Manalyze report for 3c163e1a808c566871bdfcdac5f5afdfa799b7fef359f8695e99db808211f0c4

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
Compilation Date	2078-Nov-08 15:03:48
Detected languages	English - United States
Debug artifacts	ntdll.pdb
CompanyName	Microsoft Corporation
FileDescription	NT Layer DLL
FileVersion	`10.0.26100.8521 (WinBuild.160101.0800)`
InternalName	ntdll.dll
LegalCopyright	Â© Microsoft Corporation. All rights reserved.
OriginalFilename	ntdll.dll
ProductName	MicrosoftÂ® WindowsÂ® Operating System
ProductVersion	`10.0.26100.8521`

Plugin Output

Suspicious	Strings found in the binary may indicate undesirable behavior:	`Contains references to security software: msmpeng.exe` `Tries to detect virtualized environments: HARDWARE\DESCRIPTION\System` `May have dropper capabilities: CurrentControlSet\Services` `Miscellaneous malware strings: virus` `Contains domain names: go.microsoft.com http://go.microsoft.com http://go.microsoft.com/fwlink/?LinkId http://schemas.microsoft.com http://schemas.microsoft.com/SMI/2005/WindowsSettings http://schemas.microsoft.com/SMI/2019/WindowsSettings http://schemas.microsoft.com/SMI/2020/WindowsSettings https://go.microsoft.com https://go.microsoft.com/fwlink/?linkid microsoft.com schemas.microsoft.com`
Info	Cryptographic algorithms detected in the binary:	`Uses constants related to CRC32` `Uses constants related to MD5` `Uses constants related to SHA1` `Uses constants related to SHA256`
Suspicious	The PE is possibly packed.	`Unusual section name found: SCPCFG` `Unusual section name found: SCPCFGFP` `Unusual section name found: SCPCFGNP` `Unusual section name found: SCPCFGES` `Unusual section name found: RT` `Unusual section name found: PAGE` `Unusual section name found: fothk` `Unusual section name found: .mrdata` `The PE only has 0 import(s).`
Info	The PE is digitally signed.	`Signer: Microsoft Windows` `Issuer: Microsoft Windows Production PCA 2011`
Safe	VirusTotal score: 0/68 (Scanned on 2026-07-03 15:53:08)	`All the AVs think this file is safe.`

Hashes

MD5	`febf0f15e18525f95a328f9c0baac9af`
SHA1	`fd27f83b8c41ddfe168c1a3cab2052d3ba9aeb37`
SHA256	`3c163e1a808c566871bdfcdac5f5afdfa799b7fef359f8695e99db808211f0c4`
SHA3	`7de31a0bd65c3549fdc47b0b1748a3538a80baf5a2793d9344b306c3db34e6c9`
SSDeep	`49152:Abd8tosMvDH1r13Mq0by8NrEJrmCI0SC3nGFOH/d9:vu55Mq0oJBjd3Gcfd9`
Imports Hash	`d41d8cd98f00b204e9800998ecf8427e`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0xe0`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`15`
TimeDateStamp	2078-Nov-08 15:03:48
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_DLL` `IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`14.0`
SizeOfCode	`0x171000`
SizeOfInitializedData	`0xf4000`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x0000000000000000 (Section: ?)`
BaseOfCode	`0x1000`
ImageBase	`0x180000000`
SectionAlignment	`0x1000`
FileAlignment	`0x1000`
OperatingSystemVersion	`A.0`
ImageVersion	`A.0`
SubsystemVersion	`A.0`
Win32VersionValue	`0`
SizeOfImage	`0x266000`
SizeOfHeaders	`0x1000`
Checksum	`0x268013`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_GUARD_CF` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT`
SizeofStackReserve	`0x40000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`f8175f0155ebacc882311b1ccf5ebe82`
SHA1	`621c684858983447c40653b7e5ca55953021a1b8`
SHA256	`39af069e1be6e1523d299a75f27dae81f2dffbce43f52daf6e733e2fc97922c2`
SHA3	`da30d19c86c807d2cf0028a281da325163604dac9c9f2224b7be62de56d2d959`
VirtualSize	`0x16939a`
VirtualAddress	`0x1000`
SizeOfRawData	`0x16a000`
PointerToRawData	`0x1000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.45393`

SCPCFG

MD5	`67cccee178515e155fcd1c234b05cefb`
SHA1	`927d70c56c3bd5b567d676a3758c8b9f755d5271`
SHA256	`19c8c652a7452aa937201180b30a0bbd5bd6fe2a9e307b5e11a988fe0c63b752`
SHA3	`7e6e2b34870f97404ccdd6b63f3cdb2bd421cfb8610f794d43e6672807101a25`
VirtualSize	`0x2b0`
VirtualAddress	`0x16b000`
SizeOfRawData	`0x1000`
PointerToRawData	`0x16b000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`1.17469`

SCPCFGFP

MD5	`8fcef62b1133cd6485b86a5a8e1316de`
SHA1	`bf6165c66bbc3f48e97c9d5e65af0132da7820ed`
SHA256	`58d2c5bd618922157569ff03b932afcf8a03d63200c44524cdf1ee5629e6b169`
SHA3	`376a792a216b6eb5f5302b944f5b3833d3784dd1f76aba03efb4c4b58e4c7986`
VirtualSize	`0x2b0`
VirtualAddress	`0x16c000`
SizeOfRawData	`0x1000`
PointerToRawData	`0x16c000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`0.642392`

SCPCFGNP

MD5	`73224907cfbb1b7c3c40015757dc4650`
SHA1	`c5afdd099fed2c31cf5425c8f5c4f4c821616b0f`
SHA256	`54591b21c8b630c94e5c813c272f8a64efc090065cd3433e88ea35a6781ebac4`
SHA3	`809abe78c5199c9cf13e93919ed2de03b7e3ae41cb617c53499dd9f66cc44f2c`
VirtualSize	`0x2b0`
VirtualAddress	`0x16d000`
SizeOfRawData	`0x1000`
PointerToRawData	`0x16d000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`0.553338`

SCPCFGES

MD5	`9eb4914124c1e80de1ad638f87b5da9d`
SHA1	`65be9621e0b7d252bad745393697863bbd10e940`
SHA256	`e6aaf58e2811238bb15647eeefc82ec311f116b46e1fdd902e61a8e345587fb1`
SHA3	`01fe2f0f39410386ab332fe98a0bb4869b85c2144404b11a2a73638c8fb94358`
VirtualSize	`0x2b0`
VirtualAddress	`0x16e000`
SizeOfRawData	`0x1000`
PointerToRawData	`0x16e000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`1.17567`

RT

MD5	`8bb06c6df92516e3afaf7cdfde2dd311`
SHA1	`ff577b32a5645ca87678b569ae3d69ab2e19c3d1`
SHA256	`91df20086cace80820ba0d2c03bc72d688875064ec5d0b2aa026e29e9878324d`
SHA3	`57cde8ff95b76113396bd80089e722953074226e34a0ae9a9260a32e8dfda07d`
VirtualSize	`0x1bc`
VirtualAddress	`0x16f000`
SizeOfRawData	`0x1000`
PointerToRawData	`0x16f000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`1.06749`

PAGE

MD5	`8cd07a9e3654935f32247cfdca2fb96d`
SHA1	`b29ceb02db140771d1c5be54b18541a0ee6333c6`
SHA256	`b0a25a8f712f6490633e2641835de4022a8082236f45014b5a68c75dd8c47e76`
SHA3	`0d07b6596050d02eda5756b51771ae9ac48a9fafed87a2c5c95b2ac7eda0883c`
VirtualSize	`0x8c3`
VirtualAddress	`0x170000`
SizeOfRawData	`0x1000`
PointerToRawData	`0x170000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`4.22152`

fothk

MD5	`896866207334bd45af707783dd79131b`
SHA1	`1cbb3f22d8427d40d47bea35c243944f46b7cc82`
SHA256	`dd2988afab4b6a1ac6591edd8e6d2c284a03b8c3ae37cf3b1f361c061f3ade05`
SHA3	`5491fa66c56c471b1acb9423a584bbed585acb499925bc06474584df626acc0f`
VirtualSize	`0x1000`
VirtualAddress	`0x171000`
SizeOfRawData	`0x1000`
PointerToRawData	`0x171000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`0.0452237`

.rdata

MD5	`d2407d448c5304c674ec412e8ee2ac8f`
SHA1	`29582d6e6c2694aa4187367ae7e8d1d39f96d101`
SHA256	`3e457c14a0886a6478fc38bba783ab8fa84f34861a8a2b9f6a7a0eef05bc2764`
SHA3	`b6f97c96362d05ae11070159e8a9ab64ce393947965ef54084b25bf0dbdc47b1`
VirtualSize	`0x58bdf`
VirtualAddress	`0x172000`
SizeOfRawData	`0x59000`
PointerToRawData	`0x172000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`6.20332`

.data

MD5	`454659bca5dce33bda354934a84dc022`
SHA1	`d5ca7a948ef5f0c66dabbf2235e73c226b702d6f`
SHA256	`a151b756dc61d48ed7b9bafeb91cb2728b7e85fc3f207f619df6ad48da8acd5e`
SHA3	`b53137d132c42632e7491f8078502421dfb4d0a32f4b8468ea31b99b23865f6c`
VirtualSize	`0x8fb0`
VirtualAddress	`0x1cb000`
SizeOfRawData	`0x2000`
PointerToRawData	`0x1cb000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`1.53277`

.pdata

MD5	`110e97e121a571f375a7fbe76331dcf6`
SHA1	`a5569238ce1e975ca8f6a365f34750b79acec692`
SHA256	`36b756dd3798cb302fc5d557d2d8f8067abe34d72ea70b6c2da0f7a1ac82bb93`
SHA3	`7a1d54509cdcd59e31f7ec25637fa0d886b6f77cc1ca8981bab5bd0ce64ac661`
VirtualSize	`0x10a34`
VirtualAddress	`0x1d4000`
SizeOfRawData	`0x11000`
PointerToRawData	`0x1cd000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`6.08872`

.00cfg

MD5	`90907bffcc2722f8e66fa171e7be575b`
SHA1	`d17d3b0ffaf80f70464738e00b8c465ec515e156`
SHA256	`98ece4deb2ba36ab0f5a1b0a4cb5da9c99ffd15e68318b1e185724d9be8bcd8d`
SHA3	`25d1e4cadf075a1eca45fcaef96c238c2ca7ea8fa6685142f65d03322e85fe84`
VirtualSize	`0x28`
VirtualAddress	`0x1e5000`
SizeOfRawData	`0x1000`
PointerToRawData	`0x1de000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`0.0589047`

.mrdata

MD5	`9b77d43aea058a4742261ae37886e8d9`
SHA1	`708994ed5902ddfcab24dd80cfdef461f3b5aefa`
SHA256	`b0102000dae851001eda333c44c439493cc634094fa86504e33eb86f12ec471e`
SHA3	`3b41a24e8afd96cd13880b3b00678e6e1c2af2f14015484feecbce2b5fe388fe`
VirtualSize	`0x35b8`
VirtualAddress	`0x1e6000`
SizeOfRawData	`0x4000`
PointerToRawData	`0x1df000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0.242308`

.rsrc

MD5	`c901a940e8e41e1f2d01398b2e22e3bb`
SHA1	`a5d85b133d1034b85c1f8fdc5314615b0d732868`
SHA256	`b01283196d70897abd32aaf9f6b2f24d36e73757ca941575abc8729013e33a2b`
SHA3	`7ed747023b5b798044d85e8293f235f2fa9989a409f7e3468963c037dc4094f4`
VirtualSize	`0x7a350`
VirtualAddress	`0x1ea000`
SizeOfRawData	`0x7b000`
PointerToRawData	`0x1e3000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`3.33348`

.reloc

MD5	`2d9910d0bef656d61183b4f4bc0acece`
SHA1	`db651b88b778d312cfb823f0ad4cdb1eae5212a0`
SHA256	`54c192dcfcddc840d0a6e8463449d79acf74056de1ff7b6086df301ae6b0ccaf`
SHA3	`5bfb862399d722cee94e381f6f7f7a711cb5aed066d9bcd6466944525092548e`
VirtualSize	`0x810`
VirtualAddress	`0x265000`
SizeOfRawData	`0x1000`
PointerToRawData	`0x25e000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`3.43634`

Imports

Delayed Imports

Ordinal	`8`
Address	`0x965d0`

A_SHAFinal

Ordinal	`9`
Address	`0x117cf0`

A_SHAInit

Ordinal	`10`
Address	`0x117df0`

A_SHAUpdate

Ordinal	`11`
Address	`0x117ee0`

AlpcAdjustCompletionListConcurrencyCount

Ordinal	`12`
Address	`0x10b690`

AlpcFreeCompletionListMessage

Ordinal	`13`
Address	`0xd7bb0`

AlpcGetCompletionListLastMessageInformation

Ordinal	`14`
Address	`0x134a60`

AlpcGetCompletionListMessageAttributes

Ordinal	`15`
Address	`0x134a80`

AlpcGetHeaderSize

Ordinal	`16`
Address	`0xe0600`

AlpcGetMessageAttribute

Ordinal	`17`
Address	`0xe05c0`

AlpcGetMessageFromCompletionList

Ordinal	`18`
Address	`0xd7240`

AlpcGetOutstandingCompletionListMessageCount

Ordinal	`19`
Address	`0xee4a0`

AlpcInitializeMessageAttribute

Ordinal	`20`
Address	`0xe0560`

AlpcMaxAllowedMessageLength

Ordinal	`21`
Address	`0x106270`

AlpcRegisterCompletionList

Ordinal	`22`
Address	`0x107e10`

AlpcRegisterCompletionListWorkerThread

Ordinal	`23`
Address	`0xddfe0`

AlpcRundownCompletionList

Ordinal	`24`
Address	`0x10e730`

AlpcUnregisterCompletionList

Ordinal	`25`
Address	`0x10ed40`

AlpcUnregisterCompletionListWorkerThread

Ordinal	`26`
Address	`0xde260`

ApiSetGetImplementationHost

Ordinal	`27`
Address	`0x15c6f0`

ApiSetQueryApiSetPresence

Ordinal	`28`
Address	`0xeb440`

ApiSetQueryApiSetPresenceEx

Ordinal	`29`
Address	`0xece30`

ApiSetQuerySchema

Ordinal	`30`
Address	`0x15c720`

CsrAllocateCaptureBuffer

Ordinal	`31`
Address	`0x3c520`

CsrAllocateMessagePointer

Ordinal	`32`
Address	`0x3c7f0`

CsrCaptureMessageBuffer

Ordinal	`33`
Address	`0x3bc60`

CsrCaptureMessageMultiUnicodeStringsInPlace

Ordinal	`34`
Address	`0x3c2b0`

CsrCaptureMessageString

Ordinal	`35`
Address	`0x3c3e0`

CsrCaptureTimeout

Ordinal	`36`
Address	`0x12fed0`

CsrClientCallServer

Ordinal	`37`
Address	`0x3c620`

CsrClientConnectToServer

Ordinal	`38`
Address	`0x3bff0`

CsrFreeCaptureBuffer

Ordinal	`39`
Address	`0x3c5f0`

CsrGetProcessId

Ordinal	`40`
Address	`0x10f870`

CsrIdentifyAlertableThread

Ordinal	`41`
Address	`0x107a70`

CsrSetPriorityClass

Ordinal	`42`
Address	`0x15c750`

CsrVerifyRegion

Ordinal	`43`
Address	`0x12ff00`

DbgBreakPoint

Ordinal	`44`
Address	`0x11ece0`

DbgPrint

Ordinal	`45`
Address	`0x74ec0`

DbgPrintEx

Ordinal	`46`
Address	`0x57100`

DbgPrintReturnControlC

Ordinal	`47`
Address	`0x134ac0`

DbgPrompt

Ordinal	`48`
Address	`0x134b10`

DbgQueryDebugFilterState

Ordinal	`49`
Address	`0x134b60`

DbgSetDebugFilterState

Ordinal	`50`
Address	`0x134b70`

DbgUiConnectToDbg

Ordinal	`51`
Address	`0x112df0`

DbgUiContinue

Ordinal	`52`
Address	`0x10bf40`

DbgUiConvertStateChangeStructure

Ordinal	`53`
Address	`0x10e4f0`

DbgUiConvertStateChangeStructureEx

Ordinal	`54`
Address	`0x112810`

DbgUiDebugActiveProcess

Ordinal	`55`
Address	`0x130bf0`

DbgUiGetThreadDebugObject

Ordinal	`56`
Address	`0x130c50`

DbgUiIssueRemoteBreakin

Ordinal	`57`
Address	`0x130c70`

DbgUiRemoteBreakin

Ordinal	`58`
Address	`0x130dc0`

DbgUiSetThreadDebugObject

Ordinal	`59`
Address	`0x130e20`

DbgUiStopDebugging

Ordinal	`60`
Address	`0x130e40`

DbgUiWaitStateChange

Ordinal	`61`
Address	`0x10a2c0`

DbgUserBreakPoint

Ordinal	`62`
Address	`0x11ecf0`

EtwCheckCoverage

Ordinal	`63`
Address	`0x10c040`

EtwCreateTraceInstanceId

Ordinal	`64`
Address	`0x15a3a0`

EtwDeliverDataBlock

Ordinal	`65`
Address	`0x26e80`

EtwEnumerateProcessRegGuids

Ordinal	`66`
Address	`0x15a120`

EtwEventActivityIdControl

Ordinal	`67`
Address	`0x251d0`

EtwEventEnabled

Ordinal	`68`
Address	`0xcf290`

EtwEventProviderEnabled

Ordinal	`69`
Address	`0xe4650`

EtwEventRegister

Ordinal	`70`
Address	`0x26130`

EtwEventSetInformation

Ordinal	`71`
Address	`0x1182b0`

EtwEventUnregister

Ordinal	`72`
Address	`0xf3460`

EtwEventWrite

Ordinal	`73`
Address	`0x80430`

EtwEventWriteEndScenario

Ordinal	`74`
Address	`0xcef50`

EtwEventWriteEx

Ordinal	`75`
Address	`0xec100`

EtwEventWriteFull

Ordinal	`76`
Address	`0x7f1d0`

EtwEventWriteNoRegistration

Ordinal	`77`
Address	`0x8b2f0`

EtwEventWriteStartScenario

Ordinal	`78`
Address	`0xcf090`

EtwEventWriteString

Ordinal	`79`
Address	`0xe57b0`

EtwEventWriteTransfer

Ordinal	`80`
Address	`0x80730`

EtwGetTraceEnableFlags

Ordinal	`81`
Address	`0xed580`

EtwGetTraceEnableLevel

Ordinal	`82`
Address	`0xed530`

EtwGetTraceLoggerHandle

Ordinal	`83`
Address	`0xed4c0`

EtwLogTraceEvent

Ordinal	`84`
Address	`0xe1390`

EtwNotificationRegister

Ordinal	`85`
Address	`0x26180`

EtwNotificationUnregister

Ordinal	`86`
Address	`0x25e70`

EtwProcessPrivateLoggerRequest

Ordinal	`87`
Address	`0x84fe0`

EtwRegisterSecurityProvider

Ordinal	`88`
Address	`0x15a200`

EtwRegisterTraceGuidsA

Ordinal	`89`
Address	`0xe6360`

EtwRegisterTraceGuidsW

Ordinal	`90`
Address	`0xe63a0`

EtwReplyNotification

Ordinal	`91`
Address	`0x10a460`

EtwSendNotification

Ordinal	`92`
Address	`0xea6b0`

EtwSetMark

Ordinal	`93`
Address	`0x15a3f0`

EtwTraceEventInstance

Ordinal	`94`
Address	`0x15a420`

EtwTraceMessage

Ordinal	`95`
Address	`0xd4730`

EtwTraceMessageVa

Ordinal	`96`
Address	`0xd4820`

EtwUnregisterTraceGuids

Ordinal	`97`
Address	`0xee660`

EtwWriteUMSecurityEvent

Ordinal	`98`
Address	`0xef860`

EtwpCreateEtwThread

Ordinal	`99`
Address	`0xe2eb0`

EtwpGetCpuSpeed

Ordinal	`100`
Address	`0xf2e50`

EvtIntReportAuthzEventAndSourceAsync

Ordinal	`101`
Address	`0x15a7c0`

EvtIntReportEventAndSourceAsync

Ordinal	`102`
Address	`0xef3a0`

ExpInterlockedPopEntrySListEnd

Ordinal	`103`
Address	`0x163df0`

ExpInterlockedPopEntrySListFault

Ordinal	`104`
Address	`0x163de7`

ExpInterlockedPopEntrySListResume

Ordinal	`105`
Address	`0x163dd7`

KiRaiseUserExceptionDispatcher

Ordinal	`106`
Address	`0x164130`

KiUserApcDispatcher

Ordinal	`107`
Address	`0x163f50`

KiUserCallbackDispatcher

Ordinal	`108`
Address	`0x164070`

KiUserExceptionDispatcher

Ordinal	`109`
Address	`0x1640c0`

KiUserInvertedFunctionTable

Ordinal	`110`
Address	`0x1e6430`

LdrAccessResource

Ordinal	`111`
Address	`0xf58e0`

LdrAddDllDirectory

Ordinal	`112`
Address	`0x108370`

LdrAddLoadAsDataTable

Ordinal	`113`
Address	`0x5c800`

LdrAddRefDll

Ordinal	`114`
Address	`0x95940`

LdrAppxHandleIntegrityFailure

Ordinal	`115`
Address	`0x1112b0`

LdrCallEnclave

Ordinal	`116`
Address	`0x10b620`

LdrControlFlowGuardEnforced

Ordinal	`117`
Address	`0x12a20`

LdrCreateEnclave

Ordinal	`118`
Address	`0x10d500`

LdrDeleteEnclave

Ordinal	`119`
Address	`0x130e60`

LdrDisableThreadCalloutsForDll

Ordinal	`120`
Address	`0xea240`

LdrEnumResources

Ordinal	`121`
Address	`0x134be0`

LdrEnumerateLoadedModules

Ordinal	`122`
Address	`0x87b00`

LdrFastFailInLoaderCallout

Ordinal	`123`
Address	`0x10a200`

LdrFindEntryForAddress

Ordinal	`124`
Address	`0x5d4a0`

LdrFindResourceDirectory_U

Ordinal	`125`
Address	`0x10f330`

LdrFindResourceEx_U

Ordinal	`126`
Address	`0xf4180`

LdrFindResource_U

Ordinal	`127`
Address	`0xe3510`

LdrFlushAlternateResourceModules

Ordinal	`128`
Address	`0x109970`

LdrGetDllDirectory

Ordinal	`129`
Address	`0xd75c0`

LdrGetDllFullName

Ordinal	`130`
Address	`0x231f0`

LdrGetDllHandle

Ordinal	`131`
Address	`0x134b0`

LdrGetDllHandleByMapping

Ordinal	`132`
Address	`0xeb190`

LdrGetDllHandleByName

Ordinal	`133`
Address	`0xe9d00`

LdrGetDllHandleEx

Ordinal	`134`
Address	`0x13690`

LdrGetDllPath

Ordinal	`135`
Address	`0x6b4a0`

LdrGetFailureData

Ordinal	`136`
Address	`0x15ca50`

LdrGetFileNameFromLoadAsDataTable

Ordinal	`137`
Address	`0x10bc00`

LdrGetKnownDllSectionHandle

Ordinal	`138`
Address	`0x105cb0`

LdrGetProcedureAddress

Ordinal	`139`
Address	`0xd8b0`

LdrGetProcedureAddressEx

Ordinal	`140`
Address	`0xdcf0`

LdrGetProcedureAddressForCaller

Ordinal	`141`
Address	`0xdd20`

LdrHotPatchNotify

Ordinal	`142`
Address	`0x15ca60`

LdrInitShimEngineDynamic

Ordinal	`143`
Address	`0x89980`

LdrInitializeEnclave

Ordinal	`144`
Address	`0xb8360`

LdrInitializeThunk

Ordinal	`145`
Address	`0x8540`

LdrIsModuleSxsRedirected

Ordinal	`146`
Address	`0x15cc40`

LdrLoadAlternateResourceModule

Ordinal	`147`
Address	`0xed010`

LdrLoadAlternateResourceModuleEx

Ordinal	`148`
Address	`0x58590`

LdrLoadDll

Ordinal	`149`
Address	`0x51850`

LdrLoadEnclaveModule

Ordinal	`150`
Address	`0xb7fb0`

LdrLockLoaderLock

Ordinal	`151`
Address	`0xaad30`

LdrOpenImageFileOptionsKey

Ordinal	`152`
Address	`0x105680`

LdrProcessInitializationComplete

Ordinal	`153`
Address	`0x108cd0`

LdrProcessRelocationBlock

Ordinal	`154`
Address	`0x1364c0`

LdrProcessRelocationBlockEx

Ordinal	`155`
Address	`0x1364f0`

LdrQueryImageFileExecutionOptions

Ordinal	`156`
Address	`0xb57d0`

LdrQueryImageFileExecutionOptionsEx

Ordinal	`157`
Address	`0xb5810`

LdrQueryImageFileKeyOption

Ordinal	`158`
Address	`0xb58b0`

LdrQueryModuleServiceTags

Ordinal	`159`
Address	`0x15cc80`

LdrQueryOptionalDelayLoadedAPI

Ordinal	`160`
Address	`0x112d20`

LdrQueryProcessModuleInformation

Ordinal	`161`
Address	`0x10dfc0`

LdrRegisterDllNotification

Ordinal	`162`
Address	`0x1067c0`

LdrRemoveDllDirectory

Ordinal	`163`
Address	`0x10c520`

LdrRemoveLoadAsDataTable

Ordinal	`164`
Address	`0x5ca40`

LdrResFindResource

Ordinal	`165`
Address	`0x1367a0`

LdrResFindResourceDirectory

Ordinal	`166`
Address	`0x94a0`

LdrResGetRCConfig

Ordinal	`167`
Address	`0x9f880`

LdrResRelease

Ordinal	`168`
Address	`0x107160`

LdrResSearchResource

Ordinal	`169`
Address	`0x9530`

LdrResolveDelayLoadedAPI

Ordinal	`170`
Address	`0x25bd0`

LdrResolveDelayLoadsFromDll

Ordinal	`171`
Address	`0x15d400`

LdrRscIsTypeExist

Ordinal	`172`
Address	`0x57570`

LdrSetAppCompatDllRedirectionCallback

Ordinal	`173`
Address	`0x107a70`

LdrSetDefaultDllDirectories

Ordinal	`174`
Address	`0x108830`

LdrSetDllDirectory

Ordinal	`175`
Address	`0x2ee30`

LdrSetDllManifestProber

Ordinal	`176`
Address	`0x1085f0`

LdrSetImplicitPathOptions

Ordinal	`177`
Address	`0x15cd30`

LdrSetMUICacheType

Ordinal	`178`
Address	`0x134ea0`

LdrShutdownProcess

Ordinal	`179`
Address	`0x88a60`

LdrShutdownThread

Ordinal	`180`
Address	`0x87f80`

LdrStandardizeSystemPath

Ordinal	`181`
Address	`0xf65b0`

LdrSystemDllInitBlock

Ordinal	`182`
Address	`0x1e9450`

LdrUnloadAlternateResourceModule

Ordinal	`183`
Address	`0xf6f40`

LdrUnloadAlternateResourceModuleEx

Ordinal	`184`
Address	`0x59e70`

LdrUnloadDll

Ordinal	`185`
Address	`0x243e0`

LdrUnlockLoaderLock

Ordinal	`186`
Address	`0xf2f70`

LdrUnregisterDllNotification

Ordinal	`187`
Address	`0x10cec0`

LdrUpdatePackageSearchPath

Ordinal	`188`
Address	`0xea0d0`

LdrVerifyImageMatchesChecksum

Ordinal	`189`
Address	`0x15cda0`

LdrVerifyImageMatchesChecksumEx

Ordinal	`190`
Address	`0x10c150`

LdrpResGetMappingSize

Ordinal	`191`
Address	`0x9f390`

LdrpResGetResourceDirectory

Ordinal	`192`
Address	`0xa1dd0`

MD4Final

Ordinal	`193`
Address	`0x159dd0`

MD4Init

Ordinal	`194`
Address	`0x159f10`

MD4Update

Ordinal	`195`
Address	`0x159fa0`

MD5Final

Ordinal	`196`
Address	`0x117fe0`

MD5Init

Ordinal	`197`
Address	`0x118120`

MD5Update

Ordinal	`198`
Address	`0x1181b0`

MicrosoftTelemetryAssertTriggeredUM

Ordinal	`199`
Address	`0x109380`

NlsAnsiCodePage

Ordinal	`200`
Address	`0x1cc048`

NlsMbCodePageTag

Ordinal	`201`
Address	`0x1cd650`

NlsMbOemCodePageTag

Ordinal	`202`
Address	`0x1cd440`

NtAcceptConnectPort

Ordinal	`203`
Address	`0x1600a0`

NtAccessCheck

Ordinal	`204`
Address	`0x160060`

NtAccessCheckAndAuditAlarm

Ordinal	`205`
Address	`0x160580`

NtAccessCheckByType

Ordinal	`206`
Address	`0x160cb0`

NtAccessCheckByTypeAndAuditAlarm

Ordinal	`207`
Address	`0x160b80`

NtAccessCheckByTypeResultList

Ordinal	`208`
Address	`0x160cd0`

NtAccessCheckByTypeResultListAndAuditAlarm

Ordinal	`209`
Address	`0x160cf0`

NtAccessCheckByTypeResultListAndAuditAlarmByHandle

Ordinal	`210`
Address	`0x160d10`

NtAcquireCrossVmMutant

Ordinal	`211`
Address	`0x160d30`

NtAcquireProcessActivityReference

Ordinal	`212`
Address	`0x160d50`

NtAddAtom

Ordinal	`213`
Address	`0x160940`

NtAddAtomEx

Ordinal	`214`
Address	`0x160d70`

NtAddBootEntry

Ordinal	`215`
Address	`0x160d90`

NtAddDriverEntry

Ordinal	`216`
Address	`0x160db0`

NtAdjustGroupsToken

Ordinal	`217`
Address	`0x160dd0`

NtAdjustPrivilegesToken

Ordinal	`218`
Address	`0x160880`

NtAdjustTokenClaimsAndDeviceGroups

Ordinal	`219`
Address	`0x160df0`

NtAlertMultipleThreadByThreadId

Ordinal	`220`
Address	`0x160e10`

NtAlertResumeThread

Ordinal	`221`
Address	`0x160e30`

NtAlertThread

Ordinal	`222`
Address	`0x160e50`

NtAlertThreadByThreadId

Ordinal	`223`
Address	`0x160e70`

NtAlertThreadByThreadIdEx

Ordinal	`224`
Address	`0x160e90`

NtAllocateLocallyUniqueId

Ordinal	`225`
Address	`0x160eb0`

NtAllocateReserveObject

Ordinal	`226`
Address	`0x160ed0`

NtAllocateUserPhysicalPages

Ordinal	`227`
Address	`0x160ef0`

NtAllocateUserPhysicalPagesEx

Ordinal	`228`
Address	`0x160f10`

NtAllocateUuids

Ordinal	`229`
Address	`0x160f30`

NtAllocateVirtualMemory

Ordinal	`230`
Address	`0x160360`

NtAllocateVirtualMemoryEx

Ordinal	`231`
Address	`0x160f50`

NtAlpcAcceptConnectPort

Ordinal	`232`
Address	`0x160f70`

NtAlpcCancelMessage

Ordinal	`233`
Address	`0x160f90`

NtAlpcConnectPort

Ordinal	`234`
Address	`0x160fb0`

NtAlpcConnectPortEx

Ordinal	`235`
Address	`0x160fd0`

NtAlpcCreatePort

Ordinal	`236`
Address	`0x160ff0`

NtAlpcCreatePortSection

Ordinal	`237`
Address	`0x161010`

NtAlpcCreateResourceReserve

Ordinal	`238`
Address	`0x161030`

NtAlpcCreateSectionView

Ordinal	`239`
Address	`0x161050`

NtAlpcCreateSecurityContext

Ordinal	`240`
Address	`0x161070`

NtAlpcDeletePortSection

Ordinal	`241`
Address	`0x161090`

NtAlpcDeleteResourceReserve

Ordinal	`242`
Address	`0x1610b0`

NtAlpcDeleteSectionView

Ordinal	`243`
Address	`0x1610d0`

NtAlpcDeleteSecurityContext

Ordinal	`244`
Address	`0x1610f0`

NtAlpcDisconnectPort

Ordinal	`245`
Address	`0x161110`

NtAlpcImpersonateClientContainerOfPort

Ordinal	`246`
Address	`0x161130`

NtAlpcImpersonateClientOfPort

Ordinal	`247`
Address	`0x161150`

NtAlpcOpenSenderProcess

Ordinal	`248`
Address	`0x161170`

NtAlpcOpenSenderThread

Ordinal	`249`
Address	`0x161190`

NtAlpcQueryInformation

Ordinal	`250`
Address	`0x1611b0`

NtAlpcQueryInformationMessage

Ordinal	`251`
Address	`0x1611d0`

NtAlpcRevokeSecurityContext

Ordinal	`252`
Address	`0x1611f0`

NtAlpcSendWaitReceivePort

Ordinal	`253`
Address	`0x161210`

NtAlpcSetInformation

Ordinal	`254`
Address	`0x161230`

NtApphelpCacheControl

Ordinal	`255`
Address	`0x1609e0`

NtAreMappedFilesTheSame

Ordinal	`256`
Address	`0x161250`

NtAssignProcessToJobObject

Ordinal	`257`
Address	`0x161270`

NtAssociateWaitCompletionPacket

Ordinal	`258`
Address	`0x161290`

NtCallEnclave

Ordinal	`259`
Address	`0x1612b0`

NtCallbackReturn

Ordinal	`260`
Address	`0x160100`

NtCancelIoFile

Ordinal	`261`
Address	`0x160bf0`

NtCancelIoFileEx

Ordinal	`262`
Address	`0x1612d0`

NtCancelSynchronousIoFile

Ordinal	`263`
Address	`0x1612f0`

NtCancelTimer

Ordinal	`264`
Address	`0x160c70`

NtCancelTimer2

Ordinal	`265`
Address	`0x161310`

NtCancelWaitCompletionPacket

Ordinal	`266`
Address	`0x161330`

NtChangeProcessState

Ordinal	`267`
Address	`0x161350`

NtChangeThreadState

Ordinal	`268`
Address	`0x161370`

NtClearEvent

Ordinal	`269`
Address	`0x160820`

NtClose

Ordinal	`270`
Address	`0x160240`

NtCloseObjectAuditAlarm

Ordinal	`271`
Address	`0x1607c0`

NtCommitComplete

Ordinal	`272`
Address	`0x161390`

NtCommitEnlistment

Ordinal	`273`
Address	`0x1613b0`

NtCommitRegistryTransaction

Ordinal	`274`
Address	`0x1613d0`

NtCommitTransaction

Ordinal	`275`
Address	`0x1613f0`

NtCompactKeys

Ordinal	`276`
Address	`0x161410`

NtCompareObjects

Ordinal	`277`
Address	`0x161430`

NtCompareSigningLevels

Ordinal	`278`
Address	`0x161450`

NtCompareTokens

Ordinal	`279`
Address	`0x161470`

NtCompleteConnectPort

Ordinal	`280`
Address	`0x161490`

NtCompressKey

Ordinal	`281`
Address	`0x1614b0`

NtConnectPort

Ordinal	`282`
Address	`0x1614d0`

NtContinue

Ordinal	`283`
Address	`0x1608c0`

NtContinueEx

Ordinal	`284`
Address	`0x1614f0`

NtConvertBetweenAuxiliaryCounterAndPerformanceCounter

Ordinal	`285`
Address	`0x161510`

NtCopyFileChunk

Ordinal	`286`
Address	`0x161530`

NtCreateCpuPartition

Ordinal	`287`
Address	`0x161550`

NtCreateCrossVmEvent

Ordinal	`288`
Address	`0x161570`

NtCreateCrossVmMutant

Ordinal	`289`
Address	`0x161590`

NtCreateDebugObject

Ordinal	`290`
Address	`0x1615b0`

NtCreateDirectoryObject

Ordinal	`291`
Address	`0x1615d0`

NtCreateDirectoryObjectEx

Ordinal	`292`
Address	`0x1615f0`

NtCreateEnclave

Ordinal	`293`
Address	`0x161610`

NtCreateEnlistment

Ordinal	`294`
Address	`0x161630`

NtCreateEvent

Ordinal	`295`
Address	`0x160960`

NtCreateEventPair

Ordinal	`296`
Address	`0x161650`

NtCreateFile

Ordinal	`297`
Address	`0x160b00`

NtCreateIRTimer

Ordinal	`298`
Address	`0x161670`

NtCreateIoCompletion

Ordinal	`299`
Address	`0x161690`

NtCreateIoRing

Ordinal	`300`
Address	`0x1616b0`

NtCreateJobObject

Ordinal	`301`
Address	`0x1616d0`

NtCreateJobSet

Ordinal	`302`
Address	`0x1616f0`

NtCreateKey

Ordinal	`303`
Address	`0x160400`

NtCreateKeyTransacted

Ordinal	`304`
Address	`0x161710`

NtCreateKeyedEvent

Ordinal	`305`
Address	`0x161730`

NtCreateLowBoxToken

Ordinal	`306`
Address	`0x161750`

NtCreateMailslotFile

Ordinal	`307`
Address	`0x161770`

NtCreateMutant

Ordinal	`308`
Address	`0x161790`

NtCreateNamedPipeFile

Ordinal	`309`
Address	`0x1617b0`

NtCreatePagingFile

Ordinal	`310`
Address	`0x1617d0`

NtCreatePartition

Ordinal	`311`
Address	`0x1617f0`

NtCreatePort

Ordinal	`312`
Address	`0x161810`

NtCreatePrivateNamespace

Ordinal	`313`
Address	`0x161830`

NtCreateProcess

Ordinal	`314`
Address	`0x161850`

NtCreateProcessEx

Ordinal	`315`
Address	`0x160a00`

NtCreateProcessStateChange

Ordinal	`316`
Address	`0x161870`

NtCreateProfile

Ordinal	`317`
Address	`0x161890`

NtCreateProfileEx

Ordinal	`318`
Address	`0x1618b0`

NtCreateRegistryTransaction

Ordinal	`319`
Address	`0x1618d0`

NtCreateResourceManager

Ordinal	`320`
Address	`0x1618f0`

NtCreateSection

Ordinal	`321`
Address	`0x1609a0`

NtCreateSectionEx

Ordinal	`322`
Address	`0x161910`

NtCreateSemaphore

Ordinal	`323`
Address	`0x161930`

NtCreateSymbolicLinkObject

Ordinal	`324`
Address	`0x161950`

NtCreateThread

Ordinal	`325`
Address	`0x160a20`

NtCreateThreadEx

Ordinal	`326`
Address	`0x161970`

NtCreateThreadStateChange

Ordinal	`327`
Address	`0x161990`

NtCreateTimer

Ordinal	`328`
Address	`0x1619b0`

NtCreateTimer2

Ordinal	`329`
Address	`0x1619d0`

NtCreateToken

Ordinal	`330`
Address	`0x1619f0`

NtCreateTokenEx

Ordinal	`331`
Address	`0x161a10`

NtCreateTransaction

Ordinal	`332`
Address	`0x161a30`

NtCreateTransactionManager

Ordinal	`333`
Address	`0x161a50`

NtCreateUserProcess

Ordinal	`334`
Address	`0x161a70`

NtCreateWaitCompletionPacket

Ordinal	`335`
Address	`0x161a90`

NtCreateWaitablePort

Ordinal	`336`
Address	`0x161ab0`

NtCreateWnfStateName

Ordinal	`337`
Address	`0x161ad0`

NtCreateWorkerFactory

Ordinal	`338`
Address	`0x161af0`

NtDebugActiveProcess

Ordinal	`339`
Address	`0x161b10`

NtDebugContinue

Ordinal	`340`
Address	`0x161b30`

NtDelayExecution

Ordinal	`341`
Address	`0x1606e0`

NtDeleteAtom

Ordinal	`342`
Address	`0x161b50`

NtDeleteBootEntry

Ordinal	`343`
Address	`0x161b70`

NtDeleteDriverEntry

Ordinal	`344`
Address	`0x161b90`

NtDeleteFile

Ordinal	`345`
Address	`0x161bb0`

NtDeleteKey

Ordinal	`346`
Address	`0x161bd0`

NtDeleteObjectAuditAlarm

Ordinal	`347`
Address	`0x161bf0`

NtDeletePrivateNamespace

Ordinal	`348`
Address	`0x161c10`

NtDeleteValueKey

Ordinal	`349`
Address	`0x161c30`

NtDeleteWnfStateData

Ordinal	`350`
Address	`0x161c50`

NtDeleteWnfStateName

Ordinal	`351`
Address	`0x161c70`

NtDeviceIoControlFile

Ordinal	`352`
Address	`0x160140`

NtDirectGraphicsCall

Ordinal	`353`
Address	`0x161c90`

NtDisableLastKnownGood

Ordinal	`354`
Address	`0x161cb0`

NtDisplayString

Ordinal	`355`
Address	`0x161cd0`

NtDrawText

Ordinal	`356`
Address	`0x161cf0`

NtDuplicateObject

Ordinal	`357`
Address	`0x1607e0`

NtDuplicateToken

Ordinal	`358`
Address	`0x1608a0`

NtEnableLastKnownGood

Ordinal	`359`
Address	`0x161d10`

NtEnumerateBootEntries

Ordinal	`360`
Address	`0x161d30`

NtEnumerateDriverEntries

Ordinal	`361`
Address	`0x161d50`

NtEnumerateKey

Ordinal	`362`
Address	`0x1606a0`

NtEnumerateSystemEnvironmentValuesEx

Ordinal	`363`
Address	`0x161d70`

NtEnumerateTransactionObject

Ordinal	`364`
Address	`0x161d90`

NtEnumerateValueKey

Ordinal	`365`
Address	`0x1602c0`

NtExtendSection

Ordinal	`366`
Address	`0x161db0`

NtFilterBootOption

Ordinal	`367`
Address	`0x161dd0`

NtFilterToken

Ordinal	`368`
Address	`0x161df0`

NtFilterTokenEx

Ordinal	`369`
Address	`0x161e10`

NtFindAtom

Ordinal	`370`
Address	`0x1602e0`

NtFlushBuffersFile

Ordinal	`371`
Address	`0x1609c0`

NtFlushBuffersFileEx

Ordinal	`372`
Address	`0x161e30`

NtFlushInstallUILanguage

Ordinal	`373`
Address	`0x161e50`

NtFlushInstructionCache

Ordinal	`374`
Address	`0x161e70`

NtFlushKey

Ordinal	`375`
Address	`0x161e90`

NtFlushProcessWriteBuffers

Ordinal	`376`
Address	`0x161eb0`

NtFlushVirtualMemory

Ordinal	`377`
Address	`0x161ed0`

NtFlushWriteBuffer

Ordinal	`378`
Address	`0x161ef0`

NtFreeUserPhysicalPages

Ordinal	`379`
Address	`0x161f10`

NtFreeVirtualMemory

Ordinal	`380`
Address	`0x160420`

NtFreezeRegistry

Ordinal	`381`
Address	`0x161f30`

NtFreezeTransactions

Ordinal	`382`
Address	`0x161f50`

NtFsControlFile

Ordinal	`383`
Address	`0x160780`

NtGetCachedSigningLevel

Ordinal	`384`
Address	`0x161f70`

NtGetCompleteWnfStateSubscription

Ordinal	`385`
Address	`0x161f90`

NtGetContextThread

Ordinal	`386`
Address	`0x161fb0`

NtGetCurrentProcessorNumber

Ordinal	`387`
Address	`0x161fd0`

NtGetCurrentProcessorNumberEx

Ordinal	`388`
Address	`0x161ff0`

NtGetDevicePowerState

Ordinal	`389`
Address	`0x162010`

NtGetMUIRegistryInfo

Ordinal	`390`
Address	`0x162030`

NtGetNextProcess

Ordinal	`391`
Address	`0x162050`

NtGetNextThread

Ordinal	`392`
Address	`0x162070`

NtGetNlsSectionPtr

Ordinal	`393`
Address	`0x162090`

NtGetNotificationResourceManager

Ordinal	`394`
Address	`0x1620b0`

NtGetTickCount

Ordinal	`395`
Address	`0x163d70`

NtGetWriteWatch

Ordinal	`396`
Address	`0x1620d0`

NtImpersonateAnonymousToken

Ordinal	`397`
Address	`0x1620f0`

NtImpersonateClientOfPort

Ordinal	`398`
Address	`0x160440`

NtImpersonateThread

Ordinal	`399`
Address	`0x162110`

NtInitializeEnclave

Ordinal	`400`
Address	`0x162130`

NtInitializeNlsFiles

Ordinal	`401`
Address	`0x162150`

NtInitializeRegistry

Ordinal	`402`
Address	`0x162170`

NtInitiatePowerAction

Ordinal	`403`
Address	`0x162190`

NtIsProcessInJob

Ordinal	`404`
Address	`0x160a40`

NtIsSystemResumeAutomatic

Ordinal	`405`
Address	`0x1621b0`

NtIsUILanguageComitted

Ordinal	`406`
Address	`0x1621d0`

NtListenPort

Ordinal	`407`
Address	`0x1621f0`

NtLoadDriver

Ordinal	`408`
Address	`0x162210`

NtLoadEnclaveData

Ordinal	`409`
Address	`0x162230`

NtLoadKey

Ordinal	`410`
Address	`0x162250`

NtLoadKey2

Ordinal	`411`
Address	`0x162270`

NtLoadKey3

Ordinal	`412`
Address	`0x162290`

NtLoadKeyEx

Ordinal	`413`
Address	`0x1622b0`

NtLockFile

Ordinal	`414`
Address	`0x1622d0`

NtLockProductActivationKeys

Ordinal	`415`
Address	`0x1622f0`

NtLockRegistryKey

Ordinal	`416`
Address	`0x162310`

NtLockVirtualMemory

Ordinal	`417`
Address	`0x162330`

NtMakePermanentObject

Ordinal	`418`
Address	`0x162350`

NtMakeTemporaryObject

Ordinal	`419`
Address	`0x162370`

NtManageHotPatch

Ordinal	`420`
Address	`0x162390`

NtManagePartition

Ordinal	`421`
Address	`0x1623b0`

NtMapCMFModule

Ordinal	`422`
Address	`0x1623d0`

NtMapUserPhysicalPages

Ordinal	`423`
Address	`0x1623f0`

NtMapUserPhysicalPagesScatter

Ordinal	`424`
Address	`0x1600c0`

NtMapViewOfSection

Ordinal	`425`
Address	`0x160560`

NtMapViewOfSectionEx

Ordinal	`426`
Address	`0x162410`

NtModifyBootEntry

Ordinal	`427`
Address	`0x162430`

NtModifyDriverEntry

Ordinal	`428`
Address	`0x162450`

NtNotifyChangeDirectoryFile

Ordinal	`429`
Address	`0x162470`

NtNotifyChangeDirectoryFileEx

Ordinal	`430`
Address	`0x162490`

NtNotifyChangeKey

Ordinal	`431`
Address	`0x1624b0`

NtNotifyChangeMultipleKeys

Ordinal	`432`
Address	`0x1624d0`

NtNotifyChangeSession

Ordinal	`433`
Address	`0x1624f0`

NtOpenCpuPartition

Ordinal	`434`
Address	`0x162510`

NtOpenDirectoryObject

Ordinal	`435`
Address	`0x160b60`

NtOpenEnlistment

Ordinal	`436`
Address	`0x162530`

NtOpenEvent

Ordinal	`437`
Address	`0x160860`

NtOpenEventPair

Ordinal	`438`
Address	`0x162550`

NtOpenFile

Ordinal	`439`
Address	`0x1606c0`

NtOpenIoCompletion

Ordinal	`440`
Address	`0x162570`

NtOpenJobObject

Ordinal	`441`
Address	`0x162590`

NtOpenKey

Ordinal	`442`
Address	`0x1602a0`

NtOpenKeyEx

Ordinal	`443`
Address	`0x1625b0`

NtOpenKeyTransacted

Ordinal	`444`
Address	`0x1625d0`

NtOpenKeyTransactedEx

Ordinal	`445`
Address	`0x1625f0`

NtOpenKeyedEvent

Ordinal	`446`
Address	`0x162610`

NtOpenMutant

Ordinal	`447`
Address	`0x162630`

NtOpenObjectAuditAlarm

Ordinal	`448`
Address	`0x162650`

NtOpenPartition

Ordinal	`449`
Address	`0x162670`

NtOpenPrivateNamespace

Ordinal	`450`
Address	`0x162690`

NtOpenProcess

Ordinal	`451`
Address	`0x160520`

NtOpenProcessToken

Ordinal	`452`
Address	`0x1626b0`

NtOpenProcessTokenEx

Ordinal	`453`
Address	`0x160660`

NtOpenRegistryTransaction

Ordinal	`454`
Address	`0x1626d0`

NtOpenResourceManager

Ordinal	`455`
Address	`0x1626f0`

NtOpenSection

Ordinal	`456`
Address	`0x160740`

NtOpenSemaphore

Ordinal	`457`
Address	`0x162710`

NtOpenSession

Ordinal	`458`
Address	`0x162730`

NtOpenSymbolicLinkObject

Ordinal	`459`
Address	`0x162750`

NtOpenThread

Ordinal	`460`
Address	`0x162770`

NtOpenThreadToken

Ordinal	`461`
Address	`0x1604e0`

NtOpenThreadTokenEx

Ordinal	`462`
Address	`0x160640`

NtOpenTimer

Ordinal	`463`
Address	`0x162790`

NtOpenTransaction

Ordinal	`464`
Address	`0x1627b0`

NtOpenTransactionManager

Ordinal	`465`
Address	`0x1627d0`

NtPlugPlayControl

Ordinal	`466`
Address	`0x1627f0`

NtPowerInformation

Ordinal	`467`
Address	`0x160c30`

NtPrePrepareComplete

Ordinal	`468`
Address	`0x162810`

NtPrePrepareEnlistment

Ordinal	`469`
Address	`0x162830`

NtPrepareComplete

Ordinal	`470`
Address	`0x162850`

NtPrepareEnlistment

Ordinal	`471`
Address	`0x162870`

NtPrivilegeCheck

Ordinal	`472`
Address	`0x162890`

NtPrivilegeObjectAuditAlarm

Ordinal	`473`
Address	`0x1628b0`

NtPrivilegedServiceAuditAlarm

Ordinal	`474`
Address	`0x1628d0`

NtPropagationComplete

Ordinal	`475`
Address	`0x1628f0`

NtPropagationFailed

Ordinal	`476`
Address	`0x162910`

NtProtectVirtualMemory

Ordinal	`477`
Address	`0x160a60`

NtPssCaptureVaSpaceBulk

Ordinal	`478`
Address	`0x162930`

NtPulseEvent

Ordinal	`479`
Address	`0x162950`

NtQueryAttributesFile

Ordinal	`480`
Address	`0x160800`

NtQueryAuxiliaryCounterFrequency

Ordinal	`481`
Address	`0x162970`

NtQueryBootEntryOrder

Ordinal	`482`
Address	`0x162990`

NtQueryBootOptions

Ordinal	`483`
Address	`0x1629b0`

NtQueryDebugFilterState

Ordinal	`484`
Address	`0x1629d0`

NtQueryDefaultLocale

Ordinal	`485`
Address	`0x160300`

NtQueryDefaultUILanguage

Ordinal	`486`
Address	`0x1608e0`

NtQueryDirectoryFile

Ordinal	`487`
Address	`0x160700`

NtQueryDirectoryFileEx

Ordinal	`488`
Address	`0x1629f0`

NtQueryDirectoryObject

Ordinal	`489`
Address	`0x162a10`

NtQueryDriverEntryOrder

Ordinal	`490`
Address	`0x162a30`

NtQueryEaFile

Ordinal	`491`
Address	`0x162a50`

NtQueryEvent

Ordinal	`492`
Address	`0x160b20`

NtQueryFullAttributesFile

Ordinal	`493`
Address	`0x162a70`

NtQueryInformationAtom

Ordinal	`494`
Address	`0x162a90`

NtQueryInformationByName

Ordinal	`495`
Address	`0x162ab0`

NtQueryInformationCpuPartition

Ordinal	`496`
Address	`0x162ad0`

NtQueryInformationEnlistment

Ordinal	`497`
Address	`0x162af0`

NtQueryInformationFile

Ordinal	`498`
Address	`0x160280`

NtQueryInformationJobObject

Ordinal	`499`
Address	`0x162b10`

NtQueryInformationPort

Ordinal	`500`
Address	`0x162b30`

NtQueryInformationProcess

Ordinal	`501`
Address	`0x160380`

NtQueryInformationResourceManager

Ordinal	`502`
Address	`0x162b50`

NtQueryInformationThread

Ordinal	`503`
Address	`0x160500`

NtQueryInformationToken

Ordinal	`504`
Address	`0x160480`

NtQueryInformationTransaction

Ordinal	`505`
Address	`0x162b70`

NtQueryInformationTransactionManager

Ordinal	`506`
Address	`0x162b90`

NtQueryInformationWorkerFactory

Ordinal	`507`
Address	`0x162bb0`

NtQueryInstallUILanguage

Ordinal	`508`
Address	`0x162bd0`

NtQueryIntervalProfile

Ordinal	`509`
Address	`0x162bf0`

NtQueryIoCompletion

Ordinal	`510`
Address	`0x162c10`

NtQueryIoRingCapabilities

Ordinal	`511`
Address	`0x162c30`

NtQueryKey

Ordinal	`512`
Address	`0x160320`

NtQueryLicenseValue

Ordinal	`513`
Address	`0x162c50`

NtQueryMultipleValueKey

Ordinal	`514`
Address	`0x162c70`

NtQueryMutant

Ordinal	`515`
Address	`0x162c90`

NtQueryObject

Ordinal	`516`
Address	`0x160260`

NtQueryOpenSubKeys

Ordinal	`517`
Address	`0x162cb0`

NtQueryOpenSubKeysEx

Ordinal	`518`
Address	`0x162cd0`

NtQueryPerformanceCounter

Ordinal	`519`
Address	`0x160680`

NtQueryPortInformationProcess

Ordinal	`520`
Address	`0x162cf0`

NtQueryQuotaInformationFile

Ordinal	`521`
Address	`0x162d10`

NtQuerySection

Ordinal	`522`
Address	`0x160a80`

NtQuerySecurityAttributesToken

Ordinal	`523`
Address	`0x162d30`

NtQuerySecurityObject

Ordinal	`524`
Address	`0x162d50`

NtQuerySecurityPolicy

Ordinal	`525`
Address	`0x162d70`

NtQuerySemaphore

Ordinal	`526`
Address	`0x162d90`

NtQuerySymbolicLinkObject

Ordinal	`527`
Address	`0x162db0`

NtQuerySystemEnvironmentValue

Ordinal	`528`
Address	`0x162dd0`

NtQuerySystemEnvironmentValueEx

Ordinal	`529`
Address	`0x162df0`

NtQuerySystemInformation

Ordinal	`530`
Address	`0x160720`

NtQuerySystemInformationEx

Ordinal	`531`
Address	`0x162e10`

NtQuerySystemTime

Ordinal	`532`
Address	`0x160ba0`

NtQueryTimer

Ordinal	`533`
Address	`0x160760`

NtQueryTimerResolution

Ordinal	`534`
Address	`0x162e30`

NtQueryValueKey

Ordinal	`535`
Address	`0x160340`

NtQueryVirtualMemory

Ordinal	`536`
Address	`0x1604c0`

NtQueryVolumeInformationFile

Ordinal	`537`
Address	`0x160980`

NtQueryWnfStateData

Ordinal	`538`
Address	`0x162e50`

NtQueryWnfStateNameInformation

Ordinal	`539`
Address	`0x162e70`

NtQueueApcThread

Ordinal	`540`
Address	`0x160900`

NtQueueApcThreadEx

Ordinal	`541`
Address	`0x162e90`

NtQueueApcThreadEx2

Ordinal	`542`
Address	`0x162eb0`

NtRaiseException

Ordinal	`543`
Address	`0x162ed0`

NtRaiseHardError

Ordinal	`544`
Address	`0x162ef0`

NtReadFile

Ordinal	`545`
Address	`0x160120`

NtReadFileScatter

Ordinal	`546`
Address	`0x160620`

NtReadOnlyEnlistment

Ordinal	`547`
Address	`0x162f10`

NtReadRequestData

Ordinal	`548`
Address	`0x160ae0`

NtReadVirtualMemory

Ordinal	`549`
Address	`0x160840`

NtReadVirtualMemoryEx

Ordinal	`550`
Address	`0x162f30`

NtRecoverEnlistment

Ordinal	`551`
Address	`0x162f50`

NtRecoverResourceManager

Ordinal	`552`
Address	`0x162f70`

NtRecoverTransactionManager

Ordinal	`553`
Address	`0x162f90`

NtRegisterProtocolAddressInformation

Ordinal	`554`
Address	`0x162fb0`

NtRegisterThreadTerminatePort

Ordinal	`555`
Address	`0x162fd0`

NtReleaseKeyedEvent

Ordinal	`556`
Address	`0x162ff0`

NtReleaseMutant

Ordinal	`557`
Address	`0x160460`

NtReleaseSemaphore

Ordinal	`558`
Address	`0x1601a0`

NtReleaseWorkerFactoryWorker

Ordinal	`559`
Address	`0x163010`

NtRemoveIoCompletion

Ordinal	`560`
Address	`0x160180`

NtRemoveIoCompletionEx

Ordinal	`561`
Address	`0x163030`

NtRemoveProcessDebug

Ordinal	`562`
Address	`0x163050`

NtRenameKey

Ordinal	`563`
Address	`0x163070`

NtRenameTransactionManager

Ordinal	`564`
Address	`0x163090`

NtReplaceKey

Ordinal	`565`
Address	`0x1630b0`

NtReplacePartitionUnit

Ordinal	`566`
Address	`0x1630d0`

NtReplyPort

Ordinal	`567`
Address	`0x1601e0`

NtReplyWaitReceivePort

Ordinal	`568`
Address	`0x1601c0`

NtReplyWaitReceivePortEx

Ordinal	`569`
Address	`0x1605c0`

NtReplyWaitReplyPort

Ordinal	`570`
Address	`0x1630f0`

NtRequestPort

Ordinal	`571`
Address	`0x163110`

NtRequestWaitReplyPort

Ordinal	`572`
Address	`0x1604a0`

NtResetEvent

Ordinal	`573`
Address	`0x163130`

NtResetWriteWatch

Ordinal	`574`
Address	`0x163150`

NtRestoreKey

Ordinal	`575`
Address	`0x163170`

NtResumeProcess

Ordinal	`576`
Address	`0x163190`

NtResumeThread

Ordinal	`577`
Address	`0x160aa0`

NtRevertContainerImpersonation

Ordinal	`578`
Address	`0x1631b0`

NtRollbackComplete

Ordinal	`579`
Address	`0x1631d0`

NtRollbackEnlistment

Ordinal	`580`
Address	`0x1631f0`

NtRollbackRegistryTransaction

Ordinal	`581`
Address	`0x163210`

NtRollbackTransaction

Ordinal	`582`
Address	`0x163230`

NtRollforwardTransactionManager

Ordinal	`583`
Address	`0x163250`

NtSaveKey

Ordinal	`584`
Address	`0x163270`

NtSaveKeyEx

Ordinal	`585`
Address	`0x163290`

NtSaveMergedKeys

Ordinal	`586`
Address	`0x1632b0`

NtSecureConnectPort

Ordinal	`587`
Address	`0x1632d0`

NtSerializeBoot

Ordinal	`588`
Address	`0x1632f0`

NtSetBootEntryOrder

Ordinal	`589`
Address	`0x163310`

NtSetBootOptions

Ordinal	`590`
Address	`0x163330`

NtSetCachedSigningLevel

Ordinal	`591`
Address	`0x163350`

NtSetCachedSigningLevel2

Ordinal	`592`
Address	`0x163370`

NtSetContextThread

Ordinal	`593`
Address	`0x163390`

NtSetDebugFilterState

Ordinal	`594`
Address	`0x1633b0`

NtSetDefaultHardErrorPort

Ordinal	`595`
Address	`0x1633d0`

NtSetDefaultLocale

Ordinal	`596`
Address	`0x1633f0`

NtSetDefaultUILanguage

Ordinal	`597`
Address	`0x163410`

NtSetDriverEntryOrder

Ordinal	`598`
Address	`0x163430`

NtSetEaFile

Ordinal	`599`
Address	`0x163450`

NtSetEvent

Ordinal	`600`
Address	`0x160220`

NtSetEventBoostPriority

Ordinal	`601`
Address	`0x160600`

NtSetEventEx

Ordinal	`602`
Address	`0x163470`

NtSetHighEventPair

Ordinal	`603`
Address	`0x163490`

NtSetHighWaitLowEventPair

Ordinal	`604`
Address	`0x1634b0`

NtSetIRTimer

Ordinal	`605`
Address	`0x1634d0`

NtSetInformationCpuPartition

Ordinal	`606`
Address	`0x1634f0`

NtSetInformationDebugObject

Ordinal	`607`
Address	`0x163510`

NtSetInformationEnlistment

Ordinal	`608`
Address	`0x163530`

NtSetInformationFile

Ordinal	`609`
Address	`0x160540`

NtSetInformationIoRing

Ordinal	`610`
Address	`0x163550`

NtSetInformationJobObject

Ordinal	`611`
Address	`0x163570`

NtSetInformationKey

Ordinal	`612`
Address	`0x163590`

NtSetInformationObject

Ordinal	`613`
Address	`0x160bd0`

NtSetInformationProcess

Ordinal	`614`
Address	`0x1603e0`

NtSetInformationResourceManager

Ordinal	`615`
Address	`0x1635b0`

NtSetInformationSymbolicLink

Ordinal	`616`
Address	`0x1635d0`

NtSetInformationThread

Ordinal	`617`
Address	`0x160200`

NtSetInformationToken

Ordinal	`618`
Address	`0x1635f0`

NtSetInformationTransaction

Ordinal	`619`
Address	`0x163610`

NtSetInformationTransactionManager

Ordinal	`620`
Address	`0x163630`

NtSetInformationVirtualMemory

Ordinal	`621`
Address	`0x163650`

NtSetInformationWorkerFactory

Ordinal	`622`
Address	`0x163670`

NtSetIntervalProfile

Ordinal	`623`
Address	`0x163690`

NtSetIoCompletion

Ordinal	`624`
Address	`0x1636b0`

NtSetIoCompletionEx

Ordinal	`625`
Address	`0x1636d0`

NtSetLdtEntries

Ordinal	`626`
Address	`0x1636f0`

NtSetLowEventPair

Ordinal	`627`
Address	`0x163710`

NtSetLowWaitHighEventPair

Ordinal	`628`
Address	`0x163730`

NtSetQuotaInformationFile

Ordinal	`629`
Address	`0x163750`

NtSetSecurityObject

Ordinal	`630`
Address	`0x163770`

NtSetSystemEnvironmentValue

Ordinal	`631`
Address	`0x163790`

NtSetSystemEnvironmentValueEx

Ordinal	`632`
Address	`0x1637b0`

NtSetSystemInformation

Ordinal	`633`
Address	`0x1637d0`

NtSetSystemPowerState

Ordinal	`634`
Address	`0x1637f0`

NtSetSystemTime

Ordinal	`635`
Address	`0x163810`

NtSetThreadExecutionState

Ordinal	`636`
Address	`0x163830`

NtSetTimer

Ordinal	`637`
Address	`0x160c90`

NtSetTimer2

Ordinal	`638`
Address	`0x163850`

NtSetTimerEx

Ordinal	`639`
Address	`0x163870`

NtSetTimerResolution

Ordinal	`640`
Address	`0x163890`

NtSetUuidSeed

Ordinal	`641`
Address	`0x1638b0`

NtSetValueKey

Ordinal	`642`
Address	`0x160c50`

NtSetVolumeInformationFile

Ordinal	`643`
Address	`0x1638d0`

NtSetWnfProcessNotificationEvent

Ordinal	`644`
Address	`0x1638f0`

NtShutdownSystem

Ordinal	`645`
Address	`0x163910`

NtShutdownWorkerFactory

Ordinal	`646`
Address	`0x163930`

NtSignalAndWaitForSingleObject

Ordinal	`647`
Address	`0x163950`

NtSinglePhaseReject

Ordinal	`648`
Address	`0x163970`

NtStartProfile

Ordinal	`649`
Address	`0x163990`

NtStopProfile

Ordinal	`650`
Address	`0x1639b0`

NtSubmitIoRing

Ordinal	`651`
Address	`0x1639d0`

NtSubscribeWnfStateChange

Ordinal	`652`
Address	`0x1639f0`

NtSuspendProcess

Ordinal	`653`
Address	`0x163a10`

NtSuspendThread

Ordinal	`654`
Address	`0x163a30`

NtSystemDebugControl

Ordinal	`655`
Address	`0x163a50`

NtTerminateEnclave

Ordinal	`656`
Address	`0x163a70`

NtTerminateJobObject

Ordinal	`657`
Address	`0x163a90`

NtTerminateProcess

Ordinal	`658`
Address	`0x1605e0`

NtTerminateThread

Ordinal	`659`
Address	`0x160ac0`

NtTestAlert

Ordinal	`660`
Address	`0x163ab0`

NtThawRegistry

Ordinal	`661`
Address	`0x163ad0`

NtThawTransactions

Ordinal	`662`
Address	`0x163af0`

NtTraceControl

Ordinal	`663`
Address	`0x163b10`

NtTraceEvent

Ordinal	`664`
Address	`0x160c10`

NtTranslateFilePath

Ordinal	`665`
Address	`0x163b30`

NtUmsThreadYield

Ordinal	`666`
Address	`0x163b50`

NtUnloadDriver

Ordinal	`667`
Address	`0x163b70`

NtUnloadKey

Ordinal	`668`
Address	`0x163b90`

NtUnloadKey2

Ordinal	`669`
Address	`0x163bb0`

NtUnloadKeyEx

Ordinal	`670`
Address	`0x163bd0`

NtUnlockFile

Ordinal	`671`
Address	`0x163bf0`

NtUnlockVirtualMemory

Ordinal	`672`
Address	`0x163c10`

NtUnmapViewOfSection

Ordinal	`673`
Address	`0x1605a0`

NtUnmapViewOfSectionEx

Ordinal	`674`
Address	`0x163c30`

NtUnsubscribeWnfStateChange

Ordinal	`675`
Address	`0x163c50`

NtUpdateWnfStateData

Ordinal	`676`
Address	`0x163c70`

NtVdmControl

Ordinal	`677`
Address	`0x163c90`

NtWaitForAlertByThreadId

Ordinal	`678`
Address	`0x163cb0`

NtWaitForDebugEvent

Ordinal	`679`
Address	`0x163cd0`

NtWaitForKeyedEvent

Ordinal	`680`
Address	`0x163cf0`

NtWaitForMultipleObjects

Ordinal	`681`
Address	`0x160bb0`

NtWaitForMultipleObjects32

Ordinal	`682`
Address	`0x1603a0`

NtWaitForSingleObject

Ordinal	`683`
Address	`0x1600e0`

NtWaitForWorkViaWorkerFactory

Ordinal	`684`
Address	`0x163d10`

NtWaitHighEventPair

Ordinal	`685`
Address	`0x163d30`

NtWaitLowEventPair

Ordinal	`686`
Address	`0x163d50`

NtWorkerFactoryWorkerReady

Ordinal	`687`
Address	`0x160080`

NtWriteFile

Ordinal	`688`
Address	`0x160160`

NtWriteFileGather

Ordinal	`689`
Address	`0x1603c0`

NtWriteRequestData

Ordinal	`690`
Address	`0x160b40`

NtWriteVirtualMemory

Ordinal	`691`
Address	`0x1607a0`

NtYieldExecution

Ordinal	`692`
Address	`0x160920`

NtdllDefWindowProc_A

Ordinal	`693`
Address	`0x15fd20`

NtdllDefWindowProc_W

Ordinal	`694`
Address	`0x15fd30`

NtdllDialogWndProc_A

Ordinal	`695`
Address	`0x15fde0`

NtdllDialogWndProc_W

Ordinal	`696`
Address	`0x15fdf0`

PfxFindPrefix

Ordinal	`697`
Address	`0x136d80`

PfxInitialize

Ordinal	`698`
Address	`0x136e60`

PfxInsertPrefix

Ordinal	`699`
Address	`0x136e80`

PfxRemovePrefix

Ordinal	`700`
Address	`0x136fa0`

PssNtCaptureSnapshot

Ordinal	`701`
Address	`0xbd910`

PssNtDuplicateSnapshot

Ordinal	`702`
Address	`0xbe6f0`

PssNtFreeRemoteSnapshot

Ordinal	`703`
Address	`0x10e020`

PssNtFreeSnapshot

Ordinal	`704`
Address	`0xbe770`

PssNtFreeWalkMarker

Ordinal	`705`
Address	`0x10ed60`

PssNtQuerySnapshot

Ordinal	`706`
Address	`0xbe930`

PssNtValidateDescriptor

Ordinal	`707`
Address	`0xbee50`

PssNtWalkSnapshot

Ordinal	`708`
Address	`0xbebd0`

RtlAbortRXact

Ordinal	`709`
Address	`0x1026f0`

RtlAbsoluteToSelfRelativeSD

Ordinal	`710`
Address	`0xc9110`

RtlAcquirePebLock

Ordinal	`711`
Address	`0x66860`

RtlAcquirePrivilege

Ordinal	`712`
Address	`0xe52c0`

RtlAcquireReleaseSRWLockExclusive

Ordinal	`713`
Address	`0xefcd0`

RtlAcquireResourceExclusive

Ordinal	`714`
Address	`0xdbbd0`

RtlAcquireResourceShared

Ordinal	`715`
Address	`0xd7e00`

RtlAcquireSRWLockExclusive

Ordinal	`716`
Address	`0x4e130`

RtlAcquireSRWLockShared

Ordinal	`717`
Address	`0x18f50`

RtlActivateActivationContext

Ordinal	`718`
Address	`0x835d0`

RtlActivateActivationContextEx

Ordinal	`719`
Address	`0x83740`

RtlActivateActivationContextUnsafeFast

Ordinal	`720`
Address	`0x96b10`

RtlAddAccessAllowedAce

Ordinal	`721`
Address	`0x7e550`

RtlAddAccessAllowedAceEx

Ordinal	`722`
Address	`0x7d840`

RtlAddAccessAllowedObjectAce

Ordinal	`723`
Address	`0x138e10`

RtlAddAccessDeniedAce

Ordinal	`724`
Address	`0x10ee10`

RtlAddAccessDeniedAceEx

Ordinal	`725`
Address	`0x108900`

RtlAddAccessDeniedObjectAce

Ordinal	`726`
Address	`0x138e70`

RtlAddAccessFilterAce

Ordinal	`727`
Address	`0x138ed0`

RtlAddAce

Ordinal	`728`
Address	`0x7df60`

RtlAddActionToRXact

Ordinal	`729`
Address	`0x106b50`

RtlAddAtomToAtomTable

Ordinal	`730`
Address	`0x108ef0`

RtlAddAttributeActionToRXact

Ordinal	`731`
Address	`0x106ba0`

RtlAddAuditAccessAce

Ordinal	`732`
Address	`0x1390d0`

RtlAddAuditAccessAceEx

Ordinal	`733`
Address	`0x109c90`

RtlAddAuditAccessObjectAce

Ordinal	`734`
Address	`0x139110`

RtlAddCompoundAce

Ordinal	`735`
Address	`0x139180`

RtlAddFunctionTable

Ordinal	`736`
Address	`0xed8a0`

RtlAddGrowableFunctionTable

Ordinal	`737`
Address	`0xf8d0`

RtlAddIntegrityLabelToBoundaryDescriptor

Ordinal	`738`
Address	`0x112800`

RtlAddMandatoryAce

Ordinal	`739`
Address	`0xc2b60`

RtlAddProcessTrustLabelAce

Ordinal	`740`
Address	`0x108170`

RtlAddRefActivationContext

Ordinal	`741`
Address	`0x83e30`

RtlAddRefMemoryStream

Ordinal	`742`
Address	`0x107a70`

RtlAddResourceAttributeAce

Ordinal	`743`
Address	`0x139300`

RtlAddSIDToBoundaryDescriptor

Ordinal	`744`
Address	`0x107150`

RtlAddScopedPolicyIDAce

Ordinal	`745`
Address	`0x139690`

RtlAddVectoredContinueHandler

Ordinal	`746`
Address	`0x10edf0`

RtlAddVectoredExceptionHandler

Ordinal	`747`
Address	`0x106f70`

RtlAddressInSectionTable

Ordinal	`748`
Address	`0x5d030`

RtlAdjustPrivilege

Ordinal	`749`
Address	`0xed630`

RtlAllocateActivationContextStack

Ordinal	`750`
Address	`0xf4bd0`

RtlAllocateAndInitializeSid

Ordinal	`751`
Address	`0xdffa0`

RtlAllocateAndInitializeSidEx

Ordinal	`752`
Address	`0x137060`

RtlAllocateHandle

Ordinal	`753`
Address	`0x5dde0`

RtlAllocateHeap

Ordinal	`754`
Address	`0x19f90`

RtlAllocateMemoryBlockLookaside

Ordinal	`755`
Address	`0x16f010`

RtlAllocateMemoryZone

Ordinal	`756`
Address	`0x16f140`

RtlAllocateWnfSerializationGroup

Ordinal	`757`
Address	`0x105e50`

RtlAnsiCharToUnicodeChar

Ordinal	`758`
Address	`0xbfe60`

RtlAnsiStringToUnicodeSize

Ordinal	`759`
Address	`0xd5d20`

RtlAnsiStringToUnicodeString

Ordinal	`760`
Address	`0x15c90`

RtlAppendAsciizToString

Ordinal	`761`
Address	`0x13a760`

RtlAppendPathElement

Ordinal	`762`
Address	`0xb7940`

RtlAppendStringToString

Ordinal	`763`
Address	`0x13a7e0`

RtlAppendUnicodeStringToString

Ordinal	`764`
Address	`0x9c220`

RtlAppendUnicodeToString

Ordinal	`765`
Address	`0x61ee0`

RtlApplicationVerifierStop

Ordinal	`766`
Address	`0x1301f0`

RtlApplyRXact

Ordinal	`767`
Address	`0x102420`

RtlApplyRXactNoFlush

Ordinal	`768`
Address	`0x102500`

RtlAppxIsFileOwnedByTrustedInstaller

Ordinal	`769`
Address	`0x12fd50`

RtlAreAllAccessesGranted

Ordinal	`770`
Address	`0xeb510`

RtlAreAnyAccessesGranted

Ordinal	`771`
Address	`0x110ac0`

RtlAreBitsClear

Ordinal	`772`
Address	`0xf5080`

RtlAreBitsClearEx

Ordinal	`773`
Address	`0xeb080`

RtlAreBitsSet

Ordinal	`774`
Address	`0xf1450`

RtlAreLongPathsEnabled

Ordinal	`775`
Address	`0xe6980`

RtlAssert

Ordinal	`776`
Address	`0xede80`

RtlAvlInsertNodeEx

Ordinal	`777`
Address	`0xf6f0`

RtlAvlRemoveNode

Ordinal	`778`
Address	`0x3fdf0`

RtlBarrier

Ordinal	`779`
Address	`0x13c070`

RtlBarrierForDelete

Ordinal	`780`
Address	`0x13c080`

RtlCallEnclave

Ordinal	`781`
Address	`0x164200`

RtlCallEnclaveReturn

Ordinal	`782`
Address	`0x16426b`

RtlCancelTimer

Ordinal	`783`
Address	`0x15ade0`

RtlCanonicalizeDomainName

Ordinal	`784`
Address	`0xaebd0`

RtlCapabilityCheck

Ordinal	`785`
Address	`0x7f9a0`

RtlCapabilityCheckForSingleSessionSku

Ordinal	`786`
Address	`0x10ea70`

RtlCaptureContext

Ordinal	`787`
Address	`0x11ee00`

RtlCaptureContext2

Ordinal	`788`
Address	`0x11ef40`

RtlCaptureStackBackTrace

Ordinal	`789`
Address	`0x820b0`

RtlCharToInteger

Ordinal	`790`
Address	`0x5ce60`

RtlCheckBootStatusIntegrity

Ordinal	`791`
Address	`0x13c2b0`

RtlCheckForOrphanedCriticalSections

Ordinal	`792`
Address	`0xee710`

RtlCheckPortableOperatingSystem

Ordinal	`793`
Address	`0x64f20`

RtlCheckRegistryKey

Ordinal	`794`
Address	`0x65430`

RtlCheckSandboxedToken

Ordinal	`795`
Address	`0x109250`

RtlCheckSystemBootStatusIntegrity

Ordinal	`796`
Address	`0x10f370`

RtlCheckTokenCapability

Ordinal	`797`
Address	`0x81840`

RtlCheckTokenMembership

Ordinal	`798`
Address	`0xec300`

RtlCheckTokenMembershipEx

Ordinal	`799`
Address	`0x7f420`

RtlCleanUpTEBLangLists

Ordinal	`800`
Address	`0xccac0`

RtlClearAllBits

Ordinal	`801`
Address	`0xecb10`

RtlClearAllBitsEx

Ordinal	`802`
Address	`0x13a8b0`

RtlClearBit

Ordinal	`803`
Address	`0x1027d0`

RtlClearBitEx

Ordinal	`804`
Address	`0x13a8e0`

RtlClearBits

Ordinal	`805`
Address	`0x3ef00`

RtlClearBitsEx

Ordinal	`806`
Address	`0x13a8f0`

RtlClearThreadWorkOnBehalfTicket

Ordinal	`807`
Address	`0xdf760`

RtlCloneMemoryStream

Ordinal	`808`
Address	`0x131100`

RtlCloneUserProcess

Ordinal	`809`
Address	`0x15d640`

RtlCmDecodeMemIoResource

Ordinal	`810`
Address	`0x13f6b0`

RtlCmEncodeMemIoResource

Ordinal	`811`
Address	`0x13f720`

RtlCommitDebugInfo

Ordinal	`812`
Address	`0x10f350`

RtlCommitMemoryStream

Ordinal	`813`
Address	`0x131100`

RtlCompactHeap

Ordinal	`814`
Address	`0x107a80`

RtlCompareAltitudes

Ordinal	`815`
Address	`0x1410a0`

RtlCompareExchangePointerMapping

Ordinal	`816`
Address	`0x141290`

RtlCompareExchangePropertyStore

Ordinal	`817`
Address	`0x1413e0`

RtlCompareMemory

Ordinal	`818`
Address	`0x1642e0`

RtlCompareMemoryUlong

Ordinal	`819`
Address	`0x164360`

RtlCompareString

Ordinal	`820`
Address	`0xdfe70`

RtlCompareUnicodeString

Ordinal	`821`
Address	`0xd1650`

RtlCompareUnicodeStrings

Ordinal	`822`
Address	`0x98cc0`

RtlCompleteProcessCloning

Ordinal	`823`
Address	`0x15d950`

RtlCompressBuffer

Ordinal	`824`
Address	`0xf4ff0`

RtlComputeCrc32

Ordinal	`825`
Address	`0x108f00`

RtlComputeImportTableHash

Ordinal	`826`
Address	`0x1330a0`

RtlComputePrivatizedDllName_U

Ordinal	`827`
Address	`0x107550`

RtlConnectToSm

Ordinal	`828`
Address	`0x10e250`

RtlConsoleMultiByteToUnicodeN

Ordinal	`829`
Address	`0x136850`

RtlConstructCrossVmEventPath

Ordinal	`830`
Address	`0x141b10`

RtlConstructCrossVmMutexPath

Ordinal	`831`
Address	`0x141b10`

RtlContractHashTable

Ordinal	`832`
Address	`0xe1c50`

RtlConvertDeviceFamilyInfoToString

Ordinal	`833`
Address	`0x6fc20`

RtlConvertExclusiveToShared

Ordinal	`834`
Address	`0x10b510`

RtlConvertHostPerfCounterToPerfCounter

Ordinal	`835`
Address	`0x10a330`

RtlConvertLCIDToString

Ordinal	`836`
Address	`0x13d120`

RtlConvertSRWLockExclusiveToShared

Ordinal	`837`
Address	`0x138c60`

RtlConvertSharedToExclusive

Ordinal	`838`
Address	`0x102b80`

RtlConvertSidToUnicodeString

Ordinal	`839`
Address	`0x7e7f0`

RtlConvertToAutoInheritSecurityObject

Ordinal	`840`
Address	`0x131a40`

RtlCopyBitMap

Ordinal	`841`
Address	`0x13a9b0`

RtlCopyContext

Ordinal	`842`
Address	`0xd9230`

RtlCopyExtendedContext

Ordinal	`843`
Address	`0x141de0`

RtlCopyLuid

Ordinal	`844`
Address	`0xe6ed0`

RtlCopyLuidAndAttributesArray

Ordinal	`845`
Address	`0x137130`

RtlCopyMappedMemory

Ordinal	`846`
Address	`0xf5760`

RtlCopyMemory

Ordinal	`847`
Address	`0x1657c0`

RtlCopyMemoryNonTemporal

Ordinal	`848`
Address	`0x164390`

RtlCopyMemoryStreamTo

Ordinal	`849`
Address	`0x131100`

RtlCopyOutOfProcessMemoryStreamTo

Ordinal	`850`
Address	`0x131100`

RtlCopySecurityDescriptor

Ordinal	`851`
Address	`0xf07b0`

RtlCopySid

Ordinal	`852`
Address	`0xc2d10`

RtlCopySidAndAttributesArray

Ordinal	`853`
Address	`0x137160`

RtlCopyString

Ordinal	`854`
Address	`0x108870`

RtlCopyUnicodeString

Ordinal	`855`
Address	`0xd7650`

RtlCrc32

Ordinal	`856`
Address	`0xf42e0`

RtlCrc64

Ordinal	`857`
Address	`0x10fe80`

RtlCreateAcl

Ordinal	`858`
Address	`0xc7f00`

RtlCreateActivationContext

Ordinal	`859`
Address	`0x68190`

RtlCreateAndSetSD

Ordinal	`860`
Address	`0xc83d0`

RtlCreateAtomTable

Ordinal	`861`
Address	`0x10ca40`

RtlCreateBootStatusDataFile

Ordinal	`862`
Address	`0x13c420`

RtlCreateBoundaryDescriptor

Ordinal	`863`
Address	`0xecb40`

RtlCreateEnvironment

Ordinal	`864`
Address	`0x105870`

RtlCreateEnvironmentEx

Ordinal	`865`
Address	`0x6a330`

RtlCreateHashTable

Ordinal	`866`
Address	`0x108cf0`

RtlCreateHashTableEx

Ordinal	`867`
Address	`0x141c80`

RtlCreateHeap

Ordinal	`868`
Address	`0x3cce0`

RtlCreateMemoryBlockLookaside

Ordinal	`869`
Address	`0xe1760`

RtlCreateMemoryZone

Ordinal	`870`
Address	`0xe19a0`

RtlCreateProcessParameters

Ordinal	`871`
Address	`0x15da90`

RtlCreateProcessParametersEx

Ordinal	`872`
Address	`0xe2350`

RtlCreateProcessParametersWithTemplate

Ordinal	`873`
Address	`0xe23c0`

RtlCreateProcessReflection

Ordinal	`874`
Address	`0x131110`

RtlCreateQueryDebugBuffer

Ordinal	`875`
Address	`0xf2100`

RtlCreateRegistryKey

Ordinal	`876`
Address	`0x13ccb0`

RtlCreateSecurityDescriptor

Ordinal	`877`
Address	`0xe48b0`

RtlCreateServiceSid

Ordinal	`878`
Address	`0xcff60`

RtlCreateSystemVolumeInformationFolder

Ordinal	`879`
Address	`0xc8a60`

RtlCreateTagHeap

Ordinal	`880`
Address	`0x3b340`

RtlCreateTimer

Ordinal	`881`
Address	`0x937b0`

RtlCreateTimerQueue

Ordinal	`882`
Address	`0x102ac0`

RtlCreateUmsCompletionList

Ordinal	`883`
Address	`0x1429d0`

RtlCreateUmsThreadContext

Ordinal	`884`
Address	`0x1429d0`

RtlCreateUnicodeString

Ordinal	`885`
Address	`0x30d80`

RtlCreateUnicodeStringFromAsciiz

Ordinal	`886`
Address	`0xe3e30`

RtlCreateUserFiberShadowStack

Ordinal	`887`
Address	`0x102e30`

RtlCreateUserProcess

Ordinal	`888`
Address	`0x134ff0`

RtlCreateUserProcessEx

Ordinal	`889`
Address	`0xf7330`

RtlCreateUserSecurityObject

Ordinal	`890`
Address	`0x131a50`

RtlCreateUserStack

Ordinal	`891`
Address	`0xf0990`

RtlCreateUserThread

Ordinal	`892`
Address	`0xe2f30`

RtlCreateVirtualAccountSid

Ordinal	`893`
Address	`0xd00b0`

RtlCultureNameToLCID

Ordinal	`894`
Address	`0x798d0`

RtlCustomCPToUnicodeN

Ordinal	`895`
Address	`0x14fb0`

RtlCutoverTimeToSystemTime

Ordinal	`896`
Address	`0xac920`

RtlDeCommitDebugInfo

Ordinal	`897`
Address	`0x10f360`

RtlDeNormalizeProcessParams

Ordinal	`898`
Address	`0x11dfc0`

RtlDeactivateActivationContext

Ordinal	`899`
Address	`0x96680`

RtlDeactivateActivationContextUnsafeFast

Ordinal	`900`
Address	`0x182a0`

RtlDebugPrintTimes

Ordinal	`901`
Address	`0xf65b0`

RtlDecodePointer

Ordinal	`902`
Address	`0x23170`

RtlDecodeRemotePointer

Ordinal	`903`
Address	`0x15dc60`

RtlDecodeSystemPointer

Ordinal	`904`
Address	`0xe6ee0`

RtlDecompressBuffer

Ordinal	`905`
Address	`0x141910`

RtlDecompressBufferEx

Ordinal	`906`
Address	`0xf57d0`

RtlDecompressFragment

Ordinal	`907`
Address	`0x141990`

RtlDefaultNpAcl

Ordinal	`908`
Address	`0xc7b00`

RtlDelayExecution

Ordinal	`909`
Address	`0xd1fd0`

RtlDelete

Ordinal	`910`
Address	`0xba060`

RtlDeleteAce

Ordinal	`911`
Address	`0xf26b0`

RtlDeleteAtomFromAtomTable

Ordinal	`912`
Address	`0x5d720`

RtlDeleteBarrier

Ordinal	`913`
Address	`0x13c090`

RtlDeleteBoundaryDescriptor

Ordinal	`914`
Address	`0x52290`

RtlDeleteCriticalSection

Ordinal	`915`
Address	`0x40fb0`

RtlDeleteElementGenericTable

Ordinal	`916`
Address	`0xb9f90`

RtlDeleteElementGenericTableAvl

Ordinal	`917`
Address	`0x982b0`

RtlDeleteElementGenericTableAvlEx

Ordinal	`918`
Address	`0x98e20`

RtlDeleteFunctionTable

Ordinal	`919`
Address	`0x3fa40`

RtlDeleteGrowableFunctionTable

Ordinal	`920`
Address	`0x3fc50`

RtlDeleteHashTable

Ordinal	`921`
Address	`0xe2190`

RtlDeleteNoSplay

Ordinal	`922`
Address	`0xb9ec0`

RtlDeleteRegistryValue

Ordinal	`923`
Address	`0x666d0`

RtlDeleteResource

Ordinal	`924`
Address	`0x40f20`

RtlDeleteSecurityObject

Ordinal	`925`
Address	`0xed750`

RtlDeleteTimer

Ordinal	`926`
Address	`0x912d0`

RtlDeleteTimerQueue

Ordinal	`927`
Address	`0x15adf0`

RtlDeleteTimerQueueEx

Ordinal	`928`
Address	`0xf69a0`

RtlDeleteUmsCompletionList

Ordinal	`929`
Address	`0x1429d0`

RtlDeleteUmsThreadContext

Ordinal	`930`
Address	`0x1429d0`

RtlDequeueUmsCompletionListItems

Ordinal	`931`
Address	`0x1429d0`

RtlDeregisterSecureMemoryCacheCallback

Ordinal	`932`
Address	`0x142c70`

RtlDeregisterWait

Ordinal	`933`
Address	`0x109960`

RtlDeregisterWaitEx

Ordinal	`934`
Address	`0x94a20`

RtlDeriveCapabilitySidsFromName

Ordinal	`935`
Address	`0x801d0`

RtlDestroyAtomTable

Ordinal	`936`
Address	`0x10f890`

RtlDestroyEnvironment

Ordinal	`937`
Address	`0x6a5d0`

RtlDestroyHandleTable

Ordinal	`938`
Address	`0x10c620`

RtlDestroyHeap

Ordinal	`939`
Address	`0x401e0`

RtlDestroyMemoryBlockLookaside

Ordinal	`940`
Address	`0x1092b0`

RtlDestroyMemoryZone

Ordinal	`941`
Address	`0x109310`

RtlDestroyProcessParameters

Ordinal	`942`
Address	`0xf72e0`

RtlDestroyQueryDebugBuffer

Ordinal	`943`
Address	`0x5680`

RtlDetectHeapLeaks

Ordinal	`944`
Address	`0x3aff0`

RtlDetermineDosPathNameType_U

Ordinal	`945`
Address	`0x6b2d0`

RtlDisableThreadProfiling

Ordinal	`946`
Address	`0x130a50`

RtlDisownModuleHeapAllocation

Ordinal	`947`
Address	`0xf3830`

RtlDllShutdownInProgress

Ordinal	`948`
Address	`0xdd290`

RtlDnsHostNameToComputerName

Ordinal	`949`
Address	`0xd17c0`

RtlDoesFileExists_U

Ordinal	`950`
Address	`0x105e40`

RtlDoesNameContainWildCards

Ordinal	`951`
Address	`0x106ed0`

RtlDosApplyFileIsolationRedirection_Ustr

Ordinal	`952`
Address	`0x53830`

RtlDosLongPathNameToNtPathName_U_WithStatus

Ordinal	`953`
Address	`0xd73d0`

RtlDosLongPathNameToRelativeNtPathName_U_WithStatus

Ordinal	`954`
Address	`0x15d610`

RtlDosPathNameToNtPathName_U

Ordinal	`955`
Address	`0xe3400`

RtlDosPathNameToNtPathName_U_WithStatus

Ordinal	`956`
Address	`0xdb3b0`

RtlDosPathNameToRelativeNtPathName_U

Ordinal	`957`
Address	`0xde2c0`

RtlDosPathNameToRelativeNtPathName_U_WithStatus

Ordinal	`958`
Address	`0xd6b40`

RtlDosSearchPath_U

Ordinal	`959`
Address	`0x69e70`

RtlDosSearchPath_Ustr

Ordinal	`960`
Address	`0x9d630`

RtlDowncaseUnicodeChar

Ordinal	`961`
Address	`0xf33d0`

RtlDowncaseUnicodeString

Ordinal	`962`
Address	`0xd7cd0`

RtlDrainNonVolatileFlush

Ordinal	`963`
Address	`0x1430b0`

RtlDumpResource

Ordinal	`964`
Address	`0x138d30`

RtlDuplicateUnicodeString

Ordinal	`965`
Address	`0xe9660`

RtlEmptyAtomTable

Ordinal	`966`
Address	`0x10ec70`

RtlEnableEarlyCriticalSectionEventCreation

Ordinal	`967`
Address	`0x138d80`

RtlEnableThreadProfiling

Ordinal	`968`
Address	`0x130ac0`

RtlEnclaveCallDispatch

Ordinal	`969`
Address	`0x164190`

RtlEnclaveCallDispatchReturn

Ordinal	`970`
Address	`0x1641c1`

RtlEncodePointer

Ordinal	`971`
Address	`0xd7f0`

RtlEncodeRemotePointer

Ordinal	`972`
Address	`0x15dcd0`

RtlEncodeSystemPointer

Ordinal	`973`
Address	`0xde360`

RtlEndEnumerationHashTable

Ordinal	`974`
Address	`0xf3ab0`

RtlEndStrongEnumerationHashTable

Ordinal	`975`
Address	`0xf65b0`

RtlEndWeakEnumerationHashTable

Ordinal	`976`
Address	`0x141c90`

RtlEnterCriticalSection

Ordinal	`977`
Address	`0x1d620`

RtlEnterUmsSchedulingMode

Ordinal	`978`
Address	`0x1429d0`

RtlEnumProcessHeaps

Ordinal	`979`
Address	`0x13fb00`

RtlEnumerateEntryHashTable

Ordinal	`980`
Address	`0xde140`

RtlEnumerateGenericTable

Ordinal	`981`
Address	`0xb9e50`

RtlEnumerateGenericTableAvl

Ordinal	`982`
Address	`0xf0f50`

RtlEnumerateGenericTableLikeADirectory

Ordinal	`983`
Address	`0x142a30`

RtlEnumerateGenericTableWithoutSplaying

Ordinal	`984`
Address	`0xdb610`

RtlEnumerateGenericTableWithoutSplayingAvl

Ordinal	`985`
Address	`0xe5f90`

RtlEqualComputerName

Ordinal	`986`
Address	`0x13a420`

RtlEqualDomainName

Ordinal	`987`
Address	`0xae410`

RtlEqualLuid

Ordinal	`988`
Address	`0x137220`

RtlEqualPrefixSid

Ordinal	`989`
Address	`0xc76e0`

RtlEqualSid

Ordinal	`990`
Address	`0xc8390`

RtlEqualString

Ordinal	`991`
Address	`0xdde10`

RtlEqualUnicodeString

Ordinal	`992`
Address	`0xb77a0`

RtlEqualWnfChangeStamps

Ordinal	`993`
Address	`0x10c110`

RtlEraseUnicodeString

Ordinal	`994`
Address	`0x10fe20`

RtlEthernetAddressToStringA

Ordinal	`995`
Address	`0x143170`

RtlEthernetAddressToStringW

Ordinal	`996`
Address	`0x10bdd0`

RtlEthernetStringToAddressA

Ordinal	`997`
Address	`0x1431e0`

RtlEthernetStringToAddressW

Ordinal	`998`
Address	`0x10f3e0`

RtlExecuteUmsThread

Ordinal	`999`
Address	`0x1429d0`

RtlExitUserProcess

Ordinal	`1000`
Address	`0x87cc0`

RtlExitUserThread

Ordinal	`1001`
Address	`0x87c60`

RtlExpandEnvironmentStrings

Ordinal	`1002`
Address	`0x6c5f0`

RtlExpandEnvironmentStrings_U

Ordinal	`1003`
Address	`0x6c550`

RtlExpandHashTable

Ordinal	`1004`
Address	`0xe1db0`

RtlExtendCorrelationVector

Ordinal	`1005`
Address	`0xf1820`

RtlExtendMemoryBlockLookaside

Ordinal	`1006`
Address	`0x10f320`

RtlExtendMemoryZone

Ordinal	`1007`
Address	`0xf3720`

RtlExtractBitMap

Ordinal	`1008`
Address	`0x10cb20`

RtlFillMemory

Ordinal	`1009`
Address	`0x10eb40`

RtlFillMemoryNonTemporal

Ordinal	`1010`
Address	`0x1644d0`

RtlFillNonVolatileMemory

Ordinal	`1011`
Address	`0x143310`

RtlFinalReleaseOutOfProcessMemoryStream

Ordinal	`1012`
Address	`0xf65b0`

RtlFindAceByType

Ordinal	`1013`
Address	`0xe9cb0`

RtlFindActivationContextSectionGuid

Ordinal	`1014`
Address	`0x57140`

RtlFindActivationContextSectionString

Ordinal	`1015`
Address	`0x56320`

RtlFindCharInUnicodeString

Ordinal	`1016`
Address	`0xb69d0`

RtlFindClearBits

Ordinal	`1017`
Address	`0xc0080`

RtlFindClearBitsAndSet

Ordinal	`1018`
Address	`0xc0450`

RtlFindClearBitsAndSetEx

Ordinal	`1019`
Address	`0x13abc0`

RtlFindClearBitsEx

Ordinal	`1020`
Address	`0x13af40`

RtlFindClearRuns

Ordinal	`1021`
Address	`0xe0270`

RtlFindClosestEncodableLength

Ordinal	`1022`
Address	`0x13f800`

RtlFindExportedRoutineByName

Ordinal	`1023`
Address	`0xe9990`

RtlFindLastBackwardRunClear

Ordinal	`1024`
Address	`0xf1b80`

RtlFindLeastSignificantBit

Ordinal	`1025`
Address	`0x108800`

RtlFindLongestRunClear

Ordinal	`1026`
Address	`0xe0230`

RtlFindMessage

Ordinal	`1027`
Address	`0x5a2c0`

RtlFindMostSignificantBit

Ordinal	`1028`
Address	`0x109a80`

RtlFindNextForwardRunClear

Ordinal	`1029`
Address	`0xda120`

RtlFindSetBits

Ordinal	`1030`
Address	`0x10c690`

RtlFindSetBitsAndClear

Ordinal	`1031`
Address	`0x13b280`

RtlFindSetBitsAndClearEx

Ordinal	`1032`
Address	`0x13b650`

RtlFindSetBitsEx

Ordinal	`1033`
Address	`0xedfd0`

RtlFindUnicodeSubstring

Ordinal	`1034`
Address	`0x5e860`

RtlFirstEntrySList

Ordinal	`1035`
Address	`0x163dc0`

RtlFirstFreeAce

Ordinal	`1036`
Address	`0xda060`

RtlFlsAlloc

Ordinal	`1037`
Address	`0xad8a0`

RtlFlsAllocEx

Ordinal	`1038`
Address	`0xad7b0`

RtlFlsFree

Ordinal	`1039`
Address	`0x106f20`

RtlFlsGetValue

Ordinal	`1040`
Address	`0xd6ad0`

RtlFlsGetValue2

Ordinal	`1041`
Address	`0xd5cd0`

RtlFlsSetValue

Ordinal	`1042`
Address	`0xadb00`

RtlFlushHeaps

Ordinal	`1043`
Address	`0x10d210`

RtlFlushNonVolatileMemory

Ordinal	`1044`
Address	`0x1430e0`

RtlFlushNonVolatileMemoryRanges

Ordinal	`1045`
Address	`0x1433c0`

RtlFlushSecureMemoryCache

Ordinal	`1046`
Address	`0x10ba70`

RtlFormatCurrentUserKeyPath

Ordinal	`1047`
Address	`0x7e370`

RtlFormatMessage

Ordinal	`1048`
Address	`0x1435c0`

RtlFormatMessageEx

Ordinal	`1049`
Address	`0xd0b80`

RtlFreeActivationContextStack

Ordinal	`1050`
Address	`0x88450`

RtlFreeAnsiString

Ordinal	`1051`
Address	`0x63ec0`

RtlFreeHandle

Ordinal	`1052`
Address	`0xeb2d0`

RtlFreeHeap

Ordinal	`1053`
Address	`0x2f720`

RtlFreeMemoryBlockLookaside

Ordinal	`1054`
Address	`0x16f1a0`

RtlFreeNonVolatileToken

Ordinal	`1055`
Address	`0x143450`

RtlFreeOemString

Ordinal	`1056`
Address	`0x13a430`

RtlFreeSid

Ordinal	`1057`
Address	`0xe6910`

RtlFreeThreadActivationContextStack

Ordinal	`1058`
Address	`0x88410`

RtlFreeUTF8String

Ordinal	`1059`
Address	`0x63ec0`

RtlFreeUnicodeString

Ordinal	`1060`
Address	`0x63ec0`

RtlFreeUserFiberShadowStack

Ordinal	`1061`
Address	`0x1088d0`

RtlFreeUserStack

Ordinal	`1062`
Address	`0x1048f0`

RtlGUIDFromString

Ordinal	`1063`
Address	`0xd7fe0`

RtlGenerate8dot3Name

Ordinal	`1064`
Address	`0x143790`

RtlGetAce

Ordinal	`1065`
Address	`0xc90c0`

RtlGetAcesBufferSize

Ordinal	`1066`
Address	`0xf1e00`

RtlGetActiveActivationContext

Ordinal	`1067`
Address	`0x834a0`

RtlGetActiveConsoleId

Ordinal	`1068`
Address	`0xf0f70`

RtlGetAppContainerNamedObjectPath

Ordinal	`1069`
Address	`0xc7f40`

RtlGetAppContainerParent

Ordinal	`1070`
Address	`0x64a50`

RtlGetAppContainerSidType

Ordinal	`1071`
Address	`0x64960`

RtlGetCallersAddress

Ordinal	`1072`
Address	`0x10f1c0`

RtlGetCompressionWorkSpaceSize

Ordinal	`1073`
Address	`0x103050`

RtlGetConsoleSessionForegroundProcessId

Ordinal	`1074`
Address	`0x143f40`

RtlGetControlSecurityDescriptor

Ordinal	`1075`
Address	`0xeb160`

RtlGetCriticalSectionRecursionCount

Ordinal	`1076`
Address	`0x1100b0`

RtlGetCurrentDirectory_U

Ordinal	`1077`
Address	`0x9e8b0`

RtlGetCurrentPeb

Ordinal	`1078`
Address	`0xf5740`

RtlGetCurrentProcessorNumber

Ordinal	`1079`
Address	`0x1645d0`

RtlGetCurrentProcessorNumberEx

Ordinal	`1080`
Address	`0x164640`

RtlGetCurrentServiceSessionId

Ordinal	`1081`
Address	`0x4e070`

RtlGetCurrentThreadPrimaryGroup

Ordinal	`1082`
Address	`0x1088b0`

RtlGetCurrentTransaction

Ordinal	`1083`
Address	`0xe2bc0`

RtlGetCurrentUmsThread

Ordinal	`1084`
Address	`0x1429e0`

RtlGetDaclSecurityDescriptor

Ordinal	`1085`
Address	`0xe3150`

RtlGetDeviceFamilyInfoEnum

Ordinal	`1086`
Address	`0xf5670`

RtlGetElementGenericTable

Ordinal	`1087`
Address	`0xefad0`

RtlGetElementGenericTableAvl

Ordinal	`1088`
Address	`0x142b40`

RtlGetEnabledExtendedFeatures

Ordinal	`1089`
Address	`0xdc840`

RtlGetExePath

Ordinal	`1090`
Address	`0x6a0b0`

RtlGetExtendedContextLength

Ordinal	`1091`
Address	`0xbd780`

RtlGetExtendedContextLength2

Ordinal	`1092`
Address	`0xd5340`

RtlGetExtendedFeaturesMask

Ordinal	`1093`
Address	`0xdbad0`

RtlGetFeatureToggleConfiguration

Ordinal	`1094`
Address	`0x144070`

RtlGetFeatureTogglesChangeToken

Ordinal	`1095`
Address	`0x1441d0`

RtlGetFileMUIPath

Ordinal	`1096`
Address	`0x66e10`

RtlGetFrame

Ordinal	`1097`
Address	`0x10b990`

RtlGetFullPathName_U

Ordinal	`1098`
Address	`0x67960`

RtlGetFullPathName_UEx

Ordinal	`1099`
Address	`0xddd50`

RtlGetFullPathName_UstrEx

Ordinal	`1100`
Address	`0x9e000`

RtlGetFunctionTableListHead

Ordinal	`1101`
Address	`0x11e960`

RtlGetGroupSecurityDescriptor

Ordinal	`1102`
Address	`0xeb290`

RtlGetImageFileMachines

Ordinal	`1103`
Address	`0x51b30`

RtlGetIntegerAtom

Ordinal	`1104`
Address	`0x781a0`

RtlGetInterruptTimePrecise

Ordinal	`1105`
Address	`0xd6930`

RtlGetLastNtStatus

Ordinal	`1106`
Address	`0xf4110`

RtlGetLastWin32Error

Ordinal	`1107`
Address	`0xe8f80`

RtlGetLengthWithoutLastFullDosOrNtPathElement

Ordinal	`1108`
Address	`0x106a50`

RtlGetLengthWithoutTrailingPathSeperators

Ordinal	`1109`
Address	`0x10b630`

RtlGetLocaleFileMappingAddress

Ordinal	`1110`
Address	`0xf5dc0`

RtlGetLongestNtPathLength

Ordinal	`1111`
Address	`0x102740`

RtlGetMultiTimePrecise

Ordinal	`1112`
Address	`0x7f220`

RtlGetNativeSystemInformation

Ordinal	`1113`
Address	`0x160720`

RtlGetNextEntryHashTable

Ordinal	`1114`
Address	`0xec2b0`

RtlGetNextUmsListItem

Ordinal	`1115`
Address	`0x1429d0`

RtlGetNonVolatileToken

Ordinal	`1116`
Address	`0x143470`

RtlGetNtGlobalFlags

Ordinal	`1117`
Address	`0xe48e0`

RtlGetNtProductType

Ordinal	`1118`
Address	`0x71250`

RtlGetNtSystemRoot

Ordinal	`1119`
Address	`0x61fa0`

RtlGetNtVersionNumbers

Ordinal	`1120`
Address	`0x10a410`

RtlGetOwnerSecurityDescriptor

Ordinal	`1121`
Address	`0xe9820`

RtlGetParentLocaleName

Ordinal	`1122`
Address	`0x77f80`

RtlGetPersistedStateLocation

Ordinal	`1123`
Address	`0x2f350`

RtlGetProcessHeaps

Ordinal	`1124`
Address	`0x10e500`

RtlGetProcessPreferredUILanguages

Ordinal	`1125`
Address	`0x108d10`

RtlGetProductInfo

Ordinal	`1126`
Address	`0xe6a80`

RtlGetReturnAddressHijackTarget

Ordinal	`1127`
Address	`0x11d0a0`

RtlGetSaclSecurityDescriptor

Ordinal	`1128`
Address	`0xe6e10`

RtlGetSearchPath

Ordinal	`1129`
Address	`0x6a580`

RtlGetSecurityDescriptorRMControl

Ordinal	`1130`
Address	`0x108340`

RtlGetSessionProperties

Ordinal	`1131`
Address	`0x137240`

RtlGetSetBootStatusData

Ordinal	`1132`
Address	`0x13c600`

RtlGetSuiteMask

Ordinal	`1133`
Address	`0x712d0`

RtlGetSystemBootStatus

Ordinal	`1134`
Address	`0x10f2c0`

RtlGetSystemBootStatusEx

Ordinal	`1135`
Address	`0x11e0a0`

RtlGetSystemGlobalData

Ordinal	`1136`
Address	`0xd6c50`

RtlGetSystemPreferredUILanguages

Ordinal	`1137`
Address	`0xcc420`

RtlGetSystemTimeAndBias

Ordinal	`1138`
Address	`0xdcfe0`

RtlGetSystemTimePrecise

Ordinal	`1139`
Address	`0x832b0`

RtlGetThreadErrorMode

Ordinal	`1140`
Address	`0x8b280`

RtlGetThreadLangIdByIndex

Ordinal	`1141`
Address	`0x10d8a0`

RtlGetThreadPreferredUILanguages

Ordinal	`1142`
Address	`0x7cad0`

RtlGetThreadWorkOnBehalfTicket

Ordinal	`1143`
Address	`0xdd140`

RtlGetTokenNamedObjectPath

Ordinal	`1144`
Address	`0x108320`

RtlGetUILanguageInfo

Ordinal	`1145`
Address	`0xccbe0`

RtlGetUmsCompletionListEvent

Ordinal	`1146`
Address	`0x1429d0`

RtlGetUnloadEventTrace

Ordinal	`1147`
Address	`0x15d1d0`

RtlGetUnloadEventTraceEx

Ordinal	`1148`
Address	`0xf42b0`

RtlGetUserInfoHeap

Ordinal	`1149`
Address	`0x2600`

RtlGetUserPreferredUILanguages

Ordinal	`1150`
Address	`0xca4f0`

RtlGetVersion

Ordinal	`1151`
Address	`0x70ee0`

RtlGrowFunctionTable

Ordinal	`1152`
Address	`0xf4e10`

RtlGuardCheckLongJumpTarget

Ordinal	`1153`
Address	`0x11fe0`

RtlHashUnicodeString

Ordinal	`1154`
Address	`0xd2d40`

RtlHeapTrkInitialize

Ordinal	`1155`
Address	`0xaa490`

RtlIdentifierAuthoritySid

Ordinal	`1156`
Address	`0xee490`

RtlIdnToAscii

Ordinal	`1157`
Address	`0xae910`

RtlIdnToNameprepUnicode

Ordinal	`1158`
Address	`0x144c00`

RtlIdnToUnicode

Ordinal	`1159`
Address	`0xae280`

RtlImageDirectoryEntryToData

Ordinal	`1160`
Address	`0x11730`

RtlImageNtHeader

Ordinal	`1161`
Address	`0xdc460`

RtlImageNtHeaderEx

Ordinal	`1162`
Address	`0x51740`

RtlImageRvaToSection

Ordinal	`1163`
Address	`0xe0160`

RtlImageRvaToVa

Ordinal	`1164`
Address	`0xe00d0`

RtlImpersonateSelf

Ordinal	`1165`
Address	`0xf1c70`

RtlImpersonateSelfEx

Ordinal	`1166`
Address	`0xe5610`

RtlIncrementCorrelationVector

Ordinal	`1167`
Address	`0xf1870`

RtlInitAnsiString

Ordinal	`1168`
Address	`0xdf840`

RtlInitAnsiStringEx

Ordinal	`1169`
Address	`0xdba80`

RtlInitBarrier

Ordinal	`1170`
Address	`0x13c0c0`

RtlInitCodePageTable

Ordinal	`1171`
Address	`0x6eee0`

RtlInitEnumerationHashTable

Ordinal	`1172`
Address	`0xdc600`

RtlInitMemoryStream

Ordinal	`1173`
Address	`0xf65b0`

RtlInitNlsTables

Ordinal	`1174`
Address	`0xf65b0`

RtlInitOutOfProcessMemoryStream

Ordinal	`1175`
Address	`0xf65b0`

RtlInitString

Ordinal	`1176`
Address	`0xdf840`

RtlInitStringEx

Ordinal	`1177`
Address	`0x13a840`

RtlInitStrongEnumerationHashTable

Ordinal	`1178`
Address	`0x141ca0`

RtlInitUTF8String

Ordinal	`1179`
Address	`0x108820`

RtlInitUTF8StringEx

Ordinal	`1180`
Address	`0x13a840`

RtlInitUnicodeString

Ordinal	`1181`
Address	`0xca4a0`

RtlInitUnicodeStringEx

Ordinal	`1182`
Address	`0x69c20`

RtlInitWeakEnumerationHashTable

Ordinal	`1183`
Address	`0x141cf0`

RtlInitializeAtomPackage

Ordinal	`1184`
Address	`0x107a70`

RtlInitializeBitMap

Ordinal	`1185`
Address	`0xf01c0`

RtlInitializeBitMapEx

Ordinal	`1186`
Address	`0xd79a0`

RtlInitializeConditionVariable

Ordinal	`1187`
Address	`0xe6350`

RtlInitializeContext

Ordinal	`1188`
Address	`0x144c40`

RtlInitializeCorrelationVector

Ordinal	`1189`
Address	`0x10b830`

RtlInitializeCriticalSection

Ordinal	`1190`
Address	`0xa180`

RtlInitializeCriticalSectionAndSpinCount

Ordinal	`1191`
Address	`0x9ff0`

RtlInitializeCriticalSectionEx

Ordinal	`1192`
Address	`0xcef0`

RtlInitializeExtendedContext

Ordinal	`1193`
Address	`0xbd670`

RtlInitializeExtendedContext2

Ordinal	`1194`
Address	`0xd4dc0`

RtlInitializeGenericTable

Ordinal	`1195`
Address	`0xf1740`

RtlInitializeGenericTableAvl

Ordinal	`1196`
Address	`0xf3d50`

RtlInitializeHandleTable

Ordinal	`1197`
Address	`0x102df0`

RtlInitializeNtUserPfn

Ordinal	`1198`
Address	`0x132270`

RtlInitializeRXact

Ordinal	`1199`
Address	`0x101fd0`

RtlInitializeResource

Ordinal	`1200`
Address	`0xb4f0`

RtlInitializeSListHead

Ordinal	`1201`
Address	`0xe1970`

RtlInitializeSRWLock

Ordinal	`1202`
Address	`0xe6350`

RtlInitializeSid

Ordinal	`1203`
Address	`0xdfc30`

RtlInitializeSidEx

Ordinal	`1204`
Address	`0x7f150`

RtlInsertElementGenericTable

Ordinal	`1205`
Address	`0xba2c0`

RtlInsertElementGenericTableAvl

Ordinal	`1206`
Address	`0x983a0`

RtlInsertElementGenericTableFull

Ordinal	`1207`
Address	`0xba440`

RtlInsertElementGenericTableFullAvl

Ordinal	`1208`
Address	`0x97c50`

RtlInsertEntryHashTable

Ordinal	`1209`
Address	`0xdc4c0`

RtlInstallFunctionTableCallback

Ordinal	`1210`
Address	`0xdc870`

RtlInt64ToUnicodeString

Ordinal	`1211`
Address	`0x13c1d0`

RtlIntegerToChar

Ordinal	`1212`
Address	`0xdd350`

RtlIntegerToUnicodeString

Ordinal	`1213`
Address	`0xdd2b0`

RtlInterlockedClearBitRun

Ordinal	`1214`
Address	`0xe6850`

RtlInterlockedClearBitRunEx

Ordinal	`1215`
Address	`0xf3160`

RtlInterlockedFlushSList

Ordinal	`1216`
Address	`0xea2a0`

RtlInterlockedPopEntrySList

Ordinal	`1217`
Address	`0x163dd0`

RtlInterlockedPushEntrySList

Ordinal	`1218`
Address	`0xea0c0`

RtlInterlockedPushListSList

Ordinal	`1219`
Address	`0x163e80`

RtlInterlockedPushListSListEx

Ordinal	`1220`
Address	`0x108930`

RtlInterlockedSetBitRun

Ordinal	`1221`
Address	`0x13ba10`

RtlIoDecodeMemIoResource

Ordinal	`1222`
Address	`0x13f8b0`

RtlIoEncodeMemIoResource

Ordinal	`1223`
Address	`0x13f950`

RtlIpv4AddressToStringA

Ordinal	`1224`
Address	`0xec0b0`

RtlIpv4AddressToStringExA

Ordinal	`1225`
Address	`0xef9c0`

RtlIpv4AddressToStringExW

Ordinal	`1226`
Address	`0xae330`

RtlIpv4AddressToStringW

Ordinal	`1227`
Address	`0xae5b0`

RtlIpv4StringToAddressA

Ordinal	`1228`
Address	`0xe5c80`

RtlIpv4StringToAddressExA

Ordinal	`1229`
Address	`0xe5ab0`

RtlIpv4StringToAddressExW

Ordinal	`1230`
Address	`0xaea00`

RtlIpv4StringToAddressW

Ordinal	`1231`
Address	`0xb0750`

RtlIpv6AddressToStringA

Ordinal	`1232`
Address	`0xec730`

RtlIpv6AddressToStringExA

Ordinal	`1233`
Address	`0xec610`

RtlIpv6AddressToStringExW

Ordinal	`1234`
Address	`0xae140`

RtlIpv6AddressToStringW

Ordinal	`1235`
Address	`0xae610`

RtlIpv6StringToAddressA

Ordinal	`1236`
Address	`0xeb7b0`

RtlIpv6StringToAddressExA

Ordinal	`1237`
Address	`0xeb520`

RtlIpv6StringToAddressExW

Ordinal	`1238`
Address	`0xaf1b0`

RtlIpv6StringToAddressW

Ordinal	`1239`
Address	`0xaf480`

RtlIsActivationContextActive

Ordinal	`1240`
Address	`0x132d10`

RtlIsApiSetImplemented

Ordinal	`1241`
Address	`0x1178e0`

RtlIsCapabilitySid

Ordinal	`1242`
Address	`0x81cb0`

RtlIsCloudFilesPlaceholder

Ordinal	`1243`
Address	`0xf0c70`

RtlIsCriticalSectionLocked

Ordinal	`1244`
Address	`0x1134e0`

RtlIsCriticalSectionLockedByThread

Ordinal	`1245`
Address	`0xdf890`

RtlIsCurrentProcess

Ordinal	`1246`
Address	`0xe1bb0`

RtlIsCurrentThread

Ordinal	`1247`
Address	`0x106f40`

RtlIsCurrentThreadAttachExempt

Ordinal	`1248`
Address	`0xec4f0`

RtlIsDosDeviceName_U

Ordinal	`1249`
Address	`0xe01b0`

RtlIsEcCode

Ordinal	`1250`
Address	`0x12ff00`

RtlIsElevatedRid

Ordinal	`1251`
Address	`0x1061f0`

RtlIsEnclaveFeaturePresent

Ordinal	`1252`
Address	`0x1178c0`

RtlIsFeatureEnabledForEnterprise

Ordinal	`1253`
Address	`0x145000`

RtlIsGenericTableEmpty

Ordinal	`1254`
Address	`0xe0660`

RtlIsGenericTableEmptyAvl

Ordinal	`1255`
Address	`0x1087c0`

RtlIsMultiSessionSku

Ordinal	`1256`
Address	`0x803f0`

RtlIsMultiUsersInSessionSku

Ordinal	`1257`
Address	`0xed4a0`

RtlIsNameInExpression

Ordinal	`1258`
Address	`0x5e290`

RtlIsNameInUnUpcasedExpression

Ordinal	`1259`
Address	`0x10fa00`

RtlIsNameLegalDOS8Dot3

Ordinal	`1260`
Address	`0x143c70`

RtlIsNonEmptyDirectoryReparsePointAllowed

Ordinal	`1261`
Address	`0x107df0`

RtlIsNormalizedString

Ordinal	`1262`
Address	`0xb18b0`

RtlIsPackageSid

Ordinal	`1263`
Address	`0xf5d70`

RtlIsParentOfChildAppContainer

Ordinal	`1264`
Address	`0x64b30`

RtlIsPartialPlaceholder

Ordinal	`1265`
Address	`0xef0d0`

RtlIsPartialPlaceholderFileHandle

Ordinal	`1266`
Address	`0x10eb80`

RtlIsPartialPlaceholderFileInfo

Ordinal	`1267`
Address	`0x144f00`

RtlIsProcessorFeaturePresent

Ordinal	`1268`
Address	`0x8730`

RtlIsStateSeparationEnabled

Ordinal	`1269`
Address	`0xe69a0`

RtlIsTextUnicode

Ordinal	`1270`
Address	`0xd20f0`

RtlIsThreadWithinLoaderCallout

Ordinal	`1271`
Address	`0xf4c50`

RtlIsUntrustedObject

Ordinal	`1272`
Address	`0x137310`

RtlIsValidHandle

Ordinal	`1273`
Address	`0x5e1a0`

RtlIsValidIndexHandle

Ordinal	`1274`
Address	`0xe3ea0`

RtlIsValidLocaleName

Ordinal	`1275`
Address	`0xce4c0`

RtlIsValidProcessTrustLabelSid

Ordinal	`1276`
Address	`0xc29c0`

RtlIsZeroMemory

Ordinal	`1277`
Address	`0x144fb0`

RtlKnownExceptionFilter

Ordinal	`1278`
Address	`0x108c60`

RtlLCIDToCultureName

Ordinal	`1279`
Address	`0x7ba70`

RtlLargeIntegerToChar

Ordinal	`1280`
Address	`0xf6250`

RtlLcidToLocaleName

Ordinal	`1281`
Address	`0xa2ef0`

RtlLeaveCriticalSection

Ordinal	`1282`
Address	`0x1d720`

RtlLengthCurrentClearRunBackwardEx

Ordinal	`1283`
Address	`0x13bad0`

RtlLengthCurrentClearRunForwardEx

Ordinal	`1284`
Address	`0x11b720`

RtlLengthRequiredSid

Ordinal	`1285`
Address	`0xdfaf0`

RtlLengthSecurityDescriptor

Ordinal	`1286`
Address	`0xe6220`

RtlLengthSid

Ordinal	`1287`
Address	`0xe2ba0`

RtlLengthSidAsUnicodeString

Ordinal	`1288`
Address	`0x7e100`

RtlLoadString

Ordinal	`1289`
Address	`0x8860`

RtlLocalTimeToSystemTime

Ordinal	`1290`
Address	`0x141d30`

RtlLocaleNameToLcid

Ordinal	`1291`
Address	`0x79770`

RtlLocateExtendedFeature

Ordinal	`1292`
Address	`0x21c30`

RtlLocateExtendedFeature2

Ordinal	`1293`
Address	`0xd5dc0`

RtlLocateLegacyContext

Ordinal	`1294`
Address	`0xe4730`

RtlLockBootStatusData

Ordinal	`1295`
Address	`0x13c790`

RtlLockCurrentThread

Ordinal	`1296`
Address	`0xf5be0`

RtlLockHeap

Ordinal	`1297`
Address	`0x3f20`

RtlLockMemoryBlockLookaside

Ordinal	`1298`
Address	`0x875e0`

RtlLockMemoryStreamRegion

Ordinal	`1299`
Address	`0x131100`

RtlLockMemoryZone

Ordinal	`1300`
Address	`0x87660`

RtlLockModuleSection

Ordinal	`1301`
Address	`0x87990`

RtlLogStackBackTrace

Ordinal	`1302`
Address	`0xf2bd0`

RtlLogUnexpectedCodepath

Ordinal	`1303`
Address	`0x1455a0`

RtlLookupAtomInAtomTable

Ordinal	`1304`
Address	`0x791b0`

RtlLookupElementGenericTable

Ordinal	`1305`
Address	`0xba630`

RtlLookupElementGenericTableAvl

Ordinal	`1306`
Address	`0x987b0`

RtlLookupElementGenericTableFull

Ordinal	`1307`
Address	`0xba560`

RtlLookupElementGenericTableFullAvl

Ordinal	`1308`
Address	`0x986b0`

RtlLookupEntryHashTable

Ordinal	`1309`
Address	`0xde3f0`

RtlLookupFirstMatchingElementGenericTableAvl

Ordinal	`1310`
Address	`0xf13b0`

RtlLookupFunctionEntry

Ordinal	`1311`
Address	`0x1de40`

RtlLookupFunctionTable

Ordinal	`1312`
Address	`0x1ddb0`

RtlMakeSelfRelativeSD

Ordinal	`1313`
Address	`0xc9130`

RtlMapGenericMask

Ordinal	`1314`
Address	`0xdfc60`

RtlMapSecurityErrorToNtStatus

Ordinal	`1315`
Address	`0x1374a0`

RtlMoveMemory

Ordinal	`1316`
Address	`0x1657c0`

RtlMultiAppendUnicodeStringBuffer

Ordinal	`1317`
Address	`0xb68b0`

RtlMultiByteToUnicodeN

Ordinal	`1318`
Address	`0x14e00`

RtlMultiByteToUnicodeSize

Ordinal	`1319`
Address	`0xd1b00`

RtlMultipleAllocateHeap

Ordinal	`1320`
Address	`0x13fbc0`

RtlMultipleFreeHeap

Ordinal	`1321`
Address	`0x13fc30`

RtlNewInstanceSecurityObject

Ordinal	`1322`
Address	`0x131af0`

RtlNewSecurityGrantedAccess

Ordinal	`1323`
Address	`0x131c40`

RtlNewSecurityObject

Ordinal	`1324`
Address	`0x109ab0`

RtlNewSecurityObjectEx

Ordinal	`1325`
Address	`0xc2d50`

RtlNewSecurityObjectWithMultipleInheritance

Ordinal	`1326`
Address	`0x106af0`

RtlNormalizeProcessParams

Ordinal	`1327`
Address	`0xf73f0`

RtlNormalizeSecurityDescriptor

Ordinal	`1328`
Address	`0x1375b0`

RtlNormalizeString

Ordinal	`1329`
Address	`0xb1420`

RtlNotifyFeatureToggleUsage

Ordinal	`1330`
Address	`0x1441e0`

RtlNotifyFeatureUsage

Ordinal	`1331`
Address	`0xd3810`

RtlNtPathNameToDosPathName

Ordinal	`1332`
Address	`0xb64e0`

RtlNtStatusToDosError

Ordinal	`1333`
Address	`0x25350`

RtlNtStatusToDosErrorNoTeb

Ordinal	`1334`
Address	`0x91160`

RtlNtdllName

Ordinal	`1335`
Address	`0x173db0`

RtlNumberGenericTableElements

Ordinal	`1336`
Address	`0xf65a0`

RtlNumberGenericTableElementsAvl

Ordinal	`1337`
Address	`0xf5860`

RtlNumberOfClearBits

Ordinal	`1338`
Address	`0xee4c0`

RtlNumberOfClearBitsEx

Ordinal	`1339`
Address	`0x13bb80`

RtlNumberOfClearBitsInRange

Ordinal	`1340`
Address	`0x13bbb0`

RtlNumberOfSetBits

Ordinal	`1341`
Address	`0xee4f0`

RtlNumberOfSetBitsEx

Ordinal	`1342`
Address	`0x108f10`

RtlNumberOfSetBitsInRange

Ordinal	`1343`
Address	`0x13bbe0`

RtlNumberOfSetBitsUlongPtr

Ordinal	`1344`
Address	`0xdcfd0`

RtlOemStringToUnicodeSize

Ordinal	`1345`
Address	`0xd5d20`

RtlOemStringToUnicodeString

Ordinal	`1346`
Address	`0xd1a10`

RtlOemToUnicodeN

Ordinal	`1347`
Address	`0xd1bc0`

RtlOpenCrossProcessEmulatorWorkConnection

Ordinal	`1348`
Address	`0xe1a40`

RtlOpenCurrentUser

Ordinal	`1349`
Address	`0x7c9a0`

RtlOsDeploymentState

Ordinal	`1350`
Address	`0x1458e0`

RtlOverwriteFeatureConfigurationBuffer

Ordinal	`1351`
Address	`0x1455b0`

RtlOwnerAcesPresent

Ordinal	`1352`
Address	`0x10fe60`

RtlPcToFileHeader

Ordinal	`1353`
Address	`0x956b0`

RtlPinAtomInAtomTable

Ordinal	`1354`
Address	`0x13a280`

RtlPopFrame

Ordinal	`1355`
Address	`0xe2330`

RtlPrefixString

Ordinal	`1356`
Address	`0xda230`

RtlPrefixUnicodeString

Ordinal	`1357`
Address	`0xb6760`

RtlPrepareForProcessCloning

Ordinal	`1358`
Address	`0x15db00`

RtlProcessFlsData

Ordinal	`1359`
Address	`0xedbb0`

RtlProtectHeap

Ordinal	`1360`
Address	`0x40780`

RtlPublishWnfStateData

Ordinal	`1361`
Address	`0xecce0`

RtlPushFrame

Ordinal	`1362`
Address	`0xe0200`

RtlQueryActivationContextApplicationSettings

Ordinal	`1363`
Address	`0x6f0d0`

RtlQueryAllFeatureConfigurations

Ordinal	`1364`
Address	`0xd3720`

RtlQueryAllInternalFeatureConfigurations

Ordinal	`1365`
Address	`0x145660`

RtlQueryAllInternalRuntimeFeatureConfigurations

Ordinal	`1366`
Address	`0x145710`

RtlQueryAtomInAtomTable

Ordinal	`1367`
Address	`0x5d500`

RtlQueryCriticalSectionOwner

Ordinal	`1368`
Address	`0x6ca0`

RtlQueryDepthSList

Ordinal	`1369`
Address	`0xdfca0`

RtlQueryDynamicTimeZoneInformation

Ordinal	`1370`
Address	`0x13ccf0`

RtlQueryElevationFlags

Ordinal	`1371`
Address	`0xf6f50`

RtlQueryEnvironmentVariable

Ordinal	`1372`
Address	`0x6c7b0`

RtlQueryEnvironmentVariable_U

Ordinal	`1373`
Address	`0x6c4e0`

RtlQueryFeatureConfiguration

Ordinal	`1374`
Address	`0xd3960`

RtlQueryFeatureConfigurationChangeStamp

Ordinal	`1375`
Address	`0xf53c0`

RtlQueryFeatureUsageNotificationSubscriptions

Ordinal	`1376`
Address	`0xd36a0`

RtlQueryHeapInformation

Ordinal	`1377`
Address	`0x7680`

RtlQueryImageMitigationPolicy

Ordinal	`1378`
Address	`0xb38c0`

RtlQueryInformationAcl

Ordinal	`1379`
Address	`0xdcd80`

RtlQueryInformationActivationContext

Ordinal	`1380`
Address	`0x23900`

RtlQueryInformationActiveActivationContext

Ordinal	`1381`
Address	`0xf0ef0`

RtlQueryInterfaceMemoryStream

Ordinal	`1382`
Address	`0x131100`

RtlQueryInternalFeatureConfiguration

Ordinal	`1383`
Address	`0x11a9f0`

RtlQueryModuleInformation

Ordinal	`1384`
Address	`0x136500`

RtlQueryPackageClaims

Ordinal	`1385`
Address	`0x6e700`

RtlQueryPackageIdentity

Ordinal	`1386`
Address	`0x6e630`

RtlQueryPackageIdentityEx

Ordinal	`1387`
Address	`0x6e690`

RtlQueryPerformanceCounter

Ordinal	`1388`
Address	`0x7ffd0`

RtlQueryPerformanceFrequency

Ordinal	`1389`
Address	`0xdfe50`

RtlQueryPointerMapping

Ordinal	`1390`
Address	`0x141610`

RtlQueryProcessBackTraceInformation

Ordinal	`1391`
Address	`0x7890`

RtlQueryProcessDebugInformation

Ordinal	`1392`
Address	`0x5810`

RtlQueryProcessHeapInformation

Ordinal	`1393`
Address	`0x6ef0`

RtlQueryProcessLockInformation

Ordinal	`1394`
Address	`0x7b10`

RtlQueryProcessPlaceholderCompatibilityMode

Ordinal	`1395`
Address	`0x144f90`

RtlQueryPropertyStore

Ordinal	`1396`
Address	`0x1416d0`

RtlQueryProtectedPolicy

Ordinal	`1397`
Address	`0xf01d0`

RtlQueryRegistryValueWithFallback

Ordinal	`1398`
Address	`0x11e5d0`

RtlQueryRegistryValues

Ordinal	`1399`
Address	`0x666a0`

RtlQueryRegistryValuesEx

Ordinal	`1400`
Address	`0x651b0`

RtlQueryResourcePolicy

Ordinal	`1401`
Address	`0x10b770`

RtlQuerySecurityObject

Ordinal	`1402`
Address	`0x1093a0`

RtlQueryTagHeap

Ordinal	`1403`
Address	`0x13fca0`

RtlQueryThreadPlaceholderCompatibilityMode

Ordinal	`1404`
Address	`0xec530`

RtlQueryThreadProfiling

Ordinal	`1405`
Address	`0x130bc0`

RtlQueryTimeZoneInformation

Ordinal	`1406`
Address	`0x10a3e0`

RtlQueryTokenHostIdAsUlong64

Ordinal	`1407`
Address	`0x105a50`

RtlQueryUmsThreadInformation

Ordinal	`1408`
Address	`0x1429d0`

RtlQueryUnbiasedInterruptTime

Ordinal	`1409`
Address	`0x910b0`

RtlQueryValidationRunlevel

Ordinal	`1410`
Address	`0x145a30`

RtlQueryWnfMetaNotification

Ordinal	`1411`
Address	`0x102be0`

RtlQueryWnfStateData

Ordinal	`1412`
Address	`0x9ec0`

RtlQueryWnfStateDataWithExplicitScope

Ordinal	`1413`
Address	`0x9ef0`

RtlQueueApcWow64Thread

Ordinal	`1414`
Address	`0x1324b0`

RtlQueueWorkItem

Ordinal	`1415`
Address	`0x94150`

RtlRaiseCustomSystemEventTrigger

Ordinal	`1416`
Address	`0x145b10`

RtlRaiseException

Ordinal	`1417`
Address	`0x96c80`

RtlRaiseExceptionForReturnAddressHijack

Ordinal	`1418`
Address	`0x1646b0`

RtlRaiseNoncontinuableException

Ordinal	`1419`
Address	`0x11f5d0`

RtlRaiseStatus

Ordinal	`1420`
Address	`0x1db10`

RtlRandom

Ordinal	`1421`
Address	`0x8f30`

RtlRandomEx

Ordinal	`1422`
Address	`0x8f30`

RtlRbInsertNodeEx

Ordinal	`1423`
Address	`0x4d500`

RtlRbRemoveNode

Ordinal	`1424`
Address	`0x4a3f0`

RtlRcuAllocate

Ordinal	`1425`
Address	`0x145ef0`

RtlRcuFree

Ordinal	`1426`
Address	`0x145fc0`

RtlRcuReadLock

Ordinal	`1427`
Address	`0x146070`

RtlRcuReadUnlock

Ordinal	`1428`
Address	`0x1460e0`

RtlRcuSynchronize

Ordinal	`1429`
Address	`0x146140`

RtlReAllocateHeap

Ordinal	`1430`
Address	`0x5d260`

RtlReadMemoryStream

Ordinal	`1431`
Address	`0x131100`

RtlReadOutOfProcessMemoryStream

Ordinal	`1432`
Address	`0x131100`

RtlReadThreadProfilingData

Ordinal	`1433`
Address	`0x105e70`

RtlRealPredecessor

Ordinal	`1434`
Address	`0xe9a80`

RtlRealSuccessor

Ordinal	`1435`
Address	`0xba8f0`

RtlRegisterFeatureConfigurationChangeNotification

Ordinal	`1436`
Address	`0x8ca0`

RtlRegisterForWnfMetaNotification

Ordinal	`1437`
Address	`0x108c00`

RtlRegisterSecureMemoryCacheCallback

Ordinal	`1438`
Address	`0x142d30`

RtlRegisterThreadWithCsrss

Ordinal	`1439`
Address	`0xec550`

RtlRegisterWait

Ordinal	`1440`
Address	`0x94670`

RtlReleaseActivationContext

Ordinal	`1441`
Address	`0x56b40`

RtlReleaseMemoryStream

Ordinal	`1442`
Address	`0x107a70`

RtlReleasePath

Ordinal	`1443`
Address	`0xe9bd0`

RtlReleasePebLock

Ordinal	`1444`
Address	`0x66880`

RtlReleasePrivilege

Ordinal	`1445`
Address	`0xf3240`

RtlReleaseRelativeName

Ordinal	`1446`
Address	`0x9dfa0`

RtlReleaseResource

Ordinal	`1447`
Address	`0xdc380`

RtlReleaseSRWLockExclusive

Ordinal	`1448`
Address	`0x4ee00`

RtlReleaseSRWLockShared

Ordinal	`1449`
Address	`0x18fb0`

RtlRemoteCall

Ordinal	`1450`
Address	`0x144d70`

RtlRemoveEntryHashTable

Ordinal	`1451`
Address	`0xe7130`

RtlRemovePointerMapping

Ordinal	`1452`
Address	`0x141760`

RtlRemovePrivileges

Ordinal	`1453`
Address	`0x10a0f0`

RtlRemovePropertyStore

Ordinal	`1454`
Address	`0x141840`

RtlRemoveVectoredContinueHandler

Ordinal	`1455`
Address	`0x1324a0`

RtlRemoveVectoredExceptionHandler

Ordinal	`1456`
Address	`0x1085e0`

RtlReplaceSidInSd

Ordinal	`1457`
Address	`0x137890`

RtlReplaceSystemDirectoryInPath

Ordinal	`1458`
Address	`0x5ef70`

RtlReportException

Ordinal	`1459`
Address	`0x10bc60`

RtlReportExceptionEx

Ordinal	`1460`
Address	`0x1324d0`

RtlReportSilentProcessExit

Ordinal	`1461`
Address	`0x88860`

RtlReportSqmEscalation

Ordinal	`1462`
Address	`0x107a70`

RtlResetMemoryBlockLookaside

Ordinal	`1463`
Address	`0x13a360`

RtlResetMemoryZone

Ordinal	`1464`
Address	`0x13a3c0`

RtlResetNtUserPfn

Ordinal	`1465`
Address	`0x1323a0`

RtlResetRtlTranslations

Ordinal	`1466`
Address	`0xf65b0`

RtlRestoreBootStatusDefaults

Ordinal	`1467`
Address	`0x13c7b0`

RtlRestoreContext

Ordinal	`1468`
Address	`0x11bd0`

RtlRestoreLastWin32Error

Ordinal	`1469`
Address	`0x25300`

RtlRestoreSystemBootStatusDefaults

Ordinal	`1470`
Address	`0x13c8b0`

RtlRestoreThreadPreferredUILanguages

Ordinal	`1471`
Address	`0xcacc0`

RtlRetrieveNtUserPfn

Ordinal	`1472`
Address	`0x132420`

RtlRevertMemoryStream

Ordinal	`1473`
Address	`0x131100`

RtlRunDecodeUnicodeString

Ordinal	`1474`
Address	`0x10ded0`

RtlRunEncodeUnicodeString

Ordinal	`1475`
Address	`0x10baf0`

RtlRunOnceBeginInitialize

Ordinal	`1476`
Address	`0x800d0`

RtlRunOnceComplete

Ordinal	`1477`
Address	`0x9da0`

RtlRunOnceExecuteOnce

Ordinal	`1478`
Address	`0x9380`

RtlRunOnceInitialize

Ordinal	`1479`
Address	`0xe6350`

RtlSecondsSince1970ToTime

Ordinal	`1480`
Address	`0x10bda0`

RtlSecondsSince1980ToTime

Ordinal	`1481`
Address	`0x141db0`

RtlSeekMemoryStream

Ordinal	`1482`
Address	`0x131100`

RtlSelfRelativeToAbsoluteSD

Ordinal	`1483`
Address	`0xe8bc0`

RtlSelfRelativeToAbsoluteSD2

Ordinal	`1484`
Address	`0xc9390`

RtlSendMsgToSm

Ordinal	`1485`
Address	`0x10b560`

RtlSetAllBits

Ordinal	`1486`
Address	`0xef940`

RtlSetAllBitsEx

Ordinal	`1487`
Address	`0x13bd90`

RtlSetAttributesSecurityDescriptor

Ordinal	`1488`
Address	`0x137b90`

RtlSetBit

Ordinal	`1489`
Address	`0xf6560`

RtlSetBitEx

Ordinal	`1490`
Address	`0x10a400`

RtlSetBits

Ordinal	`1491`
Address	`0xef90`

RtlSetBitsEx

Ordinal	`1492`
Address	`0x13be00`

RtlSetControlSecurityDescriptor

Ordinal	`1493`
Address	`0xc8a10`

RtlSetCriticalSectionSpinCount

Ordinal	`1494`
Address	`0xdbb80`

RtlSetCurrentDirectory_U

Ordinal	`1495`
Address	`0xf65c0`

RtlSetCurrentEnvironment

Ordinal	`1496`
Address	`0x10e440`

RtlSetCurrentTransaction

Ordinal	`1497`
Address	`0xda7c0`

RtlSetDaclSecurityDescriptor

Ordinal	`1498`
Address	`0xe0670`

RtlSetDynamicTimeZoneInformation

Ordinal	`1499`
Address	`0x13cd00`

RtlSetEnvironmentStrings

Ordinal	`1500`
Address	`0x10e7b0`

RtlSetEnvironmentVar

Ordinal	`1501`
Address	`0x6a630`

RtlSetEnvironmentVariable

Ordinal	`1502`
Address	`0x6a5f0`

RtlSetExtendedFeaturesMask

Ordinal	`1503`
Address	`0x1158b0`

RtlSetFeatureConfigurations

Ordinal	`1504`
Address	`0x10d110`

RtlSetGroupSecurityDescriptor

Ordinal	`1505`
Address	`0xc87d0`

RtlSetHeapInformation

Ordinal	`1506`
Address	`0xaa990`

RtlSetImageMitigationPolicy

Ordinal	`1507`
Address	`0x135080`

RtlSetInformationAcl

Ordinal	`1508`
Address	`0x139820`

RtlSetIoCompletionCallback

Ordinal	`1509`
Address	`0xb9150`

RtlSetLastWin32Error

Ordinal	`1510`
Address	`0x25300`

RtlSetLastWin32ErrorAndNtStatusFromNtStatus

Ordinal	`1511`
Address	`0xf7310`

RtlSetMemoryStreamSize

Ordinal	`1512`
Address	`0x131100`

RtlSetOwnerSecurityDescriptor

Ordinal	`1513`
Address	`0xc8780`

RtlSetPortableOperatingSystem

Ordinal	`1514`
Address	`0x13cc60`

RtlSetProcessDebugInformation

Ordinal	`1515`
Address	`0x131db0`

RtlSetProcessIsCritical

Ordinal	`1516`
Address	`0x143f80`

RtlSetProcessPlaceholderCompatibilityMode

Ordinal	`1517`
Address	`0x10f250`

RtlSetProcessPreferredUILanguages

Ordinal	`1518`
Address	`0x75000`

RtlSetProtectedPolicy

Ordinal	`1519`
Address	`0xf58f0`

RtlSetProxiedProcessId

Ordinal	`1520`
Address	`0x1091a0`

RtlSetSaclSecurityDescriptor

Ordinal	`1521`
Address	`0xc8820`

RtlSetSearchPathMode

Ordinal	`1522`
Address	`0xee380`

RtlSetSecurityDescriptorRMControl

Ordinal	`1523`
Address	`0x1091d0`

RtlSetSecurityObject

Ordinal	`1524`
Address	`0xc1070`

RtlSetSecurityObjectEx

Ordinal	`1525`
Address	`0xc08a0`

RtlSetSystemBootStatus

Ordinal	`1526`
Address	`0x10ed90`

RtlSetSystemBootStatusEx

Ordinal	`1527`
Address	`0x11e5b0`

RtlSetThreadErrorMode

Ordinal	`1528`
Address	`0xe9920`

RtlSetThreadIsCritical

Ordinal	`1529`
Address	`0x10b9c0`

RtlSetThreadPlaceholderCompatibilityMode

Ordinal	`1530`
Address	`0xe9ad0`

RtlSetThreadPoolStartFunc

Ordinal	`1531`
Address	`0x107a70`

RtlSetThreadPreferredUILanguages

Ordinal	`1532`
Address	`0x77150`

RtlSetThreadPreferredUILanguages2

Ordinal	`1533`
Address	`0xcbfb0`

RtlSetThreadSubProcessTag

Ordinal	`1534`
Address	`0x2ae90`

RtlSetThreadWorkOnBehalfTicket

Ordinal	`1535`
Address	`0xd7100`

RtlSetTimeZoneInformation

Ordinal	`1536`
Address	`0x13cd10`

RtlSetTimer

Ordinal	`1537`
Address	`0x15ae00`

RtlSetUmsThreadInformation

Ordinal	`1538`
Address	`0x1429d0`

RtlSetUnhandledExceptionFilter

Ordinal	`1539`
Address	`0x106e00`

RtlSetUserFlagsHeap

Ordinal	`1540`
Address	`0x1d70`

RtlSetUserValueHeap

Ordinal	`1541`
Address	`0x3050`

RtlSidDominates

Ordinal	`1542`
Address	`0xc2a40`

RtlSidDominatesForTrust

Ordinal	`1543`
Address	`0xc2930`

RtlSidEqualLevel

Ordinal	`1544`
Address	`0x137bc0`

RtlSidHashInitialize

Ordinal	`1545`
Address	`0xf5300`

RtlSidHashLookup

Ordinal	`1546`
Address	`0xf3b00`

RtlSidIsHigherLevel

Ordinal	`1547`
Address	`0x137c50`

RtlSizeHeap

Ordinal	`1548`
Address	`0x4510`

RtlSleepConditionVariableCS

Ordinal	`1549`
Address	`0x1c060`

RtlSleepConditionVariableSRW

Ordinal	`1550`
Address	`0x42500`

RtlSplay

Ordinal	`1551`
Address	`0xba6b0`

RtlStartRXact

Ordinal	`1552`
Address	`0x106280`

RtlStatMemoryStream

Ordinal	`1553`
Address	`0x131100`

RtlStringFromGUID

Ordinal	`1554`
Address	`0xf4cf0`

RtlStringFromGUIDEx

Ordinal	`1555`
Address	`0xb8d90`

RtlStronglyEnumerateEntryHashTable

Ordinal	`1556`
Address	`0xe1bf0`

RtlSubAuthorityCountSid

Ordinal	`1557`
Address	`0xea330`

RtlSubAuthoritySid

Ordinal	`1558`
Address	`0xe7020`

RtlSubscribeForFeatureUsageNotification

Ordinal	`1559`
Address	`0x145810`

RtlSubscribeWnfStateChangeNotification

Ordinal	`1560`
Address	`0xa2e0`

RtlSubtreePredecessor

Ordinal	`1561`
Address	`0xba110`

RtlSubtreeSuccessor

Ordinal	`1562`
Address	`0x142a00`

RtlSwitchedVVI

Ordinal	`1563`
Address	`0x700b0`

RtlSystemTimeToLocalTime

Ordinal	`1564`
Address	`0x102750`

RtlTestAndPublishWnfStateData

Ordinal	`1565`
Address	`0xecc20`

RtlTestBit

Ordinal	`1566`
Address	`0x105c90`

RtlTestBitEx

Ordinal	`1567`
Address	`0xf72c0`

RtlTestProtectedAccess

Ordinal	`1568`
Address	`0x106f80`

RtlTimeFieldsToTime

Ordinal	`1569`
Address	`0xef9b0`

RtlTimeToElapsedTimeFields

Ordinal	`1570`
Address	`0xe6f10`

RtlTimeToSecondsSince1970

Ordinal	`1571`
Address	`0xe4f60`

RtlTimeToSecondsSince1980

Ordinal	`1572`
Address	`0xd6f40`

RtlTimeToTimeFields

Ordinal	`1573`
Address	`0xeae10`

RtlTlsAlloc

Ordinal	`1574`
Address	`0xade50`

RtlTlsFree

Ordinal	`1575`
Address	`0x3ee30`

RtlTlsSetValue

Ordinal	`1576`
Address	`0xae080`

RtlTraceDatabaseAdd

Ordinal	`1577`
Address	`0x146480`

RtlTraceDatabaseCreate

Ordinal	`1578`
Address	`0x146500`

RtlTraceDatabaseDestroy

Ordinal	`1579`
Address	`0x146640`

RtlTraceDatabaseEnumerate

Ordinal	`1580`
Address	`0x1466c0`

RtlTraceDatabaseFind

Ordinal	`1581`
Address	`0x1467a0`

RtlTraceDatabaseLock

Ordinal	`1582`
Address	`0x146820`

RtlTraceDatabaseUnlock

Ordinal	`1583`
Address	`0x146850`

RtlTraceDatabaseValidate

Ordinal	`1584`
Address	`0x146870`

RtlTryAcquirePebLock

Ordinal	`1585`
Address	`0xf3220`

RtlTryAcquireSRWLockExclusive

Ordinal	`1586`
Address	`0x24680`

RtlTryAcquireSRWLockShared

Ordinal	`1587`
Address	`0x27540`

RtlTryConvertSRWLockSharedToExclusiveOrRelease

Ordinal	`1588`
Address	`0x138cb0`

RtlTryEnterCriticalSection

Ordinal	`1589`
Address	`0xab100`

RtlUTF8StringToUnicodeString

Ordinal	`1590`
Address	`0xd2980`

RtlUTF8ToUnicodeN

Ordinal	`1591`
Address	`0x15120`

RtlUdiv128

Ordinal	`1592`
Address	`0x146cb0`

RtlUmsThreadYield

Ordinal	`1593`
Address	`0x1429d0`

RtlUnhandledExceptionFilter

Ordinal	`1594`
Address	`0x145530`

RtlUnhandledExceptionFilter2

Ordinal	`1595`
Address	`0x11d850`

RtlUnicodeStringToAnsiSize

Ordinal	`1596`
Address	`0x5f990`

RtlUnicodeStringToAnsiString

Ordinal	`1597`
Address	`0x608a0`

RtlUnicodeStringToCountedOemString

Ordinal	`1598`
Address	`0x13a450`

RtlUnicodeStringToInteger

Ordinal	`1599`
Address	`0x79550`

RtlUnicodeStringToOemSize

Ordinal	`1600`
Address	`0x5f990`

RtlUnicodeStringToOemString

Ordinal	`1601`
Address	`0x5ece0`

RtlUnicodeStringToUTF8String

Ordinal	`1602`
Address	`0x146b90`

RtlUnicodeToCustomCPN

Ordinal	`1603`
Address	`0x61060`

RtlUnicodeToMultiByteN

Ordinal	`1604`
Address	`0x61760`

RtlUnicodeToMultiByteSize

Ordinal	`1605`
Address	`0x60be0`

RtlUnicodeToOemN

Ordinal	`1606`
Address	`0x1030a0`

RtlUnicodeToUTF8N

Ordinal	`1607`
Address	`0x611c0`

RtlUniform

Ordinal	`1608`
Address	`0xe6da0`

RtlUnlockBootStatusData

Ordinal	`1609`
Address	`0x13c8f0`

RtlUnlockCurrentThread

Ordinal	`1610`
Address	`0x109b00`

RtlUnlockHeap

Ordinal	`1611`
Address	`0x3d30`

RtlUnlockMemoryBlockLookaside

Ordinal	`1612`
Address	`0x106680`

RtlUnlockMemoryStreamRegion

Ordinal	`1613`
Address	`0x131100`

RtlUnlockMemoryZone

Ordinal	`1614`
Address	`0x1066e0`

RtlUnlockModuleSection

Ordinal	`1615`
Address	`0x878e0`

RtlUnregisterFeatureConfigurationChangeNotification

Ordinal	`1616`
Address	`0xf3300`

RtlUnsubscribeFromFeatureUsageNotifications

Ordinal	`1617`
Address	`0x145820`

RtlUnsubscribeWnfNotificationWaitForCompletion

Ordinal	`1618`
Address	`0xafa0`

RtlUnsubscribeWnfNotificationWithCompletionCallback

Ordinal	`1619`
Address	`0x10d7a0`

RtlUnsubscribeWnfStateChangeNotification

Ordinal	`1620`
Address	`0xb020`

RtlUnwind

Ordinal	`1621`
Address	`0xd4cb0`

RtlUnwindEx

Ordinal	`1622`
Address	`0x1e1b0`

RtlUpcaseUnicodeChar

Ordinal	`1623`
Address	`0xd0b20`

RtlUpcaseUnicodeString

Ordinal	`1624`
Address	`0xd0210`

RtlUpcaseUnicodeStringToAnsiString

Ordinal	`1625`
Address	`0x13a560`

RtlUpcaseUnicodeStringToCountedOemString

Ordinal	`1626`
Address	`0x13a650`

RtlUpcaseUnicodeStringToOemString

Ordinal	`1627`
Address	`0xd1c30`

RtlUpcaseUnicodeToCustomCPN

Ordinal	`1628`
Address	`0x1369c0`

RtlUpcaseUnicodeToMultiByteN

Ordinal	`1629`
Address	`0x60ca0`

RtlUpcaseUnicodeToOemN

Ordinal	`1630`
Address	`0xd1d40`

RtlUpdateClonedCriticalSection

Ordinal	`1631`
Address	`0x1082f0`

RtlUpdateClonedSRWLock

Ordinal	`1632`
Address	`0x10e710`

RtlUpdateTimer

Ordinal	`1633`
Address	`0x90890`

RtlUpperChar

Ordinal	`1634`
Address	`0x97060`

RtlUpperString

Ordinal	`1635`
Address	`0x13a850`

RtlUserFiberStart

Ordinal	`1636`
Address	`0x87bc0`

RtlUserThreadStart

Ordinal	`1637`
Address	`0x87bf0`

RtlValidAcl

Ordinal	`1638`
Address	`0x7ec10`

RtlValidProcessProtection

Ordinal	`1639`
Address	`0x136190`

RtlValidRelativeSecurityDescriptor

Ordinal	`1640`
Address	`0xe8980`

RtlValidSecurityDescriptor

Ordinal	`1641`
Address	`0x7f040`

RtlValidSid

Ordinal	`1642`
Address	`0x7ebd0`

RtlValidateCorrelationVector

Ordinal	`1643`
Address	`0xf1960`

RtlValidateHeap

Ordinal	`1644`
Address	`0x3610`

RtlValidateProcessHeaps

Ordinal	`1645`
Address	`0x13ff40`

RtlValidateUnicodeString

Ordinal	`1646`
Address	`0xd7f80`

RtlValidateUserCallTarget

Ordinal	`1647`
Address	`0xf4f10`

RtlVerifyVersionInfo

Ordinal	`1648`
Address	`0x6f830`

RtlVirtualUnwind

Ordinal	`1649`
Address	`0x21950`

RtlVirtualUnwind2

Ordinal	`1650`
Address	`0x1ec50`

RtlWaitForWnfMetaNotification

Ordinal	`1651`
Address	`0xf1ed0`

RtlWaitOnAddress

Ordinal	`1652`
Address	`0xc660`

RtlWakeAddressAll

Ordinal	`1653`
Address	`0x9fd0`

RtlWakeAddressAllNoFence

Ordinal	`1654`
Address	`0x146d30`

RtlWakeAddressSingle

Ordinal	`1655`
Address	`0xec090`

RtlWakeAddressSingleNoFence

Ordinal	`1656`
Address	`0x146d40`

RtlWakeAllConditionVariable

Ordinal	`1657`
Address	`0x86df0`

RtlWakeConditionVariable

Ordinal	`1658`
Address	`0x43100`

RtlWalkFrameChain

Ordinal	`1659`
Address	`0x82150`

RtlWalkHeap

Ordinal	`1660`
Address	`0xd99e0`

RtlWeaklyEnumerateEntryHashTable

Ordinal	`1661`
Address	`0x141d00`

RtlWerpReportException

Ordinal	`1662`
Address	`0x132960`

RtlWnfDllUnloadCallback

Ordinal	`1663`
Address	`0x10ec60`

RtlWow64CallFunction64

Ordinal	`1664`
Address	`0x10a3f0`

RtlWow64ChangeProcessState

Ordinal	`1665`
Address	`0x130380`

RtlWow64ChangeThreadState

Ordinal	`1666`
Address	`0x10dff0`

RtlWow64EnableFsRedirection

Ordinal	`1667`
Address	`0x10a3f0`

RtlWow64EnableFsRedirectionEx

Ordinal	`1668`
Address	`0x10a3f0`

RtlWow64GetCpuAreaEnabledFeatures

Ordinal	`1669`
Address	`0xdce30`

RtlWow64GetCpuAreaInfo

Ordinal	`1670`
Address	`0xd5090`

RtlWow64GetCurrentCpuArea

Ordinal	`1671`
Address	`0xd5200`

RtlWow64GetCurrentMachine

Ordinal	`1672`
Address	`0xd4c70`

RtlWow64GetEquivalentMachineCHPE

Ordinal	`1673`
Address	`0xf6580`

RtlWow64GetProcessMachines

Ordinal	`1674`
Address	`0x5f030`

RtlWow64GetSharedInfoProcess

Ordinal	`1675`
Address	`0xf2960`

RtlWow64GetThreadContext

Ordinal	`1676`
Address	`0x1303b0`

RtlWow64GetThreadSelectorEntry

Ordinal	`1677`
Address	`0x1303e0`

RtlWow64IsWowGuestMachineSupported

Ordinal	`1678`
Address	`0xf1580`

RtlWow64LogMessageInEventLogger

Ordinal	`1679`
Address	`0x15dc30`

RtlWow64PopAllCrossProcessWorkFromWorkList

Ordinal	`1680`
Address	`0x146d50`

RtlWow64PopCrossProcessWorkFromFreeList

Ordinal	`1681`
Address	`0x146e30`

RtlWow64PushCrossProcessWorkOntoFreeList

Ordinal	`1682`
Address	`0x146ef0`

RtlWow64PushCrossProcessWorkOntoWorkList

Ordinal	`1683`
Address	`0x146fc0`

RtlWow64RequestCrossProcessHeavyFlush

Ordinal	`1684`
Address	`0x147250`

RtlWow64SetThreadContext

Ordinal	`1685`
Address	`0x130590`

RtlWow64SuspendProcess

Ordinal	`1686`
Address	`0x1305b0`

RtlWow64SuspendThread

Ordinal	`1687`
Address	`0x10b9b0`

RtlWriteMemoryStream

Ordinal	`1688`
Address	`0x131100`

RtlWriteNonVolatileMemory

Ordinal	`1689`
Address	`0x143500`

RtlWriteRegistryValue

Ordinal	`1690`
Address	`0x66520`

RtlXRestore

Ordinal	`1691`
Address	`0xe6e80`

RtlXSave

Ordinal	`1692`
Address	`0x144020`

RtlZeroHeap

Ordinal	`1693`
Address	`0x142330`

RtlZeroMemory

Ordinal	`1694`
Address	`0x1059c0`

RtlZombifyActivationContext

Ordinal	`1695`
Address	`0x132c90`

RtlpApplyLengthFunction

Ordinal	`1696`
Address	`0xf1780`

RtlpCheckDynamicTimeZoneInformation

Ordinal	`1697`
Address	`0x65000`

RtlpCleanupRegistryKeys

Ordinal	`1698`
Address	`0x13d730`

RtlpConvertAbsoluteToRelativeSecurityAttribute

Ordinal	`1699`
Address	`0x1103c0`

RtlpConvertCultureNamesToLCIDs

Ordinal	`1700`
Address	`0x11e740`

RtlpConvertLCIDsToCultureNames

Ordinal	`1701`
Address	`0x13db90`

RtlpConvertRelativeToAbsoluteSecurityAttribute

Ordinal	`1702`
Address	`0x139a10`

RtlpCreateProcessRegistryInfo

Ordinal	`1703`
Address	`0x76c80`

RtlpEnsureBufferSize

Ordinal	`1704`
Address	`0xb6e20`

RtlpFreezeTimeBias

Ordinal	`1705`
Address	`0x1cd6d0`

RtlpGetDeviceFamilyInfoEnum

Ordinal	`1706`
Address	`0x6fd10`

RtlpGetLCIDFromLangInfoNode

Ordinal	`1707`
Address	`0x102ca0`

RtlpGetNameFromLangInfoNode

Ordinal	`1708`
Address	`0xdcb90`

RtlpGetSystemDefaultUILanguage

Ordinal	`1709`
Address	`0xa3950`

RtlpGetUserOrMachineUILanguage4NLS

Ordinal	`1710`
Address	`0xa3cb0`

RtlpInitializeLangRegistryInfo

Ordinal	`1711`
Address	`0xf5160`

RtlpIsQualifiedLanguage

Ordinal	`1712`
Address	`0x66c90`

RtlpLoadMachineUIByPolicy

Ordinal	`1713`
Address	`0x102930`

RtlpLoadUserUIByPolicy

Ordinal	`1714`
Address	`0xcc160`

RtlpMergeSecurityAttributeInformation

Ordinal	`1715`
Address	`0xe3670`

RtlpMuiFreeLangRegistryInfo

Ordinal	`1716`
Address	`0xcdd90`

RtlpMuiRegCreateRegistryInfo

Ordinal	`1717`
Address	`0x1120b0`

RtlpMuiRegFreeRegistryInfo

Ordinal	`1718`
Address	`0xce6d0`

RtlpMuiRegLoadRegistryInfo

Ordinal	`1719`
Address	`0xce570`

RtlpNotOwnerCriticalSection

Ordinal	`1720`
Address	`0x1da30`

RtlpNtCreateKey

Ordinal	`1721`
Address	`0x1498d0`

RtlpNtEnumerateSubKey

Ordinal	`1722`
Address	`0xf0de0`

RtlpNtMakeTemporaryKey

Ordinal	`1723`
Address	`0x149910`

RtlpNtOpenKey

Ordinal	`1724`
Address	`0xf4c70`

RtlpNtQueryValueKey

Ordinal	`1725`
Address	`0xeeba0`

RtlpNtSetValueKey

Ordinal	`1726`
Address	`0x149920`

RtlpQueryDefaultUILanguage

Ordinal	`1727`
Address	`0x7b670`

RtlpQueryProcessDebugInformationFromWow64

Ordinal	`1728`
Address	`0x132060`

RtlpQueryProcessDebugInformationRemote

Ordinal	`1729`
Address	`0x132100`

RtlpRefreshCachedUILanguage

Ordinal	`1730`
Address	`0x147f90`

RtlpScpCfgNtdllExports

Ordinal	`1731`
Address	`0x173670`

RtlpSetInstallLanguage

Ordinal	`1732`
Address	`0x13e300`

RtlpSetPreferredUILanguages

Ordinal	`1733`
Address	`0x13e910`

RtlpSetUserPreferredUILanguages

Ordinal	`1734`
Address	`0x13e910`

RtlpTimeFieldsToTime

Ordinal	`1735`
Address	`0xad190`

RtlpTimeToTimeFields

Ordinal	`1736`
Address	`0xacb60`

RtlpUnWaitCriticalSection

Ordinal	`1737`
Address	`0x138db0`

RtlpVerifyAndCommitUILanguageSettings

Ordinal	`1738`
Address	`0x13f4f0`

RtlpWaitForCriticalSection

Ordinal	`1739`
Address	`0xf65b0`

RtlpWow64CtxFromAmd64

Ordinal	`1740`
Address	`0xd8ab0`

RtlpWow64GetContextOnAmd64

Ordinal	`1741`
Address	`0x10a3f0`

RtlpWow64SetContextOnAmd64

Ordinal	`1742`
Address	`0x10a3f0`

RtlxAnsiStringToUnicodeSize

Ordinal	`1743`
Address	`0xd5d20`

RtlxOemStringToUnicodeSize

Ordinal	`1744`
Address	`0xd5d20`

RtlxUnicodeStringToAnsiSize

Ordinal	`1745`
Address	`0x5f990`

RtlxUnicodeStringToOemSize

Ordinal	`1746`
Address	`0x5f990`

SbExecuteProcedure

Ordinal	`1747`
Address	`0x15ae10`

SbSelectProcedure

Ordinal	`1748`
Address	`0x707b0`

ShipAssert

Ordinal	`1749`
Address	`0xde600`

ShipAssertGetBufferInfo

Ordinal	`1750`
Address	`0x132a20`

ShipAssertMsgA

Ordinal	`1751`
Address	`0x132a50`

ShipAssertMsgW

Ordinal	`1752`
Address	`0x132a50`

TpAllocAlpcCompletion

Ordinal	`1753`
Address	`0xb9640`

TpAllocAlpcCompletionEx

Ordinal	`1754`
Address	`0xb96d0`

TpAllocCleanupGroup

Ordinal	`1755`
Address	`0x90320`

TpAllocIoCompletion

Ordinal	`1756`
Address	`0xb9a20`

TpAllocJobNotification

Ordinal	`1757`
Address	`0xb93f0`

TpAllocPool

Ordinal	`1758`
Address	`0x90ba0`

TpAllocTimer

Ordinal	`1759`
Address	`0x93580`

TpAllocWait

Ordinal	`1760`
Address	`0x94f50`

TpAllocWork

Ordinal	`1761`
Address	`0x24b80`

TpAlpcRegisterCompletionList

Ordinal	`1762`
Address	`0x91660`

TpAlpcUnregisterCompletionList

Ordinal	`1763`
Address	`0x8e8a0`

TpCallbackDetectedUnrecoverableError

Ordinal	`1764`
Address	`0x15a9e0`

TpCallbackIndependent

Ordinal	`1765`
Address	`0xd6460`

TpCallbackLeaveCriticalSectionOnCompletion

Ordinal	`1766`
Address	`0x10c120`

TpCallbackMayRunLong

Ordinal	`1767`
Address	`0x2ad70`

TpCallbackReleaseMutexOnCompletion

Ordinal	`1768`
Address	`0x15aa10`

TpCallbackReleaseSemaphoreOnCompletion

Ordinal	`1769`
Address	`0x15aa50`

TpCallbackSendAlpcMessageOnCompletion

Ordinal	`1770`
Address	`0x19e90`

TpCallbackSendPendingAlpcMessage

Ordinal	`1771`
Address	`0x909a0`

TpCallbackSetEventOnCompletion

Ordinal	`1772`
Address	`0x108610`

TpCallbackUnloadDllOnCompletion

Ordinal	`1773`
Address	`0x8f0d0`

TpCancelAsyncIoOperation

Ordinal	`1774`
Address	`0x90730`

TpCaptureCaller

Ordinal	`1775`
Address	`0xe9b70`

TpCheckTerminateWorker

Ordinal	`1776`
Address	`0x87db0`

TpDbgDumpHeapUsage

Ordinal	`1777`
Address	`0x15aa90`

TpDbgSetLogRoutine

Ordinal	`1778`
Address	`0xf65b0`

TpDisablePoolCallbackChecks

Ordinal	`1779`
Address	`0x10a0a0`

TpDisassociateCallback

Ordinal	`1780`
Address	`0xf2cf0`

TpIsTimerSet

Ordinal	`1781`
Address	`0x91e20`

TpPostWork

Ordinal	`1782`
Address	`0xd44d0`

TpQueryPoolStackInformation

Ordinal	`1783`
Address	`0x15a8d0`

TpReleaseAlpcCompletion

Ordinal	`1784`
Address	`0x90420`

TpReleaseCleanupGroup

Ordinal	`1785`
Address	`0x902b0`

TpReleaseCleanupGroupMembers

Ordinal	`1786`
Address	`0x8f180`

TpReleaseIoCompletion

Ordinal	`1787`
Address	`0x90590`

TpReleaseJobNotification

Ordinal	`1788`
Address	`0x8f5f0`

TpReleasePool

Ordinal	`1789`
Address	`0xda2e0`

TpReleaseTimer

Ordinal	`1790`
Address	`0x91ff0`

TpReleaseWait

Ordinal	`1791`
Address	`0x94c30`

TpReleaseWork

Ordinal	`1792`
Address	`0x93410`

TpSetDefaultPoolMaxThreads

Ordinal	`1793`
Address	`0xe9db0`

TpSetDefaultPoolStackInformation

Ordinal	`1794`
Address	`0xe9f00`

TpSetPoolMaxThreads

Ordinal	`1795`
Address	`0x90110`

TpSetPoolMaxThreadsSoftLimit

Ordinal	`1796`
Address	`0x90a90`

TpSetPoolMinThreads

Ordinal	`1797`
Address	`0x102d40`

TpSetPoolStackInformation

Ordinal	`1798`
Address	`0xea070`

TpSetPoolThreadBasePriority

Ordinal	`1799`
Address	`0x108650`

TpSetPoolThreadCpuSets

Ordinal	`1800`
Address	`0x8ffd0`

TpSetPoolWorkerThreadIdleTimeout

Ordinal	`1801`
Address	`0x901a0`

TpSetTimer

Ordinal	`1802`
Address	`0xf1ec0`

TpSetTimerEx

Ordinal	`1803`
Address	`0x916f0`

TpSetWait

Ordinal	`1804`
Address	`0xee370`

TpSetWaitEx

Ordinal	`1805`
Address	`0x28e10`

TpSimpleTryPost

Ordinal	`1806`
Address	`0x90cc0`

TpStartAsyncIoOperation

Ordinal	`1807`
Address	`0xe2260`

TpTimerOutstandingCallbackCount

Ordinal	`1808`
Address	`0x914b0`

TpTrimPools

Ordinal	`1809`
Address	`0xf0fb0`

TpWaitForAlpcCompletion

Ordinal	`1810`
Address	`0x8f110`

TpWaitForIoCompletion

Ordinal	`1811`
Address	`0xf4d00`

TpWaitForJobNotification

Ordinal	`1812`
Address	`0x90200`

TpWaitForTimer

Ordinal	`1813`
Address	`0x92880`

TpWaitForWait

Ordinal	`1814`
Address	`0x952a0`

TpWaitForWork

Ordinal	`1815`
Address	`0x94000`

TpWorkOnBehalfClearTicket

Ordinal	`1816`
Address	`0xe6df0`

TpWorkOnBehalfSetTicket

Ordinal	`1817`
Address	`0xd5ff0`

VerSetConditionMask

Ordinal	`1818`
Address	`0xe5f50`

WerReportExceptionWorker

Ordinal	`1819`
Address	`0x132970`

WerReportSQMEvent

Ordinal	`1820`
Address	`0xde5b0`

WinSqmAddToAverageDWORD

Ordinal	`1821`
Address	`0xf65b0`

WinSqmAddToStream

Ordinal	`1822`
Address	`0xf65b0`

WinSqmAddToStreamEx

Ordinal	`1823`
Address	`0xf65b0`

WinSqmCheckEscalationAddToStreamEx

Ordinal	`1824`
Address	`0x107a70`

WinSqmCheckEscalationSetDWORD

Ordinal	`1825`
Address	`0x107a70`

WinSqmCheckEscalationSetDWORD64

Ordinal	`1826`
Address	`0x107a70`

WinSqmCheckEscalationSetString

Ordinal	`1827`
Address	`0x107a70`

WinSqmCommonDatapointDelete

Ordinal	`1828`
Address	`0x10c100`

WinSqmCommonDatapointSetDWORD

Ordinal	`1829`
Address	`0x10c100`

WinSqmCommonDatapointSetDWORD64

Ordinal	`1830`
Address	`0x10c100`

WinSqmCommonDatapointSetStreamEx

Ordinal	`1831`
Address	`0x10c100`

WinSqmCommonDatapointSetString

Ordinal	`1832`
Address	`0x10c100`

WinSqmEndSession

Ordinal	`1833`
Address	`0xf65b0`

WinSqmEventEnabled

Ordinal	`1834`
Address	`0x107a70`

WinSqmEventWrite

Ordinal	`1835`
Address	`0x107a70`

WinSqmGetEscalationRuleStatus

Ordinal	`1836`
Address	`0x107a70`

WinSqmGetInstrumentationProperty

Ordinal	`1837`
Address	`0x132c70`

WinSqmIncrementDWORD

Ordinal	`1838`
Address	`0xf65b0`

WinSqmIsOptedIn

Ordinal	`1839`
Address	`0x107a70`

WinSqmIsOptedInEx

Ordinal	`1840`
Address	`0x107a70`

WinSqmIsSessionDisabled

Ordinal	`1841`
Address	`0x10c100`

WinSqmSetDWORD

Ordinal	`1842`
Address	`0xf65b0`

WinSqmSetDWORD64

Ordinal	`1843`
Address	`0xf65b0`

WinSqmSetEscalationInfo

Ordinal	`1844`
Address	`0x10c100`

WinSqmSetIfMaxDWORD

Ordinal	`1845`
Address	`0xf65b0`

WinSqmSetIfMinDWORD

Ordinal	`1846`
Address	`0xf65b0`

WinSqmSetString

Ordinal	`1847`
Address	`0xf65b0`

WinSqmStartSession

Ordinal	`1848`
Address	`0x10fe70`

WinSqmStartSessionForPartner

Ordinal	`1849`
Address	`0x10fe70`

WinSqmStartSqmOptinListener

Ordinal	`1850`
Address	`0x107a70`

ZwAcceptConnectPort

Ordinal	`1851`
Address	`0x1600a0`

ZwAccessCheck

Ordinal	`1852`
Address	`0x160060`

ZwAccessCheckAndAuditAlarm

Ordinal	`1853`
Address	`0x160580`

ZwAccessCheckByType

Ordinal	`1854`
Address	`0x160cb0`

ZwAccessCheckByTypeAndAuditAlarm

Ordinal	`1855`
Address	`0x160b80`

ZwAccessCheckByTypeResultList

Ordinal	`1856`
Address	`0x160cd0`

ZwAccessCheckByTypeResultListAndAuditAlarm

Ordinal	`1857`
Address	`0x160cf0`

ZwAccessCheckByTypeResultListAndAuditAlarmByHandle

Ordinal	`1858`
Address	`0x160d10`

ZwAcquireCrossVmMutant

Ordinal	`1859`
Address	`0x160d30`

ZwAcquireProcessActivityReference

Ordinal	`1860`
Address	`0x160d50`

ZwAddAtom

Ordinal	`1861`
Address	`0x160940`

ZwAddAtomEx

Ordinal	`1862`
Address	`0x160d70`

ZwAddBootEntry

Ordinal	`1863`
Address	`0x160d90`

ZwAddDriverEntry

Ordinal	`1864`
Address	`0x160db0`

ZwAdjustGroupsToken

Ordinal	`1865`
Address	`0x160dd0`

ZwAdjustPrivilegesToken

Ordinal	`1866`
Address	`0x160880`

ZwAdjustTokenClaimsAndDeviceGroups

Ordinal	`1867`
Address	`0x160df0`

ZwAlertMultipleThreadByThreadId

Ordinal	`1868`
Address	`0x160e10`

ZwAlertResumeThread

Ordinal	`1869`
Address	`0x160e30`

ZwAlertThread

Ordinal	`1870`
Address	`0x160e50`

ZwAlertThreadByThreadId

Ordinal	`1871`
Address	`0x160e70`

ZwAlertThreadByThreadIdEx

Ordinal	`1872`
Address	`0x160e90`

ZwAllocateLocallyUniqueId

Ordinal	`1873`
Address	`0x160eb0`

ZwAllocateReserveObject

Ordinal	`1874`
Address	`0x160ed0`

ZwAllocateUserPhysicalPages

Ordinal	`1875`
Address	`0x160ef0`

ZwAllocateUserPhysicalPagesEx

Ordinal	`1876`
Address	`0x160f10`

ZwAllocateUuids

Ordinal	`1877`
Address	`0x160f30`

ZwAllocateVirtualMemory

Ordinal	`1878`
Address	`0x160360`

ZwAllocateVirtualMemoryEx

Ordinal	`1879`
Address	`0x160f50`

ZwAlpcAcceptConnectPort

Ordinal	`1880`
Address	`0x160f70`

ZwAlpcCancelMessage

Ordinal	`1881`
Address	`0x160f90`

ZwAlpcConnectPort

Ordinal	`1882`
Address	`0x160fb0`

ZwAlpcConnectPortEx

Ordinal	`1883`
Address	`0x160fd0`

ZwAlpcCreatePort

Ordinal	`1884`
Address	`0x160ff0`

ZwAlpcCreatePortSection

Ordinal	`1885`
Address	`0x161010`

ZwAlpcCreateResourceReserve

Ordinal	`1886`
Address	`0x161030`

ZwAlpcCreateSectionView

Ordinal	`1887`
Address	`0x161050`

ZwAlpcCreateSecurityContext

Ordinal	`1888`
Address	`0x161070`

ZwAlpcDeletePortSection

Ordinal	`1889`
Address	`0x161090`

ZwAlpcDeleteResourceReserve

Ordinal	`1890`
Address	`0x1610b0`

ZwAlpcDeleteSectionView

Ordinal	`1891`
Address	`0x1610d0`

ZwAlpcDeleteSecurityContext

Ordinal	`1892`
Address	`0x1610f0`

ZwAlpcDisconnectPort

Ordinal	`1893`
Address	`0x161110`

ZwAlpcImpersonateClientContainerOfPort

Ordinal	`1894`
Address	`0x161130`

ZwAlpcImpersonateClientOfPort

Ordinal	`1895`
Address	`0x161150`

ZwAlpcOpenSenderProcess

Ordinal	`1896`
Address	`0x161170`

ZwAlpcOpenSenderThread

Ordinal	`1897`
Address	`0x161190`

ZwAlpcQueryInformation

Ordinal	`1898`
Address	`0x1611b0`

ZwAlpcQueryInformationMessage

Ordinal	`1899`
Address	`0x1611d0`

ZwAlpcRevokeSecurityContext

Ordinal	`1900`
Address	`0x1611f0`

ZwAlpcSendWaitReceivePort

Ordinal	`1901`
Address	`0x161210`

ZwAlpcSetInformation

Ordinal	`1902`
Address	`0x161230`

ZwApphelpCacheControl

Ordinal	`1903`
Address	`0x1609e0`

ZwAreMappedFilesTheSame

Ordinal	`1904`
Address	`0x161250`

ZwAssignProcessToJobObject

Ordinal	`1905`
Address	`0x161270`

ZwAssociateWaitCompletionPacket

Ordinal	`1906`
Address	`0x161290`

ZwCallEnclave

Ordinal	`1907`
Address	`0x1612b0`

ZwCallbackReturn

Ordinal	`1908`
Address	`0x160100`

ZwCancelIoFile

Ordinal	`1909`
Address	`0x160bf0`

ZwCancelIoFileEx

Ordinal	`1910`
Address	`0x1612d0`

ZwCancelSynchronousIoFile

Ordinal	`1911`
Address	`0x1612f0`

ZwCancelTimer

Ordinal	`1912`
Address	`0x160c70`

ZwCancelTimer2

Ordinal	`1913`
Address	`0x161310`

ZwCancelWaitCompletionPacket

Ordinal	`1914`
Address	`0x161330`

ZwChangeProcessState

Ordinal	`1915`
Address	`0x161350`

ZwChangeThreadState

Ordinal	`1916`
Address	`0x161370`

ZwClearEvent

Ordinal	`1917`
Address	`0x160820`

ZwClose

Ordinal	`1918`
Address	`0x160240`

ZwCloseObjectAuditAlarm

Ordinal	`1919`
Address	`0x1607c0`

ZwCommitComplete

Ordinal	`1920`
Address	`0x161390`

ZwCommitEnlistment

Ordinal	`1921`
Address	`0x1613b0`

ZwCommitRegistryTransaction

Ordinal	`1922`
Address	`0x1613d0`

ZwCommitTransaction

Ordinal	`1923`
Address	`0x1613f0`

ZwCompactKeys

Ordinal	`1924`
Address	`0x161410`

ZwCompareObjects

Ordinal	`1925`
Address	`0x161430`

ZwCompareSigningLevels

Ordinal	`1926`
Address	`0x161450`

ZwCompareTokens

Ordinal	`1927`
Address	`0x161470`

ZwCompleteConnectPort

Ordinal	`1928`
Address	`0x161490`

ZwCompressKey

Ordinal	`1929`
Address	`0x1614b0`

ZwConnectPort

Ordinal	`1930`
Address	`0x1614d0`

ZwContinue

Ordinal	`1931`
Address	`0x1608c0`

ZwContinueEx

Ordinal	`1932`
Address	`0x1614f0`

ZwConvertBetweenAuxiliaryCounterAndPerformanceCounter

Ordinal	`1933`
Address	`0x161510`

ZwCopyFileChunk

Ordinal	`1934`
Address	`0x161530`

ZwCreateCpuPartition

Ordinal	`1935`
Address	`0x161550`

ZwCreateCrossVmEvent

Ordinal	`1936`
Address	`0x161570`

ZwCreateCrossVmMutant

Ordinal	`1937`
Address	`0x161590`

ZwCreateDebugObject

Ordinal	`1938`
Address	`0x1615b0`

ZwCreateDirectoryObject

Ordinal	`1939`
Address	`0x1615d0`

ZwCreateDirectoryObjectEx

Ordinal	`1940`
Address	`0x1615f0`

ZwCreateEnclave

Ordinal	`1941`
Address	`0x161610`

ZwCreateEnlistment

Ordinal	`1942`
Address	`0x161630`

ZwCreateEvent

Ordinal	`1943`
Address	`0x160960`

ZwCreateEventPair

Ordinal	`1944`
Address	`0x161650`

ZwCreateFile

Ordinal	`1945`
Address	`0x160b00`

ZwCreateIRTimer

Ordinal	`1946`
Address	`0x161670`

ZwCreateIoCompletion

Ordinal	`1947`
Address	`0x161690`

ZwCreateIoRing

Ordinal	`1948`
Address	`0x1616b0`

ZwCreateJobObject

Ordinal	`1949`
Address	`0x1616d0`

ZwCreateJobSet

Ordinal	`1950`
Address	`0x1616f0`

ZwCreateKey

Ordinal	`1951`
Address	`0x160400`

ZwCreateKeyTransacted

Ordinal	`1952`
Address	`0x161710`

ZwCreateKeyedEvent

Ordinal	`1953`
Address	`0x161730`

ZwCreateLowBoxToken

Ordinal	`1954`
Address	`0x161750`

ZwCreateMailslotFile

Ordinal	`1955`
Address	`0x161770`

ZwCreateMutant

Ordinal	`1956`
Address	`0x161790`

ZwCreateNamedPipeFile

Ordinal	`1957`
Address	`0x1617b0`

ZwCreatePagingFile

Ordinal	`1958`
Address	`0x1617d0`

ZwCreatePartition

Ordinal	`1959`
Address	`0x1617f0`

ZwCreatePort

Ordinal	`1960`
Address	`0x161810`

ZwCreatePrivateNamespace

Ordinal	`1961`
Address	`0x161830`

ZwCreateProcess

Ordinal	`1962`
Address	`0x161850`

ZwCreateProcessEx

Ordinal	`1963`
Address	`0x160a00`

ZwCreateProcessStateChange

Ordinal	`1964`
Address	`0x161870`

ZwCreateProfile

Ordinal	`1965`
Address	`0x161890`

ZwCreateProfileEx

Ordinal	`1966`
Address	`0x1618b0`

ZwCreateRegistryTransaction

Ordinal	`1967`
Address	`0x1618d0`

ZwCreateResourceManager

Ordinal	`1968`
Address	`0x1618f0`

ZwCreateSection

Ordinal	`1969`
Address	`0x1609a0`

ZwCreateSectionEx

Ordinal	`1970`
Address	`0x161910`

ZwCreateSemaphore

Ordinal	`1971`
Address	`0x161930`

ZwCreateSymbolicLinkObject

Ordinal	`1972`
Address	`0x161950`

ZwCreateThread

Ordinal	`1973`
Address	`0x160a20`

ZwCreateThreadEx

Ordinal	`1974`
Address	`0x161970`

ZwCreateThreadStateChange

Ordinal	`1975`
Address	`0x161990`

ZwCreateTimer

Ordinal	`1976`
Address	`0x1619b0`

ZwCreateTimer2

Ordinal	`1977`
Address	`0x1619d0`

ZwCreateToken

Ordinal	`1978`
Address	`0x1619f0`

ZwCreateTokenEx

Ordinal	`1979`
Address	`0x161a10`

ZwCreateTransaction

Ordinal	`1980`
Address	`0x161a30`

ZwCreateTransactionManager

Ordinal	`1981`
Address	`0x161a50`

ZwCreateUserProcess

Ordinal	`1982`
Address	`0x161a70`

ZwCreateWaitCompletionPacket

Ordinal	`1983`
Address	`0x161a90`

ZwCreateWaitablePort

Ordinal	`1984`
Address	`0x161ab0`

ZwCreateWnfStateName

Ordinal	`1985`
Address	`0x161ad0`

ZwCreateWorkerFactory

Ordinal	`1986`
Address	`0x161af0`

ZwDebugActiveProcess

Ordinal	`1987`
Address	`0x161b10`

ZwDebugContinue

Ordinal	`1988`
Address	`0x161b30`

ZwDelayExecution

Ordinal	`1989`
Address	`0x1606e0`

ZwDeleteAtom

Ordinal	`1990`
Address	`0x161b50`

ZwDeleteBootEntry

Ordinal	`1991`
Address	`0x161b70`

ZwDeleteDriverEntry

Ordinal	`1992`
Address	`0x161b90`

ZwDeleteFile

Ordinal	`1993`
Address	`0x161bb0`

ZwDeleteKey

Ordinal	`1994`
Address	`0x161bd0`

ZwDeleteObjectAuditAlarm

Ordinal	`1995`
Address	`0x161bf0`

ZwDeletePrivateNamespace

Ordinal	`1996`
Address	`0x161c10`

ZwDeleteValueKey

Ordinal	`1997`
Address	`0x161c30`

ZwDeleteWnfStateData

Ordinal	`1998`
Address	`0x161c50`

ZwDeleteWnfStateName

Ordinal	`1999`
Address	`0x161c70`

ZwDeviceIoControlFile

Ordinal	`2000`
Address	`0x160140`

ZwDirectGraphicsCall

Ordinal	`2001`
Address	`0x161c90`

ZwDisableLastKnownGood

Ordinal	`2002`
Address	`0x161cb0`

ZwDisplayString

Ordinal	`2003`
Address	`0x161cd0`

ZwDrawText

Ordinal	`2004`
Address	`0x161cf0`

ZwDuplicateObject

Ordinal	`2005`
Address	`0x1607e0`

ZwDuplicateToken

Ordinal	`2006`
Address	`0x1608a0`

ZwEnableLastKnownGood

Ordinal	`2007`
Address	`0x161d10`

ZwEnumerateBootEntries

Ordinal	`2008`
Address	`0x161d30`

ZwEnumerateDriverEntries

Ordinal	`2009`
Address	`0x161d50`

ZwEnumerateKey

Ordinal	`2010`
Address	`0x1606a0`

ZwEnumerateSystemEnvironmentValuesEx

Ordinal	`2011`
Address	`0x161d70`

ZwEnumerateTransactionObject

Ordinal	`2012`
Address	`0x161d90`

ZwEnumerateValueKey

Ordinal	`2013`
Address	`0x1602c0`

ZwExtendSection

Ordinal	`2014`
Address	`0x161db0`

ZwFilterBootOption

Ordinal	`2015`
Address	`0x161dd0`

ZwFilterToken

Ordinal	`2016`
Address	`0x161df0`

ZwFilterTokenEx

Ordinal	`2017`
Address	`0x161e10`

ZwFindAtom

Ordinal	`2018`
Address	`0x1602e0`

ZwFlushBuffersFile

Ordinal	`2019`
Address	`0x1609c0`

ZwFlushBuffersFileEx

Ordinal	`2020`
Address	`0x161e30`

ZwFlushInstallUILanguage

Ordinal	`2021`
Address	`0x161e50`

ZwFlushInstructionCache

Ordinal	`2022`
Address	`0x161e70`

ZwFlushKey

Ordinal	`2023`
Address	`0x161e90`

ZwFlushProcessWriteBuffers

Ordinal	`2024`
Address	`0x161eb0`

ZwFlushVirtualMemory

Ordinal	`2025`
Address	`0x161ed0`

ZwFlushWriteBuffer

Ordinal	`2026`
Address	`0x161ef0`

ZwFreeUserPhysicalPages

Ordinal	`2027`
Address	`0x161f10`

ZwFreeVirtualMemory

Ordinal	`2028`
Address	`0x160420`

ZwFreezeRegistry

Ordinal	`2029`
Address	`0x161f30`

ZwFreezeTransactions

Ordinal	`2030`
Address	`0x161f50`

ZwFsControlFile

Ordinal	`2031`
Address	`0x160780`

ZwGetCachedSigningLevel

Ordinal	`2032`
Address	`0x161f70`

ZwGetCompleteWnfStateSubscription

Ordinal	`2033`
Address	`0x161f90`

ZwGetContextThread

Ordinal	`2034`
Address	`0x161fb0`

ZwGetCurrentProcessorNumber

Ordinal	`2035`
Address	`0x161fd0`

ZwGetCurrentProcessorNumberEx

Ordinal	`2036`
Address	`0x161ff0`

ZwGetDevicePowerState

Ordinal	`2037`
Address	`0x162010`

ZwGetMUIRegistryInfo

Ordinal	`2038`
Address	`0x162030`

ZwGetNextProcess

Ordinal	`2039`
Address	`0x162050`

ZwGetNextThread

Ordinal	`2040`
Address	`0x162070`

ZwGetNlsSectionPtr

Ordinal	`2041`
Address	`0x162090`

ZwGetNotificationResourceManager

Ordinal	`2042`
Address	`0x1620b0`

ZwGetWriteWatch

Ordinal	`2043`
Address	`0x1620d0`

ZwImpersonateAnonymousToken

Ordinal	`2044`
Address	`0x1620f0`

ZwImpersonateClientOfPort

Ordinal	`2045`
Address	`0x160440`

ZwImpersonateThread

Ordinal	`2046`
Address	`0x162110`

ZwInitializeEnclave

Ordinal	`2047`
Address	`0x162130`

ZwInitializeNlsFiles

Ordinal	`2048`
Address	`0x162150`

ZwInitializeRegistry

Ordinal	`2049`
Address	`0x162170`

ZwInitiatePowerAction

Ordinal	`2050`
Address	`0x162190`

ZwIsProcessInJob

Ordinal	`2051`
Address	`0x160a40`

ZwIsSystemResumeAutomatic

Ordinal	`2052`
Address	`0x1621b0`

ZwIsUILanguageComitted

Ordinal	`2053`
Address	`0x1621d0`

ZwListenPort

Ordinal	`2054`
Address	`0x1621f0`

ZwLoadDriver

Ordinal	`2055`
Address	`0x162210`

ZwLoadEnclaveData

Ordinal	`2056`
Address	`0x162230`

ZwLoadKey

Ordinal	`2057`
Address	`0x162250`

ZwLoadKey2

Ordinal	`2058`
Address	`0x162270`

ZwLoadKey3

Ordinal	`2059`
Address	`0x162290`

ZwLoadKeyEx

Ordinal	`2060`
Address	`0x1622b0`

ZwLockFile

Ordinal	`2061`
Address	`0x1622d0`

ZwLockProductActivationKeys

Ordinal	`2062`
Address	`0x1622f0`

ZwLockRegistryKey

Ordinal	`2063`
Address	`0x162310`

ZwLockVirtualMemory

Ordinal	`2064`
Address	`0x162330`

ZwMakePermanentObject

Ordinal	`2065`
Address	`0x162350`

ZwMakeTemporaryObject

Ordinal	`2066`
Address	`0x162370`

ZwManageHotPatch

Ordinal	`2067`
Address	`0x162390`

ZwManagePartition

Ordinal	`2068`
Address	`0x1623b0`

ZwMapCMFModule

Ordinal	`2069`
Address	`0x1623d0`

ZwMapUserPhysicalPages

Ordinal	`2070`
Address	`0x1623f0`

ZwMapUserPhysicalPagesScatter

Ordinal	`2071`
Address	`0x1600c0`

ZwMapViewOfSection

Ordinal	`2072`
Address	`0x160560`

ZwMapViewOfSectionEx

Ordinal	`2073`
Address	`0x162410`

ZwModifyBootEntry

Ordinal	`2074`
Address	`0x162430`

ZwModifyDriverEntry

Ordinal	`2075`
Address	`0x162450`

ZwNotifyChangeDirectoryFile

Ordinal	`2076`
Address	`0x162470`

ZwNotifyChangeDirectoryFileEx

Ordinal	`2077`
Address	`0x162490`

ZwNotifyChangeKey

Ordinal	`2078`
Address	`0x1624b0`

ZwNotifyChangeMultipleKeys

Ordinal	`2079`
Address	`0x1624d0`

ZwNotifyChangeSession

Ordinal	`2080`
Address	`0x1624f0`

ZwOpenCpuPartition

Ordinal	`2081`
Address	`0x162510`

ZwOpenDirectoryObject

Ordinal	`2082`
Address	`0x160b60`

ZwOpenEnlistment

Ordinal	`2083`
Address	`0x162530`

ZwOpenEvent

Ordinal	`2084`
Address	`0x160860`

ZwOpenEventPair

Ordinal	`2085`
Address	`0x162550`

ZwOpenFile

Ordinal	`2086`
Address	`0x1606c0`

ZwOpenIoCompletion

Ordinal	`2087`
Address	`0x162570`

ZwOpenJobObject

Ordinal	`2088`
Address	`0x162590`

ZwOpenKey

Ordinal	`2089`
Address	`0x1602a0`

ZwOpenKeyEx

Ordinal	`2090`
Address	`0x1625b0`

ZwOpenKeyTransacted

Ordinal	`2091`
Address	`0x1625d0`

ZwOpenKeyTransactedEx

Ordinal	`2092`
Address	`0x1625f0`

ZwOpenKeyedEvent

Ordinal	`2093`
Address	`0x162610`

ZwOpenMutant

Ordinal	`2094`
Address	`0x162630`

ZwOpenObjectAuditAlarm

Ordinal	`2095`
Address	`0x162650`

ZwOpenPartition

Ordinal	`2096`
Address	`0x162670`

ZwOpenPrivateNamespace

Ordinal	`2097`
Address	`0x162690`

ZwOpenProcess

Ordinal	`2098`
Address	`0x160520`

ZwOpenProcessToken

Ordinal	`2099`
Address	`0x1626b0`

ZwOpenProcessTokenEx

Ordinal	`2100`
Address	`0x160660`

ZwOpenRegistryTransaction

Ordinal	`2101`
Address	`0x1626d0`

ZwOpenResourceManager

Ordinal	`2102`
Address	`0x1626f0`

ZwOpenSection

Ordinal	`2103`
Address	`0x160740`

ZwOpenSemaphore

Ordinal	`2104`
Address	`0x162710`

ZwOpenSession

Ordinal	`2105`
Address	`0x162730`

ZwOpenSymbolicLinkObject

Ordinal	`2106`
Address	`0x162750`

ZwOpenThread

Ordinal	`2107`
Address	`0x162770`

ZwOpenThreadToken

Ordinal	`2108`
Address	`0x1604e0`

ZwOpenThreadTokenEx

Ordinal	`2109`
Address	`0x160640`

ZwOpenTimer

Ordinal	`2110`
Address	`0x162790`

ZwOpenTransaction

Ordinal	`2111`
Address	`0x1627b0`

ZwOpenTransactionManager

Ordinal	`2112`
Address	`0x1627d0`

ZwPlugPlayControl

Ordinal	`2113`
Address	`0x1627f0`

ZwPowerInformation

Ordinal	`2114`
Address	`0x160c30`

ZwPrePrepareComplete

Ordinal	`2115`
Address	`0x162810`

ZwPrePrepareEnlistment

Ordinal	`2116`
Address	`0x162830`

ZwPrepareComplete

Ordinal	`2117`
Address	`0x162850`

ZwPrepareEnlistment

Ordinal	`2118`
Address	`0x162870`

ZwPrivilegeCheck

Ordinal	`2119`
Address	`0x162890`

ZwPrivilegeObjectAuditAlarm

Ordinal	`2120`
Address	`0x1628b0`

ZwPrivilegedServiceAuditAlarm

Ordinal	`2121`
Address	`0x1628d0`

ZwPropagationComplete

Ordinal	`2122`
Address	`0x1628f0`

ZwPropagationFailed

Ordinal	`2123`
Address	`0x162910`

ZwProtectVirtualMemory

Ordinal	`2124`
Address	`0x160a60`

ZwPssCaptureVaSpaceBulk

Ordinal	`2125`
Address	`0x162930`

ZwPulseEvent

Ordinal	`2126`
Address	`0x162950`

ZwQueryAttributesFile

Ordinal	`2127`
Address	`0x160800`

ZwQueryAuxiliaryCounterFrequency

Ordinal	`2128`
Address	`0x162970`

ZwQueryBootEntryOrder

Ordinal	`2129`
Address	`0x162990`

ZwQueryBootOptions

Ordinal	`2130`
Address	`0x1629b0`

ZwQueryDebugFilterState

Ordinal	`2131`
Address	`0x1629d0`

ZwQueryDefaultLocale

Ordinal	`2132`
Address	`0x160300`

ZwQueryDefaultUILanguage

Ordinal	`2133`
Address	`0x1608e0`

ZwQueryDirectoryFile

Ordinal	`2134`
Address	`0x160700`

ZwQueryDirectoryFileEx

Ordinal	`2135`
Address	`0x1629f0`

ZwQueryDirectoryObject

Ordinal	`2136`
Address	`0x162a10`

ZwQueryDriverEntryOrder

Ordinal	`2137`
Address	`0x162a30`

ZwQueryEaFile

Ordinal	`2138`
Address	`0x162a50`

ZwQueryEvent

Ordinal	`2139`
Address	`0x160b20`

ZwQueryFullAttributesFile

Ordinal	`2140`
Address	`0x162a70`

ZwQueryInformationAtom

Ordinal	`2141`
Address	`0x162a90`

ZwQueryInformationByName

Ordinal	`2142`
Address	`0x162ab0`

ZwQueryInformationCpuPartition

Ordinal	`2143`
Address	`0x162ad0`

ZwQueryInformationEnlistment

Ordinal	`2144`
Address	`0x162af0`

ZwQueryInformationFile

Ordinal	`2145`
Address	`0x160280`

ZwQueryInformationJobObject

Ordinal	`2146`
Address	`0x162b10`

ZwQueryInformationPort

Ordinal	`2147`
Address	`0x162b30`

ZwQueryInformationProcess

Ordinal	`2148`
Address	`0x160380`

ZwQueryInformationResourceManager

Ordinal	`2149`
Address	`0x162b50`

ZwQueryInformationThread

Ordinal	`2150`
Address	`0x160500`

ZwQueryInformationToken

Ordinal	`2151`
Address	`0x160480`

ZwQueryInformationTransaction

Ordinal	`2152`
Address	`0x162b70`

ZwQueryInformationTransactionManager

Ordinal	`2153`
Address	`0x162b90`

ZwQueryInformationWorkerFactory

Ordinal	`2154`
Address	`0x162bb0`

ZwQueryInstallUILanguage

Ordinal	`2155`
Address	`0x162bd0`

ZwQueryIntervalProfile

Ordinal	`2156`
Address	`0x162bf0`

ZwQueryIoCompletion

Ordinal	`2157`
Address	`0x162c10`

ZwQueryIoRingCapabilities

Ordinal	`2158`
Address	`0x162c30`

ZwQueryKey

Ordinal	`2159`
Address	`0x160320`

ZwQueryLicenseValue

Ordinal	`2160`
Address	`0x162c50`

ZwQueryMultipleValueKey

Ordinal	`2161`
Address	`0x162c70`

ZwQueryMutant

Ordinal	`2162`
Address	`0x162c90`

ZwQueryObject

Ordinal	`2163`
Address	`0x160260`

ZwQueryOpenSubKeys

Ordinal	`2164`
Address	`0x162cb0`

ZwQueryOpenSubKeysEx

Ordinal	`2165`
Address	`0x162cd0`

ZwQueryPerformanceCounter

Ordinal	`2166`
Address	`0x160680`

ZwQueryPortInformationProcess

Ordinal	`2167`
Address	`0x162cf0`

ZwQueryQuotaInformationFile

Ordinal	`2168`
Address	`0x162d10`

ZwQuerySection

Ordinal	`2169`
Address	`0x160a80`

ZwQuerySecurityAttributesToken

Ordinal	`2170`
Address	`0x162d30`

ZwQuerySecurityObject

Ordinal	`2171`
Address	`0x162d50`

ZwQuerySecurityPolicy

Ordinal	`2172`
Address	`0x162d70`

ZwQuerySemaphore

Ordinal	`2173`
Address	`0x162d90`

ZwQuerySymbolicLinkObject

Ordinal	`2174`
Address	`0x162db0`

ZwQuerySystemEnvironmentValue

Ordinal	`2175`
Address	`0x162dd0`

ZwQuerySystemEnvironmentValueEx

Ordinal	`2176`
Address	`0x162df0`

ZwQuerySystemInformation

Ordinal	`2177`
Address	`0x160720`

ZwQuerySystemInformationEx

Ordinal	`2178`
Address	`0x162e10`

ZwQuerySystemTime

Ordinal	`2179`
Address	`0x160ba0`

ZwQueryTimer

Ordinal	`2180`
Address	`0x160760`

ZwQueryTimerResolution

Ordinal	`2181`
Address	`0x162e30`

ZwQueryValueKey

Ordinal	`2182`
Address	`0x160340`

ZwQueryVirtualMemory

Ordinal	`2183`
Address	`0x1604c0`

ZwQueryVolumeInformationFile

Ordinal	`2184`
Address	`0x160980`

ZwQueryWnfStateData

Ordinal	`2185`
Address	`0x162e50`

ZwQueryWnfStateNameInformation

Ordinal	`2186`
Address	`0x162e70`

ZwQueueApcThread

Ordinal	`2187`
Address	`0x160900`

ZwQueueApcThreadEx

Ordinal	`2188`
Address	`0x162e90`

ZwQueueApcThreadEx2

Ordinal	`2189`
Address	`0x162eb0`

ZwRaiseException

Ordinal	`2190`
Address	`0x162ed0`

ZwRaiseHardError

Ordinal	`2191`
Address	`0x162ef0`

ZwReadFile

Ordinal	`2192`
Address	`0x160120`

ZwReadFileScatter

Ordinal	`2193`
Address	`0x160620`

ZwReadOnlyEnlistment

Ordinal	`2194`
Address	`0x162f10`

ZwReadRequestData

Ordinal	`2195`
Address	`0x160ae0`

ZwReadVirtualMemory

Ordinal	`2196`
Address	`0x160840`

ZwReadVirtualMemoryEx

Ordinal	`2197`
Address	`0x162f30`

ZwRecoverEnlistment

Ordinal	`2198`
Address	`0x162f50`

ZwRecoverResourceManager

Ordinal	`2199`
Address	`0x162f70`

ZwRecoverTransactionManager

Ordinal	`2200`
Address	`0x162f90`

ZwRegisterProtocolAddressInformation

Ordinal	`2201`
Address	`0x162fb0`

ZwRegisterThreadTerminatePort

Ordinal	`2202`
Address	`0x162fd0`

ZwReleaseKeyedEvent

Ordinal	`2203`
Address	`0x162ff0`

ZwReleaseMutant

Ordinal	`2204`
Address	`0x160460`

ZwReleaseSemaphore

Ordinal	`2205`
Address	`0x1601a0`

ZwReleaseWorkerFactoryWorker

Ordinal	`2206`
Address	`0x163010`

ZwRemoveIoCompletion

Ordinal	`2207`
Address	`0x160180`

ZwRemoveIoCompletionEx

Ordinal	`2208`
Address	`0x163030`

ZwRemoveProcessDebug

Ordinal	`2209`
Address	`0x163050`

ZwRenameKey

Ordinal	`2210`
Address	`0x163070`

ZwRenameTransactionManager

Ordinal	`2211`
Address	`0x163090`

ZwReplaceKey

Ordinal	`2212`
Address	`0x1630b0`

ZwReplacePartitionUnit

Ordinal	`2213`
Address	`0x1630d0`

ZwReplyPort

Ordinal	`2214`
Address	`0x1601e0`

ZwReplyWaitReceivePort

Ordinal	`2215`
Address	`0x1601c0`

ZwReplyWaitReceivePortEx

Ordinal	`2216`
Address	`0x1605c0`

ZwReplyWaitReplyPort

Ordinal	`2217`
Address	`0x1630f0`

ZwRequestPort

Ordinal	`2218`
Address	`0x163110`

ZwRequestWaitReplyPort

Ordinal	`2219`
Address	`0x1604a0`

ZwResetEvent

Ordinal	`2220`
Address	`0x163130`

ZwResetWriteWatch

Ordinal	`2221`
Address	`0x163150`

ZwRestoreKey

Ordinal	`2222`
Address	`0x163170`

ZwResumeProcess

Ordinal	`2223`
Address	`0x163190`

ZwResumeThread

Ordinal	`2224`
Address	`0x160aa0`

ZwRevertContainerImpersonation

Ordinal	`2225`
Address	`0x1631b0`

ZwRollbackComplete

Ordinal	`2226`
Address	`0x1631d0`

ZwRollbackEnlistment

Ordinal	`2227`
Address	`0x1631f0`

ZwRollbackRegistryTransaction

Ordinal	`2228`
Address	`0x163210`

ZwRollbackTransaction

Ordinal	`2229`
Address	`0x163230`

ZwRollforwardTransactionManager

Ordinal	`2230`
Address	`0x163250`

ZwSaveKey

Ordinal	`2231`
Address	`0x163270`

ZwSaveKeyEx

Ordinal	`2232`
Address	`0x163290`

ZwSaveMergedKeys

Ordinal	`2233`
Address	`0x1632b0`

ZwSecureConnectPort

Ordinal	`2234`
Address	`0x1632d0`

ZwSerializeBoot

Ordinal	`2235`
Address	`0x1632f0`

ZwSetBootEntryOrder

Ordinal	`2236`
Address	`0x163310`

ZwSetBootOptions

Ordinal	`2237`
Address	`0x163330`

ZwSetCachedSigningLevel

Ordinal	`2238`
Address	`0x163350`

ZwSetCachedSigningLevel2

Ordinal	`2239`
Address	`0x163370`

ZwSetContextThread

Ordinal	`2240`
Address	`0x163390`

ZwSetDebugFilterState

Ordinal	`2241`
Address	`0x1633b0`

ZwSetDefaultHardErrorPort

Ordinal	`2242`
Address	`0x1633d0`

ZwSetDefaultLocale

Ordinal	`2243`
Address	`0x1633f0`

ZwSetDefaultUILanguage

Ordinal	`2244`
Address	`0x163410`

ZwSetDriverEntryOrder

Ordinal	`2245`
Address	`0x163430`

ZwSetEaFile

Ordinal	`2246`
Address	`0x163450`

ZwSetEvent

Ordinal	`2247`
Address	`0x160220`

ZwSetEventBoostPriority

Ordinal	`2248`
Address	`0x160600`

ZwSetEventEx

Ordinal	`2249`
Address	`0x163470`

ZwSetHighEventPair

Ordinal	`2250`
Address	`0x163490`

ZwSetHighWaitLowEventPair

Ordinal	`2251`
Address	`0x1634b0`

ZwSetIRTimer

Ordinal	`2252`
Address	`0x1634d0`

ZwSetInformationCpuPartition

Ordinal	`2253`
Address	`0x1634f0`

ZwSetInformationDebugObject

Ordinal	`2254`
Address	`0x163510`

ZwSetInformationEnlistment

Ordinal	`2255`
Address	`0x163530`

ZwSetInformationFile

Ordinal	`2256`
Address	`0x160540`

ZwSetInformationIoRing

Ordinal	`2257`
Address	`0x163550`

ZwSetInformationJobObject

Ordinal	`2258`
Address	`0x163570`

ZwSetInformationKey

Ordinal	`2259`
Address	`0x163590`

ZwSetInformationObject

Ordinal	`2260`
Address	`0x160bd0`

ZwSetInformationProcess

Ordinal	`2261`
Address	`0x1603e0`

ZwSetInformationResourceManager

Ordinal	`2262`
Address	`0x1635b0`

ZwSetInformationSymbolicLink

Ordinal	`2263`
Address	`0x1635d0`

ZwSetInformationThread

Ordinal	`2264`
Address	`0x160200`

ZwSetInformationToken

Ordinal	`2265`
Address	`0x1635f0`

ZwSetInformationTransaction

Ordinal	`2266`
Address	`0x163610`

ZwSetInformationTransactionManager

Ordinal	`2267`
Address	`0x163630`

ZwSetInformationVirtualMemory

Ordinal	`2268`
Address	`0x163650`

ZwSetInformationWorkerFactory

Ordinal	`2269`
Address	`0x163670`

ZwSetIntervalProfile

Ordinal	`2270`
Address	`0x163690`

ZwSetIoCompletion

Ordinal	`2271`
Address	`0x1636b0`

ZwSetIoCompletionEx

Ordinal	`2272`
Address	`0x1636d0`

ZwSetLdtEntries

Ordinal	`2273`
Address	`0x1636f0`

ZwSetLowEventPair

Ordinal	`2274`
Address	`0x163710`

ZwSetLowWaitHighEventPair

Ordinal	`2275`
Address	`0x163730`

ZwSetQuotaInformationFile

Ordinal	`2276`
Address	`0x163750`

ZwSetSecurityObject

Ordinal	`2277`
Address	`0x163770`

ZwSetSystemEnvironmentValue

Ordinal	`2278`
Address	`0x163790`

ZwSetSystemEnvironmentValueEx

Ordinal	`2279`
Address	`0x1637b0`

ZwSetSystemInformation

Ordinal	`2280`
Address	`0x1637d0`

ZwSetSystemPowerState

Ordinal	`2281`
Address	`0x1637f0`

ZwSetSystemTime

Ordinal	`2282`
Address	`0x163810`

ZwSetThreadExecutionState

Ordinal	`2283`
Address	`0x163830`

ZwSetTimer

Ordinal	`2284`
Address	`0x160c90`

ZwSetTimer2

Ordinal	`2285`
Address	`0x163850`

ZwSetTimerEx

Ordinal	`2286`
Address	`0x163870`

ZwSetTimerResolution

Ordinal	`2287`
Address	`0x163890`

ZwSetUuidSeed

Ordinal	`2288`
Address	`0x1638b0`

ZwSetValueKey

Ordinal	`2289`
Address	`0x160c50`

ZwSetVolumeInformationFile

Ordinal	`2290`
Address	`0x1638d0`

ZwSetWnfProcessNotificationEvent

Ordinal	`2291`
Address	`0x1638f0`

ZwShutdownSystem

Ordinal	`2292`
Address	`0x163910`

ZwShutdownWorkerFactory

Ordinal	`2293`
Address	`0x163930`

ZwSignalAndWaitForSingleObject

Ordinal	`2294`
Address	`0x163950`

ZwSinglePhaseReject

Ordinal	`2295`
Address	`0x163970`

ZwStartProfile

Ordinal	`2296`
Address	`0x163990`

ZwStopProfile

Ordinal	`2297`
Address	`0x1639b0`

ZwSubmitIoRing

Ordinal	`2298`
Address	`0x1639d0`

ZwSubscribeWnfStateChange

Ordinal	`2299`
Address	`0x1639f0`

ZwSuspendProcess

Ordinal	`2300`
Address	`0x163a10`

ZwSuspendThread

Ordinal	`2301`
Address	`0x163a30`

ZwSystemDebugControl

Ordinal	`2302`
Address	`0x163a50`

ZwTerminateEnclave

Ordinal	`2303`
Address	`0x163a70`

ZwTerminateJobObject

Ordinal	`2304`
Address	`0x163a90`

ZwTerminateProcess

Ordinal	`2305`
Address	`0x1605e0`

ZwTerminateThread

Ordinal	`2306`
Address	`0x160ac0`

ZwTestAlert

Ordinal	`2307`
Address	`0x163ab0`

ZwThawRegistry

Ordinal	`2308`
Address	`0x163ad0`

ZwThawTransactions

Ordinal	`2309`
Address	`0x163af0`

ZwTraceControl

Ordinal	`2310`
Address	`0x163b10`

ZwTraceEvent

Ordinal	`2311`
Address	`0x160c10`

ZwTranslateFilePath

Ordinal	`2312`
Address	`0x163b30`

ZwUmsThreadYield

Ordinal	`2313`
Address	`0x163b50`

ZwUnloadDriver

Ordinal	`2314`
Address	`0x163b70`

ZwUnloadKey

Ordinal	`2315`
Address	`0x163b90`

ZwUnloadKey2

Ordinal	`2316`
Address	`0x163bb0`

ZwUnloadKeyEx

Ordinal	`2317`
Address	`0x163bd0`

ZwUnlockFile

Ordinal	`2318`
Address	`0x163bf0`

ZwUnlockVirtualMemory

Ordinal	`2319`
Address	`0x163c10`

ZwUnmapViewOfSection

Ordinal	`2320`
Address	`0x1605a0`

ZwUnmapViewOfSectionEx

Ordinal	`2321`
Address	`0x163c30`

ZwUnsubscribeWnfStateChange

Ordinal	`2322`
Address	`0x163c50`

ZwUpdateWnfStateData

Ordinal	`2323`
Address	`0x163c70`

ZwVdmControl

Ordinal	`2324`
Address	`0x163c90`

ZwWaitForAlertByThreadId

Ordinal	`2325`
Address	`0x163cb0`

ZwWaitForDebugEvent

Ordinal	`2326`
Address	`0x163cd0`

ZwWaitForKeyedEvent

Ordinal	`2327`
Address	`0x163cf0`

ZwWaitForMultipleObjects

Ordinal	`2328`
Address	`0x160bb0`

ZwWaitForMultipleObjects32

Ordinal	`2329`
Address	`0x1603a0`

ZwWaitForSingleObject

Ordinal	`2330`
Address	`0x1600e0`

ZwWaitForWorkViaWorkerFactory

Ordinal	`2331`
Address	`0x163d10`

ZwWaitHighEventPair

Ordinal	`2332`
Address	`0x163d30`

ZwWaitLowEventPair

Ordinal	`2333`
Address	`0x163d50`

ZwWorkerFactoryWorkerReady

Ordinal	`2334`
Address	`0x160080`

ZwWriteFile

Ordinal	`2335`
Address	`0x160160`

ZwWriteFileGather

Ordinal	`2336`
Address	`0x1603c0`

ZwWriteRequestData

Ordinal	`2337`
Address	`0x160b40`

ZwWriteVirtualMemory

Ordinal	`2338`
Address	`0x1607a0`

ZwYieldExecution

Ordinal	`2339`
Address	`0x160920`

__C_specific_handler

Ordinal	`2340`
Address	`0x11f8a0`

__chkstk

Ordinal	`2341`
Address	`0x164710`

__isascii

Ordinal	`2342`
Address	`0x11fa70`

__iscsym

Ordinal	`2343`
Address	`0x11fa90`

__iscsymf

Ordinal	`2344`
Address	`0x11fad0`

__misaligned_access

Ordinal	`2345`
Address	`0xf65b0`

__toascii

Ordinal	`2346`
Address	`0x11fb10`

_atoi64

Ordinal	`2347`
Address	`0x11fd30`

_errno

Ordinal	`2348`
Address	`0x109080`

_fltused

Ordinal	`2349`
Address	`0x18a788`

_i64toa

Ordinal	`2350`
Address	`0x11fda0`

_i64toa_s

Ordinal	`2351`
Address	`0x12a7d0`

_i64tow

Ordinal	`2352`
Address	`0x11ff30`

_i64tow_s

Ordinal	`2353`
Address	`0x12aad0`

_itoa

Ordinal	`2354`
Address	`0x11fdd0`

_itoa_s

Ordinal	`2355`
Address	`0x12a800`

_itow

Ordinal	`2356`
Address	`0x11ff60`

_itow_s

Ordinal	`2357`
Address	`0x12ab00`

_lfind

Ordinal	`2358`
Address	`0x120100`

_local_unwind

Ordinal	`2359`
Address	`0x1201b0`

_ltoa

Ordinal	`2360`
Address	`0x11fdd0`

_ltoa_s

Ordinal	`2361`
Address	`0x12a800`

_ltow

Ordinal	`2362`
Address	`0x11ff60`

_ltow_s

Ordinal	`2363`
Address	`0x12ab00`

_makepath_s

Ordinal	`2364`
Address	`0x12adf0`

_memccpy

Ordinal	`2365`
Address	`0x1201e0`

_memicmp

Ordinal	`2366`
Address	`0x120280`

_setjmp

Ordinal	`2367`
Address	`0x1654a0`

_setjmpex

Ordinal	`2368`
Address	`0x165560`

_snprintf

Ordinal	`2369`
Address	`0x1202a0`

_snprintf_s

Ordinal	`2370`
Address	`0x12af50`

_snscanf_s

Ordinal	`2371`
Address	`0x12b020`

_snwprintf

Ordinal	`2372`
Address	`0x120360`

_snwprintf_s

Ordinal	`2373`
Address	`0x12b060`

_snwscanf_s

Ordinal	`2374`
Address	`0x12b140`

_splitpath

Ordinal	`2375`
Address	`0x120450`

_splitpath_s

Ordinal	`2376`
Address	`0x12b180`

_strcmpi

Ordinal	`2377`
Address	`0x1207b0`

_stricmp

Ordinal	`2378`
Address	`0x1207b0`

_strlwr

Ordinal	`2379`
Address	`0x1207c0`

_strlwr_s

Ordinal	`2380`
Address	`0x1207f0`

_strnicmp

Ordinal	`2381`
Address	`0x1208c0`

_strnset_s

Ordinal	`2382`
Address	`0x12b420`

_strset_s

Ordinal	`2383`
Address	`0x12b4b0`

_strupr

Ordinal	`2384`
Address	`0x1208d0`

_strupr_s

Ordinal	`2385`
Address	`0x120920`

_swprintf

Ordinal	`2386`
Address	`0x120990`

_ui64toa

Ordinal	`2387`
Address	`0x11fe00`

_ui64toa_s

Ordinal	`2388`
Address	`0x12a830`

_ui64tow

Ordinal	`2389`
Address	`0x11ff90`

_ui64tow_s

Ordinal	`2390`
Address	`0x12ab30`

_ultoa

Ordinal	`2391`
Address	`0x11fe20`

_ultoa_s

Ordinal	`2392`
Address	`0x12a850`

_ultow

Ordinal	`2393`
Address	`0x11ffb0`

_ultow_s

Ordinal	`2394`
Address	`0x12ab50`

_vscprintf

Ordinal	`2395`
Address	`0x120a60`

_vscwprintf

Ordinal	`2396`
Address	`0x120b90`

_vsnprintf

Ordinal	`2397`
Address	`0x120c80`

_vsnprintf_s

Ordinal	`2398`
Address	`0x12af80`

_vsnwprintf

Ordinal	`2399`
Address	`0x120d60`

_vsnwprintf_s

Ordinal	`2400`
Address	`0x12b090`

_vswprintf

Ordinal	`2401`
Address	`0x120bb0`

_wcsicmp

Ordinal	`2402`
Address	`0x120e70`

_wcslwr

Ordinal	`2403`
Address	`0x120ed0`

_wcslwr_s

Ordinal	`2404`
Address	`0x120f30`

_wcsnicmp

Ordinal	`2405`
Address	`0x120fb0`

_wcsnset_s

Ordinal	`2406`
Address	`0x121020`

_wcsset_s

Ordinal	`2407`
Address	`0x1210b0`

_wcstoi64

Ordinal	`2408`
Address	`0x121110`

_wcstoui64

Ordinal	`2409`
Address	`0x121140`

_wcsupr

Ordinal	`2410`
Address	`0x1213e0`

_wcsupr_s

Ordinal	`2411`
Address	`0x121410`

_wmakepath_s

Ordinal	`2412`
Address	`0x12b510`

_wsplitpath_s

Ordinal	`2413`
Address	`0x12b6a0`

_wtoi

Ordinal	`2414`
Address	`0x121490`

_wtoi64

Ordinal	`2415`
Address	`0x1214c0`

_wtol

Ordinal	`2416`
Address	`0x1214e0`

abs

Ordinal	`2417`
Address	`0x121500`

atan

Ordinal	`2418`
Address	`0x121510`

atan2

Ordinal	`2419`
Address	`0x121780`

atoi

Ordinal	`2420`
Address	`0x11fd50`

atol

Ordinal	`2421`
Address	`0x11fd80`

bsearch

Ordinal	`2422`
Address	`0x121f40`

bsearch_s

Ordinal	`2423`
Address	`0x122040`

ceil

Ordinal	`2424`
Address	`0x122150`

cos

Ordinal	`2425`
Address	`0x122270`

fabs

Ordinal	`2426`
Address	`0x122a20`

floor

Ordinal	`2427`
Address	`0x122b20`

isalnum

Ordinal	`2428`
Address	`0x11fb20`

isalpha

Ordinal	`2429`
Address	`0x11fb50`

iscntrl

Ordinal	`2430`
Address	`0x11fb80`

isdigit

Ordinal	`2431`
Address	`0x11fbb0`

isgraph

Ordinal	`2432`
Address	`0x11fbe0`

islower

Ordinal	`2433`
Address	`0x11fc10`

isprint

Ordinal	`2434`
Address	`0x11fc40`

ispunct

Ordinal	`2435`
Address	`0x11fc70`

isspace

Ordinal	`2436`
Address	`0x11fca0`

isupper

Ordinal	`2437`
Address	`0x11fcd0`

iswalnum

Ordinal	`2438`
Address	`0x122c50`

iswalpha

Ordinal	`2439`
Address	`0x122c60`

iswascii

Ordinal	`2440`
Address	`0x122c70`

iswctype

Ordinal	`2441`
Address	`0x122d20`

iswdigit

Ordinal	`2442`
Address	`0x122c90`

iswgraph

Ordinal	`2443`
Address	`0x122ca0`

iswlower

Ordinal	`2444`
Address	`0x122cb0`

iswprint

Ordinal	`2445`
Address	`0x122cc0`

iswspace

Ordinal	`2446`
Address	`0x122cd0`

iswxdigit

Ordinal	`2447`
Address	`0x122ce0`

isxdigit

Ordinal	`2448`
Address	`0x11fd00`

labs

Ordinal	`2449`
Address	`0x121500`

log

Ordinal	`2450`
Address	`0x122d50`

longjmp

Ordinal	`2451`
Address	`0x123060`

mbstowcs

Ordinal	`2452`
Address	`0x123090`

memchr

Ordinal	`2453`
Address	`0x123180`

memcmp

Ordinal	`2454`
Address	`0x165a90`

memcpy

Ordinal	`2455`
Address	`0x1657c0`

memcpy_s

Ordinal	`2456`
Address	`0x12b960`

memmove

Ordinal	`2457`
Address	`0x1657c0`

memmove_s

Ordinal	`2458`
Address	`0x12ba00`

memset

Ordinal	`2459`
Address	`0x171030`

pow

Ordinal	`2460`
Address	`0x123220`

qsort

Ordinal	`2461`
Address	`0x123de0`

qsort_s

Ordinal	`2462`
Address	`0x1241a0`

sin

Ordinal	`2463`
Address	`0x122600`

sprintf

Ordinal	`2464`
Address	`0x124590`

sprintf_s

Ordinal	`2465`
Address	`0x12ba60`

sqrt

Ordinal	`2466`
Address	`0x124630`

sscanf

Ordinal	`2467`
Address	`0x124760`

sscanf_s

Ordinal	`2468`
Address	`0x12bae0`

strcat

Ordinal	`2469`
Address	`0x165e30`

strcat_s

Ordinal	`2470`
Address	`0x12bb40`

strchr

Ordinal	`2471`
Address	`0x124850`

strcmp

Ordinal	`2472`
Address	`0x165fd0`

strcpy

Ordinal	`2473`
Address	`0x165ef0`

strcpy_s

Ordinal	`2474`
Address	`0x12bbd0`

strcspn

Ordinal	`2475`
Address	`0x1248e0`

strlen

Ordinal	`2476`
Address	`0x1660a0`

strncat

Ordinal	`2477`
Address	`0x166170`

strncat_s

Ordinal	`2478`
Address	`0x12bc60`

strncmp

Ordinal	`2479`
Address	`0x166330`

strncpy

Ordinal	`2480`
Address	`0x166410`

strncpy_s

Ordinal	`2481`
Address	`0x12bd60`

strnlen

Ordinal	`2482`
Address	`0x124980`

strpbrk

Ordinal	`2483`
Address	`0x124ad0`

strrchr

Ordinal	`2484`
Address	`0x124b50`

strspn

Ordinal	`2485`
Address	`0x124ca0`

strstr

Ordinal	`2486`
Address	`0x124d30`

strtok_s

Ordinal	`2487`
Address	`0x12be60`

strtol

Ordinal	`2488`
Address	`0x125160`

strtoul

Ordinal	`2489`
Address	`0x1251c0`

swprintf

Ordinal	`2490`
Address	`0x120990`

swprintf_s

Ordinal	`2491`
Address	`0x12bfd0`

swscanf_s

Ordinal	`2492`
Address	`0x12c060`

tan

Ordinal	`2493`
Address	`0x125200`

tolower

Ordinal	`2494`
Address	`0x125730`

toupper

Ordinal	`2495`
Address	`0x125770`

towlower

Ordinal	`2496`
Address	`0x1257e0`

towupper

Ordinal	`2497`
Address	`0x125810`

vDbgPrintEx

Ordinal	`2498`
Address	`0x134b80`

vDbgPrintExWithPrefix

Ordinal	`2499`
Address	`0x134bb0`

vsprintf

Ordinal	`2500`
Address	`0x120b70`

vsprintf_s

Ordinal	`2501`
Address	`0x12ba90`

vswprintf_s

Ordinal	`2502`
Address	`0x12c000`

wcscat

Ordinal	`2503`
Address	`0x125820`

wcscat_s

Ordinal	`2504`
Address	`0x12c0c0`

wcschr

Ordinal	`2505`
Address	`0x1258a0`

wcscmp

Ordinal	`2506`
Address	`0x125920`

wcscpy

Ordinal	`2507`
Address	`0x125860`

wcscpy_s

Ordinal	`2508`
Address	`0x12c160`

wcscspn

Ordinal	`2509`
Address	`0x125960`

wcslen

Ordinal	`2510`
Address	`0x1259d0`

wcsncat

Ordinal	`2511`
Address	`0x125af0`

wcsncat_s

Ordinal	`2512`
Address	`0x12c1f0`

wcsncmp

Ordinal	`2513`
Address	`0x125b60`

wcsncpy

Ordinal	`2514`
Address	`0x125ba0`

wcsncpy_s

Ordinal	`2515`
Address	`0x12c300`

wcsnlen

Ordinal	`2516`
Address	`0x125c20`

wcspbrk

Ordinal	`2517`
Address	`0x125df0`

wcsrchr

Ordinal	`2518`
Address	`0x125e50`

wcsspn

Ordinal	`2519`
Address	`0x125f10`

wcsstr

Ordinal	`2520`
Address	`0x125f80`

wcstok_s

Ordinal	`2521`
Address	`0x12c410`

wcstol

Ordinal	`2522`
Address	`0x1263d0`

wcstombs

Ordinal	`2523`
Address	`0x126470`

wcstoul

Ordinal	`2524`
Address	`0x126430`

1

Type	`MUI`
Language	English - United States
Codepage	UNKNOWN
Size	`0xc8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.69568`
MD5	`4dacd6570bd4787599e7ce911af3dbeb`
SHA1	`6b9ed23d03c3109239dff4cd21b09c717796fc5e`
SHA256	`4f3a67e8e16bd682dd5cd886114ec7f0fcf29cdc0cbc2a545098739decdc80b1`
SHA3	`2935aa724f07bd1b68b13a2d7a13e3e4021a8ae4c9c88169cedb53e55fa5831d`

1 (#2)

Type	`RT_MESSAGETABLE`
Language	English - United States
Codepage	UNKNOWN
Size	`0x79e14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.34676`
MD5	`0a7612174c62a7437cbba07137af7a05`
SHA1	`69c97ce2d8d0025ea2aa43f66b37f5a7bc5669b0`
SHA256	`2c6564066b373dd9de13da5228b0a8fcd053be94ea16d443ba0f3893fb01e00c`
SHA3	`ab1744a7af4ed960623ed90a809d73dbde4a3d4bb04da044b4f6c4df2eef25e1`

1 (#3)

Type	`RT_VERSION`
Language	English - United States
Codepage	UNKNOWN
Size	`0x380`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.49762`
MD5	`11e78310d02f19ce58c5ac16bc12009e`
SHA1	`b23f0a7a55be4d9bbc45d2aae07b5e1cc3d7fae3`
SHA256	`2a86c909241f7b4201c0ccb0b5881c64cc1ea3622e1dcb7a316e85173a4b8311`
SHA3	`ca1cf8c150dcd8be29d25143b9a5045b6d59502468992f72220eac2179b77bf8`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	10.0.26100.8521
ProductVersion	10.0.26100.8521
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT` `VOS_NT_WINDOWS32` `VOS_WINCE` `VOS__WINDOWS32`
FileType	`VFT_DLL`
Language	English - United States
CompanyName	Microsoft Corporation
FileDescription	NT Layer DLL
FileVersion (#2)	10.0.26100.8521 (WinBuild.160101.0800)
InternalName	ntdll.dll
LegalCopyright	Â© Microsoft Corporation. All rights reserved.
OriginalFilename	ntdll.dll
ProductName	MicrosoftÂ® WindowsÂ® Operating System
ProductVersion (#2)	10.0.26100.8521

Resource LangID	English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2078-Nov-08 15:03:48
Version	`0.0`
SizeofData	`34`
AddressOfRawData	`0x1a224c`
PointerToRawData	`0x1a224c`
Referenced File	ntdll.pdb

IMAGE_DEBUG_TYPE_POGO

Characteristics	`0`
TimeDateStamp	2078-Nov-08 15:03:48
Version	`0.0`
SizeofData	`768`
AddressOfRawData	`0x1a2270`
PointerToRawData	`0x1a2270`

UNKNOWN

Characteristics	`0`
TimeDateStamp	2078-Nov-08 15:03:48
Version	`0.0`
SizeofData	`36`
AddressOfRawData	`0x1a2598`
PointerToRawData	`0x1a2598`

UNKNOWN (#2)

Characteristics	`0`
TimeDateStamp	2078-Nov-08 15:03:48
Version	`0.0`
SizeofData	`4`
AddressOfRawData	`0x1a25bc`
PointerToRawData	`0x1a25bc`

TLS Callbacks

Load Configuration

Size	`0x148`
TimeDateStamp	`1970-Jan-01 00:00:00`
Version	`0.0`
GlobalFlagsClear	`(EMPTY)`
GlobalFlagsSet	`(EMPTY)`
CriticalSectionDefaultTimeout	`0`
DeCommitFreeBlockThreshold	`0`
DeCommitTotalFreeThreshold	`0`
LockPrefixTable	`0`
MaximumAllocationSize	`0`
VirtualMemoryThreshold	`0`
ProcessAffinityMask	`0`
ProcessHeapFlags	`(EMPTY)`
CSDVersion	`0`
Reserved1	`0x800`
EditList	`0`
SecurityCookie	`0x1801e95a8`
GuardCFCheckFunctionPointer	`6444441600`
GuardCFDispatchFunctionPointer	`0`
GuardCFFunctionTable	`0`
GuardCFFunctionCount	`0`
GuardFlags	`(EMPTY)`
CodeIntegrity.Flags	`0`
CodeIntegrity.Catalog	`0`
CodeIntegrity.CatalogOffset	`0`
CodeIntegrity.Reserved	`0`
GuardAddressTakenIatEntryTable	`0`
GuardAddressTakenIatEntryCount	`0`
GuardLongJumpTargetTable	`0`
GuardLongJumpTargetCount	`0`

RICH Header

XOR Key	`0x3cad0bc`
Unmarked objects	`0`
Unmarked objects (#2)	`2`
C objects (33145)	`126`
Exports (33145)	`1`
ASM objects (33145)	`49`
C objects (LTCG) (33145)	`345`
C++ objects (33145)	`30`
Resource objects (33145)	`1`
Linker (33145)	`1`

Errors

Leave a comment

No comments yet.