kernel32.dll
Description: Windows NT BASE API Client DLL
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.2913
Architecture: 64-bit
Operating System: Windows NT
SHA256: ccc676070124c2018231472123f12acc
File Size: 755.2 KB
Uploaded At: Sept. 4, 2026, 12:18 p.m.
Views: 5
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: CreateRemoteThread, WriteProcessMemory, OpenProcess, VirtualAllocEx
Exported Functions
- AcquireSRWLockExclusive (Ordinal: 1, Address: 0x9e387)
- AcquireSRWLockShared (Ordinal: 2, Address: 0x9e3bd)
- ActivateActCtx (Ordinal: 3, Address: 0x20800)
- ActivateActCtxWorker (Ordinal: 4, Address: 0x1be90)
- AddAtomA (Ordinal: 5, Address: 0x5a7b0)
- AddAtomW (Ordinal: 6, Address: 0x128f0)
- AddConsoleAliasA (Ordinal: 7, Address: 0x25dc0)
- AddConsoleAliasW (Ordinal: 8, Address: 0x25dd0)
- AddDllDirectory (Ordinal: 9, Address: 0x9e443)
- AddIntegrityLabelToBoundaryDescriptor (Ordinal: 10, Address: 0x3d350)
- AddLocalAlternateComputerNameA (Ordinal: 11, Address: 0x5a8f0)
- AddLocalAlternateComputerNameW (Ordinal: 12, Address: 0x5a950)
- AddRefActCtx (Ordinal: 13, Address: 0x229f0)
- AddRefActCtxWorker (Ordinal: 14, Address: 0x1ea40)
- AddResourceAttributeAce (Ordinal: 15, Address: 0x3ac90)
- AddSIDToBoundaryDescriptor (Ordinal: 16, Address: 0x21020)
- AddScopedPolicyIDAce (Ordinal: 17, Address: 0x3acb0)
- AddSecureMemoryCacheCallback (Ordinal: 18, Address: 0x390b0)
- AddVectoredContinueHandler (Ordinal: 19, Address: 0x9e57c)
- AddVectoredExceptionHandler (Ordinal: 20, Address: 0x9e5bc)
- AdjustCalendarDate (Ordinal: 21, Address: 0x7200)
- AllocConsole (Ordinal: 22, Address: 0x25a10)
- AllocateUserPhysicalPages (Ordinal: 23, Address: 0x3acf0)
- AllocateUserPhysicalPagesNuma (Ordinal: 24, Address: 0x3acd0)
- AppPolicyGetClrCompat (Ordinal: 25, Address: 0x9e64f)
- AppPolicyGetCreateFileAccess (Ordinal: 26, Address: 0x9e68d)
- AppPolicyGetLifecycleManagement (Ordinal: 27, Address: 0x9e6d5)
- AppPolicyGetMediaFoundationCodecLoading (Ordinal: 28, Address: 0x9e728)
- AppPolicyGetProcessTerminationMethod (Ordinal: 29, Address: 0x9e780)
- AppPolicyGetShowDeveloperDiagnostic (Ordinal: 30, Address: 0x9e7d4)
- AppPolicyGetThreadInitializationType (Ordinal: 31, Address: 0x9e828)
- AppPolicyGetWindowingModel (Ordinal: 32, Address: 0x9e873)
- AppXGetOSMaxVersionTested (Ordinal: 33, Address: 0x9e8b3)
- ApplicationRecoveryFinished (Ordinal: 34, Address: 0x444a0)
- ApplicationRecoveryInProgress (Ordinal: 35, Address: 0x444b0)
- AreFileApisANSI (Ordinal: 36, Address: 0x21370)
- AssignProcessToJobObject (Ordinal: 37, Address: 0x20680)
- AttachConsole (Ordinal: 38, Address: 0x25a20)
- BackupRead (Ordinal: 39, Address: 0x5d350)
- BackupSeek (Ordinal: 40, Address: 0x5e510)
- BackupWrite (Ordinal: 41, Address: 0x5e7f0)
- BaseCheckAppcompatCache (Ordinal: 42, Address: 0x3ad70)
- BaseCheckAppcompatCacheEx (Ordinal: 43, Address: 0x3ad10)
- BaseCheckAppcompatCacheExWorker (Ordinal: 44, Address: 0x216e0)
- BaseCheckAppcompatCacheWorker (Ordinal: 45, Address: 0x216e0)
- BaseCheckElevation (Ordinal: 46, Address: 0x18ee0)
- BaseCleanupAppcompatCacheSupport (Ordinal: 47, Address: 0x3ad90)
- BaseCleanupAppcompatCacheSupportWorker (Ordinal: 48, Address: 0x21b60)
- BaseDestroyVDMEnvironment (Ordinal: 49, Address: 0x40ca0)
- BaseDllReadWriteIniFile (Ordinal: 50, Address: 0xc500)
- BaseDumpAppcompatCache (Ordinal: 51, Address: 0x3adb0)
- BaseDumpAppcompatCacheWorker (Ordinal: 52, Address: 0x381d0)
- BaseElevationPostProcessing (Ordinal: 53, Address: 0x1da90)
- BaseFlushAppcompatCache (Ordinal: 54, Address: 0x3add0)
- BaseFlushAppcompatCacheWorker (Ordinal: 55, Address: 0x71120)
- BaseFormatObjectAttributes (Ordinal: 56, Address: 0x24fe0)
- BaseFormatTimeOut (Ordinal: 57, Address: 0x59fd0)
- BaseFreeAppCompatDataForProcessWorker (Ordinal: 58, Address: 0x205e0)
- BaseGenerateAppCompatData (Ordinal: 59, Address: 0x16d90)
- BaseGetNamedObjectDirectory (Ordinal: 60, Address: 0x3adf0)
- BaseInitAppcompatCacheSupport (Ordinal: 61, Address: 0x3ae10)
- BaseInitAppcompatCacheSupportWorker (Ordinal: 62, Address: 0x21b60)
- BaseIsAppcompatInfrastructureDisabled (Ordinal: 63, Address: 0x216e0)
- BaseIsAppcompatInfrastructureDisabledWorker (Ordinal: 64, Address: 0x216e0)
- BaseIsDosApplication (Ordinal: 65, Address: 0x61490)
- BaseQueryModuleData (Ordinal: 66, Address: 0x71590)
- BaseReadAppCompatDataForProcessWorker (Ordinal: 67, Address: 0x1fe70)
- BaseSetLastNTError (Ordinal: 68, Address: 0x130e0)
- BaseThreadInitThunk (Ordinal: 69, Address: 0x17600)
- BaseUpdateAppcompatCache (Ordinal: 70, Address: 0x3ae30)
- BaseUpdateAppcompatCacheWorker (Ordinal: 71, Address: 0x71180)
- BaseUpdateVDMEntry (Ordinal: 72, Address: 0x41000)
- BaseVerifyUnicodeString (Ordinal: 73, Address: 0x5a070)
- BaseWriteErrorElevationRequiredEvent (Ordinal: 74, Address: 0x5fc60)
- Basep8BitStringToDynamicUnicodeString (Ordinal: 75, Address: 0x1c810)
- BasepAllocateActivationContextActivationBlock (Ordinal: 76, Address: 0x5a0d0)
- BasepAnsiStringToDynamicUnicodeString (Ordinal: 77, Address: 0x5a000)
- BasepAppContainerEnvironmentExtension (Ordinal: 78, Address: 0x7600)
- BasepAppXExtension (Ordinal: 79, Address: 0x20b20)
- BasepCheckAppCompat (Ordinal: 80, Address: 0x19490)
- BasepCheckWebBladeHashes (Ordinal: 81, Address: 0x1d790)
- BasepCheckWinSaferRestrictions (Ordinal: 82, Address: 0x11df0)
- BasepConstructSxsCreateProcessMessage (Ordinal: 83, Address: 0xdd40)
- BasepCopyEncryption (Ordinal: 84, Address: 0x38b60)
- BasepFinishPackageActivationForSxS (Ordinal: 85, Address: 0x27230)
- BasepFreeActivationContextActivationBlock (Ordinal: 86, Address: 0x5a260)
- BasepFreeAppCompatData (Ordinal: 87, Address: 0x1c310)
- BasepGetAppCompatData (Ordinal: 88, Address: 0x163f0)
- BasepGetComputerNameFromNtPath (Ordinal: 89, Address: 0x1a8e0)
- BasepGetExeArchType (Ordinal: 90, Address: 0x19c70)
- BasepGetPackageActivationTokenForSxS (Ordinal: 91, Address: 0x27270)
- BasepInitAppCompatData (Ordinal: 92, Address: 0x712b0)
- BasepIsProcessAllowed (Ordinal: 93, Address: 0x1c940)
- BasepMapModuleHandle (Ordinal: 94, Address: 0x13740)
- BasepNotifyLoadStringResource (Ordinal: 95, Address: 0x1bda0)
- BasepPostSuccessAppXExtension (Ordinal: 96, Address: 0x21330)
- BasepProcessInvalidImage (Ordinal: 97, Address: 0x39d00)
- BasepQueryAppCompat (Ordinal: 98, Address: 0xcee0)
- BasepQueryModuleChpeSettings (Ordinal: 99, Address: 0x71340)
- BasepReleaseAppXContext (Ordinal: 100, Address: 0x21310)
- BasepReleaseSxsCreateProcessUtilityStruct (Ordinal: 101, Address: 0x151b0)
- BasepReportFault (Ordinal: 102, Address: 0x44760)
- BasepSetFileEncryptionCompression (Ordinal: 103, Address: 0x1eb30)
- Beep (Ordinal: 104, Address: 0x37f00)
- BeginUpdateResourceA (Ordinal: 105, Address: 0x4a2a0)
- BeginUpdateResourceW (Ordinal: 106, Address: 0x4a310)
- BindIoCompletionCallback (Ordinal: 107, Address: 0x249e0)
- BuildCommDCBA (Ordinal: 108, Address: 0x42c50)
- BuildCommDCBAndTimeoutsA (Ordinal: 109, Address: 0x42cb0)
- BuildCommDCBAndTimeoutsW (Ordinal: 110, Address: 0x42cf0)
- BuildCommDCBW (Ordinal: 111, Address: 0x42d80)
- CallNamedPipeA (Ordinal: 112, Address: 0x61ce0)
- CallNamedPipeW (Ordinal: 113, Address: 0x257b0)
- CallbackMayRunLong (Ordinal: 114, Address: 0x3ae50)
- CancelDeviceWakeupRequest (Ordinal: 115, Address: 0x39c50)
- CancelIo (Ordinal: 116, Address: 0x213f0)
- CancelIoEx (Ordinal: 117, Address: 0x207c0)
- CancelSynchronousIo (Ordinal: 118, Address: 0x3ae90)
- CancelThreadpoolIo (Ordinal: 119, Address: 0x9f16d)
- CancelTimerQueueTimer (Ordinal: 120, Address: 0x446c0)
- CancelWaitableTimer (Ordinal: 121, Address: 0x250a0)
- CeipIsOptedIn (Ordinal: 122, Address: 0x9f1c4)
- ChangeTimerQueueTimer (Ordinal: 123, Address: 0x21a00)
- CheckAllowDecryptedRemoteDestinationPolicy (Ordinal: 124, Address: 0x3aeb0)
- CheckElevation (Ordinal: 125, Address: 0x18da0)
- CheckElevationEnabled (Ordinal: 126, Address: 0x20d70)
- CheckForReadOnlyResource (Ordinal: 127, Address: 0x621e0)
- CheckForReadOnlyResourceFilter (Ordinal: 128, Address: 0x3d380)
- CheckIsMSIXPackage (Ordinal: 129, Address: 0x9f28e)
- CheckNameLegalDOS8Dot3A (Ordinal: 130, Address: 0x39a60)
- CheckNameLegalDOS8Dot3W (Ordinal: 131, Address: 0x39b10)
- CheckRemoteDebuggerPresent (Ordinal: 132, Address: 0x1250)
- CheckTokenCapability (Ordinal: 133, Address: 0x3aed0)
- CheckTokenMembershipEx (Ordinal: 134, Address: 0x3aef0)
- ClearCommBreak (Ordinal: 135, Address: 0x25810)
- ClearCommError (Ordinal: 136, Address: 0x25820)
- CloseConsoleHandle (Ordinal: 137, Address: 0x6a080)
- CloseHandle (Ordinal: 138, Address: 0x25060)
- ClosePackageInfo (Ordinal: 139, Address: 0x9f371)
- ClosePrivateNamespace (Ordinal: 140, Address: 0x22990)
- CloseProfileUserMapping (Ordinal: 141, Address: 0x21b60)
- ClosePseudoConsole (Ordinal: 142, Address: 0x25a30)
- CloseState (Ordinal: 143, Address: 0x9f3d9)
- CloseThreadpool (Ordinal: 144, Address: 0x9f3ff)
- CloseThreadpoolCleanupGroup (Ordinal: 145, Address: 0x9f42f)
- CloseThreadpoolCleanupGroupMembers (Ordinal: 146, Address: 0x9f46e)
- CloseThreadpoolIo (Ordinal: 147, Address: 0x9f4a3)
- CloseThreadpoolTimer (Ordinal: 148, Address: 0x9f4d4)
- CloseThreadpoolWait (Ordinal: 149, Address: 0x9f4fd)
- CloseThreadpoolWork (Ordinal: 150, Address: 0x9f525)
- CmdBatNotification (Ordinal: 151, Address: 0x206f0)
- CommConfigDialogA (Ordinal: 152, Address: 0x3e110)
- CommConfigDialogW (Ordinal: 153, Address: 0x3e1c0)
- CompareCalendarDates (Ordinal: 154, Address: 0x4acb0)
- CompareFileTime (Ordinal: 155, Address: 0x25290)
- CompareStringA (Ordinal: 156, Address: 0x1dda0)
- CompareStringEx (Ordinal: 157, Address: 0x16230)
- CompareStringOrdinal (Ordinal: 158, Address: 0x163d0)
- CompareStringW (Ordinal: 159, Address: 0x1ce20)
- ConnectNamedPipe (Ordinal: 160, Address: 0x21750)
- ConsoleMenuControl (Ordinal: 161, Address: 0x6a1c0)
- ContinueDebugEvent (Ordinal: 162, Address: 0x3af10)
- ConvertCalDateTimeToSystemTime (Ordinal: 163, Address: 0x4ad60)
- ConvertDefaultLocale (Ordinal: 164, Address: 0x3af30)
- ConvertFiberToThread (Ordinal: 165, Address: 0x25960)
- ConvertNLSDayOfWeekToWin32DayOfWeek (Ordinal: 166, Address: 0x4ae60)
- ConvertSystemTimeToCalDateTime (Ordinal: 167, Address: 0x74b0)
- ConvertThreadToFiber (Ordinal: 168, Address: 0x25970)
- ConvertThreadToFiberEx (Ordinal: 169, Address: 0x25980)
- CopyContext (Ordinal: 170, Address: 0x3af50)
- CopyFile2 (Ordinal: 171, Address: 0x3af70)
- CopyFileA (Ordinal: 172, Address: 0x62530)
- CopyFileExA (Ordinal: 173, Address: 0x625e0)
- CopyFileExW (Ordinal: 174, Address: 0x20e40)
- CopyFileTransactedA (Ordinal: 175, Address: 0x626a0)
- CopyFileTransactedW (Ordinal: 176, Address: 0x62790)
- CopyFileW (Ordinal: 177, Address: 0x25950)
- CopyLZFile (Ordinal: 178, Address: 0x380c0)
- CreateActCtxA (Ordinal: 179, Address: 0x22340)
- CreateActCtxW (Ordinal: 180, Address: 0x21910)
- CreateActCtxWWorker (Ordinal: 181, Address: 0x137b0)
- CreateBoundaryDescriptorA (Ordinal: 182, Address: 0x623a0)
- CreateBoundaryDescriptorW (Ordinal: 183, Address: 0x20fc0)
- CreateConsoleScreenBuffer (Ordinal: 184, Address: 0x25b50)
- CreateDirectoryA (Ordinal: 185, Address: 0x252a0)
- CreateDirectoryExA (Ordinal: 186, Address: 0x631c0)
- CreateDirectoryExW (Ordinal: 187, Address: 0x3af90)
- CreateDirectoryTransactedA (Ordinal: 188, Address: 0x38420)
- CreateDirectoryTransactedW (Ordinal: 189, Address: 0x63250)
- CreateDirectoryW (Ordinal: 190, Address: 0x252b0)
- CreateEnclave (Ordinal: 191, Address: 0x9f846)
- CreateEventA (Ordinal: 192, Address: 0x250b0)
- CreateEventExA (Ordinal: 193, Address: 0x250c0)
- CreateEventExW (Ordinal: 194, Address: 0x250d0)
- CreateEventW (Ordinal: 195, Address: 0x250e0)
- CreateFiber (Ordinal: 196, Address: 0x25990)
- CreateFiberEx (Ordinal: 197, Address: 0x259a0)
- CreateFile2 (Ordinal: 198, Address: 0x252c0)
- CreateFileA (Ordinal: 199, Address: 0x252d0)
- CreateFileMappingA (Ordinal: 200, Address: 0x1c430)
- CreateFileMappingFromApp (Ordinal: 201, Address: 0x9f909)
- CreateFileMappingNumaA (Ordinal: 202, Address: 0x63400)
- CreateFileMappingNumaW (Ordinal: 203, Address: 0x3afb0)
- CreateFileMappingW (Ordinal: 204, Address: 0x1d060)
- CreateFileTransactedA (Ordinal: 205, Address: 0x62890)
- CreateFileTransactedW (Ordinal: 206, Address: 0x62950)
- CreateFileW (Ordinal: 207, Address: 0x252e0)
- CreateHardLinkA (Ordinal: 208, Address: 0x3afd0)
- CreateHardLinkTransactedA (Ordinal: 209, Address: 0x43e80)
- CreateHardLinkTransactedW (Ordinal: 210, Address: 0x634d0)
- CreateHardLinkW (Ordinal: 211, Address: 0x3aff0)
- CreateIoCompletionPort (Ordinal: 212, Address: 0x1e0d0)
- CreateJobObjectA (Ordinal: 213, Address: 0x5c8e0)
- CreateJobObjectW (Ordinal: 214, Address: 0x1e970)
- CreateJobSet (Ordinal: 215, Address: 0x5c950)
- CreateMailslotA (Ordinal: 216, Address: 0x1c5e0)
- CreateMailslotW (Ordinal: 217, Address: 0x1c650)
- CreateMemoryResourceNotification (Ordinal: 218, Address: 0x21060)
- CreateMutexA (Ordinal: 219, Address: 0x250f0)
- CreateMutexExA (Ordinal: 220, Address: 0x25100)
- CreateMutexExW (Ordinal: 221, Address: 0x25110)
- CreateMutexW (Ordinal: 222, Address: 0x25120)
- CreateNamedPipeA (Ordinal: 223, Address: 0x61d80)
- CreateNamedPipeW (Ordinal: 224, Address: 0x209f0)
- CreatePipe (Ordinal: 225, Address: 0x209d0)
- CreatePrivateNamespaceA (Ordinal: 226, Address: 0x62410)
- CreatePrivateNamespaceW (Ordinal: 227, Address: 0x20f80)
- CreateProcessA (Ordinal: 228, Address: 0x1cee0)
- CreateProcessAsUserA (Ordinal: 229, Address: 0x3b010)
- CreateProcessAsUserW (Ordinal: 230, Address: 0x1e240)
- CreateProcessInternalA (Ordinal: 231, Address: 0x3b090)
- CreateProcessInternalW (Ordinal: 232, Address: 0x3b110)
- CreateProcessW (Ordinal: 233, Address: 0x1d2e0)
- CreatePseudoConsole (Ordinal: 234, Address: 0x25a40)
- CreateRemoteThread (Ordinal: 235, Address: 0x3b190)
- CreateRemoteThreadEx (Ordinal: 236, Address: 0x9fbdb)
- CreateSemaphoreA (Ordinal: 237, Address: 0x1c500)
- CreateSemaphoreExA (Ordinal: 238, Address: 0x1c530)
- CreateSemaphoreExW (Ordinal: 239, Address: 0x25130)
- CreateSemaphoreW (Ordinal: 240, Address: 0x25140)
- CreateSymbolicLinkA (Ordinal: 241, Address: 0x63aa0)
- CreateSymbolicLinkTransactedA (Ordinal: 242, Address: 0x63b60)
- CreateSymbolicLinkTransactedW (Ordinal: 243, Address: 0x63c20)
- CreateSymbolicLinkW (Ordinal: 244, Address: 0x3b1e0)
- CreateTapePartition (Ordinal: 245, Address: 0x43bc0)
- CreateThread (Ordinal: 246, Address: 0x1bd30)
- CreateThreadpool (Ordinal: 247, Address: 0x213b0)
- CreateThreadpoolCleanupGroup (Ordinal: 248, Address: 0x21930)
- CreateThreadpoolIo (Ordinal: 249, Address: 0x214e0)
- CreateThreadpoolTimer (Ordinal: 250, Address: 0x1cde0)
- CreateThreadpoolWait (Ordinal: 251, Address: 0x20f20)
- CreateThreadpoolWork (Ordinal: 252, Address: 0x20d30)
- CreateTimerQueue (Ordinal: 253, Address: 0x219c0)
- CreateTimerQueueTimer (Ordinal: 254, Address: 0x1ea20)
- CreateToolhelp32Snapshot (Ordinal: 255, Address: 0x28210)
- CreateUmsCompletionList (Ordinal: 256, Address: 0x427d0)
- CreateUmsThreadContext (Ordinal: 257, Address: 0x42810)
- CreateWaitableTimerA (Ordinal: 258, Address: 0x63720)
- CreateWaitableTimerExA (Ordinal: 259, Address: 0x63740)
- CreateWaitableTimerExW (Ordinal: 260, Address: 0x25150)
- CreateWaitableTimerW (Ordinal: 261, Address: 0x10b0)
- CtrlRoutine (Ordinal: 262, Address: 0x9fe37)
- DeactivateActCtx (Ordinal: 263, Address: 0x20820)
- DeactivateActCtxWorker (Ordinal: 264, Address: 0x1bfd0)
- DebugActiveProcess (Ordinal: 265, Address: 0x3b220)
- DebugActiveProcessStop (Ordinal: 266, Address: 0x3b200)
- DebugBreak (Ordinal: 267, Address: 0x3b240)
- DebugBreakProcess (Ordinal: 268, Address: 0x38310)
- DebugSetProcessKillOnExit (Ordinal: 269, Address: 0x38340)
- DecodePointer (Ordinal: 270, Address: 0x9fee5)
- DecodeSystemPointer (Ordinal: 271, Address: 0x9ff10)
- DefineDosDeviceA (Ordinal: 272, Address: 0x653d0)
- DefineDosDeviceW (Ordinal: 273, Address: 0x252f0)
- DelayLoadFailureHook (Ordinal: 274, Address: 0x24a90)
- DeleteAtom (Ordinal: 275, Address: 0x12860)
- DeleteBoundaryDescriptor (Ordinal: 276, Address: 0x20fa0)
- DeleteCriticalSection (Ordinal: 277, Address: 0x9ff9e)
- DeleteFiber (Ordinal: 278, Address: 0x259b0)
- DeleteFileA (Ordinal: 279, Address: 0x25300)
- DeleteFileTransactedA (Ordinal: 280, Address: 0x63d00)
- DeleteFileTransactedW (Ordinal: 281, Address: 0x248f0)
- DeleteFileW (Ordinal: 282, Address: 0x25310)
- DeleteProcThreadAttributeList (Ordinal: 283, Address: 0xa002b)
- DeleteSynchronizationBarrier (Ordinal: 284, Address: 0x3b260)
- DeleteTimerQueue (Ordinal: 285, Address: 0x21970)
- DeleteTimerQueueEx (Ordinal: 286, Address: 0x219e0)
- DeleteTimerQueueTimer (Ordinal: 287, Address: 0x20ba0)
- DeleteUmsCompletionList (Ordinal: 288, Address: 0x42850)
- DeleteUmsThreadContext (Ordinal: 289, Address: 0x42890)
- DeleteVolumeMountPointA (Ordinal: 290, Address: 0x65670)
- DeleteVolumeMountPointW (Ordinal: 291, Address: 0x25320)
- DequeueUmsCompletionListItems (Ordinal: 292, Address: 0x428d0)
- DeviceIoControl (Ordinal: 293, Address: 0x15b70)
- DisableThreadLibraryCalls (Ordinal: 294, Address: 0x20640)
- DisableThreadProfiling (Ordinal: 295, Address: 0x447a0)
- DisassociateCurrentThreadFromCallback (Ordinal: 296, Address: 0xa01aa)
- DiscardVirtualMemory (Ordinal: 297, Address: 0xa01dc)
- DisconnectNamedPipe (Ordinal: 298, Address: 0x226e0)
- DnsHostnameToComputerNameA (Ordinal: 299, Address: 0x5b880)
- DnsHostnameToComputerNameExW (Ordinal: 300, Address: 0x3b280)
- DnsHostnameToComputerNameW (Ordinal: 301, Address: 0x1cc90)
- DosDateTimeToFileTime (Ordinal: 302, Address: 0x12a90)
- DosPathToSessionPathA (Ordinal: 303, Address: 0x66a70)
- DosPathToSessionPathW (Ordinal: 304, Address: 0x66c70)
- DuplicateConsoleHandle (Ordinal: 305, Address: 0x6a0a0)
- DuplicateEncryptionInfoFileExt (Ordinal: 306, Address: 0x38eb0)
- DuplicateHandle (Ordinal: 307, Address: 0x25070)
- EnableThreadProfiling (Ordinal: 308, Address: 0x447e0)
- EncodePointer (Ordinal: 309, Address: 0xa0322)
- EncodeSystemPointer (Ordinal: 310, Address: 0xa034d)
- EndUpdateResourceA (Ordinal: 311, Address: 0x4a560)
- EndUpdateResourceW (Ordinal: 312, Address: 0x4a570)
- EnterCriticalSection (Ordinal: 313, Address: 0xa03a5)
- EnterSynchronizationBarrier (Ordinal: 314, Address: 0x3b2a0)
- EnterUmsSchedulingMode (Ordinal: 315, Address: 0x42930)
- EnumCalendarInfoA (Ordinal: 316, Address: 0x4b950)
- EnumCalendarInfoExA (Ordinal: 317, Address: 0x4b9f0)
- EnumCalendarInfoExEx (Ordinal: 318, Address: 0x1cec0)
- EnumCalendarInfoExW (Ordinal: 319, Address: 0x3b2c0)
- EnumCalendarInfoW (Ordinal: 320, Address: 0x3b2e0)
- EnumDateFormatsA (Ordinal: 321, Address: 0x4ba90)
- EnumDateFormatsExA (Ordinal: 322, Address: 0x4baf0)
- EnumDateFormatsExEx (Ordinal: 323, Address: 0x3b300)
- EnumDateFormatsExW (Ordinal: 324, Address: 0x3b320)
- EnumDateFormatsW (Ordinal: 325, Address: 0x3b340)
- EnumLanguageGroupLocalesA (Ordinal: 326, Address: 0x4bb60)
- EnumLanguageGroupLocalesW (Ordinal: 327, Address: 0x3b360)
- EnumResourceLanguagesA (Ordinal: 328, Address: 0x39300)
- EnumResourceLanguagesExA (Ordinal: 329, Address: 0x3b380)
- EnumResourceLanguagesExW (Ordinal: 330, Address: 0x3b3a0)
- EnumResourceLanguagesW (Ordinal: 331, Address: 0x39340)
- EnumResourceNamesA (Ordinal: 332, Address: 0x39380)
- EnumResourceNamesExA (Ordinal: 333, Address: 0x3b3c0)
- EnumResourceNamesExW (Ordinal: 334, Address: 0x3b3e0)
- EnumResourceNamesW (Ordinal: 335, Address: 0x25790)
- EnumResourceTypesA (Ordinal: 336, Address: 0x393b0)
- EnumResourceTypesExA (Ordinal: 337, Address: 0x3b400)
- EnumResourceTypesExW (Ordinal: 338, Address: 0x3b420)
- EnumResourceTypesW (Ordinal: 339, Address: 0x393e0)
- EnumSystemCodePagesA (Ordinal: 340, Address: 0x4bb90)
- EnumSystemCodePagesW (Ordinal: 341, Address: 0x3b440)
- EnumSystemFirmwareTables (Ordinal: 342, Address: 0x390e0)
- EnumSystemGeoID (Ordinal: 343, Address: 0x54b90)
- EnumSystemGeoNames (Ordinal: 344, Address: 0x54c80)
- EnumSystemLanguageGroupsA (Ordinal: 345, Address: 0x4bbb0)
- EnumSystemLanguageGroupsW (Ordinal: 346, Address: 0x3b460)
- EnumSystemLocalesA (Ordinal: 347, Address: 0x3b480)
- EnumSystemLocalesEx (Ordinal: 348, Address: 0x3b4a0)
- EnumSystemLocalesW (Ordinal: 349, Address: 0x3b4c0)
- EnumTimeFormatsA (Ordinal: 350, Address: 0x4bbd0)
- EnumTimeFormatsEx (Ordinal: 351, Address: 0x20bc0)
- EnumTimeFormatsW (Ordinal: 352, Address: 0x3b4e0)
- EnumUILanguagesA (Ordinal: 353, Address: 0x4bc50)
- EnumUILanguagesW (Ordinal: 354, Address: 0x3b500)
- EnumerateLocalComputerNamesA (Ordinal: 355, Address: 0x5b970)
- EnumerateLocalComputerNamesW (Ordinal: 356, Address: 0x5baa0)
- EraseTape (Ordinal: 357, Address: 0x43c20)
- EscapeCommFunction (Ordinal: 358, Address: 0x25830)
- ExecuteUmsThread (Ordinal: 359, Address: 0x429e0)
- ExitProcess (Ordinal: 360, Address: 0x1e820)
- ExitThread (Ordinal: 361, Address: 0xa0790)
- ExitVDM (Ordinal: 362, Address: 0x412a0)
- ExpandEnvironmentStringsA (Ordinal: 363, Address: 0x229d0)
- ExpandEnvironmentStringsW (Ordinal: 364, Address: 0x1bf20)
- ExpungeConsoleCommandHistoryA (Ordinal: 365, Address: 0x25de0)
- ExpungeConsoleCommandHistoryW (Ordinal: 366, Address: 0x25df0)
- FatalAppExitA (Ordinal: 367, Address: 0x3b520)
- FatalAppExitW (Ordinal: 368, Address: 0x3b540)
- FatalExit (Ordinal: 369, Address: 0x1e820)
- FileTimeToDosDateTime (Ordinal: 370, Address: 0x12d30)
- FileTimeToLocalFileTime (Ordinal: 371, Address: 0x25330)
- FileTimeToSystemTime (Ordinal: 372, Address: 0x257d0)
- FillConsoleOutputAttribute (Ordinal: 373, Address: 0x25b60)
- FillConsoleOutputCharacterA (Ordinal: 374, Address: 0x25b70)
- FillConsoleOutputCharacterW (Ordinal: 375, Address: 0x25b80)
- FindActCtxSectionGuid (Ordinal: 376, Address: 0x1c410)
- FindActCtxSectionGuidWorker (Ordinal: 377, Address: 0x12f90)
- FindActCtxSectionStringA (Ordinal: 378, Address: 0x66e00)
- FindActCtxSectionStringW (Ordinal: 379, Address: 0x21880)
- FindActCtxSectionStringWWorker (Ordinal: 380, Address: 0x132b0)
- FindAtomA (Ordinal: 381, Address: 0x15820)
- FindAtomW (Ordinal: 382, Address: 0x12d10)
- FindClose (Ordinal: 383, Address: 0x25340)
- FindCloseChangeNotification (Ordinal: 384, Address: 0x25350)
- FindFirstChangeNotificationA (Ordinal: 385, Address: 0x25360)
- FindFirstChangeNotificationW (Ordinal: 386, Address: 0x25370)
- FindFirstFileA (Ordinal: 387, Address: 0x25380)
- FindFirstFileExA (Ordinal: 388, Address: 0x25390)
- FindFirstFileExW (Ordinal: 389, Address: 0x253a0)
- FindFirstFileNameTransactedW (Ordinal: 390, Address: 0x38520)
- FindFirstFileNameW (Ordinal: 391, Address: 0x253b0)
- FindFirstFileTransactedA (Ordinal: 392, Address: 0x38600)
- FindFirstFileTransactedW (Ordinal: 393, Address: 0x66ea0)
- FindFirstFileW (Ordinal: 394, Address: 0x253c0)
- FindFirstStreamTransactedW (Ordinal: 395, Address: 0x386f0)
- FindFirstStreamW (Ordinal: 396, Address: 0xa0aa1)
- FindFirstVolumeA (Ordinal: 397, Address: 0x656c0)
- FindFirstVolumeMountPointA (Ordinal: 398, Address: 0x65860)
- FindFirstVolumeMountPointW (Ordinal: 399, Address: 0x65a50)
- FindFirstVolumeW (Ordinal: 400, Address: 0x253d0)
- FindNLSString (Ordinal: 401, Address: 0x3b560)
- FindNLSStringEx (Ordinal: 402, Address: 0x15e10)
- FindNextChangeNotification (Ordinal: 403, Address: 0x253e0)
- FindNextFileA (Ordinal: 404, Address: 0x253f0)
- FindNextFileNameW (Ordinal: 405, Address: 0x25400)
- FindNextFileW (Ordinal: 406, Address: 0x25410)
- FindNextStreamW (Ordinal: 407, Address: 0xa0b9d)
- FindNextVolumeA (Ordinal: 408, Address: 0x65ce0)
- FindNextVolumeMountPointA (Ordinal: 409, Address: 0x65e80)
- FindNextVolumeMountPointW (Ordinal: 410, Address: 0x66570)
- FindNextVolumeW (Ordinal: 411, Address: 0x25420)
- FindPackagesByPackageFamily (Ordinal: 412, Address: 0xa0c39)
- FindResourceA (Ordinal: 413, Address: 0x13530)
- FindResourceExA (Ordinal: 414, Address: 0x13550)
- FindResourceExW (Ordinal: 415, Address: 0x1bb10)
- FindResourceW (Ordinal: 416, Address: 0x209b0)
- FindStringOrdinal (Ordinal: 417, Address: 0x3b580)
- FindVolumeClose (Ordinal: 418, Address: 0x25430)
- FindVolumeMountPointClose (Ordinal: 419, Address: 0x66580)
- FlsAlloc (Ordinal: 420, Address: 0x20950)
- FlsFree (Ordinal: 421, Address: 0x21290)
- FlsGetValue (Ordinal: 422, Address: 0x18c70)
- FlsSetValue (Ordinal: 423, Address: 0x1ca50)
- FlushConsoleInputBuffer (Ordinal: 424, Address: 0x25b90)
- FlushFileBuffers (Ordinal: 425, Address: 0x25440)
- FlushInstructionCache (Ordinal: 426, Address: 0x1b610)
- FlushProcessWriteBuffers (Ordinal: 427, Address: 0xa0d59)
- FlushViewOfFile (Ordinal: 428, Address: 0x3b5a0)
- FoldStringA (Ordinal: 429, Address: 0x4bc70)
- FoldStringW (Ordinal: 430, Address: 0x3b5c0)
- FormatApplicationUserModelId (Ordinal: 431, Address: 0xa0dbf)
- FormatMessageA (Ordinal: 432, Address: 0x22800)
- FormatMessageW (Ordinal: 433, Address: 0x1d010)
- FreeConsole (Ordinal: 434, Address: 0x25a50)
- FreeEnvironmentStringsA (Ordinal: 435, Address: 0x20520)
- FreeEnvironmentStringsW (Ordinal: 436, Address: 0x1fe30)
- FreeLibrary (Ordinal: 437, Address: 0x1cf50)
- FreeLibraryAndExitThread (Ordinal: 438, Address: 0x217b0)
- FreeLibraryWhenCallbackReturns (Ordinal: 439, Address: 0xa0e85)
- FreeMemoryJobObject (Ordinal: 440, Address: 0x5c980)
- FreeResource (Ordinal: 441, Address: 0x22590)
- FreeUserPhysicalPages (Ordinal: 442, Address: 0x3b5e0)
- GenerateConsoleCtrlEvent (Ordinal: 443, Address: 0x25ba0)
- GetACP (Ordinal: 444, Address: 0x1e7e0)
- GetActiveProcessorCount (Ordinal: 445, Address: 0x1dc30)
- GetActiveProcessorGroupCount (Ordinal: 446, Address: 0x67040)
- GetAppContainerAce (Ordinal: 447, Address: 0x3b600)
- GetAppContainerNamedObjectPath (Ordinal: 448, Address: 0x3b620)
- GetApplicationRecoveryCallback (Ordinal: 449, Address: 0x3b640)
- GetApplicationRecoveryCallbackWorker (Ordinal: 450, Address: 0x444c0)
- GetApplicationRestartSettings (Ordinal: 451, Address: 0x3b660)
- GetApplicationRestartSettingsWorker (Ordinal: 452, Address: 0x44580)
- GetApplicationUserModelId (Ordinal: 453, Address: 0xa1009)
- GetAtomNameA (Ordinal: 454, Address: 0x5a7d0)
- GetAtomNameW (Ordinal: 455, Address: 0x12630)
- GetBinaryType (Ordinal: 456, Address: 0x615a0)
- GetBinaryTypeA (Ordinal: 457, Address: 0x615a0)
- GetBinaryTypeW (Ordinal: 458, Address: 0x615f0)
- GetCPInfo (Ordinal: 459, Address: 0x1ea60)
- GetCPInfoExA (Ordinal: 460, Address: 0x4bf20)
- GetCPInfoExW (Ordinal: 461, Address: 0x3b680)
- GetCachedSigningLevel (Ordinal: 462, Address: 0x3b6a0)
- GetCalendarDateFormat (Ordinal: 463, Address: 0x4aea0)
- GetCalendarDateFormatEx (Ordinal: 464, Address: 0x86b0)
- GetCalendarDaysInMonth (Ordinal: 465, Address: 0x73b0)
- GetCalendarDifferenceInDays (Ordinal: 466, Address: 0x4b180)
- GetCalendarInfoA (Ordinal: 467, Address: 0x4c000)
- GetCalendarInfoEx (Ordinal: 468, Address: 0x257e0)
- GetCalendarInfoW (Ordinal: 469, Address: 0x257f0)
- GetCalendarMonthsInYear (Ordinal: 470, Address: 0x4b2e0)
- GetCalendarSupportedDateRange (Ordinal: 471, Address: 0x7130)
- GetCalendarWeekNumber (Ordinal: 472, Address: 0x4b3b0)
- GetComPlusPackageInstallStatus (Ordinal: 473, Address: 0x443f0)
- GetCommConfig (Ordinal: 474, Address: 0x25840)
- GetCommMask (Ordinal: 475, Address: 0x25850)
- GetCommModemStatus (Ordinal: 476, Address: 0x25860)
- GetCommProperties (Ordinal: 477, Address: 0x25870)
- GetCommState (Ordinal: 478, Address: 0x25880)
- GetCommTimeouts (Ordinal: 479, Address: 0x25890)
- GetCommandLineA (Ordinal: 480, Address: 0x205c0)
- GetCommandLineW (Ordinal: 481, Address: 0x1fb40)
- GetCompressedFileSizeA (Ordinal: 482, Address: 0x3b6c0)
- GetCompressedFileSizeTransactedA (Ordinal: 483, Address: 0x63d50)
- GetCompressedFileSizeTransactedW (Ordinal: 484, Address: 0x63db0)
- GetCompressedFileSizeW (Ordinal: 485, Address: 0x3b6e0)
- GetComputerNameA (Ordinal: 486, Address: 0x1aa90)
- GetComputerNameExA (Ordinal: 487, Address: 0x24a10)
- GetComputerNameExW (Ordinal: 488, Address: 0x20970)
- GetComputerNameW (Ordinal: 489, Address: 0x1abf0)
- GetConsoleAliasA (Ordinal: 490, Address: 0x25e00)
- GetConsoleAliasExesA (Ordinal: 491, Address: 0x25e10)
- GetConsoleAliasExesLengthA (Ordinal: 492, Address: 0x25e20)
- GetConsoleAliasExesLengthW (Ordinal: 493, Address: 0x25e30)
- GetConsoleAliasExesW (Ordinal: 494, Address: 0x25e40)
- GetConsoleAliasW (Ordinal: 495, Address: 0x25e50)
- GetConsoleAliasesA (Ordinal: 496, Address: 0x25e60)
- GetConsoleAliasesLengthA (Ordinal: 497, Address: 0x25e70)
- GetConsoleAliasesLengthW (Ordinal: 498, Address: 0x25e80)
- GetConsoleAliasesW (Ordinal: 499, Address: 0x25e90)
- GetConsoleCP (Ordinal: 500, Address: 0x25a60)
- GetConsoleCharType (Ordinal: 501, Address: 0x6a6d0)
- GetConsoleCommandHistoryA (Ordinal: 502, Address: 0x25ea0)
- GetConsoleCommandHistoryLengthA (Ordinal: 503, Address: 0x25eb0)
- GetConsoleCommandHistoryLengthW (Ordinal: 504, Address: 0x25ec0)
- GetConsoleCommandHistoryW (Ordinal: 505, Address: 0x25ed0)
- GetConsoleCursorInfo (Ordinal: 506, Address: 0x25bb0)
- GetConsoleCursorMode (Ordinal: 507, Address: 0x6a740)
- GetConsoleDisplayMode (Ordinal: 508, Address: 0x25ee0)
- GetConsoleFontInfo (Ordinal: 509, Address: 0x6aab0)
- GetConsoleFontSize (Ordinal: 510, Address: 0x25ef0)
- GetConsoleHardwareState (Ordinal: 511, Address: 0x6a220)
- GetConsoleHistoryInfo (Ordinal: 512, Address: 0x25f00)
- GetConsoleInputExeNameA (Ordinal: 513, Address: 0xa14fc)
- GetConsoleInputExeNameW (Ordinal: 514, Address: 0xa1537)
- GetConsoleInputWaitHandle (Ordinal: 515, Address: 0x6a140)
- GetConsoleKeyboardLayoutNameA (Ordinal: 516, Address: 0x6ab60)
- GetConsoleKeyboardLayoutNameW (Ordinal: 517, Address: 0x6ab80)
- GetConsoleMode (Ordinal: 518, Address: 0x25a70)
- GetConsoleNlsMode (Ordinal: 519, Address: 0x6a7c0)
- GetConsoleOriginalTitleA (Ordinal: 520, Address: 0x25bc0)
- GetConsoleOriginalTitleW (Ordinal: 521, Address: 0x25bd0)
- GetConsoleOutputCP (Ordinal: 522, Address: 0x25a80)
- GetConsoleProcessList (Ordinal: 523, Address: 0x25f10)
- GetConsoleScreenBufferInfo (Ordinal: 524, Address: 0x25be0)
- GetConsoleScreenBufferInfoEx (Ordinal: 525, Address: 0x25bf0)
- GetConsoleSelectionInfo (Ordinal: 526, Address: 0x25f20)
- GetConsoleTitleA (Ordinal: 527, Address: 0x25c00)
- GetConsoleTitleW (Ordinal: 528, Address: 0x25c10)
- GetConsoleWindow (Ordinal: 529, Address: 0x25f30)
- GetCurrencyFormatA (Ordinal: 530, Address: 0x4c260)
- GetCurrencyFormatEx (Ordinal: 531, Address: 0x3b700)
- GetCurrencyFormatW (Ordinal: 532, Address: 0x3b720)
- GetCurrentActCtx (Ordinal: 533, Address: 0x22700)
- GetCurrentActCtxWorker (Ordinal: 534, Address: 0x1ce60)
- GetCurrentApplicationUserModelId (Ordinal: 535, Address: 0xa1732)
- GetCurrentConsoleFont (Ordinal: 536, Address: 0x25f40)
- GetCurrentConsoleFontEx (Ordinal: 537, Address: 0x25f50)
- GetCurrentDirectoryA (Ordinal: 538, Address: 0x217d0)
- GetCurrentDirectoryW (Ordinal: 539, Address: 0x206b0)
- GetCurrentPackageFamilyName (Ordinal: 540, Address: 0xa17d2)
- GetCurrentPackageFullName (Ordinal: 541, Address: 0xa1813)
- GetCurrentPackageId (Ordinal: 542, Address: 0xa184c)
- GetCurrentPackageInfo (Ordinal: 543, Address: 0xa1881)
- GetCurrentPackagePath (Ordinal: 544, Address: 0xa18b8)
- GetCurrentProcess (Ordinal: 545, Address: 0x25000)
- GetCurrentProcessId (Ordinal: 546, Address: 0x25010)
- GetCurrentProcessorNumber (Ordinal: 547, Address: 0xa1919)
- GetCurrentProcessorNumberEx (Ordinal: 548, Address: 0xa1958)
- GetCurrentThread (Ordinal: 549, Address: 0x15e80)
- GetCurrentThreadId (Ordinal: 550, Address: 0x15b30)
- GetCurrentThreadStackLimits (Ordinal: 551, Address: 0xa19bd)
- GetCurrentUmsThread (Ordinal: 552, Address: 0x42a20)
- GetDateFormatA (Ordinal: 553, Address: 0x3b730)
- GetDateFormatAWorker (Ordinal: 554, Address: 0x22a70)
- GetDateFormatEx (Ordinal: 555, Address: 0x3b750)
- GetDateFormatW (Ordinal: 556, Address: 0x20e20)
- GetDateFormatWWorker (Ordinal: 557, Address: 0xa790)
- GetDefaultCommConfigA (Ordinal: 558, Address: 0x3e420)
- GetDefaultCommConfigW (Ordinal: 559, Address: 0x3e4d0)
- GetDevicePowerState (Ordinal: 560, Address: 0x67960)
- GetDiskFreeSpaceA (Ordinal: 561, Address: 0x25450)
- GetDiskFreeSpaceExA (Ordinal: 562, Address: 0x25460)
- GetDiskFreeSpaceExW (Ordinal: 563, Address: 0x25470)
- GetDiskFreeSpaceW (Ordinal: 564, Address: 0x25480)
- GetDiskSpaceInformationA (Ordinal: 565, Address: 0xa1b10)
- GetDiskSpaceInformationW (Ordinal: 566, Address: 0xa1b5e)
- GetDllDirectoryA (Ordinal: 567, Address: 0x39410)
- GetDllDirectoryW (Ordinal: 568, Address: 0x22600)
- GetDriveTypeA (Ordinal: 569, Address: 0x25490)
- GetDriveTypeW (Ordinal: 570, Address: 0x254a0)
- GetDurationFormat (Ordinal: 571, Address: 0x4cf20)
- GetDurationFormatEx (Ordinal: 572, Address: 0x3b770)
- GetDynamicTimeZoneInformation (Ordinal: 573, Address: 0x216c0)
- GetEnabledXStateFeatures (Ordinal: 574, Address: 0x3b790)
- GetEncryptedFileVersionExt (Ordinal: 575, Address: 0x38fb0)
- GetEnvironmentStrings (Ordinal: 576, Address: 0x20500)
- GetEnvironmentStringsA (Ordinal: 577, Address: 0x25800)
- GetEnvironmentStringsW (Ordinal: 578, Address: 0x1fe10)
- GetEnvironmentVariableA (Ordinal: 579, Address: 0x1ead0)
- GetEnvironmentVariableW (Ordinal: 580, Address: 0x1bdb0)
- GetEraNameCountedString (Ordinal: 581, Address: 0x3b7b0)
- GetErrorMode (Ordinal: 582, Address: 0x22970)
- GetExitCodeProcess (Ordinal: 583, Address: 0x1d7e0)
- GetExitCodeThread (Ordinal: 584, Address: 0x20140)
- GetExpandedNameA (Ordinal: 585, Address: 0x3d510)
- GetExpandedNameW (Ordinal: 586, Address: 0x3d600)
- GetFileAttributesA (Ordinal: 587, Address: 0x254b0)
- GetFileAttributesExA (Ordinal: 588, Address: 0x254c0)
- GetFileAttributesExW (Ordinal: 589, Address: 0x254d0)
- GetFileAttributesTransactedA (Ordinal: 590, Address: 0x63e80)
- GetFileAttributesTransactedW (Ordinal: 591, Address: 0x63ef0)
- GetFileAttributesW (Ordinal: 592, Address: 0x254e0)
- GetFileBandwidthReservation (Ordinal: 593, Address: 0x387d0)
- GetFileInformationByHandle (Ordinal: 594, Address: 0x254f0)
- GetFileInformationByHandleEx (Ordinal: 595, Address: 0x1fdd0)
- GetFileMUIInfo (Ordinal: 596, Address: 0x3b7d0)
- GetFileMUIPath (Ordinal: 597, Address: 0x20120)
- GetFileSize (Ordinal: 598, Address: 0x25500)
- GetFileSizeEx (Ordinal: 599, Address: 0x25510)
- GetFileTime (Ordinal: 600, Address: 0x25520)
- GetFileType (Ordinal: 601, Address: 0x25530)
- GetFinalPathNameByHandleA (Ordinal: 602, Address: 0x25540)
- GetFinalPathNameByHandleW (Ordinal: 603, Address: 0x25550)
- GetFirmwareEnvironmentVariableA (Ordinal: 604, Address: 0x679c0)
- GetFirmwareEnvironmentVariableExA (Ordinal: 605, Address: 0x679e0)
- GetFirmwareEnvironmentVariableExW (Ordinal: 606, Address: 0x159d0)
- GetFirmwareEnvironmentVariableW (Ordinal: 607, Address: 0x67b10)
- GetFirmwareType (Ordinal: 608, Address: 0x22fa0)
- GetFullPathNameA (Ordinal: 609, Address: 0x25560)
- GetFullPathNameTransactedA (Ordinal: 610, Address: 0x381e0)
- GetFullPathNameTransactedW (Ordinal: 611, Address: 0x67d80)
- GetFullPathNameW (Ordinal: 612, Address: 0x25570)
- GetGeoInfoA (Ordinal: 613, Address: 0x4c660)
- GetGeoInfoEx (Ordinal: 614, Address: 0x54db0)
- GetGeoInfoW (Ordinal: 615, Address: 0x6020)
- GetHandleInformation (Ordinal: 616, Address: 0x25080)
- GetLargePageMinimum (Ordinal: 617, Address: 0x3b7f0)
- GetLargestConsoleWindowSize (Ordinal: 618, Address: 0x25c20)
- GetLastError (Ordinal: 619, Address: 0x161d0)
- GetLocalTime (Ordinal: 620, Address: 0x1e7a0)
- GetLocaleInfoA (Ordinal: 621, Address: 0x21350)
- GetLocaleInfoEx (Ordinal: 622, Address: 0x1d2c0)
- GetLocaleInfoW (Ordinal: 623, Address: 0x205a0)
- GetLogicalDriveStringsA (Ordinal: 624, Address: 0x18490)
- GetLogicalDriveStringsW (Ordinal: 625, Address: 0x25580)
- GetLogicalDrives (Ordinal: 626, Address: 0x18550)
- GetLogicalProcessorInformation (Ordinal: 627, Address: 0x217f0)
- GetLogicalProcessorInformationEx (Ordinal: 628, Address: 0xa20aa)
- GetLongPathNameA (Ordinal: 629, Address: 0x5a2c0)
- GetLongPathNameTransactedA (Ordinal: 630, Address: 0x41340)
- GetLongPathNameTransactedW (Ordinal: 631, Address: 0x61970)
- GetLongPathNameW (Ordinal: 632, Address: 0x68c0)
- GetMailslotInfo (Ordinal: 633, Address: 0x635b0)
- GetMaximumProcessorCount (Ordinal: 634, Address: 0x670a0)
- GetMaximumProcessorGroupCount (Ordinal: 635, Address: 0x22f40)
- GetMemoryErrorHandlingCapabilities (Ordinal: 636, Address: 0x3b810)
- GetModuleFileNameA (Ordinal: 637, Address: 0x1f920)
- GetModuleFileNameW (Ordinal: 638, Address: 0x1e6a0)
- GetModuleHandleA (Ordinal: 639, Address: 0x1f830)
- GetModuleHandleExA (Ordinal: 640, Address: 0x21710)
- GetModuleHandleExW (Ordinal: 641, Address: 0x1fdb0)
- GetModuleHandleW (Ordinal: 642, Address: 0x1d8b0)
- GetNLSVersion (Ordinal: 643, Address: 0x22910)
- GetNLSVersionEx (Ordinal: 644, Address: 0x3b830)
- GetNamedPipeAttribute (Ordinal: 645, Address: 0x3b850)
- GetNamedPipeClientComputerNameA (Ordinal: 646, Address: 0x61e30)
- GetNamedPipeClientComputerNameW (Ordinal: 647, Address: 0x3b870)
- GetNamedPipeClientProcessId (Ordinal: 648, Address: 0x61f80)
- GetNamedPipeClientSessionId (Ordinal: 649, Address: 0x39690)
- GetNamedPipeHandleStateA (Ordinal: 650, Address: 0x61fc0)
- GetNamedPipeHandleStateW (Ordinal: 651, Address: 0x3b890)
- GetNamedPipeInfo (Ordinal: 652, Address: 0xa2309)
- GetNamedPipeServerProcessId (Ordinal: 653, Address: 0x62150)
- GetNamedPipeServerSessionId (Ordinal: 654, Address: 0x396f0)
- GetNativeSystemInfo (Ordinal: 655, Address: 0x20e00)
- GetNextUmsListItem (Ordinal: 656, Address: 0x42a60)
- GetNextVDMCommand (Ordinal: 657, Address: 0x41410)
- GetNumaAvailableMemoryNode (Ordinal: 658, Address: 0x39940)
- GetNumaAvailableMemoryNodeEx (Ordinal: 659, Address: 0x68320)
- GetNumaHighestNodeNumber (Ordinal: 660, Address: 0x20fe0)
- GetNumaNodeNumberFromHandle (Ordinal: 661, Address: 0x39950)
- GetNumaNodeProcessorMask (Ordinal: 662, Address: 0x683b0)
- GetNumaNodeProcessorMaskEx (Ordinal: 663, Address: 0x3b8b0)
- GetNumaProcessorNode (Ordinal: 664, Address: 0x399b0)
- GetNumaProcessorNodeEx (Ordinal: 665, Address: 0x68430)
- GetNumaProximityNode (Ordinal: 666, Address: 0x39a20)
- GetNumaProximityNodeEx (Ordinal: 667, Address: 0x3b8d0)
- GetNumberFormatA (Ordinal: 668, Address: 0x1b670)
- GetNumberFormatEx (Ordinal: 669, Address: 0x21d40)
- GetNumberFormatW (Ordinal: 670, Address: 0x1060)
- GetNumberOfConsoleFonts (Ordinal: 671, Address: 0x6ac30)
- GetNumberOfConsoleInputEvents (Ordinal: 672, Address: 0x25a90)
- GetNumberOfConsoleMouseButtons (Ordinal: 673, Address: 0x25f60)
- GetOEMCP (Ordinal: 674, Address: 0x21a40)
- GetOverlappedResult (Ordinal: 675, Address: 0x1ce40)
- GetOverlappedResultEx (Ordinal: 676, Address: 0xa2561)
- GetPackageApplicationIds (Ordinal: 677, Address: 0xa25aa)
- GetPackageFamilyName (Ordinal: 678, Address: 0xa25e3)
- GetPackageFullName (Ordinal: 679, Address: 0xa2616)
- GetPackageId (Ordinal: 680, Address: 0xa2641)
- GetPackageInfo (Ordinal: 681, Address: 0xa2668)
- GetPackagePath (Ordinal: 682, Address: 0xa2691)
- GetPackagePathByFullName (Ordinal: 683, Address: 0xa26c4)
- GetPackagesByPackageFamily (Ordinal: 684, Address: 0xa2703)
- GetPhysicallyInstalledSystemMemory (Ordinal: 685, Address: 0x1270)
- GetPriorityClass (Ordinal: 686, Address: 0x21840)
- GetPrivateProfileIntA (Ordinal: 687, Address: 0x15950)
- GetPrivateProfileIntW (Ordinal: 688, Address: 0x131b0)
- GetPrivateProfileSectionA (Ordinal: 689, Address: 0x23900)
- GetPrivateProfileSectionNamesA (Ordinal: 690, Address: 0x60c60)
- GetPrivateProfileSectionNamesW (Ordinal: 691, Address: 0x60c90)
- GetPrivateProfileSectionW (Ordinal: 692, Address: 0x21450)
- GetPrivateProfileStringA (Ordinal: 693, Address: 0x15840)
- GetPrivateProfileStringW (Ordinal: 694, Address: 0x12360)
- GetPrivateProfileStructA (Ordinal: 695, Address: 0x60cc0)
- GetPrivateProfileStructW (Ordinal: 696, Address: 0x60e60)
- GetProcAddress (Ordinal: 697, Address: 0x1b650)
- GetProcessAffinityMask (Ordinal: 698, Address: 0x1c890)
- GetProcessDEPPolicy (Ordinal: 699, Address: 0x3a650)
- GetProcessDefaultCpuSets (Ordinal: 700, Address: 0xa28b2)
- GetProcessGroupAffinity (Ordinal: 701, Address: 0x3b8f0)
- GetProcessHandleCount (Ordinal: 702, Address: 0x3b910)
- GetProcessHeap (Ordinal: 703, Address: 0x16190)
- GetProcessHeaps (Ordinal: 704, Address: 0x3b930)
- GetProcessId (Ordinal: 705, Address: 0x1d750)
- GetProcessIdOfThread (Ordinal: 706, Address: 0x20f60)
- GetProcessInformation (Ordinal: 707, Address: 0x25020)
- GetProcessIoCounters (Ordinal: 708, Address: 0x20540)
- GetProcessMitigationPolicy (Ordinal: 709, Address: 0xa29a6)
- GetProcessPreferredUILanguages (Ordinal: 710, Address: 0x245f0)
- GetProcessPriorityBoost (Ordinal: 711, Address: 0x3b950)
- GetProcessShutdownParameters (Ordinal: 712, Address: 0x3b970)
- GetProcessTimes (Ordinal: 713, Address: 0x1b260)
- GetProcessVersion (Ordinal: 714, Address: 0x22820)
- GetProcessWorkingSetSize (Ordinal: 715, Address: 0x44640)
- GetProcessWorkingSetSizeEx (Ordinal: 716, Address: 0x3b990)
- GetProcessorSystemCycleTime (Ordinal: 717, Address: 0xa2aad)
- GetProductInfo (Ordinal: 718, Address: 0x218d0)
- GetProfileIntA (Ordinal: 719, Address: 0x159c0)
- GetProfileIntW (Ordinal: 720, Address: 0x13520)
- GetProfileSectionA (Ordinal: 721, Address: 0x61010)
- GetProfileSectionW (Ordinal: 722, Address: 0x61020)
- GetProfileStringA (Ordinal: 723, Address: 0x61030)
- GetProfileStringW (Ordinal: 724, Address: 0x61060)
- GetQueuedCompletionStatus (Ordinal: 725, Address: 0x163b0)
- GetQueuedCompletionStatusEx (Ordinal: 726, Address: 0x3b9b0)
- GetShortPathNameA (Ordinal: 727, Address: 0x61a40)
- GetShortPathNameW (Ordinal: 728, Address: 0x6400)
- GetStagedPackagePathByFullName (Ordinal: 729, Address: 0xa2bd8)
- GetStartupInfoA (Ordinal: 730, Address: 0x220e0)
- GetStartupInfoW (Ordinal: 731, Address: 0x1dfb0)
- GetStateFolder (Ordinal: 732, Address: 0xa2c31)
- GetStdHandle (Ordinal: 733, Address: 0x1dc10)
- GetStringScripts (Ordinal: 734, Address: 0x3b9d0)
- GetStringTypeA (Ordinal: 735, Address: 0x3b9f0)
- GetStringTypeExA (Ordinal: 736, Address: 0x3b9f0)
- GetStringTypeExW (Ordinal: 737, Address: 0x22df0)
- GetStringTypeW (Ordinal: 738, Address: 0x1eab0)
- GetSystemAppDataKey (Ordinal: 739, Address: 0xa2cbd)
- GetSystemCpuSetInformation (Ordinal: 740, Address: 0xa2cf7)
- GetSystemDEPPolicy (Ordinal: 741, Address: 0x3a6a0)
- GetSystemDefaultLCID (Ordinal: 742, Address: 0x21430)
- GetSystemDefaultLangID (Ordinal: 743, Address: 0x21770)
- GetSystemDefaultLocaleName (Ordinal: 744, Address: 0x1100)
- GetSystemDefaultUILanguage (Ordinal: 745, Address: 0x20de0)
- GetSystemDirectoryA (Ordinal: 746, Address: 0x1db60)
- GetSystemDirectoryW (Ordinal: 747, Address: 0x1b590)
- GetSystemFileCacheSize (Ordinal: 748, Address: 0x3ba10)
- GetSystemFirmwareTable (Ordinal: 749, Address: 0x39100)
- GetSystemInfo (Ordinal: 750, Address: 0x1e330)
- GetSystemPowerStatus (Ordinal: 751, Address: 0x18350)
- GetSystemPreferredUILanguages (Ordinal: 752, Address: 0x21ac0)
- GetSystemRegistryQuota (Ordinal: 753, Address: 0x3a6e0)
- GetSystemTime (Ordinal: 754, Address: 0x1bd10)
- GetSystemTimeAdjustment (Ordinal: 755, Address: 0x20ec0)
- GetSystemTimeAsFileTime (Ordinal: 756, Address: 0x18310)
- GetSystemTimePreciseAsFileTime (Ordinal: 757, Address: 0x257c0)
- GetSystemTimes (Ordinal: 758, Address: 0x20410)
- GetSystemWindowsDirectoryA (Ordinal: 759, Address: 0x3ba30)
- GetSystemWindowsDirectoryW (Ordinal: 760, Address: 0x9110)
- GetSystemWow64DirectoryA (Ordinal: 761, Address: 0x25930)
- GetSystemWow64DirectoryW (Ordinal: 762, Address: 0x25940)
- GetTapeParameters (Ordinal: 763, Address: 0x68600)
- GetTapePosition (Ordinal: 764, Address: 0x43c60)
- GetTapeStatus (Ordinal: 765, Address: 0x43cf0)
- GetTempFileNameA (Ordinal: 766, Address: 0x25590)
- GetTempFileNameW (Ordinal: 767, Address: 0x255a0)
- GetTempPathA (Ordinal: 768, Address: 0x255b0)
- GetTempPathW (Ordinal: 769, Address: 0x255c0)
- GetThreadContext (Ordinal: 770, Address: 0x20cf0)
- GetThreadDescription (Ordinal: 771, Address: 0xa2fc1)
- GetThreadErrorMode (Ordinal: 772, Address: 0x3ba40)
- GetThreadGroupAffinity (Ordinal: 773, Address: 0x3ba60)
- GetThreadIOPendingFlag (Ordinal: 774, Address: 0x3ba80)
- GetThreadId (Ordinal: 775, Address: 0x21390)
- GetThreadIdealProcessorEx (Ordinal: 776, Address: 0x3baa0)
- GetThreadInformation (Ordinal: 777, Address: 0x25030)
- GetThreadLocale (Ordinal: 778, Address: 0x1a880)
- GetThreadPreferredUILanguages (Ordinal: 779, Address: 0x1d830)
- GetThreadPriority (Ordinal: 780, Address: 0x1c000)
- GetThreadPriorityBoost (Ordinal: 781, Address: 0x3bac0)
- GetThreadSelectedCpuSets (Ordinal: 782, Address: 0xa30e8)
- GetThreadSelectorEntry (Ordinal: 783, Address: 0x68660)
- GetThreadTimes (Ordinal: 784, Address: 0x16210)
- GetThreadUILanguage (Ordinal: 785, Address: 0x24ab0)
- GetTickCount (Ordinal: 786, Address: 0x15c20)
- GetTickCount64 (Ordinal: 787, Address: 0x16310)
- GetTimeFormatA (Ordinal: 788, Address: 0x3bae0)
- GetTimeFormatAWorker (Ordinal: 789, Address: 0x24610)
- GetTimeFormatEx (Ordinal: 790, Address: 0x3bb00)
- GetTimeFormatW (Ordinal: 791, Address: 0x1f940)
- GetTimeFormatWWorker (Ordinal: 792, Address: 0x9a80)
- GetTimeZoneInformation (Ordinal: 793, Address: 0x21080)
- GetTimeZoneInformationForYear (Ordinal: 794, Address: 0x1070)
- GetUILanguageInfo (Ordinal: 795, Address: 0x3bb20)
- GetUmsCompletionListEvent (Ordinal: 796, Address: 0x42aa0)
- GetUmsSystemThreadInformation (Ordinal: 797, Address: 0x42ae0)
- GetUserDefaultGeoName (Ordinal: 798, Address: 0x54f10)
- GetUserDefaultLCID (Ordinal: 799, Address: 0x20320)
- GetUserDefaultLangID (Ordinal: 800, Address: 0x3bb40)
- GetUserDefaultLocaleName (Ordinal: 801, Address: 0x1eaf0)
- GetUserDefaultUILanguage (Ordinal: 802, Address: 0x212b0)
- GetUserGeoID (Ordinal: 803, Address: 0x1f960)
- GetUserPreferredUILanguages (Ordinal: 804, Address: 0x20d10)
- GetVDMCurrentDirectories (Ordinal: 805, Address: 0x41dd0)
- GetVersion (Ordinal: 806, Address: 0x21790)
- GetVersionExA (Ordinal: 807, Address: 0x20b80)
- GetVersionExW (Ordinal: 808, Address: 0x20100)
- GetVolumeInformationA (Ordinal: 809, Address: 0x255d0)
- GetVolumeInformationByHandleW (Ordinal: 810, Address: 0x255e0)
- GetVolumeInformationW (Ordinal: 811, Address: 0x255f0)
- GetVolumeNameForVolumeMountPointA (Ordinal: 812, Address: 0x24750)
- GetVolumeNameForVolumeMountPointW (Ordinal: 813, Address: 0x24ff0)
- GetVolumePathNameA (Ordinal: 814, Address: 0x66600)
- GetVolumePathNameW (Ordinal: 815, Address: 0x25600)
- GetVolumePathNamesForVolumeNameA (Ordinal: 816, Address: 0x667e0)
- GetVolumePathNamesForVolumeNameW (Ordinal: 817, Address: 0x25610)
- GetWindowsDirectoryA (Ordinal: 818, Address: 0x229b0)
- GetWindowsDirectoryW (Ordinal: 819, Address: 0x23040)
- GetWriteWatch (Ordinal: 820, Address: 0x161b0)
- GetXStateFeaturesMask (Ordinal: 821, Address: 0x3bb60)
- GlobalAddAtomA (Ordinal: 822, Address: 0x12660)
- GlobalAddAtomExA (Ordinal: 823, Address: 0x5a800)
- GlobalAddAtomExW (Ordinal: 824, Address: 0x13190)
- GlobalAddAtomW (Ordinal: 825, Address: 0x12910)
- GlobalAlloc (Ordinal: 826, Address: 0x185a0)
- GlobalCompact (Ordinal: 827, Address: 0x39120)
- GlobalDeleteAtom (Ordinal: 828, Address: 0x12850)
- GlobalFindAtomA (Ordinal: 829, Address: 0x5a820)
- GlobalFindAtomW (Ordinal: 830, Address: 0x12e00)
- GlobalFix (Ordinal: 831, Address: 0x39140)
- GlobalFlags (Ordinal: 832, Address: 0x20190)
- GlobalFree (Ordinal: 833, Address: 0x16130)
- GlobalGetAtomNameA (Ordinal: 834, Address: 0x5a840)
- GlobalGetAtomNameW (Ordinal: 835, Address: 0x12680)
- GlobalHandle (Ordinal: 836, Address: 0x20870)
- GlobalLock (Ordinal: 837, Address: 0x15f70)
- GlobalMemoryStatus (Ordinal: 838, Address: 0x1d080)
- GlobalMemoryStatusEx (Ordinal: 839, Address: 0x20cb0)
- GlobalReAlloc (Ordinal: 840, Address: 0x17190)
- GlobalSize (Ordinal: 841, Address: 0x185c0)
- GlobalUnWire (Ordinal: 842, Address: 0x39160)
- GlobalUnfix (Ordinal: 843, Address: 0x39170)
- GlobalUnlock (Ordinal: 844, Address: 0x15e90)
- GlobalWire (Ordinal: 845, Address: 0x39190)
- Heap32First (Ordinal: 846, Address: 0x64810)
- Heap32ListFirst (Ordinal: 847, Address: 0x64ab0)
- Heap32ListNext (Ordinal: 848, Address: 0x64bb0)
- Heap32Next (Ordinal: 849, Address: 0x64cb0)
- HeapAlloc (Ordinal: 850, Address: 0xa360d)
- HeapCompact (Ordinal: 851, Address: 0x3bb80)
- HeapCreate (Ordinal: 852, Address: 0x206d0)
- HeapDestroy (Ordinal: 853, Address: 0x21a20)
- HeapFree (Ordinal: 854, Address: 0x15b50)
- HeapLock (Ordinal: 855, Address: 0x3bba0)
- HeapQueryInformation (Ordinal: 856, Address: 0x3bbc0)
- HeapReAlloc (Ordinal: 857, Address: 0xa3679)
- HeapSetInformation (Ordinal: 858, Address: 0x20b60)
- HeapSize (Ordinal: 859, Address: 0xa36ad)
- HeapSummary (Ordinal: 860, Address: 0x3bbe0)
- HeapUnlock (Ordinal: 861, Address: 0x3bc00)
- HeapValidate (Ordinal: 862, Address: 0x1c870)
- HeapWalk (Ordinal: 863, Address: 0x3bc20)
- IdnToAscii (Ordinal: 864, Address: 0x1090)
- IdnToNameprepUnicode (Ordinal: 865, Address: 0x3bc40)
- IdnToUnicode (Ordinal: 866, Address: 0x3bc60)
- InitAtomTable (Ordinal: 867, Address: 0x5a870)
- InitOnceBeginInitialize (Ordinal: 868, Address: 0xa373f)
- InitOnceComplete (Ordinal: 869, Address: 0xa3785)
- InitOnceExecuteOnce (Ordinal: 870, Address: 0xa37c7)
- InitOnceInitialize (Ordinal: 871, Address: 0xa380b)
- InitializeConditionVariable (Ordinal: 872, Address: 0xa3842)
- InitializeContext (Ordinal: 873, Address: 0x3bca0)
- InitializeContext2 (Ordinal: 874, Address: 0x3bc80)
- InitializeCriticalSection (Ordinal: 875, Address: 0xa38a6)
- InitializeCriticalSectionAndSpinCount (Ordinal: 876, Address: 0x25160)
- InitializeCriticalSectionEx (Ordinal: 877, Address: 0x25170)
- InitializeEnclave (Ordinal: 878, Address: 0xa391d)
- InitializeProcThreadAttributeList (Ordinal: 879, Address: 0xa3970)
- InitializeSListHead (Ordinal: 880, Address: 0xa39cc)
- InitializeSRWLock (Ordinal: 881, Address: 0xa39fb)
- InitializeSynchronizationBarrier (Ordinal: 882, Address: 0x3bcc0)
- InstallELAMCertificateInfo (Ordinal: 883, Address: 0xa3a52)
- InterlockedFlushSList (Ordinal: 884, Address: 0xa3aa2)
- InterlockedPopEntrySList (Ordinal: 885, Address: 0xa3ada)
- InterlockedPushEntrySList (Ordinal: 886, Address: 0xa3b16)
- InterlockedPushListSList (Ordinal: 887, Address: 0xa3b52)
- InterlockedPushListSListEx (Ordinal: 888, Address: 0xa3b8f)
- InvalidateConsoleDIBits (Ordinal: 889, Address: 0x6ad50)
- IsBadCodePtr (Ordinal: 890, Address: 0x3a770)
- IsBadHugeReadPtr (Ordinal: 891, Address: 0x3a780)
- IsBadHugeWritePtr (Ordinal: 892, Address: 0x3a790)
- IsBadReadPtr (Ordinal: 893, Address: 0x16080)
- IsBadStringPtrA (Ordinal: 894, Address: 0x3a7a0)
- IsBadStringPtrW (Ordinal: 895, Address: 0x3a7f0)
- IsBadWritePtr (Ordinal: 896, Address: 0x67160)
- IsCalendarLeapDay (Ordinal: 897, Address: 0x4b6b0)
- IsCalendarLeapMonth (Ordinal: 898, Address: 0x4b790)
- IsCalendarLeapYear (Ordinal: 899, Address: 0x4b880)
- IsDBCSLeadByte (Ordinal: 900, Address: 0x220c0)
- IsDBCSLeadByteEx (Ordinal: 901, Address: 0x3bce0)
- IsDebuggerPresent (Ordinal: 902, Address: 0x20930)
- IsEnclaveTypeSupported (Ordinal: 903, Address: 0xa3cb8)
- IsNLSDefinedString (Ordinal: 904, Address: 0x3bd00)
- IsNativeVhdBoot (Ordinal: 905, Address: 0x37fa0)
- IsNormalizedString (Ordinal: 906, Address: 0x3bd20)
- IsProcessCritical (Ordinal: 907, Address: 0xa3d36)
- IsProcessInJob (Ordinal: 908, Address: 0x21040)
- IsProcessorFeaturePresent (Ordinal: 909, Address: 0x1e2c0)
- IsSystemResumeAutomatic (Ordinal: 910, Address: 0x39c70)
- IsThreadAFiber (Ordinal: 911, Address: 0x1d870)
- IsThreadpoolTimerSet (Ordinal: 912, Address: 0xa3dd3)
- IsUserCetAvailableInEnvironment (Ordinal: 913, Address: 0xa3e06)
- IsValidCalDateTime (Ordinal: 914, Address: 0x82b0)
- IsValidCodePage (Ordinal: 915, Address: 0x203f0)
- IsValidLanguageGroup (Ordinal: 916, Address: 0x3bd40)
- IsValidLocale (Ordinal: 917, Address: 0x20620)
- IsValidLocaleName (Ordinal: 918, Address: 0x3bd60)
- IsValidNLSVersion (Ordinal: 919, Address: 0x3bd80)
- IsWow64GuestMachineSupported (Ordinal: 920, Address: 0xa3ecc)
- IsWow64Process (Ordinal: 921, Address: 0x1fdf0)
- IsWow64Process2 (Ordinal: 922, Address: 0xa3f25)
- K32EmptyWorkingSet (Ordinal: 923, Address: 0x3bda0)
- K32EnumDeviceDrivers (Ordinal: 924, Address: 0x3bdc0)
- K32EnumPageFilesA (Ordinal: 925, Address: 0x3bde0)
- K32EnumPageFilesW (Ordinal: 926, Address: 0x3be00)
- K32EnumProcessModules (Ordinal: 927, Address: 0x21860)
- K32EnumProcessModulesEx (Ordinal: 928, Address: 0x3be20)
- K32EnumProcesses (Ordinal: 929, Address: 0x3be40)
- K32GetDeviceDriverBaseNameA (Ordinal: 930, Address: 0x3be60)
- K32GetDeviceDriverBaseNameW (Ordinal: 931, Address: 0x3be80)
- K32GetDeviceDriverFileNameA (Ordinal: 932, Address: 0x3bea0)
- K32GetDeviceDriverFileNameW (Ordinal: 933, Address: 0x3bec0)
- K32GetMappedFileNameA (Ordinal: 934, Address: 0x3bee0)
- K32GetMappedFileNameW (Ordinal: 935, Address: 0x3bf00)
- K32GetModuleBaseNameA (Ordinal: 936, Address: 0x3bf20)
- K32GetModuleBaseNameW (Ordinal: 937, Address: 0x3bf40)
- K32GetModuleFileNameExA (Ordinal: 938, Address: 0x3bf60)
- K32GetModuleFileNameExW (Ordinal: 939, Address: 0x24a70)
- K32GetModuleInformation (Ordinal: 940, Address: 0x1f850)
- K32GetPerformanceInfo (Ordinal: 941, Address: 0x3bf80)
- K32GetProcessImageFileNameA (Ordinal: 942, Address: 0x3bfa0)
- K32GetProcessImageFileNameW (Ordinal: 943, Address: 0x207e0)
- K32GetProcessMemoryInfo (Ordinal: 944, Address: 0x3bfc0)
- K32GetWsChanges (Ordinal: 945, Address: 0x3c000)
- K32GetWsChangesEx (Ordinal: 946, Address: 0x3bfe0)
- K32InitializeProcessForWsWatch (Ordinal: 947, Address: 0x3c020)
- K32QueryWorkingSet (Ordinal: 948, Address: 0x3c060)
- K32QueryWorkingSetEx (Ordinal: 949, Address: 0x3c040)
- LCIDToLocaleName (Ordinal: 950, Address: 0x20dc0)
- LCMapStringA (Ordinal: 951, Address: 0x3c080)
- LCMapStringEx (Ordinal: 952, Address: 0x162b0)
- LCMapStringW (Ordinal: 953, Address: 0x18c30)
- LZClose (Ordinal: 954, Address: 0x3d730)
- LZCloseFile (Ordinal: 955, Address: 0x3d7f0)
- LZCopy (Ordinal: 956, Address: 0x380d0)
- LZCreateFileW (Ordinal: 957, Address: 0x3d8c0)
- LZDone (Ordinal: 958, Address: 0x381d0)
- LZInit (Ordinal: 959, Address: 0x3da00)
- LZOpenFileA (Ordinal: 960, Address: 0x3dbb0)
- LZOpenFileW (Ordinal: 961, Address: 0x3dca0)
- LZRead (Ordinal: 962, Address: 0x3dd60)
- LZSeek (Ordinal: 963, Address: 0x3dfd0)
- LZStart (Ordinal: 964, Address: 0x21b60)
- LeaveCriticalSection (Ordinal: 965, Address: 0xa426f)
- LeaveCriticalSectionWhenCallbackReturns (Ordinal: 966, Address: 0xa42b5)
- LoadAppInitDlls (Ordinal: 967, Address: 0x18720)
- LoadEnclaveData (Ordinal: 968, Address: 0xa4306)
- LoadLibraryA (Ordinal: 969, Address: 0x20c70)
- LoadLibraryExA (Ordinal: 970, Address: 0x20340)
- LoadLibraryExW (Ordinal: 971, Address: 0x1b550)
- LoadLibraryW (Ordinal: 972, Address: 0x20660)
- LoadModule (Ordinal: 973, Address: 0x671f0)
- LoadPackagedLibrary (Ordinal: 974, Address: 0x257a0)
- LoadResource (Ordinal: 975, Address: 0x1baf0)
- LoadStringBaseExW (Ordinal: 976, Address: 0x3c0a0)
- LoadStringBaseW (Ordinal: 977, Address: 0x392d0)
- LocalAlloc (Ordinal: 978, Address: 0x18c50)
- LocalCompact (Ordinal: 979, Address: 0x39120)
- LocalFileTimeToFileTime (Ordinal: 980, Address: 0x25620)
- LocalFileTimeToLocalSystemTime (Ordinal: 981, Address: 0xa440a)
- LocalFlags (Ordinal: 982, Address: 0x68680)
- LocalFree (Ordinal: 983, Address: 0x182f0)
- LocalHandle (Ordinal: 984, Address: 0x391d0)
- LocalLock (Ordinal: 985, Address: 0x3c0c0)
- LocalReAlloc (Ordinal: 986, Address: 0x204e0)
- LocalShrink (Ordinal: 987, Address: 0x39120)
- LocalSize (Ordinal: 988, Address: 0x1bbb0)
- LocalSystemTimeToLocalFileTime (Ordinal: 989, Address: 0xa44b6)
- LocalUnlock (Ordinal: 990, Address: 0x3c0e0)
- LocaleNameToLCID (Ordinal: 991, Address: 0x1e800)
- LocateXStateFeature (Ordinal: 992, Address: 0x3c100)
- LockFile (Ordinal: 993, Address: 0x25630)
- LockFileEx (Ordinal: 994, Address: 0x25640)
- LockResource (Ordinal: 995, Address: 0x1bb50)
- MapUserPhysicalPages (Ordinal: 996, Address: 0x3c120)
- MapUserPhysicalPagesScatter (Ordinal: 997, Address: 0x44670)
- MapViewOfFile (Ordinal: 998, Address: 0x1df70)
- MapViewOfFileEx (Ordinal: 999, Address: 0x1d170)
- MapViewOfFileExNuma (Ordinal: 1000, Address: 0x3c140)
- MapViewOfFileFromApp (Ordinal: 1001, Address: 0xa45bf)
- Module32First (Ordinal: 1002, Address: 0x64f60)
- Module32FirstW (Ordinal: 1003, Address: 0x1e350)
- Module32Next (Ordinal: 1004, Address: 0x650a0)
- Module32NextW (Ordinal: 1005, Address: 0x1a730)
- MoveFileA (Ordinal: 1006, Address: 0x63fd0)
- MoveFileExA (Ordinal: 1007, Address: 0x64000)
- MoveFileExW (Ordinal: 1008, Address: 0x21410)
- MoveFileTransactedA (Ordinal: 1009, Address: 0x64030)
- MoveFileTransactedW (Ordinal: 1010, Address: 0x24530)
- MoveFileW (Ordinal: 1011, Address: 0x23010)
- MoveFileWithProgressA (Ordinal: 1012, Address: 0x64110)
- MoveFileWithProgressW (Ordinal: 1013, Address: 0x3c160)
- MulDiv (Ordinal: 1014, Address: 0x25780)
- MultiByteToWideChar (Ordinal: 1015, Address: 0x15df0)
- NeedCurrentDirectoryForExePathA (Ordinal: 1016, Address: 0x3c180)
- NeedCurrentDirectoryForExePathW (Ordinal: 1017, Address: 0x3c1a0)
- NlsCheckPolicy (Ordinal: 1018, Address: 0x259d0)
- NlsGetCacheUpdateCount (Ordinal: 1019, Address: 0x259e0)
- NlsUpdateLocale (Ordinal: 1020, Address: 0x259f0)
- NlsUpdateSystemLocale (Ordinal: 1021, Address: 0x25a00)
- NormalizeString (Ordinal: 1022, Address: 0x3c1c0)
- NotifyMountMgr (Ordinal: 1023, Address: 0x3c1e0)
- NotifyUILanguageChange (Ordinal: 1024, Address: 0x4ea60)
- NtVdm64CreateProcessInternalW (Ordinal: 1025, Address: 0x3a850)
- OOBEComplete (Ordinal: 1026, Address: 0x1f200)
- OfferVirtualMemory (Ordinal: 1027, Address: 0xa47c5)
- OpenConsoleW (Ordinal: 1028, Address: 0x6a160)
- OpenConsoleWStub (Ordinal: 1029, Address: 0x3c200)
- OpenEventA (Ordinal: 1030, Address: 0x25180)
- OpenEventW (Ordinal: 1031, Address: 0x25190)
- OpenFile (Ordinal: 1032, Address: 0x62b00)
- OpenFileById (Ordinal: 1033, Address: 0x3c210)
- OpenFileMappingA (Ordinal: 1034, Address: 0x21d90)
- OpenFileMappingW (Ordinal: 1035, Address: 0x20ea0)
- OpenJobObjectA (Ordinal: 1036, Address: 0x5c990)
- OpenJobObjectW (Ordinal: 1037, Address: 0x5ca10)
- OpenMutexA (Ordinal: 1038, Address: 0x1c7a0)
- OpenMutexW (Ordinal: 1039, Address: 0x251a0)
- OpenPackageInfoByFullName (Ordinal: 1040, Address: 0xa48b0)
- OpenPrivateNamespaceA (Ordinal: 1041, Address: 0x62490)
- OpenPrivateNamespaceW (Ordinal: 1042, Address: 0x22a10)
- OpenProcess (Ordinal: 1043, Address: 0x1b570)
- OpenProcessToken (Ordinal: 1044, Address: 0xa491e)
- OpenProfileUserMapping (Ordinal: 1045, Address: 0x21b60)
- OpenSemaphoreA (Ordinal: 1046, Address: 0x637d0)
- OpenSemaphoreW (Ordinal: 1047, Address: 0x251b0)
- OpenState (Ordinal: 1048, Address: 0xa4994)
- OpenStateExplicit (Ordinal: 1049, Address: 0xa49bb)
- OpenThread (Ordinal: 1050, Address: 0x1cfd0)
- OpenThreadToken (Ordinal: 1051, Address: 0xa49f3)
- OpenWaitableTimerA (Ordinal: 1052, Address: 0x63840)
- OpenWaitableTimerW (Ordinal: 1053, Address: 0x251c0)
- OutputDebugStringA (Ordinal: 1054, Address: 0x24a50)
- OutputDebugStringW (Ordinal: 1055, Address: 0x1d890)
- PackageFamilyNameFromFullName (Ordinal: 1056, Address: 0xa4a93)
- PackageFamilyNameFromId (Ordinal: 1057, Address: 0xa4ad4)
- PackageFullNameFromId (Ordinal: 1058, Address: 0xa4b0d)
- PackageIdFromFullName (Ordinal: 1059, Address: 0xa4b44)
- PackageNameAndPublisherIdFromFamilyName (Ordinal: 1060, Address: 0xa4b8d)
- ParseApplicationUserModelId (Ordinal: 1061, Address: 0xa4bdc)
- PeekConsoleInputA (Ordinal: 1062, Address: 0x25aa0)
- PeekConsoleInputW (Ordinal: 1063, Address: 0x25ab0)
- PeekNamedPipe (Ordinal: 1064, Address: 0x3c230)
- PostQueuedCompletionStatus (Ordinal: 1065, Address: 0x1bb30)
- PowerClearRequest (Ordinal: 1066, Address: 0x20450)
- PowerCreateRequest (Ordinal: 1067, Address: 0x1f580)
- PowerSetRequest (Ordinal: 1068, Address: 0x20360)
- PrefetchVirtualMemory (Ordinal: 1069, Address: 0xa4c9b)
- PrepareTape (Ordinal: 1070, Address: 0x43d20)
- PrivCopyFileExW (Ordinal: 1071, Address: 0x22db0)
- PrivMoveFileIdentityW (Ordinal: 1072, Address: 0x64220)
- Process32First (Ordinal: 1073, Address: 0x651d0)
- Process32FirstW (Ordinal: 1074, Address: 0x22e10)
- Process32Next (Ordinal: 1075, Address: 0x652d0)
- Process32NextW (Ordinal: 1076, Address: 0x22bb0)
- ProcessIdToSessionId (Ordinal: 1077, Address: 0x1cf70)
- PssCaptureSnapshot (Ordinal: 1078, Address: 0x3c250)
- PssDuplicateSnapshot (Ordinal: 1079, Address: 0x3c270)
- PssFreeSnapshot (Ordinal: 1080, Address: 0x3c290)
- PssQuerySnapshot (Ordinal: 1081, Address: 0x3c2b0)
- PssWalkMarkerCreate (Ordinal: 1082, Address: 0x3c2d0)
- PssWalkMarkerFree (Ordinal: 1083, Address: 0x3c2f0)
- PssWalkMarkerGetPosition (Ordinal: 1084, Address: 0x3c310)
- PssWalkMarkerRewind (Ordinal: 1085, Address: 0x3c330)
- PssWalkMarkerSeek (Ordinal: 1086, Address: 0x3c350)
- PssWalkMarkerSeekToBeginning (Ordinal: 1087, Address: 0x3c330)
- PssWalkMarkerSetPosition (Ordinal: 1088, Address: 0x3c350)
- PssWalkMarkerTell (Ordinal: 1089, Address: 0x3c310)
- PssWalkSnapshot (Ordinal: 1090, Address: 0x3c370)
- PulseEvent (Ordinal: 1091, Address: 0x1ca30)
- PurgeComm (Ordinal: 1092, Address: 0x258a0)
- QueryActCtxSettingsW (Ordinal: 1093, Address: 0x3c390)
- QueryActCtxSettingsWWorker (Ordinal: 1094, Address: 0x12b70)
- QueryActCtxW (Ordinal: 1095, Address: 0x1e720)
- QueryActCtxWWorker (Ordinal: 1096, Address: 0x124d0)
- QueryDepthSList (Ordinal: 1097, Address: 0xa4ecd)
- QueryDosDeviceA (Ordinal: 1098, Address: 0x65470)
- QueryDosDeviceW (Ordinal: 1099, Address: 0x25650)
- QueryFullProcessImageNameA (Ordinal: 1100, Address: 0x3c3b0)
- QueryFullProcessImageNameW (Ordinal: 1101, Address: 0x1cff0)
- QueryIdleProcessorCycleTime (Ordinal: 1102, Address: 0x22680)
- QueryIdleProcessorCycleTimeEx (Ordinal: 1103, Address: 0x3c3d0)
- QueryInformationJobObject (Ordinal: 1104, Address: 0x1dfd0)
- QueryIoRateControlInformationJobObject (Ordinal: 1105, Address: 0x5cae0)
- QueryMemoryResourceNotification (Ordinal: 1106, Address: 0x3c3f0)
- QueryPerformanceCounter (Ordinal: 1107, Address: 0x161f0)
- QueryPerformanceFrequency (Ordinal: 1108, Address: 0x1b630)
- QueryProcessAffinityUpdateMode (Ordinal: 1109, Address: 0x3c410)
- QueryProcessCycleTime (Ordinal: 1110, Address: 0x226a0)
- QueryProtectedPolicy (Ordinal: 1111, Address: 0xa5053)
- QueryThreadCycleTime (Ordinal: 1112, Address: 0x10e0)
- QueryThreadProfiling (Ordinal: 1113, Address: 0x44820)
- QueryThreadpoolStackInformation (Ordinal: 1114, Address: 0x3c430)
- QueryUmsThreadInformation (Ordinal: 1115, Address: 0x42b60)
- QueryUnbiasedInterruptTime (Ordinal: 1116, Address: 0x1d850)
- QueueUserAPC (Ordinal: 1117, Address: 0x1e860)
- QueueUserWorkItem (Ordinal: 1118, Address: 0x21730)
- QuirkGetData2Worker (Ordinal: 1119, Address: 0x71640)
- QuirkGetDataWorker (Ordinal: 1120, Address: 0x71710)
- QuirkIsEnabled2Worker (Ordinal: 1121, Address: 0x717d0)
- QuirkIsEnabled3Worker (Ordinal: 1122, Address: 0x16340)
- QuirkIsEnabledForPackage2Worker (Ordinal: 1123, Address: 0x71920)
- QuirkIsEnabledForPackage3Worker (Ordinal: 1124, Address: 0x9c60)
- QuirkIsEnabledForPackage4Worker (Ordinal: 1125, Address: 0x9dd0)
- QuirkIsEnabledForPackageWorker (Ordinal: 1126, Address: 0x9060)
- QuirkIsEnabledForProcessWorker (Ordinal: 1127, Address: 0x1fb60)
- QuirkIsEnabledWorker (Ordinal: 1128, Address: 0x9120)
- RaiseException (Ordinal: 1129, Address: 0x20430)
- RaiseFailFastException (Ordinal: 1130, Address: 0xa5258)
- RaiseInvalid16BitExeError (Ordinal: 1131, Address: 0x3aa60)
- ReOpenFile (Ordinal: 1132, Address: 0x3c470)
- ReadConsoleA (Ordinal: 1133, Address: 0x25ac0)
- ReadConsoleInputA (Ordinal: 1134, Address: 0x25ad0)
- ReadConsoleInputExA (Ordinal: 1135, Address: 0xa52d2)
- ReadConsoleInputExW (Ordinal: 1136, Address: 0xa5305)
- ReadConsoleInputW (Ordinal: 1137, Address: 0x25ae0)
- ReadConsoleOutputA (Ordinal: 1138, Address: 0x25c30)
- ReadConsoleOutputAttribute (Ordinal: 1139, Address: 0x25c40)
- ReadConsoleOutputCharacterA (Ordinal: 1140, Address: 0x25c50)
- ReadConsoleOutputCharacterW (Ordinal: 1141, Address: 0x25c60)
- ReadConsoleOutputW (Ordinal: 1142, Address: 0x25c70)
- ReadConsoleW (Ordinal: 1143, Address: 0x25af0)
- ReadDirectoryChangesExW (Ordinal: 1144, Address: 0x3c490)
- ReadDirectoryChangesW (Ordinal: 1145, Address: 0x24a30)
- ReadFile (Ordinal: 1146, Address: 0x25660)
- ReadFileEx (Ordinal: 1147, Address: 0x25670)
- ReadFileScatter (Ordinal: 1148, Address: 0x25680)
- ReadProcessMemory (Ordinal: 1149, Address: 0x1cc70)
- ReadThreadProfilingData (Ordinal: 1150, Address: 0x44860)
- ReclaimVirtualMemory (Ordinal: 1151, Address: 0xa544d)
- RegCloseKey (Ordinal: 1152, Address: 0x249a0)
- RegCopyTreeW (Ordinal: 1153, Address: 0x3c4b0)
- RegCreateKeyExA (Ordinal: 1154, Address: 0x3c4d0)
- RegCreateKeyExW (Ordinal: 1155, Address: 0x3c4f0)
- RegDeleteKeyExA (Ordinal: 1156, Address: 0x3c510)
- RegDeleteKeyExW (Ordinal: 1157, Address: 0x3c530)
- RegDeleteTreeA (Ordinal: 1158, Address: 0x3c550)
- RegDeleteTreeW (Ordinal: 1159, Address: 0x3c570)
- RegDeleteValueA (Ordinal: 1160, Address: 0x3c590)
- RegDeleteValueW (Ordinal: 1161, Address: 0x3c5b0)
- RegDisablePredefinedCacheEx (Ordinal: 1162, Address: 0x3c5d0)
- RegEnumKeyExA (Ordinal: 1163, Address: 0x3c5f0)
- RegEnumKeyExW (Ordinal: 1164, Address: 0x3c640)
- RegEnumValueA (Ordinal: 1165, Address: 0x3c690)
- RegEnumValueW (Ordinal: 1166, Address: 0x3c6e0)
- RegFlushKey (Ordinal: 1167, Address: 0x3c730)
- RegGetKeySecurity (Ordinal: 1168, Address: 0x3c750)
- RegGetValueA (Ordinal: 1169, Address: 0x3c770)
- RegGetValueW (Ordinal: 1170, Address: 0x22570)
- RegLoadKeyA (Ordinal: 1171, Address: 0x3c790)
- RegLoadKeyW (Ordinal: 1172, Address: 0x3c7b0)
- RegLoadMUIStringA (Ordinal: 1173, Address: 0x3c7d0)
- RegLoadMUIStringW (Ordinal: 1174, Address: 0x3c7f0)
- RegNotifyChangeKeyValue (Ordinal: 1175, Address: 0x3c810)
- RegOpenCurrentUser (Ordinal: 1176, Address: 0x22a50)
- RegOpenKeyExA (Ordinal: 1177, Address: 0x3c830)
- RegOpenKeyExW (Ordinal: 1178, Address: 0x21180)
- RegOpenUserClassesRoot (Ordinal: 1179, Address: 0x22a30)
- RegQueryInfoKeyA (Ordinal: 1180, Address: 0x3c850)
- RegQueryInfoKeyW (Ordinal: 1181, Address: 0x3c8d0)
- RegQueryValueExA (Ordinal: 1182, Address: 0x3c950)
- RegQueryValueExW (Ordinal: 1183, Address: 0x3c970)
- RegRestoreKeyA (Ordinal: 1184, Address: 0x3c990)
- RegRestoreKeyW (Ordinal: 1185, Address: 0x3c9b0)
- RegSaveKeyExA (Ordinal: 1186, Address: 0x3c9d0)
- RegSaveKeyExW (Ordinal: 1187, Address: 0x3c9f0)
- RegSetKeySecurity (Ordinal: 1188, Address: 0x3ca10)
- RegSetValueExA (Ordinal: 1189, Address: 0x3ca30)
- RegSetValueExW (Ordinal: 1190, Address: 0x3ca50)
- RegUnLoadKeyA (Ordinal: 1191, Address: 0x3ca70)
- RegUnLoadKeyW (Ordinal: 1192, Address: 0x3ca90)
- RegisterApplicationRecoveryCallback (Ordinal: 1193, Address: 0x21e10)
- RegisterApplicationRestart (Ordinal: 1194, Address: 0x21aa0)
- RegisterBadMemoryNotification (Ordinal: 1195, Address: 0x3cab0)
- RegisterConsoleIME (Ordinal: 1196, Address: 0x6a830)
- RegisterConsoleOS2 (Ordinal: 1197, Address: 0x6a860)
- RegisterConsoleVDM (Ordinal: 1198, Address: 0x6a2a0)
- RegisterWaitForInputIdle (Ordinal: 1199, Address: 0x20160)
- RegisterWaitForSingleObject (Ordinal: 1200, Address: 0x15ab0)
- RegisterWaitForSingleObjectEx (Ordinal: 1201, Address: 0x3cad0)
- RegisterWaitUntilOOBECompleted (Ordinal: 1202, Address: 0x1f140)
- RegisterWowBaseHandlers (Ordinal: 1203, Address: 0x391a0)
- RegisterWowExec (Ordinal: 1204, Address: 0x42360)
- ReleaseActCtx (Ordinal: 1205, Address: 0x219a0)
- ReleaseActCtxWorker (Ordinal: 1206, Address: 0x1df90)
- ReleaseMutex (Ordinal: 1207, Address: 0x251d0)
- ReleaseMutexWhenCallbackReturns (Ordinal: 1208, Address: 0xa5886)
- ReleaseSRWLockExclusive (Ordinal: 1209, Address: 0xa58c7)
- ReleaseSRWLockShared (Ordinal: 1210, Address: 0xa58fd)
- ReleaseSemaphore (Ordinal: 1211, Address: 0x251e0)
- ReleaseSemaphoreWhenCallbackReturns (Ordinal: 1212, Address: 0xa5950)
- RemoveDirectoryA (Ordinal: 1213, Address: 0x25690)
- RemoveDirectoryTransactedA (Ordinal: 1214, Address: 0x384d0)
- RemoveDirectoryTransactedW (Ordinal: 1215, Address: 0x63340)
- RemoveDirectoryW (Ordinal: 1216, Address: 0x256a0)
- RemoveDllDirectory (Ordinal: 1217, Address: 0xa59e8)
- RemoveLocalAlternateComputerNameA (Ordinal: 1218, Address: 0x5bcc0)
- RemoveLocalAlternateComputerNameW (Ordinal: 1219, Address: 0x5bd20)
- RemoveSecureMemoryCacheCallback (Ordinal: 1220, Address: 0x391b0)
- RemoveVectoredContinueHandler (Ordinal: 1221, Address: 0xa5aa2)
- RemoveVectoredExceptionHandler (Ordinal: 1222, Address: 0xa5ae8)
- ReplaceFile (Ordinal: 1223, Address: 0x3caf0)
- ReplaceFileA (Ordinal: 1224, Address: 0x63080)
- ReplaceFileW (Ordinal: 1225, Address: 0x3caf0)
- ReplacePartitionUnit (Ordinal: 1226, Address: 0x3ac10)
- RequestDeviceWakeup (Ordinal: 1227, Address: 0x39c50)
- RequestWakeupLatency (Ordinal: 1228, Address: 0x39c50)
- ResetEvent (Ordinal: 1229, Address: 0x251f0)
- ResetWriteWatch (Ordinal: 1230, Address: 0x182d0)
- ResizePseudoConsole (Ordinal: 1231, Address: 0x25b00)
- ResolveDelayLoadedAPI (Ordinal: 1232, Address: 0xa5bb9)
- ResolveDelayLoadsFromDll (Ordinal: 1233, Address: 0xa5bf1)
- ResolveLocaleName (Ordinal: 1234, Address: 0x21160)
- RestoreLastError (Ordinal: 1235, Address: 0xa5c36)
- ResumeThread (Ordinal: 1236, Address: 0x1e840)
- RtlAddFunctionTable (Ordinal: 1237, Address: 0x21b20)
- RtlCaptureContext (Ordinal: 1238, Address: 0x24e40)
- RtlCaptureStackBackTrace (Ordinal: 1239, Address: 0x225b0)
- RtlCompareMemory (Ordinal: 1240, Address: 0x3cb10)
- RtlCopyMemory (Ordinal: 1241, Address: 0x3cb30)
- RtlDeleteFunctionTable (Ordinal: 1242, Address: 0x3cb50)
- RtlFillMemory (Ordinal: 1243, Address: 0x3cb70)
- RtlInstallFunctionTableCallback (Ordinal: 1244, Address: 0x3cba0)
- RtlLookupFunctionEntry (Ordinal: 1245, Address: 0x1da70)
- RtlMoveMemory (Ordinal: 1246, Address: 0x24e70)
- RtlPcToFileHeader (Ordinal: 1247, Address: 0x1db40)
- RtlRaiseException (Ordinal: 1248, Address: 0x3cbc0)
- RtlRestoreContext (Ordinal: 1249, Address: 0x3cbe0)
- RtlUnwind (Ordinal: 1250, Address: 0x3cc00)
- RtlUnwindEx (Ordinal: 1251, Address: 0x20170)
- RtlVirtualUnwind (Ordinal: 1252, Address: 0x1010)
- RtlZeroMemory (Ordinal: 1253, Address: 0xa5d95)
- ScrollConsoleScreenBufferA (Ordinal: 1254, Address: 0x25c80)
- ScrollConsoleScreenBufferW (Ordinal: 1255, Address: 0x25c90)
- SearchPathA (Ordinal: 1256, Address: 0x3cc20)
- SearchPathW (Ordinal: 1257, Address: 0x22950)
- SetCachedSigningLevel (Ordinal: 1258, Address: 0x3cc40)
- SetCalendarInfoA (Ordinal: 1259, Address: 0x4c730)
- SetCalendarInfoW (Ordinal: 1260, Address: 0x3cc60)
- SetComPlusPackageInstallStatus (Ordinal: 1261, Address: 0x44440)
- SetCommBreak (Ordinal: 1262, Address: 0x258b0)
- SetCommConfig (Ordinal: 1263, Address: 0x258c0)
- SetCommMask (Ordinal: 1264, Address: 0x258d0)
- SetCommState (Ordinal: 1265, Address: 0x258e0)
- SetCommTimeouts (Ordinal: 1266, Address: 0x258f0)
- SetComputerNameA (Ordinal: 1267, Address: 0x3cc80)
- SetComputerNameEx2W (Ordinal: 1268, Address: 0x3cca0)
- SetComputerNameExA (Ordinal: 1269, Address: 0x3ccc0)
- SetComputerNameExW (Ordinal: 1270, Address: 0x3cce0)
- SetComputerNameW (Ordinal: 1271, Address: 0x3cd00)
- SetConsoleActiveScreenBuffer (Ordinal: 1272, Address: 0x25ca0)
- SetConsoleCP (Ordinal: 1273, Address: 0x25cb0)
- SetConsoleCtrlHandler (Ordinal: 1274, Address: 0x25b10)
- SetConsoleCursor (Ordinal: 1275, Address: 0x6a350)
- SetConsoleCursorInfo (Ordinal: 1276, Address: 0x25cc0)
- SetConsoleCursorMode (Ordinal: 1277, Address: 0x6a8c0)
- SetConsoleCursorPosition (Ordinal: 1278, Address: 0x25cd0)
- SetConsoleDisplayMode (Ordinal: 1279, Address: 0x25f70)
- SetConsoleFont (Ordinal: 1280, Address: 0x6ac90)
- SetConsoleHardwareState (Ordinal: 1281, Address: 0x6a3b0)
- SetConsoleHistoryInfo (Ordinal: 1282, Address: 0x25f80)
- SetConsoleIcon (Ordinal: 1283, Address: 0x6acf0)
- SetConsoleInputExeNameA (Ordinal: 1284, Address: 0xa5ffc)
- SetConsoleInputExeNameW (Ordinal: 1285, Address: 0xa6037)
- SetConsoleKeyShortcuts (Ordinal: 1286, Address: 0x6a410)
- SetConsoleLocalEUDC (Ordinal: 1287, Address: 0x6a930)
- SetConsoleMaximumWindowSize (Ordinal: 1288, Address: 0x21b60)
- SetConsoleMenuClose (Ordinal: 1289, Address: 0x6a4a0)
- SetConsoleMode (Ordinal: 1290, Address: 0x25b20)
- SetConsoleNlsMode (Ordinal: 1291, Address: 0x6a9f0)
- SetConsoleNumberOfCommandsA (Ordinal: 1292, Address: 0x25f90)
- SetConsoleNumberOfCommandsW (Ordinal: 1293, Address: 0x25fa0)
- SetConsoleOS2OemFormat (Ordinal: 1294, Address: 0x6aa50)
- SetConsoleOutputCP (Ordinal: 1295, Address: 0x25ce0)
- SetConsolePalette (Ordinal: 1296, Address: 0x6a500)
- SetConsoleScreenBufferInfoEx (Ordinal: 1297, Address: 0x25cf0)
- SetConsoleScreenBufferSize (Ordinal: 1298, Address: 0x25d00)
- SetConsoleTextAttribute (Ordinal: 1299, Address: 0x25d10)
- SetConsoleTitleA (Ordinal: 1300, Address: 0x25d20)
- SetConsoleTitleW (Ordinal: 1301, Address: 0x25d30)
- SetConsoleWindowInfo (Ordinal: 1302, Address: 0x25d40)
- SetCriticalSectionSpinCount (Ordinal: 1303, Address: 0xa61ed)
- SetCurrentConsoleFontEx (Ordinal: 1304, Address: 0x25fb0)
- SetCurrentDirectoryA (Ordinal: 1305, Address: 0x3cd20)
- SetCurrentDirectoryW (Ordinal: 1306, Address: 0x21ae0)
- SetDefaultCommConfigA (Ordinal: 1307, Address: 0x3ebc0)
- SetDefaultCommConfigW (Ordinal: 1308, Address: 0x3ec70)
- SetDefaultDllDirectories (Ordinal: 1309, Address: 0xa6299)
- SetDllDirectoryA (Ordinal: 1310, Address: 0x66f90)
- SetDllDirectoryW (Ordinal: 1311, Address: 0x211e0)
- SetDynamicTimeZoneInformation (Ordinal: 1312, Address: 0x3cd40)
- SetEndOfFile (Ordinal: 1313, Address: 0x256b0)
- SetEnvironmentStringsA (Ordinal: 1314, Address: 0x68880)
- SetEnvironmentStringsW (Ordinal: 1315, Address: 0x3cd60)
- SetEnvironmentVariableA (Ordinal: 1316, Address: 0x1e7c0)
- SetEnvironmentVariableW (Ordinal: 1317, Address: 0x21140)
- SetErrorMode (Ordinal: 1318, Address: 0x1cf90)
- SetEvent (Ordinal: 1319, Address: 0x25200)
- SetEventWhenCallbackReturns (Ordinal: 1320, Address: 0xa63b4)
- SetFileApisToANSI (Ordinal: 1321, Address: 0x3cd80)
- SetFileApisToOEM (Ordinal: 1322, Address: 0x3cda0)
- SetFileAttributesA (Ordinal: 1323, Address: 0x256c0)
- SetFileAttributesTransactedA (Ordinal: 1324, Address: 0x646e0)
- SetFileAttributesTransactedW (Ordinal: 1325, Address: 0x64740)
- SetFileAttributesW (Ordinal: 1326, Address: 0x256d0)
- SetFileBandwidthReservation (Ordinal: 1327, Address: 0x38880)
- SetFileCompletionNotificationModes (Ordinal: 1328, Address: 0x1e6c0)
- SetFileInformationByHandle (Ordinal: 1329, Address: 0x256e0)
- SetFileIoOverlappedRange (Ordinal: 1330, Address: 0x3cdc0)
- SetFilePointer (Ordinal: 1331, Address: 0x256f0)
- SetFilePointerEx (Ordinal: 1332, Address: 0x25700)
- SetFileShortNameA (Ordinal: 1333, Address: 0x389c0)
- SetFileShortNameW (Ordinal: 1334, Address: 0x38a10)
- SetFileTime (Ordinal: 1335, Address: 0x25710)
- SetFileValidData (Ordinal: 1336, Address: 0x25720)
- SetFirmwareEnvironmentVariableA (Ordinal: 1337, Address: 0x67b30)
- SetFirmwareEnvironmentVariableExA (Ordinal: 1338, Address: 0x67b50)
- SetFirmwareEnvironmentVariableExW (Ordinal: 1339, Address: 0x67c80)
- SetFirmwareEnvironmentVariableW (Ordinal: 1340, Address: 0x67d60)
- SetHandleCount (Ordinal: 1341, Address: 0x21a60)
- SetHandleInformation (Ordinal: 1342, Address: 0x25090)
- SetInformationJobObject (Ordinal: 1343, Address: 0x1de80)
- SetIoRateControlInformationJobObject (Ordinal: 1344, Address: 0x5ce60)
- SetLastConsoleEventActive (Ordinal: 1345, Address: 0xa662f)
- SetLastError (Ordinal: 1346, Address: 0x16290)
- SetLocalPrimaryComputerNameA (Ordinal: 1347, Address: 0x5bf70)
- SetLocalPrimaryComputerNameW (Ordinal: 1348, Address: 0x5bfd0)
- SetLocalTime (Ordinal: 1349, Address: 0x3cde0)
- SetLocaleInfoA (Ordinal: 1350, Address: 0x4c820)
- SetLocaleInfoW (Ordinal: 1351, Address: 0x3ce00)
- SetMailslotInfo (Ordinal: 1352, Address: 0x636a0)
- SetMessageWaitingIndicator (Ordinal: 1353, Address: 0x39c50)
- SetNamedPipeAttribute (Ordinal: 1354, Address: 0x39730)
- SetNamedPipeHandleState (Ordinal: 1355, Address: 0x226c0)
- SetPriorityClass (Ordinal: 1356, Address: 0x212d0)
- SetProcessAffinityMask (Ordinal: 1357, Address: 0x67730)
- SetProcessAffinityUpdateMode (Ordinal: 1358, Address: 0x24980)
- SetProcessDEPPolicy (Ordinal: 1359, Address: 0x228d0)
- SetProcessDefaultCpuSets (Ordinal: 1360, Address: 0xa6791)
- SetProcessDynamicEHContinuationTargets (Ordinal: 1361, Address: 0xa67f7)
- SetProcessDynamicEnforcedCetCompatibleRanges (Ordinal: 1362, Address: 0xa6871)
- SetProcessInformation (Ordinal: 1363, Address: 0x25040)
- SetProcessMitigationPolicy (Ordinal: 1364, Address: 0xa68f5)
- SetProcessPreferredUILanguages (Ordinal: 1365, Address: 0x3ce20)
- SetProcessPriorityBoost (Ordinal: 1366, Address: 0x21b00)
- SetProcessShutdownParameters (Ordinal: 1367, Address: 0x20e80)
- SetProcessWorkingSetSize (Ordinal: 1368, Address: 0x446a0)
- SetProcessWorkingSetSizeEx (Ordinal: 1369, Address: 0x3ce40)
- SetProtectedPolicy (Ordinal: 1370, Address: 0xa69d1)
- SetSearchPathMode (Ordinal: 1371, Address: 0x395d0)
- SetStdHandle (Ordinal: 1372, Address: 0x20990)
- SetStdHandleEx (Ordinal: 1373, Address: 0x3ce60)
- SetSystemFileCacheSize (Ordinal: 1374, Address: 0x3ce80)
- SetSystemPowerState (Ordinal: 1375, Address: 0x39c90)
- SetSystemTime (Ordinal: 1376, Address: 0x3cea0)
- SetSystemTimeAdjustment (Ordinal: 1377, Address: 0x382c0)
- SetTapeParameters (Ordinal: 1378, Address: 0x43d60)
- SetTapePosition (Ordinal: 1379, Address: 0x43db0)
- SetTermsrvAppInstallMode (Ordinal: 1380, Address: 0x68e60)
- SetThreadAffinityMask (Ordinal: 1381, Address: 0x1f870)
- SetThreadContext (Ordinal: 1382, Address: 0x3cec0)
- SetThreadDescription (Ordinal: 1383, Address: 0xa6b00)
- SetThreadErrorMode (Ordinal: 1384, Address: 0x1c260)
- SetThreadExecutionState (Ordinal: 1385, Address: 0x211a0)
- SetThreadGroupAffinity (Ordinal: 1386, Address: 0x212f0)
- SetThreadIdealProcessor (Ordinal: 1387, Address: 0x244c0)
- SetThreadIdealProcessorEx (Ordinal: 1388, Address: 0x3cee0)
- SetThreadInformation (Ordinal: 1389, Address: 0x25050)
- SetThreadLocale (Ordinal: 1390, Address: 0x1a8a0)
- SetThreadPreferredUILanguages (Ordinal: 1391, Address: 0x1e0f0)
- SetThreadPriority (Ordinal: 1392, Address: 0x1bd80)
- SetThreadPriorityBoost (Ordinal: 1393, Address: 0x21b70)
- SetThreadSelectedCpuSets (Ordinal: 1394, Address: 0xa6c34)
- SetThreadStackGuarantee (Ordinal: 1395, Address: 0x1eb10)
- SetThreadToken (Ordinal: 1396, Address: 0xa6c9a)
- SetThreadUILanguage (Ordinal: 1397, Address: 0x1cd90)
- SetThreadpoolStackInformation (Ordinal: 1398, Address: 0x3cf00)
- SetThreadpoolThreadMaximum (Ordinal: 1399, Address: 0xa6d1c)
- SetThreadpoolThreadMinimum (Ordinal: 1400, Address: 0x218a0)
- SetThreadpoolTimer (Ordinal: 1401, Address: 0xa6d64)
- SetThreadpoolTimerEx (Ordinal: 1402, Address: 0xa6d8a)
- SetThreadpoolWait (Ordinal: 1403, Address: 0xa6daf)
- SetThreadpoolWaitEx (Ordinal: 1404, Address: 0xa6dd3)
- SetTimeZoneInformation (Ordinal: 1405, Address: 0x3cf40)
- SetTimerQueueTimer (Ordinal: 1406, Address: 0x44700)
- SetUmsThreadInformation (Ordinal: 1407, Address: 0x42bb0)
- SetUnhandledExceptionFilter (Ordinal: 1408, Address: 0x20580)
- SetUserGeoID (Ordinal: 1409, Address: 0x550e0)
- SetUserGeoName (Ordinal: 1410, Address: 0x55100)
- SetVDMCurrentDirectories (Ordinal: 1411, Address: 0x423d0)
- SetVolumeLabelA (Ordinal: 1412, Address: 0x67e70)
- SetVolumeLabelW (Ordinal: 1413, Address: 0x67f20)
- SetVolumeMountPointA (Ordinal: 1414, Address: 0x669f0)
- SetVolumeMountPointW (Ordinal: 1415, Address: 0x23b40)
- SetVolumeMountPointWStub (Ordinal: 1416, Address: 0x3cf60)
- SetWaitableTimer (Ordinal: 1417, Address: 0x25210)
- SetWaitableTimerEx (Ordinal: 1418, Address: 0xa6eff)
- SetXStateFeaturesMask (Ordinal: 1419, Address: 0x3cf70)
- SetupComm (Ordinal: 1420, Address: 0x25900)
- ShowConsoleCursor (Ordinal: 1421, Address: 0x6a570)
- SignalObjectAndWait (Ordinal: 1422, Address: 0x3cf90)
- SizeofResource (Ordinal: 1423, Address: 0x1bb70)
- Sleep (Ordinal: 1424, Address: 0x1b530)
- SleepConditionVariableCS (Ordinal: 1425, Address: 0xa6fa3)
- SleepConditionVariableSRW (Ordinal: 1426, Address: 0xa6ff3)
- SleepEx (Ordinal: 1427, Address: 0x25220)
- SortCloseHandle (Ordinal: 1428, Address: 0x205e0)
- SortGetHandle (Ordinal: 1429, Address: 0xa190)
- StartThreadpoolIo (Ordinal: 1430, Address: 0xa7062)
- SubmitThreadpoolWork (Ordinal: 1431, Address: 0xa7095)
- SuspendThread (Ordinal: 1432, Address: 0x20f00)
- SwitchToFiber (Ordinal: 1433, Address: 0x259c0)
- SwitchToThread (Ordinal: 1434, Address: 0x1bb90)
- SystemTimeToFileTime (Ordinal: 1435, Address: 0x1fe50)
- SystemTimeToTzSpecificLocalTime (Ordinal: 1436, Address: 0x22930)
- SystemTimeToTzSpecificLocalTimeEx (Ordinal: 1437, Address: 0xa7128)
- TerminateJobObject (Ordinal: 1438, Address: 0x21810)
- TerminateProcess (Ordinal: 1439, Address: 0x20ee0)
- TerminateThread (Ordinal: 1440, Address: 0x3cfb0)
- TermsrvAppInstallMode (Ordinal: 1441, Address: 0x22dd0)
- TermsrvConvertSysRootToUserDir (Ordinal: 1442, Address: 0x69220)
- TermsrvCreateRegEntry (Ordinal: 1443, Address: 0x1db20)
- TermsrvDeleteKey (Ordinal: 1444, Address: 0x1e760)
- TermsrvDeleteValue (Ordinal: 1445, Address: 0x1e740)
- TermsrvGetPreSetValue (Ordinal: 1446, Address: 0x1bed0)
- TermsrvGetWindowsDirectoryA (Ordinal: 1447, Address: 0x228b0)
- TermsrvGetWindowsDirectoryW (Ordinal: 1448, Address: 0x1cea0)
- TermsrvOpenRegEntry (Ordinal: 1449, Address: 0x17170)
- TermsrvOpenUserClasses (Ordinal: 1450, Address: 0x1dae0)
- TermsrvRestoreKey (Ordinal: 1451, Address: 0x69e70)
- TermsrvSetKeySecurity (Ordinal: 1452, Address: 0x1c280)
- TermsrvSetValueKey (Ordinal: 1453, Address: 0x1c240)
- TermsrvSyncUserIniFileExt (Ordinal: 1454, Address: 0x69e90)
- Thread32First (Ordinal: 1455, Address: 0x22720)
- Thread32Next (Ordinal: 1456, Address: 0x21c40)
- TlsAlloc (Ordinal: 1457, Address: 0x1cfb0)
- TlsFree (Ordinal: 1458, Address: 0x1db00)
- TlsGetValue (Ordinal: 1459, Address: 0x15b20)
- TlsSetValue (Ordinal: 1460, Address: 0x16170)
- Toolhelp32ReadProcessMemory (Ordinal: 1461, Address: 0x3d3e0)
- TransactNamedPipe (Ordinal: 1462, Address: 0x3cfd0)
- TransmitCommChar (Ordinal: 1463, Address: 0x25910)
- TryAcquireSRWLockExclusive (Ordinal: 1464, Address: 0xa7379)
- TryAcquireSRWLockShared (Ordinal: 1465, Address: 0xa73b5)
- TryEnterCriticalSection (Ordinal: 1466, Address: 0xa73ee)
- TrySubmitThreadpoolCallback (Ordinal: 1467, Address: 0x21a70)
- TzSpecificLocalTimeToSystemTime (Ordinal: 1468, Address: 0x3cff0)
- TzSpecificLocalTimeToSystemTimeEx (Ordinal: 1469, Address: 0xa746d)
- UTRegister (Ordinal: 1470, Address: 0x39600)
- UTUnRegister (Ordinal: 1471, Address: 0x381d0)
- UmsThreadYield (Ordinal: 1472, Address: 0x42bf0)
- UnhandledExceptionFilter (Ordinal: 1473, Address: 0x3d010)
- UnlockFile (Ordinal: 1474, Address: 0x25730)
- UnlockFileEx (Ordinal: 1475, Address: 0x25740)
- UnmapViewOfFile (Ordinal: 1476, Address: 0x1e780)
- UnmapViewOfFileEx (Ordinal: 1477, Address: 0xa7529)
- UnregisterApplicationRecoveryCallback (Ordinal: 1478, Address: 0x44590)
- UnregisterApplicationRestart (Ordinal: 1479, Address: 0x3d030)
- UnregisterBadMemoryNotification (Ordinal: 1480, Address: 0x3d050)
- UnregisterConsoleIME (Ordinal: 1481, Address: 0x6a830)
- UnregisterWait (Ordinal: 1482, Address: 0x13770)
- UnregisterWaitEx (Ordinal: 1483, Address: 0x218f0)
- UnregisterWaitUntilOOBECompleted (Ordinal: 1484, Address: 0x68810)
- UpdateCalendarDayOfWeek (Ordinal: 1485, Address: 0x8230)
- UpdateProcThreadAttribute (Ordinal: 1486, Address: 0xa7644)
- UpdateResourceA (Ordinal: 1487, Address: 0x4a8b0)
- UpdateResourceW (Ordinal: 1488, Address: 0x4aa60)
- VDMConsoleOperation (Ordinal: 1489, Address: 0x6adb0)
- VDMOperationStarted (Ordinal: 1490, Address: 0x426a0)
- VerLanguageNameA (Ordinal: 1491, Address: 0x21b40)
- VerLanguageNameW (Ordinal: 1492, Address: 0x20c90)
- VerSetConditionMask (Ordinal: 1493, Address: 0xa7702)
- VerifyConsoleIoHandle (Ordinal: 1494, Address: 0x216e0)
- VerifyScripts (Ordinal: 1495, Address: 0x3d070)
- VerifyVersionInfoA (Ordinal: 1496, Address: 0x22d00)
- VerifyVersionInfoW (Ordinal: 1497, Address: 0x18be0)
- VirtualAlloc (Ordinal: 1498, Address: 0x18c90)
- VirtualAllocEx (Ordinal: 1499, Address: 0x3d090)
- VirtualAllocExNuma (Ordinal: 1500, Address: 0x249c0)
- VirtualFree (Ordinal: 1501, Address: 0x1a8c0)
- VirtualFreeEx (Ordinal: 1502, Address: 0x3d0b0)
- VirtualLock (Ordinal: 1503, Address: 0x24ad0)
- VirtualProtect (Ordinal: 1504, Address: 0x1c3f0)
- VirtualProtectEx (Ordinal: 1505, Address: 0x3d0d0)
- VirtualQuery (Ordinal: 1506, Address: 0x1c920)
- VirtualQueryEx (Ordinal: 1507, Address: 0x1d770)
- VirtualUnlock (Ordinal: 1508, Address: 0x1cd70)
- WTSGetActiveConsoleSessionId (Ordinal: 1509, Address: 0x20c20)
- WaitCommEvent (Ordinal: 1510, Address: 0x25920)
- WaitForDebugEvent (Ordinal: 1511, Address: 0x3d0f0)
- WaitForDebugEventEx (Ordinal: 1512, Address: 0xa7856)
- WaitForMultipleObjects (Ordinal: 1513, Address: 0x25230)
- WaitForMultipleObjectsEx (Ordinal: 1514, Address: 0x25240)
- WaitForSingleObject (Ordinal: 1515, Address: 0x25250)
- WaitForSingleObjectEx (Ordinal: 1516, Address: 0x25260)
- WaitForThreadpoolIoCallbacks (Ordinal: 1517, Address: 0xa78fe)
- WaitForThreadpoolTimerCallbacks (Ordinal: 1518, Address: 0xa793a)
- WaitForThreadpoolWaitCallbacks (Ordinal: 1519, Address: 0xa796e)
- WaitForThreadpoolWorkCallbacks (Ordinal: 1520, Address: 0xa79a1)
- WaitNamedPipeA (Ordinal: 1521, Address: 0x62190)
- WaitNamedPipeW (Ordinal: 1522, Address: 0x3d110)
- WakeAllConditionVariable (Ordinal: 1523, Address: 0xa79ec)
- WakeConditionVariable (Ordinal: 1524, Address: 0xa7a24)
- WerGetFlags (Ordinal: 1525, Address: 0x445b0)
- WerGetFlagsWorker (Ordinal: 1526, Address: 0x445b0)
- WerRegisterAdditionalProcess (Ordinal: 1527, Address: 0x3d130)
- WerRegisterAppLocalDump (Ordinal: 1528, Address: 0x3d150)
- WerRegisterCustomMetadata (Ordinal: 1529, Address: 0x3d170)
- WerRegisterExcludedMemoryBlock (Ordinal: 1530, Address: 0x3d190)
- WerRegisterFile (Ordinal: 1531, Address: 0x20c00)
- WerRegisterFileWorker (Ordinal: 1532, Address: 0x445c0)
- WerRegisterMemoryBlock (Ordinal: 1533, Address: 0x20e60)
- WerRegisterMemoryBlockWorker (Ordinal: 1534, Address: 0x445d0)
- WerRegisterRuntimeExceptionModule (Ordinal: 1535, Address: 0x21000)
- WerRegisterRuntimeExceptionModuleWorker (Ordinal: 1536, Address: 0x445e0)
- WerSetFlags (Ordinal: 1537, Address: 0x1d350)
- WerSetFlagsWorker (Ordinal: 1538, Address: 0x1d350)
- WerUnregisterAdditionalProcess (Ordinal: 1539, Address: 0x3d1b0)
- WerUnregisterAppLocalDump (Ordinal: 1540, Address: 0x3d1d0)
- WerUnregisterCustomMetadata (Ordinal: 1541, Address: 0x3d1f0)
- WerUnregisterExcludedMemoryBlock (Ordinal: 1542, Address: 0x3d210)
- WerUnregisterFile (Ordinal: 1543, Address: 0x20be0)
- WerUnregisterFileWorker (Ordinal: 1544, Address: 0x445f0)
- WerUnregisterMemoryBlock (Ordinal: 1545, Address: 0x22320)
- WerUnregisterMemoryBlockWorker (Ordinal: 1546, Address: 0x44600)
- WerUnregisterRuntimeExceptionModule (Ordinal: 1547, Address: 0x3d230)
- WerUnregisterRuntimeExceptionModuleWorker (Ordinal: 1548, Address: 0x44610)
- WerpGetDebugger (Ordinal: 1549, Address: 0x6d810)
- WerpInitiateRemoteRecovery (Ordinal: 1550, Address: 0x44620)
- WerpLaunchAeDebug (Ordinal: 1551, Address: 0x6e200)
- WerpNotifyLoadStringResourceWorker (Ordinal: 1552, Address: 0x1bda0)
- WerpNotifyUseStringResourceWorker (Ordinal: 1553, Address: 0x1bda0)
- WideCharToMultiByte (Ordinal: 1554, Address: 0x16110)
- WinExec (Ordinal: 1555, Address: 0x67780)
- Wow64DisableWow64FsRedirection (Ordinal: 1556, Address: 0x3d250)
- Wow64EnableWow64FsRedirection (Ordinal: 1557, Address: 0x21d60)
- Wow64GetThreadContext (Ordinal: 1558, Address: 0x3d270)
- Wow64GetThreadSelectorEntry (Ordinal: 1559, Address: 0x383b0)
- Wow64RevertWow64FsRedirection (Ordinal: 1560, Address: 0x3d290)
- Wow64SetThreadContext (Ordinal: 1561, Address: 0x3d2b0)
- Wow64SuspendThread (Ordinal: 1562, Address: 0x3d2d0)
- WriteConsoleA (Ordinal: 1563, Address: 0x25b30)
- WriteConsoleInputA (Ordinal: 1564, Address: 0x25d50)
- WriteConsoleInputVDMA (Ordinal: 1565, Address: 0x6a5b0)
- WriteConsoleInputVDMW (Ordinal: 1566, Address: 0x6a640)
- WriteConsoleInputW (Ordinal: 1567, Address: 0x25d60)
- WriteConsoleOutputA (Ordinal: 1568, Address: 0x25d70)
- WriteConsoleOutputAttribute (Ordinal: 1569, Address: 0x25d80)
- WriteConsoleOutputCharacterA (Ordinal: 1570, Address: 0x25d90)
- WriteConsoleOutputCharacterW (Ordinal: 1571, Address: 0x25da0)
- WriteConsoleOutputW (Ordinal: 1572, Address: 0x25db0)
- WriteConsoleW (Ordinal: 1573, Address: 0x25b40)
- WriteFile (Ordinal: 1574, Address: 0x25750)
- WriteFileEx (Ordinal: 1575, Address: 0x25760)
- WriteFileGather (Ordinal: 1576, Address: 0x25770)
- WritePrivateProfileSectionA (Ordinal: 1577, Address: 0x61090)
- WritePrivateProfileSectionW (Ordinal: 1578, Address: 0x244e0)
- WritePrivateProfileStringA (Ordinal: 1579, Address: 0x61100)
- WritePrivateProfileStringW (Ordinal: 1580, Address: 0x18280)
- WritePrivateProfileStructA (Ordinal: 1581, Address: 0x61170)
- WritePrivateProfileStructW (Ordinal: 1582, Address: 0x612e0)
- WriteProcessMemory (Ordinal: 1583, Address: 0x3d2f0)
- WriteProfileSectionA (Ordinal: 1584, Address: 0x61450)
- WriteProfileSectionW (Ordinal: 1585, Address: 0x61460)
- WriteProfileStringA (Ordinal: 1586, Address: 0x61470)
- WriteProfileStringW (Ordinal: 1587, Address: 0x61480)
- WriteTapemark (Ordinal: 1588, Address: 0x43e20)
- ZombifyActCtx (Ordinal: 1589, Address: 0x3d310)
- ZombifyActCtxWorker (Ordinal: 1590, Address: 0x443c0)
- __C_specific_handler (Ordinal: 1591, Address: 0xa806b)
- __chkstk (Ordinal: 1592, Address: 0xa808f)
- __misaligned_access (Ordinal: 1593, Address: 0xa80b2)
- _hread (Ordinal: 1594, Address: 0x18450)
- _hwrite (Ordinal: 1595, Address: 0x69fa0)
- _lclose (Ordinal: 1596, Address: 0x1cdb0)
- _lcreat (Ordinal: 1597, Address: 0x69eb0)
- _llseek (Ordinal: 1598, Address: 0x18420)
- _local_unwind (Ordinal: 1599, Address: 0xa8101)
- _lopen (Ordinal: 1600, Address: 0x69f20)
- _lread (Ordinal: 1601, Address: 0x18450)
- _lwrite (Ordinal: 1602, Address: 0x69fa0)
- lstrcat (Ordinal: 1603, Address: 0x20840)
- lstrcatA (Ordinal: 1604, Address: 0x20840)
- lstrcatW (Ordinal: 1605, Address: 0x69ff0)
- lstrcmp (Ordinal: 1606, Address: 0x1cc00)
- lstrcmpA (Ordinal: 1607, Address: 0x1cc00)
- lstrcmpW (Ordinal: 1608, Address: 0x1bf00)
- lstrcmpi (Ordinal: 1609, Address: 0x1ba90)
- lstrcmpiA (Ordinal: 1610, Address: 0x1ba90)
- lstrcmpiW (Ordinal: 1611, Address: 0x18330)
- lstrcpy (Ordinal: 1612, Address: 0x1ea80)
- lstrcpyA (Ordinal: 1613, Address: 0x1ea80)
- lstrcpyW (Ordinal: 1614, Address: 0x225d0)
- lstrcpyn (Ordinal: 1615, Address: 0x3d330)
- lstrcpynA (Ordinal: 1616, Address: 0x3d330)
- lstrcpynW (Ordinal: 1617, Address: 0x216f0)
- lstrlen (Ordinal: 1618, Address: 0x1b240)
- lstrlenA (Ordinal: 1619, Address: 0x1b240)
- lstrlenW (Ordinal: 1620, Address: 0x175e0)
- timeBeginPeriod (Ordinal: 1621, Address: 0x1e110)
- timeEndPeriod (Ordinal: 1622, Address: 0x1d190)
- timeGetDevCaps (Ordinal: 1623, Address: 0x22840)
- timeGetSystemTime (Ordinal: 1624, Address: 0x6a040)
- timeGetTime (Ordinal: 1625, Address: 0x1c1a0)
- uaw_lstrcmpW (Ordinal: 1626, Address: 0x1bf00)
- uaw_lstrcmpiW (Ordinal: 1627, Address: 0x18330)
- uaw_lstrlenW (Ordinal: 1628, Address: 0x37bc0)
- uaw_wcschr (Ordinal: 1629, Address: 0x37c10)
- uaw_wcscpy (Ordinal: 1630, Address: 0x37c40)
- uaw_wcsicmp (Ordinal: 1631, Address: 0x37c70)
- uaw_wcslen (Ordinal: 1632, Address: 0x37c90)
- uaw_wcsrchr (Ordinal: 1633, Address: 0x37cc0)
Imported DLLs & Functions
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x180081a98)
api-ms-win-core-appcompat-l1-1-0.dll
- BaseCheckAppcompatCache (Address: 0x180081ad8)
- BaseCheckAppcompatCacheEx (Address: 0x180081ad0)
- BaseCleanupAppcompatCacheSupport (Address: 0x180081ac8)
- BaseDumpAppcompatCache (Address: 0x180081ab8)
- BaseFlushAppcompatCache (Address: 0x180081ab0)
- BaseInitAppcompatCacheSupport (Address: 0x180081ac0)
- BaseUpdateAppcompatCache (Address: 0x180081aa8)
api-ms-win-core-appcompat-l1-1-1.dll
- BaseFreeAppCompatDataForProcess (Address: 0x180081af0)
- BaseReadAppCompatDataForProcess (Address: 0x180081ae8)
api-ms-win-core-comm-l1-1-0.dll
- ClearCommBreak (Address: 0x180081b88)
- ClearCommError (Address: 0x180081b48)
- EscapeCommFunction (Address: 0x180081b40)
- GetCommConfig (Address: 0x180081b38)
- GetCommMask (Address: 0x180081b30)
- GetCommModemStatus (Address: 0x180081b28)
- GetCommProperties (Address: 0x180081b50)
- GetCommState (Address: 0x180081b18)
- GetCommTimeouts (Address: 0x180081b10)
- PurgeComm (Address: 0x180081b80)
- SetCommBreak (Address: 0x180081b00)
- SetCommConfig (Address: 0x180081b08)
- SetCommMask (Address: 0x180081b20)
- SetCommState (Address: 0x180081b78)
- SetCommTimeouts (Address: 0x180081b70)
- SetupComm (Address: 0x180081b68)
- TransmitCommChar (Address: 0x180081b60)
- WaitCommEvent (Address: 0x180081b58)
api-ms-win-core-console-l1-1-0.dll
- AllocConsole (Address: 0x180081bf8)
- GetConsoleCP (Address: 0x180081ba8)
- GetConsoleMode (Address: 0x180081b98)
- GetConsoleOutputCP (Address: 0x180081ba0)
- GetNumberOfConsoleInputEvents (Address: 0x180081bb8)
- ReadConsoleA (Address: 0x180081bc0)
- ReadConsoleInputA (Address: 0x180081bc8)
- ReadConsoleInputW (Address: 0x180081bd0)
- ReadConsoleW (Address: 0x180081bd8)
- SetConsoleCtrlHandler (Address: 0x180081be0)
- SetConsoleMode (Address: 0x180081be8)
- WriteConsoleA (Address: 0x180081bf0)
- WriteConsoleW (Address: 0x180081bb0)
api-ms-win-core-console-l1-2-0.dll
- AttachConsole (Address: 0x180081c10)
- FreeConsole (Address: 0x180081c18)
- PeekConsoleInputA (Address: 0x180081c08)
- PeekConsoleInputW (Address: 0x180081c20)
api-ms-win-core-console-l1-2-1.dll
- ClosePseudoConsole (Address: 0x180081c38)
- CreatePseudoConsole (Address: 0x180081c30)
- ResizePseudoConsole (Address: 0x180081c40)
api-ms-win-core-console-l2-1-0.dll
- CreateConsoleScreenBuffer (Address: 0x180081c80)
- FillConsoleOutputAttribute (Address: 0x180081ca8)
- FillConsoleOutputCharacterA (Address: 0x180081cc8)
- FillConsoleOutputCharacterW (Address: 0x180081cb0)
- FlushConsoleInputBuffer (Address: 0x180081c70)
- GenerateConsoleCtrlEvent (Address: 0x180081c58)
- GetConsoleCursorInfo (Address: 0x180081c60)
- GetConsoleScreenBufferInfo (Address: 0x180081c68)
- GetConsoleScreenBufferInfoEx (Address: 0x180081cb8)
- GetLargestConsoleWindowSize (Address: 0x180081c90)
- ReadConsoleOutputA (Address: 0x180081c98)
- ReadConsoleOutputAttribute (Address: 0x180081ca0)
- ReadConsoleOutputCharacterA (Address: 0x180081c78)
- ReadConsoleOutputCharacterW (Address: 0x180081cd0)
- ReadConsoleOutputW (Address: 0x180081cd8)
- ScrollConsoleScreenBufferA (Address: 0x180081ce0)
- ScrollConsoleScreenBufferW (Address: 0x180081ce8)
- SetConsoleActiveScreenBuffer (Address: 0x180081cf0)
- SetConsoleCP (Address: 0x180081cf8)
- SetConsoleCursorInfo (Address: 0x180081d00)
- SetConsoleCursorPosition (Address: 0x180081d08)
- SetConsoleOutputCP (Address: 0x180081d50)
- SetConsoleScreenBufferInfoEx (Address: 0x180081c88)
- SetConsoleScreenBufferSize (Address: 0x180081d48)
- SetConsoleTextAttribute (Address: 0x180081d40)
- SetConsoleWindowInfo (Address: 0x180081d38)
- WriteConsoleInputA (Address: 0x180081d30)
- WriteConsoleInputW (Address: 0x180081d28)
- WriteConsoleOutputA (Address: 0x180081d20)
- WriteConsoleOutputAttribute (Address: 0x180081d18)
- WriteConsoleOutputCharacterA (Address: 0x180081d10)
- WriteConsoleOutputCharacterW (Address: 0x180081c50)
- WriteConsoleOutputW (Address: 0x180081cc0)
api-ms-win-core-console-l2-2-0.dll
- GetConsoleOriginalTitleA (Address: 0x180081d88)
- GetConsoleOriginalTitleW (Address: 0x180081d60)
- GetConsoleTitleA (Address: 0x180081d68)
- GetConsoleTitleW (Address: 0x180081d80)
- SetConsoleTitleA (Address: 0x180081d78)
- SetConsoleTitleW (Address: 0x180081d70)
api-ms-win-core-console-l3-2-0.dll
- AddConsoleAliasA (Address: 0x180081d98)
- AddConsoleAliasW (Address: 0x180081da0)
- ExpungeConsoleCommandHistoryA (Address: 0x180081da8)
- ExpungeConsoleCommandHistoryW (Address: 0x180081db0)
- GetConsoleAliasA (Address: 0x180081db8)
- GetConsoleAliasesA (Address: 0x180081e68)
- GetConsoleAliasesLengthA (Address: 0x180081e60)
- GetConsoleAliasesLengthW (Address: 0x180081e58)
- GetConsoleAliasesW (Address: 0x180081e50)
- GetConsoleAliasExesA (Address: 0x180081de0)
- GetConsoleAliasExesLengthA (Address: 0x180081e88)
- GetConsoleAliasExesLengthW (Address: 0x180081e80)
- GetConsoleAliasExesW (Address: 0x180081e78)
- GetConsoleAliasW (Address: 0x180081e70)
- GetConsoleCommandHistoryA (Address: 0x180081e48)
- GetConsoleCommandHistoryLengthA (Address: 0x180081e40)
- GetConsoleCommandHistoryLengthW (Address: 0x180081e38)
- GetConsoleCommandHistoryW (Address: 0x180081e30)
- GetConsoleDisplayMode (Address: 0x180081e28)
- GetConsoleFontSize (Address: 0x180081e20)
- GetConsoleHistoryInfo (Address: 0x180081e18)
- GetConsoleProcessList (Address: 0x180081e10)
- GetConsoleSelectionInfo (Address: 0x180081e08)
- GetConsoleWindow (Address: 0x180081e00)
- GetCurrentConsoleFont (Address: 0x180081df8)
- GetCurrentConsoleFontEx (Address: 0x180081df0)
- GetNumberOfConsoleMouseButtons (Address: 0x180081de8)
- SetConsoleDisplayMode (Address: 0x180081e90)
- SetConsoleHistoryInfo (Address: 0x180081dd8)
- SetConsoleNumberOfCommandsA (Address: 0x180081dd0)
- SetConsoleNumberOfCommandsW (Address: 0x180081dc8)
- SetCurrentConsoleFontEx (Address: 0x180081dc0)
api-ms-win-core-datetime-l1-1-0.dll
- GetDateFormatA (Address: 0x180081ea0)
- GetDateFormatW (Address: 0x180081eb8)
- GetTimeFormatA (Address: 0x180081ea8)
- GetTimeFormatW (Address: 0x180081eb0)
api-ms-win-core-datetime-l1-1-1.dll
- GetDateFormatEx (Address: 0x180081ed0)
- GetTimeFormatEx (Address: 0x180081ec8)
api-ms-win-core-datetime-l1-1-2.dll
- GetDurationFormatEx (Address: 0x180081ee0)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x180081ef8)
- IsDebuggerPresent (Address: 0x180081f00)
- OutputDebugStringA (Address: 0x180081f08)
- OutputDebugStringW (Address: 0x180081ef0)
api-ms-win-core-debug-l1-1-1.dll
- CheckRemoteDebuggerPresent (Address: 0x180081f28)
- ContinueDebugEvent (Address: 0x180081f18)
- DebugActiveProcess (Address: 0x180081f38)
- DebugActiveProcessStop (Address: 0x180081f30)
- WaitForDebugEvent (Address: 0x180081f20)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x180081f48)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x180081f58)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetErrorMode (Address: 0x180081f70)
- GetLastError (Address: 0x180081f68)
- RaiseException (Address: 0x180081f98)
- SetErrorMode (Address: 0x180081f90)
- SetLastError (Address: 0x180081f80)
- SetUnhandledExceptionFilter (Address: 0x180081f78)
- UnhandledExceptionFilter (Address: 0x180081f88)
api-ms-win-core-errorhandling-l1-1-3.dll
- GetThreadErrorMode (Address: 0x180081fb0)
- SetThreadErrorMode (Address: 0x180081fa8)
api-ms-win-core-fibers-l1-1-0.dll
- FlsAlloc (Address: 0x180081fd8)
- FlsFree (Address: 0x180081fc0)
- FlsGetValue (Address: 0x180081fc8)
- FlsSetValue (Address: 0x180081fd0)
api-ms-win-core-fibers-l2-1-0.dll
- ConvertFiberToThread (Address: 0x180081ff8)
- ConvertThreadToFiber (Address: 0x180082008)
- CreateFiber (Address: 0x180081ff0)
- DeleteFiber (Address: 0x180082000)
- SwitchToFiber (Address: 0x180081fe8)
api-ms-win-core-fibers-l2-1-1.dll
- ConvertThreadToFiberEx (Address: 0x180082020)
- CreateFiberEx (Address: 0x180082018)
api-ms-win-core-file-l1-1-0.dll
- CompareFileTime (Address: 0x180082230)
- CreateDirectoryA (Address: 0x180082210)
- CreateDirectoryW (Address: 0x180082100)
- CreateFileA (Address: 0x1800820f0)
- CreateFileW (Address: 0x1800820e8)
- DefineDosDeviceW (Address: 0x1800820e0)
- DeleteFileA (Address: 0x1800820d8)
- DeleteFileW (Address: 0x1800820b0)
- DeleteVolumeMountPointW (Address: 0x180082208)
- FileTimeToLocalFileTime (Address: 0x180082238)
- FindClose (Address: 0x180082240)
- FindCloseChangeNotification (Address: 0x180082248)
- FindFirstChangeNotificationA (Address: 0x180082250)
- FindFirstChangeNotificationW (Address: 0x180082258)
- FindFirstFileA (Address: 0x180082260)
- FindFirstFileExA (Address: 0x1800820b8)
- FindFirstFileExW (Address: 0x1800820c0)
- FindFirstFileW (Address: 0x1800820c8)
- FindFirstVolumeW (Address: 0x1800820d0)
- FindNextChangeNotification (Address: 0x1800821d0)
- FindNextFileA (Address: 0x1800821d8)
- FindNextFileW (Address: 0x180082218)
- FindNextVolumeW (Address: 0x180082220)
- FindVolumeClose (Address: 0x180082228)
- FlushFileBuffers (Address: 0x180082098)
- GetDiskFreeSpaceA (Address: 0x1800821f0)
- GetDiskFreeSpaceExA (Address: 0x1800820a0)
- GetDiskFreeSpaceExW (Address: 0x180082088)
- GetDiskFreeSpaceW (Address: 0x180082030)
- GetDriveTypeA (Address: 0x180082038)
- GetDriveTypeW (Address: 0x180082040)
- GetFileAttributesA (Address: 0x180082048)
- GetFileAttributesExA (Address: 0x180082050)
- GetFileAttributesExW (Address: 0x180082058)
- GetFileAttributesW (Address: 0x180082060)
- GetFileInformationByHandle (Address: 0x180082068)
- GetFileSize (Address: 0x180082070)
- GetFileSizeEx (Address: 0x180082078)
- GetFileTime (Address: 0x180082080)
- GetFileType (Address: 0x180082090)
- GetFinalPathNameByHandleA (Address: 0x1800820a8)
- GetFinalPathNameByHandleW (Address: 0x1800821f8)
- GetFullPathNameA (Address: 0x1800821e8)
- GetFullPathNameW (Address: 0x1800821e0)
- GetLogicalDriveStringsW (Address: 0x1800820f8)
- GetTempFileNameW (Address: 0x180082200)
- GetVolumeInformationByHandleW (Address: 0x180082108)
- GetVolumeInformationW (Address: 0x180082110)
- GetVolumePathNameW (Address: 0x180082118)
- LocalFileTimeToFileTime (Address: 0x180082120)
- LockFile (Address: 0x180082128)
- LockFileEx (Address: 0x180082130)
- QueryDosDeviceW (Address: 0x180082138)
- ReadFile (Address: 0x180082140)
- ReadFileEx (Address: 0x180082148)
- ReadFileScatter (Address: 0x180082150)
- RemoveDirectoryA (Address: 0x180082158)
- RemoveDirectoryW (Address: 0x180082160)
- SetEndOfFile (Address: 0x180082168)
- SetFileAttributesA (Address: 0x180082170)
- SetFileAttributesW (Address: 0x180082178)
- SetFileInformationByHandle (Address: 0x180082180)
- SetFilePointer (Address: 0x180082188)
- SetFilePointerEx (Address: 0x180082190)
- SetFileTime (Address: 0x180082198)
- SetFileValidData (Address: 0x1800821a0)
- UnlockFile (Address: 0x1800821a8)
- UnlockFileEx (Address: 0x1800821b0)
- WriteFile (Address: 0x1800821b8)
- WriteFileEx (Address: 0x1800821c0)
- WriteFileGather (Address: 0x1800821c8)
api-ms-win-core-file-l1-2-0.dll
- CreateFile2 (Address: 0x180082278)
- GetTempPathW (Address: 0x180082280)
- GetVolumePathNamesForVolumeNameW (Address: 0x180082270)
api-ms-win-core-file-l1-2-1.dll
- GetCompressedFileSizeA (Address: 0x1800822a0)
- GetCompressedFileSizeW (Address: 0x180082290)
- SetFileIoOverlappedRange (Address: 0x180082298)
api-ms-win-core-file-l1-2-2.dll
- FindFirstFileNameW (Address: 0x1800822c8)
- FindFirstStreamW (Address: 0x1800822c0)
- FindNextFileNameW (Address: 0x1800822d0)
- GetTempFileNameA (Address: 0x1800822b8)
- GetTempPathA (Address: 0x1800822b0)
- GetVolumeInformationA (Address: 0x1800822d8)
api-ms-win-core-file-l2-1-0.dll
- CopyFile2 (Address: 0x1800822f0)
- CopyFileExW (Address: 0x1800822f8)
- CreateDirectoryExW (Address: 0x180082328)
- CreateHardLinkW (Address: 0x180082318)
- CreateSymbolicLinkW (Address: 0x180082310)
- GetFileInformationByHandleEx (Address: 0x180082320)
- MoveFileExW (Address: 0x180082338)
- MoveFileWithProgressW (Address: 0x180082330)
- ReadDirectoryChangesW (Address: 0x180082300)
- ReOpenFile (Address: 0x180082308)
- ReplaceFileW (Address: 0x1800822e8)
api-ms-win-core-file-l2-1-1.dll
- OpenFileById (Address: 0x180082348)
api-ms-win-core-file-l2-1-2.dll
- CopyFileW (Address: 0x180082358)
- CreateHardLinkA (Address: 0x180082360)
api-ms-win-core-file-l2-1-3.dll
- ReadDirectoryChangesExW (Address: 0x180082370)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x180082380)
- DuplicateHandle (Address: 0x180082398)
- GetHandleInformation (Address: 0x180082390)
- SetHandleInformation (Address: 0x180082388)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x180082400)
- GetProcessHeaps (Address: 0x1800823f0)
- HeapAlloc (Address: 0x1800823f8)
- HeapCompact (Address: 0x1800823e0)
- HeapCreate (Address: 0x1800823d8)
- HeapDestroy (Address: 0x1800823d0)
- HeapFree (Address: 0x180082408)
- HeapLock (Address: 0x1800823c8)
- HeapQueryInformation (Address: 0x1800823c0)
- HeapReAlloc (Address: 0x1800823e8)
- HeapSetInformation (Address: 0x1800823b8)
- HeapUnlock (Address: 0x180082410)
- HeapValidate (Address: 0x1800823b0)
- HeapWalk (Address: 0x1800823a8)
api-ms-win-core-heap-l2-1-0.dll
- LocalFree (Address: 0x180082420)
api-ms-win-core-io-l1-1-0.dll
- CancelIoEx (Address: 0x180082458)
- CreateIoCompletionPort (Address: 0x180082460)
- DeviceIoControl (Address: 0x180082430)
- GetOverlappedResult (Address: 0x180082450)
- GetQueuedCompletionStatus (Address: 0x180082448)
- GetQueuedCompletionStatusEx (Address: 0x180082440)
- PostQueuedCompletionStatus (Address: 0x180082438)
api-ms-win-core-io-l1-1-1.dll
- CancelIo (Address: 0x180082478)
- CancelSynchronousIo (Address: 0x180082470)
api-ms-win-core-job-l1-1-0.dll
- IsProcessInJob (Address: 0x180082488)
api-ms-win-core-largeinteger-l1-1-0.dll
- MulDiv (Address: 0x180082498)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x180082550)
- EnumResourceLanguagesExA (Address: 0x180082528)
- EnumResourceLanguagesExW (Address: 0x180082520)
- EnumResourceNamesExA (Address: 0x180082518)
- EnumResourceNamesExW (Address: 0x180082558)
- EnumResourceTypesExA (Address: 0x180082510)
- EnumResourceTypesExW (Address: 0x1800824f8)
- FindResourceExW (Address: 0x180082540)
- FindStringOrdinal (Address: 0x1800824a8)
- FreeLibrary (Address: 0x1800824e8)
- FreeLibraryAndExitThread (Address: 0x1800824c8)
- FreeResource (Address: 0x1800824d0)
- GetModuleFileNameA (Address: 0x1800824d8)
- GetModuleFileNameW (Address: 0x1800824e0)
- GetModuleHandleA (Address: 0x1800824f0)
- GetModuleHandleExA (Address: 0x180082500)
- GetModuleHandleExW (Address: 0x180082508)
- GetModuleHandleW (Address: 0x1800824b8)
- GetProcAddress (Address: 0x1800824c0)
- LoadLibraryExA (Address: 0x180082548)
- LoadLibraryExW (Address: 0x1800824b0)
- LoadResource (Address: 0x180082538)
- LockResource (Address: 0x180082560)
- SizeofResource (Address: 0x180082530)
api-ms-win-core-libraryloader-l1-2-1.dll
- FindResourceW (Address: 0x180082578)
- LoadLibraryA (Address: 0x180082580)
- LoadLibraryW (Address: 0x180082570)
api-ms-win-core-libraryloader-l1-2-2.dll
- EnumResourceNamesW (Address: 0x180082590)
api-ms-win-core-libraryloader-l2-1-0.dll
- LoadPackagedLibrary (Address: 0x1800825a0)
api-ms-win-core-localization-l1-2-0.dll
- ConvertDefaultLocale (Address: 0x180082738)
- EnumSystemLocalesA (Address: 0x1800826e8)
- EnumSystemLocalesW (Address: 0x180082758)
- FindNLSString (Address: 0x1800826d8)
- FindNLSStringEx (Address: 0x1800825b0)
- FormatMessageA (Address: 0x1800826d0)
- FormatMessageW (Address: 0x180082710)
- GetACP (Address: 0x180082630)
- GetCalendarInfoEx (Address: 0x1800825c0)
- GetCalendarInfoW (Address: 0x180082748)
- GetCPInfo (Address: 0x1800825d0)
- GetCPInfoExW (Address: 0x1800825d8)
- GetFileMUIInfo (Address: 0x1800825c8)
- GetFileMUIPath (Address: 0x180082628)
- GetLocaleInfoA (Address: 0x180082600)
- GetLocaleInfoEx (Address: 0x1800826a8)
- GetLocaleInfoW (Address: 0x180082608)
- GetNLSVersion (Address: 0x1800825e0)
- GetNLSVersionEx (Address: 0x180082728)
- GetOEMCP (Address: 0x180082610)
- GetProcessPreferredUILanguages (Address: 0x180082640)
- GetSystemDefaultLangID (Address: 0x180082648)
- GetSystemDefaultLCID (Address: 0x180082650)
- GetSystemPreferredUILanguages (Address: 0x1800825b8)
- GetThreadLocale (Address: 0x180082658)
- GetThreadPreferredUILanguages (Address: 0x180082618)
- GetThreadUILanguage (Address: 0x1800826c8)
- GetUILanguageInfo (Address: 0x180082730)
- GetUserDefaultLangID (Address: 0x180082660)
- GetUserDefaultLCID (Address: 0x180082668)
- GetUserPreferredUILanguages (Address: 0x180082638)
- IdnToAscii (Address: 0x1800826e0)
- IdnToUnicode (Address: 0x180082718)
- IsDBCSLeadByte (Address: 0x180082670)
- IsDBCSLeadByteEx (Address: 0x180082678)
- IsNLSDefinedString (Address: 0x180082680)
- IsValidCodePage (Address: 0x180082688)
- IsValidLanguageGroup (Address: 0x180082690)
- IsValidLocale (Address: 0x180082698)
- IsValidLocaleName (Address: 0x180082720)
- IsValidNLSVersion (Address: 0x1800825e8)
- LCMapStringA (Address: 0x1800826a0)
- LCMapStringEx (Address: 0x180082708)
- LCMapStringW (Address: 0x1800826b0)
- LocaleNameToLCID (Address: 0x180082700)
- ResolveLocaleName (Address: 0x1800826f8)
- SetCalendarInfoW (Address: 0x1800826b8)
- SetLocaleInfoW (Address: 0x1800826c0)
- SetProcessPreferredUILanguages (Address: 0x180082620)
- SetThreadLocale (Address: 0x1800826f0)
- SetThreadPreferredUILanguages (Address: 0x1800825f0)
- SetThreadUILanguage (Address: 0x1800825f8)
- VerLanguageNameA (Address: 0x180082750)
- VerLanguageNameW (Address: 0x180082740)
api-ms-win-core-localization-l2-1-0.dll
- EnumCalendarInfoExEx (Address: 0x180082768)
- EnumCalendarInfoExW (Address: 0x1800827b0)
- EnumCalendarInfoW (Address: 0x1800827a8)
- EnumDateFormatsExEx (Address: 0x180082770)
- EnumDateFormatsExW (Address: 0x1800827a0)
- EnumDateFormatsW (Address: 0x180082798)
- EnumSystemCodePagesW (Address: 0x180082790)
- EnumTimeFormatsEx (Address: 0x180082778)
- EnumTimeFormatsW (Address: 0x180082788)
- GetCurrencyFormatEx (Address: 0x180082780)
- GetNumberFormatEx (Address: 0x1800827b8)
api-ms-win-core-localization-private-l1-1-0.dll
- NlsCheckPolicy (Address: 0x1800827c8)
- NlsGetCacheUpdateCount (Address: 0x1800827d0)
- NlsUpdateLocale (Address: 0x1800827e0)
- NlsUpdateSystemLocale (Address: 0x1800827d8)
api-ms-win-core-memory-l1-1-0.dll
- CreateFileMappingW (Address: 0x180082860)
- FlushViewOfFile (Address: 0x180082858)
- MapViewOfFile (Address: 0x180082850)
- MapViewOfFileEx (Address: 0x180082848)
- OpenFileMappingW (Address: 0x180082840)
- ReadProcessMemory (Address: 0x180082838)
- UnmapViewOfFile (Address: 0x180082830)
- VirtualAlloc (Address: 0x180082828)
- VirtualAllocEx (Address: 0x180082820)
- VirtualFree (Address: 0x180082818)
- VirtualFreeEx (Address: 0x180082810)
- VirtualProtect (Address: 0x180082808)
- VirtualProtectEx (Address: 0x180082800)
- VirtualQuery (Address: 0x1800827f8)
- VirtualQueryEx (Address: 0x1800827f0)
- WriteProcessMemory (Address: 0x180082868)
api-ms-win-core-memory-l1-1-1.dll
- CreateFileMappingNumaW (Address: 0x180082878)
- CreateMemoryResourceNotification (Address: 0x180082880)
- GetLargePageMinimum (Address: 0x1800828a8)
- GetProcessWorkingSetSizeEx (Address: 0x1800828d0)
- GetSystemFileCacheSize (Address: 0x1800828c8)
- GetWriteWatch (Address: 0x180082890)
- QueryMemoryResourceNotification (Address: 0x1800828c0)
- ResetWriteWatch (Address: 0x180082888)
- SetProcessWorkingSetSizeEx (Address: 0x1800828b8)
- SetSystemFileCacheSize (Address: 0x1800828b0)
- VirtualLock (Address: 0x1800828a0)
- VirtualUnlock (Address: 0x180082898)
api-ms-win-core-memory-l1-1-2.dll
- AllocateUserPhysicalPages (Address: 0x1800828e8)
- AllocateUserPhysicalPagesNuma (Address: 0x1800828e0)
- FreeUserPhysicalPages (Address: 0x180082918)
- GetMemoryErrorHandlingCapabilities (Address: 0x1800828f8)
- MapUserPhysicalPages (Address: 0x180082910)
- RegisterBadMemoryNotification (Address: 0x180082908)
- UnregisterBadMemoryNotification (Address: 0x180082900)
- VirtualAllocExNuma (Address: 0x1800828f0)
api-ms-win-core-namedpipe-l1-1-0.dll
- ConnectNamedPipe (Address: 0x180082930)
- CreateNamedPipeW (Address: 0x180082928)
- CreatePipe (Address: 0x180082938)
- DisconnectNamedPipe (Address: 0x180082940)
- GetNamedPipeClientComputerNameW (Address: 0x180082948)
- PeekNamedPipe (Address: 0x180082950)
- SetNamedPipeHandleState (Address: 0x180082958)
- TransactNamedPipe (Address: 0x180082960)
- WaitNamedPipeW (Address: 0x180082968)
api-ms-win-core-namedpipe-l1-2-1.dll
- GetNamedPipeHandleStateW (Address: 0x180082978)
api-ms-win-core-namedpipe-l1-2-2.dll
- CallNamedPipeW (Address: 0x180082988)
api-ms-win-core-namespace-l1-1-0.dll
- AddSIDToBoundaryDescriptor (Address: 0x1800829a8)
- ClosePrivateNamespace (Address: 0x1800829a0)
- CreateBoundaryDescriptorW (Address: 0x1800829b0)
- CreatePrivateNamespaceW (Address: 0x1800829c0)
- DeleteBoundaryDescriptor (Address: 0x180082998)
- OpenPrivateNamespaceW (Address: 0x1800829b8)
api-ms-win-core-normalization-l1-1-0.dll
- GetStringScripts (Address: 0x1800829d8)
- IdnToNameprepUnicode (Address: 0x1800829d0)
- IsNormalizedString (Address: 0x1800829e0)
- NormalizeString (Address: 0x1800829e8)
- VerifyScripts (Address: 0x1800829f0)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsA (Address: 0x180082a40)
- ExpandEnvironmentStringsW (Address: 0x180082a48)
- FreeEnvironmentStringsA (Address: 0x180082a50)
- FreeEnvironmentStringsW (Address: 0x180082a58)
- GetCommandLineA (Address: 0x180082a60)
- GetCommandLineW (Address: 0x180082a68)
- GetCurrentDirectoryA (Address: 0x180082a98)
- GetCurrentDirectoryW (Address: 0x180082a88)
- GetEnvironmentStrings (Address: 0x180082a30)
- GetEnvironmentStringsW (Address: 0x180082a80)
- GetEnvironmentVariableA (Address: 0x180082a18)
- GetEnvironmentVariableW (Address: 0x180082a38)
- GetStdHandle (Address: 0x180082a78)
- SearchPathW (Address: 0x180082a70)
- SetCurrentDirectoryA (Address: 0x180082aa0)
- SetCurrentDirectoryW (Address: 0x180082a00)
- SetEnvironmentStringsW (Address: 0x180082a20)
- SetEnvironmentVariableA (Address: 0x180082a28)
- SetEnvironmentVariableW (Address: 0x180082a90)
- SetStdHandle (Address: 0x180082a10)
- SetStdHandleEx (Address: 0x180082a08)
api-ms-win-core-processenvironment-l1-2-0.dll
- NeedCurrentDirectoryForExePathA (Address: 0x180082ab0)
- NeedCurrentDirectoryForExePathW (Address: 0x180082ab8)
- SearchPathA (Address: 0x180082ac0)
api-ms-win-core-processsnapshot-l1-1-0.dll
- PssCaptureSnapshot (Address: 0x180082b10)
- PssDuplicateSnapshot (Address: 0x180082b18)
- PssFreeSnapshot (Address: 0x180082ad0)
- PssQuerySnapshot (Address: 0x180082ad8)
- PssWalkMarkerCreate (Address: 0x180082b08)
- PssWalkMarkerFree (Address: 0x180082b00)
- PssWalkMarkerGetPosition (Address: 0x180082af8)
- PssWalkMarkerSeekToBeginning (Address: 0x180082ae8)
- PssWalkMarkerSetPosition (Address: 0x180082af0)
- PssWalkSnapshot (Address: 0x180082ae0)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateProcessA (Address: 0x180082ba0)
- CreateProcessW (Address: 0x180082b28)
- CreateRemoteThread (Address: 0x180082c00)
- CreateRemoteThreadEx (Address: 0x180082c50)
- DeleteProcThreadAttributeList (Address: 0x180082be8)
- GetCurrentProcess (Address: 0x180082c48)
- GetCurrentProcessId (Address: 0x180082c40)
- GetExitCodeProcess (Address: 0x180082bc0)
- GetExitCodeThread (Address: 0x180082b48)
- GetPriorityClass (Address: 0x180082b50)
- GetProcessId (Address: 0x180082b68)
- GetProcessIdOfThread (Address: 0x180082b60)
- GetProcessTimes (Address: 0x180082b70)
- GetProcessVersion (Address: 0x180082b40)
- GetStartupInfoW (Address: 0x180082b78)
- GetThreadId (Address: 0x180082b90)
- GetThreadPriority (Address: 0x180082ba8)
- GetThreadPriorityBoost (Address: 0x180082bb0)
- InitializeProcThreadAttributeList (Address: 0x180082bf8)
- OpenProcessToken (Address: 0x180082be0)
- OpenThread (Address: 0x180082b38)
- ProcessIdToSessionId (Address: 0x180082b30)
- QueryProcessAffinityUpdateMode (Address: 0x180082c58)
- QueueUserAPC (Address: 0x180082c28)
- ResumeThread (Address: 0x180082c38)
- SetPriorityClass (Address: 0x180082b98)
- SetProcessAffinityUpdateMode (Address: 0x180082bb8)
- SetProcessShutdownParameters (Address: 0x180082b88)
- SetThreadPriority (Address: 0x180082b80)
- SetThreadPriorityBoost (Address: 0x180082bc8)
- SetThreadStackGuarantee (Address: 0x180082bd0)
- SuspendThread (Address: 0x180082bd8)
- SwitchToThread (Address: 0x180082c08)
- TerminateProcess (Address: 0x180082c10)
- TerminateThread (Address: 0x180082c18)
- TlsAlloc (Address: 0x180082b58)
- TlsFree (Address: 0x180082c30)
- TlsSetValue (Address: 0x180082c20)
- UpdateProcThreadAttribute (Address: 0x180082bf0)
api-ms-win-core-processthreads-l1-1-1.dll
- FlushInstructionCache (Address: 0x180082c98)
- GetProcessHandleCount (Address: 0x180082cb8)
- GetProcessMitigationPolicy (Address: 0x180082ca8)
- GetThreadContext (Address: 0x180082c88)
- GetThreadIdealProcessorEx (Address: 0x180082c80)
- GetThreadTimes (Address: 0x180082c78)
- IsProcessorFeaturePresent (Address: 0x180082c70)
- OpenProcess (Address: 0x180082c68)
- SetProcessMitigationPolicy (Address: 0x180082ca0)
- SetThreadContext (Address: 0x180082cb0)
- SetThreadIdealProcessorEx (Address: 0x180082c90)
api-ms-win-core-processthreads-l1-1-2.dll
- GetProcessPriorityBoost (Address: 0x180082ce8)
- GetSystemTimes (Address: 0x180082cf0)
- GetThreadInformation (Address: 0x180082cd0)
- GetThreadIOPendingFlag (Address: 0x180082cc8)
- SetProcessPriorityBoost (Address: 0x180082ce0)
- SetThreadInformation (Address: 0x180082cd8)
api-ms-win-core-processthreads-l1-1-3.dll
- GetProcessInformation (Address: 0x180082d10)
- GetProcessShutdownParameters (Address: 0x180082d00)
- SetProcessInformation (Address: 0x180082d08)
- SetThreadIdealProcessor (Address: 0x180082d18)
api-ms-win-core-processtopology-l1-1-0.dll
- GetProcessGroupAffinity (Address: 0x180082d38)
- GetThreadGroupAffinity (Address: 0x180082d30)
- SetThreadGroupAffinity (Address: 0x180082d28)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x180082d50)
- QueryPerformanceFrequency (Address: 0x180082d48)
api-ms-win-core-psapi-ansi-l1-1-0.dll
- K32EnumPageFilesA (Address: 0x180082d88)
- K32GetDeviceDriverBaseNameA (Address: 0x180082d78)
- K32GetDeviceDriverFileNameA (Address: 0x180082d80)
- K32GetMappedFileNameA (Address: 0x180082d70)
- K32GetModuleBaseNameA (Address: 0x180082d68)
- K32GetModuleFileNameExA (Address: 0x180082d98)
- K32GetProcessImageFileNameA (Address: 0x180082d90)
- QueryFullProcessImageNameA (Address: 0x180082d60)
api-ms-win-core-psapi-l1-1-0.dll
- K32EmptyWorkingSet (Address: 0x180082da8)
- K32EnumDeviceDrivers (Address: 0x180082e10)
- K32EnumPageFilesW (Address: 0x180082e38)
- K32EnumProcesses (Address: 0x180082de0)
- K32EnumProcessModules (Address: 0x180082dd8)
- K32EnumProcessModulesEx (Address: 0x180082dc8)
- K32GetDeviceDriverBaseNameW (Address: 0x180082e18)
- K32GetDeviceDriverFileNameW (Address: 0x180082e20)
- K32GetMappedFileNameW (Address: 0x180082e08)
- K32GetModuleBaseNameW (Address: 0x180082dd0)
- K32GetModuleFileNameExW (Address: 0x180082e48)
- K32GetModuleInformation (Address: 0x180082dc0)
- K32GetPerformanceInfo (Address: 0x180082e30)
- K32GetProcessImageFileNameW (Address: 0x180082e40)
- K32GetProcessMemoryInfo (Address: 0x180082e28)
- K32GetWsChanges (Address: 0x180082df8)
- K32GetWsChangesEx (Address: 0x180082e00)
- K32InitializeProcessForWsWatch (Address: 0x180082df0)
- K32QueryWorkingSet (Address: 0x180082db0)
- K32QueryWorkingSetEx (Address: 0x180082de8)
- QueryFullProcessImageNameW (Address: 0x180082db8)
api-ms-win-core-realtime-l1-1-0.dll
- QueryIdleProcessorCycleTime (Address: 0x180082e78)
- QueryIdleProcessorCycleTimeEx (Address: 0x180082e70)
- QueryProcessCycleTime (Address: 0x180082e68)
- QueryThreadCycleTime (Address: 0x180082e58)
- QueryUnbiasedInterruptTime (Address: 0x180082e60)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x180082fc8)
- RegCopyTreeW (Address: 0x180082fb8)
- RegCreateKeyExA (Address: 0x180082fb0)
- RegCreateKeyExW (Address: 0x180082fa8)
- RegDeleteKeyExA (Address: 0x180082f80)
- RegDeleteKeyExW (Address: 0x180082f08)
- RegDeleteTreeA (Address: 0x180082fa0)
- RegDeleteTreeW (Address: 0x180082e88)
- RegDeleteValueA (Address: 0x180082e90)
- RegDeleteValueW (Address: 0x180082e98)
- RegDisablePredefinedCacheEx (Address: 0x180082ea0)
- RegEnumKeyExA (Address: 0x180082ea8)
- RegEnumKeyExW (Address: 0x180082eb0)
- RegEnumValueA (Address: 0x180082eb8)
- RegEnumValueW (Address: 0x180082ec0)
- RegFlushKey (Address: 0x180082ec8)
- RegGetKeySecurity (Address: 0x180082ed0)
- RegGetValueA (Address: 0x180082ed8)
- RegGetValueW (Address: 0x180082ee8)
- RegLoadAppKeyW (Address: 0x180082f88)
- RegLoadKeyA (Address: 0x180082ee0)
- RegLoadKeyW (Address: 0x180082fd0)
- RegLoadMUIStringA (Address: 0x180082ef0)
- RegLoadMUIStringW (Address: 0x180082ef8)
- RegNotifyChangeKeyValue (Address: 0x180082f00)
- RegOpenCurrentUser (Address: 0x180082fc0)
- RegOpenKeyExA (Address: 0x180082f10)
- RegOpenKeyExW (Address: 0x180082f78)
- RegOpenUserClassesRoot (Address: 0x180082f18)
- RegQueryInfoKeyA (Address: 0x180082f20)
- RegQueryInfoKeyW (Address: 0x180082f28)
- RegQueryValueExA (Address: 0x180082f30)
- RegQueryValueExW (Address: 0x180082f38)
- RegRestoreKeyA (Address: 0x180082f40)
- RegRestoreKeyW (Address: 0x180082f48)
- RegSaveKeyExA (Address: 0x180082f50)
- RegSaveKeyExW (Address: 0x180082f58)
- RegSetKeySecurity (Address: 0x180082f60)
- RegSetValueExA (Address: 0x180082f68)
- RegSetValueExW (Address: 0x180082f70)
- RegUnLoadKeyA (Address: 0x180082f98)
- RegUnLoadKeyW (Address: 0x180082f90)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlAddFunctionTable (Address: 0x180083020)
- RtlCaptureContext (Address: 0x180082fe0)
- RtlCaptureStackBackTrace (Address: 0x180083028)
- RtlCompareMemory (Address: 0x180082ff8)
- RtlDeleteFunctionTable (Address: 0x180083000)
- RtlInstallFunctionTableCallback (Address: 0x180082ff0)
- RtlLookupFunctionEntry (Address: 0x180082fe8)
- RtlPcToFileHeader (Address: 0x180083040)
- RtlRaiseException (Address: 0x180083018)
- RtlRestoreContext (Address: 0x180083030)
- RtlUnwind (Address: 0x180083038)
- RtlUnwindEx (Address: 0x180083010)
- RtlVirtualUnwind (Address: 0x180083008)
api-ms-win-core-sidebyside-l1-1-0.dll
- ActivateActCtx (Address: 0x180083058)
- AddRefActCtx (Address: 0x180083060)
- CreateActCtxW (Address: 0x180083070)
- DeactivateActCtx (Address: 0x180083078)
- FindActCtxSectionGuid (Address: 0x180083080)
- FindActCtxSectionStringW (Address: 0x180083088)
- GetCurrentActCtx (Address: 0x180083090)
- QueryActCtxSettingsW (Address: 0x1800830a0)
- QueryActCtxW (Address: 0x180083098)
- ReleaseActCtx (Address: 0x180083050)
- ZombifyActCtx (Address: 0x180083068)
api-ms-win-core-string-l1-1-0.dll
- CompareStringEx (Address: 0x1800830b8)
- CompareStringOrdinal (Address: 0x1800830b0)
- CompareStringW (Address: 0x1800830e0)
- FoldStringW (Address: 0x1800830d8)
- GetStringTypeExW (Address: 0x1800830d0)
- GetStringTypeW (Address: 0x1800830c8)
- MultiByteToWideChar (Address: 0x1800830e8)
- WideCharToMultiByte (Address: 0x1800830c0)
api-ms-win-core-synch-l1-1-0.dll
- CancelWaitableTimer (Address: 0x180083170)
- CreateEventA (Address: 0x180083168)
- CreateEventExA (Address: 0x180083160)
- CreateEventExW (Address: 0x180083158)
- CreateEventW (Address: 0x180083110)
- CreateMutexA (Address: 0x1800831b8)
- CreateMutexExA (Address: 0x180083130)
- CreateMutexExW (Address: 0x1800831d0)
- CreateMutexW (Address: 0x1800831c8)
- CreateSemaphoreExW (Address: 0x1800831c0)
- CreateWaitableTimerExW (Address: 0x1800831b0)
- DeleteCriticalSection (Address: 0x180083100)
- EnterCriticalSection (Address: 0x1800831e8)
- InitializeCriticalSection (Address: 0x1800831d8)
- InitializeCriticalSectionAndSpinCount (Address: 0x1800831a8)
- InitializeCriticalSectionEx (Address: 0x1800831a0)
- LeaveCriticalSection (Address: 0x180083108)
- OpenEventA (Address: 0x180083198)
- OpenEventW (Address: 0x180083190)
- OpenMutexW (Address: 0x180083188)
- OpenSemaphoreW (Address: 0x180083180)
- OpenWaitableTimerW (Address: 0x180083178)
- ReleaseMutex (Address: 0x180083148)
- ReleaseSemaphore (Address: 0x180083140)
- ResetEvent (Address: 0x180083138)
- SetEvent (Address: 0x180083128)
- SetWaitableTimer (Address: 0x180083120)
- SleepEx (Address: 0x180083150)
- WaitForMultipleObjectsEx (Address: 0x1800831e0)
- WaitForSingleObject (Address: 0x180083118)
- WaitForSingleObjectEx (Address: 0x1800830f8)
api-ms-win-core-synch-l1-2-0.dll
- DeleteSynchronizationBarrier (Address: 0x180083218)
- EnterSynchronizationBarrier (Address: 0x180083200)
- InitializeSynchronizationBarrier (Address: 0x1800831f8)
- InitOnceExecuteOnce (Address: 0x180083208)
- SignalObjectAndWait (Address: 0x180083210)
api-ms-win-core-synch-l1-2-1.dll
- CreateSemaphoreW (Address: 0x180083228)
- WaitForMultipleObjects (Address: 0x180083230)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetComputerNameExA (Address: 0x1800832a0)
- GetComputerNameExW (Address: 0x180083298)
- GetLocalTime (Address: 0x180083290)
- GetLogicalProcessorInformation (Address: 0x1800832c0)
- GetLogicalProcessorInformationEx (Address: 0x1800832a8)
- GetSystemInfo (Address: 0x180083288)
- GetSystemTime (Address: 0x180083280)
- GetSystemTimeAdjustment (Address: 0x180083278)
- GetSystemTimeAsFileTime (Address: 0x1800832b0)
- GetTickCount (Address: 0x1800832b8)
- GetVersion (Address: 0x180083268)
- GetVersionExA (Address: 0x180083260)
- GetVersionExW (Address: 0x180083258)
- GetWindowsDirectoryA (Address: 0x180083250)
- GetWindowsDirectoryW (Address: 0x180083248)
- GlobalMemoryStatusEx (Address: 0x180083240)
- SetLocalTime (Address: 0x180083270)
api-ms-win-core-sysinfo-l1-2-0.dll
- EnumSystemFirmwareTables (Address: 0x1800832d8)
- GetNativeSystemInfo (Address: 0x180083300)
- GetProductInfo (Address: 0x1800832e0)
- GetSystemFirmwareTable (Address: 0x1800832f8)
- GetSystemTimePreciseAsFileTime (Address: 0x1800832d0)
- SetComputerNameExW (Address: 0x1800832f0)
- SetSystemTime (Address: 0x1800832e8)
api-ms-win-core-sysinfo-l1-2-1.dll
- DnsHostnameToComputerNameExW (Address: 0x180083318)
- GetPhysicallyInstalledSystemMemory (Address: 0x180083310)
- SetComputerNameEx2W (Address: 0x180083320)
api-ms-win-core-sysinfo-l1-2-3.dll
- SetComputerNameA (Address: 0x180083340)
- SetComputerNameExA (Address: 0x180083338)
- SetComputerNameW (Address: 0x180083330)
api-ms-win-core-systemtopology-l1-1-0.dll
- GetNumaHighestNodeNumber (Address: 0x180083350)
- GetNumaNodeProcessorMaskEx (Address: 0x180083358)
api-ms-win-core-systemtopology-l1-1-1.dll
- GetNumaProximityNodeEx (Address: 0x180083368)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
- ChangeTimerQueueTimer (Address: 0x1800833a0)
- CreateTimerQueue (Address: 0x180083390)
- CreateTimerQueueTimer (Address: 0x180083388)
- DeleteTimerQueueEx (Address: 0x180083380)
- DeleteTimerQueueTimer (Address: 0x1800833a8)
- QueueUserWorkItem (Address: 0x180083398)
- UnregisterWaitEx (Address: 0x180083378)
api-ms-win-core-threadpool-private-l1-1-0.dll
- RegisterWaitForSingleObjectEx (Address: 0x1800833b8)
api-ms-win-core-timezone-l1-1-0.dll
- FileTimeToSystemTime (Address: 0x1800833d8)
- GetDynamicTimeZoneInformation (Address: 0x180083400)
- GetTimeZoneInformation (Address: 0x1800833f0)
- GetTimeZoneInformationForYear (Address: 0x1800833c8)
- SetDynamicTimeZoneInformation (Address: 0x1800833e0)
- SetTimeZoneInformation (Address: 0x180083408)
- SystemTimeToFileTime (Address: 0x1800833f8)
- SystemTimeToTzSpecificLocalTime (Address: 0x1800833d0)
- TzSpecificLocalTimeToSystemTime (Address: 0x1800833e8)
api-ms-win-core-util-l1-1-0.dll
- Beep (Address: 0x180083418)
api-ms-win-core-windowserrorreporting-l1-1-0.dll
- GetApplicationRecoveryCallback (Address: 0x180083458)
- GetApplicationRestartSettings (Address: 0x180083450)
- WerRegisterFile (Address: 0x180083430)
- WerRegisterMemoryBlock (Address: 0x180083460)
- WerRegisterRuntimeExceptionModule (Address: 0x180083440)
- WerUnregisterFile (Address: 0x180083448)
- WerUnregisterMemoryBlock (Address: 0x180083428)
- WerUnregisterRuntimeExceptionModule (Address: 0x180083438)
api-ms-win-core-windowserrorreporting-l1-1-1.dll
- WerRegisterAdditionalProcess (Address: 0x180083470)
- WerRegisterCustomMetadata (Address: 0x180083488)
- WerRegisterExcludedMemoryBlock (Address: 0x180083498)
- WerUnregisterAdditionalProcess (Address: 0x180083478)
- WerUnregisterCustomMetadata (Address: 0x180083480)
- WerUnregisterExcludedMemoryBlock (Address: 0x180083490)
api-ms-win-core-windowserrorreporting-l1-1-2.dll
- WerRegisterAppLocalDump (Address: 0x1800834a8)
- WerUnregisterAppLocalDump (Address: 0x1800834b0)
api-ms-win-core-windowserrorreporting-l1-1-3.dll
- RegisterApplicationRestart (Address: 0x1800834c0)
- UnregisterApplicationRestart (Address: 0x1800834c8)
api-ms-win-core-wow64-l1-1-0.dll
- IsWow64Process (Address: 0x1800834d8)
- Wow64DisableWow64FsRedirection (Address: 0x1800834e0)
- Wow64RevertWow64FsRedirection (Address: 0x1800834e8)
api-ms-win-core-wow64-l1-1-1.dll
- GetSystemWow64Directory2W (Address: 0x180083500)
- GetSystemWow64DirectoryA (Address: 0x180083508)
- GetSystemWow64DirectoryW (Address: 0x180083510)
- IsWow64Process2 (Address: 0x1800834f8)
api-ms-win-core-wow64-l1-1-3.dll
- Wow64GetThreadContext (Address: 0x180083530)
- Wow64SetThreadContext (Address: 0x180083528)
- Wow64SuspendThread (Address: 0x180083520)
api-ms-win-core-xstate-l2-1-0.dll
- CopyContext (Address: 0x180083540)
- GetEnabledXStateFeatures (Address: 0x180083568)
- GetXStateFeaturesMask (Address: 0x180083550)
- InitializeContext (Address: 0x180083560)
- LocateXStateFeature (Address: 0x180083558)
- SetXStateFeaturesMask (Address: 0x180083548)
api-ms-win-core-xstate-l2-1-1.dll
- InitializeContext2 (Address: 0x180083578)
api-ms-win-eventing-provider-l1-1-0.dll
- EventRegister (Address: 0x180083588)
- EventSetInformation (Address: 0x1800835a0)
- EventUnregister (Address: 0x180083590)
- EventWriteTransfer (Address: 0x180083598)
api-ms-win-security-appcontainer-l1-1-0.dll
- GetAppContainerNamedObjectPath (Address: 0x1800835b0)
api-ms-win-security-base-l1-1-0.dll
- AccessCheck (Address: 0x1800835f0)
- AllocateAndInitializeSid (Address: 0x1800835f8)
- CreateWellKnownSid (Address: 0x1800835d8)
- DuplicateToken (Address: 0x180083608)
- EqualSid (Address: 0x1800835c0)
- FreeSid (Address: 0x180083600)
- GetSidSubAuthority (Address: 0x1800835e0)
- GetSidSubAuthorityCount (Address: 0x1800835c8)
- GetTokenInformation (Address: 0x1800835d0)
- InitializeSid (Address: 0x1800835e8)
api-ms-win-security-base-l1-2-0.dll
- AddResourceAttributeAce (Address: 0x180083618)
- AddScopedPolicyIDAce (Address: 0x180083648)
- CheckTokenCapability (Address: 0x180083640)
- CheckTokenMembershipEx (Address: 0x180083638)
- GetAppContainerAce (Address: 0x180083630)
- GetCachedSigningLevel (Address: 0x180083628)
- SetCachedSigningLevel (Address: 0x180083620)
KERNELBASE.dll
- AppContainerFreeMemory (Address: 0x1800818d0)
- AppContainerLookupMoniker (Address: 0x180081870)
- AppXGetOSMaxVersionTested (Address: 0x1800818b0)
- AppXPostSuccessExtension (Address: 0x180081830)
- AppXPreCreationExtension (Address: 0x180081828)
- AppXReleaseAppXContext (Address: 0x180081838)
- AreFileApisANSI (Address: 0x180081840)
- BaseDllFreeResourceId (Address: 0x180081998)
- BaseDllMapResourceIdW (Address: 0x1800819a0)
- BaseFormatObjectAttributes (Address: 0x1800817c8)
- BaseGetNamedObjectDirectory (Address: 0x180081a88)
- BasepAdjustObjectAttributesForPrivateNamespace (Address: 0x1800818e8)
- BasepNotifyTrackingService (Address: 0x1800818d8)
- CheckAllowDecryptedRemoteDestinationPolicy (Address: 0x1800819a8)
- CheckGroupPolicyEnabled (Address: 0x180081900)
- CheckIsMSIXPackage (Address: 0x1800818a0)
- ClosePackageInfo (Address: 0x1800818a8)
- CompareStringA (Address: 0x180081818)
- CreateProcessAsUserA (Address: 0x180081860)
- CreateProcessAsUserW (Address: 0x180081858)
- CreateProcessInternalA (Address: 0x180081848)
- CreateProcessInternalW (Address: 0x180081850)
- EnumLanguageGroupLocalesW (Address: 0x180081868)
- EnumSystemLanguageGroupsW (Address: 0x180081878)
- EnumSystemLocalesEx (Address: 0x180081880)
- EnumUILanguagesW (Address: 0x1800819b8)
- FatalAppExitA (Address: 0x1800819e8)
- FatalAppExitW (Address: 0x1800819e0)
- GetCalendar (Address: 0x180081990)
- GetCurrentPackageFullName (Address: 0x180081898)
- GetEightBitStringToUnicodeStringRoutine (Address: 0x1800818f0)
- GetEraNameCountedString (Address: 0x1800819d8)
- GetLocaleInfoHelper (Address: 0x180081988)
- GetNamedLocaleHashNode (Address: 0x180081978)
- GetNamedPipeAttribute (Address: 0x180081820)
- GetPackageFullName (Address: 0x180081890)
- GetPackageTargetPlatformProperty (Address: 0x1800818b8)
- GetProcAddressForCaller (Address: 0x180081a80)
- GetPtrCalData (Address: 0x180081930)
- GetPtrCalDataArray (Address: 0x180081920)
- GetRegistryExtensionFlags (Address: 0x1800817e8)
- GetStringTableEntry (Address: 0x1800818f8)
- GetStringTypeA (Address: 0x180081a78)
- GetSystemDefaultLocaleName (Address: 0x1800819d0)
- GetSystemDefaultUILanguage (Address: 0x180081a70)
- GetTargetPlatformContext (Address: 0x1800818c0)
- GetUnicodeStringToEightBitSizeRoutine (Address: 0x180081810)
- GetUnicodeStringToEightBitStringRoutine (Address: 0x180081808)
- GetUserDefaultLocaleName (Address: 0x1800819c8)
- GetUserDefaultUILanguage (Address: 0x180081a68)
- GetUserOverrideString (Address: 0x180081928)
- GetUserOverrideWord (Address: 0x180081980)
- GetVolumeNameForVolumeMountPointW (Address: 0x1800817d0)
- GlobalAlloc (Address: 0x180081a60)
- GlobalFree (Address: 0x1800817f8)
- HeapSummary (Address: 0x180081a58)
- Internal_EnumCalendarInfo (Address: 0x180081938)
- Internal_EnumDateFormats (Address: 0x180081950)
- Internal_EnumLanguageGroupLocales (Address: 0x180081940)
- Internal_EnumSystemCodePages (Address: 0x180081948)
- Internal_EnumSystemLanguageGroups (Address: 0x180081960)
- Internal_EnumTimeFormats (Address: 0x180081970)
- Internal_EnumUILanguages (Address: 0x180081958)
- InternalLcidToName (Address: 0x180081910)
- KernelBaseGetGlobalData (Address: 0x1800817f0)
- LCIDToLocaleName (Address: 0x1800819c0)
- LoadStringBaseExW (Address: 0x180081800)
- LocalAlloc (Address: 0x180081a50)
- LocalLock (Address: 0x180081a48)
- LocalReAlloc (Address: 0x180081a40)
- LocalUnlock (Address: 0x180081a38)
- lstrcmpiW (Address: 0x1800817e0)
- lstrcmpW (Address: 0x1800817d8)
- lstrcpynA (Address: 0x180081a08)
- lstrcpynW (Address: 0x180081a00)
- lstrlenA (Address: 0x1800819f8)
- lstrlenW (Address: 0x1800819f0)
- MapViewOfFileExNuma (Address: 0x180081a30)
- MoveFileWithProgressTransactedW (Address: 0x1800818e0)
- NlsIsUserDefaultLocale (Address: 0x180081918)
- NlsValidateLocale (Address: 0x180081968)
- NotifyMountMgr (Address: 0x1800817c0)
- OpenPackageInfoByFullNameForUser (Address: 0x1800818c8)
- OpenRegKey (Address: 0x180081908)
- PackageIdFromFullName (Address: 0x180081888)
- PrivCopyFileExW (Address: 0x1800819b0)
- PulseEvent (Address: 0x180081a28)
- SetFileApisToANSI (Address: 0x180081a20)
- SetFileApisToOEM (Address: 0x180081a18)
- Sleep (Address: 0x180081a10)
ntdll.dll
- __C_specific_handler (Address: 0x1800841d8)
- _local_unwind (Address: 0x1800841f0)
- _memicmp (Address: 0x180083ca8)
- _stricmp (Address: 0x180083fb8)
- _strnicmp (Address: 0x180084048)
- _vsnwprintf (Address: 0x180084160)
- _wcsicmp (Address: 0x1800841d0)
- _wcslwr (Address: 0x180083658)
- _wcsnicmp (Address: 0x180083980)
- _wtol (Address: 0x180083768)
- atol (Address: 0x1800838a0)
- bsearch (Address: 0x1800836f8)
- cos (Address: 0x1800841f8)
- CsrAllocateCaptureBuffer (Address: 0x1800839a8)
- CsrAllocateMessagePointer (Address: 0x1800839a0)
- CsrCaptureMessageMultiUnicodeStringsInPlace (Address: 0x180083ff8)
- CsrCaptureMessageString (Address: 0x180083df8)
- CsrClientCallServer (Address: 0x180083bd0)
- CsrFreeCaptureBuffer (Address: 0x180083998)
- CsrVerifyRegion (Address: 0x180083c18)
- DbgPrint (Address: 0x180084090)
- DbgPrintEx (Address: 0x180083880)
- DbgUiGetThreadDebugObject (Address: 0x180083b98)
- DbgUiIssueRemoteBreakin (Address: 0x180083ba0)
- EtwEventEnabled (Address: 0x180083668)
- EtwEventRegister (Address: 0x1800837a8)
- EtwEventUnregister (Address: 0x180083798)
- EtwEventWrite (Address: 0x1800837a0)
- EtwEventWriteNoRegistration (Address: 0x180083a00)
- floor (Address: 0x180084200)
- isdigit (Address: 0x1800838b0)
- LdrAddRefDll (Address: 0x180083b40)
- LdrDisableThreadCalloutsForDll (Address: 0x180083bd8)
- LdrFindResource_U (Address: 0x180083ec0)
- LdrFindResourceEx_U (Address: 0x1800836b8)
- LdrGetDllDirectory (Address: 0x180083af0)
- LdrGetProcedureAddress (Address: 0x180083a18)
- LdrLoadDll (Address: 0x180083a20)
- LdrOpenImageFileOptionsKey (Address: 0x180083d78)
- LdrQueryImageFileExecutionOptions (Address: 0x180084150)
- LdrQueryImageFileKeyOption (Address: 0x180083d70)
- LdrResFindResourceDirectory (Address: 0x180083720)
- LdrResSearchResource (Address: 0x180084040)
- LdrSetDllDirectory (Address: 0x180083eb8)
- LdrSetDllManifestProber (Address: 0x180084170)
- LdrUnloadDll (Address: 0x180083a10)
- memcmp (Address: 0x180084208)
- memcpy (Address: 0x180084210)
- memmove (Address: 0x1800841e0)
- memmove_s (Address: 0x180083770)
- memset (Address: 0x180084218)
- NlsMbCodePageTag (Address: 0x180084018)
- NtAddAtomEx (Address: 0x180083c60)
- NtAllocateVirtualMemory (Address: 0x180083e08)
- NtApphelpCacheControl (Address: 0x1800840a8)
- NtAssignProcessToJobObject (Address: 0x180083d30)
- NtClearEvent (Address: 0x180084080)
- NtClose (Address: 0x180083b38)
- NtCreateEvent (Address: 0x180083ae0)
- NtCreateFile (Address: 0x180083ce0)
- NtCreateJobObject (Address: 0x180083d20)
- NtCreateJobSet (Address: 0x180083d00)
- NtCreateKey (Address: 0x180083cd8)
- NtCreateMailslotFile (Address: 0x180083e80)
- NtCreateSection (Address: 0x180083808)
- NtDeleteAtom (Address: 0x180083c68)
- NtDeleteValueKey (Address: 0x180083740)
- NtDeviceIoControlFile (Address: 0x180083f10)
- NtEnumerateKey (Address: 0x180083678)
- NtEnumerateValueKey (Address: 0x180083db0)
- NtFindAtom (Address: 0x180083c48)
- NtFlushKey (Address: 0x180083ca0)
- NtFreeVirtualMemory (Address: 0x180083da0)
- NtFsControlFile (Address: 0x180083b28)
- NtGetDevicePowerState (Address: 0x180083ee0)
- NtInitiatePowerAction (Address: 0x180083ac0)
- NtIsSystemResumeAutomatic (Address: 0x180083ab8)
- NtLockFile (Address: 0x180083de8)
- NtMapUserPhysicalPagesScatter (Address: 0x1800837c0)
- NtMapViewOfSection (Address: 0x180083800)
- NtOpenFile (Address: 0x180083b30)
- NtOpenJobObject (Address: 0x180083d40)
- NtOpenKey (Address: 0x180083a90)
- NtOpenProcessToken (Address: 0x180083a68)
- NtOpenThreadToken (Address: 0x180083a78)
- NtPowerInformation (Address: 0x180083ed8)
- NtProtectVirtualMemory (Address: 0x180083e70)
- NtQueryAttributesFile (Address: 0x180083f88)
- NtQueryDirectoryFile (Address: 0x180083ea0)
- NtQueryEaFile (Address: 0x180083d60)
- NtQueryEvent (Address: 0x180083948)
- NtQueryFullAttributesFile (Address: 0x180083fa0)
- NtQueryInformationAtom (Address: 0x180083c50)
- NtQueryInformationFile (Address: 0x180083b48)
- NtQueryInformationJobObject (Address: 0x180083d18)
- NtQueryInformationProcess (Address: 0x180083bb0)
- NtQueryInformationThread (Address: 0x1800838b8)
- NtQueryInformationToken (Address: 0x180083a60)
- NtQueryInstallUILanguage (Address: 0x180083790)
- NtQueryLicenseValue (Address: 0x180083760)
- NtQuerySection (Address: 0x180083d98)
- NtQuerySecurityObject (Address: 0x180083d68)
- NtQuerySystemEnvironmentValueEx (Address: 0x180083ef8)
- NtQuerySystemInformation (Address: 0x180084188)
- NtQueryTimerResolution (Address: 0x180083fc8)
- NtQueryValueKey (Address: 0x180083a40)
- NtQueryVirtualMemory (Address: 0x180083e60)
- NtQueryVolumeInformationFile (Address: 0x180083990)
- NtQueryWnfStateData (Address: 0x180083ed0)
- NtRaiseHardError (Address: 0x180083958)
- NtReadFile (Address: 0x180083de0)
- NtReadVirtualMemory (Address: 0x180084038)
- NtReplacePartitionUnit (Address: 0x1800839d8)
- NtSetEaFile (Address: 0x180083d50)
- NtSetInformationDebugObject (Address: 0x180083b90)
- NtSetInformationFile (Address: 0x180083b50)
- NtSetInformationJobObject (Address: 0x180083d10)
- NtSetInformationProcess (Address: 0x180083d88)
- NtSetInformationThread (Address: 0x180083a70)
- NtSetSecurityObject (Address: 0x180083d58)
- NtSetSystemEnvironmentValueEx (Address: 0x180083ef0)
- NtSetSystemInformation (Address: 0x180083ba8)
- NtSetThreadExecutionState (Address: 0x180083ee8)
- NtSetTimerResolution (Address: 0x180083fc0)
- NtSetValueKey (Address: 0x180083748)
- NtSetVolumeInformationFile (Address: 0x180083f08)
- NtTerminateJobObject (Address: 0x180083d38)
- NtTerminateProcess (Address: 0x1800836a0)
- NtUnlockFile (Address: 0x180083dd0)
- NtUnmapViewOfSection (Address: 0x180083888)
- NtWaitForMultipleObjects (Address: 0x180084078)
- NtWaitForSingleObject (Address: 0x180083ad8)
- NtWriteFile (Address: 0x180083da8)
- RtlAcquirePrivilege (Address: 0x180083d28)
- RtlAcquireSRWLockExclusive (Address: 0x180083a98)
- RtlActivateActivationContext (Address: 0x180083828)
- RtlActivateActivationContextUnsafeFast (Address: 0x180083b70)
- RtlAddAccessAllowedAce (Address: 0x1800841b8)
- RtlAddAtomToAtomTable (Address: 0x180083c58)
- RtlAddIntegrityLabelToBoundaryDescriptor (Address: 0x1800839c8)
- RtlAddRefActivationContext (Address: 0x180083840)
- RtlAllocateAndInitializeSid (Address: 0x180083f78)
- RtlAllocateHandle (Address: 0x180083f20)
- RtlAllocateHeap (Address: 0x1800841c8)
- RtlAnsiStringToUnicodeString (Address: 0x180083aa0)
- RtlAppendUnicodeStringToString (Address: 0x180083a30)
- RtlAppendUnicodeToString (Address: 0x180083a28)
- RtlCharToInteger (Address: 0x180083c20)
- RtlCompactHeap (Address: 0x180083b20)
- RtlCompareUnicodeString (Address: 0x1800839e0)
- RtlComputeImportTableHash (Address: 0x180083700)
- RtlConvertSidToUnicodeString (Address: 0x180083fd8)
- RtlCopyUnicodeString (Address: 0x180083df0)
- RtlCreateAcl (Address: 0x1800841c0)
- RtlCreateActivationContext (Address: 0x180083848)
- RtlCreateAtomTable (Address: 0x180083c70)
- RtlCreateBoundaryDescriptor (Address: 0x180083e68)
- RtlCreateEnvironment (Address: 0x180083940)
- RtlCreateEnvironmentEx (Address: 0x180083938)
- RtlCreateQueryDebugBuffer (Address: 0x180083e98)
- RtlCreateSecurityDescriptor (Address: 0x1800841b0)
- RtlCreateUmsCompletionList (Address: 0x180083928)
- RtlCreateUmsThreadContext (Address: 0x1800838c8)
- RtlCreateUnicodeString (Address: 0x180083950)
- RtlCreateUnicodeStringFromAsciiz (Address: 0x180083ce8)
- RtlDeactivateActivationContext (Address: 0x180083820)
- RtlDeactivateActivationContextUnsafeFast (Address: 0x180083b68)
- RtlDecodeSystemPointer (Address: 0x1800836f0)
- RtlDeleteAtomFromAtomTable (Address: 0x180083c78)
- RtlDeleteUmsCompletionList (Address: 0x1800838f8)
- RtlDeleteUmsThreadContext (Address: 0x180083c08)
- RtlDequeueUmsCompletionListItems (Address: 0x180083918)
- RtlDeregisterSecureMemoryCacheCallback (Address: 0x180083b10)
- RtlDeregisterWait (Address: 0x180083e48)
- RtlDestroyAtomTable (Address: 0x180083c40)
- RtlDestroyEnvironment (Address: 0x180083930)
- RtlDestroyQueryDebugBuffer (Address: 0x180083e88)
- RtlDetermineDosPathNameType_U (Address: 0x180083870)
- RtlDisableThreadProfiling (Address: 0x1800836d0)
- RtlDnsHostNameToComputerName (Address: 0x180083c90)
- RtlDoesFileExists_U (Address: 0x180083868)
- RtlDosPathNameToNtPathName_U (Address: 0x180083dd8)
- RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x180083810)
- RtlDosPathNameToRelativeNtPathName_U (Address: 0x180083e30)
- RtlEnableThreadProfiling (Address: 0x1800836e0)
- RtlEncodeSystemPointer (Address: 0x180084068)
- RtlEnterCriticalSection (Address: 0x180083cb8)
- RtlEnterUmsSchedulingMode (Address: 0x1800838c0)
- RtlEqualSid (Address: 0x180083a48)
- RtlEqualString (Address: 0x180083db8)
- RtlEqualUnicodeString (Address: 0x1800839b0)
- RtlExecuteUmsThread (Address: 0x180083908)
- RtlExitUserProcess (Address: 0x1800839e8)
- RtlExitUserThread (Address: 0x1800839c0)
- RtlExpandEnvironmentStrings_U (Address: 0x1800837c8)
- RtlFindActivationContextSectionGuid (Address: 0x180083708)
- RtlFindActivationContextSectionString (Address: 0x180083eb0)
- RtlFormatCurrentUserKeyPath (Address: 0x180083a38)
- RtlFreeAnsiString (Address: 0x180083960)
- RtlFreeHandle (Address: 0x180083f30)
- RtlFreeHeap (Address: 0x180084190)
- RtlFreeOemString (Address: 0x180083968)
- RtlFreeSid (Address: 0x180083f90)
- RtlFreeUnicodeString (Address: 0x180083b80)
- RtlGetActiveActivationContext (Address: 0x180083818)
- RtlGetActiveConsoleId (Address: 0x180083b60)
- RtlGetAppContainerParent (Address: 0x180083fe8)
- RtlGetAppContainerSidType (Address: 0x180083fd0)
- RtlGetCurrentDirectory_U (Address: 0x180083970)
- RtlGetCurrentProcessorNumberEx (Address: 0x180083ad0)
- RtlGetCurrentServiceSessionId (Address: 0x180084140)
- RtlGetCurrentTransaction (Address: 0x180083bc0)
- RtlGetCurrentUmsThread (Address: 0x1800838f0)
- RtlGetDeviceFamilyInfoEnum (Address: 0x180084098)
- RtlGetFullPathName_U (Address: 0x180083860)
- RtlGetFullPathName_UEx (Address: 0x1800840b0)
- RtlGetLengthWithoutLastFullDosOrNtPathElement (Address: 0x180083850)
- RtlGetLongestNtPathLength (Address: 0x180083e10)
- RtlGetNativeSystemInformation (Address: 0x180084108)
- RtlGetNextUmsListItem (Address: 0x1800838e8)
- RtlGetNtSystemRoot (Address: 0x180084070)
- RtlGetPersistedStateLocation (Address: 0x1800841e8)
- RtlGetSuiteMask (Address: 0x180084148)
- RtlGetThreadErrorMode (Address: 0x180083e78)
- RtlGetThreadPreferredUILanguages (Address: 0x180084030)
- RtlGetUILanguageInfo (Address: 0x180083660)
- RtlGetUmsCompletionListEvent (Address: 0x180083910)
- RtlGetUserInfoHeap (Address: 0x180083b00)
- RtlGetVersion (Address: 0x180084138)
- RtlGUIDFromString (Address: 0x1800837b0)
- RtlHashUnicodeString (Address: 0x1800840a0)
- RtlImageDirectoryEntryToData (Address: 0x180083e58)
- RtlImageNtHeader (Address: 0x180084180)
- RtlImageNtHeaderEx (Address: 0x1800837f8)
- RtlInitAnsiString (Address: 0x180083c28)
- RtlInitAnsiStringEx (Address: 0x180083ab0)
- RtlInitializeCriticalSection (Address: 0x180084028)
- RtlInitializeSid (Address: 0x180083a58)
- RtlInitString (Address: 0x180083f00)
- RtlInitUnicodeString (Address: 0x180084158)
- RtlInitUnicodeStringEx (Address: 0x1800839f0)
- RtlIntegerToUnicodeString (Address: 0x180083680)
- RtlIsNameLegalDOS8Dot3 (Address: 0x180083ac8)
- RtlIsTextUnicode (Address: 0x180083e00)
- RtlIsValidHandle (Address: 0x180083f18)
- RtlLCIDToCultureName (Address: 0x180083778)
- RtlLeaveCriticalSection (Address: 0x180083cd0)
- RtlLengthSecurityDescriptor (Address: 0x180083d48)
- RtlLockHeap (Address: 0x180083b08)
- RtlLookupAtomInAtomTable (Address: 0x180083c80)
- RtlMultiAppendUnicodeStringBuffer (Address: 0x1800837e8)
- RtlMultiByteToUnicodeN (Address: 0x180083e20)
- RtlMultiByteToUnicodeSize (Address: 0x180083e28)
- RtlNtPathNameToDosPathName (Address: 0x180084100)
- RtlNtStatusToDosError (Address: 0x180083b78)
- RtlNtStatusToDosErrorNoTeb (Address: 0x1800836d8)
- RtlOemStringToUnicodeString (Address: 0x180083f68)
- RtlpApplyLengthFunction (Address: 0x180083858)
- RtlpConvertCultureNamesToLCIDs (Address: 0x180083788)
- RtlpConvertLCIDsToCultureNames (Address: 0x180083670)
- RtlpEnsureBufferSize (Address: 0x180083878)
- RtlPrefixString (Address: 0x180083c98)
- RtlPrefixUnicodeString (Address: 0x180083e18)
- RtlPublishWnfStateData (Address: 0x180083758)
- RtlQueryActivationContextApplicationSettings (Address: 0x180083710)
- RtlQueryAtomInAtomTable (Address: 0x180083c88)
- RtlQueryElevationFlags (Address: 0x180083d80)
- RtlQueryEnvironmentVariable (Address: 0x180083ff0)
- RtlQueryEnvironmentVariable_U (Address: 0x180083f80)
- RtlQueryInformationActivationContext (Address: 0x180083728)
- RtlQueryPackageClaims (Address: 0x180083890)
- RtlQueryPackageIdentity (Address: 0x1800839f8)
- RtlQueryProcessDebugInformation (Address: 0x180083e90)
- RtlQueryProtectedPolicy (Address: 0x1800839d0)
- RtlQueryRegistryValuesEx (Address: 0x180083a88)
- RtlQueryThreadProfiling (Address: 0x1800836c8)
- RtlQueryUmsThreadInformation (Address: 0x1800838e0)
- RtlQueryWnfStateData (Address: 0x180083f50)
- RtlRaiseStatus (Address: 0x180083d90)
- RtlReadThreadProfilingData (Address: 0x1800836c0)
- RtlReAllocateHeap (Address: 0x180083f28)
- RtlRegisterSecureMemoryCacheCallback (Address: 0x180083b18)
- RtlRegisterWait (Address: 0x180083e50)
- RtlReleaseActivationContext (Address: 0x180083838)
- RtlReleasePebLock (Address: 0x180084060)
- RtlReleasePrivilege (Address: 0x180083d08)
- RtlReleaseRelativeName (Address: 0x180083e38)
- RtlReleaseSRWLockExclusive (Address: 0x180083a80)
- RtlRunOnceExecuteOnce (Address: 0x180084020)
- RtlSetCurrentTransaction (Address: 0x180083bb8)
- RtlSetDaclSecurityDescriptor (Address: 0x180084198)
- RtlSetEnvironmentStrings (Address: 0x180083f60)
- RtlSetEnvironmentVariable (Address: 0x180083fe0)
- RtlSetGroupSecurityDescriptor (Address: 0x1800841a0)
- RtlSetIoCompletionCallback (Address: 0x180083e40)
- RtlSetLastWin32Error (Address: 0x180083bc8)
- RtlSetLastWin32ErrorAndNtStatusFromNtStatus (Address: 0x180083920)
- RtlSetOwnerSecurityDescriptor (Address: 0x1800841a8)
- RtlSetProtectedPolicy (Address: 0x180084168)
- RtlSetSearchPathMode (Address: 0x180083ae8)
- RtlSetThreadPoolStartFunc (Address: 0x180084178)
- RtlSetThreadPreferredUILanguages (Address: 0x1800837e0)
- RtlSetUmsThreadInformation (Address: 0x1800838d8)
- RtlSetUserValueHeap (Address: 0x180083f38)
- RtlSizeHeap (Address: 0x180083780)
- RtlSubAuthorityCountSid (Address: 0x180083718)
- RtlSubAuthoritySid (Address: 0x180083a50)
- RtlSubscribeWnfStateChangeNotification (Address: 0x180083f48)
- RtlSwitchedVVI (Address: 0x180083ec8)
- RtlTimeFieldsToTime (Address: 0x180083690)
- RtlTimeToTimeFields (Address: 0x180083688)
- RtlTryAcquirePebLock (Address: 0x180084058)
- RtlUmsThreadYield (Address: 0x180083900)
- RtlUnhandledExceptionFilter (Address: 0x180083698)
- RtlUnicodeStringToAnsiString (Address: 0x1800839b8)
- RtlUnicodeStringToInteger (Address: 0x1800836e8)
- RtlUnicodeStringToOemString (Address: 0x180083988)
- RtlUnicodeToMultiByteN (Address: 0x180083dc0)
- RtlUnicodeToMultiByteSize (Address: 0x180083c38)
- RtlUnlockHeap (Address: 0x180083af8)
- RtlUnsubscribeWnfStateChangeNotification (Address: 0x180083f40)
- RtlUpcaseUnicodeChar (Address: 0x180083c30)
- RtlVerifyVersionInfo (Address: 0x180084130)
- RtlWerpReportException (Address: 0x180084088)
- RtlWow64EnableFsRedirection (Address: 0x180083fb0)
- RtlWow64GetThreadSelectorEntry (Address: 0x180083b88)
- RtlWow64LogMessageInEventLogger (Address: 0x180083a08)
- RtlxAnsiStringToUnicodeSize (Address: 0x180083aa8)
- RtlxUnicodeStringToAnsiSize (Address: 0x180083cb0)
- RtlZombifyActivationContext (Address: 0x180083830)
- sin (Address: 0x1800837b8)
- strcat_s (Address: 0x180084008)
- strchr (Address: 0x180083f58)
- strcpy_s (Address: 0x180083ea8)
- strncmp (Address: 0x180084050)
- strncpy_s (Address: 0x180083dc8)
- strnlen (Address: 0x180084010)
- strrchr (Address: 0x180083f98)
- swprintf_s (Address: 0x1800837f0)
- tolower (Address: 0x180083898)
- toupper (Address: 0x1800838a8)
- towlower (Address: 0x180083750)
- TpAllocCleanupGroup (Address: 0x180083be8)
- TpAllocIoCompletion (Address: 0x1800837d8)
- TpAllocPool (Address: 0x180083c00)
- TpAllocTimer (Address: 0x1800837d0)
- TpAllocWait (Address: 0x180083738)
- TpAllocWork (Address: 0x1800838d0)
- TpCallbackMayRunLong (Address: 0x180083be0)
- TpCaptureCaller (Address: 0x180083fa8)
- TpQueryPoolStackInformation (Address: 0x180083bf8)
- TpSetPoolMinThreads (Address: 0x180083c10)
- TpSetPoolStackInformation (Address: 0x180083730)
- TpSimpleTryPost (Address: 0x180083bf0)
- VerSetConditionMask (Address: 0x180084128)
- wcscat_s (Address: 0x180083f70)
- wcschr (Address: 0x180083cc0)
- wcscmp (Address: 0x180084220)
- wcscpy_s (Address: 0x180083b58)
- wcscspn (Address: 0x180083cf8)
- wcsncmp (Address: 0x1800836a8)
- wcsncpy (Address: 0x1800836b0)
- wcsncpy_s (Address: 0x180083cf0)
- wcsnlen (Address: 0x180084000)
- wcsrchr (Address: 0x180083978)
- wcsstr (Address: 0x180083cc8)
- ZwClose (Address: 0x1800840b8)
- ZwCreateFile (Address: 0x1800840e0)
- ZwCreateSection (Address: 0x1800840f0)
- ZwEnumerateKey (Address: 0x1800840d0)
- ZwMapViewOfSection (Address: 0x180084120)
- ZwOpenFile (Address: 0x1800840c0)
- ZwOpenKey (Address: 0x1800840c8)
- ZwQueryDirectoryFile (Address: 0x1800840f8)
- ZwQueryInformationFile (Address: 0x1800840e8)
- ZwQuerySystemInformation (Address: 0x180084110)
- ZwQueryValueKey (Address: 0x1800840d8)
- ZwUnmapViewOfSection (Address: 0x180084118)