ntdll.dll
Description: Wine ntdll
Authors: Copyright (c) 1993-2025 the Wine project authors (see the file AUTHORS for a complete list)
Version: 6.1.7601.24059
Architecture: 32-bit
Operating System: Unknown (0x0)
SHA256: 7d97ea40b17090a5bf00e1d8b1d8d900
File Size: 651.6 KB
Uploaded At: Jan. 26, 2026, 10:59 p.m.
Views: 21
Exported Functions
- A_SHAFinal (Ordinal: 1, Address: 0xd990)
- A_SHAInit (Ordinal: 2, Address: 0xdaf0)
- A_SHAUpdate (Ordinal: 3, Address: 0xdb20)
- ApiSetQueryApiSetPresence (Ordinal: 4, Address: 0xf350)
- ApiSetQueryApiSetPresenceEx (Ordinal: 5, Address: 0xf3d0)
- CsrAllocateCaptureBuffer (Ordinal: 6, Address: 0x1000)
- CsrAllocateCapturePointer (Ordinal: 7, Address: 0x1020)
- CsrAllocateMessagePointer (Ordinal: 8, Address: 0x1040)
- CsrCaptureMessageBuffer (Ordinal: 9, Address: 0x1060)
- CsrCaptureMessageString (Ordinal: 10, Address: 0x1080)
- CsrCaptureTimeout (Ordinal: 11, Address: 0x10a0)
- CsrClientCallServer (Ordinal: 12, Address: 0x10c0)
- CsrClientConnectToServer (Ordinal: 13, Address: 0x10e0)
- CsrClientMaxMessage (Ordinal: 14, Address: 0x1100)
- CsrClientSendMessage (Ordinal: 15, Address: 0x1120)
- CsrClientThreadConnect (Ordinal: 16, Address: 0x1140)
- CsrFreeCaptureBuffer (Ordinal: 17, Address: 0x1160)
- CsrIdentifyAlertableThread (Ordinal: 18, Address: 0x1180)
- CsrNewThread (Ordinal: 19, Address: 0x11a0)
- CsrProbeForRead (Ordinal: 20, Address: 0x11c0)
- CsrProbeForWrite (Ordinal: 21, Address: 0x11e0)
- CsrSetPriorityClass (Ordinal: 22, Address: 0x1200)
- CsrpProcessCallbackRequest (Ordinal: 23, Address: 0x1220)
- DbgBreakPoint (Ordinal: 24, Address: 0xcf04)
- DbgPrint (Ordinal: 25, Address: 0xf4b0)
- DbgPrintEx (Ordinal: 26, Address: 0xf4f0)
- DbgPrompt (Ordinal: 27, Address: 0x1240)
- DbgUiConnectToDbg (Ordinal: 28, Address: 0xf530)
- DbgUiContinue (Ordinal: 29, Address: 0xf5c0)
- DbgUiConvertStateChangeStructure (Ordinal: 30, Address: 0xf5f0)
- DbgUiDebugActiveProcess (Ordinal: 31, Address: 0xf860)
- DbgUiGetThreadDebugObject (Ordinal: 32, Address: 0xf8e0)
- DbgUiIssueRemoteBreakin (Ordinal: 33, Address: 0xf8f0)
- DbgUiRemoteBreakin (Ordinal: 34, Address: 0xf9b0)
- DbgUiSetThreadDebugObject (Ordinal: 35, Address: 0xfa10)
- DbgUiStopDebugging (Ordinal: 36, Address: 0xfa30)
- DbgUiWaitStateChange (Ordinal: 37, Address: 0xfa60)
- DbgUserBreakPoint (Ordinal: 38, Address: 0xcf14)
- EtwEventActivityIdControl (Ordinal: 39, Address: 0xfbb0)
- EtwEventEnabled (Ordinal: 40, Address: 0xfc10)
- EtwEventProviderEnabled (Ordinal: 41, Address: 0xfcb0)
- EtwEventRegister (Ordinal: 42, Address: 0xfda0)
- EtwEventSetInformation (Ordinal: 43, Address: 0xfec0)
- EtwEventUnregister (Ordinal: 44, Address: 0xff70)
- EtwEventWrite (Ordinal: 45, Address: 0x10000)
- EtwEventWriteString (Ordinal: 46, Address: 0x100b0)
- EtwEventWriteTransfer (Ordinal: 47, Address: 0x10240)
- EtwGetTraceEnableFlags (Ordinal: 48, Address: 0x10450)
- EtwGetTraceEnableLevel (Ordinal: 49, Address: 0x104e0)
- EtwGetTraceLoggerHandle (Ordinal: 50, Address: 0x10570)
- EtwLogTraceEvent (Ordinal: 51, Address: 0x105d0)
- EtwRegisterTraceGuidsA (Ordinal: 52, Address: 0x10670)
- EtwRegisterTraceGuidsW (Ordinal: 53, Address: 0x107b0)
- EtwTraceMessage (Ordinal: 54, Address: 0x10ae0)
- EtwTraceMessageVa (Ordinal: 55, Address: 0x10c40)
- EtwUnregisterTraceGuids (Ordinal: 56, Address: 0x10da0)
- KiRaiseUserExceptionDispatcher (Ordinal: 57, Address: 0x10f60)
- KiUserApcDispatcher (Ordinal: 58, Address: 0xcdb8)
- KiUserCallbackDispatcher (Ordinal: 59, Address: 0x10fa0)
- KiUserExceptionDispatcher (Ordinal: 60, Address: 0xcda8)
- LdrAccessResource (Ordinal: 61, Address: 0xbde0)
- LdrAddDllDirectory (Ordinal: 62, Address: 0x10ff0)
- LdrAddRefDll (Ordinal: 63, Address: 0x111f0)
- LdrDisableThreadCalloutsForDll (Ordinal: 64, Address: 0x11300)
- LdrEnumResources (Ordinal: 65, Address: 0x1260)
- LdrEnumerateLoadedModules (Ordinal: 66, Address: 0x11360)
- LdrFindEntryForAddress (Ordinal: 67, Address: 0x11440)
- LdrFindResourceDirectory_U (Ordinal: 68, Address: 0x114a0)
- LdrFindResource_U (Ordinal: 69, Address: 0x115c0)
- LdrFlushAlternateResourceModules (Ordinal: 70, Address: 0x1280)
- LdrGetDllDirectory (Ordinal: 71, Address: 0x116d0)
- LdrGetDllFullName (Ordinal: 72, Address: 0x11750)
- LdrGetDllHandle (Ordinal: 73, Address: 0x11820)
- LdrGetDllHandleEx (Ordinal: 74, Address: 0x11860)
- LdrGetDllPath (Ordinal: 75, Address: 0x11b90)
- LdrGetProcedureAddress (Ordinal: 76, Address: 0x12100)
- LdrInitShimEngineDynamic (Ordinal: 77, Address: 0x12a0)
- LdrInitializeThunk (Ordinal: 78, Address: 0x12270)
- LdrLoadAlternateResourceModule (Ordinal: 79, Address: 0x12c0)
- LdrLoadDll (Ordinal: 80, Address: 0x122f0)
- LdrLockLoaderLock (Ordinal: 81, Address: 0x123f0)
- LdrProcessRelocationBlock (Ordinal: 82, Address: 0x12590)
- LdrQueryImageFileExecutionOptions (Ordinal: 83, Address: 0x12660)
- LdrQueryProcessModuleInformation (Ordinal: 84, Address: 0x12920)
- LdrRegisterDllNotification (Ordinal: 85, Address: 0x12a80)
- LdrRemoveDllDirectory (Ordinal: 86, Address: 0x12bd0)
- LdrResolveDelayLoadedAPI (Ordinal: 87, Address: 0x12c80)
- LdrSetAppCompatDllRedirectionCallback (Ordinal: 88, Address: 0x12e0)
- LdrSetDefaultDllDirectories (Ordinal: 89, Address: 0x12ef0)
- LdrSetDllDirectory (Ordinal: 90, Address: 0x12f20)
- LdrSetDllManifestProber (Ordinal: 91, Address: 0x1300)
- LdrShutdownProcess (Ordinal: 92, Address: 0x12fb0)
- LdrShutdownThread (Ordinal: 93, Address: 0x13040)
- LdrSystemDllInitBlock (Ordinal: 94, Address: 0x6d320)
- LdrUnloadAlternateResourceModule (Ordinal: 95, Address: 0x1320)
- LdrUnloadDll (Ordinal: 96, Address: 0x13410)
- LdrUnlockLoaderLock (Ordinal: 97, Address: 0x13430)
- LdrUnregisterDllNotification (Ordinal: 98, Address: 0x13470)
- LdrVerifyImageMatchesChecksum (Ordinal: 99, Address: 0x1340)
- MD4Final (Ordinal: 100, Address: 0x13520)
- MD4Init (Ordinal: 101, Address: 0x13620)
- MD4Update (Ordinal: 102, Address: 0x13b70)
- MD5Final (Ordinal: 103, Address: 0x13d60)
- MD5Init (Ordinal: 104, Address: 0x13e80)
- MD5Update (Ordinal: 105, Address: 0x145e0)
- NlsAnsiCodePage (Ordinal: 106, Address: 0x906e4)
- NlsMbCodePageTag (Ordinal: 107, Address: 0x906e1)
- NlsMbOemCodePageTag (Ordinal: 108, Address: 0x906e0)
- NtAcceptConnectPort (Ordinal: 109, Address: 0xbe20)
- NtAccessCheck (Ordinal: 110, Address: 0xbe30)
- NtAccessCheckAndAuditAlarm (Ordinal: 111, Address: 0xbe40)
- NtAddAtom (Ordinal: 112, Address: 0xbe50)
- NtAdjustGroupsToken (Ordinal: 113, Address: 0xbe60)
- NtAdjustPrivilegesToken (Ordinal: 114, Address: 0xbe70)
- NtAlertResumeThread (Ordinal: 115, Address: 0xbe80)
- NtAlertThread (Ordinal: 116, Address: 0xbe90)
- NtAlertThreadByThreadId (Ordinal: 117, Address: 0xbea0)
- NtAllocateLocallyUniqueId (Ordinal: 118, Address: 0xbeb0)
- NtAllocateReserveObject (Ordinal: 119, Address: 0xbec0)
- NtAllocateUuids (Ordinal: 120, Address: 0xbed0)
- NtAllocateVirtualMemory (Ordinal: 121, Address: 0xbee0)
- NtAllocateVirtualMemoryEx (Ordinal: 122, Address: 0xbef0)
- NtAreMappedFilesTheSame (Ordinal: 123, Address: 0xbf00)
- NtAssignProcessToJobObject (Ordinal: 124, Address: 0xbf10)
- NtCallbackReturn (Ordinal: 125, Address: 0xbf20)
- NtCancelIoFile (Ordinal: 126, Address: 0xbf30)
- NtCancelIoFileEx (Ordinal: 127, Address: 0xbf40)
- NtCancelSynchronousIoFile (Ordinal: 128, Address: 0xbf50)
- NtCancelTimer (Ordinal: 129, Address: 0xbf60)
- NtClearEvent (Ordinal: 130, Address: 0xbf70)
- NtClose (Ordinal: 131, Address: 0xbf80)
- NtCommitTransaction (Ordinal: 132, Address: 0xbf90)
- NtCompareObjects (Ordinal: 133, Address: 0xbfa0)
- NtCompareTokens (Ordinal: 134, Address: 0xbfb0)
- NtCompleteConnectPort (Ordinal: 135, Address: 0xbfc0)
- NtConnectPort (Ordinal: 136, Address: 0xbfd0)
- NtContinue (Ordinal: 137, Address: 0xbfe0)
- NtContinueEx (Ordinal: 138, Address: 0xbff0)
- NtCreateDebugObject (Ordinal: 139, Address: 0xc000)
- NtCreateDirectoryObject (Ordinal: 140, Address: 0xc010)
- NtCreateEvent (Ordinal: 141, Address: 0xc020)
- NtCreateFile (Ordinal: 142, Address: 0xc030)
- NtCreateIoCompletion (Ordinal: 143, Address: 0xc040)
- NtCreateJobObject (Ordinal: 144, Address: 0xc050)
- NtCreateKey (Ordinal: 145, Address: 0xc060)
- NtCreateKeyTransacted (Ordinal: 146, Address: 0xc070)
- NtCreateKeyedEvent (Ordinal: 147, Address: 0xc080)
- NtCreateLowBoxToken (Ordinal: 148, Address: 0xc090)
- NtCreateMailslotFile (Ordinal: 149, Address: 0xc0a0)
- NtCreateMutant (Ordinal: 150, Address: 0xc0b0)
- NtCreateNamedPipeFile (Ordinal: 151, Address: 0xc0c0)
- NtCreatePagingFile (Ordinal: 152, Address: 0xc0d0)
- NtCreatePort (Ordinal: 153, Address: 0xc0e0)
- NtCreateSection (Ordinal: 154, Address: 0xc0f0)
- NtCreateSemaphore (Ordinal: 155, Address: 0xc100)
- NtCreateSymbolicLinkObject (Ordinal: 156, Address: 0xc110)
- NtCreateThread (Ordinal: 157, Address: 0xc120)
- NtCreateThreadEx (Ordinal: 158, Address: 0xc130)
- NtCreateTimer (Ordinal: 159, Address: 0xc140)
- NtCreateToken (Ordinal: 160, Address: 0xc150)
- NtCreateTransaction (Ordinal: 161, Address: 0xc160)
- NtCreateUserProcess (Ordinal: 162, Address: 0xc170)
- NtCurrentTeb (Ordinal: 163, Address: 0xcf24)
- NtDebugActiveProcess (Ordinal: 164, Address: 0xc180)
- NtDebugContinue (Ordinal: 165, Address: 0xc190)
- NtDelayExecution (Ordinal: 166, Address: 0xc1a0)
- NtDeleteAtom (Ordinal: 167, Address: 0xc1b0)
- NtDeleteFile (Ordinal: 168, Address: 0xc1c0)
- NtDeleteKey (Ordinal: 169, Address: 0xc1d0)
- NtDeleteValueKey (Ordinal: 170, Address: 0xc1e0)
- NtDeviceIoControlFile (Ordinal: 171, Address: 0xc1f0)
- NtDisplayString (Ordinal: 172, Address: 0xc200)
- NtDuplicateObject (Ordinal: 173, Address: 0xc210)
- NtDuplicateToken (Ordinal: 174, Address: 0xc220)
- NtEnumerateKey (Ordinal: 175, Address: 0xc230)
- NtEnumerateValueKey (Ordinal: 176, Address: 0xc240)
- NtFilterToken (Ordinal: 177, Address: 0xc250)
- NtFindAtom (Ordinal: 178, Address: 0xc260)
- NtFlushBuffersFile (Ordinal: 179, Address: 0xc270)
- NtFlushBuffersFileEx (Ordinal: 180, Address: 0xc280)
- NtFlushInstructionCache (Ordinal: 181, Address: 0xc290)
- NtFlushKey (Ordinal: 182, Address: 0xc2a0)
- NtFlushProcessWriteBuffers (Ordinal: 183, Address: 0xc2b0)
- NtFlushVirtualMemory (Ordinal: 184, Address: 0xc2c0)
- NtFreeVirtualMemory (Ordinal: 185, Address: 0xc2d0)
- NtFsControlFile (Ordinal: 186, Address: 0xc2e0)
- NtGetContextThread (Ordinal: 187, Address: 0xc2f0)
- NtGetCurrentProcessorNumber (Ordinal: 188, Address: 0xc300)
- NtGetNextThread (Ordinal: 189, Address: 0xc310)
- NtGetNlsSectionPtr (Ordinal: 190, Address: 0xc320)
- NtGetTickCount (Ordinal: 191, Address: 0x153b0)
- NtGetWriteWatch (Ordinal: 192, Address: 0xc330)
- NtImpersonateAnonymousToken (Ordinal: 193, Address: 0xc340)
- NtInitializeNlsFiles (Ordinal: 194, Address: 0xc350)
- NtInitiatePowerAction (Ordinal: 195, Address: 0xc360)
- NtIsProcessInJob (Ordinal: 196, Address: 0xc370)
- NtListenPort (Ordinal: 197, Address: 0xc380)
- NtLoadDriver (Ordinal: 198, Address: 0xc390)
- NtLoadKey2 (Ordinal: 199, Address: 0xc3b0)
- NtLoadKey (Ordinal: 200, Address: 0xc3a0)
- NtLoadKeyEx (Ordinal: 201, Address: 0xc3c0)
- NtLockFile (Ordinal: 202, Address: 0xc3d0)
- NtLockVirtualMemory (Ordinal: 203, Address: 0xc3e0)
- NtMakePermanentObject (Ordinal: 204, Address: 0xc3f0)
- NtMakeTemporaryObject (Ordinal: 205, Address: 0xc400)
- NtMapViewOfSection (Ordinal: 206, Address: 0xc410)
- NtMapViewOfSectionEx (Ordinal: 207, Address: 0xc420)
- NtNotifyChangeDirectoryFile (Ordinal: 208, Address: 0xc430)
- NtNotifyChangeKey (Ordinal: 209, Address: 0xc440)
- NtNotifyChangeMultipleKeys (Ordinal: 210, Address: 0xc450)
- NtOpenDirectoryObject (Ordinal: 211, Address: 0xc460)
- NtOpenEvent (Ordinal: 212, Address: 0xc470)
- NtOpenFile (Ordinal: 213, Address: 0xc480)
- NtOpenIoCompletion (Ordinal: 214, Address: 0xc490)
- NtOpenJobObject (Ordinal: 215, Address: 0xc4a0)
- NtOpenKey (Ordinal: 216, Address: 0xc4b0)
- NtOpenKeyEx (Ordinal: 217, Address: 0xc4c0)
- NtOpenKeyTransacted (Ordinal: 218, Address: 0xc4d0)
- NtOpenKeyTransactedEx (Ordinal: 219, Address: 0xc4e0)
- NtOpenKeyedEvent (Ordinal: 220, Address: 0xc4f0)
- NtOpenMutant (Ordinal: 221, Address: 0xc500)
- NtOpenProcess (Ordinal: 222, Address: 0xc510)
- NtOpenProcessToken (Ordinal: 223, Address: 0xc520)
- NtOpenProcessTokenEx (Ordinal: 224, Address: 0xc530)
- NtOpenSection (Ordinal: 225, Address: 0xc540)
- NtOpenSemaphore (Ordinal: 226, Address: 0xc550)
- NtOpenSymbolicLinkObject (Ordinal: 227, Address: 0xc560)
- NtOpenThread (Ordinal: 228, Address: 0xc570)
- NtOpenThreadToken (Ordinal: 229, Address: 0xc580)
- NtOpenThreadTokenEx (Ordinal: 230, Address: 0xc590)
- NtOpenTimer (Ordinal: 231, Address: 0xc5a0)
- NtPowerInformation (Ordinal: 232, Address: 0xc5b0)
- NtPrivilegeCheck (Ordinal: 233, Address: 0xc5c0)
- NtProtectVirtualMemory (Ordinal: 234, Address: 0xc5d0)
- NtPulseEvent (Ordinal: 235, Address: 0xc5e0)
- NtQueryAttributesFile (Ordinal: 236, Address: 0xc5f0)
- NtQueryDefaultLocale (Ordinal: 237, Address: 0xc600)
- NtQueryDefaultUILanguage (Ordinal: 238, Address: 0xc610)
- NtQueryDirectoryFile (Ordinal: 239, Address: 0xc620)
- NtQueryDirectoryObject (Ordinal: 240, Address: 0xc630)
- NtQueryEaFile (Ordinal: 241, Address: 0xc640)
- NtQueryEvent (Ordinal: 242, Address: 0xc650)
- NtQueryFullAttributesFile (Ordinal: 243, Address: 0xc660)
- NtQueryInformationAtom (Ordinal: 244, Address: 0xc670)
- NtQueryInformationFile (Ordinal: 245, Address: 0xc680)
- NtQueryInformationJobObject (Ordinal: 246, Address: 0xc690)
- NtQueryInformationProcess (Ordinal: 247, Address: 0x153d0)
- NtQueryInformationThread (Ordinal: 248, Address: 0xc6b0)
- NtQueryInformationToken (Ordinal: 249, Address: 0xc6c0)
- NtQueryInstallUILanguage (Ordinal: 250, Address: 0xc6d0)
- NtQueryIoCompletion (Ordinal: 251, Address: 0xc6e0)
- NtQueryKey (Ordinal: 252, Address: 0xc6f0)
- NtQueryLicenseValue (Ordinal: 253, Address: 0xc700)
- NtQueryMultipleValueKey (Ordinal: 254, Address: 0xc710)
- NtQueryMutant (Ordinal: 255, Address: 0xc720)
- NtQueryObject (Ordinal: 256, Address: 0xc730)
- NtQueryPerformanceCounter (Ordinal: 257, Address: 0xc740)
- NtQuerySection (Ordinal: 258, Address: 0xc750)
- NtQuerySecurityObject (Ordinal: 259, Address: 0xc760)
- NtQuerySemaphore (Ordinal: 260, Address: 0xc770)
- NtQuerySymbolicLinkObject (Ordinal: 261, Address: 0xc780)
- NtQuerySystemEnvironmentValue (Ordinal: 262, Address: 0xc790)
- NtQuerySystemEnvironmentValueEx (Ordinal: 263, Address: 0xc7a0)
- NtQuerySystemInformation (Ordinal: 264, Address: 0xc7b0)
- NtQuerySystemInformationEx (Ordinal: 265, Address: 0xc7c0)
- NtQuerySystemTime (Ordinal: 266, Address: 0xc7d0)
- NtQueryTimer (Ordinal: 267, Address: 0xc7e0)
- NtQueryTimerResolution (Ordinal: 268, Address: 0xc7f0)
- NtQueryValueKey (Ordinal: 269, Address: 0xc800)
- NtQueryVirtualMemory (Ordinal: 270, Address: 0xc810)
- NtQueryVolumeInformationFile (Ordinal: 271, Address: 0xc820)
- NtQueueApcThread (Ordinal: 272, Address: 0xc830)
- NtQueueApcThreadEx (Ordinal: 273, Address: 0xc840)
- NtRaiseException (Ordinal: 274, Address: 0xc850)
- NtRaiseHardError (Ordinal: 275, Address: 0xc860)
- NtReadFile (Ordinal: 276, Address: 0xc870)
- NtReadFileScatter (Ordinal: 277, Address: 0xc880)
- NtReadVirtualMemory (Ordinal: 278, Address: 0xc890)
- NtRegisterThreadTerminatePort (Ordinal: 279, Address: 0xc8a0)
- NtReleaseKeyedEvent (Ordinal: 280, Address: 0xc8b0)
- NtReleaseMutant (Ordinal: 281, Address: 0xc8c0)
- NtReleaseSemaphore (Ordinal: 282, Address: 0xc8d0)
- NtRemoveIoCompletion (Ordinal: 283, Address: 0xc8e0)
- NtRemoveIoCompletionEx (Ordinal: 284, Address: 0xc8f0)
- NtRemoveProcessDebug (Ordinal: 285, Address: 0xc900)
- NtRenameKey (Ordinal: 286, Address: 0xc910)
- NtReplaceKey (Ordinal: 287, Address: 0xc920)
- NtReplyWaitReceivePort (Ordinal: 288, Address: 0xc930)
- NtRequestWaitReplyPort (Ordinal: 289, Address: 0xc940)
- NtResetEvent (Ordinal: 290, Address: 0xc950)
- NtResetWriteWatch (Ordinal: 291, Address: 0xc960)
- NtRestoreKey (Ordinal: 292, Address: 0xc970)
- NtResumeProcess (Ordinal: 293, Address: 0xc980)
- NtResumeThread (Ordinal: 294, Address: 0xc990)
- NtRollbackTransaction (Ordinal: 295, Address: 0xc9a0)
- NtSaveKey (Ordinal: 296, Address: 0xc9b0)
- NtSecureConnectPort (Ordinal: 297, Address: 0xc9c0)
- NtSetContextThread (Ordinal: 298, Address: 0xc9d0)
- NtSetDebugFilterState (Ordinal: 299, Address: 0xc9e0)
- NtSetDefaultLocale (Ordinal: 300, Address: 0xc9f0)
- NtSetDefaultUILanguage (Ordinal: 301, Address: 0xca00)
- NtSetEaFile (Ordinal: 302, Address: 0xca10)
- NtSetEvent (Ordinal: 303, Address: 0xca20)
- NtSetInformationDebugObject (Ordinal: 304, Address: 0xca30)
- NtSetInformationFile (Ordinal: 305, Address: 0xca40)
- NtSetInformationJobObject (Ordinal: 306, Address: 0xca50)
- NtSetInformationKey (Ordinal: 307, Address: 0xca60)
- NtSetInformationObject (Ordinal: 308, Address: 0xca70)
- NtSetInformationProcess (Ordinal: 309, Address: 0xca80)
- NtSetInformationThread (Ordinal: 310, Address: 0xca90)
- NtSetInformationToken (Ordinal: 311, Address: 0xcaa0)
- NtSetInformationVirtualMemory (Ordinal: 312, Address: 0xcab0)
- NtSetIntervalProfile (Ordinal: 313, Address: 0xcac0)
- NtSetIoCompletion (Ordinal: 314, Address: 0xcad0)
- NtSetIoCompletionEx (Ordinal: 315, Address: 0xcae0)
- NtSetLdtEntries (Ordinal: 316, Address: 0xcaf0)
- NtSetSecurityObject (Ordinal: 317, Address: 0xcb00)
- NtSetSystemInformation (Ordinal: 318, Address: 0xcb10)
- NtSetSystemTime (Ordinal: 319, Address: 0xcb20)
- NtSetThreadExecutionState (Ordinal: 320, Address: 0xcb30)
- NtSetTimer (Ordinal: 321, Address: 0xcb40)
- NtSetTimerResolution (Ordinal: 322, Address: 0xcb50)
- NtSetValueKey (Ordinal: 323, Address: 0xcb60)
- NtSetVolumeInformationFile (Ordinal: 324, Address: 0xcb70)
- NtShutdownSystem (Ordinal: 325, Address: 0xcb80)
- NtSignalAndWaitForSingleObject (Ordinal: 326, Address: 0xcb90)
- NtSuspendProcess (Ordinal: 327, Address: 0xcba0)
- NtSuspendThread (Ordinal: 328, Address: 0xcbb0)
- NtSystemDebugControl (Ordinal: 329, Address: 0xcbc0)
- NtTerminateJobObject (Ordinal: 330, Address: 0xcbd0)
- NtTerminateProcess (Ordinal: 331, Address: 0xcbe0)
- NtTerminateThread (Ordinal: 332, Address: 0xcbf0)
- NtTestAlert (Ordinal: 333, Address: 0xcc00)
- NtTraceControl (Ordinal: 334, Address: 0xcc10)
- NtUnloadDriver (Ordinal: 335, Address: 0xcc20)
- NtUnloadKey (Ordinal: 336, Address: 0xcc30)
- NtUnlockFile (Ordinal: 337, Address: 0xcc40)
- NtUnlockVirtualMemory (Ordinal: 338, Address: 0xcc50)
- NtUnmapViewOfSection (Ordinal: 339, Address: 0xcc60)
- NtUnmapViewOfSectionEx (Ordinal: 340, Address: 0xcc70)
- NtWaitForAlertByThreadId (Ordinal: 341, Address: 0xcc80)
- NtWaitForDebugEvent (Ordinal: 342, Address: 0xcc90)
- NtWaitForKeyedEvent (Ordinal: 343, Address: 0xcca0)
- NtWaitForMultipleObjects (Ordinal: 344, Address: 0xccb0)
- NtWaitForSingleObject (Ordinal: 345, Address: 0xccc0)
- NtWow64AllocateVirtualMemory64 (Ordinal: 346, Address: 0xccd0)
- NtWow64GetNativeSystemInformation (Ordinal: 347, Address: 0xcce0)
- NtWow64IsProcessorFeaturePresent (Ordinal: 348, Address: 0xccf0)
- NtWow64QueryInformationProcess64 (Ordinal: 349, Address: 0xcd00)
- NtWow64ReadVirtualMemory64 (Ordinal: 350, Address: 0xcd10)
- NtWow64WriteVirtualMemory64 (Ordinal: 351, Address: 0xcd20)
- NtWriteFile (Ordinal: 352, Address: 0xcd30)
- NtWriteFileGather (Ordinal: 353, Address: 0xcd40)
- NtWriteVirtualMemory (Ordinal: 354, Address: 0xcd50)
- NtYieldExecution (Ordinal: 355, Address: 0xcd60)
- NtdllDefWindowProc_A (Ordinal: 356, Address: 0x15440)
- NtdllDefWindowProc_W (Ordinal: 357, Address: 0x15450)
- NtdllDialogWndProc_A (Ordinal: 358, Address: 0x15480)
- NtdllDialogWndProc_W (Ordinal: 359, Address: 0x15490)
- PfxFindPrefix (Ordinal: 360, Address: 0x1360)
- PfxInitialize (Ordinal: 361, Address: 0x1380)
- PfxInsertPrefix (Ordinal: 362, Address: 0x13a0)
- PfxRemovePrefix (Ordinal: 363, Address: 0x13c0)
- RtlAbortRXact (Ordinal: 364, Address: 0x13e0)
- RtlAbsoluteToSelfRelativeSD (Ordinal: 365, Address: 0x15f80)
- RtlAcquirePebLock (Ordinal: 366, Address: 0x16010)
- RtlAcquireResourceExclusive (Ordinal: 367, Address: 0x16030)
- RtlAcquireResourceShared (Ordinal: 368, Address: 0x16110)
- RtlAcquireSRWLockExclusive (Ordinal: 369, Address: 0x161e0)
- RtlAcquireSRWLockShared (Ordinal: 370, Address: 0x16270)
- RtlActivateActivationContext (Ordinal: 371, Address: 0x162e0)
- RtlActivateActivationContextEx (Ordinal: 372, Address: 0x16320)
- RtlActivateActivationContextUnsafeFast (Ordinal: 373, Address: 0x1400)
- RtlAddAccessAllowedAce (Ordinal: 374, Address: 0x16400)
- RtlAddAccessAllowedAceEx (Ordinal: 375, Address: 0x16480)
- RtlAddAccessAllowedObjectAce (Ordinal: 376, Address: 0x16500)
- RtlAddAccessDeniedAce (Ordinal: 377, Address: 0x16580)
- RtlAddAccessDeniedAceEx (Ordinal: 378, Address: 0x16600)
- RtlAddAccessDeniedObjectAce (Ordinal: 379, Address: 0x16680)
- RtlAddAce (Ordinal: 380, Address: 0x16700)
- RtlAddActionToRXact (Ordinal: 381, Address: 0x1420)
- RtlAddAtomToAtomTable (Ordinal: 382, Address: 0x167e0)
- RtlAddAttributeActionToRXact (Ordinal: 383, Address: 0x1440)
- RtlAddAuditAccessAce (Ordinal: 384, Address: 0x16b40)
- RtlAddAuditAccessAceEx (Ordinal: 385, Address: 0x16bf0)
- RtlAddAuditAccessObjectAce (Ordinal: 386, Address: 0x16cb0)
- RtlAddMandatoryAce (Ordinal: 387, Address: 0x16d40)
- RtlAddProcessTrustLabelAce (Ordinal: 388, Address: 0x16df0)
- RtlAddRefActivationContext (Ordinal: 389, Address: 0x16ea0)
- RtlAddVectoredContinueHandler (Ordinal: 390, Address: 0x16ec0)
- RtlAddVectoredExceptionHandler (Ordinal: 391, Address: 0x16ef0)
- RtlAddressInSectionTable (Ordinal: 392, Address: 0x16f10)
- RtlAdjustPrivilege (Ordinal: 393, Address: 0x16f70)
- RtlAllocateAndInitializeSid (Ordinal: 394, Address: 0x171a0)
- RtlAllocateHandle (Ordinal: 395, Address: 0x17300)
- RtlAllocateHeap (Ordinal: 396, Address: 0x174e0)
- RtlAnsiCharToUnicodeChar (Ordinal: 397, Address: 0x17e90)
- RtlAnsiStringToUnicodeSize (Ordinal: 398, Address: 0x18050)
- RtlAnsiStringToUnicodeString (Ordinal: 399, Address: 0x18080)
- RtlAppendAsciizToString (Ordinal: 400, Address: 0x18170)
- RtlAppendStringToString (Ordinal: 401, Address: 0x181d0)
- RtlAppendUnicodeStringToString (Ordinal: 402, Address: 0x18240)
- RtlAppendUnicodeToString (Ordinal: 403, Address: 0x182d0)
- RtlApplyRXact (Ordinal: 404, Address: 0x1460)
- RtlApplyRXactNoFlush (Ordinal: 405, Address: 0x1480)
- RtlAreAllAccessesGranted (Ordinal: 406, Address: 0x18360)
- RtlAreAnyAccessesGranted (Ordinal: 407, Address: 0x18380)
- RtlAreBitsClear (Ordinal: 408, Address: 0x18390)
- RtlAreBitsSet (Ordinal: 409, Address: 0x184b0)
- RtlAssert (Ordinal: 410, Address: 0x185d0)
- RtlCaptureContext (Ordinal: 411, Address: 0xcdcc)
- RtlCaptureStackBackTrace (Ordinal: 412, Address: 0x18650)
- RtlCharToInteger (Ordinal: 413, Address: 0x18700)
- RtlCheckRegistryKey (Ordinal: 414, Address: 0x18890)
- RtlClearAllBits (Ordinal: 415, Address: 0x189a0)
- RtlClearBits (Ordinal: 416, Address: 0x18a10)
- RtlClosePropertySet (Ordinal: 417, Address: 0x14a0)
- RtlCompactHeap (Ordinal: 418, Address: 0x18b50)
- RtlCompareMemory (Ordinal: 419, Address: 0x18bb0)
- RtlCompareMemoryUlong (Ordinal: 420, Address: 0x18bf0)
- RtlCompareString (Ordinal: 421, Address: 0x18c40)
- RtlCompareUnicodeString (Ordinal: 422, Address: 0x18d10)
- RtlCompareUnicodeStrings (Ordinal: 423, Address: 0x18d60)
- RtlCompressBuffer (Ordinal: 424, Address: 0x18eb0)
- RtlComputeCrc32 (Ordinal: 425, Address: 0x19060)
- RtlConsoleMultiByteToUnicodeN (Ordinal: 426, Address: 0x14c0)
- RtlConvertDeviceFamilyInfoToString (Ordinal: 427, Address: 0x19100)
- RtlConvertExclusiveToShared (Ordinal: 428, Address: 0x14e0)
- RtlConvertLongToLargeInteger (Ordinal: 429, Address: 0x191f0)
- RtlConvertSharedToExclusive (Ordinal: 430, Address: 0x1500)
- RtlConvertSidToUnicodeString (Ordinal: 431, Address: 0x19200)
- RtlConvertToAutoInheritSecurityObject (Ordinal: 432, Address: 0x19370)
- RtlConvertUiListToApiList (Ordinal: 433, Address: 0x1520)
- RtlConvertUlongToLargeInteger (Ordinal: 434, Address: 0x193f0)
- RtlCopyContext (Ordinal: 435, Address: 0x19400)
- RtlCopyExtendedContext (Ordinal: 436, Address: 0x19590)
- RtlCopyLuid (Ordinal: 437, Address: 0x19890)
- RtlCopyLuidAndAttributesArray (Ordinal: 438, Address: 0x198b0)
- RtlCopySecurityDescriptor (Ordinal: 439, Address: 0x19930)
- RtlCopySid (Ordinal: 440, Address: 0x19d90)
- RtlCopySidAndAttributesArray (Ordinal: 441, Address: 0x1540)
- RtlCopyString (Ordinal: 442, Address: 0x19e30)
- RtlCopyUnicodeString (Ordinal: 443, Address: 0x19e80)
- RtlCreateAcl (Ordinal: 444, Address: 0x19ef0)
- RtlCreateActivationContext (Ordinal: 445, Address: 0x19fa0)
- RtlCreateAndSetSD (Ordinal: 446, Address: 0x1560)
- RtlCreateAtomTable (Ordinal: 447, Address: 0x1b320)
- RtlCreateEnvironment (Ordinal: 448, Address: 0x1b3f0)
- RtlCreateHeap (Ordinal: 449, Address: 0x1b530)
- RtlCreateProcessParameters (Ordinal: 450, Address: 0x1bdb0)
- RtlCreateProcessParametersEx (Ordinal: 451, Address: 0x1be10)
- RtlCreatePropertySet (Ordinal: 452, Address: 0x1580)
- RtlCreateQueryDebugBuffer (Ordinal: 453, Address: 0x1bf90)
- RtlCreateRegistryKey (Ordinal: 454, Address: 0x1c090)
- RtlCreateSecurityDescriptor (Ordinal: 455, Address: 0x1c180)
- RtlCreateTagHeap (Ordinal: 456, Address: 0x15a0)
- RtlCreateTimer (Ordinal: 457, Address: 0x1c1d0)
- RtlCreateTimerQueue (Ordinal: 458, Address: 0x1c3e0)
- RtlCreateUnicodeString (Ordinal: 459, Address: 0x1c550)
- RtlCreateUnicodeStringFromAsciiz (Ordinal: 460, Address: 0x1c5d0)
- RtlCreateUserProcess (Ordinal: 461, Address: 0x1c620)
- RtlCreateUserSecurityObject (Ordinal: 462, Address: 0x15c0)
- RtlCreateUserStack (Ordinal: 463, Address: 0x1c850)
- RtlCreateUserThread (Ordinal: 464, Address: 0x1cae0)
- RtlCustomCPToUnicodeN (Ordinal: 465, Address: 0x1ccb0)
- RtlCutoverTimeToSystemTime (Ordinal: 466, Address: 0x15e0)
- RtlDeNormalizeProcessParams (Ordinal: 467, Address: 0x1cda0)
- RtlDeactivateActivationContext (Ordinal: 468, Address: 0x1ce30)
- RtlDeactivateActivationContextUnsafeFast (Ordinal: 469, Address: 0x1600)
- RtlDebugPrintTimes (Ordinal: 470, Address: 0x1620)
- RtlDecodePointer (Ordinal: 471, Address: 0x1cf50)
- RtlDecodeSystemPointer (Ordinal: 472, Address: 0x1cf50)
- RtlDecompressBuffer (Ordinal: 473, Address: 0x1d010)
- RtlDecompressFragment (Ordinal: 474, Address: 0x1d0c0)
- RtlDefaultNpAcl (Ordinal: 475, Address: 0x1d4a0)
- RtlDelete (Ordinal: 476, Address: 0x1640)
- RtlDeleteAce (Ordinal: 477, Address: 0x1d500)
- RtlDeleteAtomFromAtomTable (Ordinal: 478, Address: 0x1d5f0)
- RtlDeleteCriticalSection (Ordinal: 479, Address: 0x1d7c0)
- RtlDeleteElementGenericTable (Ordinal: 480, Address: 0x1660)
- RtlDeleteElementGenericTableAvl (Ordinal: 481, Address: 0x1680)
- RtlDeleteNoSplay (Ordinal: 482, Address: 0x16a0)
- RtlDeleteOwnersRanges (Ordinal: 483, Address: 0x16c0)
- RtlDeleteRange (Ordinal: 484, Address: 0x16e0)
- RtlDeleteRegistryValue (Ordinal: 485, Address: 0x1d850)
- RtlDeleteResource (Ordinal: 486, Address: 0x1d980)
- RtlDeleteSecurityObject (Ordinal: 487, Address: 0x1da60)
- RtlDeleteTimer (Ordinal: 488, Address: 0x1dae0)
- RtlDeleteTimerQueueEx (Ordinal: 489, Address: 0x1dc80)
- RtlDeregisterWait (Ordinal: 490, Address: 0x1de70)
- RtlDeregisterWaitEx (Ordinal: 491, Address: 0x1de90)
- RtlDestroyAtomTable (Ordinal: 492, Address: 0x1dfb0)
- RtlDestroyEnvironment (Ordinal: 493, Address: 0x1e020)
- RtlDestroyHandleTable (Ordinal: 494, Address: 0x1e060)
- RtlDestroyHeap (Ordinal: 495, Address: 0x1e0e0)
- RtlDestroyProcessParameters (Ordinal: 496, Address: 0x1e3a0)
- RtlDestroyQueryDebugBuffer (Ordinal: 497, Address: 0x1e3d0)
- RtlDetermineDosPathNameType_U (Ordinal: 498, Address: 0x1e4b0)
- RtlDllShutdownInProgress (Ordinal: 499, Address: 0x1e560)
- RtlDoesFileExists_U (Ordinal: 500, Address: 0x1e570)
- RtlDosPathNameToNtPathName_U (Ordinal: 501, Address: 0x1e610)
- RtlDosPathNameToNtPathName_U_WithStatus (Ordinal: 502, Address: 0x1e650)
- RtlDosPathNameToRelativeNtPathName_U (Ordinal: 503, Address: 0x1ece0)
- RtlDosPathNameToRelativeNtPathName_U_WithStatus (Ordinal: 504, Address: 0x1ed20)
- RtlDosSearchPath_U (Ordinal: 505, Address: 0x1ee10)
- RtlDowncaseUnicodeChar (Ordinal: 506, Address: 0x1f0a0)
- RtlDowncaseUnicodeString (Ordinal: 507, Address: 0x1f100)
- RtlDumpResource (Ordinal: 508, Address: 0x1f1e0)
- RtlDuplicateUnicodeString (Ordinal: 509, Address: 0x1f280)
- RtlEmptyAtomTable (Ordinal: 510, Address: 0x1f410)
- RtlEncodePointer (Ordinal: 511, Address: 0x1f540)
- RtlEncodeSystemPointer (Ordinal: 512, Address: 0x1f540)
- RtlEnlargedIntegerMultiply (Ordinal: 513, Address: 0x1f600)
- RtlEnlargedUnsignedDivide (Ordinal: 514, Address: 0x1f610)
- RtlEnlargedUnsignedMultiply (Ordinal: 515, Address: 0x1f630)
- RtlEnterCriticalSection (Ordinal: 516, Address: 0x1f640)
- RtlEnumProcessHeaps (Ordinal: 517, Address: 0x1700)
- RtlEnumerateGenericTable (Ordinal: 518, Address: 0x1720)
- RtlEnumerateGenericTableWithoutSplaying (Ordinal: 519, Address: 0x1f6f0)
- RtlEnumerateGenericTableWithoutSplayingAvl (Ordinal: 520, Address: 0x1f750)
- RtlEnumerateProperties (Ordinal: 521, Address: 0x1740)
- RtlEqualComputerName (Ordinal: 522, Address: 0x1f7b0)
- RtlEqualDomainName (Ordinal: 523, Address: 0x1f8b0)
- RtlEqualLuid (Ordinal: 524, Address: 0x1f9b0)
- RtlEqualPrefixSid (Ordinal: 525, Address: 0x1f9e0)
- RtlEqualSid (Ordinal: 526, Address: 0x1fa50)
- RtlEqualString (Ordinal: 527, Address: 0x1fb00)
- RtlEqualUnicodeString (Ordinal: 528, Address: 0x1fb40)
- RtlEraseUnicodeString (Ordinal: 529, Address: 0x1fbb0)
- RtlExitUserProcess (Ordinal: 530, Address: 0x1fbf0)
- RtlExitUserThread (Ordinal: 531, Address: 0x1fc50)
- RtlExpandEnvironmentStrings (Ordinal: 532, Address: 0x1fcc0)
- RtlExpandEnvironmentStrings_U (Ordinal: 533, Address: 0x1ffb0)
- RtlExtendHeap (Ordinal: 534, Address: 0x1760)
- RtlExtendedIntegerMultiply (Ordinal: 535, Address: 0x20040)
- RtlExtendedLargeIntegerDivide (Ordinal: 536, Address: 0x20070)
- RtlExtendedMagicDivide (Ordinal: 537, Address: 0x200c0)
- RtlFillMemory (Ordinal: 538, Address: 0x201e0)
- RtlFillMemoryUlong (Ordinal: 539, Address: 0x20210)
- RtlFinalReleaseOutOfProcessMemoryStream (Ordinal: 540, Address: 0x1780)
- RtlFindActivationContextSectionGuid (Ordinal: 541, Address: 0x20260)
- RtlFindActivationContextSectionString (Ordinal: 542, Address: 0x20510)
- RtlFindCharInUnicodeString (Ordinal: 543, Address: 0x20760)
- RtlFindClearBits (Ordinal: 544, Address: 0x20940)
- RtlFindClearBitsAndSet (Ordinal: 545, Address: 0x20a20)
- RtlFindClearRuns (Ordinal: 546, Address: 0x20ac0)
- RtlFindExportedRoutineByName (Ordinal: 547, Address: 0x20b40)
- RtlFindLastBackwardRunClear (Ordinal: 548, Address: 0x20bd0)
- RtlFindLastBackwardRunSet (Ordinal: 549, Address: 0x20c30)
- RtlFindLeastSignificantBit (Ordinal: 550, Address: 0x20c90)
- RtlFindLongestRunClear (Ordinal: 551, Address: 0x20d00)
- RtlFindLongestRunSet (Ordinal: 552, Address: 0x20df0)
- RtlFindMessage (Ordinal: 553, Address: 0x20ee0)
- RtlFindMostSignificantBit (Ordinal: 554, Address: 0x20fd0)
- RtlFindNextForwardRunClear (Ordinal: 555, Address: 0x21020)
- RtlFindNextForwardRunSet (Ordinal: 556, Address: 0x210c0)
- RtlFindRange (Ordinal: 557, Address: 0x17a0)
- RtlFindSetBits (Ordinal: 558, Address: 0x21160)
- RtlFindSetBitsAndClear (Ordinal: 559, Address: 0x21240)
- RtlFindSetRuns (Ordinal: 560, Address: 0x212e0)
- RtlFirstEntrySList (Ordinal: 561, Address: 0x21360)
- RtlFirstFreeAce (Ordinal: 562, Address: 0x21370)
- RtlFlsAlloc (Ordinal: 563, Address: 0x213f0)
- RtlFlsFree (Ordinal: 564, Address: 0x215b0)
- RtlFlsGetValue (Ordinal: 565, Address: 0x21730)
- RtlFlsSetValue (Ordinal: 566, Address: 0x217c0)
- RtlFlushPropertySet (Ordinal: 567, Address: 0x17c0)
- RtlFormatCurrentUserKeyPath (Ordinal: 568, Address: 0x218a0)
- RtlFormatMessage (Ordinal: 569, Address: 0x219d0)
- RtlFormatMessageEx (Ordinal: 570, Address: 0x21a30)
- RtlFreeActivationContextStack (Ordinal: 571, Address: 0x22310)
- RtlFreeAnsiString (Ordinal: 572, Address: 0x22380)
- RtlFreeHandle (Ordinal: 573, Address: 0x223d0)
- RtlFreeHeap (Ordinal: 574, Address: 0x22460)
- RtlFreeOemString (Ordinal: 575, Address: 0x22840)
- RtlFreeSid (Ordinal: 576, Address: 0x22890)
- RtlFreeThreadActivationContextStack (Ordinal: 577, Address: 0x22900)
- RtlFreeUnicodeString (Ordinal: 578, Address: 0x22920)
- RtlFreeUserStack (Ordinal: 579, Address: 0x22970)
- RtlGetDeviceFamilyInfoEnum (Ordinal: 580, Address: 0x23140)
- RtlGUIDFromString (Ordinal: 581, Address: 0x229e0)
- RtlGenerate8dot3Name (Ordinal: 582, Address: 0x17e0)
- RtlGetAce (Ordinal: 583, Address: 0x22c30)
- RtlGetActiveActivationContext (Ordinal: 584, Address: 0x22cc0)
- RtlGetCallersAddress (Ordinal: 585, Address: 0x22d00)
- RtlGetCompressionWorkSpaceSize (Ordinal: 586, Address: 0x22d60)
- RtlGetControlSecurityDescriptor (Ordinal: 587, Address: 0x22e40)
- RtlGetCurrentDirectory_U (Ordinal: 588, Address: 0x22ec0)
- RtlGetCurrentPeb (Ordinal: 589, Address: 0x22fc0)
- RtlGetCurrentProcessorNumberEx (Ordinal: 590, Address: 0x22fd0)
- RtlGetCurrentTransaction (Ordinal: 591, Address: 0x23030)
- RtlGetDaclSecurityDescriptor (Ordinal: 592, Address: 0x23070)
- RtlGetElementGenericTable (Ordinal: 593, Address: 0x231d0)
- RtlGetEnabledExtendedFeatures (Ordinal: 594, Address: 0x23220)
- RtlGetExePath (Ordinal: 595, Address: 0x23240)
- RtlGetExtendedContextLength (Ordinal: 596, Address: 0x232e0)
- RtlGetExtendedContextLength2 (Ordinal: 597, Address: 0x23310)
- RtlGetExtendedFeaturesMask (Ordinal: 598, Address: 0x23540)
- RtlGetFrame (Ordinal: 599, Address: 0x23560)
- RtlGetFullPathName_U (Ordinal: 600, Address: 0x23570)
- RtlGetGroupSecurityDescriptor (Ordinal: 601, Address: 0x237f0)
- RtlGetLastNtStatus (Ordinal: 602, Address: 0x23850)
- RtlGetLastWin32Error (Ordinal: 603, Address: 0x23860)
- RtlGetLocaleFileMappingAddress (Ordinal: 604, Address: 0x23870)
- RtlGetLongestNtPathLength (Ordinal: 605, Address: 0x238f0)
- RtlGetNativeSystemInformation (Ordinal: 606, Address: 0x23900)
- RtlGetNtGlobalFlags (Ordinal: 607, Address: 0x23910)
- RtlGetNtProductType (Ordinal: 608, Address: 0x23920)
- RtlGetNtVersionNumbers (Ordinal: 609, Address: 0x23950)
- RtlGetOwnerSecurityDescriptor (Ordinal: 610, Address: 0x239a0)
- RtlGetProductInfo (Ordinal: 611, Address: 0x23b20)
- RtlGetProcessHeaps (Ordinal: 612, Address: 0x23a00)
- RtlGetProcessPreferredUILanguages (Ordinal: 613, Address: 0x23a90)
- RtlGetSaclSecurityDescriptor (Ordinal: 614, Address: 0x23bd0)
- RtlGetSearchPath (Ordinal: 615, Address: 0x23c90)
- RtlGetSystemPreferredUILanguages (Ordinal: 616, Address: 0x23cc0)
- RtlGetSystemTimePrecise (Ordinal: 617, Address: 0x23d30)
- RtlGetThreadErrorMode (Ordinal: 618, Address: 0x23d80)
- RtlGetThreadPreferredUILanguages (Ordinal: 619, Address: 0x23d90)
- RtlGetUnloadEventTrace (Ordinal: 620, Address: 0x23e20)
- RtlGetUnloadEventTraceEx (Ordinal: 621, Address: 0x23e30)
- RtlGetUserInfoHeap (Ordinal: 622, Address: 0x23e60)
- RtlGetUserPreferredUILanguages (Ordinal: 623, Address: 0x24040)
- RtlGetVersion (Ordinal: 624, Address: 0x240b0)
- RtlGuidToPropertySetName (Ordinal: 625, Address: 0x1800)
- RtlHashUnicodeString (Ordinal: 626, Address: 0x24140)
- RtlIdentifierAuthoritySid (Ordinal: 627, Address: 0x242a0)
- RtlIdnToAscii (Ordinal: 628, Address: 0x242b0)
- RtlIdnToNameprepUnicode (Ordinal: 629, Address: 0x24a70)
- RtlIdnToUnicode (Ordinal: 630, Address: 0x24f40)
- RtlImageDirectoryEntryToData (Ordinal: 631, Address: 0x256e0)
- RtlImageNtHeader (Ordinal: 632, Address: 0x257c0)
- RtlImageRvaToSection (Ordinal: 633, Address: 0x25840)
- RtlImageRvaToVa (Ordinal: 634, Address: 0x25880)
- RtlImpersonateSelf (Ordinal: 635, Address: 0x25910)
- RtlInitAnsiString (Ordinal: 636, Address: 0x25a60)
- RtlInitAnsiStringEx (Ordinal: 637, Address: 0x25aa0)
- RtlInitCodePageTable (Ordinal: 638, Address: 0x25b00)
- RtlInitNlsTables (Ordinal: 639, Address: 0x25c00)
- RtlInitString (Ordinal: 640, Address: 0x25c50)
- RtlInitUnicodeString (Ordinal: 641, Address: 0x25c90)
- RtlInitUnicodeStringEx (Ordinal: 642, Address: 0x25cd0)
- RtlInitializeBitMap (Ordinal: 643, Address: 0x25d30)
- RtlInitializeConditionVariable (Ordinal: 644, Address: 0x25da0)
- RtlInitializeContext (Ordinal: 645, Address: 0x1820)
- RtlInitializeCriticalSection (Ordinal: 646, Address: 0x25db0)
- RtlInitializeCriticalSectionAndSpinCount (Ordinal: 647, Address: 0x25e10)
- RtlInitializeCriticalSectionEx (Ordinal: 648, Address: 0x25e70)
- RtlInitializeExtendedContext (Ordinal: 649, Address: 0x25fa0)
- RtlInitializeExtendedContext2 (Ordinal: 650, Address: 0x25fe0)
- RtlInitializeGenericTable (Ordinal: 651, Address: 0x262b0)
- RtlInitializeGenericTableAvl (Ordinal: 652, Address: 0x26370)
- RtlInitializeHandleTable (Ordinal: 653, Address: 0x263e0)
- RtlInitializeNtUserPfn (Ordinal: 654, Address: 0x26480)
- RtlInitializeRXact (Ordinal: 655, Address: 0x1840)
- RtlInitializeResource (Ordinal: 656, Address: 0x26520)
- RtlInitializeSListHead (Ordinal: 657, Address: 0x265e0)
- RtlInitializeSRWLock (Ordinal: 658, Address: 0x26600)
- RtlInitializeSid (Ordinal: 659, Address: 0x26610)
- RtlInsertElementGenericTable (Ordinal: 660, Address: 0x1860)
- RtlInsertElementGenericTableAvl (Ordinal: 661, Address: 0x26670)
- RtlInt64ToUnicodeString (Ordinal: 662, Address: 0x266d0)
- RtlIntegerToChar (Ordinal: 663, Address: 0x267f0)
- RtlIntegerToUnicodeString (Ordinal: 664, Address: 0x268d0)
- RtlInterlockedCompareExchange64 (Ordinal: 665, Address: 0x26980)
- RtlInterlockedFlushSList (Ordinal: 666, Address: 0x269a0)
- RtlInterlockedPopEntrySList (Ordinal: 667, Address: 0x26a30)
- RtlInterlockedPushEntrySList (Ordinal: 668, Address: 0x26b20)
- RtlInterlockedPushListSList (Ordinal: 669, Address: 0x26ba0)
- RtlInterlockedPushListSListEx (Ordinal: 670, Address: 0x26bd0)
- RtlIpv4AddressToStringA (Ordinal: 671, Address: 0x26c50)
- RtlIpv4AddressToStringExA (Ordinal: 672, Address: 0x26ca0)
- RtlIpv4AddressToStringExW (Ordinal: 673, Address: 0x26dd0)
- RtlIpv4AddressToStringW (Ordinal: 674, Address: 0x26f10)
- RtlIpv4StringToAddressA (Ordinal: 675, Address: 0x26f60)
- RtlIpv4StringToAddressExA (Ordinal: 676, Address: 0x26ff0)
- RtlIpv4StringToAddressExW (Ordinal: 677, Address: 0x27070)
- RtlIpv4StringToAddressW (Ordinal: 678, Address: 0x27110)
- RtlIpv6AddressToStringA (Ordinal: 679, Address: 0x271a0)
- RtlIpv6AddressToStringExA (Ordinal: 680, Address: 0x27210)
- RtlIpv6AddressToStringExW (Ordinal: 681, Address: 0x27560)
- RtlIpv6AddressToStringW (Ordinal: 682, Address: 0x275f0)
- RtlIpv6StringToAddressA (Ordinal: 683, Address: 0x27690)
- RtlIpv6StringToAddressExA (Ordinal: 684, Address: 0x27730)
- RtlIpv6StringToAddressExW (Ordinal: 685, Address: 0x277b0)
- RtlIpv6StringToAddressW (Ordinal: 686, Address: 0x27860)
- RtlIsActivationContextActive (Ordinal: 687, Address: 0x278e0)
- RtlIsCriticalSectionLocked (Ordinal: 688, Address: 0x27920)
- RtlIsCriticalSectionLockedByThread (Ordinal: 689, Address: 0x27940)
- RtlIsCurrentProcess (Ordinal: 690, Address: 0x27970)
- RtlIsCurrentThread (Ordinal: 691, Address: 0x279a0)
- RtlIsDosDeviceName_U (Ordinal: 692, Address: 0x279d0)
- RtlIsGenericTableEmpty (Ordinal: 693, Address: 0x1880)
- RtlIsNameLegalDOS8Dot3 (Ordinal: 694, Address: 0x27c80)
- RtlIsNormalizedString (Ordinal: 695, Address: 0x27e10)
- RtlIsProcessorFeaturePresent (Ordinal: 696, Address: 0x28140)
- RtlIsTextUnicode (Ordinal: 697, Address: 0x28160)
- RtlIsValidHandle (Ordinal: 698, Address: 0x28410)
- RtlIsValidIndexHandle (Ordinal: 699, Address: 0x28480)
- RtlIsValidLocaleName (Ordinal: 700, Address: 0x28550)
- RtlLargeIntegerAdd (Ordinal: 701, Address: 0x28710)
- RtlLargeIntegerArithmeticShift (Ordinal: 702, Address: 0x28730)
- RtlLargeIntegerDivide (Ordinal: 703, Address: 0x28750)
- RtlLargeIntegerNegate (Ordinal: 704, Address: 0x287a0)
- RtlLargeIntegerShiftLeft (Ordinal: 705, Address: 0x287c0)
- RtlLargeIntegerShiftRight (Ordinal: 706, Address: 0x287e0)
- RtlLargeIntegerSubtract (Ordinal: 707, Address: 0x28800)
- RtlLargeIntegerToChar (Ordinal: 708, Address: 0x28820)
- RtlLcidToLocaleName (Ordinal: 709, Address: 0x28960)
- RtlLeaveCriticalSection (Ordinal: 710, Address: 0x28b70)
- RtlLengthRequiredSid (Ordinal: 711, Address: 0x28c20)
- RtlLengthSecurityDescriptor (Ordinal: 712, Address: 0x28c40)
- RtlLengthSid (Ordinal: 713, Address: 0x28e20)
- RtlLocalTimeToSystemTime (Ordinal: 714, Address: 0x28e90)
- RtlLocaleNameToLcid (Ordinal: 715, Address: 0x28f30)
- RtlLocateExtendedFeature (Ordinal: 716, Address: 0x29180)
- RtlLocateExtendedFeature2 (Ordinal: 717, Address: 0x291c0)
- RtlLocateLegacyContext (Ordinal: 718, Address: 0x29420)
- RtlLockHeap (Ordinal: 719, Address: 0x29440)
- RtlLookupAtomInAtomTable (Ordinal: 720, Address: 0x29490)
- RtlLookupElementGenericTable (Ordinal: 721, Address: 0x296f0)
- RtlLookupElementGenericTableAvl (Ordinal: 722, Address: 0x29740)
- RtlMakeSelfRelativeSD (Ordinal: 723, Address: 0x29790)
- RtlMapGenericMask (Ordinal: 724, Address: 0x29a40)
- RtlMoveMemory (Ordinal: 725, Address: 0x29a80)
- RtlMultiByteToUnicodeN (Ordinal: 726, Address: 0x29ab0)
- RtlMultiByteToUnicodeSize (Ordinal: 727, Address: 0x29bd0)
- RtlNewInstanceSecurityObject (Ordinal: 728, Address: 0x18a0)
- RtlNewSecurityGrantedAccess (Ordinal: 729, Address: 0x18c0)
- RtlNewSecurityObject (Ordinal: 730, Address: 0x29dc0)
- RtlNewSecurityObjectEx (Ordinal: 731, Address: 0x29e10)
- RtlNewSecurityObjectWithMultipleInheritance (Ordinal: 732, Address: 0x29f90)
- RtlNormalizeProcessParams (Ordinal: 733, Address: 0x2a020)
- RtlNormalizeString (Ordinal: 734, Address: 0x2a0b0)
- RtlNtStatusToDosError (Ordinal: 735, Address: 0x2a7d0)
- RtlNtStatusToDosErrorNoTeb (Ordinal: 736, Address: 0x2a940)
- RtlNumberGenericTableElements (Ordinal: 737, Address: 0x2a970)
- RtlNumberGenericTableElementsAvl (Ordinal: 738, Address: 0x2a9d0)
- RtlNumberOfClearBits (Ordinal: 739, Address: 0x2aa20)
- RtlNumberOfSetBits (Ordinal: 740, Address: 0x2aa90)
- RtlOemStringToUnicodeSize (Ordinal: 741, Address: 0x2ab60)
- RtlOemStringToUnicodeString (Ordinal: 742, Address: 0x2ad80)
- RtlOemToUnicodeN (Ordinal: 743, Address: 0x2ae70)
- RtlOpenCurrentUser (Ordinal: 744, Address: 0x2af90)
- RtlPcToFileHeader (Ordinal: 745, Address: 0x2b080)
- RtlPinAtomInAtomTable (Ordinal: 746, Address: 0x2b100)
- RtlPopFrame (Ordinal: 747, Address: 0x2b190)
- RtlPrefixString (Ordinal: 748, Address: 0x2b1b0)
- RtlPrefixUnicodeString (Ordinal: 749, Address: 0x2b290)
- RtlProcessFlsData (Ordinal: 750, Address: 0x2b3c0)
- RtlPropertySetNameToGuid (Ordinal: 751, Address: 0x18e0)
- RtlProtectHeap (Ordinal: 752, Address: 0x1900)
- RtlPushFrame (Ordinal: 753, Address: 0x2b610)
- RtlQueryActivationContextApplicationSettings (Ordinal: 754, Address: 0x2b630)
- RtlQueryAtomInAtomTable (Ordinal: 755, Address: 0x2b870)
- RtlQueryDepthSList (Ordinal: 756, Address: 0x2bca0)
- RtlQueryDynamicTimeZoneInformation (Ordinal: 757, Address: 0x2bcb0)
- RtlQueryEnvironmentVariable_U (Ordinal: 758, Address: 0x2bdf0)
- RtlQueryEnvironmentVariable (Ordinal: 759, Address: 0x2bce0)
- RtlQueryHeapInformation (Ordinal: 760, Address: 0x2bf80)
- RtlQueryInformationAcl (Ordinal: 761, Address: 0x2c080)
- RtlQueryInformationActivationContext (Ordinal: 762, Address: 0x2c230)
- RtlQueryInformationActiveActivationContext (Ordinal: 763, Address: 0x1920)
- RtlQueryInterfaceMemoryStream (Ordinal: 764, Address: 0x1940)
- RtlQueryPackageIdentity (Ordinal: 765, Address: 0x2ced0)
- RtlQueryPerformanceCounter (Ordinal: 766, Address: 0x2cf60)
- RtlQueryPerformanceFrequency (Ordinal: 767, Address: 0x2cfa0)
- RtlQueryProcessBackTraceInformation (Ordinal: 768, Address: 0x1960)
- RtlQueryProcessDebugInformation (Ordinal: 769, Address: 0x2cfc0)
- RtlQueryProcessHeapInformation (Ordinal: 770, Address: 0x1980)
- RtlQueryProcessLockInformation (Ordinal: 771, Address: 0x19a0)
- RtlQueryProcessPlaceholderCompatibilityMode (Ordinal: 772, Address: 0x2d860)
- RtlQueryProperties (Ordinal: 773, Address: 0x19c0)
- RtlQueryPropertyNames (Ordinal: 774, Address: 0x19e0)
- RtlQueryPropertySet (Ordinal: 775, Address: 0x1a00)
- RtlQueryRegistryValues (Ordinal: 776, Address: 0x2d8a0)
- RtlQueryRegistryValuesEx (Ordinal: 777, Address: 0x2d8a0)
- RtlQuerySecurityObject (Ordinal: 778, Address: 0x1a20)
- RtlQueryTagHeap (Ordinal: 779, Address: 0x1a40)
- RtlQueryTimeZoneInformation (Ordinal: 780, Address: 0x2de60)
- RtlQueryUnbiasedInterruptTime (Ordinal: 781, Address: 0x2de90)
- RtlQueueApcWow64Thread (Ordinal: 782, Address: 0x1a60)
- RtlQueueWorkItem (Ordinal: 783, Address: 0x2def0)
- RtlRaiseException (Ordinal: 784, Address: 0xce7c)
- RtlRaiseStatus (Ordinal: 785, Address: 0x2e020)
- RtlRandom (Ordinal: 786, Address: 0x2e040)
- RtlRandomEx (Ordinal: 787, Address: 0x2e0d0)
- RtlRbInsertNodeEx (Ordinal: 788, Address: 0x2e190)
- RtlRbRemoveNode (Ordinal: 789, Address: 0x2e400)
- RtlReAllocateHeap (Ordinal: 790, Address: 0x2e710)
- RtlReadMemoryStream (Ordinal: 791, Address: 0x1a80)
- RtlReadOutOfProcessMemoryStream (Ordinal: 792, Address: 0x1aa0)
- RtlRealPredecessor (Ordinal: 793, Address: 0x1ac0)
- RtlRealSuccessor (Ordinal: 794, Address: 0x1ae0)
- RtlRegisterSecureMemoryCacheCallback (Ordinal: 795, Address: 0x1b00)
- RtlRegisterWait (Ordinal: 796, Address: 0x2f240)
- RtlReleaseActivationContext (Ordinal: 797, Address: 0x2f3b0)
- RtlReleaseMemoryStream (Ordinal: 798, Address: 0x1b20)
- RtlReleasePath (Ordinal: 799, Address: 0x2f3d0)
- RtlReleasePebLock (Ordinal: 800, Address: 0x2f400)
- RtlReleaseRelativeName (Ordinal: 801, Address: 0x2f420)
- RtlReleaseResource (Ordinal: 802, Address: 0x2f430)
- RtlReleaseSRWLockExclusive (Ordinal: 803, Address: 0x2f4f0)
- RtlReleaseSRWLockShared (Ordinal: 804, Address: 0x2f580)
- RtlRemoteCall (Ordinal: 805, Address: 0x1b40)
- RtlRemoveVectoredContinueHandler (Ordinal: 806, Address: 0x2f660)
- RtlRemoveVectoredExceptionHandler (Ordinal: 807, Address: 0x2f680)
- RtlResetNtUserPfn (Ordinal: 808, Address: 0x2f6a0)
- RtlResetRtlTranslations (Ordinal: 809, Address: 0x2f6e0)
- RtlRestoreContext (Ordinal: 810, Address: 0x2f720)
- RtlRestoreLastWin32Error (Ordinal: 811, Address: 0x30e30)
- RtlRetrieveNtUserPfn (Ordinal: 812, Address: 0x2f790)
- RtlRevertMemoryStream (Ordinal: 813, Address: 0x1b60)
- RtlRunDecodeUnicodeString (Ordinal: 814, Address: 0x1b80)
- RtlRunEncodeUnicodeString (Ordinal: 815, Address: 0x1ba0)
- RtlRunOnceBeginInitialize (Ordinal: 816, Address: 0x2f8b0)
- RtlRunOnceComplete (Ordinal: 817, Address: 0x2f910)
- RtlRunOnceExecuteOnce (Ordinal: 818, Address: 0x2f9e0)
- RtlRunOnceInitialize (Ordinal: 819, Address: 0x2fa80)
- RtlSecondsSince1970ToTime (Ordinal: 820, Address: 0x2fa90)
- RtlSecondsSince1980ToTime (Ordinal: 821, Address: 0x2fac0)
- RtlSelfRelativeToAbsoluteSD (Ordinal: 822, Address: 0x2faf0)
- RtlSetAllBits (Ordinal: 823, Address: 0x2ff50)
- RtlSetBits (Ordinal: 824, Address: 0x2ffc0)
- RtlSetControlSecurityDescriptor (Ordinal: 825, Address: 0x30100)
- RtlSetCriticalSectionSpinCount (Ordinal: 826, Address: 0x30190)
- RtlSetCurrentDirectory_U (Ordinal: 827, Address: 0x301c0)
- RtlSetCurrentEnvironment (Ordinal: 828, Address: 0x30460)
- RtlSetCurrentTransaction (Ordinal: 829, Address: 0x30560)
- RtlSetDaclSecurityDescriptor (Ordinal: 830, Address: 0x305b0)
- RtlSetEnvironmentVariable (Ordinal: 831, Address: 0x30620)
- RtlSetExtendedFeaturesMask (Ordinal: 832, Address: 0x30b00)
- RtlSetGroupSecurityDescriptor (Ordinal: 833, Address: 0x30b40)
- RtlSetHeapInformation (Ordinal: 834, Address: 0x30b90)
- RtlSetInformationAcl (Ordinal: 835, Address: 0x1bc0)
- RtlSetIoCompletionCallback (Ordinal: 836, Address: 0x30ce0)
- RtlSetLastWin32Error (Ordinal: 837, Address: 0x30e30)
- RtlSetLastWin32ErrorAndNtStatusFromNtStatus (Ordinal: 838, Address: 0x30e50)
- RtlSetOwnerSecurityDescriptor (Ordinal: 839, Address: 0x30e90)
- RtlSetProcessPreferredUILanguages (Ordinal: 840, Address: 0x30ee0)
- RtlSetProperties (Ordinal: 841, Address: 0x1be0)
- RtlSetPropertyClassId (Ordinal: 842, Address: 0x1c00)
- RtlSetPropertyNames (Ordinal: 843, Address: 0x1c20)
- RtlSetPropertySetClassId (Ordinal: 844, Address: 0x1c40)
- RtlSetSaclSecurityDescriptor (Ordinal: 845, Address: 0x30f40)
- RtlSetSearchPathMode (Ordinal: 846, Address: 0x30fb0)
- RtlSetSecurityObject (Ordinal: 847, Address: 0x1c60)
- RtlSetThreadErrorMode (Ordinal: 848, Address: 0x31020)
- RtlSetThreadPreferredUILanguages (Ordinal: 849, Address: 0x31070)
- RtlSetTimeZoneInformation (Ordinal: 850, Address: 0x310d0)
- RtlSetUnhandledExceptionFilter (Ordinal: 851, Address: 0x310e0)
- RtlSetUnicodeCallouts (Ordinal: 852, Address: 0x1c80)
- RtlSetUserFlagsHeap (Ordinal: 853, Address: 0x310f0)
- RtlSetUserValueHeap (Ordinal: 854, Address: 0x31200)
- RtlSizeHeap (Ordinal: 855, Address: 0x31320)
- RtlSleepConditionVariableCS (Ordinal: 856, Address: 0x314d0)
- RtlSleepConditionVariableSRW (Ordinal: 857, Address: 0x31530)
- RtlSplay (Ordinal: 858, Address: 0x1ca0)
- RtlStartRXact (Ordinal: 859, Address: 0x1cc0)
- RtlStringFromGUID (Ordinal: 860, Address: 0x315e0)
- RtlSubAuthorityCountSid (Ordinal: 861, Address: 0x31700)
- RtlSubAuthoritySid (Ordinal: 862, Address: 0x31710)
- RtlSubtreePredecessor (Ordinal: 863, Address: 0x1ce0)
- RtlSubtreeSuccessor (Ordinal: 864, Address: 0x1d00)
- RtlSystemTimeToLocalTime (Ordinal: 865, Address: 0x31730)
- RtlTimeFieldsToTime (Ordinal: 866, Address: 0x317d0)
- RtlTimeToElapsedTimeFields (Ordinal: 867, Address: 0x319b0)
- RtlTimeToSecondsSince1970 (Ordinal: 868, Address: 0x31aa0)
- RtlTimeToSecondsSince1980 (Ordinal: 869, Address: 0x31b00)
- RtlTimeToTimeFields (Ordinal: 870, Address: 0x31b60)
- RtlTryAcquireSRWLockExclusive (Ordinal: 871, Address: 0x31d20)
- RtlTryAcquireSRWLockShared (Ordinal: 872, Address: 0x31d70)
- RtlTryEnterCriticalSection (Ordinal: 873, Address: 0x31db0)
- RtlUTF8ToUnicodeN (Ordinal: 874, Address: 0x31e20)
- RtlUlongByteSwap (Ordinal: 875, Address: 0xbe10)
- RtlUlonglongByteSwap (Ordinal: 876, Address: 0xbe00)
- RtlUnicodeStringToAnsiSize (Ordinal: 877, Address: 0x32070)
- RtlUnicodeStringToAnsiString (Ordinal: 878, Address: 0x320a0)
- RtlUnicodeStringToCountedOemString (Ordinal: 879, Address: 0x1d20)
- RtlUnicodeStringToInteger (Ordinal: 880, Address: 0x32190)
- RtlUnicodeStringToOemSize (Ordinal: 881, Address: 0x32370)
- RtlUnicodeStringToOemString (Ordinal: 882, Address: 0x32480)
- RtlUnicodeToCustomCPN (Ordinal: 883, Address: 0x32560)
- RtlUnicodeToMultiByteN (Ordinal: 884, Address: 0x32660)
- RtlUnicodeToMultiByteSize (Ordinal: 885, Address: 0x32790)
- RtlUnicodeToOemN (Ordinal: 886, Address: 0x32890)
- RtlUnicodeToUTF8N (Ordinal: 887, Address: 0x329c0)
- RtlUniform (Ordinal: 888, Address: 0x32b00)
- RtlUnlockHeap (Ordinal: 889, Address: 0x32b40)
- RtlUnwind (Ordinal: 890, Address: 0xce44)
- RtlUpcaseUnicodeChar (Ordinal: 891, Address: 0x32b90)
- RtlUpcaseUnicodeString (Ordinal: 892, Address: 0x32bd0)
- RtlUpcaseUnicodeStringToAnsiString (Ordinal: 893, Address: 0x32cb0)
- RtlUpcaseUnicodeStringToCountedOemString (Ordinal: 894, Address: 0x32da0)
- RtlUpcaseUnicodeStringToOemString (Ordinal: 895, Address: 0x32e80)
- RtlUpcaseUnicodeToCustomCPN (Ordinal: 896, Address: 0x32f70)
- RtlUpcaseUnicodeToMultiByteN (Ordinal: 897, Address: 0x330e0)
- RtlUpcaseUnicodeToOemN (Ordinal: 898, Address: 0x33150)
- RtlUpdateTimer (Ordinal: 899, Address: 0x331c0)
- RtlUpperChar (Ordinal: 900, Address: 0x332b0)
- RtlUpperString (Ordinal: 901, Address: 0x332d0)
- RtlUsageHeap (Ordinal: 902, Address: 0x1d40)
- RtlUserThreadStart (Ordinal: 903, Address: 0xceac)
- RtlUshortByteSwap (Ordinal: 904, Address: 0xbe18)
- RtlValidAcl (Ordinal: 905, Address: 0x33350)
- RtlValidRelativeSecurityDescriptor (Ordinal: 906, Address: 0x33480)
- RtlValidSecurityDescriptor (Ordinal: 907, Address: 0x334f0)
- RtlValidSid (Ordinal: 908, Address: 0x33510)
- RtlValidateHeap (Ordinal: 909, Address: 0x335b0)
- RtlValidateProcessHeaps (Ordinal: 910, Address: 0x1d60)
- RtlVerifyVersionInfo (Ordinal: 911, Address: 0x336f0)
- RtlWaitOnAddress (Ordinal: 912, Address: 0x34100)
- RtlWakeAddressAll (Ordinal: 913, Address: 0x343c0)
- RtlWakeAddressSingle (Ordinal: 914, Address: 0x34590)
- RtlWakeAllConditionVariable (Ordinal: 915, Address: 0x346a0)
- RtlWakeConditionVariable (Ordinal: 916, Address: 0x346c0)
- RtlWalkFrameChain (Ordinal: 917, Address: 0x346e0)
- RtlWalkHeap (Ordinal: 918, Address: 0x347a0)
- RtlWow64EnableFsRedirection (Ordinal: 919, Address: 0x34cd0)
- RtlWow64EnableFsRedirectionEx (Ordinal: 920, Address: 0x34d20)
- RtlWow64GetCurrentMachine (Ordinal: 921, Address: 0x34dd0)
- RtlWow64GetProcessMachines (Ordinal: 922, Address: 0x34de0)
- RtlWow64GetSharedInfoProcess (Ordinal: 923, Address: 0x34ea0)
- RtlWow64IsWowGuestMachineSupported (Ordinal: 924, Address: 0x34f20)
- RtlWriteMemoryStream (Ordinal: 925, Address: 0x1d80)
- RtlWriteRegistryValue (Ordinal: 926, Address: 0x34fb0)
- RtlZeroHeap (Ordinal: 927, Address: 0x1da0)
- RtlZeroMemory (Ordinal: 928, Address: 0x35130)
- RtlZombifyActivationContext (Ordinal: 929, Address: 0x35160)
- RtlpNtCreateKey (Ordinal: 930, Address: 0x351c0)
- RtlpNtEnumerateSubKey (Ordinal: 931, Address: 0x35240)
- RtlpNtMakeTemporaryKey (Ordinal: 932, Address: 0x35350)
- RtlpNtOpenKey (Ordinal: 933, Address: 0x35360)
- RtlpNtQueryValueKey (Ordinal: 934, Address: 0x35390)
- RtlpNtSetValueKey (Ordinal: 935, Address: 0x35490)
- RtlpUnWaitCriticalSection (Ordinal: 936, Address: 0x354e0)
- RtlpWaitForCriticalSection (Ordinal: 937, Address: 0x35550)
- RtlxAnsiStringToUnicodeSize (Ordinal: 938, Address: 0x18050)
- RtlxOemStringToUnicodeSize (Ordinal: 939, Address: 0x2ab60)
- RtlxUnicodeStringToAnsiSize (Ordinal: 940, Address: 0x32070)
- RtlxUnicodeStringToOemSize (Ordinal: 941, Address: 0x32370)
- TpAllocCleanupGroup (Ordinal: 942, Address: 0x35fd0)
- TpAllocIoCompletion (Ordinal: 943, Address: 0x360f0)
- TpAllocPool (Ordinal: 944, Address: 0x364c0)
- TpAllocTimer (Ordinal: 945, Address: 0x36570)
- TpAllocWait (Ordinal: 946, Address: 0x36800)
- TpAllocWork (Ordinal: 947, Address: 0x36880)
- TpCallbackLeaveCriticalSectionOnCompletion (Ordinal: 948, Address: 0x36990)
- TpCallbackMayRunLong (Ordinal: 949, Address: 0x36a00)
- TpCallbackReleaseMutexOnCompletion (Ordinal: 950, Address: 0x36b10)
- TpCallbackReleaseSemaphoreOnCompletion (Ordinal: 951, Address: 0x36b80)
- TpCallbackSetEventOnCompletion (Ordinal: 952, Address: 0x36c00)
- TpCallbackUnloadDllOnCompletion (Ordinal: 953, Address: 0x36c70)
- TpCancelAsyncIoOperation (Ordinal: 954, Address: 0x36ce0)
- TpDisassociateCallback (Ordinal: 955, Address: 0x36e10)
- TpIsTimerSet (Ordinal: 956, Address: 0x36f20)
- TpPostWork (Ordinal: 957, Address: 0x36f80)
- TpQueryPoolStackInformation (Ordinal: 958, Address: 0x36ff0)
- TpReleaseCleanupGroup (Ordinal: 959, Address: 0x37080)
- TpReleaseCleanupGroupMembers (Ordinal: 960, Address: 0x370e0)
- TpReleaseIoCompletion (Ordinal: 961, Address: 0x373e0)
- TpReleasePool (Ordinal: 962, Address: 0x374b0)
- TpReleaseTimer (Ordinal: 963, Address: 0x37540)
- TpReleaseWait (Ordinal: 964, Address: 0x375b0)
- TpReleaseWork (Ordinal: 965, Address: 0x37620)
- TpSetPoolMaxThreads (Ordinal: 966, Address: 0x37690)
- TpSetPoolMinThreads (Ordinal: 967, Address: 0x37730)
- TpSetPoolStackInformation (Ordinal: 968, Address: 0x37800)
- TpSetTimer (Ordinal: 969, Address: 0x37890)
- TpSetWait (Ordinal: 970, Address: 0x37b90)
- TpSimpleTryPost (Ordinal: 971, Address: 0x37d70)
- TpStartAsyncIoOperation (Ordinal: 972, Address: 0x37e70)
- TpWaitForIoCompletion (Ordinal: 973, Address: 0x37ee0)
- TpWaitForTimer (Ordinal: 974, Address: 0x37f60)
- TpWaitForWait (Ordinal: 975, Address: 0x37fe0)
- TpWaitForWork (Ordinal: 976, Address: 0x38060)
- VerSetConditionMask (Ordinal: 977, Address: 0x380e0)
- WinSqmEndSession (Ordinal: 978, Address: 0x38190)
- WinSqmIncrementDWORD (Ordinal: 979, Address: 0x381f0)
- WinSqmIsOptedIn (Ordinal: 980, Address: 0x38250)
- WinSqmSetDWORD (Ordinal: 981, Address: 0x38290)
- WinSqmSetIfMaxDWORD (Ordinal: 982, Address: 0x382f0)
- WinSqmStartSession (Ordinal: 983, Address: 0x38350)
- Wow64Transition (Ordinal: 984, Address: 0x8f020)
- ZwAcceptConnectPort (Ordinal: 985, Address: 0xbe20)
- ZwAccessCheck (Ordinal: 986, Address: 0xbe30)
- ZwAccessCheckAndAuditAlarm (Ordinal: 987, Address: 0xbe40)
- ZwAddAtom (Ordinal: 988, Address: 0xbe50)
- ZwAdjustGroupsToken (Ordinal: 989, Address: 0xbe60)
- ZwAdjustPrivilegesToken (Ordinal: 990, Address: 0xbe70)
- ZwAlertResumeThread (Ordinal: 991, Address: 0xbe80)
- ZwAlertThread (Ordinal: 992, Address: 0xbe90)
- ZwAlertThreadByThreadId (Ordinal: 993, Address: 0xbea0)
- ZwAllocateLocallyUniqueId (Ordinal: 994, Address: 0xbeb0)
- ZwAllocateUuids (Ordinal: 995, Address: 0xbed0)
- ZwAllocateVirtualMemory (Ordinal: 996, Address: 0xbee0)
- ZwAllocateVirtualMemoryEx (Ordinal: 997, Address: 0xbef0)
- ZwAreMappedFilesTheSame (Ordinal: 998, Address: 0xbf00)
- ZwAssignProcessToJobObject (Ordinal: 999, Address: 0xbf10)
- ZwCancelIoFile (Ordinal: 1000, Address: 0xbf30)
- ZwCancelIoFileEx (Ordinal: 1001, Address: 0xbf40)
- ZwCancelSynchronousIoFile (Ordinal: 1002, Address: 0xbf50)
- ZwCancelTimer (Ordinal: 1003, Address: 0xbf60)
- ZwClearEvent (Ordinal: 1004, Address: 0xbf70)
- ZwClose (Ordinal: 1005, Address: 0xbf80)
- ZwCompareObjects (Ordinal: 1006, Address: 0xbfa0)
- ZwCompareTokens (Ordinal: 1007, Address: 0xbfb0)
- ZwCompleteConnectPort (Ordinal: 1008, Address: 0xbfc0)
- ZwConnectPort (Ordinal: 1009, Address: 0xbfd0)
- ZwContinue (Ordinal: 1010, Address: 0xbfe0)
- ZwContinueEx (Ordinal: 1011, Address: 0xbff0)
- ZwCreateDirectoryObject (Ordinal: 1012, Address: 0xc010)
- ZwCreateEvent (Ordinal: 1013, Address: 0xc020)
- ZwCreateFile (Ordinal: 1014, Address: 0xc030)
- ZwCreateIoCompletion (Ordinal: 1015, Address: 0xc040)
- ZwCreateJobObject (Ordinal: 1016, Address: 0xc050)
- ZwCreateKey (Ordinal: 1017, Address: 0xc060)
- ZwCreateKeyTransacted (Ordinal: 1018, Address: 0xc070)
- ZwCreateKeyedEvent (Ordinal: 1019, Address: 0xc080)
- ZwCreateLowBoxToken (Ordinal: 1020, Address: 0xc090)
- ZwCreateMailslotFile (Ordinal: 1021, Address: 0xc0a0)
- ZwCreateMutant (Ordinal: 1022, Address: 0xc0b0)
- ZwCreateNamedPipeFile (Ordinal: 1023, Address: 0xc0c0)
- ZwCreatePagingFile (Ordinal: 1024, Address: 0xc0d0)
- ZwCreatePort (Ordinal: 1025, Address: 0xc0e0)
- ZwCreateSection (Ordinal: 1026, Address: 0xc0f0)
- ZwCreateSemaphore (Ordinal: 1027, Address: 0xc100)
- ZwCreateSymbolicLinkObject (Ordinal: 1028, Address: 0xc110)
- ZwCreateThread (Ordinal: 1029, Address: 0xc120)
- ZwCreateThreadEx (Ordinal: 1030, Address: 0xc130)
- ZwCreateTimer (Ordinal: 1031, Address: 0xc140)
- ZwCreateToken (Ordinal: 1032, Address: 0xc150)
- ZwCreateUserProcess (Ordinal: 1033, Address: 0xc170)
- ZwDebugActiveProcess (Ordinal: 1034, Address: 0xc180)
- ZwDebugContinue (Ordinal: 1035, Address: 0xc190)
- ZwDelayExecution (Ordinal: 1036, Address: 0xc1a0)
- ZwDeleteAtom (Ordinal: 1037, Address: 0xc1b0)
- ZwDeleteFile (Ordinal: 1038, Address: 0xc1c0)
- ZwDeleteKey (Ordinal: 1039, Address: 0xc1d0)
- ZwDeleteValueKey (Ordinal: 1040, Address: 0xc1e0)
- ZwDeviceIoControlFile (Ordinal: 1041, Address: 0xc1f0)
- ZwDisplayString (Ordinal: 1042, Address: 0xc200)
- ZwDuplicateObject (Ordinal: 1043, Address: 0xc210)
- ZwDuplicateToken (Ordinal: 1044, Address: 0xc220)
- ZwEnumerateKey (Ordinal: 1045, Address: 0xc230)
- ZwEnumerateValueKey (Ordinal: 1046, Address: 0xc240)
- ZwFilterToken (Ordinal: 1047, Address: 0xc250)
- ZwFindAtom (Ordinal: 1048, Address: 0xc260)
- ZwFlushBuffersFile (Ordinal: 1049, Address: 0xc270)
- ZwFlushBuffersFileEx (Ordinal: 1050, Address: 0xc280)
- ZwFlushInstructionCache (Ordinal: 1051, Address: 0xc290)
- ZwFlushKey (Ordinal: 1052, Address: 0xc2a0)
- ZwFlushProcessWriteBuffers (Ordinal: 1053, Address: 0xc2b0)
- ZwFlushVirtualMemory (Ordinal: 1054, Address: 0xc2c0)
- ZwFreeVirtualMemory (Ordinal: 1055, Address: 0xc2d0)
- ZwFsControlFile (Ordinal: 1056, Address: 0xc2e0)
- ZwGetContextThread (Ordinal: 1057, Address: 0xc2f0)
- ZwGetCurrentProcessorNumber (Ordinal: 1058, Address: 0xc300)
- ZwGetNlsSectionPtr (Ordinal: 1059, Address: 0xc320)
- ZwGetTickCount (Ordinal: 1060, Address: 0x153b0)
- ZwGetWriteWatch (Ordinal: 1061, Address: 0xc330)
- ZwImpersonateAnonymousToken (Ordinal: 1062, Address: 0xc340)
- ZwInitializeNlsFiles (Ordinal: 1063, Address: 0xc350)
- ZwInitiatePowerAction (Ordinal: 1064, Address: 0xc360)
- ZwIsProcessInJob (Ordinal: 1065, Address: 0xc370)
- ZwListenPort (Ordinal: 1066, Address: 0xc380)
- ZwLoadDriver (Ordinal: 1067, Address: 0xc390)
- ZwLoadKey2 (Ordinal: 1068, Address: 0xc3b0)
- ZwLoadKey (Ordinal: 1069, Address: 0xc3a0)
- ZwLockFile (Ordinal: 1070, Address: 0xc3d0)
- ZwLockVirtualMemory (Ordinal: 1071, Address: 0xc3e0)
- ZwMakePermanentObject (Ordinal: 1072, Address: 0xc3f0)
- ZwMakeTemporaryObject (Ordinal: 1073, Address: 0xc400)
- ZwMapViewOfSection (Ordinal: 1074, Address: 0xc410)
- ZwMapViewOfSectionEx (Ordinal: 1075, Address: 0xc420)
- ZwNotifyChangeDirectoryFile (Ordinal: 1076, Address: 0xc430)
- ZwNotifyChangeKey (Ordinal: 1077, Address: 0xc440)
- ZwNotifyChangeMultipleKeys (Ordinal: 1078, Address: 0xc450)
- ZwOpenDirectoryObject (Ordinal: 1079, Address: 0xc460)
- ZwOpenEvent (Ordinal: 1080, Address: 0xc470)
- ZwOpenFile (Ordinal: 1081, Address: 0xc480)
- ZwOpenIoCompletion (Ordinal: 1082, Address: 0xc490)
- ZwOpenJobObject (Ordinal: 1083, Address: 0xc4a0)
- ZwOpenKey (Ordinal: 1084, Address: 0xc4b0)
- ZwOpenKeyEx (Ordinal: 1085, Address: 0xc4c0)
- ZwOpenKeyTransacted (Ordinal: 1086, Address: 0xc4d0)
- ZwOpenKeyTransactedEx (Ordinal: 1087, Address: 0xc4e0)
- ZwOpenKeyedEvent (Ordinal: 1088, Address: 0xc4f0)
- ZwOpenMutant (Ordinal: 1089, Address: 0xc500)
- ZwOpenProcess (Ordinal: 1090, Address: 0xc510)
- ZwOpenProcessToken (Ordinal: 1091, Address: 0xc520)
- ZwOpenProcessTokenEx (Ordinal: 1092, Address: 0xc530)
- ZwOpenSection (Ordinal: 1093, Address: 0xc540)
- ZwOpenSemaphore (Ordinal: 1094, Address: 0xc550)
- ZwOpenSymbolicLinkObject (Ordinal: 1095, Address: 0xc560)
- ZwOpenThread (Ordinal: 1096, Address: 0xc570)
- ZwOpenThreadToken (Ordinal: 1097, Address: 0xc580)
- ZwOpenThreadTokenEx (Ordinal: 1098, Address: 0xc590)
- ZwOpenTimer (Ordinal: 1099, Address: 0xc5a0)
- ZwPowerInformation (Ordinal: 1100, Address: 0xc5b0)
- ZwPrivilegeCheck (Ordinal: 1101, Address: 0xc5c0)
- ZwProtectVirtualMemory (Ordinal: 1102, Address: 0xc5d0)
- ZwPulseEvent (Ordinal: 1103, Address: 0xc5e0)
- ZwQueryAttributesFile (Ordinal: 1104, Address: 0xc5f0)
- ZwQueryDefaultLocale (Ordinal: 1105, Address: 0xc600)
- ZwQueryDefaultUILanguage (Ordinal: 1106, Address: 0xc610)
- ZwQueryDirectoryFile (Ordinal: 1107, Address: 0xc620)
- ZwQueryDirectoryObject (Ordinal: 1108, Address: 0xc630)
- ZwQueryEaFile (Ordinal: 1109, Address: 0xc640)
- ZwQueryEvent (Ordinal: 1110, Address: 0xc650)
- ZwQueryFullAttributesFile (Ordinal: 1111, Address: 0xc660)
- ZwQueryInformationAtom (Ordinal: 1112, Address: 0xc670)
- ZwQueryInformationFile (Ordinal: 1113, Address: 0xc680)
- ZwQueryInformationJobObject (Ordinal: 1114, Address: 0xc690)
- ZwQueryInformationProcess (Ordinal: 1115, Address: 0x153d0)
- ZwQueryInformationThread (Ordinal: 1116, Address: 0xc6b0)
- ZwQueryInformationToken (Ordinal: 1117, Address: 0xc6c0)
- ZwQueryInstallUILanguage (Ordinal: 1118, Address: 0xc6d0)
- ZwQueryIoCompletion (Ordinal: 1119, Address: 0xc6e0)
- ZwQueryKey (Ordinal: 1120, Address: 0xc6f0)
- ZwQueryLicenseValue (Ordinal: 1121, Address: 0xc700)
- ZwQueryMultipleValueKey (Ordinal: 1122, Address: 0xc710)
- ZwQueryMutant (Ordinal: 1123, Address: 0xc720)
- ZwQueryObject (Ordinal: 1124, Address: 0xc730)
- ZwQueryPerformanceCounter (Ordinal: 1125, Address: 0xc740)
- ZwQuerySection (Ordinal: 1126, Address: 0xc750)
- ZwQuerySecurityObject (Ordinal: 1127, Address: 0xc760)
- ZwQuerySemaphore (Ordinal: 1128, Address: 0xc770)
- ZwQuerySymbolicLinkObject (Ordinal: 1129, Address: 0xc780)
- ZwQuerySystemEnvironmentValue (Ordinal: 1130, Address: 0xc790)
- ZwQuerySystemEnvironmentValueEx (Ordinal: 1131, Address: 0xc7a0)
- ZwQuerySystemInformation (Ordinal: 1132, Address: 0xc7b0)
- ZwQuerySystemInformationEx (Ordinal: 1133, Address: 0xc7c0)
- ZwQuerySystemTime (Ordinal: 1134, Address: 0xc7d0)
- ZwQueryTimer (Ordinal: 1135, Address: 0xc7e0)
- ZwQueryTimerResolution (Ordinal: 1136, Address: 0xc7f0)
- ZwQueryValueKey (Ordinal: 1137, Address: 0xc800)
- ZwQueryVirtualMemory (Ordinal: 1138, Address: 0xc810)
- ZwQueryVolumeInformationFile (Ordinal: 1139, Address: 0xc820)
- ZwQueueApcThread (Ordinal: 1140, Address: 0xc830)
- ZwQueueApcThreadEx (Ordinal: 1141, Address: 0xc840)
- ZwRaiseException (Ordinal: 1142, Address: 0xc850)
- ZwRaiseHardError (Ordinal: 1143, Address: 0xc860)
- ZwReadFile (Ordinal: 1144, Address: 0xc870)
- ZwReadFileScatter (Ordinal: 1145, Address: 0xc880)
- ZwReadVirtualMemory (Ordinal: 1146, Address: 0xc890)
- ZwRegisterThreadTerminatePort (Ordinal: 1147, Address: 0xc8a0)
- ZwReleaseKeyedEvent (Ordinal: 1148, Address: 0xc8b0)
- ZwReleaseMutant (Ordinal: 1149, Address: 0xc8c0)
- ZwReleaseSemaphore (Ordinal: 1150, Address: 0xc8d0)
- ZwRemoveIoCompletion (Ordinal: 1151, Address: 0xc8e0)
- ZwRemoveIoCompletionEx (Ordinal: 1152, Address: 0xc8f0)
- ZwRemoveProcessDebug (Ordinal: 1153, Address: 0xc900)
- ZwRenameKey (Ordinal: 1154, Address: 0xc910)
- ZwReplaceKey (Ordinal: 1155, Address: 0xc920)
- ZwReplyWaitReceivePort (Ordinal: 1156, Address: 0xc930)
- ZwRequestWaitReplyPort (Ordinal: 1157, Address: 0xc940)
- ZwResetEvent (Ordinal: 1158, Address: 0xc950)
- ZwResetWriteWatch (Ordinal: 1159, Address: 0xc960)
- ZwRestoreKey (Ordinal: 1160, Address: 0xc970)
- ZwResumeProcess (Ordinal: 1161, Address: 0xc980)
- ZwResumeThread (Ordinal: 1162, Address: 0xc990)
- ZwSaveKey (Ordinal: 1163, Address: 0xc9b0)
- ZwSecureConnectPort (Ordinal: 1164, Address: 0xc9c0)
- ZwSetContextThread (Ordinal: 1165, Address: 0xc9d0)
- ZwSetDebugFilterState (Ordinal: 1166, Address: 0xc9e0)
- ZwSetDefaultLocale (Ordinal: 1167, Address: 0xc9f0)
- ZwSetDefaultUILanguage (Ordinal: 1168, Address: 0xca00)
- ZwSetEaFile (Ordinal: 1169, Address: 0xca10)
- ZwSetEvent (Ordinal: 1170, Address: 0xca20)
- ZwSetInformationDebugObject (Ordinal: 1171, Address: 0xca30)
- ZwSetInformationFile (Ordinal: 1172, Address: 0xca40)
- ZwSetInformationJobObject (Ordinal: 1173, Address: 0xca50)
- ZwSetInformationKey (Ordinal: 1174, Address: 0xca60)
- ZwSetInformationObject (Ordinal: 1175, Address: 0xca70)
- ZwSetInformationProcess (Ordinal: 1176, Address: 0xca80)
- ZwSetInformationThread (Ordinal: 1177, Address: 0xca90)
- ZwSetInformationToken (Ordinal: 1178, Address: 0xcaa0)
- ZwSetInformationVirtualMemory (Ordinal: 1179, Address: 0xcab0)
- ZwSetIntervalProfile (Ordinal: 1180, Address: 0xcac0)
- ZwSetIoCompletion (Ordinal: 1181, Address: 0xcad0)
- ZwSetIoCompletionEx (Ordinal: 1182, Address: 0xcae0)
- ZwSetLdtEntries (Ordinal: 1183, Address: 0xcaf0)
- ZwSetSecurityObject (Ordinal: 1184, Address: 0xcb00)
- ZwSetSystemInformation (Ordinal: 1185, Address: 0xcb10)
- ZwSetSystemTime (Ordinal: 1186, Address: 0xcb20)
- ZwSetThreadExecutionState (Ordinal: 1187, Address: 0xcb30)
- ZwSetTimer (Ordinal: 1188, Address: 0xcb40)
- ZwSetTimerResolution (Ordinal: 1189, Address: 0xcb50)
- ZwSetValueKey (Ordinal: 1190, Address: 0xcb60)
- ZwSetVolumeInformationFile (Ordinal: 1191, Address: 0xcb70)
- ZwShutdownSystem (Ordinal: 1192, Address: 0xcb80)
- ZwSignalAndWaitForSingleObject (Ordinal: 1193, Address: 0xcb90)
- ZwSuspendProcess (Ordinal: 1194, Address: 0xcba0)
- ZwSuspendThread (Ordinal: 1195, Address: 0xcbb0)
- ZwSystemDebugControl (Ordinal: 1196, Address: 0xcbc0)
- ZwTerminateJobObject (Ordinal: 1197, Address: 0xcbd0)
- ZwTerminateProcess (Ordinal: 1198, Address: 0xcbe0)
- ZwTerminateThread (Ordinal: 1199, Address: 0xcbf0)
- ZwTestAlert (Ordinal: 1200, Address: 0xcc00)
- ZwTraceControl (Ordinal: 1201, Address: 0xcc10)
- ZwUnloadDriver (Ordinal: 1202, Address: 0xcc20)
- ZwUnloadKey (Ordinal: 1203, Address: 0xcc30)
- ZwUnlockFile (Ordinal: 1204, Address: 0xcc40)
- ZwUnlockVirtualMemory (Ordinal: 1205, Address: 0xcc50)
- ZwUnmapViewOfSection (Ordinal: 1206, Address: 0xcc60)
- ZwUnmapViewOfSectionEx (Ordinal: 1207, Address: 0xcc70)
- ZwWaitForAlertByThreadId (Ordinal: 1208, Address: 0xcc80)
- ZwWaitForDebugEvent (Ordinal: 1209, Address: 0xcc90)
- ZwWaitForKeyedEvent (Ordinal: 1210, Address: 0xcca0)
- ZwWaitForMultipleObjects (Ordinal: 1211, Address: 0xccb0)
- ZwWaitForSingleObject (Ordinal: 1212, Address: 0xccc0)
- ZwWow64AllocateVirtualMemory64 (Ordinal: 1213, Address: 0xccd0)
- ZwWow64GetNativeSystemInformation (Ordinal: 1214, Address: 0xcce0)
- ZwWow64IsProcessorFeaturePresent (Ordinal: 1215, Address: 0xccf0)
- ZwWow64ReadVirtualMemory64 (Ordinal: 1216, Address: 0xcd10)
- ZwWow64WriteVirtualMemory64 (Ordinal: 1217, Address: 0xcd20)
- ZwWriteFile (Ordinal: 1218, Address: 0xcd30)
- ZwWriteFileGather (Ordinal: 1219, Address: 0xcd40)
- ZwWriteVirtualMemory (Ordinal: 1220, Address: 0xcd50)
- ZwYieldExecution (Ordinal: 1221, Address: 0xcd60)
- _CIcos (Ordinal: 1222, Address: 0x383b0)
- _CIlog (Ordinal: 1223, Address: 0x383d0)
- _CIpow (Ordinal: 1224, Address: 0x383f0)
- _CIsin (Ordinal: 1225, Address: 0x38430)
- _CIsqrt (Ordinal: 1226, Address: 0x38450)
- __isascii (Ordinal: 1227, Address: 0x38760)
- __iscsym (Ordinal: 1228, Address: 0x38770)
- __iscsymf (Ordinal: 1229, Address: 0x387a0)
- __toascii (Ordinal: 1230, Address: 0x3a640)
- _alldiv (Ordinal: 1231, Address: 0x38490)
- _alldvrm (Ordinal: 1232, Address: 0xbccc)
- _allmul (Ordinal: 1233, Address: 0x38530)
- _alloca_probe (Ordinal: 1234, Address: 0xcf38)
- _allrem (Ordinal: 1235, Address: 0x385a0)
- _allshl (Ordinal: 1236, Address: 0xbca8)
- _allshr (Ordinal: 1237, Address: 0xbcb4)
- _atoi64 (Ordinal: 1238, Address: 0x3adb0)
- _aulldiv (Ordinal: 1239, Address: 0x38630)
- _aulldvrm (Ordinal: 1240, Address: 0xbcfc)
- _aullrem (Ordinal: 1241, Address: 0x38660)
- _aullshr (Ordinal: 1242, Address: 0xbcc0)
- _chkstk (Ordinal: 1243, Address: 0xcf2c)
- _errno (Ordinal: 1244, Address: 0x3af40)
- _fltused (Ordinal: 1245, Address: 0x1dc0)
- _ftol (Ordinal: 1246, Address: 0x3af50)
- _ftol2 (Ordinal: 1247, Address: 0x3af50)
- _ftol2_sse (Ordinal: 1248, Address: 0x3af50)
- _i64toa (Ordinal: 1249, Address: 0x3af70)
- _i64toa_s (Ordinal: 1250, Address: 0x3b090)
- _i64tow (Ordinal: 1251, Address: 0x3b200)
- _i64tow_s (Ordinal: 1252, Address: 0x3b330)
- _itoa (Ordinal: 1253, Address: 0x3b4b0)
- _itoa_s (Ordinal: 1254, Address: 0x3b4c0)
- _itow (Ordinal: 1255, Address: 0x3b530)
- _itow_s (Ordinal: 1256, Address: 0x3b540)
- _lfind (Ordinal: 1257, Address: 0x3b5b0)
- _ltoa (Ordinal: 1258, Address: 0x3b610)
- _ltoa_s (Ordinal: 1259, Address: 0x3b6b0)
- _ltow (Ordinal: 1260, Address: 0x3b720)
- _ltow_s (Ordinal: 1261, Address: 0x3b7d0)
- _makepath_s (Ordinal: 1262, Address: 0x3b840)
- _memccpy (Ordinal: 1263, Address: 0x3ba00)
- _memicmp (Ordinal: 1264, Address: 0x3ba40)
- _snprintf (Ordinal: 1265, Address: 0x152e0)
- _snprintf_s (Ordinal: 1266, Address: 0x3baa0)
- _snwprintf (Ordinal: 1267, Address: 0x3bb00)
- _snwprintf_s (Ordinal: 1268, Address: 0x3bb40)
- _splitpath (Ordinal: 1269, Address: 0x3bbb0)
- _splitpath_s (Ordinal: 1270, Address: 0x3bc30)
- _strcmpi (Ordinal: 1271, Address: 0x3bfd0)
- _stricmp (Ordinal: 1272, Address: 0x3bfd0)
- _strlwr (Ordinal: 1273, Address: 0x3c070)
- _strlwr_s (Ordinal: 1274, Address: 0x3c0a0)
- _strnicmp (Ordinal: 1275, Address: 0x3c110)
- _strupr (Ordinal: 1276, Address: 0x3c1e0)
- _strupr_s (Ordinal: 1277, Address: 0x3c210)
- _swprintf (Ordinal: 1278, Address: 0x15360)
- _tolower (Ordinal: 1279, Address: 0x3c280)
- _toupper (Ordinal: 1280, Address: 0x3c290)
- _ui64toa (Ordinal: 1281, Address: 0x3c2a0)
- _ui64toa_s (Ordinal: 1282, Address: 0x3c370)
- _ui64tow (Ordinal: 1283, Address: 0x3c490)
- _ui64tow_s (Ordinal: 1284, Address: 0x3c570)
- _ultoa (Ordinal: 1285, Address: 0x3c6a0)
- _ultoa_s (Ordinal: 1286, Address: 0x3c700)
- _ultow (Ordinal: 1287, Address: 0x3c730)
- _ultow_s (Ordinal: 1288, Address: 0x3c790)
- _vscprintf (Ordinal: 1289, Address: 0x3c7c0)
- _vscwprintf (Ordinal: 1290, Address: 0x3c800)
- _vsnprintf (Ordinal: 1291, Address: 0x3c840)
- _vsnprintf_s (Ordinal: 1292, Address: 0x3c880)
- _vsnwprintf (Ordinal: 1293, Address: 0x3c8e0)
- _vsnwprintf_s (Ordinal: 1294, Address: 0x3c920)
- _vswprintf (Ordinal: 1295, Address: 0x3c990)
- _wcsicmp (Ordinal: 1296, Address: 0x3c9d0)
- _wcslwr (Ordinal: 1297, Address: 0x3ca30)
- _wcslwr_s (Ordinal: 1298, Address: 0x3ca70)
- _wcsnicmp (Ordinal: 1299, Address: 0x3caf0)
- _wcstoi64 (Ordinal: 1300, Address: 0x3cb60)
- _wcstoui64 (Ordinal: 1301, Address: 0x3cf20)
- _wcsupr (Ordinal: 1302, Address: 0x3d1d0)
- _wcsupr_s (Ordinal: 1303, Address: 0x3d210)
- _wmakepath_s (Ordinal: 1304, Address: 0x3d290)
- _wsplitpath_s (Ordinal: 1305, Address: 0x3d490)
- _wtoi (Ordinal: 1306, Address: 0x3d870)
- _wtoi64 (Ordinal: 1307, Address: 0x3d880)
- _wtol (Ordinal: 1308, Address: 0x3d9a0)
- abs (Ordinal: 1309, Address: 0x3da60)
- atan (Ordinal: 1310, Address: 0x3fd60)
- atan2 (Ordinal: 1311, Address: 0x3fff0)
- atoi (Ordinal: 1312, Address: 0x40260)
- atol (Ordinal: 1313, Address: 0x40280)
- bsearch (Ordinal: 1314, Address: 0x404d0)
- bsearch_s (Ordinal: 1315, Address: 0x40550)
- ceil (Ordinal: 1316, Address: 0x41970)
- cos (Ordinal: 1317, Address: 0x422a0)
- fabs (Ordinal: 1318, Address: 0x439a0)
- floor (Ordinal: 1319, Address: 0x48130)
- isalnum (Ordinal: 1320, Address: 0x4e330)
- isalpha (Ordinal: 1321, Address: 0x4e350)
- iscntrl (Ordinal: 1322, Address: 0x4e370)
- isdigit (Ordinal: 1323, Address: 0x4e390)
- isgraph (Ordinal: 1324, Address: 0x4e3b0)
- islower (Ordinal: 1325, Address: 0x4e3d0)
- isprint (Ordinal: 1326, Address: 0x4e3f0)
- ispunct (Ordinal: 1327, Address: 0x4e410)
- isspace (Ordinal: 1328, Address: 0x4e430)
- isupper (Ordinal: 1329, Address: 0x4e450)
- iswalnum (Ordinal: 1330, Address: 0x4e470)
- iswalpha (Ordinal: 1331, Address: 0x4e4a0)
- iswascii (Ordinal: 1332, Address: 0x4e4d0)
- iswctype (Ordinal: 1333, Address: 0x4e4e0)
- iswdigit (Ordinal: 1334, Address: 0x4e510)
- iswgraph (Ordinal: 1335, Address: 0x4e530)
- iswlower (Ordinal: 1336, Address: 0x4e560)
- iswprint (Ordinal: 1337, Address: 0x4e580)
- iswspace (Ordinal: 1338, Address: 0x4e5b0)
- iswxdigit (Ordinal: 1339, Address: 0x4e5d0)
- isxdigit (Ordinal: 1340, Address: 0x4e600)
- labs (Ordinal: 1341, Address: 0x3da60)
- log (Ordinal: 1342, Address: 0x51040)
- mbstowcs (Ordinal: 1343, Address: 0x51ac0)
- memchr (Ordinal: 1344, Address: 0x51b60)
- memcmp (Ordinal: 1345, Address: 0x51b90)
- memcpy (Ordinal: 1346, Address: 0x51bf0)
- memcpy_s (Ordinal: 1347, Address: 0x51c60)
- memmove (Ordinal: 1348, Address: 0x51ce0)
- memmove_s (Ordinal: 1349, Address: 0x51cf0)
- memset (Ordinal: 1350, Address: 0x51d50)
- pow (Ordinal: 1351, Address: 0x5d490)
- qsort (Ordinal: 1352, Address: 0x5e480)
- qsort_s (Ordinal: 1353, Address: 0x5e4e0)
- sin (Ordinal: 1354, Address: 0x60150)
- sprintf (Ordinal: 1355, Address: 0x15320)
- sprintf_s (Ordinal: 1356, Address: 0x60560)
- sqrt (Ordinal: 1357, Address: 0x605b0)
- sscanf (Ordinal: 1358, Address: 0x608a0)
- strcat (Ordinal: 1359, Address: 0x614b0)
- strcat_s (Ordinal: 1360, Address: 0x614f0)
- strchr (Ordinal: 1361, Address: 0x61560)
- strcmp (Ordinal: 1362, Address: 0x61590)
- strcpy (Ordinal: 1363, Address: 0x615f0)
- strcpy_s (Ordinal: 1364, Address: 0x61620)
- strcspn (Ordinal: 1365, Address: 0x61680)
- strlen (Ordinal: 1366, Address: 0x61720)
- strncat (Ordinal: 1367, Address: 0x61750)
- strncat_s (Ordinal: 1368, Address: 0x617a0)
- strncmp (Ordinal: 1369, Address: 0x61870)
- strncpy (Ordinal: 1370, Address: 0x618d0)
- strncpy_s (Ordinal: 1371, Address: 0x61930)
- strnlen (Ordinal: 1372, Address: 0x619e0)
- strpbrk (Ordinal: 1373, Address: 0x61a30)
- strrchr (Ordinal: 1374, Address: 0x61a80)
- strspn (Ordinal: 1375, Address: 0x61ab0)
- strstr (Ordinal: 1376, Address: 0x61b00)
- strtok_s (Ordinal: 1377, Address: 0x61b70)
- strtol (Ordinal: 1378, Address: 0x61c30)
- strtoul (Ordinal: 1379, Address: 0x61e50)
- swprintf (Ordinal: 1380, Address: 0x15360)
- swprintf_s (Ordinal: 1381, Address: 0x621c0)
- tan (Ordinal: 1382, Address: 0x62220)
- tolower (Ordinal: 1383, Address: 0x62d80)
- toupper (Ordinal: 1384, Address: 0x62da0)
- towlower (Ordinal: 1385, Address: 0x62e30)
- towupper (Ordinal: 1386, Address: 0x62e70)
- vDbgPrintEx (Ordinal: 1387, Address: 0x656d0)
- vDbgPrintExWithPrefix (Ordinal: 1388, Address: 0x65710)
- vsprintf (Ordinal: 1389, Address: 0x66b80)
- vsprintf_s (Ordinal: 1390, Address: 0x66bc0)
- vswprintf_s (Ordinal: 1391, Address: 0x66c10)
- wcscat (Ordinal: 1392, Address: 0x67540)
- wcscat_s (Ordinal: 1393, Address: 0x67580)
- wcschr (Ordinal: 1394, Address: 0x67600)
- wcscmp (Ordinal: 1395, Address: 0x67630)
- wcscpy (Ordinal: 1396, Address: 0x67690)
- wcscpy_s (Ordinal: 1397, Address: 0x676c0)
- wcscspn (Ordinal: 1398, Address: 0x67720)
- wcslen (Ordinal: 1399, Address: 0x67780)
- wcsncat (Ordinal: 1400, Address: 0x677b0)
- wcsncat_s (Ordinal: 1401, Address: 0x67810)
- wcsncmp (Ordinal: 1402, Address: 0x67920)
- wcsncpy (Ordinal: 1403, Address: 0x67980)
- wcsncpy_s (Ordinal: 1404, Address: 0x679e0)
- wcsnlen (Ordinal: 1405, Address: 0x67a90)
- wcspbrk (Ordinal: 1406, Address: 0x67ac0)
- wcsrchr (Ordinal: 1407, Address: 0x67b20)
- wcsspn (Ordinal: 1408, Address: 0x67b50)
- wcsstr (Ordinal: 1409, Address: 0x67bb0)
- wcstok (Ordinal: 1410, Address: 0x67c30)
- wcstok_s (Ordinal: 1411, Address: 0x67ce0)
- wcstol (Ordinal: 1412, Address: 0x67da0)
- wcstombs (Ordinal: 1413, Address: 0x67fe0)
- wcstoul (Ordinal: 1414, Address: 0x68090)
- wine_server_call (Ordinal: 1415, Address: 0x6c150)
- wine_server_fd_to_handle (Ordinal: 1416, Address: 0x6c190)
- wine_server_handle_to_fd (Ordinal: 1417, Address: 0x6c200)
- __wine_unix_spawnvp (Ordinal: 1418, Address: 0x3acc0)
- __wine_ctrl_routine (Ordinal: 1419, Address: 0x3a650)
- __wine_syscall_dispatcher (Ordinal: 1420, Address: 0x8f030)
- __wine_unix_call_dispatcher (Ordinal: 1421, Address: 0x8f034)
- __wine_unixlib_handle (Ordinal: 1422, Address: 0x8f028)
- __wine_dbg_write (Ordinal: 1423, Address: 0x3aa80)
- __wine_dbg_get_channel_flags (Ordinal: 1424, Address: 0x3a680)
- __wine_dbg_header (Ordinal: 1425, Address: 0x3a7a0)
- __wine_dbg_output (Ordinal: 1426, Address: 0x3a940)
- __wine_dbg_strdup (Ordinal: 1427, Address: 0x3aa00)
- wine_get_version (Ordinal: 1428, Address: 0x6c140)
- wine_get_build_id (Ordinal: 1429, Address: 0x6c0d0)
- wine_get_host_version (Ordinal: 1430, Address: 0x6c0f0)
- wine_nt_to_unix_file_name (Ordinal: 1431, Address: 0xcd80)
- wine_unix_to_nt_file_name (Ordinal: 1432, Address: 0xcd90)
- __wine_rpc_NtReadFile (Ordinal: 1433, Address: 0xcd70)
- __wine_unix_call (Ordinal: 1434, Address: 0x3acb0)
Imported DLLs & Functions
No imported DLLs.