ntdll.dll

Description: Wine ntdll

Authors: Copyright (c) 1993-2025 the Wine project authors (see the file AUTHORS for a complete list)

Version: 6.1.7601.24059

Architecture: 32-bit

Operating System: Unknown (0x0)

SHA256: 7d97ea40b17090a5bf00e1d8b1d8d900

File Size: 651.6 KB

Uploaded At: Jan. 26, 2026, 10:59 p.m.

Views: 21

Exported Functions

  • A_SHAFinal (Ordinal: 1, Address: 0xd990)
  • A_SHAInit (Ordinal: 2, Address: 0xdaf0)
  • A_SHAUpdate (Ordinal: 3, Address: 0xdb20)
  • ApiSetQueryApiSetPresence (Ordinal: 4, Address: 0xf350)
  • ApiSetQueryApiSetPresenceEx (Ordinal: 5, Address: 0xf3d0)
  • CsrAllocateCaptureBuffer (Ordinal: 6, Address: 0x1000)
  • CsrAllocateCapturePointer (Ordinal: 7, Address: 0x1020)
  • CsrAllocateMessagePointer (Ordinal: 8, Address: 0x1040)
  • CsrCaptureMessageBuffer (Ordinal: 9, Address: 0x1060)
  • CsrCaptureMessageString (Ordinal: 10, Address: 0x1080)
  • CsrCaptureTimeout (Ordinal: 11, Address: 0x10a0)
  • CsrClientCallServer (Ordinal: 12, Address: 0x10c0)
  • CsrClientConnectToServer (Ordinal: 13, Address: 0x10e0)
  • CsrClientMaxMessage (Ordinal: 14, Address: 0x1100)
  • CsrClientSendMessage (Ordinal: 15, Address: 0x1120)
  • CsrClientThreadConnect (Ordinal: 16, Address: 0x1140)
  • CsrFreeCaptureBuffer (Ordinal: 17, Address: 0x1160)
  • CsrIdentifyAlertableThread (Ordinal: 18, Address: 0x1180)
  • CsrNewThread (Ordinal: 19, Address: 0x11a0)
  • CsrProbeForRead (Ordinal: 20, Address: 0x11c0)
  • CsrProbeForWrite (Ordinal: 21, Address: 0x11e0)
  • CsrSetPriorityClass (Ordinal: 22, Address: 0x1200)
  • CsrpProcessCallbackRequest (Ordinal: 23, Address: 0x1220)
  • DbgBreakPoint (Ordinal: 24, Address: 0xcf04)
  • DbgPrint (Ordinal: 25, Address: 0xf4b0)
  • DbgPrintEx (Ordinal: 26, Address: 0xf4f0)
  • DbgPrompt (Ordinal: 27, Address: 0x1240)
  • DbgUiConnectToDbg (Ordinal: 28, Address: 0xf530)
  • DbgUiContinue (Ordinal: 29, Address: 0xf5c0)
  • DbgUiConvertStateChangeStructure (Ordinal: 30, Address: 0xf5f0)
  • DbgUiDebugActiveProcess (Ordinal: 31, Address: 0xf860)
  • DbgUiGetThreadDebugObject (Ordinal: 32, Address: 0xf8e0)
  • DbgUiIssueRemoteBreakin (Ordinal: 33, Address: 0xf8f0)
  • DbgUiRemoteBreakin (Ordinal: 34, Address: 0xf9b0)
  • DbgUiSetThreadDebugObject (Ordinal: 35, Address: 0xfa10)
  • DbgUiStopDebugging (Ordinal: 36, Address: 0xfa30)
  • DbgUiWaitStateChange (Ordinal: 37, Address: 0xfa60)
  • DbgUserBreakPoint (Ordinal: 38, Address: 0xcf14)
  • EtwEventActivityIdControl (Ordinal: 39, Address: 0xfbb0)
  • EtwEventEnabled (Ordinal: 40, Address: 0xfc10)
  • EtwEventProviderEnabled (Ordinal: 41, Address: 0xfcb0)
  • EtwEventRegister (Ordinal: 42, Address: 0xfda0)
  • EtwEventSetInformation (Ordinal: 43, Address: 0xfec0)
  • EtwEventUnregister (Ordinal: 44, Address: 0xff70)
  • EtwEventWrite (Ordinal: 45, Address: 0x10000)
  • EtwEventWriteString (Ordinal: 46, Address: 0x100b0)
  • EtwEventWriteTransfer (Ordinal: 47, Address: 0x10240)
  • EtwGetTraceEnableFlags (Ordinal: 48, Address: 0x10450)
  • EtwGetTraceEnableLevel (Ordinal: 49, Address: 0x104e0)
  • EtwGetTraceLoggerHandle (Ordinal: 50, Address: 0x10570)
  • EtwLogTraceEvent (Ordinal: 51, Address: 0x105d0)
  • EtwRegisterTraceGuidsA (Ordinal: 52, Address: 0x10670)
  • EtwRegisterTraceGuidsW (Ordinal: 53, Address: 0x107b0)
  • EtwTraceMessage (Ordinal: 54, Address: 0x10ae0)
  • EtwTraceMessageVa (Ordinal: 55, Address: 0x10c40)
  • EtwUnregisterTraceGuids (Ordinal: 56, Address: 0x10da0)
  • KiRaiseUserExceptionDispatcher (Ordinal: 57, Address: 0x10f60)
  • KiUserApcDispatcher (Ordinal: 58, Address: 0xcdb8)
  • KiUserCallbackDispatcher (Ordinal: 59, Address: 0x10fa0)
  • KiUserExceptionDispatcher (Ordinal: 60, Address: 0xcda8)
  • LdrAccessResource (Ordinal: 61, Address: 0xbde0)
  • LdrAddDllDirectory (Ordinal: 62, Address: 0x10ff0)
  • LdrAddRefDll (Ordinal: 63, Address: 0x111f0)
  • LdrDisableThreadCalloutsForDll (Ordinal: 64, Address: 0x11300)
  • LdrEnumResources (Ordinal: 65, Address: 0x1260)
  • LdrEnumerateLoadedModules (Ordinal: 66, Address: 0x11360)
  • LdrFindEntryForAddress (Ordinal: 67, Address: 0x11440)
  • LdrFindResourceDirectory_U (Ordinal: 68, Address: 0x114a0)
  • LdrFindResource_U (Ordinal: 69, Address: 0x115c0)
  • LdrFlushAlternateResourceModules (Ordinal: 70, Address: 0x1280)
  • LdrGetDllDirectory (Ordinal: 71, Address: 0x116d0)
  • LdrGetDllFullName (Ordinal: 72, Address: 0x11750)
  • LdrGetDllHandle (Ordinal: 73, Address: 0x11820)
  • LdrGetDllHandleEx (Ordinal: 74, Address: 0x11860)
  • LdrGetDllPath (Ordinal: 75, Address: 0x11b90)
  • LdrGetProcedureAddress (Ordinal: 76, Address: 0x12100)
  • LdrInitShimEngineDynamic (Ordinal: 77, Address: 0x12a0)
  • LdrInitializeThunk (Ordinal: 78, Address: 0x12270)
  • LdrLoadAlternateResourceModule (Ordinal: 79, Address: 0x12c0)
  • LdrLoadDll (Ordinal: 80, Address: 0x122f0)
  • LdrLockLoaderLock (Ordinal: 81, Address: 0x123f0)
  • LdrProcessRelocationBlock (Ordinal: 82, Address: 0x12590)
  • LdrQueryImageFileExecutionOptions (Ordinal: 83, Address: 0x12660)
  • LdrQueryProcessModuleInformation (Ordinal: 84, Address: 0x12920)
  • LdrRegisterDllNotification (Ordinal: 85, Address: 0x12a80)
  • LdrRemoveDllDirectory (Ordinal: 86, Address: 0x12bd0)
  • LdrResolveDelayLoadedAPI (Ordinal: 87, Address: 0x12c80)
  • LdrSetAppCompatDllRedirectionCallback (Ordinal: 88, Address: 0x12e0)
  • LdrSetDefaultDllDirectories (Ordinal: 89, Address: 0x12ef0)
  • LdrSetDllDirectory (Ordinal: 90, Address: 0x12f20)
  • LdrSetDllManifestProber (Ordinal: 91, Address: 0x1300)
  • LdrShutdownProcess (Ordinal: 92, Address: 0x12fb0)
  • LdrShutdownThread (Ordinal: 93, Address: 0x13040)
  • LdrSystemDllInitBlock (Ordinal: 94, Address: 0x6d320)
  • LdrUnloadAlternateResourceModule (Ordinal: 95, Address: 0x1320)
  • LdrUnloadDll (Ordinal: 96, Address: 0x13410)
  • LdrUnlockLoaderLock (Ordinal: 97, Address: 0x13430)
  • LdrUnregisterDllNotification (Ordinal: 98, Address: 0x13470)
  • LdrVerifyImageMatchesChecksum (Ordinal: 99, Address: 0x1340)
  • MD4Final (Ordinal: 100, Address: 0x13520)
  • MD4Init (Ordinal: 101, Address: 0x13620)
  • MD4Update (Ordinal: 102, Address: 0x13b70)
  • MD5Final (Ordinal: 103, Address: 0x13d60)
  • MD5Init (Ordinal: 104, Address: 0x13e80)
  • MD5Update (Ordinal: 105, Address: 0x145e0)
  • NlsAnsiCodePage (Ordinal: 106, Address: 0x906e4)
  • NlsMbCodePageTag (Ordinal: 107, Address: 0x906e1)
  • NlsMbOemCodePageTag (Ordinal: 108, Address: 0x906e0)
  • NtAcceptConnectPort (Ordinal: 109, Address: 0xbe20)
  • NtAccessCheck (Ordinal: 110, Address: 0xbe30)
  • NtAccessCheckAndAuditAlarm (Ordinal: 111, Address: 0xbe40)
  • NtAddAtom (Ordinal: 112, Address: 0xbe50)
  • NtAdjustGroupsToken (Ordinal: 113, Address: 0xbe60)
  • NtAdjustPrivilegesToken (Ordinal: 114, Address: 0xbe70)
  • NtAlertResumeThread (Ordinal: 115, Address: 0xbe80)
  • NtAlertThread (Ordinal: 116, Address: 0xbe90)
  • NtAlertThreadByThreadId (Ordinal: 117, Address: 0xbea0)
  • NtAllocateLocallyUniqueId (Ordinal: 118, Address: 0xbeb0)
  • NtAllocateReserveObject (Ordinal: 119, Address: 0xbec0)
  • NtAllocateUuids (Ordinal: 120, Address: 0xbed0)
  • NtAllocateVirtualMemory (Ordinal: 121, Address: 0xbee0)
  • NtAllocateVirtualMemoryEx (Ordinal: 122, Address: 0xbef0)
  • NtAreMappedFilesTheSame (Ordinal: 123, Address: 0xbf00)
  • NtAssignProcessToJobObject (Ordinal: 124, Address: 0xbf10)
  • NtCallbackReturn (Ordinal: 125, Address: 0xbf20)
  • NtCancelIoFile (Ordinal: 126, Address: 0xbf30)
  • NtCancelIoFileEx (Ordinal: 127, Address: 0xbf40)
  • NtCancelSynchronousIoFile (Ordinal: 128, Address: 0xbf50)
  • NtCancelTimer (Ordinal: 129, Address: 0xbf60)
  • NtClearEvent (Ordinal: 130, Address: 0xbf70)
  • NtClose (Ordinal: 131, Address: 0xbf80)
  • NtCommitTransaction (Ordinal: 132, Address: 0xbf90)
  • NtCompareObjects (Ordinal: 133, Address: 0xbfa0)
  • NtCompareTokens (Ordinal: 134, Address: 0xbfb0)
  • NtCompleteConnectPort (Ordinal: 135, Address: 0xbfc0)
  • NtConnectPort (Ordinal: 136, Address: 0xbfd0)
  • NtContinue (Ordinal: 137, Address: 0xbfe0)
  • NtContinueEx (Ordinal: 138, Address: 0xbff0)
  • NtCreateDebugObject (Ordinal: 139, Address: 0xc000)
  • NtCreateDirectoryObject (Ordinal: 140, Address: 0xc010)
  • NtCreateEvent (Ordinal: 141, Address: 0xc020)
  • NtCreateFile (Ordinal: 142, Address: 0xc030)
  • NtCreateIoCompletion (Ordinal: 143, Address: 0xc040)
  • NtCreateJobObject (Ordinal: 144, Address: 0xc050)
  • NtCreateKey (Ordinal: 145, Address: 0xc060)
  • NtCreateKeyTransacted (Ordinal: 146, Address: 0xc070)
  • NtCreateKeyedEvent (Ordinal: 147, Address: 0xc080)
  • NtCreateLowBoxToken (Ordinal: 148, Address: 0xc090)
  • NtCreateMailslotFile (Ordinal: 149, Address: 0xc0a0)
  • NtCreateMutant (Ordinal: 150, Address: 0xc0b0)
  • NtCreateNamedPipeFile (Ordinal: 151, Address: 0xc0c0)
  • NtCreatePagingFile (Ordinal: 152, Address: 0xc0d0)
  • NtCreatePort (Ordinal: 153, Address: 0xc0e0)
  • NtCreateSection (Ordinal: 154, Address: 0xc0f0)
  • NtCreateSemaphore (Ordinal: 155, Address: 0xc100)
  • NtCreateSymbolicLinkObject (Ordinal: 156, Address: 0xc110)
  • NtCreateThread (Ordinal: 157, Address: 0xc120)
  • NtCreateThreadEx (Ordinal: 158, Address: 0xc130)
  • NtCreateTimer (Ordinal: 159, Address: 0xc140)
  • NtCreateToken (Ordinal: 160, Address: 0xc150)
  • NtCreateTransaction (Ordinal: 161, Address: 0xc160)
  • NtCreateUserProcess (Ordinal: 162, Address: 0xc170)
  • NtCurrentTeb (Ordinal: 163, Address: 0xcf24)
  • NtDebugActiveProcess (Ordinal: 164, Address: 0xc180)
  • NtDebugContinue (Ordinal: 165, Address: 0xc190)
  • NtDelayExecution (Ordinal: 166, Address: 0xc1a0)
  • NtDeleteAtom (Ordinal: 167, Address: 0xc1b0)
  • NtDeleteFile (Ordinal: 168, Address: 0xc1c0)
  • NtDeleteKey (Ordinal: 169, Address: 0xc1d0)
  • NtDeleteValueKey (Ordinal: 170, Address: 0xc1e0)
  • NtDeviceIoControlFile (Ordinal: 171, Address: 0xc1f0)
  • NtDisplayString (Ordinal: 172, Address: 0xc200)
  • NtDuplicateObject (Ordinal: 173, Address: 0xc210)
  • NtDuplicateToken (Ordinal: 174, Address: 0xc220)
  • NtEnumerateKey (Ordinal: 175, Address: 0xc230)
  • NtEnumerateValueKey (Ordinal: 176, Address: 0xc240)
  • NtFilterToken (Ordinal: 177, Address: 0xc250)
  • NtFindAtom (Ordinal: 178, Address: 0xc260)
  • NtFlushBuffersFile (Ordinal: 179, Address: 0xc270)
  • NtFlushBuffersFileEx (Ordinal: 180, Address: 0xc280)
  • NtFlushInstructionCache (Ordinal: 181, Address: 0xc290)
  • NtFlushKey (Ordinal: 182, Address: 0xc2a0)
  • NtFlushProcessWriteBuffers (Ordinal: 183, Address: 0xc2b0)
  • NtFlushVirtualMemory (Ordinal: 184, Address: 0xc2c0)
  • NtFreeVirtualMemory (Ordinal: 185, Address: 0xc2d0)
  • NtFsControlFile (Ordinal: 186, Address: 0xc2e0)
  • NtGetContextThread (Ordinal: 187, Address: 0xc2f0)
  • NtGetCurrentProcessorNumber (Ordinal: 188, Address: 0xc300)
  • NtGetNextThread (Ordinal: 189, Address: 0xc310)
  • NtGetNlsSectionPtr (Ordinal: 190, Address: 0xc320)
  • NtGetTickCount (Ordinal: 191, Address: 0x153b0)
  • NtGetWriteWatch (Ordinal: 192, Address: 0xc330)
  • NtImpersonateAnonymousToken (Ordinal: 193, Address: 0xc340)
  • NtInitializeNlsFiles (Ordinal: 194, Address: 0xc350)
  • NtInitiatePowerAction (Ordinal: 195, Address: 0xc360)
  • NtIsProcessInJob (Ordinal: 196, Address: 0xc370)
  • NtListenPort (Ordinal: 197, Address: 0xc380)
  • NtLoadDriver (Ordinal: 198, Address: 0xc390)
  • NtLoadKey2 (Ordinal: 199, Address: 0xc3b0)
  • NtLoadKey (Ordinal: 200, Address: 0xc3a0)
  • NtLoadKeyEx (Ordinal: 201, Address: 0xc3c0)
  • NtLockFile (Ordinal: 202, Address: 0xc3d0)
  • NtLockVirtualMemory (Ordinal: 203, Address: 0xc3e0)
  • NtMakePermanentObject (Ordinal: 204, Address: 0xc3f0)
  • NtMakeTemporaryObject (Ordinal: 205, Address: 0xc400)
  • NtMapViewOfSection (Ordinal: 206, Address: 0xc410)
  • NtMapViewOfSectionEx (Ordinal: 207, Address: 0xc420)
  • NtNotifyChangeDirectoryFile (Ordinal: 208, Address: 0xc430)
  • NtNotifyChangeKey (Ordinal: 209, Address: 0xc440)
  • NtNotifyChangeMultipleKeys (Ordinal: 210, Address: 0xc450)
  • NtOpenDirectoryObject (Ordinal: 211, Address: 0xc460)
  • NtOpenEvent (Ordinal: 212, Address: 0xc470)
  • NtOpenFile (Ordinal: 213, Address: 0xc480)
  • NtOpenIoCompletion (Ordinal: 214, Address: 0xc490)
  • NtOpenJobObject (Ordinal: 215, Address: 0xc4a0)
  • NtOpenKey (Ordinal: 216, Address: 0xc4b0)
  • NtOpenKeyEx (Ordinal: 217, Address: 0xc4c0)
  • NtOpenKeyTransacted (Ordinal: 218, Address: 0xc4d0)
  • NtOpenKeyTransactedEx (Ordinal: 219, Address: 0xc4e0)
  • NtOpenKeyedEvent (Ordinal: 220, Address: 0xc4f0)
  • NtOpenMutant (Ordinal: 221, Address: 0xc500)
  • NtOpenProcess (Ordinal: 222, Address: 0xc510)
  • NtOpenProcessToken (Ordinal: 223, Address: 0xc520)
  • NtOpenProcessTokenEx (Ordinal: 224, Address: 0xc530)
  • NtOpenSection (Ordinal: 225, Address: 0xc540)
  • NtOpenSemaphore (Ordinal: 226, Address: 0xc550)
  • NtOpenSymbolicLinkObject (Ordinal: 227, Address: 0xc560)
  • NtOpenThread (Ordinal: 228, Address: 0xc570)
  • NtOpenThreadToken (Ordinal: 229, Address: 0xc580)
  • NtOpenThreadTokenEx (Ordinal: 230, Address: 0xc590)
  • NtOpenTimer (Ordinal: 231, Address: 0xc5a0)
  • NtPowerInformation (Ordinal: 232, Address: 0xc5b0)
  • NtPrivilegeCheck (Ordinal: 233, Address: 0xc5c0)
  • NtProtectVirtualMemory (Ordinal: 234, Address: 0xc5d0)
  • NtPulseEvent (Ordinal: 235, Address: 0xc5e0)
  • NtQueryAttributesFile (Ordinal: 236, Address: 0xc5f0)
  • NtQueryDefaultLocale (Ordinal: 237, Address: 0xc600)
  • NtQueryDefaultUILanguage (Ordinal: 238, Address: 0xc610)
  • NtQueryDirectoryFile (Ordinal: 239, Address: 0xc620)
  • NtQueryDirectoryObject (Ordinal: 240, Address: 0xc630)
  • NtQueryEaFile (Ordinal: 241, Address: 0xc640)
  • NtQueryEvent (Ordinal: 242, Address: 0xc650)
  • NtQueryFullAttributesFile (Ordinal: 243, Address: 0xc660)
  • NtQueryInformationAtom (Ordinal: 244, Address: 0xc670)
  • NtQueryInformationFile (Ordinal: 245, Address: 0xc680)
  • NtQueryInformationJobObject (Ordinal: 246, Address: 0xc690)
  • NtQueryInformationProcess (Ordinal: 247, Address: 0x153d0)
  • NtQueryInformationThread (Ordinal: 248, Address: 0xc6b0)
  • NtQueryInformationToken (Ordinal: 249, Address: 0xc6c0)
  • NtQueryInstallUILanguage (Ordinal: 250, Address: 0xc6d0)
  • NtQueryIoCompletion (Ordinal: 251, Address: 0xc6e0)
  • NtQueryKey (Ordinal: 252, Address: 0xc6f0)
  • NtQueryLicenseValue (Ordinal: 253, Address: 0xc700)
  • NtQueryMultipleValueKey (Ordinal: 254, Address: 0xc710)
  • NtQueryMutant (Ordinal: 255, Address: 0xc720)
  • NtQueryObject (Ordinal: 256, Address: 0xc730)
  • NtQueryPerformanceCounter (Ordinal: 257, Address: 0xc740)
  • NtQuerySection (Ordinal: 258, Address: 0xc750)
  • NtQuerySecurityObject (Ordinal: 259, Address: 0xc760)
  • NtQuerySemaphore (Ordinal: 260, Address: 0xc770)
  • NtQuerySymbolicLinkObject (Ordinal: 261, Address: 0xc780)
  • NtQuerySystemEnvironmentValue (Ordinal: 262, Address: 0xc790)
  • NtQuerySystemEnvironmentValueEx (Ordinal: 263, Address: 0xc7a0)
  • NtQuerySystemInformation (Ordinal: 264, Address: 0xc7b0)
  • NtQuerySystemInformationEx (Ordinal: 265, Address: 0xc7c0)
  • NtQuerySystemTime (Ordinal: 266, Address: 0xc7d0)
  • NtQueryTimer (Ordinal: 267, Address: 0xc7e0)
  • NtQueryTimerResolution (Ordinal: 268, Address: 0xc7f0)
  • NtQueryValueKey (Ordinal: 269, Address: 0xc800)
  • NtQueryVirtualMemory (Ordinal: 270, Address: 0xc810)
  • NtQueryVolumeInformationFile (Ordinal: 271, Address: 0xc820)
  • NtQueueApcThread (Ordinal: 272, Address: 0xc830)
  • NtQueueApcThreadEx (Ordinal: 273, Address: 0xc840)
  • NtRaiseException (Ordinal: 274, Address: 0xc850)
  • NtRaiseHardError (Ordinal: 275, Address: 0xc860)
  • NtReadFile (Ordinal: 276, Address: 0xc870)
  • NtReadFileScatter (Ordinal: 277, Address: 0xc880)
  • NtReadVirtualMemory (Ordinal: 278, Address: 0xc890)
  • NtRegisterThreadTerminatePort (Ordinal: 279, Address: 0xc8a0)
  • NtReleaseKeyedEvent (Ordinal: 280, Address: 0xc8b0)
  • NtReleaseMutant (Ordinal: 281, Address: 0xc8c0)
  • NtReleaseSemaphore (Ordinal: 282, Address: 0xc8d0)
  • NtRemoveIoCompletion (Ordinal: 283, Address: 0xc8e0)
  • NtRemoveIoCompletionEx (Ordinal: 284, Address: 0xc8f0)
  • NtRemoveProcessDebug (Ordinal: 285, Address: 0xc900)
  • NtRenameKey (Ordinal: 286, Address: 0xc910)
  • NtReplaceKey (Ordinal: 287, Address: 0xc920)
  • NtReplyWaitReceivePort (Ordinal: 288, Address: 0xc930)
  • NtRequestWaitReplyPort (Ordinal: 289, Address: 0xc940)
  • NtResetEvent (Ordinal: 290, Address: 0xc950)
  • NtResetWriteWatch (Ordinal: 291, Address: 0xc960)
  • NtRestoreKey (Ordinal: 292, Address: 0xc970)
  • NtResumeProcess (Ordinal: 293, Address: 0xc980)
  • NtResumeThread (Ordinal: 294, Address: 0xc990)
  • NtRollbackTransaction (Ordinal: 295, Address: 0xc9a0)
  • NtSaveKey (Ordinal: 296, Address: 0xc9b0)
  • NtSecureConnectPort (Ordinal: 297, Address: 0xc9c0)
  • NtSetContextThread (Ordinal: 298, Address: 0xc9d0)
  • NtSetDebugFilterState (Ordinal: 299, Address: 0xc9e0)
  • NtSetDefaultLocale (Ordinal: 300, Address: 0xc9f0)
  • NtSetDefaultUILanguage (Ordinal: 301, Address: 0xca00)
  • NtSetEaFile (Ordinal: 302, Address: 0xca10)
  • NtSetEvent (Ordinal: 303, Address: 0xca20)
  • NtSetInformationDebugObject (Ordinal: 304, Address: 0xca30)
  • NtSetInformationFile (Ordinal: 305, Address: 0xca40)
  • NtSetInformationJobObject (Ordinal: 306, Address: 0xca50)
  • NtSetInformationKey (Ordinal: 307, Address: 0xca60)
  • NtSetInformationObject (Ordinal: 308, Address: 0xca70)
  • NtSetInformationProcess (Ordinal: 309, Address: 0xca80)
  • NtSetInformationThread (Ordinal: 310, Address: 0xca90)
  • NtSetInformationToken (Ordinal: 311, Address: 0xcaa0)
  • NtSetInformationVirtualMemory (Ordinal: 312, Address: 0xcab0)
  • NtSetIntervalProfile (Ordinal: 313, Address: 0xcac0)
  • NtSetIoCompletion (Ordinal: 314, Address: 0xcad0)
  • NtSetIoCompletionEx (Ordinal: 315, Address: 0xcae0)
  • NtSetLdtEntries (Ordinal: 316, Address: 0xcaf0)
  • NtSetSecurityObject (Ordinal: 317, Address: 0xcb00)
  • NtSetSystemInformation (Ordinal: 318, Address: 0xcb10)
  • NtSetSystemTime (Ordinal: 319, Address: 0xcb20)
  • NtSetThreadExecutionState (Ordinal: 320, Address: 0xcb30)
  • NtSetTimer (Ordinal: 321, Address: 0xcb40)
  • NtSetTimerResolution (Ordinal: 322, Address: 0xcb50)
  • NtSetValueKey (Ordinal: 323, Address: 0xcb60)
  • NtSetVolumeInformationFile (Ordinal: 324, Address: 0xcb70)
  • NtShutdownSystem (Ordinal: 325, Address: 0xcb80)
  • NtSignalAndWaitForSingleObject (Ordinal: 326, Address: 0xcb90)
  • NtSuspendProcess (Ordinal: 327, Address: 0xcba0)
  • NtSuspendThread (Ordinal: 328, Address: 0xcbb0)
  • NtSystemDebugControl (Ordinal: 329, Address: 0xcbc0)
  • NtTerminateJobObject (Ordinal: 330, Address: 0xcbd0)
  • NtTerminateProcess (Ordinal: 331, Address: 0xcbe0)
  • NtTerminateThread (Ordinal: 332, Address: 0xcbf0)
  • NtTestAlert (Ordinal: 333, Address: 0xcc00)
  • NtTraceControl (Ordinal: 334, Address: 0xcc10)
  • NtUnloadDriver (Ordinal: 335, Address: 0xcc20)
  • NtUnloadKey (Ordinal: 336, Address: 0xcc30)
  • NtUnlockFile (Ordinal: 337, Address: 0xcc40)
  • NtUnlockVirtualMemory (Ordinal: 338, Address: 0xcc50)
  • NtUnmapViewOfSection (Ordinal: 339, Address: 0xcc60)
  • NtUnmapViewOfSectionEx (Ordinal: 340, Address: 0xcc70)
  • NtWaitForAlertByThreadId (Ordinal: 341, Address: 0xcc80)
  • NtWaitForDebugEvent (Ordinal: 342, Address: 0xcc90)
  • NtWaitForKeyedEvent (Ordinal: 343, Address: 0xcca0)
  • NtWaitForMultipleObjects (Ordinal: 344, Address: 0xccb0)
  • NtWaitForSingleObject (Ordinal: 345, Address: 0xccc0)
  • NtWow64AllocateVirtualMemory64 (Ordinal: 346, Address: 0xccd0)
  • NtWow64GetNativeSystemInformation (Ordinal: 347, Address: 0xcce0)
  • NtWow64IsProcessorFeaturePresent (Ordinal: 348, Address: 0xccf0)
  • NtWow64QueryInformationProcess64 (Ordinal: 349, Address: 0xcd00)
  • NtWow64ReadVirtualMemory64 (Ordinal: 350, Address: 0xcd10)
  • NtWow64WriteVirtualMemory64 (Ordinal: 351, Address: 0xcd20)
  • NtWriteFile (Ordinal: 352, Address: 0xcd30)
  • NtWriteFileGather (Ordinal: 353, Address: 0xcd40)
  • NtWriteVirtualMemory (Ordinal: 354, Address: 0xcd50)
  • NtYieldExecution (Ordinal: 355, Address: 0xcd60)
  • NtdllDefWindowProc_A (Ordinal: 356, Address: 0x15440)
  • NtdllDefWindowProc_W (Ordinal: 357, Address: 0x15450)
  • NtdllDialogWndProc_A (Ordinal: 358, Address: 0x15480)
  • NtdllDialogWndProc_W (Ordinal: 359, Address: 0x15490)
  • PfxFindPrefix (Ordinal: 360, Address: 0x1360)
  • PfxInitialize (Ordinal: 361, Address: 0x1380)
  • PfxInsertPrefix (Ordinal: 362, Address: 0x13a0)
  • PfxRemovePrefix (Ordinal: 363, Address: 0x13c0)
  • RtlAbortRXact (Ordinal: 364, Address: 0x13e0)
  • RtlAbsoluteToSelfRelativeSD (Ordinal: 365, Address: 0x15f80)
  • RtlAcquirePebLock (Ordinal: 366, Address: 0x16010)
  • RtlAcquireResourceExclusive (Ordinal: 367, Address: 0x16030)
  • RtlAcquireResourceShared (Ordinal: 368, Address: 0x16110)
  • RtlAcquireSRWLockExclusive (Ordinal: 369, Address: 0x161e0)
  • RtlAcquireSRWLockShared (Ordinal: 370, Address: 0x16270)
  • RtlActivateActivationContext (Ordinal: 371, Address: 0x162e0)
  • RtlActivateActivationContextEx (Ordinal: 372, Address: 0x16320)
  • RtlActivateActivationContextUnsafeFast (Ordinal: 373, Address: 0x1400)
  • RtlAddAccessAllowedAce (Ordinal: 374, Address: 0x16400)
  • RtlAddAccessAllowedAceEx (Ordinal: 375, Address: 0x16480)
  • RtlAddAccessAllowedObjectAce (Ordinal: 376, Address: 0x16500)
  • RtlAddAccessDeniedAce (Ordinal: 377, Address: 0x16580)
  • RtlAddAccessDeniedAceEx (Ordinal: 378, Address: 0x16600)
  • RtlAddAccessDeniedObjectAce (Ordinal: 379, Address: 0x16680)
  • RtlAddAce (Ordinal: 380, Address: 0x16700)
  • RtlAddActionToRXact (Ordinal: 381, Address: 0x1420)
  • RtlAddAtomToAtomTable (Ordinal: 382, Address: 0x167e0)
  • RtlAddAttributeActionToRXact (Ordinal: 383, Address: 0x1440)
  • RtlAddAuditAccessAce (Ordinal: 384, Address: 0x16b40)
  • RtlAddAuditAccessAceEx (Ordinal: 385, Address: 0x16bf0)
  • RtlAddAuditAccessObjectAce (Ordinal: 386, Address: 0x16cb0)
  • RtlAddMandatoryAce (Ordinal: 387, Address: 0x16d40)
  • RtlAddProcessTrustLabelAce (Ordinal: 388, Address: 0x16df0)
  • RtlAddRefActivationContext (Ordinal: 389, Address: 0x16ea0)
  • RtlAddVectoredContinueHandler (Ordinal: 390, Address: 0x16ec0)
  • RtlAddVectoredExceptionHandler (Ordinal: 391, Address: 0x16ef0)
  • RtlAddressInSectionTable (Ordinal: 392, Address: 0x16f10)
  • RtlAdjustPrivilege (Ordinal: 393, Address: 0x16f70)
  • RtlAllocateAndInitializeSid (Ordinal: 394, Address: 0x171a0)
  • RtlAllocateHandle (Ordinal: 395, Address: 0x17300)
  • RtlAllocateHeap (Ordinal: 396, Address: 0x174e0)
  • RtlAnsiCharToUnicodeChar (Ordinal: 397, Address: 0x17e90)
  • RtlAnsiStringToUnicodeSize (Ordinal: 398, Address: 0x18050)
  • RtlAnsiStringToUnicodeString (Ordinal: 399, Address: 0x18080)
  • RtlAppendAsciizToString (Ordinal: 400, Address: 0x18170)
  • RtlAppendStringToString (Ordinal: 401, Address: 0x181d0)
  • RtlAppendUnicodeStringToString (Ordinal: 402, Address: 0x18240)
  • RtlAppendUnicodeToString (Ordinal: 403, Address: 0x182d0)
  • RtlApplyRXact (Ordinal: 404, Address: 0x1460)
  • RtlApplyRXactNoFlush (Ordinal: 405, Address: 0x1480)
  • RtlAreAllAccessesGranted (Ordinal: 406, Address: 0x18360)
  • RtlAreAnyAccessesGranted (Ordinal: 407, Address: 0x18380)
  • RtlAreBitsClear (Ordinal: 408, Address: 0x18390)
  • RtlAreBitsSet (Ordinal: 409, Address: 0x184b0)
  • RtlAssert (Ordinal: 410, Address: 0x185d0)
  • RtlCaptureContext (Ordinal: 411, Address: 0xcdcc)
  • RtlCaptureStackBackTrace (Ordinal: 412, Address: 0x18650)
  • RtlCharToInteger (Ordinal: 413, Address: 0x18700)
  • RtlCheckRegistryKey (Ordinal: 414, Address: 0x18890)
  • RtlClearAllBits (Ordinal: 415, Address: 0x189a0)
  • RtlClearBits (Ordinal: 416, Address: 0x18a10)
  • RtlClosePropertySet (Ordinal: 417, Address: 0x14a0)
  • RtlCompactHeap (Ordinal: 418, Address: 0x18b50)
  • RtlCompareMemory (Ordinal: 419, Address: 0x18bb0)
  • RtlCompareMemoryUlong (Ordinal: 420, Address: 0x18bf0)
  • RtlCompareString (Ordinal: 421, Address: 0x18c40)
  • RtlCompareUnicodeString (Ordinal: 422, Address: 0x18d10)
  • RtlCompareUnicodeStrings (Ordinal: 423, Address: 0x18d60)
  • RtlCompressBuffer (Ordinal: 424, Address: 0x18eb0)
  • RtlComputeCrc32 (Ordinal: 425, Address: 0x19060)
  • RtlConsoleMultiByteToUnicodeN (Ordinal: 426, Address: 0x14c0)
  • RtlConvertDeviceFamilyInfoToString (Ordinal: 427, Address: 0x19100)
  • RtlConvertExclusiveToShared (Ordinal: 428, Address: 0x14e0)
  • RtlConvertLongToLargeInteger (Ordinal: 429, Address: 0x191f0)
  • RtlConvertSharedToExclusive (Ordinal: 430, Address: 0x1500)
  • RtlConvertSidToUnicodeString (Ordinal: 431, Address: 0x19200)
  • RtlConvertToAutoInheritSecurityObject (Ordinal: 432, Address: 0x19370)
  • RtlConvertUiListToApiList (Ordinal: 433, Address: 0x1520)
  • RtlConvertUlongToLargeInteger (Ordinal: 434, Address: 0x193f0)
  • RtlCopyContext (Ordinal: 435, Address: 0x19400)
  • RtlCopyExtendedContext (Ordinal: 436, Address: 0x19590)
  • RtlCopyLuid (Ordinal: 437, Address: 0x19890)
  • RtlCopyLuidAndAttributesArray (Ordinal: 438, Address: 0x198b0)
  • RtlCopySecurityDescriptor (Ordinal: 439, Address: 0x19930)
  • RtlCopySid (Ordinal: 440, Address: 0x19d90)
  • RtlCopySidAndAttributesArray (Ordinal: 441, Address: 0x1540)
  • RtlCopyString (Ordinal: 442, Address: 0x19e30)
  • RtlCopyUnicodeString (Ordinal: 443, Address: 0x19e80)
  • RtlCreateAcl (Ordinal: 444, Address: 0x19ef0)
  • RtlCreateActivationContext (Ordinal: 445, Address: 0x19fa0)
  • RtlCreateAndSetSD (Ordinal: 446, Address: 0x1560)
  • RtlCreateAtomTable (Ordinal: 447, Address: 0x1b320)
  • RtlCreateEnvironment (Ordinal: 448, Address: 0x1b3f0)
  • RtlCreateHeap (Ordinal: 449, Address: 0x1b530)
  • RtlCreateProcessParameters (Ordinal: 450, Address: 0x1bdb0)
  • RtlCreateProcessParametersEx (Ordinal: 451, Address: 0x1be10)
  • RtlCreatePropertySet (Ordinal: 452, Address: 0x1580)
  • RtlCreateQueryDebugBuffer (Ordinal: 453, Address: 0x1bf90)
  • RtlCreateRegistryKey (Ordinal: 454, Address: 0x1c090)
  • RtlCreateSecurityDescriptor (Ordinal: 455, Address: 0x1c180)
  • RtlCreateTagHeap (Ordinal: 456, Address: 0x15a0)
  • RtlCreateTimer (Ordinal: 457, Address: 0x1c1d0)
  • RtlCreateTimerQueue (Ordinal: 458, Address: 0x1c3e0)
  • RtlCreateUnicodeString (Ordinal: 459, Address: 0x1c550)
  • RtlCreateUnicodeStringFromAsciiz (Ordinal: 460, Address: 0x1c5d0)
  • RtlCreateUserProcess (Ordinal: 461, Address: 0x1c620)
  • RtlCreateUserSecurityObject (Ordinal: 462, Address: 0x15c0)
  • RtlCreateUserStack (Ordinal: 463, Address: 0x1c850)
  • RtlCreateUserThread (Ordinal: 464, Address: 0x1cae0)
  • RtlCustomCPToUnicodeN (Ordinal: 465, Address: 0x1ccb0)
  • RtlCutoverTimeToSystemTime (Ordinal: 466, Address: 0x15e0)
  • RtlDeNormalizeProcessParams (Ordinal: 467, Address: 0x1cda0)
  • RtlDeactivateActivationContext (Ordinal: 468, Address: 0x1ce30)
  • RtlDeactivateActivationContextUnsafeFast (Ordinal: 469, Address: 0x1600)
  • RtlDebugPrintTimes (Ordinal: 470, Address: 0x1620)
  • RtlDecodePointer (Ordinal: 471, Address: 0x1cf50)
  • RtlDecodeSystemPointer (Ordinal: 472, Address: 0x1cf50)
  • RtlDecompressBuffer (Ordinal: 473, Address: 0x1d010)
  • RtlDecompressFragment (Ordinal: 474, Address: 0x1d0c0)
  • RtlDefaultNpAcl (Ordinal: 475, Address: 0x1d4a0)
  • RtlDelete (Ordinal: 476, Address: 0x1640)
  • RtlDeleteAce (Ordinal: 477, Address: 0x1d500)
  • RtlDeleteAtomFromAtomTable (Ordinal: 478, Address: 0x1d5f0)
  • RtlDeleteCriticalSection (Ordinal: 479, Address: 0x1d7c0)
  • RtlDeleteElementGenericTable (Ordinal: 480, Address: 0x1660)
  • RtlDeleteElementGenericTableAvl (Ordinal: 481, Address: 0x1680)
  • RtlDeleteNoSplay (Ordinal: 482, Address: 0x16a0)
  • RtlDeleteOwnersRanges (Ordinal: 483, Address: 0x16c0)
  • RtlDeleteRange (Ordinal: 484, Address: 0x16e0)
  • RtlDeleteRegistryValue (Ordinal: 485, Address: 0x1d850)
  • RtlDeleteResource (Ordinal: 486, Address: 0x1d980)
  • RtlDeleteSecurityObject (Ordinal: 487, Address: 0x1da60)
  • RtlDeleteTimer (Ordinal: 488, Address: 0x1dae0)
  • RtlDeleteTimerQueueEx (Ordinal: 489, Address: 0x1dc80)
  • RtlDeregisterWait (Ordinal: 490, Address: 0x1de70)
  • RtlDeregisterWaitEx (Ordinal: 491, Address: 0x1de90)
  • RtlDestroyAtomTable (Ordinal: 492, Address: 0x1dfb0)
  • RtlDestroyEnvironment (Ordinal: 493, Address: 0x1e020)
  • RtlDestroyHandleTable (Ordinal: 494, Address: 0x1e060)
  • RtlDestroyHeap (Ordinal: 495, Address: 0x1e0e0)
  • RtlDestroyProcessParameters (Ordinal: 496, Address: 0x1e3a0)
  • RtlDestroyQueryDebugBuffer (Ordinal: 497, Address: 0x1e3d0)
  • RtlDetermineDosPathNameType_U (Ordinal: 498, Address: 0x1e4b0)
  • RtlDllShutdownInProgress (Ordinal: 499, Address: 0x1e560)
  • RtlDoesFileExists_U (Ordinal: 500, Address: 0x1e570)
  • RtlDosPathNameToNtPathName_U (Ordinal: 501, Address: 0x1e610)
  • RtlDosPathNameToNtPathName_U_WithStatus (Ordinal: 502, Address: 0x1e650)
  • RtlDosPathNameToRelativeNtPathName_U (Ordinal: 503, Address: 0x1ece0)
  • RtlDosPathNameToRelativeNtPathName_U_WithStatus (Ordinal: 504, Address: 0x1ed20)
  • RtlDosSearchPath_U (Ordinal: 505, Address: 0x1ee10)
  • RtlDowncaseUnicodeChar (Ordinal: 506, Address: 0x1f0a0)
  • RtlDowncaseUnicodeString (Ordinal: 507, Address: 0x1f100)
  • RtlDumpResource (Ordinal: 508, Address: 0x1f1e0)
  • RtlDuplicateUnicodeString (Ordinal: 509, Address: 0x1f280)
  • RtlEmptyAtomTable (Ordinal: 510, Address: 0x1f410)
  • RtlEncodePointer (Ordinal: 511, Address: 0x1f540)
  • RtlEncodeSystemPointer (Ordinal: 512, Address: 0x1f540)
  • RtlEnlargedIntegerMultiply (Ordinal: 513, Address: 0x1f600)
  • RtlEnlargedUnsignedDivide (Ordinal: 514, Address: 0x1f610)
  • RtlEnlargedUnsignedMultiply (Ordinal: 515, Address: 0x1f630)
  • RtlEnterCriticalSection (Ordinal: 516, Address: 0x1f640)
  • RtlEnumProcessHeaps (Ordinal: 517, Address: 0x1700)
  • RtlEnumerateGenericTable (Ordinal: 518, Address: 0x1720)
  • RtlEnumerateGenericTableWithoutSplaying (Ordinal: 519, Address: 0x1f6f0)
  • RtlEnumerateGenericTableWithoutSplayingAvl (Ordinal: 520, Address: 0x1f750)
  • RtlEnumerateProperties (Ordinal: 521, Address: 0x1740)
  • RtlEqualComputerName (Ordinal: 522, Address: 0x1f7b0)
  • RtlEqualDomainName (Ordinal: 523, Address: 0x1f8b0)
  • RtlEqualLuid (Ordinal: 524, Address: 0x1f9b0)
  • RtlEqualPrefixSid (Ordinal: 525, Address: 0x1f9e0)
  • RtlEqualSid (Ordinal: 526, Address: 0x1fa50)
  • RtlEqualString (Ordinal: 527, Address: 0x1fb00)
  • RtlEqualUnicodeString (Ordinal: 528, Address: 0x1fb40)
  • RtlEraseUnicodeString (Ordinal: 529, Address: 0x1fbb0)
  • RtlExitUserProcess (Ordinal: 530, Address: 0x1fbf0)
  • RtlExitUserThread (Ordinal: 531, Address: 0x1fc50)
  • RtlExpandEnvironmentStrings (Ordinal: 532, Address: 0x1fcc0)
  • RtlExpandEnvironmentStrings_U (Ordinal: 533, Address: 0x1ffb0)
  • RtlExtendHeap (Ordinal: 534, Address: 0x1760)
  • RtlExtendedIntegerMultiply (Ordinal: 535, Address: 0x20040)
  • RtlExtendedLargeIntegerDivide (Ordinal: 536, Address: 0x20070)
  • RtlExtendedMagicDivide (Ordinal: 537, Address: 0x200c0)
  • RtlFillMemory (Ordinal: 538, Address: 0x201e0)
  • RtlFillMemoryUlong (Ordinal: 539, Address: 0x20210)
  • RtlFinalReleaseOutOfProcessMemoryStream (Ordinal: 540, Address: 0x1780)
  • RtlFindActivationContextSectionGuid (Ordinal: 541, Address: 0x20260)
  • RtlFindActivationContextSectionString (Ordinal: 542, Address: 0x20510)
  • RtlFindCharInUnicodeString (Ordinal: 543, Address: 0x20760)
  • RtlFindClearBits (Ordinal: 544, Address: 0x20940)
  • RtlFindClearBitsAndSet (Ordinal: 545, Address: 0x20a20)
  • RtlFindClearRuns (Ordinal: 546, Address: 0x20ac0)
  • RtlFindExportedRoutineByName (Ordinal: 547, Address: 0x20b40)
  • RtlFindLastBackwardRunClear (Ordinal: 548, Address: 0x20bd0)
  • RtlFindLastBackwardRunSet (Ordinal: 549, Address: 0x20c30)
  • RtlFindLeastSignificantBit (Ordinal: 550, Address: 0x20c90)
  • RtlFindLongestRunClear (Ordinal: 551, Address: 0x20d00)
  • RtlFindLongestRunSet (Ordinal: 552, Address: 0x20df0)
  • RtlFindMessage (Ordinal: 553, Address: 0x20ee0)
  • RtlFindMostSignificantBit (Ordinal: 554, Address: 0x20fd0)
  • RtlFindNextForwardRunClear (Ordinal: 555, Address: 0x21020)
  • RtlFindNextForwardRunSet (Ordinal: 556, Address: 0x210c0)
  • RtlFindRange (Ordinal: 557, Address: 0x17a0)
  • RtlFindSetBits (Ordinal: 558, Address: 0x21160)
  • RtlFindSetBitsAndClear (Ordinal: 559, Address: 0x21240)
  • RtlFindSetRuns (Ordinal: 560, Address: 0x212e0)
  • RtlFirstEntrySList (Ordinal: 561, Address: 0x21360)
  • RtlFirstFreeAce (Ordinal: 562, Address: 0x21370)
  • RtlFlsAlloc (Ordinal: 563, Address: 0x213f0)
  • RtlFlsFree (Ordinal: 564, Address: 0x215b0)
  • RtlFlsGetValue (Ordinal: 565, Address: 0x21730)
  • RtlFlsSetValue (Ordinal: 566, Address: 0x217c0)
  • RtlFlushPropertySet (Ordinal: 567, Address: 0x17c0)
  • RtlFormatCurrentUserKeyPath (Ordinal: 568, Address: 0x218a0)
  • RtlFormatMessage (Ordinal: 569, Address: 0x219d0)
  • RtlFormatMessageEx (Ordinal: 570, Address: 0x21a30)
  • RtlFreeActivationContextStack (Ordinal: 571, Address: 0x22310)
  • RtlFreeAnsiString (Ordinal: 572, Address: 0x22380)
  • RtlFreeHandle (Ordinal: 573, Address: 0x223d0)
  • RtlFreeHeap (Ordinal: 574, Address: 0x22460)
  • RtlFreeOemString (Ordinal: 575, Address: 0x22840)
  • RtlFreeSid (Ordinal: 576, Address: 0x22890)
  • RtlFreeThreadActivationContextStack (Ordinal: 577, Address: 0x22900)
  • RtlFreeUnicodeString (Ordinal: 578, Address: 0x22920)
  • RtlFreeUserStack (Ordinal: 579, Address: 0x22970)
  • RtlGetDeviceFamilyInfoEnum (Ordinal: 580, Address: 0x23140)
  • RtlGUIDFromString (Ordinal: 581, Address: 0x229e0)
  • RtlGenerate8dot3Name (Ordinal: 582, Address: 0x17e0)
  • RtlGetAce (Ordinal: 583, Address: 0x22c30)
  • RtlGetActiveActivationContext (Ordinal: 584, Address: 0x22cc0)
  • RtlGetCallersAddress (Ordinal: 585, Address: 0x22d00)
  • RtlGetCompressionWorkSpaceSize (Ordinal: 586, Address: 0x22d60)
  • RtlGetControlSecurityDescriptor (Ordinal: 587, Address: 0x22e40)
  • RtlGetCurrentDirectory_U (Ordinal: 588, Address: 0x22ec0)
  • RtlGetCurrentPeb (Ordinal: 589, Address: 0x22fc0)
  • RtlGetCurrentProcessorNumberEx (Ordinal: 590, Address: 0x22fd0)
  • RtlGetCurrentTransaction (Ordinal: 591, Address: 0x23030)
  • RtlGetDaclSecurityDescriptor (Ordinal: 592, Address: 0x23070)
  • RtlGetElementGenericTable (Ordinal: 593, Address: 0x231d0)
  • RtlGetEnabledExtendedFeatures (Ordinal: 594, Address: 0x23220)
  • RtlGetExePath (Ordinal: 595, Address: 0x23240)
  • RtlGetExtendedContextLength (Ordinal: 596, Address: 0x232e0)
  • RtlGetExtendedContextLength2 (Ordinal: 597, Address: 0x23310)
  • RtlGetExtendedFeaturesMask (Ordinal: 598, Address: 0x23540)
  • RtlGetFrame (Ordinal: 599, Address: 0x23560)
  • RtlGetFullPathName_U (Ordinal: 600, Address: 0x23570)
  • RtlGetGroupSecurityDescriptor (Ordinal: 601, Address: 0x237f0)
  • RtlGetLastNtStatus (Ordinal: 602, Address: 0x23850)
  • RtlGetLastWin32Error (Ordinal: 603, Address: 0x23860)
  • RtlGetLocaleFileMappingAddress (Ordinal: 604, Address: 0x23870)
  • RtlGetLongestNtPathLength (Ordinal: 605, Address: 0x238f0)
  • RtlGetNativeSystemInformation (Ordinal: 606, Address: 0x23900)
  • RtlGetNtGlobalFlags (Ordinal: 607, Address: 0x23910)
  • RtlGetNtProductType (Ordinal: 608, Address: 0x23920)
  • RtlGetNtVersionNumbers (Ordinal: 609, Address: 0x23950)
  • RtlGetOwnerSecurityDescriptor (Ordinal: 610, Address: 0x239a0)
  • RtlGetProductInfo (Ordinal: 611, Address: 0x23b20)
  • RtlGetProcessHeaps (Ordinal: 612, Address: 0x23a00)
  • RtlGetProcessPreferredUILanguages (Ordinal: 613, Address: 0x23a90)
  • RtlGetSaclSecurityDescriptor (Ordinal: 614, Address: 0x23bd0)
  • RtlGetSearchPath (Ordinal: 615, Address: 0x23c90)
  • RtlGetSystemPreferredUILanguages (Ordinal: 616, Address: 0x23cc0)
  • RtlGetSystemTimePrecise (Ordinal: 617, Address: 0x23d30)
  • RtlGetThreadErrorMode (Ordinal: 618, Address: 0x23d80)
  • RtlGetThreadPreferredUILanguages (Ordinal: 619, Address: 0x23d90)
  • RtlGetUnloadEventTrace (Ordinal: 620, Address: 0x23e20)
  • RtlGetUnloadEventTraceEx (Ordinal: 621, Address: 0x23e30)
  • RtlGetUserInfoHeap (Ordinal: 622, Address: 0x23e60)
  • RtlGetUserPreferredUILanguages (Ordinal: 623, Address: 0x24040)
  • RtlGetVersion (Ordinal: 624, Address: 0x240b0)
  • RtlGuidToPropertySetName (Ordinal: 625, Address: 0x1800)
  • RtlHashUnicodeString (Ordinal: 626, Address: 0x24140)
  • RtlIdentifierAuthoritySid (Ordinal: 627, Address: 0x242a0)
  • RtlIdnToAscii (Ordinal: 628, Address: 0x242b0)
  • RtlIdnToNameprepUnicode (Ordinal: 629, Address: 0x24a70)
  • RtlIdnToUnicode (Ordinal: 630, Address: 0x24f40)
  • RtlImageDirectoryEntryToData (Ordinal: 631, Address: 0x256e0)
  • RtlImageNtHeader (Ordinal: 632, Address: 0x257c0)
  • RtlImageRvaToSection (Ordinal: 633, Address: 0x25840)
  • RtlImageRvaToVa (Ordinal: 634, Address: 0x25880)
  • RtlImpersonateSelf (Ordinal: 635, Address: 0x25910)
  • RtlInitAnsiString (Ordinal: 636, Address: 0x25a60)
  • RtlInitAnsiStringEx (Ordinal: 637, Address: 0x25aa0)
  • RtlInitCodePageTable (Ordinal: 638, Address: 0x25b00)
  • RtlInitNlsTables (Ordinal: 639, Address: 0x25c00)
  • RtlInitString (Ordinal: 640, Address: 0x25c50)
  • RtlInitUnicodeString (Ordinal: 641, Address: 0x25c90)
  • RtlInitUnicodeStringEx (Ordinal: 642, Address: 0x25cd0)
  • RtlInitializeBitMap (Ordinal: 643, Address: 0x25d30)
  • RtlInitializeConditionVariable (Ordinal: 644, Address: 0x25da0)
  • RtlInitializeContext (Ordinal: 645, Address: 0x1820)
  • RtlInitializeCriticalSection (Ordinal: 646, Address: 0x25db0)
  • RtlInitializeCriticalSectionAndSpinCount (Ordinal: 647, Address: 0x25e10)
  • RtlInitializeCriticalSectionEx (Ordinal: 648, Address: 0x25e70)
  • RtlInitializeExtendedContext (Ordinal: 649, Address: 0x25fa0)
  • RtlInitializeExtendedContext2 (Ordinal: 650, Address: 0x25fe0)
  • RtlInitializeGenericTable (Ordinal: 651, Address: 0x262b0)
  • RtlInitializeGenericTableAvl (Ordinal: 652, Address: 0x26370)
  • RtlInitializeHandleTable (Ordinal: 653, Address: 0x263e0)
  • RtlInitializeNtUserPfn (Ordinal: 654, Address: 0x26480)
  • RtlInitializeRXact (Ordinal: 655, Address: 0x1840)
  • RtlInitializeResource (Ordinal: 656, Address: 0x26520)
  • RtlInitializeSListHead (Ordinal: 657, Address: 0x265e0)
  • RtlInitializeSRWLock (Ordinal: 658, Address: 0x26600)
  • RtlInitializeSid (Ordinal: 659, Address: 0x26610)
  • RtlInsertElementGenericTable (Ordinal: 660, Address: 0x1860)
  • RtlInsertElementGenericTableAvl (Ordinal: 661, Address: 0x26670)
  • RtlInt64ToUnicodeString (Ordinal: 662, Address: 0x266d0)
  • RtlIntegerToChar (Ordinal: 663, Address: 0x267f0)
  • RtlIntegerToUnicodeString (Ordinal: 664, Address: 0x268d0)
  • RtlInterlockedCompareExchange64 (Ordinal: 665, Address: 0x26980)
  • RtlInterlockedFlushSList (Ordinal: 666, Address: 0x269a0)
  • RtlInterlockedPopEntrySList (Ordinal: 667, Address: 0x26a30)
  • RtlInterlockedPushEntrySList (Ordinal: 668, Address: 0x26b20)
  • RtlInterlockedPushListSList (Ordinal: 669, Address: 0x26ba0)
  • RtlInterlockedPushListSListEx (Ordinal: 670, Address: 0x26bd0)
  • RtlIpv4AddressToStringA (Ordinal: 671, Address: 0x26c50)
  • RtlIpv4AddressToStringExA (Ordinal: 672, Address: 0x26ca0)
  • RtlIpv4AddressToStringExW (Ordinal: 673, Address: 0x26dd0)
  • RtlIpv4AddressToStringW (Ordinal: 674, Address: 0x26f10)
  • RtlIpv4StringToAddressA (Ordinal: 675, Address: 0x26f60)
  • RtlIpv4StringToAddressExA (Ordinal: 676, Address: 0x26ff0)
  • RtlIpv4StringToAddressExW (Ordinal: 677, Address: 0x27070)
  • RtlIpv4StringToAddressW (Ordinal: 678, Address: 0x27110)
  • RtlIpv6AddressToStringA (Ordinal: 679, Address: 0x271a0)
  • RtlIpv6AddressToStringExA (Ordinal: 680, Address: 0x27210)
  • RtlIpv6AddressToStringExW (Ordinal: 681, Address: 0x27560)
  • RtlIpv6AddressToStringW (Ordinal: 682, Address: 0x275f0)
  • RtlIpv6StringToAddressA (Ordinal: 683, Address: 0x27690)
  • RtlIpv6StringToAddressExA (Ordinal: 684, Address: 0x27730)
  • RtlIpv6StringToAddressExW (Ordinal: 685, Address: 0x277b0)
  • RtlIpv6StringToAddressW (Ordinal: 686, Address: 0x27860)
  • RtlIsActivationContextActive (Ordinal: 687, Address: 0x278e0)
  • RtlIsCriticalSectionLocked (Ordinal: 688, Address: 0x27920)
  • RtlIsCriticalSectionLockedByThread (Ordinal: 689, Address: 0x27940)
  • RtlIsCurrentProcess (Ordinal: 690, Address: 0x27970)
  • RtlIsCurrentThread (Ordinal: 691, Address: 0x279a0)
  • RtlIsDosDeviceName_U (Ordinal: 692, Address: 0x279d0)
  • RtlIsGenericTableEmpty (Ordinal: 693, Address: 0x1880)
  • RtlIsNameLegalDOS8Dot3 (Ordinal: 694, Address: 0x27c80)
  • RtlIsNormalizedString (Ordinal: 695, Address: 0x27e10)
  • RtlIsProcessorFeaturePresent (Ordinal: 696, Address: 0x28140)
  • RtlIsTextUnicode (Ordinal: 697, Address: 0x28160)
  • RtlIsValidHandle (Ordinal: 698, Address: 0x28410)
  • RtlIsValidIndexHandle (Ordinal: 699, Address: 0x28480)
  • RtlIsValidLocaleName (Ordinal: 700, Address: 0x28550)
  • RtlLargeIntegerAdd (Ordinal: 701, Address: 0x28710)
  • RtlLargeIntegerArithmeticShift (Ordinal: 702, Address: 0x28730)
  • RtlLargeIntegerDivide (Ordinal: 703, Address: 0x28750)
  • RtlLargeIntegerNegate (Ordinal: 704, Address: 0x287a0)
  • RtlLargeIntegerShiftLeft (Ordinal: 705, Address: 0x287c0)
  • RtlLargeIntegerShiftRight (Ordinal: 706, Address: 0x287e0)
  • RtlLargeIntegerSubtract (Ordinal: 707, Address: 0x28800)
  • RtlLargeIntegerToChar (Ordinal: 708, Address: 0x28820)
  • RtlLcidToLocaleName (Ordinal: 709, Address: 0x28960)
  • RtlLeaveCriticalSection (Ordinal: 710, Address: 0x28b70)
  • RtlLengthRequiredSid (Ordinal: 711, Address: 0x28c20)
  • RtlLengthSecurityDescriptor (Ordinal: 712, Address: 0x28c40)
  • RtlLengthSid (Ordinal: 713, Address: 0x28e20)
  • RtlLocalTimeToSystemTime (Ordinal: 714, Address: 0x28e90)
  • RtlLocaleNameToLcid (Ordinal: 715, Address: 0x28f30)
  • RtlLocateExtendedFeature (Ordinal: 716, Address: 0x29180)
  • RtlLocateExtendedFeature2 (Ordinal: 717, Address: 0x291c0)
  • RtlLocateLegacyContext (Ordinal: 718, Address: 0x29420)
  • RtlLockHeap (Ordinal: 719, Address: 0x29440)
  • RtlLookupAtomInAtomTable (Ordinal: 720, Address: 0x29490)
  • RtlLookupElementGenericTable (Ordinal: 721, Address: 0x296f0)
  • RtlLookupElementGenericTableAvl (Ordinal: 722, Address: 0x29740)
  • RtlMakeSelfRelativeSD (Ordinal: 723, Address: 0x29790)
  • RtlMapGenericMask (Ordinal: 724, Address: 0x29a40)
  • RtlMoveMemory (Ordinal: 725, Address: 0x29a80)
  • RtlMultiByteToUnicodeN (Ordinal: 726, Address: 0x29ab0)
  • RtlMultiByteToUnicodeSize (Ordinal: 727, Address: 0x29bd0)
  • RtlNewInstanceSecurityObject (Ordinal: 728, Address: 0x18a0)
  • RtlNewSecurityGrantedAccess (Ordinal: 729, Address: 0x18c0)
  • RtlNewSecurityObject (Ordinal: 730, Address: 0x29dc0)
  • RtlNewSecurityObjectEx (Ordinal: 731, Address: 0x29e10)
  • RtlNewSecurityObjectWithMultipleInheritance (Ordinal: 732, Address: 0x29f90)
  • RtlNormalizeProcessParams (Ordinal: 733, Address: 0x2a020)
  • RtlNormalizeString (Ordinal: 734, Address: 0x2a0b0)
  • RtlNtStatusToDosError (Ordinal: 735, Address: 0x2a7d0)
  • RtlNtStatusToDosErrorNoTeb (Ordinal: 736, Address: 0x2a940)
  • RtlNumberGenericTableElements (Ordinal: 737, Address: 0x2a970)
  • RtlNumberGenericTableElementsAvl (Ordinal: 738, Address: 0x2a9d0)
  • RtlNumberOfClearBits (Ordinal: 739, Address: 0x2aa20)
  • RtlNumberOfSetBits (Ordinal: 740, Address: 0x2aa90)
  • RtlOemStringToUnicodeSize (Ordinal: 741, Address: 0x2ab60)
  • RtlOemStringToUnicodeString (Ordinal: 742, Address: 0x2ad80)
  • RtlOemToUnicodeN (Ordinal: 743, Address: 0x2ae70)
  • RtlOpenCurrentUser (Ordinal: 744, Address: 0x2af90)
  • RtlPcToFileHeader (Ordinal: 745, Address: 0x2b080)
  • RtlPinAtomInAtomTable (Ordinal: 746, Address: 0x2b100)
  • RtlPopFrame (Ordinal: 747, Address: 0x2b190)
  • RtlPrefixString (Ordinal: 748, Address: 0x2b1b0)
  • RtlPrefixUnicodeString (Ordinal: 749, Address: 0x2b290)
  • RtlProcessFlsData (Ordinal: 750, Address: 0x2b3c0)
  • RtlPropertySetNameToGuid (Ordinal: 751, Address: 0x18e0)
  • RtlProtectHeap (Ordinal: 752, Address: 0x1900)
  • RtlPushFrame (Ordinal: 753, Address: 0x2b610)
  • RtlQueryActivationContextApplicationSettings (Ordinal: 754, Address: 0x2b630)
  • RtlQueryAtomInAtomTable (Ordinal: 755, Address: 0x2b870)
  • RtlQueryDepthSList (Ordinal: 756, Address: 0x2bca0)
  • RtlQueryDynamicTimeZoneInformation (Ordinal: 757, Address: 0x2bcb0)
  • RtlQueryEnvironmentVariable_U (Ordinal: 758, Address: 0x2bdf0)
  • RtlQueryEnvironmentVariable (Ordinal: 759, Address: 0x2bce0)
  • RtlQueryHeapInformation (Ordinal: 760, Address: 0x2bf80)
  • RtlQueryInformationAcl (Ordinal: 761, Address: 0x2c080)
  • RtlQueryInformationActivationContext (Ordinal: 762, Address: 0x2c230)
  • RtlQueryInformationActiveActivationContext (Ordinal: 763, Address: 0x1920)
  • RtlQueryInterfaceMemoryStream (Ordinal: 764, Address: 0x1940)
  • RtlQueryPackageIdentity (Ordinal: 765, Address: 0x2ced0)
  • RtlQueryPerformanceCounter (Ordinal: 766, Address: 0x2cf60)
  • RtlQueryPerformanceFrequency (Ordinal: 767, Address: 0x2cfa0)
  • RtlQueryProcessBackTraceInformation (Ordinal: 768, Address: 0x1960)
  • RtlQueryProcessDebugInformation (Ordinal: 769, Address: 0x2cfc0)
  • RtlQueryProcessHeapInformation (Ordinal: 770, Address: 0x1980)
  • RtlQueryProcessLockInformation (Ordinal: 771, Address: 0x19a0)
  • RtlQueryProcessPlaceholderCompatibilityMode (Ordinal: 772, Address: 0x2d860)
  • RtlQueryProperties (Ordinal: 773, Address: 0x19c0)
  • RtlQueryPropertyNames (Ordinal: 774, Address: 0x19e0)
  • RtlQueryPropertySet (Ordinal: 775, Address: 0x1a00)
  • RtlQueryRegistryValues (Ordinal: 776, Address: 0x2d8a0)
  • RtlQueryRegistryValuesEx (Ordinal: 777, Address: 0x2d8a0)
  • RtlQuerySecurityObject (Ordinal: 778, Address: 0x1a20)
  • RtlQueryTagHeap (Ordinal: 779, Address: 0x1a40)
  • RtlQueryTimeZoneInformation (Ordinal: 780, Address: 0x2de60)
  • RtlQueryUnbiasedInterruptTime (Ordinal: 781, Address: 0x2de90)
  • RtlQueueApcWow64Thread (Ordinal: 782, Address: 0x1a60)
  • RtlQueueWorkItem (Ordinal: 783, Address: 0x2def0)
  • RtlRaiseException (Ordinal: 784, Address: 0xce7c)
  • RtlRaiseStatus (Ordinal: 785, Address: 0x2e020)
  • RtlRandom (Ordinal: 786, Address: 0x2e040)
  • RtlRandomEx (Ordinal: 787, Address: 0x2e0d0)
  • RtlRbInsertNodeEx (Ordinal: 788, Address: 0x2e190)
  • RtlRbRemoveNode (Ordinal: 789, Address: 0x2e400)
  • RtlReAllocateHeap (Ordinal: 790, Address: 0x2e710)
  • RtlReadMemoryStream (Ordinal: 791, Address: 0x1a80)
  • RtlReadOutOfProcessMemoryStream (Ordinal: 792, Address: 0x1aa0)
  • RtlRealPredecessor (Ordinal: 793, Address: 0x1ac0)
  • RtlRealSuccessor (Ordinal: 794, Address: 0x1ae0)
  • RtlRegisterSecureMemoryCacheCallback (Ordinal: 795, Address: 0x1b00)
  • RtlRegisterWait (Ordinal: 796, Address: 0x2f240)
  • RtlReleaseActivationContext (Ordinal: 797, Address: 0x2f3b0)
  • RtlReleaseMemoryStream (Ordinal: 798, Address: 0x1b20)
  • RtlReleasePath (Ordinal: 799, Address: 0x2f3d0)
  • RtlReleasePebLock (Ordinal: 800, Address: 0x2f400)
  • RtlReleaseRelativeName (Ordinal: 801, Address: 0x2f420)
  • RtlReleaseResource (Ordinal: 802, Address: 0x2f430)
  • RtlReleaseSRWLockExclusive (Ordinal: 803, Address: 0x2f4f0)
  • RtlReleaseSRWLockShared (Ordinal: 804, Address: 0x2f580)
  • RtlRemoteCall (Ordinal: 805, Address: 0x1b40)
  • RtlRemoveVectoredContinueHandler (Ordinal: 806, Address: 0x2f660)
  • RtlRemoveVectoredExceptionHandler (Ordinal: 807, Address: 0x2f680)
  • RtlResetNtUserPfn (Ordinal: 808, Address: 0x2f6a0)
  • RtlResetRtlTranslations (Ordinal: 809, Address: 0x2f6e0)
  • RtlRestoreContext (Ordinal: 810, Address: 0x2f720)
  • RtlRestoreLastWin32Error (Ordinal: 811, Address: 0x30e30)
  • RtlRetrieveNtUserPfn (Ordinal: 812, Address: 0x2f790)
  • RtlRevertMemoryStream (Ordinal: 813, Address: 0x1b60)
  • RtlRunDecodeUnicodeString (Ordinal: 814, Address: 0x1b80)
  • RtlRunEncodeUnicodeString (Ordinal: 815, Address: 0x1ba0)
  • RtlRunOnceBeginInitialize (Ordinal: 816, Address: 0x2f8b0)
  • RtlRunOnceComplete (Ordinal: 817, Address: 0x2f910)
  • RtlRunOnceExecuteOnce (Ordinal: 818, Address: 0x2f9e0)
  • RtlRunOnceInitialize (Ordinal: 819, Address: 0x2fa80)
  • RtlSecondsSince1970ToTime (Ordinal: 820, Address: 0x2fa90)
  • RtlSecondsSince1980ToTime (Ordinal: 821, Address: 0x2fac0)
  • RtlSelfRelativeToAbsoluteSD (Ordinal: 822, Address: 0x2faf0)
  • RtlSetAllBits (Ordinal: 823, Address: 0x2ff50)
  • RtlSetBits (Ordinal: 824, Address: 0x2ffc0)
  • RtlSetControlSecurityDescriptor (Ordinal: 825, Address: 0x30100)
  • RtlSetCriticalSectionSpinCount (Ordinal: 826, Address: 0x30190)
  • RtlSetCurrentDirectory_U (Ordinal: 827, Address: 0x301c0)
  • RtlSetCurrentEnvironment (Ordinal: 828, Address: 0x30460)
  • RtlSetCurrentTransaction (Ordinal: 829, Address: 0x30560)
  • RtlSetDaclSecurityDescriptor (Ordinal: 830, Address: 0x305b0)
  • RtlSetEnvironmentVariable (Ordinal: 831, Address: 0x30620)
  • RtlSetExtendedFeaturesMask (Ordinal: 832, Address: 0x30b00)
  • RtlSetGroupSecurityDescriptor (Ordinal: 833, Address: 0x30b40)
  • RtlSetHeapInformation (Ordinal: 834, Address: 0x30b90)
  • RtlSetInformationAcl (Ordinal: 835, Address: 0x1bc0)
  • RtlSetIoCompletionCallback (Ordinal: 836, Address: 0x30ce0)
  • RtlSetLastWin32Error (Ordinal: 837, Address: 0x30e30)
  • RtlSetLastWin32ErrorAndNtStatusFromNtStatus (Ordinal: 838, Address: 0x30e50)
  • RtlSetOwnerSecurityDescriptor (Ordinal: 839, Address: 0x30e90)
  • RtlSetProcessPreferredUILanguages (Ordinal: 840, Address: 0x30ee0)
  • RtlSetProperties (Ordinal: 841, Address: 0x1be0)
  • RtlSetPropertyClassId (Ordinal: 842, Address: 0x1c00)
  • RtlSetPropertyNames (Ordinal: 843, Address: 0x1c20)
  • RtlSetPropertySetClassId (Ordinal: 844, Address: 0x1c40)
  • RtlSetSaclSecurityDescriptor (Ordinal: 845, Address: 0x30f40)
  • RtlSetSearchPathMode (Ordinal: 846, Address: 0x30fb0)
  • RtlSetSecurityObject (Ordinal: 847, Address: 0x1c60)
  • RtlSetThreadErrorMode (Ordinal: 848, Address: 0x31020)
  • RtlSetThreadPreferredUILanguages (Ordinal: 849, Address: 0x31070)
  • RtlSetTimeZoneInformation (Ordinal: 850, Address: 0x310d0)
  • RtlSetUnhandledExceptionFilter (Ordinal: 851, Address: 0x310e0)
  • RtlSetUnicodeCallouts (Ordinal: 852, Address: 0x1c80)
  • RtlSetUserFlagsHeap (Ordinal: 853, Address: 0x310f0)
  • RtlSetUserValueHeap (Ordinal: 854, Address: 0x31200)
  • RtlSizeHeap (Ordinal: 855, Address: 0x31320)
  • RtlSleepConditionVariableCS (Ordinal: 856, Address: 0x314d0)
  • RtlSleepConditionVariableSRW (Ordinal: 857, Address: 0x31530)
  • RtlSplay (Ordinal: 858, Address: 0x1ca0)
  • RtlStartRXact (Ordinal: 859, Address: 0x1cc0)
  • RtlStringFromGUID (Ordinal: 860, Address: 0x315e0)
  • RtlSubAuthorityCountSid (Ordinal: 861, Address: 0x31700)
  • RtlSubAuthoritySid (Ordinal: 862, Address: 0x31710)
  • RtlSubtreePredecessor (Ordinal: 863, Address: 0x1ce0)
  • RtlSubtreeSuccessor (Ordinal: 864, Address: 0x1d00)
  • RtlSystemTimeToLocalTime (Ordinal: 865, Address: 0x31730)
  • RtlTimeFieldsToTime (Ordinal: 866, Address: 0x317d0)
  • RtlTimeToElapsedTimeFields (Ordinal: 867, Address: 0x319b0)
  • RtlTimeToSecondsSince1970 (Ordinal: 868, Address: 0x31aa0)
  • RtlTimeToSecondsSince1980 (Ordinal: 869, Address: 0x31b00)
  • RtlTimeToTimeFields (Ordinal: 870, Address: 0x31b60)
  • RtlTryAcquireSRWLockExclusive (Ordinal: 871, Address: 0x31d20)
  • RtlTryAcquireSRWLockShared (Ordinal: 872, Address: 0x31d70)
  • RtlTryEnterCriticalSection (Ordinal: 873, Address: 0x31db0)
  • RtlUTF8ToUnicodeN (Ordinal: 874, Address: 0x31e20)
  • RtlUlongByteSwap (Ordinal: 875, Address: 0xbe10)
  • RtlUlonglongByteSwap (Ordinal: 876, Address: 0xbe00)
  • RtlUnicodeStringToAnsiSize (Ordinal: 877, Address: 0x32070)
  • RtlUnicodeStringToAnsiString (Ordinal: 878, Address: 0x320a0)
  • RtlUnicodeStringToCountedOemString (Ordinal: 879, Address: 0x1d20)
  • RtlUnicodeStringToInteger (Ordinal: 880, Address: 0x32190)
  • RtlUnicodeStringToOemSize (Ordinal: 881, Address: 0x32370)
  • RtlUnicodeStringToOemString (Ordinal: 882, Address: 0x32480)
  • RtlUnicodeToCustomCPN (Ordinal: 883, Address: 0x32560)
  • RtlUnicodeToMultiByteN (Ordinal: 884, Address: 0x32660)
  • RtlUnicodeToMultiByteSize (Ordinal: 885, Address: 0x32790)
  • RtlUnicodeToOemN (Ordinal: 886, Address: 0x32890)
  • RtlUnicodeToUTF8N (Ordinal: 887, Address: 0x329c0)
  • RtlUniform (Ordinal: 888, Address: 0x32b00)
  • RtlUnlockHeap (Ordinal: 889, Address: 0x32b40)
  • RtlUnwind (Ordinal: 890, Address: 0xce44)
  • RtlUpcaseUnicodeChar (Ordinal: 891, Address: 0x32b90)
  • RtlUpcaseUnicodeString (Ordinal: 892, Address: 0x32bd0)
  • RtlUpcaseUnicodeStringToAnsiString (Ordinal: 893, Address: 0x32cb0)
  • RtlUpcaseUnicodeStringToCountedOemString (Ordinal: 894, Address: 0x32da0)
  • RtlUpcaseUnicodeStringToOemString (Ordinal: 895, Address: 0x32e80)
  • RtlUpcaseUnicodeToCustomCPN (Ordinal: 896, Address: 0x32f70)
  • RtlUpcaseUnicodeToMultiByteN (Ordinal: 897, Address: 0x330e0)
  • RtlUpcaseUnicodeToOemN (Ordinal: 898, Address: 0x33150)
  • RtlUpdateTimer (Ordinal: 899, Address: 0x331c0)
  • RtlUpperChar (Ordinal: 900, Address: 0x332b0)
  • RtlUpperString (Ordinal: 901, Address: 0x332d0)
  • RtlUsageHeap (Ordinal: 902, Address: 0x1d40)
  • RtlUserThreadStart (Ordinal: 903, Address: 0xceac)
  • RtlUshortByteSwap (Ordinal: 904, Address: 0xbe18)
  • RtlValidAcl (Ordinal: 905, Address: 0x33350)
  • RtlValidRelativeSecurityDescriptor (Ordinal: 906, Address: 0x33480)
  • RtlValidSecurityDescriptor (Ordinal: 907, Address: 0x334f0)
  • RtlValidSid (Ordinal: 908, Address: 0x33510)
  • RtlValidateHeap (Ordinal: 909, Address: 0x335b0)
  • RtlValidateProcessHeaps (Ordinal: 910, Address: 0x1d60)
  • RtlVerifyVersionInfo (Ordinal: 911, Address: 0x336f0)
  • RtlWaitOnAddress (Ordinal: 912, Address: 0x34100)
  • RtlWakeAddressAll (Ordinal: 913, Address: 0x343c0)
  • RtlWakeAddressSingle (Ordinal: 914, Address: 0x34590)
  • RtlWakeAllConditionVariable (Ordinal: 915, Address: 0x346a0)
  • RtlWakeConditionVariable (Ordinal: 916, Address: 0x346c0)
  • RtlWalkFrameChain (Ordinal: 917, Address: 0x346e0)
  • RtlWalkHeap (Ordinal: 918, Address: 0x347a0)
  • RtlWow64EnableFsRedirection (Ordinal: 919, Address: 0x34cd0)
  • RtlWow64EnableFsRedirectionEx (Ordinal: 920, Address: 0x34d20)
  • RtlWow64GetCurrentMachine (Ordinal: 921, Address: 0x34dd0)
  • RtlWow64GetProcessMachines (Ordinal: 922, Address: 0x34de0)
  • RtlWow64GetSharedInfoProcess (Ordinal: 923, Address: 0x34ea0)
  • RtlWow64IsWowGuestMachineSupported (Ordinal: 924, Address: 0x34f20)
  • RtlWriteMemoryStream (Ordinal: 925, Address: 0x1d80)
  • RtlWriteRegistryValue (Ordinal: 926, Address: 0x34fb0)
  • RtlZeroHeap (Ordinal: 927, Address: 0x1da0)
  • RtlZeroMemory (Ordinal: 928, Address: 0x35130)
  • RtlZombifyActivationContext (Ordinal: 929, Address: 0x35160)
  • RtlpNtCreateKey (Ordinal: 930, Address: 0x351c0)
  • RtlpNtEnumerateSubKey (Ordinal: 931, Address: 0x35240)
  • RtlpNtMakeTemporaryKey (Ordinal: 932, Address: 0x35350)
  • RtlpNtOpenKey (Ordinal: 933, Address: 0x35360)
  • RtlpNtQueryValueKey (Ordinal: 934, Address: 0x35390)
  • RtlpNtSetValueKey (Ordinal: 935, Address: 0x35490)
  • RtlpUnWaitCriticalSection (Ordinal: 936, Address: 0x354e0)
  • RtlpWaitForCriticalSection (Ordinal: 937, Address: 0x35550)
  • RtlxAnsiStringToUnicodeSize (Ordinal: 938, Address: 0x18050)
  • RtlxOemStringToUnicodeSize (Ordinal: 939, Address: 0x2ab60)
  • RtlxUnicodeStringToAnsiSize (Ordinal: 940, Address: 0x32070)
  • RtlxUnicodeStringToOemSize (Ordinal: 941, Address: 0x32370)
  • TpAllocCleanupGroup (Ordinal: 942, Address: 0x35fd0)
  • TpAllocIoCompletion (Ordinal: 943, Address: 0x360f0)
  • TpAllocPool (Ordinal: 944, Address: 0x364c0)
  • TpAllocTimer (Ordinal: 945, Address: 0x36570)
  • TpAllocWait (Ordinal: 946, Address: 0x36800)
  • TpAllocWork (Ordinal: 947, Address: 0x36880)
  • TpCallbackLeaveCriticalSectionOnCompletion (Ordinal: 948, Address: 0x36990)
  • TpCallbackMayRunLong (Ordinal: 949, Address: 0x36a00)
  • TpCallbackReleaseMutexOnCompletion (Ordinal: 950, Address: 0x36b10)
  • TpCallbackReleaseSemaphoreOnCompletion (Ordinal: 951, Address: 0x36b80)
  • TpCallbackSetEventOnCompletion (Ordinal: 952, Address: 0x36c00)
  • TpCallbackUnloadDllOnCompletion (Ordinal: 953, Address: 0x36c70)
  • TpCancelAsyncIoOperation (Ordinal: 954, Address: 0x36ce0)
  • TpDisassociateCallback (Ordinal: 955, Address: 0x36e10)
  • TpIsTimerSet (Ordinal: 956, Address: 0x36f20)
  • TpPostWork (Ordinal: 957, Address: 0x36f80)
  • TpQueryPoolStackInformation (Ordinal: 958, Address: 0x36ff0)
  • TpReleaseCleanupGroup (Ordinal: 959, Address: 0x37080)
  • TpReleaseCleanupGroupMembers (Ordinal: 960, Address: 0x370e0)
  • TpReleaseIoCompletion (Ordinal: 961, Address: 0x373e0)
  • TpReleasePool (Ordinal: 962, Address: 0x374b0)
  • TpReleaseTimer (Ordinal: 963, Address: 0x37540)
  • TpReleaseWait (Ordinal: 964, Address: 0x375b0)
  • TpReleaseWork (Ordinal: 965, Address: 0x37620)
  • TpSetPoolMaxThreads (Ordinal: 966, Address: 0x37690)
  • TpSetPoolMinThreads (Ordinal: 967, Address: 0x37730)
  • TpSetPoolStackInformation (Ordinal: 968, Address: 0x37800)
  • TpSetTimer (Ordinal: 969, Address: 0x37890)
  • TpSetWait (Ordinal: 970, Address: 0x37b90)
  • TpSimpleTryPost (Ordinal: 971, Address: 0x37d70)
  • TpStartAsyncIoOperation (Ordinal: 972, Address: 0x37e70)
  • TpWaitForIoCompletion (Ordinal: 973, Address: 0x37ee0)
  • TpWaitForTimer (Ordinal: 974, Address: 0x37f60)
  • TpWaitForWait (Ordinal: 975, Address: 0x37fe0)
  • TpWaitForWork (Ordinal: 976, Address: 0x38060)
  • VerSetConditionMask (Ordinal: 977, Address: 0x380e0)
  • WinSqmEndSession (Ordinal: 978, Address: 0x38190)
  • WinSqmIncrementDWORD (Ordinal: 979, Address: 0x381f0)
  • WinSqmIsOptedIn (Ordinal: 980, Address: 0x38250)
  • WinSqmSetDWORD (Ordinal: 981, Address: 0x38290)
  • WinSqmSetIfMaxDWORD (Ordinal: 982, Address: 0x382f0)
  • WinSqmStartSession (Ordinal: 983, Address: 0x38350)
  • Wow64Transition (Ordinal: 984, Address: 0x8f020)
  • ZwAcceptConnectPort (Ordinal: 985, Address: 0xbe20)
  • ZwAccessCheck (Ordinal: 986, Address: 0xbe30)
  • ZwAccessCheckAndAuditAlarm (Ordinal: 987, Address: 0xbe40)
  • ZwAddAtom (Ordinal: 988, Address: 0xbe50)
  • ZwAdjustGroupsToken (Ordinal: 989, Address: 0xbe60)
  • ZwAdjustPrivilegesToken (Ordinal: 990, Address: 0xbe70)
  • ZwAlertResumeThread (Ordinal: 991, Address: 0xbe80)
  • ZwAlertThread (Ordinal: 992, Address: 0xbe90)
  • ZwAlertThreadByThreadId (Ordinal: 993, Address: 0xbea0)
  • ZwAllocateLocallyUniqueId (Ordinal: 994, Address: 0xbeb0)
  • ZwAllocateUuids (Ordinal: 995, Address: 0xbed0)
  • ZwAllocateVirtualMemory (Ordinal: 996, Address: 0xbee0)
  • ZwAllocateVirtualMemoryEx (Ordinal: 997, Address: 0xbef0)
  • ZwAreMappedFilesTheSame (Ordinal: 998, Address: 0xbf00)
  • ZwAssignProcessToJobObject (Ordinal: 999, Address: 0xbf10)
  • ZwCancelIoFile (Ordinal: 1000, Address: 0xbf30)
  • ZwCancelIoFileEx (Ordinal: 1001, Address: 0xbf40)
  • ZwCancelSynchronousIoFile (Ordinal: 1002, Address: 0xbf50)
  • ZwCancelTimer (Ordinal: 1003, Address: 0xbf60)
  • ZwClearEvent (Ordinal: 1004, Address: 0xbf70)
  • ZwClose (Ordinal: 1005, Address: 0xbf80)
  • ZwCompareObjects (Ordinal: 1006, Address: 0xbfa0)
  • ZwCompareTokens (Ordinal: 1007, Address: 0xbfb0)
  • ZwCompleteConnectPort (Ordinal: 1008, Address: 0xbfc0)
  • ZwConnectPort (Ordinal: 1009, Address: 0xbfd0)
  • ZwContinue (Ordinal: 1010, Address: 0xbfe0)
  • ZwContinueEx (Ordinal: 1011, Address: 0xbff0)
  • ZwCreateDirectoryObject (Ordinal: 1012, Address: 0xc010)
  • ZwCreateEvent (Ordinal: 1013, Address: 0xc020)
  • ZwCreateFile (Ordinal: 1014, Address: 0xc030)
  • ZwCreateIoCompletion (Ordinal: 1015, Address: 0xc040)
  • ZwCreateJobObject (Ordinal: 1016, Address: 0xc050)
  • ZwCreateKey (Ordinal: 1017, Address: 0xc060)
  • ZwCreateKeyTransacted (Ordinal: 1018, Address: 0xc070)
  • ZwCreateKeyedEvent (Ordinal: 1019, Address: 0xc080)
  • ZwCreateLowBoxToken (Ordinal: 1020, Address: 0xc090)
  • ZwCreateMailslotFile (Ordinal: 1021, Address: 0xc0a0)
  • ZwCreateMutant (Ordinal: 1022, Address: 0xc0b0)
  • ZwCreateNamedPipeFile (Ordinal: 1023, Address: 0xc0c0)
  • ZwCreatePagingFile (Ordinal: 1024, Address: 0xc0d0)
  • ZwCreatePort (Ordinal: 1025, Address: 0xc0e0)
  • ZwCreateSection (Ordinal: 1026, Address: 0xc0f0)
  • ZwCreateSemaphore (Ordinal: 1027, Address: 0xc100)
  • ZwCreateSymbolicLinkObject (Ordinal: 1028, Address: 0xc110)
  • ZwCreateThread (Ordinal: 1029, Address: 0xc120)
  • ZwCreateThreadEx (Ordinal: 1030, Address: 0xc130)
  • ZwCreateTimer (Ordinal: 1031, Address: 0xc140)
  • ZwCreateToken (Ordinal: 1032, Address: 0xc150)
  • ZwCreateUserProcess (Ordinal: 1033, Address: 0xc170)
  • ZwDebugActiveProcess (Ordinal: 1034, Address: 0xc180)
  • ZwDebugContinue (Ordinal: 1035, Address: 0xc190)
  • ZwDelayExecution (Ordinal: 1036, Address: 0xc1a0)
  • ZwDeleteAtom (Ordinal: 1037, Address: 0xc1b0)
  • ZwDeleteFile (Ordinal: 1038, Address: 0xc1c0)
  • ZwDeleteKey (Ordinal: 1039, Address: 0xc1d0)
  • ZwDeleteValueKey (Ordinal: 1040, Address: 0xc1e0)
  • ZwDeviceIoControlFile (Ordinal: 1041, Address: 0xc1f0)
  • ZwDisplayString (Ordinal: 1042, Address: 0xc200)
  • ZwDuplicateObject (Ordinal: 1043, Address: 0xc210)
  • ZwDuplicateToken (Ordinal: 1044, Address: 0xc220)
  • ZwEnumerateKey (Ordinal: 1045, Address: 0xc230)
  • ZwEnumerateValueKey (Ordinal: 1046, Address: 0xc240)
  • ZwFilterToken (Ordinal: 1047, Address: 0xc250)
  • ZwFindAtom (Ordinal: 1048, Address: 0xc260)
  • ZwFlushBuffersFile (Ordinal: 1049, Address: 0xc270)
  • ZwFlushBuffersFileEx (Ordinal: 1050, Address: 0xc280)
  • ZwFlushInstructionCache (Ordinal: 1051, Address: 0xc290)
  • ZwFlushKey (Ordinal: 1052, Address: 0xc2a0)
  • ZwFlushProcessWriteBuffers (Ordinal: 1053, Address: 0xc2b0)
  • ZwFlushVirtualMemory (Ordinal: 1054, Address: 0xc2c0)
  • ZwFreeVirtualMemory (Ordinal: 1055, Address: 0xc2d0)
  • ZwFsControlFile (Ordinal: 1056, Address: 0xc2e0)
  • ZwGetContextThread (Ordinal: 1057, Address: 0xc2f0)
  • ZwGetCurrentProcessorNumber (Ordinal: 1058, Address: 0xc300)
  • ZwGetNlsSectionPtr (Ordinal: 1059, Address: 0xc320)
  • ZwGetTickCount (Ordinal: 1060, Address: 0x153b0)
  • ZwGetWriteWatch (Ordinal: 1061, Address: 0xc330)
  • ZwImpersonateAnonymousToken (Ordinal: 1062, Address: 0xc340)
  • ZwInitializeNlsFiles (Ordinal: 1063, Address: 0xc350)
  • ZwInitiatePowerAction (Ordinal: 1064, Address: 0xc360)
  • ZwIsProcessInJob (Ordinal: 1065, Address: 0xc370)
  • ZwListenPort (Ordinal: 1066, Address: 0xc380)
  • ZwLoadDriver (Ordinal: 1067, Address: 0xc390)
  • ZwLoadKey2 (Ordinal: 1068, Address: 0xc3b0)
  • ZwLoadKey (Ordinal: 1069, Address: 0xc3a0)
  • ZwLockFile (Ordinal: 1070, Address: 0xc3d0)
  • ZwLockVirtualMemory (Ordinal: 1071, Address: 0xc3e0)
  • ZwMakePermanentObject (Ordinal: 1072, Address: 0xc3f0)
  • ZwMakeTemporaryObject (Ordinal: 1073, Address: 0xc400)
  • ZwMapViewOfSection (Ordinal: 1074, Address: 0xc410)
  • ZwMapViewOfSectionEx (Ordinal: 1075, Address: 0xc420)
  • ZwNotifyChangeDirectoryFile (Ordinal: 1076, Address: 0xc430)
  • ZwNotifyChangeKey (Ordinal: 1077, Address: 0xc440)
  • ZwNotifyChangeMultipleKeys (Ordinal: 1078, Address: 0xc450)
  • ZwOpenDirectoryObject (Ordinal: 1079, Address: 0xc460)
  • ZwOpenEvent (Ordinal: 1080, Address: 0xc470)
  • ZwOpenFile (Ordinal: 1081, Address: 0xc480)
  • ZwOpenIoCompletion (Ordinal: 1082, Address: 0xc490)
  • ZwOpenJobObject (Ordinal: 1083, Address: 0xc4a0)
  • ZwOpenKey (Ordinal: 1084, Address: 0xc4b0)
  • ZwOpenKeyEx (Ordinal: 1085, Address: 0xc4c0)
  • ZwOpenKeyTransacted (Ordinal: 1086, Address: 0xc4d0)
  • ZwOpenKeyTransactedEx (Ordinal: 1087, Address: 0xc4e0)
  • ZwOpenKeyedEvent (Ordinal: 1088, Address: 0xc4f0)
  • ZwOpenMutant (Ordinal: 1089, Address: 0xc500)
  • ZwOpenProcess (Ordinal: 1090, Address: 0xc510)
  • ZwOpenProcessToken (Ordinal: 1091, Address: 0xc520)
  • ZwOpenProcessTokenEx (Ordinal: 1092, Address: 0xc530)
  • ZwOpenSection (Ordinal: 1093, Address: 0xc540)
  • ZwOpenSemaphore (Ordinal: 1094, Address: 0xc550)
  • ZwOpenSymbolicLinkObject (Ordinal: 1095, Address: 0xc560)
  • ZwOpenThread (Ordinal: 1096, Address: 0xc570)
  • ZwOpenThreadToken (Ordinal: 1097, Address: 0xc580)
  • ZwOpenThreadTokenEx (Ordinal: 1098, Address: 0xc590)
  • ZwOpenTimer (Ordinal: 1099, Address: 0xc5a0)
  • ZwPowerInformation (Ordinal: 1100, Address: 0xc5b0)
  • ZwPrivilegeCheck (Ordinal: 1101, Address: 0xc5c0)
  • ZwProtectVirtualMemory (Ordinal: 1102, Address: 0xc5d0)
  • ZwPulseEvent (Ordinal: 1103, Address: 0xc5e0)
  • ZwQueryAttributesFile (Ordinal: 1104, Address: 0xc5f0)
  • ZwQueryDefaultLocale (Ordinal: 1105, Address: 0xc600)
  • ZwQueryDefaultUILanguage (Ordinal: 1106, Address: 0xc610)
  • ZwQueryDirectoryFile (Ordinal: 1107, Address: 0xc620)
  • ZwQueryDirectoryObject (Ordinal: 1108, Address: 0xc630)
  • ZwQueryEaFile (Ordinal: 1109, Address: 0xc640)
  • ZwQueryEvent (Ordinal: 1110, Address: 0xc650)
  • ZwQueryFullAttributesFile (Ordinal: 1111, Address: 0xc660)
  • ZwQueryInformationAtom (Ordinal: 1112, Address: 0xc670)
  • ZwQueryInformationFile (Ordinal: 1113, Address: 0xc680)
  • ZwQueryInformationJobObject (Ordinal: 1114, Address: 0xc690)
  • ZwQueryInformationProcess (Ordinal: 1115, Address: 0x153d0)
  • ZwQueryInformationThread (Ordinal: 1116, Address: 0xc6b0)
  • ZwQueryInformationToken (Ordinal: 1117, Address: 0xc6c0)
  • ZwQueryInstallUILanguage (Ordinal: 1118, Address: 0xc6d0)
  • ZwQueryIoCompletion (Ordinal: 1119, Address: 0xc6e0)
  • ZwQueryKey (Ordinal: 1120, Address: 0xc6f0)
  • ZwQueryLicenseValue (Ordinal: 1121, Address: 0xc700)
  • ZwQueryMultipleValueKey (Ordinal: 1122, Address: 0xc710)
  • ZwQueryMutant (Ordinal: 1123, Address: 0xc720)
  • ZwQueryObject (Ordinal: 1124, Address: 0xc730)
  • ZwQueryPerformanceCounter (Ordinal: 1125, Address: 0xc740)
  • ZwQuerySection (Ordinal: 1126, Address: 0xc750)
  • ZwQuerySecurityObject (Ordinal: 1127, Address: 0xc760)
  • ZwQuerySemaphore (Ordinal: 1128, Address: 0xc770)
  • ZwQuerySymbolicLinkObject (Ordinal: 1129, Address: 0xc780)
  • ZwQuerySystemEnvironmentValue (Ordinal: 1130, Address: 0xc790)
  • ZwQuerySystemEnvironmentValueEx (Ordinal: 1131, Address: 0xc7a0)
  • ZwQuerySystemInformation (Ordinal: 1132, Address: 0xc7b0)
  • ZwQuerySystemInformationEx (Ordinal: 1133, Address: 0xc7c0)
  • ZwQuerySystemTime (Ordinal: 1134, Address: 0xc7d0)
  • ZwQueryTimer (Ordinal: 1135, Address: 0xc7e0)
  • ZwQueryTimerResolution (Ordinal: 1136, Address: 0xc7f0)
  • ZwQueryValueKey (Ordinal: 1137, Address: 0xc800)
  • ZwQueryVirtualMemory (Ordinal: 1138, Address: 0xc810)
  • ZwQueryVolumeInformationFile (Ordinal: 1139, Address: 0xc820)
  • ZwQueueApcThread (Ordinal: 1140, Address: 0xc830)
  • ZwQueueApcThreadEx (Ordinal: 1141, Address: 0xc840)
  • ZwRaiseException (Ordinal: 1142, Address: 0xc850)
  • ZwRaiseHardError (Ordinal: 1143, Address: 0xc860)
  • ZwReadFile (Ordinal: 1144, Address: 0xc870)
  • ZwReadFileScatter (Ordinal: 1145, Address: 0xc880)
  • ZwReadVirtualMemory (Ordinal: 1146, Address: 0xc890)
  • ZwRegisterThreadTerminatePort (Ordinal: 1147, Address: 0xc8a0)
  • ZwReleaseKeyedEvent (Ordinal: 1148, Address: 0xc8b0)
  • ZwReleaseMutant (Ordinal: 1149, Address: 0xc8c0)
  • ZwReleaseSemaphore (Ordinal: 1150, Address: 0xc8d0)
  • ZwRemoveIoCompletion (Ordinal: 1151, Address: 0xc8e0)
  • ZwRemoveIoCompletionEx (Ordinal: 1152, Address: 0xc8f0)
  • ZwRemoveProcessDebug (Ordinal: 1153, Address: 0xc900)
  • ZwRenameKey (Ordinal: 1154, Address: 0xc910)
  • ZwReplaceKey (Ordinal: 1155, Address: 0xc920)
  • ZwReplyWaitReceivePort (Ordinal: 1156, Address: 0xc930)
  • ZwRequestWaitReplyPort (Ordinal: 1157, Address: 0xc940)
  • ZwResetEvent (Ordinal: 1158, Address: 0xc950)
  • ZwResetWriteWatch (Ordinal: 1159, Address: 0xc960)
  • ZwRestoreKey (Ordinal: 1160, Address: 0xc970)
  • ZwResumeProcess (Ordinal: 1161, Address: 0xc980)
  • ZwResumeThread (Ordinal: 1162, Address: 0xc990)
  • ZwSaveKey (Ordinal: 1163, Address: 0xc9b0)
  • ZwSecureConnectPort (Ordinal: 1164, Address: 0xc9c0)
  • ZwSetContextThread (Ordinal: 1165, Address: 0xc9d0)
  • ZwSetDebugFilterState (Ordinal: 1166, Address: 0xc9e0)
  • ZwSetDefaultLocale (Ordinal: 1167, Address: 0xc9f0)
  • ZwSetDefaultUILanguage (Ordinal: 1168, Address: 0xca00)
  • ZwSetEaFile (Ordinal: 1169, Address: 0xca10)
  • ZwSetEvent (Ordinal: 1170, Address: 0xca20)
  • ZwSetInformationDebugObject (Ordinal: 1171, Address: 0xca30)
  • ZwSetInformationFile (Ordinal: 1172, Address: 0xca40)
  • ZwSetInformationJobObject (Ordinal: 1173, Address: 0xca50)
  • ZwSetInformationKey (Ordinal: 1174, Address: 0xca60)
  • ZwSetInformationObject (Ordinal: 1175, Address: 0xca70)
  • ZwSetInformationProcess (Ordinal: 1176, Address: 0xca80)
  • ZwSetInformationThread (Ordinal: 1177, Address: 0xca90)
  • ZwSetInformationToken (Ordinal: 1178, Address: 0xcaa0)
  • ZwSetInformationVirtualMemory (Ordinal: 1179, Address: 0xcab0)
  • ZwSetIntervalProfile (Ordinal: 1180, Address: 0xcac0)
  • ZwSetIoCompletion (Ordinal: 1181, Address: 0xcad0)
  • ZwSetIoCompletionEx (Ordinal: 1182, Address: 0xcae0)
  • ZwSetLdtEntries (Ordinal: 1183, Address: 0xcaf0)
  • ZwSetSecurityObject (Ordinal: 1184, Address: 0xcb00)
  • ZwSetSystemInformation (Ordinal: 1185, Address: 0xcb10)
  • ZwSetSystemTime (Ordinal: 1186, Address: 0xcb20)
  • ZwSetThreadExecutionState (Ordinal: 1187, Address: 0xcb30)
  • ZwSetTimer (Ordinal: 1188, Address: 0xcb40)
  • ZwSetTimerResolution (Ordinal: 1189, Address: 0xcb50)
  • ZwSetValueKey (Ordinal: 1190, Address: 0xcb60)
  • ZwSetVolumeInformationFile (Ordinal: 1191, Address: 0xcb70)
  • ZwShutdownSystem (Ordinal: 1192, Address: 0xcb80)
  • ZwSignalAndWaitForSingleObject (Ordinal: 1193, Address: 0xcb90)
  • ZwSuspendProcess (Ordinal: 1194, Address: 0xcba0)
  • ZwSuspendThread (Ordinal: 1195, Address: 0xcbb0)
  • ZwSystemDebugControl (Ordinal: 1196, Address: 0xcbc0)
  • ZwTerminateJobObject (Ordinal: 1197, Address: 0xcbd0)
  • ZwTerminateProcess (Ordinal: 1198, Address: 0xcbe0)
  • ZwTerminateThread (Ordinal: 1199, Address: 0xcbf0)
  • ZwTestAlert (Ordinal: 1200, Address: 0xcc00)
  • ZwTraceControl (Ordinal: 1201, Address: 0xcc10)
  • ZwUnloadDriver (Ordinal: 1202, Address: 0xcc20)
  • ZwUnloadKey (Ordinal: 1203, Address: 0xcc30)
  • ZwUnlockFile (Ordinal: 1204, Address: 0xcc40)
  • ZwUnlockVirtualMemory (Ordinal: 1205, Address: 0xcc50)
  • ZwUnmapViewOfSection (Ordinal: 1206, Address: 0xcc60)
  • ZwUnmapViewOfSectionEx (Ordinal: 1207, Address: 0xcc70)
  • ZwWaitForAlertByThreadId (Ordinal: 1208, Address: 0xcc80)
  • ZwWaitForDebugEvent (Ordinal: 1209, Address: 0xcc90)
  • ZwWaitForKeyedEvent (Ordinal: 1210, Address: 0xcca0)
  • ZwWaitForMultipleObjects (Ordinal: 1211, Address: 0xccb0)
  • ZwWaitForSingleObject (Ordinal: 1212, Address: 0xccc0)
  • ZwWow64AllocateVirtualMemory64 (Ordinal: 1213, Address: 0xccd0)
  • ZwWow64GetNativeSystemInformation (Ordinal: 1214, Address: 0xcce0)
  • ZwWow64IsProcessorFeaturePresent (Ordinal: 1215, Address: 0xccf0)
  • ZwWow64ReadVirtualMemory64 (Ordinal: 1216, Address: 0xcd10)
  • ZwWow64WriteVirtualMemory64 (Ordinal: 1217, Address: 0xcd20)
  • ZwWriteFile (Ordinal: 1218, Address: 0xcd30)
  • ZwWriteFileGather (Ordinal: 1219, Address: 0xcd40)
  • ZwWriteVirtualMemory (Ordinal: 1220, Address: 0xcd50)
  • ZwYieldExecution (Ordinal: 1221, Address: 0xcd60)
  • _CIcos (Ordinal: 1222, Address: 0x383b0)
  • _CIlog (Ordinal: 1223, Address: 0x383d0)
  • _CIpow (Ordinal: 1224, Address: 0x383f0)
  • _CIsin (Ordinal: 1225, Address: 0x38430)
  • _CIsqrt (Ordinal: 1226, Address: 0x38450)
  • __isascii (Ordinal: 1227, Address: 0x38760)
  • __iscsym (Ordinal: 1228, Address: 0x38770)
  • __iscsymf (Ordinal: 1229, Address: 0x387a0)
  • __toascii (Ordinal: 1230, Address: 0x3a640)
  • _alldiv (Ordinal: 1231, Address: 0x38490)
  • _alldvrm (Ordinal: 1232, Address: 0xbccc)
  • _allmul (Ordinal: 1233, Address: 0x38530)
  • _alloca_probe (Ordinal: 1234, Address: 0xcf38)
  • _allrem (Ordinal: 1235, Address: 0x385a0)
  • _allshl (Ordinal: 1236, Address: 0xbca8)
  • _allshr (Ordinal: 1237, Address: 0xbcb4)
  • _atoi64 (Ordinal: 1238, Address: 0x3adb0)
  • _aulldiv (Ordinal: 1239, Address: 0x38630)
  • _aulldvrm (Ordinal: 1240, Address: 0xbcfc)
  • _aullrem (Ordinal: 1241, Address: 0x38660)
  • _aullshr (Ordinal: 1242, Address: 0xbcc0)
  • _chkstk (Ordinal: 1243, Address: 0xcf2c)
  • _errno (Ordinal: 1244, Address: 0x3af40)
  • _fltused (Ordinal: 1245, Address: 0x1dc0)
  • _ftol (Ordinal: 1246, Address: 0x3af50)
  • _ftol2 (Ordinal: 1247, Address: 0x3af50)
  • _ftol2_sse (Ordinal: 1248, Address: 0x3af50)
  • _i64toa (Ordinal: 1249, Address: 0x3af70)
  • _i64toa_s (Ordinal: 1250, Address: 0x3b090)
  • _i64tow (Ordinal: 1251, Address: 0x3b200)
  • _i64tow_s (Ordinal: 1252, Address: 0x3b330)
  • _itoa (Ordinal: 1253, Address: 0x3b4b0)
  • _itoa_s (Ordinal: 1254, Address: 0x3b4c0)
  • _itow (Ordinal: 1255, Address: 0x3b530)
  • _itow_s (Ordinal: 1256, Address: 0x3b540)
  • _lfind (Ordinal: 1257, Address: 0x3b5b0)
  • _ltoa (Ordinal: 1258, Address: 0x3b610)
  • _ltoa_s (Ordinal: 1259, Address: 0x3b6b0)
  • _ltow (Ordinal: 1260, Address: 0x3b720)
  • _ltow_s (Ordinal: 1261, Address: 0x3b7d0)
  • _makepath_s (Ordinal: 1262, Address: 0x3b840)
  • _memccpy (Ordinal: 1263, Address: 0x3ba00)
  • _memicmp (Ordinal: 1264, Address: 0x3ba40)
  • _snprintf (Ordinal: 1265, Address: 0x152e0)
  • _snprintf_s (Ordinal: 1266, Address: 0x3baa0)
  • _snwprintf (Ordinal: 1267, Address: 0x3bb00)
  • _snwprintf_s (Ordinal: 1268, Address: 0x3bb40)
  • _splitpath (Ordinal: 1269, Address: 0x3bbb0)
  • _splitpath_s (Ordinal: 1270, Address: 0x3bc30)
  • _strcmpi (Ordinal: 1271, Address: 0x3bfd0)
  • _stricmp (Ordinal: 1272, Address: 0x3bfd0)
  • _strlwr (Ordinal: 1273, Address: 0x3c070)
  • _strlwr_s (Ordinal: 1274, Address: 0x3c0a0)
  • _strnicmp (Ordinal: 1275, Address: 0x3c110)
  • _strupr (Ordinal: 1276, Address: 0x3c1e0)
  • _strupr_s (Ordinal: 1277, Address: 0x3c210)
  • _swprintf (Ordinal: 1278, Address: 0x15360)
  • _tolower (Ordinal: 1279, Address: 0x3c280)
  • _toupper (Ordinal: 1280, Address: 0x3c290)
  • _ui64toa (Ordinal: 1281, Address: 0x3c2a0)
  • _ui64toa_s (Ordinal: 1282, Address: 0x3c370)
  • _ui64tow (Ordinal: 1283, Address: 0x3c490)
  • _ui64tow_s (Ordinal: 1284, Address: 0x3c570)
  • _ultoa (Ordinal: 1285, Address: 0x3c6a0)
  • _ultoa_s (Ordinal: 1286, Address: 0x3c700)
  • _ultow (Ordinal: 1287, Address: 0x3c730)
  • _ultow_s (Ordinal: 1288, Address: 0x3c790)
  • _vscprintf (Ordinal: 1289, Address: 0x3c7c0)
  • _vscwprintf (Ordinal: 1290, Address: 0x3c800)
  • _vsnprintf (Ordinal: 1291, Address: 0x3c840)
  • _vsnprintf_s (Ordinal: 1292, Address: 0x3c880)
  • _vsnwprintf (Ordinal: 1293, Address: 0x3c8e0)
  • _vsnwprintf_s (Ordinal: 1294, Address: 0x3c920)
  • _vswprintf (Ordinal: 1295, Address: 0x3c990)
  • _wcsicmp (Ordinal: 1296, Address: 0x3c9d0)
  • _wcslwr (Ordinal: 1297, Address: 0x3ca30)
  • _wcslwr_s (Ordinal: 1298, Address: 0x3ca70)
  • _wcsnicmp (Ordinal: 1299, Address: 0x3caf0)
  • _wcstoi64 (Ordinal: 1300, Address: 0x3cb60)
  • _wcstoui64 (Ordinal: 1301, Address: 0x3cf20)
  • _wcsupr (Ordinal: 1302, Address: 0x3d1d0)
  • _wcsupr_s (Ordinal: 1303, Address: 0x3d210)
  • _wmakepath_s (Ordinal: 1304, Address: 0x3d290)
  • _wsplitpath_s (Ordinal: 1305, Address: 0x3d490)
  • _wtoi (Ordinal: 1306, Address: 0x3d870)
  • _wtoi64 (Ordinal: 1307, Address: 0x3d880)
  • _wtol (Ordinal: 1308, Address: 0x3d9a0)
  • abs (Ordinal: 1309, Address: 0x3da60)
  • atan (Ordinal: 1310, Address: 0x3fd60)
  • atan2 (Ordinal: 1311, Address: 0x3fff0)
  • atoi (Ordinal: 1312, Address: 0x40260)
  • atol (Ordinal: 1313, Address: 0x40280)
  • bsearch (Ordinal: 1314, Address: 0x404d0)
  • bsearch_s (Ordinal: 1315, Address: 0x40550)
  • ceil (Ordinal: 1316, Address: 0x41970)
  • cos (Ordinal: 1317, Address: 0x422a0)
  • fabs (Ordinal: 1318, Address: 0x439a0)
  • floor (Ordinal: 1319, Address: 0x48130)
  • isalnum (Ordinal: 1320, Address: 0x4e330)
  • isalpha (Ordinal: 1321, Address: 0x4e350)
  • iscntrl (Ordinal: 1322, Address: 0x4e370)
  • isdigit (Ordinal: 1323, Address: 0x4e390)
  • isgraph (Ordinal: 1324, Address: 0x4e3b0)
  • islower (Ordinal: 1325, Address: 0x4e3d0)
  • isprint (Ordinal: 1326, Address: 0x4e3f0)
  • ispunct (Ordinal: 1327, Address: 0x4e410)
  • isspace (Ordinal: 1328, Address: 0x4e430)
  • isupper (Ordinal: 1329, Address: 0x4e450)
  • iswalnum (Ordinal: 1330, Address: 0x4e470)
  • iswalpha (Ordinal: 1331, Address: 0x4e4a0)
  • iswascii (Ordinal: 1332, Address: 0x4e4d0)
  • iswctype (Ordinal: 1333, Address: 0x4e4e0)
  • iswdigit (Ordinal: 1334, Address: 0x4e510)
  • iswgraph (Ordinal: 1335, Address: 0x4e530)
  • iswlower (Ordinal: 1336, Address: 0x4e560)
  • iswprint (Ordinal: 1337, Address: 0x4e580)
  • iswspace (Ordinal: 1338, Address: 0x4e5b0)
  • iswxdigit (Ordinal: 1339, Address: 0x4e5d0)
  • isxdigit (Ordinal: 1340, Address: 0x4e600)
  • labs (Ordinal: 1341, Address: 0x3da60)
  • log (Ordinal: 1342, Address: 0x51040)
  • mbstowcs (Ordinal: 1343, Address: 0x51ac0)
  • memchr (Ordinal: 1344, Address: 0x51b60)
  • memcmp (Ordinal: 1345, Address: 0x51b90)
  • memcpy (Ordinal: 1346, Address: 0x51bf0)
  • memcpy_s (Ordinal: 1347, Address: 0x51c60)
  • memmove (Ordinal: 1348, Address: 0x51ce0)
  • memmove_s (Ordinal: 1349, Address: 0x51cf0)
  • memset (Ordinal: 1350, Address: 0x51d50)
  • pow (Ordinal: 1351, Address: 0x5d490)
  • qsort (Ordinal: 1352, Address: 0x5e480)
  • qsort_s (Ordinal: 1353, Address: 0x5e4e0)
  • sin (Ordinal: 1354, Address: 0x60150)
  • sprintf (Ordinal: 1355, Address: 0x15320)
  • sprintf_s (Ordinal: 1356, Address: 0x60560)
  • sqrt (Ordinal: 1357, Address: 0x605b0)
  • sscanf (Ordinal: 1358, Address: 0x608a0)
  • strcat (Ordinal: 1359, Address: 0x614b0)
  • strcat_s (Ordinal: 1360, Address: 0x614f0)
  • strchr (Ordinal: 1361, Address: 0x61560)
  • strcmp (Ordinal: 1362, Address: 0x61590)
  • strcpy (Ordinal: 1363, Address: 0x615f0)
  • strcpy_s (Ordinal: 1364, Address: 0x61620)
  • strcspn (Ordinal: 1365, Address: 0x61680)
  • strlen (Ordinal: 1366, Address: 0x61720)
  • strncat (Ordinal: 1367, Address: 0x61750)
  • strncat_s (Ordinal: 1368, Address: 0x617a0)
  • strncmp (Ordinal: 1369, Address: 0x61870)
  • strncpy (Ordinal: 1370, Address: 0x618d0)
  • strncpy_s (Ordinal: 1371, Address: 0x61930)
  • strnlen (Ordinal: 1372, Address: 0x619e0)
  • strpbrk (Ordinal: 1373, Address: 0x61a30)
  • strrchr (Ordinal: 1374, Address: 0x61a80)
  • strspn (Ordinal: 1375, Address: 0x61ab0)
  • strstr (Ordinal: 1376, Address: 0x61b00)
  • strtok_s (Ordinal: 1377, Address: 0x61b70)
  • strtol (Ordinal: 1378, Address: 0x61c30)
  • strtoul (Ordinal: 1379, Address: 0x61e50)
  • swprintf (Ordinal: 1380, Address: 0x15360)
  • swprintf_s (Ordinal: 1381, Address: 0x621c0)
  • tan (Ordinal: 1382, Address: 0x62220)
  • tolower (Ordinal: 1383, Address: 0x62d80)
  • toupper (Ordinal: 1384, Address: 0x62da0)
  • towlower (Ordinal: 1385, Address: 0x62e30)
  • towupper (Ordinal: 1386, Address: 0x62e70)
  • vDbgPrintEx (Ordinal: 1387, Address: 0x656d0)
  • vDbgPrintExWithPrefix (Ordinal: 1388, Address: 0x65710)
  • vsprintf (Ordinal: 1389, Address: 0x66b80)
  • vsprintf_s (Ordinal: 1390, Address: 0x66bc0)
  • vswprintf_s (Ordinal: 1391, Address: 0x66c10)
  • wcscat (Ordinal: 1392, Address: 0x67540)
  • wcscat_s (Ordinal: 1393, Address: 0x67580)
  • wcschr (Ordinal: 1394, Address: 0x67600)
  • wcscmp (Ordinal: 1395, Address: 0x67630)
  • wcscpy (Ordinal: 1396, Address: 0x67690)
  • wcscpy_s (Ordinal: 1397, Address: 0x676c0)
  • wcscspn (Ordinal: 1398, Address: 0x67720)
  • wcslen (Ordinal: 1399, Address: 0x67780)
  • wcsncat (Ordinal: 1400, Address: 0x677b0)
  • wcsncat_s (Ordinal: 1401, Address: 0x67810)
  • wcsncmp (Ordinal: 1402, Address: 0x67920)
  • wcsncpy (Ordinal: 1403, Address: 0x67980)
  • wcsncpy_s (Ordinal: 1404, Address: 0x679e0)
  • wcsnlen (Ordinal: 1405, Address: 0x67a90)
  • wcspbrk (Ordinal: 1406, Address: 0x67ac0)
  • wcsrchr (Ordinal: 1407, Address: 0x67b20)
  • wcsspn (Ordinal: 1408, Address: 0x67b50)
  • wcsstr (Ordinal: 1409, Address: 0x67bb0)
  • wcstok (Ordinal: 1410, Address: 0x67c30)
  • wcstok_s (Ordinal: 1411, Address: 0x67ce0)
  • wcstol (Ordinal: 1412, Address: 0x67da0)
  • wcstombs (Ordinal: 1413, Address: 0x67fe0)
  • wcstoul (Ordinal: 1414, Address: 0x68090)
  • wine_server_call (Ordinal: 1415, Address: 0x6c150)
  • wine_server_fd_to_handle (Ordinal: 1416, Address: 0x6c190)
  • wine_server_handle_to_fd (Ordinal: 1417, Address: 0x6c200)
  • __wine_unix_spawnvp (Ordinal: 1418, Address: 0x3acc0)
  • __wine_ctrl_routine (Ordinal: 1419, Address: 0x3a650)
  • __wine_syscall_dispatcher (Ordinal: 1420, Address: 0x8f030)
  • __wine_unix_call_dispatcher (Ordinal: 1421, Address: 0x8f034)
  • __wine_unixlib_handle (Ordinal: 1422, Address: 0x8f028)
  • __wine_dbg_write (Ordinal: 1423, Address: 0x3aa80)
  • __wine_dbg_get_channel_flags (Ordinal: 1424, Address: 0x3a680)
  • __wine_dbg_header (Ordinal: 1425, Address: 0x3a7a0)
  • __wine_dbg_output (Ordinal: 1426, Address: 0x3a940)
  • __wine_dbg_strdup (Ordinal: 1427, Address: 0x3aa00)
  • wine_get_version (Ordinal: 1428, Address: 0x6c140)
  • wine_get_build_id (Ordinal: 1429, Address: 0x6c0d0)
  • wine_get_host_version (Ordinal: 1430, Address: 0x6c0f0)
  • wine_nt_to_unix_file_name (Ordinal: 1431, Address: 0xcd80)
  • wine_unix_to_nt_file_name (Ordinal: 1432, Address: 0xcd90)
  • __wine_rpc_NtReadFile (Ordinal: 1433, Address: 0xcd70)
  • __wine_unix_call (Ordinal: 1434, Address: 0x3acb0)

Imported DLLs & Functions

No imported DLLs.