Exported Functions

• A_SHAFinal (Ordinal: 1, Address: 0xed00)
• A_SHAInit (Ordinal: 2, Address: 0xee60)
• A_SHAUpdate (Ordinal: 3, Address: 0xee90)
• ApiSetQueryApiSetPresence (Ordinal: 4, Address: 0x106c0)
• ApiSetQueryApiSetPresenceEx (Ordinal: 5, Address: 0x10740)
• CsrAllocateCaptureBuffer (Ordinal: 6, Address: 0x1000)
• CsrAllocateCapturePointer (Ordinal: 7, Address: 0x1020)
• CsrAllocateMessagePointer (Ordinal: 8, Address: 0x1040)
• CsrCaptureMessageBuffer (Ordinal: 9, Address: 0x1060)
• CsrCaptureMessageString (Ordinal: 10, Address: 0x1080)
• CsrCaptureTimeout (Ordinal: 11, Address: 0x10a0)
• CsrClientCallServer (Ordinal: 12, Address: 0x10c0)
• CsrClientConnectToServer (Ordinal: 13, Address: 0x10e0)
• CsrClientMaxMessage (Ordinal: 14, Address: 0x1100)
• CsrClientSendMessage (Ordinal: 15, Address: 0x1120)
• CsrClientThreadConnect (Ordinal: 16, Address: 0x1140)
• CsrFreeCaptureBuffer (Ordinal: 17, Address: 0x1160)
• CsrIdentifyAlertableThread (Ordinal: 18, Address: 0x1180)
• CsrNewThread (Ordinal: 19, Address: 0x11a0)
• CsrProbeForRead (Ordinal: 20, Address: 0x11c0)
• CsrProbeForWrite (Ordinal: 21, Address: 0x11e0)
• CsrSetPriorityClass (Ordinal: 22, Address: 0x1200)
• CsrpProcessCallbackRequest (Ordinal: 23, Address: 0x1220)
• DbgBreakPoint (Ordinal: 24, Address: 0xe278)
• DbgPrint (Ordinal: 25, Address: 0x10820)
• DbgPrintEx (Ordinal: 26, Address: 0x10860)
• DbgPrompt (Ordinal: 27, Address: 0x1240)
• DbgUiConnectToDbg (Ordinal: 28, Address: 0x108a0)
• DbgUiContinue (Ordinal: 29, Address: 0x10930)
• DbgUiConvertStateChangeStructure (Ordinal: 30, Address: 0x10960)
• DbgUiDebugActiveProcess (Ordinal: 31, Address: 0x10bd0)
• DbgUiGetThreadDebugObject (Ordinal: 32, Address: 0x10c50)
• DbgUiIssueRemoteBreakin (Ordinal: 33, Address: 0x10c60)
• DbgUiRemoteBreakin (Ordinal: 34, Address: 0x10d20)
• DbgUiSetThreadDebugObject (Ordinal: 35, Address: 0x10d80)
• DbgUiStopDebugging (Ordinal: 36, Address: 0x10da0)
• DbgUiWaitStateChange (Ordinal: 37, Address: 0x10dd0)
• DbgUserBreakPoint (Ordinal: 38, Address: 0xe288)
• EtwEventActivityIdControl (Ordinal: 39, Address: 0x10f20)
• EtwEventEnabled (Ordinal: 40, Address: 0x10f80)
• EtwEventProviderEnabled (Ordinal: 41, Address: 0x11020)
• EtwEventRegister (Ordinal: 42, Address: 0x11110)
• EtwEventSetInformation (Ordinal: 43, Address: 0x11230)
• EtwEventUnregister (Ordinal: 44, Address: 0x112e0)
• EtwEventWrite (Ordinal: 45, Address: 0x11370)
• EtwEventWriteEx (Ordinal: 46, Address: 0x11420)
• EtwEventWriteString (Ordinal: 47, Address: 0x114f0)
• EtwEventWriteTransfer (Ordinal: 48, Address: 0x11680)
• EtwGetTraceEnableFlags (Ordinal: 49, Address: 0x11890)
• EtwGetTraceEnableLevel (Ordinal: 50, Address: 0x11920)
• EtwGetTraceLoggerHandle (Ordinal: 51, Address: 0x119b0)
• EtwLogTraceEvent (Ordinal: 52, Address: 0x11a10)
• EtwRegisterTraceGuidsA (Ordinal: 53, Address: 0x11ab0)
• EtwRegisterTraceGuidsW (Ordinal: 54, Address: 0x11bf0)
• EtwTraceMessage (Ordinal: 55, Address: 0x11f20)
• EtwTraceMessageVa (Ordinal: 56, Address: 0x12080)
• EtwUnregisterTraceGuids (Ordinal: 57, Address: 0x121e0)
• KiRaiseUserExceptionDispatcher (Ordinal: 58, Address: 0x123a0)
• KiUserApcDispatcher (Ordinal: 59, Address: 0xe12c)
• KiUserCallbackDispatcher (Ordinal: 60, Address: 0x123e0)
• KiUserExceptionDispatcher (Ordinal: 61, Address: 0xe11c)
• LdrAccessResource (Ordinal: 62, Address: 0xd044)
• LdrAddDllDirectory (Ordinal: 63, Address: 0x12430)
• LdrAddRefDll (Ordinal: 64, Address: 0x12630)
• LdrDisableThreadCalloutsForDll (Ordinal: 65, Address: 0x12740)
• LdrEnumResources (Ordinal: 66, Address: 0x1260)
• LdrEnumerateLoadedModules (Ordinal: 67, Address: 0x127a0)
• LdrFindEntryForAddress (Ordinal: 68, Address: 0x12880)
• LdrFindResourceDirectory_U (Ordinal: 69, Address: 0x128e0)
• LdrFindResource_U (Ordinal: 70, Address: 0x12a00)
• LdrFlushAlternateResourceModules (Ordinal: 71, Address: 0x1280)
• LdrGetDllDirectory (Ordinal: 72, Address: 0x12b10)
• LdrGetDllFullName (Ordinal: 73, Address: 0x12b90)
• LdrGetDllHandle (Ordinal: 74, Address: 0x12c60)
• LdrGetDllHandleEx (Ordinal: 75, Address: 0x12ca0)
• LdrGetDllPath (Ordinal: 76, Address: 0x12fd0)
• LdrGetProcedureAddress (Ordinal: 77, Address: 0x13540)
• LdrInitShimEngineDynamic (Ordinal: 78, Address: 0x12a0)
• LdrInitializeThunk (Ordinal: 79, Address: 0x136d0)
• LdrLoadAlternateResourceModule (Ordinal: 80, Address: 0x12c0)
• LdrLoadDll (Ordinal: 81, Address: 0x13750)
• LdrLockLoaderLock (Ordinal: 82, Address: 0x13850)
• LdrProcessRelocationBlock (Ordinal: 83, Address: 0x139f0)
• LdrQueryImageFileExecutionOptions (Ordinal: 84, Address: 0x13ac0)
• LdrQueryProcessModuleInformation (Ordinal: 85, Address: 0x13d80)
• LdrRegisterDllNotification (Ordinal: 86, Address: 0x13ee0)
• LdrRemoveDllDirectory (Ordinal: 87, Address: 0x14030)
• LdrResolveDelayLoadedAPI (Ordinal: 88, Address: 0x140e0)
• LdrSetAppCompatDllRedirectionCallback (Ordinal: 89, Address: 0x12e0)
• LdrSetDefaultDllDirectories (Ordinal: 90, Address: 0x14350)
• LdrSetDllDirectory (Ordinal: 91, Address: 0x14380)
• LdrSetDllManifestProber (Ordinal: 92, Address: 0x1300)
• LdrShutdownProcess (Ordinal: 93, Address: 0x14410)
• LdrShutdownThread (Ordinal: 94, Address: 0x144a0)
• LdrSystemDllInitBlock (Ordinal: 95, Address: 0x73320)
• LdrUnloadAlternateResourceModule (Ordinal: 96, Address: 0x1320)
• LdrUnloadDll (Ordinal: 97, Address: 0x14880)
• LdrUnlockLoaderLock (Ordinal: 98, Address: 0x148a0)
• LdrUnregisterDllNotification (Ordinal: 99, Address: 0x148e0)
• LdrVerifyImageMatchesChecksum (Ordinal: 100, Address: 0x1340)
• MD4Final (Ordinal: 101, Address: 0x14990)
• MD4Init (Ordinal: 102, Address: 0x14a90)
• MD4Update (Ordinal: 103, Address: 0x14fe0)
• MD5Final (Ordinal: 104, Address: 0x151d0)
• MD5Init (Ordinal: 105, Address: 0x152f0)
• MD5Update (Ordinal: 106, Address: 0x15a50)
• NlsAnsiCodePage (Ordinal: 107, Address: 0x966e4)
• NlsMbCodePageTag (Ordinal: 108, Address: 0x966e1)
• NlsMbOemCodePageTag (Ordinal: 109, Address: 0x966e0)
• NtAcceptConnectPort (Ordinal: 110, Address: 0xd0a4)
• NtAccessCheck (Ordinal: 111, Address: 0xd084)
• NtAccessCheckAndAuditAlarm (Ordinal: 112, Address: 0xd314)
• NtAccessCheckByTypeAndAuditAlarm (Ordinal: 113, Address: 0xd614)
• NtAddAtom (Ordinal: 114, Address: 0xd4f4)
• NtAdjustGroupsToken (Ordinal: 115, Address: 0xd6b4)
• NtAdjustPrivilegesToken (Ordinal: 116, Address: 0xd494)
• NtAlertMultipleThreadByThreadId (Ordinal: 117, Address: 0xd6c4)
• NtAlertResumeThread (Ordinal: 118, Address: 0xd6d4)
• NtAlertThread (Ordinal: 119, Address: 0xd6e4)
• NtAlertThreadByThreadId (Ordinal: 120, Address: 0xd6f4)
• NtAllocateLocallyUniqueId (Ordinal: 121, Address: 0xd704)
• NtAllocateReserveObject (Ordinal: 122, Address: 0xd714)
• NtAllocateUuids (Ordinal: 123, Address: 0xd724)
• NtAllocateVirtualMemory (Ordinal: 124, Address: 0xd204)
• NtAllocateVirtualMemoryEx (Ordinal: 125, Address: 0xd734)
• NtApphelpCacheControl (Ordinal: 126, Address: 0xd544)
• NtAreMappedFilesTheSame (Ordinal: 127, Address: 0xd744)
• NtAssignProcessToJobObject (Ordinal: 128, Address: 0xd754)
• NtCallbackReturn (Ordinal: 129, Address: 0xd0d4)
• NtCancelIoFile (Ordinal: 130, Address: 0xd654)
• NtCancelIoFileEx (Ordinal: 131, Address: 0xd764)
• NtCancelSynchronousIoFile (Ordinal: 132, Address: 0xd774)
• NtCancelTimer (Ordinal: 133, Address: 0xd694)
• NtClearEvent (Ordinal: 134, Address: 0xd464)
• NtClose (Ordinal: 135, Address: 0xd174)
• NtCloseObjectAuditAlarm (Ordinal: 136, Address: 0xd434)
• NtCommitTransaction (Ordinal: 137, Address: 0xd784)
• NtCompareObjects (Ordinal: 138, Address: 0xd794)
• NtCompareTokens (Ordinal: 139, Address: 0xd7a4)
• NtCompleteConnectPort (Ordinal: 140, Address: 0xd7b4)
• NtConnectPort (Ordinal: 141, Address: 0xd7c4)
• NtContinue (Ordinal: 142, Address: 0xd4b4)
• NtContinueEx (Ordinal: 143, Address: 0xd7d4)
• NtConvertBetweenAuxiliaryCounterAndPerformanceCounter (Ordinal: 144, Address: 0xd7e4)
• NtCreateDebugObject (Ordinal: 145, Address: 0xdae4)
• NtCreateDirectoryObject (Ordinal: 146, Address: 0xd7f4)
• NtCreateEvent (Ordinal: 147, Address: 0xd504)
• NtCreateFile (Ordinal: 148, Address: 0xd5d4)
• NtCreateIoCompletion (Ordinal: 149, Address: 0xd804)
• NtCreateJobObject (Ordinal: 150, Address: 0xd814)
• NtCreateKey (Ordinal: 151, Address: 0xd254)
• NtCreateKeyTransacted (Ordinal: 152, Address: 0xd824)
• NtCreateKeyedEvent (Ordinal: 153, Address: 0xd834)
• NtCreateLowBoxToken (Ordinal: 154, Address: 0xd844)
• NtCreateMailslotFile (Ordinal: 155, Address: 0xd854)
• NtCreateMutant (Ordinal: 156, Address: 0xd864)
• NtCreateNamedPipeFile (Ordinal: 157, Address: 0xd874)
• NtCreatePagingFile (Ordinal: 158, Address: 0xd884)
• NtCreatePort (Ordinal: 159, Address: 0xd894)
• NtCreateProcessEx (Ordinal: 160, Address: 0xd554)
• NtCreateSection (Ordinal: 161, Address: 0xd524)
• NtCreateSectionEx (Ordinal: 162, Address: 0xd8a4)
• NtCreateSemaphore (Ordinal: 163, Address: 0xd8b4)
• NtCreateSymbolicLinkObject (Ordinal: 164, Address: 0xd8c4)
• NtCreateThread (Ordinal: 165, Address: 0xd564)
• NtCreateThreadEx (Ordinal: 166, Address: 0xd8d4)
• NtCreateTimer (Ordinal: 167, Address: 0xd8e4)
• NtCreateToken (Ordinal: 168, Address: 0xd8f4)
• NtCreateTransaction (Ordinal: 169, Address: 0xd904)
• NtCreateUserProcess (Ordinal: 170, Address: 0xd914)
• NtCurrentTeb (Ordinal: 171, Address: 0xe298)
• NtDebugActiveProcess (Ordinal: 172, Address: 0xd924)
• NtDebugContinue (Ordinal: 173, Address: 0xd934)
• NtDelayExecution (Ordinal: 174, Address: 0xd3c4)
• NtDeleteAtom (Ordinal: 175, Address: 0xd944)
• NtDeleteFile (Ordinal: 176, Address: 0xd954)
• NtDeleteKey (Ordinal: 177, Address: 0xd964)
• NtDeleteValueKey (Ordinal: 178, Address: 0xd974)
• NtDeviceIoControlFile (Ordinal: 179, Address: 0xd0f4)
• NtDisplayString (Ordinal: 180, Address: 0xd984)
• NtDuplicateObject (Ordinal: 181, Address: 0xd444)
• NtDuplicateToken (Ordinal: 182, Address: 0xd4a4)
• NtEnumerateKey (Ordinal: 183, Address: 0xd3a4)
• NtEnumerateValueKey (Ordinal: 184, Address: 0xd1b4)
• NtFilterToken (Ordinal: 185, Address: 0xd994)
• NtFindAtom (Ordinal: 186, Address: 0xd1c4)
• NtFlushBuffersFile (Ordinal: 187, Address: 0xd534)
• NtFlushBuffersFileEx (Ordinal: 188, Address: 0xd9a4)
• NtFlushInstructionCache (Ordinal: 189, Address: 0xd9b4)
• NtFlushKey (Ordinal: 190, Address: 0xd9c4)
• NtFlushProcessWriteBuffers (Ordinal: 191, Address: 0xd9d4)
• NtFlushVirtualMemory (Ordinal: 192, Address: 0xd9e4)
• NtFreeVirtualMemory (Ordinal: 193, Address: 0xd264)
• NtFsControlFile (Ordinal: 194, Address: 0xd414)
• NtGetContextThread (Ordinal: 195, Address: 0xd9f4)
• NtGetCurrentProcessorNumber (Ordinal: 196, Address: 0xda04)
• NtGetNextProcess (Ordinal: 197, Address: 0xda14)
• NtGetNextThread (Ordinal: 198, Address: 0xda24)
• NtGetNlsSectionPtr (Ordinal: 199, Address: 0xda34)
• NtGetTickCount (Ordinal: 200, Address: 0x16820)
• NtGetWriteWatch (Ordinal: 201, Address: 0xda44)
• NtImpersonateAnonymousToken (Ordinal: 202, Address: 0xda54)
• NtImpersonateClientOfPort (Ordinal: 203, Address: 0xd274)
• NtInitializeNlsFiles (Ordinal: 204, Address: 0xda64)
• NtInitiatePowerAction (Ordinal: 205, Address: 0xda74)
• NtIsProcessInJob (Ordinal: 206, Address: 0xd574)
• NtListenPort (Ordinal: 207, Address: 0xda84)
• NtLoadDriver (Ordinal: 208, Address: 0xda94)
• NtLoadKey2 (Ordinal: 209, Address: 0xdab4)
• NtLoadKey (Ordinal: 210, Address: 0xdaa4)
• NtLoadKeyEx (Ordinal: 211, Address: 0xdac4)
• NtLockFile (Ordinal: 212, Address: 0xdad4)
• NtLockVirtualMemory (Ordinal: 213, Address: 0xdaf4)
• NtMakePermanentObject (Ordinal: 214, Address: 0xdb04)
• NtMakeTemporaryObject (Ordinal: 215, Address: 0xdb14)
• NtMapUserPhysicalPagesScatter (Ordinal: 216, Address: 0xd0b4)
• NtMapViewOfSection (Ordinal: 217, Address: 0xd304)
• NtMapViewOfSectionEx (Ordinal: 218, Address: 0xdb24)
• NtNotifyChangeDirectoryFile (Ordinal: 219, Address: 0xdb34)
• NtNotifyChangeKey (Ordinal: 220, Address: 0xdb44)
• NtNotifyChangeMultipleKeys (Ordinal: 221, Address: 0xdb54)
• NtOpenDirectoryObject (Ordinal: 222, Address: 0xd604)
• NtOpenEvent (Ordinal: 223, Address: 0xd484)
• NtOpenFile (Ordinal: 224, Address: 0xd3b4)
• NtOpenIoCompletion (Ordinal: 225, Address: 0xdb64)
• NtOpenJobObject (Ordinal: 226, Address: 0xdb74)
• NtOpenKey (Ordinal: 227, Address: 0xd1a4)
• NtOpenKeyEx (Ordinal: 228, Address: 0xdb84)
• NtOpenKeyTransacted (Ordinal: 229, Address: 0xdb94)
• NtOpenKeyTransactedEx (Ordinal: 230, Address: 0xdba4)
• NtOpenKeyedEvent (Ordinal: 231, Address: 0xdbb4)
• NtOpenMutant (Ordinal: 232, Address: 0xdbc4)
• NtOpenProcess (Ordinal: 233, Address: 0xd2e4)
• NtOpenProcessToken (Ordinal: 234, Address: 0xdbd4)
• NtOpenProcessTokenEx (Ordinal: 235, Address: 0xd384)
• NtOpenSection (Ordinal: 236, Address: 0xd3f4)
• NtOpenSemaphore (Ordinal: 237, Address: 0xdbe4)
• NtOpenSymbolicLinkObject (Ordinal: 238, Address: 0xdbf4)
• NtOpenThread (Ordinal: 239, Address: 0xdc04)
• NtOpenThreadToken (Ordinal: 240, Address: 0xd2c4)
• NtOpenThreadTokenEx (Ordinal: 241, Address: 0xd374)
• NtOpenTimer (Ordinal: 242, Address: 0xdc14)
• NtPowerInformation (Ordinal: 243, Address: 0xd674)
• NtPrivilegeCheck (Ordinal: 244, Address: 0xdc24)
• NtProtectVirtualMemory (Ordinal: 245, Address: 0xd584)
• NtPulseEvent (Ordinal: 246, Address: 0xdc34)
• NtQueryAttributesFile (Ordinal: 247, Address: 0xd454)
• NtQueryDefaultLocale (Ordinal: 248, Address: 0xd1d4)
• NtQueryDefaultUILanguage (Ordinal: 249, Address: 0xd4c4)
• NtQueryDirectoryFile (Ordinal: 250, Address: 0xd3d4)
• NtQueryDirectoryObject (Ordinal: 251, Address: 0xdc44)
• NtQueryEaFile (Ordinal: 252, Address: 0xdc54)
• NtQueryEvent (Ordinal: 253, Address: 0xd5e4)
• NtQueryFullAttributesFile (Ordinal: 254, Address: 0xdc64)
• NtQueryInformationAtom (Ordinal: 255, Address: 0xdc74)
• NtQueryInformationFile (Ordinal: 256, Address: 0xd194)
• NtQueryInformationJobObject (Ordinal: 257, Address: 0xdc84)
• NtQueryInformationProcess (Ordinal: 258, Address: 0xd214)
• NtQueryInformationThread (Ordinal: 259, Address: 0xd2d4)
• NtQueryInformationToken (Ordinal: 260, Address: 0xd294)
• NtQueryInstallUILanguage (Ordinal: 261, Address: 0xdc94)
• NtQueryIoCompletion (Ordinal: 262, Address: 0xdca4)
• NtQueryKey (Ordinal: 263, Address: 0xd1e4)
• NtQueryLicenseValue (Ordinal: 264, Address: 0xdcb4)
• NtQueryMultipleValueKey (Ordinal: 265, Address: 0xdcc4)
• NtQueryMutant (Ordinal: 266, Address: 0xdcd4)
• NtQueryObject (Ordinal: 267, Address: 0xd184)
• NtQueryPerformanceCounter (Ordinal: 268, Address: 0xd394)
• NtQuerySection (Ordinal: 269, Address: 0xd594)
• NtQuerySecurityObject (Ordinal: 270, Address: 0xdce4)
• NtQuerySemaphore (Ordinal: 271, Address: 0xdcf4)
• NtQuerySymbolicLinkObject (Ordinal: 272, Address: 0xdd04)
• NtQuerySystemEnvironmentValue (Ordinal: 273, Address: 0xdd14)
• NtQuerySystemEnvironmentValueEx (Ordinal: 274, Address: 0xdd24)
• NtQuerySystemInformation (Ordinal: 275, Address: 0xd3e4)
• NtQuerySystemInformationEx (Ordinal: 276, Address: 0xdd34)
• NtQuerySystemTime (Ordinal: 277, Address: 0xd624)
• NtQueryTimer (Ordinal: 278, Address: 0xd404)
• NtQueryTimerResolution (Ordinal: 279, Address: 0xdd44)
• NtQueryValueKey (Ordinal: 280, Address: 0xd1f4)
• NtQueryVirtualMemory (Ordinal: 281, Address: 0xd2b4)
• NtQueryVolumeInformationFile (Ordinal: 282, Address: 0xd514)
• NtQueueApcThread (Ordinal: 283, Address: 0xd4d4)
• NtQueueApcThreadEx (Ordinal: 284, Address: 0xdd54)
• NtQueueApcThreadEx2 (Ordinal: 285, Address: 0xdd64)
• NtRaiseException (Ordinal: 286, Address: 0xdd74)
• NtRaiseHardError (Ordinal: 287, Address: 0xdd84)
• NtReadFile (Ordinal: 288, Address: 0xd0e4)
• NtReadFileScatter (Ordinal: 289, Address: 0xd364)
• NtReadRequestData (Ordinal: 290, Address: 0xd5c4)
• NtReadVirtualMemory (Ordinal: 291, Address: 0xd474)
• NtRegisterThreadTerminatePort (Ordinal: 292, Address: 0xdd94)
• NtReleaseKeyedEvent (Ordinal: 293, Address: 0xdda4)
• NtReleaseMutant (Ordinal: 294, Address: 0xd284)
• NtReleaseSemaphore (Ordinal: 295, Address: 0xd124)
• NtRemoveIoCompletion (Ordinal: 296, Address: 0xd114)
• NtRemoveIoCompletionEx (Ordinal: 297, Address: 0xddb4)
• NtRemoveProcessDebug (Ordinal: 298, Address: 0xddc4)
• NtRenameKey (Ordinal: 299, Address: 0xddd4)
• NtReplaceKey (Ordinal: 300, Address: 0xdde4)
• NtReplyPort (Ordinal: 301, Address: 0xd144)
• NtReplyWaitReceivePort (Ordinal: 302, Address: 0xd134)
• NtReplyWaitReceivePortEx (Ordinal: 303, Address: 0xd334)
• NtRequestWaitReplyPort (Ordinal: 304, Address: 0xd2a4)
• NtResetEvent (Ordinal: 305, Address: 0xddf4)
• NtResetWriteWatch (Ordinal: 306, Address: 0xde04)
• NtRestoreKey (Ordinal: 307, Address: 0xde14)
• NtResumeProcess (Ordinal: 308, Address: 0xde24)
• NtResumeThread (Ordinal: 309, Address: 0xd5a4)
• NtRollbackTransaction (Ordinal: 310, Address: 0xde34)
• NtSaveKey (Ordinal: 311, Address: 0xde44)
• NtSecureConnectPort (Ordinal: 312, Address: 0xde54)
• NtSetContextThread (Ordinal: 313, Address: 0xde64)
• NtSetDebugFilterState (Ordinal: 314, Address: 0xde74)
• NtSetDefaultLocale (Ordinal: 315, Address: 0xde84)
• NtSetDefaultUILanguage (Ordinal: 316, Address: 0xde94)
• NtSetEaFile (Ordinal: 317, Address: 0xdea4)
• NtSetEvent (Ordinal: 318, Address: 0xd164)
• NtSetEventBoostPriority (Ordinal: 319, Address: 0xd354)
• NtSetInformationDebugObject (Ordinal: 320, Address: 0xdeb4)
• NtSetInformationFile (Ordinal: 321, Address: 0xd2f4)
• NtSetInformationJobObject (Ordinal: 322, Address: 0xdec4)
• NtSetInformationKey (Ordinal: 323, Address: 0xded4)
• NtSetInformationObject (Ordinal: 324, Address: 0xd644)
• NtSetInformationProcess (Ordinal: 325, Address: 0xd244)
• NtSetInformationThread (Ordinal: 326, Address: 0xd154)
• NtSetInformationToken (Ordinal: 327, Address: 0xdee4)
• NtSetInformationVirtualMemory (Ordinal: 328, Address: 0xdef4)
• NtSetIntervalProfile (Ordinal: 329, Address: 0xdf04)
• NtSetIoCompletion (Ordinal: 330, Address: 0xdf14)
• NtSetIoCompletionEx (Ordinal: 331, Address: 0xdf24)
• NtSetLdtEntries (Ordinal: 332, Address: 0xdf34)
• NtSetSecurityObject (Ordinal: 333, Address: 0xdf44)
• NtSetSystemInformation (Ordinal: 334, Address: 0xdf54)
• NtSetSystemTime (Ordinal: 335, Address: 0xdf64)
• NtSetThreadExecutionState (Ordinal: 336, Address: 0xdf74)
• NtSetTimer (Ordinal: 337, Address: 0xd6a4)
• NtSetTimerResolution (Ordinal: 338, Address: 0xdf84)
• NtSetValueKey (Ordinal: 339, Address: 0xd684)
• NtSetVolumeInformationFile (Ordinal: 340, Address: 0xdf94)
• NtShutdownSystem (Ordinal: 341, Address: 0xdfa4)
• NtSignalAndWaitForSingleObject (Ordinal: 342, Address: 0xdfb4)
• NtSuspendProcess (Ordinal: 343, Address: 0xdfc4)
• NtSuspendThread (Ordinal: 344, Address: 0xdfd4)
• NtSystemDebugControl (Ordinal: 345, Address: 0xdfe4)
• NtTerminateJobObject (Ordinal: 346, Address: 0xdff4)
• NtTerminateProcess (Ordinal: 347, Address: 0xd344)
• NtTerminateThread (Ordinal: 348, Address: 0xd5b4)
• NtTestAlert (Ordinal: 349, Address: 0xe004)
• NtTraceControl (Ordinal: 350, Address: 0xe014)
• NtTraceEvent (Ordinal: 351, Address: 0xd664)
• NtUnloadDriver (Ordinal: 352, Address: 0xe024)
• NtUnloadKey (Ordinal: 353, Address: 0xe034)
• NtUnlockFile (Ordinal: 354, Address: 0xe044)
• NtUnlockVirtualMemory (Ordinal: 355, Address: 0xe054)
• NtUnmapViewOfSection (Ordinal: 356, Address: 0xd324)
• NtUnmapViewOfSectionEx (Ordinal: 357, Address: 0xe064)
• NtWaitForAlertByThreadId (Ordinal: 358, Address: 0xe074)
• NtWaitForDebugEvent (Ordinal: 359, Address: 0xe084)
• NtWaitForKeyedEvent (Ordinal: 360, Address: 0xe094)
• NtWaitForMultipleObjects (Ordinal: 361, Address: 0xd634)
• NtWaitForMultipleObjects32 (Ordinal: 362, Address: 0xd224)
• NtWaitForSingleObject (Ordinal: 363, Address: 0xd0c4)
• NtWorkerFactoryWorkerReady (Ordinal: 364, Address: 0xd094)
• NtWow64AllocateVirtualMemory64 (Ordinal: 365, Address: 0xe0a4)
• NtWow64GetNativeSystemInformation (Ordinal: 366, Address: 0xe0b4)
• NtWow64IsProcessorFeaturePresent (Ordinal: 367, Address: 0xe0c4)
• NtWow64QueryInformationProcess64 (Ordinal: 368, Address: 0xe0d4)
• NtWow64ReadVirtualMemory64 (Ordinal: 369, Address: 0xe0e4)
• NtWow64WriteVirtualMemory64 (Ordinal: 370, Address: 0xe0f4)
• NtWriteFile (Ordinal: 371, Address: 0xd104)
• NtWriteFileGather (Ordinal: 372, Address: 0xd234)
• NtWriteRequestData (Ordinal: 373, Address: 0xd5f4)
• NtWriteVirtualMemory (Ordinal: 374, Address: 0xd424)
• NtYieldExecution (Ordinal: 375, Address: 0xd4e4)
• NtdllDefWindowProc_A (Ordinal: 376, Address: 0x168a0)
• NtdllDefWindowProc_W (Ordinal: 377, Address: 0x168b0)
• NtdllDialogWndProc_A (Ordinal: 378, Address: 0x168e0)
• NtdllDialogWndProc_W (Ordinal: 379, Address: 0x168f0)
• PfxFindPrefix (Ordinal: 380, Address: 0x1360)
• PfxInitialize (Ordinal: 381, Address: 0x1380)
• PfxInsertPrefix (Ordinal: 382, Address: 0x13a0)
• PfxRemovePrefix (Ordinal: 383, Address: 0x13c0)
• RtlAbortRXact (Ordinal: 384, Address: 0x13e0)
• RtlAbsoluteToSelfRelativeSD (Ordinal: 385, Address: 0x17440)
• RtlAcquirePebLock (Ordinal: 386, Address: 0x174d0)
• RtlAcquireResourceExclusive (Ordinal: 387, Address: 0x174f0)
• RtlAcquireResourceShared (Ordinal: 388, Address: 0x175d0)
• RtlAcquireSRWLockExclusive (Ordinal: 389, Address: 0x176a0)
• RtlAcquireSRWLockShared (Ordinal: 390, Address: 0x17730)
• RtlActivateActivationContext (Ordinal: 391, Address: 0x177a0)
• RtlActivateActivationContextEx (Ordinal: 392, Address: 0x177e0)
• RtlActivateActivationContextUnsafeFast (Ordinal: 393, Address: 0x178c0)
• RtlAddAccessAllowedAce (Ordinal: 394, Address: 0x17960)
• RtlAddAccessAllowedAceEx (Ordinal: 395, Address: 0x179e0)
• RtlAddAccessAllowedObjectAce (Ordinal: 396, Address: 0x17a60)
• RtlAddAccessDeniedAce (Ordinal: 397, Address: 0x17ae0)
• RtlAddAccessDeniedAceEx (Ordinal: 398, Address: 0x17b60)
• RtlAddAccessDeniedObjectAce (Ordinal: 399, Address: 0x17be0)
• RtlAddAce (Ordinal: 400, Address: 0x17c60)
• RtlAddActionToRXact (Ordinal: 401, Address: 0x1400)
• RtlAddAtomToAtomTable (Ordinal: 402, Address: 0x17d40)
• RtlAddAttributeActionToRXact (Ordinal: 403, Address: 0x1420)
• RtlAddAuditAccessAce (Ordinal: 404, Address: 0x180a0)
• RtlAddAuditAccessAceEx (Ordinal: 405, Address: 0x18150)
• RtlAddAuditAccessObjectAce (Ordinal: 406, Address: 0x18210)
• RtlAddMandatoryAce (Ordinal: 407, Address: 0x182a0)
• RtlAddProcessTrustLabelAce (Ordinal: 408, Address: 0x18350)
• RtlAddRefActivationContext (Ordinal: 409, Address: 0x18400)
• RtlAddVectoredContinueHandler (Ordinal: 410, Address: 0x18420)
• RtlAddVectoredExceptionHandler (Ordinal: 411, Address: 0x18450)
• RtlAddressInSectionTable (Ordinal: 412, Address: 0x18470)
• RtlAdjustPrivilege (Ordinal: 413, Address: 0x184d0)
• RtlAllocateAndInitializeSid (Ordinal: 414, Address: 0x18700)
• RtlAllocateHandle (Ordinal: 415, Address: 0x18860)
• RtlAllocateHeap (Ordinal: 416, Address: 0x18a40)
• RtlAnsiCharToUnicodeChar (Ordinal: 417, Address: 0x193f0)
• RtlAnsiStringToUnicodeSize (Ordinal: 418, Address: 0x195b0)
• RtlAnsiStringToUnicodeString (Ordinal: 419, Address: 0x195e0)
• RtlAppendAsciizToString (Ordinal: 420, Address: 0x196d0)
• RtlAppendStringToString (Ordinal: 421, Address: 0x19730)
• RtlAppendUnicodeStringToString (Ordinal: 422, Address: 0x197a0)
• RtlAppendUnicodeToString (Ordinal: 423, Address: 0x19830)
• RtlApplyRXact (Ordinal: 424, Address: 0x1440)
• RtlApplyRXactNoFlush (Ordinal: 425, Address: 0x1460)
• RtlAreAllAccessesGranted (Ordinal: 426, Address: 0x198c0)
• RtlAreAnyAccessesGranted (Ordinal: 427, Address: 0x198e0)
• RtlAreBitsClear (Ordinal: 428, Address: 0x198f0)
• RtlAreBitsSet (Ordinal: 429, Address: 0x19a10)
• RtlAssert (Ordinal: 430, Address: 0x19b30)
• RtlBarrier (Ordinal: 431, Address: 0x19bb0)
• RtlCaptureContext (Ordinal: 432, Address: 0xe140)
• RtlCaptureStackBackTrace (Ordinal: 433, Address: 0x19e30)
• RtlCharToInteger (Ordinal: 434, Address: 0x19ee0)
• RtlCheckRegistryKey (Ordinal: 435, Address: 0x1a070)
• RtlClearAllBits (Ordinal: 436, Address: 0x1a180)
• RtlClearBits (Ordinal: 437, Address: 0x1a1f0)
• RtlClosePropertySet (Ordinal: 438, Address: 0x1480)
• RtlCompactHeap (Ordinal: 439, Address: 0x1a330)
• RtlCompareMemory (Ordinal: 440, Address: 0x1a390)
• RtlCompareMemoryUlong (Ordinal: 441, Address: 0x1a3d0)
• RtlCompareString (Ordinal: 442, Address: 0x1a420)
• RtlCompareUnicodeString (Ordinal: 443, Address: 0x1a4f0)
• RtlCompareUnicodeStrings (Ordinal: 444, Address: 0x1a540)
• RtlCompressBuffer (Ordinal: 445, Address: 0x1a690)
• RtlComputeCrc32 (Ordinal: 446, Address: 0x1a840)
• RtlConsoleMultiByteToUnicodeN (Ordinal: 447, Address: 0x14a0)
• RtlConvertDeviceFamilyInfoToString (Ordinal: 448, Address: 0x1a870)
• RtlConvertExclusiveToShared (Ordinal: 449, Address: 0x14c0)
• RtlConvertLongToLargeInteger (Ordinal: 450, Address: 0x1a960)
• RtlConvertSharedToExclusive (Ordinal: 451, Address: 0x14e0)
• RtlConvertSidToUnicodeString (Ordinal: 452, Address: 0x1a970)
• RtlConvertToAutoInheritSecurityObject (Ordinal: 453, Address: 0x1aae0)
• RtlConvertUiListToApiList (Ordinal: 454, Address: 0x1500)
• RtlConvertUlongToLargeInteger (Ordinal: 455, Address: 0x1ab60)
• RtlCopyContext (Ordinal: 456, Address: 0x1ab70)
• RtlCopyExtendedContext (Ordinal: 457, Address: 0x1ad00)
• RtlCopyLuid (Ordinal: 458, Address: 0x1b000)
• RtlCopyLuidAndAttributesArray (Ordinal: 459, Address: 0x1b020)
• RtlCopySecurityDescriptor (Ordinal: 460, Address: 0x1b0a0)
• RtlCopySid (Ordinal: 461, Address: 0x1b500)
• RtlCopySidAndAttributesArray (Ordinal: 462, Address: 0x1520)
• RtlCopyString (Ordinal: 463, Address: 0x1b5a0)
• RtlCopyUnicodeString (Ordinal: 464, Address: 0x1b5f0)
• RtlCreateAcl (Ordinal: 465, Address: 0x1b660)
• RtlCreateActivationContext (Ordinal: 466, Address: 0x1b710)
• RtlCreateAndSetSD (Ordinal: 467, Address: 0x1540)
• RtlCreateAtomTable (Ordinal: 468, Address: 0x1ca50)
• RtlCreateEnvironment (Ordinal: 469, Address: 0x1cb20)
• RtlCreateHeap (Ordinal: 470, Address: 0x1cc60)
• RtlCreateProcessParameters (Ordinal: 471, Address: 0x1d500)
• RtlCreateProcessParametersEx (Ordinal: 472, Address: 0x1d560)
• RtlCreatePropertySet (Ordinal: 473, Address: 0x1560)
• RtlCreateQueryDebugBuffer (Ordinal: 474, Address: 0x1d6e0)
• RtlCreateRegistryKey (Ordinal: 475, Address: 0x1d7e0)
• RtlCreateServiceSid (Ordinal: 476, Address: 0x1d920)
• RtlCreateSecurityDescriptor (Ordinal: 477, Address: 0x1d8d0)
• RtlCreateTagHeap (Ordinal: 478, Address: 0x1580)
• RtlCreateTimer (Ordinal: 479, Address: 0x1da70)
• RtlCreateTimerQueue (Ordinal: 480, Address: 0x1dc80)
• RtlCreateUnicodeString (Ordinal: 481, Address: 0x1ddf0)
• RtlCreateUnicodeStringFromAsciiz (Ordinal: 482, Address: 0x1de70)
• RtlCreateUserProcess (Ordinal: 483, Address: 0x1dec0)
• RtlCreateUserSecurityObject (Ordinal: 484, Address: 0x15a0)
• RtlCreateUserStack (Ordinal: 485, Address: 0x1e0f0)
• RtlCreateUserThread (Ordinal: 486, Address: 0x1e350)
• RtlCustomCPToUnicodeN (Ordinal: 487, Address: 0x1e520)
• RtlCutoverTimeToSystemTime (Ordinal: 488, Address: 0x15c0)
• RtlDeNormalizeProcessParams (Ordinal: 489, Address: 0x1e610)
• RtlDeactivateActivationContext (Ordinal: 490, Address: 0x1e6a0)
• RtlDeactivateActivationContextUnsafeFast (Ordinal: 491, Address: 0x1e7d0)
• RtlDebugPrintTimes (Ordinal: 492, Address: 0x15e0)
• RtlDecodePointer (Ordinal: 493, Address: 0x1e860)
• RtlDecodeSystemPointer (Ordinal: 494, Address: 0x1e860)
• RtlDecompressBuffer (Ordinal: 495, Address: 0x1e920)
• RtlDecompressFragment (Ordinal: 496, Address: 0x1e9d0)
• RtlDefaultNpAcl (Ordinal: 497, Address: 0x1edb0)
• RtlDelete (Ordinal: 498, Address: 0x1ee10)
• RtlDeleteAce (Ordinal: 499, Address: 0x1f030)
• RtlDeleteAtomFromAtomTable (Ordinal: 500, Address: 0x1f120)
• RtlDeleteBarrier (Ordinal: 501, Address: 0x1f2f0)
• RtlDeleteCriticalSection (Ordinal: 502, Address: 0x1f3d0)
• RtlDeleteElementGenericTable (Ordinal: 503, Address: 0x1f460)
• RtlDeleteElementGenericTableAvl (Ordinal: 504, Address: 0x1600)
• RtlDeleteNoSplay (Ordinal: 505, Address: 0x1f560)
• RtlDeleteOwnersRanges (Ordinal: 506, Address: 0x1620)
• RtlDeleteRange (Ordinal: 507, Address: 0x1640)
• RtlDeleteRegistryValue (Ordinal: 508, Address: 0x1f760)
• RtlDeleteResource (Ordinal: 509, Address: 0x1f890)
• RtlDeleteSecurityObject (Ordinal: 510, Address: 0x1f970)
• RtlDeleteTimer (Ordinal: 511, Address: 0x1f9f0)
• RtlDeleteTimerQueueEx (Ordinal: 512, Address: 0x1fb90)
• RtlDeregisterWait (Ordinal: 513, Address: 0x1fd80)
• RtlDeregisterWaitEx (Ordinal: 514, Address: 0x1fda0)
• RtlDeriveCapabilitySidsFromName (Ordinal: 515, Address: 0x1fec0)
• RtlDestroyAtomTable (Ordinal: 516, Address: 0x20090)
• RtlDestroyEnvironment (Ordinal: 517, Address: 0x20120)
• RtlDestroyHandleTable (Ordinal: 518, Address: 0x20160)
• RtlDestroyHeap (Ordinal: 519, Address: 0x201e0)
• RtlDestroyProcessParameters (Ordinal: 520, Address: 0x204a0)
• RtlDestroyQueryDebugBuffer (Ordinal: 521, Address: 0x204d0)
• RtlDetermineDosPathNameType_U (Ordinal: 522, Address: 0x205b0)
• RtlDllShutdownInProgress (Ordinal: 523, Address: 0x20660)
• RtlDoesFileExists_U (Ordinal: 524, Address: 0x20670)
• RtlDosPathNameToNtPathName_U (Ordinal: 525, Address: 0x20710)
• RtlDosPathNameToNtPathName_U_WithStatus (Ordinal: 526, Address: 0x20750)
• RtlDosPathNameToRelativeNtPathName_U (Ordinal: 527, Address: 0x20de0)
• RtlDosPathNameToRelativeNtPathName_U_WithStatus (Ordinal: 528, Address: 0x20e20)
• RtlDosSearchPath_U (Ordinal: 529, Address: 0x20f10)
• RtlDowncaseUnicodeChar (Ordinal: 530, Address: 0x211a0)
• RtlDowncaseUnicodeString (Ordinal: 531, Address: 0x21200)
• RtlDumpResource (Ordinal: 532, Address: 0x212e0)
• RtlDuplicateUnicodeString (Ordinal: 533, Address: 0x21380)
• RtlEmptyAtomTable (Ordinal: 534, Address: 0x21510)
• RtlEncodePointer (Ordinal: 535, Address: 0x21640)
• RtlEncodeSystemPointer (Ordinal: 536, Address: 0x21640)
• RtlEnlargedIntegerMultiply (Ordinal: 537, Address: 0x21700)
• RtlEnlargedUnsignedDivide (Ordinal: 538, Address: 0x21710)
• RtlEnlargedUnsignedMultiply (Ordinal: 539, Address: 0x21730)
• RtlEnterCriticalSection (Ordinal: 540, Address: 0x21740)
• RtlEnumProcessHeaps (Ordinal: 541, Address: 0x1660)
• RtlEnumerateGenericTable (Ordinal: 542, Address: 0x217f0)
• RtlEnumerateGenericTableWithoutSplaying (Ordinal: 543, Address: 0x218e0)
• RtlEnumerateGenericTableWithoutSplayingAvl (Ordinal: 544, Address: 0x219b0)
• RtlEnumerateProperties (Ordinal: 545, Address: 0x1680)
• RtlEqualComputerName (Ordinal: 546, Address: 0x21a10)
• RtlEqualDomainName (Ordinal: 547, Address: 0x21b10)
• RtlEqualLuid (Ordinal: 548, Address: 0x21c10)
• RtlEqualPrefixSid (Ordinal: 549, Address: 0x21c40)
• RtlEqualSid (Ordinal: 550, Address: 0x21cb0)
• RtlEqualString (Ordinal: 551, Address: 0x21d60)
• RtlEqualUnicodeString (Ordinal: 552, Address: 0x21da0)
• RtlEraseUnicodeString (Ordinal: 553, Address: 0x21e10)
• RtlExitUserProcess (Ordinal: 554, Address: 0x21e50)
• RtlExitUserThread (Ordinal: 555, Address: 0x21eb0)
• RtlExpandEnvironmentStrings (Ordinal: 556, Address: 0x21f20)
• RtlExpandEnvironmentStrings_U (Ordinal: 557, Address: 0x221b0)
• RtlExtendHeap (Ordinal: 558, Address: 0x16a0)
• RtlExtendedIntegerMultiply (Ordinal: 559, Address: 0x22240)
• RtlExtendedLargeIntegerDivide (Ordinal: 560, Address: 0x22270)
• RtlExtendedMagicDivide (Ordinal: 561, Address: 0x222c0)
• RtlFillMemory (Ordinal: 562, Address: 0x223e0)
• RtlFillMemoryUlong (Ordinal: 563, Address: 0x22410)
• RtlFinalReleaseOutOfProcessMemoryStream (Ordinal: 564, Address: 0x16c0)
• RtlFindActivationContextSectionGuid (Ordinal: 565, Address: 0x22460)
• RtlFindActivationContextSectionString (Ordinal: 566, Address: 0x22710)
• RtlFindCharInUnicodeString (Ordinal: 567, Address: 0x22960)
• RtlFindClearBits (Ordinal: 568, Address: 0x22b40)
• RtlFindClearBitsAndSet (Ordinal: 569, Address: 0x22c20)
• RtlFindClearRuns (Ordinal: 570, Address: 0x22cc0)
• RtlFindExportedRoutineByName (Ordinal: 571, Address: 0x22d40)
• RtlFindLastBackwardRunClear (Ordinal: 572, Address: 0x22dd0)
• RtlFindLastBackwardRunSet (Ordinal: 573, Address: 0x22e30)
• RtlFindLeastSignificantBit (Ordinal: 574, Address: 0x22e90)
• RtlFindLongestRunClear (Ordinal: 575, Address: 0x22f00)
• RtlFindLongestRunSet (Ordinal: 576, Address: 0x22ff0)
• RtlFindMessage (Ordinal: 577, Address: 0x230e0)
• RtlFindMostSignificantBit (Ordinal: 578, Address: 0x231d0)
• RtlFindNextForwardRunClear (Ordinal: 579, Address: 0x23220)
• RtlFindNextForwardRunSet (Ordinal: 580, Address: 0x232c0)
• RtlFindRange (Ordinal: 581, Address: 0x16e0)
• RtlFindSetBits (Ordinal: 582, Address: 0x23360)
• RtlFindSetBitsAndClear (Ordinal: 583, Address: 0x23440)
• RtlFindSetRuns (Ordinal: 584, Address: 0x234e0)
• RtlFirstEntrySList (Ordinal: 585, Address: 0x23560)
• RtlFirstFreeAce (Ordinal: 586, Address: 0x23570)
• RtlFlsAlloc (Ordinal: 587, Address: 0x235f0)
• RtlFlsFree (Ordinal: 588, Address: 0x237b0)
• RtlFlsGetValue (Ordinal: 589, Address: 0x23930)
• RtlFlsSetValue (Ordinal: 590, Address: 0x239c0)
• RtlFlushPropertySet (Ordinal: 591, Address: 0x1700)
• RtlFormatCurrentUserKeyPath (Ordinal: 592, Address: 0x23aa0)
• RtlFormatMessage (Ordinal: 593, Address: 0x23bd0)
• RtlFormatMessageEx (Ordinal: 594, Address: 0x23c30)
• RtlFreeActivationContextStack (Ordinal: 595, Address: 0x24510)
• RtlFreeAnsiString (Ordinal: 596, Address: 0x245a0)
• RtlFreeHandle (Ordinal: 597, Address: 0x245f0)
• RtlFreeHeap (Ordinal: 598, Address: 0x24680)
• RtlFreeOemString (Ordinal: 599, Address: 0x24a60)
• RtlFreeSid (Ordinal: 600, Address: 0x24ab0)
• RtlFreeThreadActivationContextStack (Ordinal: 601, Address: 0x24b20)
• RtlFreeUnicodeString (Ordinal: 602, Address: 0x24b40)
• RtlFreeUserStack (Ordinal: 603, Address: 0x24b90)
• RtlGetDeviceFamilyInfoEnum (Ordinal: 604, Address: 0x25370)
• RtlGUIDFromString (Ordinal: 605, Address: 0x24c00)
• RtlGenerate8dot3Name (Ordinal: 606, Address: 0x1720)
• RtlGetAce (Ordinal: 607, Address: 0x24e50)
• RtlGetActiveActivationContext (Ordinal: 608, Address: 0x24ee0)
• RtlGetCallersAddress (Ordinal: 609, Address: 0x24f20)
• RtlGetCompressionWorkSpaceSize (Ordinal: 610, Address: 0x24f80)
• RtlGetControlSecurityDescriptor (Ordinal: 611, Address: 0x25060)
• RtlGetCurrentDirectory_U (Ordinal: 612, Address: 0x250e0)
• RtlGetCurrentPeb (Ordinal: 613, Address: 0x251e0)
• RtlGetCurrentProcessorNumberEx (Ordinal: 614, Address: 0x251f0)
• RtlGetCurrentTransaction (Ordinal: 615, Address: 0x25260)
• RtlGetDaclSecurityDescriptor (Ordinal: 616, Address: 0x252a0)
• RtlGetElementGenericTable (Ordinal: 617, Address: 0x25400)
• RtlGetEnabledExtendedFeatures (Ordinal: 618, Address: 0x25560)
• RtlGetExePath (Ordinal: 619, Address: 0x25580)
• RtlGetExtendedContextLength (Ordinal: 620, Address: 0x25620)
• RtlGetExtendedContextLength2 (Ordinal: 621, Address: 0x25650)
• RtlGetExtendedFeaturesMask (Ordinal: 622, Address: 0x25880)
• RtlGetFrame (Ordinal: 623, Address: 0x258a0)
• RtlGetFullPathName_U (Ordinal: 624, Address: 0x258b0)
• RtlGetFullPathName_UEx (Ordinal: 625, Address: 0x25940)
• RtlGetGroupSecurityDescriptor (Ordinal: 626, Address: 0x25ba0)
• RtlGetLastNtStatus (Ordinal: 627, Address: 0x25c00)
• RtlGetLastWin32Error (Ordinal: 628, Address: 0x25c10)
• RtlGetLocaleFileMappingAddress (Ordinal: 629, Address: 0x25c20)
• RtlGetLongestNtPathLength (Ordinal: 630, Address: 0x25ca0)
• RtlGetNativeSystemInformation (Ordinal: 631, Address: 0x25cb0)
• RtlGetNtGlobalFlags (Ordinal: 632, Address: 0x25cc0)
• RtlGetNtProductType (Ordinal: 633, Address: 0x25cd0)
• RtlGetNtVersionNumbers (Ordinal: 634, Address: 0x25d00)
• RtlGetOwnerSecurityDescriptor (Ordinal: 635, Address: 0x25d50)
• RtlGetProductInfo (Ordinal: 636, Address: 0x25ed0)
• RtlGetProcessHeaps (Ordinal: 637, Address: 0x25db0)
• RtlGetProcessPreferredUILanguages (Ordinal: 638, Address: 0x25e40)
• RtlGetSaclSecurityDescriptor (Ordinal: 639, Address: 0x25f80)
• RtlGetSearchPath (Ordinal: 640, Address: 0x26040)
• RtlGetSystemPreferredUILanguages (Ordinal: 641, Address: 0x26070)
• RtlGetSystemTimePrecise (Ordinal: 642, Address: 0x260e0)
• RtlGetThreadErrorMode (Ordinal: 643, Address: 0x26130)
• RtlGetThreadPreferredUILanguages (Ordinal: 644, Address: 0x26140)
• RtlGetUnloadEventTrace (Ordinal: 645, Address: 0x261d0)
• RtlGetUnloadEventTraceEx (Ordinal: 646, Address: 0x261e0)
• RtlGetUserInfoHeap (Ordinal: 647, Address: 0x26210)
• RtlGetUserPreferredUILanguages (Ordinal: 648, Address: 0x263f0)
• RtlGetVersion (Ordinal: 649, Address: 0x26460)
• RtlGuidToPropertySetName (Ordinal: 650, Address: 0x1740)
• RtlHashUnicodeString (Ordinal: 651, Address: 0x264f0)
• RtlIdentifierAuthoritySid (Ordinal: 652, Address: 0x26650)
• RtlIdnToAscii (Ordinal: 653, Address: 0x26660)
• RtlIdnToNameprepUnicode (Ordinal: 654, Address: 0x26e20)
• RtlIdnToUnicode (Ordinal: 655, Address: 0x272f0)
• RtlImageDirectoryEntryToData (Ordinal: 656, Address: 0x27a90)
• RtlImageNtHeader (Ordinal: 657, Address: 0x27b70)
• RtlImageRvaToSection (Ordinal: 658, Address: 0x27bf0)
• RtlImageRvaToVa (Ordinal: 659, Address: 0x27c30)
• RtlImpersonateSelf (Ordinal: 660, Address: 0x27cc0)
• RtlInitAnsiString (Ordinal: 661, Address: 0x27e10)
• RtlInitAnsiStringEx (Ordinal: 662, Address: 0x27e50)
• RtlInitBarrier (Ordinal: 663, Address: 0x27eb0)
• RtlInitCodePageTable (Ordinal: 664, Address: 0x27f60)
• RtlInitNlsTables (Ordinal: 665, Address: 0x28060)
• RtlInitString (Ordinal: 666, Address: 0x280b0)
• RtlInitUnicodeString (Ordinal: 667, Address: 0x280f0)
• RtlInitUnicodeStringEx (Ordinal: 668, Address: 0x28130)
• RtlInitializeBitMap (Ordinal: 669, Address: 0x28190)
• RtlInitializeConditionVariable (Ordinal: 670, Address: 0x28200)
• RtlInitializeContext (Ordinal: 671, Address: 0x1760)
• RtlInitializeCriticalSection (Ordinal: 672, Address: 0x28210)
• RtlInitializeCriticalSectionAndSpinCount (Ordinal: 673, Address: 0x28270)
• RtlInitializeCriticalSectionEx (Ordinal: 674, Address: 0x282d0)
• RtlInitializeExtendedContext (Ordinal: 675, Address: 0x28400)
• RtlInitializeExtendedContext2 (Ordinal: 676, Address: 0x28440)
• RtlInitializeGenericTable (Ordinal: 677, Address: 0x28710)
• RtlInitializeGenericTableAvl (Ordinal: 678, Address: 0x287d0)
• RtlInitializeHandleTable (Ordinal: 679, Address: 0x28840)
• RtlInitializeNtUserPfn (Ordinal: 680, Address: 0x288e0)
• RtlInitializeRXact (Ordinal: 681, Address: 0x1780)
• RtlInitializeResource (Ordinal: 682, Address: 0x28980)
• RtlInitializeSListHead (Ordinal: 683, Address: 0x28a40)
• RtlInitializeSRWLock (Ordinal: 684, Address: 0x28a60)
• RtlInitializeSid (Ordinal: 685, Address: 0x28a70)
• RtlInsertElementGenericTable (Ordinal: 686, Address: 0x28ad0)
• RtlInsertElementGenericTableAvl (Ordinal: 687, Address: 0x28ca0)
• RtlInt64ToUnicodeString (Ordinal: 688, Address: 0x28d00)
• RtlIntegerToChar (Ordinal: 689, Address: 0x28e20)
• RtlIntegerToUnicodeString (Ordinal: 690, Address: 0x28f00)
• RtlInterlockedCompareExchange64 (Ordinal: 691, Address: 0x28fb0)
• RtlInterlockedFlushSList (Ordinal: 692, Address: 0x28fd0)
• RtlInterlockedPopEntrySList (Ordinal: 693, Address: 0x29060)
• RtlInterlockedPushEntrySList (Ordinal: 694, Address: 0x29150)
• RtlInterlockedPushListSList (Ordinal: 695, Address: 0x291d0)
• RtlInterlockedPushListSListEx (Ordinal: 696, Address: 0x29200)
• RtlIpv4AddressToStringA (Ordinal: 697, Address: 0x29280)
• RtlIpv4AddressToStringExA (Ordinal: 698, Address: 0x292d0)
• RtlIpv4AddressToStringExW (Ordinal: 699, Address: 0x29400)
• RtlIpv4AddressToStringW (Ordinal: 700, Address: 0x29540)
• RtlIpv4StringToAddressA (Ordinal: 701, Address: 0x29590)
• RtlIpv4StringToAddressExA (Ordinal: 702, Address: 0x29620)
• RtlIpv4StringToAddressExW (Ordinal: 703, Address: 0x296a0)
• RtlIpv4StringToAddressW (Ordinal: 704, Address: 0x29740)
• RtlIpv6AddressToStringA (Ordinal: 705, Address: 0x297d0)
• RtlIpv6AddressToStringExA (Ordinal: 706, Address: 0x29840)
• RtlIpv6AddressToStringExW (Ordinal: 707, Address: 0x29b80)
• RtlIpv6AddressToStringW (Ordinal: 708, Address: 0x29c10)
• RtlIpv6StringToAddressA (Ordinal: 709, Address: 0x29cb0)
• RtlIpv6StringToAddressExA (Ordinal: 710, Address: 0x29d50)
• RtlIpv6StringToAddressExW (Ordinal: 711, Address: 0x29dd0)
• RtlIpv6StringToAddressW (Ordinal: 712, Address: 0x29e80)
• RtlIsActivationContextActive (Ordinal: 713, Address: 0x29f00)
• RtlIsCriticalSectionLocked (Ordinal: 714, Address: 0x29f40)
• RtlIsCriticalSectionLockedByThread (Ordinal: 715, Address: 0x29f60)
• RtlIsCurrentProcess (Ordinal: 716, Address: 0x29f90)
• RtlIsCurrentThread (Ordinal: 717, Address: 0x29fc0)
• RtlIsDosDeviceName_U (Ordinal: 718, Address: 0x29ff0)
• RtlIsGenericTableEmpty (Ordinal: 719, Address: 0x2a2a0)
• RtlIsNameLegalDOS8Dot3 (Ordinal: 720, Address: 0x2a300)
• RtlIsNormalizedString (Ordinal: 721, Address: 0x2a490)
• RtlIsProcessorFeaturePresent (Ordinal: 722, Address: 0x2a7c0)
• RtlIsTextUnicode (Ordinal: 723, Address: 0x2a7e0)
• RtlIsValidHandle (Ordinal: 724, Address: 0x2aa90)
• RtlIsValidIndexHandle (Ordinal: 725, Address: 0x2ab00)
• RtlIsValidLocaleName (Ordinal: 726, Address: 0x2abd0)
• RtlLargeIntegerAdd (Ordinal: 727, Address: 0x2ad90)
• RtlLargeIntegerArithmeticShift (Ordinal: 728, Address: 0x2adb0)
• RtlLargeIntegerDivide (Ordinal: 729, Address: 0x2add0)
• RtlLargeIntegerNegate (Ordinal: 730, Address: 0x2ae20)
• RtlLargeIntegerShiftLeft (Ordinal: 731, Address: 0x2ae40)
• RtlLargeIntegerShiftRight (Ordinal: 732, Address: 0x2ae60)
• RtlLargeIntegerSubtract (Ordinal: 733, Address: 0x2ae80)
• RtlLargeIntegerToChar (Ordinal: 734, Address: 0x2aea0)
• RtlLcidToLocaleName (Ordinal: 735, Address: 0x2afe0)
• RtlLeaveCriticalSection (Ordinal: 736, Address: 0x2b1f0)
• RtlLengthRequiredSid (Ordinal: 737, Address: 0x2b2a0)
• RtlLengthSecurityDescriptor (Ordinal: 738, Address: 0x2b2c0)
• RtlLengthSid (Ordinal: 739, Address: 0x2b4a0)
• RtlLocalTimeToSystemTime (Ordinal: 740, Address: 0x2b510)
• RtlLocaleNameToLcid (Ordinal: 741, Address: 0x2b5b0)
• RtlLocateExtendedFeature (Ordinal: 742, Address: 0x2b800)
• RtlLocateExtendedFeature2 (Ordinal: 743, Address: 0x2b840)
• RtlLocateLegacyContext (Ordinal: 744, Address: 0x2baa0)
• RtlLockHeap (Ordinal: 745, Address: 0x2bac0)
• RtlLookupAtomInAtomTable (Ordinal: 746, Address: 0x2bb10)
• RtlLookupElementGenericTable (Ordinal: 747, Address: 0x2bd70)
• RtlLookupElementGenericTableAvl (Ordinal: 748, Address: 0x2be30)
• RtlMakeSelfRelativeSD (Ordinal: 749, Address: 0x2be80)
• RtlMapGenericMask (Ordinal: 750, Address: 0x2c130)
• RtlMoveMemory (Ordinal: 751, Address: 0x2c170)
• RtlMultiByteToUnicodeN (Ordinal: 752, Address: 0x2c1a0)
• RtlMultiByteToUnicodeSize (Ordinal: 753, Address: 0x2c2c0)
• RtlNewInstanceSecurityObject (Ordinal: 754, Address: 0x17a0)
• RtlNewSecurityGrantedAccess (Ordinal: 755, Address: 0x17c0)
• RtlNewSecurityObject (Ordinal: 756, Address: 0x2c4b0)
• RtlNewSecurityObjectEx (Ordinal: 757, Address: 0x2c500)
• RtlNewSecurityObjectWithMultipleInheritance (Ordinal: 758, Address: 0x2c680)
• RtlNormalizeProcessParams (Ordinal: 759, Address: 0x2c710)
• RtlNormalizeString (Ordinal: 760, Address: 0x2c7a0)
• RtlNtStatusToDosError (Ordinal: 761, Address: 0x2cec0)
• RtlNtStatusToDosErrorNoTeb (Ordinal: 762, Address: 0x2d030)
• RtlNumberGenericTableElements (Ordinal: 763, Address: 0x2d060)
• RtlNumberGenericTableElementsAvl (Ordinal: 764, Address: 0x2d0c0)
• RtlNumberOfClearBits (Ordinal: 765, Address: 0x2d110)
• RtlNumberOfSetBits (Ordinal: 766, Address: 0x2d180)
• RtlOemStringToUnicodeSize (Ordinal: 767, Address: 0x2d250)
• RtlOemStringToUnicodeString (Ordinal: 768, Address: 0x2d470)
• RtlOemToUnicodeN (Ordinal: 769, Address: 0x2d560)
• RtlOpenCurrentUser (Ordinal: 770, Address: 0x2d680)
• RtlPcToFileHeader (Ordinal: 771, Address: 0x2d770)
• RtlPinAtomInAtomTable (Ordinal: 772, Address: 0x2d7f0)
• RtlPopFrame (Ordinal: 773, Address: 0x2d880)
• RtlPrefixString (Ordinal: 774, Address: 0x2d8a0)
• RtlPrefixUnicodeString (Ordinal: 775, Address: 0x2d980)
• RtlProcessFlsData (Ordinal: 776, Address: 0x2dab0)
• RtlPropertySetNameToGuid (Ordinal: 777, Address: 0x17e0)
• RtlProtectHeap (Ordinal: 778, Address: 0x1800)
• RtlPushFrame (Ordinal: 779, Address: 0x2dd00)
• RtlQueryActivationContextApplicationSettings (Ordinal: 780, Address: 0x2dd20)
• RtlQueryAtomInAtomTable (Ordinal: 781, Address: 0x2df60)
• RtlQueryDepthSList (Ordinal: 782, Address: 0x2e390)
• RtlQueryDynamicTimeZoneInformation (Ordinal: 783, Address: 0x2e3a0)
• RtlQueryEnvironmentVariable_U (Ordinal: 784, Address: 0x2e4e0)
• RtlQueryEnvironmentVariable (Ordinal: 785, Address: 0x2e3d0)
• RtlQueryHeapInformation (Ordinal: 786, Address: 0x2e670)
• RtlQueryInformationAcl (Ordinal: 787, Address: 0x2e770)
• RtlQueryInformationActivationContext (Ordinal: 788, Address: 0x2e920)
• RtlQueryInformationActiveActivationContext (Ordinal: 789, Address: 0x2f5c0)
• RtlQueryInterfaceMemoryStream (Ordinal: 790, Address: 0x1820)
• RtlQueryPackageIdentity (Ordinal: 791, Address: 0x2f610)
• RtlQueryPerformanceCounter (Ordinal: 792, Address: 0x2f6a0)
• RtlQueryPerformanceFrequency (Ordinal: 793, Address: 0x2f6e0)
• RtlQueryProcessBackTraceInformation (Ordinal: 794, Address: 0x1840)
• RtlQueryProcessDebugInformation (Ordinal: 795, Address: 0x2f700)
• RtlQueryProcessHeapInformation (Ordinal: 796, Address: 0x2ffa0)
• RtlQueryProcessLockInformation (Ordinal: 797, Address: 0x1860)
• RtlQueryProcessPlaceholderCompatibilityMode (Ordinal: 798, Address: 0x30000)
• RtlQueryProperties (Ordinal: 799, Address: 0x1880)
• RtlQueryPropertyNames (Ordinal: 800, Address: 0x18a0)
• RtlQueryPropertySet (Ordinal: 801, Address: 0x18c0)
• RtlQueryRegistryValues (Ordinal: 802, Address: 0x30040)
• RtlQueryRegistryValuesEx (Ordinal: 803, Address: 0x30040)
• RtlQuerySecurityObject (Ordinal: 804, Address: 0x18e0)
• RtlQueryTagHeap (Ordinal: 805, Address: 0x1900)
• RtlQueryTimeZoneInformation (Ordinal: 806, Address: 0x30600)
• RtlQueryUnbiasedInterruptTime (Ordinal: 807, Address: 0x30630)
• RtlQueueApcWow64Thread (Ordinal: 808, Address: 0x1920)
• RtlQueueWorkItem (Ordinal: 809, Address: 0x30690)
• RtlRaiseException (Ordinal: 810, Address: 0xe1f0)
• RtlRaiseStatus (Ordinal: 811, Address: 0x307c0)
• RtlRandom (Ordinal: 812, Address: 0x307e0)
• RtlRandomEx (Ordinal: 813, Address: 0x30870)
• RtlRbInsertNodeEx (Ordinal: 814, Address: 0x30930)
• RtlRbRemoveNode (Ordinal: 815, Address: 0x30ba0)
• RtlReAllocateHeap (Ordinal: 816, Address: 0x30eb0)
• RtlReadMemoryStream (Ordinal: 817, Address: 0x1940)
• RtlReadOutOfProcessMemoryStream (Ordinal: 818, Address: 0x1960)
• RtlRealPredecessor (Ordinal: 819, Address: 0x31af0)
• RtlRealSuccessor (Ordinal: 820, Address: 0x31b70)
• RtlRegisterSecureMemoryCacheCallback (Ordinal: 821, Address: 0x1980)
• RtlRegisterWait (Ordinal: 822, Address: 0x31bf0)
• RtlReleaseActivationContext (Ordinal: 823, Address: 0x31d60)
• RtlReleaseMemoryStream (Ordinal: 824, Address: 0x19a0)
• RtlReleasePath (Ordinal: 825, Address: 0x31d90)
• RtlReleasePebLock (Ordinal: 826, Address: 0x31dc0)
• RtlReleaseRelativeName (Ordinal: 827, Address: 0x31de0)
• RtlReleaseResource (Ordinal: 828, Address: 0x31df0)
• RtlReleaseSRWLockExclusive (Ordinal: 829, Address: 0x31eb0)
• RtlReleaseSRWLockShared (Ordinal: 830, Address: 0x31f40)
• RtlRemoteCall (Ordinal: 831, Address: 0x19c0)
• RtlRemoveVectoredContinueHandler (Ordinal: 832, Address: 0x32020)
• RtlRemoveVectoredExceptionHandler (Ordinal: 833, Address: 0x32040)
• RtlResetNtUserPfn (Ordinal: 834, Address: 0x32060)
• RtlResetRtlTranslations (Ordinal: 835, Address: 0x320a0)
• RtlRestoreContext (Ordinal: 836, Address: 0x320e0)
• RtlRestoreLastWin32Error (Ordinal: 837, Address: 0x337f0)
• RtlRetrieveNtUserPfn (Ordinal: 838, Address: 0x32150)
• RtlRevertMemoryStream (Ordinal: 839, Address: 0x19e0)
• RtlRunDecodeUnicodeString (Ordinal: 840, Address: 0x1a00)
• RtlRunEncodeUnicodeString (Ordinal: 841, Address: 0x1a20)
• RtlRunOnceBeginInitialize (Ordinal: 842, Address: 0x32270)
• RtlRunOnceComplete (Ordinal: 843, Address: 0x322d0)
• RtlRunOnceExecuteOnce (Ordinal: 844, Address: 0x323a0)
• RtlRunOnceInitialize (Ordinal: 845, Address: 0x32440)
• RtlSecondsSince1970ToTime (Ordinal: 846, Address: 0x32450)
• RtlSecondsSince1980ToTime (Ordinal: 847, Address: 0x32480)
• RtlSelfRelativeToAbsoluteSD (Ordinal: 848, Address: 0x324b0)
• RtlSetAllBits (Ordinal: 849, Address: 0x32910)
• RtlSetBits (Ordinal: 850, Address: 0x32980)
• RtlSetControlSecurityDescriptor (Ordinal: 851, Address: 0x32ac0)
• RtlSetCriticalSectionSpinCount (Ordinal: 852, Address: 0x32b50)
• RtlSetCurrentDirectory_U (Ordinal: 853, Address: 0x32b80)
• RtlSetCurrentEnvironment (Ordinal: 854, Address: 0x32e20)
• RtlSetCurrentTransaction (Ordinal: 855, Address: 0x32f20)
• RtlSetDaclSecurityDescriptor (Ordinal: 856, Address: 0x32f70)
• RtlSetEnvironmentVariable (Ordinal: 857, Address: 0x32fe0)
• RtlSetExtendedFeaturesMask (Ordinal: 858, Address: 0x334c0)
• RtlSetGroupSecurityDescriptor (Ordinal: 859, Address: 0x33500)
• RtlSetHeapInformation (Ordinal: 860, Address: 0x33550)
• RtlSetInformationAcl (Ordinal: 861, Address: 0x1a40)
• RtlSetIoCompletionCallback (Ordinal: 862, Address: 0x336a0)
• RtlSetLastWin32Error (Ordinal: 863, Address: 0x337f0)
• RtlSetLastWin32ErrorAndNtStatusFromNtStatus (Ordinal: 864, Address: 0x33810)
• RtlSetOwnerSecurityDescriptor (Ordinal: 865, Address: 0x33850)
• RtlSetProcessPreferredUILanguages (Ordinal: 866, Address: 0x338a0)
• RtlSetProperties (Ordinal: 867, Address: 0x1a60)
• RtlSetPropertyClassId (Ordinal: 868, Address: 0x1a80)
• RtlSetPropertyNames (Ordinal: 869, Address: 0x1aa0)
• RtlSetPropertySetClassId (Ordinal: 870, Address: 0x1ac0)
• RtlSetSaclSecurityDescriptor (Ordinal: 871, Address: 0x33900)
• RtlSetSearchPathMode (Ordinal: 872, Address: 0x33970)
• RtlSetSecurityObject (Ordinal: 873, Address: 0x1ae0)
• RtlSetThreadErrorMode (Ordinal: 874, Address: 0x339e0)
• RtlSetThreadPreferredUILanguages (Ordinal: 875, Address: 0x33a30)
• RtlSetTimeZoneInformation (Ordinal: 876, Address: 0x33a90)
• RtlSetUnhandledExceptionFilter (Ordinal: 877, Address: 0x33aa0)
• RtlSetUnicodeCallouts (Ordinal: 878, Address: 0x1b00)
• RtlSetUserFlagsHeap (Ordinal: 879, Address: 0x33ab0)
• RtlSetUserValueHeap (Ordinal: 880, Address: 0x33bc0)
• RtlSizeHeap (Ordinal: 881, Address: 0x33ce0)
• RtlSleepConditionVariableCS (Ordinal: 882, Address: 0x33e90)
• RtlSleepConditionVariableSRW (Ordinal: 883, Address: 0x33ef0)
• RtlSplay (Ordinal: 884, Address: 0x33fa0)
• RtlStartRXact (Ordinal: 885, Address: 0x1b20)
• RtlStringFromGUID (Ordinal: 886, Address: 0x34080)
• RtlSubAuthorityCountSid (Ordinal: 887, Address: 0x341a0)
• RtlSubAuthoritySid (Ordinal: 888, Address: 0x341b0)
• RtlSubtreePredecessor (Ordinal: 889, Address: 0x341d0)
• RtlSubtreeSuccessor (Ordinal: 890, Address: 0x34240)
• RtlSystemTimeToLocalTime (Ordinal: 891, Address: 0x342b0)
• RtlTimeFieldsToTime (Ordinal: 892, Address: 0x34350)
• RtlTimeToElapsedTimeFields (Ordinal: 893, Address: 0x34530)
• RtlTimeToSecondsSince1970 (Ordinal: 894, Address: 0x34620)
• RtlTimeToSecondsSince1980 (Ordinal: 895, Address: 0x34680)
• RtlTimeToTimeFields (Ordinal: 896, Address: 0x346e0)
• RtlTryAcquireSRWLockExclusive (Ordinal: 897, Address: 0x348a0)
• RtlTryAcquireSRWLockShared (Ordinal: 898, Address: 0x348f0)
• RtlTryEnterCriticalSection (Ordinal: 899, Address: 0x34930)
• RtlUTF8ToUnicodeN (Ordinal: 900, Address: 0x349a0)
• RtlUlongByteSwap (Ordinal: 901, Address: 0xd074)
• RtlUlonglongByteSwap (Ordinal: 902, Address: 0xd064)
• RtlUnicodeStringToAnsiSize (Ordinal: 903, Address: 0x34bf0)
• RtlUnicodeStringToAnsiString (Ordinal: 904, Address: 0x34c20)
• RtlUnicodeStringToCountedOemString (Ordinal: 905, Address: 0x1b40)
• RtlUnicodeStringToInteger (Ordinal: 906, Address: 0x34d10)
• RtlUnicodeStringToOemSize (Ordinal: 907, Address: 0x34ef0)
• RtlUnicodeStringToOemString (Ordinal: 908, Address: 0x35000)
• RtlUnicodeToCustomCPN (Ordinal: 909, Address: 0x350e0)
• RtlUnicodeToMultiByteN (Ordinal: 910, Address: 0x351e0)
• RtlUnicodeToMultiByteSize (Ordinal: 911, Address: 0x35310)
• RtlUnicodeToOemN (Ordinal: 912, Address: 0x35410)
• RtlUnicodeToUTF8N (Ordinal: 913, Address: 0x35540)
• RtlUniform (Ordinal: 914, Address: 0x35680)
• RtlUnlockHeap (Ordinal: 915, Address: 0x356c0)
• RtlUnwind (Ordinal: 916, Address: 0xe1b8)
• RtlUpcaseUnicodeChar (Ordinal: 917, Address: 0x35710)
• RtlUpcaseUnicodeString (Ordinal: 918, Address: 0x35750)
• RtlUpcaseUnicodeStringToAnsiString (Ordinal: 919, Address: 0x35830)
• RtlUpcaseUnicodeStringToCountedOemString (Ordinal: 920, Address: 0x35920)
• RtlUpcaseUnicodeStringToOemString (Ordinal: 921, Address: 0x35a00)
• RtlUpcaseUnicodeToCustomCPN (Ordinal: 922, Address: 0x35af0)
• RtlUpcaseUnicodeToMultiByteN (Ordinal: 923, Address: 0x35c60)
• RtlUpcaseUnicodeToOemN (Ordinal: 924, Address: 0x35cd0)
• RtlUpdateTimer (Ordinal: 925, Address: 0x35d40)
• RtlUpperChar (Ordinal: 926, Address: 0x35e30)
• RtlUpperString (Ordinal: 927, Address: 0x35e50)
• RtlUsageHeap (Ordinal: 928, Address: 0x1b60)
• RtlUserThreadStart (Ordinal: 929, Address: 0xe220)
• RtlUshortByteSwap (Ordinal: 930, Address: 0xd07c)
• RtlValidAcl (Ordinal: 931, Address: 0x35ed0)
• RtlValidRelativeSecurityDescriptor (Ordinal: 932, Address: 0x36000)
• RtlValidSecurityDescriptor (Ordinal: 933, Address: 0x36070)
• RtlValidSid (Ordinal: 934, Address: 0x36090)
• RtlValidateHeap (Ordinal: 935, Address: 0x36130)
• RtlValidateProcessHeaps (Ordinal: 936, Address: 0x1b80)
• RtlVerifyVersionInfo (Ordinal: 937, Address: 0x36270)
• RtlWaitOnAddress (Ordinal: 938, Address: 0x36c80)
• RtlWakeAddressAll (Ordinal: 939, Address: 0x36f40)
• RtlWakeAddressSingle (Ordinal: 940, Address: 0x37140)
• RtlWakeAllConditionVariable (Ordinal: 941, Address: 0x37250)
• RtlWakeConditionVariable (Ordinal: 942, Address: 0x37270)
• RtlWalkFrameChain (Ordinal: 943, Address: 0x37290)
• RtlWalkHeap (Ordinal: 944, Address: 0x37350)
• RtlWow64EnableFsRedirection (Ordinal: 945, Address: 0x37880)
• RtlWow64EnableFsRedirectionEx (Ordinal: 946, Address: 0x378d0)
• RtlWow64GetCurrentMachine (Ordinal: 947, Address: 0x37980)
• RtlWow64GetProcessMachines (Ordinal: 948, Address: 0x37990)
• RtlWow64GetSharedInfoProcess (Ordinal: 949, Address: 0x37a50)
• RtlWow64IsWowGuestMachineSupported (Ordinal: 950, Address: 0x37ad0)
• RtlWriteMemoryStream (Ordinal: 951, Address: 0x1ba0)
• RtlWriteRegistryValue (Ordinal: 952, Address: 0x37b60)
• RtlZeroHeap (Ordinal: 953, Address: 0x1bc0)
• RtlZeroMemory (Ordinal: 954, Address: 0x37ce0)
• RtlZombifyActivationContext (Ordinal: 955, Address: 0x37d10)
• RtlpNtCreateKey (Ordinal: 956, Address: 0x37d70)
• RtlpNtEnumerateSubKey (Ordinal: 957, Address: 0x37df0)
• RtlpNtMakeTemporaryKey (Ordinal: 958, Address: 0x37f00)
• RtlpNtOpenKey (Ordinal: 959, Address: 0x37f10)
• RtlpNtQueryValueKey (Ordinal: 960, Address: 0x37f40)
• RtlpNtSetValueKey (Ordinal: 961, Address: 0x38040)
• RtlpUnWaitCriticalSection (Ordinal: 962, Address: 0x38090)
• RtlpWaitForCriticalSection (Ordinal: 963, Address: 0x38100)
• RtlxAnsiStringToUnicodeSize (Ordinal: 964, Address: 0x195b0)
• RtlxOemStringToUnicodeSize (Ordinal: 965, Address: 0x2d250)
• RtlxUnicodeStringToAnsiSize (Ordinal: 966, Address: 0x34bf0)
• RtlxUnicodeStringToOemSize (Ordinal: 967, Address: 0x34ef0)
• TpAllocCleanupGroup (Ordinal: 968, Address: 0x38b80)
• TpAllocIoCompletion (Ordinal: 969, Address: 0x38ca0)
• TpAllocPool (Ordinal: 970, Address: 0x39070)
• TpAllocTimer (Ordinal: 971, Address: 0x39120)
• TpAllocWait (Ordinal: 972, Address: 0x393b0)
• TpAllocWork (Ordinal: 973, Address: 0x39430)
• TpCallbackLeaveCriticalSectionOnCompletion (Ordinal: 974, Address: 0x39540)
• TpCallbackMayRunLong (Ordinal: 975, Address: 0x395b0)
• TpCallbackReleaseMutexOnCompletion (Ordinal: 976, Address: 0x396c0)
• TpCallbackReleaseSemaphoreOnCompletion (Ordinal: 977, Address: 0x39730)
• TpCallbackSetEventOnCompletion (Ordinal: 978, Address: 0x397b0)
• TpCallbackUnloadDllOnCompletion (Ordinal: 979, Address: 0x39820)
• TpCancelAsyncIoOperation (Ordinal: 980, Address: 0x39890)
• TpDisassociateCallback (Ordinal: 981, Address: 0x399c0)
• TpIsTimerSet (Ordinal: 982, Address: 0x39ad0)
• TpPostWork (Ordinal: 983, Address: 0x39b30)
• TpQueryPoolStackInformation (Ordinal: 984, Address: 0x39ba0)
• TpReleaseCleanupGroup (Ordinal: 985, Address: 0x39c30)
• TpReleaseCleanupGroupMembers (Ordinal: 986, Address: 0x39c90)
• TpReleaseIoCompletion (Ordinal: 987, Address: 0x39f90)
• TpReleasePool (Ordinal: 988, Address: 0x3a060)
• TpReleaseTimer (Ordinal: 989, Address: 0x3a0f0)
• TpReleaseWait (Ordinal: 990, Address: 0x3a160)
• TpReleaseWork (Ordinal: 991, Address: 0x3a1d0)
• TpSetPoolMaxThreads (Ordinal: 992, Address: 0x3a240)
• TpSetPoolMinThreads (Ordinal: 993, Address: 0x3a2e0)
• TpSetPoolStackInformation (Ordinal: 994, Address: 0x3a3b0)
• TpSetTimer (Ordinal: 995, Address: 0x3a440)
• TpSetWait (Ordinal: 996, Address: 0x3a740)
• TpSimpleTryPost (Ordinal: 997, Address: 0x3a9c0)
• TpStartAsyncIoOperation (Ordinal: 998, Address: 0x3aac0)
• TpWaitForIoCompletion (Ordinal: 999, Address: 0x3ab30)
• TpWaitForTimer (Ordinal: 1000, Address: 0x3abb0)
• TpWaitForWait (Ordinal: 1001, Address: 0x3ac30)
• TpWaitForWork (Ordinal: 1002, Address: 0x3acb0)
• VerSetConditionMask (Ordinal: 1003, Address: 0x3ad30)
• WinSqmEndSession (Ordinal: 1004, Address: 0x3ade0)
• WinSqmIncrementDWORD (Ordinal: 1005, Address: 0x3ae40)
• WinSqmIsOptedIn (Ordinal: 1006, Address: 0x3aea0)
• WinSqmSetDWORD (Ordinal: 1007, Address: 0x3aee0)
• WinSqmSetIfMaxDWORD (Ordinal: 1008, Address: 0x3af40)
• WinSqmStartSession (Ordinal: 1009, Address: 0x3afa0)
• Wow64Transition (Ordinal: 1010, Address: 0x95020)
• ZwAcceptConnectPort (Ordinal: 1011, Address: 0xd0a4)
• ZwAccessCheck (Ordinal: 1012, Address: 0xd084)
• ZwAccessCheckAndAuditAlarm (Ordinal: 1013, Address: 0xd314)
• ZwAccessCheckByTypeAndAuditAlarm (Ordinal: 1014, Address: 0xd614)
• ZwAddAtom (Ordinal: 1015, Address: 0xd4f4)
• ZwAdjustGroupsToken (Ordinal: 1016, Address: 0xd6b4)
• ZwAdjustPrivilegesToken (Ordinal: 1017, Address: 0xd494)
• ZwAlertMultipleThreadByThreadId (Ordinal: 1018, Address: 0xd6c4)
• ZwAlertResumeThread (Ordinal: 1019, Address: 0xd6d4)
• ZwAlertThread (Ordinal: 1020, Address: 0xd6e4)
• ZwAlertThreadByThreadId (Ordinal: 1021, Address: 0xd6f4)
• ZwAllocateLocallyUniqueId (Ordinal: 1022, Address: 0xd704)
• ZwAllocateReserveObject (Ordinal: 1023, Address: 0xd714)
• ZwAllocateUuids (Ordinal: 1024, Address: 0xd724)
• ZwAllocateVirtualMemory (Ordinal: 1025, Address: 0xd204)
• ZwAllocateVirtualMemoryEx (Ordinal: 1026, Address: 0xd734)
• ZwApphelpCacheControl (Ordinal: 1027, Address: 0xd544)
• ZwAreMappedFilesTheSame (Ordinal: 1028, Address: 0xd744)
• ZwAssignProcessToJobObject (Ordinal: 1029, Address: 0xd754)
• ZwCallbackReturn (Ordinal: 1030, Address: 0xd0d4)
• ZwCancelIoFile (Ordinal: 1031, Address: 0xd654)
• ZwCancelIoFileEx (Ordinal: 1032, Address: 0xd764)
• ZwCancelSynchronousIoFile (Ordinal: 1033, Address: 0xd774)
• ZwCancelTimer (Ordinal: 1034, Address: 0xd694)
• ZwClearEvent (Ordinal: 1035, Address: 0xd464)
• ZwClose (Ordinal: 1036, Address: 0xd174)
• ZwCloseObjectAuditAlarm (Ordinal: 1037, Address: 0xd434)
• ZwCommitTransaction (Ordinal: 1038, Address: 0xd784)
• ZwCompareObjects (Ordinal: 1039, Address: 0xd794)
• ZwCompareTokens (Ordinal: 1040, Address: 0xd7a4)
• ZwCompleteConnectPort (Ordinal: 1041, Address: 0xd7b4)
• ZwConnectPort (Ordinal: 1042, Address: 0xd7c4)
• ZwContinue (Ordinal: 1043, Address: 0xd4b4)
• ZwContinueEx (Ordinal: 1044, Address: 0xd7d4)
• ZwConvertBetweenAuxiliaryCounterAndPerformanceCounter (Ordinal: 1045, Address: 0xd7e4)
• ZwCreateDebugObject (Ordinal: 1046, Address: 0xdae4)
• ZwCreateDirectoryObject (Ordinal: 1047, Address: 0xd7f4)
• ZwCreateEvent (Ordinal: 1048, Address: 0xd504)
• ZwCreateFile (Ordinal: 1049, Address: 0xd5d4)
• ZwCreateIoCompletion (Ordinal: 1050, Address: 0xd804)
• ZwCreateJobObject (Ordinal: 1051, Address: 0xd814)
• ZwCreateKey (Ordinal: 1052, Address: 0xd254)
• ZwCreateKeyTransacted (Ordinal: 1053, Address: 0xd824)
• ZwCreateKeyedEvent (Ordinal: 1054, Address: 0xd834)
• ZwCreateLowBoxToken (Ordinal: 1055, Address: 0xd844)
• ZwCreateMailslotFile (Ordinal: 1056, Address: 0xd854)
• ZwCreateMutant (Ordinal: 1057, Address: 0xd864)
• ZwCreateNamedPipeFile (Ordinal: 1058, Address: 0xd874)
• ZwCreatePagingFile (Ordinal: 1059, Address: 0xd884)
• ZwCreatePort (Ordinal: 1060, Address: 0xd894)
• ZwCreateProcessEx (Ordinal: 1061, Address: 0xd554)
• ZwCreateSection (Ordinal: 1062, Address: 0xd524)
• ZwCreateSectionEx (Ordinal: 1063, Address: 0xd8a4)
• ZwCreateSemaphore (Ordinal: 1064, Address: 0xd8b4)
• ZwCreateSymbolicLinkObject (Ordinal: 1065, Address: 0xd8c4)
• ZwCreateThread (Ordinal: 1066, Address: 0xd564)
• ZwCreateThreadEx (Ordinal: 1067, Address: 0xd8d4)
• ZwCreateTimer (Ordinal: 1068, Address: 0xd8e4)
• ZwCreateToken (Ordinal: 1069, Address: 0xd8f4)
• ZwCreateTransaction (Ordinal: 1070, Address: 0xd904)
• ZwCreateUserProcess (Ordinal: 1071, Address: 0xd914)
• ZwDebugActiveProcess (Ordinal: 1072, Address: 0xd924)
• ZwDebugContinue (Ordinal: 1073, Address: 0xd934)
• ZwDelayExecution (Ordinal: 1074, Address: 0xd3c4)
• ZwDeleteAtom (Ordinal: 1075, Address: 0xd944)
• ZwDeleteFile (Ordinal: 1076, Address: 0xd954)
• ZwDeleteKey (Ordinal: 1077, Address: 0xd964)
• ZwDeleteValueKey (Ordinal: 1078, Address: 0xd974)
• ZwDeviceIoControlFile (Ordinal: 1079, Address: 0xd0f4)
• ZwDisplayString (Ordinal: 1080, Address: 0xd984)
• ZwDuplicateObject (Ordinal: 1081, Address: 0xd444)
• ZwDuplicateToken (Ordinal: 1082, Address: 0xd4a4)
• ZwEnumerateKey (Ordinal: 1083, Address: 0xd3a4)
• ZwEnumerateValueKey (Ordinal: 1084, Address: 0xd1b4)
• ZwFilterToken (Ordinal: 1085, Address: 0xd994)
• ZwFindAtom (Ordinal: 1086, Address: 0xd1c4)
• ZwFlushBuffersFile (Ordinal: 1087, Address: 0xd534)
• ZwFlushBuffersFileEx (Ordinal: 1088, Address: 0xd9a4)
• ZwFlushInstructionCache (Ordinal: 1089, Address: 0xd9b4)
• ZwFlushKey (Ordinal: 1090, Address: 0xd9c4)
• ZwFlushProcessWriteBuffers (Ordinal: 1091, Address: 0xd9d4)
• ZwFlushVirtualMemory (Ordinal: 1092, Address: 0xd9e4)
• ZwFreeVirtualMemory (Ordinal: 1093, Address: 0xd264)
• ZwFsControlFile (Ordinal: 1094, Address: 0xd414)
• ZwGetContextThread (Ordinal: 1095, Address: 0xd9f4)
• ZwGetCurrentProcessorNumber (Ordinal: 1096, Address: 0xda04)
• ZwGetNextProcess (Ordinal: 1097, Address: 0xda14)
• ZwGetNextThread (Ordinal: 1098, Address: 0xda24)
• ZwGetNlsSectionPtr (Ordinal: 1099, Address: 0xda34)
• ZwGetWriteWatch (Ordinal: 1100, Address: 0xda44)
• ZwImpersonateAnonymousToken (Ordinal: 1101, Address: 0xda54)
• ZwImpersonateClientOfPort (Ordinal: 1102, Address: 0xd274)
• ZwInitializeNlsFiles (Ordinal: 1103, Address: 0xda64)
• ZwInitiatePowerAction (Ordinal: 1104, Address: 0xda74)
• ZwIsProcessInJob (Ordinal: 1105, Address: 0xd574)
• ZwListenPort (Ordinal: 1106, Address: 0xda84)
• ZwLoadDriver (Ordinal: 1107, Address: 0xda94)
• ZwLoadKey2 (Ordinal: 1108, Address: 0xdab4)
• ZwLoadKey (Ordinal: 1109, Address: 0xdaa4)
• ZwLoadKeyEx (Ordinal: 1110, Address: 0xdac4)
• ZwLockFile (Ordinal: 1111, Address: 0xdad4)
• ZwLockVirtualMemory (Ordinal: 1112, Address: 0xdaf4)
• ZwMakePermanentObject (Ordinal: 1113, Address: 0xdb04)
• ZwMakeTemporaryObject (Ordinal: 1114, Address: 0xdb14)
• ZwMapUserPhysicalPagesScatter (Ordinal: 1115, Address: 0xd0b4)
• ZwMapViewOfSection (Ordinal: 1116, Address: 0xd304)
• ZwMapViewOfSectionEx (Ordinal: 1117, Address: 0xdb24)
• ZwNotifyChangeDirectoryFile (Ordinal: 1118, Address: 0xdb34)
• ZwNotifyChangeKey (Ordinal: 1119, Address: 0xdb44)
• ZwNotifyChangeMultipleKeys (Ordinal: 1120, Address: 0xdb54)
• ZwOpenDirectoryObject (Ordinal: 1121, Address: 0xd604)
• ZwOpenEvent (Ordinal: 1122, Address: 0xd484)
• ZwOpenFile (Ordinal: 1123, Address: 0xd3b4)
• ZwOpenIoCompletion (Ordinal: 1124, Address: 0xdb64)
• ZwOpenJobObject (Ordinal: 1125, Address: 0xdb74)
• ZwOpenKey (Ordinal: 1126, Address: 0xd1a4)
• ZwOpenKeyEx (Ordinal: 1127, Address: 0xdb84)
• ZwOpenKeyTransacted (Ordinal: 1128, Address: 0xdb94)
• ZwOpenKeyTransactedEx (Ordinal: 1129, Address: 0xdba4)
• ZwOpenKeyedEvent (Ordinal: 1130, Address: 0xdbb4)
• ZwOpenMutant (Ordinal: 1131, Address: 0xdbc4)
• ZwOpenProcess (Ordinal: 1132, Address: 0xd2e4)
• ZwOpenProcessToken (Ordinal: 1133, Address: 0xdbd4)
• ZwOpenProcessTokenEx (Ordinal: 1134, Address: 0xd384)
• ZwOpenSection (Ordinal: 1135, Address: 0xd3f4)
• ZwOpenSemaphore (Ordinal: 1136, Address: 0xdbe4)
• ZwOpenSymbolicLinkObject (Ordinal: 1137, Address: 0xdbf4)
• ZwOpenThread (Ordinal: 1138, Address: 0xdc04)
• ZwOpenThreadToken (Ordinal: 1139, Address: 0xd2c4)
• ZwOpenThreadTokenEx (Ordinal: 1140, Address: 0xd374)
• ZwOpenTimer (Ordinal: 1141, Address: 0xdc14)
• ZwPowerInformation (Ordinal: 1142, Address: 0xd674)
• ZwPrivilegeCheck (Ordinal: 1143, Address: 0xdc24)
• ZwProtectVirtualMemory (Ordinal: 1144, Address: 0xd584)
• ZwPulseEvent (Ordinal: 1145, Address: 0xdc34)
• ZwQueryAttributesFile (Ordinal: 1146, Address: 0xd454)
• ZwQueryDefaultLocale (Ordinal: 1147, Address: 0xd1d4)
• ZwQueryDefaultUILanguage (Ordinal: 1148, Address: 0xd4c4)
• ZwQueryDirectoryFile (Ordinal: 1149, Address: 0xd3d4)
• ZwQueryDirectoryObject (Ordinal: 1150, Address: 0xdc44)
• ZwQueryEaFile (Ordinal: 1151, Address: 0xdc54)
• ZwQueryEvent (Ordinal: 1152, Address: 0xd5e4)
• ZwQueryFullAttributesFile (Ordinal: 1153, Address: 0xdc64)
• ZwQueryInformationAtom (Ordinal: 1154, Address: 0xdc74)
• ZwQueryInformationFile (Ordinal: 1155, Address: 0xd194)
• ZwQueryInformationJobObject (Ordinal: 1156, Address: 0xdc84)
• ZwQueryInformationProcess (Ordinal: 1157, Address: 0xd214)
• ZwQueryInformationThread (Ordinal: 1158, Address: 0xd2d4)
• ZwQueryInformationToken (Ordinal: 1159, Address: 0xd294)
• ZwQueryInstallUILanguage (Ordinal: 1160, Address: 0xdc94)
• ZwQueryIoCompletion (Ordinal: 1161, Address: 0xdca4)
• ZwQueryKey (Ordinal: 1162, Address: 0xd1e4)
• ZwQueryLicenseValue (Ordinal: 1163, Address: 0xdcb4)
• ZwQueryMultipleValueKey (Ordinal: 1164, Address: 0xdcc4)
• ZwQueryMutant (Ordinal: 1165, Address: 0xdcd4)
• ZwQueryObject (Ordinal: 1166, Address: 0xd184)
• ZwQueryPerformanceCounter (Ordinal: 1167, Address: 0xd394)
• ZwQuerySection (Ordinal: 1168, Address: 0xd594)
• ZwQuerySecurityObject (Ordinal: 1169, Address: 0xdce4)
• ZwQuerySemaphore (Ordinal: 1170, Address: 0xdcf4)
• ZwQuerySymbolicLinkObject (Ordinal: 1171, Address: 0xdd04)
• ZwQuerySystemEnvironmentValue (Ordinal: 1172, Address: 0xdd14)
• ZwQuerySystemEnvironmentValueEx (Ordinal: 1173, Address: 0xdd24)
• ZwQuerySystemInformation (Ordinal: 1174, Address: 0xd3e4)
• ZwQuerySystemInformationEx (Ordinal: 1175, Address: 0xdd34)
• ZwQuerySystemTime (Ordinal: 1176, Address: 0xd624)
• ZwQueryTimer (Ordinal: 1177, Address: 0xd404)
• ZwQueryTimerResolution (Ordinal: 1178, Address: 0xdd44)
• ZwQueryValueKey (Ordinal: 1179, Address: 0xd1f4)
• ZwQueryVirtualMemory (Ordinal: 1180, Address: 0xd2b4)
• ZwQueryVolumeInformationFile (Ordinal: 1181, Address: 0xd514)
• ZwQueueApcThread (Ordinal: 1182, Address: 0xd4d4)
• ZwQueueApcThreadEx (Ordinal: 1183, Address: 0xdd54)
• ZwQueueApcThreadEx2 (Ordinal: 1184, Address: 0xdd64)
• ZwRaiseException (Ordinal: 1185, Address: 0xdd74)
• ZwRaiseHardError (Ordinal: 1186, Address: 0xdd84)
• ZwReadFile (Ordinal: 1187, Address: 0xd0e4)
• ZwReadFileScatter (Ordinal: 1188, Address: 0xd364)
• ZwReadRequestData (Ordinal: 1189, Address: 0xd5c4)
• ZwReadVirtualMemory (Ordinal: 1190, Address: 0xd474)
• ZwRegisterThreadTerminatePort (Ordinal: 1191, Address: 0xdd94)
• ZwReleaseKeyedEvent (Ordinal: 1192, Address: 0xdda4)
• ZwReleaseMutant (Ordinal: 1193, Address: 0xd284)
• ZwReleaseSemaphore (Ordinal: 1194, Address: 0xd124)
• ZwRemoveIoCompletion (Ordinal: 1195, Address: 0xd114)
• ZwRemoveIoCompletionEx (Ordinal: 1196, Address: 0xddb4)
• ZwRemoveProcessDebug (Ordinal: 1197, Address: 0xddc4)
• ZwRenameKey (Ordinal: 1198, Address: 0xddd4)
• ZwReplaceKey (Ordinal: 1199, Address: 0xdde4)
• ZwReplyPort (Ordinal: 1200, Address: 0xd144)
• ZwReplyWaitReceivePort (Ordinal: 1201, Address: 0xd134)
• ZwReplyWaitReceivePortEx (Ordinal: 1202, Address: 0xd334)
• ZwRequestWaitReplyPort (Ordinal: 1203, Address: 0xd2a4)
• ZwResetEvent (Ordinal: 1204, Address: 0xddf4)
• ZwResetWriteWatch (Ordinal: 1205, Address: 0xde04)
• ZwRestoreKey (Ordinal: 1206, Address: 0xde14)
• ZwResumeProcess (Ordinal: 1207, Address: 0xde24)
• ZwResumeThread (Ordinal: 1208, Address: 0xd5a4)
• ZwRollbackTransaction (Ordinal: 1209, Address: 0xde34)
• ZwSaveKey (Ordinal: 1210, Address: 0xde44)
• ZwSecureConnectPort (Ordinal: 1211, Address: 0xde54)
• ZwSetContextThread (Ordinal: 1212, Address: 0xde64)
• ZwSetDebugFilterState (Ordinal: 1213, Address: 0xde74)
• ZwSetDefaultLocale (Ordinal: 1214, Address: 0xde84)
• ZwSetDefaultUILanguage (Ordinal: 1215, Address: 0xde94)
• ZwSetEaFile (Ordinal: 1216, Address: 0xdea4)
• ZwSetEvent (Ordinal: 1217, Address: 0xd164)
• ZwSetEventBoostPriority (Ordinal: 1218, Address: 0xd354)
• ZwSetInformationDebugObject (Ordinal: 1219, Address: 0xdeb4)
• ZwSetInformationFile (Ordinal: 1220, Address: 0xd2f4)
• ZwSetInformationJobObject (Ordinal: 1221, Address: 0xdec4)
• ZwSetInformationKey (Ordinal: 1222, Address: 0xded4)
• ZwSetInformationObject (Ordinal: 1223, Address: 0xd644)
• ZwSetInformationProcess (Ordinal: 1224, Address: 0xd244)
• ZwSetInformationThread (Ordinal: 1225, Address: 0xd154)
• ZwSetInformationToken (Ordinal: 1226, Address: 0xdee4)
• ZwSetInformationVirtualMemory (Ordinal: 1227, Address: 0xdef4)
• ZwSetIntervalProfile (Ordinal: 1228, Address: 0xdf04)
• ZwSetIoCompletion (Ordinal: 1229, Address: 0xdf14)
• ZwSetIoCompletionEx (Ordinal: 1230, Address: 0xdf24)
• ZwSetLdtEntries (Ordinal: 1231, Address: 0xdf34)
• ZwSetSecurityObject (Ordinal: 1232, Address: 0xdf44)
• ZwSetSystemInformation (Ordinal: 1233, Address: 0xdf54)
• ZwSetSystemTime (Ordinal: 1234, Address: 0xdf64)
• ZwSetThreadExecutionState (Ordinal: 1235, Address: 0xdf74)
• ZwSetTimer (Ordinal: 1236, Address: 0xd6a4)
• ZwSetTimerResolution (Ordinal: 1237, Address: 0xdf84)
• ZwSetValueKey (Ordinal: 1238, Address: 0xd684)
• ZwSetVolumeInformationFile (Ordinal: 1239, Address: 0xdf94)
• ZwShutdownSystem (Ordinal: 1240, Address: 0xdfa4)
• ZwSignalAndWaitForSingleObject (Ordinal: 1241, Address: 0xdfb4)
• ZwSuspendProcess (Ordinal: 1242, Address: 0xdfc4)
• ZwSuspendThread (Ordinal: 1243, Address: 0xdfd4)
• ZwSystemDebugControl (Ordinal: 1244, Address: 0xdfe4)
• ZwTerminateJobObject (Ordinal: 1245, Address: 0xdff4)
• ZwTerminateProcess (Ordinal: 1246, Address: 0xd344)
• ZwTerminateThread (Ordinal: 1247, Address: 0xd5b4)
• ZwTestAlert (Ordinal: 1248, Address: 0xe004)
• ZwTraceControl (Ordinal: 1249, Address: 0xe014)
• ZwTraceEvent (Ordinal: 1250, Address: 0xd664)
• ZwUnloadDriver (Ordinal: 1251, Address: 0xe024)
• ZwUnloadKey (Ordinal: 1252, Address: 0xe034)
• ZwUnlockFile (Ordinal: 1253, Address: 0xe044)
• ZwUnlockVirtualMemory (Ordinal: 1254, Address: 0xe054)
• ZwUnmapViewOfSection (Ordinal: 1255, Address: 0xd324)
• ZwUnmapViewOfSectionEx (Ordinal: 1256, Address: 0xe064)
• ZwWaitForAlertByThreadId (Ordinal: 1257, Address: 0xe074)
• ZwWaitForDebugEvent (Ordinal: 1258, Address: 0xe084)
• ZwWaitForKeyedEvent (Ordinal: 1259, Address: 0xe094)
• ZwWaitForMultipleObjects (Ordinal: 1260, Address: 0xd634)
• ZwWaitForMultipleObjects32 (Ordinal: 1261, Address: 0xd224)
• ZwWaitForSingleObject (Ordinal: 1262, Address: 0xd0c4)
• ZwWorkerFactoryWorkerReady (Ordinal: 1263, Address: 0xd094)
• ZwWow64AllocateVirtualMemory64 (Ordinal: 1264, Address: 0xe0a4)
• ZwWow64GetNativeSystemInformation (Ordinal: 1265, Address: 0xe0b4)
• ZwWow64IsProcessorFeaturePresent (Ordinal: 1266, Address: 0xe0c4)
• ZwWow64QueryInformationProcess64 (Ordinal: 1267, Address: 0xe0d4)
• ZwWow64ReadVirtualMemory64 (Ordinal: 1268, Address: 0xe0e4)
• ZwWow64WriteVirtualMemory64 (Ordinal: 1269, Address: 0xe0f4)
• ZwWriteFile (Ordinal: 1270, Address: 0xd104)
• ZwWriteFileGather (Ordinal: 1271, Address: 0xd234)
• ZwWriteRequestData (Ordinal: 1272, Address: 0xd5f4)
• ZwWriteVirtualMemory (Ordinal: 1273, Address: 0xd424)
• ZwYieldExecution (Ordinal: 1274, Address: 0xd4e4)
• _CIcos (Ordinal: 1275, Address: 0x3b000)
• _CIlog (Ordinal: 1276, Address: 0x3b020)
• _CIpow (Ordinal: 1277, Address: 0x3b040)
• _CIsin (Ordinal: 1278, Address: 0x3b080)
• _CIsqrt (Ordinal: 1279, Address: 0x3b0a0)
• __isascii (Ordinal: 1280, Address: 0x3b3b0)
• __iscsym (Ordinal: 1281, Address: 0x3b3c0)
• __iscsymf (Ordinal: 1282, Address: 0x3b3f0)
• __toascii (Ordinal: 1283, Address: 0x3d250)
• _alldiv (Ordinal: 1284, Address: 0x3b0e0)
• _alldvrm (Ordinal: 1285, Address: 0xcf30)
• _allmul (Ordinal: 1286, Address: 0x3b180)
• _alloca_probe (Ordinal: 1287, Address: 0xe2ac)
• _allrem (Ordinal: 1288, Address: 0x3b1f0)
• _allshl (Ordinal: 1289, Address: 0xcf0c)
• _allshr (Ordinal: 1290, Address: 0xcf18)
• _atoi64 (Ordinal: 1291, Address: 0x3d9c0)
• _aulldiv (Ordinal: 1292, Address: 0x3b280)
• _aulldvrm (Ordinal: 1293, Address: 0xcf60)
• _aullrem (Ordinal: 1294, Address: 0x3b2b0)
• _aullshr (Ordinal: 1295, Address: 0xcf24)
• _chkstk (Ordinal: 1296, Address: 0xe2a0)
• _errno (Ordinal: 1297, Address: 0x3db50)
• _fltused (Ordinal: 1298, Address: 0x1be0)
• _ftol (Ordinal: 1299, Address: 0x3db60)
• _ftol2 (Ordinal: 1300, Address: 0x3db60)
• _ftol2_sse (Ordinal: 1301, Address: 0x3db60)
• _i64toa (Ordinal: 1302, Address: 0x3db80)
• _i64toa_s (Ordinal: 1303, Address: 0x3dca0)
• _i64tow (Ordinal: 1304, Address: 0x3de10)
• _i64tow_s (Ordinal: 1305, Address: 0x3df40)
• _itoa (Ordinal: 1306, Address: 0x3e0c0)
• _itoa_s (Ordinal: 1307, Address: 0x3e0d0)
• _itow (Ordinal: 1308, Address: 0x3e140)
• _itow_s (Ordinal: 1309, Address: 0x3e150)
• _lfind (Ordinal: 1310, Address: 0x3e1c0)
• _ltoa (Ordinal: 1311, Address: 0x3e220)
• _ltoa_s (Ordinal: 1312, Address: 0x3e2c0)
• _ltow (Ordinal: 1313, Address: 0x3e330)
• _ltow_s (Ordinal: 1314, Address: 0x3e3e0)
• _makepath_s (Ordinal: 1315, Address: 0x3e450)
• _memccpy (Ordinal: 1316, Address: 0x3e610)
• _memicmp (Ordinal: 1317, Address: 0x3e650)
• _snprintf (Ordinal: 1318, Address: 0x16750)
• _snprintf_s (Ordinal: 1319, Address: 0x3e6b0)
• _snwprintf (Ordinal: 1320, Address: 0x3e710)
• _snwprintf_s (Ordinal: 1321, Address: 0x3e750)
• _splitpath (Ordinal: 1322, Address: 0x3e7c0)
• _splitpath_s (Ordinal: 1323, Address: 0x3e840)
• _strcmpi (Ordinal: 1324, Address: 0x3ebe0)
• _stricmp (Ordinal: 1325, Address: 0x3ebe0)
• _strlwr (Ordinal: 1326, Address: 0x3ec80)
• _strlwr_s (Ordinal: 1327, Address: 0x3ecb0)
• _strnicmp (Ordinal: 1328, Address: 0x3ed20)
• _strupr (Ordinal: 1329, Address: 0x3edf0)
• _strupr_s (Ordinal: 1330, Address: 0x3ee20)
• _swprintf (Ordinal: 1331, Address: 0x167d0)
• _tolower (Ordinal: 1332, Address: 0x3ee90)
• _toupper (Ordinal: 1333, Address: 0x3eea0)
• _ui64toa (Ordinal: 1334, Address: 0x3eeb0)
• _ui64toa_s (Ordinal: 1335, Address: 0x3ef80)
• _ui64tow (Ordinal: 1336, Address: 0x3f0a0)
• _ui64tow_s (Ordinal: 1337, Address: 0x3f180)
• _ultoa (Ordinal: 1338, Address: 0x3f2b0)
• _ultoa_s (Ordinal: 1339, Address: 0x3f310)
• _ultow (Ordinal: 1340, Address: 0x3f340)
• _ultow_s (Ordinal: 1341, Address: 0x3f3a0)
• _vscprintf (Ordinal: 1342, Address: 0x3f3d0)
• _vscwprintf (Ordinal: 1343, Address: 0x3f410)
• _vsnprintf (Ordinal: 1344, Address: 0x3f450)
• _vsnprintf_s (Ordinal: 1345, Address: 0x3f490)
• _vsnwprintf (Ordinal: 1346, Address: 0x3f4f0)
• _vsnwprintf_s (Ordinal: 1347, Address: 0x3f530)
• _vswprintf (Ordinal: 1348, Address: 0x3f5a0)
• _wcsicmp (Ordinal: 1349, Address: 0x3f5e0)
• _wcslwr (Ordinal: 1350, Address: 0x3f640)
• _wcslwr_s (Ordinal: 1351, Address: 0x3f680)
• _wcsnicmp (Ordinal: 1352, Address: 0x3f700)
• _wcstoi64 (Ordinal: 1353, Address: 0x3f770)
• _wcstoui64 (Ordinal: 1354, Address: 0x3fb30)
• _wcsupr (Ordinal: 1355, Address: 0x3fde0)
• _wcsupr_s (Ordinal: 1356, Address: 0x3fe20)
• _wmakepath_s (Ordinal: 1357, Address: 0x3fea0)
• _wsplitpath_s (Ordinal: 1358, Address: 0x400a0)
• _wtoi (Ordinal: 1359, Address: 0x40480)
• _wtoi64 (Ordinal: 1360, Address: 0x40490)
• _wtol (Ordinal: 1361, Address: 0x405b0)
• abs (Ordinal: 1362, Address: 0x40670)
• atan (Ordinal: 1363, Address: 0x42ac0)
• atan2 (Ordinal: 1364, Address: 0x42d80)
• atoi (Ordinal: 1365, Address: 0x43000)
• atol (Ordinal: 1366, Address: 0x43020)
• bsearch (Ordinal: 1367, Address: 0x43270)
• bsearch_s (Ordinal: 1368, Address: 0x432f0)
• ceil (Ordinal: 1369, Address: 0x44b50)
• cos (Ordinal: 1370, Address: 0x45260)
• fabs (Ordinal: 1371, Address: 0x46a40)
• floor (Ordinal: 1372, Address: 0x4b4f0)
• isalnum (Ordinal: 1373, Address: 0x51ba0)
• isalpha (Ordinal: 1374, Address: 0x51bc0)
• iscntrl (Ordinal: 1375, Address: 0x51be0)
• isdigit (Ordinal: 1376, Address: 0x51c00)
• isgraph (Ordinal: 1377, Address: 0x51c20)
• islower (Ordinal: 1378, Address: 0x51c40)
• isprint (Ordinal: 1379, Address: 0x51c60)
• ispunct (Ordinal: 1380, Address: 0x51c80)
• isspace (Ordinal: 1381, Address: 0x51ca0)
• isupper (Ordinal: 1382, Address: 0x51cc0)
• iswalnum (Ordinal: 1383, Address: 0x51ce0)
• iswalpha (Ordinal: 1384, Address: 0x51d10)
• iswascii (Ordinal: 1385, Address: 0x51d40)
• iswctype (Ordinal: 1386, Address: 0x51d50)
• iswdigit (Ordinal: 1387, Address: 0x51d80)
• iswgraph (Ordinal: 1388, Address: 0x51da0)
• iswlower (Ordinal: 1389, Address: 0x51dd0)
• iswprint (Ordinal: 1390, Address: 0x51df0)
• iswspace (Ordinal: 1391, Address: 0x51e20)
• iswxdigit (Ordinal: 1392, Address: 0x51e40)
• isxdigit (Ordinal: 1393, Address: 0x51e70)
• labs (Ordinal: 1394, Address: 0x40670)
• log (Ordinal: 1395, Address: 0x54a90)
• mbstowcs (Ordinal: 1396, Address: 0x555f0)
• memchr (Ordinal: 1397, Address: 0x55690)
• memcmp (Ordinal: 1398, Address: 0x556c0)
• memcpy (Ordinal: 1399, Address: 0x55720)
• memcpy_s (Ordinal: 1400, Address: 0x55780)
• memmove (Ordinal: 1401, Address: 0x55800)
• memmove_s (Ordinal: 1402, Address: 0x55810)
• memset (Ordinal: 1403, Address: 0x55870)
• pow (Ordinal: 1404, Address: 0x60f70)
• qsort (Ordinal: 1405, Address: 0x61f20)
• qsort_s (Ordinal: 1406, Address: 0x61f80)
• sin (Ordinal: 1407, Address: 0x669a0)
• sprintf (Ordinal: 1408, Address: 0x16790)
• sprintf_s (Ordinal: 1409, Address: 0x66db0)
• sqrt (Ordinal: 1410, Address: 0x66e00)
• sscanf (Ordinal: 1411, Address: 0x670f0)
• strcat (Ordinal: 1412, Address: 0x67d00)
• strcat_s (Ordinal: 1413, Address: 0x67d40)
• strchr (Ordinal: 1414, Address: 0x67db0)
• strcmp (Ordinal: 1415, Address: 0x67de0)
• strcpy (Ordinal: 1416, Address: 0x67e40)
• strcpy_s (Ordinal: 1417, Address: 0x67e70)
• strcspn (Ordinal: 1418, Address: 0x67ed0)
• strlen (Ordinal: 1419, Address: 0x67f70)
• strncat (Ordinal: 1420, Address: 0x67fa0)
• strncat_s (Ordinal: 1421, Address: 0x67ff0)
• strncmp (Ordinal: 1422, Address: 0x680c0)
• strncpy (Ordinal: 1423, Address: 0x68120)
• strncpy_s (Ordinal: 1424, Address: 0x68180)
• strnlen (Ordinal: 1425, Address: 0x68230)
• strpbrk (Ordinal: 1426, Address: 0x68280)
• strrchr (Ordinal: 1427, Address: 0x682d0)
• strspn (Ordinal: 1428, Address: 0x68300)
• strstr (Ordinal: 1429, Address: 0x68350)
• strtok_s (Ordinal: 1430, Address: 0x683c0)
• strtol (Ordinal: 1431, Address: 0x68480)
• strtoul (Ordinal: 1432, Address: 0x686a0)
• swprintf (Ordinal: 1433, Address: 0x167d0)
• swprintf_s (Ordinal: 1434, Address: 0x68a10)
• tan (Ordinal: 1435, Address: 0x68a70)
• tolower (Ordinal: 1436, Address: 0x695d0)
• toupper (Ordinal: 1437, Address: 0x695f0)
• towlower (Ordinal: 1438, Address: 0x69680)
• towupper (Ordinal: 1439, Address: 0x696c0)
• vDbgPrintEx (Ordinal: 1440, Address: 0x6bf60)
• vDbgPrintExWithPrefix (Ordinal: 1441, Address: 0x6bfa0)
• vsprintf (Ordinal: 1442, Address: 0x6d410)
• vsprintf_s (Ordinal: 1443, Address: 0x6d450)
• vswprintf_s (Ordinal: 1444, Address: 0x6d4a0)
• wcscat (Ordinal: 1445, Address: 0x6dde0)
• wcscat_s (Ordinal: 1446, Address: 0x6de20)
• wcschr (Ordinal: 1447, Address: 0x6dea0)
• wcscmp (Ordinal: 1448, Address: 0x6ded0)
• wcscpy (Ordinal: 1449, Address: 0x6df30)
• wcscpy_s (Ordinal: 1450, Address: 0x6df60)
• wcscspn (Ordinal: 1451, Address: 0x6dfc0)
• wcslen (Ordinal: 1452, Address: 0x6e020)
• wcsncat (Ordinal: 1453, Address: 0x6e050)
• wcsncat_s (Ordinal: 1454, Address: 0x6e0b0)
• wcsncmp (Ordinal: 1455, Address: 0x6e1c0)
• wcsncpy (Ordinal: 1456, Address: 0x6e220)
• wcsncpy_s (Ordinal: 1457, Address: 0x6e280)
• wcsnlen (Ordinal: 1458, Address: 0x6e330)
• wcspbrk (Ordinal: 1459, Address: 0x6e360)
• wcsrchr (Ordinal: 1460, Address: 0x6e3c0)
• wcsspn (Ordinal: 1461, Address: 0x6e3f0)
• wcsstr (Ordinal: 1462, Address: 0x6e450)
• wcstok (Ordinal: 1463, Address: 0x6e4d0)
• wcstok_s (Ordinal: 1464, Address: 0x6e580)
• wcstol (Ordinal: 1465, Address: 0x6e640)
• wcstombs (Ordinal: 1466, Address: 0x6e880)
• wcstoul (Ordinal: 1467, Address: 0x6e930)
• wine_server_call (Ordinal: 1468, Address: 0x72a10)
• wine_server_fd_to_handle (Ordinal: 1469, Address: 0x72a50)
• wine_server_handle_to_fd (Ordinal: 1470, Address: 0x72ac0)
• __wine_unix_spawnvp (Ordinal: 1471, Address: 0x3d8d0)
• __wine_ctrl_routine (Ordinal: 1472, Address: 0x3d260)
• __wine_syscall_dispatcher (Ordinal: 1473, Address: 0x95030)
• __wine_unix_call_dispatcher (Ordinal: 1474, Address: 0x95034)
• __wine_unixlib_handle (Ordinal: 1475, Address: 0x95028)
• __wine_dbg_write (Ordinal: 1476, Address: 0x3d690)
• __wine_dbg_get_channel_flags (Ordinal: 1477, Address: 0x3d290)
• __wine_dbg_header (Ordinal: 1478, Address: 0x3d3b0)
• __wine_dbg_output (Ordinal: 1479, Address: 0x3d550)
• __wine_dbg_strdup (Ordinal: 1480, Address: 0x3d610)
• wine_get_version (Ordinal: 1481, Address: 0x72a00)
• wine_get_build_id (Ordinal: 1482, Address: 0x72990)
• wine_get_host_version (Ordinal: 1483, Address: 0x729b0)
• __wine_rpc_NtReadFile (Ordinal: 1484, Address: 0xe104)
• __wine_unix_call (Ordinal: 1485, Address: 0x3d8c0)

Imported DLLs & Functions

No imported DLLs.