Exported Functions

• (Ordinal: 8, Address: 0x7fb10)
• A_SHAFinal (Ordinal: 9, Address: 0x40240)
• A_SHAInit (Ordinal: 10, Address: 0x41070)
• A_SHAUpdate (Ordinal: 11, Address: 0x410b0)
• AlpcAdjustCompletionListConcurrencyCount (Ordinal: 12, Address: 0xe08a0)
• AlpcFreeCompletionListMessage (Ordinal: 13, Address: 0x71730)
• AlpcGetCompletionListLastMessageInformation (Ordinal: 14, Address: 0xe08d0)
• AlpcGetCompletionListMessageAttributes (Ordinal: 15, Address: 0xe08f0)
• AlpcGetHeaderSize (Ordinal: 16, Address: 0x71460)
• AlpcGetMessageAttribute (Ordinal: 17, Address: 0x71420)
• AlpcGetMessageFromCompletionList (Ordinal: 18, Address: 0x10a60)
• AlpcGetOutstandingCompletionListMessageCount (Ordinal: 19, Address: 0x86380)
• AlpcInitializeMessageAttribute (Ordinal: 20, Address: 0x713c0)
• AlpcMaxAllowedMessageLength (Ordinal: 21, Address: 0x84d20)
• AlpcRegisterCompletionList (Ordinal: 22, Address: 0x86200)
• AlpcRegisterCompletionListWorkerThread (Ordinal: 23, Address: 0x76240)
• AlpcRundownCompletionList (Ordinal: 24, Address: 0x86340)
• AlpcUnregisterCompletionList (Ordinal: 25, Address: 0x86360)
• AlpcUnregisterCompletionListWorkerThread (Ordinal: 26, Address: 0x761e0)
• ApiSetQueryApiSetPresence (Ordinal: 27, Address: 0x77ea0)
• ApiSetQueryApiSetPresenceEx (Ordinal: 28, Address: 0x6a670)
• CsrAllocateCaptureBuffer (Ordinal: 29, Address: 0x8d50)
• CsrAllocateMessagePointer (Ordinal: 30, Address: 0x8d00)
• CsrCaptureMessageBuffer (Ordinal: 31, Address: 0x8850)
• CsrCaptureMessageMultiUnicodeStringsInPlace (Ordinal: 32, Address: 0x8b40)
• CsrCaptureMessageString (Ordinal: 33, Address: 0x8c50)
• CsrCaptureTimeout (Ordinal: 34, Address: 0xcb540)
• CsrClientCallServer (Ordinal: 35, Address: 0x89a0)
• CsrClientConnectToServer (Ordinal: 36, Address: 0x8e20)
• CsrFreeCaptureBuffer (Ordinal: 37, Address: 0x8970)
• CsrGetProcessId (Ordinal: 38, Address: 0xcb570)
• CsrIdentifyAlertableThread (Ordinal: 39, Address: 0x847b0)
• CsrSetPriorityClass (Ordinal: 40, Address: 0xd53f0)
• CsrVerifyRegion (Ordinal: 41, Address: 0xcb590)
• DbgBreakPoint (Ordinal: 42, Address: 0xa10d0)
• DbgPrint (Ordinal: 43, Address: 0x51ac0)
• DbgPrintEx (Ordinal: 44, Address: 0x51450)
• DbgPrintReturnControlC (Ordinal: 45, Address: 0xe0930)
• DbgPrompt (Ordinal: 46, Address: 0xe0980)
• DbgQueryDebugFilterState (Ordinal: 47, Address: 0xe09d0)
• DbgSetDebugFilterState (Ordinal: 48, Address: 0xe09e0)
• DbgUiConnectToDbg (Ordinal: 49, Address: 0xcc690)
• DbgUiContinue (Ordinal: 50, Address: 0xcc700)
• DbgUiConvertStateChangeStructure (Ordinal: 51, Address: 0xcc730)
• DbgUiConvertStateChangeStructureEx (Ordinal: 52, Address: 0xcc740)
• DbgUiDebugActiveProcess (Ordinal: 53, Address: 0xcc9f0)
• DbgUiGetThreadDebugObject (Ordinal: 54, Address: 0xcca60)
• DbgUiIssueRemoteBreakin (Ordinal: 55, Address: 0xcca80)
• DbgUiRemoteBreakin (Ordinal: 56, Address: 0xccaf0)
• DbgUiSetThreadDebugObject (Ordinal: 57, Address: 0xccb50)
• DbgUiStopDebugging (Ordinal: 58, Address: 0xccb70)
• DbgUiWaitStateChange (Ordinal: 59, Address: 0xccb90)
• DbgUserBreakPoint (Ordinal: 60, Address: 0xa10e0)
• EtwCheckCoverage (Ordinal: 61, Address: 0x86170)
• EtwCreateTraceInstanceId (Ordinal: 62, Address: 0x1109a0)
• EtwDeliverDataBlock (Ordinal: 63, Address: 0x452b0)
• EtwEnumerateProcessRegGuids (Ordinal: 64, Address: 0x110580)
• EtwEventActivityIdControl (Ordinal: 65, Address: 0x5cbe0)
• EtwEventEnabled (Ordinal: 66, Address: 0x51db0)
• EtwEventProviderEnabled (Ordinal: 67, Address: 0x75aa0)
• EtwEventRegister (Ordinal: 68, Address: 0x42e80)
• EtwEventSetInformation (Ordinal: 69, Address: 0x42af0)
• EtwEventUnregister (Ordinal: 70, Address: 0x514e0)
• EtwEventWrite (Ordinal: 71, Address: 0x50300)
• EtwEventWriteEndScenario (Ordinal: 72, Address: 0x4fd30)
• EtwEventWriteEx (Ordinal: 73, Address: 0x502b0)
• EtwEventWriteFull (Ordinal: 74, Address: 0x50260)
• EtwEventWriteNoRegistration (Ordinal: 75, Address: 0x61ea0)
• EtwEventWriteStartScenario (Ordinal: 76, Address: 0x8a3d0)
• EtwEventWriteString (Ordinal: 77, Address: 0x110680)
• EtwEventWriteTransfer (Ordinal: 78, Address: 0x50340)
• EtwGetTraceEnableFlags (Ordinal: 79, Address: 0x81d70)
• EtwGetTraceEnableLevel (Ordinal: 80, Address: 0x81d30)
• EtwGetTraceLoggerHandle (Ordinal: 81, Address: 0x81cf0)
• EtwLogTraceEvent (Ordinal: 82, Address: 0x50ca0)
• EtwNotificationRegister (Ordinal: 83, Address: 0x43040)
• EtwNotificationUnregister (Ordinal: 84, Address: 0x514f0)
• EtwProcessPrivateLoggerRequest (Ordinal: 85, Address: 0x49af0)
• EtwRegisterSecurityProvider (Ordinal: 86, Address: 0x8c570)
• EtwRegisterTraceGuidsA (Ordinal: 87, Address: 0x85830)
• EtwRegisterTraceGuidsW (Ordinal: 88, Address: 0x42a10)
• EtwReplyNotification (Ordinal: 89, Address: 0x19a0)
• EtwSendNotification (Ordinal: 90, Address: 0x51690)
• EtwSetMark (Ordinal: 91, Address: 0x8ae90)
• EtwTraceEventInstance (Ordinal: 92, Address: 0x110a00)
• EtwTraceMessage (Ordinal: 93, Address: 0x517c0)
• EtwTraceMessageVa (Ordinal: 94, Address: 0x517f0)
• EtwUnregisterTraceGuids (Ordinal: 95, Address: 0x51490)
• EtwWriteUMSecurityEvent (Ordinal: 96, Address: 0x7c8c0)
• EtwpCreateEtwThread (Ordinal: 97, Address: 0x48710)
• EtwpGetCpuSpeed (Ordinal: 98, Address: 0x49de0)
• EvtIntReportAuthzEventAndSourceAsync (Ordinal: 99, Address: 0x111960)
• EvtIntReportEventAndSourceAsync (Ordinal: 100, Address: 0x4fe20)
• ExpInterlockedPopEntrySListEnd (Ordinal: 101, Address: 0xa1180)
• ExpInterlockedPopEntrySListFault (Ordinal: 102, Address: 0xa1177)
• ExpInterlockedPopEntrySListResume (Ordinal: 103, Address: 0xa1167)
• KiRaiseUserExceptionDispatcher (Ordinal: 104, Address: 0xa14c0)
• KiUserApcDispatcher (Ordinal: 105, Address: 0xa12e0)
• KiUserCallbackDispatcher (Ordinal: 106, Address: 0xa1400)
• KiUserExceptionDispatcher (Ordinal: 107, Address: 0xa1450)
• KiUserInvertedFunctionTable (Ordinal: 108, Address: 0x181500)
• LdrAccessResource (Ordinal: 109, Address: 0x207a0)
• LdrAddDllDirectory (Ordinal: 110, Address: 0x8bce0)
• LdrAddLoadAsDataTable (Ordinal: 111, Address: 0x74110)
• LdrAddRefDll (Ordinal: 112, Address: 0x10140)
• LdrAppxHandleIntegrityFailure (Ordinal: 113, Address: 0xcb5e0)
• LdrCallEnclave (Ordinal: 114, Address: 0xccbc0)
• LdrControlFlowGuardEnforced (Ordinal: 115, Address: 0x33520)
• LdrCreateEnclave (Ordinal: 116, Address: 0xccbd0)
• LdrDeleteEnclave (Ordinal: 117, Address: 0xccce0)
• LdrDisableThreadCalloutsForDll (Ordinal: 118, Address: 0xef70)
• LdrEnumResources (Ordinal: 119, Address: 0xe0c20)
• LdrEnumerateLoadedModules (Ordinal: 120, Address: 0x5edc0)
• LdrFastFailInLoaderCallout (Ordinal: 121, Address: 0x84b60)
• LdrFindEntryForAddress (Ordinal: 122, Address: 0x539e0)
• LdrFindResourceDirectory_U (Ordinal: 123, Address: 0xe0ef0)
• LdrFindResourceEx_U (Ordinal: 124, Address: 0x818d0)
• LdrFindResource_U (Ordinal: 125, Address: 0x71690)
• LdrFlushAlternateResourceModules (Ordinal: 126, Address: 0x89a20)
• LdrGetDllDirectory (Ordinal: 127, Address: 0x7f8f0)
• LdrGetDllFullName (Ordinal: 128, Address: 0x10240)
• LdrGetDllHandle (Ordinal: 129, Address: 0x16870)
• LdrGetDllHandleByMapping (Ordinal: 130, Address: 0x75710)
• LdrGetDllHandleByName (Ordinal: 131, Address: 0x780b0)
• LdrGetDllHandleEx (Ordinal: 132, Address: 0x168a0)
• LdrGetDllPath (Ordinal: 133, Address: 0x11450)
• LdrGetFailureData (Ordinal: 134, Address: 0xcdf20)
• LdrGetFileNameFromLoadAsDataTable (Ordinal: 135, Address: 0xe0f10)
• LdrGetKnownDllSectionHandle (Ordinal: 136, Address: 0x847c0)
• LdrGetProcedureAddress (Ordinal: 137, Address: 0x824c0)
• LdrGetProcedureAddressEx (Ordinal: 138, Address: 0x6d020)
• LdrGetProcedureAddressForCaller (Ordinal: 139, Address: 0x2fdc0)
• LdrInitShimEngineDynamic (Ordinal: 140, Address: 0xd0500)
• LdrInitializeEnclave (Ordinal: 141, Address: 0xccd70)
• LdrInitializeThunk (Ordinal: 142, Address: 0x75c10)
• LdrIsModuleSxsRedirected (Ordinal: 143, Address: 0xcdf30)
• LdrLoadAlternateResourceModule (Ordinal: 144, Address: 0x7e480)
• LdrLoadAlternateResourceModuleEx (Ordinal: 145, Address: 0x34ea0)
• LdrLoadDll (Ordinal: 146, Address: 0x16a10)
• LdrLoadEnclaveModule (Ordinal: 147, Address: 0xccf10)
• LdrLockLoaderLock (Ordinal: 148, Address: 0x7dab0)
• LdrOpenImageFileOptionsKey (Ordinal: 149, Address: 0xe19b0)
• LdrProcessInitializationComplete (Ordinal: 150, Address: 0x81230)
• LdrProcessRelocationBlock (Ordinal: 151, Address: 0xe3b90)
• LdrProcessRelocationBlockEx (Ordinal: 152, Address: 0xe3bc0)
• LdrQueryImageFileExecutionOptions (Ordinal: 153, Address: 0x7b3c0)
• LdrQueryImageFileExecutionOptionsEx (Ordinal: 154, Address: 0x7b400)
• LdrQueryImageFileKeyOption (Ordinal: 155, Address: 0x7b4a0)
• LdrQueryModuleServiceTags (Ordinal: 156, Address: 0xce120)
• LdrQueryOptionalDelayLoadedAPI (Ordinal: 157, Address: 0xce920)
• LdrQueryProcessModuleInformation (Ordinal: 158, Address: 0x1430)
• LdrRegisterDllNotification (Ordinal: 159, Address: 0x84f00)
• LdrRemoveDllDirectory (Ordinal: 160, Address: 0x8c3f0)
• LdrRemoveLoadAsDataTable (Ordinal: 161, Address: 0x748d0)
• LdrResFindResource (Ordinal: 162, Address: 0xe40a0)
• LdrResFindResourceDirectory (Ordinal: 163, Address: 0x55420)
• LdrResGetRCConfig (Ordinal: 164, Address: 0x580e0)
• LdrResRelease (Ordinal: 165, Address: 0x8a4d0)
• LdrResSearchResource (Ordinal: 166, Address: 0x554b0)
• LdrResolveDelayLoadedAPI (Ordinal: 167, Address: 0x10380)
• LdrResolveDelayLoadsFromDll (Ordinal: 168, Address: 0xce9e0)
• LdrRscIsTypeExist (Ordinal: 169, Address: 0x34c60)
• LdrSetAppCompatDllRedirectionCallback (Ordinal: 170, Address: 0x847b0)
• LdrSetDefaultDllDirectories (Ordinal: 171, Address: 0x805d0)
• LdrSetDllDirectory (Ordinal: 172, Address: 0x80610)
• LdrSetDllManifestProber (Ordinal: 173, Address: 0x841e0)
• LdrSetImplicitPathOptions (Ordinal: 174, Address: 0xce5c0)
• LdrSetMUICacheType (Ordinal: 175, Address: 0x8c5b0)
• LdrShutdownProcess (Ordinal: 176, Address: 0x5efa0)
• LdrShutdownThread (Ordinal: 177, Address: 0x17450)
• LdrStandardizeSystemPath (Ordinal: 178, Address: 0x808c0)
• LdrSystemDllInitBlock (Ordinal: 179, Address: 0x1812f0)
• LdrUnloadAlternateResourceModule (Ordinal: 180, Address: 0x6b7d0)
• LdrUnloadAlternateResourceModuleEx (Ordinal: 181, Address: 0x6b7e0)
• LdrUnloadDll (Ordinal: 182, Address: 0xfbf0)
• LdrUnlockLoaderLock (Ordinal: 183, Address: 0x7e920)
• LdrUnregisterDllNotification (Ordinal: 184, Address: 0xce630)
• LdrUpdatePackageSearchPath (Ordinal: 185, Address: 0xdebe0)
• LdrVerifyImageMatchesChecksum (Ordinal: 186, Address: 0xce6e0)
• LdrVerifyImageMatchesChecksumEx (Ordinal: 187, Address: 0x8b160)
• LdrpResGetMappingSize (Ordinal: 188, Address: 0x578d0)
• LdrpResGetResourceDirectory (Ordinal: 189, Address: 0x56300)
• MD4Final (Ordinal: 190, Address: 0x10fdc0)
• MD4Init (Ordinal: 191, Address: 0x10fe90)
• MD4Update (Ordinal: 192, Address: 0x110450)
• MD5Final (Ordinal: 193, Address: 0x5d320)
• MD5Init (Ordinal: 194, Address: 0x7e090)
• MD5Update (Ordinal: 195, Address: 0x5d3f0)
• NlsAnsiCodePage (Ordinal: 196, Address: 0x1697cc)
• NlsMbCodePageTag (Ordinal: 197, Address: 0x16d728)
• NlsMbOemCodePageTag (Ordinal: 198, Address: 0x16d6f0)
• NtAcceptConnectPort (Ordinal: 199, Address: 0x9d5d0)
• NtAccessCheck (Ordinal: 200, Address: 0x9d590)
• NtAccessCheckAndAuditAlarm (Ordinal: 201, Address: 0x9dab0)
• NtAccessCheckByType (Ordinal: 202, Address: 0x9e1e0)
• NtAccessCheckByTypeAndAuditAlarm (Ordinal: 203, Address: 0x9e0b0)
• NtAccessCheckByTypeResultList (Ordinal: 204, Address: 0x9e200)
• NtAccessCheckByTypeResultListAndAuditAlarm (Ordinal: 205, Address: 0x9e220)
• NtAccessCheckByTypeResultListAndAuditAlarmByHandle (Ordinal: 206, Address: 0x9e240)
• NtAcquireCrossVmMutant (Ordinal: 207, Address: 0x9e260)
• NtAcquireProcessActivityReference (Ordinal: 208, Address: 0x9e280)
• NtAddAtom (Ordinal: 209, Address: 0x9de70)
• NtAddAtomEx (Ordinal: 210, Address: 0x9e2a0)
• NtAddBootEntry (Ordinal: 211, Address: 0x9e2c0)
• NtAddDriverEntry (Ordinal: 212, Address: 0x9e2e0)
• NtAdjustGroupsToken (Ordinal: 213, Address: 0x9e300)
• NtAdjustPrivilegesToken (Ordinal: 214, Address: 0x9ddb0)
• NtAdjustTokenClaimsAndDeviceGroups (Ordinal: 215, Address: 0x9e320)
• NtAlertResumeThread (Ordinal: 216, Address: 0x9e340)
• NtAlertThread (Ordinal: 217, Address: 0x9e360)
• NtAlertThreadByThreadId (Ordinal: 218, Address: 0x9e380)
• NtAllocateLocallyUniqueId (Ordinal: 219, Address: 0x9e3a0)
• NtAllocateReserveObject (Ordinal: 220, Address: 0x9e3c0)
• NtAllocateUserPhysicalPages (Ordinal: 221, Address: 0x9e3e0)
• NtAllocateUserPhysicalPagesEx (Ordinal: 222, Address: 0x9e400)
• NtAllocateUuids (Ordinal: 223, Address: 0x9e420)
• NtAllocateVirtualMemory (Ordinal: 224, Address: 0x9d890)
• NtAllocateVirtualMemoryEx (Ordinal: 225, Address: 0x9e440)
• NtAlpcAcceptConnectPort (Ordinal: 226, Address: 0x9e460)
• NtAlpcCancelMessage (Ordinal: 227, Address: 0x9e480)
• NtAlpcConnectPort (Ordinal: 228, Address: 0x9e4a0)
• NtAlpcConnectPortEx (Ordinal: 229, Address: 0x9e4c0)
• NtAlpcCreatePort (Ordinal: 230, Address: 0x9e4e0)
• NtAlpcCreatePortSection (Ordinal: 231, Address: 0x9e500)
• NtAlpcCreateResourceReserve (Ordinal: 232, Address: 0x9e520)
• NtAlpcCreateSectionView (Ordinal: 233, Address: 0x9e540)
• NtAlpcCreateSecurityContext (Ordinal: 234, Address: 0x9e560)
• NtAlpcDeletePortSection (Ordinal: 235, Address: 0x9e580)
• NtAlpcDeleteResourceReserve (Ordinal: 236, Address: 0x9e5a0)
• NtAlpcDeleteSectionView (Ordinal: 237, Address: 0x9e5c0)
• NtAlpcDeleteSecurityContext (Ordinal: 238, Address: 0x9e5e0)
• NtAlpcDisconnectPort (Ordinal: 239, Address: 0x9e600)
• NtAlpcImpersonateClientContainerOfPort (Ordinal: 240, Address: 0x9e620)
• NtAlpcImpersonateClientOfPort (Ordinal: 241, Address: 0x9e640)
• NtAlpcOpenSenderProcess (Ordinal: 242, Address: 0x9e660)
• NtAlpcOpenSenderThread (Ordinal: 243, Address: 0x9e680)
• NtAlpcQueryInformation (Ordinal: 244, Address: 0x9e6a0)
• NtAlpcQueryInformationMessage (Ordinal: 245, Address: 0x9e6c0)
• NtAlpcRevokeSecurityContext (Ordinal: 246, Address: 0x9e6e0)
• NtAlpcSendWaitReceivePort (Ordinal: 247, Address: 0x9e700)
• NtAlpcSetInformation (Ordinal: 248, Address: 0x9e720)
• NtApphelpCacheControl (Ordinal: 249, Address: 0x9df10)
• NtAreMappedFilesTheSame (Ordinal: 250, Address: 0x9e740)
• NtAssignProcessToJobObject (Ordinal: 251, Address: 0x9e760)
• NtAssociateWaitCompletionPacket (Ordinal: 252, Address: 0x9e780)
• NtCallEnclave (Ordinal: 253, Address: 0x9e7a0)
• NtCallbackReturn (Ordinal: 254, Address: 0x9d630)
• NtCancelIoFile (Ordinal: 255, Address: 0x9e120)
• NtCancelIoFileEx (Ordinal: 256, Address: 0x9e7c0)
• NtCancelSynchronousIoFile (Ordinal: 257, Address: 0x9e7e0)
• NtCancelTimer (Ordinal: 258, Address: 0x9e1a0)
• NtCancelTimer2 (Ordinal: 259, Address: 0x9e800)
• NtCancelWaitCompletionPacket (Ordinal: 260, Address: 0x9e820)
• NtClearEvent (Ordinal: 261, Address: 0x9dd50)
• NtClose (Ordinal: 262, Address: 0x9d770)
• NtCloseObjectAuditAlarm (Ordinal: 263, Address: 0x9dcf0)
• NtCommitComplete (Ordinal: 264, Address: 0x9e840)
• NtCommitEnlistment (Ordinal: 265, Address: 0x9e860)
• NtCommitRegistryTransaction (Ordinal: 266, Address: 0x9e880)
• NtCommitTransaction (Ordinal: 267, Address: 0x9e8a0)
• NtCompactKeys (Ordinal: 268, Address: 0x9e8c0)
• NtCompareObjects (Ordinal: 269, Address: 0x9e8e0)
• NtCompareSigningLevels (Ordinal: 270, Address: 0x9e900)
• NtCompareTokens (Ordinal: 271, Address: 0x9e920)
• NtCompleteConnectPort (Ordinal: 272, Address: 0x9e940)
• NtCompressKey (Ordinal: 273, Address: 0x9e960)
• NtConnectPort (Ordinal: 274, Address: 0x9e980)
• NtContinue (Ordinal: 275, Address: 0x9ddf0)
• NtContinueEx (Ordinal: 276, Address: 0x9e9a0)
• NtConvertBetweenAuxiliaryCounterAndPerformanceCounter (Ordinal: 277, Address: 0x9e9c0)
• NtCopyFileChunk (Ordinal: 278, Address: 0x9e9e0)
• NtCreateCrossVmEvent (Ordinal: 279, Address: 0x9ea00)
• NtCreateCrossVmMutant (Ordinal: 280, Address: 0x9ea20)
• NtCreateDebugObject (Ordinal: 281, Address: 0x9ea40)
• NtCreateDirectoryObject (Ordinal: 282, Address: 0x9ea60)
• NtCreateDirectoryObjectEx (Ordinal: 283, Address: 0x9ea80)
• NtCreateEnclave (Ordinal: 284, Address: 0x9eaa0)
• NtCreateEnlistment (Ordinal: 285, Address: 0x9eac0)
• NtCreateEvent (Ordinal: 286, Address: 0x9de90)
• NtCreateEventPair (Ordinal: 287, Address: 0x9eae0)
• NtCreateFile (Ordinal: 288, Address: 0x9e030)
• NtCreateIRTimer (Ordinal: 289, Address: 0x9eb00)
• NtCreateIoCompletion (Ordinal: 290, Address: 0x9eb20)
• NtCreateJobObject (Ordinal: 291, Address: 0x9eb40)
• NtCreateJobSet (Ordinal: 292, Address: 0x9eb60)
• NtCreateKey (Ordinal: 293, Address: 0x9d930)
• NtCreateKeyTransacted (Ordinal: 294, Address: 0x9eb80)
• NtCreateKeyedEvent (Ordinal: 295, Address: 0x9eba0)
• NtCreateLowBoxToken (Ordinal: 296, Address: 0x9ebc0)
• NtCreateMailslotFile (Ordinal: 297, Address: 0x9ebe0)
• NtCreateMutant (Ordinal: 298, Address: 0x9ec00)
• NtCreateNamedPipeFile (Ordinal: 299, Address: 0x9ec20)
• NtCreatePagingFile (Ordinal: 300, Address: 0x9ec40)
• NtCreatePartition (Ordinal: 301, Address: 0x9ec60)
• NtCreatePort (Ordinal: 302, Address: 0x9ec80)
• NtCreatePrivateNamespace (Ordinal: 303, Address: 0x9eca0)
• NtCreateProcess (Ordinal: 304, Address: 0x9ecc0)
• NtCreateProcessEx (Ordinal: 305, Address: 0x9df30)
• NtCreateProfile (Ordinal: 306, Address: 0x9ece0)
• NtCreateProfileEx (Ordinal: 307, Address: 0x9ed00)
• NtCreateRegistryTransaction (Ordinal: 308, Address: 0x9ed20)
• NtCreateResourceManager (Ordinal: 309, Address: 0x9ed40)
• NtCreateSection (Ordinal: 310, Address: 0x9ded0)
• NtCreateSectionEx (Ordinal: 311, Address: 0x9ed60)
• NtCreateSemaphore (Ordinal: 312, Address: 0x9ed80)
• NtCreateSymbolicLinkObject (Ordinal: 313, Address: 0x9eda0)
• NtCreateThread (Ordinal: 314, Address: 0x9df50)
• NtCreateThreadEx (Ordinal: 315, Address: 0x9edc0)
• NtCreateTimer (Ordinal: 316, Address: 0x9ede0)
• NtCreateTimer2 (Ordinal: 317, Address: 0x9ee00)
• NtCreateToken (Ordinal: 318, Address: 0x9ee20)
• NtCreateTokenEx (Ordinal: 319, Address: 0x9ee40)
• NtCreateTransaction (Ordinal: 320, Address: 0x9ee60)
• NtCreateTransactionManager (Ordinal: 321, Address: 0x9ee80)
• NtCreateUserProcess (Ordinal: 322, Address: 0x9eea0)
• NtCreateWaitCompletionPacket (Ordinal: 323, Address: 0x9eec0)
• NtCreateWaitablePort (Ordinal: 324, Address: 0x9eee0)
• NtCreateWnfStateName (Ordinal: 325, Address: 0x9ef00)
• NtCreateWorkerFactory (Ordinal: 326, Address: 0x9ef20)
• NtDebugActiveProcess (Ordinal: 327, Address: 0x9ef40)
• NtDebugContinue (Ordinal: 328, Address: 0x9ef60)
• NtDelayExecution (Ordinal: 329, Address: 0x9dc10)
• NtDeleteAtom (Ordinal: 330, Address: 0x9ef80)
• NtDeleteBootEntry (Ordinal: 331, Address: 0x9efa0)
• NtDeleteDriverEntry (Ordinal: 332, Address: 0x9efc0)
• NtDeleteFile (Ordinal: 333, Address: 0x9efe0)
• NtDeleteKey (Ordinal: 334, Address: 0x9f000)
• NtDeleteObjectAuditAlarm (Ordinal: 335, Address: 0x9f020)
• NtDeletePrivateNamespace (Ordinal: 336, Address: 0x9f040)
• NtDeleteValueKey (Ordinal: 337, Address: 0x9f060)
• NtDeleteWnfStateData (Ordinal: 338, Address: 0x9f080)
• NtDeleteWnfStateName (Ordinal: 339, Address: 0x9f0a0)
• NtDeviceIoControlFile (Ordinal: 340, Address: 0x9d670)
• NtDirectGraphicsCall (Ordinal: 341, Address: 0x9f0c0)
• NtDisableLastKnownGood (Ordinal: 342, Address: 0x9f0e0)
• NtDisplayString (Ordinal: 343, Address: 0x9f100)
• NtDrawText (Ordinal: 344, Address: 0x9f120)
• NtDuplicateObject (Ordinal: 345, Address: 0x9dd10)
• NtDuplicateToken (Ordinal: 346, Address: 0x9ddd0)
• NtEnableLastKnownGood (Ordinal: 347, Address: 0x9f140)
• NtEnumerateBootEntries (Ordinal: 348, Address: 0x9f160)
• NtEnumerateDriverEntries (Ordinal: 349, Address: 0x9f180)
• NtEnumerateKey (Ordinal: 350, Address: 0x9dbd0)
• NtEnumerateSystemEnvironmentValuesEx (Ordinal: 351, Address: 0x9f1a0)
• NtEnumerateTransactionObject (Ordinal: 352, Address: 0x9f1c0)
• NtEnumerateValueKey (Ordinal: 353, Address: 0x9d7f0)
• NtExtendSection (Ordinal: 354, Address: 0x9f1e0)
• NtFilterBootOption (Ordinal: 355, Address: 0x9f200)
• NtFilterToken (Ordinal: 356, Address: 0x9f220)
• NtFilterTokenEx (Ordinal: 357, Address: 0x9f240)
• NtFindAtom (Ordinal: 358, Address: 0x9d810)
• NtFlushBuffersFile (Ordinal: 359, Address: 0x9def0)
• NtFlushBuffersFileEx (Ordinal: 360, Address: 0x9f260)
• NtFlushInstallUILanguage (Ordinal: 361, Address: 0x9f280)
• NtFlushInstructionCache (Ordinal: 362, Address: 0x9f2a0)
• NtFlushKey (Ordinal: 363, Address: 0x9f2c0)
• NtFlushProcessWriteBuffers (Ordinal: 364, Address: 0x9f2e0)
• NtFlushVirtualMemory (Ordinal: 365, Address: 0x9f300)
• NtFlushWriteBuffer (Ordinal: 366, Address: 0x9f320)
• NtFreeUserPhysicalPages (Ordinal: 367, Address: 0x9f340)
• NtFreeVirtualMemory (Ordinal: 368, Address: 0x9d950)
• NtFreezeRegistry (Ordinal: 369, Address: 0x9f360)
• NtFreezeTransactions (Ordinal: 370, Address: 0x9f380)
• NtFsControlFile (Ordinal: 371, Address: 0x9dcb0)
• NtGetCachedSigningLevel (Ordinal: 372, Address: 0x9f3a0)
• NtGetCompleteWnfStateSubscription (Ordinal: 373, Address: 0x9f3c0)
• NtGetContextThread (Ordinal: 374, Address: 0x9f3e0)
• NtGetCurrentProcessorNumber (Ordinal: 375, Address: 0x9f400)
• NtGetCurrentProcessorNumberEx (Ordinal: 376, Address: 0x9f420)
• NtGetDevicePowerState (Ordinal: 377, Address: 0x9f440)
• NtGetMUIRegistryInfo (Ordinal: 378, Address: 0x9f460)
• NtGetNextProcess (Ordinal: 379, Address: 0x9f480)
• NtGetNextThread (Ordinal: 380, Address: 0x9f4a0)
• NtGetNlsSectionPtr (Ordinal: 381, Address: 0x9f4c0)
• NtGetNotificationResourceManager (Ordinal: 382, Address: 0x9f4e0)
• NtGetTickCount (Ordinal: 383, Address: 0xe5d80)
• NtGetWriteWatch (Ordinal: 384, Address: 0x9f500)
• NtImpersonateAnonymousToken (Ordinal: 385, Address: 0x9f520)
• NtImpersonateClientOfPort (Ordinal: 386, Address: 0x9d970)
• NtImpersonateThread (Ordinal: 387, Address: 0x9f540)
• NtInitializeEnclave (Ordinal: 388, Address: 0x9f560)
• NtInitializeNlsFiles (Ordinal: 389, Address: 0x9f580)
• NtInitializeRegistry (Ordinal: 390, Address: 0x9f5a0)
• NtInitiatePowerAction (Ordinal: 391, Address: 0x9f5c0)
• NtIsProcessInJob (Ordinal: 392, Address: 0x9df70)
• NtIsSystemResumeAutomatic (Ordinal: 393, Address: 0x9f5e0)
• NtIsUILanguageComitted (Ordinal: 394, Address: 0x9f600)
• NtListenPort (Ordinal: 395, Address: 0x9f620)
• NtLoadDriver (Ordinal: 396, Address: 0x9f640)
• NtLoadEnclaveData (Ordinal: 397, Address: 0x9f660)
• NtLoadKey (Ordinal: 398, Address: 0x9f680)
• NtLoadKey2 (Ordinal: 399, Address: 0x9f6a0)
• NtLoadKey3 (Ordinal: 400, Address: 0xa1060)
• NtLoadKeyEx (Ordinal: 401, Address: 0x9f6c0)
• NtLockFile (Ordinal: 402, Address: 0x9f6e0)
• NtLockProductActivationKeys (Ordinal: 403, Address: 0x9f700)
• NtLockRegistryKey (Ordinal: 404, Address: 0x9f720)
• NtLockVirtualMemory (Ordinal: 405, Address: 0x9f740)
• NtMakePermanentObject (Ordinal: 406, Address: 0x9f760)
• NtMakeTemporaryObject (Ordinal: 407, Address: 0x9f780)
• NtManageHotPatch (Ordinal: 408, Address: 0x9f7a0)
• NtManagePartition (Ordinal: 409, Address: 0x9f7c0)
• NtMapCMFModule (Ordinal: 410, Address: 0x9f7e0)
• NtMapUserPhysicalPages (Ordinal: 411, Address: 0x9f800)
• NtMapUserPhysicalPagesScatter (Ordinal: 412, Address: 0x9d5f0)
• NtMapViewOfSection (Ordinal: 413, Address: 0x9da90)
• NtMapViewOfSectionEx (Ordinal: 414, Address: 0x9f820)
• NtModifyBootEntry (Ordinal: 415, Address: 0x9f840)
• NtModifyDriverEntry (Ordinal: 416, Address: 0x9f860)
• NtNotifyChangeDirectoryFile (Ordinal: 417, Address: 0x9f880)
• NtNotifyChangeDirectoryFileEx (Ordinal: 418, Address: 0x9f8a0)
• NtNotifyChangeKey (Ordinal: 419, Address: 0x9f8c0)
• NtNotifyChangeMultipleKeys (Ordinal: 420, Address: 0x9f8e0)
• NtNotifyChangeSession (Ordinal: 421, Address: 0x9f900)
• NtOpenDirectoryObject (Ordinal: 422, Address: 0x9e090)
• NtOpenEnlistment (Ordinal: 423, Address: 0x9f920)
• NtOpenEvent (Ordinal: 424, Address: 0x9dd90)
• NtOpenEventPair (Ordinal: 425, Address: 0x9f940)
• NtOpenFile (Ordinal: 426, Address: 0x9dbf0)
• NtOpenIoCompletion (Ordinal: 427, Address: 0x9f960)
• NtOpenJobObject (Ordinal: 428, Address: 0x9f980)
• NtOpenKey (Ordinal: 429, Address: 0x9d7d0)
• NtOpenKeyEx (Ordinal: 430, Address: 0x9f9a0)
• NtOpenKeyTransacted (Ordinal: 431, Address: 0x9f9c0)
• NtOpenKeyTransactedEx (Ordinal: 432, Address: 0x9f9e0)
• NtOpenKeyedEvent (Ordinal: 433, Address: 0x9fa00)
• NtOpenMutant (Ordinal: 434, Address: 0x9fa20)
• NtOpenObjectAuditAlarm (Ordinal: 435, Address: 0x9fa40)
• NtOpenPartition (Ordinal: 436, Address: 0x9fa60)
• NtOpenPrivateNamespace (Ordinal: 437, Address: 0x9fa80)
• NtOpenProcess (Ordinal: 438, Address: 0x9da50)
• NtOpenProcessToken (Ordinal: 439, Address: 0x9faa0)
• NtOpenProcessTokenEx (Ordinal: 440, Address: 0x9db90)
• NtOpenRegistryTransaction (Ordinal: 441, Address: 0x9fac0)
• NtOpenResourceManager (Ordinal: 442, Address: 0x9fae0)
• NtOpenSection (Ordinal: 443, Address: 0x9dc70)
• NtOpenSemaphore (Ordinal: 444, Address: 0x9fb00)
• NtOpenSession (Ordinal: 445, Address: 0x9fb20)
• NtOpenSymbolicLinkObject (Ordinal: 446, Address: 0x9fb40)
• NtOpenThread (Ordinal: 447, Address: 0x9fb60)
• NtOpenThreadToken (Ordinal: 448, Address: 0x9da10)
• NtOpenThreadTokenEx (Ordinal: 449, Address: 0x9db70)
• NtOpenTimer (Ordinal: 450, Address: 0x9fb80)
• NtOpenTransaction (Ordinal: 451, Address: 0x9fba0)
• NtOpenTransactionManager (Ordinal: 452, Address: 0x9fbc0)
• NtPlugPlayControl (Ordinal: 453, Address: 0x9fbe0)
• NtPowerInformation (Ordinal: 454, Address: 0x9e160)
• NtPrePrepareComplete (Ordinal: 455, Address: 0x9fc00)
• NtPrePrepareEnlistment (Ordinal: 456, Address: 0x9fc20)
• NtPrepareComplete (Ordinal: 457, Address: 0x9fc40)
• NtPrepareEnlistment (Ordinal: 458, Address: 0x9fc60)
• NtPrivilegeCheck (Ordinal: 459, Address: 0x9fc80)
• NtPrivilegeObjectAuditAlarm (Ordinal: 460, Address: 0x9fca0)
• NtPrivilegedServiceAuditAlarm (Ordinal: 461, Address: 0x9fcc0)
• NtPropagationComplete (Ordinal: 462, Address: 0x9fce0)
• NtPropagationFailed (Ordinal: 463, Address: 0x9fd00)
• NtProtectVirtualMemory (Ordinal: 464, Address: 0x9df90)
• NtPssCaptureVaSpaceBulk (Ordinal: 465, Address: 0x9fd20)
• NtPulseEvent (Ordinal: 466, Address: 0x9fd40)
• NtQueryAttributesFile (Ordinal: 467, Address: 0x9dd30)
• NtQueryAuxiliaryCounterFrequency (Ordinal: 468, Address: 0x9fd60)
• NtQueryBootEntryOrder (Ordinal: 469, Address: 0x9fd80)
• NtQueryBootOptions (Ordinal: 470, Address: 0x9fda0)
• NtQueryDebugFilterState (Ordinal: 471, Address: 0x9fdc0)
• NtQueryDefaultLocale (Ordinal: 472, Address: 0x9d830)
• NtQueryDefaultUILanguage (Ordinal: 473, Address: 0x9de10)
• NtQueryDirectoryFile (Ordinal: 474, Address: 0x9dc30)
• NtQueryDirectoryFileEx (Ordinal: 475, Address: 0x9fde0)
• NtQueryDirectoryObject (Ordinal: 476, Address: 0x9fe00)
• NtQueryDriverEntryOrder (Ordinal: 477, Address: 0x9fe20)
• NtQueryEaFile (Ordinal: 478, Address: 0x9fe40)
• NtQueryEvent (Ordinal: 479, Address: 0x9e050)
• NtQueryFullAttributesFile (Ordinal: 480, Address: 0x9fe60)
• NtQueryInformationAtom (Ordinal: 481, Address: 0x9fe80)
• NtQueryInformationByName (Ordinal: 482, Address: 0x9fea0)
• NtQueryInformationEnlistment (Ordinal: 483, Address: 0x9fec0)
• NtQueryInformationFile (Ordinal: 484, Address: 0x9d7b0)
• NtQueryInformationJobObject (Ordinal: 485, Address: 0x9fee0)
• NtQueryInformationPort (Ordinal: 486, Address: 0x9ff00)
• NtQueryInformationProcess (Ordinal: 487, Address: 0x9d8b0)
• NtQueryInformationResourceManager (Ordinal: 488, Address: 0x9ff20)
• NtQueryInformationThread (Ordinal: 489, Address: 0x9da30)
• NtQueryInformationToken (Ordinal: 490, Address: 0x9d9b0)
• NtQueryInformationTransaction (Ordinal: 491, Address: 0x9ff40)
• NtQueryInformationTransactionManager (Ordinal: 492, Address: 0x9ff60)
• NtQueryInformationWorkerFactory (Ordinal: 493, Address: 0x9ff80)
• NtQueryInstallUILanguage (Ordinal: 494, Address: 0x9ffa0)
• NtQueryIntervalProfile (Ordinal: 495, Address: 0x9ffc0)
• NtQueryIoCompletion (Ordinal: 496, Address: 0x9ffe0)
• NtQueryKey (Ordinal: 497, Address: 0x9d850)
• NtQueryLicenseValue (Ordinal: 498, Address: 0xa0000)
• NtQueryMultipleValueKey (Ordinal: 499, Address: 0xa0020)
• NtQueryMutant (Ordinal: 500, Address: 0xa0040)
• NtQueryObject (Ordinal: 501, Address: 0x9d790)
• NtQueryOpenSubKeys (Ordinal: 502, Address: 0xa0060)
• NtQueryOpenSubKeysEx (Ordinal: 503, Address: 0xa0080)
• NtQueryPerformanceCounter (Ordinal: 504, Address: 0x9dbb0)
• NtQueryPortInformationProcess (Ordinal: 505, Address: 0xa00a0)
• NtQueryQuotaInformationFile (Ordinal: 506, Address: 0xa00c0)
• NtQuerySection (Ordinal: 507, Address: 0x9dfb0)
• NtQuerySecurityAttributesToken (Ordinal: 508, Address: 0xa00e0)
• NtQuerySecurityObject (Ordinal: 509, Address: 0xa0100)
• NtQuerySecurityPolicy (Ordinal: 510, Address: 0xa0120)
• NtQuerySemaphore (Ordinal: 511, Address: 0xa0140)
• NtQuerySymbolicLinkObject (Ordinal: 512, Address: 0xa0160)
• NtQuerySystemEnvironmentValue (Ordinal: 513, Address: 0xa0180)
• NtQuerySystemEnvironmentValueEx (Ordinal: 514, Address: 0xa01a0)
• NtQuerySystemInformation (Ordinal: 515, Address: 0x9dc50)
• NtQuerySystemInformationEx (Ordinal: 516, Address: 0xa01c0)
• NtQuerySystemTime (Ordinal: 517, Address: 0x9e0d0)
• NtQueryTimer (Ordinal: 518, Address: 0x9dc90)
• NtQueryTimerResolution (Ordinal: 519, Address: 0xa01e0)
• NtQueryValueKey (Ordinal: 520, Address: 0x9d870)
• NtQueryVirtualMemory (Ordinal: 521, Address: 0x9d9f0)
• NtQueryVolumeInformationFile (Ordinal: 522, Address: 0x9deb0)
• NtQueryWnfStateData (Ordinal: 523, Address: 0xa0200)
• NtQueryWnfStateNameInformation (Ordinal: 524, Address: 0xa0220)
• NtQueueApcThread (Ordinal: 525, Address: 0x9de30)
• NtQueueApcThreadEx (Ordinal: 526, Address: 0xa0240)
• NtQueueApcThreadEx2 (Ordinal: 527, Address: 0xa0260)
• NtRaiseException (Ordinal: 528, Address: 0xa0280)
• NtRaiseHardError (Ordinal: 529, Address: 0xa02a0)
• NtReadFile (Ordinal: 530, Address: 0x9d650)
• NtReadFileScatter (Ordinal: 531, Address: 0x9db50)
• NtReadOnlyEnlistment (Ordinal: 532, Address: 0xa02c0)
• NtReadRequestData (Ordinal: 533, Address: 0x9e010)
• NtReadVirtualMemory (Ordinal: 534, Address: 0x9dd70)
• NtRecoverEnlistment (Ordinal: 535, Address: 0xa02e0)
• NtRecoverResourceManager (Ordinal: 536, Address: 0xa0300)
• NtRecoverTransactionManager (Ordinal: 537, Address: 0xa0320)
• NtRegisterProtocolAddressInformation (Ordinal: 538, Address: 0xa0340)
• NtRegisterThreadTerminatePort (Ordinal: 539, Address: 0xa0360)
• NtReleaseKeyedEvent (Ordinal: 540, Address: 0xa0380)
• NtReleaseMutant (Ordinal: 541, Address: 0x9d990)
• NtReleaseSemaphore (Ordinal: 542, Address: 0x9d6d0)
• NtReleaseWorkerFactoryWorker (Ordinal: 543, Address: 0xa03a0)
• NtRemoveIoCompletion (Ordinal: 544, Address: 0x9d6b0)
• NtRemoveIoCompletionEx (Ordinal: 545, Address: 0xa03c0)
• NtRemoveProcessDebug (Ordinal: 546, Address: 0xa03e0)
• NtRenameKey (Ordinal: 547, Address: 0xa0400)
• NtRenameTransactionManager (Ordinal: 548, Address: 0xa0420)
• NtReplaceKey (Ordinal: 549, Address: 0xa0440)
• NtReplacePartitionUnit (Ordinal: 550, Address: 0xa0460)
• NtReplyPort (Ordinal: 551, Address: 0x9d710)
• NtReplyWaitReceivePort (Ordinal: 552, Address: 0x9d6f0)
• NtReplyWaitReceivePortEx (Ordinal: 553, Address: 0x9daf0)
• NtReplyWaitReplyPort (Ordinal: 554, Address: 0xa0480)
• NtRequestPort (Ordinal: 555, Address: 0xa04a0)
• NtRequestWaitReplyPort (Ordinal: 556, Address: 0x9d9d0)
• NtResetEvent (Ordinal: 557, Address: 0xa04c0)
• NtResetWriteWatch (Ordinal: 558, Address: 0xa04e0)
• NtRestoreKey (Ordinal: 559, Address: 0xa0500)
• NtResumeProcess (Ordinal: 560, Address: 0xa0520)
• NtResumeThread (Ordinal: 561, Address: 0x9dfd0)
• NtRevertContainerImpersonation (Ordinal: 562, Address: 0xa0540)
• NtRollbackComplete (Ordinal: 563, Address: 0xa0560)
• NtRollbackEnlistment (Ordinal: 564, Address: 0xa0580)
• NtRollbackRegistryTransaction (Ordinal: 565, Address: 0xa05a0)
• NtRollbackTransaction (Ordinal: 566, Address: 0xa05c0)
• NtRollforwardTransactionManager (Ordinal: 567, Address: 0xa05e0)
• NtSaveKey (Ordinal: 568, Address: 0xa0600)
• NtSaveKeyEx (Ordinal: 569, Address: 0xa0620)
• NtSaveMergedKeys (Ordinal: 570, Address: 0xa0640)
• NtSecureConnectPort (Ordinal: 571, Address: 0xa0660)
• NtSerializeBoot (Ordinal: 572, Address: 0xa0680)
• NtSetBootEntryOrder (Ordinal: 573, Address: 0xa06a0)
• NtSetBootOptions (Ordinal: 574, Address: 0xa06c0)
• NtSetCachedSigningLevel (Ordinal: 575, Address: 0xa06e0)
• NtSetCachedSigningLevel2 (Ordinal: 576, Address: 0xa0700)
• NtSetContextThread (Ordinal: 577, Address: 0xa0720)
• NtSetDebugFilterState (Ordinal: 578, Address: 0xa0740)
• NtSetDefaultHardErrorPort (Ordinal: 579, Address: 0xa0760)
• NtSetDefaultLocale (Ordinal: 580, Address: 0xa0780)
• NtSetDefaultUILanguage (Ordinal: 581, Address: 0xa07a0)
• NtSetDriverEntryOrder (Ordinal: 582, Address: 0xa07c0)
• NtSetEaFile (Ordinal: 583, Address: 0xa07e0)
• NtSetEvent (Ordinal: 584, Address: 0x9d750)
• NtSetEventBoostPriority (Ordinal: 585, Address: 0x9db30)
• NtSetHighEventPair (Ordinal: 586, Address: 0xa0800)
• NtSetHighWaitLowEventPair (Ordinal: 587, Address: 0xa0820)
• NtSetIRTimer (Ordinal: 588, Address: 0xa0840)
• NtSetInformationDebugObject (Ordinal: 589, Address: 0xa0860)
• NtSetInformationEnlistment (Ordinal: 590, Address: 0xa0880)
• NtSetInformationFile (Ordinal: 591, Address: 0x9da70)
• NtSetInformationJobObject (Ordinal: 592, Address: 0xa08a0)
• NtSetInformationKey (Ordinal: 593, Address: 0xa08c0)
• NtSetInformationObject (Ordinal: 594, Address: 0x9e100)
• NtSetInformationProcess (Ordinal: 595, Address: 0x9d910)
• NtSetInformationResourceManager (Ordinal: 596, Address: 0xa08e0)
• NtSetInformationSymbolicLink (Ordinal: 597, Address: 0xa0900)
• NtSetInformationThread (Ordinal: 598, Address: 0x9d730)
• NtSetInformationToken (Ordinal: 599, Address: 0xa0920)
• NtSetInformationTransaction (Ordinal: 600, Address: 0xa0940)
• NtSetInformationTransactionManager (Ordinal: 601, Address: 0xa0960)
• NtSetInformationVirtualMemory (Ordinal: 602, Address: 0xa0980)
• NtSetInformationWorkerFactory (Ordinal: 603, Address: 0xa09a0)
• NtSetIntervalProfile (Ordinal: 604, Address: 0xa09c0)
• NtSetIoCompletion (Ordinal: 605, Address: 0xa09e0)
• NtSetIoCompletionEx (Ordinal: 606, Address: 0xa0a00)
• NtSetLdtEntries (Ordinal: 607, Address: 0xa0a20)
• NtSetLowEventPair (Ordinal: 608, Address: 0xa0a40)
• NtSetLowWaitHighEventPair (Ordinal: 609, Address: 0xa0a60)
• NtSetQuotaInformationFile (Ordinal: 610, Address: 0xa0a80)
• NtSetSecurityObject (Ordinal: 611, Address: 0xa0aa0)
• NtSetSystemEnvironmentValue (Ordinal: 612, Address: 0xa0ac0)
• NtSetSystemEnvironmentValueEx (Ordinal: 613, Address: 0xa0ae0)
• NtSetSystemInformation (Ordinal: 614, Address: 0xa0b00)
• NtSetSystemPowerState (Ordinal: 615, Address: 0xa0b20)
• NtSetSystemTime (Ordinal: 616, Address: 0xa0b40)
• NtSetThreadExecutionState (Ordinal: 617, Address: 0xa0b60)
• NtSetTimer (Ordinal: 618, Address: 0x9e1c0)
• NtSetTimer2 (Ordinal: 619, Address: 0xa0b80)
• NtSetTimerEx (Ordinal: 620, Address: 0xa0ba0)
• NtSetTimerResolution (Ordinal: 621, Address: 0xa0bc0)
• NtSetUuidSeed (Ordinal: 622, Address: 0xa0be0)
• NtSetValueKey (Ordinal: 623, Address: 0x9e180)
• NtSetVolumeInformationFile (Ordinal: 624, Address: 0xa0c00)
• NtSetWnfProcessNotificationEvent (Ordinal: 625, Address: 0xa0c20)
• NtShutdownSystem (Ordinal: 626, Address: 0xa0c40)
• NtShutdownWorkerFactory (Ordinal: 627, Address: 0xa0c60)
• NtSignalAndWaitForSingleObject (Ordinal: 628, Address: 0xa0c80)
• NtSinglePhaseReject (Ordinal: 629, Address: 0xa0ca0)
• NtStartProfile (Ordinal: 630, Address: 0xa0cc0)
• NtStopProfile (Ordinal: 631, Address: 0xa0ce0)
• NtSubscribeWnfStateChange (Ordinal: 632, Address: 0xa0d00)
• NtSuspendProcess (Ordinal: 633, Address: 0xa0d20)
• NtSuspendThread (Ordinal: 634, Address: 0xa0d40)
• NtSystemDebugControl (Ordinal: 635, Address: 0xa0d60)
• NtTerminateEnclave (Ordinal: 636, Address: 0xa0d80)
• NtTerminateJobObject (Ordinal: 637, Address: 0xa0da0)
• NtTerminateProcess (Ordinal: 638, Address: 0x9db10)
• NtTerminateThread (Ordinal: 639, Address: 0x9dff0)
• NtTestAlert (Ordinal: 640, Address: 0xa0dc0)
• NtThawRegistry (Ordinal: 641, Address: 0xa0de0)
• NtThawTransactions (Ordinal: 642, Address: 0xa0e00)
• NtTraceControl (Ordinal: 643, Address: 0xa0e20)
• NtTraceEvent (Ordinal: 644, Address: 0x9e140)
• NtTranslateFilePath (Ordinal: 645, Address: 0xa0e40)
• NtUmsThreadYield (Ordinal: 646, Address: 0xa0e60)
• NtUnloadDriver (Ordinal: 647, Address: 0xa0e80)
• NtUnloadKey (Ordinal: 648, Address: 0xa0ea0)
• NtUnloadKey2 (Ordinal: 649, Address: 0xa0ec0)
• NtUnloadKeyEx (Ordinal: 650, Address: 0xa0ee0)
• NtUnlockFile (Ordinal: 651, Address: 0xa0f00)
• NtUnlockVirtualMemory (Ordinal: 652, Address: 0xa0f20)
• NtUnmapViewOfSection (Ordinal: 653, Address: 0x9dad0)
• NtUnmapViewOfSectionEx (Ordinal: 654, Address: 0xa0f40)
• NtUnsubscribeWnfStateChange (Ordinal: 655, Address: 0xa0f60)
• NtUpdateWnfStateData (Ordinal: 656, Address: 0xa0f80)
• NtVdmControl (Ordinal: 657, Address: 0xa0fa0)
• NtWaitForAlertByThreadId (Ordinal: 658, Address: 0xa0fc0)
• NtWaitForDebugEvent (Ordinal: 659, Address: 0xa0fe0)
• NtWaitForKeyedEvent (Ordinal: 660, Address: 0xa1000)
• NtWaitForMultipleObjects (Ordinal: 661, Address: 0x9e0e0)
• NtWaitForMultipleObjects32 (Ordinal: 662, Address: 0x9d8d0)
• NtWaitForSingleObject (Ordinal: 663, Address: 0x9d610)
• NtWaitForWorkViaWorkerFactory (Ordinal: 664, Address: 0xa1020)
• NtWaitHighEventPair (Ordinal: 665, Address: 0xa1040)
• NtWaitLowEventPair (Ordinal: 666, Address: 0xa1080)
• NtWorkerFactoryWorkerReady (Ordinal: 667, Address: 0x9d5b0)
• NtWriteFile (Ordinal: 668, Address: 0x9d690)
• NtWriteFileGather (Ordinal: 669, Address: 0x9d8f0)
• NtWriteRequestData (Ordinal: 670, Address: 0x9e070)
• NtWriteVirtualMemory (Ordinal: 671, Address: 0x9dcd0)
• NtYieldExecution (Ordinal: 672, Address: 0x9de50)
• NtdllDefWindowProc_A (Ordinal: 673, Address: 0x9d260)
• NtdllDefWindowProc_W (Ordinal: 674, Address: 0x9d270)
• NtdllDialogWndProc_A (Ordinal: 675, Address: 0x9d320)
• NtdllDialogWndProc_W (Ordinal: 676, Address: 0x9d330)
• PfxFindPrefix (Ordinal: 677, Address: 0xe6040)
• PfxInitialize (Ordinal: 678, Address: 0xe6120)
• PfxInsertPrefix (Ordinal: 679, Address: 0xe6140)
• PfxRemovePrefix (Ordinal: 680, Address: 0xe6260)
• PssNtCaptureSnapshot (Ordinal: 681, Address: 0x113c30)
• PssNtDuplicateSnapshot (Ordinal: 682, Address: 0x114100)
• PssNtFreeRemoteSnapshot (Ordinal: 683, Address: 0x114180)
• PssNtFreeSnapshot (Ordinal: 684, Address: 0x114390)
• PssNtFreeWalkMarker (Ordinal: 685, Address: 0x114520)
• PssNtQuerySnapshot (Ordinal: 686, Address: 0x114550)
• PssNtValidateDescriptor (Ordinal: 687, Address: 0x114800)
• PssNtWalkSnapshot (Ordinal: 688, Address: 0x114990)
• RtlAbortRXact (Ordinal: 689, Address: 0x80950)
• RtlAbsoluteToSelfRelativeSD (Ordinal: 690, Address: 0x6e270)
• RtlAcquirePebLock (Ordinal: 691, Address: 0x7aa90)
• RtlAcquirePrivilege (Ordinal: 692, Address: 0x78180)
• RtlAcquireReleaseSRWLockExclusive (Ordinal: 693, Address: 0x7f180)
• RtlAcquireResourceExclusive (Ordinal: 694, Address: 0x660a0)
• RtlAcquireResourceShared (Ordinal: 695, Address: 0x65f80)
• RtlAcquireSRWLockExclusive (Ordinal: 696, Address: 0x290a0)
• RtlAcquireSRWLockShared (Ordinal: 697, Address: 0x21760)
• RtlActivateActivationContext (Ordinal: 698, Address: 0x73360)
• RtlActivateActivationContextEx (Ordinal: 699, Address: 0x733b0)
• RtlActivateActivationContextUnsafeFast (Ordinal: 700, Address: 0x19900)
• RtlAddAccessAllowedAce (Ordinal: 701, Address: 0x78880)
• RtlAddAccessAllowedAceEx (Ordinal: 702, Address: 0x79fd0)
• RtlAddAccessAllowedObjectAce (Ordinal: 703, Address: 0xe93f0)
• RtlAddAccessDeniedAce (Ordinal: 704, Address: 0x8c270)
• RtlAddAccessDeniedAceEx (Ordinal: 705, Address: 0x85d50)
• RtlAddAccessDeniedObjectAce (Ordinal: 706, Address: 0xe9450)
• RtlAddAccessFilterAce (Ordinal: 707, Address: 0xe94b0)
• RtlAddAce (Ordinal: 708, Address: 0x68130)
• RtlAddActionToRXact (Ordinal: 709, Address: 0x8ae40)
• RtlAddAtomToAtomTable (Ordinal: 710, Address: 0x59450)
• RtlAddAttributeActionToRXact (Ordinal: 711, Address: 0x81b10)
• RtlAddAuditAccessAce (Ordinal: 712, Address: 0x8b8d0)
• RtlAddAuditAccessAceEx (Ordinal: 713, Address: 0x8af70)
• RtlAddAuditAccessObjectAce (Ordinal: 714, Address: 0xe96c0)
• RtlAddCompoundAce (Ordinal: 715, Address: 0xe9730)
• RtlAddFunctionTable (Ordinal: 716, Address: 0x69090)
• RtlAddGrowableFunctionTable (Ordinal: 717, Address: 0x69be0)
• RtlAddIntegrityLabelToBoundaryDescriptor (Ordinal: 718, Address: 0xeb190)
• RtlAddMandatoryAce (Ordinal: 719, Address: 0x68750)
• RtlAddProcessTrustLabelAce (Ordinal: 720, Address: 0x67cc0)
• RtlAddRefActivationContext (Ordinal: 721, Address: 0x134c0)
• RtlAddRefMemoryStream (Ordinal: 722, Address: 0x847b0)
• RtlAddResourceAttributeAce (Ordinal: 723, Address: 0xe98a0)
• RtlAddSIDToBoundaryDescriptor (Ordinal: 724, Address: 0x80020)
• RtlAddScopedPolicyIDAce (Ordinal: 725, Address: 0xe9bf0)
• RtlAddVectoredContinueHandler (Ordinal: 726, Address: 0xd96c0)
• RtlAddVectoredExceptionHandler (Ordinal: 727, Address: 0x82070)
• RtlAddressInSectionTable (Ordinal: 728, Address: 0x77f70)
• RtlAdjustPrivilege (Ordinal: 729, Address: 0x7a1e0)
• RtlAllocateActivationContextStack (Ordinal: 730, Address: 0x71840)
• RtlAllocateAndInitializeSid (Ordinal: 731, Address: 0x6e920)
• RtlAllocateAndInitializeSidEx (Ordinal: 732, Address: 0x8b810)
• RtlAllocateHandle (Ordinal: 733, Address: 0x59a90)
• RtlAllocateHeap (Ordinal: 734, Address: 0x2a9a0)
• RtlAllocateMemoryBlockLookaside (Ordinal: 735, Address: 0x11c010)
• RtlAllocateMemoryZone (Ordinal: 736, Address: 0x11c130)
• RtlAllocateWnfSerializationGroup (Ordinal: 737, Address: 0x84880)
• RtlAnsiCharToUnicodeChar (Ordinal: 738, Address: 0x62970)
• RtlAnsiStringToUnicodeSize (Ordinal: 739, Address: 0x16de0)
• RtlAnsiStringToUnicodeString (Ordinal: 740, Address: 0x19580)
• RtlAppendAsciizToString (Ordinal: 741, Address: 0xeb670)
• RtlAppendPathElement (Ordinal: 742, Address: 0xcc160)
• RtlAppendStringToString (Ordinal: 743, Address: 0xeb6e0)
• RtlAppendUnicodeStringToString (Ordinal: 744, Address: 0x17270)
• RtlAppendUnicodeToString (Ordinal: 745, Address: 0x37990)
• RtlApplicationVerifierStop (Ordinal: 746, Address: 0xdbf20)
• RtlApplyRXact (Ordinal: 747, Address: 0xe6330)
• RtlApplyRXactNoFlush (Ordinal: 748, Address: 0x80920)
• RtlAppxIsFileOwnedByTrustedInstaller (Ordinal: 749, Address: 0xcbcf0)
• RtlAreAllAccessesGranted (Ordinal: 750, Address: 0x7ccb0)
• RtlAreAnyAccessesGranted (Ordinal: 751, Address: 0xe63e0)
• RtlAreBitsClear (Ordinal: 752, Address: 0xeb7b0)
• RtlAreBitsClearEx (Ordinal: 753, Address: 0xeb870)
• RtlAreBitsSet (Ordinal: 754, Address: 0x7bf10)
• RtlAreLongPathsEnabled (Ordinal: 755, Address: 0x762b0)
• RtlAssert (Ordinal: 756, Address: 0xed780)
• RtlAvlInsertNodeEx (Ordinal: 757, Address: 0x69de0)
• RtlAvlRemoveNode (Ordinal: 758, Address: 0x69530)
• RtlBarrier (Ordinal: 759, Address: 0xed8b0)
• RtlBarrierForDelete (Ordinal: 760, Address: 0xed8c0)
• RtlCallEnclaveReturn (Ordinal: 761, Address: 0xa15fb)
• RtlCancelTimer (Ordinal: 762, Address: 0x112ed0)
• RtlCanonicalizeDomainName (Ordinal: 763, Address: 0xcf10)
• RtlCapabilityCheck (Ordinal: 764, Address: 0x3fc90)
• RtlCapabilityCheckForSingleSessionSku (Ordinal: 765, Address: 0x88c10)
• RtlCaptureContext (Ordinal: 766, Address: 0xa16f0)
• RtlCaptureContext2 (Ordinal: 767, Address: 0xa1830)
• RtlCaptureStackBackTrace (Ordinal: 768, Address: 0x526a0)
• RtlCharToInteger (Ordinal: 769, Address: 0x76b60)
• RtlCheckBootStatusIntegrity (Ordinal: 770, Address: 0xedc40)
• RtlCheckForOrphanedCriticalSections (Ordinal: 771, Address: 0x7dfd0)
• RtlCheckPortableOperatingSystem (Ordinal: 772, Address: 0x47c50)
• RtlCheckRegistryKey (Ordinal: 773, Address: 0x458e0)
• RtlCheckSandboxedToken (Ordinal: 774, Address: 0x85f70)
• RtlCheckSystemBootStatusIntegrity (Ordinal: 775, Address: 0xedda0)
• RtlCheckTokenCapability (Ordinal: 776, Address: 0x3c650)
• RtlCheckTokenMembership (Ordinal: 777, Address: 0xe63f0)
• RtlCheckTokenMembershipEx (Ordinal: 778, Address: 0x36520)
• RtlCleanUpTEBLangLists (Ordinal: 779, Address: 0x6fdc0)
• RtlClearAllBits (Ordinal: 780, Address: 0x78f00)
• RtlClearAllBitsEx (Ordinal: 781, Address: 0xeb930)
• RtlClearBit (Ordinal: 782, Address: 0x9ccf0)
• RtlClearBitEx (Ordinal: 783, Address: 0xeb960)
• RtlClearBits (Ordinal: 784, Address: 0x58550)
• RtlClearBitsEx (Ordinal: 785, Address: 0xeb970)
• RtlClearThreadWorkOnBehalfTicket (Ordinal: 786, Address: 0x68a70)
• RtlCloneMemoryStream (Ordinal: 787, Address: 0xd59d0)
• RtlCloneUserProcess (Ordinal: 788, Address: 0xd6400)
• RtlCmDecodeMemIoResource (Ordinal: 789, Address: 0xf1ed0)
• RtlCmEncodeMemIoResource (Ordinal: 790, Address: 0xf1f40)
• RtlCommitDebugInfo (Ordinal: 791, Address: 0xd7370)
• RtlCommitMemoryStream (Ordinal: 792, Address: 0xd59d0)
• RtlCompactHeap (Ordinal: 793, Address: 0xf2340)
• RtlCompareAltitudes (Ordinal: 794, Address: 0xf5710)
• RtlCompareMemory (Ordinal: 795, Address: 0xa1f40)
• RtlCompareMemoryUlong (Ordinal: 796, Address: 0xa1fc0)
• RtlCompareString (Ordinal: 797, Address: 0x8b760)
• RtlCompareUnicodeString (Ordinal: 798, Address: 0x16090)
• RtlCompareUnicodeStrings (Ordinal: 799, Address: 0x15ff0)
• RtlCompleteProcessCloning (Ordinal: 800, Address: 0x9ba40)
• RtlCompressBuffer (Ordinal: 801, Address: 0x82f80)
• RtlComputeCrc32 (Ordinal: 802, Address: 0x59e90)
• RtlComputeImportTableHash (Ordinal: 803, Address: 0xe0640)
• RtlComputePrivatizedDllName_U (Ordinal: 804, Address: 0xd5650)
• RtlConnectToSm (Ordinal: 805, Address: 0x89bb0)
• RtlConsoleMultiByteToUnicodeN (Ordinal: 806, Address: 0xe5060)
• RtlConstructCrossVmEventPath (Ordinal: 807, Address: 0xf5b20)
• RtlConstructCrossVmMutexPath (Ordinal: 808, Address: 0xf5b20)
• RtlContractHashTable (Ordinal: 809, Address: 0x883e0)
• RtlConvertDeviceFamilyInfoToString (Ordinal: 810, Address: 0x7b810)
• RtlConvertExclusiveToShared (Ordinal: 811, Address: 0x8a5e0)
• RtlConvertLCIDToString (Ordinal: 812, Address: 0xeee60)
• RtlConvertSRWLockExclusiveToShared (Ordinal: 813, Address: 0x85870)
• RtlConvertSharedToExclusive (Ordinal: 814, Address: 0x7ed80)
• RtlConvertSidToUnicodeString (Ordinal: 815, Address: 0x37250)
• RtlConvertToAutoInheritSecurityObject (Ordinal: 816, Address: 0xd6940)
• RtlCopyBitMap (Ordinal: 817, Address: 0xeba30)
• RtlCopyContext (Ordinal: 818, Address: 0x51f70)
• RtlCopyExtendedContext (Ordinal: 819, Address: 0xf5cc0)
• RtlCopyLuid (Ordinal: 820, Address: 0x7a1d0)
• RtlCopyLuidAndAttributesArray (Ordinal: 821, Address: 0xe6410)
• RtlCopyMappedMemory (Ordinal: 822, Address: 0x858d0)
• RtlCopyMemory (Ordinal: 823, Address: 0xa4400)
• RtlCopyMemoryNonTemporal (Ordinal: 824, Address: 0xa1ff0)
• RtlCopyMemoryStreamTo (Ordinal: 825, Address: 0xd59d0)
• RtlCopyOutOfProcessMemoryStreamTo (Ordinal: 826, Address: 0xd59d0)
• RtlCopySecurityDescriptor (Ordinal: 827, Address: 0x6dff0)
• RtlCopySid (Ordinal: 828, Address: 0x688d0)
• RtlCopySidAndAttributesArray (Ordinal: 829, Address: 0xe6440)
• RtlCopyString (Ordinal: 830, Address: 0x85960)
• RtlCopyUnicodeString (Ordinal: 831, Address: 0x102f0)
• RtlCrc32 (Ordinal: 832, Address: 0x7f2f0)
• RtlCrc64 (Ordinal: 833, Address: 0xf6430)
• RtlCreateAcl (Ordinal: 834, Address: 0x3a450)
• RtlCreateActivationContext (Ordinal: 835, Address: 0x73e60)
• RtlCreateAndSetSD (Ordinal: 836, Address: 0x67e50)
• RtlCreateAtomTable (Ordinal: 837, Address: 0x59ca0)
• RtlCreateBootStatusDataFile (Ordinal: 838, Address: 0xede00)
• RtlCreateBoundaryDescriptor (Ordinal: 839, Address: 0x82660)
• RtlCreateEnvironment (Ordinal: 840, Address: 0x4b1b0)
• RtlCreateEnvironmentEx (Ordinal: 841, Address: 0x4b220)
• RtlCreateHashTable (Ordinal: 842, Address: 0x743b0)
• RtlCreateHashTableEx (Ordinal: 843, Address: 0x8af60)
• RtlCreateHeap (Ordinal: 844, Address: 0xa8b0)
• RtlCreateMemoryBlockLookaside (Ordinal: 845, Address: 0x7b590)
• RtlCreateMemoryZone (Ordinal: 846, Address: 0x7b760)
• RtlCreateProcessParameters (Ordinal: 847, Address: 0xd6690)
• RtlCreateProcessParametersEx (Ordinal: 848, Address: 0x4a850)
• RtlCreateProcessParametersWithTemplate (Ordinal: 849, Address: 0x4a8c0)
• RtlCreateProcessReflection (Ordinal: 850, Address: 0xd5b00)
• RtlCreateQueryDebugBuffer (Ordinal: 851, Address: 0xd7380)
• RtlCreateRegistryKey (Ordinal: 852, Address: 0xee670)
• RtlCreateSecurityDescriptor (Ordinal: 853, Address: 0x3c950)
• RtlCreateServiceSid (Ordinal: 854, Address: 0x3fa80)
• RtlCreateSystemVolumeInformationFolder (Ordinal: 855, Address: 0x88420)
• RtlCreateTagHeap (Ordinal: 856, Address: 0x7da40)
• RtlCreateTimer (Ordinal: 857, Address: 0x9d50)
• RtlCreateTimerQueue (Ordinal: 858, Address: 0x83010)
• RtlCreateUmsCompletionList (Ordinal: 859, Address: 0xf6e50)
• RtlCreateUmsThreadContext (Ordinal: 860, Address: 0xf6f70)
• RtlCreateUnicodeString (Ordinal: 861, Address: 0x38af0)
• RtlCreateUnicodeStringFromAsciiz (Ordinal: 862, Address: 0x16570)
• RtlCreateUserFiberShadowStack (Ordinal: 863, Address: 0xe1870)
• RtlCreateUserProcess (Ordinal: 864, Address: 0xe18f0)
• RtlCreateUserProcessEx (Ordinal: 865, Address: 0x88f40)
• RtlCreateUserSecurityObject (Ordinal: 866, Address: 0xd6950)
• RtlCreateUserStack (Ordinal: 867, Address: 0x77310)
• RtlCreateUserThread (Ordinal: 868, Address: 0x48780)
• RtlCreateVirtualAccountSid (Ordinal: 869, Address: 0x84500)
• RtlCultureNameToLCID (Ordinal: 870, Address: 0x3b850)
• RtlCustomCPToUnicodeN (Ordinal: 871, Address: 0xe51d0)
• RtlCutoverTimeToSystemTime (Ordinal: 872, Address: 0x5c3a0)
• RtlDeCommitDebugInfo (Ordinal: 873, Address: 0xd7620)
• RtlDeNormalizeProcessParams (Ordinal: 874, Address: 0xd6700)
• RtlDeactivateActivationContext (Ordinal: 875, Address: 0x71a40)
• RtlDeactivateActivationContextUnsafeFast (Ordinal: 876, Address: 0x197b0)
• RtlDebugPrintTimes (Ordinal: 877, Address: 0x808c0)
• RtlDecodePointer (Ordinal: 878, Address: 0x6b3e0)
• RtlDecodeRemotePointer (Ordinal: 879, Address: 0xdc7e0)
• RtlDecodeSystemPointer (Ordinal: 880, Address: 0x83da0)
• RtlDecompressBuffer (Ordinal: 881, Address: 0xf5910)
• RtlDecompressBufferEx (Ordinal: 882, Address: 0x801f0)
• RtlDecompressFragment (Ordinal: 883, Address: 0xf5990)
• RtlDefaultNpAcl (Ordinal: 884, Address: 0xd69f0)
• RtlDelete (Ordinal: 885, Address: 0x66ad0)
• RtlDeleteAce (Ordinal: 886, Address: 0x79780)
• RtlDeleteAtomFromAtomTable (Ordinal: 887, Address: 0x59150)
• RtlDeleteBarrier (Ordinal: 888, Address: 0xed8d0)
• RtlDeleteBoundaryDescriptor (Ordinal: 889, Address: 0x22e70)
• RtlDeleteCriticalSection (Ordinal: 890, Address: 0x10fc0)
• RtlDeleteElementGenericTable (Ordinal: 891, Address: 0x665d0)
• RtlDeleteElementGenericTableAvl (Ordinal: 892, Address: 0x5ccf0)
• RtlDeleteElementGenericTableAvlEx (Ordinal: 893, Address: 0x5cd30)
• RtlDeleteFunctionTable (Ordinal: 894, Address: 0x68eb0)
• RtlDeleteGrowableFunctionTable (Ordinal: 895, Address: 0x69380)
• RtlDeleteHashTable (Ordinal: 896, Address: 0x7bf50)
• RtlDeleteNoSplay (Ordinal: 897, Address: 0x66b70)
• RtlDeleteRegistryValue (Ordinal: 898, Address: 0x8c500)
• RtlDeleteResource (Ordinal: 899, Address: 0x10f30)
• RtlDeleteSecurityObject (Ordinal: 900, Address: 0x7e0c0)
• RtlDeleteTimer (Ordinal: 901, Address: 0x9c00)
• RtlDeleteTimerQueue (Ordinal: 902, Address: 0x112ee0)
• RtlDeleteTimerQueueEx (Ordinal: 903, Address: 0x84d30)
• RtlDeleteUmsCompletionList (Ordinal: 904, Address: 0xf7080)
• RtlDeleteUmsThreadContext (Ordinal: 905, Address: 0xf70e0)
• RtlDequeueUmsCompletionListItems (Ordinal: 906, Address: 0xf7140)
• RtlDeregisterSecureMemoryCacheCallback (Ordinal: 907, Address: 0xf7b00)
• RtlDeregisterWait (Ordinal: 908, Address: 0x85e00)
• RtlDeregisterWaitEx (Ordinal: 909, Address: 0xb5b0)
• RtlDeriveCapabilitySidsFromName (Ordinal: 910, Address: 0x1fd40)
• RtlDestroyAtomTable (Ordinal: 911, Address: 0x8ad00)
• RtlDestroyEnvironment (Ordinal: 912, Address: 0x7e110)
• RtlDestroyHandleTable (Ordinal: 913, Address: 0x85a70)
• RtlDestroyHeap (Ordinal: 914, Address: 0x9680)
• RtlDestroyMemoryBlockLookaside (Ordinal: 915, Address: 0x854f0)
• RtlDestroyMemoryZone (Ordinal: 916, Address: 0x85550)
• RtlDestroyProcessParameters (Ordinal: 917, Address: 0x7e110)
• RtlDestroyQueryDebugBuffer (Ordinal: 918, Address: 0xd7630)
• RtlDetectHeapLeaks (Ordinal: 919, Address: 0x61760)
• RtlDetermineDosPathNameType_U (Ordinal: 920, Address: 0x77290)
• RtlDisableThreadProfiling (Ordinal: 921, Address: 0xcbe60)
• RtlDisownModuleHeapAllocation (Ordinal: 922, Address: 0x80350)
• RtlDllShutdownInProgress (Ordinal: 923, Address: 0x64900)
• RtlDnsHostNameToComputerName (Ordinal: 924, Address: 0x61ff0)
• RtlDoesFileExists_U (Ordinal: 925, Address: 0x861f0)
• RtlDoesNameContainWildCards (Ordinal: 926, Address: 0xfb4a0)
• RtlDosApplyFileIsolationRedirection_Ustr (Ordinal: 927, Address: 0x1a9e0)
• RtlDosLongPathNameToNtPathName_U_WithStatus (Ordinal: 928, Address: 0xcc3b0)
• RtlDosLongPathNameToRelativeNtPathName_U_WithStatus (Ordinal: 929, Address: 0xcc3e0)
• RtlDosPathNameToNtPathName_U (Ordinal: 930, Address: 0x17310)
• RtlDosPathNameToNtPathName_U_WithStatus (Ordinal: 931, Address: 0x16be0)
• RtlDosPathNameToRelativeNtPathName_U (Ordinal: 932, Address: 0x16b80)
• RtlDosPathNameToRelativeNtPathName_U_WithStatus (Ordinal: 933, Address: 0x1aee0)
• RtlDosSearchPath_U (Ordinal: 934, Address: 0x89470)
• RtlDosSearchPath_Ustr (Ordinal: 935, Address: 0x19c40)
• RtlDowncaseUnicodeChar (Ordinal: 936, Address: 0xeb2e0)
• RtlDowncaseUnicodeString (Ordinal: 937, Address: 0x7c6e0)
• RtlDrainNonVolatileFlush (Ordinal: 938, Address: 0xfbcc0)
• RtlDumpResource (Ordinal: 939, Address: 0xe8d70)
• RtlDuplicateUnicodeString (Ordinal: 940, Address: 0x79e40)
• RtlEmptyAtomTable (Ordinal: 941, Address: 0x8adc0)
• RtlEnableEarlyCriticalSectionEventCreation (Ordinal: 942, Address: 0xe8dc0)
• RtlEnableThreadProfiling (Ordinal: 943, Address: 0xcbed0)
• RtlEnclaveCallDispatch (Ordinal: 944, Address: 0xa1520)
• RtlEnclaveCallDispatchReturn (Ordinal: 945, Address: 0xa1551)
• RtlEncodePointer (Ordinal: 946, Address: 0x72f40)
• RtlEncodeRemotePointer (Ordinal: 947, Address: 0xdc850)
• RtlEncodeSystemPointer (Ordinal: 948, Address: 0x856e0)
• RtlEndEnumerationHashTable (Ordinal: 949, Address: 0x81a00)
• RtlEndStrongEnumerationHashTable (Ordinal: 950, Address: 0x808c0)
• RtlEndWeakEnumerationHashTable (Ordinal: 951, Address: 0xf5c90)
• RtlEnterCriticalSection (Ordinal: 952, Address: 0x2faa0)
• RtlEnterUmsSchedulingMode (Ordinal: 953, Address: 0xf71d0)
• RtlEnumProcessHeaps (Ordinal: 954, Address: 0xf24d0)
• RtlEnumerateEntryHashTable (Ordinal: 955, Address: 0x68d10)
• RtlEnumerateGenericTable (Ordinal: 956, Address: 0x66560)
• RtlEnumerateGenericTableAvl (Ordinal: 957, Address: 0x65ed0)
• RtlEnumerateGenericTableLikeADirectory (Ordinal: 958, Address: 0xf78b0)
• RtlEnumerateGenericTableWithoutSplaying (Ordinal: 959, Address: 0x66dc0)
• RtlEnumerateGenericTableWithoutSplayingAvl (Ordinal: 960, Address: 0x65ef0)
• RtlEqualComputerName (Ordinal: 961, Address: 0xeb2f0)
• RtlEqualDomainName (Ordinal: 962, Address: 0xce90)
• RtlEqualLuid (Ordinal: 963, Address: 0xe6500)
• RtlEqualPrefixSid (Ordinal: 964, Address: 0x37de0)
• RtlEqualSid (Ordinal: 965, Address: 0x38310)
• RtlEqualString (Ordinal: 966, Address: 0x61f50)
• RtlEqualUnicodeString (Ordinal: 967, Address: 0x20d10)
• RtlEqualWnfChangeStamps (Ordinal: 968, Address: 0x85cb0)
• RtlEraseUnicodeString (Ordinal: 969, Address: 0x86250)
• RtlEthernetAddressToStringA (Ordinal: 970, Address: 0xfbe10)
• RtlEthernetAddressToStringW (Ordinal: 971, Address: 0xfbe80)
• RtlEthernetStringToAddressA (Ordinal: 972, Address: 0xfbef0)
• RtlEthernetStringToAddressW (Ordinal: 973, Address: 0xfc030)
• RtlExecuteUmsThread (Ordinal: 974, Address: 0xf72b0)
• RtlExitUserProcess (Ordinal: 975, Address: 0x5eed0)
• RtlExitUserThread (Ordinal: 976, Address: 0x4ec30)
• RtlExpandEnvironmentStrings (Ordinal: 977, Address: 0x15630)
• RtlExpandEnvironmentStrings_U (Ordinal: 978, Address: 0x77e00)
• RtlExpandHashTable (Ordinal: 979, Address: 0x88c70)
• RtlExtendCorrelationVector (Ordinal: 980, Address: 0x85130)
• RtlExtendMemoryBlockLookaside (Ordinal: 981, Address: 0x1a60)
• RtlExtendMemoryZone (Ordinal: 982, Address: 0x1a70)
• RtlExtractBitMap (Ordinal: 983, Address: 0xebc40)
• RtlFillMemory (Ordinal: 984, Address: 0xfc2d0)
• RtlFillMemoryNonTemporal (Ordinal: 985, Address: 0xa2130)
• RtlFillNonVolatileMemory (Ordinal: 986, Address: 0xfc2f0)
• RtlFinalReleaseOutOfProcessMemoryStream (Ordinal: 987, Address: 0x808c0)
• RtlFindAceByType (Ordinal: 988, Address: 0x3c040)
• RtlFindActivationContextSectionGuid (Ordinal: 989, Address: 0x1cd80)
• RtlFindActivationContextSectionString (Ordinal: 990, Address: 0x1c6c0)
• RtlFindCharInUnicodeString (Ordinal: 991, Address: 0x1d390)
• RtlFindClearBits (Ordinal: 992, Address: 0x86520)
• RtlFindClearBitsAndSet (Ordinal: 993, Address: 0x54fe0)
• RtlFindClearBitsEx (Ordinal: 994, Address: 0xebde0)
• RtlFindClearRuns (Ordinal: 995, Address: 0xec0e0)
• RtlFindClosestEncodableLength (Ordinal: 996, Address: 0xf2030)
• RtlFindExportedRoutineByName (Ordinal: 997, Address: 0x7ac90)
• RtlFindLastBackwardRunClear (Ordinal: 998, Address: 0x59dd0)
• RtlFindLeastSignificantBit (Ordinal: 999, Address: 0x85940)
• RtlFindLongestRunClear (Ordinal: 1000, Address: 0xec3c0)
• RtlFindMessage (Ordinal: 1001, Address: 0x6a4d0)
• RtlFindMostSignificantBit (Ordinal: 1002, Address: 0x85a30)
• RtlFindNextForwardRunClear (Ordinal: 1003, Address: 0x863f0)
• RtlFindSetBits (Ordinal: 1004, Address: 0x8a0b0)
• RtlFindSetBitsAndClear (Ordinal: 1005, Address: 0xec400)
• RtlFindSetBitsAndClearEx (Ordinal: 1006, Address: 0xec7a0)
• RtlFindSetBitsEx (Ordinal: 1007, Address: 0xecb20)
• RtlFindUnicodeSubstring (Ordinal: 1008, Address: 0x877f0)
• RtlFirstEntrySList (Ordinal: 1009, Address: 0xa1150)
• RtlFirstFreeAce (Ordinal: 1010, Address: 0x37710)
• RtlFlsAlloc (Ordinal: 1011, Address: 0x75860)
• RtlFlsFree (Ordinal: 1012, Address: 0x74670)
• RtlFlsGetValue (Ordinal: 1013, Address: 0x53600)
• RtlFlsSetValue (Ordinal: 1014, Address: 0x4fb60)
• RtlFlushHeaps (Ordinal: 1015, Address: 0x74f80)
• RtlFlushNonVolatileMemory (Ordinal: 1016, Address: 0xfbcf0)
• RtlFlushNonVolatileMemoryRanges (Ordinal: 1017, Address: 0xfc3a0)
• RtlFlushSecureMemoryCache (Ordinal: 1018, Address: 0xf7bc0)
• RtlFormatCurrentUserKeyPath (Ordinal: 1019, Address: 0x36c40)
• RtlFormatMessage (Ordinal: 1020, Address: 0xfc590)
• RtlFormatMessageEx (Ordinal: 1021, Address: 0x67200)
• RtlFreeActivationContextStack (Ordinal: 1022, Address: 0x71900)
• RtlFreeAnsiString (Ordinal: 1023, Address: 0x16760)
• RtlFreeHandle (Ordinal: 1024, Address: 0x59d10)
• RtlFreeHeap (Ordinal: 1025, Address: 0x24760)
• RtlFreeMemoryBlockLookaside (Ordinal: 1026, Address: 0x11c190)
• RtlFreeNonVolatileToken (Ordinal: 1027, Address: 0xfc430)
• RtlFreeOemString (Ordinal: 1028, Address: 0x8b140)
• RtlFreeSid (Ordinal: 1029, Address: 0x761a0)
• RtlFreeThreadActivationContextStack (Ordinal: 1030, Address: 0x718c0)
• RtlFreeUTF8String (Ordinal: 1031, Address: 0x16760)
• RtlFreeUnicodeString (Ordinal: 1032, Address: 0x16760)
• RtlFreeUserFiberShadowStack (Ordinal: 1033, Address: 0xe1980)
• RtlFreeUserStack (Ordinal: 1034, Address: 0x7ffe0)
• RtlGUIDFromString (Ordinal: 1035, Address: 0x6af50)
• RtlGenerate8dot3Name (Ordinal: 1036, Address: 0xfc780)
• RtlGetAce (Ordinal: 1037, Address: 0x721f0)
• RtlGetActiveActivationContext (Ordinal: 1038, Address: 0x6c5d0)
• RtlGetActiveConsoleId (Ordinal: 1039, Address: 0x83e50)
• RtlGetAppContainerNamedObjectPath (Ordinal: 1040, Address: 0x43ee0)
• RtlGetAppContainerParent (Ordinal: 1041, Address: 0x43e10)
• RtlGetAppContainerSidType (Ordinal: 1042, Address: 0x44680)
• RtlGetCallersAddress (Ordinal: 1043, Address: 0xeda10)
• RtlGetCompressionWorkSpaceSize (Ordinal: 1044, Address: 0x81280)
• RtlGetConsoleSessionForegroundProcessId (Ordinal: 1045, Address: 0xfce90)
• RtlGetControlSecurityDescriptor (Ordinal: 1046, Address: 0x7ada0)
• RtlGetCriticalSectionRecursionCount (Ordinal: 1047, Address: 0xe8df0)
• RtlGetCurrentDirectory_U (Ordinal: 1048, Address: 0x5e790)
• RtlGetCurrentPeb (Ordinal: 1049, Address: 0xfced0)
• RtlGetCurrentProcessorNumber (Ordinal: 1050, Address: 0xa2230)
• RtlGetCurrentProcessorNumberEx (Ordinal: 1051, Address: 0xa2270)
• RtlGetCurrentServiceSessionId (Ordinal: 1052, Address: 0x24850)
• RtlGetCurrentTransaction (Ordinal: 1053, Address: 0x6ebd0)
• RtlGetCurrentUmsThread (Ordinal: 1054, Address: 0x59ee0)
• RtlGetDaclSecurityDescriptor (Ordinal: 1055, Address: 0x71d50)
• RtlGetDeviceFamilyInfoEnum (Ordinal: 1056, Address: 0x3f850)
• RtlGetElementGenericTable (Ordinal: 1057, Address: 0x7f100)
• RtlGetElementGenericTableAvl (Ordinal: 1058, Address: 0xf79e0)
• RtlGetEnabledExtendedFeatures (Ordinal: 1059, Address: 0x82560)
• RtlGetExePath (Ordinal: 1060, Address: 0x82a90)
• RtlGetExtendedContextLength (Ordinal: 1061, Address: 0x52cb0)
• RtlGetExtendedContextLength2 (Ordinal: 1062, Address: 0x52e60)
• RtlGetExtendedFeaturesMask (Ordinal: 1063, Address: 0xf5ce0)
• RtlGetFileMUIPath (Ordinal: 1064, Address: 0x468f0)
• RtlGetFrame (Ordinal: 1065, Address: 0xcdb40)
• RtlGetFullPathName_U (Ordinal: 1066, Address: 0x81cc0)
• RtlGetFullPathName_UEx (Ordinal: 1067, Address: 0x1d800)
• RtlGetFullPathName_UstrEx (Ordinal: 1068, Address: 0x1d890)
• RtlGetFunctionTableListHead (Ordinal: 1069, Address: 0xe0b10)
• RtlGetGroupSecurityDescriptor (Ordinal: 1070, Address: 0x7aa50)
• RtlGetIntegerAtom (Ordinal: 1071, Address: 0x598f0)
• RtlGetInterruptTimePrecise (Ordinal: 1072, Address: 0x43d60)
• RtlGetLastNtStatus (Ordinal: 1073, Address: 0x7cff0)
• RtlGetLastWin32Error (Ordinal: 1074, Address: 0x19f0)
• RtlGetLengthWithoutLastFullDosOrNtPathElement (Ordinal: 1075, Address: 0x788b0)
• RtlGetLengthWithoutTrailingPathSeperators (Ordinal: 1076, Address: 0x86040)
• RtlGetLocaleFileMappingAddress (Ordinal: 1077, Address: 0x7d200)
• RtlGetLongestNtPathLength (Ordinal: 1078, Address: 0x85cc0)
• RtlGetMultiTimePrecise (Ordinal: 1079, Address: 0xe5b90)
• RtlGetNativeSystemInformation (Ordinal: 1080, Address: 0x9dc50)
• RtlGetNextEntryHashTable (Ordinal: 1081, Address: 0x82a50)
• RtlGetNextUmsListItem (Ordinal: 1082, Address: 0xf74b0)
• RtlGetNonVolatileToken (Ordinal: 1083, Address: 0xfc450)
• RtlGetNtGlobalFlags (Ordinal: 1084, Address: 0x9cd40)
• RtlGetNtProductType (Ordinal: 1085, Address: 0x3cbb0)
• RtlGetNtSystemRoot (Ordinal: 1086, Address: 0x16bb0)
• RtlGetNtVersionNumbers (Ordinal: 1087, Address: 0xd49a0)
• RtlGetOwnerSecurityDescriptor (Ordinal: 1088, Address: 0x795b0)
• RtlGetParentLocaleName (Ordinal: 1089, Address: 0x3c490)
• RtlGetPersistedStateLocation (Ordinal: 1090, Address: 0x4a370)
• RtlGetProcessHeaps (Ordinal: 1091, Address: 0xf24e0)
• RtlGetProcessPreferredUILanguages (Ordinal: 1092, Address: 0x8ab10)
• RtlGetProductInfo (Ordinal: 1093, Address: 0x7e7a0)
• RtlGetReturnAddressHijackTarget (Ordinal: 1094, Address: 0xfd850)
• RtlGetSaclSecurityDescriptor (Ordinal: 1095, Address: 0x76c20)
• RtlGetSearchPath (Ordinal: 1096, Address: 0x83e00)
• RtlGetSecurityDescriptorRMControl (Ordinal: 1097, Address: 0x85ff0)
• RtlGetSessionProperties (Ordinal: 1098, Address: 0xe6520)
• RtlGetSetBootStatusData (Ordinal: 1099, Address: 0xedf60)
• RtlGetSuiteMask (Ordinal: 1100, Address: 0x3cc10)
• RtlGetSystemBootStatus (Ordinal: 1101, Address: 0x8bee0)
• RtlGetSystemBootStatusEx (Ordinal: 1102, Address: 0xee0c0)
• RtlGetSystemPreferredUILanguages (Ordinal: 1103, Address: 0x76fa0)
• RtlGetSystemTimeAndBias (Ordinal: 1104, Address: 0x9cbd0)
• RtlGetSystemTimePrecise (Ordinal: 1105, Address: 0x400a0)
• RtlGetThreadErrorMode (Ordinal: 1106, Address: 0x61bf0)
• RtlGetThreadLangIdByIndex (Ordinal: 1107, Address: 0xeef60)
• RtlGetThreadPreferredUILanguages (Ordinal: 1108, Address: 0x35ca0)
• RtlGetThreadWorkOnBehalfTicket (Ordinal: 1109, Address: 0x6c6c0)
• RtlGetTokenNamedObjectPath (Ordinal: 1110, Address: 0x458c0)
• RtlGetUILanguageInfo (Ordinal: 1111, Address: 0xef030)
• RtlGetUmsCompletionListEvent (Ordinal: 1112, Address: 0xf74e0)
• RtlGetUnloadEventTrace (Ordinal: 1113, Address: 0xce750)
• RtlGetUnloadEventTraceEx (Ordinal: 1114, Address: 0xce760)
• RtlGetUserInfoHeap (Ordinal: 1115, Address: 0x1bc0)
• RtlGetUserPreferredUILanguages (Ordinal: 1116, Address: 0x7ca20)
• RtlGetVersion (Ordinal: 1117, Address: 0x3e4e0)
• RtlGrowFunctionTable (Ordinal: 1118, Address: 0xe0b20)
• RtlGuardCheckLongJumpTarget (Ordinal: 1119, Address: 0x6eec0)
• RtlHashUnicodeString (Ordinal: 1120, Address: 0x1ccb0)
• RtlHeapTrkInitialize (Ordinal: 1121, Address: 0xfda80)
• RtlIdentifierAuthoritySid (Ordinal: 1122, Address: 0x7a500)
• RtlIdnToAscii (Ordinal: 1123, Address: 0xd0c0)
• RtlIdnToNameprepUnicode (Ordinal: 1124, Address: 0xfeed0)
• RtlIdnToUnicode (Ordinal: 1125, Address: 0xc6f0)
• RtlImageDirectoryEntryToData (Ordinal: 1126, Address: 0x7e340)
• RtlImageNtHeader (Ordinal: 1127, Address: 0x35bd0)
• RtlImageNtHeaderEx (Ordinal: 1128, Address: 0x32ad0)
• RtlImageRvaToSection (Ordinal: 1129, Address: 0x33aa0)
• RtlImageRvaToVa (Ordinal: 1130, Address: 0x86f40)
• RtlImpersonateSelf (Ordinal: 1131, Address: 0x783f0)
• RtlImpersonateSelfEx (Ordinal: 1132, Address: 0x78400)
• RtlIncrementCorrelationVector (Ordinal: 1133, Address: 0x851c0)
• RtlInitAnsiString (Ordinal: 1134, Address: 0x152f0)
• RtlInitAnsiStringEx (Ordinal: 1135, Address: 0x16530)
• RtlInitBarrier (Ordinal: 1136, Address: 0xed900)
• RtlInitCodePageTable (Ordinal: 1137, Address: 0xe5330)
• RtlInitEnumerationHashTable (Ordinal: 1138, Address: 0x68ae0)
• RtlInitMemoryStream (Ordinal: 1139, Address: 0x808c0)
• RtlInitNlsTables (Ordinal: 1140, Address: 0xe5430)
• RtlInitOutOfProcessMemoryStream (Ordinal: 1141, Address: 0x808c0)
• RtlInitString (Ordinal: 1142, Address: 0x152f0)
• RtlInitStringEx (Ordinal: 1143, Address: 0xeb740)
• RtlInitStrongEnumerationHashTable (Ordinal: 1144, Address: 0x68b50)
• RtlInitUTF8String (Ordinal: 1145, Address: 0x86030)
• RtlInitUTF8StringEx (Ordinal: 1146, Address: 0xeb740)
• RtlInitUnicodeString (Ordinal: 1147, Address: 0x3ba40)
• RtlInitUnicodeStringEx (Ordinal: 1148, Address: 0x1c270)
• RtlInitWeakEnumerationHashTable (Ordinal: 1149, Address: 0xf5ca0)
• RtlInitializeAtomPackage (Ordinal: 1150, Address: 0x847b0)
• RtlInitializeBitMap (Ordinal: 1151, Address: 0x7c330)
• RtlInitializeBitMapEx (Ordinal: 1152, Address: 0x9cd00)
• RtlInitializeConditionVariable (Ordinal: 1153, Address: 0x6b430)
• RtlInitializeContext (Ordinal: 1154, Address: 0xfef10)
• RtlInitializeCorrelationVector (Ordinal: 1155, Address: 0x85b50)
• RtlInitializeCriticalSection (Ordinal: 1156, Address: 0x62a30)
• RtlInitializeCriticalSectionAndSpinCount (Ordinal: 1157, Address: 0x65e00)
• RtlInitializeCriticalSectionEx (Ordinal: 1158, Address: 0x20bc0)
• RtlInitializeExtendedContext (Ordinal: 1159, Address: 0x52d00)
• RtlInitializeExtendedContext2 (Ordinal: 1160, Address: 0x53090)
• RtlInitializeGenericTable (Ordinal: 1161, Address: 0x7e390)
• RtlInitializeGenericTableAvl (Ordinal: 1162, Address: 0x7e740)
• RtlInitializeHandleTable (Ordinal: 1163, Address: 0x80310)
• RtlInitializeNtUserPfn (Ordinal: 1164, Address: 0x8c660)
• RtlInitializeRXact (Ordinal: 1165, Address: 0x8bb40)
• RtlInitializeResource (Ordinal: 1166, Address: 0x112e0)
• RtlInitializeSListHead (Ordinal: 1167, Address: 0x6fba0)
• RtlInitializeSRWLock (Ordinal: 1168, Address: 0x6b430)
• RtlInitializeSid (Ordinal: 1169, Address: 0x40070)
• RtlInitializeSidEx (Ordinal: 1170, Address: 0x40010)
• RtlInsertElementGenericTable (Ordinal: 1171, Address: 0x66660)
• RtlInsertElementGenericTableAvl (Ordinal: 1172, Address: 0x5cf20)
• RtlInsertElementGenericTableFull (Ordinal: 1173, Address: 0x666d0)
• RtlInsertElementGenericTableFullAvl (Ordinal: 1174, Address: 0x5cf90)
• RtlInsertEntryHashTable (Ordinal: 1175, Address: 0x68b90)
• RtlInstallFunctionTableCallback (Ordinal: 1176, Address: 0x698d0)
• RtlInt64ToUnicodeString (Ordinal: 1177, Address: 0xeda70)
• RtlIntegerToChar (Ordinal: 1178, Address: 0x163a0)
• RtlIntegerToUnicodeString (Ordinal: 1179, Address: 0x164a0)
• RtlInterlockedClearBitRun (Ordinal: 1180, Address: 0x7b020)
• RtlInterlockedFlushSList (Ordinal: 1181, Address: 0x711b0)
• RtlInterlockedPopEntrySList (Ordinal: 1182, Address: 0xa1160)
• RtlInterlockedPushEntrySList (Ordinal: 1183, Address: 0x6b420)
• RtlInterlockedPushListSList (Ordinal: 1184, Address: 0xa1210)
• RtlInterlockedPushListSListEx (Ordinal: 1185, Address: 0xff1d0)
• RtlInterlockedSetBitRun (Ordinal: 1186, Address: 0xece50)
• RtlIoDecodeMemIoResource (Ordinal: 1187, Address: 0xf20e0)
• RtlIoEncodeMemIoResource (Ordinal: 1188, Address: 0xf2180)
• RtlIpv4AddressToStringA (Ordinal: 1189, Address: 0x7e220)
• RtlIpv4AddressToStringExA (Ordinal: 1190, Address: 0x7e180)
• RtlIpv4AddressToStringExW (Ordinal: 1191, Address: 0x7c200)
• RtlIpv4AddressToStringW (Ordinal: 1192, Address: 0x7c2d0)
• RtlIpv4StringToAddressA (Ordinal: 1193, Address: 0x78d10)
• RtlIpv4StringToAddressExA (Ordinal: 1194, Address: 0x78c80)
• RtlIpv4StringToAddressExW (Ordinal: 1195, Address: 0xd5d0)
• RtlIpv4StringToAddressW (Ordinal: 1196, Address: 0xd720)
• RtlIpv6AddressToStringA (Ordinal: 1197, Address: 0x786f0)
• RtlIpv6AddressToStringExA (Ordinal: 1198, Address: 0x78600)
• RtlIpv6AddressToStringExW (Ordinal: 1199, Address: 0x66e70)
• RtlIpv6AddressToStringW (Ordinal: 1200, Address: 0x66fb0)
• RtlIpv6StringToAddressA (Ordinal: 1201, Address: 0x7d720)
• RtlIpv6StringToAddressExA (Ordinal: 1202, Address: 0x7d680)
• RtlIpv6StringToAddressExW (Ordinal: 1203, Address: 0xd950)
• RtlIpv6StringToAddressW (Ordinal: 1204, Address: 0xdb60)
• RtlIsActivationContextActive (Ordinal: 1205, Address: 0xdfad0)
• RtlIsCapabilitySid (Ordinal: 1206, Address: 0x3c980)
• RtlIsCloudFilesPlaceholder (Ordinal: 1207, Address: 0x83dd0)
• RtlIsCriticalSectionLocked (Ordinal: 1208, Address: 0xe8e20)
• RtlIsCriticalSectionLockedByThread (Ordinal: 1209, Address: 0x14890)
• RtlIsCurrentProcess (Ordinal: 1210, Address: 0x75be0)
• RtlIsCurrentThread (Ordinal: 1211, Address: 0xff320)
• RtlIsCurrentThreadAttachExempt (Ordinal: 1212, Address: 0x9bb40)
• RtlIsDosDeviceName_U (Ordinal: 1213, Address: 0x78150)
• RtlIsElevatedRid (Ordinal: 1214, Address: 0x844a0)
• RtlIsGenericTableEmpty (Ordinal: 1215, Address: 0x7a2f0)
• RtlIsGenericTableEmptyAvl (Ordinal: 1216, Address: 0x858a0)
• RtlIsMultiSessionSku (Ordinal: 1217, Address: 0x40210)
• RtlIsMultiUsersInSessionSku (Ordinal: 1218, Address: 0x82840)
• RtlIsNameInExpression (Ordinal: 1219, Address: 0xfb4f0)
• RtlIsNameInUnUpcasedExpression (Ordinal: 1220, Address: 0xfb5a0)
• RtlIsNameLegalDOS8Dot3 (Ordinal: 1221, Address: 0xfcc10)
• RtlIsNonEmptyDirectoryReparsePointAllowed (Ordinal: 1222, Address: 0xff350)
• RtlIsNormalizedString (Ordinal: 1223, Address: 0x1007d0)
• RtlIsPackageSid (Ordinal: 1224, Address: 0x84190)
• RtlIsParentOfChildAppContainer (Ordinal: 1225, Address: 0x46720)
• RtlIsPartialPlaceholder (Ordinal: 1226, Address: 0x7e070)
• RtlIsPartialPlaceholderFileHandle (Ordinal: 1227, Address: 0xff1e0)
• RtlIsPartialPlaceholderFileInfo (Ordinal: 1228, Address: 0xff240)
• RtlIsProcessorFeaturePresent (Ordinal: 1229, Address: 0x10870)
• RtlIsStateSeparationEnabled (Ordinal: 1230, Address: 0x79590)
• RtlIsTextUnicode (Ordinal: 1231, Address: 0x65920)
• RtlIsThreadWithinLoaderCallout (Ordinal: 1232, Address: 0x7e370)
• RtlIsUntrustedObject (Ordinal: 1233, Address: 0xe65d0)
• RtlIsValidHandle (Ordinal: 1234, Address: 0x599d0)
• RtlIsValidIndexHandle (Ordinal: 1235, Address: 0x59990)
• RtlIsValidLocaleName (Ordinal: 1236, Address: 0xfcfb0)
• RtlIsValidProcessTrustLabelSid (Ordinal: 1237, Address: 0x686d0)
• RtlIsZeroMemory (Ordinal: 1238, Address: 0xff370)
• RtlKnownExceptionFilter (Ordinal: 1239, Address: 0x1008a0)
• RtlLCIDToCultureName (Ordinal: 1240, Address: 0x3b020)
• RtlLargeIntegerToChar (Ordinal: 1241, Address: 0x1010)
• RtlLcidToLocaleName (Ordinal: 1242, Address: 0x3b2f0)
• RtlLeaveCriticalSection (Ordinal: 1243, Address: 0x2f230)
• RtlLengthRequiredSid (Ordinal: 1244, Address: 0x7b0c0)
• RtlLengthSecurityDescriptor (Ordinal: 1245, Address: 0x723f0)
• RtlLengthSid (Ordinal: 1246, Address: 0x6f1c0)
• RtlLengthSidAsUnicodeString (Ordinal: 1247, Address: 0x36d50)
• RtlLoadString (Ordinal: 1248, Address: 0x53b40)
• RtlLocalTimeToSystemTime (Ordinal: 1249, Address: 0xe5da0)
• RtlLocaleNameToLcid (Ordinal: 1250, Address: 0x3ba90)
• RtlLocateExtendedFeature (Ordinal: 1251, Address: 0xf5d00)
• RtlLocateExtendedFeature2 (Ordinal: 1252, Address: 0x725a0)
• RtlLocateLegacyContext (Ordinal: 1253, Address: 0x81a50)
• RtlLockBootStatusData (Ordinal: 1254, Address: 0xee0e0)
• RtlLockCurrentThread (Ordinal: 1255, Address: 0x83c70)
• RtlLockHeap (Ordinal: 1256, Address: 0x5f960)
• RtlLockMemoryBlockLookaside (Ordinal: 1257, Address: 0x5e980)
• RtlLockMemoryStreamRegion (Ordinal: 1258, Address: 0xd59d0)
• RtlLockMemoryZone (Ordinal: 1259, Address: 0x5e9f0)
• RtlLockModuleSection (Ordinal: 1260, Address: 0x5ec80)
• RtlLogStackBackTrace (Ordinal: 1261, Address: 0x101070)
• RtlLookupAtomInAtomTable (Ordinal: 1262, Address: 0x59670)
• RtlLookupElementGenericTable (Ordinal: 1263, Address: 0x667e0)
• RtlLookupElementGenericTableAvl (Ordinal: 1264, Address: 0x5d100)
• RtlLookupElementGenericTableFull (Ordinal: 1265, Address: 0xf7810)
• RtlLookupElementGenericTableFullAvl (Ordinal: 1266, Address: 0x5d0c0)
• RtlLookupEntryHashTable (Ordinal: 1267, Address: 0x68c20)
• RtlLookupFirstMatchingElementGenericTableAvl (Ordinal: 1268, Address: 0x8a610)
• RtlLookupFunctionEntry (Ordinal: 1269, Address: 0x32be0)
• RtlLookupFunctionTable (Ordinal: 1270, Address: 0x9ca40)
• RtlMakeSelfRelativeSD (Ordinal: 1271, Address: 0x6e290)
• RtlMapGenericMask (Ordinal: 1272, Address: 0x37ea0)
• RtlMapSecurityErrorToNtStatus (Ordinal: 1273, Address: 0x1a10)
• RtlMoveMemory (Ordinal: 1274, Address: 0xa4400)
• RtlMultiAppendUnicodeStringBuffer (Ordinal: 1275, Address: 0x6ebf0)
• RtlMultiByteToUnicodeN (Ordinal: 1276, Address: 0x4be50)
• RtlMultiByteToUnicodeSize (Ordinal: 1277, Address: 0x16e10)
• RtlMultipleAllocateHeap (Ordinal: 1278, Address: 0xf2930)
• RtlMultipleFreeHeap (Ordinal: 1279, Address: 0xf29b0)
• RtlNewInstanceSecurityObject (Ordinal: 1280, Address: 0xd6dc0)
• RtlNewSecurityGrantedAccess (Ordinal: 1281, Address: 0xd6ef0)
• RtlNewSecurityObject (Ordinal: 1282, Address: 0x88b00)
• RtlNewSecurityObjectEx (Ordinal: 1283, Address: 0x7ac20)
• RtlNewSecurityObjectWithMultipleInheritance (Ordinal: 1284, Address: 0x862e0)
• RtlNormalizeProcessParams (Ordinal: 1285, Address: 0x892e0)
• RtlNormalizeSecurityDescriptor (Ordinal: 1286, Address: 0xe6760)
• RtlNormalizeString (Ordinal: 1287, Address: 0x80b20)
• RtlNotifyFeatureUsage (Ordinal: 1288, Address: 0x101a80)
• RtlNtPathNameToDosPathName (Ordinal: 1289, Address: 0xcc410)
• RtlNtStatusToDosError (Ordinal: 1290, Address: 0x51950)
• RtlNtStatusToDosErrorNoTeb (Ordinal: 1291, Address: 0x769e0)
• RtlNtdllName (Ordinal: 1292, Address: 0x11e420)
• RtlNumberGenericTableElements (Ordinal: 1293, Address: 0x83df0)
• RtlNumberGenericTableElementsAvl (Ordinal: 1294, Address: 0x823c0)
• RtlNumberOfClearBits (Ordinal: 1295, Address: 0xecfe0)
• RtlNumberOfClearBitsEx (Ordinal: 1296, Address: 0xed010)
• RtlNumberOfClearBitsInRange (Ordinal: 1297, Address: 0xed040)
• RtlNumberOfSetBits (Ordinal: 1298, Address: 0x77fb0)
• RtlNumberOfSetBitsEx (Ordinal: 1299, Address: 0xed070)
• RtlNumberOfSetBitsInRange (Ordinal: 1300, Address: 0xed210)
• RtlNumberOfSetBitsUlongPtr (Ordinal: 1301, Address: 0x85aa0)
• RtlOemStringToUnicodeSize (Ordinal: 1302, Address: 0x16de0)
• RtlOemStringToUnicodeString (Ordinal: 1303, Address: 0x62250)
• RtlOemToUnicodeN (Ordinal: 1304, Address: 0x625d0)
• RtlOpenCurrentUser (Ordinal: 1305, Address: 0x16790)
• RtlOsDeploymentState (Ordinal: 1306, Address: 0x101ff0)
• RtlOwnerAcesPresent (Ordinal: 1307, Address: 0xe6c30)
• RtlPcToFileHeader (Ordinal: 1308, Address: 0x34a40)
• RtlPinAtomInAtomTable (Ordinal: 1309, Address: 0xeb0d0)
• RtlPopFrame (Ordinal: 1310, Address: 0x6c6a0)
• RtlPrefixString (Ordinal: 1311, Address: 0x620f0)
• RtlPrefixUnicodeString (Ordinal: 1312, Address: 0x15f60)
• RtlPrepareForProcessCloning (Ordinal: 1313, Address: 0x9bb80)
• RtlProcessFlsData (Ordinal: 1314, Address: 0x5f270)
• RtlProtectHeap (Ordinal: 1315, Address: 0xe0e0)
• RtlPublishWnfStateData (Ordinal: 1316, Address: 0x7d520)
• RtlPushFrame (Ordinal: 1317, Address: 0x6b4b0)
• RtlQueryActivationContextApplicationSettings (Ordinal: 1318, Address: 0x7add0)
• RtlQueryAllFeatureConfigurations (Ordinal: 1319, Address: 0x101b10)
• RtlQueryAtomInAtomTable (Ordinal: 1320, Address: 0x59250)
• RtlQueryCriticalSectionOwner (Ordinal: 1321, Address: 0xe8e40)
• RtlQueryDepthSList (Ordinal: 1322, Address: 0x6c740)
• RtlQueryDynamicTimeZoneInformation (Ordinal: 1323, Address: 0xee6b0)
• RtlQueryElevationFlags (Ordinal: 1324, Address: 0x81970)
• RtlQueryEnvironmentVariable (Ordinal: 1325, Address: 0x157e0)
• RtlQueryEnvironmentVariable_U (Ordinal: 1326, Address: 0x4b140)
• RtlQueryFeatureConfiguration (Ordinal: 1327, Address: 0x5e0c0)
• RtlQueryFeatureConfigurationChangeStamp (Ordinal: 1328, Address: 0x101bc0)
• RtlQueryFeatureUsageNotificationSubscriptions (Ordinal: 1329, Address: 0x101bd0)
• RtlQueryHeapInformation (Ordinal: 1330, Address: 0x74fa0)
• RtlQueryImageMitigationPolicy (Ordinal: 1331, Address: 0xe1a60)
• RtlQueryInformationAcl (Ordinal: 1332, Address: 0x79da0)
• RtlQueryInformationActivationContext (Ordinal: 1333, Address: 0x12de0)
• RtlQueryInformationActiveActivationContext (Ordinal: 1334, Address: 0x7edd0)
• RtlQueryInterfaceMemoryStream (Ordinal: 1335, Address: 0xd59d0)
• RtlQueryModuleInformation (Ordinal: 1336, Address: 0xe3e20)
• RtlQueryPackageClaims (Ordinal: 1337, Address: 0x6aab0)
• RtlQueryPackageIdentity (Ordinal: 1338, Address: 0x6a9f0)
• RtlQueryPackageIdentityEx (Ordinal: 1339, Address: 0x6aa40)
• RtlQueryPerformanceCounter (Ordinal: 1340, Address: 0x40160)
• RtlQueryPerformanceFrequency (Ordinal: 1341, Address: 0x72250)
• RtlQueryProcessBackTraceInformation (Ordinal: 1342, Address: 0xd7670)
• RtlQueryProcessDebugInformation (Ordinal: 1343, Address: 0xd7800)
• RtlQueryProcessHeapInformation (Ordinal: 1344, Address: 0xd7ce0)
• RtlQueryProcessLockInformation (Ordinal: 1345, Address: 0xd80c0)
• RtlQueryProcessPlaceholderCompatibilityMode (Ordinal: 1346, Address: 0xff2a0)
• RtlQueryProtectedPolicy (Ordinal: 1347, Address: 0x822c0)
• RtlQueryRegistryValueWithFallback (Ordinal: 1348, Address: 0xee6c0)
• RtlQueryRegistryValues (Ordinal: 1349, Address: 0xee810)
• RtlQueryRegistryValuesEx (Ordinal: 1350, Address: 0x47110)
• RtlQueryResourcePolicy (Ordinal: 1351, Address: 0x44700)
• RtlQuerySecurityObject (Ordinal: 1352, Address: 0xd7020)
• RtlQueryTagHeap (Ordinal: 1353, Address: 0xf2a20)
• RtlQueryThreadPlaceholderCompatibilityMode (Ordinal: 1354, Address: 0x808d0)
• RtlQueryThreadProfiling (Ordinal: 1355, Address: 0xcbfd0)
• RtlQueryTimeZoneInformation (Ordinal: 1356, Address: 0x482a0)
• RtlQueryTokenHostIdAsUlong64 (Ordinal: 1357, Address: 0x83ab0)
• RtlQueryUmsThreadInformation (Ordinal: 1358, Address: 0xf7540)
• RtlQueryUnbiasedInterruptTime (Ordinal: 1359, Address: 0x5e340)
• RtlQueryValidationRunlevel (Ordinal: 1360, Address: 0x102130)
• RtlQueryWnfMetaNotification (Ordinal: 1361, Address: 0x83460)
• RtlQueryWnfStateData (Ordinal: 1362, Address: 0x44f30)
• RtlQueryWnfStateDataWithExplicitScope (Ordinal: 1363, Address: 0x840c0)
• RtlQueueApcWow64Thread (Ordinal: 1364, Address: 0xdc0b0)
• RtlQueueWorkItem (Ordinal: 1365, Address: 0xb780)
• RtlRaiseCustomSystemEventTrigger (Ordinal: 1366, Address: 0x1021f0)
• RtlRaiseException (Ordinal: 1367, Address: 0x520d0)
• RtlRaiseExceptionForReturnAddressHijack (Ordinal: 1368, Address: 0xa22e0)
• RtlRaiseNoncontinuableException (Ordinal: 1369, Address: 0xa1ec0)
• RtlRaiseStatus (Ordinal: 1370, Address: 0x102600)
• RtlRandom (Ordinal: 1371, Address: 0x43ca0)
• RtlRandomEx (Ordinal: 1372, Address: 0x43ca0)
• RtlRbInsertNodeEx (Ordinal: 1373, Address: 0x27dc0)
• RtlRbRemoveNode (Ordinal: 1374, Address: 0x2a0a0)
• RtlReAllocateHeap (Ordinal: 1375, Address: 0x23640)
• RtlReadMemoryStream (Ordinal: 1376, Address: 0xd59d0)
• RtlReadOutOfProcessMemoryStream (Ordinal: 1377, Address: 0xd59d0)
• RtlReadThreadProfilingData (Ordinal: 1378, Address: 0xcc000)
• RtlRealPredecessor (Ordinal: 1379, Address: 0x7fbb0)
• RtlRealSuccessor (Ordinal: 1380, Address: 0x66e20)
• RtlRegisterFeatureConfigurationChangeNotification (Ordinal: 1381, Address: 0x93b0)
• RtlRegisterForWnfMetaNotification (Ordinal: 1382, Address: 0x65140)
• RtlRegisterSecureMemoryCacheCallback (Ordinal: 1383, Address: 0xf7c30)
• RtlRegisterThreadWithCsrss (Ordinal: 1384, Address: 0x4eb00)
• RtlRegisterWait (Ordinal: 1385, Address: 0xbe70)
• RtlReleaseActivationContext (Ordinal: 1386, Address: 0x13570)
• RtlReleaseMemoryStream (Ordinal: 1387, Address: 0x847b0)
• RtlReleasePath (Ordinal: 1388, Address: 0x11f80)
• RtlReleasePebLock (Ordinal: 1389, Address: 0x78520)
• RtlReleasePrivilege (Ordinal: 1390, Address: 0x81470)
• RtlReleaseRelativeName (Ordinal: 1391, Address: 0x1a320)
• RtlReleaseResource (Ordinal: 1392, Address: 0x661e0)
• RtlReleaseSRWLockExclusive (Ordinal: 1393, Address: 0x12c70)
• RtlReleaseSRWLockShared (Ordinal: 1394, Address: 0x21920)
• RtlRemoteCall (Ordinal: 1395, Address: 0xff040)
• RtlRemoveEntryHashTable (Ordinal: 1396, Address: 0x7ccc0)
• RtlRemovePrivileges (Ordinal: 1397, Address: 0x88e40)
• RtlRemoveVectoredContinueHandler (Ordinal: 1398, Address: 0xd96e0)
• RtlRemoveVectoredExceptionHandler (Ordinal: 1399, Address: 0x82860)
• RtlReplaceSidInSd (Ordinal: 1400, Address: 0xe6c40)
• RtlReplaceSystemDirectoryInPath (Ordinal: 1401, Address: 0x876e0)
• RtlReportException (Ordinal: 1402, Address: 0xdc9f0)
• RtlReportExceptionEx (Ordinal: 1403, Address: 0xdcac0)
• RtlReportSilentProcessExit (Ordinal: 1404, Address: 0x5f410)
• RtlReportSqmEscalation (Ordinal: 1405, Address: 0x847b0)
• RtlResetMemoryBlockLookaside (Ordinal: 1406, Address: 0xeb220)
• RtlResetMemoryZone (Ordinal: 1407, Address: 0xeb280)
• RtlResetNtUserPfn (Ordinal: 1408, Address: 0x8c780)
• RtlResetRtlTranslations (Ordinal: 1409, Address: 0xe54b0)
• RtlRestoreBootStatusDefaults (Ordinal: 1410, Address: 0xee100)
• RtlRestoreContext (Ordinal: 1411, Address: 0x6edb0)
• RtlRestoreLastWin32Error (Ordinal: 1412, Address: 0x518d0)
• RtlRestoreSystemBootStatusDefaults (Ordinal: 1413, Address: 0xee230)
• RtlRestoreThreadPreferredUILanguages (Ordinal: 1414, Address: 0xef4b0)
• RtlRetrieveNtUserPfn (Ordinal: 1415, Address: 0x8c800)
• RtlRevertMemoryStream (Ordinal: 1416, Address: 0xd59d0)
• RtlRunDecodeUnicodeString (Ordinal: 1417, Address: 0xe6f50)
• RtlRunEncodeUnicodeString (Ordinal: 1418, Address: 0xe6fb0)
• RtlRunOnceBeginInitialize (Ordinal: 1419, Address: 0xa530)
• RtlRunOnceComplete (Ordinal: 1420, Address: 0x43ab0)
• RtlRunOnceExecuteOnce (Ordinal: 1421, Address: 0x43830)
• RtlRunOnceInitialize (Ordinal: 1422, Address: 0x6b430)
• RtlSecondsSince1970ToTime (Ordinal: 1423, Address: 0x883a0)
• RtlSecondsSince1980ToTime (Ordinal: 1424, Address: 0xe5e10)
• RtlSeekMemoryStream (Ordinal: 1425, Address: 0xd59d0)
• RtlSelfRelativeToAbsoluteSD (Ordinal: 1426, Address: 0x6e0b0)
• RtlSelfRelativeToAbsoluteSD2 (Ordinal: 1427, Address: 0x89300)
• RtlSendMsgToSm (Ordinal: 1428, Address: 0x89ef0)
• RtlSetAllBits (Ordinal: 1429, Address: 0x7c120)
• RtlSetAllBitsEx (Ordinal: 1430, Address: 0xed490)
• RtlSetAttributesSecurityDescriptor (Ordinal: 1431, Address: 0xe7070)
• RtlSetBit (Ordinal: 1432, Address: 0x81a90)
• RtlSetBitEx (Ordinal: 1433, Address: 0x9cd10)
• RtlSetBits (Ordinal: 1434, Address: 0x55310)
• RtlSetBitsEx (Ordinal: 1435, Address: 0xed500)
• RtlSetControlSecurityDescriptor (Ordinal: 1436, Address: 0x80280)
• RtlSetCriticalSectionSpinCount (Ordinal: 1437, Address: 0x72620)
• RtlSetCurrentDirectory_U (Ordinal: 1438, Address: 0x5e530)
• RtlSetCurrentEnvironment (Ordinal: 1439, Address: 0x8c1a0)
• RtlSetCurrentTransaction (Ordinal: 1440, Address: 0x6a8c0)
• RtlSetDaclSecurityDescriptor (Ordinal: 1441, Address: 0x3c8e0)
• RtlSetDynamicTimeZoneInformation (Ordinal: 1442, Address: 0xee840)
• RtlSetEnvironmentStrings (Ordinal: 1443, Address: 0x831c0)
• RtlSetEnvironmentVar (Ordinal: 1444, Address: 0x4b430)
• RtlSetEnvironmentVariable (Ordinal: 1445, Address: 0x4b1d0)
• RtlSetExtendedFeaturesMask (Ordinal: 1446, Address: 0xf5d20)
• RtlSetFeatureConfigurations (Ordinal: 1447, Address: 0x101c50)
• RtlSetGroupSecurityDescriptor (Ordinal: 1448, Address: 0x38020)
• RtlSetHeapInformation (Ordinal: 1449, Address: 0x74db0)
• RtlSetImageMitigationPolicy (Ordinal: 1450, Address: 0xe2570)
• RtlSetInformationAcl (Ordinal: 1451, Address: 0xe9e70)
• RtlSetIoCompletionCallback (Ordinal: 1452, Address: 0x112f00)
• RtlSetLastWin32Error (Ordinal: 1453, Address: 0x518d0)
• RtlSetLastWin32ErrorAndNtStatusFromNtStatus (Ordinal: 1454, Address: 0x518b0)
• RtlSetMemoryStreamSize (Ordinal: 1455, Address: 0xd59d0)
• RtlSetOwnerSecurityDescriptor (Ordinal: 1456, Address: 0x38080)
• RtlSetPortableOperatingSystem (Ordinal: 1457, Address: 0xee620)
• RtlSetProcessDebugInformation (Ordinal: 1458, Address: 0xd8460)
• RtlSetProcessIsCritical (Ordinal: 1459, Address: 0x8c080)
• RtlSetProcessPlaceholderCompatibilityMode (Ordinal: 1460, Address: 0xff2c0)
• RtlSetProcessPreferredUILanguages (Ordinal: 1461, Address: 0x89d50)
• RtlSetProtectedPolicy (Ordinal: 1462, Address: 0x81520)
• RtlSetProxiedProcessId (Ordinal: 1463, Address: 0x86140)
• RtlSetSaclSecurityDescriptor (Ordinal: 1464, Address: 0x68910)
• RtlSetSearchPathMode (Ordinal: 1465, Address: 0x80370)
• RtlSetSecurityDescriptorRMControl (Ordinal: 1466, Address: 0x85f40)
• RtlSetSecurityObject (Ordinal: 1467, Address: 0x77770)
• RtlSetSecurityObjectEx (Ordinal: 1468, Address: 0xd7330)
• RtlSetSystemBootStatus (Ordinal: 1469, Address: 0x85d80)
• RtlSetSystemBootStatusEx (Ordinal: 1470, Address: 0xee270)
• RtlSetThreadErrorMode (Ordinal: 1471, Address: 0x4a640)
• RtlSetThreadIsCritical (Ordinal: 1472, Address: 0x896a0)
• RtlSetThreadPlaceholderCompatibilityMode (Ordinal: 1473, Address: 0x7d4f0)
• RtlSetThreadPoolStartFunc (Ordinal: 1474, Address: 0x847b0)
• RtlSetThreadPreferredUILanguages (Ordinal: 1475, Address: 0x3ec50)
• RtlSetThreadPreferredUILanguages2 (Ordinal: 1476, Address: 0x3ec00)
• RtlSetThreadSubProcessTag (Ordinal: 1477, Address: 0x20570)
• RtlSetThreadWorkOnBehalfTicket (Ordinal: 1478, Address: 0x20500)
• RtlSetTimeZoneInformation (Ordinal: 1479, Address: 0xee850)
• RtlSetTimer (Ordinal: 1480, Address: 0x112ef0)
• RtlSetUmsThreadInformation (Ordinal: 1481, Address: 0xf75e0)
• RtlSetUnhandledExceptionFilter (Ordinal: 1482, Address: 0x802d0)
• RtlSetUserFlagsHeap (Ordinal: 1483, Address: 0xf2dc0)
• RtlSetUserValueHeap (Ordinal: 1484, Address: 0x1f60)
• RtlSidDominates (Ordinal: 1485, Address: 0x7c5b0)
• RtlSidDominatesForTrust (Ordinal: 1486, Address: 0x68640)
• RtlSidEqualLevel (Ordinal: 1487, Address: 0xe70a0)
• RtlSidHashInitialize (Ordinal: 1488, Address: 0x7c970)
• RtlSidHashLookup (Ordinal: 1489, Address: 0x78b70)
• RtlSidIsHigherLevel (Ordinal: 1490, Address: 0xe7130)
• RtlSizeHeap (Ordinal: 1491, Address: 0x24160)
• RtlSleepConditionVariableCS (Ordinal: 1492, Address: 0x65760)
• RtlSleepConditionVariableSRW (Ordinal: 1493, Address: 0x654c0)
• RtlSplay (Ordinal: 1494, Address: 0x668c0)
• RtlStartRXact (Ordinal: 1495, Address: 0x81aa0)
• RtlStatMemoryStream (Ordinal: 1496, Address: 0xd59d0)
• RtlStringFromGUID (Ordinal: 1497, Address: 0x6b030)
• RtlStringFromGUIDEx (Ordinal: 1498, Address: 0x6b040)
• RtlStronglyEnumerateEntryHashTable (Ordinal: 1499, Address: 0x68de0)
• RtlSubAuthorityCountSid (Ordinal: 1500, Address: 0x762d0)
• RtlSubAuthoritySid (Ordinal: 1501, Address: 0x72600)
• RtlSubscribeForFeatureUsageNotification (Ordinal: 1502, Address: 0x101d50)
• RtlSubscribeWnfStateChangeNotification (Ordinal: 1503, Address: 0x42460)
• RtlSubtreePredecessor (Ordinal: 1504, Address: 0x66d90)
• RtlSubtreeSuccessor (Ordinal: 1505, Address: 0xf77e0)
• RtlSwitchedVVI (Ordinal: 1506, Address: 0x3cc40)
• RtlSystemTimeToLocalTime (Ordinal: 1507, Address: 0x7df00)
• RtlTestAndPublishWnfStateData (Ordinal: 1508, Address: 0x850a0)
• RtlTestBit (Ordinal: 1509, Address: 0x85a50)
• RtlTestBitEx (Ordinal: 1510, Address: 0x9cd20)
• RtlTestProtectedAccess (Ordinal: 1511, Address: 0x8c4b0)
• RtlTimeFieldsToTime (Ordinal: 1512, Address: 0x5c560)
• RtlTimeToElapsedTimeFields (Ordinal: 1513, Address: 0x7bc90)
• RtlTimeToSecondsSince1970 (Ordinal: 1514, Address: 0x7bd80)
• RtlTimeToSecondsSince1980 (Ordinal: 1515, Address: 0x7bc50)
• RtlTimeToTimeFields (Ordinal: 1516, Address: 0x5c890)
• RtlTraceDatabaseAdd (Ordinal: 1517, Address: 0x102790)
• RtlTraceDatabaseCreate (Ordinal: 1518, Address: 0x102810)
• RtlTraceDatabaseDestroy (Ordinal: 1519, Address: 0x102950)
• RtlTraceDatabaseEnumerate (Ordinal: 1520, Address: 0x1029d0)
• RtlTraceDatabaseFind (Ordinal: 1521, Address: 0x102aa0)
• RtlTraceDatabaseLock (Ordinal: 1522, Address: 0x102b20)
• RtlTraceDatabaseUnlock (Ordinal: 1523, Address: 0x102b50)
• RtlTraceDatabaseValidate (Ordinal: 1524, Address: 0x102b70)
• RtlTryAcquirePebLock (Ordinal: 1525, Address: 0x7c590)
• RtlTryAcquireSRWLockExclusive (Ordinal: 1526, Address: 0x82640)
• RtlTryAcquireSRWLockShared (Ordinal: 1527, Address: 0x77d90)
• RtlTryConvertSRWLockSharedToExclusiveOrRelease (Ordinal: 1528, Address: 0xe8cf0)
• RtlTryEnterCriticalSection (Ordinal: 1529, Address: 0x207e0)
• RtlUTF8StringToUnicodeString (Ordinal: 1530, Address: 0x5a8e0)
• RtlUTF8ToUnicodeN (Ordinal: 1531, Address: 0x5a9b0)
• RtlUdiv128 (Ordinal: 1532, Address: 0x102fa0)
• RtlUmsThreadYield (Ordinal: 1533, Address: 0xf7620)
• RtlUnhandledExceptionFilter (Ordinal: 1534, Address: 0x9ce30)
• RtlUnhandledExceptionFilter2 (Ordinal: 1535, Address: 0x1008c0)
• RtlUnicodeStringToAnsiSize (Ordinal: 1536, Address: 0x627a0)
• RtlUnicodeStringToAnsiString (Ordinal: 1537, Address: 0x627d0)
• RtlUnicodeStringToCountedOemString (Ordinal: 1538, Address: 0xeb300)
• RtlUnicodeStringToInteger (Ordinal: 1539, Address: 0x765d0)
• RtlUnicodeStringToOemSize (Ordinal: 1540, Address: 0x627a0)
• RtlUnicodeStringToOemString (Ordinal: 1541, Address: 0x62170)
• RtlUnicodeStringToUTF8String (Ordinal: 1542, Address: 0x102ea0)
• RtlUnicodeToCustomCPN (Ordinal: 1543, Address: 0xe56e0)
• RtlUnicodeToMultiByteN (Ordinal: 1544, Address: 0x628f0)
• RtlUnicodeToMultiByteSize (Ordinal: 1545, Address: 0x628b0)
• RtlUnicodeToOemN (Ordinal: 1546, Address: 0x62530)
• RtlUnicodeToUTF8N (Ordinal: 1547, Address: 0x5bf00)
• RtlUniform (Ordinal: 1548, Address: 0x75b20)
• RtlUnlockBootStatusData (Ordinal: 1549, Address: 0xee290)
• RtlUnlockCurrentThread (Ordinal: 1550, Address: 0x87290)
• RtlUnlockHeap (Ordinal: 1551, Address: 0x5fa00)
• RtlUnlockMemoryBlockLookaside (Ordinal: 1552, Address: 0x5e3a0)
• RtlUnlockMemoryStreamRegion (Ordinal: 1553, Address: 0xd59d0)
• RtlUnlockMemoryZone (Ordinal: 1554, Address: 0x5e400)
• RtlUnlockModuleSection (Ordinal: 1555, Address: 0x5ebd0)
• RtlUnregisterFeatureConfigurationChangeNotification (Ordinal: 1556, Address: 0x7f7e0)
• RtlUnsubscribeFromFeatureUsageNotifications (Ordinal: 1557, Address: 0x101d60)
• RtlUnsubscribeWnfNotificationWaitForCompletion (Ordinal: 1558, Address: 0x63b40)
• RtlUnsubscribeWnfNotificationWithCompletionCallback (Ordinal: 1559, Address: 0x63930)
• RtlUnsubscribeWnfStateChangeNotification (Ordinal: 1560, Address: 0x63af0)
• RtlUnwind (Ordinal: 1561, Address: 0x51e70)
• RtlUnwindEx (Ordinal: 1562, Address: 0x30600)
• RtlUpcaseUnicodeChar (Ordinal: 1563, Address: 0x5afb0)
• RtlUpcaseUnicodeString (Ordinal: 1564, Address: 0x15d20)
• RtlUpcaseUnicodeStringToAnsiString (Ordinal: 1565, Address: 0xeb430)
• RtlUpcaseUnicodeStringToCountedOemString (Ordinal: 1566, Address: 0xeb540)
• RtlUpcaseUnicodeStringToOemString (Ordinal: 1567, Address: 0x62340)
• RtlUpcaseUnicodeToCustomCPN (Ordinal: 1568, Address: 0xe5810)
• RtlUpcaseUnicodeToMultiByteN (Ordinal: 1569, Address: 0x62680)
• RtlUpcaseUnicodeToOemN (Ordinal: 1570, Address: 0x624d0)
• RtlUpdateClonedCriticalSection (Ordinal: 1571, Address: 0x5f570)
• RtlUpdateClonedSRWLock (Ordinal: 1572, Address: 0x9ccd0)
• RtlUpdateTimer (Ordinal: 1573, Address: 0x823d0)
• RtlUpperChar (Ordinal: 1574, Address: 0x62230)
• RtlUpperString (Ordinal: 1575, Address: 0xeb750)
• RtlUserFiberStart (Ordinal: 1576, Address: 0x808f0)
• RtlUserThreadStart (Ordinal: 1577, Address: 0x4cc70)
• RtlValidAcl (Ordinal: 1578, Address: 0x37760)
• RtlValidProcessProtection (Ordinal: 1579, Address: 0xe3640)
• RtlValidRelativeSecurityDescriptor (Ordinal: 1580, Address: 0x74c10)
• RtlValidSecurityDescriptor (Ordinal: 1581, Address: 0x711c0)
• RtlValidSid (Ordinal: 1582, Address: 0x37950)
• RtlValidateCorrelationVector (Ordinal: 1583, Address: 0xfc170)
• RtlValidateHeap (Ordinal: 1584, Address: 0x5f650)
• RtlValidateProcessHeaps (Ordinal: 1585, Address: 0xf32a0)
• RtlValidateUnicodeString (Ordinal: 1586, Address: 0x79f80)
• RtlVerifyVersionInfo (Ordinal: 1587, Address: 0x7b0e0)
• RtlVirtualUnwind (Ordinal: 1588, Address: 0x30de0)
• RtlWaitForWnfMetaNotification (Ordinal: 1589, Address: 0x63980)
• RtlWaitOnAddress (Ordinal: 1590, Address: 0x64920)
• RtlWakeAddressAll (Ordinal: 1591, Address: 0x646d0)
• RtlWakeAddressAllNoFence (Ordinal: 1592, Address: 0x103220)
• RtlWakeAddressSingle (Ordinal: 1593, Address: 0x63b20)
• RtlWakeAddressSingleNoFence (Ordinal: 1594, Address: 0x103230)
• RtlWakeAllConditionVariable (Ordinal: 1595, Address: 0x4c9d0)
• RtlWakeConditionVariable (Ordinal: 1596, Address: 0x4f0a0)
• RtlWalkFrameChain (Ordinal: 1597, Address: 0x52720)
• RtlWalkHeap (Ordinal: 1598, Address: 0xf33d0)
• RtlWeaklyEnumerateEntryHashTable (Ordinal: 1599, Address: 0xf5cb0)
• RtlWerpReportException (Ordinal: 1600, Address: 0xdd400)
• RtlWnfCompareChangeStamp (Ordinal: 1601, Address: 0xde8a0)
• RtlWnfDllUnloadCallback (Ordinal: 1602, Address: 0x86130)
• RtlWow64CallFunction64 (Ordinal: 1603, Address: 0x86020)
• RtlWow64EnableFsRedirection (Ordinal: 1604, Address: 0x86020)
• RtlWow64EnableFsRedirectionEx (Ordinal: 1605, Address: 0x86020)
• RtlWow64GetCpuAreaInfo (Ordinal: 1606, Address: 0x52f80)
• RtlWow64GetCurrentCpuArea (Ordinal: 1607, Address: 0x52f00)
• RtlWow64GetCurrentMachine (Ordinal: 1608, Address: 0x51e30)
• RtlWow64GetEquivalentMachineCHPE (Ordinal: 1609, Address: 0x834b0)
• RtlWow64GetProcessMachines (Ordinal: 1610, Address: 0x7be00)
• RtlWow64GetSharedInfoProcess (Ordinal: 1611, Address: 0x7ab40)
• RtlWow64GetThreadContext (Ordinal: 1612, Address: 0xdc0d0)
• RtlWow64GetThreadSelectorEntry (Ordinal: 1613, Address: 0xdc100)
• RtlWow64IsWowGuestMachineSupported (Ordinal: 1614, Address: 0x7d010)
• RtlWow64LogMessageInEventLogger (Ordinal: 1615, Address: 0xd67e0)
• RtlWow64PopAllCrossProcessWorkFromWorkList (Ordinal: 1616, Address: 0x103240)
• RtlWow64PopCrossProcessWorkFromFreeList (Ordinal: 1617, Address: 0x103350)
• RtlWow64PushCrossProcessWorkOntoFreeList (Ordinal: 1618, Address: 0x1033e0)
• RtlWow64PushCrossProcessWorkOntoWorkList (Ordinal: 1619, Address: 0x103480)
• RtlWow64RequestCrossProcessHeavyFlush (Ordinal: 1620, Address: 0x103690)
• RtlWow64SetThreadContext (Ordinal: 1621, Address: 0xdc2a0)
• RtlWow64SuspendProcess (Ordinal: 1622, Address: 0xdc2c0)
• RtlWow64SuspendThread (Ordinal: 1623, Address: 0xdc430)
• RtlWriteMemoryStream (Ordinal: 1624, Address: 0xd59d0)
• RtlWriteNonVolatileMemory (Ordinal: 1625, Address: 0xfc4d0)
• RtlWriteRegistryValue (Ordinal: 1626, Address: 0x8b0a0)
• RtlZeroHeap (Ordinal: 1627, Address: 0xf6450)
• RtlZeroMemory (Ordinal: 1628, Address: 0x883d0)
• RtlZombifyActivationContext (Ordinal: 1629, Address: 0xdf7f0)
• RtlpApplyLengthFunction (Ordinal: 1630, Address: 0x7ea20)
• RtlpCheckDynamicTimeZoneInformation (Ordinal: 1631, Address: 0x47440)
• RtlpCleanupRegistryKeys (Ordinal: 1632, Address: 0xefbc0)
• RtlpConvertAbsoluteToRelativeSecurityAttribute (Ordinal: 1633, Address: 0xea040)
• RtlpConvertCultureNamesToLCIDs (Ordinal: 1634, Address: 0xf00b0)
• RtlpConvertLCIDsToCultureNames (Ordinal: 1635, Address: 0xf02c0)
• RtlpConvertRelativeToAbsoluteSecurityAttribute (Ordinal: 1636, Address: 0xea3b0)
• RtlpCreateProcessRegistryInfo (Ordinal: 1637, Address: 0x36490)
• RtlpEnsureBufferSize (Ordinal: 1638, Address: 0x6ed00)
• RtlpExecuteUmsThread (Ordinal: 1639, Address: 0xa2341)
• RtlpFreezeTimeBias (Ordinal: 1640, Address: 0x16d510)
• RtlpGetDeviceFamilyInfoEnum (Ordinal: 1641, Address: 0x3f860)
• RtlpGetLCIDFromLangInfoNode (Ordinal: 1642, Address: 0x81f40)
• RtlpGetNameFromLangInfoNode (Ordinal: 1643, Address: 0x80150)
• RtlpGetSystemDefaultUILanguage (Ordinal: 1644, Address: 0x3c5b0)
• RtlpGetUserOrMachineUILanguage4NLS (Ordinal: 1645, Address: 0x1038d0)
• RtlpInitializeLangRegistryInfo (Ordinal: 1646, Address: 0x6ffd0)
• RtlpIsQualifiedLanguage (Ordinal: 1647, Address: 0x58730)
• RtlpLoadMachineUIByPolicy (Ordinal: 1648, Address: 0x82580)
• RtlpLoadUserUIByPolicy (Ordinal: 1649, Address: 0x6fee0)
• RtlpMergeSecurityAttributeInformation (Ordinal: 1650, Address: 0x84200)
• RtlpMuiFreeLangRegistryInfo (Ordinal: 1651, Address: 0x70000)
• RtlpMuiRegCreateRegistryInfo (Ordinal: 1652, Address: 0x104580)
• RtlpMuiRegFreeRegistryInfo (Ordinal: 1653, Address: 0x702a0)
• RtlpMuiRegLoadRegistryInfo (Ordinal: 1654, Address: 0x701b0)
• RtlpNotOwnerCriticalSection (Ordinal: 1655, Address: 0xe9060)
• RtlpNtCreateKey (Ordinal: 1656, Address: 0x107cd0)
• RtlpNtEnumerateSubKey (Ordinal: 1657, Address: 0x82740)
• RtlpNtMakeTemporaryKey (Ordinal: 1658, Address: 0x107d10)
• RtlpNtOpenKey (Ordinal: 1659, Address: 0x7e0f0)
• RtlpNtQueryValueKey (Ordinal: 1660, Address: 0x7c000)
• RtlpNtSetValueKey (Ordinal: 1661, Address: 0x107d20)
• RtlpQueryDefaultUILanguage (Ordinal: 1662, Address: 0x76740)
• RtlpQueryProcessDebugInformationFromWow64 (Ordinal: 1663, Address: 0xd8c60)
• RtlpQueryProcessDebugInformationRemote (Ordinal: 1664, Address: 0xd8d00)
• RtlpRefreshCachedUILanguage (Ordinal: 1665, Address: 0x106070)
• RtlpSetInstallLanguage (Ordinal: 1666, Address: 0xf0b10)
• RtlpSetPreferredUILanguages (Ordinal: 1667, Address: 0xf11c0)
• RtlpSetUserPreferredUILanguages (Ordinal: 1668, Address: 0xf11c0)
• RtlpTimeFieldsToTime (Ordinal: 1669, Address: 0x5c570)
• RtlpTimeToTimeFields (Ordinal: 1670, Address: 0x5c8a0)
• RtlpUmsExecuteYieldThreadEnd (Ordinal: 1671, Address: 0xa2666)
• RtlpUmsThreadYield (Ordinal: 1672, Address: 0xa2573)
• RtlpUnWaitCriticalSection (Ordinal: 1673, Address: 0xe9390)
• RtlpVerifyAndCommitUILanguageSettings (Ordinal: 1674, Address: 0x8bf20)
• RtlpWaitForCriticalSection (Ordinal: 1675, Address: 0x808c0)
• RtlpWow64CtxFromAmd64 (Ordinal: 1676, Address: 0x86fb0)
• RtlpWow64GetContextOnAmd64 (Ordinal: 1677, Address: 0x6fbc0)
• RtlpWow64SetContextOnAmd64 (Ordinal: 1678, Address: 0x6f1e0)
• RtlxAnsiStringToUnicodeSize (Ordinal: 1679, Address: 0x16de0)
• RtlxOemStringToUnicodeSize (Ordinal: 1680, Address: 0x16de0)
• RtlxUnicodeStringToAnsiSize (Ordinal: 1681, Address: 0x627a0)
• RtlxUnicodeStringToOemSize (Ordinal: 1682, Address: 0x627a0)
• SbExecuteProcedure (Ordinal: 1683, Address: 0x113940)
• SbSelectProcedure (Ordinal: 1684, Address: 0x3e0e0)
• ShipAssert (Ordinal: 1685, Address: 0xddea0)
• ShipAssertGetBufferInfo (Ordinal: 1686, Address: 0xddfc0)
• ShipAssertMsgA (Ordinal: 1687, Address: 0xddff0)
• ShipAssertMsgW (Ordinal: 1688, Address: 0xddff0)
• TpAllocAlpcCompletion (Ordinal: 1689, Address: 0x7a6b0)
• TpAllocAlpcCompletionEx (Ordinal: 1690, Address: 0x7a7b0)
• TpAllocCleanupGroup (Ordinal: 1691, Address: 0x7f1b0)
• TpAllocIoCompletion (Ordinal: 1692, Address: 0x76ca0)
• TpAllocJobNotification (Ordinal: 1693, Address: 0x7fe00)
• TpAllocPool (Ordinal: 1694, Address: 0x62cc0)
• TpAllocTimer (Ordinal: 1695, Address: 0xefd0)
• TpAllocWait (Ordinal: 1696, Address: 0xdf40)
• TpAllocWork (Ordinal: 1697, Address: 0xf2e0)
• TpAlpcRegisterCompletionList (Ordinal: 1698, Address: 0x7a510)
• TpAlpcUnregisterCompletionList (Ordinal: 1699, Address: 0x7a600)
• TpCallbackDetectedUnrecoverableError (Ordinal: 1700, Address: 0x112130)
• TpCallbackIndependent (Ordinal: 1701, Address: 0x637c0)
• TpCallbackLeaveCriticalSectionOnCompletion (Ordinal: 1702, Address: 0x88be0)
• TpCallbackMayRunLong (Ordinal: 1703, Address: 0x70f70)
• TpCallbackReleaseMutexOnCompletion (Ordinal: 1704, Address: 0x112160)
• TpCallbackReleaseSemaphoreOnCompletion (Ordinal: 1705, Address: 0x1121a0)
• TpCallbackSendAlpcMessageOnCompletion (Ordinal: 1706, Address: 0x68980)
• TpCallbackSendPendingAlpcMessage (Ordinal: 1707, Address: 0x1121e0)
• TpCallbackSetEventOnCompletion (Ordinal: 1708, Address: 0x859f0)
• TpCallbackUnloadDllOnCompletion (Ordinal: 1709, Address: 0x7e140)
• TpCancelAsyncIoOperation (Ordinal: 1710, Address: 0x79bd0)
• TpCaptureCaller (Ordinal: 1711, Address: 0x724e0)
• TpCheckTerminateWorker (Ordinal: 1712, Address: 0x4ec90)
• TpDbgDumpHeapUsage (Ordinal: 1713, Address: 0x112220)
• TpDbgSetLogRoutine (Ordinal: 1714, Address: 0x808c0)
• TpDisablePoolCallbackChecks (Ordinal: 1715, Address: 0x859a0)
• TpDisassociateCallback (Ordinal: 1716, Address: 0x80aa0)
• TpIsTimerSet (Ordinal: 1717, Address: 0x12000)
• TpPostWork (Ordinal: 1718, Address: 0x128c0)
• TpQueryPoolStackInformation (Ordinal: 1719, Address: 0x111c30)
• TpReleaseAlpcCompletion (Ordinal: 1720, Address: 0x7a6e0)
• TpReleaseCleanupGroup (Ordinal: 1721, Address: 0x82350)
• TpReleaseCleanupGroupMembers (Ordinal: 1722, Address: 0x4ccc0)
• TpReleaseIoCompletion (Ordinal: 1723, Address: 0x7cd70)
• TpReleaseJobNotification (Ordinal: 1724, Address: 0x7fc40)
• TpReleasePool (Ordinal: 1725, Address: 0x4f2a0)
• TpReleaseTimer (Ordinal: 1726, Address: 0xc500)
• TpReleaseWait (Ordinal: 1727, Address: 0xc270)
• TpReleaseWork (Ordinal: 1728, Address: 0xf180)
• TpSetDefaultPoolMaxThreads (Ordinal: 1729, Address: 0x111cf0)
• TpSetDefaultPoolStackInformation (Ordinal: 1730, Address: 0x70a10)
• TpSetPoolMaxThreads (Ordinal: 1731, Address: 0x62bf0)
• TpSetPoolMaxThreadsSoftLimit (Ordinal: 1732, Address: 0x819b0)
• TpSetPoolMinThreads (Ordinal: 1733, Address: 0x83bf0)
• TpSetPoolStackInformation (Ordinal: 1734, Address: 0x70b30)
• TpSetPoolThreadBasePriority (Ordinal: 1735, Address: 0x85cd0)
• TpSetPoolThreadCpuSets (Ordinal: 1736, Address: 0x111e40)
• TpSetPoolWorkerThreadIdleTimeout (Ordinal: 1737, Address: 0x62c60)
• TpSetTimer (Ordinal: 1738, Address: 0x122a0)
• TpSetTimerEx (Ordinal: 1739, Address: 0x126d0)
• TpSetWait (Ordinal: 1740, Address: 0x10b90)
• TpSetWaitEx (Ordinal: 1741, Address: 0x11d60)
• TpSimpleTryPost (Ordinal: 1742, Address: 0x10be0)
• TpStartAsyncIoOperation (Ordinal: 1743, Address: 0x127e0)
• TpTimerOutstandingCallbackCount (Ordinal: 1744, Address: 0x9bb0)
• TpTrimPools (Ordinal: 1745, Address: 0x651a0)
• TpWaitForAlpcCompletion (Ordinal: 1746, Address: 0x7a640)
• TpWaitForIoCompletion (Ordinal: 1747, Address: 0x85320)
• TpWaitForJobNotification (Ordinal: 1748, Address: 0x7fc00)
• TpWaitForTimer (Ordinal: 1749, Address: 0x11200)
• TpWaitForWait (Ordinal: 1750, Address: 0x9990)
• TpWaitForWork (Ordinal: 1751, Address: 0x7f860)
• VerSetConditionMask (Ordinal: 1752, Address: 0x71650)
• WerReportExceptionWorker (Ordinal: 1753, Address: 0xdd780)
• WerReportSQMEvent (Ordinal: 1754, Address: 0xde4a0)
• WinSqmAddToAverageDWORD (Ordinal: 1755, Address: 0x808c0)
• WinSqmAddToStream (Ordinal: 1756, Address: 0x808c0)
• WinSqmAddToStreamEx (Ordinal: 1757, Address: 0x808c0)
• WinSqmCheckEscalationAddToStreamEx (Ordinal: 1758, Address: 0x847b0)
• WinSqmCheckEscalationSetDWORD (Ordinal: 1759, Address: 0x847b0)
• WinSqmCheckEscalationSetDWORD64 (Ordinal: 1760, Address: 0x847b0)
• WinSqmCheckEscalationSetString (Ordinal: 1761, Address: 0x847b0)
• WinSqmCommonDatapointDelete (Ordinal: 1762, Address: 0x863c0)
• WinSqmCommonDatapointSetDWORD (Ordinal: 1763, Address: 0x863c0)
• WinSqmCommonDatapointSetDWORD64 (Ordinal: 1764, Address: 0x863c0)
• WinSqmCommonDatapointSetStreamEx (Ordinal: 1765, Address: 0x863c0)
• WinSqmCommonDatapointSetString (Ordinal: 1766, Address: 0x863c0)
• WinSqmEndSession (Ordinal: 1767, Address: 0x808c0)
• WinSqmEventEnabled (Ordinal: 1768, Address: 0x847b0)
• WinSqmEventWrite (Ordinal: 1769, Address: 0x847b0)
• WinSqmGetEscalationRuleStatus (Ordinal: 1770, Address: 0x847b0)
• WinSqmGetInstrumentationProperty (Ordinal: 1771, Address: 0xde880)
• WinSqmIncrementDWORD (Ordinal: 1772, Address: 0x808c0)
• WinSqmIsOptedIn (Ordinal: 1773, Address: 0x847b0)
• WinSqmIsOptedInEx (Ordinal: 1774, Address: 0x847b0)
• WinSqmIsSessionDisabled (Ordinal: 1775, Address: 0x863c0)
• WinSqmSetDWORD (Ordinal: 1776, Address: 0x808c0)
• WinSqmSetDWORD64 (Ordinal: 1777, Address: 0x808c0)
• WinSqmSetEscalationInfo (Ordinal: 1778, Address: 0x863c0)
• WinSqmSetIfMaxDWORD (Ordinal: 1779, Address: 0x808c0)
• WinSqmSetIfMinDWORD (Ordinal: 1780, Address: 0x808c0)
• WinSqmSetString (Ordinal: 1781, Address: 0x808c0)
• WinSqmStartSession (Ordinal: 1782, Address: 0x86290)
• WinSqmStartSessionForPartner (Ordinal: 1783, Address: 0x86290)
• WinSqmStartSqmOptinListener (Ordinal: 1784, Address: 0x847b0)
• ZwAcceptConnectPort (Ordinal: 1785, Address: 0x9d5d0)
• ZwAccessCheck (Ordinal: 1786, Address: 0x9d590)
• ZwAccessCheckAndAuditAlarm (Ordinal: 1787, Address: 0x9dab0)
• ZwAccessCheckByType (Ordinal: 1788, Address: 0x9e1e0)
• ZwAccessCheckByTypeAndAuditAlarm (Ordinal: 1789, Address: 0x9e0b0)
• ZwAccessCheckByTypeResultList (Ordinal: 1790, Address: 0x9e200)
• ZwAccessCheckByTypeResultListAndAuditAlarm (Ordinal: 1791, Address: 0x9e220)
• ZwAccessCheckByTypeResultListAndAuditAlarmByHandle (Ordinal: 1792, Address: 0x9e240)
• ZwAcquireCrossVmMutant (Ordinal: 1793, Address: 0x9e260)
• ZwAcquireProcessActivityReference (Ordinal: 1794, Address: 0x9e280)
• ZwAddAtom (Ordinal: 1795, Address: 0x9de70)
• ZwAddAtomEx (Ordinal: 1796, Address: 0x9e2a0)
• ZwAddBootEntry (Ordinal: 1797, Address: 0x9e2c0)
• ZwAddDriverEntry (Ordinal: 1798, Address: 0x9e2e0)
• ZwAdjustGroupsToken (Ordinal: 1799, Address: 0x9e300)
• ZwAdjustPrivilegesToken (Ordinal: 1800, Address: 0x9ddb0)
• ZwAdjustTokenClaimsAndDeviceGroups (Ordinal: 1801, Address: 0x9e320)
• ZwAlertResumeThread (Ordinal: 1802, Address: 0x9e340)
• ZwAlertThread (Ordinal: 1803, Address: 0x9e360)
• ZwAlertThreadByThreadId (Ordinal: 1804, Address: 0x9e380)
• ZwAllocateLocallyUniqueId (Ordinal: 1805, Address: 0x9e3a0)
• ZwAllocateReserveObject (Ordinal: 1806, Address: 0x9e3c0)
• ZwAllocateUserPhysicalPages (Ordinal: 1807, Address: 0x9e3e0)
• ZwAllocateUserPhysicalPagesEx (Ordinal: 1808, Address: 0x9e400)
• ZwAllocateUuids (Ordinal: 1809, Address: 0x9e420)
• ZwAllocateVirtualMemory (Ordinal: 1810, Address: 0x9d890)
• ZwAllocateVirtualMemoryEx (Ordinal: 1811, Address: 0x9e440)
• ZwAlpcAcceptConnectPort (Ordinal: 1812, Address: 0x9e460)
• ZwAlpcCancelMessage (Ordinal: 1813, Address: 0x9e480)
• ZwAlpcConnectPort (Ordinal: 1814, Address: 0x9e4a0)
• ZwAlpcConnectPortEx (Ordinal: 1815, Address: 0x9e4c0)
• ZwAlpcCreatePort (Ordinal: 1816, Address: 0x9e4e0)
• ZwAlpcCreatePortSection (Ordinal: 1817, Address: 0x9e500)
• ZwAlpcCreateResourceReserve (Ordinal: 1818, Address: 0x9e520)
• ZwAlpcCreateSectionView (Ordinal: 1819, Address: 0x9e540)
• ZwAlpcCreateSecurityContext (Ordinal: 1820, Address: 0x9e560)
• ZwAlpcDeletePortSection (Ordinal: 1821, Address: 0x9e580)
• ZwAlpcDeleteResourceReserve (Ordinal: 1822, Address: 0x9e5a0)
• ZwAlpcDeleteSectionView (Ordinal: 1823, Address: 0x9e5c0)
• ZwAlpcDeleteSecurityContext (Ordinal: 1824, Address: 0x9e5e0)
• ZwAlpcDisconnectPort (Ordinal: 1825, Address: 0x9e600)
• ZwAlpcImpersonateClientContainerOfPort (Ordinal: 1826, Address: 0x9e620)
• ZwAlpcImpersonateClientOfPort (Ordinal: 1827, Address: 0x9e640)
• ZwAlpcOpenSenderProcess (Ordinal: 1828, Address: 0x9e660)
• ZwAlpcOpenSenderThread (Ordinal: 1829, Address: 0x9e680)
• ZwAlpcQueryInformation (Ordinal: 1830, Address: 0x9e6a0)
• ZwAlpcQueryInformationMessage (Ordinal: 1831, Address: 0x9e6c0)
• ZwAlpcRevokeSecurityContext (Ordinal: 1832, Address: 0x9e6e0)
• ZwAlpcSendWaitReceivePort (Ordinal: 1833, Address: 0x9e700)
• ZwAlpcSetInformation (Ordinal: 1834, Address: 0x9e720)
• ZwApphelpCacheControl (Ordinal: 1835, Address: 0x9df10)
• ZwAreMappedFilesTheSame (Ordinal: 1836, Address: 0x9e740)
• ZwAssignProcessToJobObject (Ordinal: 1837, Address: 0x9e760)
• ZwAssociateWaitCompletionPacket (Ordinal: 1838, Address: 0x9e780)
• ZwCallEnclave (Ordinal: 1839, Address: 0x9e7a0)
• ZwCallbackReturn (Ordinal: 1840, Address: 0x9d630)
• ZwCancelIoFile (Ordinal: 1841, Address: 0x9e120)
• ZwCancelIoFileEx (Ordinal: 1842, Address: 0x9e7c0)
• ZwCancelSynchronousIoFile (Ordinal: 1843, Address: 0x9e7e0)
• ZwCancelTimer (Ordinal: 1844, Address: 0x9e1a0)
• ZwCancelTimer2 (Ordinal: 1845, Address: 0x9e800)
• ZwCancelWaitCompletionPacket (Ordinal: 1846, Address: 0x9e820)
• ZwClearEvent (Ordinal: 1847, Address: 0x9dd50)
• ZwClose (Ordinal: 1848, Address: 0x9d770)
• ZwCloseObjectAuditAlarm (Ordinal: 1849, Address: 0x9dcf0)
• ZwCommitComplete (Ordinal: 1850, Address: 0x9e840)
• ZwCommitEnlistment (Ordinal: 1851, Address: 0x9e860)
• ZwCommitRegistryTransaction (Ordinal: 1852, Address: 0x9e880)
• ZwCommitTransaction (Ordinal: 1853, Address: 0x9e8a0)
• ZwCompactKeys (Ordinal: 1854, Address: 0x9e8c0)
• ZwCompareObjects (Ordinal: 1855, Address: 0x9e8e0)
• ZwCompareSigningLevels (Ordinal: 1856, Address: 0x9e900)
• ZwCompareTokens (Ordinal: 1857, Address: 0x9e920)
• ZwCompleteConnectPort (Ordinal: 1858, Address: 0x9e940)
• ZwCompressKey (Ordinal: 1859, Address: 0x9e960)
• ZwConnectPort (Ordinal: 1860, Address: 0x9e980)
• ZwContinue (Ordinal: 1861, Address: 0x9ddf0)
• ZwContinueEx (Ordinal: 1862, Address: 0x9e9a0)
• ZwConvertBetweenAuxiliaryCounterAndPerformanceCounter (Ordinal: 1863, Address: 0x9e9c0)
• ZwCopyFileChunk (Ordinal: 1864, Address: 0x9e9e0)
• ZwCreateCrossVmEvent (Ordinal: 1865, Address: 0x9ea00)
• ZwCreateCrossVmMutant (Ordinal: 1866, Address: 0x9ea20)
• ZwCreateDebugObject (Ordinal: 1867, Address: 0x9ea40)
• ZwCreateDirectoryObject (Ordinal: 1868, Address: 0x9ea60)
• ZwCreateDirectoryObjectEx (Ordinal: 1869, Address: 0x9ea80)
• ZwCreateEnclave (Ordinal: 1870, Address: 0x9eaa0)
• ZwCreateEnlistment (Ordinal: 1871, Address: 0x9eac0)
• ZwCreateEvent (Ordinal: 1872, Address: 0x9de90)
• ZwCreateEventPair (Ordinal: 1873, Address: 0x9eae0)
• ZwCreateFile (Ordinal: 1874, Address: 0x9e030)
• ZwCreateIRTimer (Ordinal: 1875, Address: 0x9eb00)
• ZwCreateIoCompletion (Ordinal: 1876, Address: 0x9eb20)
• ZwCreateJobObject (Ordinal: 1877, Address: 0x9eb40)
• ZwCreateJobSet (Ordinal: 1878, Address: 0x9eb60)
• ZwCreateKey (Ordinal: 1879, Address: 0x9d930)
• ZwCreateKeyTransacted (Ordinal: 1880, Address: 0x9eb80)
• ZwCreateKeyedEvent (Ordinal: 1881, Address: 0x9eba0)
• ZwCreateLowBoxToken (Ordinal: 1882, Address: 0x9ebc0)
• ZwCreateMailslotFile (Ordinal: 1883, Address: 0x9ebe0)
• ZwCreateMutant (Ordinal: 1884, Address: 0x9ec00)
• ZwCreateNamedPipeFile (Ordinal: 1885, Address: 0x9ec20)
• ZwCreatePagingFile (Ordinal: 1886, Address: 0x9ec40)
• ZwCreatePartition (Ordinal: 1887, Address: 0x9ec60)
• ZwCreatePort (Ordinal: 1888, Address: 0x9ec80)
• ZwCreatePrivateNamespace (Ordinal: 1889, Address: 0x9eca0)
• ZwCreateProcess (Ordinal: 1890, Address: 0x9ecc0)
• ZwCreateProcessEx (Ordinal: 1891, Address: 0x9df30)
• ZwCreateProfile (Ordinal: 1892, Address: 0x9ece0)
• ZwCreateProfileEx (Ordinal: 1893, Address: 0x9ed00)
• ZwCreateRegistryTransaction (Ordinal: 1894, Address: 0x9ed20)
• ZwCreateResourceManager (Ordinal: 1895, Address: 0x9ed40)
• ZwCreateSection (Ordinal: 1896, Address: 0x9ded0)
• ZwCreateSectionEx (Ordinal: 1897, Address: 0x9ed60)
• ZwCreateSemaphore (Ordinal: 1898, Address: 0x9ed80)
• ZwCreateSymbolicLinkObject (Ordinal: 1899, Address: 0x9eda0)
• ZwCreateThread (Ordinal: 1900, Address: 0x9df50)
• ZwCreateThreadEx (Ordinal: 1901, Address: 0x9edc0)
• ZwCreateTimer (Ordinal: 1902, Address: 0x9ede0)
• ZwCreateTimer2 (Ordinal: 1903, Address: 0x9ee00)
• ZwCreateToken (Ordinal: 1904, Address: 0x9ee20)
• ZwCreateTokenEx (Ordinal: 1905, Address: 0x9ee40)
• ZwCreateTransaction (Ordinal: 1906, Address: 0x9ee60)
• ZwCreateTransactionManager (Ordinal: 1907, Address: 0x9ee80)
• ZwCreateUserProcess (Ordinal: 1908, Address: 0x9eea0)
• ZwCreateWaitCompletionPacket (Ordinal: 1909, Address: 0x9eec0)
• ZwCreateWaitablePort (Ordinal: 1910, Address: 0x9eee0)
• ZwCreateWnfStateName (Ordinal: 1911, Address: 0x9ef00)
• ZwCreateWorkerFactory (Ordinal: 1912, Address: 0x9ef20)
• ZwDebugActiveProcess (Ordinal: 1913, Address: 0x9ef40)
• ZwDebugContinue (Ordinal: 1914, Address: 0x9ef60)
• ZwDelayExecution (Ordinal: 1915, Address: 0x9dc10)
• ZwDeleteAtom (Ordinal: 1916, Address: 0x9ef80)
• ZwDeleteBootEntry (Ordinal: 1917, Address: 0x9efa0)
• ZwDeleteDriverEntry (Ordinal: 1918, Address: 0x9efc0)
• ZwDeleteFile (Ordinal: 1919, Address: 0x9efe0)
• ZwDeleteKey (Ordinal: 1920, Address: 0x9f000)
• ZwDeleteObjectAuditAlarm (Ordinal: 1921, Address: 0x9f020)
• ZwDeletePrivateNamespace (Ordinal: 1922, Address: 0x9f040)
• ZwDeleteValueKey (Ordinal: 1923, Address: 0x9f060)
• ZwDeleteWnfStateData (Ordinal: 1924, Address: 0x9f080)
• ZwDeleteWnfStateName (Ordinal: 1925, Address: 0x9f0a0)
• ZwDeviceIoControlFile (Ordinal: 1926, Address: 0x9d670)
• ZwDirectGraphicsCall (Ordinal: 1927, Address: 0x9f0c0)
• ZwDisableLastKnownGood (Ordinal: 1928, Address: 0x9f0e0)
• ZwDisplayString (Ordinal: 1929, Address: 0x9f100)
• ZwDrawText (Ordinal: 1930, Address: 0x9f120)
• ZwDuplicateObject (Ordinal: 1931, Address: 0x9dd10)
• ZwDuplicateToken (Ordinal: 1932, Address: 0x9ddd0)
• ZwEnableLastKnownGood (Ordinal: 1933, Address: 0x9f140)
• ZwEnumerateBootEntries (Ordinal: 1934, Address: 0x9f160)
• ZwEnumerateDriverEntries (Ordinal: 1935, Address: 0x9f180)
• ZwEnumerateKey (Ordinal: 1936, Address: 0x9dbd0)
• ZwEnumerateSystemEnvironmentValuesEx (Ordinal: 1937, Address: 0x9f1a0)
• ZwEnumerateTransactionObject (Ordinal: 1938, Address: 0x9f1c0)
• ZwEnumerateValueKey (Ordinal: 1939, Address: 0x9d7f0)
• ZwExtendSection (Ordinal: 1940, Address: 0x9f1e0)
• ZwFilterBootOption (Ordinal: 1941, Address: 0x9f200)
• ZwFilterToken (Ordinal: 1942, Address: 0x9f220)
• ZwFilterTokenEx (Ordinal: 1943, Address: 0x9f240)
• ZwFindAtom (Ordinal: 1944, Address: 0x9d810)
• ZwFlushBuffersFile (Ordinal: 1945, Address: 0x9def0)
• ZwFlushBuffersFileEx (Ordinal: 1946, Address: 0x9f260)
• ZwFlushInstallUILanguage (Ordinal: 1947, Address: 0x9f280)
• ZwFlushInstructionCache (Ordinal: 1948, Address: 0x9f2a0)
• ZwFlushKey (Ordinal: 1949, Address: 0x9f2c0)
• ZwFlushProcessWriteBuffers (Ordinal: 1950, Address: 0x9f2e0)
• ZwFlushVirtualMemory (Ordinal: 1951, Address: 0x9f300)
• ZwFlushWriteBuffer (Ordinal: 1952, Address: 0x9f320)
• ZwFreeUserPhysicalPages (Ordinal: 1953, Address: 0x9f340)
• ZwFreeVirtualMemory (Ordinal: 1954, Address: 0x9d950)
• ZwFreezeRegistry (Ordinal: 1955, Address: 0x9f360)
• ZwFreezeTransactions (Ordinal: 1956, Address: 0x9f380)
• ZwFsControlFile (Ordinal: 1957, Address: 0x9dcb0)
• ZwGetCachedSigningLevel (Ordinal: 1958, Address: 0x9f3a0)
• ZwGetCompleteWnfStateSubscription (Ordinal: 1959, Address: 0x9f3c0)
• ZwGetContextThread (Ordinal: 1960, Address: 0x9f3e0)
• ZwGetCurrentProcessorNumber (Ordinal: 1961, Address: 0x9f400)
• ZwGetCurrentProcessorNumberEx (Ordinal: 1962, Address: 0x9f420)
• ZwGetDevicePowerState (Ordinal: 1963, Address: 0x9f440)
• ZwGetMUIRegistryInfo (Ordinal: 1964, Address: 0x9f460)
• ZwGetNextProcess (Ordinal: 1965, Address: 0x9f480)
• ZwGetNextThread (Ordinal: 1966, Address: 0x9f4a0)
• ZwGetNlsSectionPtr (Ordinal: 1967, Address: 0x9f4c0)
• ZwGetNotificationResourceManager (Ordinal: 1968, Address: 0x9f4e0)
• ZwGetWriteWatch (Ordinal: 1969, Address: 0x9f500)
• ZwImpersonateAnonymousToken (Ordinal: 1970, Address: 0x9f520)
• ZwImpersonateClientOfPort (Ordinal: 1971, Address: 0x9d970)
• ZwImpersonateThread (Ordinal: 1972, Address: 0x9f540)
• ZwInitializeEnclave (Ordinal: 1973, Address: 0x9f560)
• ZwInitializeNlsFiles (Ordinal: 1974, Address: 0x9f580)
• ZwInitializeRegistry (Ordinal: 1975, Address: 0x9f5a0)
• ZwInitiatePowerAction (Ordinal: 1976, Address: 0x9f5c0)
• ZwIsProcessInJob (Ordinal: 1977, Address: 0x9df70)
• ZwIsSystemResumeAutomatic (Ordinal: 1978, Address: 0x9f5e0)
• ZwIsUILanguageComitted (Ordinal: 1979, Address: 0x9f600)
• ZwListenPort (Ordinal: 1980, Address: 0x9f620)
• ZwLoadDriver (Ordinal: 1981, Address: 0x9f640)
• ZwLoadEnclaveData (Ordinal: 1982, Address: 0x9f660)
• ZwLoadKey (Ordinal: 1983, Address: 0x9f680)
• ZwLoadKey2 (Ordinal: 1984, Address: 0x9f6a0)
• ZwLoadKey3 (Ordinal: 1985, Address: 0xa1060)
• ZwLoadKeyEx (Ordinal: 1986, Address: 0x9f6c0)
• ZwLockFile (Ordinal: 1987, Address: 0x9f6e0)
• ZwLockProductActivationKeys (Ordinal: 1988, Address: 0x9f700)
• ZwLockRegistryKey (Ordinal: 1989, Address: 0x9f720)
• ZwLockVirtualMemory (Ordinal: 1990, Address: 0x9f740)
• ZwMakePermanentObject (Ordinal: 1991, Address: 0x9f760)
• ZwMakeTemporaryObject (Ordinal: 1992, Address: 0x9f780)
• ZwManageHotPatch (Ordinal: 1993, Address: 0x9f7a0)
• ZwManagePartition (Ordinal: 1994, Address: 0x9f7c0)
• ZwMapCMFModule (Ordinal: 1995, Address: 0x9f7e0)
• ZwMapUserPhysicalPages (Ordinal: 1996, Address: 0x9f800)
• ZwMapUserPhysicalPagesScatter (Ordinal: 1997, Address: 0x9d5f0)
• ZwMapViewOfSection (Ordinal: 1998, Address: 0x9da90)
• ZwMapViewOfSectionEx (Ordinal: 1999, Address: 0x9f820)
• ZwModifyBootEntry (Ordinal: 2000, Address: 0x9f840)
• ZwModifyDriverEntry (Ordinal: 2001, Address: 0x9f860)
• ZwNotifyChangeDirectoryFile (Ordinal: 2002, Address: 0x9f880)
• ZwNotifyChangeDirectoryFileEx (Ordinal: 2003, Address: 0x9f8a0)
• ZwNotifyChangeKey (Ordinal: 2004, Address: 0x9f8c0)
• ZwNotifyChangeMultipleKeys (Ordinal: 2005, Address: 0x9f8e0)
• ZwNotifyChangeSession (Ordinal: 2006, Address: 0x9f900)
• ZwOpenDirectoryObject (Ordinal: 2007, Address: 0x9e090)
• ZwOpenEnlistment (Ordinal: 2008, Address: 0x9f920)
• ZwOpenEvent (Ordinal: 2009, Address: 0x9dd90)
• ZwOpenEventPair (Ordinal: 2010, Address: 0x9f940)
• ZwOpenFile (Ordinal: 2011, Address: 0x9dbf0)
• ZwOpenIoCompletion (Ordinal: 2012, Address: 0x9f960)
• ZwOpenJobObject (Ordinal: 2013, Address: 0x9f980)
• ZwOpenKey (Ordinal: 2014, Address: 0x9d7d0)
• ZwOpenKeyEx (Ordinal: 2015, Address: 0x9f9a0)
• ZwOpenKeyTransacted (Ordinal: 2016, Address: 0x9f9c0)
• ZwOpenKeyTransactedEx (Ordinal: 2017, Address: 0x9f9e0)
• ZwOpenKeyedEvent (Ordinal: 2018, Address: 0x9fa00)
• ZwOpenMutant (Ordinal: 2019, Address: 0x9fa20)
• ZwOpenObjectAuditAlarm (Ordinal: 2020, Address: 0x9fa40)
• ZwOpenPartition (Ordinal: 2021, Address: 0x9fa60)
• ZwOpenPrivateNamespace (Ordinal: 2022, Address: 0x9fa80)
• ZwOpenProcess (Ordinal: 2023, Address: 0x9da50)
• ZwOpenProcessToken (Ordinal: 2024, Address: 0x9faa0)
• ZwOpenProcessTokenEx (Ordinal: 2025, Address: 0x9db90)
• ZwOpenRegistryTransaction (Ordinal: 2026, Address: 0x9fac0)
• ZwOpenResourceManager (Ordinal: 2027, Address: 0x9fae0)
• ZwOpenSection (Ordinal: 2028, Address: 0x9dc70)
• ZwOpenSemaphore (Ordinal: 2029, Address: 0x9fb00)
• ZwOpenSession (Ordinal: 2030, Address: 0x9fb20)
• ZwOpenSymbolicLinkObject (Ordinal: 2031, Address: 0x9fb40)
• ZwOpenThread (Ordinal: 2032, Address: 0x9fb60)
• ZwOpenThreadToken (Ordinal: 2033, Address: 0x9da10)
• ZwOpenThreadTokenEx (Ordinal: 2034, Address: 0x9db70)
• ZwOpenTimer (Ordinal: 2035, Address: 0x9fb80)
• ZwOpenTransaction (Ordinal: 2036, Address: 0x9fba0)
• ZwOpenTransactionManager (Ordinal: 2037, Address: 0x9fbc0)
• ZwPlugPlayControl (Ordinal: 2038, Address: 0x9fbe0)
• ZwPowerInformation (Ordinal: 2039, Address: 0x9e160)
• ZwPrePrepareComplete (Ordinal: 2040, Address: 0x9fc00)
• ZwPrePrepareEnlistment (Ordinal: 2041, Address: 0x9fc20)
• ZwPrepareComplete (Ordinal: 2042, Address: 0x9fc40)
• ZwPrepareEnlistment (Ordinal: 2043, Address: 0x9fc60)
• ZwPrivilegeCheck (Ordinal: 2044, Address: 0x9fc80)
• ZwPrivilegeObjectAuditAlarm (Ordinal: 2045, Address: 0x9fca0)
• ZwPrivilegedServiceAuditAlarm (Ordinal: 2046, Address: 0x9fcc0)
• ZwPropagationComplete (Ordinal: 2047, Address: 0x9fce0)
• ZwPropagationFailed (Ordinal: 2048, Address: 0x9fd00)
• ZwProtectVirtualMemory (Ordinal: 2049, Address: 0x9df90)
• ZwPssCaptureVaSpaceBulk (Ordinal: 2050, Address: 0x9fd20)
• ZwPulseEvent (Ordinal: 2051, Address: 0x9fd40)
• ZwQueryAttributesFile (Ordinal: 2052, Address: 0x9dd30)
• ZwQueryAuxiliaryCounterFrequency (Ordinal: 2053, Address: 0x9fd60)
• ZwQueryBootEntryOrder (Ordinal: 2054, Address: 0x9fd80)
• ZwQueryBootOptions (Ordinal: 2055, Address: 0x9fda0)
• ZwQueryDebugFilterState (Ordinal: 2056, Address: 0x9fdc0)
• ZwQueryDefaultLocale (Ordinal: 2057, Address: 0x9d830)
• ZwQueryDefaultUILanguage (Ordinal: 2058, Address: 0x9de10)
• ZwQueryDirectoryFile (Ordinal: 2059, Address: 0x9dc30)
• ZwQueryDirectoryFileEx (Ordinal: 2060, Address: 0x9fde0)
• ZwQueryDirectoryObject (Ordinal: 2061, Address: 0x9fe00)
• ZwQueryDriverEntryOrder (Ordinal: 2062, Address: 0x9fe20)
• ZwQueryEaFile (Ordinal: 2063, Address: 0x9fe40)
• ZwQueryEvent (Ordinal: 2064, Address: 0x9e050)
• ZwQueryFullAttributesFile (Ordinal: 2065, Address: 0x9fe60)
• ZwQueryInformationAtom (Ordinal: 2066, Address: 0x9fe80)
• ZwQueryInformationByName (Ordinal: 2067, Address: 0x9fea0)
• ZwQueryInformationEnlistment (Ordinal: 2068, Address: 0x9fec0)
• ZwQueryInformationFile (Ordinal: 2069, Address: 0x9d7b0)
• ZwQueryInformationJobObject (Ordinal: 2070, Address: 0x9fee0)
• ZwQueryInformationPort (Ordinal: 2071, Address: 0x9ff00)
• ZwQueryInformationProcess (Ordinal: 2072, Address: 0x9d8b0)
• ZwQueryInformationResourceManager (Ordinal: 2073, Address: 0x9ff20)
• ZwQueryInformationThread (Ordinal: 2074, Address: 0x9da30)
• ZwQueryInformationToken (Ordinal: 2075, Address: 0x9d9b0)
• ZwQueryInformationTransaction (Ordinal: 2076, Address: 0x9ff40)
• ZwQueryInformationTransactionManager (Ordinal: 2077, Address: 0x9ff60)
• ZwQueryInformationWorkerFactory (Ordinal: 2078, Address: 0x9ff80)
• ZwQueryInstallUILanguage (Ordinal: 2079, Address: 0x9ffa0)
• ZwQueryIntervalProfile (Ordinal: 2080, Address: 0x9ffc0)
• ZwQueryIoCompletion (Ordinal: 2081, Address: 0x9ffe0)
• ZwQueryKey (Ordinal: 2082, Address: 0x9d850)
• ZwQueryLicenseValue (Ordinal: 2083, Address: 0xa0000)
• ZwQueryMultipleValueKey (Ordinal: 2084, Address: 0xa0020)
• ZwQueryMutant (Ordinal: 2085, Address: 0xa0040)
• ZwQueryObject (Ordinal: 2086, Address: 0x9d790)
• ZwQueryOpenSubKeys (Ordinal: 2087, Address: 0xa0060)
• ZwQueryOpenSubKeysEx (Ordinal: 2088, Address: 0xa0080)
• ZwQueryPerformanceCounter (Ordinal: 2089, Address: 0x9dbb0)
• ZwQueryPortInformationProcess (Ordinal: 2090, Address: 0xa00a0)
• ZwQueryQuotaInformationFile (Ordinal: 2091, Address: 0xa00c0)
• ZwQuerySection (Ordinal: 2092, Address: 0x9dfb0)
• ZwQuerySecurityAttributesToken (Ordinal: 2093, Address: 0xa00e0)
• ZwQuerySecurityObject (Ordinal: 2094, Address: 0xa0100)
• ZwQuerySecurityPolicy (Ordinal: 2095, Address: 0xa0120)
• ZwQuerySemaphore (Ordinal: 2096, Address: 0xa0140)
• ZwQuerySymbolicLinkObject (Ordinal: 2097, Address: 0xa0160)
• ZwQuerySystemEnvironmentValue (Ordinal: 2098, Address: 0xa0180)
• ZwQuerySystemEnvironmentValueEx (Ordinal: 2099, Address: 0xa01a0)
• ZwQuerySystemInformation (Ordinal: 2100, Address: 0x9dc50)
• ZwQuerySystemInformationEx (Ordinal: 2101, Address: 0xa01c0)
• ZwQuerySystemTime (Ordinal: 2102, Address: 0x9e0d0)
• ZwQueryTimer (Ordinal: 2103, Address: 0x9dc90)
• ZwQueryTimerResolution (Ordinal: 2104, Address: 0xa01e0)
• ZwQueryValueKey (Ordinal: 2105, Address: 0x9d870)
• ZwQueryVirtualMemory (Ordinal: 2106, Address: 0x9d9f0)
• ZwQueryVolumeInformationFile (Ordinal: 2107, Address: 0x9deb0)
• ZwQueryWnfStateData (Ordinal: 2108, Address: 0xa0200)
• ZwQueryWnfStateNameInformation (Ordinal: 2109, Address: 0xa0220)
• ZwQueueApcThread (Ordinal: 2110, Address: 0x9de30)
• ZwQueueApcThreadEx (Ordinal: 2111, Address: 0xa0240)
• ZwQueueApcThreadEx2 (Ordinal: 2112, Address: 0xa0260)
• ZwRaiseException (Ordinal: 2113, Address: 0xa0280)
• ZwRaiseHardError (Ordinal: 2114, Address: 0xa02a0)
• ZwReadFile (Ordinal: 2115, Address: 0x9d650)
• ZwReadFileScatter (Ordinal: 2116, Address: 0x9db50)
• ZwReadOnlyEnlistment (Ordinal: 2117, Address: 0xa02c0)
• ZwReadRequestData (Ordinal: 2118, Address: 0x9e010)
• ZwReadVirtualMemory (Ordinal: 2119, Address: 0x9dd70)
• ZwRecoverEnlistment (Ordinal: 2120, Address: 0xa02e0)
• ZwRecoverResourceManager (Ordinal: 2121, Address: 0xa0300)
• ZwRecoverTransactionManager (Ordinal: 2122, Address: 0xa0320)
• ZwRegisterProtocolAddressInformation (Ordinal: 2123, Address: 0xa0340)
• ZwRegisterThreadTerminatePort (Ordinal: 2124, Address: 0xa0360)
• ZwReleaseKeyedEvent (Ordinal: 2125, Address: 0xa0380)
• ZwReleaseMutant (Ordinal: 2126, Address: 0x9d990)
• ZwReleaseSemaphore (Ordinal: 2127, Address: 0x9d6d0)
• ZwReleaseWorkerFactoryWorker (Ordinal: 2128, Address: 0xa03a0)
• ZwRemoveIoCompletion (Ordinal: 2129, Address: 0x9d6b0)
• ZwRemoveIoCompletionEx (Ordinal: 2130, Address: 0xa03c0)
• ZwRemoveProcessDebug (Ordinal: 2131, Address: 0xa03e0)
• ZwRenameKey (Ordinal: 2132, Address: 0xa0400)
• ZwRenameTransactionManager (Ordinal: 2133, Address: 0xa0420)
• ZwReplaceKey (Ordinal: 2134, Address: 0xa0440)
• ZwReplacePartitionUnit (Ordinal: 2135, Address: 0xa0460)
• ZwReplyPort (Ordinal: 2136, Address: 0x9d710)
• ZwReplyWaitReceivePort (Ordinal: 2137, Address: 0x9d6f0)
• ZwReplyWaitReceivePortEx (Ordinal: 2138, Address: 0x9daf0)
• ZwReplyWaitReplyPort (Ordinal: 2139, Address: 0xa0480)
• ZwRequestPort (Ordinal: 2140, Address: 0xa04a0)
• ZwRequestWaitReplyPort (Ordinal: 2141, Address: 0x9d9d0)
• ZwResetEvent (Ordinal: 2142, Address: 0xa04c0)
• ZwResetWriteWatch (Ordinal: 2143, Address: 0xa04e0)
• ZwRestoreKey (Ordinal: 2144, Address: 0xa0500)
• ZwResumeProcess (Ordinal: 2145, Address: 0xa0520)
• ZwResumeThread (Ordinal: 2146, Address: 0x9dfd0)
• ZwRevertContainerImpersonation (Ordinal: 2147, Address: 0xa0540)
• ZwRollbackComplete (Ordinal: 2148, Address: 0xa0560)
• ZwRollbackEnlistment (Ordinal: 2149, Address: 0xa0580)
• ZwRollbackRegistryTransaction (Ordinal: 2150, Address: 0xa05a0)
• ZwRollbackTransaction (Ordinal: 2151, Address: 0xa05c0)
• ZwRollforwardTransactionManager (Ordinal: 2152, Address: 0xa05e0)
• ZwSaveKey (Ordinal: 2153, Address: 0xa0600)
• ZwSaveKeyEx (Ordinal: 2154, Address: 0xa0620)
• ZwSaveMergedKeys (Ordinal: 2155, Address: 0xa0640)
• ZwSecureConnectPort (Ordinal: 2156, Address: 0xa0660)
• ZwSerializeBoot (Ordinal: 2157, Address: 0xa0680)
• ZwSetBootEntryOrder (Ordinal: 2158, Address: 0xa06a0)
• ZwSetBootOptions (Ordinal: 2159, Address: 0xa06c0)
• ZwSetCachedSigningLevel (Ordinal: 2160, Address: 0xa06e0)
• ZwSetCachedSigningLevel2 (Ordinal: 2161, Address: 0xa0700)
• ZwSetContextThread (Ordinal: 2162, Address: 0xa0720)
• ZwSetDebugFilterState (Ordinal: 2163, Address: 0xa0740)
• ZwSetDefaultHardErrorPort (Ordinal: 2164, Address: 0xa0760)
• ZwSetDefaultLocale (Ordinal: 2165, Address: 0xa0780)
• ZwSetDefaultUILanguage (Ordinal: 2166, Address: 0xa07a0)
• ZwSetDriverEntryOrder (Ordinal: 2167, Address: 0xa07c0)
• ZwSetEaFile (Ordinal: 2168, Address: 0xa07e0)
• ZwSetEvent (Ordinal: 2169, Address: 0x9d750)
• ZwSetEventBoostPriority (Ordinal: 2170, Address: 0x9db30)
• ZwSetHighEventPair (Ordinal: 2171, Address: 0xa0800)
• ZwSetHighWaitLowEventPair (Ordinal: 2172, Address: 0xa0820)
• ZwSetIRTimer (Ordinal: 2173, Address: 0xa0840)
• ZwSetInformationDebugObject (Ordinal: 2174, Address: 0xa0860)
• ZwSetInformationEnlistment (Ordinal: 2175, Address: 0xa0880)
• ZwSetInformationFile (Ordinal: 2176, Address: 0x9da70)
• ZwSetInformationJobObject (Ordinal: 2177, Address: 0xa08a0)
• ZwSetInformationKey (Ordinal: 2178, Address: 0xa08c0)
• ZwSetInformationObject (Ordinal: 2179, Address: 0x9e100)
• ZwSetInformationProcess (Ordinal: 2180, Address: 0x9d910)
• ZwSetInformationResourceManager (Ordinal: 2181, Address: 0xa08e0)
• ZwSetInformationSymbolicLink (Ordinal: 2182, Address: 0xa0900)
• ZwSetInformationThread (Ordinal: 2183, Address: 0x9d730)
• ZwSetInformationToken (Ordinal: 2184, Address: 0xa0920)
• ZwSetInformationTransaction (Ordinal: 2185, Address: 0xa0940)
• ZwSetInformationTransactionManager (Ordinal: 2186, Address: 0xa0960)
• ZwSetInformationVirtualMemory (Ordinal: 2187, Address: 0xa0980)
• ZwSetInformationWorkerFactory (Ordinal: 2188, Address: 0xa09a0)
• ZwSetIntervalProfile (Ordinal: 2189, Address: 0xa09c0)
• ZwSetIoCompletion (Ordinal: 2190, Address: 0xa09e0)
• ZwSetIoCompletionEx (Ordinal: 2191, Address: 0xa0a00)
• ZwSetLdtEntries (Ordinal: 2192, Address: 0xa0a20)
• ZwSetLowEventPair (Ordinal: 2193, Address: 0xa0a40)
• ZwSetLowWaitHighEventPair (Ordinal: 2194, Address: 0xa0a60)
• ZwSetQuotaInformationFile (Ordinal: 2195, Address: 0xa0a80)
• ZwSetSecurityObject (Ordinal: 2196, Address: 0xa0aa0)
• ZwSetSystemEnvironmentValue (Ordinal: 2197, Address: 0xa0ac0)
• ZwSetSystemEnvironmentValueEx (Ordinal: 2198, Address: 0xa0ae0)
• ZwSetSystemInformation (Ordinal: 2199, Address: 0xa0b00)
• ZwSetSystemPowerState (Ordinal: 2200, Address: 0xa0b20)
• ZwSetSystemTime (Ordinal: 2201, Address: 0xa0b40)
• ZwSetThreadExecutionState (Ordinal: 2202, Address: 0xa0b60)
• ZwSetTimer (Ordinal: 2203, Address: 0x9e1c0)
• ZwSetTimer2 (Ordinal: 2204, Address: 0xa0b80)
• ZwSetTimerEx (Ordinal: 2205, Address: 0xa0ba0)
• ZwSetTimerResolution (Ordinal: 2206, Address: 0xa0bc0)
• ZwSetUuidSeed (Ordinal: 2207, Address: 0xa0be0)
• ZwSetValueKey (Ordinal: 2208, Address: 0x9e180)
• ZwSetVolumeInformationFile (Ordinal: 2209, Address: 0xa0c00)
• ZwSetWnfProcessNotificationEvent (Ordinal: 2210, Address: 0xa0c20)
• ZwShutdownSystem (Ordinal: 2211, Address: 0xa0c40)
• ZwShutdownWorkerFactory (Ordinal: 2212, Address: 0xa0c60)
• ZwSignalAndWaitForSingleObject (Ordinal: 2213, Address: 0xa0c80)
• ZwSinglePhaseReject (Ordinal: 2214, Address: 0xa0ca0)
• ZwStartProfile (Ordinal: 2215, Address: 0xa0cc0)
• ZwStopProfile (Ordinal: 2216, Address: 0xa0ce0)
• ZwSubscribeWnfStateChange (Ordinal: 2217, Address: 0xa0d00)
• ZwSuspendProcess (Ordinal: 2218, Address: 0xa0d20)
• ZwSuspendThread (Ordinal: 2219, Address: 0xa0d40)
• ZwSystemDebugControl (Ordinal: 2220, Address: 0xa0d60)
• ZwTerminateEnclave (Ordinal: 2221, Address: 0xa0d80)
• ZwTerminateJobObject (Ordinal: 2222, Address: 0xa0da0)
• ZwTerminateProcess (Ordinal: 2223, Address: 0x9db10)
• ZwTerminateThread (Ordinal: 2224, Address: 0x9dff0)
• ZwTestAlert (Ordinal: 2225, Address: 0xa0dc0)
• ZwThawRegistry (Ordinal: 2226, Address: 0xa0de0)
• ZwThawTransactions (Ordinal: 2227, Address: 0xa0e00)
• ZwTraceControl (Ordinal: 2228, Address: 0xa0e20)
• ZwTraceEvent (Ordinal: 2229, Address: 0x9e140)
• ZwTranslateFilePath (Ordinal: 2230, Address: 0xa0e40)
• ZwUmsThreadYield (Ordinal: 2231, Address: 0xa0e60)
• ZwUnloadDriver (Ordinal: 2232, Address: 0xa0e80)
• ZwUnloadKey (Ordinal: 2233, Address: 0xa0ea0)
• ZwUnloadKey2 (Ordinal: 2234, Address: 0xa0ec0)
• ZwUnloadKeyEx (Ordinal: 2235, Address: 0xa0ee0)
• ZwUnlockFile (Ordinal: 2236, Address: 0xa0f00)
• ZwUnlockVirtualMemory (Ordinal: 2237, Address: 0xa0f20)
• ZwUnmapViewOfSection (Ordinal: 2238, Address: 0x9dad0)
• ZwUnmapViewOfSectionEx (Ordinal: 2239, Address: 0xa0f40)
• ZwUnsubscribeWnfStateChange (Ordinal: 2240, Address: 0xa0f60)
• ZwUpdateWnfStateData (Ordinal: 2241, Address: 0xa0f80)
• ZwVdmControl (Ordinal: 2242, Address: 0xa0fa0)
• ZwWaitForAlertByThreadId (Ordinal: 2243, Address: 0xa0fc0)
• ZwWaitForDebugEvent (Ordinal: 2244, Address: 0xa0fe0)
• ZwWaitForKeyedEvent (Ordinal: 2245, Address: 0xa1000)
• ZwWaitForMultipleObjects (Ordinal: 2246, Address: 0x9e0e0)
• ZwWaitForMultipleObjects32 (Ordinal: 2247, Address: 0x9d8d0)
• ZwWaitForSingleObject (Ordinal: 2248, Address: 0x9d610)
• ZwWaitForWorkViaWorkerFactory (Ordinal: 2249, Address: 0xa1020)
• ZwWaitHighEventPair (Ordinal: 2250, Address: 0xa1040)
• ZwWaitLowEventPair (Ordinal: 2251, Address: 0xa1080)
• ZwWorkerFactoryWorkerReady (Ordinal: 2252, Address: 0x9d5b0)
• ZwWriteFile (Ordinal: 2253, Address: 0x9d690)
• ZwWriteFileGather (Ordinal: 2254, Address: 0x9d8f0)
• ZwWriteRequestData (Ordinal: 2255, Address: 0x9e070)
• ZwWriteVirtualMemory (Ordinal: 2256, Address: 0x9dcd0)
• ZwYieldExecution (Ordinal: 2257, Address: 0x9de50)
• __C_specific_handler (Ordinal: 2258, Address: 0x8cdb0)
• __chkstk (Ordinal: 2259, Address: 0xa2850)
• __isascii (Ordinal: 2260, Address: 0x8cf80)
• __iscsym (Ordinal: 2261, Address: 0x8cfa0)
• __iscsymf (Ordinal: 2262, Address: 0x8cfe0)
• __misaligned_access (Ordinal: 2263, Address: 0x808c0)
• __toascii (Ordinal: 2264, Address: 0x8d020)
• _atoi64 (Ordinal: 2265, Address: 0x8d240)
• _errno (Ordinal: 2266, Address: 0x858b0)
• _fltused (Ordinal: 2267, Address: 0x166ac0)
• _i64toa (Ordinal: 2268, Address: 0x8d2b0)
• _i64toa_s (Ordinal: 2269, Address: 0x96940)
• _i64tow (Ordinal: 2270, Address: 0x8d450)
• _i64tow_s (Ordinal: 2271, Address: 0x96c40)
• _itoa (Ordinal: 2272, Address: 0x8d2f0)
• _itoa_s (Ordinal: 2273, Address: 0x96970)
• _itow (Ordinal: 2274, Address: 0x8d490)
• _itow_s (Ordinal: 2275, Address: 0x96c70)
• _lfind (Ordinal: 2276, Address: 0x8d630)
• _local_unwind (Ordinal: 2277, Address: 0x8d6e0)
• _ltoa (Ordinal: 2278, Address: 0x8d2f0)
• _ltoa_s (Ordinal: 2279, Address: 0x96970)
• _ltow (Ordinal: 2280, Address: 0x8d490)
• _ltow_s (Ordinal: 2281, Address: 0x96c70)
• _makepath_s (Ordinal: 2282, Address: 0x96f60)
• _memccpy (Ordinal: 2283, Address: 0x8d710)
• _memicmp (Ordinal: 2284, Address: 0x8d7b0)
• _setjmp (Ordinal: 2285, Address: 0xa3590)
• _setjmpex (Ordinal: 2286, Address: 0xa3650)
• _snprintf (Ordinal: 2287, Address: 0x8d7d0)
• _snprintf_s (Ordinal: 2288, Address: 0x970b0)
• _snscanf_s (Ordinal: 2289, Address: 0x97180)
• _snwprintf (Ordinal: 2290, Address: 0x8d880)
• _snwprintf_s (Ordinal: 2291, Address: 0x971c0)
• _snwscanf_s (Ordinal: 2292, Address: 0x972a0)
• _splitpath (Ordinal: 2293, Address: 0x8d960)
• _splitpath_s (Ordinal: 2294, Address: 0x972e0)
• _strcmpi (Ordinal: 2295, Address: 0x8dcc0)
• _stricmp (Ordinal: 2296, Address: 0x8dcc0)
• _strlwr (Ordinal: 2297, Address: 0x8dce0)
• _strlwr_s (Ordinal: 2298, Address: 0x8dd10)
• _strnicmp (Ordinal: 2299, Address: 0x8dde0)
• _strnset_s (Ordinal: 2300, Address: 0x97580)
• _strset_s (Ordinal: 2301, Address: 0x97610)
• _strupr (Ordinal: 2302, Address: 0x8de00)
• _strupr_s (Ordinal: 2303, Address: 0x8de50)
• _swprintf (Ordinal: 2304, Address: 0x8dec0)
• _ui64toa (Ordinal: 2305, Address: 0x8d320)
• _ui64toa_s (Ordinal: 2306, Address: 0x969a0)
• _ui64tow (Ordinal: 2307, Address: 0x8d4c0)
• _ui64tow_s (Ordinal: 2308, Address: 0x96ca0)
• _ultoa (Ordinal: 2309, Address: 0x8d340)
• _ultoa_s (Ordinal: 2310, Address: 0x969c0)
• _ultow (Ordinal: 2311, Address: 0x8d4e0)
• _ultow_s (Ordinal: 2312, Address: 0x96cc0)
• _vscprintf (Ordinal: 2313, Address: 0x8df80)
• _vscwprintf (Ordinal: 2314, Address: 0x8e090)
• _vsnprintf (Ordinal: 2315, Address: 0x8e170)
• _vsnprintf_s (Ordinal: 2316, Address: 0x970e0)
• _vsnwprintf (Ordinal: 2317, Address: 0x8e240)
• _vsnwprintf_s (Ordinal: 2318, Address: 0x971f0)
• _vswprintf (Ordinal: 2319, Address: 0x8e0b0)
• _wcsicmp (Ordinal: 2320, Address: 0x8e340)
• _wcslwr (Ordinal: 2321, Address: 0x8e3a0)
• _wcslwr_s (Ordinal: 2322, Address: 0x8e400)
• _wcsnicmp (Ordinal: 2323, Address: 0x8e480)
• _wcsnset_s (Ordinal: 2324, Address: 0x8e4f0)
• _wcsset_s (Ordinal: 2325, Address: 0x8e580)
• _wcstoi64 (Ordinal: 2326, Address: 0x8e5e0)
• _wcstoui64 (Ordinal: 2327, Address: 0x8e610)
• _wcsupr (Ordinal: 2328, Address: 0x8e8b0)
• _wcsupr_s (Ordinal: 2329, Address: 0x8e8f0)
• _wmakepath_s (Ordinal: 2330, Address: 0x97670)
• _wsplitpath_s (Ordinal: 2331, Address: 0x977f0)
• _wtoi (Ordinal: 2332, Address: 0x8e970)
• _wtoi64 (Ordinal: 2333, Address: 0x8e9a0)
• _wtol (Ordinal: 2334, Address: 0x8e9c0)
• abs (Ordinal: 2335, Address: 0x8e9e0)
• atan (Ordinal: 2336, Address: 0x8e9f0)
• atan2 (Ordinal: 2337, Address: 0x8ec50)
• atoi (Ordinal: 2338, Address: 0x8d260)
• atol (Ordinal: 2339, Address: 0x8d290)
• bsearch (Ordinal: 2340, Address: 0x8f390)
• bsearch_s (Ordinal: 2341, Address: 0x8f490)
• ceil (Ordinal: 2342, Address: 0x8f5a0)
• cos (Ordinal: 2343, Address: 0x8f6c0)
• fabs (Ordinal: 2344, Address: 0x8ffa0)
• floor (Ordinal: 2345, Address: 0x90080)
• isalnum (Ordinal: 2346, Address: 0x8d030)
• isalpha (Ordinal: 2347, Address: 0x8d060)
• iscntrl (Ordinal: 2348, Address: 0x8d090)
• isdigit (Ordinal: 2349, Address: 0x8d0c0)
• isgraph (Ordinal: 2350, Address: 0x8d0f0)
• islower (Ordinal: 2351, Address: 0x8d120)
• isprint (Ordinal: 2352, Address: 0x8d150)
• ispunct (Ordinal: 2353, Address: 0x8d180)
• isspace (Ordinal: 2354, Address: 0x8d1b0)
• isupper (Ordinal: 2355, Address: 0x8d1e0)
• iswalnum (Ordinal: 2356, Address: 0x901b0)
• iswalpha (Ordinal: 2357, Address: 0x901c0)
• iswascii (Ordinal: 2358, Address: 0x901d0)
• iswctype (Ordinal: 2359, Address: 0x90280)
• iswdigit (Ordinal: 2360, Address: 0x901f0)
• iswgraph (Ordinal: 2361, Address: 0x90200)
• iswlower (Ordinal: 2362, Address: 0x90210)
• iswprint (Ordinal: 2363, Address: 0x90220)
• iswspace (Ordinal: 2364, Address: 0x90230)
• iswxdigit (Ordinal: 2365, Address: 0x90240)
• isxdigit (Ordinal: 2366, Address: 0x8d210)
• labs (Ordinal: 2367, Address: 0x8e9e0)
• log (Ordinal: 2368, Address: 0x902b0)
• longjmp (Ordinal: 2369, Address: 0x90590)
• mbstowcs (Ordinal: 2370, Address: 0x905c0)
• memchr (Ordinal: 2371, Address: 0x906a0)
• memcmp (Ordinal: 2372, Address: 0x906d0)
• memcpy (Ordinal: 2373, Address: 0xa4400)
• memcpy_s (Ordinal: 2374, Address: 0x97ab0)
• memmove (Ordinal: 2375, Address: 0xa4400)
• memmove_s (Ordinal: 2376, Address: 0x97b50)
• memset (Ordinal: 2377, Address: 0xa46c0)
• pow (Ordinal: 2378, Address: 0xa36f0)
• qsort (Ordinal: 2379, Address: 0x907b0)
• qsort_s (Ordinal: 2380, Address: 0x90b40)
• sin (Ordinal: 2381, Address: 0x8fae0)
• sprintf (Ordinal: 2382, Address: 0x90f00)
• sprintf_s (Ordinal: 2383, Address: 0x97bb0)
• sqrt (Ordinal: 2384, Address: 0x90f90)
• sscanf (Ordinal: 2385, Address: 0x910a0)
• sscanf_s (Ordinal: 2386, Address: 0x97c30)
• strcat (Ordinal: 2387, Address: 0x91170)
• strcat_s (Ordinal: 2388, Address: 0x97c90)
• strchr (Ordinal: 2389, Address: 0x912d0)
• strcmp (Ordinal: 2390, Address: 0x91310)
• strcpy (Ordinal: 2391, Address: 0x91210)
• strcpy_s (Ordinal: 2392, Address: 0x97d30)
• strcspn (Ordinal: 2393, Address: 0x913d0)
• strlen (Ordinal: 2394, Address: 0x91490)
• strncat (Ordinal: 2395, Address: 0x91550)
• strncat_s (Ordinal: 2396, Address: 0x97dc0)
• strncmp (Ordinal: 2397, Address: 0x91700)
• strncpy (Ordinal: 2398, Address: 0x917d0)
• strncpy_s (Ordinal: 2399, Address: 0x97ed0)
• strnlen (Ordinal: 2400, Address: 0x91940)
• strpbrk (Ordinal: 2401, Address: 0x91960)
• strrchr (Ordinal: 2402, Address: 0x91a10)
• strspn (Ordinal: 2403, Address: 0x91a40)
• strstr (Ordinal: 2404, Address: 0x91b10)
• strtok_s (Ordinal: 2405, Address: 0x97fc0)
• strtol (Ordinal: 2406, Address: 0x91d90)
• strtoul (Ordinal: 2407, Address: 0x91df0)
• swprintf (Ordinal: 2408, Address: 0x8dec0)
• swprintf_s (Ordinal: 2409, Address: 0x98130)
• swscanf_s (Ordinal: 2410, Address: 0x981c0)
• tan (Ordinal: 2411, Address: 0x91e30)
• tolower (Ordinal: 2412, Address: 0x922d0)
• toupper (Ordinal: 2413, Address: 0x92310)
• towlower (Ordinal: 2414, Address: 0x92380)
• towupper (Ordinal: 2415, Address: 0x923b0)
• vDbgPrintEx (Ordinal: 2416, Address: 0xe09f0)
• vDbgPrintExWithPrefix (Ordinal: 2417, Address: 0xe0a20)
• vsprintf (Ordinal: 2418, Address: 0x8e070)
• vsprintf_s (Ordinal: 2419, Address: 0x97be0)
• vswprintf_s (Ordinal: 2420, Address: 0x98160)
• wcscat (Ordinal: 2421, Address: 0x923c0)
• wcscat_s (Ordinal: 2422, Address: 0x98220)
• wcschr (Ordinal: 2423, Address: 0x92430)
• wcscmp (Ordinal: 2424, Address: 0x92460)
• wcscpy (Ordinal: 2425, Address: 0x92400)
• wcscpy_s (Ordinal: 2426, Address: 0x982c0)
• wcscspn (Ordinal: 2427, Address: 0x924a0)
• wcslen (Ordinal: 2428, Address: 0x924f0)
• wcsncat (Ordinal: 2429, Address: 0x92510)
• wcsncat_s (Ordinal: 2430, Address: 0x98350)
• wcsncmp (Ordinal: 2431, Address: 0x92560)
• wcsncpy (Ordinal: 2432, Address: 0x925a0)
• wcsncpy_s (Ordinal: 2433, Address: 0x98470)
• wcsnlen (Ordinal: 2434, Address: 0x925f0)
• wcspbrk (Ordinal: 2435, Address: 0x92620)
• wcsrchr (Ordinal: 2436, Address: 0x92670)
• wcsspn (Ordinal: 2437, Address: 0x926b0)
• wcsstr (Ordinal: 2438, Address: 0x92700)
• wcstok_s (Ordinal: 2439, Address: 0x98570)
• wcstol (Ordinal: 2440, Address: 0x92990)
• wcstombs (Ordinal: 2441, Address: 0x92a30)
• wcstoul (Ordinal: 2442, Address: 0x929f0)

Imported DLLs & Functions

No imported DLLs.