KernelBase.dll

Description: Windows NT BASE API Client DLL

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.20348.4294

Architecture: 64-bit

Operating System: Windows NT

SHA256: a5025e8bd3ac8bc67b9ee747f0c45bee

File Size: 3.5 MB

Uploaded At: Feb. 6, 2026, 10:09 p.m.

Views: 14

Exported Functions

  • PackageSidFromProductId (Ordinal: 1, Address: 0x116120)
  • AccessCheck (Ordinal: 2, Address: 0x72d80)
  • AccessCheckAndAuditAlarmW (Ordinal: 3, Address: 0x806c0)
  • AccessCheckByType (Ordinal: 4, Address: 0x76530)
  • AccessCheckByTypeAndAuditAlarmW (Ordinal: 5, Address: 0x13aab0)
  • AccessCheckByTypeResultList (Ordinal: 6, Address: 0x13abf0)
  • AccessCheckByTypeResultListAndAuditAlarmByHandleW (Ordinal: 7, Address: 0x13acb0)
  • AccessCheckByTypeResultListAndAuditAlarmW (Ordinal: 8, Address: 0x13ae50)
  • AcquireSRWLockExclusive (Ordinal: 9, Address: 0x312385)
  • AcquireSRWLockShared (Ordinal: 10, Address: 0x3123bb)
  • AcquireStateLock (Ordinal: 11, Address: 0x2b80)
  • ActivateActCtx (Ordinal: 12, Address: 0x81950)
  • AddAccessAllowedAce (Ordinal: 13, Address: 0x82070)
  • AddAccessAllowedAceEx (Ordinal: 14, Address: 0x272a0)
  • AddAccessAllowedObjectAce (Ordinal: 15, Address: 0x13afe0)
  • AddAccessDeniedAce (Ordinal: 16, Address: 0xb4810)
  • AddAccessDeniedAceEx (Ordinal: 17, Address: 0x13b050)
  • AddAccessDeniedObjectAce (Ordinal: 18, Address: 0x13b0b0)
  • AddAce (Ordinal: 19, Address: 0x7bdd0)
  • AddAuditAccessAce (Ordinal: 20, Address: 0x13b120)
  • AddAuditAccessAceEx (Ordinal: 21, Address: 0x13b170)
  • AddAuditAccessObjectAce (Ordinal: 22, Address: 0x13b1e0)
  • AddConsoleAliasA (Ordinal: 23, Address: 0x132800)
  • AddConsoleAliasW (Ordinal: 24, Address: 0x132980)
  • AddDependencyToProcessPackageGraph (Ordinal: 25, Address: 0x1183e0)
  • AddDllDirectory (Ordinal: 26, Address: 0x958f0)
  • AddExtensionProgId (Ordinal: 27, Address: 0x11d7d0)
  • AddMandatoryAce (Ordinal: 28, Address: 0x92b50)
  • AddPackageDependency (Ordinal: 29, Address: 0x118a40)
  • AddRefActCtx (Ordinal: 30, Address: 0x89130)
  • AddResourceAttributeAce (Ordinal: 31, Address: 0x13b270)
  • AddSIDToBoundaryDescriptor (Ordinal: 32, Address: 0x92220)
  • AddScopedPolicyIDAce (Ordinal: 33, Address: 0x13b2d0)
  • AddVectoredContinueHandler (Ordinal: 34, Address: 0x3125c0)
  • AddVectoredExceptionHandler (Ordinal: 35, Address: 0x312600)
  • AdjustTokenGroups (Ordinal: 36, Address: 0x91260)
  • AdjustTokenPrivileges (Ordinal: 37, Address: 0x84ac0)
  • AllocConsole (Ordinal: 38, Address: 0x1334f0)
  • AllocateAndInitializeSid (Ordinal: 39, Address: 0x73600)
  • AllocateLocallyUniqueId (Ordinal: 40, Address: 0x93450)
  • AllocateUserPhysicalPages (Ordinal: 41, Address: 0x13d2a0)
  • AllocateUserPhysicalPages2 (Ordinal: 42, Address: 0x13d2e0)
  • AllocateUserPhysicalPagesNuma (Ordinal: 43, Address: 0x13d360)
  • AppContainerDeriveSidFromMoniker (Ordinal: 44, Address: 0x273c0)
  • AppContainerFreeMemory (Ordinal: 45, Address: 0x260b0)
  • AppContainerLookupDisplayNameMrtReference (Ordinal: 46, Address: 0xfbf0)
  • AppContainerLookupMoniker (Ordinal: 47, Address: 0x28e20)
  • AppContainerRegisterSid (Ordinal: 48, Address: 0xb210)
  • AppContainerUnregisterSid (Ordinal: 49, Address: 0x75150)
  • AppPolicyGetClrCompat (Ordinal: 50, Address: 0x88030)
  • AppPolicyGetCreateFileAccess (Ordinal: 51, Address: 0x11f3a0)
  • AppPolicyGetLifecycleManagement (Ordinal: 52, Address: 0x6cc0)
  • AppPolicyGetMediaFoundationCodecLoading (Ordinal: 53, Address: 0x87f60)
  • AppPolicyGetProcessTerminationMethod (Ordinal: 54, Address: 0x880b0)
  • AppPolicyGetShowDeveloperDiagnostic (Ordinal: 55, Address: 0x11f410)
  • AppPolicyGetThreadInitializationType (Ordinal: 56, Address: 0x87fc0)
  • AppPolicyGetWindowingModel (Ordinal: 57, Address: 0x87ef0)
  • AppXFreeMemory (Ordinal: 58, Address: 0x260b0)
  • AppXGetApplicationData (Ordinal: 59, Address: 0x125ab0)
  • AppXGetDevelopmentMode (Ordinal: 60, Address: 0x125cc0)
  • AppXGetOSMaxVersionTested (Ordinal: 61, Address: 0x10a80)
  • AppXGetOSMinVersion (Ordinal: 62, Address: 0x125de0)
  • AppXGetPackageCapabilities (Ordinal: 63, Address: 0x260f0)
  • AppXGetPackageSid (Ordinal: 64, Address: 0x25f90)
  • AppXLookupDisplayName (Ordinal: 65, Address: 0x125df0)
  • AppXLookupMoniker (Ordinal: 66, Address: 0x125e80)
  • AppXPostSuccessExtension (Ordinal: 67, Address: 0x8fcc0)
  • AppXPreCreationExtension (Ordinal: 68, Address: 0x7fa0)
  • AppXReleaseAppXContext (Ordinal: 69, Address: 0x8ffa0)
  • AppXUpdatePackageCapabilities (Ordinal: 70, Address: 0x1260d0)
  • ApplicationUserModelIdFromProductId (Ordinal: 71, Address: 0x11f480)
  • AreAllAccessesGranted (Ordinal: 72, Address: 0x4e00)
  • AreAnyAccessesGranted (Ordinal: 73, Address: 0x13b310)
  • AreFileApisANSI (Ordinal: 74, Address: 0x90d60)
  • AreShortNamesEnabled (Ordinal: 75, Address: 0x10a1b0)
  • AreThereVisibleLogoffScriptsInternal (Ordinal: 76, Address: 0xf0420)
  • AreThereVisibleShutdownScriptsInternal (Ordinal: 77, Address: 0xf0470)
  • ArmFeatureUsageSubscriberFlushNotification (Ordinal: 78, Address: 0xbec90)
  • AttachConsole (Ordinal: 79, Address: 0x133590)
  • BaseCheckAppcompatCache (Ordinal: 80, Address: 0xf13a0)
  • BaseCheckAppcompatCacheEx (Ordinal: 81, Address: 0xf1410)
  • BaseCleanupAppcompatCacheSupport (Ordinal: 82, Address: 0xf14c0)
  • BaseDllFreeResourceId (Ordinal: 83, Address: 0x28eb0)
  • BaseDllMapResourceIdW (Ordinal: 84, Address: 0x2bf10)
  • BaseDumpAppcompatCache (Ordinal: 85, Address: 0xf1500)
  • BaseFlushAppcompatCache (Ordinal: 86, Address: 0xf1530)
  • BaseFormatObjectAttributes (Ordinal: 87, Address: 0x4c7a0)
  • BaseFreeAppCompatDataForProcess (Ordinal: 88, Address: 0x95530)
  • BaseGetConsoleReference (Ordinal: 89, Address: 0x133630)
  • BaseGetNamedObjectDirectory (Ordinal: 90, Address: 0x4b750)
  • BaseInitAppcompatCacheSupport (Ordinal: 91, Address: 0xb2e10)
  • BaseIsAppcompatInfrastructureDisabled (Ordinal: 92, Address: 0x944a0)
  • BaseMarkFileForDelete (Ordinal: 93, Address: 0xf1ce0)
  • BaseReadAppCompatDataForProcess (Ordinal: 94, Address: 0x95010)
  • BaseUpdateAppcompatCache (Ordinal: 95, Address: 0xf1560)
  • BasepAdjustObjectAttributesForPrivateNamespace (Ordinal: 96, Address: 0x6bd40)
  • BasepCopyFileCallback (Ordinal: 97, Address: 0x57e30)
  • BasepCopyFileExW (Ordinal: 98, Address: 0x6c530)
  • BasepNotifyTrackingService (Ordinal: 99, Address: 0x54c30)
  • Beep (Ordinal: 100, Address: 0x13e5d0)
  • CLOSE_LOCAL_HANDLE_INTERNAL (Ordinal: 101, Address: 0x4afc0)
  • CallEnclave (Ordinal: 102, Address: 0xc7dd0)
  • CallNamedPipeW (Ordinal: 103, Address: 0x5cb0)
  • CallbackMayRunLong (Ordinal: 104, Address: 0x81d20)
  • CancelIo (Ordinal: 105, Address: 0x93ca0)
  • CancelIoEx (Ordinal: 106, Address: 0x8cde0)
  • CancelSynchronousIo (Ordinal: 107, Address: 0x13ef60)
  • CancelThreadpoolIo (Ordinal: 108, Address: 0x312d5c)
  • CancelWaitableTimer (Ordinal: 109, Address: 0x7aca0)
  • CeipIsOptedIn (Ordinal: 110, Address: 0xf7880)
  • ChangeTimerQueueTimer (Ordinal: 111, Address: 0x90b10)
  • CharLowerA (Ordinal: 112, Address: 0x362a0)
  • CharLowerBuffA (Ordinal: 113, Address: 0x94c40)
  • CharLowerBuffW (Ordinal: 114, Address: 0x35ca0)
  • CharLowerW (Ordinal: 115, Address: 0x363a0)
  • CharNextA (Ordinal: 116, Address: 0x686d0)
  • CharNextExA (Ordinal: 117, Address: 0xf1760)
  • CharNextW (Ordinal: 118, Address: 0x69550)
  • CharPrevA (Ordinal: 119, Address: 0x69100)
  • CharPrevExA (Ordinal: 120, Address: 0xf17a0)
  • CharPrevW (Ordinal: 121, Address: 0x671b0)
  • CharUpperA (Ordinal: 122, Address: 0x7d480)
  • CharUpperBuffA (Ordinal: 123, Address: 0x7d4d0)
  • CharUpperBuffW (Ordinal: 124, Address: 0x35b40)
  • CharUpperW (Ordinal: 125, Address: 0x36420)
  • CheckAllowDecryptedRemoteDestinationPolicy (Ordinal: 126, Address: 0xf4220)
  • CheckGroupPolicyEnabled (Ordinal: 127, Address: 0x65c0)
  • CheckIfStateChangeNotificationExists (Ordinal: 128, Address: 0x1117e0)
  • CheckIsMSIXPackage (Ordinal: 129, Address: 0x13920)
  • CheckRemoteDebuggerPresent (Ordinal: 130, Address: 0x94a90)
  • CheckTokenCapability (Ordinal: 131, Address: 0x82250)
  • CheckTokenMembership (Ordinal: 132, Address: 0x76700)
  • CheckTokenMembershipEx (Ordinal: 133, Address: 0x87990)
  • ChrCmpIA (Ordinal: 134, Address: 0x685d0)
  • ChrCmpIW (Ordinal: 135, Address: 0x31e10)
  • ClearCommBreak (Ordinal: 136, Address: 0x13f940)
  • ClearCommError (Ordinal: 137, Address: 0x13f960)
  • CloseHandle (Ordinal: 138, Address: 0x42b50)
  • ClosePackageInfo (Ordinal: 139, Address: 0x244b0)
  • ClosePrivateNamespace (Ordinal: 140, Address: 0x8da10)
  • ClosePseudoConsole (Ordinal: 141, Address: 0x133960)
  • CloseState (Ordinal: 142, Address: 0x7acd0)
  • CloseStateAtom (Ordinal: 143, Address: 0x7c260)
  • CloseStateChangeNotification (Ordinal: 144, Address: 0x922e0)
  • CloseStateContainer (Ordinal: 145, Address: 0x4a380)
  • CloseStateLock (Ordinal: 146, Address: 0x2b10)
  • CloseThreadpool (Ordinal: 147, Address: 0x313012)
  • CloseThreadpoolCleanupGroup (Ordinal: 148, Address: 0x313042)
  • CloseThreadpoolCleanupGroupMembers (Ordinal: 149, Address: 0x313081)
  • CloseThreadpoolIo (Ordinal: 150, Address: 0x3130b6)
  • CloseThreadpoolTimer (Ordinal: 151, Address: 0x3130e7)
  • CloseThreadpoolWait (Ordinal: 152, Address: 0x313110)
  • CloseThreadpoolWork (Ordinal: 153, Address: 0x313138)
  • CommitStateAtom (Ordinal: 154, Address: 0x1118d0)
  • CompareFileTime (Ordinal: 155, Address: 0x766b0)
  • CompareObjectHandles (Ordinal: 156, Address: 0x1416b0)
  • CompareStringA (Ordinal: 157, Address: 0x372f0)
  • CompareStringEx (Ordinal: 158, Address: 0x389d0)
  • CompareStringOrdinal (Ordinal: 159, Address: 0x22a40)
  • CompareStringW (Ordinal: 160, Address: 0x38760)
  • ConnectNamedPipe (Ordinal: 161, Address: 0x84a10)
  • ContinueDebugEvent (Ordinal: 162, Address: 0x13f3d0)
  • ConvertAuxiliaryCounterToPerformanceCounter (Ordinal: 163, Address: 0x1416f0)
  • ConvertDefaultLocale (Ordinal: 164, Address: 0x933e0)
  • ConvertFiberToThread (Ordinal: 165, Address: 0x83b90)
  • ConvertPerformanceCounterToAuxiliaryCounter (Ordinal: 166, Address: 0x141760)
  • ConvertThreadToFiber (Ordinal: 167, Address: 0x7cdd0)
  • ConvertThreadToFiberEx (Ordinal: 168, Address: 0x7cde0)
  • ConvertToAutoInheritPrivateObjectSecurity (Ordinal: 169, Address: 0x13b340)
  • CopyContext (Ordinal: 170, Address: 0xf7a40)
  • CopyFile2 (Ordinal: 171, Address: 0x6c1f0)
  • CopyFileExW (Ordinal: 172, Address: 0x6c3e0)
  • CopyFileW (Ordinal: 173, Address: 0x6c3b0)
  • CopyMemoryNonTemporal (Ordinal: 174, Address: 0x313302)
  • CopySid (Ordinal: 175, Address: 0x21b10)
  • CouldMultiUserAppsBehaviorBePossibleForPackage (Ordinal: 176, Address: 0x8e250)
  • CreateActCtxW (Ordinal: 177, Address: 0x8f500)
  • CreateAppContainerToken (Ordinal: 178, Address: 0x14e90)
  • CreateBoundaryDescriptorW (Ordinal: 179, Address: 0x8ff50)
  • CreateConsoleScreenBuffer (Ordinal: 180, Address: 0x134130)
  • CreateDirectoryA (Ordinal: 181, Address: 0x93390)
  • CreateDirectoryExW (Ordinal: 182, Address: 0xf5a20)
  • CreateDirectoryW (Ordinal: 183, Address: 0x3fe00)
  • CreateEnclave (Ordinal: 184, Address: 0x13e710)
  • CreateEventA (Ordinal: 185, Address: 0x57b10)
  • CreateEventExA (Ordinal: 186, Address: 0x57c90)
  • CreateEventExW (Ordinal: 187, Address: 0x4f000)
  • CreateEventW (Ordinal: 188, Address: 0x6a250)
  • CreateFiber (Ordinal: 189, Address: 0x80fb0)
  • CreateFiberEx (Ordinal: 190, Address: 0x80fe0)
  • CreateFile2 (Ordinal: 191, Address: 0x897a0)
  • CreateFileA (Ordinal: 192, Address: 0x42e40)
  • CreateFileMapping2 (Ordinal: 193, Address: 0x142ba0)
  • CreateFileMappingFromApp (Ordinal: 194, Address: 0x142d50)
  • CreateFileMappingNumaW (Ordinal: 195, Address: 0x4c5a0)
  • CreateFileMappingW (Ordinal: 196, Address: 0x4c570)
  • CreateFileW (Ordinal: 197, Address: 0x42f40)
  • CreateHardLinkA (Ordinal: 198, Address: 0xf78b0)
  • CreateHardLinkW (Ordinal: 199, Address: 0x92770)
  • CreateIoCompletionPort (Ordinal: 200, Address: 0x8cb10)
  • CreateMemoryResourceNotification (Ordinal: 201, Address: 0x8e860)
  • CreateMutexA (Ordinal: 202, Address: 0x88250)
  • CreateMutexExA (Ordinal: 203, Address: 0x88280)
  • CreateMutexExW (Ordinal: 204, Address: 0x4b5b0)
  • CreateMutexW (Ordinal: 205, Address: 0x4b580)
  • CreateNamedPipeW (Ordinal: 206, Address: 0x88330)
  • CreatePackageDependency (Ordinal: 207, Address: 0x118e90)
  • CreatePipe (Ordinal: 208, Address: 0x84ea0)
  • CreatePrivateNamespaceW (Ordinal: 209, Address: 0x86dc0)
  • CreatePrivateObjectSecurity (Ordinal: 210, Address: 0x6da0)
  • CreatePrivateObjectSecurityEx (Ordinal: 211, Address: 0x819f0)
  • CreatePrivateObjectSecurityWithMultipleInheritance (Ordinal: 212, Address: 0xb1050)
  • CreateProcessA (Ordinal: 213, Address: 0x7dfb0)
  • CreateProcessAsUserA (Ordinal: 214, Address: 0x1436c0)
  • CreateProcessAsUserW (Ordinal: 215, Address: 0x8d530)
  • CreateProcessInternalA (Ordinal: 216, Address: 0x7e030)
  • CreateProcessInternalW (Ordinal: 217, Address: 0x4f580)
  • CreateProcessW (Ordinal: 218, Address: 0x88b10)
  • CreatePseudoConsole (Ordinal: 219, Address: 0x133980)
  • CreatePseudoConsoleAsUser (Ordinal: 220, Address: 0x1339c0)
  • CreateRemoteThread (Ordinal: 221, Address: 0x1422c0)
  • CreateRemoteThreadEx (Ordinal: 222, Address: 0x4e380)
  • CreateRestrictedToken (Ordinal: 223, Address: 0x92fd0)
  • CreateSemaphoreExW (Ordinal: 224, Address: 0x4c870)
  • CreateSemaphoreW (Ordinal: 225, Address: 0x8c700)
  • CreateStateAtom (Ordinal: 226, Address: 0x86220)
  • CreateStateChangeNotification (Ordinal: 227, Address: 0xe9c0)
  • CreateStateContainer (Ordinal: 228, Address: 0x20190)
  • CreateStateLock (Ordinal: 229, Address: 0x2a10)
  • CreateStateSubcontainer (Ordinal: 230, Address: 0x4b8a0)
  • CreateSymbolicLinkW (Ordinal: 231, Address: 0xf5550)
  • CreateThread (Ordinal: 232, Address: 0x142310)
  • CreateThreadpool (Ordinal: 233, Address: 0x8fe30)
  • CreateThreadpoolCleanupGroup (Ordinal: 234, Address: 0x8f4d0)
  • CreateThreadpoolIo (Ordinal: 235, Address: 0x80930)
  • CreateThreadpoolTimer (Ordinal: 236, Address: 0x7d440)
  • CreateThreadpoolWait (Ordinal: 237, Address: 0x81310)
  • CreateThreadpoolWork (Ordinal: 238, Address: 0x7b2e0)
  • CreateTimerQueue (Ordinal: 239, Address: 0x8d480)
  • CreateTimerQueueTimer (Ordinal: 240, Address: 0x7e520)
  • CreateWaitableTimerExW (Ordinal: 241, Address: 0x4d190)
  • CreateWaitableTimerW (Ordinal: 242, Address: 0x92370)
  • CreateWellKnownSid (Ordinal: 243, Address: 0x28460)
  • CtrlRoutine (Ordinal: 244, Address: 0x1349e0)
  • CveEventWrite (Ordinal: 245, Address: 0x13b390)
  • DeactivateActCtx (Ordinal: 246, Address: 0x819a0)
  • DebugActiveProcess (Ordinal: 247, Address: 0x13f430)
  • DebugActiveProcessStop (Ordinal: 248, Address: 0x13f4c0)
  • DebugBreak (Ordinal: 249, Address: 0xfabb0)
  • DecodePointer (Ordinal: 250, Address: 0x3138f1)
  • DecodeRemotePointer (Ordinal: 251, Address: 0x31391c)
  • DecodeSystemPointer (Ordinal: 252, Address: 0x31394d)
  • DefineDosDeviceW (Ordinal: 253, Address: 0x5440)
  • DelayLoadFailureHook (Ordinal: 254, Address: 0x78be0)
  • DelayLoadFailureHookLookup (Ordinal: 255, Address: 0x10f810)
  • DeleteAce (Ordinal: 256, Address: 0x8f250)
  • DeleteBoundaryDescriptor (Ordinal: 257, Address: 0x94280)
  • DeleteCriticalSection (Ordinal: 258, Address: 0x3139e4)
  • DeleteEnclave (Ordinal: 259, Address: 0x13e790)
  • DeleteFiber (Ordinal: 260, Address: 0x886e0)
  • DeleteFileA (Ordinal: 261, Address: 0x4aa40)
  • DeleteFileW (Ordinal: 262, Address: 0x4a7e0)
  • DeletePackageDependency (Ordinal: 263, Address: 0x118f20)
  • DeleteProcThreadAttributeList (Ordinal: 264, Address: 0x931e0)
  • DeleteStateAtomValue (Ordinal: 265, Address: 0x785b0)
  • DeleteStateContainer (Ordinal: 266, Address: 0xb0140)
  • DeleteStateContainerValue (Ordinal: 267, Address: 0x75b00)
  • DeleteSynchronizationBarrier (Ordinal: 268, Address: 0x313acc)
  • DeleteTimerQueue (Ordinal: 269, Address: 0x93cd0)
  • DeleteTimerQueueEx (Ordinal: 270, Address: 0x93d00)
  • DeleteTimerQueueTimer (Ordinal: 271, Address: 0x821f0)
  • DeleteVolumeMountPointW (Ordinal: 272, Address: 0x144730)
  • DeriveCapabilitySidsFromName (Ordinal: 273, Address: 0x94ef0)
  • DestroyPrivateObjectSecurity (Ordinal: 274, Address: 0x87630)
  • DeviceIoControl (Ordinal: 275, Address: 0x441d0)
  • DisablePredefinedHandleTableInternal (Ordinal: 276, Address: 0x7f660)
  • DisableThreadLibraryCalls (Ordinal: 277, Address: 0x7e9a0)
  • DisassociateCurrentThreadFromCallback (Ordinal: 278, Address: 0x313be4)
  • DiscardVirtualMemory (Ordinal: 279, Address: 0xc7a90)
  • DisconnectNamedPipe (Ordinal: 280, Address: 0x83a90)
  • DnsHostnameToComputerNameExW (Ordinal: 281, Address: 0x144ef0)
  • DsBindWithSpnExW (Ordinal: 282, Address: 0xf0f30)
  • DsCrackNamesW (Ordinal: 283, Address: 0xf0fc0)
  • DsFreeDomainControllerInfoW (Ordinal: 284, Address: 0xf1050)
  • DsFreeNameResultW (Ordinal: 285, Address: 0xf10a0)
  • DsFreeNgcKey (Ordinal: 286, Address: 0xf10d0)
  • DsFreePasswordCredentials (Ordinal: 287, Address: 0xf1100)
  • DsGetDomainControllerInfoW (Ordinal: 288, Address: 0xf1130)
  • DsMakePasswordCredentialsW (Ordinal: 289, Address: 0xf11b0)
  • DsReadNgcKeyW (Ordinal: 290, Address: 0xf1220)
  • DsUnBindW (Ordinal: 291, Address: 0xf1290)
  • DsWriteNgcKeyW (Ordinal: 292, Address: 0xf12e0)
  • DuplicateHandle (Ordinal: 293, Address: 0x54bb0)
  • DuplicateStateContainerHandle (Ordinal: 294, Address: 0x4dbe0)
  • DuplicateToken (Ordinal: 295, Address: 0x78e10)
  • DuplicateTokenEx (Ordinal: 296, Address: 0x78e40)
  • EmptyWorkingSet (Ordinal: 297, Address: 0x1103c0)
  • EnableProcessOptionalXStateFeatures (Ordinal: 298, Address: 0xf7a80)
  • EncodePointer (Ordinal: 299, Address: 0x313da8)
  • EncodeRemotePointer (Ordinal: 300, Address: 0x313dd3)
  • EncodeSystemPointer (Ordinal: 301, Address: 0x313e04)
  • EnterCriticalPolicySectionInternal (Ordinal: 302, Address: 0xb20e0)
  • EnterCriticalSection (Ordinal: 303, Address: 0x313e59)
  • EnterSynchronizationBarrier (Ordinal: 304, Address: 0x13f1a0)
  • EnumCalendarInfoExEx (Ordinal: 305, Address: 0x71a80)
  • EnumCalendarInfoExW (Ordinal: 306, Address: 0xff810)
  • EnumCalendarInfoW (Ordinal: 307, Address: 0xff880)
  • EnumDateFormatsExEx (Ordinal: 308, Address: 0x70cd0)
  • EnumDateFormatsExW (Ordinal: 309, Address: 0xff8f0)
  • EnumDateFormatsW (Ordinal: 310, Address: 0xff950)
  • EnumDeviceDrivers (Ordinal: 311, Address: 0x7b320)
  • EnumDynamicTimeZoneInformation (Ordinal: 312, Address: 0x31e0)
  • EnumLanguageGroupLocalesW (Ordinal: 313, Address: 0xff9b0)
  • EnumPageFilesA (Ordinal: 314, Address: 0x1106e0)
  • EnumPageFilesW (Ordinal: 315, Address: 0x110730)
  • EnumProcessModules (Ordinal: 316, Address: 0x15110)
  • EnumProcessModulesEx (Ordinal: 317, Address: 0x110890)
  • EnumProcesses (Ordinal: 318, Address: 0x89290)
  • EnumResourceLanguagesExA (Ordinal: 319, Address: 0x13ba40)
  • EnumResourceLanguagesExW (Ordinal: 320, Address: 0xb3700)
  • EnumResourceNamesA (Ordinal: 321, Address: 0x13bb10)
  • EnumResourceNamesExA (Ordinal: 322, Address: 0x13bb40)
  • EnumResourceNamesExW (Ordinal: 323, Address: 0x29720)
  • EnumResourceNamesW (Ordinal: 324, Address: 0x13bbe0)
  • EnumResourceTypesExA (Ordinal: 325, Address: 0x13bc10)
  • EnumResourceTypesExW (Ordinal: 326, Address: 0x13bc40)
  • EnumSystemCodePagesW (Ordinal: 327, Address: 0xff9d0)
  • EnumSystemFirmwareTables (Ordinal: 328, Address: 0x145370)
  • EnumSystemGeoID (Ordinal: 329, Address: 0x69190)
  • EnumSystemGeoNames (Ordinal: 330, Address: 0x108e30)
  • EnumSystemLanguageGroupsW (Ordinal: 331, Address: 0xff9f0)
  • EnumSystemLocalesA (Ordinal: 332, Address: 0xb2de0)
  • EnumSystemLocalesEx (Ordinal: 333, Address: 0x952a0)
  • EnumSystemLocalesW (Ordinal: 334, Address: 0xffa10)
  • EnumTimeFormatsEx (Ordinal: 335, Address: 0x71520)
  • EnumTimeFormatsW (Ordinal: 336, Address: 0xffa40)
  • EnumUILanguagesW (Ordinal: 337, Address: 0x29130)
  • EnumerateExtensionNames (Ordinal: 338, Address: 0x11f990)
  • EnumerateStateAtomValues (Ordinal: 339, Address: 0x10be0)
  • EnumerateStateContainerItems (Ordinal: 340, Address: 0x11000)
  • EqualDomainSid (Ordinal: 341, Address: 0x280a0)
  • EqualPrefixSid (Ordinal: 342, Address: 0x94900)
  • EqualSid (Ordinal: 343, Address: 0x8970)
  • EscapeCommFunction (Ordinal: 344, Address: 0x13fbc0)
  • EventActivityIdControl (Ordinal: 345, Address: 0x3141c9)
  • EventEnabled (Ordinal: 346, Address: 0x3141f6)
  • EventProviderEnabled (Ordinal: 347, Address: 0x314221)
  • EventRegister (Ordinal: 348, Address: 0x31424d)
  • EventSetInformation (Ordinal: 349, Address: 0x314278)
  • EventUnregister (Ordinal: 350, Address: 0x3142a5)
  • EventWrite (Ordinal: 351, Address: 0x3142c9)
  • EventWriteEx (Ordinal: 352, Address: 0x3142ea)
  • EventWriteString (Ordinal: 353, Address: 0x314311)
  • EventWriteTransfer (Ordinal: 354, Address: 0x31433e)
  • ExitProcess (Ordinal: 355, Address: 0x314366)
  • ExitThread (Ordinal: 356, Address: 0x31438a)
  • ExpandEnvironmentStringsA (Ordinal: 357, Address: 0x72b00)
  • ExpandEnvironmentStringsW (Ordinal: 358, Address: 0x12b10)
  • ExpungeConsoleCommandHistoryA (Ordinal: 359, Address: 0x1329f0)
  • ExpungeConsoleCommandHistoryW (Ordinal: 360, Address: 0x132a80)
  • ExtensionProgIdExists (Ordinal: 361, Address: 0x11dd40)
  • FatalAppExitA (Ordinal: 362, Address: 0x143740)
  • FatalAppExitW (Ordinal: 363, Address: 0x1437d0)
  • FileTimeToLocalFileTime (Ordinal: 364, Address: 0x2e0d0)
  • FileTimeToSystemTime (Ordinal: 365, Address: 0x67d00)
  • FillConsoleOutputAttribute (Ordinal: 366, Address: 0x134450)
  • FillConsoleOutputCharacterA (Ordinal: 367, Address: 0x134480)
  • FillConsoleOutputCharacterW (Ordinal: 368, Address: 0x1344b0)
  • FindActCtxSectionGuid (Ordinal: 369, Address: 0x70a50)
  • FindActCtxSectionStringW (Ordinal: 370, Address: 0x8dba0)
  • FindClose (Ordinal: 371, Address: 0x2f3c0)
  • FindCloseChangeNotification (Ordinal: 372, Address: 0x959e0)
  • FindFirstChangeNotificationA (Ordinal: 373, Address: 0x145540)
  • FindFirstChangeNotificationW (Ordinal: 374, Address: 0x92e70)
  • FindFirstFileA (Ordinal: 375, Address: 0x84d10)
  • FindFirstFileExA (Ordinal: 376, Address: 0x1455a0)
  • FindFirstFileExW (Ordinal: 377, Address: 0x49980)
  • FindFirstFileNameW (Ordinal: 378, Address: 0x72f20)
  • FindFirstFileW (Ordinal: 379, Address: 0x4a350)
  • FindFirstFreeAce (Ordinal: 380, Address: 0x13b4a0)
  • FindFirstStreamW (Ordinal: 381, Address: 0x145740)
  • FindFirstVolumeW (Ordinal: 382, Address: 0x73b10)
  • FindNLSString (Ordinal: 383, Address: 0xfc360)
  • FindNLSStringEx (Ordinal: 384, Address: 0x667f0)
  • FindNextChangeNotification (Ordinal: 385, Address: 0x93480)
  • FindNextFileA (Ordinal: 386, Address: 0x53d10)
  • FindNextFileNameW (Ordinal: 387, Address: 0x72e10)
  • FindNextFileW (Ordinal: 388, Address: 0x53e60)
  • FindNextStreamW (Ordinal: 389, Address: 0x145b50)
  • FindNextVolumeW (Ordinal: 390, Address: 0x747d0)
  • FindPackagesByPackageFamily (Ordinal: 391, Address: 0x87200)
  • FindResourceExW (Ordinal: 392, Address: 0x2bdc0)
  • FindResourceW (Ordinal: 393, Address: 0x2bda0)
  • FindStringOrdinal (Ordinal: 394, Address: 0x4a3e0)
  • FindVolumeClose (Ordinal: 395, Address: 0x939a0)
  • FlsAlloc (Ordinal: 396, Address: 0x849e0)
  • FlsFree (Ordinal: 397, Address: 0x8d4b0)
  • FlsGetValue (Ordinal: 398, Address: 0x54120)
  • FlsSetValue (Ordinal: 399, Address: 0x53c00)
  • FlushConsoleInputBuffer (Ordinal: 400, Address: 0x95820)
  • FlushFileBuffers (Ordinal: 401, Address: 0x88600)
  • FlushInstructionCache (Ordinal: 402, Address: 0x6be80)
  • FlushProcessWriteBuffers (Ordinal: 403, Address: 0x31473d)
  • FlushViewOfFile (Ordinal: 404, Address: 0x92af0)
  • FoldStringW (Ordinal: 405, Address: 0x100bd0)
  • ForceSyncFgPolicyInternal (Ordinal: 406, Address: 0xf04c0)
  • FormatApplicationUserModelId (Ordinal: 407, Address: 0x90d50)
  • FormatApplicationUserModelIdA (Ordinal: 408, Address: 0x120b80)
  • FormatMessageA (Ordinal: 409, Address: 0x5290)
  • FormatMessageW (Ordinal: 410, Address: 0x40940)
  • FreeConsole (Ordinal: 411, Address: 0x133890)
  • FreeEnvironmentStringsA (Ordinal: 412, Address: 0x8fb50)
  • FreeEnvironmentStringsW (Ordinal: 413, Address: 0x80df0)
  • FreeGPOListInternalA (Ordinal: 414, Address: 0xf0510)
  • FreeGPOListInternalW (Ordinal: 415, Address: 0xf0560)
  • FreeLibrary (Ordinal: 416, Address: 0x2ffa0)
  • FreeLibraryAndExitThread (Ordinal: 417, Address: 0x89450)
  • FreeLibraryWhenCallbackReturns (Ordinal: 418, Address: 0x314897)
  • FreeResource (Ordinal: 419, Address: 0x94610)
  • FreeSid (Ordinal: 420, Address: 0x7c2e0)
  • FreeUserPhysicalPages (Ordinal: 421, Address: 0x13d480)
  • GenerateConsoleCtrlEvent (Ordinal: 422, Address: 0x134d00)
  • GenerateGPNotificationInternal (Ordinal: 423, Address: 0xf05b0)
  • GetACP (Ordinal: 424, Address: 0x86a30)
  • GetAcceptLanguagesA (Ordinal: 425, Address: 0xf8010)
  • GetAcceptLanguagesW (Ordinal: 426, Address: 0x81bb0)
  • GetAce (Ordinal: 427, Address: 0x79e20)
  • GetAclInformation (Ordinal: 428, Address: 0x812e0)
  • GetAdjustObjectAttributesForPrivateNamespaceRoutine (Ordinal: 429, Address: 0x95730)
  • GetAlternatePackageRoots (Ordinal: 430, Address: 0x111a40)
  • GetAppContainerAce (Ordinal: 431, Address: 0x79d10)
  • GetAppContainerNamedObjectPath (Ordinal: 432, Address: 0x29660)
  • GetAppDataFolder (Ordinal: 433, Address: 0x83f10)
  • GetAppModelVersion (Ordinal: 434, Address: 0x121020)
  • GetApplicationRecoveryCallback (Ordinal: 435, Address: 0xb0d10)
  • GetApplicationRestartSettings (Ordinal: 436, Address: 0xf15c0)
  • GetApplicationUserModelId (Ordinal: 437, Address: 0x8be10)
  • GetApplicationUserModelIdFromToken (Ordinal: 438, Address: 0x246c0)
  • GetAppliedGPOListInternalA (Ordinal: 439, Address: 0x954c0)
  • GetAppliedGPOListInternalW (Ordinal: 440, Address: 0x95450)
  • GetCPFileNameFromRegistry (Ordinal: 441, Address: 0x93520)
  • GetCPHashNode (Ordinal: 442, Address: 0x19ec0)
  • GetCPInfo (Ordinal: 443, Address: 0x68ce0)
  • GetCPInfoExW (Ordinal: 444, Address: 0x67e30)
  • GetCachedSigningLevel (Ordinal: 445, Address: 0x6c60)
  • GetCalendar (Ordinal: 446, Address: 0x72180)
  • GetCalendarInfoEx (Ordinal: 447, Address: 0x3a340)
  • GetCalendarInfoW (Ordinal: 448, Address: 0x94780)
  • GetCommConfig (Ordinal: 449, Address: 0x13fd20)
  • GetCommMask (Ordinal: 450, Address: 0x13ff80)
  • GetCommModemStatus (Ordinal: 451, Address: 0x140070)
  • GetCommPorts (Ordinal: 452, Address: 0x140160)
  • GetCommProperties (Ordinal: 453, Address: 0x1403f0)
  • GetCommState (Ordinal: 454, Address: 0x140500)
  • GetCommTimeouts (Ordinal: 455, Address: 0x1408b0)
  • GetCommandLineA (Ordinal: 456, Address: 0x8e2e0)
  • GetCommandLineW (Ordinal: 457, Address: 0x8d460)
  • GetCompressedFileSizeA (Ordinal: 458, Address: 0x144630)
  • GetCompressedFileSizeW (Ordinal: 459, Address: 0x8f280)
  • GetComputerNameExA (Ordinal: 460, Address: 0xb2f30)
  • GetComputerNameExW (Ordinal: 461, Address: 0x95ed0)
  • GetConsoleAliasA (Ordinal: 462, Address: 0x132a90)
  • GetConsoleAliasExesA (Ordinal: 463, Address: 0x132ad0)
  • GetConsoleAliasExesLengthA (Ordinal: 464, Address: 0x132b70)
  • GetConsoleAliasExesLengthW (Ordinal: 465, Address: 0x132be0)
  • GetConsoleAliasExesW (Ordinal: 466, Address: 0x132bf0)
  • GetConsoleAliasW (Ordinal: 467, Address: 0x132d10)
  • GetConsoleAliasesA (Ordinal: 468, Address: 0x132d60)
  • GetConsoleAliasesLengthA (Ordinal: 469, Address: 0x132e20)
  • GetConsoleAliasesLengthW (Ordinal: 470, Address: 0x132ed0)
  • GetConsoleAliasesW (Ordinal: 471, Address: 0x132ee0)
  • GetConsoleCP (Ordinal: 472, Address: 0x932b0)
  • GetConsoleCommandHistoryA (Ordinal: 473, Address: 0x132ef0)
  • GetConsoleCommandHistoryLengthA (Ordinal: 474, Address: 0x132fc0)
  • GetConsoleCommandHistoryLengthW (Ordinal: 475, Address: 0x133070)
  • GetConsoleCommandHistoryW (Ordinal: 476, Address: 0x133080)
  • GetConsoleCursorInfo (Ordinal: 477, Address: 0xb46c0)
  • GetConsoleDisplayMode (Ordinal: 478, Address: 0x134d90)
  • GetConsoleFontSize (Ordinal: 479, Address: 0x134e00)
  • GetConsoleHistoryInfo (Ordinal: 480, Address: 0x134e60)
  • GetConsoleInputExeNameA (Ordinal: 481, Address: 0x133090)
  • GetConsoleInputExeNameW (Ordinal: 482, Address: 0x133180)
  • GetConsoleMode (Ordinal: 483, Address: 0x6bc20)
  • GetConsoleOriginalTitleA (Ordinal: 484, Address: 0x133230)
  • GetConsoleOriginalTitleW (Ordinal: 485, Address: 0x133250)
  • GetConsoleOutputCP (Ordinal: 486, Address: 0x66660)
  • GetConsoleProcessList (Ordinal: 487, Address: 0x134ee0)
  • GetConsoleScreenBufferInfo (Ordinal: 488, Address: 0x1c3a0)
  • GetConsoleScreenBufferInfoEx (Ordinal: 489, Address: 0x1c400)
  • GetConsoleSelectionInfo (Ordinal: 490, Address: 0x134f80)
  • GetConsoleTitleA (Ordinal: 491, Address: 0x133270)
  • GetConsoleTitleW (Ordinal: 492, Address: 0x1c500)
  • GetConsoleWindow (Ordinal: 493, Address: 0x93f30)
  • GetCurrencyFormatEx (Ordinal: 494, Address: 0x105460)
  • GetCurrencyFormatW (Ordinal: 495, Address: 0x1054f0)
  • GetCurrentActCtx (Ordinal: 496, Address: 0x88ad0)
  • GetCurrentApplicationUserModelId (Ordinal: 497, Address: 0x8bdf0)
  • GetCurrentConsoleFont (Ordinal: 498, Address: 0x134ff0)
  • GetCurrentConsoleFontEx (Ordinal: 499, Address: 0x950c0)
  • GetCurrentDirectoryA (Ordinal: 500, Address: 0x90e00)
  • GetCurrentDirectoryW (Ordinal: 501, Address: 0x8cf00)
  • GetCurrentPackageApplicationContext (Ordinal: 502, Address: 0x942c0)
  • GetCurrentPackageApplicationResourcesContext (Ordinal: 503, Address: 0x8fe70)
  • GetCurrentPackageContext (Ordinal: 504, Address: 0x6180)
  • GetCurrentPackageFamilyName (Ordinal: 505, Address: 0xb8c0)
  • GetCurrentPackageFullName (Ordinal: 506, Address: 0xd8b0)
  • GetCurrentPackageGlobalizationContext (Ordinal: 507, Address: 0x920f0)
  • GetCurrentPackageId (Ordinal: 508, Address: 0x87a20)
  • GetCurrentPackageInfo (Ordinal: 509, Address: 0xe340)
  • GetCurrentPackageInfo2 (Ordinal: 510, Address: 0xd870)
  • GetCurrentPackageInfo3 (Ordinal: 511, Address: 0xe380)
  • GetCurrentPackagePath (Ordinal: 512, Address: 0x958a0)
  • GetCurrentPackagePath2 (Ordinal: 513, Address: 0xd4f0)
  • GetCurrentPackageResourcesContext (Ordinal: 514, Address: 0x8cd20)
  • GetCurrentPackageSecurityContext (Ordinal: 515, Address: 0x121600)
  • GetCurrentProcess (Ordinal: 516, Address: 0x69300)
  • GetCurrentProcessId (Ordinal: 517, Address: 0x69490)
  • GetCurrentProcessorNumber (Ordinal: 518, Address: 0x315167)
  • GetCurrentProcessorNumberEx (Ordinal: 519, Address: 0x3151a6)
  • GetCurrentTargetPlatformContext (Ordinal: 520, Address: 0x121680)
  • GetCurrentThread (Ordinal: 521, Address: 0xbecf0)
  • GetCurrentThreadId (Ordinal: 522, Address: 0x49710)
  • GetCurrentThreadStackLimits (Ordinal: 523, Address: 0x142360)
  • GetDateFormatA (Ordinal: 524, Address: 0xb0240)
  • GetDateFormatEx (Ordinal: 525, Address: 0x7cf00)
  • GetDateFormatW (Ordinal: 526, Address: 0x7cf90)
  • GetDeviceDriverBaseNameA (Ordinal: 527, Address: 0x7a090)
  • GetDeviceDriverBaseNameW (Ordinal: 528, Address: 0x79fe0)
  • GetDeviceDriverFileNameA (Ordinal: 529, Address: 0x1104e0)
  • GetDeviceDriverFileNameW (Ordinal: 530, Address: 0x110560)
  • GetDiskFreeSpaceA (Ordinal: 531, Address: 0x145ef0)
  • GetDiskFreeSpaceExA (Ordinal: 532, Address: 0x95af0)
  • GetDiskFreeSpaceExW (Ordinal: 533, Address: 0x95b70)
  • GetDiskFreeSpaceW (Ordinal: 534, Address: 0x74e90)
  • GetDiskSpaceInformationA (Ordinal: 535, Address: 0x145f70)
  • GetDiskSpaceInformationW (Ordinal: 536, Address: 0x145fe0)
  • GetDiskSpaceInformationWCOS (Ordinal: 537, Address: 0xb0b80)
  • GetDriveTypeA (Ordinal: 538, Address: 0x8e700)
  • GetDriveTypeW (Ordinal: 539, Address: 0x41fd0)
  • GetDurationFormatEx (Ordinal: 540, Address: 0x105d30)
  • GetDynamicTimeZoneInformation (Ordinal: 541, Address: 0x2b8a0)
  • GetDynamicTimeZoneInformationEffectiveYears (Ordinal: 542, Address: 0x801a0)
  • GetEffectivePackageStatusForUser (Ordinal: 543, Address: 0x26780)
  • GetEffectivePackageStatusForUserSid (Ordinal: 544, Address: 0x912b0)
  • GetEightBitStringToUnicodeSizeRoutine (Ordinal: 545, Address: 0xbebd0)
  • GetEightBitStringToUnicodeStringRoutine (Ordinal: 546, Address: 0x93f10)
  • GetEnabledXStateFeatures (Ordinal: 547, Address: 0x8d420)
  • GetEnvironmentStrings (Ordinal: 548, Address: 0x78430)
  • GetEnvironmentStringsA (Ordinal: 549, Address: 0x78430)
  • GetEnvironmentStringsW (Ordinal: 550, Address: 0x69320)
  • GetEnvironmentVariableA (Ordinal: 551, Address: 0x7a190)
  • GetEnvironmentVariableW (Ordinal: 552, Address: 0x43ec0)
  • GetEraNameCountedString (Ordinal: 553, Address: 0xfcd10)
  • GetErrorMode (Ordinal: 554, Address: 0x2eff0)
  • GetExitCodeProcess (Ordinal: 555, Address: 0x88b90)
  • GetExitCodeThread (Ordinal: 556, Address: 0x8c330)
  • GetExtensionApplicationUserModelId (Ordinal: 557, Address: 0x11fbe0)
  • GetExtensionProgIds (Ordinal: 558, Address: 0x11df30)
  • GetExtensionProperty (Ordinal: 559, Address: 0x1201f0)
  • GetExtensionProperty2 (Ordinal: 560, Address: 0x1204b0)
  • GetFallbackDisplayName (Ordinal: 561, Address: 0xfce40)
  • GetFileAttributesA (Ordinal: 562, Address: 0x4d9f0)
  • GetFileAttributesExA (Ordinal: 563, Address: 0x144680)
  • GetFileAttributesExW (Ordinal: 564, Address: 0x45280)
  • GetFileAttributesW (Ordinal: 565, Address: 0x44e90)
  • GetFileInformationByHandle (Ordinal: 566, Address: 0xc660)
  • GetFileInformationByHandleEx (Ordinal: 567, Address: 0x70290)
  • GetFileMUIInfo (Ordinal: 568, Address: 0x106280)
  • GetFileMUIPath (Ordinal: 569, Address: 0x8f1e0)
  • GetFileSecurityW (Ordinal: 570, Address: 0x79690)
  • GetFileSize (Ordinal: 571, Address: 0x736b0)
  • GetFileSizeEx (Ordinal: 572, Address: 0x54200)
  • GetFileTime (Ordinal: 573, Address: 0x85560)
  • GetFileType (Ordinal: 574, Address: 0x6a4f0)
  • GetFileVersionInfoA (Ordinal: 575, Address: 0x92640)
  • GetFileVersionInfoByHandle (Ordinal: 576, Address: 0xef8a0)
  • GetFileVersionInfoExA (Ordinal: 577, Address: 0xb0ec0)
  • GetFileVersionInfoExW (Ordinal: 578, Address: 0x2e6d0)
  • GetFileVersionInfoSizeA (Ordinal: 579, Address: 0x92df0)
  • GetFileVersionInfoSizeExA (Ordinal: 580, Address: 0xb0fd0)
  • GetFileVersionInfoSizeExW (Ordinal: 581, Address: 0x2e920)
  • GetFileVersionInfoSizeW (Ordinal: 582, Address: 0x2d1e0)
  • GetFileVersionInfoW (Ordinal: 583, Address: 0x2d1b0)
  • GetFinalPathNameByHandleA (Ordinal: 584, Address: 0x13efa0)
  • GetFinalPathNameByHandleW (Ordinal: 585, Address: 0x73cc0)
  • GetFullPathNameA (Ordinal: 586, Address: 0x7ca20)
  • GetFullPathNameW (Ordinal: 587, Address: 0x6bbe0)
  • GetGPOListInternalA (Ordinal: 588, Address: 0xf0610)
  • GetGPOListInternalW (Ordinal: 589, Address: 0xf0690)
  • GetGamingDeviceModelInformation (Ordinal: 590, Address: 0xf7f00)
  • GetGeoInfoEx (Ordinal: 591, Address: 0x108f50)
  • GetGeoInfoW (Ordinal: 592, Address: 0x2c780)
  • GetHandleInformation (Ordinal: 593, Address: 0x87e70)
  • GetHivePath (Ordinal: 594, Address: 0x3c20)
  • GetIntegratedDisplaySize (Ordinal: 595, Address: 0x957b0)
  • GetIsEdpEnabled (Ordinal: 596, Address: 0x8ce30)
  • GetIsWdagEnabled (Ordinal: 597, Address: 0x925e0)
  • GetKernelObjectSecurity (Ordinal: 598, Address: 0x43720)
  • GetLargePageMinimum (Ordinal: 599, Address: 0x13d4c0)
  • GetLargestConsoleWindowSize (Ordinal: 600, Address: 0xb4720)
  • GetLastError (Ordinal: 601, Address: 0x3f2b0)
  • GetLengthSid (Ordinal: 602, Address: 0x70790)
  • GetLocalTime (Ordinal: 603, Address: 0x2dec0)
  • GetLocaleInfoA (Ordinal: 604, Address: 0x3e110)
  • GetLocaleInfoEx (Ordinal: 605, Address: 0x3a110)
  • GetLocaleInfoHelper (Ordinal: 606, Address: 0x3ad30)
  • GetLocaleInfoW (Ordinal: 607, Address: 0x3ac00)
  • GetLogicalDriveStringsW (Ordinal: 608, Address: 0x820a0)
  • GetLogicalDrives (Ordinal: 609, Address: 0x821a0)
  • GetLogicalProcessorInformation (Ordinal: 610, Address: 0x926e0)
  • GetLogicalProcessorInformationEx (Ordinal: 611, Address: 0x8d8e0)
  • GetLongPathNameA (Ordinal: 612, Address: 0x10a730)
  • GetLongPathNameW (Ordinal: 613, Address: 0x2d2a0)
  • GetMappedFileNameA (Ordinal: 614, Address: 0x110be0)
  • GetMappedFileNameW (Ordinal: 615, Address: 0x110ca0)
  • GetMemoryErrorHandlingCapabilities (Ordinal: 616, Address: 0x13d4e0)
  • GetModuleBaseNameA (Ordinal: 617, Address: 0x157e0)
  • GetModuleBaseNameW (Ordinal: 618, Address: 0x15040)
  • GetModuleFileNameA (Ordinal: 619, Address: 0x65ee0)
  • GetModuleFileNameExA (Ordinal: 620, Address: 0xc7820)
  • GetModuleFileNameExW (Ordinal: 621, Address: 0x15430)
  • GetModuleFileNameW (Ordinal: 622, Address: 0x66020)
  • GetModuleHandleA (Ordinal: 623, Address: 0x4df40)
  • GetModuleHandleExA (Ordinal: 624, Address: 0x4c9f0)
  • GetModuleHandleExW (Ordinal: 625, Address: 0x6a3a0)
  • GetModuleHandleW (Ordinal: 626, Address: 0x4dfa0)
  • GetModuleInformation (Ordinal: 627, Address: 0x15370)
  • GetNLSVersion (Ordinal: 628, Address: 0x88fc0)
  • GetNLSVersionEx (Ordinal: 629, Address: 0x89020)
  • GetNamedLocaleHashNode (Ordinal: 630, Address: 0x39f10)
  • GetNamedPipeAttribute (Ordinal: 631, Address: 0x7fca0)
  • GetNamedPipeClientComputerNameW (Ordinal: 632, Address: 0x7fc40)
  • GetNamedPipeHandleStateW (Ordinal: 633, Address: 0x13e980)
  • GetNamedPipeInfo (Ordinal: 634, Address: 0x13eb00)
  • GetNativeSystemInfo (Ordinal: 635, Address: 0xa340)
  • GetNextFgPolicyRefreshInfoInternal (Ordinal: 636, Address: 0xf0710)
  • GetNumaHighestNodeNumber (Ordinal: 637, Address: 0x900c0)
  • GetNumaNodeProcessorMask2 (Ordinal: 638, Address: 0x146970)
  • GetNumaNodeProcessorMaskEx (Ordinal: 639, Address: 0x146b30)
  • GetNumaProximityNodeEx (Ordinal: 640, Address: 0x146bc0)
  • GetNumberFormatEx (Ordinal: 641, Address: 0x70c40)
  • GetNumberFormatW (Ordinal: 642, Address: 0x44f0)
  • GetNumberOfConsoleInputEvents (Ordinal: 643, Address: 0x95560)
  • GetNumberOfConsoleMouseButtons (Ordinal: 644, Address: 0x135060)
  • GetOEMCP (Ordinal: 645, Address: 0x94490)
  • GetOsManufacturingMode (Ordinal: 646, Address: 0xb4990)
  • GetOsSafeBootMode (Ordinal: 647, Address: 0x905d0)
  • GetOverlappedResult (Ordinal: 648, Address: 0x44710)
  • GetOverlappedResultEx (Ordinal: 649, Address: 0x7e620)
  • GetPackageApplicationContext (Ordinal: 650, Address: 0x121710)
  • GetPackageApplicationIds (Ordinal: 651, Address: 0x118f70)
  • GetPackageApplicationProperty (Ordinal: 652, Address: 0x94dd0)
  • GetPackageApplicationPropertyString (Ordinal: 653, Address: 0x94d60)
  • GetPackageApplicationResourcesContext (Ordinal: 654, Address: 0x121730)
  • GetPackageContext (Ordinal: 655, Address: 0x121780)
  • GetPackageFamilyName (Ordinal: 656, Address: 0x20e50)
  • GetPackageFamilyNameFromFilePath (Ordinal: 657, Address: 0x122cb0)
  • GetPackageFamilyNameFromProgId (Ordinal: 658, Address: 0x11e6f0)
  • GetPackageFamilyNameFromToken (Ordinal: 659, Address: 0x247d0)
  • GetPackageFullName (Ordinal: 660, Address: 0x248b0)
  • GetPackageFullNameAppUserModelIdAndTypeForFile (Ordinal: 661, Address: 0x12a540)
  • GetPackageFullNameFromToken (Ordinal: 662, Address: 0x272e0)
  • GetPackageGlobalizationContext (Ordinal: 663, Address: 0x1217a0)
  • GetPackageGlobalizationProperty (Ordinal: 664, Address: 0x937d0)
  • GetPackageId (Ordinal: 665, Address: 0xb2470)
  • GetPackageInfo (Ordinal: 666, Address: 0xd980)
  • GetPackageInfo2 (Ordinal: 667, Address: 0x1191d0)
  • GetPackageInfo3 (Ordinal: 668, Address: 0xdaf0)
  • GetPackageOSMaxVersionTested (Ordinal: 669, Address: 0x1217f0)
  • GetPackagePath (Ordinal: 670, Address: 0x121f90)
  • GetPackagePathByFullName (Ordinal: 671, Address: 0x95750)
  • GetPackagePathByFullName2 (Ordinal: 672, Address: 0x8ae00)
  • GetPackagePathOnVolume (Ordinal: 673, Address: 0x122d00)
  • GetPackageProperty (Ordinal: 674, Address: 0x60c0)
  • GetPackagePropertyString (Ordinal: 675, Address: 0x6050)
  • GetPackageResourcesContext (Ordinal: 676, Address: 0x121830)
  • GetPackageResourcesProperty (Ordinal: 677, Address: 0x92040)
  • GetPackageSecurityContext (Ordinal: 678, Address: 0x121880)
  • GetPackageSecurityProperty (Ordinal: 679, Address: 0x1218b0)
  • GetPackageStatus (Ordinal: 680, Address: 0x26800)
  • GetPackageStatusForUser (Ordinal: 681, Address: 0x256d0)
  • GetPackageStatusForUserSid (Ordinal: 682, Address: 0x26730)
  • GetPackageTargetPlatformProperty (Ordinal: 683, Address: 0x81a50)
  • GetPackageVolumeSisPath (Ordinal: 684, Address: 0xc860)
  • GetPackagedDataForFile (Ordinal: 685, Address: 0x12a580)
  • GetPackagesByPackageFamily (Ordinal: 686, Address: 0x871c0)
  • GetPerformanceInfo (Ordinal: 687, Address: 0x8c100)
  • GetPersistedFileLocationW (Ordinal: 688, Address: 0x95610)
  • GetPersistedRegistryLocationW (Ordinal: 689, Address: 0x1ef10)
  • GetPersistedRegistryValueW (Ordinal: 690, Address: 0x822b0)
  • GetPhysicallyInstalledSystemMemory (Ordinal: 691, Address: 0x65570)
  • GetPreviousFgPolicyRefreshInfoInternal (Ordinal: 692, Address: 0xf0760)
  • GetPriorityClass (Ordinal: 693, Address: 0x93860)
  • GetPrivateObjectSecurity (Ordinal: 694, Address: 0x13b4e0)
  • GetProcAddress (Ordinal: 695, Address: 0x2b010)
  • GetProcAddressForCaller (Ordinal: 696, Address: 0x2ae00)
  • GetProcessDefaultCpuSetMasks (Ordinal: 697, Address: 0x143860)
  • GetProcessDefaultCpuSets (Ordinal: 698, Address: 0x143940)
  • GetProcessGroupAffinity (Ordinal: 699, Address: 0x143a20)
  • GetProcessHandleCount (Ordinal: 700, Address: 0xc8070)
  • GetProcessHeap (Ordinal: 701, Address: 0x65a20)
  • GetProcessHeaps (Ordinal: 702, Address: 0x146c20)
  • GetProcessId (Ordinal: 703, Address: 0x7cc60)
  • GetProcessIdOfThread (Ordinal: 704, Address: 0x91110)
  • GetProcessImageFileNameA (Ordinal: 705, Address: 0xc78e0)
  • GetProcessImageFileNameW (Ordinal: 706, Address: 0x850d0)
  • GetProcessInformation (Ordinal: 707, Address: 0x86ae0)
  • GetProcessMemoryInfo (Ordinal: 708, Address: 0x6b6e0)
  • GetProcessMitigationPolicy (Ordinal: 709, Address: 0x6a6f0)
  • GetProcessPreferredUILanguages (Ordinal: 710, Address: 0xb4240)
  • GetProcessPriorityBoost (Ordinal: 711, Address: 0x143a90)
  • GetProcessShutdownParameters (Ordinal: 712, Address: 0x143af0)
  • GetProcessTimes (Ordinal: 713, Address: 0x75f20)
  • GetProcessVersion (Ordinal: 714, Address: 0xb0f60)
  • GetProcessWorkingSetSize (Ordinal: 715, Address: 0x13d560)
  • GetProcessWorkingSetSizeEx (Ordinal: 716, Address: 0x95660)
  • GetProcessorSystemCycleTime (Ordinal: 717, Address: 0x93940)
  • GetProductInfo (Ordinal: 718, Address: 0x93350)
  • GetProtocolAumid (Ordinal: 719, Address: 0x122e50)
  • GetProtocolProperty (Ordinal: 720, Address: 0x122e80)
  • GetPtrCalData (Ordinal: 721, Address: 0xfcf40)
  • GetPtrCalDataArray (Ordinal: 722, Address: 0xfcf80)
  • GetPublisherCacheFolder (Ordinal: 723, Address: 0x111a70)
  • GetPublisherRootFolder (Ordinal: 724, Address: 0x8dc10)
  • GetQueuedCompletionStatus (Ordinal: 725, Address: 0x67c30)
  • GetQueuedCompletionStatusEx (Ordinal: 726, Address: 0x143120)
  • GetRegistryExtensionFlags (Ordinal: 727, Address: 0x10dfd0)
  • GetRegistryValueWithFallbackW (Ordinal: 728, Address: 0x91330)
  • GetResolvedPackageFullNameForPackageDependency (Ordinal: 729, Address: 0x119210)
  • GetRoamingLastObservedChangeTime (Ordinal: 730, Address: 0x111b50)
  • GetSecureSystemAppDataFolder (Ordinal: 731, Address: 0x83cf0)
  • GetSecurityDescriptorControl (Ordinal: 732, Address: 0x56600)
  • GetSecurityDescriptorDacl (Ordinal: 733, Address: 0x77460)
  • GetSecurityDescriptorGroup (Ordinal: 734, Address: 0x89410)
  • GetSecurityDescriptorLength (Ordinal: 735, Address: 0x88310)
  • GetSecurityDescriptorOwner (Ordinal: 736, Address: 0x885c0)
  • GetSecurityDescriptorRMControl (Ordinal: 737, Address: 0x940a0)
  • GetSecurityDescriptorSacl (Ordinal: 738, Address: 0x80e90)
  • GetSerializedAtomBytes (Ordinal: 739, Address: 0x11670)
  • GetSharedLocalFolder (Ordinal: 740, Address: 0x7db10)
  • GetShortPathNameW (Ordinal: 741, Address: 0x2eb00)
  • GetSidIdentifierAuthority (Ordinal: 742, Address: 0x82030)
  • GetSidLengthRequired (Ordinal: 743, Address: 0x82940)
  • GetSidSubAuthority (Ordinal: 744, Address: 0xacc0)
  • GetSidSubAuthorityCount (Ordinal: 745, Address: 0x7b710)
  • GetStagedPackageOrigin (Ordinal: 746, Address: 0x1fa80)
  • GetStagedPackagePathByFullName (Ordinal: 747, Address: 0xd100)
  • GetStagedPackagePathByFullName2 (Ordinal: 748, Address: 0x1ef60)
  • GetStartupInfoW (Ordinal: 749, Address: 0x7c940)
  • GetStateContainerDepth (Ordinal: 750, Address: 0x111c00)
  • GetStateFolder (Ordinal: 751, Address: 0x1ffa0)
  • GetStateRootFolder (Ordinal: 752, Address: 0x89610)
  • GetStateRootFolderBase (Ordinal: 753, Address: 0x8d060)
  • GetStateSettingsFolder (Ordinal: 754, Address: 0x111c90)
  • GetStateVersion (Ordinal: 755, Address: 0x111d60)
  • GetStdHandle (Ordinal: 756, Address: 0x7abf0)
  • GetStringScripts (Ordinal: 757, Address: 0x76ae0)
  • GetStringTableEntry (Ordinal: 758, Address: 0x2ba70)
  • GetStringTypeA (Ordinal: 759, Address: 0xfbf80)
  • GetStringTypeExW (Ordinal: 760, Address: 0x36a60)
  • GetStringTypeW (Ordinal: 761, Address: 0x67230)
  • GetSystemAppDataFolder (Ordinal: 762, Address: 0x84030)
  • GetSystemAppDataKey (Ordinal: 763, Address: 0xee30)
  • GetSystemCpuSetInformation (Ordinal: 764, Address: 0x143b80)
  • GetSystemDefaultLCID (Ordinal: 765, Address: 0x7abc0)
  • GetSystemDefaultLangID (Ordinal: 766, Address: 0x94620)
  • GetSystemDefaultLocaleName (Ordinal: 767, Address: 0x8f600)
  • GetSystemDefaultUILanguage (Ordinal: 768, Address: 0x8f190)
  • GetSystemDirectoryA (Ordinal: 769, Address: 0x8d6e0)
  • GetSystemDirectoryW (Ordinal: 770, Address: 0x7a130)
  • GetSystemFileCacheSize (Ordinal: 771, Address: 0x13d580)
  • GetSystemFirmwareTable (Ordinal: 772, Address: 0x660f0)
  • GetSystemInfo (Ordinal: 773, Address: 0xa3d0)
  • GetSystemLeapSecondInformation (Ordinal: 774, Address: 0x141950)
  • GetSystemMetadataPath (Ordinal: 775, Address: 0x122ef0)
  • GetSystemMetadataPathForPackage (Ordinal: 776, Address: 0x92030)
  • GetSystemMetadataPathForPackageFamily (Ordinal: 777, Address: 0x122f00)
  • GetSystemPreferredUILanguages (Ordinal: 778, Address: 0x81b60)
  • GetSystemStateRootFolder (Ordinal: 779, Address: 0x111e40)
  • GetSystemTime (Ordinal: 780, Address: 0x73560)
  • GetSystemTimeAdjustment (Ordinal: 781, Address: 0x93d90)
  • GetSystemTimeAdjustmentPrecise (Ordinal: 782, Address: 0x1419c0)
  • GetSystemTimeAsFileTime (Ordinal: 783, Address: 0x69d90)
  • GetSystemTimePreciseAsFileTime (Ordinal: 784, Address: 0x70870)
  • GetSystemTimes (Ordinal: 785, Address: 0x7d5d0)
  • GetSystemWindowsDirectoryA (Ordinal: 786, Address: 0xb0c80)
  • GetSystemWindowsDirectoryW (Ordinal: 787, Address: 0x2ab20)
  • GetSystemWow64Directory2A (Ordinal: 788, Address: 0x1461a0)
  • GetSystemWow64Directory2W (Ordinal: 789, Address: 0x2aa00)
  • GetSystemWow64DirectoryA (Ordinal: 790, Address: 0x146320)
  • GetSystemWow64DirectoryW (Ordinal: 791, Address: 0x2a9c0)
  • GetTargetPlatformContext (Ordinal: 792, Address: 0x89900)
  • GetTempFileNameA (Ordinal: 793, Address: 0x88bf0)
  • GetTempFileNameW (Ordinal: 794, Address: 0x88d40)
  • GetTempPath2A (Ordinal: 795, Address: 0xb1110)
  • GetTempPath2W (Ordinal: 796, Address: 0x7320)
  • GetTempPathA (Ordinal: 797, Address: 0xb22d0)
  • GetTempPathW (Ordinal: 798, Address: 0x6f40)
  • GetThreadContext (Ordinal: 799, Address: 0x93c70)
  • GetThreadDescription (Ordinal: 800, Address: 0x142390)
  • GetThreadEnabledXStateFeatures (Ordinal: 801, Address: 0xf7b00)
  • GetThreadErrorMode (Ordinal: 802, Address: 0x1432c0)
  • GetThreadGroupAffinity (Ordinal: 803, Address: 0x1424e0)
  • GetThreadIOPendingFlag (Ordinal: 804, Address: 0xc7fb0)
  • GetThreadId (Ordinal: 805, Address: 0x93ed0)
  • GetThreadIdealProcessorEx (Ordinal: 806, Address: 0x142530)
  • GetThreadInformation (Ordinal: 807, Address: 0x722e0)
  • GetThreadLocale (Ordinal: 808, Address: 0x76ac0)
  • GetThreadPreferredUILanguages (Ordinal: 809, Address: 0x80e20)
  • GetThreadPriority (Ordinal: 810, Address: 0x76a60)
  • GetThreadPriorityBoost (Ordinal: 811, Address: 0xc8010)
  • GetThreadSelectedCpuSetMasks (Ordinal: 812, Address: 0x142590)
  • GetThreadSelectedCpuSets (Ordinal: 813, Address: 0x142670)
  • GetThreadTimes (Ordinal: 814, Address: 0x73740)
  • GetThreadUILanguage (Ordinal: 815, Address: 0x663f0)
  • GetTickCount (Ordinal: 816, Address: 0x56e40)
  • GetTickCount64 (Ordinal: 817, Address: 0x69460)
  • GetTimeFormatA (Ordinal: 818, Address: 0x105e80)
  • GetTimeFormatEx (Ordinal: 819, Address: 0x8d1f0)
  • GetTimeFormatW (Ordinal: 820, Address: 0x8d1a0)
  • GetTimeZoneInformation (Ordinal: 821, Address: 0x2c340)
  • GetTimeZoneInformationForYear (Ordinal: 822, Address: 0x29090)
  • GetTokenInformation (Ordinal: 823, Address: 0x43f50)
  • GetTraceEnableFlags (Ordinal: 824, Address: 0x316cc9)
  • GetTraceEnableLevel (Ordinal: 825, Address: 0x316cfa)
  • GetTraceLoggerHandle (Ordinal: 826, Address: 0x316d2c)
  • GetUILanguageInfo (Ordinal: 827, Address: 0x106820)
  • GetUnicodeStringToEightBitSizeRoutine (Ordinal: 828, Address: 0x13df40)
  • GetUnicodeStringToEightBitStringRoutine (Ordinal: 829, Address: 0x91f10)
  • GetUserDefaultGeoName (Ordinal: 830, Address: 0x109080)
  • GetUserDefaultLCID (Ordinal: 831, Address: 0x3d3f0)
  • GetUserDefaultLangID (Ordinal: 832, Address: 0x6de0)
  • GetUserDefaultLocaleName (Ordinal: 833, Address: 0x22190)
  • GetUserDefaultUILanguage (Ordinal: 834, Address: 0x2d740)
  • GetUserGeoID (Ordinal: 835, Address: 0x87660)
  • GetUserInfo (Ordinal: 836, Address: 0xfd1a0)
  • GetUserInfoWord (Ordinal: 837, Address: 0xfd1d0)
  • GetUserOverrideString (Ordinal: 838, Address: 0x3dbe0)
  • GetUserOverrideWord (Ordinal: 839, Address: 0x3e2c0)
  • GetUserPreferredUILanguages (Ordinal: 840, Address: 0x8cbd0)
  • GetVersion (Ordinal: 841, Address: 0x90880)
  • GetVersionExA (Ordinal: 842, Address: 0x77260)
  • GetVersionExW (Ordinal: 843, Address: 0x77370)
  • GetVolumeInformationA (Ordinal: 844, Address: 0x146360)
  • GetVolumeInformationByHandleW (Ordinal: 845, Address: 0xcc70)
  • GetVolumeInformationW (Ordinal: 846, Address: 0xca80)
  • GetVolumeNameForVolumeMountPointW (Ordinal: 847, Address: 0x81e50)
  • GetVolumePathNameW (Ordinal: 848, Address: 0x8b6c0)
  • GetVolumePathNamesForVolumeNameW (Ordinal: 849, Address: 0x74390)
  • GetWindowsAccountDomainSid (Ordinal: 850, Address: 0x27fe0)
  • GetWindowsDirectoryA (Ordinal: 851, Address: 0xb0c30)
  • GetWindowsDirectoryW (Ordinal: 852, Address: 0x2aad0)
  • GetWriteWatch (Ordinal: 853, Address: 0x78fa0)
  • GetWsChanges (Ordinal: 854, Address: 0x110b20)
  • GetWsChangesEx (Ordinal: 855, Address: 0x110b50)
  • GetXStateFeaturesMask (Ordinal: 856, Address: 0xf7b30)
  • GlobalAlloc (Ordinal: 857, Address: 0x69b60)
  • GlobalFree (Ordinal: 858, Address: 0x699f0)
  • GlobalMemoryStatusEx (Ordinal: 859, Address: 0x65a40)
  • GuardCheckLongJumpTarget (Ordinal: 860, Address: 0x146fe0)
  • HasPolicyForegroundProcessingCompletedInternal (Ordinal: 861, Address: 0xf07b0)
  • HashData (Ordinal: 862, Address: 0x14310)
  • HeapAlloc (Ordinal: 863, Address: 0x31705c)
  • HeapCompact (Ordinal: 864, Address: 0x146c40)
  • HeapCreate (Ordinal: 865, Address: 0x7df30)
  • HeapDestroy (Ordinal: 866, Address: 0x89940)
  • HeapFree (Ordinal: 867, Address: 0x31709e)
  • HeapLock (Ordinal: 868, Address: 0x95310)
  • HeapQueryInformation (Ordinal: 869, Address: 0x146c60)
  • HeapReAlloc (Ordinal: 870, Address: 0x3170da)
  • HeapSetInformation (Ordinal: 871, Address: 0x88150)
  • HeapSize (Ordinal: 872, Address: 0x31710e)
  • HeapSummary (Ordinal: 873, Address: 0x146ca0)
  • HeapUnlock (Ordinal: 874, Address: 0x952e0)
  • HeapValidate (Ordinal: 875, Address: 0x89750)
  • HeapWalk (Ordinal: 876, Address: 0x146dd0)
  • IdnToAscii (Ordinal: 877, Address: 0x80d50)
  • IdnToNameprepUnicode (Ordinal: 878, Address: 0x106910)
  • IdnToUnicode (Ordinal: 879, Address: 0x8e810)
  • ImpersonateAnonymousToken (Ordinal: 880, Address: 0x90d10)
  • ImpersonateLoggedOnUser (Ordinal: 881, Address: 0x78ff0)
  • ImpersonateNamedPipeClient (Ordinal: 882, Address: 0x7d7a0)
  • ImpersonateSelf (Ordinal: 883, Address: 0x89160)
  • IncrementPackageStatusVersion (Ordinal: 884, Address: 0x39f0)
  • InitOnceBeginInitialize (Ordinal: 885, Address: 0x1f530)
  • InitOnceComplete (Ordinal: 886, Address: 0x86160)
  • InitOnceExecuteOnce (Ordinal: 887, Address: 0x67de0)
  • InitOnceInitialize (Ordinal: 888, Address: 0x317245)
  • InitializeAcl (Ordinal: 889, Address: 0x7f8b0)
  • InitializeConditionVariable (Ordinal: 890, Address: 0x31728a)
  • InitializeContext (Ordinal: 891, Address: 0xf7bf0)
  • InitializeContext2 (Ordinal: 892, Address: 0xf7c60)
  • InitializeCriticalSection (Ordinal: 893, Address: 0x3172ee)
  • InitializeCriticalSectionAndSpinCount (Ordinal: 894, Address: 0x765e0)
  • InitializeCriticalSectionEx (Ordinal: 895, Address: 0x6c1b0)
  • InitializeEnclave (Ordinal: 896, Address: 0x13e7d0)
  • InitializeProcThreadAttributeList (Ordinal: 897, Address: 0x89a40)
  • InitializeProcessForWsWatch (Ordinal: 898, Address: 0x110b80)
  • InitializeSListHead (Ordinal: 899, Address: 0x3173b7)
  • InitializeSRWLock (Ordinal: 900, Address: 0x3173e6)
  • InitializeSecurityDescriptor (Ordinal: 901, Address: 0x81700)
  • InitializeSid (Ordinal: 902, Address: 0x824f0)
  • InitializeSynchronizationBarrier (Ordinal: 903, Address: 0x13f210)
  • InstallELAMCertificateInfo (Ordinal: 904, Address: 0xb10c0)
  • InterlockedFlushSList (Ordinal: 905, Address: 0x31747e)
  • InterlockedPopEntrySList (Ordinal: 906, Address: 0x3174b6)
  • InterlockedPushEntrySList (Ordinal: 907, Address: 0x3174f2)
  • InterlockedPushListSList (Ordinal: 908, Address: 0x31752e)
  • InterlockedPushListSListEx (Ordinal: 909, Address: 0x31756b)
  • InternalLcidToName (Ordinal: 910, Address: 0x95980)
  • Internal_EnumCalendarInfo (Ordinal: 911, Address: 0x71b00)
  • Internal_EnumDateFormats (Ordinal: 912, Address: 0x70d40)
  • Internal_EnumLanguageGroupLocales (Ordinal: 913, Address: 0xffaa0)
  • Internal_EnumSystemCodePages (Ordinal: 914, Address: 0xffd80)
  • Internal_EnumSystemLanguageGroups (Ordinal: 915, Address: 0x100090)
  • Internal_EnumSystemLocales (Ordinal: 916, Address: 0x3e3b0)
  • Internal_EnumTimeFormats (Ordinal: 917, Address: 0x71580)
  • Internal_EnumUILanguages (Ordinal: 918, Address: 0x29150)
  • InternetTimeFromSystemTimeA (Ordinal: 919, Address: 0x2c490)
  • InternetTimeFromSystemTimeW (Ordinal: 920, Address: 0xfb9f0)
  • InternetTimeToSystemTimeA (Ordinal: 921, Address: 0x77ef0)
  • InternetTimeToSystemTimeW (Ordinal: 922, Address: 0xfbb20)
  • InvalidateAppModelVersionCache (Ordinal: 923, Address: 0x121150)
  • IsApiSetImplemented (Ordinal: 924, Address: 0x73680)
  • IsCharAlphaA (Ordinal: 925, Address: 0xf1820)
  • IsCharAlphaNumericA (Ordinal: 926, Address: 0xf18c0)
  • IsCharAlphaNumericW (Ordinal: 927, Address: 0xb0700)
  • IsCharAlphaW (Ordinal: 928, Address: 0x66f30)
  • IsCharBlankW (Ordinal: 929, Address: 0xf76b0)
  • IsCharCntrlW (Ordinal: 930, Address: 0xf76f0)
  • IsCharDigitW (Ordinal: 931, Address: 0xf7720)
  • IsCharLowerA (Ordinal: 932, Address: 0xf1970)
  • IsCharLowerW (Ordinal: 933, Address: 0xf16a0)
  • IsCharPunctW (Ordinal: 934, Address: 0xf7770)
  • IsCharSpaceA (Ordinal: 935, Address: 0xf77c0)
  • IsCharSpaceW (Ordinal: 936, Address: 0x6c0a0)
  • IsCharUpperA (Ordinal: 937, Address: 0xf19f0)
  • IsCharUpperW (Ordinal: 938, Address: 0xf1700)
  • IsCharXDigitW (Ordinal: 939, Address: 0xf7820)
  • IsDBCSLeadByte (Ordinal: 940, Address: 0x68680)
  • IsDBCSLeadByteEx (Ordinal: 941, Address: 0x68720)
  • IsDebuggerPresent (Ordinal: 942, Address: 0x12050)
  • IsDeveloperModeEnabled (Ordinal: 943, Address: 0x143b0)
  • IsDeveloperModePolicyApplied (Ordinal: 944, Address: 0x12cf70)
  • IsEnclaveTypeSupported (Ordinal: 945, Address: 0x95860)
  • IsInternetESCEnabled (Ordinal: 946, Address: 0xfa4b0)
  • IsMrtResourceRedirectionEnabled (Ordinal: 947, Address: 0x5b30)
  • IsNLSDefinedString (Ordinal: 948, Address: 0x109b90)
  • IsNormalizedString (Ordinal: 949, Address: 0x106980)
  • IsOnDemandRegistrationSupportedForExtensionCategory (Ordinal: 950, Address: 0x120730)
  • IsProcessCritical (Ordinal: 951, Address: 0x143c00)
  • IsProcessInJob (Ordinal: 952, Address: 0x86a70)
  • IsProcessorFeaturePresent (Ordinal: 953, Address: 0x87600)
  • IsSideloadingEnabled (Ordinal: 954, Address: 0x2720)
  • IsSideloadingPolicyApplied (Ordinal: 955, Address: 0x12cfc0)
  • IsSyncForegroundPolicyRefresh (Ordinal: 956, Address: 0xf0830)
  • IsThreadAFiber (Ordinal: 957, Address: 0x89780)
  • IsThreadpoolTimerSet (Ordinal: 958, Address: 0x3179ad)
  • IsTimeZoneRedirectionEnabled (Ordinal: 959, Address: 0x2e180)
  • IsTokenRestricted (Ordinal: 960, Address: 0x40720)
  • IsUserCetAvailableInEnvironment (Ordinal: 961, Address: 0xb4aa0)
  • IsValidAcl (Ordinal: 962, Address: 0x79e60)
  • IsValidCodePage (Ordinal: 963, Address: 0x3d9e0)
  • IsValidLanguageGroup (Ordinal: 964, Address: 0xfd1f0)
  • IsValidLocale (Ordinal: 965, Address: 0x87130)
  • IsValidLocaleName (Ordinal: 966, Address: 0x7fed0)
  • IsValidNLSVersion (Ordinal: 967, Address: 0x1099c0)
  • IsValidRelativeSecurityDescriptor (Ordinal: 968, Address: 0xbeac0)
  • IsValidSecurityDescriptor (Ordinal: 969, Address: 0x7fdf0)
  • IsValidSid (Ordinal: 970, Address: 0x77230)
  • IsWellKnownSid (Ordinal: 971, Address: 0x28720)
  • IsWow64GuestMachineSupported (Ordinal: 972, Address: 0x143c60)
  • IsWow64Process (Ordinal: 973, Address: 0x14b30)
  • IsWow64Process2 (Ordinal: 974, Address: 0x14b70)
  • K32EmptyWorkingSet (Ordinal: 975, Address: 0x1103c0)
  • K32EnumDeviceDrivers (Ordinal: 976, Address: 0x7b320)
  • K32EnumPageFilesA (Ordinal: 977, Address: 0x1106e0)
  • K32EnumPageFilesW (Ordinal: 978, Address: 0x110730)
  • K32EnumProcessModules (Ordinal: 979, Address: 0x15110)
  • K32EnumProcessModulesEx (Ordinal: 980, Address: 0x110890)
  • K32EnumProcesses (Ordinal: 981, Address: 0x89290)
  • K32GetDeviceDriverBaseNameA (Ordinal: 982, Address: 0x7a090)
  • K32GetDeviceDriverBaseNameW (Ordinal: 983, Address: 0x79fe0)
  • K32GetDeviceDriverFileNameA (Ordinal: 984, Address: 0x1104e0)
  • K32GetDeviceDriverFileNameW (Ordinal: 985, Address: 0x110560)
  • K32GetMappedFileNameA (Ordinal: 986, Address: 0x110be0)
  • K32GetMappedFileNameW (Ordinal: 987, Address: 0x110ca0)
  • K32GetModuleBaseNameA (Ordinal: 988, Address: 0x157e0)
  • K32GetModuleBaseNameW (Ordinal: 989, Address: 0x15040)
  • K32GetModuleFileNameExA (Ordinal: 990, Address: 0xc7820)
  • K32GetModuleFileNameExW (Ordinal: 991, Address: 0x15430)
  • K32GetModuleInformation (Ordinal: 992, Address: 0x15370)
  • K32GetPerformanceInfo (Ordinal: 993, Address: 0x8c100)
  • K32GetProcessImageFileNameA (Ordinal: 994, Address: 0xc78e0)
  • K32GetProcessImageFileNameW (Ordinal: 995, Address: 0x850d0)
  • K32GetProcessMemoryInfo (Ordinal: 996, Address: 0x6b6e0)
  • K32GetWsChanges (Ordinal: 997, Address: 0x110b20)
  • K32GetWsChangesEx (Ordinal: 998, Address: 0x110b50)
  • K32InitializeProcessForWsWatch (Ordinal: 999, Address: 0x110b80)
  • K32QueryWorkingSet (Ordinal: 1000, Address: 0x110480)
  • K32QueryWorkingSetEx (Ordinal: 1001, Address: 0x8df90)
  • KernelBaseGetGlobalData (Ordinal: 1002, Address: 0x7d360)
  • KernelbasePostInit (Ordinal: 1003, Address: 0x6fde0)
  • LCIDToLocaleName (Ordinal: 1004, Address: 0x2f4e0)
  • LCMapStringA (Ordinal: 1005, Address: 0xfc070)
  • LCMapStringEx (Ordinal: 1006, Address: 0x38ea0)
  • LCMapStringW (Ordinal: 1007, Address: 0x38d50)
  • LeaveCriticalPolicySectionInternal (Ordinal: 1008, Address: 0xb20a0)
  • LeaveCriticalSection (Ordinal: 1009, Address: 0x317e09)
  • LeaveCriticalSectionWhenCallbackReturns (Ordinal: 1010, Address: 0x317e4f)
  • LoadAppInitDlls (Ordinal: 1011, Address: 0x97970)
  • LoadEnclaveData (Ordinal: 1012, Address: 0x13e810)
  • LoadEnclaveImageA (Ordinal: 1013, Address: 0x13e880)
  • LoadEnclaveImageW (Ordinal: 1014, Address: 0x13e8d0)
  • LoadLibraryA (Ordinal: 1015, Address: 0x8d9b0)
  • LoadLibraryExA (Ordinal: 1016, Address: 0x4cbc0)
  • LoadLibraryExW (Ordinal: 1017, Address: 0x43fd0)
  • LoadLibraryW (Ordinal: 1018, Address: 0x8d6c0)
  • LoadPackagedLibrary (Ordinal: 1019, Address: 0x13d180)
  • LoadResource (Ordinal: 1020, Address: 0x2bd30)
  • LoadStringA (Ordinal: 1021, Address: 0x145c00)
  • LoadStringBaseExW (Ordinal: 1022, Address: 0x2fa40)
  • LoadStringByReference (Ordinal: 1023, Address: 0x30390)
  • LoadStringW (Ordinal: 1024, Address: 0x2fa20)
  • LocalAlloc (Ordinal: 1025, Address: 0x40ee0)
  • LocalFileTimeToFileTime (Ordinal: 1026, Address: 0x95340)
  • LocalFileTimeToLocalSystemTime (Ordinal: 1027, Address: 0x141a50)
  • LocalFree (Ordinal: 1028, Address: 0x407d0)
  • LocalLock (Ordinal: 1029, Address: 0x7a780)
  • LocalReAlloc (Ordinal: 1030, Address: 0x3f5d0)
  • LocalSystemTimeToLocalFileTime (Ordinal: 1031, Address: 0x141ad0)
  • LocalUnlock (Ordinal: 1032, Address: 0x7a6b0)
  • LocaleNameToLCID (Ordinal: 1033, Address: 0x79bb0)
  • LocateXStateFeature (Ordinal: 1034, Address: 0xf7d60)
  • LockFile (Ordinal: 1035, Address: 0x864b0)
  • LockFileEx (Ordinal: 1036, Address: 0x70990)
  • LockResource (Ordinal: 1037, Address: 0x79190)
  • MakeAbsoluteSD (Ordinal: 1038, Address: 0x7d150)
  • MakeAbsoluteSD2 (Ordinal: 1039, Address: 0x13b520)
  • MakeSelfRelativeSD (Ordinal: 1040, Address: 0x7fae0)
  • MapGenericMask (Ordinal: 1041, Address: 0x885a0)
  • MapPredefinedHandleInternal (Ordinal: 1042, Address: 0x48310)
  • MapUserPhysicalPages (Ordinal: 1043, Address: 0x13d630)
  • MapViewOfFile (Ordinal: 1044, Address: 0x70b00)
  • MapViewOfFile3 (Ordinal: 1045, Address: 0x142e10)
  • MapViewOfFile3FromApp (Ordinal: 1046, Address: 0x142f00)
  • MapViewOfFileEx (Ordinal: 1047, Address: 0x782a0)
  • MapViewOfFileExNuma (Ordinal: 1048, Address: 0x782d0)
  • MapViewOfFileFromApp (Ordinal: 1049, Address: 0x142ff0)
  • MapViewOfFileNuma2 (Ordinal: 1050, Address: 0x7de80)
  • MoveFileExW (Ordinal: 1051, Address: 0x8a040)
  • MoveFileWithProgressTransactedW (Ordinal: 1052, Address: 0x8a070)
  • MoveFileWithProgressW (Ordinal: 1053, Address: 0x8a010)
  • MulDiv (Ordinal: 1054, Address: 0x694b0)
  • MultiByteToWideChar (Ordinal: 1055, Address: 0x378e0)
  • NamedPipeEventEnum (Ordinal: 1056, Address: 0x13ebe0)
  • NamedPipeEventSelect (Ordinal: 1057, Address: 0x13ed20)
  • NeedCurrentDirectoryForExePathA (Ordinal: 1058, Address: 0x143ca0)
  • NeedCurrentDirectoryForExePathW (Ordinal: 1059, Address: 0x8d3a0)
  • NlsCheckPolicy (Ordinal: 1060, Address: 0x6570)
  • NlsDispatchAnsiEnumProc (Ordinal: 1061, Address: 0x100200)
  • NlsGetACPFromLocale (Ordinal: 1062, Address: 0xfbf10)
  • NlsGetCacheUpdateCount (Ordinal: 1063, Address: 0x7cca0)
  • NlsIsUserDefaultLocale (Ordinal: 1064, Address: 0x72250)
  • NlsUpdateLocale (Ordinal: 1065, Address: 0xfd690)
  • NlsUpdateSystemLocale (Ordinal: 1066, Address: 0xfd880)
  • NlsValidateLocale (Ordinal: 1067, Address: 0x35bb0)
  • NormalizeString (Ordinal: 1068, Address: 0xc72c0)
  • NotifyMountMgr (Ordinal: 1069, Address: 0x144d20)
  • NotifyRedirectedStringChange (Ordinal: 1070, Address: 0x106c60)
  • ObjectCloseAuditAlarmW (Ordinal: 1071, Address: 0x932f0)
  • ObjectDeleteAuditAlarmW (Ordinal: 1072, Address: 0x13b560)
  • ObjectOpenAuditAlarmW (Ordinal: 1073, Address: 0x8fbb0)
  • ObjectPrivilegeAuditAlarmW (Ordinal: 1074, Address: 0x13b5d0)
  • OfferVirtualMemory (Ordinal: 1075, Address: 0x13d670)
  • OpenCommPort (Ordinal: 1076, Address: 0x1409e0)
  • OpenDedicatedMemoryPartition (Ordinal: 1077, Address: 0xbeb00)
  • OpenEventA (Ordinal: 1078, Address: 0x84c90)
  • OpenEventW (Ordinal: 1079, Address: 0x4b380)
  • OpenFileById (Ordinal: 1080, Address: 0x853c0)
  • OpenFileMappingFromApp (Ordinal: 1081, Address: 0x1430a0)
  • OpenFileMappingW (Ordinal: 1082, Address: 0x4b450)
  • OpenGlobalizationUserSettingsKey (Ordinal: 1083, Address: 0x4e2e0)
  • OpenMutexW (Ordinal: 1084, Address: 0x88180)
  • OpenPackageInfoByFullName (Ordinal: 1085, Address: 0x26760)
  • OpenPackageInfoByFullNameForMachine (Ordinal: 1086, Address: 0x119260)
  • OpenPackageInfoByFullNameForUser (Ordinal: 1087, Address: 0x23e60)
  • OpenPrivateNamespaceW (Ordinal: 1088, Address: 0x86d30)
  • OpenProcess (Ordinal: 1089, Address: 0x44e10)
  • OpenProcessToken (Ordinal: 1090, Address: 0x21930)
  • OpenRegKey (Ordinal: 1091, Address: 0x5990)
  • OpenSemaphoreW (Ordinal: 1092, Address: 0x4f140)
  • OpenState (Ordinal: 1093, Address: 0xb420)
  • OpenStateAtom (Ordinal: 1094, Address: 0x80660)
  • OpenStateExplicit (Ordinal: 1095, Address: 0x207f0)
  • OpenStateExplicitForUserSid (Ordinal: 1096, Address: 0x8cc20)
  • OpenStateExplicitForUserSidString (Ordinal: 1097, Address: 0x8e7a0)
  • OpenThread (Ordinal: 1098, Address: 0x7c300)
  • OpenThreadToken (Ordinal: 1099, Address: 0x44840)
  • OpenWaitableTimerW (Ordinal: 1100, Address: 0x13f260)
  • OutputDebugStringA (Ordinal: 1101, Address: 0x3eef0)
  • OutputDebugStringW (Ordinal: 1102, Address: 0x3f370)
  • OverrideRoamingDataModificationTimesInRange (Ordinal: 1103, Address: 0x111e70)
  • PackageFamilyNameFromFullName (Ordinal: 1104, Address: 0x72a70)
  • PackageFamilyNameFromFullNameA (Ordinal: 1105, Address: 0x120b90)
  • PackageFamilyNameFromId (Ordinal: 1106, Address: 0x94950)
  • PackageFamilyNameFromIdA (Ordinal: 1107, Address: 0x120c20)
  • PackageFamilyNameFromProductId (Ordinal: 1108, Address: 0x11f490)
  • PackageFullNameFromId (Ordinal: 1109, Address: 0x120c30)
  • PackageFullNameFromIdA (Ordinal: 1110, Address: 0x120c40)
  • PackageFullNameFromProductId (Ordinal: 1111, Address: 0x959f0)
  • PackageIdFromFullName (Ordinal: 1112, Address: 0x80180)
  • PackageIdFromFullNameA (Ordinal: 1113, Address: 0x120c50)
  • PackageIdFromProductId (Ordinal: 1114, Address: 0x11f4a0)
  • PackageIsEffectiveSupportedUsersMultiple (Ordinal: 1115, Address: 0x11f640)
  • PackageNameAndPublisherIdFromFamilyName (Ordinal: 1116, Address: 0x92b90)
  • PackageNameAndPublisherIdFromFamilyNameA (Ordinal: 1117, Address: 0x120c70)
  • PackagePublisherIdFromPublisher (Ordinal: 1118, Address: 0x120c80)
  • PackageRelativeApplicationIdFromProductId (Ordinal: 1119, Address: 0x11f480)
  • PackageSidFromFamilyName (Ordinal: 1120, Address: 0x120c90)
  • ParseApplicationUserModelId (Ordinal: 1121, Address: 0x8dfe0)
  • ParseApplicationUserModelIdA (Ordinal: 1122, Address: 0x120ca0)
  • ParseURLA (Ordinal: 1123, Address: 0x680f0)
  • ParseURLW (Ordinal: 1124, Address: 0x33d20)
  • PathAddBackslashA (Ordinal: 1125, Address: 0xb0340)
  • PathAddBackslashW (Ordinal: 1126, Address: 0x76f80)
  • PathAddExtensionA (Ordinal: 1127, Address: 0x10c910)
  • PathAddExtensionW (Ordinal: 1128, Address: 0x10b9d0)
  • PathAllocCanonicalize (Ordinal: 1129, Address: 0x7f4f0)
  • PathAllocCombine (Ordinal: 1130, Address: 0x40640)
  • PathAppendA (Ordinal: 1131, Address: 0x10c9a0)
  • PathAppendW (Ordinal: 1132, Address: 0x87310)
  • PathCanonicalizeA (Ordinal: 1133, Address: 0x67f90)
  • PathCanonicalizeW (Ordinal: 1134, Address: 0x8e1a0)
  • PathCchAddBackslash (Ordinal: 1135, Address: 0x76fc0)
  • PathCchAddBackslashEx (Ordinal: 1136, Address: 0x76fe0)
  • PathCchAddExtension (Ordinal: 1137, Address: 0x906a0)
  • PathCchAppend (Ordinal: 1138, Address: 0x8cbc0)
  • PathCchAppendEx (Ordinal: 1139, Address: 0x412a0)
  • PathCchCanonicalize (Ordinal: 1140, Address: 0x8ce20)
  • PathCchCanonicalizeEx (Ordinal: 1141, Address: 0x41290)
  • PathCchCombine (Ordinal: 1142, Address: 0x3f470)
  • PathCchCombineEx (Ordinal: 1143, Address: 0x41350)
  • PathCchFindExtension (Ordinal: 1144, Address: 0x70720)
  • PathCchIsRoot (Ordinal: 1145, Address: 0x67570)
  • PathCchRemoveBackslash (Ordinal: 1146, Address: 0x66f10)
  • PathCchRemoveBackslashEx (Ordinal: 1147, Address: 0x674a0)
  • PathCchRemoveExtension (Ordinal: 1148, Address: 0x7d2d0)
  • PathCchRemoveFileSpec (Ordinal: 1149, Address: 0x67010)
  • PathCchRenameExtension (Ordinal: 1150, Address: 0xf8320)
  • PathCchSkipRoot (Ordinal: 1151, Address: 0x3fc10)
  • PathCchStripPrefix (Ordinal: 1152, Address: 0x94390)
  • PathCchStripToRoot (Ordinal: 1153, Address: 0x673f0)
  • PathCombineA (Ordinal: 1154, Address: 0x10c380)
  • PathCombineW (Ordinal: 1155, Address: 0x89fd0)
  • PathCommonPrefixA (Ordinal: 1156, Address: 0x10ca10)
  • PathCommonPrefixW (Ordinal: 1157, Address: 0x76840)
  • PathCreateFromUrlA (Ordinal: 1158, Address: 0xf95c0)
  • PathCreateFromUrlAlloc (Ordinal: 1159, Address: 0xf9720)
  • PathCreateFromUrlW (Ordinal: 1160, Address: 0x32120)
  • PathFileExistsA (Ordinal: 1161, Address: 0x2b840)
  • PathFileExistsW (Ordinal: 1162, Address: 0x2eaa0)
  • PathFindExtensionA (Ordinal: 1163, Address: 0x10c3c0)
  • PathFindExtensionW (Ordinal: 1164, Address: 0x64750)
  • PathFindFileNameA (Ordinal: 1165, Address: 0x684c0)
  • PathFindFileNameW (Ordinal: 1166, Address: 0x69260)
  • PathFindNextComponentA (Ordinal: 1167, Address: 0x10cb50)
  • PathFindNextComponentW (Ordinal: 1168, Address: 0x94210)
  • PathGetArgsA (Ordinal: 1169, Address: 0x10cbb0)
  • PathGetArgsW (Ordinal: 1170, Address: 0x816a0)
  • PathGetCharTypeA (Ordinal: 1171, Address: 0x10cc10)
  • PathGetCharTypeW (Ordinal: 1172, Address: 0x7ab40)
  • PathGetDriveNumberA (Ordinal: 1173, Address: 0x68460)
  • PathGetDriveNumberW (Ordinal: 1174, Address: 0x76120)
  • PathIsFileSpecA (Ordinal: 1175, Address: 0x10cc80)
  • PathIsFileSpecW (Ordinal: 1176, Address: 0x774c0)
  • PathIsLFNFileSpecA (Ordinal: 1177, Address: 0x10ccc0)
  • PathIsLFNFileSpecW (Ordinal: 1178, Address: 0x10ba60)
  • PathIsPrefixA (Ordinal: 1179, Address: 0x10cd60)
  • PathIsPrefixW (Ordinal: 1180, Address: 0x767e0)
  • PathIsRelativeA (Ordinal: 1181, Address: 0x10cdc0)
  • PathIsRelativeW (Ordinal: 1182, Address: 0x760e0)
  • PathIsRootA (Ordinal: 1183, Address: 0x10ce00)
  • PathIsRootW (Ordinal: 1184, Address: 0x67560)
  • PathIsSameRootA (Ordinal: 1185, Address: 0x10ce10)
  • PathIsSameRootW (Ordinal: 1186, Address: 0x76760)
  • PathIsUNCA (Ordinal: 1187, Address: 0x10c410)
  • PathIsUNCEx (Ordinal: 1188, Address: 0x676d0)
  • PathIsUNCServerA (Ordinal: 1189, Address: 0x10c440)
  • PathIsUNCServerShareA (Ordinal: 1190, Address: 0x10c490)
  • PathIsUNCServerShareW (Ordinal: 1191, Address: 0x673b0)
  • PathIsUNCServerW (Ordinal: 1192, Address: 0x67360)
  • PathIsUNCW (Ordinal: 1193, Address: 0x67ab0)
  • PathIsURLA (Ordinal: 1194, Address: 0x680b0)
  • PathIsURLW (Ordinal: 1195, Address: 0x333b0)
  • PathIsValidCharA (Ordinal: 1196, Address: 0x10ce90)
  • PathIsValidCharW (Ordinal: 1197, Address: 0x6b7f0)
  • PathMatchSpecA (Ordinal: 1198, Address: 0xc77d0)
  • PathMatchSpecExA (Ordinal: 1199, Address: 0x10c4f0)
  • PathMatchSpecExW (Ordinal: 1200, Address: 0x10b920)
  • PathMatchSpecW (Ordinal: 1201, Address: 0x681e0)
  • PathParseIconLocationA (Ordinal: 1202, Address: 0x10c520)
  • PathParseIconLocationW (Ordinal: 1203, Address: 0x6ab20)
  • PathQuoteSpacesA (Ordinal: 1204, Address: 0x10c5b0)
  • PathQuoteSpacesW (Ordinal: 1205, Address: 0x5940)
  • PathRelativePathToA (Ordinal: 1206, Address: 0x10cf50)
  • PathRelativePathToW (Ordinal: 1207, Address: 0x57a0)
  • PathRemoveBackslashA (Ordinal: 1208, Address: 0x10d0f0)
  • PathRemoveBackslashW (Ordinal: 1209, Address: 0x67150)
  • PathRemoveBlanksA (Ordinal: 1210, Address: 0x10c640)
  • PathRemoveBlanksW (Ordinal: 1211, Address: 0x6abd0)
  • PathRemoveExtensionA (Ordinal: 1212, Address: 0x10d150)
  • PathRemoveExtensionW (Ordinal: 1213, Address: 0x7d2a0)
  • PathRemoveFileSpecA (Ordinal: 1214, Address: 0x10c6d0)
  • PathRemoveFileSpecW (Ordinal: 1215, Address: 0x66fb0)
  • PathRenameExtensionA (Ordinal: 1216, Address: 0x10d190)
  • PathRenameExtensionW (Ordinal: 1217, Address: 0x10bb00)
  • PathSearchAndQualifyA (Ordinal: 1218, Address: 0x10d210)
  • PathSearchAndQualifyW (Ordinal: 1219, Address: 0x6b8d0)
  • PathSkipRootA (Ordinal: 1220, Address: 0x10d2c0)
  • PathSkipRootW (Ordinal: 1221, Address: 0x76a10)
  • PathStripPathA (Ordinal: 1222, Address: 0x10d310)
  • PathStripPathW (Ordinal: 1223, Address: 0x91fe0)
  • PathStripToRootA (Ordinal: 1224, Address: 0x10d360)
  • PathStripToRootW (Ordinal: 1225, Address: 0x67110)
  • PathUnExpandEnvStringsA (Ordinal: 1226, Address: 0x10c730)
  • PathUnExpandEnvStringsW (Ordinal: 1227, Address: 0xc7470)
  • PathUnquoteSpacesA (Ordinal: 1228, Address: 0x10c760)
  • PathUnquoteSpacesW (Ordinal: 1229, Address: 0x6ac40)
  • PcwAddQueryItem (Ordinal: 1230, Address: 0x888d0)
  • PcwClearCounterSetSecurity (Ordinal: 1231, Address: 0x12d360)
  • PcwCollectData (Ordinal: 1232, Address: 0x88970)
  • PcwCompleteNotification (Ordinal: 1233, Address: 0x12d3c0)
  • PcwCreateNotifier (Ordinal: 1234, Address: 0x12d420)
  • PcwCreateQuery (Ordinal: 1235, Address: 0x887c0)
  • PcwDisconnectCounterSet (Ordinal: 1236, Address: 0xb1eb0)
  • PcwEnumerateInstances (Ordinal: 1237, Address: 0x88810)
  • PcwIsNotifierAlive (Ordinal: 1238, Address: 0x12d480)
  • PcwQueryCounterSetSecurity (Ordinal: 1239, Address: 0x12d4d0)
  • PcwReadNotificationData (Ordinal: 1240, Address: 0x12d530)
  • PcwRegisterCounterSet (Ordinal: 1241, Address: 0xb15d0)
  • PcwRemoveQueryItem (Ordinal: 1242, Address: 0x12d570)
  • PcwSendNotification (Ordinal: 1243, Address: 0x12d5c0)
  • PcwSendStatelessNotification (Ordinal: 1244, Address: 0x12d640)
  • PcwSetCounterSetSecurity (Ordinal: 1245, Address: 0x12d6d0)
  • PcwSetQueryItemUserData (Ordinal: 1246, Address: 0x88880)
  • PeekConsoleInputA (Ordinal: 1247, Address: 0x1344e0)
  • PeekConsoleInputW (Ordinal: 1248, Address: 0x1c1e0)
  • PeekNamedPipe (Ordinal: 1249, Address: 0x81350)
  • PerfCreateInstance (Ordinal: 1250, Address: 0x7f1a0)
  • PerfDecrementULongCounterValue (Ordinal: 1251, Address: 0x6aa50)
  • PerfDecrementULongLongCounterValue (Ordinal: 1252, Address: 0x12da20)
  • PerfDeleteInstance (Ordinal: 1253, Address: 0x7f030)
  • PerfIncrementULongCounterValue (Ordinal: 1254, Address: 0x6a190)
  • PerfIncrementULongLongCounterValue (Ordinal: 1255, Address: 0x12daf0)
  • PerfQueryInstance (Ordinal: 1256, Address: 0x12dbc0)
  • PerfSetCounterRefValue (Ordinal: 1257, Address: 0x7ef00)
  • PerfSetCounterSetInfo (Ordinal: 1258, Address: 0xb1130)
  • PerfSetULongCounterValue (Ordinal: 1259, Address: 0xb4050)
  • PerfSetULongLongCounterValue (Ordinal: 1260, Address: 0xb41c0)
  • PerfStartProvider (Ordinal: 1261, Address: 0xb47d0)
  • PerfStartProviderEx (Ordinal: 1262, Address: 0xb1ae0)
  • PerfStopProvider (Ordinal: 1263, Address: 0xb1cc0)
  • PoolPerAppKeyStateInternal (Ordinal: 1264, Address: 0x10e130)
  • PostQueuedCompletionStatus (Ordinal: 1265, Address: 0x79140)
  • PrefetchVirtualMemory (Ordinal: 1266, Address: 0x92250)
  • PrivCopyFileExW (Ordinal: 1267, Address: 0xb1630)
  • PrivilegeCheck (Ordinal: 1268, Address: 0x80da0)
  • PrivilegedServiceAuditAlarmW (Ordinal: 1269, Address: 0x13b660)
  • ProcessIdToSessionId (Ordinal: 1270, Address: 0x79e90)
  • ProductIdFromPackageFamilyName (Ordinal: 1271, Address: 0x11f4b0)
  • PsmCreateKey (Ordinal: 1272, Address: 0x7c710)
  • PsmCreateKeyWithDynamicId (Ordinal: 1273, Address: 0x7c3f0)
  • PsmEqualApplication (Ordinal: 1274, Address: 0x110d90)
  • PsmEqualPackage (Ordinal: 1275, Address: 0x110e80)
  • PsmGetApplicationNameFromKey (Ordinal: 1276, Address: 0x69fc0)
  • PsmGetAumidFromKey (Ordinal: 1277, Address: 0x69ee0)
  • PsmGetDynamicIdFromKey (Ordinal: 1278, Address: 0x6ab0)
  • PsmGetKeyFromProcess (Ordinal: 1279, Address: 0x7c500)
  • PsmGetKeyFromToken (Ordinal: 1280, Address: 0x7c580)
  • PsmGetPackageFullNameFromKey (Ordinal: 1281, Address: 0x6a080)
  • PsmIsChildKey (Ordinal: 1282, Address: 0x110f10)
  • PsmIsDynamicKey (Ordinal: 1283, Address: 0x92a50)
  • PsmIsValidKey (Ordinal: 1284, Address: 0x79c70)
  • PssCaptureSnapshot (Ordinal: 1285, Address: 0x10f880)
  • PssDuplicateSnapshot (Ordinal: 1286, Address: 0x69f0)
  • PssFreeSnapshot (Ordinal: 1287, Address: 0x10f8c0)
  • PssQuerySnapshot (Ordinal: 1288, Address: 0x6240)
  • PssWalkMarkerCreate (Ordinal: 1289, Address: 0x10f920)
  • PssWalkMarkerFree (Ordinal: 1290, Address: 0x10f9a0)
  • PssWalkMarkerGetPosition (Ordinal: 1291, Address: 0x10fa60)
  • PssWalkMarkerSeekToBeginning (Ordinal: 1292, Address: 0xc77e0)
  • PssWalkMarkerSetPosition (Ordinal: 1293, Address: 0x10fa10)
  • PssWalkSnapshot (Ordinal: 1294, Address: 0x10fab0)
  • PublishStateChangeNotification (Ordinal: 1295, Address: 0x111f40)
  • PublisherFromPackageFullName (Ordinal: 1296, Address: 0x1234f0)
  • PulseEvent (Ordinal: 1297, Address: 0x7d770)
  • PurgeComm (Ordinal: 1298, Address: 0x140ae0)
  • QISearch (Ordinal: 1299, Address: 0x53c30)
  • QueryActCtxSettingsW (Ordinal: 1300, Address: 0x7ff90)
  • QueryActCtxW (Ordinal: 1301, Address: 0x89f40)
  • QueryAuxiliaryCounterFrequency (Ordinal: 1302, Address: 0x141b80)
  • QueryDepthSList (Ordinal: 1303, Address: 0x31953a)
  • QueryDosDeviceW (Ordinal: 1304, Address: 0x463c0)
  • QueryFullProcessImageNameA (Ordinal: 1305, Address: 0xc7090)
  • QueryFullProcessImageNameW (Ordinal: 1306, Address: 0x74d50)
  • QueryGlobalizationUserSettingsStatus (Ordinal: 1307, Address: 0x10b170)
  • QueryIdleProcessorCycleTime (Ordinal: 1308, Address: 0x1470d0)
  • QueryIdleProcessorCycleTimeEx (Ordinal: 1309, Address: 0x147130)
  • QueryInterruptTime (Ordinal: 1310, Address: 0xb22b0)
  • QueryInterruptTimePrecise (Ordinal: 1311, Address: 0x8d770)
  • QueryMemoryResourceNotification (Ordinal: 1312, Address: 0x8bd80)
  • QueryOptionalDelayLoadedAPI (Ordinal: 1313, Address: 0x13d240)
  • QueryPartitionInformation (Ordinal: 1314, Address: 0xbeb70)
  • QueryPerformanceCounter (Ordinal: 1315, Address: 0x319693)
  • QueryPerformanceFrequency (Ordinal: 1316, Address: 0x3196ce)
  • QueryProcessAffinityUpdateMode (Ordinal: 1317, Address: 0x143ce0)
  • QueryProcessCycleTime (Ordinal: 1318, Address: 0x88660)
  • QueryProtectedPolicy (Ordinal: 1319, Address: 0x8dff0)
  • QuerySecurityAccessMask (Ordinal: 1320, Address: 0x79810)
  • QueryStateAtomValueInfo (Ordinal: 1321, Address: 0x4de80)
  • QueryStateContainerCreatedNew (Ordinal: 1322, Address: 0x4b860)
  • QueryStateContainerItemInfo (Ordinal: 1323, Address: 0x4dd60)
  • QueryThreadCycleTime (Ordinal: 1324, Address: 0x706a0)
  • QueryThreadpoolStackInformation (Ordinal: 1325, Address: 0x10aac0)
  • QueryUnbiasedInterruptTime (Ordinal: 1326, Address: 0x3197f5)
  • QueryUnbiasedInterruptTimePrecise (Ordinal: 1327, Address: 0x141bd0)
  • QueryVirtualMemoryInformation (Ordinal: 1328, Address: 0x13d690)
  • QueryWorkingSet (Ordinal: 1329, Address: 0x110480)
  • QueryWorkingSetEx (Ordinal: 1330, Address: 0x8df90)
  • QueueUserAPC (Ordinal: 1331, Address: 0x80b00)
  • QueueUserAPC2 (Ordinal: 1332, Address: 0x80b10)
  • QueueUserWorkItem (Ordinal: 1333, Address: 0x878f0)
  • QuirkGetData (Ordinal: 1334, Address: 0xf7950)
  • QuirkGetData2 (Ordinal: 1335, Address: 0xf79a0)
  • QuirkIsEnabled (Ordinal: 1336, Address: 0x760a0)
  • QuirkIsEnabled2 (Ordinal: 1337, Address: 0xf79f0)
  • QuirkIsEnabled3 (Ordinal: 1338, Address: 0x75e70)
  • QuirkIsEnabledForPackage (Ordinal: 1339, Address: 0x923a0)
  • QuirkIsEnabledForPackage2 (Ordinal: 1340, Address: 0x4480)
  • QuirkIsEnabledForPackage3 (Ordinal: 1341, Address: 0x89970)
  • QuirkIsEnabledForPackage4 (Ordinal: 1342, Address: 0x94830)
  • QuirkIsEnabledForProcess (Ordinal: 1343, Address: 0x955b0)
  • RaiseCustomSystemEventTrigger (Ordinal: 1344, Address: 0x1471a0)
  • RaiseException (Ordinal: 1345, Address: 0x3f2d0)
  • RaiseFailFastException (Ordinal: 1346, Address: 0x147210)
  • ReOpenFile (Ordinal: 1347, Address: 0xf1ac0)
  • ReadConsoleA (Ordinal: 1348, Address: 0x1356b0)
  • ReadConsoleInputA (Ordinal: 1349, Address: 0x134510)
  • ReadConsoleInputExA (Ordinal: 1350, Address: 0x134540)
  • ReadConsoleInputExW (Ordinal: 1351, Address: 0xc7a60)
  • ReadConsoleInputW (Ordinal: 1352, Address: 0x134570)
  • ReadConsoleOutputA (Ordinal: 1353, Address: 0x1345a0)
  • ReadConsoleOutputAttribute (Ordinal: 1354, Address: 0x1345d0)
  • ReadConsoleOutputCharacterA (Ordinal: 1355, Address: 0x134610)
  • ReadConsoleOutputCharacterW (Ordinal: 1356, Address: 0x134650)
  • ReadConsoleOutputW (Ordinal: 1357, Address: 0xb30c0)
  • ReadConsoleW (Ordinal: 1358, Address: 0x1358f0)
  • ReadDirectoryChangesExW (Ordinal: 1359, Address: 0x89510)
  • ReadDirectoryChangesW (Ordinal: 1360, Address: 0x894b0)
  • ReadFile (Ordinal: 1361, Address: 0x44560)
  • ReadFileEx (Ordinal: 1362, Address: 0x82610)
  • ReadFileScatter (Ordinal: 1363, Address: 0x93bc0)
  • ReadProcessMemory (Ordinal: 1364, Address: 0x15320)
  • ReadStateAtomValue (Ordinal: 1365, Address: 0x4d840)
  • ReadStateContainerValue (Ordinal: 1366, Address: 0x4daf0)
  • ReclaimVirtualMemory (Ordinal: 1367, Address: 0x13d6f0)
  • RecordFeatureUsage2 (Ordinal: 1368, Address: 0xbecb0)
  • RefreshPackageInfo (Ordinal: 1369, Address: 0x1192f0)
  • RefreshPolicyExInternal (Ordinal: 1370, Address: 0xf0890)
  • RefreshPolicyInternal (Ordinal: 1371, Address: 0xf08e0)
  • RegCloseKey (Ordinal: 1372, Address: 0x48fb0)
  • RegCopyTreeW (Ordinal: 1373, Address: 0x32e0)
  • RegCreateKeyExA (Ordinal: 1374, Address: 0x13be0)
  • RegCreateKeyExInternalA (Ordinal: 1375, Address: 0x13c40)
  • RegCreateKeyExInternalW (Ordinal: 1376, Address: 0x44b50)
  • RegCreateKeyExW (Ordinal: 1377, Address: 0x44af0)
  • RegDeleteKeyExA (Ordinal: 1378, Address: 0x10e260)
  • RegDeleteKeyExInternalA (Ordinal: 1379, Address: 0x10e280)
  • RegDeleteKeyExInternalW (Ordinal: 1380, Address: 0x75890)
  • RegDeleteKeyExW (Ordinal: 1381, Address: 0x75550)
  • RegDeleteKeyValueA (Ordinal: 1382, Address: 0x90460)
  • RegDeleteKeyValueW (Ordinal: 1383, Address: 0x75d20)
  • RegDeleteTreeA (Ordinal: 1384, Address: 0x754e0)
  • RegDeleteTreeW (Ordinal: 1385, Address: 0x75570)
  • RegDeleteValueA (Ordinal: 1386, Address: 0x904c0)
  • RegDeleteValueW (Ordinal: 1387, Address: 0x75d80)
  • RegDisablePredefinedCacheEx (Ordinal: 1388, Address: 0x7f630)
  • RegEnumKeyExA (Ordinal: 1389, Address: 0x4ac90)
  • RegEnumKeyExW (Ordinal: 1390, Address: 0x46d90)
  • RegEnumValueA (Ordinal: 1391, Address: 0x856b0)
  • RegEnumValueW (Ordinal: 1392, Address: 0x45e40)
  • RegFlushKey (Ordinal: 1393, Address: 0x8f540)
  • RegGetKeySecurity (Ordinal: 1394, Address: 0x4ce70)
  • RegGetValueA (Ordinal: 1395, Address: 0x12450)
  • RegGetValueW (Ordinal: 1396, Address: 0x47040)
  • RegKrnGetAppKeyEventAddressInternal (Ordinal: 1397, Address: 0x10e1c0)
  • RegKrnGetAppKeyLoaded (Ordinal: 1398, Address: 0x10e200)
  • RegKrnGetClassesEnumTableAddressInternal (Ordinal: 1399, Address: 0x49730)
  • RegKrnGetHKEY_ClassesRootAddress (Ordinal: 1400, Address: 0x10e210)
  • RegKrnGetTermsrvRegistryExtensionFlags (Ordinal: 1401, Address: 0x48850)
  • RegKrnResetAppKeyLoaded (Ordinal: 1402, Address: 0x10e230)
  • RegKrnSetDllHasThreadStateGlobal (Ordinal: 1403, Address: 0x7bb90)
  • RegKrnSetTermsrvRegistryExtensionFlags (Ordinal: 1404, Address: 0x10e250)
  • RegLoadAppKeyA (Ordinal: 1405, Address: 0x83e80)
  • RegLoadAppKeyW (Ordinal: 1406, Address: 0x84410)
  • RegLoadKeyA (Ordinal: 1407, Address: 0x10e320)
  • RegLoadKeyW (Ordinal: 1408, Address: 0x944d0)
  • RegLoadMUIStringA (Ordinal: 1409, Address: 0x10e600)
  • RegLoadMUIStringW (Ordinal: 1410, Address: 0x2e430)
  • RegNotifyChangeKeyValue (Ordinal: 1411, Address: 0x4b270)
  • RegOpenCurrentUser (Ordinal: 1412, Address: 0x7f8e0)
  • RegOpenKeyExA (Ordinal: 1413, Address: 0x448c0)
  • RegOpenKeyExInternalA (Ordinal: 1414, Address: 0x448f0)
  • RegOpenKeyExInternalW (Ordinal: 1415, Address: 0x47ce0)
  • RegOpenKeyExW (Ordinal: 1416, Address: 0x47cb0)
  • RegOpenUserClassesRoot (Ordinal: 1417, Address: 0x7aef0)
  • RegQueryInfoKeyA (Ordinal: 1418, Address: 0x86540)
  • RegQueryInfoKeyW (Ordinal: 1419, Address: 0x45950)
  • RegQueryMultipleValuesA (Ordinal: 1420, Address: 0x10e610)
  • RegQueryMultipleValuesW (Ordinal: 1421, Address: 0x10ed70)
  • RegQueryValueExA (Ordinal: 1422, Address: 0x45400)
  • RegQueryValueExW (Ordinal: 1423, Address: 0x47fe0)
  • RegRestoreKeyA (Ordinal: 1424, Address: 0x10f250)
  • RegRestoreKeyW (Ordinal: 1425, Address: 0x10f3a0)
  • RegSaveKeyExA (Ordinal: 1426, Address: 0x10f4b0)
  • RegSaveKeyExW (Ordinal: 1427, Address: 0x10f680)
  • RegSetKeySecurity (Ordinal: 1428, Address: 0xf8e0)
  • RegSetKeyValueA (Ordinal: 1429, Address: 0x12d10)
  • RegSetKeyValueW (Ordinal: 1430, Address: 0x82870)
  • RegSetValueExA (Ordinal: 1431, Address: 0x12de0)
  • RegSetValueExW (Ordinal: 1432, Address: 0x49fd0)
  • RegUnLoadKeyA (Ordinal: 1433, Address: 0x10e4f0)
  • RegUnLoadKeyW (Ordinal: 1434, Address: 0x94b50)
  • RegisterApplicationRestart (Ordinal: 1435, Address: 0x71d0)
  • RegisterBadMemoryNotification (Ordinal: 1436, Address: 0x13d840)
  • RegisterGPNotificationInternal (Ordinal: 1437, Address: 0x8c730)
  • RegisterStateChangeNotification (Ordinal: 1438, Address: 0x1c70)
  • RegisterStateLock (Ordinal: 1439, Address: 0x28c0)
  • RegisterTraceGuidsW (Ordinal: 1440, Address: 0x31a0e9)
  • RegisterWaitForSingleObjectEx (Ordinal: 1441, Address: 0x7fa70)
  • ReleaseActCtx (Ordinal: 1442, Address: 0x86a40)
  • ReleaseMutex (Ordinal: 1443, Address: 0x3f270)
  • ReleaseMutexWhenCallbackReturns (Ordinal: 1444, Address: 0x31a15f)
  • ReleaseSRWLockExclusive (Ordinal: 1445, Address: 0x31a1a0)
  • ReleaseSRWLockShared (Ordinal: 1446, Address: 0x31a1d6)
  • ReleaseSemaphore (Ordinal: 1447, Address: 0x10990)
  • ReleaseSemaphoreWhenCallbackReturns (Ordinal: 1448, Address: 0x31a229)
  • ReleaseStateLock (Ordinal: 1449, Address: 0x111fe0)
  • RemapPredefinedHandleInternal (Ordinal: 1450, Address: 0x10de20)
  • RemoveDirectoryA (Ordinal: 1451, Address: 0x142b50)
  • RemoveDirectoryW (Ordinal: 1452, Address: 0x8ae60)
  • RemoveDllDirectory (Ordinal: 1453, Address: 0x959b0)
  • RemoveExtensionProgIds (Ordinal: 1454, Address: 0x11e9c0)
  • RemovePackageDependency (Ordinal: 1455, Address: 0x1195c0)
  • RemovePackageStatus (Ordinal: 1456, Address: 0x122040)
  • RemovePackageStatusForUser (Ordinal: 1457, Address: 0x122060)
  • RemoveVectoredContinueHandler (Ordinal: 1458, Address: 0x31a336)
  • RemoveVectoredExceptionHandler (Ordinal: 1459, Address: 0x31a37c)
  • ReplaceFileExInternal (Ordinal: 1460, Address: 0x54f50)
  • ReplaceFileW (Ordinal: 1461, Address: 0x54590)
  • ResetEvent (Ordinal: 1462, Address: 0x6c170)
  • ResetState (Ordinal: 1463, Address: 0x112080)
  • ResetWriteWatch (Ordinal: 1464, Address: 0x70ac0)
  • ResizePseudoConsole (Ordinal: 1465, Address: 0x133b90)
  • ResolveDelayLoadedAPI (Ordinal: 1466, Address: 0x79b90)
  • ResolveDelayLoadsFromDll (Ordinal: 1467, Address: 0x13d280)
  • ResolveLocaleName (Ordinal: 1468, Address: 0x3ed90)
  • RestoreLastError (Ordinal: 1469, Address: 0x31a453)
  • RestoreThreadPreferredUILanguages (Ordinal: 1470, Address: 0xb4760)
  • ResumeThread (Ordinal: 1471, Address: 0x89880)
  • RevertToSelf (Ordinal: 1472, Address: 0x72d30)
  • RsopLoggingEnabledInternal (Ordinal: 1473, Address: 0xb2d60)
  • SHCoCreateInstance (Ordinal: 1474, Address: 0x7c380)
  • SHExpandEnvironmentStringsA (Ordinal: 1475, Address: 0x10c7c0)
  • SHExpandEnvironmentStringsW (Ordinal: 1476, Address: 0x127b0)
  • SHLoadIndirectString (Ordinal: 1477, Address: 0x31450)
  • SHLoadIndirectStringInternal (Ordinal: 1478, Address: 0x31940)
  • SHRegCloseUSKey (Ordinal: 1479, Address: 0x77cd0)
  • SHRegCreateUSKeyA (Ordinal: 1480, Address: 0xf88c0)
  • SHRegCreateUSKeyW (Ordinal: 1481, Address: 0x89ad0)
  • SHRegDeleteEmptyUSKeyA (Ordinal: 1482, Address: 0xf8960)
  • SHRegDeleteEmptyUSKeyW (Ordinal: 1483, Address: 0xf8a00)
  • SHRegDeleteUSValueA (Ordinal: 1484, Address: 0xf8a20)
  • SHRegDeleteUSValueW (Ordinal: 1485, Address: 0xf8ab0)
  • SHRegEnumUSKeyA (Ordinal: 1486, Address: 0x10d3a0)
  • SHRegEnumUSKeyW (Ordinal: 1487, Address: 0x7fb20)
  • SHRegEnumUSValueA (Ordinal: 1488, Address: 0x10d510)
  • SHRegEnumUSValueW (Ordinal: 1489, Address: 0x8d5b0)
  • SHRegGetBoolUSValueA (Ordinal: 1490, Address: 0xf8ac0)
  • SHRegGetBoolUSValueW (Ordinal: 1491, Address: 0x779a0)
  • SHRegGetUSValueA (Ordinal: 1492, Address: 0xb2150)
  • SHRegGetUSValueW (Ordinal: 1493, Address: 0x77ba0)
  • SHRegOpenUSKeyA (Ordinal: 1494, Address: 0xb2210)
  • SHRegOpenUSKeyW (Ordinal: 1495, Address: 0x3f9e0)
  • SHRegQueryInfoUSKeyA (Ordinal: 1496, Address: 0x10d6a0)
  • SHRegQueryInfoUSKeyW (Ordinal: 1497, Address: 0x91150)
  • SHRegQueryUSValueA (Ordinal: 1498, Address: 0x10d820)
  • SHRegQueryUSValueW (Ordinal: 1499, Address: 0x77d60)
  • SHRegSetUSValueA (Ordinal: 1500, Address: 0x10d9a0)
  • SHRegSetUSValueW (Ordinal: 1501, Address: 0x10bb90)
  • SHRegWriteUSValueA (Ordinal: 1502, Address: 0x10da30)
  • SHRegWriteUSValueW (Ordinal: 1503, Address: 0x83c00)
  • SHTruncateString (Ordinal: 1504, Address: 0x10c830)
  • SaveAlternatePackageRootPath (Ordinal: 1505, Address: 0x112160)
  • SaveStateRootFolderPath (Ordinal: 1506, Address: 0x112190)
  • ScrollConsoleScreenBufferA (Ordinal: 1507, Address: 0x1350d0)
  • ScrollConsoleScreenBufferW (Ordinal: 1508, Address: 0x1351a0)
  • SearchPathA (Ordinal: 1509, Address: 0x146660)
  • SearchPathW (Ordinal: 1510, Address: 0x6ba00)
  • SetAclInformation (Ordinal: 1511, Address: 0x13b700)
  • SetCachedSigningLevel (Ordinal: 1512, Address: 0x13b740)
  • SetCalendarInfoW (Ordinal: 1513, Address: 0xfdba0)
  • SetClientDynamicTimeZoneInformation (Ordinal: 1514, Address: 0xb2890)
  • SetClientTimeZoneInformation (Ordinal: 1515, Address: 0x141c30)
  • SetCommBreak (Ordinal: 1516, Address: 0x140bc0)
  • SetCommConfig (Ordinal: 1517, Address: 0x140be0)
  • SetCommMask (Ordinal: 1518, Address: 0x140ce0)
  • SetCommState (Ordinal: 1519, Address: 0x140df0)
  • SetCommTimeouts (Ordinal: 1520, Address: 0x141230)
  • SetComputerNameA (Ordinal: 1521, Address: 0x145040)
  • SetComputerNameEx2W (Ordinal: 1522, Address: 0x1450e0)
  • SetComputerNameExA (Ordinal: 1523, Address: 0x1451f0)
  • SetComputerNameExW (Ordinal: 1524, Address: 0x145270)
  • SetComputerNameW (Ordinal: 1525, Address: 0x145290)
  • SetConsoleActiveScreenBuffer (Ordinal: 1526, Address: 0x1351d0)
  • SetConsoleCP (Ordinal: 1527, Address: 0x135230)
  • SetConsoleCtrlHandler (Ordinal: 1528, Address: 0x86290)
  • SetConsoleCursorInfo (Ordinal: 1529, Address: 0x1352a0)
  • SetConsoleCursorPosition (Ordinal: 1530, Address: 0x8fb00)
  • SetConsoleDisplayMode (Ordinal: 1531, Address: 0x135310)
  • SetConsoleHistoryInfo (Ordinal: 1532, Address: 0x135340)
  • SetConsoleInputExeNameA (Ordinal: 1533, Address: 0x133340)
  • SetConsoleInputExeNameW (Ordinal: 1534, Address: 0x78f10)
  • SetConsoleMode (Ordinal: 1535, Address: 0x1c650)
  • SetConsoleNumberOfCommandsA (Ordinal: 1536, Address: 0x1333d0)
  • SetConsoleNumberOfCommandsW (Ordinal: 1537, Address: 0x133490)
  • SetConsoleOutputCP (Ordinal: 1538, Address: 0x1353c0)
  • SetConsoleScreenBufferInfoEx (Ordinal: 1539, Address: 0x135430)
  • SetConsoleScreenBufferSize (Ordinal: 1540, Address: 0x135530)
  • SetConsoleTextAttribute (Ordinal: 1541, Address: 0x1c350)
  • SetConsoleTitleA (Ordinal: 1542, Address: 0x1334a0)
  • SetConsoleTitleW (Ordinal: 1543, Address: 0x93e20)
  • SetConsoleWindowInfo (Ordinal: 1544, Address: 0x135590)
  • SetCriticalSectionSpinCount (Ordinal: 1545, Address: 0x31aa8d)
  • SetCurrentConsoleFontEx (Ordinal: 1546, Address: 0x135600)
  • SetCurrentDirectoryA (Ordinal: 1547, Address: 0x145ca0)
  • SetCurrentDirectoryW (Ordinal: 1548, Address: 0x8ce90)
  • SetDefaultDllDirectories (Ordinal: 1549, Address: 0xb4af0)
  • SetDynamicTimeZoneInformation (Ordinal: 1550, Address: 0x141d90)
  • SetEndOfFile (Ordinal: 1551, Address: 0x729b0)
  • SetEnvironmentStringsW (Ordinal: 1552, Address: 0x75fc0)
  • SetEnvironmentVariableA (Ordinal: 1553, Address: 0x80020)
  • SetEnvironmentVariableW (Ordinal: 1554, Address: 0x7c1f0)
  • SetErrorMode (Ordinal: 1555, Address: 0x2ef80)
  • SetEvent (Ordinal: 1556, Address: 0x6a650)
  • SetEventWhenCallbackReturns (Ordinal: 1557, Address: 0x31abb1)
  • SetExtensionProperty (Ordinal: 1558, Address: 0x120790)
  • SetFileApisToANSI (Ordinal: 1559, Address: 0x13df60)
  • SetFileApisToOEM (Ordinal: 1560, Address: 0x95250)
  • SetFileAttributesA (Ordinal: 1561, Address: 0x1446e0)
  • SetFileAttributesW (Ordinal: 1562, Address: 0x87350)
  • SetFileInformationByHandle (Ordinal: 1563, Address: 0x85190)
  • SetFileIoOverlappedRange (Ordinal: 1564, Address: 0x143310)
  • SetFilePointer (Ordinal: 1565, Address: 0x56450)
  • SetFilePointerEx (Ordinal: 1566, Address: 0x70560)
  • SetFileSecurityW (Ordinal: 1567, Address: 0x90920)
  • SetFileTime (Ordinal: 1568, Address: 0x931f0)
  • SetFileValidData (Ordinal: 1569, Address: 0x94b00)
  • SetHandleCount (Ordinal: 1570, Address: 0x13f150)
  • SetHandleInformation (Ordinal: 1571, Address: 0x7d8a0)
  • SetIsDeveloperModeEnabled (Ordinal: 1572, Address: 0x12d010)
  • SetIsSideloadingEnabled (Ordinal: 1573, Address: 0x12d060)
  • SetKernelObjectSecurity (Ordinal: 1574, Address: 0x8d4e0)
  • SetLastConsoleEventActive (Ordinal: 1575, Address: 0x134cc0)
  • SetLastError (Ordinal: 1576, Address: 0x31ad4b)
  • SetLocalTime (Ordinal: 1577, Address: 0x141e50)
  • SetLocaleInfoW (Ordinal: 1578, Address: 0xfeb30)
  • SetNamedPipeHandleState (Ordinal: 1579, Address: 0x87510)
  • SetPriorityClass (Ordinal: 1580, Address: 0x8ea60)
  • SetPrivateObjectSecurity (Ordinal: 1581, Address: 0x13b790)
  • SetPrivateObjectSecurityEx (Ordinal: 1582, Address: 0x13b7d0)
  • SetProcessAffinityUpdateMode (Ordinal: 1583, Address: 0xb42f0)
  • SetProcessDefaultCpuSetMasks (Ordinal: 1584, Address: 0x143d40)
  • SetProcessDefaultCpuSets (Ordinal: 1585, Address: 0x143e20)
  • SetProcessDynamicEHContinuationTargets (Ordinal: 1586, Address: 0x143f00)
  • SetProcessDynamicEnforcedCetCompatibleRanges (Ordinal: 1587, Address: 0x143f60)
  • SetProcessGroupAffinity (Ordinal: 1588, Address: 0x143fc0)
  • SetProcessInformation (Ordinal: 1589, Address: 0x90fa0)
  • SetProcessMitigationPolicy (Ordinal: 1590, Address: 0x8e350)
  • SetProcessPreferredUILanguages (Ordinal: 1591, Address: 0x95950)
  • SetProcessPriorityBoost (Ordinal: 1592, Address: 0x6d50)
  • SetProcessShutdownParameters (Ordinal: 1593, Address: 0x90d80)
  • SetProcessValidCallTargets (Ordinal: 1594, Address: 0x7ccc0)
  • SetProcessValidCallTargetsForMappedView (Ordinal: 1595, Address: 0x13d8a0)
  • SetProcessWorkingSetSize (Ordinal: 1596, Address: 0x13d8e0)
  • SetProcessWorkingSetSizeEx (Ordinal: 1597, Address: 0x95140)
  • SetProtectedPolicy (Ordinal: 1598, Address: 0x95700)
  • SetProtocolProperty (Ordinal: 1599, Address: 0x122ec0)
  • SetRoamingLastObservedChangeTime (Ordinal: 1600, Address: 0x1121c0)
  • SetSecurityAccessMask (Ordinal: 1601, Address: 0x90a80)
  • SetSecurityDescriptorControl (Ordinal: 1602, Address: 0x92dc0)
  • SetSecurityDescriptorDacl (Ordinal: 1603, Address: 0x80900)
  • SetSecurityDescriptorGroup (Ordinal: 1604, Address: 0x87e40)
  • SetSecurityDescriptorOwner (Ordinal: 1605, Address: 0x878c0)
  • SetSecurityDescriptorRMControl (Ordinal: 1606, Address: 0x94d40)
  • SetSecurityDescriptorSacl (Ordinal: 1607, Address: 0x8e1f0)
  • SetStateVersion (Ordinal: 1608, Address: 0x1122b0)
  • SetStdHandle (Ordinal: 1609, Address: 0x80f40)
  • SetStdHandleEx (Ordinal: 1610, Address: 0x146f50)
  • SetSystemFileCacheSize (Ordinal: 1611, Address: 0x13d8f0)
  • SetSystemTime (Ordinal: 1612, Address: 0x141f50)
  • SetSystemTimeAdjustment (Ordinal: 1613, Address: 0x142050)
  • SetSystemTimeAdjustmentPrecise (Ordinal: 1614, Address: 0x1420a0)
  • SetThreadContext (Ordinal: 1615, Address: 0xb4790)
  • SetThreadDescription (Ordinal: 1616, Address: 0x808b0)
  • SetThreadErrorMode (Ordinal: 1617, Address: 0x72840)
  • SetThreadGroupAffinity (Ordinal: 1618, Address: 0xb40d0)
  • SetThreadIdealProcessor (Ordinal: 1619, Address: 0xb4180)
  • SetThreadIdealProcessorEx (Ordinal: 1620, Address: 0x142750)
  • SetThreadInformation (Ordinal: 1621, Address: 0x76200)
  • SetThreadLocale (Ordinal: 1622, Address: 0x69db0)
  • SetThreadPreferredUILanguages (Ordinal: 1623, Address: 0x66230)
  • SetThreadPreferredUILanguages2 (Ordinal: 1624, Address: 0x66240)
  • SetThreadPriority (Ordinal: 1625, Address: 0x72510)
  • SetThreadPriorityBoost (Ordinal: 1626, Address: 0xb2d90)
  • SetThreadSelectedCpuSetMasks (Ordinal: 1627, Address: 0x1427b0)
  • SetThreadSelectedCpuSets (Ordinal: 1628, Address: 0x142890)
  • SetThreadStackGuarantee (Ordinal: 1629, Address: 0x7e820)
  • SetThreadToken (Ordinal: 1630, Address: 0x6c120)
  • SetThreadUILanguage (Ordinal: 1631, Address: 0x662c0)
  • SetThreadpoolStackInformation (Ordinal: 1632, Address: 0x10ab00)
  • SetThreadpoolThreadMaximum (Ordinal: 1633, Address: 0x31b2dd)
  • SetThreadpoolThreadMinimum (Ordinal: 1634, Address: 0x939e0)
  • SetThreadpoolTimer (Ordinal: 1635, Address: 0x31b325)
  • SetThreadpoolTimerEx (Ordinal: 1636, Address: 0x31b34b)
  • SetThreadpoolWait (Ordinal: 1637, Address: 0x31b370)
  • SetThreadpoolWaitEx (Ordinal: 1638, Address: 0x31b394)
  • SetTimeZoneInformation (Ordinal: 1639, Address: 0x142110)
  • SetTokenInformation (Ordinal: 1640, Address: 0x92a20)
  • SetUnhandledExceptionFilter (Ordinal: 1641, Address: 0x79880)
  • SetUserGeoID (Ordinal: 1642, Address: 0x1093a0)
  • SetUserGeoName (Ordinal: 1643, Address: 0x1093c0)
  • SetWaitableTimer (Ordinal: 1644, Address: 0x43d90)
  • SetWaitableTimerEx (Ordinal: 1645, Address: 0x65440)
  • SetXStateFeaturesMask (Ordinal: 1646, Address: 0xf7e30)
  • SetupComm (Ordinal: 1647, Address: 0x141350)
  • SharedLocalIsEnabled (Ordinal: 1648, Address: 0xad40)
  • SignalObjectAndWait (Ordinal: 1649, Address: 0xc7e40)
  • SizeofResource (Ordinal: 1650, Address: 0x29600)
  • Sleep (Ordinal: 1651, Address: 0x76c0)
  • SleepConditionVariableCS (Ordinal: 1652, Address: 0x7eda0)
  • SleepConditionVariableSRW (Ordinal: 1653, Address: 0x7ee70)
  • SleepEx (Ordinal: 1654, Address: 0x76d0)
  • SpecialMBToWC (Ordinal: 1655, Address: 0x103d50)
  • StartThreadpoolIo (Ordinal: 1656, Address: 0x31b4e6)
  • StrCSpnA (Ordinal: 1657, Address: 0xf6aa0)
  • StrCSpnIA (Ordinal: 1658, Address: 0xf6b10)
  • StrCSpnIW (Ordinal: 1659, Address: 0xf6b80)
  • StrCSpnW (Ordinal: 1660, Address: 0x34460)
  • StrCatBuffA (Ordinal: 1661, Address: 0xf6bf0)
  • StrCatBuffW (Ordinal: 1662, Address: 0xf6c30)
  • StrCatChainW (Ordinal: 1663, Address: 0xf6c70)
  • StrChrA (Ordinal: 1664, Address: 0x68030)
  • StrChrA_MB (Ordinal: 1665, Address: 0x68c60)
  • StrChrIA (Ordinal: 1666, Address: 0x68560)
  • StrChrIW (Ordinal: 1667, Address: 0x8d950)
  • StrChrNIW (Ordinal: 1668, Address: 0xf6cf0)
  • StrChrNW (Ordinal: 1669, Address: 0x728e0)
  • StrChrW (Ordinal: 1670, Address: 0x344d0)
  • StrCmpCA (Ordinal: 1671, Address: 0x934f0)
  • StrCmpCW (Ordinal: 1672, Address: 0x31030)
  • StrCmpICA (Ordinal: 1673, Address: 0x653e0)
  • StrCmpICW (Ordinal: 1674, Address: 0x32c80)
  • StrCmpIW (Ordinal: 1675, Address: 0x35210)
  • StrCmpLogicalW (Ordinal: 1676, Address: 0x824b0)
  • StrCmpNA (Ordinal: 1677, Address: 0xf6d70)
  • StrCmpNCA (Ordinal: 1678, Address: 0x875c0)
  • StrCmpNCW (Ordinal: 1679, Address: 0x33320)
  • StrCmpNIA (Ordinal: 1680, Address: 0x68f60)
  • StrCmpNICA (Ordinal: 1681, Address: 0x69e70)
  • StrCmpNICW (Ordinal: 1682, Address: 0x33170)
  • StrCmpNIW (Ordinal: 1683, Address: 0x35d10)
  • StrCmpNW (Ordinal: 1684, Address: 0x364a0)
  • StrCmpW (Ordinal: 1685, Address: 0x36d30)
  • StrCpyNW (Ordinal: 1686, Address: 0xf6de0)
  • StrCpyNXA (Ordinal: 1687, Address: 0xf6e00)
  • StrCpyNXW (Ordinal: 1688, Address: 0xf6e50)
  • StrDupA (Ordinal: 1689, Address: 0x68ad0)
  • StrDupW (Ordinal: 1690, Address: 0x40590)
  • StrIsIntlEqualA (Ordinal: 1691, Address: 0xf6ea0)
  • StrIsIntlEqualW (Ordinal: 1692, Address: 0x769c0)
  • StrPBrkA (Ordinal: 1693, Address: 0xf6ef0)
  • StrPBrkW (Ordinal: 1694, Address: 0x6b9b0)
  • StrRChrA (Ordinal: 1695, Address: 0xf6f60)
  • StrRChrIA (Ordinal: 1696, Address: 0xf6fe0)
  • StrRChrIW (Ordinal: 1697, Address: 0x2850)
  • StrRChrW (Ordinal: 1698, Address: 0x78b80)
  • StrRStrIA (Ordinal: 1699, Address: 0xf7070)
  • StrRStrIW (Ordinal: 1700, Address: 0x2fee0)
  • StrSpnA (Ordinal: 1701, Address: 0xf7140)
  • StrSpnW (Ordinal: 1702, Address: 0xf71e0)
  • StrStrA (Ordinal: 1703, Address: 0x68b90)
  • StrStrIA (Ordinal: 1704, Address: 0x683d0)
  • StrStrIW (Ordinal: 1705, Address: 0x36e80)
  • StrStrNIW (Ordinal: 1706, Address: 0xf7240)
  • StrStrNW (Ordinal: 1707, Address: 0xf72f0)
  • StrStrW (Ordinal: 1708, Address: 0x337c0)
  • StrToInt64ExA (Ordinal: 1709, Address: 0xf73a0)
  • StrToInt64ExW (Ordinal: 1710, Address: 0x8e910)
  • StrToIntA (Ordinal: 1711, Address: 0x4cc0)
  • StrToIntExA (Ordinal: 1712, Address: 0xf7450)
  • StrToIntExW (Ordinal: 1713, Address: 0x8e8e0)
  • StrToIntW (Ordinal: 1714, Address: 0x6aca0)
  • StrTrimA (Ordinal: 1715, Address: 0xf7480)
  • StrTrimW (Ordinal: 1716, Address: 0x333f0)
  • SubmitThreadpoolWork (Ordinal: 1717, Address: 0x31b772)
  • SubscribeEdpEnabledStateChange (Ordinal: 1718, Address: 0x92520)
  • SubscribeFeatureUsageFlush (Ordinal: 1719, Address: 0xbecc0)
  • SubscribeStateChangeNotification (Ordinal: 1720, Address: 0x8e090)
  • SubscribeWdagEnabledStateChange (Ordinal: 1721, Address: 0x92460)
  • SuspendThread (Ordinal: 1722, Address: 0x938f0)
  • SwitchToFiber (Ordinal: 1723, Address: 0x81d50)
  • SwitchToThread (Ordinal: 1724, Address: 0x76670)
  • SystemTimeToFileTime (Ordinal: 1725, Address: 0x72780)
  • SystemTimeToTzSpecificLocalTime (Ordinal: 1726, Address: 0x2d780)
  • SystemTimeToTzSpecificLocalTimeEx (Ordinal: 1727, Address: 0x91420)
  • TerminateEnclave (Ordinal: 1728, Address: 0x13e930)
  • TerminateProcess (Ordinal: 1729, Address: 0x90400)
  • TerminateProcessOnMemoryExhaustion (Ordinal: 1730, Address: 0x1474c0)
  • TerminateThread (Ordinal: 1731, Address: 0x142970)
  • TestClose (Ordinal: 1732, Address: 0x13a640)
  • TestCreate (Ordinal: 1733, Address: 0x1a8c0)
  • TestOpen (Ordinal: 1734, Address: 0x940d0)
  • TestQueryData (Ordinal: 1735, Address: 0x1ba60)
  • TestReport (Ordinal: 1736, Address: 0x1ab40)
  • TestUnlockData (Ordinal: 1737, Address: 0x1ae30)
  • TlsAlloc (Ordinal: 1738, Address: 0x7f920)
  • TlsFree (Ordinal: 1739, Address: 0x807d0)
  • TlsGetValue (Ordinal: 1740, Address: 0xc2080)
  • TlsSetValue (Ordinal: 1741, Address: 0x693f0)
  • TraceEvent (Ordinal: 1742, Address: 0x31b94f)
  • TraceMessage (Ordinal: 1743, Address: 0x31b973)
  • TraceMessageVa (Ordinal: 1744, Address: 0x31b998)
  • TransactNamedPipe (Ordinal: 1745, Address: 0x89190)
  • TransmitCommChar (Ordinal: 1746, Address: 0x141480)
  • TryAcquireSRWLockExclusive (Ordinal: 1747, Address: 0x31b9ee)
  • TryAcquireSRWLockShared (Ordinal: 1748, Address: 0x31ba2a)
  • TryEnterCriticalSection (Ordinal: 1749, Address: 0x31ba63)
  • TrySubmitThreadpoolCallback (Ordinal: 1750, Address: 0x79fb0)
  • TzSpecificLocalTimeToSystemTime (Ordinal: 1751, Address: 0x2d0f0)
  • TzSpecificLocalTimeToSystemTimeEx (Ordinal: 1752, Address: 0x91580)
  • UnhandledExceptionFilter (Ordinal: 1753, Address: 0xb0760)
  • UnlockFile (Ordinal: 1754, Address: 0x75080)
  • UnlockFileEx (Ordinal: 1755, Address: 0x750e0)
  • UnmapViewOfFile (Ordinal: 1756, Address: 0x761a0)
  • UnmapViewOfFile2 (Ordinal: 1757, Address: 0x7ed30)
  • UnmapViewOfFileEx (Ordinal: 1758, Address: 0x7ed10)
  • UnregisterApplicationRestart (Ordinal: 1759, Address: 0xf15d0)
  • UnregisterBadMemoryNotification (Ordinal: 1760, Address: 0x13d9b0)
  • UnregisterGPNotificationInternal (Ordinal: 1761, Address: 0x8e6c0)
  • UnregisterStateChangeNotification (Ordinal: 1762, Address: 0x1cc0)
  • UnregisterStateLock (Ordinal: 1763, Address: 0x29d0)
  • UnregisterTraceGuids (Ordinal: 1764, Address: 0x31bbef)
  • UnregisterWaitEx (Ordinal: 1765, Address: 0x81b10)
  • UnsubscribeEdpEnabledStateChange (Ordinal: 1766, Address: 0x948a0)
  • UnsubscribeFeatureUsageFlush (Ordinal: 1767, Address: 0xbece0)
  • UnsubscribeStateChangeNotification (Ordinal: 1768, Address: 0x92cc0)
  • UnsubscribeWdagEnabledStateChange (Ordinal: 1769, Address: 0x948a0)
  • UpdatePackageStatus (Ordinal: 1770, Address: 0x4380)
  • UpdatePackageStatusForUser (Ordinal: 1771, Address: 0x122080)
  • UpdatePackageStatusForUserSid (Ordinal: 1772, Address: 0x2f10)
  • UpdateProcThreadAttribute (Ordinal: 1773, Address: 0x87b40)
  • UrlApplySchemeA (Ordinal: 1774, Address: 0x4580)
  • UrlApplySchemeW (Ordinal: 1775, Address: 0x90120)
  • UrlCanonicalizeA (Ordinal: 1776, Address: 0xf97e0)
  • UrlCanonicalizeW (Ordinal: 1777, Address: 0x310b0)
  • UrlCombineA (Ordinal: 1778, Address: 0xf9880)
  • UrlCombineW (Ordinal: 1779, Address: 0x8ee40)
  • UrlCompareA (Ordinal: 1780, Address: 0xf98c0)
  • UrlCompareW (Ordinal: 1781, Address: 0xf9a50)
  • UrlCreateFromPathA (Ordinal: 1782, Address: 0xf9be0)
  • UrlCreateFromPathW (Ordinal: 1783, Address: 0x314e0)
  • UrlEscapeA (Ordinal: 1784, Address: 0xf9d40)
  • UrlEscapeW (Ordinal: 1785, Address: 0x30f80)
  • UrlFixupW (Ordinal: 1786, Address: 0xf9eb0)
  • UrlGetLocationA (Ordinal: 1787, Address: 0xfa230)
  • UrlGetLocationW (Ordinal: 1788, Address: 0xfa2e0)
  • UrlGetPartA (Ordinal: 1789, Address: 0x46e0)
  • UrlGetPartW (Ordinal: 1790, Address: 0x32d90)
  • UrlHashA (Ordinal: 1791, Address: 0x2100)
  • UrlHashW (Ordinal: 1792, Address: 0x2050)
  • UrlIsA (Ordinal: 1793, Address: 0xfa350)
  • UrlIsNoHistoryA (Ordinal: 1794, Address: 0xfa450)
  • UrlIsNoHistoryW (Ordinal: 1795, Address: 0x95a80)
  • UrlIsOpaqueA (Ordinal: 1796, Address: 0xfa470)
  • UrlIsOpaqueW (Ordinal: 1797, Address: 0xfa490)
  • UrlIsW (Ordinal: 1798, Address: 0x33bb0)
  • UrlUnescapeA (Ordinal: 1799, Address: 0x76340)
  • UrlUnescapeW (Ordinal: 1800, Address: 0x327f0)
  • VerFindFileA (Ordinal: 1801, Address: 0xf0160)
  • VerFindFileW (Ordinal: 1802, Address: 0xf0c30)
  • VerLanguageNameA (Ordinal: 1803, Address: 0x94960)
  • VerLanguageNameW (Ordinal: 1804, Address: 0x2c070)
  • VerQueryValueA (Ordinal: 1805, Address: 0x94810)
  • VerQueryValueW (Ordinal: 1806, Address: 0x327d0)
  • VerSetConditionMask (Ordinal: 1807, Address: 0x31beda)
  • VerifyApplicationUserModelId (Ordinal: 1808, Address: 0x95aa0)
  • VerifyApplicationUserModelIdA (Ordinal: 1809, Address: 0x120cb0)
  • VerifyPackageFamilyName (Ordinal: 1810, Address: 0x120cf0)
  • VerifyPackageFamilyNameA (Ordinal: 1811, Address: 0x120d40)
  • VerifyPackageFullName (Ordinal: 1812, Address: 0x90300)
  • VerifyPackageFullNameA (Ordinal: 1813, Address: 0x120d90)
  • VerifyPackageId (Ordinal: 1814, Address: 0x120e10)
  • VerifyPackageIdA (Ordinal: 1815, Address: 0x120e90)
  • VerifyPackagePublisher (Ordinal: 1816, Address: 0x2640)
  • VerifyPackagePublisherA (Ordinal: 1817, Address: 0x120f10)
  • VerifyPackageRelativeApplicationId (Ordinal: 1818, Address: 0x120f80)
  • VerifyPackageRelativeApplicationIdA (Ordinal: 1819, Address: 0x120fd0)
  • VerifyScripts (Ordinal: 1820, Address: 0x1069f0)
  • VirtualAlloc (Ordinal: 1821, Address: 0x6a5d0)
  • VirtualAlloc2 (Ordinal: 1822, Address: 0x13d9f0)
  • VirtualAlloc2FromApp (Ordinal: 1823, Address: 0x13daa0)
  • VirtualAllocEx (Ordinal: 1824, Address: 0x8f40)
  • VirtualAllocExNuma (Ordinal: 1825, Address: 0xa640)
  • VirtualAllocFromApp (Ordinal: 1826, Address: 0x13dae0)
  • VirtualFree (Ordinal: 1827, Address: 0x707d0)
  • VirtualFreeEx (Ordinal: 1828, Address: 0x94180)
  • VirtualLock (Ordinal: 1829, Address: 0x92410)
  • VirtualProtect (Ordinal: 1830, Address: 0x72340)
  • VirtualProtectEx (Ordinal: 1831, Address: 0x85650)
  • VirtualProtectFromApp (Ordinal: 1832, Address: 0x13db30)
  • VirtualQuery (Ordinal: 1833, Address: 0x76610)
  • VirtualQueryEx (Ordinal: 1834, Address: 0x79b40)
  • VirtualUnlock (Ordinal: 1835, Address: 0x7d100)
  • VirtualUnlockEx (Ordinal: 1836, Address: 0x13dbc0)
  • WTSGetServiceSessionId (Ordinal: 1837, Address: 0x8bee0)
  • WTSIsServerContainer (Ordinal: 1838, Address: 0x8d320)
  • WaitCommEvent (Ordinal: 1839, Address: 0x141560)
  • WaitForDebugEvent (Ordinal: 1840, Address: 0x13f7a0)
  • WaitForDebugEventEx (Ordinal: 1841, Address: 0x13f7b0)
  • WaitForMachinePolicyForegroundProcessingInternal (Ordinal: 1842, Address: 0xf0920)
  • WaitForMultipleObjects (Ordinal: 1843, Address: 0x647d0)
  • WaitForMultipleObjectsEx (Ordinal: 1844, Address: 0x647f0)
  • WaitForSingleObject (Ordinal: 1845, Address: 0x3d5f0)
  • WaitForSingleObjectEx (Ordinal: 1846, Address: 0x3d880)
  • WaitForThreadpoolIoCallbacks (Ordinal: 1847, Address: 0x31c236)
  • WaitForThreadpoolTimerCallbacks (Ordinal: 1848, Address: 0x31c272)
  • WaitForThreadpoolWaitCallbacks (Ordinal: 1849, Address: 0x31c2a6)
  • WaitForThreadpoolWorkCallbacks (Ordinal: 1850, Address: 0x31c2d9)
  • WaitForUserPolicyForegroundProcessingInternal (Ordinal: 1851, Address: 0xf0960)
  • WaitNamedPipeW (Ordinal: 1852, Address: 0x89cb0)
  • WaitOnAddress (Ordinal: 1853, Address: 0x7ee00)
  • WakeAllConditionVariable (Ordinal: 1854, Address: 0x31c351)
  • WakeByAddressAll (Ordinal: 1855, Address: 0x31c384)
  • WakeByAddressSingle (Ordinal: 1856, Address: 0x31c3b0)
  • WakeConditionVariable (Ordinal: 1857, Address: 0x31c3e1)
  • WerGetFlags (Ordinal: 1858, Address: 0x14980)
  • WerRegisterAdditionalProcess (Ordinal: 1859, Address: 0xf15f0)
  • WerRegisterAppLocalDump (Ordinal: 1860, Address: 0xf1600)
  • WerRegisterCustomMetadata (Ordinal: 1861, Address: 0x77c0)
  • WerRegisterExcludedMemoryBlock (Ordinal: 1862, Address: 0xf1610)
  • WerRegisterFile (Ordinal: 1863, Address: 0x9340)
  • WerRegisterMemoryBlock (Ordinal: 1864, Address: 0x8d520)
  • WerRegisterRuntimeExceptionModule (Ordinal: 1865, Address: 0x8f70)
  • WerSetFlags (Ordinal: 1866, Address: 0x7ee0)
  • WerSetMaxProcessHoldMilliseconds (Ordinal: 1867, Address: 0xb2c00)
  • WerUnregisterAdditionalProcess (Ordinal: 1868, Address: 0xf1630)
  • WerUnregisterAppLocalDump (Ordinal: 1869, Address: 0xf1640)
  • WerUnregisterCustomMetadata (Ordinal: 1870, Address: 0xf1660)
  • WerUnregisterExcludedMemoryBlock (Ordinal: 1871, Address: 0xf1670)
  • WerUnregisterFile (Ordinal: 1872, Address: 0x9330)
  • WerUnregisterMemoryBlock (Ordinal: 1873, Address: 0x9290)
  • WerUnregisterRuntimeExceptionModule (Ordinal: 1874, Address: 0x68a0)
  • WerpNotifyLoadStringResource (Ordinal: 1875, Address: 0xf1690)
  • WerpNotifyUseStringResource (Ordinal: 1876, Address: 0x96910)
  • WideCharToMultiByte (Ordinal: 1877, Address: 0x17ff0)
  • Wow64DisableWow64FsRedirection (Ordinal: 1878, Address: 0x922a0)
  • Wow64EnableWow64FsRedirection (Ordinal: 1879, Address: 0x6a80)
  • Wow64GetThreadContext (Ordinal: 1880, Address: 0x142a90)
  • Wow64RevertWow64FsRedirection (Ordinal: 1881, Address: 0x13f160)
  • Wow64SetThreadContext (Ordinal: 1882, Address: 0x142ad0)
  • Wow64SetThreadDefaultGuestMachine (Ordinal: 1883, Address: 0x2b660)
  • Wow64SuspendThread (Ordinal: 1884, Address: 0x142b10)
  • WriteConsoleA (Ordinal: 1885, Address: 0x135940)
  • WriteConsoleInputA (Ordinal: 1886, Address: 0x134760)
  • WriteConsoleInputW (Ordinal: 1887, Address: 0x134830)
  • WriteConsoleOutputA (Ordinal: 1888, Address: 0x134850)
  • WriteConsoleOutputAttribute (Ordinal: 1889, Address: 0x134880)
  • WriteConsoleOutputCharacterA (Ordinal: 1890, Address: 0x1348c0)
  • WriteConsoleOutputCharacterW (Ordinal: 1891, Address: 0x134900)
  • WriteConsoleOutputW (Ordinal: 1892, Address: 0xb3330)
  • WriteConsoleW (Ordinal: 1893, Address: 0x1c6e0)
  • WriteFile (Ordinal: 1894, Address: 0x443d0)
  • WriteFileEx (Ordinal: 1895, Address: 0x82520)
  • WriteFileGather (Ordinal: 1896, Address: 0x92ba0)
  • WriteProcessMemory (Ordinal: 1897, Address: 0x7d990)
  • WriteStateAtomValue (Ordinal: 1898, Address: 0x78740)
  • WriteStateContainerValue (Ordinal: 1899, Address: 0x7a390)
  • ZombifyActCtx (Ordinal: 1900, Address: 0xf1350)
  • _AddMUIStringToCache (Ordinal: 1901, Address: 0x6d20)
  • _GetMUIStringFromCache (Ordinal: 1902, Address: 0x2fd00)
  • _OpenMuiStringCache (Ordinal: 1903, Address: 0x30240)
  • __C_specific_handler (Ordinal: 1904, Address: 0x31c847)
  • __argc (Ordinal: 1905, Address: 0x326ee8)
  • __chkstk (Ordinal: 1906, Address: 0x31c872)
  • __dllonexit3 (Ordinal: 1907, Address: 0x7b500)
  • __misaligned_access (Ordinal: 1908, Address: 0x31c8a2)
  • __wargv (Ordinal: 1909, Address: 0x326ee0)
  • __wgetmainargs (Ordinal: 1910, Address: 0x92a80)
  • _amsg_exit (Ordinal: 1911, Address: 0x979c0)
  • _c_exit (Ordinal: 1912, Address: 0x10b2f0)
  • _cexit (Ordinal: 1913, Address: 0x10b310)
  • _exit (Ordinal: 1914, Address: 0x10b330)
  • _initterm (Ordinal: 1915, Address: 0x7fe20)
  • _initterm_e (Ordinal: 1916, Address: 0x85600)
  • _invalid_parameter (Ordinal: 1917, Address: 0xb4e30)
  • _local_unwind (Ordinal: 1918, Address: 0x31c92a)
  • _onexit (Ordinal: 1919, Address: 0x7b4a0)
  • _purecall (Ordinal: 1920, Address: 0xb5030)
  • _time64 (Ordinal: 1921, Address: 0xb5050)
  • atexit (Ordinal: 1922, Address: 0x7b480)
  • exit (Ordinal: 1923, Address: 0x10b490)
  • hgets (Ordinal: 1924, Address: 0x10b4b0)
  • hwprintf (Ordinal: 1925, Address: 0x10b5d0)
  • lstrcmp (Ordinal: 1926, Address: 0x4f70)
  • lstrcmpA (Ordinal: 1927, Address: 0x4f70)
  • lstrcmpW (Ordinal: 1928, Address: 0x36780)
  • lstrcmpi (Ordinal: 1929, Address: 0x68630)
  • lstrcmpiA (Ordinal: 1930, Address: 0x68630)
  • lstrcmpiW (Ordinal: 1931, Address: 0x37070)
  • lstrcpyn (Ordinal: 1932, Address: 0x147050)
  • lstrcpynA (Ordinal: 1933, Address: 0x147050)
  • lstrcpynW (Ordinal: 1934, Address: 0x8b370)
  • lstrlen (Ordinal: 1935, Address: 0x68cb0)
  • lstrlenA (Ordinal: 1936, Address: 0x68cb0)
  • lstrlenW (Ordinal: 1937, Address: 0x35b10)
  • time (Ordinal: 1938, Address: 0xb50c0)
  • wprintf (Ordinal: 1939, Address: 0x10b7c0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x18023bfe8)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x18023c008)
  • EventRegister (Address: 0x18023c000)
  • EventSetInformation (Address: 0x18023c018)
  • EventUnregister (Address: 0x18023bff8)
  • EventWriteTransfer (Address: 0x18023c010)
ntdll.dll
  • (Address: 0x18023d2a0)
  • __C_specific_handler (Address: 0x18023c038)
  • __chkstk (Address: 0x18023d650)
  • _errno (Address: 0x18023cb08)
  • _itow_s (Address: 0x18023c3d0)
  • _local_unwind (Address: 0x18023d658)
  • _stricmp (Address: 0x18023cd70)
  • _strlwr (Address: 0x18023c838)
  • _strnicmp (Address: 0x18023c788)
  • _ui64tow_s (Address: 0x18023c488)
  • _vsnprintf (Address: 0x18023c380)
  • _vsnwprintf (Address: 0x18023c278)
  • _wcsicmp (Address: 0x18023c0e0)
  • _wcslwr (Address: 0x18023c5b8)
  • _wcsnicmp (Address: 0x18023c240)
  • _wtoi (Address: 0x18023c3c8)
  • _wtol (Address: 0x18023c5c8)
  • CsrAllocateCaptureBuffer (Address: 0x18023c5a0)
  • CsrAllocateMessagePointer (Address: 0x18023d5d0)
  • CsrCaptureMessageBuffer (Address: 0x18023c590)
  • CsrCaptureMessageMultiUnicodeStringsInPlace (Address: 0x18023d5c8)
  • CsrClientCallServer (Address: 0x18023c588)
  • CsrClientConnectToServer (Address: 0x18023d5d8)
  • CsrFreeCaptureBuffer (Address: 0x18023c598)
  • CsrGetProcessId (Address: 0x18023d140)
  • DbgPrint (Address: 0x18023c5e0)
  • DbgPrintEx (Address: 0x18023c620)
  • DbgUiConnectToDbg (Address: 0x18023d150)
  • DbgUiContinue (Address: 0x18023d120)
  • DbgUiConvertStateChangeStructure (Address: 0x18023d138)
  • DbgUiConvertStateChangeStructureEx (Address: 0x18023d130)
  • DbgUiDebugActiveProcess (Address: 0x18023d158)
  • DbgUiGetThreadDebugObject (Address: 0x18023d3e8)
  • DbgUiStopDebugging (Address: 0x18023d160)
  • DbgUiWaitStateChange (Address: 0x18023d128)
  • EtwCheckCoverage (Address: 0x18023d378)
  • EtwEventEnabled (Address: 0x18023c8c0)
  • EtwEventRegister (Address: 0x18023c8b8)
  • EtwEventSetInformation (Address: 0x18023d570)
  • EtwEventUnregister (Address: 0x18023c8b0)
  • EtwEventWrite (Address: 0x18023c8c8)
  • EtwEventWriteNoRegistration (Address: 0x18023ccf0)
  • EtwEventWriteTransfer (Address: 0x18023ca58)
  • isalpha (Address: 0x18023c780)
  • iswalpha (Address: 0x18023c328)
  • LdrAccessResource (Address: 0x18023c4f8)
  • LdrAddDllDirectory (Address: 0x18023cdd8)
  • LdrAddLoadAsDataTable (Address: 0x18023cd68)
  • LdrAddRefDll (Address: 0x18023cdc8)
  • LdrAppxHandleIntegrityFailure (Address: 0x18023d320)
  • LdrCallEnclave (Address: 0x18023cfa8)
  • LdrCreateEnclave (Address: 0x18023cf88)
  • LdrDeleteEnclave (Address: 0x18023cfb8)
  • LdrDisableThreadCalloutsForDll (Address: 0x18023cdb0)
  • LdrFindResource_U (Address: 0x18023ce18)
  • LdrFindResourceEx_U (Address: 0x18023c490)
  • LdrGetDllDirectory (Address: 0x18023d3d0)
  • LdrGetDllFullName (Address: 0x18023cdb8)
  • LdrGetDllHandle (Address: 0x18023c820)
  • LdrGetDllHandleByMapping (Address: 0x18023cd58)
  • LdrGetDllHandleByName (Address: 0x18023cd40)
  • LdrGetDllPath (Address: 0x18023cd80)
  • LdrGetFileNameFromLoadAsDataTable (Address: 0x18023ce48)
  • LdrGetProcedureAddress (Address: 0x18023c818)
  • LdrGetProcedureAddressForCaller (Address: 0x18023cdd0)
  • LdrInitializeEnclave (Address: 0x18023cf98)
  • LdrLoadAlternateResourceModule (Address: 0x18023ce50)
  • LdrLoadAlternateResourceModuleEx (Address: 0x18023ce60)
  • LdrLoadDll (Address: 0x18023cd90)
  • LdrLoadEnclaveModule (Address: 0x18023cfa0)
  • LdrpResGetMappingSize (Address: 0x18023ce68)
  • LdrpResGetResourceDirectory (Address: 0x18023ce28)
  • LdrQueryImageFileExecutionOptionsEx (Address: 0x18023d3e0)
  • LdrQueryImageFileKeyOption (Address: 0x18023d418)
  • LdrQueryOptionalDelayLoadedAPI (Address: 0x18023ce00)
  • LdrRemoveDllDirectory (Address: 0x18023cde0)
  • LdrRemoveLoadAsDataTable (Address: 0x18023cd98)
  • LdrResFindResource (Address: 0x18023ce40)
  • LdrResFindResourceDirectory (Address: 0x18023ce38)
  • LdrResGetRCConfig (Address: 0x18023ce20)
  • LdrResolveDelayLoadedAPI (Address: 0x18023cdf0)
  • LdrResolveDelayLoadsFromDll (Address: 0x18023cdf8)
  • LdrResRelease (Address: 0x18023c0a8)
  • LdrResSearchResource (Address: 0x18023c0c8)
  • LdrRscIsTypeExist (Address: 0x18023ce58)
  • LdrSetDefaultDllDirectories (Address: 0x18023cde8)
  • LdrUnloadAlternateResourceModule (Address: 0x18023cda0)
  • LdrUnloadDll (Address: 0x18023cda8)
  • LdrUpdatePackageSearchPath (Address: 0x18023c988)
  • memcmp (Address: 0x18023d660)
  • memcpy (Address: 0x18023d668)
  • memcpy_s (Address: 0x18023c358)
  • memmove (Address: 0x18023d670)
  • memmove_s (Address: 0x18023c378)
  • memset (Address: 0x18023d678)
  • NlsMbCodePageTag (Address: 0x18023c058)
  • NtAccessCheck (Address: 0x18023cb30)
  • NtAccessCheckAndAuditAlarm (Address: 0x18023cb78)
  • NtAccessCheckByType (Address: 0x18023cb38)
  • NtAccessCheckByTypeAndAuditAlarm (Address: 0x18023cb80)
  • NtAccessCheckByTypeResultList (Address: 0x18023cb40)
  • NtAccessCheckByTypeResultListAndAuditAlarm (Address: 0x18023cb88)
  • NtAccessCheckByTypeResultListAndAuditAlarmByHandle (Address: 0x18023cb90)
  • NtAdjustGroupsToken (Address: 0x18023cb68)
  • NtAdjustPrivilegesToken (Address: 0x18023cb60)
  • NtAllocateLocallyUniqueId (Address: 0x18023cb28)
  • NtAllocateUserPhysicalPages (Address: 0x18023cf00)
  • NtAllocateUserPhysicalPagesEx (Address: 0x18023cf08)
  • NtAllocateVirtualMemory (Address: 0x18023cec0)
  • NtAllocateVirtualMemoryEx (Address: 0x18023cec8)
  • NtCancelIoFile (Address: 0x18023d000)
  • NtCancelIoFileEx (Address: 0x18023d008)
  • NtCancelSynchronousIoFile (Address: 0x18023d010)
  • NtCancelTimer (Address: 0x18023d090)
  • NtClearEvent (Address: 0x18023d040)
  • NtClose (Address: 0x18023c720)
  • NtCloseObjectAuditAlarm (Address: 0x18023cba8)
  • NtCompareObjects (Address: 0x18023d178)
  • NtCompareSigningLevels (Address: 0x18023ca38)
  • NtConvertBetweenAuxiliaryCounterAndPerformanceCounter (Address: 0x18023d1e0)
  • NtCreateDirectoryObjectEx (Address: 0x18023cf80)
  • NtCreateEvent (Address: 0x18023c220)
  • NtCreateFile (Address: 0x18023c178)
  • NtCreateIoCompletion (Address: 0x18023d358)
  • NtCreateKey (Address: 0x18023c2a8)
  • NtCreateKeyTransacted (Address: 0x18023c298)
  • NtCreateLowBoxToken (Address: 0x18023d2f8)
  • NtCreateMutant (Address: 0x18023d068)
  • NtCreateNamedPipeFile (Address: 0x18023cfc8)
  • NtCreatePrivateNamespace (Address: 0x18023c710)
  • NtCreateSection (Address: 0x18023c550)
  • NtCreateSectionEx (Address: 0x18023d318)
  • NtCreateSemaphore (Address: 0x18023d050)
  • NtCreateSymbolicLinkObject (Address: 0x18023cf78)
  • NtCreateThreadEx (Address: 0x18023d1e8)
  • NtCreateTimer (Address: 0x18023d078)
  • NtCreateTimer2 (Address: 0x18023d070)
  • NtCreateUserProcess (Address: 0x18023d410)
  • NtCreateWnfStateName (Address: 0x18023c8d0)
  • NtDelayExecution (Address: 0x18023d0f0)
  • NtDeleteKey (Address: 0x18023c520)
  • NtDeleteObjectAuditAlarm (Address: 0x18023cbb0)
  • NtDeletePrivateNamespace (Address: 0x18023c388)
  • NtDeleteValueKey (Address: 0x18023c3e0)
  • NtDeleteWnfStateName (Address: 0x18023c8d8)
  • NtDeviceIoControlFile (Address: 0x18023ca50)
  • NtDuplicateObject (Address: 0x18023c798)
  • NtDuplicateToken (Address: 0x18023cb20)
  • NtEnumerateKey (Address: 0x18023c478)
  • NtEnumerateValueKey (Address: 0x18023c420)
  • NtFilterToken (Address: 0x18023ccf8)
  • NtFlushBuffersFile (Address: 0x18023c210)
  • NtFlushKey (Address: 0x18023d5f0)
  • NtFlushVirtualMemory (Address: 0x18023d338)
  • NtFreeUserPhysicalPages (Address: 0x18023cf10)
  • NtFreeVirtualMemory (Address: 0x18023ced0)
  • NtFsControlFile (Address: 0x18023c168)
  • NtGetCachedSigningLevel (Address: 0x18023ca30)
  • NtGetContextThread (Address: 0x18023d248)
  • NtGetNlsSectionPtr (Address: 0x18023c480)
  • NtGetWriteWatch (Address: 0x18023cee8)
  • NtImpersonateAnonymousToken (Address: 0x18023cce8)
  • NtIsProcessInJob (Address: 0x18023d568)
  • NtLoadEnclaveData (Address: 0x18023cf90)
  • NtLoadKey (Address: 0x18023d618)
  • NtLoadKeyEx (Address: 0x18023c800)
  • NtLockFile (Address: 0x18023cfe0)
  • NtLockVirtualMemory (Address: 0x18023ce78)
  • NtManagePartition (Address: 0x18023cf28)
  • NtMapUserPhysicalPages (Address: 0x18023cf18)
  • NtMapViewOfSection (Address: 0x18023c560)
  • NtMapViewOfSectionEx (Address: 0x18023d330)
  • NtNotifyChangeDirectoryFile (Address: 0x18023d4a8)
  • NtNotifyChangeDirectoryFileEx (Address: 0x18023c190)
  • NtNotifyChangeKey (Address: 0x18023c570)
  • NtNotifyChangeMultipleKeys (Address: 0x18023d610)
  • NtOpenDirectoryObject (Address: 0x18023cf68)
  • NtOpenEvent (Address: 0x18023cee0)
  • NtOpenFile (Address: 0x18023c0d8)
  • NtOpenKey (Address: 0x18023c1c0)
  • NtOpenKeyEx (Address: 0x18023d638)
  • NtOpenKeyTransactedEx (Address: 0x18023d648)
  • NtOpenMutant (Address: 0x18023c270)
  • NtOpenObjectAuditAlarm (Address: 0x18023cb98)
  • NtOpenPrivateNamespace (Address: 0x18023c028)
  • NtOpenProcess (Address: 0x18023d148)
  • NtOpenProcessToken (Address: 0x18023cb48)
  • NtOpenProcessTokenEx (Address: 0x18023c890)
  • NtOpenSection (Address: 0x18023d328)
  • NtOpenSemaphore (Address: 0x18023d058)
  • NtOpenSymbolicLinkObject (Address: 0x18023c600)
  • NtOpenThread (Address: 0x18023d218)
  • NtOpenThreadToken (Address: 0x18023cb50)
  • NtOpenTimer (Address: 0x18023d080)
  • NtPrivilegeCheck (Address: 0x18023cb70)
  • NtPrivilegedServiceAuditAlarm (Address: 0x18023cbb8)
  • NtPrivilegeObjectAuditAlarm (Address: 0x18023cba0)
  • NtProtectVirtualMemory (Address: 0x18023ceb0)
  • NtPulseEvent (Address: 0x18023d048)
  • NtQueryAttributesFile (Address: 0x18023d430)
  • NtQueryAuxiliaryCounterFrequency (Address: 0x18023d1d8)
  • NtQueryDefaultLocale (Address: 0x18023c568)
  • NtQueryDirectoryFile (Address: 0x18023c2c0)
  • NtQueryDirectoryFileEx (Address: 0x18023d4a0)
  • NtQueryDirectoryObject (Address: 0x18023d420)
  • NtQueryEaFile (Address: 0x18023c1f8)
  • NtQueryEvent (Address: 0x18023c7c0)
  • NtQueryFullAttributesFile (Address: 0x18023d438)
  • NtQueryInformationFile (Address: 0x18023c0b0)
  • NtQueryInformationJobObject (Address: 0x18023d5b0)
  • NtQueryInformationProcess (Address: 0x18023c758)
  • NtQueryInformationThread (Address: 0x18023d220)
  • NtQueryInformationToken (Address: 0x18023c578)
  • NtQueryInstallUILanguage (Address: 0x18023c448)
  • NtQueryKey (Address: 0x18023c7d8)
  • NtQueryLicenseValue (Address: 0x18023c5c0)
  • NtQueryMultipleValueKey (Address: 0x18023c6c8)
  • NtQueryObject (Address: 0x18023cf70)
  • NtQuerySecurityAttributesToken (Address: 0x18023c9e8)
  • NtQuerySecurityObject (Address: 0x18023c0d0)
  • NtQuerySymbolicLinkObject (Address: 0x18023c608)
  • NtQuerySystemInformation (Address: 0x18023c1a8)
  • NtQuerySystemInformationEx (Address: 0x18023d388)
  • NtQueryValueKey (Address: 0x18023c268)
  • NtQueryVirtualMemory (Address: 0x18023c888)
  • NtQueryVolumeInformationFile (Address: 0x18023c170)
  • NtQueryWnfStateData (Address: 0x18023c130)
  • NtQueueApcThreadEx2 (Address: 0x18023d298)
  • NtRaiseException (Address: 0x18023d5b8)
  • NtRaiseHardError (Address: 0x18023d3b8)
  • NtReadFile (Address: 0x18023ca98)
  • NtReadFileScatter (Address: 0x18023d018)
  • NtReadVirtualMemory (Address: 0x18023ce88)
  • NtReleaseMutant (Address: 0x18023c288)
  • NtReleaseSemaphore (Address: 0x18023d060)
  • NtRemoveIoCompletion (Address: 0x18023d368)
  • NtRemoveIoCompletionEx (Address: 0x18023d370)
  • NtRemoveProcessDebug (Address: 0x18023d3f8)
  • NtResetEvent (Address: 0x18023c7a8)
  • NtResetWriteWatch (Address: 0x18023cef0)
  • NtRestoreKey (Address: 0x18023d630)
  • NtResumeThread (Address: 0x18023d200)
  • NtSaveKeyEx (Address: 0x18023d628)
  • NtSetCachedSigningLevel (Address: 0x18023cd30)
  • NtSetContextThread (Address: 0x18023d250)
  • NtSetDefaultLocale (Address: 0x18023c3c0)
  • NtSetEvent (Address: 0x18023d038)
  • NtSetInformationFile (Address: 0x18023c140)
  • NtSetInformationKey (Address: 0x18023d640)
  • NtSetInformationObject (Address: 0x18023d180)
  • NtSetInformationProcess (Address: 0x18023c300)
  • NtSetInformationThread (Address: 0x18023cce0)
  • NtSetInformationToken (Address: 0x18023cb58)
  • NtSetInformationVirtualMemory (Address: 0x18023cef8)
  • NtSetIoCompletion (Address: 0x18023d360)
  • NtSetSecurityObject (Address: 0x18023c948)
  • NtSetSystemInformation (Address: 0x18023cad8)
  • NtSetSystemTime (Address: 0x18023d1a0)
  • NtSetTimerEx (Address: 0x18023d088)
  • NtSetValueKey (Address: 0x18023c2b0)
  • NtSignalAndWaitForSingleObject (Address: 0x18023d0d0)
  • NtSuspendThread (Address: 0x18023d240)
  • NtTerminateEnclave (Address: 0x18023cfb0)
  • NtTerminateProcess (Address: 0x18023c770)
  • NtTerminateThread (Address: 0x18023d210)
  • NtUnloadKey (Address: 0x18023d620)
  • NtUnlockFile (Address: 0x18023cfe8)
  • NtUnlockVirtualMemory (Address: 0x18023ce80)
  • NtUnmapViewOfSection (Address: 0x18023c970)
  • NtUnmapViewOfSectionEx (Address: 0x18023d340)
  • NtWaitForMultipleObjects (Address: 0x18023cac8)
  • NtWaitForSingleObject (Address: 0x18023c188)
  • NtWriteFile (Address: 0x18023cfd8)
  • NtWriteFileGather (Address: 0x18023d020)
  • NtWriteVirtualMemory (Address: 0x18023ceb8)
  • NtYieldExecution (Address: 0x18023cae8)
  • PssNtCaptureSnapshot (Address: 0x18023c848)
  • PssNtDuplicateSnapshot (Address: 0x18023c878)
  • PssNtFreeRemoteSnapshot (Address: 0x18023c860)
  • PssNtFreeSnapshot (Address: 0x18023c858)
  • PssNtFreeWalkMarker (Address: 0x18023c880)
  • PssNtQuerySnapshot (Address: 0x18023c868)
  • PssNtValidateDescriptor (Address: 0x18023c850)
  • PssNtWalkSnapshot (Address: 0x18023c870)
  • qsort (Address: 0x18023c428)
  • RtlAbsoluteToSelfRelativeSD (Address: 0x18023ccc8)
  • RtlAcquirePebLock (Address: 0x18023d278)
  • RtlAcquirePrivilege (Address: 0x18023c200)
  • RtlAcquireSRWLockExclusive (Address: 0x18023c740)
  • RtlAcquireSRWLockShared (Address: 0x18023c738)
  • RtlActivateActivationContextEx (Address: 0x18023d1f8)
  • RtlActivateActivationContextUnsafeFast (Address: 0x18023cff0)
  • RtlAddAccessAllowedAce (Address: 0x18023cc00)
  • RtlAddAccessAllowedAceEx (Address: 0x18023c918)
  • RtlAddAccessAllowedObjectAce (Address: 0x18023cc40)
  • RtlAddAccessDeniedAce (Address: 0x18023cc20)
  • RtlAddAccessDeniedAceEx (Address: 0x18023cc28)
  • RtlAddAccessDeniedObjectAce (Address: 0x18023cc48)
  • RtlAddAce (Address: 0x18023c920)
  • RtlAddAuditAccessAce (Address: 0x18023cc30)
  • RtlAddAuditAccessAceEx (Address: 0x18023cc38)
  • RtlAddAuditAccessObjectAce (Address: 0x18023cc50)
  • RtlAddMandatoryAce (Address: 0x18023cc08)
  • RtlAddResourceAttributeAce (Address: 0x18023cc10)
  • RtlAddScopedPolicyIDAce (Address: 0x18023cc18)
  • RtlAddSIDToBoundaryDescriptor (Address: 0x18023c030)
  • RtlAllocateActivationContextStack (Address: 0x18023d1f0)
  • RtlAllocateAndInitializeSid (Address: 0x18023c960)
  • RtlAllocateHandle (Address: 0x18023d450)
  • RtlAllocateHeap (Address: 0x18023d608)
  • RtlAnsiCharToUnicodeChar (Address: 0x18023d508)
  • RtlAnsiStringToUnicodeString (Address: 0x18023c048)
  • RtlAppendUnicodeStringToString (Address: 0x18023c528)
  • RtlAppendUnicodeToString (Address: 0x18023c538)
  • RtlAreAllAccessesGranted (Address: 0x18023cbd0)
  • RtlAreAnyAccessesGranted (Address: 0x18023cbd8)
  • RtlAreBitsSet (Address: 0x18023d288)
  • RtlBarrier (Address: 0x18023d0b8)
  • RtlCapabilityCheck (Address: 0x18023c7c8)
  • RtlCaptureContext (Address: 0x18023c390)
  • RtlCaptureStackBackTrace (Address: 0x18023d230)
  • RtlCharToInteger (Address: 0x18023d5e8)
  • RtlCheckTokenCapability (Address: 0x18023cd00)
  • RtlCheckTokenMembershipEx (Address: 0x18023c7b0)
  • RtlCleanUpTEBLangLists (Address: 0x18023d588)
  • RtlClearBits (Address: 0x18023d290)
  • RtlCompactHeap (Address: 0x18023d540)
  • RtlCompareMemory (Address: 0x18023d428)
  • RtlCompareUnicodeString (Address: 0x18023c768)
  • RtlCompareUnicodeStrings (Address: 0x18023ca88)
  • RtlConvertSidToUnicodeString (Address: 0x18023c690)
  • RtlConvertToAutoInheritSecurityObject (Address: 0x18023cc90)
  • RtlCopyContext (Address: 0x18023c2e8)
  • RtlCopySid (Address: 0x18023c9d0)
  • RtlCopyUnicodeString (Address: 0x18023c540)
  • RtlCreateAcl (Address: 0x18023c910)
  • RtlCreateBoundaryDescriptor (Address: 0x18023c760)
  • RtlCreateEnvironmentEx (Address: 0x18023d3f0)
  • RtlCreateHeap (Address: 0x18023d518)
  • RtlCreateProcessParametersEx (Address: 0x18023caf0)
  • RtlCreateProcessParametersWithTemplate (Address: 0x18023d3d8)
  • RtlCreateSecurityDescriptor (Address: 0x18023c928)
  • RtlCreateTagHeap (Address: 0x18023d578)
  • RtlCreateTimer (Address: 0x18023d0f8)
  • RtlCreateTimerQueue (Address: 0x18023d0e8)
  • RtlCreateUnicodeString (Address: 0x18023c7e0)
  • RtlCreateUnicodeStringFromAsciiz (Address: 0x18023c7d0)
  • RtlCreateUserFiberShadowStack (Address: 0x18023d2d0)
  • RtlCreateUserStack (Address: 0x18023d2c8)
  • RtlCultureNameToLCID (Address: 0x18023c468)
  • RtlCutoverTimeToSystemTime (Address: 0x18023d190)
  • RtlDeactivateActivationContextUnsafeFast (Address: 0x18023cff8)
  • RtlDecodePointer (Address: 0x18023c6f8)
  • RtlDecodeSystemPointer (Address: 0x18023c0e8)
  • RtlDefaultNpAcl (Address: 0x18023cfc0)
  • RtlDelayExecution (Address: 0x18023d270)
  • RtlDeleteAce (Address: 0x18023cbf8)
  • RtlDeleteBoundaryDescriptor (Address: 0x18023c750)
  • RtlDeleteCriticalSection (Address: 0x18023c100)
  • RtlDeleteElementGenericTableAvl (Address: 0x18023c9a8)
  • RtlDeleteSecurityObject (Address: 0x18023ccc0)
  • RtlDeleteTimer (Address: 0x18023d108)
  • RtlDeleteTimerQueueEx (Address: 0x18023d110)
  • RtlDeregisterWaitEx (Address: 0x18023d0e0)
  • RtlDeriveCapabilitySidsFromName (Address: 0x18023c7b8)
  • RtlDestroyEnvironment (Address: 0x18023d300)
  • RtlDestroyHeap (Address: 0x18023d520)
  • RtlDestroyProcessParameters (Address: 0x18023caf8)
  • RtlDetermineDosPathNameType_U (Address: 0x18023c2a0)
  • RtlDllShutdownInProgress (Address: 0x18023c350)
  • RtlDnsHostNameToComputerName (Address: 0x18023d5f8)
  • RtlDosApplyFileIsolationRedirection_Ustr (Address: 0x18023cd38)
  • RtlDosPathNameToNtPathName_U (Address: 0x18023c148)
  • RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x18023c1d8)
  • RtlDosPathNameToRelativeNtPathName_U (Address: 0x18023c068)
  • RtlDosPathNameToRelativeNtPathName_U_WithStatus (Address: 0x18023d310)
  • RtlDosSearchPath_Ustr (Address: 0x18023cd48)
  • RtlDowncaseUnicodeString (Address: 0x18023c950)
  • RtlEncodePointer (Address: 0x18023c700)
  • RtlEnterCriticalSection (Address: 0x18023c110)
  • RtlEnumerateGenericTableAvl (Address: 0x18023ca78)
  • RtlEqualPrefixSid (Address: 0x18023cbc0)
  • RtlEqualSid (Address: 0x18023c0b8)
  • RtlEqualUnicodeString (Address: 0x18023c1a0)
  • RtlExitUserProcess (Address: 0x18023c6d8)
  • RtlExitUserThread (Address: 0x18023cae0)
  • RtlExpandEnvironmentStrings (Address: 0x18023c9d8)
  • RtlExpandEnvironmentStrings_U (Address: 0x18023c548)
  • RtlFindAceByType (Address: 0x18023c260)
  • RtlFindClearBitsAndSet (Address: 0x18023d280)
  • RtlFindMessage (Address: 0x18023d4b0)
  • RtlFirstFreeAce (Address: 0x18023cc58)
  • RtlFlsAlloc (Address: 0x18023d2a8)
  • RtlFlsFree (Address: 0x18023d2c0)
  • RtlFlsGetValue (Address: 0x18023d2b0)
  • RtlFlsSetValue (Address: 0x18023d2b8)
  • RtlFlushSecureMemoryCache (Address: 0x18023ced8)
  • RtlFormatCurrentUserKeyPath (Address: 0x18023c7a0)
  • RtlFormatMessageEx (Address: 0x18023d4c8)
  • RtlFreeActivationContextStack (Address: 0x18023d208)
  • RtlFreeAnsiString (Address: 0x18023c040)
  • RtlFreeHandle (Address: 0x18023d458)
  • RtlFreeHeap (Address: 0x18023c778)
  • RtlFreeSid (Address: 0x18023c8e0)
  • RtlFreeUnicodeString (Address: 0x18023c070)
  • RtlFreeUserFiberShadowStack (Address: 0x18023d2e0)
  • RtlFreeUserStack (Address: 0x18023d2d8)
  • RtlGetAce (Address: 0x18023c1e0)
  • RtlGetActiveActivationContext (Address: 0x18023cd60)
  • RtlGetAppContainerNamedObjectPath (Address: 0x18023d308)
  • RtlGetAppContainerParent (Address: 0x18023c9e0)
  • RtlGetAppContainerSidType (Address: 0x18023c9c8)
  • RtlGetControlSecurityDescriptor (Address: 0x18023c938)
  • RtlGetCurrentDirectory_U (Address: 0x18023d4d8)
  • RtlGetCurrentProcessorNumberEx (Address: 0x18023d380)
  • RtlGetCurrentServiceSessionId (Address: 0x18023cf60)
  • RtlGetCurrentTransaction (Address: 0x18023c208)
  • RtlGetDaclSecurityDescriptor (Address: 0x18023c908)
  • RtlGetDeviceFamilyInfoEnum (Address: 0x18023c320)
  • RtlGetEnabledExtendedFeatures (Address: 0x18023c2d8)
  • RtlGetExePath (Address: 0x18023d400)
  • RtlGetExtendedContextLength2 (Address: 0x18023c310)
  • RtlGetExtendedFeaturesMask (Address: 0x18023c2d0)
  • RtlGetFileMUIPath (Address: 0x18023c4e0)
  • RtlGetFullPathName_U (Address: 0x18023d4f8)
  • RtlGetFullPathName_UEx (Address: 0x18023d4d0)
  • RtlGetFullPathName_UstrEx (Address: 0x18023d408)
  • RtlGetGroupSecurityDescriptor (Address: 0x18023cc80)
  • RtlGetInterruptTimePrecise (Address: 0x18023d1b0)
  • RtlGetLastNtStatus (Address: 0x18023c218)
  • RtlGetLastWin32Error (Address: 0x18023c228)
  • RtlGetLocaleFileMappingAddress (Address: 0x18023c470)
  • RtlGetNativeSystemInformation (Address: 0x18023d3c0)
  • RtlGetNtSystemRoot (Address: 0x18023cac0)
  • RtlGetOwnerSecurityDescriptor (Address: 0x18023c080)
  • RtlGetPersistedStateLocation (Address: 0x18023c2c8)
  • RtlGetProcessHeaps (Address: 0x18023d538)
  • RtlGetProcessPreferredUILanguages (Address: 0x18023c4c8)
  • RtlGetProductInfo (Address: 0x18023ce08)
  • RtlGetSaclSecurityDescriptor (Address: 0x18023cc68)
  • RtlGetSearchPath (Address: 0x18023d4e8)
  • RtlGetSecurityDescriptorRMControl (Address: 0x18023cd10)
  • RtlGetSystemGlobalData (Address: 0x18023d1c8)
  • RtlGetSystemPreferredUILanguages (Address: 0x18023c4b8)
  • RtlGetSystemTimeAndBias (Address: 0x18023d198)
  • RtlGetSystemTimePrecise (Address: 0x18023d1a8)
  • RtlGetThreadErrorMode (Address: 0x18023d348)
  • RtlGetThreadPreferredUILanguages (Address: 0x18023c498)
  • RtlGetUILanguageInfo (Address: 0x18023c4a8)
  • RtlGetUserPreferredUILanguages (Address: 0x18023c4b0)
  • RtlGetVersion (Address: 0x18023ce10)
  • RtlGuardCheckLongJumpTarget (Address: 0x18023d558)
  • RtlGUIDFromString (Address: 0x18023c898)
  • RtlIdentifierAuthoritySid (Address: 0x18023cbc8)
  • RtlIdnToAscii (Address: 0x18023c510)
  • RtlIdnToNameprepUnicode (Address: 0x18023c500)
  • RtlIdnToUnicode (Address: 0x18023c518)
  • RtlImageDirectoryEntryToData (Address: 0x18023ce30)
  • RtlImageNtHeader (Address: 0x18023cad0)
  • RtlImageNtHeaderEx (Address: 0x18023cd50)
  • RtlImpersonateSelf (Address: 0x18023ccd8)
  • RtlInitAnsiString (Address: 0x18023c0a0)
  • RtlInitAnsiStringEx (Address: 0x18023c630)
  • RtlInitBarrier (Address: 0x18023d0c0)
  • RtlInitializeCriticalSection (Address: 0x18023c118)
  • RtlInitializeCriticalSectionAndSpinCount (Address: 0x18023c6e8)
  • RtlInitializeCriticalSectionEx (Address: 0x18023c370)
  • RtlInitializeExtendedContext2 (Address: 0x18023c308)
  • RtlInitializeGenericTableAvl (Address: 0x18023c9a0)
  • RtlInitializeHandleTable (Address: 0x18023d510)
  • RtlInitializeSid (Address: 0x18023c050)
  • RtlInitializeSRWLock (Address: 0x18023c8e8)
  • RtlInitString (Address: 0x18023c828)
  • RtlInitUnicodeString (Address: 0x18023c078)
  • RtlInitUnicodeStringEx (Address: 0x18023c718)
  • RtlInitUTF8String (Address: 0x18023d4b8)
  • RtlInsertElementGenericTableAvl (Address: 0x18023c998)
  • RtlIntegerToChar (Address: 0x18023d500)
  • RtlIntegerToUnicodeString (Address: 0x18023c5d0)
  • RtlIsApiSetImplemented (Address: 0x18023d560)
  • RtlIsCapabilitySid (Address: 0x18023cd28)
  • RtlIsCurrentProcess (Address: 0x18023d168)
  • RtlIsDosDeviceName_U (Address: 0x18023c280)
  • RtlIsMultiSessionSku (Address: 0x18023c3f8)
  • RtlIsMultiUsersInSessionSku (Address: 0x18023c6a8)
  • RtlIsNormalizedString (Address: 0x18023c508)
  • RtlIsPackageSid (Address: 0x18023cd20)
  • RtlIsParentOfChildAppContainer (Address: 0x18023c9f0)
  • RtlIsProcessorFeaturePresent (Address: 0x18023d398)
  • RtlIsStateSeparationEnabled (Address: 0x18023c290)
  • RtlIsValidHandle (Address: 0x18023d470)
  • RtlKnownExceptionFilter (Address: 0x18023d5a8)
  • RtlLCIDToCultureName (Address: 0x18023c438)
  • RtlLcidToLocaleName (Address: 0x18023c400)
  • RtlLeaveCriticalSection (Address: 0x18023c120)
  • RtlLengthRequiredSid (Address: 0x18023c090)
  • RtlLengthSecurityDescriptor (Address: 0x18023c808)
  • RtlLengthSid (Address: 0x18023c9c0)
  • RtlLoadString (Address: 0x18023c530)
  • RtlLocaleNameToLcid (Address: 0x18023c3f0)
  • RtlLocateExtendedFeature (Address: 0x18023c318)
  • RtlLocateLegacyContext (Address: 0x18023c2e0)
  • RtlLockHeap (Address: 0x18023d448)
  • RtlLookupElementGenericTableAvl (Address: 0x18023c9b0)
  • RtlLookupFunctionEntry (Address: 0x18023c398)
  • RtlMakeSelfRelativeSD (Address: 0x18023c810)
  • RtlMapGenericMask (Address: 0x18023cbe0)
  • RtlMultiByteToUnicodeN (Address: 0x18023c0f8)
  • RtlNewSecurityObject (Address: 0x18023cc88)
  • RtlNewSecurityObjectEx (Address: 0x18023cc98)
  • RtlNewSecurityObjectWithMultipleInheritance (Address: 0x18023cca0)
  • RtlNormalizeString (Address: 0x18023c3b0)
  • RtlNtStatusToDosError (Address: 0x18023c248)
  • RtlNtStatusToDosErrorNoTeb (Address: 0x18023c340)
  • RtlOemStringToUnicodeString (Address: 0x18023cf50)
  • RtlOpenCurrentUser (Address: 0x18023c558)
  • RtlpCheckDynamicTimeZoneInformation (Address: 0x18023d1d0)
  • RtlpCreateProcessRegistryInfo (Address: 0x18023c430)
  • RtlPcToFileHeader (Address: 0x18023cdc0)
  • RtlpGetLCIDFromLangInfoNode (Address: 0x18023c418)
  • RtlpGetNameFromLangInfoNode (Address: 0x18023c440)
  • RtlpGetSystemDefaultUILanguage (Address: 0x18023c4f0)
  • RtlpInitializeLangRegistryInfo (Address: 0x18023c458)
  • RtlpIsQualifiedLanguage (Address: 0x18023c460)
  • RtlpLoadMachineUIByPolicy (Address: 0x18023c410)
  • RtlpLoadUserUIByPolicy (Address: 0x18023c408)
  • RtlpMergeSecurityAttributeInformation (Address: 0x18023c230)
  • RtlpMuiFreeLangRegistryInfo (Address: 0x18023c450)
  • RtlpQueryDefaultUILanguage (Address: 0x18023c4c0)
  • RtlPrefixString (Address: 0x18023cfd0)
  • RtlPrefixUnicodeString (Address: 0x18023c730)
  • RtlProcessFlsData (Address: 0x18023d2e8)
  • RtlpTimeFieldsToTime (Address: 0x18023d1c0)
  • RtlpTimeToTimeFields (Address: 0x18023d1b8)
  • RtlPublishWnfStateData (Address: 0x18023c3b8)
  • RtlQueryActivationContextApplicationSettings (Address: 0x18023d4f0)
  • RtlQueryEnvironmentVariable (Address: 0x18023d490)
  • RtlQueryEnvironmentVariable_U (Address: 0x18023d3c8)
  • RtlQueryHeapInformation (Address: 0x18023d528)
  • RtlQueryInformationAcl (Address: 0x18023c1e8)
  • RtlQueryInformationActivationContext (Address: 0x18023c618)
  • RtlQueryPackageClaims (Address: 0x18023c978)
  • RtlQueryPackageIdentityEx (Address: 0x18023c8a0)
  • RtlQueryPerformanceCounter (Address: 0x18023cab0)
  • RtlQueryPerformanceFrequency (Address: 0x18023cb10)
  • RtlQueryProtectedPolicy (Address: 0x18023d390)
  • RtlQueryRegistryValuesEx (Address: 0x18023d2f0)
  • RtlQuerySecurityObject (Address: 0x18023ccb8)
  • RtlQueryWnfStateData (Address: 0x18023c5f0)
  • RtlQueueWorkItem (Address: 0x18023d118)
  • RtlRaiseCustomSystemEventTrigger (Address: 0x18023d590)
  • RtlRaiseException (Address: 0x18023c840)
  • RtlRaiseNoncontinuableException (Address: 0x18023d5c0)
  • RtlRaiseStatus (Address: 0x18023caa0)
  • RtlRandomEx (Address: 0x18023c7f0)
  • RtlReAllocateHeap (Address: 0x18023c6e0)
  • RtlRegisterWait (Address: 0x18023d0d8)
  • RtlReleaseActivationContext (Address: 0x18023c628)
  • RtlReleasePath (Address: 0x18023cd88)
  • RtlReleasePebLock (Address: 0x18023d600)
  • RtlReleasePrivilege (Address: 0x18023c1b8)
  • RtlReleaseRelativeName (Address: 0x18023c088)
  • RtlReleaseSRWLockExclusive (Address: 0x18023c748)
  • RtlReleaseSRWLockShared (Address: 0x18023c728)
  • RtlReportSilentProcessExit (Address: 0x18023d3b0)
  • RtlRestoreThreadPreferredUILanguages (Address: 0x18023c4e8)
  • RtlRunOnceBeginInitialize (Address: 0x18023d098)
  • RtlRunOnceComplete (Address: 0x18023d0a0)
  • RtlRunOnceExecuteOnce (Address: 0x18023c5d8)
  • RtlRunOnceInitialize (Address: 0x18023c790)
  • RtlSelfRelativeToAbsoluteSD (Address: 0x18023ccd0)
  • RtlSelfRelativeToAbsoluteSD2 (Address: 0x18023cd08)
  • RtlSetControlSecurityDescriptor (Address: 0x18023c940)
  • RtlSetCurrentDirectory_U (Address: 0x18023d4e0)
  • RtlSetCurrentTransaction (Address: 0x18023c198)
  • RtlSetDaclSecurityDescriptor (Address: 0x18023c930)
  • RtlSetEnvironmentStrings (Address: 0x18023d480)
  • RtlSetEnvironmentVar (Address: 0x18023d498)
  • RtlSetEnvironmentVariable (Address: 0x18023d488)
  • RtlSetExtendedFeaturesMask (Address: 0x18023c2f0)
  • RtlSetGroupSecurityDescriptor (Address: 0x18023cc78)
  • RtlSetHeapInformation (Address: 0x18023d550)
  • RtlSetInformationAcl (Address: 0x18023cbf0)
  • RtlSetLastWin32Error (Address: 0x18023c180)
  • RtlSetLastWin32ErrorAndNtStatusFromNtStatus (Address: 0x18023c2f8)
  • RtlSetOwnerSecurityDescriptor (Address: 0x18023cc70)
  • RtlSetProcessPreferredUILanguages (Address: 0x18023c4a0)
  • RtlSetProtectedPolicy (Address: 0x18023c5f8)
  • RtlSetSaclSecurityDescriptor (Address: 0x18023ca28)
  • RtlSetSecurityDescriptorRMControl (Address: 0x18023cd18)
  • RtlSetSecurityObject (Address: 0x18023cca8)
  • RtlSetSecurityObjectEx (Address: 0x18023ccb0)
  • RtlSetThreadErrorMode (Address: 0x18023d350)
  • RtlSetThreadPreferredUILanguages (Address: 0x18023c4d0)
  • RtlSetThreadPreferredUILanguages2 (Address: 0x18023c4d8)
  • RtlSetUnhandledExceptionFilter (Address: 0x18023d580)
  • RtlSetUserValueHeap (Address: 0x18023d460)
  • RtlSizeHeap (Address: 0x18023c708)
  • RtlSleepConditionVariableCS (Address: 0x18023d0a8)
  • RtlSleepConditionVariableSRW (Address: 0x18023d0b0)
  • RtlStringFromGUID (Address: 0x18023c7f8)
  • RtlStringFromGUIDEx (Address: 0x18023c8a8)
  • RtlSubAuthorityCountSid (Address: 0x18023c698)
  • RtlSubAuthoritySid (Address: 0x18023c060)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x18023c128)
  • RtlTimeFieldsToTime (Address: 0x18023c580)
  • RtlTimeToTimeFields (Address: 0x18023d188)
  • RtlTryAcquirePebLock (Address: 0x18023caa8)
  • RtlTryAcquireSRWLockExclusive (Address: 0x18023cb18)
  • RtlUnhandledExceptionFilter (Address: 0x18023c3a8)
  • RtlUnicodeStringToAnsiString (Address: 0x18023c098)
  • RtlUnicodeStringToInteger (Address: 0x18023c3e8)
  • RtlUnicodeStringToOemString (Address: 0x18023c2b8)
  • RtlUnicodeToMultiByteN (Address: 0x18023c0f0)
  • RtlUnicodeToMultiByteSize (Address: 0x18023c610)
  • RtlUnicodeToOemN (Address: 0x18023d478)
  • RtlUnicodeToUTF8N (Address: 0x18023c5b0)
  • RtlUnlockHeap (Address: 0x18023d468)
  • RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x18023c138)
  • RtlUnsubscribeWnfStateChangeNotification (Address: 0x18023cf20)
  • RtlUpcaseUnicodeChar (Address: 0x18023c108)
  • RtlUpcaseUnicodeString (Address: 0x18023c958)
  • RtlUpdateTimer (Address: 0x18023d100)
  • RtlUTF8StringToUnicodeString (Address: 0x18023d4c0)
  • RtlUTF8ToUnicodeN (Address: 0x18023c5a8)
  • RtlValidAcl (Address: 0x18023cbe8)
  • RtlValidateHeap (Address: 0x18023d530)
  • RtlValidRelativeSecurityDescriptor (Address: 0x18023cc60)
  • RtlValidSecurityDescriptor (Address: 0x18023c7e8)
  • RtlValidSid (Address: 0x18023c9b8)
  • RtlVerifyVersionInfo (Address: 0x18023c1f0)
  • RtlVirtualUnwind (Address: 0x18023c3a0)
  • RtlWaitOnAddress (Address: 0x18023d0c8)
  • RtlWakeAllConditionVariable (Address: 0x18023d5e0)
  • RtlWalkHeap (Address: 0x18023d548)
  • RtlWow64EnableFsRedirection (Address: 0x18023d028)
  • RtlWow64EnableFsRedirectionEx (Address: 0x18023d030)
  • RtlWow64GetProcessMachines (Address: 0x18023d3a0)
  • RtlWow64GetSharedInfoProcess (Address: 0x18023d170)
  • RtlWow64GetThreadContext (Address: 0x18023d258)
  • RtlWow64IsWowGuestMachineSupported (Address: 0x18023d3a8)
  • RtlWow64PopCrossProcessWorkFromFreeList (Address: 0x18023ce90)
  • RtlWow64PushCrossProcessWorkOntoFreeList (Address: 0x18023cea8)
  • RtlWow64PushCrossProcessWorkOntoWorkList (Address: 0x18023cea0)
  • RtlWow64RequestCrossProcessHeavyFlush (Address: 0x18023ce98)
  • RtlWow64SetThreadContext (Address: 0x18023d260)
  • RtlWow64SuspendThread (Address: 0x18023d268)
  • RtlxAnsiStringToUnicodeSize (Address: 0x18023cf30)
  • RtlxOemStringToUnicodeSize (Address: 0x18023cf38)
  • RtlxUnicodeStringToAnsiSize (Address: 0x18023cf48)
  • RtlxUnicodeStringToOemSize (Address: 0x18023cf40)
  • SbSelectProcedure (Address: 0x18023c0c0)
  • sqrt (Address: 0x18023c5e8)
  • strchr (Address: 0x18023ca90)
  • strncat (Address: 0x18023c830)
  • strncat_s (Address: 0x18023cd78)
  • strncmp (Address: 0x18023c990)
  • strtoul (Address: 0x18023cb00)
  • swprintf_s (Address: 0x18023c160)
  • toupper (Address: 0x18023d440)
  • TpAllocCleanupGroup (Address: 0x18023c658)
  • TpAllocIoCompletion (Address: 0x18023c640)
  • TpAllocPool (Address: 0x18023c670)
  • TpAllocTimer (Address: 0x18023c638)
  • TpAllocWait (Address: 0x18023c688)
  • TpAllocWork (Address: 0x18023c648)
  • TpCallbackMayRunLong (Address: 0x18023c650)
  • TpCancelAsyncIoOperation (Address: 0x18023ca60)
  • TpCaptureCaller (Address: 0x18023d228)
  • TpCheckTerminateWorker (Address: 0x18023d238)
  • TpPostWork (Address: 0x18023ca20)
  • TpQueryPoolStackInformation (Address: 0x18023c668)
  • TpReleaseIoCompletion (Address: 0x18023ca70)
  • TpReleaseTimer (Address: 0x18023c368)
  • TpReleaseWait (Address: 0x18023c1c8)
  • TpReleaseWork (Address: 0x18023ca18)
  • TpSetPoolMinThreads (Address: 0x18023c678)
  • TpSetPoolStackInformation (Address: 0x18023c680)
  • TpSetTimer (Address: 0x18023c348)
  • TpSetWait (Address: 0x18023c1b0)
  • TpSimpleTryPost (Address: 0x18023c660)
  • TpStartAsyncIoOperation (Address: 0x18023ca80)
  • TpWaitForIoCompletion (Address: 0x18023ca68)
  • TpWaitForTimer (Address: 0x18023c360)
  • TpWaitForWait (Address: 0x18023c250)
  • VerSetConditionMask (Address: 0x18023c238)
  • vswprintf_s (Address: 0x18023c6f0)
  • wcscat_s (Address: 0x18023c158)
  • wcschr (Address: 0x18023c330)
  • wcscmp (Address: 0x18023d680)
  • wcscpy_s (Address: 0x18023c150)
  • wcscspn (Address: 0x18023cab8)
  • wcsncmp (Address: 0x18023c338)
  • wcsncpy_s (Address: 0x18023c6d0)
  • wcsnlen (Address: 0x18023cf58)
  • wcspbrk (Address: 0x18023c3d8)
  • wcsrchr (Address: 0x18023c258)
  • wcsspn (Address: 0x18023c968)
  • wcsstr (Address: 0x18023c980)
  • wcstoul (Address: 0x18023ce70)
  • WinSqmAddToStreamEx (Address: 0x18023ca08)
  • WinSqmEndSession (Address: 0x18023ca10)
  • WinSqmIncrementDWORD (Address: 0x18023c8f0)
  • WinSqmIsOptedIn (Address: 0x18023c9f8)
  • WinSqmSetDWORD (Address: 0x18023c8f8)
  • WinSqmSetString (Address: 0x18023c900)
  • WinSqmStartSession (Address: 0x18023ca00)
  • ZwClose (Address: 0x18023c6b8)
  • ZwCreateKey (Address: 0x18023ca40)
  • ZwOpenKey (Address: 0x18023c6c0)
  • ZwQueryInformationToken (Address: 0x18023c6a0)
  • ZwQueryValueKey (Address: 0x18023c6b0)
  • ZwQueryWnfStateData (Address: 0x18023c1d0)
  • ZwQueryWnfStateNameInformation (Address: 0x18023d598)
  • ZwSetValueKey (Address: 0x18023ca48)
  • ZwUpdateWnfStateData (Address: 0x18023d5a0)