
winDbgList
u ntdll!NtAccessCheck L2
u ntdll!NtAccessCheckAndAuditAlarm L2
u ntdll!NtAccessCheckByType L2
u ntdll!NtAccessCheckByTypeAndAuditAlarm L2
u ntdll!NtAccessCheckByTypeResultList L2
u ntdll!NtAccessCheckByTypeResultListAndAuditAlarm L2
u ntdll!NtAccessCheckByTypeResultListAndAuditAlarmByHandle L2
u ntdll!NtAcquireCrossVmMutant L2
u ntdll!NtAcquireProcessActivityReference L2
u ntdll!NtAddAtom L2
u ntdll!NtAddAtomEx L2
u ntdll!NtAddBootEntry L2
u ntdll!NtAddDriverEntry L2
u ntdll!NtAdjustGroupsToken L2
u ntdll!NtAdjustPrivilegesToken L2
u ntdll!NtAdjustTokenClaimsAndDeviceGroups L2
u ntdll!NtAlertResumeThread L2
u ntdll!NtAlertThread L2
u ntdll!NtAlertThreadByThreadId L2
u ntdll!NtAllocateLocallyUniqueId L2
u ntdll!NtAllocateReserveObject L2
u ntdll!NtAllocateUserPhysicalPages L2
u ntdll!NtAllocateUserPhysicalPagesEx L2
u ntdll!NtAllocateUuids L2
u ntdll!NtAllocateVirtualMemory L2
u ntdll!NtAllocateVirtualMemoryEx L2
u ntdll!NtAlpcAcceptConnectPort L2
u ntdll!NtAlpcCancelMessage L2
u ntdll!NtAlpcConnectPort L2
u ntdll!NtAlpcConnectPortEx L2
u ntdll!NtAlpcCreatePort L2
u ntdll!NtAlpcCreatePortSection L2
u ntdll!NtAlpcCreateResourceReserve L2
u ntdll!NtAlpcCreateSectionView L2
u ntdll!NtAlpcCreateSecurityContext L2
u ntdll!NtAlpcDeletePortSection L2
u ntdll!NtAlpcDeleteResourceReserve L2
u ntdll!NtAlpcDeleteSectionView L2
u ntdll!NtAlpcDeleteSecurityContext L2
u ntdll!NtAlpcDisconnectPort L2
u ntdll!NtAlpcImpersonateClientContainerOfPort L2
u ntdll!NtAlpcImpersonateClientOfPort L2
u ntdll!NtAlpcOpenSenderProcess L2
u ntdll!NtAlpcOpenSenderThread L2
u ntdll!NtAlpcQueryInformation L2
u ntdll!NtAlpcQueryInformationMessage L2
u ntdll!NtAlpcRevokeSecurityContext L2
u ntdll!NtAlpcSendWaitReceivePort L2
u ntdll!NtAlpcSetInformation L2
u ntdll!NtApphelpCacheControl L2
u ntdll!NtAreMappedFilesTheSame L2
u ntdll!NtAssignProcessToJobObject L2
u ntdll!NtAssociateWaitCompletionPacket L2
u ntdll!NtCallEnclave L2
u ntdll!NtCallbackReturn L2
u ntdll!NtCancelIoFile L2
u ntdll!NtCancelIoFileEx L2
u ntdll!NtCancelSynchronousIoFile L2
u ntdll!NtCancelTimer L2
u ntdll!NtCancelTimer2 L2
u ntdll!NtCancelWaitCompletionPacket L2
u ntdll!NtChangeProcessState L2
u ntdll!NtChangeThreadState L2
u ntdll!NtClearEvent L2
u ntdll!NtClose L2
u ntdll!NtCloseObjectAuditAlarm L2
u ntdll!NtCommitComplete L2
u ntdll!NtCommitEnlistment L2
u ntdll!NtCommitRegistryTransaction L2
u ntdll!NtCommitTransaction L2
u ntdll!NtCompactKeys L2
u ntdll!NtCompareObjects L2
u ntdll!NtCompareSigningLevels L2
u ntdll!NtCompareTokens L2
u ntdll!NtCompleteConnectPort L2
u ntdll!NtCompressKey L2
u ntdll!NtConnectPort L2
u ntdll!NtContinue L2
u ntdll!NtContinueEx L2
u ntdll!NtConvertBetweenAuxiliaryCounterAndPerformanceCounter L2
u ntdll!NtCreateCrossVmEvent L2
u ntdll!NtCreateCrossVmMutant L2
u ntdll!NtCreateDebugObject L2
u ntdll!NtCreateDirectoryObject L2
u ntdll!NtCreateDirectoryObjectEx L2
u ntdll!NtCreateEnclave L2
u ntdll!NtCreateEnlistment L2
u ntdll!NtCreateEvent L2
u ntdll!NtCreateEventPair L2
u ntdll!NtCreateFile L2
u ntdll!NtCreateIRTimer L2
u ntdll!NtCreateIoCompletion L2
u ntdll!NtCreateIoRing L2
u ntdll!NtCreateJobObject L2
u ntdll!NtCreateJobSet L2
u ntdll!NtCreateKey L2
u ntdll!NtCreateKeyTransacted L2
u ntdll!NtCreateKeyedEvent L2
u ntdll!NtCreateLowBoxToken L2
u ntdll!NtCreateMailslotFile L2
u ntdll!NtCreateMutant L2
u ntdll!NtCreateNamedPipeFile L2
u ntdll!NtCreatePagingFile L2
u ntdll!NtCreatePartition L2
u ntdll!NtCreatePort L2
u ntdll!NtCreatePrivateNamespace L2
u ntdll!NtCreateProcess L2
u ntdll!NtCreateProcessEx L2
u ntdll!NtCreateProcessStateChange L2
u ntdll!NtCreateProfile L2
u ntdll!NtCreateProfileEx L2
u ntdll!NtCreateRegistryTransaction L2
u ntdll!NtCreateResourceManager L2
u ntdll!NtCreateSection L2
u ntdll!NtCreateSectionEx L2
u ntdll!NtCreateSemaphore L2
u ntdll!NtCreateSymbolicLinkObject L2
u ntdll!NtCreateThread L2
u ntdll!NtCreateThreadEx L2
u ntdll!NtCreateThreadStateChange L2
u ntdll!NtCreateTimer L2
u ntdll!NtCreateTimer2 L2
u ntdll!NtCreateToken L2
u ntdll!NtCreateTokenEx L2
u ntdll!NtCreateTransaction L2
u ntdll!NtCreateTransactionManager L2
u ntdll!NtCreateUserProcess L2
u ntdll!NtCreateWaitCompletionPacket L2
u ntdll!NtCreateWaitablePort L2
u ntdll!NtCreateWnfStateName L2
u ntdll!NtCreateWorkerFactory L2
u ntdll!NtDebugActiveProcess L2
u ntdll!NtDebugContinue L2
u ntdll!NtDelayExecution L2
u ntdll!NtDeleteAtom L2
u ntdll!NtDeleteBootEntry L2
u ntdll!NtDeleteDriverEntry L2
u ntdll!NtDeleteFile L2
u ntdll!NtDeleteKey L2
u ntdll!NtDeleteObjectAuditAlarm L2
u ntdll!NtDeletePrivateNamespace L2
u ntdll!NtDeleteValueKey L2
u ntdll!NtDeleteWnfStateData L2
u ntdll!NtDeleteWnfStateName L2
u ntdll!NtDeviceIoControlFile L2
u ntdll!NtDirectGraphicsCall L2
u ntdll!NtDisableLastKnownGood L2
u ntdll!NtDisplayString L2
u ntdll!NtDrawText L2
u ntdll!NtDuplicateObject L2
u ntdll!NtDuplicateToken L2
u ntdll!NtEnableLastKnownGood L2
u ntdll!NtEnumerateBootEntries L2
u ntdll!NtEnumerateDriverEntries L2
u ntdll!NtEnumerateKey L2
u ntdll!NtEnumerateSystemEnvironmentValuesEx L2
u ntdll!NtEnumerateTransactionObject L2
u ntdll!NtEnumerateValueKey L2
u ntdll!NtExtendSection L2
u ntdll!NtFilterBootOption L2
u ntdll!NtFilterToken L2
u ntdll!NtFilterTokenEx L2
u ntdll!NtFindAtom L2
u ntdll!NtFlushBuffersFile L2
u ntdll!NtFlushBuffersFileEx L2
u ntdll!NtFlushInstallUILanguage L2
u ntdll!NtFlushInstructionCache L2
u ntdll!NtFlushKey L2
u ntdll!NtFlushProcessWriteBuffers L2
u ntdll!NtFlushVirtualMemory L2
u ntdll!NtFlushWriteBuffer L2
u ntdll!NtFreeUserPhysicalPages L2
u ntdll!NtFreeVirtualMemory L2
u ntdll!NtFreezeRegistry L2
u ntdll!NtFreezeTransactions L2
u ntdll!NtFsControlFile L2
u ntdll!NtGetCachedSigningLevel L2
u ntdll!NtGetCompleteWnfStateSubscription L2
u ntdll!NtGetContextThread L2
u ntdll!NtGetCurrentProcessorNumber L2
u ntdll!NtGetCurrentProcessorNumberEx L2
u ntdll!NtGetDevicePowerState L2
u ntdll!NtGetMUIRegistryInfo L2
u ntdll!NtGetNextProcess L2
u ntdll!NtGetNextThread L2
u ntdll!NtGetNlsSectionPtr L2
u ntdll!NtGetNotificationResourceManager L2
u ntdll!NtGetWriteWatch L2
u ntdll!NtImpersonateAnonymousToken L2
u ntdll!NtImpersonateClientOfPort L2
u ntdll!NtImpersonateThread L2
u ntdll!NtInitializeEnclave L2
u ntdll!NtInitializeNlsFiles L2
u ntdll!NtInitializeRegistry L2
u ntdll!NtInitiatePowerAction L2
u ntdll!NtIsProcessInJob L2
u ntdll!NtIsSystemResumeAutomatic L2
u ntdll!NtIsUILanguageComitted L2
u ntdll!NtListenPort L2
u ntdll!NtLoadDriver L2
u ntdll!NtLoadEnclaveData L2
u ntdll!NtLoadKey L2
u ntdll!NtLoadKey2 L2
u ntdll!NtLoadKey3 L2
u ntdll!NtLoadKeyEx L2
u ntdll!NtLockFile L2
u ntdll!NtLockProductActivationKeys L2
u ntdll!NtLockRegistryKey L2
u ntdll!NtLockVirtualMemory L2
u ntdll!NtMakePermanentObject L2
u ntdll!NtMakeTemporaryObject L2
u ntdll!NtManageHotPatch L2
u ntdll!NtManagePartition L2
u ntdll!NtMapCMFModule L2
u ntdll!NtMapUserPhysicalPages L2
u ntdll!NtMapUserPhysicalPagesScatter L2
u ntdll!NtMapViewOfSection L2
u ntdll!NtMapViewOfSectionEx L2
u ntdll!NtModifyBootEntry L2
u ntdll!NtModifyDriverEntry L2
u ntdll!NtNotifyChangeDirectoryFile L2
u ntdll!NtNotifyChangeDirectoryFileEx L2
u ntdll!NtNotifyChangeKey L2
u ntdll!NtNotifyChangeMultipleKeys L2
u ntdll!NtNotifyChangeSession L2
u ntdll!NtOpenDirectoryObject L2
u ntdll!NtOpenEnlistment L2
u ntdll!NtOpenEvent L2
u ntdll!NtOpenEventPair L2
u ntdll!NtOpenFile L2
u ntdll!NtOpenIoCompletion L2
u ntdll!NtOpenJobObject L2
u ntdll!NtOpenKey L2
u ntdll!NtOpenKeyEx L2
u ntdll!NtOpenKeyTransacted L2
u ntdll!NtOpenKeyTransactedEx L2
u ntdll!NtOpenKeyedEvent L2
u ntdll!NtOpenMutant L2
u ntdll!NtOpenObjectAuditAlarm L2
u ntdll!NtOpenPartition L2
u ntdll!NtOpenPrivateNamespace L2
u ntdll!NtOpenProcess L2
u ntdll!NtOpenProcessToken L2
u ntdll!NtOpenProcessTokenEx L2
u ntdll!NtOpenRegistryTransaction L2
u ntdll!NtOpenResourceManager L2
u ntdll!NtOpenSection L2
u ntdll!NtOpenSemaphore L2
u ntdll!NtOpenSession L2
u ntdll!NtOpenSymbolicLinkObject L2
u ntdll!NtOpenThread L2
u ntdll!NtOpenThreadToken L2
u ntdll!NtOpenThreadTokenEx L2
u ntdll!NtOpenTimer L2
u ntdll!NtOpenTransaction L2
u ntdll!NtOpenTransactionManager L2
u ntdll!NtPlugPlayControl L2
u ntdll!NtPowerInformation L2
u ntdll!NtPrePrepareComplete L2
u ntdll!NtPrePrepareEnlistment L2
u ntdll!NtPrepareComplete L2
u ntdll!NtPrepareEnlistment L2
u ntdll!NtPrivilegeCheck L2
u ntdll!NtPrivilegeObjectAuditAlarm L2
u ntdll!NtPrivilegedServiceAuditAlarm L2
u ntdll!NtPropagationComplete L2
u ntdll!NtPropagationFailed L2
u ntdll!NtProtectVirtualMemory L2
u ntdll!NtPssCaptureVaSpaceBulk L2
u ntdll!NtPulseEvent L2
u ntdll!NtQueryAttributesFile L2
u ntdll!NtQueryAuxiliaryCounterFrequency L2
u ntdll!NtQueryBootEntryOrder L2
u ntdll!NtQueryBootOptions L2
u ntdll!NtQueryDebugFilterState L2
u ntdll!NtQueryDefaultLocale L2
u ntdll!NtQueryDefaultUILanguage L2
u ntdll!NtQueryDirectoryFile L2
u ntdll!NtQueryDirectoryFileEx L2
u ntdll!NtQueryDirectoryObject L2
u ntdll!NtQueryDriverEntryOrder L2
u ntdll!NtQueryEaFile L2
u ntdll!NtQueryEvent L2
u ntdll!NtQueryFullAttributesFile L2
u ntdll!NtQueryInformationAtom L2
u ntdll!NtQueryInformationByName L2
u ntdll!NtQueryInformationEnlistment L2
u ntdll!NtQueryInformationFile L2
u ntdll!NtQueryInformationJobObject L2
u ntdll!NtQueryInformationPort L2
u ntdll!NtQueryInformationProcess L2
u ntdll!NtQueryInformationResourceManager L2
u ntdll!NtQueryInformationThread L2
u ntdll!NtQueryInformationToken L2
u ntdll!NtQueryInformationTransaction L2
u ntdll!NtQueryInformationTransactionManager L2
u ntdll!NtQueryInformationWorkerFactory L2
u ntdll!NtQueryInstallUILanguage L2
u ntdll!NtQueryIntervalProfile L2
u ntdll!NtQueryIoCompletion L2
u ntdll!NtQueryIoRingCapabilities L2
u ntdll!NtQueryKey L2
u ntdll!NtQueryLicenseValue L2
u ntdll!NtQueryMultipleValueKey L2
u ntdll!NtQueryMutant L2
u ntdll!NtQueryObject L2
u ntdll!NtQueryOpenSubKeys L2
u ntdll!NtQueryOpenSubKeysEx L2
u ntdll!NtQueryPerformanceCounter L2
u ntdll!NtQueryPortInformationProcess L2
u ntdll!NtQueryQuotaInformationFile L2
u ntdll!NtQuerySection L2
u ntdll!NtQuerySecurityAttributesToken L2
u ntdll!NtQuerySecurityObject L2
u ntdll!NtQuerySecurityPolicy L2
u ntdll!NtQuerySemaphore L2
u ntdll!NtQuerySymbolicLinkObject L2
u ntdll!NtQuerySystemEnvironmentValue L2
u ntdll!NtQuerySystemEnvironmentValueEx L2
u ntdll!NtQuerySystemInformation L2
u ntdll!NtQuerySystemInformationEx L2
u ntdll!NtQueryTimer L2
u ntdll!NtQueryTimerResolution L2
u ntdll!NtQueryValueKey L2
u ntdll!NtQueryVirtualMemory L2
u ntdll!NtQueryVolumeInformationFile L2
u ntdll!NtQueryWnfStateData L2
u ntdll!NtQueryWnfStateNameInformation L2
u ntdll!NtQueueApcThread L2
u ntdll!NtQueueApcThreadEx L2
u ntdll!NtQueueApcThreadEx2 L2
u ntdll!NtRaiseException L2
u ntdll!NtRaiseHardError L2
u ntdll!NtReadFile L2
u ntdll!NtReadFileScatter L2
u ntdll!NtReadOnlyEnlistment L2
u ntdll!NtReadRequestData L2
u ntdll!NtReadVirtualMemory L2
u ntdll!NtReadVirtualMemoryEx L2
u ntdll!NtRecoverEnlistment L2
u ntdll!NtRecoverResourceManager L2
u ntdll!NtRecoverTransactionManager L2
u ntdll!NtRegisterProtocolAddressInformation L2
u ntdll!NtRegisterThreadTerminatePort L2
u ntdll!NtReleaseKeyedEvent L2
u ntdll!NtReleaseMutant L2
u ntdll!NtReleaseSemaphore L2
u ntdll!NtReleaseWorkerFactoryWorker L2
u ntdll!NtRemoveIoCompletion L2
u ntdll!NtRemoveIoCompletionEx L2
u ntdll!NtRemoveProcessDebug L2
u ntdll!NtRenameKey L2
u ntdll!NtRenameTransactionManager L2
u ntdll!NtReplaceKey L2
u ntdll!NtReplacePartitionUnit L2
u ntdll!NtReplyPort L2
u ntdll!NtReplyWaitReceivePort L2
u ntdll!NtReplyWaitReceivePortEx L2
u ntdll!NtReplyWaitReplyPort L2
u ntdll!NtRequestPort L2
u ntdll!NtRequestWaitReplyPort L2
u ntdll!NtResetEvent L2
u ntdll!NtResetWriteWatch L2
u ntdll!NtRestoreKey L2
u ntdll!NtResumeProcess L2
u ntdll!NtResumeThread L2
u ntdll!NtRevertContainerImpersonation L2
u ntdll!NtRollbackComplete L2
u ntdll!NtRollbackEnlistment L2
u ntdll!NtRollbackRegistryTransaction L2
u ntdll!NtRollbackTransaction L2
u ntdll!NtRollforwardTransactionManager L2
u ntdll!NtSaveKey L2
u ntdll!NtSaveKeyEx L2
u ntdll!NtSaveMergedKeys L2
u ntdll!NtSecureConnectPort L2
u ntdll!NtSerializeBoot L2
u ntdll!NtSetBootEntryOrder L2
u ntdll!NtSetBootOptions L2
u ntdll!NtSetCachedSigningLevel L2
u ntdll!NtSetCachedSigningLevel2 L2
u ntdll!NtSetContextThread L2
u ntdll!NtSetDebugFilterState L2
u ntdll!NtSetDefaultHardErrorPort L2
u ntdll!NtSetDefaultLocale L2
u ntdll!NtSetDefaultUILanguage L2
u ntdll!NtSetDriverEntryOrder L2
u ntdll!NtSetEaFile L2
u ntdll!NtSetEvent L2
u ntdll!NtSetEventBoostPriority L2
u ntdll!NtSetHighEventPair L2
u ntdll!NtSetHighWaitLowEventPair L2
u ntdll!NtSetIRTimer L2
u ntdll!NtSetInformationDebugObject L2
u ntdll!NtSetInformationEnlistment L2
u ntdll!NtSetInformationFile L2
u ntdll!NtSetInformationIoRing L2
u ntdll!NtSetInformationJobObject L2
u ntdll!NtSetInformationKey L2
u ntdll!NtSetInformationObject L2
u ntdll!NtSetInformationProcess L2
u ntdll!NtSetInformationResourceManager L2
u ntdll!NtSetInformationSymbolicLink L2
u ntdll!NtSetInformationThread L2
u ntdll!NtSetInformationToken L2
u ntdll!NtSetInformationTransaction L2
u ntdll!NtSetInformationTransactionManager L2
u ntdll!NtSetInformationVirtualMemory L2
u ntdll!NtSetInformationWorkerFactory L2
u ntdll!NtSetIntervalProfile L2
u ntdll!NtSetIoCompletion L2
u ntdll!NtSetIoCompletionEx L2
u ntdll!NtSetLdtEntries L2
u ntdll!NtSetLowEventPair L2
u ntdll!NtSetLowWaitHighEventPair L2
u ntdll!NtSetQuotaInformationFile L2
u ntdll!NtSetSecurityObject L2
u ntdll!NtSetSystemEnvironmentValue L2
u ntdll!NtSetSystemEnvironmentValueEx L2
u ntdll!NtSetSystemInformation L2
u ntdll!NtSetSystemPowerState L2
u ntdll!NtSetSystemTime L2
u ntdll!NtSetThreadExecutionState L2
u ntdll!NtSetTimer L2
u ntdll!NtSetTimer2 L2
u ntdll!NtSetTimerEx L2
u ntdll!NtSetTimerResolution L2
u ntdll!NtSetUuidSeed L2
u ntdll!NtSetValueKey L2
u ntdll!NtSetVolumeInformationFile L2
u ntdll!NtSetWnfProcessNotificationEvent L2
u ntdll!NtShutdownSystem L2
u ntdll!NtShutdownWorkerFactory L2
u ntdll!NtSignalAndWaitForSingleObject L2
u ntdll!NtSinglePhaseReject L2
u ntdll!NtStartProfile L2
u ntdll!NtStopProfile L2
u ntdll!NtSubmitIoRing L2
u ntdll!NtSubscribeWnfStateChange L2
u ntdll!NtSuspendProcess L2
u ntdll!NtSuspendThread L2
u ntdll!NtSystemDebugControl L2
u ntdll!NtTerminateEnclave L2
u ntdll!NtTerminateJobObject L2
u ntdll!NtTerminateProcess L2
u ntdll!NtTerminateThread L2
u ntdll!NtTestAlert L2
u ntdll!NtThawRegistry L2
u ntdll!NtThawTransactions L2
u ntdll!NtTraceControl L2
u ntdll!NtTraceEvent L2
u ntdll!NtTranslateFilePath L2
u ntdll!NtUmsThreadYield L2
u ntdll!NtUnloadDriver L2
u ntdll!NtUnloadKey L2
u ntdll!NtUnloadKey2 L2
u ntdll!NtUnloadKeyEx L2
u ntdll!NtUnlockFile L2
u ntdll!NtUnlockVirtualMemory L2
u ntdll!NtUnmapViewOfSection L2
u ntdll!NtUnmapViewOfSectionEx L2
u ntdll!NtUnsubscribeWnfStateChange L2
u ntdll!NtUpdateWnfStateData L2
u ntdll!NtVdmControl L2
u ntdll!NtWaitForAlertByThreadId L2
u ntdll!NtWaitForDebugEvent L2
u ntdll!NtWaitForKeyedEvent L2
u ntdll!NtWaitForMultipleObjects L2
u ntdll!NtWaitForMultipleObjects32 L2
u ntdll!NtWaitForSingleObject L2
u ntdll!NtWaitForWorkViaWorkerFactory L2
u ntdll!NtWaitHighEventPair L2
u ntdll!NtWaitLowEventPair L2
u ntdll!NtWorkerFactoryWorkerReady L2
u ntdll!NtWriteFile L2
u ntdll!NtWriteFileGather L2
u ntdll!NtWriteRequestData L2
u ntdll!NtWriteVirtualMemory L2
u ntdll!NtYieldExecution L2
u ntdll!RtlGetNativeSystemInformation L2
