ntdll.dll
Description: NT Layer DLL
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.6456
Architecture: 32-bit
Operating System: Windows NT
SHA256: baeb10cd5b9a00a47f6fc53cf088f6cf
File Size: 1.6 MB
Uploaded At: Dec. 1, 2025, 8:02 a.m.
Views: 15
Exported Functions
- RtlDispatchAPC (Ordinal: 8, Address: 0x2c0c0)
- RtlActivateActivationContextUnsafeFast (Ordinal: 9, Address: 0x4df30)
- RtlDeactivateActivationContextUnsafeFast (Ordinal: 10, Address: 0x4c9f0)
- RtlInterlockedPushListSList (Ordinal: 11, Address: 0xbe960)
- RtlUlongByteSwap (Ordinal: 12, Address: 0xbea00)
- RtlUlonglongByteSwap (Ordinal: 13, Address: 0xbea10)
- RtlUshortByteSwap (Ordinal: 14, Address: 0xbea30)
- A_SHAFinal (Ordinal: 15, Address: 0x68340)
- A_SHAInit (Ordinal: 16, Address: 0x89500)
- A_SHAUpdate (Ordinal: 17, Address: 0x68420)
- AlpcAdjustCompletionListConcurrencyCount (Ordinal: 18, Address: 0xbea40)
- AlpcFreeCompletionListMessage (Ordinal: 19, Address: 0xbea70)
- AlpcGetCompletionListLastMessageInformation (Ordinal: 20, Address: 0xbeb60)
- AlpcGetCompletionListMessageAttributes (Ordinal: 21, Address: 0xbeb90)
- AlpcGetHeaderSize (Ordinal: 22, Address: 0x6a740)
- AlpcGetMessageAttribute (Ordinal: 23, Address: 0x6a700)
- AlpcGetMessageFromCompletionList (Ordinal: 24, Address: 0xbebd0)
- AlpcGetOutstandingCompletionListMessageCount (Ordinal: 25, Address: 0xbed20)
- AlpcInitializeMessageAttribute (Ordinal: 26, Address: 0x6a6c0)
- AlpcMaxAllowedMessageLength (Ordinal: 27, Address: 0xbed40)
- AlpcRegisterCompletionList (Ordinal: 28, Address: 0xbed50)
- AlpcRegisterCompletionListWorkerThread (Ordinal: 29, Address: 0xbeda0)
- AlpcRundownCompletionList (Ordinal: 30, Address: 0xbee10)
- AlpcUnregisterCompletionList (Ordinal: 31, Address: 0xbee30)
- AlpcUnregisterCompletionListWorkerThread (Ordinal: 32, Address: 0xbee50)
- ApiSetQueryApiSetPresence (Ordinal: 33, Address: 0x674f0)
- ApiSetQueryApiSetPresenceEx (Ordinal: 34, Address: 0x50520)
- CsrAllocateCaptureBuffer (Ordinal: 35, Address: 0xbe7d0)
- CsrAllocateMessagePointer (Ordinal: 36, Address: 0xbe7e0)
- CsrCaptureMessageBuffer (Ordinal: 37, Address: 0xbe7f0)
- CsrCaptureMessageMultiUnicodeStringsInPlace (Ordinal: 38, Address: 0xbe800)
- CsrCaptureMessageString (Ordinal: 39, Address: 0xbe890)
- CsrCaptureTimeout (Ordinal: 40, Address: 0xbe8e0)
- CsrClientCallServer (Ordinal: 41, Address: 0xbe910)
- CsrClientConnectToServer (Ordinal: 42, Address: 0x6c460)
- CsrFreeCaptureBuffer (Ordinal: 43, Address: 0xbe920)
- CsrGetProcessId (Ordinal: 44, Address: 0xbe930)
- CsrIdentifyAlertableThread (Ordinal: 45, Address: 0xbe940)
- CsrSetPriorityClass (Ordinal: 46, Address: 0xb4900)
- CsrVerifyRegion (Ordinal: 47, Address: 0xbe950)
- DbgBreakPoint (Ordinal: 48, Address: 0x75560)
- DbgPrint (Ordinal: 49, Address: 0x2b9b0)
- DbgPrintEx (Ordinal: 50, Address: 0xbeec0)
- DbgPrintReturnControlC (Ordinal: 51, Address: 0xbeef0)
- DbgPrompt (Ordinal: 52, Address: 0xbef20)
- DbgQueryDebugFilterState (Ordinal: 53, Address: 0xbef60)
- DbgSetDebugFilterState (Ordinal: 54, Address: 0xbef70)
- DbgUiConnectToDbg (Ordinal: 55, Address: 0xad8e0)
- DbgUiContinue (Ordinal: 56, Address: 0xad940)
- DbgUiConvertStateChangeStructure (Ordinal: 57, Address: 0xad970)
- DbgUiConvertStateChangeStructureEx (Ordinal: 58, Address: 0xad990)
- DbgUiDebugActiveProcess (Ordinal: 59, Address: 0xadb90)
- DbgUiGetThreadDebugObject (Ordinal: 60, Address: 0xadbe0)
- DbgUiIssueRemoteBreakin (Ordinal: 61, Address: 0xadc00)
- DbgUiRemoteBreakin (Ordinal: 62, Address: 0xadc50)
- DbgUiSetThreadDebugObject (Ordinal: 63, Address: 0xadcb0)
- DbgUiStopDebugging (Ordinal: 64, Address: 0xadcd0)
- DbgUiWaitStateChange (Ordinal: 65, Address: 0xadd00)
- DbgUserBreakPoint (Ordinal: 66, Address: 0x75550)
- EtwCheckCoverage (Ordinal: 67, Address: 0x1005e0)
- EtwCreateTraceInstanceId (Ordinal: 68, Address: 0x100db0)
- EtwDeliverDataBlock (Ordinal: 69, Address: 0x2e5a0)
- EtwEnumerateProcessRegGuids (Ordinal: 70, Address: 0x100630)
- EtwEventActivityIdControl (Ordinal: 71, Address: 0x5c6e0)
- EtwEventEnabled (Ordinal: 72, Address: 0x67170)
- EtwEventProviderEnabled (Ordinal: 73, Address: 0x2b2a0)
- EtwEventRegister (Ordinal: 74, Address: 0x2e190)
- EtwEventSetInformation (Ordinal: 75, Address: 0x30b90)
- EtwEventUnregister (Ordinal: 76, Address: 0x59f30)
- EtwEventWrite (Ordinal: 77, Address: 0x61820)
- EtwEventWriteEndScenario (Ordinal: 78, Address: 0x100e00)
- EtwEventWriteEx (Ordinal: 79, Address: 0x2bbd0)
- EtwEventWriteFull (Ordinal: 80, Address: 0x100730)
- EtwEventWriteNoRegistration (Ordinal: 81, Address: 0x2be20)
- EtwEventWriteStartScenario (Ordinal: 82, Address: 0x100ee0)
- EtwEventWriteString (Ordinal: 83, Address: 0x100770)
- EtwEventWriteTransfer (Ordinal: 84, Address: 0x644d0)
- EtwGetTraceEnableFlags (Ordinal: 85, Address: 0x6cfe0)
- EtwGetTraceEnableLevel (Ordinal: 86, Address: 0x6cfb0)
- EtwGetTraceLoggerHandle (Ordinal: 87, Address: 0x6cf60)
- EtwLogTraceEvent (Ordinal: 88, Address: 0x101040)
- EtwNotificationRegister (Ordinal: 89, Address: 0x41b80)
- EtwNotificationUnregister (Ordinal: 90, Address: 0x59f50)
- EtwProcessPrivateLoggerRequest (Ordinal: 91, Address: 0x70780)
- EtwRegisterSecurityProvider (Ordinal: 92, Address: 0x1009e0)
- EtwRegisterTraceGuidsA (Ordinal: 93, Address: 0x64ba0)
- EtwRegisterTraceGuidsW (Ordinal: 94, Address: 0x64bd0)
- EtwReplyNotification (Ordinal: 95, Address: 0x102750)
- EtwSendNotification (Ordinal: 96, Address: 0x102790)
- EtwSetMark (Ordinal: 97, Address: 0x2a7b0)
- EtwTraceEventInstance (Ordinal: 98, Address: 0x1010a0)
- EtwTraceMessage (Ordinal: 99, Address: 0x6a960)
- EtwTraceMessageVa (Ordinal: 100, Address: 0x6a990)
- EtwUnregisterTraceGuids (Ordinal: 101, Address: 0x59ee0)
- EtwWriteUMSecurityEvent (Ordinal: 102, Address: 0x100a20)
- EtwpCreateEtwThread (Ordinal: 103, Address: 0x70d00)
- EtwpGetCpuSpeed (Ordinal: 104, Address: 0x884f0)
- EvtIntReportAuthzEventAndSourceAsync (Ordinal: 105, Address: 0x102e90)
- EvtIntReportEventAndSourceAsync (Ordinal: 106, Address: 0x102ed0)
- KiFastSystemCall (Ordinal: 107, Address: 0x757f0)
- KiFastSystemCallRet (Ordinal: 108, Address: 0x75800)
- KiIntSystemCall (Ordinal: 109, Address: 0x75810)
- KiRaiseUserExceptionDispatcher (Ordinal: 110, Address: 0x75760)
- KiUserApcDispatcher (Ordinal: 111, Address: 0x75590)
- KiUserCallbackDispatcher (Ordinal: 112, Address: 0x75680)
- KiUserExceptionDispatcher (Ordinal: 113, Address: 0x756f0)
- LdrAccessResource (Ordinal: 114, Address: 0x895c0)
- LdrAddDllDirectory (Ordinal: 115, Address: 0xbcad0)
- LdrAddLoadAsDataTable (Ordinal: 116, Address: 0x38c70)
- LdrAddRefDll (Ordinal: 117, Address: 0x52670)
- LdrAppxHandleIntegrityFailure (Ordinal: 118, Address: 0xac390)
- LdrCallEnclave (Ordinal: 119, Address: 0xadd30)
- LdrControlFlowGuardEnforced (Ordinal: 120, Address: 0x50420)
- LdrCreateEnclave (Ordinal: 121, Address: 0xadd40)
- LdrDeleteEnclave (Ordinal: 122, Address: 0xaddf0)
- LdrDisableThreadCalloutsForDll (Ordinal: 123, Address: 0x67210)
- LdrEnumResources (Ordinal: 124, Address: 0xbefe0)
- LdrEnumerateLoadedModules (Ordinal: 125, Address: 0x29850)
- LdrFastFailInLoaderCallout (Ordinal: 126, Address: 0xae950)
- LdrFindEntryForAddress (Ordinal: 127, Address: 0x4f520)
- LdrFindResourceDirectory_U (Ordinal: 128, Address: 0xbf220)
- LdrFindResourceEx_U (Ordinal: 129, Address: 0x6c3f0)
- LdrFindResource_U (Ordinal: 130, Address: 0x3bad0)
- LdrFlushAlternateResourceModules (Ordinal: 131, Address: 0xbf250)
- LdrGetDllDirectory (Ordinal: 132, Address: 0x2ae70)
- LdrGetDllFullName (Ordinal: 133, Address: 0x4cee0)
- LdrGetDllHandle (Ordinal: 134, Address: 0x4cb40)
- LdrGetDllHandleByMapping (Ordinal: 135, Address: 0x66070)
- LdrGetDllHandleByName (Ordinal: 136, Address: 0x4f5e0)
- LdrGetDllHandleEx (Ordinal: 137, Address: 0x4af10)
- LdrGetDllPath (Ordinal: 138, Address: 0x32950)
- LdrGetFailureData (Ordinal: 139, Address: 0xae980)
- LdrGetFileNameFromLoadAsDataTable (Ordinal: 140, Address: 0xbf340)
- LdrGetProcedureAddress (Ordinal: 141, Address: 0x2b8d0)
- LdrGetProcedureAddressEx (Ordinal: 142, Address: 0x26bc0)
- LdrGetProcedureAddressForCaller (Ordinal: 143, Address: 0x4d1f0)
- LdrInitShimEngineDynamic (Ordinal: 144, Address: 0xb1470)
- LdrInitializeEnclave (Ordinal: 145, Address: 0xade20)
- LdrInitializeThunk (Ordinal: 146, Address: 0x66b20)
- LdrIsModuleSxsRedirected (Ordinal: 147, Address: 0xae990)
- LdrLoadAlternateResourceModule (Ordinal: 148, Address: 0x2a330)
- LdrLoadAlternateResourceModuleEx (Ordinal: 149, Address: 0x3bf60)
- LdrLoadDll (Ordinal: 150, Address: 0x4e090)
- LdrLoadEnclaveModule (Ordinal: 151, Address: 0xadd30)
- LdrLockLoaderLock (Ordinal: 152, Address: 0x68e10)
- LdrOpenImageFileOptionsKey (Ordinal: 153, Address: 0xbfe60)
- LdrParentInterlockedPopEntrySList (Ordinal: 154, Address: 0x126a10)
- LdrParentRtlInitializeNtUserPfn (Ordinal: 155, Address: 0x1269d0)
- LdrParentRtlResetNtUserPfn (Ordinal: 156, Address: 0x1269ec)
- LdrParentRtlRetrieveNtUserPfn (Ordinal: 157, Address: 0x1269e4)
- LdrProcessRelocationBlock (Ordinal: 158, Address: 0xc29e0)
- LdrProcessRelocationBlockEx (Ordinal: 159, Address: 0xc2a10)
- LdrQueryImageFileExecutionOptions (Ordinal: 160, Address: 0x69f20)
- LdrQueryImageFileExecutionOptionsEx (Ordinal: 161, Address: 0x69f60)
- LdrQueryImageFileKeyOption (Ordinal: 162, Address: 0x26d60)
- LdrQueryModuleServiceTags (Ordinal: 163, Address: 0xaeb00)
- LdrQueryOptionalDelayLoadedAPI (Ordinal: 164, Address: 0xaf6c0)
- LdrQueryProcessModuleInformation (Ordinal: 165, Address: 0xaeba0)
- LdrRegisterDllNotification (Ordinal: 166, Address: 0x2b410)
- LdrRemoveDllDirectory (Ordinal: 167, Address: 0xbccb0)
- LdrRemoveLoadAsDataTable (Ordinal: 168, Address: 0x38b20)
- LdrResFindResource (Ordinal: 169, Address: 0xc3040)
- LdrResFindResourceDirectory (Ordinal: 170, Address: 0x39930)
- LdrResGetRCConfig (Ordinal: 171, Address: 0x3b760)
- LdrResRelease (Ordinal: 172, Address: 0xc30b0)
- LdrResSearchResource (Ordinal: 173, Address: 0x3a690)
- LdrResolveDelayLoadedAPI (Ordinal: 174, Address: 0x4cd50)
- LdrResolveDelayLoadsFromDll (Ordinal: 175, Address: 0xaf760)
- LdrRscIsTypeExist (Ordinal: 176, Address: 0x3e970)
- LdrSetAppCompatDllRedirectionCallback (Ordinal: 177, Address: 0x6e060)
- LdrSetDefaultDllDirectories (Ordinal: 178, Address: 0xbcd60)
- LdrSetDllDirectory (Ordinal: 179, Address: 0x6dc80)
- LdrSetDllManifestProber (Ordinal: 180, Address: 0x6d4e0)
- LdrSetImplicitPathOptions (Ordinal: 181, Address: 0xaf050)
- LdrSetMUICacheType (Ordinal: 182, Address: 0xbf390)
- LdrShutdownProcess (Ordinal: 183, Address: 0x5dc20)
- LdrShutdownThread (Ordinal: 184, Address: 0x4f930)
- LdrStandardizeSystemPath (Ordinal: 185, Address: 0x3fee0)
- LdrSystemDllInitBlock (Ordinal: 186, Address: 0x129250)
- LdrUnloadAlternateResourceModule (Ordinal: 187, Address: 0x5a8c0)
- LdrUnloadAlternateResourceModuleEx (Ordinal: 188, Address: 0x5a8e0)
- LdrUnloadDll (Ordinal: 189, Address: 0x4d070)
- LdrUnlockLoaderLock (Ordinal: 190, Address: 0x6af00)
- LdrUnregisterDllNotification (Ordinal: 191, Address: 0xaf0b0)
- LdrUpdatePackageSearchPath (Ordinal: 192, Address: 0xbcda0)
- LdrVerifyImageMatchesChecksum (Ordinal: 193, Address: 0xaf130)
- LdrVerifyImageMatchesChecksumEx (Ordinal: 194, Address: 0xaf1a0)
- LdrpChildNtdll (Ordinal: 195, Address: 0x1269f0)
- LdrpResGetMappingSize (Ordinal: 196, Address: 0x3ac30)
- LdrpResGetResourceDirectory (Ordinal: 197, Address: 0x3b4e0)
- MD4Final (Ordinal: 198, Address: 0x1003f0)
- MD4Init (Ordinal: 199, Address: 0x100490)
- MD4Update (Ordinal: 200, Address: 0x1004d0)
- MD5Final (Ordinal: 201, Address: 0x70170)
- MD5Init (Ordinal: 202, Address: 0x72cd0)
- MD5Update (Ordinal: 203, Address: 0x70210)
- NlsAnsiCodePage (Ordinal: 204, Address: 0x123948)
- NlsMbCodePageTag (Ordinal: 205, Address: 0x12696c)
- NlsMbOemCodePageTag (Ordinal: 206, Address: 0x126954)
- NtAcceptConnectPort (Ordinal: 207, Address: 0x731e0)
- NtAccessCheck (Ordinal: 208, Address: 0x731c0)
- NtAccessCheckAndAuditAlarm (Ordinal: 209, Address: 0x73470)
- NtAccessCheckByType (Ordinal: 210, Address: 0x73810)
- NtAccessCheckByTypeAndAuditAlarm (Ordinal: 211, Address: 0x73770)
- NtAccessCheckByTypeResultList (Ordinal: 212, Address: 0x73820)
- NtAccessCheckByTypeResultListAndAuditAlarm (Ordinal: 213, Address: 0x73830)
- NtAccessCheckByTypeResultListAndAuditAlarmByHandle (Ordinal: 214, Address: 0x73840)
- NtAcquireCrossVmMutant (Ordinal: 215, Address: 0x73850)
- NtAcquireProcessActivityReference (Ordinal: 216, Address: 0x73860)
- NtAddAtom (Ordinal: 217, Address: 0x73650)
- NtAddAtomEx (Ordinal: 218, Address: 0x73870)
- NtAddBootEntry (Ordinal: 219, Address: 0x73880)
- NtAddDriverEntry (Ordinal: 220, Address: 0x73890)
- NtAdjustGroupsToken (Ordinal: 221, Address: 0x738a0)
- NtAdjustPrivilegesToken (Ordinal: 222, Address: 0x735f0)
- NtAdjustTokenClaimsAndDeviceGroups (Ordinal: 223, Address: 0x738b0)
- NtAlertResumeThread (Ordinal: 224, Address: 0x738c0)
- NtAlertThread (Ordinal: 225, Address: 0x738d0)
- NtAlertThreadByThreadId (Ordinal: 226, Address: 0x738e0)
- NtAllocateLocallyUniqueId (Ordinal: 227, Address: 0x738f0)
- NtAllocateReserveObject (Ordinal: 228, Address: 0x73900)
- NtAllocateUserPhysicalPages (Ordinal: 229, Address: 0x73910)
- NtAllocateUserPhysicalPagesEx (Ordinal: 230, Address: 0x73920)
- NtAllocateUuids (Ordinal: 231, Address: 0x73930)
- NtAllocateVirtualMemory (Ordinal: 232, Address: 0x73340)
- NtAllocateVirtualMemoryEx (Ordinal: 233, Address: 0x73940)
- NtAlpcAcceptConnectPort (Ordinal: 234, Address: 0x73950)
- NtAlpcCancelMessage (Ordinal: 235, Address: 0x73960)
- NtAlpcConnectPort (Ordinal: 236, Address: 0x73970)
- NtAlpcConnectPortEx (Ordinal: 237, Address: 0x73980)
- NtAlpcCreatePort (Ordinal: 238, Address: 0x73990)
- NtAlpcCreatePortSection (Ordinal: 239, Address: 0x739a0)
- NtAlpcCreateResourceReserve (Ordinal: 240, Address: 0x739b0)
- NtAlpcCreateSectionView (Ordinal: 241, Address: 0x739c0)
- NtAlpcCreateSecurityContext (Ordinal: 242, Address: 0x739d0)
- NtAlpcDeletePortSection (Ordinal: 243, Address: 0x739e0)
- NtAlpcDeleteResourceReserve (Ordinal: 244, Address: 0x739f0)
- NtAlpcDeleteSectionView (Ordinal: 245, Address: 0x73a00)
- NtAlpcDeleteSecurityContext (Ordinal: 246, Address: 0x73a10)
- NtAlpcDisconnectPort (Ordinal: 247, Address: 0x73a20)
- NtAlpcImpersonateClientContainerOfPort (Ordinal: 248, Address: 0x73a30)
- NtAlpcImpersonateClientOfPort (Ordinal: 249, Address: 0x73a40)
- NtAlpcOpenSenderProcess (Ordinal: 250, Address: 0x73a50)
- NtAlpcOpenSenderThread (Ordinal: 251, Address: 0x73a60)
- NtAlpcQueryInformation (Ordinal: 252, Address: 0x73a70)
- NtAlpcQueryInformationMessage (Ordinal: 253, Address: 0x73a80)
- NtAlpcRevokeSecurityContext (Ordinal: 254, Address: 0x73a90)
- NtAlpcSendWaitReceivePort (Ordinal: 255, Address: 0x73aa0)
- NtAlpcSetInformation (Ordinal: 256, Address: 0x73ab0)
- NtApphelpCacheControl (Ordinal: 257, Address: 0x736a0)
- NtAreMappedFilesTheSame (Ordinal: 258, Address: 0x73ac0)
- NtAssignProcessToJobObject (Ordinal: 259, Address: 0x73ad0)
- NtAssociateWaitCompletionPacket (Ordinal: 260, Address: 0x73ae0)
- NtCallEnclave (Ordinal: 261, Address: 0x73af0)
- NtCallbackReturn (Ordinal: 262, Address: 0x73210)
- NtCancelIoFile (Ordinal: 263, Address: 0x737b0)
- NtCancelIoFileEx (Ordinal: 264, Address: 0x73b00)
- NtCancelSynchronousIoFile (Ordinal: 265, Address: 0x73b10)
- NtCancelTimer2 (Ordinal: 266, Address: 0x73b20)
- NtCancelTimer (Ordinal: 267, Address: 0x737f0)
- NtCancelWaitCompletionPacket (Ordinal: 268, Address: 0x73b30)
- NtClearEvent (Ordinal: 269, Address: 0x735c0)
- NtClose (Ordinal: 270, Address: 0x732b0)
- NtCloseObjectAuditAlarm (Ordinal: 271, Address: 0x73590)
- NtCommitComplete (Ordinal: 272, Address: 0x73b40)
- NtCommitEnlistment (Ordinal: 273, Address: 0x73b50)
- NtCommitRegistryTransaction (Ordinal: 274, Address: 0x73b60)
- NtCommitTransaction (Ordinal: 275, Address: 0x73b70)
- NtCompactKeys (Ordinal: 276, Address: 0x73b80)
- NtCompareObjects (Ordinal: 277, Address: 0x73b90)
- NtCompareSigningLevels (Ordinal: 278, Address: 0x73ba0)
- NtCompareTokens (Ordinal: 279, Address: 0x73bb0)
- NtCompleteConnectPort (Ordinal: 280, Address: 0x73bc0)
- NtCompressKey (Ordinal: 281, Address: 0x73bd0)
- NtConnectPort (Ordinal: 282, Address: 0x73be0)
- NtContinue (Ordinal: 283, Address: 0x73610)
- NtContinueEx (Ordinal: 284, Address: 0x73bf0)
- NtConvertBetweenAuxiliaryCounterAndPerformanceCounter (Ordinal: 285, Address: 0x73c00)
- NtCopyFileChunk (Ordinal: 286, Address: 0x73c10)
- NtCreateCrossVmEvent (Ordinal: 287, Address: 0x73c20)
- NtCreateCrossVmMutant (Ordinal: 288, Address: 0x73c30)
- NtCreateDebugObject (Ordinal: 289, Address: 0x73c40)
- NtCreateDirectoryObject (Ordinal: 290, Address: 0x73c50)
- NtCreateDirectoryObjectEx (Ordinal: 291, Address: 0x73c60)
- NtCreateEnclave (Ordinal: 292, Address: 0x73c70)
- NtCreateEnlistment (Ordinal: 293, Address: 0x73c80)
- NtCreateEvent (Ordinal: 294, Address: 0x73660)
- NtCreateEventPair (Ordinal: 295, Address: 0x73c90)
- NtCreateFile (Ordinal: 296, Address: 0x73730)
- NtCreateIRTimer (Ordinal: 297, Address: 0x73ca0)
- NtCreateIoCompletion (Ordinal: 298, Address: 0x73cb0)
- NtCreateJobObject (Ordinal: 299, Address: 0x73cc0)
- NtCreateJobSet (Ordinal: 300, Address: 0x73cd0)
- NtCreateKey (Ordinal: 301, Address: 0x733b0)
- NtCreateKeyTransacted (Ordinal: 302, Address: 0x73ce0)
- NtCreateKeyedEvent (Ordinal: 303, Address: 0x73cf0)
- NtCreateLowBoxToken (Ordinal: 304, Address: 0x73d00)
- NtCreateMailslotFile (Ordinal: 305, Address: 0x73d10)
- NtCreateMutant (Ordinal: 306, Address: 0x73d20)
- NtCreateNamedPipeFile (Ordinal: 307, Address: 0x73d30)
- NtCreatePagingFile (Ordinal: 308, Address: 0x73d40)
- NtCreatePartition (Ordinal: 309, Address: 0x73d50)
- NtCreatePort (Ordinal: 310, Address: 0x73d60)
- NtCreatePrivateNamespace (Ordinal: 311, Address: 0x73d70)
- NtCreateProcess (Ordinal: 312, Address: 0x73d80)
- NtCreateProcessEx (Ordinal: 313, Address: 0x736b0)
- NtCreateProfile (Ordinal: 314, Address: 0x73d90)
- NtCreateProfileEx (Ordinal: 315, Address: 0x73da0)
- NtCreateRegistryTransaction (Ordinal: 316, Address: 0x73db0)
- NtCreateResourceManager (Ordinal: 317, Address: 0x73dc0)
- NtCreateSection (Ordinal: 318, Address: 0x73680)
- NtCreateSectionEx (Ordinal: 319, Address: 0x73dd0)
- NtCreateSemaphore (Ordinal: 320, Address: 0x73de0)
- NtCreateSymbolicLinkObject (Ordinal: 321, Address: 0x73df0)
- NtCreateThread (Ordinal: 322, Address: 0x736c0)
- NtCreateThreadEx (Ordinal: 323, Address: 0x73e00)
- NtCreateTimer2 (Ordinal: 324, Address: 0x73e20)
- NtCreateTimer (Ordinal: 325, Address: 0x73e10)
- NtCreateToken (Ordinal: 326, Address: 0x73e30)
- NtCreateTokenEx (Ordinal: 327, Address: 0x73e40)
- NtCreateTransaction (Ordinal: 328, Address: 0x73e50)
- NtCreateTransactionManager (Ordinal: 329, Address: 0x73e60)
- NtCreateUserProcess (Ordinal: 330, Address: 0x73e70)
- NtCreateWaitCompletionPacket (Ordinal: 331, Address: 0x73e80)
- NtCreateWaitablePort (Ordinal: 332, Address: 0x73e90)
- NtCreateWnfStateName (Ordinal: 333, Address: 0x73ea0)
- NtCreateWorkerFactory (Ordinal: 334, Address: 0x73eb0)
- NtCurrentTeb (Ordinal: 335, Address: 0xb3c30)
- NtDebugActiveProcess (Ordinal: 336, Address: 0x73ec0)
- NtDebugContinue (Ordinal: 337, Address: 0x73ed0)
- NtDelayExecution (Ordinal: 338, Address: 0x73520)
- NtDeleteAtom (Ordinal: 339, Address: 0x73ee0)
- NtDeleteBootEntry (Ordinal: 340, Address: 0x73ef0)
- NtDeleteDriverEntry (Ordinal: 341, Address: 0x73f00)
- NtDeleteFile (Ordinal: 342, Address: 0x73f10)
- NtDeleteKey (Ordinal: 343, Address: 0x73f20)
- NtDeleteObjectAuditAlarm (Ordinal: 344, Address: 0x73f30)
- NtDeletePrivateNamespace (Ordinal: 345, Address: 0x73f40)
- NtDeleteValueKey (Ordinal: 346, Address: 0x73f50)
- NtDeleteWnfStateData (Ordinal: 347, Address: 0x73f60)
- NtDeleteWnfStateName (Ordinal: 348, Address: 0x73f70)
- NtDeviceIoControlFile (Ordinal: 349, Address: 0x73230)
- NtDirectGraphicsCall (Ordinal: 350, Address: 0x73f80)
- NtDisableLastKnownGood (Ordinal: 351, Address: 0x73f90)
- NtDisplayString (Ordinal: 352, Address: 0x73fa0)
- NtDrawText (Ordinal: 353, Address: 0x73fb0)
- NtDuplicateObject (Ordinal: 354, Address: 0x735a0)
- NtDuplicateToken (Ordinal: 355, Address: 0x73600)
- NtEnableLastKnownGood (Ordinal: 356, Address: 0x73fc0)
- NtEnumerateBootEntries (Ordinal: 357, Address: 0x73fd0)
- NtEnumerateDriverEntries (Ordinal: 358, Address: 0x73fe0)
- NtEnumerateKey (Ordinal: 359, Address: 0x73500)
- NtEnumerateSystemEnvironmentValuesEx (Ordinal: 360, Address: 0x73ff0)
- NtEnumerateTransactionObject (Ordinal: 361, Address: 0x74000)
- NtEnumerateValueKey (Ordinal: 362, Address: 0x732f0)
- NtExtendSection (Ordinal: 363, Address: 0x74010)
- NtFilterBootOption (Ordinal: 364, Address: 0x74020)
- NtFilterToken (Ordinal: 365, Address: 0x74030)
- NtFilterTokenEx (Ordinal: 366, Address: 0x74040)
- NtFindAtom (Ordinal: 367, Address: 0x73300)
- NtFlushBuffersFile (Ordinal: 368, Address: 0x73690)
- NtFlushBuffersFileEx (Ordinal: 369, Address: 0x74050)
- NtFlushInstallUILanguage (Ordinal: 370, Address: 0x74060)
- NtFlushInstructionCache (Ordinal: 371, Address: 0x74070)
- NtFlushKey (Ordinal: 372, Address: 0x74080)
- NtFlushProcessWriteBuffers (Ordinal: 373, Address: 0x74090)
- NtFlushVirtualMemory (Ordinal: 374, Address: 0x740a0)
- NtFlushWriteBuffer (Ordinal: 375, Address: 0x740b0)
- NtFreeUserPhysicalPages (Ordinal: 376, Address: 0x740c0)
- NtFreeVirtualMemory (Ordinal: 377, Address: 0x733c0)
- NtFreezeRegistry (Ordinal: 378, Address: 0x740d0)
- NtFreezeTransactions (Ordinal: 379, Address: 0x740e0)
- NtFsControlFile (Ordinal: 380, Address: 0x73570)
- NtGetCachedSigningLevel (Ordinal: 381, Address: 0x740f0)
- NtGetCompleteWnfStateSubscription (Ordinal: 382, Address: 0x74100)
- NtGetContextThread (Ordinal: 383, Address: 0x74110)
- NtGetCurrentProcessorNumber (Ordinal: 384, Address: 0x74120)
- NtGetCurrentProcessorNumberEx (Ordinal: 385, Address: 0x74130)
- NtGetDevicePowerState (Ordinal: 386, Address: 0x74140)
- NtGetMUIRegistryInfo (Ordinal: 387, Address: 0x74150)
- NtGetNextProcess (Ordinal: 388, Address: 0x74160)
- NtGetNextThread (Ordinal: 389, Address: 0x74170)
- NtGetNlsSectionPtr (Ordinal: 390, Address: 0x74180)
- NtGetNotificationResourceManager (Ordinal: 391, Address: 0x74190)
- NtGetTickCount (Ordinal: 392, Address: 0xc4f60)
- NtGetWriteWatch (Ordinal: 393, Address: 0x741a0)
- NtImpersonateAnonymousToken (Ordinal: 394, Address: 0x741b0)
- NtImpersonateClientOfPort (Ordinal: 395, Address: 0x733d0)
- NtImpersonateThread (Ordinal: 396, Address: 0x741c0)
- NtInitializeEnclave (Ordinal: 397, Address: 0x741d0)
- NtInitializeNlsFiles (Ordinal: 398, Address: 0x741e0)
- NtInitializeRegistry (Ordinal: 399, Address: 0x741f0)
- NtInitiatePowerAction (Ordinal: 400, Address: 0x74200)
- NtIsProcessInJob (Ordinal: 401, Address: 0x736d0)
- NtIsSystemResumeAutomatic (Ordinal: 402, Address: 0x74210)
- NtIsUILanguageComitted (Ordinal: 403, Address: 0x74220)
- NtListenPort (Ordinal: 404, Address: 0x74230)
- NtLoadDriver (Ordinal: 405, Address: 0x74240)
- NtLoadEnclaveData (Ordinal: 406, Address: 0x74250)
- NtLoadKey2 (Ordinal: 407, Address: 0x74270)
- NtLoadKey3 (Ordinal: 408, Address: 0x74f50)
- NtLoadKey (Ordinal: 409, Address: 0x74260)
- NtLoadKeyEx (Ordinal: 410, Address: 0x74280)
- NtLockFile (Ordinal: 411, Address: 0x74290)
- NtLockProductActivationKeys (Ordinal: 412, Address: 0x742a0)
- NtLockRegistryKey (Ordinal: 413, Address: 0x742b0)
- NtLockVirtualMemory (Ordinal: 414, Address: 0x742c0)
- NtMakePermanentObject (Ordinal: 415, Address: 0x742d0)
- NtMakeTemporaryObject (Ordinal: 416, Address: 0x742e0)
- NtManageHotPatch (Ordinal: 417, Address: 0x742f0)
- NtManagePartition (Ordinal: 418, Address: 0x74300)
- NtMapCMFModule (Ordinal: 419, Address: 0x74310)
- NtMapUserPhysicalPages (Ordinal: 420, Address: 0x74320)
- NtMapUserPhysicalPagesScatter (Ordinal: 421, Address: 0x731f0)
- NtMapViewOfSection (Ordinal: 422, Address: 0x73460)
- NtMapViewOfSectionEx (Ordinal: 423, Address: 0x74330)
- NtModifyBootEntry (Ordinal: 424, Address: 0x74340)
- NtModifyDriverEntry (Ordinal: 425, Address: 0x74350)
- NtNotifyChangeDirectoryFile (Ordinal: 426, Address: 0x74360)
- NtNotifyChangeDirectoryFileEx (Ordinal: 427, Address: 0x74370)
- NtNotifyChangeKey (Ordinal: 428, Address: 0x74380)
- NtNotifyChangeMultipleKeys (Ordinal: 429, Address: 0x74390)
- NtNotifyChangeSession (Ordinal: 430, Address: 0x743a0)
- NtOpenDirectoryObject (Ordinal: 431, Address: 0x73760)
- NtOpenEnlistment (Ordinal: 432, Address: 0x743b0)
- NtOpenEvent (Ordinal: 433, Address: 0x735e0)
- NtOpenEventPair (Ordinal: 434, Address: 0x743c0)
- NtOpenFile (Ordinal: 435, Address: 0x73510)
- NtOpenIoCompletion (Ordinal: 436, Address: 0x743d0)
- NtOpenJobObject (Ordinal: 437, Address: 0x743e0)
- NtOpenKey (Ordinal: 438, Address: 0x732e0)
- NtOpenKeyEx (Ordinal: 439, Address: 0x743f0)
- NtOpenKeyTransacted (Ordinal: 440, Address: 0x74400)
- NtOpenKeyTransactedEx (Ordinal: 441, Address: 0x74410)
- NtOpenKeyedEvent (Ordinal: 442, Address: 0x74420)
- NtOpenMutant (Ordinal: 443, Address: 0x74430)
- NtOpenObjectAuditAlarm (Ordinal: 444, Address: 0x74440)
- NtOpenPartition (Ordinal: 445, Address: 0x74450)
- NtOpenPrivateNamespace (Ordinal: 446, Address: 0x74460)
- NtOpenProcess (Ordinal: 447, Address: 0x73440)
- NtOpenProcessToken (Ordinal: 448, Address: 0x74470)
- NtOpenProcessTokenEx (Ordinal: 449, Address: 0x734e0)
- NtOpenRegistryTransaction (Ordinal: 450, Address: 0x74480)
- NtOpenResourceManager (Ordinal: 451, Address: 0x74490)
- NtOpenSection (Ordinal: 452, Address: 0x73550)
- NtOpenSemaphore (Ordinal: 453, Address: 0x744a0)
- NtOpenSession (Ordinal: 454, Address: 0x744b0)
- NtOpenSymbolicLinkObject (Ordinal: 455, Address: 0x744c0)
- NtOpenThread (Ordinal: 456, Address: 0x744d0)
- NtOpenThreadToken (Ordinal: 457, Address: 0x73420)
- NtOpenThreadTokenEx (Ordinal: 458, Address: 0x734d0)
- NtOpenTimer (Ordinal: 459, Address: 0x744e0)
- NtOpenTransaction (Ordinal: 460, Address: 0x744f0)
- NtOpenTransactionManager (Ordinal: 461, Address: 0x74500)
- NtPlugPlayControl (Ordinal: 462, Address: 0x74510)
- NtPowerInformation (Ordinal: 463, Address: 0x737d0)
- NtPrePrepareComplete (Ordinal: 464, Address: 0x74520)
- NtPrePrepareEnlistment (Ordinal: 465, Address: 0x74530)
- NtPrepareComplete (Ordinal: 466, Address: 0x74540)
- NtPrepareEnlistment (Ordinal: 467, Address: 0x74550)
- NtPrivilegeCheck (Ordinal: 468, Address: 0x74560)
- NtPrivilegeObjectAuditAlarm (Ordinal: 469, Address: 0x74570)
- NtPrivilegedServiceAuditAlarm (Ordinal: 470, Address: 0x74580)
- NtPropagationComplete (Ordinal: 471, Address: 0x74590)
- NtPropagationFailed (Ordinal: 472, Address: 0x745a0)
- NtProtectVirtualMemory (Ordinal: 473, Address: 0x736e0)
- NtPssCaptureVaSpaceBulk (Ordinal: 474, Address: 0x745b0)
- NtPulseEvent (Ordinal: 475, Address: 0x745c0)
- NtQueryAttributesFile (Ordinal: 476, Address: 0x735b0)
- NtQueryAuxiliaryCounterFrequency (Ordinal: 477, Address: 0x745d0)
- NtQueryBootEntryOrder (Ordinal: 478, Address: 0x745e0)
- NtQueryBootOptions (Ordinal: 479, Address: 0x745f0)
- NtQueryDebugFilterState (Ordinal: 480, Address: 0x74600)
- NtQueryDefaultLocale (Ordinal: 481, Address: 0x73310)
- NtQueryDefaultUILanguage (Ordinal: 482, Address: 0x73620)
- NtQueryDirectoryFile (Ordinal: 483, Address: 0x73530)
- NtQueryDirectoryFileEx (Ordinal: 484, Address: 0x74610)
- NtQueryDirectoryObject (Ordinal: 485, Address: 0x74620)
- NtQueryDriverEntryOrder (Ordinal: 486, Address: 0x74630)
- NtQueryEaFile (Ordinal: 487, Address: 0x74640)
- NtQueryEvent (Ordinal: 488, Address: 0x73740)
- NtQueryFullAttributesFile (Ordinal: 489, Address: 0x74650)
- NtQueryInformationAtom (Ordinal: 490, Address: 0x74660)
- NtQueryInformationByName (Ordinal: 491, Address: 0x74670)
- NtQueryInformationEnlistment (Ordinal: 492, Address: 0x74680)
- NtQueryInformationFile (Ordinal: 493, Address: 0x732d0)
- NtQueryInformationJobObject (Ordinal: 494, Address: 0x74690)
- NtQueryInformationPort (Ordinal: 495, Address: 0x746a0)
- NtQueryInformationProcess (Ordinal: 496, Address: 0x73350)
- NtQueryInformationResourceManager (Ordinal: 497, Address: 0x746b0)
- NtQueryInformationThread (Ordinal: 498, Address: 0x73430)
- NtQueryInformationToken (Ordinal: 499, Address: 0x733f0)
- NtQueryInformationTransaction (Ordinal: 500, Address: 0x746c0)
- NtQueryInformationTransactionManager (Ordinal: 501, Address: 0x746d0)
- NtQueryInformationWorkerFactory (Ordinal: 502, Address: 0x746e0)
- NtQueryInstallUILanguage (Ordinal: 503, Address: 0x746f0)
- NtQueryIntervalProfile (Ordinal: 504, Address: 0x74700)
- NtQueryIoCompletion (Ordinal: 505, Address: 0x74710)
- NtQueryKey (Ordinal: 506, Address: 0x73320)
- NtQueryLicenseValue (Ordinal: 507, Address: 0x74720)
- NtQueryMultipleValueKey (Ordinal: 508, Address: 0x74730)
- NtQueryMutant (Ordinal: 509, Address: 0x74740)
- NtQueryObject (Ordinal: 510, Address: 0x732c0)
- NtQueryOpenSubKeys (Ordinal: 511, Address: 0x74750)
- NtQueryOpenSubKeysEx (Ordinal: 512, Address: 0x74760)
- NtQueryPerformanceCounter (Ordinal: 513, Address: 0x734f0)
- NtQueryPortInformationProcess (Ordinal: 514, Address: 0x74770)
- NtQueryQuotaInformationFile (Ordinal: 515, Address: 0x74780)
- NtQuerySection (Ordinal: 516, Address: 0x736f0)
- NtQuerySecurityAttributesToken (Ordinal: 517, Address: 0x74790)
- NtQuerySecurityObject (Ordinal: 518, Address: 0x747a0)
- NtQuerySecurityPolicy (Ordinal: 519, Address: 0x747b0)
- NtQuerySemaphore (Ordinal: 520, Address: 0x747c0)
- NtQuerySymbolicLinkObject (Ordinal: 521, Address: 0x747d0)
- NtQuerySystemEnvironmentValue (Ordinal: 522, Address: 0x747e0)
- NtQuerySystemEnvironmentValueEx (Ordinal: 523, Address: 0x747f0)
- NtQuerySystemInformation (Ordinal: 524, Address: 0x73540)
- NtQuerySystemInformationEx (Ordinal: 525, Address: 0x74800)
- NtQuerySystemTime (Ordinal: 526, Address: 0x73780)
- NtQueryTimer (Ordinal: 527, Address: 0x73560)
- NtQueryTimerResolution (Ordinal: 528, Address: 0x74810)
- NtQueryValueKey (Ordinal: 529, Address: 0x73330)
- NtQueryVirtualMemory (Ordinal: 530, Address: 0x73410)
- NtQueryVolumeInformationFile (Ordinal: 531, Address: 0x73670)
- NtQueryWnfStateData (Ordinal: 532, Address: 0x74820)
- NtQueryWnfStateNameInformation (Ordinal: 533, Address: 0x74830)
- NtQueueApcThread (Ordinal: 534, Address: 0x73630)
- NtQueueApcThreadEx2 (Ordinal: 535, Address: 0x74850)
- NtQueueApcThreadEx (Ordinal: 536, Address: 0x74840)
- NtRaiseException (Ordinal: 537, Address: 0x74860)
- NtRaiseHardError (Ordinal: 538, Address: 0x74870)
- NtReadFile (Ordinal: 539, Address: 0x73220)
- NtReadFileScatter (Ordinal: 540, Address: 0x734c0)
- NtReadOnlyEnlistment (Ordinal: 541, Address: 0x74880)
- NtReadRequestData (Ordinal: 542, Address: 0x73720)
- NtReadVirtualMemory (Ordinal: 543, Address: 0x735d0)
- NtRecoverEnlistment (Ordinal: 544, Address: 0x74890)
- NtRecoverResourceManager (Ordinal: 545, Address: 0x748a0)
- NtRecoverTransactionManager (Ordinal: 546, Address: 0x748b0)
- NtRegisterProtocolAddressInformation (Ordinal: 547, Address: 0x748c0)
- NtRegisterThreadTerminatePort (Ordinal: 548, Address: 0x748d0)
- NtReleaseKeyedEvent (Ordinal: 549, Address: 0x748e0)
- NtReleaseMutant (Ordinal: 550, Address: 0x733e0)
- NtReleaseSemaphore (Ordinal: 551, Address: 0x73260)
- NtReleaseWorkerFactoryWorker (Ordinal: 552, Address: 0x748f0)
- NtRemoveIoCompletion (Ordinal: 553, Address: 0x73250)
- NtRemoveIoCompletionEx (Ordinal: 554, Address: 0x74900)
- NtRemoveProcessDebug (Ordinal: 555, Address: 0x74910)
- NtRenameKey (Ordinal: 556, Address: 0x74920)
- NtRenameTransactionManager (Ordinal: 557, Address: 0x74930)
- NtReplaceKey (Ordinal: 558, Address: 0x74940)
- NtReplacePartitionUnit (Ordinal: 559, Address: 0x74950)
- NtReplyPort (Ordinal: 560, Address: 0x73280)
- NtReplyWaitReceivePort (Ordinal: 561, Address: 0x73270)
- NtReplyWaitReceivePortEx (Ordinal: 562, Address: 0x73490)
- NtReplyWaitReplyPort (Ordinal: 563, Address: 0x74960)
- NtRequestPort (Ordinal: 564, Address: 0x74970)
- NtRequestWaitReplyPort (Ordinal: 565, Address: 0x73400)
- NtResetEvent (Ordinal: 566, Address: 0x74980)
- NtResetWriteWatch (Ordinal: 567, Address: 0x74990)
- NtRestoreKey (Ordinal: 568, Address: 0x749a0)
- NtResumeProcess (Ordinal: 569, Address: 0x749b0)
- NtResumeThread (Ordinal: 570, Address: 0x73700)
- NtRevertContainerImpersonation (Ordinal: 571, Address: 0x749c0)
- NtRollbackComplete (Ordinal: 572, Address: 0x749d0)
- NtRollbackEnlistment (Ordinal: 573, Address: 0x749e0)
- NtRollbackRegistryTransaction (Ordinal: 574, Address: 0x749f0)
- NtRollbackTransaction (Ordinal: 575, Address: 0x74a00)
- NtRollforwardTransactionManager (Ordinal: 576, Address: 0x74a10)
- NtSaveKey (Ordinal: 577, Address: 0x74a20)
- NtSaveKeyEx (Ordinal: 578, Address: 0x74a30)
- NtSaveMergedKeys (Ordinal: 579, Address: 0x74a40)
- NtSecureConnectPort (Ordinal: 580, Address: 0x74a50)
- NtSerializeBoot (Ordinal: 581, Address: 0x74a60)
- NtSetBootEntryOrder (Ordinal: 582, Address: 0x74a70)
- NtSetBootOptions (Ordinal: 583, Address: 0x74a80)
- NtSetCachedSigningLevel2 (Ordinal: 584, Address: 0x74aa0)
- NtSetCachedSigningLevel (Ordinal: 585, Address: 0x74a90)
- NtSetContextThread (Ordinal: 586, Address: 0x74ab0)
- NtSetDebugFilterState (Ordinal: 587, Address: 0x74ac0)
- NtSetDefaultHardErrorPort (Ordinal: 588, Address: 0x74ad0)
- NtSetDefaultLocale (Ordinal: 589, Address: 0x74ae0)
- NtSetDefaultUILanguage (Ordinal: 590, Address: 0x74af0)
- NtSetDriverEntryOrder (Ordinal: 591, Address: 0x74b00)
- NtSetEaFile (Ordinal: 592, Address: 0x74b10)
- NtSetEvent (Ordinal: 593, Address: 0x732a0)
- NtSetEventBoostPriority (Ordinal: 594, Address: 0x734b0)
- NtSetHighEventPair (Ordinal: 595, Address: 0x74b20)
- NtSetHighWaitLowEventPair (Ordinal: 596, Address: 0x74b30)
- NtSetIRTimer (Ordinal: 597, Address: 0x74b40)
- NtSetInformationDebugObject (Ordinal: 598, Address: 0x74b50)
- NtSetInformationEnlistment (Ordinal: 599, Address: 0x74b60)
- NtSetInformationFile (Ordinal: 600, Address: 0x73450)
- NtSetInformationJobObject (Ordinal: 601, Address: 0x74b70)
- NtSetInformationKey (Ordinal: 602, Address: 0x74b80)
- NtSetInformationObject (Ordinal: 603, Address: 0x737a0)
- NtSetInformationProcess (Ordinal: 604, Address: 0x733a0)
- NtSetInformationResourceManager (Ordinal: 605, Address: 0x74b90)
- NtSetInformationSymbolicLink (Ordinal: 606, Address: 0x74ba0)
- NtSetInformationThread (Ordinal: 607, Address: 0x73290)
- NtSetInformationToken (Ordinal: 608, Address: 0x74bb0)
- NtSetInformationTransaction (Ordinal: 609, Address: 0x74bc0)
- NtSetInformationTransactionManager (Ordinal: 610, Address: 0x74bd0)
- NtSetInformationVirtualMemory (Ordinal: 611, Address: 0x74be0)
- NtSetInformationWorkerFactory (Ordinal: 612, Address: 0x74bf0)
- NtSetIntervalProfile (Ordinal: 613, Address: 0x74c00)
- NtSetIoCompletion (Ordinal: 614, Address: 0x74c10)
- NtSetIoCompletionEx (Ordinal: 615, Address: 0x74c20)
- NtSetLdtEntries (Ordinal: 616, Address: 0x74c30)
- NtSetLowEventPair (Ordinal: 617, Address: 0x74c40)
- NtSetLowWaitHighEventPair (Ordinal: 618, Address: 0x74c50)
- NtSetQuotaInformationFile (Ordinal: 619, Address: 0x74c60)
- NtSetSecurityObject (Ordinal: 620, Address: 0x74c70)
- NtSetSystemEnvironmentValue (Ordinal: 621, Address: 0x74c80)
- NtSetSystemEnvironmentValueEx (Ordinal: 622, Address: 0x74c90)
- NtSetSystemInformation (Ordinal: 623, Address: 0x74ca0)
- NtSetSystemPowerState (Ordinal: 624, Address: 0x74cb0)
- NtSetSystemTime (Ordinal: 625, Address: 0x74cc0)
- NtSetThreadExecutionState (Ordinal: 626, Address: 0x74cd0)
- NtSetTimer2 (Ordinal: 627, Address: 0x74ce0)
- NtSetTimer (Ordinal: 628, Address: 0x73800)
- NtSetTimerEx (Ordinal: 629, Address: 0x74cf0)
- NtSetTimerResolution (Ordinal: 630, Address: 0x74d00)
- NtSetUuidSeed (Ordinal: 631, Address: 0x74d10)
- NtSetValueKey (Ordinal: 632, Address: 0x737e0)
- NtSetVolumeInformationFile (Ordinal: 633, Address: 0x74d20)
- NtSetWnfProcessNotificationEvent (Ordinal: 634, Address: 0x74d30)
- NtShutdownSystem (Ordinal: 635, Address: 0x74d40)
- NtShutdownWorkerFactory (Ordinal: 636, Address: 0x74d50)
- NtSignalAndWaitForSingleObject (Ordinal: 637, Address: 0x74d60)
- NtSinglePhaseReject (Ordinal: 638, Address: 0x74d70)
- NtStartProfile (Ordinal: 639, Address: 0x74d80)
- NtStopProfile (Ordinal: 640, Address: 0x74d90)
- NtSubscribeWnfStateChange (Ordinal: 641, Address: 0x74da0)
- NtSuspendProcess (Ordinal: 642, Address: 0x74db0)
- NtSuspendThread (Ordinal: 643, Address: 0x74dc0)
- NtSystemDebugControl (Ordinal: 644, Address: 0x74dd0)
- NtTerminateEnclave (Ordinal: 645, Address: 0x74de0)
- NtTerminateJobObject (Ordinal: 646, Address: 0x74df0)
- NtTerminateProcess (Ordinal: 647, Address: 0x734a0)
- NtTerminateThread (Ordinal: 648, Address: 0x73710)
- NtTestAlert (Ordinal: 649, Address: 0x74e00)
- NtThawRegistry (Ordinal: 650, Address: 0x74e10)
- NtThawTransactions (Ordinal: 651, Address: 0x74e20)
- NtTraceControl (Ordinal: 652, Address: 0x74e30)
- NtTraceEvent (Ordinal: 653, Address: 0x737c0)
- NtTranslateFilePath (Ordinal: 654, Address: 0x74e40)
- NtUmsThreadYield (Ordinal: 655, Address: 0x74e50)
- NtUnloadDriver (Ordinal: 656, Address: 0x74e60)
- NtUnloadKey2 (Ordinal: 657, Address: 0x74e80)
- NtUnloadKey (Ordinal: 658, Address: 0x74e70)
- NtUnloadKeyEx (Ordinal: 659, Address: 0x74e90)
- NtUnlockFile (Ordinal: 660, Address: 0x74ea0)
- NtUnlockVirtualMemory (Ordinal: 661, Address: 0x74eb0)
- NtUnmapViewOfSection (Ordinal: 662, Address: 0x73480)
- NtUnmapViewOfSectionEx (Ordinal: 663, Address: 0x74ec0)
- NtUnsubscribeWnfStateChange (Ordinal: 664, Address: 0x74ed0)
- NtUpdateWnfStateData (Ordinal: 665, Address: 0x74ee0)
- NtVdmControl (Ordinal: 666, Address: 0x74ef0)
- NtWaitForAlertByThreadId (Ordinal: 667, Address: 0x74f00)
- NtWaitForDebugEvent (Ordinal: 668, Address: 0x74f10)
- NtWaitForKeyedEvent (Ordinal: 669, Address: 0x74f20)
- NtWaitForMultipleObjects32 (Ordinal: 670, Address: 0x73380)
- NtWaitForMultipleObjects (Ordinal: 671, Address: 0x73790)
- NtWaitForSingleObject (Ordinal: 672, Address: 0x73200)
- NtWaitForWorkViaWorkerFactory (Ordinal: 673, Address: 0x74f30)
- NtWaitHighEventPair (Ordinal: 674, Address: 0x74f40)
- NtWaitLowEventPair (Ordinal: 675, Address: 0x74f60)
- NtWorkerFactoryWorkerReady (Ordinal: 676, Address: 0x731d0)
- NtWow64AllocateVirtualMemory64 (Ordinal: 677, Address: 0x75050)
- NtWow64CallFunction64 (Ordinal: 678, Address: 0x75080)
- NtWow64CsrAllocateCaptureBuffer (Ordinal: 679, Address: 0x74fa0)
- NtWow64CsrAllocateMessagePointer (Ordinal: 680, Address: 0x74fc0)
- NtWow64CsrCaptureMessageBuffer (Ordinal: 681, Address: 0x74fd0)
- NtWow64CsrCaptureMessageString (Ordinal: 682, Address: 0x74fe0)
- NtWow64CsrClientCallServer (Ordinal: 683, Address: 0x74f90)
- NtWow64CsrClientConnectToServer (Ordinal: 684, Address: 0x74f70)
- NtWow64CsrFreeCaptureBuffer (Ordinal: 685, Address: 0x74fb0)
- NtWow64CsrGetProcessId (Ordinal: 686, Address: 0x74ff0)
- NtWow64CsrIdentifyAlertableThread (Ordinal: 687, Address: 0x74f80)
- NtWow64CsrVerifyRegion (Ordinal: 688, Address: 0x75000)
- NtWow64DebuggerCall (Ordinal: 689, Address: 0x75010)
- NtWow64GetCurrentProcessorNumberEx (Ordinal: 690, Address: 0x75020)
- NtWow64GetNativeSystemInformation (Ordinal: 691, Address: 0x75030)
- NtWow64IsProcessorFeaturePresent (Ordinal: 692, Address: 0x75090)
- NtWow64QueryInformationProcess64 (Ordinal: 693, Address: 0x75040)
- NtWow64ReadVirtualMemory64 (Ordinal: 694, Address: 0x75060)
- NtWow64WriteVirtualMemory64 (Ordinal: 695, Address: 0x75070)
- NtWriteFile (Ordinal: 696, Address: 0x73240)
- NtWriteFileGather (Ordinal: 697, Address: 0x73390)
- NtWriteRequestData (Ordinal: 698, Address: 0x73750)
- NtWriteVirtualMemory (Ordinal: 699, Address: 0x73580)
- NtYieldExecution (Ordinal: 700, Address: 0x73640)
- NtdllDefWindowProc_A (Ordinal: 701, Address: 0x886c0)
- NtdllDefWindowProc_W (Ordinal: 702, Address: 0x886d0)
- NtdllDialogWndProc_A (Ordinal: 703, Address: 0x88780)
- NtdllDialogWndProc_W (Ordinal: 704, Address: 0x88790)
- PfxFindPrefix (Ordinal: 705, Address: 0xc5410)
- PfxInitialize (Ordinal: 706, Address: 0xc54b0)
- PfxInsertPrefix (Ordinal: 707, Address: 0xc54d0)
- PfxRemovePrefix (Ordinal: 708, Address: 0xc55c0)
- PssNtCaptureSnapshot (Ordinal: 709, Address: 0x106660)
- PssNtDuplicateSnapshot (Ordinal: 710, Address: 0x106c30)
- PssNtFreeRemoteSnapshot (Ordinal: 711, Address: 0x106ca0)
- PssNtFreeSnapshot (Ordinal: 712, Address: 0x106e40)
- PssNtFreeWalkMarker (Ordinal: 713, Address: 0x106fa0)
- PssNtQuerySnapshot (Ordinal: 714, Address: 0x106fd0)
- PssNtValidateDescriptor (Ordinal: 715, Address: 0x107160)
- PssNtWalkSnapshot (Ordinal: 716, Address: 0x107230)
- RtlAbortRXact (Ordinal: 717, Address: 0xc5800)
- RtlAbsoluteToSelfRelativeSD (Ordinal: 718, Address: 0x67260)
- RtlAcquirePebLock (Ordinal: 719, Address: 0x6b0a0)
- RtlAcquirePrivilege (Ordinal: 720, Address: 0xc5fd0)
- RtlAcquireReleaseSRWLockExclusive (Ordinal: 721, Address: 0xca6f0)
- RtlAcquireResourceExclusive (Ordinal: 722, Address: 0x6c620)
- RtlAcquireResourceShared (Ordinal: 723, Address: 0x6bc10)
- RtlAcquireSRWLockExclusive (Ordinal: 724, Address: 0x42510)
- RtlAcquireSRWLockShared (Ordinal: 725, Address: 0x35520)
- RtlActivateActivationContext (Ordinal: 726, Address: 0x63ce0)
- RtlActivateActivationContextEx (Ordinal: 727, Address: 0x63d30)
- RtlAddAccessAllowedAce (Ordinal: 728, Address: 0x53ba0)
- RtlAddAccessAllowedAceEx (Ordinal: 729, Address: 0x6d990)
- RtlAddAccessAllowedObjectAce (Ordinal: 730, Address: 0xcafa0)
- RtlAddAccessDeniedAce (Ordinal: 731, Address: 0xcaff0)
- RtlAddAccessDeniedAceEx (Ordinal: 732, Address: 0xcb020)
- RtlAddAccessDeniedObjectAce (Ordinal: 733, Address: 0xcb050)
- RtlAddAccessFilterAce (Ordinal: 734, Address: 0xcb0a0)
- RtlAddAce (Ordinal: 735, Address: 0x2b070)
- RtlAddActionToRXact (Ordinal: 736, Address: 0xc5840)
- RtlAddAtomToAtomTable (Ordinal: 737, Address: 0x606a0)
- RtlAddAttributeActionToRXact (Ordinal: 738, Address: 0xc5880)
- RtlAddAuditAccessAce (Ordinal: 739, Address: 0xcb280)
- RtlAddAuditAccessAceEx (Ordinal: 740, Address: 0xcb2c0)
- RtlAddAuditAccessObjectAce (Ordinal: 741, Address: 0xcb300)
- RtlAddCompoundAce (Ordinal: 742, Address: 0xcb370)
- RtlAddIntegrityLabelToBoundaryDescriptor (Ordinal: 743, Address: 0xcd4e0)
- RtlAddMandatoryAce (Ordinal: 744, Address: 0x56c60)
- RtlAddProcessTrustLabelAce (Ordinal: 745, Address: 0xcb4a0)
- RtlAddRefActivationContext (Ordinal: 746, Address: 0x35230)
- RtlAddRefMemoryStream (Ordinal: 747, Address: 0xb4ed0)
- RtlAddResourceAttributeAce (Ordinal: 748, Address: 0xcb5c0)
- RtlAddSIDToBoundaryDescriptor (Ordinal: 749, Address: 0x29dd0)
- RtlAddScopedPolicyIDAce (Ordinal: 750, Address: 0xcb930)
- RtlAddVectoredContinueHandler (Ordinal: 751, Address: 0xb84c0)
- RtlAddVectoredExceptionHandler (Ordinal: 752, Address: 0x2b160)
- RtlAddressInSectionTable (Ordinal: 753, Address: 0x52640)
- RtlAdjustPrivilege (Ordinal: 754, Address: 0x675a0)
- RtlAllocateActivationContextStack (Ordinal: 755, Address: 0x650f0)
- RtlAllocateAndInitializeSid (Ordinal: 756, Address: 0x63f40)
- RtlAllocateAndInitializeSidEx (Ordinal: 757, Address: 0xc6230)
- RtlAllocateHandle (Ordinal: 758, Address: 0x60bd0)
- RtlAllocateHeap (Ordinal: 759, Address: 0x46080)
- RtlAllocateMemoryBlockLookaside (Ordinal: 760, Address: 0x122010)
- RtlAllocateMemoryZone (Ordinal: 761, Address: 0x1220a0)
- RtlAllocateWnfSerializationGroup (Ordinal: 762, Address: 0x6df10)
- RtlAnsiCharToUnicodeChar (Ordinal: 763, Address: 0x623c0)
- RtlAnsiStringToUnicodeSize (Ordinal: 764, Address: 0x2ae40)
- RtlAnsiStringToUnicodeString (Ordinal: 765, Address: 0x4c850)
- RtlAppendAsciizToString (Ordinal: 766, Address: 0xce3b0)
- RtlAppendPathElement (Ordinal: 767, Address: 0xacfa0)
- RtlAppendStringToString (Ordinal: 768, Address: 0xce410)
- RtlAppendUnicodeStringToString (Ordinal: 769, Address: 0x515f0)
- RtlAppendUnicodeToString (Ordinal: 770, Address: 0x40030)
- RtlApplicationVerifierStop (Ordinal: 771, Address: 0xba110)
- RtlApplyRXact (Ordinal: 772, Address: 0xc5a20)
- RtlApplyRXactNoFlush (Ordinal: 773, Address: 0xc5ab0)
- RtlAppxIsFileOwnedByTrustedInstaller (Ordinal: 774, Address: 0xac900)
- RtlAreAllAccessesGranted (Ordinal: 775, Address: 0xc62c0)
- RtlAreAnyAccessesGranted (Ordinal: 776, Address: 0xc62e0)
- RtlAreBitsClear (Ordinal: 777, Address: 0xce580)
- RtlAreBitsSet (Ordinal: 778, Address: 0x68300)
- RtlAreLongPathsEnabled (Ordinal: 779, Address: 0x65580)
- RtlAssert (Ordinal: 780, Address: 0xcff00)
- RtlAvlInsertNodeEx (Ordinal: 781, Address: 0xd0010)
- RtlAvlRemoveNode (Ordinal: 782, Address: 0xd0180)
- RtlBarrier (Ordinal: 783, Address: 0xd05c0)
- RtlBarrierForDelete (Ordinal: 784, Address: 0xd05e0)
- RtlCancelTimer (Ordinal: 785, Address: 0x105500)
- RtlCanonicalizeDomainName (Ordinal: 786, Address: 0xcdc00)
- RtlCapabilityCheck (Ordinal: 787, Address: 0x6fa70)
- RtlCapabilityCheckForSingleSessionSku (Ordinal: 788, Address: 0xc6300)
- RtlCaptureContext (Ordinal: 789, Address: 0x892e0)
- RtlCaptureStackBackTrace (Ordinal: 790, Address: 0x5c550)
- RtlCaptureStackContext (Ordinal: 791, Address: 0x895e0)
- RtlCharToInteger (Ordinal: 792, Address: 0x28ef0)
- RtlCheckBootStatusIntegrity (Ordinal: 793, Address: 0xd0b20)
- RtlCheckForOrphanedCriticalSections (Ordinal: 794, Address: 0x68d50)
- RtlCheckPortableOperatingSystem (Ordinal: 795, Address: 0xd1370)
- RtlCheckRegistryKey (Ordinal: 796, Address: 0xd1430)
- RtlCheckSandboxedToken (Ordinal: 797, Address: 0xb5c40)
- RtlCheckSystemBootStatusIntegrity (Ordinal: 798, Address: 0xd0c30)
- RtlCheckTokenCapability (Ordinal: 799, Address: 0x6ff50)
- RtlCheckTokenMembership (Ordinal: 800, Address: 0xc6340)
- RtlCheckTokenMembershipEx (Ordinal: 801, Address: 0x564d0)
- RtlCleanUpTEBLangLists (Ordinal: 802, Address: 0x6c500)
- RtlClearAllBits (Ordinal: 803, Address: 0xce650)
- RtlClearBit (Ordinal: 804, Address: 0x879e0)
- RtlClearBits (Ordinal: 805, Address: 0x620b0)
- RtlClearThreadWorkOnBehalfTicket (Ordinal: 806, Address: 0x66f70)
- RtlCloneMemoryStream (Ordinal: 807, Address: 0xb4ee0)
- RtlCloneUserProcess (Ordinal: 808, Address: 0xb5850)
- RtlCmDecodeMemIoResource (Ordinal: 809, Address: 0xd64f0)
- RtlCmEncodeMemIoResource (Ordinal: 810, Address: 0xd6570)
- RtlCommitDebugInfo (Ordinal: 811, Address: 0xb68e0)
- RtlCommitMemoryStream (Ordinal: 812, Address: 0xb4ee0)
- RtlCompactHeap (Ordinal: 813, Address: 0xd6b00)
- RtlCompareAltitudes (Ordinal: 814, Address: 0xda5b0)
- RtlCompareMemory (Ordinal: 815, Address: 0x889f0)
- RtlCompareMemoryUlong (Ordinal: 816, Address: 0x88a40)
- RtlCompareString (Ordinal: 817, Address: 0xce470)
- RtlCompareUnicodeString (Ordinal: 818, Address: 0x507b0)
- RtlCompareUnicodeStrings (Ordinal: 819, Address: 0x507e0)
- RtlCompressBuffer (Ordinal: 820, Address: 0xda830)
- RtlComputeCrc32 (Ordinal: 821, Address: 0xdaad0)
- RtlComputeImportTableHash (Ordinal: 822, Address: 0xbe610)
- RtlComputePrivatizedDllName_U (Ordinal: 823, Address: 0xb4ba0)
- RtlConnectToSm (Ordinal: 824, Address: 0xdab10)
- RtlConsoleMultiByteToUnicodeN (Ordinal: 825, Address: 0xc4020)
- RtlConstructCrossVmEventPath (Ordinal: 826, Address: 0xdaec0)
- RtlConstructCrossVmMutexPath (Ordinal: 827, Address: 0xdaec0)
- RtlContractHashTable (Ordinal: 828, Address: 0xdb010)
- RtlConvertDeviceFamilyInfoToString (Ordinal: 829, Address: 0xb5090)
- RtlConvertExclusiveToShared (Ordinal: 830, Address: 0xca810)
- RtlConvertLCIDToString (Ordinal: 831, Address: 0xd1c50)
- RtlConvertLongToLargeInteger (Ordinal: 832, Address: 0x89040)
- RtlConvertSRWLockExclusiveToShared (Ordinal: 833, Address: 0xca720)
- RtlConvertSharedToExclusive (Ordinal: 834, Address: 0xca870)
- RtlConvertSidToUnicodeString (Ordinal: 835, Address: 0x53f10)
- RtlConvertToAutoInheritSecurityObject (Ordinal: 836, Address: 0xb5c80)
- RtlConvertUlongToLargeInteger (Ordinal: 837, Address: 0x89050)
- RtlCopyBitMap (Ordinal: 838, Address: 0xce690)
- RtlCopyContext (Ordinal: 839, Address: 0xdb930)
- RtlCopyExtendedContext (Ordinal: 840, Address: 0xdbaa0)
- RtlCopyLuid (Ordinal: 841, Address: 0xc6360)
- RtlCopyLuidAndAttributesArray (Ordinal: 842, Address: 0xc6380)
- RtlCopyMappedMemory (Ordinal: 843, Address: 0xdc910)
- RtlCopyMemoryStreamTo (Ordinal: 844, Address: 0xb4ef0)
- RtlCopyOutOfProcessMemoryStreamTo (Ordinal: 845, Address: 0xb4ef0)
- RtlCopySecurityDescriptor (Ordinal: 846, Address: 0xb5cb0)
- RtlCopySid (Ordinal: 847, Address: 0x56da0)
- RtlCopySidAndAttributesArray (Ordinal: 848, Address: 0xc63c0)
- RtlCopyString (Ordinal: 849, Address: 0x2bb90)
- RtlCopyUnicodeString (Ordinal: 850, Address: 0x56470)
- RtlCrc32 (Ordinal: 851, Address: 0xdc9f0)
- RtlCrc64 (Ordinal: 852, Address: 0xdca20)
- RtlCreateAcl (Ordinal: 853, Address: 0x58170)
- RtlCreateActivationContext (Ordinal: 854, Address: 0x63ac0)
- RtlCreateAndSetSD (Ordinal: 855, Address: 0xb5d40)
- RtlCreateAtomTable (Ordinal: 856, Address: 0x605d0)
- RtlCreateBootStatusDataFile (Ordinal: 857, Address: 0xd0c80)
- RtlCreateBoundaryDescriptor (Ordinal: 858, Address: 0x2a2a0)
- RtlCreateEnvironment (Ordinal: 859, Address: 0x5b240)
- RtlCreateEnvironmentEx (Ordinal: 860, Address: 0x5b270)
- RtlCreateHashTable (Ordinal: 861, Address: 0xdb120)
- RtlCreateHashTableEx (Ordinal: 862, Address: 0xdb150)
- RtlCreateHeap (Ordinal: 863, Address: 0x41170)
- RtlCreateMemoryBlockLookaside (Ordinal: 864, Address: 0x2aa20)
- RtlCreateMemoryZone (Ordinal: 865, Address: 0x2ab80)
- RtlCreateProcessParameters (Ordinal: 866, Address: 0xb5a40)
- RtlCreateProcessParametersEx (Ordinal: 867, Address: 0xb5a80)
- RtlCreateProcessParametersWithTemplate (Ordinal: 868, Address: 0x28350)
- RtlCreateProcessReflection (Ordinal: 869, Address: 0xb5150)
- RtlCreateQueryDebugBuffer (Ordinal: 870, Address: 0xb6900)
- RtlCreateRegistryKey (Ordinal: 871, Address: 0xd1470)
- RtlCreateSecurityDescriptor (Ordinal: 872, Address: 0x58cc0)
- RtlCreateServiceSid (Ordinal: 873, Address: 0x2c280)
- RtlCreateSystemVolumeInformationFolder (Ordinal: 874, Address: 0xddbd0)
- RtlCreateTagHeap (Ordinal: 875, Address: 0x6adb0)
- RtlCreateTimer (Ordinal: 876, Address: 0x2a5d0)
- RtlCreateTimerQueue (Ordinal: 877, Address: 0x29040)
- RtlCreateUnicodeString (Ordinal: 878, Address: 0x54640)
- RtlCreateUnicodeStringFromAsciiz (Ordinal: 879, Address: 0x4d820)
- RtlCreateUserProcess (Ordinal: 880, Address: 0xbfcd0)
- RtlCreateUserProcessEx (Ordinal: 881, Address: 0xbfd30)
- RtlCreateUserSecurityObject (Ordinal: 882, Address: 0xb6020)
- RtlCreateUserStack (Ordinal: 883, Address: 0x728b0)
- RtlCreateUserThread (Ordinal: 884, Address: 0x70d50)
- RtlCreateVirtualAccountSid (Ordinal: 885, Address: 0xc6450)
- RtlCultureNameToLCID (Ordinal: 886, Address: 0x55c30)
- RtlCustomCPToUnicodeN (Ordinal: 887, Address: 0xc4170)
- RtlCutoverTimeToSystemTime (Ordinal: 888, Address: 0x5d060)
- RtlDeCommitDebugInfo (Ordinal: 889, Address: 0xb6a90)
- RtlDeNormalizeProcessParams (Ordinal: 890, Address: 0xb5ac0)
- RtlDeactivateActivationContext (Ordinal: 891, Address: 0x652d0)
- RtlDebugPrintTimes (Ordinal: 892, Address: 0x6e0b0)
- RtlDecodePointer (Ordinal: 893, Address: 0x655a0)
- RtlDecodeRemotePointer (Ordinal: 894, Address: 0xba410)
- RtlDecodeSystemPointer (Ordinal: 895, Address: 0x2bc90)
- RtlDecompressBuffer (Ordinal: 896, Address: 0xda890)
- RtlDecompressBufferEx (Ordinal: 897, Address: 0xda8f0)
- RtlDecompressFragment (Ordinal: 898, Address: 0xda950)
- RtlDefaultNpAcl (Ordinal: 899, Address: 0xb6080)
- RtlDelete (Ordinal: 900, Address: 0x280a0)
- RtlDeleteAce (Ordinal: 901, Address: 0x29420)
- RtlDeleteAtomFromAtomTable (Ordinal: 902, Address: 0x27900)
- RtlDeleteBarrier (Ordinal: 903, Address: 0xd0600)
- RtlDeleteBoundaryDescriptor (Ordinal: 904, Address: 0x2bb20)
- RtlDeleteCriticalSection (Ordinal: 905, Address: 0x2fc80)
- RtlDeleteElementGenericTable (Ordinal: 906, Address: 0x27f40)
- RtlDeleteElementGenericTableAvl (Ordinal: 907, Address: 0x26ea0)
- RtlDeleteElementGenericTableAvlEx (Ordinal: 908, Address: 0x26ee0)
- RtlDeleteHashTable (Ordinal: 909, Address: 0xdb170)
- RtlDeleteNoSplay (Ordinal: 910, Address: 0x68010)
- RtlDeleteRegistryValue (Ordinal: 911, Address: 0xd14b0)
- RtlDeleteResource (Ordinal: 912, Address: 0x29ed0)
- RtlDeleteSecurityObject (Ordinal: 913, Address: 0x6ce50)
- RtlDeleteTimer (Ordinal: 914, Address: 0x28d20)
- RtlDeleteTimerQueue (Ordinal: 915, Address: 0x105520)
- RtlDeleteTimerQueueEx (Ordinal: 916, Address: 0x28ba0)
- RtlDeregisterSecureMemoryCacheCallback (Ordinal: 917, Address: 0xde780)
- RtlDeregisterWait (Ordinal: 918, Address: 0x1057a0)
- RtlDeregisterWaitEx (Ordinal: 919, Address: 0x280f0)
- RtlDeriveCapabilitySidsFromName (Ordinal: 920, Address: 0x6ed50)
- RtlDestroyAtomTable (Ordinal: 921, Address: 0xcd2e0)
- RtlDestroyEnvironment (Ordinal: 922, Address: 0x2ba50)
- RtlDestroyHandleTable (Ordinal: 923, Address: 0x2c020)
- RtlDestroyHeap (Ordinal: 924, Address: 0x2f960)
- RtlDestroyMemoryBlockLookaside (Ordinal: 925, Address: 0xcd840)
- RtlDestroyMemoryZone (Ordinal: 926, Address: 0xcda60)
- RtlDestroyProcessParameters (Ordinal: 927, Address: 0x2ba50)
- RtlDestroyQueryDebugBuffer (Ordinal: 928, Address: 0xb6ab0)
- RtlDetectHeapLeaks (Ordinal: 929, Address: 0x5de80)
- RtlDetermineDosPathNameType_U (Ordinal: 930, Address: 0x33620)
- RtlDisableThreadProfiling (Ordinal: 931, Address: 0xaccd0)
- RtlDisownModuleHeapAllocation (Ordinal: 932, Address: 0x6c9f0)
- RtlDllShutdownInProgress (Ordinal: 933, Address: 0x5fa60)
- RtlDnsHostNameToComputerName (Ordinal: 934, Address: 0xcdde0)
- RtlDoesFileExists_U (Ordinal: 935, Address: 0xad1b0)
- RtlDoesNameContainWildCards (Ordinal: 936, Address: 0xe1630)
- RtlDosApplyFileIsolationRedirection_Ustr (Ordinal: 937, Address: 0x49b60)
- RtlDosLongPathNameToNtPathName_U_WithStatus (Ordinal: 938, Address: 0xad1d0)
- RtlDosLongPathNameToRelativeNtPathName_U_WithStatus (Ordinal: 939, Address: 0xad200)
- RtlDosPathNameToNtPathName_U (Ordinal: 940, Address: 0x520c0)
- RtlDosPathNameToNtPathName_U_WithStatus (Ordinal: 941, Address: 0x522e0)
- RtlDosPathNameToRelativeNtPathName_U (Ordinal: 942, Address: 0x52130)
- RtlDosPathNameToRelativeNtPathName_U_WithStatus (Ordinal: 943, Address: 0x42030)
- RtlDosSearchPath_U (Ordinal: 944, Address: 0xad230)
- RtlDosSearchPath_Ustr (Ordinal: 945, Address: 0x454b0)
- RtlDowncaseUnicodeChar (Ordinal: 946, Address: 0xcdea0)
- RtlDowncaseUnicodeString (Ordinal: 947, Address: 0x2ac10)
- RtlDumpResource (Ordinal: 948, Address: 0xca940)
- RtlDuplicateUnicodeString (Ordinal: 949, Address: 0x6d710)
- RtlEmptyAtomTable (Ordinal: 950, Address: 0xcd390)
- RtlEnableEarlyCriticalSectionEventCreation (Ordinal: 951, Address: 0xca990)
- RtlEnableThreadProfiling (Ordinal: 952, Address: 0xacd20)
- RtlEncodePointer (Ordinal: 953, Address: 0x65f60)
- RtlEncodeRemotePointer (Ordinal: 954, Address: 0xba460)
- RtlEncodeSystemPointer (Ordinal: 955, Address: 0x6de70)
- RtlEndEnumerationHashTable (Ordinal: 956, Address: 0xdb200)
- RtlEndStrongEnumerationHashTable (Ordinal: 957, Address: 0xdb250)
- RtlEndWeakEnumerationHashTable (Ordinal: 958, Address: 0xdb260)
- RtlEnlargedIntegerMultiply (Ordinal: 959, Address: 0x88de0)
- RtlEnlargedUnsignedMultiply (Ordinal: 960, Address: 0x88df0)
- RtlEnterCriticalSection (Ordinal: 961, Address: 0x400c0)
- RtlEnumProcessHeaps (Ordinal: 962, Address: 0xd6c60)
- RtlEnumerateEntryHashTable (Ordinal: 963, Address: 0xdb270)
- RtlEnumerateGenericTable (Ordinal: 964, Address: 0xde3e0)
- RtlEnumerateGenericTableAvl (Ordinal: 965, Address: 0x2b900)
- RtlEnumerateGenericTableLikeADirectory (Ordinal: 966, Address: 0xde4f0)
- RtlEnumerateGenericTableWithoutSplaying (Ordinal: 967, Address: 0x2ba80)
- RtlEnumerateGenericTableWithoutSplayingAvl (Ordinal: 968, Address: 0x2b930)
- RtlEqualComputerName (Ordinal: 969, Address: 0xcdec0)
- RtlEqualDomainName (Ordinal: 970, Address: 0xcded0)
- RtlEqualLuid (Ordinal: 971, Address: 0xc6530)
- RtlEqualPrefixSid (Ordinal: 972, Address: 0x58880)
- RtlEqualSid (Ordinal: 973, Address: 0x58b50)
- RtlEqualString (Ordinal: 974, Address: 0x294d0)
- RtlEqualUnicodeString (Ordinal: 975, Address: 0x517a0)
- RtlEqualWnfChangeStamps (Ordinal: 976, Address: 0x2c250)
- RtlEraseUnicodeString (Ordinal: 977, Address: 0xc6560)
- RtlEthernetAddressToStringA (Ordinal: 978, Address: 0xe1d00)
- RtlEthernetAddressToStringW (Ordinal: 979, Address: 0xe1ee0)
- RtlEthernetStringToAddressA (Ordinal: 980, Address: 0xe2350)
- RtlEthernetStringToAddressW (Ordinal: 981, Address: 0xe2470)
- RtlExitUserProcess (Ordinal: 982, Address: 0x5db50)
- RtlExitUserThread (Ordinal: 983, Address: 0x6bcc0)
- RtlExpandEnvironmentStrings (Ordinal: 984, Address: 0x5c920)
- RtlExpandEnvironmentStrings_U (Ordinal: 985, Address: 0x5c8b0)
- RtlExpandHashTable (Ordinal: 986, Address: 0xdb310)
- RtlExtendCorrelationVector (Ordinal: 987, Address: 0xe2590)
- RtlExtendMemoryBlockLookaside (Ordinal: 988, Address: 0xcd890)
- RtlExtendMemoryZone (Ordinal: 989, Address: 0xcdac0)
- RtlExtendedIntegerMultiply (Ordinal: 990, Address: 0x88f10)
- RtlExtendedLargeIntegerDivide (Ordinal: 991, Address: 0x88e20)
- RtlExtendedMagicDivide (Ordinal: 992, Address: 0x88e80)
- RtlExtractBitMap (Ordinal: 993, Address: 0xce860)
- RtlFillMemory (Ordinal: 994, Address: 0x88a70)
- RtlFillMemoryUlong (Ordinal: 995, Address: 0x88ae0)
- RtlFillMemoryUlonglong (Ordinal: 996, Address: 0x88ab0)
- RtlFinalReleaseOutOfProcessMemoryStream (Ordinal: 997, Address: 0xb4f00)
- RtlFindAceByType (Ordinal: 998, Address: 0x58520)
- RtlFindActivationContextSectionGuid (Ordinal: 999, Address: 0x4d980)
- RtlFindActivationContextSectionString (Ordinal: 1000, Address: 0x4a460)
- RtlFindCharInUnicodeString (Ordinal: 1001, Address: 0x4ad50)
- RtlFindClearBits (Ordinal: 1002, Address: 0xce9e0)
- RtlFindClearBitsAndSet (Ordinal: 1003, Address: 0x61f60)
- RtlFindClearRuns (Ordinal: 1004, Address: 0xcec90)
- RtlFindClosestEncodableLength (Ordinal: 1005, Address: 0xd66a0)
- RtlFindExportedRoutineByName (Ordinal: 1006, Address: 0xcd500)
- RtlFindLastBackwardRunClear (Ordinal: 1007, Address: 0xceed0)
- RtlFindLeastSignificantBit (Ordinal: 1008, Address: 0xcefb0)
- RtlFindLongestRunClear (Ordinal: 1009, Address: 0xcf050)
- RtlFindMessage (Ordinal: 1010, Address: 0x604f0)
- RtlFindMostSignificantBit (Ordinal: 1011, Address: 0xcf090)
- RtlFindNextForwardRunClear (Ordinal: 1012, Address: 0xcf130)
- RtlFindSetBits (Ordinal: 1013, Address: 0xcf230)
- RtlFindSetBitsAndClear (Ordinal: 1014, Address: 0xcf4f0)
- RtlFindUnicodeSubstring (Ordinal: 1015, Address: 0x66a50)
- RtlFirstEntrySList (Ordinal: 1016, Address: 0xbe9e0)
- RtlFirstFreeAce (Ordinal: 1017, Address: 0x584c0)
- RtlFlsAlloc (Ordinal: 1018, Address: 0x65d50)
- RtlFlsFree (Ordinal: 1019, Address: 0x68ff0)
- RtlFlsGetValue (Ordinal: 1020, Address: 0x5bfb0)
- RtlFlsSetValue (Ordinal: 1021, Address: 0x5c3d0)
- RtlFlushHeaps (Ordinal: 1022, Address: 0xd6c80)
- RtlFlushSecureMemoryCache (Ordinal: 1023, Address: 0xde810)
- RtlFormatCurrentUserKeyPath (Ordinal: 1024, Address: 0x53de0)
- RtlFormatMessage (Ordinal: 1025, Address: 0xe2940)
- RtlFormatMessageEx (Ordinal: 1026, Address: 0x613f0)
- RtlFreeActivationContextStack (Ordinal: 1027, Address: 0x65220)
- RtlFreeAnsiString (Ordinal: 1028, Address: 0x43e80)
- RtlFreeHandle (Ordinal: 1029, Address: 0x67fe0)
- RtlFreeHeap (Ordinal: 1030, Address: 0x43eb0)
- RtlFreeMemoryBlockLookaside (Ordinal: 1031, Address: 0x122190)
- RtlFreeOemString (Ordinal: 1032, Address: 0xcdf40)
- RtlFreeSid (Ordinal: 1033, Address: 0x6af80)
- RtlFreeThreadActivationContextStack (Ordinal: 1034, Address: 0x65140)
- RtlFreeUTF8String (Ordinal: 1035, Address: 0x43e80)
- RtlFreeUnicodeString (Ordinal: 1036, Address: 0x43e80)
- RtlFreeUserStack (Ordinal: 1037, Address: 0xaddf0)
- RtlGUIDFromString (Ordinal: 1038, Address: 0xe29a0)
- RtlGenerate8dot3Name (Ordinal: 1039, Address: 0xe2c70)
- RtlGetAce (Ordinal: 1040, Address: 0x6a900)
- RtlGetActiveActivationContext (Ordinal: 1041, Address: 0x66fb0)
- RtlGetActiveConsoleId (Ordinal: 1042, Address: 0x6cf40)
- RtlGetAppContainerNamedObjectPath (Ordinal: 1043, Address: 0x68190)
- RtlGetAppContainerParent (Ordinal: 1044, Address: 0xc65a0)
- RtlGetAppContainerSidType (Ordinal: 1045, Address: 0xc6650)
- RtlGetCallersAddress (Ordinal: 1046, Address: 0xd0730)
- RtlGetCompressionWorkSpaceSize (Ordinal: 1047, Address: 0xda9b0)
- RtlGetConsoleSessionForegroundProcessId (Ordinal: 1048, Address: 0xe32f0)
- RtlGetControlSecurityDescriptor (Ordinal: 1049, Address: 0x6c5e0)
- RtlGetCriticalSectionRecursionCount (Ordinal: 1050, Address: 0xca9b0)
- RtlGetCurrentDirectory_U (Ordinal: 1051, Address: 0x27c90)
- RtlGetCurrentPeb (Ordinal: 1052, Address: 0xe3320)
- RtlGetCurrentProcessorNumber (Ordinal: 1053, Address: 0x67c50)
- RtlGetCurrentProcessorNumberEx (Ordinal: 1054, Address: 0x66960)
- RtlGetCurrentServiceSessionId (Ordinal: 1055, Address: 0x43f30)
- RtlGetCurrentTransaction (Ordinal: 1056, Address: 0x60e90)
- RtlGetDaclSecurityDescriptor (Ordinal: 1057, Address: 0x65ef0)
- RtlGetDeviceFamilyInfoEnum (Ordinal: 1058, Address: 0x6c1d0)
- RtlGetElementGenericTable (Ordinal: 1059, Address: 0xde430)
- RtlGetElementGenericTableAvl (Ordinal: 1060, Address: 0xde5d0)
- RtlGetEnabledExtendedFeatures (Ordinal: 1061, Address: 0x6ca70)
- RtlGetExePath (Ordinal: 1062, Address: 0x2bf50)
- RtlGetExtendedContextLength2 (Ordinal: 1063, Address: 0xdbac0)
- RtlGetExtendedContextLength (Ordinal: 1064, Address: 0xdbb70)
- RtlGetExtendedFeaturesMask (Ordinal: 1065, Address: 0xdbbc0)
- RtlGetFileMUIPath (Ordinal: 1066, Address: 0xd1d20)
- RtlGetFrame (Ordinal: 1067, Address: 0xae600)
- RtlGetFullPathName_U (Ordinal: 1068, Address: 0x6d320)
- RtlGetFullPathName_UEx (Ordinal: 1069, Address: 0x52870)
- RtlGetFullPathName_UstrEx (Ordinal: 1070, Address: 0x49980)
- RtlGetGroupSecurityDescriptor (Ordinal: 1071, Address: 0x6d630)
- RtlGetIntegerAtom (Ordinal: 1072, Address: 0x60a10)
- RtlGetInterruptTimePrecise (Ordinal: 1073, Address: 0xc4b70)
- RtlGetLastNtStatus (Ordinal: 1074, Address: 0x6d300)
- RtlGetLastWin32Error (Ordinal: 1075, Address: 0xe3410)
- RtlGetLengthWithoutLastFullDosOrNtPathElement (Ordinal: 1076, Address: 0x64730)
- RtlGetLengthWithoutTrailingPathSeperators (Ordinal: 1077, Address: 0xad400)
- RtlGetLocaleFileMappingAddress (Ordinal: 1078, Address: 0x6ab10)
- RtlGetLongestNtPathLength (Ordinal: 1079, Address: 0x6dde0)
- RtlGetMultiTimePrecise (Ordinal: 1080, Address: 0xc4c80)
- RtlGetNativeSystemInformation (Ordinal: 1081, Address: 0x75030)
- RtlGetNextEntryHashTable (Ordinal: 1082, Address: 0xdb4b0)
- RtlGetNtGlobalFlags (Ordinal: 1083, Address: 0x87a90)
- RtlGetNtProductType (Ordinal: 1084, Address: 0x30720)
- RtlGetNtSystemRoot (Ordinal: 1085, Address: 0x403b0)
- RtlGetNtVersionNumbers (Ordinal: 1086, Address: 0xb3c60)
- RtlGetOwnerSecurityDescriptor (Ordinal: 1087, Address: 0x6b2e0)
- RtlGetParentLocaleName (Ordinal: 1088, Address: 0x54720)
- RtlGetPersistedStateLocation (Ordinal: 1089, Address: 0x66410)
- RtlGetProcessHeaps (Ordinal: 1090, Address: 0xd6ca0)
- RtlGetProcessPreferredUILanguages (Ordinal: 1091, Address: 0xd2670)
- RtlGetProductInfo (Ordinal: 1092, Address: 0x6da80)
- RtlGetReturnAddressHijackTarget (Ordinal: 1093, Address: 0x30780)
- RtlGetSaclSecurityDescriptor (Ordinal: 1094, Address: 0x6c8b0)
- RtlGetSearchPath (Ordinal: 1095, Address: 0x2b6c0)
- RtlGetSecurityDescriptorRMControl (Ordinal: 1096, Address: 0xc66c0)
- RtlGetSessionProperties (Ordinal: 1097, Address: 0xc66f0)
- RtlGetSetBootStatusData (Ordinal: 1098, Address: 0xd0db0)
- RtlGetSuiteMask (Ordinal: 1099, Address: 0x30760)
- RtlGetSystemBootStatus (Ordinal: 1100, Address: 0xd0eb0)
- RtlGetSystemBootStatusEx (Ordinal: 1101, Address: 0xd0ef0)
- RtlGetSystemPreferredUILanguages (Ordinal: 1102, Address: 0xd2740)
- RtlGetSystemTimeAndBias (Ordinal: 1103, Address: 0x87890)
- RtlGetSystemTimePrecise (Ordinal: 1104, Address: 0x5c090)
- RtlGetThreadErrorMode (Ordinal: 1105, Address: 0xae5a0)
- RtlGetThreadLangIdByIndex (Ordinal: 1106, Address: 0xd2bb0)
- RtlGetThreadPreferredUILanguages (Ordinal: 1107, Address: 0x53300)
- RtlGetThreadWorkOnBehalfTicket (Ordinal: 1108, Address: 0x27490)
- RtlGetTokenNamedObjectPath (Ordinal: 1109, Address: 0xc6780)
- RtlGetUILanguageInfo (Ordinal: 1110, Address: 0xd2c80)
- RtlGetUnloadEventTrace (Ordinal: 1111, Address: 0xaf610)
- RtlGetUnloadEventTraceEx (Ordinal: 1112, Address: 0xaf620)
- RtlGetUserInfoHeap (Ordinal: 1113, Address: 0x64010)
- RtlGetUserPreferredUILanguages (Ordinal: 1114, Address: 0x2a7e0)
- RtlGetVersion (Ordinal: 1115, Address: 0x2ffe0)
- RtlGuardCheckLongJumpTarget (Ordinal: 1116, Address: 0xe3d20)
- RtlHashUnicodeString (Ordinal: 1117, Address: 0x27a50)
- RtlHeapTrkInitialize (Ordinal: 1118, Address: 0xe44d0)
- RtlIdentifierAuthoritySid (Ordinal: 1119, Address: 0x6ddc0)
- RtlIdnToAscii (Ordinal: 1120, Address: 0x66130)
- RtlIdnToNameprepUnicode (Ordinal: 1121, Address: 0xe5620)
- RtlIdnToUnicode (Ordinal: 1122, Address: 0xe5650)
- RtlImageDirectoryEntryToData (Ordinal: 1123, Address: 0x3dfa0)
- RtlImageNtHeader (Ordinal: 1124, Address: 0x3baa0)
- RtlImageNtHeaderEx (Ordinal: 1125, Address: 0x3e700)
- RtlImageRvaToSection (Ordinal: 1126, Address: 0xcd600)
- RtlImageRvaToVa (Ordinal: 1127, Address: 0xcd650)
- RtlImpersonateSelf (Ordinal: 1128, Address: 0x6c7b0)
- RtlImpersonateSelfEx (Ordinal: 1129, Address: 0x6c7d0)
- RtlIncrementCorrelationVector (Ordinal: 1130, Address: 0xe25e0)
- RtlInitAnsiString (Ordinal: 1131, Address: 0x75860)
- RtlInitAnsiStringEx (Ordinal: 1132, Address: 0x604a0)
- RtlInitBarrier (Ordinal: 1133, Address: 0xd0630)
- RtlInitCodePageTable (Ordinal: 1134, Address: 0xc42c0)
- RtlInitEnumerationHashTable (Ordinal: 1135, Address: 0xdb500)
- RtlInitMemoryStream (Ordinal: 1136, Address: 0xb4f00)
- RtlInitNlsTables (Ordinal: 1137, Address: 0xc43c0)
- RtlInitOutOfProcessMemoryStream (Ordinal: 1138, Address: 0xb4f00)
- RtlInitString (Ordinal: 1139, Address: 0x75820)
- RtlInitStringEx (Ordinal: 1140, Address: 0xce510)
- RtlInitStrongEnumerationHashTable (Ordinal: 1141, Address: 0xdb560)
- RtlInitUTF8String (Ordinal: 1142, Address: 0xce520)
- RtlInitUTF8StringEx (Ordinal: 1143, Address: 0xce510)
- RtlInitUnicodeString (Ordinal: 1144, Address: 0x758a0)
- RtlInitUnicodeStringEx (Ordinal: 1145, Address: 0x52230)
- RtlInitWeakEnumerationHashTable (Ordinal: 1146, Address: 0xdb5a0)
- RtlInitializeAtomPackage (Ordinal: 1147, Address: 0xb4ed0)
- RtlInitializeBitMap (Ordinal: 1148, Address: 0x6dd90)
- RtlInitializeConditionVariable (Ordinal: 1149, Address: 0x65560)
- RtlInitializeContext (Ordinal: 1150, Address: 0xe6690)
- RtlInitializeCorrelationVector (Ordinal: 1151, Address: 0xe26a0)
- RtlInitializeCriticalSection (Ordinal: 1152, Address: 0x5c860)
- RtlInitializeCriticalSectionAndSpinCount (Ordinal: 1153, Address: 0x62120)
- RtlInitializeCriticalSectionEx (Ordinal: 1154, Address: 0x60160)
- RtlInitializeExceptionChain (Ordinal: 1155, Address: 0x682c0)
- RtlInitializeExtendedContext2 (Ordinal: 1156, Address: 0xdbbe0)
- RtlInitializeExtendedContext (Ordinal: 1157, Address: 0xdbd60)
- RtlInitializeGenericTable (Ordinal: 1158, Address: 0x6bec0)
- RtlInitializeGenericTableAvl (Ordinal: 1159, Address: 0x6de30)
- RtlInitializeHandleTable (Ordinal: 1160, Address: 0x6bc70)
- RtlInitializeNtUserPfn (Ordinal: 1161, Address: 0x750d0)
- RtlInitializeRXact (Ordinal: 1162, Address: 0xc5ad0)
- RtlInitializeResource (Ordinal: 1163, Address: 0x60040)
- RtlInitializeSListHead (Ordinal: 1164, Address: 0x68df0)
- RtlInitializeSRWLock (Ordinal: 1165, Address: 0x65560)
- RtlInitializeSid (Ordinal: 1166, Address: 0x58840)
- RtlInitializeSidEx (Ordinal: 1167, Address: 0x58db0)
- RtlInsertElementGenericTable (Ordinal: 1168, Address: 0x27e40)
- RtlInsertElementGenericTableAvl (Ordinal: 1169, Address: 0x26fc0)
- RtlInsertElementGenericTableFull (Ordinal: 1170, Address: 0x27e80)
- RtlInsertElementGenericTableFullAvl (Ordinal: 1171, Address: 0x27000)
- RtlInsertEntryHashTable (Ordinal: 1172, Address: 0xdb5b0)
- RtlInt64ToUnicodeString (Ordinal: 1173, Address: 0xd0850)
- RtlIntegerToChar (Ordinal: 1174, Address: 0x53060)
- RtlIntegerToUnicodeString (Ordinal: 1175, Address: 0x52ff0)
- RtlInterlockedClearBitRun (Ordinal: 1176, Address: 0xcf7d0)
- RtlInterlockedCompareExchange64 (Ordinal: 1177, Address: 0x89080)
- RtlInterlockedFlushSList (Ordinal: 1178, Address: 0x65600)
- RtlInterlockedPopEntrySList (Ordinal: 1179, Address: 0x42310)
- RtlInterlockedPushEntrySList (Ordinal: 1180, Address: 0x42360)
- RtlInterlockedPushListSListEx (Ordinal: 1181, Address: 0xe6ae0)
- RtlInterlockedSetBitRun (Ordinal: 1182, Address: 0xcf870)
- RtlIoDecodeMemIoResource (Ordinal: 1183, Address: 0xd6770)
- RtlIoEncodeMemIoResource (Ordinal: 1184, Address: 0xd6830)
- RtlIpv4AddressToStringA (Ordinal: 1185, Address: 0x72a60)
- RtlIpv4AddressToStringExA (Ordinal: 1186, Address: 0xe1d50)
- RtlIpv4AddressToStringExW (Ordinal: 1187, Address: 0xe1f30)
- RtlIpv4AddressToStringW (Ordinal: 1188, Address: 0xe1fe0)
- RtlIpv4StringToAddressA (Ordinal: 1189, Address: 0x6d240)
- RtlIpv4StringToAddressExA (Ordinal: 1190, Address: 0x6d1f0)
- RtlIpv4StringToAddressExW (Ordinal: 1191, Address: 0x69220)
- RtlIpv4StringToAddressW (Ordinal: 1192, Address: 0x69270)
- RtlIpv6AddressToStringA (Ordinal: 1193, Address: 0x72fe0)
- RtlIpv6AddressToStringExA (Ordinal: 1194, Address: 0xe1e00)
- RtlIpv6AddressToStringExW (Ordinal: 1195, Address: 0xe2020)
- RtlIpv6AddressToStringW (Ordinal: 1196, Address: 0xe2130)
- RtlIpv6StringToAddressA (Ordinal: 1197, Address: 0x6cb20)
- RtlIpv6StringToAddressExA (Ordinal: 1198, Address: 0x6cab0)
- RtlIpv6StringToAddressExW (Ordinal: 1199, Address: 0x68810)
- RtlIpv6StringToAddressW (Ordinal: 1200, Address: 0x68880)
- RtlIsActivationContextActive (Ordinal: 1201, Address: 0xbdbd0)
- RtlIsCapabilitySid (Ordinal: 1202, Address: 0x59960)
- RtlIsCloudFilesPlaceholder (Ordinal: 1203, Address: 0x6c920)
- RtlIsCriticalSectionLocked (Ordinal: 1204, Address: 0xca9e0)
- RtlIsCriticalSectionLockedByThread (Ordinal: 1205, Address: 0x526d0)
- RtlIsCurrentProcess (Ordinal: 1206, Address: 0xe6c40)
- RtlIsCurrentThread (Ordinal: 1207, Address: 0xe6c70)
- RtlIsCurrentThreadAttachExempt (Ordinal: 1208, Address: 0x86a20)
- RtlIsDosDeviceName_U (Ordinal: 1209, Address: 0x52100)
- RtlIsElevatedRid (Ordinal: 1210, Address: 0xc67b0)
- RtlIsGenericTableEmpty (Ordinal: 1211, Address: 0xde4d0)
- RtlIsGenericTableEmptyAvl (Ordinal: 1212, Address: 0xde6c0)
- RtlIsMultiSessionSku (Ordinal: 1213, Address: 0x2d8b0)
- RtlIsMultiUsersInSessionSku (Ordinal: 1214, Address: 0x725b0)
- RtlIsNameInExpression (Ordinal: 1215, Address: 0xe1680)
- RtlIsNameInUnUpcasedExpression (Ordinal: 1216, Address: 0xe1710)
- RtlIsNameLegalDOS8Dot3 (Ordinal: 1217, Address: 0xe30d0)
- RtlIsNonEmptyDirectoryReparsePointAllowed (Ordinal: 1218, Address: 0xe6ca0)
- RtlIsNormalizedString (Ordinal: 1219, Address: 0xe88a0)
- RtlIsPackageSid (Ordinal: 1220, Address: 0x2b030)
- RtlIsParentOfChildAppContainer (Ordinal: 1221, Address: 0xc6800)
- RtlIsPartialPlaceholder (Ordinal: 1222, Address: 0x6b330)
- RtlIsPartialPlaceholderFileHandle (Ordinal: 1223, Address: 0xe6b00)
- RtlIsPartialPlaceholderFileInfo (Ordinal: 1224, Address: 0xe6b50)
- RtlIsProcessorFeaturePresent (Ordinal: 1225, Address: 0x6ae00)
- RtlIsStateSeparationEnabled (Ordinal: 1226, Address: 0x66900)
- RtlIsTextUnicode (Ordinal: 1227, Address: 0x5cb50)
- RtlIsThreadWithinLoaderCallout (Ordinal: 1228, Address: 0x6d900)
- RtlIsUntrustedObject (Ordinal: 1229, Address: 0xc6870)
- RtlIsValidHandle (Ordinal: 1230, Address: 0x60b30)
- RtlIsValidIndexHandle (Ordinal: 1231, Address: 0x60af0)
- RtlIsValidLocaleName (Ordinal: 1232, Address: 0xe3450)
- RtlIsValidProcessTrustLabelSid (Ordinal: 1233, Address: 0xc69a0)
- RtlIsZeroMemory (Ordinal: 1234, Address: 0xe6cd0)
- RtlKnownExceptionFilter (Ordinal: 1235, Address: 0xe8a10)
- RtlLCIDToCultureName (Ordinal: 1236, Address: 0x55490)
- RtlLargeIntegerAdd (Ordinal: 1237, Address: 0x88dc0)
- RtlLargeIntegerArithmeticShift (Ordinal: 1238, Address: 0x88fd0)
- RtlLargeIntegerDivide (Ordinal: 1239, Address: 0xe8ed0)
- RtlLargeIntegerNegate (Ordinal: 1240, Address: 0x89000)
- RtlLargeIntegerShiftLeft (Ordinal: 1241, Address: 0x88f70)
- RtlLargeIntegerShiftRight (Ordinal: 1242, Address: 0x88fa0)
- RtlLargeIntegerSubtract (Ordinal: 1243, Address: 0x89020)
- RtlLargeIntegerToChar (Ordinal: 1244, Address: 0xd08d0)
- RtlLcidToLocaleName (Ordinal: 1245, Address: 0x55f90)
- RtlLeaveCriticalSection (Ordinal: 1246, Address: 0x3e8c0)
- RtlLengthRequiredSid (Ordinal: 1247, Address: 0x6c9c0)
- RtlLengthSecurityDescriptor (Ordinal: 1248, Address: 0x68f30)
- RtlLengthSid (Ordinal: 1249, Address: 0x650d0)
- RtlLengthSidAsUnicodeString (Ordinal: 1250, Address: 0xc6a10)
- RtlLoadString (Ordinal: 1251, Address: 0x39e80)
- RtlLocalTimeToSystemTime (Ordinal: 1252, Address: 0xc4fc0)
- RtlLocaleNameToLcid (Ordinal: 1253, Address: 0x55de0)
- RtlLocateExtendedFeature2 (Ordinal: 1254, Address: 0xdbdb0)
- RtlLocateExtendedFeature (Ordinal: 1255, Address: 0xdbf10)
- RtlLocateLegacyContext (Ordinal: 1256, Address: 0xdbf40)
- RtlLockBootStatusData (Ordinal: 1257, Address: 0xd0f10)
- RtlLockCurrentThread (Ordinal: 1258, Address: 0xe8f70)
- RtlLockHeap (Ordinal: 1259, Address: 0x5e060)
- RtlLockMemoryBlockLookaside (Ordinal: 1260, Address: 0xcd8b0)
- RtlLockMemoryStreamRegion (Ordinal: 1261, Address: 0xb4ef0)
- RtlLockMemoryZone (Ordinal: 1262, Address: 0x296b0)
- RtlLockModuleSection (Ordinal: 1263, Address: 0x29780)
- RtlLogStackBackTrace (Ordinal: 1264, Address: 0xe9170)
- RtlLookupAtomInAtomTable (Ordinal: 1265, Address: 0x60840)
- RtlLookupElementGenericTable (Ordinal: 1266, Address: 0x27fc0)
- RtlLookupElementGenericTableAvl (Ordinal: 1267, Address: 0x27100)
- RtlLookupElementGenericTableFull (Ordinal: 1268, Address: 0x27ff0)
- RtlLookupElementGenericTableFullAvl (Ordinal: 1269, Address: 0x27130)
- RtlLookupEntryHashTable (Ordinal: 1270, Address: 0xdb620)
- RtlLookupFirstMatchingElementGenericTableAvl (Ordinal: 1271, Address: 0xde6e0)
- RtlMakeSelfRelativeSD (Ordinal: 1272, Address: 0x67290)
- RtlMapGenericMask (Ordinal: 1273, Address: 0x58930)
- RtlMapSecurityErrorToNtStatus (Ordinal: 1274, Address: 0xc6a60)
- RtlMoveMemory (Ordinal: 1275, Address: 0x88b30)
- RtlMultiAppendUnicodeStringBuffer (Ordinal: 1276, Address: 0x61980)
- RtlMultiByteToUnicodeN (Ordinal: 1277, Address: 0x62420)
- RtlMultiByteToUnicodeSize (Ordinal: 1278, Address: 0x4ec90)
- RtlMultipleAllocateHeap (Ordinal: 1279, Address: 0xd7010)
- RtlMultipleFreeHeap (Ordinal: 1280, Address: 0xd7050)
- RtlNewInstanceSecurityObject (Ordinal: 1281, Address: 0xb6360)
- RtlNewSecurityGrantedAccess (Ordinal: 1282, Address: 0xb6420)
- RtlNewSecurityObject (Ordinal: 1283, Address: 0x2c1f0)
- RtlNewSecurityObjectEx (Ordinal: 1284, Address: 0x59920)
- RtlNewSecurityObjectWithMultipleInheritance (Ordinal: 1285, Address: 0xb6520)
- RtlNormalizeProcessParams (Ordinal: 1286, Address: 0xbfdb0)
- RtlNormalizeSecurityDescriptor (Ordinal: 1287, Address: 0xc6b50)
- RtlNormalizeString (Ordinal: 1288, Address: 0xe8910)
- RtlNotifyFeatureUsage (Ordinal: 1289, Address: 0xe9920)
- RtlNtPathNameToDosPathName (Ordinal: 1290, Address: 0xad460)
- RtlNtStatusToDosError (Ordinal: 1291, Address: 0x5b0f0)
- RtlNtStatusToDosErrorNoTeb (Ordinal: 1292, Address: 0x66840)
- RtlNumberGenericTableElements (Ordinal: 1293, Address: 0x2b4b0)
- RtlNumberGenericTableElementsAvl (Ordinal: 1294, Address: 0xde760)
- RtlNumberOfClearBits (Ordinal: 1295, Address: 0xcf9b0)
- RtlNumberOfClearBitsInRange (Ordinal: 1296, Address: 0xcf9d0)
- RtlNumberOfSetBits (Ordinal: 1297, Address: 0xcfa00)
- RtlNumberOfSetBitsInRange (Ordinal: 1298, Address: 0xcfb50)
- RtlNumberOfSetBitsUlongPtr (Ordinal: 1299, Address: 0x88330)
- RtlOemStringToUnicodeSize (Ordinal: 1300, Address: 0x2ae40)
- RtlOemStringToUnicodeString (Ordinal: 1301, Address: 0x2acd0)
- RtlOemToUnicodeN (Ordinal: 1302, Address: 0x2adb0)
- RtlOpenCurrentUser (Ordinal: 1303, Address: 0x2d820)
- RtlOsDeploymentState (Ordinal: 1304, Address: 0xe9d80)
- RtlOwnerAcesPresent (Ordinal: 1305, Address: 0xc6fb0)
- RtlPcToFileHeader (Ordinal: 1306, Address: 0x3c810)
- RtlPinAtomInAtomTable (Ordinal: 1307, Address: 0xcd430)
- RtlPopFrame (Ordinal: 1308, Address: 0xae620)
- RtlPrefixString (Ordinal: 1309, Address: 0x61040)
- RtlPrefixUnicodeString (Ordinal: 1310, Address: 0x648f0)
- RtlProcessFlsData (Ordinal: 1311, Address: 0xbd6c0)
- RtlProtectHeap (Ordinal: 1312, Address: 0x290f0)
- RtlPublishWnfStateData (Ordinal: 1313, Address: 0x72840)
- RtlPushFrame (Ordinal: 1314, Address: 0xae650)
- RtlQueryActivationContextApplicationSettings (Ordinal: 1315, Address: 0x34410)
- RtlQueryAllFeatureConfigurations (Ordinal: 1316, Address: 0xe9990)
- RtlQueryAtomInAtomTable (Ordinal: 1317, Address: 0x29f70)
- RtlQueryCriticalSectionOwner (Ordinal: 1318, Address: 0xcaa00)
- RtlQueryDepthSList (Ordinal: 1319, Address: 0x67580)
- RtlQueryDynamicTimeZoneInformation (Ordinal: 1320, Address: 0xd1510)
- RtlQueryElevationFlags (Ordinal: 1321, Address: 0x6cc80)
- RtlQueryEnvironmentVariable (Ordinal: 1322, Address: 0x3fa60)
- RtlQueryEnvironmentVariable_U (Ordinal: 1323, Address: 0x5b680)
- RtlQueryFeatureConfiguration (Ordinal: 1324, Address: 0x65a30)
- RtlQueryFeatureConfigurationChangeStamp (Ordinal: 1325, Address: 0xe9a00)
- RtlQueryFeatureUsageNotificationSubscriptions (Ordinal: 1326, Address: 0xe9a30)
- RtlQueryHeapInformation (Ordinal: 1327, Address: 0xd7090)
- RtlQueryImageMitigationPolicy (Ordinal: 1328, Address: 0xbff00)
- RtlQueryInformationAcl (Ordinal: 1329, Address: 0x59ba0)
- RtlQueryInformationActivationContext (Ordinal: 1330, Address: 0x34e60)
- RtlQueryInformationActiveActivationContext (Ordinal: 1331, Address: 0x34020)
- RtlQueryInterfaceMemoryStream (Ordinal: 1332, Address: 0xb4f10)
- RtlQueryModuleInformation (Ordinal: 1333, Address: 0xc2e50)
- RtlQueryPackageClaims (Ordinal: 1334, Address: 0x656d0)
- RtlQueryPackageIdentity (Ordinal: 1335, Address: 0x65640)
- RtlQueryPackageIdentityEx (Ordinal: 1336, Address: 0x65680)
- RtlQueryPerformanceCounter (Ordinal: 1337, Address: 0x5c1a0)
- RtlQueryPerformanceFrequency (Ordinal: 1338, Address: 0x655d0)
- RtlQueryProcessBackTraceInformation (Ordinal: 1339, Address: 0xb6af0)
- RtlQueryProcessDebugInformation (Ordinal: 1340, Address: 0xb6c40)
- RtlQueryProcessHeapInformation (Ordinal: 1341, Address: 0xb7070)
- RtlQueryProcessLockInformation (Ordinal: 1342, Address: 0xb7380)
- RtlQueryProcessPlaceholderCompatibilityMode (Ordinal: 1343, Address: 0xe6bd0)
- RtlQueryProtectedPolicy (Ordinal: 1344, Address: 0x6d890)
- RtlQueryRegistryValueWithFallback (Ordinal: 1345, Address: 0xd1530)
- RtlQueryRegistryValues (Ordinal: 1346, Address: 0xd1630)
- RtlQueryRegistryValuesEx (Ordinal: 1347, Address: 0xd1660)
- RtlQueryResourcePolicy (Ordinal: 1348, Address: 0x2ff40)
- RtlQuerySecurityObject (Ordinal: 1349, Address: 0xb6550)
- RtlQueryTagHeap (Ordinal: 1350, Address: 0xd71d0)
- RtlQueryThreadPlaceholderCompatibilityMode (Ordinal: 1351, Address: 0x6c1b0)
- RtlQueryThreadProfiling (Ordinal: 1352, Address: 0xace00)
- RtlQueryTimeZoneInformation (Ordinal: 1353, Address: 0xd1690)
- RtlQueryTokenHostIdAsUlong64 (Ordinal: 1354, Address: 0xe9e60)
- RtlQueryUnbiasedInterruptTime (Ordinal: 1355, Address: 0x5ca90)
- RtlQueryValidationRunlevel (Ordinal: 1356, Address: 0xe9ee0)
- RtlQueryWnfMetaNotification (Ordinal: 1357, Address: 0xbbf10)
- RtlQueryWnfStateData (Ordinal: 1358, Address: 0x2e930)
- RtlQueryWnfStateDataWithExplicitScope (Ordinal: 1359, Address: 0xbbf60)
- RtlQueueApcWow64Thread (Ordinal: 1360, Address: 0xba210)
- RtlQueueWorkItem (Ordinal: 1361, Address: 0x69340)
- RtlRaiseCustomSystemEventTrigger (Ordinal: 1362, Address: 0xe9f70)
- RtlRaiseException (Ordinal: 1363, Address: 0x89400)
- RtlRaiseStatus (Ordinal: 1364, Address: 0x89440)
- RtlRandom (Ordinal: 1365, Address: 0x2edb0)
- RtlRandomEx (Ordinal: 1366, Address: 0x2edb0)
- RtlRbInsertNodeEx (Ordinal: 1367, Address: 0x4ee70)
- RtlRbRemoveNode (Ordinal: 1368, Address: 0x5a090)
- RtlReAllocateHeap (Ordinal: 1369, Address: 0x428f0)
- RtlReadMemoryStream (Ordinal: 1370, Address: 0xb4f20)
- RtlReadOutOfProcessMemoryStream (Ordinal: 1371, Address: 0xb4f20)
- RtlReadThreadProfilingData (Ordinal: 1372, Address: 0xace20)
- RtlRealPredecessor (Ordinal: 1373, Address: 0xde330)
- RtlRealSuccessor (Ordinal: 1374, Address: 0xde370)
- RtlRegisterFeatureConfigurationChangeNotification (Ordinal: 1375, Address: 0x32570)
- RtlRegisterForWnfMetaNotification (Ordinal: 1376, Address: 0xbc040)
- RtlRegisterSecureMemoryCacheCallback (Ordinal: 1377, Address: 0xde870)
- RtlRegisterThreadWithCsrss (Ordinal: 1378, Address: 0x38280)
- RtlRegisterWait (Ordinal: 1379, Address: 0x32150)
- RtlReleaseActivationContext (Ordinal: 1380, Address: 0x32800)
- RtlReleaseMemoryStream (Ordinal: 1381, Address: 0xb4ed0)
- RtlReleasePath (Ordinal: 1382, Address: 0x5ed80)
- RtlReleasePebLock (Ordinal: 1383, Address: 0x6a7b0)
- RtlReleasePrivilege (Ordinal: 1384, Address: 0xc6fd0)
- RtlReleaseRelativeName (Ordinal: 1385, Address: 0x65d10)
- RtlReleaseResource (Ordinal: 1386, Address: 0x6b0f0)
- RtlReleaseSRWLockExclusive (Ordinal: 1387, Address: 0x426b0)
- RtlReleaseSRWLockShared (Ordinal: 1388, Address: 0x35450)
- RtlRemoteCall (Ordinal: 1389, Address: 0xe6750)
- RtlRemoveEntryHashTable (Ordinal: 1390, Address: 0xdb660)
- RtlRemovePrivileges (Ordinal: 1391, Address: 0xc7060)
- RtlRemoveVectoredContinueHandler (Ordinal: 1392, Address: 0xb84e0)
- RtlRemoveVectoredExceptionHandler (Ordinal: 1393, Address: 0x2b300)
- RtlReplaceSidInSd (Ordinal: 1394, Address: 0xc7190)
- RtlReplaceSystemDirectoryInPath (Ordinal: 1395, Address: 0x66970)
- RtlReportException (Ordinal: 1396, Address: 0xba5c0)
- RtlReportExceptionEx (Ordinal: 1397, Address: 0xba640)
- RtlReportSilentProcessExit (Ordinal: 1398, Address: 0x5dee0)
- RtlReportSqmEscalation (Ordinal: 1399, Address: 0xbac10)
- RtlResetMemoryBlockLookaside (Ordinal: 1400, Address: 0xcd920)
- RtlResetMemoryZone (Ordinal: 1401, Address: 0xcdb90)
- RtlResetNtUserPfn (Ordinal: 1402, Address: 0x751f0)
- RtlResetRtlTranslations (Ordinal: 1403, Address: 0xc4410)
- RtlRestoreBootStatusDefaults (Ordinal: 1404, Address: 0xd0f30)
- RtlRestoreLastWin32Error (Ordinal: 1405, Address: 0x5b080)
- RtlRestoreSystemBootStatusDefaults (Ordinal: 1406, Address: 0xd0ff0)
- RtlRestoreThreadPreferredUILanguages (Ordinal: 1407, Address: 0xd3090)
- RtlRetrieveNtUserPfn (Ordinal: 1408, Address: 0x752a0)
- RtlRevertMemoryStream (Ordinal: 1409, Address: 0xb4f30)
- RtlRunDecodeUnicodeString (Ordinal: 1410, Address: 0xc7480)
- RtlRunEncodeUnicodeString (Ordinal: 1411, Address: 0xc74d0)
- RtlRunOnceBeginInitialize (Ordinal: 1412, Address: 0x324c0)
- RtlRunOnceComplete (Ordinal: 1413, Address: 0x31270)
- RtlRunOnceExecuteOnce (Ordinal: 1414, Address: 0x310a0)
- RtlRunOnceInitialize (Ordinal: 1415, Address: 0x65560)
- RtlSecondsSince1970ToTime (Ordinal: 1416, Address: 0xc5020)
- RtlSecondsSince1980ToTime (Ordinal: 1417, Address: 0xc5060)
- RtlSeekMemoryStream (Ordinal: 1418, Address: 0xb4f40)
- RtlSelfRelativeToAbsoluteSD2 (Ordinal: 1419, Address: 0xc5dc0)
- RtlSelfRelativeToAbsoluteSD (Ordinal: 1420, Address: 0xc5e60)
- RtlSendMsgToSm (Ordinal: 1421, Address: 0xdac80)
- RtlSetAllBits (Ordinal: 1422, Address: 0xcfd40)
- RtlSetAttributesSecurityDescriptor (Ordinal: 1423, Address: 0xc7560)
- RtlSetBit (Ordinal: 1424, Address: 0x87a10)
- RtlSetBits (Ordinal: 1425, Address: 0x62070)
- RtlSetControlSecurityDescriptor (Ordinal: 1426, Address: 0x6dbd0)
- RtlSetCriticalSectionSpinCount (Ordinal: 1427, Address: 0x691e0)
- RtlSetCurrentDirectory_U (Ordinal: 1428, Address: 0x27ad0)
- RtlSetCurrentEnvironment (Ordinal: 1429, Address: 0xade30)
- RtlSetCurrentTransaction (Ordinal: 1430, Address: 0x5cfd0)
- RtlSetDaclSecurityDescriptor (Ordinal: 1431, Address: 0x58b90)
- RtlSetDynamicTimeZoneInformation (Ordinal: 1432, Address: 0xd16b0)
- RtlSetEnvironmentStrings (Ordinal: 1433, Address: 0xaded0)
- RtlSetEnvironmentVar (Ordinal: 1434, Address: 0x5b730)
- RtlSetEnvironmentVariable (Ordinal: 1435, Address: 0x5b6f0)
- RtlSetExtendedFeaturesMask (Ordinal: 1436, Address: 0xdbf80)
- RtlSetFeatureConfigurations (Ordinal: 1437, Address: 0xe9a90)
- RtlSetGroupSecurityDescriptor (Ordinal: 1438, Address: 0x58c00)
- RtlSetHeapInformation (Ordinal: 1439, Address: 0x6d350)
- RtlSetImageMitigationPolicy (Ordinal: 1440, Address: 0xc0a80)
- RtlSetInformationAcl (Ordinal: 1441, Address: 0xcbb50)
- RtlSetIoCompletionCallback (Ordinal: 1442, Address: 0x1057c0)
- RtlSetLastWin32Error (Ordinal: 1443, Address: 0x5b080)
- RtlSetLastWin32ErrorAndNtStatusFromNtStatus (Ordinal: 1444, Address: 0x5b060)
- RtlSetMemoryStreamSize (Ordinal: 1445, Address: 0xb4f10)
- RtlSetOwnerSecurityDescriptor (Ordinal: 1446, Address: 0x58c60)
- RtlSetPortableOperatingSystem (Ordinal: 1447, Address: 0xd1400)
- RtlSetProcessDebugInformation (Ordinal: 1448, Address: 0xb7630)
- RtlSetProcessIsCritical (Ordinal: 1449, Address: 0xe3330)
- RtlSetProcessPlaceholderCompatibilityMode (Ordinal: 1450, Address: 0xe6bf0)
- RtlSetProcessPreferredUILanguages (Ordinal: 1451, Address: 0xd3150)
- RtlSetProtectedPolicy (Ordinal: 1452, Address: 0x6ab80)
- RtlSetProxiedProcessId (Ordinal: 1453, Address: 0x72aa0)
- RtlSetSaclSecurityDescriptor (Ordinal: 1454, Address: 0x687a0)
- RtlSetSearchPathMode (Ordinal: 1455, Address: 0xbce80)
- RtlSetSecurityDescriptorRMControl (Ordinal: 1456, Address: 0xc75a0)
- RtlSetSecurityObject (Ordinal: 1457, Address: 0xb67d0)
- RtlSetSecurityObjectEx (Ordinal: 1458, Address: 0xb6800)
- RtlSetSystemBootStatus (Ordinal: 1459, Address: 0xd1020)
- RtlSetSystemBootStatusEx (Ordinal: 1460, Address: 0xd1060)
- RtlSetThreadErrorMode (Ordinal: 1461, Address: 0x2b640)
- RtlSetThreadIsCritical (Ordinal: 1462, Address: 0xe33a0)
- RtlSetThreadPlaceholderCompatibilityMode (Ordinal: 1463, Address: 0x68ed0)
- RtlSetThreadPoolStartFunc (Ordinal: 1464, Address: 0x6ddb0)
- RtlSetThreadPreferredUILanguages2 (Ordinal: 1465, Address: 0x56c30)
- RtlSetThreadPreferredUILanguages (Ordinal: 1466, Address: 0x56a30)
- RtlSetThreadSubProcessTag (Ordinal: 1467, Address: 0x5f790)
- RtlSetThreadWorkOnBehalfTicket (Ordinal: 1468, Address: 0x372e0)
- RtlSetTimeZoneInformation (Ordinal: 1469, Address: 0xd16d0)
- RtlSetTimer (Ordinal: 1470, Address: 0x105540)
- RtlSetUnhandledExceptionFilter (Ordinal: 1471, Address: 0x6c940)
- RtlSetUserCallbackExceptionFilter (Ordinal: 1472, Address: 0x6ccc0)
- RtlSetUserFlagsHeap (Ordinal: 1473, Address: 0xd74a0)
- RtlSetUserValueHeap (Ordinal: 1474, Address: 0x641c0)
- RtlSidDominates (Ordinal: 1475, Address: 0x599a0)
- RtlSidDominatesForTrust (Ordinal: 1476, Address: 0x59810)
- RtlSidEqualLevel (Ordinal: 1477, Address: 0xc75e0)
- RtlSidHashInitialize (Ordinal: 1478, Address: 0xc7660)
- RtlSidHashLookup (Ordinal: 1479, Address: 0xc76f0)
- RtlSidIsHigherLevel (Ordinal: 1480, Address: 0xc7800)
- RtlSizeHeap (Ordinal: 1481, Address: 0x5bdc0)
- RtlSleepConditionVariableCS (Ordinal: 1482, Address: 0xe6360)
- RtlSleepConditionVariableSRW (Ordinal: 1483, Address: 0x423b0)
- RtlSplay (Ordinal: 1484, Address: 0x68ab0)
- RtlStartRXact (Ordinal: 1485, Address: 0xc5d60)
- RtlStatMemoryStream (Ordinal: 1486, Address: 0xb4f10)
- RtlStringFromGUID (Ordinal: 1487, Address: 0x6d9c0)
- RtlStringFromGUIDEx (Ordinal: 1488, Address: 0x6d9e0)
- RtlStronglyEnumerateEntryHashTable (Ordinal: 1489, Address: 0xdb6c0)
- RtlSubAuthorityCountSid (Ordinal: 1490, Address: 0x6c280)
- RtlSubAuthoritySid (Ordinal: 1491, Address: 0x69630)
- RtlSubscribeForFeatureUsageNotification (Ordinal: 1492, Address: 0xe9b60)
- RtlSubscribeWnfStateChangeNotification (Ordinal: 1493, Address: 0x30790)
- RtlSubtreePredecessor (Ordinal: 1494, Address: 0x68160)
- RtlSubtreeSuccessor (Ordinal: 1495, Address: 0xde3b0)
- RtlSwitchedVVI (Ordinal: 1496, Address: 0x30150)
- RtlSystemTimeToLocalTime (Ordinal: 1497, Address: 0xc50a0)
- RtlTestAndPublishWnfStateData (Ordinal: 1498, Address: 0xbc090)
- RtlTestBit (Ordinal: 1499, Address: 0x87a40)
- RtlTestProtectedAccess (Ordinal: 1500, Address: 0xc2260)
- RtlTimeFieldsToTime (Ordinal: 1501, Address: 0x5d4e0)
- RtlTimeToElapsedTimeFields (Ordinal: 1502, Address: 0xc5100)
- RtlTimeToSecondsSince1970 (Ordinal: 1503, Address: 0xc5170)
- RtlTimeToSecondsSince1980 (Ordinal: 1504, Address: 0xc51c0)
- RtlTimeToTimeFields (Ordinal: 1505, Address: 0x5d240)
- RtlTraceDatabaseAdd (Ordinal: 1506, Address: 0xea4a0)
- RtlTraceDatabaseCreate (Ordinal: 1507, Address: 0xea4f0)
- RtlTraceDatabaseDestroy (Ordinal: 1508, Address: 0xea5f0)
- RtlTraceDatabaseEnumerate (Ordinal: 1509, Address: 0xea650)
- RtlTraceDatabaseFind (Ordinal: 1510, Address: 0xea6f0)
- RtlTraceDatabaseLock (Ordinal: 1511, Address: 0xea740)
- RtlTraceDatabaseUnlock (Ordinal: 1512, Address: 0xea760)
- RtlTraceDatabaseValidate (Ordinal: 1513, Address: 0xea780)
- RtlTryAcquirePebLock (Ordinal: 1514, Address: 0x60f10)
- RtlTryAcquireSRWLockExclusive (Ordinal: 1515, Address: 0x72fc0)
- RtlTryAcquireSRWLockShared (Ordinal: 1516, Address: 0x6b0c0)
- RtlTryConvertSRWLockSharedToExclusiveOrRelease (Ordinal: 1517, Address: 0xca770)
- RtlTryEnterCriticalSection (Ordinal: 1518, Address: 0x60f30)
- RtlUTF8StringToUnicodeString (Ordinal: 1519, Address: 0xea9f0)
- RtlUTF8ToUnicodeN (Ordinal: 1520, Address: 0x5d760)
- RtlUdiv128 (Ordinal: 1521, Address: 0xeaba0)
- RtlUnhandledExceptionFilter2 (Ordinal: 1522, Address: 0xe8a30)
- RtlUnhandledExceptionFilter (Ordinal: 1523, Address: 0x88310)
- RtlUnicodeStringToAnsiSize (Ordinal: 1524, Address: 0x61230)
- RtlUnicodeStringToAnsiString (Ordinal: 1525, Address: 0x61260)
- RtlUnicodeStringToCountedOemString (Ordinal: 1526, Address: 0xcdf60)
- RtlUnicodeStringToInteger (Ordinal: 1527, Address: 0x60d70)
- RtlUnicodeStringToOemSize (Ordinal: 1528, Address: 0x61230)
- RtlUnicodeStringToOemString (Ordinal: 1529, Address: 0x60f80)
- RtlUnicodeStringToUTF8String (Ordinal: 1530, Address: 0xeaac0)
- RtlUnicodeToCustomCPN (Ordinal: 1531, Address: 0xc4560)
- RtlUnicodeToMultiByteN (Ordinal: 1532, Address: 0x61340)
- RtlUnicodeToMultiByteSize (Ordinal: 1533, Address: 0x613b0)
- RtlUnicodeToOemN (Ordinal: 1534, Address: 0x610c0)
- RtlUnicodeToUTF8N (Ordinal: 1535, Address: 0x64e70)
- RtlUniform (Ordinal: 1536, Address: 0xea310)
- RtlUnlockBootStatusData (Ordinal: 1537, Address: 0xd1080)
- RtlUnlockCurrentThread (Ordinal: 1538, Address: 0xe9010)
- RtlUnlockHeap (Ordinal: 1539, Address: 0x5dfc0)
- RtlUnlockMemoryBlockLookaside (Ordinal: 1540, Address: 0xcd970)
- RtlUnlockMemoryStreamRegion (Ordinal: 1541, Address: 0xb4ef0)
- RtlUnlockMemoryZone (Ordinal: 1542, Address: 0x299f0)
- RtlUnlockModuleSection (Ordinal: 1543, Address: 0x29a90)
- RtlUnregisterFeatureConfigurationChangeNotification (Ordinal: 1544, Address: 0x2b580)
- RtlUnsubscribeFromFeatureUsageNotifications (Ordinal: 1545, Address: 0xe9b80)
- RtlUnsubscribeWnfNotificationWaitForCompletion (Ordinal: 1546, Address: 0x5ef80)
- RtlUnsubscribeWnfNotificationWithCompletionCallback (Ordinal: 1547, Address: 0xbc120)
- RtlUnsubscribeWnfStateChangeNotification (Ordinal: 1548, Address: 0x5ef60)
- RtlUnwind (Ordinal: 1549, Address: 0x69690)
- RtlUpcaseUnicodeChar (Ordinal: 1550, Address: 0x403d0)
- RtlUpcaseUnicodeString (Ordinal: 1551, Address: 0x53150)
- RtlUpcaseUnicodeStringToAnsiString (Ordinal: 1552, Address: 0xce070)
- RtlUpcaseUnicodeStringToCountedOemString (Ordinal: 1553, Address: 0xce160)
- RtlUpcaseUnicodeStringToOemString (Ordinal: 1554, Address: 0xce270)
- RtlUpcaseUnicodeToCustomCPN (Ordinal: 1555, Address: 0xc4670)
- RtlUpcaseUnicodeToMultiByteN (Ordinal: 1556, Address: 0x61160)
- RtlUpcaseUnicodeToOemN (Ordinal: 1557, Address: 0xc47a0)
- RtlUpdateClonedCriticalSection (Ordinal: 1558, Address: 0x879a0)
- RtlUpdateClonedSRWLock (Ordinal: 1559, Address: 0xca7f0)
- RtlUpdateTimer (Ordinal: 1560, Address: 0x105550)
- RtlUpperChar (Ordinal: 1561, Address: 0x61140)
- RtlUpperString (Ordinal: 1562, Address: 0xce530)
- RtlUserFiberStart (Ordinal: 1563, Address: 0x72f90)
- RtlUserThreadStart (Ordinal: 1564, Address: 0x757c0)
- RtlValidAcl (Ordinal: 1565, Address: 0x53cc0)
- RtlValidProcessProtection (Ordinal: 1566, Address: 0xc22b0)
- RtlValidRelativeSecurityDescriptor (Ordinal: 1567, Address: 0x6bf40)
- RtlValidSecurityDescriptor (Ordinal: 1568, Address: 0x689d0)
- RtlValidSid (Ordinal: 1569, Address: 0x54270)
- RtlValidateCorrelationVector (Ordinal: 1570, Address: 0xe2710)
- RtlValidateHeap (Ordinal: 1571, Address: 0x27500)
- RtlValidateProcessHeaps (Ordinal: 1572, Address: 0xd7830)
- RtlValidateUnicodeString (Ordinal: 1573, Address: 0xce380)
- RtlVerifyVersionInfo (Ordinal: 1574, Address: 0xe4150)
- RtlWaitForWnfMetaNotification (Ordinal: 1575, Address: 0xbc170)
- RtlWaitOnAddress (Ordinal: 1576, Address: 0xeac30)
- RtlWakeAddressAll (Ordinal: 1577, Address: 0x5f880)
- RtlWakeAddressAllNoFence (Ordinal: 1578, Address: 0xeac60)
- RtlWakeAddressSingle (Ordinal: 1579, Address: 0xeac80)
- RtlWakeAddressSingleNoFence (Ordinal: 1580, Address: 0xeacb0)
- RtlWakeAllConditionVariable (Ordinal: 1581, Address: 0x6acc0)
- RtlWakeConditionVariable (Ordinal: 1582, Address: 0x723e0)
- RtlWalkFrameChain (Ordinal: 1583, Address: 0x5c5d0)
- RtlWalkHeap (Ordinal: 1584, Address: 0xd7910)
- RtlWeaklyEnumerateEntryHashTable (Ordinal: 1585, Address: 0xdb720)
- RtlWerpReportException (Ordinal: 1586, Address: 0xbac20)
- RtlWnfCompareChangeStamp (Ordinal: 1587, Address: 0xbc320)
- RtlWnfDllUnloadCallback (Ordinal: 1588, Address: 0x2c270)
- RtlWow64CallFunction64 (Ordinal: 1589, Address: 0xba220)
- RtlWow64EnableFsRedirection (Ordinal: 1590, Address: 0xba230)
- RtlWow64EnableFsRedirectionEx (Ordinal: 1591, Address: 0x4c790)
- RtlWow64GetCurrentMachine (Ordinal: 1592, Address: 0xba2e0)
- RtlWow64GetEquivalentMachineCHPE (Ordinal: 1593, Address: 0xeacd0)
- RtlWow64GetProcessMachines (Ordinal: 1594, Address: 0x5c2f0)
- RtlWow64GetSharedInfoProcess (Ordinal: 1595, Address: 0xba2f0)
- RtlWow64IsWowGuestMachineSupported (Ordinal: 1596, Address: 0xba340)
- RtlWow64LogMessageInEventLogger (Ordinal: 1597, Address: 0xb5b70)
- RtlWriteMemoryStream (Ordinal: 1598, Address: 0xb4f20)
- RtlWriteRegistryValue (Ordinal: 1599, Address: 0xd16f0)
- RtlZeroHeap (Ordinal: 1600, Address: 0xdd430)
- RtlZeroMemory (Ordinal: 1601, Address: 0x88b00)
- RtlZombifyActivationContext (Ordinal: 1602, Address: 0xbdb60)
- RtlpApplyLengthFunction (Ordinal: 1603, Address: 0x646b0)
- RtlpCheckDynamicTimeZoneInformation (Ordinal: 1604, Address: 0x6b350)
- RtlpCleanupRegistryKeys (Ordinal: 1605, Address: 0xd3880)
- RtlpConvertAbsoluteToRelativeSecurityAttribute (Ordinal: 1606, Address: 0xcbce0)
- RtlpConvertCultureNamesToLCIDs (Ordinal: 1607, Address: 0xd3cb0)
- RtlpConvertLCIDsToCultureNames (Ordinal: 1608, Address: 0xd3ea0)
- RtlpConvertRelativeToAbsoluteSecurityAttribute (Ordinal: 1609, Address: 0xcc0f0)
- RtlpCreateProcessRegistryInfo (Ordinal: 1610, Address: 0x545d0)
- RtlpEnsureBufferSize (Ordinal: 1611, Address: 0x61a50)
- RtlpFreezeTimeBias (Ordinal: 1612, Address: 0x126820)
- RtlpGetDeviceFamilyInfoEnum (Ordinal: 1613, Address: 0x6c1e0)
- RtlpGetLCIDFromLangInfoNode (Ordinal: 1614, Address: 0x2bfd0)
- RtlpGetNameFromLangInfoNode (Ordinal: 1615, Address: 0x2c750)
- RtlpGetSystemDefaultUILanguage (Ordinal: 1616, Address: 0x56310)
- RtlpGetUserOrMachineUILanguage4NLS (Ordinal: 1617, Address: 0xeacf0)
- RtlpInitializeLangRegistryInfo (Ordinal: 1618, Address: 0xd4930)
- RtlpIsQualifiedLanguage (Ordinal: 1619, Address: 0x2a070)
- RtlpLoadMachineUIByPolicy (Ordinal: 1620, Address: 0x272c0)
- RtlpLoadUserUIByPolicy (Ordinal: 1621, Address: 0x2d980)
- RtlpMergeSecurityAttributeInformation (Ordinal: 1622, Address: 0xcc950)
- RtlpMuiFreeLangRegistryInfo (Ordinal: 1623, Address: 0xeb0f0)
- RtlpMuiRegCreateRegistryInfo (Ordinal: 1624, Address: 0x2dcf0)
- RtlpMuiRegFreeRegistryInfo (Ordinal: 1625, Address: 0x2cfa0)
- RtlpMuiRegLoadRegistryInfo (Ordinal: 1626, Address: 0x2cea0)
- RtlpNotOwnerCriticalSection (Ordinal: 1627, Address: 0xcabe0)
- RtlpNtCreateKey (Ordinal: 1628, Address: 0xed4a0)
- RtlpNtEnumerateSubKey (Ordinal: 1629, Address: 0xed4d0)
- RtlpNtMakeTemporaryKey (Ordinal: 1630, Address: 0xed590)
- RtlpNtOpenKey (Ordinal: 1631, Address: 0xed5a0)
- RtlpNtQueryValueKey (Ordinal: 1632, Address: 0xed5d0)
- RtlpNtSetValueKey (Ordinal: 1633, Address: 0xed6a0)
- RtlpQueryDefaultUILanguage (Ordinal: 1634, Address: 0x69fc0)
- RtlpQueryProcessDebugInformationRemote (Ordinal: 1635, Address: 0xb7b50)
- RtlpRefreshCachedUILanguage (Ordinal: 1636, Address: 0xec340)
- RtlpSetInstallLanguage (Ordinal: 1637, Address: 0xd4db0)
- RtlpSetPreferredUILanguages (Ordinal: 1638, Address: 0xd5630)
- RtlpSetUserPreferredUILanguages (Ordinal: 1639, Address: 0xd5630)
- RtlpTimeFieldsToTime (Ordinal: 1640, Address: 0x5d500)
- RtlpTimeToTimeFields (Ordinal: 1641, Address: 0x5d260)
- RtlpUnWaitCriticalSection (Ordinal: 1642, Address: 0xcaf00)
- RtlpVerifyAndCommitUILanguageSettings (Ordinal: 1643, Address: 0xd6370)
- RtlpWaitForCriticalSection (Ordinal: 1644, Address: 0xb4f00)
- RtlxAnsiStringToUnicodeSize (Ordinal: 1645, Address: 0x2ae40)
- RtlxOemStringToUnicodeSize (Ordinal: 1646, Address: 0x2ae40)
- RtlxUnicodeStringToAnsiSize (Ordinal: 1647, Address: 0x61230)
- RtlxUnicodeStringToOemSize (Ordinal: 1648, Address: 0x61230)
- SbExecuteProcedure (Ordinal: 1649, Address: 0x106200)
- SbSelectProcedure (Ordinal: 1650, Address: 0x38440)
- ShipAssert (Ordinal: 1651, Address: 0xbb5d0)
- ShipAssertGetBufferInfo (Ordinal: 1652, Address: 0xbb6b0)
- ShipAssertMsgA (Ordinal: 1653, Address: 0xbb6e0)
- ShipAssertMsgW (Ordinal: 1654, Address: 0xbb6e0)
- TpAllocAlpcCompletion (Ordinal: 1655, Address: 0x2c220)
- TpAllocAlpcCompletionEx (Ordinal: 1656, Address: 0x6a2d0)
- TpAllocCleanupGroup (Ordinal: 1657, Address: 0x6d0c0)
- TpAllocIoCompletion (Ordinal: 1658, Address: 0x676b0)
- TpAllocJobNotification (Ordinal: 1659, Address: 0x1038a0)
- TpAllocPool (Ordinal: 1660, Address: 0x31f60)
- TpAllocTimer (Ordinal: 1661, Address: 0x34710)
- TpAllocWait (Ordinal: 1662, Address: 0x342e0)
- TpAllocWork (Ordinal: 1663, Address: 0x33e50)
- TpAlpcRegisterCompletionList (Ordinal: 1664, Address: 0x103750)
- TpAlpcUnregisterCompletionList (Ordinal: 1665, Address: 0x1037a0)
- TpCallbackDetectedUnrecoverableError (Ordinal: 1666, Address: 0x1048c0)
- TpCallbackIndependent (Ordinal: 1667, Address: 0x35900)
- TpCallbackLeaveCriticalSectionOnCompletion (Ordinal: 1668, Address: 0x1048f0)
- TpCallbackMayRunLong (Ordinal: 1669, Address: 0x69e60)
- TpCallbackReleaseMutexOnCompletion (Ordinal: 1670, Address: 0x104920)
- TpCallbackReleaseSemaphoreOnCompletion (Ordinal: 1671, Address: 0x104960)
- TpCallbackSendAlpcMessageOnCompletion (Ordinal: 1672, Address: 0x27380)
- TpCallbackSendPendingAlpcMessage (Ordinal: 1673, Address: 0x1049a0)
- TpCallbackSetEventOnCompletion (Ordinal: 1674, Address: 0x72f30)
- TpCallbackUnloadDllOnCompletion (Ordinal: 1675, Address: 0x6ddf0)
- TpCancelAsyncIoOperation (Ordinal: 1676, Address: 0x678a0)
- TpCaptureCaller (Ordinal: 1677, Address: 0x674a0)
- TpCheckTerminateWorker (Ordinal: 1678, Address: 0x6bd30)
- TpDbgDumpHeapUsage (Ordinal: 1679, Address: 0x104a50)
- TpDbgSetLogRoutine (Ordinal: 1680, Address: 0xb4f00)
- TpDisablePoolCallbackChecks (Ordinal: 1681, Address: 0x6de90)
- TpDisassociateCallback (Ordinal: 1682, Address: 0x1049e0)
- TpIsTimerSet (Ordinal: 1683, Address: 0x346c0)
- TpPostWork (Ordinal: 1684, Address: 0x41d60)
- TpQueryPoolStackInformation (Ordinal: 1685, Address: 0x103ee0)
- TpReleaseAlpcCompletion (Ordinal: 1686, Address: 0x6a1b0)
- TpReleaseCleanupGroup (Ordinal: 1687, Address: 0x2bf10)
- TpReleaseCleanupGroupMembers (Ordinal: 1688, Address: 0x2bcf0)
- TpReleaseIoCompletion (Ordinal: 1689, Address: 0x67660)
- TpReleaseJobNotification (Ordinal: 1690, Address: 0x103a70)
- TpReleasePool (Ordinal: 1691, Address: 0x2aee0)
- TpReleaseTimer (Ordinal: 1692, Address: 0x33d30)
- TpReleaseWait (Ordinal: 1693, Address: 0x31fa0)
- TpReleaseWork (Ordinal: 1694, Address: 0x6ccf0)
- TpSetDefaultPoolMaxThreads (Ordinal: 1695, Address: 0x103f70)
- TpSetDefaultPoolStackInformation (Ordinal: 1696, Address: 0x104090)
- TpSetPoolMaxThreads (Ordinal: 1697, Address: 0x31e40)
- TpSetPoolMaxThreadsSoftLimit (Ordinal: 1698, Address: 0x6c700)
- TpSetPoolMinThreads (Ordinal: 1699, Address: 0x6d920)
- TpSetPoolStackInformation (Ordinal: 1700, Address: 0x6ded0)
- TpSetPoolThreadBasePriority (Ordinal: 1701, Address: 0x2bb50)
- TpSetPoolThreadCpuSets (Ordinal: 1702, Address: 0x1041a0)
- TpSetPoolWorkerThreadIdleTimeout (Ordinal: 1703, Address: 0x2ec70)
- TpSetTimer (Ordinal: 1704, Address: 0x34700)
- TpSetTimerEx (Ordinal: 1705, Address: 0x347c0)
- TpSetWait (Ordinal: 1706, Address: 0x37c30)
- TpSetWaitEx (Ordinal: 1707, Address: 0x37c50)
- TpSimpleTryPost (Ordinal: 1708, Address: 0x67a70)
- TpStartAsyncIoOperation (Ordinal: 1709, Address: 0x67900)
- TpTimerOutstandingCallbackCount (Ordinal: 1710, Address: 0x28eb0)
- TpTrimPools (Ordinal: 1711, Address: 0x104220)
- TpWaitForAlpcCompletion (Ordinal: 1712, Address: 0x1037e0)
- TpWaitForIoCompletion (Ordinal: 1713, Address: 0x2c070)
- TpWaitForJobNotification (Ordinal: 1714, Address: 0x103ad0)
- TpWaitForTimer (Ordinal: 1715, Address: 0x33dc0)
- TpWaitForWait (Ordinal: 1716, Address: 0x31eb0)
- TpWaitForWork (Ordinal: 1717, Address: 0x2b5e0)
- VerSetConditionMask (Ordinal: 1718, Address: 0x66910)
- WerReportExceptionWorker (Ordinal: 1719, Address: 0xbaed0)
- WerReportSQMEvent (Ordinal: 1720, Address: 0xbbb70)
- WinSqmAddToAverageDWORD (Ordinal: 1721, Address: 0x2c350)
- WinSqmAddToStream (Ordinal: 1722, Address: 0xbbe40)
- WinSqmAddToStreamEx (Ordinal: 1723, Address: 0xbbe50)
- WinSqmCheckEscalationAddToStreamEx (Ordinal: 1724, Address: 0xbbe60)
- WinSqmCheckEscalationSetDWORD64 (Ordinal: 1725, Address: 0xbbe60)
- WinSqmCheckEscalationSetDWORD (Ordinal: 1726, Address: 0xbbe70)
- WinSqmCheckEscalationSetString (Ordinal: 1727, Address: 0xbbe70)
- WinSqmCommonDatapointDelete (Ordinal: 1728, Address: 0xbbe80)
- WinSqmCommonDatapointSetDWORD64 (Ordinal: 1729, Address: 0xbbe90)
- WinSqmCommonDatapointSetDWORD (Ordinal: 1730, Address: 0xbbea0)
- WinSqmCommonDatapointSetStreamEx (Ordinal: 1731, Address: 0xbbeb0)
- WinSqmCommonDatapointSetString (Ordinal: 1732, Address: 0xbbea0)
- WinSqmEndSession (Ordinal: 1733, Address: 0xb4f00)
- WinSqmEventEnabled (Ordinal: 1734, Address: 0x6ddb0)
- WinSqmEventWrite (Ordinal: 1735, Address: 0x6e060)
- WinSqmGetEscalationRuleStatus (Ordinal: 1736, Address: 0x6ddb0)
- WinSqmGetInstrumentationProperty (Ordinal: 1737, Address: 0xbbec0)
- WinSqmIncrementDWORD (Ordinal: 1738, Address: 0x2c350)
- WinSqmIsOptedIn (Ordinal: 1739, Address: 0x30780)
- WinSqmIsOptedInEx (Ordinal: 1740, Address: 0xb4ed0)
- WinSqmIsSessionDisabled (Ordinal: 1741, Address: 0xbbe80)
- WinSqmSetDWORD64 (Ordinal: 1742, Address: 0xbbe40)
- WinSqmSetDWORD (Ordinal: 1743, Address: 0x2c350)
- WinSqmSetEscalationInfo (Ordinal: 1744, Address: 0xbbe90)
- WinSqmSetIfMaxDWORD (Ordinal: 1745, Address: 0x2c350)
- WinSqmSetIfMinDWORD (Ordinal: 1746, Address: 0x2c350)
- WinSqmSetString (Ordinal: 1747, Address: 0x2c350)
- WinSqmStartSession (Ordinal: 1748, Address: 0xbbef0)
- WinSqmStartSessionForPartner (Ordinal: 1749, Address: 0xbbf00)
- WinSqmStartSqmOptinListener (Ordinal: 1750, Address: 0x30780)
- Wow64Transition (Ordinal: 1751, Address: 0x129228)
- ZwAcceptConnectPort (Ordinal: 1752, Address: 0x731e0)
- ZwAccessCheck (Ordinal: 1753, Address: 0x731c0)
- ZwAccessCheckAndAuditAlarm (Ordinal: 1754, Address: 0x73470)
- ZwAccessCheckByType (Ordinal: 1755, Address: 0x73810)
- ZwAccessCheckByTypeAndAuditAlarm (Ordinal: 1756, Address: 0x73770)
- ZwAccessCheckByTypeResultList (Ordinal: 1757, Address: 0x73820)
- ZwAccessCheckByTypeResultListAndAuditAlarm (Ordinal: 1758, Address: 0x73830)
- ZwAccessCheckByTypeResultListAndAuditAlarmByHandle (Ordinal: 1759, Address: 0x73840)
- ZwAcquireCrossVmMutant (Ordinal: 1760, Address: 0x73850)
- ZwAcquireProcessActivityReference (Ordinal: 1761, Address: 0x73860)
- ZwAddAtom (Ordinal: 1762, Address: 0x73650)
- ZwAddAtomEx (Ordinal: 1763, Address: 0x73870)
- ZwAddBootEntry (Ordinal: 1764, Address: 0x73880)
- ZwAddDriverEntry (Ordinal: 1765, Address: 0x73890)
- ZwAdjustGroupsToken (Ordinal: 1766, Address: 0x738a0)
- ZwAdjustPrivilegesToken (Ordinal: 1767, Address: 0x735f0)
- ZwAdjustTokenClaimsAndDeviceGroups (Ordinal: 1768, Address: 0x738b0)
- ZwAlertResumeThread (Ordinal: 1769, Address: 0x738c0)
- ZwAlertThread (Ordinal: 1770, Address: 0x738d0)
- ZwAlertThreadByThreadId (Ordinal: 1771, Address: 0x738e0)
- ZwAllocateLocallyUniqueId (Ordinal: 1772, Address: 0x738f0)
- ZwAllocateReserveObject (Ordinal: 1773, Address: 0x73900)
- ZwAllocateUserPhysicalPages (Ordinal: 1774, Address: 0x73910)
- ZwAllocateUserPhysicalPagesEx (Ordinal: 1775, Address: 0x73920)
- ZwAllocateUuids (Ordinal: 1776, Address: 0x73930)
- ZwAllocateVirtualMemory (Ordinal: 1777, Address: 0x73340)
- ZwAllocateVirtualMemoryEx (Ordinal: 1778, Address: 0x73940)
- ZwAlpcAcceptConnectPort (Ordinal: 1779, Address: 0x73950)
- ZwAlpcCancelMessage (Ordinal: 1780, Address: 0x73960)
- ZwAlpcConnectPort (Ordinal: 1781, Address: 0x73970)
- ZwAlpcConnectPortEx (Ordinal: 1782, Address: 0x73980)
- ZwAlpcCreatePort (Ordinal: 1783, Address: 0x73990)
- ZwAlpcCreatePortSection (Ordinal: 1784, Address: 0x739a0)
- ZwAlpcCreateResourceReserve (Ordinal: 1785, Address: 0x739b0)
- ZwAlpcCreateSectionView (Ordinal: 1786, Address: 0x739c0)
- ZwAlpcCreateSecurityContext (Ordinal: 1787, Address: 0x739d0)
- ZwAlpcDeletePortSection (Ordinal: 1788, Address: 0x739e0)
- ZwAlpcDeleteResourceReserve (Ordinal: 1789, Address: 0x739f0)
- ZwAlpcDeleteSectionView (Ordinal: 1790, Address: 0x73a00)
- ZwAlpcDeleteSecurityContext (Ordinal: 1791, Address: 0x73a10)
- ZwAlpcDisconnectPort (Ordinal: 1792, Address: 0x73a20)
- ZwAlpcImpersonateClientContainerOfPort (Ordinal: 1793, Address: 0x73a30)
- ZwAlpcImpersonateClientOfPort (Ordinal: 1794, Address: 0x73a40)
- ZwAlpcOpenSenderProcess (Ordinal: 1795, Address: 0x73a50)
- ZwAlpcOpenSenderThread (Ordinal: 1796, Address: 0x73a60)
- ZwAlpcQueryInformation (Ordinal: 1797, Address: 0x73a70)
- ZwAlpcQueryInformationMessage (Ordinal: 1798, Address: 0x73a80)
- ZwAlpcRevokeSecurityContext (Ordinal: 1799, Address: 0x73a90)
- ZwAlpcSendWaitReceivePort (Ordinal: 1800, Address: 0x73aa0)
- ZwAlpcSetInformation (Ordinal: 1801, Address: 0x73ab0)
- ZwApphelpCacheControl (Ordinal: 1802, Address: 0x736a0)
- ZwAreMappedFilesTheSame (Ordinal: 1803, Address: 0x73ac0)
- ZwAssignProcessToJobObject (Ordinal: 1804, Address: 0x73ad0)
- ZwAssociateWaitCompletionPacket (Ordinal: 1805, Address: 0x73ae0)
- ZwCallEnclave (Ordinal: 1806, Address: 0x73af0)
- ZwCallbackReturn (Ordinal: 1807, Address: 0x73210)
- ZwCancelIoFile (Ordinal: 1808, Address: 0x737b0)
- ZwCancelIoFileEx (Ordinal: 1809, Address: 0x73b00)
- ZwCancelSynchronousIoFile (Ordinal: 1810, Address: 0x73b10)
- ZwCancelTimer2 (Ordinal: 1811, Address: 0x73b20)
- ZwCancelTimer (Ordinal: 1812, Address: 0x737f0)
- ZwCancelWaitCompletionPacket (Ordinal: 1813, Address: 0x73b30)
- ZwClearEvent (Ordinal: 1814, Address: 0x735c0)
- ZwClose (Ordinal: 1815, Address: 0x732b0)
- ZwCloseObjectAuditAlarm (Ordinal: 1816, Address: 0x73590)
- ZwCommitComplete (Ordinal: 1817, Address: 0x73b40)
- ZwCommitEnlistment (Ordinal: 1818, Address: 0x73b50)
- ZwCommitRegistryTransaction (Ordinal: 1819, Address: 0x73b60)
- ZwCommitTransaction (Ordinal: 1820, Address: 0x73b70)
- ZwCompactKeys (Ordinal: 1821, Address: 0x73b80)
- ZwCompareObjects (Ordinal: 1822, Address: 0x73b90)
- ZwCompareSigningLevels (Ordinal: 1823, Address: 0x73ba0)
- ZwCompareTokens (Ordinal: 1824, Address: 0x73bb0)
- ZwCompleteConnectPort (Ordinal: 1825, Address: 0x73bc0)
- ZwCompressKey (Ordinal: 1826, Address: 0x73bd0)
- ZwConnectPort (Ordinal: 1827, Address: 0x73be0)
- ZwContinue (Ordinal: 1828, Address: 0x73610)
- ZwContinueEx (Ordinal: 1829, Address: 0x73bf0)
- ZwConvertBetweenAuxiliaryCounterAndPerformanceCounter (Ordinal: 1830, Address: 0x73c00)
- ZwCopyFileChunk (Ordinal: 1831, Address: 0x73c10)
- ZwCreateCrossVmEvent (Ordinal: 1832, Address: 0x73c20)
- ZwCreateCrossVmMutant (Ordinal: 1833, Address: 0x73c30)
- ZwCreateDebugObject (Ordinal: 1834, Address: 0x73c40)
- ZwCreateDirectoryObject (Ordinal: 1835, Address: 0x73c50)
- ZwCreateDirectoryObjectEx (Ordinal: 1836, Address: 0x73c60)
- ZwCreateEnclave (Ordinal: 1837, Address: 0x73c70)
- ZwCreateEnlistment (Ordinal: 1838, Address: 0x73c80)
- ZwCreateEvent (Ordinal: 1839, Address: 0x73660)
- ZwCreateEventPair (Ordinal: 1840, Address: 0x73c90)
- ZwCreateFile (Ordinal: 1841, Address: 0x73730)
- ZwCreateIRTimer (Ordinal: 1842, Address: 0x73ca0)
- ZwCreateIoCompletion (Ordinal: 1843, Address: 0x73cb0)
- ZwCreateJobObject (Ordinal: 1844, Address: 0x73cc0)
- ZwCreateJobSet (Ordinal: 1845, Address: 0x73cd0)
- ZwCreateKey (Ordinal: 1846, Address: 0x733b0)
- ZwCreateKeyTransacted (Ordinal: 1847, Address: 0x73ce0)
- ZwCreateKeyedEvent (Ordinal: 1848, Address: 0x73cf0)
- ZwCreateLowBoxToken (Ordinal: 1849, Address: 0x73d00)
- ZwCreateMailslotFile (Ordinal: 1850, Address: 0x73d10)
- ZwCreateMutant (Ordinal: 1851, Address: 0x73d20)
- ZwCreateNamedPipeFile (Ordinal: 1852, Address: 0x73d30)
- ZwCreatePagingFile (Ordinal: 1853, Address: 0x73d40)
- ZwCreatePartition (Ordinal: 1854, Address: 0x73d50)
- ZwCreatePort (Ordinal: 1855, Address: 0x73d60)
- ZwCreatePrivateNamespace (Ordinal: 1856, Address: 0x73d70)
- ZwCreateProcess (Ordinal: 1857, Address: 0x73d80)
- ZwCreateProcessEx (Ordinal: 1858, Address: 0x736b0)
- ZwCreateProfile (Ordinal: 1859, Address: 0x73d90)
- ZwCreateProfileEx (Ordinal: 1860, Address: 0x73da0)
- ZwCreateRegistryTransaction (Ordinal: 1861, Address: 0x73db0)
- ZwCreateResourceManager (Ordinal: 1862, Address: 0x73dc0)
- ZwCreateSection (Ordinal: 1863, Address: 0x73680)
- ZwCreateSectionEx (Ordinal: 1864, Address: 0x73dd0)
- ZwCreateSemaphore (Ordinal: 1865, Address: 0x73de0)
- ZwCreateSymbolicLinkObject (Ordinal: 1866, Address: 0x73df0)
- ZwCreateThread (Ordinal: 1867, Address: 0x736c0)
- ZwCreateThreadEx (Ordinal: 1868, Address: 0x73e00)
- ZwCreateTimer2 (Ordinal: 1869, Address: 0x73e20)
- ZwCreateTimer (Ordinal: 1870, Address: 0x73e10)
- ZwCreateToken (Ordinal: 1871, Address: 0x73e30)
- ZwCreateTokenEx (Ordinal: 1872, Address: 0x73e40)
- ZwCreateTransaction (Ordinal: 1873, Address: 0x73e50)
- ZwCreateTransactionManager (Ordinal: 1874, Address: 0x73e60)
- ZwCreateUserProcess (Ordinal: 1875, Address: 0x73e70)
- ZwCreateWaitCompletionPacket (Ordinal: 1876, Address: 0x73e80)
- ZwCreateWaitablePort (Ordinal: 1877, Address: 0x73e90)
- ZwCreateWnfStateName (Ordinal: 1878, Address: 0x73ea0)
- ZwCreateWorkerFactory (Ordinal: 1879, Address: 0x73eb0)
- ZwDebugActiveProcess (Ordinal: 1880, Address: 0x73ec0)
- ZwDebugContinue (Ordinal: 1881, Address: 0x73ed0)
- ZwDelayExecution (Ordinal: 1882, Address: 0x73520)
- ZwDeleteAtom (Ordinal: 1883, Address: 0x73ee0)
- ZwDeleteBootEntry (Ordinal: 1884, Address: 0x73ef0)
- ZwDeleteDriverEntry (Ordinal: 1885, Address: 0x73f00)
- ZwDeleteFile (Ordinal: 1886, Address: 0x73f10)
- ZwDeleteKey (Ordinal: 1887, Address: 0x73f20)
- ZwDeleteObjectAuditAlarm (Ordinal: 1888, Address: 0x73f30)
- ZwDeletePrivateNamespace (Ordinal: 1889, Address: 0x73f40)
- ZwDeleteValueKey (Ordinal: 1890, Address: 0x73f50)
- ZwDeleteWnfStateData (Ordinal: 1891, Address: 0x73f60)
- ZwDeleteWnfStateName (Ordinal: 1892, Address: 0x73f70)
- ZwDeviceIoControlFile (Ordinal: 1893, Address: 0x73230)
- ZwDirectGraphicsCall (Ordinal: 1894, Address: 0x73f80)
- ZwDisableLastKnownGood (Ordinal: 1895, Address: 0x73f90)
- ZwDisplayString (Ordinal: 1896, Address: 0x73fa0)
- ZwDrawText (Ordinal: 1897, Address: 0x73fb0)
- ZwDuplicateObject (Ordinal: 1898, Address: 0x735a0)
- ZwDuplicateToken (Ordinal: 1899, Address: 0x73600)
- ZwEnableLastKnownGood (Ordinal: 1900, Address: 0x73fc0)
- ZwEnumerateBootEntries (Ordinal: 1901, Address: 0x73fd0)
- ZwEnumerateDriverEntries (Ordinal: 1902, Address: 0x73fe0)
- ZwEnumerateKey (Ordinal: 1903, Address: 0x73500)
- ZwEnumerateSystemEnvironmentValuesEx (Ordinal: 1904, Address: 0x73ff0)
- ZwEnumerateTransactionObject (Ordinal: 1905, Address: 0x74000)
- ZwEnumerateValueKey (Ordinal: 1906, Address: 0x732f0)
- ZwExtendSection (Ordinal: 1907, Address: 0x74010)
- ZwFilterBootOption (Ordinal: 1908, Address: 0x74020)
- ZwFilterToken (Ordinal: 1909, Address: 0x74030)
- ZwFilterTokenEx (Ordinal: 1910, Address: 0x74040)
- ZwFindAtom (Ordinal: 1911, Address: 0x73300)
- ZwFlushBuffersFile (Ordinal: 1912, Address: 0x73690)
- ZwFlushBuffersFileEx (Ordinal: 1913, Address: 0x74050)
- ZwFlushInstallUILanguage (Ordinal: 1914, Address: 0x74060)
- ZwFlushInstructionCache (Ordinal: 1915, Address: 0x74070)
- ZwFlushKey (Ordinal: 1916, Address: 0x74080)
- ZwFlushProcessWriteBuffers (Ordinal: 1917, Address: 0x74090)
- ZwFlushVirtualMemory (Ordinal: 1918, Address: 0x740a0)
- ZwFlushWriteBuffer (Ordinal: 1919, Address: 0x740b0)
- ZwFreeUserPhysicalPages (Ordinal: 1920, Address: 0x740c0)
- ZwFreeVirtualMemory (Ordinal: 1921, Address: 0x733c0)
- ZwFreezeRegistry (Ordinal: 1922, Address: 0x740d0)
- ZwFreezeTransactions (Ordinal: 1923, Address: 0x740e0)
- ZwFsControlFile (Ordinal: 1924, Address: 0x73570)
- ZwGetCachedSigningLevel (Ordinal: 1925, Address: 0x740f0)
- ZwGetCompleteWnfStateSubscription (Ordinal: 1926, Address: 0x74100)
- ZwGetContextThread (Ordinal: 1927, Address: 0x74110)
- ZwGetCurrentProcessorNumber (Ordinal: 1928, Address: 0x74120)
- ZwGetCurrentProcessorNumberEx (Ordinal: 1929, Address: 0x74130)
- ZwGetDevicePowerState (Ordinal: 1930, Address: 0x74140)
- ZwGetMUIRegistryInfo (Ordinal: 1931, Address: 0x74150)
- ZwGetNextProcess (Ordinal: 1932, Address: 0x74160)
- ZwGetNextThread (Ordinal: 1933, Address: 0x74170)
- ZwGetNlsSectionPtr (Ordinal: 1934, Address: 0x74180)
- ZwGetNotificationResourceManager (Ordinal: 1935, Address: 0x74190)
- ZwGetWriteWatch (Ordinal: 1936, Address: 0x741a0)
- ZwImpersonateAnonymousToken (Ordinal: 1937, Address: 0x741b0)
- ZwImpersonateClientOfPort (Ordinal: 1938, Address: 0x733d0)
- ZwImpersonateThread (Ordinal: 1939, Address: 0x741c0)
- ZwInitializeEnclave (Ordinal: 1940, Address: 0x741d0)
- ZwInitializeNlsFiles (Ordinal: 1941, Address: 0x741e0)
- ZwInitializeRegistry (Ordinal: 1942, Address: 0x741f0)
- ZwInitiatePowerAction (Ordinal: 1943, Address: 0x74200)
- ZwIsProcessInJob (Ordinal: 1944, Address: 0x736d0)
- ZwIsSystemResumeAutomatic (Ordinal: 1945, Address: 0x74210)
- ZwIsUILanguageComitted (Ordinal: 1946, Address: 0x74220)
- ZwListenPort (Ordinal: 1947, Address: 0x74230)
- ZwLoadDriver (Ordinal: 1948, Address: 0x74240)
- ZwLoadEnclaveData (Ordinal: 1949, Address: 0x74250)
- ZwLoadKey2 (Ordinal: 1950, Address: 0x74270)
- ZwLoadKey3 (Ordinal: 1951, Address: 0x74f50)
- ZwLoadKey (Ordinal: 1952, Address: 0x74260)
- ZwLoadKeyEx (Ordinal: 1953, Address: 0x74280)
- ZwLockFile (Ordinal: 1954, Address: 0x74290)
- ZwLockProductActivationKeys (Ordinal: 1955, Address: 0x742a0)
- ZwLockRegistryKey (Ordinal: 1956, Address: 0x742b0)
- ZwLockVirtualMemory (Ordinal: 1957, Address: 0x742c0)
- ZwMakePermanentObject (Ordinal: 1958, Address: 0x742d0)
- ZwMakeTemporaryObject (Ordinal: 1959, Address: 0x742e0)
- ZwManageHotPatch (Ordinal: 1960, Address: 0x742f0)
- ZwManagePartition (Ordinal: 1961, Address: 0x74300)
- ZwMapCMFModule (Ordinal: 1962, Address: 0x74310)
- ZwMapUserPhysicalPages (Ordinal: 1963, Address: 0x74320)
- ZwMapUserPhysicalPagesScatter (Ordinal: 1964, Address: 0x731f0)
- ZwMapViewOfSection (Ordinal: 1965, Address: 0x73460)
- ZwMapViewOfSectionEx (Ordinal: 1966, Address: 0x74330)
- ZwModifyBootEntry (Ordinal: 1967, Address: 0x74340)
- ZwModifyDriverEntry (Ordinal: 1968, Address: 0x74350)
- ZwNotifyChangeDirectoryFile (Ordinal: 1969, Address: 0x74360)
- ZwNotifyChangeDirectoryFileEx (Ordinal: 1970, Address: 0x74370)
- ZwNotifyChangeKey (Ordinal: 1971, Address: 0x74380)
- ZwNotifyChangeMultipleKeys (Ordinal: 1972, Address: 0x74390)
- ZwNotifyChangeSession (Ordinal: 1973, Address: 0x743a0)
- ZwOpenDirectoryObject (Ordinal: 1974, Address: 0x73760)
- ZwOpenEnlistment (Ordinal: 1975, Address: 0x743b0)
- ZwOpenEvent (Ordinal: 1976, Address: 0x735e0)
- ZwOpenEventPair (Ordinal: 1977, Address: 0x743c0)
- ZwOpenFile (Ordinal: 1978, Address: 0x73510)
- ZwOpenIoCompletion (Ordinal: 1979, Address: 0x743d0)
- ZwOpenJobObject (Ordinal: 1980, Address: 0x743e0)
- ZwOpenKey (Ordinal: 1981, Address: 0x732e0)
- ZwOpenKeyEx (Ordinal: 1982, Address: 0x743f0)
- ZwOpenKeyTransacted (Ordinal: 1983, Address: 0x74400)
- ZwOpenKeyTransactedEx (Ordinal: 1984, Address: 0x74410)
- ZwOpenKeyedEvent (Ordinal: 1985, Address: 0x74420)
- ZwOpenMutant (Ordinal: 1986, Address: 0x74430)
- ZwOpenObjectAuditAlarm (Ordinal: 1987, Address: 0x74440)
- ZwOpenPartition (Ordinal: 1988, Address: 0x74450)
- ZwOpenPrivateNamespace (Ordinal: 1989, Address: 0x74460)
- ZwOpenProcess (Ordinal: 1990, Address: 0x73440)
- ZwOpenProcessToken (Ordinal: 1991, Address: 0x74470)
- ZwOpenProcessTokenEx (Ordinal: 1992, Address: 0x734e0)
- ZwOpenRegistryTransaction (Ordinal: 1993, Address: 0x74480)
- ZwOpenResourceManager (Ordinal: 1994, Address: 0x74490)
- ZwOpenSection (Ordinal: 1995, Address: 0x73550)
- ZwOpenSemaphore (Ordinal: 1996, Address: 0x744a0)
- ZwOpenSession (Ordinal: 1997, Address: 0x744b0)
- ZwOpenSymbolicLinkObject (Ordinal: 1998, Address: 0x744c0)
- ZwOpenThread (Ordinal: 1999, Address: 0x744d0)
- ZwOpenThreadToken (Ordinal: 2000, Address: 0x73420)
- ZwOpenThreadTokenEx (Ordinal: 2001, Address: 0x734d0)
- ZwOpenTimer (Ordinal: 2002, Address: 0x744e0)
- ZwOpenTransaction (Ordinal: 2003, Address: 0x744f0)
- ZwOpenTransactionManager (Ordinal: 2004, Address: 0x74500)
- ZwPlugPlayControl (Ordinal: 2005, Address: 0x74510)
- ZwPowerInformation (Ordinal: 2006, Address: 0x737d0)
- ZwPrePrepareComplete (Ordinal: 2007, Address: 0x74520)
- ZwPrePrepareEnlistment (Ordinal: 2008, Address: 0x74530)
- ZwPrepareComplete (Ordinal: 2009, Address: 0x74540)
- ZwPrepareEnlistment (Ordinal: 2010, Address: 0x74550)
- ZwPrivilegeCheck (Ordinal: 2011, Address: 0x74560)
- ZwPrivilegeObjectAuditAlarm (Ordinal: 2012, Address: 0x74570)
- ZwPrivilegedServiceAuditAlarm (Ordinal: 2013, Address: 0x74580)
- ZwPropagationComplete (Ordinal: 2014, Address: 0x74590)
- ZwPropagationFailed (Ordinal: 2015, Address: 0x745a0)
- ZwProtectVirtualMemory (Ordinal: 2016, Address: 0x736e0)
- ZwPssCaptureVaSpaceBulk (Ordinal: 2017, Address: 0x745b0)
- ZwPulseEvent (Ordinal: 2018, Address: 0x745c0)
- ZwQueryAttributesFile (Ordinal: 2019, Address: 0x735b0)
- ZwQueryAuxiliaryCounterFrequency (Ordinal: 2020, Address: 0x745d0)
- ZwQueryBootEntryOrder (Ordinal: 2021, Address: 0x745e0)
- ZwQueryBootOptions (Ordinal: 2022, Address: 0x745f0)
- ZwQueryDebugFilterState (Ordinal: 2023, Address: 0x74600)
- ZwQueryDefaultLocale (Ordinal: 2024, Address: 0x73310)
- ZwQueryDefaultUILanguage (Ordinal: 2025, Address: 0x73620)
- ZwQueryDirectoryFile (Ordinal: 2026, Address: 0x73530)
- ZwQueryDirectoryFileEx (Ordinal: 2027, Address: 0x74610)
- ZwQueryDirectoryObject (Ordinal: 2028, Address: 0x74620)
- ZwQueryDriverEntryOrder (Ordinal: 2029, Address: 0x74630)
- ZwQueryEaFile (Ordinal: 2030, Address: 0x74640)
- ZwQueryEvent (Ordinal: 2031, Address: 0x73740)
- ZwQueryFullAttributesFile (Ordinal: 2032, Address: 0x74650)
- ZwQueryInformationAtom (Ordinal: 2033, Address: 0x74660)
- ZwQueryInformationByName (Ordinal: 2034, Address: 0x74670)
- ZwQueryInformationEnlistment (Ordinal: 2035, Address: 0x74680)
- ZwQueryInformationFile (Ordinal: 2036, Address: 0x732d0)
- ZwQueryInformationJobObject (Ordinal: 2037, Address: 0x74690)
- ZwQueryInformationPort (Ordinal: 2038, Address: 0x746a0)
- ZwQueryInformationProcess (Ordinal: 2039, Address: 0x73350)
- ZwQueryInformationResourceManager (Ordinal: 2040, Address: 0x746b0)
- ZwQueryInformationThread (Ordinal: 2041, Address: 0x73430)
- ZwQueryInformationToken (Ordinal: 2042, Address: 0x733f0)
- ZwQueryInformationTransaction (Ordinal: 2043, Address: 0x746c0)
- ZwQueryInformationTransactionManager (Ordinal: 2044, Address: 0x746d0)
- ZwQueryInformationWorkerFactory (Ordinal: 2045, Address: 0x746e0)
- ZwQueryInstallUILanguage (Ordinal: 2046, Address: 0x746f0)
- ZwQueryIntervalProfile (Ordinal: 2047, Address: 0x74700)
- ZwQueryIoCompletion (Ordinal: 2048, Address: 0x74710)
- ZwQueryKey (Ordinal: 2049, Address: 0x73320)
- ZwQueryLicenseValue (Ordinal: 2050, Address: 0x74720)
- ZwQueryMultipleValueKey (Ordinal: 2051, Address: 0x74730)
- ZwQueryMutant (Ordinal: 2052, Address: 0x74740)
- ZwQueryObject (Ordinal: 2053, Address: 0x732c0)
- ZwQueryOpenSubKeys (Ordinal: 2054, Address: 0x74750)
- ZwQueryOpenSubKeysEx (Ordinal: 2055, Address: 0x74760)
- ZwQueryPerformanceCounter (Ordinal: 2056, Address: 0x734f0)
- ZwQueryPortInformationProcess (Ordinal: 2057, Address: 0x74770)
- ZwQueryQuotaInformationFile (Ordinal: 2058, Address: 0x74780)
- ZwQuerySection (Ordinal: 2059, Address: 0x736f0)
- ZwQuerySecurityAttributesToken (Ordinal: 2060, Address: 0x74790)
- ZwQuerySecurityObject (Ordinal: 2061, Address: 0x747a0)
- ZwQuerySecurityPolicy (Ordinal: 2062, Address: 0x747b0)
- ZwQuerySemaphore (Ordinal: 2063, Address: 0x747c0)
- ZwQuerySymbolicLinkObject (Ordinal: 2064, Address: 0x747d0)
- ZwQuerySystemEnvironmentValue (Ordinal: 2065, Address: 0x747e0)
- ZwQuerySystemEnvironmentValueEx (Ordinal: 2066, Address: 0x747f0)
- ZwQuerySystemInformation (Ordinal: 2067, Address: 0x73540)
- ZwQuerySystemInformationEx (Ordinal: 2068, Address: 0x74800)
- ZwQuerySystemTime (Ordinal: 2069, Address: 0x73780)
- ZwQueryTimer (Ordinal: 2070, Address: 0x73560)
- ZwQueryTimerResolution (Ordinal: 2071, Address: 0x74810)
- ZwQueryValueKey (Ordinal: 2072, Address: 0x73330)
- ZwQueryVirtualMemory (Ordinal: 2073, Address: 0x73410)
- ZwQueryVolumeInformationFile (Ordinal: 2074, Address: 0x73670)
- ZwQueryWnfStateData (Ordinal: 2075, Address: 0x74820)
- ZwQueryWnfStateNameInformation (Ordinal: 2076, Address: 0x74830)
- ZwQueueApcThread (Ordinal: 2077, Address: 0x73630)
- ZwQueueApcThreadEx2 (Ordinal: 2078, Address: 0x74850)
- ZwQueueApcThreadEx (Ordinal: 2079, Address: 0x74840)
- ZwRaiseException (Ordinal: 2080, Address: 0x74860)
- ZwRaiseHardError (Ordinal: 2081, Address: 0x74870)
- ZwReadFile (Ordinal: 2082, Address: 0x73220)
- ZwReadFileScatter (Ordinal: 2083, Address: 0x734c0)
- ZwReadOnlyEnlistment (Ordinal: 2084, Address: 0x74880)
- ZwReadRequestData (Ordinal: 2085, Address: 0x73720)
- ZwReadVirtualMemory (Ordinal: 2086, Address: 0x735d0)
- ZwRecoverEnlistment (Ordinal: 2087, Address: 0x74890)
- ZwRecoverResourceManager (Ordinal: 2088, Address: 0x748a0)
- ZwRecoverTransactionManager (Ordinal: 2089, Address: 0x748b0)
- ZwRegisterProtocolAddressInformation (Ordinal: 2090, Address: 0x748c0)
- ZwRegisterThreadTerminatePort (Ordinal: 2091, Address: 0x748d0)
- ZwReleaseKeyedEvent (Ordinal: 2092, Address: 0x748e0)
- ZwReleaseMutant (Ordinal: 2093, Address: 0x733e0)
- ZwReleaseSemaphore (Ordinal: 2094, Address: 0x73260)
- ZwReleaseWorkerFactoryWorker (Ordinal: 2095, Address: 0x748f0)
- ZwRemoveIoCompletion (Ordinal: 2096, Address: 0x73250)
- ZwRemoveIoCompletionEx (Ordinal: 2097, Address: 0x74900)
- ZwRemoveProcessDebug (Ordinal: 2098, Address: 0x74910)
- ZwRenameKey (Ordinal: 2099, Address: 0x74920)
- ZwRenameTransactionManager (Ordinal: 2100, Address: 0x74930)
- ZwReplaceKey (Ordinal: 2101, Address: 0x74940)
- ZwReplacePartitionUnit (Ordinal: 2102, Address: 0x74950)
- ZwReplyPort (Ordinal: 2103, Address: 0x73280)
- ZwReplyWaitReceivePort (Ordinal: 2104, Address: 0x73270)
- ZwReplyWaitReceivePortEx (Ordinal: 2105, Address: 0x73490)
- ZwReplyWaitReplyPort (Ordinal: 2106, Address: 0x74960)
- ZwRequestPort (Ordinal: 2107, Address: 0x74970)
- ZwRequestWaitReplyPort (Ordinal: 2108, Address: 0x73400)
- ZwResetEvent (Ordinal: 2109, Address: 0x74980)
- ZwResetWriteWatch (Ordinal: 2110, Address: 0x74990)
- ZwRestoreKey (Ordinal: 2111, Address: 0x749a0)
- ZwResumeProcess (Ordinal: 2112, Address: 0x749b0)
- ZwResumeThread (Ordinal: 2113, Address: 0x73700)
- ZwRevertContainerImpersonation (Ordinal: 2114, Address: 0x749c0)
- ZwRollbackComplete (Ordinal: 2115, Address: 0x749d0)
- ZwRollbackEnlistment (Ordinal: 2116, Address: 0x749e0)
- ZwRollbackRegistryTransaction (Ordinal: 2117, Address: 0x749f0)
- ZwRollbackTransaction (Ordinal: 2118, Address: 0x74a00)
- ZwRollforwardTransactionManager (Ordinal: 2119, Address: 0x74a10)
- ZwSaveKey (Ordinal: 2120, Address: 0x74a20)
- ZwSaveKeyEx (Ordinal: 2121, Address: 0x74a30)
- ZwSaveMergedKeys (Ordinal: 2122, Address: 0x74a40)
- ZwSecureConnectPort (Ordinal: 2123, Address: 0x74a50)
- ZwSerializeBoot (Ordinal: 2124, Address: 0x74a60)
- ZwSetBootEntryOrder (Ordinal: 2125, Address: 0x74a70)
- ZwSetBootOptions (Ordinal: 2126, Address: 0x74a80)
- ZwSetCachedSigningLevel2 (Ordinal: 2127, Address: 0x74aa0)
- ZwSetCachedSigningLevel (Ordinal: 2128, Address: 0x74a90)
- ZwSetContextThread (Ordinal: 2129, Address: 0x74ab0)
- ZwSetDebugFilterState (Ordinal: 2130, Address: 0x74ac0)
- ZwSetDefaultHardErrorPort (Ordinal: 2131, Address: 0x74ad0)
- ZwSetDefaultLocale (Ordinal: 2132, Address: 0x74ae0)
- ZwSetDefaultUILanguage (Ordinal: 2133, Address: 0x74af0)
- ZwSetDriverEntryOrder (Ordinal: 2134, Address: 0x74b00)
- ZwSetEaFile (Ordinal: 2135, Address: 0x74b10)
- ZwSetEvent (Ordinal: 2136, Address: 0x732a0)
- ZwSetEventBoostPriority (Ordinal: 2137, Address: 0x734b0)
- ZwSetHighEventPair (Ordinal: 2138, Address: 0x74b20)
- ZwSetHighWaitLowEventPair (Ordinal: 2139, Address: 0x74b30)
- ZwSetIRTimer (Ordinal: 2140, Address: 0x74b40)
- ZwSetInformationDebugObject (Ordinal: 2141, Address: 0x74b50)
- ZwSetInformationEnlistment (Ordinal: 2142, Address: 0x74b60)
- ZwSetInformationFile (Ordinal: 2143, Address: 0x73450)
- ZwSetInformationJobObject (Ordinal: 2144, Address: 0x74b70)
- ZwSetInformationKey (Ordinal: 2145, Address: 0x74b80)
- ZwSetInformationObject (Ordinal: 2146, Address: 0x737a0)
- ZwSetInformationProcess (Ordinal: 2147, Address: 0x733a0)
- ZwSetInformationResourceManager (Ordinal: 2148, Address: 0x74b90)
- ZwSetInformationSymbolicLink (Ordinal: 2149, Address: 0x74ba0)
- ZwSetInformationThread (Ordinal: 2150, Address: 0x73290)
- ZwSetInformationToken (Ordinal: 2151, Address: 0x74bb0)
- ZwSetInformationTransaction (Ordinal: 2152, Address: 0x74bc0)
- ZwSetInformationTransactionManager (Ordinal: 2153, Address: 0x74bd0)
- ZwSetInformationVirtualMemory (Ordinal: 2154, Address: 0x74be0)
- ZwSetInformationWorkerFactory (Ordinal: 2155, Address: 0x74bf0)
- ZwSetIntervalProfile (Ordinal: 2156, Address: 0x74c00)
- ZwSetIoCompletion (Ordinal: 2157, Address: 0x74c10)
- ZwSetIoCompletionEx (Ordinal: 2158, Address: 0x74c20)
- ZwSetLdtEntries (Ordinal: 2159, Address: 0x74c30)
- ZwSetLowEventPair (Ordinal: 2160, Address: 0x74c40)
- ZwSetLowWaitHighEventPair (Ordinal: 2161, Address: 0x74c50)
- ZwSetQuotaInformationFile (Ordinal: 2162, Address: 0x74c60)
- ZwSetSecurityObject (Ordinal: 2163, Address: 0x74c70)
- ZwSetSystemEnvironmentValue (Ordinal: 2164, Address: 0x74c80)
- ZwSetSystemEnvironmentValueEx (Ordinal: 2165, Address: 0x74c90)
- ZwSetSystemInformation (Ordinal: 2166, Address: 0x74ca0)
- ZwSetSystemPowerState (Ordinal: 2167, Address: 0x74cb0)
- ZwSetSystemTime (Ordinal: 2168, Address: 0x74cc0)
- ZwSetThreadExecutionState (Ordinal: 2169, Address: 0x74cd0)
- ZwSetTimer2 (Ordinal: 2170, Address: 0x74ce0)
- ZwSetTimer (Ordinal: 2171, Address: 0x73800)
- ZwSetTimerEx (Ordinal: 2172, Address: 0x74cf0)
- ZwSetTimerResolution (Ordinal: 2173, Address: 0x74d00)
- ZwSetUuidSeed (Ordinal: 2174, Address: 0x74d10)
- ZwSetValueKey (Ordinal: 2175, Address: 0x737e0)
- ZwSetVolumeInformationFile (Ordinal: 2176, Address: 0x74d20)
- ZwSetWnfProcessNotificationEvent (Ordinal: 2177, Address: 0x74d30)
- ZwShutdownSystem (Ordinal: 2178, Address: 0x74d40)
- ZwShutdownWorkerFactory (Ordinal: 2179, Address: 0x74d50)
- ZwSignalAndWaitForSingleObject (Ordinal: 2180, Address: 0x74d60)
- ZwSinglePhaseReject (Ordinal: 2181, Address: 0x74d70)
- ZwStartProfile (Ordinal: 2182, Address: 0x74d80)
- ZwStopProfile (Ordinal: 2183, Address: 0x74d90)
- ZwSubscribeWnfStateChange (Ordinal: 2184, Address: 0x74da0)
- ZwSuspendProcess (Ordinal: 2185, Address: 0x74db0)
- ZwSuspendThread (Ordinal: 2186, Address: 0x74dc0)
- ZwSystemDebugControl (Ordinal: 2187, Address: 0x74dd0)
- ZwTerminateEnclave (Ordinal: 2188, Address: 0x74de0)
- ZwTerminateJobObject (Ordinal: 2189, Address: 0x74df0)
- ZwTerminateProcess (Ordinal: 2190, Address: 0x734a0)
- ZwTerminateThread (Ordinal: 2191, Address: 0x73710)
- ZwTestAlert (Ordinal: 2192, Address: 0x74e00)
- ZwThawRegistry (Ordinal: 2193, Address: 0x74e10)
- ZwThawTransactions (Ordinal: 2194, Address: 0x74e20)
- ZwTraceControl (Ordinal: 2195, Address: 0x74e30)
- ZwTraceEvent (Ordinal: 2196, Address: 0x737c0)
- ZwTranslateFilePath (Ordinal: 2197, Address: 0x74e40)
- ZwUmsThreadYield (Ordinal: 2198, Address: 0x74e50)
- ZwUnloadDriver (Ordinal: 2199, Address: 0x74e60)
- ZwUnloadKey2 (Ordinal: 2200, Address: 0x74e80)
- ZwUnloadKey (Ordinal: 2201, Address: 0x74e70)
- ZwUnloadKeyEx (Ordinal: 2202, Address: 0x74e90)
- ZwUnlockFile (Ordinal: 2203, Address: 0x74ea0)
- ZwUnlockVirtualMemory (Ordinal: 2204, Address: 0x74eb0)
- ZwUnmapViewOfSection (Ordinal: 2205, Address: 0x73480)
- ZwUnmapViewOfSectionEx (Ordinal: 2206, Address: 0x74ec0)
- ZwUnsubscribeWnfStateChange (Ordinal: 2207, Address: 0x74ed0)
- ZwUpdateWnfStateData (Ordinal: 2208, Address: 0x74ee0)
- ZwVdmControl (Ordinal: 2209, Address: 0x74ef0)
- ZwWaitForAlertByThreadId (Ordinal: 2210, Address: 0x74f00)
- ZwWaitForDebugEvent (Ordinal: 2211, Address: 0x74f10)
- ZwWaitForKeyedEvent (Ordinal: 2212, Address: 0x74f20)
- ZwWaitForMultipleObjects32 (Ordinal: 2213, Address: 0x73380)
- ZwWaitForMultipleObjects (Ordinal: 2214, Address: 0x73790)
- ZwWaitForSingleObject (Ordinal: 2215, Address: 0x73200)
- ZwWaitForWorkViaWorkerFactory (Ordinal: 2216, Address: 0x74f30)
- ZwWaitHighEventPair (Ordinal: 2217, Address: 0x74f40)
- ZwWaitLowEventPair (Ordinal: 2218, Address: 0x74f60)
- ZwWorkerFactoryWorkerReady (Ordinal: 2219, Address: 0x731d0)
- ZwWow64AllocateVirtualMemory64 (Ordinal: 2220, Address: 0x75050)
- ZwWow64CallFunction64 (Ordinal: 2221, Address: 0x75080)
- ZwWow64CsrAllocateCaptureBuffer (Ordinal: 2222, Address: 0x74fa0)
- ZwWow64CsrAllocateMessagePointer (Ordinal: 2223, Address: 0x74fc0)
- ZwWow64CsrCaptureMessageBuffer (Ordinal: 2224, Address: 0x74fd0)
- ZwWow64CsrCaptureMessageString (Ordinal: 2225, Address: 0x74fe0)
- ZwWow64CsrClientCallServer (Ordinal: 2226, Address: 0x74f90)
- ZwWow64CsrClientConnectToServer (Ordinal: 2227, Address: 0x74f70)
- ZwWow64CsrFreeCaptureBuffer (Ordinal: 2228, Address: 0x74fb0)
- ZwWow64CsrGetProcessId (Ordinal: 2229, Address: 0x74ff0)
- ZwWow64CsrIdentifyAlertableThread (Ordinal: 2230, Address: 0x74f80)
- ZwWow64CsrVerifyRegion (Ordinal: 2231, Address: 0x75000)
- ZwWow64DebuggerCall (Ordinal: 2232, Address: 0x75010)
- ZwWow64GetCurrentProcessorNumberEx (Ordinal: 2233, Address: 0x75020)
- ZwWow64GetNativeSystemInformation (Ordinal: 2234, Address: 0x75030)
- ZwWow64IsProcessorFeaturePresent (Ordinal: 2235, Address: 0x75090)
- ZwWow64QueryInformationProcess64 (Ordinal: 2236, Address: 0x75040)
- ZwWow64ReadVirtualMemory64 (Ordinal: 2237, Address: 0x75060)
- ZwWow64WriteVirtualMemory64 (Ordinal: 2238, Address: 0x75070)
- ZwWriteFile (Ordinal: 2239, Address: 0x73240)
- ZwWriteFileGather (Ordinal: 2240, Address: 0x73390)
- ZwWriteRequestData (Ordinal: 2241, Address: 0x73750)
- ZwWriteVirtualMemory (Ordinal: 2242, Address: 0x73580)
- ZwYieldExecution (Ordinal: 2243, Address: 0x73640)
- _CIcos (Ordinal: 2244, Address: 0x76340)
- _CIlog (Ordinal: 2245, Address: 0x76400)
- _CIpow (Ordinal: 2246, Address: 0x764f0)
- _CIsin (Ordinal: 2247, Address: 0x76720)
- _CIsqrt (Ordinal: 2248, Address: 0x767d0)
- __isascii (Ordinal: 2249, Address: 0x76890)
- __iscsym (Ordinal: 2250, Address: 0x768b0)
- __iscsymf (Ordinal: 2251, Address: 0x768f0)
- __toascii (Ordinal: 2252, Address: 0x76930)
- _alldiv (Ordinal: 2253, Address: 0x76b60)
- _alldvrm (Ordinal: 2254, Address: 0x76c10)
- _allmul (Ordinal: 2255, Address: 0x76cf0)
- _alloca_probe (Ordinal: 2256, Address: 0x76d30)
- _alloca_probe_16 (Ordinal: 2257, Address: 0x76d60)
- _alloca_probe_8 (Ordinal: 2258, Address: 0x76d76)
- _allrem (Ordinal: 2259, Address: 0x76d90)
- _allshl (Ordinal: 2260, Address: 0x76e50)
- _allshr (Ordinal: 2261, Address: 0x76e70)
- _atoi64 (Ordinal: 2262, Address: 0x76ea0)
- _aulldiv (Ordinal: 2263, Address: 0x76f10)
- _aulldvrm (Ordinal: 2264, Address: 0x76f80)
- _aullrem (Ordinal: 2265, Address: 0x77020)
- _aullshr (Ordinal: 2266, Address: 0x770a0)
- _chkstk (Ordinal: 2267, Address: 0x76d30)
- _errno (Ordinal: 2268, Address: 0xbd4e0)
- _except_handler4_common (Ordinal: 2269, Address: 0x77110)
- _fltused (Ordinal: 2270, Address: 0x123820)
- _ftol (Ordinal: 2271, Address: 0x77230)
- _ftol2 (Ordinal: 2272, Address: 0x77270)
- _ftol2_sse (Ordinal: 2273, Address: 0x77260)
- _i64toa (Ordinal: 2274, Address: 0x77370)
- _i64toa_s (Ordinal: 2275, Address: 0x7f8e0)
- _i64tow (Ordinal: 2276, Address: 0x77540)
- _i64tow_s (Ordinal: 2277, Address: 0x7fbd0)
- _itoa (Ordinal: 2278, Address: 0x773b0)
- _itoa_s (Ordinal: 2279, Address: 0x7f920)
- _itow (Ordinal: 2280, Address: 0x77580)
- _itow_s (Ordinal: 2281, Address: 0x7fc10)
- _lfind (Ordinal: 2282, Address: 0x77690)
- _local_unwind4 (Ordinal: 2283, Address: 0x77700)
- _ltoa (Ordinal: 2284, Address: 0x773b0)
- _ltoa_s (Ordinal: 2285, Address: 0x7f920)
- _ltow (Ordinal: 2286, Address: 0x77580)
- _ltow_s (Ordinal: 2287, Address: 0x7fc10)
- _makepath_s (Ordinal: 2288, Address: 0x7fdb0)
- _memccpy (Ordinal: 2289, Address: 0x77870)
- _memicmp (Ordinal: 2290, Address: 0x778d0)
- _snprintf (Ordinal: 2291, Address: 0x778e0)
- _snprintf_s (Ordinal: 2292, Address: 0x7feb0)
- _snscanf_s (Ordinal: 2293, Address: 0x7ff70)
- _snwprintf (Ordinal: 2294, Address: 0x77970)
- _snwprintf_s (Ordinal: 2295, Address: 0x7ffb0)
- _snwscanf_s (Ordinal: 2296, Address: 0x80070)
- _splitpath (Ordinal: 2297, Address: 0x77a30)
- _splitpath_s (Ordinal: 2298, Address: 0x800b0)
- _strcmpi (Ordinal: 2299, Address: 0x77c60)
- _stricmp (Ordinal: 2300, Address: 0x77c60)
- _strlwr (Ordinal: 2301, Address: 0x77c70)
- _strlwr_s (Ordinal: 2302, Address: 0x77ca0)
- _strnicmp (Ordinal: 2303, Address: 0x77d00)
- _strnset_s (Ordinal: 2304, Address: 0x80290)
- _strset_s (Ordinal: 2305, Address: 0x80310)
- _strupr (Ordinal: 2306, Address: 0x77d10)
- _strupr_s (Ordinal: 2307, Address: 0x77d60)
- _swprintf (Ordinal: 2308, Address: 0x77dc0)
- _ui64toa (Ordinal: 2309, Address: 0x773f0)
- _ui64toa_s (Ordinal: 2310, Address: 0x7f960)
- _ui64tow (Ordinal: 2311, Address: 0x775c0)
- _ui64tow_s (Ordinal: 2312, Address: 0x7fc50)
- _ultoa (Ordinal: 2313, Address: 0x77420)
- _ultoa_s (Ordinal: 2314, Address: 0x7f990)
- _ultow (Ordinal: 2315, Address: 0x775f0)
- _ultow_s (Ordinal: 2316, Address: 0x7fc80)
- _vscprintf (Ordinal: 2317, Address: 0x77e60)
- _vscwprintf (Ordinal: 2318, Address: 0x77f70)
- _vsnprintf (Ordinal: 2319, Address: 0x78060)
- _vsnprintf_s (Ordinal: 2320, Address: 0x7fee0)
- _vsnwprintf (Ordinal: 2321, Address: 0x78110)
- _vsnwprintf_s (Ordinal: 2322, Address: 0x7ffe0)
- _vswprintf (Ordinal: 2323, Address: 0x77fa0)
- _wcsicmp (Ordinal: 2324, Address: 0x781f0)
- _wcslwr (Ordinal: 2325, Address: 0x78250)
- _wcslwr_s (Ordinal: 2326, Address: 0x782b0)
- _wcsnicmp (Ordinal: 2327, Address: 0x78320)
- _wcsnset_s (Ordinal: 2328, Address: 0x78390)
- _wcsset_s (Ordinal: 2329, Address: 0x78420)
- _wcstoi64 (Ordinal: 2330, Address: 0x78480)
- _wcstoui64 (Ordinal: 2331, Address: 0x784b0)
- _wcsupr (Ordinal: 2332, Address: 0x787b0)
- _wcsupr_s (Ordinal: 2333, Address: 0x787f0)
- _wmakepath_s (Ordinal: 2334, Address: 0x80370)
- _wsplitpath_s (Ordinal: 2335, Address: 0x804c0)
- _wtoi (Ordinal: 2336, Address: 0x78860)
- _wtoi64 (Ordinal: 2337, Address: 0x78870)
- _wtol (Ordinal: 2338, Address: 0x788a0)
- abs (Ordinal: 2339, Address: 0x788d0)
- atan (Ordinal: 2340, Address: 0x788e0)
- atan2 (Ordinal: 2341, Address: 0x789a0)
- atoi (Ordinal: 2342, Address: 0x76ed0)
- atol (Ordinal: 2343, Address: 0x76ee0)
- bsearch (Ordinal: 2344, Address: 0x789c0)
- bsearch_s (Ordinal: 2345, Address: 0x78a80)
- ceil (Ordinal: 2346, Address: 0x78b50)
- cos (Ordinal: 2347, Address: 0x76330)
- fabs (Ordinal: 2348, Address: 0x78c50)
- floor (Ordinal: 2349, Address: 0x78d10)
- isalnum (Ordinal: 2350, Address: 0x76950)
- isalpha (Ordinal: 2351, Address: 0x76980)
- iscntrl (Ordinal: 2352, Address: 0x769b0)
- isdigit (Ordinal: 2353, Address: 0x769e0)
- isgraph (Ordinal: 2354, Address: 0x76a10)
- islower (Ordinal: 2355, Address: 0x76a40)
- isprint (Ordinal: 2356, Address: 0x76a70)
- ispunct (Ordinal: 2357, Address: 0x76aa0)
- isspace (Ordinal: 2358, Address: 0x76ad0)
- isupper (Ordinal: 2359, Address: 0x76b00)
- iswalnum (Ordinal: 2360, Address: 0x78e20)
- iswalpha (Ordinal: 2361, Address: 0x78e40)
- iswascii (Ordinal: 2362, Address: 0x78e60)
- iswctype (Ordinal: 2363, Address: 0x78f50)
- iswdigit (Ordinal: 2364, Address: 0x78e80)
- iswgraph (Ordinal: 2365, Address: 0x78ea0)
- iswlower (Ordinal: 2366, Address: 0x78ec0)
- iswprint (Ordinal: 2367, Address: 0x78ee0)
- iswspace (Ordinal: 2368, Address: 0x78f00)
- iswxdigit (Ordinal: 2369, Address: 0x78f20)
- isxdigit (Ordinal: 2370, Address: 0x76b30)
- labs (Ordinal: 2371, Address: 0x788d0)
- log (Ordinal: 2372, Address: 0x763f0)
- mbstowcs (Ordinal: 2373, Address: 0x78f80)
- memchr (Ordinal: 2374, Address: 0x79000)
- memcmp (Ordinal: 2375, Address: 0x790c0)
- memcpy (Ordinal: 2376, Address: 0x79110)
- memcpy_s (Ordinal: 2377, Address: 0x806e0)
- memmove (Ordinal: 2378, Address: 0x79450)
- memmove_s (Ordinal: 2379, Address: 0x80760)
- memset (Ordinal: 2380, Address: 0x79790)
- pow (Ordinal: 2381, Address: 0x764e0)
- qsort (Ordinal: 2382, Address: 0x79800)
- qsort_s (Ordinal: 2383, Address: 0x79ca0)
- sin (Ordinal: 2384, Address: 0x76710)
- sprintf (Ordinal: 2385, Address: 0x7a160)
- sprintf_s (Ordinal: 2386, Address: 0x807c0)
- sqrt (Ordinal: 2387, Address: 0x767e4)
- sscanf (Ordinal: 2388, Address: 0x7a1e0)
- sscanf_s (Ordinal: 2389, Address: 0x80840)
- strcat (Ordinal: 2390, Address: 0x7a290)
- strcat_s (Ordinal: 2391, Address: 0x80890)
- strchr (Ordinal: 2392, Address: 0x7a390)
- strcmp (Ordinal: 2393, Address: 0x7a450)
- strcpy (Ordinal: 2394, Address: 0x7a280)
- strcpy_s (Ordinal: 2395, Address: 0x80910)
- strcspn (Ordinal: 2396, Address: 0x7a4e0)
- strlen (Ordinal: 2397, Address: 0x7a530)
- strncat (Ordinal: 2398, Address: 0x7a5c0)
- strncat_s (Ordinal: 2399, Address: 0x80980)
- strncmp (Ordinal: 2400, Address: 0x7a700)
- strncpy (Ordinal: 2401, Address: 0x7a7b0)
- strncpy_s (Ordinal: 2402, Address: 0x80a70)
- strnlen (Ordinal: 2403, Address: 0x7a8e0)
- strpbrk (Ordinal: 2404, Address: 0x7a900)
- strrchr (Ordinal: 2405, Address: 0x7a940)
- strspn (Ordinal: 2406, Address: 0x7a970)
- strstr (Ordinal: 2407, Address: 0x7a9c0)
- strtok_s (Ordinal: 2408, Address: 0x80b50)
- strtol (Ordinal: 2409, Address: 0x7ac40)
- strtoul (Ordinal: 2410, Address: 0x7ac90)
- swprintf (Ordinal: 2411, Address: 0x77dc0)
- swprintf_s (Ordinal: 2412, Address: 0x80c80)
- swscanf_s (Ordinal: 2413, Address: 0x80d10)
- tan (Ordinal: 2414, Address: 0x7acc0)
- tolower (Ordinal: 2415, Address: 0x7ad90)
- toupper (Ordinal: 2416, Address: 0x7adc0)
- towlower (Ordinal: 2417, Address: 0x7ae20)
- towupper (Ordinal: 2418, Address: 0x7ae50)
- vDbgPrintEx (Ordinal: 2419, Address: 0xbef80)
- vDbgPrintExWithPrefix (Ordinal: 2420, Address: 0xbefb0)
- vsprintf (Ordinal: 2421, Address: 0x77f50)
- vsprintf_s (Ordinal: 2422, Address: 0x807f0)
- vswprintf_s (Ordinal: 2423, Address: 0x80cb0)
- wcscat (Ordinal: 2424, Address: 0x7ae70)
- wcscat_s (Ordinal: 2425, Address: 0x80d60)
- wcschr (Ordinal: 2426, Address: 0x7aee0)
- wcscmp (Ordinal: 2427, Address: 0x7af20)
- wcscpy (Ordinal: 2428, Address: 0x7aeb0)
- wcscpy_s (Ordinal: 2429, Address: 0x80df0)
- wcscspn (Ordinal: 2430, Address: 0x7af70)
- wcslen (Ordinal: 2431, Address: 0x7afd0)
- wcsncat (Ordinal: 2432, Address: 0x7aff0)
- wcsncat_s (Ordinal: 2433, Address: 0x80e70)
- wcsncmp (Ordinal: 2434, Address: 0x7b040)
- wcsncpy (Ordinal: 2435, Address: 0x7b080)
- wcsncpy_s (Ordinal: 2436, Address: 0x80f70)
- wcsnlen (Ordinal: 2437, Address: 0x7b0d0)
- wcspbrk (Ordinal: 2438, Address: 0x7b100)
- wcsrchr (Ordinal: 2439, Address: 0x7b160)
- wcsspn (Ordinal: 2440, Address: 0x7b1a0)
- wcsstr (Ordinal: 2441, Address: 0x7b210)
- wcstok_s (Ordinal: 2442, Address: 0x81050)
- wcstol (Ordinal: 2443, Address: 0x7b480)
- wcstombs (Ordinal: 2444, Address: 0x7b500)
- wcstoul (Ordinal: 2445, Address: 0x7b4d0)
Imported DLLs & Functions
No imported DLLs.