KernelBase.dll
Description: Windows NT BASE API Client DLL
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.20348.4294
Architecture: 64-bit
Operating System: Windows NT
SHA256: a5025e8bd3ac8bc67b9ee747f0c45bee
File Size: 3.5 MB
Uploaded At: Feb. 6, 2026, 10:09 p.m.
Views: 14
Exported Functions
- PackageSidFromProductId (Ordinal: 1, Address: 0x116120)
- AccessCheck (Ordinal: 2, Address: 0x72d80)
- AccessCheckAndAuditAlarmW (Ordinal: 3, Address: 0x806c0)
- AccessCheckByType (Ordinal: 4, Address: 0x76530)
- AccessCheckByTypeAndAuditAlarmW (Ordinal: 5, Address: 0x13aab0)
- AccessCheckByTypeResultList (Ordinal: 6, Address: 0x13abf0)
- AccessCheckByTypeResultListAndAuditAlarmByHandleW (Ordinal: 7, Address: 0x13acb0)
- AccessCheckByTypeResultListAndAuditAlarmW (Ordinal: 8, Address: 0x13ae50)
- AcquireSRWLockExclusive (Ordinal: 9, Address: 0x312385)
- AcquireSRWLockShared (Ordinal: 10, Address: 0x3123bb)
- AcquireStateLock (Ordinal: 11, Address: 0x2b80)
- ActivateActCtx (Ordinal: 12, Address: 0x81950)
- AddAccessAllowedAce (Ordinal: 13, Address: 0x82070)
- AddAccessAllowedAceEx (Ordinal: 14, Address: 0x272a0)
- AddAccessAllowedObjectAce (Ordinal: 15, Address: 0x13afe0)
- AddAccessDeniedAce (Ordinal: 16, Address: 0xb4810)
- AddAccessDeniedAceEx (Ordinal: 17, Address: 0x13b050)
- AddAccessDeniedObjectAce (Ordinal: 18, Address: 0x13b0b0)
- AddAce (Ordinal: 19, Address: 0x7bdd0)
- AddAuditAccessAce (Ordinal: 20, Address: 0x13b120)
- AddAuditAccessAceEx (Ordinal: 21, Address: 0x13b170)
- AddAuditAccessObjectAce (Ordinal: 22, Address: 0x13b1e0)
- AddConsoleAliasA (Ordinal: 23, Address: 0x132800)
- AddConsoleAliasW (Ordinal: 24, Address: 0x132980)
- AddDependencyToProcessPackageGraph (Ordinal: 25, Address: 0x1183e0)
- AddDllDirectory (Ordinal: 26, Address: 0x958f0)
- AddExtensionProgId (Ordinal: 27, Address: 0x11d7d0)
- AddMandatoryAce (Ordinal: 28, Address: 0x92b50)
- AddPackageDependency (Ordinal: 29, Address: 0x118a40)
- AddRefActCtx (Ordinal: 30, Address: 0x89130)
- AddResourceAttributeAce (Ordinal: 31, Address: 0x13b270)
- AddSIDToBoundaryDescriptor (Ordinal: 32, Address: 0x92220)
- AddScopedPolicyIDAce (Ordinal: 33, Address: 0x13b2d0)
- AddVectoredContinueHandler (Ordinal: 34, Address: 0x3125c0)
- AddVectoredExceptionHandler (Ordinal: 35, Address: 0x312600)
- AdjustTokenGroups (Ordinal: 36, Address: 0x91260)
- AdjustTokenPrivileges (Ordinal: 37, Address: 0x84ac0)
- AllocConsole (Ordinal: 38, Address: 0x1334f0)
- AllocateAndInitializeSid (Ordinal: 39, Address: 0x73600)
- AllocateLocallyUniqueId (Ordinal: 40, Address: 0x93450)
- AllocateUserPhysicalPages (Ordinal: 41, Address: 0x13d2a0)
- AllocateUserPhysicalPages2 (Ordinal: 42, Address: 0x13d2e0)
- AllocateUserPhysicalPagesNuma (Ordinal: 43, Address: 0x13d360)
- AppContainerDeriveSidFromMoniker (Ordinal: 44, Address: 0x273c0)
- AppContainerFreeMemory (Ordinal: 45, Address: 0x260b0)
- AppContainerLookupDisplayNameMrtReference (Ordinal: 46, Address: 0xfbf0)
- AppContainerLookupMoniker (Ordinal: 47, Address: 0x28e20)
- AppContainerRegisterSid (Ordinal: 48, Address: 0xb210)
- AppContainerUnregisterSid (Ordinal: 49, Address: 0x75150)
- AppPolicyGetClrCompat (Ordinal: 50, Address: 0x88030)
- AppPolicyGetCreateFileAccess (Ordinal: 51, Address: 0x11f3a0)
- AppPolicyGetLifecycleManagement (Ordinal: 52, Address: 0x6cc0)
- AppPolicyGetMediaFoundationCodecLoading (Ordinal: 53, Address: 0x87f60)
- AppPolicyGetProcessTerminationMethod (Ordinal: 54, Address: 0x880b0)
- AppPolicyGetShowDeveloperDiagnostic (Ordinal: 55, Address: 0x11f410)
- AppPolicyGetThreadInitializationType (Ordinal: 56, Address: 0x87fc0)
- AppPolicyGetWindowingModel (Ordinal: 57, Address: 0x87ef0)
- AppXFreeMemory (Ordinal: 58, Address: 0x260b0)
- AppXGetApplicationData (Ordinal: 59, Address: 0x125ab0)
- AppXGetDevelopmentMode (Ordinal: 60, Address: 0x125cc0)
- AppXGetOSMaxVersionTested (Ordinal: 61, Address: 0x10a80)
- AppXGetOSMinVersion (Ordinal: 62, Address: 0x125de0)
- AppXGetPackageCapabilities (Ordinal: 63, Address: 0x260f0)
- AppXGetPackageSid (Ordinal: 64, Address: 0x25f90)
- AppXLookupDisplayName (Ordinal: 65, Address: 0x125df0)
- AppXLookupMoniker (Ordinal: 66, Address: 0x125e80)
- AppXPostSuccessExtension (Ordinal: 67, Address: 0x8fcc0)
- AppXPreCreationExtension (Ordinal: 68, Address: 0x7fa0)
- AppXReleaseAppXContext (Ordinal: 69, Address: 0x8ffa0)
- AppXUpdatePackageCapabilities (Ordinal: 70, Address: 0x1260d0)
- ApplicationUserModelIdFromProductId (Ordinal: 71, Address: 0x11f480)
- AreAllAccessesGranted (Ordinal: 72, Address: 0x4e00)
- AreAnyAccessesGranted (Ordinal: 73, Address: 0x13b310)
- AreFileApisANSI (Ordinal: 74, Address: 0x90d60)
- AreShortNamesEnabled (Ordinal: 75, Address: 0x10a1b0)
- AreThereVisibleLogoffScriptsInternal (Ordinal: 76, Address: 0xf0420)
- AreThereVisibleShutdownScriptsInternal (Ordinal: 77, Address: 0xf0470)
- ArmFeatureUsageSubscriberFlushNotification (Ordinal: 78, Address: 0xbec90)
- AttachConsole (Ordinal: 79, Address: 0x133590)
- BaseCheckAppcompatCache (Ordinal: 80, Address: 0xf13a0)
- BaseCheckAppcompatCacheEx (Ordinal: 81, Address: 0xf1410)
- BaseCleanupAppcompatCacheSupport (Ordinal: 82, Address: 0xf14c0)
- BaseDllFreeResourceId (Ordinal: 83, Address: 0x28eb0)
- BaseDllMapResourceIdW (Ordinal: 84, Address: 0x2bf10)
- BaseDumpAppcompatCache (Ordinal: 85, Address: 0xf1500)
- BaseFlushAppcompatCache (Ordinal: 86, Address: 0xf1530)
- BaseFormatObjectAttributes (Ordinal: 87, Address: 0x4c7a0)
- BaseFreeAppCompatDataForProcess (Ordinal: 88, Address: 0x95530)
- BaseGetConsoleReference (Ordinal: 89, Address: 0x133630)
- BaseGetNamedObjectDirectory (Ordinal: 90, Address: 0x4b750)
- BaseInitAppcompatCacheSupport (Ordinal: 91, Address: 0xb2e10)
- BaseIsAppcompatInfrastructureDisabled (Ordinal: 92, Address: 0x944a0)
- BaseMarkFileForDelete (Ordinal: 93, Address: 0xf1ce0)
- BaseReadAppCompatDataForProcess (Ordinal: 94, Address: 0x95010)
- BaseUpdateAppcompatCache (Ordinal: 95, Address: 0xf1560)
- BasepAdjustObjectAttributesForPrivateNamespace (Ordinal: 96, Address: 0x6bd40)
- BasepCopyFileCallback (Ordinal: 97, Address: 0x57e30)
- BasepCopyFileExW (Ordinal: 98, Address: 0x6c530)
- BasepNotifyTrackingService (Ordinal: 99, Address: 0x54c30)
- Beep (Ordinal: 100, Address: 0x13e5d0)
- CLOSE_LOCAL_HANDLE_INTERNAL (Ordinal: 101, Address: 0x4afc0)
- CallEnclave (Ordinal: 102, Address: 0xc7dd0)
- CallNamedPipeW (Ordinal: 103, Address: 0x5cb0)
- CallbackMayRunLong (Ordinal: 104, Address: 0x81d20)
- CancelIo (Ordinal: 105, Address: 0x93ca0)
- CancelIoEx (Ordinal: 106, Address: 0x8cde0)
- CancelSynchronousIo (Ordinal: 107, Address: 0x13ef60)
- CancelThreadpoolIo (Ordinal: 108, Address: 0x312d5c)
- CancelWaitableTimer (Ordinal: 109, Address: 0x7aca0)
- CeipIsOptedIn (Ordinal: 110, Address: 0xf7880)
- ChangeTimerQueueTimer (Ordinal: 111, Address: 0x90b10)
- CharLowerA (Ordinal: 112, Address: 0x362a0)
- CharLowerBuffA (Ordinal: 113, Address: 0x94c40)
- CharLowerBuffW (Ordinal: 114, Address: 0x35ca0)
- CharLowerW (Ordinal: 115, Address: 0x363a0)
- CharNextA (Ordinal: 116, Address: 0x686d0)
- CharNextExA (Ordinal: 117, Address: 0xf1760)
- CharNextW (Ordinal: 118, Address: 0x69550)
- CharPrevA (Ordinal: 119, Address: 0x69100)
- CharPrevExA (Ordinal: 120, Address: 0xf17a0)
- CharPrevW (Ordinal: 121, Address: 0x671b0)
- CharUpperA (Ordinal: 122, Address: 0x7d480)
- CharUpperBuffA (Ordinal: 123, Address: 0x7d4d0)
- CharUpperBuffW (Ordinal: 124, Address: 0x35b40)
- CharUpperW (Ordinal: 125, Address: 0x36420)
- CheckAllowDecryptedRemoteDestinationPolicy (Ordinal: 126, Address: 0xf4220)
- CheckGroupPolicyEnabled (Ordinal: 127, Address: 0x65c0)
- CheckIfStateChangeNotificationExists (Ordinal: 128, Address: 0x1117e0)
- CheckIsMSIXPackage (Ordinal: 129, Address: 0x13920)
- CheckRemoteDebuggerPresent (Ordinal: 130, Address: 0x94a90)
- CheckTokenCapability (Ordinal: 131, Address: 0x82250)
- CheckTokenMembership (Ordinal: 132, Address: 0x76700)
- CheckTokenMembershipEx (Ordinal: 133, Address: 0x87990)
- ChrCmpIA (Ordinal: 134, Address: 0x685d0)
- ChrCmpIW (Ordinal: 135, Address: 0x31e10)
- ClearCommBreak (Ordinal: 136, Address: 0x13f940)
- ClearCommError (Ordinal: 137, Address: 0x13f960)
- CloseHandle (Ordinal: 138, Address: 0x42b50)
- ClosePackageInfo (Ordinal: 139, Address: 0x244b0)
- ClosePrivateNamespace (Ordinal: 140, Address: 0x8da10)
- ClosePseudoConsole (Ordinal: 141, Address: 0x133960)
- CloseState (Ordinal: 142, Address: 0x7acd0)
- CloseStateAtom (Ordinal: 143, Address: 0x7c260)
- CloseStateChangeNotification (Ordinal: 144, Address: 0x922e0)
- CloseStateContainer (Ordinal: 145, Address: 0x4a380)
- CloseStateLock (Ordinal: 146, Address: 0x2b10)
- CloseThreadpool (Ordinal: 147, Address: 0x313012)
- CloseThreadpoolCleanupGroup (Ordinal: 148, Address: 0x313042)
- CloseThreadpoolCleanupGroupMembers (Ordinal: 149, Address: 0x313081)
- CloseThreadpoolIo (Ordinal: 150, Address: 0x3130b6)
- CloseThreadpoolTimer (Ordinal: 151, Address: 0x3130e7)
- CloseThreadpoolWait (Ordinal: 152, Address: 0x313110)
- CloseThreadpoolWork (Ordinal: 153, Address: 0x313138)
- CommitStateAtom (Ordinal: 154, Address: 0x1118d0)
- CompareFileTime (Ordinal: 155, Address: 0x766b0)
- CompareObjectHandles (Ordinal: 156, Address: 0x1416b0)
- CompareStringA (Ordinal: 157, Address: 0x372f0)
- CompareStringEx (Ordinal: 158, Address: 0x389d0)
- CompareStringOrdinal (Ordinal: 159, Address: 0x22a40)
- CompareStringW (Ordinal: 160, Address: 0x38760)
- ConnectNamedPipe (Ordinal: 161, Address: 0x84a10)
- ContinueDebugEvent (Ordinal: 162, Address: 0x13f3d0)
- ConvertAuxiliaryCounterToPerformanceCounter (Ordinal: 163, Address: 0x1416f0)
- ConvertDefaultLocale (Ordinal: 164, Address: 0x933e0)
- ConvertFiberToThread (Ordinal: 165, Address: 0x83b90)
- ConvertPerformanceCounterToAuxiliaryCounter (Ordinal: 166, Address: 0x141760)
- ConvertThreadToFiber (Ordinal: 167, Address: 0x7cdd0)
- ConvertThreadToFiberEx (Ordinal: 168, Address: 0x7cde0)
- ConvertToAutoInheritPrivateObjectSecurity (Ordinal: 169, Address: 0x13b340)
- CopyContext (Ordinal: 170, Address: 0xf7a40)
- CopyFile2 (Ordinal: 171, Address: 0x6c1f0)
- CopyFileExW (Ordinal: 172, Address: 0x6c3e0)
- CopyFileW (Ordinal: 173, Address: 0x6c3b0)
- CopyMemoryNonTemporal (Ordinal: 174, Address: 0x313302)
- CopySid (Ordinal: 175, Address: 0x21b10)
- CouldMultiUserAppsBehaviorBePossibleForPackage (Ordinal: 176, Address: 0x8e250)
- CreateActCtxW (Ordinal: 177, Address: 0x8f500)
- CreateAppContainerToken (Ordinal: 178, Address: 0x14e90)
- CreateBoundaryDescriptorW (Ordinal: 179, Address: 0x8ff50)
- CreateConsoleScreenBuffer (Ordinal: 180, Address: 0x134130)
- CreateDirectoryA (Ordinal: 181, Address: 0x93390)
- CreateDirectoryExW (Ordinal: 182, Address: 0xf5a20)
- CreateDirectoryW (Ordinal: 183, Address: 0x3fe00)
- CreateEnclave (Ordinal: 184, Address: 0x13e710)
- CreateEventA (Ordinal: 185, Address: 0x57b10)
- CreateEventExA (Ordinal: 186, Address: 0x57c90)
- CreateEventExW (Ordinal: 187, Address: 0x4f000)
- CreateEventW (Ordinal: 188, Address: 0x6a250)
- CreateFiber (Ordinal: 189, Address: 0x80fb0)
- CreateFiberEx (Ordinal: 190, Address: 0x80fe0)
- CreateFile2 (Ordinal: 191, Address: 0x897a0)
- CreateFileA (Ordinal: 192, Address: 0x42e40)
- CreateFileMapping2 (Ordinal: 193, Address: 0x142ba0)
- CreateFileMappingFromApp (Ordinal: 194, Address: 0x142d50)
- CreateFileMappingNumaW (Ordinal: 195, Address: 0x4c5a0)
- CreateFileMappingW (Ordinal: 196, Address: 0x4c570)
- CreateFileW (Ordinal: 197, Address: 0x42f40)
- CreateHardLinkA (Ordinal: 198, Address: 0xf78b0)
- CreateHardLinkW (Ordinal: 199, Address: 0x92770)
- CreateIoCompletionPort (Ordinal: 200, Address: 0x8cb10)
- CreateMemoryResourceNotification (Ordinal: 201, Address: 0x8e860)
- CreateMutexA (Ordinal: 202, Address: 0x88250)
- CreateMutexExA (Ordinal: 203, Address: 0x88280)
- CreateMutexExW (Ordinal: 204, Address: 0x4b5b0)
- CreateMutexW (Ordinal: 205, Address: 0x4b580)
- CreateNamedPipeW (Ordinal: 206, Address: 0x88330)
- CreatePackageDependency (Ordinal: 207, Address: 0x118e90)
- CreatePipe (Ordinal: 208, Address: 0x84ea0)
- CreatePrivateNamespaceW (Ordinal: 209, Address: 0x86dc0)
- CreatePrivateObjectSecurity (Ordinal: 210, Address: 0x6da0)
- CreatePrivateObjectSecurityEx (Ordinal: 211, Address: 0x819f0)
- CreatePrivateObjectSecurityWithMultipleInheritance (Ordinal: 212, Address: 0xb1050)
- CreateProcessA (Ordinal: 213, Address: 0x7dfb0)
- CreateProcessAsUserA (Ordinal: 214, Address: 0x1436c0)
- CreateProcessAsUserW (Ordinal: 215, Address: 0x8d530)
- CreateProcessInternalA (Ordinal: 216, Address: 0x7e030)
- CreateProcessInternalW (Ordinal: 217, Address: 0x4f580)
- CreateProcessW (Ordinal: 218, Address: 0x88b10)
- CreatePseudoConsole (Ordinal: 219, Address: 0x133980)
- CreatePseudoConsoleAsUser (Ordinal: 220, Address: 0x1339c0)
- CreateRemoteThread (Ordinal: 221, Address: 0x1422c0)
- CreateRemoteThreadEx (Ordinal: 222, Address: 0x4e380)
- CreateRestrictedToken (Ordinal: 223, Address: 0x92fd0)
- CreateSemaphoreExW (Ordinal: 224, Address: 0x4c870)
- CreateSemaphoreW (Ordinal: 225, Address: 0x8c700)
- CreateStateAtom (Ordinal: 226, Address: 0x86220)
- CreateStateChangeNotification (Ordinal: 227, Address: 0xe9c0)
- CreateStateContainer (Ordinal: 228, Address: 0x20190)
- CreateStateLock (Ordinal: 229, Address: 0x2a10)
- CreateStateSubcontainer (Ordinal: 230, Address: 0x4b8a0)
- CreateSymbolicLinkW (Ordinal: 231, Address: 0xf5550)
- CreateThread (Ordinal: 232, Address: 0x142310)
- CreateThreadpool (Ordinal: 233, Address: 0x8fe30)
- CreateThreadpoolCleanupGroup (Ordinal: 234, Address: 0x8f4d0)
- CreateThreadpoolIo (Ordinal: 235, Address: 0x80930)
- CreateThreadpoolTimer (Ordinal: 236, Address: 0x7d440)
- CreateThreadpoolWait (Ordinal: 237, Address: 0x81310)
- CreateThreadpoolWork (Ordinal: 238, Address: 0x7b2e0)
- CreateTimerQueue (Ordinal: 239, Address: 0x8d480)
- CreateTimerQueueTimer (Ordinal: 240, Address: 0x7e520)
- CreateWaitableTimerExW (Ordinal: 241, Address: 0x4d190)
- CreateWaitableTimerW (Ordinal: 242, Address: 0x92370)
- CreateWellKnownSid (Ordinal: 243, Address: 0x28460)
- CtrlRoutine (Ordinal: 244, Address: 0x1349e0)
- CveEventWrite (Ordinal: 245, Address: 0x13b390)
- DeactivateActCtx (Ordinal: 246, Address: 0x819a0)
- DebugActiveProcess (Ordinal: 247, Address: 0x13f430)
- DebugActiveProcessStop (Ordinal: 248, Address: 0x13f4c0)
- DebugBreak (Ordinal: 249, Address: 0xfabb0)
- DecodePointer (Ordinal: 250, Address: 0x3138f1)
- DecodeRemotePointer (Ordinal: 251, Address: 0x31391c)
- DecodeSystemPointer (Ordinal: 252, Address: 0x31394d)
- DefineDosDeviceW (Ordinal: 253, Address: 0x5440)
- DelayLoadFailureHook (Ordinal: 254, Address: 0x78be0)
- DelayLoadFailureHookLookup (Ordinal: 255, Address: 0x10f810)
- DeleteAce (Ordinal: 256, Address: 0x8f250)
- DeleteBoundaryDescriptor (Ordinal: 257, Address: 0x94280)
- DeleteCriticalSection (Ordinal: 258, Address: 0x3139e4)
- DeleteEnclave (Ordinal: 259, Address: 0x13e790)
- DeleteFiber (Ordinal: 260, Address: 0x886e0)
- DeleteFileA (Ordinal: 261, Address: 0x4aa40)
- DeleteFileW (Ordinal: 262, Address: 0x4a7e0)
- DeletePackageDependency (Ordinal: 263, Address: 0x118f20)
- DeleteProcThreadAttributeList (Ordinal: 264, Address: 0x931e0)
- DeleteStateAtomValue (Ordinal: 265, Address: 0x785b0)
- DeleteStateContainer (Ordinal: 266, Address: 0xb0140)
- DeleteStateContainerValue (Ordinal: 267, Address: 0x75b00)
- DeleteSynchronizationBarrier (Ordinal: 268, Address: 0x313acc)
- DeleteTimerQueue (Ordinal: 269, Address: 0x93cd0)
- DeleteTimerQueueEx (Ordinal: 270, Address: 0x93d00)
- DeleteTimerQueueTimer (Ordinal: 271, Address: 0x821f0)
- DeleteVolumeMountPointW (Ordinal: 272, Address: 0x144730)
- DeriveCapabilitySidsFromName (Ordinal: 273, Address: 0x94ef0)
- DestroyPrivateObjectSecurity (Ordinal: 274, Address: 0x87630)
- DeviceIoControl (Ordinal: 275, Address: 0x441d0)
- DisablePredefinedHandleTableInternal (Ordinal: 276, Address: 0x7f660)
- DisableThreadLibraryCalls (Ordinal: 277, Address: 0x7e9a0)
- DisassociateCurrentThreadFromCallback (Ordinal: 278, Address: 0x313be4)
- DiscardVirtualMemory (Ordinal: 279, Address: 0xc7a90)
- DisconnectNamedPipe (Ordinal: 280, Address: 0x83a90)
- DnsHostnameToComputerNameExW (Ordinal: 281, Address: 0x144ef0)
- DsBindWithSpnExW (Ordinal: 282, Address: 0xf0f30)
- DsCrackNamesW (Ordinal: 283, Address: 0xf0fc0)
- DsFreeDomainControllerInfoW (Ordinal: 284, Address: 0xf1050)
- DsFreeNameResultW (Ordinal: 285, Address: 0xf10a0)
- DsFreeNgcKey (Ordinal: 286, Address: 0xf10d0)
- DsFreePasswordCredentials (Ordinal: 287, Address: 0xf1100)
- DsGetDomainControllerInfoW (Ordinal: 288, Address: 0xf1130)
- DsMakePasswordCredentialsW (Ordinal: 289, Address: 0xf11b0)
- DsReadNgcKeyW (Ordinal: 290, Address: 0xf1220)
- DsUnBindW (Ordinal: 291, Address: 0xf1290)
- DsWriteNgcKeyW (Ordinal: 292, Address: 0xf12e0)
- DuplicateHandle (Ordinal: 293, Address: 0x54bb0)
- DuplicateStateContainerHandle (Ordinal: 294, Address: 0x4dbe0)
- DuplicateToken (Ordinal: 295, Address: 0x78e10)
- DuplicateTokenEx (Ordinal: 296, Address: 0x78e40)
- EmptyWorkingSet (Ordinal: 297, Address: 0x1103c0)
- EnableProcessOptionalXStateFeatures (Ordinal: 298, Address: 0xf7a80)
- EncodePointer (Ordinal: 299, Address: 0x313da8)
- EncodeRemotePointer (Ordinal: 300, Address: 0x313dd3)
- EncodeSystemPointer (Ordinal: 301, Address: 0x313e04)
- EnterCriticalPolicySectionInternal (Ordinal: 302, Address: 0xb20e0)
- EnterCriticalSection (Ordinal: 303, Address: 0x313e59)
- EnterSynchronizationBarrier (Ordinal: 304, Address: 0x13f1a0)
- EnumCalendarInfoExEx (Ordinal: 305, Address: 0x71a80)
- EnumCalendarInfoExW (Ordinal: 306, Address: 0xff810)
- EnumCalendarInfoW (Ordinal: 307, Address: 0xff880)
- EnumDateFormatsExEx (Ordinal: 308, Address: 0x70cd0)
- EnumDateFormatsExW (Ordinal: 309, Address: 0xff8f0)
- EnumDateFormatsW (Ordinal: 310, Address: 0xff950)
- EnumDeviceDrivers (Ordinal: 311, Address: 0x7b320)
- EnumDynamicTimeZoneInformation (Ordinal: 312, Address: 0x31e0)
- EnumLanguageGroupLocalesW (Ordinal: 313, Address: 0xff9b0)
- EnumPageFilesA (Ordinal: 314, Address: 0x1106e0)
- EnumPageFilesW (Ordinal: 315, Address: 0x110730)
- EnumProcessModules (Ordinal: 316, Address: 0x15110)
- EnumProcessModulesEx (Ordinal: 317, Address: 0x110890)
- EnumProcesses (Ordinal: 318, Address: 0x89290)
- EnumResourceLanguagesExA (Ordinal: 319, Address: 0x13ba40)
- EnumResourceLanguagesExW (Ordinal: 320, Address: 0xb3700)
- EnumResourceNamesA (Ordinal: 321, Address: 0x13bb10)
- EnumResourceNamesExA (Ordinal: 322, Address: 0x13bb40)
- EnumResourceNamesExW (Ordinal: 323, Address: 0x29720)
- EnumResourceNamesW (Ordinal: 324, Address: 0x13bbe0)
- EnumResourceTypesExA (Ordinal: 325, Address: 0x13bc10)
- EnumResourceTypesExW (Ordinal: 326, Address: 0x13bc40)
- EnumSystemCodePagesW (Ordinal: 327, Address: 0xff9d0)
- EnumSystemFirmwareTables (Ordinal: 328, Address: 0x145370)
- EnumSystemGeoID (Ordinal: 329, Address: 0x69190)
- EnumSystemGeoNames (Ordinal: 330, Address: 0x108e30)
- EnumSystemLanguageGroupsW (Ordinal: 331, Address: 0xff9f0)
- EnumSystemLocalesA (Ordinal: 332, Address: 0xb2de0)
- EnumSystemLocalesEx (Ordinal: 333, Address: 0x952a0)
- EnumSystemLocalesW (Ordinal: 334, Address: 0xffa10)
- EnumTimeFormatsEx (Ordinal: 335, Address: 0x71520)
- EnumTimeFormatsW (Ordinal: 336, Address: 0xffa40)
- EnumUILanguagesW (Ordinal: 337, Address: 0x29130)
- EnumerateExtensionNames (Ordinal: 338, Address: 0x11f990)
- EnumerateStateAtomValues (Ordinal: 339, Address: 0x10be0)
- EnumerateStateContainerItems (Ordinal: 340, Address: 0x11000)
- EqualDomainSid (Ordinal: 341, Address: 0x280a0)
- EqualPrefixSid (Ordinal: 342, Address: 0x94900)
- EqualSid (Ordinal: 343, Address: 0x8970)
- EscapeCommFunction (Ordinal: 344, Address: 0x13fbc0)
- EventActivityIdControl (Ordinal: 345, Address: 0x3141c9)
- EventEnabled (Ordinal: 346, Address: 0x3141f6)
- EventProviderEnabled (Ordinal: 347, Address: 0x314221)
- EventRegister (Ordinal: 348, Address: 0x31424d)
- EventSetInformation (Ordinal: 349, Address: 0x314278)
- EventUnregister (Ordinal: 350, Address: 0x3142a5)
- EventWrite (Ordinal: 351, Address: 0x3142c9)
- EventWriteEx (Ordinal: 352, Address: 0x3142ea)
- EventWriteString (Ordinal: 353, Address: 0x314311)
- EventWriteTransfer (Ordinal: 354, Address: 0x31433e)
- ExitProcess (Ordinal: 355, Address: 0x314366)
- ExitThread (Ordinal: 356, Address: 0x31438a)
- ExpandEnvironmentStringsA (Ordinal: 357, Address: 0x72b00)
- ExpandEnvironmentStringsW (Ordinal: 358, Address: 0x12b10)
- ExpungeConsoleCommandHistoryA (Ordinal: 359, Address: 0x1329f0)
- ExpungeConsoleCommandHistoryW (Ordinal: 360, Address: 0x132a80)
- ExtensionProgIdExists (Ordinal: 361, Address: 0x11dd40)
- FatalAppExitA (Ordinal: 362, Address: 0x143740)
- FatalAppExitW (Ordinal: 363, Address: 0x1437d0)
- FileTimeToLocalFileTime (Ordinal: 364, Address: 0x2e0d0)
- FileTimeToSystemTime (Ordinal: 365, Address: 0x67d00)
- FillConsoleOutputAttribute (Ordinal: 366, Address: 0x134450)
- FillConsoleOutputCharacterA (Ordinal: 367, Address: 0x134480)
- FillConsoleOutputCharacterW (Ordinal: 368, Address: 0x1344b0)
- FindActCtxSectionGuid (Ordinal: 369, Address: 0x70a50)
- FindActCtxSectionStringW (Ordinal: 370, Address: 0x8dba0)
- FindClose (Ordinal: 371, Address: 0x2f3c0)
- FindCloseChangeNotification (Ordinal: 372, Address: 0x959e0)
- FindFirstChangeNotificationA (Ordinal: 373, Address: 0x145540)
- FindFirstChangeNotificationW (Ordinal: 374, Address: 0x92e70)
- FindFirstFileA (Ordinal: 375, Address: 0x84d10)
- FindFirstFileExA (Ordinal: 376, Address: 0x1455a0)
- FindFirstFileExW (Ordinal: 377, Address: 0x49980)
- FindFirstFileNameW (Ordinal: 378, Address: 0x72f20)
- FindFirstFileW (Ordinal: 379, Address: 0x4a350)
- FindFirstFreeAce (Ordinal: 380, Address: 0x13b4a0)
- FindFirstStreamW (Ordinal: 381, Address: 0x145740)
- FindFirstVolumeW (Ordinal: 382, Address: 0x73b10)
- FindNLSString (Ordinal: 383, Address: 0xfc360)
- FindNLSStringEx (Ordinal: 384, Address: 0x667f0)
- FindNextChangeNotification (Ordinal: 385, Address: 0x93480)
- FindNextFileA (Ordinal: 386, Address: 0x53d10)
- FindNextFileNameW (Ordinal: 387, Address: 0x72e10)
- FindNextFileW (Ordinal: 388, Address: 0x53e60)
- FindNextStreamW (Ordinal: 389, Address: 0x145b50)
- FindNextVolumeW (Ordinal: 390, Address: 0x747d0)
- FindPackagesByPackageFamily (Ordinal: 391, Address: 0x87200)
- FindResourceExW (Ordinal: 392, Address: 0x2bdc0)
- FindResourceW (Ordinal: 393, Address: 0x2bda0)
- FindStringOrdinal (Ordinal: 394, Address: 0x4a3e0)
- FindVolumeClose (Ordinal: 395, Address: 0x939a0)
- FlsAlloc (Ordinal: 396, Address: 0x849e0)
- FlsFree (Ordinal: 397, Address: 0x8d4b0)
- FlsGetValue (Ordinal: 398, Address: 0x54120)
- FlsSetValue (Ordinal: 399, Address: 0x53c00)
- FlushConsoleInputBuffer (Ordinal: 400, Address: 0x95820)
- FlushFileBuffers (Ordinal: 401, Address: 0x88600)
- FlushInstructionCache (Ordinal: 402, Address: 0x6be80)
- FlushProcessWriteBuffers (Ordinal: 403, Address: 0x31473d)
- FlushViewOfFile (Ordinal: 404, Address: 0x92af0)
- FoldStringW (Ordinal: 405, Address: 0x100bd0)
- ForceSyncFgPolicyInternal (Ordinal: 406, Address: 0xf04c0)
- FormatApplicationUserModelId (Ordinal: 407, Address: 0x90d50)
- FormatApplicationUserModelIdA (Ordinal: 408, Address: 0x120b80)
- FormatMessageA (Ordinal: 409, Address: 0x5290)
- FormatMessageW (Ordinal: 410, Address: 0x40940)
- FreeConsole (Ordinal: 411, Address: 0x133890)
- FreeEnvironmentStringsA (Ordinal: 412, Address: 0x8fb50)
- FreeEnvironmentStringsW (Ordinal: 413, Address: 0x80df0)
- FreeGPOListInternalA (Ordinal: 414, Address: 0xf0510)
- FreeGPOListInternalW (Ordinal: 415, Address: 0xf0560)
- FreeLibrary (Ordinal: 416, Address: 0x2ffa0)
- FreeLibraryAndExitThread (Ordinal: 417, Address: 0x89450)
- FreeLibraryWhenCallbackReturns (Ordinal: 418, Address: 0x314897)
- FreeResource (Ordinal: 419, Address: 0x94610)
- FreeSid (Ordinal: 420, Address: 0x7c2e0)
- FreeUserPhysicalPages (Ordinal: 421, Address: 0x13d480)
- GenerateConsoleCtrlEvent (Ordinal: 422, Address: 0x134d00)
- GenerateGPNotificationInternal (Ordinal: 423, Address: 0xf05b0)
- GetACP (Ordinal: 424, Address: 0x86a30)
- GetAcceptLanguagesA (Ordinal: 425, Address: 0xf8010)
- GetAcceptLanguagesW (Ordinal: 426, Address: 0x81bb0)
- GetAce (Ordinal: 427, Address: 0x79e20)
- GetAclInformation (Ordinal: 428, Address: 0x812e0)
- GetAdjustObjectAttributesForPrivateNamespaceRoutine (Ordinal: 429, Address: 0x95730)
- GetAlternatePackageRoots (Ordinal: 430, Address: 0x111a40)
- GetAppContainerAce (Ordinal: 431, Address: 0x79d10)
- GetAppContainerNamedObjectPath (Ordinal: 432, Address: 0x29660)
- GetAppDataFolder (Ordinal: 433, Address: 0x83f10)
- GetAppModelVersion (Ordinal: 434, Address: 0x121020)
- GetApplicationRecoveryCallback (Ordinal: 435, Address: 0xb0d10)
- GetApplicationRestartSettings (Ordinal: 436, Address: 0xf15c0)
- GetApplicationUserModelId (Ordinal: 437, Address: 0x8be10)
- GetApplicationUserModelIdFromToken (Ordinal: 438, Address: 0x246c0)
- GetAppliedGPOListInternalA (Ordinal: 439, Address: 0x954c0)
- GetAppliedGPOListInternalW (Ordinal: 440, Address: 0x95450)
- GetCPFileNameFromRegistry (Ordinal: 441, Address: 0x93520)
- GetCPHashNode (Ordinal: 442, Address: 0x19ec0)
- GetCPInfo (Ordinal: 443, Address: 0x68ce0)
- GetCPInfoExW (Ordinal: 444, Address: 0x67e30)
- GetCachedSigningLevel (Ordinal: 445, Address: 0x6c60)
- GetCalendar (Ordinal: 446, Address: 0x72180)
- GetCalendarInfoEx (Ordinal: 447, Address: 0x3a340)
- GetCalendarInfoW (Ordinal: 448, Address: 0x94780)
- GetCommConfig (Ordinal: 449, Address: 0x13fd20)
- GetCommMask (Ordinal: 450, Address: 0x13ff80)
- GetCommModemStatus (Ordinal: 451, Address: 0x140070)
- GetCommPorts (Ordinal: 452, Address: 0x140160)
- GetCommProperties (Ordinal: 453, Address: 0x1403f0)
- GetCommState (Ordinal: 454, Address: 0x140500)
- GetCommTimeouts (Ordinal: 455, Address: 0x1408b0)
- GetCommandLineA (Ordinal: 456, Address: 0x8e2e0)
- GetCommandLineW (Ordinal: 457, Address: 0x8d460)
- GetCompressedFileSizeA (Ordinal: 458, Address: 0x144630)
- GetCompressedFileSizeW (Ordinal: 459, Address: 0x8f280)
- GetComputerNameExA (Ordinal: 460, Address: 0xb2f30)
- GetComputerNameExW (Ordinal: 461, Address: 0x95ed0)
- GetConsoleAliasA (Ordinal: 462, Address: 0x132a90)
- GetConsoleAliasExesA (Ordinal: 463, Address: 0x132ad0)
- GetConsoleAliasExesLengthA (Ordinal: 464, Address: 0x132b70)
- GetConsoleAliasExesLengthW (Ordinal: 465, Address: 0x132be0)
- GetConsoleAliasExesW (Ordinal: 466, Address: 0x132bf0)
- GetConsoleAliasW (Ordinal: 467, Address: 0x132d10)
- GetConsoleAliasesA (Ordinal: 468, Address: 0x132d60)
- GetConsoleAliasesLengthA (Ordinal: 469, Address: 0x132e20)
- GetConsoleAliasesLengthW (Ordinal: 470, Address: 0x132ed0)
- GetConsoleAliasesW (Ordinal: 471, Address: 0x132ee0)
- GetConsoleCP (Ordinal: 472, Address: 0x932b0)
- GetConsoleCommandHistoryA (Ordinal: 473, Address: 0x132ef0)
- GetConsoleCommandHistoryLengthA (Ordinal: 474, Address: 0x132fc0)
- GetConsoleCommandHistoryLengthW (Ordinal: 475, Address: 0x133070)
- GetConsoleCommandHistoryW (Ordinal: 476, Address: 0x133080)
- GetConsoleCursorInfo (Ordinal: 477, Address: 0xb46c0)
- GetConsoleDisplayMode (Ordinal: 478, Address: 0x134d90)
- GetConsoleFontSize (Ordinal: 479, Address: 0x134e00)
- GetConsoleHistoryInfo (Ordinal: 480, Address: 0x134e60)
- GetConsoleInputExeNameA (Ordinal: 481, Address: 0x133090)
- GetConsoleInputExeNameW (Ordinal: 482, Address: 0x133180)
- GetConsoleMode (Ordinal: 483, Address: 0x6bc20)
- GetConsoleOriginalTitleA (Ordinal: 484, Address: 0x133230)
- GetConsoleOriginalTitleW (Ordinal: 485, Address: 0x133250)
- GetConsoleOutputCP (Ordinal: 486, Address: 0x66660)
- GetConsoleProcessList (Ordinal: 487, Address: 0x134ee0)
- GetConsoleScreenBufferInfo (Ordinal: 488, Address: 0x1c3a0)
- GetConsoleScreenBufferInfoEx (Ordinal: 489, Address: 0x1c400)
- GetConsoleSelectionInfo (Ordinal: 490, Address: 0x134f80)
- GetConsoleTitleA (Ordinal: 491, Address: 0x133270)
- GetConsoleTitleW (Ordinal: 492, Address: 0x1c500)
- GetConsoleWindow (Ordinal: 493, Address: 0x93f30)
- GetCurrencyFormatEx (Ordinal: 494, Address: 0x105460)
- GetCurrencyFormatW (Ordinal: 495, Address: 0x1054f0)
- GetCurrentActCtx (Ordinal: 496, Address: 0x88ad0)
- GetCurrentApplicationUserModelId (Ordinal: 497, Address: 0x8bdf0)
- GetCurrentConsoleFont (Ordinal: 498, Address: 0x134ff0)
- GetCurrentConsoleFontEx (Ordinal: 499, Address: 0x950c0)
- GetCurrentDirectoryA (Ordinal: 500, Address: 0x90e00)
- GetCurrentDirectoryW (Ordinal: 501, Address: 0x8cf00)
- GetCurrentPackageApplicationContext (Ordinal: 502, Address: 0x942c0)
- GetCurrentPackageApplicationResourcesContext (Ordinal: 503, Address: 0x8fe70)
- GetCurrentPackageContext (Ordinal: 504, Address: 0x6180)
- GetCurrentPackageFamilyName (Ordinal: 505, Address: 0xb8c0)
- GetCurrentPackageFullName (Ordinal: 506, Address: 0xd8b0)
- GetCurrentPackageGlobalizationContext (Ordinal: 507, Address: 0x920f0)
- GetCurrentPackageId (Ordinal: 508, Address: 0x87a20)
- GetCurrentPackageInfo (Ordinal: 509, Address: 0xe340)
- GetCurrentPackageInfo2 (Ordinal: 510, Address: 0xd870)
- GetCurrentPackageInfo3 (Ordinal: 511, Address: 0xe380)
- GetCurrentPackagePath (Ordinal: 512, Address: 0x958a0)
- GetCurrentPackagePath2 (Ordinal: 513, Address: 0xd4f0)
- GetCurrentPackageResourcesContext (Ordinal: 514, Address: 0x8cd20)
- GetCurrentPackageSecurityContext (Ordinal: 515, Address: 0x121600)
- GetCurrentProcess (Ordinal: 516, Address: 0x69300)
- GetCurrentProcessId (Ordinal: 517, Address: 0x69490)
- GetCurrentProcessorNumber (Ordinal: 518, Address: 0x315167)
- GetCurrentProcessorNumberEx (Ordinal: 519, Address: 0x3151a6)
- GetCurrentTargetPlatformContext (Ordinal: 520, Address: 0x121680)
- GetCurrentThread (Ordinal: 521, Address: 0xbecf0)
- GetCurrentThreadId (Ordinal: 522, Address: 0x49710)
- GetCurrentThreadStackLimits (Ordinal: 523, Address: 0x142360)
- GetDateFormatA (Ordinal: 524, Address: 0xb0240)
- GetDateFormatEx (Ordinal: 525, Address: 0x7cf00)
- GetDateFormatW (Ordinal: 526, Address: 0x7cf90)
- GetDeviceDriverBaseNameA (Ordinal: 527, Address: 0x7a090)
- GetDeviceDriverBaseNameW (Ordinal: 528, Address: 0x79fe0)
- GetDeviceDriverFileNameA (Ordinal: 529, Address: 0x1104e0)
- GetDeviceDriverFileNameW (Ordinal: 530, Address: 0x110560)
- GetDiskFreeSpaceA (Ordinal: 531, Address: 0x145ef0)
- GetDiskFreeSpaceExA (Ordinal: 532, Address: 0x95af0)
- GetDiskFreeSpaceExW (Ordinal: 533, Address: 0x95b70)
- GetDiskFreeSpaceW (Ordinal: 534, Address: 0x74e90)
- GetDiskSpaceInformationA (Ordinal: 535, Address: 0x145f70)
- GetDiskSpaceInformationW (Ordinal: 536, Address: 0x145fe0)
- GetDiskSpaceInformationWCOS (Ordinal: 537, Address: 0xb0b80)
- GetDriveTypeA (Ordinal: 538, Address: 0x8e700)
- GetDriveTypeW (Ordinal: 539, Address: 0x41fd0)
- GetDurationFormatEx (Ordinal: 540, Address: 0x105d30)
- GetDynamicTimeZoneInformation (Ordinal: 541, Address: 0x2b8a0)
- GetDynamicTimeZoneInformationEffectiveYears (Ordinal: 542, Address: 0x801a0)
- GetEffectivePackageStatusForUser (Ordinal: 543, Address: 0x26780)
- GetEffectivePackageStatusForUserSid (Ordinal: 544, Address: 0x912b0)
- GetEightBitStringToUnicodeSizeRoutine (Ordinal: 545, Address: 0xbebd0)
- GetEightBitStringToUnicodeStringRoutine (Ordinal: 546, Address: 0x93f10)
- GetEnabledXStateFeatures (Ordinal: 547, Address: 0x8d420)
- GetEnvironmentStrings (Ordinal: 548, Address: 0x78430)
- GetEnvironmentStringsA (Ordinal: 549, Address: 0x78430)
- GetEnvironmentStringsW (Ordinal: 550, Address: 0x69320)
- GetEnvironmentVariableA (Ordinal: 551, Address: 0x7a190)
- GetEnvironmentVariableW (Ordinal: 552, Address: 0x43ec0)
- GetEraNameCountedString (Ordinal: 553, Address: 0xfcd10)
- GetErrorMode (Ordinal: 554, Address: 0x2eff0)
- GetExitCodeProcess (Ordinal: 555, Address: 0x88b90)
- GetExitCodeThread (Ordinal: 556, Address: 0x8c330)
- GetExtensionApplicationUserModelId (Ordinal: 557, Address: 0x11fbe0)
- GetExtensionProgIds (Ordinal: 558, Address: 0x11df30)
- GetExtensionProperty (Ordinal: 559, Address: 0x1201f0)
- GetExtensionProperty2 (Ordinal: 560, Address: 0x1204b0)
- GetFallbackDisplayName (Ordinal: 561, Address: 0xfce40)
- GetFileAttributesA (Ordinal: 562, Address: 0x4d9f0)
- GetFileAttributesExA (Ordinal: 563, Address: 0x144680)
- GetFileAttributesExW (Ordinal: 564, Address: 0x45280)
- GetFileAttributesW (Ordinal: 565, Address: 0x44e90)
- GetFileInformationByHandle (Ordinal: 566, Address: 0xc660)
- GetFileInformationByHandleEx (Ordinal: 567, Address: 0x70290)
- GetFileMUIInfo (Ordinal: 568, Address: 0x106280)
- GetFileMUIPath (Ordinal: 569, Address: 0x8f1e0)
- GetFileSecurityW (Ordinal: 570, Address: 0x79690)
- GetFileSize (Ordinal: 571, Address: 0x736b0)
- GetFileSizeEx (Ordinal: 572, Address: 0x54200)
- GetFileTime (Ordinal: 573, Address: 0x85560)
- GetFileType (Ordinal: 574, Address: 0x6a4f0)
- GetFileVersionInfoA (Ordinal: 575, Address: 0x92640)
- GetFileVersionInfoByHandle (Ordinal: 576, Address: 0xef8a0)
- GetFileVersionInfoExA (Ordinal: 577, Address: 0xb0ec0)
- GetFileVersionInfoExW (Ordinal: 578, Address: 0x2e6d0)
- GetFileVersionInfoSizeA (Ordinal: 579, Address: 0x92df0)
- GetFileVersionInfoSizeExA (Ordinal: 580, Address: 0xb0fd0)
- GetFileVersionInfoSizeExW (Ordinal: 581, Address: 0x2e920)
- GetFileVersionInfoSizeW (Ordinal: 582, Address: 0x2d1e0)
- GetFileVersionInfoW (Ordinal: 583, Address: 0x2d1b0)
- GetFinalPathNameByHandleA (Ordinal: 584, Address: 0x13efa0)
- GetFinalPathNameByHandleW (Ordinal: 585, Address: 0x73cc0)
- GetFullPathNameA (Ordinal: 586, Address: 0x7ca20)
- GetFullPathNameW (Ordinal: 587, Address: 0x6bbe0)
- GetGPOListInternalA (Ordinal: 588, Address: 0xf0610)
- GetGPOListInternalW (Ordinal: 589, Address: 0xf0690)
- GetGamingDeviceModelInformation (Ordinal: 590, Address: 0xf7f00)
- GetGeoInfoEx (Ordinal: 591, Address: 0x108f50)
- GetGeoInfoW (Ordinal: 592, Address: 0x2c780)
- GetHandleInformation (Ordinal: 593, Address: 0x87e70)
- GetHivePath (Ordinal: 594, Address: 0x3c20)
- GetIntegratedDisplaySize (Ordinal: 595, Address: 0x957b0)
- GetIsEdpEnabled (Ordinal: 596, Address: 0x8ce30)
- GetIsWdagEnabled (Ordinal: 597, Address: 0x925e0)
- GetKernelObjectSecurity (Ordinal: 598, Address: 0x43720)
- GetLargePageMinimum (Ordinal: 599, Address: 0x13d4c0)
- GetLargestConsoleWindowSize (Ordinal: 600, Address: 0xb4720)
- GetLastError (Ordinal: 601, Address: 0x3f2b0)
- GetLengthSid (Ordinal: 602, Address: 0x70790)
- GetLocalTime (Ordinal: 603, Address: 0x2dec0)
- GetLocaleInfoA (Ordinal: 604, Address: 0x3e110)
- GetLocaleInfoEx (Ordinal: 605, Address: 0x3a110)
- GetLocaleInfoHelper (Ordinal: 606, Address: 0x3ad30)
- GetLocaleInfoW (Ordinal: 607, Address: 0x3ac00)
- GetLogicalDriveStringsW (Ordinal: 608, Address: 0x820a0)
- GetLogicalDrives (Ordinal: 609, Address: 0x821a0)
- GetLogicalProcessorInformation (Ordinal: 610, Address: 0x926e0)
- GetLogicalProcessorInformationEx (Ordinal: 611, Address: 0x8d8e0)
- GetLongPathNameA (Ordinal: 612, Address: 0x10a730)
- GetLongPathNameW (Ordinal: 613, Address: 0x2d2a0)
- GetMappedFileNameA (Ordinal: 614, Address: 0x110be0)
- GetMappedFileNameW (Ordinal: 615, Address: 0x110ca0)
- GetMemoryErrorHandlingCapabilities (Ordinal: 616, Address: 0x13d4e0)
- GetModuleBaseNameA (Ordinal: 617, Address: 0x157e0)
- GetModuleBaseNameW (Ordinal: 618, Address: 0x15040)
- GetModuleFileNameA (Ordinal: 619, Address: 0x65ee0)
- GetModuleFileNameExA (Ordinal: 620, Address: 0xc7820)
- GetModuleFileNameExW (Ordinal: 621, Address: 0x15430)
- GetModuleFileNameW (Ordinal: 622, Address: 0x66020)
- GetModuleHandleA (Ordinal: 623, Address: 0x4df40)
- GetModuleHandleExA (Ordinal: 624, Address: 0x4c9f0)
- GetModuleHandleExW (Ordinal: 625, Address: 0x6a3a0)
- GetModuleHandleW (Ordinal: 626, Address: 0x4dfa0)
- GetModuleInformation (Ordinal: 627, Address: 0x15370)
- GetNLSVersion (Ordinal: 628, Address: 0x88fc0)
- GetNLSVersionEx (Ordinal: 629, Address: 0x89020)
- GetNamedLocaleHashNode (Ordinal: 630, Address: 0x39f10)
- GetNamedPipeAttribute (Ordinal: 631, Address: 0x7fca0)
- GetNamedPipeClientComputerNameW (Ordinal: 632, Address: 0x7fc40)
- GetNamedPipeHandleStateW (Ordinal: 633, Address: 0x13e980)
- GetNamedPipeInfo (Ordinal: 634, Address: 0x13eb00)
- GetNativeSystemInfo (Ordinal: 635, Address: 0xa340)
- GetNextFgPolicyRefreshInfoInternal (Ordinal: 636, Address: 0xf0710)
- GetNumaHighestNodeNumber (Ordinal: 637, Address: 0x900c0)
- GetNumaNodeProcessorMask2 (Ordinal: 638, Address: 0x146970)
- GetNumaNodeProcessorMaskEx (Ordinal: 639, Address: 0x146b30)
- GetNumaProximityNodeEx (Ordinal: 640, Address: 0x146bc0)
- GetNumberFormatEx (Ordinal: 641, Address: 0x70c40)
- GetNumberFormatW (Ordinal: 642, Address: 0x44f0)
- GetNumberOfConsoleInputEvents (Ordinal: 643, Address: 0x95560)
- GetNumberOfConsoleMouseButtons (Ordinal: 644, Address: 0x135060)
- GetOEMCP (Ordinal: 645, Address: 0x94490)
- GetOsManufacturingMode (Ordinal: 646, Address: 0xb4990)
- GetOsSafeBootMode (Ordinal: 647, Address: 0x905d0)
- GetOverlappedResult (Ordinal: 648, Address: 0x44710)
- GetOverlappedResultEx (Ordinal: 649, Address: 0x7e620)
- GetPackageApplicationContext (Ordinal: 650, Address: 0x121710)
- GetPackageApplicationIds (Ordinal: 651, Address: 0x118f70)
- GetPackageApplicationProperty (Ordinal: 652, Address: 0x94dd0)
- GetPackageApplicationPropertyString (Ordinal: 653, Address: 0x94d60)
- GetPackageApplicationResourcesContext (Ordinal: 654, Address: 0x121730)
- GetPackageContext (Ordinal: 655, Address: 0x121780)
- GetPackageFamilyName (Ordinal: 656, Address: 0x20e50)
- GetPackageFamilyNameFromFilePath (Ordinal: 657, Address: 0x122cb0)
- GetPackageFamilyNameFromProgId (Ordinal: 658, Address: 0x11e6f0)
- GetPackageFamilyNameFromToken (Ordinal: 659, Address: 0x247d0)
- GetPackageFullName (Ordinal: 660, Address: 0x248b0)
- GetPackageFullNameAppUserModelIdAndTypeForFile (Ordinal: 661, Address: 0x12a540)
- GetPackageFullNameFromToken (Ordinal: 662, Address: 0x272e0)
- GetPackageGlobalizationContext (Ordinal: 663, Address: 0x1217a0)
- GetPackageGlobalizationProperty (Ordinal: 664, Address: 0x937d0)
- GetPackageId (Ordinal: 665, Address: 0xb2470)
- GetPackageInfo (Ordinal: 666, Address: 0xd980)
- GetPackageInfo2 (Ordinal: 667, Address: 0x1191d0)
- GetPackageInfo3 (Ordinal: 668, Address: 0xdaf0)
- GetPackageOSMaxVersionTested (Ordinal: 669, Address: 0x1217f0)
- GetPackagePath (Ordinal: 670, Address: 0x121f90)
- GetPackagePathByFullName (Ordinal: 671, Address: 0x95750)
- GetPackagePathByFullName2 (Ordinal: 672, Address: 0x8ae00)
- GetPackagePathOnVolume (Ordinal: 673, Address: 0x122d00)
- GetPackageProperty (Ordinal: 674, Address: 0x60c0)
- GetPackagePropertyString (Ordinal: 675, Address: 0x6050)
- GetPackageResourcesContext (Ordinal: 676, Address: 0x121830)
- GetPackageResourcesProperty (Ordinal: 677, Address: 0x92040)
- GetPackageSecurityContext (Ordinal: 678, Address: 0x121880)
- GetPackageSecurityProperty (Ordinal: 679, Address: 0x1218b0)
- GetPackageStatus (Ordinal: 680, Address: 0x26800)
- GetPackageStatusForUser (Ordinal: 681, Address: 0x256d0)
- GetPackageStatusForUserSid (Ordinal: 682, Address: 0x26730)
- GetPackageTargetPlatformProperty (Ordinal: 683, Address: 0x81a50)
- GetPackageVolumeSisPath (Ordinal: 684, Address: 0xc860)
- GetPackagedDataForFile (Ordinal: 685, Address: 0x12a580)
- GetPackagesByPackageFamily (Ordinal: 686, Address: 0x871c0)
- GetPerformanceInfo (Ordinal: 687, Address: 0x8c100)
- GetPersistedFileLocationW (Ordinal: 688, Address: 0x95610)
- GetPersistedRegistryLocationW (Ordinal: 689, Address: 0x1ef10)
- GetPersistedRegistryValueW (Ordinal: 690, Address: 0x822b0)
- GetPhysicallyInstalledSystemMemory (Ordinal: 691, Address: 0x65570)
- GetPreviousFgPolicyRefreshInfoInternal (Ordinal: 692, Address: 0xf0760)
- GetPriorityClass (Ordinal: 693, Address: 0x93860)
- GetPrivateObjectSecurity (Ordinal: 694, Address: 0x13b4e0)
- GetProcAddress (Ordinal: 695, Address: 0x2b010)
- GetProcAddressForCaller (Ordinal: 696, Address: 0x2ae00)
- GetProcessDefaultCpuSetMasks (Ordinal: 697, Address: 0x143860)
- GetProcessDefaultCpuSets (Ordinal: 698, Address: 0x143940)
- GetProcessGroupAffinity (Ordinal: 699, Address: 0x143a20)
- GetProcessHandleCount (Ordinal: 700, Address: 0xc8070)
- GetProcessHeap (Ordinal: 701, Address: 0x65a20)
- GetProcessHeaps (Ordinal: 702, Address: 0x146c20)
- GetProcessId (Ordinal: 703, Address: 0x7cc60)
- GetProcessIdOfThread (Ordinal: 704, Address: 0x91110)
- GetProcessImageFileNameA (Ordinal: 705, Address: 0xc78e0)
- GetProcessImageFileNameW (Ordinal: 706, Address: 0x850d0)
- GetProcessInformation (Ordinal: 707, Address: 0x86ae0)
- GetProcessMemoryInfo (Ordinal: 708, Address: 0x6b6e0)
- GetProcessMitigationPolicy (Ordinal: 709, Address: 0x6a6f0)
- GetProcessPreferredUILanguages (Ordinal: 710, Address: 0xb4240)
- GetProcessPriorityBoost (Ordinal: 711, Address: 0x143a90)
- GetProcessShutdownParameters (Ordinal: 712, Address: 0x143af0)
- GetProcessTimes (Ordinal: 713, Address: 0x75f20)
- GetProcessVersion (Ordinal: 714, Address: 0xb0f60)
- GetProcessWorkingSetSize (Ordinal: 715, Address: 0x13d560)
- GetProcessWorkingSetSizeEx (Ordinal: 716, Address: 0x95660)
- GetProcessorSystemCycleTime (Ordinal: 717, Address: 0x93940)
- GetProductInfo (Ordinal: 718, Address: 0x93350)
- GetProtocolAumid (Ordinal: 719, Address: 0x122e50)
- GetProtocolProperty (Ordinal: 720, Address: 0x122e80)
- GetPtrCalData (Ordinal: 721, Address: 0xfcf40)
- GetPtrCalDataArray (Ordinal: 722, Address: 0xfcf80)
- GetPublisherCacheFolder (Ordinal: 723, Address: 0x111a70)
- GetPublisherRootFolder (Ordinal: 724, Address: 0x8dc10)
- GetQueuedCompletionStatus (Ordinal: 725, Address: 0x67c30)
- GetQueuedCompletionStatusEx (Ordinal: 726, Address: 0x143120)
- GetRegistryExtensionFlags (Ordinal: 727, Address: 0x10dfd0)
- GetRegistryValueWithFallbackW (Ordinal: 728, Address: 0x91330)
- GetResolvedPackageFullNameForPackageDependency (Ordinal: 729, Address: 0x119210)
- GetRoamingLastObservedChangeTime (Ordinal: 730, Address: 0x111b50)
- GetSecureSystemAppDataFolder (Ordinal: 731, Address: 0x83cf0)
- GetSecurityDescriptorControl (Ordinal: 732, Address: 0x56600)
- GetSecurityDescriptorDacl (Ordinal: 733, Address: 0x77460)
- GetSecurityDescriptorGroup (Ordinal: 734, Address: 0x89410)
- GetSecurityDescriptorLength (Ordinal: 735, Address: 0x88310)
- GetSecurityDescriptorOwner (Ordinal: 736, Address: 0x885c0)
- GetSecurityDescriptorRMControl (Ordinal: 737, Address: 0x940a0)
- GetSecurityDescriptorSacl (Ordinal: 738, Address: 0x80e90)
- GetSerializedAtomBytes (Ordinal: 739, Address: 0x11670)
- GetSharedLocalFolder (Ordinal: 740, Address: 0x7db10)
- GetShortPathNameW (Ordinal: 741, Address: 0x2eb00)
- GetSidIdentifierAuthority (Ordinal: 742, Address: 0x82030)
- GetSidLengthRequired (Ordinal: 743, Address: 0x82940)
- GetSidSubAuthority (Ordinal: 744, Address: 0xacc0)
- GetSidSubAuthorityCount (Ordinal: 745, Address: 0x7b710)
- GetStagedPackageOrigin (Ordinal: 746, Address: 0x1fa80)
- GetStagedPackagePathByFullName (Ordinal: 747, Address: 0xd100)
- GetStagedPackagePathByFullName2 (Ordinal: 748, Address: 0x1ef60)
- GetStartupInfoW (Ordinal: 749, Address: 0x7c940)
- GetStateContainerDepth (Ordinal: 750, Address: 0x111c00)
- GetStateFolder (Ordinal: 751, Address: 0x1ffa0)
- GetStateRootFolder (Ordinal: 752, Address: 0x89610)
- GetStateRootFolderBase (Ordinal: 753, Address: 0x8d060)
- GetStateSettingsFolder (Ordinal: 754, Address: 0x111c90)
- GetStateVersion (Ordinal: 755, Address: 0x111d60)
- GetStdHandle (Ordinal: 756, Address: 0x7abf0)
- GetStringScripts (Ordinal: 757, Address: 0x76ae0)
- GetStringTableEntry (Ordinal: 758, Address: 0x2ba70)
- GetStringTypeA (Ordinal: 759, Address: 0xfbf80)
- GetStringTypeExW (Ordinal: 760, Address: 0x36a60)
- GetStringTypeW (Ordinal: 761, Address: 0x67230)
- GetSystemAppDataFolder (Ordinal: 762, Address: 0x84030)
- GetSystemAppDataKey (Ordinal: 763, Address: 0xee30)
- GetSystemCpuSetInformation (Ordinal: 764, Address: 0x143b80)
- GetSystemDefaultLCID (Ordinal: 765, Address: 0x7abc0)
- GetSystemDefaultLangID (Ordinal: 766, Address: 0x94620)
- GetSystemDefaultLocaleName (Ordinal: 767, Address: 0x8f600)
- GetSystemDefaultUILanguage (Ordinal: 768, Address: 0x8f190)
- GetSystemDirectoryA (Ordinal: 769, Address: 0x8d6e0)
- GetSystemDirectoryW (Ordinal: 770, Address: 0x7a130)
- GetSystemFileCacheSize (Ordinal: 771, Address: 0x13d580)
- GetSystemFirmwareTable (Ordinal: 772, Address: 0x660f0)
- GetSystemInfo (Ordinal: 773, Address: 0xa3d0)
- GetSystemLeapSecondInformation (Ordinal: 774, Address: 0x141950)
- GetSystemMetadataPath (Ordinal: 775, Address: 0x122ef0)
- GetSystemMetadataPathForPackage (Ordinal: 776, Address: 0x92030)
- GetSystemMetadataPathForPackageFamily (Ordinal: 777, Address: 0x122f00)
- GetSystemPreferredUILanguages (Ordinal: 778, Address: 0x81b60)
- GetSystemStateRootFolder (Ordinal: 779, Address: 0x111e40)
- GetSystemTime (Ordinal: 780, Address: 0x73560)
- GetSystemTimeAdjustment (Ordinal: 781, Address: 0x93d90)
- GetSystemTimeAdjustmentPrecise (Ordinal: 782, Address: 0x1419c0)
- GetSystemTimeAsFileTime (Ordinal: 783, Address: 0x69d90)
- GetSystemTimePreciseAsFileTime (Ordinal: 784, Address: 0x70870)
- GetSystemTimes (Ordinal: 785, Address: 0x7d5d0)
- GetSystemWindowsDirectoryA (Ordinal: 786, Address: 0xb0c80)
- GetSystemWindowsDirectoryW (Ordinal: 787, Address: 0x2ab20)
- GetSystemWow64Directory2A (Ordinal: 788, Address: 0x1461a0)
- GetSystemWow64Directory2W (Ordinal: 789, Address: 0x2aa00)
- GetSystemWow64DirectoryA (Ordinal: 790, Address: 0x146320)
- GetSystemWow64DirectoryW (Ordinal: 791, Address: 0x2a9c0)
- GetTargetPlatformContext (Ordinal: 792, Address: 0x89900)
- GetTempFileNameA (Ordinal: 793, Address: 0x88bf0)
- GetTempFileNameW (Ordinal: 794, Address: 0x88d40)
- GetTempPath2A (Ordinal: 795, Address: 0xb1110)
- GetTempPath2W (Ordinal: 796, Address: 0x7320)
- GetTempPathA (Ordinal: 797, Address: 0xb22d0)
- GetTempPathW (Ordinal: 798, Address: 0x6f40)
- GetThreadContext (Ordinal: 799, Address: 0x93c70)
- GetThreadDescription (Ordinal: 800, Address: 0x142390)
- GetThreadEnabledXStateFeatures (Ordinal: 801, Address: 0xf7b00)
- GetThreadErrorMode (Ordinal: 802, Address: 0x1432c0)
- GetThreadGroupAffinity (Ordinal: 803, Address: 0x1424e0)
- GetThreadIOPendingFlag (Ordinal: 804, Address: 0xc7fb0)
- GetThreadId (Ordinal: 805, Address: 0x93ed0)
- GetThreadIdealProcessorEx (Ordinal: 806, Address: 0x142530)
- GetThreadInformation (Ordinal: 807, Address: 0x722e0)
- GetThreadLocale (Ordinal: 808, Address: 0x76ac0)
- GetThreadPreferredUILanguages (Ordinal: 809, Address: 0x80e20)
- GetThreadPriority (Ordinal: 810, Address: 0x76a60)
- GetThreadPriorityBoost (Ordinal: 811, Address: 0xc8010)
- GetThreadSelectedCpuSetMasks (Ordinal: 812, Address: 0x142590)
- GetThreadSelectedCpuSets (Ordinal: 813, Address: 0x142670)
- GetThreadTimes (Ordinal: 814, Address: 0x73740)
- GetThreadUILanguage (Ordinal: 815, Address: 0x663f0)
- GetTickCount (Ordinal: 816, Address: 0x56e40)
- GetTickCount64 (Ordinal: 817, Address: 0x69460)
- GetTimeFormatA (Ordinal: 818, Address: 0x105e80)
- GetTimeFormatEx (Ordinal: 819, Address: 0x8d1f0)
- GetTimeFormatW (Ordinal: 820, Address: 0x8d1a0)
- GetTimeZoneInformation (Ordinal: 821, Address: 0x2c340)
- GetTimeZoneInformationForYear (Ordinal: 822, Address: 0x29090)
- GetTokenInformation (Ordinal: 823, Address: 0x43f50)
- GetTraceEnableFlags (Ordinal: 824, Address: 0x316cc9)
- GetTraceEnableLevel (Ordinal: 825, Address: 0x316cfa)
- GetTraceLoggerHandle (Ordinal: 826, Address: 0x316d2c)
- GetUILanguageInfo (Ordinal: 827, Address: 0x106820)
- GetUnicodeStringToEightBitSizeRoutine (Ordinal: 828, Address: 0x13df40)
- GetUnicodeStringToEightBitStringRoutine (Ordinal: 829, Address: 0x91f10)
- GetUserDefaultGeoName (Ordinal: 830, Address: 0x109080)
- GetUserDefaultLCID (Ordinal: 831, Address: 0x3d3f0)
- GetUserDefaultLangID (Ordinal: 832, Address: 0x6de0)
- GetUserDefaultLocaleName (Ordinal: 833, Address: 0x22190)
- GetUserDefaultUILanguage (Ordinal: 834, Address: 0x2d740)
- GetUserGeoID (Ordinal: 835, Address: 0x87660)
- GetUserInfo (Ordinal: 836, Address: 0xfd1a0)
- GetUserInfoWord (Ordinal: 837, Address: 0xfd1d0)
- GetUserOverrideString (Ordinal: 838, Address: 0x3dbe0)
- GetUserOverrideWord (Ordinal: 839, Address: 0x3e2c0)
- GetUserPreferredUILanguages (Ordinal: 840, Address: 0x8cbd0)
- GetVersion (Ordinal: 841, Address: 0x90880)
- GetVersionExA (Ordinal: 842, Address: 0x77260)
- GetVersionExW (Ordinal: 843, Address: 0x77370)
- GetVolumeInformationA (Ordinal: 844, Address: 0x146360)
- GetVolumeInformationByHandleW (Ordinal: 845, Address: 0xcc70)
- GetVolumeInformationW (Ordinal: 846, Address: 0xca80)
- GetVolumeNameForVolumeMountPointW (Ordinal: 847, Address: 0x81e50)
- GetVolumePathNameW (Ordinal: 848, Address: 0x8b6c0)
- GetVolumePathNamesForVolumeNameW (Ordinal: 849, Address: 0x74390)
- GetWindowsAccountDomainSid (Ordinal: 850, Address: 0x27fe0)
- GetWindowsDirectoryA (Ordinal: 851, Address: 0xb0c30)
- GetWindowsDirectoryW (Ordinal: 852, Address: 0x2aad0)
- GetWriteWatch (Ordinal: 853, Address: 0x78fa0)
- GetWsChanges (Ordinal: 854, Address: 0x110b20)
- GetWsChangesEx (Ordinal: 855, Address: 0x110b50)
- GetXStateFeaturesMask (Ordinal: 856, Address: 0xf7b30)
- GlobalAlloc (Ordinal: 857, Address: 0x69b60)
- GlobalFree (Ordinal: 858, Address: 0x699f0)
- GlobalMemoryStatusEx (Ordinal: 859, Address: 0x65a40)
- GuardCheckLongJumpTarget (Ordinal: 860, Address: 0x146fe0)
- HasPolicyForegroundProcessingCompletedInternal (Ordinal: 861, Address: 0xf07b0)
- HashData (Ordinal: 862, Address: 0x14310)
- HeapAlloc (Ordinal: 863, Address: 0x31705c)
- HeapCompact (Ordinal: 864, Address: 0x146c40)
- HeapCreate (Ordinal: 865, Address: 0x7df30)
- HeapDestroy (Ordinal: 866, Address: 0x89940)
- HeapFree (Ordinal: 867, Address: 0x31709e)
- HeapLock (Ordinal: 868, Address: 0x95310)
- HeapQueryInformation (Ordinal: 869, Address: 0x146c60)
- HeapReAlloc (Ordinal: 870, Address: 0x3170da)
- HeapSetInformation (Ordinal: 871, Address: 0x88150)
- HeapSize (Ordinal: 872, Address: 0x31710e)
- HeapSummary (Ordinal: 873, Address: 0x146ca0)
- HeapUnlock (Ordinal: 874, Address: 0x952e0)
- HeapValidate (Ordinal: 875, Address: 0x89750)
- HeapWalk (Ordinal: 876, Address: 0x146dd0)
- IdnToAscii (Ordinal: 877, Address: 0x80d50)
- IdnToNameprepUnicode (Ordinal: 878, Address: 0x106910)
- IdnToUnicode (Ordinal: 879, Address: 0x8e810)
- ImpersonateAnonymousToken (Ordinal: 880, Address: 0x90d10)
- ImpersonateLoggedOnUser (Ordinal: 881, Address: 0x78ff0)
- ImpersonateNamedPipeClient (Ordinal: 882, Address: 0x7d7a0)
- ImpersonateSelf (Ordinal: 883, Address: 0x89160)
- IncrementPackageStatusVersion (Ordinal: 884, Address: 0x39f0)
- InitOnceBeginInitialize (Ordinal: 885, Address: 0x1f530)
- InitOnceComplete (Ordinal: 886, Address: 0x86160)
- InitOnceExecuteOnce (Ordinal: 887, Address: 0x67de0)
- InitOnceInitialize (Ordinal: 888, Address: 0x317245)
- InitializeAcl (Ordinal: 889, Address: 0x7f8b0)
- InitializeConditionVariable (Ordinal: 890, Address: 0x31728a)
- InitializeContext (Ordinal: 891, Address: 0xf7bf0)
- InitializeContext2 (Ordinal: 892, Address: 0xf7c60)
- InitializeCriticalSection (Ordinal: 893, Address: 0x3172ee)
- InitializeCriticalSectionAndSpinCount (Ordinal: 894, Address: 0x765e0)
- InitializeCriticalSectionEx (Ordinal: 895, Address: 0x6c1b0)
- InitializeEnclave (Ordinal: 896, Address: 0x13e7d0)
- InitializeProcThreadAttributeList (Ordinal: 897, Address: 0x89a40)
- InitializeProcessForWsWatch (Ordinal: 898, Address: 0x110b80)
- InitializeSListHead (Ordinal: 899, Address: 0x3173b7)
- InitializeSRWLock (Ordinal: 900, Address: 0x3173e6)
- InitializeSecurityDescriptor (Ordinal: 901, Address: 0x81700)
- InitializeSid (Ordinal: 902, Address: 0x824f0)
- InitializeSynchronizationBarrier (Ordinal: 903, Address: 0x13f210)
- InstallELAMCertificateInfo (Ordinal: 904, Address: 0xb10c0)
- InterlockedFlushSList (Ordinal: 905, Address: 0x31747e)
- InterlockedPopEntrySList (Ordinal: 906, Address: 0x3174b6)
- InterlockedPushEntrySList (Ordinal: 907, Address: 0x3174f2)
- InterlockedPushListSList (Ordinal: 908, Address: 0x31752e)
- InterlockedPushListSListEx (Ordinal: 909, Address: 0x31756b)
- InternalLcidToName (Ordinal: 910, Address: 0x95980)
- Internal_EnumCalendarInfo (Ordinal: 911, Address: 0x71b00)
- Internal_EnumDateFormats (Ordinal: 912, Address: 0x70d40)
- Internal_EnumLanguageGroupLocales (Ordinal: 913, Address: 0xffaa0)
- Internal_EnumSystemCodePages (Ordinal: 914, Address: 0xffd80)
- Internal_EnumSystemLanguageGroups (Ordinal: 915, Address: 0x100090)
- Internal_EnumSystemLocales (Ordinal: 916, Address: 0x3e3b0)
- Internal_EnumTimeFormats (Ordinal: 917, Address: 0x71580)
- Internal_EnumUILanguages (Ordinal: 918, Address: 0x29150)
- InternetTimeFromSystemTimeA (Ordinal: 919, Address: 0x2c490)
- InternetTimeFromSystemTimeW (Ordinal: 920, Address: 0xfb9f0)
- InternetTimeToSystemTimeA (Ordinal: 921, Address: 0x77ef0)
- InternetTimeToSystemTimeW (Ordinal: 922, Address: 0xfbb20)
- InvalidateAppModelVersionCache (Ordinal: 923, Address: 0x121150)
- IsApiSetImplemented (Ordinal: 924, Address: 0x73680)
- IsCharAlphaA (Ordinal: 925, Address: 0xf1820)
- IsCharAlphaNumericA (Ordinal: 926, Address: 0xf18c0)
- IsCharAlphaNumericW (Ordinal: 927, Address: 0xb0700)
- IsCharAlphaW (Ordinal: 928, Address: 0x66f30)
- IsCharBlankW (Ordinal: 929, Address: 0xf76b0)
- IsCharCntrlW (Ordinal: 930, Address: 0xf76f0)
- IsCharDigitW (Ordinal: 931, Address: 0xf7720)
- IsCharLowerA (Ordinal: 932, Address: 0xf1970)
- IsCharLowerW (Ordinal: 933, Address: 0xf16a0)
- IsCharPunctW (Ordinal: 934, Address: 0xf7770)
- IsCharSpaceA (Ordinal: 935, Address: 0xf77c0)
- IsCharSpaceW (Ordinal: 936, Address: 0x6c0a0)
- IsCharUpperA (Ordinal: 937, Address: 0xf19f0)
- IsCharUpperW (Ordinal: 938, Address: 0xf1700)
- IsCharXDigitW (Ordinal: 939, Address: 0xf7820)
- IsDBCSLeadByte (Ordinal: 940, Address: 0x68680)
- IsDBCSLeadByteEx (Ordinal: 941, Address: 0x68720)
- IsDebuggerPresent (Ordinal: 942, Address: 0x12050)
- IsDeveloperModeEnabled (Ordinal: 943, Address: 0x143b0)
- IsDeveloperModePolicyApplied (Ordinal: 944, Address: 0x12cf70)
- IsEnclaveTypeSupported (Ordinal: 945, Address: 0x95860)
- IsInternetESCEnabled (Ordinal: 946, Address: 0xfa4b0)
- IsMrtResourceRedirectionEnabled (Ordinal: 947, Address: 0x5b30)
- IsNLSDefinedString (Ordinal: 948, Address: 0x109b90)
- IsNormalizedString (Ordinal: 949, Address: 0x106980)
- IsOnDemandRegistrationSupportedForExtensionCategory (Ordinal: 950, Address: 0x120730)
- IsProcessCritical (Ordinal: 951, Address: 0x143c00)
- IsProcessInJob (Ordinal: 952, Address: 0x86a70)
- IsProcessorFeaturePresent (Ordinal: 953, Address: 0x87600)
- IsSideloadingEnabled (Ordinal: 954, Address: 0x2720)
- IsSideloadingPolicyApplied (Ordinal: 955, Address: 0x12cfc0)
- IsSyncForegroundPolicyRefresh (Ordinal: 956, Address: 0xf0830)
- IsThreadAFiber (Ordinal: 957, Address: 0x89780)
- IsThreadpoolTimerSet (Ordinal: 958, Address: 0x3179ad)
- IsTimeZoneRedirectionEnabled (Ordinal: 959, Address: 0x2e180)
- IsTokenRestricted (Ordinal: 960, Address: 0x40720)
- IsUserCetAvailableInEnvironment (Ordinal: 961, Address: 0xb4aa0)
- IsValidAcl (Ordinal: 962, Address: 0x79e60)
- IsValidCodePage (Ordinal: 963, Address: 0x3d9e0)
- IsValidLanguageGroup (Ordinal: 964, Address: 0xfd1f0)
- IsValidLocale (Ordinal: 965, Address: 0x87130)
- IsValidLocaleName (Ordinal: 966, Address: 0x7fed0)
- IsValidNLSVersion (Ordinal: 967, Address: 0x1099c0)
- IsValidRelativeSecurityDescriptor (Ordinal: 968, Address: 0xbeac0)
- IsValidSecurityDescriptor (Ordinal: 969, Address: 0x7fdf0)
- IsValidSid (Ordinal: 970, Address: 0x77230)
- IsWellKnownSid (Ordinal: 971, Address: 0x28720)
- IsWow64GuestMachineSupported (Ordinal: 972, Address: 0x143c60)
- IsWow64Process (Ordinal: 973, Address: 0x14b30)
- IsWow64Process2 (Ordinal: 974, Address: 0x14b70)
- K32EmptyWorkingSet (Ordinal: 975, Address: 0x1103c0)
- K32EnumDeviceDrivers (Ordinal: 976, Address: 0x7b320)
- K32EnumPageFilesA (Ordinal: 977, Address: 0x1106e0)
- K32EnumPageFilesW (Ordinal: 978, Address: 0x110730)
- K32EnumProcessModules (Ordinal: 979, Address: 0x15110)
- K32EnumProcessModulesEx (Ordinal: 980, Address: 0x110890)
- K32EnumProcesses (Ordinal: 981, Address: 0x89290)
- K32GetDeviceDriverBaseNameA (Ordinal: 982, Address: 0x7a090)
- K32GetDeviceDriverBaseNameW (Ordinal: 983, Address: 0x79fe0)
- K32GetDeviceDriverFileNameA (Ordinal: 984, Address: 0x1104e0)
- K32GetDeviceDriverFileNameW (Ordinal: 985, Address: 0x110560)
- K32GetMappedFileNameA (Ordinal: 986, Address: 0x110be0)
- K32GetMappedFileNameW (Ordinal: 987, Address: 0x110ca0)
- K32GetModuleBaseNameA (Ordinal: 988, Address: 0x157e0)
- K32GetModuleBaseNameW (Ordinal: 989, Address: 0x15040)
- K32GetModuleFileNameExA (Ordinal: 990, Address: 0xc7820)
- K32GetModuleFileNameExW (Ordinal: 991, Address: 0x15430)
- K32GetModuleInformation (Ordinal: 992, Address: 0x15370)
- K32GetPerformanceInfo (Ordinal: 993, Address: 0x8c100)
- K32GetProcessImageFileNameA (Ordinal: 994, Address: 0xc78e0)
- K32GetProcessImageFileNameW (Ordinal: 995, Address: 0x850d0)
- K32GetProcessMemoryInfo (Ordinal: 996, Address: 0x6b6e0)
- K32GetWsChanges (Ordinal: 997, Address: 0x110b20)
- K32GetWsChangesEx (Ordinal: 998, Address: 0x110b50)
- K32InitializeProcessForWsWatch (Ordinal: 999, Address: 0x110b80)
- K32QueryWorkingSet (Ordinal: 1000, Address: 0x110480)
- K32QueryWorkingSetEx (Ordinal: 1001, Address: 0x8df90)
- KernelBaseGetGlobalData (Ordinal: 1002, Address: 0x7d360)
- KernelbasePostInit (Ordinal: 1003, Address: 0x6fde0)
- LCIDToLocaleName (Ordinal: 1004, Address: 0x2f4e0)
- LCMapStringA (Ordinal: 1005, Address: 0xfc070)
- LCMapStringEx (Ordinal: 1006, Address: 0x38ea0)
- LCMapStringW (Ordinal: 1007, Address: 0x38d50)
- LeaveCriticalPolicySectionInternal (Ordinal: 1008, Address: 0xb20a0)
- LeaveCriticalSection (Ordinal: 1009, Address: 0x317e09)
- LeaveCriticalSectionWhenCallbackReturns (Ordinal: 1010, Address: 0x317e4f)
- LoadAppInitDlls (Ordinal: 1011, Address: 0x97970)
- LoadEnclaveData (Ordinal: 1012, Address: 0x13e810)
- LoadEnclaveImageA (Ordinal: 1013, Address: 0x13e880)
- LoadEnclaveImageW (Ordinal: 1014, Address: 0x13e8d0)
- LoadLibraryA (Ordinal: 1015, Address: 0x8d9b0)
- LoadLibraryExA (Ordinal: 1016, Address: 0x4cbc0)
- LoadLibraryExW (Ordinal: 1017, Address: 0x43fd0)
- LoadLibraryW (Ordinal: 1018, Address: 0x8d6c0)
- LoadPackagedLibrary (Ordinal: 1019, Address: 0x13d180)
- LoadResource (Ordinal: 1020, Address: 0x2bd30)
- LoadStringA (Ordinal: 1021, Address: 0x145c00)
- LoadStringBaseExW (Ordinal: 1022, Address: 0x2fa40)
- LoadStringByReference (Ordinal: 1023, Address: 0x30390)
- LoadStringW (Ordinal: 1024, Address: 0x2fa20)
- LocalAlloc (Ordinal: 1025, Address: 0x40ee0)
- LocalFileTimeToFileTime (Ordinal: 1026, Address: 0x95340)
- LocalFileTimeToLocalSystemTime (Ordinal: 1027, Address: 0x141a50)
- LocalFree (Ordinal: 1028, Address: 0x407d0)
- LocalLock (Ordinal: 1029, Address: 0x7a780)
- LocalReAlloc (Ordinal: 1030, Address: 0x3f5d0)
- LocalSystemTimeToLocalFileTime (Ordinal: 1031, Address: 0x141ad0)
- LocalUnlock (Ordinal: 1032, Address: 0x7a6b0)
- LocaleNameToLCID (Ordinal: 1033, Address: 0x79bb0)
- LocateXStateFeature (Ordinal: 1034, Address: 0xf7d60)
- LockFile (Ordinal: 1035, Address: 0x864b0)
- LockFileEx (Ordinal: 1036, Address: 0x70990)
- LockResource (Ordinal: 1037, Address: 0x79190)
- MakeAbsoluteSD (Ordinal: 1038, Address: 0x7d150)
- MakeAbsoluteSD2 (Ordinal: 1039, Address: 0x13b520)
- MakeSelfRelativeSD (Ordinal: 1040, Address: 0x7fae0)
- MapGenericMask (Ordinal: 1041, Address: 0x885a0)
- MapPredefinedHandleInternal (Ordinal: 1042, Address: 0x48310)
- MapUserPhysicalPages (Ordinal: 1043, Address: 0x13d630)
- MapViewOfFile (Ordinal: 1044, Address: 0x70b00)
- MapViewOfFile3 (Ordinal: 1045, Address: 0x142e10)
- MapViewOfFile3FromApp (Ordinal: 1046, Address: 0x142f00)
- MapViewOfFileEx (Ordinal: 1047, Address: 0x782a0)
- MapViewOfFileExNuma (Ordinal: 1048, Address: 0x782d0)
- MapViewOfFileFromApp (Ordinal: 1049, Address: 0x142ff0)
- MapViewOfFileNuma2 (Ordinal: 1050, Address: 0x7de80)
- MoveFileExW (Ordinal: 1051, Address: 0x8a040)
- MoveFileWithProgressTransactedW (Ordinal: 1052, Address: 0x8a070)
- MoveFileWithProgressW (Ordinal: 1053, Address: 0x8a010)
- MulDiv (Ordinal: 1054, Address: 0x694b0)
- MultiByteToWideChar (Ordinal: 1055, Address: 0x378e0)
- NamedPipeEventEnum (Ordinal: 1056, Address: 0x13ebe0)
- NamedPipeEventSelect (Ordinal: 1057, Address: 0x13ed20)
- NeedCurrentDirectoryForExePathA (Ordinal: 1058, Address: 0x143ca0)
- NeedCurrentDirectoryForExePathW (Ordinal: 1059, Address: 0x8d3a0)
- NlsCheckPolicy (Ordinal: 1060, Address: 0x6570)
- NlsDispatchAnsiEnumProc (Ordinal: 1061, Address: 0x100200)
- NlsGetACPFromLocale (Ordinal: 1062, Address: 0xfbf10)
- NlsGetCacheUpdateCount (Ordinal: 1063, Address: 0x7cca0)
- NlsIsUserDefaultLocale (Ordinal: 1064, Address: 0x72250)
- NlsUpdateLocale (Ordinal: 1065, Address: 0xfd690)
- NlsUpdateSystemLocale (Ordinal: 1066, Address: 0xfd880)
- NlsValidateLocale (Ordinal: 1067, Address: 0x35bb0)
- NormalizeString (Ordinal: 1068, Address: 0xc72c0)
- NotifyMountMgr (Ordinal: 1069, Address: 0x144d20)
- NotifyRedirectedStringChange (Ordinal: 1070, Address: 0x106c60)
- ObjectCloseAuditAlarmW (Ordinal: 1071, Address: 0x932f0)
- ObjectDeleteAuditAlarmW (Ordinal: 1072, Address: 0x13b560)
- ObjectOpenAuditAlarmW (Ordinal: 1073, Address: 0x8fbb0)
- ObjectPrivilegeAuditAlarmW (Ordinal: 1074, Address: 0x13b5d0)
- OfferVirtualMemory (Ordinal: 1075, Address: 0x13d670)
- OpenCommPort (Ordinal: 1076, Address: 0x1409e0)
- OpenDedicatedMemoryPartition (Ordinal: 1077, Address: 0xbeb00)
- OpenEventA (Ordinal: 1078, Address: 0x84c90)
- OpenEventW (Ordinal: 1079, Address: 0x4b380)
- OpenFileById (Ordinal: 1080, Address: 0x853c0)
- OpenFileMappingFromApp (Ordinal: 1081, Address: 0x1430a0)
- OpenFileMappingW (Ordinal: 1082, Address: 0x4b450)
- OpenGlobalizationUserSettingsKey (Ordinal: 1083, Address: 0x4e2e0)
- OpenMutexW (Ordinal: 1084, Address: 0x88180)
- OpenPackageInfoByFullName (Ordinal: 1085, Address: 0x26760)
- OpenPackageInfoByFullNameForMachine (Ordinal: 1086, Address: 0x119260)
- OpenPackageInfoByFullNameForUser (Ordinal: 1087, Address: 0x23e60)
- OpenPrivateNamespaceW (Ordinal: 1088, Address: 0x86d30)
- OpenProcess (Ordinal: 1089, Address: 0x44e10)
- OpenProcessToken (Ordinal: 1090, Address: 0x21930)
- OpenRegKey (Ordinal: 1091, Address: 0x5990)
- OpenSemaphoreW (Ordinal: 1092, Address: 0x4f140)
- OpenState (Ordinal: 1093, Address: 0xb420)
- OpenStateAtom (Ordinal: 1094, Address: 0x80660)
- OpenStateExplicit (Ordinal: 1095, Address: 0x207f0)
- OpenStateExplicitForUserSid (Ordinal: 1096, Address: 0x8cc20)
- OpenStateExplicitForUserSidString (Ordinal: 1097, Address: 0x8e7a0)
- OpenThread (Ordinal: 1098, Address: 0x7c300)
- OpenThreadToken (Ordinal: 1099, Address: 0x44840)
- OpenWaitableTimerW (Ordinal: 1100, Address: 0x13f260)
- OutputDebugStringA (Ordinal: 1101, Address: 0x3eef0)
- OutputDebugStringW (Ordinal: 1102, Address: 0x3f370)
- OverrideRoamingDataModificationTimesInRange (Ordinal: 1103, Address: 0x111e70)
- PackageFamilyNameFromFullName (Ordinal: 1104, Address: 0x72a70)
- PackageFamilyNameFromFullNameA (Ordinal: 1105, Address: 0x120b90)
- PackageFamilyNameFromId (Ordinal: 1106, Address: 0x94950)
- PackageFamilyNameFromIdA (Ordinal: 1107, Address: 0x120c20)
- PackageFamilyNameFromProductId (Ordinal: 1108, Address: 0x11f490)
- PackageFullNameFromId (Ordinal: 1109, Address: 0x120c30)
- PackageFullNameFromIdA (Ordinal: 1110, Address: 0x120c40)
- PackageFullNameFromProductId (Ordinal: 1111, Address: 0x959f0)
- PackageIdFromFullName (Ordinal: 1112, Address: 0x80180)
- PackageIdFromFullNameA (Ordinal: 1113, Address: 0x120c50)
- PackageIdFromProductId (Ordinal: 1114, Address: 0x11f4a0)
- PackageIsEffectiveSupportedUsersMultiple (Ordinal: 1115, Address: 0x11f640)
- PackageNameAndPublisherIdFromFamilyName (Ordinal: 1116, Address: 0x92b90)
- PackageNameAndPublisherIdFromFamilyNameA (Ordinal: 1117, Address: 0x120c70)
- PackagePublisherIdFromPublisher (Ordinal: 1118, Address: 0x120c80)
- PackageRelativeApplicationIdFromProductId (Ordinal: 1119, Address: 0x11f480)
- PackageSidFromFamilyName (Ordinal: 1120, Address: 0x120c90)
- ParseApplicationUserModelId (Ordinal: 1121, Address: 0x8dfe0)
- ParseApplicationUserModelIdA (Ordinal: 1122, Address: 0x120ca0)
- ParseURLA (Ordinal: 1123, Address: 0x680f0)
- ParseURLW (Ordinal: 1124, Address: 0x33d20)
- PathAddBackslashA (Ordinal: 1125, Address: 0xb0340)
- PathAddBackslashW (Ordinal: 1126, Address: 0x76f80)
- PathAddExtensionA (Ordinal: 1127, Address: 0x10c910)
- PathAddExtensionW (Ordinal: 1128, Address: 0x10b9d0)
- PathAllocCanonicalize (Ordinal: 1129, Address: 0x7f4f0)
- PathAllocCombine (Ordinal: 1130, Address: 0x40640)
- PathAppendA (Ordinal: 1131, Address: 0x10c9a0)
- PathAppendW (Ordinal: 1132, Address: 0x87310)
- PathCanonicalizeA (Ordinal: 1133, Address: 0x67f90)
- PathCanonicalizeW (Ordinal: 1134, Address: 0x8e1a0)
- PathCchAddBackslash (Ordinal: 1135, Address: 0x76fc0)
- PathCchAddBackslashEx (Ordinal: 1136, Address: 0x76fe0)
- PathCchAddExtension (Ordinal: 1137, Address: 0x906a0)
- PathCchAppend (Ordinal: 1138, Address: 0x8cbc0)
- PathCchAppendEx (Ordinal: 1139, Address: 0x412a0)
- PathCchCanonicalize (Ordinal: 1140, Address: 0x8ce20)
- PathCchCanonicalizeEx (Ordinal: 1141, Address: 0x41290)
- PathCchCombine (Ordinal: 1142, Address: 0x3f470)
- PathCchCombineEx (Ordinal: 1143, Address: 0x41350)
- PathCchFindExtension (Ordinal: 1144, Address: 0x70720)
- PathCchIsRoot (Ordinal: 1145, Address: 0x67570)
- PathCchRemoveBackslash (Ordinal: 1146, Address: 0x66f10)
- PathCchRemoveBackslashEx (Ordinal: 1147, Address: 0x674a0)
- PathCchRemoveExtension (Ordinal: 1148, Address: 0x7d2d0)
- PathCchRemoveFileSpec (Ordinal: 1149, Address: 0x67010)
- PathCchRenameExtension (Ordinal: 1150, Address: 0xf8320)
- PathCchSkipRoot (Ordinal: 1151, Address: 0x3fc10)
- PathCchStripPrefix (Ordinal: 1152, Address: 0x94390)
- PathCchStripToRoot (Ordinal: 1153, Address: 0x673f0)
- PathCombineA (Ordinal: 1154, Address: 0x10c380)
- PathCombineW (Ordinal: 1155, Address: 0x89fd0)
- PathCommonPrefixA (Ordinal: 1156, Address: 0x10ca10)
- PathCommonPrefixW (Ordinal: 1157, Address: 0x76840)
- PathCreateFromUrlA (Ordinal: 1158, Address: 0xf95c0)
- PathCreateFromUrlAlloc (Ordinal: 1159, Address: 0xf9720)
- PathCreateFromUrlW (Ordinal: 1160, Address: 0x32120)
- PathFileExistsA (Ordinal: 1161, Address: 0x2b840)
- PathFileExistsW (Ordinal: 1162, Address: 0x2eaa0)
- PathFindExtensionA (Ordinal: 1163, Address: 0x10c3c0)
- PathFindExtensionW (Ordinal: 1164, Address: 0x64750)
- PathFindFileNameA (Ordinal: 1165, Address: 0x684c0)
- PathFindFileNameW (Ordinal: 1166, Address: 0x69260)
- PathFindNextComponentA (Ordinal: 1167, Address: 0x10cb50)
- PathFindNextComponentW (Ordinal: 1168, Address: 0x94210)
- PathGetArgsA (Ordinal: 1169, Address: 0x10cbb0)
- PathGetArgsW (Ordinal: 1170, Address: 0x816a0)
- PathGetCharTypeA (Ordinal: 1171, Address: 0x10cc10)
- PathGetCharTypeW (Ordinal: 1172, Address: 0x7ab40)
- PathGetDriveNumberA (Ordinal: 1173, Address: 0x68460)
- PathGetDriveNumberW (Ordinal: 1174, Address: 0x76120)
- PathIsFileSpecA (Ordinal: 1175, Address: 0x10cc80)
- PathIsFileSpecW (Ordinal: 1176, Address: 0x774c0)
- PathIsLFNFileSpecA (Ordinal: 1177, Address: 0x10ccc0)
- PathIsLFNFileSpecW (Ordinal: 1178, Address: 0x10ba60)
- PathIsPrefixA (Ordinal: 1179, Address: 0x10cd60)
- PathIsPrefixW (Ordinal: 1180, Address: 0x767e0)
- PathIsRelativeA (Ordinal: 1181, Address: 0x10cdc0)
- PathIsRelativeW (Ordinal: 1182, Address: 0x760e0)
- PathIsRootA (Ordinal: 1183, Address: 0x10ce00)
- PathIsRootW (Ordinal: 1184, Address: 0x67560)
- PathIsSameRootA (Ordinal: 1185, Address: 0x10ce10)
- PathIsSameRootW (Ordinal: 1186, Address: 0x76760)
- PathIsUNCA (Ordinal: 1187, Address: 0x10c410)
- PathIsUNCEx (Ordinal: 1188, Address: 0x676d0)
- PathIsUNCServerA (Ordinal: 1189, Address: 0x10c440)
- PathIsUNCServerShareA (Ordinal: 1190, Address: 0x10c490)
- PathIsUNCServerShareW (Ordinal: 1191, Address: 0x673b0)
- PathIsUNCServerW (Ordinal: 1192, Address: 0x67360)
- PathIsUNCW (Ordinal: 1193, Address: 0x67ab0)
- PathIsURLA (Ordinal: 1194, Address: 0x680b0)
- PathIsURLW (Ordinal: 1195, Address: 0x333b0)
- PathIsValidCharA (Ordinal: 1196, Address: 0x10ce90)
- PathIsValidCharW (Ordinal: 1197, Address: 0x6b7f0)
- PathMatchSpecA (Ordinal: 1198, Address: 0xc77d0)
- PathMatchSpecExA (Ordinal: 1199, Address: 0x10c4f0)
- PathMatchSpecExW (Ordinal: 1200, Address: 0x10b920)
- PathMatchSpecW (Ordinal: 1201, Address: 0x681e0)
- PathParseIconLocationA (Ordinal: 1202, Address: 0x10c520)
- PathParseIconLocationW (Ordinal: 1203, Address: 0x6ab20)
- PathQuoteSpacesA (Ordinal: 1204, Address: 0x10c5b0)
- PathQuoteSpacesW (Ordinal: 1205, Address: 0x5940)
- PathRelativePathToA (Ordinal: 1206, Address: 0x10cf50)
- PathRelativePathToW (Ordinal: 1207, Address: 0x57a0)
- PathRemoveBackslashA (Ordinal: 1208, Address: 0x10d0f0)
- PathRemoveBackslashW (Ordinal: 1209, Address: 0x67150)
- PathRemoveBlanksA (Ordinal: 1210, Address: 0x10c640)
- PathRemoveBlanksW (Ordinal: 1211, Address: 0x6abd0)
- PathRemoveExtensionA (Ordinal: 1212, Address: 0x10d150)
- PathRemoveExtensionW (Ordinal: 1213, Address: 0x7d2a0)
- PathRemoveFileSpecA (Ordinal: 1214, Address: 0x10c6d0)
- PathRemoveFileSpecW (Ordinal: 1215, Address: 0x66fb0)
- PathRenameExtensionA (Ordinal: 1216, Address: 0x10d190)
- PathRenameExtensionW (Ordinal: 1217, Address: 0x10bb00)
- PathSearchAndQualifyA (Ordinal: 1218, Address: 0x10d210)
- PathSearchAndQualifyW (Ordinal: 1219, Address: 0x6b8d0)
- PathSkipRootA (Ordinal: 1220, Address: 0x10d2c0)
- PathSkipRootW (Ordinal: 1221, Address: 0x76a10)
- PathStripPathA (Ordinal: 1222, Address: 0x10d310)
- PathStripPathW (Ordinal: 1223, Address: 0x91fe0)
- PathStripToRootA (Ordinal: 1224, Address: 0x10d360)
- PathStripToRootW (Ordinal: 1225, Address: 0x67110)
- PathUnExpandEnvStringsA (Ordinal: 1226, Address: 0x10c730)
- PathUnExpandEnvStringsW (Ordinal: 1227, Address: 0xc7470)
- PathUnquoteSpacesA (Ordinal: 1228, Address: 0x10c760)
- PathUnquoteSpacesW (Ordinal: 1229, Address: 0x6ac40)
- PcwAddQueryItem (Ordinal: 1230, Address: 0x888d0)
- PcwClearCounterSetSecurity (Ordinal: 1231, Address: 0x12d360)
- PcwCollectData (Ordinal: 1232, Address: 0x88970)
- PcwCompleteNotification (Ordinal: 1233, Address: 0x12d3c0)
- PcwCreateNotifier (Ordinal: 1234, Address: 0x12d420)
- PcwCreateQuery (Ordinal: 1235, Address: 0x887c0)
- PcwDisconnectCounterSet (Ordinal: 1236, Address: 0xb1eb0)
- PcwEnumerateInstances (Ordinal: 1237, Address: 0x88810)
- PcwIsNotifierAlive (Ordinal: 1238, Address: 0x12d480)
- PcwQueryCounterSetSecurity (Ordinal: 1239, Address: 0x12d4d0)
- PcwReadNotificationData (Ordinal: 1240, Address: 0x12d530)
- PcwRegisterCounterSet (Ordinal: 1241, Address: 0xb15d0)
- PcwRemoveQueryItem (Ordinal: 1242, Address: 0x12d570)
- PcwSendNotification (Ordinal: 1243, Address: 0x12d5c0)
- PcwSendStatelessNotification (Ordinal: 1244, Address: 0x12d640)
- PcwSetCounterSetSecurity (Ordinal: 1245, Address: 0x12d6d0)
- PcwSetQueryItemUserData (Ordinal: 1246, Address: 0x88880)
- PeekConsoleInputA (Ordinal: 1247, Address: 0x1344e0)
- PeekConsoleInputW (Ordinal: 1248, Address: 0x1c1e0)
- PeekNamedPipe (Ordinal: 1249, Address: 0x81350)
- PerfCreateInstance (Ordinal: 1250, Address: 0x7f1a0)
- PerfDecrementULongCounterValue (Ordinal: 1251, Address: 0x6aa50)
- PerfDecrementULongLongCounterValue (Ordinal: 1252, Address: 0x12da20)
- PerfDeleteInstance (Ordinal: 1253, Address: 0x7f030)
- PerfIncrementULongCounterValue (Ordinal: 1254, Address: 0x6a190)
- PerfIncrementULongLongCounterValue (Ordinal: 1255, Address: 0x12daf0)
- PerfQueryInstance (Ordinal: 1256, Address: 0x12dbc0)
- PerfSetCounterRefValue (Ordinal: 1257, Address: 0x7ef00)
- PerfSetCounterSetInfo (Ordinal: 1258, Address: 0xb1130)
- PerfSetULongCounterValue (Ordinal: 1259, Address: 0xb4050)
- PerfSetULongLongCounterValue (Ordinal: 1260, Address: 0xb41c0)
- PerfStartProvider (Ordinal: 1261, Address: 0xb47d0)
- PerfStartProviderEx (Ordinal: 1262, Address: 0xb1ae0)
- PerfStopProvider (Ordinal: 1263, Address: 0xb1cc0)
- PoolPerAppKeyStateInternal (Ordinal: 1264, Address: 0x10e130)
- PostQueuedCompletionStatus (Ordinal: 1265, Address: 0x79140)
- PrefetchVirtualMemory (Ordinal: 1266, Address: 0x92250)
- PrivCopyFileExW (Ordinal: 1267, Address: 0xb1630)
- PrivilegeCheck (Ordinal: 1268, Address: 0x80da0)
- PrivilegedServiceAuditAlarmW (Ordinal: 1269, Address: 0x13b660)
- ProcessIdToSessionId (Ordinal: 1270, Address: 0x79e90)
- ProductIdFromPackageFamilyName (Ordinal: 1271, Address: 0x11f4b0)
- PsmCreateKey (Ordinal: 1272, Address: 0x7c710)
- PsmCreateKeyWithDynamicId (Ordinal: 1273, Address: 0x7c3f0)
- PsmEqualApplication (Ordinal: 1274, Address: 0x110d90)
- PsmEqualPackage (Ordinal: 1275, Address: 0x110e80)
- PsmGetApplicationNameFromKey (Ordinal: 1276, Address: 0x69fc0)
- PsmGetAumidFromKey (Ordinal: 1277, Address: 0x69ee0)
- PsmGetDynamicIdFromKey (Ordinal: 1278, Address: 0x6ab0)
- PsmGetKeyFromProcess (Ordinal: 1279, Address: 0x7c500)
- PsmGetKeyFromToken (Ordinal: 1280, Address: 0x7c580)
- PsmGetPackageFullNameFromKey (Ordinal: 1281, Address: 0x6a080)
- PsmIsChildKey (Ordinal: 1282, Address: 0x110f10)
- PsmIsDynamicKey (Ordinal: 1283, Address: 0x92a50)
- PsmIsValidKey (Ordinal: 1284, Address: 0x79c70)
- PssCaptureSnapshot (Ordinal: 1285, Address: 0x10f880)
- PssDuplicateSnapshot (Ordinal: 1286, Address: 0x69f0)
- PssFreeSnapshot (Ordinal: 1287, Address: 0x10f8c0)
- PssQuerySnapshot (Ordinal: 1288, Address: 0x6240)
- PssWalkMarkerCreate (Ordinal: 1289, Address: 0x10f920)
- PssWalkMarkerFree (Ordinal: 1290, Address: 0x10f9a0)
- PssWalkMarkerGetPosition (Ordinal: 1291, Address: 0x10fa60)
- PssWalkMarkerSeekToBeginning (Ordinal: 1292, Address: 0xc77e0)
- PssWalkMarkerSetPosition (Ordinal: 1293, Address: 0x10fa10)
- PssWalkSnapshot (Ordinal: 1294, Address: 0x10fab0)
- PublishStateChangeNotification (Ordinal: 1295, Address: 0x111f40)
- PublisherFromPackageFullName (Ordinal: 1296, Address: 0x1234f0)
- PulseEvent (Ordinal: 1297, Address: 0x7d770)
- PurgeComm (Ordinal: 1298, Address: 0x140ae0)
- QISearch (Ordinal: 1299, Address: 0x53c30)
- QueryActCtxSettingsW (Ordinal: 1300, Address: 0x7ff90)
- QueryActCtxW (Ordinal: 1301, Address: 0x89f40)
- QueryAuxiliaryCounterFrequency (Ordinal: 1302, Address: 0x141b80)
- QueryDepthSList (Ordinal: 1303, Address: 0x31953a)
- QueryDosDeviceW (Ordinal: 1304, Address: 0x463c0)
- QueryFullProcessImageNameA (Ordinal: 1305, Address: 0xc7090)
- QueryFullProcessImageNameW (Ordinal: 1306, Address: 0x74d50)
- QueryGlobalizationUserSettingsStatus (Ordinal: 1307, Address: 0x10b170)
- QueryIdleProcessorCycleTime (Ordinal: 1308, Address: 0x1470d0)
- QueryIdleProcessorCycleTimeEx (Ordinal: 1309, Address: 0x147130)
- QueryInterruptTime (Ordinal: 1310, Address: 0xb22b0)
- QueryInterruptTimePrecise (Ordinal: 1311, Address: 0x8d770)
- QueryMemoryResourceNotification (Ordinal: 1312, Address: 0x8bd80)
- QueryOptionalDelayLoadedAPI (Ordinal: 1313, Address: 0x13d240)
- QueryPartitionInformation (Ordinal: 1314, Address: 0xbeb70)
- QueryPerformanceCounter (Ordinal: 1315, Address: 0x319693)
- QueryPerformanceFrequency (Ordinal: 1316, Address: 0x3196ce)
- QueryProcessAffinityUpdateMode (Ordinal: 1317, Address: 0x143ce0)
- QueryProcessCycleTime (Ordinal: 1318, Address: 0x88660)
- QueryProtectedPolicy (Ordinal: 1319, Address: 0x8dff0)
- QuerySecurityAccessMask (Ordinal: 1320, Address: 0x79810)
- QueryStateAtomValueInfo (Ordinal: 1321, Address: 0x4de80)
- QueryStateContainerCreatedNew (Ordinal: 1322, Address: 0x4b860)
- QueryStateContainerItemInfo (Ordinal: 1323, Address: 0x4dd60)
- QueryThreadCycleTime (Ordinal: 1324, Address: 0x706a0)
- QueryThreadpoolStackInformation (Ordinal: 1325, Address: 0x10aac0)
- QueryUnbiasedInterruptTime (Ordinal: 1326, Address: 0x3197f5)
- QueryUnbiasedInterruptTimePrecise (Ordinal: 1327, Address: 0x141bd0)
- QueryVirtualMemoryInformation (Ordinal: 1328, Address: 0x13d690)
- QueryWorkingSet (Ordinal: 1329, Address: 0x110480)
- QueryWorkingSetEx (Ordinal: 1330, Address: 0x8df90)
- QueueUserAPC (Ordinal: 1331, Address: 0x80b00)
- QueueUserAPC2 (Ordinal: 1332, Address: 0x80b10)
- QueueUserWorkItem (Ordinal: 1333, Address: 0x878f0)
- QuirkGetData (Ordinal: 1334, Address: 0xf7950)
- QuirkGetData2 (Ordinal: 1335, Address: 0xf79a0)
- QuirkIsEnabled (Ordinal: 1336, Address: 0x760a0)
- QuirkIsEnabled2 (Ordinal: 1337, Address: 0xf79f0)
- QuirkIsEnabled3 (Ordinal: 1338, Address: 0x75e70)
- QuirkIsEnabledForPackage (Ordinal: 1339, Address: 0x923a0)
- QuirkIsEnabledForPackage2 (Ordinal: 1340, Address: 0x4480)
- QuirkIsEnabledForPackage3 (Ordinal: 1341, Address: 0x89970)
- QuirkIsEnabledForPackage4 (Ordinal: 1342, Address: 0x94830)
- QuirkIsEnabledForProcess (Ordinal: 1343, Address: 0x955b0)
- RaiseCustomSystemEventTrigger (Ordinal: 1344, Address: 0x1471a0)
- RaiseException (Ordinal: 1345, Address: 0x3f2d0)
- RaiseFailFastException (Ordinal: 1346, Address: 0x147210)
- ReOpenFile (Ordinal: 1347, Address: 0xf1ac0)
- ReadConsoleA (Ordinal: 1348, Address: 0x1356b0)
- ReadConsoleInputA (Ordinal: 1349, Address: 0x134510)
- ReadConsoleInputExA (Ordinal: 1350, Address: 0x134540)
- ReadConsoleInputExW (Ordinal: 1351, Address: 0xc7a60)
- ReadConsoleInputW (Ordinal: 1352, Address: 0x134570)
- ReadConsoleOutputA (Ordinal: 1353, Address: 0x1345a0)
- ReadConsoleOutputAttribute (Ordinal: 1354, Address: 0x1345d0)
- ReadConsoleOutputCharacterA (Ordinal: 1355, Address: 0x134610)
- ReadConsoleOutputCharacterW (Ordinal: 1356, Address: 0x134650)
- ReadConsoleOutputW (Ordinal: 1357, Address: 0xb30c0)
- ReadConsoleW (Ordinal: 1358, Address: 0x1358f0)
- ReadDirectoryChangesExW (Ordinal: 1359, Address: 0x89510)
- ReadDirectoryChangesW (Ordinal: 1360, Address: 0x894b0)
- ReadFile (Ordinal: 1361, Address: 0x44560)
- ReadFileEx (Ordinal: 1362, Address: 0x82610)
- ReadFileScatter (Ordinal: 1363, Address: 0x93bc0)
- ReadProcessMemory (Ordinal: 1364, Address: 0x15320)
- ReadStateAtomValue (Ordinal: 1365, Address: 0x4d840)
- ReadStateContainerValue (Ordinal: 1366, Address: 0x4daf0)
- ReclaimVirtualMemory (Ordinal: 1367, Address: 0x13d6f0)
- RecordFeatureUsage2 (Ordinal: 1368, Address: 0xbecb0)
- RefreshPackageInfo (Ordinal: 1369, Address: 0x1192f0)
- RefreshPolicyExInternal (Ordinal: 1370, Address: 0xf0890)
- RefreshPolicyInternal (Ordinal: 1371, Address: 0xf08e0)
- RegCloseKey (Ordinal: 1372, Address: 0x48fb0)
- RegCopyTreeW (Ordinal: 1373, Address: 0x32e0)
- RegCreateKeyExA (Ordinal: 1374, Address: 0x13be0)
- RegCreateKeyExInternalA (Ordinal: 1375, Address: 0x13c40)
- RegCreateKeyExInternalW (Ordinal: 1376, Address: 0x44b50)
- RegCreateKeyExW (Ordinal: 1377, Address: 0x44af0)
- RegDeleteKeyExA (Ordinal: 1378, Address: 0x10e260)
- RegDeleteKeyExInternalA (Ordinal: 1379, Address: 0x10e280)
- RegDeleteKeyExInternalW (Ordinal: 1380, Address: 0x75890)
- RegDeleteKeyExW (Ordinal: 1381, Address: 0x75550)
- RegDeleteKeyValueA (Ordinal: 1382, Address: 0x90460)
- RegDeleteKeyValueW (Ordinal: 1383, Address: 0x75d20)
- RegDeleteTreeA (Ordinal: 1384, Address: 0x754e0)
- RegDeleteTreeW (Ordinal: 1385, Address: 0x75570)
- RegDeleteValueA (Ordinal: 1386, Address: 0x904c0)
- RegDeleteValueW (Ordinal: 1387, Address: 0x75d80)
- RegDisablePredefinedCacheEx (Ordinal: 1388, Address: 0x7f630)
- RegEnumKeyExA (Ordinal: 1389, Address: 0x4ac90)
- RegEnumKeyExW (Ordinal: 1390, Address: 0x46d90)
- RegEnumValueA (Ordinal: 1391, Address: 0x856b0)
- RegEnumValueW (Ordinal: 1392, Address: 0x45e40)
- RegFlushKey (Ordinal: 1393, Address: 0x8f540)
- RegGetKeySecurity (Ordinal: 1394, Address: 0x4ce70)
- RegGetValueA (Ordinal: 1395, Address: 0x12450)
- RegGetValueW (Ordinal: 1396, Address: 0x47040)
- RegKrnGetAppKeyEventAddressInternal (Ordinal: 1397, Address: 0x10e1c0)
- RegKrnGetAppKeyLoaded (Ordinal: 1398, Address: 0x10e200)
- RegKrnGetClassesEnumTableAddressInternal (Ordinal: 1399, Address: 0x49730)
- RegKrnGetHKEY_ClassesRootAddress (Ordinal: 1400, Address: 0x10e210)
- RegKrnGetTermsrvRegistryExtensionFlags (Ordinal: 1401, Address: 0x48850)
- RegKrnResetAppKeyLoaded (Ordinal: 1402, Address: 0x10e230)
- RegKrnSetDllHasThreadStateGlobal (Ordinal: 1403, Address: 0x7bb90)
- RegKrnSetTermsrvRegistryExtensionFlags (Ordinal: 1404, Address: 0x10e250)
- RegLoadAppKeyA (Ordinal: 1405, Address: 0x83e80)
- RegLoadAppKeyW (Ordinal: 1406, Address: 0x84410)
- RegLoadKeyA (Ordinal: 1407, Address: 0x10e320)
- RegLoadKeyW (Ordinal: 1408, Address: 0x944d0)
- RegLoadMUIStringA (Ordinal: 1409, Address: 0x10e600)
- RegLoadMUIStringW (Ordinal: 1410, Address: 0x2e430)
- RegNotifyChangeKeyValue (Ordinal: 1411, Address: 0x4b270)
- RegOpenCurrentUser (Ordinal: 1412, Address: 0x7f8e0)
- RegOpenKeyExA (Ordinal: 1413, Address: 0x448c0)
- RegOpenKeyExInternalA (Ordinal: 1414, Address: 0x448f0)
- RegOpenKeyExInternalW (Ordinal: 1415, Address: 0x47ce0)
- RegOpenKeyExW (Ordinal: 1416, Address: 0x47cb0)
- RegOpenUserClassesRoot (Ordinal: 1417, Address: 0x7aef0)
- RegQueryInfoKeyA (Ordinal: 1418, Address: 0x86540)
- RegQueryInfoKeyW (Ordinal: 1419, Address: 0x45950)
- RegQueryMultipleValuesA (Ordinal: 1420, Address: 0x10e610)
- RegQueryMultipleValuesW (Ordinal: 1421, Address: 0x10ed70)
- RegQueryValueExA (Ordinal: 1422, Address: 0x45400)
- RegQueryValueExW (Ordinal: 1423, Address: 0x47fe0)
- RegRestoreKeyA (Ordinal: 1424, Address: 0x10f250)
- RegRestoreKeyW (Ordinal: 1425, Address: 0x10f3a0)
- RegSaveKeyExA (Ordinal: 1426, Address: 0x10f4b0)
- RegSaveKeyExW (Ordinal: 1427, Address: 0x10f680)
- RegSetKeySecurity (Ordinal: 1428, Address: 0xf8e0)
- RegSetKeyValueA (Ordinal: 1429, Address: 0x12d10)
- RegSetKeyValueW (Ordinal: 1430, Address: 0x82870)
- RegSetValueExA (Ordinal: 1431, Address: 0x12de0)
- RegSetValueExW (Ordinal: 1432, Address: 0x49fd0)
- RegUnLoadKeyA (Ordinal: 1433, Address: 0x10e4f0)
- RegUnLoadKeyW (Ordinal: 1434, Address: 0x94b50)
- RegisterApplicationRestart (Ordinal: 1435, Address: 0x71d0)
- RegisterBadMemoryNotification (Ordinal: 1436, Address: 0x13d840)
- RegisterGPNotificationInternal (Ordinal: 1437, Address: 0x8c730)
- RegisterStateChangeNotification (Ordinal: 1438, Address: 0x1c70)
- RegisterStateLock (Ordinal: 1439, Address: 0x28c0)
- RegisterTraceGuidsW (Ordinal: 1440, Address: 0x31a0e9)
- RegisterWaitForSingleObjectEx (Ordinal: 1441, Address: 0x7fa70)
- ReleaseActCtx (Ordinal: 1442, Address: 0x86a40)
- ReleaseMutex (Ordinal: 1443, Address: 0x3f270)
- ReleaseMutexWhenCallbackReturns (Ordinal: 1444, Address: 0x31a15f)
- ReleaseSRWLockExclusive (Ordinal: 1445, Address: 0x31a1a0)
- ReleaseSRWLockShared (Ordinal: 1446, Address: 0x31a1d6)
- ReleaseSemaphore (Ordinal: 1447, Address: 0x10990)
- ReleaseSemaphoreWhenCallbackReturns (Ordinal: 1448, Address: 0x31a229)
- ReleaseStateLock (Ordinal: 1449, Address: 0x111fe0)
- RemapPredefinedHandleInternal (Ordinal: 1450, Address: 0x10de20)
- RemoveDirectoryA (Ordinal: 1451, Address: 0x142b50)
- RemoveDirectoryW (Ordinal: 1452, Address: 0x8ae60)
- RemoveDllDirectory (Ordinal: 1453, Address: 0x959b0)
- RemoveExtensionProgIds (Ordinal: 1454, Address: 0x11e9c0)
- RemovePackageDependency (Ordinal: 1455, Address: 0x1195c0)
- RemovePackageStatus (Ordinal: 1456, Address: 0x122040)
- RemovePackageStatusForUser (Ordinal: 1457, Address: 0x122060)
- RemoveVectoredContinueHandler (Ordinal: 1458, Address: 0x31a336)
- RemoveVectoredExceptionHandler (Ordinal: 1459, Address: 0x31a37c)
- ReplaceFileExInternal (Ordinal: 1460, Address: 0x54f50)
- ReplaceFileW (Ordinal: 1461, Address: 0x54590)
- ResetEvent (Ordinal: 1462, Address: 0x6c170)
- ResetState (Ordinal: 1463, Address: 0x112080)
- ResetWriteWatch (Ordinal: 1464, Address: 0x70ac0)
- ResizePseudoConsole (Ordinal: 1465, Address: 0x133b90)
- ResolveDelayLoadedAPI (Ordinal: 1466, Address: 0x79b90)
- ResolveDelayLoadsFromDll (Ordinal: 1467, Address: 0x13d280)
- ResolveLocaleName (Ordinal: 1468, Address: 0x3ed90)
- RestoreLastError (Ordinal: 1469, Address: 0x31a453)
- RestoreThreadPreferredUILanguages (Ordinal: 1470, Address: 0xb4760)
- ResumeThread (Ordinal: 1471, Address: 0x89880)
- RevertToSelf (Ordinal: 1472, Address: 0x72d30)
- RsopLoggingEnabledInternal (Ordinal: 1473, Address: 0xb2d60)
- SHCoCreateInstance (Ordinal: 1474, Address: 0x7c380)
- SHExpandEnvironmentStringsA (Ordinal: 1475, Address: 0x10c7c0)
- SHExpandEnvironmentStringsW (Ordinal: 1476, Address: 0x127b0)
- SHLoadIndirectString (Ordinal: 1477, Address: 0x31450)
- SHLoadIndirectStringInternal (Ordinal: 1478, Address: 0x31940)
- SHRegCloseUSKey (Ordinal: 1479, Address: 0x77cd0)
- SHRegCreateUSKeyA (Ordinal: 1480, Address: 0xf88c0)
- SHRegCreateUSKeyW (Ordinal: 1481, Address: 0x89ad0)
- SHRegDeleteEmptyUSKeyA (Ordinal: 1482, Address: 0xf8960)
- SHRegDeleteEmptyUSKeyW (Ordinal: 1483, Address: 0xf8a00)
- SHRegDeleteUSValueA (Ordinal: 1484, Address: 0xf8a20)
- SHRegDeleteUSValueW (Ordinal: 1485, Address: 0xf8ab0)
- SHRegEnumUSKeyA (Ordinal: 1486, Address: 0x10d3a0)
- SHRegEnumUSKeyW (Ordinal: 1487, Address: 0x7fb20)
- SHRegEnumUSValueA (Ordinal: 1488, Address: 0x10d510)
- SHRegEnumUSValueW (Ordinal: 1489, Address: 0x8d5b0)
- SHRegGetBoolUSValueA (Ordinal: 1490, Address: 0xf8ac0)
- SHRegGetBoolUSValueW (Ordinal: 1491, Address: 0x779a0)
- SHRegGetUSValueA (Ordinal: 1492, Address: 0xb2150)
- SHRegGetUSValueW (Ordinal: 1493, Address: 0x77ba0)
- SHRegOpenUSKeyA (Ordinal: 1494, Address: 0xb2210)
- SHRegOpenUSKeyW (Ordinal: 1495, Address: 0x3f9e0)
- SHRegQueryInfoUSKeyA (Ordinal: 1496, Address: 0x10d6a0)
- SHRegQueryInfoUSKeyW (Ordinal: 1497, Address: 0x91150)
- SHRegQueryUSValueA (Ordinal: 1498, Address: 0x10d820)
- SHRegQueryUSValueW (Ordinal: 1499, Address: 0x77d60)
- SHRegSetUSValueA (Ordinal: 1500, Address: 0x10d9a0)
- SHRegSetUSValueW (Ordinal: 1501, Address: 0x10bb90)
- SHRegWriteUSValueA (Ordinal: 1502, Address: 0x10da30)
- SHRegWriteUSValueW (Ordinal: 1503, Address: 0x83c00)
- SHTruncateString (Ordinal: 1504, Address: 0x10c830)
- SaveAlternatePackageRootPath (Ordinal: 1505, Address: 0x112160)
- SaveStateRootFolderPath (Ordinal: 1506, Address: 0x112190)
- ScrollConsoleScreenBufferA (Ordinal: 1507, Address: 0x1350d0)
- ScrollConsoleScreenBufferW (Ordinal: 1508, Address: 0x1351a0)
- SearchPathA (Ordinal: 1509, Address: 0x146660)
- SearchPathW (Ordinal: 1510, Address: 0x6ba00)
- SetAclInformation (Ordinal: 1511, Address: 0x13b700)
- SetCachedSigningLevel (Ordinal: 1512, Address: 0x13b740)
- SetCalendarInfoW (Ordinal: 1513, Address: 0xfdba0)
- SetClientDynamicTimeZoneInformation (Ordinal: 1514, Address: 0xb2890)
- SetClientTimeZoneInformation (Ordinal: 1515, Address: 0x141c30)
- SetCommBreak (Ordinal: 1516, Address: 0x140bc0)
- SetCommConfig (Ordinal: 1517, Address: 0x140be0)
- SetCommMask (Ordinal: 1518, Address: 0x140ce0)
- SetCommState (Ordinal: 1519, Address: 0x140df0)
- SetCommTimeouts (Ordinal: 1520, Address: 0x141230)
- SetComputerNameA (Ordinal: 1521, Address: 0x145040)
- SetComputerNameEx2W (Ordinal: 1522, Address: 0x1450e0)
- SetComputerNameExA (Ordinal: 1523, Address: 0x1451f0)
- SetComputerNameExW (Ordinal: 1524, Address: 0x145270)
- SetComputerNameW (Ordinal: 1525, Address: 0x145290)
- SetConsoleActiveScreenBuffer (Ordinal: 1526, Address: 0x1351d0)
- SetConsoleCP (Ordinal: 1527, Address: 0x135230)
- SetConsoleCtrlHandler (Ordinal: 1528, Address: 0x86290)
- SetConsoleCursorInfo (Ordinal: 1529, Address: 0x1352a0)
- SetConsoleCursorPosition (Ordinal: 1530, Address: 0x8fb00)
- SetConsoleDisplayMode (Ordinal: 1531, Address: 0x135310)
- SetConsoleHistoryInfo (Ordinal: 1532, Address: 0x135340)
- SetConsoleInputExeNameA (Ordinal: 1533, Address: 0x133340)
- SetConsoleInputExeNameW (Ordinal: 1534, Address: 0x78f10)
- SetConsoleMode (Ordinal: 1535, Address: 0x1c650)
- SetConsoleNumberOfCommandsA (Ordinal: 1536, Address: 0x1333d0)
- SetConsoleNumberOfCommandsW (Ordinal: 1537, Address: 0x133490)
- SetConsoleOutputCP (Ordinal: 1538, Address: 0x1353c0)
- SetConsoleScreenBufferInfoEx (Ordinal: 1539, Address: 0x135430)
- SetConsoleScreenBufferSize (Ordinal: 1540, Address: 0x135530)
- SetConsoleTextAttribute (Ordinal: 1541, Address: 0x1c350)
- SetConsoleTitleA (Ordinal: 1542, Address: 0x1334a0)
- SetConsoleTitleW (Ordinal: 1543, Address: 0x93e20)
- SetConsoleWindowInfo (Ordinal: 1544, Address: 0x135590)
- SetCriticalSectionSpinCount (Ordinal: 1545, Address: 0x31aa8d)
- SetCurrentConsoleFontEx (Ordinal: 1546, Address: 0x135600)
- SetCurrentDirectoryA (Ordinal: 1547, Address: 0x145ca0)
- SetCurrentDirectoryW (Ordinal: 1548, Address: 0x8ce90)
- SetDefaultDllDirectories (Ordinal: 1549, Address: 0xb4af0)
- SetDynamicTimeZoneInformation (Ordinal: 1550, Address: 0x141d90)
- SetEndOfFile (Ordinal: 1551, Address: 0x729b0)
- SetEnvironmentStringsW (Ordinal: 1552, Address: 0x75fc0)
- SetEnvironmentVariableA (Ordinal: 1553, Address: 0x80020)
- SetEnvironmentVariableW (Ordinal: 1554, Address: 0x7c1f0)
- SetErrorMode (Ordinal: 1555, Address: 0x2ef80)
- SetEvent (Ordinal: 1556, Address: 0x6a650)
- SetEventWhenCallbackReturns (Ordinal: 1557, Address: 0x31abb1)
- SetExtensionProperty (Ordinal: 1558, Address: 0x120790)
- SetFileApisToANSI (Ordinal: 1559, Address: 0x13df60)
- SetFileApisToOEM (Ordinal: 1560, Address: 0x95250)
- SetFileAttributesA (Ordinal: 1561, Address: 0x1446e0)
- SetFileAttributesW (Ordinal: 1562, Address: 0x87350)
- SetFileInformationByHandle (Ordinal: 1563, Address: 0x85190)
- SetFileIoOverlappedRange (Ordinal: 1564, Address: 0x143310)
- SetFilePointer (Ordinal: 1565, Address: 0x56450)
- SetFilePointerEx (Ordinal: 1566, Address: 0x70560)
- SetFileSecurityW (Ordinal: 1567, Address: 0x90920)
- SetFileTime (Ordinal: 1568, Address: 0x931f0)
- SetFileValidData (Ordinal: 1569, Address: 0x94b00)
- SetHandleCount (Ordinal: 1570, Address: 0x13f150)
- SetHandleInformation (Ordinal: 1571, Address: 0x7d8a0)
- SetIsDeveloperModeEnabled (Ordinal: 1572, Address: 0x12d010)
- SetIsSideloadingEnabled (Ordinal: 1573, Address: 0x12d060)
- SetKernelObjectSecurity (Ordinal: 1574, Address: 0x8d4e0)
- SetLastConsoleEventActive (Ordinal: 1575, Address: 0x134cc0)
- SetLastError (Ordinal: 1576, Address: 0x31ad4b)
- SetLocalTime (Ordinal: 1577, Address: 0x141e50)
- SetLocaleInfoW (Ordinal: 1578, Address: 0xfeb30)
- SetNamedPipeHandleState (Ordinal: 1579, Address: 0x87510)
- SetPriorityClass (Ordinal: 1580, Address: 0x8ea60)
- SetPrivateObjectSecurity (Ordinal: 1581, Address: 0x13b790)
- SetPrivateObjectSecurityEx (Ordinal: 1582, Address: 0x13b7d0)
- SetProcessAffinityUpdateMode (Ordinal: 1583, Address: 0xb42f0)
- SetProcessDefaultCpuSetMasks (Ordinal: 1584, Address: 0x143d40)
- SetProcessDefaultCpuSets (Ordinal: 1585, Address: 0x143e20)
- SetProcessDynamicEHContinuationTargets (Ordinal: 1586, Address: 0x143f00)
- SetProcessDynamicEnforcedCetCompatibleRanges (Ordinal: 1587, Address: 0x143f60)
- SetProcessGroupAffinity (Ordinal: 1588, Address: 0x143fc0)
- SetProcessInformation (Ordinal: 1589, Address: 0x90fa0)
- SetProcessMitigationPolicy (Ordinal: 1590, Address: 0x8e350)
- SetProcessPreferredUILanguages (Ordinal: 1591, Address: 0x95950)
- SetProcessPriorityBoost (Ordinal: 1592, Address: 0x6d50)
- SetProcessShutdownParameters (Ordinal: 1593, Address: 0x90d80)
- SetProcessValidCallTargets (Ordinal: 1594, Address: 0x7ccc0)
- SetProcessValidCallTargetsForMappedView (Ordinal: 1595, Address: 0x13d8a0)
- SetProcessWorkingSetSize (Ordinal: 1596, Address: 0x13d8e0)
- SetProcessWorkingSetSizeEx (Ordinal: 1597, Address: 0x95140)
- SetProtectedPolicy (Ordinal: 1598, Address: 0x95700)
- SetProtocolProperty (Ordinal: 1599, Address: 0x122ec0)
- SetRoamingLastObservedChangeTime (Ordinal: 1600, Address: 0x1121c0)
- SetSecurityAccessMask (Ordinal: 1601, Address: 0x90a80)
- SetSecurityDescriptorControl (Ordinal: 1602, Address: 0x92dc0)
- SetSecurityDescriptorDacl (Ordinal: 1603, Address: 0x80900)
- SetSecurityDescriptorGroup (Ordinal: 1604, Address: 0x87e40)
- SetSecurityDescriptorOwner (Ordinal: 1605, Address: 0x878c0)
- SetSecurityDescriptorRMControl (Ordinal: 1606, Address: 0x94d40)
- SetSecurityDescriptorSacl (Ordinal: 1607, Address: 0x8e1f0)
- SetStateVersion (Ordinal: 1608, Address: 0x1122b0)
- SetStdHandle (Ordinal: 1609, Address: 0x80f40)
- SetStdHandleEx (Ordinal: 1610, Address: 0x146f50)
- SetSystemFileCacheSize (Ordinal: 1611, Address: 0x13d8f0)
- SetSystemTime (Ordinal: 1612, Address: 0x141f50)
- SetSystemTimeAdjustment (Ordinal: 1613, Address: 0x142050)
- SetSystemTimeAdjustmentPrecise (Ordinal: 1614, Address: 0x1420a0)
- SetThreadContext (Ordinal: 1615, Address: 0xb4790)
- SetThreadDescription (Ordinal: 1616, Address: 0x808b0)
- SetThreadErrorMode (Ordinal: 1617, Address: 0x72840)
- SetThreadGroupAffinity (Ordinal: 1618, Address: 0xb40d0)
- SetThreadIdealProcessor (Ordinal: 1619, Address: 0xb4180)
- SetThreadIdealProcessorEx (Ordinal: 1620, Address: 0x142750)
- SetThreadInformation (Ordinal: 1621, Address: 0x76200)
- SetThreadLocale (Ordinal: 1622, Address: 0x69db0)
- SetThreadPreferredUILanguages (Ordinal: 1623, Address: 0x66230)
- SetThreadPreferredUILanguages2 (Ordinal: 1624, Address: 0x66240)
- SetThreadPriority (Ordinal: 1625, Address: 0x72510)
- SetThreadPriorityBoost (Ordinal: 1626, Address: 0xb2d90)
- SetThreadSelectedCpuSetMasks (Ordinal: 1627, Address: 0x1427b0)
- SetThreadSelectedCpuSets (Ordinal: 1628, Address: 0x142890)
- SetThreadStackGuarantee (Ordinal: 1629, Address: 0x7e820)
- SetThreadToken (Ordinal: 1630, Address: 0x6c120)
- SetThreadUILanguage (Ordinal: 1631, Address: 0x662c0)
- SetThreadpoolStackInformation (Ordinal: 1632, Address: 0x10ab00)
- SetThreadpoolThreadMaximum (Ordinal: 1633, Address: 0x31b2dd)
- SetThreadpoolThreadMinimum (Ordinal: 1634, Address: 0x939e0)
- SetThreadpoolTimer (Ordinal: 1635, Address: 0x31b325)
- SetThreadpoolTimerEx (Ordinal: 1636, Address: 0x31b34b)
- SetThreadpoolWait (Ordinal: 1637, Address: 0x31b370)
- SetThreadpoolWaitEx (Ordinal: 1638, Address: 0x31b394)
- SetTimeZoneInformation (Ordinal: 1639, Address: 0x142110)
- SetTokenInformation (Ordinal: 1640, Address: 0x92a20)
- SetUnhandledExceptionFilter (Ordinal: 1641, Address: 0x79880)
- SetUserGeoID (Ordinal: 1642, Address: 0x1093a0)
- SetUserGeoName (Ordinal: 1643, Address: 0x1093c0)
- SetWaitableTimer (Ordinal: 1644, Address: 0x43d90)
- SetWaitableTimerEx (Ordinal: 1645, Address: 0x65440)
- SetXStateFeaturesMask (Ordinal: 1646, Address: 0xf7e30)
- SetupComm (Ordinal: 1647, Address: 0x141350)
- SharedLocalIsEnabled (Ordinal: 1648, Address: 0xad40)
- SignalObjectAndWait (Ordinal: 1649, Address: 0xc7e40)
- SizeofResource (Ordinal: 1650, Address: 0x29600)
- Sleep (Ordinal: 1651, Address: 0x76c0)
- SleepConditionVariableCS (Ordinal: 1652, Address: 0x7eda0)
- SleepConditionVariableSRW (Ordinal: 1653, Address: 0x7ee70)
- SleepEx (Ordinal: 1654, Address: 0x76d0)
- SpecialMBToWC (Ordinal: 1655, Address: 0x103d50)
- StartThreadpoolIo (Ordinal: 1656, Address: 0x31b4e6)
- StrCSpnA (Ordinal: 1657, Address: 0xf6aa0)
- StrCSpnIA (Ordinal: 1658, Address: 0xf6b10)
- StrCSpnIW (Ordinal: 1659, Address: 0xf6b80)
- StrCSpnW (Ordinal: 1660, Address: 0x34460)
- StrCatBuffA (Ordinal: 1661, Address: 0xf6bf0)
- StrCatBuffW (Ordinal: 1662, Address: 0xf6c30)
- StrCatChainW (Ordinal: 1663, Address: 0xf6c70)
- StrChrA (Ordinal: 1664, Address: 0x68030)
- StrChrA_MB (Ordinal: 1665, Address: 0x68c60)
- StrChrIA (Ordinal: 1666, Address: 0x68560)
- StrChrIW (Ordinal: 1667, Address: 0x8d950)
- StrChrNIW (Ordinal: 1668, Address: 0xf6cf0)
- StrChrNW (Ordinal: 1669, Address: 0x728e0)
- StrChrW (Ordinal: 1670, Address: 0x344d0)
- StrCmpCA (Ordinal: 1671, Address: 0x934f0)
- StrCmpCW (Ordinal: 1672, Address: 0x31030)
- StrCmpICA (Ordinal: 1673, Address: 0x653e0)
- StrCmpICW (Ordinal: 1674, Address: 0x32c80)
- StrCmpIW (Ordinal: 1675, Address: 0x35210)
- StrCmpLogicalW (Ordinal: 1676, Address: 0x824b0)
- StrCmpNA (Ordinal: 1677, Address: 0xf6d70)
- StrCmpNCA (Ordinal: 1678, Address: 0x875c0)
- StrCmpNCW (Ordinal: 1679, Address: 0x33320)
- StrCmpNIA (Ordinal: 1680, Address: 0x68f60)
- StrCmpNICA (Ordinal: 1681, Address: 0x69e70)
- StrCmpNICW (Ordinal: 1682, Address: 0x33170)
- StrCmpNIW (Ordinal: 1683, Address: 0x35d10)
- StrCmpNW (Ordinal: 1684, Address: 0x364a0)
- StrCmpW (Ordinal: 1685, Address: 0x36d30)
- StrCpyNW (Ordinal: 1686, Address: 0xf6de0)
- StrCpyNXA (Ordinal: 1687, Address: 0xf6e00)
- StrCpyNXW (Ordinal: 1688, Address: 0xf6e50)
- StrDupA (Ordinal: 1689, Address: 0x68ad0)
- StrDupW (Ordinal: 1690, Address: 0x40590)
- StrIsIntlEqualA (Ordinal: 1691, Address: 0xf6ea0)
- StrIsIntlEqualW (Ordinal: 1692, Address: 0x769c0)
- StrPBrkA (Ordinal: 1693, Address: 0xf6ef0)
- StrPBrkW (Ordinal: 1694, Address: 0x6b9b0)
- StrRChrA (Ordinal: 1695, Address: 0xf6f60)
- StrRChrIA (Ordinal: 1696, Address: 0xf6fe0)
- StrRChrIW (Ordinal: 1697, Address: 0x2850)
- StrRChrW (Ordinal: 1698, Address: 0x78b80)
- StrRStrIA (Ordinal: 1699, Address: 0xf7070)
- StrRStrIW (Ordinal: 1700, Address: 0x2fee0)
- StrSpnA (Ordinal: 1701, Address: 0xf7140)
- StrSpnW (Ordinal: 1702, Address: 0xf71e0)
- StrStrA (Ordinal: 1703, Address: 0x68b90)
- StrStrIA (Ordinal: 1704, Address: 0x683d0)
- StrStrIW (Ordinal: 1705, Address: 0x36e80)
- StrStrNIW (Ordinal: 1706, Address: 0xf7240)
- StrStrNW (Ordinal: 1707, Address: 0xf72f0)
- StrStrW (Ordinal: 1708, Address: 0x337c0)
- StrToInt64ExA (Ordinal: 1709, Address: 0xf73a0)
- StrToInt64ExW (Ordinal: 1710, Address: 0x8e910)
- StrToIntA (Ordinal: 1711, Address: 0x4cc0)
- StrToIntExA (Ordinal: 1712, Address: 0xf7450)
- StrToIntExW (Ordinal: 1713, Address: 0x8e8e0)
- StrToIntW (Ordinal: 1714, Address: 0x6aca0)
- StrTrimA (Ordinal: 1715, Address: 0xf7480)
- StrTrimW (Ordinal: 1716, Address: 0x333f0)
- SubmitThreadpoolWork (Ordinal: 1717, Address: 0x31b772)
- SubscribeEdpEnabledStateChange (Ordinal: 1718, Address: 0x92520)
- SubscribeFeatureUsageFlush (Ordinal: 1719, Address: 0xbecc0)
- SubscribeStateChangeNotification (Ordinal: 1720, Address: 0x8e090)
- SubscribeWdagEnabledStateChange (Ordinal: 1721, Address: 0x92460)
- SuspendThread (Ordinal: 1722, Address: 0x938f0)
- SwitchToFiber (Ordinal: 1723, Address: 0x81d50)
- SwitchToThread (Ordinal: 1724, Address: 0x76670)
- SystemTimeToFileTime (Ordinal: 1725, Address: 0x72780)
- SystemTimeToTzSpecificLocalTime (Ordinal: 1726, Address: 0x2d780)
- SystemTimeToTzSpecificLocalTimeEx (Ordinal: 1727, Address: 0x91420)
- TerminateEnclave (Ordinal: 1728, Address: 0x13e930)
- TerminateProcess (Ordinal: 1729, Address: 0x90400)
- TerminateProcessOnMemoryExhaustion (Ordinal: 1730, Address: 0x1474c0)
- TerminateThread (Ordinal: 1731, Address: 0x142970)
- TestClose (Ordinal: 1732, Address: 0x13a640)
- TestCreate (Ordinal: 1733, Address: 0x1a8c0)
- TestOpen (Ordinal: 1734, Address: 0x940d0)
- TestQueryData (Ordinal: 1735, Address: 0x1ba60)
- TestReport (Ordinal: 1736, Address: 0x1ab40)
- TestUnlockData (Ordinal: 1737, Address: 0x1ae30)
- TlsAlloc (Ordinal: 1738, Address: 0x7f920)
- TlsFree (Ordinal: 1739, Address: 0x807d0)
- TlsGetValue (Ordinal: 1740, Address: 0xc2080)
- TlsSetValue (Ordinal: 1741, Address: 0x693f0)
- TraceEvent (Ordinal: 1742, Address: 0x31b94f)
- TraceMessage (Ordinal: 1743, Address: 0x31b973)
- TraceMessageVa (Ordinal: 1744, Address: 0x31b998)
- TransactNamedPipe (Ordinal: 1745, Address: 0x89190)
- TransmitCommChar (Ordinal: 1746, Address: 0x141480)
- TryAcquireSRWLockExclusive (Ordinal: 1747, Address: 0x31b9ee)
- TryAcquireSRWLockShared (Ordinal: 1748, Address: 0x31ba2a)
- TryEnterCriticalSection (Ordinal: 1749, Address: 0x31ba63)
- TrySubmitThreadpoolCallback (Ordinal: 1750, Address: 0x79fb0)
- TzSpecificLocalTimeToSystemTime (Ordinal: 1751, Address: 0x2d0f0)
- TzSpecificLocalTimeToSystemTimeEx (Ordinal: 1752, Address: 0x91580)
- UnhandledExceptionFilter (Ordinal: 1753, Address: 0xb0760)
- UnlockFile (Ordinal: 1754, Address: 0x75080)
- UnlockFileEx (Ordinal: 1755, Address: 0x750e0)
- UnmapViewOfFile (Ordinal: 1756, Address: 0x761a0)
- UnmapViewOfFile2 (Ordinal: 1757, Address: 0x7ed30)
- UnmapViewOfFileEx (Ordinal: 1758, Address: 0x7ed10)
- UnregisterApplicationRestart (Ordinal: 1759, Address: 0xf15d0)
- UnregisterBadMemoryNotification (Ordinal: 1760, Address: 0x13d9b0)
- UnregisterGPNotificationInternal (Ordinal: 1761, Address: 0x8e6c0)
- UnregisterStateChangeNotification (Ordinal: 1762, Address: 0x1cc0)
- UnregisterStateLock (Ordinal: 1763, Address: 0x29d0)
- UnregisterTraceGuids (Ordinal: 1764, Address: 0x31bbef)
- UnregisterWaitEx (Ordinal: 1765, Address: 0x81b10)
- UnsubscribeEdpEnabledStateChange (Ordinal: 1766, Address: 0x948a0)
- UnsubscribeFeatureUsageFlush (Ordinal: 1767, Address: 0xbece0)
- UnsubscribeStateChangeNotification (Ordinal: 1768, Address: 0x92cc0)
- UnsubscribeWdagEnabledStateChange (Ordinal: 1769, Address: 0x948a0)
- UpdatePackageStatus (Ordinal: 1770, Address: 0x4380)
- UpdatePackageStatusForUser (Ordinal: 1771, Address: 0x122080)
- UpdatePackageStatusForUserSid (Ordinal: 1772, Address: 0x2f10)
- UpdateProcThreadAttribute (Ordinal: 1773, Address: 0x87b40)
- UrlApplySchemeA (Ordinal: 1774, Address: 0x4580)
- UrlApplySchemeW (Ordinal: 1775, Address: 0x90120)
- UrlCanonicalizeA (Ordinal: 1776, Address: 0xf97e0)
- UrlCanonicalizeW (Ordinal: 1777, Address: 0x310b0)
- UrlCombineA (Ordinal: 1778, Address: 0xf9880)
- UrlCombineW (Ordinal: 1779, Address: 0x8ee40)
- UrlCompareA (Ordinal: 1780, Address: 0xf98c0)
- UrlCompareW (Ordinal: 1781, Address: 0xf9a50)
- UrlCreateFromPathA (Ordinal: 1782, Address: 0xf9be0)
- UrlCreateFromPathW (Ordinal: 1783, Address: 0x314e0)
- UrlEscapeA (Ordinal: 1784, Address: 0xf9d40)
- UrlEscapeW (Ordinal: 1785, Address: 0x30f80)
- UrlFixupW (Ordinal: 1786, Address: 0xf9eb0)
- UrlGetLocationA (Ordinal: 1787, Address: 0xfa230)
- UrlGetLocationW (Ordinal: 1788, Address: 0xfa2e0)
- UrlGetPartA (Ordinal: 1789, Address: 0x46e0)
- UrlGetPartW (Ordinal: 1790, Address: 0x32d90)
- UrlHashA (Ordinal: 1791, Address: 0x2100)
- UrlHashW (Ordinal: 1792, Address: 0x2050)
- UrlIsA (Ordinal: 1793, Address: 0xfa350)
- UrlIsNoHistoryA (Ordinal: 1794, Address: 0xfa450)
- UrlIsNoHistoryW (Ordinal: 1795, Address: 0x95a80)
- UrlIsOpaqueA (Ordinal: 1796, Address: 0xfa470)
- UrlIsOpaqueW (Ordinal: 1797, Address: 0xfa490)
- UrlIsW (Ordinal: 1798, Address: 0x33bb0)
- UrlUnescapeA (Ordinal: 1799, Address: 0x76340)
- UrlUnescapeW (Ordinal: 1800, Address: 0x327f0)
- VerFindFileA (Ordinal: 1801, Address: 0xf0160)
- VerFindFileW (Ordinal: 1802, Address: 0xf0c30)
- VerLanguageNameA (Ordinal: 1803, Address: 0x94960)
- VerLanguageNameW (Ordinal: 1804, Address: 0x2c070)
- VerQueryValueA (Ordinal: 1805, Address: 0x94810)
- VerQueryValueW (Ordinal: 1806, Address: 0x327d0)
- VerSetConditionMask (Ordinal: 1807, Address: 0x31beda)
- VerifyApplicationUserModelId (Ordinal: 1808, Address: 0x95aa0)
- VerifyApplicationUserModelIdA (Ordinal: 1809, Address: 0x120cb0)
- VerifyPackageFamilyName (Ordinal: 1810, Address: 0x120cf0)
- VerifyPackageFamilyNameA (Ordinal: 1811, Address: 0x120d40)
- VerifyPackageFullName (Ordinal: 1812, Address: 0x90300)
- VerifyPackageFullNameA (Ordinal: 1813, Address: 0x120d90)
- VerifyPackageId (Ordinal: 1814, Address: 0x120e10)
- VerifyPackageIdA (Ordinal: 1815, Address: 0x120e90)
- VerifyPackagePublisher (Ordinal: 1816, Address: 0x2640)
- VerifyPackagePublisherA (Ordinal: 1817, Address: 0x120f10)
- VerifyPackageRelativeApplicationId (Ordinal: 1818, Address: 0x120f80)
- VerifyPackageRelativeApplicationIdA (Ordinal: 1819, Address: 0x120fd0)
- VerifyScripts (Ordinal: 1820, Address: 0x1069f0)
- VirtualAlloc (Ordinal: 1821, Address: 0x6a5d0)
- VirtualAlloc2 (Ordinal: 1822, Address: 0x13d9f0)
- VirtualAlloc2FromApp (Ordinal: 1823, Address: 0x13daa0)
- VirtualAllocEx (Ordinal: 1824, Address: 0x8f40)
- VirtualAllocExNuma (Ordinal: 1825, Address: 0xa640)
- VirtualAllocFromApp (Ordinal: 1826, Address: 0x13dae0)
- VirtualFree (Ordinal: 1827, Address: 0x707d0)
- VirtualFreeEx (Ordinal: 1828, Address: 0x94180)
- VirtualLock (Ordinal: 1829, Address: 0x92410)
- VirtualProtect (Ordinal: 1830, Address: 0x72340)
- VirtualProtectEx (Ordinal: 1831, Address: 0x85650)
- VirtualProtectFromApp (Ordinal: 1832, Address: 0x13db30)
- VirtualQuery (Ordinal: 1833, Address: 0x76610)
- VirtualQueryEx (Ordinal: 1834, Address: 0x79b40)
- VirtualUnlock (Ordinal: 1835, Address: 0x7d100)
- VirtualUnlockEx (Ordinal: 1836, Address: 0x13dbc0)
- WTSGetServiceSessionId (Ordinal: 1837, Address: 0x8bee0)
- WTSIsServerContainer (Ordinal: 1838, Address: 0x8d320)
- WaitCommEvent (Ordinal: 1839, Address: 0x141560)
- WaitForDebugEvent (Ordinal: 1840, Address: 0x13f7a0)
- WaitForDebugEventEx (Ordinal: 1841, Address: 0x13f7b0)
- WaitForMachinePolicyForegroundProcessingInternal (Ordinal: 1842, Address: 0xf0920)
- WaitForMultipleObjects (Ordinal: 1843, Address: 0x647d0)
- WaitForMultipleObjectsEx (Ordinal: 1844, Address: 0x647f0)
- WaitForSingleObject (Ordinal: 1845, Address: 0x3d5f0)
- WaitForSingleObjectEx (Ordinal: 1846, Address: 0x3d880)
- WaitForThreadpoolIoCallbacks (Ordinal: 1847, Address: 0x31c236)
- WaitForThreadpoolTimerCallbacks (Ordinal: 1848, Address: 0x31c272)
- WaitForThreadpoolWaitCallbacks (Ordinal: 1849, Address: 0x31c2a6)
- WaitForThreadpoolWorkCallbacks (Ordinal: 1850, Address: 0x31c2d9)
- WaitForUserPolicyForegroundProcessingInternal (Ordinal: 1851, Address: 0xf0960)
- WaitNamedPipeW (Ordinal: 1852, Address: 0x89cb0)
- WaitOnAddress (Ordinal: 1853, Address: 0x7ee00)
- WakeAllConditionVariable (Ordinal: 1854, Address: 0x31c351)
- WakeByAddressAll (Ordinal: 1855, Address: 0x31c384)
- WakeByAddressSingle (Ordinal: 1856, Address: 0x31c3b0)
- WakeConditionVariable (Ordinal: 1857, Address: 0x31c3e1)
- WerGetFlags (Ordinal: 1858, Address: 0x14980)
- WerRegisterAdditionalProcess (Ordinal: 1859, Address: 0xf15f0)
- WerRegisterAppLocalDump (Ordinal: 1860, Address: 0xf1600)
- WerRegisterCustomMetadata (Ordinal: 1861, Address: 0x77c0)
- WerRegisterExcludedMemoryBlock (Ordinal: 1862, Address: 0xf1610)
- WerRegisterFile (Ordinal: 1863, Address: 0x9340)
- WerRegisterMemoryBlock (Ordinal: 1864, Address: 0x8d520)
- WerRegisterRuntimeExceptionModule (Ordinal: 1865, Address: 0x8f70)
- WerSetFlags (Ordinal: 1866, Address: 0x7ee0)
- WerSetMaxProcessHoldMilliseconds (Ordinal: 1867, Address: 0xb2c00)
- WerUnregisterAdditionalProcess (Ordinal: 1868, Address: 0xf1630)
- WerUnregisterAppLocalDump (Ordinal: 1869, Address: 0xf1640)
- WerUnregisterCustomMetadata (Ordinal: 1870, Address: 0xf1660)
- WerUnregisterExcludedMemoryBlock (Ordinal: 1871, Address: 0xf1670)
- WerUnregisterFile (Ordinal: 1872, Address: 0x9330)
- WerUnregisterMemoryBlock (Ordinal: 1873, Address: 0x9290)
- WerUnregisterRuntimeExceptionModule (Ordinal: 1874, Address: 0x68a0)
- WerpNotifyLoadStringResource (Ordinal: 1875, Address: 0xf1690)
- WerpNotifyUseStringResource (Ordinal: 1876, Address: 0x96910)
- WideCharToMultiByte (Ordinal: 1877, Address: 0x17ff0)
- Wow64DisableWow64FsRedirection (Ordinal: 1878, Address: 0x922a0)
- Wow64EnableWow64FsRedirection (Ordinal: 1879, Address: 0x6a80)
- Wow64GetThreadContext (Ordinal: 1880, Address: 0x142a90)
- Wow64RevertWow64FsRedirection (Ordinal: 1881, Address: 0x13f160)
- Wow64SetThreadContext (Ordinal: 1882, Address: 0x142ad0)
- Wow64SetThreadDefaultGuestMachine (Ordinal: 1883, Address: 0x2b660)
- Wow64SuspendThread (Ordinal: 1884, Address: 0x142b10)
- WriteConsoleA (Ordinal: 1885, Address: 0x135940)
- WriteConsoleInputA (Ordinal: 1886, Address: 0x134760)
- WriteConsoleInputW (Ordinal: 1887, Address: 0x134830)
- WriteConsoleOutputA (Ordinal: 1888, Address: 0x134850)
- WriteConsoleOutputAttribute (Ordinal: 1889, Address: 0x134880)
- WriteConsoleOutputCharacterA (Ordinal: 1890, Address: 0x1348c0)
- WriteConsoleOutputCharacterW (Ordinal: 1891, Address: 0x134900)
- WriteConsoleOutputW (Ordinal: 1892, Address: 0xb3330)
- WriteConsoleW (Ordinal: 1893, Address: 0x1c6e0)
- WriteFile (Ordinal: 1894, Address: 0x443d0)
- WriteFileEx (Ordinal: 1895, Address: 0x82520)
- WriteFileGather (Ordinal: 1896, Address: 0x92ba0)
- WriteProcessMemory (Ordinal: 1897, Address: 0x7d990)
- WriteStateAtomValue (Ordinal: 1898, Address: 0x78740)
- WriteStateContainerValue (Ordinal: 1899, Address: 0x7a390)
- ZombifyActCtx (Ordinal: 1900, Address: 0xf1350)
- _AddMUIStringToCache (Ordinal: 1901, Address: 0x6d20)
- _GetMUIStringFromCache (Ordinal: 1902, Address: 0x2fd00)
- _OpenMuiStringCache (Ordinal: 1903, Address: 0x30240)
- __C_specific_handler (Ordinal: 1904, Address: 0x31c847)
- __argc (Ordinal: 1905, Address: 0x326ee8)
- __chkstk (Ordinal: 1906, Address: 0x31c872)
- __dllonexit3 (Ordinal: 1907, Address: 0x7b500)
- __misaligned_access (Ordinal: 1908, Address: 0x31c8a2)
- __wargv (Ordinal: 1909, Address: 0x326ee0)
- __wgetmainargs (Ordinal: 1910, Address: 0x92a80)
- _amsg_exit (Ordinal: 1911, Address: 0x979c0)
- _c_exit (Ordinal: 1912, Address: 0x10b2f0)
- _cexit (Ordinal: 1913, Address: 0x10b310)
- _exit (Ordinal: 1914, Address: 0x10b330)
- _initterm (Ordinal: 1915, Address: 0x7fe20)
- _initterm_e (Ordinal: 1916, Address: 0x85600)
- _invalid_parameter (Ordinal: 1917, Address: 0xb4e30)
- _local_unwind (Ordinal: 1918, Address: 0x31c92a)
- _onexit (Ordinal: 1919, Address: 0x7b4a0)
- _purecall (Ordinal: 1920, Address: 0xb5030)
- _time64 (Ordinal: 1921, Address: 0xb5050)
- atexit (Ordinal: 1922, Address: 0x7b480)
- exit (Ordinal: 1923, Address: 0x10b490)
- hgets (Ordinal: 1924, Address: 0x10b4b0)
- hwprintf (Ordinal: 1925, Address: 0x10b5d0)
- lstrcmp (Ordinal: 1926, Address: 0x4f70)
- lstrcmpA (Ordinal: 1927, Address: 0x4f70)
- lstrcmpW (Ordinal: 1928, Address: 0x36780)
- lstrcmpi (Ordinal: 1929, Address: 0x68630)
- lstrcmpiA (Ordinal: 1930, Address: 0x68630)
- lstrcmpiW (Ordinal: 1931, Address: 0x37070)
- lstrcpyn (Ordinal: 1932, Address: 0x147050)
- lstrcpynA (Ordinal: 1933, Address: 0x147050)
- lstrcpynW (Ordinal: 1934, Address: 0x8b370)
- lstrlen (Ordinal: 1935, Address: 0x68cb0)
- lstrlenA (Ordinal: 1936, Address: 0x68cb0)
- lstrlenW (Ordinal: 1937, Address: 0x35b10)
- time (Ordinal: 1938, Address: 0xb50c0)
- wprintf (Ordinal: 1939, Address: 0x10b7c0)
Imported DLLs & Functions
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x18023bfe8)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x18023c008)
- EventRegister (Address: 0x18023c000)
- EventSetInformation (Address: 0x18023c018)
- EventUnregister (Address: 0x18023bff8)
- EventWriteTransfer (Address: 0x18023c010)
ntdll.dll
- (Address: 0x18023d2a0)
- __C_specific_handler (Address: 0x18023c038)
- __chkstk (Address: 0x18023d650)
- _errno (Address: 0x18023cb08)
- _itow_s (Address: 0x18023c3d0)
- _local_unwind (Address: 0x18023d658)
- _stricmp (Address: 0x18023cd70)
- _strlwr (Address: 0x18023c838)
- _strnicmp (Address: 0x18023c788)
- _ui64tow_s (Address: 0x18023c488)
- _vsnprintf (Address: 0x18023c380)
- _vsnwprintf (Address: 0x18023c278)
- _wcsicmp (Address: 0x18023c0e0)
- _wcslwr (Address: 0x18023c5b8)
- _wcsnicmp (Address: 0x18023c240)
- _wtoi (Address: 0x18023c3c8)
- _wtol (Address: 0x18023c5c8)
- CsrAllocateCaptureBuffer (Address: 0x18023c5a0)
- CsrAllocateMessagePointer (Address: 0x18023d5d0)
- CsrCaptureMessageBuffer (Address: 0x18023c590)
- CsrCaptureMessageMultiUnicodeStringsInPlace (Address: 0x18023d5c8)
- CsrClientCallServer (Address: 0x18023c588)
- CsrClientConnectToServer (Address: 0x18023d5d8)
- CsrFreeCaptureBuffer (Address: 0x18023c598)
- CsrGetProcessId (Address: 0x18023d140)
- DbgPrint (Address: 0x18023c5e0)
- DbgPrintEx (Address: 0x18023c620)
- DbgUiConnectToDbg (Address: 0x18023d150)
- DbgUiContinue (Address: 0x18023d120)
- DbgUiConvertStateChangeStructure (Address: 0x18023d138)
- DbgUiConvertStateChangeStructureEx (Address: 0x18023d130)
- DbgUiDebugActiveProcess (Address: 0x18023d158)
- DbgUiGetThreadDebugObject (Address: 0x18023d3e8)
- DbgUiStopDebugging (Address: 0x18023d160)
- DbgUiWaitStateChange (Address: 0x18023d128)
- EtwCheckCoverage (Address: 0x18023d378)
- EtwEventEnabled (Address: 0x18023c8c0)
- EtwEventRegister (Address: 0x18023c8b8)
- EtwEventSetInformation (Address: 0x18023d570)
- EtwEventUnregister (Address: 0x18023c8b0)
- EtwEventWrite (Address: 0x18023c8c8)
- EtwEventWriteNoRegistration (Address: 0x18023ccf0)
- EtwEventWriteTransfer (Address: 0x18023ca58)
- isalpha (Address: 0x18023c780)
- iswalpha (Address: 0x18023c328)
- LdrAccessResource (Address: 0x18023c4f8)
- LdrAddDllDirectory (Address: 0x18023cdd8)
- LdrAddLoadAsDataTable (Address: 0x18023cd68)
- LdrAddRefDll (Address: 0x18023cdc8)
- LdrAppxHandleIntegrityFailure (Address: 0x18023d320)
- LdrCallEnclave (Address: 0x18023cfa8)
- LdrCreateEnclave (Address: 0x18023cf88)
- LdrDeleteEnclave (Address: 0x18023cfb8)
- LdrDisableThreadCalloutsForDll (Address: 0x18023cdb0)
- LdrFindResource_U (Address: 0x18023ce18)
- LdrFindResourceEx_U (Address: 0x18023c490)
- LdrGetDllDirectory (Address: 0x18023d3d0)
- LdrGetDllFullName (Address: 0x18023cdb8)
- LdrGetDllHandle (Address: 0x18023c820)
- LdrGetDllHandleByMapping (Address: 0x18023cd58)
- LdrGetDllHandleByName (Address: 0x18023cd40)
- LdrGetDllPath (Address: 0x18023cd80)
- LdrGetFileNameFromLoadAsDataTable (Address: 0x18023ce48)
- LdrGetProcedureAddress (Address: 0x18023c818)
- LdrGetProcedureAddressForCaller (Address: 0x18023cdd0)
- LdrInitializeEnclave (Address: 0x18023cf98)
- LdrLoadAlternateResourceModule (Address: 0x18023ce50)
- LdrLoadAlternateResourceModuleEx (Address: 0x18023ce60)
- LdrLoadDll (Address: 0x18023cd90)
- LdrLoadEnclaveModule (Address: 0x18023cfa0)
- LdrpResGetMappingSize (Address: 0x18023ce68)
- LdrpResGetResourceDirectory (Address: 0x18023ce28)
- LdrQueryImageFileExecutionOptionsEx (Address: 0x18023d3e0)
- LdrQueryImageFileKeyOption (Address: 0x18023d418)
- LdrQueryOptionalDelayLoadedAPI (Address: 0x18023ce00)
- LdrRemoveDllDirectory (Address: 0x18023cde0)
- LdrRemoveLoadAsDataTable (Address: 0x18023cd98)
- LdrResFindResource (Address: 0x18023ce40)
- LdrResFindResourceDirectory (Address: 0x18023ce38)
- LdrResGetRCConfig (Address: 0x18023ce20)
- LdrResolveDelayLoadedAPI (Address: 0x18023cdf0)
- LdrResolveDelayLoadsFromDll (Address: 0x18023cdf8)
- LdrResRelease (Address: 0x18023c0a8)
- LdrResSearchResource (Address: 0x18023c0c8)
- LdrRscIsTypeExist (Address: 0x18023ce58)
- LdrSetDefaultDllDirectories (Address: 0x18023cde8)
- LdrUnloadAlternateResourceModule (Address: 0x18023cda0)
- LdrUnloadDll (Address: 0x18023cda8)
- LdrUpdatePackageSearchPath (Address: 0x18023c988)
- memcmp (Address: 0x18023d660)
- memcpy (Address: 0x18023d668)
- memcpy_s (Address: 0x18023c358)
- memmove (Address: 0x18023d670)
- memmove_s (Address: 0x18023c378)
- memset (Address: 0x18023d678)
- NlsMbCodePageTag (Address: 0x18023c058)
- NtAccessCheck (Address: 0x18023cb30)
- NtAccessCheckAndAuditAlarm (Address: 0x18023cb78)
- NtAccessCheckByType (Address: 0x18023cb38)
- NtAccessCheckByTypeAndAuditAlarm (Address: 0x18023cb80)
- NtAccessCheckByTypeResultList (Address: 0x18023cb40)
- NtAccessCheckByTypeResultListAndAuditAlarm (Address: 0x18023cb88)
- NtAccessCheckByTypeResultListAndAuditAlarmByHandle (Address: 0x18023cb90)
- NtAdjustGroupsToken (Address: 0x18023cb68)
- NtAdjustPrivilegesToken (Address: 0x18023cb60)
- NtAllocateLocallyUniqueId (Address: 0x18023cb28)
- NtAllocateUserPhysicalPages (Address: 0x18023cf00)
- NtAllocateUserPhysicalPagesEx (Address: 0x18023cf08)
- NtAllocateVirtualMemory (Address: 0x18023cec0)
- NtAllocateVirtualMemoryEx (Address: 0x18023cec8)
- NtCancelIoFile (Address: 0x18023d000)
- NtCancelIoFileEx (Address: 0x18023d008)
- NtCancelSynchronousIoFile (Address: 0x18023d010)
- NtCancelTimer (Address: 0x18023d090)
- NtClearEvent (Address: 0x18023d040)
- NtClose (Address: 0x18023c720)
- NtCloseObjectAuditAlarm (Address: 0x18023cba8)
- NtCompareObjects (Address: 0x18023d178)
- NtCompareSigningLevels (Address: 0x18023ca38)
- NtConvertBetweenAuxiliaryCounterAndPerformanceCounter (Address: 0x18023d1e0)
- NtCreateDirectoryObjectEx (Address: 0x18023cf80)
- NtCreateEvent (Address: 0x18023c220)
- NtCreateFile (Address: 0x18023c178)
- NtCreateIoCompletion (Address: 0x18023d358)
- NtCreateKey (Address: 0x18023c2a8)
- NtCreateKeyTransacted (Address: 0x18023c298)
- NtCreateLowBoxToken (Address: 0x18023d2f8)
- NtCreateMutant (Address: 0x18023d068)
- NtCreateNamedPipeFile (Address: 0x18023cfc8)
- NtCreatePrivateNamespace (Address: 0x18023c710)
- NtCreateSection (Address: 0x18023c550)
- NtCreateSectionEx (Address: 0x18023d318)
- NtCreateSemaphore (Address: 0x18023d050)
- NtCreateSymbolicLinkObject (Address: 0x18023cf78)
- NtCreateThreadEx (Address: 0x18023d1e8)
- NtCreateTimer (Address: 0x18023d078)
- NtCreateTimer2 (Address: 0x18023d070)
- NtCreateUserProcess (Address: 0x18023d410)
- NtCreateWnfStateName (Address: 0x18023c8d0)
- NtDelayExecution (Address: 0x18023d0f0)
- NtDeleteKey (Address: 0x18023c520)
- NtDeleteObjectAuditAlarm (Address: 0x18023cbb0)
- NtDeletePrivateNamespace (Address: 0x18023c388)
- NtDeleteValueKey (Address: 0x18023c3e0)
- NtDeleteWnfStateName (Address: 0x18023c8d8)
- NtDeviceIoControlFile (Address: 0x18023ca50)
- NtDuplicateObject (Address: 0x18023c798)
- NtDuplicateToken (Address: 0x18023cb20)
- NtEnumerateKey (Address: 0x18023c478)
- NtEnumerateValueKey (Address: 0x18023c420)
- NtFilterToken (Address: 0x18023ccf8)
- NtFlushBuffersFile (Address: 0x18023c210)
- NtFlushKey (Address: 0x18023d5f0)
- NtFlushVirtualMemory (Address: 0x18023d338)
- NtFreeUserPhysicalPages (Address: 0x18023cf10)
- NtFreeVirtualMemory (Address: 0x18023ced0)
- NtFsControlFile (Address: 0x18023c168)
- NtGetCachedSigningLevel (Address: 0x18023ca30)
- NtGetContextThread (Address: 0x18023d248)
- NtGetNlsSectionPtr (Address: 0x18023c480)
- NtGetWriteWatch (Address: 0x18023cee8)
- NtImpersonateAnonymousToken (Address: 0x18023cce8)
- NtIsProcessInJob (Address: 0x18023d568)
- NtLoadEnclaveData (Address: 0x18023cf90)
- NtLoadKey (Address: 0x18023d618)
- NtLoadKeyEx (Address: 0x18023c800)
- NtLockFile (Address: 0x18023cfe0)
- NtLockVirtualMemory (Address: 0x18023ce78)
- NtManagePartition (Address: 0x18023cf28)
- NtMapUserPhysicalPages (Address: 0x18023cf18)
- NtMapViewOfSection (Address: 0x18023c560)
- NtMapViewOfSectionEx (Address: 0x18023d330)
- NtNotifyChangeDirectoryFile (Address: 0x18023d4a8)
- NtNotifyChangeDirectoryFileEx (Address: 0x18023c190)
- NtNotifyChangeKey (Address: 0x18023c570)
- NtNotifyChangeMultipleKeys (Address: 0x18023d610)
- NtOpenDirectoryObject (Address: 0x18023cf68)
- NtOpenEvent (Address: 0x18023cee0)
- NtOpenFile (Address: 0x18023c0d8)
- NtOpenKey (Address: 0x18023c1c0)
- NtOpenKeyEx (Address: 0x18023d638)
- NtOpenKeyTransactedEx (Address: 0x18023d648)
- NtOpenMutant (Address: 0x18023c270)
- NtOpenObjectAuditAlarm (Address: 0x18023cb98)
- NtOpenPrivateNamespace (Address: 0x18023c028)
- NtOpenProcess (Address: 0x18023d148)
- NtOpenProcessToken (Address: 0x18023cb48)
- NtOpenProcessTokenEx (Address: 0x18023c890)
- NtOpenSection (Address: 0x18023d328)
- NtOpenSemaphore (Address: 0x18023d058)
- NtOpenSymbolicLinkObject (Address: 0x18023c600)
- NtOpenThread (Address: 0x18023d218)
- NtOpenThreadToken (Address: 0x18023cb50)
- NtOpenTimer (Address: 0x18023d080)
- NtPrivilegeCheck (Address: 0x18023cb70)
- NtPrivilegedServiceAuditAlarm (Address: 0x18023cbb8)
- NtPrivilegeObjectAuditAlarm (Address: 0x18023cba0)
- NtProtectVirtualMemory (Address: 0x18023ceb0)
- NtPulseEvent (Address: 0x18023d048)
- NtQueryAttributesFile (Address: 0x18023d430)
- NtQueryAuxiliaryCounterFrequency (Address: 0x18023d1d8)
- NtQueryDefaultLocale (Address: 0x18023c568)
- NtQueryDirectoryFile (Address: 0x18023c2c0)
- NtQueryDirectoryFileEx (Address: 0x18023d4a0)
- NtQueryDirectoryObject (Address: 0x18023d420)
- NtQueryEaFile (Address: 0x18023c1f8)
- NtQueryEvent (Address: 0x18023c7c0)
- NtQueryFullAttributesFile (Address: 0x18023d438)
- NtQueryInformationFile (Address: 0x18023c0b0)
- NtQueryInformationJobObject (Address: 0x18023d5b0)
- NtQueryInformationProcess (Address: 0x18023c758)
- NtQueryInformationThread (Address: 0x18023d220)
- NtQueryInformationToken (Address: 0x18023c578)
- NtQueryInstallUILanguage (Address: 0x18023c448)
- NtQueryKey (Address: 0x18023c7d8)
- NtQueryLicenseValue (Address: 0x18023c5c0)
- NtQueryMultipleValueKey (Address: 0x18023c6c8)
- NtQueryObject (Address: 0x18023cf70)
- NtQuerySecurityAttributesToken (Address: 0x18023c9e8)
- NtQuerySecurityObject (Address: 0x18023c0d0)
- NtQuerySymbolicLinkObject (Address: 0x18023c608)
- NtQuerySystemInformation (Address: 0x18023c1a8)
- NtQuerySystemInformationEx (Address: 0x18023d388)
- NtQueryValueKey (Address: 0x18023c268)
- NtQueryVirtualMemory (Address: 0x18023c888)
- NtQueryVolumeInformationFile (Address: 0x18023c170)
- NtQueryWnfStateData (Address: 0x18023c130)
- NtQueueApcThreadEx2 (Address: 0x18023d298)
- NtRaiseException (Address: 0x18023d5b8)
- NtRaiseHardError (Address: 0x18023d3b8)
- NtReadFile (Address: 0x18023ca98)
- NtReadFileScatter (Address: 0x18023d018)
- NtReadVirtualMemory (Address: 0x18023ce88)
- NtReleaseMutant (Address: 0x18023c288)
- NtReleaseSemaphore (Address: 0x18023d060)
- NtRemoveIoCompletion (Address: 0x18023d368)
- NtRemoveIoCompletionEx (Address: 0x18023d370)
- NtRemoveProcessDebug (Address: 0x18023d3f8)
- NtResetEvent (Address: 0x18023c7a8)
- NtResetWriteWatch (Address: 0x18023cef0)
- NtRestoreKey (Address: 0x18023d630)
- NtResumeThread (Address: 0x18023d200)
- NtSaveKeyEx (Address: 0x18023d628)
- NtSetCachedSigningLevel (Address: 0x18023cd30)
- NtSetContextThread (Address: 0x18023d250)
- NtSetDefaultLocale (Address: 0x18023c3c0)
- NtSetEvent (Address: 0x18023d038)
- NtSetInformationFile (Address: 0x18023c140)
- NtSetInformationKey (Address: 0x18023d640)
- NtSetInformationObject (Address: 0x18023d180)
- NtSetInformationProcess (Address: 0x18023c300)
- NtSetInformationThread (Address: 0x18023cce0)
- NtSetInformationToken (Address: 0x18023cb58)
- NtSetInformationVirtualMemory (Address: 0x18023cef8)
- NtSetIoCompletion (Address: 0x18023d360)
- NtSetSecurityObject (Address: 0x18023c948)
- NtSetSystemInformation (Address: 0x18023cad8)
- NtSetSystemTime (Address: 0x18023d1a0)
- NtSetTimerEx (Address: 0x18023d088)
- NtSetValueKey (Address: 0x18023c2b0)
- NtSignalAndWaitForSingleObject (Address: 0x18023d0d0)
- NtSuspendThread (Address: 0x18023d240)
- NtTerminateEnclave (Address: 0x18023cfb0)
- NtTerminateProcess (Address: 0x18023c770)
- NtTerminateThread (Address: 0x18023d210)
- NtUnloadKey (Address: 0x18023d620)
- NtUnlockFile (Address: 0x18023cfe8)
- NtUnlockVirtualMemory (Address: 0x18023ce80)
- NtUnmapViewOfSection (Address: 0x18023c970)
- NtUnmapViewOfSectionEx (Address: 0x18023d340)
- NtWaitForMultipleObjects (Address: 0x18023cac8)
- NtWaitForSingleObject (Address: 0x18023c188)
- NtWriteFile (Address: 0x18023cfd8)
- NtWriteFileGather (Address: 0x18023d020)
- NtWriteVirtualMemory (Address: 0x18023ceb8)
- NtYieldExecution (Address: 0x18023cae8)
- PssNtCaptureSnapshot (Address: 0x18023c848)
- PssNtDuplicateSnapshot (Address: 0x18023c878)
- PssNtFreeRemoteSnapshot (Address: 0x18023c860)
- PssNtFreeSnapshot (Address: 0x18023c858)
- PssNtFreeWalkMarker (Address: 0x18023c880)
- PssNtQuerySnapshot (Address: 0x18023c868)
- PssNtValidateDescriptor (Address: 0x18023c850)
- PssNtWalkSnapshot (Address: 0x18023c870)
- qsort (Address: 0x18023c428)
- RtlAbsoluteToSelfRelativeSD (Address: 0x18023ccc8)
- RtlAcquirePebLock (Address: 0x18023d278)
- RtlAcquirePrivilege (Address: 0x18023c200)
- RtlAcquireSRWLockExclusive (Address: 0x18023c740)
- RtlAcquireSRWLockShared (Address: 0x18023c738)
- RtlActivateActivationContextEx (Address: 0x18023d1f8)
- RtlActivateActivationContextUnsafeFast (Address: 0x18023cff0)
- RtlAddAccessAllowedAce (Address: 0x18023cc00)
- RtlAddAccessAllowedAceEx (Address: 0x18023c918)
- RtlAddAccessAllowedObjectAce (Address: 0x18023cc40)
- RtlAddAccessDeniedAce (Address: 0x18023cc20)
- RtlAddAccessDeniedAceEx (Address: 0x18023cc28)
- RtlAddAccessDeniedObjectAce (Address: 0x18023cc48)
- RtlAddAce (Address: 0x18023c920)
- RtlAddAuditAccessAce (Address: 0x18023cc30)
- RtlAddAuditAccessAceEx (Address: 0x18023cc38)
- RtlAddAuditAccessObjectAce (Address: 0x18023cc50)
- RtlAddMandatoryAce (Address: 0x18023cc08)
- RtlAddResourceAttributeAce (Address: 0x18023cc10)
- RtlAddScopedPolicyIDAce (Address: 0x18023cc18)
- RtlAddSIDToBoundaryDescriptor (Address: 0x18023c030)
- RtlAllocateActivationContextStack (Address: 0x18023d1f0)
- RtlAllocateAndInitializeSid (Address: 0x18023c960)
- RtlAllocateHandle (Address: 0x18023d450)
- RtlAllocateHeap (Address: 0x18023d608)
- RtlAnsiCharToUnicodeChar (Address: 0x18023d508)
- RtlAnsiStringToUnicodeString (Address: 0x18023c048)
- RtlAppendUnicodeStringToString (Address: 0x18023c528)
- RtlAppendUnicodeToString (Address: 0x18023c538)
- RtlAreAllAccessesGranted (Address: 0x18023cbd0)
- RtlAreAnyAccessesGranted (Address: 0x18023cbd8)
- RtlAreBitsSet (Address: 0x18023d288)
- RtlBarrier (Address: 0x18023d0b8)
- RtlCapabilityCheck (Address: 0x18023c7c8)
- RtlCaptureContext (Address: 0x18023c390)
- RtlCaptureStackBackTrace (Address: 0x18023d230)
- RtlCharToInteger (Address: 0x18023d5e8)
- RtlCheckTokenCapability (Address: 0x18023cd00)
- RtlCheckTokenMembershipEx (Address: 0x18023c7b0)
- RtlCleanUpTEBLangLists (Address: 0x18023d588)
- RtlClearBits (Address: 0x18023d290)
- RtlCompactHeap (Address: 0x18023d540)
- RtlCompareMemory (Address: 0x18023d428)
- RtlCompareUnicodeString (Address: 0x18023c768)
- RtlCompareUnicodeStrings (Address: 0x18023ca88)
- RtlConvertSidToUnicodeString (Address: 0x18023c690)
- RtlConvertToAutoInheritSecurityObject (Address: 0x18023cc90)
- RtlCopyContext (Address: 0x18023c2e8)
- RtlCopySid (Address: 0x18023c9d0)
- RtlCopyUnicodeString (Address: 0x18023c540)
- RtlCreateAcl (Address: 0x18023c910)
- RtlCreateBoundaryDescriptor (Address: 0x18023c760)
- RtlCreateEnvironmentEx (Address: 0x18023d3f0)
- RtlCreateHeap (Address: 0x18023d518)
- RtlCreateProcessParametersEx (Address: 0x18023caf0)
- RtlCreateProcessParametersWithTemplate (Address: 0x18023d3d8)
- RtlCreateSecurityDescriptor (Address: 0x18023c928)
- RtlCreateTagHeap (Address: 0x18023d578)
- RtlCreateTimer (Address: 0x18023d0f8)
- RtlCreateTimerQueue (Address: 0x18023d0e8)
- RtlCreateUnicodeString (Address: 0x18023c7e0)
- RtlCreateUnicodeStringFromAsciiz (Address: 0x18023c7d0)
- RtlCreateUserFiberShadowStack (Address: 0x18023d2d0)
- RtlCreateUserStack (Address: 0x18023d2c8)
- RtlCultureNameToLCID (Address: 0x18023c468)
- RtlCutoverTimeToSystemTime (Address: 0x18023d190)
- RtlDeactivateActivationContextUnsafeFast (Address: 0x18023cff8)
- RtlDecodePointer (Address: 0x18023c6f8)
- RtlDecodeSystemPointer (Address: 0x18023c0e8)
- RtlDefaultNpAcl (Address: 0x18023cfc0)
- RtlDelayExecution (Address: 0x18023d270)
- RtlDeleteAce (Address: 0x18023cbf8)
- RtlDeleteBoundaryDescriptor (Address: 0x18023c750)
- RtlDeleteCriticalSection (Address: 0x18023c100)
- RtlDeleteElementGenericTableAvl (Address: 0x18023c9a8)
- RtlDeleteSecurityObject (Address: 0x18023ccc0)
- RtlDeleteTimer (Address: 0x18023d108)
- RtlDeleteTimerQueueEx (Address: 0x18023d110)
- RtlDeregisterWaitEx (Address: 0x18023d0e0)
- RtlDeriveCapabilitySidsFromName (Address: 0x18023c7b8)
- RtlDestroyEnvironment (Address: 0x18023d300)
- RtlDestroyHeap (Address: 0x18023d520)
- RtlDestroyProcessParameters (Address: 0x18023caf8)
- RtlDetermineDosPathNameType_U (Address: 0x18023c2a0)
- RtlDllShutdownInProgress (Address: 0x18023c350)
- RtlDnsHostNameToComputerName (Address: 0x18023d5f8)
- RtlDosApplyFileIsolationRedirection_Ustr (Address: 0x18023cd38)
- RtlDosPathNameToNtPathName_U (Address: 0x18023c148)
- RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x18023c1d8)
- RtlDosPathNameToRelativeNtPathName_U (Address: 0x18023c068)
- RtlDosPathNameToRelativeNtPathName_U_WithStatus (Address: 0x18023d310)
- RtlDosSearchPath_Ustr (Address: 0x18023cd48)
- RtlDowncaseUnicodeString (Address: 0x18023c950)
- RtlEncodePointer (Address: 0x18023c700)
- RtlEnterCriticalSection (Address: 0x18023c110)
- RtlEnumerateGenericTableAvl (Address: 0x18023ca78)
- RtlEqualPrefixSid (Address: 0x18023cbc0)
- RtlEqualSid (Address: 0x18023c0b8)
- RtlEqualUnicodeString (Address: 0x18023c1a0)
- RtlExitUserProcess (Address: 0x18023c6d8)
- RtlExitUserThread (Address: 0x18023cae0)
- RtlExpandEnvironmentStrings (Address: 0x18023c9d8)
- RtlExpandEnvironmentStrings_U (Address: 0x18023c548)
- RtlFindAceByType (Address: 0x18023c260)
- RtlFindClearBitsAndSet (Address: 0x18023d280)
- RtlFindMessage (Address: 0x18023d4b0)
- RtlFirstFreeAce (Address: 0x18023cc58)
- RtlFlsAlloc (Address: 0x18023d2a8)
- RtlFlsFree (Address: 0x18023d2c0)
- RtlFlsGetValue (Address: 0x18023d2b0)
- RtlFlsSetValue (Address: 0x18023d2b8)
- RtlFlushSecureMemoryCache (Address: 0x18023ced8)
- RtlFormatCurrentUserKeyPath (Address: 0x18023c7a0)
- RtlFormatMessageEx (Address: 0x18023d4c8)
- RtlFreeActivationContextStack (Address: 0x18023d208)
- RtlFreeAnsiString (Address: 0x18023c040)
- RtlFreeHandle (Address: 0x18023d458)
- RtlFreeHeap (Address: 0x18023c778)
- RtlFreeSid (Address: 0x18023c8e0)
- RtlFreeUnicodeString (Address: 0x18023c070)
- RtlFreeUserFiberShadowStack (Address: 0x18023d2e0)
- RtlFreeUserStack (Address: 0x18023d2d8)
- RtlGetAce (Address: 0x18023c1e0)
- RtlGetActiveActivationContext (Address: 0x18023cd60)
- RtlGetAppContainerNamedObjectPath (Address: 0x18023d308)
- RtlGetAppContainerParent (Address: 0x18023c9e0)
- RtlGetAppContainerSidType (Address: 0x18023c9c8)
- RtlGetControlSecurityDescriptor (Address: 0x18023c938)
- RtlGetCurrentDirectory_U (Address: 0x18023d4d8)
- RtlGetCurrentProcessorNumberEx (Address: 0x18023d380)
- RtlGetCurrentServiceSessionId (Address: 0x18023cf60)
- RtlGetCurrentTransaction (Address: 0x18023c208)
- RtlGetDaclSecurityDescriptor (Address: 0x18023c908)
- RtlGetDeviceFamilyInfoEnum (Address: 0x18023c320)
- RtlGetEnabledExtendedFeatures (Address: 0x18023c2d8)
- RtlGetExePath (Address: 0x18023d400)
- RtlGetExtendedContextLength2 (Address: 0x18023c310)
- RtlGetExtendedFeaturesMask (Address: 0x18023c2d0)
- RtlGetFileMUIPath (Address: 0x18023c4e0)
- RtlGetFullPathName_U (Address: 0x18023d4f8)
- RtlGetFullPathName_UEx (Address: 0x18023d4d0)
- RtlGetFullPathName_UstrEx (Address: 0x18023d408)
- RtlGetGroupSecurityDescriptor (Address: 0x18023cc80)
- RtlGetInterruptTimePrecise (Address: 0x18023d1b0)
- RtlGetLastNtStatus (Address: 0x18023c218)
- RtlGetLastWin32Error (Address: 0x18023c228)
- RtlGetLocaleFileMappingAddress (Address: 0x18023c470)
- RtlGetNativeSystemInformation (Address: 0x18023d3c0)
- RtlGetNtSystemRoot (Address: 0x18023cac0)
- RtlGetOwnerSecurityDescriptor (Address: 0x18023c080)
- RtlGetPersistedStateLocation (Address: 0x18023c2c8)
- RtlGetProcessHeaps (Address: 0x18023d538)
- RtlGetProcessPreferredUILanguages (Address: 0x18023c4c8)
- RtlGetProductInfo (Address: 0x18023ce08)
- RtlGetSaclSecurityDescriptor (Address: 0x18023cc68)
- RtlGetSearchPath (Address: 0x18023d4e8)
- RtlGetSecurityDescriptorRMControl (Address: 0x18023cd10)
- RtlGetSystemGlobalData (Address: 0x18023d1c8)
- RtlGetSystemPreferredUILanguages (Address: 0x18023c4b8)
- RtlGetSystemTimeAndBias (Address: 0x18023d198)
- RtlGetSystemTimePrecise (Address: 0x18023d1a8)
- RtlGetThreadErrorMode (Address: 0x18023d348)
- RtlGetThreadPreferredUILanguages (Address: 0x18023c498)
- RtlGetUILanguageInfo (Address: 0x18023c4a8)
- RtlGetUserPreferredUILanguages (Address: 0x18023c4b0)
- RtlGetVersion (Address: 0x18023ce10)
- RtlGuardCheckLongJumpTarget (Address: 0x18023d558)
- RtlGUIDFromString (Address: 0x18023c898)
- RtlIdentifierAuthoritySid (Address: 0x18023cbc8)
- RtlIdnToAscii (Address: 0x18023c510)
- RtlIdnToNameprepUnicode (Address: 0x18023c500)
- RtlIdnToUnicode (Address: 0x18023c518)
- RtlImageDirectoryEntryToData (Address: 0x18023ce30)
- RtlImageNtHeader (Address: 0x18023cad0)
- RtlImageNtHeaderEx (Address: 0x18023cd50)
- RtlImpersonateSelf (Address: 0x18023ccd8)
- RtlInitAnsiString (Address: 0x18023c0a0)
- RtlInitAnsiStringEx (Address: 0x18023c630)
- RtlInitBarrier (Address: 0x18023d0c0)
- RtlInitializeCriticalSection (Address: 0x18023c118)
- RtlInitializeCriticalSectionAndSpinCount (Address: 0x18023c6e8)
- RtlInitializeCriticalSectionEx (Address: 0x18023c370)
- RtlInitializeExtendedContext2 (Address: 0x18023c308)
- RtlInitializeGenericTableAvl (Address: 0x18023c9a0)
- RtlInitializeHandleTable (Address: 0x18023d510)
- RtlInitializeSid (Address: 0x18023c050)
- RtlInitializeSRWLock (Address: 0x18023c8e8)
- RtlInitString (Address: 0x18023c828)
- RtlInitUnicodeString (Address: 0x18023c078)
- RtlInitUnicodeStringEx (Address: 0x18023c718)
- RtlInitUTF8String (Address: 0x18023d4b8)
- RtlInsertElementGenericTableAvl (Address: 0x18023c998)
- RtlIntegerToChar (Address: 0x18023d500)
- RtlIntegerToUnicodeString (Address: 0x18023c5d0)
- RtlIsApiSetImplemented (Address: 0x18023d560)
- RtlIsCapabilitySid (Address: 0x18023cd28)
- RtlIsCurrentProcess (Address: 0x18023d168)
- RtlIsDosDeviceName_U (Address: 0x18023c280)
- RtlIsMultiSessionSku (Address: 0x18023c3f8)
- RtlIsMultiUsersInSessionSku (Address: 0x18023c6a8)
- RtlIsNormalizedString (Address: 0x18023c508)
- RtlIsPackageSid (Address: 0x18023cd20)
- RtlIsParentOfChildAppContainer (Address: 0x18023c9f0)
- RtlIsProcessorFeaturePresent (Address: 0x18023d398)
- RtlIsStateSeparationEnabled (Address: 0x18023c290)
- RtlIsValidHandle (Address: 0x18023d470)
- RtlKnownExceptionFilter (Address: 0x18023d5a8)
- RtlLCIDToCultureName (Address: 0x18023c438)
- RtlLcidToLocaleName (Address: 0x18023c400)
- RtlLeaveCriticalSection (Address: 0x18023c120)
- RtlLengthRequiredSid (Address: 0x18023c090)
- RtlLengthSecurityDescriptor (Address: 0x18023c808)
- RtlLengthSid (Address: 0x18023c9c0)
- RtlLoadString (Address: 0x18023c530)
- RtlLocaleNameToLcid (Address: 0x18023c3f0)
- RtlLocateExtendedFeature (Address: 0x18023c318)
- RtlLocateLegacyContext (Address: 0x18023c2e0)
- RtlLockHeap (Address: 0x18023d448)
- RtlLookupElementGenericTableAvl (Address: 0x18023c9b0)
- RtlLookupFunctionEntry (Address: 0x18023c398)
- RtlMakeSelfRelativeSD (Address: 0x18023c810)
- RtlMapGenericMask (Address: 0x18023cbe0)
- RtlMultiByteToUnicodeN (Address: 0x18023c0f8)
- RtlNewSecurityObject (Address: 0x18023cc88)
- RtlNewSecurityObjectEx (Address: 0x18023cc98)
- RtlNewSecurityObjectWithMultipleInheritance (Address: 0x18023cca0)
- RtlNormalizeString (Address: 0x18023c3b0)
- RtlNtStatusToDosError (Address: 0x18023c248)
- RtlNtStatusToDosErrorNoTeb (Address: 0x18023c340)
- RtlOemStringToUnicodeString (Address: 0x18023cf50)
- RtlOpenCurrentUser (Address: 0x18023c558)
- RtlpCheckDynamicTimeZoneInformation (Address: 0x18023d1d0)
- RtlpCreateProcessRegistryInfo (Address: 0x18023c430)
- RtlPcToFileHeader (Address: 0x18023cdc0)
- RtlpGetLCIDFromLangInfoNode (Address: 0x18023c418)
- RtlpGetNameFromLangInfoNode (Address: 0x18023c440)
- RtlpGetSystemDefaultUILanguage (Address: 0x18023c4f0)
- RtlpInitializeLangRegistryInfo (Address: 0x18023c458)
- RtlpIsQualifiedLanguage (Address: 0x18023c460)
- RtlpLoadMachineUIByPolicy (Address: 0x18023c410)
- RtlpLoadUserUIByPolicy (Address: 0x18023c408)
- RtlpMergeSecurityAttributeInformation (Address: 0x18023c230)
- RtlpMuiFreeLangRegistryInfo (Address: 0x18023c450)
- RtlpQueryDefaultUILanguage (Address: 0x18023c4c0)
- RtlPrefixString (Address: 0x18023cfd0)
- RtlPrefixUnicodeString (Address: 0x18023c730)
- RtlProcessFlsData (Address: 0x18023d2e8)
- RtlpTimeFieldsToTime (Address: 0x18023d1c0)
- RtlpTimeToTimeFields (Address: 0x18023d1b8)
- RtlPublishWnfStateData (Address: 0x18023c3b8)
- RtlQueryActivationContextApplicationSettings (Address: 0x18023d4f0)
- RtlQueryEnvironmentVariable (Address: 0x18023d490)
- RtlQueryEnvironmentVariable_U (Address: 0x18023d3c8)
- RtlQueryHeapInformation (Address: 0x18023d528)
- RtlQueryInformationAcl (Address: 0x18023c1e8)
- RtlQueryInformationActivationContext (Address: 0x18023c618)
- RtlQueryPackageClaims (Address: 0x18023c978)
- RtlQueryPackageIdentityEx (Address: 0x18023c8a0)
- RtlQueryPerformanceCounter (Address: 0x18023cab0)
- RtlQueryPerformanceFrequency (Address: 0x18023cb10)
- RtlQueryProtectedPolicy (Address: 0x18023d390)
- RtlQueryRegistryValuesEx (Address: 0x18023d2f0)
- RtlQuerySecurityObject (Address: 0x18023ccb8)
- RtlQueryWnfStateData (Address: 0x18023c5f0)
- RtlQueueWorkItem (Address: 0x18023d118)
- RtlRaiseCustomSystemEventTrigger (Address: 0x18023d590)
- RtlRaiseException (Address: 0x18023c840)
- RtlRaiseNoncontinuableException (Address: 0x18023d5c0)
- RtlRaiseStatus (Address: 0x18023caa0)
- RtlRandomEx (Address: 0x18023c7f0)
- RtlReAllocateHeap (Address: 0x18023c6e0)
- RtlRegisterWait (Address: 0x18023d0d8)
- RtlReleaseActivationContext (Address: 0x18023c628)
- RtlReleasePath (Address: 0x18023cd88)
- RtlReleasePebLock (Address: 0x18023d600)
- RtlReleasePrivilege (Address: 0x18023c1b8)
- RtlReleaseRelativeName (Address: 0x18023c088)
- RtlReleaseSRWLockExclusive (Address: 0x18023c748)
- RtlReleaseSRWLockShared (Address: 0x18023c728)
- RtlReportSilentProcessExit (Address: 0x18023d3b0)
- RtlRestoreThreadPreferredUILanguages (Address: 0x18023c4e8)
- RtlRunOnceBeginInitialize (Address: 0x18023d098)
- RtlRunOnceComplete (Address: 0x18023d0a0)
- RtlRunOnceExecuteOnce (Address: 0x18023c5d8)
- RtlRunOnceInitialize (Address: 0x18023c790)
- RtlSelfRelativeToAbsoluteSD (Address: 0x18023ccd0)
- RtlSelfRelativeToAbsoluteSD2 (Address: 0x18023cd08)
- RtlSetControlSecurityDescriptor (Address: 0x18023c940)
- RtlSetCurrentDirectory_U (Address: 0x18023d4e0)
- RtlSetCurrentTransaction (Address: 0x18023c198)
- RtlSetDaclSecurityDescriptor (Address: 0x18023c930)
- RtlSetEnvironmentStrings (Address: 0x18023d480)
- RtlSetEnvironmentVar (Address: 0x18023d498)
- RtlSetEnvironmentVariable (Address: 0x18023d488)
- RtlSetExtendedFeaturesMask (Address: 0x18023c2f0)
- RtlSetGroupSecurityDescriptor (Address: 0x18023cc78)
- RtlSetHeapInformation (Address: 0x18023d550)
- RtlSetInformationAcl (Address: 0x18023cbf0)
- RtlSetLastWin32Error (Address: 0x18023c180)
- RtlSetLastWin32ErrorAndNtStatusFromNtStatus (Address: 0x18023c2f8)
- RtlSetOwnerSecurityDescriptor (Address: 0x18023cc70)
- RtlSetProcessPreferredUILanguages (Address: 0x18023c4a0)
- RtlSetProtectedPolicy (Address: 0x18023c5f8)
- RtlSetSaclSecurityDescriptor (Address: 0x18023ca28)
- RtlSetSecurityDescriptorRMControl (Address: 0x18023cd18)
- RtlSetSecurityObject (Address: 0x18023cca8)
- RtlSetSecurityObjectEx (Address: 0x18023ccb0)
- RtlSetThreadErrorMode (Address: 0x18023d350)
- RtlSetThreadPreferredUILanguages (Address: 0x18023c4d0)
- RtlSetThreadPreferredUILanguages2 (Address: 0x18023c4d8)
- RtlSetUnhandledExceptionFilter (Address: 0x18023d580)
- RtlSetUserValueHeap (Address: 0x18023d460)
- RtlSizeHeap (Address: 0x18023c708)
- RtlSleepConditionVariableCS (Address: 0x18023d0a8)
- RtlSleepConditionVariableSRW (Address: 0x18023d0b0)
- RtlStringFromGUID (Address: 0x18023c7f8)
- RtlStringFromGUIDEx (Address: 0x18023c8a8)
- RtlSubAuthorityCountSid (Address: 0x18023c698)
- RtlSubAuthoritySid (Address: 0x18023c060)
- RtlSubscribeWnfStateChangeNotification (Address: 0x18023c128)
- RtlTimeFieldsToTime (Address: 0x18023c580)
- RtlTimeToTimeFields (Address: 0x18023d188)
- RtlTryAcquirePebLock (Address: 0x18023caa8)
- RtlTryAcquireSRWLockExclusive (Address: 0x18023cb18)
- RtlUnhandledExceptionFilter (Address: 0x18023c3a8)
- RtlUnicodeStringToAnsiString (Address: 0x18023c098)
- RtlUnicodeStringToInteger (Address: 0x18023c3e8)
- RtlUnicodeStringToOemString (Address: 0x18023c2b8)
- RtlUnicodeToMultiByteN (Address: 0x18023c0f0)
- RtlUnicodeToMultiByteSize (Address: 0x18023c610)
- RtlUnicodeToOemN (Address: 0x18023d478)
- RtlUnicodeToUTF8N (Address: 0x18023c5b0)
- RtlUnlockHeap (Address: 0x18023d468)
- RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x18023c138)
- RtlUnsubscribeWnfStateChangeNotification (Address: 0x18023cf20)
- RtlUpcaseUnicodeChar (Address: 0x18023c108)
- RtlUpcaseUnicodeString (Address: 0x18023c958)
- RtlUpdateTimer (Address: 0x18023d100)
- RtlUTF8StringToUnicodeString (Address: 0x18023d4c0)
- RtlUTF8ToUnicodeN (Address: 0x18023c5a8)
- RtlValidAcl (Address: 0x18023cbe8)
- RtlValidateHeap (Address: 0x18023d530)
- RtlValidRelativeSecurityDescriptor (Address: 0x18023cc60)
- RtlValidSecurityDescriptor (Address: 0x18023c7e8)
- RtlValidSid (Address: 0x18023c9b8)
- RtlVerifyVersionInfo (Address: 0x18023c1f0)
- RtlVirtualUnwind (Address: 0x18023c3a0)
- RtlWaitOnAddress (Address: 0x18023d0c8)
- RtlWakeAllConditionVariable (Address: 0x18023d5e0)
- RtlWalkHeap (Address: 0x18023d548)
- RtlWow64EnableFsRedirection (Address: 0x18023d028)
- RtlWow64EnableFsRedirectionEx (Address: 0x18023d030)
- RtlWow64GetProcessMachines (Address: 0x18023d3a0)
- RtlWow64GetSharedInfoProcess (Address: 0x18023d170)
- RtlWow64GetThreadContext (Address: 0x18023d258)
- RtlWow64IsWowGuestMachineSupported (Address: 0x18023d3a8)
- RtlWow64PopCrossProcessWorkFromFreeList (Address: 0x18023ce90)
- RtlWow64PushCrossProcessWorkOntoFreeList (Address: 0x18023cea8)
- RtlWow64PushCrossProcessWorkOntoWorkList (Address: 0x18023cea0)
- RtlWow64RequestCrossProcessHeavyFlush (Address: 0x18023ce98)
- RtlWow64SetThreadContext (Address: 0x18023d260)
- RtlWow64SuspendThread (Address: 0x18023d268)
- RtlxAnsiStringToUnicodeSize (Address: 0x18023cf30)
- RtlxOemStringToUnicodeSize (Address: 0x18023cf38)
- RtlxUnicodeStringToAnsiSize (Address: 0x18023cf48)
- RtlxUnicodeStringToOemSize (Address: 0x18023cf40)
- SbSelectProcedure (Address: 0x18023c0c0)
- sqrt (Address: 0x18023c5e8)
- strchr (Address: 0x18023ca90)
- strncat (Address: 0x18023c830)
- strncat_s (Address: 0x18023cd78)
- strncmp (Address: 0x18023c990)
- strtoul (Address: 0x18023cb00)
- swprintf_s (Address: 0x18023c160)
- toupper (Address: 0x18023d440)
- TpAllocCleanupGroup (Address: 0x18023c658)
- TpAllocIoCompletion (Address: 0x18023c640)
- TpAllocPool (Address: 0x18023c670)
- TpAllocTimer (Address: 0x18023c638)
- TpAllocWait (Address: 0x18023c688)
- TpAllocWork (Address: 0x18023c648)
- TpCallbackMayRunLong (Address: 0x18023c650)
- TpCancelAsyncIoOperation (Address: 0x18023ca60)
- TpCaptureCaller (Address: 0x18023d228)
- TpCheckTerminateWorker (Address: 0x18023d238)
- TpPostWork (Address: 0x18023ca20)
- TpQueryPoolStackInformation (Address: 0x18023c668)
- TpReleaseIoCompletion (Address: 0x18023ca70)
- TpReleaseTimer (Address: 0x18023c368)
- TpReleaseWait (Address: 0x18023c1c8)
- TpReleaseWork (Address: 0x18023ca18)
- TpSetPoolMinThreads (Address: 0x18023c678)
- TpSetPoolStackInformation (Address: 0x18023c680)
- TpSetTimer (Address: 0x18023c348)
- TpSetWait (Address: 0x18023c1b0)
- TpSimpleTryPost (Address: 0x18023c660)
- TpStartAsyncIoOperation (Address: 0x18023ca80)
- TpWaitForIoCompletion (Address: 0x18023ca68)
- TpWaitForTimer (Address: 0x18023c360)
- TpWaitForWait (Address: 0x18023c250)
- VerSetConditionMask (Address: 0x18023c238)
- vswprintf_s (Address: 0x18023c6f0)
- wcscat_s (Address: 0x18023c158)
- wcschr (Address: 0x18023c330)
- wcscmp (Address: 0x18023d680)
- wcscpy_s (Address: 0x18023c150)
- wcscspn (Address: 0x18023cab8)
- wcsncmp (Address: 0x18023c338)
- wcsncpy_s (Address: 0x18023c6d0)
- wcsnlen (Address: 0x18023cf58)
- wcspbrk (Address: 0x18023c3d8)
- wcsrchr (Address: 0x18023c258)
- wcsspn (Address: 0x18023c968)
- wcsstr (Address: 0x18023c980)
- wcstoul (Address: 0x18023ce70)
- WinSqmAddToStreamEx (Address: 0x18023ca08)
- WinSqmEndSession (Address: 0x18023ca10)
- WinSqmIncrementDWORD (Address: 0x18023c8f0)
- WinSqmIsOptedIn (Address: 0x18023c9f8)
- WinSqmSetDWORD (Address: 0x18023c8f8)
- WinSqmSetString (Address: 0x18023c900)
- WinSqmStartSession (Address: 0x18023ca00)
- ZwClose (Address: 0x18023c6b8)
- ZwCreateKey (Address: 0x18023ca40)
- ZwOpenKey (Address: 0x18023c6c0)
- ZwQueryInformationToken (Address: 0x18023c6a0)
- ZwQueryValueKey (Address: 0x18023c6b0)
- ZwQueryWnfStateData (Address: 0x18023c1d0)
- ZwQueryWnfStateNameInformation (Address: 0x18023d598)
- ZwSetValueKey (Address: 0x18023ca48)
- ZwUpdateWnfStateData (Address: 0x18023d5a0)