Manalyze report for bbab51f86d7e04fd829275163daa4de29fe976f0d758f0003fa5ee03380eb715

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
Compilation Date	1975-Apr-21 14:08:36
Detected languages	English - United States
Debug artifacts	kernelbase.pdb
CompanyName	Microsoft Corporation
FileDescription	Windows NT BASE API Client DLL
FileVersion	`10.0.26100.9818 (WinBuild.160101.0800)`
InternalName	Kernelbase.dll
LegalCopyright	Â© Microsoft Corporation. All rights reserved.
OriginalFilename	Kernelbase.dll
ProductName	MicrosoftÂ® WindowsÂ® Operating System
ProductVersion	`10.0.26100.9818`

Plugin Output

Suspicious	PEiD Signature:	`HQR data file`
Suspicious	Strings found in the binary may indicate undesirable behavior:	`May have dropper capabilities: %ALLUSERSPROFILE% CurrentControlSet\Services` `Miscellaneous malware strings: cmd.exe` `Contains domain names: http://schemas.microsoft.com http://schemas.microsoft.com/SMI/2016/WindowsSettings http://schemas.microsoft.com/SMI/2024/WindowsSettings microsoft.com schemas.microsoft.com`
Suspicious	The PE is possibly packed.	`Unusual section name found: fothk`
Malicious	The PE contains functions mostly used by malware.	`Functions which can be used for anti-debugging purposes: NtQuerySystemInformation DbgPrint NtQueryInformationProcess` `Code injection capabilities (process hollowing): NtWriteVirtualMemory NtResumeThread NtSetContextThread` Uses Windows's Native API: NtDeletePrivateNamespace NtOpenPrivateNamespace NtQueryInformationFile NtQuerySecurityObject NtOpenFile NtQueryWnfStateData NtSetInformationFile NtFsControlFile NtQueryVolumeInformationFile NtCreateFile NtWaitForSingleObject NtNotifyChangeDirectoryFileEx NtCopyFileChunk NtQuerySystemInformation NtOpenKey ZwQueryWnfStateData NtQueryEaFile NtFlushBuffersFile NtCreateEvent NtQueryValueKey NtQueryInformationByName NtOpenMutant NtReleaseMutant NtCreateKeyTransacted NtCreateKey NtSetValueKey NtQueryDirectoryFile NtSetInformationProcess NtCreatePrivateNamespace NtUpdateWnfStateData NtCreateIoRing NtSubmitIoRing NtSetInformationIoRing NtQueryIoRingCapabilities NtTerminateProcess NtSetDefaultLocale NtDeleteValueKey NtEnumerateValueKey NtQueryInstallUILanguage NtEnumerateKey NtGetNlsSectionPtr NtDeleteKey NtCreateSection NtMapViewOfSection NtQueryDefaultLocale NtNotifyChangeKey NtQueryInformationToken NtQueryLicenseValue NtOpenSymbolicLinkObject NtQuerySymbolicLinkObject ZwQueryInformationToken ZwQueryValueKey ZwClose ZwOpenKey NtQueryMultipleValueKey NtClose NtQueryInformationProcess NtDuplicateObject NtResetEvent NtQueryEvent NtQueryKey NtLoadKeyEx NtQueryVirtualMemory NtOpenProcessTokenEx NtCreateWnfStateName NtDeleteWnfStateName NtSetSecurityObject NtUnmapViewOfSection NtQuerySecurityAttributesToken NtGetCachedSigningLevel NtCompareSigningLevels ZwCreateKey ZwSetValueKey NtDeviceIoControlFile NtReadFile NtWaitForMultipleObjects NtSetSystemInformation NtYieldExecution NtDuplicateToken NtAllocateLocallyUniqueId NtAccessCheck NtAccessCheckByType NtAccessCheckByTypeResultList NtOpenProcessToken NtOpenThreadToken NtSetInformationToken NtAdjustPrivilegesToken NtAdjustGroupsToken NtPrivilegeCheck NtAccessCheckAndAuditAlarm NtAccessCheckByTypeAndAuditAlarm NtAccessCheckByTypeResultListAndAuditAlarm NtAccessCheckByTypeResultListAndAuditAlarmByHandle NtOpenObjectAuditAlarm NtPrivilegeObjectAuditAlarm NtCloseObjectAuditAlarm NtDeleteObjectAuditAlarm NtPrivilegedServiceAuditAlarm NtSetInformationThread NtImpersonateAnonymousToken NtFilterToken NtSetCachedSigningLevel NtLockVirtualMemory NtUnlockVirtualMemory NtReadVirtualMemory NtProtectVirtualMemory NtWriteVirtualMemory NtAllocateVirtualMemory NtAllocateVirtualMemoryEx NtFreeVirtualMemory NtOpenEvent NtGetWriteWatch NtResetWriteWatch NtSetInformationVirtualMemory NtAllocateUserPhysicalPages NtAllocateUserPhysicalPagesEx NtFreeUserPhysicalPages NtMapUserPhysicalPages NtManagePartition NtQuerySystemInformationEx NtOpenDirectoryObject NtQueryObject NtCreateSymbolicLinkObject NtCreateDirectoryObjectEx NtLoadEnclaveData NtTerminateEnclave NtCreateNamedPipeFile NtWriteFile NtLockFile NtUnlockFile NtCancelIoFile NtCancelIoFileEx NtCancelSynchronousIoFile NtReadFileScatter NtWriteFileGather NtSetEvent NtClearEvent NtPulseEvent NtCreateSemaphore NtOpenSemaphore NtReleaseSemaphore NtCreateMutant NtCreateTimer2 NtCreateTimer NtOpenTimer NtSetTimerEx NtCancelTimer NtSignalAndWaitForSingleObject NtDelayExecution NtOpenProcess NtCompareObjects NtSetInformationObject NtSetSystemTime NtQueryAuxiliaryCounterFrequency NtConvertBetweenAuxiliaryCounterAndPerformanceCounter NtCreateThreadEx NtResumeThread NtTerminateThread NtOpenThread NtQueryInformationThread NtSuspendThread NtGetContextThread NtSetContextThread NtQueueApcThreadEx2 NtCreateLowBoxToken NtCreateSectionEx NtOpenSection NtMapViewOfSectionEx NtFlushVirtualMemory NtUnmapViewOfSectionEx NtCreateIoCompletion NtSetIoCompletion NtRemoveIoCompletion NtRemoveIoCompletionEx NtAssignProcessToJobObject NtRaiseHardError NtRemoveProcessDebug NtCreateUserProcess NtQueryDirectoryObject NtQueryAttributesFile NtQueryFullAttributesFile NtQueryDirectoryFileEx NtNotifyChangeDirectoryFile NtIsProcessInJob ZwQueryWnfStateNameInformation ZwUpdateWnfStateData NtQueryInformationJobObject NtRaiseException NtFlushKey NtNotifyChangeMultipleKeys NtLoadKey NtUnloadKey NtSaveKeyEx NtRestoreKey NtOpenKeyEx NtSetInformationKey NtOpenKeyTransactedEx `Manipulates other processes: NtOpenProcess`
Info	The PE is digitally signed.	`Signer: Microsoft Windows` `Issuer: Microsoft Windows Production PCA 2026 RSA2048-SHA256`
Safe	VirusTotal score: 0/71 (Scanned on 2026-11-06 18:01:10)	`All the AVs think this file is safe.`

Hashes

MD5	`024a9ba1b27adebd1ff1700babea948e` 🔍
SHA1	`3d6999692a5f69f30456149358e02120b497d7a8` 🔍
SHA256	`bbab51f86d7e04fd829275163daa4de29fe976f0d758f0003fa5ee03380eb715` 🔍
SHA3	`e01891d9f50ebe12014552d2400a7e5367d6698419df0354c9a03d9249dd4583` 🔍
SSDeep	`49152:jWp6xxvpYCKvny8AuRH5/GT8LSGWsKKkd1pz82ZtJBt3/Pe2tjliqGULb:jWpCxx8fzKKkd1p` 🔍
Imports Hash	`a390cbc563f7f82b3df24350333c462f` 🔍

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0xf8`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`8`
TimeDateStamp	1975-Apr-21 14:08:36
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_DLL` `IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`14.0`
SizeOfCode	`0x1ac000`
SizeOfInitializedData	`0x25c000`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x0000000000073610 (Section: .text)`
BaseOfCode	`0x1000`
ImageBase	`0x180000000`
SectionAlignment	`0x1000`
FileAlignment	`0x1000`
OperatingSystemVersion	`A.0`
ImageVersion	`A.0`
SubsystemVersion	`A.0`
Win32VersionValue	`0`
SizeOfImage	`0x409000`
SizeOfHeaders	`0x1000`
Checksum	`0x41d2fa`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_GUARD_CF` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT`
SizeofStackReserve	`0x40000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`e6d000752058b0b588465d3470c00478 🔍`
SHA1	`82db6dc995e73035ae5887b3f91c691244afe6f3 🔍`
SHA256	`4f6d9c1a1b2bde046f05311b8b5939e359e9051d12de5530841d7679f30031df 🔍`
SHA3	`c36447666215f71a1f9e0e33a810e28d502a11ae5669a5a91a6d136fef1ac0db 🔍`
VirtualSize	`0x1aa597`
VirtualAddress	`0x1000`
SizeOfRawData	`0x1ab000`
PointerToRawData	`0x1000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.35707`

fothk

MD5	`9534eb2499ba3583cbc514b742ad25f8 🔍`
SHA1	`b8e74373e3b90a2244fbb16fc73832cb01c2191c 🔍`
SHA256	`70f3a3d46e3e219b17242f66c762b31b4992fc578399ca7053bad0da744f24e1 🔍`
SHA3	`33df43f290d87ad8c9cf9166cd60605cf069f0838e155ebabb2ccd5d66fa02e4 🔍`
VirtualSize	`0x1000`
VirtualAddress	`0x1ac000`
SizeOfRawData	`0x1000`
PointerToRawData	`0x1ac000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`0.0164085`

.rdata

MD5	`11608404d02bdbbe7857b49acaacd0d5 🔍`
SHA1	`a265c3dc83cb277cb2eabe741c03bfbce5224ecc 🔍`
SHA256	`9e34f6a7593389d592f44c6ccd30ba5f04e2638c1d82f7c99e6572ede94a5e86 🔍`
SHA3	`4906e7e2f1e74702a7cc36459d03001843d08a58fb4af47b4a9336c44759e89a 🔍`
VirtualSize	`0x1ffb48`
VirtualAddress	`0x1ad000`
SizeOfRawData	`0x200000`
PointerToRawData	`0x1ad000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.09941`

.data

MD5	`ba8395d032bb1c150135bf58811790e3 🔍`
SHA1	`4187bc1bbba6508abaf4656602e062bfbfcd45f8 🔍`
SHA256	`557428bc83996a387dd8828d89557d4c0d0966f0276898214af806fcbc2a44e7 🔍`
SHA3	`0d8889853a362dad4aad5a462498e30c4bb23e311d5fbb6d706b20b1142668aa 🔍`
VirtualSize	`0xafe0`
VirtualAddress	`0x3ad000`
SizeOfRawData	`0x2000`
PointerToRawData	`0x3ad000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`2.35606`

.pdata

MD5	`4d3cab61998802eb4925847328bfcd56 🔍`
SHA1	`57587394519a194af3ada313a4316ea79876efa2 🔍`
SHA256	`39f77151f805bd83109e0a6570a3211af8a69517027234d1a2abbda64cbfcddd 🔍`
SHA3	`18062f559aa43a350534059af5aeab6a8715230ab2bb9b11831be2f4520d1d28 🔍`
VirtualSize	`0x1305c`
VirtualAddress	`0x3b8000`
SizeOfRawData	`0x14000`
PointerToRawData	`0x3af000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.97148`

.didat

MD5	`e90789f3251b4633cc78cf21e9eb2c6d 🔍`
SHA1	`f876dfdf5e7e9e22ae8155d45c9b777cd0455136 🔍`
SHA256	`cee59e11cde9dbceb453e50e7037719ba0abdc1046a49530145e518ea470f86f 🔍`
SHA3	`f3251cc200cee20123c00c95addbab00a171507b128570438a2aee646ed85865 🔍`
VirtualSize	`0x8f8`
VirtualAddress	`0x3cc000`
SizeOfRawData	`0x1000`
PointerToRawData	`0x3c3000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`2.15451`

.rsrc

MD5	`4700c1bdd891924e56a3d82ec232ccbd 🔍`
SHA1	`604534d7d3e19557613cc834d52d40bcab5a799c 🔍`
SHA256	`4e2c9b1190a3eb212b2de0140138f64905f95fdf8fd9fcb7ac71f1badcf54e21 🔍`
SHA3	`69c0eda9a43a47a2a9635361f20d33f232d6102df7b341bd9f043a11c649e703 🔍`
VirtualSize	`0x548`
VirtualAddress	`0x3cd000`
SizeOfRawData	`0x1000`
PointerToRawData	`0x3c4000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`1.37011`

.reloc

MD5	`744230a1890f01aac7d44ab3dc620aea 🔍`
SHA1	`3dcdf8999d2f2c30cdaf280d1e5713269a811b31 🔍`
SHA256	`fd78ae76ce4421a76f865c106debd8972593b2a91860654d394ab8077a44895c 🔍`
SHA3	`cfa99b223d17bc43698331e34bab6d3e7fa9c6b692aadb021523686419854c7c 🔍`
VirtualSize	`0x3a06c`
VirtualAddress	`0x3ce000`
SizeOfRawData	`0x3b000`
PointerToRawData	`0x3c5000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.4341`

Imports

ntdll.dll	`NtDeletePrivateNamespace` `NtOpenPrivateNamespace` `RtlAddSIDToBoundaryDescriptor` `__C_specific_handler` `RtlFreeAnsiString` `RtlAnsiStringToUnicodeString` `RtlInitializeSid` `NlsMbCodePageTag` `RtlSubAuthoritySid` `RtlDosPathNameToRelativeNtPathName_U` `RtlFreeUnicodeString` `RtlInitUnicodeString` `RtlGetOwnerSecurityDescriptor` `RtlReleaseRelativeName` `RtlLengthRequiredSid` `RtlUnicodeStringToAnsiString` `RtlInitAnsiString` `LdrResRelease` `NtQueryInformationFile` `RtlEqualSid` `SbSelectProcedure` `LdrResSearchResource` `NtQuerySecurityObject` `NtOpenFile` `_wcsicmp` `RtlDecodeSystemPointer` `wcslen` `RtlUnicodeToMultiByteN` `strlen` `RtlMultiByteToUnicodeN` `RtlDeleteCriticalSection` `RtlUpcaseUnicodeChar` `RtlEnterCriticalSection` `RtlInitializeCriticalSection` `RtlLeaveCriticalSection` `RtlSubscribeWnfStateChangeNotification` `NtQueryWnfStateData` `RtlUnsubscribeWnfNotificationWaitForCompletion` `RtlIsThreadWithinLoaderCallout` `NtSetInformationFile` `RtlDosPathNameToNtPathName_U` `wcscpy_s` `wcscat_s` `swprintf_s` `NtFsControlFile` `_wcsnicmp` `NtQueryVolumeInformationFile` `NtCreateFile` `RtlSetLastWin32Error` `NtWaitForSingleObject` `NtNotifyChangeDirectoryFileEx` `RtlSetCurrentTransaction` `RtlQueryFeatureConfiguration` `NtCopyFileChunk` `RtlEqualUnicodeString` `NtQuerySystemInformation` `TpSetWait` `RtlReleasePrivilege` `NtOpenKey` `TpReleaseWait` `ZwQueryWnfStateData` `RtlDosPathNameToNtPathName_U_WithStatus` `RtlGetAce` `RtlQueryInformationAcl` `RtlVerifyVersionInfo` `NtQueryEaFile` `RtlAcquirePrivilege` `RtlGetCurrentTransaction` `NtFlushBuffersFile` `RtlGetLastNtStatus` `NtCreateEvent` `RtlGetLastWin32Error` `RtlpMergeSecurityAttributeInformation` `VerSetConditionMask` `RtlNtStatusToDosError` `TpWaitForWait` `wcsrchr` `RtlFindAceByType` `NtQueryValueKey` `RtlNotifyFeatureUsage` `NtQueryInformationByName` `NtOpenMutant` `_vsnwprintf` `RtlIsDosDeviceName_U` `NtReleaseMutant` `RtlIsStateSeparationEnabled` `NtCreateKeyTransacted` `RtlDetermineDosPathNameType_U` `NtCreateKey` `NtSetValueKey` `RtlUnicodeStringToOemString` `RtlGetUserInfoHeap` `RtlIsValidHandle` `RtlAllocateHandle` `RtlFreeHandle` `RtlSizeHeap` `RtlSetUserValueHeap` `RtlUnlockHeap` `RtlLockHeap` `NtQueryDirectoryFile` `RtlGetPersistedStateLocation` `RtlGetExtendedFeaturesMask` `RtlGetEnabledExtendedFeatures` `RtlLocateLegacyContext` `RtlCopyContext` `RtlSetExtendedFeaturesMask` `RtlSetLastWin32ErrorAndNtStatusFromNtStatus` `NtSetInformationProcess` `RtlInitializeExtendedContext2` `RtlGetExtendedContextLength2` `RtlLocateExtendedFeature` `RtlGetDeviceFamilyInfoEnum` `RtlIsApiSetImplemented` `wcspbrk` `iswalpha` `wcschr` `wcsncmp` `RtlNtStatusToDosErrorNoTeb` `TpSetTimer` `RtlRegisterFeatureConfigurationChangeNotification` `RtlDllShutdownInProgress` `memcpy_s` `NtCreatePrivateNamespace` `TpReleaseTimer` `RtlUnregisterFeatureConfigurationChangeNotification` `RtlInitializeCriticalSectionEx` `NtUpdateWnfStateData` `memmove_s` `_vsnprintf` `NtCreateIoRing` `NtSubmitIoRing` `NtSetInformationIoRing` `NtQueryIoRingCapabilities` `NtTerminateProcess` `RtlCaptureContext` `RtlLookupFunctionEntry` `RtlVirtualUnwind` `RtlUnhandledExceptionFilter` `RtlNormalizeString` `RtlPublishWnfStateData` `NtSetDefaultLocale` `_wtoi` `_itow_s` `NtDeleteValueKey` `RtlUnicodeStringToInteger` `RtlLocaleNameToLcid` `RtlIsMultiSessionSku` `RtlLcidToLocaleName` `RtlpLoadUserUIByPolicy` `RtlpLoadMachineUIByPolicy` `RtlpGetLCIDFromLangInfoNode` `NtEnumerateValueKey` `qsort` `RtlpCreateProcessRegistryInfo` `RtlLCIDToCultureName` `RtlpGetNameFromLangInfoNode` `NtQueryInstallUILanguage` `RtlpMuiFreeLangRegistryInfo` `RtlpInitializeLangRegistryInfo` `RtlpIsQualifiedLanguage` `RtlCultureNameToLCID` `RtlGetLocaleFileMappingAddress` `NtEnumerateKey` `NtGetNlsSectionPtr` `_ui64tow_s` `LdrFindResourceEx_U` `RtlGetThreadPreferredUILanguages` `RtlSetProcessPreferredUILanguages` `RtlGetUILanguageInfo` `RtlGetUserPreferredUILanguages` `RtlGetSystemPreferredUILanguages` `RtlpQueryDefaultUILanguage` `RtlGetProcessPreferredUILanguages` `RtlSetThreadPreferredUILanguages` `RtlSetThreadPreferredUILanguages2` `RtlGetFileMUIPath` `RtlRestoreThreadPreferredUILanguages` `RtlpGetSystemDefaultUILanguage` `LdrAccessResource` `RtlIdnToNameprepUnicode` `RtlIsNormalizedString` `RtlIdnToAscii` `RtlIdnToUnicode` `NtDeleteKey` `RtlAppendUnicodeStringToString` `RtlLoadString` `RtlAppendUnicodeToString` `RtlCopyUnicodeString` `RtlExpandEnvironmentStrings_U` `NtCreateSection` `RtlOpenCurrentUser` `NtMapViewOfSection` `NtQueryDefaultLocale` `NtNotifyChangeKey` `NtQueryInformationToken` `RtlTimeFieldsToTime` `CsrClientCallServer` `CsrCaptureMessageBuffer` `CsrFreeCaptureBuffer` `CsrAllocateCaptureBuffer` `RtlUTF8ToUnicodeN` `RtlUnicodeToUTF8N` `_wcslwr` `NtQueryLicenseValue` `_wtol` `RtlIntegerToUnicodeString` `RtlRunOnceExecuteOnce` `DbgPrint` `memset` `sqrt` `RtlFlsGetValue` `RtlQueryWnfStateData` `RtlSetProtectedPolicy` `NtOpenSymbolicLinkObject` `NtQuerySymbolicLinkObject` `RtlUnicodeToMultiByteSize` `RtlQueryInformationActivationContext` `DbgPrintEx` `RtlReleaseActivationContext` `RtlInitAnsiStringEx` `TpAllocTimer` `TpAllocIoCompletion` `TpAllocWork` `TpCallbackMayRunLong` `TpAllocCleanupGroup` `TpSimpleTryPost` `TpQueryPoolStackInformation` `TpAllocPool` `TpSetPoolMinThreads` `TpSetPoolStackInformation` `TpAllocWait` `RtlConvertSidToUnicodeString` `RtlSubAuthorityCountSid` `ZwQueryInformationToken` `RtlIsMultiUsersInSessionSku` `ZwQueryValueKey` `ZwClose` `ZwOpenKey` `NtQueryMultipleValueKey` `wcsncpy_s` `RtlExitUserProcess` `RtlInitializeCriticalSectionAndSpinCount` `vswprintf_s` `RtlDecodePointer` `RtlEncodePointer` `RtlInitUnicodeStringEx` `NtClose` `RtlReleaseSRWLockShared` `RtlPrefixUnicodeString` `RtlAcquireSRWLockShared` `RtlAcquireSRWLockExclusive` `RtlReleaseSRWLockExclusive` `RtlDeleteBoundaryDescriptor` `NtQueryInformationProcess` `RtlCreateBoundaryDescriptor` `TpWaitForTimer` `RtlCompareUnicodeString` `isalpha` `_strnicmp` `RtlRunOnceInitialize` `NtDuplicateObject` `RtlFormatCurrentUserKeyPath` `NtResetEvent` `RtlCheckTokenMembershipEx` `RtlDeriveCapabilitySidsFromName` `NtQueryEvent` `RtlCapabilityCheck` `RtlCreateUnicodeStringFromAsciiz` `NtQueryKey` `RtlCreateUnicodeString` `RtlValidSecurityDescriptor` `RtlRandomEx` `RtlStringFromGUID` `NtLoadKeyEx` `RtlLengthSecurityDescriptor` `RtlMakeSelfRelativeSD` `LdrGetProcedureAddress` `LdrGetDllHandle` `RtlInitString` `strncat` `_strlwr` `RtlRaiseException` `PssNtCaptureSnapshot` `PssNtValidateDescriptor` `PssNtFreeSnapshot` `PssNtFreeRemoteSnapshot` `PssNtQuerySnapshot` `PssNtWalkSnapshot` `PssNtDuplicateSnapshot` `PssNtFreeWalkMarker` `NtQueryVirtualMemory` `RtlAdjustPrivilege` `NtOpenProcessTokenEx` `RtlGUIDFromString` `RtlQueryPackageIdentityEx` `RtlStringFromGUIDEx` `EtwEventUnregister` `EtwEventRegister` `EtwEventEnabled` `EtwEventWrite` `NtCreateWnfStateName` `NtDeleteWnfStateName` `RtlFreeSid` `RtlInitializeSRWLock` `WinSqmIncrementDWORD` `WinSqmSetDWORD` `WinSqmSetString` `RtlGetDaclSecurityDescriptor` `RtlCreateAcl` `RtlAddAccessAllowedAceEx` `RtlAddAce` `RtlCreateSecurityDescriptor` `RtlSetDaclSecurityDescriptor` `RtlGetControlSecurityDescriptor` `RtlSetControlSecurityDescriptor` `NtSetSecurityObject` `RtlDowncaseUnicodeString` `RtlUpcaseUnicodeString` `RtlAllocateAndInitializeSid` `NtUnmapViewOfSection` `RtlQueryUnbiasedInterruptTime` `RtlQueryPackageClaims` `wcsstr` `LdrUpdatePackageSearchPath` `strncmp` `_vscwprintf` `RtlInsertElementGenericTableAvl` `RtlInitializeGenericTableAvl` `RtlDeleteElementGenericTableAvl` `RtlLookupElementGenericTableAvl` `RtlValidSid` `RtlLengthSid` `RtlGetAppContainerSidType` `RtlCopySid` `RtlExpandEnvironmentStrings` `RtlGetAppContainerParent` `NtQuerySecurityAttributesToken` `RtlIsParentOfChildAppContainer` `WinSqmIsOptedIn` `WinSqmStartSession` `WinSqmAddToStreamEx` `WinSqmEndSession` `TpReleaseWork` `TpPostWork` `RtlSetSaclSecurityDescriptor` `NtGetCachedSigningLevel` `NtCompareSigningLevels` `ZwCreateKey` `ZwSetValueKey` `NtDeviceIoControlFile` `EtwEventWriteTransfer` `TpCancelAsyncIoOperation` `TpWaitForIoCompletion` `TpReleaseIoCompletion` `RtlFreeHeap` `TpStartAsyncIoOperation` `RtlCompareUnicodeStrings` `strchr` `NtReadFile` `RtlRaiseStatus` `RtlTryAcquirePebLock` `RtlReleasePebLock` `wcsspn` `wcscspn` `RtlGetNtSystemRoot` `NtWaitForMultipleObjects` `RtlImageNtHeader` `NtSetSystemInformation` `RtlQueryActivationContextApplicationSettings` `RtlExitUserThread` `NtYieldExecution` `RtlCreateProcessParametersEx` `RtlDestroyProcessParameters` `strtoul` `RtlGetVersion` `_errno` `RtlQueryPerformanceFrequency` `RtlTryAcquireSRWLockExclusive` `RtlUnsubscribeWnfStateChangeNotification` `wcsncat_s` `RtlTestAndPublishWnfStateData` `NtDuplicateToken` `NtAllocateLocallyUniqueId` `NtAccessCheck` `NtAccessCheckByType` `NtAccessCheckByTypeResultList` `NtOpenProcessToken` `NtOpenThreadToken` `NtSetInformationToken` `NtAdjustPrivilegesToken` `NtAdjustGroupsToken` `NtPrivilegeCheck` `NtAccessCheckAndAuditAlarm` `NtAccessCheckByTypeAndAuditAlarm` `NtAccessCheckByTypeResultListAndAuditAlarm` `NtAccessCheckByTypeResultListAndAuditAlarmByHandle` `NtOpenObjectAuditAlarm` `NtPrivilegeObjectAuditAlarm` `NtCloseObjectAuditAlarm` `NtDeleteObjectAuditAlarm` `NtPrivilegedServiceAuditAlarm` `RtlEqualPrefixSid` `RtlIdentifierAuthoritySid` `RtlAreAllAccessesGranted` `RtlAreAnyAccessesGranted` `RtlMapGenericMask` `RtlValidAcl` `RtlSetInformationAcl` `RtlDeleteAce` `RtlAddAccessAllowedAce` `RtlAddMandatoryAce` `RtlAddResourceAttributeAce` `RtlAddScopedPolicyIDAce` `RtlAddAccessDeniedAce` `RtlAddAccessDeniedAceEx` `RtlAddAuditAccessAce` `RtlAddAuditAccessAceEx` `RtlAddAccessAllowedObjectAce` `RtlAddAccessDeniedObjectAce` `RtlAddAuditAccessObjectAce` `RtlFirstFreeAce` `RtlValidRelativeSecurityDescriptor` `RtlGetSaclSecurityDescriptor` `RtlSetOwnerSecurityDescriptor` `RtlSetGroupSecurityDescriptor` `RtlGetGroupSecurityDescriptor` `RtlNewSecurityObject` `RtlConvertToAutoInheritSecurityObject` `RtlNewSecurityObjectEx` `RtlNewSecurityObjectWithMultipleInheritance` `RtlSetSecurityObject` `RtlSetSecurityObjectEx` `RtlQuerySecurityObject` `RtlDeleteSecurityObject` `RtlAbsoluteToSelfRelativeSD` `RtlSelfRelativeToAbsoluteSD` `RtlImpersonateSelf` `NtSetInformationThread` `NtImpersonateAnonymousToken` `EtwEventWriteNoRegistration` `NtFilterToken` `RtlCheckTokenCapability` `RtlSelfRelativeToAbsoluteSD2` `RtlGetSecurityDescriptorRMControl` `RtlSetSecurityDescriptorRMControl` `RtlIsPackageSid` `RtlIsCapabilitySid` `NtSetCachedSigningLevel` `RtlDosApplyFileIsolationRedirection_Ustr` `LdrGetDllHandleByName` `RtlDosSearchPath_Ustr` `RtlImageNtHeaderEx` `LdrGetDllHandleByMapping` `RtlGetActiveActivationContext` `LdrAddLoadAsDataTable` `_stricmp` `strncat_s` `LdrGetDllPath` `RtlReleasePath` `LdrLoadDll` `LdrRemoveLoadAsDataTable` `LdrUnloadAlternateResourceModule` `LdrUnloadDll` `LdrDisableThreadCalloutsForDll` `LdrGetDllFullName` `RtlPcToFileHeader` `LdrAddRefDll` `LdrGetProcedureAddressForCaller` `LdrAddDllDirectory` `LdrRemoveDllDirectory` `LdrSetDefaultDllDirectories` `LdrResolveDelayLoadedAPI` `LdrResolveDelayLoadsFromDll` `LdrQueryOptionalDelayLoadedAPI` `RtlGetProductInfo` `LdrFindResource_U` `LdrResGetRCConfig` `LdrpResGetResourceDirectory` `RtlImageDirectoryEntryToData` `LdrResFindResourceDirectory` `LdrResFindResource` `LdrGetFileNameFromLoadAsDataTable` `LdrLoadAlternateResourceModule` `LdrRscIsTypeExist` `LdrLoadAlternateResourceModuleEx` `LdrpResGetMappingSize` `wcstoul` `NtLockVirtualMemory` `NtUnlockVirtualMemory` `NtReadVirtualMemory` `RtlOpenCrossProcessEmulatorWorkConnection` `RtlWow64PopCrossProcessWorkFromFreeList` `RtlWow64RequestCrossProcessHeavyFlush` `RtlWow64PushCrossProcessWorkOntoWorkList` `RtlWow64PushCrossProcessWorkOntoFreeList` `NtProtectVirtualMemory` `NtWriteVirtualMemory` `NtAllocateVirtualMemory` `NtAllocateVirtualMemoryEx` `NtFreeVirtualMemory` `RtlFlushSecureMemoryCache` `NtOpenEvent` `NtGetWriteWatch` `NtResetWriteWatch` `NtSetInformationVirtualMemory` `NtAllocateUserPhysicalPages` `NtAllocateUserPhysicalPagesEx` `NtFreeUserPhysicalPages` `NtMapUserPhysicalPages` `NtManagePartition` `NtQuerySystemInformationEx` `RtlxAnsiStringToUnicodeSize` `RtlxOemStringToUnicodeSize` `RtlxUnicodeStringToOemSize` `RtlxUnicodeStringToAnsiSize` `RtlOemStringToUnicodeString` `wcsnlen` `RtlGetCurrentServiceSessionId` `NtOpenDirectoryObject` `NtQueryObject` `NtCreateSymbolicLinkObject` `NtCreateDirectoryObjectEx` `RtlIsEnclaveFeaturePresent` `LdrCreateEnclave` `NtLoadEnclaveData` `LdrInitializeEnclave` `LdrLoadEnclaveModule` `LdrCallEnclave` `NtTerminateEnclave` `LdrDeleteEnclave` `RtlDefaultNpAcl` `NtCreateNamedPipeFile` `RtlPrefixString` `NtWriteFile` `NtLockFile` `NtUnlockFile` `RtlActivateActivationContextUnsafeFast` `RtlDeactivateActivationContextUnsafeFast` `NtCancelIoFile` `NtCancelIoFileEx` `NtCancelSynchronousIoFile` `NtReadFileScatter` `NtWriteFileGather` `RtlWow64EnableFsRedirection` `RtlWow64EnableFsRedirectionEx` `NtSetEvent` `NtClearEvent` `NtPulseEvent` `NtCreateSemaphore` `NtOpenSemaphore` `NtReleaseSemaphore` `NtCreateMutant` `NtCreateTimer2` `NtCreateTimer` `NtOpenTimer` `NtSetTimerEx` `NtCancelTimer` `RtlRunOnceBeginInitialize` `RtlRunOnceComplete` `RtlSleepConditionVariableCS` `RtlSleepConditionVariableSRW` `RtlDeleteBarrier` `RtlBarrier` `RtlInitBarrier` `RtlWaitOnAddress` `NtSignalAndWaitForSingleObject` `RtlRegisterWait` `RtlDeregisterWaitEx` `RtlCreateTimerQueue` `NtDelayExecution` `RtlCreateTimer` `RtlUpdateTimer` `RtlDeleteTimer` `RtlDeleteTimerQueueEx` `RtlQueueWorkItem` `DbgUiContinue` `DbgUiWaitStateChange` `DbgUiConvertStateChangeStructureEx` `DbgUiConvertStateChangeStructure` `CsrGetProcessId` `NtOpenProcess` `DbgUiConnectToDbg` `DbgUiDebugActiveProcess` `DbgUiStopDebugging` `NtCompareObjects` `NtSetInformationObject` `RtlTimeToTimeFields` `RtlCutoverTimeToSystemTime` `RtlGetSystemTimeAndBias` `NtSetSystemTime` `RtlGetSystemTimePrecise` `RtlGetInterruptTimePrecise` `RtlpTimeToTimeFields` `RtlpTimeFieldsToTime` `RtlGetSystemGlobalData` `RtlpCheckDynamicTimeZoneInformation` `NtQueryAuxiliaryCounterFrequency` `NtConvertBetweenAuxiliaryCounterAndPerformanceCounter` `NtCreateThreadEx` `RtlAllocateActivationContextStack` `RtlActivateActivationContextEx` `NtResumeThread` `RtlFreeActivationContextStack` `NtTerminateThread` `NtOpenThread` `NtQueryInformationThread` `TpCaptureCaller` `RtlCaptureStackBackTrace` `TpCheckTerminateWorker` `NtSuspendThread` `NtGetContextThread` `NtSetContextThread` `RtlWow64GetThreadContext` `RtlWow64SetThreadContext` `RtlWow64SuspendThread` `RtlDelayExecution` `RtlTlsAlloc` `RtlTlsSetValue` `RtlTlsFree` `NtQueueApcThreadEx2` `#8` `RtlFlsAlloc` `RtlFlsSetValue` `RtlFlsFree` `RtlCreateUserStack` `RtlCreateUserFiberShadowStack` `RtlFreeUserStack` `RtlFreeUserFiberShadowStack` `RtlProcessFlsData` `RtlQueryRegistryValuesEx` `NtCreateLowBoxToken` `RtlDestroyEnvironment` `RtlGetAppContainerNamedObjectPath` `RtlDosPathNameToRelativeNtPathName_U_WithStatus` `NtCreateSectionEx` `LdrAppxHandleIntegrityFailure` `NtOpenSection` `NtMapViewOfSectionEx` `NtFlushVirtualMemory` `NtUnmapViewOfSectionEx` `RtlGetThreadErrorMode` `RtlSetThreadErrorMode` `NtCreateIoCompletion` `NtSetIoCompletion` `NtRemoveIoCompletion` `NtRemoveIoCompletionEx` `iswspace` `EtwCheckCoverage` `NtAssignProcessToJobObject` `RtlGetCurrentThreadPrimaryGroup` `RtlQueryProtectedPolicy` `RtlIsProcessorFeaturePresent` `RtlWow64GetProcessMachines` `RtlWow64IsWowGuestMachineSupported` `RtlReportSilentProcessExit` `NtRaiseHardError` `RtlGetNativeSystemInformation` `RtlQueryEnvironmentVariable_U` `LdrQueryImageFileKeyOption` `wcstok_s` `LdrGetDllDirectory` `RtlCreateProcessParametersWithTemplate` `LdrQueryImageFileExecutionOptionsEx` `DbgUiGetThreadDebugObject` `RtlCreateEnvironmentEx` `NtRemoveProcessDebug` `RtlGetExePath` `RtlGetFullPathName_UstrEx` `NtCreateUserProcess` `EtwEventActivityIdControl` `NtQueryDirectoryObject` `RtlCompareMemory` `NtQueryAttributesFile` `NtQueryFullAttributesFile` `toupper` `RtlAcquirePebLock` `RtlUnicodeToOemN` `RtlSetEnvironmentStrings` `RtlSetEnvironmentVariable` `RtlQueryEnvironmentVariable` `RtlSetEnvironmentVar` `NtQueryDirectoryFileEx` `NtNotifyChangeDirectoryFile` `RtlFindMessage` `RtlInitUTF8String` `RtlUTF8StringToUnicodeString` `RtlFormatMessageEx` `RtlGetFullPathName_UEx` `RtlGetCurrentDirectory_U` `RtlSetCurrentDirectory_U` `RtlIsFeatureEnabledForEnterprise` `RtlGetSearchPath` `RtlGetFullPathName_U` `RtlIntegerToChar` `RtlAnsiCharToUnicodeChar` `RtlInitializeHandleTable` `RtlCreateHeap` `RtlDestroyHeap` `RtlQueryHeapInformation` `RtlValidateHeap` `RtlGetProcessHeaps` `RtlCompactHeap` `RtlWalkHeap` `RtlSetHeapInformation` `RtlGuardCheckLongJumpTarget` `NtIsProcessInJob` `EtwEventSetInformation` `RtlCreateTagHeap` `RtlSetUnhandledExceptionFilter` `RtlCleanUpTEBLangLists` `RtlRaiseCustomSystemEventTrigger` `ZwQueryWnfStateNameInformation` `ZwUpdateWnfStateData` `RtlKnownExceptionFilter` `NtQueryInformationJobObject` `NtRaiseException` `RtlRaiseNoncontinuableException` `CsrCaptureMessageMultiUnicodeStringsInPlace` `CsrAllocateMessagePointer` `CsrClientConnectToServer` `RtlWakeAllConditionVariable` `RtlCharToInteger` `NtFlushKey` `RtlDnsHostNameToComputerName` `RtlQueryPerformanceCounter` `RtlReAllocateHeap` `RtlEnumerateGenericTableAvl` `RtlAllocateHeap` `NtNotifyChangeMultipleKeys` `NtLoadKey` `NtUnloadKey` `NtSaveKeyEx` `NtRestoreKey` `NtOpenKeyEx` `NtSetInformationKey` `NtOpenKeyTransactedEx` `RtlQueryElevationFlags` `__chkstk` `_local_unwind` `memcmp` `memcpy` `memmove` `wcscmp`
api-ms-win-eventing-provider-l1-1-0.dll	`EventSetInformation` `EventRegister` `EventWriteTransfer` `EventActivityIdControl` `EventUnregister`
api-ms-win-core-apiquery-l1-1-0.dll	`ApiSetQueryApiSetPresence`
api-ms-win-core-apiquery-l1-1-2.dll	`ApiSetGetImplementationHost`
ext-ms-win-advapi32-registry-l1-1-0.dll (delay-loaded)	`PerfRegCloseKey` `PerfRegQueryValue` `PerfRegQueryInfoKey` `BaseRegGetVersion` `BaseRegDeleteKeyEx` `BaseRegDeleteValue` `RemoteRegEnumKeyWrapper` `RemoteRegEnumValueWrapper` `SafeBaseRegGetKeySecurity` `MIDL_user_free_Ext` `BaseRegSetKeySecurity` `BaseRegLoadKey` `BaseRegUnLoadKey` `RemoteRegQueryInfoKeyWrapper` `BaseRegOpenKey` `BaseRegCreateKey` `RemoteRegQueryValueWrapper` `BaseRegSaveKeyEx` `BaseRegRestoreKey` `BaseRegSetValue` `PerfRegSetValue` `BaseRegCloseKey` `PerfRegEnumValue` `PerfRegEnumKey` `BaseRegFlushKey`

Delayed Imports

Attributes	`0x1`
Name	`ext-ms-win-advapi32-registry-l1-1-0.dll`
ModuleHandle	`0x3aec80`
DelayImportAddressTable	`0x3cc200`
DelayImportNameTable	`0x393f08`
BoundDelayImportTable	`0x3960f0`
UnloadDelayImportTable	`0`
TimeStamp	`1970-Jan-01 00:00:00`

MsixIsSystemPackageByAppUserModelId

Ordinal	`1`
Address	`0x12c7d0`

MsixIsSystemPackageByPackageFullName

Ordinal	`2`
Address	`0x144720`

PackageSidFromProductId

Ordinal	`3`
Address	`0x144c60`

AccessCheck

Ordinal	`4`
Address	`0xc3290`

AccessCheckAndAuditAlarmW

Ordinal	`5`
Address	`0xcd940`

AccessCheckByType

Ordinal	`6`
Address	`0xc30e0`

AccessCheckByTypeAndAuditAlarmW

Ordinal	`7`
Address	`0x1817d0`

AccessCheckByTypeResultList

Ordinal	`8`
Address	`0x181930`

AccessCheckByTypeResultListAndAuditAlarmByHandleW

Ordinal	`9`
Address	`0x1819f0`

AccessCheckByTypeResultListAndAuditAlarmW

Ordinal	`10`
Address	`0x181b70`

AcquireSRWLockExclusive

Ordinal	`11`
Address	`0x39bcf2`
ForwardName	`NTDLL.RtlAcquireSRWLockExclusive`

AcquireSRWLockShared

Ordinal	`12`
Address	`0x39bd28`
ForwardName	`NTDLL.RtlAcquireSRWLockShared`

AcquireStateLock

Ordinal	`13`
Address	`0x10ec50`

ActivateActCtx

Ordinal	`14`
Address	`0xdd420`

AddAccessAllowedAce

Ordinal	`15`
Address	`0xed800`

AddAccessAllowedAceEx

Ordinal	`16`
Address	`0x9c430`

AddAccessAllowedObjectAce

Ordinal	`17`
Address	`0x181cd0`

AddAccessDeniedAce

Ordinal	`18`
Address	`0x114be0`

AddAccessDeniedAceEx

Ordinal	`19`
Address	`0x181d40`

AddAccessDeniedObjectAce

Ordinal	`20`
Address	`0x181da0`

AddAce

Ordinal	`21`
Address	`0xe1b60`

AddAuditAccessAce

Ordinal	`22`
Address	`0x181e10`

AddAuditAccessAceEx

Ordinal	`23`
Address	`0x181e50`

AddAuditAccessObjectAce

Ordinal	`24`
Address	`0x181ec0`

AddConsoleAliasA

Ordinal	`25`
Address	`0x15b620`

AddConsoleAliasW

Ordinal	`26`
Address	`0x15b7c0`

AddDependencyToProcessPackageGraph

Ordinal	`27`
Address	`0x11a000`

AddDllDirectory

Ordinal	`28`
Address	`0x107ff0`

AddExtensionProgId

Ordinal	`29`
Address	`0x451c0`

AddMandatoryAce

Ordinal	`30`
Address	`0x109d20`

AddPackageDependency

Ordinal	`31`
Address	`0x112dd0`

AddPackageDependency2

Ordinal	`32`
Address	`0x11ae60`

AddPackageNameAliasesByPackageDependency

Ordinal	`33`
Address	`0x14c420`

AddPackageNameAliasesByPackageFullName

Ordinal	`34`
Address	`0xa5470`

AddRefActCtx

Ordinal	`35`
Address	`0xf4b80`

AddResourceAttributeAce

Ordinal	`36`
Address	`0x181f50`

AddSIDToBoundaryDescriptor

Ordinal	`37`
Address	`0xfa340`

AddScopedPolicyIDAce

Ordinal	`38`
Address	`0x181fb0`

AddVectoredContinueHandler

Ordinal	`39`
Address	`0x39bf93`
ForwardName	`NTDLL.RtlAddVectoredContinueHandler`

AddVectoredExceptionHandler

Ordinal	`40`
Address	`0x39bfd3`
ForwardName	`NTDLL.RtlAddVectoredExceptionHandler`

AdjustTokenGroups

Ordinal	`41`
Address	`0x1051d0`

AdjustTokenPrivileges

Ordinal	`42`
Address	`0xeb980`

AllocConsole

Ordinal	`43`
Address	`0x15bd70`

AllocConsoleWithOptions

Ordinal	`44`
Address	`0x116700`

AllocateAndInitializeSid

Ordinal	`45`
Address	`0xcdc00`

AllocateLocallyUniqueId

Ordinal	`46`
Address	`0xfc810`

AllocateUserPhysicalPages

Ordinal	`47`
Address	`0x1828d0`

AllocateUserPhysicalPages2

Ordinal	`48`
Address	`0x182900`

AllocateUserPhysicalPagesNuma

Ordinal	`49`
Address	`0x182980`

AppContainerDeriveSidFromMoniker

Ordinal	`50`
Address	`0x85f60`

AppContainerFreeMemory

Ordinal	`51`
Address	`0x83770`

AppContainerLookupDisplayNameMrtReference

Ordinal	`52`
Address	`0x1070c0`

AppContainerLookupMoniker

Ordinal	`53`
Address	`0x102c10`

AppContainerRegisterSid

Ordinal	`54`
Address	`0xb4050`

AppContainerUnregisterSid

Ordinal	`55`
Address	`0x1126b0`

AppPolicyGetClrCompat

Ordinal	`56`
Address	`0x74f60`

AppPolicyGetCreateFileAccess

Ordinal	`57`
Address	`0x14e8d0`

AppPolicyGetLifecycleManagement

Ordinal	`58`
Address	`0x73d10`

AppPolicyGetMediaFoundationCodecLoading

Ordinal	`59`
Address	`0x73c80`

AppPolicyGetProcessTerminationMethod

Ordinal	`60`
Address	`0x75330`

AppPolicyGetShowDeveloperDiagnostic

Ordinal	`61`
Address	`0x14e940`

AppPolicyGetThreadInitializationType

Ordinal	`62`
Address	`0x752a0`

AppPolicyGetWindowingModel

Ordinal	`63`
Address	`0x75910`

AppXCheckPplSupport

Ordinal	`64`
Address	`0x157440`

AppXFreeMemory

Ordinal	`65`
Address	`0x83770`

AppXGetApplicationData

Ordinal	`66`
Address	`0x1526f0`

AppXGetDevelopmentMode

Ordinal	`67`
Address	`0x1528f0`

AppXGetOSMaxVersionTested

Ordinal	`68`
Address	`0x77820`

AppXGetOSMinVersion

Ordinal	`69`
Address	`0x12c7d0`

AppXGetPackageCapabilities

Ordinal	`70`
Address	`0xe40a0`

AppXGetPackageSid

Ordinal	`71`
Address	`0x77450`

AppXLookupDisplayName

Ordinal	`72`
Address	`0x1529f0`

AppXLookupMoniker

Ordinal	`73`
Address	`0x152a80`

AppXPostSuccessExtension

Ordinal	`74`
Address	`0x100200`

AppXPreCreationExtension

Ordinal	`75`
Address	`0x4a90`

AppXReleaseAppXContext

Ordinal	`76`
Address	`0x107300`

AppXUpdatePackageCapabilities

Ordinal	`77`
Address	`0x12c7d0`

ApplicationUserModelIdFromProductId

Ordinal	`78`
Address	`0x14e9b0`

AreAllAccessesGranted

Ordinal	`79`
Address	`0xfb950`

AreAnyAccessesGranted

Ordinal	`80`
Address	`0x181ff0`

AreExternalFeatureDependenciesEnabled

Ordinal	`81`
Address	`0x1831f0`

AreFileApisANSI

Ordinal	`82`
Address	`0xf2ea0`

AreShortNamesEnabled

Ordinal	`83`
Address	`0x1381d0`

AreThereVisibleLogoffScriptsInternal

Ordinal	`84`
Address	`0x12b560`

AreThereVisibleShutdownScriptsInternal

Ordinal	`85`
Address	`0x12b5b0`

ArmFeatureUsageSubscriberFlushNotification

Ordinal	`86`
Address	`0x64a00`

AttachConsole

Ordinal	`87`
Address	`0xbff90`

BaseCheckAppcompatCache

Ordinal	`88`
Address	`0x12c460`

BaseCheckAppcompatCacheEx

Ordinal	`89`
Address	`0x12c4d0`

BaseCleanupAppcompatCacheSupport

Ordinal	`90`
Address	`0x12c580`

BaseDllFreeResourceId

Ordinal	`91`
Address	`0x938d0`

BaseDllMapResourceIdW

Ordinal	`92`
Address	`0x93760`

BaseDumpAppcompatCache

Ordinal	`93`
Address	`0x12c5c0`

BaseFlushAppcompatCache

Ordinal	`94`
Address	`0x12c5f0`

BaseFormatObjectAttributes

Ordinal	`95`
Address	`0x66b50`

BaseFreeAppCompatDataForProcess

Ordinal	`96`
Address	`0x1053a0`

BaseGetConsoleReference

Ordinal	`97`
Address	`0x125a40`

BaseGetNamedObjectDirectory

Ordinal	`98`
Address	`0x68810`

BaseInitAppcompatCacheSupport

Ordinal	`99`
Address	`0x113290`

BaseIsAppcompatInfrastructureDisabled

Ordinal	`100`
Address	`0x10aa60`

BaseMarkFileForDelete

Ordinal	`101`
Address	`0xd2050`

BaseReadAppCompatDataForProcess

Ordinal	`102`
Address	`0x10b0f0`

BaseUpdateAppcompatCache

Ordinal	`103`
Address	`0x12c620`

BasepAdjustObjectAttributesForPrivateNamespace

Ordinal	`104`
Address	`0xba7a0`

BasepCopyFileCallback

Ordinal	`105`
Address	`0xd1df0`

BasepCopyFileExW

Ordinal	`106`
Address	`0xced10`

BasepNotifyTrackingService

Ordinal	`107`
Address	`0xd4f40`

Beep

Ordinal	`108`
Address	`0x18c0d0`

BuildIoRingCancelRequest

Ordinal	`109`
Address	`0x132c50`

BuildIoRingFlushFile

Ordinal	`110`
Address	`0x132d20`

BuildIoRingReadFile

Ordinal	`111`
Address	`0x102ee0`

BuildIoRingReadFileScatter

Ordinal	`112`
Address	`0x132e50`

BuildIoRingRegisterBuffers

Ordinal	`113`
Address	`0x132f70`

BuildIoRingRegisterFileHandles

Ordinal	`114`
Address	`0x133020`

BuildIoRingWriteFile

Ordinal	`115`
Address	`0x1330f0`

BuildIoRingWriteFileGather

Ordinal	`116`
Address	`0x133250`

CLOSE_LOCAL_HANDLE_INTERNAL

Ordinal	`117`
Address	`0x4c310`

CallEnclave

Ordinal	`118`
Address	`0xfd380`

CallNamedPipeW

Ordinal	`119`
Address	`0xf2670`

CallbackMayRunLong

Ordinal	`120`
Address	`0xdc970`

CancelIo

Ordinal	`121`
Address	`0xfefe0`

CancelIoEx

Ordinal	`122`
Address	`0xf88f0`

CancelSynchronousIo

Ordinal	`123`
Address	`0x112a20`

CancelThreadpoolIo

Ordinal	`124`
Address	`0x39c848`
ForwardName	`NTDLL.TpCancelAsyncIoOperation`

CancelWaitableTimer

Ordinal	`125`
Address	`0xcdc80`

CeipIsOptedIn

Ordinal	`126`
Address	`0x1217a0`

ChangeTimerQueueTimer

Ordinal	`127`
Address	`0xff9f0`

CharLowerA

Ordinal	`128`
Address	`0xcae30`

CharLowerBuffA

Ordinal	`129`
Address	`0xcafa0`

CharLowerBuffW

Ordinal	`130`
Address	`0xdc5f0`

CharLowerW

Ordinal	`131`
Address	`0x2fa80`

CharNextA

Ordinal	`132`
Address	`0x39720`

CharNextExA

Ordinal	`133`
Address	`0xa2040`

CharNextW

Ordinal	`134`
Address	`0xba280`

CharPrevA

Ordinal	`135`
Address	`0x383f0`

CharPrevExA

Ordinal	`136`
Address	`0xa1fc0`

CharPrevW

Ordinal	`137`
Address	`0x6260`

CharUpperA

Ordinal	`138`
Address	`0xbe220`

CharUpperBuffA

Ordinal	`139`
Address	`0xbe370`

CharUpperBuffW

Ordinal	`140`
Address	`0xc99f0`

CharUpperW

Ordinal	`141`
Address	`0xb6010`

CheckAllowDecryptedRemoteDestinationPolicy

Ordinal	`142`
Address	`0x12cae0`

CheckGroupPolicyEnabled

Ordinal	`143`
Address	`0x56d50`

CheckIfStateChangeNotificationExists

Ordinal	`144`
Address	`0x111ef0`

CheckIsMSIXPackage

Ordinal	`145`
Address	`0x76a60`

CheckRemoteDebuggerPresent

Ordinal	`146`
Address	`0xffbe0`

CheckTokenCapability

Ordinal	`147`
Address	`0xe23a0`

CheckTokenMembership

Ordinal	`148`
Address	`0xdc680`

CheckTokenMembershipEx

Ordinal	`149`
Address	`0xea6b0`

ChrCmpIA

Ordinal	`150`
Address	`0x3a520`

ChrCmpIW

Ordinal	`151`
Address	`0xaf00`

ClearCommBreak

Ordinal	`152`
Address	`0x110760`

ClearCommError

Ordinal	`153`
Address	`0x65cc0`

CloseHandle

Ordinal	`154`
Address	`0x1ea80`

CloseIoRing

Ordinal	`155`
Address	`0x1333a0`

ClosePackageInfo

Ordinal	`156`
Address	`0xfb850`

ClosePrivateNamespace

Ordinal	`157`
Address	`0xfc570`

ClosePseudoConsole

Ordinal	`158`
Address	`0x15be80`

CloseState

Ordinal	`159`
Address	`0xf4ef0`

CloseStateAtom

Ordinal	`160`
Address	`0xf76b0`

CloseStateChangeNotification

Ordinal	`161`
Address	`0x10d940`

CloseStateContainer

Ordinal	`162`
Address	`0xe6e50`

CloseStateLock

Ordinal	`163`
Address	`0x1113d0`

CloseThreadpool

Ordinal	`164`
Address	`0x39cb0a`
ForwardName	`NTDLL.TpReleasePool`

CloseThreadpoolCleanupGroup

Ordinal	`165`
Address	`0x39cb3a`
ForwardName	`NTDLL.TpReleaseCleanupGroup`

CloseThreadpoolCleanupGroupMembers

Ordinal	`166`
Address	`0x39cb79`
ForwardName	`NTDLL.TpReleaseCleanupGroupMembers`

CloseThreadpoolIo

Ordinal	`167`
Address	`0x39cbae`
ForwardName	`NTDLL.TpReleaseIoCompletion`

CloseThreadpoolTimer

Ordinal	`168`
Address	`0x39cbdf`
ForwardName	`NTDLL.TpReleaseTimer`

CloseThreadpoolWait

Ordinal	`169`
Address	`0x39cc08`
ForwardName	`NTDLL.TpReleaseWait`

CloseThreadpoolWork

Ordinal	`170`
Address	`0x39cc30`
ForwardName	`NTDLL.TpReleaseWork`

CommandLineToArgvW

Ordinal	`171`
Address	`0xb7020`

CommitStateAtom

Ordinal	`172`
Address	`0x13ee60`

CompareFileTime

Ordinal	`173`
Address	`0xc30a0`

CompareObjectHandles

Ordinal	`174`
Address	`0x104bc0`

CompareStringA

Ordinal	`175`
Address	`0x148f0`

CompareStringEx

Ordinal	`176`
Address	`0xfca0`

CompareStringOrdinal

Ordinal	`177`
Address	`0x960d0`

CompareStringW

Ordinal	`178`
Address	`0xefa0`

ConnectNamedPipe

Ordinal	`179`
Address	`0xf2f20`

ContinueDebugEvent

Ordinal	`180`
Address	`0xfc700`

ConvertAuxiliaryCounterToPerformanceCounter

Ordinal	`181`
Address	`0x18d680`

ConvertDefaultLocale

Ordinal	`182`
Address	`0x101e90`

ConvertFiberToThread

Ordinal	`183`
Address	`0xe9f70`

ConvertPerformanceCounterToAuxiliaryCounter

Ordinal	`184`
Address	`0x18d6f0`

ConvertThreadToFiber

Ordinal	`185`
Address	`0xdd7a0`

ConvertThreadToFiberEx

Ordinal	`186`
Address	`0xe0c70`

ConvertToAutoInheritPrivateObjectSecurity

Ordinal	`187`
Address	`0x182010`

CopyContext

Ordinal	`188`
Address	`0x12d980`

CopyFile2

Ordinal	`189`
Address	`0xce480`

CopyFileExW

Ordinal	`190`
Address	`0xcebb0`

CopyFileFromAppW

Ordinal	`191`
Address	`0x12dcf0`

CopyFileW

Ordinal	`192`
Address	`0xceb60`

CopyMemoryNonTemporal

Ordinal	`193`
Address	`0x39ce1e`
ForwardName	`NTDLL.RtlCopyMemoryNonTemporal`

CopySid

Ordinal	`194`
Address	`0x76c80`

CouldMultiUserAppsBehaviorBePossibleForPackage

Ordinal	`195`
Address	`0x100b20`

CreateActCtxW

Ordinal	`196`
Address	`0xfc380`

CreateAppContainerToken

Ordinal	`197`
Address	`0x11dbe0`

CreateAppSiloToken

Ordinal	`198`
Address	`0x18fb90`

CreateBoundaryDescriptorW

Ordinal	`199`
Address	`0xf34c0`

CreateConsoleScreenBuffer

Ordinal	`200`
Address	`0x125570`

CreateDirectory2A

Ordinal	`201`
Address	`0x18fdd0`

CreateDirectory2W

Ordinal	`202`
Address	`0x18fe50`

CreateDirectoryA

Ordinal	`203`
Address	`0x69290`

CreateDirectoryExW

Ordinal	`204`
Address	`0x10bb00`

CreateDirectoryFromAppW

Ordinal	`205`
Address	`0x12dd90`

CreateDirectoryW

Ordinal	`206`
Address	`0x692f0`

CreateEnclave

Ordinal	`207`
Address	`0x113210`

CreateEventA

Ordinal	`208`
Address	`0x670b0`

CreateEventExA

Ordinal	`209`
Address	`0x66de0`

CreateEventExW

Ordinal	`210`
Address	`0x67da0`

CreateEventW

Ordinal	`211`
Address	`0x67b70`

CreateFiber

Ordinal	`212`
Address	`0xf01b0`

CreateFiberEx

Ordinal	`213`
Address	`0xf01e0`

CreateFile2

Ordinal	`214`
Address	`0x1f820`

CreateFile2FromAppW

Ordinal	`215`
Address	`0x105630`

CreateFile3

Ordinal	`216`
Address	`0x1900f0`

CreateFileA

Ordinal	`217`
Address	`0x1eb70`

CreateFileFromAppW

Ordinal	`218`
Address	`0x12de30`

CreateFileMapping2

Ordinal	`219`
Address	`0x190120`

CreateFileMappingFromApp

Ordinal	`220`
Address	`0x1063b0`

CreateFileMappingNumaW

Ordinal	`221`
Address	`0x697c0`

CreateFileMappingW

Ordinal	`222`
Address	`0x69400`

CreateFileW

Ordinal	`223`
Address	`0x1fbd0`

CreateHardLinkA

Ordinal	`224`
Address	`0x190390`

CreateHardLinkW

Ordinal	`225`
Address	`0xf59a0`

CreateIoCompletionPort

Ordinal	`226`
Address	`0xf2ac0`

CreateIoRing

Ordinal	`227`
Address	`0x1333e0`

CreateMemoryResourceNotification

Ordinal	`228`
Address	`0xfdca0`

CreateMutexA

Ordinal	`229`
Address	`0x67d00`

CreateMutexExA

Ordinal	`230`
Address	`0x67020`

CreateMutexExW

Ordinal	`231`
Address	`0x680b0`

CreateMutexW

Ordinal	`232`
Address	`0x685b0`

CreateNamedPipeW

Ordinal	`233`
Address	`0xe9bc0`

CreatePipe

Ordinal	`234`
Address	`0xfff90`

CreatePrivateNamespaceW

Ordinal	`235`
Address	`0xf08e0`

CreatePrivateObjectSecurity

Ordinal	`236`
Address	`0x10dea0`

CreatePrivateObjectSecurityEx

Ordinal	`237`
Address	`0xed460`

CreatePrivateObjectSecurityWithMultipleInheritance

Ordinal	`238`
Address	`0x101210`

CreateProcessA

Ordinal	`239`
Address	`0x6b090`

CreateProcessAsUserA

Ordinal	`240`
Address	`0x1123b0`

CreateProcessAsUserW

Ordinal	`241`
Address	`0x6b6f0`

CreateProcessInternalA

Ordinal	`242`
Address	`0x6b110`

CreateProcessInternalW

Ordinal	`243`
Address	`0x6b760`

CreateProcessW

Ordinal	`244`
Address	`0x6b670`

CreatePseudoConsole

Ordinal	`245`
Address	`0x124d80`

CreatePseudoConsoleAsUser

Ordinal	`246`
Address	`0x124db0`

CreateRemoteThread

Ordinal	`247`
Address	`0x18e240`

CreateRemoteThreadEx

Ordinal	`248`
Address	`0xcb790`

CreateRestrictedToken

Ordinal	`249`
Address	`0xfbc70`

CreateSemaphoreExW

Ordinal	`250`
Address	`0x660a0`

CreateSemaphoreW

Ordinal	`251`
Address	`0x66a00`

CreateStateAtom

Ordinal	`252`
Address	`0x102de0`

CreateStateChangeNotification

Ordinal	`253`
Address	`0x118790`

CreateStateContainer

Ordinal	`254`
Address	`0x1188d0`

CreateStateLock

Ordinal	`255`
Address	`0x10ecf0`

CreateStateSubcontainer

Ordinal	`256`
Address	`0x118a40`

CreateSymbolicLinkW

Ordinal	`257`
Address	`0xff210`

CreateThread

Ordinal	`258`
Address	`0x18e290`

CreateThreadpool

Ordinal	`259`
Address	`0xff190`

CreateThreadpoolCleanupGroup

Ordinal	`260`
Address	`0xfdbc0`

CreateThreadpoolIo

Ordinal	`261`
Address	`0xc4f70`

CreateThreadpoolTimer

Ordinal	`262`
Address	`0x639a0`

CreateThreadpoolWait

Ordinal	`263`
Address	`0xed760`

CreateThreadpoolWork

Ordinal	`264`
Address	`0xdcbc0`

CreateTimerQueue

Ordinal	`265`
Address	`0x105850`

CreateTimerQueueTimer

Ordinal	`266`
Address	`0xe97b0`

CreateWaitableTimerExW

Ordinal	`267`
Address	`0xcb140`

CreateWaitableTimerW

Ordinal	`268`
Address	`0x104800`

CreateWellKnownSid

Ordinal	`269`
Address	`0x9d120`

CtrlRoutine

Ordinal	`270`
Address	`0xc78d0`

CveEventWrite

Ordinal	`271`
Address	`0x182060`

DeactivateActCtx

Ordinal	`272`
Address	`0xdd360`

DebugActiveProcess

Ordinal	`273`
Address	`0x18c430`

DebugActiveProcessStop

Ordinal	`274`
Address	`0x18c4c0`

DebugBreak

Ordinal	`275`
Address	`0x1136f0`

DecodePointer

Ordinal	`276`
Address	`0x39d484`
ForwardName	`NTDLL.RtlDecodePointer`

DecodeRemotePointer

Ordinal	`277`
Address	`0x39d4af`
ForwardName	`NTDLL.RtlDecodeRemotePointer`

DecodeSystemPointer

Ordinal	`278`
Address	`0x39d4e0`
ForwardName	`NTDLL.RtlDecodeSystemPointer`

DefineDosDeviceW

Ordinal	`279`
Address	`0xff6b0`

DelayLoadFailureHook

Ordinal	`280`
Address	`0xeddb0`

DelayLoadFailureHookLookup

Ordinal	`281`
Address	`0xede10`

DeleteAce

Ordinal	`282`
Address	`0x107330`

DeleteBoundaryDescriptor

Ordinal	`283`
Address	`0x10cc70`

DeleteCriticalSection

Ordinal	`284`
Address	`0x39d577`
ForwardName	`NTDLL.RtlDeleteCriticalSection`

DeleteEnclave

Ordinal	`285`
Address	`0x18c1f0`

DeleteFiber

Ordinal	`286`
Address	`0xfa3f0`

DeleteFile2A

Ordinal	`287`
Address	`0x191d80`

DeleteFile2W

Ordinal	`288`
Address	`0x191dd0`

DeleteFileA

Ordinal	`289`
Address	`0x6a090`

DeleteFileFromAppW

Ordinal	`290`
Address	`0x12dec0`

DeleteFileW

Ordinal	`291`
Address	`0xd4b90`

DeletePackageDependency

Ordinal	`292`
Address	`0x14c520`

DeletePersistedRegistryValue

Ordinal	`293`
Address	`0x12d350`

DeleteProcThreadAttributeList

Ordinal	`294`
Address	`0x11fd20`

DeleteStateAtomValue

Ordinal	`295`
Address	`0xa4990`

DeleteStateContainer

Ordinal	`296`
Address	`0x1017a0`

DeleteStateContainerValue

Ordinal	`297`
Address	`0x118bb0`

DeleteSynchronizationBarrier

Ordinal	`298`
Address	`0x18c2b0`

DeleteTimerQueue

Ordinal	`299`
Address	`0x102b90`

DeleteTimerQueueEx

Ordinal	`300`
Address	`0x102bb0`

DeleteTimerQueueTimer

Ordinal	`301`
Address	`0xf16a0`

DeleteVolumeMountPointW

Ordinal	`302`
Address	`0xf7ad0`

DeriveCapabilitySidsFromName

Ordinal	`303`
Address	`0x103b70`

DestroyPrivateObjectSecurity

Ordinal	`304`
Address	`0xf1b80`

DeviceIoControl

Ordinal	`305`
Address	`0x1ba40`

DisablePredefinedHandleTableInternal

Ordinal	`306`
Address	`0x87af0`

DisableThreadLibraryCalls

Ordinal	`307`
Address	`0xecfb0`

DisassociateCurrentThreadFromCallback

Ordinal	`308`
Address	`0x39d7aa`
ForwardName	`NTDLL.TpDisassociateCallback`

DiscardVirtualMemory

Ordinal	`309`
Address	`0xb6b50`

DisconnectNamedPipe

Ordinal	`310`
Address	`0xf4f90`

DnsHostnameToComputerNameExW

Ordinal	`311`
Address	`0x191de0`

DsBindWithSpnExW

Ordinal	`312`
Address	`0x114c90`

DsCrackNamesW

Ordinal	`313`
Address	`0x111270`

DsFreeDomainControllerInfoW

Ordinal	`314`
Address	`0x12c150`

DsFreeNameResultW

Ordinal	`315`
Address	`0x112420`

DsFreeNgcKey

Ordinal	`316`
Address	`0x12c1a0`

DsFreePasswordCredentials

Ordinal	`317`
Address	`0x12c1d0`

DsGetDomainControllerInfoW

Ordinal	`318`
Address	`0x12c200`

DsMakePasswordCredentialsW

Ordinal	`319`
Address	`0x12c280`

DsReadNgcKeyW

Ordinal	`320`
Address	`0x12c2f0`

DsUnBindW

Ordinal	`321`
Address	`0x12c360`

DsWriteNgcKeyW

Ordinal	`322`
Address	`0x12c3b0`

DuplicateHandle

Ordinal	`323`
Address	`0x8e030`

DuplicateStateContainerHandle

Ordinal	`324`
Address	`0xf1630`

DuplicateToken

Ordinal	`325`
Address	`0xe99a0`

DuplicateTokenEx

Ordinal	`326`
Address	`0xdc510`

EmptyWorkingSet

Ordinal	`327`
Address	`0x105c30`

EnableProcessOptionalXStateFeatures

Ordinal	`328`
Address	`0x12d9c0`

EncodePointer

Ordinal	`329`
Address	`0x39d96e`
ForwardName	`NTDLL.RtlEncodePointer`

EncodeRemotePointer

Ordinal	`330`
Address	`0x39d999`
ForwardName	`NTDLL.RtlEncodeRemotePointer`

EncodeSystemPointer

Ordinal	`331`
Address	`0x39d9ca`
ForwardName	`NTDLL.RtlEncodeSystemPointer`

EnterCriticalPolicySectionInternal

Ordinal	`332`
Address	`0x108f40`

EnterCriticalSection

Ordinal	`333`
Address	`0x39da1f`
ForwardName	`NTDLL.RtlEnterCriticalSection`

EnterSynchronizationBarrier

Ordinal	`334`
Address	`0x18c2e0`

EnumCalendarInfoExEx

Ordinal	`335`
Address	`0x53e70`

EnumCalendarInfoExW

Ordinal	`336`
Address	`0x134210`

EnumCalendarInfoW

Ordinal	`337`
Address	`0x53cf0`

EnumDateFormatsExEx

Ordinal	`338`
Address	`0x55180`

EnumDateFormatsExW

Ordinal	`339`
Address	`0x53d60`

EnumDateFormatsW

Ordinal	`340`
Address	`0x134280`

EnumDeviceDrivers

Ordinal	`341`
Address	`0x106070`

EnumDynamicTimeZoneInformation

Ordinal	`342`
Address	`0xa1200`

EnumLanguageGroupLocalesW

Ordinal	`343`
Address	`0x1342e0`

EnumPageFilesA

Ordinal	`344`
Address	`0x125090`

EnumPageFilesW

Ordinal	`345`
Address	`0x10e360`

EnumProcessModules

Ordinal	`346`
Address	`0xbb8e0`

EnumProcessModulesEx

Ordinal	`347`
Address	`0xbb3c0`

EnumProcesses

Ordinal	`348`
Address	`0x13bfb0`

EnumResourceLanguagesExA

Ordinal	`349`
Address	`0x182610`

EnumResourceLanguagesExW

Ordinal	`350`
Address	`0x94850`

EnumResourceNamesA

Ordinal	`351`
Address	`0x1826e0`

EnumResourceNamesExA

Ordinal	`352`
Address	`0x182710`

EnumResourceNamesExW

Ordinal	`353`
Address	`0x91720`

EnumResourceNamesW

Ordinal	`354`
Address	`0x910c0`

EnumResourceTypesExA

Ordinal	`355`
Address	`0x1827a0`

EnumResourceTypesExW

Ordinal	`356`
Address	`0x94f80`

EnumSystemCodePagesW

Ordinal	`357`
Address	`0x134300`

EnumSystemFirmwareTables

Ordinal	`358`
Address	`0x10dd30`

EnumSystemGeoID

Ordinal	`359`
Address	`0xb74b0`

EnumSystemGeoNames

Ordinal	`360`
Address	`0x10e830`

EnumSystemLanguageGroupsW

Ordinal	`361`
Address	`0x134320`

EnumSystemLocalesA

Ordinal	`362`
Address	`0x8f790`

EnumSystemLocalesEx

Ordinal	`363`
Address	`0x8f7c0`

EnumSystemLocalesW

Ordinal	`364`
Address	`0x8f2c0`

EnumTimeFormatsEx

Ordinal	`365`
Address	`0x553a0`

EnumTimeFormatsW

Ordinal	`366`
Address	`0x134340`

EnumUILanguagesW

Ordinal	`367`
Address	`0x10b500`

EnumerateExtensionNames

Ordinal	`368`
Address	`0x440d0`

EnumerateStateAtomValues

Ordinal	`369`
Address	`0x118ce0`

EnumerateStateContainerItems

Ordinal	`370`
Address	`0x118da0`

EqualDomainSid

Ordinal	`371`
Address	`0x9cf20`

EqualPrefixSid

Ordinal	`372`
Address	`0x1062b0`

EqualSid

Ordinal	`373`
Address	`0x9d490`

EscapeCommFunction

Ordinal	`374`
Address	`0x116920`

EventActivityIdControl

Ordinal	`375`
Address	`0x39dd8f`
ForwardName	`NTDLL.EtwEventActivityIdControl`

EventEnabled

Ordinal	`376`
Address	`0x39ddbc`
ForwardName	`NTDLL.EtwEventEnabled`

EventProviderEnabled

Ordinal	`377`
Address	`0x39dde7`
ForwardName	`NTDLL.EtwEventProviderEnabled`

EventRegister

Ordinal	`378`
Address	`0x39de13`
ForwardName	`NTDLL.EtwEventRegister`

EventSetInformation

Ordinal	`379`
Address	`0x39de3e`
ForwardName	`NTDLL.EtwEventSetInformation`

EventUnregister

Ordinal	`380`
Address	`0x39de6b`
ForwardName	`NTDLL.EtwEventUnregister`

EventWrite

Ordinal	`381`
Address	`0x39de8f`
ForwardName	`NTDLL.EtwEventWrite`

EventWriteEx

Ordinal	`382`
Address	`0x39deb0`
ForwardName	`NTDLL.EtwEventWriteEx`

EventWriteString

Ordinal	`383`
Address	`0x39ded7`
ForwardName	`NTDLL.EtwEventWriteString`

EventWriteTransfer

Ordinal	`384`
Address	`0x39df04`
ForwardName	`NTDLL.EtwEventWriteTransfer`

ExitProcess

Ordinal	`385`
Address	`0x39df2c`
ForwardName	`NTDLL.RtlExitUserProcess`

ExitThread

Ordinal	`386`
Address	`0x39df50`
ForwardName	`NTDLL.RtlExitUserThread`

ExpandEnvironmentStringsA

Ordinal	`387`
Address	`0xcb520`

ExpandEnvironmentStringsW

Ordinal	`388`
Address	`0xc8f90`

ExpungeConsoleCommandHistoryA

Ordinal	`389`
Address	`0x15b830`

ExpungeConsoleCommandHistoryW

Ordinal	`390`
Address	`0x126920`

ExtensionProgIdExists

Ordinal	`391`
Address	`0x12c7d0`

FatalAppExitA

Ordinal	`392`
Address	`0x190c30`

FatalAppExitW

Ordinal	`393`
Address	`0x190cc0`

FileTimeToLocalFileTime

Ordinal	`394`
Address	`0xdd4b0`

FileTimeToSystemTime

Ordinal	`395`
Address	`0xb5820`

FillConsoleOutputAttribute

Ordinal	`396`
Address	`0x15bfc0`

FillConsoleOutputCharacterA

Ordinal	`397`
Address	`0x1268b0`

FillConsoleOutputCharacterW

Ordinal	`398`
Address	`0x15bff0`

FindActCtxSectionGuid

Ordinal	`399`
Address	`0xbe660`

FindActCtxSectionStringW

Ordinal	`400`
Address	`0xe0000`

FindClose

Ordinal	`401`
Address	`0x5b160`

FindCloseChangeNotification

Ordinal	`402`
Address	`0x110a20`

FindFirstChangeNotificationA

Ordinal	`403`
Address	`0x192300`

FindFirstChangeNotificationW

Ordinal	`404`
Address	`0xf85e0`

FindFirstFileA

Ordinal	`405`
Address	`0x69aa0`

FindFirstFileExA

Ordinal	`406`
Address	`0x108c60`

FindFirstFileExFromAppW

Ordinal	`407`
Address	`0x1053d0`

FindFirstFileExW

Ordinal	`408`
Address	`0x5aa00`

FindFirstFileNameW

Ordinal	`409`
Address	`0xc6e50`

FindFirstFileW

Ordinal	`410`
Address	`0x5a9c0`

FindFirstFreeAce

Ordinal	`411`
Address	`0x182180`

FindFirstStreamW

Ordinal	`412`
Address	`0xc6ad0`

FindFirstVolumeW

Ordinal	`413`
Address	`0xe76d0`

FindNLSString

Ordinal	`414`
Address	`0xc19a0`

FindNLSStringEx

Ordinal	`415`
Address	`0xb5440`

FindNextChangeNotification

Ordinal	`416`
Address	`0x103b00`

FindNextFileA

Ordinal	`417`
Address	`0x94890`

FindNextFileNameW

Ordinal	`418`
Address	`0xc7350`

FindNextFileW

Ordinal	`419`
Address	`0x94c80`

FindNextStreamW

Ordinal	`420`
Address	`0x111fb0`

FindNextVolumeW

Ordinal	`421`
Address	`0xe7900`

FindPackageDependency

Ordinal	`422`
Address	`0x14c670`

FindPackagesByPackageFamily

Ordinal	`423`
Address	`0x78c10`

FindResourceExW

Ordinal	`424`
Address	`0x935f0`

FindResourceW

Ordinal	`425`
Address	`0xf0d10`

FindStringOrdinal

Ordinal	`426`
Address	`0xa2e00`

FindVolumeClose

Ordinal	`427`
Address	`0x104b80`

FlsAlloc

Ordinal	`428`
Address	`0xf6a90`

FlsFree

Ordinal	`429`
Address	`0xfc840`

FlsGetValue

Ordinal	`430`
Address	`0xb46c0`

FlsGetValue2

Ordinal	`431`
Address	`0x39e2da`
ForwardName	`NTDLL.RtlFlsGetValue2`

FlsSetValue

Ordinal	`432`
Address	`0xb5410`

FlushConsoleInputBuffer

Ordinal	`433`
Address	`0x15c2e0`

FlushFileBuffers

Ordinal	`434`
Address	`0xed4c0`

FlushInstructionCache

Ordinal	`435`
Address	`0xe16d0`

FlushProcessWriteBuffers

Ordinal	`436`
Address	`0x39e354`
ForwardName	`NTDLL.NtFlushProcessWriteBuffers`

FlushViewOfFile

Ordinal	`437`
Address	`0xf25d0`

FoldStringW

Ordinal	`438`
Address	`0xf5380`

ForceSyncFgPolicyInternal

Ordinal	`439`
Address	`0x12b600`

FormatApplicationUserModelId

Ordinal	`440`
Address	`0x107e30`

FormatApplicationUserModelIdA

Ordinal	`441`
Address	`0x14ec50`

FormatMessageA

Ordinal	`442`
Address	`0xb7ff0`

FormatMessageW

Ordinal	`443`
Address	`0xb8280`

FreeConsole

Ordinal	`444`
Address	`0x15bdd0`

FreeEnvironmentStringsA

Ordinal	`445`
Address	`0x65a90`

FreeEnvironmentStringsW

Ordinal	`446`
Address	`0x65a90`

FreeGPOListInternalA

Ordinal	`447`
Address	`0x12b650`

FreeGPOListInternalW

Ordinal	`448`
Address	`0x12b690`

FreeLibrary

Ordinal	`449`
Address	`0x19720`

FreeLibraryAndExitThread

Ordinal	`450`
Address	`0xf4700`

FreeLibraryWhenCallbackReturns

Ordinal	`451`
Address	`0x39e4ae`
ForwardName	`NTDLL.TpCallbackUnloadDllOnCompletion`

FreeResource

Ordinal	`452`
Address	`0x111680`

FreeSid

Ordinal	`453`
Address	`0xfa800`

FreeUserPhysicalPages

Ordinal	`454`
Address	`0x182aa0`

GenerateConsoleCtrlEvent

Ordinal	`455`
Address	`0x15c350`

GenerateGPNotificationInternal

Ordinal	`456`
Address	`0x12b6d0`

GetACP

Ordinal	`457`
Address	`0xeea20`

GetAcceptLanguagesA

Ordinal	`458`
Address	`0x87ba0`

GetAcceptLanguagesW

Ordinal	`459`
Address	`0x10e690`

GetAce

Ordinal	`460`
Address	`0x207a0`

GetAclInformation

Ordinal	`461`
Address	`0xe5280`

GetAdjustObjectAttributesForPrivateNamespaceRoutine

Ordinal	`462`
Address	`0x1254e0`

GetAlternatePackageRoots

Ordinal	`463`
Address	`0x13ef80`

GetApiSetModuleBaseName

Ordinal	`464`
Address	`0x1923b0`

GetAppContainerAce

Ordinal	`465`
Address	`0xf51d0`

GetAppContainerNamedObjectPath

Ordinal	`466`
Address	`0xbf810`

GetAppDataFolder

Ordinal	`467`
Address	`0x118e70`

GetAppModelVersion

Ordinal	`468`
Address	`0x14f0c0`

GetApplicationRecoveryCallback

Ordinal	`469`
Address	`0x12c680`

GetApplicationRestartSettings

Ordinal	`470`
Address	`0x1180b0`

GetApplicationUserModelId

Ordinal	`471`
Address	`0x3bb0`

GetApplicationUserModelIdFromToken

Ordinal	`472`
Address	`0x3c70`

GetAppliedGPOListInternalA

Ordinal	`473`
Address	`0x12b730`

GetAppliedGPOListInternalW

Ordinal	`474`
Address	`0x12b7b0`

GetCPFileNameFromRegistry

Ordinal	`475`
Address	`0x5cdb0`

GetCPHashNode

Ordinal	`476`
Address	`0x18a40`

GetCPInfo

Ordinal	`477`
Address	`0x386c0`

GetCPInfoExW

Ordinal	`478`
Address	`0x91750`

GetCachedSigningLevel

Ordinal	`479`
Address	`0x10e750`

GetCalendar

Ordinal	`480`
Address	`0x55ae0`

GetCalendarInfoEx

Ordinal	`481`
Address	`0x5dfa0`

GetCalendarInfoW

Ordinal	`482`
Address	`0x10e520`

GetCommConfig

Ordinal	`483`
Address	`0x18c650`

GetCommMask

Ordinal	`484`
Address	`0x18c8c0`

GetCommModemStatus

Ordinal	`485`
Address	`0x1023f0`

GetCommPorts

Ordinal	`486`
Address	`0x18c9b0`

GetCommProperties

Ordinal	`487`
Address	`0x10f0d0`

GetCommState

Ordinal	`488`
Address	`0x10d100`

GetCommTimeouts

Ordinal	`489`
Address	`0x18cc80`

GetCommandLineA

Ordinal	`490`
Address	`0xfda70`

GetCommandLineW

Ordinal	`491`
Address	`0xf46f0`

GetCompressedFileSizeA

Ordinal	`492`
Address	`0x6a6e0`

GetCompressedFileSizeW

Ordinal	`493`
Address	`0x6a740`

GetComputerNameExA

Ordinal	`494`
Address	`0xc81c0`

GetComputerNameExW

Ordinal	`495`
Address	`0xc82f0`

GetConsoleAliasA

Ordinal	`496`
Address	`0x15b840`

GetConsoleAliasExesA

Ordinal	`497`
Address	`0x15b880`

GetConsoleAliasExesLengthA

Ordinal	`498`
Address	`0x15b950`

GetConsoleAliasExesLengthW

Ordinal	`499`
Address	`0x15b9d0`

GetConsoleAliasExesW

Ordinal	`500`
Address	`0x15b9e0`

GetConsoleAliasW

Ordinal	`501`
Address	`0x15bb20`

GetConsoleAliasesA

Ordinal	`502`
Address	`0x15bb70`

GetConsoleAliasesLengthA

Ordinal	`503`
Address	`0x15bb80`

GetConsoleAliasesLengthW

Ordinal	`504`
Address	`0x15bc60`

GetConsoleAliasesW

Ordinal	`505`
Address	`0x15bc70`

GetConsoleCP

Ordinal	`506`
Address	`0xbf990`

GetConsoleCommandHistoryA

Ordinal	`507`
Address	`0x15bc80`

GetConsoleCommandHistoryLengthA

Ordinal	`508`
Address	`0x15bc90`

GetConsoleCommandHistoryLengthW

Ordinal	`509`
Address	`0x15bca0`

GetConsoleCommandHistoryW

Ordinal	`510`
Address	`0x15bcb0`

GetConsoleCursorInfo

Ordinal	`511`
Address	`0xbf780`

GetConsoleDisplayMode

Ordinal	`512`
Address	`0x126620`

GetConsoleFontSize

Ordinal	`513`
Address	`0x15c400`

GetConsoleHistoryInfo

Ordinal	`514`
Address	`0x15c490`

GetConsoleInputExeNameA

Ordinal	`515`
Address	`0x125f70`

GetConsoleInputExeNameW

Ordinal	`516`
Address	`0x126060`

GetConsoleMode

Ordinal	`517`
Address	`0xf2330`

GetConsoleOriginalTitleA

Ordinal	`518`
Address	`0x15bcc0`

GetConsoleOriginalTitleW

Ordinal	`519`
Address	`0x15bce0`

GetConsoleOutputCP

Ordinal	`520`
Address	`0xbb280`

GetConsoleProcessList

Ordinal	`521`
Address	`0x116850`

GetConsoleScreenBufferInfo

Ordinal	`522`
Address	`0xbfcc0`

GetConsoleScreenBufferInfoEx

Ordinal	`523`
Address	`0xbfd40`

GetConsoleSelectionInfo

Ordinal	`524`
Address	`0xbf5f0`

GetConsoleTitleA

Ordinal	`525`
Address	`0x15bd00`

GetConsoleTitleW

Ordinal	`526`
Address	`0xee610`

GetConsoleWindow

Ordinal	`527`
Address	`0xbf920`

GetCurrencyFormatEx

Ordinal	`528`
Address	`0xc3330`

GetCurrencyFormatW

Ordinal	`529`
Address	`0x136ed0`

GetCurrentActCtx

Ordinal	`530`
Address	`0xed860`

GetCurrentApplicationUserModelId

Ordinal	`531`
Address	`0x107800`

GetCurrentConsoleFont

Ordinal	`532`
Address	`0x15c520`

GetCurrentConsoleFontEx

Ordinal	`533`
Address	`0xbf4a0`

GetCurrentDirectoryA

Ordinal	`534`
Address	`0x1058b0`

GetCurrentDirectoryW

Ordinal	`535`
Address	`0xea650`

GetCurrentPackageApplicationContext

Ordinal	`536`
Address	`0x112050`

GetCurrentPackageApplicationResourcesContext

Ordinal	`537`
Address	`0x104280`

GetCurrentPackageContext

Ordinal	`538`
Address	`0x115790`

GetCurrentPackageFamilyName

Ordinal	`539`
Address	`0x74300`

GetCurrentPackageFullName

Ordinal	`540`
Address	`0x2ac20`

GetCurrentPackageGlobalizationContext

Ordinal	`541`
Address	`0x102830`

GetCurrentPackageId

Ordinal	`542`
Address	`0xf6f70`

GetCurrentPackageInfo

Ordinal	`543`
Address	`0xc2a70`

GetCurrentPackageInfo2

Ordinal	`544`
Address	`0xc2a20`

GetCurrentPackageInfo3

Ordinal	`545`
Address	`0xc2ac0`

GetCurrentPackageInfo_PackageNameAliases

Ordinal	`546`
Address	`0x14c700`

GetCurrentPackagePath

Ordinal	`547`
Address	`0x1501d0`

GetCurrentPackagePath2

Ordinal	`548`
Address	`0xb18b0`

GetCurrentPackageResourcesContext

Ordinal	`549`
Address	`0x1009d0`

GetCurrentPackageSecurityContext

Ordinal	`550`
Address	`0x14fa50`

GetCurrentProcess

Ordinal	`551`
Address	`0x1254c0`

GetCurrentProcessId

Ordinal	`552`
Address	`0x101ec0`

GetCurrentProcessorNumber

Ordinal	`553`
Address	`0x39edbf`
ForwardName	`NTDLL.RtlGetCurrentProcessorNumber`

GetCurrentProcessorNumberEx

Ordinal	`554`
Address	`0x39edfe`
ForwardName	`NTDLL.RtlGetCurrentProcessorNumberEx`

GetCurrentTargetPlatformContext

Ordinal	`555`
Address	`0x14fad0`

GetCurrentThread

Ordinal	`556`
Address	`0x1254d0`

GetCurrentThreadId

Ordinal	`557`
Address	`0xb03c0`

GetCurrentThreadStackLimits

Ordinal	`558`
Address	`0xf69a0`

GetDateFormatA

Ordinal	`559`
Address	`0x101d40`

GetDateFormatEx

Ordinal	`560`
Address	`0x5cb50`

GetDateFormatW

Ordinal	`561`
Address	`0xee290`

GetDeveloperDriveEnablementState

Ordinal	`562`
Address	`0x1925b0`

GetDeviceDriverBaseNameA

Ordinal	`563`
Address	`0xed1d0`

GetDeviceDriverBaseNameW

Ordinal	`564`
Address	`0xed090`

GetDeviceDriverFileNameA

Ordinal	`565`
Address	`0xed130`

GetDeviceDriverFileNameW

Ordinal	`566`
Address	`0xecff0`

GetDiskFreeSpaceA

Ordinal	`567`
Address	`0xfb1c0`

GetDiskFreeSpaceExA

Ordinal	`568`
Address	`0x69fb0`

GetDiskFreeSpaceExW

Ordinal	`569`
Address	`0x6a470`

GetDiskFreeSpaceW

Ordinal	`570`
Address	`0xfb250`

GetDiskSpaceInformationA

Ordinal	`571`
Address	`0x192a40`

GetDiskSpaceInformationW

Ordinal	`572`
Address	`0x192ac0`

GetDiskSpaceInformationWCOS

Ordinal	`573`
Address	`0x192c90`

GetDriveTypeA

Ordinal	`574`
Address	`0x6a0e0`

GetDriveTypeW

Ordinal	`575`
Address	`0x1d7a0`

GetDurationFormatEx

Ordinal	`576`
Address	`0x53dc0`

GetDynamicTimeZoneInformation

Ordinal	`577`
Address	`0x9e5c0`

GetDynamicTimeZoneInformationEffectiveYears

Ordinal	`578`
Address	`0x107b10`

GetEffectivePackageStatusForUser

Ordinal	`579`
Address	`0x248c0`

GetEffectivePackageStatusForUserSid

Ordinal	`580`
Address	`0xf2230`

GetEightBitStringToUnicodeSizeRoutine

Ordinal	`581`
Address	`0x125980`

GetEightBitStringToUnicodeStringRoutine

Ordinal	`582`
Address	`0x1023e0`

GetEnabledXStateFeatures

Ordinal	`583`
Address	`0xff0e0`

GetEnvironmentStrings

Ordinal	`584`
Address	`0x111d20`

GetEnvironmentStringsA

Ordinal	`585`
Address	`0x111d20`

GetEnvironmentStringsW

Ordinal	`586`
Address	`0xdcae0`

GetEnvironmentVariableA

Ordinal	`587`
Address	`0xdf0b0`

GetEnvironmentVariableW

Ordinal	`588`
Address	`0xddc00`

GetEraNameCountedString

Ordinal	`589`
Address	`0x54e30`

GetErrorMode

Ordinal	`590`
Address	`0x1ce10`

GetExitCodeProcess

Ordinal	`591`
Address	`0xdd3b0`

GetExitCodeThread

Ordinal	`592`
Address	`0xbc880`

GetExtensionApplicationUserModelId

Ordinal	`593`
Address	`0x43a20`

GetExtensionProgIds

Ordinal	`594`
Address	`0x12c7d0`

GetExtensionProperty

Ordinal	`595`
Address	`0x44900`

GetExtensionProperty2

Ordinal	`596`
Address	`0x44380`

GetFallbackDisplayName

Ordinal	`597`
Address	`0xbaa30`

GetFeatureToggleConfiguration

Ordinal	`598`
Address	`0x39f24b`
ForwardName	`NTDLL.RtlGetFeatureToggleConfiguration`

GetFeatureTogglesChangeToken

Ordinal	`599`
Address	`0x39f28f`
ForwardName	`NTDLL.RtlGetFeatureTogglesChangeToken`

GetFileAttributesA

Ordinal	`600`
Address	`0x5b280`

GetFileAttributesExA

Ordinal	`601`
Address	`0x696b0`

GetFileAttributesExFromAppW

Ordinal	`602`
Address	`0x105510`

GetFileAttributesExW

Ordinal	`603`
Address	`0x1c320`

GetFileAttributesW

Ordinal	`604`
Address	`0x5b330`

GetFileInformationByHandle

Ordinal	`605`
Address	`0x2cca0`

GetFileInformationByHandleEx

Ordinal	`606`
Address	`0x1c4d0`

GetFileInformationByName

Ordinal	`607`
Address	`0xf47b0`

GetFileMUIInfo

Ordinal	`608`
Address	`0x136fb0`

GetFileMUIPath

Ordinal	`609`
Address	`0x107ce0`

GetFileSecurityW

Ordinal	`610`
Address	`0xc5b30`

GetFileSize

Ordinal	`611`
Address	`0x6a930`

GetFileSizeEx

Ordinal	`612`
Address	`0xcaa70`

GetFileTime

Ordinal	`613`
Address	`0xe3290`

GetFileType

Ordinal	`614`
Address	`0xc7760`

GetFileVersionInfoA

Ordinal	`615`
Address	`0xe0130`

GetFileVersionInfoByHandle

Ordinal	`616`
Address	`0x6aa00`

GetFileVersionInfoExA

Ordinal	`617`
Address	`0xe0080`

GetFileVersionInfoExW

Ordinal	`618`
Address	`0xe0210`

GetFileVersionInfoSizeA

Ordinal	`619`
Address	`0xca460`

GetFileVersionInfoSizeExA

Ordinal	`620`
Address	`0xca340`

GetFileVersionInfoSizeExW

Ordinal	`621`
Address	`0xca4f0`

GetFileVersionInfoSizeW

Ordinal	`622`
Address	`0xfe250`

GetFileVersionInfoW

Ordinal	`623`
Address	`0xe01e0`

GetFinalPathNameByHandleA

Ordinal	`624`
Address	`0x10ada0`

GetFinalPathNameByHandleW

Ordinal	`625`
Address	`0x20ea0`

GetFullPathNameA

Ordinal	`626`
Address	`0xedab0`

GetFullPathNameW

Ordinal	`627`
Address	`0x1b270`

GetGPOListInternalA

Ordinal	`628`
Address	`0x12b830`

GetGPOListInternalW

Ordinal	`629`
Address	`0x12b8b0`

GetGamingDeviceModelInformation

Ordinal	`630`
Address	`0x12db40`

GetGeoInfoEx

Ordinal	`631`
Address	`0x57570`

GetGeoInfoW

Ordinal	`632`
Address	`0x5d680`

GetHandleInformation

Ordinal	`633`
Address	`0xf1370`

GetHivePath

Ordinal	`634`
Address	`0x118f30`

GetIdForPackageDependencyContext

Ordinal	`635`
Address	`0x14c7e0`

GetIntegratedDisplaySize

Ordinal	`636`
Address	`0x112740`

GetIoRingInfo

Ordinal	`637`
Address	`0x1334e0`

GetIsEdpEnabled

Ordinal	`638`
Address	`0xf40f0`

GetIsWdagEnabled

Ordinal	`639`
Address	`0x102a90`

GetKernelObjectSecurity

Ordinal	`640`
Address	`0xe98f0`

GetLargePageMinimum

Ordinal	`641`
Address	`0x114c20`

GetLargestConsoleWindowSize

Ordinal	`642`
Address	`0xbf570`

GetLastError

Ordinal	`643`
Address	`0xb7aa0`

GetLengthSid

Ordinal	`644`
Address	`0x82c50`

GetLocalTime

Ordinal	`645`
Address	`0x9f6c0`

GetLocaleInfoA

Ordinal	`646`
Address	`0x5eb40`

GetLocaleInfoEx

Ordinal	`647`
Address	`0x5f1f0`

GetLocaleInfoHelper

Ordinal	`648`
Address	`0x5f260`

GetLocaleInfoW

Ordinal	`649`
Address	`0x5f0c0`

GetLogicalDriveStringsW

Ordinal	`650`
Address	`0xdda90`

GetLogicalDrives

Ordinal	`651`
Address	`0xddb90`

GetLogicalProcessorInformation

Ordinal	`652`
Address	`0xfd120`

GetLogicalProcessorInformationEx

Ordinal	`653`
Address	`0xfa830`

GetLongPathNameA

Ordinal	`654`
Address	`0x138780`

GetLongPathNameW

Ordinal	`655`
Address	`0x5a1c0`

GetMachineTypeAttributes

Ordinal	`656`
Address	`0x10b680`

GetMappedFileNameA

Ordinal	`657`
Address	`0x13c230`

GetMappedFileNameW

Ordinal	`658`
Address	`0xdf960`

GetMemoryErrorHandlingCapabilities

Ordinal	`659`
Address	`0x182ad0`

GetMemoryNumaClosestInitiatorNode

Ordinal	`660`
Address	`0x182b60`

GetMemoryNumaPerformanceInformation

Ordinal	`661`
Address	`0x182b60`

GetModuleBaseNameA

Ordinal	`662`
Address	`0xb8d40`

GetModuleBaseNameW

Ordinal	`663`
Address	`0xb8df0`

GetModuleFileNameA

Ordinal	`664`
Address	`0xdcff0`

GetModuleFileNameExA

Ordinal	`665`
Address	`0xb9090`

GetModuleFileNameExW

Ordinal	`666`
Address	`0xb9150`

GetModuleFileNameW

Ordinal	`667`
Address	`0xb6880`

GetModuleHandleA

Ordinal	`668`
Address	`0xcda90`

GetModuleHandleExA

Ordinal	`669`
Address	`0xe0dd0`

GetModuleHandleExW

Ordinal	`670`
Address	`0x1c040`

GetModuleHandleW

Ordinal	`671`
Address	`0x9ec0`

GetModuleInformation

Ordinal	`672`
Address	`0xb95c0`

GetNLSVersion

Ordinal	`673`
Address	`0xf9890`

GetNLSVersionEx

Ordinal	`674`
Address	`0xf9900`

GetNamedLocaleHashNode

Ordinal	`675`
Address	`0x13790`

GetNamedPipeAttribute

Ordinal	`676`
Address	`0xde5b0`

GetNamedPipeClientComputerNameW

Ordinal	`677`
Address	`0xde480`

GetNamedPipeHandleStateW

Ordinal	`678`
Address	`0x1049e0`

GetNamedPipeInfo

Ordinal	`679`
Address	`0x1048f0`

GetNativeSystemInfo

Ordinal	`680`
Address	`0xdc6f0`

GetNextFgPolicyRefreshInfoInternal

Ordinal	`681`
Address	`0x12b930`

GetNumaHighestNodeNumber

Ordinal	`682`
Address	`0x106b30`

GetNumaNodeProcessorMask2

Ordinal	`683`
Address	`0x192fb0`

GetNumaNodeProcessorMaskEx

Ordinal	`684`
Address	`0x1079e0`

GetNumaProximityNodeEx

Ordinal	`685`
Address	`0x193170`

GetNumberFormatEx

Ordinal	`686`
Address	`0xc40c0`

GetNumberFormatW

Ordinal	`687`
Address	`0xc4030`

GetNumberOfConsoleInputEvents

Ordinal	`688`
Address	`0xf2bb0`

GetNumberOfConsoleMouseButtons

Ordinal	`689`
Address	`0x15c5b0`

GetOEMCP

Ordinal	`690`
Address	`0x107010`

GetOsManufacturingMode

Ordinal	`691`
Address	`0x138a70`

GetOsSafeBootMode

Ordinal	`692`
Address	`0x104390`

GetOverlappedResult

Ordinal	`693`
Address	`0x19f30`

GetOverlappedResultEx

Ordinal	`694`
Address	`0x19980`

GetPackageApplicationContext

Ordinal	`695`
Address	`0x14fb50`

GetPackageApplicationIds

Ordinal	`696`
Address	`0x114320`

GetPackageApplicationProperty

Ordinal	`697`
Address	`0x116200`

GetPackageApplicationPropertyString

Ordinal	`698`
Address	`0x1124e0`

GetPackageApplicationResourcesContext

Ordinal	`699`
Address	`0x14fb70`

GetPackageContext

Ordinal	`700`
Address	`0x14fbc0`

GetPackageDependencyInformation

Ordinal	`701`
Address	`0x14c850`

GetPackageFamilyName

Ordinal	`702`
Address	`0x23f30`

GetPackageFamilyNameFromFilePath

Ordinal	`703`
Address	`0x112960`

GetPackageFamilyNameFromProgId

Ordinal	`704`
Address	`0x12c7d0`

GetPackageFamilyNameFromToken

Ordinal	`705`
Address	`0x4140`

GetPackageFullName

Ordinal	`706`
Address	`0x227c0`

GetPackageFullNameFromToken

Ordinal	`707`
Address	`0x23ba0`

GetPackageGlobalizationContext

Ordinal	`708`
Address	`0x14fc00`

GetPackageGlobalizationProperty

Ordinal	`709`
Address	`0x106bb0`

GetPackageGraphRevisionId

Ordinal	`710`
Address	`0x14c960`

GetPackageId

Ordinal	`711`
Address	`0x74e50`

GetPackageInfo

Ordinal	`712`
Address	`0x8e570`

GetPackageInfo2

Ordinal	`713`
Address	`0x8e530`

GetPackageInfo3

Ordinal	`714`
Address	`0x8e720`

GetPackageNameAliasesByPackageFullName

Ordinal	`715`
Address	`0x14c9a0`

GetPackageOSMaxVersionTested

Ordinal	`716`
Address	`0x14fc50`

GetPackagePath

Ordinal	`717`
Address	`0xa4e50`

GetPackagePathByFullName

Ordinal	`718`
Address	`0xb2020`

GetPackagePathByFullName2

Ordinal	`719`
Address	`0xb2440`

GetPackagePathOnVolume

Ordinal	`720`
Address	`0x150620`

GetPackageProperty

Ordinal	`721`
Address	`0x14fc90`

GetPackagePropertyString

Ordinal	`722`
Address	`0x14ff80`

GetPackageResourcesContext

Ordinal	`723`
Address	`0x14fff0`

GetPackageResourcesProperty

Ordinal	`724`
Address	`0x1052a0`

GetPackageSecurityContext

Ordinal	`725`
Address	`0x10a840`

GetPackageSecurityProperty

Ordinal	`726`
Address	`0xffb00`

GetPackageStatus

Ordinal	`727`
Address	`0x24940`

GetPackageStatusForUser

Ordinal	`728`
Address	`0xf3000`

GetPackageStatusForUserSid

Ordinal	`729`
Address	`0xf2200`

GetPackageTargetPlatformProperty

Ordinal	`730`
Address	`0xf8420`

GetPackageVolumeSisPath

Ordinal	`731`
Address	`0x2c050`

GetPackagedDataForFile

Ordinal	`732`
Address	`0x4810`

GetPackagesByPackageFamily

Ordinal	`733`
Address	`0x1041b0`

GetPerformanceInfo

Ordinal	`734`
Address	`0x118570`

GetPersistedFileLocationW

Ordinal	`735`
Address	`0x1133b0`

GetPersistedRegistryLocationW

Ordinal	`736`
Address	`0xe7110`

GetPersistedRegistryValueW

Ordinal	`737`
Address	`0xe3090`

GetPhysicallyInstalledSystemMemory

Ordinal	`738`
Address	`0xbbc20`

GetPreviousFgPolicyRefreshInfoInternal

Ordinal	`739`
Address	`0x12b980`

GetPriorityClass

Ordinal	`740`
Address	`0xdf440`

GetPrivateObjectSecurity

Ordinal	`741`
Address	`0x1821c0`

GetProcAddress

Ordinal	`742`
Address	`0x9f50`

GetProcAddressForCaller

Ordinal	`743`
Address	`0xb6ed0`

GetProcessDefaultCpuSetMasks

Ordinal	`744`
Address	`0x191250`

GetProcessDefaultCpuSets

Ordinal	`745`
Address	`0x191330`

GetProcessGroupAffinity

Ordinal	`746`
Address	`0x110b00`

GetProcessHandleCount

Ordinal	`747`
Address	`0x101f60`

GetProcessHeap

Ordinal	`748`
Address	`0xb8c60`

GetProcessHeaps

Ordinal	`749`
Address	`0x1932f0`

GetProcessId

Ordinal	`750`
Address	`0x8dfd0`

GetProcessIdOfThread

Ordinal	`751`
Address	`0xe68a0`

GetProcessImageFileNameA

Ordinal	`752`
Address	`0xf6df0`

GetProcessImageFileNameW

Ordinal	`753`
Address	`0xe5f10`

GetProcessInformation

Ordinal	`754`
Address	`0xe33c0`

GetProcessMemoryInfo

Ordinal	`755`
Address	`0xc20e0`

GetProcessMitigationPolicy

Ordinal	`756`
Address	`0x19ad0`

GetProcessPreferredUILanguages

Ordinal	`757`
Address	`0x111b70`

GetProcessPriorityBoost

Ordinal	`758`
Address	`0x112100`

GetProcessShutdownParameters

Ordinal	`759`
Address	`0x191410`

GetProcessTimes

Ordinal	`760`
Address	`0xc9fa0`

GetProcessVersion

Ordinal	`761`
Address	`0x1c1a0`

GetProcessWorkingSetSize

Ordinal	`762`
Address	`0xf8b90`

GetProcessWorkingSetSizeEx

Ordinal	`763`
Address	`0xf8bb0`

GetProcessesUsingPackageDependency

Ordinal	`764`
Address	`0x14cb00`

GetProcessorSystemCycleTime

Ordinal	`765`
Address	`0x107e40`

GetProductInfo

Ordinal	`766`
Address	`0xed830`

GetProtocolAumid

Ordinal	`767`
Address	`0x150770`

GetProtocolProperty

Ordinal	`768`
Address	`0x1507a0`

GetPtrCalData

Ordinal	`769`
Address	`0x10e660`

GetPtrCalDataArray

Ordinal	`770`
Address	`0x53c50`

GetPublisherCacheFolder

Ordinal	`771`
Address	`0x119000`

GetPublisherRootFolder

Ordinal	`772`
Address	`0x1190d0`

GetQueuedCompletionStatus

Ordinal	`773`
Address	`0x1b0d0`

GetQueuedCompletionStatusEx

Ordinal	`774`
Address	`0xc2880`

GetRegistryExtensionFlags

Ordinal	`775`
Address	`0x13a5c0`

GetRegistryValueWithFallbackW

Ordinal	`776`
Address	`0xf6c80`

GetResolvedPackageFullNameForPackageDependency

Ordinal	`777`
Address	`0x14cb80`

GetResolvedPackageFullNameForPackageDependency2

Ordinal	`778`
Address	`0x14cbf0`

GetRoamingLastObservedChangeTime

Ordinal	`779`
Address	`0x13efb0`

GetRuntimeAttestationReport

Ordinal	`780`
Address	`0x1914b0`

GetSecureSystemAppDataFolder

Ordinal	`781`
Address	`0x119190`

GetSecurityDescriptorControl

Ordinal	`782`
Address	`0xea340`

GetSecurityDescriptorDacl

Ordinal	`783`
Address	`0xcb4b0`

GetSecurityDescriptorGroup

Ordinal	`784`
Address	`0xf73d0`

GetSecurityDescriptorLength

Ordinal	`785`
Address	`0xfd920`

GetSecurityDescriptorOwner

Ordinal	`786`
Address	`0xf7140`

GetSecurityDescriptorRMControl

Ordinal	`787`
Address	`0x106c40`

GetSecurityDescriptorSacl

Ordinal	`788`
Address	`0xe92c0`

GetSerializedAtomBytes

Ordinal	`789`
Address	`0x119250`

GetSharedLocalFolder

Ordinal	`790`
Address	`0x13f060`

GetShortPathNameW

Ordinal	`791`
Address	`0x5b890`

GetSidIdentifierAuthority

Ordinal	`792`
Address	`0xe6860`

GetSidLengthRequired

Ordinal	`793`
Address	`0xf9a70`

GetSidSubAuthority

Ordinal	`794`
Address	`0xe1580`

GetSidSubAuthorityCount

Ordinal	`795`
Address	`0xeb940`

GetStagedPackageOrigin

Ordinal	`796`
Address	`0x2a320`

GetStagedPackageOrigin2

Ordinal	`797`
Address	`0x1501f0`

GetStagedPackagePathByFullName

Ordinal	`798`
Address	`0xb24a0`

GetStagedPackagePathByFullName2

Ordinal	`799`
Address	`0xb2500`

GetStartupInfoW

Ordinal	`800`
Address	`0xf2d00`

GetStateContainerDepth

Ordinal	`801`
Address	`0x13f120`

GetStateFolder

Ordinal	`802`
Address	`0x119310`

GetStateRootFolder

Ordinal	`803`
Address	`0x1193e0`

GetStateRootFolderBase

Ordinal	`804`
Address	`0x1194a0`

GetStateSettingsFolder

Ordinal	`805`
Address	`0x13f1d0`

GetStateVersion

Ordinal	`806`
Address	`0x13f290`

GetStdHandle

Ordinal	`807`
Address	`0xeb620`

GetStringScripts

Ordinal	`808`
Address	`0x8f4e0`

GetStringTableEntry

Ordinal	`809`
Address	`0x91950`

GetStringTypeA

Ordinal	`810`
Address	`0x8ed40`

GetStringTypeExW

Ordinal	`811`
Address	`0x3dd50`

GetStringTypeW

Ordinal	`812`
Address	`0x8ee40`

GetSystemAppDataFolder

Ordinal	`813`
Address	`0x119560`

GetSystemAppDataKey

Ordinal	`814`
Address	`0x119620`

GetSystemCpuSetInformation

Ordinal	`815`
Address	`0x1915b0`

GetSystemDefaultLCID

Ordinal	`816`
Address	`0xe7220`

GetSystemDefaultLangID

Ordinal	`817`
Address	`0x567f0`

GetSystemDefaultLocaleName

Ordinal	`818`
Address	`0x5da70`

GetSystemDefaultUILanguage

Ordinal	`819`
Address	`0x1010b0`

GetSystemDirectoryA

Ordinal	`820`
Address	`0x10b1e0`

GetSystemDirectoryW

Ordinal	`821`
Address	`0xde760`

GetSystemFileCacheSize

Ordinal	`822`
Address	`0x182b70`

GetSystemFirmwareTable

Ordinal	`823`
Address	`0xbc380`

GetSystemInfo

Ordinal	`824`
Address	`0x8ba00`

GetSystemLeapSecondInformation

Ordinal	`825`
Address	`0x18d760`

GetSystemMetadataPath

Ordinal	`826`
Address	`0x1507e0`

GetSystemMetadataPathForPackage

Ordinal	`827`
Address	`0x24f30`

GetSystemMetadataPathForPackageFamily

Ordinal	`828`
Address	`0x1155c0`

GetSystemPreferredUILanguages

Ordinal	`829`
Address	`0xea710`

GetSystemStateRootFolder

Ordinal	`830`
Address	`0x13ef80`

GetSystemTime

Ordinal	`831`
Address	`0xa1700`

GetSystemTimeAdjustment

Ordinal	`832`
Address	`0xfdd60`

GetSystemTimeAdjustmentPrecise

Ordinal	`833`
Address	`0x18d7e0`

GetSystemTimeAsFileTime

Ordinal	`834`
Address	`0xb7490`

GetSystemTimePreciseAsFileTime

Ordinal	`835`
Address	`0xb6100`

GetSystemTimes

Ordinal	`836`
Address	`0xc2320`

GetSystemWindowsDirectoryA

Ordinal	`837`
Address	`0x107da0`

GetSystemWindowsDirectoryW

Ordinal	`838`
Address	`0xe9750`

GetSystemWow64Directory2A

Ordinal	`839`
Address	`0xe9370`

GetSystemWow64Directory2W

Ordinal	`840`
Address	`0xe9660`

GetSystemWow64DirectoryA

Ordinal	`841`
Address	`0xc6540`

GetSystemWow64DirectoryW

Ordinal	`842`
Address	`0xc6580`

GetTargetPlatformContext

Ordinal	`843`
Address	`0xfb180`

GetTempFileNameA

Ordinal	`844`
Address	`0x110690`

GetTempFileNameW

Ordinal	`845`
Address	`0xf7750`

GetTempPath2A

Ordinal	`846`
Address	`0x192ef0`

GetTempPath2W

Ordinal	`847`
Address	`0x11e070`

GetTempPathA

Ordinal	`848`
Address	`0x111bc0`

GetTempPathW

Ordinal	`849`
Address	`0xef820`

GetThreadContext

Ordinal	`850`
Address	`0xf1d80`

GetThreadDescription

Ordinal	`851`
Address	`0xe3840`

GetThreadEnabledXStateFeatures

Ordinal	`852`
Address	`0x12da40`

GetThreadErrorMode

Ordinal	`853`
Address	`0x108e20`

GetThreadGroupAffinity

Ordinal	`854`
Address	`0x104890`

GetThreadIOPendingFlag

Ordinal	`855`
Address	`0xfd7c0`

GetThreadId

Ordinal	`856`
Address	`0x8e150`

GetThreadIdealProcessorEx

Ordinal	`857`
Address	`0xb5670`

GetThreadInformation

Ordinal	`858`
Address	`0xba8e0`

GetThreadLocale

Ordinal	`859`
Address	`0xdf420`

GetThreadPreferredUILanguages

Ordinal	`860`
Address	`0xefa90`

GetThreadPriority

Ordinal	`861`
Address	`0xcb3a0`

GetThreadPriorityBoost

Ordinal	`862`
Address	`0xf2ec0`

GetThreadSelectedCpuSetMasks

Ordinal	`863`
Address	`0x18e2e0`

GetThreadSelectedCpuSets

Ordinal	`864`
Address	`0x18e3c0`

GetThreadTimes

Ordinal	`865`
Address	`0xc2740`

GetThreadUILanguage

Ordinal	`866`
Address	`0xbadc0`

GetTickCount

Ordinal	`867`
Address	`0xb5900`

GetTickCount64

Ordinal	`868`
Address	`0xb6b20`

GetTimeFormatA

Ordinal	`869`
Address	`0x9dc70`

GetTimeFormatEx

Ordinal	`870`
Address	`0x5cca0`

GetTimeFormatW

Ordinal	`871`
Address	`0xed650`

GetTimeZoneInformation

Ordinal	`872`
Address	`0xe1200`

GetTimeZoneInformationForYear

Ordinal	`873`
Address	`0xa0d40`

GetTokenInformation

Ordinal	`874`
Address	`0x1b7a0`

GetTraceEnableFlags

Ordinal	`875`
Address	`0x3a0b46`
ForwardName	`NTDLL.EtwGetTraceEnableFlags`

GetTraceEnableLevel

Ordinal	`876`
Address	`0x3a0b77`
ForwardName	`NTDLL.EtwGetTraceEnableLevel`

GetTraceLoggerHandle

Ordinal	`877`
Address	`0x3a0ba9`
ForwardName	`NTDLL.EtwGetTraceLoggerHandle`

GetUILanguageInfo

Ordinal	`878`
Address	`0x103a70`

GetUnicodeStringToEightBitSizeRoutine

Ordinal	`879`
Address	`0x115510`

GetUnicodeStringToEightBitStringRoutine

Ordinal	`880`
Address	`0x1048e0`

GetUserDefaultGeoName

Ordinal	`881`
Address	`0x575f0`

GetUserDefaultLCID

Ordinal	`882`
Address	`0x3d800`

GetUserDefaultLangID

Ordinal	`883`
Address	`0x10d0a0`

GetUserDefaultLocaleName

Ordinal	`884`
Address	`0x878a0`

GetUserDefaultUILanguage

Ordinal	`885`
Address	`0xbb0a0`

GetUserGeoID

Ordinal	`886`
Address	`0x576f0`

GetUserInfo

Ordinal	`887`
Address	`0x133840`

GetUserInfoWord

Ordinal	`888`
Address	`0x133870`

GetUserOverrideString

Ordinal	`889`
Address	`0x3cd10`

GetUserOverrideWord

Ordinal	`890`
Address	`0x3d530`

GetUserPreferredUILanguages

Ordinal	`891`
Address	`0xfc450`

GetVersion

Ordinal	`892`
Address	`0xf1d20`

GetVersionExA

Ordinal	`893`
Address	`0xc5e40`

GetVersionExW

Ordinal	`894`
Address	`0xc5fb0`

GetVolumeInformationA

Ordinal	`895`
Address	`0x2c2e0`

GetVolumeInformationByHandleW

Ordinal	`896`
Address	`0x2c970`

GetVolumeInformationW

Ordinal	`897`
Address	`0x2c5f0`

GetVolumeNameForVolumeMountPointW

Ordinal	`898`
Address	`0x1ecd0`

GetVolumePathNameW

Ordinal	`899`
Address	`0xff0a0`

GetVolumePathNamesForVolumeNameW

Ordinal	`900`
Address	`0xe4b70`

GetWindowsAccountDomainSid

Ordinal	`901`
Address	`0x9d4e0`

GetWindowsDirectoryA

Ordinal	`902`
Address	`0x107d50`

GetWindowsDirectoryW

Ordinal	`903`
Address	`0xf4170`

GetWriteWatch

Ordinal	`904`
Address	`0xe6df0`

GetWsChanges

Ordinal	`905`
Address	`0x13c170`

GetWsChangesEx

Ordinal	`906`
Address	`0x13c1a0`

GetXStateFeaturesMask

Ordinal	`907`
Address	`0x12da70`

GlobalAlloc

Ordinal	`908`
Address	`0x677b0`

GlobalFlags

Ordinal	`909`
Address	`0x108170`

GlobalFree

Ordinal	`910`
Address	`0x67a10`

GlobalHandle

Ordinal	`911`
Address	`0xcad60`

GlobalLock

Ordinal	`912`
Address	`0xc1bf0`

GlobalMemoryStatusEx

Ordinal	`913`
Address	`0xbc0a0`

GlobalReAlloc

Ordinal	`914`
Address	`0xc9b60`

GlobalSize

Ordinal	`915`
Address	`0xe46f0`

GlobalUnlock

Ordinal	`916`
Address	`0xc1db0`

GuardCheckLongJumpTarget

Ordinal	`917`
Address	`0x1933e0`

HasPolicyForegroundProcessingCompletedInternal

Ordinal	`918`
Address	`0x12b9d0`

HashData

Ordinal	`919`
Address	`0xbcc20`

HeapAlloc

Ordinal	`920`
Address	`0x3a0f23`
ForwardName	`NTDLL.RtlAllocateHeap`

HeapCompact

Ordinal	`921`
Address	`0x1124b0`

HeapCreate

Ordinal	`922`
Address	`0xef7a0`

HeapDestroy

Ordinal	`923`
Address	`0xfa300`

HeapFree

Ordinal	`924`
Address	`0x3a0f65`
ForwardName	`NTDLL.RtlFreeHeap`

HeapLock

Ordinal	`925`
Address	`0x10e6a0`

HeapQueryInformation

Ordinal	`926`
Address	`0x107920`

HeapReAlloc

Ordinal	`927`
Address	`0x3a0fa1`
ForwardName	`NTDLL.RtlReAllocateHeap`

HeapSetInformation

Ordinal	`928`
Address	`0xfc3f0`

HeapSize

Ordinal	`929`
Address	`0x3a0fd5`
ForwardName	`NTDLL.RtlSizeHeap`

HeapSummary

Ordinal	`930`
Address	`0x193310`

HeapUnlock

Ordinal	`931`
Address	`0x110130`

HeapValidate

Ordinal	`932`
Address	`0xf2480`

HeapWalk

Ordinal	`933`
Address	`0x1ac50`

IdnToAscii

Ordinal	`934`
Address	`0xe1ae0`

IdnToNameprepUnicode

Ordinal	`935`
Address	`0x1376a0`

IdnToUnicode

Ordinal	`936`
Address	`0x101ee0`

ImpersonateAnonymousToken

Ordinal	`937`
Address	`0x100770`

ImpersonateLoggedOnUser

Ordinal	`938`
Address	`0xdf7d0`

ImpersonateNamedPipeClient

Ordinal	`939`
Address	`0xee170`

ImpersonateSelf

Ordinal	`940`
Address	`0xe86b0`

IncrementPackageStatusVersion

Ordinal	`941`
Address	`0x113000`

InitOnceBeginInitialize

Ordinal	`942`
Address	`0x1b1e0`

InitOnceComplete

Ordinal	`943`
Address	`0xaf780`

InitOnceExecuteOnce

Ordinal	`944`
Address	`0xb53d0`

InitOnceInitialize

Ordinal	`945`
Address	`0x3a110c`
ForwardName	`NTDLL.RtlRunOnceInitialize`

InitializeAcl

Ordinal	`946`
Address	`0x9d6b0`

InitializeConditionVariable

Ordinal	`947`
Address	`0x3a1151`
ForwardName	`NTDLL.RtlInitializeConditionVariable`

InitializeContext

Ordinal	`948`
Address	`0x1035c0`

InitializeContext2

Ordinal	`949`
Address	`0x103620`

InitializeCriticalSection

Ordinal	`950`
Address	`0x3a11b5`
ForwardName	`NTDLL.RtlInitializeCriticalSection`

InitializeCriticalSectionAndSpinCount

Ordinal	`951`
Address	`0xc9b30`

InitializeCriticalSectionEx

Ordinal	`952`
Address	`0xc68a0`

InitializeEnclave

Ordinal	`953`
Address	`0x1161c0`

InitializeProcThreadAttributeList

Ordinal	`954`
Address	`0xfae30`

InitializeProcessForWsWatch

Ordinal	`955`
Address	`0x13c1d0`

InitializeSListHead

Ordinal	`956`
Address	`0x3a127e`
ForwardName	`NTDLL.RtlInitializeSListHead`

InitializeSRWLock

Ordinal	`957`
Address	`0x3a12ad`
ForwardName	`NTDLL.RtlInitializeSRWLock`

InitializeSecurityDescriptor

Ordinal	`958`
Address	`0x9d680`

InitializeSid

Ordinal	`959`
Address	`0xef770`

InitializeSynchronizationBarrier

Ordinal	`960`
Address	`0x18c350`

InstallELAMCertificateInfo

Ordinal	`961`
Address	`0x182200`

InterlockedFlushSList

Ordinal	`962`
Address	`0x3a1345`
ForwardName	`NTDLL.RtlInterlockedFlushSList`

InterlockedPopEntrySList

Ordinal	`963`
Address	`0x3a137d`
ForwardName	`NTDLL.RtlInterlockedPopEntrySList`

InterlockedPushEntrySList

Ordinal	`964`
Address	`0x3a13b9`
ForwardName	`NTDLL.RtlInterlockedPushEntrySList`

InterlockedPushListSList

Ordinal	`965`
Address	`0x3a13f5`
ForwardName	`NTDLL.RtlInterlockedPushListSList`

InterlockedPushListSListEx

Ordinal	`966`
Address	`0x3a1432`
ForwardName	`NTDLL.RtlInterlockedPushListSListEx`

InternalLcidToName

Ordinal	`967`
Address	`0xbd30`

Internal_EnumCalendarInfo

Ordinal	`968`
Address	`0x53ef0`

Internal_EnumDateFormats

Ordinal	`969`
Address	`0x551e0`

Internal_EnumLanguageGroupLocales

Ordinal	`970`
Address	`0x1343a0`

Internal_EnumSystemCodePages

Ordinal	`971`
Address	`0x134720`

Internal_EnumSystemLanguageGroups

Ordinal	`972`
Address	`0x1349a0`

Internal_EnumSystemLocales

Ordinal	`973`
Address	`0x90230`

Internal_EnumTimeFormats

Ordinal	`974`
Address	`0x55400`

Internal_EnumUILanguages

Ordinal	`975`
Address	`0x55c20`

InternetTimeFromSystemTimeA

Ordinal	`976`
Address	`0x9db20`

InternetTimeFromSystemTimeW

Ordinal	`977`
Address	`0x132310`

InternetTimeToSystemTimeA

Ordinal	`978`
Address	`0xef2e0`

InternetTimeToSystemTimeW

Ordinal	`979`
Address	`0x132440`

InvalidateAppModelVersionCache

Ordinal	`980`
Address	`0x14f1e0`

IsApiSetImplemented

Ordinal	`981`
Address	`0xf1cf0`

IsCharAlphaA

Ordinal	`982`
Address	`0xbde80`

IsCharAlphaNumericA

Ordinal	`983`
Address	`0xbe120`

IsCharAlphaNumericW

Ordinal	`984`
Address	`0xf8300`

IsCharAlphaW

Ordinal	`985`
Address	`0xf9c50`

IsCharBlankW

Ordinal	`986`
Address	`0x12d190`

IsCharCntrlW

Ordinal	`987`
Address	`0x12d1d0`

IsCharDigitW

Ordinal	`988`
Address	`0x12d200`

IsCharLowerA

Ordinal	`989`
Address	`0x12c7e0`

IsCharLowerW

Ordinal	`990`
Address	`0xfd0d0`

IsCharPunctW

Ordinal	`991`
Address	`0x12d250`

IsCharSpaceA

Ordinal	`992`
Address	`0x12d2a0`

IsCharSpaceW

Ordinal	`993`
Address	`0xcabf0`

IsCharUpperA

Ordinal	`994`
Address	`0x12c860`

IsCharUpperW

Ordinal	`995`
Address	`0x104220`

IsCharXDigitW

Ordinal	`996`
Address	`0x12d2f0`

IsDBCSLeadByte

Ordinal	`997`
Address	`0x39210`

IsDBCSLeadByteEx

Ordinal	`998`
Address	`0xa2080`

IsDebuggerPresent

Ordinal	`999`
Address	`0xb06d0`

IsDeveloperModeEnabled

Ordinal	`1000`
Address	`0xe28f0`

IsDeveloperModePolicyApplied

Ordinal	`1001`
Address	`0xe3000`

IsEnclaveTypeSupported

Ordinal	`1002`
Address	`0x112f30`

IsInternetESCEnabled

Ordinal	`1003`
Address	`0x10cde0`

IsIoRingOpSupported

Ordinal	`1004`
Address	`0x133540`

IsMrtResourceRedirectionEnabled

Ordinal	`1005`
Address	`0x109dc0`

IsNLSDefinedString

Ordinal	`1006`
Address	`0xfc4b0`

IsNormalizedString

Ordinal	`1007`
Address	`0xff020`

IsOnDemandRegistrationSupportedForExtensionCategory

Ordinal	`1008`
Address	`0x44070`

IsPackageFeatureSupported

Ordinal	`1009`
Address	`0x1503d0`

IsProcessCritical

Ordinal	`1010`
Address	`0x191620`

IsProcessInJob

Ordinal	`1011`
Address	`0xe66f0`

IsProcessorFeaturePresent

Ordinal	`1012`
Address	`0xf6ad0`

IsSideloadingEnabled

Ordinal	`1013`
Address	`0x15a5e0`

IsSideloadingPolicyApplied

Ordinal	`1014`
Address	`0x15a640`

IsSyncForegroundPolicyRefresh

Ordinal	`1015`
Address	`0x12ba50`

IsThreadAFiber

Ordinal	`1016`
Address	`0xb6950`

IsThreadpoolTimerSet

Ordinal	`1017`
Address	`0x3a18a2`
ForwardName	`NTDLL.TpIsTimerSet`

IsTimeZoneRedirectionEnabled

Ordinal	`1018`
Address	`0xc2e80`

IsTokenRestricted

Ordinal	`1019`
Address	`0xe1810`

IsUserCetAvailableInEnvironment

Ordinal	`1020`
Address	`0x10d490`

IsValidAcl

Ordinal	`1021`
Address	`0xf52f0`

IsValidCodePage

Ordinal	`1022`
Address	`0x5cf20`

IsValidLanguageGroup

Ordinal	`1023`
Address	`0x133890`

IsValidLocale

Ordinal	`1024`
Address	`0xf69f0`

IsValidLocaleName

Ordinal	`1025`
Address	`0xc57f0`

IsValidNLSVersion

Ordinal	`1026`
Address	`0x137de0`

IsValidRelativeSecurityDescriptor

Ordinal	`1027`
Address	`0x182250`

IsValidSecurityDescriptor

Ordinal	`1028`
Address	`0xe66b0`

IsValidSid

Ordinal	`1029`
Address	`0xc6420`

IsWellKnownSid

Ordinal	`1030`
Address	`0x207e0`

IsWow64GuestMachineSupported

Ordinal	`1031`
Address	`0x101110`

IsWow64Process

Ordinal	`1032`
Address	`0x8d110`

IsWow64Process2

Ordinal	`1033`
Address	`0xe6a00`

K32EmptyWorkingSet

Ordinal	`1034`
Address	`0x105c30`

K32EnumDeviceDrivers

Ordinal	`1035`
Address	`0x106070`

K32EnumPageFilesA

Ordinal	`1036`
Address	`0x125090`

K32EnumPageFilesW

Ordinal	`1037`
Address	`0x10e360`

K32EnumProcessModules

Ordinal	`1038`
Address	`0xbb8e0`

K32EnumProcessModulesEx

Ordinal	`1039`
Address	`0xbb3c0`

K32EnumProcesses

Ordinal	`1040`
Address	`0x13bfb0`

K32GetDeviceDriverBaseNameA

Ordinal	`1041`
Address	`0xed1d0`

K32GetDeviceDriverBaseNameW

Ordinal	`1042`
Address	`0xed090`

K32GetDeviceDriverFileNameA

Ordinal	`1043`
Address	`0xed130`

K32GetDeviceDriverFileNameW

Ordinal	`1044`
Address	`0xecff0`

K32GetMappedFileNameA

Ordinal	`1045`
Address	`0x13c230`

K32GetMappedFileNameW

Ordinal	`1046`
Address	`0xdf960`

K32GetModuleBaseNameA

Ordinal	`1047`
Address	`0xb8d40`

K32GetModuleBaseNameW

Ordinal	`1048`
Address	`0xb8df0`

K32GetModuleFileNameExA

Ordinal	`1049`
Address	`0xb9090`

K32GetModuleFileNameExW

Ordinal	`1050`
Address	`0xb9150`

K32GetModuleInformation

Ordinal	`1051`
Address	`0xb95c0`

K32GetPerformanceInfo

Ordinal	`1052`
Address	`0x118570`

K32GetProcessImageFileNameA

Ordinal	`1053`
Address	`0xf6df0`

K32GetProcessImageFileNameW

Ordinal	`1054`
Address	`0xe5f10`

K32GetProcessMemoryInfo

Ordinal	`1055`
Address	`0xc20e0`

K32GetWsChanges

Ordinal	`1056`
Address	`0x13c170`

K32GetWsChangesEx

Ordinal	`1057`
Address	`0x13c1a0`

K32InitializeProcessForWsWatch

Ordinal	`1058`
Address	`0x13c1d0`

K32QueryWorkingSet

Ordinal	`1059`
Address	`0xfd260`

K32QueryWorkingSetEx

Ordinal	`1060`
Address	`0xe72c0`

KernelBaseGetGlobalData

Ordinal	`1061`
Address	`0xe2720`

KernelbasePostInit

Ordinal	`1062`
Address	`0xf4c60`

LCIDToLocaleName

Ordinal	`1063`
Address	`0xa1860`

LCMapStringA

Ordinal	`1064`
Address	`0x5d1d0`

LCMapStringEx

Ordinal	`1065`
Address	`0x12030`

LCMapStringW

Ordinal	`1066`
Address	`0x11eb0`

LeaveCriticalPolicySectionInternal

Ordinal	`1067`
Address	`0x10b640`

LeaveCriticalSection

Ordinal	`1068`
Address	`0x3a1cfe`
ForwardName	`NTDLL.RtlLeaveCriticalSection`

LeaveCriticalSectionWhenCallbackReturns

Ordinal	`1069`
Address	`0x3a1d44`
ForwardName	`NTDLL.TpCallbackLeaveCriticalSectionOnCompletion`

LoadAppInitDlls

Ordinal	`1070`
Address	`0x11fd20`

LoadEnclaveData

Ordinal	`1071`
Address	`0x104080`

LoadEnclaveImageA

Ordinal	`1072`
Address	`0x18c220`

LoadEnclaveImageW

Ordinal	`1073`
Address	`0x114c30`

LoadLibraryA

Ordinal	`1074`
Address	`0xef020`

LoadLibraryExA

Ordinal	`1075`
Address	`0xe5900`

LoadLibraryExW

Ordinal	`1076`
Address	`0x19530`

LoadLibraryW

Ordinal	`1077`
Address	`0xfcc20`

LoadPackagedLibrary

Ordinal	`1078`
Address	`0x110500`

LoadResource

Ordinal	`1079`
Address	`0x93a40`

LoadStringA

Ordinal	`1080`
Address	`0x107520`

LoadStringBaseExW

Ordinal	`1081`
Address	`0x19810`

LoadStringByReference

Ordinal	`1082`
Address	`0x58f40`

LoadStringW

Ordinal	`1083`
Address	`0x1ccb0`

LocalAlloc

Ordinal	`1084`
Address	`0xa370`

LocalFileTimeToFileTime

Ordinal	`1085`
Address	`0xfdac0`

LocalFileTimeToLocalSystemTime

Ordinal	`1086`
Address	`0x9c690`

LocalFlags

Ordinal	`1087`
Address	`0xf17e0`

LocalFree

Ordinal	`1088`
Address	`0xa0b0`

LocalLock

Ordinal	`1089`
Address	`0xc56d0`

LocalReAlloc

Ordinal	`1090`
Address	`0xb88e0`

LocalSize

Ordinal	`1091`
Address	`0xe3ad0`

LocalSystemTimeToLocalFileTime

Ordinal	`1092`
Address	`0x9c490`

LocalUnlock

Ordinal	`1093`
Address	`0xcb2c0`

LocaleNameToLCID

Ordinal	`1094`
Address	`0xc9040`

LocateXStateFeature

Ordinal	`1095`
Address	`0x10dc30`

LockFile

Ordinal	`1096`
Address	`0xf7190`

LockFileEx

Ordinal	`1097`
Address	`0x1bf60`

LockResource

Ordinal	`1098`
Address	`0xfa3e0`

LogFeatureProcessUsage

Ordinal	`1099`
Address	`0x11fd20`

LogStagedFeatureUsage

Ordinal	`1100`
Address	`0x9c010`

MakeAbsoluteSD

Ordinal	`1101`
Address	`0xea7b0`

MakeAbsoluteSD2

Ordinal	`1102`
Address	`0x1129f0`

MakeSelfRelativeSD

Ordinal	`1103`
Address	`0xe88f0`

MapGenericMask

Ordinal	`1104`
Address	`0xfda80`

MapPredefinedHandleInternal

Ordinal	`1105`
Address	`0x4ab60`

MapUserPhysicalPages

Ordinal	`1106`
Address	`0x182c30`

MapViewOfFile

Ordinal	`1107`
Address	`0x1bc50`

MapViewOfFile3

Ordinal	`1108`
Address	`0x10ba10`

MapViewOfFile3FromApp

Ordinal	`1109`
Address	`0x10b920`

MapViewOfFileEx

Ordinal	`1110`
Address	`0xbca00`

MapViewOfFileExNuma

Ordinal	`1111`
Address	`0x1b320`

MapViewOfFileFromApp

Ordinal	`1112`
Address	`0xc6460`

MapViewOfFileNuma2

Ordinal	`1113`
Address	`0x1902d0`

MoveFileExW

Ordinal	`1114`
Address	`0xebf30`

MoveFileFromAppW

Ordinal	`1115`
Address	`0x12df60`

MoveFileWithProgressTransactedW

Ordinal	`1116`
Address	`0xebfd0`

MoveFileWithProgressW

Ordinal	`1117`
Address	`0xebf80`

MulDiv

Ordinal	`1118`
Address	`0xb5600`

MultiByteToWideChar

Ordinal	`1119`
Address	`0x15e80`

NamedPipeEventEnum

Ordinal	`1120`
Address	`0xde380`

NamedPipeEventSelect

Ordinal	`1121`
Address	`0xde270`

NeedCurrentDirectoryForExePathA

Ordinal	`1122`
Address	`0x191680`

NeedCurrentDirectoryForExePathW

Ordinal	`1123`
Address	`0x10df70`

NlsCheckPolicy

Ordinal	`1124`
Address	`0x1338d0`

NlsDispatchAnsiEnumProc

Ordinal	`1125`
Address	`0x54fc0`

NlsGetACPFromLocale

Ordinal	`1126`
Address	`0x1336d0`

NlsGetCacheUpdateCount

Ordinal	`1127`
Address	`0xde840`

NlsIsUserDefaultLocale

Ordinal	`1128`
Address	`0x3d7d0`

NlsUpdateLocale

Ordinal	`1129`
Address	`0xb5920`

NlsUpdateSystemLocale

Ordinal	`1130`
Address	`0x133920`

NlsValidateLocale

Ordinal	`1131`
Address	`0x40680`

NormalizeString

Ordinal	`1132`
Address	`0xe1770`

NotifyFeatureToggleUsage

Ordinal	`1133`
Address	`0x3a21f9`
ForwardName	`NTDLL.RtlNotifyFeatureToggleUsage`

NotifyMountMgr

Ordinal	`1134`
Address	`0xf7f40`

NotifyRedirectedStringChange

Ordinal	`1135`
Address	`0x10d4e0`

ObjectCloseAuditAlarmW

Ordinal	`1136`
Address	`0xfa680`

ObjectDeleteAuditAlarmW

Ordinal	`1137`
Address	`0x182290`

ObjectOpenAuditAlarmW

Ordinal	`1138`
Address	`0xf45f0`

ObjectPrivilegeAuditAlarmW

Ordinal	`1139`
Address	`0x182300`

OfferVirtualMemory

Ordinal	`1140`
Address	`0x182c60`

OpenCommPort

Ordinal	`1141`
Address	`0x18cdc0`

OpenDedicatedMemoryPartition

Ordinal	`1142`
Address	`0x182c80`

OpenEventA

Ordinal	`1143`
Address	`0x69c50`

OpenEventW

Ordinal	`1144`
Address	`0x69d20`

OpenFileById

Ordinal	`1145`
Address	`0xe3e70`

OpenFileMappingFromApp

Ordinal	`1146`
Address	`0x10eee0`

OpenFileMappingW

Ordinal	`1147`
Address	`0x67f40`

OpenGlobalizationUserSettingsKey

Ordinal	`1148`
Address	`0x88000`

OpenMutexW

Ordinal	`1149`
Address	`0x1b510`

OpenPackageInfoByFullName

Ordinal	`1150`
Address	`0x10f710`

OpenPackageInfoByFullNameForMachine

Ordinal	`1151`
Address	`0x100c80`

OpenPackageInfoByFullNameForUser

Ordinal	`1152`
Address	`0x77a90`

OpenPrivateNamespaceW

Ordinal	`1153`
Address	`0xf09f0`

OpenProcess

Ordinal	`1154`
Address	`0x1bee0`

OpenProcessToken

Ordinal	`1155`
Address	`0x1c2e0`

OpenRegKey

Ordinal	`1156`
Address	`0x5c0e0`

OpenSemaphoreW

Ordinal	`1157`
Address	`0x68710`

OpenState

Ordinal	`1158`
Address	`0x1196f0`

OpenStateAtom

Ordinal	`1159`
Address	`0xf68a0`

OpenStateExplicit

Ordinal	`1160`
Address	`0x119810`

OpenStateExplicitForUserSid

Ordinal	`1161`
Address	`0x119930`

OpenStateExplicitForUserSidString

Ordinal	`1162`
Address	`0x119a50`

OpenThread

Ordinal	`1163`
Address	`0xdd270`

OpenThreadToken

Ordinal	`1164`
Address	`0x1b0a0`

OpenWaitableTimerW

Ordinal	`1165`
Address	`0x10cc90`

OutputDebugStringA

Ordinal	`1166`
Address	`0xc52c0`

OutputDebugStringW

Ordinal	`1167`
Address	`0xc51a0`

OverrideRoamingDataModificationTimesInRange

Ordinal	`1168`
Address	`0x13f410`

PackageFamilyNameFromFullName

Ordinal	`1169`
Address	`0x257b0`

PackageFamilyNameFromFullNameA

Ordinal	`1170`
Address	`0x14ec60`

PackageFamilyNameFromId

Ordinal	`1171`
Address	`0x1109e0`

PackageFamilyNameFromIdA

Ordinal	`1172`
Address	`0x14ecf0`

PackageFamilyNameFromProductId

Ordinal	`1173`
Address	`0x14e9c0`

PackageFullNameFromId

Ordinal	`1174`
Address	`0x111b00`

PackageFullNameFromIdA

Ordinal	`1175`
Address	`0x14ed00`

PackageFullNameFromProductId

Ordinal	`1176`
Address	`0x14e9b0`

PackageIdFromFullName

Ordinal	`1177`
Address	`0x24f10`

PackageIdFromFullNameA

Ordinal	`1178`
Address	`0x14ed10`

PackageIdFromProductId

Ordinal	`1179`
Address	`0x14e9b0`

PackageIsEffectiveSupportedUsersMultiple

Ordinal	`1180`
Address	`0x14eb50`

PackageNameAndPublisherIdFromFamilyName

Ordinal	`1181`
Address	`0x28670`

PackageNameAndPublisherIdFromFamilyNameA

Ordinal	`1182`
Address	`0x14ed30`

PackagePublisherAddUserIfNecessary

Ordinal	`1183`
Address	`0x14ed40`

PackagePublisherIdFromPublisher

Ordinal	`1184`
Address	`0x14ed50`

PackageRelativeApplicationIdFromProductId

Ordinal	`1185`
Address	`0x14e9b0`

PackageSidFromFamilyName

Ordinal	`1186`
Address	`0x114830`

ParseApplicationUserModelId

Ordinal	`1187`
Address	`0x103e50`

ParseApplicationUserModelIdA

Ordinal	`1188`
Address	`0x14ed60`

ParseURLA

Ordinal	`1189`
Address	`0x36e30`

ParseURLW

Ordinal	`1190`
Address	`0xc2ea0`

PathAddBackslashA

Ordinal	`1191`
Address	`0x139260`

PathAddBackslashW

Ordinal	`1192`
Address	`0xe6c50`

PathAddExtensionA

Ordinal	`1193`
Address	`0x1395f0`

PathAddExtensionW

Ordinal	`1194`
Address	`0x100bf0`

PathAllocCanonicalize

Ordinal	`1195`
Address	`0x109ac0`

PathAllocCombine

Ordinal	`1196`
Address	`0x7d70`

PathAppendA

Ordinal	`1197`
Address	`0x37910`

PathAppendW

Ordinal	`1198`
Address	`0x7570`

PathCanonicalizeA

Ordinal	`1199`
Address	`0x36a40`

PathCanonicalizeW

Ordinal	`1200`
Address	`0x74d0`

PathCchAddBackslash

Ordinal	`1201`
Address	`0xdcc10`

PathCchAddBackslashEx

Ordinal	`1202`
Address	`0xa3510`

PathCchAddExtension

Ordinal	`1203`
Address	`0x63e0`

PathCchAppend

Ordinal	`1204`
Address	`0x7a00`

PathCchAppendEx

Ordinal	`1205`
Address	`0x87e0`

PathCchCanonicalize

Ordinal	`1206`
Address	`0xfd1e0`

PathCchCanonicalizeEx

Ordinal	`1207`
Address	`0xf5c50`

PathCchCombine

Ordinal	`1208`
Address	`0x7d50`

PathCchCombineEx

Ordinal	`1209`
Address	`0x8910`

PathCchFindExtension

Ordinal	`1210`
Address	`0x6550`

PathCchIsRoot

Ordinal	`1211`
Address	`0x6710`

PathCchRemoveBackslash

Ordinal	`1212`
Address	`0x65c0`

PathCchRemoveBackslashEx

Ordinal	`1213`
Address	`0x6640`

PathCchRemoveExtension

Ordinal	`1214`
Address	`0xc31a0`

PathCchRemoveFileSpec

Ordinal	`1215`
Address	`0x6e00`

PathCchRenameExtension

Ordinal	`1216`
Address	`0x12e310`

PathCchSkipRoot

Ordinal	`1217`
Address	`0x6b40`

PathCchStripPrefix

Ordinal	`1218`
Address	`0x5840`

PathCchStripToRoot

Ordinal	`1219`
Address	`0x7660`

PathCombineA

Ordinal	`1220`
Address	`0x369d0`

PathCombineW

Ordinal	`1221`
Address	`0x7480`

PathCommonPrefixA

Ordinal	`1222`
Address	`0x104610`

PathCommonPrefixW

Ordinal	`1223`
Address	`0x5cb0`

PathCreateFromUrlA

Ordinal	`1224`
Address	`0x12ec70`

PathCreateFromUrlAlloc

Ordinal	`1225`
Address	`0x110a30`

PathCreateFromUrlW

Ordinal	`1226`
Address	`0x2ecf0`

PathFileExistsA

Ordinal	`1227`
Address	`0x102100`

PathFileExistsW

Ordinal	`1228`
Address	`0x5a160`

PathFindExtensionA

Ordinal	`1229`
Address	`0x36b20`

PathFindExtensionW

Ordinal	`1230`
Address	`0xae50`

PathFindFileNameA

Ordinal	`1231`
Address	`0x38b80`

PathFindFileNameW

Ordinal	`1232`
Address	`0xa4520`

PathFindNextComponentA

Ordinal	`1233`
Address	`0x139680`

PathFindNextComponentW

Ordinal	`1234`
Address	`0x5be0`

PathGetArgsA

Ordinal	`1235`
Address	`0x10f660`

PathGetArgsW

Ordinal	`1236`
Address	`0xf2570`

PathGetCharTypeA

Ordinal	`1237`
Address	`0x1396e0`

PathGetCharTypeW

Ordinal	`1238`
Address	`0xfc140`

PathGetDriveNumberA

Ordinal	`1239`
Address	`0x38a00`

PathGetDriveNumberW

Ordinal	`1240`
Address	`0xdd2f0`

PathIsFileSpecA

Ordinal	`1241`
Address	`0x139750`

PathIsFileSpecW

Ordinal	`1242`
Address	`0xdd480`

PathIsLFNFileSpecA

Ordinal	`1243`
Address	`0x139790`

PathIsLFNFileSpecW

Ordinal	`1244`
Address	`0x105a90`

PathIsPrefixA

Ordinal	`1245`
Address	`0x1045b0`

PathIsPrefixW

Ordinal	`1246`
Address	`0x5c50`

PathIsRelativeA

Ordinal	`1247`
Address	`0x10e5b0`

PathIsRelativeW

Ordinal	`1248`
Address	`0xe21a0`

PathIsRootA

Ordinal	`1249`
Address	`0x139820`

PathIsRootW

Ordinal	`1250`
Address	`0x104190`

PathIsSameRootA

Ordinal	`1251`
Address	`0x139830`

PathIsSameRootW

Ordinal	`1252`
Address	`0x5e70`

PathIsUNCA

Ordinal	`1253`
Address	`0x1116f0`

PathIsUNCEx

Ordinal	`1254`
Address	`0x71a0`

PathIsUNCServerA

Ordinal	`1255`
Address	`0x1392a0`

PathIsUNCServerShareA

Ordinal	`1256`
Address	`0x1392f0`

PathIsUNCServerShareW

Ordinal	`1257`
Address	`0x60b0`

PathIsUNCServerW

Ordinal	`1258`
Address	`0x5ef0`

PathIsUNCW

Ordinal	`1259`
Address	`0x2e890`

PathIsURLA

Ordinal	`1260`
Address	`0x36df0`

PathIsURLW

Ordinal	`1261`
Address	`0x2e600`

PathIsValidCharA

Ordinal	`1262`
Address	`0x1398b0`

PathIsValidCharW

Ordinal	`1263`
Address	`0xb7af0`

PathMatchSpecA

Ordinal	`1264`
Address	`0x112570`

PathMatchSpecExA

Ordinal	`1265`
Address	`0xbde50`

PathMatchSpecExW

Ordinal	`1266`
Address	`0xa3db0`

PathMatchSpecW

Ordinal	`1267`
Address	`0xa3f20`

PathParseIconLocationA

Ordinal	`1268`
Address	`0x139360`

PathParseIconLocationW

Ordinal	`1269`
Address	`0xdd570`

PathQuoteSpacesA

Ordinal	`1270`
Address	`0x1393f0`

PathQuoteSpacesW

Ordinal	`1271`
Address	`0x113760`

PathRelativePathToA

Ordinal	`1272`
Address	`0x139970`

PathRelativePathToW

Ordinal	`1273`
Address	`0x5970`

PathRemoveBackslashA

Ordinal	`1274`
Address	`0x139b10`

PathRemoveBackslashW

Ordinal	`1275`
Address	`0x61c0`

PathRemoveBlanksA

Ordinal	`1276`
Address	`0x10ef90`

PathRemoveBlanksW

Ordinal	`1277`
Address	`0xdd650`

PathRemoveExtensionA

Ordinal	`1278`
Address	`0x112a60`

PathRemoveExtensionW

Ordinal	`1279`
Address	`0xcce70`

PathRemoveFileSpecA

Ordinal	`1280`
Address	`0x36f30`

PathRemoveFileSpecW

Ordinal	`1281`
Address	`0x69f0`

PathRenameExtensionA

Ordinal	`1282`
Address	`0x36aa0`

PathRenameExtensionW

Ordinal	`1283`
Address	`0x10d370`

PathSearchAndQualifyA

Ordinal	`1284`
Address	`0x139b60`

PathSearchAndQualifyW

Ordinal	`1285`
Address	`0xe55c0`

PathSkipRootA

Ordinal	`1286`
Address	`0x139c10`

PathSkipRootW

Ordinal	`1287`
Address	`0x69a0`

PathStripPathA

Ordinal	`1288`
Address	`0x10f610`

PathStripPathW

Ordinal	`1289`
Address	`0xccd20`

PathStripToRootA

Ordinal	`1290`
Address	`0x36a10`

PathStripToRootW

Ordinal	`1291`
Address	`0x7450`

PathUnExpandEnvStringsA

Ordinal	`1292`
Address	`0x139480`

PathUnExpandEnvStringsW

Ordinal	`1293`
Address	`0xea850`

PathUnquoteSpacesA

Ordinal	`1294`
Address	`0x1394a0`

PathUnquoteSpacesW

Ordinal	`1295`
Address	`0xdd740`

PcwAddQueryItem

Ordinal	`1296`
Address	`0x9a250`

PcwClearCounterSetSecurity

Ordinal	`1297`
Address	`0x15a9d0`

PcwCollectData

Ordinal	`1298`
Address	`0xf0660`

PcwCompleteNotification

Ordinal	`1299`
Address	`0x9a4c0`

PcwCreateNotifier

Ordinal	`1300`
Address	`0x9bcf0`

PcwCreateQuery

Ordinal	`1301`
Address	`0x9a820`

PcwDisconnectCounterSet

Ordinal	`1302`
Address	`0x9b030`

PcwEnumerateInstances

Ordinal	`1303`
Address	`0x9a340`

PcwIsNotifierAlive

Ordinal	`1304`
Address	`0x15aa30`

PcwQueryCounterSetSecurity

Ordinal	`1305`
Address	`0x15aa80`

PcwReadNotificationData

Ordinal	`1306`
Address	`0x9aab0`

PcwRegisterCounterSet

Ordinal	`1307`
Address	`0x9bb60`

PcwRemoveQueryItem

Ordinal	`1308`
Address	`0x9bd50`

PcwSendNotification

Ordinal	`1309`
Address	`0x9a440`

PcwSendStatelessNotification

Ordinal	`1310`
Address	`0x9a3b0`

PcwSetCounterSetSecurity

Ordinal	`1311`
Address	`0x15aae0`

PcwSetQueryItemUserData

Ordinal	`1312`
Address	`0x9a2f0`

PeekConsoleInputA

Ordinal	`1313`
Address	`0xeff40`

PeekConsoleInputW

Ordinal	`1314`
Address	`0xefee0`

PeekNamedPipe

Ordinal	`1315`
Address	`0xbda60`

PerfCreateInstance

Ordinal	`1316`
Address	`0x99a50`

PerfDecrementULongCounterValue

Ordinal	`1317`
Address	`0x99d00`

PerfDecrementULongLongCounterValue

Ordinal	`1318`
Address	`0x9ae90`

PerfDeleteInstance

Ordinal	`1319`
Address	`0x99930`

PerfIncrementULongCounterValue

Ordinal	`1320`
Address	`0x9bde0`

PerfIncrementULongLongCounterValue

Ordinal	`1321`
Address	`0x99850`

PerfQueryInstance

Ordinal	`1322`
Address	`0x15abb0`

PerfSetCounterRefValue

Ordinal	`1323`
Address	`0x99b30`

PerfSetCounterSetInfo

Ordinal	`1324`
Address	`0x9a770`

PerfSetULongCounterValue

Ordinal	`1325`
Address	`0x99c10`

PerfSetULongLongCounterValue

Ordinal	`1326`
Address	`0x9b4b0`

PerfStartProvider

Ordinal	`1327`
Address	`0x9bda0`

PerfStartProviderEx

Ordinal	`1328`
Address	`0x9aaf0`

PerfStopProvider

Ordinal	`1329`
Address	`0x9bc90`

PoolPerAppKeyStateInternal

Ordinal	`1330`
Address	`0xbc7f0`

PopIoRingCompletion

Ordinal	`1331`
Address	`0x103e60`

PostQueuedCompletionStatus

Ordinal	`1332`
Address	`0xbdca0`

PrefetchVirtualMemory

Ordinal	`1333`
Address	`0xfc870`

PrivCopyFileExW

Ordinal	`1334`
Address	`0xce6d0`

PrivilegeCheck

Ordinal	`1335`
Address	`0xe14b0`

PrivilegedServiceAuditAlarmW

Ordinal	`1336`
Address	`0x182390`

ProcessIdToSessionId

Ordinal	`1337`
Address	`0xc1f70`

ProductIdFromPackageFamilyName

Ordinal	`1338`
Address	`0x14e9b0`

PsmCreateKey

Ordinal	`1339`
Address	`0xe5c50`

PsmCreateKeyWithDynamicId

Ordinal	`1340`
Address	`0x13c300`

PsmEqualApplication

Ordinal	`1341`
Address	`0x13c410`

PsmEqualPackage

Ordinal	`1342`
Address	`0x13c500`

PsmGetApplicationNameFromKey

Ordinal	`1343`
Address	`0xb7740`

PsmGetAumidFromKey

Ordinal	`1344`
Address	`0xb7590`

PsmGetDynamicIdFromKey

Ordinal	`1345`
Address	`0xdc9b0`

PsmGetKeyFromProcess

Ordinal	`1346`
Address	`0xe5a30`

PsmGetKeyFromToken

Ordinal	`1347`
Address	`0xe5ab0`

PsmGetPackageFullNameFromKey

Ordinal	`1348`
Address	`0xb7670`

PsmIsChildKey

Ordinal	`1349`
Address	`0x13c590`

PsmIsDynamicKey

Ordinal	`1350`
Address	`0x1041f0`

PsmIsValidKey

Ordinal	`1351`
Address	`0xdca40`

PssCaptureSnapshot

Ordinal	`1352`
Address	`0x118070`

PssDuplicateSnapshot

Ordinal	`1353`
Address	`0x111500`

PssFreeSnapshot

Ordinal	`1354`
Address	`0x112350`

PssQuerySnapshot

Ordinal	`1355`
Address	`0xdeda0`

PssWalkMarkerCreate

Ordinal	`1356`
Address	`0x10ff90`

PssWalkMarkerFree

Ordinal	`1357`
Address	`0xe5030`

PssWalkMarkerGetPosition

Ordinal	`1358`
Address	`0xe50e0`

PssWalkMarkerSeekToBeginning

Ordinal	`1359`
Address	`0xe5130`

PssWalkMarkerSetPosition

Ordinal	`1360`
Address	`0xe5090`

PssWalkSnapshot

Ordinal	`1361`
Address	`0xa3770`

PublishStateChangeNotification

Ordinal	`1362`
Address	`0x13f4d0`

PublisherFromPackageFullName

Ordinal	`1363`
Address	`0x1507f0`

PulseEvent

Ordinal	`1364`
Address	`0xdfa80`

PurgeComm

Ordinal	`1365`
Address	`0x1107c0`

QISearch

Ordinal	`1366`
Address	`0x973f0`

QueryActCtxSettingsW

Ordinal	`1367`
Address	`0xf4bd0`

QueryActCtxW

Ordinal	`1368`
Address	`0x1004a0`

QueryAuxiliaryCounterFrequency

Ordinal	`1369`
Address	`0x18d880`

QueryDepthSList

Ordinal	`1370`
Address	`0x3a34f4`
ForwardName	`NTDLL.RtlQueryDepthSList`

QueryDosDeviceW

Ordinal	`1371`
Address	`0x1a050`

QueryFullProcessImageNameA

Ordinal	`1372`
Address	`0xe6a30`

QueryFullProcessImageNameW

Ordinal	`1373`
Address	`0xc6950`

QueryGlobalizationUserSettingsStatus

Ordinal	`1374`
Address	`0x138c60`

QueryIdleProcessorCycleTime

Ordinal	`1375`
Address	`0x111620`

QueryIdleProcessorCycleTimeEx

Ordinal	`1376`
Address	`0x193450`

QueryInterruptTime

Ordinal	`1377`
Address	`0x100400`

QueryInterruptTimePrecise

Ordinal	`1378`
Address	`0xf2640`

QueryIoRingCapabilities

Ordinal	`1379`
Address	`0x133580`

QueryMemoryResourceNotification

Ordinal	`1380`
Address	`0xb56d0`

QueryOptionalDelayLoadedAPI

Ordinal	`1381`
Address	`0x114870`

QueryPartitionInformation

Ordinal	`1382`
Address	`0x182cf0`

QueryPerformanceCounter

Ordinal	`1383`
Address	`0x3a3665`
ForwardName	`NTDLL.RtlQueryPerformanceCounter`

QueryPerformanceFrequency

Ordinal	`1384`
Address	`0x3a36a0`
ForwardName	`NTDLL.RtlQueryPerformanceFrequency`

QueryProcessAffinityUpdateMode

Ordinal	`1385`
Address	`0x191800`

QueryProcessCycleTime

Ordinal	`1386`
Address	`0xf9810`

QueryProtectedPolicy

Ordinal	`1387`
Address	`0x104580`

QuerySecurityAccessMask

Ordinal	`1388`
Address	`0xe48b0`

QueryStateAtomValueInfo

Ordinal	`1389`
Address	`0x119b70`

QueryStateContainerCreatedNew

Ordinal	`1390`
Address	`0xed550`

QueryStateContainerItemInfo

Ordinal	`1391`
Address	`0x119c30`

QueryThreadCycleTime

Ordinal	`1392`
Address	`0xb6970`

QueryThreadpoolStackInformation

Ordinal	`1393`
Address	`0x138be0`

QueryUnbiasedInterruptTime

Ordinal	`1394`
Address	`0x3a37c7`
ForwardName	`NTDLL.RtlQueryUnbiasedInterruptTime`

QueryUnbiasedInterruptTimePrecise

Ordinal	`1395`
Address	`0xbc790`

QueryVirtualMemoryInformation

Ordinal	`1396`
Address	`0x182d50`

QueryWorkingSet

Ordinal	`1397`
Address	`0xfd260`

QueryWorkingSetEx

Ordinal	`1398`
Address	`0xe72c0`

QueueUserAPC

Ordinal	`1399`
Address	`0xcd850`

QueueUserAPC2

Ordinal	`1400`
Address	`0xdc3e0`

QueueUserWorkItem

Ordinal	`1401`
Address	`0xeea30`

QuirkGetData

Ordinal	`1402`
Address	`0x12d8a0`

QuirkGetData2

Ordinal	`1403`
Address	`0x12d8f0`

QuirkIsEnabled

Ordinal	`1404`
Address	`0xc60a0`

QuirkIsEnabled2

Ordinal	`1405`
Address	`0x12d940`

QuirkIsEnabled3

Ordinal	`1406`
Address	`0xe4060`

QuirkIsEnabledForPackage

Ordinal	`1407`
Address	`0x104820`

QuirkIsEnabledForPackage2

Ordinal	`1408`
Address	`0x10cd70`

QuirkIsEnabledForPackage3

Ordinal	`1409`
Address	`0xffc60`

QuirkIsEnabledForPackage4

Ordinal	`1410`
Address	`0x1065f0`

QuirkIsEnabledForProcess

Ordinal	`1411`
Address	`0x111b10`

RaiseCustomSystemEventTrigger

Ordinal	`1412`
Address	`0x1934c0`

RaiseException

Ordinal	`1413`
Address	`0xc5610`

RaiseFailFastException

Ordinal	`1414`
Address	`0x10a480`

ReOpenFile

Ordinal	`1415`
Address	`0xfdee0`

ReadConsoleA

Ordinal	`1416`
Address	`0x15ca30`

ReadConsoleInputA

Ordinal	`1417`
Address	`0x15c020`

ReadConsoleInputExA

Ordinal	`1418`
Address	`0x15c040`

ReadConsoleInputExW

Ordinal	`1419`
Address	`0xefeb0`

ReadConsoleInputW

Ordinal	`1420`
Address	`0xeff10`

ReadConsoleOutputA

Ordinal	`1421`
Address	`0x15c070`

ReadConsoleOutputAttribute

Ordinal	`1422`
Address	`0x15c0a0`

ReadConsoleOutputCharacterA

Ordinal	`1423`
Address	`0xee4c0`

ReadConsoleOutputCharacterW

Ordinal	`1424`
Address	`0x1268e0`

ReadConsoleOutputW

Ordinal	`1425`
Address	`0xe8930`

ReadConsoleW

Ordinal	`1426`
Address	`0xde950`

ReadDirectoryChangesExW

Ordinal	`1427`
Address	`0xcd150`

ReadDirectoryChangesW

Ordinal	`1428`
Address	`0xcd370`

ReadFile

Ordinal	`1429`
Address	`0x1ae70`

ReadFileEx

Ordinal	`1430`
Address	`0xccf60`

ReadFileScatter

Ordinal	`1431`
Address	`0x106f40`

ReadProcessMemory

Ordinal	`1432`
Address	`0xb9c20`

ReadStateAtomValue

Ordinal	`1433`
Address	`0x119cf0`

ReadStateContainerValue

Ordinal	`1434`
Address	`0xa4ae0`

ReclaimVirtualMemory

Ordinal	`1435`
Address	`0x182db0`

RecordFeatureUsage2

Ordinal	`1436`
Address	`0x10daa0`

RefreshPackageInfo

Ordinal	`1437`
Address	`0x14cc60`

RefreshPolicyExInternal

Ordinal	`1438`
Address	`0x12bab0`

RefreshPolicyInternal

Ordinal	`1439`
Address	`0x12bb00`

RegCloseKey

Ordinal	`1440`
Address	`0x4c5f0`

RegCopyTreeW

Ordinal	`1441`
Address	`0x45ca0`

RegCreateKeyExA

Ordinal	`1442`
Address	`0x46a90`

RegCreateKeyExInternalA

Ordinal	`1443`
Address	`0x46bc0`

RegCreateKeyExInternalW

Ordinal	`1444`
Address	`0x48fc0`

RegCreateKeyExW

Ordinal	`1445`
Address	`0x48350`

RegDeleteKeyExA

Ordinal	`1446`
Address	`0xa89e0`

RegDeleteKeyExInternalA

Ordinal	`1447`
Address	`0xa8a00`

RegDeleteKeyExInternalW

Ordinal	`1448`
Address	`0xa9c80`

RegDeleteKeyExW

Ordinal	`1449`
Address	`0xa9c60`

RegDeleteKeyValueA

Ordinal	`1450`
Address	`0xe2410`

RegDeleteKeyValueW

Ordinal	`1451`
Address	`0xa9630`

RegDeleteTreeA

Ordinal	`1452`
Address	`0xa8e70`

RegDeleteTreeW

Ordinal	`1453`
Address	`0xa9920`

RegDeleteValueA

Ordinal	`1454`
Address	`0xe2480`

RegDeleteValueW

Ordinal	`1455`
Address	`0xa96a0`

RegDisablePredefinedCacheEx

Ordinal	`1456`
Address	`0x87ac0`

RegEnumKeyExA

Ordinal	`1457`
Address	`0x50b60`

RegEnumKeyExW

Ordinal	`1458`
Address	`0x4a2b0`

RegEnumValueA

Ordinal	`1459`
Address	`0x13a7c0`

RegEnumValueW

Ordinal	`1460`
Address	`0xac0d0`

RegFlushKey

Ordinal	`1461`
Address	`0xffe30`

RegGetKeySecurity

Ordinal	`1462`
Address	`0xdfac0`

RegGetValueA

Ordinal	`1463`
Address	`0x887c0`

RegGetValueW

Ordinal	`1464`
Address	`0x4ce20`

RegKrnGetAppKeyEventAddressInternal

Ordinal	`1465`
Address	`0x13a740`

RegKrnGetAppKeyLoaded

Ordinal	`1466`
Address	`0x13a780`

RegKrnGetClassesEnumTableAddressInternal

Ordinal	`1467`
Address	`0xe11c0`

RegKrnGetHKEY_ClassesRootAddress

Ordinal	`1468`
Address	`0x1259d0`

RegKrnGetTermsrvRegistryExtensionFlags

Ordinal	`1469`
Address	`0x101280`

RegKrnResetAppKeyLoaded

Ordinal	`1470`
Address	`0x13a790`

RegKrnSetDllHasThreadStateGlobal

Ordinal	`1471`
Address	`0x101f50`

RegKrnSetTermsrvRegistryExtensionFlags

Ordinal	`1472`
Address	`0x13a7b0`

RegLoadAppKeyA

Ordinal	`1473`
Address	`0x1262a0`

RegLoadAppKeyW

Ordinal	`1474`
Address	`0xa7de0`

RegLoadKeyA

Ordinal	`1475`
Address	`0x101850`

RegLoadKeyW

Ordinal	`1476`
Address	`0x101a30`

RegLoadMUIStringA

Ordinal	`1477`
Address	`0x13b240`

RegLoadMUIStringW

Ordinal	`1478`
Address	`0x589c0`

RegNotifyChangeKeyValue

Ordinal	`1479`
Address	`0x49cc0`

RegOpenCurrentUser

Ordinal	`1480`
Address	`0xea770`

RegOpenKeyExA

Ordinal	`1481`
Address	`0x893b0`

RegOpenKeyExInternalA

Ordinal	`1482`
Address	`0x893e0`

RegOpenKeyExInternalW

Ordinal	`1483`
Address	`0x4a6f0`

RegOpenKeyExW

Ordinal	`1484`
Address	`0x4a6c0`

RegOpenUserClassesRoot

Ordinal	`1485`
Address	`0xdcd50`

RegQueryInfoKeyA

Ordinal	`1486`
Address	`0x47a50`

RegQueryInfoKeyW

Ordinal	`1487`
Address	`0x48a20`

RegQueryMultipleValuesA

Ordinal	`1488`
Address	`0x13b250`

RegQueryMultipleValuesW

Ordinal	`1489`
Address	`0xe1ba0`

RegQueryValueExA

Ordinal	`1490`
Address	`0x88f90`

RegQueryValueExW

Ordinal	`1491`
Address	`0x4d780`

RegRestoreKeyA

Ordinal	`1492`
Address	`0x13b9a0`

RegRestoreKeyW

Ordinal	`1493`
Address	`0x13baf0`

RegSaveKeyExA

Ordinal	`1494`
Address	`0x13bc00`

RegSaveKeyExW

Ordinal	`1495`
Address	`0x10a090`

RegSetKeySecurity

Ordinal	`1496`
Address	`0x880d0`

RegSetKeyValueA

Ordinal	`1497`
Address	`0x46af0`

RegSetKeyValueW

Ordinal	`1498`
Address	`0x47f60`

RegSetValueExA

Ordinal	`1499`
Address	`0x46f50`

RegSetValueExW

Ordinal	`1500`
Address	`0x47270`

RegUnLoadKeyA

Ordinal	`1501`
Address	`0x13b0a0`

RegUnLoadKeyW

Ordinal	`1502`
Address	`0x10dab0`

RegisterApplicationRestart

Ordinal	`1503`
Address	`0x8c380`

RegisterBadMemoryNotification

Ordinal	`1504`
Address	`0x182f10`

RegisterGPNotificationInternal

Ordinal	`1505`
Address	`0x103ca0`

RegisterStateChangeNotification

Ordinal	`1506`
Address	`0x103cf0`

RegisterStateLock

Ordinal	`1507`
Address	`0x13f570`

RegisterTraceGuidsW

Ordinal	`1508`
Address	`0x3a40bb`
ForwardName	`NTDLL.EtwRegisterTraceGuidsW`

RegisterWaitForSingleObjectEx

Ordinal	`1509`
Address	`0xf70a0`

ReleaseActCtx

Ordinal	`1510`
Address	`0xeeff0`

ReleaseMutex

Ordinal	`1511`
Address	`0x8bc30`

ReleaseMutexWhenCallbackReturns

Ordinal	`1512`
Address	`0x3a4131`
ForwardName	`NTDLL.TpCallbackReleaseMutexOnCompletion`

ReleasePackagedDataForFile

Ordinal	`1513`
Address	`0x159ef0`

ReleasePseudoConsole

Ordinal	`1514`
Address	`0x126870`

ReleaseSRWLockExclusive

Ordinal	`1515`
Address	`0x3a41a2`
ForwardName	`NTDLL.RtlReleaseSRWLockExclusive`

ReleaseSRWLockShared

Ordinal	`1516`
Address	`0x3a41d8`
ForwardName	`NTDLL.RtlReleaseSRWLockShared`

ReleaseSemaphore

Ordinal	`1517`
Address	`0x1cfe0`

ReleaseSemaphoreWhenCallbackReturns

Ordinal	`1518`
Address	`0x3a422b`
ForwardName	`NTDLL.TpCallbackReleaseSemaphoreOnCompletion`

ReleaseStateLock

Ordinal	`1519`
Address	`0x113650`

RemapPredefinedHandleInternal

Ordinal	`1520`
Address	`0x13a430`

RemoveDirectory2A

Ordinal	`1521`
Address	`0x190090`

RemoveDirectory2W

Ordinal	`1522`
Address	`0x1900e0`

RemoveDirectoryA

Ordinal	`1523`
Address	`0x126790`

RemoveDirectoryFromAppW

Ordinal	`1524`
Address	`0x12e010`

RemoveDirectoryW

Ordinal	`1525`
Address	`0x101400`

RemoveDllDirectory

Ordinal	`1526`
Address	`0x111720`

RemoveExtensionProgIds

Ordinal	`1527`
Address	`0x14dad0`

RemovePackageDependency

Ordinal	`1528`
Address	`0x11b550`

RemovePackageStatus

Ordinal	`1529`
Address	`0x115520`

RemovePackageStatusForUser

Ordinal	`1530`
Address	`0x150400`

RemoveVectoredContinueHandler

Ordinal	`1531`
Address	`0x3a4374`
ForwardName	`NTDLL.RtlRemoveVectoredContinueHandler`

RemoveVectoredExceptionHandler

Ordinal	`1532`
Address	`0x3a43ba`
ForwardName	`NTDLL.RtlRemoveVectoredExceptionHandler`

ReplaceFileExInternal

Ordinal	`1533`
Address	`0xd25d0`

ReplaceFileFromAppW

Ordinal	`1534`
Address	`0x12e0b0`

ReplaceFileW

Ordinal	`1535`
Address	`0xd2570`

ResetEvent

Ordinal	`1536`
Address	`0xbc950`

ResetState

Ordinal	`1537`
Address	`0x13f610`

ResetWriteWatch

Ordinal	`1538`
Address	`0xecf70`

ResizePseudoConsole

Ordinal	`1539`
Address	`0x15be90`

ResolveDelayLoadedAPI

Ordinal	`1540`
Address	`0xfc3d0`

ResolveDelayLoadsFromDll

Ordinal	`1541`
Address	`0x1828b0`

ResolveLocaleName

Ordinal	`1542`
Address	`0x8f890`

RestoreLastError

Ordinal	`1543`
Address	`0x3a44a5`
ForwardName	`NTDLL.RtlRestoreLastWin32Error`

RestoreThreadPreferredUILanguages

Ordinal	`1544`
Address	`0xfd1c0`

ResumeThread

Ordinal	`1545`
Address	`0xf15f0`

RevertToSelf

Ordinal	`1546`
Address	`0xdd220`

RsopLoggingEnabledInternal

Ordinal	`1547`
Address	`0x112710`

SHCoCreateInstance

Ordinal	`1548`
Address	`0xe09c0`

SHExpandEnvironmentStringsA

Ordinal	`1549`
Address	`0x139500`

SHExpandEnvironmentStringsW

Ordinal	`1550`
Address	`0xe20c0`

SHLoadIndirectString

Ordinal	`1551`
Address	`0x58d30`

SHLoadIndirectStringInternal

Ordinal	`1552`
Address	`0xb170`

SHRegCloseUSKey

Ordinal	`1553`
Address	`0xab260`

SHRegCreateUSKeyA

Ordinal	`1554`
Address	`0x12e5d0`

SHRegCreateUSKeyW

Ordinal	`1555`
Address	`0xa8c40`

SHRegDeleteEmptyUSKeyA

Ordinal	`1556`
Address	`0x12e670`

SHRegDeleteEmptyUSKeyW

Ordinal	`1557`
Address	`0x12e710`

SHRegDeleteUSValueA

Ordinal	`1558`
Address	`0x12e730`

SHRegDeleteUSValueW

Ordinal	`1559`
Address	`0x12e7c0`

SHRegEnumUSKeyA

Ordinal	`1560`
Address	`0x139c60`

SHRegEnumUSKeyW

Ordinal	`1561`
Address	`0xea430`

SHRegEnumUSValueA

Ordinal	`1562`
Address	`0x139dc0`

SHRegEnumUSValueW

Ordinal	`1563`
Address	`0xab5a0`

SHRegGetBoolUSValueA

Ordinal	`1564`
Address	`0x12e7d0`

SHRegGetBoolUSValueW

Ordinal	`1565`
Address	`0xaa740`

SHRegGetUSValueA

Ordinal	`1566`
Address	`0xaa2b0`

SHRegGetUSValueW

Ordinal	`1567`
Address	`0xaaa00`

SHRegOpenUSKeyA

Ordinal	`1568`
Address	`0xaa3e0`

SHRegOpenUSKeyW

Ordinal	`1569`
Address	`0xaab40`

SHRegQueryInfoUSKeyA

Ordinal	`1570`
Address	`0x139f70`

SHRegQueryInfoUSKeyW

Ordinal	`1571`
Address	`0xed8a0`

SHRegQueryUSValueA

Ordinal	`1572`
Address	`0xaa480`

SHRegQueryUSValueW

Ordinal	`1573`
Address	`0xab050`

SHRegSetUSValueA

Ordinal	`1574`
Address	`0x13a0f0`

SHRegSetUSValueW

Ordinal	`1575`
Address	`0xa9530`

SHRegWriteUSValueA

Ordinal	`1576`
Address	`0x13a190`

SHRegWriteUSValueW

Ordinal	`1577`
Address	`0xaa610`

SHTruncateString

Ordinal	`1578`
Address	`0x139560`

SaveAlternatePackageRootPath

Ordinal	`1579`
Address	`0x13ef80`

SaveStateRootFolderPath

Ordinal	`1580`
Address	`0x13ef80`

ScrollConsoleScreenBufferA

Ordinal	`1581`
Address	`0x15c630`

ScrollConsoleScreenBufferW

Ordinal	`1582`
Address	`0xbf320`

SearchPathA

Ordinal	`1583`
Address	`0xe52b0`

SearchPathW

Ordinal	`1584`
Address	`0xe56b0`

SetAclInformation

Ordinal	`1585`
Address	`0x182430`

SetCachedSigningLevel

Ordinal	`1586`
Address	`0x1114b0`

SetCalendarInfoW

Ordinal	`1587`
Address	`0x133c90`

SetClientDynamicTimeZoneInformation

Ordinal	`1588`
Address	`0xa0f10`

SetClientTimeZoneInformation

Ordinal	`1589`
Address	`0x18d8d0`

SetCommBreak

Ordinal	`1590`
Address	`0x18cef0`

SetCommConfig

Ordinal	`1591`
Address	`0x18cf00`

SetCommMask

Ordinal	`1592`
Address	`0x107ed0`

SetCommState

Ordinal	`1593`
Address	`0x18d010`

SetCommTimeouts

Ordinal	`1594`
Address	`0x110000`

SetComputerNameA

Ordinal	`1595`
Address	`0x191f50`

SetComputerNameEx2W

Ordinal	`1596`
Address	`0x192000`

SetComputerNameExA

Ordinal	`1597`
Address	`0x192120`

SetComputerNameExW

Ordinal	`1598`
Address	`0x1921b0`

SetComputerNameW

Ordinal	`1599`
Address	`0x1921c0`

SetConsoleActiveScreenBuffer

Ordinal	`1600`
Address	`0x15c660`

SetConsoleCP

Ordinal	`1601`
Address	`0xbf420`

SetConsoleCtrlHandler

Ordinal	`1602`
Address	`0xfb610`

SetConsoleCursorInfo

Ordinal	`1603`
Address	`0xbf6f0`

SetConsoleCursorPosition

Ordinal	`1604`
Address	`0xbfb30`

SetConsoleDisplayMode

Ordinal	`1605`
Address	`0x15c6d0`

SetConsoleHistoryInfo

Ordinal	`1606`
Address	`0x15c770`

SetConsoleInputExeNameA

Ordinal	`1607`
Address	`0x126170`

SetConsoleInputExeNameW

Ordinal	`1608`
Address	`0x107020`

SetConsoleMode

Ordinal	`1609`
Address	`0xbfbc0`

SetConsoleNumberOfCommandsA

Ordinal	`1610`
Address	`0x15bd20`

SetConsoleNumberOfCommandsW

Ordinal	`1611`
Address	`0x126910`

SetConsoleOutputCP

Ordinal	`1612`
Address	`0xbf670`

SetConsoleScreenBufferInfoEx

Ordinal	`1613`
Address	`0x15c800`

SetConsoleScreenBufferSize

Ordinal	`1614`
Address	`0x15c910`

SetConsoleTextAttribute

Ordinal	`1615`
Address	`0xbfc30`

SetConsoleTitleA

Ordinal	`1616`
Address	`0x15bd30`

SetConsoleTitleW

Ordinal	`1617`
Address	`0xee3d0`

SetConsoleWindowInfo

Ordinal	`1618`
Address	`0x15c990`

SetCriticalSectionSpinCount

Ordinal	`1619`
Address	`0x3a4adf`
ForwardName	`NTDLL.RtlSetCriticalSectionSpinCount`

SetCurrentConsoleFontEx

Ordinal	`1620`
Address	`0xbf9f0`

SetCurrentDirectoryA

Ordinal	`1621`
Address	`0x1105b0`

SetCurrentDirectoryW

Ordinal	`1622`
Address	`0x74440`

SetDefaultDllDirectories

Ordinal	`1623`
Address	`0x107360`

SetDynamicTimeZoneInformation

Ordinal	`1624`
Address	`0x18da50`

SetEndOfFile

Ordinal	`1625`
Address	`0xf1710`

SetEnvironmentStringsW

Ordinal	`1626`
Address	`0x111300`

SetEnvironmentVariableA

Ordinal	`1627`
Address	`0xfe120`

SetEnvironmentVariableW

Ordinal	`1628`
Address	`0xfdc10`

SetErrorMode

Ordinal	`1629`
Address	`0x18990`

SetEvent

Ordinal	`1630`
Address	`0xb7ab0`

SetEventWhenCallbackReturns

Ordinal	`1631`
Address	`0x3a4c03`
ForwardName	`NTDLL.TpCallbackSetEventOnCompletion`

SetExtensionProperty

Ordinal	`1632`
Address	`0x44640`

SetFileApisToANSI

Ordinal	`1633`
Address	`0x18ba10`

SetFileApisToOEM

Ordinal	`1634`
Address	`0x18ba50`

SetFileAttributesA

Ordinal	`1635`
Address	`0x6a030`

SetFileAttributesFromAppW

Ordinal	`1636`
Address	`0x12e180`

SetFileAttributesW

Ordinal	`1637`
Address	`0x6ad80`

SetFileInformationByHandle

Ordinal	`1638`
Address	`0xf0d30`

SetFileIoOverlappedRange

Ordinal	`1639`
Address	`0x190440`

SetFilePointer

Ordinal	`1640`
Address	`0x1b830`

SetFilePointerEx

Ordinal	`1641`
Address	`0x1ce70`

SetFileSecurityW

Ordinal	`1642`
Address	`0xfc9c0`

SetFileTime

Ordinal	`1643`
Address	`0xf8ad0`

SetFileValidData

Ordinal	`1644`
Address	`0x108fb0`

SetHandleCount

Ordinal	`1645`
Address	`0x1259c0`

SetHandleInformation

Ordinal	`1646`
Address	`0xe9aa0`

SetIoRingCompletionEvent

Ordinal	`1647`
Address	`0x133620`

SetIsDeveloperModeEnabled

Ordinal	`1648`
Address	`0x15a680`

SetIsSideloadingEnabled

Ordinal	`1649`
Address	`0x15a6d0`

SetKernelObjectSecurity

Ordinal	`1650`
Address	`0xf4560`

SetLastConsoleEventActive

Ordinal	`1651`
Address	`0x15c2a0`

SetLastError

Ordinal	`1652`
Address	`0x3a4dd0`
ForwardName	`NTDLL.RtlSetLastWin32Error`

SetLocalTime

Ordinal	`1653`
Address	`0x18db20`

SetLocaleInfoW

Ordinal	`1654`
Address	`0x56c70`

SetNamedPipeHandleState

Ordinal	`1655`
Address	`0xf29a0`

SetPersistedRegistryBOOL

Ordinal	`1656`
Address	`0x12d580`

SetPersistedRegistryDWORD

Ordinal	`1657`
Address	`0x12d580`

SetPersistedRegistryString

Ordinal	`1658`
Address	`0x12d5b0`

SetPersistedRegistryValue

Ordinal	`1659`
Address	`0x12d620`

SetPriorityClass

Ordinal	`1660`
Address	`0xf9d80`

SetPrivateObjectSecurity

Ordinal	`1661`
Address	`0x182460`

SetPrivateObjectSecurityEx

Ordinal	`1662`
Address	`0x1824a0`

SetProcessAffinityUpdateMode

Ordinal	`1663`
Address	`0x1147d0`

SetProcessDefaultCpuSetMasks

Ordinal	`1664`
Address	`0x191860`

SetProcessDefaultCpuSets

Ordinal	`1665`
Address	`0x191940`

SetProcessDynamicEHContinuationTargets

Ordinal	`1666`
Address	`0x191a20`

SetProcessDynamicEnforcedCetCompatibleRanges

Ordinal	`1667`
Address	`0x191a70`

SetProcessGroupAffinity

Ordinal	`1668`
Address	`0x113160`

SetProcessInformation

Ordinal	`1669`
Address	`0xf9410`

SetProcessMitigationPolicy

Ordinal	`1670`
Address	`0xfbf40`

SetProcessPreferredUILanguages

Ordinal	`1671`
Address	`0x10f020`

SetProcessPriorityBoost

Ordinal	`1672`
Address	`0x10b0a0`

SetProcessShutdownParameters

Ordinal	`1673`
Address	`0xfd820`

SetProcessValidCallTargets

Ordinal	`1674`
Address	`0xee030`

SetProcessValidCallTargetsForMappedView

Ordinal	`1675`
Address	`0x182f70`

SetProcessWorkingSetSize

Ordinal	`1676`
Address	`0x112580`

SetProcessWorkingSetSizeEx

Ordinal	`1677`
Address	`0x105b30`

SetProtectedPolicy

Ordinal	`1678`
Address	`0x114840`

SetProtocolProperty

Ordinal	`1679`
Address	`0x43fb0`

SetRoamingLastObservedChangeTime

Ordinal	`1680`
Address	`0x13f6b0`

SetSecurityAccessMask

Ordinal	`1681`
Address	`0xfcb90`

SetSecurityDescriptorControl

Ordinal	`1682`
Address	`0x1029c0`

SetSecurityDescriptorDacl

Ordinal	`1683`
Address	`0x9d650`

SetSecurityDescriptorGroup

Ordinal	`1684`
Address	`0x9c750`

SetSecurityDescriptorOwner

Ordinal	`1685`
Address	`0x9c720`

SetSecurityDescriptorRMControl

Ordinal	`1686`
Address	`0x109aa0`

SetSecurityDescriptorSacl

Ordinal	`1687`
Address	`0xfa510`

SetStateVersion

Ordinal	`1688`
Address	`0x13f760`

SetStdHandle

Ordinal	`1689`
Address	`0x107960`

SetStdHandleEx

Ordinal	`1690`
Address	`0xf4940`

SetSystemFileCacheSize

Ordinal	`1691`
Address	`0x182fb0`

SetSystemTime

Ordinal	`1692`
Address	`0x18dc30`

SetSystemTimeAdjustment

Ordinal	`1693`
Address	`0x18dd40`

SetSystemTimeAdjustmentPrecise

Ordinal	`1694`
Address	`0x18dd90`

SetThreadContext

Ordinal	`1695`
Address	`0x10b010`

SetThreadDescription

Ordinal	`1696`
Address	`0xe6d40`

SetThreadErrorMode

Ordinal	`1697`
Address	`0xdd9d0`

SetThreadGroupAffinity

Ordinal	`1698`
Address	`0xf7320`

SetThreadIdealProcessor

Ordinal	`1699`
Address	`0xef110`

SetThreadIdealProcessorEx

Ordinal	`1700`
Address	`0x108c00`

SetThreadInformation

Ordinal	`1701`
Address	`0xc5a50`

SetThreadLocale

Ordinal	`1702`
Address	`0x3b850`

SetThreadPreferredUILanguages

Ordinal	`1703`
Address	`0xbaa80`

SetThreadPreferredUILanguages2

Ordinal	`1704`
Address	`0xbab10`

SetThreadPriority

Ordinal	`1705`
Address	`0xc7b30`

SetThreadPriorityBoost

Ordinal	`1706`
Address	`0xe86e0`

SetThreadSelectedCpuSetMasks

Ordinal	`1707`
Address	`0x18e4a0`

SetThreadSelectedCpuSets

Ordinal	`1708`
Address	`0x18e580`

SetThreadStackGuarantee

Ordinal	`1709`
Address	`0xf19c0`

SetThreadToken

Ordinal	`1710`
Address	`0x1be10`

SetThreadUILanguage

Ordinal	`1711`
Address	`0xbac50`

SetThreadpoolStackInformation

Ordinal	`1712`
Address	`0x138c20`

SetThreadpoolThreadMaximum

Ordinal	`1713`
Address	`0x3a53ca`
ForwardName	`NTDLL.TpSetPoolMaxThreads`

SetThreadpoolThreadMinimum

Ordinal	`1714`
Address	`0x1027f0`

SetThreadpoolTimer

Ordinal	`1715`
Address	`0x3a5412`
ForwardName	`NTDLL.TpSetTimer`

SetThreadpoolTimerEx

Ordinal	`1716`
Address	`0x3a5438`
ForwardName	`NTDLL.TpSetTimerEx`

SetThreadpoolWait

Ordinal	`1717`
Address	`0x3a545d`
ForwardName	`NTDLL.TpSetWait`

SetThreadpoolWaitEx

Ordinal	`1718`
Address	`0x3a5481`
ForwardName	`NTDLL.TpSetWaitEx`

SetTimeZoneInformation

Ordinal	`1719`
Address	`0x18de00`

SetTokenInformation

Ordinal	`1720`
Address	`0xfc420`

SetUnhandledExceptionFilter

Ordinal	`1721`
Address	`0xe9fe0`

SetUserGeoID

Ordinal	`1722`
Address	`0x137d40`

SetUserGeoName

Ordinal	`1723`
Address	`0x568b0`

SetWaitableTimer

Ordinal	`1724`
Address	`0xb6300`

SetWaitableTimerEx

Ordinal	`1725`
Address	`0xb6480`

SetXStateFeaturesMask

Ordinal	`1726`
Address	`0x111950`

SetupComm

Ordinal	`1727`
Address	`0x18d460`

SharedLocalIsEnabled

Ordinal	`1728`
Address	`0x5260`

SignalObjectAndWait

Ordinal	`1729`
Address	`0xbd450`

SizeofResource

Ordinal	`1730`
Address	`0xde7c0`

Sleep

Ordinal	`1731`
Address	`0xc2e70`

SleepConditionVariableCS

Ordinal	`1732`
Address	`0x1be70`

SleepConditionVariableSRW

Ordinal	`1733`
Address	`0x1ae00`

SleepEx

Ordinal	`1734`
Address	`0x8cc10`

SpecialMBToWC

Ordinal	`1735`
Address	`0x111680`

StartThreadpoolIo

Ordinal	`1736`
Address	`0x3a55d3`
ForwardName	`NTDLL.TpStartAsyncIoOperation`

StrCSpnA

Ordinal	`1737`
Address	`0x106240`

StrCSpnIA

Ordinal	`1738`
Address	`0x12cd60`

StrCSpnIW

Ordinal	`1739`
Address	`0x12cdc0`

StrCSpnW

Ordinal	`1740`
Address	`0xdf510`

StrCatBuffA

Ordinal	`1741`
Address	`0xbe550`

StrCatBuffW

Ordinal	`1742`
Address	`0x12ce30`

StrCatChainW

Ordinal	`1743`
Address	`0x12ce70`

StrChrA

Ordinal	`1744`
Address	`0x39500`

StrChrA_MB

Ordinal	`1745`
Address	`0x39480`

StrChrIA

Ordinal	`1746`
Address	`0x38ca0`

StrChrIW

Ordinal	`1747`
Address	`0x3c0a0`

StrChrNIW

Ordinal	`1748`
Address	`0x108100`

StrChrNW

Ordinal	`1749`
Address	`0xdd990`

StrChrW

Ordinal	`1750`
Address	`0x5940`

StrCmpCA

Ordinal	`1751`
Address	`0x1007a0`

StrCmpCW

Ordinal	`1752`
Address	`0xb8d00`

StrCmpICA

Ordinal	`1753`
Address	`0xccf10`

StrCmpICW

Ordinal	`1754`
Address	`0xb5fc0`

StrCmpIW

Ordinal	`1755`
Address	`0x3c360`

StrCmpLogicalW

Ordinal	`1756`
Address	`0x39d50`

StrCmpNA

Ordinal	`1757`
Address	`0x37ab0`

StrCmpNCA

Ordinal	`1758`
Address	`0xf4eb0`

StrCmpNCW

Ordinal	`1759`
Address	`0xdf310`

StrCmpNIA

Ordinal	`1760`
Address	`0xcac70`

StrCmpNICA

Ordinal	`1761`
Address	`0xc1e80`

StrCmpNICW

Ordinal	`1762`
Address	`0x2da90`

StrCmpNIW

Ordinal	`1763`
Address	`0x39e30`

StrCmpNW

Ordinal	`1764`
Address	`0x39ba0`

StrCmpW

Ordinal	`1765`
Address	`0x39a00`

StrCpyNW

Ordinal	`1766`
Address	`0x106590`

StrCpyNXA

Ordinal	`1767`
Address	`0x12cef0`

StrCpyNXW

Ordinal	`1768`
Address	`0x1065b0`

StrDupA

Ordinal	`1769`
Address	`0xbe4e0`

StrDupW

Ordinal	`1770`
Address	`0xa2b0`

StrIsIntlEqualA

Ordinal	`1771`
Address	`0x1103d0`

StrIsIntlEqualW

Ordinal	`1772`
Address	`0xea670`

StrPBrkA

Ordinal	`1773`
Address	`0x12cf30`

StrPBrkW

Ordinal	`1774`
Address	`0xb6ad0`

StrRChrA

Ordinal	`1775`
Address	`0x12cf90`

StrRChrIA

Ordinal	`1776`
Address	`0x12d010`

StrRChrIW

Ordinal	`1777`
Address	`0xf74f0`

StrRChrW

Ordinal	`1778`
Address	`0xdf2b0`

StrRStrIA

Ordinal	`1779`
Address	`0x10ed80`

StrRStrIW

Ordinal	`1780`
Address	`0xbc590`

StrSpnA

Ordinal	`1781`
Address	`0x12d0a0`

StrSpnW

Ordinal	`1782`
Address	`0x12d140`

StrStrA

Ordinal	`1783`
Address	`0x388e0`

StrStrIA

Ordinal	`1784`
Address	`0x38a90`

StrStrIW

Ordinal	`1785`
Address	`0xb890`

StrStrNIW

Ordinal	`1786`
Address	`0x108050`

StrStrNW

Ordinal	`1787`
Address	`0xdd8e0`

StrStrW

Ordinal	`1788`
Address	`0x39830`

StrToInt64ExA

Ordinal	`1789`
Address	`0xf3200`

StrToInt64ExW

Ordinal	`1790`
Address	`0xf3350`

StrToIntA

Ordinal	`1791`
Address	`0xfb110`

StrToIntExA

Ordinal	`1792`
Address	`0xf31c0`

StrToIntExW

Ordinal	`1793`
Address	`0xf3310`

StrToIntW

Ordinal	`1794`
Address	`0xcad00`

StrTrimA

Ordinal	`1795`
Address	`0x110410`

StrTrimW

Ordinal	`1796`
Address	`0xbd950`

SubmitIoRing

Ordinal	`1797`
Address	`0x102e60`

SubmitThreadpoolWork

Ordinal	`1798`
Address	`0x3a586c`
ForwardName	`NTDLL.TpPostWork`

SubscribeEdpEnabledStateChange

Ordinal	`1799`
Address	`0x1022f0`

SubscribeFeatureUsageFlush

Ordinal	`1800`
Address	`0x1086e0`

SubscribeStateChangeNotification

Ordinal	`1801`
Address	`0x105e90`

SubscribeWdagEnabledStateChange

Ordinal	`1802`
Address	`0x101fc0`

SuspendThread

Ordinal	`1803`
Address	`0xf3880`

SwitchToFiber

Ordinal	`1804`
Address	`0xe3e20`

SwitchToThread

Ordinal	`1805`
Address	`0xb57e0`

SystemTimeToFileTime

Ordinal	`1806`
Address	`0xb4730`

SystemTimeToTzSpecificLocalTime

Ordinal	`1807`
Address	`0x9e7f0`

SystemTimeToTzSpecificLocalTimeEx

Ordinal	`1808`
Address	`0x9dea0`

TerminateEnclave

Ordinal	`1809`
Address	`0x18c270`

TerminateProcess

Ordinal	`1810`
Address	`0xfff20`

TerminateProcessOnMemoryExhaustion

Ordinal	`1811`
Address	`0x193530`

TerminateThread

Ordinal	`1812`
Address	`0x1127e0`

TestClose

Ordinal	`1813`
Address	`0x84c50`

TestControlReporting

Ordinal	`1814`
Address	`0x113010`

TestCreate

Ordinal	`1815`
Address	`0x65140`

TestOpen

Ordinal	`1816`
Address	`0x64ee0`

TestQueryData

Ordinal	`1817`
Address	`0x839d0`

TestRecoverResults

Ordinal	`1818`
Address	`0x1780c0`

TestReport

Ordinal	`1819`
Address	`0x11d6c0`

TestUnlockData

Ordinal	`1820`
Address	`0xddd40`

TlsAlloc

Ordinal	`1821`
Address	`0xfd9f0`

TlsFree

Ordinal	`1822`
Address	`0x1024e0`

TlsGetValue

Ordinal	`1823`
Address	`0x199e40`

TlsGetValue2

Ordinal	`1824`
Address	`0x1389b0`

TlsSetValue

Ordinal	`1825`
Address	`0xbbbc0`

TraceEvent

Ordinal	`1826`
Address	`0x3a5a7e`
ForwardName	`NTDLL.EtwLogTraceEvent`

TraceMessage

Ordinal	`1827`
Address	`0x3a5aa2`
ForwardName	`NTDLL.EtwTraceMessage`

TraceMessageVa

Ordinal	`1828`
Address	`0x3a5ac7`
ForwardName	`NTDLL.EtwTraceMessageVa`

TransactNamedPipe

Ordinal	`1829`
Address	`0xf2800`

TransmitCommChar

Ordinal	`1830`
Address	`0x18d590`

TryAcquireSRWLockExclusive

Ordinal	`1831`
Address	`0x3a5b1d`
ForwardName	`NTDLL.RtlTryAcquireSRWLockExclusive`

TryAcquireSRWLockShared

Ordinal	`1832`
Address	`0x3a5b59`
ForwardName	`NTDLL.RtlTryAcquireSRWLockShared`

TryCreatePackageDependency

Ordinal	`1833`
Address	`0x739b0`

TryCreatePackageDependency2

Ordinal	`1834`
Address	`0x73ac0`

TryEnterCriticalSection

Ordinal	`1835`
Address	`0x3a5bc9`
ForwardName	`NTDLL.RtlTryEnterCriticalSection`

TrySubmitThreadpoolCallback

Ordinal	`1836`
Address	`0xe9330`

TzSpecificLocalTimeToSystemTime

Ordinal	`1837`
Address	`0x9e2c0`

TzSpecificLocalTimeToSystemTimeEx

Ordinal	`1838`
Address	`0x18dfc0`

UnhandledExceptionFilter

Ordinal	`1839`
Address	`0x10f8b0`

UnlockFile

Ordinal	`1840`
Address	`0xeb6d0`

UnlockFileEx

Ordinal	`1841`
Address	`0xc68d0`

UnmapViewOfFile

Ordinal	`1842`
Address	`0xc27f0`

UnmapViewOfFile2

Ordinal	`1843`
Address	`0x6acc0`

UnmapViewOfFileEx

Ordinal	`1844`
Address	`0xc9a80`

UnregisterApplicationRestart

Ordinal	`1845`
Address	`0x8c520`

UnregisterBadMemoryNotification

Ordinal	`1846`
Address	`0x183090`

UnregisterGPNotificationInternal

Ordinal	`1847`
Address	`0x106af0`

UnregisterStateChangeNotification

Ordinal	`1848`
Address	`0x13f8b0`

UnregisterStateLock

Ordinal	`1849`
Address	`0x13f950`

UnregisterTraceGuids

Ordinal	`1850`
Address	`0x3a5d55`
ForwardName	`NTDLL.EtwUnregisterTraceGuids`

UnregisterWaitEx

Ordinal	`1851`
Address	`0xde860`

UnsubscribeEdpEnabledStateChange

Ordinal	`1852`
Address	`0x10b040`

UnsubscribeFeatureUsageFlush

Ordinal	`1853`
Address	`0x1129a0`

UnsubscribeStateChangeNotification

Ordinal	`1854`
Address	`0x10cf60`

UnsubscribeWdagEnabledStateChange

Ordinal	`1855`
Address	`0x10b040`

UpdatePackageStatus

Ordinal	`1856`
Address	`0x10e7b0`

UpdatePackageStatusForUser

Ordinal	`1857`
Address	`0x150420`

UpdatePackageStatusForUserSid

Ordinal	`1858`
Address	`0x1504f0`

UpdateProcThreadAttribute

Ordinal	`1859`
Address	`0x11dd20`

UrlApplySchemeA

Ordinal	`1860`
Address	`0x12edd0`

UrlApplySchemeW

Ordinal	`1861`
Address	`0x112c20`

UrlCanonicalizeA

Ordinal	`1862`
Address	`0x111a40`

UrlCanonicalizeW

Ordinal	`1863`
Address	`0x31f00`

UrlCombineA

Ordinal	`1864`
Address	`0x36cf0`

UrlCombineW

Ordinal	`1865`
Address	`0x31e50`

UrlCompareA

Ordinal	`1866`
Address	`0x12ef30`

UrlCompareW

Ordinal	`1867`
Address	`0xfc1c0`

UrlCreateFromPathA

Ordinal	`1868`
Address	`0x12f0c0`

UrlCreateFromPathW

Ordinal	`1869`
Address	`0x2dc90`

UrlEscapeA

Ordinal	`1870`
Address	`0x12f220`

UrlEscapeW

Ordinal	`1871`
Address	`0x30cb0`

UrlFixupW

Ordinal	`1872`
Address	`0x12f390`

UrlGetLocationA

Ordinal	`1873`
Address	`0x12f700`

UrlGetLocationW

Ordinal	`1874`
Address	`0x2cf80`

UrlGetPartA

Ordinal	`1875`
Address	`0x37530`

UrlGetPartW

Ordinal	`1876`
Address	`0x2e9d0`

UrlHashA

Ordinal	`1877`
Address	`0x12f7d0`

UrlHashW

Ordinal	`1878`
Address	`0x12f830`

UrlIsA

Ordinal	`1879`
Address	`0x12f8e0`

UrlIsNoHistoryA

Ordinal	`1880`
Address	`0x12f9f0`

UrlIsNoHistoryW

Ordinal	`1881`
Address	`0x1120f0`

UrlIsOpaqueA

Ordinal	`1882`
Address	`0x12fa00`

UrlIsOpaqueW

Ordinal	`1883`
Address	`0x12fa10`

UrlIsW

Ordinal	`1884`
Address	`0x2d4a0`

UrlUnescapeA

Ordinal	`1885`
Address	`0x366c0`

UrlUnescapeW

Ordinal	`1886`
Address	`0x7fb0`

VerFindFileA

Ordinal	`1887`
Address	`0x12b280`

VerFindFileW

Ordinal	`1888`
Address	`0x12bdf0`

VerLanguageNameA

Ordinal	`1889`
Address	`0x134110`

VerLanguageNameW

Ordinal	`1890`
Address	`0x913f0`

VerQueryValueA

Ordinal	`1891`
Address	`0x103a50`

VerQueryValueW

Ordinal	`1892`
Address	`0x3ba10`

VerSetConditionMask

Ordinal	`1893`
Address	`0x3a6040`
ForwardName	`NTDLL.VerSetConditionMask`

VerifyApplicationUserModelId

Ordinal	`1894`
Address	`0x14ed70`

VerifyApplicationUserModelIdA

Ordinal	`1895`
Address	`0x14edc0`

VerifyPackageFamilyName

Ordinal	`1896`
Address	`0x10e4d0`

VerifyPackageFamilyNameA

Ordinal	`1897`
Address	`0x14ee00`

VerifyPackageFullName

Ordinal	`1898`
Address	`0x250e0`

VerifyPackageFullNameA

Ordinal	`1899`
Address	`0x14ee50`

VerifyPackageId

Ordinal	`1900`
Address	`0x14eed0`

VerifyPackageIdA

Ordinal	`1901`
Address	`0x14ef50`

VerifyPackageName

Ordinal	`1902`
Address	`0xa5b10`

VerifyPackageNameA

Ordinal	`1903`
Address	`0x14efd0`

VerifyPackagePublisher

Ordinal	`1904`
Address	`0x112be0`

VerifyPackagePublisherA

Ordinal	`1905`
Address	`0x14f030`

VerifyPackageRelativeApplicationId

Ordinal	`1906`
Address	`0x14f040`

VerifyPackageRelativeApplicationIdA

Ordinal	`1907`
Address	`0x14f080`

VerifyScripts

Ordinal	`1908`
Address	`0x137710`

VirtualAlloc

Ordinal	`1909`
Address	`0xb8c80`

VirtualAlloc2

Ordinal	`1910`
Address	`0xea390`

VirtualAlloc2FromApp

Ordinal	`1911`
Address	`0x1830c0`

VirtualAllocEx

Ordinal	`1912`
Address	`0xbc980`

VirtualAllocExNuma

Ordinal	`1913`
Address	`0xba6c0`

VirtualAllocFromApp

Ordinal	`1914`
Address	`0x112910`

VirtualFree

Ordinal	`1915`
Address	`0xbc4c0`

VirtualFreeEx

Ordinal	`1916`
Address	`0x8d570`

VirtualLock

Ordinal	`1917`
Address	`0xe8660`

VirtualProtect

Ordinal	`1918`
Address	`0xc2260`

VirtualProtectEx

Ordinal	`1919`
Address	`0xba1c0`

VirtualProtectFromApp

Ordinal	`1920`
Address	`0x183100`

VirtualQuery

Ordinal	`1921`
Address	`0xce420`

VirtualQueryEx

Ordinal	`1922`
Address	`0xcdcc0`

VirtualUnlock

Ordinal	`1923`
Address	`0x1b2c0`

VirtualUnlockEx

Ordinal	`1924`
Address	`0x1831a0`

WTSGetServiceSessionId

Ordinal	`1925`
Address	`0xfdaa0`

WTSIsServerContainer

Ordinal	`1926`
Address	`0xfbe90`

WaitCommEvent

Ordinal	`1927`
Address	`0x10fe90`

WaitForDebugEvent

Ordinal	`1928`
Address	`0x10f700`

WaitForDebugEventEx

Ordinal	`1929`
Address	`0x114c10`

WaitForMachinePolicyForegroundProcessingInternal

Ordinal	`1930`
Address	`0x12bb40`

WaitForMultipleObjects

Ordinal	`1931`
Address	`0x1aa10`

WaitForMultipleObjectsEx

Ordinal	`1932`
Address	`0x1aa30`

WaitForSingleObject

Ordinal	`1933`
Address	`0xc1be0`

WaitForSingleObjectEx

Ordinal	`1934`
Address	`0x141d0`

WaitForThreadpoolIoCallbacks

Ordinal	`1935`
Address	`0x3a63c1`
ForwardName	`NTDLL.TpWaitForIoCompletion`

WaitForThreadpoolTimerCallbacks

Ordinal	`1936`
Address	`0x3a63fd`
ForwardName	`NTDLL.TpWaitForTimer`

WaitForThreadpoolWaitCallbacks

Ordinal	`1937`
Address	`0x3a6431`
ForwardName	`NTDLL.TpWaitForWait`

WaitForThreadpoolWorkCallbacks

Ordinal	`1938`
Address	`0x3a6464`
ForwardName	`NTDLL.TpWaitForWork`

WaitForUserPolicyForegroundProcessingInternal

Ordinal	`1939`
Address	`0x12bb80`

WaitNamedPipeW

Ordinal	`1940`
Address	`0x1c810`

WaitOnAddress

Ordinal	`1941`
Address	`0xddcb0`

WakeAllConditionVariable

Ordinal	`1942`
Address	`0x3a64dc`
ForwardName	`NTDLL.RtlWakeAllConditionVariable`

WakeByAddressAll

Ordinal	`1943`
Address	`0x3a650f`
ForwardName	`NTDLL.RtlWakeAddressAll`

WakeByAddressSingle

Ordinal	`1944`
Address	`0x3a653b`
ForwardName	`NTDLL.RtlWakeAddressSingle`

WakeConditionVariable

Ordinal	`1945`
Address	`0x3a656c`
ForwardName	`NTDLL.RtlWakeConditionVariable`

WerGetFlags

Ordinal	`1946`
Address	`0x113150`

WerRegisterAdditionalProcess

Ordinal	`1947`
Address	`0x12c740`

WerRegisterAppLocalDump

Ordinal	`1948`
Address	`0x12c750`

WerRegisterCustomMetadata

Ordinal	`1949`
Address	`0x10de60`

WerRegisterExcludedMemoryBlock

Ordinal	`1950`
Address	`0x12c760`

WerRegisterFile

Ordinal	`1951`
Address	`0x1062a0`

WerRegisterMemoryBlock

Ordinal	`1952`
Address	`0x102a80`

WerRegisterRuntimeExceptionModule

Ordinal	`1953`
Address	`0x10f8a0`

WerSetFlags

Ordinal	`1954`
Address	`0x112700`

WerSetMaxProcessHoldMilliseconds

Ordinal	`1955`
Address	`0x1159f0`

WerUnregisterAdditionalProcess

Ordinal	`1956`
Address	`0x12c780`

WerUnregisterAppLocalDump

Ordinal	`1957`
Address	`0x12c790`

WerUnregisterCustomMetadata

Ordinal	`1958`
Address	`0x12c7b0`

WerUnregisterExcludedMemoryBlock

Ordinal	`1959`
Address	`0x12c7c0`

WerUnregisterFile

Ordinal	`1960`
Address	`0x109d10`

WerUnregisterMemoryBlock

Ordinal	`1961`
Address	`0x1079d0`

WerUnregisterRuntimeExceptionModule

Ordinal	`1962`
Address	`0x112c10`

WerpNotifyLoadStringResource

Ordinal	`1963`
Address	`0x12c7d0`

WerpNotifyUseStringResource

Ordinal	`1964`
Address	`0x12c7d0`

WideCharToMultiByte

Ordinal	`1965`
Address	`0x41390`

WilFailureNotifyWatchers

Ordinal	`1966`
Address	`0xb0340`

WilFailureWatcherResume

Ordinal	`1967`
Address	`0x132110`

WilFailureWatcherSubscribe

Ordinal	`1968`
Address	`0xe0a30`

WilFailureWatcherSuspend

Ordinal	`1969`
Address	`0x132140`

WilFailureWatcherUnsubscribe

Ordinal	`1970`
Address	`0xae6c0`

Wow64DisableWow64FsRedirection

Ordinal	`1971`
Address	`0xfda30`

Wow64EnableWow64FsRedirection

Ordinal	`1972`
Address	`0x1109f0`

Wow64GetThreadContext

Ordinal	`1973`
Address	`0x113700`

Wow64RevertWow64FsRedirection

Ordinal	`1974`
Address	`0x10afd0`

Wow64SetThreadContext

Ordinal	`1975`
Address	`0x18e660`

Wow64SetThreadDefaultGuestMachine

Ordinal	`1976`
Address	`0xc65c0`

Wow64SuspendThread

Ordinal	`1977`
Address	`0x1129b0`

WriteConsoleA

Ordinal	`1978`
Address	`0xf8110`

WriteConsoleInputA

Ordinal	`1979`
Address	`0x15c0e0`

WriteConsoleInputW

Ordinal	`1980`
Address	`0x15c1e0`

WriteConsoleOutputA

Ordinal	`1981`
Address	`0x15c200`

WriteConsoleOutputAttribute

Ordinal	`1982`
Address	`0x15c230`

WriteConsoleOutputCharacterA

Ordinal	`1983`
Address	`0xee740`

WriteConsoleOutputCharacterW

Ordinal	`1984`
Address	`0x15c270`

WriteConsoleOutputW

Ordinal	`1985`
Address	`0xe8ce0`

WriteConsoleW

Ordinal	`1986`
Address	`0xf8150`

WriteFile

Ordinal	`1987`
Address	`0xb44c0`

WriteFileEx

Ordinal	`1988`
Address	`0xcd550`

WriteFileGather

Ordinal	`1989`
Address	`0x1044b0`

WriteProcessMemory

Ordinal	`1990`
Address	`0x8e1b0`

WriteStateAtomValue

Ordinal	`1991`
Address	`0xa48b0`

WriteStateContainerValue

Ordinal	`1992`
Address	`0xaec10`

ZombifyActCtx

Ordinal	`1993`
Address	`0x12c420`

_AddMUIStringToCache

Ordinal	`1994`
Address	`0x584a0`

_GetMUIStringFromCache

Ordinal	`1995`
Address	`0x5b570`

_OpenMuiStringCache

Ordinal	`1996`
Address	`0x59cc0`

__C_specific_handler

Ordinal	`1997`
Address	`0x3a6a54`
ForwardName	`NTDLL.__C_specific_handler`

__FC_Query_Config

Ordinal	`1998`
Address	`0x1815b0`

__FC_Query_System

Ordinal	`1999`
Address	`0x1815e0`

__FC_Report

Ordinal	`2000`
Address	`0x181600`

__FC_Subscribe

Ordinal	`2001`
Address	`0x1816b0`

__FC_Unsubscribe

Ordinal	`2002`
Address	`0x1816f0`

__argc

Ordinal	`2003`
Address	`0x3b02b8`

__chkstk

Ordinal	`2004`
Address	`0x3a6acf`
ForwardName	`NTDLL.__chkstk`

__dllonexit3

Ordinal	`2005`
Address	`0xb0f00`

__misaligned_access

Ordinal	`2006`
Address	`0x3a6aff`
ForwardName	`NTDLL.__misaligned_access`

__wargv

Ordinal	`2007`
Address	`0x3b02b0`

__wgetmainargs

Ordinal	`2008`
Address	`0x109010`

_amsg_exit

Ordinal	`2009`
Address	`0x11fd20`

_c_exit

Ordinal	`2010`
Address	`0x138cf0`

_cexit

Ordinal	`2011`
Address	`0x138d10`

_exit

Ordinal	`2012`
Address	`0x138d30`

_initterm

Ordinal	`2013`
Address	`0xf4520`

_initterm_e

Ordinal	`2014`
Address	`0xf6850`

_invalid_parameter

Ordinal	`2015`
Address	`0x126c40`

_local_unwind

Ordinal	`2016`
Address	`0x3a6b87`
ForwardName	`NTDLL._local_unwind`

_onexit

Ordinal	`2017`
Address	`0xaf6f0`

_purecall

Ordinal	`2018`
Address	`0x126e90`

_time64

Ordinal	`2019`
Address	`0x126eb0`

atexit

Ordinal	`2020`
Address	`0xaf5e0`

exit

Ordinal	`2021`
Address	`0x118050`

hgets

Ordinal	`2022`
Address	`0xe4920`

hwprintf

Ordinal	`2023`
Address	`0x138d50`

lstrcmp

Ordinal	`2024`
Address	`0xfc8c0`

lstrcmpA

Ordinal	`2025`
Address	`0xfc8c0`

lstrcmpW

Ordinal	`2026`
Address	`0x3aa90`

lstrcmpi

Ordinal	`2027`
Address	`0x3a020`

lstrcmpiA

Ordinal	`2028`
Address	`0x3a020`

lstrcmpiW

Ordinal	`2029`
Address	`0x3d850`

lstrcpyn

Ordinal	`2030`
Address	`0xf1430`

lstrcpynA

Ordinal	`2031`
Address	`0xf1430`

lstrcpynW

Ordinal	`2032`
Address	`0xf1950`

lstrlen

Ordinal	`2033`
Address	`0x38a60`

lstrlenA

Ordinal	`2034`
Address	`0x38a60`

lstrlenW

Ordinal	`2035`
Address	`0xaed0`

time

Ordinal	`2036`
Address	`0x126f20`

wprintf

Ordinal	`2037`
Address	`0x138f60`

1

Type	`MUI`
Language	English - United States
Codepage	UNKNOWN
Size	`0xd8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.81694`
MD5	`f1e0fff48f8a3c97db492bf5cebd32a9 🔍`
SHA1	`51b53228f27323434a3333dacce4362eecfec0cb 🔍`
SHA256	`eb283f09c590a3c8c5b8cafebbe0d0d3872d59dd3c8b243b13cc0c6b24fdbbe9 🔍`
SHA3	`bd24688e585cc6a6292c2f94973439fc49945209236eec7661c2d9a64235f5aa 🔍`

1 (#2)

Type	`RT_VERSION`
Language	English - United States
Codepage	UNKNOWN
Size	`0x3bc`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.51719`
MD5	`0eb33c8f7aa5ff66584202c64631cde2 🔍`
SHA1	`856236a169752b6f8c20bfa83c9bdba8f8f5abc2 🔍`
SHA256	`6b96cddc46a95087ce65f8b9067c6a2c9823c847c237c8ff9aea23260559dc7e 🔍`
SHA3	`58780af3c97d105d9da42cdad21e85d05a0e3279943cbb9adaf496f57725eb76 🔍`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	10.0.26100.9818
ProductVersion	10.0.26100.9818
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT` `VOS_NT_WINDOWS32` `VOS_WINCE` `VOS__WINDOWS32`
FileType	`VFT_DLL`
Language	English - United States
CompanyName	Microsoft Corporation
FileDescription	Windows NT BASE API Client DLL
FileVersion (#2)	10.0.26100.9818 (WinBuild.160101.0800)
InternalName	Kernelbase.dll
LegalCopyright	Â© Microsoft Corporation. All rights reserved.
OriginalFilename	Kernelbase.dll
ProductName	MicrosoftÂ® WindowsÂ® Operating System
ProductVersion (#2)	10.0.26100.9818

Resource LangID	English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	1975-Apr-21 14:08:36
Version	`0.0`
SizeofData	`39`
AddressOfRawData	`0x36d878`
PointerToRawData	`0x36d878`
Referenced File	kernelbase.pdb

IMAGE_DEBUG_TYPE_POGO

Characteristics	`0`
TimeDateStamp	1975-Apr-21 14:08:36
Version	`0.0`
SizeofData	`1028`
AddressOfRawData	`0x36d8a0`
PointerToRawData	`0x36d8a0`

UNKNOWN

Characteristics	`0`
TimeDateStamp	1975-Apr-21 14:08:36
Version	`0.0`
SizeofData	`36`
AddressOfRawData	`0x36dd24`
PointerToRawData	`0x36dd24`

UNKNOWN (#2)

Characteristics	`0`
TimeDateStamp	1975-Apr-21 14:08:36
Version	`0.0`
SizeofData	`4`
AddressOfRawData	`0x36dd48`
PointerToRawData	`0x36dd48`

TLS Callbacks

StartAddressOfRawData	`0x18036dd4c`
EndAddressOfRawData	`0x18036dd54`
AddressOfIndex	`0x1803aee10`
AddressOfCallbacks	`0x1802aed60`
SizeOfZeroFill	`0`
Characteristics	`IMAGE_SCN_ALIGN_4BYTES`
Callbacks	`(EMPTY)`

Load Configuration

Size	`0x148`
TimeDateStamp	`1970-Jan-01 00:00:00`
Version	`0.0`
GlobalFlagsClear	`(EMPTY)`
GlobalFlagsSet	`(EMPTY)`
CriticalSectionDefaultTimeout	`0`
DeCommitFreeBlockThreshold	`0`
DeCommitTotalFreeThreshold	`0`
LockPrefixTable	`0`
MaximumAllocationSize	`0`
VirtualMemoryThreshold	`0`
ProcessAffinityMask	`0`
ProcessHeapFlags	`(EMPTY)`
CSDVersion	`0`
Reserved1	`0x800`
EditList	`0`
SecurityCookie	`0x1803ae110`
GuardCFCheckFunctionPointer	`6445202592`
GuardCFDispatchFunctionPointer	`0`
GuardCFFunctionTable	`0`
GuardCFFunctionCount	`0`
GuardFlags	`(EMPTY)`
CodeIntegrity.Flags	`0`
CodeIntegrity.Catalog	`0`
CodeIntegrity.CatalogOffset	`0`
CodeIntegrity.Reserved	`0`
GuardAddressTakenIatEntryTable	`0`
GuardAddressTakenIatEntryCount	`0`
GuardLongJumpTargetTable	`0`
GuardLongJumpTargetCount	`0`

RICH Header

XOR Key	`0xe09cb814`
Unmarked objects	`0`
Imports (VS2008 SP1 build 30729)	`6`
C++ objects (33145)	`27`
Imports (33145)	`5`
Total imports	`1007`
Unmarked objects (#2)	`1`
C objects (33145)	`1351`
ASM objects (33145)	`6`
Exports (33145)	`1`
C objects (LTCG) (33145)	`993`
Resource objects (33145)	`1`
Linker (33145)	`1`

Errors

Leave a comment

No comments yet.