Advertisement
Guest User

Untitled

a guest
Sep 30th, 2019
910
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 163.19 KB | None | 0 0
  1. syscalltable = {}
  2. syscalltable[0] = 'NtAccessCheck'
  3. syscalltable[1] = 'NtWorkerFactoryWorkerReady'
  4. syscalltable[10] = 'NtReleaseSemaphore'
  5. syscalltable[100] = 'NtAccessCheckByTypeResultList'
  6. syscalltable[101] = 'NtAccessCheckByTypeResultListAndAuditAlarm'
  7. syscalltable[102] = 'NtAccessCheckByTypeResultListAndAuditAlarmByHandle'
  8. syscalltable[103] = 'NtAcquireProcessActivityReference'
  9. syscalltable[104] = 'NtAddAtomEx'
  10. syscalltable[105] = 'NtAddBootEntry'
  11. syscalltable[106] = 'NtAddDriverEntry'
  12. syscalltable[107] = 'NtAdjustGroupsToken'
  13. syscalltable[108] = 'NtAdjustTokenClaimsAndDeviceGroups'
  14. syscalltable[109] = 'NtAlertResumeThread'
  15. syscalltable[11] = 'NtReplyWaitReceivePort'
  16. syscalltable[110] = 'NtAlertThread'
  17. syscalltable[111] = 'NtAlertThreadByThreadId'
  18. syscalltable[112] = 'NtAllocateLocallyUniqueId'
  19. syscalltable[113] = 'NtAllocateReserveObject'
  20. syscalltable[114] = 'NtAllocateUserPhysicalPages'
  21. syscalltable[115] = 'NtAllocateUuids'
  22. syscalltable[116] = 'NtAllocateVirtualMemoryEx'
  23. syscalltable[117] = 'NtAlpcAcceptConnectPort'
  24. syscalltable[118] = 'NtAlpcCancelMessage'
  25. syscalltable[119] = 'NtAlpcConnectPort'
  26. syscalltable[12] = 'NtReplyPort'
  27. syscalltable[120] = 'NtAlpcConnectPortEx'
  28. syscalltable[121] = 'NtAlpcCreatePort'
  29. syscalltable[122] = 'NtAlpcCreatePortSection'
  30. syscalltable[123] = 'NtAlpcCreateResourceReserve'
  31. syscalltable[124] = 'NtAlpcCreateSectionView'
  32. syscalltable[125] = 'NtAlpcCreateSecurityContext'
  33. syscalltable[126] = 'NtAlpcDeletePortSection'
  34. syscalltable[127] = 'NtAlpcDeleteResourceReserve'
  35. syscalltable[128] = 'NtAlpcDeleteSectionView'
  36. syscalltable[129] = 'NtAlpcDeleteSecurityContext'
  37. syscalltable[13] = 'NtSetInformationThread'
  38. syscalltable[130] = 'NtAlpcDisconnectPort'
  39. syscalltable[131] = 'NtAlpcImpersonateClientContainerOfPort'
  40. syscalltable[132] = 'NtAlpcImpersonateClientOfPort'
  41. syscalltable[133] = 'NtAlpcOpenSenderProcess'
  42. syscalltable[134] = 'NtAlpcOpenSenderThread'
  43. syscalltable[135] = 'NtAlpcQueryInformation'
  44. syscalltable[136] = 'NtAlpcQueryInformationMessage'
  45. syscalltable[137] = 'NtAlpcRevokeSecurityContext'
  46. syscalltable[138] = 'NtAlpcSendWaitReceivePort'
  47. syscalltable[139] = 'NtAlpcSetInformation'
  48. syscalltable[14] = 'NtSetEvent'
  49. syscalltable[140] = 'NtAreMappedFilesTheSame'
  50. syscalltable[141] = 'NtAssignProcessToJobObject'
  51. syscalltable[142] = 'NtAssociateWaitCompletionPacket'
  52. syscalltable[143] = 'NtCallEnclave'
  53. syscalltable[144] = 'NtCancelIoFileEx'
  54. syscalltable[145] = 'NtCancelSynchronousIoFile'
  55. syscalltable[146] = 'NtCancelTimer2'
  56. syscalltable[147] = 'NtCancelWaitCompletionPacket'
  57. syscalltable[148] = 'NtCommitComplete'
  58. syscalltable[149] = 'NtCommitEnlistment'
  59. syscalltable[15] = 'NtClose'
  60. syscalltable[150] = 'NtCommitRegistryTransaction'
  61. syscalltable[151] = 'NtCommitTransaction'
  62. syscalltable[152] = 'NtCompactKeys'
  63. syscalltable[153] = 'NtCompareObjects'
  64. syscalltable[154] = 'NtCompareSigningLevels'
  65. syscalltable[155] = 'NtCompareTokens'
  66. syscalltable[156] = 'NtCompleteConnectPort'
  67. syscalltable[157] = 'NtCompressKey'
  68. syscalltable[158] = 'NtConnectPort'
  69. syscalltable[159] = 'NtConvertBetweenAuxiliaryCounterAndPerformanceCounter'
  70. syscalltable[16] = 'NtQueryObject'
  71. syscalltable[160] = 'NtCreateDebugObject'
  72. syscalltable[161] = 'NtCreateDirectoryObject'
  73. syscalltable[162] = 'NtCreateDirectoryObjectEx'
  74. syscalltable[163] = 'NtCreateEnclave'
  75. syscalltable[164] = 'NtCreateEnlistment'
  76. syscalltable[165] = 'NtCreateEventPair'
  77. syscalltable[166] = 'NtCreateIRTimer'
  78. syscalltable[167] = 'NtCreateIoCompletion'
  79. syscalltable[168] = 'NtCreateJobObject'
  80. syscalltable[169] = 'NtCreateJobSet'
  81. syscalltable[17] = 'NtQueryInformationFile'
  82. syscalltable[170] = 'NtCreateKeyTransacted'
  83. syscalltable[171] = 'NtCreateKeyedEvent'
  84. syscalltable[172] = 'NtCreateLowBoxToken'
  85. syscalltable[173] = 'NtCreateMailslotFile'
  86. syscalltable[174] = 'NtCreateMutant'
  87. syscalltable[175] = 'NtCreateNamedPipeFile'
  88. syscalltable[176] = 'NtCreatePagingFile'
  89. syscalltable[177] = 'NtCreatePartition'
  90. syscalltable[178] = 'NtCreatePort'
  91. syscalltable[179] = 'NtCreatePrivateNamespace'
  92. syscalltable[18] = 'NtOpenKey'
  93. syscalltable[180] = 'NtCreateProcess'
  94. syscalltable[181] = 'NtCreateProfile'
  95. syscalltable[182] = 'NtCreateProfileEx'
  96. syscalltable[183] = 'NtCreateRegistryTransaction'
  97. syscalltable[184] = 'NtCreateResourceManager'
  98. syscalltable[185] = 'NtCreateSectionEx'
  99. syscalltable[186] = 'NtCreateSemaphore'
  100. syscalltable[187] = 'NtCreateSymbolicLinkObject'
  101. syscalltable[188] = 'NtCreateThreadEx'
  102. syscalltable[189] = 'NtCreateTimer'
  103. syscalltable[19] = 'NtEnumerateValueKey'
  104. syscalltable[190] = 'NtCreateTimer2'
  105. syscalltable[191] = 'NtCreateToken'
  106. syscalltable[192] = 'NtCreateTokenEx'
  107. syscalltable[193] = 'NtCreateTransaction'
  108. syscalltable[194] = 'NtCreateTransactionManager'
  109. syscalltable[195] = 'NtCreateUserProcess'
  110. syscalltable[196] = 'NtCreateWaitCompletionPacket'
  111. syscalltable[197] = 'NtCreateWaitablePort'
  112. syscalltable[198] = 'NtCreateWnfStateName'
  113. syscalltable[199] = 'NtCreateWorkerFactory'
  114. syscalltable[2] = 'NtAcceptConnectPort'
  115. syscalltable[20] = 'NtFindAtom'
  116. syscalltable[200] = 'NtDebugActiveProcess'
  117. syscalltable[201] = 'NtDebugContinue'
  118. syscalltable[202] = 'NtDeleteAtom'
  119. syscalltable[203] = 'NtDeleteBootEntry'
  120. syscalltable[204] = 'NtDeleteDriverEntry'
  121. syscalltable[205] = 'NtDeleteFile'
  122. syscalltable[206] = 'NtDeleteKey'
  123. syscalltable[207] = 'NtDeleteObjectAuditAlarm'
  124. syscalltable[208] = 'NtDeletePrivateNamespace'
  125. syscalltable[209] = 'NtDeleteValueKey'
  126. syscalltable[21] = 'NtQueryDefaultLocale'
  127. syscalltable[210] = 'NtDeleteWnfStateData'
  128. syscalltable[211] = 'NtDeleteWnfStateName'
  129. syscalltable[212] = 'NtDisableLastKnownGood'
  130. syscalltable[213] = 'NtDisplayString'
  131. syscalltable[214] = 'NtDrawText'
  132. syscalltable[215] = 'NtEnableLastKnownGood'
  133. syscalltable[216] = 'NtEnumerateBootEntries'
  134. syscalltable[217] = 'NtEnumerateDriverEntries'
  135. syscalltable[218] = 'NtEnumerateSystemEnvironmentValuesEx'
  136. syscalltable[219] = 'NtEnumerateTransactionObject'
  137. syscalltable[22] = 'NtQueryKey'
  138. syscalltable[220] = 'NtExtendSection'
  139. syscalltable[221] = 'NtFilterBootOption'
  140. syscalltable[222] = 'NtFilterToken'
  141. syscalltable[223] = 'NtFilterTokenEx'
  142. syscalltable[224] = 'NtFlushBuffersFileEx'
  143. syscalltable[225] = 'NtFlushInstallUILanguage'
  144. syscalltable[226] = 'NtFlushInstructionCache'
  145. syscalltable[227] = 'NtFlushKey'
  146. syscalltable[228] = 'NtFlushProcessWriteBuffers'
  147. syscalltable[229] = 'NtFlushVirtualMemory'
  148. syscalltable[23] = 'NtQueryValueKey'
  149. syscalltable[230] = 'NtFlushWriteBuffer'
  150. syscalltable[231] = 'NtFreeUserPhysicalPages'
  151. syscalltable[232] = 'NtFreezeRegistry'
  152. syscalltable[233] = 'NtFreezeTransactions'
  153. syscalltable[234] = 'NtGetCachedSigningLevel'
  154. syscalltable[235] = 'NtGetCompleteWnfStateSubscription'
  155. syscalltable[236] = 'NtGetContextThread'
  156. syscalltable[237] = 'NtGetCurrentProcessorNumber'
  157. syscalltable[238] = 'NtGetCurrentProcessorNumberEx'
  158. syscalltable[239] = 'NtGetDevicePowerState'
  159. syscalltable[24] = 'NtAllocateVirtualMemory'
  160. syscalltable[240] = 'NtGetMUIRegistryInfo'
  161. syscalltable[241] = 'NtGetNextProcess'
  162. syscalltable[242] = 'NtGetNextThread'
  163. syscalltable[243] = 'NtGetNlsSectionPtr'
  164. syscalltable[244] = 'NtGetNotificationResourceManager'
  165. syscalltable[245] = 'NtGetWriteWatch'
  166. syscalltable[246] = 'NtImpersonateAnonymousToken'
  167. syscalltable[247] = 'NtImpersonateThread'
  168. syscalltable[248] = 'NtInitializeEnclave'
  169. syscalltable[249] = 'NtInitializeNlsFiles'
  170. syscalltable[25] = 'NtQueryInformationProcess'
  171. syscalltable[250] = 'NtInitializeRegistry'
  172. syscalltable[251] = 'NtInitiatePowerAction'
  173. syscalltable[252] = 'NtIsSystemResumeAutomatic'
  174. syscalltable[253] = 'NtIsUILanguageComitted'
  175. syscalltable[254] = 'NtListenPort'
  176. syscalltable[255] = 'NtLoadDriver'
  177. syscalltable[256] = 'NtLoadEnclaveData'
  178. syscalltable[257] = 'NtLoadKey'
  179. syscalltable[258] = 'NtLoadKey2'
  180. syscalltable[259] = 'NtLoadKeyEx'
  181. syscalltable[26] = 'NtWaitForMultipleObjects32'
  182. syscalltable[260] = 'NtLockFile'
  183. syscalltable[261] = 'NtLockProductActivationKeys'
  184. syscalltable[262] = 'NtLockRegistryKey'
  185. syscalltable[263] = 'NtLockVirtualMemory'
  186. syscalltable[264] = 'NtMakePermanentObject'
  187. syscalltable[265] = 'NtMakeTemporaryObject'
  188. syscalltable[266] = 'NtManageHotPatch'
  189. syscalltable[267] = 'NtManagePartition'
  190. syscalltable[268] = 'NtMapCMFModule'
  191. syscalltable[269] = 'NtMapUserPhysicalPages'
  192. syscalltable[27] = 'NtWriteFileGather'
  193. syscalltable[270] = 'NtMapViewOfSectionEx'
  194. syscalltable[271] = 'NtModifyBootEntry'
  195. syscalltable[272] = 'NtModifyDriverEntry'
  196. syscalltable[273] = 'NtNotifyChangeDirectoryFile'
  197. syscalltable[274] = 'NtNotifyChangeDirectoryFileEx'
  198. syscalltable[275] = 'NtNotifyChangeKey'
  199. syscalltable[276] = 'NtNotifyChangeMultipleKeys'
  200. syscalltable[277] = 'NtNotifyChangeSession'
  201. syscalltable[278] = 'NtOpenEnlistment'
  202. syscalltable[279] = 'NtOpenEventPair'
  203. syscalltable[28] = 'NtSetInformationProcess'
  204. syscalltable[280] = 'NtOpenIoCompletion'
  205. syscalltable[281] = 'NtOpenJobObject'
  206. syscalltable[282] = 'NtOpenKeyEx'
  207. syscalltable[283] = 'NtOpenKeyTransacted'
  208. syscalltable[284] = 'NtOpenKeyTransactedEx'
  209. syscalltable[285] = 'NtOpenKeyedEvent'
  210. syscalltable[286] = 'NtOpenMutant'
  211. syscalltable[287] = 'NtOpenObjectAuditAlarm'
  212. syscalltable[288] = 'NtOpenPartition'
  213. syscalltable[289] = 'NtOpenPrivateNamespace'
  214. syscalltable[29] = 'NtCreateKey'
  215. syscalltable[290] = 'NtOpenProcessToken'
  216. syscalltable[291] = 'NtOpenRegistryTransaction'
  217. syscalltable[292] = 'NtOpenResourceManager'
  218. syscalltable[293] = 'NtOpenSemaphore'
  219. syscalltable[294] = 'NtOpenSession'
  220. syscalltable[295] = 'NtOpenSymbolicLinkObject'
  221. syscalltable[296] = 'NtOpenThread'
  222. syscalltable[297] = 'NtOpenTimer'
  223. syscalltable[298] = 'NtOpenTransaction'
  224. syscalltable[299] = 'NtOpenTransactionManager'
  225. syscalltable[3] = 'NtMapUserPhysicalPagesScatter'
  226. syscalltable[30] = 'NtFreeVirtualMemory'
  227. syscalltable[300] = 'NtPlugPlayControl'
  228. syscalltable[301] = 'NtPrePrepareComplete'
  229. syscalltable[302] = 'NtPrePrepareEnlistment'
  230. syscalltable[303] = 'NtPrepareComplete'
  231. syscalltable[304] = 'NtPrepareEnlistment'
  232. syscalltable[305] = 'NtPrivilegeCheck'
  233. syscalltable[306] = 'NtPrivilegeObjectAuditAlarm'
  234. syscalltable[307] = 'NtPrivilegedServiceAuditAlarm'
  235. syscalltable[308] = 'NtPropagationComplete'
  236. syscalltable[309] = 'NtPropagationFailed'
  237. syscalltable[31] = 'NtImpersonateClientOfPort'
  238. syscalltable[310] = 'NtPulseEvent'
  239. syscalltable[311] = 'NtQueryAuxiliaryCounterFrequency'
  240. syscalltable[312] = 'NtQueryBootEntryOrder'
  241. syscalltable[313] = 'NtQueryBootOptions'
  242. syscalltable[314] = 'NtQueryDebugFilterState'
  243. syscalltable[315] = 'NtQueryDirectoryFileEx'
  244. syscalltable[316] = 'NtQueryDirectoryObject'
  245. syscalltable[317] = 'NtQueryDriverEntryOrder'
  246. syscalltable[318] = 'NtQueryEaFile'
  247. syscalltable[319] = 'NtQueryFullAttributesFile'
  248. syscalltable[32] = 'NtReleaseMutant'
  249. syscalltable[320] = 'NtQueryInformationAtom'
  250. syscalltable[321] = 'NtQueryInformationByName'
  251. syscalltable[322] = 'NtQueryInformationEnlistment'
  252. syscalltable[323] = 'NtQueryInformationJobObject'
  253. syscalltable[324] = 'NtQueryInformationPort'
  254. syscalltable[325] = 'NtQueryInformationResourceManager'
  255. syscalltable[326] = 'NtQueryInformationTransaction'
  256. syscalltable[327] = 'NtQueryInformationTransactionManager'
  257. syscalltable[328] = 'NtQueryInformationWorkerFactory'
  258. syscalltable[329] = 'NtQueryInstallUILanguage'
  259. syscalltable[33] = 'NtQueryInformationToken'
  260. syscalltable[330] = 'NtQueryIntervalProfile'
  261. syscalltable[331] = 'NtQueryIoCompletion'
  262. syscalltable[332] = 'NtQueryLicenseValue'
  263. syscalltable[333] = 'NtQueryMultipleValueKey'
  264. syscalltable[334] = 'NtQueryMutant'
  265. syscalltable[335] = 'NtQueryOpenSubKeys'
  266. syscalltable[336] = 'NtQueryOpenSubKeysEx'
  267. syscalltable[337] = 'NtQueryPortInformationProcess'
  268. syscalltable[338] = 'NtQueryQuotaInformationFile'
  269. syscalltable[339] = 'NtQuerySecurityAttributesToken'
  270. syscalltable[34] = 'NtRequestWaitReplyPort'
  271. syscalltable[340] = 'NtQuerySecurityObject'
  272. syscalltable[341] = 'NtQuerySecurityPolicy'
  273. syscalltable[342] = 'NtQuerySemaphore'
  274. syscalltable[343] = 'NtQuerySymbolicLinkObject'
  275. syscalltable[344] = 'NtQuerySystemEnvironmentValue'
  276. syscalltable[345] = 'NtQuerySystemEnvironmentValueEx'
  277. syscalltable[346] = 'NtQuerySystemInformationEx'
  278. syscalltable[347] = 'NtQueryTimerResolution'
  279. syscalltable[348] = 'NtQueryWnfStateData'
  280. syscalltable[349] = 'NtQueryWnfStateNameInformation'
  281. syscalltable[35] = 'NtQueryVirtualMemory'
  282. syscalltable[350] = 'NtQueueApcThreadEx'
  283. syscalltable[351] = 'NtRaiseException'
  284. syscalltable[352] = 'NtRaiseHardError'
  285. syscalltable[353] = 'NtReadOnlyEnlistment'
  286. syscalltable[354] = 'NtRecoverEnlistment'
  287. syscalltable[355] = 'NtRecoverResourceManager'
  288. syscalltable[356] = 'NtRecoverTransactionManager'
  289. syscalltable[357] = 'NtRegisterProtocolAddressInformation'
  290. syscalltable[358] = 'NtRegisterThreadTerminatePort'
  291. syscalltable[359] = 'NtReleaseKeyedEvent'
  292. syscalltable[36] = 'NtOpenThreadToken'
  293. syscalltable[360] = 'NtReleaseWorkerFactoryWorker'
  294. syscalltable[361] = 'NtRemoveIoCompletionEx'
  295. syscalltable[362] = 'NtRemoveProcessDebug'
  296. syscalltable[363] = 'NtRenameKey'
  297. syscalltable[364] = 'NtRenameTransactionManager'
  298. syscalltable[365] = 'NtReplaceKey'
  299. syscalltable[366] = 'NtReplacePartitionUnit'
  300. syscalltable[367] = 'NtReplyWaitReplyPort'
  301. syscalltable[368] = 'NtRequestPort'
  302. syscalltable[369] = 'NtResetEvent'
  303. syscalltable[37] = 'NtQueryInformationThread'
  304. syscalltable[370] = 'NtResetWriteWatch'
  305. syscalltable[371] = 'NtRestoreKey'
  306. syscalltable[372] = 'NtResumeProcess'
  307. syscalltable[373] = 'NtRevertContainerImpersonation'
  308. syscalltable[374] = 'NtRollbackComplete'
  309. syscalltable[375] = 'NtRollbackEnlistment'
  310. syscalltable[376] = 'NtRollbackRegistryTransaction'
  311. syscalltable[377] = 'NtRollbackTransaction'
  312. syscalltable[378] = 'NtRollforwardTransactionManager'
  313. syscalltable[379] = 'NtSaveKey'
  314. syscalltable[38] = 'NtOpenProcess'
  315. syscalltable[380] = 'NtSaveKeyEx'
  316. syscalltable[381] = 'NtSaveMergedKeys'
  317. syscalltable[382] = 'NtSecureConnectPort'
  318. syscalltable[383] = 'NtSerializeBoot'
  319. syscalltable[384] = 'NtSetBootEntryOrder'
  320. syscalltable[385] = 'NtSetBootOptions'
  321. syscalltable[386] = 'NtSetCachedSigningLevel'
  322. syscalltable[387] = 'NtSetCachedSigningLevel2'
  323. syscalltable[388] = 'NtSetContextThread'
  324. syscalltable[389] = 'NtSetDebugFilterState'
  325. syscalltable[39] = 'NtSetInformationFile'
  326. syscalltable[390] = 'NtSetDefaultHardErrorPort'
  327. syscalltable[391] = 'NtSetDefaultLocale'
  328. syscalltable[392] = 'NtSetDefaultUILanguage'
  329. syscalltable[393] = 'NtSetDriverEntryOrder'
  330. syscalltable[394] = 'NtSetEaFile'
  331. syscalltable[395] = 'NtSetHighEventPair'
  332. syscalltable[396] = 'NtSetHighWaitLowEventPair'
  333. syscalltable[397] = 'NtSetIRTimer'
  334. syscalltable[398] = 'NtSetInformationDebugObject'
  335. syscalltable[399] = 'NtSetInformationEnlistment'
  336. syscalltable[4] = 'NtWaitForSingleObject'
  337. syscalltable[40] = 'NtMapViewOfSection'
  338. syscalltable[400] = 'NtSetInformationJobObject'
  339. syscalltable[401] = 'NtSetInformationKey'
  340. syscalltable[402] = 'NtSetInformationResourceManager'
  341. syscalltable[403] = 'NtSetInformationSymbolicLink'
  342. syscalltable[404] = 'NtSetInformationToken'
  343. syscalltable[405] = 'NtSetInformationTransaction'
  344. syscalltable[406] = 'NtSetInformationTransactionManager'
  345. syscalltable[407] = 'NtSetInformationVirtualMemory'
  346. syscalltable[408] = 'NtSetInformationWorkerFactory'
  347. syscalltable[409] = 'NtSetIntervalProfile'
  348. syscalltable[4096] = 'NtUserGetOwnerTransformedMonitorRect'
  349. syscalltable[4097] = 'NtUserYieldTask'
  350. syscalltable[4098] = 'NtUserSetSensorPresence'
  351. syscalltable[4099] = 'NtUserGetThreadState'
  352. syscalltable[41] = 'NtAccessCheckAndAuditAlarm'
  353. syscalltable[410] = 'NtSetIoCompletion'
  354. syscalltable[4100] = 'NtUserPeekMessage'
  355. syscalltable[4101] = 'NtUserCallOneParam'
  356. syscalltable[4102] = 'NtUserGetKeyState'
  357. syscalltable[4103] = 'NtUserInvalidateRect'
  358. syscalltable[4104] = 'NtUserCallNoParam'
  359. syscalltable[4105] = 'NtUserGetMessage'
  360. syscalltable[4106] = 'NtUserMessageCall'
  361. syscalltable[4107] = 'NtGdiBitBlt'
  362. syscalltable[4108] = 'NtGdiGetCharSet'
  363. syscalltable[4109] = 'NtUserGetDC'
  364. syscalltable[411] = 'NtSetIoCompletionEx'
  365. syscalltable[4110] = 'NtGdiSelectBitmap'
  366. syscalltable[4111] = 'NtUserWaitMessage'
  367. syscalltable[4112] = 'NtUserTranslateMessage'
  368. syscalltable[4113] = 'NtUserGetProp'
  369. syscalltable[4114] = 'NtUserPostMessage'
  370. syscalltable[4115] = 'NtUserQueryWindow'
  371. syscalltable[4116] = 'NtUserTranslateAccelerator'
  372. syscalltable[4117] = 'NtGdiFlush'
  373. syscalltable[4118] = 'NtUserRedrawWindow'
  374. syscalltable[4119] = 'NtUserWindowFromPoint'
  375. syscalltable[412] = 'NtSetLdtEntries'
  376. syscalltable[4120] = 'NtUserCallMsgFilter'
  377. syscalltable[4121] = 'NtUserValidateTimerCallback'
  378. syscalltable[4122] = 'NtUserBeginPaint'
  379. syscalltable[4123] = 'NtUserSetTimer'
  380. syscalltable[4124] = 'NtUserEndPaint'
  381. syscalltable[4125] = 'NtUserSetCursor'
  382. syscalltable[4126] = 'NtUserKillTimer'
  383. syscalltable[4127] = 'NtUserBuildHwndList'
  384. syscalltable[4128] = 'NtUserSelectPalette'
  385. syscalltable[4129] = 'NtUserCallNextHookEx'
  386. syscalltable[413] = 'NtSetLowEventPair'
  387. syscalltable[4130] = 'NtUserHideCaret'
  388. syscalltable[4131] = 'NtGdiIntersectClipRect'
  389. syscalltable[4132] = 'NtUserCallHwndLock'
  390. syscalltable[4133] = 'NtUserGetProcessWindowStation'
  391. syscalltable[4134] = 'NtGdiDeleteObjectApp'
  392. syscalltable[4135] = 'NtUserSetWindowPos'
  393. syscalltable[4136] = 'NtUserShowCaret'
  394. syscalltable[4137] = 'NtUserEndDeferWindowPosEx'
  395. syscalltable[4138] = 'NtUserCallHwndParamLock'
  396. syscalltable[4139] = 'NtUserVkKeyScanEx'
  397. syscalltable[414] = 'NtSetLowWaitHighEventPair'
  398. syscalltable[4140] = 'NtGdiSetDIBitsToDeviceInternal'
  399. syscalltable[4141] = 'NtUserCallTwoParam'
  400. syscalltable[4142] = 'NtGdiGetRandomRgn'
  401. syscalltable[4143] = 'NtUserCopyAcceleratorTable'
  402. syscalltable[4144] = 'NtUserNotifyWinEvent'
  403. syscalltable[4145] = 'NtGdiExtSelectClipRgn'
  404. syscalltable[4146] = 'NtUserIsClipboardFormatAvailable'
  405. syscalltable[4147] = 'NtUserSetScrollInfo'
  406. syscalltable[4148] = 'NtGdiStretchBlt'
  407. syscalltable[4149] = 'NtUserCreateCaret'
  408. syscalltable[415] = 'NtSetQuotaInformationFile'
  409. syscalltable[4150] = 'NtGdiRectVisible'
  410. syscalltable[4151] = 'NtGdiCombineRgn'
  411. syscalltable[4152] = 'NtGdiGetDCObject'
  412. syscalltable[4153] = 'NtUserDispatchMessage'
  413. syscalltable[4154] = 'NtUserRegisterWindowMessage'
  414. syscalltable[4155] = 'NtGdiExtTextOutW'
  415. syscalltable[4156] = 'NtGdiSelectFont'
  416. syscalltable[4157] = 'NtGdiRestoreDC'
  417. syscalltable[4158] = 'NtGdiSaveDC'
  418. syscalltable[4159] = 'NtUserGetForegroundWindow'
  419. syscalltable[416] = 'NtSetSecurityObject'
  420. syscalltable[4160] = 'NtUserShowScrollBar'
  421. syscalltable[4161] = 'NtUserFindExistingCursorIcon'
  422. syscalltable[4162] = 'NtGdiGetDCDword'
  423. syscalltable[4163] = 'NtGdiGetRegionData'
  424. syscalltable[4164] = 'NtGdiLineTo'
  425. syscalltable[4165] = 'NtUserSystemParametersInfo'
  426. syscalltable[4166] = 'NtGdiGetAppClipBox'
  427. syscalltable[4167] = 'NtUserGetAsyncKeyState'
  428. syscalltable[4168] = 'NtUserGetCPD'
  429. syscalltable[4169] = 'NtUserRemoveProp'
  430. syscalltable[417] = 'NtSetSystemEnvironmentValue'
  431. syscalltable[4170] = 'NtGdiDoPalette'
  432. syscalltable[4171] = 'NtGdiPolyPolyDraw'
  433. syscalltable[4172] = 'NtUserSetCapture'
  434. syscalltable[4173] = 'NtUserEnumDisplayMonitors'
  435. syscalltable[4174] = 'NtGdiCreateCompatibleBitmap'
  436. syscalltable[4175] = 'NtUserSetProp'
  437. syscalltable[4176] = 'NtGdiGetTextCharsetInfo'
  438. syscalltable[4177] = 'NtUserSBGetParms'
  439. syscalltable[4178] = 'NtUserGetIconInfo'
  440. syscalltable[4179] = 'NtUserExcludeUpdateRgn'
  441. syscalltable[418] = 'NtSetSystemEnvironmentValueEx'
  442. syscalltable[4180] = 'NtUserSetFocus'
  443. syscalltable[4181] = 'NtGdiExtGetObjectW'
  444. syscalltable[4182] = 'NtUserGetUpdateRect'
  445. syscalltable[4183] = 'NtGdiCreateCompatibleDC'
  446. syscalltable[4184] = 'NtUserGetClipboardSequenceNumber'
  447. syscalltable[4185] = 'NtGdiCreatePen'
  448. syscalltable[4186] = 'NtUserShowWindow'
  449. syscalltable[4187] = 'NtUserGetKeyboardLayoutList'
  450. syscalltable[4188] = 'NtGdiPatBlt'
  451. syscalltable[4189] = 'NtUserMapVirtualKeyEx'
  452. syscalltable[419] = 'NtSetSystemInformation'
  453. syscalltable[4190] = 'NtUserSetWindowLong'
  454. syscalltable[4191] = 'NtGdiHfontCreate'
  455. syscalltable[4192] = 'NtUserMoveWindow'
  456. syscalltable[4193] = 'NtUserPostThreadMessage'
  457. syscalltable[4194] = 'NtUserDrawIconEx'
  458. syscalltable[4195] = 'NtUserGetSystemMenu'
  459. syscalltable[4196] = 'NtGdiDrawStream'
  460. syscalltable[4197] = 'NtUserInternalGetWindowText'
  461. syscalltable[4198] = 'NtUserGetWindowDC'
  462. syscalltable[4199] = 'NtGdiInvertRgn'
  463. syscalltable[42] = 'NtUnmapViewOfSection'
  464. syscalltable[420] = 'NtSetSystemPowerState'
  465. syscalltable[4200] = 'NtGdiGetRgnBox'
  466. syscalltable[4201] = 'NtGdiGetAndSetDCDword'
  467. syscalltable[4202] = 'NtGdiMaskBlt'
  468. syscalltable[4203] = 'NtGdiGetWidthTable'
  469. syscalltable[4204] = 'NtUserScrollDC'
  470. syscalltable[4205] = 'NtUserGetObjectInformation'
  471. syscalltable[4206] = 'NtGdiCreateBitmap'
  472. syscalltable[4207] = 'NtUserFindWindowEx'
  473. syscalltable[4208] = 'NtGdiPolyPatBlt'
  474. syscalltable[4209] = 'NtUserUnhookWindowsHookEx'
  475. syscalltable[421] = 'NtSetSystemTime'
  476. syscalltable[4210] = 'NtGdiGetNearestColor'
  477. syscalltable[4211] = 'NtGdiTransformPoints'
  478. syscalltable[4212] = 'NtGdiGetDCPoint'
  479. syscalltable[4213] = 'NtGdiCreateDIBBrush'
  480. syscalltable[4214] = 'NtGdiGetTextMetricsW'
  481. syscalltable[4215] = 'NtUserCreateWindowEx'
  482. syscalltable[4216] = 'NtUserSetParent'
  483. syscalltable[4217] = 'NtUserGetKeyboardState'
  484. syscalltable[4218] = 'NtUserToUnicodeEx'
  485. syscalltable[4219] = 'NtUserGetControlBrush'
  486. syscalltable[422] = 'NtSetThreadExecutionState'
  487. syscalltable[4220] = 'NtUserGetClassName'
  488. syscalltable[4221] = 'NtGdiAlphaBlend'
  489. syscalltable[4222] = 'NtGdiOffsetRgn'
  490. syscalltable[4223] = 'NtUserDefSetText'
  491. syscalltable[4224] = 'NtGdiGetTextFaceW'
  492. syscalltable[4225] = 'NtGdiStretchDIBitsInternal'
  493. syscalltable[4226] = 'NtUserSendInput'
  494. syscalltable[4227] = 'NtUserGetThreadDesktop'
  495. syscalltable[4228] = 'NtGdiCreateRectRgn'
  496. syscalltable[4229] = 'NtGdiGetDIBitsInternal'
  497. syscalltable[423] = 'NtSetTimer2'
  498. syscalltable[4230] = 'NtUserGetUpdateRgn'
  499. syscalltable[4231] = 'NtGdiDeleteClientObj'
  500. syscalltable[4232] = 'NtUserGetIconSize'
  501. syscalltable[4233] = 'NtUserFillWindow'
  502. syscalltable[4234] = 'NtGdiExtCreateRegion'
  503. syscalltable[4235] = 'NtGdiComputeXformCoefficients'
  504. syscalltable[4236] = 'NtUserSetWindowsHookEx'
  505. syscalltable[4237] = 'NtUserNotifyProcessCreate'
  506. syscalltable[4238] = 'NtGdiUnrealizeObject'
  507. syscalltable[4239] = 'NtUserGetTitleBarInfo'
  508. syscalltable[424] = 'NtSetTimerEx'
  509. syscalltable[4240] = 'NtGdiRectangle'
  510. syscalltable[4241] = 'NtUserSetThreadDesktop'
  511. syscalltable[4242] = 'NtUserGetDCEx'
  512. syscalltable[4243] = 'NtUserGetScrollBarInfo'
  513. syscalltable[4244] = 'NtGdiGetTextExtent'
  514. syscalltable[4245] = 'NtUserSetWindowFNID'
  515. syscalltable[4246] = 'NtGdiSetLayout'
  516. syscalltable[4247] = 'NtUserCalcMenuBar'
  517. syscalltable[4248] = 'NtUserThunkedMenuItemInfo'
  518. syscalltable[4249] = 'NtGdiExcludeClipRect'
  519. syscalltable[425] = 'NtSetTimerResolution'
  520. syscalltable[4250] = 'NtGdiCreateDIBSection'
  521. syscalltable[4251] = 'NtGdiGetDCforBitmap'
  522. syscalltable[4252] = 'NtUserDestroyCursor'
  523. syscalltable[4253] = 'NtUserDestroyWindow'
  524. syscalltable[4254] = 'NtUserCallHwndParam'
  525. syscalltable[4255] = 'NtGdiCreateDIBitmapInternal'
  526. syscalltable[4256] = 'NtUserOpenWindowStation'
  527. syscalltable[4257] = 'NtUserSetCursorIconData'
  528. syscalltable[4258] = 'NtUserCloseDesktop'
  529. syscalltable[4259] = 'NtUserOpenDesktop'
  530. syscalltable[426] = 'NtSetUuidSeed'
  531. syscalltable[4260] = 'NtUserSetProcessWindowStation'
  532. syscalltable[4261] = 'NtUserGetAtomName'
  533. syscalltable[4262] = 'NtGdiExtCreatePen'
  534. syscalltable[4263] = 'NtGdiCreatePaletteInternal'
  535. syscalltable[4264] = 'NtGdiSetBrushOrg'
  536. syscalltable[4265] = 'NtUserBuildNameList'
  537. syscalltable[4266] = 'NtGdiSetPixel'
  538. syscalltable[4267] = 'NtUserRegisterClassExWOW'
  539. syscalltable[4268] = 'NtGdiCreatePatternBrushInternal'
  540. syscalltable[4269] = 'NtUserGetAncestor'
  541. syscalltable[427] = 'NtSetVolumeInformationFile'
  542. syscalltable[4270] = 'NtGdiGetOutlineTextMetricsInternalW'
  543. syscalltable[4271] = 'NtGdiSetBitmapBits'
  544. syscalltable[4272] = 'NtUserCloseWindowStation'
  545. syscalltable[4273] = 'NtUserGetDoubleClickTime'
  546. syscalltable[4274] = 'NtUserEnableScrollBar'
  547. syscalltable[4275] = 'NtGdiCreateSolidBrush'
  548. syscalltable[4276] = 'NtUserGetClassInfoEx'
  549. syscalltable[4277] = 'NtGdiCreateClientObj'
  550. syscalltable[4278] = 'NtUserUnregisterClass'
  551. syscalltable[4279] = 'NtUserDeleteMenu'
  552. syscalltable[428] = 'NtSetWnfProcessNotificationEvent'
  553. syscalltable[4280] = 'NtGdiRectInRegion'
  554. syscalltable[4281] = 'NtUserScrollWindowEx'
  555. syscalltable[4282] = 'NtGdiGetPixel'
  556. syscalltable[4283] = 'NtUserSetClassLong'
  557. syscalltable[4284] = 'NtUserGetMenuBarInfo'
  558. syscalltable[4285] = 'NtGdiGetNearestPaletteIndex'
  559. syscalltable[4286] = 'NtGdiGetCharWidthW'
  560. syscalltable[4287] = 'NtUserInvalidateRgn'
  561. syscalltable[4288] = 'NtUserGetClipboardOwner'
  562. syscalltable[4289] = 'NtUserSetWindowRgn'
  563. syscalltable[429] = 'NtShutdownSystem'
  564. syscalltable[4290] = 'NtUserBitBltSysBmp'
  565. syscalltable[4291] = 'NtGdiGetCharWidthInfo'
  566. syscalltable[4292] = 'NtUserValidateRect'
  567. syscalltable[4293] = 'NtUserCloseClipboard'
  568. syscalltable[4294] = 'NtUserOpenClipboard'
  569. syscalltable[4295] = 'NtUserSetClipboardData'
  570. syscalltable[4296] = 'NtUserEnableMenuItem'
  571. syscalltable[4297] = 'NtUserAlterWindowStyle'
  572. syscalltable[4298] = 'NtGdiFillRgn'
  573. syscalltable[4299] = 'NtUserGetWindowPlacement'
  574. syscalltable[43] = 'NtReplyWaitReceivePortEx'
  575. syscalltable[430] = 'NtShutdownWorkerFactory'
  576. syscalltable[4300] = 'NtGdiModifyWorldTransform'
  577. syscalltable[4301] = 'NtGdiGetFontData'
  578. syscalltable[4302] = 'NtUserGetOpenClipboardWindow'
  579. syscalltable[4303] = 'NtUserSetThreadState'
  580. syscalltable[4304] = 'NtGdiOpenDCW'
  581. syscalltable[4305] = 'NtUserTrackMouseEvent'
  582. syscalltable[4306] = 'NtGdiGetTransform'
  583. syscalltable[4307] = 'NtUserDestroyMenu'
  584. syscalltable[4308] = 'NtGdiGetBitmapBits'
  585. syscalltable[4309] = 'NtUserConsoleControl'
  586. syscalltable[431] = 'NtSignalAndWaitForSingleObject'
  587. syscalltable[4310] = 'NtUserSetActiveWindow'
  588. syscalltable[4311] = 'NtUserSetInformationThread'
  589. syscalltable[4312] = 'NtUserSetWindowPlacement'
  590. syscalltable[4313] = 'NtUserGetControlColor'
  591. syscalltable[4314] = 'NtGdiSetMetaRgn'
  592. syscalltable[4315] = 'NtGdiSetMiterLimit'
  593. syscalltable[4316] = 'NtGdiSetVirtualResolution'
  594. syscalltable[4317] = 'NtGdiGetRasterizerCaps'
  595. syscalltable[4318] = 'NtUserSetWindowWord'
  596. syscalltable[4319] = 'NtUserGetClipboardFormatName'
  597. syscalltable[432] = 'NtSinglePhaseReject'
  598. syscalltable[4320] = 'NtUserRealInternalGetMessage'
  599. syscalltable[4321] = 'NtUserCreateLocalMemHandle'
  600. syscalltable[4322] = 'NtUserAttachThreadInput'
  601. syscalltable[4323] = 'NtGdiCreateHalftonePalette'
  602. syscalltable[4324] = 'NtUserPaintMenuBar'
  603. syscalltable[4325] = 'NtUserSetKeyboardState'
  604. syscalltable[4326] = 'NtGdiCombineTransform'
  605. syscalltable[4327] = 'NtUserCreateAcceleratorTable'
  606. syscalltable[4328] = 'NtUserGetCursorFrameInfo'
  607. syscalltable[4329] = 'NtUserGetAltTabInfo'
  608. syscalltable[433] = 'NtStartProfile'
  609. syscalltable[4330] = 'NtUserGetCaretBlinkTime'
  610. syscalltable[4331] = 'NtGdiQueryFontAssocInfo'
  611. syscalltable[4332] = 'NtUserProcessConnect'
  612. syscalltable[4333] = 'NtUserEnumDisplayDevices'
  613. syscalltable[4334] = 'NtUserEmptyClipboard'
  614. syscalltable[4335] = 'NtUserGetClipboardData'
  615. syscalltable[4336] = 'NtUserRemoveMenu'
  616. syscalltable[4337] = 'NtGdiSetBoundsRect'
  617. syscalltable[4338] = 'NtGdiGetBitmapDimension'
  618. syscalltable[4339] = 'NtUserConvertMemHandle'
  619. syscalltable[434] = 'NtStopProfile'
  620. syscalltable[4340] = 'NtUserDestroyAcceleratorTable'
  621. syscalltable[4341] = 'NtUserGetGUIThreadInfo'
  622. syscalltable[4342] = 'NtGdiCloseFigure'
  623. syscalltable[4343] = 'NtUserSetWindowsHookAW'
  624. syscalltable[4344] = 'NtUserSetMenuDefaultItem'
  625. syscalltable[4345] = 'NtUserCheckMenuItem'
  626. syscalltable[4346] = 'NtUserSetWinEventHook'
  627. syscalltable[4347] = 'NtUserUnhookWinEvent'
  628. syscalltable[4348] = 'NtUserLockWindowUpdate'
  629. syscalltable[4349] = 'NtUserSetSystemMenu'
  630. syscalltable[435] = 'NtSubscribeWnfStateChange'
  631. syscalltable[4350] = 'NtUserThunkedMenuInfo'
  632. syscalltable[4351] = 'NtGdiBeginPath'
  633. syscalltable[4352] = 'NtGdiEndPath'
  634. syscalltable[4353] = 'NtGdiFillPath'
  635. syscalltable[4354] = 'NtUserCallHwnd'
  636. syscalltable[4355] = 'NtUserDdeInitialize'
  637. syscalltable[4356] = 'NtUserModifyUserStartupInfoFlags'
  638. syscalltable[4357] = 'NtUserCountClipboardFormats'
  639. syscalltable[4358] = 'NtGdiAddFontMemResourceEx'
  640. syscalltable[4359] = 'NtGdiEqualRgn'
  641. syscalltable[436] = 'NtSuspendProcess'
  642. syscalltable[4360] = 'NtGdiGetSystemPaletteUse'
  643. syscalltable[4361] = 'NtGdiRemoveFontMemResourceEx'
  644. syscalltable[4362] = 'NtUserEnumDisplaySettings'
  645. syscalltable[4363] = 'NtUserPaintDesktop'
  646. syscalltable[4364] = 'NtGdiExtEscape'
  647. syscalltable[4365] = 'NtGdiSetBitmapDimension'
  648. syscalltable[4366] = 'NtGdiSetFontEnumeration'
  649. syscalltable[4367] = 'NtUserChangeClipboardChain'
  650. syscalltable[4368] = 'NtUserSetClipboardViewer'
  651. syscalltable[4369] = 'NtUserShowWindowAsync'
  652. syscalltable[437] = 'NtSuspendThread'
  653. syscalltable[4370] = 'NtGdiCreateColorSpace'
  654. syscalltable[4371] = 'NtGdiDeleteColorSpace'
  655. syscalltable[4372] = 'NtUserActivateKeyboardLayout'
  656. syscalltable[4373] = 'NtBindCompositionSurface'
  657. syscalltable[4374] = 'NtCloseCompositionInputSink'
  658. syscalltable[4375] = 'NtCompositionInputThread'
  659. syscalltable[4376] = 'NtCompositionSetDropTarget'
  660. syscalltable[4377] = 'NtConfigureInputSpace'
  661. syscalltable[4378] = 'NtCreateCompositionInputSink'
  662. syscalltable[4379] = 'NtCreateCompositionSurfaceHandle'
  663. syscalltable[438] = 'NtSystemDebugControl'
  664. syscalltable[4380] = 'NtCreateImplicitCompositionInputSink'
  665. syscalltable[4381] = 'NtDCompositionAddCrossDeviceVisualChild'
  666. syscalltable[4382] = 'NtDCompositionBeginFrame'
  667. syscalltable[4383] = 'NtDCompositionCommitChannel'
  668. syscalltable[4384] = 'NtDCompositionCommitSynchronizationObject'
  669. syscalltable[4385] = 'NtDCompositionConfirmFrame'
  670. syscalltable[4386] = 'NtDCompositionConnectPipe'
  671. syscalltable[4387] = 'NtDCompositionCreateAndBindSharedSection'
  672. syscalltable[4388] = 'NtDCompositionCreateChannel'
  673. syscalltable[4389] = 'NtDCompositionCreateConnection'
  674. syscalltable[439] = 'NtTerminateEnclave'
  675. syscalltable[4390] = 'NtDCompositionCreateDwmChannel'
  676. syscalltable[4391] = 'NtDCompositionCreateSharedVisualHandle'
  677. syscalltable[4392] = 'NtDCompositionCreateSynchronizationObject'
  678. syscalltable[4393] = 'NtDCompositionDestroyChannel'
  679. syscalltable[4394] = 'NtDCompositionDestroyConnection'
  680. syscalltable[4395] = 'NtDCompositionDiscardFrame'
  681. syscalltable[4396] = 'NtDCompositionDuplicateHandleToProcess'
  682. syscalltable[4397] = 'NtDCompositionDuplicateSwapchainHandleToDwm'
  683. syscalltable[4398] = 'NtDCompositionEnableMMCSS'
  684. syscalltable[4399] = 'NtDCompositionGetBatchId'
  685. syscalltable[44] = 'NtTerminateProcess'
  686. syscalltable[440] = 'NtTerminateJobObject'
  687. syscalltable[4400] = 'NtDCompositionGetChannels'
  688. syscalltable[4401] = 'NtDCompositionGetConnectionBatch'
  689. syscalltable[4402] = 'NtDCompositionGetDeletedResources'
  690. syscalltable[4403] = 'NtDCompositionGetFrameLegacyTokens'
  691. syscalltable[4404] = 'NtDCompositionGetFrameStatistics'
  692. syscalltable[4405] = 'NtDCompositionGetFrameSurfaceUpdates'
  693. syscalltable[4406] = 'NtDCompositionGetMaterialProperty'
  694. syscalltable[4407] = 'NtDCompositionProcessChannelBatchBuffer'
  695. syscalltable[4408] = 'NtDCompositionReferenceSharedResourceOnDwmChannel'
  696. syscalltable[4409] = 'NtDCompositionRegisterThumbnailVisual'
  697. syscalltable[441] = 'NtTestAlert'
  698. syscalltable[4410] = 'NtDCompositionRegisterVirtualDesktopVisual'
  699. syscalltable[4411] = 'NtDCompositionReleaseAllResources'
  700. syscalltable[4412] = 'NtDCompositionRemoveCrossDeviceVisualChild'
  701. syscalltable[4413] = 'NtDCompositionRetireFrame'
  702. syscalltable[4414] = 'NtDCompositionSetChannelCommitCompletionEvent'
  703. syscalltable[4415] = 'NtDCompositionSetChannelConnectionId'
  704. syscalltable[4416] = 'NtDCompositionSetChildRootVisual'
  705. syscalltable[4417] = 'NtDCompositionSetDebugCounter'
  706. syscalltable[4418] = 'NtDCompositionSetMaterialProperty'
  707. syscalltable[4419] = 'NtDCompositionSubmitDWMBatch'
  708. syscalltable[442] = 'NtThawRegistry'
  709. syscalltable[4420] = 'NtDCompositionSuspendAnimations'
  710. syscalltable[4421] = 'NtDCompositionSynchronize'
  711. syscalltable[4422] = 'NtDCompositionTelemetryAnimationScenarioBegin'
  712. syscalltable[4423] = 'NtDCompositionTelemetryAnimationScenarioReference'
  713. syscalltable[4424] = 'NtDCompositionTelemetryAnimationScenarioUnreference'
  714. syscalltable[4425] = 'NtDCompositionTelemetrySetApplicationId'
  715. syscalltable[4426] = 'NtDCompositionTelemetryTouchInteractionBegin'
  716. syscalltable[4427] = 'NtDCompositionTelemetryTouchInteractionEnd'
  717. syscalltable[4428] = 'NtDCompositionTelemetryTouchInteractionUpdate'
  718. syscalltable[4429] = 'NtDCompositionUpdatePointerCapture'
  719. syscalltable[443] = 'NtThawTransactions'
  720. syscalltable[4430] = 'NtDCompositionWaitForChannel'
  721. syscalltable[4431] = 'NtDesktopCaptureBits'
  722. syscalltable[4432] = 'NtDuplicateCompositionInputSink'
  723. syscalltable[4433] = 'NtDxgkCreateTrackedWorkload'
  724. syscalltable[4434] = 'NtDxgkDestroyTrackedWorkload'
  725. syscalltable[4435] = 'NtDxgkEndTrackedWorkload'
  726. syscalltable[4436] = 'NtDxgkGetAvailableTrackedWorkloadIndex'
  727. syscalltable[4437] = 'NtDxgkGetProcessList'
  728. syscalltable[4438] = 'NtDxgkGetTrackedWorkloadStatistics'
  729. syscalltable[4439] = 'NtDxgkRegisterVailProcess'
  730. syscalltable[444] = 'NtTraceControl'
  731. syscalltable[4440] = 'NtDxgkResetTrackedWorkload'
  732. syscalltable[4441] = 'NtDxgkSubmitPresentBltToHwQueue'
  733. syscalltable[4442] = 'NtDxgkSubmitPresentToHwQueue'
  734. syscalltable[4443] = 'NtDxgkUpdateTrackedWorkload'
  735. syscalltable[4444] = 'NtDxgkVailConnect'
  736. syscalltable[4445] = 'NtDxgkVailDisconnect'
  737. syscalltable[4446] = 'NtDxgkVailPromoteCompositionSurface'
  738. syscalltable[4447] = 'NtEnableOneCoreTransformMode'
  739. syscalltable[4448] = 'NtFlipObjectAddContent'
  740. syscalltable[4449] = 'NtFlipObjectAddPoolBuffer'
  741. syscalltable[445] = 'NtTranslateFilePath'
  742. syscalltable[4450] = 'NtFlipObjectConsumerAcquirePresent'
  743. syscalltable[4451] = 'NtFlipObjectConsumerAdjustUsageReference'
  744. syscalltable[4452] = 'NtFlipObjectConsumerBeginProcessPresent'
  745. syscalltable[4453] = 'NtFlipObjectConsumerEndProcessPresent'
  746. syscalltable[4454] = 'NtFlipObjectConsumerPostMessage'
  747. syscalltable[4455] = 'NtFlipObjectConsumerQueryBufferInfo'
  748. syscalltable[4456] = 'NtFlipObjectCreate'
  749. syscalltable[4457] = 'NtFlipObjectDisconnectEndpoint'
  750. syscalltable[4458] = 'NtFlipObjectOpen'
  751. syscalltable[4459] = 'NtFlipObjectPresentCancel'
  752. syscalltable[446] = 'NtUmsThreadYield'
  753. syscalltable[4460] = 'NtFlipObjectQueryBufferAvailableEvent'
  754. syscalltable[4461] = 'NtFlipObjectQueryEndpointConnected'
  755. syscalltable[4462] = 'NtFlipObjectQueryNextMessageToProducer'
  756. syscalltable[4463] = 'NtFlipObjectReadNextMessageToProducer'
  757. syscalltable[4464] = 'NtFlipObjectRemoveContent'
  758. syscalltable[4465] = 'NtFlipObjectRemovePoolBuffer'
  759. syscalltable[4466] = 'NtFlipObjectSetContent'
  760. syscalltable[4467] = 'NtGdiAbortDoc'
  761. syscalltable[4468] = 'NtGdiAbortPath'
  762. syscalltable[4469] = 'NtGdiAddEmbFontToDC'
  763. syscalltable[447] = 'NtUnloadDriver'
  764. syscalltable[4470] = 'NtGdiAddFontResourceW'
  765. syscalltable[4471] = 'NtGdiAddInitialFonts'
  766. syscalltable[4472] = 'NtGdiAddRemoteFontToDC'
  767. syscalltable[4473] = 'NtGdiAddRemoteMMInstanceToDC'
  768. syscalltable[4474] = 'NtGdiAngleArc'
  769. syscalltable[4475] = 'NtGdiAnyLinkedFonts'
  770. syscalltable[4476] = 'NtGdiArcInternal'
  771. syscalltable[4477] = 'NtGdiBRUSHOBJ_DeleteRbrush'
  772. syscalltable[4478] = 'NtGdiBRUSHOBJ_hGetColorTransform'
  773. syscalltable[4479] = 'NtGdiBRUSHOBJ_pvAllocRbrush'
  774. syscalltable[448] = 'NtUnloadKey'
  775. syscalltable[4480] = 'NtGdiBRUSHOBJ_pvGetRbrush'
  776. syscalltable[4481] = 'NtGdiBRUSHOBJ_ulGetBrushColor'
  777. syscalltable[4482] = 'NtGdiBeginGdiRendering'
  778. syscalltable[4483] = 'NtGdiCLIPOBJ_bEnum'
  779. syscalltable[4484] = 'NtGdiCLIPOBJ_cEnumStart'
  780. syscalltable[4485] = 'NtGdiCLIPOBJ_ppoGetPath'
  781. syscalltable[4486] = 'NtGdiCancelDC'
  782. syscalltable[4487] = 'NtGdiChangeGhostFont'
  783. syscalltable[4488] = 'NtGdiCheckBitmapBits'
  784. syscalltable[4489] = 'NtGdiClearBitmapAttributes'
  785. syscalltable[449] = 'NtUnloadKey2'
  786. syscalltable[4490] = 'NtGdiClearBrushAttributes'
  787. syscalltable[4491] = 'NtGdiColorCorrectPalette'
  788. syscalltable[4492] = 'NtGdiConfigureOPMProtectedOutput'
  789. syscalltable[4493] = 'NtGdiConvertMetafileRect'
  790. syscalltable[4494] = 'NtGdiCreateBitmapFromDxSurface'
  791. syscalltable[4495] = 'NtGdiCreateBitmapFromDxSurface2'
  792. syscalltable[4496] = 'NtGdiCreateColorTransform'
  793. syscalltable[4497] = 'NtGdiCreateEllipticRgn'
  794. syscalltable[4498] = 'NtGdiCreateHatchBrushInternal'
  795. syscalltable[4499] = 'NtGdiCreateMetafileDC'
  796. syscalltable[45] = 'NtSetEventBoostPriority'
  797. syscalltable[450] = 'NtUnloadKeyEx'
  798. syscalltable[4500] = 'NtGdiCreateOPMProtectedOutput'
  799. syscalltable[4501] = 'NtGdiCreateOPMProtectedOutputs'
  800. syscalltable[4502] = 'NtGdiCreateRoundRectRgn'
  801. syscalltable[4503] = 'NtGdiCreateServerMetaFile'
  802. syscalltable[4504] = 'NtGdiCreateSessionMappedDIBSection'
  803. syscalltable[4505] = 'NtGdiDDCCIGetCapabilitiesString'
  804. syscalltable[4506] = 'NtGdiDDCCIGetCapabilitiesStringLength'
  805. syscalltable[4507] = 'NtGdiDDCCIGetTimingReport'
  806. syscalltable[4508] = 'NtGdiDDCCIGetVCPFeature'
  807. syscalltable[4509] = 'NtGdiDDCCISaveCurrentSettings'
  808. syscalltable[451] = 'NtUnlockFile'
  809. syscalltable[4510] = 'NtGdiDDCCISetVCPFeature'
  810. syscalltable[4511] = 'NtGdiDdCreateFullscreenSprite'
  811. syscalltable[4512] = 'NtGdiDdDDIAbandonSwapChain'
  812. syscalltable[4513] = 'NtGdiDdDDIAcquireKeyedMutex'
  813. syscalltable[4514] = 'NtGdiDdDDIAcquireKeyedMutex2'
  814. syscalltable[4515] = 'NtGdiDdDDIAcquireSwapChain'
  815. syscalltable[4516] = 'NtGdiDdDDIAddSurfaceToSwapChain'
  816. syscalltable[4517] = 'NtGdiDdDDIAdjustFullscreenGamma'
  817. syscalltable[4518] = 'NtGdiDdDDICacheHybridQueryValue'
  818. syscalltable[4519] = 'NtGdiDdDDIChangeVideoMemoryReservation'
  819. syscalltable[452] = 'NtUnlockVirtualMemory'
  820. syscalltable[4520] = 'NtGdiDdDDICheckExclusiveOwnership'
  821. syscalltable[4521] = 'NtGdiDdDDICheckMonitorPowerState'
  822. syscalltable[4522] = 'NtGdiDdDDICheckMultiPlaneOverlaySupport'
  823. syscalltable[4523] = 'NtGdiDdDDICheckMultiPlaneOverlaySupport2'
  824. syscalltable[4524] = 'NtGdiDdDDICheckMultiPlaneOverlaySupport3'
  825. syscalltable[4525] = 'NtGdiDdDDICheckOcclusion'
  826. syscalltable[4526] = 'NtGdiDdDDICheckSharedResourceAccess'
  827. syscalltable[4527] = 'NtGdiDdDDICheckVidPnExclusiveOwnership'
  828. syscalltable[4528] = 'NtGdiDdDDICloseAdapter'
  829. syscalltable[4529] = 'NtGdiDdDDIConfigureSharedResource'
  830. syscalltable[453] = 'NtUnmapViewOfSectionEx'
  831. syscalltable[4530] = 'NtGdiDdDDICreateAllocation'
  832. syscalltable[4531] = 'NtGdiDdDDICreateBundleObject'
  833. syscalltable[4532] = 'NtGdiDdDDICreateContext'
  834. syscalltable[4533] = 'NtGdiDdDDICreateContextVirtual'
  835. syscalltable[4534] = 'NtGdiDdDDICreateDCFromMemory'
  836. syscalltable[4535] = 'NtGdiDdDDICreateDevice'
  837. syscalltable[4536] = 'NtGdiDdDDICreateHwContext'
  838. syscalltable[4537] = 'NtGdiDdDDICreateHwQueue'
  839. syscalltable[4538] = 'NtGdiDdDDICreateKeyedMutex'
  840. syscalltable[4539] = 'NtGdiDdDDICreateKeyedMutex2'
  841. syscalltable[454] = 'NtUnsubscribeWnfStateChange'
  842. syscalltable[4540] = 'NtGdiDdDDICreateOutputDupl'
  843. syscalltable[4541] = 'NtGdiDdDDICreateOverlay'
  844. syscalltable[4542] = 'NtGdiDdDDICreatePagingQueue'
  845. syscalltable[4543] = 'NtGdiDdDDICreateProtectedSession'
  846. syscalltable[4544] = 'NtGdiDdDDICreateSwapChain'
  847. syscalltable[4545] = 'NtGdiDdDDICreateSynchronizationObject'
  848. syscalltable[4546] = 'NtGdiDdDDIDDisplayEnum'
  849. syscalltable[4547] = 'NtGdiDdDDIDestroyAllocation'
  850. syscalltable[4548] = 'NtGdiDdDDIDestroyAllocation2'
  851. syscalltable[4549] = 'NtGdiDdDDIDestroyContext'
  852. syscalltable[455] = 'NtUpdateWnfStateData'
  853. syscalltable[4550] = 'NtGdiDdDDIDestroyDCFromMemory'
  854. syscalltable[4551] = 'NtGdiDdDDIDestroyDevice'
  855. syscalltable[4552] = 'NtGdiDdDDIDestroyHwContext'
  856. syscalltable[4553] = 'NtGdiDdDDIDestroyHwQueue'
  857. syscalltable[4554] = 'NtGdiDdDDIDestroyKeyedMutex'
  858. syscalltable[4555] = 'NtGdiDdDDIDestroyOutputDupl'
  859. syscalltable[4556] = 'NtGdiDdDDIDestroyOverlay'
  860. syscalltable[4557] = 'NtGdiDdDDIDestroyPagingQueue'
  861. syscalltable[4558] = 'NtGdiDdDDIDestroyProtectedSession'
  862. syscalltable[4559] = 'NtGdiDdDDIDestroySynchronizationObject'
  863. syscalltable[456] = 'NtVdmControl'
  864. syscalltable[4560] = 'NtGdiDdDDIDispMgrCreate'
  865. syscalltable[4561] = 'NtGdiDdDDIDispMgrSourceOperation'
  866. syscalltable[4562] = 'NtGdiDdDDIDispMgrTargetOperation'
  867. syscalltable[4563] = 'NtGdiDdDDIEnumAdapters'
  868. syscalltable[4564] = 'NtGdiDdDDIEnumAdapters2'
  869. syscalltable[4565] = 'NtGdiDdDDIEscape'
  870. syscalltable[4566] = 'NtGdiDdDDIEvict'
  871. syscalltable[4567] = 'NtGdiDdDDIExtractBundleObject'
  872. syscalltable[4568] = 'NtGdiDdDDIFlipOverlay'
  873. syscalltable[4569] = 'NtGdiDdDDIFlushHeapTransitions'
  874. syscalltable[457] = 'NtWaitForAlertByThreadId'
  875. syscalltable[4570] = 'NtGdiDdDDIFreeGpuVirtualAddress'
  876. syscalltable[4571] = 'NtGdiDdDDIGetAllocationPriority'
  877. syscalltable[4572] = 'NtGdiDdDDIGetCachedHybridQueryValue'
  878. syscalltable[4573] = 'NtGdiDdDDIGetContextInProcessSchedulingPriority'
  879. syscalltable[4574] = 'NtGdiDdDDIGetContextSchedulingPriority'
  880. syscalltable[4575] = 'NtGdiDdDDIGetDWMVerticalBlankEvent'
  881. syscalltable[4576] = 'NtGdiDdDDIGetDeviceState'
  882. syscalltable[4577] = 'NtGdiDdDDIGetDisplayModeList'
  883. syscalltable[4578] = 'NtGdiDdDDIGetMemoryBudgetTarget'
  884. syscalltable[4579] = 'NtGdiDdDDIGetMultiPlaneOverlayCaps'
  885. syscalltable[458] = 'NtWaitForDebugEvent'
  886. syscalltable[4580] = 'NtGdiDdDDIGetMultisampleMethodList'
  887. syscalltable[4581] = 'NtGdiDdDDIGetOverlayState'
  888. syscalltable[4582] = 'NtGdiDdDDIGetPostCompositionCaps'
  889. syscalltable[4583] = 'NtGdiDdDDIGetPresentHistory'
  890. syscalltable[4584] = 'NtGdiDdDDIGetPresentQueueEvent'
  891. syscalltable[4585] = 'NtGdiDdDDIGetProcessDeviceRemovalSupport'
  892. syscalltable[4586] = 'NtGdiDdDDIGetProcessSchedulingPriorityBand'
  893. syscalltable[4587] = 'NtGdiDdDDIGetProcessSchedulingPriorityClass'
  894. syscalltable[4588] = 'NtGdiDdDDIGetResourcePresentPrivateDriverData'
  895. syscalltable[4589] = 'NtGdiDdDDIGetRuntimeData'
  896. syscalltable[459] = 'NtWaitForKeyedEvent'
  897. syscalltable[4590] = 'NtGdiDdDDIGetScanLine'
  898. syscalltable[4591] = 'NtGdiDdDDIGetSetSwapChainMetadata'
  899. syscalltable[4592] = 'NtGdiDdDDIGetSharedPrimaryHandle'
  900. syscalltable[4593] = 'NtGdiDdDDIGetSharedResourceAdapterLuid'
  901. syscalltable[4594] = 'NtGdiDdDDIGetSharedResourceAdapterLuidFlipManager'
  902. syscalltable[4595] = 'NtGdiDdDDIGetYieldPercentage'
  903. syscalltable[4596] = 'NtGdiDdDDIInvalidateActiveVidPn'
  904. syscalltable[4597] = 'NtGdiDdDDIInvalidateCache'
  905. syscalltable[4598] = 'NtGdiDdDDILock'
  906. syscalltable[4599] = 'NtGdiDdDDILock2'
  907. syscalltable[46] = 'NtReadFileScatter'
  908. syscalltable[460] = 'NtWaitForWorkViaWorkerFactory'
  909. syscalltable[4600] = 'NtGdiDdDDIMakeResident'
  910. syscalltable[4601] = 'NtGdiDdDDIMapGpuVirtualAddress'
  911. syscalltable[4602] = 'NtGdiDdDDIMarkDeviceAsError'
  912. syscalltable[4603] = 'NtGdiDdDDINetDispGetNextChunkInfo'
  913. syscalltable[4604] = 'NtGdiDdDDINetDispQueryMiracastDisplayDeviceStatus'
  914. syscalltable[4605] = 'NtGdiDdDDINetDispQueryMiracastDisplayDeviceSupport'
  915. syscalltable[4606] = 'NtGdiDdDDINetDispStartMiracastDisplayDevice'
  916. syscalltable[4607] = 'NtGdiDdDDINetDispStopMiracastDisplayDevice'
  917. syscalltable[4608] = 'NtGdiDdDDINetDispStopSessions'
  918. syscalltable[4609] = 'NtGdiDdDDIOfferAllocations'
  919. syscalltable[461] = 'NtWaitHighEventPair'
  920. syscalltable[4610] = 'NtGdiDdDDIOpenAdapterFromDeviceName'
  921. syscalltable[4611] = 'NtGdiDdDDIOpenAdapterFromHdc'
  922. syscalltable[4612] = 'NtGdiDdDDIOpenAdapterFromLuid'
  923. syscalltable[4613] = 'NtGdiDdDDIOpenBundleObjectNtHandleFromName'
  924. syscalltable[4614] = 'NtGdiDdDDIOpenKeyedMutex'
  925. syscalltable[4615] = 'NtGdiDdDDIOpenKeyedMutex2'
  926. syscalltable[4616] = 'NtGdiDdDDIOpenKeyedMutexFromNtHandle'
  927. syscalltable[4617] = 'NtGdiDdDDIOpenNtHandleFromName'
  928. syscalltable[4618] = 'NtGdiDdDDIOpenProtectedSessionFromNtHandle'
  929. syscalltable[4619] = 'NtGdiDdDDIOpenResource'
  930. syscalltable[462] = 'NtWaitLowEventPair'
  931. syscalltable[4620] = 'NtGdiDdDDIOpenResourceFromNtHandle'
  932. syscalltable[4621] = 'NtGdiDdDDIOpenSwapChain'
  933. syscalltable[4622] = 'NtGdiDdDDIOpenSyncObjectFromNtHandle'
  934. syscalltable[4623] = 'NtGdiDdDDIOpenSyncObjectFromNtHandle2'
  935. syscalltable[4624] = 'NtGdiDdDDIOpenSyncObjectNtHandleFromName'
  936. syscalltable[4625] = 'NtGdiDdDDIOpenSynchronizationObject'
  937. syscalltable[4626] = 'NtGdiDdDDIOutputDuplGetFrameInfo'
  938. syscalltable[4627] = 'NtGdiDdDDIOutputDuplGetMetaData'
  939. syscalltable[4628] = 'NtGdiDdDDIOutputDuplGetPointerShapeData'
  940. syscalltable[4629] = 'NtGdiDdDDIOutputDuplPresent'
  941. syscalltable[4630] = 'NtGdiDdDDIOutputDuplReleaseFrame'
  942. syscalltable[4631] = 'NtGdiDdDDIPinDirectFlipResources'
  943. syscalltable[4632] = 'NtGdiDdDDIPollDisplayChildren'
  944. syscalltable[4633] = 'NtGdiDdDDIPresent'
  945. syscalltable[4634] = 'NtGdiDdDDIPresentMultiPlaneOverlay'
  946. syscalltable[4635] = 'NtGdiDdDDIPresentMultiPlaneOverlay2'
  947. syscalltable[4636] = 'NtGdiDdDDIPresentMultiPlaneOverlay3'
  948. syscalltable[4637] = 'NtGdiDdDDIPresentRedirected'
  949. syscalltable[4638] = 'NtGdiDdDDIQueryAdapterInfo'
  950. syscalltable[4639] = 'NtGdiDdDDIQueryAllocationResidency'
  951. syscalltable[4640] = 'NtGdiDdDDIQueryClockCalibration'
  952. syscalltable[4641] = 'NtGdiDdDDIQueryFSEBlock'
  953. syscalltable[4642] = 'NtGdiDdDDIQueryProcessOfferInfo'
  954. syscalltable[4643] = 'NtGdiDdDDIQueryProtectedSessionInfoFromNtHandle'
  955. syscalltable[4644] = 'NtGdiDdDDIQueryProtectedSessionStatus'
  956. syscalltable[4645] = 'NtGdiDdDDIQueryRemoteVidPnSourceFromGdiDisplayName'
  957. syscalltable[4646] = 'NtGdiDdDDIQueryResourceInfo'
  958. syscalltable[4647] = 'NtGdiDdDDIQueryResourceInfoFromNtHandle'
  959. syscalltable[4648] = 'NtGdiDdDDIQueryStatistics'
  960. syscalltable[4649] = 'NtGdiDdDDIQueryVidPnExclusiveOwnership'
  961. syscalltable[4650] = 'NtGdiDdDDIQueryVideoMemoryInfo'
  962. syscalltable[4651] = 'NtGdiDdDDIReclaimAllocations'
  963. syscalltable[4652] = 'NtGdiDdDDIReclaimAllocations2'
  964. syscalltable[4653] = 'NtGdiDdDDIReleaseKeyedMutex'
  965. syscalltable[4654] = 'NtGdiDdDDIReleaseKeyedMutex2'
  966. syscalltable[4655] = 'NtGdiDdDDIReleaseProcessVidPnSourceOwners'
  967. syscalltable[4656] = 'NtGdiDdDDIReleaseSwapChain'
  968. syscalltable[4657] = 'NtGdiDdDDIRemoveSurfaceFromSwapChain'
  969. syscalltable[4658] = 'NtGdiDdDDIRender'
  970. syscalltable[4659] = 'NtGdiDdDDIReserveGpuVirtualAddress'
  971. syscalltable[4660] = 'NtGdiDdDDISetAllocationPriority'
  972. syscalltable[4661] = 'NtGdiDdDDISetContextInProcessSchedulingPriority'
  973. syscalltable[4662] = 'NtGdiDdDDISetContextSchedulingPriority'
  974. syscalltable[4663] = 'NtGdiDdDDISetDisplayMode'
  975. syscalltable[4664] = 'NtGdiDdDDISetDisplayPrivateDriverFormat'
  976. syscalltable[4665] = 'NtGdiDdDDISetDodIndirectSwapchain'
  977. syscalltable[4666] = 'NtGdiDdDDISetFSEBlock'
  978. syscalltable[4667] = 'NtGdiDdDDISetGammaRamp'
  979. syscalltable[4668] = 'NtGdiDdDDISetHwProtectionTeardownRecovery'
  980. syscalltable[4669] = 'NtGdiDdDDISetMemoryBudgetTarget'
  981. syscalltable[4670] = 'NtGdiDdDDISetMonitorColorSpaceTransform'
  982. syscalltable[4671] = 'NtGdiDdDDISetProcessDeviceRemovalSupport'
  983. syscalltable[4672] = 'NtGdiDdDDISetProcessSchedulingPriorityBand'
  984. syscalltable[4673] = 'NtGdiDdDDISetProcessSchedulingPriorityClass'
  985. syscalltable[4674] = 'NtGdiDdDDISetQueuedLimit'
  986. syscalltable[4675] = 'NtGdiDdDDISetStablePowerState'
  987. syscalltable[4676] = 'NtGdiDdDDISetStereoEnabled'
  988. syscalltable[4677] = 'NtGdiDdDDISetSyncRefreshCountWaitTarget'
  989. syscalltable[4678] = 'NtGdiDdDDISetVidPnSourceHwProtection'
  990. syscalltable[4679] = 'NtGdiDdDDISetVidPnSourceOwner'
  991. syscalltable[4680] = 'NtGdiDdDDISetYieldPercentage'
  992. syscalltable[4681] = 'NtGdiDdDDIShareObjects'
  993. syscalltable[4682] = 'NtGdiDdDDISharedPrimaryLockNotification'
  994. syscalltable[4683] = 'NtGdiDdDDISharedPrimaryUnLockNotification'
  995. syscalltable[4684] = 'NtGdiDdDDISignalSynchronizationObject'
  996. syscalltable[4685] = 'NtGdiDdDDISignalSynchronizationObjectFromCpu'
  997. syscalltable[4686] = 'NtGdiDdDDISignalSynchronizationObjectFromGpu'
  998. syscalltable[4687] = 'NtGdiDdDDISignalSynchronizationObjectFromGpu2'
  999. syscalltable[4688] = 'NtGdiDdDDISubmitCommand'
  1000. syscalltable[4689] = 'NtGdiDdDDISubmitCommandToHwQueue'
  1001. syscalltable[4690] = 'NtGdiDdDDISubmitSignalSyncObjectsToHwQueue'
  1002. syscalltable[4691] = 'NtGdiDdDDISubmitWaitForSyncObjectsToHwQueue'
  1003. syscalltable[4692] = 'NtGdiDdDDITrimProcessCommitment'
  1004. syscalltable[4693] = 'NtGdiDdDDIUnOrderedPresentSwapChain'
  1005. syscalltable[4694] = 'NtGdiDdDDIUnlock'
  1006. syscalltable[4695] = 'NtGdiDdDDIUnlock2'
  1007. syscalltable[4696] = 'NtGdiDdDDIUnpinDirectFlipResources'
  1008. syscalltable[4697] = 'NtGdiDdDDIUpdateAllocationProperty'
  1009. syscalltable[4698] = 'NtGdiDdDDIUpdateGpuVirtualAddress'
  1010. syscalltable[4699] = 'NtGdiDdDDIUpdateOverlay'
  1011. syscalltable[47] = 'NtOpenThreadTokenEx'
  1012. syscalltable[4700] = 'NtGdiDdDDIWaitForIdle'
  1013. syscalltable[4701] = 'NtGdiDdDDIWaitForSynchronizationObject'
  1014. syscalltable[4702] = 'NtGdiDdDDIWaitForSynchronizationObjectFromCpu'
  1015. syscalltable[4703] = 'NtGdiDdDDIWaitForSynchronizationObjectFromGpu'
  1016. syscalltable[4704] = 'NtGdiDdDDIWaitForVerticalBlankEvent'
  1017. syscalltable[4705] = 'NtGdiDdDDIWaitForVerticalBlankEvent2'
  1018. syscalltable[4706] = 'NtGdiDdDestroyFullscreenSprite'
  1019. syscalltable[4707] = 'NtGdiDdNotifyFullscreenSpriteUpdate'
  1020. syscalltable[4708] = 'NtGdiDdQueryVisRgnUniqueness'
  1021. syscalltable[4709] = 'NtGdiDeleteColorTransform'
  1022. syscalltable[4710] = 'NtGdiDescribePixelFormat'
  1023. syscalltable[4711] = 'NtGdiDestroyOPMProtectedOutput'
  1024. syscalltable[4712] = 'NtGdiDestroyPhysicalMonitor'
  1025. syscalltable[4713] = 'NtGdiDoBanding'
  1026. syscalltable[4714] = 'NtGdiDrawEscape'
  1027. syscalltable[4715] = 'NtGdiDwmCreatedBitmapRemotingOutput'
  1028. syscalltable[4716] = 'NtGdiEllipse'
  1029. syscalltable[4717] = 'NtGdiEnableEudc'
  1030. syscalltable[4718] = 'NtGdiEndDoc'
  1031. syscalltable[4719] = 'NtGdiEndGdiRendering'
  1032. syscalltable[4720] = 'NtGdiEndPage'
  1033. syscalltable[4721] = 'NtGdiEngAlphaBlend'
  1034. syscalltable[4722] = 'NtGdiEngAssociateSurface'
  1035. syscalltable[4723] = 'NtGdiEngBitBlt'
  1036. syscalltable[4724] = 'NtGdiEngCheckAbort'
  1037. syscalltable[4725] = 'NtGdiEngComputeGlyphSet'
  1038. syscalltable[4726] = 'NtGdiEngCopyBits'
  1039. syscalltable[4727] = 'NtGdiEngCreateBitmap'
  1040. syscalltable[4728] = 'NtGdiEngCreateClip'
  1041. syscalltable[4729] = 'NtGdiEngCreateDeviceBitmap'
  1042. syscalltable[4730] = 'NtGdiEngCreateDeviceSurface'
  1043. syscalltable[4731] = 'NtGdiEngCreatePalette'
  1044. syscalltable[4732] = 'NtGdiEngDeleteClip'
  1045. syscalltable[4733] = 'NtGdiEngDeletePalette'
  1046. syscalltable[4734] = 'NtGdiEngDeletePath'
  1047. syscalltable[4735] = 'NtGdiEngDeleteSurface'
  1048. syscalltable[4736] = 'NtGdiEngEraseSurface'
  1049. syscalltable[4737] = 'NtGdiEngFillPath'
  1050. syscalltable[4738] = 'NtGdiEngGradientFill'
  1051. syscalltable[4739] = 'NtGdiEngLineTo'
  1052. syscalltable[4740] = 'NtGdiEngLockSurface'
  1053. syscalltable[4741] = 'NtGdiEngMarkBandingSurface'
  1054. syscalltable[4742] = 'NtGdiEngPaint'
  1055. syscalltable[4743] = 'NtGdiEngPlgBlt'
  1056. syscalltable[4744] = 'NtGdiEngStretchBlt'
  1057. syscalltable[4745] = 'NtGdiEngStretchBltROP'
  1058. syscalltable[4746] = 'NtGdiEngStrokeAndFillPath'
  1059. syscalltable[4747] = 'NtGdiEngStrokePath'
  1060. syscalltable[4748] = 'NtGdiEngTextOut'
  1061. syscalltable[4749] = 'NtGdiEngTransparentBlt'
  1062. syscalltable[4750] = 'NtGdiEngUnlockSurface'
  1063. syscalltable[4751] = 'NtGdiEnsureDpiDepDefaultGuiFontForPlateau'
  1064. syscalltable[4752] = 'NtGdiEnumFonts'
  1065. syscalltable[4753] = 'NtGdiEnumObjects'
  1066. syscalltable[4754] = 'NtGdiEudcLoadUnloadLink'
  1067. syscalltable[4755] = 'NtGdiExtFloodFill'
  1068. syscalltable[4756] = 'NtGdiFONTOBJ_cGetAllGlyphHandles'
  1069. syscalltable[4757] = 'NtGdiFONTOBJ_cGetGlyphs'
  1070. syscalltable[4758] = 'NtGdiFONTOBJ_pQueryGlyphAttrs'
  1071. syscalltable[4759] = 'NtGdiFONTOBJ_pfdg'
  1072. syscalltable[4760] = 'NtGdiFONTOBJ_pifi'
  1073. syscalltable[4761] = 'NtGdiFONTOBJ_pvTrueTypeFontFile'
  1074. syscalltable[4762] = 'NtGdiFONTOBJ_pxoGetXform'
  1075. syscalltable[4763] = 'NtGdiFONTOBJ_vGetInfo'
  1076. syscalltable[4764] = 'NtGdiFlattenPath'
  1077. syscalltable[4765] = 'NtGdiFontIsLinked'
  1078. syscalltable[4766] = 'NtGdiForceUFIMapping'
  1079. syscalltable[4767] = 'NtGdiFrameRgn'
  1080. syscalltable[4768] = 'NtGdiFullscreenControl'
  1081. syscalltable[4769] = 'NtGdiGetAppliedDeviceGammaRamp'
  1082. syscalltable[4770] = 'NtGdiGetBitmapDpiScaleValue'
  1083. syscalltable[4771] = 'NtGdiGetBoundsRect'
  1084. syscalltable[4772] = 'NtGdiGetCOPPCompatibleOPMInformation'
  1085. syscalltable[4773] = 'NtGdiGetCertificate'
  1086. syscalltable[4774] = 'NtGdiGetCertificateByHandle'
  1087. syscalltable[4775] = 'NtGdiGetCertificateSize'
  1088. syscalltable[4776] = 'NtGdiGetCertificateSizeByHandle'
  1089. syscalltable[4777] = 'NtGdiGetCharABCWidthsW'
  1090. syscalltable[4778] = 'NtGdiGetCharacterPlacementW'
  1091. syscalltable[4779] = 'NtGdiGetColorAdjustment'
  1092. syscalltable[4780] = 'NtGdiGetColorSpaceforBitmap'
  1093. syscalltable[4781] = 'NtGdiGetCurrentDpiInfo'
  1094. syscalltable[4782] = 'NtGdiGetDCDpiScaleValue'
  1095. syscalltable[4783] = 'NtGdiGetDeviceCaps'
  1096. syscalltable[4784] = 'NtGdiGetDeviceCapsAll'
  1097. syscalltable[4785] = 'NtGdiGetDeviceGammaRamp'
  1098. syscalltable[4786] = 'NtGdiGetDeviceWidth'
  1099. syscalltable[4787] = 'NtGdiGetDhpdev'
  1100. syscalltable[4788] = 'NtGdiGetETM'
  1101. syscalltable[4789] = 'NtGdiGetEmbUFI'
  1102. syscalltable[4790] = 'NtGdiGetEmbedFonts'
  1103. syscalltable[4791] = 'NtGdiGetEntry'
  1104. syscalltable[4792] = 'NtGdiGetEudcTimeStampEx'
  1105. syscalltable[4793] = 'NtGdiGetFontFileData'
  1106. syscalltable[4794] = 'NtGdiGetFontFileInfo'
  1107. syscalltable[4795] = 'NtGdiGetFontResourceInfoInternalW'
  1108. syscalltable[4796] = 'NtGdiGetFontUnicodeRanges'
  1109. syscalltable[4797] = 'NtGdiGetGammaRampCapability'
  1110. syscalltable[4798] = 'NtGdiGetGlyphIndicesW'
  1111. syscalltable[4799] = 'NtGdiGetGlyphIndicesWInternal'
  1112. syscalltable[48] = 'NtOpenProcessTokenEx'
  1113. syscalltable[4800] = 'NtGdiGetGlyphOutline'
  1114. syscalltable[4801] = 'NtGdiGetKerningPairs'
  1115. syscalltable[4802] = 'NtGdiGetLinkedUFIs'
  1116. syscalltable[4803] = 'NtGdiGetMiterLimit'
  1117. syscalltable[4804] = 'NtGdiGetMonitorID'
  1118. syscalltable[4805] = 'NtGdiGetNumberOfPhysicalMonitors'
  1119. syscalltable[4806] = 'NtGdiGetOPMInformation'
  1120. syscalltable[4807] = 'NtGdiGetOPMRandomNumber'
  1121. syscalltable[4808] = 'NtGdiGetObjectBitmapHandle'
  1122. syscalltable[4809] = 'NtGdiGetPath'
  1123. syscalltable[4810] = 'NtGdiGetPerBandInfo'
  1124. syscalltable[4811] = 'NtGdiGetPhysicalMonitorDescription'
  1125. syscalltable[4812] = 'NtGdiGetPhysicalMonitors'
  1126. syscalltable[4813] = 'NtGdiGetProcessSessionFonts'
  1127. syscalltable[4814] = 'NtGdiGetPublicFontTableChangeCookie'
  1128. syscalltable[4815] = 'NtGdiGetRealizationInfo'
  1129. syscalltable[4816] = 'NtGdiGetServerMetaFileBits'
  1130. syscalltable[4817] = 'NtGdiGetSpoolMessage'
  1131. syscalltable[4818] = 'NtGdiGetStats'
  1132. syscalltable[4819] = 'NtGdiGetStringBitmapW'
  1133. syscalltable[4820] = 'NtGdiGetSuggestedOPMProtectedOutputArraySize'
  1134. syscalltable[4821] = 'NtGdiGetTextExtentExW'
  1135. syscalltable[4822] = 'NtGdiGetUFI'
  1136. syscalltable[4823] = 'NtGdiGetUFIPathname'
  1137. syscalltable[4824] = 'NtGdiGradientFill'
  1138. syscalltable[4825] = 'NtGdiHLSurfGetInformation'
  1139. syscalltable[4826] = 'NtGdiHLSurfSetInformation'
  1140. syscalltable[4827] = 'NtGdiHT_Get8BPPFormatPalette'
  1141. syscalltable[4828] = 'NtGdiHT_Get8BPPMaskPalette'
  1142. syscalltable[4829] = 'NtGdiIcmBrushInfo'
  1143. syscalltable[4830] = 'NtGdiInit'
  1144. syscalltable[4831] = 'NtGdiInitSpool'
  1145. syscalltable[4832] = 'NtGdiMakeFontDir'
  1146. syscalltable[4833] = 'NtGdiMakeInfoDC'
  1147. syscalltable[4834] = 'NtGdiMakeObjectUnXferable'
  1148. syscalltable[4835] = 'NtGdiMakeObjectXferable'
  1149. syscalltable[4836] = 'NtGdiMirrorWindowOrg'
  1150. syscalltable[4837] = 'NtGdiMonoBitmap'
  1151. syscalltable[4838] = 'NtGdiMoveTo'
  1152. syscalltable[4839] = 'NtGdiOffsetClipRgn'
  1153. syscalltable[4840] = 'NtGdiPATHOBJ_bEnum'
  1154. syscalltable[4841] = 'NtGdiPATHOBJ_bEnumClipLines'
  1155. syscalltable[4842] = 'NtGdiPATHOBJ_vEnumStart'
  1156. syscalltable[4843] = 'NtGdiPATHOBJ_vEnumStartClipLines'
  1157. syscalltable[4844] = 'NtGdiPATHOBJ_vGetBounds'
  1158. syscalltable[4845] = 'NtGdiPathToRegion'
  1159. syscalltable[4846] = 'NtGdiPlgBlt'
  1160. syscalltable[4847] = 'NtGdiPolyDraw'
  1161. syscalltable[4848] = 'NtGdiPolyTextOutW'
  1162. syscalltable[4849] = 'NtGdiPtInRegion'
  1163. syscalltable[4850] = 'NtGdiPtVisible'
  1164. syscalltable[4851] = 'NtGdiQueryFonts'
  1165. syscalltable[4852] = 'NtGdiRemoveFontResourceW'
  1166. syscalltable[4853] = 'NtGdiRemoveMergeFont'
  1167. syscalltable[4854] = 'NtGdiResetDC'
  1168. syscalltable[4855] = 'NtGdiResizePalette'
  1169. syscalltable[4856] = 'NtGdiRoundRect'
  1170. syscalltable[4857] = 'NtGdiSTROBJ_bEnum'
  1171. syscalltable[4858] = 'NtGdiSTROBJ_bEnumPositionsOnly'
  1172. syscalltable[4859] = 'NtGdiSTROBJ_bGetAdvanceWidths'
  1173. syscalltable[4860] = 'NtGdiSTROBJ_dwGetCodePage'
  1174. syscalltable[4861] = 'NtGdiSTROBJ_vEnumStart'
  1175. syscalltable[4862] = 'NtGdiScaleRgn'
  1176. syscalltable[4863] = 'NtGdiScaleValues'
  1177. syscalltable[4864] = 'NtGdiScaleViewportExtEx'
  1178. syscalltable[4865] = 'NtGdiScaleWindowExtEx'
  1179. syscalltable[4866] = 'NtGdiSelectBrush'
  1180. syscalltable[4867] = 'NtGdiSelectClipPath'
  1181. syscalltable[4868] = 'NtGdiSelectPen'
  1182. syscalltable[4869] = 'NtGdiSetBitmapAttributes'
  1183. syscalltable[4870] = 'NtGdiSetBrushAttributes'
  1184. syscalltable[4871] = 'NtGdiSetColorAdjustment'
  1185. syscalltable[4872] = 'NtGdiSetColorSpace'
  1186. syscalltable[4873] = 'NtGdiSetDeviceGammaRamp'
  1187. syscalltable[4874] = 'NtGdiSetFontXform'
  1188. syscalltable[4875] = 'NtGdiSetIcmMode'
  1189. syscalltable[4876] = 'NtGdiSetLinkedUFIs'
  1190. syscalltable[4877] = 'NtGdiSetMagicColors'
  1191. syscalltable[4878] = 'NtGdiSetOPMSigningKeyAndSequenceNumbers'
  1192. syscalltable[4879] = 'NtGdiSetPUMPDOBJ'
  1193. syscalltable[4880] = 'NtGdiSetPixelFormat'
  1194. syscalltable[4881] = 'NtGdiSetPrivateDeviceGammaRamp'
  1195. syscalltable[4882] = 'NtGdiSetRectRgn'
  1196. syscalltable[4883] = 'NtGdiSetSizeDevice'
  1197. syscalltable[4884] = 'NtGdiSetSystemPaletteUse'
  1198. syscalltable[4885] = 'NtGdiSetTextJustification'
  1199. syscalltable[4886] = 'NtGdiSetUMPDSandboxState'
  1200. syscalltable[4887] = 'NtGdiStartDoc'
  1201. syscalltable[4888] = 'NtGdiStartPage'
  1202. syscalltable[4889] = 'NtGdiStrokeAndFillPath'
  1203. syscalltable[4890] = 'NtGdiStrokePath'
  1204. syscalltable[4891] = 'NtGdiSwapBuffers'
  1205. syscalltable[4892] = 'NtGdiTransparentBlt'
  1206. syscalltable[4893] = 'NtGdiUMPDEngFreeUserMem'
  1207. syscalltable[4894] = 'NtGdiUnloadPrinterDriver'
  1208. syscalltable[4895] = 'NtGdiUnmapMemFont'
  1209. syscalltable[4896] = 'NtGdiUpdateColors'
  1210. syscalltable[4897] = 'NtGdiUpdateTransform'
  1211. syscalltable[4898] = 'NtGdiWidenPath'
  1212. syscalltable[4899] = 'NtGdiXFORMOBJ_bApplyXform'
  1213. syscalltable[49] = 'NtQueryPerformanceCounter'
  1214. syscalltable[4900] = 'NtGdiXFORMOBJ_iGetXform'
  1215. syscalltable[4901] = 'NtGdiXLATEOBJ_cGetPalette'
  1216. syscalltable[4902] = 'NtGdiXLATEOBJ_hGetColorTransform'
  1217. syscalltable[4903] = 'NtGdiXLATEOBJ_iXlate'
  1218. syscalltable[4904] = 'NtHWCursorUpdatePointer'
  1219. syscalltable[4905] = 'NtIsOneCoreTransformMode'
  1220. syscalltable[4906] = 'NtMITActivateInputProcessing'
  1221. syscalltable[4907] = 'NtMITCoreMsgKGetConnectionHandle'
  1222. syscalltable[4908] = 'NtMITCoreMsgKOpenConnectionTo'
  1223. syscalltable[4909] = 'NtMITCoreMsgKSend'
  1224. syscalltable[4910] = 'NtMITDeactivateInputProcessing'
  1225. syscalltable[4911] = 'NtMITDisableMouseIntercept'
  1226. syscalltable[4912] = 'NtMITDispatchCompletion'
  1227. syscalltable[4913] = 'NtMITEnableMouseIntercept'
  1228. syscalltable[4914] = 'NtMITGetCursorUpdateHandle'
  1229. syscalltable[4915] = 'NtMITSetInputCallbacks'
  1230. syscalltable[4916] = 'NtMITSetInputDelegationMode'
  1231. syscalltable[4917] = 'NtMITSetLastInputRecipient'
  1232. syscalltable[4918] = 'NtMITSynthesizeMouseInput'
  1233. syscalltable[4919] = 'NtMITSynthesizeMouseWheel'
  1234. syscalltable[4920] = 'NtMITSynthesizeTouchInput'
  1235. syscalltable[4921] = 'NtMITUpdateInputGlobals'
  1236. syscalltable[4922] = 'NtMITWaitForMultipleObjectsEx'
  1237. syscalltable[4923] = 'NtMapVisualRelativePoints'
  1238. syscalltable[4924] = 'NtNotifyPresentToCompositionSurface'
  1239. syscalltable[4925] = 'NtOpenCompositionSurfaceDirtyRegion'
  1240. syscalltable[4926] = 'NtOpenCompositionSurfaceSectionInfo'
  1241. syscalltable[4927] = 'NtOpenCompositionSurfaceSwapChainHandleInfo'
  1242. syscalltable[4928] = 'NtQueryCompositionInputIsImplicit'
  1243. syscalltable[4929] = 'NtQueryCompositionInputQueueAndTransform'
  1244. syscalltable[4930] = 'NtQueryCompositionInputSink'
  1245. syscalltable[4931] = 'NtQueryCompositionInputSinkLuid'
  1246. syscalltable[4932] = 'NtQueryCompositionInputSinkViewId'
  1247. syscalltable[4933] = 'NtQueryCompositionSurfaceBinding'
  1248. syscalltable[4934] = 'NtQueryCompositionSurfaceHDRMetaData'
  1249. syscalltable[4935] = 'NtQueryCompositionSurfaceRenderingRealization'
  1250. syscalltable[4936] = 'NtQueryCompositionSurfaceStatistics'
  1251. syscalltable[4937] = 'NtRIMAddInputObserver'
  1252. syscalltable[4938] = 'NtRIMAreSiblingDevices'
  1253. syscalltable[4939] = 'NtRIMDeviceIoControl'
  1254. syscalltable[4940] = 'NtRIMEnableMonitorMappingForDevice'
  1255. syscalltable[4941] = 'NtRIMFreeInputBuffer'
  1256. syscalltable[4942] = 'NtRIMGetDevicePreparsedData'
  1257. syscalltable[4943] = 'NtRIMGetDevicePreparsedDataLockfree'
  1258. syscalltable[4944] = 'NtRIMGetDeviceProperties'
  1259. syscalltable[4945] = 'NtRIMGetDevicePropertiesLockfree'
  1260. syscalltable[4946] = 'NtRIMGetPhysicalDeviceRect'
  1261. syscalltable[4947] = 'NtRIMGetSourceProcessId'
  1262. syscalltable[4948] = 'NtRIMObserveNextInput'
  1263. syscalltable[4949] = 'NtRIMOnPnpNotification'
  1264. syscalltable[4950] = 'NtRIMOnTimerNotification'
  1265. syscalltable[4951] = 'NtRIMReadInput'
  1266. syscalltable[4952] = 'NtRIMRegisterForInput'
  1267. syscalltable[4953] = 'NtRIMRemoveInputObserver'
  1268. syscalltable[4954] = 'NtRIMSetTestModeStatus'
  1269. syscalltable[4955] = 'NtRIMUnregisterForInput'
  1270. syscalltable[4956] = 'NtRIMUpdateInputObserverRegistration'
  1271. syscalltable[4957] = 'NtSetCompositionSurfaceAnalogExclusive'
  1272. syscalltable[4958] = 'NtSetCompositionSurfaceBufferUsage'
  1273. syscalltable[4959] = 'NtSetCompositionSurfaceDirectFlipState'
  1274. syscalltable[4960] = 'NtSetCompositionSurfaceIndependentFlipInfo'
  1275. syscalltable[4961] = 'NtSetCompositionSurfaceStatistics'
  1276. syscalltable[4962] = 'NtSetCursorInputSpace'
  1277. syscalltable[4963] = 'NtSetPointerDeviceInputSpace'
  1278. syscalltable[4964] = 'NtSetShellCursorState'
  1279. syscalltable[4965] = 'NtTokenManagerConfirmOutstandingAnalogToken'
  1280. syscalltable[4966] = 'NtTokenManagerCreateCompositionTokenHandle'
  1281. syscalltable[4967] = 'NtTokenManagerCreateFlipObjectReturnTokenHandle'
  1282. syscalltable[4968] = 'NtTokenManagerCreateFlipObjectTokenHandle'
  1283. syscalltable[4969] = 'NtTokenManagerGetAnalogExclusiveSurfaceUpdates'
  1284. syscalltable[4970] = 'NtTokenManagerGetAnalogExclusiveTokenEvent'
  1285. syscalltable[4971] = 'NtTokenManagerOpenSectionAndEvents'
  1286. syscalltable[4972] = 'NtTokenManagerThread'
  1287. syscalltable[4973] = 'NtUnBindCompositionSurface'
  1288. syscalltable[4974] = 'NtUpdateInputSinkTransforms'
  1289. syscalltable[4975] = 'NtUserAcquireIAMKey'
  1290. syscalltable[4976] = 'NtUserAcquireInteractiveControlBackgroundAccess'
  1291. syscalltable[4977] = 'NtUserAddClipboardFormatListener'
  1292. syscalltable[4978] = 'NtUserAssociateInputContext'
  1293. syscalltable[4979] = 'NtUserAutoPromoteMouseInPointer'
  1294. syscalltable[4980] = 'NtUserAutoRotateScreen'
  1295. syscalltable[4981] = 'NtUserBeginLayoutUpdate'
  1296. syscalltable[4982] = 'NtUserBlockInput'
  1297. syscalltable[4983] = 'NtUserBroadcastThemeChangeEvent'
  1298. syscalltable[4984] = 'NtUserBuildHimcList'
  1299. syscalltable[4985] = 'NtUserBuildPropList'
  1300. syscalltable[4986] = 'NtUserCalculatePopupWindowPosition'
  1301. syscalltable[4987] = 'NtUserCallHwndLockSafe'
  1302. syscalltable[4988] = 'NtUserCallHwndOpt'
  1303. syscalltable[4989] = 'NtUserCallHwndParamLockSafe'
  1304. syscalltable[4990] = 'NtUserCallHwndSafe'
  1305. syscalltable[4991] = 'NtUserCanBrokerForceForeground'
  1306. syscalltable[4992] = 'NtUserChangeDisplaySettings'
  1307. syscalltable[4993] = 'NtUserChangeWindowMessageFilterEx'
  1308. syscalltable[4994] = 'NtUserCheckAccessForIntegrityLevel'
  1309. syscalltable[4995] = 'NtUserCheckProcessForClipboardAccess'
  1310. syscalltable[4996] = 'NtUserCheckProcessSession'
  1311. syscalltable[4997] = 'NtUserCheckWindowThreadDesktop'
  1312. syscalltable[4998] = 'NtUserChildWindowFromPointEx'
  1313. syscalltable[4999] = 'NtUserClearForeground'
  1314. syscalltable[5] = 'NtCallbackReturn'
  1315. syscalltable[50] = 'NtEnumerateKey'
  1316. syscalltable[5000] = 'NtUserClipCursor'
  1317. syscalltable[5001] = 'NtUserCompositionInputSinkLuidFromPoint'
  1318. syscalltable[5002] = 'NtUserCompositionInputSinkViewInstanceIdFromPoint'
  1319. syscalltable[5003] = 'NtUserConfirmResizeCommit'
  1320. syscalltable[5004] = 'NtUserCreateDCompositionHwndTarget'
  1321. syscalltable[5005] = 'NtUserCreateDesktopEx'
  1322. syscalltable[5006] = 'NtUserCreateEmptyCursorObject'
  1323. syscalltable[5007] = 'NtUserCreateInputContext'
  1324. syscalltable[5008] = 'NtUserCreatePalmRejectionDelayZone'
  1325. syscalltable[5009] = 'NtUserCreateWindowGroup'
  1326. syscalltable[5010] = 'NtUserCreateWindowStation'
  1327. syscalltable[5011] = 'NtUserCtxDisplayIOCtl'
  1328. syscalltable[5012] = 'NtUserDeferWindowDpiChanges'
  1329. syscalltable[5013] = 'NtUserDeferWindowPosAndBand'
  1330. syscalltable[5014] = 'NtUserDelegateCapturePointers'
  1331. syscalltable[5015] = 'NtUserDelegateInput'
  1332. syscalltable[5016] = 'NtUserDeleteWindowGroup'
  1333. syscalltable[5017] = 'NtUserDestroyDCompositionHwndTarget'
  1334. syscalltable[5018] = 'NtUserDestroyInputContext'
  1335. syscalltable[5019] = 'NtUserDestroyPalmRejectionDelayZone'
  1336. syscalltable[5020] = 'NtUserDisableImmersiveOwner'
  1337. syscalltable[5021] = 'NtUserDisableProcessWindowFiltering'
  1338. syscalltable[5022] = 'NtUserDisableThreadIme'
  1339. syscalltable[5023] = 'NtUserDiscardPointerFrameMessages'
  1340. syscalltable[5024] = 'NtUserDisplayConfigGetDeviceInfo'
  1341. syscalltable[5025] = 'NtUserDisplayConfigSetDeviceInfo'
  1342. syscalltable[5026] = 'NtUserDoSoundConnect'
  1343. syscalltable[5027] = 'NtUserDoSoundDisconnect'
  1344. syscalltable[5028] = 'NtUserDragDetect'
  1345. syscalltable[5029] = 'NtUserDragObject'
  1346. syscalltable[5030] = 'NtUserDrawAnimatedRects'
  1347. syscalltable[5031] = 'NtUserDrawCaption'
  1348. syscalltable[5032] = 'NtUserDrawCaptionTemp'
  1349. syscalltable[5033] = 'NtUserDrawMenuBarTemp'
  1350. syscalltable[5034] = 'NtUserDwmGetRemoteSessionOcclusionEvent'
  1351. syscalltable[5035] = 'NtUserDwmGetRemoteSessionOcclusionState'
  1352. syscalltable[5036] = 'NtUserDwmKernelShutdown'
  1353. syscalltable[5037] = 'NtUserDwmKernelStartup'
  1354. syscalltable[5038] = 'NtUserDwmValidateWindow'
  1355. syscalltable[5039] = 'NtUserEnableChildWindowDpiMessage'
  1356. syscalltable[5040] = 'NtUserEnableIAMAccess'
  1357. syscalltable[5041] = 'NtUserEnableMouseInPointer'
  1358. syscalltable[5042] = 'NtUserEnableMouseInputForCursorSuppression'
  1359. syscalltable[5043] = 'NtUserEnableNonClientDpiScaling'
  1360. syscalltable[5044] = 'NtUserEnableResizeLayoutSynchronization'
  1361. syscalltable[5045] = 'NtUserEnableSoftwareCursorForScreenCapture'
  1362. syscalltable[5046] = 'NtUserEnableTouchPad'
  1363. syscalltable[5047] = 'NtUserEnableWindowGDIScaledDpiMessage'
  1364. syscalltable[5048] = 'NtUserEnableWindowGroupPolicy'
  1365. syscalltable[5049] = 'NtUserEnableWindowResizeOptimization'
  1366. syscalltable[5050] = 'NtUserEndMenu'
  1367. syscalltable[5051] = 'NtUserEvent'
  1368. syscalltable[5052] = 'NtUserFlashWindowEx'
  1369. syscalltable[5053] = 'NtUserForceWindowToDpiForTest'
  1370. syscalltable[5054] = 'NtUserFrostCrashedWindow'
  1371. syscalltable[5055] = 'NtUserFunctionalizeDisplayConfig'
  1372. syscalltable[5056] = 'NtUserGetActiveProcessesDpis'
  1373. syscalltable[5057] = 'NtUserGetAppImeLevel'
  1374. syscalltable[5058] = 'NtUserGetAutoRotationState'
  1375. syscalltable[5059] = 'NtUserGetCIMSSM'
  1376. syscalltable[5060] = 'NtUserGetCaretPos'
  1377. syscalltable[5061] = 'NtUserGetClipCursor'
  1378. syscalltable[5062] = 'NtUserGetClipboardAccessToken'
  1379. syscalltable[5063] = 'NtUserGetClipboardViewer'
  1380. syscalltable[5064] = 'NtUserGetComboBoxInfo'
  1381. syscalltable[5065] = 'NtUserGetCurrentDpiInfoForWindow'
  1382. syscalltable[5066] = 'NtUserGetCurrentInputMessageSource'
  1383. syscalltable[5067] = 'NtUserGetCursor'
  1384. syscalltable[5068] = 'NtUserGetCursorInfo'
  1385. syscalltable[5069] = 'NtUserGetDManipHookInitFunction'
  1386. syscalltable[5070] = 'NtUserGetDesktopID'
  1387. syscalltable[5071] = 'NtUserGetDisplayAutoRotationPreferences'
  1388. syscalltable[5072] = 'NtUserGetDisplayAutoRotationPreferencesByProcessId'
  1389. syscalltable[5073] = 'NtUserGetDisplayConfigBufferSizes'
  1390. syscalltable[5074] = 'NtUserGetDpiForCurrentProcess'
  1391. syscalltable[5075] = 'NtUserGetDpiForMonitor'
  1392. syscalltable[5076] = 'NtUserGetGestureConfig'
  1393. syscalltable[5077] = 'NtUserGetGestureExtArgs'
  1394. syscalltable[5078] = 'NtUserGetGestureInfo'
  1395. syscalltable[5079] = 'NtUserGetGuiResources'
  1396. syscalltable[5080] = 'NtUserGetHDevName'
  1397. syscalltable[5081] = 'NtUserGetHimetricScaleFactorFromPixelLocation'
  1398. syscalltable[5082] = 'NtUserGetImeHotKey'
  1399. syscalltable[5083] = 'NtUserGetImeInfoEx'
  1400. syscalltable[5084] = 'NtUserGetInputLocaleInfo'
  1401. syscalltable[5085] = 'NtUserGetInteractiveControlDeviceInfo'
  1402. syscalltable[5086] = 'NtUserGetInteractiveControlInfo'
  1403. syscalltable[5087] = 'NtUserGetInteractiveCtrlSupportedWaveforms'
  1404. syscalltable[5088] = 'NtUserGetInternalWindowPos'
  1405. syscalltable[5089] = 'NtUserGetKeyNameText'
  1406. syscalltable[5090] = 'NtUserGetKeyboardLayout'
  1407. syscalltable[5091] = 'NtUserGetKeyboardLayoutName'
  1408. syscalltable[5092] = 'NtUserGetLayeredWindowAttributes'
  1409. syscalltable[5093] = 'NtUserGetListBoxInfo'
  1410. syscalltable[5094] = 'NtUserGetMenuIndex'
  1411. syscalltable[5095] = 'NtUserGetMenuItemRect'
  1412. syscalltable[5096] = 'NtUserGetMouseMovePointsEx'
  1413. syscalltable[5097] = 'NtUserGetOemBitmapSize'
  1414. syscalltable[5098] = 'NtUserGetPhysicalDeviceRect'
  1415. syscalltable[5099] = 'NtUserGetPointerCursorId'
  1416. syscalltable[51] = 'NtOpenFile'
  1417. syscalltable[5100] = 'NtUserGetPointerDevice'
  1418. syscalltable[5101] = 'NtUserGetPointerDeviceCursors'
  1419. syscalltable[5102] = 'NtUserGetPointerDeviceProperties'
  1420. syscalltable[5103] = 'NtUserGetPointerDeviceRects'
  1421. syscalltable[5104] = 'NtUserGetPointerDevices'
  1422. syscalltable[5105] = 'NtUserGetPointerFrameArrivalTimes'
  1423. syscalltable[5106] = 'NtUserGetPointerInfoList'
  1424. syscalltable[5107] = 'NtUserGetPointerInputTransform'
  1425. syscalltable[5108] = 'NtUserGetPointerType'
  1426. syscalltable[5109] = 'NtUserGetPrecisionTouchPadConfiguration'
  1427. syscalltable[5110] = 'NtUserGetPriorityClipboardFormat'
  1428. syscalltable[5111] = 'NtUserGetProcessDpiAwarenessContext'
  1429. syscalltable[5112] = 'NtUserGetProcessUIContextInformation'
  1430. syscalltable[5113] = 'NtUserGetQueueStatusReadonly'
  1431. syscalltable[5114] = 'NtUserGetRawInputBuffer'
  1432. syscalltable[5115] = 'NtUserGetRawInputData'
  1433. syscalltable[5116] = 'NtUserGetRawInputDeviceInfo'
  1434. syscalltable[5117] = 'NtUserGetRawInputDeviceList'
  1435. syscalltable[5118] = 'NtUserGetRawPointerDeviceData'
  1436. syscalltable[5119] = 'NtUserGetRegisteredRawInputDevices'
  1437. syscalltable[5120] = 'NtUserGetRequiredCursorSizes'
  1438. syscalltable[5121] = 'NtUserGetResizeDCompositionSynchronizationObject'
  1439. syscalltable[5122] = 'NtUserGetSystemDpiForProcess'
  1440. syscalltable[5123] = 'NtUserGetTopLevelWindow'
  1441. syscalltable[5124] = 'NtUserGetTouchInputInfo'
  1442. syscalltable[5125] = 'NtUserGetTouchValidationStatus'
  1443. syscalltable[5126] = 'NtUserGetUpdatedClipboardFormats'
  1444. syscalltable[5127] = 'NtUserGetWOWClass'
  1445. syscalltable[5128] = 'NtUserGetWindowBand'
  1446. syscalltable[5129] = 'NtUserGetWindowCompositionAttribute'
  1447. syscalltable[5130] = 'NtUserGetWindowCompositionInfo'
  1448. syscalltable[5131] = 'NtUserGetWindowDisplayAffinity'
  1449. syscalltable[5132] = 'NtUserGetWindowFeedbackSetting'
  1450. syscalltable[5133] = 'NtUserGetWindowGroupId'
  1451. syscalltable[5134] = 'NtUserGetWindowMinimizeRect'
  1452. syscalltable[5135] = 'NtUserGetWindowProcessHandle'
  1453. syscalltable[5136] = 'NtUserGetWindowRgnEx'
  1454. syscalltable[5137] = 'NtUserGhostWindowFromHungWindow'
  1455. syscalltable[5138] = 'NtUserHandleDelegatedInput'
  1456. syscalltable[5139] = 'NtUserHardErrorControl'
  1457. syscalltable[5140] = 'NtUserHidePointerContactVisualization'
  1458. syscalltable[5141] = 'NtUserHiliteMenuItem'
  1459. syscalltable[5142] = 'NtUserHungWindowFromGhostWindow'
  1460. syscalltable[5143] = 'NtUserHwndQueryRedirectionInfo'
  1461. syscalltable[5144] = 'NtUserHwndSetRedirectionInfo'
  1462. syscalltable[5145] = 'NtUserImpersonateDdeClientWindow'
  1463. syscalltable[5146] = 'NtUserInheritWindowMonitor'
  1464. syscalltable[5147] = 'NtUserInitTask'
  1465. syscalltable[5148] = 'NtUserInitialize'
  1466. syscalltable[5149] = 'NtUserInitializeClientPfnArrays'
  1467. syscalltable[5150] = 'NtUserInitializeGenericHidInjection'
  1468. syscalltable[5151] = 'NtUserInitializeInputDeviceInjection'
  1469. syscalltable[5152] = 'NtUserInitializePointerDeviceInjection'
  1470. syscalltable[5153] = 'NtUserInitializePointerDeviceInjectionEx'
  1471. syscalltable[5154] = 'NtUserInitializeTouchInjection'
  1472. syscalltable[5155] = 'NtUserInjectDeviceInput'
  1473. syscalltable[5156] = 'NtUserInjectGenericHidInput'
  1474. syscalltable[5157] = 'NtUserInjectGesture'
  1475. syscalltable[5158] = 'NtUserInjectKeyboardInput'
  1476. syscalltable[5159] = 'NtUserInjectMouseInput'
  1477. syscalltable[5160] = 'NtUserInjectPointerInput'
  1478. syscalltable[5161] = 'NtUserInjectTouchInput'
  1479. syscalltable[5162] = 'NtUserInteractiveControlQueryUsage'
  1480. syscalltable[5163] = 'NtUserInternalGetWindowIcon'
  1481. syscalltable[5164] = 'NtUserIsChildWindowDpiMessageEnabled'
  1482. syscalltable[5165] = 'NtUserIsMouseInPointerEnabled'
  1483. syscalltable[5166] = 'NtUserIsMouseInputEnabled'
  1484. syscalltable[5167] = 'NtUserIsNonClientDpiScalingEnabled'
  1485. syscalltable[5168] = 'NtUserIsResizeLayoutSynchronizationEnabled'
  1486. syscalltable[5169] = 'NtUserIsTopLevelWindow'
  1487. syscalltable[5170] = 'NtUserIsTouchWindow'
  1488. syscalltable[5171] = 'NtUserIsWindowBroadcastingDpiToChildren'
  1489. syscalltable[5172] = 'NtUserIsWindowGDIScaledDpiMessageEnabled'
  1490. syscalltable[5173] = 'NtUserLayoutCompleted'
  1491. syscalltable[5174] = 'NtUserLinkDpiCursor'
  1492. syscalltable[5175] = 'NtUserLoadKeyboardLayoutEx'
  1493. syscalltable[5176] = 'NtUserLockCursor'
  1494. syscalltable[5177] = 'NtUserLockWindowStation'
  1495. syscalltable[5178] = 'NtUserLockWorkStation'
  1496. syscalltable[5179] = 'NtUserLogicalToPerMonitorDPIPhysicalPoint'
  1497. syscalltable[5180] = 'NtUserLogicalToPhysicalDpiPointForWindow'
  1498. syscalltable[5181] = 'NtUserLogicalToPhysicalPoint'
  1499. syscalltable[5182] = 'NtUserMNDragLeave'
  1500. syscalltable[5183] = 'NtUserMNDragOver'
  1501. syscalltable[5184] = 'NtUserMagControl'
  1502. syscalltable[5185] = 'NtUserMagGetContextInformation'
  1503. syscalltable[5186] = 'NtUserMagSetContextInformation'
  1504. syscalltable[5187] = 'NtUserMenuItemFromPoint'
  1505. syscalltable[5188] = 'NtUserMinMaximize'
  1506. syscalltable[5189] = 'NtUserModifyWindowTouchCapability'
  1507. syscalltable[5190] = 'NtUserMsgWaitForMultipleObjectsEx'
  1508. syscalltable[5191] = 'NtUserNavigateFocus'
  1509. syscalltable[5192] = 'NtUserNotifyIMEStatus'
  1510. syscalltable[5193] = 'NtUserOpenInputDesktop'
  1511. syscalltable[5194] = 'NtUserOpenThreadDesktop'
  1512. syscalltable[5195] = 'NtUserPaintMonitor'
  1513. syscalltable[5196] = 'NtUserPerMonitorDPIPhysicalToLogicalPoint'
  1514. syscalltable[5197] = 'NtUserPhysicalToLogicalDpiPointForWindow'
  1515. syscalltable[5198] = 'NtUserPhysicalToLogicalPoint'
  1516. syscalltable[5199] = 'NtUserPrintWindow'
  1517. syscalltable[52] = 'NtDelayExecution'
  1518. syscalltable[5200] = 'NtUserProcessInkFeedbackCommand'
  1519. syscalltable[5201] = 'NtUserPromoteMouseInPointer'
  1520. syscalltable[5202] = 'NtUserPromotePointer'
  1521. syscalltable[5203] = 'NtUserQueryBSDRWindow'
  1522. syscalltable[5204] = 'NtUserQueryDisplayConfig'
  1523. syscalltable[5205] = 'NtUserQueryInformationThread'
  1524. syscalltable[5206] = 'NtUserQueryInputContext'
  1525. syscalltable[5207] = 'NtUserQuerySendMessage'
  1526. syscalltable[5208] = 'NtUserRealChildWindowFromPoint'
  1527. syscalltable[5209] = 'NtUserRealWaitMessageEx'
  1528. syscalltable[5210] = 'NtUserRegisterBSDRWindow'
  1529. syscalltable[5211] = 'NtUserRegisterDManipHook'
  1530. syscalltable[5212] = 'NtUserRegisterEdgy'
  1531. syscalltable[5213] = 'NtUserRegisterErrorReportingDialog'
  1532. syscalltable[5214] = 'NtUserRegisterHotKey'
  1533. syscalltable[5215] = 'NtUserRegisterManipulationThread'
  1534. syscalltable[5216] = 'NtUserRegisterPointerDeviceNotifications'
  1535. syscalltable[5217] = 'NtUserRegisterPointerInputTarget'
  1536. syscalltable[5218] = 'NtUserRegisterRawInputDevices'
  1537. syscalltable[5219] = 'NtUserRegisterServicesProcess'
  1538. syscalltable[5220] = 'NtUserRegisterSessionPort'
  1539. syscalltable[5221] = 'NtUserRegisterShellPTPListener'
  1540. syscalltable[5222] = 'NtUserRegisterTasklist'
  1541. syscalltable[5223] = 'NtUserRegisterTouchHitTestingWindow'
  1542. syscalltable[5224] = 'NtUserRegisterTouchPadCapable'
  1543. syscalltable[5225] = 'NtUserRegisterUserApiHook'
  1544. syscalltable[5226] = 'NtUserReleaseDC'
  1545. syscalltable[5227] = 'NtUserReleaseDwmHitTestWaiters'
  1546. syscalltable[5228] = 'NtUserRemoteConnect'
  1547. syscalltable[5229] = 'NtUserRemoteRedrawRectangle'
  1548. syscalltable[5230] = 'NtUserRemoteRedrawScreen'
  1549. syscalltable[5231] = 'NtUserRemoteStopScreenUpdates'
  1550. syscalltable[5232] = 'NtUserRemoveClipboardFormatListener'
  1551. syscalltable[5233] = 'NtUserRemoveInjectionDevice'
  1552. syscalltable[5234] = 'NtUserReportInertia'
  1553. syscalltable[5235] = 'NtUserRequestMoveSizeOperation'
  1554. syscalltable[5236] = 'NtUserResolveDesktopForWOW'
  1555. syscalltable[5237] = 'NtUserRestoreWindowDpiChanges'
  1556. syscalltable[5238] = 'NtUserSendEventMessage'
  1557. syscalltable[5239] = 'NtUserSendInteractiveControlHapticsReport'
  1558. syscalltable[5240] = 'NtUserSetActivationFilter'
  1559. syscalltable[5241] = 'NtUserSetActiveProcessForMonitor'
  1560. syscalltable[5242] = 'NtUserSetAppImeLevel'
  1561. syscalltable[5243] = 'NtUserSetAutoRotation'
  1562. syscalltable[5244] = 'NtUserSetBridgeWindowChild'
  1563. syscalltable[5245] = 'NtUserSetBrokeredForeground'
  1564. syscalltable[5246] = 'NtUserSetCalibrationData'
  1565. syscalltable[5247] = 'NtUserSetChildWindowNoActivate'
  1566. syscalltable[5248] = 'NtUserSetClassWord'
  1567. syscalltable[5249] = 'NtUserSetCoreWindow'
  1568. syscalltable[5250] = 'NtUserSetCoreWindowPartner'
  1569. syscalltable[5251] = 'NtUserSetCursorContents'
  1570. syscalltable[5252] = 'NtUserSetCursorPos'
  1571. syscalltable[5253] = 'NtUserSetDesktopColorTransform'
  1572. syscalltable[5254] = 'NtUserSetDialogControlDpiChangeBehavior'
  1573. syscalltable[5255] = 'NtUserSetDisplayAutoRotationPreferences'
  1574. syscalltable[5256] = 'NtUserSetDisplayConfig'
  1575. syscalltable[5257] = 'NtUserSetDisplayMapping'
  1576. syscalltable[5258] = 'NtUserSetFallbackForeground'
  1577. syscalltable[5259] = 'NtUserSetFeatureReportResponse'
  1578. syscalltable[5260] = 'NtUserSetForegroundWindowForApplication'
  1579. syscalltable[5261] = 'NtUserSetGestureConfig'
  1580. syscalltable[5262] = 'NtUserSetImeHotKey'
  1581. syscalltable[5263] = 'NtUserSetImeInfoEx'
  1582. syscalltable[5264] = 'NtUserSetImeOwnerWindow'
  1583. syscalltable[5265] = 'NtUserSetInteractiveControlFocus'
  1584. syscalltable[5266] = 'NtUserSetInteractiveCtrlRotationAngle'
  1585. syscalltable[5267] = 'NtUserSetInternalWindowPos'
  1586. syscalltable[5268] = 'NtUserSetLayeredWindowAttributes'
  1587. syscalltable[5269] = 'NtUserSetManipulationInputTarget'
  1588. syscalltable[5270] = 'NtUserSetMenu'
  1589. syscalltable[5271] = 'NtUserSetMenuContextHelpId'
  1590. syscalltable[5272] = 'NtUserSetMenuFlagRtoL'
  1591. syscalltable[5273] = 'NtUserSetMirrorRendering'
  1592. syscalltable[5274] = 'NtUserSetObjectInformation'
  1593. syscalltable[5275] = 'NtUserSetPrecisionTouchPadConfiguration'
  1594. syscalltable[5276] = 'NtUserSetProcessDpiAwarenessContext'
  1595. syscalltable[5277] = 'NtUserSetProcessInteractionFlags'
  1596. syscalltable[5278] = 'NtUserSetProcessRestrictionExemption'
  1597. syscalltable[5279] = 'NtUserSetProcessUIAccessZorder'
  1598. syscalltable[5280] = 'NtUserSetShellWindowEx'
  1599. syscalltable[5281] = 'NtUserSetSysColors'
  1600. syscalltable[5282] = 'NtUserSetSystemCursor'
  1601. syscalltable[5283] = 'NtUserSetSystemTimer'
  1602. syscalltable[5284] = 'NtUserSetTargetForResourceBrokering'
  1603. syscalltable[5285] = 'NtUserSetThreadInputBlocked'
  1604. syscalltable[5286] = 'NtUserSetThreadLayoutHandles'
  1605. syscalltable[5287] = 'NtUserSetWindowArrangement'
  1606. syscalltable[5288] = 'NtUserSetWindowBand'
  1607. syscalltable[5289] = 'NtUserSetWindowCompositionAttribute'
  1608. syscalltable[5290] = 'NtUserSetWindowCompositionTransition'
  1609. syscalltable[5291] = 'NtUserSetWindowDisplayAffinity'
  1610. syscalltable[5292] = 'NtUserSetWindowFeedbackSetting'
  1611. syscalltable[5293] = 'NtUserSetWindowGroup'
  1612. syscalltable[5294] = 'NtUserSetWindowRgnEx'
  1613. syscalltable[5295] = 'NtUserSetWindowShowState'
  1614. syscalltable[5296] = 'NtUserSetWindowStationUser'
  1615. syscalltable[5297] = 'NtUserShowCursor'
  1616. syscalltable[5298] = 'NtUserShowSystemCursor'
  1617. syscalltable[5299] = 'NtUserShutdownBlockReasonCreate'
  1618. syscalltable[53] = 'NtQueryDirectoryFile'
  1619. syscalltable[5300] = 'NtUserShutdownBlockReasonQuery'
  1620. syscalltable[5301] = 'NtUserShutdownReasonDestroy'
  1621. syscalltable[5302] = 'NtUserSignalRedirectionStartComplete'
  1622. syscalltable[5303] = 'NtUserSlicerControl'
  1623. syscalltable[5304] = 'NtUserSoundSentry'
  1624. syscalltable[5305] = 'NtUserStopAndEndInertia'
  1625. syscalltable[5306] = 'NtUserSwitchDesktop'
  1626. syscalltable[5307] = 'NtUserSystemParametersInfoForDpi'
  1627. syscalltable[5308] = 'NtUserTestForInteractiveUser'
  1628. syscalltable[5309] = 'NtUserTrackPopupMenuEx'
  1629. syscalltable[5310] = 'NtUserTransformPoint'
  1630. syscalltable[5311] = 'NtUserTransformRect'
  1631. syscalltable[5312] = 'NtUserUndelegateInput'
  1632. syscalltable[5313] = 'NtUserUnloadKeyboardLayout'
  1633. syscalltable[5314] = 'NtUserUnlockWindowStation'
  1634. syscalltable[5315] = 'NtUserUnregisterHotKey'
  1635. syscalltable[5316] = 'NtUserUnregisterSessionPort'
  1636. syscalltable[5317] = 'NtUserUnregisterUserApiHook'
  1637. syscalltable[5318] = 'NtUserUpdateDefaultDesktopThumbnail'
  1638. syscalltable[5319] = 'NtUserUpdateInputContext'
  1639. syscalltable[5320] = 'NtUserUpdateInstance'
  1640. syscalltable[5321] = 'NtUserUpdateLayeredWindow'
  1641. syscalltable[5322] = 'NtUserUpdatePerUserSystemParameters'
  1642. syscalltable[5323] = 'NtUserUpdateWindowInputSinkHints'
  1643. syscalltable[5324] = 'NtUserUpdateWindowTrackingInfo'
  1644. syscalltable[5325] = 'NtUserUserHandleGrantAccess'
  1645. syscalltable[5326] = 'NtUserValidateHandleSecure'
  1646. syscalltable[5327] = 'NtUserWOWCleanup'
  1647. syscalltable[5328] = 'NtUserWaitAvailableMessageEx'
  1648. syscalltable[5329] = 'NtUserWaitForInputIdle'
  1649. syscalltable[5330] = 'NtUserWaitForMsgAndEvent'
  1650. syscalltable[5331] = 'NtUserWaitForRedirectionStartComplete'
  1651. syscalltable[5332] = 'NtUserWindowFromDC'
  1652. syscalltable[5333] = 'NtUserWindowFromPhysicalPoint'
  1653. syscalltable[5334] = 'NtValidateCompositionSurfaceHandle'
  1654. syscalltable[5335] = 'NtVisualCaptureBits'
  1655. syscalltable[5336] = 'NtUserSetClassLongPtr'
  1656. syscalltable[5337] = 'NtUserSetWindowLongPtr'
  1657. syscalltable[54] = 'NtQuerySystemInformation'
  1658. syscalltable[55] = 'NtOpenSection'
  1659. syscalltable[56] = 'NtQueryTimer'
  1660. syscalltable[57] = 'NtFsControlFile'
  1661. syscalltable[58] = 'NtWriteVirtualMemory'
  1662. syscalltable[59] = 'NtCloseObjectAuditAlarm'
  1663. syscalltable[6] = 'NtReadFile'
  1664. syscalltable[60] = 'NtDuplicateObject'
  1665. syscalltable[61] = 'NtQueryAttributesFile'
  1666. syscalltable[62] = 'NtClearEvent'
  1667. syscalltable[63] = 'NtReadVirtualMemory'
  1668. syscalltable[64] = 'NtOpenEvent'
  1669. syscalltable[65] = 'NtAdjustPrivilegesToken'
  1670. syscalltable[66] = 'NtDuplicateToken'
  1671. syscalltable[67] = 'NtContinue'
  1672. syscalltable[68] = 'NtQueryDefaultUILanguage'
  1673. syscalltable[69] = 'NtQueueApcThread'
  1674. syscalltable[7] = 'NtDeviceIoControlFile'
  1675. syscalltable[70] = 'NtYieldExecution'
  1676. syscalltable[71] = 'NtAddAtom'
  1677. syscalltable[72] = 'NtCreateEvent'
  1678. syscalltable[73] = 'NtQueryVolumeInformationFile'
  1679. syscalltable[74] = 'NtCreateSection'
  1680. syscalltable[75] = 'NtFlushBuffersFile'
  1681. syscalltable[76] = 'NtApphelpCacheControl'
  1682. syscalltable[77] = 'NtCreateProcessEx'
  1683. syscalltable[78] = 'NtCreateThread'
  1684. syscalltable[79] = 'NtIsProcessInJob'
  1685. syscalltable[8] = 'NtWriteFile'
  1686. syscalltable[80] = 'NtProtectVirtualMemory'
  1687. syscalltable[81] = 'NtQuerySection'
  1688. syscalltable[82] = 'NtResumeThread'
  1689. syscalltable[83] = 'NtTerminateThread'
  1690. syscalltable[84] = 'NtReadRequestData'
  1691. syscalltable[85] = 'NtCreateFile'
  1692. syscalltable[86] = 'NtQueryEvent'
  1693. syscalltable[87] = 'NtWriteRequestData'
  1694. syscalltable[88] = 'NtOpenDirectoryObject'
  1695. syscalltable[89] = 'NtAccessCheckByTypeAndAuditAlarm'
  1696. syscalltable[9] = 'NtRemoveIoCompletion'
  1697. syscalltable[91] = 'NtWaitForMultipleObjects'
  1698. syscalltable[92] = 'NtSetInformationObject'
  1699. syscalltable[93] = 'NtCancelIoFile'
  1700. syscalltable[94] = 'NtTraceEvent'
  1701. syscalltable[95] = 'NtPowerInformation'
  1702. syscalltable[96] = 'NtSetValueKey'
  1703. syscalltable[97] = 'NtCancelTimer'
  1704. syscalltable[98] = 'NtSetTimer'
  1705. syscalltable[99] = 'NtAccessCheckByType'
  1706.  
  1707. syscallArgcTable = {}
  1708. syscallArgcTable['NtAccessCheck'] = 8
  1709. syscallArgcTable['NtWorkerFactoryWorkerReady'] = 1
  1710. syscallArgcTable['NtAcceptConnectPort'] = 6
  1711. syscallArgcTable['NtMapUserPhysicalPagesScatter'] = 3
  1712. syscallArgcTable['NtWaitForSingleObject'] = 3
  1713. syscallArgcTable['NtCallbackReturn'] = 3
  1714. syscallArgcTable['NtReadFile'] = 9
  1715. syscallArgcTable['NtDeviceIoControlFile'] = 10
  1716. syscallArgcTable['NtWriteFile'] = 9
  1717. syscallArgcTable['NtRemoveIoCompletion'] = 5
  1718. syscallArgcTable['NtReleaseSemaphore'] = 3
  1719. syscallArgcTable['NtReplyWaitReceivePort'] = 4
  1720. syscallArgcTable['NtReplyPort'] = 2
  1721. syscallArgcTable['NtSetInformationThread'] = 4
  1722. syscallArgcTable['NtSetEvent'] = 2
  1723. syscallArgcTable['NtClose'] = 1
  1724. syscallArgcTable['NtQueryObject'] = 5
  1725. syscallArgcTable['NtQueryInformationFile'] = 5
  1726. syscallArgcTable['NtOpenKey'] = 3
  1727. syscallArgcTable['NtEnumerateValueKey'] = 6
  1728. syscallArgcTable['NtFindAtom'] = 3
  1729. syscallArgcTable['NtQueryDefaultLocale'] = 2
  1730. syscallArgcTable['NtQueryKey'] = 5
  1731. syscallArgcTable['NtQueryValueKey'] = 6
  1732. syscallArgcTable['NtAllocateVirtualMemory'] = 6
  1733. syscallArgcTable['NtQueryInformationProcess'] = 5
  1734. syscallArgcTable['NtWaitForMultipleObjects32'] = 5
  1735. syscallArgcTable['NtWriteFileGather'] = 9
  1736. syscallArgcTable['NtSetInformationProcess'] = 4
  1737. syscallArgcTable['NtCreateKey'] = 7
  1738. syscallArgcTable['NtFreeVirtualMemory'] = 4
  1739. syscallArgcTable['NtImpersonateClientOfPort'] = 2
  1740. syscallArgcTable['NtReleaseMutant'] = 2
  1741. syscallArgcTable['NtQueryInformationToken'] = 5
  1742. syscallArgcTable['NtRequestWaitReplyPort'] = 3
  1743. syscallArgcTable['NtQueryVirtualMemory'] = 6
  1744. syscallArgcTable['NtOpenThreadToken'] = 4
  1745. syscallArgcTable['NtQueryInformationThread'] = 5
  1746. syscallArgcTable['NtOpenProcess'] = 4
  1747. syscallArgcTable['NtSetInformationFile'] = 5
  1748. syscallArgcTable['NtMapViewOfSection'] = 10
  1749. syscallArgcTable['NtAccessCheckAndAuditAlarm'] = 11
  1750. syscallArgcTable['NtUnmapViewOfSection'] = 2
  1751. syscallArgcTable['NtReplyWaitReceivePortEx'] = 5
  1752. syscallArgcTable['NtTerminateProcess'] = 2
  1753. syscallArgcTable['NtSetEventBoostPriority'] = 1
  1754. syscallArgcTable['NtReadFileScatter'] = 9
  1755. syscallArgcTable['NtOpenThreadTokenEx'] = 5
  1756. syscallArgcTable['NtOpenProcessTokenEx'] = 4
  1757. syscallArgcTable['NtQueryPerformanceCounter'] = 2
  1758. syscallArgcTable['NtEnumerateKey'] = 6
  1759. syscallArgcTable['NtOpenFile'] = 6
  1760. syscallArgcTable['NtDelayExecution'] = 2
  1761. syscallArgcTable['NtQueryDirectoryFile'] = 11
  1762. syscallArgcTable['NtQuerySystemInformation'] = 4
  1763. syscallArgcTable['NtOpenSection'] = 3
  1764. syscallArgcTable['NtQueryTimer'] = 5
  1765. syscallArgcTable['NtFsControlFile'] = 10
  1766. syscallArgcTable['NtWriteVirtualMemory'] = 5
  1767. syscallArgcTable['NtCloseObjectAuditAlarm'] = 3
  1768. syscallArgcTable['NtDuplicateObject'] = 7
  1769. syscallArgcTable['NtQueryAttributesFile'] = 2
  1770. syscallArgcTable['NtClearEvent'] = 1
  1771. syscallArgcTable['NtReadVirtualMemory'] = 5
  1772. syscallArgcTable['NtOpenEvent'] = 3
  1773. syscallArgcTable['NtAdjustPrivilegesToken'] = 6
  1774. syscallArgcTable['NtDuplicateToken'] = 6
  1775. syscallArgcTable['NtContinue'] = 2
  1776. syscallArgcTable['NtQueryDefaultUILanguage'] = 1
  1777. syscallArgcTable['NtQueueApcThread'] = 5
  1778. syscallArgcTable['NtYieldExecution'] = 0
  1779. syscallArgcTable['NtAddAtom'] = 3
  1780. syscallArgcTable['NtCreateEvent'] = 5
  1781. syscallArgcTable['NtQueryVolumeInformationFile'] = 5
  1782. syscallArgcTable['NtCreateSection'] = 7
  1783. syscallArgcTable['NtFlushBuffersFile'] = 2
  1784. syscallArgcTable['NtApphelpCacheControl'] = 2
  1785. syscallArgcTable['NtCreateProcessEx'] = 9
  1786. syscallArgcTable['NtCreateThread'] = 8
  1787. syscallArgcTable['NtIsProcessInJob'] = 2
  1788. syscallArgcTable['NtProtectVirtualMemory'] = 5
  1789. syscallArgcTable['NtQuerySection'] = 5
  1790. syscallArgcTable['NtResumeThread'] = 2
  1791. syscallArgcTable['NtTerminateThread'] = 2
  1792. syscallArgcTable['NtReadRequestData'] = 6
  1793. syscallArgcTable['NtCreateFile'] = 11
  1794. syscallArgcTable['NtQueryEvent'] = 5
  1795. syscallArgcTable['NtWriteRequestData'] = 6
  1796. syscallArgcTable['NtOpenDirectoryObject'] = 3
  1797. syscallArgcTable['NtAccessCheckByTypeAndAuditAlarm'] = 16
  1798. syscallArgcTable['NtQuerySystemTime'] = 1
  1799. syscallArgcTable['NtWaitForMultipleObjects'] = 5
  1800. syscallArgcTable['NtSetInformationObject'] = 4
  1801. syscallArgcTable['NtCancelIoFile'] = 2
  1802. syscallArgcTable['NtTraceEvent'] = 4
  1803. syscallArgcTable['NtPowerInformation'] = 5
  1804. syscallArgcTable['NtSetValueKey'] = 6
  1805. syscallArgcTable['NtCancelTimer'] = 2
  1806. syscallArgcTable['NtSetTimer'] = 7
  1807. syscallArgcTable['NtAccessCheckByType'] = 11
  1808. syscallArgcTable['NtAccessCheckByTypeResultList'] = 11
  1809. syscallArgcTable['NtAccessCheckByTypeResultListAndAuditAlarm'] = 16
  1810. syscallArgcTable['NtAccessCheckByTypeResultListAndAuditAlarmByHandle'] = 17
  1811. syscallArgcTable['NtAcquireProcessActivityReference'] = 3
  1812. syscallArgcTable['NtAddAtomEx'] = 4
  1813. syscallArgcTable['NtAddBootEntry'] = 2
  1814. syscallArgcTable['NtAddDriverEntry'] = 2
  1815. syscallArgcTable['NtAdjustGroupsToken'] = 6
  1816. syscallArgcTable['NtAdjustTokenClaimsAndDeviceGroups'] = 16
  1817. syscallArgcTable['NtAlertResumeThread'] = 2
  1818. syscallArgcTable['NtAlertThread'] = 1
  1819. syscallArgcTable['NtAlertThreadByThreadId'] = 1
  1820. syscallArgcTable['NtAllocateLocallyUniqueId'] = 1
  1821. syscallArgcTable['NtAllocateReserveObject'] = 3
  1822. syscallArgcTable['NtAllocateUserPhysicalPages'] = 3
  1823. syscallArgcTable['NtAllocateUuids'] = 4
  1824. syscallArgcTable['NtAllocateVirtualMemoryEx'] = 7
  1825. syscallArgcTable['NtAlpcAcceptConnectPort'] = 9
  1826. syscallArgcTable['NtAlpcCancelMessage'] = 3
  1827. syscallArgcTable['NtAlpcConnectPort'] = 11
  1828. syscallArgcTable['NtAlpcConnectPortEx'] = 11
  1829. syscallArgcTable['NtAlpcCreatePort'] = 3
  1830. syscallArgcTable['NtAlpcCreatePortSection'] = 6
  1831. syscallArgcTable['NtAlpcCreateResourceReserve'] = 4
  1832. syscallArgcTable['NtAlpcCreateSectionView'] = 3
  1833. syscallArgcTable['NtAlpcCreateSecurityContext'] = 3
  1834. syscallArgcTable['NtAlpcDeletePortSection'] = 3
  1835. syscallArgcTable['NtAlpcDeleteResourceReserve'] = 3
  1836. syscallArgcTable['NtAlpcDeleteSectionView'] = 3
  1837. syscallArgcTable['NtAlpcDeleteSecurityContext'] = 3
  1838. syscallArgcTable['NtAlpcDisconnectPort'] = 2
  1839. syscallArgcTable['NtAlpcImpersonateClientContainerOfPort'] = 3
  1840. syscallArgcTable['NtAlpcImpersonateClientOfPort'] = 3
  1841. syscallArgcTable['NtAlpcOpenSenderProcess'] = 6
  1842. syscallArgcTable['NtAlpcOpenSenderThread'] = 6
  1843. syscallArgcTable['NtAlpcQueryInformation'] = 5
  1844. syscallArgcTable['NtAlpcQueryInformationMessage'] = 6
  1845. syscallArgcTable['NtAlpcRevokeSecurityContext'] = 3
  1846. syscallArgcTable['NtAlpcSendWaitReceivePort'] = 8
  1847. syscallArgcTable['NtAlpcSetInformation'] = 4
  1848. syscallArgcTable['NtAreMappedFilesTheSame'] = 2
  1849. syscallArgcTable['NtAssignProcessToJobObject'] = 2
  1850. syscallArgcTable['NtAssociateWaitCompletionPacket'] = 8
  1851. syscallArgcTable['NtCallEnclave'] = 4
  1852. syscallArgcTable['NtCancelIoFileEx'] = 3
  1853. syscallArgcTable['NtCancelSynchronousIoFile'] = 3
  1854. syscallArgcTable['NtCancelTimer2'] = 2
  1855. syscallArgcTable['NtCancelWaitCompletionPacket'] = 2
  1856. syscallArgcTable['NtCommitComplete'] = 2
  1857. syscallArgcTable['NtCommitEnlistment'] = 2
  1858. syscallArgcTable['NtCommitRegistryTransaction'] = 2
  1859. syscallArgcTable['NtCommitTransaction'] = 2
  1860. syscallArgcTable['NtCompactKeys'] = 2
  1861. syscallArgcTable['NtCompareObjects'] = 2
  1862. syscallArgcTable['NtCompareSigningLevels'] = 2
  1863. syscallArgcTable['NtCompareTokens'] = 3
  1864. syscallArgcTable['NtCompleteConnectPort'] = 1
  1865. syscallArgcTable['NtCompressKey'] = 1
  1866. syscallArgcTable['NtConnectPort'] = 8
  1867. syscallArgcTable['NtConvertBetweenAuxiliaryCounterAndPerformanceCounter'] = 4
  1868. syscallArgcTable['NtCreateDebugObject'] = 4
  1869. syscallArgcTable['NtCreateDirectoryObject'] = 3
  1870. syscallArgcTable['NtCreateDirectoryObjectEx'] = 5
  1871. syscallArgcTable['NtCreateEnclave'] = 9
  1872. syscallArgcTable['NtCreateEnlistment'] = 8
  1873. syscallArgcTable['NtCreateEventPair'] = 3
  1874. syscallArgcTable['NtCreateIRTimer'] = 3
  1875. syscallArgcTable['NtCreateIoCompletion'] = 4
  1876. syscallArgcTable['NtCreateJobObject'] = 3
  1877. syscallArgcTable['NtCreateJobSet'] = 3
  1878. syscallArgcTable['NtCreateKeyTransacted'] = 8
  1879. syscallArgcTable['NtCreateKeyedEvent'] = 4
  1880. syscallArgcTable['NtCreateLowBoxToken'] = 9
  1881. syscallArgcTable['NtCreateMailslotFile'] = 8
  1882. syscallArgcTable['NtCreateMutant'] = 4
  1883. syscallArgcTable['NtCreateNamedPipeFile'] = 14
  1884. syscallArgcTable['NtCreatePagingFile'] = 4
  1885. syscallArgcTable['NtCreatePartition'] = 4
  1886. syscallArgcTable['NtCreatePort'] = 5
  1887. syscallArgcTable['NtCreatePrivateNamespace'] = 4
  1888. syscallArgcTable['NtCreateProcess'] = 8
  1889. syscallArgcTable['NtCreateProfile'] = 9
  1890. syscallArgcTable['NtCreateProfileEx'] = 10
  1891. syscallArgcTable['NtCreateRegistryTransaction'] = 4
  1892. syscallArgcTable['NtCreateResourceManager'] = 7
  1893. syscallArgcTable['NtCreateSemaphore'] = 5
  1894. syscallArgcTable['NtCreateSymbolicLinkObject'] = 4
  1895. syscallArgcTable['NtCreateThreadEx'] = 11
  1896. syscallArgcTable['NtCreateTimer'] = 4
  1897. syscallArgcTable['NtCreateTimer2'] = 5
  1898. syscallArgcTable['NtCreateToken'] = 13
  1899. syscallArgcTable['NtCreateTokenEx'] = 17
  1900. syscallArgcTable['NtCreateTransaction'] = 10
  1901. syscallArgcTable['NtCreateTransactionManager'] = 6
  1902. syscallArgcTable['NtCreateUserProcess'] = 11
  1903. syscallArgcTable['NtCreateWaitCompletionPacket'] = 3
  1904. syscallArgcTable['NtCreateWaitablePort'] = 5
  1905. syscallArgcTable['NtCreateWnfStateName'] = 7
  1906. syscallArgcTable['NtCreateWorkerFactory'] = 10
  1907. syscallArgcTable['NtDebugActiveProcess'] = 2
  1908. syscallArgcTable['NtDebugContinue'] = 3
  1909. syscallArgcTable['NtDeleteAtom'] = 1
  1910. syscallArgcTable['NtDeleteBootEntry'] = 1
  1911. syscallArgcTable['NtDeleteDriverEntry'] = 1
  1912. syscallArgcTable['NtDeleteFile'] = 1
  1913. syscallArgcTable['NtDeleteKey'] = 1
  1914. syscallArgcTable['NtDeleteObjectAuditAlarm'] = 3
  1915. syscallArgcTable['NtDeletePrivateNamespace'] = 1
  1916. syscallArgcTable['NtDeleteValueKey'] = 2
  1917. syscallArgcTable['NtDeleteWnfStateData'] = 2
  1918. syscallArgcTable['NtDeleteWnfStateName'] = 1
  1919. syscallArgcTable['NtDisableLastKnownGood'] = 0
  1920. syscallArgcTable['NtDisplayString'] = 1
  1921. syscallArgcTable['NtDrawText'] = 1
  1922. syscallArgcTable['NtEnableLastKnownGood'] = 0
  1923. syscallArgcTable['NtEnumerateBootEntries'] = 2
  1924. syscallArgcTable['NtEnumerateDriverEntries'] = 2
  1925. syscallArgcTable['NtEnumerateSystemEnvironmentValuesEx'] = 3
  1926. syscallArgcTable['NtEnumerateTransactionObject'] = 5
  1927. syscallArgcTable['NtExtendSection'] = 2
  1928. syscallArgcTable['NtFilterBootOption'] = 5
  1929. syscallArgcTable['NtFilterToken'] = 6
  1930. syscallArgcTable['NtFilterTokenEx'] = 14
  1931. syscallArgcTable['NtFlushBuffersFileEx'] = 5
  1932. syscallArgcTable['NtFlushInstallUILanguage'] = 2
  1933. syscallArgcTable['NtFlushInstructionCache'] = 3
  1934. syscallArgcTable['NtFlushKey'] = 1
  1935. syscallArgcTable['NtFlushProcessWriteBuffers'] = 0
  1936. syscallArgcTable['NtFlushVirtualMemory'] = 4
  1937. syscallArgcTable['NtFlushWriteBuffer'] = 0
  1938. syscallArgcTable['NtFreeUserPhysicalPages'] = 3
  1939. syscallArgcTable['NtFreezeRegistry'] = 1
  1940. syscallArgcTable['NtFreezeTransactions'] = 2
  1941. syscallArgcTable['NtGetCachedSigningLevel'] = 6
  1942. syscallArgcTable['NtGetCompleteWnfStateSubscription'] = 6
  1943. syscallArgcTable['NtGetContextThread'] = 2
  1944. syscallArgcTable['NtGetCurrentProcessorNumber'] = 0
  1945. syscallArgcTable['NtGetCurrentProcessorNumberEx'] = 1
  1946. syscallArgcTable['NtGetDevicePowerState'] = 2
  1947. syscallArgcTable['NtGetMUIRegistryInfo'] = 3
  1948. syscallArgcTable['NtGetNextProcess'] = 5
  1949. syscallArgcTable['NtGetNextThread'] = 6
  1950. syscallArgcTable['NtGetNlsSectionPtr'] = 5
  1951. syscallArgcTable['NtGetNotificationResourceManager'] = 7
  1952. syscallArgcTable['NtGetWriteWatch'] = 7
  1953. syscallArgcTable['NtImpersonateAnonymousToken'] = 1
  1954. syscallArgcTable['NtImpersonateThread'] = 3
  1955. syscallArgcTable['NtInitializeEnclave'] = 5
  1956. syscallArgcTable['NtInitializeNlsFiles'] = 3
  1957. syscallArgcTable['NtInitializeRegistry'] = 1
  1958. syscallArgcTable['NtInitiatePowerAction'] = 4
  1959. syscallArgcTable['NtIsSystemResumeAutomatic'] = 0
  1960. syscallArgcTable['NtIsUILanguageComitted'] = 0
  1961. syscallArgcTable['NtListenPort'] = 2
  1962. syscallArgcTable['NtLoadDriver'] = 1
  1963. syscallArgcTable['NtLoadEnclaveData'] = 9
  1964. syscallArgcTable['NtLoadHotPatch'] = 2
  1965. syscallArgcTable['NtLoadKey'] = 2
  1966. syscallArgcTable['NtLoadKey2'] = 3
  1967. syscallArgcTable['NtLoadKeyEx'] = 8
  1968. syscallArgcTable['NtLockFile'] = 10
  1969. syscallArgcTable['NtLockProductActivationKeys'] = 2
  1970. syscallArgcTable['NtLockRegistryKey'] = 1
  1971. syscallArgcTable['NtLockVirtualMemory'] = 4
  1972. syscallArgcTable['NtMakePermanentObject'] = 1
  1973. syscallArgcTable['NtMakeTemporaryObject'] = 1
  1974. syscallArgcTable['NtManagePartition'] = 5
  1975. syscallArgcTable['NtMapCMFModule'] = 6
  1976. syscallArgcTable['NtMapUserPhysicalPages'] = 3
  1977. syscallArgcTable['NtMapViewOfSectionEx'] = 9
  1978. syscallArgcTable['NtModifyBootEntry'] = 1
  1979. syscallArgcTable['NtModifyDriverEntry'] = 1
  1980. syscallArgcTable['NtNotifyChangeDirectoryFile'] = 9
  1981. syscallArgcTable['NtNotifyChangeDirectoryFileEx'] = 10
  1982. syscallArgcTable['NtNotifyChangeKey'] = 10
  1983. syscallArgcTable['NtNotifyChangeMultipleKeys'] = 12
  1984. syscallArgcTable['NtNotifyChangeSession'] = 8
  1985. syscallArgcTable['NtOpenEnlistment'] = 5
  1986. syscallArgcTable['NtOpenEventPair'] = 3
  1987. syscallArgcTable['NtOpenIoCompletion'] = 3
  1988. syscallArgcTable['NtOpenJobObject'] = 3
  1989. syscallArgcTable['NtOpenKeyEx'] = 4
  1990. syscallArgcTable['NtOpenKeyTransacted'] = 4
  1991. syscallArgcTable['NtOpenKeyTransactedEx'] = 5
  1992. syscallArgcTable['NtOpenKeyedEvent'] = 3
  1993. syscallArgcTable['NtOpenMutant'] = 3
  1994. syscallArgcTable['NtOpenObjectAuditAlarm'] = 12
  1995. syscallArgcTable['NtOpenPartition'] = 3
  1996. syscallArgcTable['NtOpenPrivateNamespace'] = 4
  1997. syscallArgcTable['NtOpenProcessToken'] = 3
  1998. syscallArgcTable['NtOpenRegistryTransaction'] = 3
  1999. syscallArgcTable['NtOpenResourceManager'] = 5
  2000. syscallArgcTable['NtOpenSemaphore'] = 3
  2001. syscallArgcTable['NtOpenSession'] = 3
  2002. syscallArgcTable['NtOpenSymbolicLinkObject'] = 3
  2003. syscallArgcTable['NtOpenThread'] = 4
  2004. syscallArgcTable['NtOpenTimer'] = 3
  2005. syscallArgcTable['NtOpenTransaction'] = 5
  2006. syscallArgcTable['NtOpenTransactionManager'] = 6
  2007. syscallArgcTable['NtPlugPlayControl'] = 3
  2008. syscallArgcTable['NtPrePrepareComplete'] = 2
  2009. syscallArgcTable['NtPrePrepareEnlistment'] = 2
  2010. syscallArgcTable['NtPrepareComplete'] = 2
  2011. syscallArgcTable['NtPrepareEnlistment'] = 2
  2012. syscallArgcTable['NtPrivilegeCheck'] = 3
  2013. syscallArgcTable['NtPrivilegeObjectAuditAlarm'] = 6
  2014. syscallArgcTable['NtPrivilegedServiceAuditAlarm'] = 5
  2015. syscallArgcTable['NtPropagationComplete'] = 4
  2016. syscallArgcTable['NtPropagationFailed'] = 3
  2017. syscallArgcTable['NtPulseEvent'] = 2
  2018. syscallArgcTable['NtQueryAuxiliaryCounterFrequency'] = 1
  2019. syscallArgcTable['NtQueryBootEntryOrder'] = 2
  2020. syscallArgcTable['NtQueryBootOptions'] = 2
  2021. syscallArgcTable['NtQueryDebugFilterState'] = 2
  2022. syscallArgcTable['NtQueryDirectoryFileEx'] = 10
  2023. syscallArgcTable['NtQueryDirectoryObject'] = 7
  2024. syscallArgcTable['NtQueryDriverEntryOrder'] = 2
  2025. syscallArgcTable['NtQueryEaFile'] = 9
  2026. syscallArgcTable['NtQueryFullAttributesFile'] = 2
  2027. syscallArgcTable['NtQueryInformationAtom'] = 5
  2028. syscallArgcTable['NtQueryInformationByName'] = 5
  2029. syscallArgcTable['NtQueryInformationEnlistment'] = 5
  2030. syscallArgcTable['NtQueryInformationJobObject'] = 5
  2031. syscallArgcTable['NtQueryInformationPort'] = 5
  2032. syscallArgcTable['NtQueryInformationResourceManager'] = 5
  2033. syscallArgcTable['NtQueryInformationTransaction'] = 5
  2034. syscallArgcTable['NtQueryInformationTransactionManager'] = 5
  2035. syscallArgcTable['NtQueryInformationWorkerFactory'] = 5
  2036. syscallArgcTable['NtQueryInstallUILanguage'] = 1
  2037. syscallArgcTable['NtQueryIntervalProfile'] = 2
  2038. syscallArgcTable['NtQueryIoCompletion'] = 5
  2039. syscallArgcTable['NtQueryLicenseValue'] = 5
  2040. syscallArgcTable['NtQueryMultipleValueKey'] = 6
  2041. syscallArgcTable['NtQueryMutant'] = 5
  2042. syscallArgcTable['NtQueryOpenSubKeys'] = 2
  2043. syscallArgcTable['NtQueryOpenSubKeysEx'] = 4
  2044. syscallArgcTable['NtQueryPortInformationProcess'] = 0
  2045. syscallArgcTable['NtQueryQuotaInformationFile'] = 9
  2046. syscallArgcTable['NtQuerySecurityAttributesToken'] = 6
  2047. syscallArgcTable['NtQuerySecurityObject'] = 5
  2048. syscallArgcTable['NtQuerySecurityPolicy'] = 6
  2049. syscallArgcTable['NtQuerySemaphore'] = 5
  2050. syscallArgcTable['NtQuerySymbolicLinkObject'] = 3
  2051. syscallArgcTable['NtQuerySystemEnvironmentValue'] = 4
  2052. syscallArgcTable['NtQuerySystemEnvironmentValueEx'] = 5
  2053. syscallArgcTable['NtQuerySystemInformationEx'] = 6
  2054. syscallArgcTable['NtQueryTimerResolution'] = 3
  2055. syscallArgcTable['NtQueryWnfStateData'] = 6
  2056. syscallArgcTable['NtQueryWnfStateNameInformation'] = 5
  2057. syscallArgcTable['NtQueueApcThreadEx'] = 6
  2058. syscallArgcTable['NtRaiseException'] = 3
  2059. syscallArgcTable['NtRaiseHardError'] = 6
  2060. syscallArgcTable['NtReadOnlyEnlistment'] = 2
  2061. syscallArgcTable['NtRecoverEnlistment'] = 2
  2062. syscallArgcTable['NtRecoverResourceManager'] = 1
  2063. syscallArgcTable['NtRecoverTransactionManager'] = 1
  2064. syscallArgcTable['NtRegisterProtocolAddressInformation'] = 5
  2065. syscallArgcTable['NtRegisterThreadTerminatePort'] = 1
  2066. syscallArgcTable['NtReleaseKeyedEvent'] = 4
  2067. syscallArgcTable['NtReleaseWorkerFactoryWorker'] = 1
  2068. syscallArgcTable['NtRemoveIoCompletionEx'] = 6
  2069. syscallArgcTable['NtRemoveProcessDebug'] = 2
  2070. syscallArgcTable['NtRenameKey'] = 2
  2071. syscallArgcTable['NtRenameTransactionManager'] = 2
  2072. syscallArgcTable['NtReplaceKey'] = 3
  2073. syscallArgcTable['NtReplacePartitionUnit'] = 3
  2074. syscallArgcTable['NtReplyWaitReplyPort'] = 2
  2075. syscallArgcTable['NtRequestPort'] = 2
  2076. syscallArgcTable['NtResetEvent'] = 2
  2077. syscallArgcTable['NtResetWriteWatch'] = 3
  2078. syscallArgcTable['NtRestoreKey'] = 3
  2079. syscallArgcTable['NtResumeProcess'] = 1
  2080. syscallArgcTable['NtRevertContainerImpersonation'] = 0
  2081. syscallArgcTable['NtRollbackComplete'] = 2
  2082. syscallArgcTable['NtRollbackEnlistment'] = 2
  2083. syscallArgcTable['NtRollbackRegistryTransaction'] = 2
  2084. syscallArgcTable['NtRollbackTransaction'] = 2
  2085. syscallArgcTable['NtRollforwardTransactionManager'] = 2
  2086. syscallArgcTable['NtSaveKey'] = 2
  2087. syscallArgcTable['NtSaveKeyEx'] = 3
  2088. syscallArgcTable['NtSaveMergedKeys'] = 3
  2089. syscallArgcTable['NtSecureConnectPort'] = 9
  2090. syscallArgcTable['NtSerializeBoot'] = 0
  2091. syscallArgcTable['NtSetBootEntryOrder'] = 2
  2092. syscallArgcTable['NtSetBootOptions'] = 2
  2093. syscallArgcTable['NtSetCachedSigningLevel'] = 5
  2094. syscallArgcTable['NtSetCachedSigningLevel2'] = 6
  2095. syscallArgcTable['NtSetContextThread'] = 2
  2096. syscallArgcTable['NtSetDebugFilterState'] = 3
  2097. syscallArgcTable['NtSetDefaultHardErrorPort'] = 1
  2098. syscallArgcTable['NtSetDefaultLocale'] = 2
  2099. syscallArgcTable['NtSetDefaultUILanguage'] = 1
  2100. syscallArgcTable['NtSetDriverEntryOrder'] = 2
  2101. syscallArgcTable['NtSetEaFile'] = 4
  2102. syscallArgcTable['NtSetHighEventPair'] = 1
  2103. syscallArgcTable['NtSetHighWaitLowEventPair'] = 1
  2104. syscallArgcTable['NtSetIRTimer'] = 2
  2105. syscallArgcTable['NtSetInformationDebugObject'] = 5
  2106. syscallArgcTable['NtSetInformationEnlistment'] = 4
  2107. syscallArgcTable['NtSetInformationJobObject'] = 4
  2108. syscallArgcTable['NtSetInformationKey'] = 4
  2109. syscallArgcTable['NtSetInformationResourceManager'] = 4
  2110. syscallArgcTable['NtSetInformationSymbolicLink'] = 4
  2111. syscallArgcTable['NtSetInformationToken'] = 4
  2112. syscallArgcTable['NtSetInformationTransaction'] = 4
  2113. syscallArgcTable['NtSetInformationTransactionManager'] = 4
  2114. syscallArgcTable['NtSetInformationVirtualMemory'] = 6
  2115. syscallArgcTable['NtSetInformationWorkerFactory'] = 4
  2116. syscallArgcTable['NtSetIntervalProfile'] = 2
  2117. syscallArgcTable['NtSetIoCompletion'] = 5
  2118. syscallArgcTable['NtSetIoCompletionEx'] = 6
  2119. syscallArgcTable['NtSetLdtEntries'] = 6
  2120. syscallArgcTable['NtSetLowEventPair'] = 1
  2121. syscallArgcTable['NtSetLowWaitHighEventPair'] = 1
  2122. syscallArgcTable['NtSetQuotaInformationFile'] = 4
  2123. syscallArgcTable['NtSetSecurityObject'] = 3
  2124. syscallArgcTable['NtSetSystemEnvironmentValue'] = 2
  2125. syscallArgcTable['NtSetSystemEnvironmentValueEx'] = 5
  2126. syscallArgcTable['NtSetSystemInformation'] = 3
  2127. syscallArgcTable['NtSetSystemPowerState'] = 3
  2128. syscallArgcTable['NtSetSystemTime'] = 2
  2129. syscallArgcTable['NtSetThreadExecutionState'] = 2
  2130. syscallArgcTable['NtSetTimer2'] = 4
  2131. syscallArgcTable['NtSetTimerEx'] = 4
  2132. syscallArgcTable['NtSetTimerResolution'] = 3
  2133. syscallArgcTable['NtSetUuidSeed'] = 1
  2134. syscallArgcTable['NtSetVolumeInformationFile'] = 5
  2135. syscallArgcTable['NtSetWnfProcessNotificationEvent'] = 1
  2136. syscallArgcTable['NtShutdownSystem'] = 1
  2137. syscallArgcTable['NtShutdownWorkerFactory'] = 2
  2138. syscallArgcTable['NtSignalAndWaitForSingleObject'] = 4
  2139. syscallArgcTable['NtSinglePhaseReject'] = 2
  2140. syscallArgcTable['NtStartProfile'] = 1
  2141. syscallArgcTable['NtStopProfile'] = 1
  2142. syscallArgcTable['NtSubscribeWnfStateChange'] = 4
  2143. syscallArgcTable['NtSuspendProcess'] = 1
  2144. syscallArgcTable['NtSuspendThread'] = 2
  2145. syscallArgcTable['NtSystemDebugControl'] = 6
  2146. syscallArgcTable['NtTerminateEnclave'] = 2
  2147. syscallArgcTable['NtTerminateJobObject'] = 2
  2148. syscallArgcTable['NtTestAlert'] = 0
  2149. syscallArgcTable['NtThawRegistry'] = 0
  2150. syscallArgcTable['NtThawTransactions'] = 0
  2151. syscallArgcTable['NtTraceControl'] = 6
  2152. syscallArgcTable['NtTranslateFilePath'] = 4
  2153. syscallArgcTable['NtUmsThreadYield'] = 1
  2154. syscallArgcTable['NtUnloadDriver'] = 1
  2155. syscallArgcTable['NtUnloadKey'] = 1
  2156. syscallArgcTable['NtUnloadKey2'] = 2
  2157. syscallArgcTable['NtUnloadKeyEx'] = 2
  2158. syscallArgcTable['NtUnlockFile'] = 5
  2159. syscallArgcTable['NtUnlockVirtualMemory'] = 4
  2160. syscallArgcTable['NtUnmapViewOfSectionEx'] = 3
  2161. syscallArgcTable['NtUnsubscribeWnfStateChange'] = 1
  2162. syscallArgcTable['NtUpdateWnfStateData'] = 7
  2163. syscallArgcTable['NtVdmControl'] = 2
  2164. syscallArgcTable['NtWaitForAlertByThreadId'] = 2
  2165. syscallArgcTable['NtWaitForDebugEvent'] = 4
  2166. syscallArgcTable['NtWaitForKeyedEvent'] = 4
  2167. syscallArgcTable['NtWaitForWorkViaWorkerFactory'] = 5
  2168. syscallArgcTable['NtWaitHighEventPair'] = 1
  2169. syscallArgcTable['NtWaitLowEventPair'] = 1
  2170. syscallArgcTable['NtUserGetOwnerTransformedMonitorRect'] = 4
  2171. syscallArgcTable['NtUserYieldTask'] = 0
  2172. syscallArgcTable['NtUserSetSensorPresence'] = 1
  2173. syscallArgcTable['NtUserGetThreadState'] = 1
  2174. syscallArgcTable['NtUserPeekMessage'] = 5
  2175. syscallArgcTable['NtUserCallOneParam'] = 2
  2176. syscallArgcTable['NtUserGetKeyState'] = 1
  2177. syscallArgcTable['NtUserInvalidateRect'] = 3
  2178. syscallArgcTable['NtUserCallNoParam'] = 1
  2179. syscallArgcTable['NtUserGetMessage'] = 4
  2180. syscallArgcTable['NtUserMessageCall'] = 7
  2181. syscallArgcTable['NtGdiBitBlt'] = 11
  2182. syscallArgcTable['NtGdiGetCharSet'] = 1
  2183. syscallArgcTable['NtUserGetDC'] = 1
  2184. syscallArgcTable['NtGdiSelectBitmap'] = 2
  2185. syscallArgcTable['NtUserWaitMessage'] = 0
  2186. syscallArgcTable['NtUserTranslateMessage'] = 2
  2187. syscallArgcTable['NtUserGetProp'] = 2
  2188. syscallArgcTable['NtUserPostMessage'] = 4
  2189. syscallArgcTable['NtUserQueryWindow'] = 2
  2190. syscallArgcTable['NtUserTranslateAccelerator'] = 3
  2191. syscallArgcTable['NtGdiFlush'] = 0
  2192. syscallArgcTable['NtUserRedrawWindow'] = 4
  2193. syscallArgcTable['NtUserWindowFromPoint'] = 2
  2194. syscallArgcTable['NtUserCallMsgFilter'] = 2
  2195. syscallArgcTable['NtUserValidateTimerCallback'] = 1
  2196. syscallArgcTable['NtUserBeginPaint'] = 2
  2197. syscallArgcTable['NtUserSetTimer'] = 5
  2198. syscallArgcTable['NtUserEndPaint'] = 2
  2199. syscallArgcTable['NtUserSetCursor'] = 1
  2200. syscallArgcTable['NtUserKillTimer'] = 2
  2201. syscallArgcTable['NtUserBuildHwndList'] = 8
  2202. syscallArgcTable['NtUserSelectPalette'] = 3
  2203. syscallArgcTable['NtUserCallNextHookEx'] = 4
  2204. syscallArgcTable['NtUserHideCaret'] = 1
  2205. syscallArgcTable['NtGdiIntersectClipRect'] = 5
  2206. syscallArgcTable['NtUserCallHwndLock'] = 2
  2207. syscallArgcTable['NtUserGetProcessWindowStation'] = 0
  2208. syscallArgcTable['NtGdiDeleteObjectApp'] = 1
  2209. syscallArgcTable['NtUserSetWindowPos'] = 7
  2210. syscallArgcTable['NtUserShowCaret'] = 1
  2211. syscallArgcTable['NtUserEndDeferWindowPosEx'] = 2
  2212. syscallArgcTable['NtUserCallHwndParamLock'] = 3
  2213. syscallArgcTable['NtUserVkKeyScanEx'] = 3
  2214. syscallArgcTable['NtGdiSetDIBitsToDeviceInternal'] = 16
  2215. syscallArgcTable['NtUserCallTwoParam'] = 3
  2216. syscallArgcTable['NtGdiGetRandomRgn'] = 3
  2217. syscallArgcTable['NtUserCopyAcceleratorTable'] = 3
  2218. syscallArgcTable['NtUserNotifyWinEvent'] = 4
  2219. syscallArgcTable['NtGdiExtSelectClipRgn'] = 3
  2220. syscallArgcTable['NtUserIsClipboardFormatAvailable'] = 1
  2221. syscallArgcTable['NtUserSetScrollInfo'] = 4
  2222. syscallArgcTable['NtGdiStretchBlt'] = 12
  2223. syscallArgcTable['NtUserCreateCaret'] = 4
  2224. syscallArgcTable['NtGdiRectVisible'] = 2
  2225. syscallArgcTable['NtGdiCombineRgn'] = 4
  2226. syscallArgcTable['NtGdiGetDCObject'] = 2
  2227. syscallArgcTable['NtUserDispatchMessage'] = 1
  2228. syscallArgcTable['NtUserRegisterWindowMessage'] = 1
  2229. syscallArgcTable['NtGdiExtTextOutW'] = 9
  2230. syscallArgcTable['NtGdiSelectFont'] = 2
  2231. syscallArgcTable['NtGdiRestoreDC'] = 2
  2232. syscallArgcTable['NtGdiSaveDC'] = 1
  2233. syscallArgcTable['NtUserGetForegroundWindow'] = 0
  2234. syscallArgcTable['NtUserShowScrollBar'] = 3
  2235. syscallArgcTable['NtUserFindExistingCursorIcon'] = 3
  2236. syscallArgcTable['NtGdiGetDCDword'] = 3
  2237. syscallArgcTable['NtGdiGetRegionData'] = 3
  2238. syscallArgcTable['NtGdiLineTo'] = 3
  2239. syscallArgcTable['NtUserSystemParametersInfo'] = 4
  2240. syscallArgcTable['NtGdiGetAppClipBox'] = 2
  2241. syscallArgcTable['NtUserGetAsyncKeyState'] = 1
  2242. syscallArgcTable['NtUserGetCPD'] = 3
  2243. syscallArgcTable['NtUserRemoveProp'] = 2
  2244. syscallArgcTable['NtGdiDoPalette'] = 6
  2245. syscallArgcTable['NtGdiPolyPolyDraw'] = 5
  2246. syscallArgcTable['NtUserSetCapture'] = 1
  2247. syscallArgcTable['NtUserEnumDisplayMonitors'] = 4
  2248. syscallArgcTable['NtGdiCreateCompatibleBitmap'] = 3
  2249. syscallArgcTable['NtUserSetProp'] = 3
  2250. syscallArgcTable['NtGdiGetTextCharsetInfo'] = 3
  2251. syscallArgcTable['NtUserSBGetParms'] = 4
  2252. syscallArgcTable['NtUserGetIconInfo'] = 6
  2253. syscallArgcTable['NtUserExcludeUpdateRgn'] = 2
  2254. syscallArgcTable['NtUserSetFocus'] = 1
  2255. syscallArgcTable['NtGdiExtGetObjectW'] = 3
  2256. syscallArgcTable['NtUserGetUpdateRect'] = 3
  2257. syscallArgcTable['NtGdiCreateCompatibleDC'] = 1
  2258. syscallArgcTable['NtUserGetClipboardSequenceNumber'] = 0
  2259. syscallArgcTable['NtGdiCreatePen'] = 4
  2260. syscallArgcTable['NtUserShowWindow'] = 2
  2261. syscallArgcTable['NtUserGetKeyboardLayoutList'] = 2
  2262. syscallArgcTable['NtGdiPatBlt'] = 6
  2263. syscallArgcTable['NtUserMapVirtualKeyEx'] = 4
  2264. syscallArgcTable['NtUserSetWindowLong'] = 4
  2265. syscallArgcTable['NtGdiHfontCreate'] = 5
  2266. syscallArgcTable['NtUserMoveWindow'] = 6
  2267. syscallArgcTable['NtUserPostThreadMessage'] = 4
  2268. syscallArgcTable['NtUserDrawIconEx'] = 11
  2269. syscallArgcTable['NtUserGetSystemMenu'] = 2
  2270. syscallArgcTable['NtGdiDrawStream'] = 3
  2271. syscallArgcTable['NtUserInternalGetWindowText'] = 3
  2272. syscallArgcTable['NtUserGetWindowDC'] = 1
  2273. syscallArgcTable['NtGdiInvertRgn'] = 2
  2274. syscallArgcTable['NtGdiGetRgnBox'] = 2
  2275. syscallArgcTable['NtGdiGetAndSetDCDword'] = 4
  2276. syscallArgcTable['NtGdiMaskBlt'] = 13
  2277. syscallArgcTable['NtGdiGetWidthTable'] = 7
  2278. syscallArgcTable['NtUserScrollDC'] = 7
  2279. syscallArgcTable['NtUserGetObjectInformation'] = 5
  2280. syscallArgcTable['NtGdiCreateBitmap'] = 5
  2281. syscallArgcTable['NtUserFindWindowEx'] = 5
  2282. syscallArgcTable['NtGdiPolyPatBlt'] = 5
  2283. syscallArgcTable['NtUserUnhookWindowsHookEx'] = 1
  2284. syscallArgcTable['NtGdiGetNearestColor'] = 2
  2285. syscallArgcTable['NtGdiTransformPoints'] = 5
  2286. syscallArgcTable['NtGdiGetDCPoint'] = 3
  2287. syscallArgcTable['NtGdiCreateDIBBrush'] = 6
  2288. syscallArgcTable['NtGdiGetTextMetricsW'] = 3
  2289. syscallArgcTable['NtUserCreateWindowEx'] = 17
  2290. syscallArgcTable['NtUserSetParent'] = 2
  2291. syscallArgcTable['NtUserGetKeyboardState'] = 1
  2292. syscallArgcTable['NtUserToUnicodeEx'] = 7
  2293. syscallArgcTable['NtUserGetControlBrush'] = 3
  2294. syscallArgcTable['NtUserGetClassName'] = 3
  2295. syscallArgcTable['NtGdiAlphaBlend'] = 12
  2296. syscallArgcTable['NtGdiOffsetRgn'] = 3
  2297. syscallArgcTable['NtUserDefSetText'] = 2
  2298. syscallArgcTable['NtGdiGetTextFaceW'] = 4
  2299. syscallArgcTable['NtGdiStretchDIBitsInternal'] = 16
  2300. syscallArgcTable['NtUserSendInput'] = 3
  2301. syscallArgcTable['NtUserGetThreadDesktop'] = 1
  2302. syscallArgcTable['NtGdiCreateRectRgn'] = 4
  2303. syscallArgcTable['NtGdiGetDIBitsInternal'] = 9
  2304. syscallArgcTable['NtUserGetUpdateRgn'] = 3
  2305. syscallArgcTable['NtGdiDeleteClientObj'] = 1
  2306. syscallArgcTable['NtUserGetIconSize'] = 4
  2307. syscallArgcTable['NtUserFillWindow'] = 4
  2308. syscallArgcTable['NtGdiExtCreateRegion'] = 3
  2309. syscallArgcTable['NtGdiComputeXformCoefficients'] = 1
  2310. syscallArgcTable['NtUserSetWindowsHookEx'] = 6
  2311. syscallArgcTable['NtUserNotifyProcessCreate'] = 4
  2312. syscallArgcTable['NtGdiUnrealizeObject'] = 1
  2313. syscallArgcTable['NtUserGetTitleBarInfo'] = 2
  2314. syscallArgcTable['NtGdiRectangle'] = 5
  2315. syscallArgcTable['NtUserSetThreadDesktop'] = 1
  2316. syscallArgcTable['NtUserGetDCEx'] = 3
  2317. syscallArgcTable['NtUserGetScrollBarInfo'] = 3
  2318. syscallArgcTable['NtGdiGetTextExtent'] = 5
  2319. syscallArgcTable['NtUserSetWindowFNID'] = 2
  2320. syscallArgcTable['NtGdiSetLayout'] = 3
  2321. syscallArgcTable['NtUserCalcMenuBar'] = 5
  2322. syscallArgcTable['NtUserThunkedMenuItemInfo'] = 6
  2323. syscallArgcTable['NtGdiExcludeClipRect'] = 5
  2324. syscallArgcTable['NtGdiCreateDIBSection'] = 9
  2325. syscallArgcTable['NtGdiGetDCforBitmap'] = 1
  2326. syscallArgcTable['NtUserDestroyCursor'] = 2
  2327. syscallArgcTable['NtUserDestroyWindow'] = 1
  2328. syscallArgcTable['NtUserCallHwndParam'] = 3
  2329. syscallArgcTable['NtGdiCreateDIBitmapInternal'] = 11
  2330. syscallArgcTable['NtUserOpenWindowStation'] = 2
  2331. syscallArgcTable['NtUserSetCursorIconData'] = 4
  2332. syscallArgcTable['NtUserCloseDesktop'] = 1
  2333. syscallArgcTable['NtUserOpenDesktop'] = 3
  2334. syscallArgcTable['NtUserSetProcessWindowStation'] = 1
  2335. syscallArgcTable['NtUserGetAtomName'] = 2
  2336. syscallArgcTable['NtGdiExtCreatePen'] = 11
  2337. syscallArgcTable['NtGdiCreatePaletteInternal'] = 2
  2338. syscallArgcTable['NtGdiSetBrushOrg'] = 4
  2339. syscallArgcTable['NtUserBuildNameList'] = 4
  2340. syscallArgcTable['NtGdiSetPixel'] = 4
  2341. syscallArgcTable['NtUserRegisterClassExWOW'] = 7
  2342. syscallArgcTable['NtGdiCreatePatternBrushInternal'] = 3
  2343. syscallArgcTable['NtUserGetAncestor'] = 2
  2344. syscallArgcTable['NtGdiGetOutlineTextMetricsInternalW'] = 4
  2345. syscallArgcTable['NtGdiSetBitmapBits'] = 3
  2346. syscallArgcTable['NtUserCloseWindowStation'] = 1
  2347. syscallArgcTable['NtUserGetDoubleClickTime'] = 0
  2348. syscallArgcTable['NtUserEnableScrollBar'] = 3
  2349. syscallArgcTable['NtGdiCreateSolidBrush'] = 2
  2350. syscallArgcTable['NtUserGetClassInfoEx'] = 5
  2351. syscallArgcTable['NtGdiCreateClientObj'] = 1
  2352. syscallArgcTable['NtUserUnregisterClass'] = 3
  2353. syscallArgcTable['NtUserDeleteMenu'] = 3
  2354. syscallArgcTable['NtGdiRectInRegion'] = 2
  2355. syscallArgcTable['NtUserScrollWindowEx'] = 8
  2356. syscallArgcTable['NtGdiGetPixel'] = 3
  2357. syscallArgcTable['NtUserSetClassLong'] = 4
  2358. syscallArgcTable['NtUserGetMenuBarInfo'] = 4
  2359. syscallArgcTable['NtGdiGetNearestPaletteIndex'] = 2
  2360. syscallArgcTable['NtGdiGetCharWidthW'] = 6
  2361. syscallArgcTable['NtUserInvalidateRgn'] = 3
  2362. syscallArgcTable['NtUserGetClipboardOwner'] = 0
  2363. syscallArgcTable['NtUserSetWindowRgn'] = 3
  2364. syscallArgcTable['NtUserBitBltSysBmp'] = 5
  2365. syscallArgcTable['NtGdiGetCharWidthInfo'] = 2
  2366. syscallArgcTable['NtUserValidateRect'] = 2
  2367. syscallArgcTable['NtUserCloseClipboard'] = 0
  2368. syscallArgcTable['NtUserOpenClipboard'] = 2
  2369. syscallArgcTable['NtUserSetClipboardData'] = 3
  2370. syscallArgcTable['NtUserEnableMenuItem'] = 3
  2371. syscallArgcTable['NtUserAlterWindowStyle'] = 3
  2372. syscallArgcTable['NtGdiFillRgn'] = 3
  2373. syscallArgcTable['NtUserGetWindowPlacement'] = 2
  2374. syscallArgcTable['NtGdiModifyWorldTransform'] = 3
  2375. syscallArgcTable['NtGdiGetFontData'] = 5
  2376. syscallArgcTable['NtUserGetOpenClipboardWindow'] = 0
  2377. syscallArgcTable['NtUserSetThreadState'] = 2
  2378. syscallArgcTable['NtGdiOpenDCW'] = 9
  2379. syscallArgcTable['NtUserTrackMouseEvent'] = 1
  2380. syscallArgcTable['NtGdiGetTransform'] = 3
  2381. syscallArgcTable['NtUserDestroyMenu'] = 1
  2382. syscallArgcTable['NtGdiGetBitmapBits'] = 3
  2383. syscallArgcTable['NtUserConsoleControl'] = 3
  2384. syscallArgcTable['NtUserSetActiveWindow'] = 1
  2385. syscallArgcTable['NtUserSetInformationThread'] = 4
  2386. syscallArgcTable['NtUserSetWindowPlacement'] = 2
  2387. syscallArgcTable['NtUserGetControlColor'] = 4
  2388. syscallArgcTable['NtGdiSetMetaRgn'] = 1
  2389. syscallArgcTable['NtGdiSetMiterLimit'] = 3
  2390. syscallArgcTable['NtGdiSetVirtualResolution'] = 5
  2391. syscallArgcTable['NtGdiGetRasterizerCaps'] = 2
  2392. syscallArgcTable['NtUserSetWindowWord'] = 3
  2393. syscallArgcTable['NtUserGetClipboardFormatName'] = 3
  2394. syscallArgcTable['NtUserRealInternalGetMessage'] = 6
  2395. syscallArgcTable['NtUserCreateLocalMemHandle'] = 4
  2396. syscallArgcTable['NtUserAttachThreadInput'] = 3
  2397. syscallArgcTable['NtGdiCreateHalftonePalette'] = 1
  2398. syscallArgcTable['NtUserPaintMenuBar'] = 6
  2399. syscallArgcTable['NtUserSetKeyboardState'] = 1
  2400. syscallArgcTable['NtGdiCombineTransform'] = 3
  2401. syscallArgcTable['NtUserCreateAcceleratorTable'] = 2
  2402. syscallArgcTable['NtUserGetCursorFrameInfo'] = 4
  2403. syscallArgcTable['NtUserGetAltTabInfo'] = 6
  2404. syscallArgcTable['NtUserGetCaretBlinkTime'] = 0
  2405. syscallArgcTable['NtGdiQueryFontAssocInfo'] = 1
  2406. syscallArgcTable['NtUserProcessConnect'] = 2
  2407. syscallArgcTable['NtUserEnumDisplayDevices'] = 4
  2408. syscallArgcTable['NtUserEmptyClipboard'] = 0
  2409. syscallArgcTable['NtUserGetClipboardData'] = 2
  2410. syscallArgcTable['NtUserRemoveMenu'] = 3
  2411. syscallArgcTable['NtGdiSetBoundsRect'] = 3
  2412. syscallArgcTable['NtGdiGetBitmapDimension'] = 2
  2413. syscallArgcTable['NtUserConvertMemHandle'] = 2
  2414. syscallArgcTable['NtUserDestroyAcceleratorTable'] = 1
  2415. syscallArgcTable['NtUserGetGUIThreadInfo'] = 2
  2416. syscallArgcTable['NtGdiCloseFigure'] = 1
  2417. syscallArgcTable['NtUserSetWindowsHookAW'] = 3
  2418. syscallArgcTable['NtUserSetMenuDefaultItem'] = 3
  2419. syscallArgcTable['NtUserCheckMenuItem'] = 3
  2420. syscallArgcTable['NtUserSetWinEventHook'] = 8
  2421. syscallArgcTable['NtUserUnhookWinEvent'] = 1
  2422. syscallArgcTable['NtUserLockWindowUpdate'] = 1
  2423. syscallArgcTable['NtUserSetSystemMenu'] = 2
  2424. syscallArgcTable['NtUserThunkedMenuInfo'] = 2
  2425. syscallArgcTable['NtGdiBeginPath'] = 1
  2426. syscallArgcTable['NtGdiEndPath'] = 1
  2427. syscallArgcTable['NtGdiFillPath'] = 1
  2428. syscallArgcTable['NtUserCallHwnd'] = 2
  2429. syscallArgcTable['NtUserDdeInitialize'] = 5
  2430. syscallArgcTable['NtUserModifyUserStartupInfoFlags'] = 2
  2431. syscallArgcTable['NtUserCountClipboardFormats'] = 0
  2432. syscallArgcTable['NtGdiAddFontMemResourceEx'] = 5
  2433. syscallArgcTable['NtGdiEqualRgn'] = 2
  2434. syscallArgcTable['NtGdiGetSystemPaletteUse'] = 1
  2435. syscallArgcTable['NtGdiRemoveFontMemResourceEx'] = 1
  2436. syscallArgcTable['NtUserEnumDisplaySettings'] = 4
  2437. syscallArgcTable['NtUserPaintDesktop'] = 1
  2438. syscallArgcTable['NtGdiExtEscape'] = 8
  2439. syscallArgcTable['NtGdiSetBitmapDimension'] = 4
  2440. syscallArgcTable['NtGdiSetFontEnumeration'] = 1
  2441. syscallArgcTable['NtUserChangeClipboardChain'] = 2
  2442. syscallArgcTable['NtUserSetClipboardViewer'] = 1
  2443. syscallArgcTable['NtUserShowWindowAsync'] = 2
  2444. syscallArgcTable['NtGdiCreateColorSpace'] = 1
  2445. syscallArgcTable['NtGdiDeleteColorSpace'] = 1
  2446. syscallArgcTable['NtUserActivateKeyboardLayout'] = 2
  2447. syscallArgcTable['NtBindCompositionSurface'] = 5
  2448. syscallArgcTable['NtCloseCompositionInputSink'] = 1
  2449. syscallArgcTable['NtCompositionInputThread'] = 4
  2450. syscallArgcTable['NtCompositionSetDropTarget'] = 3
  2451. syscallArgcTable['NtCreateCompositionInputSink'] = 2
  2452. syscallArgcTable['NtCreateCompositionSurfaceHandle'] = 3
  2453. syscallArgcTable['NtCreateImplicitCompositionInputSink'] = 2
  2454. syscallArgcTable['NtDCompositionAddCrossDeviceVisualChild'] = 7
  2455. syscallArgcTable['NtDCompositionBeginFrame'] = 3
  2456. syscallArgcTable['NtDCompositionCommitChannel'] = 5
  2457. syscallArgcTable['NtDCompositionCommitSynchronizationObject'] = 1
  2458. syscallArgcTable['NtDCompositionConfirmFrame'] = 2
  2459. syscallArgcTable['NtDCompositionConnectPipe'] = 3
  2460. syscallArgcTable['NtDCompositionCreateAndBindSharedSection'] = 4
  2461. syscallArgcTable['NtDCompositionCreateChannel'] = 3
  2462. syscallArgcTable['NtDCompositionCreateConnection'] = 2
  2463. syscallArgcTable['NtDCompositionCreateDwmChannel'] = 1
  2464. syscallArgcTable['NtDCompositionCreateSharedVisualHandle'] = 1
  2465. syscallArgcTable['NtDCompositionCreateSynchronizationObject'] = 1
  2466. syscallArgcTable['NtDCompositionDestroyChannel'] = 1
  2467. syscallArgcTable['NtDCompositionDestroyConnection'] = 1
  2468. syscallArgcTable['NtDCompositionDiscardFrame'] = 2
  2469. syscallArgcTable['NtDCompositionDuplicateHandleToProcess'] = 3
  2470. syscallArgcTable['NtDCompositionDuplicateSwapchainHandleToDwm'] = 2
  2471. syscallArgcTable['NtDCompositionEnableDDASupport'] = 0
  2472. syscallArgcTable['NtDCompositionEnableMMCSS'] = 1
  2473. syscallArgcTable['NtDCompositionGetBatchId'] = 3
  2474. syscallArgcTable['NtDCompositionGetChannels'] = 4
  2475. syscallArgcTable['NtDCompositionGetConnectionBatch'] = 4
  2476. syscallArgcTable['NtDCompositionGetDeletedResources'] = 4
  2477. syscallArgcTable['NtDCompositionGetFrameLegacyTokens'] = 3
  2478. syscallArgcTable['NtDCompositionGetFrameStatistics'] = 2
  2479. syscallArgcTable['NtDCompositionGetFrameSurfaceUpdates'] = 3
  2480. syscallArgcTable['NtDCompositionProcessChannelBatchBuffer'] = 4
  2481. syscallArgcTable['NtDCompositionReferenceSharedResourceOnDwmChannel'] = 5
  2482. syscallArgcTable['NtDCompositionRegisterThumbnailVisual'] = 9
  2483. syscallArgcTable['NtDCompositionRegisterVirtualDesktopVisual'] = 3
  2484. syscallArgcTable['NtDCompositionReleaseAllResources'] = 2
  2485. syscallArgcTable['NtDCompositionRemoveCrossDeviceVisualChild'] = 4
  2486. syscallArgcTable['NtDCompositionRetireFrame'] = 3
  2487. syscallArgcTable['NtDCompositionSetChannelCallbackId'] = 3
  2488. syscallArgcTable['NtDCompositionSetChannelCommitCompletionEvent'] = 3
  2489. syscallArgcTable['NtDCompositionSetChildRootVisual'] = 2
  2490. syscallArgcTable['NtDCompositionSetDebugCounter'] = 2
  2491. syscallArgcTable['NtDCompositionSubmitDWMBatch'] = 3
  2492. syscallArgcTable['NtDCompositionSuspendAnimations'] = 2
  2493. syscallArgcTable['NtDCompositionSynchronize'] = 2
  2494. syscallArgcTable['NtDCompositionTelemetryAnimationScenarioBegin'] = 3
  2495. syscallArgcTable['NtDCompositionTelemetryAnimationScenarioReference'] = 3
  2496. syscallArgcTable['NtDCompositionTelemetryAnimationScenarioUnreference'] = 3
  2497. syscallArgcTable['NtDCompositionTelemetrySetApplicationId'] = 3
  2498. syscallArgcTable['NtDCompositionTelemetryTouchInteractionBegin'] = 3
  2499. syscallArgcTable['NtDCompositionTelemetryTouchInteractionEnd'] = 2
  2500. syscallArgcTable['NtDCompositionTelemetryTouchInteractionUpdate'] = 3
  2501. syscallArgcTable['NtDCompositionUpdatePointerCapture'] = 2
  2502. syscallArgcTable['NtDCompositionWaitForChannel'] = 2
  2503. syscallArgcTable['NtDWMBindCursorToOutputConfig'] = 1
  2504. syscallArgcTable['NtDWMCommitInputSystemOutputConfig'] = 0
  2505. syscallArgcTable['NtDWMSetCursorOrientation'] = 1
  2506. syscallArgcTable['NtDWMSetInputSystemOutputConfig'] = 3
  2507. syscallArgcTable['NtDesktopCaptureBits'] = 8
  2508. syscallArgcTable['NtDuplicateCompositionInputSink'] = 2
  2509. syscallArgcTable['NtDxgkGetProcessList'] = 1
  2510. syscallArgcTable['NtDxgkRegisterVailProcess'] = 1
  2511. syscallArgcTable['NtDxgkSubmitPresentBltToHwQueue'] = 1
  2512. syscallArgcTable['NtDxgkVailConnect'] = 0
  2513. syscallArgcTable['NtDxgkVailDisconnect'] = 0
  2514. syscallArgcTable['NtDxgkVailPromoteCompositionSurface'] = 2
  2515. syscallArgcTable['NtEnableOneCoreTransformMode'] = 0
  2516. syscallArgcTable['NtFlipObjectAddContent'] = 4
  2517. syscallArgcTable['NtFlipObjectAddPoolBuffer'] = 6
  2518. syscallArgcTable['NtFlipObjectConsumerAcquirePresent'] = 5
  2519. syscallArgcTable['NtFlipObjectConsumerAdjustUsageReference'] = 3
  2520. syscallArgcTable['NtFlipObjectConsumerBeginProcessPresent'] = 3
  2521. syscallArgcTable['NtFlipObjectConsumerEndProcessPresent'] = 1
  2522. syscallArgcTable['NtFlipObjectConsumerPostMessage'] = 3
  2523. syscallArgcTable['NtFlipObjectConsumerQueryBufferInfo'] = 4
  2524. syscallArgcTable['NtFlipObjectCreate'] = 3
  2525. syscallArgcTable['NtFlipObjectDisconnectEndpoint'] = 2
  2526. syscallArgcTable['NtFlipObjectOpen'] = 4
  2527. syscallArgcTable['NtFlipObjectQueryBufferAvailableEvent'] = 3
  2528. syscallArgcTable['NtFlipObjectQueryEndpointConnected'] = 3
  2529. syscallArgcTable['NtFlipObjectQueryNextMessageToProducer'] = 2
  2530. syscallArgcTable['NtFlipObjectReadNextMessageToProducer'] = 3
  2531. syscallArgcTable['NtFlipObjectRemoveContent'] = 2
  2532. syscallArgcTable['NtFlipObjectRemovePoolBuffer'] = 2
  2533. syscallArgcTable['NtFlipObjectSetContent'] = 5
  2534. syscallArgcTable['NtGdiAbortDoc'] = 1
  2535. syscallArgcTable['NtGdiAbortPath'] = 1
  2536. syscallArgcTable['NtGdiAddEmbFontToDC'] = 2
  2537. syscallArgcTable['NtGdiAddFontResourceW'] = 6
  2538. syscallArgcTable['NtGdiAddInitialFonts'] = 0
  2539. syscallArgcTable['NtGdiAddRemoteFontToDC'] = 4
  2540. syscallArgcTable['NtGdiAddRemoteMMInstanceToDC'] = 3
  2541. syscallArgcTable['NtGdiAngleArc'] = 6
  2542. syscallArgcTable['NtGdiAnyLinkedFonts'] = 0
  2543. syscallArgcTable['NtGdiArcInternal'] = 10
  2544. syscallArgcTable['NtGdiBRUSHOBJ_DeleteRbrush'] = 2
  2545. syscallArgcTable['NtGdiBRUSHOBJ_hGetColorTransform'] = 1
  2546. syscallArgcTable['NtGdiBRUSHOBJ_pvAllocRbrush'] = 2
  2547. syscallArgcTable['NtGdiBRUSHOBJ_pvGetRbrush'] = 1
  2548. syscallArgcTable['NtGdiBRUSHOBJ_ulGetBrushColor'] = 1
  2549. syscallArgcTable['NtGdiBeginGdiRendering'] = 3
  2550. syscallArgcTable['NtGdiCLIPOBJ_bEnum'] = 3
  2551. syscallArgcTable['NtGdiCLIPOBJ_cEnumStart'] = 5
  2552. syscallArgcTable['NtGdiCLIPOBJ_ppoGetPath'] = 1
  2553. syscallArgcTable['NtGdiCancelDC'] = 1
  2554. syscallArgcTable['NtGdiChangeGhostFont'] = 2
  2555. syscallArgcTable['NtGdiCheckBitmapBits'] = 8
  2556. syscallArgcTable['NtGdiClearBitmapAttributes'] = 2
  2557. syscallArgcTable['NtGdiClearBrushAttributes'] = 2
  2558. syscallArgcTable['NtGdiColorCorrectPalette'] = 6
  2559. syscallArgcTable['NtGdiConfigureOPMProtectedOutput'] = 4
  2560. syscallArgcTable['NtGdiConvertMetafileRect'] = 2
  2561. syscallArgcTable['NtGdiCreateBitmapFromDxSurface'] = 5
  2562. syscallArgcTable['NtGdiCreateBitmapFromDxSurface2'] = 7
  2563. syscallArgcTable['NtGdiCreateColorTransform'] = 8
  2564. syscallArgcTable['NtGdiCreateEllipticRgn'] = 4
  2565. syscallArgcTable['NtGdiCreateHatchBrushInternal'] = 3
  2566. syscallArgcTable['NtGdiCreateMetafileDC'] = 1
  2567. syscallArgcTable['NtGdiCreateOPMProtectedOutput'] = 2
  2568. syscallArgcTable['NtGdiCreateOPMProtectedOutputs'] = 5
  2569. syscallArgcTable['NtGdiCreateRoundRectRgn'] = 6
  2570. syscallArgcTable['NtGdiCreateServerMetaFile'] = 6
  2571. syscallArgcTable['NtGdiCreateSessionMappedDIBSection'] = 8
  2572. syscallArgcTable['NtGdiDDCCIGetCapabilitiesString'] = 3
  2573. syscallArgcTable['NtGdiDDCCIGetCapabilitiesStringLength'] = 2
  2574. syscallArgcTable['NtGdiDDCCIGetTimingReport'] = 2
  2575. syscallArgcTable['NtGdiDDCCIGetVCPFeature'] = 5
  2576. syscallArgcTable['NtGdiDDCCISaveCurrentSettings'] = 1
  2577. syscallArgcTable['NtGdiDDCCISetVCPFeature'] = 3
  2578. syscallArgcTable['NtGdiDdCreateFullscreenSprite'] = 4
  2579. syscallArgcTable['NtGdiDdDDIAbandonSwapChain'] = 1
  2580. syscallArgcTable['NtGdiDdDDIAcquireKeyedMutex'] = 1
  2581. syscallArgcTable['NtGdiDdDDIAcquireKeyedMutex2'] = 1
  2582. syscallArgcTable['NtGdiDdDDIAcquireSwapChain'] = 1
  2583. syscallArgcTable['NtGdiDdDDIAddSurfaceToSwapChain'] = 1
  2584. syscallArgcTable['NtGdiDdDDIAdjustFullscreenGamma'] = 1
  2585. syscallArgcTable['NtGdiDdDDICacheHybridQueryValue'] = 1
  2586. syscallArgcTable['NtGdiDdDDIChangeVideoMemoryReservation'] = 1
  2587. syscallArgcTable['NtGdiDdDDICheckExclusiveOwnership'] = 0
  2588. syscallArgcTable['NtGdiDdDDICheckMonitorPowerState'] = 1
  2589. syscallArgcTable['NtGdiDdDDICheckMultiPlaneOverlaySupport'] = 1
  2590. syscallArgcTable['NtGdiDdDDICheckMultiPlaneOverlaySupport2'] = 1
  2591. syscallArgcTable['NtGdiDdDDICheckMultiPlaneOverlaySupport3'] = 1
  2592. syscallArgcTable['NtGdiDdDDICheckOcclusion'] = 1
  2593. syscallArgcTable['NtGdiDdDDICheckSharedResourceAccess'] = 1
  2594. syscallArgcTable['NtGdiDdDDICheckVidPnExclusiveOwnership'] = 1
  2595. syscallArgcTable['NtGdiDdDDICloseAdapter'] = 1
  2596. syscallArgcTable['NtGdiDdDDIConfigureSharedResource'] = 1
  2597. syscallArgcTable['NtGdiDdDDICreateAllocation'] = 1
  2598. syscallArgcTable['NtGdiDdDDICreateBundleObject'] = 1
  2599. syscallArgcTable['NtGdiDdDDICreateContext'] = 1
  2600. syscallArgcTable['NtGdiDdDDICreateContextVirtual'] = 1
  2601. syscallArgcTable['NtGdiDdDDICreateDCFromMemory'] = 1
  2602. syscallArgcTable['NtGdiDdDDICreateDevice'] = 1
  2603. syscallArgcTable['NtGdiDdDDICreateHwContext'] = 1
  2604. syscallArgcTable['NtGdiDdDDICreateHwQueue'] = 1
  2605. syscallArgcTable['NtGdiDdDDICreateKeyedMutex'] = 1
  2606. syscallArgcTable['NtGdiDdDDICreateKeyedMutex2'] = 1
  2607. syscallArgcTable['NtGdiDdDDICreateOutputDupl'] = 1
  2608. syscallArgcTable['NtGdiDdDDICreateOverlay'] = 1
  2609. syscallArgcTable['NtGdiDdDDICreatePagingQueue'] = 1
  2610. syscallArgcTable['NtGdiDdDDICreateProtectedSession'] = 1
  2611. syscallArgcTable['NtGdiDdDDICreateSwapChain'] = 1
  2612. syscallArgcTable['NtGdiDdDDICreateSynchronizationObject'] = 1
  2613. syscallArgcTable['NtGdiDdDDIDDisplayEnum'] = 1
  2614. syscallArgcTable['NtGdiDdDDIDestroyAllocation'] = 1
  2615. syscallArgcTable['NtGdiDdDDIDestroyAllocation2'] = 1
  2616. syscallArgcTable['NtGdiDdDDIDestroyContext'] = 1
  2617. syscallArgcTable['NtGdiDdDDIDestroyDCFromMemory'] = 1
  2618. syscallArgcTable['NtGdiDdDDIDestroyDevice'] = 1
  2619. syscallArgcTable['NtGdiDdDDIDestroyHwContext'] = 1
  2620. syscallArgcTable['NtGdiDdDDIDestroyHwQueue'] = 1
  2621. syscallArgcTable['NtGdiDdDDIDestroyKeyedMutex'] = 1
  2622. syscallArgcTable['NtGdiDdDDIDestroyOutputDupl'] = 1
  2623. syscallArgcTable['NtGdiDdDDIDestroyOverlay'] = 1
  2624. syscallArgcTable['NtGdiDdDDIDestroyPagingQueue'] = 1
  2625. syscallArgcTable['NtGdiDdDDIDestroyProtectedSession'] = 1
  2626. syscallArgcTable['NtGdiDdDDIDestroySynchronizationObject'] = 1
  2627. syscallArgcTable['NtGdiDdDDIDispMgrCreate'] = 1
  2628. syscallArgcTable['NtGdiDdDDIDispMgrSourceOperation'] = 1
  2629. syscallArgcTable['NtGdiDdDDIDispMgrTargetOperation'] = 1
  2630. syscallArgcTable['NtGdiDdDDIEnumAdapters'] = 1
  2631. syscallArgcTable['NtGdiDdDDIEnumAdapters2'] = 1
  2632. syscallArgcTable['NtGdiDdDDIEscape'] = 1
  2633. syscallArgcTable['NtGdiDdDDIEvict'] = 1
  2634. syscallArgcTable['NtGdiDdDDIExtractBundleObject'] = 1
  2635. syscallArgcTable['NtGdiDdDDIFlipOverlay'] = 1
  2636. syscallArgcTable['NtGdiDdDDIFlushHeapTransitions'] = 1
  2637. syscallArgcTable['NtGdiDdDDIFreeGpuVirtualAddress'] = 1
  2638. syscallArgcTable['NtGdiDdDDIGetAllocationPriority'] = 1
  2639. syscallArgcTable['NtGdiDdDDIGetCachedHybridQueryValue'] = 1
  2640. syscallArgcTable['NtGdiDdDDIGetContextInProcessSchedulingPriority'] = 1
  2641. syscallArgcTable['NtGdiDdDDIGetContextSchedulingPriority'] = 1
  2642. syscallArgcTable['NtGdiDdDDIGetDWMVerticalBlankEvent'] = 1
  2643. syscallArgcTable['NtGdiDdDDIGetDeviceState'] = 1
  2644. syscallArgcTable['NtGdiDdDDIGetDisplayModeList'] = 1
  2645. syscallArgcTable['NtGdiDdDDIGetMemoryBudgetTarget'] = 1
  2646. syscallArgcTable['NtGdiDdDDIGetMultiPlaneOverlayCaps'] = 1
  2647. syscallArgcTable['NtGdiDdDDIGetMultisampleMethodList'] = 1
  2648. syscallArgcTable['NtGdiDdDDIGetOverlayState'] = 1
  2649. syscallArgcTable['NtGdiDdDDIGetPostCompositionCaps'] = 1
  2650. syscallArgcTable['NtGdiDdDDIGetPresentHistory'] = 1
  2651. syscallArgcTable['NtGdiDdDDIGetPresentQueueEvent'] = 2
  2652. syscallArgcTable['NtGdiDdDDIGetProcessDeviceRemovalSupport'] = 1
  2653. syscallArgcTable['NtGdiDdDDIGetProcessSchedulingPriorityBand'] = 1
  2654. syscallArgcTable['NtGdiDdDDIGetProcessSchedulingPriorityClass'] = 2
  2655. syscallArgcTable['NtGdiDdDDIGetResourcePresentPrivateDriverData'] = 1
  2656. syscallArgcTable['NtGdiDdDDIGetRuntimeData'] = 1
  2657. syscallArgcTable['NtGdiDdDDIGetScanLine'] = 1
  2658. syscallArgcTable['NtGdiDdDDIGetSetSwapChainMetadata'] = 1
  2659. syscallArgcTable['NtGdiDdDDIGetSharedPrimaryHandle'] = 1
  2660. syscallArgcTable['NtGdiDdDDIGetSharedResourceAdapterLuid'] = 1
  2661. syscallArgcTable['NtGdiDdDDIGetYieldPercentage'] = 1
  2662. syscallArgcTable['NtGdiDdDDIInvalidateActiveVidPn'] = 1
  2663. syscallArgcTable['NtGdiDdDDIInvalidateCache'] = 1
  2664. syscallArgcTable['NtGdiDdDDILock'] = 1
  2665. syscallArgcTable['NtGdiDdDDILock2'] = 1
  2666. syscallArgcTable['NtGdiDdDDIMakeResident'] = 1
  2667. syscallArgcTable['NtGdiDdDDIMapGpuVirtualAddress'] = 1
  2668. syscallArgcTable['NtGdiDdDDIMarkDeviceAsError'] = 1
  2669. syscallArgcTable['NtGdiDdDDINetDispGetNextChunkInfo'] = 7
  2670. syscallArgcTable['NtGdiDdDDINetDispQueryMiracastDisplayDeviceStatus'] = 2
  2671. syscallArgcTable['NtGdiDdDDINetDispQueryMiracastDisplayDeviceSupport'] = 1
  2672. syscallArgcTable['NtGdiDdDDINetDispStartMiracastDisplayDevice'] = 1
  2673. syscallArgcTable['NtGdiDdDDINetDispStopMiracastDisplayDevice'] = 2
  2674. syscallArgcTable['NtGdiDdDDINetDispStopSessions'] = 1
  2675. syscallArgcTable['NtGdiDdDDIOfferAllocations'] = 1
  2676. syscallArgcTable['NtGdiDdDDIOpenAdapterFromDeviceName'] = 1
  2677. syscallArgcTable['NtGdiDdDDIOpenAdapterFromHdc'] = 1
  2678. syscallArgcTable['NtGdiDdDDIOpenAdapterFromLuid'] = 1
  2679. syscallArgcTable['NtGdiDdDDIOpenBundleObjectNtHandleFromName'] = 1
  2680. syscallArgcTable['NtGdiDdDDIOpenKeyedMutex'] = 1
  2681. syscallArgcTable['NtGdiDdDDIOpenKeyedMutex2'] = 1
  2682. syscallArgcTable['NtGdiDdDDIOpenKeyedMutexFromNtHandle'] = 1
  2683. syscallArgcTable['NtGdiDdDDIOpenNtHandleFromName'] = 1
  2684. syscallArgcTable['NtGdiDdDDIOpenProtectedSessionFromNtHandle'] = 1
  2685. syscallArgcTable['NtGdiDdDDIOpenResource'] = 1
  2686. syscallArgcTable['NtGdiDdDDIOpenResourceFromNtHandle'] = 1
  2687. syscallArgcTable['NtGdiDdDDIOpenSwapChain'] = 1
  2688. syscallArgcTable['NtGdiDdDDIOpenSyncObjectFromNtHandle'] = 1
  2689. syscallArgcTable['NtGdiDdDDIOpenSyncObjectFromNtHandle2'] = 1
  2690. syscallArgcTable['NtGdiDdDDIOpenSyncObjectNtHandleFromName'] = 1
  2691. syscallArgcTable['NtGdiDdDDIOpenSynchronizationObject'] = 1
  2692. syscallArgcTable['NtGdiDdDDIOutputDuplGetFrameInfo'] = 1
  2693. syscallArgcTable['NtGdiDdDDIOutputDuplGetMetaData'] = 1
  2694. syscallArgcTable['NtGdiDdDDIOutputDuplGetPointerShapeData'] = 1
  2695. syscallArgcTable['NtGdiDdDDIOutputDuplPresent'] = 1
  2696. syscallArgcTable['NtGdiDdDDIOutputDuplReleaseFrame'] = 1
  2697. syscallArgcTable['NtGdiDdDDIPinDirectFlipResources'] = 1
  2698. syscallArgcTable['NtGdiDdDDIPollDisplayChildren'] = 1
  2699. syscallArgcTable['NtGdiDdDDIPresent'] = 1
  2700. syscallArgcTable['NtGdiDdDDIPresentMultiPlaneOverlay'] = 1
  2701. syscallArgcTable['NtGdiDdDDIPresentMultiPlaneOverlay2'] = 1
  2702. syscallArgcTable['NtGdiDdDDIPresentMultiPlaneOverlay3'] = 1
  2703. syscallArgcTable['NtGdiDdDDIPresentRedirected'] = 1
  2704. syscallArgcTable['NtGdiDdDDIQueryAdapterInfo'] = 1
  2705. syscallArgcTable['NtGdiDdDDIQueryAllocationResidency'] = 1
  2706. syscallArgcTable['NtGdiDdDDIQueryClockCalibration'] = 1
  2707. syscallArgcTable['NtGdiDdDDIQueryFSEBlock'] = 1
  2708. syscallArgcTable['NtGdiDdDDIQueryProcessOfferInfo'] = 1
  2709. syscallArgcTable['NtGdiDdDDIQueryProtectedSessionInfoFromNtHandle'] = 1
  2710. syscallArgcTable['NtGdiDdDDIQueryProtectedSessionStatus'] = 1
  2711. syscallArgcTable['NtGdiDdDDIQueryRemoteVidPnSourceFromGdiDisplayName'] = 1
  2712. syscallArgcTable['NtGdiDdDDIQueryResourceInfo'] = 1
  2713. syscallArgcTable['NtGdiDdDDIQueryResourceInfoFromNtHandle'] = 1
  2714. syscallArgcTable['NtGdiDdDDIQueryStatistics'] = 1
  2715. syscallArgcTable['NtGdiDdDDIQueryVidPnExclusiveOwnership'] = 1
  2716. syscallArgcTable['NtGdiDdDDIQueryVideoMemoryInfo'] = 1
  2717. syscallArgcTable['NtGdiDdDDIReclaimAllocations'] = 1
  2718. syscallArgcTable['NtGdiDdDDIReclaimAllocations2'] = 1
  2719. syscallArgcTable['NtGdiDdDDIReleaseKeyedMutex'] = 1
  2720. syscallArgcTable['NtGdiDdDDIReleaseKeyedMutex2'] = 1
  2721. syscallArgcTable['NtGdiDdDDIReleaseProcessVidPnSourceOwners'] = 1
  2722. syscallArgcTable['NtGdiDdDDIReleaseSwapChain'] = 1
  2723. syscallArgcTable['NtGdiDdDDIRemoveSurfaceFromSwapChain'] = 1
  2724. syscallArgcTable['NtGdiDdDDIRender'] = 1
  2725. syscallArgcTable['NtGdiDdDDIReserveGpuVirtualAddress'] = 1
  2726. syscallArgcTable['NtGdiDdDDISetAllocationPriority'] = 1
  2727. syscallArgcTable['NtGdiDdDDISetContextInProcessSchedulingPriority'] = 1
  2728. syscallArgcTable['NtGdiDdDDISetContextSchedulingPriority'] = 1
  2729. syscallArgcTable['NtGdiDdDDISetDisplayMode'] = 1
  2730. syscallArgcTable['NtGdiDdDDISetDisplayPrivateDriverFormat'] = 1
  2731. syscallArgcTable['NtGdiDdDDISetDodIndirectSwapchain'] = 1
  2732. syscallArgcTable['NtGdiDdDDISetFSEBlock'] = 1
  2733. syscallArgcTable['NtGdiDdDDISetGammaRamp'] = 1
  2734. syscallArgcTable['NtGdiDdDDISetHwProtectionTeardownRecovery'] = 1
  2735. syscallArgcTable['NtGdiDdDDISetMemoryBudgetTarget'] = 1
  2736. syscallArgcTable['NtGdiDdDDISetMonitorColorSpaceTransform'] = 1
  2737. syscallArgcTable['NtGdiDdDDISetProcessDeviceRemovalSupport'] = 1
  2738. syscallArgcTable['NtGdiDdDDISetProcessSchedulingPriorityBand'] = 1
  2739. syscallArgcTable['NtGdiDdDDISetProcessSchedulingPriorityClass'] = 2
  2740. syscallArgcTable['NtGdiDdDDISetQueuedLimit'] = 1
  2741. syscallArgcTable['NtGdiDdDDISetStablePowerState'] = 1
  2742. syscallArgcTable['NtGdiDdDDISetStereoEnabled'] = 1
  2743. syscallArgcTable['NtGdiDdDDISetSyncRefreshCountWaitTarget'] = 1
  2744. syscallArgcTable['NtGdiDdDDISetVidPnSourceHwProtection'] = 1
  2745. syscallArgcTable['NtGdiDdDDISetVidPnSourceOwner'] = 1
  2746. syscallArgcTable['NtGdiDdDDISetYieldPercentage'] = 1
  2747. syscallArgcTable['NtGdiDdDDIShareObjects'] = 5
  2748. syscallArgcTable['NtGdiDdDDISharedPrimaryLockNotification'] = 1
  2749. syscallArgcTable['NtGdiDdDDISharedPrimaryUnLockNotification'] = 1
  2750. syscallArgcTable['NtGdiDdDDISignalSynchronizationObject'] = 1
  2751. syscallArgcTable['NtGdiDdDDISignalSynchronizationObjectFromCpu'] = 1
  2752. syscallArgcTable['NtGdiDdDDISignalSynchronizationObjectFromGpu'] = 1
  2753. syscallArgcTable['NtGdiDdDDISignalSynchronizationObjectFromGpu2'] = 1
  2754. syscallArgcTable['NtGdiDdDDISubmitCommand'] = 1
  2755. syscallArgcTable['NtGdiDdDDISubmitCommandToHwQueue'] = 1
  2756. syscallArgcTable['NtGdiDdDDISubmitSignalSyncObjectsToHwQueue'] = 1
  2757. syscallArgcTable['NtGdiDdDDISubmitWaitForSyncObjectsToHwQueue'] = 1
  2758. syscallArgcTable['NtGdiDdDDITrimProcessCommitment'] = 1
  2759. syscallArgcTable['NtGdiDdDDIUnOrderedPresentSwapChain'] = 1
  2760. syscallArgcTable['NtGdiDdDDIUnlock'] = 1
  2761. syscallArgcTable['NtGdiDdDDIUnlock2'] = 1
  2762. syscallArgcTable['NtGdiDdDDIUnpinDirectFlipResources'] = 1
  2763. syscallArgcTable['NtGdiDdDDIUpdateAllocationProperty'] = 1
  2764. syscallArgcTable['NtGdiDdDDIUpdateGpuVirtualAddress'] = 1
  2765. syscallArgcTable['NtGdiDdDDIUpdateOverlay'] = 1
  2766. syscallArgcTable['NtGdiDdDDIWaitForIdle'] = 1
  2767. syscallArgcTable['NtGdiDdDDIWaitForSynchronizationObject'] = 1
  2768. syscallArgcTable['NtGdiDdDDIWaitForSynchronizationObjectFromCpu'] = 1
  2769. syscallArgcTable['NtGdiDdDDIWaitForSynchronizationObjectFromGpu'] = 1
  2770. syscallArgcTable['NtGdiDdDDIWaitForVerticalBlankEvent'] = 1
  2771. syscallArgcTable['NtGdiDdDDIWaitForVerticalBlankEvent2'] = 1
  2772. syscallArgcTable['NtGdiDdDestroyFullscreenSprite'] = 2
  2773. syscallArgcTable['NtGdiDdNotifyFullscreenSpriteUpdate'] = 2
  2774. syscallArgcTable['NtGdiDdQueryVisRgnUniqueness'] = 0
  2775. syscallArgcTable['NtGdiDeleteColorTransform'] = 2
  2776. syscallArgcTable['NtGdiDescribePixelFormat'] = 4
  2777. syscallArgcTable['NtGdiDestroyOPMProtectedOutput'] = 1
  2778. syscallArgcTable['NtGdiDestroyPhysicalMonitor'] = 1
  2779. syscallArgcTable['NtGdiDoBanding'] = 4
  2780. syscallArgcTable['NtGdiDrawEscape'] = 4
  2781. syscallArgcTable['NtGdiDwmCreatedBitmapRemotingOutput'] = 0
  2782. syscallArgcTable['NtGdiEllipse'] = 5
  2783. syscallArgcTable['NtGdiEnableEudc'] = 1
  2784. syscallArgcTable['NtGdiEndDoc'] = 1
  2785. syscallArgcTable['NtGdiEndGdiRendering'] = 4
  2786. syscallArgcTable['NtGdiEndPage'] = 1
  2787. syscallArgcTable['NtGdiEngAlphaBlend'] = 7
  2788. syscallArgcTable['NtGdiEngAssociateSurface'] = 3
  2789. syscallArgcTable['NtGdiEngBitBlt'] = 11
  2790. syscallArgcTable['NtGdiEngCheckAbort'] = 1
  2791. syscallArgcTable['NtGdiEngComputeGlyphSet'] = 3
  2792. syscallArgcTable['NtGdiEngCopyBits'] = 6
  2793. syscallArgcTable['NtGdiEngCreateBitmap'] = 6
  2794. syscallArgcTable['NtGdiEngCreateClip'] = 0
  2795. syscallArgcTable['NtGdiEngCreateDeviceBitmap'] = 4
  2796. syscallArgcTable['NtGdiEngCreateDeviceSurface'] = 4
  2797. syscallArgcTable['NtGdiEngCreatePalette'] = 6
  2798. syscallArgcTable['NtGdiEngDeleteClip'] = 1
  2799. syscallArgcTable['NtGdiEngDeletePalette'] = 1
  2800. syscallArgcTable['NtGdiEngDeletePath'] = 1
  2801. syscallArgcTable['NtGdiEngDeleteSurface'] = 1
  2802. syscallArgcTable['NtGdiEngEraseSurface'] = 3
  2803. syscallArgcTable['NtGdiEngFillPath'] = 7
  2804. syscallArgcTable['NtGdiEngGradientFill'] = 10
  2805. syscallArgcTable['NtGdiEngLineTo'] = 9
  2806. syscallArgcTable['NtGdiEngLockSurface'] = 1
  2807. syscallArgcTable['NtGdiEngMarkBandingSurface'] = 1
  2808. syscallArgcTable['NtGdiEngPaint'] = 5
  2809. syscallArgcTable['NtGdiEngPlgBlt'] = 11
  2810. syscallArgcTable['NtGdiEngStretchBlt'] = 11
  2811. syscallArgcTable['NtGdiEngStretchBltROP'] = 13
  2812. syscallArgcTable['NtGdiEngStrokeAndFillPath'] = 10
  2813. syscallArgcTable['NtGdiEngStrokePath'] = 8
  2814. syscallArgcTable['NtGdiEngTextOut'] = 10
  2815. syscallArgcTable['NtGdiEngTransparentBlt'] = 8
  2816. syscallArgcTable['NtGdiEngUnlockSurface'] = 1
  2817. syscallArgcTable['NtGdiEnsureDpiDepDefaultGuiFontForPlateau'] = 1
  2818. syscallArgcTable['NtGdiEnumFonts'] = 8
  2819. syscallArgcTable['NtGdiEnumObjects'] = 4
  2820. syscallArgcTable['NtGdiEudcLoadUnloadLink'] = 7
  2821. syscallArgcTable['NtGdiExtFloodFill'] = 5
  2822. syscallArgcTable['NtGdiFONTOBJ_cGetAllGlyphHandles'] = 2
  2823. syscallArgcTable['NtGdiFONTOBJ_cGetGlyphs'] = 5
  2824. syscallArgcTable['NtGdiFONTOBJ_pQueryGlyphAttrs'] = 2
  2825. syscallArgcTable['NtGdiFONTOBJ_pfdg'] = 1
  2826. syscallArgcTable['NtGdiFONTOBJ_pifi'] = 1
  2827. syscallArgcTable['NtGdiFONTOBJ_pvTrueTypeFontFile'] = 2
  2828. syscallArgcTable['NtGdiFONTOBJ_pxoGetXform'] = 1
  2829. syscallArgcTable['NtGdiFONTOBJ_vGetInfo'] = 3
  2830. syscallArgcTable['NtGdiFlattenPath'] = 1
  2831. syscallArgcTable['NtGdiFontIsLinked'] = 1
  2832. syscallArgcTable['NtGdiForceUFIMapping'] = 2
  2833. syscallArgcTable['NtGdiFrameRgn'] = 5
  2834. syscallArgcTable['NtGdiFullscreenControl'] = 5
  2835. syscallArgcTable['NtGdiGetAppliedDeviceGammaRamp'] = 2
  2836. syscallArgcTable['NtGdiGetBitmapDpiScaleValue'] = 1
  2837. syscallArgcTable['NtGdiGetBoundsRect'] = 3
  2838. syscallArgcTable['NtGdiGetCOPPCompatibleOPMInformation'] = 3
  2839. syscallArgcTable['NtGdiGetCertificate'] = 4
  2840. syscallArgcTable['NtGdiGetCertificateByHandle'] = 4
  2841. syscallArgcTable['NtGdiGetCertificateSize'] = 3
  2842. syscallArgcTable['NtGdiGetCertificateSizeByHandle'] = 3
  2843. syscallArgcTable['NtGdiGetCharABCWidthsW'] = 6
  2844. syscallArgcTable['NtGdiGetCharacterPlacementW'] = 6
  2845. syscallArgcTable['NtGdiGetColorAdjustment'] = 2
  2846. syscallArgcTable['NtGdiGetColorSpaceforBitmap'] = 1
  2847. syscallArgcTable['NtGdiGetCurrentDpiInfo'] = 2
  2848. syscallArgcTable['NtGdiGetDCDpiScaleValue'] = 1
  2849. syscallArgcTable['NtGdiGetDeviceCaps'] = 2
  2850. syscallArgcTable['NtGdiGetDeviceCapsAll'] = 2
  2851. syscallArgcTable['NtGdiGetDeviceGammaRamp'] = 2
  2852. syscallArgcTable['NtGdiGetDeviceWidth'] = 1
  2853. syscallArgcTable['NtGdiGetDhpdev'] = 1
  2854. syscallArgcTable['NtGdiGetETM'] = 2
  2855. syscallArgcTable['NtGdiGetEmbUFI'] = 7
  2856. syscallArgcTable['NtGdiGetEmbedFonts'] = 0
  2857. syscallArgcTable['NtGdiGetEntry'] = 2
  2858. syscallArgcTable['NtGdiGetEudcTimeStampEx'] = 3
  2859. syscallArgcTable['NtGdiGetFontFileData'] = 5
  2860. syscallArgcTable['NtGdiGetFontFileInfo'] = 5
  2861. syscallArgcTable['NtGdiGetFontResourceInfoInternalW'] = 7
  2862. syscallArgcTable['NtGdiGetFontUnicodeRanges'] = 2
  2863. syscallArgcTable['NtGdiGetGammaRampCapability'] = 1
  2864. syscallArgcTable['NtGdiGetGlyphIndicesW'] = 5
  2865. syscallArgcTable['NtGdiGetGlyphIndicesWInternal'] = 6
  2866. syscallArgcTable['NtGdiGetGlyphOutline'] = 8
  2867. syscallArgcTable['NtGdiGetKerningPairs'] = 3
  2868. syscallArgcTable['NtGdiGetLinkedUFIs'] = 3
  2869. syscallArgcTable['NtGdiGetMiterLimit'] = 2
  2870. syscallArgcTable['NtGdiGetMonitorID'] = 3
  2871. syscallArgcTable['NtGdiGetNumberOfPhysicalMonitors'] = 2
  2872. syscallArgcTable['NtGdiGetOPMInformation'] = 3
  2873. syscallArgcTable['NtGdiGetOPMRandomNumber'] = 2
  2874. syscallArgcTable['NtGdiGetObjectBitmapHandle'] = 2
  2875. syscallArgcTable['NtGdiGetPath'] = 4
  2876. syscallArgcTable['NtGdiGetPerBandInfo'] = 2
  2877. syscallArgcTable['NtGdiGetPhysicalMonitorDescription'] = 3
  2878. syscallArgcTable['NtGdiGetPhysicalMonitors'] = 4
  2879. syscallArgcTable['NtGdiGetProcessSessionFonts'] = 5
  2880. syscallArgcTable['NtGdiGetPublicFontTableChangeCookie'] = 0
  2881. syscallArgcTable['NtGdiGetRealizationInfo'] = 2
  2882. syscallArgcTable['NtGdiGetServerMetaFileBits'] = 7
  2883. syscallArgcTable['NtGdiGetSpoolMessage'] = 4
  2884. syscallArgcTable['NtGdiGetStats'] = 5
  2885. syscallArgcTable['NtGdiGetStringBitmapW'] = 5
  2886. syscallArgcTable['NtGdiGetSuggestedOPMProtectedOutputArraySize'] = 2
  2887. syscallArgcTable['NtGdiGetTextExtentExW'] = 8
  2888. syscallArgcTable['NtGdiGetUFI'] = 6
  2889. syscallArgcTable['NtGdiGetUFIPathname'] = 10
  2890. syscallArgcTable['NtGdiGradientFill'] = 6
  2891. syscallArgcTable['NtGdiHLSurfGetInformation'] = 4
  2892. syscallArgcTable['NtGdiHLSurfSetInformation'] = 4
  2893. syscallArgcTable['NtGdiHT_Get8BPPFormatPalette'] = 4
  2894. syscallArgcTable['NtGdiHT_Get8BPPMaskPalette'] = 6
  2895. syscallArgcTable['NtGdiIcmBrushInfo'] = 8
  2896. syscallArgcTable['NtGdiInit'] = 0
  2897. syscallArgcTable['NtGdiInitSpool'] = 0
  2898. syscallArgcTable['NtGdiMakeFontDir'] = 5
  2899. syscallArgcTable['NtGdiMakeInfoDC'] = 2
  2900. syscallArgcTable['NtGdiMakeObjectUnXferable'] = 1
  2901. syscallArgcTable['NtGdiMakeObjectXferable'] = 2
  2902. syscallArgcTable['NtGdiMirrorWindowOrg'] = 1
  2903. syscallArgcTable['NtGdiMonoBitmap'] = 1
  2904. syscallArgcTable['NtGdiMoveTo'] = 4
  2905. syscallArgcTable['NtGdiOffsetClipRgn'] = 3
  2906. syscallArgcTable['NtGdiPATHOBJ_bEnum'] = 2
  2907. syscallArgcTable['NtGdiPATHOBJ_bEnumClipLines'] = 3
  2908. syscallArgcTable['NtGdiPATHOBJ_vEnumStart'] = 1
  2909. syscallArgcTable['NtGdiPATHOBJ_vEnumStartClipLines'] = 4
  2910. syscallArgcTable['NtGdiPATHOBJ_vGetBounds'] = 2
  2911. syscallArgcTable['NtGdiPathToRegion'] = 1
  2912. syscallArgcTable['NtGdiPlgBlt'] = 11
  2913. syscallArgcTable['NtGdiPolyDraw'] = 4
  2914. syscallArgcTable['NtGdiPolyTextOutW'] = 4
  2915. syscallArgcTable['NtGdiPtInRegion'] = 3
  2916. syscallArgcTable['NtGdiPtVisible'] = 3
  2917. syscallArgcTable['NtGdiQueryFonts'] = 3
  2918. syscallArgcTable['NtGdiRemoveFontResourceW'] = 6
  2919. syscallArgcTable['NtGdiRemoveMergeFont'] = 2
  2920. syscallArgcTable['NtGdiResetDC'] = 5
  2921. syscallArgcTable['NtGdiResizePalette'] = 2
  2922. syscallArgcTable['NtGdiRoundRect'] = 7
  2923. syscallArgcTable['NtGdiSTROBJ_bEnum'] = 3
  2924. syscallArgcTable['NtGdiSTROBJ_bEnumPositionsOnly'] = 3
  2925. syscallArgcTable['NtGdiSTROBJ_bGetAdvanceWidths'] = 4
  2926. syscallArgcTable['NtGdiSTROBJ_dwGetCodePage'] = 1
  2927. syscallArgcTable['NtGdiSTROBJ_vEnumStart'] = 1
  2928. syscallArgcTable['NtGdiScaleRgn'] = 2
  2929. syscallArgcTable['NtGdiScaleValues'] = 3
  2930. syscallArgcTable['NtGdiScaleViewportExtEx'] = 6
  2931. syscallArgcTable['NtGdiScaleWindowExtEx'] = 6
  2932. syscallArgcTable['NtGdiSelectBrush'] = 2
  2933. syscallArgcTable['NtGdiSelectClipPath'] = 2
  2934. syscallArgcTable['NtGdiSelectPen'] = 2
  2935. syscallArgcTable['NtGdiSetBitmapAttributes'] = 2
  2936. syscallArgcTable['NtGdiSetBrushAttributes'] = 2
  2937. syscallArgcTable['NtGdiSetColorAdjustment'] = 2
  2938. syscallArgcTable['NtGdiSetColorSpace'] = 2
  2939. syscallArgcTable['NtGdiSetDeviceGammaRamp'] = 2
  2940. syscallArgcTable['NtGdiSetFontXform'] = 3
  2941. syscallArgcTable['NtGdiSetIcmMode'] = 3
  2942. syscallArgcTable['NtGdiSetLinkedUFIs'] = 3
  2943. syscallArgcTable['NtGdiSetMagicColors'] = 3
  2944. syscallArgcTable['NtGdiSetOPMSigningKeyAndSequenceNumbers'] = 2
  2945. syscallArgcTable['NtGdiSetPUMPDOBJ'] = 4
  2946. syscallArgcTable['NtGdiSetPixelFormat'] = 2
  2947. syscallArgcTable['NtGdiSetPrivateDeviceGammaRamp'] = 3
  2948. syscallArgcTable['NtGdiSetRectRgn'] = 5
  2949. syscallArgcTable['NtGdiSetSizeDevice'] = 3
  2950. syscallArgcTable['NtGdiSetSystemPaletteUse'] = 2
  2951. syscallArgcTable['NtGdiSetTextJustification'] = 3
  2952. syscallArgcTable['NtGdiSetUMPDSandboxState'] = 1
  2953. syscallArgcTable['NtGdiStartDoc'] = 4
  2954. syscallArgcTable['NtGdiStartPage'] = 1
  2955. syscallArgcTable['NtGdiStrokeAndFillPath'] = 1
  2956. syscallArgcTable['NtGdiStrokePath'] = 1
  2957. syscallArgcTable['NtGdiSwapBuffers'] = 1
  2958. syscallArgcTable['NtGdiTransparentBlt'] = 11
  2959. syscallArgcTable['NtGdiUMPDEngFreeUserMem'] = 1
  2960. syscallArgcTable['NtGdiUnloadPrinterDriver'] = 2
  2961. syscallArgcTable['NtGdiUnmapMemFont'] = 1
  2962. syscallArgcTable['NtGdiUpdateColors'] = 1
  2963. syscallArgcTable['NtGdiUpdateTransform'] = 1
  2964. syscallArgcTable['NtGdiWidenPath'] = 1
  2965. syscallArgcTable['NtGdiXFORMOBJ_bApplyXform'] = 5
  2966. syscallArgcTable['NtGdiXFORMOBJ_iGetXform'] = 2
  2967. syscallArgcTable['NtGdiXLATEOBJ_cGetPalette'] = 4
  2968. syscallArgcTable['NtGdiXLATEOBJ_hGetColorTransform'] = 1
  2969. syscallArgcTable['NtGdiXLATEOBJ_iXlate'] = 2
  2970. syscallArgcTable['NtHWCursorUpdatePointer'] = 2
  2971. syscallArgcTable['NtIsOneCoreTransformMode'] = 0
  2972. syscallArgcTable['NtMITActivateInputProcessing'] = 2
  2973. syscallArgcTable['NtMITBindInputTypeToMonitors'] = 3
  2974. syscallArgcTable['NtMITCoreMsgKGetConnectionHandle'] = 2
  2975. syscallArgcTable['NtMITCoreMsgKOpenConnectionTo'] = 2
  2976. syscallArgcTable['NtMITCoreMsgKSend'] = 3
  2977. syscallArgcTable['NtMITDeactivateInputProcessing'] = 0
  2978. syscallArgcTable['NtMITDisableMouseIntercept'] = 0
  2979. syscallArgcTable['NtMITDispatchCompletion'] = 2
  2980. syscallArgcTable['NtMITEnableMouseIntercept'] = 1
  2981. syscallArgcTable['NtMITGetCursorUpdateHandle'] = 0
  2982. syscallArgcTable['NtMITSetInputCallbacks'] = 1
  2983. syscallArgcTable['NtMITSetInputDelegationMode'] = 2
  2984. syscallArgcTable['NtMITSetLastInputRecipient'] = 1
  2985. syscallArgcTable['NtMITSynthesizeMouseInput'] = 3
  2986. syscallArgcTable['NtMITSynthesizeMouseWheel'] = 2
  2987. syscallArgcTable['NtMITSynthesizeTouchInput'] = 1
  2988. syscallArgcTable['NtMITUpdateInputGlobals'] = 5
  2989. syscallArgcTable['NtMITWaitForMultipleObjectsEx'] = 3
  2990. syscallArgcTable['NtMapVisualRelativePoints'] = 7
  2991. syscallArgcTable['NtNotifyPresentToCompositionSurface'] = 2
  2992. syscallArgcTable['NtOpenCompositionSurfaceDirtyRegion'] = 4
  2993. syscallArgcTable['NtOpenCompositionSurfaceSectionInfo'] = 4
  2994. syscallArgcTable['NtOpenCompositionSurfaceSwapChainHandleInfo'] = 3
  2995. syscallArgcTable['NtQueryCompositionInputIsImplicit'] = 2
  2996. syscallArgcTable['NtQueryCompositionInputQueueAndTransform'] = 4
  2997. syscallArgcTable['NtQueryCompositionInputSink'] = 2
  2998. syscallArgcTable['NtQueryCompositionInputSinkLuid'] = 2
  2999. syscallArgcTable['NtQueryCompositionInputSinkViewId'] = 2
  3000. syscallArgcTable['NtQueryCompositionSurfaceBinding'] = 3
  3001. syscallArgcTable['NtQueryCompositionSurfaceHDRMetaData'] = 5
  3002. syscallArgcTable['NtQueryCompositionSurfaceRenderingRealization'] = 2
  3003. syscallArgcTable['NtQueryCompositionSurfaceStatistics'] = 2
  3004. syscallArgcTable['NtRIMAddInputObserver'] = 8
  3005. syscallArgcTable['NtRIMAreSiblingDevices'] = 3
  3006. syscallArgcTable['NtRIMDeviceIoControl'] = 9
  3007. syscallArgcTable['NtRIMEnableMonitorMappingForDevice'] = 3
  3008. syscallArgcTable['NtRIMFreeInputBuffer'] = 2
  3009. syscallArgcTable['NtRIMGetDevicePreparsedData'] = 4
  3010. syscallArgcTable['NtRIMGetDevicePreparsedDataLockfree'] = 3
  3011. syscallArgcTable['NtRIMGetDeviceProperties'] = 3
  3012. syscallArgcTable['NtRIMGetDevicePropertiesLockfree'] = 2
  3013. syscallArgcTable['NtRIMGetPhysicalDeviceRect'] = 3
  3014. syscallArgcTable['NtRIMGetSourceProcessId'] = 3
  3015. syscallArgcTable['NtRIMObserveNextInput'] = 1
  3016. syscallArgcTable['NtRIMOnPnpNotification'] = 1
  3017. syscallArgcTable['NtRIMOnTimerNotification'] = 2
  3018. syscallArgcTable['NtRIMReadInput'] = 7
  3019. syscallArgcTable['NtRIMRegisterForInput'] = 10
  3020. syscallArgcTable['NtRIMRemoveInputObserver'] = 1
  3021. syscallArgcTable['NtRIMSetTestModeStatus'] = 1
  3022. syscallArgcTable['NtRIMUnregisterForInput'] = 1
  3023. syscallArgcTable['NtRIMUpdateInputObserverRegistration'] = 4
  3024. syscallArgcTable['NtSetCompositionSurfaceAnalogExclusive'] = 2
  3025. syscallArgcTable['NtSetCompositionSurfaceBufferUsage'] = 4
  3026. syscallArgcTable['NtSetCompositionSurfaceDirectFlipState'] = 3
  3027. syscallArgcTable['NtSetCompositionSurfaceIndependentFlipInfo'] = 8
  3028. syscallArgcTable['NtSetCompositionSurfaceStatistics'] = 3
  3029. syscallArgcTable['NtTokenManagerConfirmOutstandingAnalogToken'] = 0
  3030. syscallArgcTable['NtTokenManagerCreateCompositionTokenHandle'] = 5
  3031. syscallArgcTable['NtTokenManagerCreateFlipObjectReturnTokenHandle'] = 3
  3032. syscallArgcTable['NtTokenManagerCreateFlipObjectTokenHandle'] = 6
  3033. syscallArgcTable['NtTokenManagerGetAnalogExclusiveSurfaceUpdates'] = 5
  3034. syscallArgcTable['NtTokenManagerGetAnalogExclusiveTokenEvent'] = 1
  3035. syscallArgcTable['NtTokenManagerOpenSectionAndEvents'] = 4
  3036. syscallArgcTable['NtTokenManagerThread'] = 1
  3037. syscallArgcTable['NtUnBindCompositionSurface'] = 2
  3038. syscallArgcTable['NtUpdateInputSinkTransforms'] = 2
  3039. syscallArgcTable['NtUserAcquireIAMKey'] = 1
  3040. syscallArgcTable['NtUserAcquireInteractiveControlBackgroundAccess'] = 3
  3041. syscallArgcTable['NtUserAddClipboardFormatListener'] = 1
  3042. syscallArgcTable['NtUserAssociateInputContext'] = 3
  3043. syscallArgcTable['NtUserAutoPromoteMouseInPointer'] = 1
  3044. syscallArgcTable['NtUserAutoRotateScreen'] = 1
  3045. syscallArgcTable['NtUserBeginLayoutUpdate'] = 1
  3046. syscallArgcTable['NtUserBlockInput'] = 1
  3047. syscallArgcTable['NtUserBroadcastThemeChangeEvent'] = 2
  3048. syscallArgcTable['NtUserBuildHimcList'] = 4
  3049. syscallArgcTable['NtUserBuildPropList'] = 4
  3050. syscallArgcTable['NtUserCalculatePopupWindowPosition'] = 5
  3051. syscallArgcTable['NtUserCallHwndOpt'] = 2
  3052. syscallArgcTable['NtUserCanBrokerForceForeground'] = 1
  3053. syscallArgcTable['NtUserChangeDisplaySettings'] = 4
  3054. syscallArgcTable['NtUserChangeWindowMessageFilterEx'] = 4
  3055. syscallArgcTable['NtUserCheckAccessForIntegrityLevel'] = 3
  3056. syscallArgcTable['NtUserCheckProcessForClipboardAccess'] = 2
  3057. syscallArgcTable['NtUserCheckProcessSession'] = 1
  3058. syscallArgcTable['NtUserCheckWindowThreadDesktop'] = 2
  3059. syscallArgcTable['NtUserChildWindowFromPointEx'] = 4
  3060. syscallArgcTable['NtUserClearForeground'] = 0
  3061. syscallArgcTable['NtUserClipCursor'] = 1
  3062. syscallArgcTable['NtUserCompositionInputSinkLuidFromPoint'] = 5
  3063. syscallArgcTable['NtUserCompositionInputSinkViewInstanceIdFromPoint'] = 2
  3064. syscallArgcTable['NtUserConfirmResizeCommit'] = 1
  3065. syscallArgcTable['NtUserCreateDCompositionHwndTarget'] = 3
  3066. syscallArgcTable['NtUserCreateDesktopEx'] = 6
  3067. syscallArgcTable['NtUserCreateEmptyCursorObject'] = 1
  3068. syscallArgcTable['NtUserCreateInputContext'] = 1
  3069. syscallArgcTable['NtUserCreatePalmRejectionDelayZone'] = 2
  3070. syscallArgcTable['NtUserCreateWindowGroup'] = 1
  3071. syscallArgcTable['NtUserCreateWindowStation'] = 8
  3072. syscallArgcTable['NtUserCtxDisplayIOCtl'] = 3
  3073. syscallArgcTable['NtUserDeferWindowPosAndBand'] = 10
  3074. syscallArgcTable['NtUserDelegateCapturePointers'] = 3
  3075. syscallArgcTable['NtUserDelegateInput'] = 6
  3076. syscallArgcTable['NtUserDeleteWindowGroup'] = 1
  3077. syscallArgcTable['NtUserDestroyDCompositionHwndTarget'] = 2
  3078. syscallArgcTable['NtUserDestroyInputContext'] = 1
  3079. syscallArgcTable['NtUserDestroyPalmRejectionDelayZone'] = 1
  3080. syscallArgcTable['NtUserDisableImmersiveOwner'] = 1
  3081. syscallArgcTable['NtUserDisableProcessWindowFiltering'] = 0
  3082. syscallArgcTable['NtUserDisableThreadIme'] = 1
  3083. syscallArgcTable['NtUserDiscardPointerFrameMessages'] = 1
  3084. syscallArgcTable['NtUserDisplayConfigGetDeviceInfo'] = 1
  3085. syscallArgcTable['NtUserDisplayConfigSetDeviceInfo'] = 1
  3086. syscallArgcTable['NtUserDoSoundConnect'] = 0
  3087. syscallArgcTable['NtUserDoSoundDisconnect'] = 0
  3088. syscallArgcTable['NtUserDragDetect'] = 3
  3089. syscallArgcTable['NtUserDragObject'] = 5
  3090. syscallArgcTable['NtUserDrawAnimatedRects'] = 4
  3091. syscallArgcTable['NtUserDrawCaption'] = 4
  3092. syscallArgcTable['NtUserDrawCaptionTemp'] = 7
  3093. syscallArgcTable['NtUserDrawMenuBarTemp'] = 5
  3094. syscallArgcTable['NtUserDwmGetRemoteSessionOcclusionEvent'] = 0
  3095. syscallArgcTable['NtUserDwmGetRemoteSessionOcclusionState'] = 0
  3096. syscallArgcTable['NtUserDwmKernelShutdown'] = 0
  3097. syscallArgcTable['NtUserDwmKernelStartup'] = 0
  3098. syscallArgcTable['NtUserDwmValidateWindow'] = 2
  3099. syscallArgcTable['NtUserEnableChildWindowDpiMessage'] = 2
  3100. syscallArgcTable['NtUserEnableIAMAccess'] = 3
  3101. syscallArgcTable['NtUserEnableMouseInPointer'] = 1
  3102. syscallArgcTable['NtUserEnableMouseInputForCursorSuppression'] = 1
  3103. syscallArgcTable['NtUserEnableNonClientDpiScaling'] = 1
  3104. syscallArgcTable['NtUserEnableResizeLayoutSynchronization'] = 2
  3105. syscallArgcTable['NtUserEnableSoftwareCursorForScreenCapture'] = 1
  3106. syscallArgcTable['NtUserEnableTouchPad'] = 1
  3107. syscallArgcTable['NtUserEnableWindowGDIScaledDpiMessage'] = 2
  3108. syscallArgcTable['NtUserEnableWindowGroupPolicy'] = 3
  3109. syscallArgcTable['NtUserEnableWindowResizeOptimization'] = 3
  3110. syscallArgcTable['NtUserEndMenu'] = 0
  3111. syscallArgcTable['NtUserEvent'] = 1
  3112. syscallArgcTable['NtUserFlashWindowEx'] = 1
  3113. syscallArgcTable['NtUserFrostCrashedWindow'] = 2
  3114. syscallArgcTable['NtUserFunctionalizeDisplayConfig'] = 6
  3115. syscallArgcTable['NtUserGetActiveProcessesDpis'] = 0
  3116. syscallArgcTable['NtUserGetAppImeLevel'] = 1
  3117. syscallArgcTable['NtUserGetAutoRotationState'] = 1
  3118. syscallArgcTable['NtUserGetCIMSSM'] = 1
  3119. syscallArgcTable['NtUserGetCaretPos'] = 1
  3120. syscallArgcTable['NtUserGetClipCursor'] = 1
  3121. syscallArgcTable['NtUserGetClipboardAccessToken'] = 2
  3122. syscallArgcTable['NtUserGetClipboardViewer'] = 0
  3123. syscallArgcTable['NtUserGetComboBoxInfo'] = 2
  3124. syscallArgcTable['NtUserGetCurrentInputMessageSource'] = 1
  3125. syscallArgcTable['NtUserGetCursor'] = 0
  3126. syscallArgcTable['NtUserGetCursorDims'] = 1
  3127. syscallArgcTable['NtUserGetCursorInfo'] = 1
  3128. syscallArgcTable['NtUserGetDManipHookInitFunction'] = 2
  3129. syscallArgcTable['NtUserGetDesktopID'] = 2
  3130. syscallArgcTable['NtUserGetDisplayAutoRotationPreferences'] = 1
  3131. syscallArgcTable['NtUserGetDisplayAutoRotationPreferencesByProcessId'] = 3
  3132. syscallArgcTable['NtUserGetDisplayConfigBufferSizes'] = 2
  3133. syscallArgcTable['NtUserGetDpiForCurrentProcess'] = 0
  3134. syscallArgcTable['NtUserGetDpiForMonitor'] = 4
  3135. syscallArgcTable['NtUserGetGestureConfig'] = 6
  3136. syscallArgcTable['NtUserGetGestureExtArgs'] = 3
  3137. syscallArgcTable['NtUserGetGestureInfo'] = 2
  3138. syscallArgcTable['NtUserGetGuiResources'] = 2
  3139. syscallArgcTable['NtUserGetHDevName'] = 2
  3140. syscallArgcTable['NtUserGetHimetricScaleFactorFromPixelLocation'] = 5
  3141. syscallArgcTable['NtUserGetImeHotKey'] = 4
  3142. syscallArgcTable['NtUserGetImeInfoEx'] = 2
  3143. syscallArgcTable['NtUserGetInputLocaleInfo'] = 2
  3144. syscallArgcTable['NtUserGetInteractiveControlDeviceInfo'] = 2
  3145. syscallArgcTable['NtUserGetInteractiveControlInfo'] = 2
  3146. syscallArgcTable['NtUserGetInteractiveCtrlSupportedWaveforms'] = 3
  3147. syscallArgcTable['NtUserGetInternalWindowPos'] = 3
  3148. syscallArgcTable['NtUserGetKeyNameText'] = 3
  3149. syscallArgcTable['NtUserGetKeyboardLayoutName'] = 1
  3150. syscallArgcTable['NtUserGetLayeredWindowAttributes'] = 4
  3151. syscallArgcTable['NtUserGetListBoxInfo'] = 1
  3152. syscallArgcTable['NtUserGetMenuIndex'] = 2
  3153. syscallArgcTable['NtUserGetMenuItemRect'] = 4
  3154. syscallArgcTable['NtUserGetMonitorBrightness'] = 4
  3155. syscallArgcTable['NtUserGetMouseMovePointsEx'] = 5
  3156. syscallArgcTable['NtUserGetOemBitmapSize'] = 2
  3157. syscallArgcTable['NtUserGetPhysicalDeviceRect'] = 2
  3158. syscallArgcTable['NtUserGetPointerCursorId'] = 2
  3159. syscallArgcTable['NtUserGetPointerDevice'] = 2
  3160. syscallArgcTable['NtUserGetPointerDeviceCursors'] = 3
  3161. syscallArgcTable['NtUserGetPointerDeviceProperties'] = 3
  3162. syscallArgcTable['NtUserGetPointerDeviceRects'] = 3
  3163. syscallArgcTable['NtUserGetPointerDevices'] = 2
  3164. syscallArgcTable['NtUserGetPointerFrameArrivalTimes'] = 3
  3165. syscallArgcTable['NtUserGetPointerInfoList'] = 8
  3166. syscallArgcTable['NtUserGetPointerInputTransform'] = 3
  3167. syscallArgcTable['NtUserGetPointerType'] = 2
  3168. syscallArgcTable['NtUserGetPrecisionTouchPadConfiguration'] = 1
  3169. syscallArgcTable['NtUserGetPriorityClipboardFormat'] = 2
  3170. syscallArgcTable['NtUserGetProcessDpiAwarenessContext'] = 1
  3171. syscallArgcTable['NtUserGetProcessUIContextInformation'] = 2
  3172. syscallArgcTable['NtUserGetQueueStatusReadonly'] = 1
  3173. syscallArgcTable['NtUserGetRawInputBuffer'] = 3
  3174. syscallArgcTable['NtUserGetRawInputData'] = 5
  3175. syscallArgcTable['NtUserGetRawInputDeviceInfo'] = 4
  3176. syscallArgcTable['NtUserGetRawInputDeviceList'] = 3
  3177. syscallArgcTable['NtUserGetRawPointerDeviceData'] = 5
  3178. syscallArgcTable['NtUserGetRegisteredRawInputDevices'] = 3
  3179. syscallArgcTable['NtUserGetResizeDCompositionSynchronizationObject'] = 2
  3180. syscallArgcTable['NtUserGetSystemDpiForProcess'] = 1
  3181. syscallArgcTable['NtUserGetTopLevelWindow'] = 1
  3182. syscallArgcTable['NtUserGetTouchInputInfo'] = 4
  3183. syscallArgcTable['NtUserGetTouchValidationStatus'] = 1
  3184. syscallArgcTable['NtUserGetUpdatedClipboardFormats'] = 3
  3185. syscallArgcTable['NtUserGetWOWClass'] = 2
  3186. syscallArgcTable['NtUserGetWindowBand'] = 2
  3187. syscallArgcTable['NtUserGetWindowCompositionAttribute'] = 2
  3188. syscallArgcTable['NtUserGetWindowCompositionInfo'] = 2
  3189. syscallArgcTable['NtUserGetWindowDisplayAffinity'] = 2
  3190. syscallArgcTable['NtUserGetWindowFeedbackSetting'] = 5
  3191. syscallArgcTable['NtUserGetWindowGroupId'] = 2
  3192. syscallArgcTable['NtUserGetWindowMinimizeRect'] = 2
  3193. syscallArgcTable['NtUserGetWindowProcessHandle'] = 2
  3194. syscallArgcTable['NtUserGetWindowRgnEx'] = 3
  3195. syscallArgcTable['NtUserGhostWindowFromHungWindow'] = 1
  3196. syscallArgcTable['NtUserHandleDelegatedInput'] = 2
  3197. syscallArgcTable['NtUserHardErrorControl'] = 3
  3198. syscallArgcTable['NtUserHidePointerContactVisualization'] = 1
  3199. syscallArgcTable['NtUserHiliteMenuItem'] = 4
  3200. syscallArgcTable['NtUserHungWindowFromGhostWindow'] = 1
  3201. syscallArgcTable['NtUserHwndQueryRedirectionInfo'] = 4
  3202. syscallArgcTable['NtUserHwndSetRedirectionInfo'] = 4
  3203. syscallArgcTable['NtUserImpersonateDdeClientWindow'] = 2
  3204. syscallArgcTable['NtUserInheritWindowMonitor'] = 2
  3205. syscallArgcTable['NtUserInitTask'] = 12
  3206. syscallArgcTable['NtUserInitialize'] = 2
  3207. syscallArgcTable['NtUserInitializeClientPfnArrays'] = 4
  3208. syscallArgcTable['NtUserInitializeGenericHidInjection'] = 2
  3209. syscallArgcTable['NtUserInitializeInputDeviceInjection'] = 7
  3210. syscallArgcTable['NtUserInitializePointerDeviceInjection'] = 5
  3211. syscallArgcTable['NtUserInitializePointerDeviceInjectionEx'] = 6
  3212. syscallArgcTable['NtUserInitializeTouchInjection'] = 2
  3213. syscallArgcTable['NtUserInjectDeviceInput'] = 3
  3214. syscallArgcTable['NtUserInjectGenericHidInput'] = 3
  3215. syscallArgcTable['NtUserInjectGesture'] = 5
  3216. syscallArgcTable['NtUserInjectKeyboardInput'] = 2
  3217. syscallArgcTable['NtUserInjectMouseInput'] = 2
  3218. syscallArgcTable['NtUserInjectPointerInput'] = 3
  3219. syscallArgcTable['NtUserInjectTouchInput'] = 2
  3220. syscallArgcTable['NtUserInteractiveControlQueryUsage'] = 5
  3221. syscallArgcTable['NtUserInternalGetWindowIcon'] = 2
  3222. syscallArgcTable['NtUserIsChildWindowDpiMessageEnabled'] = 1
  3223. syscallArgcTable['NtUserIsMouseInPointerEnabled'] = 0
  3224. syscallArgcTable['NtUserIsMouseInputEnabled'] = 0
  3225. syscallArgcTable['NtUserIsNonClientDpiScalingEnabled'] = 1
  3226. syscallArgcTable['NtUserIsResizeLayoutSynchronizationEnabled'] = 1
  3227. syscallArgcTable['NtUserIsTopLevelWindow'] = 1
  3228. syscallArgcTable['NtUserIsTouchWindow'] = 2
  3229. syscallArgcTable['NtUserIsWindowBroadcastingDpiToChildren'] = 1
  3230. syscallArgcTable['NtUserIsWindowGDIScaledDpiMessageEnabled'] = 1
  3231. syscallArgcTable['NtUserLayoutCompleted'] = 1
  3232. syscallArgcTable['NtUserLinkDpiCursor'] = 3
  3233. syscallArgcTable['NtUserLoadKeyboardLayoutEx'] = 8
  3234. syscallArgcTable['NtUserLockCursor'] = 1
  3235. syscallArgcTable['NtUserLockWindowStation'] = 1
  3236. syscallArgcTable['NtUserLockWorkStation'] = 0
  3237. syscallArgcTable['NtUserLogicalToPerMonitorDPIPhysicalPoint'] = 2
  3238. syscallArgcTable['NtUserLogicalToPhysicalDpiPointForWindow'] = 2
  3239. syscallArgcTable['NtUserLogicalToPhysicalPoint'] = 2
  3240. syscallArgcTable['NtUserMNDragLeave'] = 0
  3241. syscallArgcTable['NtUserMNDragOver'] = 2
  3242. syscallArgcTable['NtUserMagControl'] = 2
  3243. syscallArgcTable['NtUserMagGetContextInformation'] = 4
  3244. syscallArgcTable['NtUserMagSetContextInformation'] = 4
  3245. syscallArgcTable['NtUserMenuItemFromPoint'] = 4
  3246. syscallArgcTable['NtUserMinMaximize'] = 3
  3247. syscallArgcTable['NtUserModifyWindowTouchCapability'] = 3
  3248. syscallArgcTable['NtUserMsgWaitForMultipleObjectsEx'] = 5
  3249. syscallArgcTable['NtUserNavigateFocus'] = 2
  3250. syscallArgcTable['NtUserNotifyIMEStatus'] = 3
  3251. syscallArgcTable['NtUserOpenInputDesktop'] = 3
  3252. syscallArgcTable['NtUserOpenThreadDesktop'] = 4
  3253. syscallArgcTable['NtUserPaintMonitor'] = 3
  3254. syscallArgcTable['NtUserPerMonitorDPIPhysicalToLogicalPoint'] = 2
  3255. syscallArgcTable['NtUserPhysicalToLogicalDpiPointForWindow'] = 2
  3256. syscallArgcTable['NtUserPhysicalToLogicalPoint'] = 2
  3257. syscallArgcTable['NtUserPrintWindow'] = 3
  3258. syscallArgcTable['NtUserProcessInkFeedbackCommand'] = 3
  3259. syscallArgcTable['NtUserPromoteMouseInPointer'] = 1
  3260. syscallArgcTable['NtUserPromotePointer'] = 2
  3261. syscallArgcTable['NtUserQueryBSDRWindow'] = 0
  3262. syscallArgcTable['NtUserQueryDisplayConfig'] = 5
  3263. syscallArgcTable['NtUserQueryInformationThread'] = 4
  3264. syscallArgcTable['NtUserQueryInputContext'] = 2
  3265. syscallArgcTable['NtUserQuerySendMessage'] = 1
  3266. syscallArgcTable['NtUserRealChildWindowFromPoint'] = 3
  3267. syscallArgcTable['NtUserRealWaitMessageEx'] = 2
  3268. syscallArgcTable['NtUserRegisterBSDRWindow'] = 2
  3269. syscallArgcTable['NtUserRegisterDManipHook'] = 0
  3270. syscallArgcTable['NtUserRegisterEdgy'] = 3
  3271. syscallArgcTable['NtUserRegisterErrorReportingDialog'] = 2
  3272. syscallArgcTable['NtUserRegisterHotKey'] = 4
  3273. syscallArgcTable['NtUserRegisterManipulationThread'] = 1
  3274. syscallArgcTable['NtUserRegisterPointerDeviceNotifications'] = 2
  3275. syscallArgcTable['NtUserRegisterPointerInputTarget'] = 4
  3276. syscallArgcTable['NtUserRegisterRawInputDevices'] = 3
  3277. syscallArgcTable['NtUserRegisterServicesProcess'] = 1
  3278. syscallArgcTable['NtUserRegisterSessionPort'] = 1
  3279. syscallArgcTable['NtUserRegisterShellPTPListener'] = 2
  3280. syscallArgcTable['NtUserRegisterTasklist'] = 1
  3281. syscallArgcTable['NtUserRegisterTouchHitTestingWindow'] = 2
  3282. syscallArgcTable['NtUserRegisterTouchPadCapable'] = 1
  3283. syscallArgcTable['NtUserRegisterUserApiHook'] = 4
  3284. syscallArgcTable['NtUserReleaseDC'] = 1
  3285. syscallArgcTable['NtUserReleaseDwmHitTestWaiters'] = 0
  3286. syscallArgcTable['NtUserRemoteConnect'] = 3
  3287. syscallArgcTable['NtUserRemoteRedrawRectangle'] = 4
  3288. syscallArgcTable['NtUserRemoteRedrawScreen'] = 0
  3289. syscallArgcTable['NtUserRemoteStopScreenUpdates'] = 0
  3290. syscallArgcTable['NtUserRemoveClipboardFormatListener'] = 1
  3291. syscallArgcTable['NtUserRemoveInjectionDevice'] = 1
  3292. syscallArgcTable['NtUserReportInertia'] = 5
  3293. syscallArgcTable['NtUserRequestMoveSizeOperation'] = 3
  3294. syscallArgcTable['NtUserResolveDesktopForWOW'] = 1
  3295. syscallArgcTable['NtUserSendEventMessage'] = 4
  3296. syscallArgcTable['NtUserSendInteractiveControlHapticsReport'] = 3
  3297. syscallArgcTable['NtUserSetActivationFilter'] = 2
  3298. syscallArgcTable['NtUserSetActiveProcessForMonitor'] = 2
  3299. syscallArgcTable['NtUserSetAppImeLevel'] = 2
  3300. syscallArgcTable['NtUserSetAutoRotation'] = 1
  3301. syscallArgcTable['NtUserSetBridgeWindowChild'] = 2
  3302. syscallArgcTable['NtUserSetBrokeredForeground'] = 1
  3303. syscallArgcTable['NtUserSetCalibrationData'] = 4
  3304. syscallArgcTable['NtUserSetChildWindowNoActivate'] = 1
  3305. syscallArgcTable['NtUserSetClassWord'] = 3
  3306. syscallArgcTable['NtUserSetCoreWindow'] = 2
  3307. syscallArgcTable['NtUserSetCoreWindowPartner'] = 3
  3308. syscallArgcTable['NtUserSetCursorContents'] = 2
  3309. syscallArgcTable['NtUserSetCursorPos'] = 3
  3310. syscallArgcTable['NtUserSetDesktopColorTransform'] = 1
  3311. syscallArgcTable['NtUserSetDialogControlDpiChangeBehavior'] = 3
  3312. syscallArgcTable['NtUserSetDimUndimTransitionTime'] = 2
  3313. syscallArgcTable['NtUserSetDisplayAutoRotationPreferences'] = 1
  3314. syscallArgcTable['NtUserSetDisplayConfig'] = 5
  3315. syscallArgcTable['NtUserSetDisplayMapping'] = 2
  3316. syscallArgcTable['NtUserSetFallbackForeground'] = 2
  3317. syscallArgcTable['NtUserSetFeatureReportResponse'] = 3
  3318. syscallArgcTable['NtUserSetGestureConfig'] = 5
  3319. syscallArgcTable['NtUserSetImeHotKey'] = 5
  3320. syscallArgcTable['NtUserSetImeInfoEx'] = 1
  3321. syscallArgcTable['NtUserSetImeOwnerWindow'] = 2
  3322. syscallArgcTable['NtUserSetInteractiveControlFocus'] = 3
  3323. syscallArgcTable['NtUserSetInteractiveCtrlRotationAngle'] = 5
  3324. syscallArgcTable['NtUserSetInternalWindowPos'] = 4
  3325. syscallArgcTable['NtUserSetLayeredWindowAttributes'] = 4
  3326. syscallArgcTable['NtUserSetManipulationInputTarget'] = 4
  3327. syscallArgcTable['NtUserSetMenu'] = 3
  3328. syscallArgcTable['NtUserSetMenuContextHelpId'] = 2
  3329. syscallArgcTable['NtUserSetMenuFlagRtoL'] = 1
  3330. syscallArgcTable['NtUserSetMirrorRendering'] = 2
  3331. syscallArgcTable['NtUserSetMonitorBrightness'] = 6
  3332. syscallArgcTable['NtUserSetObjectInformation'] = 4
  3333. syscallArgcTable['NtUserSetPrecisionTouchPadConfiguration'] = 1
  3334. syscallArgcTable['NtUserSetProcessDpiAwarenessContext'] = 2
  3335. syscallArgcTable['NtUserSetProcessInteractionFlags'] = 3
  3336. syscallArgcTable['NtUserSetProcessRestrictionExemption'] = 1
  3337. syscallArgcTable['NtUserSetProcessUIAccessZorder'] = 0
  3338. syscallArgcTable['NtUserSetShellWindowEx'] = 2
  3339. syscallArgcTable['NtUserSetSysColors'] = 4
  3340. syscallArgcTable['NtUserSetSystemCursor'] = 2
  3341. syscallArgcTable['NtUserSetSystemTimer'] = 3
  3342. syscallArgcTable['NtUserSetTargetForResourceBrokering'] = 2
  3343. syscallArgcTable['NtUserSetThreadInputBlocked'] = 2
  3344. syscallArgcTable['NtUserSetThreadLayoutHandles'] = 2
  3345. syscallArgcTable['NtUserSetWindowArrangement'] = 4
  3346. syscallArgcTable['NtUserSetWindowBand'] = 3
  3347. syscallArgcTable['NtUserSetWindowCompositionAttribute'] = 2
  3348. syscallArgcTable['NtUserSetWindowCompositionTransition'] = 7
  3349. syscallArgcTable['NtUserSetWindowDisplayAffinity'] = 2
  3350. syscallArgcTable['NtUserSetWindowFeedbackSetting'] = 5
  3351. syscallArgcTable['NtUserSetWindowGroup'] = 4
  3352. syscallArgcTable['NtUserSetWindowRgnEx'] = 3
  3353. syscallArgcTable['NtUserSetWindowShowState'] = 4
  3354. syscallArgcTable['NtUserSetWindowStationUser'] = 4
  3355. syscallArgcTable['NtUserShowCursor'] = 1
  3356. syscallArgcTable['NtUserShowSystemCursor'] = 1
  3357. syscallArgcTable['NtUserShutdownBlockReasonCreate'] = 3
  3358. syscallArgcTable['NtUserShutdownBlockReasonQuery'] = 3
  3359. syscallArgcTable['NtUserShutdownReasonDestroy'] = 1
  3360. syscallArgcTable['NtUserSignalRedirectionStartComplete'] = 0
  3361. syscallArgcTable['NtUserSlicerControl'] = 4
  3362. syscallArgcTable['NtUserSoundSentry'] = 0
  3363. syscallArgcTable['NtUserStopAndEndInertia'] = 2
  3364. syscallArgcTable['NtUserSwitchDesktop'] = 3
  3365. syscallArgcTable['NtUserSystemParametersInfoForDpi'] = 5
  3366. syscallArgcTable['NtUserTestForInteractiveUser'] = 1
  3367. syscallArgcTable['NtUserTrackPopupMenuEx'] = 6
  3368. syscallArgcTable['NtUserTransformPoint'] = 3
  3369. syscallArgcTable['NtUserTransformRect'] = 3
  3370. syscallArgcTable['NtUserUndelegateInput'] = 2
  3371. syscallArgcTable['NtUserUnloadKeyboardLayout'] = 1
  3372. syscallArgcTable['NtUserUnlockWindowStation'] = 1
  3373. syscallArgcTable['NtUserUnregisterHotKey'] = 2
  3374. syscallArgcTable['NtUserUnregisterSessionPort'] = 0
  3375. syscallArgcTable['NtUserUnregisterUserApiHook'] = 0
  3376. syscallArgcTable['NtUserUpdateDefaultDesktopThumbnail'] = 5
  3377. syscallArgcTable['NtUserUpdateInputContext'] = 3
  3378. syscallArgcTable['NtUserUpdateInstance'] = 3
  3379. syscallArgcTable['NtUserUpdateLayeredWindow'] = 10
  3380. syscallArgcTable['NtUserUpdatePerUserSystemParameters'] = 1
  3381. syscallArgcTable['NtUserUpdateWindowInputSinkHints'] = 2
  3382. syscallArgcTable['NtUserUpdateWindowTrackingInfo'] = 3
  3383. syscallArgcTable['NtUserUserHandleGrantAccess'] = 3
  3384. syscallArgcTable['NtUserValidateHandleSecure'] = 1
  3385. syscallArgcTable['NtUserWOWCleanup'] = 2
  3386. syscallArgcTable['NtUserWaitAvailableMessageEx'] = 2
  3387. syscallArgcTable['NtUserWaitForInputIdle'] = 3
  3388. syscallArgcTable['NtUserWaitForMsgAndEvent'] = 1
  3389. syscallArgcTable['NtUserWaitForRedirectionStartComplete'] = 0
  3390. syscallArgcTable['NtUserWindowFromDC'] = 1
  3391. syscallArgcTable['NtUserWindowFromPhysicalPoint'] = 2
  3392. syscallArgcTable['NtValidateCompositionSurfaceHandle'] = 2
  3393. syscallArgcTable['NtVisualCaptureBits'] = 9
  3394. syscallArgcTable['NtUserSetClassLongPtr'] = 4
  3395. syscallArgcTable['NtUserSetWindowLongPtr'] = 4
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement