公司的个人网站怎么做网站制作 连云港

随着对JNA的深入，需要用到GetProcAddress(HMODULE hmodule, int ordinal)方法，在C语言中第二个参数是一个字符串（通过传入函数的名称得到函数回调地址），但是在JNA中却没提供传字符串的方法，个人看了一下源码仓库社区谈到的issue，似乎也只有这个传int方法。

麻烦的是社区以及源码中没有相关资料对这个ordinal做过多解释。一方面这个值与dll文件相关(例如：Kernel32.dll、NTdll.dll等文件)，这个ordinal只是用来获取对应的dll文件中的函数序号，那么这个序号该如何获取呢？

获取ordinal

在安装完Visual Studio 以及SDK后会有一个dumpbin.exe可以帮助我们获取这个ordinal。
这个文件所在位置如下，注意路径不一定会和我一致哦，版本号换成自己的，然后往里面找就会找到这个文件

D:\Program Files\Microsoft Visual Studio\2019\Community\VC\Tools\MSVC\14.29.30133\bin\Hostx64\x64\dumpbin.exe

最好将这个文件所在的路径加入到环境变量PATH中。
然后可以唤出powershell (快捷键win+x+a，或者按住shift + 鼠标右键 有一个powershell选项 )或者 cmd
通过下面命令格式得到这个ordinal

下面的dll文件换成想要查询的dll

dumpbin.exe -exports .\kernel32.dll

如果内部函数太多建议使用下面这条命令过滤一下
LoadLibrary 是我想要查找的函数名称

dumpbin.exe -exports .\kernel32.dll | findstr LoadLibrary

如下会匹配到下面这些函数，第一列就是我们想要的ordinal 建议dll文件不要直接执行系统盘文件，将其copy出来最好

HMODULE k32module = kernel32.GetModuleHandle("Kernel32.dll");
/** ordinal序号* 969   LoadLibraryA* 970   LoadLibraryExA* 971   LoadLibraryExW* 972   LoadLibraryW* 示例代码：仅供参考*/
Pointer loadLibraryAddress = kernel32.GetProcAddress(k32module, 969);
HANDLE handle = kernel32.CreateRemoteThread(process, null, 0, loadLibraryAddress, virtualAllocEx, 0, null);
if (handle==null){System.out.println("注入失败");return;
}

Kernel32.dll 中函数的ordinal ( ctrl + f 搜索 )

PS D:\工作> dumpbin.exe -exports .\kernel32.dll
Microsoft (R) COFF/PE Dumper Version 14.29.30140.0
Copyright (C) Microsoft Corporation.  All rights reserved.Dump of file .\kernel32.dllFile Type: DLLSection contains the following exports for KERNEL32.dll00000000 characteristics1A965747 time date stamp0.00 version1 ordinal base1633 number of functions1633 number of namesordinal hint RVA      name1    0          AcquireSRWLockExclusive (forwarded to NTDLL.RtlAcquireSRWLockExclusive)2    1          AcquireSRWLockShared (forwarded to NTDLL.RtlAcquireSRWLockShared)3    2 00020080 ActivateActCtx4    3 0001B700 ActivateActCtxWorker5    4 0005A140 AddAtomA6    5 000128F0 AddAtomW7    6 00025640 AddConsoleAliasA8    7 00025650 AddConsoleAliasW9    8          AddDllDirectory (forwarded to api-ms-win-core-libraryloader-l1-1-0.AddDllDirectory)10    9 0003CCE0 AddIntegrityLabelToBoundaryDescriptor11    A 0005A280 AddLocalAlternateComputerNameA12    B 0005A2E0 AddLocalAlternateComputerNameW13    C 00022270 AddRefActCtx14    D 0001E2C0 AddRefActCtxWorker15    E 0003A620 AddResourceAttributeAce16    F 000208A0 AddSIDToBoundaryDescriptor17   10 0003A640 AddScopedPolicyIDAce18   11 00038A40 AddSecureMemoryCacheCallback19   12          AddVectoredContinueHandler (forwarded to NTDLL.RtlAddVectoredContinueHandler)20   13          AddVectoredExceptionHandler (forwarded to NTDLL.RtlAddVectoredExceptionHandler)21   14 00007200 AdjustCalendarDate22   15 00025290 AllocConsole23   16 0003A680 AllocateUserPhysicalPages24   17 0003A660 AllocateUserPhysicalPagesNuma25   18          AppPolicyGetClrCompat (forwarded to kernelbase.AppPolicyGetClrCompat)26   19          AppPolicyGetCreateFileAccess (forwarded to kernelbase.AppPolicyGetCreateFileAccess)27   1A          AppPolicyGetLifecycleManagement (forwarded to kernelbase.AppPolicyGetLifecycleManagement)28   1B          AppPolicyGetMediaFoundationCodecLoading (forwarded to kernelbase.AppPolicyGetMediaFoundationCodecLoading)29   1C          AppPolicyGetProcessTerminationMethod (forwarded to kernelbase.AppPolicyGetProcessTerminationMethod)30   1D          AppPolicyGetShowDeveloperDiagnostic (forwarded to kernelbase.AppPolicyGetShowDeveloperDiagnostic)31   1E          AppPolicyGetThreadInitializationType (forwarded to kernelbase.AppPolicyGetThreadInitializationType)32   1F          AppPolicyGetWindowingModel (forwarded to kernelbase.AppPolicyGetWindowingModel)33   20          AppXGetOSMaxVersionTested (forwarded to kernelbase.AppXGetOSMaxVersionTested)34   21 00043E30 ApplicationRecoveryFinished35   22 00043E40 ApplicationRecoveryInProgress36   23 00020BF0 AreFileApisANSI37   24 0001FF00 AssignProcessToJobObject38   25 000252A0 AttachConsole39   26 0005CD10 BackupRead40   27 0005DF70 BackupSeek41   28 0005E250 BackupWrite42   29 0003A700 BaseCheckAppcompatCache43   2A 0003A6A0 BaseCheckAppcompatCacheEx44   2B 00020F60 BaseCheckAppcompatCacheExWorker45   2C 00020F60 BaseCheckAppcompatCacheWorker46   2D 00018750 BaseCheckElevation47   2E 0003A720 BaseCleanupAppcompatCacheSupport48   2F 000213E0 BaseCleanupAppcompatCacheSupportWorker49   30 00040630 BaseDestroyVDMEnvironment50   31 0000C500 BaseDllReadWriteIniFile51   32 0003A740 BaseDumpAppcompatCache52   33 00037B60 BaseDumpAppcompatCacheWorker53   34 0001D310 BaseElevationPostProcessing54   35 0003A760 BaseFlushAppcompatCache55   36 00070B90 BaseFlushAppcompatCacheWorker56   37 00024860 BaseFormatObjectAttributes57   38 00059960 BaseFormatTimeOut58   39 0001FE60 BaseFreeAppCompatDataForProcessWorker59   3A 000167B0 BaseGenerateAppCompatData60   3B 0003A780 BaseGetNamedObjectDirectory61   3C 0003A7A0 BaseInitAppcompatCacheSupport62   3D 000213E0 BaseInitAppcompatCacheSupportWorker63   3E 00020F60 BaseIsAppcompatInfrastructureDisabled64   3F 00020F60 BaseIsAppcompatInfrastructureDisabledWorker65   40 00060F10 BaseIsDosApplication66   41 00071000 BaseQueryModuleData67   42 0001F6F0 BaseReadAppCompatDataForProcessWorker68   43 000130E0 BaseSetLastNTError69   44 00017020 BaseThreadInitThunk70   45 0003A7C0 BaseUpdateAppcompatCache71   46 00070BF0 BaseUpdateAppcompatCacheWorker72   47 00040990 BaseUpdateVDMEntry73   48 00059A00 BaseVerifyUnicodeString74   49 0005F6E0 BaseWriteErrorElevationRequiredEvent75   4A 0001C090 Basep8BitStringToDynamicUnicodeString76   4B 00059A60 BasepAllocateActivationContextActivationBlock77   4C 00059990 BasepAnsiStringToDynamicUnicodeString78   4D 00007600 BasepAppContainerEnvironmentExtension79   4E 000203A0 BasepAppXExtension80   4F 00018D00 BasepCheckAppCompat81   50 0001D010 BasepCheckWebBladeHashes82   51 00011DF0 BasepCheckWinSaferRestrictions83   52 0000DD40 BasepConstructSxsCreateProcessMessage84   53 000384F0 BasepCopyEncryption85   54 00025AF0 BasepFinishPackageActivationForSxS86   55 00059BF0 BasepFreeActivationContextActivationBlock87   56 0001BB90 BasepFreeAppCompatData88   57 00015E10 BasepGetAppCompatData89   58 0001A150 BasepGetComputerNameFromNtPath90   59 000194E0 BasepGetExeArchType91   5A 00025B30 BasepGetPackageActivationTokenForSxS92   5B 00070D20 BasepInitAppCompatData93   5C 0001C1C0 BasepIsProcessAllowed94   5D 00013740 BasepMapModuleHandle95   5E 0001B610 BasepNotifyLoadStringResource96   5F 00020BB0 BasepPostSuccessAppXExtension97   60 00039690 BasepProcessInvalidImage98   61 0000CEE0 BasepQueryAppCompat99   62 00070DB0 BasepQueryModuleChpeSettings100   63 00020B90 BasepReleaseAppXContext101   64 00014B90 BasepReleaseSxsCreateProcessUtilityStruct102   65 000440F0 BasepReportFault103   66 0001E3B0 BasepSetFileEncryptionCompression104   67 00037890 Beep105   68 00049C30 BeginUpdateResourceA106   69 00049CA0 BeginUpdateResourceW107   6A 00024260 BindIoCompletionCallback108   6B 000425E0 BuildCommDCBA109   6C 00042640 BuildCommDCBAndTimeoutsA110   6D 00042680 BuildCommDCBAndTimeoutsW111   6E 00042710 BuildCommDCBW112   6F 00061760 CallNamedPipeA113   70 00025030 CallNamedPipeW114   71 0003A7E0 CallbackMayRunLong115   72 000395E0 CancelDeviceWakeupRequest116   73 00020C70 CancelIo117   74 00020040 CancelIoEx118   75 0003A820 CancelSynchronousIo119   76          CancelThreadpoolIo (forwarded to NTDLL.TpCancelAsyncIoOperation)120   77 00044050 CancelTimerQueueTimer121   78 00024920 CancelWaitableTimer122   79          CeipIsOptedIn (forwarded to kernelbase.CeipIsOptedIn)123   7A 00021280 ChangeTimerQueueTimer124   7B 0003A840 CheckAllowDecryptedRemoteDestinationPolicy125   7C 00018610 CheckElevation126   7D 000205F0 CheckElevationEnabled127   7E 00061C60 CheckForReadOnlyResource128   7F 0003CD10 CheckForReadOnlyResourceFilter129   80          CheckIsMSIXPackage (forwarded to kernelbase.CheckIsMSIXPackage)130   81 000393F0 CheckNameLegalDOS8Dot3A131   82 000394A0 CheckNameLegalDOS8Dot3W132   83 00001250 CheckRemoteDebuggerPresent133   84 0003A860 CheckTokenCapability134   85 0003A880 CheckTokenMembershipEx135   86 00025090 ClearCommBreak136   87 000250A0 ClearCommError137   88 00069B00 CloseConsoleHandle138   89 000248E0 CloseHandle139   8A          ClosePackageInfo (forwarded to kernelbase.ClosePackageInfo)140   8B 00022210 ClosePrivateNamespace141   8C 000213E0 CloseProfileUserMapping142   8D 000252B0 ClosePseudoConsole143   8E          CloseState (forwarded to kernelbase.CloseState)144   8F          CloseThreadpool (forwarded to NTDLL.TpReleasePool)145   90          CloseThreadpoolCleanupGroup (forwarded to NTDLL.TpReleaseCleanupGroup)146   91          CloseThreadpoolCleanupGroupMembers (forwarded to NTDLL.TpReleaseCleanupGroupMembers)147   92          CloseThreadpoolIo (forwarded to NTDLL.TpReleaseIoCompletion)148   93          CloseThreadpoolTimer (forwarded to NTDLL.TpReleaseTimer)149   94          CloseThreadpoolWait (forwarded to NTDLL.TpReleaseWait)150   95          CloseThreadpoolWork (forwarded to NTDLL.TpReleaseWork)151   96 0001FF70 CmdBatNotification152   97 0003DAA0 CommConfigDialogA153   98 0003DB50 CommConfigDialogW154   99 0004A640 CompareCalendarDates155   9A 00024B10 CompareFileTime156   9B 0001D620 CompareStringA157   9C 00015C50 CompareStringEx158   9D 00015DF0 CompareStringOrdinal159   9E 0001C6A0 CompareStringW160   9F 00020FD0 ConnectNamedPipe161   A0 00069C40 ConsoleMenuControl162   A1 0003A8A0 ContinueDebugEvent163   A2 0004A6F0 ConvertCalDateTimeToSystemTime164   A3 0003A8C0 ConvertDefaultLocale165   A4 000251E0 ConvertFiberToThread166   A5 0004A7F0 ConvertNLSDayOfWeekToWin32DayOfWeek167   A6 000074B0 ConvertSystemTimeToCalDateTime168   A7 000251F0 ConvertThreadToFiber169   A8 00025200 ConvertThreadToFiberEx170   A9 0003A8E0 CopyContext171   AA 0003A900 CopyFile2172   AB 00061FB0 CopyFileA173   AC 00062060 CopyFileExA174   AD 000206C0 CopyFileExW175   AE 00062120 CopyFileTransactedA176   AF 00062210 CopyFileTransactedW177   B0 000251D0 CopyFileW178   B1 00037A50 CopyLZFile179   B2 00021BC0 CreateActCtxA180   B3 00021190 CreateActCtxW181   B4 000137B0 CreateActCtxWWorker182   B5 00061E20 CreateBoundaryDescriptorA183   B6 00020840 CreateBoundaryDescriptorW184   B7 000253D0 CreateConsoleScreenBuffer185   B8 00024B20 CreateDirectoryA186   B9 00062C40 CreateDirectoryExA187   BA 0003A920 CreateDirectoryExW188   BB 00037DB0 CreateDirectoryTransactedA189   BC 00062CD0 CreateDirectoryTransactedW190   BD 00024B30 CreateDirectoryW191   BE          CreateEnclave (forwarded to api-ms-win-core-enclave-l1-1-0.CreateEnclave)192   BF 00024930 CreateEventA193   C0 00024940 CreateEventExA194   C1 00024950 CreateEventExW195   C2 00024960 CreateEventW196   C3 00025210 CreateFiber197   C4 00025220 CreateFiberEx198   C5 00024B40 CreateFile2199   C6 00024B50 CreateFileA200   C7 0001BCB0 CreateFileMappingA201   C8          CreateFileMappingFromApp (forwarded to api-ms-win-core-memory-l1-1-1.CreateFileMappingFromApp)202   C9 00062E80 CreateFileMappingNumaA203   CA 0003A940 CreateFileMappingNumaW204   CB 0001C8E0 CreateFileMappingW205   CC 00062310 CreateFileTransactedA206   CD 000623D0 CreateFileTransactedW207   CE 00024B60 CreateFileW208   CF 0003A960 CreateHardLinkA209   D0 00043810 CreateHardLinkTransactedA210   D1 00062F50 CreateHardLinkTransactedW211   D2 0003A980 CreateHardLinkW212   D3 0001D950 CreateIoCompletionPort213   D4 0005C270 CreateJobObjectA214   D5 0001E1F0 CreateJobObjectW215   D6 0005C2E0 CreateJobSet216   D7 0001BE60 CreateMailslotA217   D8 0001BED0 CreateMailslotW218   D9 000208E0 CreateMemoryResourceNotification219   DA 00024970 CreateMutexA220   DB 00024980 CreateMutexExA221   DC 00024990 CreateMutexExW222   DD 000249A0 CreateMutexW223   DE 00061800 CreateNamedPipeA224   DF 00020270 CreateNamedPipeW225   E0 00020250 CreatePipe226   E1 00061E90 CreatePrivateNamespaceA227   E2 00020800 CreatePrivateNamespaceW228   E3 0001C760 CreateProcessA229   E4 0003A9A0 CreateProcessAsUserA230   E5 0001DAC0 CreateProcessAsUserW231   E6 0003AA20 CreateProcessInternalA232   E7 0003AAA0 CreateProcessInternalW233   E8 0001CB60 CreateProcessW234   E9 000252C0 CreatePseudoConsole235   EA 0003AB20 CreateRemoteThread236   EB          CreateRemoteThreadEx (forwarded to api-ms-win-core-processthreads-l1-1-0.CreateRemoteThreadEx)237   EC 0001BD80 CreateSemaphoreA238   ED 0001BDB0 CreateSemaphoreExA239   EE 000249B0 CreateSemaphoreExW240   EF 000249C0 CreateSemaphoreW241   F0 00063520 CreateSymbolicLinkA242   F1 000635E0 CreateSymbolicLinkTransactedA243   F2 000636A0 CreateSymbolicLinkTransactedW244   F3 0003AB70 CreateSymbolicLinkW245   F4 00043550 CreateTapePartition246   F5 0001B5A0 CreateThread247   F6 00020C30 CreateThreadpool248   F7 000211B0 CreateThreadpoolCleanupGroup249   F8 00020D60 CreateThreadpoolIo250   F9 0001C660 CreateThreadpoolTimer251   FA 000207A0 CreateThreadpoolWait252   FB 000205B0 CreateThreadpoolWork253   FC 00021240 CreateTimerQueue254   FD 0001E2A0 CreateTimerQueueTimer255   FE 00027420 CreateToolhelp32Snapshot256   FF 00042160 CreateUmsCompletionList257  100 000421A0 CreateUmsThreadContext258  101 000631A0 CreateWaitableTimerA259  102 000631C0 CreateWaitableTimerExA260  103 000249D0 CreateWaitableTimerExW261  104 000010B0 CreateWaitableTimerW262  105          CtrlRoutine (forwarded to kernelbase.CtrlRoutine)263  106 000200A0 DeactivateActCtx264  107 0001B850 DeactivateActCtxWorker265  108 0003ABB0 DebugActiveProcess266  109 0003AB90 DebugActiveProcessStop267  10A 0003ABD0 DebugBreak268  10B 00037CA0 DebugBreakProcess269  10C 00037CD0 DebugSetProcessKillOnExit270  10D          DecodePointer (forwarded to NTDLL.RtlDecodePointer)271  10E          DecodeSystemPointer (forwarded to NTDLL.RtlDecodeSystemPointer)272  10F 00064E50 DefineDosDeviceA273  110 00024B70 DefineDosDeviceW274  111 00024310 DelayLoadFailureHook275  112 00012860 DeleteAtom276  113 00020820 DeleteBoundaryDescriptor277  114          DeleteCriticalSection (forwarded to NTDLL.RtlDeleteCriticalSection)278  115 00025230 DeleteFiber279  116 00024B80 DeleteFileA280  117 00063780 DeleteFileTransactedA281  118 00024170 DeleteFileTransactedW282  119 00024B90 DeleteFileW283  11A          DeleteProcThreadAttributeList (forwarded to api-ms-win-core-processthreads-l1-1-0.DeleteProcThreadAttributeList)284  11B 0003ABF0 DeleteSynchronizationBarrier285  11C 000211F0 DeleteTimerQueue286  11D 00021260 DeleteTimerQueueEx287  11E 00020420 DeleteTimerQueueTimer288  11F 000421E0 DeleteUmsCompletionList289  120 00042220 DeleteUmsThreadContext290  121 000650F0 DeleteVolumeMountPointA291  122 00024BA0 DeleteVolumeMountPointW292  123 00042260 DequeueUmsCompletionListItems293  124 00015590 DeviceIoControl294  125 0001FEC0 DisableThreadLibraryCalls295  126 00044130 DisableThreadProfiling296  127          DisassociateCurrentThreadFromCallback (forwarded to NTDLL.TpDisassociateCallback)297  128          DiscardVirtualMemory (forwarded to api-ms-win-core-memory-l1-1-2.DiscardVirtualMemory)298  129 00021F60 DisconnectNamedPipe299  12A 0005B210 DnsHostnameToComputerNameA300  12B 0003AC10 DnsHostnameToComputerNameExW301  12C 0001C510 DnsHostnameToComputerNameW302  12D 00012A90 DosDateTimeToFileTime303  12E 000664F0 DosPathToSessionPathA304  12F 000666F0 DosPathToSessionPathW305  130 00069B20 DuplicateConsoleHandle306  131 00038840 DuplicateEncryptionInfoFileExt307  132 000248F0 DuplicateHandle308  133 00044170 EnableThreadProfiling309  134          EncodePointer (forwarded to NTDLL.RtlEncodePointer)310  135          EncodeSystemPointer (forwarded to NTDLL.RtlEncodeSystemPointer)311  136 00049EF0 EndUpdateResourceA312  137 00049F00 EndUpdateResourceW313  138          EnterCriticalSection (forwarded to NTDLL.RtlEnterCriticalSection)314  139 0003AC30 EnterSynchronizationBarrier315  13A 000422C0 EnterUmsSchedulingMode316  13B 0004B2E0 EnumCalendarInfoA317  13C 0004B380 EnumCalendarInfoExA318  13D 0001C740 EnumCalendarInfoExEx319  13E 0003AC50 EnumCalendarInfoExW320  13F 0003AC70 EnumCalendarInfoW321  140 0004B420 EnumDateFormatsA322  141 0004B480 EnumDateFormatsExA323  142 0003AC90 EnumDateFormatsExEx324  143 0003ACB0 EnumDateFormatsExW325  144 0003ACD0 EnumDateFormatsW326  145 0004B4F0 EnumLanguageGroupLocalesA327  146 0003ACF0 EnumLanguageGroupLocalesW328  147 00038C90 EnumResourceLanguagesA329  148 0003AD10 EnumResourceLanguagesExA330  149 0003AD30 EnumResourceLanguagesExW331  14A 00038CD0 EnumResourceLanguagesW332  14B 00038D10 EnumResourceNamesA333  14C 0003AD50 EnumResourceNamesExA334  14D 0003AD70 EnumResourceNamesExW335  14E 00025010 EnumResourceNamesW336  14F 00038D40 EnumResourceTypesA337  150 0003AD90 EnumResourceTypesExA338  151 0003ADB0 EnumResourceTypesExW339  152 00038D70 EnumResourceTypesW340  153 0004B520 EnumSystemCodePagesA341  154 0003ADD0 EnumSystemCodePagesW342  155 00038A70 EnumSystemFirmwareTables343  156 00054520 EnumSystemGeoID344  157 00054610 EnumSystemGeoNames345  158 0004B540 EnumSystemLanguageGroupsA346  159 0003ADF0 EnumSystemLanguageGroupsW347  15A 0003AE10 EnumSystemLocalesA348  15B 0003AE30 EnumSystemLocalesEx349  15C 0003AE50 EnumSystemLocalesW350  15D 0004B560 EnumTimeFormatsA351  15E 00020440 EnumTimeFormatsEx352  15F 0003AE70 EnumTimeFormatsW353  160 0004B5E0 EnumUILanguagesA354  161 0003AE90 EnumUILanguagesW355  162 0005B300 EnumerateLocalComputerNamesA356  163 0005B430 EnumerateLocalComputerNamesW357  164 000435B0 EraseTape358  165 000250B0 EscapeCommFunction359  166 00042370 ExecuteUmsThread360  167 0001E0A0 ExitProcess361  168          ExitThread (forwarded to NTDLL.RtlExitUserThread)362  169 00040C30 ExitVDM363  16A 00022250 ExpandEnvironmentStringsA364  16B 0001B790 ExpandEnvironmentStringsW365  16C 00025660 ExpungeConsoleCommandHistoryA366  16D 00025670 ExpungeConsoleCommandHistoryW367  16E 0003AEB0 FatalAppExitA368  16F 0003AED0 FatalAppExitW369  170 0001E0A0 FatalExit370  171 00012D30 FileTimeToDosDateTime371  172 00024BB0 FileTimeToLocalFileTime372  173 00025050 FileTimeToSystemTime373  174 000253E0 FillConsoleOutputAttribute374  175 000253F0 FillConsoleOutputCharacterA375  176 00025400 FillConsoleOutputCharacterW376  177 0001BC90 FindActCtxSectionGuid377  178 00012F90 FindActCtxSectionGuidWorker378  179 00066880 FindActCtxSectionStringA379  17A 00021100 FindActCtxSectionStringW380  17B 000132B0 FindActCtxSectionStringWWorker381  17C 00015240 FindAtomA382  17D 00012D10 FindAtomW383  17E 00024BC0 FindClose384  17F 00024BD0 FindCloseChangeNotification385  180 00024BE0 FindFirstChangeNotificationA386  181 00024BF0 FindFirstChangeNotificationW387  182 00024C00 FindFirstFileA388  183 00024C10 FindFirstFileExA389  184 00024C20 FindFirstFileExW390  185 00037EB0 FindFirstFileNameTransactedW391  186 00024C30 FindFirstFileNameW392  187 00037F90 FindFirstFileTransactedA393  188 00066920 FindFirstFileTransactedW394  189 00024C40 FindFirstFileW395  18A 00038080 FindFirstStreamTransactedW396  18B          FindFirstStreamW (forwarded to api-ms-win-core-file-l1-2-2.FindFirstStreamW)397  18C 00065140 FindFirstVolumeA398  18D 000652E0 FindFirstVolumeMountPointA399  18E 000654D0 FindFirstVolumeMountPointW400  18F 00024C50 FindFirstVolumeW401  190 0003AEF0 FindNLSString402  191 00015830 FindNLSStringEx403  192 00024C60 FindNextChangeNotification404  193 00024C70 FindNextFileA405  194 00024C80 FindNextFileNameW406  195 00024C90 FindNextFileW407  196          FindNextStreamW (forwarded to api-ms-win-core-file-l1-2-2.FindNextStreamW)408  197 00065760 FindNextVolumeA409  198 00065900 FindNextVolumeMountPointA410  199 00065FF0 FindNextVolumeMountPointW411  19A 00024CA0 FindNextVolumeW412  19B          FindPackagesByPackageFamily (forwarded to kernelbase.FindPackagesByPackageFamily)413  19C 00013530 FindResourceA414  19D 00013550 FindResourceExA415  19E 0001B380 FindResourceExW416  19F 00020230 FindResourceW417  1A0 0003AF10 FindStringOrdinal418  1A1 00024CB0 FindVolumeClose419  1A2 00066000 FindVolumeMountPointClose420  1A3 000201D0 FlsAlloc421  1A4 00020B10 FlsFree422  1A5 000184E0 FlsGetValue423  1A6 0001C2D0 FlsSetValue424  1A7 00025410 FlushConsoleInputBuffer425  1A8 00024CC0 FlushFileBuffers426  1A9 0001AE80 FlushInstructionCache427  1AA          FlushProcessWriteBuffers (forwarded to NTDLL.NtFlushProcessWriteBuffers)428  1AB 0003AF30 FlushViewOfFile429  1AC 0004B600 FoldStringA430  1AD 0003AF50 FoldStringW431  1AE          FormatApplicationUserModelId (forwarded to kernelbase.FormatApplicationUserModelId)432  1AF 00022080 FormatMessageA433  1B0 0001C890 FormatMessageW434  1B1 000252D0 FreeConsole435  1B2 0001FDA0 FreeEnvironmentStringsA436  1B3 0001F6B0 FreeEnvironmentStringsW437  1B4 0001C7D0 FreeLibrary438  1B5 00021030 FreeLibraryAndExitThread439  1B6          FreeLibraryWhenCallbackReturns (forwarded to NTDLL.TpCallbackUnloadDllOnCompletion)440  1B7 0005C310 FreeMemoryJobObject441  1B8 00021E10 FreeResource442  1B9 0003AF70 FreeUserPhysicalPages443  1BA 00025420 GenerateConsoleCtrlEvent444  1BB 0001E060 GetACP445  1BC 0001D4B0 GetActiveProcessorCount446  1BD 00066AC0 GetActiveProcessorGroupCount447  1BE 0003AF90 GetAppContainerAce448  1BF 0003AFB0 GetAppContainerNamedObjectPath449  1C0 0003AFD0 GetApplicationRecoveryCallback450  1C1 00043E50 GetApplicationRecoveryCallbackWorker451  1C2 0003AFF0 GetApplicationRestartSettings452  1C3 00043F10 GetApplicationRestartSettingsWorker453  1C4          GetApplicationUserModelId (forwarded to kernelbase.GetApplicationUserModelId)454  1C5 0005A160 GetAtomNameA455  1C6 00012630 GetAtomNameW456  1C7 00061020 GetBinaryType457  1C8 00061020 GetBinaryTypeA458  1C9 00061070 GetBinaryTypeW459  1CA 0001E2E0 GetCPInfo460  1CB 0004B8B0 GetCPInfoExA461  1CC 0003B010 GetCPInfoExW462  1CD 0003B030 GetCachedSigningLevel463  1CE 0004A830 GetCalendarDateFormat464  1CF 000086B0 GetCalendarDateFormatEx465  1D0 000073B0 GetCalendarDaysInMonth466  1D1 0004AB10 GetCalendarDifferenceInDays467  1D2 0004B990 GetCalendarInfoA468  1D3 00025060 GetCalendarInfoEx469  1D4 00025070 GetCalendarInfoW470  1D5 0004AC70 GetCalendarMonthsInYear471  1D6 00007130 GetCalendarSupportedDateRange472  1D7 0004AD40 GetCalendarWeekNumber473  1D8 00043D80 GetComPlusPackageInstallStatus474  1D9 000250C0 GetCommConfig475  1DA 000250D0 GetCommMask476  1DB 000250E0 GetCommModemStatus477  1DC 000250F0 GetCommProperties478  1DD 00025100 GetCommState479  1DE 00025110 GetCommTimeouts480  1DF 0001FE40 GetCommandLineA481  1E0 0001F3C0 GetCommandLineW482  1E1 0003B050 GetCompressedFileSizeA483  1E2 000637D0 GetCompressedFileSizeTransactedA484  1E3 00063830 GetCompressedFileSizeTransactedW485  1E4 0003B070 GetCompressedFileSizeW486  1E5 0001A300 GetComputerNameA487  1E6 00024290 GetComputerNameExA488  1E7 000201F0 GetComputerNameExW489  1E8 0001A460 GetComputerNameW490  1E9 00025680 GetConsoleAliasA491  1EA 00025690 GetConsoleAliasExesA492  1EB 000256A0 GetConsoleAliasExesLengthA493  1EC 000256B0 GetConsoleAliasExesLengthW494  1ED 000256C0 GetConsoleAliasExesW495  1EE 000256D0 GetConsoleAliasW496  1EF 000256E0 GetConsoleAliasesA497  1F0 000256F0 GetConsoleAliasesLengthA498  1F1 00025700 GetConsoleAliasesLengthW499  1F2 00025710 GetConsoleAliasesW500  1F3 000252E0 GetConsoleCP501  1F4 0006A150 GetConsoleCharType502  1F5 00025720 GetConsoleCommandHistoryA503  1F6 00025730 GetConsoleCommandHistoryLengthA504  1F7 00025740 GetConsoleCommandHistoryLengthW505  1F8 00025750 GetConsoleCommandHistoryW506  1F9 00025430 GetConsoleCursorInfo507  1FA 0006A1C0 GetConsoleCursorMode508  1FB 00025760 GetConsoleDisplayMode509  1FC 0006A530 GetConsoleFontInfo510  1FD 00025770 GetConsoleFontSize511  1FE 00069CA0 GetConsoleHardwareState512  1FF 00025780 GetConsoleHistoryInfo513  200          GetConsoleInputExeNameA (forwarded to kernelbase.GetConsoleInputExeNameA)514  201          GetConsoleInputExeNameW (forwarded to kernelbase.GetConsoleInputExeNameW)515  202 00069BC0 GetConsoleInputWaitHandle516  203 0006A5E0 GetConsoleKeyboardLayoutNameA517  204 0006A600 GetConsoleKeyboardLayoutNameW518  205 000252F0 GetConsoleMode519  206 0006A240 GetConsoleNlsMode520  207 00025440 GetConsoleOriginalTitleA521  208 00025450 GetConsoleOriginalTitleW522  209 00025300 GetConsoleOutputCP523  20A 00025790 GetConsoleProcessList524  20B 00025460 GetConsoleScreenBufferInfo525  20C 00025470 GetConsoleScreenBufferInfoEx526  20D 000257A0 GetConsoleSelectionInfo527  20E 00025480 GetConsoleTitleA528  20F 00025490 GetConsoleTitleW529  210 000257B0 GetConsoleWindow530  211 0004BBF0 GetCurrencyFormatA531  212 0003B090 GetCurrencyFormatEx532  213 0003B0B0 GetCurrencyFormatW533  214 00021F80 GetCurrentActCtx534  215 0001C6E0 GetCurrentActCtxWorker535  216          GetCurrentApplicationUserModelId (forwarded to kernelbase.GetCurrentApplicationUserModelId)536  217 000257C0 GetCurrentConsoleFont537  218 000257D0 GetCurrentConsoleFontEx538  219 00021050 GetCurrentDirectoryA539  21A 0001FF30 GetCurrentDirectoryW540  21B          GetCurrentPackageFamilyName (forwarded to kernelbase.GetCurrentPackageFamilyName)541  21C          GetCurrentPackageFullName (forwarded to kernelbase.GetCurrentPackageFullName)542  21D          GetCurrentPackageId (forwarded to kernelbase.GetCurrentPackageId)543  21E          GetCurrentPackageInfo (forwarded to kernelbase.GetCurrentPackageInfo)544  21F          GetCurrentPackagePath (forwarded to kernelbase.GetCurrentPackagePath)545  220 00024880 GetCurrentProcess546  221 00024890 GetCurrentProcessId547  222          GetCurrentProcessorNumber (forwarded to NTDLL.RtlGetCurrentProcessorNumber)548  223          GetCurrentProcessorNumberEx (forwarded to NTDLL.RtlGetCurrentProcessorNumberEx)549  224 000158A0 GetCurrentThread550  225 00015550 GetCurrentThreadId551  226          GetCurrentThreadStackLimits (forwarded to api-ms-win-core-processthreads-l1-1-0.GetCurrentThreadStackLimits)552  227 000423B0 GetCurrentUmsThread553  228 0003B0C0 GetDateFormatA554  229 000222F0 GetDateFormatAWorker555  22A 0003B0E0 GetDateFormatEx556  22B 000206A0 GetDateFormatW557  22C 0000A790 GetDateFormatWWorker558  22D 0003DDB0 GetDefaultCommConfigA559  22E 0003DE60 GetDefaultCommConfigW560  22F 000673E0 GetDevicePowerState561  230 00024CD0 GetDiskFreeSpaceA562  231 00024CE0 GetDiskFreeSpaceExA563  232 00024CF0 GetDiskFreeSpaceExW564  233 00024D00 GetDiskFreeSpaceW565  234          GetDiskSpaceInformationA (forwarded to api-ms-win-core-file-l1-2-3.GetDiskSpaceInformationA)566  235          GetDiskSpaceInformationW (forwarded to api-ms-win-core-file-l1-2-3.GetDiskSpaceInformationW)567  236 00038DA0 GetDllDirectoryA568  237 00021E80 GetDllDirectoryW569  238 00024D10 GetDriveTypeA570  239 00024D20 GetDriveTypeW571  23A 0004C8B0 GetDurationFormat572  23B 0003B100 GetDurationFormatEx573  23C 00020F40 GetDynamicTimeZoneInformation574  23D 0003B120 GetEnabledXStateFeatures575  23E 00038940 GetEncryptedFileVersionExt576  23F 0001FD80 GetEnvironmentStrings577  240 00025080 GetEnvironmentStringsA578  241 0001F690 GetEnvironmentStringsW579  242 0001E350 GetEnvironmentVariableA580  243 0001B620 GetEnvironmentVariableW581  244 0003B140 GetEraNameCountedString582  245 000221F0 GetErrorMode583  246 0001D060 GetExitCodeProcess584  247 0001F9C0 GetExitCodeThread585  248 0003CEA0 GetExpandedNameA586  249 0003CF90 GetExpandedNameW587  24A 00024D30 GetFileAttributesA588  24B 00024D40 GetFileAttributesExA589  24C 00024D50 GetFileAttributesExW590  24D 00063900 GetFileAttributesTransactedA591  24E 00063970 GetFileAttributesTransactedW592  24F 00024D60 GetFileAttributesW593  250 00038160 GetFileBandwidthReservation594  251 00024D70 GetFileInformationByHandle595  252 0001F650 GetFileInformationByHandleEx596  253 0003B160 GetFileMUIInfo597  254 0001F9A0 GetFileMUIPath598  255 00024D80 GetFileSize599  256 00024D90 GetFileSizeEx600  257 00024DA0 GetFileTime601  258 00024DB0 GetFileType602  259 00024DC0 GetFinalPathNameByHandleA603  25A 00024DD0 GetFinalPathNameByHandleW604  25B 00067440 GetFirmwareEnvironmentVariableA605  25C 00067460 GetFirmwareEnvironmentVariableExA606  25D 000153F0 GetFirmwareEnvironmentVariableExW607  25E 00067590 GetFirmwareEnvironmentVariableW608  25F 00022820 GetFirmwareType609  260 00024DE0 GetFullPathNameA610  261 00037B70 GetFullPathNameTransactedA611  262 00067800 GetFullPathNameTransactedW612  263 00024DF0 GetFullPathNameW613  264 0004BFF0 GetGeoInfoA614  265 00054740 GetGeoInfoEx615  266 00006020 GetGeoInfoW616  267 00024900 GetHandleInformation617  268 0003B180 GetLargePageMinimum618  269 000254A0 GetLargestConsoleWindowSize619  26A 00015BF0 GetLastError620  26B 0001E020 GetLocalTime621  26C 00020BD0 GetLocaleInfoA622  26D 0001CB40 GetLocaleInfoEx623  26E 0001FE20 GetLocaleInfoW624  26F 00017D00 GetLogicalDriveStringsA625  270 00024E00 GetLogicalDriveStringsW626  271 00017DC0 GetLogicalDrives627  272 00021070 GetLogicalProcessorInformation628  273          GetLogicalProcessorInformationEx (forwarded to api-ms-win-core-sysinfo-l1-1-0.GetLogicalProcessorInformationEx)629  274 00059C50 GetLongPathNameA630  275 00040CD0 GetLongPathNameTransactedA631  276 000613F0 GetLongPathNameTransactedW632  277 000068C0 GetLongPathNameW633  278 00063030 GetMailslotInfo634  279 00066B20 GetMaximumProcessorCount635  27A 000227C0 GetMaximumProcessorGroupCount636  27B 0003B1A0 GetMemoryErrorHandlingCapabilities637  27C 0001F1A0 GetModuleFileNameA638  27D 0001DF20 GetModuleFileNameW639  27E 0001F0B0 GetModuleHandleA640  27F 00020F90 GetModuleHandleExA641  280 0001F630 GetModuleHandleExW642  281 0001D130 GetModuleHandleW643  282 00022190 GetNLSVersion644  283 0003B1C0 GetNLSVersionEx645  284 0003B1E0 GetNamedPipeAttribute646  285 000618B0 GetNamedPipeClientComputerNameA647  286 0003B200 GetNamedPipeClientComputerNameW648  287 00061A00 GetNamedPipeClientProcessId649  288 00039020 GetNamedPipeClientSessionId650  289 00061A40 GetNamedPipeHandleStateA651  28A 0003B220 GetNamedPipeHandleStateW652  28B          GetNamedPipeInfo (forwarded to api-ms-win-core-namedpipe-l1-2-1.GetNamedPipeInfo)653  28C 00061BD0 GetNamedPipeServerProcessId654  28D 00039080 GetNamedPipeServerSessionId655  28E 00020680 GetNativeSystemInfo656  28F 000423F0 GetNextUmsListItem657  290 00040DA0 GetNextVDMCommand658  291 000392D0 GetNumaAvailableMemoryNode659  292 00067DA0 GetNumaAvailableMemoryNodeEx660  293 00020860 GetNumaHighestNodeNumber661  294 000392E0 GetNumaNodeNumberFromHandle662  295 00067E30 GetNumaNodeProcessorMask663  296 0003B240 GetNumaNodeProcessorMaskEx664  297 00039340 GetNumaProcessorNode665  298 00067EB0 GetNumaProcessorNodeEx666  299 000393B0 GetNumaProximityNode667  29A 0003B260 GetNumaProximityNodeEx668  29B 0001AEE0 GetNumberFormatA669  29C 000215C0 GetNumberFormatEx670  29D 00001060 GetNumberFormatW671  29E 0006A6B0 GetNumberOfConsoleFonts672  29F 00025310 GetNumberOfConsoleInputEvents673  2A0 000257E0 GetNumberOfConsoleMouseButtons674  2A1 000212C0 GetOEMCP675  2A2 0001C6C0 GetOverlappedResult676  2A3          GetOverlappedResultEx (forwarded to api-ms-win-core-io-l1-1-1.GetOverlappedResultEx)677  2A4          GetPackageApplicationIds (forwarded to kernelbase.GetPackageApplicationIds)678  2A5          GetPackageFamilyName (forwarded to kernelbase.GetPackageFamilyName)679  2A6          GetPackageFullName (forwarded to kernelbase.GetPackageFullName)680  2A7          GetPackageId (forwarded to kernelbase.GetPackageId)681  2A8          GetPackageInfo (forwarded to kernelbase.GetPackageInfo)682  2A9          GetPackagePath (forwarded to kernelbase.GetPackagePath)683  2AA          GetPackagePathByFullName (forwarded to kernelbase.GetPackagePathByFullName)684  2AB          GetPackagesByPackageFamily (forwarded to kernelbase.GetPackagesByPackageFamily)685  2AC 00001270 GetPhysicallyInstalledSystemMemory686  2AD 000210C0 GetPriorityClass687  2AE 00015370 GetPrivateProfileIntA688  2AF 000131B0 GetPrivateProfileIntW689  2B0 00023180 GetPrivateProfileSectionA690  2B1 000606E0 GetPrivateProfileSectionNamesA691  2B2 00060710 GetPrivateProfileSectionNamesW692  2B3 00020CD0 GetPrivateProfileSectionW693  2B4 00015260 GetPrivateProfileStringA694  2B5 00012360 GetPrivateProfileStringW695  2B6 00060740 GetPrivateProfileStructA696  2B7 000608E0 GetPrivateProfileStructW697  2B8 0001AEC0 GetProcAddress698  2B9 0001C110 GetProcessAffinityMask699  2BA 00039FE0 GetProcessDEPPolicy700  2BB          GetProcessDefaultCpuSets (forwarded to api-ms-win-core-processthreads-l1-1-3.GetProcessDefaultCpuSets)701  2BC 0003B280 GetProcessGroupAffinity702  2BD 0003B2A0 GetProcessHandleCount703  2BE 00015BB0 GetProcessHeap704  2BF 0003B2C0 GetProcessHeaps705  2C0 0001CFD0 GetProcessId706  2C1 000207E0 GetProcessIdOfThread707  2C2 000248A0 GetProcessInformation708  2C3 0001FDC0 GetProcessIoCounters709  2C4          GetProcessMitigationPolicy (forwarded to api-ms-win-core-processthreads-l1-1-1.GetProcessMitigationPolicy)710  2C5 00023E70 GetProcessPreferredUILanguages711  2C6 0003B2E0 GetProcessPriorityBoost712  2C7 0003B300 GetProcessShutdownParameters713  2C8 0001AAD0 GetProcessTimes714  2C9 000220A0 GetProcessVersion715  2CA 00043FD0 GetProcessWorkingSetSize716  2CB 0003B320 GetProcessWorkingSetSizeEx717  2CC          GetProcessorSystemCycleTime (forwarded to api-ms-win-core-sysinfo-l1-2-2.GetProcessorSystemCycleTime)718  2CD 00021150 GetProductInfo719  2CE 000153E0 GetProfileIntA720  2CF 00013520 GetProfileIntW721  2D0 00060A90 GetProfileSectionA722  2D1 00060AA0 GetProfileSectionW723  2D2 00060AB0 GetProfileStringA724  2D3 00060AE0 GetProfileStringW725  2D4 00015DD0 GetQueuedCompletionStatus726  2D5 0003B340 GetQueuedCompletionStatusEx727  2D6 000614C0 GetShortPathNameA728  2D7 00006400 GetShortPathNameW729  2D8          GetStagedPackagePathByFullName (forwarded to kernelbase.GetStagedPackagePathByFullName)730  2D9 00021960 GetStartupInfoA731  2DA 0001D830 GetStartupInfoW732  2DB          GetStateFolder (forwarded to kernelbase.GetStateFolder)733  2DC 0001D490 GetStdHandle734  2DD 0003B360 GetStringScripts735  2DE 0003B380 GetStringTypeA736  2DF 0003B380 GetStringTypeExA737  2E0 00022670 GetStringTypeExW738  2E1 0001E330 GetStringTypeW739  2E2          GetSystemAppDataKey (forwarded to kernelbase.GetSystemAppDataKey)740  2E3          GetSystemCpuSetInformation (forwarded to api-ms-win-core-processthreads-l1-1-3.GetSystemCpuSetInformation)741  2E4 0003A030 GetSystemDEPPolicy742  2E5 00020CB0 GetSystemDefaultLCID743  2E6 00020FF0 GetSystemDefaultLangID744  2E7 00001100 GetSystemDefaultLocaleName745  2E8 00020660 GetSystemDefaultUILanguage746  2E9 0001D3E0 GetSystemDirectoryA747  2EA 0001AE00 GetSystemDirectoryW748  2EB 0003B3A0 GetSystemFileCacheSize749  2EC 00038A90 GetSystemFirmwareTable750  2ED 0001DBB0 GetSystemInfo751  2EE 00017BC0 GetSystemPowerStatus752  2EF 00021340 GetSystemPreferredUILanguages753  2F0 0003A070 GetSystemRegistryQuota754  2F1 0001B580 GetSystemTime755  2F2 00020740 GetSystemTimeAdjustment756  2F3 00017B80 GetSystemTimeAsFileTime757  2F4 00025040 GetSystemTimePreciseAsFileTime758  2F5 0001FC90 GetSystemTimes759  2F6 0003B3C0 GetSystemWindowsDirectoryA760  2F7 00009110 GetSystemWindowsDirectoryW761  2F8 000251B0 GetSystemWow64DirectoryA762  2F9 000251C0 GetSystemWow64DirectoryW763  2FA 00068080 GetTapeParameters764  2FB 000435F0 GetTapePosition765  2FC 00043680 GetTapeStatus766  2FD 00024E10 GetTempFileNameA767  2FE 00024E20 GetTempFileNameW768  2FF 00024E30 GetTempPathA769  300 00024E40 GetTempPathW770  301 00020570 GetThreadContext771  302          GetThreadDescription (forwarded to api-ms-win-core-processthreads-l1-1-3.GetThreadDescription)772  303 0003B3D0 GetThreadErrorMode773  304 0003B3F0 GetThreadGroupAffinity774  305 0003B410 GetThreadIOPendingFlag775  306 00020C10 GetThreadId776  307 0003B430 GetThreadIdealProcessorEx777  308 000248B0 GetThreadInformation778  309 0001A0F0 GetThreadLocale779  30A 0001D0B0 GetThreadPreferredUILanguages780  30B 0001B880 GetThreadPriority781  30C 0003B450 GetThreadPriorityBoost782  30D          GetThreadSelectedCpuSets (forwarded to api-ms-win-core-processthreads-l1-1-3.GetThreadSelectedCpuSets)783  30E 000680E0 GetThreadSelectorEntry784  30F 00015C30 GetThreadTimes785  310 00024330 GetThreadUILanguage786  311 00015640 GetTickCount787  312 00015D30 GetTickCount64788  313 0003B470 GetTimeFormatA789  314 00023E90 GetTimeFormatAWorker790  315 0003B490 GetTimeFormatEx791  316 0001F1C0 GetTimeFormatW792  317 00009A80 GetTimeFormatWWorker793  318 00020900 GetTimeZoneInformation794  319 00001070 GetTimeZoneInformationForYear795  31A 0003B4B0 GetUILanguageInfo796  31B 00042430 GetUmsCompletionListEvent797  31C 00042470 GetUmsSystemThreadInformation798  31D 000548A0 GetUserDefaultGeoName799  31E 0001FBA0 GetUserDefaultLCID800  31F 0003B4D0 GetUserDefaultLangID801  320 0001E370 GetUserDefaultLocaleName802  321 00020B30 GetUserDefaultUILanguage803  322 0001F1E0 GetUserGeoID804  323 00020590 GetUserPreferredUILanguages805  324 00041760 GetVDMCurrentDirectories806  325 00021010 GetVersion807  326 00020400 GetVersionExA808  327 0001F980 GetVersionExW809  328 00024E50 GetVolumeInformationA810  329 00024E60 GetVolumeInformationByHandleW811  32A 00024E70 GetVolumeInformationW812  32B 00023FD0 GetVolumeNameForVolumeMountPointA813  32C 00024870 GetVolumeNameForVolumeMountPointW814  32D 00066080 GetVolumePathNameA815  32E 00024E80 GetVolumePathNameW816  32F 00066260 GetVolumePathNamesForVolumeNameA817  330 00024E90 GetVolumePathNamesForVolumeNameW818  331 00022230 GetWindowsDirectoryA819  332 000228C0 GetWindowsDirectoryW820  333 00015BD0 GetWriteWatch821  334 0003B4F0 GetXStateFeaturesMask822  335 00012660 GlobalAddAtomA823  336 0005A190 GlobalAddAtomExA824  337 00013190 GlobalAddAtomExW825  338 00012910 GlobalAddAtomW826  339 00017E10 GlobalAlloc827  33A 00038AB0 GlobalCompact828  33B 00012850 GlobalDeleteAtom829  33C 0005A1B0 GlobalFindAtomA830  33D 00012E00 GlobalFindAtomW831  33E 00038AD0 GlobalFix832  33F 0001FA10 GlobalFlags833  340 00015B50 GlobalFree834  341 0005A1D0 GlobalGetAtomNameA835  342 00012680 GlobalGetAtomNameW836  343 000200F0 GlobalHandle837  344 00015990 GlobalLock838  345 0001C900 GlobalMemoryStatus839  346 00020530 GlobalMemoryStatusEx840  347 00016BB0 GlobalReAlloc841  348 00017E30 GlobalSize842  349 00038AF0 GlobalUnWire843  34A 00038B00 GlobalUnfix844  34B 000158B0 GlobalUnlock845  34C 00038B20 GlobalWire846  34D 00064290 Heap32First847  34E 00064530 Heap32ListFirst848  34F 00064630 Heap32ListNext849  350 00064730 Heap32Next850  351          HeapAlloc (forwarded to NTDLL.RtlAllocateHeap)851  352 0003B510 HeapCompact852  353 0001FF50 HeapCreate853  354 000212A0 HeapDestroy854  355 00015570 HeapFree855  356 0003B530 HeapLock856  357 0003B550 HeapQueryInformation857  358          HeapReAlloc (forwarded to NTDLL.RtlReAllocateHeap)858  359 000203E0 HeapSetInformation859  35A          HeapSize (forwarded to NTDLL.RtlSizeHeap)860  35B 0003B570 HeapSummary861  35C 0003B590 HeapUnlock862  35D 0001C0F0 HeapValidate863  35E 0003B5B0 HeapWalk864  35F 00001090 IdnToAscii865  360 0003B5D0 IdnToNameprepUnicode866  361 0003B5F0 IdnToUnicode867  362 0005A200 InitAtomTable868  363          InitOnceBeginInitialize (forwarded to api-ms-win-core-synch-l1-2-0.InitOnceBeginInitialize)869  364          InitOnceComplete (forwarded to api-ms-win-core-synch-l1-2-0.InitOnceComplete)870  365          InitOnceExecuteOnce (forwarded to api-ms-win-core-synch-l1-2-0.InitOnceExecuteOnce)871  366          InitOnceInitialize (forwarded to NTDLL.RtlRunOnceInitialize)872  367          InitializeConditionVariable (forwarded to NTDLL.RtlInitializeConditionVariable)873  368 0003B630 InitializeContext874  369 0003B610 InitializeContext2875  36A          InitializeCriticalSection (forwarded to NTDLL.RtlInitializeCriticalSection)876  36B 000249E0 InitializeCriticalSectionAndSpinCount877  36C 000249F0 InitializeCriticalSectionEx878  36D          InitializeEnclave (forwarded to api-ms-win-core-enclave-l1-1-0.InitializeEnclave)879  36E          InitializeProcThreadAttributeList (forwarded to api-ms-win-core-processthreads-l1-1-0.InitializeProcThreadAttributeList)880  36F          InitializeSListHead (forwarded to NTDLL.RtlInitializeSListHead)881  370          InitializeSRWLock (forwarded to NTDLL.RtlInitializeSRWLock)882  371 0003B650 InitializeSynchronizationBarrier883  372          InstallELAMCertificateInfo (forwarded to api-ms-win-core-sysinfo-l1-2-1.InstallELAMCertificateInfo)884  373          InterlockedFlushSList (forwarded to NTDLL.RtlInterlockedFlushSList)885  374          InterlockedPopEntrySList (forwarded to NTDLL.RtlInterlockedPopEntrySList)886  375          InterlockedPushEntrySList (forwarded to NTDLL.RtlInterlockedPushEntrySList)887  376          InterlockedPushListSList (forwarded to NTDLL.RtlInterlockedPushListSList)888  377          InterlockedPushListSListEx (forwarded to NTDLL.RtlInterlockedPushListSListEx)889  378 0006A7D0 InvalidateConsoleDIBits890  379 0003A100 IsBadCodePtr891  37A 0003A110 IsBadHugeReadPtr892  37B 0003A120 IsBadHugeWritePtr893  37C 00015AA0 IsBadReadPtr894  37D 0003A130 IsBadStringPtrA895  37E 0003A180 IsBadStringPtrW896  37F 00066BE0 IsBadWritePtr897  380 0004B040 IsCalendarLeapDay898  381 0004B120 IsCalendarLeapMonth899  382 0004B210 IsCalendarLeapYear900  383 00021940 IsDBCSLeadByte901  384 0003B670 IsDBCSLeadByteEx902  385 000201B0 IsDebuggerPresent903  386          IsEnclaveTypeSupported (forwarded to api-ms-win-core-enclave-l1-1-0.IsEnclaveTypeSupported)904  387 0003B690 IsNLSDefinedString905  388 00037930 IsNativeVhdBoot906  389 0003B6B0 IsNormalizedString907  38A          IsProcessCritical (forwarded to api-ms-win-core-processthreads-l1-1-2.IsProcessCritical)908  38B 000208C0 IsProcessInJob909  38C 0001DB40 IsProcessorFeaturePresent910  38D 00039600 IsSystemResumeAutomatic911  38E 0001D0F0 IsThreadAFiber912  38F          IsThreadpoolTimerSet (forwarded to NTDLL.TpIsTimerSet)913  390          IsUserCetAvailableInEnvironment (forwarded to api-ms-win-core-sysinfo-l1-2-6.IsUserCetAvailableInEnvironment)914  391 000082B0 IsValidCalDateTime915  392 0001FC70 IsValidCodePage916  393 0003B6D0 IsValidLanguageGroup917  394 0001FEA0 IsValidLocale918  395 0003B6F0 IsValidLocaleName919  396 0003B710 IsValidNLSVersion920  397          IsWow64GuestMachineSupported (forwarded to api-ms-win-core-wow64-l1-1-2.IsWow64GuestMachineSupported)921  398 0001F670 IsWow64Process922  399          IsWow64Process2 (forwarded to api-ms-win-core-wow64-l1-1-1.IsWow64Process2)923  39A 0003B730 K32EmptyWorkingSet924  39B 0003B750 K32EnumDeviceDrivers925  39C 0003B770 K32EnumPageFilesA926  39D 0003B790 K32EnumPageFilesW927  39E 000210E0 K32EnumProcessModules928  39F 0003B7B0 K32EnumProcessModulesEx929  3A0 0003B7D0 K32EnumProcesses930  3A1 0003B7F0 K32GetDeviceDriverBaseNameA931  3A2 0003B810 K32GetDeviceDriverBaseNameW932  3A3 0003B830 K32GetDeviceDriverFileNameA933  3A4 0003B850 K32GetDeviceDriverFileNameW934  3A5 0003B870 K32GetMappedFileNameA935  3A6 0003B890 K32GetMappedFileNameW936  3A7 0003B8B0 K32GetModuleBaseNameA937  3A8 0003B8D0 K32GetModuleBaseNameW938  3A9 0003B8F0 K32GetModuleFileNameExA939  3AA 000242F0 K32GetModuleFileNameExW940  3AB 0001F0D0 K32GetModuleInformation941  3AC 0003B910 K32GetPerformanceInfo942  3AD 0003B930 K32GetProcessImageFileNameA943  3AE 00020060 K32GetProcessImageFileNameW944  3AF 0003B950 K32GetProcessMemoryInfo945  3B0 0003B990 K32GetWsChanges946  3B1 0003B970 K32GetWsChangesEx947  3B2 0003B9B0 K32InitializeProcessForWsWatch948  3B3 0003B9F0 K32QueryWorkingSet949  3B4 0003B9D0 K32QueryWorkingSetEx950  3B5 00020640 LCIDToLocaleName951  3B6 0003BA10 LCMapStringA952  3B7 00015CD0 LCMapStringEx953  3B8 000184A0 LCMapStringW954  3B9 0003D0C0 LZClose955  3BA 0003D180 LZCloseFile956  3BB 00037A60 LZCopy957  3BC 0003D250 LZCreateFileW958  3BD 00037B60 LZDone959  3BE 0003D390 LZInit960  3BF 0003D540 LZOpenFileA961  3C0 0003D630 LZOpenFileW962  3C1 0003D6F0 LZRead963  3C2 0003D960 LZSeek964  3C3 000213E0 LZStart965  3C4          LeaveCriticalSection (forwarded to NTDLL.RtlLeaveCriticalSection)966  3C5          LeaveCriticalSectionWhenCallbackReturns (forwarded to NTDLL.TpCallbackLeaveCriticalSectionOnCompletion)967  3C6 00017F90 LoadAppInitDlls968  3C7          LoadEnclaveData (forwarded to api-ms-win-core-enclave-l1-1-0.LoadEnclaveData)969  3C8 000204F0 LoadLibraryA970  3C9 0001FBC0 LoadLibraryExA971  3CA 0001ADC0 LoadLibraryExW972  3CB 0001FEE0 LoadLibraryW973  3CC 00066C70 LoadModule974  3CD 00025020 LoadPackagedLibrary975  3CE 0001B360 LoadResource976  3CF 0003BA30 LoadStringBaseExW977  3D0 00038C60 LoadStringBaseW978  3D1 000184C0 LocalAlloc979  3D2 00038AB0 LocalCompact980  3D3 00024EA0 LocalFileTimeToFileTime981  3D4          LocalFileTimeToLocalSystemTime (forwarded to api-ms-win-core-timezone-l1-1-1.LocalFileTimeToLocalSystemTime)982  3D5 00068100 LocalFlags983  3D6 00017B60 LocalFree984  3D7 00038B60 LocalHandle985  3D8 0003BA50 LocalLock986  3D9 0001FD60 LocalReAlloc987  3DA 00038AB0 LocalShrink988  3DB 0001B420 LocalSize989  3DC          LocalSystemTimeToLocalFileTime (forwarded to api-ms-win-core-timezone-l1-1-1.LocalSystemTimeToLocalFileTime)990  3DD 0003BA70 LocalUnlock991  3DE 0001E080 LocaleNameToLCID992  3DF 0003BA90 LocateXStateFeature993  3E0 00024EB0 LockFile994  3E1 00024EC0 LockFileEx995  3E2 0001B3C0 LockResource996  3E3 0003BAB0 MapUserPhysicalPages997  3E4 00044000 MapUserPhysicalPagesScatter998  3E5 0001D7F0 MapViewOfFile999  3E6 0001C9F0 MapViewOfFileEx1000  3E7 0003BAD0 MapViewOfFileExNuma1001  3E8          MapViewOfFileFromApp (forwarded to api-ms-win-core-memory-l1-1-1.MapViewOfFileFromApp)1002  3E9 000649E0 Module32First1003  3EA 0001DBD0 Module32FirstW1004  3EB 00064B20 Module32Next1005  3EC 00019FA0 Module32NextW1006  3ED 00063A50 MoveFileA1007  3EE 00063A80 MoveFileExA1008  3EF 00020C90 MoveFileExW1009  3F0 00063AB0 MoveFileTransactedA1010  3F1 00023DB0 MoveFileTransactedW1011  3F2 00022890 MoveFileW1012  3F3 00063B90 MoveFileWithProgressA1013  3F4 0003BAF0 MoveFileWithProgressW1014  3F5 00025000 MulDiv1015  3F6 00015810 MultiByteToWideChar1016  3F7 0003BB10 NeedCurrentDirectoryForExePathA1017  3F8 0003BB30 NeedCurrentDirectoryForExePathW1018  3F9 00025250 NlsCheckPolicy1019  3FA 00025260 NlsGetCacheUpdateCount1020  3FB 00025270 NlsUpdateLocale1021  3FC 00025280 NlsUpdateSystemLocale1022  3FD 0003BB50 NormalizeString1023  3FE 0003BB70 NotifyMountMgr1024  3FF 0004E3F0 NotifyUILanguageChange1025  400 0003A1E0 NtVdm64CreateProcessInternalW1026  401 0001EA80 OOBEComplete1027  402          OfferVirtualMemory (forwarded to api-ms-win-core-memory-l1-1-2.OfferVirtualMemory)1028  403 00069BE0 OpenConsoleW1029  404 0003BB90 OpenConsoleWStub1030  405 00024A00 OpenEventA1031  406 00024A10 OpenEventW1032  407 00062580 OpenFile1033  408 0003BBA0 OpenFileById1034  409 00021610 OpenFileMappingA1035  40A 00020720 OpenFileMappingW1036  40B 0005C320 OpenJobObjectA1037  40C 0005C3A0 OpenJobObjectW1038  40D 0001C020 OpenMutexA1039  40E 00024A20 OpenMutexW1040  40F          OpenPackageInfoByFullName (forwarded to kernelbase.OpenPackageInfoByFullName)1041  410 00061F10 OpenPrivateNamespaceA1042  411 00022290 OpenPrivateNamespaceW1043  412 0001ADE0 OpenProcess1044  413          OpenProcessToken (forwarded to api-ms-win-core-processthreads-l1-1-0.OpenProcessToken)1045  414 000213E0 OpenProfileUserMapping1046  415 00063250 OpenSemaphoreA1047  416 00024A30 OpenSemaphoreW1048  417          OpenState (forwarded to kernelbase.OpenState)1049  418          OpenStateExplicit (forwarded to kernelbase.OpenStateExplicit)1050  419 0001C850 OpenThread1051  41A          OpenThreadToken (forwarded to api-ms-win-core-processthreads-l1-1-0.OpenThreadToken)1052  41B 000632C0 OpenWaitableTimerA1053  41C 00024A40 OpenWaitableTimerW1054  41D 000242D0 OutputDebugStringA1055  41E 0001D110 OutputDebugStringW1056  41F          PackageFamilyNameFromFullName (forwarded to kernelbase.PackageFamilyNameFromFullName)1057  420          PackageFamilyNameFromId (forwarded to kernelbase.PackageFamilyNameFromId)1058  421          PackageFullNameFromId (forwarded to kernelbase.PackageFullNameFromId)1059  422          PackageIdFromFullName (forwarded to kernelbase.PackageIdFromFullName)1060  423          PackageNameAndPublisherIdFromFamilyName (forwarded to kernelbase.PackageNameAndPublisherIdFromFamilyName)1061  424          ParseApplicationUserModelId (forwarded to kernelbase.ParseApplicationUserModelId)1062  425 00025320 PeekConsoleInputA1063  426 00025330 PeekConsoleInputW1064  427 0003BBC0 PeekNamedPipe1065  428 0001B3A0 PostQueuedCompletionStatus1066  429 0001FCD0 PowerClearRequest1067  42A 0001EE00 PowerCreateRequest1068  42B 0001FBE0 PowerSetRequest1069  42C          PrefetchVirtualMemory (forwarded to api-ms-win-core-memory-l1-1-1.PrefetchVirtualMemory)1070  42D 000436B0 PrepareTape1071  42E 00022630 PrivCopyFileExW1072  42F 00063CA0 PrivMoveFileIdentityW1073  430 00064C50 Process32First1074  431 00022690 Process32FirstW1075  432 00064D50 Process32Next1076  433 00022430 Process32NextW1077  434 0001C7F0 ProcessIdToSessionId1078  435 0003BBE0 PssCaptureSnapshot1079  436 0003BC00 PssDuplicateSnapshot1080  437 0003BC20 PssFreeSnapshot1081  438 0003BC40 PssQuerySnapshot1082  439 0003BC60 PssWalkMarkerCreate1083  43A 0003BC80 PssWalkMarkerFree1084  43B 0003BCA0 PssWalkMarkerGetPosition1085  43C 0003BCC0 PssWalkMarkerRewind1086  43D 0003BCE0 PssWalkMarkerSeek1087  43E 0003BCC0 PssWalkMarkerSeekToBeginning1088  43F 0003BCE0 PssWalkMarkerSetPosition1089  440 0003BCA0 PssWalkMarkerTell1090  441 0003BD00 PssWalkSnapshot1091  442 0001C2B0 PulseEvent1092  443 00025120 PurgeComm1093  444 0003BD20 QueryActCtxSettingsW1094  445 00012B70 QueryActCtxSettingsWWorker1095  446 0001DFA0 QueryActCtxW1096  447 000124D0 QueryActCtxWWorker1097  448          QueryDepthSList (forwarded to NTDLL.RtlQueryDepthSList)1098  449 00064EF0 QueryDosDeviceA1099  44A 00024ED0 QueryDosDeviceW1100  44B 0003BD40 QueryFullProcessImageNameA1101  44C 0001C870 QueryFullProcessImageNameW1102  44D 00021F00 QueryIdleProcessorCycleTime1103  44E 0003BD60 QueryIdleProcessorCycleTimeEx1104  44F 0001D850 QueryInformationJobObject1105  450 0005C470 QueryIoRateControlInformationJobObject1106  451 0003BD80 QueryMemoryResourceNotification1107  452 00015C10 QueryPerformanceCounter1108  453 0001AEA0 QueryPerformanceFrequency1109  454 0003BDA0 QueryProcessAffinityUpdateMode1110  455 00021F20 QueryProcessCycleTime1111  456          QueryProtectedPolicy (forwarded to api-ms-win-core-processthreads-l1-1-2.QueryProtectedPolicy)1112  457 000010E0 QueryThreadCycleTime1113  458 000441B0 QueryThreadProfiling1114  459 0003BDC0 QueryThreadpoolStackInformation1115  45A 000424F0 QueryUmsThreadInformation1116  45B 0001D0D0 QueryUnbiasedInterruptTime1117  45C 0001E0E0 QueueUserAPC1118  45D 00020FB0 QueueUserWorkItem1119  45E 000710B0 QuirkGetData2Worker1120  45F 00071180 QuirkGetDataWorker1121  460 00071240 QuirkIsEnabled2Worker1122  461 00015D60 QuirkIsEnabled3Worker1123  462 00071390 QuirkIsEnabledForPackage2Worker1124  463 00009C60 QuirkIsEnabledForPackage3Worker1125  464 00009DD0 QuirkIsEnabledForPackage4Worker1126  465 00009060 QuirkIsEnabledForPackageWorker1127  466 0001F3E0 QuirkIsEnabledForProcessWorker1128  467 00009120 QuirkIsEnabledWorker1129  468 0001FCB0 RaiseException1130  469          RaiseFailFastException (forwarded to kernelbase.RaiseFailFastException)1131  46A 0003A3F0 RaiseInvalid16BitExeError1132  46B 0003BE00 ReOpenFile1133  46C 00025340 ReadConsoleA1134  46D 00025350 ReadConsoleInputA1135  46E          ReadConsoleInputExA (forwarded to kernelbase.ReadConsoleInputExA)1136  46F          ReadConsoleInputExW (forwarded to kernelbase.ReadConsoleInputExW)1137  470 00025360 ReadConsoleInputW1138  471 000254B0 ReadConsoleOutputA1139  472 000254C0 ReadConsoleOutputAttribute1140  473 000254D0 ReadConsoleOutputCharacterA1141  474 000254E0 ReadConsoleOutputCharacterW1142  475 000254F0 ReadConsoleOutputW1143  476 00025370 ReadConsoleW1144  477 0003BE20 ReadDirectoryChangesExW1145  478 000242B0 ReadDirectoryChangesW1146  479 00024EE0 ReadFile1147  47A 00024EF0 ReadFileEx1148  47B 00024F00 ReadFileScatter1149  47C 0001C4F0 ReadProcessMemory1150  47D 000441F0 ReadThreadProfilingData1151  47E          ReclaimVirtualMemory (forwarded to api-ms-win-core-memory-l1-1-2.ReclaimVirtualMemory)1152  47F 00024220 RegCloseKey1153  480 0003BE40 RegCopyTreeW1154  481 0003BE60 RegCreateKeyExA1155  482 0003BE80 RegCreateKeyExW1156  483 0003BEA0 RegDeleteKeyExA1157  484 0003BEC0 RegDeleteKeyExW1158  485 0003BEE0 RegDeleteTreeA1159  486 0003BF00 RegDeleteTreeW1160  487 0003BF20 RegDeleteValueA1161  488 0003BF40 RegDeleteValueW1162  489 0003BF60 RegDisablePredefinedCacheEx1163  48A 0003BF80 RegEnumKeyExA1164  48B 0003BFD0 RegEnumKeyExW1165  48C 0003C020 RegEnumValueA1166  48D 0003C070 RegEnumValueW1167  48E 0003C0C0 RegFlushKey1168  48F 0003C0E0 RegGetKeySecurity1169  490 0003C100 RegGetValueA1170  491 00021DF0 RegGetValueW1171  492 0003C120 RegLoadKeyA1172  493 0003C140 RegLoadKeyW1173  494 0003C160 RegLoadMUIStringA1174  495 0003C180 RegLoadMUIStringW1175  496 0003C1A0 RegNotifyChangeKeyValue1176  497 000222D0 RegOpenCurrentUser1177  498 0003C1C0 RegOpenKeyExA1178  499 00020A00 RegOpenKeyExW1179  49A 000222B0 RegOpenUserClassesRoot1180  49B 0003C1E0 RegQueryInfoKeyA1181  49C 0003C260 RegQueryInfoKeyW1182  49D 0003C2E0 RegQueryValueExA1183  49E 0003C300 RegQueryValueExW1184  49F 0003C320 RegRestoreKeyA1185  4A0 0003C340 RegRestoreKeyW1186  4A1 0003C360 RegSaveKeyExA1187  4A2 0003C380 RegSaveKeyExW1188  4A3 0003C3A0 RegSetKeySecurity1189  4A4 0003C3C0 RegSetValueExA1190  4A5 0003C3E0 RegSetValueExW1191  4A6 0003C400 RegUnLoadKeyA1192  4A7 0003C420 RegUnLoadKeyW1193  4A8 00021690 RegisterApplicationRecoveryCallback1194  4A9 00021320 RegisterApplicationRestart1195  4AA 0003C440 RegisterBadMemoryNotification1196  4AB 0006A2B0 RegisterConsoleIME1197  4AC 0006A2E0 RegisterConsoleOS21198  4AD 00069D20 RegisterConsoleVDM1199  4AE 0001F9E0 RegisterWaitForInputIdle1200  4AF 000154D0 RegisterWaitForSingleObject1201  4B0 0003C460 RegisterWaitForSingleObjectEx1202  4B1 0001E9C0 RegisterWaitUntilOOBECompleted1203  4B2 00038B30 RegisterWowBaseHandlers1204  4B3 00041CF0 RegisterWowExec1205  4B4 00021220 ReleaseActCtx1206  4B5 0001D810 ReleaseActCtxWorker1207  4B6 00024A50 ReleaseMutex1208  4B7          ReleaseMutexWhenCallbackReturns (forwarded to NTDLL.TpCallbackReleaseMutexOnCompletion)1209  4B8          ReleaseSRWLockExclusive (forwarded to NTDLL.RtlReleaseSRWLockExclusive)1210  4B9          ReleaseSRWLockShared (forwarded to NTDLL.RtlReleaseSRWLockShared)1211  4BA 00024A60 ReleaseSemaphore1212  4BB          ReleaseSemaphoreWhenCallbackReturns (forwarded to NTDLL.TpCallbackReleaseSemaphoreOnCompletion)1213  4BC 00024F10 RemoveDirectoryA1214  4BD 00037E60 RemoveDirectoryTransactedA1215  4BE 00062DC0 RemoveDirectoryTransactedW1216  4BF 00024F20 RemoveDirectoryW1217  4C0          RemoveDllDirectory (forwarded to api-ms-win-core-libraryloader-l1-1-0.RemoveDllDirectory)1218  4C1 0005B650 RemoveLocalAlternateComputerNameA1219  4C2 0005B6B0 RemoveLocalAlternateComputerNameW1220  4C3 00038B40 RemoveSecureMemoryCacheCallback1221  4C4          RemoveVectoredContinueHandler (forwarded to NTDLL.RtlRemoveVectoredContinueHandler)1222  4C5          RemoveVectoredExceptionHandler (forwarded to NTDLL.RtlRemoveVectoredExceptionHandler)1223  4C6 0003C480 ReplaceFile1224  4C7 00062B00 ReplaceFileA1225  4C8 0003C480 ReplaceFileW1226  4C9 0003A5A0 ReplacePartitionUnit1227  4CA 000395E0 RequestDeviceWakeup1228  4CB 000395E0 RequestWakeupLatency1229  4CC 00024A70 ResetEvent1230  4CD 00017B40 ResetWriteWatch1231  4CE 00025380 ResizePseudoConsole1232  4CF          ResolveDelayLoadedAPI (forwarded to NTDLL.LdrResolveDelayLoadedAPI)1233  4D0          ResolveDelayLoadsFromDll (forwarded to NTDLL.LdrResolveDelayLoadsFromDll)1234  4D1 000209E0 ResolveLocaleName1235  4D2          RestoreLastError (forwarded to NTDLL.RtlRestoreLastWin32Error)1236  4D3 0001E0C0 ResumeThread1237  4D4 000213A0 RtlAddFunctionTable1238  4D5 000246C0 RtlCaptureContext1239  4D6 00021E30 RtlCaptureStackBackTrace1240  4D7 0003C4A0 RtlCompareMemory1241  4D8 0003C4C0 RtlCopyMemory1242  4D9 0003C4E0 RtlDeleteFunctionTable1243  4DA 0003C500 RtlFillMemory1244  4DB 0003C530 RtlInstallFunctionTableCallback1245  4DC 0001D2F0 RtlLookupFunctionEntry1246  4DD 000246F0 RtlMoveMemory1247  4DE 0001D3C0 RtlPcToFileHeader1248  4DF 0003C550 RtlRaiseException1249  4E0 0003C570 RtlRestoreContext1250  4E1 0003C590 RtlUnwind1251  4E2 0001F9F0 RtlUnwindEx1252  4E3 00001010 RtlVirtualUnwind1253  4E4          RtlZeroMemory (forwarded to NTDLL.RtlZeroMemory)1254  4E5 00025500 ScrollConsoleScreenBufferA1255  4E6 00025510 ScrollConsoleScreenBufferW1256  4E7 0003C5B0 SearchPathA1257  4E8 000221D0 SearchPathW1258  4E9 0003C5D0 SetCachedSigningLevel1259  4EA 0004C0C0 SetCalendarInfoA1260  4EB 0003C5F0 SetCalendarInfoW1261  4EC 00043DD0 SetComPlusPackageInstallStatus1262  4ED 00025130 SetCommBreak1263  4EE 00025140 SetCommConfig1264  4EF 00025150 SetCommMask1265  4F0 00025160 SetCommState1266  4F1 00025170 SetCommTimeouts1267  4F2 0003C610 SetComputerNameA1268  4F3 0003C630 SetComputerNameEx2W1269  4F4 0003C650 SetComputerNameExA1270  4F5 0003C670 SetComputerNameExW1271  4F6 0003C690 SetComputerNameW1272  4F7 00025520 SetConsoleActiveScreenBuffer1273  4F8 00025530 SetConsoleCP1274  4F9 00025390 SetConsoleCtrlHandler1275  4FA 00069DD0 SetConsoleCursor1276  4FB 00025540 SetConsoleCursorInfo1277  4FC 0006A340 SetConsoleCursorMode1278  4FD 00025550 SetConsoleCursorPosition1279  4FE 000257F0 SetConsoleDisplayMode1280  4FF 0006A710 SetConsoleFont1281  500 00069E30 SetConsoleHardwareState1282  501 00025800 SetConsoleHistoryInfo1283  502 0006A770 SetConsoleIcon1284  503          SetConsoleInputExeNameA (forwarded to kernelbase.SetConsoleInputExeNameA)1285  504          SetConsoleInputExeNameW (forwarded to kernelbase.SetConsoleInputExeNameW)1286  505 00069E90 SetConsoleKeyShortcuts1287  506 0006A3B0 SetConsoleLocalEUDC1288  507 000213E0 SetConsoleMaximumWindowSize1289  508 00069F20 SetConsoleMenuClose1290  509 000253A0 SetConsoleMode1291  50A 0006A470 SetConsoleNlsMode1292  50B 00025810 SetConsoleNumberOfCommandsA1293  50C 00025820 SetConsoleNumberOfCommandsW1294  50D 0006A4D0 SetConsoleOS2OemFormat1295  50E 00025560 SetConsoleOutputCP1296  50F 00069F80 SetConsolePalette1297  510 00025570 SetConsoleScreenBufferInfoEx1298  511 00025580 SetConsoleScreenBufferSize1299  512 00025590 SetConsoleTextAttribute1300  513 000255A0 SetConsoleTitleA1301  514 000255B0 SetConsoleTitleW1302  515 000255C0 SetConsoleWindowInfo1303  516          SetCriticalSectionSpinCount (forwarded to NTDLL.RtlSetCriticalSectionSpinCount)1304  517 00025830 SetCurrentConsoleFontEx1305  518 0003C6B0 SetCurrentDirectoryA1306  519 00021360 SetCurrentDirectoryW1307  51A 0003E550 SetDefaultCommConfigA1308  51B 0003E600 SetDefaultCommConfigW1309  51C          SetDefaultDllDirectories (forwarded to api-ms-win-core-libraryloader-l1-1-0.SetDefaultDllDirectories)1310  51D 00066A10 SetDllDirectoryA1311  51E 00020A60 SetDllDirectoryW1312  51F 0003C6D0 SetDynamicTimeZoneInformation1313  520 00024F30 SetEndOfFile1314  521 00068300 SetEnvironmentStringsA1315  522 0003C6F0 SetEnvironmentStringsW1316  523 0001E040 SetEnvironmentVariableA1317  524 000209C0 SetEnvironmentVariableW1318  525 0001C810 SetErrorMode1319  526 00024A80 SetEvent1320  527          SetEventWhenCallbackReturns (forwarded to NTDLL.TpCallbackSetEventOnCompletion)1321  528 0003C710 SetFileApisToANSI1322  529 0003C730 SetFileApisToOEM1323  52A 00024F40 SetFileAttributesA1324  52B 00064160 SetFileAttributesTransactedA1325  52C 000641C0 SetFileAttributesTransactedW1326  52D 00024F50 SetFileAttributesW1327  52E 00038210 SetFileBandwidthReservation1328  52F 0001DF40 SetFileCompletionNotificationModes1329  530 00024F60 SetFileInformationByHandle1330  531 0003C750 SetFileIoOverlappedRange1331  532 00024F70 SetFilePointer1332  533 00024F80 SetFilePointerEx1333  534 00038350 SetFileShortNameA1334  535 000383A0 SetFileShortNameW1335  536 00024F90 SetFileTime1336  537 00024FA0 SetFileValidData1337  538 000675B0 SetFirmwareEnvironmentVariableA1338  539 000675D0 SetFirmwareEnvironmentVariableExA1339  53A 00067700 SetFirmwareEnvironmentVariableExW1340  53B 000677E0 SetFirmwareEnvironmentVariableW1341  53C 000212E0 SetHandleCount1342  53D 00024910 SetHandleInformation1343  53E 0001D700 SetInformationJobObject1344  53F 0005C7F0 SetIoRateControlInformationJobObject1345  540          SetLastConsoleEventActive (forwarded to kernelbase.SetLastConsoleEventActive)1346  541 00015CB0 SetLastError1347  542 0005B900 SetLocalPrimaryComputerNameA1348  543 0005B960 SetLocalPrimaryComputerNameW1349  544 0003C770 SetLocalTime1350  545 0004C1B0 SetLocaleInfoA1351  546 0003C790 SetLocaleInfoW1352  547 00063120 SetMailslotInfo1353  548 000395E0 SetMessageWaitingIndicator1354  549 000390C0 SetNamedPipeAttribute1355  54A 00021F40 SetNamedPipeHandleState1356  54B 00020B50 SetPriorityClass1357  54C 000671B0 SetProcessAffinityMask1358  54D 00024200 SetProcessAffinityUpdateMode1359  54E 00022150 SetProcessDEPPolicy1360  54F          SetProcessDefaultCpuSets (forwarded to api-ms-win-core-processthreads-l1-1-3.SetProcessDefaultCpuSets)1361  550          SetProcessDynamicEHContinuationTargets (forwarded to api-ms-win-core-processthreads-l1-1-4.SetProcessDynamicEHContinuationTargets)1362  551          SetProcessDynamicEnforcedCetCompatibleRanges (forwarded to api-ms-win-core-processthreads-l1-1-4.SetProcessDynamicEnforcedCetCompatibleRanges)1363  552 000248C0 SetProcessInformation1364  553          SetProcessMitigationPolicy (forwarded to api-ms-win-core-processthreads-l1-1-1.SetProcessMitigationPolicy)1365  554 0003C7B0 SetProcessPreferredUILanguages1366  555 00021380 SetProcessPriorityBoost1367  556 00020700 SetProcessShutdownParameters1368  557 00044030 SetProcessWorkingSetSize1369  558 0003C7D0 SetProcessWorkingSetSizeEx1370  559          SetProtectedPolicy (forwarded to api-ms-win-core-processthreads-l1-1-2.SetProtectedPolicy)1371  55A 00038F60 SetSearchPathMode1372  55B 00020210 SetStdHandle1373  55C 0003C7F0 SetStdHandleEx1374  55D 0003C810 SetSystemFileCacheSize1375  55E 00039620 SetSystemPowerState1376  55F 0003C830 SetSystemTime1377  560 00037C50 SetSystemTimeAdjustment1378  561 000436F0 SetTapeParameters1379  562 00043740 SetTapePosition1380  563 000688E0 SetTermsrvAppInstallMode1381  564 0001F0F0 SetThreadAffinityMask1382  565 0003C850 SetThreadContext1383  566          SetThreadDescription (forwarded to api-ms-win-core-processthreads-l1-1-3.SetThreadDescription)1384  567 0001BAE0 SetThreadErrorMode1385  568 00020A20 SetThreadExecutionState1386  569 00020B70 SetThreadGroupAffinity1387  56A 00023D40 SetThreadIdealProcessor1388  56B 0003C870 SetThreadIdealProcessorEx1389  56C 000248D0 SetThreadInformation1390  56D 0001A110 SetThreadLocale1391  56E 0001D970 SetThreadPreferredUILanguages1392  56F 0001B5F0 SetThreadPriority1393  570 000213F0 SetThreadPriorityBoost1394  571          SetThreadSelectedCpuSets (forwarded to api-ms-win-core-processthreads-l1-1-3.SetThreadSelectedCpuSets)1395  572 0001E390 SetThreadStackGuarantee1396  573          SetThreadToken (forwarded to api-ms-win-core-processthreads-l1-1-0.SetThreadToken)1397  574 0001C610 SetThreadUILanguage1398  575 0003C890 SetThreadpoolStackInformation1399  576          SetThreadpoolThreadMaximum (forwarded to NTDLL.TpSetPoolMaxThreads)1400  577 00021120 SetThreadpoolThreadMinimum1401  578          SetThreadpoolTimer (forwarded to NTDLL.TpSetTimer)1402  579          SetThreadpoolTimerEx (forwarded to NTDLL.TpSetTimerEx)1403  57A          SetThreadpoolWait (forwarded to NTDLL.TpSetWait)1404  57B          SetThreadpoolWaitEx (forwarded to NTDLL.TpSetWaitEx)1405  57C 0003C8D0 SetTimeZoneInformation1406  57D 00044090 SetTimerQueueTimer1407  57E 00042540 SetUmsThreadInformation1408  57F 0001FE00 SetUnhandledExceptionFilter1409  580 00054A70 SetUserGeoID1410  581 00054A90 SetUserGeoName1411  582 00041D60 SetVDMCurrentDirectories1412  583 000678F0 SetVolumeLabelA1413  584 000679A0 SetVolumeLabelW1414  585 00066470 SetVolumeMountPointA1415  586 000233C0 SetVolumeMountPointW1416  587 0003C8F0 SetVolumeMountPointWStub1417  588 00024A90 SetWaitableTimer1418  589          SetWaitableTimerEx (forwarded to api-ms-win-core-synch-l1-1-0.SetWaitableTimerEx)1419  58A 0003C900 SetXStateFeaturesMask1420  58B 00025180 SetupComm1421  58C 00069FF0 ShowConsoleCursor1422  58D 0003C920 SignalObjectAndWait1423  58E 0001B3E0 SizeofResource1424  58F 0001ADA0 Sleep1425  590          SleepConditionVariableCS (forwarded to api-ms-win-core-synch-l1-2-0.SleepConditionVariableCS)1426  591          SleepConditionVariableSRW (forwarded to api-ms-win-core-synch-l1-2-0.SleepConditionVariableSRW)1427  592 00024AA0 SleepEx1428  593 0001FE60 SortCloseHandle1429  594 0000A190 SortGetHandle1430  595          StartThreadpoolIo (forwarded to NTDLL.TpStartAsyncIoOperation)1431  596          SubmitThreadpoolWork (forwarded to NTDLL.TpPostWork)1432  597 00020780 SuspendThread1433  598 00025240 SwitchToFiber1434  599 0001B400 SwitchToThread1435  59A 0001F6D0 SystemTimeToFileTime1436  59B 000221B0 SystemTimeToTzSpecificLocalTime1437  59C          SystemTimeToTzSpecificLocalTimeEx (forwarded to api-ms-win-core-timezone-l1-1-0.SystemTimeToTzSpecificLocalTimeEx)1438  59D 00021090 TerminateJobObject1439  59E 00020760 TerminateProcess1440  59F 0003C940 TerminateThread1441  5A0 00022650 TermsrvAppInstallMode1442  5A1 00068CA0 TermsrvConvertSysRootToUserDir1443  5A2 0001D3A0 TermsrvCreateRegEntry1444  5A3 0001DFE0 TermsrvDeleteKey1445  5A4 0001DFC0 TermsrvDeleteValue1446  5A5 0001B740 TermsrvGetPreSetValue1447  5A6 00022130 TermsrvGetWindowsDirectoryA1448  5A7 0001C720 TermsrvGetWindowsDirectoryW1449  5A8 00016B90 TermsrvOpenRegEntry1450  5A9 0001D360 TermsrvOpenUserClasses1451  5AA 000698F0 TermsrvRestoreKey1452  5AB 0001BB00 TermsrvSetKeySecurity1453  5AC 0001BAC0 TermsrvSetValueKey1454  5AD 00069910 TermsrvSyncUserIniFileExt1455  5AE 00021FA0 Thread32First1456  5AF 000214C0 Thread32Next1457  5B0 0001C830 TlsAlloc1458  5B1 0001D380 TlsFree1459  5B2 00015540 TlsGetValue1460  5B3 00015B90 TlsSetValue1461  5B4 0003CD70 Toolhelp32ReadProcessMemory1462  5B5 0003C960 TransactNamedPipe1463  5B6 00025190 TransmitCommChar1464  5B7          TryAcquireSRWLockExclusive (forwarded to NTDLL.RtlTryAcquireSRWLockExclusive)1465  5B8          TryAcquireSRWLockShared (forwarded to NTDLL.RtlTryAcquireSRWLockShared)1466  5B9          TryEnterCriticalSection (forwarded to NTDLL.RtlTryEnterCriticalSection)1467  5BA 000212F0 TrySubmitThreadpoolCallback1468  5BB 0003C980 TzSpecificLocalTimeToSystemTime1469  5BC          TzSpecificLocalTimeToSystemTimeEx (forwarded to api-ms-win-core-timezone-l1-1-0.TzSpecificLocalTimeToSystemTimeEx)1470  5BD 00038F90 UTRegister1471  5BE 00037B60 UTUnRegister1472  5BF 00042580 UmsThreadYield1473  5C0 0003C9A0 UnhandledExceptionFilter1474  5C1 00024FB0 UnlockFile1475  5C2 00024FC0 UnlockFileEx1476  5C3 0001E000 UnmapViewOfFile1477  5C4          UnmapViewOfFileEx (forwarded to api-ms-win-core-memory-l1-1-1.UnmapViewOfFileEx)1478  5C5 00043F20 UnregisterApplicationRecoveryCallback1479  5C6 0003C9C0 UnregisterApplicationRestart1480  5C7 0003C9E0 UnregisterBadMemoryNotification1481  5C8 0006A2B0 UnregisterConsoleIME1482  5C9 00013770 UnregisterWait1483  5CA 00021170 UnregisterWaitEx1484  5CB 00068290 UnregisterWaitUntilOOBECompleted1485  5CC 00008230 UpdateCalendarDayOfWeek1486  5CD          UpdateProcThreadAttribute (forwarded to api-ms-win-core-processthreads-l1-1-0.UpdateProcThreadAttribute)1487  5CE 0004A240 UpdateResourceA1488  5CF 0004A3F0 UpdateResourceW1489  5D0 0006A830 VDMConsoleOperation1490  5D1 00042030 VDMOperationStarted1491  5D2 000213C0 VerLanguageNameA1492  5D3 00020510 VerLanguageNameW1493  5D4          VerSetConditionMask (forwarded to NTDLL.VerSetConditionMask)1494  5D5 00020F60 VerifyConsoleIoHandle1495  5D6 0003CA00 VerifyScripts1496  5D7 00022580 VerifyVersionInfoA1497  5D8 00018450 VerifyVersionInfoW1498  5D9 00018500 VirtualAlloc1499  5DA 0003CA20 VirtualAllocEx1500  5DB 00024240 VirtualAllocExNuma1501  5DC 0001A130 VirtualFree1502  5DD 0003CA40 VirtualFreeEx1503  5DE 00024350 VirtualLock1504  5DF 0001BC70 VirtualProtect1505  5E0 0003CA60 VirtualProtectEx1506  5E1 0001C1A0 VirtualQuery1507  5E2 0001CFF0 VirtualQueryEx1508  5E3 0001C5F0 VirtualUnlock1509  5E4 000204A0 WTSGetActiveConsoleSessionId1510  5E5 000251A0 WaitCommEvent1511  5E6 0003CA80 WaitForDebugEvent1512  5E7          WaitForDebugEventEx (forwarded to api-ms-win-core-debug-l1-1-2.WaitForDebugEventEx)1513  5E8 00024AB0 WaitForMultipleObjects1514  5E9 00024AC0 WaitForMultipleObjectsEx1515  5EA 00024AD0 WaitForSingleObject1516  5EB 00024AE0 WaitForSingleObjectEx1517  5EC          WaitForThreadpoolIoCallbacks (forwarded to NTDLL.TpWaitForIoCompletion)1518  5ED          WaitForThreadpoolTimerCallbacks (forwarded to NTDLL.TpWaitForTimer)1519  5EE          WaitForThreadpoolWaitCallbacks (forwarded to NTDLL.TpWaitForWait)1520  5EF          WaitForThreadpoolWorkCallbacks (forwarded to NTDLL.TpWaitForWork)1521  5F0 00061C10 WaitNamedPipeA1522  5F1 0003CAA0 WaitNamedPipeW1523  5F2          WakeAllConditionVariable (forwarded to NTDLL.RtlWakeAllConditionVariable)1524  5F3          WakeConditionVariable (forwarded to NTDLL.RtlWakeConditionVariable)1525  5F4 00043F40 WerGetFlags1526  5F5 00043F40 WerGetFlagsWorker1527  5F6 0003CAC0 WerRegisterAdditionalProcess1528  5F7 0003CAE0 WerRegisterAppLocalDump1529  5F8 0003CB00 WerRegisterCustomMetadata1530  5F9 0003CB20 WerRegisterExcludedMemoryBlock1531  5FA 00020480 WerRegisterFile1532  5FB 00043F50 WerRegisterFileWorker1533  5FC 000206E0 WerRegisterMemoryBlock1534  5FD 00043F60 WerRegisterMemoryBlockWorker1535  5FE 00020880 WerRegisterRuntimeExceptionModule1536  5FF 00043F70 WerRegisterRuntimeExceptionModuleWorker1537  600 0001CBD0 WerSetFlags1538  601 0001CBD0 WerSetFlagsWorker1539  602 0003CB40 WerUnregisterAdditionalProcess1540  603 0003CB60 WerUnregisterAppLocalDump1541  604 0003CB80 WerUnregisterCustomMetadata1542  605 0003CBA0 WerUnregisterExcludedMemoryBlock1543  606 00020460 WerUnregisterFile1544  607 00043F80 WerUnregisterFileWorker1545  608 00021BA0 WerUnregisterMemoryBlock1546  609 00043F90 WerUnregisterMemoryBlockWorker1547  60A 0003CBC0 WerUnregisterRuntimeExceptionModule1548  60B 00043FA0 WerUnregisterRuntimeExceptionModuleWorker1549  60C 0006D290 WerpGetDebugger1550  60D 00043FB0 WerpInitiateRemoteRecovery1551  60E 0006DC80 WerpLaunchAeDebug1552  60F 0001B610 WerpNotifyLoadStringResourceWorker1553  610 0001B610 WerpNotifyUseStringResourceWorker1554  611 00015B30 WideCharToMultiByte1555  612 00067200 WinExec1556  613 0003CBE0 Wow64DisableWow64FsRedirection1557  614 000215E0 Wow64EnableWow64FsRedirection1558  615 0003CC00 Wow64GetThreadContext1559  616 00037D40 Wow64GetThreadSelectorEntry1560  617 0003CC20 Wow64RevertWow64FsRedirection1561  618 0003CC40 Wow64SetThreadContext1562  619 0003CC60 Wow64SuspendThread1563  61A 000253B0 WriteConsoleA1564  61B 000255D0 WriteConsoleInputA1565  61C 0006A030 WriteConsoleInputVDMA1566  61D 0006A0C0 WriteConsoleInputVDMW1567  61E 000255E0 WriteConsoleInputW1568  61F 000255F0 WriteConsoleOutputA1569  620 00025600 WriteConsoleOutputAttribute1570  621 00025610 WriteConsoleOutputCharacterA1571  622 00025620 WriteConsoleOutputCharacterW1572  623 00025630 WriteConsoleOutputW1573  624 000253C0 WriteConsoleW1574  625 00024FD0 WriteFile1575  626 00024FE0 WriteFileEx1576  627 00024FF0 WriteFileGather1577  628 00060B10 WritePrivateProfileSectionA1578  629 00023D60 WritePrivateProfileSectionW1579  62A 00060B80 WritePrivateProfileStringA1580  62B 00017AF0 WritePrivateProfileStringW1581  62C 00060BF0 WritePrivateProfileStructA1582  62D 00060D60 WritePrivateProfileStructW1583  62E 0003CC80 WriteProcessMemory1584  62F 00060ED0 WriteProfileSectionA1585  630 00060EE0 WriteProfileSectionW1586  631 00060EF0 WriteProfileStringA1587  632 00060F00 WriteProfileStringW1588  633 000437B0 WriteTapemark1589  634 0003CCA0 ZombifyActCtx1590  635 00043D50 ZombifyActCtxWorker1591  636          __C_specific_handler (forwarded to NTDLL.__C_specific_handler)1592  637          __chkstk (forwarded to NTDLL.__chkstk)1593  638          __misaligned_access (forwarded to NTDLL.__misaligned_access)1594  639 00017CC0 _hread1595  63A 00069A20 _hwrite1596  63B 0001C630 _lclose1597  63C 00069930 _lcreat1598  63D 00017C90 _llseek1599  63E          _local_unwind (forwarded to NTDLL._local_unwind)1600  63F 000699A0 _lopen1601  640 00017CC0 _lread1602  641 00069A20 _lwrite1603  642 000200C0 lstrcat1604  643 000200C0 lstrcatA1605  644 00069A70 lstrcatW1606  645 0001C480 lstrcmp1607  646 0001C480 lstrcmpA1608  647 0001B770 lstrcmpW1609  648 0001B300 lstrcmpi1610  649 0001B300 lstrcmpiA1611  64A 00017BA0 lstrcmpiW1612  64B 0001E300 lstrcpy1613  64C 0001E300 lstrcpyA1614  64D 00021E50 lstrcpyW1615  64E 0003CCC0 lstrcpyn1616  64F 0003CCC0 lstrcpynA1617  650 00020F70 lstrcpynW1618  651 0001AAB0 lstrlen1619  652 0001AAB0 lstrlenA1620  653 00017000 lstrlenW1621  654 0001D990 timeBeginPeriod1622  655 0001CA10 timeEndPeriod1623  656 000220C0 timeGetDevCaps1624  657 00069AC0 timeGetSystemTime1625  658 0001BA20 timeGetTime1626  659 0001B770 uaw_lstrcmpW1627  65A 00017BA0 uaw_lstrcmpiW1628  65B 00037580 uaw_lstrlenW1629  65C 000375D0 uaw_wcschr1630  65D 00037600 uaw_wcscpy1631  65E 00037630 uaw_wcsicmp1632  65F 00037650 uaw_wcslen1633  660 00037680 uaw_wcsrchr

ntdll.dll 的 ordinal

PS D:\工作> dumpbin.exe -exports .\ntdll.dll
Microsoft (R) COFF/PE Dumper Version 14.29.30140.0
Copyright (C) Microsoft Corporation.  All rights reserved.Dump of file .\ntdll.dllFile Type: DLLSection contains the following exports for ntdll.dll00000000 characteristicsE2F8CA76 time date stamp0.00 version8 ordinal base2431 number of functions2430 number of namesordinal hint RVA      name9    0 00040230 A_SHAFinal10    1 00041060 A_SHAInit11    2 000410A0 A_SHAUpdate12    3 000E0740 AlpcAdjustCompletionListConcurrencyCount13    4 00070620 AlpcFreeCompletionListMessage14    5 000E0770 AlpcGetCompletionListLastMessageInformation15    6 000E0790 AlpcGetCompletionListMessageAttributes16    7 00070350 AlpcGetHeaderSize17    8 00070310 AlpcGetMessageAttribute18    9 00010A60 AlpcGetMessageFromCompletionList19    A 00085CA0 AlpcGetOutstandingCompletionListMessageCount20    B 000702B0 AlpcInitializeMessageAttribute21    C 00084900 AlpcMaxAllowedMessageLength22    D 00085B20 AlpcRegisterCompletionList23    E 00075130 AlpcRegisterCompletionListWorkerThread24    F 00085C60 AlpcRundownCompletionList25   10 00085C80 AlpcUnregisterCompletionList26   11 000750D0 AlpcUnregisterCompletionListWorkerThread27   12 00076D90 ApiSetQueryApiSetPresence28   13 000690A0 ApiSetQueryApiSetPresenceEx29   14 00008D50 CsrAllocateCaptureBuffer30   15 00008D00 CsrAllocateMessagePointer31   16 00008850 CsrCaptureMessageBuffer32   17 00008B40 CsrCaptureMessageMultiUnicodeStringsInPlace33   18 00008C50 CsrCaptureMessageString34   19 000CB390 CsrCaptureTimeout35   1A 000089A0 CsrClientCallServer36   1B 00008E20 CsrClientConnectToServer37   1C 00008970 CsrFreeCaptureBuffer38   1D 000CB3C0 CsrGetProcessId39   1E 000842D0 CsrIdentifyAlertableThread40   1F 000D5290 CsrSetPriorityClass41   20 000CB3E0 CsrVerifyRegion42   21 000A0860 DbgBreakPoint43   22 00050960 DbgPrint44   23 000502F0 DbgPrintEx45   24 000E07D0 DbgPrintReturnControlC46   25 000E0820 DbgPrompt47   26 000E0870 DbgQueryDebugFilterState48   27 000E0880 DbgSetDebugFilterState49   28 000CC4E0 DbgUiConnectToDbg50   29 000CC550 DbgUiContinue51   2A 000CC580 DbgUiConvertStateChangeStructure52   2B 000CC590 DbgUiConvertStateChangeStructureEx53   2C 000CC840 DbgUiDebugActiveProcess54   2D 000CC8B0 DbgUiGetThreadDebugObject55   2E 000CC8D0 DbgUiIssueRemoteBreakin56   2F 000CC940 DbgUiRemoteBreakin57   30 000CC9A0 DbgUiSetThreadDebugObject58   31 000CC9C0 DbgUiStopDebugging59   32 000CC9E0 DbgUiWaitStateChange60   33 000A0870 DbgUserBreakPoint61   34 00085A90 EtwCheckCoverage62   35 001106B0 EtwCreateTraceInstanceId63   36 000452A0 EtwDeliverDataBlock64   37 00110290 EtwEnumerateProcessRegGuids65   38 0005B690 EtwEventActivityIdControl66   39 00050D00 EtwEventEnabled67   3A 00074990 EtwEventProviderEnabled68   3B 00042E70 EtwEventRegister69   3C 00042AE0 EtwEventSetInformation70   3D 00050380 EtwEventUnregister71   3E 0004F1A0 EtwEventWrite72   3F 0004EBD0 EtwEventWriteEndScenario73   40 0004F150 EtwEventWriteEx74   41 0004F100 EtwEventWriteFull75   42 000608D0 EtwEventWriteNoRegistration76   43 00089CF0 EtwEventWriteStartScenario77   44 00110390 EtwEventWriteString78   45 0004F1E0 EtwEventWriteTransfer79   46 00081370 EtwGetTraceEnableFlags80   47 00081330 EtwGetTraceEnableLevel81   48 000812F0 EtwGetTraceLoggerHandle82   49 0004FB40 EtwLogTraceEvent83   4A 00043030 EtwNotificationRegister84   4B 00050390 EtwNotificationUnregister85   4C 00055950 EtwProcessPrivateLoggerRequest86   4D 0008BE90 EtwRegisterSecurityProvider87   4E 00085280 EtwRegisterTraceGuidsA88   4F 00042A00 EtwRegisterTraceGuidsW89   50 000019A0 EtwReplyNotification90   51 00050530 EtwSendNotification91   52 0008A7B0 EtwSetMark92   53 00110710 EtwTraceEventInstance93   54 00050660 EtwTraceMessage94   55 00050690 EtwTraceMessageVa95   56 00050330 EtwUnregisterTraceGuids96   57 0007BE40 EtwWriteUMSecurityEvent97   58 00055FD0 EtwpCreateEtwThread98   59 000573B0 EtwpGetCpuSpeed99   5A 00111670 EvtIntReportAuthzEventAndSourceAsync100   5B 0004ECC0 EvtIntReportEventAndSourceAsync101   5C 000A0910 ExpInterlockedPopEntrySListEnd102   5D 000A0907 ExpInterlockedPopEntrySListFault103   5E 000A08F7 ExpInterlockedPopEntrySListResume104   5F 000A0C40 KiRaiseUserExceptionDispatcher105   60 000A0A70 KiUserApcDispatcher106   61 000A0B80 KiUserCallbackDispatcher107   62 000A0BD0 KiUserExceptionDispatcher108   63 0017F500 KiUserInvertedFunctionTable109   64 000207A0 LdrAccessResource110   65 0008B600 LdrAddDllDirectory111   66 00073000 LdrAddLoadAsDataTable112   67 00010140 LdrAddRefDll113   68 000CB430 LdrAppxHandleIntegrityFailure114   69 000CCA10 LdrCallEnclave115   6A 00033520 LdrControlFlowGuardEnforced116   6B 000CCA20 LdrCreateEnclave117   6C 000CCB30 LdrDeleteEnclave118   6D 0000EF70 LdrDisableThreadCalloutsForDll119   6E 000E0AC0 LdrEnumResources120   6F 0005D870 LdrEnumerateLoadedModules121   70 00084740 LdrFastFailInLoaderCallout122   71 0006A240 LdrFindEntryForAddress123   72 000E0D90 LdrFindResourceDirectory_U124   73 00080ED0 LdrFindResourceEx_U125   74 00070580 LdrFindResource_U126   75 00089340 LdrFlushAlternateResourceModules127   76 0007EEF0 LdrGetDllDirectory128   77 00010240 LdrGetDllFullName129   78 00016870 LdrGetDllHandle130   79 00074600 LdrGetDllHandleByMapping131   7A 00076FA0 LdrGetDllHandleByName132   7B 000168A0 LdrGetDllHandleEx133   7C 00011450 LdrGetDllPath134   7D 000CDD70 LdrGetFailureData135   7E 000E0DB0 LdrGetFileNameFromLoadAsDataTable136   7F 000843A0 LdrGetKnownDllSectionHandle137   80 00081AC0 LdrGetProcedureAddress138   81 0006BF10 LdrGetProcedureAddressEx139   82 0002FDC0 LdrGetProcedureAddressForCaller140   83 000D0350 LdrInitShimEngineDynamic141   84 000CCBC0 LdrInitializeEnclave142   85 00074B00 LdrInitializeThunk143   86 000CDD80 LdrIsModuleSxsRedirected144   87 0007DA00 LdrLoadAlternateResourceModule145   88 00034EA0 LdrLoadAlternateResourceModuleEx146   89 00016A10 LdrLoadDll147   8A 000CCD60 LdrLoadEnclaveModule148   8B 0007D030 LdrLockLoaderLock149   8C 000E1840 LdrOpenImageFileOptionsKey150   8D 00080830 LdrProcessInitializationComplete151   8E 000E38A0 LdrProcessRelocationBlock152   8F 000E38D0 LdrProcessRelocationBlockEx153   90 0007A2B0 LdrQueryImageFileExecutionOptions154   91 0007A2F0 LdrQueryImageFileExecutionOptionsEx155   92 0007A390 LdrQueryImageFileKeyOption156   93 000CDF70 LdrQueryModuleServiceTags157   94 000CE770 LdrQueryOptionalDelayLoadedAPI158   95 00001430 LdrQueryProcessModuleInformation159   96 00084AE0 LdrRegisterDllNotification160   97 0008BD10 LdrRemoveDllDirectory161   98 000737C0 LdrRemoveLoadAsDataTable162   99 000E3DB0 LdrResFindResource163   9A 00048AA0 LdrResFindResourceDirectory164   9B 0004B320 LdrResGetRCConfig165   9C 00089DF0 LdrResRelease166   9D 00048B30 LdrResSearchResource167   9E 00010380 LdrResolveDelayLoadedAPI168   9F 000CE830 LdrResolveDelayLoadsFromDll169   A0 00034C60 LdrRscIsTypeExist170   A1 000842D0 LdrSetAppCompatDllRedirectionCallback171   A2 0007FBD0 LdrSetDefaultDllDirectories172   A3 0007FC10 LdrSetDllDirectory173   A4 00083D00 LdrSetDllManifestProber174   A5 000CE410 LdrSetImplicitPathOptions175   A6 0008BED0 LdrSetMUICacheType176   A7 0005DA50 LdrShutdownProcess177   A8 00017450 LdrShutdownThread178   A9 0007FEC0 LdrStandardizeSystemPath179   AA 0017F2F0 LdrSystemDllInitBlock180   AB 0006A6C0 LdrUnloadAlternateResourceModule181   AC 0006A6D0 LdrUnloadAlternateResourceModuleEx182   AD 0000FBF0 LdrUnloadDll183   AE 0007DEA0 LdrUnlockLoaderLock184   AF 000CE480 LdrUnregisterDllNotification185   B0 000DEA80 LdrUpdatePackageSearchPath186   B1 000CE530 LdrVerifyImageMatchesChecksum187   B2 0008AA80 LdrVerifyImageMatchesChecksumEx188   B3 0004ABF0 LdrpResGetMappingSize189   B4 00049620 LdrpResGetResourceDirectory190   B5 0010FAD0 MD4Final191   B6 0010FBA0 MD4Init192   B7 00110160 MD4Update193   B8 0005BDD0 MD5Final194   B9 0007D610 MD5Init195   BA 0005BEA0 MD5Update196   BB 001677CC NlsAnsiCodePage197   BC 0016B710 NlsMbCodePageTag198   BD 0016B6D8 NlsMbOemCodePageTag199   BE 0009CDA0 NtAcceptConnectPort200   BF 0009CD60 NtAccessCheck201   C0 0009D280 NtAccessCheckAndAuditAlarm202   C1 0009D9B0 NtAccessCheckByType203   C2 0009D880 NtAccessCheckByTypeAndAuditAlarm204   C3 0009D9D0 NtAccessCheckByTypeResultList205   C4 0009D9F0 NtAccessCheckByTypeResultListAndAuditAlarm206   C5 0009DA10 NtAccessCheckByTypeResultListAndAuditAlarmByHandle207   C6 0009DA30 NtAcquireCrossVmMutant208   C7 0009DA50 NtAcquireProcessActivityReference209   C8 0009D640 NtAddAtom210   C9 0009DA70 NtAddAtomEx211   CA 0009DA90 NtAddBootEntry212   CB 0009DAB0 NtAddDriverEntry213   CC 0009DAD0 NtAdjustGroupsToken214   CD 0009D580 NtAdjustPrivilegesToken215   CE 0009DAF0 NtAdjustTokenClaimsAndDeviceGroups216   CF 0009DB10 NtAlertResumeThread217   D0 0009DB30 NtAlertThread218   D1 0009DB50 NtAlertThreadByThreadId219   D2 0009DB70 NtAllocateLocallyUniqueId220   D3 0009DB90 NtAllocateReserveObject221   D4 0009DBB0 NtAllocateUserPhysicalPages222   D5 0009DBD0 NtAllocateUserPhysicalPagesEx223   D6 0009DBF0 NtAllocateUuids224   D7 0009D060 NtAllocateVirtualMemory225   D8 0009DC10 NtAllocateVirtualMemoryEx226   D9 0009DC30 NtAlpcAcceptConnectPort227   DA 0009DC50 NtAlpcCancelMessage228   DB 0009DC70 NtAlpcConnectPort229   DC 0009DC90 NtAlpcConnectPortEx230   DD 0009DCB0 NtAlpcCreatePort231   DE 0009DCD0 NtAlpcCreatePortSection232   DF 0009DCF0 NtAlpcCreateResourceReserve233   E0 0009DD10 NtAlpcCreateSectionView234   E1 0009DD30 NtAlpcCreateSecurityContext235   E2 0009DD50 NtAlpcDeletePortSection236   E3 0009DD70 NtAlpcDeleteResourceReserve237   E4 0009DD90 NtAlpcDeleteSectionView238   E5 0009DDB0 NtAlpcDeleteSecurityContext239   E6 0009DDD0 NtAlpcDisconnectPort240   E7 0009DDF0 NtAlpcImpersonateClientContainerOfPort241   E8 0009DE10 NtAlpcImpersonateClientOfPort242   E9 0009DE30 NtAlpcOpenSenderProcess243   EA 0009DE50 NtAlpcOpenSenderThread244   EB 0009DE70 NtAlpcQueryInformation245   EC 0009DE90 NtAlpcQueryInformationMessage246   ED 0009DEB0 NtAlpcRevokeSecurityContext247   EE 0009DED0 NtAlpcSendWaitReceivePort248   EF 0009DEF0 NtAlpcSetInformation249   F0 0009D6E0 NtApphelpCacheControl250   F1 0009DF10 NtAreMappedFilesTheSame251   F2 0009DF30 NtAssignProcessToJobObject252   F3 0009DF50 NtAssociateWaitCompletionPacket253   F4 0009DF70 NtCallEnclave254   F5 0009CE00 NtCallbackReturn255   F6 0009D8F0 NtCancelIoFile256   F7 0009DF90 NtCancelIoFileEx257   F8 0009DFB0 NtCancelSynchronousIoFile258   F9 0009D970 NtCancelTimer259   FA 0009DFD0 NtCancelTimer2260   FB 0009DFF0 NtCancelWaitCompletionPacket261   FC 0009D520 NtClearEvent262   FD 0009CF40 NtClose263   FE 0009D4C0 NtCloseObjectAuditAlarm264   FF 0009E010 NtCommitComplete265  100 0009E030 NtCommitEnlistment266  101 0009E050 NtCommitRegistryTransaction267  102 0009E070 NtCommitTransaction268  103 0009E090 NtCompactKeys269  104 0009E0B0 NtCompareObjects270  105 0009E0D0 NtCompareSigningLevels271  106 0009E0F0 NtCompareTokens272  107 0009E110 NtCompleteConnectPort273  108 0009E130 NtCompressKey274  109 0009E150 NtConnectPort275  10A 0009D5C0 NtContinue276  10B 0009E170 NtContinueEx277  10C 0009E190 NtConvertBetweenAuxiliaryCounterAndPerformanceCounter278  10D 0009E1B0 NtCreateCrossVmEvent279  10E 0009E1D0 NtCreateCrossVmMutant280  10F 0009E1F0 NtCreateDebugObject281  110 0009E210 NtCreateDirectoryObject282  111 0009E230 NtCreateDirectoryObjectEx283  112 0009E250 NtCreateEnclave284  113 0009E270 NtCreateEnlistment285  114 0009D660 NtCreateEvent286  115 0009E290 NtCreateEventPair287  116 0009D800 NtCreateFile288  117 0009E2B0 NtCreateIRTimer289  118 0009E2D0 NtCreateIoCompletion290  119 0009E2F0 NtCreateJobObject291  11A 0009E310 NtCreateJobSet292  11B 0009D100 NtCreateKey293  11C 0009E330 NtCreateKeyTransacted294  11D 0009E350 NtCreateKeyedEvent295  11E 0009E370 NtCreateLowBoxToken296  11F 0009E390 NtCreateMailslotFile297  120 0009E3B0 NtCreateMutant298  121 0009E3D0 NtCreateNamedPipeFile299  122 0009E3F0 NtCreatePagingFile300  123 0009E410 NtCreatePartition301  124 0009E430 NtCreatePort302  125 0009E450 NtCreatePrivateNamespace303  126 0009E470 NtCreateProcess304  127 0009D700 NtCreateProcessEx305  128 0009E490 NtCreateProfile306  129 0009E4B0 NtCreateProfileEx307  12A 0009E4D0 NtCreateRegistryTransaction308  12B 0009E4F0 NtCreateResourceManager309  12C 0009D6A0 NtCreateSection310  12D 0009E510 NtCreateSectionEx311  12E 0009E530 NtCreateSemaphore312  12F 0009E550 NtCreateSymbolicLinkObject313  130 0009D720 NtCreateThread314  131 0009E570 NtCreateThreadEx315  132 0009E590 NtCreateTimer316  133 0009E5B0 NtCreateTimer2317  134 0009E5D0 NtCreateToken318  135 0009E5F0 NtCreateTokenEx319  136 0009E610 NtCreateTransaction320  137 0009E630 NtCreateTransactionManager321  138 0009E650 NtCreateUserProcess322  139 0009E670 NtCreateWaitCompletionPacket323  13A 0009E690 NtCreateWaitablePort324  13B 0009E6B0 NtCreateWnfStateName325  13C 0009E6D0 NtCreateWorkerFactory326  13D 0009E6F0 NtDebugActiveProcess327  13E 0009E710 NtDebugContinue328  13F 0009D3E0 NtDelayExecution329  140 0009E730 NtDeleteAtom330  141 0009E750 NtDeleteBootEntry331  142 0009E770 NtDeleteDriverEntry332  143 0009E790 NtDeleteFile333  144 0009E7B0 NtDeleteKey334  145 0009E7D0 NtDeleteObjectAuditAlarm335  146 0009E7F0 NtDeletePrivateNamespace336  147 0009E810 NtDeleteValueKey337  148 0009E830 NtDeleteWnfStateData338  149 0009E850 NtDeleteWnfStateName339  14A 0009CE40 NtDeviceIoControlFile340  14B 0009E870 NtDirectGraphicsCall341  14C 0009E890 NtDisableLastKnownGood342  14D 0009E8B0 NtDisplayString343  14E 0009E8D0 NtDrawText344  14F 0009D4E0 NtDuplicateObject345  150 0009D5A0 NtDuplicateToken346  151 0009E8F0 NtEnableLastKnownGood347  152 0009E910 NtEnumerateBootEntries348  153 0009E930 NtEnumerateDriverEntries349  154 0009D3A0 NtEnumerateKey350  155 0009E950 NtEnumerateSystemEnvironmentValuesEx351  156 0009E970 NtEnumerateTransactionObject352  157 0009CFC0 NtEnumerateValueKey353  158 0009E990 NtExtendSection354  159 0009E9B0 NtFilterBootOption355  15A 0009E9D0 NtFilterToken356  15B 0009E9F0 NtFilterTokenEx357  15C 0009CFE0 NtFindAtom358  15D 0009D6C0 NtFlushBuffersFile359  15E 0009EA10 NtFlushBuffersFileEx360  15F 0009EA30 NtFlushInstallUILanguage361  160 0009EA50 NtFlushInstructionCache362  161 0009EA70 NtFlushKey363  162 0009EA90 NtFlushProcessWriteBuffers364  163 0009EAB0 NtFlushVirtualMemory365  164 0009EAD0 NtFlushWriteBuffer366  165 0009EAF0 NtFreeUserPhysicalPages367  166 0009D120 NtFreeVirtualMemory368  167 0009EB10 NtFreezeRegistry369  168 0009EB30 NtFreezeTransactions370  169 0009D480 NtFsControlFile371  16A 0009EB50 NtGetCachedSigningLevel372  16B 0009EB70 NtGetCompleteWnfStateSubscription373  16C 0009EB90 NtGetContextThread374  16D 0009EBB0 NtGetCurrentProcessorNumber375  16E 0009EBD0 NtGetCurrentProcessorNumberEx376  16F 0009EBF0 NtGetDevicePowerState377  170 0009EC10 NtGetMUIRegistryInfo378  171 0009EC30 NtGetNextProcess379  172 0009EC50 NtGetNextThread380  173 0009EC70 NtGetNlsSectionPtr381  174 0009EC90 NtGetNotificationResourceManager382  175 000E5A90 NtGetTickCount383  176 0009ECB0 NtGetWriteWatch384  177 0009ECD0 NtImpersonateAnonymousToken385  178 0009D140 NtImpersonateClientOfPort386  179 0009ECF0 NtImpersonateThread387  17A 0009ED10 NtInitializeEnclave388  17B 0009ED30 NtInitializeNlsFiles389  17C 0009ED50 NtInitializeRegistry390  17D 0009ED70 NtInitiatePowerAction391  17E 0009D740 NtIsProcessInJob392  17F 0009ED90 NtIsSystemResumeAutomatic393  180 0009EDB0 NtIsUILanguageComitted394  181 0009EDD0 NtListenPort395  182 0009EDF0 NtLoadDriver396  183 0009EE10 NtLoadEnclaveData397  184 0009EE30 NtLoadKey398  185 0009EE50 NtLoadKey2399  186 000A0810 NtLoadKey3400  187 0009EE70 NtLoadKeyEx401  188 0009EE90 NtLockFile402  189 0009EEB0 NtLockProductActivationKeys403  18A 0009EED0 NtLockRegistryKey404  18B 0009EEF0 NtLockVirtualMemory405  18C 0009EF10 NtMakePermanentObject406  18D 0009EF30 NtMakeTemporaryObject407  18E 0009EF50 NtManageHotPatch408  18F 0009EF70 NtManagePartition409  190 0009EF90 NtMapCMFModule410  191 0009EFB0 NtMapUserPhysicalPages411  192 0009CDC0 NtMapUserPhysicalPagesScatter412  193 0009D260 NtMapViewOfSection413  194 0009EFD0 NtMapViewOfSectionEx414  195 0009EFF0 NtModifyBootEntry415  196 0009F010 NtModifyDriverEntry416  197 0009F030 NtNotifyChangeDirectoryFile417  198 0009F050 NtNotifyChangeDirectoryFileEx418  199 0009F070 NtNotifyChangeKey419  19A 0009F090 NtNotifyChangeMultipleKeys420  19B 0009F0B0 NtNotifyChangeSession421  19C 0009D860 NtOpenDirectoryObject422  19D 0009F0D0 NtOpenEnlistment423  19E 0009D560 NtOpenEvent424  19F 0009F0F0 NtOpenEventPair425  1A0 0009D3C0 NtOpenFile426  1A1 0009F110 NtOpenIoCompletion427  1A2 0009F130 NtOpenJobObject428  1A3 0009CFA0 NtOpenKey429  1A4 0009F150 NtOpenKeyEx430  1A5 0009F170 NtOpenKeyTransacted431  1A6 0009F190 NtOpenKeyTransactedEx432  1A7 0009F1B0 NtOpenKeyedEvent433  1A8 0009F1D0 NtOpenMutant434  1A9 0009F1F0 NtOpenObjectAuditAlarm435  1AA 0009F210 NtOpenPartition436  1AB 0009F230 NtOpenPrivateNamespace437  1AC 0009D220 NtOpenProcess438  1AD 0009F250 NtOpenProcessToken439  1AE 0009D360 NtOpenProcessTokenEx440  1AF 0009F270 NtOpenRegistryTransaction441  1B0 0009F290 NtOpenResourceManager442  1B1 0009D440 NtOpenSection443  1B2 0009F2B0 NtOpenSemaphore444  1B3 0009F2D0 NtOpenSession445  1B4 0009F2F0 NtOpenSymbolicLinkObject446  1B5 0009F310 NtOpenThread447  1B6 0009D1E0 NtOpenThreadToken448  1B7 0009D340 NtOpenThreadTokenEx449  1B8 0009F330 NtOpenTimer450  1B9 0009F350 NtOpenTransaction451  1BA 0009F370 NtOpenTransactionManager452  1BB 0009F390 NtPlugPlayControl453  1BC 0009D930 NtPowerInformation454  1BD 0009F3B0 NtPrePrepareComplete455  1BE 0009F3D0 NtPrePrepareEnlistment456  1BF 0009F3F0 NtPrepareComplete457  1C0 0009F410 NtPrepareEnlistment458  1C1 0009F430 NtPrivilegeCheck459  1C2 0009F450 NtPrivilegeObjectAuditAlarm460  1C3 0009F470 NtPrivilegedServiceAuditAlarm461  1C4 0009F490 NtPropagationComplete462  1C5 0009F4B0 NtPropagationFailed463  1C6 0009D760 NtProtectVirtualMemory464  1C7 0009F4D0 NtPssCaptureVaSpaceBulk465  1C8 0009F4F0 NtPulseEvent466  1C9 0009D500 NtQueryAttributesFile467  1CA 0009F510 NtQueryAuxiliaryCounterFrequency468  1CB 0009F530 NtQueryBootEntryOrder469  1CC 0009F550 NtQueryBootOptions470  1CD 0009F570 NtQueryDebugFilterState471  1CE 0009D000 NtQueryDefaultLocale472  1CF 0009D5E0 NtQueryDefaultUILanguage473  1D0 0009D400 NtQueryDirectoryFile474  1D1 0009F590 NtQueryDirectoryFileEx475  1D2 0009F5B0 NtQueryDirectoryObject476  1D3 0009F5D0 NtQueryDriverEntryOrder477  1D4 0009F5F0 NtQueryEaFile478  1D5 0009D820 NtQueryEvent479  1D6 0009F610 NtQueryFullAttributesFile480  1D7 0009F630 NtQueryInformationAtom481  1D8 0009F650 NtQueryInformationByName482  1D9 0009F670 NtQueryInformationEnlistment483  1DA 0009CF80 NtQueryInformationFile484  1DB 0009F690 NtQueryInformationJobObject485  1DC 0009F6B0 NtQueryInformationPort486  1DD 0009D080 NtQueryInformationProcess487  1DE 0009F6D0 NtQueryInformationResourceManager488  1DF 0009D200 NtQueryInformationThread489  1E0 0009D180 NtQueryInformationToken490  1E1 0009F6F0 NtQueryInformationTransaction491  1E2 0009F710 NtQueryInformationTransactionManager492  1E3 0009F730 NtQueryInformationWorkerFactory493  1E4 0009F750 NtQueryInstallUILanguage494  1E5 0009F770 NtQueryIntervalProfile495  1E6 0009F790 NtQueryIoCompletion496  1E7 0009D020 NtQueryKey497  1E8 0009F7B0 NtQueryLicenseValue498  1E9 0009F7D0 NtQueryMultipleValueKey499  1EA 0009F7F0 NtQueryMutant500  1EB 0009CF60 NtQueryObject501  1EC 0009F810 NtQueryOpenSubKeys502  1ED 0009F830 NtQueryOpenSubKeysEx503  1EE 0009D380 NtQueryPerformanceCounter504  1EF 0009F850 NtQueryPortInformationProcess505  1F0 0009F870 NtQueryQuotaInformationFile506  1F1 0009D780 NtQuerySection507  1F2 0009F890 NtQuerySecurityAttributesToken508  1F3 0009F8B0 NtQuerySecurityObject509  1F4 0009F8D0 NtQuerySecurityPolicy510  1F5 0009F8F0 NtQuerySemaphore511  1F6 0009F910 NtQuerySymbolicLinkObject512  1F7 0009F930 NtQuerySystemEnvironmentValue513  1F8 0009F950 NtQuerySystemEnvironmentValueEx514  1F9 0009D420 NtQuerySystemInformation515  1FA 0009F970 NtQuerySystemInformationEx516  1FB 0009D8A0 NtQuerySystemTime517  1FC 0009D460 NtQueryTimer518  1FD 0009F990 NtQueryTimerResolution519  1FE 0009D040 NtQueryValueKey520  1FF 0009D1C0 NtQueryVirtualMemory521  200 0009D680 NtQueryVolumeInformationFile522  201 0009F9B0 NtQueryWnfStateData523  202 0009F9D0 NtQueryWnfStateNameInformation524  203 0009D600 NtQueueApcThread525  204 0009F9F0 NtQueueApcThreadEx526  205 0009FA10 NtRaiseException527  206 0009FA30 NtRaiseHardError528  207 0009CE20 NtReadFile529  208 0009D320 NtReadFileScatter530  209 0009FA50 NtReadOnlyEnlistment531  20A 0009D7E0 NtReadRequestData532  20B 0009D540 NtReadVirtualMemory533  20C 0009FA70 NtRecoverEnlistment534  20D 0009FA90 NtRecoverResourceManager535  20E 0009FAB0 NtRecoverTransactionManager536  20F 0009FAD0 NtRegisterProtocolAddressInformation537  210 0009FAF0 NtRegisterThreadTerminatePort538  211 0009FB10 NtReleaseKeyedEvent539  212 0009D160 NtReleaseMutant540  213 0009CEA0 NtReleaseSemaphore541  214 0009FB30 NtReleaseWorkerFactoryWorker542  215 0009CE80 NtRemoveIoCompletion543  216 0009FB50 NtRemoveIoCompletionEx544  217 0009FB70 NtRemoveProcessDebug545  218 0009FB90 NtRenameKey546  219 0009FBB0 NtRenameTransactionManager547  21A 0009FBD0 NtReplaceKey548  21B 0009FBF0 NtReplacePartitionUnit549  21C 0009CEE0 NtReplyPort550  21D 0009CEC0 NtReplyWaitReceivePort551  21E 0009D2C0 NtReplyWaitReceivePortEx552  21F 0009FC10 NtReplyWaitReplyPort553  220 0009FC30 NtRequestPort554  221 0009D1A0 NtRequestWaitReplyPort555  222 0009FC50 NtResetEvent556  223 0009FC70 NtResetWriteWatch557  224 0009FC90 NtRestoreKey558  225 0009FCB0 NtResumeProcess559  226 0009D7A0 NtResumeThread560  227 0009FCD0 NtRevertContainerImpersonation561  228 0009FCF0 NtRollbackComplete562  229 0009FD10 NtRollbackEnlistment563  22A 0009FD30 NtRollbackRegistryTransaction564  22B 0009FD50 NtRollbackTransaction565  22C 0009FD70 NtRollforwardTransactionManager566  22D 0009FD90 NtSaveKey567  22E 0009FDB0 NtSaveKeyEx568  22F 0009FDD0 NtSaveMergedKeys569  230 0009FDF0 NtSecureConnectPort570  231 0009FE10 NtSerializeBoot571  232 0009FE30 NtSetBootEntryOrder572  233 0009FE50 NtSetBootOptions573  234 0009FE70 NtSetCachedSigningLevel574  235 0009FE90 NtSetCachedSigningLevel2575  236 0009FEB0 NtSetContextThread576  237 0009FED0 NtSetDebugFilterState577  238 0009FEF0 NtSetDefaultHardErrorPort578  239 0009FF10 NtSetDefaultLocale579  23A 0009FF30 NtSetDefaultUILanguage580  23B 0009FF50 NtSetDriverEntryOrder581  23C 0009FF70 NtSetEaFile582  23D 0009CF20 NtSetEvent583  23E 0009D300 NtSetEventBoostPriority584  23F 0009FF90 NtSetHighEventPair585  240 0009FFB0 NtSetHighWaitLowEventPair586  241 0009FFD0 NtSetIRTimer587  242 0009FFF0 NtSetInformationDebugObject588  243 000A0010 NtSetInformationEnlistment589  244 0009D240 NtSetInformationFile590  245 000A0030 NtSetInformationJobObject591  246 000A0050 NtSetInformationKey592  247 0009D8D0 NtSetInformationObject593  248 0009D0E0 NtSetInformationProcess594  249 000A0070 NtSetInformationResourceManager595  24A 000A0090 NtSetInformationSymbolicLink596  24B 0009CF00 NtSetInformationThread597  24C 000A00B0 NtSetInformationToken598  24D 000A00D0 NtSetInformationTransaction599  24E 000A00F0 NtSetInformationTransactionManager600  24F 000A0110 NtSetInformationVirtualMemory601  250 000A0130 NtSetInformationWorkerFactory602  251 000A0150 NtSetIntervalProfile603  252 000A0170 NtSetIoCompletion604  253 000A0190 NtSetIoCompletionEx605  254 000A01B0 NtSetLdtEntries606  255 000A01D0 NtSetLowEventPair607  256 000A01F0 NtSetLowWaitHighEventPair608  257 000A0210 NtSetQuotaInformationFile609  258 000A0230 NtSetSecurityObject610  259 000A0250 NtSetSystemEnvironmentValue611  25A 000A0270 NtSetSystemEnvironmentValueEx612  25B 000A0290 NtSetSystemInformation613  25C 000A02B0 NtSetSystemPowerState614  25D 000A02D0 NtSetSystemTime615  25E 000A02F0 NtSetThreadExecutionState616  25F 0009D990 NtSetTimer617  260 000A0310 NtSetTimer2618  261 000A0330 NtSetTimerEx619  262 000A0350 NtSetTimerResolution620  263 000A0370 NtSetUuidSeed621  264 0009D950 NtSetValueKey622  265 000A0390 NtSetVolumeInformationFile623  266 000A03B0 NtSetWnfProcessNotificationEvent624  267 000A03D0 NtShutdownSystem625  268 000A03F0 NtShutdownWorkerFactory626  269 000A0410 NtSignalAndWaitForSingleObject627  26A 000A0430 NtSinglePhaseReject628  26B 000A0450 NtStartProfile629  26C 000A0470 NtStopProfile630  26D 000A0490 NtSubscribeWnfStateChange631  26E 000A04B0 NtSuspendProcess632  26F 000A04D0 NtSuspendThread633  270 000A04F0 NtSystemDebugControl634  271 000A0510 NtTerminateEnclave635  272 000A0530 NtTerminateJobObject636  273 0009D2E0 NtTerminateProcess637  274 0009D7C0 NtTerminateThread638  275 000A0550 NtTestAlert639  276 000A0570 NtThawRegistry640  277 000A0590 NtThawTransactions641  278 000A05B0 NtTraceControl642  279 0009D910 NtTraceEvent643  27A 000A05D0 NtTranslateFilePath644  27B 000A05F0 NtUmsThreadYield645  27C 000A0610 NtUnloadDriver646  27D 000A0630 NtUnloadKey647  27E 000A0650 NtUnloadKey2648  27F 000A0670 NtUnloadKeyEx649  280 000A0690 NtUnlockFile650  281 000A06B0 NtUnlockVirtualMemory651  282 0009D2A0 NtUnmapViewOfSection652  283 000A06D0 NtUnmapViewOfSectionEx653  284 000A06F0 NtUnsubscribeWnfStateChange654  285 000A0710 NtUpdateWnfStateData655  286 000A0730 NtVdmControl656  287 000A0750 NtWaitForAlertByThreadId657  288 000A0770 NtWaitForDebugEvent658  289 000A0790 NtWaitForKeyedEvent659  28A 0009D8B0 NtWaitForMultipleObjects660  28B 0009D0A0 NtWaitForMultipleObjects32661  28C 0009CDE0 NtWaitForSingleObject662  28D 000A07B0 NtWaitForWorkViaWorkerFactory663  28E 000A07D0 NtWaitHighEventPair664  28F 000A07F0 NtWaitLowEventPair665  290 0009CD80 NtWorkerFactoryWorkerReady666  291 0009CE60 NtWriteFile667  292 0009D0C0 NtWriteFileGather668  293 0009D840 NtWriteRequestData669  294 0009D4A0 NtWriteVirtualMemory670  295 0009D620 NtYieldExecution671  296 0009CA30 NtdllDefWindowProc_A672  297 0009CA40 NtdllDefWindowProc_W673  298 0009CAF0 NtdllDialogWndProc_A674  299 0009CB00 NtdllDialogWndProc_W675  29A 000E5D50 PfxFindPrefix676  29B 000E5E30 PfxInitialize677  29C 000E5E50 PfxInsertPrefix678  29D 000E5F70 PfxRemovePrefix679  29E 00113940 PssNtCaptureSnapshot680  29F 00113E10 PssNtDuplicateSnapshot681  2A0 00113E90 PssNtFreeRemoteSnapshot682  2A1 001140A0 PssNtFreeSnapshot683  2A2 00114230 PssNtFreeWalkMarker684  2A3 00114260 PssNtQuerySnapshot685  2A4 00114510 PssNtValidateDescriptor686  2A5 001146A0 PssNtWalkSnapshot687  2A6 0007FF50 RtlAbortRXact688  2A7 0006D160 RtlAbsoluteToSelfRelativeSD689  2A8 00079980 RtlAcquirePebLock690  2A9 00077070 RtlAcquirePrivilege691  2AA 0007E780 RtlAcquireReleaseSRWLockExclusive692  2AB 00064AD0 RtlAcquireResourceExclusive693  2AC 000649B0 RtlAcquireResourceShared694  2AD 000290A0 RtlAcquireSRWLockExclusive695  2AE 00021760 RtlAcquireSRWLockShared696  2AF 00072250 RtlActivateActivationContext697  2B0 000722A0 RtlActivateActivationContextEx698  2B1 00019900 RtlActivateActivationContextUnsafeFast699  2B2 00077770 RtlAddAccessAllowedAce700  2B3 00078EC0 RtlAddAccessAllowedAceEx701  2B4 000E9100 RtlAddAccessAllowedObjectAce702  2B5 0008BB90 RtlAddAccessDeniedAce703  2B6 000857A0 RtlAddAccessDeniedAceEx704  2B7 000E9160 RtlAddAccessDeniedObjectAce705  2B8 000E91C0 RtlAddAccessFilterAce706  2B9 00066B60 RtlAddAce707  2BA 0008A760 RtlAddActionToRXact708  2BB 0004C420 RtlAddAtomToAtomTable709  2BC 00081110 RtlAddAttributeActionToRXact710  2BD 0008B1F0 RtlAddAuditAccessAce711  2BE 0008A890 RtlAddAuditAccessAceEx712  2BF 000E93D0 RtlAddAuditAccessObjectAce713  2C0 000E9440 RtlAddCompoundAce714  2C1 00067AC0 RtlAddFunctionTable715  2C2 00068610 RtlAddGrowableFunctionTable716  2C3 000EAEA0 RtlAddIntegrityLabelToBoundaryDescriptor717  2C4 00067180 RtlAddMandatoryAce718  2C5 000666F0 RtlAddProcessTrustLabelAce719  2C6 000134C0 RtlAddRefActivationContext720  2C7 000842D0 RtlAddRefMemoryStream721  2C8 000E95B0 RtlAddResourceAttributeAce722  2C9 0007F620 RtlAddSIDToBoundaryDescriptor723  2CA 000E9900 RtlAddScopedPolicyIDAce724  2CB 000D9560 RtlAddVectoredContinueHandler725  2CC 00081670 RtlAddVectoredExceptionHandler726  2CD 00076E60 RtlAddressInSectionTable727  2CE 000790D0 RtlAdjustPrivilege728  2CF 00070730 RtlAllocateActivationContextStack729  2D0 0006D810 RtlAllocateAndInitializeSid730  2D1 0008B130 RtlAllocateAndInitializeSidEx731  2D2 0004CA60 RtlAllocateHandle732  2D3 0002A9A0 RtlAllocateHeap733  2D4 0011B010 RtlAllocateMemoryBlockLookaside734  2D5 0011B130 RtlAllocateMemoryZone735  2D6 00084460 RtlAllocateWnfSerializationGroup736  2D7 000613A0 RtlAnsiCharToUnicodeChar737  2D8 00016DE0 RtlAnsiStringToUnicodeSize738  2D9 00019580 RtlAnsiStringToUnicodeString739  2DA 000EB380 RtlAppendAsciizToString740  2DB 000CBFB0 RtlAppendPathElement741  2DC 000EB3F0 RtlAppendStringToString742  2DD 00017270 RtlAppendUnicodeStringToString743  2DE 00037990 RtlAppendUnicodeToString744  2DF 000DBDC0 RtlApplicationVerifierStop745  2E0 000E6040 RtlApplyRXact746  2E1 0007FF20 RtlApplyRXactNoFlush747  2E2 000CBB40 RtlAppxIsFileOwnedByTrustedInstaller748  2E3 0007C230 RtlAreAllAccessesGranted749  2E4 000E60F0 RtlAreAnyAccessesGranted750  2E5 000EB4C0 RtlAreBitsClear751  2E6 000EB580 RtlAreBitsClearEx752  2E7 0007AE00 RtlAreBitsSet753  2E8 000751A0 RtlAreLongPathsEnabled754  2E9 000ED490 RtlAssert755  2EA 00068810 RtlAvlInsertNodeEx756  2EB 00067F60 RtlAvlRemoveNode757  2EC 000ED5C0 RtlBarrier758  2ED 000ED5D0 RtlBarrierForDelete759  2EE 000A0D7B RtlCallEnclaveReturn760  2EF 00112BE0 RtlCancelTimer761  2F0 0000CF10 RtlCanonicalizeDomainName762  2F1 0003FC80 RtlCapabilityCheck763  2F2 00088530 RtlCapabilityCheckForSingleSessionSku764  2F3 000A0E70 RtlCaptureContext765  2F4 000A0FB0 RtlCaptureContext2766  2F5 000515A0 RtlCaptureStackBackTrace767  2F6 00075A50 RtlCharToInteger768  2F7 000ED950 RtlCheckBootStatusIntegrity769  2F8 0007D550 RtlCheckForOrphanedCriticalSections770  2F9 000842E0 RtlCheckPortableOperatingSystem771  2FA 000458D0 RtlCheckRegistryKey772  2FB 00085890 RtlCheckSandboxedToken773  2FC 000EDAB0 RtlCheckSystemBootStatusIntegrity774  2FD 0003C650 RtlCheckTokenCapability775  2FE 000E6100 RtlCheckTokenMembership776  2FF 00036520 RtlCheckTokenMembershipEx777  300 0006ECB0 RtlCleanUpTEBLangLists778  301 00077DF0 RtlClearAllBits779  302 000EB640 RtlClearAllBitsEx780  303 0009C550 RtlClearBit781  304 000EB670 RtlClearBitEx782  305 0004B790 RtlClearBits783  306 000EB680 RtlClearBitsEx784  307 000674A0 RtlClearThreadWorkOnBehalfTicket785  308 000D5870 RtlCloneMemoryStream786  309 000D62A0 RtlCloneUserProcess787  30A 000F1BE0 RtlCmDecodeMemIoResource788  30B 000F1C50 RtlCmEncodeMemIoResource789  30C 000D7210 RtlCommitDebugInfo790  30D 000D5870 RtlCommitMemoryStream791  30E 000F2050 RtlCompactHeap792  30F 000F5420 RtlCompareAltitudes793  310 000A16C0 RtlCompareMemory794  311 000A1740 RtlCompareMemoryUlong795  312 0008B080 RtlCompareString796  313 00016090 RtlCompareUnicodeString797  314 00015FF0 RtlCompareUnicodeStrings798  315 0009B360 RtlCompleteProcessCloning799  316 00082790 RtlCompressBuffer800  317 00058940 RtlComputeCrc32801  318 000E04E0 RtlComputeImportTableHash802  319 000D54F0 RtlComputePrivatizedDllName_U803  31A 000894D0 RtlConnectToSm804  31B 000E4D70 RtlConsoleMultiByteToUnicodeN805  31C 000F5830 RtlConstructCrossVmEventPath806  31D 000F5830 RtlConstructCrossVmMutexPath807  31E 00087D00 RtlContractHashTable808  31F 0007A700 RtlConvertDeviceFamilyInfoToString809  320 00089F00 RtlConvertExclusiveToShared810  321 000EEB70 RtlConvertLCIDToString811  322 000852C0 RtlConvertSRWLockExclusiveToShared812  323 0007E300 RtlConvertSharedToExclusive813  324 00037250 RtlConvertSidToUnicodeString814  325 000D67E0 RtlConvertToAutoInheritSecurityObject815  326 000EB740 RtlCopyBitMap816  327 00050EC0 RtlCopyContext817  328 000F59D0 RtlCopyExtendedContext818  329 000790C0 RtlCopyLuid819  32A 000E6120 RtlCopyLuidAndAttributesArray820  32B 00085320 RtlCopyMappedMemory821  32C 000A3B40 RtlCopyMemory822  32D 000A1770 RtlCopyMemoryNonTemporal823  32E 000D5870 RtlCopyMemoryStreamTo824  32F 000D5870 RtlCopyOutOfProcessMemoryStreamTo825  330 0006CEE0 RtlCopySecurityDescriptor826  331 00067300 RtlCopySid827  332 000E6150 RtlCopySidAndAttributesArray828  333 000853B0 RtlCopyString829  334 000102F0 RtlCopyUnicodeString830  335 0007E8F0 RtlCrc32831  336 000F6140 RtlCrc64832  337 0003A450 RtlCreateAcl833  338 00072D50 RtlCreateActivationContext834  339 00066880 RtlCreateAndSetSD835  33A 0004CC70 RtlCreateAtomTable836  33B 000EDB10 RtlCreateBootStatusDataFile837  33C 00081E70 RtlCreateBoundaryDescriptor838  33D 0004DE90 RtlCreateEnvironment839  33E 0004DF00 RtlCreateEnvironmentEx840  33F 000732A0 RtlCreateHashTable841  340 0008A880 RtlCreateHashTableEx842  341 0000A8B0 RtlCreateHeap843  342 0007A480 RtlCreateMemoryBlockLookaside844  343 0007A650 RtlCreateMemoryZone845  344 000D6530 RtlCreateProcessParameters846  345 0004D530 RtlCreateProcessParametersEx847  346 0004D5A0 RtlCreateProcessParametersWithTemplate848  347 000D59A0 RtlCreateProcessReflection849  348 000D7220 RtlCreateQueryDebugBuffer850  349 000EE380 RtlCreateRegistryKey851  34A 0003C950 RtlCreateSecurityDescriptor852  34B 0003FA70 RtlCreateServiceSid853  34C 00087D40 RtlCreateSystemVolumeInformationFolder854  34D 0007CFC0 RtlCreateTagHeap855  34E 00009D50 RtlCreateTimer856  34F 00082820 RtlCreateTimerQueue857  350 000F6B60 RtlCreateUmsCompletionList858  351 000F6C80 RtlCreateUmsThreadContext859  352 00038AF0 RtlCreateUnicodeString860  353 00016570 RtlCreateUnicodeStringFromAsciiz861  354 000E1700 RtlCreateUserFiberShadowStack862  355 000E1780 RtlCreateUserProcess863  356 00088860 RtlCreateUserProcessEx864  357 000D67F0 RtlCreateUserSecurityObject865  358 00076200 RtlCreateUserStack866  359 00056040 RtlCreateUserThread867  35A 00084020 RtlCreateVirtualAccountSid868  35B 0003B850 RtlCultureNameToLCID869  35C 000E4EE0 RtlCustomCPToUnicodeN870  35D 0005AE50 RtlCutoverTimeToSystemTime871  35E 000D74C0 RtlDeCommitDebugInfo872  35F 000D65A0 RtlDeNormalizeProcessParams873  360 00070930 RtlDeactivateActivationContext874  361 000197B0 RtlDeactivateActivationContextUnsafeFast875  362 0007FEC0 RtlDebugPrintTimes876  363 00069E10 RtlDecodePointer877  364 000DC680 RtlDecodeRemotePointer878  365 000835B0 RtlDecodeSystemPointer879  366 000F5620 RtlDecompressBuffer880  367 0007F7F0 RtlDecompressBufferEx881  368 000F56A0 RtlDecompressFragment882  369 000D6890 RtlDefaultNpAcl883  36A 00065500 RtlDelete884  36B 00078670 RtlDeleteAce885  36C 0004C120 RtlDeleteAtomFromAtomTable886  36D 000ED5E0 RtlDeleteBarrier887  36E 00022E70 RtlDeleteBoundaryDescriptor888  36F 00010FC0 RtlDeleteCriticalSection889  370 00065000 RtlDeleteElementGenericTable890  371 0005B7A0 RtlDeleteElementGenericTableAvl891  372 0005B7E0 RtlDeleteElementGenericTableAvlEx892  373 000678E0 RtlDeleteFunctionTable893  374 00067DB0 RtlDeleteGrowableFunctionTable894  375 0007AE40 RtlDeleteHashTable895  376 000655A0 RtlDeleteNoSplay896  377 0008BE20 RtlDeleteRegistryValue897  378 00010F30 RtlDeleteResource898  379 0007D640 RtlDeleteSecurityObject899  37A 00009C00 RtlDeleteTimer900  37B 00112BF0 RtlDeleteTimerQueue901  37C 00084910 RtlDeleteTimerQueueEx902  37D 000F6D90 RtlDeleteUmsCompletionList903  37E 000F6DF0 RtlDeleteUmsThreadContext904  37F 000F6E50 RtlDequeueUmsCompletionListItems905  380 000F7810 RtlDeregisterSecureMemoryCacheCallback906  381 00085850 RtlDeregisterWait907  382 0000B5B0 RtlDeregisterWaitEx908  383 0001FD40 RtlDeriveCapabilitySidsFromName909  384 0008A620 RtlDestroyAtomTable910  385 0007D690 RtlDestroyEnvironment911  386 000854C0 RtlDestroyHandleTable912  387 00009680 RtlDestroyHeap913  388 00084F40 RtlDestroyMemoryBlockLookaside914  389 00084FA0 RtlDestroyMemoryZone915  38A 0007D690 RtlDestroyProcessParameters916  38B 000D74D0 RtlDestroyQueryDebugBuffer917  38C 00060190 RtlDetectHeapLeaks918  38D 00076180 RtlDetermineDosPathNameType_U919  38E 000CBCB0 RtlDisableThreadProfiling920  38F 0007F950 RtlDisownModuleHeapAllocation921  390 00063330 RtlDllShutdownInProgress922  391 00060A20 RtlDnsHostNameToComputerName923  392 00085B10 RtlDoesFileExists_U924  393 000FB1B0 RtlDoesNameContainWildCards925  394 0001A9E0 RtlDosApplyFileIsolationRedirection_Ustr926  395 000CC200 RtlDosLongPathNameToNtPathName_U_WithStatus927  396 000CC230 RtlDosLongPathNameToRelativeNtPathName_U_WithStatus928  397 00017310 RtlDosPathNameToNtPathName_U929  398 00016BE0 RtlDosPathNameToNtPathName_U_WithStatus930  399 00016B80 RtlDosPathNameToRelativeNtPathName_U931  39A 0001AEE0 RtlDosPathNameToRelativeNtPathName_U_WithStatus932  39B 00088D90 RtlDosSearchPath_U933  39C 00019C40 RtlDosSearchPath_Ustr934  39D 000EAFF0 RtlDowncaseUnicodeChar935  39E 0007BC60 RtlDowncaseUnicodeString936  39F 000FB9D0 RtlDrainNonVolatileFlush937  3A0 000E8A80 RtlDumpResource938  3A1 00078D30 RtlDuplicateUnicodeString939  3A2 0008A6E0 RtlEmptyAtomTable940  3A3 000E8AD0 RtlEnableEarlyCriticalSectionEventCreation941  3A4 000CBD20 RtlEnableThreadProfiling942  3A5 000A0CA0 RtlEnclaveCallDispatch943  3A6 000A0CD1 RtlEnclaveCallDispatchReturn944  3A7 00071E30 RtlEncodePointer945  3A8 000DC6F0 RtlEncodeRemotePointer946  3A9 00085130 RtlEncodeSystemPointer947  3AA 00081000 RtlEndEnumerationHashTable948  3AB 0007FEC0 RtlEndStrongEnumerationHashTable949  3AC 000F59A0 RtlEndWeakEnumerationHashTable950  3AD 0002FAA0 RtlEnterCriticalSection951  3AE 000F6EE0 RtlEnterUmsSchedulingMode952  3AF 000F21E0 RtlEnumProcessHeaps953  3B0 00067740 RtlEnumerateEntryHashTable954  3B1 00064F90 RtlEnumerateGenericTable955  3B2 00064900 RtlEnumerateGenericTableAvl956  3B3 000F75C0 RtlEnumerateGenericTableLikeADirectory957  3B4 000657F0 RtlEnumerateGenericTableWithoutSplaying958  3B5 00064920 RtlEnumerateGenericTableWithoutSplayingAvl959  3B6 000EB000 RtlEqualComputerName960  3B7 0000CE90 RtlEqualDomainName961  3B8 000E6210 RtlEqualLuid962  3B9 00037DE0 RtlEqualPrefixSid963  3BA 00038310 RtlEqualSid964  3BB 00060980 RtlEqualString965  3BC 00020D10 RtlEqualUnicodeString966  3BD 00085700 RtlEqualWnfChangeStamps967  3BE 00085B70 RtlEraseUnicodeString968  3BF 000FBB20 RtlEthernetAddressToStringA969  3C0 000FBB90 RtlEthernetAddressToStringW970  3C1 000FBC00 RtlEthernetStringToAddressA971  3C2 000FBD40 RtlEthernetStringToAddressW972  3C3 000F6FC0 RtlExecuteUmsThread973  3C4 0005D980 RtlExitUserProcess974  3C5 000545F0 RtlExitUserThread975  3C6 00015630 RtlExpandEnvironmentStrings976  3C7 00076CF0 RtlExpandEnvironmentStrings_U977  3C8 00088590 RtlExpandHashTable978  3C9 00083730 RtlExtendCorrelationVector979  3CA 00001A60 RtlExtendMemoryBlockLookaside980  3CB 00001A70 RtlExtendMemoryZone981  3CC 000EB950 RtlExtractBitMap982  3CD 000FBFE0 RtlFillMemory983  3CE 000A18B0 RtlFillMemoryNonTemporal984  3CF 000FC000 RtlFillNonVolatileMemory985  3D0 0007FEC0 RtlFinalReleaseOutOfProcessMemoryStream986  3D1 0003C040 RtlFindAceByType987  3D2 0001CD80 RtlFindActivationContextSectionGuid988  3D3 0001C6C0 RtlFindActivationContextSectionString989  3D4 0001D390 RtlFindCharInUnicodeString990  3D5 00085E40 RtlFindClearBits991  3D6 00048660 RtlFindClearBitsAndSet992  3D7 000EBAF0 RtlFindClearBitsEx993  3D8 000EBDF0 RtlFindClearRuns994  3D9 000F1D40 RtlFindClosestEncodableLength995  3DA 00079B80 RtlFindExportedRoutineByName996  3DB 00052570 RtlFindLastBackwardRunClear997  3DC 00085390 RtlFindLeastSignificantBit998  3DD 000EC0D0 RtlFindLongestRunClear999  3DE 00068F00 RtlFindMessage1000  3DF 00085480 RtlFindMostSignificantBit1001  3E0 00085D10 RtlFindNextForwardRunClear1002  3E1 000899D0 RtlFindSetBits1003  3E2 000EC110 RtlFindSetBitsAndClear1004  3E3 000EC4B0 RtlFindSetBitsAndClearEx1005  3E4 000EC830 RtlFindSetBitsEx1006  3E5 00087110 RtlFindUnicodeSubstring1007  3E6 000A08E0 RtlFirstEntrySList1008  3E7 00037710 RtlFirstFreeAce1009  3E8 00074750 RtlFlsAlloc1010  3E9 00073560 RtlFlsFree1011  3EA 00052500 RtlFlsGetValue1012  3EB 0004CDA0 RtlFlsSetValue1013  3EC 00073E70 RtlFlushHeaps1014  3ED 000FBA00 RtlFlushNonVolatileMemory1015  3EE 000FC0B0 RtlFlushNonVolatileMemoryRanges1016  3EF 000F78D0 RtlFlushSecureMemoryCache1017  3F0 00036C40 RtlFormatCurrentUserKeyPath1018  3F1 000FC2A0 RtlFormatMessage1019  3F2 00065C30 RtlFormatMessageEx1020  3F3 000707F0 RtlFreeActivationContextStack1021  3F4 00016760 RtlFreeAnsiString1022  3F5 0004CCE0 RtlFreeHandle1023  3F6 00024760 RtlFreeHeap1024  3F7 0011B190 RtlFreeMemoryBlockLookaside1025  3F8 000FC140 RtlFreeNonVolatileToken1026  3F9 0008AA60 RtlFreeOemString1027  3FA 00075090 RtlFreeSid1028  3FB 000707B0 RtlFreeThreadActivationContextStack1029  3FC 00016760 RtlFreeUTF8String1030  3FD 00016760 RtlFreeUnicodeString1031  3FE 000E1810 RtlFreeUserFiberShadowStack1032  3FF 0007F5E0 RtlFreeUserStack1033  400 00069980 RtlGUIDFromString1034  401 000FC490 RtlGenerate8dot3Name1035  402 000710E0 RtlGetAce1036  403 0006B4C0 RtlGetActiveActivationContext1037  404 00083970 RtlGetActiveConsoleId1038  405 00043ED0 RtlGetAppContainerNamedObjectPath1039  406 00043E00 RtlGetAppContainerParent1040  407 00044670 RtlGetAppContainerSidType1041  408 000ED720 RtlGetCallersAddress1042  409 00080880 RtlGetCompressionWorkSpaceSize1043  40A 000FCBA0 RtlGetConsoleSessionForegroundProcessId1044  40B 00079C90 RtlGetControlSecurityDescriptor1045  40C 000E8B00 RtlGetCriticalSectionRecursionCount1046  40D 0005D240 RtlGetCurrentDirectory_U1047  40E 000FCBE0 RtlGetCurrentPeb1048  40F 000A19B0 RtlGetCurrentProcessorNumber1049  410 000A19F0 RtlGetCurrentProcessorNumberEx1050  411 00024850 RtlGetCurrentServiceSessionId1051  412 0006DAC0 RtlGetCurrentTransaction1052  413 00058990 RtlGetCurrentUmsThread1053  414 00070C40 RtlGetDaclSecurityDescriptor1054  415 0003F840 RtlGetDeviceFamilyInfoEnum1055  416 0007E680 RtlGetElementGenericTable1056  417 000F76F0 RtlGetElementGenericTableAvl1057  418 00081B60 RtlGetEnabledExtendedFeatures1058  419 000822A0 RtlGetExePath1059  41A 00051BB0 RtlGetExtendedContextLength1060  41B 00051D60 RtlGetExtendedContextLength21061  41C 000F59F0 RtlGetExtendedFeaturesMask1062  41D 000468E0 RtlGetFileMUIPath1063  41E 000CD990 RtlGetFrame1064  41F 000812C0 RtlGetFullPathName_U1065  420 0001D800 RtlGetFullPathName_UEx1066  421 0001D890 RtlGetFullPathName_UstrEx1067  422 000E09B0 RtlGetFunctionTableListHead1068  423 00079940 RtlGetGroupSecurityDescriptor1069  424 0004C8C0 RtlGetIntegerAtom1070  425 00043D50 RtlGetInterruptTimePrecise1071  426 0007C570 RtlGetLastNtStatus1072  427 000019F0 RtlGetLastWin32Error1073  428 000777A0 RtlGetLengthWithoutLastFullDosOrNtPathElement1074  429 00085960 RtlGetLengthWithoutTrailingPathSeperators1075  42A 0007C780 RtlGetLocaleFileMappingAddress1076  42B 00085710 RtlGetLongestNtPathLength1077  42C 000E58A0 RtlGetMultiTimePrecise1078  42D 0009D420 RtlGetNativeSystemInformation1079  42E 00082260 RtlGetNextEntryHashTable1080  42F 000F71C0 RtlGetNextUmsListItem1081  430 000FC160 RtlGetNonVolatileToken1082  431 0009C5A0 RtlGetNtGlobalFlags1083  432 0003CBA0 RtlGetNtProductType1084  433 00016BB0 RtlGetNtSystemRoot1085  434 000D4840 RtlGetNtVersionNumbers1086  435 000784A0 RtlGetOwnerSecurityDescriptor1087  436 0003C490 RtlGetParentLocaleName1088  437 00057D70 RtlGetPersistedStateLocation1089  438 000F21F0 RtlGetProcessHeaps1090  439 0008A430 RtlGetProcessPreferredUILanguages1091  43A 0007DD20 RtlGetProductInfo1092  43B 000FD560 RtlGetReturnAddressHijackTarget1093  43C 00075B10 RtlGetSaclSecurityDescriptor1094  43D 00083920 RtlGetSearchPath1095  43E 00085910 RtlGetSecurityDescriptorRMControl1096  43F 000E6230 RtlGetSessionProperties1097  440 000EDC70 RtlGetSetBootStatusData1098  441 0003CC00 RtlGetSuiteMask1099  442 0008B800 RtlGetSystemBootStatus1100  443 000EDDD0 RtlGetSystemBootStatusEx1101  444 00075E90 RtlGetSystemPreferredUILanguages1102  445 0009C430 RtlGetSystemTimeAndBias1103  446 00040090 RtlGetSystemTimePrecise1104  447 00060620 RtlGetThreadErrorMode1105  448 000EEC70 RtlGetThreadLangIdByIndex1106  449 00035CA0 RtlGetThreadPreferredUILanguages1107  44A 0006B5B0 RtlGetThreadWorkOnBehalfTicket1108  44B 000458B0 RtlGetTokenNamedObjectPath1109  44C 000EED40 RtlGetUILanguageInfo1110  44D 000F71F0 RtlGetUmsCompletionListEvent1111  44E 000CE5A0 RtlGetUnloadEventTrace1112  44F 000CE5B0 RtlGetUnloadEventTraceEx1113  450 00001BC0 RtlGetUserInfoHeap1114  451 0007BFA0 RtlGetUserPreferredUILanguages1115  452 0003E4D0 RtlGetVersion1116  453 000E09C0 RtlGrowFunctionTable1117  454 0006DDB0 RtlGuardCheckLongJumpTarget1118  455 0001CCB0 RtlHashUnicodeString1119  456 000FD790 RtlHeapTrkInitialize1120  457 000793F0 RtlIdentifierAuthoritySid1121  458 0000D0C0 RtlIdnToAscii1122  459 000FEBE0 RtlIdnToNameprepUnicode1123  45A 0000C6F0 RtlIdnToUnicode1124  45B 0007D8C0 RtlImageDirectoryEntryToData1125  45C 00035BD0 RtlImageNtHeader1126  45D 00032AD0 RtlImageNtHeaderEx1127  45E 00033AA0 RtlImageRvaToSection1128  45F 00086860 RtlImageRvaToVa1129  460 000772E0 RtlImpersonateSelf1130  461 000772F0 RtlImpersonateSelfEx1131  462 000837C0 RtlIncrementCorrelationVector1132  463 000152F0 RtlInitAnsiString1133  464 00016530 RtlInitAnsiStringEx1134  465 000ED610 RtlInitBarrier1135  466 000E5040 RtlInitCodePageTable1136  467 00067510 RtlInitEnumerationHashTable1137  468 0007FEC0 RtlInitMemoryStream1138  469 000E5140 RtlInitNlsTables1139  46A 0007FEC0 RtlInitOutOfProcessMemoryStream1140  46B 000152F0 RtlInitString1141  46C 000EB450 RtlInitStringEx1142  46D 00067580 RtlInitStrongEnumerationHashTable1143  46E 00085950 RtlInitUTF8String1144  46F 000EB450 RtlInitUTF8StringEx1145  470 0003BA40 RtlInitUnicodeString1146  471 0001C270 RtlInitUnicodeStringEx1147  472 000F59B0 RtlInitWeakEnumerationHashTable1148  473 000842D0 RtlInitializeAtomPackage1149  474 0007B220 RtlInitializeBitMap1150  475 0009C560 RtlInitializeBitMapEx1151  476 00069E60 RtlInitializeConditionVariable1152  477 000FEC20 RtlInitializeContext1153  478 000855A0 RtlInitializeCorrelationVector1154  479 00061460 RtlInitializeCriticalSection1155  47A 00064830 RtlInitializeCriticalSectionAndSpinCount1156  47B 00020BC0 RtlInitializeCriticalSectionEx1157  47C 00051C00 RtlInitializeExtendedContext1158  47D 00051F90 RtlInitializeExtendedContext21159  47E 0007D910 RtlInitializeGenericTable1160  47F 0007DCC0 RtlInitializeGenericTableAvl1161  480 0007F910 RtlInitializeHandleTable1162  481 0008BF80 RtlInitializeNtUserPfn1163  482 0008B460 RtlInitializeRXact1164  483 000112E0 RtlInitializeResource1165  484 0006EA90 RtlInitializeSListHead1166  485 00069E60 RtlInitializeSRWLock1167  486 00040060 RtlInitializeSid1168  487 00040000 RtlInitializeSidEx1169  488 00065090 RtlInsertElementGenericTable1170  489 0005B9D0 RtlInsertElementGenericTableAvl1171  48A 00065100 RtlInsertElementGenericTableFull1172  48B 0005BA40 RtlInsertElementGenericTableFullAvl1173  48C 000675C0 RtlInsertEntryHashTable1174  48D 00068300 RtlInstallFunctionTableCallback1175  48E 000ED780 RtlInt64ToUnicodeString1176  48F 000163A0 RtlIntegerToChar1177  490 000164A0 RtlIntegerToUnicodeString1178  491 00079F10 RtlInterlockedClearBitRun1179  492 000700A0 RtlInterlockedFlushSList1180  493 000A08F0 RtlInterlockedPopEntrySList1181  494 00069E50 RtlInterlockedPushEntrySList1182  495 000A09A0 RtlInterlockedPushListSList1183  496 000FEEE0 RtlInterlockedPushListSListEx1184  497 000ECB60 RtlInterlockedSetBitRun1185  498 000F1DF0 RtlIoDecodeMemIoResource1186  499 000F1E90 RtlIoEncodeMemIoResource1187  49A 0007D7A0 RtlIpv4AddressToStringA1188  49B 0007D700 RtlIpv4AddressToStringExA1189  49C 0007B0F0 RtlIpv4AddressToStringExW1190  49D 0007B1C0 RtlIpv4AddressToStringW1191  49E 00077C00 RtlIpv4StringToAddressA1192  49F 00077B70 RtlIpv4StringToAddressExA1193  4A0 0000D5D0 RtlIpv4StringToAddressExW1194  4A1 0000D720 RtlIpv4StringToAddressW1195  4A2 000775E0 RtlIpv6AddressToStringA1196  4A3 000774F0 RtlIpv6AddressToStringExA1197  4A4 000658A0 RtlIpv6AddressToStringExW1198  4A5 000659E0 RtlIpv6AddressToStringW1199  4A6 0007CCA0 RtlIpv6StringToAddressA1200  4A7 0007CC00 RtlIpv6StringToAddressExA1201  4A8 0000D950 RtlIpv6StringToAddressExW1202  4A9 0000DB60 RtlIpv6StringToAddressW1203  4AA 000DF970 RtlIsActivationContextActive1204  4AB 0003C980 RtlIsCapabilitySid1205  4AC 000838F0 RtlIsCloudFilesPlaceholder1206  4AD 000E8B30 RtlIsCriticalSectionLocked1207  4AE 00014890 RtlIsCriticalSectionLockedByThread1208  4AF 00074AD0 RtlIsCurrentProcess1209  4B0 000FF030 RtlIsCurrentThread1210  4B1 0009B460 RtlIsCurrentThreadAttachExempt1211  4B2 00077040 RtlIsDosDeviceName_U1212  4B3 00083FC0 RtlIsElevatedRid1213  4B4 000791E0 RtlIsGenericTableEmpty1214  4B5 000852F0 RtlIsGenericTableEmptyAvl1215  4B6 00040200 RtlIsMultiSessionSku1216  4B7 00082050 RtlIsMultiUsersInSessionSku1217  4B8 000FB200 RtlIsNameInExpression1218  4B9 000FB2B0 RtlIsNameInUnUpcasedExpression1219  4BA 000FC920 RtlIsNameLegalDOS8Dot31220  4BB 000FF060 RtlIsNonEmptyDirectoryReparsePointAllowed1221  4BC 001004E0 RtlIsNormalizedString1222  4BD 00083CB0 RtlIsPackageSid1223  4BE 00046710 RtlIsParentOfChildAppContainer1224  4BF 0007D5F0 RtlIsPartialPlaceholder1225  4C0 000FEEF0 RtlIsPartialPlaceholderFileHandle1226  4C1 000FEF50 RtlIsPartialPlaceholderFileInfo1227  4C2 00010870 RtlIsProcessorFeaturePresent1228  4C3 00078480 RtlIsStateSeparationEnabled1229  4C4 00064350 RtlIsTextUnicode1230  4C5 0007D8F0 RtlIsThreadWithinLoaderCallout1231  4C6 000E62E0 RtlIsUntrustedObject1232  4C7 0004C9A0 RtlIsValidHandle1233  4C8 0004C960 RtlIsValidIndexHandle1234  4C9 000FCCC0 RtlIsValidLocaleName1235  4CA 00067100 RtlIsValidProcessTrustLabelSid1236  4CB 000FF080 RtlIsZeroMemory1237  4CC 001005B0 RtlKnownExceptionFilter1238  4CD 0003B020 RtlLCIDToCultureName1239  4CE 00001010 RtlLargeIntegerToChar1240  4CF 0003B2F0 RtlLcidToLocaleName1241  4D0 0002F230 RtlLeaveCriticalSection1242  4D1 00079FB0 RtlLengthRequiredSid1243  4D2 000712E0 RtlLengthSecurityDescriptor1244  4D3 0006E0B0 RtlLengthSid1245  4D4 00036D50 RtlLengthSidAsUnicodeString1246  4D5 00046F50 RtlLoadString1247  4D6 000E5AB0 RtlLocalTimeToSystemTime1248  4D7 0003BA90 RtlLocaleNameToLcid1249  4D8 000F5A10 RtlLocateExtendedFeature1250  4D9 00071490 RtlLocateExtendedFeature21251  4DA 00081050 RtlLocateLegacyContext1252  4DB 000EDDF0 RtlLockBootStatusData1253  4DC 00083480 RtlLockCurrentThread1254  4DD 0005E390 RtlLockHeap1255  4DE 0005D430 RtlLockMemoryBlockLookaside1256  4DF 000D5870 RtlLockMemoryStreamRegion1257  4E0 0005D4A0 RtlLockMemoryZone1258  4E1 0005D730 RtlLockModuleSection1259  4E2 00100D80 RtlLogStackBackTrace1260  4E3 0004C640 RtlLookupAtomInAtomTable1261  4E4 00065210 RtlLookupElementGenericTable1262  4E5 0005BBB0 RtlLookupElementGenericTableAvl1263  4E6 000F7520 RtlLookupElementGenericTableFull1264  4E7 0005BB70 RtlLookupElementGenericTableFullAvl1265  4E8 00067650 RtlLookupEntryHashTable1266  4E9 00089F30 RtlLookupFirstMatchingElementGenericTableAvl1267  4EA 00032BE0 RtlLookupFunctionEntry1268  4EB 0009C2A0 RtlLookupFunctionTable1269  4EC 0006D180 RtlMakeSelfRelativeSD1270  4ED 00037EA0 RtlMapGenericMask1271  4EE 00001A10 RtlMapSecurityErrorToNtStatus1272  4EF 000A3B40 RtlMoveMemory1273  4F0 0006DAE0 RtlMultiAppendUnicodeStringBuffer1274  4F1 0004EB30 RtlMultiByteToUnicodeN1275  4F2 00016E10 RtlMultiByteToUnicodeSize1276  4F3 000F2640 RtlMultipleAllocateHeap1277  4F4 000F26C0 RtlMultipleFreeHeap1278  4F5 000D6C60 RtlNewInstanceSecurityObject1279  4F6 000D6D90 RtlNewSecurityGrantedAccess1280  4F7 00088420 RtlNewSecurityObject1281  4F8 00079B10 RtlNewSecurityObjectEx1282  4F9 00085C00 RtlNewSecurityObjectWithMultipleInheritance1283  4FA 00088C00 RtlNormalizeProcessParams1284  4FB 000E6470 RtlNormalizeSecurityDescriptor1285  4FC 00080120 RtlNormalizeString1286  4FD 00101790 RtlNotifyFeatureUsage1287  4FE 000CC260 RtlNtPathNameToDosPathName1288  4FF 000507F0 RtlNtStatusToDosError1289  500 000758D0 RtlNtStatusToDosErrorNoTeb1290  501 0011D430 RtlNtdllName1291  502 00083910 RtlNumberGenericTableElements1292  503 000819C0 RtlNumberGenericTableElementsAvl1293  504 000ECCF0 RtlNumberOfClearBits1294  505 000ECD20 RtlNumberOfClearBitsEx1295  506 000ECD50 RtlNumberOfClearBitsInRange1296  507 00076EA0 RtlNumberOfSetBits1297  508 000ECD80 RtlNumberOfSetBitsEx1298  509 000ECF20 RtlNumberOfSetBitsInRange1299  50A 000854F0 RtlNumberOfSetBitsUlongPtr1300  50B 00016DE0 RtlOemStringToUnicodeSize1301  50C 00060C80 RtlOemStringToUnicodeString1302  50D 00061000 RtlOemToUnicodeN1303  50E 00016790 RtlOpenCurrentUser1304  50F 00101D00 RtlOsDeploymentState1305  510 000E6940 RtlOwnerAcesPresent1306  511 00034A40 RtlPcToFileHeader1307  512 000EADE0 RtlPinAtomInAtomTable1308  513 0006B590 RtlPopFrame1309  514 00060B20 RtlPrefixString1310  515 00015F60 RtlPrefixUnicodeString1311  516 0009B4A0 RtlPrepareForProcessCloning1312  517 0005DCA0 RtlProcessFlsData1313  518 0000E0E0 RtlProtectHeap1314  519 0007CAA0 RtlPublishWnfStateData1315  51A 0006A3A0 RtlPushFrame1316  51B 00079CC0 RtlQueryActivationContextApplicationSettings1317  51C 00101820 RtlQueryAllFeatureConfigurations1318  51D 0004C220 RtlQueryAtomInAtomTable1319  51E 000E8B50 RtlQueryCriticalSectionOwner1320  51F 0006B630 RtlQueryDepthSList1321  520 000EE3C0 RtlQueryDynamicTimeZoneInformation1322  521 00080F70 RtlQueryElevationFlags1323  522 000157E0 RtlQueryEnvironmentVariable1324  523 0004DE20 RtlQueryEnvironmentVariable_U1325  524 0005CB70 RtlQueryFeatureConfiguration1326  525 001018D0 RtlQueryFeatureConfigurationChangeStamp1327  526 001018E0 RtlQueryFeatureUsageNotificationSubscriptions1328  527 00073E90 RtlQueryHeapInformation1329  528 000E18F0 RtlQueryImageMitigationPolicy1330  529 00078C90 RtlQueryInformationAcl1331  52A 00012DE0 RtlQueryInformationActivationContext1332  52B 0007E350 RtlQueryInformationActiveActivationContext1333  52C 000D5870 RtlQueryInterfaceMemoryStream1334  52D 000E3B30 RtlQueryModuleInformation1335  52E 000694E0 RtlQueryPackageClaims1336  52F 00069420 RtlQueryPackageIdentity1337  530 00069470 RtlQueryPackageIdentityEx1338  531 00040150 RtlQueryPerformanceCounter1339  532 00071140 RtlQueryPerformanceFrequency1340  533 000D7510 RtlQueryProcessBackTraceInformation1341  534 000D76A0 RtlQueryProcessDebugInformation1342  535 000D7B80 RtlQueryProcessHeapInformation1343  536 000D7F60 RtlQueryProcessLockInformation1344  537 000FEFB0 RtlQueryProcessPlaceholderCompatibilityMode1345  538 000818C0 RtlQueryProtectedPolicy1346  539 000EE3D0 RtlQueryRegistryValueWithFallback1347  53A 000EE520 RtlQueryRegistryValues1348  53B 00084F10 RtlQueryRegistryValuesEx1349  53C 000446F0 RtlQueryResourcePolicy1350  53D 000D6EC0 RtlQuerySecurityObject1351  53E 000F2730 RtlQueryTagHeap1352  53F 0007FED0 RtlQueryThreadPlaceholderCompatibilityMode1353  540 000CBE20 RtlQueryThreadProfiling1354  541 00057AA0 RtlQueryTimeZoneInformation1355  542 000832C0 RtlQueryTokenHostIdAsUlong641356  543 000F7250 RtlQueryUmsThreadInformation1357  544 0005CDF0 RtlQueryUnbiasedInterruptTime1358  545 00101E40 RtlQueryValidationRunlevel1359  546 00082C70 RtlQueryWnfMetaNotification1360  547 00044F20 RtlQueryWnfStateData1361  548 00083BE0 RtlQueryWnfStateDataWithExplicitScope1362  549 000DBF50 RtlQueueApcWow64Thread1363  54A 0000B780 RtlQueueWorkItem1364  54B 00101F00 RtlRaiseCustomSystemEventTrigger1365  54C 00051020 RtlRaiseException1366  54D 000A1A60 RtlRaiseExceptionForReturnAddressHijack1367  54E 000A1640 RtlRaiseNoncontinuableException1368  54F 00102310 RtlRaiseStatus1369  550 00043C90 RtlRandom1370  551 00043C90 RtlRandomEx1371  552 00027DC0 RtlRbInsertNodeEx1372  553 0002A0A0 RtlRbRemoveNode1373  554 00023640 RtlReAllocateHeap1374  555 000D5870 RtlReadMemoryStream1375  556 000D5870 RtlReadOutOfProcessMemoryStream1376  557 000CBE50 RtlReadThreadProfilingData1377  558 0007F1B0 RtlRealPredecessor1378  559 00065850 RtlRealSuccessor1379  55A 000093B0 RtlRegisterFeatureConfigurationChangeNotification1380  55B 00063B70 RtlRegisterForWnfMetaNotification1381  55C 000F7940 RtlRegisterSecureMemoryCacheCallback1382  55D 000544C0 RtlRegisterThreadWithCsrss1383  55E 0000BE70 RtlRegisterWait1384  55F 00013570 RtlReleaseActivationContext1385  560 000842D0 RtlReleaseMemoryStream1386  561 00011F80 RtlReleasePath1387  562 00077410 RtlReleasePebLock1388  563 00080A70 RtlReleasePrivilege1389  564 0001A320 RtlReleaseRelativeName1390  565 00064C10 RtlReleaseResource1391  566 00012C70 RtlReleaseSRWLockExclusive1392  567 00021920 RtlReleaseSRWLockShared1393  568 000FED50 RtlRemoteCall1394  569 0007C240 RtlRemoveEntryHashTable1395  56A 00088760 RtlRemovePrivileges1396  56B 000D9580 RtlRemoveVectoredContinueHandler1397  56C 00082070 RtlRemoveVectoredExceptionHandler1398  56D 000E6950 RtlReplaceSidInSd1399  56E 00087000 RtlReplaceSystemDirectoryInPath1400  56F 000DC890 RtlReportException1401  570 000DC960 RtlReportExceptionEx1402  571 0005DE40 RtlReportSilentProcessExit1403  572 000842D0 RtlReportSqmEscalation1404  573 000EAF30 RtlResetMemoryBlockLookaside1405  574 000EAF90 RtlResetMemoryZone1406  575 0008C0A0 RtlResetNtUserPfn1407  576 000E51C0 RtlResetRtlTranslations1408  577 000EDE10 RtlRestoreBootStatusDefaults1409  578 0006DCA0 RtlRestoreContext1410  579 00050770 RtlRestoreLastWin32Error1411  57A 000EDF40 RtlRestoreSystemBootStatusDefaults1412  57B 000EF1C0 RtlRestoreThreadPreferredUILanguages1413  57C 0008C120 RtlRetrieveNtUserPfn1414  57D 000D5870 RtlRevertMemoryStream1415  57E 000E6C60 RtlRunDecodeUnicodeString1416  57F 000E6CC0 RtlRunEncodeUnicodeString1417  580 0000A530 RtlRunOnceBeginInitialize1418  581 00043AA0 RtlRunOnceComplete1419  582 00043820 RtlRunOnceExecuteOnce1420  583 00069E60 RtlRunOnceInitialize1421  584 00087CC0 RtlSecondsSince1970ToTime1422  585 000E5B20 RtlSecondsSince1980ToTime1423  586 000D5870 RtlSeekMemoryStream1424  587 0006CFA0 RtlSelfRelativeToAbsoluteSD1425  588 00088C20 RtlSelfRelativeToAbsoluteSD21426  589 00089810 RtlSendMsgToSm1427  58A 0007B010 RtlSetAllBits1428  58B 000ED1A0 RtlSetAllBitsEx1429  58C 000E6D80 RtlSetAttributesSecurityDescriptor1430  58D 00081090 RtlSetBit1431  58E 0009C570 RtlSetBitEx1432  58F 00048990 RtlSetBits1433  590 000ED210 RtlSetBitsEx1434  591 0007F880 RtlSetControlSecurityDescriptor1435  592 00071510 RtlSetCriticalSectionSpinCount1436  593 0005CFE0 RtlSetCurrentDirectory_U1437  594 0008BAC0 RtlSetCurrentEnvironment1438  595 000692F0 RtlSetCurrentTransaction1439  596 0003C8E0 RtlSetDaclSecurityDescriptor1440  597 000EE550 RtlSetDynamicTimeZoneInformation1441  598 000829D0 RtlSetEnvironmentStrings1442  599 0004E110 RtlSetEnvironmentVar1443  59A 0004DEB0 RtlSetEnvironmentVariable1444  59B 000F5A30 RtlSetExtendedFeaturesMask1445  59C 00101960 RtlSetFeatureConfigurations1446  59D 00038020 RtlSetGroupSecurityDescriptor1447  59E 00073CA0 RtlSetHeapInformation1448  59F 000E2350 RtlSetImageMitigationPolicy1449  5A0 000E9B80 RtlSetInformationAcl1450  5A1 00112C10 RtlSetIoCompletionCallback1451  5A2 00050770 RtlSetLastWin32Error1452  5A3 00050750 RtlSetLastWin32ErrorAndNtStatusFromNtStatus1453  5A4 000D5870 RtlSetMemoryStreamSize1454  5A5 00038080 RtlSetOwnerSecurityDescriptor1455  5A6 000EE330 RtlSetPortableOperatingSystem1456  5A7 000D8300 RtlSetProcessDebugInformation1457  5A8 0008B9A0 RtlSetProcessIsCritical1458  5A9 000FEFD0 RtlSetProcessPlaceholderCompatibilityMode1459  5AA 00089670 RtlSetProcessPreferredUILanguages1460  5AB 00080B20 RtlSetProtectedPolicy1461  5AC 00085A60 RtlSetProxiedProcessId1462  5AD 00067340 RtlSetSaclSecurityDescriptor1463  5AE 0007F970 RtlSetSearchPathMode1464  5AF 00085860 RtlSetSecurityDescriptorRMControl1465  5B0 00076660 RtlSetSecurityObject1466  5B1 000D71D0 RtlSetSecurityObjectEx1467  5B2 000857D0 RtlSetSystemBootStatus1468  5B3 000EDF80 RtlSetSystemBootStatusEx1469  5B4 0004D320 RtlSetThreadErrorMode1470  5B5 00088FC0 RtlSetThreadIsCritical1471  5B6 0007CA70 RtlSetThreadPlaceholderCompatibilityMode1472  5B7 000842D0 RtlSetThreadPoolStartFunc1473  5B8 0003EC40 RtlSetThreadPreferredUILanguages1474  5B9 0003EBF0 RtlSetThreadPreferredUILanguages21475  5BA 00020570 RtlSetThreadSubProcessTag1476  5BB 00020500 RtlSetThreadWorkOnBehalfTicket1477  5BC 000EE560 RtlSetTimeZoneInformation1478  5BD 00112C00 RtlSetTimer1479  5BE 000F72F0 RtlSetUmsThreadInformation1480  5BF 0007F8D0 RtlSetUnhandledExceptionFilter1481  5C0 000F2AD0 RtlSetUserFlagsHeap1482  5C1 00001F60 RtlSetUserValueHeap1483  5C2 0007BB30 RtlSidDominates1484  5C3 00067070 RtlSidDominatesForTrust1485  5C4 000E6DB0 RtlSidEqualLevel1486  5C5 0007BEF0 RtlSidHashInitialize1487  5C6 00077A60 RtlSidHashLookup1488  5C7 000E6E40 RtlSidIsHigherLevel1489  5C8 00024160 RtlSizeHeap1490  5C9 00064190 RtlSleepConditionVariableCS1491  5CA 00063EF0 RtlSleepConditionVariableSRW1492  5CB 000652F0 RtlSplay1493  5CC 000810A0 RtlStartRXact1494  5CD 000D5870 RtlStatMemoryStream1495  5CE 00069A60 RtlStringFromGUID1496  5CF 00069A70 RtlStringFromGUIDEx1497  5D0 00067810 RtlStronglyEnumerateEntryHashTable1498  5D1 000751C0 RtlSubAuthorityCountSid1499  5D2 000714F0 RtlSubAuthoritySid1500  5D3 00101A60 RtlSubscribeForFeatureUsageNotification1501  5D4 00042450 RtlSubscribeWnfStateChangeNotification1502  5D5 000657C0 RtlSubtreePredecessor1503  5D6 000F74F0 RtlSubtreeSuccessor1504  5D7 0003CC30 RtlSwitchedVVI1505  5D8 0007D480 RtlSystemTimeToLocalTime1506  5D9 00084C80 RtlTestAndPublishWnfStateData1507  5DA 000854A0 RtlTestBit1508  5DB 0009C580 RtlTestBitEx1509  5DC 0008BDD0 RtlTestProtectedAccess1510  5DD 0005B010 RtlTimeFieldsToTime1511  5DE 0007AB80 RtlTimeToElapsedTimeFields1512  5DF 0007AC70 RtlTimeToSecondsSince19701513  5E0 0007AB40 RtlTimeToSecondsSince19801514  5E1 0005B340 RtlTimeToTimeFields1515  5E2 001024A0 RtlTraceDatabaseAdd1516  5E3 00102520 RtlTraceDatabaseCreate1517  5E4 00102660 RtlTraceDatabaseDestroy1518  5E5 001026E0 RtlTraceDatabaseEnumerate1519  5E6 001027B0 RtlTraceDatabaseFind1520  5E7 00102830 RtlTraceDatabaseLock1521  5E8 00102860 RtlTraceDatabaseUnlock1522  5E9 00102880 RtlTraceDatabaseValidate1523  5EA 0007B480 RtlTryAcquirePebLock1524  5EB 00081E50 RtlTryAcquireSRWLockExclusive1525  5EC 00076C80 RtlTryAcquireSRWLockShared1526  5ED 000E8A00 RtlTryConvertSRWLockSharedToExclusiveOrRelease1527  5EE 000207E0 RtlTryEnterCriticalSection1528  5EF 00059390 RtlUTF8StringToUnicodeString1529  5F0 00059460 RtlUTF8ToUnicodeN1530  5F1 00102CB0 RtlUdiv1281531  5F2 000F7330 RtlUmsThreadYield1532  5F3 0009C690 RtlUnhandledExceptionFilter1533  5F4 001005D0 RtlUnhandledExceptionFilter21534  5F5 000611D0 RtlUnicodeStringToAnsiSize1535  5F6 00061200 RtlUnicodeStringToAnsiString1536  5F7 000EB010 RtlUnicodeStringToCountedOemString1537  5F8 000754C0 RtlUnicodeStringToInteger1538  5F9 000611D0 RtlUnicodeStringToOemSize1539  5FA 00060BA0 RtlUnicodeStringToOemString1540  5FB 00102BB0 RtlUnicodeStringToUTF8String1541  5FC 000E53F0 RtlUnicodeToCustomCPN1542  5FD 00061320 RtlUnicodeToMultiByteN1543  5FE 000612E0 RtlUnicodeToMultiByteSize1544  5FF 00060F60 RtlUnicodeToOemN1545  600 0005A9B0 RtlUnicodeToUTF8N1546  601 00074A10 RtlUniform1547  602 000EDFA0 RtlUnlockBootStatusData1548  603 00086BB0 RtlUnlockCurrentThread1549  604 0005E430 RtlUnlockHeap1550  605 0005CE50 RtlUnlockMemoryBlockLookaside1551  606 000D5870 RtlUnlockMemoryStreamRegion1552  607 0005CEB0 RtlUnlockMemoryZone1553  608 0005D680 RtlUnlockModuleSection1554  609 0007EDE0 RtlUnregisterFeatureConfigurationChangeNotification1555  60A 00101A70 RtlUnsubscribeFromFeatureUsageNotifications1556  60B 00062570 RtlUnsubscribeWnfNotificationWaitForCompletion1557  60C 00062360 RtlUnsubscribeWnfNotificationWithCompletionCallback1558  60D 00062520 RtlUnsubscribeWnfStateChangeNotification1559  60E 00050DC0 RtlUnwind1560  60F 00030600 RtlUnwindEx1561  610 00059A60 RtlUpcaseUnicodeChar1562  611 00015D20 RtlUpcaseUnicodeString1563  612 000EB140 RtlUpcaseUnicodeStringToAnsiString1564  613 000EB250 RtlUpcaseUnicodeStringToCountedOemString1565  614 00060D70 RtlUpcaseUnicodeStringToOemString1566  615 000E5520 RtlUpcaseUnicodeToCustomCPN1567  616 000610B0 RtlUpcaseUnicodeToMultiByteN1568  617 00060F00 RtlUpcaseUnicodeToOemN1569  618 0005DFA0 RtlUpdateClonedCriticalSection1570  619 0009C530 RtlUpdateClonedSRWLock1571  61A 000819D0 RtlUpdateTimer1572  61B 00060C60 RtlUpperChar1573  61C 000EB460 RtlUpperString1574  61D 0007FEF0 RtlUserFiberStart1575  61E 00052630 RtlUserThreadStart1576  61F 00037760 RtlValidAcl1577  620 000E3350 RtlValidProcessProtection1578  621 00073B00 RtlValidRelativeSecurityDescriptor1579  622 000700B0 RtlValidSecurityDescriptor1580  623 00037950 RtlValidSid1581  624 000FBE80 RtlValidateCorrelationVector1582  625 0005E080 RtlValidateHeap1583  626 000F2FB0 RtlValidateProcessHeaps1584  627 00078E70 RtlValidateUnicodeString1585  628 00079FD0 RtlVerifyVersionInfo1586  629 00030DE0 RtlVirtualUnwind1587  62A 000623B0 RtlWaitForWnfMetaNotification1588  62B 00063350 RtlWaitOnAddress1589  62C 00063100 RtlWakeAddressAll1590  62D 00102F30 RtlWakeAddressAllNoFence1591  62E 00062550 RtlWakeAddressSingle1592  62F 00102F40 RtlWakeAddressSingleNoFence1593  630 000553D0 RtlWakeAllConditionVariable1594  631 00054A60 RtlWakeConditionVariable1595  632 00051620 RtlWalkFrameChain1596  633 000F30E0 RtlWalkHeap1597  634 000F59C0 RtlWeaklyEnumerateEntryHashTable1598  635 000DD2A0 RtlWerpReportException1599  636 000DE740 RtlWnfCompareChangeStamp1600  637 00085A50 RtlWnfDllUnloadCallback1601  638 00085940 RtlWow64CallFunction641602  639 00085940 RtlWow64EnableFsRedirection1603  63A 00085940 RtlWow64EnableFsRedirectionEx1604  63B 00051E80 RtlWow64GetCpuAreaInfo1605  63C 00051E00 RtlWow64GetCurrentCpuArea1606  63D 00050D80 RtlWow64GetCurrentMachine1607  63E 00082CC0 RtlWow64GetEquivalentMachineCHPE1608  63F 0007ACF0 RtlWow64GetProcessMachines1609  640 00079A30 RtlWow64GetSharedInfoProcess1610  641 000DBF70 RtlWow64GetThreadContext1611  642 000DBFA0 RtlWow64GetThreadSelectorEntry1612  643 0007C590 RtlWow64IsWowGuestMachineSupported1613  644 000D6680 RtlWow64LogMessageInEventLogger1614  645 00102F50 RtlWow64PopAllCrossProcessWorkFromWorkList1615  646 00103060 RtlWow64PopCrossProcessWorkFromFreeList1616  647 001030F0 RtlWow64PushCrossProcessWorkOntoFreeList1617  648 00103190 RtlWow64PushCrossProcessWorkOntoWorkList1618  649 001033A0 RtlWow64RequestCrossProcessHeavyFlush1619  64A 000DC140 RtlWow64SetThreadContext1620  64B 000DC160 RtlWow64SuspendProcess1621  64C 000DC2D0 RtlWow64SuspendThread1622  64D 000D5870 RtlWriteMemoryStream1623  64E 000FC1E0 RtlWriteNonVolatileMemory1624  64F 0008A9C0 RtlWriteRegistryValue1625  650 000F6160 RtlZeroHeap1626  651 00087CF0 RtlZeroMemory1627  652 000DF690 RtlZombifyActivationContext1628  653 0007DFA0 RtlpApplyLengthFunction1629  654 0007B4A0 RtlpCheckDynamicTimeZoneInformation1630  655 000EF8D0 RtlpCleanupRegistryKeys1631  656 000E9D50 RtlpConvertAbsoluteToRelativeSecurityAttribute1632  657 000EFDC0 RtlpConvertCultureNamesToLCIDs1633  658 000EFFD0 RtlpConvertLCIDsToCultureNames1634  659 000EA0C0 RtlpConvertRelativeToAbsoluteSecurityAttribute1635  65A 00036490 RtlpCreateProcessRegistryInfo1636  65B 0006DBF0 RtlpEnsureBufferSize1637  65C 000A1AA1 RtlpExecuteUmsThread1638  65D 0016B500 RtlpFreezeTimeBias1639  65E 0003F850 RtlpGetDeviceFamilyInfoEnum1640  65F 00081540 RtlpGetLCIDFromLangInfoNode1641  660 0007F750 RtlpGetNameFromLangInfoNode1642  661 0003C5B0 RtlpGetSystemDefaultUILanguage1643  662 001035E0 RtlpGetUserOrMachineUILanguage4NLS1644  663 0006EEC0 RtlpInitializeLangRegistryInfo1645  664 00047170 RtlpIsQualifiedLanguage1646  665 00081B80 RtlpLoadMachineUIByPolicy1647  666 0006EDD0 RtlpLoadUserUIByPolicy1648  667 00083D20 RtlpMergeSecurityAttributeInformation1649  668 0006EEF0 RtlpMuiFreeLangRegistryInfo1650  669 00104290 RtlpMuiRegCreateRegistryInfo1651  66A 0006F190 RtlpMuiRegFreeRegistryInfo1652  66B 0006F0A0 RtlpMuiRegLoadRegistryInfo1653  66C 000E8D70 RtlpNotOwnerCriticalSection1654  66D 001079E0 RtlpNtCreateKey1655  66E 00081F50 RtlpNtEnumerateSubKey1656  66F 00107A20 RtlpNtMakeTemporaryKey1657  670 0007D670 RtlpNtOpenKey1658  671 0007AEF0 RtlpNtQueryValueKey1659  672 00107A30 RtlpNtSetValueKey1660  673 00075630 RtlpQueryDefaultUILanguage1661  674 000D8B00 RtlpQueryProcessDebugInformationFromWow641662  675 000D8BA0 RtlpQueryProcessDebugInformationRemote1663  676 00105D80 RtlpRefreshCachedUILanguage1664  677 000F0820 RtlpSetInstallLanguage1665  678 000F0ED0 RtlpSetPreferredUILanguages1666  679 000F0ED0 RtlpSetUserPreferredUILanguages1667  67A 0005B020 RtlpTimeFieldsToTime1668  67B 0005B350 RtlpTimeToTimeFields1669  67C 000A1DC6 RtlpUmsExecuteYieldThreadEnd1670  67D 000A1CD3 RtlpUmsThreadYield1671  67E 000E90A0 RtlpUnWaitCriticalSection1672  67F 0008B840 RtlpVerifyAndCommitUILanguageSettings1673  680 0007FEC0 RtlpWaitForCriticalSection1674  681 000868D0 RtlpWow64CtxFromAmd641675  682 0006EAB0 RtlpWow64GetContextOnAmd641676  683 0006E0D0 RtlpWow64SetContextOnAmd641677  684 00016DE0 RtlxAnsiStringToUnicodeSize1678  685 00016DE0 RtlxOemStringToUnicodeSize1679  686 000611D0 RtlxUnicodeStringToAnsiSize1680  687 000611D0 RtlxUnicodeStringToOemSize1681  688 00113650 SbExecuteProcedure1682  689 0003E0D0 SbSelectProcedure1683  68A 000DDD40 ShipAssert1684  68B 000DDE60 ShipAssertGetBufferInfo1685  68C 000DDE90 ShipAssertMsgA1686  68D 000DDE90 ShipAssertMsgW1687  68E 000795A0 TpAllocAlpcCompletion1688  68F 000796A0 TpAllocAlpcCompletionEx1689  690 0007E7B0 TpAllocCleanupGroup1690  691 00075B90 TpAllocIoCompletion1691  692 0007F400 TpAllocJobNotification1692  693 000616F0 TpAllocPool1693  694 0000EFD0 TpAllocTimer1694  695 0000DF40 TpAllocWait1695  696 0000F2E0 TpAllocWork1696  697 00079400 TpAlpcRegisterCompletionList1697  698 000794F0 TpAlpcUnregisterCompletionList1698  699 00111E40 TpCallbackDetectedUnrecoverableError1699  69A 000621F0 TpCallbackIndependent1700  69B 00088500 TpCallbackLeaveCriticalSectionOnCompletion1701  69C 0006FE60 TpCallbackMayRunLong1702  69D 00111E70 TpCallbackReleaseMutexOnCompletion1703  69E 00111EB0 TpCallbackReleaseSemaphoreOnCompletion1704  69F 000673B0 TpCallbackSendAlpcMessageOnCompletion1705  6A0 00111EF0 TpCallbackSendPendingAlpcMessage1706  6A1 00085440 TpCallbackSetEventOnCompletion1707  6A2 0007D6C0 TpCallbackUnloadDllOnCompletion1708  6A3 00078AC0 TpCancelAsyncIoOperation1709  6A4 000713D0 TpCaptureCaller1710  6A5 00054650 TpCheckTerminateWorker1711  6A6 00111F30 TpDbgDumpHeapUsage1712  6A7 0007FEC0 TpDbgSetLogRoutine1713  6A8 000853F0 TpDisablePoolCallbackChecks1714  6A9 000800A0 TpDisassociateCallback1715  6AA 00012000 TpIsTimerSet1716  6AB 000128C0 TpPostWork1717  6AC 00111940 TpQueryPoolStackInformation1718  6AD 000795D0 TpReleaseAlpcCompletion1719  6AE 00081950 TpReleaseCleanupGroup1720  6AF 00052680 TpReleaseCleanupGroupMembers1721  6B0 0007C2F0 TpReleaseIoCompletion1722  6B1 0007F240 TpReleaseJobNotification1723  6B2 00054C60 TpReleasePool1724  6B3 0000C500 TpReleaseTimer1725  6B4 0000C270 TpReleaseWait1726  6B5 0000F180 TpReleaseWork1727  6B6 00111A00 TpSetDefaultPoolMaxThreads1728  6B7 0006F900 TpSetDefaultPoolStackInformation1729  6B8 00061620 TpSetPoolMaxThreads1730  6B9 00080FB0 TpSetPoolMaxThreadsSoftLimit1731  6BA 00083400 TpSetPoolMinThreads1732  6BB 0006FA20 TpSetPoolStackInformation1733  6BC 00085720 TpSetPoolThreadBasePriority1734  6BD 00111B50 TpSetPoolThreadCpuSets1735  6BE 00061690 TpSetPoolWorkerThreadIdleTimeout1736  6BF 000122A0 TpSetTimer1737  6C0 000126D0 TpSetTimerEx1738  6C1 00010B90 TpSetWait1739  6C2 00011D60 TpSetWaitEx1740  6C3 00010BE0 TpSimpleTryPost1741  6C4 000127E0 TpStartAsyncIoOperation1742  6C5 00009BB0 TpTimerOutstandingCallbackCount1743  6C6 00063BD0 TpTrimPools1744  6C7 00079530 TpWaitForAlpcCompletion1745  6C8 00084D40 TpWaitForIoCompletion1746  6C9 0007F200 TpWaitForJobNotification1747  6CA 00011200 TpWaitForTimer1748  6CB 00009990 TpWaitForWait1749  6CC 0007EE60 TpWaitForWork1750  6CD 00070540 VerSetConditionMask1751  6CE 000DD620 WerReportExceptionWorker1752  6CF 000DE340 WerReportSQMEvent1753  6D0 0007FEC0 WinSqmAddToAverageDWORD1754  6D1 0007FEC0 WinSqmAddToStream1755  6D2 0007FEC0 WinSqmAddToStreamEx1756  6D3 000842D0 WinSqmCheckEscalationAddToStreamEx1757  6D4 000842D0 WinSqmCheckEscalationSetDWORD1758  6D5 000842D0 WinSqmCheckEscalationSetDWORD641759  6D6 000842D0 WinSqmCheckEscalationSetString1760  6D7 00085CE0 WinSqmCommonDatapointDelete1761  6D8 00085CE0 WinSqmCommonDatapointSetDWORD1762  6D9 00085CE0 WinSqmCommonDatapointSetDWORD641763  6DA 00085CE0 WinSqmCommonDatapointSetStreamEx1764  6DB 00085CE0 WinSqmCommonDatapointSetString1765  6DC 0007FEC0 WinSqmEndSession1766  6DD 000842D0 WinSqmEventEnabled1767  6DE 000842D0 WinSqmEventWrite1768  6DF 000842D0 WinSqmGetEscalationRuleStatus1769  6E0 000DE720 WinSqmGetInstrumentationProperty1770  6E1 0007FEC0 WinSqmIncrementDWORD1771  6E2 000842D0 WinSqmIsOptedIn1772  6E3 000842D0 WinSqmIsOptedInEx1773  6E4 00085CE0 WinSqmIsSessionDisabled1774  6E5 0007FEC0 WinSqmSetDWORD1775  6E6 0007FEC0 WinSqmSetDWORD641776  6E7 00085CE0 WinSqmSetEscalationInfo1777  6E8 0007FEC0 WinSqmSetIfMaxDWORD1778  6E9 0007FEC0 WinSqmSetIfMinDWORD1779  6EA 0007FEC0 WinSqmSetString1780  6EB 00085BB0 WinSqmStartSession1781  6EC 00085BB0 WinSqmStartSessionForPartner1782  6ED 000842D0 WinSqmStartSqmOptinListener1783  6EE 0009CDA0 ZwAcceptConnectPort1784  6EF 0009CD60 ZwAccessCheck1785  6F0 0009D280 ZwAccessCheckAndAuditAlarm1786  6F1 0009D9B0 ZwAccessCheckByType1787  6F2 0009D880 ZwAccessCheckByTypeAndAuditAlarm1788  6F3 0009D9D0 ZwAccessCheckByTypeResultList1789  6F4 0009D9F0 ZwAccessCheckByTypeResultListAndAuditAlarm1790  6F5 0009DA10 ZwAccessCheckByTypeResultListAndAuditAlarmByHandle1791  6F6 0009DA30 ZwAcquireCrossVmMutant1792  6F7 0009DA50 ZwAcquireProcessActivityReference1793  6F8 0009D640 ZwAddAtom1794  6F9 0009DA70 ZwAddAtomEx1795  6FA 0009DA90 ZwAddBootEntry1796  6FB 0009DAB0 ZwAddDriverEntry1797  6FC 0009DAD0 ZwAdjustGroupsToken1798  6FD 0009D580 ZwAdjustPrivilegesToken1799  6FE 0009DAF0 ZwAdjustTokenClaimsAndDeviceGroups1800  6FF 0009DB10 ZwAlertResumeThread1801  700 0009DB30 ZwAlertThread1802  701 0009DB50 ZwAlertThreadByThreadId1803  702 0009DB70 ZwAllocateLocallyUniqueId1804  703 0009DB90 ZwAllocateReserveObject1805  704 0009DBB0 ZwAllocateUserPhysicalPages1806  705 0009DBD0 ZwAllocateUserPhysicalPagesEx1807  706 0009DBF0 ZwAllocateUuids1808  707 0009D060 ZwAllocateVirtualMemory1809  708 0009DC10 ZwAllocateVirtualMemoryEx1810  709 0009DC30 ZwAlpcAcceptConnectPort1811  70A 0009DC50 ZwAlpcCancelMessage1812  70B 0009DC70 ZwAlpcConnectPort1813  70C 0009DC90 ZwAlpcConnectPortEx1814  70D 0009DCB0 ZwAlpcCreatePort1815  70E 0009DCD0 ZwAlpcCreatePortSection1816  70F 0009DCF0 ZwAlpcCreateResourceReserve1817  710 0009DD10 ZwAlpcCreateSectionView1818  711 0009DD30 ZwAlpcCreateSecurityContext1819  712 0009DD50 ZwAlpcDeletePortSection1820  713 0009DD70 ZwAlpcDeleteResourceReserve1821  714 0009DD90 ZwAlpcDeleteSectionView1822  715 0009DDB0 ZwAlpcDeleteSecurityContext1823  716 0009DDD0 ZwAlpcDisconnectPort1824  717 0009DDF0 ZwAlpcImpersonateClientContainerOfPort1825  718 0009DE10 ZwAlpcImpersonateClientOfPort1826  719 0009DE30 ZwAlpcOpenSenderProcess1827  71A 0009DE50 ZwAlpcOpenSenderThread1828  71B 0009DE70 ZwAlpcQueryInformation1829  71C 0009DE90 ZwAlpcQueryInformationMessage1830  71D 0009DEB0 ZwAlpcRevokeSecurityContext1831  71E 0009DED0 ZwAlpcSendWaitReceivePort1832  71F 0009DEF0 ZwAlpcSetInformation1833  720 0009D6E0 ZwApphelpCacheControl1834  721 0009DF10 ZwAreMappedFilesTheSame1835  722 0009DF30 ZwAssignProcessToJobObject1836  723 0009DF50 ZwAssociateWaitCompletionPacket1837  724 0009DF70 ZwCallEnclave1838  725 0009CE00 ZwCallbackReturn1839  726 0009D8F0 ZwCancelIoFile1840  727 0009DF90 ZwCancelIoFileEx1841  728 0009DFB0 ZwCancelSynchronousIoFile1842  729 0009D970 ZwCancelTimer1843  72A 0009DFD0 ZwCancelTimer21844  72B 0009DFF0 ZwCancelWaitCompletionPacket1845  72C 0009D520 ZwClearEvent1846  72D 0009CF40 ZwClose1847  72E 0009D4C0 ZwCloseObjectAuditAlarm1848  72F 0009E010 ZwCommitComplete1849  730 0009E030 ZwCommitEnlistment1850  731 0009E050 ZwCommitRegistryTransaction1851  732 0009E070 ZwCommitTransaction1852  733 0009E090 ZwCompactKeys1853  734 0009E0B0 ZwCompareObjects1854  735 0009E0D0 ZwCompareSigningLevels1855  736 0009E0F0 ZwCompareTokens1856  737 0009E110 ZwCompleteConnectPort1857  738 0009E130 ZwCompressKey1858  739 0009E150 ZwConnectPort1859  73A 0009D5C0 ZwContinue1860  73B 0009E170 ZwContinueEx1861  73C 0009E190 ZwConvertBetweenAuxiliaryCounterAndPerformanceCounter1862  73D 0009E1B0 ZwCreateCrossVmEvent1863  73E 0009E1D0 ZwCreateCrossVmMutant1864  73F 0009E1F0 ZwCreateDebugObject1865  740 0009E210 ZwCreateDirectoryObject1866  741 0009E230 ZwCreateDirectoryObjectEx1867  742 0009E250 ZwCreateEnclave1868  743 0009E270 ZwCreateEnlistment1869  744 0009D660 ZwCreateEvent1870  745 0009E290 ZwCreateEventPair1871  746 0009D800 ZwCreateFile1872  747 0009E2B0 ZwCreateIRTimer1873  748 0009E2D0 ZwCreateIoCompletion1874  749 0009E2F0 ZwCreateJobObject1875  74A 0009E310 ZwCreateJobSet1876  74B 0009D100 ZwCreateKey1877  74C 0009E330 ZwCreateKeyTransacted1878  74D 0009E350 ZwCreateKeyedEvent1879  74E 0009E370 ZwCreateLowBoxToken1880  74F 0009E390 ZwCreateMailslotFile1881  750 0009E3B0 ZwCreateMutant1882  751 0009E3D0 ZwCreateNamedPipeFile1883  752 0009E3F0 ZwCreatePagingFile1884  753 0009E410 ZwCreatePartition1885  754 0009E430 ZwCreatePort1886  755 0009E450 ZwCreatePrivateNamespace1887  756 0009E470 ZwCreateProcess1888  757 0009D700 ZwCreateProcessEx1889  758 0009E490 ZwCreateProfile1890  759 0009E4B0 ZwCreateProfileEx1891  75A 0009E4D0 ZwCreateRegistryTransaction1892  75B 0009E4F0 ZwCreateResourceManager1893  75C 0009D6A0 ZwCreateSection1894  75D 0009E510 ZwCreateSectionEx1895  75E 0009E530 ZwCreateSemaphore1896  75F 0009E550 ZwCreateSymbolicLinkObject1897  760 0009D720 ZwCreateThread1898  761 0009E570 ZwCreateThreadEx1899  762 0009E590 ZwCreateTimer1900  763 0009E5B0 ZwCreateTimer21901  764 0009E5D0 ZwCreateToken1902  765 0009E5F0 ZwCreateTokenEx1903  766 0009E610 ZwCreateTransaction1904  767 0009E630 ZwCreateTransactionManager1905  768 0009E650 ZwCreateUserProcess1906  769 0009E670 ZwCreateWaitCompletionPacket1907  76A 0009E690 ZwCreateWaitablePort1908  76B 0009E6B0 ZwCreateWnfStateName1909  76C 0009E6D0 ZwCreateWorkerFactory1910  76D 0009E6F0 ZwDebugActiveProcess1911  76E 0009E710 ZwDebugContinue1912  76F 0009D3E0 ZwDelayExecution1913  770 0009E730 ZwDeleteAtom1914  771 0009E750 ZwDeleteBootEntry1915  772 0009E770 ZwDeleteDriverEntry1916  773 0009E790 ZwDeleteFile1917  774 0009E7B0 ZwDeleteKey1918  775 0009E7D0 ZwDeleteObjectAuditAlarm1919  776 0009E7F0 ZwDeletePrivateNamespace1920  777 0009E810 ZwDeleteValueKey1921  778 0009E830 ZwDeleteWnfStateData1922  779 0009E850 ZwDeleteWnfStateName1923  77A 0009CE40 ZwDeviceIoControlFile1924  77B 0009E870 ZwDirectGraphicsCall1925  77C 0009E890 ZwDisableLastKnownGood1926  77D 0009E8B0 ZwDisplayString1927  77E 0009E8D0 ZwDrawText1928  77F 0009D4E0 ZwDuplicateObject1929  780 0009D5A0 ZwDuplicateToken1930  781 0009E8F0 ZwEnableLastKnownGood1931  782 0009E910 ZwEnumerateBootEntries1932  783 0009E930 ZwEnumerateDriverEntries1933  784 0009D3A0 ZwEnumerateKey1934  785 0009E950 ZwEnumerateSystemEnvironmentValuesEx1935  786 0009E970 ZwEnumerateTransactionObject1936  787 0009CFC0 ZwEnumerateValueKey1937  788 0009E990 ZwExtendSection1938  789 0009E9B0 ZwFilterBootOption1939  78A 0009E9D0 ZwFilterToken1940  78B 0009E9F0 ZwFilterTokenEx1941  78C 0009CFE0 ZwFindAtom1942  78D 0009D6C0 ZwFlushBuffersFile1943  78E 0009EA10 ZwFlushBuffersFileEx1944  78F 0009EA30 ZwFlushInstallUILanguage1945  790 0009EA50 ZwFlushInstructionCache1946  791 0009EA70 ZwFlushKey1947  792 0009EA90 ZwFlushProcessWriteBuffers1948  793 0009EAB0 ZwFlushVirtualMemory1949  794 0009EAD0 ZwFlushWriteBuffer1950  795 0009EAF0 ZwFreeUserPhysicalPages1951  796 0009D120 ZwFreeVirtualMemory1952  797 0009EB10 ZwFreezeRegistry1953  798 0009EB30 ZwFreezeTransactions1954  799 0009D480 ZwFsControlFile1955  79A 0009EB50 ZwGetCachedSigningLevel1956  79B 0009EB70 ZwGetCompleteWnfStateSubscription1957  79C 0009EB90 ZwGetContextThread1958  79D 0009EBB0 ZwGetCurrentProcessorNumber1959  79E 0009EBD0 ZwGetCurrentProcessorNumberEx1960  79F 0009EBF0 ZwGetDevicePowerState1961  7A0 0009EC10 ZwGetMUIRegistryInfo1962  7A1 0009EC30 ZwGetNextProcess1963  7A2 0009EC50 ZwGetNextThread1964  7A3 0009EC70 ZwGetNlsSectionPtr1965  7A4 0009EC90 ZwGetNotificationResourceManager1966  7A5 0009ECB0 ZwGetWriteWatch1967  7A6 0009ECD0 ZwImpersonateAnonymousToken1968  7A7 0009D140 ZwImpersonateClientOfPort1969  7A8 0009ECF0 ZwImpersonateThread1970  7A9 0009ED10 ZwInitializeEnclave1971  7AA 0009ED30 ZwInitializeNlsFiles1972  7AB 0009ED50 ZwInitializeRegistry1973  7AC 0009ED70 ZwInitiatePowerAction1974  7AD 0009D740 ZwIsProcessInJob1975  7AE 0009ED90 ZwIsSystemResumeAutomatic1976  7AF 0009EDB0 ZwIsUILanguageComitted1977  7B0 0009EDD0 ZwListenPort1978  7B1 0009EDF0 ZwLoadDriver1979  7B2 0009EE10 ZwLoadEnclaveData1980  7B3 0009EE30 ZwLoadKey1981  7B4 0009EE50 ZwLoadKey21982  7B5 000A0810 ZwLoadKey31983  7B6 0009EE70 ZwLoadKeyEx1984  7B7 0009EE90 ZwLockFile1985  7B8 0009EEB0 ZwLockProductActivationKeys1986  7B9 0009EED0 ZwLockRegistryKey1987  7BA 0009EEF0 ZwLockVirtualMemory1988  7BB 0009EF10 ZwMakePermanentObject1989  7BC 0009EF30 ZwMakeTemporaryObject1990  7BD 0009EF50 ZwManageHotPatch1991  7BE 0009EF70 ZwManagePartition1992  7BF 0009EF90 ZwMapCMFModule1993  7C0 0009EFB0 ZwMapUserPhysicalPages1994  7C1 0009CDC0 ZwMapUserPhysicalPagesScatter1995  7C2 0009D260 ZwMapViewOfSection1996  7C3 0009EFD0 ZwMapViewOfSectionEx1997  7C4 0009EFF0 ZwModifyBootEntry1998  7C5 0009F010 ZwModifyDriverEntry1999  7C6 0009F030 ZwNotifyChangeDirectoryFile2000  7C7 0009F050 ZwNotifyChangeDirectoryFileEx2001  7C8 0009F070 ZwNotifyChangeKey2002  7C9 0009F090 ZwNotifyChangeMultipleKeys2003  7CA 0009F0B0 ZwNotifyChangeSession2004  7CB 0009D860 ZwOpenDirectoryObject2005  7CC 0009F0D0 ZwOpenEnlistment2006  7CD 0009D560 ZwOpenEvent2007  7CE 0009F0F0 ZwOpenEventPair2008  7CF 0009D3C0 ZwOpenFile2009  7D0 0009F110 ZwOpenIoCompletion2010  7D1 0009F130 ZwOpenJobObject2011  7D2 0009CFA0 ZwOpenKey2012  7D3 0009F150 ZwOpenKeyEx2013  7D4 0009F170 ZwOpenKeyTransacted2014  7D5 0009F190 ZwOpenKeyTransactedEx2015  7D6 0009F1B0 ZwOpenKeyedEvent2016  7D7 0009F1D0 ZwOpenMutant2017  7D8 0009F1F0 ZwOpenObjectAuditAlarm2018  7D9 0009F210 ZwOpenPartition2019  7DA 0009F230 ZwOpenPrivateNamespace2020  7DB 0009D220 ZwOpenProcess2021  7DC 0009F250 ZwOpenProcessToken2022  7DD 0009D360 ZwOpenProcessTokenEx2023  7DE 0009F270 ZwOpenRegistryTransaction2024  7DF 0009F290 ZwOpenResourceManager2025  7E0 0009D440 ZwOpenSection2026  7E1 0009F2B0 ZwOpenSemaphore2027  7E2 0009F2D0 ZwOpenSession2028  7E3 0009F2F0 ZwOpenSymbolicLinkObject2029  7E4 0009F310 ZwOpenThread2030  7E5 0009D1E0 ZwOpenThreadToken2031  7E6 0009D340 ZwOpenThreadTokenEx2032  7E7 0009F330 ZwOpenTimer2033  7E8 0009F350 ZwOpenTransaction2034  7E9 0009F370 ZwOpenTransactionManager2035  7EA 0009F390 ZwPlugPlayControl2036  7EB 0009D930 ZwPowerInformation2037  7EC 0009F3B0 ZwPrePrepareComplete2038  7ED 0009F3D0 ZwPrePrepareEnlistment2039  7EE 0009F3F0 ZwPrepareComplete2040  7EF 0009F410 ZwPrepareEnlistment2041  7F0 0009F430 ZwPrivilegeCheck2042  7F1 0009F450 ZwPrivilegeObjectAuditAlarm2043  7F2 0009F470 ZwPrivilegedServiceAuditAlarm2044  7F3 0009F490 ZwPropagationComplete2045  7F4 0009F4B0 ZwPropagationFailed2046  7F5 0009D760 ZwProtectVirtualMemory2047  7F6 0009F4D0 ZwPssCaptureVaSpaceBulk2048  7F7 0009F4F0 ZwPulseEvent2049  7F8 0009D500 ZwQueryAttributesFile2050  7F9 0009F510 ZwQueryAuxiliaryCounterFrequency2051  7FA 0009F530 ZwQueryBootEntryOrder2052  7FB 0009F550 ZwQueryBootOptions2053  7FC 0009F570 ZwQueryDebugFilterState2054  7FD 0009D000 ZwQueryDefaultLocale2055  7FE 0009D5E0 ZwQueryDefaultUILanguage2056  7FF 0009D400 ZwQueryDirectoryFile2057  800 0009F590 ZwQueryDirectoryFileEx2058  801 0009F5B0 ZwQueryDirectoryObject2059  802 0009F5D0 ZwQueryDriverEntryOrder2060  803 0009F5F0 ZwQueryEaFile2061  804 0009D820 ZwQueryEvent2062  805 0009F610 ZwQueryFullAttributesFile2063  806 0009F630 ZwQueryInformationAtom2064  807 0009F650 ZwQueryInformationByName2065  808 0009F670 ZwQueryInformationEnlistment2066  809 0009CF80 ZwQueryInformationFile2067  80A 0009F690 ZwQueryInformationJobObject2068  80B 0009F6B0 ZwQueryInformationPort2069  80C 0009D080 ZwQueryInformationProcess2070  80D 0009F6D0 ZwQueryInformationResourceManager2071  80E 0009D200 ZwQueryInformationThread2072  80F 0009D180 ZwQueryInformationToken2073  810 0009F6F0 ZwQueryInformationTransaction2074  811 0009F710 ZwQueryInformationTransactionManager2075  812 0009F730 ZwQueryInformationWorkerFactory2076  813 0009F750 ZwQueryInstallUILanguage2077  814 0009F770 ZwQueryIntervalProfile2078  815 0009F790 ZwQueryIoCompletion2079  816 0009D020 ZwQueryKey2080  817 0009F7B0 ZwQueryLicenseValue2081  818 0009F7D0 ZwQueryMultipleValueKey2082  819 0009F7F0 ZwQueryMutant2083  81A 0009CF60 ZwQueryObject2084  81B 0009F810 ZwQueryOpenSubKeys2085  81C 0009F830 ZwQueryOpenSubKeysEx2086  81D 0009D380 ZwQueryPerformanceCounter2087  81E 0009F850 ZwQueryPortInformationProcess2088  81F 0009F870 ZwQueryQuotaInformationFile2089  820 0009D780 ZwQuerySection2090  821 0009F890 ZwQuerySecurityAttributesToken2091  822 0009F8B0 ZwQuerySecurityObject2092  823 0009F8D0 ZwQuerySecurityPolicy2093  824 0009F8F0 ZwQuerySemaphore2094  825 0009F910 ZwQuerySymbolicLinkObject2095  826 0009F930 ZwQuerySystemEnvironmentValue2096  827 0009F950 ZwQuerySystemEnvironmentValueEx2097  828 0009D420 ZwQuerySystemInformation2098  829 0009F970 ZwQuerySystemInformationEx2099  82A 0009D8A0 ZwQuerySystemTime2100  82B 0009D460 ZwQueryTimer2101  82C 0009F990 ZwQueryTimerResolution2102  82D 0009D040 ZwQueryValueKey2103  82E 0009D1C0 ZwQueryVirtualMemory2104  82F 0009D680 ZwQueryVolumeInformationFile2105  830 0009F9B0 ZwQueryWnfStateData2106  831 0009F9D0 ZwQueryWnfStateNameInformation2107  832 0009D600 ZwQueueApcThread2108  833 0009F9F0 ZwQueueApcThreadEx2109  834 0009FA10 ZwRaiseException2110  835 0009FA30 ZwRaiseHardError2111  836 0009CE20 ZwReadFile2112  837 0009D320 ZwReadFileScatter2113  838 0009FA50 ZwReadOnlyEnlistment2114  839 0009D7E0 ZwReadRequestData2115  83A 0009D540 ZwReadVirtualMemory2116  83B 0009FA70 ZwRecoverEnlistment2117  83C 0009FA90 ZwRecoverResourceManager2118  83D 0009FAB0 ZwRecoverTransactionManager2119  83E 0009FAD0 ZwRegisterProtocolAddressInformation2120  83F 0009FAF0 ZwRegisterThreadTerminatePort2121  840 0009FB10 ZwReleaseKeyedEvent2122  841 0009D160 ZwReleaseMutant2123  842 0009CEA0 ZwReleaseSemaphore2124  843 0009FB30 ZwReleaseWorkerFactoryWorker2125  844 0009CE80 ZwRemoveIoCompletion2126  845 0009FB50 ZwRemoveIoCompletionEx2127  846 0009FB70 ZwRemoveProcessDebug2128  847 0009FB90 ZwRenameKey2129  848 0009FBB0 ZwRenameTransactionManager2130  849 0009FBD0 ZwReplaceKey2131  84A 0009FBF0 ZwReplacePartitionUnit2132  84B 0009CEE0 ZwReplyPort2133  84C 0009CEC0 ZwReplyWaitReceivePort2134  84D 0009D2C0 ZwReplyWaitReceivePortEx2135  84E 0009FC10 ZwReplyWaitReplyPort2136  84F 0009FC30 ZwRequestPort2137  850 0009D1A0 ZwRequestWaitReplyPort2138  851 0009FC50 ZwResetEvent2139  852 0009FC70 ZwResetWriteWatch2140  853 0009FC90 ZwRestoreKey2141  854 0009FCB0 ZwResumeProcess2142  855 0009D7A0 ZwResumeThread2143  856 0009FCD0 ZwRevertContainerImpersonation2144  857 0009FCF0 ZwRollbackComplete2145  858 0009FD10 ZwRollbackEnlistment2146  859 0009FD30 ZwRollbackRegistryTransaction2147  85A 0009FD50 ZwRollbackTransaction2148  85B 0009FD70 ZwRollforwardTransactionManager2149  85C 0009FD90 ZwSaveKey2150  85D 0009FDB0 ZwSaveKeyEx2151  85E 0009FDD0 ZwSaveMergedKeys2152  85F 0009FDF0 ZwSecureConnectPort2153  860 0009FE10 ZwSerializeBoot2154  861 0009FE30 ZwSetBootEntryOrder2155  862 0009FE50 ZwSetBootOptions2156  863 0009FE70 ZwSetCachedSigningLevel2157  864 0009FE90 ZwSetCachedSigningLevel22158  865 0009FEB0 ZwSetContextThread2159  866 0009FED0 ZwSetDebugFilterState2160  867 0009FEF0 ZwSetDefaultHardErrorPort2161  868 0009FF10 ZwSetDefaultLocale2162  869 0009FF30 ZwSetDefaultUILanguage2163  86A 0009FF50 ZwSetDriverEntryOrder2164  86B 0009FF70 ZwSetEaFile2165  86C 0009CF20 ZwSetEvent2166  86D 0009D300 ZwSetEventBoostPriority2167  86E 0009FF90 ZwSetHighEventPair2168  86F 0009FFB0 ZwSetHighWaitLowEventPair2169  870 0009FFD0 ZwSetIRTimer2170  871 0009FFF0 ZwSetInformationDebugObject2171  872 000A0010 ZwSetInformationEnlistment2172  873 0009D240 ZwSetInformationFile2173  874 000A0030 ZwSetInformationJobObject2174  875 000A0050 ZwSetInformationKey2175  876 0009D8D0 ZwSetInformationObject2176  877 0009D0E0 ZwSetInformationProcess2177  878 000A0070 ZwSetInformationResourceManager2178  879 000A0090 ZwSetInformationSymbolicLink2179  87A 0009CF00 ZwSetInformationThread2180  87B 000A00B0 ZwSetInformationToken2181  87C 000A00D0 ZwSetInformationTransaction2182  87D 000A00F0 ZwSetInformationTransactionManager2183  87E 000A0110 ZwSetInformationVirtualMemory2184  87F 000A0130 ZwSetInformationWorkerFactory2185  880 000A0150 ZwSetIntervalProfile2186  881 000A0170 ZwSetIoCompletion2187  882 000A0190 ZwSetIoCompletionEx2188  883 000A01B0 ZwSetLdtEntries2189  884 000A01D0 ZwSetLowEventPair2190  885 000A01F0 ZwSetLowWaitHighEventPair2191  886 000A0210 ZwSetQuotaInformationFile2192  887 000A0230 ZwSetSecurityObject2193  888 000A0250 ZwSetSystemEnvironmentValue2194  889 000A0270 ZwSetSystemEnvironmentValueEx2195  88A 000A0290 ZwSetSystemInformation2196  88B 000A02B0 ZwSetSystemPowerState2197  88C 000A02D0 ZwSetSystemTime2198  88D 000A02F0 ZwSetThreadExecutionState2199  88E 0009D990 ZwSetTimer2200  88F 000A0310 ZwSetTimer22201  890 000A0330 ZwSetTimerEx2202  891 000A0350 ZwSetTimerResolution2203  892 000A0370 ZwSetUuidSeed2204  893 0009D950 ZwSetValueKey2205  894 000A0390 ZwSetVolumeInformationFile2206  895 000A03B0 ZwSetWnfProcessNotificationEvent2207  896 000A03D0 ZwShutdownSystem2208  897 000A03F0 ZwShutdownWorkerFactory2209  898 000A0410 ZwSignalAndWaitForSingleObject2210  899 000A0430 ZwSinglePhaseReject2211  89A 000A0450 ZwStartProfile2212  89B 000A0470 ZwStopProfile2213  89C 000A0490 ZwSubscribeWnfStateChange2214  89D 000A04B0 ZwSuspendProcess2215  89E 000A04D0 ZwSuspendThread2216  89F 000A04F0 ZwSystemDebugControl2217  8A0 000A0510 ZwTerminateEnclave2218  8A1 000A0530 ZwTerminateJobObject2219  8A2 0009D2E0 ZwTerminateProcess2220  8A3 0009D7C0 ZwTerminateThread2221  8A4 000A0550 ZwTestAlert2222  8A5 000A0570 ZwThawRegistry2223  8A6 000A0590 ZwThawTransactions2224  8A7 000A05B0 ZwTraceControl2225  8A8 0009D910 ZwTraceEvent2226  8A9 000A05D0 ZwTranslateFilePath2227  8AA 000A05F0 ZwUmsThreadYield2228  8AB 000A0610 ZwUnloadDriver2229  8AC 000A0630 ZwUnloadKey2230  8AD 000A0650 ZwUnloadKey22231  8AE 000A0670 ZwUnloadKeyEx2232  8AF 000A0690 ZwUnlockFile2233  8B0 000A06B0 ZwUnlockVirtualMemory2234  8B1 0009D2A0 ZwUnmapViewOfSection2235  8B2 000A06D0 ZwUnmapViewOfSectionEx2236  8B3 000A06F0 ZwUnsubscribeWnfStateChange2237  8B4 000A0710 ZwUpdateWnfStateData2238  8B5 000A0730 ZwVdmControl2239  8B6 000A0750 ZwWaitForAlertByThreadId2240  8B7 000A0770 ZwWaitForDebugEvent2241  8B8 000A0790 ZwWaitForKeyedEvent2242  8B9 0009D8B0 ZwWaitForMultipleObjects2243  8BA 0009D0A0 ZwWaitForMultipleObjects322244  8BB 0009CDE0 ZwWaitForSingleObject2245  8BC 000A07B0 ZwWaitForWorkViaWorkerFactory2246  8BD 000A07D0 ZwWaitHighEventPair2247  8BE 000A07F0 ZwWaitLowEventPair2248  8BF 0009CD80 ZwWorkerFactoryWorkerReady2249  8C0 0009CE60 ZwWriteFile2250  8C1 0009D0C0 ZwWriteFileGather2251  8C2 0009D840 ZwWriteRequestData2252  8C3 0009D4A0 ZwWriteVirtualMemory2253  8C4 0009D620 ZwYieldExecution2254  8C5 0008C6D0 __C_specific_handler2255  8C6 000A1FB0 __chkstk2256  8C7 0008C8A0 __isascii2257  8C8 0008C8C0 __iscsym2258  8C9 0008C900 __iscsymf2259  8CA 0007FEC0 __misaligned_access2260  8CB 0008C940 __toascii2261  8CC 0008CB60 _atoi642262  8CD 00085300 _errno2263  8CE 00164AC0 _fltused2264  8CF 0008CBD0 _i64toa2265  8D0 00096260 _i64toa_s2266  8D1 0008CD70 _i64tow2267  8D2 00096560 _i64tow_s2268  8D3 0008CC10 _itoa2269  8D4 00096290 _itoa_s2270  8D5 0008CDB0 _itow2271  8D6 00096590 _itow_s2272  8D7 0008CF50 _lfind2273  8D8 0008D000 _local_unwind2274  8D9 0008CC10 _ltoa2275  8DA 00096290 _ltoa_s2276  8DB 0008CDB0 _ltow2277  8DC 00096590 _ltow_s2278  8DD 00096880 _makepath_s2279  8DE 0008D030 _memccpy2280  8DF 0008D0D0 _memicmp2281  8E0 000A2CF0 _setjmp2282  8E1 000A2DB0 _setjmpex2283  8E2 0008D0F0 _snprintf2284  8E3 000969D0 _snprintf_s2285  8E4 00096AA0 _snscanf_s2286  8E5 0008D1A0 _snwprintf2287  8E6 00096AE0 _snwprintf_s2288  8E7 00096BC0 _snwscanf_s2289  8E8 0008D280 _splitpath2290  8E9 00096C00 _splitpath_s2291  8EA 0008D5E0 _strcmpi2292  8EB 0008D5E0 _stricmp2293  8EC 0008D600 _strlwr2294  8ED 0008D630 _strlwr_s2295  8EE 0008D700 _strnicmp2296  8EF 00096EA0 _strnset_s2297  8F0 00096F30 _strset_s2298  8F1 0008D720 _strupr2299  8F2 0008D770 _strupr_s2300  8F3 0008D7E0 _swprintf2301  8F4 0008CC40 _ui64toa2302  8F5 000962C0 _ui64toa_s2303  8F6 0008CDE0 _ui64tow2304  8F7 000965C0 _ui64tow_s2305  8F8 0008CC60 _ultoa2306  8F9 000962E0 _ultoa_s2307  8FA 0008CE00 _ultow2308  8FB 000965E0 _ultow_s2309  8FC 0008D8A0 _vscprintf2310  8FD 0008D9B0 _vscwprintf2311  8FE 0008DA90 _vsnprintf2312  8FF 00096A00 _vsnprintf_s2313  900 0008DB60 _vsnwprintf2314  901 00096B10 _vsnwprintf_s2315  902 0008D9D0 _vswprintf2316  903 0008DC60 _wcsicmp2317  904 0008DCC0 _wcslwr2318  905 0008DD20 _wcslwr_s2319  906 0008DDA0 _wcsnicmp2320  907 0008DE10 _wcsnset_s2321  908 0008DEA0 _wcsset_s2322  909 0008DF00 _wcstoi642323  90A 0008DF30 _wcstoui642324  90B 0008E1D0 _wcsupr2325  90C 0008E210 _wcsupr_s2326  90D 00096F90 _wmakepath_s2327  90E 00097110 _wsplitpath_s2328  90F 0008E290 _wtoi2329  910 0008E2C0 _wtoi642330  911 0008E2E0 _wtol2331  912 0008E300 abs2332  913 0008E310 atan2333  914 0008E570 atan22334  915 0008CB80 atoi2335  916 0008CBB0 atol2336  917 0008ECB0 bsearch2337  918 0008EDB0 bsearch_s2338  919 0008EEC0 ceil2339  91A 0008EFE0 cos2340  91B 0008F8C0 fabs2341  91C 0008F9A0 floor2342  91D 0008C950 isalnum2343  91E 0008C980 isalpha2344  91F 0008C9B0 iscntrl2345  920 0008C9E0 isdigit2346  921 0008CA10 isgraph2347  922 0008CA40 islower2348  923 0008CA70 isprint2349  924 0008CAA0 ispunct2350  925 0008CAD0 isspace2351  926 0008CB00 isupper2352  927 0008FAD0 iswalnum2353  928 0008FAE0 iswalpha2354  929 0008FAF0 iswascii2355  92A 0008FBA0 iswctype2356  92B 0008FB10 iswdigit2357  92C 0008FB20 iswgraph2358  92D 0008FB30 iswlower2359  92E 0008FB40 iswprint2360  92F 0008FB50 iswspace2361  930 0008FB60 iswxdigit2362  931 0008CB30 isxdigit2363  932 0008E300 labs2364  933 0008FBD0 log2365  934 0008FEB0 longjmp2366  935 0008FEE0 mbstowcs2367  936 0008FFC0 memchr2368  937 0008FFF0 memcmp2369  938 000A3B40 memcpy2370  939 000973D0 memcpy_s2371  93A 000A3B40 memmove2372  93B 00097470 memmove_s2373  93C 000A3E00 memset2374  93D 000A2E50 pow2375  93E 000900D0 qsort2376  93F 00090460 qsort_s2377  940 0008F400 sin2378  941 00090820 sprintf2379  942 000974D0 sprintf_s2380  943 000908B0 sqrt2381  944 000909C0 sscanf2382  945 00097550 sscanf_s2383  946 00090A90 strcat2384  947 000975B0 strcat_s2385  948 00090BF0 strchr2386  949 00090C30 strcmp2387  94A 00090B30 strcpy2388  94B 00097650 strcpy_s2389  94C 00090CF0 strcspn2390  94D 00090DB0 strlen2391  94E 00090E70 strncat2392  94F 000976E0 strncat_s2393  950 00091020 strncmp2394  951 000910F0 strncpy2395  952 000977F0 strncpy_s2396  953 00091260 strnlen2397  954 00091280 strpbrk2398  955 00091330 strrchr2399  956 00091360 strspn2400  957 00091430 strstr2401  958 000978E0 strtok_s2402  959 000916B0 strtol2403  95A 00091710 strtoul2404  95B 0008D7E0 swprintf2405  95C 00097A50 swprintf_s2406  95D 00097AE0 swscanf_s2407  95E 00091750 tan2408  95F 00091BF0 tolower2409  960 00091C30 toupper2410  961 00091CA0 towlower2411  962 00091CD0 towupper2412  963 000E0890 vDbgPrintEx2413  964 000E08C0 vDbgPrintExWithPrefix2414  965 0008D990 vsprintf2415  966 00097500 vsprintf_s2416  967 00097A80 vswprintf_s2417  968 00091CE0 wcscat2418  969 00097B40 wcscat_s2419  96A 00091D50 wcschr2420  96B 00091D80 wcscmp2421  96C 00091D20 wcscpy2422  96D 00097BE0 wcscpy_s2423  96E 00091DC0 wcscspn2424  96F 00091E10 wcslen2425  970 00091E30 wcsncat2426  971 00097C70 wcsncat_s2427  972 00091E80 wcsncmp2428  973 00091EC0 wcsncpy2429  974 00097D90 wcsncpy_s2430  975 00091F10 wcsnlen2431  976 00091F40 wcspbrk2432  977 00091F90 wcsrchr2433  978 00091FD0 wcsspn2434  979 00092020 wcsstr2435  97A 00097E90 wcstok_s2436  97B 000922B0 wcstol2437  97C 00092350 wcstombs2438  97D 00092310 wcstoul8      0007F110 [NONAME]

user32.dll 的 ordinal

PS D:\工作> dumpbin.exe -exports .\user32.dll
Microsoft (R) COFF/PE Dumper Version 14.29.30140.0
Copyright (C) Microsoft Corporation.  All rights reserved.Dump of file .\user32.dllFile Type: DLLSection contains the following exports for USER32.dll00000000 characteristics7DD8B857 time date stamp0.00 version1502 ordinal base1215 number of functions998 number of namesordinal hint RVA      name1505    0 00041120 ActivateKeyboardLayout1506    1 00041050 AddClipboardFormatListener1507    2 000414D0 AddVisualIdentifier1508    3 0002BBF0 AdjustWindowRect1509    4 0002DD30 AdjustWindowRectEx1510    5 00089290 AdjustWindowRectExForDpi1511    6 00096870 AlignRects1512    7 0008FDB0 AllowForegroundActivation1513    8 0008FDC0 AllowSetForegroundWindow1514    9 00025D60 AnimateWindow1515    A 000892F0 AnyPopup1516    B 00094740 AppendMenuA1517    C 000919E0 AppendMenuW1518    D 000267A0 AreDpiAwarenessContextsEqual1519    E 0008FDE0 ArrangeIconicWindows1520    F 000414E0 AttachThreadInput1521   10 00028000 BeginDeferWindowPos1522   11 00041500 BeginPaint1523   12 00041510 BlockInput1524   13 00029A50 BringWindowToTop1525   14 00094790 BroadcastSystemMessage1526   15 00094790 BroadcastSystemMessageA1527   16 000947C0 BroadcastSystemMessageExA1528   17 00091A30 BroadcastSystemMessageExW1529   18 00091A60 BroadcastSystemMessageW1530   19 000849F0 BuildReasonArray1531   1A 00041530 CalcMenuBar1532   1B 00041540 CalculatePopupWindowPosition1533   1C 0008A590 CallMsgFilter1534   1D 0008A590 CallMsgFilterA1535   1E 0003A100 CallMsgFilterW1536   1F 0003B680 CallNextHookEx1537   20 00024230 CallWindowProcA1538   21 000358C0 CallWindowProcW1539   22 000635D0 CancelShutdown1540   23 0008FE00 CascadeChildWindows1541   24 0007E7C0 CascadeWindows1542   25 0002C1C0 ChangeClipboardChain1543   26 0008A680 ChangeDisplaySettingsA1544   27 0008A6B0 ChangeDisplaySettingsExA1545   28 00094090 ChangeDisplaySettingsExW1546   29 000941C0 ChangeDisplaySettingsW1547   2A 0007EAF0 ChangeMenuA1548   2B 0007EBA0 ChangeMenuW1549   2C 000408A0 ChangeWindowMessageFilter1555   2D 00041560 ChangeWindowMessageFilterEx1556   2E 0002BB10 CharLowerA1557   2F 0008B740 CharLowerBuffA1558   30 0002C1A0 CharLowerBuffW1559   31 0008B760 CharLowerW1560   32 00023A00 CharNextA1561   33 0008B780 CharNextExA1562   34 0002ACA0 CharNextW1563   35 0002B3E0 CharPrevA1564   36 0008B7A0 CharPrevExA1565   37 0008B7C0 CharPrevW1566   38 000834F0 CharToOemA1567   39 0002ADA0 CharToOemBuffA1568   3A 00083540 CharToOemBuffW1569   3B 00083590 CharToOemW1570   3C 0002C3D0 CharUpperA1571   3D 0008B7E0 CharUpperBuffA1572   3E 0008B800 CharUpperBuffW1573   3F 00040000 CharUpperW1574   40 000942C0 CheckBannedOneCoreTransformApi1575   41 0003C640 CheckDBCSEnabledExt1576   42 0002BF30 CheckDlgButton1577   43 00021270 CheckMenuItem1578   44 0007EC50 CheckMenuRadioItem1579   45 00041570 CheckProcessForClipboardAccess1580   46 00041580 CheckProcessSession1581   47 00066AE0 CheckRadioButton1582   48 00041590 CheckWindowThreadDesktop1583   49 0008FE30 ChildWindowFromPoint1584   4A 000415A0 ChildWindowFromPointEx1585   4B 000578F0 CliImmSetHotKey1586   4C 0003F330 ClientThreadSetup1587   4D 000244D0 ClientToScreen1588   4E 000415C0 ClipCursor1589   4F 0002B7F0 CloseClipboard1590   50 000415D0 CloseDesktop1591   51 0005C4D0 CloseGestureInfoHandle1592   52 0005F000 CloseTouchInputHandle1593   53 0008FEC0 CloseWindow1594   54 000415E0 CloseWindowStation1595   55 00063620 ConsoleControl1596   56 00041640 ControlMagnification1597   57 0005E580 CopyAcceleratorTableA1598   58 00041650 CopyAcceleratorTableW1599   59 000275F0 CopyIcon1600   5A 00027EB0 CopyImage1601   5B 0003C660 CopyRect1602   5C 0002C350 CountClipboardFormats1603   5D 0005E5E0 CreateAcceleratorTableA1604   5E 00041660 CreateAcceleratorTableW1605   5F 0002A5B0 CreateCaret1606   60 0005E630 CreateCursor1607   61 00041690 CreateDCompositionHwndTarget1608   62 0008FF00 CreateDesktopA1609   63 0008FF40 CreateDesktopExA1610   64 00090040 CreateDesktopExW1611   65 00090090 CreateDesktopW1612   66 0002C2D0 CreateDialogIndirectParamA1613   67 0002D330 CreateDialogIndirectParamAorW1614   68 0002C710 CreateDialogIndirectParamW1615   69 0002BC60 CreateDialogParamA1616   6A 0002BA20 CreateDialogParamW1617   6B 0005E6F0 CreateIcon1618   6C 0005E7A0 CreateIconFromResource1619   6D 00024D20 CreateIconFromResourceEx1620   6E 00027640 CreateIconIndirect1621   6F 0007E7F0 CreateMDIWindowA1622   70 0007E830 CreateMDIWindowW1623   71 0002BF70 CreateMenu1624   72 0002C2A0 CreatePopupMenu1625   73 00085270 CreateSyntheticPointerDevice1626   74 00091BC0 CreateSystemThreads1627   75 00028610 CreateWindowExA1628   76 0002F6F0 CreateWindowExW1629   77 00089350 CreateWindowInBand1630   78 000893A0 CreateWindowInBandEx1631   79 000893F0 CreateWindowIndirect1632   7A 000900C0 CreateWindowStationA1633   7B 00090110 CreateWindowStationW1634   7C 000636B0 CsrBroadcastSystemMessageExW1635   7D 00075600 CtxInitUser321636   7E 000897B0 DdeAbandonTransaction1637   7F 0006E810 DdeAccessData1638   80 0006E890 DdeAddData1639   81 00089850 DdeClientTransaction1640   82 0006F690 DdeCmpStringHandles1641   83 00062B80 DdeConnect1642   84 00062C30 DdeConnectList1643   85 0006E9D0 DdeCreateDataHandle1644   86 0006F6B0 DdeCreateStringHandleA1645   87 0006F6E0 DdeCreateStringHandleW1646   88 00062E50 DdeDisconnect1647   89 00062ED0 DdeDisconnectList1648   8A 0005AE10 DdeEnableCallback1649   8B 0006EAC0 DdeFreeDataHandle1650   8C 0006F710 DdeFreeStringHandle1651   8D 0006EB20 DdeGetData1652   8E 00064900 DdeGetLastError1653   8F 00062FA0 DdeGetQualityOfService1654   90 00064950 DdeImpersonateClient1655   91 000649B0 DdeInitializeA1656   92 000649E0 DdeInitializeW1657   93 0006F7B0 DdeKeepStringHandle1658   94 00064A10 DdeNameService1659   95 00089E00 DdePostAdvise1660   96 0008A040 DdeQueryConvInfo1661   97 00062FB0 DdeQueryNextServer1662   98 0006F850 DdeQueryStringA1663   99 0006F880 DdeQueryStringW1664   9A 000630B0 DdeReconnect1665   9B 000631F0 DdeSetQualityOfService1666   9C 0008A1F0 DdeSetUserHandle1667   9D 0006EC30 DdeUnaccessData1668   9E 00064C50 DdeUninitialize1669   9F          DefDlgProcA (forwarded to NTDLL.NtdllDialogWndProc_A)1670   A0          DefDlgProcW (forwarded to NTDLL.NtdllDialogWndProc_W)1671   A1 000229D0 DefFrameProcA1672   A2 0007E870 DefFrameProcW1673   A3 00020720 DefMDIChildProcA1674   A4 0007E8A0 DefMDIChildProcW1675   A5 00091A90 DefRawInputProc1676   A6          DefWindowProcA (forwarded to NTDLL.NtdllDefWindowProc_A)1677   A7          DefWindowProcW (forwarded to NTDLL.NtdllDefWindowProc_W)1678   A8 000273D0 DeferWindowPos1679   A9 00090140 DeferWindowPosAndBand2503   AA 000416D0 DelegateInput1680   AB 000416E0 DeleteMenu1681   AC 0002C3F0 DeregisterShellHookWindow1682   AD 00030CB0 DestroyAcceleratorTable1683   AE 0002B420 DestroyCaret1684   AF 000401E0 DestroyCursor1685   B0 00041720 DestroyDCompositionHwndTarget1686   B1 000401E0 DestroyIcon1687   B2 00041730 DestroyMenu1688   B3 00084B20 DestroyReasons1689   B4 00041740 DestroySyntheticPointerDevice1690   B5 00041750 DestroyWindow1691   B6 0005E7D0 DialogBoxIndirectParamA1692   B7 00024820 DialogBoxIndirectParamAorW1693   B8 000247F0 DialogBoxIndirectParamW1694   B9 0005E800 DialogBoxParamA1695   BA 0005E8B0 DialogBoxParamW1696   BB 00090180 DisableProcessWindowsGhosting1697   BC 00027F50 DispatchMessageA1698   BD 00035B80 DispatchMessageW1699   BE 000406D0 DisplayConfigGetDeviceInfo1700   BF 000960E0 DisplayConfigSetDeviceInfo1701   C0 00063730 DisplayExitWindowsWarnings1702   C1 0007BB30 DlgDirListA1703   C2 00061740 DlgDirListComboBoxA1704   C3 000617E0 DlgDirListComboBoxW1705   C4 0007BBD0 DlgDirListW1706   C5 00061820 DlgDirSelectComboBoxExA1707   C6 00061880 DlgDirSelectComboBoxExW1708   C7 0007BC10 DlgDirSelectExA1709   C8 0007BC80 DlgDirSelectExW1710   C9 00041770 DoSoundConnect1711   CA 00041780 DoSoundDisconnect1712   CB 000417A0 DragDetect1713   CC 000417B0 DragObject1714   CD 000417C0 DrawAnimatedRects1715   CE 00082E20 DrawCaption1716   CF 0008A880 DrawCaptionTempA1717   D0 000941F0 DrawCaptionTempW1718   D1 000225B0 DrawEdge1719   D2 00027400 DrawFocusRect1720   D3 000974E0 DrawFrame1721   D4 00028BE0 DrawFrameControl1722   D5 00025740 DrawIcon1723   D6 00025770 DrawIconEx1724   D7 0002AD30 DrawMenuBar1725   D8 0007EDD0 DrawMenuBarTemp1726   D9 0007F550 DrawStateA1727   DA 00023410 DrawStateW1728   DB 00022880 DrawTextA1729   DC 000228E0 DrawTextExA1730   DD 0002C7A0 DrawTextExW1731   DE 0002C740 DrawTextW1553   DF 00084E70 DwmGetDxRgn1732   E0 00084E80 DwmGetDxSharedSurface1733   E1 000417D0 DwmGetRemoteSessionOcclusionEvent1734   E2 000417E0 DwmGetRemoteSessionOcclusionState1735   E3 000417F0 DwmKernelShutdown1736   E4 00041800 DwmKernelStartup1737   E5 00090190 DwmLockScreenUpdates1738   E6 00041810 DwmValidateWindow1739   E7 0001D870 EditWndProc1740   E8 0002C2B0 EmptyClipboard1741   E9 00020690 EnableMenuItem1742   EA 00041830 EnableMouseInPointer1743   EB 00041860 EnableNonClientDpiScaling1744   EC 00041870 EnableOneCoreTransformMode1745   ED 00085C70 EnableScrollBar1746   EE 000894C0 EnableSessionForMMCSS1747   EF 00040020 EnableWindow1748   F0 00028780 EndDeferWindowPos1749   F1 000418E0 EndDeferWindowPosEx1750   F2 0002AB20 EndDialog1751   F3 000418F0 EndMenu1752   F4 00041900 EndPaint1753   F5 00043770 EndTask1754   F6 00084070 EnterReaderModeHelper1755   F7 00033B80 EnumChildWindows1756   F8 00090220 EnumClipboardFormats1757   F9 0005BAE0 EnumDesktopWindows1758   FA 0005BB10 EnumDesktopsA1759   FB 0005BB30 EnumDesktopsW1760   FC 00029A70 EnumDisplayDevicesA1761   FD 00040040 EnumDisplayDevicesW1762   FE 00041910 EnumDisplayMonitors1763   FF 00029450 EnumDisplaySettingsA1764  100 00029480 EnumDisplaySettingsExA1765  101 0003FDB0 EnumDisplaySettingsExW1766  102 0003FD80 EnumDisplaySettingsW1767  103 0005BB50 EnumPropsA1768  104 0005BB70 EnumPropsExA1769  105 0005BB90 EnumPropsExW1770  106 0005BBB0 EnumPropsW1771  107 00032E20 EnumThreadWindows1772  108 0005BBD0 EnumWindowStationsA1773  109 0005BBF0 EnumWindowStationsW1774  10A 00029A00 EnumWindows1775  10B 0003EC90 EqualRect1776  10C 000878F0 EvaluateProximityToPolygon1777  10D 00087EC0 EvaluateProximityToRect1778  10E 00041920 ExcludeUpdateRgn1779  10F 00063970 ExitWindowsEx1780  110 000233A0 FillRect1781  111 00028050 FindWindowA1782  112 0008A920 FindWindowExA1783  113 0002AEB0 FindWindowExW1784  114 0003FA50 FindWindowW1785  115 00090290 FlashWindow1786  116 00041930 FlashWindowEx1787  117 00027450 FrameRect1788  118 000660D0 FreeDDElParam1789  119 00041950 FrostCrashedWindow1790  11A 000281A0 GetActiveWindow1791  11B 0008A950 GetAltTabInfo1792  11C 0008A950 GetAltTabInfoA1793  11D 00094270 GetAltTabInfoW1794  11E 00041970 GetAncestor1796  11F 0003C120 GetAppCompatFlags1795  120 00035720 GetAppCompatFlags21797  121 00025640 GetAsyncKeyState1798  122 00041980 GetAutoRotationState1799  123 000905D0 GetAwarenessFromDpiAwarenessContext1800  124 00041990 GetCIMSSM1801  125 0003F230 GetCapture1802  126 000419A0 GetCaretBlinkTime1803  127 000419B0 GetCaretPos1804  128 00025B50 GetClassInfoA1805  129 00025BA0 GetClassInfoExA1806  12A 0002F440 GetClassInfoExW1807  12B 0002E460 GetClassInfoW1808  12C 00027280 GetClassLongA1809  12D 000378B0 GetClassLongW1810  12E 00024170 GetClassNameA1811  12F 0003F530 GetClassNameW1812  130 0005AF70 GetClassWord1813  131 00035190 GetClientRect1814  132 000419C0 GetClipCursor1815  133 000419D0 GetClipboardAccessToken1816  134 000281D0 GetClipboardData1817  135 0002C450 GetClipboardFormatNameA1818  136 00040920 GetClipboardFormatNameW1819  137 0002C050 GetClipboardOwner1820  138 0002BD10 GetClipboardSequenceNumber1821  139 0008B820 GetClipboardViewer1822  13A 000419E0 GetComboBoxInfo1823  13B 000419F0 GetCurrentInputMessageSource1824  13C 00041A00 GetCursor1825  13D 00040FD0 GetCursorFrameInfo1826  13E 00041A10 GetCursorInfo1827  13F 00025830 GetCursorPos1828  140 0003EEC0 GetDC1829  141 00041A20 GetDCEx1830  142 00041A30 GetDesktopID1831  143 0003A1A0 GetDesktopWindow1832  144 0002BD90 GetDialogBaseUnits1833  145 00066B80 GetDialogControlDpiChangeBehavior1834  146 00066BB0 GetDialogDpiChangeBehavior1835  147 00041A40 GetDisplayAutoRotationPreferences1836  148 0002BE90 GetDisplayConfigBufferSizes1837  149 00039350 GetDlgCtrlID1838  14A 00039470 GetDlgItem1839  14B 0002B0C0 GetDlgItemInt1840  14C 000947F0 GetDlgItemTextA1841  14D 0002B200 GetDlgItemTextW1842  14E 00041A60 GetDoubleClickTime1843  14F 00090660 GetDpiAwarenessContextForProcess1844  150 00040690 GetDpiForMonitorInternal1845  151 00035790 GetDpiForSystem1846  152 00027EE0 GetDpiForWindow1847  153 00090680 GetDpiFromDpiAwarenessContext1848  154 00041A70 GetExtendedPointerDeviceProperty1849  155 0003EE30 GetFocus1850  156 00041A80 GetForegroundWindow1851  157 00041A90 GetGUIThreadInfo1852  158 00041AA0 GetGestureConfig1853  159 0005C550 GetGestureExtraArgs1854  15A 0005C570 GetGestureInfo1855  15B 00041AB0 GetGuiResources1856  15C 0003FAE0 GetIconInfo1857  15D 0005E930 GetIconInfoExA1858  15E 0005EA40 GetIconInfoExW1859  15F 000906D0 GetInputDesktop1860  160 00041AD0 GetInputLocaleInfo1861  161 00027210 GetInputState1862  162 00041B10 GetInternalWindowPos1863  163 000906E0 GetKBCodePage1864  164 0008A980 GetKeyNameTextA1865  165 000942A0 GetKeyNameTextW1866  166 0003C590 GetKeyState1867  167 0003F640 GetKeyboardLayout1868  168 00041B20 GetKeyboardLayoutList1869  169 0008A9F0 GetKeyboardLayoutNameA1870  16A 00040A10 GetKeyboardLayoutNameW1871  16B 00041B30 GetKeyboardState1872  16C 000906F0 GetKeyboardType1873  16D 00027DE0 GetLastActivePopup1874  16E 00024260 GetLastInputInfo1875  16F 00041B40 GetLayeredWindowAttributes1876  170 00041B50 GetListBoxInfo1877  171 0007CB00 GetMagnificationDesktopColorEffect1878  172 0007CB80 GetMagnificationDesktopMagnification1879  173 0007CC10 GetMagnificationDesktopSamplingMode1880  174 00041B60 GetMagnificationLensCtxInformation1881  175 00034920 GetMenu1882  176 00041B70 GetMenuBarInfo1883  177 0007EE20 GetMenuCheckMarkDimensions1884  178 0007EE60 GetMenuContextHelpId1885  179 0007EE80 GetMenuDefaultItem1886  17A 0005D320 GetMenuInfo1887  17B 00021F00 GetMenuItemCount1888  17C 00021F50 GetMenuItemID1889  17D 00094830 GetMenuItemInfoA1890  17E 000215B0 GetMenuItemInfoW1891  17F 00041B80 GetMenuItemRect1892  180 000214E0 GetMenuState1893  181 000948D0 GetMenuStringA1894  182 00020270 GetMenuStringW1895  183 00023C30 GetMessageA1896  184 000408F0 GetMessageExtraInfo1897  185 000406C0 GetMessagePos1898  186 000406F0 GetMessageTime1899  187 0003B850 GetMessageW1900  188 000246B0 GetMonitorInfoA1901  189 00032E50 GetMonitorInfoW1902  18A 00041B90 GetMouseMovePointsEx1903  18B 00066E30 GetNextDlgGroupItem1904  18C 0002C5A0 GetNextDlgTabItem1905  18D 00041138 GetOpenClipboardWindow1906  18E 000377E0 GetParent1907  18F 00025830 GetPhysicalCursorPos1908  190 00041BC0 GetPointerCursorId1909  191 00041BD0 GetPointerDevice1910  192 00041BE0 GetPointerDeviceCursors1911  193 00041BF0 GetPointerDeviceInputSpace1912  194 00041C00 GetPointerDeviceOrientation1913  195 00041C10 GetPointerDeviceProperties1914  196 00041C20 GetPointerDeviceRects1915  197 00041C30 GetPointerDevices1503  198 0005DBB0 GetPointerFrameArrivalTimes1916  199 0005DD00 GetPointerFrameInfo1917  19A 0005DD30 GetPointerFrameInfoHistory1918  19B 0005DD60 GetPointerFramePenInfo1919  19C 0005DD90 GetPointerFramePenInfoHistory1920  19D 00041C40 GetPointerFrameTimes1921  19E 0005DDC0 GetPointerFrameTouchInfo1922  19F 0005DE00 GetPointerFrameTouchInfoHistory1923  1A0 0005DE30 GetPointerInfo1924  1A1 0005DE70 GetPointerInfoHistory1925  1A2 00041C50 GetPointerInputTransform1926  1A3 0005DEA0 GetPointerPenInfo1927  1A4 0005DEE0 GetPointerPenInfoHistory1928  1A5 0005DF10 GetPointerTouchInfo1929  1A6 0005DF50 GetPointerTouchInfoHistory1930  1A7 00041C70 GetPointerType1931  1A8 0008B840 GetPriorityClipboardFormat1932  1A9 000907C0 GetProcessDefaultLayout1933  1AA 0002AD50 GetProcessDpiAwarenessInternal2521  1AB 00041C90 GetProcessUIContextInformation1934  1AC 00041CA0 GetProcessWindowStation1935  1AD 000907E0 GetProgmanWindow1936  1AE 000251D0 GetPropA1937  1AF 0003C2D0 GetPropW1938  1B0 0003B600 GetQueueStatus1939  1B1 0006DEB0 GetRawInputBuffer1940  1B2 00041CC0 GetRawInputData1941  1B3 00094920 GetRawInputDeviceInfoA1942  1B4 00091AB0 GetRawInputDeviceInfoW1943  1B5 00041CD0 GetRawInputDeviceList1944  1B6 00041CE0 GetRawPointerDeviceData1945  1B7 00084B80 GetReasonTitleFromReasonCode1946  1B8 00041CF0 GetRegisteredRawInputDevices1947  1B9 00041D10 GetScrollBarInfo1948  1BA 000255B0 GetScrollInfo1949  1BB 00028110 GetScrollPos1950  1BC 000293F0 GetScrollRange1951  1BD 00090840 GetSendMessageReceiver1952  1BE 00040A40 GetShellChangeNotifyWindow1953  1BF 000407C0 GetShellWindow1954  1C0 00021E30 GetSubMenu1955  1C1 0002D460 GetSysColor1956  1C2 0003FB90 GetSysColorBrush1957  1C3 00041D20 GetSystemDpiForProcess1958  1C4 00041D30 GetSystemMenu1959  1C5 00034DF0 GetSystemMetrics1960  1C6 00035FF0 GetSystemMetricsForDpi1961  1C7 00064160 GetTabbedTextExtentA1962  1C8 00064200 GetTabbedTextExtentW1963  1C9 00090860 GetTaskmanWindow1964  1CA 00041D40 GetThreadDesktop1965  1CB 0003ED10 GetThreadDpiAwarenessContext1966  1CC 000908C0 GetThreadDpiHostingBehavior1967  1CD 00041D50 GetTitleBarInfo1968  1CE 00041D60 GetTopLevelWindow1969  1CF 0001FF10 GetTopWindow1970  1D0 0005F060 GetTouchInputInfo1971  1D1 00090910 GetUnpredictedMessagePos1972  1D2 000271C0 GetUpdateRect1973  1D3 00025880 GetUpdateRgn1974  1D4 0008B870 GetUpdatedClipboardFormats1975  1D5 0002C220 GetUserObjectInformationA1976  1D6 00041D90 GetUserObjectInformationW1977  1D7 00090920 GetUserObjectSecurity1978  1D8 00090960 GetWinStationInfo1979  1D9 0003C170 GetWindow1980  1DA 00041DA0 GetWindowBand1981  1DB 00041DB0 GetWindowCompositionAttribute1982  1DC 00041DC0 GetWindowCompositionInfo1983  1DD 00090980 GetWindowContextHelpId1984  1DE 00041DD0 GetWindowDC1985  1DF 00041DE0 GetWindowDisplayAffinity1986  1E0 00025AB0 GetWindowDpiAwarenessContext1987  1E1 000909A0 GetWindowDpiHostingBehavior1988  1E2 00041DF0 GetWindowFeedbackSetting1989  1E3 00035360 GetWindowInfo1990  1E4 00035140 GetWindowLongA1991  1E5 000389E0 GetWindowLongW1992  1E6 00041E10 GetWindowMinimizeRect1993  1E7 00094A10 GetWindowModuleFileName1994  1E8 00094A10 GetWindowModuleFileNameA1995  1E9 00091AD0 GetWindowModuleFileNameW1996  1EA 00041E20 GetWindowPlacement1997  1EB 00041E30 GetWindowProcessHandle1998  1EC 00034F10 GetWindowRect1999  1ED 0002A750 GetWindowRgn2000  1EE 0003A760 GetWindowRgnBox2003  1EF 00041E40 GetWindowRgnEx2004  1F0 00025A30 GetWindowTextA2006  1F1 00029BE0 GetWindowTextLengthA2007  1F2 0003A980 GetWindowTextLengthW2008  1F3 0003A210 GetWindowTextW2009  1F4 0003AB20 GetWindowThreadProcessId2011  1F5 0002A5E0 GetWindowWord2012  1F6 00041E50 GhostWindowFromHungWindow2013  1F7 00090A20 GrayStringA2014  1F8 00090A50 GrayStringW2505  1F9 00041E60 HandleDelegatedInput2015  1FA 00029880 HideCaret2016  1FB 00041E80 HiliteMenuItem2017  1FC 00041E90 HungWindowFromGhostWindow2018  1FD 0008AE60 IMPGetIMEA2019  1FE 0008AE90 IMPGetIMEW2020  1FF 0008AEC0 IMPQueryIMEA2021  200 0008AEF0 IMPQueryIMEW2022  201 0008AF20 IMPSetIMEA2023  202 0008AF50 IMPSetIMEW2024  203 00041EA0 ImpersonateDdeClientWindow2025  204 0005DA20 InSendMessage2026  205 0003EDB0 InSendMessageEx2027  206 0002DF00 InflateRect2028  207 00041EB0 InheritWindowMonitor2029  208 0002A9B0 InitDManipHook2030  209 00041EC0 InitializeGenericHidInjection2031  20A 00041ED0 InitializeInputDeviceInjection2032  20B 0003FF90 InitializeLpkHooks2033  20C 00041EE0 InitializePointerDeviceInjection2034  20D 00041EF0 InitializePointerDeviceInjectionEx2035  20E 00041F00 InitializeTouchInjection2036  20F 00041F10 InjectDeviceInput2037  210 00041F20 InjectGenericHidInput2038  211 00041F30 InjectKeyboardInput2039  212 00041F40 InjectMouseInput2040  213 00041F50 InjectPointerInput2041  214 00041F50 InjectSyntheticPointerInput2042  215 00041F60 InjectTouchInput2043  216 00041F70 InputSpaceRegionFromPoint2044  217 00094A60 InsertMenuA2045  218 00094AB0 InsertMenuItemA2046  219 00020CC0 InsertMenuItemW2047  21A 00091B20 InsertMenuW2048  21B 00082F60 InternalGetWindowIcon2049  21C 00025710 InternalGetWindowText2050  21D 000308B0 IntersectRect2051  21E 00041F90 InvalidateRect2052  21F 00041FA0 InvalidateRgn2053  220 000976F0 InvertRect2054  221 0008B8A0 IsCharAlphaA2055  222 0008B8C0 IsCharAlphaNumericA2056  223 0008B8E0 IsCharAlphaNumericW2057  224 0008B900 IsCharAlphaW2058  225 0008B920 IsCharLowerA2059  226 0008B940 IsCharLowerW2060  227 0008B960 IsCharUpperA2061  228 0008B980 IsCharUpperW2062  229 000382F0 IsChild2063  22A 00028D70 IsClipboardFormatAvailable2064  22B 0002B360 IsDialogMessage2065  22C 0002B360 IsDialogMessageA2066  22D 00039EC0 IsDialogMessageW2067  22E 0002BB30 IsDlgButtonChecked2068  22F 00040780 IsGUIThread2069  230 0002C370 IsHungAppWindow2070  231 000387B0 IsIconic2071  232 00040540 IsImmersiveProcess2072  233 000894E0 IsInDesktopWindowBand2073  234 00022190 IsMenu2074  235 00041FC0 IsMouseInPointerEnabled2075  236 00041FF0 IsOneCoreTransformMode2076  237 0003C690 IsProcessDPIAware2077  238 00090B20 IsQueueAttached2078  239 0003E830 IsRectEmpty2079  23A 00084C90 IsSETEnabled2080  23B 00039320 IsServerSideWindow2081  23C 00035820 IsThreadDesktopComposited2528  23D 00028030 IsThreadMessageQueueAttached2082  23E 00088860 IsThreadTSFEventAware2083  23F 00042010 IsTopLevelWindow2084  240 00042020 IsTouchWindow2085  241 00090B70 IsValidDpiAwarenessContext2086  242 0003EB70 IsWinEventHookInstalled2087  243 0003A4C0 IsWindow2088  244 00090B90 IsWindowArranged2089  245 00034DA0 IsWindowEnabled2090  246 00038780 IsWindowInDestroy2091  247 00039E20 IsWindowRedirectedForPrint2092  248 00035F90 IsWindowUnicode2093  249 00035910 IsWindowVisible2094  24A 0005DA60 IsWow64Message2095  24B 00038610 IsZoomed2096  24C 00042050 KillTimer2097  24D 0002B230 LoadAcceleratorsA2098  24E 000311A0 LoadAcceleratorsW2099  24F 0002BAD0 LoadBitmapA2100  250 0002B430 LoadBitmapW2101  251 00040590 LoadCursorA2102  252 00058610 LoadCursorFromFileA2103  253 00058660 LoadCursorFromFileW2104  254 00032DB0 LoadCursorW2105  255 00029D30 LoadIconA2106  256 00040750 LoadIconW2107  257 0002AC60 LoadImageA2108  258 000317F0 LoadImageW2109  259 00090BD0 LoadKeyboardLayoutA2110  25A 00090C40 LoadKeyboardLayoutEx2111  25B 00090C70 LoadKeyboardLayoutW2112  25C 00090C90 LoadLocalFonts2113  25D 0002BDB0 LoadMenuA2114  25E 00030960 LoadMenuIndirectA2115  25F 00030960 LoadMenuIndirectW2116  260 00030920 LoadMenuW2117  261 00090D50 LoadRemoteFonts2118  262 00025260 LoadStringA2119  263 0003F0C0 LoadStringW2120  264 00090D70 LockSetForegroundWindow2121  265 00042070 LockWindowStation2122  266 00042080 LockWindowUpdate2123  267 00042090 LockWorkStation2124  268 000420B0 LogicalToPhysicalPoint2125  269 000420C0 LogicalToPhysicalPointForPerMonitorDPI2126  26A 0005EBB0 LookupIconIdFromDirectory2127  26B 00024DF0 LookupIconIdFromDirectoryEx2128  26C 00023760 MBToWCSEx2129  26D 000229A0 MBToWCSExt2130  26E 00080F10 MB_GetString2131  26F 000852A0 MITGetCursorUpdateHandle2132  270 000852B0 MITSetForegroundRoutingInfo2133  271 000852C0 MITSetInputDelegationMode2134  272 000852E0 MITSetLastInputRecipient2135  273 00085300 MITSynthesizeTouchInput2136  274 000888D0 MakeThreadTSFEventAware2137  275 000298A0 MapDialogRect2138  276 000420D0 MapPointsByVisualIdentifier2139  277 0002AC30 MapVirtualKeyA2140  278 0008AA40 MapVirtualKeyExA2141  279 0002A970 MapVirtualKeyExW2142  27A 0002AFD0 MapVirtualKeyW2143  27B 000420E0 MapVisualRelativePoints2144  27C 00034CE0 MapWindowPoints2145  27D 000420F0 MenuItemFromPoint2146  27E 0005DAA0 MenuWindowProcA2147  27F 0005DB10 MenuWindowProcW2148  280 00090D90 MessageBeep2149  281 00080F40 MessageBoxA2150  282 00080F90 MessageBoxExA2151  283 00080FC0 MessageBoxExW2152  284 00080FF0 MessageBoxIndirectA2153  285 00081130 MessageBoxIndirectW2154  286 000811C0 MessageBoxTimeoutA2155  287 000812A0 MessageBoxTimeoutW2156  288 00081460 MessageBoxW2157  289 00094AF0 ModifyMenuA2158  28A 00091B70 ModifyMenuW2159  28B 00030B00 MonitorFromPoint2160  28C 00029270 MonitorFromRect2161  28D 000395E0 MonitorFromWindow2162  28E 00042100 MoveWindow2163  28F 0003C430 MsgWaitForMultipleObjects2164  290 0003C460 MsgWaitForMultipleObjectsEx2165  291 00090DB0 NotifyOverlayWindow2166  292 0003EBC0 NotifyWinEvent2167  293 000835F0 OemKeyScan2168  294 00083660 OemToCharA2169  295 000836B0 OemToCharBuffA2170  296 00083700 OemToCharBuffW2171  297 00083740 OemToCharW2172  298 0003AA80 OffsetRect2173  299 00029790 OpenClipboard2174  29A 00090DD0 OpenDesktopA2175  29B 00090E20 OpenDesktopW2176  29C 00090E50 OpenIcon2177  29D 00042120 OpenInputDesktop2178  29E 00042130 OpenThreadDesktop2179  29F 00090E90 OpenWindowStationA2180  2A0 00090EE0 OpenWindowStationW2181  2A1 00066130 PackDDElParam2182  2A2 00087FF0 PackTouchHitTestingProximityEvaluation2183  2A3 00082F80 PaintDesktop2184  2A4 00042140 PaintMenuBar2185  2A5 00042150 PaintMonitor2186  2A6 00020070 PeekMessageA2187  2A7 0003B8C0 PeekMessageW2188  2A8 00042170 PhysicalToLogicalPoint2189  2A9 00042180 PhysicalToLogicalPointForPerMonitorDPI2190  2AA 00023AE0 PostMessageA2191  2AB 00035960 PostMessageW2192  2AC 00040AD0 PostQuitMessage2193  2AD 00023A20 PostThreadMessageA2194  2AE 0003B230 PostThreadMessageW2195  2AF 00042190 PrintWindow2196  2B0 0006DCF0 PrivateExtractIconExA2197  2B1 0006DD50 PrivateExtractIconExW2198  2B2 0006DE50 PrivateExtractIconsA2199  2B3 00020310 PrivateExtractIconsW2200  2B4 0002C300 PrivateRegisterICSProc2201  2B5 00024490 PtInRect2202  2B6 000421D0 QueryBSDRWindow2203  2B7 00029D70 QueryDisplayConfig2204  2B8 000421E0 QuerySendMessage2205  2B9 000421F0 RIMAddInputObserver2206  2BA 00042200 RIMAreSiblingDevices2207  2BB 00042210 RIMDeviceIoControl2208  2BC 00042220 RIMEnableMonitorMappingForDevice2209  2BD 00042230 RIMFreeInputBuffer2210  2BE 00042240 RIMGetDevicePreparsedData2211  2BF 00042250 RIMGetDevicePreparsedDataLockfree2212  2C0 00042260 RIMGetDeviceProperties2213  2C1 00042270 RIMGetDevicePropertiesLockfree2214  2C2 00042280 RIMGetPhysicalDeviceRect2215  2C3 00042290 RIMGetSourceProcessId2216  2C4 000422A0 RIMObserveNextInput2217  2C5 000422B0 RIMOnPnpNotification2218  2C6 000422C0 RIMOnTimerNotification2219  2C7 000422D0 RIMQueryDevicePath2220  2C8 000422E0 RIMReadInput2221  2C9 000422F0 RIMRegisterForInput2222  2CA 00042300 RIMRemoveInputObserver2223  2CB 00042310 RIMSetExtendedDeviceProperty2224  2CC 00042320 RIMSetTestModeStatus2225  2CD 00042330 RIMUnregisterForInput2226  2CE 00042340 RIMUpdateInputObserverRegistration2227  2CF 00042350 RealChildWindowFromPoint2228  2D0 0008AAE0 RealGetWindowClass2229  2D1 0008AAE0 RealGetWindowClassA2230  2D2 0003FBF0 RealGetWindowClassW2231  2D3 00084E30 ReasonCodeNeedsBugID2232  2D4 00084E50 ReasonCodeNeedsComment2233  2D5 00063A90 RecordShutdownReason2234  2D6 00042360 RedrawWindow2235  2D7 00042370 RegisterBSDRWindow2236  2D8 000221F0 RegisterClassA2237  2D9 000221C0 RegisterClassExA2238  2DA 0002E4B0 RegisterClassExW2239  2DB 0002F6A0 RegisterClassW2240  2DC 0003E8A0 RegisterClipboardFormatA2241  2DD 0003FA20 RegisterClipboardFormatW2242  2DE 00042380 RegisterDManipHook2243  2DF 00040960 RegisterDeviceNotificationA2244  2E0 0002BEE0 RegisterDeviceNotificationW2245  2E1 00042390 RegisterErrorReportingDialog2246  2E2 00090F50 RegisterFrostWindow2247  2E3 00090F70 RegisterGhostWindow2248  2E4 000423A0 RegisterHotKey2249  2E5 00091BE0 RegisterLogonProcess2250  2E6 0002AFF0 RegisterMessagePumpHook2251  2E7 000423B0 RegisterPointerDeviceNotifications2252  2E8 0005DFB0 RegisterPointerInputTarget2253  2E9 0005DFD0 RegisterPointerInputTargetEx2254  2EA 00040850 RegisterPowerSettingNotification2255  2EB 000423C0 RegisterRawInputDevices2256  2EC 000423D0 RegisterServicesProcess2257  2ED 000423E0 RegisterSessionPort2258  2EE 0002C330 RegisterShellHookWindow2259  2EF 00083100 RegisterSuspendResumeNotification2260  2F0 00090FB0 RegisterSystemThread2261  2F1 00042400 RegisterTasklist2262  2F2 00042410 RegisterTouchHitTestingWindow2263  2F3 00083160 RegisterTouchWindow2264  2F4 00083180 RegisterUserApiHook2265  2F5 0003E8A0 RegisterWindowMessageA2266  2F6 0003FA20 RegisterWindowMessageW2267  2F7 00029200 ReleaseCapture2268  2F8 0003E860 ReleaseDC2269  2F9 00042430 ReleaseDwmHitTestWaiters2270  2FA 00040FB0 RemoveClipboardFormatListener2271  2FB 00041740 RemoveInjectionDevice2272  2FC 00042440 RemoveMenu2273  2FD 000296E0 RemovePropA2274  2FE 0003EF90 RemovePropW2275  2FF 00088930 RemoveThreadTSFEventAwareness2276  300 00042450 RemoveVisualIdentifier2277  301 00091020 ReplyMessage2551  302 0005DFF0 ReportInertia2278  303 00042470 ResolveDesktopForWOW2279  304 000661A0 ReuseDDElParam2280  305 000390E0 ScreenToClient2281  306 0007E8D0 ScrollChildren2282  307 0002C1F0 ScrollDC2283  308 0002A570 ScrollWindow2284  309 00027E70 ScrollWindowEx2285  30A 00024340 SendDlgItemMessageA2286  30B 0003AF00 SendDlgItemMessageW2287  30C 0008AF80 SendIMEMessageExA2288  30D 0008AFB0 SendIMEMessageExW2289  30E 000424A0 SendInput2290  30F 00024380 SendMessageA2291  310 0008AB70 SendMessageCallbackA2292  311 00040280 SendMessageCallbackW2293  312 00025230 SendMessageTimeoutA2294  313 0003B300 SendMessageTimeoutW2295  314 00035A10 SendMessageW2296  315 0008ABF0 SendNotifyMessageA2297  316 00040330 SendNotifyMessageW2298  317 000424E0 SetActiveWindow2299  318 00042530 SetCapture2300  319 0002C180 SetCaretBlinkTime2301  31A 0002AD10 SetCaretPos2302  31B 0002BD30 SetClassLongA2303  31C 0002B450 SetClassLongW2304  31D 00042550 SetClassWord2305  31E 00028320 SetClipboardData2306  31F 0002C260 SetClipboardViewer2307  320 00042560 SetCoalescableTimer2571  321 00042570 SetCoreWindow2308  322 0004112C SetCursor2309  323 00042590 SetCursorContents2310  324 000425B0 SetCursorPos2311  325 00091040 SetDebugErrorLevel2312  326 00091050 SetDeskWallpaper2313  327 000425C0 SetDesktopColorTransform2314  328 000425E0 SetDialogControlDpiChangeBehavior2315  329 00066BF0 SetDialogDpiChangeBehavior2316  32A 000425F0 SetDisplayAutoRotationPreferences2317  32B 00096190 SetDisplayConfig2318  32C 0002B940 SetDlgItemInt2319  32D 000270E0 SetDlgItemTextA2320  32E 0002B9D0 SetDlgItemTextW2321  32F 00091070 SetDoubleClickTime2322  330 00042620 SetFeatureReportResponse2323  331 00042630 SetFocus2324  332 00040940 SetForegroundWindow2325  333 00042650 SetFullscreenMagnifierOffsetsDWMUpdated2326  334 00042660 SetGestureConfig2327  335 000426A0 SetInternalWindowPos2328  336 000426B0 SetKeyboardState2329  337 000837B0 SetLastErrorEx2330  338 000426C0 SetLayeredWindowAttributes2331  339 0007CCE0 SetMagnificationDesktopColorEffect2332  33A 0007CD50 SetMagnificationDesktopMagnification2333  33B 000426D0 SetMagnificationDesktopMagnifierOffsetsDWMUpdated2334  33C 0007CDA0 SetMagnificationDesktopSamplingMode2335  33D 000426E0 SetMagnificationLensCtxInformation2336  33E 0002C030 SetMenu2337  33F 000426F0 SetMenuContextHelpId2338  340 00042700 SetMenuDefaultItem2339  341 0007EEC0 SetMenuInfo2340  342 0007EEF0 SetMenuItemBitmaps2341  343 00094B40 SetMenuItemInfoA2342  344 000202C0 SetMenuItemInfoW2343  345 0005DB80 SetMessageExtraInfo2344  346 000910A0 SetMessageQueue2345  347 00042710 SetMirrorRendering2346  348 00040820 SetParent2347  349 000425B0 SetPhysicalCursorPos2348  34A 00042720 SetPointerDeviceInputSpace2349  34B 0002BC30 SetProcessDPIAware2350  34C 000910D0 SetProcessDefaultLayout2351  34D 0003E740 SetProcessDpiAwarenessContext2352  34E 0003CD20 SetProcessDpiAwarenessInternal2353  34F 00042760 SetProcessRestrictionExemption2354  350 00042770 SetProcessWindowStation2355  351 000910F0 SetProgmanWindow2356  352 000285A0 SetPropA2357  353 0003F0F0 SetPropW2358  354 0003ECD0 SetRect2359  355 0003F0A0 SetRectEmpty2360  356 0001F310 SetScrollInfo2361  357 0001CD80 SetScrollPos2362  358 0001D300 SetScrollRange2363  359 00091110 SetShellChangeNotifyWindow2364  35A 00091130 SetShellWindow2365  35B 00042790 SetShellWindowEx2366  35C 000831E0 SetSysColors2367  35D 000837D0 SetSysColorsTemp2368  35E 00083200 SetSystemCursor2369  35F 000427A0 SetSystemMenu2370  360 00091170 SetTaskmanWindow2371  361 00041114 SetThreadDesktop2372  362 0002BB60 SetThreadDpiAwarenessContext2373  363 00091190 SetThreadDpiHostingBehavior2374  364 000427C0 SetThreadInputBlocked2375  365 0003EE40 SetTimer2376  366 00091270 SetUserObjectInformationA2377  367 000912C0 SetUserObjectInformationW2378  368 000912D0 SetUserObjectSecurity2379  369 00040110 SetWinEventHook2380  36A 000427E0 SetWindowBand2381  36B 0003FF60 SetWindowCompositionAttribute2382  36C 000427F0 SetWindowCompositionTransition2383  36D 0002C3B0 SetWindowContextHelpId2384  36E 00042800 SetWindowDisplayAffinity2385  36F 00042810 SetWindowFeedbackSetting2386  370 000281B0 SetWindowLongA2387  371 000358F0 SetWindowLongW2388  372 00042830 SetWindowPlacement2389  373 00042840 SetWindowPos2390  374 00025940 SetWindowRgn2391  375 00083240 SetWindowRgnEx2392  376 00083270 SetWindowStationUser2393  377 00027110 SetWindowTextA2394  378 0003A9D0 SetWindowTextW2395  379 00042860 SetWindowWord2396  37A 0005C8E0 SetWindowsHookA2397  37B 0002ADF0 SetWindowsHookExA2398  37C 00045260 SetWindowsHookExAW2399  37D 000408C0 SetWindowsHookExW2400  37E 0005C900 SetWindowsHookW2401  37F 00029D10 ShowCaret2402  380 00042870 ShowCursor2403  381 0002C390 ShowOwnedPopups2404  382 00042880 ShowScrollBar2405  383 00091310 ShowStartGlass2406  384 00042890 ShowSystemCursor2407  385 000428A0 ShowWindow2408  386 000428B0 ShowWindowAsync2409  387 00091330 ShutdownBlockReasonCreate2410  388 000428C0 ShutdownBlockReasonDestroy2411  389 000428D0 ShutdownBlockReasonQuery2412  38A 000428E0 SignalRedirectionStartComplete2413  38B 000428F0 SkipPointerFrameMessages2414  38C 000814B0 SoftModalMessageBox2415  38D 00042910 SoundSentry2416  38E 00096B20 SubtractRect2417  38F 00091370 SwapMouseButton2418  390 00091390 SwitchDesktop2419  391 000913B0 SwitchDesktopWithFade2420  392 000913D0 SwitchToThisWindow2421  393 00027F70 SystemParametersInfoA2422  394 0003FC50 SystemParametersInfoForDpi2423  395 000350A0 SystemParametersInfoW2424  396 00064270 TabbedTextOutA2425  397 00064310 TabbedTextOutW2426  398 000913F0 TileChildWindows2427  399 0007E900 TileWindows2428  39A 0002B8B0 ToAscii2429  39B 00091420 ToAsciiEx2430  39C 0002B900 ToUnicode2431  39D 000299A0 ToUnicodeEx2432  39E 00042920 TrackMouseEvent2433  39F 0007EF60 TrackPopupMenu2434  3A0 00042930 TrackPopupMenuEx2435  3A1 00023A80 TranslateAccelerator2436  3A2 00023A80 TranslateAcceleratorA2437  3A3 000252D0 TranslateAcceleratorW2438  3A4 0007E930 TranslateMDISysAccel2439  3A5 0003A690 TranslateMessage2440  3A6 000832C0 TranslateMessageEx2504  3A7 00042940 UndelegateInput2441  3A8 00042950 UnhookWinEvent2442  3A9 00091510 UnhookWindowsHook2443  3AA 00040900 UnhookWindowsHookEx2444  3AB 000240A0 UnionRect2445  3AC 00091530 UnloadKeyboardLayout2446  3AD 00042960 UnlockWindowStation2447  3AE 00066240 UnpackDDElParam2448  3AF 000292C0 UnregisterClassA2449  3B0 0002F590 UnregisterClassW2450  3B1 0002C070 UnregisterDeviceNotification2451  3B2 00042970 UnregisterHotKey2452  3B3 0002B540 UnregisterMessagePumpHook2453  3B4 0005E040 UnregisterPointerInputTarget2454  3B5 0005E060 UnregisterPointerInputTargetEx2455  3B6 0002C160 UnregisterPowerSettingNotification2456  3B7 00042980 UnregisterSessionPort2457  3B8 00083310 UnregisterSuspendResumeNotification2458  3B9 00083340 UnregisterTouchWindow2459  3BA 00042990 UnregisterUserApiHook2460  3BB 000429A0 UpdateDefaultDesktopThumbnail2461  3BC 00029640 UpdateLayeredWindow2462  3BD 00025B00 UpdateLayeredWindowIndirect2463  3BE 00083360 UpdatePerUserSystemParameters2464  3BF 000349B0 UpdateWindow2465  3C0 000429B0 UpdateWindowInputSinkHints2466  3C1 0003CD70 User32InitializeImmEntryTable2467  3C2 0003CE50 UserClientDllInitialize2468  3C3 000429D0 UserHandleGrantAccess2469  3C4 00064340 UserLpkPSMTextOut2470  3C5 00064520 UserLpkTabbedTextOut2471  3C6 0002A6D0 UserRealizePalette2472  3C7 00091560 UserRegisterWowHandlers2473  3C8 000996B0 VRipOutput2474  3C9 000996C0 VTagOutput2475  3CA 000429E0 ValidateRect2476  3CB 00029BC0 ValidateRgn2477  3CC 0008AC60 VkKeyScanA2478  3CD 0008ACB0 VkKeyScanExA2479  3CE 0002B400 VkKeyScanExW2480  3CF 0002A550 VkKeyScanW2481  3D0 0002C4D0 WCSToMBEx2482  3D1 0008AFE0 WINNLSEnableIME2483  3D2 0008B010 WINNLSGetEnableStatus2484  3D3 0008B040 WINNLSGetIMEHotkey2485  3D4 00091720 WaitForInputIdle2486  3D5 00042A00 WaitForRedirectionStartComplete2487  3D6 00042A10 WaitMessage2488  3D7 0002B5E0 WinHelpA2489  3D8 0006F030 WinHelpW2490  3D9 00042A20 WindowFromDC2491  3DA 00042A30 WindowFromPhysicalPoint2492  3DB 00042A40 WindowFromPoint1504  3DC 000AA054 Wow64Transition2493  3DD 00088710 _UserTestTokenForInteractive2494  3DE 000A59F8 gSharedInfo2495  3DF 000015F8 gapfnScSendMessage2496  3E0 00083450 keybd_event2497  3E1 000834A0 mouse_event2498  3E2 000288D0 wsprintfA2499  3E3 000278B0 wsprintfW2500  3E4 000288F0 wvsprintfA2501  3E5 000278D0 wvsprintfW1502      0005F090 [NONAME]1550      00084F70 [NONAME]1551      00085000 [NONAME]1552      00084F30 [NONAME]1554      00084FF0 [NONAME]2001      0007CDD