Windowsアプリを開発する際にWin32APIを利用しますが、APIと実際にその機能を
提供してくれているDLLの内容について、まとめておきます。
全ては把握しきれないので、よく使うものだけピックアップしてみました。
Windows 7 SP1 x86版の環境で
DLL Export Viewerを使って出力してみました。
対象モジュールは以下です。
- Kernel32.dll (1362個)
- Nt.dll (1982個)
- User32.dll (822個)
- Advapi32.dll (805個)
- Shell32.dll (333個)
そのあたりは、割愛します。
【Kernel32.DLL 1362個】
| Kernel32.DLL(Function Name) | Address | Ordinal |
|---|---|---|
| ZombifyActCtx | 0x77e77744 | 1336 (0x538) |
| WTSGetActiveConsoleSessionId | 0x77e143cb | 1272 (0x4f8) |
| WriteTapemark | 0x77e7727e | 1335 (0x537) |
| WriteProfileStringW | 0x77e47aee | 1334 (0x536) |
| WriteProfileStringA | 0x77e69961 | 1333 (0x535) |
| WriteProfileSectionW | 0x77e699b8 | 1332 (0x534) |
| WriteProfileSectionA | 0x77e6999d | 1331 (0x533) |
| WriteProcessMemory | 0x77e4959f | 1330 (0x532) |
| WritePrivateProfileStructW | 0x77e6980f | 1329 (0x531) |
| WritePrivateProfileStructA | 0x77e696cc | 1328 (0x530) |
| WritePrivateProfileStringW | 0x77e18601 | 1327 (0x52f) |
| WritePrivateProfileStringA | 0x77e3fad5 | 1326 (0x52e) |
| WritePrivateProfileSectionW | 0x77e69369 | 1325 (0x52d) |
| WritePrivateProfileSectionA | 0x77e69321 | 1324 (0x52c) |
| WriteFileGather | 0x77e11a75 | 1323 (0x52b) |
| WriteFileEx | 0x77e4552d | 1322 (0x52a) |
| WriteFile | 0x77e353ee | 1321 (0x529) |
| WriteConsoleW | 0x77e28535 | 1320 (0x528) |
| WriteConsoleOutputW | 0x77e8db85 | 1319 (0x527) |
| WriteConsoleOutputCharacterW | 0x77e8d6df | 1318 (0x526) |
| WriteConsoleOutputCharacterA | 0x77e8d6b9 | 1317 (0x525) |
| WriteConsoleOutputAttribute | 0x77e8d705 | 1316 (0x524) |
| WriteConsoleOutputA | 0x77e8dba9 | 1315 (0x523) |
| WriteConsoleInputW | 0x77e8d224 | 1314 (0x522) |
| WriteConsoleInputVDMW | 0x77e8cec4 | 1313 (0x521) |
| WriteConsoleInputVDMA | 0x77e8cea1 | 1312 (0x520) |
| WriteConsoleInputA | 0x77e8d201 | 1311 (0x51f) |
| WriteConsoleA | 0x77e2bf1d | 1310 (0x51e) |
| Wow64SuspendThread | 0x77e708f6 | 1309 (0x51d) |
| Wow64SetThreadContext | 0x77e6ed9e | 1308 (0x51c) |
| Wow64RevertWow64FsRedirection | 0x77e6fd71 | 1307 (0x51b) |
| Wow64GetThreadSelectorEntry | 0x77e67451 | 1306 (0x51a) |
| Wow64GetThreadContext | 0x77e6ed9e | 1305 (0x519) |
| Wow64EnableWow64FsRedirection | 0x77e6a5b9 | 1304 (0x518) |
| Wow64DisableWow64FsRedirection | 0x77e1c1e1 | 1303 (0x517) |
| WinExec | 0x77e6edb2 | 1302 (0x516) |
| WideCharToMultiByte | 0x77e2eefa | 1301 (0x515) |
| WerUnregisterRuntimeExceptionModule | 0x77e77c57 | 1294 (0x50e) |
| WerUnregisterMemoryBlock | 0x77e440cc | 1293 (0x50d) |
| WerUnregisterFile | 0x77e77c37 | 1292 (0x50c) |
| WerSetFlags | 0x77e177a4 | 1291 (0x50b) |
| WerRegisterRuntimeExceptionModule | 0x77e77c47 | 1290 (0x50a) |
| WerRegisterMemoryBlock | 0x77e22171 | 1289 (0x509) |
| WerRegisterFile | 0x77e77c27 | 1288 (0x508) |
| WerpStringLookup | 0x77e77c91 | 1300 (0x514) |
| WerpNotifyUseStringResource | 0x77e45b1c | 1299 (0x513) |
| WerpNotifyLoadStringResourceEx | 0x77e77c81 | 1298 (0x512) |
| WerpNotifyLoadStringResource | 0x77e77c67 | 1297 (0x511) |
| WerpInitiateRemoteRecovery | 0x77e77c18 | 1296 (0x510) |
| WerpCleanupMessageMapping | 0x77e77c77 | 1295 (0x50f) |
| WerGetFlags | 0x77e4026a | 1287 (0x507) |
| WakeConditionVariable | NTDLL.RtlWake ConditionVariable | 1286 (0x506) |
| WakeAllConditionVariable | NTDLL.RtlWakeAll ConditionVariable | 1285 (0x505) |
| WaitNamedPipeW | 0x77e6fd61 | 1284 (0x504) |
| WaitNamedPipeA | 0x77e6dfd6 | 1283 (0x503) |
| WaitForThreadpoolWorkCallbacks | NTDLL.TpWaitForWork | 1282 (0x502) |
| WaitForThreadpoolWaitCallbacks | NTDLL.TpWaitForWait | 1281 (0x501) |
| WaitForThreadpoolTimerCallbacks | NTDLL.TpWaitForTimer | 1280 (0x500) |
| WaitForThreadpoolIoCallbacks | NTDLL.TpWaitFor IoCompletion | 1279 (0x4ff) |
| WaitForSingleObjectEx | 0x77e2c2b0 | 1278 (0x4fe) |
| WaitForSingleObject | 0x77e2c290 | 1277 (0x4fd) |
| WaitForMultipleObjectsEx | 0x77e2bc90 | 1276 (0x4fc) |
| WaitForMultipleObjects | 0x77e2bd74 | 1275 (0x4fb) |
| WaitForDebugEvent | 0x77e67663 | 1274 (0x4fa) |
| WaitCommEvent | 0x77e7292c | 1273 (0x4f9) |
| VirtualUnlock | 0x77e18dbc | 1271 (0x4f7) |
| VirtualQueryEx | 0x77e14fe3 | 1270 (0x4f6) |
| VirtualQuery | 0x77e36c3f | 1269 (0x4f5) |
| VirtualProtectEx | 0x77e6fd51 | 1268 (0x4f4) |
| VirtualProtect | 0x77e22bcd | 1267 (0x4f3) |
| VirtualLock | 0x77e2029d | 1266 (0x4f2) |
| VirtualFreeEx | 0x77e1c7ab | 1265 (0x4f1) |
| VirtualFree | 0x77e36b15 | 1264 (0x4f0) |
| VirtualAllocExNuma | 0x77e6fd41 | 1263 (0x4ef) |
| VirtualAllocEx | 0x77e1c783 | 1262 (0x4ee) |
| VirtualAlloc | 0x77e2c43a | 1261 (0x4ed) |
| VerSetConditionMask | NTDLL.VerSetConditionMask | 1256 (0x4e8) |
| VerLanguageNameW | 0x77e19169 | 1255 (0x4e7) |
| VerLanguageNameA | 0x77e2aa26 | 1254 (0x4e6) |
| VerifyVersionInfoW | 0x77e214b5 | 1260 (0x4ec) |
| VerifyVersionInfoA | 0x77e17eca | 1259 (0x4eb) |
| VerifyScripts | 0x77e7f746 | 1258 (0x4ea) |
| VerifyConsoleIoHandle | 0x77e3c0aa | 1257 (0x4e9) |
| VDMOperationStarted | 0x77e74579 | 1253 (0x4e5) |
| VDMConsoleOperation | 0x77e8ee65 | 1252 (0x4e4) |
| UTUnRegister | 0x77e87b76 | 1238 (0x4d6) |
| UTRegister | 0x77e6d708 | 1237 (0x4d5) |
| UpdateResourceW | 0x77e7cef4 | 1251 (0x4e3) |
| UpdateResourceA | 0x77e7d0bc | 1250 (0x4e2) |
| UpdateProcThreadAttribute | api-ms-win-core-processthreads-l 1-1-0.UpdateProcThreadAttribute | 1249 (0x4e1) |
| UpdateCalendarDayOfWeek | 0x77e3e4a5 | 1248 (0x4e0) |
| UnregisterWaitEx | 0x77e15b02 | 1247 (0x4df) |
| UnregisterWait | 0x77e1b9d3 | 1246 (0x4de) |
| UnregisterConsoleIME | 0x77e77734 | 1245 (0x4dd) |
| UnregisterApplicationRestart | 0x77e40e38 | 1244 (0x4dc) |
| UnregisterApplicationRecoveryCallback | 0x77e40e27 | 1243 (0x4db) |
| UnmapViewOfFile | 0x77e2f73c | 1242 (0x4da) |
| UnlockFileEx | 0x77e480cd | 1241 (0x4d9) |
| UnlockFile | 0x77e47b2b | 1240 (0x4d8) |
| UnhandledExceptionFilter | 0x77e40651 | 1239 (0x4d7) |
| TzSpecificLocalTimeToSystemTime | 0x77e15d93 | 1236 (0x4d4) |
| TrySubmitThreadpoolCallback | 0x77e15ddf | 1235 (0x4d3) |
| TryEnterCriticalSection | NTDLL.RtlTryEnter CriticalSection | 1234 (0x4d2) |
| TryAcquireSRWLockShared | NTDLL.RtlTryAcquireSRW LockShared | 1233 (0x4d1) |
| TryAcquireSRWLockExclusive | NTDLL.RtlTryAcquireSRW LockExclusive | 1232 (0x4d0) |
| TransmitCommChar | 0x77e728a2 | 1231 (0x4cf) |
| TransactNamedPipe | 0x77e6fd31 | 1230 (0x4ce) |
| Toolhelp32ReadProcessMemory | 0x77e70f3d | 1229 (0x4cd) |
| TlsSetValue | 0x77e2f783 | 1228 (0x4cc) |
| TlsGetValue | 0x77e2f760 | 1227 (0x4cb) |
| TlsFree | 0x77e35259 | 1226 (0x4ca) |
| TlsAlloc | 0x77e2d804 | 1225 (0x4c9) |
| Thread32Next | 0x77e49693 | 1224 (0x4c8) |
| Thread32First | 0x77e49603 | 1223 (0x4c7) |
| TermsrvAppInstallMode | 0x77e48013 | 1222 (0x4c6) |
| TerminateThread | 0x77e3bc01 | 1221 (0x4c5) |
| TerminateProcess | 0x77e22bbd | 1220 (0x4c4) |
| TerminateJobObject | 0x77e157a9 | 1219 (0x4c3) |
| SystemTimeToTzSpecificLocalTime | 0x77e1b72e | 1218 (0x4c2) |
| SystemTimeToFileTime | 0x77e2ea44 | 1217 (0x4c1) |
| SwitchToThread | 0x77e1b3a5 | 1216 (0x4c0) |
| SwitchToFiber | 0x77e2c0c0 | 1215 (0x4bf) |
| SuspendThread | 0x77e48bf9 | 1214 (0x4be) |
| SubmitThreadpoolWork | NTDLL.TpPostWork | 1213 (0x4bd) |
| StartThreadpoolIo | NTDLL.TpStartAsyncIoOperation | 1212 (0x4bc) |
| SortGetHandle | 0x77e2fe5b | 1211 (0x4bb) |
| SortCloseHandle | 0x77e842d4 | 1210 (0x4ba) |
| SleepEx | 0x77e20846 | 1209 (0x4b9) |
| SleepConditionVariableSRW | 0x77e11f62 | 1208 (0x4b8) |
| SleepConditionVariableCS | 0x77e12eac | 1207 (0x4b7) |
| Sleep | 0x77e2c246 | 1206 (0x4b6) |
| SizeofResource | 0x77e254ed | 1205 (0x4b5) |
| SignalObjectAndWait | 0x77e47960 | 1204 (0x4b4) |
| ShowConsoleCursor | 0x77e8ca1a | 1203 (0x4b3) |
| SetXStateFeaturesMask | 0x77e786d5 | 1201 (0x4b1) |
| SetWaitableTimerEx | api-ms-win-core-threadpool-l 1-1-0.SetWaitableTimerEx | 1200 (0x4b0) |
| SetWaitableTimer | 0x77e254fd | 1199 (0x4af) |
| SetVolumeMountPointW | 0x77e759d8 | 1198 (0x4ae) |
| SetVolumeMountPointA | 0x77e76289 | 1197 (0x4ad) |
| SetVolumeLabelW | 0x77e6e88c | 1196 (0x4ac) |
| SetVolumeLabelA | 0x77e6ec70 | 1195 (0x4ab) |
| SetVDMCurrentDirectories | 0x77e73ea4 | 1194 (0x4aa) |
| SetUserGeoID | 0x77e7eb81 | 1193 (0x4a9) |
| SetupComm | 0x77e71cab | 1202 (0x4b2) |
| SetUnhandledExceptionFilter | 0x77e2f4fb | 1192 (0x4a8) |
| SetTimeZoneInformation | 0x77e67174 | 1190 (0x4a6) |
| SetTimerQueueTimer | 0x77e11bd4 | 1191 (0x4a7) |
| SetThreadUILanguage | 0x77e3c1c0 | 1184 (0x4a0) |
| SetThreadToken | api-ms-win-core-processthreads-l 1-1-0.SetThreadToken | 1183 (0x49f) |
| SetThreadStackGuarantee | 0x77e22d9c | 1182 (0x49e) |
| SetThreadPriorityBoost | 0x77e6fd21 | 1181 (0x49d) |
| SetThreadPriority | 0x77e244c6 | 1180 (0x49c) |
| SetThreadPreferredUILanguages | 0x77e1ec2c | 1179 (0x49b) |
| SetThreadpoolWait | NTDLL.TpSetWait | 1189 (0x4a5) |
| SetThreadpoolTimer | NTDLL.TpSetTimer | 1188 (0x4a4) |
| SetThreadpoolThreadMinimum | 0x77e1341c | 1187 (0x4a3) |
| SetThreadpoolThreadMaximum | NTDLL.TpSetPool MaxThreads | 1186 (0x4a2) |
| SetThreadpoolStackInformation | 0x77e6fd81 | 1185 (0x4a1) |
| SetThreadLocale | 0x77e22e7d | 1178 (0x49a) |
| SetThreadIdealProcessorEx | 0x77e7097b | 1177 (0x499) |
| SetThreadIdealProcessor | 0x77e415f0 | 1176 (0x498) |
| SetThreadGroupAffinity | 0x77e122a9 | 1175 (0x497) |
| SetThreadExecutionState | 0x77e49ff5 | 1174 (0x496) |
| SetThreadErrorMode | 0x77e69c80 | 1173 (0x495) |
| SetThreadContext | 0x77e708cb | 1172 (0x494) |
| SetThreadAffinityMask | 0x77e45c4e | 1171 (0x493) |
| SetTermsrvAppInstallMode | 0x77e70287 | 1170 (0x492) |
| SetTapePosition | 0x77e7713c | 1169 (0x491) |
| SetTapeParameters | 0x77e77314 | 1168 (0x490) |
| SetSystemTimeAdjustment | 0x77e1504d | 1167 (0x48f) |
| SetSystemTime | 0x77e41174 | 1166 (0x48e) |
| SetSystemPowerState | 0x77e6ece9 | 1165 (0x48d) |
| SetSystemFileCacheSize | 0x77e77ebc | 1164 (0x48c) |
| SetStdHandleEx | 0x77e6fd11 | 1163 (0x48b) |
| SetStdHandle | 0x77e6fd01 | 1162 (0x48a) |
| SetSearchPathMode | 0x77e6da1d | 1161 (0x489) |
| SetProcessWorkingSetSizeEx | 0x77e17617 | 1160 (0x488) |
| SetProcessWorkingSetSize | 0x77e175f9 | 1159 (0x487) |
| SetProcessUserModeExceptionPolicy | 0x77e6f23f | 1158 (0x486) |
| SetProcessShutdownParameters | 0x77e25311 | 1157 (0x485) |
| SetProcessPriorityBoost | 0x77e49c7b | 1156 (0x484) |
| SetProcessPreferredUILanguages | 0x77e80765 | 1155 (0x483) |
| SetProcessDEPPolicy | 0x77e162e4 | 1154 (0x482) |
| SetProcessAffinityUpdateMode | 0x77e6fda1 | 1153 (0x481) |
| SetProcessAffinityMask | 0x77e6f117 | 1152 (0x480) |
| SetPriorityClass | 0x77e1f4ea | 1151 (0x47f) |
| SetNamedPipeHandleState | 0x77e3dc0d | 1150 (0x47e) |
| SetNamedPipeAttribute | 0x77e6e35e | 1149 (0x47d) |
| SetMessageWaitingIndicator | 0x77e6ed9e | 1148 (0x47c) |
| SetMailslotInfo | 0x77e1482d | 1147 (0x47b) |
| SetLocalTime | 0x77e6fcf1 | 1144 (0x478) |
| SetLocalPrimaryComputerNameW | 0x77e668e8 | 1143 (0x477) |
| SetLocalPrimaryComputerNameA | 0x77e66b74 | 1142 (0x476) |
| SetLocaleInfoW | 0x77e6fce1 | 1146 (0x47a) |
| SetLocaleInfoA | 0x77e7e2fb | 1145 (0x479) |
| SetLastError | 0x77e2c3f0 | 1141 (0x475) |
| SetLastConsoleEventActive | 0x77e8dd85 | 1140 (0x474) |
| SetInformationJobObject | 0x77e15889 | 1139 (0x473) |
| SetHandleInformation | 0x77e18d68 | 1138 (0x472) |
| SetHandleCount | 0x77e38ec1 | 1137 (0x471) |
| SetHandleContext | 0x77e1b532 | 1136 (0x470) |
| SetFirmwareEnvironmentVariableW | 0x77e6cf4d | 1135 (0x46f) |
| SetFirmwareEnvironmentVariableA | 0x77e6d06d | 1134 (0x46e) |
| SetFileValidData | 0x77e11aa5 | 1133 (0x46d) |
| SetFileTime | 0x77e1c3e2 | 1132 (0x46c) |
| SetFileShortNameW | 0x77e6a719 | 1131 (0x46b) |
| SetFileShortNameA | 0x77e6a822 | 1130 (0x46a) |
| SetFilePointerEx | 0x77e1fb6a | 1129 (0x469) |
| SetFilePointer | 0x77e3060d | 1128 (0x468) |
| SetFileIoOverlappedRange | 0x77e69c2e | 1127 (0x467) |
| SetFileInformationByHandle | 0x77e19489 | 1126 (0x466) |
| SetFileCompletionNotificationModes | 0x77e3efdd | 1125 (0x465) |
| SetFileBandwidthReservation | 0x77e6a5e0 | 1124 (0x464) |
| SetFileAttributesW | 0x77e1b2eb | 1123 (0x463) |
| SetFileAttributesTransactedW | 0x77e6a8b9 | 1122 (0x462) |
| SetFileAttributesTransactedA | 0x77e6b304 | 1121 (0x461) |
| SetFileAttributesA | 0x77e19199 | 1120 (0x460) |
| SetFileApisToOEM | 0x77e1ec7e | 1119 (0x45f) |
| SetFileApisToANSI | 0x77e6fcd7 | 1118 (0x45e) |
| SetEventWhenCallbackReturns | NTDLL.TpCallbackSetEvent OnCompletion | 1117 (0x45d) |
| SetEvent | 0x77e2bd5c | 1116 (0x45c) |
| SetErrorMode | 0x77e30178 | 1115 (0x45b) |
| SetEnvironmentVariableW | 0x77e2f69c | 1114 (0x45a) |
| SetEnvironmentVariableA | 0x77e28b3b | 1113 (0x459) |
| SetEnvironmentStringsW | 0x77e20997 | 1112 (0x458) |
| SetEnvironmentStringsA | 0x77e77e10 | 1111 (0x457) |
| SetEndOfFile | 0x77e22ba5 | 1110 (0x456) |
| SetDynamicTimeZoneInformation | 0x77e672ad | 1109 (0x455) |
| SetDllDirectoryW | 0x77e6d773 | 1108 (0x454) |
| SetDllDirectoryA | 0x77e6d81c | 1107 (0x453) |
| SetDefaultDllDirectories | api-ms-win-core-libraryloader-l 1-1-0.SetDefaultDllDirectories | 1106 (0x452) |
| SetDefaultCommConfigW | 0x77e73191 | 1105 (0x451) |
| SetDefaultCommConfigA | 0x77e732a9 | 1104 (0x450) |
| SetCurrentDirectoryW | 0x77e36bee | 1103 (0x44f) |
| SetCurrentDirectoryA | 0x77e294f7 | 1102 (0x44e) |
| SetCurrentConsoleFontEx | 0x77e8e8e9 | 1101 (0x44d) |
| SetCriticalSectionSpinCount | NTDLL.RtlSetCritical SectionSpinCount | 1100 (0x44c) |
| SetConsoleWindowInfo | 0x77e8e34c | 1099 (0x44b) |
| SetConsoleTitleW | 0x77e20737 | 1098 (0x44a) |
| SetConsoleTitleA | 0x77e8bd47 | 1097 (0x449) |
| SetConsoleTextAttribute | 0x77e42555 | 1096 (0x448) |
| SetConsoleScreenBufferSize | 0x77e8e272 | 1095 (0x447) |
| SetConsoleScreenBufferInfoEx | 0x77e8dec7 | 1094 (0x446) |
| SetConsolePalette | 0x77e8ce91 | 1093 (0x445) |
| SetConsoleOutputCP | 0x77e8e567 | 1092 (0x444) |
| SetConsoleOS2OemFormat | 0x77e8ed28 | 1091 (0x443) |
| SetConsoleNumberOfCommandsW | 0x77e8bc45 | 1090 (0x442) |
| SetConsoleNumberOfCommandsA | 0x77e8bc60 | 1089 (0x441) |
| SetConsoleNlsMode | 0x77e8eb03 | 1088 (0x440) |
| SetConsoleMode | 0x77e3c16a | 1087 (0x43f) |
| SetConsoleMenuClose | 0x77e8ce2e | 1086 (0x43e) |
| SetConsoleMaximumWindowSize | 0x77e87bf5 | 1085 (0x43d) |
| SetConsoleLocalEUDC | 0x77e8ed8b | 1084 (0x43c) |
| SetConsoleKeyShortcuts | 0x77e8cd7b | 1083 (0x43b) |
| SetConsoleInputExeNameW | 0x77e3c50d | 1082 (0x43a) |
| SetConsoleInputExeNameA | 0x77e8c250 | 1081 (0x439) |
| SetConsoleIcon | 0x77e8e450 | 1080 (0x438) |
| SetConsoleHistoryInfo | 0x77e8e6e5 | 1079 (0x437) |
| SetConsoleHardwareState | 0x77e8ccac | 1078 (0x436) |
| SetConsoleFont | 0x77e8e3e7 | 1077 (0x435) |
| SetConsoleDisplayMode | 0x77e8cb21 | 1076 (0x434) |
| SetConsoleCursorPosition | 0x77e11d74 | 1075 (0x433) |
| SetConsoleCursorMode | 0x77e8ebdf | 1074 (0x432) |
| SetConsoleCursorInfo | 0x77e8e2db | 1073 (0x431) |
| SetConsoleCursor | 0x77e8c9b1 | 1072 (0x430) |
| SetConsoleCtrlHandler | 0x77e350fa | 1071 (0x42f) |
| SetConsoleCP | 0x77e8e4b3 | 1070 (0x42e) |
| SetConsoleActiveScreenBuffer | 0x77e8e1ac | 1069 (0x42d) |
| SetComputerNameW | 0x77e65165 | 1068 (0x42c) |
| SetComputerNameExW | 0x77e6657f | 1067 (0x42b) |
| SetComputerNameExA | 0x77e66629 | 1066 (0x42a) |
| SetComputerNameA | 0x77e652a7 | 1065 (0x429) |
| SetComPlusPackageInstallStatus | 0x77e779b5 | 1059 (0x423) |
| SetCommTimeouts | 0x77e727f7 | 1064 (0x428) |
| SetCommState | 0x77e724dc | 1063 (0x427) |
| SetCommMask | 0x77e7243c | 1062 (0x426) |
| SetCommConfig | 0x77e73519 | 1061 (0x425) |
| SetCommBreak | 0x77e72424 | 1060 (0x424) |
| SetClientTimeZoneInformation | 0x77e125f5 | 1058 (0x422) |
| SetCalendarInfoW | 0x77e6fcc7 | 1057 (0x421) |
| SetCalendarInfoA | 0x77e7e3c2 | 1056 (0x420) |
| SearchPathW | 0x77e243a5 | 1055 (0x41f) |
| SearchPathA | 0x77e4146d | 1054 (0x41e) |
| ScrollConsoleScreenBufferW | 0x77e11dca | 1053 (0x41d) |
| ScrollConsoleScreenBufferA | 0x77e8e3c3 | 1052 (0x41c) |
| RtlZeroMemory | NTDLL.RtlZeroMemory | 1051 (0x41b) |
| RtlUnwind | 0x77e19292 | 1050 (0x41a) |
| RtlMoveMemory | NTDLL.RtlMoveMemory | 1049 (0x419) |
| RtlFillMemory | 0x77e6fea4 | 1048 (0x418) |
| RtlCaptureStackBackTrace | 0x77e22f11 | 1047 (0x417) |
| RtlCaptureContext | 0x77e6fe93 | 1046 (0x416) |
| ResumeThread | 0x77e216d7 | 1045 (0x415) |
| RestoreLastError | NTDLL.RtlRestore LastWin32Error | 1044 (0x414) |
| ResolveLocaleName | 0x77e15624 | 1043 (0x413) |
| ResetWriteWatch | 0x77e78120 | 1042 (0x412) |
| ResetEvent | 0x77e2bd44 | 1041 (0x411) |
| RequestWakeupLatency | 0x77e6ed8a | 1040 (0x410) |
| RequestDeviceWakeup | 0x77e6ed8a | 1039 (0x40f) |
| ReplacePartitionUnit | 0x77e6f711 | 1038 (0x40e) |
| ReplaceFileW | 0x77e41708 | 1037 (0x40d) |
| ReplaceFileA | 0x77e6cc31 | 1036 (0x40c) |
| ReplaceFile | 0x77e41708 | 1035 (0x40b) |
| ReOpenFile | 0x77e1193d | 948 (0x3b4) |
| RemoveVectoredExceptionHandler | NTDLL.RtlRemoveVectored ExceptionHandler | 1034 (0x40a) |
| RemoveVectoredContinueHandler | NTDLL.RtlRemoveVectored ContinueHandler | 1033 (0x409) |
| RemoveSecureMemoryCacheCallback | 0x77e6d192 | 1032 (0x408) |
| RemoveLocalAlternateComputerNameW | 0x77e667b4 | 1031 (0x407) |
| RemoveLocalAlternateComputerNameA | 0x77e6689f | 1030 (0x406) |
| RemoveDllDirectory | api-ms-win-core-libraryloader-l 1-1-0.RemoveDllDirectory | 1029 (0x405) |
| RemoveDirectoryW | 0x77e1596a | 1028 (0x404) |
| RemoveDirectoryTransactedW | 0x77e677d9 | 1027 (0x403) |
| RemoveDirectoryTransactedA | 0x77e68641 | 1026 (0x402) |
| RemoveDirectoryA | 0x77e6fcb7 | 1025 (0x401) |
| ReleaseSRWLockShared | NTDLL.RtlReleaseSRW LockShared | 1022 (0x3fe) |
| ReleaseSRWLockExclusive | NTDLL.RtlReleaseSRW LockExclusive | 1021 (0x3fd) |
| ReleaseSemaphoreWhenCallbackReturns | NTDLL.TpCallbackRelease SemaphoreOnCompletion | 1024 (0x400) |
| ReleaseSemaphore | 0x77e26a0a | 1023 (0x3ff) |
| ReleaseMutexWhenCallbackReturns | NTDLL.TpCallbackRelease MutexOnCompletion | 1020 (0x3fc) |
| ReleaseMutex | 0x77e2c272 | 1019 (0x3fb) |
| ReleaseActCtx | 0x77e26e3f | 1018 (0x3fa) |
| RegUnLoadKeyW | 0x77e89541 | 1007 (0x3ef) |
| RegUnLoadKeyA | 0x77e89429 | 1006 (0x3ee) |
| RegSetValueExW | 0x77e297fc | 1005 (0x3ed) |
| RegSetValueExA | 0x77e24058 | 1004 (0x3ec) |
| RegSetKeySecurity | 0x77e14c28 | 1003 (0x3eb) |
| RegSaveKeyExW | 0x77e43d61 | 1002 (0x3ea) |
| RegSaveKeyExA | 0x77e89789 | 1001 (0x3e9) |
| RegRestoreKeyW | 0x77e440f1 | 1000 (0x3e8) |
| RegRestoreKeyA | 0x77e8964c | 999 (0x3e7) |
| RegQueryValueExW | 0x77e2d457 | 998 (0x3e6) |
| RegQueryValueExA | 0x77e2dafd | 997 (0x3e5) |
| RegQueryInfoKeyW | 0x77e247c7 | 996 (0x3e4) |
| RegQueryInfoKeyA | 0x77e192a3 | 995 (0x3e3) |
| RegOpenUserClassesRoot | 0x77e1f502 | 994 (0x3e2) |
| RegOpenKeyExW | 0x77e2cf71 | 993 (0x3e1) |
| RegOpenKeyExA | 0x77e2d91d | 992 (0x3e0) |
| RegOpenCurrentUser | 0x77e2682c | 991 (0x3df) |
| RegNotifyChangeKeyValue | 0x77e24fb4 | 990 (0x3de) |
| RegLoadMUIStringW | 0x77e1e0ef | 989 (0x3dd) |
| RegLoadMUIStringA | 0x77e89641 | 988 (0x3dc) |
| RegLoadKeyW | 0x77de2251 | 987 (0x3db) |
| RegLoadKeyA | 0x77e89239 | 986 (0x3da) |
| RegKrnInitialize | 0x77e2cd41 | 985 (0x3d9) |
| RegKrnGetGlobalState | 0x77e2cdea | 984 (0x3d8) |
| RegisterWowExec | 0x77e741cd | 1017 (0x3f9) |
| RegisterWowBaseHandlers | 0x77e6d100 | 1016 (0x3f8) |
| RegisterWaitForSingleObjectEx | 0x77e140bb | 1015 (0x3f7) |
| RegisterWaitForSingleObject | 0x77e1b93c | 1014 (0x3f6) |
| RegisterWaitForInputIdle | 0x77e2eac7 | 1013 (0x3f5) |
| RegisterConsoleVDM | 0x77e8cb98 | 1012 (0x3f4) |
| RegisterConsoleOS2 | 0x77e8ecc5 | 1011 (0x3f3) |
| RegisterConsoleIME | 0x77e1b532 | 1010 (0x3f2) |
| RegisterApplicationRestart | 0x77e13d6d | 1009 (0x3f1) |
| RegisterApplicationRecoveryCallback | 0x77e4109a | 1008 (0x3f0) |
| RegGetValueW | 0x77e2efff | 983 (0x3d7) |
| RegGetValueA | 0x77e14247 | 982 (0x3d6) |
| RegGetKeySecurity | 0x77e17c6e | 981 (0x3d5) |
| RegFlushKey | 0x77e13250 | 980 (0x3d4) |
| RegEnumValueW | 0x77e24cb9 | 979 (0x3d3) |
| RegEnumValueA | 0x77e18900 | 978 (0x3d2) |
| RegEnumKeyExW | 0x77e251d7 | 977 (0x3d1) |
| RegEnumKeyExA | 0x77e1e47c | 976 (0x3d0) |
| RegDisablePredefinedCacheEx | 0x77e140f5 | 975 (0x3cf) |
| RegDeleteValueW | 0x77e1bb43 | 974 (0x3ce) |
| RegDeleteValueA | 0x77e48683 | 973 (0x3cd) |
| RegDeleteTreeW | 0x77e12345 | 972 (0x3cc) |
| RegDeleteTreeA | 0x77e891c1 | 971 (0x3cb) |
| RegDeleteKeyExW | 0x77e169d4 | 970 (0x3ca) |
| RegDeleteKeyExA | 0x77e89062 | 969 (0x3c9) |
| RegCreateKeyExW | 0x77e21621 | 968 (0x3c8) |
| RegCreateKeyExA | 0x77e23636 | 967 (0x3c7) |
| RegCloseKey | 0x77e2d615 | 966 (0x3c6) |
| ReadThreadProfilingData | 0x77e78817 | 965 (0x3c5) |
| ReadProcessMemory | 0x77e1c79b | 964 (0x3c4) |
| ReadFileScatter | 0x77e11a8d | 963 (0x3c3) |
| ReadFileEx | 0x77e45515 | 962 (0x3c2) |
| ReadFile | 0x77e29b66 | 961 (0x3c1) |
| ReadDirectoryChangesW | 0x77e23502 | 960 (0x3c0) |
| ReadConsoleW | 0x77e426be | 959 (0x3bf) |
| ReadConsoleOutputW | 0x77e8d599 | 958 (0x3be) |
| ReadConsoleOutputCharacterW | 0x77e8dd01 | 957 (0x3bd) |
| ReadConsoleOutputCharacterA | 0x77e8dcdb | 956 (0x3bc) |
| ReadConsoleOutputAttribute | 0x77e8dd27 | 955 (0x3bb) |
| ReadConsoleOutputA | 0x77e8d5bd | 954 (0x3ba) |
| ReadConsoleInputW | 0x77e8d082 | 953 (0x3b9) |
| ReadConsoleInputExW | 0x77e8d0c9 | 952 (0x3b8) |
| ReadConsoleInputExA | 0x77e8d0a5 | 951 (0x3b7) |
| ReadConsoleInputA | 0x77e8d05f | 950 (0x3b6) |
| ReadConsoleA | 0x77e8c938 | 949 (0x3b5) |
| RaiseFailFastException | 0x77e7837d | 947 (0x3b3) |
| RaiseException | 0x77e1f11a | 946 (0x3b2) |
| QueueUserWorkItem | 0x77e29961 | 945 (0x3b1) |
| QueueUserAPC | 0x77e18eb9 | 944 (0x3b0) |
| QueryUnbiasedInterruptTime | 0x77e77d99 | 943 (0x3af) |
| QueryThreadProfiling | 0x77e787ee | 941 (0x3ad) |
| QueryThreadpoolStackInformation | 0x77e6fd91 | 942 (0x3ae) |
| QueryThreadCycleTime | 0x77e77ca1 | 940 (0x3ac) |
| QueryProcessCycleTime | 0x77e77ce4 | 939 (0x3ab) |
| QueryProcessAffinityUpdateMode | 0x77e6fdb1 | 938 (0x3aa) |
| QueryPerformanceFrequency | 0x77e22b1a | 937 (0x3a9) |
| QueryPerformanceCounter | 0x77e2c422 | 936 (0x3a8) |
| QueryMemoryResourceNotification | 0x77e78158 | 935 (0x3a7) |
| QueryInformationJobObject | 0x77e77401 | 934 (0x3a6) |
| QueryIdleProcessorCycleTimeEx | 0x77e77d5d | 933 (0x3a5) |
| QueryIdleProcessorCycleTime | 0x77e77d27 | 932 (0x3a4) |
| QueryFullProcessImageNameW | 0x77e26857 | 931 (0x3a3) |
| QueryFullProcessImageNameA | 0x77e6ffe0 | 930 (0x3a2) |
| QueryDosDeviceW | 0x77e1497c | 929 (0x3a1) |
| QueryDosDeviceA | 0x77e69a42 | 928 (0x3a0) |
| QueryDepthSList | NTDLL.RtlQueryDepthSList | 927 (0x39f) |
| QueryActCtxW | 0x77e22c7e | 926 (0x39e) |
| QueryActCtxSettingsW | 0x77e3c7f9 | 925 (0x39d) |
| PurgeComm | 0x77e7239a | 924 (0x39c) |
| PulseEvent | 0x77e45b04 | 923 (0x39b) |
| ProcessIdToSessionId | 0x77e2bc30 | 922 (0x39a) |
| Process32NextW | 0x77e2007a | 921 (0x399) |
| Process32Next | 0x77e462b5 | 920 (0x398) |
| Process32FirstW | 0x77e1ffe5 | 919 (0x397) |
| Process32First | 0x77e461ed | 918 (0x396) |
| PrivMoveFileIdentityW | 0x77e6ae51 | 917 (0x395) |
| PrivCopyFileExW | 0x77e485bd | 916 (0x394) |
| PrepareTape | 0x77e771de | 915 (0x393) |
| PowerSetRequest | 0x77e1c394 | 914 (0x392) |
| PowerCreateRequest | 0x77e1c1ee | 913 (0x391) |
| PowerClearRequest | 0x77e1c3fa | 912 (0x390) |
| PostQueuedCompletionStatus | 0x77e14e58 | 911 (0x38f) |
| PeekNamedPipe | 0x77e6fe83 | 910 (0x38e) |
| PeekConsoleInputW | 0x77e8d03c | 909 (0x38d) |
| PeekConsoleInputA | 0x77e8d019 | 908 (0x38c) |
| OutputDebugStringW | 0x77e16df2 | 907 (0x38b) |
| OutputDebugStringA | 0x77e1f0f0 | 906 (0x38a) |
| OpenWaitableTimerW | 0x77e6fca7 | 905 (0x389) |
| OpenWaitableTimerA | 0x77e700df | 904 (0x388) |
| OpenThreadToken | api-ms-win-core-processthreads-l 1-1-0.OpenThreadToken | 903 (0x387) |
| OpenThread | 0x77e35299 | 902 (0x386) |
| OpenSemaphoreW | 0x77e184cf | 901 (0x385) |
| OpenSemaphoreA | 0x77e7008d | 900 (0x384) |
| OpenProfileUserMapping | 0x77e66e13 | 899 (0x383) |
| OpenProcessToken | api-ms-win-core-processthreads-l 1-1-0.OpenProcessToken | 898 (0x382) |
| OpenProcess | 0x77e2549f | 897 (0x381) |
| OpenPrivateNamespaceW | 0x77e12e52 | 896 (0x380) |
| OpenPrivateNamespaceA | 0x77e6ff91 | 895 (0x37f) |
| OpenMutexW | 0x77e38edd | 894 (0x37e) |
| OpenMutexA | 0x77e203ca | 893 (0x37d) |
| OpenJobObjectW | 0x77e77376 | 892 (0x37c) |
| OpenJobObjectA | 0x77e77547 | 891 (0x37b) |
| OpenFileMappingW | 0x77e350ea | 890 (0x37a) |
| OpenFileMappingA | 0x77e2ed78 | 889 (0x379) |
| OpenFileById | 0x77e14ea3 | 888 (0x378) |
| OpenFile | 0x77e3d54f | 887 (0x377) |
| OpenEventW | 0x77e24a28 | 886 (0x376) |
| OpenEventA | 0x77e25416 | 885 (0x375) |
| OpenConsoleW | 0x77e20853 | 884 (0x374) |
| NotifyUILanguageChange | 0x77e81b50 | 883 (0x373) |
| NotifyMountMgr | 0x77e6fe73 | 882 (0x372) |
| NormalizeString | 0x77e7f97a | 881 (0x371) |
| NlsWriteEtwEvent | 0x77e6fdd1 | 880 (0x370) |
| NlsUpdateSystemLocale | 0x77e950f5 | 879 (0x36f) |
| NlsUpdateLocale | 0x77e950ea | 878 (0x36e) |
| NlsGetCacheUpdateCount | 0x77e1b38b | 877 (0x36d) |
| NlsEventDataDescCreate | 0x77e6fdc1 | 876 (0x36c) |
| NlsCheckPolicy | 0x77e950df | 875 (0x36b) |
| NeedCurrentDirectoryForExePathW | 0x77e3c4f5 | 874 (0x36a) |
| NeedCurrentDirectoryForExePathA | 0x77e6fc97 | 873 (0x369) |
| MultiByteToWideChar | 0x77e2ef07 | 872 (0x368) |
| MulDiv | 0x77e2bf70 | 871 (0x367) |
| MoveFileWithProgressW | 0x77e28d8c | 870 (0x366) |
| MoveFileWithProgressA | 0x77e43f98 | 869 (0x365) |
| MoveFileW | 0x77e46ed6 | 868 (0x364) |
| MoveFileTransactedW | 0x77e6bea9 | 867 (0x363) |
| MoveFileTransactedA | 0x77e6be06 | 866 (0x362) |
| MoveFileExW | 0x77e28db0 | 865 (0x361) |
| MoveFileExA | 0x77e43f78 | 864 (0x360) |
| MoveFileA | 0x77e6bf49 | 863 (0x35f) |
| Module32NextW | 0x77e1c6ec | 862 (0x35e) |
| Module32Next | 0x77e71066 | 861 (0x35d) |
| Module32FirstW | 0x77e1ca02 | 860 (0x35c) |
| Module32First | 0x77e70f7d | 859 (0x35b) |
| MapViewOfFileExNuma | 0x77e6fc87 | 858 (0x35a) |
| MapViewOfFileEx | 0x77e2d7ec | 857 (0x359) |
| MapViewOfFile | 0x77e293db | 856 (0x358) |
| MapUserPhysicalPagesScatter | 0x77e780b9 | 855 (0x357) |
| MapUserPhysicalPages | 0x77e7808b | 854 (0x356) |
| LZStart | 0x77e66e13 | 826 (0x33a) |
| LZSeek | 0x77e71302 | 825 (0x339) |
| LZRead | 0x77e71389 | 824 (0x338) |
| LZOpenFileW | 0x77e71a72 | 823 (0x337) |
| LZOpenFileA | 0x77e719a5 | 822 (0x336) |
| LZInit | 0x77e711b6 | 821 (0x335) |
| LZDone | 0x77e88617 | 820 (0x334) |
| LZCreateFileW | 0x77e718d0 | 819 (0x333) |
| LZCopy | 0x77e66e1c | 818 (0x332) |
| LZCloseFile | 0x77e71597 | 817 (0x331) |
| LZClose | 0x77e7160f | 816 (0x330) |
| lstrlenW | 0x77e2bda0 | 1362 (0x552) |
| lstrlenA | 0x77e2a032 | 1361 (0x551) |
| lstrlen | 0x77e2a032 | 1360 (0x550) |
| lstrcpyW | 0x77e190c7 | 1356 (0x54c) |
| lstrcpynW | 0x77e47928 | 1359 (0x54f) |
| lstrcpynA | 0x77e18ea1 | 1358 (0x54e) |
| lstrcpyn | 0x77e18ea1 | 1357 (0x54d) |
| lstrcpyA | 0x77e2a5b7 | 1355 (0x54b) |
| lstrcpy | 0x77e2a5b7 | 1354 (0x54a) |
| lstrcmpW | 0x77e35321 | 1350 (0x546) |
| lstrcmpiW | 0x77e2aad7 | 1353 (0x549) |
| lstrcmpiA | 0x77e22ad5 | 1352 (0x548) |
| lstrcmpi | 0x77e22ad5 | 1351 (0x547) |
| lstrcmpA | 0x77e19121 | 1349 (0x545) |
| lstrcmp | 0x77e19121 | 1348 (0x544) |
| lstrcatW | 0x77e466bc | 1347 (0x543) |
| lstrcatA | 0x77e2a629 | 1346 (0x542) |
| lstrcat | 0x77e2a629 | 1345 (0x541) |
| LockResource | 0x77e202d9 | 853 (0x355) |
| LockFileEx | 0x77e480b5 | 852 (0x354) |
| LockFile | 0x77e47b43 | 851 (0x353) |
| LocateXStateFeature | 0x77e78578 | 850 (0x352) |
| LocalUnlock | 0x77e256c5 | 848 (0x350) |
| LocalSize | 0x77e205e2 | 847 (0x34f) |
| LocalShrink | 0x77e6d55d | 846 (0x34e) |
| LocalReAlloc | 0x77e26e27 | 845 (0x34d) |
| LocalLock | 0x77e256ad | 844 (0x34c) |
| LocalHandle | 0x77e62a25 | 843 (0x34b) |
| LocalFree | 0x77e2cbfc | 842 (0x34a) |
| LocalFlags | 0x77e628e4 | 841 (0x349) |
| LocalFileTimeToFileTime | 0x77e17592 | 840 (0x348) |
| LocaleNameToLCID | 0x77e22b4b | 849 (0x351) |
| LocalCompact | 0x77e6d547 | 839 (0x347) |
| LocalAlloc | 0x77e2cc66 | 838 (0x346) |
| LoadStringBaseW | 0x77e6d60f | 837 (0x345) |
| LoadStringBaseExW | 0x77e244d3 | 836 (0x344) |
| LoadResource | 0x77e29c72 | 835 (0x343) |
| LoadModule | 0x77e6f29d | 834 (0x342) |
| LoadLibraryW | 0x77e2ef42 | 833 (0x341) |
| LoadLibraryExW | 0x77e25079 | 832 (0x340) |
| LoadLibraryExA | 0x77e24466 | 831 (0x33f) |
| LoadLibraryA | 0x77e2dc65 | 830 (0x33e) |
| LoadAppInitDlls | 0x77e2f1a1 | 829 (0x33d) |
| LeaveCriticalSectionWhenCallbackReturns | NTDLL.TpCallbackLeave CriticalSectionOnCompletion | 828 (0x33c) |
| LeaveCriticalSection | NTDLL.RtlLeaveCriticalSection | 827 (0x33b) |
| LCMapStringW | 0x77e3528c | 815 (0x32f) |
| LCMapStringEx | 0x77e6fe63 | 814 (0x32e) |
| LCMapStringA | 0x77e3f920 | 813 (0x32d) |
| LCIDToLocaleName | 0x77e155ff | 812 (0x32c) |
| K32QueryWorkingSetEx | 0x77e1ba07 | 811 (0x32b) |
| K32QueryWorkingSet | 0x77e3efaf | 810 (0x32a) |
| K32InitializeProcessForWsWatch | 0x77e8fe91 | 809 (0x329) |
| K32GetWsChangesEx | 0x77e8ff2a | 808 (0x328) |
| K32GetWsChanges | 0x77e8ff0a | 807 (0x327) |
| K32GetProcessMemoryInfo | 0x77e45bb1 | 806 (0x326) |
| K32GetProcessImageFileNameW | 0x77e8ff4b | 805 (0x325) |
| K32GetProcessImageFileNameA | 0x77e8ffd4 | 804 (0x324) |
| K32GetPerformanceInfo | 0x77e16113 | 803 (0x323) |
| K32GetModuleInformation | 0x77e15ef2 | 802 (0x322) |
| K32GetModuleFileNameExW | 0x77e1c91b | 801 (0x321) |
| K32GetModuleFileNameExA | 0x77e46c0a | 800 (0x320) |
| K32GetModuleBaseNameW | 0x77e18f9f | 799 (0x31f) |
| K32GetModuleBaseNameA | 0x77e1901b | 798 (0x31e) |
| K32GetMappedFileNameW | 0x77e15ff5 | 797 (0x31d) |
| K32GetMappedFileNameA | 0x77e15f8c | 796 (0x31c) |
| K32GetDeviceDriverFileNameW | 0x77e8fbec | 795 (0x31b) |
| K32GetDeviceDriverFileNameA | 0x77e8fb71 | 794 (0x31a) |
| K32GetDeviceDriverBaseNameW | 0x77e29379 | 793 (0x319) |
| K32GetDeviceDriverBaseNameA | 0x77e2b977 | 792 (0x318) |
| K32EnumProcessModulesEx | 0x77e8fe0e | 790 (0x316) |
| K32EnumProcessModules | 0x77e1cc52 | 789 (0x315) |
| K32EnumProcesses | 0x77e46c74 | 791 (0x317) |
| K32EnumPageFilesW | 0x77e8fc4c | 788 (0x314) |
| K32EnumPageFilesA | 0x77e8fdc4 | 787 (0x313) |
| K32EnumDeviceDrivers | 0x77e2bae6 | 786 (0x312) |
| K32EmptyWorkingSet | 0x77e8fb06 | 785 (0x311) |
| IsWow64Process | 0x77e2542e | 784 (0x310) |
| IsValidLocaleName | 0x77e3dcfc | 783 (0x30f) |
| IsValidLocale | 0x77e244eb | 782 (0x30e) |
| IsValidLanguageGroup | 0x77e6fc77 | 781 (0x30d) |
| IsValidCodePage | 0x77e3b915 | 780 (0x30c) |
| IsValidCalDateTime | 0x77e3e2fe | 779 (0x30b) |
| IsTimeZoneRedirectionEnabled | 0x77e3ece5 | 778 (0x30a) |
| IsThreadpoolTimerSet | NTDLL.TpIsTimerSet | 777 (0x309) |
| IsThreadAFiber | 0x77e29617 | 776 (0x308) |
| IsSystemResumeAutomatic | 0x77e6ed7b | 775 (0x307) |
| IsProcessorFeaturePresent | 0x77e36c1e | 774 (0x306) |
| IsProcessInJob | 0x77e4407a | 773 (0x305) |
| IsNormalizedString | 0x77e7f9f2 | 772 (0x304) |
| IsNLSDefinedString | 0x77e156a2 | 771 (0x303) |
| IsDebuggerPresent | 0x77e27dd2 | 770 (0x302) |
| IsDBCSLeadByteEx | 0x77e4683e | 769 (0x301) |
| IsDBCSLeadByte | 0x77e2543e | 768 (0x300) |
| IsCalendarLeapYear | 0x77e7db22 | 767 (0x2ff) |
| IsCalendarLeapMonth | 0x77e7dbaa | 766 (0x2fe) |
| IsCalendarLeapDay | 0x77e7dc41 | 765 (0x2fd) |
| IsBadWritePtr | 0x77e18df0 | 764 (0x2fc) |
| IsBadStringPtrW | 0x77e46f48 | 763 (0x2fb) |
| IsBadStringPtrA | 0x77e19223 | 762 (0x2fa) |
| IsBadReadPtr | 0x77e1bc63 | 761 (0x2f9) |
| IsBadHugeWritePtr | 0x77e6f045 | 760 (0x2f8) |
| IsBadHugeReadPtr | 0x77e6f035 | 759 (0x2f7) |
| IsBadCodePtr | 0x77e478f9 | 758 (0x2f6) |
| InvalidateConsoleDIBits | 0x77e8d8d9 | 757 (0x2f5) |
| InterlockedPushListSList | NTDLL.RtlInterlocked PushListSList | 2 (0x2) |
| InterlockedPushEntrySList | NTDLL.RtlInterlocked PushEntrySList | 756 (0x2f4) |
| InterlockedPopEntrySList | NTDLL.RtlInterlocked PopEntrySList | 755 (0x2f3) |
| InterlockedIncrement | 0x77e2c3b0 | 754 (0x2f2) |
| InterlockedFlushSList | NTDLL.RtlInterlocked FlushSList | 753 (0x2f1) |
| InterlockedExchangeAdd | 0x77e29aa0 | 752 (0x2f0) |
| InterlockedExchange | 0x77e2c452 | 751 (0x2ef) |
| InterlockedDecrement | 0x77e2c3e0 | 750 (0x2ee) |
| InterlockedCompareExchange64 | NTDLL.RtlInterlocked CompareExchange64 | 748 (0x2ec) |
| InterlockedCompareExchange | 0x77e2c3fb | 749 (0x2ed) |
| InitOnceInitialize | NTDLL.RtlRunOnceInitialize | 739 (0x2e3) |
| InitOnceExecuteOnce | 0x77e2bbad | 738 (0x2e2) |
| InitOnceComplete | 0x77e40e55 | 737 (0x2e1) |
| InitOnceBeginInitialize | 0x77e40e7d | 736 (0x2e0) |
| InitializeSRWLock | NTDLL.RtlInitialize SRWLock | 747 (0x2eb) |
| InitializeSListHead | NTDLL.RtlInitialize SListHead | 746 (0x2ea) |
| InitializeProcThreadAttributeList | api-ms-win-core-processthreads-l 1-1-0.InitializeProcThreadAttributeList | 745 (0x2e9) |
| InitializeCriticalSectionEx | 0x77e2dd98 | 744 (0x2e8) |
| InitializeCriticalSectionAndSpinCount | 0x77e2ea21 | 743 (0x2e7) |
| InitializeCriticalSection | NTDLL.RtlInitialize CriticalSection | 742 (0x2e6) |
| InitializeContext | 0x77e7847f | 741 (0x2e5) |
| InitializeConditionVariable | NTDLL.RtlInitialize ConditionVariable | 740 (0x2e4) |
| InitAtomTable | 0x77de2493 | 735 (0x2df) |
| IdnToUnicode | 0x77e7fa97 | 734 (0x2de) |
| IdnToNameprepUnicode | 0x77e7fa44 | 733 (0x2dd) |
| IdnToAscii | 0x77e19085 | 732 (0x2dc) |
| HeapWalk | 0x77e11ec8 | 731 (0x2db) |
| HeapValidate | 0x77e22e65 | 730 (0x2da) |
| HeapUnlock | 0x77e11eb0 | 729 (0x2d9) |
| HeapSummary | 0x77e6fc67 | 728 (0x2d8) |
| HeapSize | NTDLL.RtlSizeHeap | 727 (0x2d7) |
| HeapSetInformation | 0x77e2f6b4 | 726 (0x2d6) |
| HeapReAlloc | NTDLL.RtlReAllocateHeap | 725 (0x2d5) |
| HeapQueryInformation | 0x77e6fc57 | 724 (0x2d4) |
| HeapLock | 0x77e11e98 | 723 (0x2d3) |
| HeapFree | 0x77e2c3c0 | 722 (0x2d2) |
| HeapDestroy | 0x77e22b8d | 721 (0x2d1) |
| HeapCreate | 0x77e2ef74 | 720 (0x2d0) |
| HeapCompact | 0x77e17f6b | 719 (0x2cf) |
| HeapAlloc | NTDLL.RtlAllocateHeap | 718 (0x2ce) |
| Heap32Next | 0x77e70d38 | 717 (0x2cd) |
| Heap32ListNext | 0x77e70ab5 | 716 (0x2cc) |
| Heap32ListFirst | 0x77e70a0b | 715 (0x2cb) |
| Heap32First | 0x77e70b4d | 714 (0x2ca) |
| GlobalWire | 0x77e6d14a | 713 (0x2c9) |
| GlobalUnWire | 0x77e6d15a | 710 (0x2c6) |
| GlobalUnlock | 0x77e2a183 | 712 (0x2c8) |
| GlobalUnfix | 0x77e6d130 | 711 (0x2c7) |
| GlobalSize | 0x77e1f132 | 709 (0x2c5) |
| GlobalReAlloc | 0x77e1f248 | 708 (0x2c4) |
| GlobalMemoryStatusEx | 0x77e191f8 | 707 (0x2c3) |
| GlobalMemoryStatus | 0x77e228f8 | 706 (0x2c2) |
| GlobalLock | 0x77e2a235 | 705 (0x2c1) |
| GlobalHandle | 0x77e2a4f4 | 704 (0x2c0) |
| GlobalGetAtomNameW | 0x77e1f4ca | 703 (0x2bf) |
| GlobalGetAtomNameA | 0x77e6880c | 702 (0x2be) |
| GlobalFree | 0x77e2a13d | 701 (0x2bd) |
| GlobalFlags | 0x77e47b5b | 700 (0x2bc) |
| GlobalFix | 0x77e6d116 | 699 (0x2bb) |
| GlobalFindAtomW | 0x77e295e5 | 698 (0x2ba) |
| GlobalFindAtomA | 0x77e480fd | 697 (0x2b9) |
| GlobalDeleteAtom | 0x77e1f720 | 696 (0x2b8) |
| GlobalCompact | 0x77e6d547 | 695 (0x2b7) |
| GlobalAlloc | 0x77e2a125 | 694 (0x2b6) |
| GlobalAddAtomW | 0x77e26c21 | 693 (0x2b5) |
| GlobalAddAtomA | 0x77e188e6 | 692 (0x2b4) |
| GetXStateFeaturesMask | 0x77e78640 | 691 (0x2b3) |
| GetWriteWatch | 0x77e780e7 | 690 (0x2b2) |
| GetWindowsDirectoryW | 0x77e209ba | 689 (0x2b1) |
| GetWindowsDirectoryA | 0x77e477a2 | 688 (0x2b0) |
| GetVolumePathNameW | 0x77e369e7 | 685 (0x2ad) |
| GetVolumePathNamesForVolumeNameW | 0x77e1bf19 | 687 (0x2af) |
| GetVolumePathNamesForVolumeNameA | 0x77e762e5 | 686 (0x2ae) |
| GetVolumePathNameA | 0x77e75ec6 | 684 (0x2ac) |
| GetVolumeNameForVolumeMountPointW | 0x77e1bd60 | 683 (0x2ab) |
| GetVolumeNameForVolumeMountPointA | 0x77e756f5 | 682 (0x2aa) |
| GetVolumeInformationW | 0x77e361a1 | 681 (0x2a9) |
| GetVolumeInformationByHandleW | 0x77e400c1 | 680 (0x2a8) |
| GetVolumeInformationA | 0x77e45cc2 | 679 (0x2a7) |
| GetVersionExW | 0x77e299a1 | 678 (0x2a6) |
| GetVersionExA | 0x77e2dd80 | 677 (0x2a5) |
| GetVersion | 0x77e228f1 | 676 (0x2a4) |
| GetVDMCurrentDirectories | 0x77e74025 | 675 (0x2a3) |
| GetUserPreferredUILanguages | 0x77e495af | 674 (0x2a2) |
| GetUserGeoID | 0x77e47640 | 673 (0x2a1) |
| GetUserDefaultUILanguage | 0x77e22b7b | 672 (0x2a0) |
| GetUserDefaultLocaleName | 0x77e6fe53 | 671 (0x29f) |
| GetUserDefaultLCID | 0x77e2f7b7 | 669 (0x29d) |
| GetUserDefaultLangID | 0x77e47b0c | 670 (0x29e) |
| GetUILanguageInfo | 0x77e3d0e7 | 668 (0x29c) |
| GetTimeZoneInformationForYear | 0x77e48c6b | 667 (0x29b) |
| GetTimeZoneInformation | 0x77e191e0 | 666 (0x29a) |
| GetTimeFormatW | 0x77e2afc0 | 665 (0x299) |
| GetTimeFormatEx | 0x77e7f5aa | 664 (0x298) |
| GetTimeFormatA | 0x77e47201 | 663 (0x297) |
| GetTickCount64 | 0x77e1f108 | 661 (0x295) |
| GetTickCount | 0x77e2c260 | 662 (0x296) |
| GetThreadUILanguage | 0x77e1b3b7 | 660 (0x294) |
| GetThreadTimes | 0x77e15e8b | 659 (0x293) |
| GetThreadSelectorEntry | 0x77e40411 | 658 (0x292) |
| GetThreadPriorityBoost | 0x77e6fc47 | 657 (0x291) |
| GetThreadPriority | 0x77e295ff | 656 (0x290) |
| GetThreadPreferredUILanguages | 0x77e22b63 | 655 (0x28f) |
| GetThreadLocale | 0x77e21ce3 | 654 (0x28e) |
| GetThreadIOPendingFlag | 0x77e7090b | 651 (0x28b) |
| GetThreadIdealProcessorEx | 0x77e709bf | 653 (0x28d) |
| GetThreadId | 0x77e28742 | 652 (0x28c) |
| GetThreadGroupAffinity | 0x77e7094a | 650 (0x28a) |
| GetThreadErrorMode | 0x77e69d06 | 649 (0x289) |
| GetThreadContext | 0x77e48bd4 | 648 (0x288) |
| GetTempPathW | 0x77e19208 | 647 (0x287) |
| GetTempPathA | 0x77e48154 | 646 (0x286) |
| GetTempFileNameW | 0x77e17039 | 645 (0x285) |
| GetTempFileNameA | 0x77e48342 | 644 (0x284) |
| GetTapeStatus | 0x77e77355 | 643 (0x283) |
| GetTapePosition | 0x77e77182 | 642 (0x282) |
| GetTapeParameters | 0x77e772b8 | 641 (0x281) |
| GetSystemWow64DirectoryW | 0x77e1b532 | 640 (0x280) |
| GetSystemWow64DirectoryA | 0x77e1b532 | 639 (0x27f) |
| GetSystemWindowsDirectoryW | 0x77e2ee93 | 638 (0x27e) |
| GetSystemWindowsDirectoryA | 0x77e11fa7 | 637 (0x27d) |
| GetSystemTimes | 0x77e3f025 | 636 (0x27c) |
| GetSystemTimeAsFileTime | 0x77e2d816 | 635 (0x27b) |
| GetSystemTimeAdjustment | 0x77e1fb10 | 634 (0x27a) |
| GetSystemTime | 0x77e2ea51 | 633 (0x279) |
| GetSystemRegistryQuota | 0x77e6f253 | 632 (0x278) |
| GetSystemPreferredUILanguages | 0x77e1560c | 631 (0x277) |
| GetSystemPowerStatus | 0x77e1e257 | 630 (0x276) |
| GetSystemInfo | 0x77e2dcb2 | 629 (0x275) |
| GetSystemFirmwareTable | 0x77e48f68 | 628 (0x274) |
| GetSystemFileCacheSize | 0x77e77f2f | 627 (0x273) |
| GetSystemDirectoryW | 0x77e2ee37 | 626 (0x272) |
| GetSystemDirectoryA | 0x77e2947f | 625 (0x271) |
| GetSystemDEPPolicy | 0x77e6eedc | 620 (0x26c) |
| GetSystemDefaultUILanguage | 0x77e17573 | 624 (0x270) |
| GetSystemDefaultLocaleName | 0x77e12f82 | 623 (0x26f) |
| GetSystemDefaultLCID | 0x77e278aa | 621 (0x26d) |
| GetSystemDefaultLangID | 0x77e1dfbe | 622 (0x26e) |
| GetStringTypeW | 0x77e3532e | 619 (0x26b) |
| GetStringTypeExW | 0x77e1c438 | 618 (0x26a) |
| GetStringTypeExA | 0x77e16b3d | 617 (0x269) |
| GetStringTypeA | 0x77e16b3d | 616 (0x268) |
| GetStringScripts | 0x77e40be8 | 615 (0x267) |
| GetStdHandle | 0x77e38e97 | 614 (0x266) |
| GetStartupInfoW | 0x77e2e2dd | 613 (0x265) |
| GetStartupInfoA | 0x77de1e10 | 612 (0x264) |
| GetShortPathNameW | 0x77e2134c | 611 (0x263) |
| GetShortPathNameA | 0x77e49cee | 610 (0x262) |
| GetQueuedCompletionStatusEx | 0x77e6fc37 | 609 (0x261) |
| GetQueuedCompletionStatus | 0x77e14e40 | 608 (0x260) |
| GetProfileStringW | 0x77e4776e | 607 (0x25f) |
| GetProfileStringA | 0x77e17bbc | 606 (0x25e) |
| GetProfileSectionW | 0x77e463b1 | 605 (0x25d) |
| GetProfileSectionA | 0x77e6997f | 604 (0x25c) |
| GetProfileIntW | 0x77e17b9e | 603 (0x25b) |
| GetProfileIntA | 0x77e1e04d | 602 (0x25a) |
| GetProductInfo | 0x77e18f5b | 601 (0x259) |
| GetProcessWorkingSetSizeEx | 0x77e160c3 | 599 (0x257) |
| GetProcessWorkingSetSize | 0x77e160a3 | 598 (0x256) |
| GetProcessVersion | 0x77e17735 | 597 (0x255) |
| GetProcessUserModeExceptionPolicy | 0x77e6f23f | 596 (0x254) |
| GetProcessTimes | 0x77e1fbd5 | 595 (0x253) |
| GetProcessShutdownParameters | 0x77e6f055 | 594 (0x252) |
| GetProcessPriorityBoost | 0x77e6f147 | 593 (0x251) |
| GetProcessPreferredUILanguages | 0x77e6fc27 | 592 (0x250) |
| GetProcessorSystemCycleTime | 0x77e6ef13 | 600 (0x258) |
| GetProcessIoCounters | 0x77e6f181 | 591 (0x24f) |
| GetProcessIdOfThread | 0x77e3f153 | 590 (0x24e) |
| GetProcessId | 0x77e1b9b8 | 589 (0x24d) |
| GetProcessHeaps | 0x77e47744 | 588 (0x24c) |
| GetProcessHeap | 0x77e2fcdd | 587 (0x24b) |
| GetProcessHandleCount | 0x77e6f1b2 | 586 (0x24a) |
| GetProcessGroupAffinity | 0x77e6f0c8 | 585 (0x249) |
| GetProcessDEPPolicy | 0x77e6f1ec | 584 (0x248) |
| GetProcessAffinityMask | 0x77e22bdd | 583 (0x247) |
| GetProcAddress | 0x77e2cc94 | 582 (0x246) |
| GetPrivateProfileStructW | 0x77e6954e | 581 (0x245) |
| GetPrivateProfileStructA | 0x77e693d2 | 580 (0x244) |
| GetPrivateProfileStringW | 0x77e17f83 | 579 (0x243) |
| GetPrivateProfileStringA | 0x77e1de99 | 578 (0x242) |
| GetPrivateProfileSectionW | 0x77e16a13 | 577 (0x241) |
| GetPrivateProfileSectionNamesW | 0x77e15c8e | 576 (0x240) |
| GetPrivateProfileSectionNamesA | 0x77e693b1 | 575 (0x23f) |
| GetPrivateProfileSectionA | 0x77e6929d | 574 (0x23e) |
| GetPrivateProfileIntW | 0x77e17acd | 573 (0x23d) |
| GetPrivateProfileIntA | 0x77e1dfe8 | 572 (0x23c) |
| GetPriorityClass | 0x77e3d0ff | 571 (0x23b) |
| GetPhysicallyInstalledSystemMemory | 0x77e48d00 | 570 (0x23a) |
| GetOverlappedResult | 0x77e23629 | 569 (0x239) |
| GetOEMCP | 0x77e243c2 | 568 (0x238) |
| GetNumberOfConsoleMouseButtons | 0x77e8e060 | 567 (0x237) |
| GetNumberOfConsoleInputEvents | 0x77e8ddf1 | 566 (0x236) |
| GetNumberOfConsoleFonts | 0x77e8dd96 | 565 (0x235) |
| GetNumberFormatW | 0x77e1c3d2 | 564 (0x234) |
| GetNumberFormatEx | 0x77e3eee2 | 563 (0x233) |
| GetNumberFormatA | 0x77e2a7eb | 562 (0x232) |
| GetNumaProximityNodeEx | 0x77e6e62a | 561 (0x231) |
| GetNumaProximityNode | 0x77e6e77e | 560 (0x230) |
| GetNumaProcessorNodeEx | 0x77e6e49e | 559 (0x22f) |
| GetNumaProcessorNode | 0x77e6e6ad | 558 (0x22e) |
| GetNumaNodeProcessorMaskEx | 0x77e6e55a | 557 (0x22d) |
| GetNumaNodeProcessorMask | 0x77e6e6fa | 556 (0x22c) |
| GetNumaNodeNumberFromHandle | 0x77e6e66d | 555 (0x22b) |
| GetNumaHighestNodeNumber | 0x77e6e452 | 554 (0x22a) |
| GetNumaAvailableMemoryNodeEx | 0x77e6e5c1 | 553 (0x229) |
| GetNumaAvailableMemoryNode | 0x77e6e75f | 552 (0x228) |
| GetNLSVersionEx | 0x77e8429b | 539 (0x21b) |
| GetNLSVersion | 0x77e1477e | 538 (0x21a) |
| GetNextVDMCommand | 0x77e735b3 | 551 (0x227) |
| GetNativeSystemInfo | 0x77e1c45b | 550 (0x226) |
| GetNamedPipeServerSessionId | 0x77e6e1dd | 549 (0x225) |
| GetNamedPipeServerProcessId | 0x77e6e1a1 | 548 (0x224) |
| GetNamedPipeInfo | 0x77e6de19 | 547 (0x223) |
| GetNamedPipeHandleStateW | 0x77e6dd1c | 546 (0x222) |
| GetNamedPipeHandleStateA | 0x77e6e219 | 545 (0x221) |
| GetNamedPipeClientSessionId | 0x77e6e165 | 544 (0x220) |
| GetNamedPipeClientProcessId | 0x77e6e129 | 543 (0x21f) |
| GetNamedPipeClientComputerNameW | 0x77e6fc07 | 542 (0x21e) |
| GetNamedPipeClientComputerNameA | 0x77e6e011 | 541 (0x21d) |
| GetNamedPipeAttribute | 0x77e6fbf7 | 540 (0x21c) |
| GetModuleHandleW | 0x77e2ccac | 537 (0x219) |
| GetModuleHandleExW | 0x77e254b7 | 536 (0x218) |
| GetModuleHandleExA | 0x77e1fc06 | 535 (0x217) |
| GetModuleHandleA | 0x77e2d8f3 | 534 (0x216) |
| GetModuleFileNameW | 0x77e2ef35 | 533 (0x215) |
| GetModuleFileNameA | 0x77e2d75a | 532 (0x214) |
| GetMaximumProcessorGroupCount | 0x77e12244 | 531 (0x213) |
| GetMaximumProcessorCount | 0x77e6efa3 | 530 (0x212) |
| GetMailslotInfo | 0x77e6d573 | 529 (0x211) |
| GetLongPathNameW | 0x77e34f41 | 528 (0x210) |
| GetLongPathNameTransactedW | 0x77e744d1 | 527 (0x20f) |
| GetLongPathNameTransactedA | 0x77e7442d | 526 (0x20e) |
| GetLongPathNameA | 0x77e6fc17 | 525 (0x20d) |
| GetLogicalProcessorInformationEx | api-ms-win-core-sysinfo-l 1-1-0.GetLogical ProcessorInformationEx | 524 (0x20c) |
| GetLogicalProcessorInformation | 0x77e1231b | 523 (0x20b) |
| GetLogicalDriveStringsW | 0x77e12f3f | 521 (0x209) |
| GetLogicalDriveStringsA | 0x77e28ad6 | 520 (0x208) |
| GetLogicalDrives | 0x77e2544e | 522 (0x20a) |
| GetLocalTime | 0x77e2aaef | 516 (0x204) |
| GetLocaleInfoW | 0x77e2f7c9 | 519 (0x207) |
| GetLocaleInfoEx | 0x77e15196 | 518 (0x206) |
| GetLocaleInfoA | 0x77e1b373 | 517 (0x205) |
| GetLastError | 0x77e2cde0 | 515 (0x203) |
| GetLargestConsoleWindowSize | 0x77e8de5e | 514 (0x202) |
| GetLargePageMinimum | 0x77e7814d | 513 (0x201) |
| GetHandleInformation | 0x77e17753 | 512 (0x200) |
| GetHandleContext | 0x77e77722 | 511 (0x1ff) |
| GetGeoInfoW | 0x77e7ede3 | 510 (0x1fe) |
| GetGeoInfoA | 0x77e7e267 | 509 (0x1fd) |
| GetFullPathNameW | 0x77e2f6d7 | 508 (0x1fc) |
| GetFullPathNameTransactedW | 0x77e66f89 | 507 (0x1fb) |
| GetFullPathNameTransactedA | 0x77e66ee2 | 506 (0x1fa) |
| GetFullPathNameA | 0x77e2eaba | 505 (0x1f9) |
| GetFirmwareEnvironmentVariableW | 0x77e6ceb9 | 504 (0x1f8) |
| GetFirmwareEnvironmentVariableA | 0x77e6cfda | 503 (0x1f7) |
| GetFinalPathNameByHandleW | 0x77e14fcb | 502 (0x1f6) |
| GetFinalPathNameByHandleA | 0x77e6fe43 | 501 (0x1f5) |
| GetFileType | 0x77e36ab4 | 500 (0x1f4) |
| GetFileTime | 0x77e216fc | 499 (0x1f3) |
| GetFileSizeEx | 0x77e299b1 | 498 (0x1f2) |
| GetFileSize | 0x77e20823 | 497 (0x1f1) |
| GetFileMUIPath | 0x77e13dab | 496 (0x1f0) |
| GetFileMUIInfo | 0x77e6fe33 | 495 (0x1ef) |
| GetFileInformationByHandleEx | 0x77e29a28 | 494 (0x1ee) |
| GetFileInformationByHandle | 0x77e2bdad | 493 (0x1ed) |
| GetFileBandwidthReservation | 0x77e6a6b6 | 492 (0x1ec) |
| GetFileAttributesW | 0x77e34c14 | 491 (0x1eb) |
| GetFileAttributesTransactedW | 0x77e1202d | 490 (0x1ea) |
| GetFileAttributesTransactedA | 0x77e6b342 | 489 (0x1e9) |
| GetFileAttributesExW | 0x77e2307e | 488 (0x1e8) |
| GetFileAttributesExA | 0x77e19181 | 487 (0x1e7) |
| GetFileAttributesA | 0x77e36c06 | 486 (0x1e6) |
| GetExpandedNameW | 0x77e717ab | 485 (0x1e5) |
| GetExpandedNameA | 0x77e716ef | 484 (0x1e4) |
| GetExitCodeThread | 0x77e17021 | 483 (0x1e3) |
| GetExitCodeProcess | 0x77e3614d | 482 (0x1e2) |
| GetErrorMode | 0x77e11ee0 | 481 (0x1e1) |
| GetEraNameCountedString | 0x77e6fe23 | 480 (0x1e0) |
| GetEnvironmentVariableW | 0x77e35271 | 479 (0x1df) |
| GetEnvironmentVariableA | 0x77e2d742 | 478 (0x1de) |
| GetEnvironmentStringsW | 0x77e36bc4 | 477 (0x1dd) |
| GetEnvironmentStringsA | 0x77e3c891 | 476 (0x1dc) |
| GetEnvironmentStrings | 0x77e3c88a | 475 (0x1db) |
| GetEnabledXStateFeatures | 0x77e78550 | 474 (0x1da) |
| GetDynamicTimeZoneInformation | 0x77e12d8f | 473 (0x1d9) |
| GetDurationFormatEx | 0x77e3ff35 | 472 (0x1d8) |
| GetDurationFormat | 0x77e3fefa | 471 (0x1d7) |
| GetDriveTypeW | 0x77e2ed42 | 470 (0x1d6) |
| GetDriveTypeA | 0x77e18d50 | 469 (0x1d5) |
| GetDllDirectoryW | 0x77e6d8e6 | 468 (0x1d4) |
| GetDllDirectoryA | 0x77e6d984 | 467 (0x1d3) |
| GetDiskFreeSpaceW | 0x77e13c3c | 466 (0x1d2) |
| GetDiskFreeSpaceExW | 0x77e29949 | 465 (0x1d1) |
| GetDiskFreeSpaceExA | 0x77e43ccb | 464 (0x1d0) |
| GetDiskFreeSpaceA | 0x77e3f908 | 463 (0x1cf) |
| GetDevicePowerState | 0x77e6ed32 | 462 (0x1ce) |
| GetDefaultCommConfigW | 0x77e72fe9 | 461 (0x1cd) |
| GetDefaultCommConfigA | 0x77e730f9 | 460 (0x1cc) |
| GetDateFormatW | 0x77e2b1a2 | 459 (0x1cb) |
| GetDateFormatEx | 0x77e7f62f | 458 (0x1ca) |
| GetDateFormatA | 0x77e470b5 | 457 (0x1c9) |
| GetCurrentThreadId | 0x77e2c410 | 456 (0x1c8) |
| GetCurrentThread | 0x77e2d799 | 455 (0x1c7) |
| GetCurrentProcessorNumberEx | NTDLL.RtlGetCurrent ProcessorNumberEx | 454 (0x1c6) |
| GetCurrentProcessorNumber | NTDLL.RtlGetCurrent ProcessorNumber | 453 (0x1c5) |
| GetCurrentProcessId | 0x77e2d7b5 | 452 (0x1c4) |
| GetCurrentProcess | 0x77e2d7a0 | 451 (0x1c3) |
| GetCurrentDirectoryW | 0x77e3b88f | 450 (0x1c2) |
| GetCurrentDirectoryA | 0x77e175aa | 449 (0x1c1) |
| GetCurrentConsoleFontEx | 0x77e8e84b | 448 (0x1c0) |
| GetCurrentConsoleFont | 0x77e8ea3b | 447 (0x1bf) |
| GetCurrentActCtx | 0x77e1c569 | 446 (0x1be) |
| GetCurrencyFormatW | 0x77e6fbe7 | 445 (0x1bd) |
| GetCurrencyFormatEx | 0x77e6fe13 | 444 (0x1bc) |
| GetCurrencyFormatA | 0x77e7e471 | 443 (0x1bb) |
| GetCPInfoExW | 0x77e18f87 | 375 (0x177) |
| GetCPInfoExA | 0x77e7ea14 | 374 (0x176) |
| GetCPInfo | 0x77e38e7f | 373 (0x175) |
| GetConsoleWindow | 0x77e44032 | 442 (0x1ba) |
| GetConsoleTitleW | 0x77e3c380 | 441 (0x1b9) |
| GetConsoleTitleA | 0x77e8c2f1 | 440 (0x1b8) |
| GetConsoleSelectionInfo | 0x77e8dff5 | 439 (0x1b7) |
| GetConsoleScreenBufferInfoEx | 0x77e29ade | 438 (0x1b6) |
| GetConsoleScreenBufferInfo | 0x77e29ab0 | 437 (0x1b5) |
| GetConsoleProcessList | 0x77e8e59b | 436 (0x1b4) |
| GetConsoleOutputCP | 0x77e3509b | 435 (0x1b3) |
| GetConsoleOriginalTitleW | 0x77e8c2d1 | 434 (0x1b2) |
| GetConsoleOriginalTitleA | 0x77e8c2b4 | 433 (0x1b1) |
| GetConsoleNlsMode | 0x77e8ea92 | 432 (0x1b0) |
| GetConsoleMode | 0x77e3c110 | 431 (0x1af) |
| GetConsoleKeyboardLayoutNameW | 0x77e8ea21 | 430 (0x1ae) |
| GetConsoleKeyboardLayoutNameA | 0x77e8ea07 | 429 (0x1ad) |
| GetConsoleInputWaitHandle | 0x77e8c814 | 428 (0x1ac) |
| GetConsoleInputExeNameW | 0x77e8bdc1 | 427 (0x1ab) |
| GetConsoleInputExeNameA | 0x77e8c19d | 426 (0x1aa) |
| GetConsoleHistoryInfo | 0x77e8e668 | 425 (0x1a9) |
| GetConsoleHardwareState | 0x77e8cc35 | 424 (0x1a8) |
| GetConsoleFontSize | 0x77e8e0c7 | 423 (0x1a7) |
| GetConsoleFontInfo | 0x77e8e760 | 422 (0x1a6) |
| GetConsoleDisplayMode | 0x77e8cd1b | 421 (0x1a5) |
| GetConsoleCursorMode | 0x77e8ec4e | 420 (0x1a4) |
| GetConsoleCursorInfo | 0x77e8df7f | 419 (0x1a3) |
| GetConsoleCP | 0x77e2bed1 | 413 (0x19d) |
| GetConsoleCommandHistoryW | 0x77e8c161 | 418 (0x1a2) |
| GetConsoleCommandHistoryLengthW | 0x77e8bd17 | 417 (0x1a1) |
| GetConsoleCommandHistoryLengthA | 0x77e8bd2f | 416 (0x1a0) |
| GetConsoleCommandHistoryA | 0x77e8c17f | 415 (0x19f) |
| GetConsoleCharType | 0x77e8eb6c | 414 (0x19e) |
| GetConsoleAliasW | 0x77e8b79e | 408 (0x198) |
| GetConsoleAliasExesW | 0x77e8ba81 | 407 (0x197) |
| GetConsoleAliasExesLengthW | 0x77e8b962 | 406 (0x196) |
| GetConsoleAliasExesLengthA | 0x77e8b96f | 405 (0x195) |
| GetConsoleAliasExesA | 0x77e8ba9c | 404 (0x194) |
| GetConsoleAliasesW | 0x77e8bfc1 | 412 (0x19c) |
| GetConsoleAliasesLengthW | 0x77e8b8cf | 411 (0x19b) |
| GetConsoleAliasesLengthA | 0x77e8b8e7 | 410 (0x19a) |
| GetConsoleAliasesA | 0x77e8bfdf | 409 (0x199) |
| GetConsoleAliasA | 0x77e8b7e0 | 403 (0x193) |
| GetComputerNameW | 0x77e209c7 | 402 (0x192) |
| GetComputerNameExW | 0x77e21691 | 401 (0x191) |
| GetComputerNameExA | 0x77e6fbd7 | 400 (0x190) |
| GetComputerNameA | 0x77e16e0a | 399 (0x18f) |
| GetCompressedFileSizeW | 0x77e6b149 | 398 (0x18e) |
| GetCompressedFileSizeTransactedW | 0x77e6b3be | 397 (0x18d) |
| GetCompressedFileSizeTransactedA | 0x77e6bc1b | 396 (0x18c) |
| GetCompressedFileSizeA | 0x77e6b459 | 395 (0x18b) |
| GetComPlusPackageInstallStatus | 0x77e779f2 | 386 (0x182) |
| GetCommTimeouts | 0x77e722f7 | 392 (0x188) |
| GetCommState | 0x77e72030 | 391 (0x187) |
| GetCommProperties | 0x77e71f83 | 390 (0x186) |
| GetCommModemStatus | 0x77e71efa | 389 (0x185) |
| GetCommMask | 0x77e71e71 | 388 (0x184) |
| GetCommConfig | 0x77e73361 | 387 (0x183) |
| GetCommandLineW | 0x77e35304 | 394 (0x18a) |
| GetCommandLineA | 0x77e38eaf | 393 (0x189) |
| GetCalendarWeekNumber | 0x77e7e05f | 385 (0x181) |
| GetCalendarSupportedDateRange | 0x77e3deca | 384 (0x180) |
| GetCalendarMonthsInYear | 0x77e3e21d | 383 (0x17f) |
| GetCalendarInfoW | 0x77e16de7 | 382 (0x17e) |
| GetCalendarInfoEx | 0x77e3dcc1 | 381 (0x17d) |
| GetCalendarInfoA | 0x77e4688d | 380 (0x17c) |
| GetCalendarDifferenceInDays | 0x77e3ea9c | 379 (0x17b) |
| GetCalendarDaysInMonth | 0x77e3e9e8 | 378 (0x17a) |
| GetCalendarDateFormatEx | 0x77e3e52c | 377 (0x179) |
| GetCalendarDateFormat | 0x77e3e7d5 | 376 (0x178) |
| GetBinaryTypeW | 0x77e46984 | 372 (0x174) |
| GetBinaryTypeA | 0x77e74a99 | 371 (0x173) |
| GetBinaryType | 0x77e74a99 | 370 (0x172) |
| GetAtomNameW | 0x77e1e0cf | 369 (0x171) |
| GetAtomNameA | 0x77e6882c | 368 (0x170) |
| GetApplicationRestartSettings | 0x77e44ad1 | 367 (0x16f) |
| GetApplicationRecoveryCallback | 0x77e4014c | 366 (0x16e) |
| GetActiveProcessorGroupCount | 0x77e6ef61 | 365 (0x16d) |
| GetActiveProcessorCount | 0x77e14886 | 364 (0x16c) |
| GetACP | 0x77e2d90b | 363 (0x16b) |
| GenerateConsoleCtrlEvent | 0x77e8e136 | 362 (0x16a) |
| FreeUserPhysicalPages | 0x77e7805d | 361 (0x169) |
| FreeResource | 0x77e1f771 | 360 (0x168) |
| FreeLibraryWhenCallbackReturns | NTDLL.TpCallbackUnload DllOnCompletion | 359 (0x167) |
| FreeLibraryAndExitThread | 0x77e20368 | 358 (0x166) |
| FreeLibrary | 0x77e2ef67 | 357 (0x165) |
| FreeEnvironmentStringsW | 0x77e36bac | 356 (0x164) |
| FreeEnvironmentStringsA | 0x77e3c872 | 355 (0x163) |
| FreeConsole | 0x77e8c49b | 354 (0x162) |
| FormatMessageW | 0x77e28dd0 | 353 (0x161) |
| FormatMessageA | 0x77e4a020 | 352 (0x160) |
| FoldStringW | 0x77e4709d | 351 (0x15f) |
| FoldStringA | 0x77e7e820 | 350 (0x15e) |
| FlushViewOfFile | 0x77e18893 | 349 (0x15d) |
| FlushProcessWriteBuffers | NTDLL.NtFlushProcess WriteBuffers | 348 (0x15c) |
| FlushInstructionCache | 0x77e22c52 | 347 (0x15b) |
| FlushFileBuffers | 0x77e184e7 | 346 (0x15a) |
| FlushConsoleInputBuffer | 0x77e8e20f | 345 (0x159) |
| FlsSetValue | 0x77e36c67 | 344 (0x158) |
| FlsGetValue | 0x77e36c4f | 343 (0x157) |
| FlsFree | 0x77e3b7c5 | 342 (0x156) |
| FlsAlloc | 0x77e2f189 | 341 (0x155) |
| FindVolumeMountPointClose | 0x77e74cff | 340 (0x154) |
| FindVolumeClose | 0x77e12c1e | 339 (0x153) |
| FindStringOrdinal | 0x77e6fbc7 | 338 (0x152) |
| FindResourceW | 0x77e254cf | 337 (0x151) |
| FindResourceExW | 0x77e243b2 | 336 (0x150) |
| FindResourceExA | 0x77e2a3ad | 335 (0x14f) |
| FindResourceA | 0x77e2a475 | 334 (0x14e) |
| FindNLSStringEx | 0x77e3dd60 | 324 (0x144) |
| FindNLSString | 0x77e455de | 323 (0x143) |
| FindNextVolumeW | 0x77e12831 | 333 (0x14d) |
| FindNextVolumeMountPointW | 0x77e756d7 | 332 (0x14c) |
| FindNextVolumeMountPointA | 0x77e76161 | 331 (0x14b) |
| FindNextVolumeA | 0x77e74eb1 | 330 (0x14a) |
| FindNextStreamW | 0x77e40966 | 329 (0x149) |
| FindNextFileW | 0x77e29b4e | 328 (0x148) |
| FindNextFileNameW | 0x77e6a3b1 | 327 (0x147) |
| FindNextFileA | 0x77e2a611 | 326 (0x146) |
| FindNextChangeNotification | 0x77e16f21 | 325 (0x145) |
| FindFirstVolumeW | 0x77e12add | 322 (0x142) |
| FindFirstVolumeMountPointW | 0x77e75390 | 321 (0x141) |
| FindFirstVolumeMountPointA | 0x77e76011 | 320 (0x140) |
| FindFirstVolumeA | 0x77e74d85 | 319 (0x13f) |
| FindFirstStreamW | 0x77e40a28 | 318 (0x13e) |
| FindFirstStreamTransactedW | 0x77e6a445 | 317 (0x13d) |
| FindFirstFileW | 0x77e3404c | 316 (0x13c) |
| FindFirstFileTransactedW | 0x77e69ed1 | 315 (0x13b) |
| FindFirstFileTransactedA | 0x77e69e29 | 314 (0x13a) |
| FindFirstFileNameW | 0x77e6a161 | 313 (0x139) |
| FindFirstFileNameTransactedW | 0x77e6a4e9 | 312 (0x138) |
| FindFirstFileExW | 0x77e36bd6 | 311 (0x137) |
| FindFirstFileExA | 0x77e6fba7 | 310 (0x136) |
| FindFirstFileA | 0x77e2bf53 | 309 (0x135) |
| FindFirstChangeNotificationW | 0x77e16f09 | 308 (0x134) |
| FindFirstChangeNotificationA | 0x77e6fbb7 | 307 (0x133) |
| FindCloseChangeNotification | 0x77e18c53 | 306 (0x132) |
| FindClose | 0x77e34c24 | 305 (0x131) |
| FindAtomW | 0x77e2867f | 304 (0x130) |
| FindAtomA | 0x77e1dfa4 | 303 (0x12f) |
| FindActCtxSectionStringW | 0x77e3b7d2 | 302 (0x12e) |
| FindActCtxSectionStringA | 0x77e778e5 | 301 (0x12d) |
| FindActCtxSectionGuid | 0x77e299c1 | 300 (0x12c) |
| FillConsoleOutputCharacterW | 0x77e8d755 | 299 (0x12b) |
| FillConsoleOutputCharacterA | 0x77e8d72b | 298 (0x12a) |
| FillConsoleOutputAttribute | 0x77e425c0 | 297 (0x129) |
| FileTimeToSystemTime | 0x77e2bdc5 | 296 (0x128) |
| FileTimeToLocalFileTime | 0x77e2bddd | 295 (0x127) |
| FileTimeToDosDateTime | 0x77e23581 | 294 (0x126) |
| FatalExit | 0x77e6eec8 | 293 (0x125) |
| FatalAppExitW | 0x77e6fe03 | 292 (0x124) |
| FatalAppExitA | 0x77e6fdf3 | 291 (0x123) |
| ExpungeConsoleCommandHistoryW | 0x77e8bb4c | 290 (0x122) |
| ExpungeConsoleCommandHistoryA | 0x77e8bb64 | 289 (0x121) |
| ExpandEnvironmentStringsW | 0x77e243d7 | 288 (0x120) |
| ExpandEnvironmentStringsA | 0x77e18f3b | 287 (0x11f) |
| ExitVDM | 0x77e73e21 | 286 (0x11e) |
| ExitThread | NTDLL.RtlExitUserThread | 285 (0x11d) |
| ExitProcess | 0x77e3bbe2 | 284 (0x11c) |
| EscapeCommFunction | 0x77e71d74 | 283 (0x11b) |
| EraseTape | 0x77e77211 | 282 (0x11a) |
| EnumUILanguagesW | 0x77e12dc2 | 279 (0x117) |
| EnumUILanguagesA | 0x77e7e22e | 278 (0x116) |
| EnumTimeFormatsW | 0x77e47a62 | 277 (0x115) |
| EnumTimeFormatsEx | 0x77e3dce4 | 276 (0x114) |
| EnumTimeFormatsA | 0x77e7e156 | 275 (0x113) |
| EnumSystemLocalesW | 0x77e6fb97 | 274 (0x112) |
| EnumSystemLocalesEx | 0x77e6fb87 | 273 (0x111) |
| EnumSystemLocalesA | 0x77e478da | 272 (0x110) |
| EnumSystemLanguageGroupsW | 0x77e11925 | 271 (0x10f) |
| EnumSystemLanguageGroupsA | 0x77e7e1ef | 270 (0x10e) |
| EnumSystemGeoID | 0x77e7eb12 | 269 (0x10d) |
| EnumSystemFirmwareTables | 0x77e6d1ac | 268 (0x10c) |
| EnumSystemCodePagesW | 0x77e6fb77 | 267 (0x10b) |
| EnumSystemCodePagesA | 0x77e7e24c | 266 (0x10a) |
| EnumResourceTypesW | 0x77e4442f | 265 (0x109) |
| EnumResourceTypesExW | 0x77e4444f | 264 (0x108) |
| EnumResourceTypesExA | 0x77e6dac2 | 263 (0x107) |
| EnumResourceTypesA | 0x77e6dae6 | 262 (0x106) |
| EnumResourceNamesW | 0x77e495e0 | 261 (0x105) |
| EnumResourceNamesExW | 0x77e281dd | 260 (0x104) |
| EnumResourceNamesExA | 0x77e474e7 | 259 (0x103) |
| EnumResourceNamesA | 0x77e474c4 | 258 (0x102) |
| EnumResourceLanguagesW | 0x77e3f89e | 257 (0x101) |
| EnumResourceLanguagesExW | 0x77e3f8c4 | 256 (0x100) |
| EnumResourceLanguagesExA | 0x77e6db06 | 255 (0xff) |
| EnumResourceLanguagesA | 0x77e6db82 | 254 (0xfe) |
| EnumLanguageGroupLocalesW | 0x77e6fb67 | 253 (0xfd) |
| EnumLanguageGroupLocalesA | 0x77e7e20d | 252 (0xfc) |
| EnumerateLocalComputerNamesW | 0x77e66bbd | 281 (0x119) |
| EnumerateLocalComputerNamesA | 0x77e66d5f | 280 (0x118) |
| EnumDateFormatsW | 0x77e47a4a | 251 (0xfb) |
| EnumDateFormatsExW | 0x77e6fb57 | 250 (0xfa) |
| EnumDateFormatsExEx | 0x77e3dccc | 249 (0xf9) |
| EnumDateFormatsExA | 0x77e7e1c2 | 248 (0xf8) |
| EnumDateFormatsA | 0x77e7e196 | 247 (0xf7) |
| EnumCalendarInfoW | 0x77e6fb47 | 246 (0xf6) |
| EnumCalendarInfoExW | 0x77e6fb37 | 245 (0xf5) |
| EnumCalendarInfoExEx | 0x77e3deb2 | 244 (0xf4) |
| EnumCalendarInfoExA | 0x77e7e100 | 243 (0xf3) |
| EnumCalendarInfoA | 0x77e47a7a | 242 (0xf2) |
| EnterCriticalSection | NTDLL.RtlEnterCriticalSection | 241 (0xf1) |
| EndUpdateResourceW | 0x77e7d54e | 240 (0xf0) |
| EndUpdateResourceA | 0x77e7d7b4 | 239 (0xef) |
| EncodeSystemPointer | NTDLL.RtlEncodeSystemPointer | 238 (0xee) |
| EncodePointer | NTDLL.RtlEncodePointer | 237 (0xed) |
| EnableThreadProfiling | 0x77e78796 | 236 (0xec) |
| DuplicateHandle | 0x77e2d888 | 235 (0xeb) |
| DuplicateConsoleHandle | 0x77e3c66b | 234 (0xea) |
| DosPathToSessionPathW | 0x77e6f75e | 233 (0xe9) |
| DosPathToSessionPathA | 0x77e6f951 | 232 (0xe8) |
| DosDateTimeToFileTime | 0x77e1c891 | 231 (0xe7) |
| DnsHostnameToComputerNameW | 0x77e15cf4 | 230 (0xe6) |
| DnsHostnameToComputerNameA | 0x77e6531b | 229 (0xe5) |
| DisconnectNamedPipe | 0x77e3dc25 | 228 (0xe4) |
| DisassociateCurrentThreadFromCallback | NTDLL.TpDisassociate Callback | 227 (0xe3) |
| DisableThreadProfiling | 0x77e787c8 | 226 (0xe2) |
| DisableThreadLibraryCalls | 0x77e2da8c | 225 (0xe1) |
| DeviceIoControl | 0x77e2b925 | 224 (0xe0) |
| DeleteVolumeMountPointW | 0x77e6fb27 | 223 (0xdf) |
| DeleteVolumeMountPointA | 0x77e74d4d | 222 (0xde) |
| DeleteTimerQueueTimer | 0x77e1bc2d | 221 (0xdd) |
| DeleteTimerQueueEx | 0x77e41455 | 220 (0xdc) |
| DeleteTimerQueue | 0x77e781b5 | 219 (0xdb) |
| DeleteProcThreadAttributeList | api-ms-win-core-processthreads-l 1-1-0.DeleteProc ThreadAttributeList | 218 (0xda) |
| DeleteFileW | 0x77e216ef | 217 (0xd9) |
| DeleteFileTransactedW | 0x77e12182 | 216 (0xd8) |
| DeleteFileTransactedA | 0x77e6b383 | 215 (0xd7) |
| DeleteFileA | 0x77e24382 | 214 (0xd6) |
| DeleteFiber | 0x77e15510 | 213 (0xd5) |
| DeleteCriticalSection | NTDLL.RtlDelete CriticalSection | 212 (0xd4) |
| DeleteBoundaryDescriptor | NTDLL.RtlDelete BoundaryDescriptor | 211 (0xd3) |
| DeleteAtom | 0x77e22ef9 | 210 (0xd2) |
| DelayLoadFailureHook | 0x77e001fc | 209 (0xd1) |
| DefineDosDeviceW | 0x77e4128e | 208 (0xd0) |
| DefineDosDeviceA | 0x77e699d3 | 207 (0xcf) |
| DecodeSystemPointer | NTDLL.RtlDecode SystemPointer | 206 (0xce) |
| DecodePointer | NTDLL.RtlDecode Pointer | 205 (0xcd) |
| DebugSetProcessKillOnExit | 0x77e67406 | 204 (0xcc) |
| DebugBreakProcess | 0x77e673df | 203 (0xcb) |
| DebugBreak | 0x77e6fb1d | 202 (0xca) |
| DebugActiveProcessStop | 0x77e6778d | 201 (0xc9) |
| DebugActiveProcess | 0x77e6738c | 200 (0xc8) |
| DeactivateActCtx | 0x77e253e2 | 199 (0xc7) |
| CtrlRoutine | 0x77e44a03 | 198 (0xc6) |
| CreateWaitableTimerW | 0x77e16d86 | 197 (0xc5) |
| CreateWaitableTimerExW | 0x77e1220e | 196 (0xc4) |
| CreateWaitableTimerExA | 0x77e14202 | 195 (0xc3) |
| CreateWaitableTimerA | 0x77e141d8 | 194 (0xc2) |
| CreateToolhelp32Snapshot | 0x77e1fce1 | 193 (0xc1) |
| CreateTimerQueueTimer | 0x77e1bc15 | 192 (0xc0) |
| CreateTimerQueue | 0x77e1344e | 191 (0xbf) |
| CreateThreadpoolWork | 0x77e18f02 | 190 (0xbe) |
| CreateThreadpoolWait | 0x77e1412d | 189 (0xbd) |
| CreateThreadpoolTimer | 0x77e1b5ee | 188 (0xbc) |
| CreateThreadpoolIo | 0x77e13460 | 187 (0xbb) |
| CreateThreadpoolCleanupGroup | 0x77e18ed1 | 186 (0xba) |
| CreateThreadpool | 0x77e133e9 | 185 (0xb9) |
| CreateThread | 0x77e2dcc2 | 184 (0xb8) |
| CreateTapePartition | 0x77e77244 | 183 (0xb7) |
| CreateSymbolicLinkW | 0x77e6b499 | 182 (0xb6) |
| CreateSymbolicLinkTransactedW | 0x77e6bc5e | 181 (0xb5) |
| CreateSymbolicLinkTransactedA | 0x77e6bd86 | 180 (0xb4) |
| CreateSymbolicLinkA | 0x77e6bd09 | 179 (0xb3) |
| CreateSocketHandle | 0x77e77734 | 178 (0xb2) |
| CreateSemaphoreW | 0x77e1e2f4 | 177 (0xb1) |
| CreateSemaphoreExW | 0x77e12524 | 176 (0xb0) |
| CreateSemaphoreExA | 0x77e18456 | 175 (0xaf) |
| CreateSemaphoreA | 0x77e1849b | 174 (0xae) |
| CreateRemoteThreadEx | api-ms-win-core-processthreads-l 1-1-0.CreateRemoteThreadEx | 173 (0xad) |
| CreateRemoteThread | 0x77e6faf3 | 172 (0xac) |
| CreateProcessW | 0x77de204d | 171 (0xab) |
| CreateProcessInternalW | 0x77e307a2 | 170 (0xaa) |
| CreateProcessInternalA | 0x77e3c89c | 169 (0xa9) |
| CreateProcessAsUserW | 0x77e159af | 168 (0xa8) |
| CreateProcessA | 0x77de2082 | 167 (0xa7) |
| CreatePrivateNamespaceW | 0x77e13f65 | 166 (0xa6) |
| CreatePrivateNamespaceA | 0x77e6ff3f | 165 (0xa5) |
| CreatePipe | 0x77e412a6 | 164 (0xa4) |
| CreateNamedPipeW | 0x77e12d47 | 163 (0xa3) |
| CreateNamedPipeA | 0x77e6dba8 | 162 (0xa2) |
| CreateMutexW | 0x77e2338e | 161 (0xa1) |
| CreateMutexExW | 0x77e410d6 | 160 (0xa0) |
| CreateMutexExA | 0x77e6fae3 | 159 (0x9f) |
| CreateMutexA | 0x77e2d7d4 | 158 (0x9e) |
| CreateMemoryResourceNotification | 0x77e22db4 | 157 (0x9d) |
| CreateMailslotW | 0x77e15b77 | 156 (0x9c) |
| CreateMailslotA | 0x77e15b32 | 155 (0x9b) |
| CreateJobSet | 0x77e774cc | 154 (0x9a) |
| CreateJobObjectW | 0x77e15815 | 153 (0x99) |
| CreateJobObjectA | 0x77e774fa | 152 (0x98) |
| CreateIoCompletionPort | 0x77e18e89 | 151 (0x97) |
| CreateHardLinkW | 0x77e3d117 | 150 (0x96) |
| CreateHardLinkTransactedW | 0x77e77597 | 149 (0x95) |
| CreateHardLinkTransactedA | 0x77e776b0 | 148 (0x94) |
| CreateHardLinkA | 0x77e77641 | 147 (0x93) |
| CreateFileW | 0x77e2e8a5 | 146 (0x92) |
| CreateFileTransactedW | 0x77e120be | 145 (0x91) |
| CreateFileTransactedA | 0x77e6cbd9 | 144 (0x90) |
| CreateFileMappingW | 0x77e2120c | 143 (0x8f) |
| CreateFileMappingNumaW | 0x77e6fad3 | 142 (0x8e) |
| CreateFileMappingNumaA | 0x77e6a85d | 141 (0x8d) |
| CreateFileMappingA | 0x77e29c0e | 140 (0x8c) |
| CreateFileA | 0x77e2ea61 | 139 (0x8b) |
| CreateFiberEx | 0x77e151ce | 138 (0x8a) |
| CreateFiber | 0x77e151ae | 137 (0x89) |
| CreateEventW | 0x77e2d7bc | 136 (0x88) |
| CreateEventExW | 0x77de24f0 | 135 (0x87) |
| CreateEventExA | 0x77e1435e | 134 (0x86) |
| CreateEventA | 0x77e21662 | 133 (0x85) |
| CreateDirectoryW | 0x77e29989 | 132 (0x84) |
| CreateDirectoryTransactedW | 0x77e6867c | 131 (0x83) |
| CreateDirectoryTransactedA | 0x77e6879a | 130 (0x82) |
| CreateDirectoryExW | 0x77e67879 | 129 (0x81) |
| CreateDirectoryExA | 0x77e68731 | 128 (0x80) |
| CreateDirectoryA | 0x77e480e5 | 127 (0x7f) |
| CreateConsoleScreenBuffer | 0x77e8d779 | 126 (0x7e) |
| CreateBoundaryDescriptorW | 0x77e1663b | 125 (0x7d) |
| CreateBoundaryDescriptorA | 0x77e6fec3 | 124 (0x7c) |
| CreateActCtxW | 0x77e256dd | 123 (0x7b) |
| CreateActCtxA | 0x77e13685 | 122 (0x7a) |
| CopyLZFile | 0x77e66ed2 | 121 (0x79) |
| CopyFileW | 0x77e16af7 | 120 (0x78) |
| CopyFileTransactedW | 0x77e6ccef | 119 (0x77) |
| CopyFileTransactedA | 0x77e6ce09 | 118 (0x76) |
| CopyFileExW | 0x77e1b238 | 117 (0x75) |
| CopyFileExA | 0x77e6cda1 | 116 (0x74) |
| CopyFileA | 0x77e46d5a | 115 (0x73) |
| CopyContext | 0x77e78521 | 114 (0x72) |
| ConvertThreadToFiberEx | 0x77e15434 | 113 (0x71) |
| ConvertThreadToFiber | 0x77e1541c | 112 (0x70) |
| ConvertSystemTimeToCalDateTime | 0x77e3dfa1 | 111 (0x6f) |
| ConvertNLSDayOfWeekToWin32DayOfWeek | 0x77e3e095 | 110 (0x6e) |
| ConvertFiberToThread | 0x77e155a9 | 109 (0x6d) |
| ConvertDefaultLocale | 0x77e24503 | 108 (0x6c) |
| ConvertCalDateTimeToSystemTime | 0x77e7dce7 | 107 (0x6b) |
| ContinueDebugEvent | 0x77e67749 | 106 (0x6a) |
| ConsoleMenuControl | 0x77e8ca63 | 105 (0x69) |
| ConnectNamedPipe | 0x77e12d5f | 104 (0x68) |
| CompareStringW | 0x77e2a01a | 103 (0x67) |
| CompareStringOrdinal | 0x77e253ca | 102 (0x66) |
| CompareStringEx | 0x77e41110 | 101 (0x65) |
| CompareStringA | 0x77e216b4 | 100 (0x64) |
| CompareFileTime | 0x77e3617e | 99 (0x63) |
| CompareCalendarDates | 0x77e7dd81 | 98 (0x62) |
| CommConfigDialogW | 0x77e72e3d | 97 (0x61) |
| CommConfigDialogA | 0x77e72f51 | 96 (0x60) |
| CmdBatNotification | 0x77e2856a | 95 (0x5f) |
| CloseThreadpoolWork | NTDLL.TpReleaseWork | 94 (0x5e) |
| CloseThreadpoolWait | NTDLL.TpReleaseWait | 93 (0x5d) |
| CloseThreadpoolTimer | NTDLL.TpReleaseTimer | 92 (0x5c) |
| CloseThreadpoolIo | NTDLL.TpRelease IoCompletion | 91 (0x5b) |
| CloseThreadpoolCleanupGroupMembers | NTDLL.TpReleaseCleanup GroupMembers | 90 (0x5a) |
| CloseThreadpoolCleanupGroup | NTDLL.TpRelease CleanupGroup | 89 (0x59) |
| CloseThreadpool | NTDLL.TpReleasePool | 88 (0x58) |
| CloseProfileUserMapping | 0x77e66e13 | 87 (0x57) |
| ClosePrivateNamespace | 0x77e13fea | 86 (0x56) |
| CloseHandle | 0x77e2e868 | 85 (0x55) |
| CloseConsoleHandle | 0x77e3c5c9 | 84 (0x54) |
| ClearCommError | 0x77e71b63 | 83 (0x53) |
| ClearCommBreak | 0x77e73349 | 82 (0x52) |
| CheckRemoteDebuggerPresent | 0x77e14ffb | 81 (0x51) |
| CheckNameLegalDOS8Dot3W | 0x77e6e7a4 | 80 (0x50) |
| CheckNameLegalDOS8Dot3A | 0x77e6ec01 | 79 (0x4f) |
| CheckForReadOnlyResource | 0x77e403b6 | 78 (0x4e) |
| CheckElevationEnabled | 0x77e3018b | 77 (0x4d) |
| CheckElevation | 0x77e492bf | 76 (0x4c) |
| ChangeTimerQueueTimer | 0x77e15b1a | 75 (0x4b) |
| CancelWaitableTimer | 0x77e26a22 | 74 (0x4a) |
| CancelTimerQueueTimer | 0x77e781dd | 73 (0x49) |
| CancelThreadpoolIo | NTDLL.TpCancel AsyncIoOperation | 72 (0x48) |
| CancelSynchronousIo | 0x77e6a589 | 71 (0x47) |
| CancelIoEx | 0x77e24033 | 70 (0x46) |
| CancelIo | 0x77e412be | 69 (0x45) |
| CancelDeviceWakeupRequest | 0x77e6ed8a | 68 (0x44) |
| CallNamedPipeW | 0x77e6dec8 | 66 (0x42) |
| CallNamedPipeA | 0x77e6e314 | 65 (0x41) |
| CallbackMayRunLong | 0x77e191b1 | 67 (0x43) |
| BuildCommDCBW | 0x77e7706f | 64 (0x40) |
| BuildCommDCBAndTimeoutsW | 0x77e77015 | 63 (0x3f) |
| BuildCommDCBAndTimeoutsA | 0x77e76faf | 62 (0x3e) |
| BuildCommDCBA | 0x77e76fe2 | 61 (0x3d) |
| BindIoCompletionCallback | 0x77e4166a | 60 (0x3c) |
| BeginUpdateResourceW | 0x77e7d7ec | 59 (0x3b) |
| BeginUpdateResourceA | 0x77e7d9b9 | 58 (0x3a) |
| Beep | 0x77e64a71 | 57 (0x39) |
| BaseVerifyUnicodeString | 0x77e8a3e9 | 47 (0x2f) |
| BaseUpdateAppcompatCache | 0x77e49e87 | 46 (0x2e) |
| BaseThreadInitThunk | 0x77e2ed5a | 1 (0x1) |
| BaseSetLastNTError | 0x77e2f790 | 45 (0x2d) |
| BaseQueryModuleData | 0x77e49ea1 | 44 (0x2c) |
| BasepMapModuleHandle | 0x77e2a31a | 56 (0x38) |
| BasepFreeAppCompatData | 0x77e32717 | 55 (0x37) |
| BasepFreeActivationContextActivationBlock | 0x77e8a5c3 | 54 (0x36) |
| BasepCheckWinSaferRestrictions | 0x77e31a8b | 53 (0x35) |
| BasepCheckBadapp | 0x77e3282b | 52 (0x34) |
| BasepCheckAppCompat | 0x77e49126 | 51 (0x33) |
| BasepAnsiStringToDynamicUnicodeString | 0x77e8a394 | 50 (0x32) |
| BasepAllocateActivationContextActivationBlock | 0x77e8a44d | 49 (0x31) |
| Basep8BitStringToDynamicUnicodeString | 0x77e2c4a5 | 48 (0x30) |
| BaseIsAppcompatInfrastructureDisabled | 0x77e32156 | 43 (0x2b) |
| BaseInitAppcompatCacheSupport | 0x77e11c0a | 42 (0x2a) |
| BaseGetNamedObjectDirectory | 0x77e15941 | 41 (0x29) |
| BaseGenerateAppCompatData | 0x77e334bb | 40 (0x28) |
| BaseFormatTimeOut | 0x77e18568 | 39 (0x27) |
| BaseFormatObjectAttributes | 0x77e30771 | 38 (0x26) |
| BaseFlushAppcompatCache | 0x77e77a5a | 37 (0x25) |
| BaseDumpAppcompatCache | 0x77e77a4a | 36 (0x24) |
| BaseDllReadWriteIniFile | 0x77e1cdab | 35 (0x23) |
| BaseCleanupAppcompatCacheSupport | 0x77e77a27 | 34 (0x22) |
| BaseCheckRunApp | 0x77e1ec90 | 33 (0x21) |
| BaseCheckAppcompatCacheEx | 0x77e3218b | 32 (0x20) |
| BaseCheckAppcompatCache | 0x77e77a7d | 31 (0x1f) |
| BackupWrite | 0x77e647a8 | 30 (0x1e) |
| BackupSeek | 0x77e63076 | 29 (0x1d) |
| BackupRead | 0x77e640ee | 28 (0x1c) |
| AttachConsole | 0x77e8c74b | 27 (0x1b) |
| AssignProcessToJobObject | 0x77e15ace | 26 (0x1a) |
| AreFileApisANSI | 0x77e6fac9 | 25 (0x19) |
| ApplicationRecoveryInProgress | 0x77e77c08 | 24 (0x18) |
| ApplicationRecoveryFinished | 0x77e77bf8 | 23 (0x17) |
| AllocConsole | 0x77e8c67d | 20 (0x14) |
| AllocateUserPhysicalPagesNuma | 0x77e77fd1 | 22 (0x16) |
| AllocateUserPhysicalPages | 0x77e77fa3 | 21 (0x15) |
| AdjustCalendarDate | 0x77e3e838 | 19 (0x13) |
| AddVectoredExceptionHandler | NTDLL.RtlAddVectored ExceptionHandler | 18 (0x12) |
| AddVectoredContinueHandler | NTDLL.RtlAddVectored ContinueHandler | 17 (0x11) |
| AddSIDToBoundaryDescriptor | 0x77e1666d | 15 (0xf) |
| AddSecureMemoryCacheCallback | 0x77e6d16a | 16 (0x10) |
| AddRefActCtx | 0x77e1c5c7 | 14 (0xe) |
| AddLocalAlternateComputerNameW | 0x77e66680 | 13 (0xd) |
| AddLocalAlternateComputerNameA | 0x77e6676b | 12 (0xc) |
| AddIntegrityLabelToBoundaryDescriptor | 0x77e6ff14 | 11 (0xb) |
| AddDllDirectory | api-ms-win-core-libraryloader-l 1-1-0.AddDllDirectory | 10 (0xa) |
| AddConsoleAliasW | 0x77e8b5a2 | 9 (0x9) |
| AddConsoleAliasA | 0x77e8b60c | 8 (0x8) |
| AddAtomW | 0x77e22e95 | 7 (0x7) |
| AddAtomA | 0x77e17335 | 6 (0x6) |
| ActivateActCtx | 0x77e25365 | 5 (0x5) |
| AcquireSRWLockShared | NTDLL.RtlAcquireSRW LockShared | 4 (0x4) |
| AcquireSRWLockExclusive | NTDLL.RtlAcquireSRW LockExclusive | 3 (0x3) |
| _lwrite | 0x77e6d505 | 1344 (0x540) |
| _lread | 0x77e1fab0 | 1343 (0x53f) |
| _lopen | 0x77e6d47e | 1342 (0x53e) |
| _llseek | 0x77e1fade | 1341 (0x53d) |
| _lcreat | 0x77e6d4d1 | 1340 (0x53c) |
| _lclose | 0x77e20389 | 1339 (0x53b) |
| _hwrite | 0x77e6d505 | 1338 (0x53a) |
| _hread | 0x77e1fab0 | 1337 (0x539) |
【NT.DLL 1982個】
| NT.DLL(Function Name) | Address | Ordinal |
|---|---|---|
| RtlActivateActivationContextUnsafeFast | 0x77f12fed | 9 (0x9) |
| RtlDeactivateActivationContextUnsafeFast | 0x77f13063 | 10 (0xa) |
| RtlInterlockedPushListSList | 0x77ef5acc | 11 (0xb) |
| RtlUlongByteSwap | 0x77ef5b50 | 12 (0xc) |
| RtlUlonglongByteSwap | 0x77ef5b60 | 13 (0xd) |
| RtlUshortByteSwap | 0x77ef5b40 | 14 (0xe) |
| ExpInterlockedPopEntrySListEnd | 0x77ef5a8f | 15 (0xf) |
| ExpInterlockedPopEntrySListFault | 0x77ef5a8d | 16 (0x10) |
| ExpInterlockedPopEntrySListResume | 0x77ef5a64 | 17 (0x11) |
| A_SHAFinal | 0x77ed50fe | 18 (0x12) |
| A_SHAInit | 0x77ed4ff8 | 19 (0x13) |
| A_SHAUpdate | 0x77ed504e | 20 (0x14) |
| AlpcAdjustCompletionListConcurrencyCount | 0x77f3b0cd | 21 (0x15) |
| AlpcFreeCompletionListMessage | 0x77f3b65d | 22 (0x16) |
| AlpcGetCompletionListLastMessageInformation | 0x77f68c05 | 23 (0x17) |
| AlpcGetCompletionListMessageAttributes | 0x77f68bd1 | 24 (0x18) |
| AlpcGetHeaderSize | 0x77f1c6ab | 25 (0x19) |
| AlpcGetMessageAttribute | 0x77f1c674 | 26 (0x1a) |
| AlpcGetMessageFromCompletionList | 0x77f3b4e6 | 27 (0x1b) |
| AlpcGetOutstandingCompletionListMessageCount | 0x77f3b7e3 | 28 (0x1c) |
| AlpcInitializeMessageAttribute | 0x77ed1704 | 29 (0x1d) |
| AlpcMaxAllowedMessageLength | 0x77ecb2fb | 30 (0x1e) |
| AlpcRegisterCompletionList | 0x77f3b0f1 | 31 (0x1f) |
| AlpcRegisterCompletionListWorkerThread | 0x77f3b707 | 32 (0x20) |
| AlpcRundownCompletionList | 0x77f3b81e | 33 (0x21) |
| AlpcUnregisterCompletionList | 0x77f3b802 | 34 (0x22) |
| AlpcUnregisterCompletionListWorkerThread | 0x77f3b41f | 35 (0x23) |
| CsrAllocateCaptureBuffer | 0x77f2e398 | 36 (0x24) |
| CsrAllocateMessagePointer | 0x77f2e352 | 37 (0x25) |
| CsrCaptureMessageBuffer | 0x77f35408 | 38 (0x26) |
| CsrCaptureMessageMultiUnicodeStringsInPlace | 0x77f30f52 | 39 (0x27) |
| CsrCaptureMessageString | 0x77f31014 | 40 (0x28) |
| CsrCaptureTimeout | 0x77f5ea1d | 41 (0x29) |
| CsrClientCallServer | 0x77f1c775 | 42 (0x2a) |
| CsrClientConnectToServer | 0x77f28b1b | 43 (0x2b) |
| CsrFreeCaptureBuffer | 0x77f2e42b | 44 (0x2c) |
| CsrGetProcessId | 0x77f5ea12 | 45 (0x2d) |
| CsrIdentifyAlertableThread | 0x77f5ea0a | 46 (0x2e) |
| CsrSetPriorityClass | 0x77f60dbc | 47 (0x2f) |
| CsrVerifyRegion | 0x77f5ea50 | 48 (0x30) |
| DbgBreakPoint | 0x77ef40f0 | 49 (0x31) |
| DbgPrint | 0x77edf593 | 50 (0x32) |
| DbgPrintEx | 0x77ee1a36 | 51 (0x33) |
| DbgPrintReturnControlC | 0x77f68cf1 | 52 (0x34) |
| DbgPrompt | 0x77f68c2c | 53 (0x35) |
| DbgQueryDebugFilterState | 0x77f68c72 | 54 (0x36) |
| DbgSetDebugFilterState | 0x77f68c82 | 55 (0x37) |
| DbgUiConnectToDbg | 0x77f5f036 | 56 (0x38) |
| DbgUiContinue | 0x77f5f0de | 57 (0x39) |
| DbgUiConvertStateChangeStructure | 0x77f5f207 | 58 (0x3a) |
| DbgUiDebugActiveProcess | 0x77f5f1c5 | 59 (0x3b) |
| DbgUiGetThreadDebugObject | 0x77f5f088 | 60 (0x3c) |
| DbgUiIssueRemoteBreakin | 0x77f5f17e | 61 (0x3d) |
| DbgUiRemoteBreakin | 0x77f5f125 | 62 (0x3e) |
| DbgUiSetThreadDebugObject | 0x77f5f09a | 63 (0x3f) |
| DbgUiStopDebugging | 0x77f5f103 | 64 (0x40) |
| DbgUiWaitStateChange | 0x77f5f0b7 | 65 (0x41) |
| DbgUserBreakPoint | 0x77ef40ec | 66 (0x42) |
| EtwCreateTraceInstanceId | 0x77f8eac6 | 67 (0x43) |
| EtwDeliverDataBlock | 0x77edb8f0 | 68 (0x44) |
| EtwEnumerateProcessRegGuids | 0x77f8ee05 | 69 (0x45) |
| EtwEventActivityIdControl | 0x77ed27d7 | 70 (0x46) |
| EtwEventEnabled | 0x77ef206f | 71 (0x47) |
| EtwEventProviderEnabled | 0x77ecdd22 | 72 (0x48) |
| EtwEventRegister | 0x77f25b0c | 73 (0x49) |
| EtwEventUnregister | 0x77f1d9dd | 74 (0x4a) |
| EtwEventWrite | 0x77eed59a | 75 (0x4b) |
| EtwEventWriteEndScenario | 0x77ec3a93 | 76 (0x4c) |
| EtwEventWriteEx | 0x77f8ef02 | 77 (0x4d) |
| EtwEventWriteFull | 0x77ecbce7 | 78 (0x4e) |
| EtwEventWriteNoRegistration | 0x77f382ad | 79 (0x4f) |
| EtwEventWriteStartScenario | 0x77ec3a36 | 80 (0x50) |
| EtwEventWriteString | 0x77f8eb88 | 81 (0x51) |
| EtwEventWriteTransfer | 0x77f39d5b | 82 (0x52) |
| EtwGetTraceEnableFlags | 0x77ee8b35 | 83 (0x53) |
| EtwGetTraceEnableLevel | 0x77ee8aff | 84 (0x54) |
| EtwGetTraceLoggerHandle | 0x77ee8a96 | 85 (0x55) |
| EtwLogTraceEvent | 0x77f39d9c | 86 (0x56) |
| EtwNotificationRegister | 0x77f259bb | 87 (0x57) |
| EtwNotificationUnregister | 0x77f1d947 | 88 (0x58) |
| EtwProcessPrivateLoggerRequest | 0x77ec638c | 89 (0x59) |
| EtwRegisterSecurityProvider | 0x77ec1fe0 | 90 (0x5a) |
| EtwRegisterTraceGuidsA | 0x77ecfb7d | 91 (0x5b) |
| EtwRegisterTraceGuidsW | 0x77ee865a | 92 (0x5c) |
| EtwReplyNotification | 0x77f37bb4 | 93 (0x5d) |
| EtwSendNotification | 0x77edb866 | 94 (0x5e) |
| EtwSetMark | 0x77f3b967 | 95 (0x5f) |
| EtwTraceEventInstance | 0x77f8ef35 | 96 (0x60) |
| EtwTraceMessage | 0x77eee3ff | 97 (0x61) |
| EtwTraceMessageVa | 0x77eee423 | 98 (0x62) |
| EtwUnregisterTraceGuids | 0x77eeb065 | 99 (0x63) |
| EtwWriteUMSecurityEvent | 0x77ecd57b | 100 (0x64) |
| EtwpCreateEtwThread | 0x77f91559 | 101 (0x65) |
| EtwpGetCpuSpeed | 0x77ed8d8d | 102 (0x66) |
| EtwpNotificationThread | 0x77edf4c0 | 103 (0x67) |
| EvtIntReportAuthzEventAndSourceAsync | 0x77f91c10 | 104 (0x68) |
| EvtIntReportEventAndSourceAsync | 0x77ecbd17 | 105 (0x69) |
| KiFastSystemCall | 0x77f070b0 | 106 (0x6a) |
| KiFastSystemCallRet | 0x77f070b4 | 107 (0x6b) |
| KiIntSystemCall | 0x77f070c0 | 108 (0x6c) |
| KiRaiseUserExceptionDispatcher | 0x77f07058 | 109 (0x6d) |
| KiUserApcDispatcher | 0x77f06f58 | 110 (0x6e) |
| KiUserCallbackDispatcher | 0x77f06fc0 | 111 (0x6f) |
| KiUserExceptionDispatcher | 0x77f07008 | 112 (0x70) |
| LdrAccessResource | 0x77f23d84 | 113 (0x71) |
| LdrAddLoadAsDataTable | 0x77f31b91 | 114 (0x72) |
| LdrAddRefDll | 0x77f307ca | 115 (0x73) |
| LdrDisableThreadCalloutsForDll | 0x77f1a205 | 116 (0x74) |
| LdrEnumResources | 0x77f692ca | 117 (0x75) |
| LdrEnumerateLoadedModules | 0x77f28c80 | 118 (0x76) |
| LdrFindEntryForAddress | 0x77f2a27f | 119 (0x77) |
| LdrFindResourceDirectory_U | 0x77f6958f | 120 (0x78) |
| LdrFindResourceEx_U | 0x77f2c2d9 | 121 (0x79) |
| LdrFindResource_U | 0x77f2e201 | 122 (0x7a) |
| LdrFlushAlternateResourceModules | 0x77ec3ed6 | 123 (0x7b) |
| LdrGetDllHandle | 0x77f18af8 | 124 (0x7c) |
| LdrGetDllHandleByMapping | 0x77f31d04 | 125 (0x7d) |
| LdrGetDllHandleByName | 0x77f30abd | 126 (0x7e) |
| LdrGetDllHandleEx | 0x77f18b19 | 127 (0x7f) |
| LdrGetFailureData | 0x77f5feb8 | 128 (0x80) |
| LdrGetFileNameFromLoadAsDataTable | 0x77f68e3a | 129 (0x81) |
| LdrGetProcedureAddress | 0x77f2228d | 130 (0x82) |
| LdrGetProcedureAddressEx | 0x77f1f881 | 131 (0x83) |
| LdrHotPatchRoutine | 0x77f5f4f0 | 132 (0x84) |
| LdrInitShimEngineDynamic | 0x77f37119 | 133 (0x85) |
| LdrInitializeThunk | 0x77f23653 | 134 (0x86) |
| LdrLoadAlternateResourceModule | 0x77eeba9c | 135 (0x87) |
| LdrLoadAlternateResourceModuleEx | 0x77f291a1 | 136 (0x88) |
| LdrLoadDll | 0x77f222b8 | 137 (0x89) |
| LdrLockLoaderLock | 0x77f20076 | 138 (0x8a) |
| LdrOpenImageFileOptionsKey | 0x77ee7b82 | 139 (0x8b) |
| LdrProcessRelocationBlock | 0x77ec2f1d | 140 (0x8c) |
| LdrQueryImageFileExecutionOptions | 0x77f2ce51 | 141 (0x8d) |
| LdrQueryImageFileExecutionOptionsEx | 0x77f2ce78 | 142 (0x8e) |
| LdrQueryImageFileKeyOption | 0x77f25fa2 | 143 (0x8f) |
| LdrQueryModuleServiceTags | 0x77f5fdf2 | 144 (0x90) |
| LdrQueryProcessModuleInformation | 0x77f5fdd2 | 145 (0x91) |
| LdrRegisterDllNotification | 0x77f39c6e | 146 (0x92) |
| LdrRemoveLoadAsDataTable | 0x77f31e76 | 147 (0x93) |
| LdrResFindResource | 0x77ee1651 | 148 (0x94) |
| LdrResFindResourceDirectory | 0x77f2d6b1 | 149 (0x95) |
| LdrResGetRCConfig | 0x77ee98a4 | 150 (0x96) |
| LdrResRelease | 0x77f69fff | 151 (0x97) |
| LdrResSearchResource | 0x77f2d3d7 | 152 (0x98) |
| LdrRscIsTypeExist | 0x77f21d51 | 153 (0x99) |
| LdrSetAppCompatDllRedirectionCallback | 0x77f5e7ea | 154 (0x9a) |
| LdrSetDllManifestProber | 0x77f28f38 | 155 (0x9b) |
| LdrSetMUICacheType | 0x77f6953b | 156 (0x9c) |
| LdrShutdownProcess | 0x77f1e3b2 | 157 (0x9d) |
| LdrShutdownThread | 0x77eef658 | 158 (0x9e) |
| LdrUnloadAlternateResourceModule | 0x77f2eb28 | 159 (0x9f) |
| LdrUnloadAlternateResourceModuleEx | 0x77f2eb40 | 160 (0xa0) |
| LdrUnloadDll | 0x77f1c8de | 161 (0xa1) |
| LdrUnlockLoaderLock | 0x77f2011d | 162 (0xa2) |
| LdrUnregisterDllNotification | 0x77f39ea2 | 163 (0xa3) |
| LdrVerifyImageMatchesChecksum | 0x77f5fec3 | 164 (0xa4) |
| LdrVerifyImageMatchesChecksumEx | 0x77f5f986 | 165 (0xa5) |
| LdrpResGetMappingSize | 0x77f2d59e | 166 (0xa6) |
| LdrpResGetResourceDirectory | 0x77f2d233 | 167 (0xa7) |
| MD4Final | 0x77f8ea23 | 168 (0xa8) |
| MD4Init | 0x77f8e8d6 | 169 (0xa9) |
| MD4Update | 0x77f8e90a | 170 (0xaa) |
| MD5Final | 0x77ec9e10 | 171 (0xab) |
| MD5Init | 0x77ec9dd6 | 172 (0xac) |
| MD5Update | 0x77ec9e9e | 173 (0xad) |
| NlsAnsiCodePage | 0x77f97150 | 174 (0xae) |
| NlsMbCodePageTag | 0x77f9cc41 | 175 (0xaf) |
| NlsMbOemCodePageTag | 0x77f9cc42 | 176 (0xb0) |
| NtAcceptConnectPort | 0x77f051a8 | 177 (0xb1) |
| NtAccessCheck | 0x77f051b8 | 178 (0xb2) |
| NtAccessCheckAndAuditAlarm | 0x77f051c8 | 179 (0xb3) |
| NtAccessCheckByType | 0x77f051d8 | 180 (0xb4) |
| NtAccessCheckByTypeAndAuditAlarm | 0x77f051e8 | 181 (0xb5) |
| NtAccessCheckByTypeResultList | 0x77f051f8 | 182 (0xb6) |
| NtAccessCheckByTypeResultListAndAuditAlarm | 0x77f05208 | 183 (0xb7) |
| NtAccessCheckByTypeResultListAndAuditAlarmByHandle | 0x77f05218 | 184 (0xb8) |
| NtAddAtom | 0x77f05228 | 185 (0xb9) |
| NtAddBootEntry | 0x77f05238 | 186 (0xba) |
| NtAddDriverEntry | 0x77f05248 | 187 (0xbb) |
| NtAdjustGroupsToken | 0x77f05258 | 188 (0xbc) |
| NtAdjustPrivilegesToken | 0x77f05268 | 189 (0xbd) |
| NtAlertResumeThread | 0x77f05278 | 190 (0xbe) |
| NtAlertThread | 0x77f05288 | 191 (0xbf) |
| NtAllocateLocallyUniqueId | 0x77f05298 | 192 (0xc0) |
| NtAllocateReserveObject | 0x77f052a8 | 193 (0xc1) |
| NtAllocateUserPhysicalPages | 0x77f052b8 | 194 (0xc2) |
| NtAllocateUuids | 0x77f052c8 | 195 (0xc3) |
| NtAllocateVirtualMemory | 0x77f052d8 | 196 (0xc4) |
| NtAlpcAcceptConnectPort | 0x77f052e8 | 197 (0xc5) |
| NtAlpcCancelMessage | 0x77f052f8 | 198 (0xc6) |
| NtAlpcConnectPort | 0x77f05308 | 199 (0xc7) |
| NtAlpcCreatePort | 0x77f05318 | 200 (0xc8) |
| NtAlpcCreatePortSection | 0x77f05328 | 201 (0xc9) |
| NtAlpcCreateResourceReserve | 0x77f05338 | 202 (0xca) |
| NtAlpcCreateSectionView | 0x77f05348 | 203 (0xcb) |
| NtAlpcCreateSecurityContext | 0x77f05358 | 204 (0xcc) |
| NtAlpcDeletePortSection | 0x77f05368 | 205 (0xcd) |
| NtAlpcDeleteResourceReserve | 0x77f05378 | 206 (0xce) |
| NtAlpcDeleteSectionView | 0x77f05388 | 207 (0xcf) |
| NtAlpcDeleteSecurityContext | 0x77f05398 | 208 (0xd0) |
| NtAlpcDisconnectPort | 0x77f053a8 | 209 (0xd1) |
| NtAlpcImpersonateClientOfPort | 0x77f053b8 | 210 (0xd2) |
| NtAlpcOpenSenderProcess | 0x77f053c8 | 211 (0xd3) |
| NtAlpcOpenSenderThread | 0x77f053d8 | 212 (0xd4) |
| NtAlpcQueryInformation | 0x77f053e8 | 213 (0xd5) |
| NtAlpcQueryInformationMessage | 0x77f053f8 | 214 (0xd6) |
| NtAlpcRevokeSecurityContext | 0x77f05408 | 215 (0xd7) |
| NtAlpcSendWaitReceivePort | 0x77f05418 | 216 (0xd8) |
| NtAlpcSetInformation | 0x77f05428 | 217 (0xd9) |
| NtApphelpCacheControl | 0x77f05438 | 218 (0xda) |
| NtAreMappedFilesTheSame | 0x77f05448 | 219 (0xdb) |
| NtAssignProcessToJobObject | 0x77f05458 | 220 (0xdc) |
| NtCallbackReturn | 0x77f05468 | 221 (0xdd) |
| NtCancelIoFile | 0x77f05478 | 222 (0xde) |
| NtCancelIoFileEx | 0x77f05488 | 223 (0xdf) |
| NtCancelSynchronousIoFile | 0x77f05498 | 224 (0xe0) |
| NtCancelTimer | 0x77f054a8 | 225 (0xe1) |
| NtClearEvent | 0x77f054b8 | 226 (0xe2) |
| NtClose | 0x77f054c8 | 227 (0xe3) |
| NtCloseObjectAuditAlarm | 0x77f054d8 | 228 (0xe4) |
| NtCommitComplete | 0x77f054e8 | 229 (0xe5) |
| NtCommitEnlistment | 0x77f054f8 | 230 (0xe6) |
| NtCommitTransaction | 0x77f05508 | 231 (0xe7) |
| NtCompactKeys | 0x77f05518 | 232 (0xe8) |
| NtCompareTokens | 0x77f05528 | 233 (0xe9) |
| NtCompleteConnectPort | 0x77f05538 | 234 (0xea) |
| NtCompressKey | 0x77f05548 | 235 (0xeb) |
| NtConnectPort | 0x77f05558 | 236 (0xec) |
| NtContinue | 0x77f05568 | 237 (0xed) |
| NtCreateDebugObject | 0x77f05578 | 238 (0xee) |
| NtCreateDirectoryObject | 0x77f05588 | 239 (0xef) |
| NtCreateEnlistment | 0x77f05598 | 240 (0xf0) |
| NtCreateEvent | 0x77f055a8 | 241 (0xf1) |
| NtCreateEventPair | 0x77f055b8 | 242 (0xf2) |
| NtCreateFile | 0x77f055c8 | 243 (0xf3) |
| NtCreateIoCompletion | 0x77f055d8 | 244 (0xf4) |
| NtCreateJobObject | 0x77f055e8 | 245 (0xf5) |
| NtCreateJobSet | 0x77f055f8 | 246 (0xf6) |
| NtCreateKey | 0x77f05608 | 247 (0xf7) |
| NtCreateKeyTransacted | 0x77f05628 | 248 (0xf8) |
| NtCreateKeyedEvent | 0x77f05618 | 249 (0xf9) |
| NtCreateMailslotFile | 0x77f05638 | 250 (0xfa) |
| NtCreateMutant | 0x77f05648 | 251 (0xfb) |
| NtCreateNamedPipeFile | 0x77f05658 | 252 (0xfc) |
| NtCreatePagingFile | 0x77f05668 | 253 (0xfd) |
| NtCreatePort | 0x77f05678 | 254 (0xfe) |
| NtCreatePrivateNamespace | 0x77f05688 | 255 (0xff) |
| NtCreateProcess | 0x77f05698 | 256 (0x100) |
| NtCreateProcessEx | 0x77f056a8 | 257 (0x101) |
| NtCreateProfile | 0x77f056b8 | 258 (0x102) |
| NtCreateProfileEx | 0x77f056c8 | 259 (0x103) |
| NtCreateResourceManager | 0x77f056d8 | 260 (0x104) |
| NtCreateSection | 0x77f056e8 | 261 (0x105) |
| NtCreateSemaphore | 0x77f056f8 | 262 (0x106) |
| NtCreateSymbolicLinkObject | 0x77f05708 | 263 (0x107) |
| NtCreateThread | 0x77f05718 | 264 (0x108) |
| NtCreateThreadEx | 0x77f05728 | 265 (0x109) |
| NtCreateTimer | 0x77f05738 | 266 (0x10a) |
| NtCreateToken | 0x77f05748 | 267 (0x10b) |
| NtCreateTransaction | 0x77f05758 | 268 (0x10c) |
| NtCreateTransactionManager | 0x77f05768 | 269 (0x10d) |
| NtCreateUserProcess | 0x77f05778 | 270 (0x10e) |
| NtCreateWaitablePort | 0x77f05788 | 271 (0x10f) |
| NtCreateWorkerFactory | 0x77f05798 | 272 (0x110) |
| NtCurrentTeb | 0x77f5e785 | 273 (0x111) |
| NtDebugActiveProcess | 0x77f057a8 | 274 (0x112) |
| NtDebugContinue | 0x77f057b8 | 275 (0x113) |
| NtDelayExecution | 0x77f057c8 | 276 (0x114) |
| NtDeleteAtom | 0x77f057d8 | 277 (0x115) |
| NtDeleteBootEntry | 0x77f057e8 | 278 (0x116) |
| NtDeleteDriverEntry | 0x77f057f8 | 279 (0x117) |
| NtDeleteFile | 0x77f05808 | 280 (0x118) |
| NtDeleteKey | 0x77f05818 | 281 (0x119) |
| NtDeleteObjectAuditAlarm | 0x77f05828 | 282 (0x11a) |
| NtDeletePrivateNamespace | 0x77f05838 | 283 (0x11b) |
| NtDeleteValueKey | 0x77f05848 | 284 (0x11c) |
| NtDeviceIoControlFile | 0x77f05858 | 285 (0x11d) |
| NtDisableLastKnownGood | 0x77f05868 | 286 (0x11e) |
| NtDisplayString | 0x77f05878 | 287 (0x11f) |
| NtDrawText | 0x77f05888 | 288 (0x120) |
| NtDuplicateObject | 0x77f05898 | 289 (0x121) |
| NtDuplicateToken | 0x77f058a8 | 290 (0x122) |
| NtEnableLastKnownGood | 0x77f058b8 | 291 (0x123) |
| NtEnumerateBootEntries | 0x77f058c8 | 292 (0x124) |
| NtEnumerateDriverEntries | 0x77f058d8 | 293 (0x125) |
| NtEnumerateKey | 0x77f058e8 | 294 (0x126) |
| NtEnumerateSystemEnvironmentValuesEx | 0x77f058f8 | 295 (0x127) |
| NtEnumerateTransactionObject | 0x77f05908 | 296 (0x128) |
| NtEnumerateValueKey | 0x77f05918 | 297 (0x129) |
| NtExtendSection | 0x77f05928 | 298 (0x12a) |
| NtFilterToken | 0x77f05938 | 299 (0x12b) |
| NtFindAtom | 0x77f05948 | 300 (0x12c) |
| NtFlushBuffersFile | 0x77f05958 | 301 (0x12d) |
| NtFlushInstallUILanguage | 0x77f05968 | 302 (0x12e) |
| NtFlushInstructionCache | 0x77f05978 | 303 (0x12f) |
| NtFlushKey | 0x77f05988 | 304 (0x130) |
| NtFlushProcessWriteBuffers | 0x77f05998 | 305 (0x131) |
| NtFlushVirtualMemory | 0x77f059a8 | 306 (0x132) |
| NtFlushWriteBuffer | 0x77f059b8 | 307 (0x133) |
| NtFreeUserPhysicalPages | 0x77f059c8 | 308 (0x134) |
| NtFreeVirtualMemory | 0x77f059d8 | 309 (0x135) |
| NtFreezeRegistry | 0x77f059e8 | 310 (0x136) |
| NtFreezeTransactions | 0x77f059f8 | 311 (0x137) |
| NtFsControlFile | 0x77f05a08 | 312 (0x138) |
| NtGetContextThread | 0x77f05a18 | 313 (0x139) |
| NtGetCurrentProcessorNumber | 0x77f05a28 | 314 (0x13a) |
| NtGetDevicePowerState | 0x77f05a38 | 315 (0x13b) |
| NtGetMUIRegistryInfo | 0x77f05a48 | 316 (0x13c) |
| NtGetNextProcess | 0x77f05a58 | 317 (0x13d) |
| NtGetNextThread | 0x77f05a68 | 318 (0x13e) |
| NtGetNlsSectionPtr | 0x77f05a78 | 319 (0x13f) |
| NtGetNotificationResourceManager | 0x77f05a88 | 320 (0x140) |
| NtGetPlugPlayEvent | 0x77f05a98 | 321 (0x141) |
| NtGetTickCount | 0x77f6b3de | 322 (0x142) |
| NtGetWriteWatch | 0x77f05aa8 | 323 (0x143) |
| NtImpersonateAnonymousToken | 0x77f05ab8 | 324 (0x144) |
| NtImpersonateClientOfPort | 0x77f05ac8 | 325 (0x145) |
| NtImpersonateThread | 0x77f05ad8 | 326 (0x146) |
| NtInitializeNlsFiles | 0x77f05ae8 | 327 (0x147) |
| NtInitializeRegistry | 0x77f05af8 | 328 (0x148) |
| NtInitiatePowerAction | 0x77f05b08 | 329 (0x149) |
| NtIsProcessInJob | 0x77f05b18 | 330 (0x14a) |
| NtIsSystemResumeAutomatic | 0x77f05b28 | 331 (0x14b) |
| NtIsUILanguageComitted | 0x77f05b38 | 332 (0x14c) |
| NtListenPort | 0x77f05b48 | 333 (0x14d) |
| NtLoadDriver | 0x77f05b58 | 334 (0x14e) |
| NtLoadKey2 | 0x77f05b78 | 335 (0x14f) |
| NtLoadKey | 0x77f05b68 | 336 (0x150) |
| NtLoadKeyEx | 0x77f05b88 | 337 (0x151) |
| NtLockFile | 0x77f05b98 | 338 (0x152) |
| NtLockProductActivationKeys | 0x77f05ba8 | 339 (0x153) |
| NtLockRegistryKey | 0x77f05bb8 | 340 (0x154) |
| NtLockVirtualMemory | 0x77f05bc8 | 341 (0x155) |
| NtMakePermanentObject | 0x77f05bd8 | 342 (0x156) |
| NtMakeTemporaryObject | 0x77f05be8 | 343 (0x157) |
| NtMapCMFModule | 0x77f05bf8 | 344 (0x158) |
| NtMapUserPhysicalPages | 0x77f05c08 | 345 (0x159) |
| NtMapUserPhysicalPagesScatter | 0x77f05c18 | 346 (0x15a) |
| NtMapViewOfSection | 0x77f05c28 | 347 (0x15b) |
| NtModifyBootEntry | 0x77f05c38 | 348 (0x15c) |
| NtModifyDriverEntry | 0x77f05c48 | 349 (0x15d) |
| NtNotifyChangeDirectoryFile | 0x77f05c58 | 350 (0x15e) |
| NtNotifyChangeKey | 0x77f05c68 | 351 (0x15f) |
| NtNotifyChangeMultipleKeys | 0x77f05c78 | 352 (0x160) |
| NtNotifyChangeSession | 0x77f05c88 | 353 (0x161) |
| NtOpenDirectoryObject | 0x77f05c98 | 354 (0x162) |
| NtOpenEnlistment | 0x77f05ca8 | 355 (0x163) |
| NtOpenEvent | 0x77f05cb8 | 356 (0x164) |
| NtOpenEventPair | 0x77f05cc8 | 357 (0x165) |
| NtOpenFile | 0x77f05cd8 | 358 (0x166) |
| NtOpenIoCompletion | 0x77f05ce8 | 359 (0x167) |
| NtOpenJobObject | 0x77f05cf8 | 360 (0x168) |
| NtOpenKey | 0x77f05d08 | 361 (0x169) |
| NtOpenKeyEx | 0x77f05d18 | 362 (0x16a) |
| NtOpenKeyTransacted | 0x77f05d38 | 363 (0x16b) |
| NtOpenKeyTransactedEx | 0x77f05d48 | 364 (0x16c) |
| NtOpenKeyedEvent | 0x77f05d28 | 365 (0x16d) |
| NtOpenMutant | 0x77f05d58 | 366 (0x16e) |
| NtOpenObjectAuditAlarm | 0x77f05d68 | 367 (0x16f) |
| NtOpenPrivateNamespace | 0x77f05d78 | 368 (0x170) |
| NtOpenProcess | 0x77f05d88 | 369 (0x171) |
| NtOpenProcessToken | 0x77f05d98 | 370 (0x172) |
| NtOpenProcessTokenEx | 0x77f05da8 | 371 (0x173) |
| NtOpenResourceManager | 0x77f05db8 | 372 (0x174) |
| NtOpenSection | 0x77f05dc8 | 373 (0x175) |
| NtOpenSemaphore | 0x77f05dd8 | 374 (0x176) |
| NtOpenSession | 0x77f05de8 | 375 (0x177) |
| NtOpenSymbolicLinkObject | 0x77f05df8 | 376 (0x178) |
| NtOpenThread | 0x77f05e08 | 377 (0x179) |
| NtOpenThreadToken | 0x77f05e18 | 378 (0x17a) |
| NtOpenThreadTokenEx | 0x77f05e28 | 379 (0x17b) |
| NtOpenTimer | 0x77f05e38 | 380 (0x17c) |
| NtOpenTransaction | 0x77f05e48 | 381 (0x17d) |
| NtOpenTransactionManager | 0x77f05e58 | 382 (0x17e) |
| NtPlugPlayControl | 0x77f05e68 | 383 (0x17f) |
| NtPowerInformation | 0x77f05e78 | 384 (0x180) |
| NtPrePrepareComplete | 0x77f05ea8 | 385 (0x181) |
| NtPrePrepareEnlistment | 0x77f05eb8 | 386 (0x182) |
| NtPrepareComplete | 0x77f05e88 | 387 (0x183) |
| NtPrepareEnlistment | 0x77f05e98 | 388 (0x184) |
| NtPrivilegeCheck | 0x77f05ec8 | 389 (0x185) |
| NtPrivilegeObjectAuditAlarm | 0x77f05ee8 | 390 (0x186) |
| NtPrivilegedServiceAuditAlarm | 0x77f05ed8 | 391 (0x187) |
| NtPropagationComplete | 0x77f05ef8 | 392 (0x188) |
| NtPropagationFailed | 0x77f05f08 | 393 (0x189) |
| NtProtectVirtualMemory | 0x77f05f18 | 394 (0x18a) |
| NtPulseEvent | 0x77f05f28 | 395 (0x18b) |
| NtQueryAttributesFile | 0x77f05f38 | 396 (0x18c) |
| NtQueryBootEntryOrder | 0x77f05f48 | 397 (0x18d) |
| NtQueryBootOptions | 0x77f05f58 | 398 (0x18e) |
| NtQueryDebugFilterState | 0x77f05f68 | 399 (0x18f) |
| NtQueryDefaultLocale | 0x77f05f78 | 400 (0x190) |
| NtQueryDefaultUILanguage | 0x77f05f88 | 401 (0x191) |
| NtQueryDirectoryFile | 0x77f05f98 | 402 (0x192) |
| NtQueryDirectoryObject | 0x77f05fa8 | 403 (0x193) |
| NtQueryDriverEntryOrder | 0x77f05fb8 | 404 (0x194) |
| NtQueryEaFile | 0x77f05fc8 | 405 (0x195) |
| NtQueryEvent | 0x77f05fd8 | 406 (0x196) |
| NtQueryFullAttributesFile | 0x77f05fe8 | 407 (0x197) |
| NtQueryInformationAtom | 0x77f05ff8 | 408 (0x198) |
| NtQueryInformationEnlistment | 0x77f06008 | 409 (0x199) |
| NtQueryInformationFile | 0x77f06018 | 410 (0x19a) |
| NtQueryInformationJobObject | 0x77f06028 | 411 (0x19b) |
| NtQueryInformationPort | 0x77f06038 | 412 (0x19c) |
| NtQueryInformationProcess | 0x77f06048 | 413 (0x19d) |
| NtQueryInformationResourceManager | 0x77f06058 | 414 (0x19e) |
| NtQueryInformationThread | 0x77f06068 | 415 (0x19f) |
| NtQueryInformationToken | 0x77f06078 | 416 (0x1a0) |
| NtQueryInformationTransaction | 0x77f06088 | 417 (0x1a1) |
| NtQueryInformationTransactionManager | 0x77f06098 | 418 (0x1a2) |
| NtQueryInformationWorkerFactory | 0x77f060a8 | 419 (0x1a3) |
| NtQueryInstallUILanguage | 0x77f060b8 | 420 (0x1a4) |
| NtQueryIntervalProfile | 0x77f060c8 | 421 (0x1a5) |
| NtQueryIoCompletion | 0x77f060d8 | 422 (0x1a6) |
| NtQueryKey | 0x77f060e8 | 423 (0x1a7) |
| NtQueryLicenseValue | 0x77f060f8 | 424 (0x1a8) |
| NtQueryMultipleValueKey | 0x77f06108 | 425 (0x1a9) |
| NtQueryMutant | 0x77f06118 | 426 (0x1aa) |
| NtQueryObject | 0x77f06128 | 427 (0x1ab) |
| NtQueryOpenSubKeys | 0x77f06138 | 428 (0x1ac) |
| NtQueryOpenSubKeysEx | 0x77f06148 | 429 (0x1ad) |
| NtQueryPerformanceCounter | 0x77f06158 | 430 (0x1ae) |
| NtQueryPortInformationProcess | 0x77f06168 | 431 (0x1af) |
| NtQueryQuotaInformationFile | 0x77f06178 | 432 (0x1b0) |
| NtQuerySection | 0x77f06188 | 433 (0x1b1) |
| NtQuerySecurityAttributesToken | 0x77f06198 | 434 (0x1b2) |
| NtQuerySecurityObject | 0x77f061a8 | 435 (0x1b3) |
| NtQuerySemaphore | 0x77f061b8 | 436 (0x1b4) |
| NtQuerySymbolicLinkObject | 0x77f061c8 | 437 (0x1b5) |
| NtQuerySystemEnvironmentValue | 0x77f061d8 | 438 (0x1b6) |
| NtQuerySystemEnvironmentValueEx | 0x77f061e8 | 439 (0x1b7) |
| NtQuerySystemInformation | 0x77f061f8 | 440 (0x1b8) |
| NtQuerySystemInformationEx | 0x77f06208 | 441 (0x1b9) |
| NtQuerySystemTime | 0x77f06218 | 442 (0x1ba) |
| NtQueryTimer | 0x77f06228 | 443 (0x1bb) |
| NtQueryTimerResolution | 0x77f06238 | 444 (0x1bc) |
| NtQueryValueKey | 0x77f06248 | 445 (0x1bd) |
| NtQueryVirtualMemory | 0x77f06258 | 446 (0x1be) |
| NtQueryVolumeInformationFile | 0x77f06268 | 447 (0x1bf) |
| NtQueueApcThread | 0x77f06278 | 448 (0x1c0) |
| NtQueueApcThreadEx | 0x77f06288 | 449 (0x1c1) |
| NtRaiseException | 0x77f06298 | 450 (0x1c2) |
| NtRaiseHardError | 0x77f062a8 | 451 (0x1c3) |
| NtReadFile | 0x77f062b8 | 452 (0x1c4) |
| NtReadFileScatter | 0x77f062c8 | 453 (0x1c5) |
| NtReadOnlyEnlistment | 0x77f062d8 | 454 (0x1c6) |
| NtReadRequestData | 0x77f062e8 | 455 (0x1c7) |
| NtReadVirtualMemory | 0x77f062f8 | 456 (0x1c8) |
| NtRecoverEnlistment | 0x77f06308 | 457 (0x1c9) |
| NtRecoverResourceManager | 0x77f06318 | 458 (0x1ca) |
| NtRecoverTransactionManager | 0x77f06328 | 459 (0x1cb) |
| NtRegisterProtocolAddressInformation | 0x77f06338 | 460 (0x1cc) |
| NtRegisterThreadTerminatePort | 0x77f06348 | 461 (0x1cd) |
| NtReleaseKeyedEvent | 0x77f06358 | 462 (0x1ce) |
| NtReleaseMutant | 0x77f06368 | 463 (0x1cf) |
| NtReleaseSemaphore | 0x77f06378 | 464 (0x1d0) |
| NtReleaseWorkerFactoryWorker | 0x77f06388 | 465 (0x1d1) |
| NtRemoveIoCompletion | 0x77f06398 | 466 (0x1d2) |
| NtRemoveIoCompletionEx | 0x77f063a8 | 467 (0x1d3) |
| NtRemoveProcessDebug | 0x77f063b8 | 468 (0x1d4) |
| NtRenameKey | 0x77f063c8 | 469 (0x1d5) |
| NtRenameTransactionManager | 0x77f063d8 | 470 (0x1d6) |
| NtReplaceKey | 0x77f063e8 | 471 (0x1d7) |
| NtReplacePartitionUnit | 0x77f063f8 | 472 (0x1d8) |
| NtReplyPort | 0x77f06408 | 473 (0x1d9) |
| NtReplyWaitReceivePort | 0x77f06418 | 474 (0x1da) |
| NtReplyWaitReceivePortEx | 0x77f06428 | 475 (0x1db) |
| NtReplyWaitReplyPort | 0x77f06438 | 476 (0x1dc) |
| NtRequestPort | 0x77f06448 | 477 (0x1dd) |
| NtRequestWaitReplyPort | 0x77f06458 | 478 (0x1de) |
| NtResetEvent | 0x77f06468 | 479 (0x1df) |
| NtResetWriteWatch | 0x77f06478 | 480 (0x1e0) |
| NtRestoreKey | 0x77f06488 | 481 (0x1e1) |
| NtResumeProcess | 0x77f06498 | 482 (0x1e2) |
| NtResumeThread | 0x77f064a8 | 483 (0x1e3) |
| NtRollbackComplete | 0x77f064b8 | 484 (0x1e4) |
| NtRollbackEnlistment | 0x77f064c8 | 485 (0x1e5) |
| NtRollbackTransaction | 0x77f064d8 | 486 (0x1e6) |
| NtRollforwardTransactionManager | 0x77f064e8 | 487 (0x1e7) |
| NtSaveKey | 0x77f064f8 | 488 (0x1e8) |
| NtSaveKeyEx | 0x77f06508 | 489 (0x1e9) |
| NtSaveMergedKeys | 0x77f06518 | 490 (0x1ea) |
| NtSecureConnectPort | 0x77f06528 | 491 (0x1eb) |
| NtSerializeBoot | 0x77f06538 | 492 (0x1ec) |
| NtSetBootEntryOrder | 0x77f06548 | 493 (0x1ed) |
| NtSetBootOptions | 0x77f06558 | 494 (0x1ee) |
| NtSetContextThread | 0x77f06568 | 495 (0x1ef) |
| NtSetDebugFilterState | 0x77f06578 | 496 (0x1f0) |
| NtSetDefaultHardErrorPort | 0x77f06588 | 497 (0x1f1) |
| NtSetDefaultLocale | 0x77f06598 | 498 (0x1f2) |
| NtSetDefaultUILanguage | 0x77f065a8 | 499 (0x1f3) |
| NtSetDriverEntryOrder | 0x77f065b8 | 500 (0x1f4) |
| NtSetEaFile | 0x77f065c8 | 501 (0x1f5) |
| NtSetEvent | 0x77f065d8 | 502 (0x1f6) |
| NtSetEventBoostPriority | 0x77f065e8 | 503 (0x1f7) |
| NtSetHighEventPair | 0x77f065f8 | 504 (0x1f8) |
| NtSetHighWaitLowEventPair | 0x77f06608 | 505 (0x1f9) |
| NtSetInformationDebugObject | 0x77f06618 | 506 (0x1fa) |
| NtSetInformationEnlistment | 0x77f06628 | 507 (0x1fb) |
| NtSetInformationFile | 0x77f06638 | 508 (0x1fc) |
| NtSetInformationJobObject | 0x77f06648 | 509 (0x1fd) |
| NtSetInformationKey | 0x77f06658 | 510 (0x1fe) |
| NtSetInformationObject | 0x77f06668 | 511 (0x1ff) |
| NtSetInformationProcess | 0x77f06678 | 512 (0x200) |
| NtSetInformationResourceManager | 0x77f06688 | 513 (0x201) |
| NtSetInformationThread | 0x77f06698 | 514 (0x202) |
| NtSetInformationToken | 0x77f066a8 | 515 (0x203) |
| NtSetInformationTransaction | 0x77f066b8 | 516 (0x204) |
| NtSetInformationTransactionManager | 0x77f066c8 | 517 (0x205) |
| NtSetInformationWorkerFactory | 0x77f066d8 | 518 (0x206) |
| NtSetIntervalProfile | 0x77f066e8 | 519 (0x207) |
| NtSetIoCompletion | 0x77f066f8 | 520 (0x208) |
| NtSetIoCompletionEx | 0x77f06708 | 521 (0x209) |
| NtSetLdtEntries | 0x77f06718 | 522 (0x20a) |
| NtSetLowEventPair | 0x77f06728 | 523 (0x20b) |
| NtSetLowWaitHighEventPair | 0x77f06738 | 524 (0x20c) |
| NtSetQuotaInformationFile | 0x77f06748 | 525 (0x20d) |
| NtSetSecurityObject | 0x77f06758 | 526 (0x20e) |
| NtSetSystemEnvironmentValue | 0x77f06768 | 527 (0x20f) |
| NtSetSystemEnvironmentValueEx | 0x77f06778 | 528 (0x210) |
| NtSetSystemInformation | 0x77f06788 | 529 (0x211) |
| NtSetSystemPowerState | 0x77f06798 | 530 (0x212) |
| NtSetSystemTime | 0x77f067a8 | 531 (0x213) |
| NtSetThreadExecutionState | 0x77f067b8 | 532 (0x214) |
| NtSetTimer | 0x77f067c8 | 533 (0x215) |
| NtSetTimerEx | 0x77f067d8 | 534 (0x216) |
| NtSetTimerResolution | 0x77f067e8 | 535 (0x217) |
| NtSetUuidSeed | 0x77f067f8 | 536 (0x218) |
| NtSetValueKey | 0x77f06808 | 537 (0x219) |
| NtSetVolumeInformationFile | 0x77f06818 | 538 (0x21a) |
| NtShutdownSystem | 0x77f06828 | 539 (0x21b) |
| NtShutdownWorkerFactory | 0x77f06838 | 540 (0x21c) |
| NtSignalAndWaitForSingleObject | 0x77f06848 | 541 (0x21d) |
| NtSinglePhaseReject | 0x77f06858 | 542 (0x21e) |
| NtStartProfile | 0x77f06868 | 543 (0x21f) |
| NtStopProfile | 0x77f06878 | 544 (0x220) |
| NtSuspendProcess | 0x77f06888 | 545 (0x221) |
| NtSuspendThread | 0x77f06898 | 546 (0x222) |
| NtSystemDebugControl | 0x77f068a8 | 547 (0x223) |
| NtTerminateJobObject | 0x77f068b8 | 548 (0x224) |
| NtTerminateProcess | 0x77f068c8 | 549 (0x225) |
| NtTerminateThread | 0x77f068d8 | 550 (0x226) |
| NtTestAlert | 0x77f068e8 | 551 (0x227) |
| NtThawRegistry | 0x77f068f8 | 552 (0x228) |
| NtThawTransactions | 0x77f06908 | 553 (0x229) |
| NtTraceControl | 0x77f06918 | 554 (0x22a) |
| NtTraceEvent | 0x77f06928 | 555 (0x22b) |
| NtTranslateFilePath | 0x77f06938 | 556 (0x22c) |
| NtUmsThreadYield | 0x77f06948 | 557 (0x22d) |
| NtUnloadDriver | 0x77f06958 | 558 (0x22e) |
| NtUnloadKey2 | 0x77f06978 | 559 (0x22f) |
| NtUnloadKey | 0x77f06968 | 560 (0x230) |
| NtUnloadKeyEx | 0x77f06988 | 561 (0x231) |
| NtUnlockFile | 0x77f06998 | 562 (0x232) |
| NtUnlockVirtualMemory | 0x77f069a8 | 563 (0x233) |
| NtUnmapViewOfSection | 0x77f069b8 | 564 (0x234) |
| NtVdmControl | 0x77f069c8 | 565 (0x235) |
| NtWaitForDebugEvent | 0x77f069d8 | 566 (0x236) |
| NtWaitForKeyedEvent | 0x77f069e8 | 567 (0x237) |
| NtWaitForMultipleObjects32 | 0x77f06a08 | 568 (0x238) |
| NtWaitForMultipleObjects | 0x77f069f8 | 569 (0x239) |
| NtWaitForSingleObject | 0x77f06a18 | 570 (0x23a) |
| NtWaitForWorkViaWorkerFactory | 0x77f06a28 | 571 (0x23b) |
| NtWaitHighEventPair | 0x77f06a38 | 572 (0x23c) |
| NtWaitLowEventPair | 0x77f06a48 | 573 (0x23d) |
| NtWorkerFactoryWorkerReady | 0x77f06a58 | 574 (0x23e) |
| NtWriteFile | 0x77f06a68 | 575 (0x23f) |
| NtWriteFileGather | 0x77f06a78 | 576 (0x240) |
| NtWriteRequestData | 0x77f06a88 | 577 (0x241) |
| NtWriteVirtualMemory | 0x77f06a98 | 578 (0x242) |
| NtYieldExecution | 0x77f06aa8 | 579 (0x243) |
| NtdllDefWindowProc_A | 0x77f6389f | 580 (0x244) |
| NtdllDefWindowProc_W | 0x77f638aa | 581 (0x245) |
| NtdllDialogWndProc_A | 0x77f6390d | 582 (0x246) |
| NtdllDialogWndProc_W | 0x77f63918 | 583 (0x247) |
| PfxFindPrefix | 0x77f6b764 | 584 (0x248) |
| PfxInitialize | 0x77f6b417 | 585 (0x249) |
| PfxInsertPrefix | 0x77f6b671 | 586 (0x24a) |
| PfxRemovePrefix | 0x77f6b439 | 587 (0x24b) |
| RtlAbortRXact | 0x77ecc328 | 588 (0x24c) |
| RtlAbsoluteToSelfRelativeSD | 0x77ee3c92 | 589 (0x24d) |
| RtlAcquirePebLock | 0x77f18ae1 | 590 (0x24e) |
| RtlAcquirePrivilege | 0x77ed07da | 591 (0x24f) |
| RtlAcquireReleaseSRWLockExclusive | 0x77f65cf3 | 592 (0x250) |
| RtlAcquireResourceExclusive | 0x77ee94d1 | 593 (0x251) |
| RtlAcquireResourceShared | 0x77eea12c | 594 (0x252) |
| RtlAcquireSRWLockExclusive | 0x77f1334e | 595 (0x253) |
| RtlAcquireSRWLockShared | 0x77f1338e | 596 (0x254) |
| RtlActivateActivationContext | 0x77eeaabf | 597 (0x255) |
| RtlActivateActivationContextEx | 0x77eea940 | 598 (0x256) |
| RtlAddAccessAllowedAce | 0x77f25f43 | 599 (0x257) |
| RtlAddAccessAllowedAceEx | 0x77ee6f97 | 600 (0x258) |
| RtlAddAccessAllowedObjectAce | 0x77f6d39d | 601 (0x259) |
| RtlAddAccessDeniedAce | 0x77ec622c | 602 (0x25a) |
| RtlAddAccessDeniedAceEx | 0x77ec8afb | 603 (0x25b) |
| RtlAddAccessDeniedObjectAce | 0x77f6d3ea | 604 (0x25c) |
| RtlAddAce | 0x77ecb427 | 605 (0x25d) |
| RtlAddActionToRXact | 0x77ecad71 | 606 (0x25e) |
| RtlAddAtomToAtomTable | 0x77ee4360 | 607 (0x25f) |
| RtlAddAttributeActionToRXact | 0x77ecac45 | 608 (0x260) |
| RtlAddAuditAccessAce | 0x77ec219e | 609 (0x261) |
| RtlAddAuditAccessAceEx | 0x77ec568e | 610 (0x262) |
| RtlAddAuditAccessObjectAce | 0x77f6d438 | 611 (0x263) |
| RtlAddCompoundAce | 0x77f6d158 | 612 (0x264) |
| RtlAddIntegrityLabelToBoundaryDescriptor | 0x77f6d6d4 | 613 (0x265) |
| RtlAddMandatoryAce | 0x77edddbd | 614 (0x266) |
| RtlAddRefActivationContext | 0x77f19968 | 615 (0x267) |
| RtlAddRefMemoryStream | 0x77f2847c | 616 (0x268) |
| RtlAddSIDToBoundaryDescriptor | 0x77ed53d8 | 617 (0x269) |
| RtlAddVectoredContinueHandler | 0x77ee54f5 | 618 (0x26a) |
| RtlAddVectoredExceptionHandler | 0x77ecf774 | 619 (0x26b) |
| RtlAddressInSectionTable | 0x77f29063 | 620 (0x26c) |
| RtlAdjustPrivilege | 0x77ecbc3a | 621 (0x26d) |
| RtlAllocateActivationContextStack | 0x77f23521 | 622 (0x26e) |
| RtlAllocateAndInitializeSid | 0x77f22370 | 623 (0x26f) |
| RtlAllocateHandle | 0x77f3301f | 624 (0x270) |
| RtlAllocateHeap | 0x77f12dd6 | 625 (0x271) |
| RtlAllocateMemoryBlockLookaside | 0x77f96050 | 626 (0x272) |
| RtlAllocateMemoryZone | 0x77f960d6 | 627 (0x273) |
| RtlAnsiCharToUnicodeChar | 0x77f2c31b | 628 (0x274) |
| RtlAnsiStringToUnicodeSize | 0x77f6e45d | 629 (0x275) |
| RtlAnsiStringToUnicodeString | 0x77f1572f | 630 (0x276) |
| RtlAppendAsciizToString | 0x77f6e7d1 | 631 (0x277) |
| RtlAppendPathElement | 0x77ec5508 | 632 (0x278) |
| RtlAppendStringToString | 0x77f6e831 | 633 (0x279) |
| RtlAppendUnicodeStringToString | 0x77f172be | 634 (0x27a) |
| RtlAppendUnicodeToString | 0x77f1eed2 | 635 (0x27b) |
| RtlApplicationVerifierStop | 0x77f654f8 | 636 (0x27c) |
| RtlApplyRXact | 0x77ecaebd | 637 (0x27d) |
| RtlApplyRXactNoFlush | 0x77f3577e | 638 (0x27e) |
| RtlAreAllAccessesGranted | 0x77ecedc6 | 639 (0x27f) |
| RtlAreAnyAccessesGranted | 0x77f6b8f5 | 640 (0x280) |
| RtlAreBitsClear | 0x77f6efe6 | 641 (0x281) |
| RtlAreBitsSet | 0x77f1d7fd | 642 (0x282) |
| RtlAssert | 0x77f6f31b | 643 (0x283) |
| RtlBarrier | 0x77f6f41e | 644 (0x284) |
| RtlBarrierForDelete | 0x77f6f530 | 645 (0x285) |
| RtlCancelTimer | 0x77f92b9d | 646 (0x286) |
| RtlCaptureContext | 0x77f0722b | 647 (0x287) |
| RtlCaptureStackBackTrace | 0x77ee4f88 | 648 (0x288) |
| RtlCaptureStackContext | 0x77f6f7f2 | 649 (0x289) |
| RtlCharToInteger | 0x77edc4b8 | 650 (0x28a) |
| RtlCheckForOrphanedCriticalSections | 0x77edffff | 651 (0x28b) |
| RtlCheckRegistryKey | 0x77ec37f8 | 652 (0x28c) |
| RtlCleanUpTEBLangLists | 0x77eef787 | 653 (0x28d) |
| RtlClearAllBits | 0x77ecede2 | 654 (0x28e) |
| RtlClearBits | 0x77f1d428 | 655 (0x28f) |
| RtlCloneMemoryStream | 0x77f60df8 | 656 (0x290) |
| RtlCloneUserProcess | 0x77f696ea | 657 (0x291) |
| RtlCmDecodeMemIoResource | 0x77f72fd1 | 658 (0x292) |
| RtlCmEncodeMemIoResource | 0x77f72ddd | 659 (0x293) |
| RtlCommitDebugInfo | 0x77f6229d | 660 (0x294) |
| RtlCommitMemoryStream | 0x77f60df8 | 661 (0x295) |
| RtlCompactHeap | 0x77ed0eb2 | 662 (0x296) |
| RtlCompareAltitudes | 0x77f750ba | 663 (0x297) |
| RtlCompareMemory | 0x77ef5b80 | 664 (0x298) |
| RtlCompareMemoryUlong | 0x77ef5bd0 | 665 (0x299) |
| RtlCompareString | 0x77ec2495 | 666 (0x29a) |
| RtlCompareUnicodeString | 0x77f17445 | 667 (0x29b) |
| RtlCompareUnicodeStrings | 0x77f173bb | 668 (0x29c) |
| RtlCompressBuffer | 0x77f75305 | 669 (0x29d) |
| RtlComputeCrc32 | 0x77ecdd8a | 670 (0x29e) |
| RtlComputeImportTableHash | 0x77f68849 | 671 (0x29f) |
| RtlComputePrivatizedDllName_U | 0x77f60b44 | 672 (0x2a0) |
| RtlConnectToSm | 0x77ec363e | 673 (0x2a1) |
| RtlConsoleMultiByteToUnicodeN | 0x77f1e9c1 | 674 (0x2a2) |
| RtlContractHashTable | 0x77ecd703 | 675 (0x2a3) |
| RtlConvertExclusiveToShared | 0x77ec4d45 | 676 (0x2a4) |
| RtlConvertLCIDToString | 0x77f70e6a | 677 (0x2a5) |
| RtlConvertLongToLargeInteger | 0x77ef617e | 678 (0x2a6) |
| RtlConvertSharedToExclusive | 0x77ecc2d9 | 679 (0x2a7) |
| RtlConvertSidToUnicodeString | 0x77f2a618 | 680 (0x2a8) |
| RtlConvertToAutoInheritSecurityObject | 0x77f61e65 | 681 (0x2a9) |
| RtlConvertUiListToApiList | 0x77f61f10 | 682 (0x2aa) |
| RtlConvertUlongToLargeInteger | 0x77ef6186 | 683 (0x2ab) |
| RtlCopyContext | 0x77f75d33 | 684 (0x2ac) |
| RtlCopyExtendedContext | 0x77f75d11 | 685 (0x2ad) |
| RtlCopyLuid | 0x77eceda8 | 686 (0x2ae) |
| RtlCopyLuidAndAttributesArray | 0x77f6b8c6 | 687 (0x2af) |
| RtlCopyMappedMemory | 0x77ec5dbd | 688 (0x2b0) |
| RtlCopyMemoryStreamTo | 0x77f60e12 | 689 (0x2b1) |
| RtlCopyOutOfProcessMemoryStreamTo | 0x77f60e12 | 690 (0x2b2) |
| RtlCopySecurityDescriptor | 0x77ec6f78 | 691 (0x2b3) |
| RtlCopySid | 0x77f1ee59 | 692 (0x2b4) |
| RtlCopySidAndAttributesArray | 0x77f6b809 | 693 (0x2b5) |
| RtlCopyString | 0x77ee169e | 694 (0x2b6) |
| RtlCopyUnicodeString | 0x77f1a906 | 695 (0x2b7) |
| RtlCreateAcl | 0x77f2260f | 696 (0x2b8) |
| RtlCreateActivationContext | 0x77eeb228 | 697 (0x2b9) |
| RtlCreateAndSetSD | 0x77ec46da | 698 (0x2ba) |
| RtlCreateAtomTable | 0x77eeb0f7 | 699 (0x2bb) |
| RtlCreateBootStatusDataFile | 0x77f76121 | 700 (0x2bc) |
| RtlCreateBoundaryDescriptor | 0x77ed5326 | 701 (0x2bd) |
| RtlCreateEnvironment | 0x77ecbb67 | 702 (0x2be) |
| RtlCreateEnvironmentEx | 0x77f313cd | 703 (0x2bf) |
| RtlCreateHashTable | 0x77ec52e3 | 704 (0x2c0) |
| RtlCreateHeap | 0x77f2293e | 705 (0x2c1) |
| RtlCreateMemoryBlockLookaside | 0x77ec940d | 706 (0x2c2) |
| RtlCreateMemoryZone | 0x77ed19e1 | 707 (0x2c3) |
| RtlCreateProcessParameters | 0x77f6988a | 708 (0x2c4) |
| RtlCreateProcessParametersEx | 0x77f26ee9 | 709 (0x2c5) |
| RtlCreateProcessReflection | 0x77f61072 | 710 (0x2c6) |
| RtlCreateQueryDebugBuffer | 0x77edd642 | 711 (0x2c7) |
| RtlCreateRegistryKey | 0x77f6fbad | 712 (0x2c8) |
| RtlCreateSecurityDescriptor | 0x77f21333 | 713 (0x2c9) |
| RtlCreateServiceSid | 0x77ed51ce | 714 (0x2ca) |
| RtlCreateSystemVolumeInformationFolder | 0x77f7673c | 715 (0x2cb) |
| RtlCreateTagHeap | 0x77f27dfd | 716 (0x2cc) |
| RtlCreateTimer | 0x77edbaff | 717 (0x2cd) |
| RtlCreateTimerQueue | 0x77edbccf | 718 (0x2ce) |
| RtlCreateUnicodeString | 0x77f26329 | 719 (0x2cf) |
| RtlCreateUnicodeStringFromAsciiz | 0x77f26582 | 720 (0x2d0) |
| RtlCreateUserProcess | 0x77ee6b71 | 721 (0x2d1) |
| RtlCreateUserSecurityObject | 0x77ec4a4b | 722 (0x2d2) |
| RtlCreateUserStack | 0x77ecb657 | 723 (0x2d3) |
| RtlCreateUserThread | 0x77ec9250 | 724 (0x2d4) |
| RtlCreateVirtualAccountSid | 0x77ec2be2 | 725 (0x2d5) |
| RtlCultureNameToLCID | 0x77f1af73 | 726 (0x2d6) |
| RtlCustomCPToUnicodeN | 0x77f6a735 | 727 (0x2d7) |
| RtlCutoverTimeToSystemTime | 0x77ed7f46 | 728 (0x2d8) |
| RtlDeCommitDebugInfo | 0x77f622ad | 729 (0x2d9) |
| RtlDeNormalizeProcessParams | 0x77f695b0 | 730 (0x2da) |
| RtlDeactivateActivationContext | 0x77eead0d | 731 (0x2db) |
| RtlDebugPrintTimes | 0x77f92b7d | 732 (0x2dc) |
| RtlDecodePointer | 0x77f1cd10 | 733 (0x2dd) |
| RtlDecodeSystemPointer | 0x77f2cd88 | 734 (0x2de) |
| RtlDecompressBuffer | 0x77f7537d | 735 (0x2df) |
| RtlDecompressFragment | 0x77f753e5 | 736 (0x2e0) |
| RtlDefaultNpAcl | 0x77f35d9b | 737 (0x2e1) |
| RtlDelete | 0x77f1ddac | 738 (0x2e2) |
| RtlDeleteAce | 0x77ee542e | 739 (0x2e3) |
| RtlDeleteAtomFromAtomTable | 0x77ee5b00 | 740 (0x2e4) |
| RtlDeleteBarrier | 0x77f6f709 | 741 (0x2e5) |
| RtlDeleteBoundaryDescriptor | 0x77f156d1 | 742 (0x2e6) |
| RtlDeleteCriticalSection | 0x77f19ac5 | 743 (0x2e7) |
| RtlDeleteElementGenericTable | 0x77f1dd50 | 744 (0x2e8) |
| RtlDeleteElementGenericTableAvl | 0x77ecdc18 | 745 (0x2e9) |
| RtlDeleteHashTable | 0x77f36e87 | 746 (0x2ea) |
| RtlDeleteNoSplay | 0x77f76994 | 747 (0x2eb) |
| RtlDeleteRegistryValue | 0x77f6fbe3 | 748 (0x2ec) |
| RtlDeleteResource | 0x77eeb867 | 749 (0x2ed) |
| RtlDeleteSecurityObject | 0x77eda5f0 | 750 (0x2ee) |
| RtlDeleteTimer | 0x77edc392 | 751 (0x2ef) |
| RtlDeleteTimerQueue | 0x77f92b85 | 752 (0x2f0) |
| RtlDeleteTimerQueueEx | 0x77ec7722 | 753 (0x2f1) |
| RtlDeregisterSecureMemoryCacheCallback | 0x77f76c4c | 754 (0x2f2) |
| RtlDeregisterWait | 0x77edb805 | 755 (0x2f3) |
| RtlDeregisterWaitEx | 0x77edb6ce | 756 (0x2f4) |
| RtlDestroyAtomTable | 0x77f6d4cf | 757 (0x2f5) |
| RtlDestroyEnvironment | 0x77f317d6 | 758 (0x2f6) |
| RtlDestroyHandleTable | 0x77f1e2d3 | 759 (0x2f7) |
| RtlDestroyHeap | 0x77ee4d1e | 760 (0x2f8) |
| RtlDestroyMemoryBlockLookaside | 0x77ec9b4b | 761 (0x2f9) |
| RtlDestroyMemoryZone | 0x77ed1f2d | 762 (0x2fa) |
| RtlDestroyProcessParameters | 0x77f273b9 | 763 (0x2fb) |
| RtlDestroyQueryDebugBuffer | 0x77edd733 | 764 (0x2fc) |
| RtlDetectHeapLeaks | 0x77f1e1ed | 765 (0x2fd) |
| RtlDetermineDosPathNameType_U | 0x77f18677 | 766 (0x2fe) |
| RtlDisableThreadProfiling | 0x77f5edb3 | 767 (0x2ff) |
| RtlDllShutdownInProgress | 0x77f25eda | 768 (0x300) |
| RtlDnsHostNameToComputerName | 0x77ecd1dc | 769 (0x301) |
| RtlDoesFileExists_U | 0x77f32080 | 770 (0x302) |
| RtlDosApplyFileIsolationRedirection_Ustr | 0x77f1768d | 771 (0x303) |
| RtlDosPathNameToNtPathName_U | 0x77f227e0 | 772 (0x304) |
| RtlDosPathNameToNtPathName_U_WithStatus | 0x77f30e8f | 773 (0x305) |
| RtlDosPathNameToRelativeNtPathName_U | 0x77f1cd49 | 774 (0x306) |
| RtlDosPathNameToRelativeNtPathName_U_WithStatus | 0x77f1a6a1 | 775 (0x307) |
| RtlDosSearchPath_U | 0x77ee6e03 | 776 (0x308) |
| RtlDosSearchPath_Ustr | 0x77f2dd3c | 777 (0x309) |
| RtlDowncaseUnicodeChar | 0x77f6e3db | 778 (0x30a) |
| RtlDowncaseUnicodeString | 0x77ee1032 | 779 (0x30b) |
| RtlDumpResource | 0x77f6159f | 780 (0x30c) |
| RtlDuplicateUnicodeString | 0x77f32718 | 781 (0x30d) |
| RtlEmptyAtomTable | 0x77f6d586 | 782 (0x30e) |
| RtlEnableEarlyCriticalSectionEventCreation | 0x77f6161c | 783 (0x30f) |
| RtlEnableThreadProfiling | 0x77f5ece2 | 784 (0x310) |
| RtlEncodePointer | 0x77f1a295 | 785 (0x311) |
| RtlEncodeSystemPointer | 0x77f205e3 | 786 (0x312) |
| RtlEndEnumerationHashTable | 0x77ecd394 | 787 (0x313) |
| RtlEndWeakEnumerationHashTable | 0x77f75571 | 788 (0x314) |
| RtlEnlargedIntegerMultiply | 0x77ef5f5c | 789 (0x315) |
| RtlEnlargedUnsignedDivide | 0x77ef5f74 | 790 (0x316) |
| RtlEnlargedUnsignedMultiply | 0x77ef5f68 | 791 (0x317) |
| RtlEnterCriticalSection | 0x77f077a0 | 792 (0x318) |
| RtlEnumProcessHeaps | 0x77f73637 | 793 (0x319) |
| RtlEnumerateEntryHashTable | 0x77ecc000 | 794 (0x31a) |
| RtlEnumerateGenericTable | 0x77ecc1d9 | 795 (0x31b) |
| RtlEnumerateGenericTableAvl | 0x77ec785b | 796 (0x31c) |
| RtlEnumerateGenericTableLikeADirectory | 0x77f76aff | 797 (0x31d) |
| RtlEnumerateGenericTableWithoutSplaying | 0x77f1325a | 798 (0x31e) |
| RtlEnumerateGenericTableWithoutSplayingAvl | 0x77ec7880 | 799 (0x31f) |
| RtlEqualComputerName | 0x77ec2b28 | 800 (0x320) |
| RtlEqualDomainName | 0x77eccffa | 801 (0x321) |
| RtlEqualLuid | 0x77f6b89d | 802 (0x322) |
| RtlEqualPrefixSid | 0x77eda649 | 803 (0x323) |
| RtlEqualSid | 0x77f2e1d5 | 804 (0x324) |
| RtlEqualString | 0x77edd88a | 805 (0x325) |
| RtlEqualUnicodeString | 0x77f15705 | 806 (0x326) |
| RtlEraseUnicodeString | 0x77ec66f0 | 807 (0x327) |
| RtlEthernetAddressToStringA | 0x77f778db | 808 (0x328) |
| RtlEthernetAddressToStringW | 0x77f7791e | 809 (0x329) |
| RtlEthernetStringToAddressA | 0x77f77b02 | 810 (0x32a) |
| RtlEthernetStringToAddressW | 0x77f77c25 | 811 (0x32b) |
| RtlExitUserProcess | 0x77f1e12b | 812 (0x32c) |
| RtlExitUserThread | 0x77eef611 | 813 (0x32d) |
| RtlExpandEnvironmentStrings | 0x77f20def | 814 (0x32e) |
| RtlExpandEnvironmentStrings_U | 0x77f23032 | 815 (0x32f) |
| RtlExpandHashTable | 0x77ec5419 | 816 (0x330) |
| RtlExtendMemoryBlockLookaside | 0x77f6e27c | 817 (0x331) |
| RtlExtendMemoryZone | 0x77f6e2de | 818 (0x332) |
| RtlExtendedIntegerMultiply | 0x77ef6082 | 819 (0x333) |
| RtlExtendedLargeIntegerDivide | 0x77ef5f94 | 820 (0x334) |
| RtlExtendedMagicDivide | 0x77ef5ff2 | 821 (0x335) |
| RtlFillMemory | 0x77ef5c00 | 822 (0x336) |
| RtlFillMemoryUlong | 0x77ef5c70 | 823 (0x337) |
| RtlFillMemoryUlonglong | 0x77ef5c40 | 824 (0x338) |
| RtlFinalReleaseOutOfProcessMemoryStream | 0x77f60dc9 | 825 (0x339) |
| RtlFindAceByType | 0x77ed95fa | 826 (0x33a) |
| RtlFindActivationContextSectionGuid | 0x77eee1fe | 827 (0x33b) |
| RtlFindActivationContextSectionString | 0x77f1759b | 828 (0x33c) |
| RtlFindCharInUnicodeString | 0x77f171a5 | 829 (0x33d) |
| RtlFindClearBits | 0x77f25dcf | 830 (0x33e) |
| RtlFindClearBitsAndSet | 0x77f25d9c | 831 (0x33f) |
| RtlFindClearRuns | 0x77f6eb60 | 832 (0x340) |
| RtlFindClosestEncodableLength | 0x77f7304c | 833 (0x341) |
| RtlFindLastBackwardRunClear | 0x77f6f200 | 834 (0x342) |
| RtlFindLeastSignificantBit | 0x77ecda47 | 835 (0x343) |
| RtlFindLongestRunClear | 0x77f6ee8d | 836 (0x344) |
| RtlFindMessage | 0x77eec155 | 837 (0x345) |
| RtlFindMostSignificantBit | 0x77ecda94 | 838 (0x346) |
| RtlFindNextForwardRunClear | 0x77f6f076 | 839 (0x347) |
| RtlFindSetBits | 0x77f6e885 | 840 (0x348) |
| RtlFindSetBitsAndClear | 0x77f6f2d0 | 841 (0x349) |
| RtlFirstEntrySList | 0x77ef5af4 | 842 (0x34a) |
| RtlFirstFreeAce | 0x77f212f8 | 843 (0x34b) |
| RtlFlsAlloc | 0x77f261e7 | 844 (0x34c) |
| RtlFlsFree | 0x77f1def4 | 845 (0x34d) |
| RtlFlushSecureMemoryCache | 0x77f76d88 | 846 (0x34e) |
| RtlFormatCurrentUserKeyPath | 0x77f2a806 | 847 (0x34f) |
| RtlFormatMessage | 0x77f77d5b | 848 (0x350) |
| RtlFormatMessageEx | 0x77eec620 | 849 (0x351) |
| RtlFreeActivationContextStack | 0x77eef5c8 | 850 (0x352) |
| RtlFreeAnsiString | 0x77f13306 | 851 (0x353) |
| RtlFreeHandle | 0x77f337bf | 852 (0x354) |
| RtlFreeHeap | 0x77f12c6a | 853 (0x355) |
| RtlFreeMemoryBlockLookaside | 0x77f96140 | 854 (0x356) |
| RtlFreeOemString | 0x77ecced0 | 855 (0x357) |
| RtlFreeSid | 0x77f2390c | 856 (0x358) |
| RtlFreeThreadActivationContextStack | 0x77eef7ff | 857 (0x359) |
| RtlFreeUnicodeString | 0x77f13306 | 858 (0x35a) |
| RtlFreeUserStack | 0x77ecb819 | 859 (0x35b) |
| RtlGUIDFromString | 0x77f331af | 860 (0x35c) |
| RtlGenerate8dot3Name | 0x77f78132 | 861 (0x35d) |
| RtlGetAce | 0x77ee6ff0 | 862 (0x35e) |
| RtlGetActiveActivationContext | 0x77f1feb9 | 863 (0x35f) |
| RtlGetCallersAddress | 0x77f6f8f7 | 864 (0x360) |
| RtlGetCompressionWorkSpaceSize | 0x77f7529b | 865 (0x361) |
| RtlGetControlSecurityDescriptor | 0x77ee3ea4 | 866 (0x362) |
| RtlGetCriticalSectionRecursionCount | 0x77f13295 | 867 (0x363) |
| RtlGetCurrentDirectory_U | 0x77f34f48 | 868 (0x364) |
| RtlGetCurrentPeb | 0x77ef0241 | 869 (0x365) |
| RtlGetCurrentProcessorNumber | 0x77ed28f6 | 870 (0x366) |
| RtlGetCurrentProcessorNumberEx | 0x77f2ebd3 | 871 (0x367) |
| RtlGetCurrentTransaction | 0x77f248bd | 872 (0x368) |
| RtlGetDaclSecurityDescriptor | 0x77ee255d | 873 (0x369) |
| RtlGetElementGenericTable | 0x77ecc114 | 874 (0x36a) |
| RtlGetElementGenericTableAvl | 0x77f76a2d | 875 (0x36b) |
| RtlGetEnabledExtendedFeatures | 0x77f78537 | 876 (0x36c) |
| RtlGetExtendedContextLength | 0x77f75f63 | 877 (0x36d) |
| RtlGetExtendedFeaturesMask | 0x77f75fea | 878 (0x36e) |
| RtlGetFileMUIPath | 0x77ec83c3 | 879 (0x36f) |
| RtlGetFrame | 0x77f5f3f6 | 880 (0x370) |
| RtlGetFullPathName_U | 0x77f2725f | 881 (0x371) |
| RtlGetFullPathName_UEx | 0x77f25d1e | 882 (0x372) |
| RtlGetFullPathName_UstrEx | 0x77f2d707 | 883 (0x373) |
| RtlGetGroupSecurityDescriptor | 0x77edf6a4 | 884 (0x374) |
| RtlGetIntegerAtom | 0x77eeae89 | 885 (0x375) |
| RtlGetLastNtStatus | 0x77f78556 | 886 (0x376) |
| RtlGetLastWin32Error | 0x77f29aed | 887 (0x377) |
| RtlGetLengthWithoutLastFullDosOrNtPathElement | 0x77f311cb | 888 (0x378) |
| RtlGetLengthWithoutTrailingPathSeperators | 0x77ec4072 | 889 (0x379) |
| RtlGetLocaleFileMappingAddress | 0x77f262ae | 890 (0x37a) |
| RtlGetLongestNtPathLength | 0x77edd87f | 891 (0x37b) |
| RtlGetNativeSystemInformation | 0x77f061f8 | 892 (0x37c) |
| RtlGetNextEntryHashTable | 0x77ecd727 | 893 (0x37d) |
| RtlGetNtGlobalFlags | 0x77f17363 | 894 (0x37e) |
| RtlGetNtProductType | 0x77f265b9 | 895 (0x37f) |
| RtlGetNtVersionNumbers | 0x77f28e52 | 896 (0x380) |
| RtlGetOwnerSecurityDescriptor | 0x77edf65d | 897 (0x381) |
| RtlGetParentLocaleName | 0x77f1bcd1 | 898 (0x382) |
| RtlGetProcessHeaps | 0x77f3abd1 | 899 (0x383) |
| RtlGetProcessPreferredUILanguages | 0x77f70c31 | 900 (0x384) |
| RtlGetProductInfo | 0x77ee1114 | 901 (0x385) |
| RtlGetSaclSecurityDescriptor | 0x77ee6fbb | 902 (0x386) |
| RtlGetSecurityDescriptorRMControl | 0x77f6bcf0 | 903 (0x387) |
| RtlGetSetBootStatusData | 0x77ec22dc | 904 (0x388) |
| RtlGetSystemPreferredUILanguages | 0x77ecb933 | 905 (0x389) |
| RtlGetThreadErrorMode | 0x77f37f20 | 906 (0x38a) |
| RtlGetThreadLangIdByIndex | 0x77f70284 | 907 (0x38b) |
| RtlGetThreadPreferredUILanguages | 0x77f1943d | 908 (0x38c) |
| RtlGetUILanguageInfo | 0x77f36016 | 909 (0x38d) |
| RtlGetUnloadEventTrace | 0x77f5f97b | 910 (0x38e) |
| RtlGetUnloadEventTraceEx | 0x77f381cd | 911 (0x38f) |
| RtlGetUserInfoHeap | 0x77eef0c4 | 912 (0x390) |
| RtlGetUserPreferredUILanguages | 0x77f3b23c | 913 (0x391) |
| RtlGetVersion | 0x77f265e3 | 914 (0x392) |
| RtlHashUnicodeString | 0x77f1d1e1 | 915 (0x393) |
| RtlHeapTrkInitialize | 0x77f7988e | 916 (0x394) |
| RtlIdentifierAuthoritySid | 0x77eda5dc | 917 (0x395) |
| RtlIdnToAscii | 0x77ed2907 | 918 (0x396) |
| RtlIdnToNameprepUnicode | 0x77f7a663 | 919 (0x397) |
| RtlIdnToUnicode | 0x77f7a687 | 920 (0x398) |
| RtlImageDirectoryEntryToData | 0x77f1f63e | 921 (0x399) |
| RtlImageNtHeader | 0x77f1fa29 | 922 (0x39a) |
| RtlImageNtHeaderEx | 0x77f1f58d | 923 (0x39b) |
| RtlImageRvaToSection | 0x77f29095 | 924 (0x39c) |
| RtlImageRvaToVa | 0x77f6d844 | 925 (0x39d) |
| RtlImpersonateSelf | 0x77ecac2b | 926 (0x39e) |
| RtlImpersonateSelfEx | 0x77ecab6d | 927 (0x39f) |
| RtlInitAnsiString | 0x77ef4130 | 928 (0x3a0) |
| RtlInitAnsiStringEx | 0x77f158b5 | 929 (0x3a1) |
| RtlInitBarrier | 0x77f6f690 | 930 (0x3a2) |
| RtlInitCodePageTable | 0x77f28043 | 931 (0x3a3) |
| RtlInitEnumerationHashTable | 0x77ecd348 | 932 (0x3a4) |
| RtlInitMemoryStream | 0x77f60dc9 | 933 (0x3a5) |
| RtlInitNlsTables | 0x77f2820b | 934 (0x3a6) |
| RtlInitOutOfProcessMemoryStream | 0x77f60dc9 | 935 (0x3a7) |
| RtlInitString | 0x77ef40f8 | 936 (0x3a8) |
| RtlInitUnicodeString | 0x77ef4168 | 937 (0x3a9) |
| RtlInitUnicodeStringEx | 0x77f16f0a | 938 (0x3aa) |
| RtlInitWeakEnumerationHashTable | 0x77f75551 | 939 (0x3ab) |
| RtlInitializeAtomPackage | 0x77f2847c | 940 (0x3ac) |
| RtlInitializeBitMap | 0x77f25841 | 941 (0x3ad) |
| RtlInitializeConditionVariable | 0x77f19981 | 942 (0x3ae) |
| RtlInitializeContext | 0x77f7a828 | 943 (0x3af) |
| RtlInitializeCriticalSection | 0x77f1a149 | 944 (0x3b0) |
| RtlInitializeCriticalSectionAndSpinCount | 0x77f1ee8d | 945 (0x3b1) |
| RtlInitializeCriticalSectionEx | 0x77f16db9 | 946 (0x3b2) |
| RtlInitializeExceptionChain | 0x77f23706 | 947 (0x3b3) |
| RtlInitializeExtendedContext | 0x77f75e75 | 948 (0x3b4) |
| RtlInitializeGenericTable | 0x77f266c8 | 949 (0x3b5) |
| RtlInitializeGenericTableAvl | 0x77ec7812 | 950 (0x3b6) |
| RtlInitializeHandleTable | 0x77f28d55 | 951 (0x3b7) |
| RtlInitializeNtUserPfn | 0x77f63aca | 952 (0x3b8) |
| RtlInitializeRXact | 0x77ec201b | 953 (0x3b9) |
| RtlInitializeResource | 0x77ee9575 | 954 (0x3ba) |
| RtlInitializeSListHead | 0x77f25eeb | 955 (0x3bb) |
| RtlInitializeSRWLock | 0x77f19981 | 956 (0x3bc) |
| RtlInitializeSid | 0x77f26771 | 957 (0x3bd) |
| RtlInsertElementGenericTable | 0x77f34ffc | 958 (0x3be) |
| RtlInsertElementGenericTableAvl | 0x77ecc3de | 959 (0x3bf) |
| RtlInsertElementGenericTableFull | 0x77f3502e | 960 (0x3c0) |
| RtlInsertElementGenericTableFullAvl | 0x77ed793c | 961 (0x3c1) |
| RtlInsertEntryHashTable | 0x77ecd2ed | 962 (0x3c2) |
| RtlInt64ToUnicodeString | 0x77f6fad6 | 963 (0x3c3) |
| RtlIntegerToChar | 0x77f1a7c1 | 964 (0x3c4) |
| RtlIntegerToUnicodeString | 0x77f1a879 | 965 (0x3c5) |
| RtlInterlockedClearBitRun | 0x77edba92 | 966 (0x3c6) |
| RtlInterlockedCompareExchange64 | 0x77ef5b1c | 967 (0x3c7) |
| RtlInterlockedFlushSList | 0x77f13129 | 968 (0x3c8) |
| RtlInterlockedPopEntrySList | 0x77f168c7 | 969 (0x3c9) |
| RtlInterlockedPushEntrySList | 0x77f1994f | 970 (0x3ca) |
| RtlInterlockedSetBitRun | 0x77f6f16d | 971 (0x3cb) |
| RtlIoDecodeMemIoResource | 0x77f72f13 | 972 (0x3cc) |
| RtlIoEncodeMemIoResource | 0x77f72b2b | 973 (0x3cd) |
| RtlIpv4AddressToStringA | 0x77ed460e | 974 (0x3ce) |
| RtlIpv4AddressToStringExA | 0x77f7783d | 975 (0x3cf) |
| RtlIpv4AddressToStringExW | 0x77ece21d | 976 (0x3d0) |
| RtlIpv4AddressToStringW | 0x77ece1e1 | 977 (0x3d1) |
| RtlIpv4StringToAddressA | 0x77ed34cf | 978 (0x3d2) |
| RtlIpv4StringToAddressExA | 0x77f77964 | 979 (0x3d3) |
| RtlIpv4StringToAddressExW | 0x77ece692 | 980 (0x3d4) |
| RtlIpv4StringToAddressW | 0x77ed3acd | 981 (0x3d5) |
| RtlIpv6AddressToStringA | 0x77eceb70 | 982 (0x3d6) |
| RtlIpv6AddressToStringExA | 0x77f7775e | 983 (0x3d7) |
| RtlIpv6AddressToStringExW | 0x77ece3be | 984 (0x3d8) |
| RtlIpv6AddressToStringW | 0x77ece2c5 | 985 (0x3d9) |
| RtlIpv6StringToAddressA | 0x77ed36d7 | 986 (0x3da) |
| RtlIpv6StringToAddressExA | 0x77f3897e | 987 (0x3db) |
| RtlIpv6StringToAddressExW | 0x77ed3977 | 988 (0x3dc) |
| RtlIpv6StringToAddressW | 0x77ed39d2 | 989 (0x3dd) |
| RtlIsActivationContextActive | 0x77f6811f | 990 (0x3de) |
| RtlIsCriticalSectionLocked | 0x77f614d1 | 991 (0x3df) |
| RtlIsCriticalSectionLockedByThread | 0x77ef0556 | 992 (0x3e0) |
| RtlIsCurrentThreadAttachExempt | 0x77f230fe | 993 (0x3e1) |
| RtlIsDosDeviceName_U | 0x77f1a6c2 | 994 (0x3e2) |
| RtlIsGenericTableEmpty | 0x77f1de1d | 995 (0x3e3) |
| RtlIsGenericTableEmptyAvl | 0x77f76a14 | 996 (0x3e4) |
| RtlIsNameInExpression | 0x77f7b163 | 997 (0x3e5) |
| RtlIsNameLegalDOS8Dot3 | 0x77f77fb8 | 998 (0x3e6) |
| RtlIsNormalizedString | 0x77f7cdf2 | 999 (0x3e7) |
| RtlIsTextUnicode | 0x77eeddc3 | 1000 (0x3e8) |
| RtlIsThreadWithinLoaderCallout | 0x77eeb9e6 | 1001 (0x3e9) |
| RtlIsValidHandle | 0x77f32fda | 1002 (0x3ea) |
| RtlIsValidIndexHandle | 0x77f3311e | 1003 (0x3eb) |
| RtlIsValidLocaleName | 0x77f36451 | 1004 (0x3ec) |
| RtlKnownExceptionFilter | 0x77f37f32 | 1005 (0x3ed) |
| RtlLCIDToCultureName | 0x77f193df | 1006 (0x3ee) |
| RtlLargeIntegerAdd | 0x77ef5f48 | 1007 (0x3ef) |
| RtlLargeIntegerArithmeticShift | 0x77ef612a | 1008 (0x3f0) |
| RtlLargeIntegerDivide | 0x77f7d172 | 1009 (0x3f1) |
| RtlLargeIntegerNegate | 0x77ef6156 | 1010 (0x3f2) |
| RtlLargeIntegerShiftLeft | 0x77ef60da | 1011 (0x3f3) |
| RtlLargeIntegerShiftRight | 0x77ef6102 | 1012 (0x3f4) |
| RtlLargeIntegerSubtract | 0x77ef616a | 1013 (0x3f5) |
| RtlLargeIntegerToChar | 0x77ec677c | 1014 (0x3f6) |
| RtlLcidToLocaleName | 0x77f1919f | 1015 (0x3f7) |
| RtlLeaveCriticalSection | 0x77f07760 | 1016 (0x3f8) |
| RtlLengthRequiredSid | 0x77f2226a | 1017 (0x3f9) |
| RtlLengthSecurityDescriptor | 0x77ee3e12 | 1018 (0x3fa) |
| RtlLengthSid | 0x77f1ede7 | 1019 (0x3fb) |
| RtlLoadString | 0x77eecc7e | 1020 (0x3fc) |
| RtlLocalTimeToSystemTime | 0x77f6b3a2 | 1021 (0x3fd) |
| RtlLocaleNameToLcid | 0x77f1b23a | 1022 (0x3fe) |
| RtlLocateExtendedFeature | 0x77f76063 | 1023 (0x3ff) |
| RtlLocateLegacyContext | 0x77f75b5f | 1024 (0x400) |
| RtlLockBootStatusData | 0x77ec21d5 | 1025 (0x401) |
| RtlLockCurrentThread | 0x77ec96d0 | 1026 (0x402) |
| RtlLockHeap | 0x77f1d890 | 1027 (0x403) |
| RtlLockMemoryBlockLookaside | 0x77ec9641 | 1028 (0x404) |
| RtlLockMemoryStreamRegion | 0x77f60e12 | 1029 (0x405) |
| RtlLockMemoryZone | 0x77ed1a5f | 1030 (0x406) |
| RtlLockModuleSection | 0x77ed1b1b | 1031 (0x407) |
| RtlLogStackBackTrace | 0x77f7da15 | 1032 (0x408) |
| RtlLookupAtomInAtomTable | 0x77eeafb0 | 1033 (0x409) |
| RtlLookupElementGenericTable | 0x77f131f4 | 1034 (0x40a) |
| RtlLookupElementGenericTableAvl | 0x77f30716 | 1035 (0x40b) |
| RtlLookupElementGenericTableFull | 0x77f13215 | 1036 (0x40c) |
| RtlLookupElementGenericTableFullAvl | 0x77f30737 | 1037 (0x40d) |
| RtlLookupEntryHashTable | 0x77ecd6be | 1038 (0x40e) |
| RtlMakeSelfRelativeSD | 0x77ee3ba4 | 1039 (0x40f) |
| RtlMapGenericMask | 0x77ed9571 | 1040 (0x410) |
| RtlMapSecurityErrorToNtStatus | 0x77f38648 | 1041 (0x411) |
| RtlMoveMemory | 0x77ef5cc0 | 1042 (0x412) |
| RtlMultiAppendUnicodeStringBuffer | 0x77f1a39e | 1043 (0x413) |
| RtlMultiByteToUnicodeN | 0x77f13509 | 1044 (0x414) |
| RtlMultiByteToUnicodeSize | 0x77ed19b9 | 1045 (0x415) |
| RtlMultipleAllocateHeap | 0x77f745df | 1046 (0x416) |
| RtlMultipleFreeHeap | 0x77f7465c | 1047 (0x417) |
| RtlNewInstanceSecurityObject | 0x77f61ccf | 1048 (0x418) |
| RtlNewSecurityGrantedAccess | 0x77f61d45 | 1049 (0x419) |
| RtlNewSecurityObject | 0x77ecf525 | 1050 (0x41a) |
| RtlNewSecurityObjectEx | 0x77edad9f | 1051 (0x41b) |
| RtlNewSecurityObjectWithMultipleInheritance | 0x77f618c4 | 1052 (0x41c) |
| RtlNormalizeProcessParams | 0x77f28341 | 1053 (0x41d) |
| RtlNormalizeString | 0x77f7cd9f | 1054 (0x41e) |
| RtlNtPathNameToDosPathName | 0x77edee1d | 1055 (0x41f) |
| RtlNtStatusToDosError | 0x77f13c65 | 1056 (0x420) |
| RtlNtStatusToDosErrorNoTeb | 0x77f13ca4 | 1057 (0x421) |
| RtlNumberGenericTableElements | 0x77f1e080 | 1058 (0x422) |
| RtlNumberGenericTableElementsAvl | 0x77ed7cae | 1059 (0x423) |
| RtlNumberOfClearBits | 0x77f6efc7 | 1060 (0x424) |
| RtlNumberOfSetBits | 0x77f6eec4 | 1061 (0x425) |
| RtlNumberOfSetBitsUlongPtr | 0x77ec4c00 | 1062 (0x426) |
| RtlOemStringToUnicodeSize | 0x77f6e45d | 1063 (0x427) |
| RtlOemStringToUnicodeString | 0x77edeabd | 1064 (0x428) |
| RtlOemToUnicodeN | 0x77ede994 | 1065 (0x429) |
| RtlOpenCurrentUser | 0x77f2a8fe | 1066 (0x42a) |
| RtlOwnerAcesPresent | 0x77f35858 | 1067 (0x42b) |
| RtlPcToFileHeader | 0x77eea173 | 1068 (0x42c) |
| RtlPinAtomInAtomTable | 0x77f6d633 | 1069 (0x42d) |
| RtlPopFrame | 0x77f5f3d6 | 1070 (0x42e) |
| RtlPrefixString | 0x77f3ae0a | 1071 (0x42f) |
| RtlPrefixUnicodeString | 0x77f30cb1 | 1072 (0x430) |
| RtlProcessFlsData | 0x77f18e89 | 1073 (0x431) |
| RtlProtectHeap | 0x77f73144 | 1074 (0x432) |
| RtlPushFrame | 0x77f5f3b3 | 1075 (0x433) |
| RtlQueryActivationContextApplicationSettings | 0x77f3561b | 1076 (0x434) |
| RtlQueryAtomInAtomTable | 0x77eddcd6 | 1077 (0x435) |
| RtlQueryCriticalSectionOwner | 0x77f6173f | 1078 (0x436) |
| RtlQueryDepthSList | 0x77f19a38 | 1079 (0x437) |
| RtlQueryDynamicTimeZoneInformation | 0x77f6fe28 | 1080 (0x438) |
| RtlQueryElevationFlags | 0x77f30a0b | 1081 (0x439) |
| RtlQueryEnvironmentVariable | 0x77f1875f | 1082 (0x43a) |
| RtlQueryEnvironmentVariable_U | 0x77f24f26 | 1083 (0x43b) |
| RtlQueryHeapInformation | 0x77f381f6 | 1084 (0x43c) |
| RtlQueryInformationAcl | 0x77edacad | 1085 (0x43d) |
| RtlQueryInformationActivationContext | 0x77f23ed1 | 1086 (0x43e) |
| RtlQueryInformationActiveActivationContext | 0x77eeb18c | 1087 (0x43f) |
| RtlQueryInterfaceMemoryStream | 0x77f60deb | 1088 (0x440) |
| RtlQueryModuleInformation | 0x77f698bd | 1089 (0x441) |
| RtlQueryPerformanceCounter | 0x77f1313f | 1090 (0x442) |
| RtlQueryPerformanceFrequency | 0x77ee3ed2 | 1091 (0x443) |
| RtlQueryProcessBackTraceInformation | 0x77f62432 | 1092 (0x444) |
| RtlQueryProcessDebugInformation | 0x77edd3b6 | 1093 (0x445) |
| RtlQueryProcessHeapInformation | 0x77f629ff | 1094 (0x446) |
| RtlQueryProcessLockInformation | 0x77f62783 | 1095 (0x447) |
| RtlQueryRegistryValues | 0x77ed8833 | 1096 (0x448) |
| RtlQuerySecurityObject | 0x77f618fd | 1097 (0x449) |
| RtlQueryTagHeap | 0x77f734ec | 1098 (0x44a) |
| RtlQueryThreadProfiling | 0x77f5edfd | 1099 (0x44b) |
| RtlQueryTimeZoneInformation | 0x77ed909d | 1100 (0x44c) |
| RtlQueueApcWow64Thread | 0x77f65924 | 1101 (0x44d) |
| RtlQueueWorkItem | 0x77eedb4d | 1102 (0x44e) |
| RtlRaiseException | 0x77f070c8 | 1103 (0x44f) |
| RtlRaiseStatus | 0x77f07105 | 1104 (0x450) |
| RtlRandom | 0x77f310f9 | 1105 (0x451) |
| RtlRandomEx | 0x77f2283d | 1106 (0x452) |
| RtlReAllocateHeap | 0x77f2ff51 | 1107 (0x453) |
| RtlReadMemoryStream | 0x77f60dd1 | 1108 (0x454) |
| RtlReadOutOfProcessMemoryStream | 0x77f60dd1 | 1109 (0x455) |
| RtlReadThreadProfilingData | 0x77f5ee1c | 1110 (0x456) |
| RtlRealPredecessor | 0x77f76957 | 1111 (0x457) |
| RtlRealSuccessor | 0x77f1ddef | 1112 (0x458) |
| RtlRegisterSecureMemoryCacheCallback | 0x77f76bce | 1113 (0x459) |
| RtlRegisterThreadWithCsrss | 0x77ef0250 | 1114 (0x45a) |
| RtlRegisterWait | 0x77ed93af | 1115 (0x45b) |
| RtlReleaseActivationContext | 0x77f32b3a | 1116 (0x45c) |
| RtlReleaseMemoryStream | 0x77f2847c | 1117 (0x45d) |
| RtlReleasePebLock | 0x77f18aca | 1118 (0x45e) |
| RtlReleasePrivilege | 0x77ed0989 | 1119 (0x45f) |
| RtlReleaseRelativeName | 0x77f17f7a | 1120 (0x460) |
| RtlReleaseResource | 0x77ee9451 | 1121 (0x461) |
| RtlReleaseSRWLockExclusive | 0x77f13324 | 1122 (0x462) |
| RtlReleaseSRWLockShared | 0x77f133d7 | 1123 (0x463) |
| RtlRemoteCall | 0x77f7a8e4 | 1124 (0x464) |
| RtlRemoveEntryHashTable | 0x77ecd760 | 1125 (0x465) |
| RtlRemovePrivileges | 0x77ec8f5e | 1126 (0x466) |
| RtlRemoveVectoredContinueHandler | 0x77f63c81 | 1127 (0x467) |
| RtlRemoveVectoredExceptionHandler | 0x77f3ad2e | 1128 (0x468) |
| RtlReplaceSidInSd | 0x77f6bec5 | 1129 (0x469) |
| RtlReportException | 0x77f65f41 | 1130 (0x46a) |
| RtlReportSilentProcessExit | 0x77f1dfdc | 1131 (0x46b) |
| RtlReportSqmEscalation | 0x77f65ffc | 1132 (0x46c) |
| RtlResetMemoryBlockLookaside | 0x77f6e298 | 1133 (0x46d) |
| RtlResetMemoryZone | 0x77f6e39a | 1134 (0x46e) |
| RtlResetRtlTranslations | 0x77f2811a | 1135 (0x46f) |
| RtlRestoreLastWin32Error | 0x77f130fb | 1136 (0x470) |
| RtlRetrieveNtUserPfn | 0x77f63b62 | 1137 (0x471) |
| RtlRevertMemoryStream | 0x77f60e05 | 1138 (0x472) |
| RtlRunDecodeUnicodeString | 0x77ec74d3 | 1139 (0x473) |
| RtlRunEncodeUnicodeString | 0x77ec7487 | 1140 (0x474) |
| RtlRunOnceBeginInitialize | 0x77f16fef | 1141 (0x475) |
| RtlRunOnceComplete | 0x77f1a54a | 1142 (0x476) |
| RtlRunOnceExecuteOnce | 0x77f16fb7 | 1143 (0x477) |
| RtlRunOnceInitialize | 0x77f19981 | 1144 (0x478) |
| RtlSecondsSince1970ToTime | 0x77ecbaba | 1145 (0x479) |
| RtlSecondsSince1980ToTime | 0x77f6b36b | 1146 (0x47a) |
| RtlSeekMemoryStream | 0x77f60dde | 1147 (0x47b) |
| RtlSelfRelativeToAbsoluteSD2 | 0x77ec5754 | 1148 (0x47c) |
| RtlSelfRelativeToAbsoluteSD | 0x77ed0c79 | 1149 (0x47d) |
| RtlSendMsgToSm | 0x77ec4b37 | 1150 (0x47e) |
| RtlSetAllBits | 0x77ecafcc | 1151 (0x47f) |
| RtlSetAttributesSecurityDescriptor | 0x77f6c17d | 1152 (0x480) |
| RtlSetBits | 0x77f25cdc | 1153 (0x481) |
| RtlSetControlSecurityDescriptor | 0x77ec80e0 | 1154 (0x482) |
| RtlSetCriticalSectionSpinCount | 0x77f25f0f | 1155 (0x483) |
| RtlSetCurrentDirectory_U | 0x77f34e85 | 1156 (0x484) |
| RtlSetCurrentEnvironment | 0x77f36ff1 | 1157 (0x485) |
| RtlSetCurrentTransaction | 0x77f24893 | 1158 (0x486) |
| RtlSetDaclSecurityDescriptor | 0x77f2314e | 1159 (0x487) |
| RtlSetDynamicTimeZoneInformation | 0x77f6fe0d | 1160 (0x488) |
| RtlSetEnvironmentStrings | 0x77ee237f | 1161 (0x489) |
| RtlSetEnvironmentVar | 0x77f1c9bd | 1162 (0x48a) |
| RtlSetEnvironmentVariable | 0x77eea0ed | 1163 (0x48b) |
| RtlSetExtendedFeaturesMask | 0x77f75bcf | 1164 (0x48c) |
| RtlSetGroupSecurityDescriptor | 0x77f2f644 | 1165 (0x48d) |
| RtlSetHeapInformation | 0x77f2b4a5 | 1166 (0x48e) |
| RtlSetInformationAcl | 0x77f6d071 | 1167 (0x48f) |
| RtlSetIoCompletionCallback | 0x77f38c8e | 1168 (0x490) |
| RtlSetLastWin32Error | 0x77f130fb | 1169 (0x491) |
| RtlSetLastWin32ErrorAndNtStatusFromNtStatus | 0x77f333b5 | 1170 (0x492) |
| RtlSetMemoryStreamSize | 0x77f60deb | 1171 (0x493) |
| RtlSetOwnerSecurityDescriptor | 0x77f2f5aa | 1172 (0x494) |
| RtlSetProcessDebugInformation | 0x77f62308 | 1173 (0x495) |
| RtlSetProcessIsCritical | 0x77ec1fa4 | 1174 (0x496) |
| RtlSetProcessPreferredUILanguages | 0x77f721a6 | 1175 (0x497) |
| RtlSetSaclSecurityDescriptor | 0x77ee6f38 | 1176 (0x498) |
| RtlSetSecurityDescriptorRMControl | 0x77f6bd57 | 1177 (0x499) |
| RtlSetSecurityObject | 0x77ec7030 | 1178 (0x49a) |
| RtlSetSecurityObjectEx | 0x77f618d4 | 1179 (0x49b) |
| RtlSetThreadErrorMode | 0x77f337ef | 1180 (0x49c) |
| RtlSetThreadIsCritical | 0x77ec1f62 | 1181 (0x49d) |
| RtlSetThreadPoolStartFunc | 0x77f28f72 | 1182 (0x49e) |
| RtlSetThreadPreferredUILanguages | 0x77f1da7e | 1183 (0x49f) |
| RtlSetTimeZoneInformation | 0x77f6fdf2 | 1184 (0x4a0) |
| RtlSetTimer | 0x77f92bb8 | 1185 (0x4a1) |
| RtlSetUnhandledExceptionFilter | 0x77f27de2 | 1186 (0x4a2) |
| RtlSetUserFlagsHeap | 0x77f732a6 | 1187 (0x4a3) |
| RtlSetUserValueHeap | 0x77eeeb5a | 1188 (0x4a4) |
| RtlSidDominates | 0x77f35a9d | 1189 (0x4a5) |
| RtlSidEqualLevel | 0x77f6be45 | 1190 (0x4a6) |
| RtlSidHashInitialize | 0x77ecc41c | 1191 (0x4a7) |
| RtlSidHashLookup | 0x77ecc49f | 1192 (0x4a8) |
| RtlSidIsHigherLevel | 0x77f6bdc5 | 1193 (0x4a9) |
| RtlSizeHeap | 0x77f19bec | 1194 (0x4aa) |
| RtlSleepConditionVariableCS | 0x77ec65ef | 1195 (0x4ab) |
| RtlSleepConditionVariableSRW | 0x77ec4940 | 1196 (0x4ac) |
| RtlSplay | 0x77f1319d | 1197 (0x4ad) |
| RtlStartRXact | 0x77ecc38b | 1198 (0x4ae) |
| RtlStatMemoryStream | 0x77f60deb | 1199 (0x4af) |
| RtlStringFromGUID | 0x77edbe3b | 1200 (0x4b0) |
| RtlSubAuthorityCountSid | 0x77f30882 | 1201 (0x4b1) |
| RtlSubAuthoritySid | 0x77f26759 | 1202 (0x4b2) |
| RtlSubtreePredecessor | 0x77f1e94c | 1203 (0x4b3) |
| RtlSubtreeSuccessor | 0x77f76934 | 1204 (0x4b4) |
| RtlSystemTimeToLocalTime | 0x77ecd2b1 | 1205 (0x4b5) |
| RtlTestBit | 0x77eed715 | 1206 (0x4b6) |
| RtlTimeFieldsToTime | 0x77f1a97d | 1207 (0x4b7) |
| RtlTimeToElapsedTimeFields | 0x77ee59f7 | 1208 (0x4b8) |
| RtlTimeToSecondsSince1970 | 0x77ed33b5 | 1209 (0x4b9) |
| RtlTimeToSecondsSince1980 | 0x77f28d04 | 1210 (0x4ba) |
| RtlTimeToTimeFields | 0x77f1abad | 1211 (0x4bb) |
| RtlTraceDatabaseAdd | 0x77f7dfdb | 1212 (0x4bc) |
| RtlTraceDatabaseCreate | 0x77f7dc6d | 1213 (0x4bd) |
| RtlTraceDatabaseDestroy | 0x77f7dd72 | 1214 (0x4be) |
| RtlTraceDatabaseEnumerate | 0x77f7dbe0 | 1215 (0x4bf) |
| RtlTraceDatabaseFind | 0x77f7de25 | 1216 (0x4c0) |
| RtlTraceDatabaseLock | 0x77f7dfbb | 1217 (0x4c1) |
| RtlTraceDatabaseUnlock | 0x77f7dfcb | 1218 (0x4c2) |
| RtlTraceDatabaseValidate | 0x77f7dddb | 1219 (0x4c3) |
| RtlTryAcquirePebLock | 0x77ee458e | 1220 (0x4c4) |
| RtlTryAcquireSRWLockExclusive | 0x77ef1801 | 1221 (0x4c5) |
| RtlTryAcquireSRWLockShared | 0x77f65bc2 | 1222 (0x4c6) |
| RtlTryEnterCriticalSection | 0x77f132bc | 1223 (0x4c7) |
| RtlUTF8ToUnicodeN | 0x77ee473a | 1224 (0x4c8) |
| RtlUnhandledExceptionFilter2 | 0x77f7ce62 | 1225 (0x4c9) |
| RtlUnhandledExceptionFilter | 0x77f7d157 | 1226 (0x4ca) |
| RtlUnicodeStringToAnsiSize | 0x77f6e438 | 1227 (0x4cb) |
| RtlUnicodeStringToAnsiString | 0x77f19e8e | 1228 (0x4cc) |
| RtlUnicodeStringToCountedOemString | 0x77f6e56b | 1229 (0x4cd) |
| RtlUnicodeStringToInteger | 0x77f303e7 | 1230 (0x4ce) |
| RtlUnicodeStringToOemSize | 0x77f6e438 | 1231 (0x4cf) |
| RtlUnicodeStringToOemString | 0x77edeb8f | 1232 (0x4d0) |
| RtlUnicodeToCustomCPN | 0x77f6a91d | 1233 (0x4d1) |
| RtlUnicodeToMultiByteN | 0x77f19d77 | 1234 (0x4d2) |
| RtlUnicodeToMultiByteSize | 0x77f2b45e | 1235 (0x4d3) |
| RtlUnicodeToOemN | 0x77f338c7 | 1236 (0x4d4) |
| RtlUnicodeToUTF8N | 0x77ee38ec | 1237 (0x4d5) |
| RtlUniform | 0x77f2722b | 1238 (0x4d6) |
| RtlUnlockBootStatusData | 0x77ec2296 | 1239 (0x4d7) |
| RtlUnlockCurrentThread | 0x77ec97d9 | 1240 (0x4d8) |
| RtlUnlockHeap | 0x77f1d8e9 | 1241 (0x4d9) |
| RtlUnlockMemoryBlockLookaside | 0x77ec9b8e | 1242 (0x4da) |
| RtlUnlockMemoryStreamRegion | 0x77f60e12 | 1243 (0x4db) |
| RtlUnlockMemoryZone | 0x77ed1e21 | 1244 (0x4dc) |
| RtlUnlockModuleSection | 0x77ed1eaa | 1245 (0x4dd) |
| RtlUnwind | 0x77edfa18 | 1246 (0x4de) |
| RtlUpcaseUnicodeChar | 0x77f17507 | 1247 (0x4df) |
| RtlUpcaseUnicodeString | 0x77f1aec9 | 1248 (0x4e0) |
| RtlUpcaseUnicodeStringToAnsiString | 0x77f6e484 | 1249 (0x4e1) |
| RtlUpcaseUnicodeStringToCountedOemString | 0x77f6e67b | 1250 (0x4e2) |
| RtlUpcaseUnicodeStringToOemString | 0x77eccdf6 | 1251 (0x4e3) |
| RtlUpcaseUnicodeToCustomCPN | 0x77f6aacd | 1252 (0x4e4) |
| RtlUpcaseUnicodeToMultiByteN | 0x77f324f3 | 1253 (0x4e5) |
| RtlUpcaseUnicodeToOemN | 0x77eccb47 | 1254 (0x4e6) |
| RtlUpdateClonedCriticalSection | 0x77f615ea | 1255 (0x4e7) |
| RtlUpdateClonedSRWLock | 0x77f65cd3 | 1256 (0x4e8) |
| RtlUpdateTimer | 0x77ecd852 | 1257 (0x4e9) |
| RtlUpperChar | 0x77edd8e6 | 1258 (0x4ea) |
| RtlUpperString | 0x77f6e78b | 1259 (0x4eb) |
| RtlUserThreadStart | 0x77f07098 | 1260 (0x4ec) |
| RtlValidAcl | 0x77f20ce7 | 1261 (0x4ed) |
| RtlValidRelativeSecurityDescriptor | 0x77ee178f | 1262 (0x4ee) |
| RtlValidSecurityDescriptor | 0x77ee36ae | 1263 (0x4ef) |
| RtlValidSid | 0x77f1ee03 | 1264 (0x4f0) |
| RtlValidateHeap | 0x77ee588c | 1265 (0x4f1) |
| RtlValidateProcessHeaps | 0x77f749fe | 1266 (0x4f2) |
| RtlValidateUnicodeString | 0x77f170fc | 1267 (0x4f3) |
| RtlVerifyVersionInfo | 0x77ee3071 | 1268 (0x4f4) |
| RtlWakeAllConditionVariable | 0x77ee45a5 | 1269 (0x4f5) |
| RtlWakeConditionVariable | 0x77f65a7b | 1270 (0x4f6) |
| RtlWalkFrameChain | 0x77ee5003 | 1271 (0x4f7) |
| RtlWalkHeap | 0x77ec44cd | 1272 (0x4f8) |
| RtlWeaklyEnumerateEntryHashTable | 0x77f75561 | 1273 (0x4f9) |
| RtlWerpReportException | 0x77f37ff0 | 1274 (0x4fa) |
| RtlWow64CallFunction64 | 0x77f65934 | 1275 (0x4fb) |
| RtlWow64EnableFsRedirection | 0x77f65941 | 1276 (0x4fc) |
| RtlWow64EnableFsRedirectionEx | 0x77edc659 | 1277 (0x4fd) |
| RtlWriteMemoryStream | 0x77f60dd1 | 1278 (0x4fe) |
| RtlWriteRegistryValue | 0x77f6fb4e | 1279 (0x4ff) |
| RtlZeroHeap | 0x77f6dbbd | 1280 (0x500) |
| RtlZeroMemory | 0x77ef5c90 | 1281 (0x501) |
| RtlZombifyActivationContext | 0x77f67f64 | 1282 (0x502) |
| RtlpApplyLengthFunction | 0x77f31161 | 1283 (0x503) |
| RtlpCheckDynamicTimeZoneInformation | 0x77ed82dd | 1284 (0x504) |
| RtlpCleanupRegistryKeys | 0x77f71321 | 1285 (0x505) |
| RtlpConvertCultureNamesToLCIDs | 0x77f71181 | 1286 (0x506) |
| RtlpConvertLCIDsToCultureNames | 0x77f70f37 | 1287 (0x507) |
| RtlpCreateProcessRegistryInfo | 0x77f189fb | 1288 (0x508) |
| RtlpEnsureBufferSize | 0x77ee50e2 | 1289 (0x509) |
| RtlpGetLCIDFromLangInfoNode | 0x77eca916 | 1290 (0x50a) |
| RtlpGetNameFromLangInfoNode | 0x77eca95b | 1291 (0x50b) |
| RtlpGetSystemDefaultUILanguage | 0x77f1b6c7 | 1292 (0x50c) |
| RtlpGetUserOrMachineUILanguage4NLS | 0x77f7e6ef | 1293 (0x50d) |
| RtlpInitializeLangRegistryInfo | 0x77f2bc13 | 1294 (0x50e) |
| RtlpIsQualifiedLanguage | 0x77eca9e4 | 1295 (0x50f) |
| RtlpLoadMachineUIByPolicy | 0x77f80aa6 | 1296 (0x510) |
| RtlpLoadUserUIByPolicy | 0x77f2b712 | 1297 (0x511) |
| RtlpMuiFreeLangRegistryInfo | 0x77f35d1d | 1298 (0x512) |
| RtlpMuiRegCreateRegistryInfo | 0x77f802c4 | 1299 (0x513) |
| RtlpMuiRegFreeRegistryInfo | 0x77f2b7a4 | 1300 (0x514) |
| RtlpMuiRegLoadRegistryInfo | 0x77f2bd51 | 1301 (0x515) |
| RtlpNotOwnerCriticalSection | 0x77f61632 | 1302 (0x516) |
| RtlpNtCreateKey | 0x77f81ce6 | 1303 (0x517) |
| RtlpNtEnumerateSubKey | 0x77ec23d7 | 1304 (0x518) |
| RtlpNtMakeTemporaryKey | 0x77f81d3f | 1305 (0x519) |
| RtlpNtOpenKey | 0x77ecafa7 | 1306 (0x51a) |
| RtlpNtQueryValueKey | 0x77ecaaae | 1307 (0x51b) |
| RtlpNtSetValueKey | 0x77f81d13 | 1308 (0x51c) |
| RtlpQueryDefaultUILanguage | 0x77eecefd | 1309 (0x51d) |
| RtlpRefreshCachedUILanguage | 0x77f7f4fc | 1310 (0x51e) |
| RtlpSetInstallLanguage | 0x77f72627 | 1311 (0x51f) |
| RtlpSetPreferredUILanguages | 0x77f71729 | 1312 (0x520) |
| RtlpSetUserPreferredUILanguages | 0x77f71729 | 1313 (0x521) |
| RtlpUnWaitCriticalSection | 0x77ef22dc | 1314 (0x522) |
| RtlpVerifyAndCommitUILanguageSettings | 0x77ec382e | 1315 (0x523) |
| RtlpWaitForCriticalSection | 0x77f614ed | 1316 (0x524) |
| RtlxAnsiStringToUnicodeSize | 0x77f6e45d | 1317 (0x525) |
| RtlxOemStringToUnicodeSize | 0x77f6e45d | 1318 (0x526) |
| RtlxUnicodeStringToAnsiSize | 0x77f6e438 | 1319 (0x527) |
| RtlxUnicodeStringToOemSize | 0x77f6e438 | 1320 (0x528) |
| SbExecuteProcedure | 0x77f930dc | 1321 (0x529) |
| SbSelectProcedure | 0x77f17e74 | 1322 (0x52a) |
| ShipAssert | 0x77f369f5 | 1323 (0x52b) |
| ShipAssertGetBufferInfo | 0x77f6630a | 1324 (0x52c) |
| ShipAssertMsgA | 0x77f662f1 | 1325 (0x52d) |
| ShipAssertMsgW | 0x77f662f1 | 1326 (0x52e) |
| TpAllocAlpcCompletion | 0x77ec8f3a | 1327 (0x52f) |
| TpAllocAlpcCompletionEx | 0x77ee2fc6 | 1328 (0x530) |
| TpAllocCleanupGroup | 0x77ed2306 | 1329 (0x531) |
| TpAllocIoCompletion | 0x77ee9bb4 | 1330 (0x532) |
| TpAllocPool | 0x77f2f8b4 | 1331 (0x533) |
| TpAllocTimer | 0x77f2f2f5 | 1332 (0x534) |
| TpAllocWait | 0x77ed92e8 | 1333 (0x535) |
| TpAllocWork | 0x77ed2476 | 1334 (0x536) |
| TpAlpcRegisterCompletionList | 0x77f3b13e | 1335 (0x537) |
| TpAlpcUnregisterCompletionList | 0x77f3b83a | 1336 (0x538) |
| TpCallbackIndependent | 0x77ef1f3d | 1337 (0x539) |
| TpCallbackLeaveCriticalSectionOnCompletion | 0x77f36d82 | 1338 (0x53a) |
| TpCallbackMayRunLong | 0x77ee6842 | 1339 (0x53b) |
| TpCallbackReleaseMutexOnCompletion | 0x77f922e4 | 1340 (0x53c) |
| TpCallbackReleaseSemaphoreOnCompletion | 0x77f921b4 | 1341 (0x53d) |
| TpCallbackSetEventOnCompletion | 0x77f92099 | 1342 (0x53e) |
| TpCallbackUnloadDllOnCompletion | 0x77ed2251 | 1343 (0x53f) |
| TpCancelAsyncIoOperation | 0x77f38f88 | 1344 (0x540) |
| TpCaptureCaller | 0x77ee901a | 1345 (0x541) |
| TpCheckTerminateWorker | 0x77f1d71a | 1346 (0x542) |
| TpDbgDumpHeapUsage | 0x77f92694 | 1347 (0x543) |
| TpDbgGetFreeInfo | 0x77f92636 | 1348 (0x544) |
| TpDbgSetLogRoutine | 0x77f92620 | 1349 (0x545) |
| TpDisablePoolCallbackChecks | 0x77f34e1d | 1350 (0x546) |
| TpDisassociateCallback | 0x77ef1313 | 1351 (0x547) |
| TpIsTimerSet | 0x77eeab9b | 1352 (0x548) |
| TpPoolFreeUnusedNodes | 0x77f91e8e | 1353 (0x549) |
| TpPostWork | 0x77ed26a9 | 1354 (0x54a) |
| TpQueryPoolStackInformation | 0x77f91d0e | 1355 (0x54b) |
| TpReleaseAlpcCompletion | 0x77edf372 | 1356 (0x54c) |
| TpReleaseCleanupGroup | 0x77ec9939 | 1357 (0x54d) |
| TpReleaseCleanupGroupMembers | 0x77ec9a77 | 1358 (0x54e) |
| TpReleaseIoCompletion | 0x77edce8c | 1359 (0x54f) |
| TpReleasePool | 0x77f3350f | 1360 (0x550) |
| TpReleaseTimer | 0x77edc0d2 | 1361 (0x551) |
| TpReleaseWait | 0x77edb567 | 1362 (0x552) |
| TpReleaseWork | 0x77ed2111 | 1363 (0x553) |
| TpSetDefaultPoolMaxThreads | 0x77f91e2d | 1364 (0x554) |
| TpSetDefaultPoolStackInformation | 0x77ec90c3 | 1365 (0x555) |
| TpSetPoolMaxThreads | 0x77ed4907 | 1366 (0x556) |
| TpSetPoolMinThreads | 0x77ed49a5 | 1367 (0x557) |
| TpSetPoolStackInformation | 0x77f32b73 | 1368 (0x558) |
| TpSetTimer | 0x77ee89be | 1369 (0x559) |
| TpSetWait | 0x77ee8bfb | 1370 (0x55a) |
| TpSimpleTryPost | 0x77edc8e8 | 1371 (0x55b) |
| TpStartAsyncIoOperation | 0x77ece8c0 | 1372 (0x55c) |
| TpWaitForAlpcCompletion | 0x77f38aae | 1373 (0x55d) |
| TpWaitForIoCompletion | 0x77f38edd | 1374 (0x55e) |
| TpWaitForTimer | 0x77edc02a | 1375 (0x55f) |
| TpWaitForWait | 0x77ecf217 | 1376 (0x560) |
| TpWaitForWork | 0x77f390a0 | 1377 (0x561) |
| VerSetConditionMask | 0x77ee3030 | 1378 (0x562) |
| WerReportSQMEvent | 0x77f36aa4 | 1379 (0x563) |
| WinSqmAddToAverageDWORD | 0x77f675e5 | 1380 (0x564) |
| WinSqmAddToStream | 0x77ee04a5 | 1381 (0x565) |
| WinSqmAddToStreamEx | 0x77ecf7e6 | 1382 (0x566) |
| WinSqmCheckEscalationAddToStreamEx | 0x77f66df5 | 1383 (0x567) |
| WinSqmCheckEscalationSetDWORD64 | 0x77f66be0 | 1384 (0x568) |
| WinSqmCheckEscalationSetDWORD | 0x77f66b19 | 1385 (0x569) |
| WinSqmCheckEscalationSetString | 0x77f66caa | 1386 (0x56a) |
| WinSqmCommonDatapointDelete | 0x77f66960 | 1387 (0x56b) |
| WinSqmCommonDatapointSetDWORD64 | 0x77f66925 | 1388 (0x56c) |
| WinSqmCommonDatapointSetDWORD | 0x77f668ea | 1389 (0x56d) |
| WinSqmCommonDatapointSetStreamEx | 0x77f67079 | 1390 (0x56e) |
| WinSqmCommonDatapointSetString | 0x77f66fbd | 1391 (0x56f) |
| WinSqmEndSession | 0x77ed1297 | 1392 (0x570) |
| WinSqmEventEnabled | 0x77eea228 | 1393 (0x571) |
| WinSqmEventWrite | 0x77eea28d | 1394 (0x572) |
| WinSqmGetEscalationRuleStatus | 0x77f66f27 | 1395 (0x573) |
| WinSqmGetInstrumentationProperty | 0x77ec6dde | 1396 (0x574) |
| WinSqmIncrementDWORD | 0x77eeb1b1 | 1397 (0x575) |
| WinSqmIsOptedIn | 0x77f26c03 | 1398 (0x576) |
| WinSqmIsOptedInEx | 0x77f26c10 | 1399 (0x577) |
| WinSqmSetDWORD64 | 0x77f67473 | 1400 (0x578) |
| WinSqmSetDWORD | 0x77edba71 | 1401 (0x579) |
| WinSqmSetEscalationInfo | 0x77ec4fc6 | 1402 (0x57a) |
| WinSqmSetIfMaxDWORD | 0x77ec64c1 | 1403 (0x57b) |
| WinSqmSetIfMinDWORD | 0x77f6761d | 1404 (0x57c) |
| WinSqmSetString | 0x77ec8c0c | 1405 (0x57d) |
| WinSqmStartSession | 0x77ed0f8d | 1406 (0x57e) |
| ZwAcceptConnectPort | 0x77f051a8 | 1407 (0x57f) |
| ZwAccessCheck | 0x77f051b8 | 1408 (0x580) |
| ZwAccessCheckAndAuditAlarm | 0x77f051c8 | 1409 (0x581) |
| ZwAccessCheckByType | 0x77f051d8 | 1410 (0x582) |
| ZwAccessCheckByTypeAndAuditAlarm | 0x77f051e8 | 1411 (0x583) |
| ZwAccessCheckByTypeResultList | 0x77f051f8 | 1412 (0x584) |
| ZwAccessCheckByTypeResultListAndAuditAlarm | 0x77f05208 | 1413 (0x585) |
| ZwAccessCheckByTypeResultListAndAuditAlarmByHandle | 0x77f05218 | 1414 (0x586) |
| ZwAddAtom | 0x77f05228 | 1415 (0x587) |
| ZwAddBootEntry | 0x77f05238 | 1416 (0x588) |
| ZwAddDriverEntry | 0x77f05248 | 1417 (0x589) |
| ZwAdjustGroupsToken | 0x77f05258 | 1418 (0x58a) |
| ZwAdjustPrivilegesToken | 0x77f05268 | 1419 (0x58b) |
| ZwAlertResumeThread | 0x77f05278 | 1420 (0x58c) |
| ZwAlertThread | 0x77f05288 | 1421 (0x58d) |
| ZwAllocateLocallyUniqueId | 0x77f05298 | 1422 (0x58e) |
| ZwAllocateReserveObject | 0x77f052a8 | 1423 (0x58f) |
| ZwAllocateUserPhysicalPages | 0x77f052b8 | 1424 (0x590) |
| ZwAllocateUuids | 0x77f052c8 | 1425 (0x591) |
| ZwAllocateVirtualMemory | 0x77f052d8 | 1426 (0x592) |
| ZwAlpcAcceptConnectPort | 0x77f052e8 | 1427 (0x593) |
| ZwAlpcCancelMessage | 0x77f052f8 | 1428 (0x594) |
| ZwAlpcConnectPort | 0x77f05308 | 1429 (0x595) |
| ZwAlpcCreatePort | 0x77f05318 | 1430 (0x596) |
| ZwAlpcCreatePortSection | 0x77f05328 | 1431 (0x597) |
| ZwAlpcCreateResourceReserve | 0x77f05338 | 1432 (0x598) |
| ZwAlpcCreateSectionView | 0x77f05348 | 1433 (0x599) |
| ZwAlpcCreateSecurityContext | 0x77f05358 | 1434 (0x59a) |
| ZwAlpcDeletePortSection | 0x77f05368 | 1435 (0x59b) |
| ZwAlpcDeleteResourceReserve | 0x77f05378 | 1436 (0x59c) |
| ZwAlpcDeleteSectionView | 0x77f05388 | 1437 (0x59d) |
| ZwAlpcDeleteSecurityContext | 0x77f05398 | 1438 (0x59e) |
| ZwAlpcDisconnectPort | 0x77f053a8 | 1439 (0x59f) |
| ZwAlpcImpersonateClientOfPort | 0x77f053b8 | 1440 (0x5a0) |
| ZwAlpcOpenSenderProcess | 0x77f053c8 | 1441 (0x5a1) |
| ZwAlpcOpenSenderThread | 0x77f053d8 | 1442 (0x5a2) |
| ZwAlpcQueryInformation | 0x77f053e8 | 1443 (0x5a3) |
| ZwAlpcQueryInformationMessage | 0x77f053f8 | 1444 (0x5a4) |
| ZwAlpcRevokeSecurityContext | 0x77f05408 | 1445 (0x5a5) |
| ZwAlpcSendWaitReceivePort | 0x77f05418 | 1446 (0x5a6) |
| ZwAlpcSetInformation | 0x77f05428 | 1447 (0x5a7) |
| ZwApphelpCacheControl | 0x77f05438 | 1448 (0x5a8) |
| ZwAreMappedFilesTheSame | 0x77f05448 | 1449 (0x5a9) |
| ZwAssignProcessToJobObject | 0x77f05458 | 1450 (0x5aa) |
| ZwCallbackReturn | 0x77f05468 | 1451 (0x5ab) |
| ZwCancelIoFile | 0x77f05478 | 1452 (0x5ac) |
| ZwCancelIoFileEx | 0x77f05488 | 1453 (0x5ad) |
| ZwCancelSynchronousIoFile | 0x77f05498 | 1454 (0x5ae) |
| ZwCancelTimer | 0x77f054a8 | 1455 (0x5af) |
| ZwClearEvent | 0x77f054b8 | 1456 (0x5b0) |
| ZwClose | 0x77f054c8 | 1457 (0x5b1) |
| ZwCloseObjectAuditAlarm | 0x77f054d8 | 1458 (0x5b2) |
| ZwCommitComplete | 0x77f054e8 | 1459 (0x5b3) |
| ZwCommitEnlistment | 0x77f054f8 | 1460 (0x5b4) |
| ZwCommitTransaction | 0x77f05508 | 1461 (0x5b5) |
| ZwCompactKeys | 0x77f05518 | 1462 (0x5b6) |
| ZwCompareTokens | 0x77f05528 | 1463 (0x5b7) |
| ZwCompleteConnectPort | 0x77f05538 | 1464 (0x5b8) |
| ZwCompressKey | 0x77f05548 | 1465 (0x5b9) |
| ZwConnectPort | 0x77f05558 | 1466 (0x5ba) |
| ZwContinue | 0x77f05568 | 1467 (0x5bb) |
| ZwCreateDebugObject | 0x77f05578 | 1468 (0x5bc) |
| ZwCreateDirectoryObject | 0x77f05588 | 1469 (0x5bd) |
| ZwCreateEnlistment | 0x77f05598 | 1470 (0x5be) |
| ZwCreateEvent | 0x77f055a8 | 1471 (0x5bf) |
| ZwCreateEventPair | 0x77f055b8 | 1472 (0x5c0) |
| ZwCreateFile | 0x77f055c8 | 1473 (0x5c1) |
| ZwCreateIoCompletion | 0x77f055d8 | 1474 (0x5c2) |
| ZwCreateJobObject | 0x77f055e8 | 1475 (0x5c3) |
| ZwCreateJobSet | 0x77f055f8 | 1476 (0x5c4) |
| ZwCreateKey | 0x77f05608 | 1477 (0x5c5) |
| ZwCreateKeyTransacted | 0x77f05628 | 1478 (0x5c6) |
| ZwCreateKeyedEvent | 0x77f05618 | 1479 (0x5c7) |
| ZwCreateMailslotFile | 0x77f05638 | 1480 (0x5c8) |
| ZwCreateMutant | 0x77f05648 | 1481 (0x5c9) |
| ZwCreateNamedPipeFile | 0x77f05658 | 1482 (0x5ca) |
| ZwCreatePagingFile | 0x77f05668 | 1483 (0x5cb) |
| ZwCreatePort | 0x77f05678 | 1484 (0x5cc) |
| ZwCreatePrivateNamespace | 0x77f05688 | 1485 (0x5cd) |
| ZwCreateProcess | 0x77f05698 | 1486 (0x5ce) |
| ZwCreateProcessEx | 0x77f056a8 | 1487 (0x5cf) |
| ZwCreateProfile | 0x77f056b8 | 1488 (0x5d0) |
| ZwCreateProfileEx | 0x77f056c8 | 1489 (0x5d1) |
| ZwCreateResourceManager | 0x77f056d8 | 1490 (0x5d2) |
| ZwCreateSection | 0x77f056e8 | 1491 (0x5d3) |
| ZwCreateSemaphore | 0x77f056f8 | 1492 (0x5d4) |
| ZwCreateSymbolicLinkObject | 0x77f05708 | 1493 (0x5d5) |
| ZwCreateThread | 0x77f05718 | 1494 (0x5d6) |
| ZwCreateThreadEx | 0x77f05728 | 1495 (0x5d7) |
| ZwCreateTimer | 0x77f05738 | 1496 (0x5d8) |
| ZwCreateToken | 0x77f05748 | 1497 (0x5d9) |
| ZwCreateTransaction | 0x77f05758 | 1498 (0x5da) |
| ZwCreateTransactionManager | 0x77f05768 | 1499 (0x5db) |
| ZwCreateUserProcess | 0x77f05778 | 1500 (0x5dc) |
| ZwCreateWaitablePort | 0x77f05788 | 1501 (0x5dd) |
| ZwCreateWorkerFactory | 0x77f05798 | 1502 (0x5de) |
| ZwDebugActiveProcess | 0x77f057a8 | 1503 (0x5df) |
| ZwDebugContinue | 0x77f057b8 | 1504 (0x5e0) |
| ZwDelayExecution | 0x77f057c8 | 1505 (0x5e1) |
| ZwDeleteAtom | 0x77f057d8 | 1506 (0x5e2) |
| ZwDeleteBootEntry | 0x77f057e8 | 1507 (0x5e3) |
| ZwDeleteDriverEntry | 0x77f057f8 | 1508 (0x5e4) |
| ZwDeleteFile | 0x77f05808 | 1509 (0x5e5) |
| ZwDeleteKey | 0x77f05818 | 1510 (0x5e6) |
| ZwDeleteObjectAuditAlarm | 0x77f05828 | 1511 (0x5e7) |
| ZwDeletePrivateNamespace | 0x77f05838 | 1512 (0x5e8) |
| ZwDeleteValueKey | 0x77f05848 | 1513 (0x5e9) |
| ZwDeviceIoControlFile | 0x77f05858 | 1514 (0x5ea) |
| ZwDisableLastKnownGood | 0x77f05868 | 1515 (0x5eb) |
| ZwDisplayString | 0x77f05878 | 1516 (0x5ec) |
| ZwDrawText | 0x77f05888 | 1517 (0x5ed) |
| ZwDuplicateObject | 0x77f05898 | 1518 (0x5ee) |
| ZwDuplicateToken | 0x77f058a8 | 1519 (0x5ef) |
| ZwEnableLastKnownGood | 0x77f058b8 | 1520 (0x5f0) |
| ZwEnumerateBootEntries | 0x77f058c8 | 1521 (0x5f1) |
| ZwEnumerateDriverEntries | 0x77f058d8 | 1522 (0x5f2) |
| ZwEnumerateKey | 0x77f058e8 | 1523 (0x5f3) |
| ZwEnumerateSystemEnvironmentValuesEx | 0x77f058f8 | 1524 (0x5f4) |
| ZwEnumerateTransactionObject | 0x77f05908 | 1525 (0x5f5) |
| ZwEnumerateValueKey | 0x77f05918 | 1526 (0x5f6) |
| ZwExtendSection | 0x77f05928 | 1527 (0x5f7) |
| ZwFilterToken | 0x77f05938 | 1528 (0x5f8) |
| ZwFindAtom | 0x77f05948 | 1529 (0x5f9) |
| ZwFlushBuffersFile | 0x77f05958 | 1530 (0x5fa) |
| ZwFlushInstallUILanguage | 0x77f05968 | 1531 (0x5fb) |
| ZwFlushInstructionCache | 0x77f05978 | 1532 (0x5fc) |
| ZwFlushKey | 0x77f05988 | 1533 (0x5fd) |
| ZwFlushProcessWriteBuffers | 0x77f05998 | 1534 (0x5fe) |
| ZwFlushVirtualMemory | 0x77f059a8 | 1535 (0x5ff) |
| ZwFlushWriteBuffer | 0x77f059b8 | 1536 (0x600) |
| ZwFreeUserPhysicalPages | 0x77f059c8 | 1537 (0x601) |
| ZwFreeVirtualMemory | 0x77f059d8 | 1538 (0x602) |
| ZwFreezeRegistry | 0x77f059e8 | 1539 (0x603) |
| ZwFreezeTransactions | 0x77f059f8 | 1540 (0x604) |
| ZwFsControlFile | 0x77f05a08 | 1541 (0x605) |
| ZwGetContextThread | 0x77f05a18 | 1542 (0x606) |
| ZwGetCurrentProcessorNumber | 0x77f05a28 | 1543 (0x607) |
| ZwGetDevicePowerState | 0x77f05a38 | 1544 (0x608) |
| ZwGetMUIRegistryInfo | 0x77f05a48 | 1545 (0x609) |
| ZwGetNextProcess | 0x77f05a58 | 1546 (0x60a) |
| ZwGetNextThread | 0x77f05a68 | 1547 (0x60b) |
| ZwGetNlsSectionPtr | 0x77f05a78 | 1548 (0x60c) |
| ZwGetNotificationResourceManager | 0x77f05a88 | 1549 (0x60d) |
| ZwGetPlugPlayEvent | 0x77f05a98 | 1550 (0x60e) |
| ZwGetWriteWatch | 0x77f05aa8 | 1551 (0x60f) |
| ZwImpersonateAnonymousToken | 0x77f05ab8 | 1552 (0x610) |
| ZwImpersonateClientOfPort | 0x77f05ac8 | 1553 (0x611) |
| ZwImpersonateThread | 0x77f05ad8 | 1554 (0x612) |
| ZwInitializeNlsFiles | 0x77f05ae8 | 1555 (0x613) |
| ZwInitializeRegistry | 0x77f05af8 | 1556 (0x614) |
| ZwInitiatePowerAction | 0x77f05b08 | 1557 (0x615) |
| ZwIsProcessInJob | 0x77f05b18 | 1558 (0x616) |
| ZwIsSystemResumeAutomatic | 0x77f05b28 | 1559 (0x617) |
| ZwIsUILanguageComitted | 0x77f05b38 | 1560 (0x618) |
| ZwListenPort | 0x77f05b48 | 1561 (0x619) |
| ZwLoadDriver | 0x77f05b58 | 1562 (0x61a) |
| ZwLoadKey2 | 0x77f05b78 | 1563 (0x61b) |
| ZwLoadKey | 0x77f05b68 | 1564 (0x61c) |
| ZwLoadKeyEx | 0x77f05b88 | 1565 (0x61d) |
| ZwLockFile | 0x77f05b98 | 1566 (0x61e) |
| ZwLockProductActivationKeys | 0x77f05ba8 | 1567 (0x61f) |
| ZwLockRegistryKey | 0x77f05bb8 | 1568 (0x620) |
| ZwLockVirtualMemory | 0x77f05bc8 | 1569 (0x621) |
| ZwMakePermanentObject | 0x77f05bd8 | 1570 (0x622) |
| ZwMakeTemporaryObject | 0x77f05be8 | 1571 (0x623) |
| ZwMapCMFModule | 0x77f05bf8 | 1572 (0x624) |
| ZwMapUserPhysicalPages | 0x77f05c08 | 1573 (0x625) |
| ZwMapUserPhysicalPagesScatter | 0x77f05c18 | 1574 (0x626) |
| ZwMapViewOfSection | 0x77f05c28 | 1575 (0x627) |
| ZwModifyBootEntry | 0x77f05c38 | 1576 (0x628) |
| ZwModifyDriverEntry | 0x77f05c48 | 1577 (0x629) |
| ZwNotifyChangeDirectoryFile | 0x77f05c58 | 1578 (0x62a) |
| ZwNotifyChangeKey | 0x77f05c68 | 1579 (0x62b) |
| ZwNotifyChangeMultipleKeys | 0x77f05c78 | 1580 (0x62c) |
| ZwNotifyChangeSession | 0x77f05c88 | 1581 (0x62d) |
| ZwOpenDirectoryObject | 0x77f05c98 | 1582 (0x62e) |
| ZwOpenEnlistment | 0x77f05ca8 | 1583 (0x62f) |
| ZwOpenEvent | 0x77f05cb8 | 1584 (0x630) |
| ZwOpenEventPair | 0x77f05cc8 | 1585 (0x631) |
| ZwOpenFile | 0x77f05cd8 | 1586 (0x632) |
| ZwOpenIoCompletion | 0x77f05ce8 | 1587 (0x633) |
| ZwOpenJobObject | 0x77f05cf8 | 1588 (0x634) |
| ZwOpenKey | 0x77f05d08 | 1589 (0x635) |
| ZwOpenKeyEx | 0x77f05d18 | 1590 (0x636) |
| ZwOpenKeyTransacted | 0x77f05d38 | 1591 (0x637) |
| ZwOpenKeyTransactedEx | 0x77f05d48 | 1592 (0x638) |
| ZwOpenKeyedEvent | 0x77f05d28 | 1593 (0x639) |
| ZwOpenMutant | 0x77f05d58 | 1594 (0x63a) |
| ZwOpenObjectAuditAlarm | 0x77f05d68 | 1595 (0x63b) |
| ZwOpenPrivateNamespace | 0x77f05d78 | 1596 (0x63c) |
| ZwOpenProcess | 0x77f05d88 | 1597 (0x63d) |
| ZwOpenProcessToken | 0x77f05d98 | 1598 (0x63e) |
| ZwOpenProcessTokenEx | 0x77f05da8 | 1599 (0x63f) |
| ZwOpenResourceManager | 0x77f05db8 | 1600 (0x640) |
| ZwOpenSection | 0x77f05dc8 | 1601 (0x641) |
| ZwOpenSemaphore | 0x77f05dd8 | 1602 (0x642) |
| ZwOpenSession | 0x77f05de8 | 1603 (0x643) |
| ZwOpenSymbolicLinkObject | 0x77f05df8 | 1604 (0x644) |
| ZwOpenThread | 0x77f05e08 | 1605 (0x645) |
| ZwOpenThreadToken | 0x77f05e18 | 1606 (0x646) |
| ZwOpenThreadTokenEx | 0x77f05e28 | 1607 (0x647) |
| ZwOpenTimer | 0x77f05e38 | 1608 (0x648) |
| ZwOpenTransaction | 0x77f05e48 | 1609 (0x649) |
| ZwOpenTransactionManager | 0x77f05e58 | 1610 (0x64a) |
| ZwPlugPlayControl | 0x77f05e68 | 1611 (0x64b) |
| ZwPowerInformation | 0x77f05e78 | 1612 (0x64c) |
| ZwPrePrepareComplete | 0x77f05ea8 | 1613 (0x64d) |
| ZwPrePrepareEnlistment | 0x77f05eb8 | 1614 (0x64e) |
| ZwPrepareComplete | 0x77f05e88 | 1615 (0x64f) |
| ZwPrepareEnlistment | 0x77f05e98 | 1616 (0x650) |
| ZwPrivilegeCheck | 0x77f05ec8 | 1617 (0x651) |
| ZwPrivilegeObjectAuditAlarm | 0x77f05ee8 | 1618 (0x652) |
| ZwPrivilegedServiceAuditAlarm | 0x77f05ed8 | 1619 (0x653) |
| ZwPropagationComplete | 0x77f05ef8 | 1620 (0x654) |
| ZwPropagationFailed | 0x77f05f08 | 1621 (0x655) |
| ZwProtectVirtualMemory | 0x77f05f18 | 1622 (0x656) |
| ZwPulseEvent | 0x77f05f28 | 1623 (0x657) |
| ZwQueryAttributesFile | 0x77f05f38 | 1624 (0x658) |
| ZwQueryBootEntryOrder | 0x77f05f48 | 1625 (0x659) |
| ZwQueryBootOptions | 0x77f05f58 | 1626 (0x65a) |
| ZwQueryDebugFilterState | 0x77f05f68 | 1627 (0x65b) |
| ZwQueryDefaultLocale | 0x77f05f78 | 1628 (0x65c) |
| ZwQueryDefaultUILanguage | 0x77f05f88 | 1629 (0x65d) |
| ZwQueryDirectoryFile | 0x77f05f98 | 1630 (0x65e) |
| ZwQueryDirectoryObject | 0x77f05fa8 | 1631 (0x65f) |
| ZwQueryDriverEntryOrder | 0x77f05fb8 | 1632 (0x660) |
| ZwQueryEaFile | 0x77f05fc8 | 1633 (0x661) |
| ZwQueryEvent | 0x77f05fd8 | 1634 (0x662) |
| ZwQueryFullAttributesFile | 0x77f05fe8 | 1635 (0x663) |
| ZwQueryInformationAtom | 0x77f05ff8 | 1636 (0x664) |
| ZwQueryInformationEnlistment | 0x77f06008 | 1637 (0x665) |
| ZwQueryInformationFile | 0x77f06018 | 1638 (0x666) |
| ZwQueryInformationJobObject | 0x77f06028 | 1639 (0x667) |
| ZwQueryInformationPort | 0x77f06038 | 1640 (0x668) |
| ZwQueryInformationProcess | 0x77f06048 | 1641 (0x669) |
| ZwQueryInformationResourceManager | 0x77f06058 | 1642 (0x66a) |
| ZwQueryInformationThread | 0x77f06068 | 1643 (0x66b) |
| ZwQueryInformationToken | 0x77f06078 | 1644 (0x66c) |
| ZwQueryInformationTransaction | 0x77f06088 | 1645 (0x66d) |
| ZwQueryInformationTransactionManager | 0x77f06098 | 1646 (0x66e) |
| ZwQueryInformationWorkerFactory | 0x77f060a8 | 1647 (0x66f) |
| ZwQueryInstallUILanguage | 0x77f060b8 | 1648 (0x670) |
| ZwQueryIntervalProfile | 0x77f060c8 | 1649 (0x671) |
| ZwQueryIoCompletion | 0x77f060d8 | 1650 (0x672) |
| ZwQueryKey | 0x77f060e8 | 1651 (0x673) |
| ZwQueryLicenseValue | 0x77f060f8 | 1652 (0x674) |
| ZwQueryMultipleValueKey | 0x77f06108 | 1653 (0x675) |
| ZwQueryMutant | 0x77f06118 | 1654 (0x676) |
| ZwQueryObject | 0x77f06128 | 1655 (0x677) |
| ZwQueryOpenSubKeys | 0x77f06138 | 1656 (0x678) |
| ZwQueryOpenSubKeysEx | 0x77f06148 | 1657 (0x679) |
| ZwQueryPerformanceCounter | 0x77f06158 | 1658 (0x67a) |
| ZwQueryPortInformationProcess | 0x77f06168 | 1659 (0x67b) |
| ZwQueryQuotaInformationFile | 0x77f06178 | 1660 (0x67c) |
| ZwQuerySection | 0x77f06188 | 1661 (0x67d) |
| ZwQuerySecurityAttributesToken | 0x77f06198 | 1662 (0x67e) |
| ZwQuerySecurityObject | 0x77f061a8 | 1663 (0x67f) |
| ZwQuerySemaphore | 0x77f061b8 | 1664 (0x680) |
| ZwQuerySymbolicLinkObject | 0x77f061c8 | 1665 (0x681) |
| ZwQuerySystemEnvironmentValue | 0x77f061d8 | 1666 (0x682) |
| ZwQuerySystemEnvironmentValueEx | 0x77f061e8 | 1667 (0x683) |
| ZwQuerySystemInformation | 0x77f061f8 | 1668 (0x684) |
| ZwQuerySystemInformationEx | 0x77f06208 | 1669 (0x685) |
| ZwQuerySystemTime | 0x77f06218 | 1670 (0x686) |
| ZwQueryTimer | 0x77f06228 | 1671 (0x687) |
| ZwQueryTimerResolution | 0x77f06238 | 1672 (0x688) |
| ZwQueryValueKey | 0x77f06248 | 1673 (0x689) |
| ZwQueryVirtualMemory | 0x77f06258 | 1674 (0x68a) |
| ZwQueryVolumeInformationFile | 0x77f06268 | 1675 (0x68b) |
| ZwQueueApcThread | 0x77f06278 | 1676 (0x68c) |
| ZwQueueApcThreadEx | 0x77f06288 | 1677 (0x68d) |
| ZwRaiseException | 0x77f06298 | 1678 (0x68e) |
| ZwRaiseHardError | 0x77f062a8 | 1679 (0x68f) |
| ZwReadFile | 0x77f062b8 | 1680 (0x690) |
| ZwReadFileScatter | 0x77f062c8 | 1681 (0x691) |
| ZwReadOnlyEnlistment | 0x77f062d8 | 1682 (0x692) |
| ZwReadRequestData | 0x77f062e8 | 1683 (0x693) |
| ZwReadVirtualMemory | 0x77f062f8 | 1684 (0x694) |
| ZwRecoverEnlistment | 0x77f06308 | 1685 (0x695) |
| ZwRecoverResourceManager | 0x77f06318 | 1686 (0x696) |
| ZwRecoverTransactionManager | 0x77f06328 | 1687 (0x697) |
| ZwRegisterProtocolAddressInformation | 0x77f06338 | 1688 (0x698) |
| ZwRegisterThreadTerminatePort | 0x77f06348 | 1689 (0x699) |
| ZwReleaseKeyedEvent | 0x77f06358 | 1690 (0x69a) |
| ZwReleaseMutant | 0x77f06368 | 1691 (0x69b) |
| ZwReleaseSemaphore | 0x77f06378 | 1692 (0x69c) |
| ZwReleaseWorkerFactoryWorker | 0x77f06388 | 1693 (0x69d) |
| ZwRemoveIoCompletion | 0x77f06398 | 1694 (0x69e) |
| ZwRemoveIoCompletionEx | 0x77f063a8 | 1695 (0x69f) |
| ZwRemoveProcessDebug | 0x77f063b8 | 1696 (0x6a0) |
| ZwRenameKey | 0x77f063c8 | 1697 (0x6a1) |
| ZwRenameTransactionManager | 0x77f063d8 | 1698 (0x6a2) |
| ZwReplaceKey | 0x77f063e8 | 1699 (0x6a3) |
| ZwReplacePartitionUnit | 0x77f063f8 | 1700 (0x6a4) |
| ZwReplyPort | 0x77f06408 | 1701 (0x6a5) |
| ZwReplyWaitReceivePort | 0x77f06418 | 1702 (0x6a6) |
| ZwReplyWaitReceivePortEx | 0x77f06428 | 1703 (0x6a7) |
| ZwReplyWaitReplyPort | 0x77f06438 | 1704 (0x6a8) |
| ZwRequestPort | 0x77f06448 | 1705 (0x6a9) |
| ZwRequestWaitReplyPort | 0x77f06458 | 1706 (0x6aa) |
| ZwResetEvent | 0x77f06468 | 1707 (0x6ab) |
| ZwResetWriteWatch | 0x77f06478 | 1708 (0x6ac) |
| ZwRestoreKey | 0x77f06488 | 1709 (0x6ad) |
| ZwResumeProcess | 0x77f06498 | 1710 (0x6ae) |
| ZwResumeThread | 0x77f064a8 | 1711 (0x6af) |
| ZwRollbackComplete | 0x77f064b8 | 1712 (0x6b0) |
| ZwRollbackEnlistment | 0x77f064c8 | 1713 (0x6b1) |
| ZwRollbackTransaction | 0x77f064d8 | 1714 (0x6b2) |
| ZwRollforwardTransactionManager | 0x77f064e8 | 1715 (0x6b3) |
| ZwSaveKey | 0x77f064f8 | 1716 (0x6b4) |
| ZwSaveKeyEx | 0x77f06508 | 1717 (0x6b5) |
| ZwSaveMergedKeys | 0x77f06518 | 1718 (0x6b6) |
| ZwSecureConnectPort | 0x77f06528 | 1719 (0x6b7) |
| ZwSerializeBoot | 0x77f06538 | 1720 (0x6b8) |
| ZwSetBootEntryOrder | 0x77f06548 | 1721 (0x6b9) |
| ZwSetBootOptions | 0x77f06558 | 1722 (0x6ba) |
| ZwSetContextThread | 0x77f06568 | 1723 (0x6bb) |
| ZwSetDebugFilterState | 0x77f06578 | 1724 (0x6bc) |
| ZwSetDefaultHardErrorPort | 0x77f06588 | 1725 (0x6bd) |
| ZwSetDefaultLocale | 0x77f06598 | 1726 (0x6be) |
| ZwSetDefaultUILanguage | 0x77f065a8 | 1727 (0x6bf) |
| ZwSetDriverEntryOrder | 0x77f065b8 | 1728 (0x6c0) |
| ZwSetEaFile | 0x77f065c8 | 1729 (0x6c1) |
| ZwSetEvent | 0x77f065d8 | 1730 (0x6c2) |
| ZwSetEventBoostPriority | 0x77f065e8 | 1731 (0x6c3) |
| ZwSetHighEventPair | 0x77f065f8 | 1732 (0x6c4) |
| ZwSetHighWaitLowEventPair | 0x77f06608 | 1733 (0x6c5) |
| ZwSetInformationDebugObject | 0x77f06618 | 1734 (0x6c6) |
| ZwSetInformationEnlistment | 0x77f06628 | 1735 (0x6c7) |
| ZwSetInformationFile | 0x77f06638 | 1736 (0x6c8) |
| ZwSetInformationJobObject | 0x77f06648 | 1737 (0x6c9) |
| ZwSetInformationKey | 0x77f06658 | 1738 (0x6ca) |
| ZwSetInformationObject | 0x77f06668 | 1739 (0x6cb) |
| ZwSetInformationProcess | 0x77f06678 | 1740 (0x6cc) |
| ZwSetInformationResourceManager | 0x77f06688 | 1741 (0x6cd) |
| ZwSetInformationThread | 0x77f06698 | 1742 (0x6ce) |
| ZwSetInformationToken | 0x77f066a8 | 1743 (0x6cf) |
| ZwSetInformationTransaction | 0x77f066b8 | 1744 (0x6d0) |
| ZwSetInformationTransactionManager | 0x77f066c8 | 1745 (0x6d1) |
| ZwSetInformationWorkerFactory | 0x77f066d8 | 1746 (0x6d2) |
| ZwSetIntervalProfile | 0x77f066e8 | 1747 (0x6d3) |
| ZwSetIoCompletion | 0x77f066f8 | 1748 (0x6d4) |
| ZwSetIoCompletionEx | 0x77f06708 | 1749 (0x6d5) |
| ZwSetLdtEntries | 0x77f06718 | 1750 (0x6d6) |
| ZwSetLowEventPair | 0x77f06728 | 1751 (0x6d7) |
| ZwSetLowWaitHighEventPair | 0x77f06738 | 1752 (0x6d8) |
| ZwSetQuotaInformationFile | 0x77f06748 | 1753 (0x6d9) |
| ZwSetSecurityObject | 0x77f06758 | 1754 (0x6da) |
| ZwSetSystemEnvironmentValue | 0x77f06768 | 1755 (0x6db) |
| ZwSetSystemEnvironmentValueEx | 0x77f06778 | 1756 (0x6dc) |
| ZwSetSystemInformation | 0x77f06788 | 1757 (0x6dd) |
| ZwSetSystemPowerState | 0x77f06798 | 1758 (0x6de) |
| ZwSetSystemTime | 0x77f067a8 | 1759 (0x6df) |
| ZwSetThreadExecutionState | 0x77f067b8 | 1760 (0x6e0) |
| ZwSetTimer | 0x77f067c8 | 1761 (0x6e1) |
| ZwSetTimerEx | 0x77f067d8 | 1762 (0x6e2) |
| ZwSetTimerResolution | 0x77f067e8 | 1763 (0x6e3) |
| ZwSetUuidSeed | 0x77f067f8 | 1764 (0x6e4) |
| ZwSetValueKey | 0x77f06808 | 1765 (0x6e5) |
| ZwSetVolumeInformationFile | 0x77f06818 | 1766 (0x6e6) |
| ZwShutdownSystem | 0x77f06828 | 1767 (0x6e7) |
| ZwShutdownWorkerFactory | 0x77f06838 | 1768 (0x6e8) |
| ZwSignalAndWaitForSingleObject | 0x77f06848 | 1769 (0x6e9) |
| ZwSinglePhaseReject | 0x77f06858 | 1770 (0x6ea) |
| ZwStartProfile | 0x77f06868 | 1771 (0x6eb) |
| ZwStopProfile | 0x77f06878 | 1772 (0x6ec) |
| ZwSuspendProcess | 0x77f06888 | 1773 (0x6ed) |
| ZwSuspendThread | 0x77f06898 | 1774 (0x6ee) |
| ZwSystemDebugControl | 0x77f068a8 | 1775 (0x6ef) |
| ZwTerminateJobObject | 0x77f068b8 | 1776 (0x6f0) |
| ZwTerminateProcess | 0x77f068c8 | 1777 (0x6f1) |
| ZwTerminateThread | 0x77f068d8 | 1778 (0x6f2) |
| ZwTestAlert | 0x77f068e8 | 1779 (0x6f3) |
| ZwThawRegistry | 0x77f068f8 | 1780 (0x6f4) |
| ZwThawTransactions | 0x77f06908 | 1781 (0x6f5) |
| ZwTraceControl | 0x77f06918 | 1782 (0x6f6) |
| ZwTraceEvent | 0x77f06928 | 1783 (0x6f7) |
| ZwTranslateFilePath | 0x77f06938 | 1784 (0x6f8) |
| ZwUmsThreadYield | 0x77f06948 | 1785 (0x6f9) |
| ZwUnloadDriver | 0x77f06958 | 1786 (0x6fa) |
| ZwUnloadKey2 | 0x77f06978 | 1787 (0x6fb) |
| ZwUnloadKey | 0x77f06968 | 1788 (0x6fc) |
| ZwUnloadKeyEx | 0x77f06988 | 1789 (0x6fd) |
| ZwUnlockFile | 0x77f06998 | 1790 (0x6fe) |
| ZwUnlockVirtualMemory | 0x77f069a8 | 1791 (0x6ff) |
| ZwUnmapViewOfSection | 0x77f069b8 | 1792 (0x700) |
| ZwVdmControl | 0x77f069c8 | 1793 (0x701) |
| ZwWaitForDebugEvent | 0x77f069d8 | 1794 (0x702) |
| ZwWaitForKeyedEvent | 0x77f069e8 | 1795 (0x703) |
| ZwWaitForMultipleObjects32 | 0x77f06a08 | 1796 (0x704) |
| ZwWaitForMultipleObjects | 0x77f069f8 | 1797 (0x705) |
| ZwWaitForSingleObject | 0x77f06a18 | 1798 (0x706) |
| ZwWaitForWorkViaWorkerFactory | 0x77f06a28 | 1799 (0x707) |
| ZwWaitHighEventPair | 0x77f06a38 | 1800 (0x708) |
| ZwWaitLowEventPair | 0x77f06a48 | 1801 (0x709) |
| ZwWorkerFactoryWorkerReady | 0x77f06a58 | 1802 (0x70a) |
| ZwWriteFile | 0x77f06a68 | 1803 (0x70b) |
| ZwWriteFileGather | 0x77f06a78 | 1804 (0x70c) |
| ZwWriteRequestData | 0x77f06a88 | 1805 (0x70d) |
| ZwWriteVirtualMemory | 0x77f06a98 | 1806 (0x70e) |
| ZwYieldExecution | 0x77f06aa8 | 1807 (0x70f) |
| _CIcos | 0x77f07404 | 1808 (0x710) |
| _CIlog | 0x77f074c4 | 1809 (0x711) |
| _CIpow | 0x77f06ac4 | 1810 (0x712) |
| _CIsin | 0x77ef41c4 | 1811 (0x713) |
| _CIsqrt | 0x77ef4280 | 1812 (0x714) |
| __isascii | 0x77ed3420 | 1813 (0x715) |
| __iscsym | 0x77f897eb | 1814 (0x716) |
| __iscsymf | 0x77f89823 | 1815 (0x717) |
| __toascii | 0x77f897d9 | 1816 (0x718) |
| _alldiv | 0x77ef4340 | 1817 (0x719) |
| _alldvrm | 0x77ef43f0 | 1818 (0x71a) |
| _allmul | 0x77ef4500 | 1819 (0x71b) |
| _alloca_probe | 0x77f073c4 | 1820 (0x71c) |
| _alloca_probe_16 | 0x77f0739c | 1821 (0x71d) |
| _alloca_probe_8 | 0x77f073af | 1822 (0x71e) |
| _allrem | 0x77ef4540 | 1823 (0x71f) |
| _allshl | 0x77ef4600 | 1824 (0x720) |
| _allshr | 0x77ef4620 | 1825 (0x721) |
| _atoi64 | 0x77ec605a | 1826 (0x722) |
| _aulldiv | 0x77ef4660 | 1827 (0x723) |
| _aulldvrm | 0x77ef46d0 | 1828 (0x724) |
| _aullrem | 0x77ef4770 | 1829 (0x725) |
| _aullshr | 0x77ef47f0 | 1830 (0x726) |
| _chkstk | 0x77f073c4 | 1831 (0x727) |
| _fltused | 0x77f9ce98 | 1832 (0x728) |
| _ftol | 0x77ef4820 | 1833 (0x729) |
| _i64toa | 0x77f89886 | 1834 (0x72a) |
| _i64toa_s | 0x77f8c537 | 1835 (0x72b) |
| _i64tow | 0x77f89991 | 1836 (0x72c) |
| _i64tow_s | 0x77f8c6fe | 1837 (0x72d) |
| _itoa | 0x77ec9ce0 | 1838 (0x72e) |
| _itoa_s | 0x77f3847c | 1839 (0x72f) |
| _itow | 0x77f89917 | 1840 (0x730) |
| _itow_s | 0x77ed84aa | 1841 (0x731) |
| _lfind | 0x77f899c9 | 1842 (0x732) |
| _ltoa | 0x77f8985a | 1843 (0x733) |
| _ltoa_s | 0x77f8c3d8 | 1844 (0x734) |
| _ltow | 0x77f89946 | 1845 (0x735) |
| _ltow_s | 0x77f8c595 | 1846 (0x736) |
| _makepath_s | 0x77f8c75c | 1847 (0x737) |
| _memccpy | 0x77ef4860 | 1848 (0x738) |
| _memicmp | 0x77f89a50 | 1849 (0x739) |
| _snprintf | 0x77f89a60 | 1850 (0x73a) |
| _snprintf_s | 0x77ec35b2 | 1851 (0x73b) |
| _snscanf_s | 0x77f8c845 | 1852 (0x73c) |
| _snwprintf | 0x77ef3cd6 | 1853 (0x73d) |
| _snwprintf_s | 0x77ec69cc | 1854 (0x73e) |
| _snwscanf_s | 0x77f8c87f | 1855 (0x73f) |
| _splitpath | 0x77f89cf7 | 1856 (0x740) |
| _splitpath_s | 0x77f8c8b9 | 1857 (0x741) |
| _strcmpi | 0x77f2531f | 1858 (0x742) |
| _stricmp | 0x77f2531f | 1859 (0x743) |
| _strlwr | 0x77ec2d5e | 1860 (0x744) |
| _strnicmp | 0x77eebc6e | 1861 (0x745) |
| _strnset_s | 0x77f8cab7 | 1862 (0x746) |
| _strset_s | 0x77f8cb2b | 1863 (0x747) |
| _strupr | 0x77f39953 | 1864 (0x748) |
| _swprintf | 0x77f89d48 | 1865 (0x749) |
| _ui64toa | 0x77ec626e | 1866 (0x74a) |
| _ui64toa_s | 0x77f8c571 | 1867 (0x74b) |
| _ui64tow | 0x77f37845 | 1868 (0x74c) |
| _ui64tow_s | 0x77f8c738 | 1869 (0x74d) |
| _ultoa | 0x77ec624f | 1870 (0x74e) |
| _ultoa_s | 0x77f8c406 | 1871 (0x74f) |
| _ultow | 0x77f89972 | 1872 (0x750) |
| _ultow_s | 0x77f8c5c1 | 1873 (0x751) |
| _vscwprintf | 0x77f3a5c3 | 1874 (0x752) |
| _vsnprintf | 0x77ee665b | 1875 (0x753) |
| _vsnprintf_s | 0x77ec35d6 | 1876 (0x754) |
| _vsnwprintf | 0x77f2caaa | 1877 (0x755) |
| _vsnwprintf_s | 0x77ed78d4 | 1878 (0x756) |
| _vswprintf | 0x77f89e6d | 1879 (0x757) |
| _wcsicmp | 0x77f16f61 | 1880 (0x758) |
| _wcslwr | 0x77f89e8c | 1881 (0x759) |
| _wcsnicmp | 0x77f158fc | 1882 (0x75a) |
| _wcsnset_s | 0x77f89edb | 1883 (0x75b) |
| _wcsset_s | 0x77f89f59 | 1884 (0x75c) |
| _wcstoui64 | 0x77f8a255 | 1885 (0x75d) |
| _wcsupr | 0x77f8a274 | 1886 (0x75e) |
| _wmakepath_s | 0x77f8cb7a | 1887 (0x75f) |
| _wsplitpath_s | 0x77f8cc95 | 1888 (0x760) |
| _wtoi | 0x77ed0b28 | 1889 (0x761) |
| _wtoi64 | 0x77f8a2ac | 1890 (0x762) |
| _wtol | 0x77ed0adf | 1891 (0x763) |
| abs | 0x77f8a3e4 | 1892 (0x764) |
| atan | 0x77ef48c0 | 1893 (0x765) |
| atoi | 0x77ec9d0d | 1894 (0x766) |
| atol | 0x77ec9d1a | 1895 (0x767) |
| bsearch | 0x77f1cdae | 1896 (0x768) |
| ceil | 0x77ef4970 | 1897 (0x769) |
| cos | 0x77f07400 | 1898 (0x76a) |
| fabs | 0x77f8a2d3 | 1899 (0x76b) |
| floor | 0x77ef4ab0 | 1900 (0x76c) |
| isalnum | 0x77f8973f | 1901 (0x76d) |
| isalpha | 0x77ed2be9 | 1902 (0x76e) |
| iscntrl | 0x77f897b4 | 1903 (0x76f) |
| isdigit | 0x77ed33fb | 1904 (0x770) |
| isgraph | 0x77f8978d | 1905 (0x771) |
| islower | 0x77f896f5 | 1906 (0x772) |
| isprint | 0x77f89766 | 1907 (0x773) |
| ispunct | 0x77f8971a | 1908 (0x774) |
| isspace | 0x77ec32b2 | 1909 (0x775) |
| isupper | 0x77f896d0 | 1910 (0x776) |
| iswalpha | 0x77eee3b9 | 1911 (0x777) |
| iswctype | 0x77ef3f95 | 1912 (0x778) |
| iswdigit | 0x77ef4035 | 1913 (0x779) |
| iswlower | 0x77f8a3b1 | 1914 (0x77a) |
| iswspace | 0x77ec372d | 1915 (0x77b) |
| iswxdigit | 0x77f8a3c9 | 1916 (0x77c) |
| isxdigit | 0x77ed35f3 | 1917 (0x77d) |
| labs | 0x77f8a3e4 | 1918 (0x77e) |
| log | 0x77f074c0 | 1919 (0x77f) |
| mbstowcs | 0x77ec7a20 | 1920 (0x780) |
| memchr | 0x77ef4c00 | 1921 (0x781) |
| memcmp | 0x77ef3b1b | 1922 (0x782) |
| memcpy | 0x77ef4cc0 | 1923 (0x783) |
| memcpy_s | 0x77f8cec3 | 1924 (0x784) |
| memmove | 0x77ef5000 | 1925 (0x785) |
| memmove_s | 0x77f8cf41 | 1926 (0x786) |
| memset | 0x77ef5340 | 1927 (0x787) |
| pow | 0x77f06ac0 | 1928 (0x788) |
| qsort | 0x77ed7a02 | 1929 (0x789) |
| sin | 0x77ef41c0 | 1930 (0x78a) |
| sprintf | 0x77f8a3f9 | 1931 (0x78b) |
| sprintf_s | 0x77ed45a4 | 1932 (0x78c) |
| sqrt | 0x77ef4294 | 1933 (0x78d) |
| sscanf | 0x77f8a4dd | 1934 (0x78e) |
| sscanf_s | 0x77f8cfa4 | 1935 (0x78f) |
| strcat | 0x77ef53d0 | 1936 (0x790) |
| strcat_s | 0x77ee39ce | 1937 (0x791) |
| strchr | 0x77f07690 | 1938 (0x792) |
| strcmp | 0x77ef54c0 | 1939 (0x793) |
| strcpy | 0x77ef53c0 | 1940 (0x794) |
| strcpy_s | 0x77ee389e | 1941 (0x795) |
| strcspn | 0x77ef5550 | 1942 (0x796) |
| strlen | 0x77ef55c0 | 1943 (0x797) |
| strncat | 0x77ef5650 | 1944 (0x798) |
| strncat_s | 0x77f8cfed | 1945 (0x799) |
| strncmp | 0x77f325ec | 1946 (0x79a) |
| strncpy | 0x77ef5790 | 1947 (0x79b) |
| strncpy_s | 0x77edd83f | 1948 (0x79c) |
| strnlen | 0x77f8a502 | 1949 (0x79d) |
| strpbrk | 0x77ef58c0 | 1950 (0x79e) |
| strrchr | 0x77ef5900 | 1951 (0x79f) |
| strspn | 0x77ef5930 | 1952 (0x7a0) |
| strstr | 0x77f075c0 | 1953 (0x7a1) |
| strtok_s | 0x77f8d0ca | 1954 (0x7a2) |
| strtol | 0x77ed387a | 1955 (0x7a3) |
| strtoul | 0x77f8a524 | 1956 (0x7a4) |
| swprintf | 0x77f89d48 | 1957 (0x7a5) |
| swprintf_s | 0x77ee7a93 | 1958 (0x7a6) |
| swscanf_s | 0x77f8d1b2 | 1959 (0x7a7) |
| tan | 0x77ef5980 | 1960 (0x7a8) |
| tolower | 0x77f8a543 | 1961 (0x7a9) |
| toupper | 0x77f3259d | 1962 (0x7aa) |
| towlower | 0x77f8a570 | 1963 (0x7ab) |
| towupper | 0x77f8a593 | 1964 (0x7ac) |
| vDbgPrintEx | 0x77f68d14 | 1965 (0x7ad) |
| vDbgPrintExWithPrefix | 0x77f68d3a | 1966 (0x7ae) |
| vsprintf | 0x77f8a61f | 1967 (0x7af) |
| vsprintf_s | 0x77ed45c5 | 1968 (0x7b0) |
| vswprintf_s | 0x77ee7ab4 | 1969 (0x7b1) |
| wcscat | 0x77f8a63e | 1970 (0x7b2) |
| wcscat_s | 0x77ee6ab8 | 1971 (0x7b3) |
| wcschr | 0x77f17390 | 1972 (0x7b4) |
| wcscmp | 0x77ef3c0f | 1973 (0x7b5) |
| wcscpy | 0x77ec2dea | 1974 (0x7b6) |
| wcscpy_s | 0x77f2a5c5 | 1975 (0x7b7) |
| wcscspn | 0x77edd91e | 1976 (0x7b8) |
| wcslen | 0x77ef2375 | 1977 (0x7b9) |
| wcsncat | 0x77f8a671 | 1978 (0x7ba) |
| wcsncat_s | 0x77eeb793 | 1979 (0x7bb) |
| wcsncmp | 0x77f1898c | 1980 (0x7bc) |
| wcsncpy | 0x77ef3c52 | 1981 (0x7bd) |
| wcsncpy_s | 0x77edb289 | 1982 (0x7be) |
| wcsnlen | 0x77f394b8 | 1983 (0x7bf) |
| wcspbrk | 0x77f30eec | 1984 (0x7c0) |
| wcsrchr | 0x77f18959 | 1985 (0x7c1) |
| wcsspn | 0x77ec5e2f | 1986 (0x7c2) |
| wcsstr | 0x77f28ab5 | 1987 (0x7c3) |
| wcstol | 0x77ed1931 | 1988 (0x7c4) |
| wcstombs | 0x77f8a6b6 | 1989 (0x7c5) |
| wcstoul | 0x77ec5d71 | 1990 (0x7c6) |
【User32.DLL 822個】
| User32.dll(Function Name) | Address | Ordinal |
|---|---|---|
| ActivateKeyboardLayout | 0x77d18203 | 1502 (0x5de) |
| AddClipboardFormatListener | 0x77d749a5 | 1503 (0x5df) |
| AdjustWindowRect | 0x77d370a4 | 1504 (0x5e0) |
| AdjustWindowRectEx | 0x77d248ba | 1505 (0x5e1) |
| AlignRects | 0x77d75598 | 1506 (0x5e2) |
| AllowForegroundActivation | 0x77d5c292 | 1507 (0x5e3) |
| AllowSetForegroundWindow | 0x77d17b60 | 1508 (0x5e4) |
| AnimateWindow | 0x77d40620 | 1509 (0x5e5) |
| AnyPopup | 0x77d727ee | 1510 (0x5e6) |
| AppendMenuA | 0x77d73aa3 | 1511 (0x5e7) |
| AppendMenuW | 0x77d2175c | 1512 (0x5e8) |
| ArrangeIconicWindows | 0x77d412de | 1513 (0x5e9) |
| AttachThreadInput | 0x77d46b54 | 1514 (0x5ea) |
| BeginDeferWindowPos | 0x77d1a6a6 | 1515 (0x5eb) |
| BeginPaint | 0x77d25d14 | 1516 (0x5ec) |
| BlockInput | 0x77d46a99 | 1517 (0x5ed) |
| BringWindowToTop | 0x77d4040b | 1518 (0x5ee) |
| BroadcastSystemMessage | 0x77d73b4a | 1519 (0x5ef) |
| BroadcastSystemMessageA | 0x77d73b4a | 1520 (0x5f0) |
| BroadcastSystemMessageExA | 0x77d73b23 | 1521 (0x5f1) |
| BroadcastSystemMessageExW | 0x77d14255 | 1522 (0x5f2) |
| BroadcastSystemMessageW | 0x77d17cb8 | 1523 (0x5f3) |
| BuildReasonArray | 0x77d7042d | 1524 (0x5f4) |
| CalcMenuBar | 0x77d24d55 | 1525 (0x5f5) |
| CalculatePopupWindowPosition | 0x77d2ee86 | 1526 (0x5f6) |
| CallMsgFilter | 0x77d73eec | 1527 (0x5f7) |
| CallMsgFilterA | 0x77d73eec | 1528 (0x5f8) |
| CallMsgFilterW | 0x77d240c2 | 1529 (0x5f9) |
| CallNextHookEx | 0x77d1abe1 | 1530 (0x5fa) |
| CallWindowProcA | 0x77d42bd3 | 1531 (0x5fb) |
| CallWindowProcW | 0x77d21b3c | 1532 (0x5fc) |
| CancelShutdown | 0x77d5fd1b | 1533 (0x5fd) |
| CascadeChildWindows | 0x77d5beb2 | 1534 (0x5fe) |
| CascadeWindows | 0x77d6b931 | 1535 (0x5ff) |
| ChangeClipboardChain | 0x77d4147c | 1536 (0x600) |
| ChangeDisplaySettingsA | 0x77d74102 | 1537 (0x601) |
| ChangeDisplaySettingsExA | 0x77d3627a | 1538 (0x602) |
| ChangeDisplaySettingsExW | 0x77d5fa39 | 1539 (0x603) |
| ChangeDisplaySettingsW | 0x77d36181 | 1540 (0x604) |
| ChangeMenuA | 0x77d6bca1 | 1541 (0x605) |
| ChangeMenuW | 0x77d6bbfc | 1542 (0x606) |
| ChangeWindowMessageFilter | 0x77d1e248 | 1543 (0x607) |
| ChangeWindowMessageFilterEx | 0x77d224c8 | 1544 (0x608) |
| CharLowerA | 0x77d23bf0 | 1545 (0x609) |
| CharLowerBuffA | 0x77d23b3a | 1546 (0x60a) |
| CharLowerBuffW | 0x77d23afe | 1547 (0x60b) |
| CharLowerW | 0x77d1ba8a | 1548 (0x60c) |
| CharNextA | 0x77d1c861 | 1549 (0x60d) |
| CharNextExA | 0x77d7205f | 1557 (0x615) |
| CharNextW | 0x77d20be6 | 1558 (0x616) |
| CharPrevA | 0x77d1c8be | 1559 (0x617) |
| CharPrevExA | 0x77d72096 | 1560 (0x618) |
| CharPrevW | 0x77d1c816 | 1561 (0x619) |
| CharToOemA | 0x77d198a7 | 1562 (0x61a) |
| CharToOemBuffA | 0x77d1624b | 1563 (0x61b) |
| CharToOemBuffW | 0x77d6f11f | 1564 (0x61c) |
| CharToOemW | 0x77d6f0c8 | 1565 (0x61d) |
| CharUpperA | 0x77d2ecae | 1566 (0x61e) |
| CharUpperBuffA | 0x77d2ecef | 1567 (0x61f) |
| CharUpperBuffW | 0x77d2ebd5 | 1568 (0x620) |
| CharUpperW | 0x77d2e981 | 1569 (0x621) |
| CheckDesktopByThreadId | 0x77d18d3d | 1570 (0x622) |
| CheckDlgButton | 0x77d3ebfe | 1571 (0x623) |
| CheckMenuItem | 0x77d3ee7c | 1572 (0x624) |
| CheckMenuRadioItem | 0x77d325df | 1573 (0x625) |
| CheckRadioButton | 0x77d3ecf5 | 1574 (0x626) |
| CheckWindowThreadDesktop | 0x77d74a1d | 1575 (0x627) |
| ChildWindowFromPoint | 0x77d5b6aa | 1576 (0x628) |
| ChildWindowFromPointEx | 0x77d3f624 | 1577 (0x629) |
| CliImmSetHotKey | 0x77d591ed | 1578 (0x62a) |
| ClientThreadSetup | 0x77d2d90b | 1579 (0x62b) |
| ClientToScreen | 0x77d21316 | 1580 (0x62c) |
| ClipCursor | 0x77d2f8f7 | 1581 (0x62d) |
| CloseClipboard | 0x77d4446c | 1582 (0x62e) |
| CloseDesktop | 0x77d1c4ce | 1583 (0x62f) |
| CloseGestureInfoHandle | 0x77d5b38a | 1584 (0x630) |
| CloseTouchInputHandle | 0x77d5d42e | 1585 (0x631) |
| CloseWindow | 0x77d5bed3 | 1586 (0x632) |
| CloseWindowStation | 0x77d1c6f2 | 1587 (0x633) |
| ConsoleControl | 0x77d2ced1 | 1588 (0x634) |
| ControlMagnification | 0x77d3688c | 1589 (0x635) |
| CopyAcceleratorTableA | 0x77d3af0b | 1590 (0x636) |
| CopyAcceleratorTableW | 0x77d43412 | 1591 (0x637) |
| CopyIcon | 0x77d44119 | 1592 (0x638) |
| CopyImage | 0x77d187a6 | 1593 (0x639) |
| CopyRect | 0x77d24ad9 | 1594 (0x63a) |
| CountClipboardFormats | 0x77d4470a | 1595 (0x63b) |
| CreateAcceleratorTableA | 0x77d36e79 | 1596 (0x63c) |
| CreateAcceleratorTableW | 0x77d19794 | 1597 (0x63d) |
| CreateCaret | 0x77d46232 | 1598 (0x63e) |
| CreateCursor | 0x77d34489 | 1599 (0x63f) |
| CreateDesktopA | 0x77d5bd9e | 1600 (0x640) |
| CreateDesktopExA | 0x77d5bcac | 1601 (0x641) |
| CreateDesktopExW | 0x77d140f8 | 1602 (0x642) |
| CreateDesktopW | 0x77d140cf | 1603 (0x643) |
| CreateDialogIndirectParamA | 0x77d3721d | 1604 (0x644) |
| CreateDialogIndirectParamAorW | 0x77d45327 | 1605 (0x645) |
| CreateDialogIndirectParamW | 0x77d3ea10 | 1606 (0x646) |
| CreateDialogParamA | 0x77d31f42 | 1607 (0x647) |
| CreateDialogParamW | 0x77d45630 | 1608 (0x648) |
| CreateIcon | 0x77d37510 | 1609 (0x649) |
| CreateIconFromResource | 0x77d5d2b6 | 1610 (0x64a) |
| CreateIconFromResourceEx | 0x77d1de11 | 1611 (0x64b) |
| CreateIconIndirect | 0x77d1a7ab | 1612 (0x64c) |
| CreateMDIWindowA | 0x77d38714 | 1613 (0x64d) |
| CreateMDIWindowW | 0x77d367cb | 1614 (0x64e) |
| CreateMenu | 0x77d46aed | 1615 (0x64f) |
| CreatePopupMenu | 0x77d1867c | 1616 (0x650) |
| CreateSystemThreads | 0x77d72828 | 1617 (0x651) |
| CreateWindowExA | 0x77d1bf40 | 1618 (0x652) |
| CreateWindowExW | 0x77d1ec7c | 1619 (0x653) |
| CreateWindowStationA | 0x77d5c8f4 | 1620 (0x654) |
| CreateWindowStationW | 0x77d1164c | 1621 (0x655) |
| CsrBroadcastSystemMessageExW | 0x77d142b4 | 1622 (0x656) |
| CtxInitUser32 | 0x77d11c4f | 1623 (0x657) |
| DdeAbandonTransaction | 0x77d73934 | 1624 (0x658) |
| DdeAccessData | 0x77d67291 | 1625 (0x659) |
| DdeAddData | 0x77d675f5 | 1626 (0x65a) |
| DdeClientTransaction | 0x77d7323c | 1627 (0x65b) |
| DdeCmpStringHandles | 0x77d67a4b | 1628 (0x65c) |
| DdeConnect | 0x77d5eb5b | 1629 (0x65d) |
| DdeConnectList | 0x77d5ee71 | 1630 (0x65e) |
| DdeCreateDataHandle | 0x77d35d42 | 1631 (0x65f) |
| DdeCreateStringHandleA | 0x77d369ec | 1632 (0x660) |
| DdeCreateStringHandleW | 0x77d15e1a | 1633 (0x661) |
| DdeDisconnect | 0x77d5ed59 | 1634 (0x662) |
| DdeDisconnectList | 0x77d5edd0 | 1635 (0x663) |
| DdeEnableCallback | 0x77d5a70a | 1636 (0x664) |
| DdeFreeDataHandle | 0x77d35ddc | 1637 (0x665) |
| DdeFreeStringHandle | 0x77d42d00 | 1638 (0x666) |
| DdeGetData | 0x77d34d50 | 1639 (0x667) |
| DdeGetLastError | 0x77d60f78 | 1640 (0x668) |
| DdeGetQualityOfService | 0x77d5e5b9 | 1641 (0x669) |
| DdeImpersonateClient | 0x77d60fb9 | 1642 (0x66a) |
| DdeInitializeA | 0x77d369ac | 1643 (0x66b) |
| DdeInitializeW | 0x77d15df2 | 1644 (0x66c) |
| DdeKeepStringHandle | 0x77d67b0b | 1645 (0x66d) |
| DdeNameService | 0x77d16a01 | 1646 (0x66e) |
| DdePostAdvise | 0x77d72f2d | 1647 (0x66f) |
| DdeQueryConvInfo | 0x77d73756 | 1648 (0x670) |
| DdeQueryNextServer | 0x77d5e6f8 | 1649 (0x671) |
| DdeQueryStringA | 0x77d67b98 | 1650 (0x672) |
| DdeQueryStringW | 0x77d35aef | 1651 (0x673) |
| DdeReconnect | 0x77d5ec06 | 1652 (0x674) |
| DdeSetQualityOfService | 0x77d5e5b9 | 1653 (0x675) |
| DdeSetUserHandle | 0x77d738d9 | 1654 (0x676) |
| DdeUnaccessData | 0x77d67303 | 1655 (0x677) |
| DdeUninitialize | 0x77d42bf7 | 1656 (0x678) |
| DefDlgProcA | 0x77d371e4 | 1657 (0x679) |
| DefDlgProcW | 0x77d45bc1 | 1658 (0x67a) |
| DefFrameProcA | 0x77d425b7 | 1659 (0x67b) |
| DefFrameProcW | 0x77d4152b | 1660 (0x67c) |
| DefMDIChildProcA | 0x77d425db | 1661 (0x67d) |
| DefMDIChildProcW | 0x77d4150a | 1662 (0x67e) |
| DefRawInputProc | 0x77d5cc17 | 1663 (0x67f) |
| DefWindowProcA | 0x77d1bb1c | 1664 (0x680) |
| DefWindowProcW | 0x77d2507d | 1665 (0x681) |
| DeferWindowPos | 0x77d1a6c8 | 1666 (0x682) |
| DeleteMenu | 0x77d183c2 | 1667 (0x683) |
| DeregisterShellHookWindow | 0x77d33c5e | 1668 (0x684) |
| DestroyAcceleratorTable | 0x77d462e5 | 1669 (0x685) |
| DestroyCaret | 0x77d463c0 | 1670 (0x686) |
| DestroyCursor | 0x77d1a77f | 1671 (0x687) |
| DestroyIcon | 0x77d1a77f | 1672 (0x688) |
| DestroyMenu | 0x77d187f7 | 1673 (0x689) |
| DestroyReasons | 0x77d70071 | 1674 (0x68a) |
| DestroyWindow | 0x77d1b2f4 | 1675 (0x68b) |
| DeviceEventWorker | 0x77d141bf | 1676 (0x68c) |
| DialogBoxIndirectParamA | 0x77d5d274 | 1677 (0x68d) |
| DialogBoxIndirectParamAorW | 0x77d43b40 | 1678 (0x68e) |
| DialogBoxIndirectParamW | 0x77d43b7f | 1679 (0x68f) |
| DialogBoxParamA | 0x77d5cf42 | 1680 (0x690) |
| DialogBoxParamW | 0x77d33b9b | 1681 (0x691) |
| DisableProcessWindowsGhosting | 0x77d159bd | 1682 (0x692) |
| DispatchMessageA | 0x77d22e32 | 1683 (0x693) |
| DispatchMessageW | 0x77d2cc61 | 1684 (0x694) |
| DisplayConfigGetDeviceInfo | 0x77d2f026 | 1685 (0x695) |
| DisplayConfigSetDeviceInfo | 0x77d748a5 | 1686 (0x696) |
| DisplayExitWindowsWarnings | 0x77d5ff97 | 1687 (0x697) |
| DlgDirListA | 0x77d69eab | 1688 (0x698) |
| DlgDirListComboBoxA | 0x77d5e1ac | 1689 (0x699) |
| DlgDirListComboBoxW | 0x77d5e239 | 1690 (0x69a) |
| DlgDirListW | 0x77d69f39 | 1691 (0x69b) |
| DlgDirSelectComboBoxExA | 0x77d5e26a | 1692 (0x69c) |
| DlgDirSelectComboBoxExW | 0x77d5e154 | 1693 (0x69d) |
| DlgDirSelectExA | 0x77d6a0fc | 1694 (0x69e) |
| DlgDirSelectExW | 0x77d6a162 | 1695 (0x69f) |
| DoSoundConnect | 0x77d13e69 | 1696 (0x6a0) |
| DoSoundDisconnect | 0x77d74a31 | 1697 (0x6a1) |
| DragDetect | 0x77d74a43 | 1698 (0x6a2) |
| DragObject | 0x77d74a57 | 1699 (0x6a3) |
| DrawAnimatedRects | 0x77d74a6b | 1700 (0x6a4) |
| DrawCaption | 0x77d6ee36 | 1701 (0x6a5) |
| DrawCaptionTempA | 0x77d73fbe | 1702 (0x6a6) |
| DrawCaptionTempW | 0x77d5fa79 | 1703 (0x6a7) |
| DrawEdge | 0x77d2311a | 1704 (0x6a8) |
| DrawFocusRect | 0x77d43091 | 1705 (0x6a9) |
| DrawFrame | 0x77d2ee9a | 1706 (0x6aa) |
| DrawFrameControl | 0x77d3b4f9 | 1707 (0x6ab) |
| DrawIcon | 0x77d16427 | 1708 (0x6ac) |
| DrawIconEx | 0x77d22c32 | 1709 (0x6ad) |
| DrawMenuBar | 0x77d415ae | 1710 (0x6ae) |
| DrawMenuBarTemp | 0x77d6bd65 | 1711 (0x6af) |
| DrawStateA | 0x77d6c1a5 | 1712 (0x6b0) |
| DrawStateW | 0x77d43588 | 1713 (0x6b1) |
| DrawTextA | 0x77d3ae29 | 1714 (0x6b2) |
| DrawTextExA | 0x77d3ae60 | 1715 (0x6b3) |
| DrawTextExW | 0x77d25894 | 1716 (0x6b4) |
| DrawTextW | 0x77d25b6a | 1717 (0x6b5) |
| DwmGetDxSharedSurface | 0x77d363e6 | 1718 (0x6b6) |
| DwmStartRedirection | 0x77d14fba | 1719 (0x6b7) |
| DwmStopRedirection | 0x77d361a9 | 1720 (0x6b8) |
| EditWndProc | 0x77d3b6cb | 1721 (0x6b9) |
| EmptyClipboard | 0x77d3290c | 1722 (0x6ba) |
| EnableMenuItem | 0x77d443bc | 1723 (0x6bb) |
| EnableScrollBar | 0x77d419ce | 1724 (0x6bc) |
| EnableWindow | 0x77d18d02 | 1725 (0x6bd) |
| EndDeferWindowPos | 0x77d1a67a | 1726 (0x6be) |
| EndDialog | 0x77d43ba3 | 1727 (0x6bf) |
| EndMenu | 0x77d18302 | 1728 (0x6c0) |
| EndPaint | 0x77d25d42 | 1729 (0x6c1) |
| EndTask | 0x77d5fd66 | 1730 (0x6c2) |
| EnterReaderModeHelper | 0x77d6fa1b | 1731 (0x6c3) |
| EnumChildWindows | 0x77d22948 | 1732 (0x6c4) |
| EnumClipboardFormats | 0x77d447ec | 1733 (0x6c5) |
| EnumDesktopWindows | 0x77d1b4c7 | 1734 (0x6c6) |
| EnumDesktopsA | 0x77d16e80 | 1735 (0x6c7) |
| EnumDesktopsW | 0x77d1c698 | 1736 (0x6c8) |
| EnumDisplayDevicesA | 0x77d1c204 | 1737 (0x6c9) |
| EnumDisplayDevicesW | 0x77d15b66 | 1738 (0x6ca) |
| EnumDisplayMonitors | 0x77d234a3 | 1739 (0x6cb) |
| EnumDisplaySettingsA | 0x77d364df | 1740 (0x6cc) |
| EnumDisplaySettingsExA | 0x77d3650b | 1741 (0x6cd) |
| EnumDisplaySettingsExW | 0x77d213cc | 1742 (0x6ce) |
| EnumDisplaySettingsW | 0x77d214c7 | 1743 (0x6cf) |
| EnumPropsA | 0x77d5b056 | 1744 (0x6d0) |
| EnumPropsExA | 0x77d5b090 | 1745 (0x6d1) |
| EnumPropsExW | 0x77d5b0ae | 1746 (0x6d2) |
| EnumPropsW | 0x77d5b073 | 1747 (0x6d3) |
| EnumThreadWindows | 0x77d1b712 | 1748 (0x6d4) |
| EnumWindowStationsA | 0x77d16e63 | 1749 (0x6d5) |
| EnumWindowStationsW | 0x77d47178 | 1750 (0x6d6) |
| EnumWindows | 0x77d2375b | 1751 (0x6d7) |
| EqualRect | 0x77d249ba | 1752 (0x6d8) |
| ExcludeUpdateRgn | 0x77d3e947 | 1753 (0x6d9) |
| ExitWindowsEx | 0x77d606c7 | 1754 (0x6da) |
| FillRect | 0x77d25d56 | 1755 (0x6db) |
| FindWindowA | 0x77d18ff3 | 1756 (0x6dc) |
| FindWindowExA | 0x77d16f69 | 1757 (0x6dd) |
| FindWindowExW | 0x77d4712b | 1758 (0x6de) |
| FindWindowW | 0x77d1ae0d | 1759 (0x6df) |
| FlashWindow | 0x77d42ef3 | 1760 (0x6e0) |
| FlashWindowEx | 0x77d42f32 | 1761 (0x6e1) |
| FrameRect | 0x77d40eb0 | 1762 (0x6e2) |
| FreeDDElParam | 0x77d34c3c | 1763 (0x6e3) |
| FrostCrashedWindow | 0x77d74acf | 1764 (0x6e4) |
| GetActiveWindow | 0x77d43b33 | 1765 (0x6e5) |
| GetAltTabInfo | 0x77d740de | 1766 (0x6e6) |
| GetAltTabInfoA | 0x77d740de | 1767 (0x6e7) |
| GetAltTabInfoW | 0x77d5faf3 | 1768 (0x6e8) |
| GetAncestor | 0x77d22a9d | 1769 (0x6e9) |
| GetAppCompatFlags2 | 0x77d2d734 | 1770 (0x6ea) |
| GetAppCompatFlags | 0x77d211ff | 1771 (0x6eb) |
| GetAsyncKeyState | 0x77d1a256 | 1772 (0x6ec) |
| GetCapture | 0x77d19dc7 | 1773 (0x6ed) |
| GetCaretBlinkTime | 0x77d20d01 | 1774 (0x6ee) |
| GetCaretPos | 0x77d433fe | 1775 (0x6ef) |
| GetClassInfoA | 0x77d17158 | 1776 (0x6f0) |
| GetClassInfoExA | 0x77d16fd9 | 1777 (0x6f1) |
| GetClassInfoExW | 0x77d2095e | 1778 (0x6f2) |
| GetClassInfoW | 0x77d20ac2 | 1779 (0x6f3) |
| GetClassLongA | 0x77d4119f | 1780 (0x6f4) |
| GetClassLongW | 0x77d23860 | 1781 (0x6f5) |
| GetClassNameA | 0x77d42445 | 1782 (0x6f6) |
| GetClassNameW | 0x77d22a29 | 1783 (0x6f7) |
| GetClassWord | 0x77d44076 | 1784 (0x6f8) |
| GetClientRect | 0x77d254dd | 1785 (0x6f9) |
| GetClipCursor | 0x77d74b09 | 1786 (0x6fa) |
| GetClipboardData | 0x77d32ba7 | 1787 (0x6fb) |
| GetClipboardFormatNameA | 0x77d3700a | 1788 (0x6fc) |
| GetClipboardFormatNameW | 0x77d35fd2 | 1789 (0x6fd) |
| GetClipboardOwner | 0x77d44525 | 1790 (0x6fe) |
| GetClipboardSequenceNumber | 0x77d44513 | 1791 (0x6ff) |
| GetClipboardViewer | 0x77d74af7 | 1792 (0x700) |
| GetComboBoxInfo | 0x77d43466 | 1793 (0x701) |
| GetCursor | 0x77d46408 | 1794 (0x702) |
| GetCursorFrameInfo | 0x77d4266e | 1795 (0x703) |
| GetCursorInfo | 0x77d74b31 | 1796 (0x704) |
| GetCursorPos | 0x77d1a4b3 | 1797 (0x705) |
| GetDC | 0x77d2544c | 1798 (0x706) |
| GetDCEx | 0x77d22d57 | 1799 (0x707) |
| GetDesktopWindow | 0x77d201a9 | 1800 (0x708) |
| GetDialogBaseUnits | 0x77d4351c | 1801 (0x709) |
| GetDisplayConfigBufferSizes | 0x77d14fce | 1802 (0x70a) |
| GetDlgCtrlID | 0x77d1b4e8 | 1803 (0x70b) |
| GetDlgItem | 0x77d442bb | 1804 (0x70c) |
| GetDlgItemInt | 0x77d3ed56 | 1805 (0x70d) |
| GetDlgItemTextA | 0x77d73d14 | 1806 (0x70e) |
| GetDlgItemTextW | 0x77d3ecbc | 1807 (0x70f) |
| GetDoubleClickTime | 0x77d1ade0 | 1808 (0x710) |
| GetFocus | 0x77d23a34 | 1809 (0x711) |
| GetForegroundWindow | 0x77d2335d | 1810 (0x712) |
| GetGUIThreadInfo | 0x77d2237e | 1811 (0x713) |
| GetGestureConfig | 0x77d750a3 | 1812 (0x714) |
| GetGestureExtraArgs | 0x77d5b376 | 1813 (0x715) |
| GetGestureInfo | 0x77d5b30d | 1814 (0x716) |
| GetGuiResources | 0x77d74b45 | 1815 (0x717) |
| GetIconInfo | 0x77d22989 | 1816 (0x718) |
| GetIconInfoExA | 0x77d5d067 | 1817 (0x719) |
| GetIconInfoExW | 0x77d5cfae | 1818 (0x71a) |
| GetInputDesktop | 0x77d5bf18 | 1819 (0x71b) |
| GetInputLocaleInfo | 0x77d74b6d | 1820 (0x71c) |
| GetInputState | 0x77d41c5f | 1821 (0x71d) |
| GetInternalWindowPos | 0x77d74b81 | 1822 (0x71e) |
| GetKBCodePage | 0x77d5c2ba | 1823 (0x71f) |
| GetKeyNameTextA | 0x77d73d4d | 1824 (0x720) |
| GetKeyNameTextW | 0x77d5fa03 | 1825 (0x721) |
| GetKeyState | 0x77d22b4d | 1826 (0x722) |
| GetKeyboardLayout | 0x77d23800 | 1827 (0x723) |
| GetKeyboardLayoutList | 0x77d1935c | 1828 (0x724) |
| GetKeyboardLayoutNameA | 0x77d73db7 | 1829 (0x725) |
| GetKeyboardLayoutNameW | 0x77d5fa13 | 1830 (0x726) |
| GetKeyboardState | 0x77d46946 | 1831 (0x727) |
| GetKeyboardType | 0x77d5bfee | 1832 (0x728) |
| GetLastActivePopup | 0x77d46894 | 1833 (0x729) |
| GetLastInputInfo | 0x77d23834 | 1834 (0x72a) |
| GetLayeredWindowAttributes | 0x77d74f53 | 1835 (0x72b) |
| GetListBoxInfo | 0x77d74bbd | 1836 (0x72c) |
| GetMagnificationDesktopColorEffect | 0x77d6ab99 | 1837 (0x72d) |
| GetMagnificationDesktopMagnification | 0x77d6ac32 | 1838 (0x72e) |
| GetMagnificationLensCtxInformation | 0x77d3690b | 1839 (0x72f) |
| GetMenu | 0x77d46b68 | 1840 (0x730) |
| GetMenuBarInfo | 0x77d46fc7 | 1841 (0x731) |
| GetMenuCheckMarkDimensions | 0x77d6bd9b | 1842 (0x732) |
| GetMenuContextHelpId | 0x77d6bd46 | 1843 (0x733) |
| GetMenuDefaultItem | 0x77d18710 | 1844 (0x734) |
| GetMenuInfo | 0x77d445b1 | 1845 (0x735) |
| GetMenuItemCount | 0x77d1ae39 | 1846 (0x736) |
| GetMenuItemID | 0x77d19cd4 | 1847 (0x737) |
| GetMenuItemInfoA | 0x77d1856a | 1848 (0x738) |
| GetMenuItemInfoW | 0x77d1aefa | 1849 (0x739) |
| GetMenuItemRect | 0x77d322c5 | 1850 (0x73a) |
| GetMenuState | 0x77d467d2 | 1851 (0x73b) |
| GetMenuStringA | 0x77d73a16 | 1852 (0x73c) |
| GetMenuStringW | 0x77d46528 | 1853 (0x73d) |
| GetMessageA | 0x77d21899 | 1854 (0x73e) |
| GetMessageExtraInfo | 0x77d1b705 | 1855 (0x73f) |
| GetMessagePos | 0x77d46703 | 1856 (0x740) |
| GetMessageTime | 0x77d44231 | 1857 (0x741) |
| GetMessageW | 0x77d2cde8 | 1858 (0x742) |
| GetMonitorInfoA | 0x77d1c34e | 1859 (0x743) |
| GetMonitorInfoW | 0x77d233e7 | 1860 (0x744) |
| GetMouseMovePointsEx | 0x77d74be5 | 1861 (0x745) |
| GetNextDlgGroupItem | 0x77d615f9 | 1862 (0x746) |
| GetNextDlgTabItem | 0x77d4625b | 1863 (0x747) |
| GetOpenClipboardWindow | 0x77d4480b | 1864 (0x748) |
| GetParent | 0x77d26029 | 1865 (0x749) |
| GetPhysicalCursorPos | 0x77d46ebd | 1866 (0x74a) |
| GetPriorityClipboardFormat | 0x77d74bf9 | 1867 (0x74b) |
| GetProcessDefaultLayout | 0x77d14e28 | 1868 (0x74c) |
| GetProcessWindowStation | 0x77d1dfdc | 1869 (0x74d) |
| GetProgmanWindow | 0x77d5c0cd | 1870 (0x74e) |
| GetPropA | 0x77d42b61 | 1871 (0x74f) |
| GetPropW | 0x77d25bbe | 1872 (0x750) |
| GetQueueStatus | 0x77d1b23d | 1873 (0x751) |
| GetRawInputBuffer | 0x77d67190 | 1874 (0x752) |
| GetRawInputData | 0x77d74c21 | 1875 (0x753) |
| GetRawInputDeviceInfoA | 0x77d73b99 | 1876 (0x754) |
| GetRawInputDeviceInfoW | 0x77d5ca06 | 1877 (0x755) |
| GetRawInputDeviceList | 0x77d74c49 | 1878 (0x756) |
| GetReasonTitleFromReasonCode | 0x77d705f9 | 1879 (0x757) |
| GetRegisteredRawInputDevices | 0x77d74c5d | 1880 (0x758) |
| GetScrollBarInfo | 0x77d24e11 | 1881 (0x759) |
| GetScrollInfo | 0x77d22da3 | 1882 (0x75a) |
| GetScrollPos | 0x77d40e43 | 1883 (0x75b) |
| GetScrollRange | 0x77d4045a | 1884 (0x75c) |
| GetSendMessageReceiver | 0x77d5c2c5 | 1885 (0x75d) |
| GetShellWindow | 0x77d22fcb | 1886 (0x75e) |
| GetSubMenu | 0x77d19c19 | 1887 (0x75f) |
| GetSysColor | 0x77d2db7a | 1888 (0x760) |
| GetSysColorBrush | 0x77d1f1ed | 1889 (0x761) |
| GetSystemMenu | 0x77d1fd8b | 1890 (0x762) |
| GetSystemMetrics | 0x77d267cf | 1891 (0x763) |
| GetTabbedTextExtentA | 0x77d60d14 | 1892 (0x764) |
| GetTabbedTextExtentW | 0x77d60cea | 1893 (0x765) |
| GetTaskmanWindow | 0x77d5c122 | 1894 (0x766) |
| GetThreadDesktop | 0x77d2db66 | 1895 (0x767) |
| GetTitleBarInfo | 0x77d24d41 | 1896 (0x768) |
| GetTopLevelWindow | 0x77d74c71 | 1897 (0x769) |
| GetTopWindow | 0x77d424d9 | 1898 (0x76a) |
| GetTouchInputInfo | 0x77d5d6d3 | 1899 (0x76b) |
| GetUpdateRect | 0x77d1a575 | 1900 (0x76c) |
| GetUpdateRgn | 0x77d41c07 | 1901 (0x76d) |
| GetUpdatedClipboardFormats | 0x77d74c85 | 1902 (0x76e) |
| GetUserObjectInformationA | 0x77d171b8 | 1903 (0x76f) |
| GetUserObjectInformationW | 0x77d1e355 | 1904 (0x770) |
| GetUserObjectSecurity | 0x77d5bb6d | 1905 (0x771) |
| GetWinStationInfo | 0x77d5bba3 | 1906 (0x772) |
| GetWindow | 0x77d22780 | 1907 (0x773) |
| GetWindowCompositionAttribute | 0x77d22b25 | 1908 (0x774) |
| GetWindowCompositionInfo | 0x77d22b39 | 1909 (0x775) |
| GetWindowContextHelpId | 0x77d5c15f | 1910 (0x776) |
| GetWindowDC | 0x77d24ab7 | 1911 (0x777) |
| GetWindowDisplayAffinity | 0x77d74c99 | 1912 (0x778) |
| GetWindowInfo | 0x77d24b5e | 1913 (0x779) |
| GetWindowLongA | 0x77d1a95e | 1914 (0x77a) |
| GetWindowLongW | 0x77d261b8 | 1915 (0x77b) |
| GetWindowMinimizeRect | 0x77d19db3 | 1916 (0x77c) |
| GetWindowModuleFileName | 0x77d73b70 | 1917 (0x77d) |
| GetWindowModuleFileNameA | 0x77d73b70 | 1918 (0x77e) |
| GetWindowModuleFileNameW | 0x77d5c9dd | 1919 (0x77f) |
| GetWindowPlacement | 0x77d469de | 1920 (0x780) |
| GetWindowRect | 0x77d2558c | 1921 (0x781) |
| GetWindowRgn | 0x77d46415 | 1922 (0x782) |
| GetWindowRgnBox | 0x77d228ab | 1923 (0x783) |
| GetWindowRgnEx | 0x77d22bd9 | 1924 (0x784) |
| GetWindowTextA | 0x77d16eed | 1925 (0x785) |
| GetWindowTextLengthA | 0x77d36ded | 1926 (0x786) |
| GetWindowTextLengthW | 0x77d1a04c | 1927 (0x787) |
| GetWindowTextW | 0x77d1b8c5 | 1928 (0x788) |
| GetWindowThreadProcessId | 0x77d1ee32 | 1929 (0x789) |
| GetWindowWord | 0x77d404f5 | 1930 (0x78a) |
| GhostWindowFromHungWindow | 0x77d1a561 | 1931 (0x78b) |
| GrayStringA | 0x77d5bb0d | 1932 (0x78c) |
| GrayStringW | 0x77d5bb3d | 1933 (0x78d) |
| HideCaret | 0x77d19348 | 1934 (0x78e) |
| HiliteMenuItem | 0x77d74cc1 | 1935 (0x78f) |
| HungWindowFromGhostWindow | 0x77d361f5 | 1936 (0x790) |
| IMPGetIMEA | 0x77d741d7 | 1937 (0x791) |
| IMPGetIMEW | 0x77d741c6 | 1938 (0x792) |
| IMPQueryIMEA | 0x77d741f9 | 1939 (0x793) |
| IMPQueryIMEW | 0x77d741e8 | 1940 (0x794) |
| IMPSetIMEA | 0x77d7421b | 1941 (0x795) |
| IMPSetIMEW | 0x77d7420a | 1942 (0x796) |
| ImpersonateDdeClientWindow | 0x77d74cd5 | 1943 (0x797) |
| InSendMessage | 0x77d16fb8 | 1944 (0x798) |
| InSendMessageEx | 0x77d1b27a | 1945 (0x799) |
| InflateRect | 0x77d254b4 | 1946 (0x79a) |
| InitializeLpkHooks | 0x77d2d898 | 1947 (0x79b) |
| InsertMenuA | 0x77d73a60 | 1948 (0x79c) |
| InsertMenuItemA | 0x77d36d4e | 1949 (0x79d) |
| InsertMenuItemW | 0x77d1aac5 | 1950 (0x79e) |
| InsertMenuW | 0x77d1869a | 1951 (0x79f) |
| InternalGetWindowIcon | 0x77d361d6 | 1952 (0x7a0) |
| InternalGetWindowText | 0x77d24b00 | 1953 (0x7a1) |
| IntersectRect | 0x77d2ce38 | 1954 (0x7a2) |
| InvalidateRect | 0x77d2566d | 1955 (0x7a3) |
| InvalidateRgn | 0x77d17fa5 | 1956 (0x7a4) |
| InvertRect | 0x77d75719 | 1957 (0x7a5) |
| IsCharAlphaA | 0x77d38776 | 1958 (0x7a6) |
| IsCharAlphaNumericA | 0x77d35f3a | 1959 (0x7a7) |
| IsCharAlphaNumericW | 0x77d19a7a | 1960 (0x7a8) |
| IsCharAlphaW | 0x77d4154f | 1961 (0x7a9) |
| IsCharLowerA | 0x77d720ef | 1962 (0x7aa) |
| IsCharLowerW | 0x77d3758f | 1963 (0x7ab) |
| IsCharUpperA | 0x77d72156 | 1964 (0x7ac) |
| IsCharUpperW | 0x77d375c1 | 1965 (0x7ad) |
| IsChild | 0x77d23a83 | 1966 (0x7ae) |
| IsClipboardFormatAvailable | 0x77d444ff | 1967 (0x7af) |
| IsDialogMessage | 0x77d32019 | 1968 (0x7b0) |
| IsDialogMessageA | 0x77d32019 | 1969 (0x7b1) |
| IsDialogMessageW | 0x77d24104 | 1970 (0x7b2) |
| IsDlgButtonChecked | 0x77d37135 | 1971 (0x7b3) |
| IsGUIThread | 0x77d7288d | 1972 (0x7b4) |
| IsHungAppWindow | 0x77d47195 | 1973 (0x7b5) |
| IsIconic | 0x77d24c8e | 1974 (0x7b6) |
| IsMenu | 0x77d46f0e | 1975 (0x7b7) |
| IsProcessDPIAware | 0x77d2212e | 1976 (0x7b8) |
| IsRectEmpty | 0x77d2561e | 1977 (0x7b9) |
| IsSETEnabled | 0x77d13fbc | 1978 (0x7ba) |
| IsServerSideWindow | 0x77d229d0 | 1979 (0x7bb) |
| IsThreadDesktopComposited | 0x77d268b3 | 1980 (0x7bc) |
| IsTopLevelWindow | 0x77d1a49f | 1981 (0x7bd) |
| IsTouchWindow | 0x77d75003 | 1982 (0x7be) |
| IsWinEventHookInstalled | 0x77d43f6d | 1983 (0x7bf) |
| IsWindow | 0x77d253ba | 1984 (0x7c0) |
| IsWindowEnabled | 0x77d1a9b9 | 1985 (0x7c1) |
| IsWindowInDestroy | 0x77d24b3b | 1986 (0x7c2) |
| IsWindowRedirectedForPrint | 0x77d22d2b | 1987 (0x7c3) |
| IsWindowUnicode | 0x77d22f55 | 1988 (0x7c4) |
| IsWindowVisible | 0x77d24d69 | 1989 (0x7c5) |
| IsWow64Message | 0x77d76252 | 1990 (0x7c6) |
| IsZoomed | 0x77d24ce9 | 1991 (0x7c7) |
| KillTimer | 0x77d264f7 | 1992 (0x7c8) |
| LoadAcceleratorsA | 0x77d3ae02 | 1993 (0x7c9) |
| LoadAcceleratorsW | 0x77d1976d | 1994 (0x7ca) |
| LoadBitmapA | 0x77d41608 | 1995 (0x7cb) |
| LoadBitmapW | 0x77d16460 | 1996 (0x7cc) |
| LoadCursorA | 0x77d18328 | 1997 (0x7cd) |
| LoadCursorFromFileA | 0x77d59285 | 1998 (0x7ce) |
| LoadCursorFromFileW | 0x77d59266 | 1999 (0x7cf) |
| LoadCursorW | 0x77d1ed90 | 2003 (0x7d3) |
| LoadIconA | 0x77d164ad | 2004 (0x7d4) |
| LoadIconW | 0x77d1f142 | 2006 (0x7d6) |
| LoadImageA | 0x77d37779 | 2007 (0x7d7) |
| LoadImageW | 0x77d212eb | 2008 (0x7d8) |
| LoadKeyboardLayoutA | 0x77d5c892 | 2009 (0x7d9) |
| LoadKeyboardLayoutEx | 0x77d5c84f | 2010 (0x7da) |
| LoadKeyboardLayoutW | 0x77d5c874 | 2011 (0x7db) |
| LoadLocalFonts | 0x77d12227 | 2012 (0x7dc) |
| LoadMenuA | 0x77d2f92c | 2013 (0x7dd) |
| LoadMenuIndirectA | 0x77d1fbf5 | 2014 (0x7de) |
| LoadMenuIndirectW | 0x77d1fbf5 | 2015 (0x7df) |
| LoadMenuW | 0x77d1f214 | 2016 (0x7e0) |
| LoadRemoteFonts | 0x77d13ee7 | 2017 (0x7e1) |
| LoadStringA | 0x77d166a7 | 2018 (0x7e2) |
| LoadStringW | 0x77d1dfba | 2019 (0x7e3) |
| LockSetForegroundWindow | 0x77d469ff | 2020 (0x7e4) |
| LockWindowStation | 0x77d1478a | 2021 (0x7e5) |
| LockWindowUpdate | 0x77d34a34 | 2022 (0x7e6) |
| LockWorkStation | 0x77d2edff | 2023 (0x7e7) |
| LogicalToPhysicalPoint | 0x77d46e4f | 2024 (0x7e8) |
| LookupIconIdFromDirectory | 0x77d5d298 | 2025 (0x7e9) |
| LookupIconIdFromDirectoryEx | 0x77d1debc | 2026 (0x7ea) |
| MBToWCSEx | 0x77d2e9c4 | 2027 (0x7eb) |
| MB_GetString | 0x77d6c6fc | 2028 (0x7ec) |
| MapDialogRect | 0x77d4347a | 2029 (0x7ed) |
| MapVirtualKeyA | 0x77d46038 | 2030 (0x7ee) |
| MapVirtualKeyExA | 0x77d73df8 | 2031 (0x7ef) |
| MapVirtualKeyExW | 0x77d3fb48 | 2032 (0x7f0) |
| MapVirtualKeyW | 0x77d46a7c | 2033 (0x7f1) |
| MapWindowPoints | 0x77d25caa | 2034 (0x7f2) |
| MenuItemFromPoint | 0x77d74cfd | 2035 (0x7f3) |
| MenuWindowProcA | 0x77d5cbbb | 2036 (0x7f4) |
| MenuWindowProcW | 0x77d5cb77 | 2037 (0x7f5) |
| MessageBeep | 0x77d42939 | 2038 (0x7f6) |
| MessageBoxA | 0x77d6ea11 | 2039 (0x7f7) |
| MessageBoxExA | 0x77d6e9c9 | 2040 (0x7f8) |
| MessageBoxExW | 0x77d6e9ed | 2041 (0x7f9) |
| MessageBoxIndirectA | 0x77d6e869 | 2042 (0x7fa) |
| MessageBoxIndirectW | 0x77d6e963 | 2043 (0x7fb) |
| MessageBoxTimeoutA | 0x77d6e795 | 2044 (0x7fc) |
| MessageBoxTimeoutW | 0x77d6e70d | 2045 (0x7fd) |
| MessageBoxW | 0x77d6ea5f | 2046 (0x7fe) |
| ModifyMenuA | 0x77d73ae0 | 2047 (0x7ff) |
| ModifyMenuW | 0x77d446c7 | 2048 (0x800) |
| MonitorFromPoint | 0x77d194c9 | 2049 (0x801) |
| MonitorFromRect | 0x77d20ca1 | 2050 (0x802) |
| MonitorFromWindow | 0x77d23622 | 2051 (0x803) |
| MoveWindow | 0x77d18d29 | 2052 (0x804) |
| MsgWaitForMultipleObjects | 0x77d237d8 | 2053 (0x805) |
| MsgWaitForMultipleObjectsEx | 0x77d1e369 | 2054 (0x806) |
| NotifyOverlayWindow | 0x77d5c06c | 2055 (0x807) |
| NotifyWinEvent | 0x77d2cfbe | 2056 (0x808) |
| OemKeyScan | 0x77d6f1ea | 2057 (0x809) |
| OemToCharA | 0x77d6f041 | 2058 (0x80a) |
| OemToCharBuffA | 0x77d6f080 | 2059 (0x80b) |
| OemToCharBuffW | 0x77d6f1ac | 2060 (0x80c) |
| OemToCharW | 0x77d6f164 | 2061 (0x80d) |
| OffsetRect | 0x77d2cdab | 2062 (0x80e) |
| OpenClipboard | 0x77d4447e | 2063 (0x80f) |
| OpenDesktopA | 0x77d1b764 | 2064 (0x810) |
| OpenDesktopW | 0x77d1c669 | 2065 (0x811) |
| OpenIcon | 0x77d5c087 | 2066 (0x812) |
| OpenInputDesktop | 0x77d15c39 | 2067 (0x813) |
| OpenThreadDesktop | 0x77d74d73 | 2068 (0x814) |
| OpenWindowStationA | 0x77d16e9e | 2069 (0x815) |
| OpenWindowStationW | 0x77d4714c | 2070 (0x816) |
| PackDDElParam | 0x77d357e6 | 2071 (0x817) |
| PaintDesktop | 0x77d1573b | 2072 (0x818) |
| PaintMenuBar | 0x77d47082 | 2073 (0x819) |
| PaintMonitor | 0x77d154a4 | 2074 (0x81a) |
| PeekMessageA | 0x77d219a5 | 2075 (0x81b) |
| PeekMessageW | 0x77d2634a | 2076 (0x81c) |
| PhysicalToLogicalPoint | 0x77d46e63 | 2077 (0x81d) |
| PostMessageA | 0x77d1b446 | 2078 (0x81e) |
| PostMessageW | 0x77d2447b | 2079 (0x81f) |
| PostQuitMessage | 0x77d1b308 | 2080 (0x820) |
| PostThreadMessageA | 0x77d1ad09 | 2081 (0x821) |
| PostThreadMessageW | 0x77d1eefc | 2082 (0x822) |
| PrintWindow | 0x77d74d87 | 2083 (0x823) |
| PrivateExtractIconExA | 0x77d6713f | 2084 (0x824) |
| PrivateExtractIconExW | 0x77d21233 | 2085 (0x825) |
| PrivateExtractIconsA | 0x77d670e5 | 2086 (0x826) |
| PrivateExtractIconsW | 0x77d20d13 | 2087 (0x827) |
| PrivateRegisterICSProc | 0x77d1432f | 2088 (0x828) |
| PtInRect | 0x77d22392 | 2089 (0x829) |
| QueryDisplayConfig | 0x77d150a5 | 2090 (0x82a) |
| QuerySendMessage | 0x77d74d9b | 2091 (0x82b) |
| RealChildWindowFromPoint | 0x77d74daf | 2092 (0x82c) |
| RealGetWindowClass | 0x77d7405c | 2093 (0x82d) |
| RealGetWindowClassA | 0x77d7405c | 2094 (0x82e) |
| RealGetWindowClassW | 0x77d1adb3 | 2095 (0x82f) |
| ReasonCodeNeedsBugID | 0x77d6fa96 | 2096 (0x830) |
| ReasonCodeNeedsComment | 0x77d6fa7f | 2097 (0x831) |
| RecordShutdownReason | 0x77d60350 | 2098 (0x832) |
| RedrawWindow | 0x77d229bc | 2099 (0x833) |
| RegisterClassA | 0x77d1bc6a | 2100 (0x834) |
| RegisterClassExA | 0x77d16293 | 2101 (0x835) |
| RegisterClassExW | 0x77d20162 | 2102 (0x836) |
| RegisterClassW | 0x77d1ed4a | 2103 (0x837) |
| RegisterClipboardFormatA | 0x77d1c091 | 2104 (0x838) |
| RegisterClipboardFormatW | 0x77d1df8d | 2105 (0x839) |
| RegisterDeviceNotificationA | 0x77d16c53 | 2106 (0x83a) |
| RegisterDeviceNotificationW | 0x77d16c53 | 2107 (0x83b) |
| RegisterErrorReportingDialog | 0x77d74dd7 | 2108 (0x83c) |
| RegisterFrostWindow | 0x77d5c29f | 2109 (0x83d) |
| RegisterGhostWindow | 0x77d361bb | 2110 (0x83e) |
| RegisterHotKey | 0x77d1aa19 | 2111 (0x83f) |
| RegisterLogonProcess | 0x77d1474b | 2112 (0x840) |
| RegisterMessagePumpHook | 0x77d188ad | 2113 (0x841) |
| RegisterPowerSettingNotification | 0x77d19370 | 2114 (0x842) |
| RegisterRawInputDevices | 0x77d15b52 | 2115 (0x843) |
| RegisterServicesProcess | 0x77d11539 | 2116 (0x844) |
| RegisterSessionPort | 0x77d13ed3 | 2117 (0x845) |
| RegisterShellHookWindow | 0x77d14aeb | 2118 (0x846) |
| RegisterSystemThread | 0x77d5c192 | 2119 (0x847) |
| RegisterTasklist | 0x77d74deb | 2120 (0x848) |
| RegisterTouchWindow | 0x77d6ed18 | 2121 (0x849) |
| RegisterUserApiHook | 0x77d122af | 2122 (0x84a) |
| RegisterWindowMessageA | 0x77d1c091 | 2123 (0x84b) |
| RegisterWindowMessageW | 0x77d1df8d | 2124 (0x84c) |
| ReleaseCapture | 0x77d469f2 | 2125 (0x84d) |
| ReleaseDC | 0x77d25421 | 2126 (0x84e) |
| RemoveClipboardFormatListener | 0x77d74dff | 2127 (0x84f) |
| RemoveMenu | 0x77d186e8 | 2128 (0x850) |
| RemovePropA | 0x77d42551 | 2129 (0x851) |
| RemovePropW | 0x77d25fe1 | 2130 (0x852) |
| ReplyMessage | 0x77d35ca7 | 2131 (0x853) |
| ResolveDesktopForWOW | 0x77d74e13 | 2132 (0x854) |
| ReuseDDElParam | 0x77d35793 | 2133 (0x855) |
| ScreenToClient | 0x77d1a506 | 2134 (0x856) |
| ScrollChildren | 0x77d6b4a9 | 2135 (0x857) |
| ScrollDC | 0x77d2ec44 | 2136 (0x858) |
| ScrollWindow | 0x77d3fc1d | 2137 (0x859) |
| ScrollWindowEx | 0x77d43fe6 | 2138 (0x85a) |
| SendDlgItemMessageA | 0x77d37241 | 2139 (0x85b) |
| SendDlgItemMessageW | 0x77d370d8 | 2140 (0x85c) |
| SendIMEMessageExA | 0x77d741b5 | 2141 (0x85d) |
| SendIMEMessageExW | 0x77d741a4 | 2142 (0x85e) |
| SendInput | 0x77d47019 | 2143 (0x85f) |
| SendMessageA | 0x77d1ad60 | 2144 (0x860) |
| SendMessageCallbackA | 0x77d73e8b | 2145 (0x861) |
| SendMessageCallbackW | 0x77d22f7b | 2146 (0x862) |
| SendMessageTimeoutA | 0x77d46da9 | 2147 (0x863) |
| SendMessageTimeoutW | 0x77d1e459 | 2148 (0x864) |
| SendMessageW | 0x77d25539 | 2149 (0x865) |
| SendNotifyMessageA | 0x77d3493c | 2150 (0x866) |
| SendNotifyMessageW | 0x77d1c88a | 2151 (0x867) |
| SetActiveWindow | 0x77d2333a | 2152 (0x868) |
| SetCapture | 0x77d46932 | 2153 (0x869) |
| SetCaretBlinkTime | 0x77d3fbd3 | 2154 (0x86a) |
| SetCaretPos | 0x77d46217 | 2155 (0x86b) |
| SetClassLongA | 0x77d41236 | 2156 (0x86c) |
| SetClassLongW | 0x77d1658b | 2157 (0x86d) |
| SetClassWord | 0x77d74e27 | 2158 (0x86e) |
| SetClipboardData | 0x77d32962 | 2159 (0x86f) |
| SetClipboardViewer | 0x77d36ff6 | 2160 (0x870) |
| SetCursor | 0x77d23075 | 2161 (0x871) |
| SetCursorContents | 0x77d74e3b | 2162 (0x872) |
| SetCursorPos | 0x77d5c1b0 | 2163 (0x873) |
| SetDebugErrorLevel | 0x77d7417a | 2164 (0x874) |
| SetDeskWallpaper | 0x77d5b71e | 2165 (0x875) |
| SetDisplayConfig | 0x77d7487c | 2166 (0x876) |
| SetDlgItemInt | 0x77d3ec2e | 2167 (0x877) |
| SetDlgItemTextA | 0x77d3707a | 2168 (0x878) |
| SetDlgItemTextW | 0x77d3ebd4 | 2169 (0x879) |
| SetDoubleClickTime | 0x77d5c1cb | 2170 (0x87a) |
| SetFocus | 0x77d1abad | 2171 (0x87b) |
| SetForegroundWindow | 0x77d1b225 | 2172 (0x87c) |
| SetGestureConfig | 0x77d14715 | 2173 (0x87d) |
| SetInternalWindowPos | 0x77d74e4f | 2174 (0x87e) |
| SetKeyboardState | 0x77d4695a | 2175 (0x87f) |
| SetLastErrorEx | 0x77d6f334 | 2176 (0x880) |
| SetLayeredWindowAttributes | 0x77d1a6dc | 2177 (0x881) |
| SetMagnificationDesktopColorEffect | 0x77d6ab45 | 2178 (0x882) |
| SetMagnificationDesktopMagnification | 0x77d6abfa | 2179 (0x883) |
| SetMagnificationLensCtxInformation | 0x77d368a0 | 2180 (0x884) |
| SetMenu | 0x77d46b0e | 2181 (0x885) |
| SetMenuContextHelpId | 0x77d74e63 | 2182 (0x886) |
| SetMenuDefaultItem | 0x77d186fc | 2183 (0x887) |
| SetMenuInfo | 0x77d44744 | 2184 (0x888) |
| SetMenuItemBitmaps | 0x77d3225e | 2185 (0x889) |
| SetMenuItemInfoA | 0x77d36d15 | 2186 (0x88a) |
| SetMenuItemInfoW | 0x77d21799 | 2187 (0x88b) |
| SetMessageExtraInfo | 0x77d5cbff | 2188 (0x88c) |
| SetMessageQueue | 0x77d367a4 | 2189 (0x88d) |
| SetMirrorRendering | 0x77d750b7 | 2190 (0x88e) |
| SetParent | 0x77d18314 | 2191 (0x88f) |
| SetPhysicalCursorPos | 0x77d46f6c | 2192 (0x890) |
| SetProcessDPIAware | 0x77d2e95c | 2193 (0x891) |
| SetProcessDefaultLayout | 0x77d5c27a | 2194 (0x892) |
| SetProcessWindowStation | 0x77d1b83d | 2195 (0x893) |
| SetProgmanWindow | 0x77d5c10a | 2196 (0x894) |
| SetPropA | 0x77d428e5 | 2197 (0x895) |
| SetPropW | 0x77d25dc5 | 2198 (0x896) |
| SetRect | 0x77d2498b | 2199 (0x897) |
| SetRectEmpty | 0x77d24a97 | 2200 (0x898) |
| SetScrollInfo | 0x77d248da | 2201 (0x899) |
| SetScrollPos | 0x77d404be | 2202 (0x89a) |
| SetScrollRange | 0x77d18ec5 | 2203 (0x89b) |
| SetShellWindow | 0x77d5c0b4 | 2204 (0x89c) |
| SetShellWindowEx | 0x77d13f94 | 2205 (0x89d) |
| SetSysColors | 0x77d6eaad | 2206 (0x89e) |
| SetSysColorsTemp | 0x77d6f24d | 2207 (0x89f) |
| SetSystemCursor | 0x77d6ec07 | 2208 (0x8a0) |
| SetSystemMenu | 0x77d3f580 | 2209 (0x8a1) |
| SetTaskmanWindow | 0x77d13f31 | 2210 (0x8a2) |
| SetThreadDesktop | 0x77d1b829 | 2211 (0x8a3) |
| SetTimer | 0x77d252ef | 2212 (0x8a4) |
| SetUserObjectInformationA | 0x77d74e8b | 2213 (0x8a5) |
| SetUserObjectInformationW | 0x77d74e8b | 2214 (0x8a6) |
| SetUserObjectSecurity | 0x77d12285 | 2215 (0x8a7) |
| SetWinEventHook | 0x77d224dc | 2216 (0x8a8) |
| SetWindowCompositionAttribute | 0x77d1aab1 | 2217 (0x8a9) |
| SetWindowContextHelpId | 0x77d2f6bb | 2218 (0x8aa) |
| SetWindowDisplayAffinity | 0x77d74edb | 2219 (0x8ab) |
| SetWindowLongA | 0x77d18ba3 | 2220 (0x8ac) |
| SetWindowLongW | 0x77d24449 | 2221 (0x8ad) |
| SetWindowPlacement | 0x77d17f78 | 2222 (0x8ae) |
| SetWindowPos | 0x77d21bc4 | 2223 (0x8af) |
| SetWindowRgn | 0x77d199ec | 2224 (0x8b0) |
| SetWindowRgnEx | 0x77d4314a | 2225 (0x8b1) |
| SetWindowStationUser | 0x77d13cad | 2226 (0x8b2) |
| SetWindowTextA | 0x77d40c5b | 2227 (0x8b3) |
| SetWindowTextW | 0x77d2612b | 2228 (0x8b4) |
| SetWindowWord | 0x77d404aa | 2229 (0x8b5) |
| SetWindowsHookA | 0x77d5b641 | 2230 (0x8b6) |
| SetWindowsHookExA | 0x77d46d0c | 2231 (0x8b7) |
| SetWindowsHookExW | 0x77d1e30c | 2232 (0x8b8) |
| SetWindowsHookW | 0x77d5b65c | 2233 (0x8b9) |
| SfmDxBindSwapChain | 0x77d33c0e | 2234 (0x8ba) |
| SfmDxGetSwapChainStats | 0x77d33c4a | 2235 (0x8bb) |
| SfmDxOpenSwapChain | 0x77d33c22 | 2236 (0x8bc) |
| SfmDxQuerySwapChainBindingStatus | 0x77d33c36 | 2237 (0x8bd) |
| SfmDxReleaseSwapChain | 0x77d33cf2 | 2238 (0x8be) |
| SfmDxReportPendingBindingsToDwm | 0x77d14fa8 | 2239 (0x8bf) |
| SfmDxSetSwapChainBindingStatus | 0x77d33cde | 2240 (0x8c0) |
| SfmDxSetSwapChainStats | 0x77d2cebd | 2241 (0x8c1) |
| ShowCaret | 0x77d19334 | 2242 (0x8c2) |
| ShowCursor | 0x77d164d3 | 2243 (0x8c3) |
| ShowOwnedPopups | 0x77d428ca | 2244 (0x8c4) |
| ShowScrollBar | 0x77d43c89 | 2245 (0x8c5) |
| ShowStartGlass | 0x77d5c1e3 | 2246 (0x8c6) |
| ShowSystemCursor | 0x77d750cb | 2247 (0x8c7) |
| ShowWindow | 0x77d1f2a9 | 2248 (0x8c8) |
| ShowWindowAsync | 0x77d74f03 | 2249 (0x8c9) |
| ShutdownBlockReasonCreate | 0x77d607c5 | 2250 (0x8ca) |
| ShutdownBlockReasonDestroy | 0x77d5fdbe | 2251 (0x8cb) |
| ShutdownBlockReasonQuery | 0x77d608b1 | 2252 (0x8cc) |
| SoftModalMessageBox | 0x77d6da4b | 2253 (0x8cd) |
| SoundSentry | 0x77d35f28 | 2254 (0x8ce) |
| SubtractRect | 0x77d17f19 | 2255 (0x8cf) |
| SwapMouseButton | 0x77d5c1fb | 2256 (0x8d0) |
| SwitchDesktop | 0x77d1476b | 2257 (0x8d1) |
| SwitchDesktopWithFade | 0x77d14a0f | 2258 (0x8d2) |
| SwitchToThisWindow | 0x77d46a17 | 2259 (0x8d3) |
| SystemParametersInfoA | 0x77d180e0 | 2260 (0x8d4) |
| SystemParametersInfoW | 0x77d1e09a | 2261 (0x8d5) |
| TabbedTextOutA | 0x77d60c54 | 2262 (0x8d6) |
| TabbedTextOutW | 0x77d60c25 | 2263 (0x8d7) |
| TileChildWindows | 0x77d5c213 | 2264 (0x8d8) |
| TileWindows | 0x77d6bbd5 | 2265 (0x8d9) |
| ToAscii | 0x77d5b73a | 2266 (0x8da) |
| ToAsciiEx | 0x77d5b797 | 2267 (0x8db) |
| ToUnicode | 0x77d6ebd4 | 2268 (0x8dc) |
| ToUnicodeEx | 0x77d321b2 | 2269 (0x8dd) |
| TrackMouseEvent | 0x77d230ae | 2270 (0x8de) |
| TrackPopupMenu | 0x77d32228 | 2271 (0x8df) |
| TrackPopupMenuEx | 0x77d44832 | 2272 (0x8e0) |
| TranslateAccelerator | 0x77d4133f | 2273 (0x8e1) |
| TranslateAcceleratorA | 0x77d4133f | 2274 (0x8e2) |
| TranslateAcceleratorW | 0x77d2667e | 2275 (0x8e3) |
| TranslateMDISysAccel | 0x77d41a5a | 2276 (0x8e4) |
| TranslateMessage | 0x77d264c7 | 2277 (0x8e5) |
| TranslateMessageEx | 0x77d2cc79 | 2278 (0x8e6) |
| UnhookWinEvent | 0x77d1b750 | 2279 (0x8e7) |
| UnhookWindowsHook | 0x77d5c234 | 2280 (0x8e8) |
| UnhookWindowsHookEx | 0x77d1adf9 | 2281 (0x8e9) |
| UnionRect | 0x77d23699 | 2282 (0x8ea) |
| UnloadKeyboardLayout | 0x77d5c24f | 2283 (0x8eb) |
| UnlockWindowStation | 0x77d14a30 | 2284 (0x8ec) |
| UnpackDDElParam | 0x77d35a5d | 2285 (0x8ed) |
| UnregisterClassA | 0x77d18d70 | 2286 (0x8ee) |
| UnregisterClassW | 0x77d1b9ae | 2287 (0x8ef) |
| UnregisterDeviceNotification | 0x77d16dd4 | 2288 (0x8f0) |
| UnregisterHotKey | 0x77d46a54 | 2289 (0x8f1) |
| UnregisterMessagePumpHook | 0x77d1835c | 2290 (0x8f2) |
| UnregisterPowerSettingNotification | 0x77d4634b | 2291 (0x8f3) |
| UnregisterSessionPort | 0x77d74fa1 | 2292 (0x8f4) |
| UnregisterTouchWindow | 0x77d6ed33 | 2293 (0x8f5) |
| UnregisterUserApiHook | 0x77d12273 | 2294 (0x8f6) |
| UpdateLayeredWindow | 0x77d1a420 | 2295 (0x8f7) |
| UpdateLayeredWindowIndirect | 0x77d19ac2 | 2296 (0x8f8) |
| UpdatePerUserSystemParameters | 0x77d13310 | 2297 (0x8f9) |
| UpdateWindow | 0x77d1ffa8 | 2298 (0x8fa) |
| UpdateWindowTransform | 0x77d74fb3 | 2299 (0x8fb) |
| User32InitializeImmEntryTable | 0x77d2e878 | 2300 (0x8fc) |
| UserClientDllInitialize | 0x77d2d711 | 2301 (0x8fd) |
| UserHandleGrantAccess | 0x77d74f67 | 2302 (0x8fe) |
| UserLpkPSMTextOut | 0x77d60dba | 2303 (0x8ff) |
| UserLpkTabbedTextOut | 0x77d60a68 | 2304 (0x900) |
| UserRealizePalette | 0x77d3ffd5 | 2305 (0x901) |
| UserRegisterWowHandlers | 0x77d5c2dd | 2306 (0x902) |
| VRipOutput | 0x77d76252 | 2307 (0x903) |
| VTagOutput | 0x77d76252 | 2308 (0x904) |
| ValidateRect | 0x77d3f089 | 2309 (0x905) |
| ValidateRgn | 0x77d41a9e | 2310 (0x906) |
| VkKeyScanA | 0x77d366cf | 2311 (0x907) |
| VkKeyScanExA | 0x77d36947 | 2312 (0x908) |
| VkKeyScanExW | 0x77d3f09d | 2313 (0x909) |
| VkKeyScanW | 0x77d3ef77 | 2314 (0x90a) |
| WCSToMBEx | 0x77d1c15c | 2315 (0x90b) |
| WINNLSEnableIME | 0x77d74182 | 2316 (0x90c) |
| WINNLSGetEnableStatus | 0x77d74193 | 2317 (0x90d) |
| WINNLSGetIMEHotkey | 0x77d7414f | 2318 (0x90e) |
| WaitForInputIdle | 0x77d40397 | 2319 (0x90f) |
| WaitMessage | 0x77d266bd | 2320 (0x910) |
| WinHelpA | 0x77d3471e | 2321 (0x911) |
| WinHelpW | 0x77d34867 | 2322 (0x912) |
| WindowFromDC | 0x77d22116 | 2323 (0x913) |
| WindowFromPhysicalPoint | 0x77d46c39 | 2324 (0x914) |
| WindowFromPoint | 0x77d46be9 | 2325 (0x915) |
| _UserTestTokenForInteractive | 0x77d72743 | 2326 (0x916) |
| gSharedInfo | 0x77d79440 | 2327 (0x917) |
| gapfnScSendMessage | 0x77d2c318 | 2328 (0x918) |
| keybd_event | 0x77d6ec3b | 2329 (0x919) |
| mouse_event | 0x77d36209 | 2330 (0x91a) |
| wsprintfA | 0x77d23f47 | 2331 (0x91b) |
| wsprintfW | 0x77d3426d | 2332 (0x91c) |
| wvsprintfA | 0x77d23c94 | 2333 (0x91d) |
| wvsprintfW | 0x77d3407a | 2334 (0x91e) |
【Advapi32.DLL 805個】
| Advapi32.dll(Function Name) | Address | Ordinal |
|---|---|---|
| I_ScGetCurrentGroupStateW | 0x77cc20f9 | 1001 (0x3e9) |
| A_SHAFinal | NTDLL. A_SHAFinal | 1002 (0x3ea) |
| A_SHAInit | NTDLL. A_SHAInit | 1003 (0x3eb) |
| A_SHAUpdate | NTDLL. A_SHAUpdate | 1004 (0x3ec) |
| AbortSystemShutdownA | 0x77cbddb4 | 1005 (0x3ed) |
| AbortSystemShutdownW | 0x77cbdd60 | 1006 (0x3ee) |
| AccessCheck | 0x77c6ca3c | 1007 (0x3ef) |
| AccessCheckAndAuditAlarmA | 0x77ca12f9 | 1008 (0x3f0) |
| AccessCheckAndAuditAlarmW | 0x77ca2ff8 | 1009 (0x3f1) |
| AccessCheckByType | 0x77c6ae5c | 1010 (0x3f2) |
| AccessCheckByTypeAndAuditAlarmA | 0x77ca13e3 | 1011 (0x3f3) |
| AccessCheckByTypeAndAuditAlarmW | 0x77ca3008 | 1012 (0x3f4) |
| AccessCheckByTypeResultList | 0x77ca3018 | 1013 (0x3f5) |
| AccessCheckByTypeResultListAndAuditAlarmA | 0x77ca14dc | 1014 (0x3f6) |
| AccessCheckByTypeResultListAndAuditAlarm ByHandleA | 0x77ca15d5 | 1015 (0x3f7) |
| AccessCheckByTypeResultListAndAuditAlarm ByHandleW | 0x77ca3028 | 1016 (0x3f8) |
| AccessCheckByTypeResultListAndAuditAlarmW | 0x77ca3038 | 1017 (0x3f9) |
| AddAccessAllowedAce | 0x77c74176 | 1018 (0x3fa) |
| AddAccessAllowedAceEx | 0x77c7465d | 1019 (0x3fb) |
| AddAccessAllowedObjectAce | 0x77ca3048 | 1020 (0x3fc) |
| AddAccessDeniedAce | 0x77c871e4 | 1021 (0x3fd) |
| AddAccessDeniedAceEx | 0x77ca3058 | 1022 (0x3fe) |
| AddAccessDeniedObjectAce | 0x77ca3068 | 1023 (0x3ff) |
| AddAce | 0x77c6ae0f | 1024 (0x400) |
| AddAuditAccessAce | 0x77c619a4 | 1025 (0x401) |
| AddAuditAccessAceEx | 0x77ca3078 | 1026 (0x402) |
| AddAuditAccessObjectAce | 0x77ca3088 | 1027 (0x403) |
| AddConditionalAce | 0x77cc224e | 1028 (0x404) |
| AddMandatoryAce | KERNELBASE. AddMandatoryAce | 1029 (0x405) |
| AddUsersToEncryptedFile | 0x77ca2a17 | 1030 (0x406) |
| AddUsersToEncryptedFileEx | 0x77ca2a5a | 1031 (0x407) |
| AdjustTokenGroups | 0x77ca3098 | 1032 (0x408) |
| AdjustTokenPrivileges | 0x77c7418e | 1033 (0x409) |
| AllocateAndInitializeSid | 0x77c740e6 | 1034 (0x40a) |
| AllocateLocallyUniqueId | 0x77c6198c | 1035 (0x40b) |
| AreAllAccessesGranted | 0x77ca30a8 | 1036 (0x40c) |
| AreAnyAccessesGranted | 0x77ca30b8 | 1037 (0x40d) |
| AuditComputeEffectivePolicyBySid | 0x77c6af44 | 1038 (0x40e) |
| AuditComputeEffectivePolicyByToken | 0x77ca5d41 | 1039 (0x40f) |
| AuditEnumerateCategories | 0x77ca5e2d | 1040 (0x410) |
| AuditEnumeratePerUserPolicy | 0x77ca5cc1 | 1041 (0x411) |
| AuditEnumerateSubCategories | 0x77c6b1d4 | 1042 (0x412) |
| AuditFree | 0x77c6b2ec | 1043 (0x413) |
| AuditLookupCategoryGuidFromCategoryId | 0x77ca6163 | 1044 (0x414) |
| AuditLookupCategoryIdFromCategoryGuid | 0x77ca6101 | 1045 (0x415) |
| AuditLookupCategoryNameA | 0x77ca6031 | 1046 (0x416) |
| AuditLookupCategoryNameW | 0x77ca5f31 | 1047 (0x417) |
| AuditLookupSubCategoryNameA | 0x77ca6099 | 1048 (0x418) |
| AuditLookupSubCategoryNameW | 0x77c892e2 | 1049 (0x419) |
| AuditQueryGlobalSaclA | 0x77ca650f | 1050 (0x41a) |
| AuditQueryGlobalSaclW | 0x77ca64c1 | 1051 (0x41b) |
| AuditQueryPerUserPolicy | 0x77ca5c19 | 1052 (0x41c) |
| AuditQuerySecurity | 0x77ca6299 | 1053 (0x41d) |
| AuditQuerySystemPolicy | 0x77c6aea4 | 1054 (0x41e) |
| AuditSetGlobalSaclA | 0x77ca6351 | 1055 (0x41f) |
| AuditSetGlobalSaclW | 0x77c6b2fc | 1056 (0x420) |
| AuditSetPerUserPolicy | 0x77ca5b85 | 1057 (0x421) |
| AuditSetSecurity | 0x77ca619f | 1058 (0x422) |
| AuditSetSystemPolicy | 0x77c6b142 | 1059 (0x423) |
| BackupEventLogA | 0x77ca0f5a | 1060 (0x424) |
| BackupEventLogW | 0x77ca09ed | 1061 (0x425) |
| BuildExplicitAccessWithNameA | 0x77c623d5 | 1062 (0x426) |
| BuildExplicitAccessWithNameW | 0x77c623d5 | 1063 (0x427) |
| BuildImpersonateExplicitAccessWithNameA | 0x77cb1dbd | 1064 (0x428) |
| BuildImpersonateExplicitAccessWithNameW | 0x77cb1dbd | 1065 (0x429) |
| BuildImpersonateTrusteeA | 0x77cb1f88 | 1066 (0x42a) |
| BuildImpersonateTrusteeW | 0x77cb1f88 | 1067 (0x42b) |
| BuildSecurityDescriptorA | 0x77cb1925 | 1068 (0x42c) |
| BuildSecurityDescriptorW | 0x77c67345 | 1069 (0x42d) |
| BuildTrusteeWithNameA | 0x77c62405 | 1070 (0x42e) |
| BuildTrusteeWithNameW | 0x77c62405 | 1071 (0x42f) |
| BuildTrusteeWithObjectsAndNameA | 0x77cb2044 | 1072 (0x430) |
| BuildTrusteeWithObjectsAndNameW | 0x77cb2044 | 1073 (0x431) |
| BuildTrusteeWithObjectsAndSidA | 0x77cb1fa5 | 1074 (0x432) |
| BuildTrusteeWithObjectsAndSidW | 0x77cb1fa5 | 1075 (0x433) |
| BuildTrusteeWithSidA | 0x77c877e3 | 1076 (0x434) |
| BuildTrusteeWithSidW | 0x77c877e3 | 1077 (0x435) |
| CancelOverlappedAccess | 0x77cb3009 | 1078 (0x436) |
| ChangeServiceConfig2A | 0x77ca30c8 | 1079 (0x437) |
| ChangeServiceConfig2W | 0x77ca30d8 | 1080 (0x438) |
| ChangeServiceConfigA | 0x77ca30e8 | 1081 (0x439) |
| ChangeServiceConfigW | 0x77ca30f8 | 1082 (0x43a) |
| CheckTokenMembership | 0x77c6df04 | 1083 (0x43b) |
| ClearEventLogA | 0x77ca0ef1 | 1084 (0x43c) |
| ClearEventLogW | 0x77ca08c1 | 1085 (0x43d) |
| CloseCodeAuthzLevel | 0x77c83825 | 1086 (0x43e) |
| CloseEncryptedFileRaw | 0x77ca2918 | 1087 (0x43f) |
| CloseEventLog | 0x77c677c3 | 1088 (0x440) |
| CloseServiceHandle | 0x77c7369c | 1089 (0x441) |
| CloseThreadWaitChainSession | 0x77cc64c5 | 1090 (0x442) |
| CloseTrace | 0x77c70d39 | 1091 (0x443) |
| CommandLineFromMsiDescriptor | 0x77c89aa5 | 1092 (0x444) |
| ComputeAccessTokenFromCodeAuthzLevel | 0x77c83352 | 1093 (0x445) |
| ControlService | 0x77c87144 | 1094 (0x446) |
| ControlServiceExA | 0x77ca3108 | 1095 (0x447) |
| ControlServiceExW | 0x77ca3118 | 1096 (0x448) |
| ControlTraceA | 0x77cb8fd4 | 1097 (0x449) |
| ControlTraceW | 0x77c6f65b | 1098 (0x44a) |
| ConvertAccessToSecurityDescriptorA | 0x77cb3cb1 | 1099 (0x44b) |
| ConvertAccessToSecurityDescriptorW | 0x77cb2934 | 1100 (0x44c) |
| ConvertSDToStringSDRootDomainA | 0x77cc25dd | 1101 (0x44d) |
| ConvertSDToStringSDRootDomainW | 0x77cc248e | 1102 (0x44e) |
| ConvertSecurityDescriptorToAccessA | 0x77cb2b61 | 1103 (0x44f) |
| ConvertSecurityDescriptorToAccessNamedA | 0x77cb2b61 | 1104 (0x450) |
| ConvertSecurityDescriptorToAccessNamedW | 0x77cb2b3c | 1105 (0x451) |
| ConvertSecurityDescriptorToAccessW | 0x77cb2b3c | 1106 (0x452) |
| ConvertSecurityDescriptorToString SecurityDescriptorA | 0x77cc276a | 1107 (0x453) |
| ConvertSecurityDescriptorToString SecurityDescriptorW | 0x77c64241 | 1108 (0x454) |
| ConvertSidToStringSidA | 0x77c9192a | 1109 (0x455) |
| ConvertSidToStringSidW | 0x77c74344 | 1110 (0x456) |
| ConvertStringSDToSDDomainA | 0x77cc26c0 | 1111 (0x457) |
| ConvertStringSDToSDDomainW | 0x77cc24e6 | 1112 (0x458) |
| ConvertStringSDToSDRootDomainA | 0x77cc255d | 1113 (0x459) |
| ConvertStringSDToSDRootDomainW | 0x77cc243b | 1114 (0x45a) |
| ConvertStringSecurityDescriptor ToSecurityDescriptorA | 0x77c6ca94 | 1115 (0x45b) |
| ConvertStringSecurityDescriptor ToSecurityDescriptorW | 0x77c71f59 | 1116 (0x45c) |
| ConvertStringSidToSidA | 0x77c80f23 | 1117 (0x45d) |
| ConvertStringSidToSidW | 0x77c809dc | 1118 (0x45e) |
| ConvertToAutoInheritPrivateObjectSecurity | 0x77ca3128 | 1119 (0x45f) |
| CopySid | 0x77c7444e | 1120 (0x460) |
| CreateCodeAuthzLevel | 0x77cada88 | 1121 (0x461) |
| CreatePrivateObjectSecurity | 0x77c89a12 | 1122 (0x462) |
| CreatePrivateObjectSecurityEx | 0x77c6f489 | 1123 (0x463) |
| CreatePrivateObjectSecurity WithMultipleInheritance | 0x77ca3138 | 1124 (0x464) |
| CreateProcessAsUserA | 0x77ca2538 | 1125 (0x465) |
| CreateProcessAsUserW | 0x77c6c592 | 1126 (0x466) |
| CreateProcessWithLogonW | 0x77ca52e9 | 1127 (0x467) |
| CreateProcessWithTokenW | 0x77ca531f | 1128 (0x468) |
| CreateRestrictedToken | 0x77ca3148 | 1129 (0x469) |
| CreateServiceA | 0x77ca3158 | 1130 (0x46a) |
| CreateServiceW | 0x77c8712c | 1131 (0x46b) |
| CreateTraceInstanceId | ntdll.EtwCreate TraceInstanceId | 1132 (0x46c) |
| CreateWellKnownSid | 0x77c7481e | 1133 (0x46d) |
| CredBackupCredentials | 0x77ca7d1d | 1134 (0x46e) |
| CredDeleteA | 0x77ca7941 | 1135 (0x46f) |
| CredDeleteW | 0x77ca79f1 | 1136 (0x470) |
| CredEncryptAndMarshalBinaryBlob | 0x77ca81f9 | 1137 (0x471) |
| CredEnumerateA | 0x77ca7381 | 1138 (0x472) |
| CredEnumerateW | 0x77ca7481 | 1139 (0x473) |
| CredFindBestCredentialA | 0x77ca7f49 | 1140 (0x474) |
| CredFindBestCredentialW | 0x77ca8029 | 1141 (0x475) |
| CredFree | 0x77c6b2ec | 1142 (0x476) |
| CredGetSessionTypes | 0x77ca7c71 | 1143 (0x477) |
| CredGetTargetInfoA | 0x77ca7ab3 | 1144 (0x478) |
| CredGetTargetInfoW | 0x77ca7b91 | 1145 (0x479) |
| CredIsMarshaledCredentialA | 0x77ca8437 | 1146 (0x47a) |
| CredIsMarshaledCredentialW | 0x77c8766c | 1147 (0x47b) |
| CredIsProtectedA | 0x77ca8321 | 1148 (0x47c) |
| CredIsProtectedW | 0x77c6c0b8 | 1149 (0x47d) |
| CredMarshalCredentialA | 0x77ca8383 | 1150 (0x47e) |
| CredMarshalCredentialW | 0x77c68dd9 | 1151 (0x47f) |
| CredProfileLoaded | 0x77c659e1 | 1152 (0x480) |
| CredProfileUnloaded | 0x77c87015 | 1153 (0x481) |
| CredProtectA | 0x77ca821b | 1154 (0x482) |
| CredProtectW | 0x77c68c20 | 1155 (0x483) |
| CredReadA | 0x77ca71c1 | 1156 (0x484) |
| CredReadByTokenHandle | 0x77ca8109 | 1157 (0x485) |
| CredReadDomainCredentialsA | 0x77ca7741 | 1158 (0x486) |
| CredReadDomainCredentialsW | 0x77ca7841 | 1159 (0x487) |
| CredReadW | 0x77ca72a1 | 1160 (0x488) |
| CredRenameA | 0x77ca7aa1 | 1161 (0x489) |
| CredRenameW | 0x77ca7aa1 | 1162 (0x48a) |
| CredRestoreCredentials | 0x77ca7e39 | 1163 (0x48b) |
| CredUnmarshalCredentialA | 0x77ca83ce | 1164 (0x48c) |
| CredUnmarshalCredentialW | 0x77c6c057 | 1165 (0x48d) |
| CredUnprotectA | 0x77ca8465 | 1166 (0x48e) |
| CredUnprotectW | 0x77c680de | 1167 (0x48f) |
| CredWriteA | 0x77ca7051 | 1168 (0x490) |
| CredWriteDomainCredentialsA | 0x77ca7581 | 1169 (0x491) |
| CredWriteDomainCredentialsW | 0x77ca7661 | 1170 (0x492) |
| CredWriteW | 0x77ca7109 | 1171 (0x493) |
| CredpConvertCredential | 0x77ca6b8a | 1172 (0x494) |
| CredpConvertOneCredentialSize | 0x77ca6a44 | 1173 (0x495) |
| CredpConvertTargetInfo | 0x77ca6c41 | 1174 (0x496) |
| CredpDecodeCredential | 0x77ca65fa | 1175 (0x497) |
| CredpEncodeCredential | 0x77ca6599 | 1176 (0x498) |
| CredpEncodeSecret | 0x77ca7cf9 | 1177 (0x499) |
| CryptAcquireContextA | 0x77c691dd | 1178 (0x49a) |
| CryptAcquireContextW | 0x77c6df14 | 1179 (0x49b) |
| CryptContextAddRef | 0x77ca3168 | 1180 (0x49c) |
| CryptCreateHash | 0x77c6df4e | 1181 (0x49d) |
| CryptDecrypt | 0x77ca3178 | 1182 (0x49e) |
| CryptDeriveKey | 0x77ca3188 | 1183 (0x49f) |
| CryptDestroyHash | 0x77c6df66 | 1184 (0x4a0) |
| CryptDestroyKey | 0x77c6c51a | 1185 (0x4a1) |
| CryptDuplicateHash | 0x77ca3198 | 1186 (0x4a2) |
| CryptDuplicateKey | 0x77ca31a8 | 1187 (0x4a3) |
| CryptEncrypt | 0x77c8779b | 1188 (0x4a4) |
| CryptEnumProviderTypesA | 0x77ca31b8 | 1189 (0x4a5) |
| CryptEnumProviderTypesW | 0x77ca31c8 | 1190 (0x4a6) |
| CryptEnumProvidersA | 0x77ca31d8 | 1191 (0x4a7) |
| CryptEnumProvidersW | 0x77ca31e8 | 1192 (0x4a8) |
| CryptExportKey | 0x77c691ea | 1193 (0x4a9) |
| CryptGenKey | 0x77c68ee9 | 1194 (0x4aa) |
| CryptGenRandom | 0x77c6dfc8 | 1195 (0x4ab) |
| CryptGetDefaultProviderA | 0x77ca31f8 | 1196 (0x4ac) |
| CryptGetDefaultProviderW | 0x77ca3208 | 1197 (0x4ad) |
| CryptGetHashParam | 0x77c6df7e | 1198 (0x4ae) |
| CryptGetKeyParam | 0x77c877cb | 1199 (0x4af) |
| CryptGetProvParam | 0x77ca3218 | 1200 (0x4b0) |
| CryptGetUserKey | 0x77ca3228 | 1201 (0x4b1) |
| CryptHashData | 0x77c6df36 | 1202 (0x4b2) |
| CryptHashSessionKey | 0x77ca3238 | 1203 (0x4b3) |
| CryptImportKey | 0x77c6c532 | 1204 (0x4b4) |
| CryptReleaseContext | 0x77c6e124 | 1205 (0x4b5) |
| CryptSetHashParam | 0x77ca3248 | 1206 (0x4b6) |
| CryptSetKeyParam | 0x77c877b3 | 1207 (0x4b7) |
| CryptSetProvParam | 0x77ca3258 | 1208 (0x4b8) |
| CryptSetProviderA | 0x77ca3268 | 1209 (0x4b9) |
| CryptSetProviderExA | 0x77ca3278 | 1210 (0x4ba) |
| CryptSetProviderExW | 0x77ca3288 | 1211 (0x4bb) |
| CryptSetProviderW | 0x77ca3298 | 1212 (0x4bc) |
| CryptSignHashA | 0x77ca32a8 | 1213 (0x4bd) |
| CryptSignHashW | 0x77ca32b8 | 1214 (0x4be) |
| CryptVerifySignatureA | 0x77ca32c8 | 1215 (0x4bf) |
| CryptVerifySignatureW | 0x77c6c54a | 1216 (0x4c0) |
| DecryptFileA | 0x77ca2d75 | 1217 (0x4c1) |
| DecryptFileW | 0x77ca283b | 1218 (0x4c2) |
| DeleteAce | 0x77c742ec | 1219 (0x4c3) |
| DeleteService | 0x77c8715c | 1220 (0x4c4) |
| DeregisterEventSource | 0x77c735dd | 1221 (0x4c5) |
| DestroyPrivateObjectSecurity | 0x77c6f471 | 1222 (0x4c6) |
| DuplicateEncryptionInfoFile | 0x77ca2ae4 | 1223 (0x4c7) |
| DuplicateToken | 0x77c6c7e6 | 1224 (0x4c8) |
| DuplicateTokenEx | 0x77c6ca24 | 1225 (0x4c9) |
| ElfBackupEventLogFileA | 0x77cc5049 | 1226 (0x4ca) |
| ElfBackupEventLogFileW | 0x77cc4b79 | 1227 (0x4cb) |
| ElfChangeNotify | 0x77cc4929 | 1228 (0x4cc) |
| ElfClearEventLogFileA | 0x77cc4fa1 | 1229 (0x4cd) |
| ElfClearEventLogFileW | 0x77cc4ad1 | 1230 (0x4ce) |
| ElfCloseEventLog | 0x77c677e4 | 1231 (0x4cf) |
| ElfDeregisterEventSource | 0x77c735fe | 1232 (0x4d0) |
| ElfFlushEventLog | 0x77cc5201 | 1233 (0x4d1) |
| ElfNumberOfRecords | 0x77cc47b9 | 1234 (0x4d2) |
| ElfOldestRecord | 0x77cc4871 | 1235 (0x4d3) |
| ElfOpenBackupEventLogA | 0x77cc4eb1 | 1236 (0x4d4) |
| ElfOpenBackupEventLogW | 0x77cc49e1 | 1237 (0x4d5) |
| ElfOpenEventLogA | 0x77cc4d3e | 1238 (0x4d6) |
| ElfOpenEventLogW | 0x77c6763e | 1239 (0x4d7) |
| ElfReadEventLogA | 0x77cc5101 | 1240 (0x4d8) |
| ElfReadEventLogW | 0x77cc4c31 | 1241 (0x4d9) |
| ElfRegisterEventSourceA | 0x77c72d8d | 1242 (0x4da) |
| ElfRegisterEventSourceW | 0x77c72629 | 1243 (0x4db) |
| ElfReportEventA | 0x77c64019 | 1244 (0x4dc) |
| ElfReportEventAndSourceW | 0x77cc4d31 | 1245 (0x4dd) |
| ElfReportEventW | 0x77c6c96a | 1246 (0x4de) |
| EnableTrace | 0x77c6fcda | 1247 (0x4df) |
| EnableTraceEx2 | 0x77c6fa81 | 1248 (0x4e0) |
| EnableTraceEx | 0x77c6fc60 | 1249 (0x4e1) |
| EncryptFileA | 0x77ca2cd8 | 1250 (0x4e2) |
| EncryptFileW | 0x77ca27ec | 1251 (0x4e3) |
| EncryptedFileKeyInfo | 0x77ca2b53 | 1252 (0x4e4) |
| EncryptionDisable | 0x77ca2b27 | 1253 (0x4e5) |
| EnumDependentServicesA | 0x77cc2104 | 1254 (0x4e6) |
| EnumDependentServicesW | 0x77c61e3a | 1255 (0x4e7) |
| EnumServiceGroupW | 0x77cc1f11 | 1256 (0x4e8) |
| EnumServicesStatusA | 0x77cc2021 | 1257 (0x4e9) |
| EnumServicesStatusExA | 0x77c8a3e2 | 1258 (0x4ea) |
| EnumServicesStatusExW | 0x77c6b466 | 1259 (0x4eb) |
| EnumServicesStatusW | 0x77cc2221 | 1260 (0x4ec) |
| EnumerateTraceGuids | 0x77c896dc | 1261 (0x4ed) |
| EnumerateTraceGuidsEx | 0x77cb88d5 | 1262 (0x4ee) |
| EqualDomainSid | 0x77ca32d8 | 1263 (0x4ef) |
| EqualPrefixSid | 0x77c6cce9 | 1264 (0x4f0) |
| EqualSid | 0x77c7410b | 1265 (0x4f1) |
| EventAccessControl | 0x77c63118 | 1266 (0x4f2) |
| EventAccessQuery | 0x77c634be | 1267 (0x4f3) |
| EventAccessRemove | 0x77cb8856 | 1268 (0x4f4) |
| EventActivityIdControl | ntdll.EtwEvent ActivityIdControl | 1269 (0x4f5) |
| EventEnabled | ntdll. EtwEventEnabled | 1270 (0x4f6) |
| EventProviderEnabled | ntdll.EtwEvent ProviderEnabled | 1271 (0x4f7) |
| EventRegister | ntdll. EtwEventRegister | 1272 (0x4f8) |
| EventUnregister | ntdll. EtwEventUnregister | 1273 (0x4f9) |
| EventWrite | ntdll. EtwEventWrite | 1274 (0x4fa) |
| EventWriteEndScenario | ntdll.EtwEvent WriteEndScenario | 1275 (0x4fb) |
| EventWriteEx | 0x77ca32e8 | 1276 (0x4fc) |
| EventWriteStartScenario | ntdll.EtwEvent Write StartScenario | 1277 (0x4fd) |
| EventWriteString | ntdll.EtwEvent WriteString | 1278 (0x4fe) |
| EventWriteTransfer | ntdll.EtwEvent WriteTransfer | 1279 (0x4ff) |
| FileEncryptionStatusA | 0x77ca2e15 | 1280 (0x500) |
| FileEncryptionStatusW | 0x77ca288e | 1281 (0x501) |
| FindFirstFreeAce | 0x77ca3319 | 1282 (0x502) |
| FlushEfsCache | 0x77ca2f91 | 1283 (0x503) |
| FlushTraceA | 0x77cb961a | 1284 (0x504) |
| FlushTraceW | 0x77c65ff1 | 1285 (0x505) |
| FreeEncryptedFileKeyInfo | 0x77ca2b96 | 1286 (0x506) |
| FreeEncryptedFileMetadata | 0x77ca2cb6 | 1287 (0x507) |
| FreeEncryptionCertificateHashList | 0x77ca2971 | 1288 (0x508) |
| FreeInheritedFromArray | 0x77cb1f62 | 1289 (0x509) |
| FreeSid | 0x77c7412e | 1290 (0x50a) |
| GetAccessPermissionsForObjectA | 0x77cb3171 | 1291 (0x50b) |
| GetAccessPermissionsForObjectW | 0x77cb3089 | 1292 (0x50c) |
| GetAce | 0x77c745f0 | 1293 (0x50d) |
| GetAclInformation | 0x77c6cc89 | 1294 (0x50e) |
| GetAuditedPermissionsFromAclA | 0x77cb18df | 1295 (0x50f) |
| GetAuditedPermissionsFromAclW | 0x77cb188c | 1296 (0x510) |
| GetCurrentHwProfileA | 0x77ca11f8 | 1297 (0x511) |
| GetCurrentHwProfileW | 0x77c61a03 | 1298 (0x512) |
| GetEffectiveRightsFromAclA | 0x77cb1813 | 1299 (0x513) |
| GetEffectiveRightsFromAclW | 0x77cb17b1 | 1300 (0x514) |
| GetEncryptedFileMetadata | 0x77ca2c6c | 1301 (0x515) |
| GetEventLogInformation | 0x77c67884 | 1302 (0x516) |
| GetExplicitEntriesFromAclA | 0x77cb187f | 1303 (0x517) |
| GetExplicitEntriesFromAclW | 0x77cb185f | 1304 (0x518) |
| GetFileSecurityA | 0x77ca19b8 | 1305 (0x519) |
| GetFileSecurityW | 0x77c6a94d | 1306 (0x51a) |
| GetInformationCodeAuthzLevelW | 0x77c69094 | 1307 (0x51b) |
| GetInformationCodeAuthzPolicyW | 0x77c69d25 | 1308 (0x51c) |
| GetInheritanceSourceA | 0x77cb1f57 | 1309 (0x51d) |
| GetInheritanceSourceW | 0x77cb1f11 | 1310 (0x51e) |
| GetKernelObjectSecurity | 0x77c7462d | 1311 (0x51f) |
| GetLengthSid | 0x77c7413b | 1312 (0x520) |
| GetLocalManagedApplicationData | 0x77cac4a3 | 1313 (0x521) |
| GetLocalManagedApplications | 0x77cac25b | 1314 (0x522) |
| GetManagedApplicationCategories | 0x77cac796 | 1315 (0x523) |
| GetManagedApplications | 0x77cac736 | 1316 (0x524) |
| GetMultipleTrusteeA | 0x77cb2102 | 1317 (0x525) |
| GetMultipleTrusteeOperationA | 0x77cb20e6 | 1318 (0x526) |
| GetMultipleTrusteeOperationW | 0x77cb20e6 | 1319 (0x527) |
| GetMultipleTrusteeW | 0x77cb2102 | 1320 (0x528) |
| GetNamedSecurityInfoA | 0x77cb1554 | 1321 (0x529) |
| GetNamedSecurityInfoExA | 0x77cb2389 | 1322 (0x52a) |
| GetNamedSecurityInfoExW | 0x77cb211d | 1323 (0x52b) |
| GetNamedSecurityInfoW | 0x77c6f4fd | 1324 (0x52c) |
| GetNumberOfEventLogRecords | 0x77ca086d | 1325 (0x52d) |
| GetOldestEventLogRecord | 0x77ca0897 | 1326 (0x52e) |
| GetOverlappedAccessResults | 0x77cb2ee9 | 1327 (0x52f) |
| GetPrivateObjectSecurity | 0x77ca3329 | 1328 (0x530) |
| GetSecurityDescriptorControl | 0x77c6addf | 1329 (0x531) |
| GetSecurityDescriptorDacl | 0x77c741a6 | 1330 (0x532) |
| GetSecurityDescriptorGroup | 0x77c6ae27 | 1331 (0x533) |
| GetSecurityDescriptorLength | 0x77c6cc71 | 1332 (0x534) |
| GetSecurityDescriptorOwner | 0x77c6adf7 | 1333 (0x535) |
| GetSecurityDescriptorRMControl | 0x77ca3339 | 1334 (0x536) |
| GetSecurityDescriptorSacl | 0x77c74608 | 1335 (0x537) |
| GetSecurityInfo | 0x77c6b3e4 | 1336 (0x538) |
| GetSecurityInfoExA | 0x77cb27a1 | 1337 (0x539) |
| GetSecurityInfoExW | 0x77cb2537 | 1338 (0x53a) |
| GetServiceDisplayNameA | 0x77cc1c31 | 1339 (0x53b) |
| GetServiceDisplayNameW | 0x77c879bb | 1340 (0x53c) |
| GetServiceKeyNameA | 0x77cc1b94 | 1341 (0x53d) |
| GetServiceKeyNameW | 0x77c878ff | 1342 (0x53e) |
| GetSidIdentifierAuthority | 0x77c6a935 | 1343 (0x53f) |
| GetSidLengthRequired | 0x77c6ccb9 | 1344 (0x540) |
| GetSidSubAuthority | 0x77c70e24 | 1345 (0x541) |
| GetSidSubAuthorityCount | 0x77c70e0c | 1346 (0x542) |
| GetThreadWaitChain | 0x77cc71c7 | 1347 (0x543) |
| GetTokenInformation | 0x77c7431c | 1348 (0x544) |
| GetTraceEnableFlags | ntdll.EtwGet TraceEnableFlags | 1349 (0x545) |
| GetTraceEnableLevel | ntdll.EtwGet TraceEnableLevel | 1350 (0x546) |
| GetTraceLoggerHandle | ntdll.EtwGet TraceLoggerHandle | 1351 (0x547) |
| GetTrusteeFormA | 0x77cb20c9 | 1352 (0x548) |
| GetTrusteeFormW | 0x77cb20c9 | 1353 (0x549) |
| GetTrusteeNameA | 0x77cb2099 | 1354 (0x54a) |
| GetTrusteeNameW | 0x77cb2099 | 1355 (0x54b) |
| GetTrusteeTypeA | 0x77cb20ad | 1356 (0x54c) |
| GetTrusteeTypeW | 0x77cb20ad | 1357 (0x54d) |
| GetUserNameA | 0x77c8a4b4 | 1358 (0x54e) |
| GetUserNameW | 0x77c7157a | 1359 (0x54f) |
| GetWindowsAccountDomainSid | 0x77ca3349 | 1360 (0x550) |
| I_QueryTagInformation | api-ms-win- service-winsvc-l 1-1-0.I_Query TagInformation | 1361 (0x551) |
| I_ScIsSecurityProcess | api-ms-win- service-winsvc-l 1-1-0.I_Sc IsSecurityProcess | 1362 (0x552) |
| I_ScPnPGetServiceName | api-ms-win- service-winsvc-l 1-1-0.I_Sc PnPGetServiceName | 1363 (0x553) |
| I_ScQueryServiceConfig | api-ms-win- service-winsvc-l 1-1-0.I_Sc QueryService Config | 1364 (0x554) |
| I_ScSendPnPMessage | api-ms-win- service-winsvc-l 1-1-0.I_Sc SendPnPMessage | 1365 (0x555) |
| I_ScSendTSMessage | api-ms-win- service-winsvc-l 1-1-0.I_Sc SendTSMessage | 1366 (0x556) |
| I_ScSetServiceBitsA | 0x77cc21d9 | 1367 (0x557) |
| I_ScSetServiceBitsW | 0x77c67d39 | 1368 (0x558) |
| I_ScValidatePnPService | api-ms-win- service-winsvc-l 1-1-0.I_ScValidate PnPService | 1369 (0x559) |
| IdentifyCodeAuthzLevelW | 0x77c82102 | 1370 (0x55a) |
| ImpersonateAnonymousToken | 0x77ca3359 | 1371 (0x55b) |
| ImpersonateLoggedOnUser | 0x77c6c57a | 1372 (0x55c) |
| ImpersonateNamedPipeClient | 0x77ca3369 | 1373 (0x55d) |
| ImpersonateSelf | 0x77c6ae8c | 1374 (0x55e) |
| InitializeAcl | 0x77c745cd | 1375 (0x55f) |
| InitializeSecurityDescriptor | 0x77c74620 | 1376 (0x560) |
| InitializeSid | 0x77c6cca1 | 1377 (0x561) |
| InitiateShutdownA | 0x77cbdece | 1378 (0x562) |
| InitiateShutdownW | 0x77cbde14 | 1379 (0x563) |
| InitiateSystemShutdownA | 0x77cbdc0f | 1380 (0x564) |
| InitiateSystemShutdownExA | 0x77cbdcb6 | 1381 (0x565) |
| InitiateSystemShutdownExW | 0x77cbdb3a | 1382 (0x566) |
| InitiateSystemShutdownW | 0x77cbda6d | 1383 (0x567) |
| InstallApplication | 0x77cacf11 | 1384 (0x568) |
| IsTextUnicode | 0x77c7448e | 1385 (0x569) |
| IsTokenRestricted | 0x77c6c562 | 1386 (0x56a) |
| IsTokenUntrusted | 0x77cadb46 | 1387 (0x56b) |
| IsValidAcl | 0x77c68523 | 1388 (0x56c) |
| IsValidRelativeSecurityDescriptor | KERNELBASE. IsValidRelative SecurityDescriptor | 1389 (0x56d) |
| IsValidSecurityDescriptor | 0x77c6b58c | 1390 (0x56e) |
| IsValidSid | 0x77c72eef | 1391 (0x56f) |
| IsWellKnownSid | 0x77c6cb06 | 1392 (0x570) |
| LockServiceDatabase | 0x77cc1cd1 | 1393 (0x571) |
| LogonUserA | 0x77ca2654 | 1394 (0x572) |
| LogonUserExA | 0x77ca2683 | 1395 (0x573) |
| LogonUserExExW | 0x77c6b965 | 1396 (0x574) |
| LogonUserExW | 0x77ca2505 | 1397 (0x575) |
| LogonUserW | 0x77c6c1a9 | 1398 (0x576) |
| LookupAccountNameA | 0x77ca1a25 | 1399 (0x577) |
| LookupAccountNameW | 0x77c6e276 | 1400 (0x578) |
| LookupAccountSidA | 0x77ca1daa | 1401 (0x579) |
| LookupAccountSidW | 0x77c74874 | 1402 (0x57a) |
| LookupPrivilegeDisplayNameA | 0x77ca22f1 | 1403 (0x57b) |
| LookupPrivilegeDisplayNameW | 0x77ca20b4 | 1404 (0x57c) |
| LookupPrivilegeNameA | 0x77ca21d6 | 1405 (0x57d) |
| LookupPrivilegeNameW | 0x77ca1fab | 1406 (0x57e) |
| LookupPrivilegeValueA | 0x77c7404a | 1407 (0x57f) |
| LookupPrivilegeValueW | 0x77c741b3 | 1408 (0x580) |
| LookupSecurityDescriptorPartsA | 0x77cb1bc7 | 1409 (0x581) |
| LookupSecurityDescriptorPartsW | 0x77cb1a16 | 1410 (0x582) |
| LsaAddAccountRights | 0x77ca8819 | 1411 (0x583) |
| LsaAddPrivilegesToAccount | 0x77caabb9 | 1412 (0x584) |
| LsaClearAuditLog | 0x77ca9d71 | 1413 (0x585) |
| LsaClose | 0x77c81af7 | 1414 (0x586) |
| LsaCreateAccount | 0x77caa3b1 | 1415 (0x587) |
| LsaCreateSecret | 0x77caa9c1 | 1416 (0x588) |
| LsaCreateTrustedDomain | 0x77caa521 | 1417 (0x589) |
| LsaCreateTrustedDomainEx | 0x77ca94c1 | 1418 (0x58a) |
| LsaDelete | 0x77caa179 | 1419 (0x58b) |
| LsaDeleteTrustedDomain | 0x77ca8ad1 | 1420 (0x58c) |
| LsaEnumerateAccountRights | 0x77ca8769 | 1421 (0x58d) |
| LsaEnumerateAccounts | 0x77caa469 | 1422 (0x58e) |
| LsaEnumerateAccountsWithUserRight | 0x77ca86b7 | 1423 (0x58f) |
| LsaEnumeratePrivileges | 0x77caa90d | 1424 (0x590) |
| LsaEnumeratePrivilegesOfAccount | 0x77caab31 | 1425 (0x591) |
| LsaEnumerateTrustedDomains | 0x77c6502d | 1426 (0x592) |
| LsaEnumerateTrustedDomainsEx | 0x77ca93fd | 1427 (0x593) |
| LsaFreeMemory | 0x77c7ede1 | 1428 (0x594) |
| LsaGetQuotasForAccount | 0x77caacc9 | 1429 (0x595) |
| LsaGetRemoteUserName | 0x77cab37b | 1430 (0x596) |
| LsaGetSystemAccessAccount | 0x77caadd9 | 1431 (0x597) |
| LsaGetUserName | 0x77c6ace2 | 1432 (0x598) |
| LsaICLookupNames | 0x77c87d26 | 1433 (0x599) |
| LsaICLookupNamesWithCreds | 0x77c8753b | 1434 (0x59a) |
| LsaICLookupSids | 0x77c894da | 1435 (0x59b) |
| LsaICLookupSidsWithCreds | 0x77c87308 | 1436 (0x59c) |
| LsaLookupNames2 | 0x77c87cdc | 1437 (0x59d) |
| LsaLookupNames | 0x77cab49d | 1438 (0x59e) |
| LsaLookupPrivilegeDisplayName | 0x77ca9e99 | 1439 (0x59f) |
| LsaLookupPrivilegeName | 0x77ca9df1 | 1440 (0x5a0) |
| LsaLookupPrivilegeValue | 0x77c74251 | 1441 (0x5a1) |
| LsaLookupSids | 0x77c893dc | 1442 (0x5a2) |
| LsaManageSidNameMapping | 0x77ca98dc | 1443 (0x5a3) |
| LsaNtStatusToWinError | 0x77cab621 | 1444 (0x5a4) |
| LsaOpenAccount | 0x77caaa79 | 1445 (0x5a5) |
| LsaOpenPolicy | 0x77c8077c | 1446 (0x5a6) |
| LsaOpenPolicySce | 0x77ca9bcc | 1447 (0x5a7) |
| LsaOpenSecret | 0x77caaee9 | 1448 (0x5a8) |
| LsaOpenTrustedDomain | 0x77caa5d9 | 1449 (0x5a9) |
| LsaOpenTrustedDomainByName | 0x77ca96b9 | 1450 (0x5aa) |
| LsaQueryDomainInformationPolicy | 0x77ca9589 | 1451 (0x5ab) |
| LsaQueryForestTrustInformation | 0x77ca9769 | 1452 (0x5ac) |
| LsaQueryInfoTrustedDomain | 0x77caa691 | 1453 (0x5ad) |
| LsaQueryInformationPolicy | 0x77c81bb0 | 1454 (0x5ae) |
| LsaQuerySecret | 0x77cab31d | 1455 (0x5af) |
| LsaQuerySecurityObject | 0x77caa209 | 1456 (0x5b0) |
| LsaQueryTrustedDomainInfo | 0x77ca8949 | 1457 (0x5b1) |
| LsaQueryTrustedDomainInfoByName | 0x77ca8f4d | 1458 (0x5b2) |
| LsaRemoveAccountRights | 0x77ca88b1 | 1459 (0x5b3) |
| LsaRemovePrivilegesFromAccount | 0x77caac41 | 1460 (0x5b4) |
| LsaRetrievePrivateData | 0x77c6569e | 1461 (0x5b5) |
| LsaSetDomainInformationPolicy | 0x77ca9621 | 1462 (0x5b6) |
| LsaSetForestTrustInformation | 0x77ca97f1 | 1463 (0x5b7) |
| LsaSetInformationPolicy | 0x77ca9c81 | 1464 (0x5b8) |
| LsaSetInformationTrustedDomain | 0x77caa749 | 1465 (0x5b9) |
| LsaSetQuotasForAccount | 0x77caad51 | 1466 (0x5ba) |
| LsaSetSecret | 0x77cab105 | 1467 (0x5bb) |
| LsaSetSecurityObject | 0x77caa2b1 | 1468 (0x5bc) |
| LsaSetSystemAccessAccount | 0x77caae61 | 1469 (0x5bd) |
| LsaSetTrustedDomainInfoByName | 0x77ca923d | 1470 (0x5be) |
| LsaSetTrustedDomainInformation | 0x77ca8a09 | 1471 (0x5bf) |
| LsaStorePrivateData | 0x77ca8d88 | 1472 (0x5c0) |
| MD4Final | NTDLL.MD4Final | 1473 (0x5c1) |
| MD4Init | NTDLL.MD4Init | 1474 (0x5c2) |
| MD4Update | NTDLL.MD4Update | 1475 (0x5c3) |
| MD5Final | NTDLL.MD5Final | 1476 (0x5c4) |
| MD5Init | NTDLL.MD5Init | 1477 (0x5c5) |
| MD5Update | NTDLL.MD5Update | 1478 (0x5c6) |
| MSChapSrvChangePassword2 | 0x77ca3f1f | 1479 (0x5c7) |
| MSChapSrvChangePassword | 0x77ca3d3b | 1480 (0x5c8) |
| MakeAbsoluteSD2 | 0x77ca3379 | 1481 (0x5c9) |
| MakeAbsoluteSD | 0x77c6ccd1 | 1482 (0x5ca) |
| MakeSelfRelativeSD | 0x77c6cc59 | 1483 (0x5cb) |
| MapGenericMask | 0x77c87a73 | 1484 (0x5cc) |
| NotifyBootConfigStatus | 0x77c6389b | 1485 (0x5cd) |
| NotifyChangeEventLog | 0x77ca0843 | 1486 (0x5ce) |
| NotifyServiceStatusChange | 0x77c6ca89 | 1487 (0x5cf) |
| NotifyServiceStatusChangeA | 0x77c8ec74 | 1488 (0x5d0) |
| NotifyServiceStatusChangeW | 0x77c6ca7c | 1489 (0x5d1) |
| ObjectCloseAuditAlarmA | 0x77ca181c | 1490 (0x5d2) |
| ObjectCloseAuditAlarmW | 0x77ca3389 | 1491 (0x5d3) |
| ObjectDeleteAuditAlarmA | 0x77ca1871 | 1492 (0x5d4) |
| ObjectDeleteAuditAlarmW | 0x77ca3399 | 1493 (0x5d5) |
| ObjectOpenAuditAlarmA | 0x77ca16d1 | 1494 (0x5d6) |
| ObjectOpenAuditAlarmW | 0x77ca33a9 | 1495 (0x5d7) |
| ObjectPrivilegeAuditAlarmA | 0x77ca17be | 1496 (0x5d8) |
| ObjectPrivilegeAuditAlarmW | 0x77ca33b9 | 1497 (0x5d9) |
| OpenBackupEventLogA | 0x77ca1014 | 1498 (0x5da) |
| OpenBackupEventLogW | 0x77ca0b09 | 1499 (0x5db) |
| OpenEncryptedFileRawA | 0x77ca2eb8 | 1500 (0x5dc) |
| OpenEncryptedFileRawW | 0x77ca28ba | 1501 (0x5dd) |
| OpenEventLogA | 0x77ca0fc3 | 1502 (0x5de) |
| OpenEventLogW | 0x77c675f7 | 1503 (0x5df) |
| OpenProcessToken | 0x77c74304 | 1504 (0x5e0) |
| OpenSCManagerA | 0x77c72bd8 | 1505 (0x5e1) |
| OpenSCManagerW | 0x77c6ca64 | 1506 (0x5e2) |
| OpenServiceA | 0x77c72bf0 | 1507 (0x5e3) |
| OpenServiceW | 0x77c6ca4c | 1508 (0x5e4) |
| OpenThreadToken | 0x77c7432c | 1509 (0x5e5) |
| OpenThreadWaitChainSession | 0x77cc63ee | 1510 (0x5e6) |
| OpenTraceA | 0x77cb87a3 | 1511 (0x5e7) |
| OpenTraceW | 0x77c6ef8d | 1512 (0x5e8) |
| PerfAddCounters | 0x77cbe539 | 1513 (0x5e9) |
| PerfCloseQueryHandle | 0x77cbe169 | 1514 (0x5ea) |
| PerfCreateInstance | pcwum. Perf CreateInstance | 1515 (0x5eb) |
| PerfDecrementULongCounterValue | pcwum. PerfDecrement ULongCounterValue | 1516 (0x5ec) |
| PerfDecrementULongLongCounterValue | pcwum. PerfDecrement ULongLong CounterValue | 1517 (0x5ed) |
| PerfDeleteCounters | 0x77cbe557 | 1518 (0x5ee) |
| PerfDeleteInstance | pcwum.Perf DeleteInstance | 1519 (0x5ef) |
| PerfEnumerateCounterSet | 0x77cbe6b1 | 1520 (0x5f0) |
| PerfEnumerateCounterSetInstances | 0x77cbe8e9 | 1521 (0x5f1) |
| PerfIncrementULongCounterValue | pcwum. PerfIncrement ULong CounterValue | 1522 (0x5f2) |
| PerfIncrementULongLongCounterValue | pcwum. PerfIncrement ULong LongCounterValue | 1523 (0x5f3) |
| PerfOpenQueryHandle | 0x77cbe9f1 | 1524 (0x5f4) |
| PerfQueryCounterData | 0x77cbe349 | 1525 (0x5f5) |
| PerfQueryCounterInfo | 0x77cbe241 | 1526 (0x5f6) |
| PerfQueryCounterSetRegistrationInfo | 0x77cbe7c9 | 1527 (0x5f7) |
| PerfQueryInstance | pcwum. PerfQueryInstance | 1528 (0x5f8) |
| PerfSetCounterRefValue | pcwum.Perf SetCounterRefValue | 1529 (0x5f9) |
| PerfSetCounterSetInfo | pcwum.Perf SetCounterSetInfo | 1530 (0x5fa) |
| PerfSetULongCounterValue | pcwum.PerfSet ULong CounterValue | 1531 (0x5fb) |
| PerfSetULongLongCounterValue | pcwum.PerfSet ULongLong CounterValue | 1532 (0x5fc) |
| PerfStartProvider | pcwum.Perf StartProvider | 1533 (0x5fd) |
| PerfStartProviderEx | pcwum.Perf StartProviderEx | 1534 (0x5fe) |
| PerfStopProvider | pcwum.Perf StopProvider | 1535 (0x5ff) |
| PrivilegeCheck | 0x77c6ae74 | 1536 (0x600) |
| PrivilegedServiceAuditAlarmA | 0x77ca18c6 | 1537 (0x601) |
| PrivilegedServiceAuditAlarmW | 0x77ca33c9 | 1538 (0x602) |
| ProcessIdleTasks | 0x77ca5521 | 1539 (0x603) |
| ProcessIdleTasksW | 0x77ca55b9 | 1540 (0x604) |
| ProcessTrace | 0x77c7050f | 1541 (0x605) |
| QueryAllTracesA | 0x77cb9751 | 1542 (0x606) |
| QueryAllTracesW | 0x77cb9733 | 1543 (0x607) |
| QueryRecoveryAgentsOnEncryptedFile | 0x77ca2991 | 1544 (0x608) |
| QuerySecurityAccessMask | 0x77ca33d9 | 1545 (0x609) |
| QueryServiceConfig2A | 0x77ca33e9 | 1546 (0x60a) |
| QueryServiceConfig2W | 0x77ca33f9 | 1547 (0x60b) |
| QueryServiceConfigA | 0x77c89a4f | 1548 (0x60c) |
| QueryServiceConfigW | 0x77c6b537 | 1549 (0x60d) |
| QueryServiceLockStatusA | 0x77cc1d59 | 1550 (0x60e) |
| QueryServiceLockStatusW | 0x77cc1df1 | 1551 (0x60f) |
| QueryServiceObjectSecurity | 0x77ca3409 | 1552 (0x610) |
| QueryServiceStatus | 0x77c72a86 | 1553 (0x611) |
| QueryServiceStatusEx | 0x77c6798c | 1554 (0x612) |
| QueryTraceA | 0x77cb9596 | 1555 (0x613) |
| QueryTraceW | 0x77c67a97 | 1556 (0x614) |
| QueryUsersOnEncryptedFile | 0x77ca292e | 1557 (0x615) |
| ReadEncryptedFileRaw | 0x77ca28ec | 1558 (0x616) |
| ReadEventLogA | 0x77ca10c5 | 1559 (0x617) |
| ReadEventLogW | 0x77ca0e9d | 1560 (0x618) |
| RegCloseKey | 0x77c7469d | 1561 (0x619) |
| RegConnectRegistryA | 0x77cbef59 | 1562 (0x61a) |
| RegConnectRegistryExA | 0x77cbeef9 | 1563 (0x61b) |
| RegConnectRegistryExW | 0x77c68f1f | 1564 (0x61c) |
| RegConnectRegistryW | 0x77c68f01 | 1565 (0x61d) |
| RegCopyTreeA | 0x77cbf58c | 1566 (0x61e) |
| RegCopyTreeW | 0x77cbf3af | 1567 (0x61f) |
| RegCreateKeyA | 0x77c6cd01 | 1568 (0x620) |
| RegCreateKeyExA | 0x77c71469 | 1569 (0x621) |
| RegCreateKeyExW | 0x77c740fe | 1570 (0x622) |
| RegCreateKeyTransactedA | 0x77cbf6b5 | 1571 (0x623) |
| RegCreateKeyTransactedW | 0x77c6a848 | 1572 (0x624) |
| RegCreateKeyW | 0x77c71514 | 1573 (0x625) |
| RegDeleteKeyA | 0x77c8a8b7 | 1574 (0x626) |
| RegDeleteKeyExA | 0x77ca3419 | 1575 (0x627) |
| RegDeleteKeyExW | 0x77c6a9c5 | 1576 (0x628) |
| RegDeleteKeyTransactedA | 0x77cbf7c0 | 1577 (0x629) |
| RegDeleteKeyTransactedW | 0x77c6a8ea | 1578 (0x62a) |
| RegDeleteKeyValueA | 0x77cbf80b | 1579 (0x62b) |
| RegDeleteKeyValueW | 0x77cbf84b | 1580 (0x62c) |
| RegDeleteKeyW | 0x77c71272 | 1581 (0x62d) |
| RegDeleteTreeA | 0x77ca34b3 | 1582 (0x62e) |
| RegDeleteTreeW | 0x77ca34a3 | 1583 (0x62f) |
| RegDeleteValueA | 0x77c8a4ea | 1584 (0x630) |
| RegDeleteValueW | 0x77c6cf31 | 1585 (0x631) |
| RegDisablePredefinedCache | 0x77c6b5a4 | 1586 (0x632) |
| RegDisablePredefinedCacheEx | 0x77ca3429 | 1587 (0x633) |
| RegDisableReflectionKey | 0x77c87cd2 | 1588 (0x634) |
| RegEnableReflectionKey | 0x77c87cd2 | 1589 (0x635) |
| RegEnumKeyA | 0x77c8a299 | 1590 (0x636) |
| RegEnumKeyExA | 0x77c71481 | 1591 (0x637) |
| RegEnumKeyExW | 0x77c746c8 | 1592 (0x638) |
| RegEnumKeyW | 0x77c7445b | 1593 (0x639) |
| RegEnumValueA | 0x77c6cf49 | 1594 (0x63a) |
| RegEnumValueW | 0x77c748cc | 1595 (0x63b) |
| RegFlushKey | 0x77c8773f | 1596 (0x63c) |
| RegGetKeySecurity | 0x77c6a995 | 1597 (0x63d) |
| RegGetValueA | 0x77c6a9dd | 1598 (0x63e) |
| RegGetValueW | 0x77c70e47 | 1599 (0x63f) |
| RegLoadAppKeyA | 0x77cbfdcd | 1600 (0x640) |
| RegLoadAppKeyW | 0x77cbfc17 | 1601 (0x641) |
| RegLoadKeyA | 0x77ca3463 | 1602 (0x642) |
| RegLoadKeyW | 0x77ca3473 | 1603 (0x643) |
| RegLoadMUIStringA | 0x77ca3433 | 1604 (0x644) |
| RegLoadMUIStringW | 0x77c711b6 | 1605 (0x645) |
| RegNotifyChangeKeyValue | 0x77c6e15b | 1606 (0x646) |
| RegOpenCurrentUser | 0x77c715ad | 1607 (0x647) |
| RegOpenKeyA | 0x77c6cc15 | 1608 (0x648) |
| RegOpenKeyExA | 0x77c74907 | 1609 (0x649) |
| RegOpenKeyExW | 0x77c7468d | 1610 (0x64a) |
| RegOpenKeyTransactedA | 0x77cbf70f | 1611 (0x64b) |
| RegOpenKeyTransactedW | 0x77c6a8a2 | 1612 (0x64c) |
| RegOpenKeyW | 0x77c72459 | 1613 (0x64d) |
| RegOpenUserClassesRoot | 0x77c888c4 | 1614 (0x64e) |
| RegOverridePredefKey | 0x77cbf5e8 | 1615 (0x64f) |
| RegQueryInfoKeyA | 0x77c6e143 | 1616 (0x650) |
| RegQueryInfoKeyW | 0x77c746e7 | 1617 (0x651) |
| RegQueryMultipleValuesA | 0x77cbffb4 | 1618 (0x652) |
| RegQueryMultipleValuesW | 0x77cc052d | 1619 (0x653) |
| RegQueryReflectionKey | 0x77ca3f97 | 1620 (0x654) |
| RegQueryValueA | 0x77c6ce12 | 1621 (0x655) |
| RegQueryValueExA | 0x77c748ef | 1622 (0x656) |
| RegQueryValueExW | 0x77c746ad | 1623 (0x657) |
| RegQueryValueW | 0x77c744b4 | 1624 (0x658) |
| RegRenameKey | 0x77cbf758 | 1625 (0x659) |
| RegReplaceKeyA | 0x77cc0943 | 1626 (0x65a) |
| RegReplaceKeyW | 0x77cc0b89 | 1627 (0x65b) |
| RegRestoreKeyA | 0x77ca3453 | 1628 (0x65c) |
| RegRestoreKeyW | 0x77c87cba | 1629 (0x65d) |
| RegSaveKeyA | 0x77cc0cc9 | 1630 (0x65e) |
| RegSaveKeyExA | 0x77ca3443 | 1631 (0x65f) |
| RegSaveKeyExW | 0x77c87ca2 | 1632 (0x660) |
| RegSaveKeyW | 0x77c87a9b | 1633 (0x661) |
| RegSetKeySecurity | 0x77c6b2d4 | 1634 (0x662) |
| RegSetKeyValueA | 0x77cbf88b | 1635 (0x663) |
| RegSetKeyValueW | 0x77c87180 | 1636 (0x664) |
| RegSetValueA | 0x77cc0e41 | 1637 (0x665) |
| RegSetValueExA | 0x77c714b3 | 1638 (0x666) |
| RegSetValueExW | 0x77c714d6 | 1639 (0x667) |
| RegSetValueW | 0x77c8a68a | 1640 (0x668) |
| RegUnLoadKeyA | 0x77ca3483 | 1641 (0x669) |
| RegUnLoadKeyW | 0x77ca3493 | 1642 (0x66a) |
| RegisterEventSourceA | 0x77c72d46 | 1643 (0x66b) |
| RegisterEventSourceW | 0x77c7271c | 1644 (0x66c) |
| RegisterIdleTask | 0x77c65bfc | 1645 (0x66d) |
| RegisterServiceCtrlHandlerA | 0x77ca34c3 | 1646 (0x66e) |
| RegisterServiceCtrlHandlerExA | 0x77ca34d3 | 1647 (0x66f) |
| RegisterServiceCtrlHandlerExW | 0x77c6a9ad | 1648 (0x670) |
| RegisterServiceCtrlHandlerW | 0x77c6a97d | 1649 (0x671) |
| RegisterTraceGuidsA | ntdll.EtwRegister TraceGuidsA | 1650 (0x672) |
| RegisterTraceGuidsW | ntdll.EtwRegister TraceGuidsW | 1651 (0x673) |
| RegisterWaitChainCOMCallback | 0x77cc6373 | 1652 (0x674) |
| RemoveTraceCallback | 0x77cb8695 | 1653 (0x675) |
| RemoveUsersFromEncryptedFile | 0x77ca29d4 | 1654 (0x676) |
| ReportEventA | 0x77c63ee9 | 1655 (0x677) |
| ReportEventW | 0x77c6c839 | 1656 (0x678) |
| RevertToSelf | 0x77c71562 | 1657 (0x679) |
| SaferCloseLevel | 0x77c83825 | 1658 (0x67a) |
| SaferComputeTokenFromLevel | 0x77c83352 | 1659 (0x67b) |
| SaferCreateLevel | 0x77cada88 | 1660 (0x67c) |
| SaferGetLevelInformation | 0x77c69094 | 1661 (0x67d) |
| SaferGetPolicyInformation | 0x77c69d25 | 1662 (0x67e) |
| SaferIdentifyLevel | 0x77c82102 | 1663 (0x67f) |
| SaferRecordEventLogEntry | 0x77caf0bd | 1664 (0x680) |
| SaferSetLevelInformation | 0x77cb0073 | 1665 (0x681) |
| SaferSetPolicyInformation | 0x77cae47d | 1666 (0x682) |
| SaferiChangeRegistryScope | 0x77cb0595 | 1667 (0x683) |
| SaferiCompareTokenLevels | 0x77c6b5c9 | 1668 (0x684) |
| SaferiIsDllAllowed | 0x77caed75 | 1669 (0x685) |
| SaferiIsExecutableFileType | 0x77c69bd5 | 1670 (0x686) |
| SaferiPopulateDefaultsInRegistry | 0x77c69202 | 1671 (0x687) |
| SaferiRecordEventLogEntry | 0x77caf0bd | 1672 (0x688) |
| SaferiSearchMatchingHashRules | 0x77c679db | 1673 (0x689) |
| SetAclInformation | 0x77ca34e3 | 1674 (0x68a) |
| SetEncryptedFileMetadata | 0x77ca2c91 | 1675 (0x68b) |
| SetEntriesInAccessListA | 0x77cb3edd | 1676 (0x68c) |
| SetEntriesInAccessListW | 0x77cb2be8 | 1677 (0x68d) |
| SetEntriesInAclA | 0x77cb15e9 | 1678 (0x68e) |
| SetEntriesInAclW | 0x77c72a66 | 1679 (0x68f) |
| SetEntriesInAuditListA | 0x77cb3f16 | 1680 (0x690) |
| SetEntriesInAuditListW | 0x77cb2c21 | 1681 (0x691) |
| SetFileSecurityA | 0x77ca1951 | 1682 (0x692) |
| SetFileSecurityW | 0x77c679c3 | 1683 (0x693) |
| SetInformationCodeAuthzLevelW | 0x77cb0073 | 1684 (0x694) |
| SetInformationCodeAuthzPolicyW | 0x77cae47d | 1685 (0x695) |
| SetKernelObjectSecurity | 0x77c74645 | 1686 (0x696) |
| SetNamedSecurityInfoA | 0x77cb15a0 | 1687 (0x697) |
| SetNamedSecurityInfoExA | 0x77cb3519 | 1688 (0x698) |
| SetNamedSecurityInfoExW | 0x77cb3302 | 1689 (0x699) |
| SetNamedSecurityInfoW | 0x77c69fe2 | 1690 (0x69a) |
| SetPrivateObjectSecurity | 0x77ca34f3 | 1691 (0x69b) |
| SetPrivateObjectSecurityEx | 0x77ca3503 | 1692 (0x69c) |
| SetSecurityAccessMask | 0x77ca3513 | 1693 (0x69d) |
| SetSecurityDescriptorControl | 0x77c87a8b | 1694 (0x69e) |
| SetSecurityDescriptorDacl | 0x77c7415e | 1695 (0x69f) |
| SetSecurityDescriptorGroup | 0x77c6f464 | 1696 (0x6a0) |
| SetSecurityDescriptorOwner | 0x77c6f44c | 1697 (0x6a1) |
| SetSecurityDescriptorRMControl | 0x77ca3523 | 1698 (0x6a2) |
| SetSecurityDescriptorSacl | 0x77c74680 | 1699 (0x6a3) |
| SetSecurityInfo | 0x77c69edf | 1700 (0x6a4) |
| SetSecurityInfoExA | 0x77cb3a01 | 1701 (0x6a5) |
| SetSecurityInfoExW | 0x77cb37e9 | 1702 (0x6a6) |
| SetServiceBits | 0x77cc21eb | 1703 (0x6a7) |
| SetServiceObjectSecurity | 0x77ca3533 | 1704 (0x6a8) |
| SetServiceStatus | 0x77c6c7a6 | 1705 (0x6a9) |
| SetThreadToken | 0x77c6c7ce | 1706 (0x6aa) |
| SetTokenInformation | 0x77c69a92 | 1707 (0x6ab) |
| SetTraceCallback | 0x77cb85a7 | 1708 (0x6ac) |
| SetUserFileEncryptionKey | 0x77ca2f57 | 1709 (0x6ad) |
| SetUserFileEncryptionKeyEx | 0x77ca2a9d | 1710 (0x6ae) |
| StartServiceA | 0x77ca3543 | 1711 (0x6af) |
| StartServiceCtrlDispatcherA | 0x77ca3553 | 1712 (0x6b0) |
| StartServiceCtrlDispatcherW | 0x77c6a965 | 1713 (0x6b1) |
| StartServiceW | 0x77c67974 | 1714 (0x6b2) |
| StartTraceA | 0x77cb8b26 | 1715 (0x6b3) |
| StartTraceW | 0x77c6e467 | 1716 (0x6b4) |
| StopTraceA | 0x77cb95b7 | 1717 (0x6b5) |
| StopTraceW | 0x77c70deb | 1718 (0x6b6) |
| SystemFunction001 | 0x77ca3fb0 | 1719 (0x6b7) |
| SystemFunction002 | 0x77c86fd0 | 1720 (0x6b8) |
| SystemFunction003 | 0x77c68485 | 1721 (0x6b9) |
| SystemFunction004 | 0x77ca3ff5 | 1722 (0x6ba) |
| SystemFunction005 | 0x77ca403a | 1723 (0x6bb) |
| SystemFunction006 | 0x77c683ca | 1724 (0x6bc) |
| SystemFunction007 | 0x77c6b9a9 | 1725 (0x6bd) |
| SystemFunction008 | 0x77ca5816 | 1726 (0x6be) |
| SystemFunction009 | 0x77ca58bd | 1727 (0x6bf) |
| SystemFunction010 | 0x77ca58cd | 1728 (0x6c0) |
| SystemFunction011 | 0x77ca5918 | 1729 (0x6c1) |
| SystemFunction012 | 0x77ca5925 | 1730 (0x6c2) |
| SystemFunction013 | 0x77ca595f | 1731 (0x6c3) |
| SystemFunction014 | 0x77ca5a95 | 1732 (0x6c4) |
| SystemFunction015 | 0x77ca5999 | 1733 (0x6c5) |
| SystemFunction016 | 0x77ca59a6 | 1734 (0x6c6) |
| SystemFunction017 | 0x77ca59dc | 1735 (0x6c7) |
| SystemFunction018 | 0x77ca5a12 | 1736 (0x6c8) |
| SystemFunction019 | 0x77ca5a1f | 1737 (0x6c9) |
| SystemFunction020 | 0x77ca5a95 | 1738 (0x6ca) |
| SystemFunction021 | 0x77ca5999 | 1739 (0x6cb) |
| SystemFunction022 | 0x77ca5a95 | 1740 (0x6cc) |
| SystemFunction023 | 0x77ca5999 | 1741 (0x6cd) |
| SystemFunction024 | 0x77ca5a2c | 1742 (0x6ce) |
| SystemFunction025 | 0x77c86f70 | 1743 (0x6cf) |
| SystemFunction026 | 0x77ca5a88 | 1744 (0x6d0) |
| SystemFunction027 | 0x77c86f63 | 1745 (0x6d1) |
| SystemFunction028 | 0x77ca407f | 1746 (0x6d2) |
| SystemFunction029 | 0x77ca40c1 | 1747 (0x6d3) |
| SystemFunction030 | 0x77c86f07 | 1748 (0x6d4) |
| SystemFunction031 | 0x77c86f07 | 1749 (0x6d5) |
| SystemFunction032 | 0x77ca5aa5 | 1750 (0x6d6) |
| SystemFunction033 | 0x77ca5aa5 | 1751 (0x6d7) |
| SystemFunction034 | 0x77ca4103 | 1752 (0x6d8) |
| SystemFunction035 | CRYPTSP.Check SignatureInFile | 1753 (0x6d9) |
| SystemFunction036 | 0x77c61919 | 1754 (0x6da) |
| SystemFunction040 | 0x77c6a0af | 1755 (0x6db) |
| SystemFunction041 | 0x77c6a06a | 1756 (0x6dc) |
| TraceEvent | ntdll.EtwLog TraceEvent | 1757 (0x6dd) |
| TraceEventInstance | ntdll.EtwTraceEvent Instance | 1758 (0x6de) |
| TraceMessage | ntdll. EtwTraceMessage | 1759 (0x6df) |
| TraceMessageVa | ntdll. EtwTraceMessageVa | 1760 (0x6e0) |
| TraceSetInformation | 0x77cb8987 | 1761 (0x6e1) |
| TreeResetNamedSecurityInfoA | 0x77cb1e82 | 1762 (0x6e2) |
| TreeResetNamedSecurityInfoW | 0x77cb1df8 | 1763 (0x6e3) |
| TreeSetNamedSecurityInfoA | 0x77cb1e82 | 1764 (0x6e4) |
| TreeSetNamedSecurityInfoW | 0x77cb1e8d | 1765 (0x6e5) |
| TrusteeAccessToObjectA | 0x77cb2d31 | 1766 (0x6e6) |
| TrusteeAccessToObjectW | 0x77cb2c48 | 1767 (0x6e7) |
| UninstallApplication | 0x77cac20d | 1768 (0x6e8) |
| UnlockServiceDatabase | 0x77cc1e89 | 1769 (0x6e9) |
| UnregisterIdleTask | 0x77ca55c6 | 1770 (0x6ea) |
| UnregisterTraceGuids | ntdll.EtwUnregister TraceGuids | 1771 (0x6eb) |
| UpdateTraceA | 0x77cb95d8 | 1772 (0x6ec) |
| UpdateTraceW | 0x77cb95f9 | 1773 (0x6ed) |
| UsePinForEncryptedFilesA | 0x77ca2bb6 | 1774 (0x6ee) |
| UsePinForEncryptedFilesW | 0x77ca2bff | 1775 (0x6ef) |
| WmiCloseBlock | 0x77c73e3d | 1776 (0x6f0) |
| WmiDevInstToInstanceNameA | 0x77cb6851 | 1777 (0x6f1) |
| WmiDevInstToInstanceNameW | 0x77c8a123 | 1778 (0x6f2) |
| WmiEnumerateGuids | 0x77cb6065 | 1779 (0x6f3) |
| WmiExecuteMethodA | 0x77cb65ca | 1780 (0x6f4) |
| WmiExecuteMethodW | 0x77cb5d35 | 1781 (0x6f5) |
| WmiFileHandleToInstanceNameA | 0x77cb6909 | 1782 (0x6f6) |
| WmiFileHandleToInstanceNameW | 0x77cb664f | 1783 (0x6f7) |
| WmiFreeBuffer | 0x77c88831 | 1784 (0x6f8) |
| WmiMofEnumerateResourcesA | 0x77cb700e | 1785 (0x6f9) |
| WmiMofEnumerateResourcesW | 0x77c8831f | 1786 (0x6fa) |
| WmiNotificationRegistrationA | 0x77cb50e1 | 1787 (0x6fb) |
| WmiNotificationRegistrationW | 0x77c6aa67 | 1788 (0x6fc) |
| WmiOpenBlock | 0x77c73b41 | 1789 (0x6fd) |
| WmiQueryAllDataA | 0x77cb63a9 | 1790 (0x6fe) |
| WmiQueryAllDataMultipleA | 0x77cb63ed | 1791 (0x6ff) |
| WmiQueryAllDataMultipleW | 0x77cb51aa | 1792 (0x700) |
| WmiQueryAllDataW | 0x77c73c0d | 1793 (0x701) |
| WmiQueryGuidInformation | 0x77c88795 | 1794 (0x702) |
| WmiQuerySingleInstanceA | 0x77cb6439 | 1795 (0x703) |
| WmiQuerySingleInstanceMultipleA | 0x77cb585d | 1796 (0x704) |
| WmiQuerySingleInstanceMultipleW | 0x77cb5635 | 1797 (0x705) |
| WmiQuerySingleInstanceW | 0x77cb5395 | 1798 (0x706) |
| WmiReceiveNotificationsA | 0x77cb5167 | 1799 (0x707) |
| WmiReceiveNotificationsW | 0x77cb5125 | 1800 (0x708) |
| WmiSetSingleInstanceA | 0x77cb64df | 1801 (0x709) |
| WmiSetSingleInstanceW | 0x77cb59b7 | 1802 (0x70a) |
| WmiSetSingleItemA | 0x77cb6553 | 1803 (0x70b) |
| WmiSetSingleItemW | 0x77cb5b75 | 1804 (0x70c) |
| WriteEncryptedFileRaw | 0x77ca2902 | 1805 (0x70d) |
【Shell32.DLL 333個】
| Shell32.DLL(Function Name) | Address | Ordinal |
|---|---|---|
| SHChangeNotifyRegister | 0x73892469 | 2 (0x2) |
| SHDefExtractIconA | 0x73a423d5 | 3 (0x3) |
| SHChangeNotifyDeregister | 0x73897775 | 4 (0x4) |
| SHDefExtractIconW | 0x73866f1e | 6 (0x6) |
| PifMgr_OpenProperties | 0x73a121e4 | 9 (0x9) |
| PifMgr_GetProperties | 0x73a1132d | 10 (0xa) |
| PifMgr_SetProperties | 0x73a11c89 | 11 (0xb) |
| PifMgr_CloseProperties | 0x73a10a25 | 13 (0xd) |
| SHStartNetConnectionDialogW | 0x73a462eb | 14 (0xe) |
| ILFindLastID | 0x738a2dbc | 16 (0x10) |
| ILRemoveLastID | 0x738a4cab | 17 (0x11) |
| ILClone | 0x738a16e3 | 18 (0x12) |
| ILCloneFirst | 0x738a4674 | 19 (0x13) |
| ILIsEqual | 0x738a571c | 21 (0x15) |
| DAD_DragEnterEx2 | 0x73a39865 | 22 (0x16) |
| ILIsParent | 0x73894b21 | 23 (0x17) |
| ILFindChild | 0x7388b566 | 24 (0x18) |
| ILCombine | 0x738a18eb | 25 (0x19) |
| ILSaveToStream | 0x738489a1 | 27 (0x1b) |
| SHILCreateFromPath | 0x7385fa96 | 28 (0x1c) |
| IsLFNDriveA | 0x73a31227 | 41 (0x29) |
| IsLFNDriveW | 0x7381a26c | 42 (0x2a) |
| PathIsExe | 0x7385c185 | 43 (0x2b) |
| PathMakeUniqueName | 0x73a31701 | 47 (0x2f) |
| PathQualify | 0x73a312ee | 49 (0x31) |
| PathResolve | 0x73814397 | 51 (0x33) |
| RestartDialog | 0x73a3a118 | 59 (0x3b) |
| PickIconDlg | 0x73a0ba64 | 62 (0x3e) |
| GetFileNameFromBrowse | 0x73a43d03 | 63 (0x3f) |
| DriveType | 0x7389e6bb | 64 (0x40) |
| IsNetDrive | 0x738a6d60 | 66 (0x42) |
| Shell_MergeMenus | 0x73849fa5 | 67 (0x43) |
| SHGetSetSettings | 0x7388a40c | 68 (0x44) |
| Shell_GetImageLists | 0x73960b3d | 71 (0x47) |
| Shell_GetCachedImageIndex | 0x738e7be1 | 72 (0x48) |
| SHShellFolderView_Message | 0x73a6b147 | 73 (0x49) |
| SHCreateStdEnumFmtEtc | 0x73a03bf5 | 74 (0x4a) |
| PathYetAnotherMakeUniqueName | 0x7391c037 | 75 (0x4b) |
| SHMapPIDLToSystemImageListIndex | 0x73960e70 | 77 (0x4d) |
| SHOpenPropSheetW | 0x73a7a3ca | 80 (0x50) |
| OpenAs_RunDLL | 0x73a18be5 | 81 (0x51) |
| CIDLData_CreateFromIDArray | 0x73a3083a | 83 (0x53) |
| OpenRegStream | 0x73830046 | 85 (0x55) |
| SHDoDragDrop | 0x73a3989e | 88 (0x58) |
| SHCloneSpecialIDList | 0x7381a4c5 | 89 (0x59) |
| SHFindFiles | 0x73a25614 | 90 (0x5a) |
| PathGetShortPath | 0x73a31727 | 92 (0x5c) |
| SHGetRealIDL | 0x73812184 | 98 (0x62) |
| SHRestricted | 0x7387f0e3 | 100 (0x64) |
| SHCoCreateInstance | 0x7389b7d9 | 102 (0x66) |
| SignalFileOpen | 0x73962f42 | 103 (0x67) |
| IsLFNDrive | 0x7381a26c | 119 (0x77) |
| OpenAs_RunDLLA | 0x73a18be5 | 125 (0x7d) |
| DAD_AutoScroll | 0x73887005 | 129 (0x81) |
| DAD_DragEnterEx | 0x7395d7b7 | 131 (0x83) |
| DAD_DragLeave | 0x73a37a1c | 132 (0x84) |
| OpenAs_RunDLLW | 0x73a18c82 | 133 (0x85) |
| DAD_DragMove | 0x73a38a02 | 134 (0x86) |
| PrepareDiscForBurnRunDllW | 0x73a20e2e | 135 (0x87) |
| DAD_SetDragImage | 0x738a84ed | 136 (0x88) |
| DAD_ShowDragImage | 0x738b4a31 | 137 (0x89) |
| PrintersGetCommand_RunDLL | 0x73a231aa | 138 (0x8a) |
| PrintersGetCommand_RunDLLA | 0x73a231aa | 139 (0x8b) |
| SHCLSIDFromString | 0x7388bd29 | 147 (0x93) |
| SHFind_InitMenuPopup | 0x73a6fd43 | 149 (0x95) |
| PrintersGetCommand_RunDLLW | 0x73a2322f | 150 (0x96) |
| ILGetSize | 0x738a16cb | 152 (0x98) |
| ILGetNext | 0x73846469 | 153 (0x99) |
| ILAppendID | 0x73a43f95 | 154 (0x9a) |
| ILFree | 0x7389c2d1 | 155 (0x9b) |
| ILCreateFromPath | 0x73a44025 | 157 (0x9d) |
| SHSimpleIDListFromPath | 0x7391c77f | 162 (0xa2) |
| Win32DeleteFile | 0x7391d3fb | 164 (0xa4) |
| SHCreateDirectory | 0x7390dd83 | 165 (0xa5) |
| SHAddFromPropSheetExtArray | 0x73a4898c | 167 (0xa7) |
| SHCreatePropSheetExtArray | 0x738d9a90 | 168 (0xa8) |
| SHDestroyPropSheetExtArray | 0x738d9b78 | 169 (0xa9) |
| SHReplaceFromPropSheetExtArray | 0x73a489f8 | 170 (0xaa) |
| PathCleanupSpec | 0x7391be74 | 171 (0xab) |
| SHValidateUNC | 0x7380beab | 173 (0xad) |
| SHCreateShellFolderViewEx | 0x73a6b328 | 174 (0xae) |
| SHSetInstanceExplorer | 0x738167b8 | 176 (0xb0) |
| SHObjectProperties | 0x73a23418 | 178 (0xb2) |
| SHGetNewLinkInfoA | 0x73a458c4 | 179 (0xb3) |
| SHGetNewLinkInfoW | 0x73a4589b | 180 (0xb4) |
| ShellMessageBoxW | shlwapi.ShellMessageBoxW | 182 (0xb6) |
| ShellMessageBoxA | shlwapi.ShellMessageBoxA | 183 (0xb7) |
| ILCreateFromPathA | 0x73a4405f | 189 (0xbd) |
| ILCreateFromPathW | 0x73a44025 | 190 (0xbe) |
| SHUpdateImageA | 0x73a4f900 | 191 (0xbf) |
| SHUpdateImageW | 0x73a4f734 | 192 (0xc0) |
| SHHandleUpdateImage | 0x738f70e4 | 193 (0xc1) |
| SHFree | 0x7389c2d1 | 195 (0xc3) |
| SHAlloc | 0x7381a615 | 196 (0xc4) |
| SHHelpShortcuts_RunDLL | 0x73a2337f | 199 (0xc7) |
| SHHelpShortcuts_RunDLLA | 0x73a2337f | 206 (0xce) |
| SHHelpShortcuts_RunDLLW | 0x73a233da | 207 (0xcf) |
| AppCompat_RunDLLW | 0x73a2c624 | 208 (0xd0) |
| AssocCreateForClasses | 0x7382c73c | 226 (0xe2) |
| AssocGetDetailsOfPropKey | 0x7388adf7 | 228 (0xe4) |
| CheckEscapesW | 0x73a31928 | 229 (0xe5) |
| SHSetFolderPathA | 0x73a4fac5 | 231 (0xe7) |
| SHSetFolderPathW | 0x73a4f953 | 232 (0xe8) |
| CommandLineToArgvW | 0x73819ee8 | 238 (0xee) |
| PathIsSlowW | 0x739421bb | 239 (0xef) |
| PathIsSlowA | 0x73a31825 | 240 (0xf0) |
| SHTestTokenMembership | 0x73852ce2 | 245 (0xf5) |
| Control_RunDLL | 0x73a35668 | 255 (0xff) |
| SHCreateShellFolderView | 0x738308ff | 256 (0x100) |
| Control_RunDLLA | 0x73a35668 | 263 (0x107) |
| Control_RunDLLAsUserW | 0x73a35647 | 267 (0x10b) |
| Control_RunDLLW | 0x738d9e95 | 268 (0x10c) |
| DllCanUnloadNow | 0x738b96c1 | 269 (0x10d) |
| DllGetClassObject | 0x738b25f9 | 271 (0x10f) |
| DllGetVersion | 0x73b78ad8 | 272 (0x110) |
| DllInstall | 0x73a3bdcb | 273 (0x111) |
| DllRegisterServer | 0x73899a3d | 274 (0x112) |
| DllUnregisterServer | 0x73899a3d | 275 (0x113) |
| DoEnvironmentSubstA | 0x73a05016 | 276 (0x114) |
| DoEnvironmentSubstW | 0x73811c72 | 277 (0x115) |
| DragAcceptFiles | 0x73921bf1 | 278 (0x116) |
| DragFinish | 0x73a14e4a | 279 (0x117) |
| DragQueryFile | 0x73a150b1 | 280 (0x118) |
| DragQueryFileA | 0x73a150b1 | 281 (0x119) |
| DragQueryFileAorW | 0x73a14e5b | 282 (0x11a) |
| DragQueryFileW | 0x73a1508e | 283 (0x11b) |
| DragQueryPoint | 0x73a14de7 | 284 (0x11c) |
| DuplicateIcon | 0x73a049ac | 285 (0x11d) |
| ExtractAssociatedIconA | 0x73a04efe | 286 (0x11e) |
| ExtractAssociatedIconExA | 0x73a04d53 | 287 (0x11f) |
| ExtractAssociatedIconExW | 0x73a04b0b | 288 (0x120) |
| ExtractAssociatedIconW | 0x73a04e1e | 289 (0x121) |
| ExtractIconA | 0x73a04ea8 | 290 (0x122) |
| ExtractIconEx | 0x73a04aaf | 291 (0x123) |
| ExtractIconExA | 0x73a04aaf | 292 (0x124) |
| ExtractIconExW | 0x7391f0bd | 293 (0x125) |
| ExtractIconW | 0x7390dd1c | 294 (0x126) |
| FindExecutableA | 0x73a42c37 | 295 (0x127) |
| FindExecutableW | 0x738022f9 | 296 (0x128) |
| FreeIconList | 0x738dd797 | 297 (0x129) |
| GetCurrentProcessExplicitAppUserModelID | 0x73a34b3b | 298 (0x12a) |
| InitNetworkAddressControl | 0x7387c0ff | 299 (0x12b) |
| InternalExtractIconListA | 0x73887005 | 300 (0x12c) |
| InternalExtractIconListW | 0x73887005 | 301 (0x12d) |
| LaunchMSHelp_RunDLLW | 0x73a15912 | 302 (0x12e) |
| Options_RunDLL | 0x73b480e4 | 303 (0x12f) |
| Options_RunDLLA | 0x73b480e4 | 304 (0x130) |
| Options_RunDLLW | 0x738cb997 | 305 (0x131) |
| RealShellExecuteA | 0x73a46721 | 306 (0x132) |
| RealShellExecuteExA | 0x73a46716 | 307 (0x133) |
| RealShellExecuteExW | 0x73a46716 | 308 (0x134) |
| RealShellExecuteW | 0x73a46721 | 309 (0x135) |
| RegenerateUserEnvironment | 0x738baee9 | 310 (0x136) |
| RunAsNewUser_RunDLLW | 0x73a15a32 | 311 (0x137) |
| SHAddDefaultPropertiesByExt | 0x738ee38d | 312 (0x138) |
| SHAddToRecentDocs | 0x7391b046 | 313 (0x139) |
| SHAppBarMessage | 0x73813278 | 314 (0x13a) |
| SHAssocEnumHandlers | 0x7393262f | 315 (0x13b) |
| SHAssocEnumHandlersForProtocolByApplication | 0x738e8581 | 316 (0x13c) |
| SHBindToFolderIDListParent | 0x738a6d23 | 317 (0x13d) |
| SHBindToFolderIDListParentEx | 0x738a4d24 | 318 (0x13e) |
| SHBindToObject | 0x738a2bfa | 319 (0x13f) |
| SHBindToParent | 0x7388b0b4 | 320 (0x140) |
| SHBrowseForFolder | 0x73a4dc6a | 321 (0x141) |
| SHBrowseForFolderA | 0x73a4dc6a | 322 (0x142) |
| SHBrowseForFolderW | 0x73a4db32 | 323 (0x143) |
| SHChangeNotify | 0x73857965 | 324 (0x144) |
| SHChangeNotifyRegisterThread | 0x73846607 | 325 (0x145) |
| SHChangeNotifySuspendResume | 0x73857f7f | 326 (0x146) |
| SHCreateAssociationRegistration | 0x738f8c3d | 327 (0x147) |
| SHCreateDataObject | 0x73990600 | 328 (0x148) |
| SHCreateDefaultContextMenu | 0x7384c224 | 329 (0x149) |
| SHCreateDefaultExtractIcon | 0x7386c101 | 330 (0x14a) |
| SHCreateDefaultPropertiesOp | 0x73a487d2 | 331 (0x14b) |
| SHCreateDirectoryExA | 0x7391516b | 332 (0x14c) |
| SHCreateDirectoryExW | 0x738adb61 | 333 (0x14d) |
| SHCreateItemFromIDList | 0x738a6bf5 | 334 (0x14e) |
| SHCreateItemFromParsingName | 0x73854215 | 335 (0x14f) |
| SHCreateItemFromRelativeName | 0x7399fd6f | 336 (0x150) |
| SHCreateItemInKnownFolder | 0x738ed657 | 337 (0x151) |
| SHCreateItemWithParent | 0x7388b436 | 338 (0x152) |
| SHCreateLocalServerRunDll | 0x738f5920 | 339 (0x153) |
| SHCreateProcessAsUserW | 0x73a46704 | 340 (0x154) |
| SHCreateQueryCancelAutoPlayMoniker | 0x738f9d6d | 341 (0x155) |
| SHCreateShellItem | 0x73910f7c | 342 (0x156) |
| SHCreateShellItemArray | 0x7382eeac | 343 (0x157) |
| SHCreateShellItemArrayFromDataObject | 0x7384ad77 | 344 (0x158) |
| SHCreateShellItemArrayFromIDLists | 0x73864cc9 | 345 (0x159) |
| SHCreateShellItemArrayFromShellItem | 0x7382ef43 | 346 (0x15a) |
| SHEmptyRecycleBinA | 0x73a6f003 | 347 (0x15b) |
| SHEmptyRecycleBinW | 0x73a6efc4 | 348 (0x15c) |
| SHEnableServiceObject | 0x7380e4f1 | 349 (0x15d) |
| SHEnumerateUnreadMailAccountsW | 0x73a240df | 350 (0x15e) |
| SHEvaluateSystemCommandTemplate | 0x73863f70 | 351 (0x15f) |
| SHExtractIconsW | 0x73a04e7b | 352 (0x160) |
| SHFileOperation | 0x73a5addd | 353 (0x161) |
| SHFileOperationA | 0x73a5addd | 354 (0x162) |
| SHFileOperationW | 0x738596f6 | 355 (0x163) |
| SHFormatDrive | 0x738b40c5 | 356 (0x164) |
| SHFreeNameMappings | 0x73a5002d | 357 (0x165) |
| SHGetDataFromIDListA | 0x73a44a8d | 358 (0x166) |
| SHGetDataFromIDListW | 0x738325db | 359 (0x167) |
| SHGetDesktopFolder | 0x738a199a | 360 (0x168) |
| SHGetDiskFreeSpaceA | 0x73a44a30 | 361 (0x169) |
| SHGetDiskFreeSpaceExA | 0x73a44a30 | 362 (0x16a) |
| SHGetDiskFreeSpaceExW | 0x738aa7e2 | 363 (0x16b) |
| SHGetDriveMedia | 0x738f9c2d | 364 (0x16c) |
| SHGetFileInfo | 0x739ae8f3 | 365 (0x16d) |
| SHGetFileInfoA | 0x739ae8f3 | 366 (0x16e) |
| SHGetFileInfoW | 0x739ae7b2 | 367 (0x16f) |
| SHGetFolderLocation | 0x7388e018 | 368 (0x170) |
| SHGetFolderPathA | 0x73917804 | 369 (0x171) |
| SHGetFolderPathAndSubDirA | 0x73a4fb57 | 370 (0x172) |
| SHGetFolderPathAndSubDirW | 0x73835121 | 371 (0x173) |
| SHGetFolderPathEx | 0x73885660 | 372 (0x174) |
| SHGetFolderPathW | 0x73885708 | 373 (0x175) |
| SHGetIDListFromObject | 0x738a29c7 | 374 (0x176) |
| SHGetIconOverlayIndexA | 0x73a75403 | 375 (0x177) |
| SHGetIconOverlayIndexW | 0x73a75353 | 376 (0x178) |
| SHGetInstanceExplorer | 0x73846399 | 377 (0x179) |
| SHGetItemFromDataObject | 0x7384e8cc | 378 (0x17a) |
| SHGetItemFromObject | 0x73849ded | 379 (0x17b) |
| SHGetKnownFolderIDList | 0x7388a29d | 380 (0x17c) |
| SHGetKnownFolderItem | 0x7389133c | 381 (0x17d) |
| SHGetKnownFolderPath | 0x738b4ca0 | 382 (0x17e) |
| SHGetLocalizedName | 0x73a453c2 | 383 (0x17f) |
| SHGetMalloc | 0x73820602 | 384 (0x180) |
| SHGetNameFromIDList | 0x7382aa50 | 385 (0x181) |
| SHGetNewLinkInfo | 0x73a458c4 | 386 (0x182) |
| SHGetPathFromIDList | 0x73921c24 | 387 (0x183) |
| SHGetPathFromIDListA | 0x73921c24 | 388 (0x184) |
| SHGetPathFromIDListEx | 0x7385ed61 | 389 (0x185) |
| SHGetPathFromIDListW | 0x738917bf | 390 (0x186) |
| SHGetPropertyStoreForWindow | 0x738affdd | 391 (0x187) |
| SHGetPropertyStoreFromIDList | 0x73a44dfb | 392 (0x188) |
| SHGetPropertyStoreFromParsingName | 0x73a44e61 | 393 (0x189) |
| SHGetSettings | 0x73a758e8 | 394 (0x18a) |
| SHGetSpecialFolderLocation | 0x7388e141 | 395 (0x18b) |
| SHGetSpecialFolderPathA | 0x73a4fb26 | 396 (0x18c) |
| SHGetSpecialFolderPathW | 0x73820468 | 397 (0x18d) |
| SHGetStockIconInfo | 0x739a8142 | 398 (0x18e) |
| SHGetTemporaryPropertyForItem | 0x7398c977 | 399 (0x18f) |
| SHGetUnreadMailCountW | 0x73a2760d | 400 (0x190) |
| SHInvokePrinterCommandA | 0x73a2301d | 401 (0x191) |
| SHInvokePrinterCommandW | 0x73a22d6f | 402 (0x192) |
| SHIsFileAvailableOffline | 0x73a28ef7 | 403 (0x193) |
| SHLoadInProc | 0x73b551a3 | 404 (0x194) |
| SHLoadNonloadedIconOverlayIdentifiers | 0x73a76c29 | 405 (0x195) |
| SHOpenFolderAndSelectItems | 0x73a44d16 | 406 (0x196) |
| SHOpenWithDialog | 0x73a18b89 | 407 (0x197) |
| SHParseDisplayName | 0x73887f83 | 408 (0x198) |
| SHPathPrepareForWriteA | 0x73a7b0d3 | 409 (0x199) |
| SHPathPrepareForWriteW | 0x7385558b | 410 (0x19a) |
| SHQueryRecycleBinA | 0x73a6e689 | 411 (0x19b) |
| SHQueryRecycleBinW | 0x73a6e5ab | 412 (0x19c) |
| SHQueryUserNotificationState | 0x7380b3b4 | 413 (0x19d) |
| SHRemoveLocalizedName | 0x73a4546f | 414 (0x19e) |
| SHResolveLibrary | 0x7394591c | 415 (0x19f) |
| SHSetDefaultProperties | 0x73a4889f | 416 (0x1a0) |
| SHSetKnownFolderPath | 0x73b5aa7d | 417 (0x1a1) |
| SHSetLocalizedName | 0x7390da0b | 418 (0x1a2) |
| SHSetTemporaryPropertyForItem | 0x739ab66c | 419 (0x1a3) |
| SHSetUnreadMailCountW | 0x73a27822 | 420 (0x1a4) |
| SHShowManageLibraryUI | 0x73b64a78 | 421 (0x1a5) |
| SHUpdateRecycleBinIcon | 0x7380c5a5 | 422 (0x1a6) |
| SetCurrentProcessExplicitAppUserModelID | 0x7390cdcc | 423 (0x1a7) |
| SheChangeDirA | 0x73a14950 | 424 (0x1a8) |
| SheChangeDirExW | 0x73a149ad | 425 (0x1a9) |
| SheGetDirA | 0x73a146f2 | 426 (0x1aa) |
| SheSetCurDrive | 0x73a14c30 | 427 (0x1ab) |
| ShellAboutA | 0x73a7cc59 | 428 (0x1ac) |
| ShellAboutW | 0x738ca129 | 429 (0x1ad) |
| ShellExec_RunDLL | 0x73a471f5 | 430 (0x1ae) |
| ShellExec_RunDLLA | 0x73a471f5 | 431 (0x1af) |
| ShellExec_RunDLLW | 0x73a47103 | 432 (0x1b0) |
| ShellExecuteA | 0x73a47078 | 433 (0x1b1) |
| ShellExecuteEx | 0x73a46fdd | 434 (0x1b2) |
| ShellExecuteExA | 0x73a46fdd | 435 (0x1b3) |
| ShellExecuteExW | 0x73821e46 | 436 (0x1b4) |
| ShellExecuteW | 0x73813c71 | 437 (0x1b5) |
| ShellHookProc | 0x73887005 | 438 (0x1b6) |
| Shell_GetCachedImageIndexA | 0x73a42434 | 439 (0x1b7) |
| Shell_GetCachedImageIndexW | 0x73875936 | 440 (0x1b8) |
| Shell_NotifyIcon | 0x73a48af2 | 441 (0x1b9) |
| Shell_NotifyIconA | 0x73a48af2 | 442 (0x1ba) |
| Shell_NotifyIconGetRect | 0x738c5e65 | 443 (0x1bb) |
| Shell_NotifyIconW | 0x738201c1 | 444 (0x1bc) |
| StrChrA | 0x73bb00c8 | 445 (0x1bd) |
| StrChrIA | 0x73bb00d3 | 446 (0x1be) |
| StrChrIW | 0x73bb00de | 447 (0x1bf) |
| StrChrW | 0x7394cb08 | 448 (0x1c0) |
| StrCmpNA | 0x73bb00e9 | 449 (0x1c1) |
| StrCmpNIA | 0x73bb00f4 | 450 (0x1c2) |
| StrCmpNIW | 0x738bdbfe | 451 (0x1c3) |
| StrCmpNW | 0x73bb00ff | 452 (0x1c4) |
| StrNCmpA | 0x73a0ac70 | 453 (0x1c5) |
| StrNCmpIA | 0x73a0ad6b | 454 (0x1c6) |
| StrNCmpIW | 0x73a0ace8 | 455 (0x1c7) |
| StrNCmpW | 0x73a0aba5 | 456 (0x1c8) |
| StrRChrA | 0x73bb010a | 457 (0x1c9) |
| StrRChrIA | 0x73bb0115 | 458 (0x1ca) |
| StrRChrIW | 0x73bb0120 | 459 (0x1cb) |
| StrRChrW | 0x73bb012b | 460 (0x1cc) |
| StrRStrA | 0x73a0ae4c | 461 (0x1cd) |
| StrRStrIA | 0x73bb0136 | 462 (0x1ce) |
| StrRStrIW | 0x73bb0141 | 463 (0x1cf) |
| StrRStrW | 0x73a0ade3 | 464 (0x1d0) |
| StrStrA | 0x73bb014c | 465 (0x1d1) |
| StrStrIA | 0x73bb0157 | 466 (0x1d2) |
| StrStrIW | 0x7391da20 | 467 (0x1d3) |
| StrStrW | 0x73bb0162 | 468 (0x1d4) |
| WOWShellExecute | 0x73a46ed5 | 469 (0x1d5) |
| WaitForExplorerRestartW | 0x73a3bcb1 | 470 (0x1d6) |
| RealDriveType | 0x7389e6d3 | 524 (0x20c) |
| SHFlushSFCache | 0x73a6fdb5 | 526 (0x20e) |
| SHChangeNotification_Lock | 0x7389962d | 644 (0x284) |
| SHChangeNotification_Unlock | 0x73899609 | 645 (0x285) |
| WriteCabinetState | 0x73a03f33 | 652 (0x28c) |
| ReadCabinetState | 0x7392c8c1 | 654 (0x28e) |
| IsUserAnAdmin | 0x738544f5 | 680 (0x2a8) |
| StgMakeUniqueName | 0x73a7db30 | 682 (0x2aa) |
| SHPropStgCreate | 0x738e7f2c | 685 (0x2ad) |
| SHPropStgReadMultiple | 0x738e7ebf | 688 (0x2b0) |
| SHPropStgWriteMultiple | 0x738e7aeb | 689 (0x2b1) |
| CDefFolderMenu_Create2 | 0x73a3050a | 701 (0x2bd) |
| SHGetSetFolderCustomSettings | 0x7393344f | 709 (0x2c5) |
| SHMultiFileProperties | 0x73a7a81b | 716 (0x2cc) |
| SHGetImageList | 0x73868de6 | 727 (0x2d7) |
| RestartDialogEx | 0x73a39e5e | 730 (0x2da) |
| SHCreateFileExtractIconW | 0x73a45cb8 | 743 (0x2e7) |
| SHLimitInputEdit | 0x73a766c9 | 747 (0x2eb) |
| SHGetAttributesFromDataObject | 0x73991114 | 750 (0x2ee) |
| ILLoadFromStreamEx | 0x7385ea3d | 846 (0x34e) |