x445f0)
  • GetSystemInfo (Ordinal: 794, Address: 0x3cde0)
  • GetSystemPowerStatus (Ordinal: 795, Address: 0xcc90)
  • GetSystemPreferredUILanguages (Ordinal: 796, Address: 0x54c40)
  • GetSystemRegistryQuota (Ordinal: 797, Address: 0x5a4e0)
  • GetSystemTime (Ordinal: 798, Address: 0x36740)
  • GetSystemTimeAdjustment (Ordinal: 799, Address: 0x44bc0)
  • GetSystemTimeAsFileTime (Ordinal: 800, Address: 0x2fe60)
  • GetSystemTimePreciseAsFileTime (Ordinal: 801, Address: 0x57610)
  • GetSystemTimes (Ordinal: 802, Address: 0x3bec0)
  • GetSystemWindowsDirectoryA (Ordinal: 803, Address: 0x46b20)
  • GetSystemWindowsDirectoryW (Ordinal: 804, Address: 0x44740)
  • GetSystemWow64DirectoryA (Ordinal: 805, Address: 0x57780)
  • GetSystemWow64DirectoryW (Ordinal: 806, Address: 0x57790)
  • GetTapeParameters (Ordinal: 807, Address: 0x71870)
  • GetTapePosition (Ordinal: 808, Address: 0x61220)
  • GetTapeStatus (Ordinal: 809, Address: 0x612b0)
  • GetTempFileNameA (Ordinal: 810, Address: 0x57380)
  • GetTempFileNameW (Ordinal: 811, Address: 0x57390)
  • GetTempPath2A (Ordinal: 812, Address: 0x573a0)
  • GetTempPath2W (Ordinal: 813, Address: 0x573b0)
  • GetTempPathA (Ordinal: 814, Address: 0x573c0)
  • GetTempPathW (Ordinal: 815, Address: 0x573d0)
  • GetThreadContext (Ordinal: 816, Address: 0x3be40)
  • GetThreadDescription (Ordinal: 817, Address: 0xafcba)
  • GetThreadEnabledXStateFeatures (Ordinal: 818, Address: 0x5b400)
  • GetThreadErrorMode (Ordinal: 819, Address: 0x44f00)
  • GetThreadGroupAffinity (Ordinal: 820, Address: 0x44c40)
  • GetThreadIOPendingFlag (Ordinal: 821, Address: 0x42050)
  • GetThreadId (Ordinal: 822, Address: 0x39410)
  • GetThreadIdealProcessorEx (Ordinal: 823, Address: 0x2ef60)
  • GetThreadInformation (Ordinal: 824, Address: 0x56db0)
  • GetThreadLocale (Ordinal: 825, Address: 0x36c50)
  • GetThreadPreferredUILanguages (Ordinal: 826, Address: 0x44510)
  • GetThreadPriority (Ordinal: 827, Address: 0x36760)
  • GetThreadPriorityBoost (Ordinal: 828, Address: 0x3f100)
  • GetThreadSelectedCpuSetMasks (Ordinal: 829, Address: 0xafe04)
  • GetThreadSelectedCpuSets (Ordinal: 830, Address: 0xafe60)
  • GetThreadSelectorEntry (Ordinal: 831, Address: 0x718d0)
  • GetThreadTimes (Ordinal: 832, Address: 0x32f70)
  • GetThreadUILanguage (Ordinal: 833, Address: 0x47a80)
  • GetTickCount (Ordinal: 834, Address: 0x18600)
  • GetTickCount64 (Ordinal: 835, Address: 0x12b00)
  • GetTimeFormatA (Ordinal: 836, Address: 0x5b420)
  • GetTimeFormatAWorker (Ordinal: 837, Address: 0x389f0)
  • GetTimeFormatEx (Ordinal: 838, Address: 0x444f0)
  • GetTimeFormatW (Ordinal: 839, Address: 0x43080)
  • GetTimeFormatWWorker (Ordinal: 840, Address: 0x15990)
  • GetTimeZoneInformation (Ordinal: 841, Address: 0x41750)
  • GetTimeZoneInformationForYear (Ordinal: 842, Address: 0x5b440)
  • GetUILanguageInfo (Ordinal: 843, Address: 0x5b460)
  • GetUmsCompletionListEvent (Ordinal: 844, Address: 0x601e0)
  • GetUmsSystemThreadInformation (Ordinal: 845, Address: 0x601e0)
  • GetUserDefaultGeoName (Ordinal: 846, Address: 0x13ea0)
  • GetUserDefaultLCID (Ordinal: 847, Address: 0x39150)
  • GetUserDefaultLangID (Ordinal: 848, Address: 0x43040)
  • GetUserDefaultLocaleName (Ordinal: 849, Address: 0x3f1e0)
  • GetUserDefaultUILanguage (Ordinal: 850, Address: 0x437b0)
  • GetUserGeoID (Ordinal: 851, Address: 0x13a70)
  • GetUserPreferredUILanguages (Ordinal: 852, Address: 0x45290)
  • GetVDMCurrentDirectories (Ordinal: 853, Address: 0x5f900)
  • GetVersion (Ordinal: 854, Address: 0x416d0)
  • GetVersionExA (Ordinal: 855, Address: 0x420d0)
  • GetVersionExW (Ordinal: 856, Address: 0x3f120)
  • GetVolumeInformationA (Ordinal: 857, Address: 0x573e0)
  • GetVolumeInformationByHandleW (Ordinal: 858, Address: 0x573f0)
  • GetVolumeInformationW (Ordinal: 859, Address: 0x57400)
  • GetVolumeNameForVolumeMountPointA (Ordinal: 860, Address: 0x6f9e0)
  • GetVolumeNameForVolumeMountPointW (Ordinal: 861, Address: 0x56d90)
  • GetVolumePathNameA (Ordinal: 862, Address: 0xadf0)
  • GetVolumePathNameW (Ordinal: 863, Address: 0x57410)
  • GetVolumePathNamesForVolumeNameA (Ordinal: 864, Address: 0xc4a0)
  • GetVolumePathNamesForVolumeNameW (Ordinal: 865, Address: 0x57420)
  • GetWindowsDirectoryA (Ordinal: 866, Address: 0x447c0)
  • GetWindowsDirectoryW (Ordinal: 867, Address: 0x42030)
  • GetWriteWatch (Ordinal: 868, Address: 0x3df20)
  • GetXStateFeaturesMask (Ordinal: 869, Address: 0x5b480)
  • GlobalAddAtomA (Ordinal: 870, Address: 0x42090)
  • GlobalAddAtomExA (Ordinal: 871, Address: 0x69c70)
  • GlobalAddAtomExW (Ordinal: 872, Address: 0x3bea0)
  • GlobalAddAtomW (Ordinal: 873, Address: 0x3bcb0)
  • GlobalAlloc (Ordinal: 874, Address: 0x34310)
  • GlobalCompact (Ordinal: 875, Address: 0x59120)
  • GlobalDeleteAtom (Ordinal: 876, Address: 0x35ed0)
  • GlobalFindAtomA (Ordinal: 877, Address: 0x430a0)
  • GlobalFindAtomW (Ordinal: 878, Address: 0x36c90)
  • GlobalFix (Ordinal: 879, Address: 0x59140)
  • GlobalFlags (Ordinal: 880, Address: 0x46390)
  • GlobalFree (Ordinal: 881, Address: 0x22750)
  • GlobalGetAtomNameA (Ordinal: 882, Address: 0x69c90)
  • GlobalGetAtomNameW (Ordinal: 883, Address: 0xd390)
  • GlobalHandle (Ordinal: 884, Address: 0x3cbd0)
  • GlobalLock (Ordinal: 885, Address: 0x3bf60)
  • GlobalMemoryStatus (Ordinal: 886, Address: 0x343e0)
  • GlobalMemoryStatusEx (Ordinal: 887, Address: 0x3a700)
  • GlobalReAlloc (Ordinal: 888, Address: 0x448b0)
  • GlobalSize (Ordinal: 889, Address: 0x42790)
  • GlobalUnWire (Ordinal: 890, Address: 0x3d0a0)
  • GlobalUnfix (Ordinal: 891, Address: 0x59170)
  • GlobalUnlock (Ordinal: 892, Address: 0x3d0a0)
  • GlobalWire (Ordinal: 893, Address: 0x3bf60)
  • Heap32First (Ordinal: 894, Address: 0x43810)
  • Heap32ListFirst (Ordinal: 895, Address: 0x6f420)
  • Heap32ListNext (Ordinal: 896, Address: 0x42ce0)
  • Heap32Next (Ordinal: 897, Address: 0x3a8c0)
  • HeapAlloc (Ordinal: 898, Address: 0xb0385)
  • HeapCompact (Ordinal: 899, Address: 0x4f900)
  • HeapCreate (Ordinal: 900, Address: 0x42010)
  • HeapDestroy (Ordinal: 901, Address: 0x42de0)
  • HeapFree (Ordinal: 902, Address: 0x22e70)
  • HeapLock (Ordinal: 903, Address: 0x46ae0)
  • HeapQueryInformation (Ordinal: 904, Address: 0x47a60)
  • HeapReAlloc (Ordinal: 905, Address: 0xb03f1)
  • HeapSetInformation (Ordinal: 906, Address: 0x43710)
  • HeapSize (Ordinal: 907, Address: 0xb0425)
  • HeapSummary (Ordinal: 908, Address: 0x5b4a0)
  • HeapUnlock (Ordinal: 909, Address: 0x50c70)
  • HeapValidate (Ordinal: 910, Address: 0x41430)
  • HeapWalk (Ordinal: 911, Address: 0x37020)
  • IdnToAscii (Ordinal: 912, Address: 0x45ba0)
  • IdnToNameprepUnicode (Ordinal: 913, Address: 0x5b4c0)
  • IdnToUnicode (Ordinal: 914, Address: 0x5b4e0)
  • InitAtomTable (Ordinal: 915, Address: 0x567a0)
  • InitOnceBeginInitialize (Ordinal: 916, Address: 0xb04b7)
  • InitOnceComplete (Ordinal: 917, Address: 0xb04fd)
  • InitOnceExecuteOnce (Ordinal: 918, Address: 0xb053f)
  • InitOnceInitialize (Ordinal: 919, Address: 0xb0583)
  • InitializeConditionVariable (Ordinal: 920, Address: 0xb05ba)
  • InitializeContext (Ordinal: 921, Address: 0x475d0)
  • InitializeContext2 (Ordinal: 922, Address: 0x53350)
  • InitializeCriticalSection (Ordinal: 923, Address: 0xb061e)
  • InitializeCriticalSectionAndSpinCount (Ordinal: 924, Address: 0x56f00)
  • InitializeCriticalSectionEx (Ordinal: 925, Address: 0x56f10)
  • InitializeEnclave (Ordinal: 926, Address: 0xb0695)
  • InitializeProcThreadAttributeList (Ordinal: 927, Address: 0xb06e8)
  • InitializeSListHead (Ordinal: 928, Address: 0xb0744)
  • InitializeSRWLock (Ordinal: 929, Address: 0xb0773)
  • InitializeSynchronizationBarrier (Ordinal: 930, Address: 0x5b500)
  • InstallELAMCertificateInfo (Ordinal: 931, Address: 0xb07ca)
  • InterlockedFlushSList (Ordinal: 932, Address: 0xb081a)
  • InterlockedPopEntrySList (Ordinal: 933, Address: 0xb0852)
  • InterlockedPushEntrySList (Ordinal: 934, Address: 0xb088e)
  • InterlockedPushListSList (Ordinal: 935, Address: 0xb08ca)
  • InterlockedPushListSListEx (Ordinal: 936, Address: 0xb0907)
  • InvalidateConsoleDIBits (Ordinal: 937, Address: 0x742a0)
  • IsBadCodePtr (Ordinal: 938, Address: 0x40560)
  • IsBadHugeReadPtr (Ordinal: 939, Address: 0x5a570)
  • IsBadHugeWritePtr (Ordinal: 940, Address: 0x5a580)
  • IsBadReadPtr (Ordinal: 941, Address: 0x12a70)
  • IsBadStringPtrA (Ordinal: 942, Address: 0x2ef80)
  • IsBadStringPtrW (Ordinal: 943, Address: 0x35e30)
  • IsBadWritePtr (Ordinal: 944, Address: 0x36f50)
  • IsCalendarLeapDay (Ordinal: 945, Address: 0x647a0)
  • IsCalendarLeapMonth (Ordinal: 946, Address: 0x64930)
  • IsCalendarLeapYear (Ordinal: 947, Address: 0x64a50)
  • IsDBCSLeadByte (Ordinal: 948, Address: 0x3bd10)
  • IsDBCSLeadByteEx (Ordinal: 949, Address: 0x3ee10)
  • IsDebuggerPresent (Ordinal: 950, Address: 0x3ce40)
  • IsEnclaveTypeSupported (Ordinal: 951, Address: 0xb0a30)
  • IsIoRingOpSupported (Ordinal: 952, Address: 0xb0a7a)
  • IsNLSDefinedString (Ordinal: 953, Address: 0x4e0a0)
  • IsNativeVhdBoot (Ordinal: 954, Address: 0x58340)
  • IsNormalizedString (Ordinal: 955, Address: 0x445d0)
  • IsProcessCritical (Ordinal: 956, Address: 0xb0af4)
  • IsProcessInJob (Ordinal: 957, Address: 0x3f140)
  • IsProcessorFeaturePresent (Ordinal: 958, Address: 0x3ce70)
  • IsSystemResumeAutomatic (Ordinal: 959, Address: 0x449b0)
  • IsThreadAFiber (Ordinal: 960, Address: 0x304a0)
  • IsThreadpoolTimerSet (Ordinal: 961, Address: 0xb0b91)
  • IsUserCetAvailableInEnvironment (Ordinal: 962, Address: 0xb0bc4)
  • IsValidCalDateTime (Ordinal: 963, Address: 0x15500)
  • IsValidCodePage (Ordinal: 964, Address: 0x342f0)
  • IsValidLanguageGroup (Ordinal: 965, Address: 0x5b520)
  • IsValidLocale (Ordinal: 966, Address: 0x437d0)
  • IsValidLocaleName (Ordinal: 967, Address: 0x5b540)
  • IsValidNLSVersion (Ordinal: 968, Address: 0x5b560)
  • IsWow64GuestMachineSupported (Ordinal: 969, Address: 0xb0c8a)
  • IsWow64Process (Ordinal: 970, Address: 0x37430)
  • IsWow64Process2 (Ordinal: 971, Address: 0xb0ce3)
  • K32EmptyWorkingSet (Ordinal: 972, Address: 0x463b0)
  • K32EnumDeviceDrivers (Ordinal: 973, Address: 0x5b580)
  • K32EnumPageFilesA (Ordinal: 974, Address: 0x5b5a0)
  • K32EnumPageFilesW (Ordinal: 975, Address: 0x5b5c0)
  • K32EnumProcessModules (Ordinal: 976, Address: 0x430e0)
  • K32EnumProcessModulesEx (Ordinal: 977, Address: 0x44530)
  • K32EnumProcesses (Ordinal: 978, Address: 0x43b40)
  • K32GetDeviceDriverBaseNameA (Ordinal: 979, Address: 0x51cf0)
  • K32GetDeviceDriverBaseNameW (Ordinal: 980, Address: 0x46e80)
  • K32GetDeviceDriverFileNameA (Ordinal: 981, Address: 0x535c0)
  • K32GetDeviceDriverFileNameW (Ordinal: 982, Address: 0x562c0)
  • K32GetMappedFileNameA (Ordinal: 983, Address: 0x5b5e0)
  • K32GetMappedFileNameW (Ordinal: 984, Address: 0x3ee50)
  • K32GetModuleBaseNameA (Ordinal: 985, Address: 0x44c00)
  • K32GetModuleBaseNameW (Ordinal: 986, Address: 0x43650)
  • K32GetModuleFileNameExA (Ordinal: 987, Address: 0x42e00)
  • K32GetModuleFileNameExW (Ordinal: 988, Address: 0x3ecc0)
  • K32GetModuleInformation (Ordinal: 989, Address: 0x42910)
  • K32GetPerformanceInfo (Ordinal: 990, Address: 0x44fc0)
  • K32GetProcessImageFileNameA (Ordinal: 991, Address: 0x43330)
  • K32GetProcessImageFileNameW (Ordinal: 992, Address: 0x3f380)
  • K32GetProcessMemoryInfo (Ordinal: 993, Address: 0x39510)
  • K32GetWsChanges (Ordinal: 994, Address: 0x5b620)
  • K32GetWsChangesEx (Ordinal: 995, Address: 0x5b600)
  • K32InitializeProcessForWsWatch (Ordinal: 996, Address: 0x5b640)
  • K32QueryWorkingSet (Ordinal: 997, Address: 0x41aa0)
  • K32QueryWorkingSetEx (Ordinal: 998, Address: 0x42730)
  • LCIDToLocaleName (Ordinal: 999, Address: 0x3a8a0)
  • LCMapStringA (Ordinal: 1000, Address: 0x446d0)
  • LCMapStringEx (Ordinal: 1001, Address: 0x219f0)
  • LCMapStringW (Ordinal: 1002, Address: 0x31580)
  • LZClose (Ordinal: 1003, Address: 0x566e0)
  • LZCloseFile (Ordinal: 1004, Address: 0x5c580)
  • LZCopy (Ordinal: 1005, Address: 0x58470)
  • LZCreateFileW (Ordinal: 1006, Address: 0x5c660)
  • LZDone (Ordinal: 1007, Address: 0x58580)
  • LZInit (Ordinal: 1008, Address: 0x5c7b0)
  • LZOpenFileA (Ordinal: 1009, Address: 0x5c9a0)
  • LZOpenFileW (Ordinal: 1010, Address: 0x5ca90)
  • LZRead (Ordinal: 1011, Address: 0x4e680)
  • LZSeek (Ordinal: 1012, Address: 0x5cb50)
  • LZStart (Ordinal: 1013, Address: 0x58590)
  • LeaveCriticalSection (Ordinal: 1014, Address: 0xb102d)
  • LeaveCriticalSectionWhenCallbackReturns (Ordinal: 1015, Address: 0xb1073)
  • LoadAppInitDlls (Ordinal: 1016, Address: 0x32fc0)
  • LoadEnclaveData (Ordinal: 1017, Address: 0xb10c4)
  • LoadLibraryA (Ordinal: 1018, Address: 0x428f0)
  • LoadLibraryExA (Ordinal: 1019, Address: 0x3f200)
  • LoadLibraryExW (Ordinal: 1020, Address: 0x3bd50)
  • LoadLibraryW (Ordinal: 1021, Address: 0x3ee30)
  • LoadModule (Ordinal: 1022, Address: 0x3fcf0)
  • LoadPackagedLibrary (Ordinal: 1023, Address: 0x575f0)
  • LoadResource (Ordinal: 1024, Address: 0x3cbf0)
  • LoadStringBaseExW (Ordinal: 1025, Address: 0x5b660)
  • LoadStringBaseW (Ordinal: 1026, Address: 0x591d0)
  • LocalAlloc (Ordinal: 1027, Address: 0x36c30)
  • LocalCompact (Ordinal: 1028, Address: 0x59120)
  • LocalFileTimeToFileTime (Ordinal: 1029, Address: 0x57430)
  • LocalFileTimeToLocalSystemTime (Ordinal: 1030, Address: 0xb11c8)
  • LocalFlags (Ordinal: 1031, Address: 0x5b680)
  • LocalFree (Ordinal: 1032, Address: 0x32f50)
  • LocalHandle (Ordinal: 1033, Address: 0x3f040)
  • LocalLock (Ordinal: 1034, Address: 0x5b6a0)
  • LocalReAlloc (Ordinal: 1035, Address: 0x44720)
  • LocalShrink (Ordinal: 1036, Address: 0x59120)
  • LocalSize (Ordinal: 1037, Address: 0x51d10)
  • LocalSystemTimeToLocalFileTime (Ordinal: 1038, Address: 0xb1274)
  • LocalUnlock (Ordinal: 1039, Address: 0x5b6c0)
  • LocaleNameToLCID (Ordinal: 1040, Address: 0x37ef0)
  • LocateXStateFeature (Ordinal: 1041, Address: 0x447a0)
  • LockFile (Ordinal: 1042, Address: 0x57440)
  • LockFileEx (Ordinal: 1043, Address: 0x57450)
  • LockResource (Ordinal: 1044, Address: 0x3f020)
  • LogUnexpectedCodepath (Ordinal: 1045, Address: 0xb131b)
  • MapUserPhysicalPages (Ordinal: 1046, Address: 0x5b6e0)
  • MapUserPhysicalPagesScatter (Ordinal: 1047, Address: 0x62210)
  • MapViewOfFile (Ordinal: 1048, Address: 0x37a60)
  • MapViewOfFileEx (Ordinal: 1049, Address: 0x3fc90)
  • MapViewOfFileExNuma (Ordinal: 1050, Address: 0x5b700)
  • MapViewOfFileFromApp (Ordinal: 1051, Address: 0xb13b2)
  • Module32First (Ordinal: 1052, Address: 0x318c0)
  • Module32FirstW (Ordinal: 1053, Address: 0x31a20)
  • Module32Next (Ordinal: 1054, Address: 0x22880)
  • Module32NextW (Ordinal: 1055, Address: 0x229d0)
  • MoveFileA (Ordinal: 1056, Address: 0x6ec60)
  • MoveFileExA (Ordinal: 1057, Address: 0xacf0)
  • MoveFileExW (Ordinal: 1058, Address: 0x43310)
  • MoveFileTransactedA (Ordinal: 1059, Address: 0x6ec90)
  • MoveFileTransactedW (Ordinal: 1060, Address: 0x6ed60)
  • MoveFileW (Ordinal: 1061, Address: 0x3db50)
  • MoveFileWithProgressA (Ordinal: 1062, Address: 0x52700)
  • MoveFileWithProgressW (Ordinal: 1063, Address: 0x5b720)
  • MulDiv (Ordinal: 1064, Address: 0x575c0)
  • MultiByteToWideChar (Ordinal: 1065, Address: 0x30480)
  • NeedCurrentDirectoryForExePathA (Ordinal: 1066, Address: 0x5b740)
  • NeedCurrentDirectoryForExePathW (Ordinal: 1067, Address: 0x5b760)
  • NlsCheckPolicy (Ordinal: 1068, Address: 0x57830)
  • NlsGetCacheUpdateCount (Ordinal: 1069, Address: 0x57840)
  • NlsUpdateLocale (Ordinal: 1070, Address: 0x57850)
  • NlsUpdateSystemLocale (Ordinal: 1071, Address: 0x57860)
  • NormalizeString (Ordinal: 1072, Address: 0x3dff0)
  • NotifyMountMgr (Ordinal: 1073, Address: 0x5b780)
  • NotifyUILanguageChange (Ordinal: 1074, Address: 0x34e00)
  • NtVdm64CreateProcessInternalW (Ordinal: 1075, Address: 0x5a590)
  • OOBEComplete (Ordinal: 1076, Address: 0x31bc0)
  • OfferVirtualMemory (Ordinal: 1077, Address: 0xb15b8)
  • OpenConsoleW (Ordinal: 1078, Address: 0x73260)
  • OpenConsoleWStub (Ordinal: 1079, Address: 0x5b7a0)
  • OpenEventA (Ordinal: 1080, Address: 0x56f20)
  • OpenEventW (Ordinal: 1081, Address: 0x56f30)
  • OpenFile (Ordinal: 1082, Address: 0x40d60)
  • OpenFileById (Ordinal: 1083, Address: 0x427b0)
  • OpenFileMappingA (Ordinal: 1084, Address: 0xc950)
  • OpenFileMappingW (Ordinal: 1085, Address: 0x3f360)
  • OpenJobObjectA (Ordinal: 1086, Address: 0x6b6a0)
  • OpenJobObjectW (Ordinal: 1087, Address: 0x454c0)
  • OpenMutexA (Ordinal: 1088, Address: 0xcbc0)
  • OpenMutexW (Ordinal: 1089, Address: 0x56f40)
  • OpenPackageInfoByFullName (Ordinal: 1090, Address: 0xb16a3)
  • OpenPrivateNamespaceA (Ordinal: 1091, Address: 0x6dd00)
  • OpenPrivateNamespaceW (Ordinal: 1092, Address: 0x42070)
  • OpenProcess (Ordinal: 1093, Address: 0x32110)
  • OpenProcessToken (Ordinal: 1094, Address: 0xb1711)
  • OpenProfileUserMapping (Ordinal: 1095, Address: 0x58590)
  • OpenSemaphoreA (Ordinal: 1096, Address: 0xc870)
  • OpenSemaphoreW (Ordinal: 1097, Address: 0x56f50)
  • OpenState (Ordinal: 1098, Address: 0xb1787)
  • OpenStateExplicit (Ordinal: 1099, Address: 0xb17ae)
  • OpenThread (Ordinal: 1100, Address: 0x36c10)
  • OpenThreadToken (Ordinal: 1101, Address: 0xb17e6)
  • OpenWaitableTimerA (Ordinal: 1102, Address: 0x56660)
  • OpenWaitableTimerW (Ordinal: 1103, Address: 0x56f60)
  • OutputDebugStringA (Ordinal: 1104, Address: 0x41830)
  • OutputDebugStringW (Ordinal: 1105, Address: 0x3f3c0)
  • PackageFamilyNameFromFullName (Ordinal: 1106, Address: 0xb1886)
  • PackageFamilyNameFromId (Ordinal: 1107, Address: 0xb18c7)
  • PackageFullNameFromId (Ordinal: 1108, Address: 0xb1900)
  • PackageIdFromFullName (Ordinal: 1109, Address: 0xb1937)
  • PackageNameAndPublisherIdFromFamilyName (Ordinal: 1110, Address: 0xb1980)
  • ParseApplicationUserModelId (Ordinal: 1111, Address: 0xb19cf)
  • PeekConsoleInputA (Ordinal: 1112, Address: 0x57910)
  • PeekConsoleInputW (Ordinal: 1113, Address: 0x57920)
  • PeekNamedPipe (Ordinal: 1114, Address: 0x36d80)
  • PopIoRingCompletion (Ordinal: 1115, Address: 0xb1a3c)
  • PostQueuedCompletionStatus (Ordinal: 1116, Address: 0x32190)
  • PowerClearRequest (Ordinal: 1117, Address: 0x3ed60)
  • PowerCreateRequest (Ordinal: 1118, Address: 0x38230)
  • PowerSetRequest (Ordinal: 1119, Address: 0x3e780)
  • PrefetchVirtualMemory (Ordinal: 1120, Address: 0xb1ad4)
  • PrepareTape (Ordinal: 1121, Address: 0x612e0)
  • PrivCopyFileExW (Ordinal: 1122, Address: 0x444d0)
  • PrivMoveFileIdentityW (Ordinal: 1123, Address: 0x6ee30)
  • Process32First (Ordinal: 1124, Address: 0x30090)
  • Process32FirstW (Ordinal: 1125, Address: 0x301b0)
  • Process32Next (Ordinal: 1126, Address: 0x181e0)
  • Process32NextW (Ordinal: 1127, Address: 0x18300)
  • ProcessIdToSessionId (Ordinal: 1128, Address: 0x343a0)
  • PssCaptureSnapshot (Ordinal: 1129, Address: 0x5b7b0)
  • PssDuplicateSnapshot (Ordinal: 1130, Address: 0x5b7d0)
  • PssFreeSnapshot (Ordinal: 1131, Address: 0x5b7f0)
  • PssQuerySnapshot (Ordinal: 1132, Address: 0x5b810)
  • PssWalkMarkerCreate (Ordinal: 1133, Address: 0x5b830)
  • PssWalkMarkerFree (Ordinal: 1134, Address: 0x5b850)
  • PssWalkMarkerGetPosition (Ordinal: 1135, Address: 0x5b870)
  • PssWalkMarkerRewind (Ordinal: 1136, Address: 0x5b890)
  • PssWalkMarkerSeek (Ordinal: 1137, Address: 0x5b8b0)
  • PssWalkMarkerSeekToBeginning (Ordinal: 1138, Address: 0x5b890)
  • PssWalkMarkerSetPosition (Ordinal: 1139, Address: 0x5b8b0)
  • PssWalkMarkerTell (Ordinal: 1140, Address: 0x5b870)
  • PssWalkSnapshot (Ordinal: 1141, Address: 0x45890)
  • PulseEvent (Ordinal: 1142, Address: 0x35eb0)
  • PurgeComm (Ordinal: 1143, Address: 0x576f0)
  • QueryActCtxSettingsW (Ordinal: 1144, Address: 0x5b8d0)
  • QueryActCtxSettingsWWorker (Ordinal: 1145, Address: 0xdf10)
  • QueryActCtxW (Ordinal: 1146, Address: 0x444b0)
  • QueryActCtxWWorker (Ordinal: 1147, Address: 0x37f10)
  • QueryDepthSList (Ordinal: 1148, Address: 0xb1d06)
  • QueryDosDeviceA (Ordinal: 1149, Address: 0xc660)
  • QueryDosDeviceW (Ordinal: 1150, Address: 0x57460)
  • QueryFullProcessImageNameA (Ordinal: 1151, Address: 0x42930)
  • QueryFullProcessImageNameW (Ordinal: 1152, Address: 0x3bf40)
  • QueryIdleProcessorCycleTime (Ordinal: 1153, Address: 0x561a0)
  • QueryIdleProcessorCycleTimeEx (Ordinal: 1154, Address: 0x5b8f0)
  • QueryInformationJobObject (Ordinal: 1155, Address: 0xe0f0)
  • QueryIoRateControlInformationJobObject (Ordinal: 1156, Address: 0x6b720)
  • QueryIoRingCapabilities (Ordinal: 1157, Address: 0xb1e08)
  • QueryMemoryResourceNotification (Ordinal: 1158, Address: 0x31ba0)
  • QueryPerformanceCounter (Ordinal: 1159, Address: 0x227c0)
  • QueryPerformanceFrequency (Ordinal: 1160, Address: 0x316a0)
  • QueryProcessAffinityUpdateMode (Ordinal: 1161, Address: 0x5b910)
  • QueryProcessCycleTime (Ordinal: 1162, Address: 0x42bd0)
  • QueryProtectedPolicy (Ordinal: 1163, Address: 0xb1eda)
  • QueryThreadCycleTime (Ordinal: 1164, Address: 0x36c70)
  • QueryThreadProfiling (Ordinal: 1165, Address: 0x62390)
  • QueryThreadpoolStackInformation (Ordinal: 1166, Address: 0x5b930)
  • QueryUmsThreadInformation (Ordinal: 1167, Address: 0x601e0)
  • QueryUnbiasedInterruptTime (Ordinal: 1168, Address: 0x31610)
  • QueueUserAPC (Ordinal: 1169, Address: 0x3a880)
  • QueueUserAPC2 (Ordinal: 1170, Address: 0xb1faf)
  • QueueUserWorkItem (Ordinal: 1171, Address: 0x3fcb0)
  • QuirkGetData2Worker (Ordinal: 1172, Address: 0x78fb0)
  • QuirkGetDataWorker (Ordinal: 1173, Address: 0x79080)
  • QuirkIsEnabled2Worker (Ordinal: 1174, Address: 0x79130)
  • QuirkIsEnabled3Worker (Ordinal: 1175, Address: 0x18ea0)
  • QuirkIsEnabledForPackage2Worker (Ordinal: 1176, Address: 0x18a50)
  • QuirkIsEnabledForPackage3Worker (Ordinal: 1177, Address: 0x18db0)
  • QuirkIsEnabledForPackage4Worker (Ordinal: 1178, Address: 0x18e00)
  • QuirkIsEnabledForPackageWorker (Ordinal: 1179, Address: 0x18c30)
  • QuirkIsEnabledForProcessWorker (Ordinal: 1180, Address: 0x18790)
  • QuirkIsEnabledWorker (Ordinal: 1181, Address: 0x19610)
  • RaiseException (Ordinal: 1182, Address: 0x3a860)
  • RaiseFailFastException (Ordinal: 1183, Address: 0xb2121)
  • RaiseInvalid16BitExeError (Ordinal: 1184, Address: 0x5a7a0)
  • ReOpenFile (Ordinal: 1185, Address: 0x44610)
  • ReadConsoleA (Ordinal: 1186, Address: 0x57930)
  • ReadConsoleInputA (Ordinal: 1187, Address: 0x57940)
  • ReadConsoleInputExA (Ordinal: 1188, Address: 0xb219b)
  • ReadConsoleInputExW (Ordinal: 1189, Address: 0xb21ce)
  • ReadConsoleInputW (Ordinal: 1190, Address: 0x57950)
  • ReadConsoleOutputA (Ordinal: 1191, Address: 0x57ab0)
  • ReadConsoleOutputAttribute (Ordinal: 1192, Address: 0x57ac0)
  • ReadConsoleOutputCharacterA (Ordinal: 1193, Address: 0x57ad0)
  • ReadConsoleOutputCharacterW (Ordinal: 1194, Address: 0x57ae0)
  • ReadConsoleOutputW (Ordinal: 1195, Address: 0x57af0)
  • ReadConsoleW (Ordinal: 1196, Address: 0x57960)
  • ReadDirectoryChangesExW (Ordinal: 1197, Address: 0x455a0)
  • ReadDirectoryChangesW (Ordinal: 1198, Address: 0x3f7a0)
  • ReadFile (Ordinal: 1199, Address: 0x57470)
  • ReadFileEx (Ordinal: 1200, Address: 0x57480)
  • ReadFileScatter (Ordinal: 1201, Address: 0x57490)
  • ReadProcessMemory (Ordinal: 1202, Address: 0x3af80)
  • ReadThreadProfilingData (Ordinal: 1203, Address: 0x623d0)
  • ReclaimVirtualMemory (Ordinal: 1204, Address: 0xb2316)
  • RegCloseKey (Ordinal: 1205, Address: 0x44930)
  • RegCopyTreeW (Ordinal: 1206, Address: 0x5b970)
  • RegCreateKeyExA (Ordinal: 1207, Address: 0x5b990)
  • RegCreateKeyExW (Ordinal: 1208, Address: 0x46b30)
  • RegDeleteKeyExA (Ordinal: 1209, Address: 0x5b9b0)
  • RegDeleteKeyExW (Ordinal: 1210, Address: 0x5b9d0)
  • RegDeleteTreeA (Ordinal: 1211, Address: 0x5b9f0)
  • RegDeleteTreeW (Ordinal: 1212, Address: 0x5ba10)
  • RegDeleteValueA (Ordinal: 1213, Address: 0x5ba30)
  • RegDeleteValueW (Ordinal: 1214, Address: 0x5ba50)
  • RegDisablePredefinedCacheEx (Ordinal: 1215, Address: 0x56840)
  • RegEnumKeyExA (Ordinal: 1216, Address: 0x43600)
  • RegEnumKeyExW (Ordinal: 1217, Address: 0x44c80)
  • RegEnumValueA (Ordinal: 1218, Address: 0x5ba70)
  • RegEnumValueW (Ordinal: 1219, Address: 0x5bac0)
  • RegFlushKey (Ordinal: 1220, Address: 0x5bb10)
  • RegGetKeySecurity (Ordinal: 1221, Address: 0x5bb30)
  • RegGetValueA (Ordinal: 1222, Address: 0x5bb50)
  • RegGetValueW (Ordinal: 1223, Address: 0x44aa0)
  • RegLoadKeyA (Ordinal: 1224, Address: 0x5bb70)
  • RegLoadKeyW (Ordinal: 1225, Address: 0x5bb90)
  • RegLoadMUIStringA (Ordinal: 1226, Address: 0x5bbb0)
  • RegLoadMUIStringW (Ordinal: 1227, Address: 0x52b90)
  • RegNotifyChangeKeyValue (Ordinal: 1228, Address: 0x50320)
  • RegOpenCurrentUser (Ordinal: 1229, Address: 0x44d60)
  • RegOpenKeyExA (Ordinal: 1230, Address: 0x46b00)
  • RegOpenKeyExW (Ordinal: 1231, Address: 0x44d10)
  • RegOpenUserClassesRoot (Ordinal: 1232, Address: 0x4dfd0)
  • RegQueryInfoKeyA (Ordinal: 1233, Address: 0x5bbd0)
  • RegQueryInfoKeyW (Ordinal: 1234, Address: 0x479d0)
  • RegQueryValueExA (Ordinal: 1235, Address: 0x46aa0)
  • RegQueryValueExW (Ordinal: 1236, Address: 0x44da0)
  • RegRestoreKeyA (Ordinal: 1237, Address: 0x5bc50)
  • RegRestoreKeyW (Ordinal: 1238, Address: 0x5bc70)
  • RegSaveKeyExA (Ordinal: 1239, Address: 0x5bc90)
  • RegSaveKeyExW (Ordinal: 1240, Address: 0x5bcb0)
  • RegSetKeySecurity (Ordinal: 1241, Address: 0x5bcd0)
  • RegSetValueExA (Ordinal: 1242, Address: 0x5bcf0)
  • RegSetValueExW (Ordinal: 1243, Address: 0x50340)
  • RegUnLoadKeyA (Ordinal: 1244, Address: 0x5bd10)
  • RegUnLoadKeyW (Ordinal: 1245, Address: 0x5bd30)
  • RegisterApplicationRecoveryCallback (Ordinal: 1246, Address: 0x44b20)
  • RegisterApplicationRestart (Ordinal: 1247, Address: 0x4df60)
  • RegisterBadMemoryNotification (Ordinal: 1248, Address: 0x5bd50)
  • RegisterConsoleIME (Ordinal: 1249, Address: 0x73bc0)
  • RegisterConsoleOS2 (Ordinal: 1250, Address: 0x73bf0)
  • RegisterConsoleVDM (Ordinal: 1251, Address: 0x733f0)
  • RegisterWaitForInputIdle (Ordinal: 1252, Address: 0x3ce60)
  • RegisterWaitForSingleObject (Ordinal: 1253, Address: 0x273c0)
  • RegisterWaitForSingleObjectEx (Ordinal: 1254, Address: 0x562e0)
  • RegisterWaitUntilOOBECompleted (Ordinal: 1255, Address: 0x55060)
  • RegisterWowBaseHandlers (Ordinal: 1256, Address: 0x591a0)
  • RegisterWowExec (Ordinal: 1257, Address: 0x5fea0)
  • ReleaseActCtx (Ordinal: 1258, Address: 0x44b00)
  • ReleaseActCtxWorker (Ordinal: 1259, Address: 0x3af60)
  • ReleaseMutex (Ordinal: 1260, Address: 0x56f70)
  • ReleaseMutexWhenCallbackReturns (Ordinal: 1261, Address: 0xb274f)
  • ReleasePackageVirtualizationContext (Ordinal: 1262, Address: 0x58060)
  • ReleasePseudoConsole (Ordinal: 1263, Address: 0x57970)
  • ReleaseSRWLockExclusive (Ordinal: 1264, Address: 0xb27c9)
  • ReleaseSRWLockShared (Ordinal: 1265, Address: 0xb27ff)
  • ReleaseSemaphore (Ordinal: 1266, Address: 0x56f80)
  • ReleaseSemaphoreWhenCallbackReturns (Ordinal: 1267, Address: 0xb2852)
  • RemoveDirectory2A (Ordinal: 1268, Address: 0x574a0)
  • RemoveDirectory2W (Ordinal: 1269, Address: 0x574b0)
  • RemoveDirectoryA (Ordinal: 1270, Address: 0x574c0)
  • RemoveDirectoryTransactedA (Ordinal: 1271, Address: 0x58870)
  • RemoveDirectoryTransactedW (Ordinal: 1272, Address: 0x6e410)
  • RemoveDirectoryW (Ordinal: 1273, Address: 0x574d0)
  • RemoveDllDirectory (Ordinal: 1274, Address: 0xb290e)
  • RemoveLocalAlternateComputerNameA (Ordinal: 1275, Address: 0x6ae60)
  • RemoveLocalAlternateComputerNameW (Ordinal: 1276, Address: 0x6aec0)
  • RemoveSecureMemoryCacheCallback (Ordinal: 1277, Address: 0x591b0)
  • RemoveVectoredContinueHandler (Ordinal: 1278, Address: 0xb29c8)
  • RemoveVectoredExceptionHandler (Ordinal: 1279, Address: 0xb2a0e)
  • ReplaceFile (Ordinal: 1280, Address: 0x42750)
  • ReplaceFileA (Ordinal: 1281, Address: 0x6e160)
  • ReplaceFileW (Ordinal: 1282, Address: 0x42750)
  • ReplacePartitionUnit (Ordinal: 1283, Address: 0x5a900)
  • RequestDeviceWakeup (Ordinal: 1284, Address: 0x448d0)
  • RequestWakeupLatency (Ordinal: 1285, Address: 0x448d0)
  • ResetEvent (Ordinal: 1286, Address: 0x56f90)
  • ResetWriteWatch (Ordinal: 1287, Address: 0x41770)
  • ResizePseudoConsole (Ordinal: 1288, Address: 0x57980)
  • ResolveDelayLoadedAPI (Ordinal: 1289, Address: 0xb2adf)
  • ResolveDelayLoadsFromDll (Ordinal: 1290, Address: 0xb2b17)
  • ResolveLocaleName (Ordinal: 1291, Address: 0x44890)
  • RestoreLastError (Ordinal: 1292, Address: 0xb2b5c)
  • ResumeThread (Ordinal: 1293, Address: 0x3bc90)
  • RtlAddFunctionTable (Ordinal: 1294, Address: 0x455c0)
  • RtlCaptureContext (Ordinal: 1295, Address: 0x56bc0)
  • RtlCaptureStackBackTrace (Ordinal: 1296, Address: 0xb2bc7)
  • RtlCompareMemory (Ordinal: 1297, Address: 0x40d40)
  • RtlCopyMemory (Ordinal: 1298, Address: 0x5bd70)
  • RtlDeleteFunctionTable (Ordinal: 1299, Address: 0x47cc0)
  • RtlFillMemory (Ordinal: 1300, Address: 0x43b90)
  • RtlInstallFunctionTableCallback (Ordinal: 1301, Address: 0x4f8e0)
  • RtlIsEcCode (Ordinal: 1302, Address: 0xb2c56)
  • RtlLookupFunctionEntry (Ordinal: 1303, Address: 0x3bdb0)
  • RtlMoveMemory (Ordinal: 1304, Address: 0x56bf0)
  • RtlPcToFileHeader (Ordinal: 1305, Address: 0x36d20)
  • RtlRaiseException (Ordinal: 1306, Address: 0x5bd80)
  • RtlRestoreContext (Ordinal: 1307, Address: 0x4ff80)
  • RtlUnwind (Ordinal: 1308, Address: 0x40910)
  • RtlUnwindEx (Ordinal: 1309, Address: 0x3f160)
  • RtlVirtualUnwind (Ordinal: 1310, Address: 0x27170)
  • RtlVirtualUnwind2 (Ordinal: 1311, Address: 0x5bda0)
  • RtlZeroMemory (Ordinal: 1312, Address: 0xb2d0a)
  • ScrollConsoleScreenBufferA (Ordinal: 1313, Address: 0x57b00)
  • ScrollConsoleScreenBufferW (Ordinal: 1314, Address: 0x57b10)
  • SearchPathA (Ordinal: 1315, Address: 0x5be30)
  • SearchPathW (Ordinal: 1316, Address: 0x44ae0)
  • SetCachedSigningLevel (Ordinal: 1317, Address: 0x4e080)
  • SetCalendarInfoA (Ordinal: 1318, Address: 0x651d0)
  • SetCalendarInfoW (Ordinal: 1319, Address: 0x5be50)
  • SetComPlusPackageInstallStatus (Ordinal: 1320, Address: 0x62040)
  • SetCommBreak (Ordinal: 1321, Address: 0x57700)
  • SetCommConfig (Ordinal: 1322, Address: 0x57710)
  • SetCommMask (Ordinal: 1323, Address: 0x57720)
  • SetCommState (Ordinal: 1324, Address: 0x57730)
  • SetCommTimeouts (Ordinal: 1325, Address: 0x57740)
  • SetComputerNameA (Ordinal: 1326, Address: 0x5be70)
  • SetComputerNameEx2W (Ordinal: 1327, Address: 0x5be90)
  • SetComputerNameExA (Ordinal: 1328, Address: 0x5beb0)
  • SetComputerNameExW (Ordinal: 1329, Address: 0x5bed0)
  • SetComputerNameW (Ordinal: 1330, Address: 0x5bef0)
  • SetConsoleActiveScreenBuffer (Ordinal: 1331, Address: 0x57b20)
  • SetConsoleCP (Ordinal: 1332, Address: 0x57b30)
  • SetConsoleCtrlHandler (Ordinal: 1333, Address: 0x57990)
  • SetConsoleCursor (Ordinal: 1334, Address: 0x734d0)
  • SetConsoleCursorInfo (Ordinal: 1335, Address: 0x57b40)
  • SetConsoleCursorMode (Ordinal: 1336, Address: 0x73c70)
  • SetConsoleCursorPosition (Ordinal: 1337, Address: 0x57b50)
  • SetConsoleDisplayMode (Ordinal: 1338, Address: 0x57df0)
  • SetConsoleFont (Ordinal: 1339, Address: 0x741a0)
  • SetConsoleHardwareState (Ordinal: 1340, Address: 0x73560)
  • SetConsoleHistoryInfo (Ordinal: 1341, Address: 0x57e00)
  • SetConsoleIcon (Ordinal: 1342, Address: 0x74220)
  • SetConsoleInputExeNameA (Ordinal: 1343, Address: 0xb2f71)
  • SetConsoleInputExeNameW (Ordinal: 1344, Address: 0xb2fac)
  • SetConsoleKeyShortcuts (Ordinal: 1345, Address: 0x735f0)
  • SetConsoleLocalEUDC (Ordinal: 1346, Address: 0x73d10)
  • SetConsoleMaximumWindowSize (Ordinal: 1347, Address: 0x58590)
  • SetConsoleMenuClose (Ordinal: 1348, Address: 0x736d0)
  • SetConsoleMode (Ordinal: 1349, Address: 0x579a0)
  • SetConsoleNlsMode (Ordinal: 1350, Address: 0x73e10)
  • SetConsoleNumberOfCommandsA (Ordinal: 1351, Address: 0x57e10)
  • SetConsoleNumberOfCommandsW (Ordinal: 1352, Address: 0x57e20)
  • SetConsoleOS2OemFormat (Ordinal: 1353, Address: 0x73e90)
  • SetConsoleOutputCP (Ordinal: 1354, Address: 0x57b60)
  • SetConsolePalette (Ordinal: 1355, Address: 0x73750)
  • SetConsoleScreenBufferInfoEx (Ordinal: 1356, Address: 0x57b70)
  • SetConsoleScreenBufferSize (Ordinal: 1357, Address: 0x57b80)
  • SetConsoleTextAttribute (Ordinal: 1358, Address: 0x57b90)
  • SetConsoleTitleA (Ordinal: 1359, Address: 0x57ba0)
  • SetConsoleTitleW (Ordinal: 1360, Address: 0x57bb0)
  • SetConsoleWindowInfo (Ordinal: 1361, Address: 0x57bc0)
  • SetCriticalSectionSpinCount (Ordinal: 1362, Address: 0xb3162)
  • SetCurrentConsoleFontEx (Ordinal: 1363, Address: 0x57e30)
  • SetCurrentDirectoryA (Ordinal: 1364, Address: 0x5bf10)
  • SetCurrentDirectoryW (Ordinal: 1365, Address: 0x436e0)
  • SetDefaultCommConfigA (Ordinal: 1366, Address: 0x5ce00)
  • SetDefaultCommConfigW (Ordinal: 1367, Address: 0x5cea0)
  • SetDefaultDllDirectories (Ordinal: 1368, Address: 0xb320e)
  • SetDllDirectoryA (Ordinal: 1369, Address: 0x70b00)
  • SetDllDirectoryW (Ordinal: 1370, Address: 0x3aec0)
  • SetDynamicTimeZoneInformation (Ordinal: 1371, Address: 0x5bf30)
  • SetEndOfFile (Ordinal: 1372, Address: 0x574e0)
  • SetEnvironmentStringsA (Ordinal: 1373, Address: 0x71990)
  • SetEnvironmentStringsW (Ordinal: 1374, Address: 0x5bf50)
  • SetEnvironmentVariableA (Ordinal: 1375, Address: 0x43100)
  • SetEnvironmentVariableW (Ordinal: 1376, Address: 0x43520)
  • SetErrorMode (Ordinal: 1377, Address: 0x3bc50)
  • SetEvent (Ordinal: 1378, Address: 0x56fa0)
  • SetEventWhenCallbackReturns (Ordinal: 1379, Address: 0xb3329)
  • SetFileApisToANSI (Ordinal: 1380, Address: 0x5bf70)
  • SetFileApisToOEM (Ordinal: 1381, Address: 0x5bf90)
  • SetFileAttributesA (Ordinal: 1382, Address: 0x574f0)
  • SetFileAttributesTransactedA (Ordinal: 1383, Address: 0x6f310)
  • SetFileAttributesTransactedW (Ordinal: 1384, Address: 0x6f370)
  • SetFileAttributesW (Ordinal: 1385, Address: 0x57500)
  • SetFileBandwidthReservation (Ordinal: 1386, Address: 0x53200)
  • SetFileCompletionNotificationModes (Ordinal: 1387, Address: 0x37040)
  • SetFileInformationByHandle (Ordinal: 1388, Address: 0x57510)
  • SetFileIoOverlappedRange (Ordinal: 1389, Address: 0x5bfb0)
  • SetFilePointer (Ordinal: 1390, Address: 0x57520)
  • SetFilePointerEx (Ordinal: 1391, Address: 0x57530)
  • SetFileShortNameA (Ordinal: 1392, Address: 0x58c20)
  • SetFileShortNameW (Ordinal: 1393, Address: 0x58c70)
  • SetFileTime (Ordinal: 1394, Address: 0x57540)
  • SetFileValidData (Ordinal: 1395, Address: 0x57550)
  • SetFirmwareEnvironmentVariableA (Ordinal: 1396, Address: 0x70f80)
  • SetFirmwareEnvironmentVariableExA (Ordinal: 1397, Address: 0x70fa0)
  • SetFirmwareEnvironmentVariableExW (Ordinal: 1398, Address: 0x710e0)
  • SetFirmwareEnvironmentVariableW (Ordinal: 1399, Address: 0x711d0)
  • SetHandleCount (Ordinal: 1400, Address: 0x43d70)
  • SetHandleInformation (Ordinal: 1401, Address: 0x56e30)
  • SetInformationJobObject (Ordinal: 1402, Address: 0x36da0)
  • SetIoRateControlInformationJobObject (Ordinal: 1403, Address: 0x6b980)
  • SetIoRingCompletionEvent (Ordinal: 1404, Address: 0xb35a3)
  • SetLastConsoleEventActive (Ordinal: 1405, Address: 0xb35f4)
  • SetLastError (Ordinal: 1406, Address: 0x27260)
  • SetLocalPrimaryComputerNameA (Ordinal: 1407, Address: 0x6b010)
  • SetLocalPrimaryComputerNameW (Ordinal: 1408, Address: 0x4cfd0)
  • SetLocalTime (Ordinal: 1409, Address: 0x5bfd0)
  • SetLocaleInfoA (Ordinal: 1410, Address: 0x652c0)
  • SetLocaleInfoW (Ordinal: 1411, Address: 0x56880)
  • SetMailslotInfo (Ordinal: 1412, Address: 0x41f80)
  • SetMessageWaitingIndicator (Ordinal: 1413, Address: 0x448d0)
  • SetNamedPipeAttribute (Ordinal: 1414, Address: 0x594d0)
  • SetNamedPipeHandleState (Ordinal: 1415, Address: 0x42680)
  • SetPriorityClass (Ordinal: 1416, Address: 0x41f00)
  • SetProcessAffinityMask (Ordinal: 1417, Address: 0x43560)
  • SetProcessAffinityUpdateMode (Ordinal: 1418, Address: 0x5bff0)
  • SetProcessDEPPolicy (Ordinal: 1419, Address: 0x5a8c0)
  • SetProcessDefaultCpuSetMasks (Ordinal: 1420, Address: 0xb375a)
  • SetProcessDefaultCpuSets (Ordinal: 1421, Address: 0xb37b6)
  • SetProcessDynamicEHContinuationTargets (Ordinal: 1422, Address: 0xb381c)
  • SetProcessDynamicEnforcedCetCompatibleRanges (Ordinal: 1423, Address: 0xb3896)
  • SetProcessInformation (Ordinal: 1424, Address: 0x56dc0)
  • SetProcessMitigationPolicy (Ordinal: 1425, Address: 0xb391a)
  • SetProcessPreferredUILanguages (Ordinal: 1426, Address: 0x5c010)
  • SetProcessPriorityBoost (Ordinal: 1427, Address: 0x4e060)
  • SetProcessShutdownParameters (Ordinal: 1428, Address: 0x42b60)
  • SetProcessWorkingSetSize (Ordinal: 1429, Address: 0x56df0)
  • SetProcessWorkingSetSizeEx (Ordinal: 1430, Address: 0x5c030)
  • SetProtectedPolicy (Ordinal: 1431, Address: 0xb39f6)
  • SetSearchPathMode (Ordinal: 1432, Address: 0x44d30)
  • SetStdHandle (Ordinal: 1433, Address: 0x54dd0)
  • SetStdHandleEx (Ordinal: 1434, Address: 0x5c050)
  • SetSystemFileCacheSize (Ordinal: 1435, Address: 0x5c070)
  • SetSystemPowerState (Ordinal: 1436, Address: 0x70dd0)
  • SetSystemTime (Ordinal: 1437, Address: 0x5c090)
  • SetSystemTimeAdjustment (Ordinal: 1438, Address: 0x58660)
  • SetTapeParameters (Ordinal: 1439, Address: 0x61320)
  • SetTapePosition (Ordinal: 1440, Address: 0x61370)
  • SetTermsrvAppInstallMode (Ordinal: 1441, Address: 0x3e8e0)
  • SetThreadAffinityMask (Ordinal: 1442, Address: 0xd9b0)
  • SetThreadContext (Ordinal: 1443, Address: 0x44cd0)
  • SetThreadDescription (Ordinal: 1444, Address: 0xb3b25)
  • SetThreadErrorMode (Ordinal: 1445, Address: 0x3bf00)
  • SetThreadExecutionState (Ordinal: 1446, Address: 0xce10)
  • SetThreadGroupAffinity (Ordinal: 1447, Address: 0x43aa0)
  • SetThreadIdealProcessor (Ordinal: 1448, Address: 0x3ece0)
  • SetThreadIdealProcessorEx (Ordinal: 1449, Address: 0x458d0)
  • SetThreadInformation (Ordinal: 1450, Address: 0x56dd0)
  • SetThreadLocale (Ordinal: 1451, Address: 0x35f80)
  • SetThreadPreferredUILanguages (Ordinal: 1452, Address: 0x44d80)
  • SetThreadPriority (Ordinal: 1453, Address: 0x36720)
  • SetThreadPriorityBoost (Ordinal: 1454, Address: 0x3e250)
  • SetThreadSelectedCpuSetMasks (Ordinal: 1455, Address: 0xb3c5d)
  • SetThreadSelectedCpuSets (Ordinal: 1456, Address: 0xb3cb9)
  • SetThreadStackGuarantee (Ordinal: 1457, Address: 0x41810)
  • SetThreadToken (Ordinal: 1458, Address: 0xb3d1f)
  • SetThreadUILanguage (Ordinal: 1459, Address: 0x446b0)
  • SetThreadpoolStackInformation (Ordinal: 1460, Address: 0x5c0b0)
  • SetThreadpoolThreadMaximum (Ordinal: 1461, Address: 0xb3da1)
  • SetThreadpoolThreadMinimum (Ordinal: 1462, Address: 0x43390)
  • SetThreadpoolTimer (Ordinal: 1463, Address: 0xb3de9)
  • SetThreadpoolTimerEx (Ordinal: 1464, Address: 0xb3e0f)
  • SetThreadpoolWait (Ordinal: 1465, Address: 0xb3e34)
  • SetThreadpoolWaitEx (Ordinal: 1466, Address: 0xb3e58)
  • SetTimeZoneInformation (Ordinal: 1467, Address: 0x5c0f0)
  • SetTimerQueueTimer (Ordinal: 1468, Address: 0x62270)
  • SetUmsThreadInformation (Ordinal: 1469, Address: 0x601e0)
  • SetUnhandledExceptionFilter (Ordinal: 1470, Address: 0x43140)
  • SetUserGeoID (Ordinal: 1471, Address: 0x68750)
  • SetUserGeoName (Ordinal: 1472, Address: 0x68770)
  • SetVDMCurrentDirectories (Ordinal: 1473, Address: 0x5ff20)
  • SetVolumeLabelA (Ordinal: 1474, Address: 0x712c0)
  • SetVolumeLabelW (Ordinal: 1475, Address: 0x71370)
  • SetVolumeMountPointA (Ordinal: 1476, Address: 0x6fd90)
  • SetVolumeMountPointW (Ordinal: 1477, Address: 0x6fe20)
  • SetVolumeMountPointWStub (Ordinal: 1478, Address: 0x5c110)
  • SetWaitableTimer (Ordinal: 1479, Address: 0x56fb0)
  • SetWaitableTimerEx (Ordinal: 1480, Address: 0xb3f84)
  • SetXStateFeaturesMask (Ordinal: 1481, Address: 0x47d00)
  • SetupComm (Ordinal: 1482, Address: 0x57750)
  • ShowConsoleCursor (Ordinal: 1483, Address: 0x737f0)
  • SignalObjectAndWait (Ordinal: 1484, Address: 0x3bc70)
  • SizeofResource (Ordinal: 1485, Address: 0x3be80)
  • Sleep (Ordinal: 1486, Address: 0x2fe40)
  • SleepConditionVariableCS (Ordinal: 1487, Address: 0xb4028)
  • SleepConditionVariableSRW (Ordinal: 1488, Address: 0xb4078)
  • SleepEx (Ordinal: 1489, Address: 0x56fc0)
  • SortCloseHandle (Ordinal: 1490, Address: 0x43b60)
  • SortGetHandle (Ordinal: 1491, Address: 0x27460)
  • StartThreadpoolIo (Ordinal: 1492, Address: 0xb40e7)
  • SubmitIoRing (Ordinal: 1493, Address: 0xb4112)
  • SubmitThreadpoolWork (Ordinal: 1494, Address: 0xb4152)
  • SuspendThread (Ordinal: 1495, Address: 0x3dee0)
  • SwitchToFiber (Ordinal: 1496, Address: 0x57820)
  • SwitchToThread (Ordinal: 1497, Address: 0x30070)
  • SystemTimeToFileTime (Ordinal: 1498, Address: 0x36d00)
  • SystemTimeToTzSpecificLocalTime (Ordinal: 1499, Address: 0x3ed40)
  • SystemTimeToTzSpecificLocalTimeEx (Ordinal: 1500, Address: 0xb41e5)
  • TerminateJobObject (Ordinal: 1501, Address: 0x40a70)
  • TerminateProcess (Ordinal: 1502, Address: 0x42110)
  • TerminateThread (Ordinal: 1503, Address: 0x45950)
  • TermsrvAppInstallMode (Ordinal: 1504, Address: 0x3dec0)
  • TermsrvConvertSysRootToUserDir (Ordinal: 1505, Address: 0x113a0)
  • TermsrvCreateRegEntry (Ordinal: 1506, Address: 0x32f90)
  • TermsrvDeleteKey (Ordinal: 1507, Address: 0x35e90)
  • TermsrvDeleteValue (Ordinal: 1508, Address: 0x34d70)
  • TermsrvGetPreSetValue (Ordinal: 1509, Address: 0x30310)
  • TermsrvGetWindowsDirectoryA (Ordinal: 1510, Address: 0x430c0)
  • TermsrvGetWindowsDirectoryW (Ordinal: 1511, Address: 0x35f10)
  • TermsrvOpenRegEntry (Ordinal: 1512, Address: 0x22b40)
  • TermsrvOpenUserClasses (Ordinal: 1513, Address: 0x36bf0)
  • TermsrvRestoreKey (Ordinal: 1514, Address: 0x72b40)
  • TermsrvSetKeySecurity (Ordinal: 1515, Address: 0x39530)
  • TermsrvSetValueKey (Ordinal: 1516, Address: 0x31660)
  • TermsrvSyncUserIniFileExt (Ordinal: 1517, Address: 0x113c0)
  • Thread32First (Ordinal: 1518, Address: 0xdac0)
  • Thread32Next (Ordinal: 1519, Address: 0xe3d0)
  • TlsAlloc (Ordinal: 1520, Address: 0x3ae50)
  • TlsFree (Ordinal: 1521, Address: 0x3e760)
  • TlsGetValue (Ordinal: 1522, Address: 0x849f0)
  • TlsGetValue2 (Ordinal: 1523, Address: 0xb43dd)
  • TlsSetValue (Ordinal: 1524, Address: 0x28110)
  • Toolhelp32ReadProcessMemory (Ordinal: 1525, Address: 0x5c320)
  • TransactNamedPipe (Ordinal: 1526, Address: 0x42770)
  • TransmitCommChar (Ordinal: 1527, Address: 0x57760)
  • TryAcquireSRWLockExclusive (Ordinal: 1528, Address: 0xb445b)
  • TryAcquireSRWLockShared (Ordinal: 1529, Address: 0xb4497)
  • TryEnterCriticalSection (Ordinal: 1530, Address: 0xb44d0)
  • TrySubmitThreadpoolCallback (Ordinal: 1531, Address: 0x3ce00)
  • TzSpecificLocalTimeToSystemTime (Ordinal: 1532, Address: 0x42bf0)
  • TzSpecificLocalTimeToSystemTimeEx (Ordinal: 1533, Address: 0xb454f)
  • UTRegister (Ordinal: 1534, Address: 0x59440)
  • UTUnRegister (Ordinal: 1535, Address: 0x58580)
  • UmsThreadYield (Ordinal: 1536, Address: 0x60210)
  • UnhandledExceptionFilter (Ordinal: 1537, Address: 0x5c120)
  • UnlockFile (Ordinal: 1538, Address: 0x57560)
  • UnlockFileEx (Ordinal: 1539, Address: 0x57570)
  • UnmapViewOfFile (Ordinal: 1540, Address: 0x385a0)
  • UnmapViewOfFileEx (Ordinal: 1541, Address: 0xb460b)
  • UnregisterApplicationRecoveryCallback (Ordinal: 1542, Address: 0x62190)
  • UnregisterApplicationRestart (Ordinal: 1543, Address: 0x50300)
  • UnregisterBadMemoryNotification (Ordinal: 1544, Address: 0x5c140)
  • UnregisterConsoleIME (Ordinal: 1545, Address: 0x73bc0)
  • UnregisterWait (Ordinal: 1546, Address: 0xcc40)
  • UnregisterWaitEx (Ordinal: 1547, Address: 0x3a1f0)
  • UnregisterWaitUntilOOBECompleted (Ordinal: 1548, Address: 0x71920)
  • UpdateCalendarDayOfWeek (Ordinal: 1549, Address: 0x15270)
  • UpdateProcThreadAttribute (Ordinal: 1550, Address: 0xb4726)
  • UpdateResourceA (Ordinal: 1551, Address: 0x63b20)
  • UpdateResourceW (Ordinal: 1552, Address: 0x63cb0)
  • VDMConsoleOperation (Ordinal: 1553, Address: 0x74330)
  • VDMOperationStarted (Ordinal: 1554, Address: 0x601c0)
  • VerLanguageNameA (Ordinal: 1555, Address: 0x5c160)
  • VerLanguageNameW (Ordinal: 1556, Address: 0x43730)
  • VerSetConditionMask (Ordinal: 1557, Address: 0xb47e4)
  • VerifyConsoleIoHandle (Ordinal: 1558, Address: 0x44790)
  • VerifyScripts (Ordinal: 1559, Address: 0x5c180)
  • VerifyVersionInfoA (Ordinal: 1560, Address: 0x34590)
  • VerifyVersionInfoW (Ordinal: 1561, Address: 0x2c580)
  • VirtualAlloc (Ordinal: 1562, Address: 0x32150)
  • VirtualAllocEx (Ordinal: 1563, Address: 0x43020)
  • VirtualAllocExNuma (Ordinal: 1564, Address: 0x44f60)
  • VirtualFree (Ordinal: 1565, Address: 0x34d90)
  • VirtualFreeEx (Ordinal: 1566, Address: 0x44df0)
  • VirtualLock (Ordinal: 1567, Address: 0x3f7e0)
  • VirtualProtect (Ordinal: 1568, Address: 0x37450)
  • VirtualProtectEx (Ordinal: 1569, Address: 0x41f60)
  • VirtualQuery (Ordinal: 1570, Address: 0x37a40)
  • VirtualQueryEx (Ordinal: 1571, Address: 0x3a210)
  • VirtualUnlock (Ordinal: 1572, Address: 0x3bcf0)
  • WTSGetActiveConsoleSessionId (Ordinal: 1573, Address: 0x3df00)
  • WaitCommEvent (Ordinal: 1574, Address: 0x57770)
  • WaitForDebugEvent (Ordinal: 1575, Address: 0x44700)
  • WaitForDebugEventEx (Ordinal: 1576, Address: 0xb4938)
  • WaitForMultipleObjects (Ordinal: 1577, Address: 0x56fd0)
  • WaitForMultipleObjectsEx (Ordinal: 1578, Address: 0x56fe0)
  • WaitForSingleObject (Ordinal: 1579, Address: 0x56ff0)
  • WaitForSingleObjectEx (Ordinal: 1580, Address: 0x57000)
  • WaitForThreadpoolIoCallbacks (Ordinal: 1581, Address: 0xb49e0)
  • WaitForThreadpoolTimerCallbacks (Ordinal: 1582, Address: 0xb4a1c)
  • WaitForThreadpoolWaitCallbacks (Ordinal: 1583, Address: 0xb4a50)
  • WaitForThreadpoolWorkCallbacks (Ordinal: 1584, Address: 0xb4a83)
  • WaitNamedPipeA (Ordinal: 1585, Address: 0xc8f0)
  • WaitNamedPipeW (Ordinal: 1586, Address: 0x39430)
  • WakeAllConditionVariable (Ordinal: 1587, Address: 0xb4ace)
  • WakeConditionVariable (Ordinal: 1588, Address: 0xb4b06)
  • WerGetFlags (Ordinal: 1589, Address: 0x4dff0)
  • WerGetFlagsWorker (Ordinal: 1590, Address: 0x4dff0)
  • WerRegisterAdditionalProcess (Ordinal: 1591, Address: 0x5c1a0)
  • WerRegisterAppLocalDump (Ordinal: 1592, Address: 0x5c1c0)
  • WerRegisterCustomMetadata (Ordinal: 1593, Address: 0x44910)
  • WerRegisterExcludedMemoryBlock (Ordinal: 1594, Address: 0x56860)
  • WerRegisterFile (Ordinal: 1595, Address: 0x3f7c0)
  • WerRegisterFileWorker (Ordinal: 1596, Address: 0x621b0)
  • WerRegisterMemoryBlock (Ordinal: 1597, Address: 0x44550)
  • WerRegisterMemoryBlockWorker (Ordinal: 1598, Address: 0x621c0)
  • WerRegisterRuntimeExceptionModule (Ordinal: 1599, Address: 0x43500)
  • WerRegisterRuntimeExceptionModuleWorker (Ordinal: 1600, Address: 0x621d0)
  • WerSetFlags (Ordinal: 1601, Address: 0x47a50)
  • WerSetFlagsWorker (Ordinal: 1602, Address: 0x47a50)
  • WerUnregisterAdditionalProcess (Ordinal: 1603, Address: 0x5c1e0)
  • WerUnregisterAppLocalDump (Ordinal: 1604, Address: 0x5c200)
  • WerUnregisterCustomMetadata (Ordinal: 1605, Address: 0x5c220)
  • WerUnregisterExcludedMemoryBlock (Ordinal: 1606, Address: 0x5c240)
  • WerUnregisterFile (Ordinal: 1607, Address: 0x41ac0)
  • WerUnregisterFileWorker (Ordinal: 1608, Address: 0x621e0)
  • WerUnregisterMemoryBlock (Ordinal: 1609, Address: 0x43e30)
  • WerUnregisterMemoryBlockWorker (Ordinal: 1610, Address: 0x621f0)
  • WerUnregisterRuntimeExceptionModule (Ordinal: 1611, Address: 0x44fa0)
  • WerUnregisterRuntimeExceptionModuleWorker (Ordinal: 1612, Address: 0x62200)
  • WerpGetDebugger (Ordinal: 1613, Address: 0x75e90)
  • WerpInitiateRemoteRecovery (Ordinal: 1614, Address: 0x4ba10)
  • WerpLaunchAeDebug (Ordinal: 1615, Address: 0x769c0)
  • WerpNotifyLoadStringResourceWorker (Ordinal: 1616, Address: 0x31b90)
  • WerpNotifyUseStringResourceWorker (Ordinal: 1617, Address: 0x31b90)
  • WideCharToMultiByte (Ordinal: 1618, Address: 0x31560)
  • WinExec (Ordinal: 1619, Address: 0x70bc0)
  • Wow64DisableWow64FsRedirection (Ordinal: 1620, Address: 0x43120)
  • Wow64EnableWow64FsRedirection (Ordinal: 1621, Address: 0x577a0)
  • Wow64GetThreadContext (Ordinal: 1622, Address: 0x502e0)
  • Wow64GetThreadSelectorEntry (Ordinal: 1623, Address: 0x58750)
  • Wow64RevertWow64FsRedirection (Ordinal: 1624, Address: 0x458b0)
  • Wow64SetThreadContext (Ordinal: 1625, Address: 0x5c260)
  • Wow64SuspendThread (Ordinal: 1626, Address: 0x5c280)
  • WriteConsoleA (Ordinal: 1627, Address: 0x579b0)
  • WriteConsoleInputA (Ordinal: 1628, Address: 0x57bd0)
  • WriteConsoleInputVDMA (Ordinal: 1629, Address: 0x73850)
  • WriteConsoleInputVDMW (Ordinal: 1630, Address: 0x73920)
  • WriteConsoleInputW (Ordinal: 1631, Address: 0x57be0)
  • WriteConsoleOutputA (Ordinal: 1632, Address: 0x57bf0)
  • WriteConsoleOutputAttribute (Ordinal: 1633, Address: 0x57c00)
  • WriteConsoleOutputCharacterA (Ordinal: 1634, Address: 0x57c10)
  • WriteConsoleOutputCharacterW (Ordinal: 1635, Address: 0x57c20)
  • WriteConsoleOutputW (Ordinal: 1636, Address: 0x57c30)
  • WriteConsoleW (Ordinal: 1637, Address: 0x579c0)
  • WriteFile (Ordinal: 1638, Address: 0x57580)
  • WriteFileEx (Ordinal: 1639, Address: 0x57590)
  • WriteFileGather (Ordinal: 1640, Address: 0x575a0)
  • WritePrivateProfileSectionA (Ordinal: 1641, Address: 0x6d430)
  • WritePrivateProfileSectionW (Ordinal: 1642, Address: 0x6d4a0)
  • WritePrivateProfileStringA (Ordinal: 1643, Address: 0x42e20)
  • WritePrivateProfileStringW (Ordinal: 1644, Address: 0xd2f0)
  • WritePrivateProfileStructA (Ordinal: 1645, Address: 0x6d510)
  • WritePrivateProfileStructW (Ordinal: 1646, Address: 0x43e70)
  • WriteProcessMemory (Ordinal: 1647, Address: 0x40590)
  • WriteProfileSectionA (Ordinal: 1648, Address: 0x6d680)
  • WriteProfileSectionW (Ordinal: 1649, Address: 0x6d690)
  • WriteProfileStringA (Ordinal: 1650, Address: 0x6d6a0)
  • WriteProfileStringW (Ordinal: 1651, Address: 0x46490)
  • WriteTapemark (Ordinal: 1652, Address: 0x613f0)
  • ZombifyActCtx (Ordinal: 1653, Address: 0x5c2a0)
  • ZombifyActCtxWorker (Ordinal: 1654, Address: 0x617a0)
  • __C_specific_handler (Ordinal: 1655, Address: 0xb514d)
  • __chkstk (Ordinal: 1656, Address: 0xb5171)
  • __misaligned_access (Ordinal: 1657, Address: 0xb5194)
  • _hread (Ordinal: 1658, Address: 0x22350)
  • _hwrite (Ordinal: 1659, Address: 0x2a0e0)
  • _lclose (Ordinal: 1660, Address: 0x36cb0)
  • _lcreat (Ordinal: 1661, Address: 0x730e0)
  • _llseek (Ordinal: 1662, Address: 0x30440)
  • _local_unwind (Ordinal: 1663, Address: 0xb51e3)
  • _lopen (Ordinal: 1664, Address: 0x73150)
  • _lread (Ordinal: 1665, Address: 0x22350)
  • _lwrite (Ordinal: 1666, Address: 0x2a0e0)
  • lstrcat (Ordinal: 1667, Address: 0x2ef30)
  • lstrcatA (Ordinal: 1668, Address: 0x2ef30)
  • lstrcatW (Ordinal: 1669, Address: 0x342b0)
  • lstrcmp (Ordinal: 1670, Address: 0x40a60)
  • lstrcmpA (Ordinal: 1671, Address: 0x40a60)
  • lstrcmpW (Ordinal: 1672, Address: 0x391b0)
  • lstrcmpi (Ordinal: 1673, Address: 0x39200)
  • lstrcmpiA (Ordinal: 1674, Address: 0x39200)
  • lstrcmpiW (Ordinal: 1675, Address: 0x321b0)
  • lstrcpy (Ordinal: 1676, Address: 0x31630)
  • lstrcpyA (Ordinal: 1677, Address: 0x31630)
  • lstrcpyW (Ordinal: 1678, Address: 0x321d0)
  • lstrcpyn (Ordinal: 1679, Address: 0x44870)
  • lstrcpynA (Ordinal: 1680, Address: 0x44870)
  • lstrcpynW (Ordinal: 1681, Address: 0x43790)
  • lstrlen (Ordinal: 1682, Address: 0x36780)
  • lstrlenA (Ordinal: 1683, Address: 0x36780)
  • lstrlenW (Ordinal: 1684, Address: 0x304c0)
  • timeBeginPeriod (Ordinal: 1685, Address: 0x21d90)
  • timeEndPeriod (Ordinal: 1686, Address: 0x21bb0)
  • timeGetDevCaps (Ordinal: 1687, Address: 0x3ead0)
  • timeGetSystemTime (Ordinal: 1688, Address: 0x21950)
  • timeGetTime (Ordinal: 1689, Address: 0x21990)
  • uaw_lstrcmpW (Ordinal: 1690, Address: 0x391b0)
  • uaw_lstrcmpiW (Ordinal: 1691, Address: 0x321b0)
  • uaw_lstrlenW (Ordinal: 1692, Address: 0x581d0)
  • uaw_wcschr (Ordinal: 1693, Address: 0x58200)
  • uaw_wcscpy (Ordinal: 1694, Address: 0x58230)
  • uaw_wcsicmp (Ordinal: 1695, Address: 0x58260)
  • uaw_wcslen (Ordinal: 1696, Address: 0x58280)
  • uaw_wcsrchr (Ordinal: 1697, Address: 0x582b0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x18008a878)
api-ms-win-core-appcompat-l1-1-0.dll
  • BaseCheckAppcompatCache (Address: 0x18008a8a0)
  • BaseCheckAppcompatCacheEx (Address: 0x18008a890)
  • BaseCleanupAppcompatCacheSupport (Address: 0x18008a888)
  • BaseDumpAppcompatCache (Address: 0x18008a8b0)
  • BaseFlushAppcompatCache (Address: 0x18008a8a8)
  • BaseInitAppcompatCacheSupport (Address: 0x18008a898)
  • BaseUpdateAppcompatCache (Address: 0x18008a8b8)
api-ms-win-core-appcompat-l1-1-1.dll
  • BaseFreeAppCompatDataForProcess (Address: 0x18008a8d0)
  • BaseReadAppCompatDataForProcess (Address: 0x18008a8c8)
api-ms-win-core-comm-l1-1-0.dll
  • ClearCommBreak (Address: 0x18008a900)
  • ClearCommError (Address: 0x18008a930)
  • EscapeCommFunction (Address: 0x18008a8e0)
  • GetCommConfig (Address: 0x18008a960)
  • GetCommMask (Address: 0x18008a8f0)
  • GetCommModemStatus (Address: 0x18008a8f8)
  • GetCommProperties (Address: 0x18008a938)
  • GetCommState (Address: 0x18008a908)
  • GetCommTimeouts (Address: 0x18008a910)
  • PurgeComm (Address: 0x18008a918)
  • SetCommBreak (Address: 0x18008a920)
  • SetCommConfig (Address: 0x18008a928)
  • SetCommMask (Address: 0x18008a968)
  • SetCommState (Address: 0x18008a940)
  • SetCommTimeouts (Address: 0x18008a8e8)
  • SetupComm (Address: 0x18008a948)
  • TransmitCommChar (Address: 0x18008a950)
  • WaitCommEvent (Address: 0x18008a958)
api-ms-win-core-console-l1-1-0.dll
  • AllocConsole (Address: 0x18008a978)
  • GetConsoleCP (Address: 0x18008a9d8)
  • GetConsoleMode (Address: 0x18008a980)
  • GetConsoleOutputCP (Address: 0x18008a988)
  • GetNumberOfConsoleInputEvents (Address: 0x18008a990)
  • ReadConsoleA (Address: 0x18008a998)
  • ReadConsoleInputA (Address: 0x18008a9a0)
  • ReadConsoleInputW (Address: 0x18008a9a8)
  • ReadConsoleW (Address: 0x18008a9b0)
  • SetConsoleCtrlHandler (Address: 0x18008a9b8)
  • SetConsoleMode (Address: 0x18008a9c0)
  • WriteConsoleA (Address: 0x18008a9c8)
  • WriteConsoleW (Address: 0x18008a9d0)
api-ms-win-core-console-l1-2-0.dll
  • AttachConsole (Address: 0x18008a9f8)
  • FreeConsole (Address: 0x18008a9e8)
  • PeekConsoleInputA (Address: 0x18008a9f0)
  • PeekConsoleInputW (Address: 0x18008aa00)
api-ms-win-core-console-l1-2-1.dll
  • ClosePseudoConsole (Address: 0x18008aa18)
  • CreatePseudoConsole (Address: 0x18008aa20)
  • ResizePseudoConsole (Address: 0x18008aa10)
api-ms-win-core-console-l1-2-2.dll
  • AllocConsoleWithOptions (Address: 0x18008aa38)
  • ReleasePseudoConsole (Address: 0x18008aa30)
api-ms-win-core-console-l2-1-0.dll
  • CreateConsoleScreenBuffer (Address: 0x18008aaa0)
  • FillConsoleOutputAttribute (Address: 0x18008aaf8)
  • FillConsoleOutputCharacterA (Address: 0x18008aa90)
  • FillConsoleOutputCharacterW (Address: 0x18008aa88)
  • FlushConsoleInputBuffer (Address: 0x18008aa60)
  • GenerateConsoleCtrlEvent (Address: 0x18008aa58)
  • GetConsoleCursorInfo (Address: 0x18008aa98)
  • GetConsoleScreenBufferInfo (Address: 0x18008aa50)
  • GetConsoleScreenBufferInfoEx (Address: 0x18008aa68)
  • GetLargestConsoleWindowSize (Address: 0x18008aab0)
  • ReadConsoleOutputA (Address: 0x18008aa80)
  • ReadConsoleOutputAttribute (Address: 0x18008aab8)
  • ReadConsoleOutputCharacterA (Address: 0x18008aac0)
  • ReadConsoleOutputCharacterW (Address: 0x18008aac8)
  • ReadConsoleOutputW (Address: 0x18008aad0)
  • ScrollConsoleScreenBufferA (Address: 0x18008aad8)
  • ScrollConsoleScreenBufferW (Address: 0x18008aae0)
  • SetConsoleActiveScreenBuffer (Address: 0x18008aae8)
  • SetConsoleCP (Address: 0x18008aaf0)
  • SetConsoleCursorInfo (Address: 0x18008ab48)
  • SetConsoleCursorPosition (Address: 0x18008aa78)
  • SetConsoleOutputCP (Address: 0x18008aa70)
  • SetConsoleScreenBufferInfoEx (Address: 0x18008aa48)
  • SetConsoleScreenBufferSize (Address: 0x18008aaa8)
  • SetConsoleTextAttribute (Address: 0x18008ab00)
  • SetConsoleWindowInfo (Address: 0x18008ab08)
  • WriteConsoleInputA (Address: 0x18008ab40)
  • WriteConsoleInputW (Address: 0x18008ab38)
  • WriteConsoleOutputA (Address: 0x18008ab30)
  • WriteConsoleOutputAttribute (Address: 0x18008ab28)
  • WriteConsoleOutputCharacterA (Address: 0x18008ab20)
  • WriteConsoleOutputCharacterW (Address: 0x18008ab18)
  • WriteConsoleOutputW (Address: 0x18008ab10)
api-ms-win-core-console-l2-2-0.dll
  • GetConsoleOriginalTitleA (Address: 0x18008ab58)
  • GetConsoleOriginalTitleW (Address: 0x18008ab68)
  • GetConsoleTitleA (Address: 0x18008ab70)
  • GetConsoleTitleW (Address: 0x18008ab78)
  • SetConsoleTitleA (Address: 0x18008ab80)
  • SetConsoleTitleW (Address: 0x18008ab60)
api-ms-win-core-console-l3-2-0.dll
  • AddConsoleAliasA (Address: 0x18008abf8)
  • AddConsoleAliasW (Address: 0x18008abf0)
  • ExpungeConsoleCommandHistoryA (Address: 0x18008abe8)
  • ExpungeConsoleCommandHistoryW (Address: 0x18008abe0)
  • GetConsoleAliasA (Address: 0x18008abd8)
  • GetConsoleAliasesA (Address: 0x18008aba8)
  • GetConsoleAliasesLengthA (Address: 0x18008aba0)
  • GetConsoleAliasesLengthW (Address: 0x18008ab98)
  • GetConsoleAliasesW (Address: 0x18008ab90)
  • GetConsoleAliasExesA (Address: 0x18008abd0)
  • GetConsoleAliasExesLengthA (Address: 0x18008abc8)
  • GetConsoleAliasExesLengthW (Address: 0x18008abc0)
  • GetConsoleAliasExesW (Address: 0x18008abb8)
  • GetConsoleAliasW (Address: 0x18008abb0)
  • GetConsoleCommandHistoryA (Address: 0x18008ac00)
  • GetConsoleCommandHistoryLengthA (Address: 0x18008ac08)
  • GetConsoleCommandHistoryLengthW (Address: 0x18008ac10)
  • GetConsoleCommandHistoryW (Address: 0x18008ac18)
  • GetConsoleDisplayMode (Address: 0x18008ac20)
  • GetConsoleFontSize (Address: 0x18008ac28)
  • GetConsoleHistoryInfo (Address: 0x18008ac30)
  • GetConsoleProcessList (Address: 0x18008ac38)
  • GetConsoleSelectionInfo (Address: 0x18008ac40)
  • GetConsoleWindow (Address: 0x18008ac48)
  • GetCurrentConsoleFont (Address: 0x18008ac50)
  • GetCurrentConsoleFontEx (Address: 0x18008ac58)
  • GetNumberOfConsoleMouseButtons (Address: 0x18008ac60)
  • SetConsoleDisplayMode (Address: 0x18008ac68)
  • SetConsoleHistoryInfo (Address: 0x18008ac70)
  • SetConsoleNumberOfCommandsA (Address: 0x18008ac78)
  • SetConsoleNumberOfCommandsW (Address: 0x18008ac80)
  • SetCurrentConsoleFontEx (Address: 0x18008ac88)
api-ms-win-core-datetime-l1-1-0.dll
  • GetDateFormatA (Address: 0x18008acb0)
  • GetDateFormatW (Address: 0x18008aca0)
  • GetTimeFormatA (Address: 0x18008ac98)
  • GetTimeFormatW (Address: 0x18008aca8)
api-ms-win-core-datetime-l1-1-1.dll
  • GetDateFormatEx (Address: 0x18008acc8)
  • GetTimeFormatEx (Address: 0x18008acc0)
api-ms-win-core-datetime-l1-1-2.dll
  • GetDurationFormatEx (Address: 0x18008acd8)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x18008ace8)
  • IsDebuggerPresent (Address: 0x18008acf8)
  • OutputDebugStringA (Address: 0x18008ad00)
  • OutputDebugStringW (Address: 0x18008acf0)
api-ms-win-core-debug-l1-1-1.dll
  • CheckRemoteDebuggerPresent (Address: 0x18008ad18)
  • ContinueDebugEvent (Address: 0x18008ad20)
  • DebugActiveProcess (Address: 0x18008ad10)
  • DebugActiveProcessStop (Address: 0x18008ad28)
  • WaitForDebugEvent (Address: 0x18008ad30)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x18008ad40)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x18008ad50)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetErrorMode (Address: 0x18008ad78)
  • RaiseException (Address: 0x18008ad88)
  • SetErrorMode (Address: 0x18008ad80)
  • SetLastError (Address: 0x18008ad68)
  • SetUnhandledExceptionFilter (Address: 0x18008ad70)
  • UnhandledExceptionFilter (Address: 0x18008ad60)
api-ms-win-core-errorhandling-l1-1-3.dll
  • GetThreadErrorMode (Address: 0x18008ad98)
  • SetThreadErrorMode (Address: 0x18008ada0)
api-ms-win-core-fibers-l1-1-0.dll
  • FlsAlloc (Address: 0x18008adc0)
  • FlsFree (Address: 0x18008adb0)
  • FlsSetValue (Address: 0x18008adb8)
api-ms-win-core-fibers-l2-1-0.dll
  • ConvertFiberToThread (Address: 0x18008add8)
  • ConvertThreadToFiber (Address: 0x18008adf0)
  • CreateFiber (Address: 0x18008add0)
  • DeleteFiber (Address: 0x18008ade0)
  • SwitchToFiber (Address: 0x18008ade8)
api-ms-win-core-fibers-l2-1-1.dll
  • ConvertThreadToFiberEx (Address: 0x18008ae08)
  • CreateFiberEx (Address: 0x18008ae00)
api-ms-win-core-file-l1-1-0.dll
  • CompareFileTime (Address: 0x18008af50)
  • CreateDirectoryA (Address: 0x18008af48)
  • CreateDirectoryW (Address: 0x18008af40)
  • CreateFileA (Address: 0x18008af38)
  • CreateFileW (Address: 0x18008af30)
  • DefineDosDeviceW (Address: 0x18008af28)
  • DeleteFileA (Address: 0x18008af20)
  • DeleteFileW (Address: 0x18008af18)
  • DeleteVolumeMountPointW (Address: 0x18008af10)
  • FileTimeToLocalFileTime (Address: 0x18008af08)
  • FindClose (Address: 0x18008af00)
  • FindCloseChangeNotification (Address: 0x18008aef8)
  • FindFirstChangeNotificationA (Address: 0x18008aef0)
  • FindFirstChangeNotificationW (Address: 0x18008aee8)
  • FindFirstFileA (Address: 0x18008aee0)
  • FindFirstFileExA (Address: 0x18008aed8)
  • FindFirstFileExW (Address: 0x18008aed0)
  • FindFirstFileNameW (Address: 0x18008aec8)
  • FindFirstFileW (Address: 0x18008aec0)
  • FindFirstVolumeW (Address: 0x18008aeb8)
  • FindNextChangeNotification (Address: 0x18008aeb0)
  • FindNextFileA (Address: 0x18008aea8)
  • FindNextFileNameW (Address: 0x18008aea0)
  • FindNextFileW (Address: 0x18008ae98)
  • FindNextVolumeW (Address: 0x18008b050)
  • FindVolumeClose (Address: 0x18008ae88)
  • FlushFileBuffers (Address: 0x18008ae68)
  • GetDiskFreeSpaceA (Address: 0x18008ae58)
  • GetDiskFreeSpaceExA (Address: 0x18008ae50)
  • GetDiskFreeSpaceExW (Address: 0x18008ae48)
  • GetDiskFreeSpaceW (Address: 0x18008b058)
  • GetDriveTypeA (Address: 0x18008b048)
  • GetDriveTypeW (Address: 0x18008b040)
  • GetFileAttributesA (Address: 0x18008b038)
  • GetFileAttributesExA (Address: 0x18008b028)
  • GetFileAttributesExW (Address: 0x18008b020)
  • GetFileAttributesW (Address: 0x18008b018)
  • GetFileInformationByHandle (Address: 0x18008b008)
  • GetFileSize (Address: 0x18008b000)
  • GetFileSizeEx (Address: 0x18008aff8)
  • GetFileTime (Address: 0x18008ae90)
  • GetFileType (Address: 0x18008ae80)
  • GetFinalPathNameByHandleA (Address: 0x18008ae78)
  • GetFinalPathNameByHandleW (Address: 0x18008ae70)
  • GetFullPathNameA (Address: 0x18008ae60)
  • GetFullPathNameW (Address: 0x18008ae40)
  • GetLogicalDriveStringsW (Address: 0x18008ae38)
  • GetTempFileNameW (Address: 0x18008ae30)
  • GetVolumeInformationByHandleW (Address: 0x18008ae28)
  • GetVolumeInformationW (Address: 0x18008ae20)
  • GetVolumePathNameW (Address: 0x18008ae18)
  • LocalFileTimeToFileTime (Address: 0x18008b010)
  • LockFile (Address: 0x18008b030)
  • LockFileEx (Address: 0x18008af58)
  • QueryDosDeviceW (Address: 0x18008af60)
  • ReadFile (Address: 0x18008af68)
  • ReadFileEx (Address: 0x18008af70)
  • ReadFileScatter (Address: 0x18008af78)
  • RemoveDirectoryA (Address: 0x18008af80)
  • RemoveDirectoryW (Address: 0x18008af88)
  • SetEndOfFile (Address: 0x18008af90)
  • SetFileAttributesA (Address: 0x18008af98)
  • SetFileAttributesW (Address: 0x18008afa0)
  • SetFileInformationByHandle (Address: 0x18008afa8)
  • SetFilePointer (Address: 0x18008afb0)
  • SetFilePointerEx (Address: 0x18008afb8)
  • SetFileTime (Address: 0x18008afc0)
  • SetFileValidData (Address: 0x18008afc8)
  • UnlockFile (Address: 0x18008afd0)
  • UnlockFileEx (Address: 0x18008afd8)
  • WriteFile (Address: 0x18008afe0)
  • WriteFileEx (Address: 0x18008afe8)
  • WriteFileGather (Address: 0x18008aff0)
api-ms-win-core-file-l1-2-0.dll
  • CreateFile2 (Address: 0x18008b078)
  • GetTempPathW (Address: 0x18008b070)
  • GetVolumePathNamesForVolumeNameW (Address: 0x18008b068)
api-ms-win-core-file-l1-2-1.dll
  • GetCompressedFileSizeA (Address: 0x18008b098)
  • GetCompressedFileSizeW (Address: 0x18008b088)
  • SetFileIoOverlappedRange (Address: 0x18008b090)
api-ms-win-core-file-l1-2-2.dll
  • FindFirstStreamW (Address: 0x18008b0c0)
  • GetTempFileNameA (Address: 0x18008b0b8)
  • GetTempPathA (Address: 0x18008b0a8)
  • GetVolumeInformationA (Address: 0x18008b0b0)
api-ms-win-core-file-l1-2-3.dll
  • GetTempPath2A (Address: 0x18008b0d8)
  • GetTempPath2W (Address: 0x18008b0d0)
api-ms-win-core-file-l1-2-5.dll
  • CreateDirectory2A (Address: 0x18008b0f8)
  • CreateDirectory2W (Address: 0x18008b100)
  • CreateFile3 (Address: 0x18008b0f0)
  • DeleteFile2A (Address: 0x18008b0e8)
  • DeleteFile2W (Address: 0x18008b118)
  • RemoveDirectory2A (Address: 0x18008b108)
  • RemoveDirectory2W (Address: 0x18008b110)
api-ms-win-core-file-l2-1-0.dll
  • CopyFile2 (Address: 0x18008b168)
  • CopyFileExW (Address: 0x18008b150)
  • CreateDirectoryExW (Address: 0x18008b128)
  • CreateHardLinkW (Address: 0x18008b178)
  • CreateSymbolicLinkW (Address: 0x18008b158)
  • GetFileInformationByHandleEx (Address: 0x18008b160)
  • MoveFileExW (Address: 0x18008b140)
  • MoveFileWithProgressW (Address: 0x18008b130)
  • ReadDirectoryChangesW (Address: 0x18008b138)
  • ReOpenFile (Address: 0x18008b148)
  • ReplaceFileW (Address: 0x18008b170)
api-ms-win-core-file-l2-1-1.dll
  • OpenFileById (Address: 0x18008b188)
api-ms-win-core-file-l2-1-2.dll
  • CopyFileW (Address: 0x18008b198)
  • CreateHardLinkA (Address: 0x18008b1a0)
api-ms-win-core-file-l2-1-3.dll
  • ReadDirectoryChangesExW (Address: 0x18008b1b0)
api-ms-win-core-file-l2-1-4.dll
  • GetFileInformationByName (Address: 0x18008b1c0)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x18008b1d0)
  • DuplicateHandle (Address: 0x18008b1e0)
  • GetHandleInformation (Address: 0x18008b1e8)
  • SetHandleInformation (Address: 0x18008b1d8)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeaps (Address: 0x18008b258)
  • HeapAlloc (Address: 0x18008b240)
  • HeapCompact (Address: 0x18008b210)
  • HeapCreate (Address: 0x18008b238)
  • HeapDestroy (Address: 0x18008b218)
  • HeapFree (Address: 0x18008b248)
  • HeapLock (Address: 0x18008b230)
  • HeapQueryInformation (Address: 0x18008b220)
  • HeapReAlloc (Address: 0x18008b250)
  • HeapSetInformation (Address: 0x18008b208)
  • HeapUnlock (Address: 0x18008b228)
  • HeapValidate (Address: 0x18008b1f8)
  • HeapWalk (Address: 0x18008b200)
api-ms-win-core-heap-l2-1-0.dll
  • LocalFree (Address: 0x18008b268)
api-ms-win-core-heap-obsolete-l1-1-0.dll
  • GlobalFlags (Address: 0x18008b2a0)
  • GlobalHandle (Address: 0x18008b2b0)
  • GlobalLock (Address: 0x18008b2a8)
  • GlobalReAlloc (Address: 0x18008b278)
  • GlobalSize (Address: 0x18008b290)
  • GlobalUnlock (Address: 0x18008b298)
  • LocalFlags (Address: 0x18008b280)
  • LocalSize (Address: 0x18008b288)
api-ms-win-core-io-l1-1-0.dll
  • CancelIoEx (Address: 0x18008b2d8)
  • CreateIoCompletionPort (Address: 0x18008b2c0)
  • DeviceIoControl (Address: 0x18008b2c8)
  • GetOverlappedResult (Address: 0x18008b2d0)
  • GetQueuedCompletionStatus (Address: 0x18008b2e8)
  • GetQueuedCompletionStatusEx (Address: 0x18008b2f0)
  • PostQueuedCompletionStatus (Address: 0x18008b2e0)
api-ms-win-core-io-l1-1-1.dll
  • CancelIo (Address: 0x18008b308)
  • CancelSynchronousIo (Address: 0x18008b300)
api-ms-win-core-job-l1-1-0.dll
  • IsProcessInJob (Address: 0x18008b318)
api-ms-win-core-largeinteger-l1-1-0.dll
  • MulDiv (Address: 0x18008b328)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x18008b358)
  • EnumResourceLanguagesExA (Address: 0x18008b398)
  • EnumResourceLanguagesExW (Address: 0x18008b388)
  • EnumResourceNamesExA (Address: 0x18008b360)
  • EnumResourceNamesExW (Address: 0x18008b348)
  • EnumResourceTypesExA (Address: 0x18008b390)
  • EnumResourceTypesExW (Address: 0x18008b380)
  • FindResourceExW (Address: 0x18008b340)
  • FindStringOrdinal (Address: 0x18008b3b0)
  • FreeLibrary (Address: 0x18008b370)
  • FreeLibraryAndExitThread (Address: 0x18008b3d8)
  • FreeResource (Address: 0x18008b3b8)
  • GetModuleFileNameA (Address: 0x18008b3a8)
  • GetModuleFileNameW (Address: 0x18008b3d0)
  • GetModuleHandleA (Address: 0x18008b3c8)
  • GetModuleHandleExA (Address: 0x18008b3f0)
  • GetModuleHandleExW (Address: 0x18008b3a0)
  • GetModuleHandleW (Address: 0x18008b338)
  • GetProcAddress (Address: 0x18008b378)
  • LoadLibraryExA (Address: 0x18008b3c0)
  • LoadLibraryExW (Address: 0x18008b3e8)
  • LoadResource (Address: 0x18008b3e0)
  • LockResource (Address: 0x18008b350)
  • SizeofResource (Address: 0x18008b368)
api-ms-win-core-libraryloader-l1-2-1.dll
  • FindResourceW (Address: 0x18008b410)
  • LoadLibraryA (Address: 0x18008b408)
  • LoadLibraryW (Address: 0x18008b400)
api-ms-win-core-libraryloader-l1-2-2.dll
  • EnumResourceNamesW (Address: 0x18008b420)
api-ms-win-core-libraryloader-l1-2-3.dll
  • EnumResourceNamesA (Address: 0x18008b430)
api-ms-win-core-libraryloader-l2-1-0.dll
  • LoadPackagedLibrary (Address: 0x18008b440)
api-ms-win-core-localization-l1-2-0.dll
  • ConvertDefaultLocale (Address: 0x18008b590)
  • EnumSystemLocalesA (Address: 0x18008b568)
  • EnumSystemLocalesW (Address: 0x18008b5f0)
  • FindNLSString (Address: 0x18008b498)
  • FindNLSStringEx (Address: 0x18008b5c0)
  • FormatMessageA (Address: 0x18008b4d0)
  • FormatMessageW (Address: 0x18008b578)
  • GetACP (Address: 0x18008b548)
  • GetCalendarInfoEx (Address: 0x18008b458)
  • GetCalendarInfoW (Address: 0x18008b460)
  • GetCPInfo (Address: 0x18008b4a0)
  • GetCPInfoExW (Address: 0x18008b468)
  • GetFileMUIInfo (Address: 0x18008b508)
  • GetFileMUIPath (Address: 0x18008b4e8)
  • GetLocaleInfoA (Address: 0x18008b538)
  • GetLocaleInfoEx (Address: 0x18008b4d8)
  • GetLocaleInfoW (Address: 0x18008b4f8)
  • GetNLSVersion (Address: 0x18008b530)
  • GetNLSVersionEx (Address: 0x18008b5d0)
  • GetOEMCP (Address: 0x18008b478)
  • GetProcessPreferredUILanguages (Address: 0x18008b5d8)
  • GetSystemDefaultLangID (Address: 0x18008b540)
  • GetSystemDefaultLCID (Address: 0x18008b488)
  • GetSystemPreferredUILanguages (Address: 0x18008b550)
  • GetThreadLocale (Address: 0x18008b4b8)
  • GetThreadPreferredUILanguages (Address: 0x18008b4e0)
  • GetThreadUILanguage (Address: 0x18008b598)
  • GetUILanguageInfo (Address: 0x18008b520)
  • GetUserDefaultLangID (Address: 0x18008b4b0)
  • GetUserDefaultLCID (Address: 0x18008b5a8)
  • GetUserPreferredUILanguages (Address: 0x18008b518)
  • IdnToAscii (Address: 0x18008b4f0)
  • IdnToUnicode (Address: 0x18008b4c8)
  • IsDBCSLeadByte (Address: 0x18008b5c8)
  • IsDBCSLeadByteEx (Address: 0x18008b490)
  • IsNLSDefinedString (Address: 0x18008b500)
  • IsValidCodePage (Address: 0x18008b560)
  • IsValidLanguageGroup (Address: 0x18008b528)
  • IsValidLocale (Address: 0x18008b5f8)
  • IsValidLocaleName (Address: 0x18008b4a8)
  • IsValidNLSVersion (Address: 0x18008b470)
  • LCMapStringA (Address: 0x18008b558)
  • LCMapStringEx (Address: 0x18008b580)
  • LCMapStringW (Address: 0x18008b5e8)
  • LocaleNameToLCID (Address: 0x18008b510)
  • ResolveLocaleName (Address: 0x18008b570)
  • SetCalendarInfoW (Address: 0x18008b588)
  • SetLocaleInfoW (Address: 0x18008b5e0)
  • SetProcessPreferredUILanguages (Address: 0x18008b5b8)
  • SetThreadLocale (Address: 0x18008b480)
  • SetThreadPreferredUILanguages (Address: 0x18008b450)
  • SetThreadUILanguage (Address: 0x18008b4c0)
  • VerLanguageNameA (Address: 0x18008b5a0)
  • VerLanguageNameW (Address: 0x18008b5b0)
api-ms-win-core-localization-l2-1-0.dll
  • EnumCalendarInfoExEx (Address: 0x18008b638)
  • EnumCalendarInfoExW (Address: 0x18008b618)
  • EnumCalendarInfoW (Address: 0x18008b648)
  • EnumDateFormatsExEx (Address: 0x18008b658)
  • EnumDateFormatsExW (Address: 0x18008b608)
  • EnumDateFormatsW (Address: 0x18008b650)
  • EnumSystemCodePagesW (Address: 0x18008b630)
  • EnumTimeFormatsEx (Address: 0x18008b620)
  • EnumTimeFormatsW (Address: 0x18008b610)
  • GetCurrencyFormatEx (Address: 0x18008b640)
  • GetNumberFormatEx (Address: 0x18008b628)
api-ms-win-core-localization-private-l1-1-0.dll
  • NlsCheckPolicy (Address: 0x18008b678)
  • NlsGetCacheUpdateCount (Address: 0x18008b680)
  • NlsUpdateLocale (Address: 0x18008b670)
  • NlsUpdateSystemLocale (Address: 0x18008b668)
api-ms-win-core-memory-l1-1-0.dll
  • CreateFileMappingW (Address: 0x18008b6e8)
  • FlushViewOfFile (Address: 0x18008b700)
  • MapViewOfFile (Address: 0x18008b6f0)
  • MapViewOfFileEx (Address: 0x18008b6f8)
  • OpenFileMappingW (Address: 0x18008b6c0)
  • ReadProcessMemory (Address: 0x18008b6b0)
  • UnmapViewOfFile (Address: 0x18008b6c8)
  • VirtualAlloc (Address: 0x18008b6b8)
  • VirtualAllocEx (Address: 0x18008b6a0)
  • VirtualFree (Address: 0x18008b6a8)
  • VirtualFreeEx (Address: 0x18008b6e0)
  • VirtualProtect (Address: 0x18008b690)
  • VirtualProtectEx (Address: 0x18008b698)
  • VirtualQuery (Address: 0x18008b6d8)
  • VirtualQueryEx (Address: 0x18008b708)
  • WriteProcessMemory (Address: 0x18008b6d0)
api-ms-win-core-memory-l1-1-1.dll
  • CreateFileMappingNumaW (Address: 0x18008b738)
  • CreateMemoryResourceNotification (Address: 0x18008b778)
  • GetLargePageMinimum (Address: 0x18008b770)
  • GetProcessWorkingSetSize (Address: 0x18008b780)
  • GetProcessWorkingSetSizeEx (Address: 0x18008b758)
  • GetSystemFileCacheSize (Address: 0x18008b718)
  • GetWriteWatch (Address: 0x18008b750)
  • QueryMemoryResourceNotification (Address: 0x18008b730)
  • ResetWriteWatch (Address: 0x18008b740)
  • SetProcessWorkingSetSize (Address: 0x18008b768)
  • SetProcessWorkingSetSizeEx (Address: 0x18008b748)
  • SetSystemFileCacheSize (Address: 0x18008b760)
  • VirtualLock (Address: 0x18008b720)
  • VirtualUnlock (Address: 0x18008b728)
api-ms-win-core-memory-l1-1-2.dll
  • AllocateUserPhysicalPages (Address: 0x18008b7b8)
  • AllocateUserPhysicalPagesNuma (Address: 0x18008b7c8)
  • FreeUserPhysicalPages (Address: 0x18008b7b0)
  • GetMemoryErrorHandlingCapabilities (Address: 0x18008b7c0)
  • MapUserPhysicalPages (Address: 0x18008b7a0)
  • RegisterBadMemoryNotification (Address: 0x18008b7a8)
  • UnregisterBadMemoryNotification (Address: 0x18008b790)
  • VirtualAllocExNuma (Address: 0x18008b798)
api-ms-win-core-namedpipe-l1-1-0.dll
  • ConnectNamedPipe (Address: 0x18008b7f8)
  • CreateNamedPipeW (Address: 0x18008b7f0)
  • CreatePipe (Address: 0x18008b7e0)
  • DisconnectNamedPipe (Address: 0x18008b800)
  • GetNamedPipeClientComputerNameW (Address: 0x18008b7d8)
  • PeekNamedPipe (Address: 0x18008b7e8)
  • SetNamedPipeHandleState (Address: 0x18008b818)
  • TransactNamedPipe (Address: 0x18008b810)
  • WaitNamedPipeW (Address: 0x18008b808)
api-ms-win-core-namedpipe-l1-2-1.dll
  • GetNamedPipeHandleStateW (Address: 0x18008b828)
api-ms-win-core-namedpipe-l1-2-2.dll
  • CallNamedPipeW (Address: 0x18008b838)
api-ms-win-core-namespace-l1-1-0.dll
  • AddSIDToBoundaryDescriptor (Address: 0x18008b860)
  • ClosePrivateNamespace (Address: 0x18008b848)
  • CreateBoundaryDescriptorW (Address: 0x18008b870)
  • CreatePrivateNamespaceW (Address: 0x18008b868)
  • DeleteBoundaryDescriptor (Address: 0x18008b858)
  • OpenPrivateNamespaceW (Address: 0x18008b850)
api-ms-win-core-normalization-l1-1-0.dll
  • GetStringScripts (Address: 0x18008b888)
  • IdnToNameprepUnicode (Address: 0x18008b898)
  • IsNormalizedString (Address: 0x18008b880)
  • NormalizeString (Address: 0x18008b8a0)
  • VerifyScripts (Address: 0x18008b890)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsA (Address: 0x18008b908)
  • ExpandEnvironmentStringsW (Address: 0x18008b940)
  • FreeEnvironmentStringsA (Address: 0x18008b950)
  • FreeEnvironmentStringsW (Address: 0x18008b8f8)
  • GetCommandLineA (Address: 0x18008b8d8)
  • GetCommandLineW (Address: 0x18008b930)
  • GetCurrentDirectoryA (Address: 0x18008b8f0)
  • GetCurrentDirectoryW (Address: 0x18008b8c8)
  • GetEnvironmentStrings (Address: 0x18008b910)
  • GetEnvironmentStringsW (Address: 0x18008b8b0)
  • GetEnvironmentVariableA (Address: 0x18008b900)
  • GetEnvironmentVariableW (Address: 0x18008b918)
  • GetStdHandle (Address: 0x18008b938)
  • SearchPathW (Address: 0x18008b920)
  • SetCurrentDirectoryA (Address: 0x18008b8e0)
  • SetCurrentDirectoryW (Address: 0x18008b8b8)
  • SetEnvironmentStringsW (Address: 0x18008b8d0)
  • SetEnvironmentVariableA (Address: 0x18008b928)
  • SetEnvironmentVariableW (Address: 0x18008b948)
  • SetStdHandle (Address: 0x18008b8c0)
  • SetStdHandleEx (Address: 0x18008b8e8)
api-ms-win-core-processenvironment-l1-2-0.dll
  • NeedCurrentDirectoryForExePathA (Address: 0x18008b968)
  • NeedCurrentDirectoryForExePathW (Address: 0x18008b970)
  • SearchPathA (Address: 0x18008b960)
api-ms-win-core-processsnapshot-l1-1-0.dll
  • PssCaptureSnapshot (Address: 0x18008b9c0)
  • PssDuplicateSnapshot (Address: 0x18008b980)
  • PssFreeSnapshot (Address: 0x18008b9a0)
  • PssQuerySnapshot (Address: 0x18008b9c8)
  • PssWalkMarkerCreate (Address: 0x18008b9b0)
  • PssWalkMarkerFree (Address: 0x18008b990)
  • PssWalkMarkerGetPosition (Address: 0x18008b998)
  • PssWalkMarkerSeekToBeginning (Address: 0x18008b9a8)
  • PssWalkMarkerSetPosition (Address: 0x18008b988)
  • PssWalkSnapshot (Address: 0x18008b9b8)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateProcessA (Address: 0x18008bab0)
  • CreateProcessW (Address: 0x18008baa8)
  • CreateRemoteThread (Address: 0x18008bad8)
  • CreateRemoteThreadEx (Address: 0x18008ba50)
  • DeleteProcThreadAttributeList (Address: 0x18008baf0)
  • GetExitCodeProcess (Address: 0x18008ba40)
  • GetExitCodeThread (Address: 0x18008ba58)
  • GetPriorityClass (Address: 0x18008ba98)
  • GetProcessId (Address: 0x18008ba10)
  • GetProcessIdOfThread (Address: 0x18008ba20)
  • GetProcessTimes (Address: 0x18008bac8)
  • GetProcessVersion (Address: 0x18008ba08)
  • GetStartupInfoW (Address: 0x18008ba60)
  • GetThreadId (Address: 0x18008baf8)
  • GetThreadPriority (Address: 0x18008ba78)
  • GetThreadPriorityBoost (Address: 0x18008ba48)
  • InitializeProcThreadAttributeList (Address: 0x18008bae0)
  • OpenProcessToken (Address: 0x18008b9d8)
  • OpenThread (Address: 0x18008bad0)
  • ProcessIdToSessionId (Address: 0x18008b9e8)
  • QueryProcessAffinityUpdateMode (Address: 0x18008bac0)
  • QueueUserAPC (Address: 0x18008ba80)
  • ResumeThread (Address: 0x18008ba68)
  • SetPriorityClass (Address: 0x18008ba30)
  • SetProcessAffinityUpdateMode (Address: 0x18008ba70)
  • SetProcessShutdownParameters (Address: 0x18008ba18)
  • SetThreadPriority (Address: 0x18008b9e0)
  • SetThreadPriorityBoost (Address: 0x18008ba90)
  • SetThreadStackGuarantee (Address: 0x18008baa0)
  • SuspendThread (Address: 0x18008ba00)
  • SwitchToThread (Address: 0x18008ba88)
  • TerminateProcess (Address: 0x18008ba28)
  • TerminateThread (Address: 0x18008b9f0)
  • TlsAlloc (Address: 0x18008b9f8)
  • TlsFree (Address: 0x18008bab8)
  • TlsSetValue (Address: 0x18008ba38)
  • UpdateProcThreadAttribute (Address: 0x18008bae8)
api-ms-win-core-processthreads-l1-1-1.dll
  • FlushInstructionCache (Address: 0x18008bb38)
  • GetProcessHandleCount (Address: 0x18008bb50)
  • GetProcessMitigationPolicy (Address: 0x18008bb30)
  • GetThreadContext (Address: 0x18008bb48)
  • GetThreadIdealProcessorEx (Address: 0x18008bb28)
  • GetThreadTimes (Address: 0x18008bb58)
  • IsProcessorFeaturePresent (Address: 0x18008bb10)
  • OpenProcess (Address: 0x18008bb40)
  • SetProcessMitigationPolicy (Address: 0x18008bb18)
  • SetThreadContext (Address: 0x18008bb20)
  • SetThreadIdealProcessorEx (Address: 0x18008bb08)
api-ms-win-core-processthreads-l1-1-2.dll
  • GetProcessPriorityBoost (Address: 0x18008bb88)
  • GetSystemTimes (Address: 0x18008bb68)
  • GetThreadInformation (Address: 0x18008bb90)
  • GetThreadIOPendingFlag (Address: 0x18008bb70)
  • SetProcessPriorityBoost (Address: 0x18008bb80)
  • SetThreadInformation (Address: 0x18008bb78)
api-ms-win-core-processthreads-l1-1-3.dll
  • GetProcessInformation (Address: 0x18008bba8)
  • GetProcessShutdownParameters (Address: 0x18008bbb8)
  • SetProcessInformation (Address: 0x18008bbb0)
  • SetThreadIdealProcessor (Address: 0x18008bba0)
api-ms-win-core-processtopology-l1-1-0.dll
  • GetProcessGroupAffinity (Address: 0x18008bbc8)
  • GetThreadGroupAffinity (Address: 0x18008bbd8)
  • SetThreadGroupAffinity (Address: 0x18008bbd0)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x18008bbf0)
  • QueryPerformanceFrequency (Address: 0x18008bbe8)
api-ms-win-core-psapi-ansi-l1-1-0.dll
  • K32EnumPageFilesA (Address: 0x18008bc30)
  • K32GetDeviceDriverBaseNameA (Address: 0x18008bc20)
  • K32GetDeviceDriverFileNameA (Address: 0x18008bc08)
  • K32GetMappedFileNameA (Address: 0x18008bc10)
  • K32GetModuleBaseNameA (Address: 0x18008bc00)
  • K32GetModuleFileNameExA (Address: 0x18008bc38)
  • K32GetProcessImageFileNameA (Address: 0x18008bc18)
  • QueryFullProcessImageNameA (Address: 0x18008bc28)
api-ms-win-core-psapi-l1-1-0.dll
  • K32EmptyWorkingSet (Address: 0x18008bcb8)
  • K32EnumDeviceDrivers (Address: 0x18008bc88)
  • K32EnumPageFilesW (Address: 0x18008bcd0)
  • K32EnumProcesses (Address: 0x18008bca8)
  • K32EnumProcessModules (Address: 0x18008bce0)
  • K32EnumProcessModulesEx (Address: 0x18008bc48)
  • K32GetDeviceDriverBaseNameW (Address: 0x18008bc60)
  • K32GetDeviceDriverFileNameW (Address: 0x18008bc90)
  • K32GetMappedFileNameW (Address: 0x18008bce8)
  • K32GetModuleBaseNameW (Address: 0x18008bc80)
  • K32GetModuleFileNameExW (Address: 0x18008bc98)
  • K32GetModuleInformation (Address: 0x18008bc78)
  • K32GetPerformanceInfo (Address: 0x18008bcc8)
  • K32GetProcessImageFileNameW (Address: 0x18008bcc0)
  • K32GetProcessMemoryInfo (Address: 0x18008bc58)
  • K32GetWsChanges (Address: 0x18008bc70)
  • K32GetWsChangesEx (Address: 0x18008bca0)
  • K32InitializeProcessForWsWatch (Address: 0x18008bc68)
  • K32QueryWorkingSet (Address: 0x18008bcb0)
  • K32QueryWorkingSetEx (Address: 0x18008bc50)
  • QueryFullProcessImageNameW (Address: 0x18008bcd8)
api-ms-win-core-realtime-l1-1-0.dll
  • QueryIdleProcessorCycleTime (Address: 0x18008bcf8)
  • QueryIdleProcessorCycleTimeEx (Address: 0x18008bd00)
  • QueryProcessCycleTime (Address: 0x18008bd08)
  • QueryThreadCycleTime (Address: 0x18008bd18)
  • QueryUnbiasedInterruptTime (Address: 0x18008bd10)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x18008be50)
  • RegCopyTreeW (Address: 0x18008bde0)
  • RegCreateKeyExA (Address: 0x18008bd70)
  • RegCreateKeyExW (Address: 0x18008bd80)
  • RegDeleteKeyExA (Address: 0x18008be60)
  • RegDeleteKeyExW (Address: 0x18008bd30)
  • RegDeleteTreeA (Address: 0x18008bdb8)
  • RegDeleteTreeW (Address: 0x18008bdb0)
  • RegDeleteValueA (Address: 0x18008be30)
  • RegDeleteValueW (Address: 0x18008be20)
  • RegDisablePredefinedCacheEx (Address: 0x18008bd58)
  • RegEnumKeyExA (Address: 0x18008be58)
  • RegEnumKeyExW (Address: 0x18008bd98)
  • RegEnumValueA (Address: 0x18008be18)
  • RegEnumValueW (Address: 0x18008be70)
  • RegFlushKey (Address: 0x18008bd78)
  • RegGetKeySecurity (Address: 0x18008bd38)
  • RegGetValueA (Address: 0x18008bd40)
  • RegGetValueW (Address: 0x18008be38)
  • RegLoadAppKeyW (Address: 0x18008bdc0)
  • RegLoadKeyA (Address: 0x18008bde8)
  • RegLoadKeyW (Address: 0x18008be00)
  • RegLoadMUIStringA (Address: 0x18008bd60)
  • RegLoadMUIStringW (Address: 0x18008bdc8)
  • RegNotifyChangeKeyValue (Address: 0x18008bd48)
  • RegOpenCurrentUser (Address: 0x18008be40)
  • RegOpenKeyExA (Address: 0x18008be08)
  • RegOpenKeyExW (Address: 0x18008be48)
  • RegOpenUserClassesRoot (Address: 0x18008bd90)
  • RegQueryInfoKeyA (Address: 0x18008bdf8)
  • RegQueryInfoKeyW (Address: 0x18008bd28)
  • RegQueryValueExA (Address: 0x18008bd68)
  • RegQueryValueExW (Address: 0x18008be68)
  • RegRestoreKeyA (Address: 0x18008be28)
  • RegRestoreKeyW (Address: 0x18008be10)
  • RegSaveKeyExA (Address: 0x18008bd50)
  • RegSaveKeyExW (Address: 0x18008bda8)
  • RegSetKeySecurity (Address: 0x18008bda0)
  • RegSetValueExA (Address: 0x18008bdd8)
  • RegSetValueExW (Address: 0x18008bdd0)
  • RegUnLoadKeyA (Address: 0x18008bd88)
  • RegUnLoadKeyW (Address: 0x18008bdf0)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlAddFunctionTable (Address: 0x18008beb0)
  • RtlCaptureContext (Address: 0x18008bea8)
  • RtlCompareMemory (Address: 0x18008be80)
  • RtlDeleteFunctionTable (Address: 0x18008be90)
  • RtlInstallFunctionTableCallback (Address: 0x18008bea0)
  • RtlLookupFunctionEntry (Address: 0x18008bed8)
  • RtlPcToFileHeader (Address: 0x18008bec0)
  • RtlRaiseException (Address: 0x18008be88)
  • RtlRestoreContext (Address: 0x18008bed0)
  • RtlUnwind (Address: 0x18008bec8)
  • RtlUnwindEx (Address: 0x18008be98)
  • RtlVirtualUnwind (Address: 0x18008beb8)
api-ms-win-core-rtlsupport-l1-2-2.dll
  • RtlVirtualUnwind2 (Address: 0x18008bee8)
api-ms-win-core-sidebyside-l1-1-0.dll
  • ActivateActCtx (Address: 0x18008bf20)
  • AddRefActCtx (Address: 0x18008bf00)
  • CreateActCtxW (Address: 0x18008bf18)
  • DeactivateActCtx (Address: 0x18008bf38)
  • FindActCtxSectionGuid (Address: 0x18008bf28)
  • FindActCtxSectionStringW (Address: 0x18008bf30)
  • GetCurrentActCtx (Address: 0x18008bf40)
  • QueryActCtxSettingsW (Address: 0x18008bf48)
  • QueryActCtxW (Address: 0x18008bef8)
  • ReleaseActCtx (Address: 0x18008bf10)
  • ZombifyActCtx (Address: 0x18008bf08)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringEx (Address: 0x18008bf68)
  • CompareStringOrdinal (Address: 0x18008bf80)
  • CompareStringW (Address: 0x18008bf88)
  • FoldStringW (Address: 0x18008bf78)
  • GetStringTypeExW (Address: 0x18008bf90)
  • GetStringTypeW (Address: 0x18008bf58)
  • MultiByteToWideChar (Address: 0x18008bf70)
  • WideCharToMultiByte (Address: 0x18008bf60)
api-ms-win-core-synch-l1-1-0.dll
  • CancelWaitableTimer (Address: 0x18008bff8)
  • CreateEventA (Address: 0x18008c000)
  • CreateEventExA (Address: 0x18008c008)
  • CreateEventExW (Address: 0x18008c010)
  • CreateEventW (Address: 0x18008c018)
  • CreateMutexA (Address: 0x18008c020)
  • CreateMutexExA (Address: 0x18008c028)
  • CreateMutexExW (Address: 0x18008c030)
  • CreateMutexW (Address: 0x18008c038)
  • CreateSemaphoreExW (Address: 0x18008c040)
  • CreateWaitableTimerExW (Address: 0x18008c050)
  • DeleteCriticalSection (Address: 0x18008bfb0)
  • EnterCriticalSection (Address: 0x18008bfa0)
  • InitializeCriticalSection (Address: 0x18008bfb8)
  • InitializeCriticalSectionAndSpinCount (Address: 0x18008c058)
  • InitializeCriticalSectionEx (Address: 0x18008c060)
  • LeaveCriticalSection (Address: 0x18008bfa8)
  • OpenEventA (Address: 0x18008c068)
  • OpenEventW (Address: 0x18008c070)
  • OpenMutexW (Address: 0x18008c078)
  • OpenSemaphoreW (Address: 0x18008c080)
  • OpenWaitableTimerW (Address: 0x18008c088)
  • ReleaseMutex (Address: 0x18008c090)
  • ReleaseSemaphore (Address: 0x18008c048)
  • ResetEvent (Address: 0x18008bff0)
  • SetEvent (Address: 0x18008bfe8)
  • SetWaitableTimer (Address: 0x18008bfe0)
  • SleepEx (Address: 0x18008bfd8)
  • WaitForMultipleObjectsEx (Address: 0x18008bfd0)
  • WaitForSingleObject (Address: 0x18008bfc8)
  • WaitForSingleObjectEx (Address: 0x18008bfc0)
api-ms-win-core-synch-l1-2-0.dll
  • DeleteSynchronizationBarrier (Address: 0x18008c0b0)
  • EnterSynchronizationBarrier (Address: 0x18008c0c0)
  • InitializeSynchronizationBarrier (Address: 0x18008c0a8)
  • InitOnceExecuteOnce (Address: 0x18008c0a0)
  • SignalObjectAndWait (Address: 0x18008c0b8)
api-ms-win-core-synch-l1-2-1.dll
  • CreateSemaphoreW (Address: 0x18008c0d8)
  • WaitForMultipleObjects (Address: 0x18008c0d0)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetComputerNameExA (Address: 0x18008c138)
  • GetComputerNameExW (Address: 0x18008c110)
  • GetLocalTime (Address: 0x18008c0f0)
  • GetLogicalProcessorInformation (Address: 0x18008c160)
  • GetLogicalProcessorInformationEx (Address: 0x18008c148)
  • GetSystemInfo (Address: 0x18008c108)
  • GetSystemTime (Address: 0x18008c140)
  • GetSystemTimeAdjustment (Address: 0x18008c128)
  • GetSystemTimeAsFileTime (Address: 0x18008c130)
  • GetVersion (Address: 0x18008c100)
  • GetVersionExA (Address: 0x18008c118)
  • GetVersionExW (Address: 0x18008c120)
  • GetWindowsDirectoryA (Address: 0x18008c0e8)
  • GetWindowsDirectoryW (Address: 0x18008c0f8)
  • GlobalMemoryStatusEx (Address: 0x18008c158)
  • SetLocalTime (Address: 0x18008c150)
api-ms-win-core-sysinfo-l1-2-0.dll
  • EnumSystemFirmwareTables (Address: 0x18008c190)
  • GetNativeSystemInfo (Address: 0x18008c198)
  • GetProductInfo (Address: 0x18008c188)
  • GetSystemFirmwareTable (Address: 0x18008c178)
  • GetSystemTimePreciseAsFileTime (Address: 0x18008c180)
  • SetComputerNameExW (Address: 0x18008c1a0)
  • SetSystemTime (Address: 0x18008c170)
api-ms-win-core-sysinfo-l1-2-1.dll
  • DnsHostnameToComputerNameExW (Address: 0x18008c1c0)
  • GetPhysicallyInstalledSystemMemory (Address: 0x18008c1b0)
  • SetComputerNameEx2W (Address: 0x18008c1b8)
api-ms-win-core-sysinfo-l1-2-3.dll
  • SetComputerNameA (Address: 0x18008c1e0)
  • SetComputerNameExA (Address: 0x18008c1d8)
  • SetComputerNameW (Address: 0x18008c1d0)
api-ms-win-core-systemtopology-l1-1-0.dll
  • GetNumaHighestNodeNumber (Address: 0x18008c1f8)
  • GetNumaNodeProcessorMaskEx (Address: 0x18008c1f0)
api-ms-win-core-systemtopology-l1-1-1.dll
  • GetNumaProximityNodeEx (Address: 0x18008c208)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
  • ChangeTimerQueueTimer (Address: 0x18008c220)
  • CreateTimerQueue (Address: 0x18008c248)
  • CreateTimerQueueTimer (Address: 0x18008c230)
  • DeleteTimerQueue (Address: 0x18008c228)
  • DeleteTimerQueueEx (Address: 0x18008c240)
  • DeleteTimerQueueTimer (Address: 0x18008c238)
  • QueueUserWorkItem (Address: 0x18008c250)
  • UnregisterWaitEx (Address: 0x18008c218)
api-ms-win-core-threadpool-private-l1-1-0.dll
  • RegisterWaitForSingleObjectEx (Address: 0x18008c260)
api-ms-win-core-timezone-l1-1-0.dll
  • FileTimeToSystemTime (Address: 0x18008c2b0)
  • GetDynamicTimeZoneInformation (Address: 0x18008c2a0)
  • GetTimeZoneInformation (Address: 0x18008c278)
  • GetTimeZoneInformationForYear (Address: 0x18008c298)
  • SetDynamicTimeZoneInformation (Address: 0x18008c288)
  • SetTimeZoneInformation (Address: 0x18008c290)
  • SystemTimeToFileTime (Address: 0x18008c270)
  • SystemTimeToTzSpecificLocalTime (Address: 0x18008c280)
  • TzSpecificLocalTimeToSystemTime (Address: 0x18008c2a8)
api-ms-win-core-util-l1-1-0.dll
  • Beep (Address: 0x18008c2c0)
api-ms-win-core-windowserrorreporting-l1-1-0.dll
  • GetApplicationRecoveryCallback (Address: 0x18008c308)
  • GetApplicationRestartSettings (Address: 0x18008c2d8)
  • WerRegisterFile (Address: 0x18008c2e8)
  • WerRegisterMemoryBlock (Address: 0x18008c2e0)
  • WerRegisterRuntimeExceptionModule (Address: 0x18008c2d0)
  • WerUnregisterFile (Address: 0x18008c300)
  • WerUnregisterMemoryBlock (Address: 0x18008c2f0)
  • WerUnregisterRuntimeExceptionModule (Address: 0x18008c2f8)
api-ms-win-core-windowserrorreporting-l1-1-1.dll
  • WerRegisterAdditionalProcess (Address: 0x18008c340)
  • WerRegisterCustomMetadata (Address: 0x18008c338)
  • WerRegisterExcludedMemoryBlock (Address: 0x18008c328)
  • WerUnregisterAdditionalProcess (Address: 0x18008c320)
  • WerUnregisterCustomMetadata (Address: 0x18008c330)
  • WerUnregisterExcludedMemoryBlock (Address: 0x18008c318)
api-ms-win-core-windowserrorreporting-l1-1-2.dll
  • WerRegisterAppLocalDump (Address: 0x18008c358)
  • WerUnregisterAppLocalDump (Address: 0x18008c350)
api-ms-win-core-windowserrorreporting-l1-1-3.dll
  • RegisterApplicationRestart (Address: 0x18008c370)
  • UnregisterApplicationRestart (Address: 0x18008c368)
api-ms-win-core-wow64-l1-1-0.dll
  • IsWow64Process (Address: 0x18008c380)
  • Wow64DisableWow64FsRedirection (Address: 0x18008c390)
  • Wow64EnableWow64FsRedirection (Address: 0x18008c398)
  • Wow64RevertWow64FsRedirection (Address: 0x18008c388)
api-ms-win-core-wow64-l1-1-1.dll
  • GetSystemWow64Directory2W (Address: 0x18008c3a8)
  • GetSystemWow64DirectoryA (Address: 0x18008c3b8)
  • GetSystemWow64DirectoryW (Address: 0x18008c3c0)
  • IsWow64Process2 (Address: 0x18008c3b0)
api-ms-win-core-wow64-l1-1-3.dll
  • Wow64GetThreadContext (Address: 0x18008c3d8)
  • Wow64SetThreadContext (Address: 0x18008c3e0)
  • Wow64SuspendThread (Address: 0x18008c3d0)
api-ms-win-core-xstate-l2-1-0.dll
  • CopyContext (Address: 0x18008c410)
  • GetEnabledXStateFeatures (Address: 0x18008c400)
  • GetXStateFeaturesMask (Address: 0x18008c418)
  • InitializeContext (Address: 0x18008c3f0)
  • LocateXStateFeature (Address: 0x18008c408)
  • SetXStateFeaturesMask (Address: 0x18008c3f8)
api-ms-win-core-xstate-l2-1-1.dll
  • InitializeContext2 (Address: 0x18008c428)
api-ms-win-core-xstate-l2-1-2.dll
  • EnableProcessOptionalXStateFeatures (Address: 0x18008c438)
  • GetThreadEnabledXStateFeatures (Address: 0x18008c440)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x18008c458)
  • EventSetInformation (Address: 0x18008c460)
  • EventUnregister (Address: 0x18008c468)
  • EventWriteTransfer (Address: 0x18008c450)
api-ms-win-security-appcontainer-l1-1-0.dll
  • GetAppContainerNamedObjectPath (Address: 0x18008c478)
api-ms-win-security-base-l1-1-0.dll
  • AccessCheck (Address: 0x18008c4d0)
  • AllocateAndInitializeSid (Address: 0x18008c4c8)
  • CreateWellKnownSid (Address: 0x18008c490)
  • DuplicateToken (Address: 0x18008c488)
  • EqualSid (Address: 0x18008c4a0)
  • FreeSid (Address: 0x18008c498)
  • GetSidSubAuthority (Address: 0x18008c4b0)
  • GetSidSubAuthorityCount (Address: 0x18008c4a8)
  • GetTokenInformation (Address: 0x18008c4c0)
  • InitializeSid (Address: 0x18008c4b8)
api-ms-win-security-base-l1-2-0.dll
  • AddResourceAttributeAce (Address: 0x18008c508)
  • AddScopedPolicyIDAce (Address: 0x18008c510)
  • CheckTokenCapability (Address: 0x18008c4f8)
  • CheckTokenMembershipEx (Address: 0x18008c4e8)
  • GetAppContainerAce (Address: 0x18008c500)
  • GetCachedSigningLevel (Address: 0x18008c4f0)
  • SetCachedSigningLevel (Address: 0x18008c4e0)
KERNELBASE.dll
  • AppContainerFreeMemory (Address: 0x18008a628)
  • AppContainerLookupMoniker (Address: 0x18008a620)
  • AppXCheckPplSupport (Address: 0x18008a5f0)
  • AppXGetOSMaxVersionTested (Address: 0x18008a680)
  • AppXPostSuccessExtension (Address: 0x18008a608)
  • AppXPreCreationExtension (Address: 0x18008a618)
  • AppXReleaseAppXContext (Address: 0x18008a5f8)
  • AreFileApisANSI (Address: 0x18008a630)
  • BaseDllFreeResourceId (Address: 0x18008a760)
  • BaseDllMapResourceIdW (Address: 0x18008a768)
  • BaseFormatObjectAttributes (Address: 0x18008a590)
  • BaseGetNamedObjectDirectory (Address: 0x18008a788)
  • BasepAdjustObjectAttributesForPrivateNamespace (Address: 0x18008a6b0)
  • BasepNotifyTrackingService (Address: 0x18008a640)
  • CheckAllowDecryptedRemoteDestinationPolicy (Address: 0x18008a7b8)
  • CheckGroupPolicyEnabled (Address: 0x18008a6c8)
  • CheckIsMSIXPackage (Address: 0x18008a670)
  • ClosePackageInfo (Address: 0x18008a678)
  • CompareStringA (Address: 0x18008a5d0)
  • CreateProcessAsUserA (Address: 0x18008a790)
  • CreateProcessAsUserW (Address: 0x18008a850)
  • CreateProcessInternalA (Address: 0x18008a7a0)
  • CreateProcessInternalW (Address: 0x18008a858)
  • EnumLanguageGroupLocalesW (Address: 0x18008a648)
  • EnumSystemLanguageGroupsW (Address: 0x18008a7f0)
  • EnumSystemLocalesEx (Address: 0x18008a7e8)
  • EnumUILanguagesW (Address: 0x18008a840)
  • FatalAppExitA (Address: 0x18008a7e0)
  • FatalAppExitW (Address: 0x18008a7c0)
  • GetCalendar (Address: 0x18008a758)
  • GetCurrentPackageFullName (Address: 0x18008a668)
  • GetEightBitStringToUnicodeStringRoutine (Address: 0x18008a6b8)
  • GetEraNameCountedString (Address: 0x18008a830)
  • GetLocaleInfoHelper (Address: 0x18008a750)
  • GetNamedLocaleHashNode (Address: 0x18008a740)
  • GetNamedPipeAttribute (Address: 0x18008a5e8)
  • GetPackagedDataForFile (Address: 0x18008a610)
  • GetPackageFullName (Address: 0x18008a660)
  • GetPackageTargetPlatformProperty (Address: 0x18008a688)
  • GetProcAddressForCaller (Address: 0x18008a808)
  • GetPtrCalData (Address: 0x18008a6f8)
  • GetPtrCalDataArray (Address: 0x18008a6e8)
  • GetRegistryExtensionFlags (Address: 0x18008a5b0)
  • GetStringTableEntry (Address: 0x18008a6c0)
  • GetStringTypeA (Address: 0x18008a778)
  • GetSystemDefaultLocaleName (Address: 0x18008a818)
  • GetSystemDefaultUILanguage (Address: 0x18008a868)
  • GetTargetPlatformContext (Address: 0x18008a690)
  • GetUnicodeStringToEightBitSizeRoutine (Address: 0x18008a5e0)
  • GetUnicodeStringToEightBitStringRoutine (Address: 0x18008a5d8)
  • GetUserDefaultLocaleName (Address: 0x18008a860)
  • GetUserDefaultUILanguage (Address: 0x18008a848)
  • GetUserOverrideString (Address: 0x18008a6f0)
  • GetUserOverrideWord (Address: 0x18008a748)
  • GetVolumeNameForVolumeMountPointW (Address: 0x18008a598)
  • GlobalAlloc (Address: 0x18008a7c8)
  • GlobalFree (Address: 0x18008a5c0)
  • HeapSummary (Address: 0x18008a800)
  • Internal_EnumCalendarInfo (Address: 0x18008a700)
  • Internal_EnumDateFormats (Address: 0x18008a718)
  • Internal_EnumLanguageGroupLocales (Address: 0x18008a708)
  • Internal_EnumSystemCodePages (Address: 0x18008a710)
  • Internal_EnumSystemLanguageGroups (Address: 0x18008a728)
  • Internal_EnumTimeFormats (Address: 0x18008a738)
  • Internal_EnumUILanguages (Address: 0x18008a720)
  • InternalLcidToName (Address: 0x18008a6d8)
  • KernelBaseGetGlobalData (Address: 0x18008a5b8)
  • LCIDToLocaleName (Address: 0x18008a810)
  • LoadStringBaseExW (Address: 0x18008a5c8)
  • LocalAlloc (Address: 0x18008a828)
  • LocalLock (Address: 0x18008a650)
  • LocalReAlloc (Address: 0x18008a798)
  • LocalUnlock (Address: 0x18008a770)
  • lstrcmpiW (Address: 0x18008a5a0)
  • lstrcmpW (Address: 0x18008a5a8)
  • lstrcpynA (Address: 0x18008a7a8)
  • lstrcpynW (Address: 0x18008a6d0)
  • lstrlenA (Address: 0x18008a838)
  • lstrlenW (Address: 0x18008a6a0)
  • MapViewOfFileExNuma (Address: 0x18008a820)
  • MoveFileWithProgressTransactedW (Address: 0x18008a6a8)
  • NlsIsUserDefaultLocale (Address: 0x18008a6e0)
  • NlsValidateLocale (Address: 0x18008a730)
  • NotifyMountMgr (Address: 0x18008a7d8)
  • OpenPackageInfoByFullNameForUser (Address: 0x18008a698)
  • OpenRegKey (Address: 0x18008a588)
  • PackageIdFromFullName (Address: 0x18008a658)
  • PrivCopyFileExW (Address: 0x18008a638)
  • PulseEvent (Address: 0x18008a7d0)
  • ReleasePackagedDataForFile (Address: 0x18008a600)
  • SetFileApisToANSI (Address: 0x18008a780)
  • SetFileApisToOEM (Address: 0x18008a7b0)
  • Sleep (Address: 0x18008a7f8)
ntdll.dll
  • __C_specific_handler (Address: 0x18008d040)
  • __chkstk (Address: 0x18008d050)
  • _local_unwind (Address: 0x18008d058)
  • _memicmp (Address: 0x18008cb10)
  • _stricmp (Address: 0x18008ce18)
  • _strnicmp (Address: 0x18008c960)
  • _vsnwprintf (Address: 0x18008cfe0)
  • _wcsicmp (Address: 0x18008d038)
  • _wcslwr (Address: 0x18008c5e0)
  • _wcsnicmp (Address: 0x18008c950)
  • _wtol (Address: 0x18008c5f0)
  • atol (Address: 0x18008c768)
  • bsearch (Address: 0x18008c670)
  • cos (Address: 0x18008d060)
  • CsrAllocateCaptureBuffer (Address: 0x18008c788)
  • CsrAllocateMessagePointer (Address: 0x18008c7e8)
  • CsrCaptureMessageMultiUnicodeStringsInPlace (Address: 0x18008ce58)
  • CsrCaptureMessageString (Address: 0x18008cc68)
  • CsrClientCallServer (Address: 0x18008ca30)
  • CsrFreeCaptureBuffer (Address: 0x18008c7c0)
  • DbgPrint (Address: 0x18008cee0)
  • DbgPrintEx (Address: 0x18008c730)
  • DbgUiGetThreadDebugObject (Address: 0x18008c9f0)
  • DbgUiIssueRemoteBreakin (Address: 0x18008ca00)
  • EtwEventEnabled (Address: 0x18008c530)
  • EtwEventRegister (Address: 0x18008c5d0)
  • EtwEventUnregister (Address: 0x18008c5c0)
  • EtwEventWrite (Address: 0x18008c5c8)
  • EtwEventWriteNoRegistration (Address: 0x18008c840)
  • floor (Address: 0x18008d068)
  • isdigit (Address: 0x18008ca68)
  • LdrAddRefDll (Address: 0x18008c998)
  • LdrDisableThreadCalloutsForDll (Address: 0x18008cfc0)
  • LdrFindResource_U (Address: 0x18008cd30)
  • LdrFindResourceEx_U (Address: 0x18008c630)
  • LdrGetDllDirectory (Address: 0x18008c930)
  • LdrGetProcedureAddress (Address: 0x18008c8c0)
  • LdrLoadDll (Address: 0x18008c868)
  • LdrOpenImageFileOptionsKey (Address: 0x18008cbe8)
  • LdrQueryImageFileExecutionOptions (Address: 0x18008cfd8)
  • LdrQueryImageFileKeyOption (Address: 0x18008cbd8)
  • LdrResFindResourceDirectory (Address: 0x18008c6b0)
  • LdrResSearchResource (Address: 0x18008cea0)
  • LdrSetDllDirectory (Address: 0x18008cd28)
  • LdrSetDllManifestProber (Address: 0x18008cfe8)
  • LdrUnloadDll (Address: 0x18008c880)
  • memcmp (Address: 0x18008d070)
  • memcpy (Address: 0x18008d078)
  • memmove (Address: 0x18008d048)
  • memmove_s (Address: 0x18008c5f8)
  • memset (Address: 0x18008d080)
  • NlsMbCodePageTag (Address: 0x18008ce78)
  • NtAddAtomEx (Address: 0x18008cac8)
  • NtAllocateVirtualMemory (Address: 0x18008cc78)
  • NtApphelpCacheControl (Address: 0x18008cf00)
  • NtAssignProcessToJobObject (Address: 0x18008cb98)
  • NtClearEvent (Address: 0x18008ced0)
  • NtClose (Address: 0x18008c990)
  • NtCreateEvent (Address: 0x18008c918)
  • NtCreateFile (Address: 0x18008cb48)
  • NtCreateJobObject (Address: 0x18008cb88)
  • NtCreateJobSet (Address: 0x18008cb68)
  • NtCreateKey (Address: 0x18008cb40)
  • NtCreateMailslotFile (Address: 0x18008ccf0)
  • NtCreateSection (Address: 0x18008c728)
  • NtDeleteAtom (Address: 0x18008cad0)
  • NtDeleteValueKey (Address: 0x18008c588)
  • NtDeviceIoControlFile (Address: 0x18008cd98)
  • NtEnumerateKey (Address: 0x18008c540)
  • NtEnumerateValueKey (Address: 0x18008cc20)
  • NtFindAtom (Address: 0x18008cab0)
  • NtFlushKey (Address: 0x18008cb08)
  • NtFreeVirtualMemory (Address: 0x18008cc10)
  • NtFsControlFile (Address: 0x18008c988)
  • NtGetDevicePowerState (Address: 0x18008cd60)
  • NtInitiatePowerAction (Address: 0x18008cd58)
  • NtIsSystemResumeAutomatic (Address: 0x18008cd40)
  • NtLockFile (Address: 0x18008cc58)
  • NtMapUserPhysicalPagesScatter (Address: 0x18008c660)
  • NtMapViewOfSection (Address: 0x18008c690)
  • NtOpenFile (Address: 0x18008c980)
  • NtOpenJobObject (Address: 0x18008cba8)
  • NtOpenKey (Address: 0x18008c888)
  • NtOpenProcessToken (Address: 0x18008c8d0)
  • NtOpenThreadToken (Address: 0x18008c838)
  • NtPowerInformation (Address: 0x18008cd50)
  • NtProtectVirtualMemory (Address: 0x18008cce0)
  • NtQueryAttributesFile (Address: 0x18008cde8)
  • NtQueryDirectoryFile (Address: 0x18008cd10)
  • NtQueryEaFile (Address: 0x18008cbc8)
  • NtQueryEvent (Address: 0x18008c7c8)
  • NtQueryFullAttributesFile (Address: 0x18008ce00)
  • NtQueryInformationAtom (Address: 0x18008cab8)
  • NtQueryInformationFile (Address: 0x18008c9a8)
  • NtQueryInformationJobObject (Address: 0x18008cb80)
  • NtQueryInformationProcess (Address: 0x18008ca18)
  • NtQueryInformationThread (Address: 0x18008ce08)
  • NtQueryInformationToken (Address: 0x18008c858)
  • NtQueryInstallUILanguage (Address: 0x18008c5b8)
  • NtQueryLicenseValue (Address: 0x18008c5e8)
  • NtQuerySection (Address: 0x18008cc08)
  • NtQuerySecurityObject (Address: 0x18008cbd0)
  • NtQuerySystemEnvironmentValueEx (Address: 0x18008cd78)
  • NtQuerySystemInformation (Address: 0x18008d020)
  • NtQuerySystemInformationEx (Address: 0x18008cd90)
  • NtQueryTimerResolution (Address: 0x18008ce28)
  • NtQueryValueKey (Address: 0x18008c828)
  • NtQueryVirtualMemory (Address: 0x18008ccd0)
  • NtQueryVolumeInformationFile (Address: 0x18008c7b0)
  • NtQueryWnfStateData (Address: 0x18008cd48)
  • NtRaiseHardError (Address: 0x18008c7d8)
  • NtReadFile (Address: 0x18008cc50)
  • NtReadVirtualMemory (Address: 0x18008ce98)
  • NtReplacePartitionUnit (Address: 0x18008c820)
  • NtSetEaFile (Address: 0x18008cbb8)
  • NtSetInformationDebugObject (Address: 0x18008c9e8)
  • NtSetInformationFile (Address: 0x18008c9b8)
  • NtSetInformationJobObject (Address: 0x18008cb78)
  • NtSetInformationProcess (Address: 0x18008cbf8)
  • NtSetInformationThread (Address: 0x18008c870)
  • NtSetInformationToken (Address: 0x18008cbe0)
  • NtSetSecurityObject (Address: 0x18008cbc0)
  • NtSetSystemEnvironmentValueEx (Address: 0x18008cd70)
  • NtSetSystemInformation (Address: 0x18008ca08)
  • NtSetThreadExecutionState (Address: 0x18008cd68)
  • NtSetTimerResolution (Address: 0x18008ce20)
  • NtSetValueKey (Address: 0x18008c590)
  • NtSetVolumeInformationFile (Address: 0x18008cd88)
  • NtTerminateJobObject (Address: 0x18008cba0)
  • NtTerminateProcess (Address: 0x18008c568)
  • NtUnlockFile (Address: 0x18008cc40)
  • NtUnmapViewOfSection (Address: 0x18008c6a0)
  • NtWaitForMultipleObjects (Address: 0x18008cec8)
  • NtWaitForSingleObject (Address: 0x18008c910)
  • NtWriteFile (Address: 0x18008cc18)
  • RtlAcquirePrivilege (Address: 0x18008cb90)
  • RtlAcquireSRWLockExclusive (Address: 0x18008c860)
  • RtlActivateActivationContext (Address: 0x18008c6f8)
  • RtlActivateActivationContextUnsafeFast (Address: 0x18008c9d8)
  • RtlAddAccessAllowedAce (Address: 0x18008d010)
  • RtlAddAtomToAtomTable (Address: 0x18008cac0)
  • RtlAddIntegrityLabelToBoundaryDescriptor (Address: 0x18008c818)
  • RtlAddRefActivationContext (Address: 0x18008c758)
  • RtlAllocateAndInitializeSid (Address: 0x18008cdd8)
  • RtlAllocateHeap (Address: 0x18008d028)
  • RtlAnsiStringToUnicodeString (Address: 0x18008c8f8)
  • RtlAppendUnicodeStringToString (Address: 0x18008c8b8)
  • RtlAppendUnicodeToString (Address: 0x18008c890)
  • RtlCharToInteger (Address: 0x18008ca80)
  • RtlCompactHeap (Address: 0x18008c968)
  • RtlCompareUnicodeString (Address: 0x18008c8e0)
  • RtlComputeImportTableHash (Address: 0x18008c678)
  • RtlConvertSidToUnicodeString (Address: 0x18008ce38)
  • RtlCopyUnicodeString (Address: 0x18008cc60)
  • RtlCreateAcl (Address: 0x18008d000)
  • RtlCreateActivationContext (Address: 0x18008c688)
  • RtlCreateAtomTable (Address: 0x18008cad8)
  • RtlCreateBoundaryDescriptor (Address: 0x18008ccd8)
  • RtlCreateEnvironment (Address: 0x18008c7b8)
  • RtlCreateEnvironmentEx (Address: 0x18008c790)
  • RtlCreateQueryDebugBuffer (Address: 0x18008cd08)
  • RtlCreateSecurityDescriptor (Address: 0x18008cff0)
  • RtlCreateUnicodeString (Address: 0x18008c7a0)
  • RtlCreateUnicodeStringFromAsciiz (Address: 0x18008cb50)
  • RtlDeactivateActivationContext (Address: 0x18008c748)
  • RtlDeactivateActivationContextUnsafeFast (Address: 0x18008c9d0)
  • RtlDecodeSystemPointer (Address: 0x18008c668)
  • RtlDeleteAtomFromAtomTable (Address: 0x18008cae0)
  • RtlDeregisterSecureMemoryCacheCallback (Address: 0x18008c970)
  • RtlDeregisterWait (Address: 0x18008ccb8)
  • RtlDestroyAtomTable (Address: 0x18008caa8)
  • RtlDestroyEnvironment (Address: 0x18008c7a8)
  • RtlDestroyQueryDebugBuffer (Address: 0x18008ccf8)
  • RtlDetermineDosPathNameType_U (Address: 0x18008c6d8)
  • RtlDisableThreadProfiling (Address: 0x18008c650)
  • RtlDnsHostNameToComputerName (Address: 0x18008caf8)
  • RtlDoesFileExists_U (Address: 0x18008c698)
  • RtlDosPathNameToNtPathName_U (Address: 0x18008cc48)
  • RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x18008c720)
  • RtlDosPathNameToRelativeNtPathName_U (Address: 0x18008cca0)
  • RtlEnableThreadProfiling (Address: 0x18008c648)
  • RtlEncodeSystemPointer (Address: 0x18008ceb8)
  • RtlEnterCriticalSection (Address: 0x18008cb20)
  • RtlEqualSid (Address: 0x18008c830)
  • RtlEqualString (Address: 0x18008cc28)
  • RtlEqualUnicodeString (Address: 0x18008c7f8)
  • RtlExitUserProcess (Address: 0x18008c8b0)
  • RtlExitUserThread (Address: 0x18008c808)
  • RtlFindActivationContextSectionGuid (Address: 0x18008c680)
  • RtlFindActivationContextSectionString (Address: 0x18008cd20)
  • RtlFlsGetValue (Address: 0x18008ca98)
  • RtlFormatCurrentUserKeyPath (Address: 0x18008c848)
  • RtlFreeAnsiString (Address: 0x18008c7f0)
  • RtlFreeHeap (Address: 0x18008d008)
  • RtlFreeOemString (Address: 0x18008c7d0)
  • RtlFreeSid (Address: 0x18008cdf0)
  • RtlFreeUnicodeString (Address: 0x18008c9e0)
  • RtlGetActiveActivationContext (Address: 0x18008c718)
  • RtlGetActiveConsoleId (Address: 0x18008c9c0)
  • RtlGetAppContainerParent (Address: 0x18008ce48)
  • RtlGetAppContainerSidType (Address: 0x18008ce30)
  • RtlGetCurrentDirectory_U (Address: 0x18008c7e0)
  • RtlGetCurrentServiceSessionId (Address: 0x18008cfa8)
  • RtlGetCurrentThreadPrimaryGroup (Address: 0x18008c908)
  • RtlGetCurrentTransaction (Address: 0x18008ca10)
  • RtlGetDeviceFamilyInfoEnum (Address: 0x18008cee8)
  • RtlGetFullPathName_U (Address: 0x18008c740)
  • RtlGetFullPathName_UEx (Address: 0x18008cf08)
  • RtlGetLengthWithoutLastFullDosOrNtPathElement (Address: 0x18008c738)
  • RtlGetLongestNtPathLength (Address: 0x18008cc80)
  • RtlGetNativeSystemInformation (Address: 0x18008cf68)
  • RtlGetNtSystemRoot (Address: 0x18008cec0)
  • RtlGetPersistedStateLocation (Address: 0x18008ca78)
  • RtlGetSuiteMask (Address: 0x18008cfb0)
  • RtlGetThreadErrorMode (Address: 0x18008cce8)
  • RtlGetThreadPreferredUILanguages (Address: 0x18008ce90)
  • RtlGetUILanguageInfo (Address: 0x18008c528)
  • RtlGetUserInfoHeap (Address: 0x18008c948)
  • RtlGetVersion (Address: 0x18008cf98)
  • RtlGUIDFromString (Address: 0x18008c600)
  • RtlHashUnicodeString (Address: 0x18008cef0)
  • RtlImageDirectoryEntryToData (Address: 0x18008ccc8)
  • RtlImageNtHeader (Address: 0x18008cfb8)
  • RtlImageNtHeaderEx (Address: 0x18008c6d0)
  • RtlInitAnsiString (Address: 0x18008ca88)
  • RtlInitAnsiStringEx (Address: 0x18008c8f0)
  • RtlInitializeCriticalSection (Address: 0x18008ce88)
  • RtlInitializeSid (Address: 0x18008c8c8)
  • RtlInitString (Address: 0x18008cd80)
  • RtlInitUnicodeString (Address: 0x18008cfc8)
  • RtlInitUnicodeStringEx (Address: 0x18008c850)
  • RtlIntegerToUnicodeString (Address: 0x18008c548)
  • RtlIsNameLegalDOS8Dot3 (Address: 0x18008c900)
  • RtlIsTextUnicode (Address: 0x18008cc70)
  • RtlLCIDToCultureName (Address: 0x18008c5a0)
  • RtlLeaveCriticalSection (Address: 0x18008cb38)
  • RtlLengthSecurityDescriptor (Address: 0x18008cbb0)
  • RtlLockHeap (Address: 0x18008c938)
  • RtlLookupAtomInAtomTable (Address: 0x18008cae8)
  • RtlMultiAppendUnicodeStringBuffer (Address: 0x18008c750)
  • RtlMultiByteToUnicodeN (Address: 0x18008cc90)
  • RtlMultiByteToUnicodeSize (Address: 0x18008cc98)
  • RtlNtPathNameToDosPathName (Address: 0x18008cf58)
  • RtlNtStatusToDosError (Address: 0x18008c9c8)
  • RtlNtStatusToDosErrorNoTeb (Address: 0x18008c658)
  • RtlOemStringToUnicodeString (Address: 0x18008cdc8)
  • RtlpApplyLengthFunction (Address: 0x18008c708)
  • RtlpConvertCultureNamesToLCIDs (Address: 0x18008c5b0)
  • RtlpConvertLCIDsToCultureNames (Address: 0x18008c538)
  • RtlpEnsureBufferSize (Address: 0x18008c700)
  • RtlPrefixString (Address: 0x18008cb00)
  • RtlPrefixUnicodeString (Address: 0x18008cc88)
  • RtlPublishWnfStateData (Address: 0x18008c5d8)
  • RtlQueryActivationContextApplicationSettings (Address: 0x18008c710)
  • RtlQueryAtomInAtomTable (Address: 0x18008caf0)
  • RtlQueryElevationFlags (Address: 0x18008cbf0)
  • RtlQueryEnvironmentVariable (Address: 0x18008ce50)
  • RtlQueryEnvironmentVariable_U (Address: 0x18008cde0)
  • RtlQueryInformationActivationContext (Address: 0x18008c6b8)
  • RtlQueryPackageClaims (Address: 0x18008c6e0)
  • RtlQueryPackageIdentity (Address: 0x18008c8a0)
  • RtlQueryProcessDebugInformation (Address: 0x18008cd00)
  • RtlQueryProtectedPolicy (Address: 0x18008c810)
  • RtlQueryRegistryValuesEx (Address: 0x18008c8d8)
  • RtlQueryThreadProfiling (Address: 0x18008c640)
  • RtlQueryWnfStateData (Address: 0x18008cdb0)
  • RtlRaiseStatus (Address: 0x18008cc00)
  • RtlReadThreadProfilingData (Address: 0x18008c638)
  • RtlReAllocateHeap (Address: 0x18008cef8)
  • RtlRegisterSecureMemoryCacheCallback (Address: 0x18008c978)
  • RtlRegisterWait (Address: 0x18008ccc0)
  • RtlReleaseActivationContext (Address: 0x18008c6a8)
  • RtlReleasePebLock (Address: 0x18008ceb0)
  • RtlReleasePrivilege (Address: 0x18008cb70)
  • RtlReleaseRelativeName (Address: 0x18008cca8)
  • RtlReleaseSRWLockExclusive (Address: 0x18008c878)
  • RtlRunOnceExecuteOnce (Address: 0x18008ce80)
  • RtlSetCurrentTransaction (Address: 0x18008ca20)
  • RtlSetDaclSecurityDescriptor (Address: 0x18008d018)
  • RtlSetEnvironmentStrings (Address: 0x18008cdc0)
  • RtlSetEnvironmentVariable (Address: 0x18008ce40)
  • RtlSetGroupSecurityDescriptor (Address: 0x18008cff8)
  • RtlSetIoCompletionCallback (Address: 0x18008ccb0)
  • RtlSetLastWin32Error (Address: 0x18008ca28)
  • RtlSetLastWin32ErrorAndNtStatusFromNtStatus (Address: 0x18008ca70)
  • RtlSetOwnerSecurityDescriptor (Address: 0x18008d030)
  • RtlSetProtectedPolicy (Address: 0x18008ca38)
  • RtlSetSearchPathMode (Address: 0x18008c928)
  • RtlSetThreadPoolStartFunc (Address: 0x18008cfd0)
  • RtlSetThreadPreferredUILanguages (Address: 0x18008c6c0)
  • RtlSizeHeap (Address: 0x18008c5a8)
  • RtlSubAuthorityCountSid (Address: 0x18008c6f0)
  • RtlSubAuthoritySid (Address: 0x18008c898)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x18008cda8)
  • RtlSwitchedVVI (Address: 0x18008cd38)
  • RtlTimeFieldsToTime (Address: 0x18008c558)
  • RtlTimeToTimeFields (Address: 0x18008c550)
  • RtlTryAcquirePebLock (Address: 0x18008cea8)
  • RtlUnhandledExceptionFilter (Address: 0x18008c560)
  • RtlUnicodeStringToAnsiString (Address: 0x18008c800)
  • RtlUnicodeStringToInteger (Address: 0x18008c520)
  • RtlUnicodeStringToOemString (Address: 0x18008c780)
  • RtlUnicodeToMultiByteN (Address: 0x18008cc30)
  • RtlUnicodeToMultiByteSize (Address: 0x18008caa0)
  • RtlUnlockHeap (Address: 0x18008c940)
  • RtlUnsubscribeWnfStateChangeNotification (Address: 0x18008cda0)
  • RtlUpcaseUnicodeChar (Address: 0x18008ca90)
  • RtlUpcaseUnicodeString (Address: 0x18008cf60)
  • RtlVerifyVersionInfo (Address: 0x18008cf90)
  • RtlWerpReportException (Address: 0x18008ced8)
  • RtlWow64GetThreadSelectorEntry (Address: 0x18008c9f8)
  • RtlWow64LogMessageInEventLogger (Address: 0x18008c8a8)
  • RtlxAnsiStringToUnicodeSize (Address: 0x18008c8e8)
  • RtlxUnicodeStringToAnsiSize (Address: 0x18008cb18)
  • RtlZombifyActivationContext (Address: 0x18008c6e8)
  • sin (Address: 0x18008c608)
  • strcat_s (Address: 0x18008ce68)
  • strchr (Address: 0x18008cdb8)
  • strcpy_s (Address: 0x18008cd18)
  • strlen (Address: 0x18008c920)
  • strncmp (Address: 0x18008c958)
  • strncpy_s (Address: 0x18008cc38)
  • strnlen (Address: 0x18008ce70)
  • strrchr (Address: 0x18008cdf8)
  • swprintf_s (Address: 0x18008c6c8)
  • tolower (Address: 0x18008c770)
  • toupper (Address: 0x18008c778)
  • towlower (Address: 0x18008c598)
  • TpAllocCleanupGroup (Address: 0x18008ca40)
  • TpAllocIoCompletion (Address: 0x18008c618)
  • TpAllocPool (Address: 0x18008ca60)
  • TpAllocTimer (Address: 0x18008c610)
  • TpAllocWait (Address: 0x18008c580)
  • TpAllocWork (Address: 0x18008c620)
  • TpCallbackMayRunLong (Address: 0x18008c760)
  • TpCaptureCaller (Address: 0x18008ce10)
  • TpQueryPoolStackInformation (Address: 0x18008ca50)
  • TpSetPoolMinThreads (Address: 0x18008ca58)
  • TpSetPoolStackInformation (Address: 0x18008c578)
  • TpSimpleTryPost (Address: 0x18008ca48)
  • VerSetConditionMask (Address: 0x18008cf88)
  • wcscat_s (Address: 0x18008cdd0)
  • wcschr (Address: 0x18008cb28)
  • wcscmp (Address: 0x18008d088)
  • wcscpy_s (Address: 0x18008c9b0)
  • wcscspn (Address: 0x18008cb60)
  • wcslen (Address: 0x18008c9a0)
  • wcsncmp (Address: 0x18008c570)
  • wcsncpy (Address: 0x18008c628)
  • wcsncpy_s (Address: 0x18008cb58)
  • wcsnlen (Address: 0x18008ce60)
  • wcsrchr (Address: 0x18008c798)
  • wcsstr (Address: 0x18008cb30)
  • ZwClose (Address: 0x18008cf10)
  • ZwCreateFile (Address: 0x18008cf38)
  • ZwCreateSection (Address: 0x18008cf48)
  • ZwEnumerateKey (Address: 0x18008cf28)
  • ZwEnumerateValueKey (Address: 0x18008cfa0)
  • ZwMapViewOfSection (Address: 0x18008cf80)
  • ZwOpenFile (Address: 0x18008cf18)
  • ZwOpenKey (Address: 0x18008cf20)
  • ZwQueryDirectoryFile (Address: 0x18008cf50)
  • ZwQueryInformationFile (Address: 0x18008cf40)
  • ZwQuerySystemInformation (Address: 0x18008cf70)
  • ZwQueryValueKey (Address: 0x18008cf30)
  • ZwUnmapViewOfSection (Address: 0x18008cf78)